From b9ced94df149f88899fc77d53330b7f08f3d03e7 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 23 Jul 2026 00:25:05 +0000
Subject: [PATCH 001/146] mpv-shim-default-shaders: 2.1.0 -> 3.0.0

---
 pkgs/by-name/mp/mpv-shim-default-shaders/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/mp/mpv-shim-default-shaders/package.nix b/pkgs/by-name/mp/mpv-shim-default-shaders/package.nix
index f036332f6394..4c0065a80353 100644
--- a/pkgs/by-name/mp/mpv-shim-default-shaders/package.nix
+++ b/pkgs/by-name/mp/mpv-shim-default-shaders/package.nix
@@ -6,13 +6,13 @@
 
 stdenv.mkDerivation rec {
   pname = "mpv-shim-default-shaders";
-  version = "2.1.0";
+  version = "3.0.0";
 
   src = fetchFromGitHub {
     owner = "iwalton3";
     repo = "default-shader-pack";
     rev = "v${version}";
-    sha256 = "sha256-BM2GvmUoWQUUMH464YIIqu5A1t1B+otbJxAGFbySuq8=";
+    sha256 = "sha256-lHFidCHBduvNBy1HGgqLDqZMJeLv3jfVWQ73Hlev7w8=";
   };
 
   installPhase = ''

From 18aa4d51800322e05b9a264ddbc96af08451e41d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C4=B0lkecan=20Bozdo=C4=9Fan?= <ilkecan@protonmail.com>
Date: Fri, 24 Jul 2026 12:18:22 +0300
Subject: [PATCH 002/146] matrix-commander-rs: 1.0.1 -> 0.11.0

---
 pkgs/by-name/ma/matrix-commander-rs/package.nix | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ma/matrix-commander-rs/package.nix b/pkgs/by-name/ma/matrix-commander-rs/package.nix
index 69f29c697c08..2baf472b7a5c 100644
--- a/pkgs/by-name/ma/matrix-commander-rs/package.nix
+++ b/pkgs/by-name/ma/matrix-commander-rs/package.nix
@@ -5,20 +5,21 @@
   pkg-config,
   rustPlatform,
   perl,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "matrix-commander-rs";
-  version = "1.0.1";
+  version = "0.11.0";
 
   src = fetchFromGitHub {
     owner = "8go";
     repo = "matrix-commander-rs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-SyAKKSPGO8yjP3Pgsr2sPW5cpNyNLiYTy7CDDAXdztw=";
+    hash = "sha256-eWD1nj+xRWNkyC3lM/hIZACI2i1Awl9NTgslR8rJZSc=";
   };
 
-  cargoHash = "sha256-X1xBhJ0B4FcC66qKtYZbcX2+92hy2R4fM/GYBI8AFTY=";
+  cargoHash = "sha256-OWuKwaJfwOAtwtN0so/afWeHq2oslAT2YahnJC0QB6w=";
 
   nativeBuildInputs = [
     pkg-config
@@ -27,10 +28,17 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   buildInputs = [ openssl ];
 
+  passthru.updateScript = nix-update-script {
+    extraArgs = [
+      "--version-regex"
+      "^v(0.*)$" # https://github.com/8go/matrix-commander-rs/issues/194#issuecomment-4864773450
+    ];
+  };
+
   meta = {
     description = "CLI-based Matrix client app for sending and receiving";
     homepage = "https://github.com/8go/matrix-commander-rs";
-    changelog = "https://github.com/8go/matrix-commander-rs/releases/tag/v${finalAttrs.version}";
+    changelog = "https://github.com/8go/matrix-commander-rs/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [ fab ];
     mainProgram = "matrix-commander-rs";

From e8357800092fcee0f998a79bc1c9a168a1ed2ec4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C4=B0lkecan=20Bozdo=C4=9Fan?= <ilkecan@protonmail.com>
Date: Fri, 24 Jul 2026 12:18:54 +0300
Subject: [PATCH 003/146] matrix-commander-rs: enable __structuredAttrs

---
 pkgs/by-name/ma/matrix-commander-rs/package.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/by-name/ma/matrix-commander-rs/package.nix b/pkgs/by-name/ma/matrix-commander-rs/package.nix
index 2baf472b7a5c..610ce19e8aa2 100644
--- a/pkgs/by-name/ma/matrix-commander-rs/package.nix
+++ b/pkgs/by-name/ma/matrix-commander-rs/package.nix
@@ -21,6 +21,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   cargoHash = "sha256-OWuKwaJfwOAtwtN0so/afWeHq2oslAT2YahnJC0QB6w=";
 
+  __structuredAttrs = true;
+
   nativeBuildInputs = [
     pkg-config
     perl

From 6aa37803296bdbb8fb5690a6be3ada6f49b272dd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C4=B0lkecan=20Bozdo=C4=9Fan?= <ilkecan@protonmail.com>
Date: Fri, 24 Jul 2026 12:20:00 +0300
Subject: [PATCH 004/146] matrix-commander-rs: add ilkecan to maintainers

---
 pkgs/by-name/ma/matrix-commander-rs/package.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/ma/matrix-commander-rs/package.nix b/pkgs/by-name/ma/matrix-commander-rs/package.nix
index 610ce19e8aa2..89238f84df21 100644
--- a/pkgs/by-name/ma/matrix-commander-rs/package.nix
+++ b/pkgs/by-name/ma/matrix-commander-rs/package.nix
@@ -42,7 +42,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     homepage = "https://github.com/8go/matrix-commander-rs";
     changelog = "https://github.com/8go/matrix-commander-rs/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.gpl3Only;
-    maintainers = with lib.maintainers; [ fab ];
+    maintainers = with lib.maintainers; [
+      fab
+      ilkecan
+    ];
     mainProgram = "matrix-commander-rs";
   };
 })

From a02c9403fa9ae4b11c49f5e6ef6ead8a8b8ae01d Mon Sep 17 00:00:00 2001
From: Keenan Weaver <keenanweaver@protonmail.com>
Date: Sun, 16 Aug 2026 07:02:08 -0500
Subject: [PATCH 005/146] gpu-screen-recorder-gtk: add `keenanweaver` to
 maintainers

---
 pkgs/by-name/gp/gpu-screen-recorder-gtk/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/gp/gpu-screen-recorder-gtk/package.nix b/pkgs/by-name/gp/gpu-screen-recorder-gtk/package.nix
index 031206fc8b8d..967eea826476 100644
--- a/pkgs/by-name/gp/gpu-screen-recorder-gtk/package.nix
+++ b/pkgs/by-name/gp/gpu-screen-recorder-gtk/package.nix
@@ -79,6 +79,7 @@ stdenv.mkDerivation (finalAttrs: {
     maintainers = with lib.maintainers; [
       babbaj
       js6pak
+      keenanweaver
     ];
     platforms = lib.platforms.linux;
   };

From b69f7aa97a3fdf5c38b97d2b05871ffc11658bc5 Mon Sep 17 00:00:00 2001
From: Keenan Weaver <keenanweaver@protonmail.com>
Date: Sun, 16 Aug 2026 07:02:30 -0500
Subject: [PATCH 006/146] gpu-screen-recorder: add `keenanweaver` to
 maintainers

---
 pkgs/by-name/gp/gpu-screen-recorder/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/gp/gpu-screen-recorder/package.nix b/pkgs/by-name/gp/gpu-screen-recorder/package.nix
index dbe4c11d69b6..2e5c7ec72abb 100644
--- a/pkgs/by-name/gp/gpu-screen-recorder/package.nix
+++ b/pkgs/by-name/gp/gpu-screen-recorder/package.nix
@@ -96,6 +96,7 @@ stdenv.mkDerivation (finalAttrs: {
     maintainers = with lib.maintainers; [
       babbaj
       js6pak
+      keenanweaver
     ];
     platforms = lib.platforms.linux;
   };

From cdec91b7c2594dfd22ee1bc6a82a2223219bb41a Mon Sep 17 00:00:00 2001
From: Robert Hensing <robert@roberthensing.nl>
Date: Mon, 4 May 2026 22:25:17 +0200
Subject: [PATCH 007/146] nixos/tests: disable nix in most tests

Goal: reduce the reverse dependency closure of the `nix` package
---
 .../writing-nixos-tests.section.md            |  6 ++++
 nixos/tests/all-tests.nix                     | 30 ++++++++++++++++++-
 2 files changed, 35 insertions(+), 1 deletion(-)

diff --git a/nixos/doc/manual/development/writing-nixos-tests.section.md b/nixos/doc/manual/development/writing-nixos-tests.section.md
index ef5dc6984c2d..a6c16f02077f 100644
--- a/nixos/doc/manual/development/writing-nixos-tests.section.md
+++ b/nixos/doc/manual/development/writing-nixos-tests.section.md
@@ -92,6 +92,10 @@ cd /my/git/clone/of/nixpkgs
 nix-build -A nixosTests.hostname
 ```
 
+In-tree tests run with a few changes to defaults, notably
+- The `pkgs.*` are read only by default. You can opt out with `node.pkgsReadOnly = false;` at the test level.
+- `nix.enable` defaults to `false` to reduce build closure size; in particular the reverse build closure of `nix` and its dependencies.
+
 ### Testing outside the NixOS project {#sec-call-nixos-test-outside-nixos}
 
 Outside the `nixpkgs` repository, you can use the `runNixOSTest` function from
@@ -110,6 +114,8 @@ pkgs.testers.runNixOSTest {
 
 `runNixOSTest` returns a derivation that runs the test.
 
+Out-of-tree tests evaluate with a set of defaults that balances the principle of least surprise in the general case, but has a few differences from in-tree NixOS tests. See [Testing within NixOS](#sec-call-nixos-test-in-nixos).
+
 ## Test machines {#ssec-nixos-test-machines}
 
 A NixOS test usually consists of one or more test machines. Each machine is either a
diff --git a/nixos/tests/all-tests.nix b/nixos/tests/all-tests.nix
index 647f548ba3d3..86c05598be91 100644
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@@ -105,6 +105,34 @@ let
       ];
     };
 
+  /**
+    The test framework as exposed through its [other entrypoints] has defaults
+    that are most suitable for external usage.
+
+    This module adjusts it for the particular, important use case of
+    NixOS *as packaged in the nixpkgs repo*.
+
+    [other entrypoints]: https://nixos.org/manual/nixos/stable/#sec-calling-nixos-tests
+  */
+  localTestOverrides =
+    { lib, ... }:
+    {
+      _class = "nixosTest";
+      # for error messages, pseudo-url in no particular format
+      _file = "nixpkgs/nixos/tests/all-tests.nix#localTestOverrides";
+      imports = [
+        ./read-only-pkgs.nix
+      ];
+      extraBaseModules = {
+        _file = "nixpkgs/nixos/tests/all-tests.nix#localTestOverrides-extraBaseModules";
+        # tag(no-nix-by-default): we exclude nix from the tests *here* to keep a
+        #   small reverse closure for nix package updates among other things.
+        #   Out-of-tree usages get nix by default as usual.
+        #   See https://nixos.org/manual/nixos/unstable/#sec-call-nixos-test-outside-nixos
+        config.nix.enable = lib.mkDefault false;
+      };
+    };
+
   inherit
     (rec {
       doRunTest =
@@ -112,7 +140,7 @@ let
         ((import ../lib/testing-python.nix { inherit system pkgs; }).evalTest {
           imports = [
             arg
-            ./read-only-pkgs.nix
+            localTestOverrides
           ];
         }).config.result;
       findTests =

From 4c9db6cedbb2db0d454c1434f9e65f27259240f6 Mon Sep 17 00:00:00 2001
From: Robert Hensing <robert@roberthensing.nl>
Date: Mon, 17 Aug 2026 09:37:58 +0200
Subject: [PATCH 008/146] nixos/nixos-containers: support nix.enable = false

The container tests generally don't need this, it seems to work fine
so far, and this could genuinely be useful in image-based deployments.

Why an error instead of inheriting the setting?
Containers do not and should not inherit a parent setting like this.
If a container declares requiring too much, that's the mistake.
If the host does not support a container's declared environment, that's
a host problem.
If the container inherits the setting from the parent, the container's
configuration is not respected.

Example of the error message:
nodes.machine.containers.web-noip requires a Nix daemon but the host does not provided it, as option nodes.machine.nix.daemon.enable is disabled
---
 nixos/modules/virtualisation/nixos-containers.nix | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/nixos/modules/virtualisation/nixos-containers.nix b/nixos/modules/virtualisation/nixos-containers.nix
index ea904528caec..b76bc8267df6 100644
--- a/nixos/modules/virtualisation/nixos-containers.nix
+++ b/nixos/modules/virtualisation/nixos-containers.nix
@@ -1,6 +1,7 @@
 {
   config,
   lib,
+  options,
   pkgs,
   utils,
   ...
@@ -201,8 +202,12 @@ let
       --notify-ready=yes \
       --kill-signal=SIGRTMIN+3 \
       --bind-ro=/nix/store:/nix/store$NIX_BIND_OPT \
-      --bind-ro=/nix/var/nix/db:/nix/var/nix/db$NIX_BIND_OPT \
-      --bind-ro=/nix/var/nix/daemon-socket:/nix/var/nix/daemon-socket$NIX_BIND_OPT \
+      ${optionalString config.nix.enable "--bind-ro=/nix/var/nix/db:/nix/var/nix/db$NIX_BIND_OPT"} \
+      ${
+        optionalString (
+          config.nix.enable && config.nix.daemon.enable
+        ) "--bind-ro=/nix/var/nix/daemon-socket:/nix/var/nix/daemon-socket$NIX_BIND_OPT"
+      } \
       --bind="/nix/var/nix/profiles/per-container/$INSTANCE:/nix/var/nix/profiles$NIX_BIND_OPT" \
       --bind="/nix/var/nix/gcroots/per-container/$INSTANCE:/nix/var/nix/gcroots$NIX_BIND_OPT" \
       ${optionalString (!cfg.ephemeral) "--link-journal=try-guest"} \
@@ -994,7 +999,10 @@ in
           mapper =
             name: cfg:
             optional (cfg.networkNamespace != null && (cfg.privateNetwork || cfg.interfaces != [ ]))
-              "containers.${name}.networkNamespace is mutally exclusive to containers.${name}.privateNetwork and containers.${name}.interfaces.";
+              "containers.${name}.networkNamespace is mutally exclusive to containers.${name}.privateNetwork and containers.${name}.interfaces."
+            ++
+              optional (cfg.config.nix.enable && cfg.config.nix.daemon.enable && !config.nix.daemon.enable)
+                "${options.containers}.${strings.escapeNixIdentifier name} requires a Nix daemon but the host does not provided it, as option ${options.nix.daemon.enable} is disabled";
         in
         mkMerge (mapAttrsToList mapper config.containers);
     }

From d58f4909f448584483a5da7957897fc8672c02c7 Mon Sep 17 00:00:00 2001
From: Robert Hensing <robert@roberthensing.nl>
Date: Mon, 17 Aug 2026 11:33:16 +0200
Subject: [PATCH 009/146] nixos/tests/containers*: nix.enable = false

---
 nixos/tests/containers-bridge.nix              | 2 ++
 nixos/tests/containers-custom-pkgs.nix         | 2 ++
 nixos/tests/containers-ephemeral.nix           | 1 +
 nixos/tests/containers-extra_veth.nix          | 1 +
 nixos/tests/containers-gateway.nix             | 9 ++++++---
 nixos/tests/containers-hosts.nix               | 8 ++++++--
 nixos/tests/containers-imperative.nix          | 1 +
 nixos/tests/containers-ip.nix                  | 2 ++
 nixos/tests/containers-ipv6-slaac.nix          | 2 ++
 nixos/tests/containers-macvlans.nix            | 2 ++
 nixos/tests/containers-names.nix               | 4 +++-
 nixos/tests/containers-physical_interfaces.nix | 5 +++++
 nixos/tests/containers-portforward.nix         | 1 +
 nixos/tests/containers-reloadable.nix          | 3 +++
 nixos/tests/containers-require-bind-mounts.nix | 4 +++-
 nixos/tests/containers-restart_networking.nix  | 1 +
 nixos/tests/containers-tmpfs.nix               | 4 +++-
 nixos/tests/containers-unified-hierarchy.nix   | 4 +++-
 18 files changed, 47 insertions(+), 9 deletions(-)

diff --git a/nixos/tests/containers-bridge.nix b/nixos/tests/containers-bridge.nix
index cfcabab14b5c..0f2278d1cbad 100644
--- a/nixos/tests/containers-bridge.nix
+++ b/nixos/tests/containers-bridge.nix
@@ -49,6 +49,7 @@ in
         localAddress = containerIp;
         localAddress6 = containerIp6;
         config = {
+          nix.enable = false; # disabled by default on the host. See all-tests.nix / tag(no-nix-by-default)
           services.httpd.enable = true;
           services.httpd.adminAddr = "foo@example.org";
           networking.firewall.allowedTCPPorts = [ 80 ];
@@ -60,6 +61,7 @@ in
         privateNetwork = true;
         hostBridge = "br0";
         config = {
+          nix.enable = false; # disabled by default on the host. See all-tests.nix / tag(no-nix-by-default)
           services.httpd.enable = true;
           services.httpd.adminAddr = "foo@example.org";
           networking.firewall.allowedTCPPorts = [ 80 ];
diff --git a/nixos/tests/containers-custom-pkgs.nix b/nixos/tests/containers-custom-pkgs.nix
index b341232fd8cd..44236f809308 100644
--- a/nixos/tests/containers-custom-pkgs.nix
+++ b/nixos/tests/containers-custom-pkgs.nix
@@ -37,6 +37,8 @@ in
           {
             nixpkgs.pkgs = customPkgs;
             system.extraDependencies = [ pkgs.hello ];
+
+            nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
           };
       };
     };
diff --git a/nixos/tests/containers-ephemeral.nix b/nixos/tests/containers-ephemeral.nix
index 798962967704..ade0cd8b275e 100644
--- a/nixos/tests/containers-ephemeral.nix
+++ b/nixos/tests/containers-ephemeral.nix
@@ -26,6 +26,7 @@
             };
           };
           networking.firewall.allowedTCPPorts = [ 80 ];
+          nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
         };
       };
     };
diff --git a/nixos/tests/containers-extra_veth.nix b/nixos/tests/containers-extra_veth.nix
index fe8b3873afcb..152a6590bbaa 100644
--- a/nixos/tests/containers-extra_veth.nix
+++ b/nixos/tests/containers-extra_veth.nix
@@ -63,6 +63,7 @@
         };
         config = {
           networking.firewall.allowedTCPPorts = [ 80 ];
+          nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
         };
       };
 
diff --git a/nixos/tests/containers-gateway.nix b/nixos/tests/containers-gateway.nix
index 48a29f6c99dc..afef1e1a0a31 100644
--- a/nixos/tests/containers-gateway.nix
+++ b/nixos/tests/containers-gateway.nix
@@ -39,9 +39,12 @@ in
       hostBridge = "br0";
       localAddress = containerIp4;
       localAddress6 = containerIp6;
-      config.networking = {
-        defaultGateway.address = hostIp4;
-        defaultGateway6.address = hostIp6;
+      config = {
+        networking = {
+          defaultGateway.address = hostIp4;
+          defaultGateway6.address = hostIp6;
+        };
+        nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
       };
     };
   };
diff --git a/nixos/tests/containers-hosts.nix b/nixos/tests/containers-hosts.nix
index 4e827e7c3983..7ec1209c2fbf 100644
--- a/nixos/tests/containers-hosts.nix
+++ b/nixos/tests/containers-hosts.nix
@@ -29,7 +29,9 @@
         localAddress = "10.10.0.1";
         hostAddress = "10.10.0.254";
 
-        config = { };
+        config = {
+          nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
+        };
       };
 
       containers.netmask = {
@@ -38,7 +40,9 @@
         hostBridge = "br0";
         localAddress = "10.11.0.1/24";
 
-        config = { };
+        config = {
+          nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
+        };
       };
     };
 
diff --git a/nixos/tests/containers-imperative.nix b/nixos/tests/containers-imperative.nix
index ad029d3aa309..67f6b1f7043b 100644
--- a/nixos/tests/containers-imperative.nix
+++ b/nixos/tests/containers-imperative.nix
@@ -19,6 +19,7 @@
 
       boot.enableContainers = true;
 
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
       # XXX: Sandbox setup fails while trying to hardlink files from the host's
       #      store file system into the prepared chroot directory.
       nix.settings.sandbox = false;
diff --git a/nixos/tests/containers-ip.nix b/nixos/tests/containers-ip.nix
index 7465813775e0..6e876b67fbfb 100644
--- a/nixos/tests/containers-ip.nix
+++ b/nixos/tests/containers-ip.nix
@@ -8,6 +8,8 @@ let
         adminAddr = "foo@example.org";
       };
       networking.firewall.allowedTCPPorts = [ 80 ];
+
+      nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
     };
   };
 
diff --git a/nixos/tests/containers-ipv6-slaac.nix b/nixos/tests/containers-ipv6-slaac.nix
index ee35c45fe9e4..2826be530370 100644
--- a/nixos/tests/containers-ipv6-slaac.nix
+++ b/nixos/tests/containers-ipv6-slaac.nix
@@ -104,6 +104,8 @@ in
 
           services.httpd.enable = true;
           networking.firewall.allowedTCPPorts = [ 80 ];
+
+          nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
         };
       };
     };
diff --git a/nixos/tests/containers-macvlans.nix b/nixos/tests/containers-macvlans.nix
index 7b9644d0542f..9290b1448f17 100644
--- a/nixos/tests/containers-macvlans.nix
+++ b/nixos/tests/containers-macvlans.nix
@@ -47,6 +47,7 @@ in
                 }
               ];
             };
+            nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
           };
         };
 
@@ -63,6 +64,7 @@ in
                 }
               ];
             };
+            nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
           };
         };
       };
diff --git a/nixos/tests/containers-names.nix b/nixos/tests/containers-names.nix
index 65f2763c50b3..bdbadf5252a1 100644
--- a/nixos/tests/containers-names.nix
+++ b/nixos/tests/containers-names.nix
@@ -19,7 +19,9 @@
             privateNetwork = true;
             hostAddress = "192.168.${subnet}.1";
             localAddress = "192.168.${subnet}.2";
-            config = { };
+            config = {
+              nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
+            };
           };
 
         in
diff --git a/nixos/tests/containers-physical_interfaces.nix b/nixos/tests/containers-physical_interfaces.nix
index 0cc36a1673c3..1f91f3abf199 100644
--- a/nixos/tests/containers-physical_interfaces.nix
+++ b/nixos/tests/containers-physical_interfaces.nix
@@ -22,6 +22,7 @@
               }
             ];
             networking.firewall.enable = false;
+            nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
           };
         };
       };
@@ -44,6 +45,7 @@
 
           config = {
             networking.firewall.enable = false;
+            nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
           };
         };
       };
@@ -65,6 +67,7 @@
               }
             ];
             networking.firewall.enable = false;
+            nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
           };
         };
       };
@@ -90,6 +93,7 @@
               }
             ];
             networking.firewall.enable = false;
+            nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
           };
         };
       };
@@ -116,6 +120,7 @@
               }
             ];
             networking.firewall.enable = false;
+            nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
           };
         };
       };
diff --git a/nixos/tests/containers-portforward.nix b/nixos/tests/containers-portforward.nix
index 90b0620d757a..499f3e439021 100644
--- a/nixos/tests/containers-portforward.nix
+++ b/nixos/tests/containers-portforward.nix
@@ -36,6 +36,7 @@ in
           services.httpd.enable = true;
           services.httpd.adminAddr = "foo@example.org";
           networking.firewall.allowedTCPPorts = [ 80 ];
+          nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
         };
       };
 
diff --git a/nixos/tests/containers-reloadable.nix b/nixos/tests/containers-reloadable.nix
index 3d6803143a85..4e2115197887 100644
--- a/nixos/tests/containers-reloadable.nix
+++ b/nixos/tests/containers-reloadable.nix
@@ -12,6 +12,7 @@
         containers.test1 = {
           autoStart = true;
           config.environment.etc.check.text = "client_base";
+          config.nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
         };
 
         # prevent make-test-python.nix to change IP
@@ -22,6 +23,7 @@
             environment.etc.check.text = lib.mkForce "client_c1";
             services.httpd.enable = true;
             services.httpd.adminAddr = "nixos@example.com";
+            nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
           };
         };
 
@@ -29,6 +31,7 @@
           containers.test1.config = {
             environment.etc.check.text = lib.mkForce "client_c2";
             services.nginx.enable = true;
+            nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
           };
         };
       };
diff --git a/nixos/tests/containers-require-bind-mounts.nix b/nixos/tests/containers-require-bind-mounts.nix
index eb65a619c7e9..5bd1faa03908 100644
--- a/nixos/tests/containers-require-bind-mounts.nix
+++ b/nixos/tests/containers-require-bind-mounts.nix
@@ -8,7 +8,9 @@
       bindMounts = {
         "/srv/data" = { };
       };
-      config = { };
+      config = {
+        nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
+      };
     };
 
     virtualisation.fileSystems = {
diff --git a/nixos/tests/containers-restart_networking.nix b/nixos/tests/containers-restart_networking.nix
index 42b8351afdf7..12a47e2d319a 100644
--- a/nixos/tests/containers-restart_networking.nix
+++ b/nixos/tests/containers-restart_networking.nix
@@ -22,6 +22,7 @@
               prefixLength = 24;
             }
           ];
+          nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
         };
       };
 
diff --git a/nixos/tests/containers-tmpfs.nix b/nixos/tests/containers-tmpfs.nix
index d83a2b69326a..1cdcfa9f0274 100644
--- a/nixos/tests/containers-tmpfs.nix
+++ b/nixos/tests/containers-tmpfs.nix
@@ -23,7 +23,9 @@
           # Add a tmpfs on a path that does not exist
           "/some/random/path"
         ];
-        config = { };
+        config = {
+          nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
+        };
       };
 
       virtualisation.additionalPaths = [ pkgs.stdenv ];
diff --git a/nixos/tests/containers-unified-hierarchy.nix b/nixos/tests/containers-unified-hierarchy.nix
index 417f68d0d31d..ecd1ee54cd4a 100644
--- a/nixos/tests/containers-unified-hierarchy.nix
+++ b/nixos/tests/containers-unified-hierarchy.nix
@@ -11,7 +11,9 @@
       containers = {
         test-container = {
           autoStart = true;
-          config = { };
+          config = {
+            nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
+          };
         };
       };
     };

From 2ee9543838a7d7fcd0a074eeb7f90875958f30ec Mon Sep 17 00:00:00 2001
From: Robert Hensing <robert@roberthensing.nl>
Date: Mon, 17 Aug 2026 11:30:43 +0200
Subject: [PATCH 010/146] nixos/tests/containers-nested: test with and without
 nix

By disabling nix in the other test cases, we'd lose coverage of the
with-nix configuration.
As most tests don't need nix anyway, I've picked this one to parameterize,
because it seems to be the most interesting one for it.
---
 nixos/tests/all-tests.nix         |  4 ++
 nixos/tests/containers-nested.nix | 98 ++++++++++++++++++++++++++++---
 2 files changed, 95 insertions(+), 7 deletions(-)

diff --git a/nixos/tests/all-tests.nix b/nixos/tests/all-tests.nix
index 86c05598be91..0b7ae4933790 100644
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@@ -442,6 +442,10 @@ in
   containers-macvlans = runTest ./containers-macvlans.nix;
   containers-names = runTest ./containers-names.nix;
   containers-nested = runTest ./containers-nested.nix;
+  containers-nested-nix = runTest {
+    imports = [ ./containers-nested.nix ];
+    params.nix = true;
+  };
   containers-physical_interfaces = runTest ./containers-physical_interfaces.nix;
   containers-portforward = runTest ./containers-portforward.nix;
   containers-reloadable = runTest ./containers-reloadable.nix;
diff --git a/nixos/tests/containers-nested.nix b/nixos/tests/containers-nested.nix
index 363332dc5853..b359a6bb365c 100644
--- a/nixos/tests/containers-nested.nix
+++ b/nixos/tests/containers-nested.nix
@@ -1,27 +1,54 @@
 # Test for NixOS' container nesting.
 
-{ pkgs, ... }:
 {
-  name = "nested";
+  lib,
+  pkgs,
+  config,
+  ...
+}:
+let
+  system = config.nodes.machine.nixpkgs.hostPlatform.system;
+in
+{
+  options = {
+    params.nix = lib.mkOption {
+      description = "Whether to enable nix on host and containers - we test both variants";
+      type = lib.types.bool;
+      default = false; # In line with all-tests.nix / tag(no-nix-by-default)
+    };
+  };
+  config.name = "nested";
 
-  meta = with pkgs.lib.maintainers; {
+  config.meta = with pkgs.lib.maintainers; {
     maintainers = [ sorki ];
   };
 
-  nodes.machine =
+  config.nodes.machine =
     { lib, ... }:
     let
       makeNested = subConf: {
+        # NOTE: outer container is also called "nested"!
         containers.nested = {
           autoStart = true;
           privateNetwork = true;
-          config = subConf;
+          config = {
+            imports = [ subConf ];
+            nix.enable = config.params.nix;
+            nix.settings.substitute = false;
+          };
         };
+        # host or level 1
+        nix.enable = config.params.nix;
       };
     in
-    makeNested (makeNested { });
+    {
+      imports = [
+        (makeNested (makeNested { }))
+      ];
+      nix.settings.substitute = false;
+    };
 
-  testScript = ''
+  config.testScript = ''
     machine.start()
     machine.wait_for_unit("container@nested.service")
     machine.succeed("systemd-run --pty --machine=nested -- machinectl list | grep nested")
@@ -30,5 +57,62 @@
             "systemd-run --pty --machine=nested -- systemd-run --pty --machine=nested -- systemctl status"
         )
     )
+
+    ${lib.optionalString config.params.nix ''
+      def check_path(path):
+          # result is available on host
+          machine.succeed(f"""
+            stat {path}
+          """)
+          # result is available on container
+          # invocation by absolute path because systemd-run is quite minimal
+          machine.succeed(f"""
+            systemd-run --machine=nested --pipe --wait -- /run/current-system/sw/bin/stat {path}
+          """)
+          # result is available on nested container
+          machine.succeed(f"""
+            systemd-run --machine=nested --pipe --wait  -- systemd-run --machine=nested --pipe --wait -- /run/current-system/sw/bin/stat {path}
+          """)
+
+      with subtest("nix store sharing"):
+          with subtest("built on host"):
+              build = machine.succeed("""
+                nix-build --expr 'derivation {
+                  name = "buildprobe-0";
+                  system = "${system}";
+                  builder = "/bin/sh";
+                  args = [ "-c" "echo ok 0 >$out" ];
+                }'
+              """)
+              check_path(build)
+
+          with subtest("built on container layer 1"):
+              build = machine.succeed("""
+                systemd-run --machine=nested --pipe --wait -- \
+                  /bin/sh -l -c 'exec $0 "$@"' \
+                  /run/current-system/sw/bin/nix-build --expr 'derivation {
+                    name = "buildprobe-1";
+                    system = "${system}";
+                    builder = "/bin/sh";
+                    args = [ "-c" "echo ok 1 >$out" ];
+                  }'
+              """)
+              check_path(build)
+
+          with subtest("built on container layer 2"):
+              build = machine.succeed("""
+                systemd-run --machine=nested --pipe --wait -- \
+                  systemd-run --machine=nested --pipe --wait -- \
+                  /bin/sh -l -c 'exec $0 "$@"' \
+                  /run/current-system/sw/bin/nix-build --expr 'derivation {
+                    name = "buildprobe-2";
+                    system = "${system}";
+                    builder = "/bin/sh";
+                    args = [ "-c" "echo ok 2 >$out" ];
+                  }'
+              """)
+              check_path(build)
+
+    ''}
   '';
 }

From 480dc5ac71f97c77df00026093877bcab49a8152 Mon Sep 17 00:00:00 2001
From: Robert Hensing <robert@roberthensing.nl>
Date: Mon, 17 Aug 2026 11:27:04 +0200
Subject: [PATCH 011/146] nixos/tests: nix.enable where needed

---
 nixos/tests/activation/nix-channel.nix          | 4 ++++
 nixos/tests/atticd.nix                          | 4 ++++
 nixos/tests/binary-cache.nix                    | 3 +++
 nixos/tests/harmonia.nix                        | 2 ++
 nixos/tests/hydra/common.nix                    | 1 +
 nixos/tests/installed-tests/flatpak-builder.nix | 1 +
 nixos/tests/installer.nix                       | 3 +++
 nixos/tests/iscsi-root.nix                      | 2 ++
 nixos/tests/lix.nix                             | 2 ++
 nixos/tests/lorri/default.nix                   | 2 ++
 nixos/tests/misc.nix                            | 1 +
 nixos/tests/nar-serve.nix                       | 2 ++
 nixos/tests/ncps.nix                            | 5 +++++
 nixos/tests/nix-config.nix                      | 1 +
 nixos/tests/nix-daemon-firewall.nix             | 1 +
 nixos/tests/nix-daemon-unprivileged.nix         | 1 +
 nixos/tests/nix-local-store.nix                 | 2 ++
 nixos/tests/nix-required-mounts/default.nix     | 1 +
 nixos/tests/nix-serve-ssh.nix                   | 3 +++
 nixos/tests/nix-serve.nix                       | 1 +
 nixos/tests/nix/upgrade.nix                     | 2 ++
 nixos/tests/nixos-generate-config.nix           | 2 ++
 nixos/tests/nixos-rebuild-specialisations.nix   | 1 +
 nixos/tests/nixos-rebuild-store-path.nix        | 1 +
 nixos/tests/nixos-rebuild-target-host.nix       | 4 +++-
 nixos/tests/nixseparatedebuginfod2.nix          | 3 +++
 nixos/tests/qemu-vm-store.nix                   | 4 ++++
 nixos/tests/replace-dependencies/default.nix    | 2 ++
 nixos/tests/rsyncd.nix                          | 2 ++
 nixos/tests/rush.nix                            | 4 ++++
 nixos/tests/systemd-boot.nix                    | 2 ++
 nixos/tests/varnish.nix                         | 2 ++
 nixos/tests/vinyl-cache.nix                     | 2 ++
 33 files changed, 72 insertions(+), 1 deletion(-)

diff --git a/nixos/tests/activation/nix-channel.nix b/nixos/tests/activation/nix-channel.nix
index 4452a89bdb74..77275c94e469 100644
--- a/nixos/tests/activation/nix-channel.nix
+++ b/nixos/tests/activation/nix-channel.nix
@@ -7,6 +7,10 @@
   meta.maintainers = with lib.maintainers; [ nikstur ];
 
   nodes.machine = {
+    # - nix.enable gates nix.channel.enable behaviors
+    # - disabled by default. See all-tests.nix / tag(no-nix-by-default)
+    nix.enable = true;
+
     nix.channel.enable = true;
   };
 
diff --git a/nixos/tests/atticd.nix b/nixos/tests/atticd.nix
index 5768da1def7a..ac4b7a737512 100644
--- a/nixos/tests/atticd.nix
+++ b/nixos/tests/atticd.nix
@@ -15,6 +15,8 @@ in
 
   nodes = {
     local = {
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+
       services.atticd = {
         enable = true;
 
@@ -27,6 +29,8 @@ in
     };
 
     s3 = {
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+
       services.atticd = {
         enable = true;
         settings = {
diff --git a/nixos/tests/binary-cache.nix b/nixos/tests/binary-cache.nix
index c74595bd90f0..6d80f904aebd 100644
--- a/nixos/tests/binary-cache.nix
+++ b/nixos/tests/binary-cache.nix
@@ -7,6 +7,9 @@
     { pkgs, ... }:
     {
       imports = [ ../modules/installer/cd-dvd/channel.nix ];
+
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+
       environment.systemPackages = with pkgs; [
         openssl
         python3
diff --git a/nixos/tests/harmonia.nix b/nixos/tests/harmonia.nix
index d648cd2b00f0..9e8b756e74ed 100644
--- a/nixos/tests/harmonia.nix
+++ b/nixos/tests/harmonia.nix
@@ -18,6 +18,7 @@
 
       # check that extra-allowed-users is effective for harmonia
       nix.settings.allowed-users = [ ];
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
     };
 
     client01 = {
@@ -27,6 +28,7 @@
           "cache.example.com-1:eIGQXcGQpc00x6/XFcyacLEUmC07u4RAEHt5Y8vdglo="
         ];
       };
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
     };
   };
 
diff --git a/nixos/tests/hydra/common.nix b/nixos/tests/hydra/common.nix
index 5726bbb0aff1..60c7143acc29 100644
--- a/nixos/tests/hydra/common.nix
+++ b/nixos/tests/hydra/common.nix
@@ -44,5 +44,6 @@
       };
       services.postfix.enable = true;
       nix.settings.substituters = [ ];
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
     };
 }
diff --git a/nixos/tests/installed-tests/flatpak-builder.nix b/nixos/tests/installed-tests/flatpak-builder.nix
index 322a4b841378..d24aff453261 100644
--- a/nixos/tests/installed-tests/flatpak-builder.nix
+++ b/nixos/tests/installed-tests/flatpak-builder.nix
@@ -14,6 +14,7 @@ makeInstalledTest {
       with pkgs;
       [ flatpak-builder ] ++ flatpak-builder.installedTestsDependencies;
     virtualisation.diskSize = 2048;
+    nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
   };
 
   testRunnerFlags = [
diff --git a/nixos/tests/installer.nix b/nixos/tests/installer.nix
index af8feebd1a1b..f00b231cf622 100644
--- a/nixos/tests/installer.nix
+++ b/nixos/tests/installer.nix
@@ -684,6 +684,9 @@ let
       nodes =
         let
           commonConfig = {
+            # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+            nix.enable = true;
+
             # builds stuff in the VM, needs more juice
             virtualisation.diskSize = 12 * 1024;
             virtualisation.cores = 8;
diff --git a/nixos/tests/iscsi-root.nix b/nixos/tests/iscsi-root.nix
index 6872dfbda94c..57f9d11cc72d 100644
--- a/nixos/tests/iscsi-root.nix
+++ b/nixos/tests/iscsi-root.nix
@@ -108,6 +108,8 @@ in
 
         system.extraDependencies = [ nodes.initiatorRootDisk.system.build.toplevel ];
 
+        nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+
         nix.settings = {
           substituters = lib.mkForce [ ];
           hashed-mirrors = null;
diff --git a/nixos/tests/lix.nix b/nixos/tests/lix.nix
index f941af3c1233..7d3317528bda 100644
--- a/nixos/tests/lix.nix
+++ b/nixos/tests/lix.nix
@@ -2,6 +2,8 @@
   name = "lix";
 
   nodes.machine = { pkgs, ... }: {
+    nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+
     nix.package = pkgs.lix;
 
     environment.etc."test.nix".text = ''
diff --git a/nixos/tests/lorri/default.nix b/nixos/tests/lorri/default.nix
index a9ad56456733..a30329066eb6 100644
--- a/nixos/tests/lorri/default.nix
+++ b/nixos/tests/lorri/default.nix
@@ -6,6 +6,8 @@ import ../make-test-python.nix {
     {
       imports = [ ../../modules/profiles/minimal.nix ];
       environment.systemPackages = [ pkgs.lorri ];
+
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
     };
 
   testScript = ''
diff --git a/nixos/tests/misc.nix b/nixos/tests/misc.nix
index 12c0275b3a23..3be912c9ab84 100644
--- a/nixos/tests/misc.nix
+++ b/nixos/tests/misc.nix
@@ -66,6 +66,7 @@ in
       boot.kernel.sysctl."vm.swappiness" = 1;
       boot.kernelParams = [ "vsyscall=emulate" ];
       system.extraDependencies = [ foo ];
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
     };
 
   testScript = ''
diff --git a/nixos/tests/nar-serve.nix b/nixos/tests/nar-serve.nix
index d05d3f136251..dadf44ce771c 100644
--- a/nixos/tests/nar-serve.nix
+++ b/nixos/tests/nar-serve.nix
@@ -23,6 +23,8 @@
 
         networking.firewall.allowedTCPPorts = [ 8383 ];
 
+        nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+
         # virtualisation.diskSize = 2 * 1024;
       };
   };
diff --git a/nixos/tests/ncps.nix b/nixos/tests/ncps.nix
index 87b1c33424b8..a139b9772526 100644
--- a/nixos/tests/ncps.nix
+++ b/nixos/tests/ncps.nix
@@ -25,6 +25,8 @@
 
       networking.firewall.allowedTCPPorts = [ 5000 ];
       system.extraDependencies = [ pkgs.emptyFile ];
+
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
     };
 
     ncps = {
@@ -49,6 +51,8 @@
       };
 
       networking.firewall.allowedTCPPorts = [ 8501 ];
+
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
     };
 
     client = {
@@ -58,6 +62,7 @@
           "ncps:UtiE6C+3Tx0kgpP34vjyX/BKK6QZ/D1OzDYX72aCPJg="
         ];
       };
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
     };
   };
 
diff --git a/nixos/tests/nix-config.nix b/nixos/tests/nix-config.nix
index 005dd71b2f63..85ec2e9b399a 100644
--- a/nixos/tests/nix-config.nix
+++ b/nixos/tests/nix-config.nix
@@ -9,6 +9,7 @@
         extra-nix-path = [ "extra=/etc/value.nix" ];
       };
       environment.etc."value.nix".text = "42";
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
     };
   testScript = ''
     start_all()
diff --git a/nixos/tests/nix-daemon-firewall.nix b/nixos/tests/nix-daemon-firewall.nix
index 0b75b9659589..ab488683dc7f 100644
--- a/nixos/tests/nix-daemon-firewall.nix
+++ b/nixos/tests/nix-daemon-firewall.nix
@@ -100,6 +100,7 @@ let
       # Gives us access inside the nix sandbox
       extra-sandbox-paths = [ "${pkgs.pkgsStatic.busybox}" ];
     };
+    nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
 
     # Easy way to get files to the system
     environment.etc = {
diff --git a/nixos/tests/nix-daemon-unprivileged.nix b/nixos/tests/nix-daemon-unprivileged.nix
index 34aa3d8b83ce..6605b5b0bb61 100644
--- a/nixos/tests/nix-daemon-unprivileged.nix
+++ b/nixos/tests/nix-daemon-unprivileged.nix
@@ -19,6 +19,7 @@
         "auto-allocate-uids"
       ];
     };
+    nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
 
     # Easiest way to get a file onto the machine
     environment.etc."test.nix".text = ''
diff --git a/nixos/tests/nix-local-store.nix b/nixos/tests/nix-local-store.nix
index c4b98b0e3a1c..d756805958d5 100644
--- a/nixos/tests/nix-local-store.nix
+++ b/nixos/tests/nix-local-store.nix
@@ -7,6 +7,8 @@
       experimental-features = [ "nix-command" ];
       log-lines = 26;
     };
+    nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+
     # Easiest way to get a file onto the machine
     environment.etc."test.nix".text = ''
       derivation {
diff --git a/nixos/tests/nix-required-mounts/default.nix b/nixos/tests/nix-required-mounts/default.nix
index 60f894ce0bcc..267d077583b3 100644
--- a/nixos/tests/nix-required-mounts/default.nix
+++ b/nixos/tests/nix-required-mounts/default.nix
@@ -16,6 +16,7 @@ in
       nix.settings.substituters = lib.mkForce [ ];
       nix.settings.system-features = [ "supported-feature" ];
       nix.settings.experimental-features = [ "nix-command" ];
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
       programs.nix-required-mounts.enable = true;
       programs.nix-required-mounts.allowedPatterns.supported-feature = {
         onFeatures = [ "supported-feature" ];
diff --git a/nixos/tests/nix-serve-ssh.nix b/nixos/tests/nix-serve-ssh.nix
index e5b3adc37b3a..dfcf1ddd53ef 100644
--- a/nixos/tests/nix-serve-ssh.nix
+++ b/nixos/tests/nix-serve-ssh.nix
@@ -12,6 +12,9 @@ in
 {
   name = "nix-ssh-serve";
   meta.maintainers = [ lib.maintainers.shlevy ];
+  defaults = {
+    nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+  };
   nodes = {
     server.nix.sshServe = {
       enable = true;
diff --git a/nixos/tests/nix-serve.nix b/nixos/tests/nix-serve.nix
index d3b4668540a1..64f92b84da51 100644
--- a/nixos/tests/nix-serve.nix
+++ b/nixos/tests/nix-serve.nix
@@ -8,6 +8,7 @@
       environment.systemPackages = [
         pkgs.hello
       ];
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
     };
   testScript =
     let
diff --git a/nixos/tests/nix/upgrade.nix b/nixos/tests/nix/upgrade.nix
index a014313aa53a..182f5a80269a 100644
--- a/nixos/tests/nix/upgrade.nix
+++ b/nixos/tests/nix/upgrade.nix
@@ -45,6 +45,8 @@ pkgs.testers.nixosTest {
     imports = [ nixos-module ];
 
     nix.package = nixVersions.stable;
+    nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+
     system.extraDependencies = [
       fallback-paths-external
     ];
diff --git a/nixos/tests/nixos-generate-config.nix b/nixos/tests/nixos-generate-config.nix
index 175849bcac62..425d1b0eca42 100644
--- a/nixos/tests/nixos-generate-config.nix
+++ b/nixos/tests/nixos-generate-config.nix
@@ -19,6 +19,8 @@
         services.desktopManager.gnome.enable = true;
       ''
     ];
+
+    nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
   };
   testScript = ''
     start_all()
diff --git a/nixos/tests/nixos-rebuild-specialisations.nix b/nixos/tests/nixos-rebuild-specialisations.nix
index 96ae337c8c58..e80a53f2f806 100644
--- a/nixos/tests/nixos-rebuild-specialisations.nix
+++ b/nixos/tests/nixos-rebuild-specialisations.nix
@@ -20,6 +20,7 @@
           hashed-mirrors = null;
           connect-timeout = 1;
         };
+        nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
 
         system.includeBuildDependencies = true;
 
diff --git a/nixos/tests/nixos-rebuild-store-path.nix b/nixos/tests/nixos-rebuild-store-path.nix
index c451ff865744..5d8fc0fff71c 100644
--- a/nixos/tests/nixos-rebuild-store-path.nix
+++ b/nixos/tests/nixos-rebuild-store-path.nix
@@ -20,6 +20,7 @@
           hashed-mirrors = null;
           connect-timeout = 1;
         };
+        nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
 
         system.includeBuildDependencies = true;
 
diff --git a/nixos/tests/nixos-rebuild-target-host.nix b/nixos/tests/nixos-rebuild-target-host.nix
index 7245dbc1c0bd..4ba480b06eca 100644
--- a/nixos/tests/nixos-rebuild-target-host.nix
+++ b/nixos/tests/nixos-rebuild-target-host.nix
@@ -5,7 +5,9 @@
   # TODO: remove overlay from  nixos/modules/profiles/installation-device.nix
   #        make it a _small package instead, then remove pkgsReadOnly = false;.
   node.pkgsReadOnly = false;
-
+  defaults = {
+    nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+  };
   nodes = {
     deployer =
       { lib, pkgs, ... }:
diff --git a/nixos/tests/nixseparatedebuginfod2.nix b/nixos/tests/nixseparatedebuginfod2.nix
index 054e0bba5689..37d454ce94c6 100644
--- a/nixos/tests/nixseparatedebuginfod2.nix
+++ b/nixos/tests/nixseparatedebuginfod2.nix
@@ -1,6 +1,9 @@
 { pkgs, lib, ... }:
 {
   name = "nixseparatedebuginfod2";
+  defaults = {
+    nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+  };
   # A binary cache with debug info and source for gnumake
   nodes.cache =
     { pkgs, ... }:
diff --git a/nixos/tests/qemu-vm-store.nix b/nixos/tests/qemu-vm-store.nix
index 1824ef559159..be4a3e9fef16 100644
--- a/nixos/tests/qemu-vm-store.nix
+++ b/nixos/tests/qemu-vm-store.nix
@@ -5,6 +5,10 @@
 
   meta.maintainers = with lib.maintainers; [ nikstur ];
 
+  defaults = {
+    nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+  };
+
   nodes = {
     sharedWritable = {
       virtualisation.writableStore = true;
diff --git a/nixos/tests/replace-dependencies/default.nix b/nixos/tests/replace-dependencies/default.nix
index 7eb038193f51..c70f16609dad 100644
--- a/nixos/tests/replace-dependencies/default.nix
+++ b/nixos/tests/replace-dependencies/default.nix
@@ -8,6 +8,8 @@ import ../make-test-python.nix (
       { ... }:
       {
         nix.settings.experimental-features = [ "ca-derivations" ];
+        nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+
         system.extraDependencies = [ pkgs.stdenvNoCC ];
       };
 
diff --git a/nixos/tests/rsyncd.nix b/nixos/tests/rsyncd.nix
index 6fe658058389..732f1014d541 100644
--- a/nixos/tests/rsyncd.nix
+++ b/nixos/tests/rsyncd.nix
@@ -25,6 +25,8 @@
               };
             };
           };
+          # TODO: Remove dependency on nix. (Not needed, and I don't understand /nix/store above)
+          nix.enable = true;
         };
     in
     {
diff --git a/nixos/tests/rush.nix b/nixos/tests/rush.nix
index 0fcd87d15f58..7f30f279dc7a 100644
--- a/nixos/tests/rush.nix
+++ b/nixos/tests/rush.nix
@@ -7,6 +7,10 @@ in
   name = "rush";
   meta = { inherit (pkgs.rush.meta) maintainers platforms; };
 
+  defaults = {
+    nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+  };
+
   nodes = {
     client =
       { ... }:
diff --git a/nixos/tests/systemd-boot.nix b/nixos/tests/systemd-boot.nix
index 020644db86a8..9d503882a43c 100644
--- a/nixos/tests/systemd-boot.nix
+++ b/nixos/tests/systemd-boot.nix
@@ -41,6 +41,8 @@ let
       boot.loader.efi.canTouchEfiVariables = true;
       environment.systemPackages = [ pkgs.efibootmgr ];
       system.switch.enable = true;
+      nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
+
       # Needed for machine-id to be persisted between reboots.
       # Must be a valid (non-zero) ID, otherwise sd_id128_get_machine()
       # returns -ENOMEDIUM and dbus-broker refuses to start.
diff --git a/nixos/tests/varnish.nix b/nixos/tests/varnish.nix
index a234765aed63..fe820c5807e7 100644
--- a/nixos/tests/varnish.nix
+++ b/nixos/tests/varnish.nix
@@ -23,6 +23,7 @@ in
         services.nix-serve = {
           enable = true;
         };
+        nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
 
         services.varnish = {
           inherit package;
@@ -86,6 +87,7 @@ in
           require-sigs = false;
           substituters = lib.mkForce [ "http://varnish" ];
         };
+        nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
       };
   };
 
diff --git a/nixos/tests/vinyl-cache.nix b/nixos/tests/vinyl-cache.nix
index aec9415b333f..6e9d351f1f6f 100644
--- a/nixos/tests/vinyl-cache.nix
+++ b/nixos/tests/vinyl-cache.nix
@@ -28,6 +28,7 @@ in
         services.nix-serve = {
           enable = true;
         };
+        nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
 
         services.vinyl-cache = {
           inherit package;
@@ -97,6 +98,7 @@ in
           require-sigs = false;
           substituters = lib.mkForce [ "http://vinyl" ];
         };
+        nix.enable = true; # disabled by default. See all-tests.nix / tag(no-nix-by-default)
       };
   };
 

From 88525bfa11def71537a2152d726ff069294f0ba4 Mon Sep 17 00:00:00 2001
From: Robert Hensing <robert@roberthensing.nl>
Date: Mon, 17 Aug 2026 11:55:40 +0200
Subject: [PATCH 012/146] nixos/tests/nextcloud: avoid nix dependency

We're removing nix from the default configuration for in-tree tests,
because most tests don't need it and it avoids unnecessary mass-retests.
---
 nixos/tests/nextcloud/basic.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/nixos/tests/nextcloud/basic.nix b/nixos/tests/nextcloud/basic.nix
index 6062e198269c..523678971643 100644
--- a/nixos/tests/nextcloud/basic.nix
+++ b/nixos/tests/nextcloud/basic.nix
@@ -116,8 +116,8 @@ runTest (
             )
 
             # Verify the local and remote copies of the file are identical.
-            client_hash = client.succeed("nix-hash testfile.bin").strip()
-            nextcloud_hash = nextcloud.succeed("nix-hash /var/lib/nextcloud-data/data/root/files/testfile.bin").strip()
+            client_hash = client.succeed("sha256sum <testfile.bin").strip()
+            nextcloud_hash = nextcloud.succeed("sha256sum </var/lib/nextcloud-data/data/root/files/testfile.bin").strip()
             t.assertEqual(client_hash, nextcloud_hash)
 
         with subtest("secrets"):

From 2cdb5b3f03e35f97238205af97d8ec4cf932f843 Mon Sep 17 00:00:00 2001
From: Robert Hensing <robert@roberthensing.nl>
Date: Mon, 17 Aug 2026 12:07:56 +0200
Subject: [PATCH 013/146] nixos/tests: nix.enable = false in containers

These tests do not use nix, and nix was disabled on the test hosts
by default.
Running a nix-requiring container on a host without nix does not
work, so we have to disable it where it is not needed.
---
 nixos/tests/rstp.nix            | 1 +
 nixos/tests/systemd-journal.nix | 4 +++-
 nixos/tests/yggdrasil.nix       | 1 +
 3 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/nixos/tests/rstp.nix b/nixos/tests/rstp.nix
index 23477f5a63d8..ebb5290cbb89 100644
--- a/nixos/tests/rstp.nix
+++ b/nixos/tests/rstp.nix
@@ -23,6 +23,7 @@
                 };
               };
             };
+            nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
           };
         };
       };
diff --git a/nixos/tests/systemd-journal.nix b/nixos/tests/systemd-journal.nix
index e2867de95f64..a7de58f5a5a1 100644
--- a/nixos/tests/systemd-journal.nix
+++ b/nixos/tests/systemd-journal.nix
@@ -20,7 +20,9 @@
   nodes.containerCheck = {
     containers.c1 = {
       autoStart = true;
-      config = { };
+      config = {
+        nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
+      };
     };
   };
 
diff --git a/nixos/tests/yggdrasil.nix b/nixos/tests/yggdrasil.nix
index 5b0762c7f08f..9086d1108fe2 100644
--- a/nixos/tests/yggdrasil.nix
+++ b/nixos/tests/yggdrasil.nix
@@ -138,6 +138,7 @@ in
             services.httpd.enable = true;
             services.httpd.adminAddr = "foo@example.org";
             networking.firewall.allowedTCPPorts = [ 80 ];
+            nix.enable = false; # disabled by default on the test's host. See all-tests.nix / tag(no-nix-by-default)
           };
         };
       };

From 249226c8501632085bd7d8cb7de582b3b215fb5d Mon Sep 17 00:00:00 2001
From: Dan Paulat <dpaulat@gmail.com>
Date: Tue, 18 Aug 2026 21:24:22 -0500
Subject: [PATCH 014/146] supercell-wx: fix build

Upstream dependency changed breaking transitive include resulting in a
build failure. This change patches zip_stream_writer.cpp to explicitly
include <cstring> so std::memcpy is properly resolved.
---
 pkgs/by-name/su/supercell-wx/package.nix             |  1 +
 .../su/supercell-wx/patches/memcpy-cstring.patch     | 12 ++++++++++++
 2 files changed, 13 insertions(+)
 create mode 100644 pkgs/by-name/su/supercell-wx/patches/memcpy-cstring.patch

diff --git a/pkgs/by-name/su/supercell-wx/package.nix b/pkgs/by-name/su/supercell-wx/package.nix
index 8c530536e06e..e54c68693016 100644
--- a/pkgs/by-name/su/supercell-wx/package.nix
+++ b/pkgs/by-name/su/supercell-wx/package.nix
@@ -92,6 +92,7 @@ stdenv.mkDerivation (finalAttrs: {
     ./patches/explicit-link-aws-crt.patch # fix missing symbols from aws-crt-cpp
     # }}}
     ./patches/boost-1.89-compat.patch
+    ./patches/memcpy-cstring.patch
   ];
 
   # This also may be submitted upstream to maplibre-native-qt, which is currently vendored
diff --git a/pkgs/by-name/su/supercell-wx/patches/memcpy-cstring.patch b/pkgs/by-name/su/supercell-wx/patches/memcpy-cstring.patch
new file mode 100644
index 000000000000..1804e36f115f
--- /dev/null
+++ b/pkgs/by-name/su/supercell-wx/patches/memcpy-cstring.patch
@@ -0,0 +1,12 @@
+diff --git a/wxdata/source/scwx/zip/zip_stream_writer.cpp b/wxdata/source/scwx/zip/zip_stream_writer.cpp
+index 3822ea20..a455f63b 100644
+--- a/wxdata/source/scwx/zip/zip_stream_writer.cpp
++++ b/wxdata/source/scwx/zip/zip_stream_writer.cpp
+@@ -2,6 +2,7 @@
+ #include <scwx/util/logger.hpp>
+ 
+ #include <cstdlib>
++#include <cstring>
+ #include <fstream>
+ 
+ #include <zip.h>

From 7458c46d82a4a20ea8ff332bf3dc398228c949d6 Mon Sep 17 00:00:00 2001
From: Diogo Correia <me@diogotc.com>
Date: Wed, 19 Aug 2026 21:33:04 +0100
Subject: [PATCH 015/146] extism-js: 1.6.0 -> 1.7.0

---
 pkgs/by-name/ex/extism-js-core/package.nix | 25 ++++++----------------
 pkgs/by-name/ex/extism-js/package.nix      |  3 ---
 2 files changed, 6 insertions(+), 22 deletions(-)

diff --git a/pkgs/by-name/ex/extism-js-core/package.nix b/pkgs/by-name/ex/extism-js-core/package.nix
index 1a1e72fd1011..576e3d6f1632 100644
--- a/pkgs/by-name/ex/extism-js-core/package.nix
+++ b/pkgs/by-name/ex/extism-js-core/package.nix
@@ -6,23 +6,22 @@
   lld,
   nodejs,
   npmHooks,
-  runCommand,
   rustPlatform,
   stdenv,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "extism-js-core";
-  version = "1.6.0";
+  version = "1.7.0";
 
   src = fetchFromGitHub {
     owner = "extism";
     repo = "js-pdk";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-CLyH0gDtw988cTcw4B86/kejfbYWMXEVG9Y6PKAZazE=";
+    hash = "sha256-U2C82By8JXUrtaAceZ5xr5Fb9Ltipyvd/sXG+Dsi8F8=";
   };
 
-  cargoHash = "sha256-9lFX+Q4318ClVIRT4/uCesyNYwU9H2vV+fD3553M2Dc=";
+  cargoHash = "sha256-BBhHTzG0FU4AOuUz7yjp4bpELr1vEVdwT+vyyuITagE=";
 
   npmDeps = fetchNpmDeps {
     name = "${finalAttrs.pname}-${finalAttrs.version}-npm-deps";
@@ -35,7 +34,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   # https://github.com/extism/js-pdk/pull/154
   postPatch = ''
     substituteInPlace Cargo.toml \
-      --replace-fail '1.5.1' '${finalAttrs.version}'
+      --replace-fail '1.6.1' '${finalAttrs.version}'
   '';
 
   preBuild = ''
@@ -57,22 +56,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     rustPlatform.bindgenHook
   ];
 
-  # io-extras v0.18.4 uses #![feature]
-  env.RUSTC_BOOTSTRAP = 1;
-
   env.RUSTFLAGS = "-C linker=wasm-ld";
 
-  # rquickjs-sys expects the dir structure from wasi-sdk
-  # https://github.com/DelSkayn/rquickjs/blob/v0.11.0/sys/build.rs#L216-L230
-  # TODO: revisit when https://github.com/DelSkayn/rquickjs/pull/648 is released and extism updated
-  env.WASI_SDK = runCommand "wasi-sdk" { } ''
-    mkdir -p $out/bin
-    ln -s ${lib.getExe' stdenv.cc "wasm32-unknown-wasip1-clang"} $out/bin/clang
-    ln -s ${lib.getExe' stdenv.cc "wasm32-unknown-wasip1-ar"} $out/bin/ar
-    ln -s ${stdenv.cc}/nix-support $out/nix-support
-    mkdir -p $out/share
-    ln -s ${stdenv.cc.libc} $out/share/wasi-sysroot
-  '';
+  # stdenv handles setting up the appropriate env variables
+  env.RQUICKJS_SYS_NO_WASI_SDK = 1;
 
   cargoBuildFlags = [ "--package=js-pdk-core" ];
 
diff --git a/pkgs/by-name/ex/extism-js/package.nix b/pkgs/by-name/ex/extism-js/package.nix
index 748f126bc823..8662737726da 100644
--- a/pkgs/by-name/ex/extism-js/package.nix
+++ b/pkgs/by-name/ex/extism-js/package.nix
@@ -33,9 +33,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
     zstd
   ];
 
-  # fs-set-times v0.20.3 uses #![feature]
-  env.RUSTC_BOOTSTRAP = 1;
-
   env.EXTISM_ENGINE_PATH = "${pkgsCross.wasm32-wasip1.extism-js-core}/bin/js_pdk_core.wasm";
   env.ZSTD_SYS_USE_PKG_CONFIG = true;
 

From 14f002072dff086ac4930b3733bd5ae1b5387a3f Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Fri, 21 Aug 2026 20:35:17 +0700
Subject: [PATCH 016/146] myx: init at 0.4.0

---
 pkgs/by-name/my/myx/package.nix | 47 +++++++++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 pkgs/by-name/my/myx/package.nix

diff --git a/pkgs/by-name/my/myx/package.nix b/pkgs/by-name/my/myx/package.nix
new file mode 100644
index 000000000000..1c552188e305
--- /dev/null
+++ b/pkgs/by-name/my/myx/package.nix
@@ -0,0 +1,47 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  pkg-config,
+  stdenv,
+  alsa-lib,
+  openssl,
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "myx";
+  version = "0.4.0";
+
+  src = fetchFromGitHub {
+    owner = "HaseebKhalid1507";
+    repo = "Myx";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-72Q0AkUT8ms0+zbtVEBjqnku7njUAzVk/Y/d2AyQVeQ=";
+  };
+
+  cargoHash = "sha256-aNDKxvz918mwLteGpgQR7cpXs3VK12OHrfm4Q/jT+1s=";
+
+  nativeBuildInputs = lib.optionals stdenv.hostPlatform.isLinux [
+    pkg-config
+  ];
+
+  buildInputs = lib.optionals stdenv.hostPlatform.isLinux [
+    alsa-lib
+    openssl
+  ];
+
+  __structuredAttrs = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Lean, beautiful terminal Spotify player";
+    homepage = "https://github.com/HaseebKhalid1507/Myx";
+    changelog = "https://github.com/HaseebKhalid1507/Myx/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    mainProgram = "myx";
+    platforms = lib.platforms.unix;
+    maintainers = with lib.maintainers; [ miniharinn ];
+  };
+})

From 2d60b1fd5f5e2198766d33db3146e8498d8085ec Mon Sep 17 00:00:00 2001
From: Matt McHenry <github@matt.mchenryfamily.org>
Date: Mon, 17 Aug 2026 16:34:41 -0400
Subject: [PATCH 017/146] getmail6: 6.20.00 -> 6.20.01

Diff: https://github.com/getmail6/getmail6/compare/v6.20.00...v6.20.01

Changelog: https://github.com/getmail6/getmail6/blob/v6.20.01/docs/CHANGELOG
---
 pkgs/by-name/ge/getmail6/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ge/getmail6/package.nix b/pkgs/by-name/ge/getmail6/package.nix
index 0ebcddd09f8e..c193e3039618 100644
--- a/pkgs/by-name/ge/getmail6/package.nix
+++ b/pkgs/by-name/ge/getmail6/package.nix
@@ -6,14 +6,14 @@
 
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "getmail6";
-  version = "6.20.00";
+  version = "6.20.01";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "getmail6";
     repo = "getmail6";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-f0IH0wI7Ue/HjvMIhBRGaMoO9BYDJoH/3fWRDsFD9+8=";
+    hash = "sha256-U5/vOpVVuPc1ITn0SCr7bnDFUwSBqFr51dUsyiMbORM=";
   };
 
   build-system = with python3.pkgs; [

From aaaed3094022326cd2d8f4f7448d90a7bca69ac1 Mon Sep 17 00:00:00 2001
From: Edoardo Signorini <mail@edoars.me>
Date: Mon, 24 Aug 2026 10:09:38 +0200
Subject: [PATCH 018/146] linuxPackages.evdi: 1.14.15 -> 1.15.0

---
 pkgs/os-specific/linux/evdi/default.nix            | 14 +++++++-------
 .../linux/evdi/fix-conftest-probes.patch           | 10 ++++++++++
 2 files changed, 17 insertions(+), 7 deletions(-)
 create mode 100644 pkgs/os-specific/linux/evdi/fix-conftest-probes.patch

diff --git a/pkgs/os-specific/linux/evdi/default.nix b/pkgs/os-specific/linux/evdi/default.nix
index b6c5b6fdd2fb..38ea0890f98f 100644
--- a/pkgs/os-specific/linux/evdi/default.nix
+++ b/pkgs/os-specific/linux/evdi/default.nix
@@ -7,7 +7,6 @@
   libdrm,
   python3,
 }:
-
 let
   python3WithLibs = python3.withPackages (
     ps: with ps; [
@@ -17,19 +16,20 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "evdi";
-  version = "1.14.15";
+  version = "1.15.0";
 
   src = fetchFromGitHub {
     owner = "DisplayLink";
     repo = "evdi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-tms+UNws+oBmwLvDFaDSIa/bUdSpK+CADodbsip3tRg=";
+    hash = "sha256-CXF7PvmrPjjNoWXbWxEkFE/Sw4bO6YqDplPwF/OxhB0=";
   };
 
-  prePatch = ''
-    substituteInPlace module/Makefile \
-      --replace-fail '/etc/os-release' '/dev/null'
-  '';
+  patches = [
+    # Fix feature probes on kernels with allocation profiling enabled.
+    # Upstream: https://github.com/DisplayLink/evdi/pull/592
+    ./fix-conftest-probes.patch
+  ];
 
   env.CFLAGS = toString [
     "-Wno-error"
diff --git a/pkgs/os-specific/linux/evdi/fix-conftest-probes.patch b/pkgs/os-specific/linux/evdi/fix-conftest-probes.patch
new file mode 100644
index 000000000000..8022eaf08181
--- /dev/null
+++ b/pkgs/os-specific/linux/evdi/fix-conftest-probes.patch
@@ -0,0 +1,10 @@
+--- a/module/conftest.sh
++++ b/module/conftest.sh
+@@ -32,6 +32,7 @@
+ 	done
+ }
+ CFLAGS=$(requote "$@")
++CFLAGS="$CFLAGS '-DKBUILD_MODNAME=\"conftest\"' '-DKBUILD_BASENAME=\"conftest\"'"
+ 
+ WORKDIR="$(mktemp -d)"
+ trap 'rm -rf "$WORKDIR"' EXIT

From 6b83d98ffba95a752a9fe3297ef2e7e9534948ec Mon Sep 17 00:00:00 2001
From: nikstur <nikstur@outlook.com>
Date: Tue, 25 Aug 2026 14:35:29 +0200
Subject: [PATCH 019/146] nixos/test-driver: cleanup junit.xml creation

- All logs are now stored in system-out of the testsuite
- A "main" test case is now only created if there is no other subtest.
  In other words: if there are any subtests, these are treated as the
  only test cases in the suite. This is more aligned with expections of
  users and makes the junit.xml more useful for reporting.
---
 .../lib/test-driver/src/test_driver/logger.py | 40 ++++++++++++++-----
 1 file changed, 29 insertions(+), 11 deletions(-)

diff --git a/nixos/lib/test-driver/src/test_driver/logger.py b/nixos/lib/test-driver/src/test_driver/logger.py
index a5bf7c61c1a4..7b786b351417 100644
--- a/nixos/lib/test-driver/src/test_driver/logger.py
+++ b/nixos/lib/test-driver/src/test_driver/logger.py
@@ -80,17 +80,18 @@ class JunitXMLLogger(AbstractLogger):
             self.failure = False
 
     def __init__(self, outfile: Path) -> None:
-        self.tests: dict[str, JunitXMLLogger.TestCaseState] = {
-            "main": self.TestCaseState()
-        }
-        self.currentSubtest = "main"
+        self.testsuite = JunitXMLLogger.TestCaseState()
+        self.tests: dict[str, JunitXMLLogger.TestCaseState] = {}
+        self.currentSubtest = None
         self.outfile: Path = outfile
         self._print_serial_logs = True
         self._log_level = LogLevel.INFO
         atexit.register(self.close)
 
     def log(self, message: str, attributes: dict[str, str] = {}) -> None:
-        self.tests[self.currentSubtest].stdout += message + os.linesep
+        self.testsuite.stdout += message + os.linesep
+        if self.currentSubtest:
+            self.tests[self.currentSubtest].stdout += message + os.linesep
 
     @contextmanager
     def subtest(self, name: str, attributes: dict[str, str] = {}) -> Iterator[None]:
@@ -109,19 +110,28 @@ class JunitXMLLogger(AbstractLogger):
 
     def debug(self, *args, **kwargs) -> None:
         if self._log_level <= LogLevel.DEBUG:
-            self.tests[self.currentSubtest].stdout += args[0] + os.linesep
+            self.testsuite.stdout += args[0] + os.linesep
+            if self.currentSubtest:
+                self.tests[self.currentSubtest].stdout += args[0] + os.linesep
 
     def info(self, *args, **kwargs) -> None:
         if self._log_level <= LogLevel.INFO:
-            self.tests[self.currentSubtest].stdout += args[0] + os.linesep
+            self.testsuite.stdout += args[0] + os.linesep
+            if self.currentSubtest:
+                self.tests[self.currentSubtest].stdout += args[0] + os.linesep
 
     def warning(self, *args, **kwargs) -> None:
         if self._log_level <= LogLevel.WARNING:
-            self.tests[self.currentSubtest].stdout += args[0] + os.linesep
+            self.testsuite.stdout += args[0] + os.linesep
+            if self.currentSubtest:
+                self.tests[self.currentSubtest].stdout += args[0] + os.linesep
 
     def error(self, *args, **kwargs) -> None:
-        self.tests[self.currentSubtest].stderr += args[0] + os.linesep
-        self.tests[self.currentSubtest].failure = True
+        self.testsuite.stderr += args[0] + os.linesep
+        self.testsuite.failure = True
+        if self.currentSubtest:
+            self.tests[self.currentSubtest].stderr += args[0] + os.linesep
+            self.tests[self.currentSubtest].failure = True
 
     def log_test_error(self, *args, **kwargs) -> None:
         self.error(*args, **kwargs)
@@ -141,6 +151,9 @@ class JunitXMLLogger(AbstractLogger):
     def close(self) -> None:
         with open(self.outfile, "w") as f:
             test_cases = []
+            if len(self.tests) == 0:
+                self.tests.setdefault("main", self.TestCaseState())
+                self.tests["main"].failure = self.testsuite.failure
             for name, test_case_state in self.tests.items():
                 tc = TestCase(
                     name,
@@ -151,7 +164,12 @@ class JunitXMLLogger(AbstractLogger):
                     tc.add_failure_info("test case failed")
 
                 test_cases.append(tc)
-            ts = TestSuite("NixOS integration test", test_cases)
+            ts = TestSuite(
+                "NixOS integration test",
+                test_cases,
+                stdout=self.testsuite.stdout,
+                stderr=self.testsuite.stderr,
+            )
             f.write(TestSuite.to_xml_string([ts]))
 
 

From e628f9309363d52e90ef61bec9fca9663a19e911 Mon Sep 17 00:00:00 2001
From: winston <hey@winston.sh>
Date: Tue, 25 Aug 2026 17:22:19 +0200
Subject: [PATCH 020/146] wasmtime: add python package bump to updateScript

---
 pkgs/by-name/wa/wasmtime/package.nix | 26 +++++++++++++++++++++-----
 1 file changed, 21 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/wa/wasmtime/package.nix b/pkgs/by-name/wa/wasmtime/package.nix
index b6a58c3bc924..dd05a9fc9669 100644
--- a/pkgs/by-name/wa/wasmtime/package.nix
+++ b/pkgs/by-name/wa/wasmtime/package.nix
@@ -7,7 +7,9 @@
   cmake,
   installShellFiles,
   versionCheckHook,
+  _experimental-update-script-combinators,
   nix-update-script,
+  python3,
   enableShared ? !stdenv.hostPlatform.isStatic,
   enableStatic ? stdenv.hostPlatform.isStatic,
   variant ? "main",
@@ -26,6 +28,8 @@ let
     };
   };
   source = sources.${variant};
+  # there is no LTS version of python3Packages.wasmtime yet
+  hasPythonBinding = variant == "main";
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "wasmtime";
@@ -112,12 +116,24 @@ rustPlatform.buildRustPackage (finalAttrs: {
   doInstallCheck = true;
 
   passthru = {
-    updateScript = nix-update-script {
-      extraArgs = [
-        "--version-regex"
-        "^v(\\d+\\.\\d+\\.\\d+)$"
-      ];
+    tests = lib.optionalAttrs hasPythonBinding {
+      python3-wasmtime = python3.pkgs.wasmtime;
     };
+    updateScript = _experimental-update-script-combinators.sequence (
+      [
+        (nix-update-script {
+          extraArgs = [
+            "--version-regex"
+            "^v(\\d+\\.\\d+\\.\\d+)$"
+          ];
+        })
+      ]
+      ++ lib.optionals hasPythonBinding [
+        (nix-update-script {
+          attrPath = "python3.pkgs.wasmtime";
+        })
+      ]
+    );
   };
 
   meta = {

From e8317f8e7955ea5c7e71a35a2a2b9bcf45225097 Mon Sep 17 00:00:00 2001
From: winston <hey@winston.sh>
Date: Tue, 25 Aug 2026 17:22:38 +0200
Subject: [PATCH 021/146] wasmtime: 48.0.0 -> 48.0.1

---
 pkgs/by-name/wa/wasmtime/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/wa/wasmtime/package.nix b/pkgs/by-name/wa/wasmtime/package.nix
index dd05a9fc9669..e0283b048cb0 100644
--- a/pkgs/by-name/wa/wasmtime/package.nix
+++ b/pkgs/by-name/wa/wasmtime/package.nix
@@ -22,9 +22,9 @@ let
       cargoHash = "sha256-2Nwcw3Z4/cbkRcG2hJ2/1PcXZf3vYB9NGUlr7pxdqzU=";
     };
     main = {
-      version = "48.0.0";
-      hash = "sha256-WGnDC7iTEK2eLD1rPIy2jgbrsamWT7fElRwoy+EZ0dg=";
-      cargoHash = "sha256-cYv+Ml8xgukxwnHVge6swtC0Ul5Vt2+diUini4C61eo=";
+      version = "48.0.1";
+      hash = "sha256-nvDiKIyo0/BmwjPTfNGIX1kSVVJQbmjjT4qed0dr8cc=";
+      cargoHash = "sha256-NVea5PiuFTr1NrIcyEJSq0gFf2XkDZj/VKubHwO34U4=";
     };
   };
   source = sources.${variant};

From ea1dbaacf79a209efba2c6e6c65a3c73ba6ed425 Mon Sep 17 00:00:00 2001
From: c2fc2f <contact@c2fc2f.com>
Date: Wed, 26 Aug 2026 17:10:32 +0200
Subject: [PATCH 022/146] nixos/neo4j: add ssl.policies.<name>.enable option

---
 nixos/doc/manual/release-notes/rl-2611.section.md | 2 ++
 nixos/modules/services/databases/neo4j.nix        | 5 ++++-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/nixos/doc/manual/release-notes/rl-2611.section.md b/nixos/doc/manual/release-notes/rl-2611.section.md
index 496e5eb33a5c..c4360e041f19 100644
--- a/nixos/doc/manual/release-notes/rl-2611.section.md
+++ b/nixos/doc/manual/release-notes/rl-2611.section.md
@@ -186,6 +186,8 @@
 
 - `fail2ban` has been updated to 1.1.1, which has a few breaking changes compared to 1.1.0 ([changelog](https://github.com/fail2ban/fail2ban/blob/1.1.1/ChangeLog))
 
+- `services.neo4j.tls.<policy_name>`: This policy is no longer enabled by default. If you rely on this policy, you must now explicitly opt-in by setting `services.neo4j.tls.<policy_name>.enable = true;`.
+
 - `systemd.user.extraConfig` has been removed in favor of the structured [](#opt-systemd.user.settings.Manager) option. Use `systemd.user.settings.Manager` to set any `systemd-user.conf(5)` option directly. For example, replace `systemd.user.extraConfig = "DefaultTimeoutStartSec=60";` with `systemd.user.settings.Manager.DefaultTimeoutStartSec = 60;`.
 
 - `matrix-appservice-discord` was removed from nixpkgs along with its NixOS module (`services.matrix-appservice-discord`) as it is no longer actively maintained upstream. Use the actively-maintained puppeting bridge [`mautrix-discord`](#opt-services.mautrix-discord.enable) instead.
diff --git a/nixos/modules/services/databases/neo4j.nix b/nixos/modules/services/databases/neo4j.nix
index b15f3be474b2..333787354228 100644
--- a/nixos/modules/services/databases/neo4j.nix
+++ b/nixos/modules/services/databases/neo4j.nix
@@ -13,6 +13,7 @@ let
     opt: lib.isOption opt && opt.type == lib.types.path && opt.highestPrio >= 1500;
 
   sslPolicies = lib.mapAttrsToList (name: conf: ''
+    dbms.ssl.policy.${name}.enabled=${lib.boolToString conf.enable}
     dbms.ssl.policy.${name}.allow_key_generation=${lib.boolToString conf.allowKeyGeneration}
     dbms.ssl.policy.${name}.base_directory=${conf.baseDirectory}
     ${lib.optionalString (conf.ciphers != null) ''
@@ -35,7 +36,7 @@ let
     dbms.ssl.policy.${name}.tls_versions=${lib.concatStringsSep "," conf.tlsVersions}
     dbms.ssl.policy.${name}.trust_all=${lib.boolToString conf.trustAll}
     dbms.ssl.policy.${name}.trusted_dir=${conf.trustedDir}
-  '') cfg.ssl.policies;
+  '') (lib.filterAttrs (_: v: v.enable) cfg.ssl.policies);
 
   serverConfig = pkgs.writeText "neo4j.conf" ''
     # General
@@ -467,6 +468,8 @@ in
             }:
             {
               options = {
+                enable = lib.mkEnableOption "this policy";
+
                 allowKeyGeneration = lib.mkOption {
                   type = lib.types.bool;
                   default = false;

From 1a92013a11c089d560cdec80578fc6cefdd23798 Mon Sep 17 00:00:00 2001
From: c2fc2f <contact@c2fc2f.com>
Date: Mon, 20 Jul 2026 10:16:51 +0200
Subject: [PATCH 023/146] maintainers: add c2fc2f

---
 maintainers/maintainer-list.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 68a6f4bfe516..6a79bb59909c 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -4433,6 +4433,14 @@
     githubId = 510553;
     name = "Jos van Bakel";
   };
+  c2fc2f = {
+    name = "c2fc2f";
+    github = "c2fc2f";
+    githubId = 59392138;
+    email = "contact@c2fc2f.com";
+    matrix = "@c2fc2f:sagbot.com";
+    keys = [ { fingerprint = "6EF1 8507 76B5 ABCE 5BF0  C0F8 42E0 E1D1 0B61 1208"; } ];
+  };
   c31io = {
     email = "celiogrand@outlook.com";
     github = "c31io";

From 17234a81c728e55711d8be9064612ab13327c240 Mon Sep 17 00:00:00 2001
From: c2fc2f <contact@c2fc2f.com>
Date: Mon, 20 Jul 2026 10:17:16 +0200
Subject: [PATCH 024/146] nixos/neo4j: add c2fc2f as maintainer

---
 nixos/modules/services/databases/neo4j.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/services/databases/neo4j.nix b/nixos/modules/services/databases/neo4j.nix
index 333787354228..dcb5221eda68 100644
--- a/nixos/modules/services/databases/neo4j.nix
+++ b/nixos/modules/services/databases/neo4j.nix
@@ -717,6 +717,6 @@ in
     };
 
   meta = {
-    maintainers = [ ];
+    maintainers = [ lib.maintainers.c2fc2f ];
   };
 }

From b7d1755d90657b03b32cdcfdf9882c593b47718d Mon Sep 17 00:00:00 2001
From: c2fc2f <contact@c2fc2f.com>
Date: Mon, 20 Jul 2026 10:18:18 +0200
Subject: [PATCH 025/146] neo4j: add c2fc2f as maintainer

---
 pkgs/by-name/ne/neo4j/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ne/neo4j/package.nix b/pkgs/by-name/ne/neo4j/package.nix
index 29d1366ca89d..38ca05837843 100644
--- a/pkgs/by-name/ne/neo4j/package.nix
+++ b/pkgs/by-name/ne/neo4j/package.nix
@@ -56,7 +56,7 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Highly scalable, robust (fully ACID) native graph database";
     homepage = "https://neo4j.com/";
     license = lib.licenses.gpl3;
-    maintainers = [ ];
+    maintainers = [ lib.maintainers.c2fc2f ];
     platforms = lib.platforms.unix;
   };
 })

From e248f501eaae9ffd0a6701094e76329c9661c68a Mon Sep 17 00:00:00 2001
From: Vasilis Manetas <vasilis.manetas@fh-erfurt.de>
Date: Thu, 27 Aug 2026 11:31:35 +0200
Subject: [PATCH 026/146] wheelwizard: 2.4.11 -> 2.5.1

---
 pkgs/by-name/wh/wheelwizard/deps.json   | 242 +++++++++++++-----------
 pkgs/by-name/wh/wheelwizard/package.nix |  16 +-
 2 files changed, 141 insertions(+), 117 deletions(-)

diff --git a/pkgs/by-name/wh/wheelwizard/deps.json b/pkgs/by-name/wh/wheelwizard/deps.json
index 7bf77ef57451..c05736190f8e 100644
--- a/pkgs/by-name/wh/wheelwizard/deps.json
+++ b/pkgs/by-name/wh/wheelwizard/deps.json
@@ -1,13 +1,83 @@
 [
+  {
+    "pname": "Avalonia",
+    "version": "11.3.19",
+    "hash": "sha256-EGway3F6Tl0lzSkwSxs1M51+So2FLYATzmFpbKMfTo8="
+  },
   {
     "pname": "Avalonia.Angle.Windows.Natives",
     "version": "2.1.25547.20250602",
     "hash": "sha256-LE/lENAHptmz6t3T/AoJwnhpda+xs7PqriNGzdcfg8M="
   },
+  {
+    "pname": "Avalonia.BuildServices",
+    "version": "11.3.2",
+    "hash": "sha256-6wx06tjSKWQOlX2czdp6Wh0nuwVapx5qf/s8Qj5we40="
+  },
+  {
+    "pname": "Avalonia.Controls.ColorPicker",
+    "version": "11.3.19",
+    "hash": "sha256-QnfA//jQYgbBDXs2jJrN9YJiWpsO4tQE4XjGDr+fp9k="
+  },
+  {
+    "pname": "Avalonia.Desktop",
+    "version": "11.3.19",
+    "hash": "sha256-7g+zN4tNmPzTBNkn0hbZsVmdm1HwDOzueh1I2R5Ukzk="
+  },
+  {
+    "pname": "Avalonia.Diagnostics",
+    "version": "11.3.19",
+    "hash": "sha256-vfqHbr3lY0N3JtNzsSDocTweUZCDMC3GdephD+auAVM="
+  },
+  {
+    "pname": "Avalonia.Fonts.Inter",
+    "version": "11.3.19",
+    "hash": "sha256-I8XSj5FD2xKqvHGBtH94iIu8Ss9Z8rPTUxzUvH1o/GM="
+  },
+  {
+    "pname": "Avalonia.FreeDesktop",
+    "version": "11.3.19",
+    "hash": "sha256-RW6/OttET9amgIPWtdRYTzmP9kqYjjaAuoJu06Kqr4c="
+  },
   {
     "pname": "Avalonia.HtmlRenderer",
-    "version": "11.0.0",
-    "hash": "sha256-DBD113eQJNHeEgFmx/tVRSnHxhGBQIKWVKxr1QRilr4="
+    "version": "11.3.0",
+    "hash": "sha256-XkehE/clhBFmCiXUTs+yfIV88WetyU7c2VG8Dja/qT8="
+  },
+  {
+    "pname": "Avalonia.Native",
+    "version": "11.3.19",
+    "hash": "sha256-bhqN2D8jsCzHHO6yUIuiNSd+nkEizMbm2xHEP68+7xc="
+  },
+  {
+    "pname": "Avalonia.Remote.Protocol",
+    "version": "11.3.19",
+    "hash": "sha256-hNx/XxrjVKRTPHvv8cT+LjbKBqo5DpcFWJuZTZEES8k="
+  },
+  {
+    "pname": "Avalonia.Skia",
+    "version": "11.3.19",
+    "hash": "sha256-ry4KKgtAKsrhucNHjYSj7PF0qxBHCLHHAvD6UWFo1IQ="
+  },
+  {
+    "pname": "Avalonia.Themes.Fluent",
+    "version": "11.3.19",
+    "hash": "sha256-hJfWVexlTvDn1Y7aCnoOwZxZ9rP+H+DoOFZyCEcrn+s="
+  },
+  {
+    "pname": "Avalonia.Themes.Simple",
+    "version": "11.3.19",
+    "hash": "sha256-f+K768e6kjVUNkm3C0L8WEXAFMyilKUNA23aYfOQgnw="
+  },
+  {
+    "pname": "Avalonia.Win32",
+    "version": "11.3.19",
+    "hash": "sha256-PmKkRz0ddCQu/hSdPO5RccLndfkbYRj827Rx2vE+OK4="
+  },
+  {
+    "pname": "Avalonia.X11",
+    "version": "11.3.19",
+    "hash": "sha256-Cx2c35BZRgEJieDNQVdyJFxfaaj/cNBTqS30kJzhMQw="
   },
   {
     "pname": "CSharpier.MsBuild",
@@ -56,28 +126,33 @@
   },
   {
     "pname": "Microsoft.Extensions.AmbientMetadata.Application",
-    "version": "9.3.0",
-    "hash": "sha256-aTR4eSGHPWdbmVsmUYJ+qKEG1ah+zubpZyrM6jEqOEQ="
+    "version": "10.0.0",
+    "hash": "sha256-pznnQSjqLCDNeokCe1uY+ba96FmQOMCpxKOyy4RV4Pk="
   },
   {
     "pname": "Microsoft.Extensions.Caching.Abstractions",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-yc4xSH5JuFXsCka5A5FGuUtvgEIjyj1VDav8pZ52s3U="
+    "version": "10.0.0",
+    "hash": "sha256-IciARPnXx/S6HZc4t2ED06UyUwfZI9LKSzwKSGdpsfI="
   },
   {
     "pname": "Microsoft.Extensions.Caching.Memory",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-jLC6jhzDJTNcOMuwdaGEMaAKuftIMFnO+oPwjTcLNh0="
+    "version": "10.0.0",
+    "hash": "sha256-AMgDSm1k6q0s17spGtyR5q8nAqUFDOxl/Fe38f9M+d4="
   },
   {
     "pname": "Microsoft.Extensions.Compliance.Abstractions",
-    "version": "9.3.0",
-    "hash": "sha256-kTZy+spk9bbXIWXcL9PS42v8NkJc7XHVtRF+B10JOkA="
+    "version": "10.0.0",
+    "hash": "sha256-hs8iZwPXm/theHwy1wK0vhbSZ9sWx5D0BU+yMruAOTw="
   },
   {
     "pname": "Microsoft.Extensions.Configuration",
-    "version": "8.0.0",
-    "hash": "sha256-9BPsASlxrV8ilmMCjdb3TiUcm5vFZxkBnAI/fNBSEyA="
+    "version": "10.0.0",
+    "hash": "sha256-MsLskVPpkCvov5+DWIaALCt1qfRRX4u228eHxvpE0dg="
+  },
+  {
+    "pname": "Microsoft.Extensions.Configuration.Abstractions",
+    "version": "10.0.0",
+    "hash": "sha256-GcgrnTAieCV7AVT13zyOjfwwL86e99iiO/MiMOxPGG0="
   },
   {
     "pname": "Microsoft.Extensions.Configuration.Abstractions",
@@ -86,28 +161,18 @@
   },
   {
     "pname": "Microsoft.Extensions.Configuration.Binder",
-    "version": "8.0.0",
-    "hash": "sha256-GanfInGzzoN2bKeNwON8/Hnamr6l7RTpYLA49CNXD9Q="
-  },
-  {
-    "pname": "Microsoft.Extensions.Configuration.Binder",
-    "version": "8.0.2",
-    "hash": "sha256-aGB0VuoC34YadAEqrwoaXLc5qla55pswDV2xLSmR7SE="
+    "version": "10.0.0",
+    "hash": "sha256-YSiWoA3VQR22k6+bSEAUqeG7UDzZlJfHWDTubUO5V8U="
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection",
-    "version": "9.0.3",
-    "hash": "sha256-/gAk+YbJT1/XjMfPBrEg9wUbljA0g1vFJuE+mFOPwV0="
+    "version": "10.0.0",
+    "hash": "sha256-LYm9hVlo/R9c2aAKHsDYJ5vY9U0+3Jvclme3ou3BtvQ="
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-kcXuldbnR8++yNGQj9/rVJOyFaJPKPxecWU9b0KX7AY="
-  },
-  {
-    "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
-    "version": "8.0.0",
-    "hash": "sha256-75KzEGWjbRELczJpCiJub+ltNUMMbz5A/1KQU+5dgP8="
+    "version": "10.0.0",
+    "hash": "sha256-9iodXP39YqgxomnOPOxd/mzbG0JfOSXzFoNU3omT2Ps="
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
@@ -115,14 +180,14 @@
     "hash": "sha256-UfLfEQAkXxDaVPC7foE/J3FVEXd31Pu6uQIhTic3JgY="
   },
   {
-    "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
-    "version": "9.0.3",
-    "hash": "sha256-90HSc8MgyemdtRTBN7Indq62DRaqI2mjai9iV/pi/o4="
+    "pname": "Microsoft.Extensions.DependencyInjection.AutoActivation",
+    "version": "10.0.0",
+    "hash": "sha256-cVRZwchZofxVsHEH4VIssGFGJ6pPjzmjW2afbNtr9/Q="
   },
   {
-    "pname": "Microsoft.Extensions.DependencyInjection.AutoActivation",
-    "version": "9.3.0",
-    "hash": "sha256-Y5C0GmvBqaH7LbDpnNUgGLSEUkhLTdbio40wjqRcSiE="
+    "pname": "Microsoft.Extensions.Diagnostics",
+    "version": "10.0.0",
+    "hash": "sha256-o7QkCisEcFIh227qBUfWFci2ns4cgEpLqpX7YvHGToQ="
   },
   {
     "pname": "Microsoft.Extensions.Diagnostics",
@@ -131,23 +196,28 @@
   },
   {
     "pname": "Microsoft.Extensions.Diagnostics.Abstractions",
-    "version": "8.0.1",
-    "hash": "sha256-d5DVXhA8qJFY9YbhZjsTqs5w5kDuxF5v+GD/WZR1QL0="
+    "version": "10.0.0",
+    "hash": "sha256-cix7QxQ/g3sj6reXu3jn0cRv2RijzceaLLkchEGTt5E="
   },
   {
     "pname": "Microsoft.Extensions.Diagnostics.ExceptionSummarization",
-    "version": "9.3.0",
-    "hash": "sha256-r1HuCwGdX90bU3FzBvq8sxmA/gw3MVCjuG6hqowdoqs="
+    "version": "10.0.0",
+    "hash": "sha256-srsioq6Gh4Tdf8UNH4xn6y4PvVPEhnhq8gRxnhh8T58="
   },
   {
     "pname": "Microsoft.Extensions.FileProviders.Abstractions",
-    "version": "8.0.0",
-    "hash": "sha256-uQSXmt47X2HGoVniavjLICbPtD2ReQOYQMgy3l0xuMU="
+    "version": "10.0.0",
+    "hash": "sha256-CHDs2HCN8QcfuYQpgNVszZ5dfXFe4yS9K2GoQXecc20="
   },
   {
     "pname": "Microsoft.Extensions.Hosting.Abstractions",
-    "version": "8.0.1",
-    "hash": "sha256-/bIVL9uvBQhV/KQmjA1ZjR74sMfaAlBb15sVXsGDEVA="
+    "version": "10.0.0",
+    "hash": "sha256-Sub3Thay/+eR84cEODk/nPh1oYIYtawvDX6r0duReqo="
+  },
+  {
+    "pname": "Microsoft.Extensions.Http",
+    "version": "10.0.0",
+    "hash": "sha256-gnsO9erEi7xLS3QwYukcrzPDpcUgRkNFnGzPARHVjrs="
   },
   {
     "pname": "Microsoft.Extensions.Http",
@@ -156,23 +226,23 @@
   },
   {
     "pname": "Microsoft.Extensions.Http.Diagnostics",
-    "version": "9.3.0",
-    "hash": "sha256-e1Sq+sEtZA5oVoB7WjICrFg9SZ1IiOp+CUpk5rJCSRU="
+    "version": "10.0.0",
+    "hash": "sha256-iSHUpSaOkxtup7x8mZIU2Zbq1udTM6SMfU9UUacCzbQ="
   },
   {
     "pname": "Microsoft.Extensions.Http.Resilience",
-    "version": "9.3.0",
-    "hash": "sha256-X5MIsQsvIGJ8DmsUZHyY9ZOSeKKI7LZ+WoHYDgaFERc="
+    "version": "10.0.0",
+    "hash": "sha256-U3q7JTZHEStIurWSa7LXDTY0udNKCt1Z6bHsYeZ+wl0="
   },
   {
     "pname": "Microsoft.Extensions.Logging",
-    "version": "9.0.3",
-    "hash": "sha256-w1cKHraJW+i7avhTseoJ+u0parEAJ7r51E2qvsuXZDA="
+    "version": "10.0.0",
+    "hash": "sha256-P+zPAadLL63k/GqK34/qChqQjY9aIRxZfxlB9lqsSrs="
   },
   {
     "pname": "Microsoft.Extensions.Logging.Abstractions",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-8ls/8wAEqMI5HEAeHz82tjmM9Xel/m3JymxEdUni6ig="
+    "version": "10.0.0",
+    "hash": "sha256-BnhgGZc01HwTSxogavq7Ueq4V7iMA3wPnbfRwQ4RhGk="
   },
   {
     "pname": "Microsoft.Extensions.Logging.Abstractions",
@@ -184,30 +254,20 @@
     "version": "8.0.2",
     "hash": "sha256-cHpe8X2BgYa5DzulZfq24rg8O2K5Lmq2OiLhoyAVgJc="
   },
-  {
-    "pname": "Microsoft.Extensions.Logging.Abstractions",
-    "version": "8.0.3",
-    "hash": "sha256-5MSY1aEwUbRXehSPHYw0cBZyFcUH4jkgabddxhMiu3Q="
-  },
-  {
-    "pname": "Microsoft.Extensions.Logging.Abstractions",
-    "version": "9.0.3",
-    "hash": "sha256-f/K3A9NPpCOTGlyha5DJf+OIjfAVWu+dJ4rAqQ+3sso="
-  },
   {
     "pname": "Microsoft.Extensions.Logging.Configuration",
-    "version": "8.0.1",
-    "hash": "sha256-E2JbJG2EXlv2HUWLi17kIkAL6RC9rC2E18C3gAyOuaE="
+    "version": "10.0.0",
+    "hash": "sha256-7/TWO1aq8hdgbcTEKDBWIjgSC9KpFN3kRnMX+12bOkU="
   },
   {
     "pname": "Microsoft.Extensions.ObjectPool",
-    "version": "8.0.14",
-    "hash": "sha256-qd+fKVbI6xjy8pm2JIPWljFjdphHQhxHv5sOLzsW1B8="
+    "version": "10.0.0",
+    "hash": "sha256-/9kfhdfvtM5YxRXIQ35NrUJfslXYqSRl83xgwi5tCWA="
   },
   {
     "pname": "Microsoft.Extensions.Options",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-TqviXNJUy9wTWwSLP6/QdfN6+VUg2HHR7skVrotPHGU="
+    "version": "10.0.0",
+    "hash": "sha256-j5MOqZSKeUtxxzmZjzZMGy0vELHdvPraqwTQQQNVsYA="
   },
   {
     "pname": "Microsoft.Extensions.Options",
@@ -219,50 +279,35 @@
     "version": "8.0.2",
     "hash": "sha256-AjcldddddtN/9aH9pg7ClEZycWtFHLi9IPe1GGhNQys="
   },
-  {
-    "pname": "Microsoft.Extensions.Options",
-    "version": "9.0.3",
-    "hash": "sha256-h4CLVA1cZdte8hd/bcb5dsi61MhAAScHRZU4LR2W5Z8="
-  },
   {
     "pname": "Microsoft.Extensions.Options.ConfigurationExtensions",
-    "version": "8.0.0",
-    "hash": "sha256-A5Bbzw1kiNkgirk5x8kyxwg9lLTcSngojeD+ocpG1RI="
+    "version": "10.0.0",
+    "hash": "sha256-XGAs5DxMvWnmjX8dqRwKY0vsuS40SHvsfJqB1rO4L7k="
   },
   {
     "pname": "Microsoft.Extensions.Primitives",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-E1rTPmEYK/ssqHS1CF7xUTRbFWuYxbelV9w2VRST01E="
+    "version": "10.0.0",
+    "hash": "sha256-Dup08KcptLjlnpN5t5//+p4n8FUTgRAq4n/w1s6us+I="
   },
   {
     "pname": "Microsoft.Extensions.Primitives",
     "version": "5.0.1",
     "hash": "sha256-e4uoLnUSmON4If9qJh78+4z14IzW9qCu5YkqLdQqWQU="
   },
-  {
-    "pname": "Microsoft.Extensions.Primitives",
-    "version": "8.0.0",
-    "hash": "sha256-FU8qj3DR8bDdc1c+WeGZx/PCZeqqndweZM9epcpXjSo="
-  },
-  {
-    "pname": "Microsoft.Extensions.Primitives",
-    "version": "9.0.3",
-    "hash": "sha256-iBwolNt6Lb2OqjDWBVnUj8vZDSID9EQw/JPI1xcuFus="
-  },
   {
     "pname": "Microsoft.Extensions.Resilience",
-    "version": "9.3.0",
-    "hash": "sha256-GegeV0A5RNlSJuA5Pq78hIE5tZJxQWXQZ3fVtQZRZr8="
+    "version": "10.0.0",
+    "hash": "sha256-QoyRVcgAIgnGVsCHcrIFyC7FQ5/6FF02i4gbfjT6LDg="
   },
   {
     "pname": "Microsoft.Extensions.Telemetry",
-    "version": "9.3.0",
-    "hash": "sha256-DCwTXtK81v+rDeRrRQQCdiiwCzZpQEEwwU1wVJgbEbs="
+    "version": "10.0.0",
+    "hash": "sha256-E3kFWu4wsXQEV5vzdjyN2OHJKxJVgub+6l+PKi5vltc="
   },
   {
     "pname": "Microsoft.Extensions.Telemetry.Abstractions",
-    "version": "9.3.0",
-    "hash": "sha256-X9hooaCbC2G5PT022Yj7iJgEzS/bFyBxJbh6QQJTOQU="
+    "version": "10.0.0",
+    "hash": "sha256-s8NcIOR2PKP0vlkWyKFMNZycwYLwgCkIU8DAcFLTge8="
   },
   {
     "pname": "Polly.Core",
@@ -349,21 +394,6 @@
     "version": "2.88.9",
     "hash": "sha256-kP5XM5GgwHGfNJfe4T2yO5NIZtiF71Ddp0pd1vG5V/4="
   },
-  {
-    "pname": "System.Diagnostics.DiagnosticSource",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-iI1z0kg5z1aTg3fTm/tMCXGQe7JqgOxaCf6Ac85G9+Y="
-  },
-  {
-    "pname": "System.Diagnostics.DiagnosticSource",
-    "version": "9.0.3",
-    "hash": "sha256-zgZF8BTksBk5oucX0j0Ju8qNG8oKJbIGio0GM+egT9M="
-  },
-  {
-    "pname": "System.IO.Pipelines",
-    "version": "8.0.0",
-    "hash": "sha256-LdpB1s4vQzsOODaxiKstLks57X9DTD5D6cPx8DE1wwE="
-  },
   {
     "pname": "System.Threading.RateLimiting",
     "version": "8.0.0",
diff --git a/pkgs/by-name/wh/wheelwizard/package.nix b/pkgs/by-name/wh/wheelwizard/package.nix
index a2717a9130b4..42da863a65f0 100644
--- a/pkgs/by-name/wh/wheelwizard/package.nix
+++ b/pkgs/by-name/wh/wheelwizard/package.nix
@@ -5,7 +5,6 @@
   dotnetCorePackages,
   fetchFromGitHub,
   makeWrapper,
-  avalonia,
   # Runtime dependencies
   libglvnd,
   # passthru
@@ -13,13 +12,13 @@
 }:
 buildDotnetModule (finalAttrs: {
   pname = "wheelwizard";
-  version = "2.4.11";
+  version = "2.5.1";
 
   src = fetchFromGitHub {
     owner = "TeamWheelWizard";
     repo = "WheelWizard";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-8Dex2PDgwnxKguf0jtC1T0+jm7bA7jDfvspwkiqJgUg";
+    hash = "sha256-lLGtzdE5MFfwwlGm5eA+MKYiY9oQhohtiVTqtmglols=";
   };
   postPatch = ''
     rm .config/dotnet-tools.json
@@ -27,20 +26,15 @@ buildDotnetModule (finalAttrs: {
 
   projectFile = "WheelWizard";
   buildType = "Release";
-  dotnet-sdk = dotnetCorePackages.sdk_8_0-bin;
-  dotnet-runtime = dotnetCorePackages.runtime_8_0-bin;
+  dotnet-sdk = dotnetCorePackages.sdk_10_0-bin;
+  dotnet-runtime = dotnetCorePackages.runtime_10_0-bin;
   nugetDeps = ./deps.json;
-  mapNuGetDependencies = true;
 
   nativeBuildInputs = [
     makeWrapper
     desktop-file-utils
   ];
 
-  buildInputs = [
-    avalonia
-  ];
-
   runtimeDeps = [
     libglvnd
   ];
@@ -49,7 +43,7 @@ buildDotnetModule (finalAttrs: {
     runHook preInstall
 
     mkdir -p $out/lib/wheelwizard $out/bin
-    cp -r WheelWizard/bin/Release/net8.0/*/* $out/lib/wheelwizard/
+    cp -r WheelWizard/bin/Release/net10.0/*/* $out/lib/wheelwizard/
 
     makeWrapper $out/lib/wheelwizard/WheelWizard $out/bin/WheelWizard \
       --prefix PATH : ${lib.makeBinPath [ finalAttrs.dotnet-runtime ]}

From e6500fd0c9ada5ceccaa8cf18d1a0eaba6a94fa0 Mon Sep 17 00:00:00 2001
From: Sergei Volkov <taranarmo@gmail.com>
Date: Thu, 13 Aug 2026 21:37:02 +0200
Subject: [PATCH 027/146] databricks-cli: 1.11.0 -> 1.14.0

Diff: https://github.com/databricks/cli/compare/v1.11.0...v1.14.0

Changelog: https://github.com/databricks/cli/releases/tag/v1.14.0
---
 pkgs/by-name/da/databricks-cli/package.nix | 12 +++---------
 1 file changed, 3 insertions(+), 9 deletions(-)

diff --git a/pkgs/by-name/da/databricks-cli/package.nix b/pkgs/by-name/da/databricks-cli/package.nix
index fc060d1c1fc0..a66160999bda 100644
--- a/pkgs/by-name/da/databricks-cli/package.nix
+++ b/pkgs/by-name/da/databricks-cli/package.nix
@@ -9,22 +9,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "databricks-cli";
-  version = "1.11.0";
+  version = "1.14.0";
 
   src = fetchFromGitHub {
     owner = "databricks";
     repo = "cli";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-ViMRqQ9lfek1ETCW30NDmIlG5dtPDmNv4F1EeDwlk6k=";
+    hash = "sha256-iR7fvhLHUVUBpVC2TlAkFcuTe0l+HJmLnmxhOYp8O7U=";
   };
 
-  # Otherwise these tests fail asserting that the version is 0.0.0-dev
-  postPatch = ''
-    substituteInPlace bundle/deploy/terraform/init_test.go \
-      --replace-fail "cli/0.0.0-dev" "cli/${finalAttrs.version}"
-  '';
-
-  vendorHash = "sha256-LjU4cWFiCrmNwRFt9rAFDQhRw1fN2lLK03/z7wTr+E4=";
+  vendorHash = "sha256-xKv7EYwyEeuxlM+fMa+FpIygWxswQSkuwGzQYWHHvy0=";
 
   subPackages = [ "." ];
 

From 3d6e8ffa5bad078e737832625a9a564989d0e29a Mon Sep 17 00:00:00 2001
From: Timo Gottszky <timogottszky+git@gmail.com>
Date: Thu, 27 Aug 2026 16:56:55 +0200
Subject: [PATCH 028/146] python3Packages.nameparser: 1.1.3 -> 2.1.0

---
 .../python-modules/nameparser/default.nix     | 41 ++++++++++++++-----
 1 file changed, 30 insertions(+), 11 deletions(-)

diff --git a/pkgs/development/python-modules/nameparser/default.nix b/pkgs/development/python-modules/nameparser/default.nix
index 35e71ad779ff..51a2795bae8d 100644
--- a/pkgs/development/python-modules/nameparser/default.nix
+++ b/pkgs/development/python-modules/nameparser/default.nix
@@ -1,29 +1,48 @@
 {
   lib,
   buildPythonPackage,
-  fetchPypi,
-  unittestCheckHook,
+  fetchFromGitHub,
+  pytestCheckHook,
+  setuptools,
+  hypothesis,
+  pytest-timeout,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "nameparser";
-  version = "1.1.3";
-  format = "setuptools";
+  version = "2.1.0";
+  pyproject = true;
 
-  src = fetchPypi {
-    inherit pname version;
-    hash = "sha256-qiQArXHM+AcGdbQDEaJXyTRln5GFSxVOG6bCZHYcBJ0=";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "derek73";
+    repo = "python-nameparser";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-MDzw2F9oH6cvvIYxYRv85+e61uGYFDWubfJ+WP8h7mQ=";
   };
 
-  nativeCheckInputs = [ unittestCheckHook ];
+  build-system = [ setuptools ];
+
+  nativeCheckInputs = [
+    pytestCheckHook
+    hypothesis
+    pytest-timeout
+  ];
+
+  disabledTests = [
+    # Flaky when build system is under dynamic load
+    "test_parse_cost_grows_no_worse_than_linearly"
+    "test_policy_gated_cost_grows_no_worse_than_linearly"
+  ];
 
   pythonImportsCheck = [ "nameparser" ];
 
   meta = {
     description = "Module for parsing human names into their individual components";
     homepage = "https://github.com/derek73/python-nameparser";
-    changelog = "https://github.com/derek73/python-nameparser/releases/tag/v${version}";
+    changelog = "https://github.com/derek73/python-nameparser/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.lgpl21Plus;
     maintainers = [ ];
   };
-}
+})

From 414d940b19debdd3e45023a186d79f8af4bb4171 Mon Sep 17 00:00:00 2001
From: Code Instable <68656923+code-instable@users.noreply.github.com>
Date: Fri, 28 Aug 2026 11:56:29 +0200
Subject: [PATCH 029/146] typstPackages: sync with Typst Universe as of
 2026-08-28

Updates typstPackages to match Typst Universe as of 2026-08-28, at commit 68b77e01d8e6f97ba8d6be976252d4752152a4fd.

It was regenerated with maintainers/scripts/update-typst-packages.py.

- Typst Packages data source: typst/packages@68b77e0
- Nixpkgs upstream reference: NixOS/nixpkgs@13ebd04
---
 .../typst/typst-packages-from-universe.toml   | 1918 +++++++++++++++++
 1 file changed, 1918 insertions(+)

diff --git a/pkgs/by-name/ty/typst/typst-packages-from-universe.toml b/pkgs/by-name/ty/typst/typst-packages-from-universe.toml
index 8b282ab01a86..a4bce7473dd7 100644
--- a/pkgs/by-name/ty/typst/typst-packages-from-universe.toml
+++ b/pkgs/by-name/ty/typst/typst-packages-from-universe.toml
@@ -98,6 +98,86 @@ license = [
 ]
 homepage = "https://git.sr.ht/~slowjo/typst-abbr"
 
+[abbrev."0.1.7"]
+url = "https://packages.typst.org/preview/abbrev-0.1.7.tar.gz"
+hash = "sha256-BNg9prcMY2683lwfBPlcqHYETKp2nxleGqEO45suYtY="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.6"]
+url = "https://packages.typst.org/preview/abbrev-0.1.6.tar.gz"
+hash = "sha256-6rskqBKyhiTXteNkvudDhJNTm19taPvDtBVjbpKYgxk="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.5"]
+url = "https://packages.typst.org/preview/abbrev-0.1.5.tar.gz"
+hash = "sha256-m8m1gOBbIyBuh5OloE/6IZxgWDeM7wKt4Y6RILnjRSE="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.4"]
+url = "https://packages.typst.org/preview/abbrev-0.1.4.tar.gz"
+hash = "sha256-M6viS4UJOJn6Gv/QYmqiWrq0El4KM/TEUbxCzyjGRJI="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.3"]
+url = "https://packages.typst.org/preview/abbrev-0.1.3.tar.gz"
+hash = "sha256-OIoG/8fJgno52d17UpFK4W2kGWAkFhNP4fR791EhITs="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.2"]
+url = "https://packages.typst.org/preview/abbrev-0.1.2.tar.gz"
+hash = "sha256-DqUbpD6FkAZ/X+EyGUDmjZKGTM2jL5/kOY2JY9MkEuE="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.1"]
+url = "https://packages.typst.org/preview/abbrev-0.1.1.tar.gz"
+hash = "sha256-iIGegaPmex1BDiTqy36HOPLiq0hmVbCvXpWEMjWXB+c="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.0"]
+url = "https://packages.typst.org/preview/abbrev-0.1.0.tar.gz"
+hash = "sha256-mlQtfnl5gq5Ta6EJiWmh3AzIirRh7iy5xMZv4oyZsS8="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
 [abiding-ifacconf."0.2.1"]
 url = "https://packages.typst.org/preview/abiding-ifacconf-0.2.1.tar.gz"
 hash = "sha256-2/ddqX3thtyv3FNzgJMR5BD50rqlx7VfZmTdojVuBHE="
@@ -809,6 +889,16 @@ license = [
 ]
 homepage = "https://github.com/a-mhamdi/ailab-isetbz"
 
+[aimesymb."0.1.0"]
+url = "https://packages.typst.org/preview/aimesymb-0.1.0.tar.gz"
+hash = "sha256-IS4L/iyj2RmY70q3wuNElnfH6E0kq9+7AXetbjWQa5U="
+typstDeps = []
+description = "Use AMSa and AMSb designs in mixed-font math equations"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/AprilGrimoire/aimesymb"
+
 [aio-studi-and-thesis."0.2.0"]
 url = "https://packages.typst.org/preview/aio-studi-and-thesis-0.2.0.tar.gz"
 hash = "sha256-nUWgmzV7hr+8GhqCoq9shi4CVDkXx1/T9piZFoKgZEI="
@@ -2490,6 +2580,16 @@ license = [
 ]
 homepage = "https://github.com/felsenhower/typst-autograph.git"
 
+[automosaic."0.1.0"]
+url = "https://packages.typst.org/preview/automosaic-0.1.0.tar.gz"
+hash = "sha256-yaGg1d0eXZAv4e/FfKuaVzCxlvuO//4no7kX70d05fE="
+typstDeps = []
+description = "Aspect-ratio-preserving nested tree layouts for photo mosaics, with automatic arrangement search"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Uspfe/typst-mosaic"
+
 [awesome-mff-cuni."0.1.0"]
 url = "https://packages.typst.org/preview/awesome-mff-cuni-0.1.0.tar.gz"
 hash = "sha256-Iw2kwl07R8vJh3FgZeW61FGNotQQwAY4VFuFhQCVhgk="
@@ -2536,6 +2636,30 @@ license = [
 ]
 homepage = "https://github.com/rezaarezvan/axiomst"
 
+[axodendron."0.1.1"]
+url = "https://packages.typst.org/preview/axodendron-0.1.1.tar.gz"
+hash = "sha256-YvjEeUi8aBSQucDZAaouGAEZlTJMiMSbkdNx+tb8ywM="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Analyze and visualize neuronal morphologies from SWC files"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/rice8y/axodendron"
+
+[axodendron."0.1.0"]
+url = "https://packages.typst.org/preview/axodendron-0.1.0.tar.gz"
+hash = "sha256-G6C//0Nsuw35Hb7uRs9ROxRcs9KPrq1O7Qcig75rv9A="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Analyze and visualize neuronal morphologies from SWC files"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/rice8y/axodendron"
+
 [babble-bubbles."0.1.0"]
 url = "https://packages.typst.org/preview/babble-bubbles-0.1.0.tar.gz"
 hash = "sha256-orOm67ydNPmIangnUNiiHiPU6Y5ivQ4KEmCWkFdwdw0="
@@ -3333,6 +3457,16 @@ license = [
 ]
 homepage = "https://github.com/Tikitikitikidesuka/typst-upm-report"
 
+[beautiframe."0.4.5"]
+url = "https://packages.typst.org/preview/beautiframe-0.4.5.tar.gz"
+hash = "sha256-+SJVxd+97tYdo4MYMz/dOhyHKZfVry5dsurNnB15qeY="
+typstDeps = []
+description = "Beautiful theorem-like environments with 9 styles and French math preset"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-beautiframe"
+
 [beautiframe."0.4.0"]
 url = "https://packages.typst.org/preview/beautiframe-0.4.0.tar.gz"
 hash = "sha256-Ler8KNZmq+GEGewLhKPeEgADDX+ih2ZLoz1EQNCHYg8="
@@ -3825,6 +3959,18 @@ license = [
 ]
 homepage = "https://github.com/daleione/blockcell"
 
+[blockst."0.3.0"]
+url = "https://packages.typst.org/preview/blockst-0.3.0.tar.gz"
+hash = "sha256-1BLxds2Z7DtVMPrJ6YmDx+4eMEbTpUO/HnPi4GQn/EM="
+typstDeps = [
+    "manifesto_0_2_0",
+]
+description = "Render Scratch-style blocks for educational documents"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Loewe1000/blockst"
+
 [blockst."0.2.1"]
 url = "https://packages.typst.org/preview/blockst-0.2.1.tar.gz"
 hash = "sha256-7wufSSdzfR6fGlFrORDuqFyaf670Ae2j/um0W94mKu0="
@@ -4090,6 +4236,24 @@ license = [
     "Apache-2.0",
 ]
 
+[bookly."5.0.0"]
+url = "https://packages.typst.org/preview/bookly-5.0.0.tar.gz"
+hash = "sha256-WmGR5m8EVqPdj399fNFdvFm/OZYWu8rO3yvNLSpo5kA="
+typstDeps = [
+    "equate_0_3_3",
+    "hydra_0_6_3",
+    "marginalia_0_3_1",
+    "showybox_2_0_4",
+    "suboutline_0_3_0",
+    "suboutline_0_3_1",
+    "subpar_0_2_2",
+]
+description = "A clean, customizable template for writing and publishing structured books with front matter, chapters, and consistent styling"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/maucejo/bookly"
+
 [bookly."4.1.3"]
 url = "https://packages.typst.org/preview/bookly-4.1.3.tar.gz"
 hash = "sha256-fjWL69uI5/qVtbMldKuiemwKL83BXXsn2Lz0kEBMLtY="
@@ -5153,6 +5317,16 @@ license = [
 ]
 homepage = "https://github.com/TAJD/calendaring"
 
+[calepin."0.1.0"]
+url = "https://packages.typst.org/preview/calepin-0.1.0.tar.gz"
+hash = "sha256-glSfRPXxw4wx4xz03M2gmgfOKg9ixVA99rTC4YWVoSE="
+typstDeps = []
+description = "Computational notebooks and static websites with executable code chunks in R, Python, and Julia"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/vincentarelbundock/calepin"
+
 [calepin."0.0.1"]
 url = "https://packages.typst.org/preview/calepin-0.0.1.tar.gz"
 hash = "sha256-W81to8aoLmCYjPucu2XVW/XcSYVTmzypwcTqsLI/cx4="
@@ -5275,6 +5449,16 @@ license = [
 ]
 homepage = "https://github.com/knuesel/callisto"
 
+[calloutly."1.2.0"]
+url = "https://packages.typst.org/preview/calloutly-1.2.0.tar.gz"
+hash = "sha256-kZH/mMGbpeHmpzC1AImPpdbZ6qbCdtg9zBXcVWYhTiU="
+typstDeps = []
+description = "Create customizable Markdown-style Callouts"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Alpha9463/typst-callout"
+
 [calloutly."1.1.0"]
 url = "https://packages.typst.org/preview/calloutly-1.1.0.tar.gz"
 hash = "sha256-0F6IRJa4trVMSOCNLZ1UzfQ4zmvkP7gxfHL69jk3VdA="
@@ -5417,6 +5601,16 @@ license = [
 ]
 homepage = "https://github.com/SchrodingerBlume/typst-cap-able"
 
+[cardinal-su-thesis."0.1.0"]
+url = "https://packages.typst.org/preview/cardinal-su-thesis-0.1.0.tar.gz"
+hash = "sha256-xlRh6zqZRpSMGtQvdELqnxqjoHwreUETPMd6qRewdSw="
+typstDeps = []
+description = "Ph.D. dissertation or Engineer thesis at Stanford"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/mayasheth/cardinal-su-thesis"
+
 [cartao."0.2.0"]
 url = "https://packages.typst.org/preview/cartao-0.2.0.tar.gz"
 hash = "sha256-EN47shdewOszij89m1kqWciX9C27PGTIfpJsV29zA+s="
@@ -5469,6 +5663,19 @@ license = [
 ]
 homepage = "https://github.com/jiang131072/casual-szu-report"
 
+[caterpillar."0.1.0"]
+url = "https://packages.typst.org/preview/caterpillar-0.1.0.tar.gz"
+hash = "sha256-RNb090/yhlUR4Mo6i2Qj2gaErEbUzVJY24J6rwbXF+4="
+typstDeps = [
+    "beautiframe_0_4_0",
+    "tidy_0_4_3",
+]
+description = "Parse content to create your own syntactic rules"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/retroflexivity/typst-caterpillar"
+
 [catiche."0.1.0"]
 url = "https://packages.typst.org/preview/catiche-0.1.0.tar.gz"
 hash = "sha256-w6odvmwn4ouT7Vx4A1kWg47eob1Xlv/dz85SZM9jjv8="
@@ -5541,6 +5748,16 @@ license = [
 ]
 homepage = "https://github.com/jneug/typst-ccicons"
 
+[cekinar."0.1.0"]
+url = "https://packages.typst.org/preview/cekinar-0.1.0.tar.gz"
+hash = "sha256-4hTBVs16twIlk/wAagQuNeA3gfv+DpEIguCwSC0PRGY="
+typstDeps = []
+description = "Slovenian UPN QR payment slips for completing payment orders"
+license = [
+    "EUPL-1.2",
+]
+homepage = "https://codeberg.org/hpcfzl/cekinar"
+
 [cellpress-unofficial."0.1.1"]
 url = "https://packages.typst.org/preview/cellpress-unofficial-0.1.1.tar.gz"
 hash = "sha256-tcztgYuJ2aezrNldO2A15GA/uYXh7bcKxon0byhDTUY="
@@ -6423,6 +6640,18 @@ license = [
 ]
 homepage = "https://github.com/JeppeKlitgaard/chomp"
 
+[chordish."0.2.3"]
+url = "https://packages.typst.org/preview/chordish-0.2.3.tar.gz"
+hash = "sha256-ZNNvYdrnY7xv48wXqNnoSsMUGnQ0j4F9PptS5XZwhYU="
+typstDeps = [
+    "conchord_0_4_0",
+]
+description = "A simple template for creating guitar and ukulele chord sheets"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/soxfox42/chordish"
+
 [chordish."0.2.2"]
 url = "https://packages.typst.org/preview/chordish-0.2.2.tar.gz"
 hash = "sha256-oajeuplN1X9jATQKp/VJYDlDQU+j9AbDwEzw3KhaM9c="
@@ -7153,6 +7382,28 @@ license = [
 ]
 homepage = "https://github.com/ppgsi-lab/classic-ppgsi"
 
+[classic-thesis-uct."0.1.3"]
+url = "https://packages.typst.org/preview/classic-thesis-uct-0.1.3.tar.gz"
+hash = "sha256-WhueF8XXUzbgsQU5cfqIfsadJxxDlPI9H1G/h+GYGbM="
+typstDeps = []
+description = "PhD thesis at the University of Cape Town in the Classic Thesis tradition"
+license = [
+    "GPL-2.0-or-later",
+    "MIT-0",
+]
+homepage = "https://github.com/james-hepworth/classic-thesis-uct"
+
+[classic-thesis-uct."0.1.2"]
+url = "https://packages.typst.org/preview/classic-thesis-uct-0.1.2.tar.gz"
+hash = "sha256-QWPtdFBpTWQ0p5bPSBoeZaRXCBryN9kGY/821+B2o3g="
+typstDeps = []
+description = "PhD thesis at the University of Cape Town in the Classic Thesis tradition"
+license = [
+    "GPL-2.0-or-later",
+    "MIT-0",
+]
+homepage = "https://github.com/james-hepworth/classic-thesis-uct"
+
 [classic-thesis-uct."0.1.1"]
 url = "https://packages.typst.org/preview/classic-thesis-uct-0.1.1.tar.gz"
 hash = "sha256-LXxM8JARS/v/X0IwmpKFXdSMlB9wJTxbWfFL0C0Z3Xk="
@@ -7478,6 +7729,20 @@ license = [
 ]
 homepage = "https://github.com/TomPlanche/clean-cnam-template"
 
+[clean-dhbw."0.6.0"]
+url = "https://packages.typst.org/preview/clean-dhbw-0.6.0.tar.gz"
+hash = "sha256-jyC/gDNNk3H9znOu9Lh9FJyMonZ/Q9zwUoYjCJQzA+E="
+typstDeps = [
+    "codelst_2_0_2",
+    "glossarium_0_5_10",
+    "hydra_0_6_2",
+]
+description = "A Typst Template for DHBW"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/roland-KA/clean-dhbw-typst-template"
+
 [clean-dhbw."0.5.0"]
 url = "https://packages.typst.org/preview/clean-dhbw-0.5.0.tar.gz"
 hash = "sha256-tx5RLraOj+CQXMAnXxUL+WQcKIMymNldv9N/r8iBmFc="
@@ -7986,6 +8251,21 @@ license = [
 ]
 homepage = "https://github.com/sebaseb98/clean-math-thesis"
 
+[clean-othaw."0.3.7"]
+url = "https://packages.typst.org/preview/clean-othaw-0.3.7.tar.gz"
+hash = "sha256-efJTz3Jo1Rvz+fDQV+Pbt/VgEhgK8JrikYc0ifgPbb0="
+typstDeps = [
+    "codelst_2_0_2",
+    "glossarium_0_5_6",
+    "hydra_0_6_1",
+    "muchpdf_0_1_2",
+]
+description = "Thesis at OTH Amberg-Weiden"
+license = [
+    "MIT",
+]
+homepage = "https://codeberg.org/ruebe5w/clean-othaw"
+
 [clean-othaw."0.3.6"]
 url = "https://packages.typst.org/preview/clean-othaw-0.3.6.tar.gz"
 hash = "sha256-Ib8YLb136qPfYY4GJnnYFL68UwcCeb2ayv5n0bMU6jc="
@@ -9006,6 +9286,22 @@ license = [
 ]
 homepage = "https://github.com/micheledusi/Combo"
 
+[community-cnam-thesis."0.1.1"]
+url = "https://packages.typst.org/preview/community-cnam-thesis-0.1.1.tar.gz"
+hash = "sha256-oxGKFwM69jYl4niJsRVhhzpPPDduERuM2UG18f8P+AY="
+typstDeps = [
+    "bookly_5_0_0",
+    "cheq_0_4_0",
+    "lovelace_0_3_1",
+    "marginalia_0_3_1",
+    "zebraw_0_6_3",
+]
+description = "Template for writing theses of Cnam"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/maucejo/community-cnam-thesis"
+
 [community-cnam-thesis."0.1.0"]
 url = "https://packages.typst.org/preview/community-cnam-thesis-0.1.0.tar.gz"
 hash = "sha256-iy5QmU8j+3Ch/ufX/stXh6GMCmNsy1p+FosmlfLFm8w="
@@ -9101,6 +9397,16 @@ license = [
 ]
 homepage = "https://github.com/shonk-software/community-ostfalia-thesis"
 
+[community-pens-report."0.1.0"]
+url = "https://packages.typst.org/preview/community-pens-report-0.1.0.tar.gz"
+hash = "sha256-gdPQBVC0VrV4O3UOAENO9Sg2+OVdhHLLHkWYkKgXdbM="
+typstDeps = []
+description = "Final project report at Politeknik Elektronika Negeri Surabaya (PENS"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/azzamjhd/community-pens-report"
+
 [commute."0.3.0"]
 url = "https://packages.typst.org/preview/commute-0.3.0.tar.gz"
 hash = "sha256-HmdNs0aGWjv76Fa6HvSc6xijfKIyQx/75TT9Ui5Uo04="
@@ -9300,6 +9606,46 @@ license = [
 ]
 homepage = "https://github.com/ODAncona/confusion-matrix"
 
+[conic-toan."0.3.6"]
+url = "https://packages.typst.org/preview/conic-toan-0.3.6.tar.gz"
+hash = "sha256-vZ/Ok/0+YDJqb72nu/MNYKRyu7WZ0yLNPvukW6ovmtQ="
+typstDeps = []
+description = "Draw math figures, graphs and variation tables"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Thutran1891/conic-toan"
+
+[conic-toan."0.3.5"]
+url = "https://packages.typst.org/preview/conic-toan-0.3.5.tar.gz"
+hash = "sha256-uVEypjBoetXaJbQcO5R0fgsx8R1D2ImPIBxrcD88WnI="
+typstDeps = []
+description = "Draw math figures, graphs and variation tables"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Thutran1891/conic-toan"
+
+[conic-toan."0.3.4"]
+url = "https://packages.typst.org/preview/conic-toan-0.3.4.tar.gz"
+hash = "sha256-1bml03WFC+YBTf9wbnOiEuOIhM+jVa1/zUBcwqaqKgE="
+typstDeps = []
+description = "Draw math figures, graphs and variation tables"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Thutran1891/conic-toan"
+
+[conic-toan."0.3.3"]
+url = "https://packages.typst.org/preview/conic-toan-0.3.3.tar.gz"
+hash = "sha256-/pB+EA0+rY/eGxQ85C7Xlq4iy2RSMshj8dSt8hu9IAk="
+typstDeps = []
+description = "Draw math figures, graphs and variation tables"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Thutran1891/conic-toan"
+
 [conic-toan."0.3.2"]
 url = "https://packages.typst.org/preview/conic-toan-0.3.2.tar.gz"
 hash = "sha256-cbYqa8bUsPq6pOBToXK9A8iCWoUO2nxBuXa/eEHeup4="
@@ -9741,6 +10087,18 @@ license = [
 ]
 homepage = "https://github.com/hpdell/ctyp"
 
+[ctz-euclide."0.3.0"]
+url = "https://packages.typst.org/preview/ctz-euclide-0.3.0.tar.gz"
+hash = "sha256-ES55rmM8ZLvy/h3mPwSy/3fRmpavFYjNp/GzxSSfVQo="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Euclidean geometry constructions and drawing, a port of the LaTeX tkz-euclide package"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-ctz-euclide"
+
 [ctz-euclide."0.2.0"]
 url = "https://packages.typst.org/preview/ctz-euclide-0.2.0.tar.gz"
 hash = "sha256-WogIAB8HkAcHRP36khFs6kWEej/vROs/LlcpEzdobSA="
@@ -10315,6 +10673,16 @@ license = [
 ]
 homepage = "https://github.com/Otto-AA/dashy-todo"
 
+[datehog."0.1.1"]
+url = "https://packages.typst.org/preview/datehog-0.1.1.tar.gz"
+hash = "sha256-sGhaHzOHMPlC9Ko36b+dQ/lk//A+3OW6Fbeed/CaPCA="
+typstDeps = []
+description = "Date parsing and epoch arithmetic"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/zral0kh/datehog"
+
 [dati-basati."0.1.0"]
 url = "https://packages.typst.org/preview/dati-basati-0.1.0.tar.gz"
 hash = "sha256-Zkhz3Q9/t234Sknc6czzI26euRPv0a4NWSTmnkJZBxQ="
@@ -10507,6 +10875,16 @@ license = [
 ]
 homepage = "https://github.com/YDX-2147483647/typst-debug-city"
 
+[decasify."0.11.4"]
+url = "https://packages.typst.org/preview/decasify-0.11.4.tar.gz"
+hash = "sha256-uyXiHzXNaQB9rNe/DzMt6Z27xglFDRkq/LaaJlJMsjk="
+typstDeps = []
+description = "Locale and style-guide aware text casing functions for natural language prose"
+license = [
+    "LGPL-3.0-only",
+]
+homepage = "https://github.com/alerque/decasify"
+
 [decasify."0.11.3"]
 url = "https://packages.typst.org/preview/decasify-0.11.3.tar.gz"
 hash = "sha256-1lp39se+LMexQuikdREu1CKxVq2kOsIiqlhVAR/5Hpg="
@@ -10748,6 +11126,24 @@ license = [
 ]
 homepage = "https://github.com/ecomaikgolf/typst-isec-master-thesis-template/"
 
+[definitely-not-tue-thesis."0.1.0"]
+url = "https://packages.typst.org/preview/definitely-not-tue-thesis-0.1.0.tar.gz"
+hash = "sha256-vCGDiIJCUwIPR437Y4QklwUU0WZ3UPvmBeBU4hUMevA="
+typstDeps = [
+    "cetz_0_5_2",
+    "drafting_0_2_2",
+    "glossarium_0_5_10",
+    "hydra_0_6_3",
+    "i-figured_0_2_4",
+    "in-dexter_0_7_2",
+    "retrofit_0_2_0",
+]
+description = "An unofficial, community-built thesis template in the TU/e house style"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/alikaansun/TUe_typst_thesis_template"
+
 [definitely-not-tuw-thesis."0.2.0"]
 url = "https://packages.typst.org/preview/definitely-not-tuw-thesis-0.2.0.tar.gz"
 hash = "sha256-iCD1hRTNh+5ok8+QRCwRbNIZN/SwqdE4i566zYExHJ8="
@@ -10911,6 +11307,22 @@ license = [
     "MIT-0",
 ]
 
+[dhbw-oderso."2.4.0"]
+url = "https://packages.typst.org/preview/dhbw-oderso-2.4.0.tar.gz"
+hash = "sha256-qlKEZ7vVY2nQujhkJlKe0aaTpR78tIhqVRtV11QxREw="
+typstDeps = [
+    "codly_1_3_0",
+    "drafting_0_2_2",
+    "glossarium_0_5_10",
+    "hydra_0_6_3",
+    "linguify_0_5_0",
+]
+description = "All kinds of theses at DHBW and IHK"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/dhbw-typst/oderso-template"
+
 [dhbw-oderso."2.3.0"]
 url = "https://packages.typst.org/preview/dhbw-oderso-2.3.0.tar.gz"
 hash = "sha256-gCyXWsz7Yzmh5I2poE/KMtS0G3IiKx6AQWTP1H18Pt8="
@@ -11298,6 +11710,24 @@ license = [
 ]
 homepage = "https://github.com/ParaN3xus/digestify"
 
+[digidraw."0.9.3"]
+url = "https://packages.typst.org/preview/digidraw-0.9.3.tar.gz"
+hash = "sha256-jkP0kbUblXRw7fCxJDy4QgM6X9i3MzvsqjMLZvxWQV8="
+typstDeps = [
+    "alertoni_1_0_0",
+    "cetz_0_5_2",
+    "chribel_1_2_0",
+    "cmarker_0_1_10",
+    "tableau-icons_0_344_0",
+    "tidy_0_4_3",
+    "tiptoe_0_4_0",
+]
+description = "Drawing digital timing diagrams with style and (almost all of) the WaveDrom syntax"
+license = [
+    "EUPL-1.2",
+]
+homepage = "https://codeberg.org/joelvonrotz/typst-digidraw"
+
 [digidraw."0.9.2"]
 url = "https://packages.typst.org/preview/digidraw-0.9.2.tar.gz"
 hash = "sha256-5zjaQF5VludfGiYTOH/u1iphWIcMtNzd1jgaoSwWzB0="
@@ -11496,6 +11926,28 @@ license = [
     "MIT",
 ]
 
+[dorodango."0.2.0"]
+url = "https://packages.typst.org/preview/dorodango-0.2.0.tar.gz"
+hash = "sha256-AcnuSXHRThxuWjpyuGRKxHfJtq2lISkxlmGk4libeOQ="
+typstDeps = [
+    "tidy_0_4_3",
+]
+description = "dorodango: a package for drawing squircles"
+license = [
+    "MIT",
+]
+
+[dorodango."0.1.0"]
+url = "https://packages.typst.org/preview/dorodango-0.1.0.tar.gz"
+hash = "sha256-2IHpqOMGtDeE7XmcZrbOl69B8OrUQm+luFqpbYZ9Uu8="
+typstDeps = [
+    "tidy_0_4_3",
+]
+description = "dorodango: a package for drawing squircles"
+license = [
+    "MIT",
+]
+
 [dovenv."0.1.0"]
 url = "https://packages.typst.org/preview/dovenv-0.1.0.tar.gz"
 hash = "sha256-H0yY6dW6FwFTkTE6K8A0UmjSbPbIFuh+RH2ggD6JbZw="
@@ -11723,6 +12175,32 @@ license = [
 ]
 homepage = "https://github.com/kn0kh/easy-abi-ausarbeitung"
 
+[easy-hgb-thesis."0.2.1"]
+url = "https://packages.typst.org/preview/easy-hgb-thesis-0.2.1.tar.gz"
+hash = "sha256-aBfZSoLxTJ3A8LaDOzNWhSdkVggEKBfIXKIluPZVhqQ="
+typstDeps = [
+    "datify_1_3_0",
+    "lilaq_0_6_0",
+]
+description = "Opinionated bachelor's, master's thesis or protocols for the FH Upper Austria, especially campus Hagenberg"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/TimerErTim/hagenberg-thesis-typst"
+
+[easy-hgb-thesis."0.2.0"]
+url = "https://packages.typst.org/preview/easy-hgb-thesis-0.2.0.tar.gz"
+hash = "sha256-r9/ZADTm2NdPN0EenHigv6VohE71y+9UKnICuyLSOsc="
+typstDeps = [
+    "datify_1_3_0",
+    "lilaq_0_6_0",
+]
+description = "Opinionated bachelor's, master's thesis or protocols for the FH Upper Austria, especially campus Hagenberg"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/TimerErTim/hagenberg-thesis-typst"
+
 [easy-hgb-thesis."0.1.0"]
 url = "https://packages.typst.org/preview/easy-hgb-thesis-0.1.0.tar.gz"
 hash = "sha256-J4Vw3/4nD8qjz+3D3xzrSKALbmaMWtCVFc6m8JZPEbY="
@@ -11788,6 +12266,20 @@ license = [
 ]
 homepage = "https://github.com/swaits/typst-collection"
 
+[easy-wi-hwr."0.1.3"]
+url = "https://packages.typst.org/preview/easy-wi-hwr-0.1.3.tar.gz"
+hash = "sha256-6MQykfKe5b3xYbBIoLDRRTeazmmavDsY0TeXZ4x+DVU="
+typstDeps = [
+    "glossarium_0_5_10",
+    "linguify_0_5_0",
+    "mmdr_0_2_2",
+]
+description = "Paper template for HWR Berlin (Wirtschaftsinformatik"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/lultoni/easy-wi-hwr"
+
 [easy-wi-hwr."0.1.2"]
 url = "https://packages.typst.org/preview/easy-wi-hwr-0.1.2.tar.gz"
 hash = "sha256-SzbOoiEBE2xXfQhMvWdZ+8YxtpXR0DJDraXd4+laIUE="
@@ -12728,6 +13220,16 @@ license = [
     "GPL-3.0-or-later",
 ]
 
+[endfield-doc."0.1.2"]
+url = "https://packages.typst.org/preview/endfield-doc-0.1.2.tar.gz"
+hash = "sha256-XeAR4WF1vTYe+x8Fk+Fmeyf5jRcNAbORWINadWBlqrM="
+typstDeps = []
+description = "A4 document theme styled after the Arknights: Endfield aesthetic"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Ives-Natsume/typst-endfield-doc-theme.git"
+
 [endfield-doc."0.1.1"]
 url = "https://packages.typst.org/preview/endfield-doc-0.1.1.tar.gz"
 hash = "sha256-xruMhvMEVHx2aglikhTZwMyV5sLJIzS0Usaf9m08e+Y="
@@ -12760,6 +13262,19 @@ license = [
 ]
 homepage = "https://github.com/pawawa-pururun/energy-dia"
 
+[enja-bib."0.2.0"]
+url = "https://packages.typst.org/preview/enja-bib-0.2.0.tar.gz"
+hash = "sha256-CpDxJK9cvikVmCc4WvcktVoTPtQejVfBVlV7FT8BnwI="
+typstDeps = [
+    "auto-jrubby_0_3_4",
+    "citegeist_0_3_1",
+]
+description = "A package for handling BibTeX that includes both English and Japanese"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/tkrhsmt/typst-BibTeX-jp"
+
 [enja-bib."0.1.0"]
 url = "https://packages.typst.org/preview/enja-bib-0.1.0.tar.gz"
 hash = "sha256-JJNYAVj8FM+rf8EpjHiF3sPSjDKIjTn5UpDZ1Qqe5yI="
@@ -13028,6 +13543,17 @@ license = [
 ]
 homepage = "https://github.com/EsotericSquishyy/ergo"
 
+[eskd-drafting."0.1.0"]
+url = "https://packages.typst.org/preview/eskd-drafting-0.1.0.tar.gz"
+hash = "sha256-wR3qHKTd3LeGfLxDLzAhBDhVe4cbEAICAG9X7mOR/vw="
+typstDeps = []
+description = "Draft ESKD technical drawings and documentation layouts"
+license = [
+    "MIT",
+    "MIT-0",
+]
+homepage = "https://github.com/runasexe/eskd-drafting"
+
 [esotefy."1.0.0"]
 url = "https://packages.typst.org/preview/esotefy-1.0.0.tar.gz"
 hash = "sha256-Yaex2nIpddDiJoTyV0Sl7oWltnxD4MfSIHoNbQuFv+s="
@@ -13038,6 +13564,17 @@ license = [
 ]
 homepage = "git@github.com:Thumuss/brainfuck.git"
 
+[ethz-cadmo-inspired-thesis."0.2.0"]
+url = "https://packages.typst.org/preview/ethz-cadmo-inspired-thesis-0.2.0.tar.gz"
+hash = "sha256-GWx3tkQDhViKJ19Xt7I/BeMgckD2lYjLPM+PXrCCW0U="
+typstDeps = [
+    "wordometer_0_1_5",
+]
+description = "Thesis inspired by the ETHZ CADMO group"
+license = [
+    "MIT",
+]
+
 [ethz-cadmo-inspired-thesis."0.1.0"]
 url = "https://packages.typst.org/preview/ethz-cadmo-inspired-thesis-0.1.0.tar.gz"
 hash = "sha256-mDZleaAZ5qHgtrZufME7Hv9xmqpAqHrSeGVZe1jQ8wQ="
@@ -13273,6 +13810,32 @@ license = [
 ]
 homepage = "https://github.com/wensimehrp/exemel"
 
+[exercise-bank."0.6.3"]
+url = "https://packages.typst.org/preview/exercise-bank-0.6.3.tar.gz"
+hash = "sha256-IUXanpSZDisePhtgRbTfSimxtg/mZ3RG7mKPZnHv/sk="
+typstDeps = [
+    "tiaoma_0_3_0",
+    "wrap-it_0_1_1",
+]
+description = "Exercise management with solutions, metadata, filtering, and exercise banks for educational documents"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-exercise-bank"
+
+[exercise-bank."0.6.2"]
+url = "https://packages.typst.org/preview/exercise-bank-0.6.2.tar.gz"
+hash = "sha256-9jrZdquCfI/bDAUHB/eRm4MXx+rrtflsZmClsqkCc5k="
+typstDeps = [
+    "tiaoma_0_3_0",
+    "wrap-it_0_1_1",
+]
+description = "Exercise management with solutions, metadata, filtering, and exercise banks for educational documents"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-exercise-bank"
+
 [exercise-bank."0.6.1"]
 url = "https://packages.typst.org/preview/exercise-bank-0.6.1.tar.gz"
 hash = "sha256-+ZzncBWAEE/D8+iHiBGw05FXJL9ws3aPGZqUDxu0zKs="
@@ -13409,6 +13972,26 @@ license = [
 ]
 homepage = "https://github.com/hongjr03/typst-xml-table-parser"
 
+[exp-resume."0.1.2"]
+url = "https://packages.typst.org/preview/exp-resume-0.1.2.tar.gz"
+hash = "sha256-w5nQbLaXfD+9+MEU0FlHy5e5OaDQwr0kdmCCpRtoLuc="
+typstDeps = []
+description = "ATS-friendly resume with configurable sections and contact links"
+license = [
+    "Unlicense",
+]
+homepage = "https://github.com/tahzeer/exp-resume-template"
+
+[exp-resume."0.1.1"]
+url = "https://packages.typst.org/preview/exp-resume-0.1.1.tar.gz"
+hash = "sha256-UcAgWAdFeFdADSWiCAdUvygr0o3ImGmGRFflg3NlZRY="
+typstDeps = []
+description = "ATS-friendly resume with configurable sections and contact links"
+license = [
+    "Unlicense",
+]
+homepage = "https://github.com/tahzeer/exp-resume-template"
+
 [exzellenz-tum-thesis."0.2.1"]
 url = "https://packages.typst.org/preview/exzellenz-tum-thesis-0.2.1.tar.gz"
 hash = "sha256-Pf2StcgjknXNI4JbpNnEnv4O2N+e2tAQiYVJV6zm3q0="
@@ -13927,6 +14510,33 @@ license = [
 ]
 homepage = "https://github.com/yangyuchenhahaha/-typst-"
 
+[fei-thesis."0.0.2"]
+url = "https://packages.typst.org/preview/fei-thesis-0.0.2.tar.gz"
+hash = "sha256-1yVlrzSMbLGEzVZHq+U1WEI4fdqw3yfw5qjyVeM4mZM="
+typstDeps = [
+    "abbr_0_3_1",
+    "chemformula_0_1_3",
+    "mitex_0_2_7",
+    "numbly_0_1_0",
+    "physica_0_9_8",
+]
+description = "Official template for writing thesis on Slovak University of Technology in Bratislava Faculty of Electrical Engineering and Information Technology  (STU FEI"
+license = [
+    "MIT",
+]
+
+[fernmind."0.1.0"]
+url = "https://packages.typst.org/preview/fernmind-0.1.0.tar.gz"
+hash = "sha256-x4qTTCf8gyEd4dgu/GkPFcV2iHzEKhM/hZ7rbzVpSSo="
+typstDeps = [
+    "cuti_0_4_0",
+    "tablem_0_3_0",
+]
+description = "Forest-green theme for Chinese documents with light and dark modes"
+license = [
+    "MIT",
+]
+
 [ferrmat."0.1.2"]
 url = "https://packages.typst.org/preview/ferrmat-0.1.2.tar.gz"
 hash = "sha256-qiMKwxldWpW0nPtggaGu/TISLPJ5W5hTVPmWriySDzo="
@@ -14112,6 +14722,16 @@ license = [
 ]
 homepage = "https://github.com/gauthamrmn/fibber"
 
+[ficons."0.1.0"]
+url = "https://packages.typst.org/preview/ficons-0.1.0.tar.gz"
+hash = "sha256-Wr8olFNzvBSOp3cjOuTSNvm6f0t3gly18VElvMq9Y6o="
+typstDeps = []
+description = "Open source vector icons"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/BalderHolst/typst-feather-icons"
+
 [fig-plucker."0.1.0"]
 url = "https://packages.typst.org/preview/fig-plucker-0.1.0.tar.gz"
 hash = "sha256-RhOEdnOB1oa4p9RC9vuW8j3Zxfl7k0q/uyoxLNZRXWQ="
@@ -15176,6 +15796,19 @@ license = [
 ]
 homepage = "https://github.com/Brndan/lettre"
 
+[forum-acusticum-2026."0.1.1"]
+url = "https://packages.typst.org/preview/forum-acusticum-2026-0.1.1.tar.gz"
+hash = "sha256-48/DTWeE1df0YccJi6wbLzqRuNrslO/hDc32u1w2asc="
+typstDeps = [
+    "pubmatter_0_2_2",
+    "unify_0_8_1",
+]
+description = "Proceedings of the EAA Forum Acusticum 2026 conference in Graz, Austria"
+license = [
+    "MIT",
+]
+homepage = "https://git.iem.at/fa26-templates/fa26-typst-template"
+
 [forum-acusticum-2026."0.1.0"]
 url = "https://packages.typst.org/preview/forum-acusticum-2026-0.1.0.tar.gz"
 hash = "sha256-41a7WuO6FdbApZP3n7mhv7+m4pkwDjtw1wAFdzCBNqo="
@@ -15389,6 +16022,26 @@ license = [
 ]
 homepage = "https://github.com/Freezy727/freeCV"
 
+[fretwork."0.3.0"]
+url = "https://packages.typst.org/preview/fretwork-0.3.0.tar.gz"
+hash = "sha256-ZMyRDg4SgFVYNUooVDJlx+V2cjhS8iQgEoR2hOiSFk8="
+typstDeps = []
+description = "Publication-quality guitar tablature: rhythm stems, technique symbols and ASCII tab import"
+license = [
+    "EUPL-1.2",
+]
+homepage = "https://github.com/snaggen/fretwork"
+
+[fretwork."0.2.0"]
+url = "https://packages.typst.org/preview/fretwork-0.2.0.tar.gz"
+hash = "sha256-NLpBquTDO47vtmtFQaWPS3DVPSsVE/IHlvJQpbn5l2w="
+typstDeps = []
+description = "Publication-quality guitar tablature: rhythm stems, technique symbols and ASCII tab import"
+license = [
+    "EUPL-1.2",
+]
+homepage = "https://github.com/snaggen/fretwork"
+
 [fretwork."0.1.0"]
 url = "https://packages.typst.org/preview/fretwork-0.1.0.tar.gz"
 hash = "sha256-MbaLrlJnFLWrBpII1/LVInda6gVL0AB96zAPNzblc+o="
@@ -15519,6 +16172,16 @@ license = [
 ]
 homepage = "https://github.com/ludwig-austermann/typst-funarray"
 
+[functable."0.2.0"]
+url = "https://packages.typst.org/preview/functable-0.2.0.tar.gz"
+hash = "sha256-3prNOrse9JF0ljHXBjtDm32OmoXU/2k1pjcSx7kZyog="
+typstDeps = []
+description = "Sign, variation, and convexity tables in the French tkz-tab style, plus value tables (tableaux de valeurs"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-functable"
+
 [functable."0.1.0"]
 url = "https://packages.typst.org/preview/functable-0.1.0.tar.gz"
 hash = "sha256-aaFdzAm8CiB1gfPDAWDJqz8saza4nXR8xa15TtN8Gn8="
@@ -15599,6 +16262,18 @@ license = [
     "GPL-3.0-or-later",
 ]
 
+[g-exam."0.4.5"]
+url = "https://packages.typst.org/preview/g-exam-0.4.5.tar.gz"
+hash = "sha256-UoEVJb6KqpKYjcUKR1njw9mCeXi0PXVitH+N1bFAM+o="
+typstDeps = [
+    "oxifmt_1_0_0",
+]
+description = "Create exams with student information, grade chart, score control, questions, and sub-questions"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/MatheSchool/typst-g-exam"
+
 [g-exam."0.4.4"]
 url = "https://packages.typst.org/preview/g-exam-0.4.4.tar.gz"
 hash = "sha256-yQxwV6uSj38UKRDvfNR9IUkmsYGtGbxfBr6pj1ebMKg="
@@ -17192,6 +17867,18 @@ license = [
 ]
 homepage = "https://github.com/jbirnick/typst-great-theorems"
 
+[gribouille."0.7.0"]
+url = "https://packages.typst.org/preview/gribouille-0.7.0.tar.gz"
+hash = "sha256-e5IozoqtmitNcbvJ/oMNXC1ReY8Wjn7gKG4zO/Ffj/I="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Create elegant graphics with the Grammar of Graphics"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/mcanouil/gribouille"
+
 [gribouille."0.6.0"]
 url = "https://packages.typst.org/preview/gribouille-0.6.0.tar.gz"
 hash = "sha256-qOgyA6C2rZwdVj+UVXpYglphNp3ecU5xJ3eekOgz73I="
@@ -17809,6 +18496,16 @@ license = [
     "MIT",
 ]
 
+[hanko-kitei."0.1.0"]
+url = "https://packages.typst.org/preview/hanko-kitei-0.1.0.tar.gz"
+hash = "sha256-/sQVW+StUlqP4vdcvl1fF5NcuUjTOSZlaTg9OKJjm9U="
+typstDeps = []
+description = "Japanese workplace regulations with automatic numbering"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/liquidcatmofu/typst-hanko-kitei"
+
 [hannes-thesis."0.1.0"]
 url = "https://packages.typst.org/preview/hannes-thesis-0.1.0.tar.gz"
 hash = "sha256-MVv9O8FR6jJGQ6nNJjnwkNz8Lj+CC9bThWHZ6zsdkac="
@@ -19594,6 +20291,26 @@ license = [
 ]
 homepage = "https://github.com/RubixDev/typst-i-figured"
 
+[iarticle."0.1.1"]
+url = "https://packages.typst.org/preview/iarticle-0.1.1.tar.gz"
+hash = "sha256-n1RaBFCadyB23ri8pIA9EDA6Qe0KVkHnITb7Jzz4D+I="
+typstDeps = []
+description = "i18n-aware article and report templates"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hideo67/iarticle"
+
+[iarticle."0.1.0"]
+url = "https://packages.typst.org/preview/iarticle-0.1.0.tar.gz"
+hash = "sha256-v7v/ljL3NV0jmHaULG9gMEp1PkytUXkW80+VA7bIVmU="
+typstDeps = []
+description = "i18n-aware article and report templates"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hideo67/iarticle"
+
 [ibanator."0.1.0"]
 url = "https://packages.typst.org/preview/ibanator-0.1.0.tar.gz"
 hash = "sha256-d9H+0Cc03IzLCWHVSzqT41xYUTwN0qQryb4SAYtaQQU="
@@ -20220,6 +20937,26 @@ license = [
     "MIT",
 ]
 
+[implicplot."0.2.0"]
+url = "https://packages.typst.org/preview/implicplot-0.2.0.tar.gz"
+hash = "sha256-9gUtRr9Y/0jO+qv7mZJ0BflwnNCIdZl8lJl8H66ode0="
+typstDeps = []
+description = "Rigorous implicit-relation plotting: pixel rasters by interval arithmetic, and curves traced with a guaranteed topology"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/uwni/implicplot"
+
+[implicplot."0.1.0"]
+url = "https://packages.typst.org/preview/implicplot-0.1.0.tar.gz"
+hash = "sha256-2nBDPwAo6NVo3n8oKs8TMANY/F54BLip+4w/84m7EKc="
+typstDeps = []
+description = "Rigorous implicit-relation plotting: pixel rasters by interval arithmetic, and curves traced with a guaranteed topology"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/uwni/implicplot"
+
 [imprecv."1.0.1"]
 url = "https://packages.typst.org/preview/imprecv-1.0.1.tar.gz"
 hash = "sha256-q0y6QunluYMFNTJKlUqFheRDKzkQ7L7cuOKCX37/PXU="
@@ -20545,6 +21282,16 @@ license = [
 ]
 homepage = "https://github.com/euwbah/intextual"
 
+[intl-math."0.1.0"]
+url = "https://packages.typst.org/preview/intl-math-0.1.0.tar.gz"
+hash = "sha256-+Kr75Uj7vdnuDOLGdOZlYQ5iW3/PoPDhG3fyc4di+CM="
+typstDeps = []
+description = "Math operators that print in the document's language: you write sin(x) and it typesets sen(x) in Spanish, sin(x) in English. New languages can be added without forking"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/13Stokes31/intl-math"
+
 [intsketcher."0.5.0"]
 url = "https://packages.typst.org/preview/intsketcher-0.5.0.tar.gz"
 hash = "sha256-4pWeSY/zHRWzSVZ7JZiD7CW2i3Z2XLK1QqrzIWcAHKo="
@@ -20567,6 +21314,16 @@ license = [
 ]
 homepage = "https://github.com/ck3d/typst2commonmark"
 
+[invaria."0.2.0"]
+url = "https://packages.typst.org/preview/invaria-0.2.0.tar.gz"
+hash = "sha256-3HIT/a28XqsGOF1/0UQdPA3tCgk5/zsEISYgV2gKRRk="
+typstDeps = []
+description = "Access to (physical) constants and their associated metadata"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/q-wertz/invaria"
+
 [invicta-thesis."1.1.0"]
 url = "https://packages.typst.org/preview/invicta-thesis-1.1.0.tar.gz"
 hash = "sha256-VJAA89Y1si6Tt0r/QygREJTDYQglXzpEBYSqe3AxDb0="
@@ -20597,6 +21354,21 @@ license = [
 ]
 homepage = "https://github.com/ad-si/invoice-maker"
 
+[invoice-pro."0.4.1"]
+url = "https://packages.typst.org/preview/invoice-pro-0.4.1.tar.gz"
+hash = "sha256-NI4v5jlM/GN2flF4Ctc44ggNGsr9xQXvIwUQu1aBqWE="
+typstDeps = [
+    "ibanator_0_1_0",
+    "letter-pro_3_0_0",
+    "loom_0_1_1",
+    "sepay_0_1_1",
+]
+description = "A professional, DIN 5008 compliant invoice template with automatic calculations, EPC-QR-Code (GiroCode), and ZUGFeRD e-invoicing support"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/leonieziechmann/invoice-pro"
+
 [invoice-pro."0.4.0"]
 url = "https://packages.typst.org/preview/invoice-pro-0.4.0.tar.gz"
 hash = "sha256-JUS7thdGes0RBM4kEu6MxyBL8rTv3B6ynAEJcgjecBg="
@@ -22478,6 +23250,16 @@ license = [
     "MIT",
 ]
 
+[kinetic-kit."0.1.0"]
+url = "https://packages.typst.org/preview/kinetic-kit-0.1.0.tar.gz"
+hash = "sha256-4CAenShsYyuRVEjrCwPdhqM3+H/Ebhxq3pw3IrwaZyI="
+typstDeps = []
+description = "Doctoral, Bachelor's and Master's theses at the Karlsruhe Institute of Technology"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/ll-nick/kinetic-kit"
+
 [kino."0.1.0"]
 url = "https://packages.typst.org/preview/kino-0.1.0.tar.gz"
 hash = "sha256-jdKv+Zh/RoxsZnI3nNnWJHQnawOpaXxu5bKwxxb4yp4="
@@ -22669,6 +23451,23 @@ license = [
 ]
 homepage = "https://github.com/Harry-Chen/kouhu"
 
+[kthesis."0.1.8"]
+url = "https://packages.typst.org/preview/kthesis-0.1.8.tar.gz"
+hash = "sha256-9kIcfM2S7xhrJRLcxd/wz0Buv0skRg6qWid0vR7+LV4="
+typstDeps = [
+    "glossarium_0_5_10",
+    "headcount_0_1_1",
+    "hydra_0_6_3",
+    "linguify_0_5_0",
+    "valkyrie_0_2_2",
+]
+description = "Unofficial thesis template for KTH Royal Institute of Technology"
+license = [
+    "MIT",
+    "MIT-0",
+]
+homepage = "https://github.com/RafDevX/kthesis-typst"
+
 [kthesis."0.1.7"]
 url = "https://packages.typst.org/preview/kthesis-0.1.7.tar.gz"
 hash = "sha256-5lj6fk+LR7ySDT0CwK4wAy1OrwtEOkJAuoLonDuOxpY="
@@ -22808,6 +23607,20 @@ license = [
 ]
 homepage = "https://github.com/ludwig-austermann/kuddle"
 
+[kulemt."2.2.0"]
+url = "https://packages.typst.org/preview/kulemt-2.2.0.tar.gz"
+hash = "sha256-DiVffg1pLqnJfAGJVxFWm81/TUqf5jeqiCBD2g8zklY="
+typstDeps = [
+    "hydra_0_6_3",
+]
+description = "Master's thesis at KU Leuven's engineering faculty"
+license = [
+    "LPPL-1.3c",
+    "MIT",
+    "MIT-0",
+]
+homepage = "https://gitlab.kuleuven.be/oo-firw/student-resources/firw-master-thesis-template"
+
 [kunskap."0.1.0"]
 url = "https://packages.typst.org/preview/kunskap-0.1.0.tar.gz"
 hash = "sha256-drCRPbJP5vdJ1/oAcEVVlt8/UO+eHVH+GYRAsvJQYlg="
@@ -22930,6 +23743,30 @@ license = [
 ]
 homepage = "https://github.com/luca-schlecker/typst-lambdabus"
 
+[lamportian-dramatis."0.2.0"]
+url = "https://packages.typst.org/preview/lamportian-dramatis-0.2.0.tar.gz"
+hash = "sha256-nZ332smBDIn/IE5cT+POJuZhn3gFJcGGqNUpyFaEc3c="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw Lamport diagrams of replicas exchanging messages (with all the drama it entails"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/mvaled/lamportian-dramatis"
+
+[lamportian-dramatis."0.1.0"]
+url = "https://packages.typst.org/preview/lamportian-dramatis-0.1.0.tar.gz"
+hash = "sha256-n6TUxMUCYg+/hPBoc0l6lbiKBCWmPFR3LSEX9rplp80="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw Lamport diagrams of replicas exchanging messages (with all the drama it entails"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/mvaled/lamportian-dramatis"
+
 [larnt."0.1.0"]
 url = "https://packages.typst.org/preview/larnt-0.1.0.tar.gz"
 hash = "sha256-1w1uzJywcgntnVcOz7p3seWQwp1/JZdn1LYYfpUINFw="
@@ -23457,6 +24294,16 @@ license = [
 ]
 homepage = "https://github.com/Sematre/typst-letter-pro"
 
+[letterloom."3.0.1"]
+url = "https://packages.typst.org/preview/letterloom-3.0.1.tar.gz"
+hash = "sha256-+rbqcwvUVQRVr3WizAUE921DueYkPInrvggfJlRJmqo="
+typstDeps = []
+description = "A highly customizable template for polished and professional letters"
+license = [
+    "Unlicense",
+]
+homepage = "https://github.com/nandac/letterloom"
+
 [letterloom."3.0.0"]
 url = "https://packages.typst.org/preview/letterloom-3.0.0.tar.gz"
 hash = "sha256-Wy99MXOeF+tpIFbNxXm2I8xHJVvfZXQKwjDZLG/riPs="
@@ -23916,6 +24763,34 @@ license = [
     "MIT",
 ]
 
+[longops."0.1.1"]
+url = "https://packages.typst.org/preview/longops-0.1.1.tar.gz"
+hash = "sha256-sMJIwvbufkQ/sQsYBlp/c6Hfx1W2Hf9Ves3STdTAeJA="
+typstDeps = [
+    "codly_1_3_0",
+    "tidy_0_4_3",
+    "zero_0_7_0",
+]
+description = "Long operations and detailed calculations.                        Opérations posées et calculs détaillés"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Akilon27/longops"
+
+[longops."0.1.0"]
+url = "https://packages.typst.org/preview/longops-0.1.0.tar.gz"
+hash = "sha256-hYnWN/nD9WvT5E2sMDSCo8KXPCfNoeAD6ZZrxVMU46k="
+typstDeps = [
+    "codly_1_3_0",
+    "tidy_0_4_3",
+    "zero_0_6_1",
+]
+description = "Long operations and detailed calculations.                        Opérations posées et calculs détaillés"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Akilon27/longops"
+
 [loom."0.1.1"]
 url = "https://packages.typst.org/preview/loom-0.1.1.tar.gz"
 hash = "sha256-VW1jJF9OtFQ01ZERhZiVETEU+Dkx7mPWy8I/OLHPhJ8="
@@ -24611,6 +25486,16 @@ license = [
 ]
 homepage = "https://github.com/senaalem/ISMIN_reports_template"
 
+[maquette."0.1.3"]
+url = "https://packages.typst.org/preview/maquette-0.1.3.tar.gz"
+hash = "sha256-clDkF011l2KyOGnuaWCi3p4cGHlZktiLkkC18XKCDJw="
+typstDeps = []
+description = "🫖 Render 3D models (PLY, STL, OBJ) as SVG or PNG images"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/bernsteining/maquette"
+
 [maquette."0.1.2"]
 url = "https://packages.typst.org/preview/maquette-0.1.2.tar.gz"
 hash = "sha256-hDs+6YluhszrWul03/cZ17acDtdkrANgnPq35NyLlR4="
@@ -24816,6 +25701,28 @@ license = [
 ]
 homepage = "https://github.com/cskeeters/typst-markly"
 
+[mastermind."0.2.0"]
+url = "https://packages.typst.org/preview/mastermind-0.2.0.tar.gz"
+hash = "sha256-A8UvEh9ZCio/LI3ZUaZkLrUURLUpHq7cmLrF1w+fVSw="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw UML class diagrams"
+license = [
+    "GPL-3.0-or-later",
+]
+
+[mastermind."0.1.1"]
+url = "https://packages.typst.org/preview/mastermind-0.1.1.tar.gz"
+hash = "sha256-K62E9kKIW6Yp+QK9j5fmi7gBRwIXlDm13fTC8xgOKOA="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw UML class diagrams"
+license = [
+    "GPL-3.0-or-later",
+]
+
 [mastermind."0.1.0"]
 url = "https://packages.typst.org/preview/mastermind-0.1.0.tar.gz"
 hash = "sha256-bwhVRmcd3H0KL34hiS0l+EE89mLPYdfkVTR15W3s3Lc="
@@ -24862,6 +25769,16 @@ license = [
 ]
 homepage = "https://github.com/rojul/typst-materialize"
 
+[materially."0.1.0"]
+url = "https://packages.typst.org/preview/materially-0.1.0.tar.gz"
+hash = "sha256-QKHp7CsXquV/ovMnkBdQiBbxDlxqkn7vVKQN3SZZ1w0="
+typstDeps = []
+description = "Google Material Symbols Library"
+license = [
+    "Apache-2.0",
+]
+homepage = "https://github.com/cskeeters/typst-materially"
+
 [matofletcher."0.1.1"]
 url = "https://packages.typst.org/preview/matofletcher-0.1.1.tar.gz"
 hash = "sha256-UUeM/e0eqinqVUiE5zgq+8RdzJSFW++POAAiun6yIXE="
@@ -25399,6 +26316,17 @@ license = [
 ]
 homepage = "https://github.com/davidculemann/typst-templates"
 
+[merman."0.2.0"]
+url = "https://packages.typst.org/preview/merman-0.2.0.tar.gz"
+hash = "sha256-kNpv39VCyAm+9F/9Vcxcx4xSkwinpLQ4IkWqEig8GHk="
+typstDeps = []
+description = "Render Mermaid diagrams as SVG"
+license = [
+    "MIT",
+    "Apache-2.0",
+]
+homepage = "https://github.com/Latias94/merman"
+
 [merman."0.1.0"]
 url = "https://packages.typst.org/preview/merman-0.1.0.tar.gz"
 hash = "sha256-NR7ElPGfLkLHlURHtNhzWkBftDSkqDtPnwiVl5fCENc="
@@ -25410,6 +26338,30 @@ license = [
 ]
 homepage = "https://github.com/Latias94/merman"
 
+[mesa."0.4.0"]
+url = "https://packages.typst.org/preview/mesa-0.4.0.tar.gz"
+hash = "sha256-k01KbZxO4yGYPIyb7lejxW95COSu131Mo/VIrWtuz6E="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw semiconductor devices and fabrication process flows from GDS layouts"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/digiefel/mesa"
+
+[mesa."0.2.0"]
+url = "https://packages.typst.org/preview/mesa-0.2.0.tar.gz"
+hash = "sha256-3e9UNhF4RDJP9xY+zKqCSateaXAy7TjNG3KbTyxZSC8="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw semiconductor devices and fabrication process flows from GDS layouts"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/digiefel/mesa"
+
 [mesa."0.1.0"]
 url = "https://packages.typst.org/preview/mesa-0.1.0.tar.gz"
 hash = "sha256-troki8xIzgGZBaY4pCPhtt1Chq619HPDALk+GfikMwg="
@@ -25422,6 +26374,18 @@ license = [
 ]
 homepage = "https://github.com/digiefel/mesa"
 
+[meshpad."0.1.0"]
+url = "https://packages.typst.org/preview/meshpad-0.1.0.tar.gz"
+hash = "sha256-d2Vw4qAwbO3tQcNfYbwfCl5cFDYgA6we8a6ZsJKlTyE="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Configurable grid backgrounds for printable worksheets: square, ruled and dot grids, with darker major lines every N steps, with CeTZ"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/13Stokes31/meshpad"
+
 [messeji."0.3.0"]
 url = "https://packages.typst.org/preview/messeji-0.3.0.tar.gz"
 hash = "sha256-vqIQjUdm4KvrDNTr5SnWqzVwSkG/dRVvQy/0W6o0P/g="
@@ -25632,6 +26596,18 @@ license = [
 ]
 homepage = "https://github.com/mayconfmelo/min-article"
 
+[min-book."1.5.1"]
+url = "https://packages.typst.org/preview/min-book-1.5.1.tar.gz"
+hash = "sha256-pcVLj+lrouY1lML3BIppRWg5roo1H2Yz6lQngaABYFY="
+typstDeps = [
+    "min-manual_1_4_0",
+]
+description = "Simple and complete books without introducing new syntax"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/mayconfmelo/min-book"
+
 [min-book."1.5.0"]
 url = "https://packages.typst.org/preview/min-book-1.5.0.tar.gz"
 hash = "sha256-tVxJ0vJ3/oZWz3B6wvtQ4RVOsqYT2cHTW1uBRNqGW0o="
@@ -25804,6 +26780,19 @@ license = [
 ]
 homepage = "https://github.com/mayconfmelo/min-resume"
 
+[min-writing."0.1.0"]
+url = "https://packages.typst.org/preview/min-writing-0.1.0.tar.gz"
+hash = "sha256-f0rWq6qCreBZ13V6Qu55Zt9CHR3Ib1RVqOJ44zXxHFA="
+typstDeps = [
+    "min-manual_0_3_0",
+    "nexus-tools_0_3_0",
+]
+description = "Quick and simple general-purpose notes with extended syntax"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/mayconfmelo/min-writing"
+
 [minerva-report-fcfm."0.2.2"]
 url = "https://packages.typst.org/preview/minerva-report-fcfm-0.2.2.tar.gz"
 hash = "sha256-HK/jzmCXp6i6+Iy/7RfCrKPWp6J1NTb59oLi11SJmfw="
@@ -27465,6 +28454,16 @@ license = [
 ]
 homepage = "https://github.com/bulgogipedas/modern-jakarta-cv"
 
+[modern-mailmerge."0.1.0"]
+url = "https://packages.typst.org/preview/modern-mailmerge-0.1.0.tar.gz"
+hash = "sha256-DkLoPAZ4hk16MJi1/gv+mD2ED4tXnhxrKsEPElpDHGM="
+typstDeps = []
+description = "A powerful, feature-rich mail merge package. Easily generate personalized letters, certificates, address labels, badges, and envelopes from CSV data"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/aurghya-0/typst-mailmerge"
+
 [modern-mla."0.1.0"]
 url = "https://packages.typst.org/preview/modern-mla-0.1.0.tar.gz"
 hash = "sha256-JGsMcYkoS8P5D/n94WPCE1vCQIhGOHbu4adZ5T0UYQ4="
@@ -29084,6 +30083,16 @@ license = [
 ]
 homepage = "https://github.com/alex289/whs-typst-templates"
 
+[modern-wku-thesis."0.1.3"]
+url = "https://packages.typst.org/preview/modern-wku-thesis-0.1.3.tar.gz"
+hash = "sha256-5MPHjMKBccFv6aChguBw7WvmwTHkSxwyZf9n+aRhx4I="
+typstDeps = []
+description = "Graduate thesis template at Wenzhou-Kean University Computer Science and Mathematics department"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/timmycheng/modern-wku-thesis"
+
 [modern-wku-thesis."0.1.2"]
 url = "https://packages.typst.org/preview/modern-wku-thesis-0.1.2.tar.gz"
 hash = "sha256-aPA8fg7i/54tDdKPe+e9Qmin8z9xjit/y+B8ar/hjyU="
@@ -29436,6 +30445,15 @@ license = [
 ]
 homepage = "https://github.com/jxpeng98/typst-coverletter"
 
+[modernpro-cv."2.1.0"]
+url = "https://packages.typst.org/preview/modernpro-cv-2.1.0.tar.gz"
+hash = "sha256-zpaYIiWH86UyNz2WuV8aaYsf5+w0XNbmohPQ5/lM4OI="
+typstDeps = []
+description = "A clean, modern CV template for academic and professional applications"
+license = [
+    "MIT",
+]
+
 [modernpro-cv."2.0.0"]
 url = "https://packages.typst.org/preview/modernpro-cv-2.0.0.tar.gz"
 hash = "sha256-1ZA1sOlbtJApd4swq4b6vARghA4YIRcyj2I3wFHZAX8="
@@ -29570,6 +30588,22 @@ license = [
 ]
 homepage = "https://github.com/Universitaet-Bremen/typst-template-slides"
 
+[molchemist."0.1.5"]
+url = "https://packages.typst.org/preview/molchemist-0.1.5.tar.gz"
+hash = "sha256-B2mZ12myWfXec14EYYmH10kS48uIYdU8h8svE/VQkPo="
+typstDeps = [
+    "alchemist_0_2_0",
+    "cetz_0_5_2",
+]
+description = "Render chemical structures from Molfile, SDF, and SMILES data"
+license = [
+    "MIT",
+    "BSD-3-Clause",
+    "Apache-2.0",
+    "LLVM-exception",
+]
+homepage = "https://github.com/rice8y/molchemist"
+
 [molchemist."0.1.4"]
 url = "https://packages.typst.org/preview/molchemist-0.1.4.tar.gz"
 hash = "sha256-bq8+Y3+t4A5mnGSlO7/suMNm71+CLM5OWXVjGB6ciA4="
@@ -29637,6 +30671,18 @@ license = [
 ]
 homepage = "https://github.com/rice8y/molchemist"
 
+[molfig."0.1.4"]
+url = "https://packages.typst.org/preview/molfig-0.1.4.tar.gz"
+hash = "sha256-15B0BSNBMmP1gUPQ9VzmTxopK9rOOK7Hgyxnh53uSYw="
+typstDeps = [
+    "maquette_0_1_3",
+]
+description = "Render molecular structures through maquette"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/rice8y/molfig"
+
 [molfig."0.1.3"]
 url = "https://packages.typst.org/preview/molfig-0.1.3.tar.gz"
 hash = "sha256-xnmdzWKTq5v/wbSOq9rBxkRpoRQFuaxcuSoJiZM61KU="
@@ -29711,6 +30757,16 @@ license = [
 ]
 homepage = "https://github.com/SillyFreak/typst-moodular"
 
+[mosaic."0.0.1"]
+url = "https://packages.typst.org/preview/mosaic-0.0.1.tar.gz"
+hash = "sha256-wkRVjD3tJNXoUM9EdZZR5fg9hbV3Ia2GgwOPMg6e3PE="
+typstDeps = []
+description = "Build slide decks with themes, layouts, and components"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/vincentarelbundock/mosaic"
+
 [mousse-notes."1.1.0"]
 url = "https://packages.typst.org/preview/mousse-notes-1.1.0.tar.gz"
 hash = "sha256-FAyLs78XRXsFYg7Zek1SZGUk66Y4Jrsd/+I7hRNnqcY="
@@ -29731,6 +30787,22 @@ license = [
 ]
 homepage = "https://github.com/dogeystamp/mousse-notes"
 
+[moustaches."0.1.0"]
+url = "https://packages.typst.org/preview/moustaches-0.1.0.tar.gz"
+hash = "sha256-I990FoJ5qQu2qqrOanmN8SibtTQXUMyAAdKOepSKeaY="
+typstDeps = [
+    "cetz_0_5_2",
+    "cetz-plot_0_1_4",
+    "codly_1_3_0",
+    "tidy_0_4_3",
+    "tiptoe_0_4_0",
+]
+description = "Statistiques françaises (tableaux et diagrammes"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Akilon27/moustaches"
+
 [mrbogo-cv."1.0.5"]
 url = "https://packages.typst.org/preview/mrbogo-cv-1.0.5.tar.gz"
 hash = "sha256-i0D7aXG5KaoQYoPHFcCtN/au7P+Z7OqtdRgYE7FXoFg="
@@ -30004,6 +31076,25 @@ license = [
 ]
 homepage = "https://github.com/Enter-tainer/natrix"
 
+[navigator."0.1.7"]
+url = "https://packages.typst.org/preview/navigator-0.1.7.tar.gz"
+hash = "sha256-2Wv1MMcefPTOoxjRZZsyLx5NSFzP24iY45hoRZQIoPY="
+typstDeps = [
+    "diatypst_0_9_3",
+    "mosaic_0_0_1",
+    "navigator_0_1_6",
+    "polylux_0_4_0",
+    "presentate_0_2_6",
+    "slydekit_0_1_0",
+    "touying_0_7_4",
+    "typslides_1_3_4",
+]
+description = "Navigation tools for presentations"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/eusebe/typst-navigator"
+
 [navigator."0.1.6"]
 url = "https://packages.typst.org/preview/navigator-0.1.6.tar.gz"
 hash = "sha256-6QZ7Aluf0iVJnZlHSLxLm0/CDFLRQlxBZVIXyRNm4QY="
@@ -30447,6 +31538,16 @@ license = [
     "MIT",
 ]
 
+[nexus-tools."0.3.0"]
+url = "https://packages.typst.org/preview/nexus-tools-0.3.0.tar.gz"
+hash = "sha256-LC+4IEAfTwkBcyIjRft3ix8qKHgm/WAMAdItsziMZ2o="
+typstDeps = []
+description = "Faster and easier development using commonly used features"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/mayconfmelo/nexus-tools"
+
 [nexus-tools."0.2.0"]
 url = "https://packages.typst.org/preview/nexus-tools-0.2.0.tar.gz"
 hash = "sha256-8wsKzL2WIFRjUfxc8sle1BgNqJEk1c+EEo+kDd9VHgg="
@@ -31318,6 +32419,38 @@ license = [
 ]
 homepage = "https://github.com/nutthead/nutthead-ebnf.typ"
 
+[oak-grove."0.1.0"]
+url = "https://packages.typst.org/preview/oak-grove-0.1.0.tar.gz"
+hash = "sha256-3CGleUT/j7VXF2+gy/pp6wJz1uF93TnZcQB1Ks1Z3hg="
+typstDeps = [
+    "elembic_1_1_1",
+]
+description = "Create problem sets with support for multiple solutions, tags, links and code"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/alex-touza/oak-grove"
+
+[oasis-align."0.4.1"]
+url = "https://packages.typst.org/preview/oasis-align-0.4.1.tar.gz"
+hash = "sha256-/vdGaO6cpnfN2lL5MrwgRWnGNDiHuw70IcB2v79+OSQ="
+typstDeps = []
+description = "Cleanly place content side by side with equal heights using automatic content sizing"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/jdpieck/oasis-align"
+
+[oasis-align."0.4.0"]
+url = "https://packages.typst.org/preview/oasis-align-0.4.0.tar.gz"
+hash = "sha256-lVCcXXgC3QJYhOAgFoss/YARpnKxXbgE8yZhDEUDZFo="
+typstDeps = []
+description = "Cleanly place content side by side with equal heights using automatic content sizing"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/jdpieck/oasis-align"
+
 [oasis-align."0.3.3"]
 url = "https://packages.typst.org/preview/oasis-align-0.3.3.tar.gz"
 hash = "sha256-i1zZnVEGn5966680C1HU8l48O7Dp3UIcliCuV21JOVY="
@@ -32158,6 +33291,17 @@ license = [
 ]
 homepage = "https://github.com/PgBiel/typst-oxifmt"
 
+[packrat."0.1.0"]
+url = "https://packages.typst.org/preview/packrat-0.1.0.tar.gz"
+hash = "sha256-bToVJQHMjdua1MAXE+eejZ3QTE2fsjjE+We84HUg2HM="
+typstDeps = []
+description = "Decode and extraction functions"
+license = [
+    "MIT",
+    "Apache-2.0",
+]
+homepage = "https://github.com/T1mVo/packrat"
+
 [paddling-tongji-thesis."0.1.1"]
 url = "https://packages.typst.org/preview/paddling-tongji-thesis-0.1.1.tar.gz"
 hash = "sha256-Td3duVmDepTzdrAo8nJNF1n8fsu8oTt45kNFvAkHNi8="
@@ -32514,6 +33658,18 @@ license = [
 ]
 homepage = "https://github.com/ZaninDavide/patatrac"
 
+[patstdlib."0.3.3"]
+url = "https://packages.typst.org/preview/patstdlib-0.3.3.tar.gz"
+hash = "sha256-Js72dhe1TijH8n8Mx+/0cJXn2EozyLRLpSof1AHh4bo="
+typstDeps = [
+    "algorithmic_1_0_7",
+]
+description = "Some standard pieces I find useful: fonts, subfigures, algorithms, labeled enums, etc"
+license = [
+    "Apache-2.0",
+]
+homepage = "https://github.com/patrick-kidger/patstdlib"
+
 [patstdlib."0.3.2"]
 url = "https://packages.typst.org/preview/patstdlib-0.3.2.tar.gz"
 hash = "sha256-BtOxMjT9Mytk8PDqt4KScL3Lksf/Dhn+87uAvJ7359Y="
@@ -32597,6 +33753,18 @@ license = [
 ]
 homepage = "https://github.com/QuadnucYard/pavemat"
 
+[payqr-swiss."0.5.0"]
+url = "https://packages.typst.org/preview/payqr-swiss-0.5.0.tar.gz"
+hash = "sha256-Qf2EBpJkmxob7HMPTSDkHT4O3soxFVUTxjWf+BxcwIU="
+typstDeps = [
+    "tiaoma_0_3_0",
+]
+description = "A Swiss QR bill generator for Typst"
+license = [
+    "LGPL-3.0-only",
+]
+homepage = "https://github.com/philippdrebes/typst-payqr-swiss"
+
 [payqr-swiss."0.4.1"]
 url = "https://packages.typst.org/preview/payqr-swiss-0.4.1.tar.gz"
 hash = "sha256-eTih4Yh88VfUvnfDRj3OTspaoD68/iSES9gUITHNLMY="
@@ -32717,6 +33885,16 @@ license = [
 ]
 homepage = "https://github.com/thatfloflo/typst-pc-letter"
 
+[pdf-decorating."0.1.1"]
+url = "https://packages.typst.org/preview/pdf-decorating-0.1.1.tar.gz"
+hash = "sha256-EFKVRlRHLkHbvT+fcRTqQtVyzBQ7Q3wISsLf1ni8Rrs="
+typstDeps = []
+description = "PDF Web UI Library: CommonMark, GiHub Markup"
+license = [
+    "Apache-2.0",
+]
+homepage = "https://github.com/hackyardo/pdf-decorating"
+
 [pdf-decorating."0.1.0"]
 url = "https://packages.typst.org/preview/pdf-decorating-0.1.0.tar.gz"
 hash = "sha256-rvNMygnv9VLd4oOAs+FYnBG539GMkK8Zu4k8h7CzfkM="
@@ -33195,6 +34373,19 @@ license = [
 ]
 homepage = "https://gitlab.com/Jed_Hed/pf2e-typst"
 
+[phonokit."0.5.13"]
+url = "https://packages.typst.org/preview/phonokit-0.5.13.tar.gz"
+hash = "sha256-13CArOdlQd4AsYryatVXAPicOzaO5dCVtDyLWcyJF8A="
+typstDeps = [
+    "cetz_0_5_2",
+    "lilaq_0_6_0",
+]
+description = "A toolkit to create phonological representations"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/guilhermegarcia/phonokit"
+
 [phonokit."0.5.12"]
 url = "https://packages.typst.org/preview/phonokit-0.5.12.tar.gz"
 hash = "sha256-ISt6wnql7vm/9reI/nphaB4ZtfthhczAIQKsGijfHGU="
@@ -34008,6 +35199,40 @@ license = [
 ]
 homepage = "https://github.com/GiggleLiu/pixel-family"
 
+[pku-thesis-pass."0.3.1"]
+url = "https://packages.typst.org/preview/pku-thesis-pass-0.3.1.tar.gz"
+hash = "sha256-VqcNJuhRd5diZxNz/Jm9FLRbjDZsgyynGvAfsUowxvU="
+typstDeps = [
+    "codly_1_3_0",
+    "codly-languages_0_1_10",
+    "cuti_0_4_0",
+    "gb7714-bilingual_0_2_3",
+    "itemize_0_2_0",
+    "wordometer_0_1_5",
+]
+description = "北京大学学位论文模板（Peking University Thesis Template）"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/chuxinyuan/pku-thesis-pass"
+
+[pku-thesis-pass."0.3.0"]
+url = "https://packages.typst.org/preview/pku-thesis-pass-0.3.0.tar.gz"
+hash = "sha256-AMVSfzx1v1R+q5swvT+oqGYz6ZIv85E8Pdr8ByqQsBw="
+typstDeps = [
+    "codly_1_3_0",
+    "codly-languages_0_1_10",
+    "cuti_0_4_0",
+    "gb7714-bilingual_0_2_3",
+    "itemize_0_2_0",
+    "wordometer_0_1_5",
+]
+description = "北京大学学位论文模板（Peking University Thesis Template）"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/chuxinyuan/pku-thesis-pass"
+
 [pku-thesis-pass."0.2.0"]
 url = "https://packages.typst.org/preview/pku-thesis-pass-0.2.0.tar.gz"
 hash = "sha256-c1l0PjoHmCRrIhORYWZwuZkKpipSBYJfqUocDLpGH34="
@@ -34150,6 +35375,16 @@ license = [
 ]
 homepage = "https://github.com/sghng/pmetrika"
 
+[pointless-size."0.1.3"]
+url = "https://packages.typst.org/preview/pointless-size-0.1.3.tar.gz"
+hash = "sha256-eNzAXR6H6cBIa9ue89Z9f3Ve2a/yBPMq6YX1Ivm25/Q="
+typstDeps = []
+description = "中文字号的号数制及字体度量单位 Chinese size system (hào-system) and type-related measurements units"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/YDX-2147483647/typst-pointless-size"
+
 [pointless-size."0.1.2"]
 url = "https://packages.typst.org/preview/pointless-size-0.1.2.tar.gz"
 hash = "sha256-4ONS8ENcA0agL+32H+SlKOHdpXpbmy25TdugHaVNGCU="
@@ -34278,6 +35513,19 @@ license = [
     "MIT",
 ]
 
+[polycv."0.1.1"]
+url = "https://packages.typst.org/preview/polycv-0.1.1.tar.gz"
+hash = "sha256-r8MFS77jR9GYUT5OwmcEnFpThSXhJNWY3QMP9Rf3jxI="
+typstDeps = [
+    "fontawesome_0_6_2",
+    "jsonschemeyst_0_0_1",
+]
+description = "A data-driven, not-a-boring CV and cover-letter template"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/bbinet/polycv"
+
 [polylux."0.4.0"]
 url = "https://packages.typst.org/preview/polylux-0.4.0.tar.gz"
 hash = "sha256-bhceuU/TCLHCItOw0EPWUIm/fraa4YzVZxbgvIlqYtk="
@@ -34391,6 +35639,18 @@ license = [
     "MIT",
 ]
 
+[prefigure."0.1.0"]
+url = "https://packages.typst.org/preview/prefigure-0.1.0.tar.gz"
+hash = "sha256-yPAInPbzbPnf5gO6SAu68++oyHLlyiLrfiGyhcuYB8k="
+typstDeps = [
+    "xmlit_0_1_3",
+]
+description = "Author and render PreFigure mathematical diagrams"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/davidaustinm/prefigure"
+
 [preprintx."0.1.0"]
 url = "https://packages.typst.org/preview/preprintx-0.1.0.tar.gz"
 hash = "sha256-BiNhERcjuSbBkT53vlGAaBEfdMo/u0shTLRQMfgoyPw="
@@ -34574,6 +35834,36 @@ license = [
 ]
 homepage = "https://github.com/miawinter98/hdm-thesis"
 
+[primaviz."0.10.0"]
+url = "https://packages.typst.org/preview/primaviz-0.10.0.tar.gz"
+hash = "sha256-vaOFqXinnvPbiYtFC6tw1pwlTUzgTqub4YXXTIO4IlE="
+typstDeps = []
+description = "A charting library with 50+ chart types, 7 themes, and zero dependencies — built entirely with native primitives"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/phiat/primaviz"
+
+[primaviz."0.9.1"]
+url = "https://packages.typst.org/preview/primaviz-0.9.1.tar.gz"
+hash = "sha256-hP8rq/GVMXjgcgChvHdU7pcV2koE3RfnHjpQV28xgjU="
+typstDeps = []
+description = "A charting library with 50+ chart types, 7 themes, and zero dependencies — built entirely with native primitives"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/phiat/primaviz"
+
+[primaviz."0.9.0"]
+url = "https://packages.typst.org/preview/primaviz-0.9.0.tar.gz"
+hash = "sha256-g1Vq3IEHkRdaLiN76f9UH6en45S/P5/zwQ9Uguz0XP8="
+typstDeps = []
+description = "A charting library with 50+ chart types, 7 themes, and zero dependencies — built entirely with native primitives"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/phiat/primaviz"
+
 [primaviz."0.8.0"]
 url = "https://packages.typst.org/preview/primaviz-0.8.0.tar.gz"
 hash = "sha256-W4EDa/SL/UB/fGYhfWSpzwGzwZ6T8kLhyyN9xNJqghE="
@@ -34656,6 +35946,16 @@ license = [
 ]
 homepage = "https://github.com/Entze/prinzipien"
 
+[prismath."0.2.0"]
+url = "https://packages.typst.org/preview/prismath-0.2.0.tar.gz"
+hash = "sha256-N9Hwyu9WSFrfPCCaHYCVUdTtnvkZEb7JaE3Pv21w8fM="
+typstDeps = []
+description = "A mathematical brackets colorizer"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/3w36zj6/typst-prismath"
+
 [prismath."0.1.0"]
 url = "https://packages.typst.org/preview/prismath-0.1.0.tar.gz"
 hash = "sha256-O7PaP1OUcba6j5MBMOmggdPAQDsQkJT5O8RgjP6qfjs="
@@ -34698,6 +35998,18 @@ license = [
 ]
 homepage = "https://github.com/swaits/typst-collection"
 
+[probabilitree."0.1.3"]
+url = "https://packages.typst.org/preview/probabilitree-0.1.3.tar.gz"
+hash = "sha256-s4ULzdJBoSeEUh9hun4q4+peY7w9sEwDk6f3Yn1/3BU="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw n-ary probability trees on top of cetz"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/mmaunier/probabilitree"
+
 [problemst."0.1.2"]
 url = "https://packages.typst.org/preview/problemst-0.1.2.tar.gz"
 hash = "sha256-fWEd1e0+03XhbR/KSnCVpHfdzXE3MCNxQBThbijLbY0="
@@ -35888,6 +37200,26 @@ license = [
 ]
 homepage = "https://github.com/yusancky/railynx"
 
+[ratchet."0.0.4"]
+url = "https://packages.typst.org/preview/ratchet-0.0.4.tar.gz"
+hash = "sha256-68bRAbr+4vKS12zVEfnXRMtTswhP2an+uAuDRX8Ql5A="
+typstDeps = []
+description = "Improved numbering for figures, tables, equations, and custom figure kinds"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/An-314/ratchet"
+
+[ratchet."0.0.3"]
+url = "https://packages.typst.org/preview/ratchet-0.0.3.tar.gz"
+hash = "sha256-hPpT3IY4LbK3CUz2CZM6T0ae57dsemjq38+qPmXFMrQ="
+typstDeps = []
+description = "ratchet is a package for improved figure/table/equation/math.equation/custom-kind numbering"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/An-314/ratchet"
+
 [ratchet."0.0.1"]
 url = "https://packages.typst.org/preview/ratchet-0.0.1.tar.gz"
 hash = "sha256-c94QjS+FsGIFDtoBX1ov08S6uKj03W6YbxkzpMSAgBA="
@@ -36046,6 +37378,26 @@ license = [
 ]
 homepage = "https://github.com/sjfhsjfh/typst-relescope"
 
+[remetente."0.2.0"]
+url = "https://packages.typst.org/preview/remetente-0.2.0.tar.gz"
+hash = "sha256-jf+FCH2o7qb8sb9njUkIeh8TOX1fs+A6mCaAq0I8hCg="
+typstDeps = []
+description = "A professional letter template with a colored header band"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/apcamargo/remetente"
+
+[remetente."0.1.0"]
+url = "https://packages.typst.org/preview/remetente-0.1.0.tar.gz"
+hash = "sha256-t+RqK5PXQj6iUTVcYKEIyheTEvJ5h9wdz+IuHNYqKvk="
+typstDeps = []
+description = "A professional letter template with a colored header band"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/apcamargo/remetente"
+
 [rendercv."0.3.0"]
 url = "https://packages.typst.org/preview/rendercv-0.3.0.tar.gz"
 hash = "sha256-t9dhxjsBEZ5tZLwbvel4NNzZSE4MRAraZ/xjc5ZzO+s="
@@ -36154,6 +37506,16 @@ license = [
 ]
 homepage = "https://github.com/fky2015/resume-ng-typst"
 
+[resume-ofa."0.1.0"]
+url = "https://packages.typst.org/preview/resume-ofa-0.1.0.tar.gz"
+hash = "sha256-tw+esguYtapUGWxcW+ql0tLjbT8gCsvbyT8xfH0UhGw="
+typstDeps = []
+description = "Create concise, configurable curriculum vitae"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/aldrick-t/typst-resume-ofa"
+
 [retrofit."0.2.0"]
 url = "https://packages.typst.org/preview/retrofit-0.2.0.tar.gz"
 hash = "sha256-CFJM0ijykzXE5tYv1KYMhJHmkkzVLv/ubXepqqBSxCU="
@@ -36400,6 +37762,19 @@ license = [
 ]
 homepage = "https://github.com/solstice23/typst-ribbony"
 
+[ribon."0.1.0"]
+url = "https://packages.typst.org/preview/ribon-0.1.0.tar.gz"
+hash = "sha256-cqQP1lwB8r13fY+bZQsDpZ+gs+kQUSY/6SJ94BiP198="
+typstDeps = [
+    "codly_1_3_0",
+    "mantys_1_0_2",
+]
+description = "RNA secondary-structure visualization and analysis"
+license = [
+    "GPL-2.0-only",
+]
+homepage = "https://github.com/rice8y/ribon"
+
 [rich-counters."0.2.2"]
 url = "https://packages.typst.org/preview/rich-counters-0.2.2.tar.gz"
 hash = "sha256-anNF+VisQ0RKJn1M1/5wP/AlgQsmw2ifJk9jQ5Tj1MY="
@@ -36496,6 +37871,16 @@ license = [
 ]
 homepage = "https://github.com/hemisemidemipresent/riichinator"
 
+[rirekisho-ofa."0.1.0"]
+url = "https://packages.typst.org/preview/rirekisho-ofa-0.1.0.tar.gz"
+hash = "sha256-rsioOysrRzmgIcXHGc+cVi8RmvdXnY6MFmepm3pyKMA="
+typstDeps = []
+description = "Japanese rirekisho for role-focused job applications"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/aldrick-t/typst-rirekisho-ofa"
+
 [rivet."0.3.1"]
 url = "https://packages.typst.org/preview/rivet-0.3.1.tar.gz"
 hash = "sha256-T6vtAJ0SJnUQRikncfLW1tc2X0tHVRjFp+YFmLNym+E="
@@ -37005,6 +38390,16 @@ license = [
     "MIT",
 ]
 
+[sanity."0.1.0"]
+url = "https://packages.typst.org/preview/sanity-0.1.0.tar.gz"
+hash = "sha256-DZN7nuBbDkOV3CGuqN/7CVmMU/obTIroaEMcFGI+77Q="
+typstDeps = []
+description = "Find unreferenced figures, uncited sources and lost labels"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/techgustavo/sanity"
+
 [sano-presentation-template."1.0.0"]
 url = "https://packages.typst.org/preview/sano-presentation-template-1.0.0.tar.gz"
 hash = "sha256-RJGql4AhJal3CzuJi1Jgh19+wIIy2WM98xZjkAE2TKA="
@@ -37542,6 +38937,30 @@ license = [
 ]
 homepage = "https://github.com/bernsteining/scoryst"
 
+[scrawl."0.1.0"]
+url = "https://packages.typst.org/preview/scrawl-0.1.0.tar.gz"
+hash = "sha256-lVXueXXD7Pc4uBJX9GA3E2YTdccNFPtWlHLByDFx6Mg="
+typstDeps = []
+description = "Draw hand-sketched shapes with no plugin and no dependency"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/fergousA/scrawl"
+
+[scribbling-hm."0.1.10"]
+url = "https://packages.typst.org/preview/scribbling-hm-0.1.10.tar.gz"
+hash = "sha256-6LqRFWQfec0/WpxCAeYICi+aGB+6ljQT6lvxrYfoWZs="
+typstDeps = [
+    "datify_1_3_0",
+    "glossarium_0_5_10",
+    "zebraw_0_6_3",
+]
+description = "Unofficial thesis template for Munich University of Applied Sciences (Hochschule München"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/fine-seat/hm-typst-template"
+
 [scribbling-hm."0.1.9"]
 url = "https://packages.typst.org/preview/scribbling-hm-0.1.9.tar.gz"
 hash = "sha256-sp6RZGCZZ8i/qZJgLl/j+Q069yZPZ9UD60jfyJ75/cQ="
@@ -37699,6 +39118,20 @@ license = [
 ]
 homepage = "https://github.com/lentilus/typst-scribe"
 
+[scripst."1.1.2"]
+url = "https://packages.typst.org/preview/scripst-1.1.2.tar.gz"
+hash = "sha256-U/55C3aYfPbrnxNC3c4sYf2bk8jk8yFqaVXc7hZBc4U="
+typstDeps = [
+    "physica_0_9_8",
+    "ratchet_0_0_4",
+    "tablem_0_3_0",
+]
+description = "Scripst - A versatile scripting template for polished articles, reports, and books. 🚀"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/An-314/scripst"
+
 [scripst."1.1.1"]
 url = "https://packages.typst.org/preview/scripst-1.1.1.tar.gz"
 hash = "sha256-N9u+c35SB4NJjczmPQ1OZuCiBXkpXuDuDj/FyS0+WiU="
@@ -38503,6 +39936,16 @@ license = [
 ]
 homepage = "https://github.com/QzxTaqtaq/shit-typst-template"
 
+[shokumu-keirekisho-ofa."0.1.0"]
+url = "https://packages.typst.org/preview/shokumu-keirekisho-ofa-0.1.0.tar.gz"
+hash = "sha256-Zqt8aK3D9AIH2n5nsr5m5UGlCV28/d14BD5guPMdFtg="
+typstDeps = []
+description = "Japanese career history for role-focused applications"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/aldrick-t/typst-shokumu-keirekisho-ofa"
+
 [showman."0.1.2"]
 url = "https://packages.typst.org/preview/showman-0.1.2.tar.gz"
 hash = "sha256-3Ueq4axPi/YUoqI9yUUfiz7MXBQhxr1Vm+h6s7v0UoM="
@@ -39385,6 +40828,18 @@ license = [
 ]
 homepage = "https://github.com/Easecond/nwu-academic-year-paper"
 
+[simple-plot."1.1.0"]
+url = "https://packages.typst.org/preview/simple-plot-1.1.0.tar.gz"
+hash = "sha256-N+JCurbL2LU9p7FzmEVPoxvQkSp/WvGBBsUQVPfo660="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Simple, pgfplots-like function plotting for math and science"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-simple-plot"
+
 [simple-plot."1.0.0"]
 url = "https://packages.typst.org/preview/simple-plot-1.0.0.tar.gz"
 hash = "sha256-NixWVWCwUxjlTkZZISogVeKuPqOTLqV1AgY2EIajwbs="
@@ -39864,6 +41319,48 @@ license = [
 ]
 homepage = "https://github.com/Lukinhasram/slr8"
 
+[slydekit."0.3.0"]
+url = "https://packages.typst.org/preview/slydekit-0.3.0.tar.gz"
+hash = "sha256-jfr/wkT4G2AxYepBvx8s+kprIxs4jswhPhkVeR0v7ME="
+typstDeps = [
+    "cetz_0_5_2",
+    "fletcher_0_5_8",
+    "showybox_2_0_4",
+]
+description = "A package to easily create presentation slides"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/maucejo/slydekit"
+
+[slydekit."0.2.0"]
+url = "https://packages.typst.org/preview/slydekit-0.2.0.tar.gz"
+hash = "sha256-OtlULiYYN7VpS4SeMZVt5k9MkU1oOCvrQELJ7ZDzsEg="
+typstDeps = [
+    "cetz_0_5_2",
+    "fletcher_0_5_8",
+    "showybox_2_0_4",
+]
+description = "A package to easily create presentation slides"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/maucejo/slydekit"
+
+[slydekit."0.1.0"]
+url = "https://packages.typst.org/preview/slydekit-0.1.0.tar.gz"
+hash = "sha256-vWwgg+3KYApZl6Sj9xbTUQjyfvovub1i56dI2AwZWtc="
+typstDeps = [
+    "cetz_0_5_2",
+    "fletcher_0_5_8",
+    "showybox_2_0_4",
+]
+description = "A package to easily create presentation slides"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/maucejo/slydekit"
+
 [slydst."0.1.5"]
 url = "https://packages.typst.org/preview/slydst-0.1.5.tar.gz"
 hash = "sha256-koBCXklTJgihnbiIquI0/Gy4qK2oOFHT/bA8vMNnLj0="
@@ -40273,6 +41770,18 @@ license = [
 ]
 homepage = "https://codeberg.org/th1j5/typst-sos-ugent-style"
 
+[sourcecraft."0.1.0"]
+url = "https://packages.typst.org/preview/sourcecraft-0.1.0.tar.gz"
+hash = "sha256-4eJU0JGif9o6vjS8HBJidFVdnuj0QgT9DUY38tFDj+c="
+typstDeps = [
+    "cetz_0_5_0",
+]
+description = "UML Class Diagrams for Typst, built on CeTZ. Supports Java and Csharp syntax with pluggable grammars"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/typst-things/sourcecraft"
+
 [sourcerer."0.2.1"]
 url = "https://packages.typst.org/preview/sourcerer-0.2.1.tar.gz"
 hash = "sha256-WrNizB+4ZYOoIOlJxiuzaWqaI7htDzuGjJ5ZsmfxiAA="
@@ -40592,6 +42101,20 @@ license = [
 ]
 homepage = "https://github.com/SillyFreak/typst-stack-pointer"
 
+[stacked."0.1.0"]
+url = "https://packages.typst.org/preview/stacked-0.1.0.tar.gz"
+hash = "sha256-ZuDpFBxVGt7khgWVogMJiWYe4z8oiR/2mQFkwf8mDIs="
+typstDeps = [
+    "cetz_0_5_2",
+    "codly_1_3_0",
+    "tidy_0_4_3",
+]
+description = "Stacked cubes and dices"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Akilon27/stacked"
+
 [stagehand."0.1.0"]
 url = "https://packages.typst.org/preview/stagehand-0.1.0.tar.gz"
 hash = "sha256-gKT0JP+yAYFaBmt8b5wfAjQ0gyQB0NbCmXAcz3Yn+UQ="
@@ -41117,6 +42640,17 @@ license = [
 ]
 homepage = "https://github.com/loicfontaine/mse-master-thesis-typst"
 
+[structured-uib."0.2.0"]
+url = "https://packages.typst.org/preview/structured-uib-0.2.0.tar.gz"
+hash = "sha256-D/yaCizJHiBXpG4OQZe6qxcVZPCGi4/Lo9GLu/oCaYg="
+typstDeps = []
+description = "Lab report template for the course PHYS114 at the University of Bergen"
+license = [
+    "MIT",
+    "MIT-0",
+]
+homepage = "https://github.com/AugustinWinther/structured-uib"
+
 [structured-uib."0.1.0"]
 url = "https://packages.typst.org/preview/structured-uib-0.1.0.tar.gz"
 hash = "sha256-7grAe2JRSNF4FWqhvGcJ8eFEbIO8TYO+cqCEYncLl2E="
@@ -41174,6 +42708,16 @@ license = [
 ]
 homepage = "https://github.com/WannesMalfait/vub-huisstijl-typst/"
 
+[suboutline."0.3.1"]
+url = "https://packages.typst.org/preview/suboutline-0.3.1.tar.gz"
+hash = "sha256-tgTsYnlTTFyjiWIlgYy8XiDGal4bpjQE/lERkwf1a34="
+typstDeps = []
+description = "An outline function just for one section and nothing else"
+license = [
+    "GPL-3.0-only",
+]
+homepage = "https://github.com/sdiebolt/suboutline"
+
 [suboutline."0.3.0"]
 url = "https://packages.typst.org/preview/suboutline-0.3.0.tar.gz"
 hash = "sha256-k3sheGkdYqFHM5MPuZ4mo8DxDBKyCpafrTfvPZRz44M="
@@ -41261,6 +42805,16 @@ license = [
 ]
 homepage = "https://github.com/tingerrr/subpar"
 
+[sudo-docs."0.1.0"]
+url = "https://packages.typst.org/preview/sudo-docs-0.1.0.tar.gz"
+hash = "sha256-DQeW78JH01ERod+QZqNpEMol+EEXlrcSTCQnyR50G2c="
+typstDeps = []
+description = "A minimalist, code-centric template for Computer Science students"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/G0ldenPin/sudodocs"
+
 [sudokyst."0.1.0"]
 url = "https://packages.typst.org/preview/sudokyst-0.1.0.tar.gz"
 hash = "sha256-e1rVVTC+k+Jat14oJdCEVSIgtkInU5RWU/198Bnmr3s="
@@ -41447,6 +43001,18 @@ license = [
 ]
 homepage = "https://codeberg.org/alxsim/superb-pci"
 
+[supercharged-dhbw."3.5.0"]
+url = "https://packages.typst.org/preview/supercharged-dhbw-3.5.0.tar.gz"
+hash = "sha256-klBFbRB5lP3srVwSZmdFLZ8awLcp3/nbN6wkL7x1Gpc="
+typstDeps = [
+    "codelst_2_0_2",
+]
+description = "Unofficial Template for DHBW"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/DannySeidel/typst-dhbw-template"
+
 [supercharged-dhbw."3.4.1"]
 url = "https://packages.typst.org/preview/supercharged-dhbw-3.4.1.tar.gz"
 hash = "sha256-Ft8gaJeJrRRmycdAB5S6a7M5/G1mU0E7Zq7zZgGMpAo="
@@ -42450,6 +44016,16 @@ license = [
     "MIT-0",
 ]
 
+[taskize."0.2.9"]
+url = "https://packages.typst.org/preview/taskize-0.2.9.tar.gz"
+hash = "sha256-iBwYxBsiiOG8rPKUco6aJTbLI9yNvKgGaeyAAbTSnCA="
+typstDeps = []
+description = "Horizontal and vertical columned lists for exercises and tasks, similar to LaTeX's tasks package"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-taskize"
+
 [taskize."0.2.8"]
 url = "https://packages.typst.org/preview/taskize-0.2.8.tar.gz"
 hash = "sha256-yM/CiMokvSNTMtTNZVy1BQVIdj8sq1og36k4gX7SBRQ="
@@ -42702,6 +44278,18 @@ license = [
 ]
 homepage = "https://github.com/tshort/tblr"
 
+[tcdm."0.0.4"]
+url = "https://packages.typst.org/preview/tcdm-0.0.4.tar.gz"
+hash = "sha256-5Jo/j+q4J/Sv/G+xkWMOcPbiWgDtCoR/SmrhVW+H9gM="
+typstDeps = [
+    "cmarker_0_1_10",
+]
+description = "HTML generator for best-of lists, especially Best of Typst (TCDM"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/YDX-2147483647/best-of-typst"
+
 [tcdm."0.0.3"]
 url = "https://packages.typst.org/preview/tcdm-0.0.3.tar.gz"
 hash = "sha256-s0um1oXydl9zKaJKOEqvNiDYQ/rliHG00sqK93Dnr4g="
@@ -42940,6 +44528,18 @@ license = [
 ]
 homepage = "https://gitlab.com/SolidTux/teig"
 
+[telepresentation."0.1.0"]
+url = "https://packages.typst.org/preview/telepresentation-0.1.0.tar.gz"
+hash = "sha256-pnVnmlzEd6h1eWa45AIBgxfBYl+siirkdZ12e5CG6LE="
+typstDeps = [
+    "touying_0_7_3",
+]
+description = "Télécom Paris themed Touying presentation template"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/ameneceur/tp_slides_template"
+
 [telereport."0.1.0"]
 url = "https://packages.typst.org/preview/telereport-0.1.0.tar.gz"
 hash = "sha256-dVi4ByiMQ2CKIugdYB1jrtaTxOI2cf9l7VuCb7yAqi0="
@@ -43379,6 +44979,46 @@ license = [
 ]
 homepage = "https://github.com/Danila-Bain/typst-theorems"
 
+[theoframe."0.3.7"]
+url = "https://packages.typst.org/preview/theoframe-0.3.7.tar.gz"
+hash = "sha256-eVeUcv0f3zBXs17RIV2GSrAIGfIWCUkVvm7/v00+MGs="
+typstDeps = []
+description = "A theorem environment package developed by an amateur, use with caution"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hexiongwu1995/typst-theoframe"
+
+[theoframe."0.3.6"]
+url = "https://packages.typst.org/preview/theoframe-0.3.6.tar.gz"
+hash = "sha256-SlTJvilrE34vqGBqK9TRt+RMNmh+gGgocWyk+0qNQLI="
+typstDeps = []
+description = "A theorem environment package developed by an amateur, use with caution"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hexiongwu1995/typst-theoframe"
+
+[theoframe."0.3.5"]
+url = "https://packages.typst.org/preview/theoframe-0.3.5.tar.gz"
+hash = "sha256-igOv6tjVOOAFLzxjbepV5Gdfj8T9ZazKb1HwHQpqaz0="
+typstDeps = []
+description = "A theorem environment package developed by an amateur, use with caution"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hexiongwu1995/typst-theoframe"
+
+[theoframe."0.3.0"]
+url = "https://packages.typst.org/preview/theoframe-0.3.0.tar.gz"
+hash = "sha256-/RYmcePFoDcV/k8f8p0E42BjMWQXnFzTFvOUb6D+BM8="
+typstDeps = []
+description = "A theorem environment package developed by an amateur, use with caution"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hexiongwu1995/typst-theoframe"
+
 [theoframe."0.2.0"]
 url = "https://packages.typst.org/preview/theoframe-0.2.0.tar.gz"
 hash = "sha256-/RXGTDLtwFS+/kMoUUNIAWkkz8b+7/UByhhnd7jPvNk="
@@ -44115,6 +45755,16 @@ license = [
 ]
 homepage = "https://github.com/bastienvoirin/tierpist"
 
+[timble."1.3.0"]
+url = "https://packages.typst.org/preview/timble-1.3.0.tar.gz"
+hash = "sha256-TFouSrj/zdmpIO/MVStBks9qQRPirmkrO/AigAqsn6s="
+typstDeps = []
+description = "Draw and style precise time tables with ease"
+license = [
+    "MPL-2.0",
+]
+homepage = "https://github.com/Mambouna/timble"
+
 [timble."1.2.1"]
 url = "https://packages.typst.org/preview/timble-1.2.1.tar.gz"
 hash = "sha256-JtupUQnvkwJ8ls6xWHCE7EjnPtscsW2WT+aA4ppH85E="
@@ -46051,6 +47701,19 @@ license = [
 ]
 homepage = "https://github.com/leichaol/touying-simpl-swufe"
 
+[touying-simpres."0.2.0"]
+url = "https://packages.typst.org/preview/touying-simpres-0.2.0.tar.gz"
+hash = "sha256-BxnpSmto5fK7q6Z9QBxajbMq+dVS+UQFC8KcUXlVcds="
+typstDeps = [
+    "cetz_0_5_2",
+    "touying_0_7_4",
+]
+description = "Presentation template for education and business"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/thy0s/touying-simpres"
+
 [touying-simpres."0.1.0"]
 url = "https://packages.typst.org/preview/touying-simpres-0.1.0.tar.gz"
 hash = "sha256-7qM/g5d1/4i3gJ8oU8A5PMyu4+e5Nsk+DgyaA5y6xOM="
@@ -46337,6 +48000,16 @@ license = [
 ]
 homepage = "https://github.com/coli-saar/tracl"
 
+[transl."0.2.1"]
+url = "https://packages.typst.org/preview/transl-0.2.1.tar.gz"
+hash = "sha256-7zMY3A8QncLVyinMvPO+uk5j0rw1t7NU6mKBQpMpBuA="
+typstDeps = []
+description = "Easy and simple translations for words and expressions, with support for localization"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/mayconfmelo/transl"
+
 [transl."0.2.0"]
 url = "https://packages.typst.org/preview/transl-0.2.0.tar.gz"
 hash = "sha256-kvRaIz+ZQnpoEOd5lKuvmgoACTiHY1eOHtSkrLQfWDA="
@@ -47332,6 +49005,56 @@ license = [
 ]
 homepage = "https://github.com/GeronimoCastano/typed-dsa"
 
+[typed-physics."0.1.1"]
+url = "https://packages.typst.org/preview/typed-physics-0.1.1.tar.gz"
+hash = "sha256-UmOKpRLrRd5KnaflE2c0YNJNpFCTP6LF4naKAJ54AtE="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Declare mechanics and DC circuit systems and derive consistent physics diagrams and mechanics solutions"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/GeronimoCastano/typed-physics"
+
+[typed-physics."0.1.0"]
+url = "https://packages.typst.org/preview/typed-physics-0.1.0.tar.gz"
+hash = "sha256-ReLYl549BMpoTvMSezAUczSI63qHvEX5mKS+m/ZyF7g="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Declare mechanics and DC circuit systems and derive consistent physics diagrams and mechanics solutions"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/GeronimoCastano/typed-physics"
+
+[typed-scores."0.5.0"]
+url = "https://packages.typst.org/preview/typed-scores-0.5.0.tar.gz"
+hash = "sha256-1kwqFCXEspJKs1+GNocTopijy7Q8zB0bu/mciNGgd2o="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Engrave western music notation from compact note text, powered by a Rust parser and Bravura glyphs"
+license = [
+    "MIT",
+    "OFL-1.1",
+]
+homepage = "https://github.com/GeronimoCastano/typed-scores"
+
+[typed-scores."0.4.0"]
+url = "https://packages.typst.org/preview/typed-scores-0.4.0.tar.gz"
+hash = "sha256-XWmkswIIRUvn5uLea7xRCwQQFuUoO65wL4YOMXilD+0="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Engrave western music notation from compact note text, powered by a Rust parser and Bravura glyphs"
+license = [
+    "MIT",
+    "OFL-1.1",
+]
+homepage = "https://github.com/GeronimoCastano/typed-scores"
+
 [typed-scores."0.3.0"]
 url = "https://packages.typst.org/preview/typed-scores-0.3.0.tar.gz"
 hash = "sha256-6QADL3Cdt+5P1dFQzzaGVaiYn99mjZ0bDXFXXa7ziPs="
@@ -47371,6 +49094,19 @@ license = [
 ]
 homepage = "https://github.com/GeronimoCastano/typed-scores"
 
+[typed-smiles."0.11.0"]
+url = "https://packages.typst.org/preview/typed-smiles-0.11.0.tar.gz"
+hash = "sha256-XfDl/AwLhyw0iWG5MntzPpUql/Kir0HGXqOI/BXZlos="
+typstDeps = [
+    "cetz_0_5_2",
+    "chemformula_0_1_3",
+]
+description = "Render SMILES strings as molecular diagrams"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/GeronimoCastano/typed-smiles"
+
 [typed-smiles."0.10.0"]
 url = "https://packages.typst.org/preview/typed-smiles-0.10.0.tar.gz"
 hash = "sha256-0Md6sYgKjNgORhrbelYoEAOZWwDvi2eIl8L9Q35PO8g="
@@ -47586,6 +49322,16 @@ license = [
 ]
 homepage = "https://github.com/C4illin/typewind"
 
+[typhoon."0.2.0"]
+url = "https://packages.typst.org/preview/typhoon-0.2.0.tar.gz"
+hash = "sha256-1k/7jBEAjKJK1EAU4ZTY8nhzQHaIoQtDah1Vyxhji+o="
+typstDeps = []
+description = "TailwindCSS for HTML exports"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/wensimehrp/tailwindcss-typst"
+
 [typhoon."0.1.2"]
 url = "https://packages.typst.org/preview/typhoon-0.1.2.tar.gz"
 hash = "sha256-rahgNOjqKXdDHJKuuLfBoIET7QiF9aK0pU6MzIQAu4Y="
@@ -47636,6 +49382,48 @@ license = [
 ]
 homepage = "https://github.com/rice8y/typixel"
 
+[typograph."0.2.1"]
+url = "https://packages.typst.org/preview/typograph-0.2.1.tar.gz"
+hash = "sha256-uCFF36F8hOBciTs4Sns+RTLywBPibulHP7vmCEVDxeU="
+typstDeps = []
+description = "Draw unopinionated diagrams: nodes, edges, curves, ports"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/BenCichos/typograph"
+
+[typograph."0.2.0"]
+url = "https://packages.typst.org/preview/typograph-0.2.0.tar.gz"
+hash = "sha256-J7FmZozfCnIibqZV4YlYY2Q/3fiVj62IPYcUo//ziBw="
+typstDeps = []
+description = "Draw unopinionated diagrams: nodes, edges, curves, ports"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/BenCichos/typograph"
+
+[typograph."0.1.0"]
+url = "https://packages.typst.org/preview/typograph-0.1.0.tar.gz"
+hash = "sha256-RJv4IYYeEvco3e7JmvgK7HbZ5vdvV9kBhK6JxNsHf+o="
+typstDeps = []
+description = "Draw unopinionated diagrams: nodes, edges, curves, ports"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/BenCichos/typograph"
+
+[typograph-zx."0.1.0"]
+url = "https://packages.typst.org/preview/typograph-zx-0.1.0.tar.gz"
+hash = "sha256-Jin53BG8ytq4IHWnsUlOslHauDxfUffOCgaaUxjgUEk="
+typstDeps = [
+    "typograph_0_1_0",
+]
+description = "Add ZX-calculus and continuous-variable ZX-calculus notation to typograph"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/BenCichos/typograph-zx"
+
 [typographic-resume."0.2.0"]
 url = "https://packages.typst.org/preview/typographic-resume-0.2.0.tar.gz"
 hash = "sha256-T7ihhyNdlyXEDeihjugz+q7R2JVCEe0BxqISImDSMrY="
@@ -47947,6 +49735,16 @@ license = [
 ]
 homepage = "https://github.com/Typsium/typsium-atomic"
 
+[typsium-ghs."0.1.2"]
+url = "https://packages.typst.org/preview/typsium-ghs-0.1.2.tar.gz"
+hash = "sha256-ch2gEIXtOtR63y2NFKnAx8qEYO5ZSz0v/dl8eiSbQ7w="
+typstDeps = []
+description = "Display and format Hazard & Precautionary statements and GHS pictograms"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Typsium/typsium-ghs"
+
 [typsium-ghs."0.1.1"]
 url = "https://packages.typst.org/preview/typsium-ghs-0.1.1.tar.gz"
 hash = "sha256-P87Rqy0yj7+QIisDxWqY7PagKC8/stWfspl7IOe4xZg="
@@ -47967,6 +49765,16 @@ license = [
 ]
 homepage = "https://github.com/Typsium/typsium-ghs"
 
+[typsium-iso-7010."0.1.2"]
+url = "https://packages.typst.org/preview/typsium-iso-7010-0.1.2.tar.gz"
+hash = "sha256-8sDI0hqS0idNiWJTsSzS1Ukqo2uH1bPdyY3dO7sjRiA="
+typstDeps = []
+description = "Display Warning signs, Fire signs, Emergency signs, Mandatory signs, Prohibited signs following the ISO 7010 standard"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Typsium/typsium-iso-7010"
+
 [typsium-iso-7010."0.1.1"]
 url = "https://packages.typst.org/preview/typsium-iso-7010-0.1.1.tar.gz"
 hash = "sha256-YOsEuq72TmziEZ+cPrnZsh6XN42dyy/KuTELy7gITWU="
@@ -48117,6 +49925,16 @@ license = [
 ]
 homepage = "https://github.com/jrossi/typst-wasm-sqlite"
 
+[typsy."0.2.5"]
+url = "https://packages.typst.org/preview/typsy-0.2.5.tar.gz"
+hash = "sha256-tFglzByBAmS1HmQ56Nfy/Pw7kU37XCpw8zcMQoAAICU="
+typstDeps = []
+description = "Classes/structs, pattern matching, safe counters... and more! Your one-stop library for programming tools not already in core Typst"
+license = [
+    "Apache-2.0",
+]
+homepage = "https://github.com/patrick-kidger/typsy"
+
 [typsy."0.2.4"]
 url = "https://packages.typst.org/preview/typsy-0.2.4.tar.gz"
 hash = "sha256-FDaS0m0h6BpArRr3EM5WSz+Ixfkjru83k/deKxha8mg="
@@ -48303,6 +50121,26 @@ license = [
 ]
 homepage = "https://github.com/angelonazzaro/typxidian"
 
+[u3tudo."0.2.0"]
+url = "https://packages.typst.org/preview/u3tudo-0.2.0.tar.gz"
+hash = "sha256-zsxM9Z2i7TJSGYylBIEB0c8EFqLQ0P63zL7FWgbvYvE="
+typstDeps = []
+description = "PhD theses at TU Dortmund University"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/jannisspeer/u3tudo"
+
+[u3tudo."0.1.0"]
+url = "https://packages.typst.org/preview/u3tudo-0.1.0.tar.gz"
+hash = "sha256-HbzSUGDdiRaKztFnorl13NfsPIV2Efl8mN3ckRQqNtA="
+typstDeps = []
+description = "PhD theses at TU Dortmund University"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/jannisspeer/u3tudo"
+
 [uastw-thesis."0.1.0"]
 url = "https://packages.typst.org/preview/uastw-thesis-0.1.0.tar.gz"
 hash = "sha256-OSB1L2Y2+f1qFKig4HdRJhfBWQHbZVF5dHrG9j1f9R4="
@@ -48445,6 +50283,16 @@ license = [
 ]
 homepage = "https://github.com/fepfitra/ugm-presentation-unofficial"
 
+[ukw-bipg-unofficial-thesis."0.1.0"]
+url = "https://packages.typst.org/preview/ukw-bipg-unofficial-thesis-0.1.0.tar.gz"
+hash = "sha256-lUf7mKxc5vDe8KXUQ8trR/7EECz1dAQSk7XkZY/7t6k="
+typstDeps = []
+description = "Template for Bachelor’s and Master’s Theses in accordance with the Graduation Regulations for the Game Research and Design program (Kazimierz Wielki University in Bydgoszcz"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/ironupiwada/unofficial-ukw-thesis"
+
 [umbra."0.1.1"]
 url = "https://packages.typst.org/preview/umbra-0.1.1.tar.gz"
 hash = "sha256-jWwsmOcVIPdlYkTHHCkViz4NqPM8KjqfHnQUQZxgiPQ="
@@ -48868,6 +50716,33 @@ license = [
 ]
 homepage = "https://github.com/islatri/universal-jlu-thesis"
 
+[universal-tongji-thesis."0.1.0"]
+url = "https://packages.typst.org/preview/universal-tongji-thesis-0.1.0.tar.gz"
+hash = "sha256-olkLU/OfIx/8Rn65Nnf6rk+k8VbsifJSnLunMw35KVc="
+typstDeps = [
+    "a2c-nums_0_0_1",
+    "cetz_0_3_4",
+    "cheq_0_4_0",
+    "cuti_0_2_1",
+    "cuti_0_4_0",
+    "hydra_0_6_2",
+    "i-figured_0_1_0",
+    "i-figured_0_2_4",
+    "numbly_0_1_0",
+    "outrageous_0_3_0",
+    "pinit_0_1_3",
+    "pointless-size_0_1_2",
+    "tablex_0_0_8",
+    "wordometer_0_1_4",
+    "zh-format_0_1_0",
+    "zh-kit_0_1_0",
+]
+description = "同济大学学位论文模板。Tongji University Thesis Template"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/xialugui/universal-tongji-thesis"
+
 [uniwarn."0.1.1"]
 url = "https://packages.typst.org/preview/uniwarn-0.1.1.tar.gz"
 hash = "sha256-sTGerNf9eBuuvl20yytfvQulfWiU5gtPZOB6GK0M0ho="
@@ -51144,6 +53019,16 @@ license = [
 ]
 homepage = "https://github.com/ZaninDavide/wicked"
 
+[wired-ieee."1.0.1"]
+url = "https://packages.typst.org/preview/wired-ieee-1.0.1.tar.gz"
+hash = "sha256-EDsDt0QRCen/PRHuUvAkBxEfxDVy1JVm9osLsLFqloQ="
+typstDeps = []
+description = "A multilanguage template for writing academic papers in the IEEE style"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hugoocoto/wired-ieee"
+
 [wired-ieee."1.0.0"]
 url = "https://packages.typst.org/preview/wired-ieee-1.0.0.tar.gz"
 hash = "sha256-teY5aErfmWd6qQBR4QXf/5ZJthBARQkHnhnXPOCYRFs="
@@ -51560,6 +53445,16 @@ license = [
 ]
 homepage = "https://github.com/wardenxyz/xyznote"
 
+[xyzrender-rustyp."0.1.0"]
+url = "https://packages.typst.org/preview/xyzrender-rustyp-0.1.0.tar.gz"
+hash = "sha256-Bt7S/MeSwg+2AzOr/mlw88eRTRabFCp+S59WqK5+SQ4="
+typstDeps = []
+description = "Render XYZ molecular structures as publication-quality SVG graphics"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Typsium/xyzrender-rustyp"
+
 [yagenda."0.1.0"]
 url = "https://packages.typst.org/preview/yagenda-0.1.0.tar.gz"
 hash = "sha256-DqfJMlm2fX+mObaf5e+MSPj6xj70yhNLK3X3S/T7inI="
@@ -52107,6 +54002,16 @@ license = [
 ]
 homepage = "https://github.com/tomeichlersmith/zen-zine"
 
+[zero."0.7.0"]
+url = "https://packages.typst.org/preview/zero-0.7.0.tar.gz"
+hash = "sha256-3OztpnZLSobcF9DgTDr68nbFg3l0wrv5ADJo5WP2GOo="
+typstDeps = []
+description = "Precise scientific number and unit formatting"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Mc-Zen/zero"
+
 [zero."0.6.1"]
 url = "https://packages.typst.org/preview/zero-0.6.1.tar.gz"
 hash = "sha256-pwSOcua6iqs2tAiFn2kvYDCLhWdJWwj+p+8HR2MY6D8="
@@ -52207,6 +54112,19 @@ license = [
 ]
 homepage = "https://github.com/Mc-Zen/zero"
 
+[zero-calc."0.7.0"]
+url = "https://packages.typst.org/preview/zero-calc-0.7.0.tar.gz"
+hash = "sha256-jS28wS4n1/SdN5Nvh0SkSGaNohviy+mN2q08wdJhA+Q="
+typstDeps = [
+    "parsely_0_1_1",
+    "zero_0_7_0",
+]
+description = "Calculate and display operations with _Zero_ quantities and numbers"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Ants-Aare/zero-calc"
+
 [zh-format."0.1.0"]
 url = "https://packages.typst.org/preview/zh-format-0.1.0.tar.gz"
 hash = "sha256-OydCb8cQsUjj1GBpbB57pmNnkCWusm0JbJL9Ifl4kws="

From 170d4908c7be2501751d929128d2c5c87c27d7f1 Mon Sep 17 00:00:00 2001
From: yvnth <yashupress@gmail.com>
Date: Wed, 26 Aug 2026 17:02:59 +0530
Subject: [PATCH 030/146] pokego: 0.5.2 -> 0.5.6

pokego: 0.5.2 -> 0.5.6
---
 pkgs/by-name/po/pokego/package.nix | 34 ++++++++++++++++++++----------
 1 file changed, 23 insertions(+), 11 deletions(-)

diff --git a/pkgs/by-name/po/pokego/package.nix b/pkgs/by-name/po/pokego/package.nix
index 41d4a7ab9aa4..41f961839fe7 100644
--- a/pkgs/by-name/po/pokego/package.nix
+++ b/pkgs/by-name/po/pokego/package.nix
@@ -1,25 +1,28 @@
 {
   lib,
-  buildGoModule,
+  stdenv,
+  buildPackages,
+  buildGo127Module,
   fetchFromGitHub,
   installShellFiles,
   nix-update-script,
 }:
 
-buildGoModule (finalAttrs: {
+buildGo127Module (finalAttrs: {
   pname = "pokego";
-  version = "0.5.2";
-
+  version = "0.5.6";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "rubiin";
     repo = "pokego";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-GBKQ9YV98znhTP9QsvAAyva8dNohFS8dbQ4FAG5IDig=";
+    hash = "sha256-esUIcW7lJ6WDmu2nWeVg3UdKB5sZ7lT/ffA4FSi0/Go=";
   };
 
-  vendorHash = "sha256-a/YYEMVCqyg76P2Pyfpej46vYQhnnJjicpxNMAZGOVg=";
+  vendorHash = "sha256-Ip2GuQDOolMyDvfmXcJRlY2rMp1amS8owkqcNMOR1+Y=";
+
+  doCheck = false;
 
   ldflags = [
     "-s"
@@ -28,11 +31,20 @@ buildGoModule (finalAttrs: {
 
   nativeBuildInputs = [ installShellFiles ];
 
-  postInstall = ''
-    installShellCompletion completions/pokego.bash
-    installShellCompletion completions/pokego.fish
-    installShellCompletion completions/pokego.zsh
-  '';
+  postInstall =
+    let
+      exe =
+        if stdenv.buildPlatform.canExecute stdenv.hostPlatform then
+          "$out/bin/pokego"
+        else
+          lib.getExe buildPackages.pokego;
+    in
+    ''
+      installShellCompletion --cmd pokego \
+        --bash <(${exe} completion bash) \
+        --fish <(${exe} completion fish) \
+        --zsh <(${exe} completion zsh)
+    '';
 
   passthru.updateScript = nix-update-script { };
 

From df5ecde0170ae831646f330198c58e135a950392 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Thu, 13 Aug 2026 22:31:20 +0700
Subject: [PATCH 031/146] python3Packages.dash-core-components: migrate to
 pyproject

As part of https://github.com/NixOS/nixpkgs/issues/515974
---
 .../python-modules/dash-core-components/default.nix          | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkgs/development/python-modules/dash-core-components/default.nix b/pkgs/development/python-modules/dash-core-components/default.nix
index 47d593f502c2..080e35bca6ef 100644
--- a/pkgs/development/python-modules/dash-core-components/default.nix
+++ b/pkgs/development/python-modules/dash-core-components/default.nix
@@ -2,12 +2,13 @@
   lib,
   buildPythonPackage,
   fetchPypi,
+  setuptools,
 }:
 
 buildPythonPackage (finalAttrs: {
   pname = "dash-core-components";
   version = "2.0.0";
-  format = "setuptools";
+  pyproject = true;
 
   src = fetchPypi {
     pname = "dash_core_components";
@@ -15,6 +16,8 @@ buildPythonPackage (finalAttrs: {
     hash = "sha256-xnM4dK+XXlUvlaE5ihbC7n3xTOQ/pguzcYo8bgtj/+4=";
   };
 
+  build-system = [ setuptools ];
+
   # No tests in archive
   doCheck = false;
 

From 42107ef218ace233954ea944f5e627b9dd956387 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Fri, 31 Jul 2026 23:07:27 +0700
Subject: [PATCH 032/146] python3Packages.strictyaml: migrate to pyproject

As part of https://github.com/NixOS/nixpkgs/issues/515974
---
 pkgs/development/python-modules/strictyaml/default.nix | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/strictyaml/default.nix b/pkgs/development/python-modules/strictyaml/default.nix
index 01caa3307884..ccc0d598da8f 100644
--- a/pkgs/development/python-modules/strictyaml/default.nix
+++ b/pkgs/development/python-modules/strictyaml/default.nix
@@ -2,6 +2,7 @@
   lib,
   buildPythonPackage,
   fetchPypi,
+  setuptools,
   ruamel-yaml,
   python-dateutil,
 }:
@@ -9,7 +10,7 @@
 buildPythonPackage rec {
   pname = "strictyaml";
   version = "1.7.3";
-  format = "setuptools";
+  pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
@@ -21,7 +22,9 @@ buildPythonPackage rec {
       --replace "ruamel.yaml==0.17.4" "ruamel.yaml"
   '';
 
-  propagatedBuildInputs = [
+  build-system = [ setuptools ];
+
+  dependencies = [
     ruamel-yaml
     python-dateutil
   ];

From 7aae1ad573f7ccd1457aa64b67aa6b05c49c6cb5 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Fri, 24 Jul 2026 04:21:14 +0700
Subject: [PATCH 033/146] python3Packages.translationstring: migrate to
 pyproject

As part of https://github.com/NixOS/nixpkgs/issues/515974
---
 .../development/python-modules/translationstring/default.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkgs/development/python-modules/translationstring/default.nix b/pkgs/development/python-modules/translationstring/default.nix
index f4f90cce84e6..96f8b29fa339 100644
--- a/pkgs/development/python-modules/translationstring/default.nix
+++ b/pkgs/development/python-modules/translationstring/default.nix
@@ -2,18 +2,21 @@
   lib,
   buildPythonPackage,
   fetchPypi,
+  setuptools,
 }:
 
 buildPythonPackage rec {
   pname = "translationstring";
   version = "1.4";
-  format = "setuptools";
+  pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
     sha256 = "bf947538d76e69ba12ab17283b10355a9ecfbc078e6123443f43f2107f6376f3";
   };
 
+  build-system = [ setuptools ];
+
   meta = {
     homepage = "https://pylonsproject.org/";
     description = "Utility library for i18n relied on by various Repoze and Pyramid packages";

From 055fac6cfaeb4ce8b819fc63bf308e23c724492e Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Fri, 24 Jul 2026 04:28:21 +0700
Subject: [PATCH 034/146] python3Packages.translationstring: modernize

---
 .../python-modules/translationstring/default.nix     | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/pkgs/development/python-modules/translationstring/default.nix b/pkgs/development/python-modules/translationstring/default.nix
index 96f8b29fa339..0d99bc8c2cbe 100644
--- a/pkgs/development/python-modules/translationstring/default.nix
+++ b/pkgs/development/python-modules/translationstring/default.nix
@@ -5,22 +5,26 @@
   setuptools,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "translationstring";
   version = "1.4";
   pyproject = true;
 
+  __structuredAttrs = true;
+
   src = fetchPypi {
-    inherit pname version;
-    sha256 = "bf947538d76e69ba12ab17283b10355a9ecfbc078e6123443f43f2107f6376f3";
+    inherit (finalAttrs) pname version;
+    hash = "sha256-v5R1ONduaboSqxcoOxA1Wp7PvAeOYSNEP0PyEH9jdvM=";
   };
 
   build-system = [ setuptools ];
 
+  pythonImportsCheck = [ "translationstring" ];
+
   meta = {
     homepage = "https://pylonsproject.org/";
     description = "Utility library for i18n relied on by various Repoze and Pyramid packages";
     license = lib.licenses.bsd0;
     maintainers = [ ];
   };
-}
+})

From f828db7862a2f38cb2ebf09c4577eaa29e3da1d5 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Sun, 26 Jul 2026 23:14:27 +0700
Subject: [PATCH 035/146] python3Packages.translationstring: enable tests

---
 pkgs/development/python-modules/translationstring/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/development/python-modules/translationstring/default.nix b/pkgs/development/python-modules/translationstring/default.nix
index 0d99bc8c2cbe..af6e252f0018 100644
--- a/pkgs/development/python-modules/translationstring/default.nix
+++ b/pkgs/development/python-modules/translationstring/default.nix
@@ -3,6 +3,7 @@
   buildPythonPackage,
   fetchPypi,
   setuptools,
+  pytestCheckHook,
 }:
 
 buildPythonPackage (finalAttrs: {
@@ -19,6 +20,8 @@ buildPythonPackage (finalAttrs: {
 
   build-system = [ setuptools ];
 
+  nativeCheckInputs = [ pytestCheckHook ];
+
   pythonImportsCheck = [ "translationstring" ];
 
   meta = {

From 32641a078ffb368d726227363b0cbc933212d2fc Mon Sep 17 00:00:00 2001
From: Dmitry Bogatov <kaction.cc@gmail.com>
Date: Fri, 28 Aug 2026 20:15:20 +0000
Subject: [PATCH 036/146] pkgsStatic.xclip: fix build

---
 pkgs/by-name/xc/xclip/package.nix | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/xc/xclip/package.nix b/pkgs/by-name/xc/xclip/package.nix
index 058e28e314b6..f4a029bdb750 100644
--- a/pkgs/by-name/xc/xclip/package.nix
+++ b/pkgs/by-name/xc/xclip/package.nix
@@ -3,6 +3,7 @@
   stdenv,
   fetchFromGitHub,
   autoreconfHook,
+  pkg-config,
   libxmu,
 }:
 
@@ -17,10 +18,18 @@ stdenv.mkDerivation (finalAttrs: {
     sha256 = "0q0hmvcjlv8arhh1pzhja2wglyj6n7z209jnpnzd281kqqv4czcs";
   };
 
-  nativeBuildInputs = [ autoreconfHook ];
+  nativeBuildInputs = [
+    autoreconfHook
+    pkg-config
+  ];
 
   buildInputs = [ libxmu ];
 
+  # Make AC_CHECK_LIB(Xmu, XmuClientWindow) work.
+  preConfigure = lib.optionalString stdenv.hostPlatform.isStatic ''
+    configureFlagsArray+=("LIBS=$("$PKG_CONFIG" --libs xmu)")
+  '';
+
   meta = {
     description = "Tool to access the X clipboard from a console application";
     homepage = "https://github.com/astrand/xclip";

From bec20b46d887a6db5b4c89a6db30e0e595939f7a Mon Sep 17 00:00:00 2001
From: Jhony Angulo <leohjaf@gmail.com>
Date: Sat, 29 Aug 2026 09:16:41 -0500
Subject: [PATCH 037/146] vue-language-server: 3.3.10 -> 3.3.11

---
 pkgs/by-name/vu/vue-language-server/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/vu/vue-language-server/package.nix b/pkgs/by-name/vu/vue-language-server/package.nix
index 2b1abbe37723..b3dff276c236 100644
--- a/pkgs/by-name/vu/vue-language-server/package.nix
+++ b/pkgs/by-name/vu/vue-language-server/package.nix
@@ -18,13 +18,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "vue-language-server";
-  version = "3.3.10";
+  version = "3.3.11";
 
   src = fetchFromGitHub {
     owner = "vuejs";
     repo = "language-tools";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-3x3idLqfh3SiyyMWaCUencgvY82yjP2nTeOFASEBFbM=";
+    hash = "sha256-a8gs53zcq5qssqnxlMGjxfZaBICisdjqkLfzqZStPfQ=";
   };
 
   pnpmDeps = fetchPnpmDeps {

From cacd031e1cc7fddeb3393f8cc790dd8052540148 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C2=B7=F0=90=91=91=F0=90=91=B4=F0=90=91=95=F0=90=91=91?=
 =?UTF-8?q?=F0=90=91=A9=F0=90=91=A4?= <toastal@posteo.net>
Date: Sat, 29 Aug 2026 23:42:26 -0700
Subject: [PATCH 038/146] =?UTF-8?q?nixtamal:=201.10.0=20=E2=86=92=201.10.1?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 pkgs/by-name/ni/nixtamal/package.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ni/nixtamal/package.nix b/pkgs/by-name/ni/nixtamal/package.nix
index 679262844969..fe12acece5f8 100644
--- a/pkgs/by-name/ni/nixtamal/package.nix
+++ b/pkgs/by-name/ni/nixtamal/package.nix
@@ -21,7 +21,7 @@
 
 ocamlPackages.buildDunePackage (finalAttrs: {
   pname = "nixtamal";
-  version = "1.10.0";
+  version = "1.10.1";
   release_year = 2026;
 
   minimalOCamlVersion = "5.3";
@@ -30,7 +30,7 @@ ocamlPackages.buildDunePackage (finalAttrs: {
     url = "https://darcs.toastal.in.th/nixtamal/stable/";
     mirrors = [ "https://smeder.ee/~toastal/nixtamal.darcs" ];
     rev = finalAttrs.version;
-    hash = "sha256-IiR8hihbhdGDIcKA4dwQPcieSxT6VOlB2TcuHB16PmQ=";
+    hash = "sha256-cKYsuwUq2IVr50Tnc7qzMZANkldFAVDaXFWfgx7i8Ks=";
   };
 
   nativeBuildInputs = [
@@ -56,6 +56,7 @@ ocamlPackages.buildDunePackage (finalAttrs: {
     camomile
     eio
     eio_main
+    eio_posix
     jingoo
     (jsont.override {
       withBrr = false;

From 4399b792b7f20f43eb81cba27253fbf0a1f300fc Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Thu, 13 Aug 2026 22:35:16 +0700
Subject: [PATCH 039/146] python3Packages.dash-core-components: enable
 __structuredAttrs

---
 .../development/python-modules/dash-core-components/default.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/development/python-modules/dash-core-components/default.nix b/pkgs/development/python-modules/dash-core-components/default.nix
index 080e35bca6ef..575b4e569e01 100644
--- a/pkgs/development/python-modules/dash-core-components/default.nix
+++ b/pkgs/development/python-modules/dash-core-components/default.nix
@@ -10,6 +10,8 @@ buildPythonPackage (finalAttrs: {
   version = "2.0.0";
   pyproject = true;
 
+  __structuredAttrs = true;
+
   src = fetchPypi {
     pname = "dash_core_components";
     inherit (finalAttrs) version;

From 6780364a6a2ace3d8f176c6fa58c3525af360f50 Mon Sep 17 00:00:00 2001
From: Nikita Pedorich <pedorich.n@gmail.com>
Date: Sun, 30 Aug 2026 17:57:09 +0900
Subject: [PATCH 040/146] mcp-proxy: 0.10.0 -> 0.12.0

---
 pkgs/by-name/mc/mcp-proxy/package.nix | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/mc/mcp-proxy/package.nix b/pkgs/by-name/mc/mcp-proxy/package.nix
index e964f39d87a9..525ab84eeaf0 100644
--- a/pkgs/by-name/mc/mcp-proxy/package.nix
+++ b/pkgs/by-name/mc/mcp-proxy/package.nix
@@ -2,16 +2,17 @@
   lib,
   python3Packages,
   fetchFromGitHub,
+  versionCheckHook,
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "mcp-proxy";
-  version = "0.10.0";
+  version = "0.12.0";
 
   src = fetchFromGitHub {
     owner = "sparfenyuk";
     repo = "mcp-proxy";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Hig+ZDFdToiYGOjb/rpqxnu8MaLmQLgSh5WYcgJGA1I=";
+    hash = "sha256-rurNHP5TprhFUrg+0E6FnNxhCqQv2xtkfhUrGUdGod0=";
   };
 
   pyproject = true;
@@ -19,10 +20,15 @@ python3Packages.buildPythonApplication (finalAttrs: {
   build-system = [ python3Packages.setuptools ];
 
   dependencies = with python3Packages; [
-    uvicorn
+    httpx-auth
     mcp
+    uvicorn
   ];
 
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+
   nativeCheckInputs = with python3Packages; [
     pytestCheckHook
     pytest-asyncio

From 5bbc3f65e45a12bd370c73e1d8bf9c8d34afd208 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Fri, 31 Jul 2026 23:11:41 +0700
Subject: [PATCH 041/146] python3Packages.strictyaml: use finalAttrs and enable
 __structuredAttrs

---
 pkgs/development/python-modules/strictyaml/default.nix | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/strictyaml/default.nix b/pkgs/development/python-modules/strictyaml/default.nix
index ccc0d598da8f..8abbc899bd1e 100644
--- a/pkgs/development/python-modules/strictyaml/default.nix
+++ b/pkgs/development/python-modules/strictyaml/default.nix
@@ -7,13 +7,15 @@
   python-dateutil,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "strictyaml";
   version = "1.7.3";
   pyproject = true;
 
+  __structuredAttrs = true;
+
   src = fetchPypi {
-    inherit pname version;
+    inherit (finalAttrs) pname version;
     hash = "sha256-IvhUpfyrQrXduoAwoOS+UcqJrwJnlhyNbPqGOVWGxAc=";
   };
 
@@ -42,4 +44,4 @@ buildPythonPackage rec {
     license = lib.licenses.mit;
     maintainers = [ ];
   };
-}
+})

From a82782735f991090279537790fe20e84e7146a67 Mon Sep 17 00:00:00 2001
From: OPNA2608 <opna2608@protonmail.com>
Date: Sun, 30 Aug 2026 22:04:13 +0200
Subject: [PATCH 042/146] lomiri.lomiri-system-settings: 1.3.2 -> 1.4.0

(LSS security-privacy plugin was merged back into LSS awhile ago)
---
 nixos/tests/lomiri-system-settings.nix        | 17 ++++--
 .../2000-Support-wrapping-for-Nixpkgs.patch   | 41 ++++++++------
 .../lomiri-system-settings/default.nix        | 56 +++++++++++--------
 3 files changed, 70 insertions(+), 44 deletions(-)

diff --git a/nixos/tests/lomiri-system-settings.nix b/nixos/tests/lomiri-system-settings.nix
index 4b7975e26d56..c267a0ef3157 100644
--- a/nixos/tests/lomiri-system-settings.nix
+++ b/nixos/tests/lomiri-system-settings.nix
@@ -29,6 +29,7 @@
         ubuntu-classic
       ];
 
+      services.printing.enable = true;
       services.upower.enable = true;
     };
 
@@ -37,7 +38,7 @@
   testScript =
     let
       settingsPages = [
-        # Base pages
+        # Network
         {
           name = "wifi";
           type = "internal";
@@ -55,6 +56,8 @@
           element = "Add|Manual|Configuration";
           skipOCR = true;
         }
+
+        # Personal
         {
           name = "appearance";
           type = "internal";
@@ -85,6 +88,13 @@
           type = "internal";
           element = "Edge drag";
         }
+
+        # System
+        {
+          name = "printing";
+          type = "internal";
+          element = "no printers configured";
+        }
         {
           name = "mouse";
           type = "internal";
@@ -95,13 +105,10 @@
           type = "internal";
           element = "Time zone|Set the time and date";
         }
-
-        # External plugins
         {
           name = "security-privacy";
-          type = "external";
+          type = "internal";
           element = "Locking|unlocking|permissions";
-          elementLocalised = "Sperren|Entsperren|Berechtigungen";
         }
       ];
     in
diff --git a/pkgs/desktops/lomiri/applications/lomiri-system-settings/2000-Support-wrapping-for-Nixpkgs.patch b/pkgs/desktops/lomiri/applications/lomiri-system-settings/2000-Support-wrapping-for-Nixpkgs.patch
index 8e39ea5fdfc0..e3cd50afb13a 100644
--- a/pkgs/desktops/lomiri/applications/lomiri-system-settings/2000-Support-wrapping-for-Nixpkgs.patch
+++ b/pkgs/desktops/lomiri/applications/lomiri-system-settings/2000-Support-wrapping-for-Nixpkgs.patch
@@ -1,15 +1,3 @@
-From 8e21cf46551091c884014985d3e0dd9704d6dc04 Mon Sep 17 00:00:00 2001
-From: OPNA2608 <opna2608@protonmail.com>
-Date: Wed, 14 Feb 2024 16:00:24 +0100
-Subject: [PATCH] Support wrapping for Nixpkgs
-
----
- src/CMakeLists.txt   | 24 +++++++++++++++++++-----
- src/main.cpp         |  8 +++++---
- src/plugin.cpp       | 19 +++++++++++++++++--
- tests/CMakeLists.txt | 18 ++++++++++++++----
- 4 files changed, 55 insertions(+), 14 deletions(-)
-
 diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
 index cd3131d0..fcd78bdf 100644
 --- a/src/CMakeLists.txt
@@ -48,7 +36,7 @@ index cd3131d0..fcd78bdf 100644
  add_subdirectory(SystemSettings)
  
 diff --git a/src/main.cpp b/src/main.cpp
-index 64441da3..cfcabe42 100644
+index d0897fa9..d244fead 100644
 --- a/src/main.cpp
 +++ b/src/main.cpp
 @@ -42,6 +42,8 @@ int main(int argc, char **argv)
@@ -60,7 +48,7 @@ index 64441da3..cfcabe42 100644
      // Ensure printing environment is correct.
      qputenv("QT_PRINTER_MODULE", "cupsprintersupport");
  
-@@ -78,12 +80,12 @@ int main(int argc, char **argv)
+@@ -79,12 +81,12 @@ int main(int argc, char **argv)
      qmlRegisterType<LomiriSystemSettings::PluginManager>("SystemSettings", 1, 0, "PluginManager");
      view.engine()->rootContext()->setContextProperty("Utilities", &utils);
      view.setResizeMode(QQuickView::SizeRootObjectToView);
@@ -76,6 +64,28 @@ index 64441da3..cfcabe42 100644
      view.rootContext()->setContextProperty("pluginOptions", pluginOptions);
      view.rootContext()->setContextProperty("view", &view);
      view.setSource(QUrl("qrc:/qml/MainWindow.qml"));
+diff --git a/src/plugin-manager.cpp b/src/plugin-manager.cpp
+index 0f5133ce..e2f0bf84 100644
+--- a/src/plugin-manager.cpp
++++ b/src/plugin-manager.cpp
+@@ -87,8 +87,16 @@ void PluginManagerPrivate::reload()
+      * does not seem to work with a dir and file pattern, which means it will
+      * look for all .settings files, not just those in well-known locations. */
+     QStandardPaths::StandardLocation loc = QStandardPaths::GenericDataLocation;
++    QStringList searchPathBases;
++    QString nixDefinedPrefix = qgetenv("NIX_LSS_PREFIX");
++    if (!nixDefinedPrefix.isEmpty()) {
++        searchPathBases.append(nixDefinedPrefix + "/share");
++    } else {
++        searchPathBases = QStandardPaths::standardLocations(loc);
++    }
++
+     QFileInfoList searchPaths;
+-    Q_FOREACH(const QString &path, QStandardPaths::standardLocations(loc)) {
++    Q_FOREACH(const QString &path, searchPathBases) {
+         QDir dir(QStringLiteral("%1/%2").arg(path, baseDir), "*.settings");
+         searchPaths.append(dir.entryInfoList());
+     }
 diff --git a/src/plugin.cpp b/src/plugin.cpp
 index 133821af..6a1a152c 100644
 --- a/src/plugin.cpp
@@ -155,6 +165,3 @@ index c10b2e2d..a998b641 100644
  add_definitions(-DSYSTEM_IMAGE_DBUS_TEMPLATE="${CMAKE_SOURCE_DIR}/tests/autopilot/lomiri_system_settings/tests/systemimage.py")
  
  add_library(test-plugin SHARED test-plugin.cpp test-plugin.h)
--- 
-2.42.0
-
diff --git a/pkgs/desktops/lomiri/applications/lomiri-system-settings/default.nix b/pkgs/desktops/lomiri/applications/lomiri-system-settings/default.nix
index ccd744d9a239..b258d7cf2ba3 100644
--- a/pkgs/desktops/lomiri/applications/lomiri-system-settings/default.nix
+++ b/pkgs/desktops/lomiri/applications/lomiri-system-settings/default.nix
@@ -2,6 +2,7 @@
   stdenv,
   lib,
   fetchFromGitLab,
+  fetchpatch,
   gitUpdater,
   testers,
   accountsservice,
@@ -27,6 +28,7 @@
   lomiri-indicator-network,
   lomiri-schemas,
   lomiri-settings-components,
+  lomiri-ui-extras,
   lomiri-ui-toolkit,
   maliit-keyboard,
   mesa,
@@ -48,13 +50,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "lomiri-system-settings-unwrapped";
-  version = "1.3.2";
+  version = "1.4.0";
 
   src = fetchFromGitLab {
     owner = "ubports";
     repo = "development/core/lomiri-system-settings";
     tag = finalAttrs.version;
-    hash = "sha256-bVBxJgOy1eXqwzcgBRUTlFoJxxw9I1Qc+Wn92U0QzA4=";
+    hash = "sha256-tFdAWPoMJlkKXaWg4H/pv2VJGCutprcjL4CyBSRPXeI=";
   };
 
   outputs = [
@@ -63,37 +65,47 @@ stdenv.mkDerivation (finalAttrs: {
   ];
 
   patches = [
+    # Remove when version > 1.4.0
+    (fetchpatch {
+      name = "0001-lomiri-system-settings-Avoid-UB-when-VARIANT_ID-is-not-set.patch";
+      url = "https://gitlab.com/ubports/development/core/lomiri-system-settings/-/commit/78b462aed589213e7a26064ec1bd27d201bb8f04.patch";
+      hash = "sha256-Xb6x/AlL+m8qD29bHeiU20Je2GeHzybcUprPLQuh8fk=";
+    })
+
     ./2000-Support-wrapping-for-Nixpkgs.patch
   ];
 
   postPatch = ''
     substituteInPlace CMakeLists.txt \
-      --replace-fail "\''${CMAKE_INSTALL_LIBDIR}/qt5/qml" "\''${CMAKE_INSTALL_PREFIX}/${qtbase.qtQmlPrefix}" \
-
-    # Port from lomiri-keyboard to maliit-keyboard
+      --replace-fail "\''${CMAKE_INSTALL_LIBDIR}/qt5/qml" "\''${CMAKE_INSTALL_PREFIX}/${qtbase.qtQmlPrefix}"
+  ''
+  # Port from lomiri-keyboard to maliit-keyboard
+  + ''
     substituteInPlace plugins/language/{PageComponent,SpellChecking,ThemeValues}.qml plugins/language/onscreenkeyboard-plugin.cpp plugins/sound/PageComponent.qml \
       --replace-fail 'com.lomiri.keyboard.maliit' 'org.maliit.keyboard.maliit'
-
-    # Gets list of available localisations from current system, but later drops any language that doesn't cover LSS
-    # So just give it its own prefix
+  ''
+  # Gets list of available localisations from current system, but later drops any language that doesn't cover LSS
+  # So just give it its own prefix
+  + ''
     substituteInPlace plugins/language/language-plugin.cpp \
       --replace-fail '/usr/share/locale' '${placeholder "out"}/share/locale'
-
-    # Decide which entries should be visible based on the current system
+  ''
+  # Decide which entries should be visible based on the current system
+  + ''
     substituteInPlace plugins/*/*.settings \
       --replace-warn '/etc' '/run/current-system/sw/etc'
-
-    # Don't use absolute paths in desktop file
+  ''
+  # Don't use absolute paths in desktop file
+  + ''
     substituteInPlace lomiri-system-settings.desktop.in.in \
       --replace-fail 'Icon=@SETTINGS_SHARE_DIR@/system-settings.svg' 'Icon=lomiri-system-settings' \
-      --replace-fail 'X-Lomiri-Splash-Image=@SETTINGS_SHARE_DIR@/system-settings-app-splash.svg' 'X-Lomiri-Splash-Image=lomiri-app-launch/splash/lomiri-system-settings.svg' \
-      --replace-fail 'X-Screenshot=@SETTINGS_SHARE_DIR@/screenshot.png' 'X-Screenshot=lomiri-app-launch/screenshot/lomiri-system-settings.png'
-
-    # https://gitlab.com/ubports/development/core/lomiri-system-settings/-/merge_requests/525
-    substituteInPlace \
-      plugins/notifications/click_applications_model.h \
-      plugins/notifications/general_notification_settings.h \
-      --replace-fail '<QGSettings/QGSettings>' '<QGSettings>'
+      --replace-fail 'X-Lomiri-Splash-Image=@SETTINGS_SHARE_DIR@/system-settings-app-splash.svg' 'X-Lomiri-Splash-Image=lomiri-app-launch/splash/lomiri-system-settings.svg'
+  ''
+  # https://gitlab.com/ubports/development/core/lomiri-system-settings/-/merge_requests/547
+  # Remove when version > 1.4.0
+  + ''
+    substituteInPlace plugins/printing/CMakeLists.txt \
+      --replace-fail 'GLIB_LD_FLAGS' 'GLIB_LDFLAGS'
   '';
 
   strictDeps = true;
@@ -134,6 +146,7 @@ stdenv.mkDerivation (finalAttrs: {
     lomiri-indicator-network
     lomiri-schemas
     lomiri-settings-components
+    lomiri-ui-extras
     lomiri-ui-toolkit
     maliit-keyboard
     qmenumodel
@@ -188,11 +201,10 @@ stdenv.mkDerivation (finalAttrs: {
   postInstall = ''
     glib-compile-schemas $out/share/glib-2.0/schemas
 
-    mkdir -p $out/share/{icons/hicolor/scalable/apps,lomiri-app-launch/{splash,screenshot}}
+    mkdir -p $out/share/{icons/hicolor/scalable/apps,lomiri-app-launch/splash}
 
     ln -s $out/share/lomiri-system-settings/system-settings.svg $out/share/icons/hicolor/scalable/apps/lomiri-system-settings.svg
     ln -s $out/share/lomiri-system-settings/system-settings-app-splash.svg $out/share/lomiri-app-launch/splash/lomiri-system-settings.svg
-    ln -s $out/share/lomiri-system-settings/screenshot.png $out/share/lomiri-app-launch/screenshot/lomiri-system-settings.png
   '';
 
   passthru = {

From 3ad1a438e01dc7ba34d3ccfd4a7b5fd71dd9f91c Mon Sep 17 00:00:00 2001
From: OPNA2608 <opna2608@protonmail.com>
Date: Sun, 30 Aug 2026 22:08:47 +0200
Subject: [PATCH 043/146] lomiri.lomiri-system-settings: Inherit unwrapped's
 pkg-config test

So automation will run it + the VM tests when referencing the wrapped derivation.
---
 .../lomiri/applications/lomiri-system-settings/wrapper.nix   | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkgs/desktops/lomiri/applications/lomiri-system-settings/wrapper.nix b/pkgs/desktops/lomiri/applications/lomiri-system-settings/wrapper.nix
index 2a2112f5de3b..1d7358d967ea 100644
--- a/pkgs/desktops/lomiri/applications/lomiri-system-settings/wrapper.nix
+++ b/pkgs/desktops/lomiri/applications/lomiri-system-settings/wrapper.nix
@@ -62,7 +62,10 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     )
   '';
 
-  passthru.tests.standalone = nixosTests.lomiri-system-settings;
+  passthru.tests = {
+    inherit (lomiri-system-settings-unwrapped.passthru.tests) pkg-config;
+    standalone = nixosTests.lomiri-system-settings;
+  };
 
   meta = lomiri-system-settings-unwrapped.meta // {
     description = "System Settings application for Lomiri (wrapped)";

From ab5f84574b3e64303a923945be45c1a11e4232b7 Mon Sep 17 00:00:00 2001
From: nikstur <nikstur@outlook.com>
Date: Tue, 25 Aug 2026 14:38:37 +0200
Subject: [PATCH 044/146] nixos/tests/test-driver/junit: init

---
 nixos/tests/all-tests.nix               | 10 ++++++++++
 nixos/tests/nixos-test-driver/junit.nix | 25 +++++++++++++++++++++++++
 2 files changed, 35 insertions(+)
 create mode 100644 nixos/tests/nixos-test-driver/junit.nix

diff --git a/nixos/tests/all-tests.nix b/nixos/tests/all-tests.nix
index 47c566171e56..012341ca77ce 100644
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@@ -175,6 +175,16 @@ in
           touch $out
         '';
     efivars = runTestOn [ "x86_64-linux" ] ./nixos-test-driver/efivars.nix;
+    junit =
+      pkgs.runCommand "junit-xml-has-correct-testcases"
+        {
+          test = runTest ./nixos-test-driver/junit.nix;
+          nativeBuildInputs = [ pkgs.yq-go ];
+        }
+        ''
+          [[ 2 = $(yq '.testsuites.testsuite.+@tests' $test/junit.xml) ]]
+          touch $out
+        '';
   };
 
   # NixOS vm tests and non-vm unit tests
diff --git a/nixos/tests/nixos-test-driver/junit.nix b/nixos/tests/nixos-test-driver/junit.nix
new file mode 100644
index 000000000000..26638d9c582d
--- /dev/null
+++ b/nixos/tests/nixos-test-driver/junit.nix
@@ -0,0 +1,25 @@
+# This tests the generation of junit files via the test driver.
+{
+  name = "junit";
+
+  extraDriverArgs = [ "--junit=junit.xml" ];
+
+  nodes.machine = {
+    # Speeds up the boot significantly
+    networking.useNetworkd = true;
+
+    environment.etc."something".text = "nothing";
+  };
+
+  testScript = ''
+    machine.start()
+    machine.wait_for_unit("multi-user.target")
+
+    with subtest("systemd-networkd is started"):
+      machine.succeed("systemctl status systemd-networkd.service")
+
+    with subtest("/etc is populated correctly"):
+      output = machine.succeed("cat /etc/something")
+      t.assertEqual(output, "nothing")
+  '';
+}

From 88f736316d03eedbdbf4fcfafddfd9757265996d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Sun, 30 Aug 2026 16:53:27 -0700
Subject: [PATCH 045/146] nvtopPackages.nvidia: honor config.cudaSupport

---
 pkgs/tools/system/nvtop/build-nvtop.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/pkgs/tools/system/nvtop/build-nvtop.nix b/pkgs/tools/system/nvtop/build-nvtop.nix
index 86f194d97c55..3fadea5767ca 100644
--- a/pkgs/tools/system/nvtop/build-nvtop.nix
+++ b/pkgs/tools/system/nvtop/build-nvtop.nix
@@ -4,7 +4,9 @@
   fetchFromGitHub,
   cmake,
   gtest,
+  config,
   cudaPackages,
+  cudaSupport ? config.cudaSupport,
   libdrm,
   ncurses,
   versionCheckHook,
@@ -85,7 +87,7 @@ stdenv.mkDerivation (finalAttrs: {
     ncurses
   ]
   ++ lib.optional stdenv.hostPlatform.isLinux udev
-  ++ lib.optional nvidia cudaPackages.cuda_nvml_dev
+  ++ lib.optional (nvidia && cudaSupport) cudaPackages.cuda_nvml_dev
   ++ lib.optional needDrm libdrm;
 
   # this helps cmake to find <drm.h>

From fb777e0947c3d36c666766e2b94292972e5c0249 Mon Sep 17 00:00:00 2001
From: Darren Rambaud <225436867+debtquity@users.noreply.github.com>
Date: Sun, 30 Aug 2026 23:33:48 -0500
Subject: [PATCH 046/146] metadata: 0.1.12 -> 0.1.13

* diff: https://github.com/zmwangx/metadata/compare/v0.1.12...v0.1.13
* upstream is now using ffmeg-next 9, patch is no longer necessary
* re-introduce test
---
 .../by-name/me/metadata/ffmpeg-next-8.1.patch | 71 -------------------
 pkgs/by-name/me/metadata/package.nix          | 30 +++-----
 2 files changed, 10 insertions(+), 91 deletions(-)
 delete mode 100644 pkgs/by-name/me/metadata/ffmpeg-next-8.1.patch

diff --git a/pkgs/by-name/me/metadata/ffmpeg-next-8.1.patch b/pkgs/by-name/me/metadata/ffmpeg-next-8.1.patch
deleted file mode 100644
index d31eb0b14241..000000000000
--- a/pkgs/by-name/me/metadata/ffmpeg-next-8.1.patch
+++ /dev/null
@@ -1,71 +0,0 @@
-diff --git a/Cargo.lock b/Cargo.lock
---- a/Cargo.lock
-+++ b/Cargo.lock
-@@ -37,7 +37,7 @@
- source = "registry+https://github.com/rust-lang/crates.io-index"
- checksum = "4f72209734318d0b619a5e0f5129918b848c416e122a3c4ce054e03cb87b726f"
- dependencies = [
-- "bitflags 2.9.3",
-+ "bitflags 2.11.1",
-  "cexpr",
-  "clang-sys",
-  "itertools",
-@@ -57,9 +57,9 @@
- 
- [[package]]
- name = "bitflags"
--version = "2.9.3"
-+version = "2.11.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "34efbcccd345379ca2868b2b2c9d3782e9cc58ba87bc7d79d5b53d9c9ae6f25d"
-+checksum = "c4512299f36f043ab09a583e57bceb5a5aab7a73db1805848e8fef3c9e8c78b3"
- 
- [[package]]
- name = "block-buffer"
-@@ -204,20 +204,20 @@
- 
- [[package]]
- name = "ffmpeg-next"
--version = "8.0.0"
-+version = "8.1.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "d658424d233cbd993a972dd73a66ca733acd12a494c68995c9ac32ae1fe65b40"
-+checksum = "f7c4bd5ab1ac61f29c634df1175d350ded29cf74c3c6d4f7030431a5ae3c7d5d"
- dependencies = [
-- "bitflags 2.9.3",
-+ "bitflags 2.11.1",
-  "ffmpeg-sys-next",
-  "libc",
- ]
- 
- [[package]]
- name = "ffmpeg-sys-next"
--version = "8.0.1"
-+version = "8.1.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "9bca20aa4ee774fe384c2490096c122b0b23cf524a9910add0686691003d797b"
-+checksum = "a314bc0e022a33a99567ed4bd2576bd58ffd8fcff7891c29194cfecc26a62547"
- dependencies = [
-  "bindgen",
-  "cc",
-@@ -606,7 +606,7 @@
- source = "registry+https://github.com/rust-lang/crates.io-index"
- checksum = "11181fbabf243db407ef8df94a6ce0b2f9a733bd8be4ad02b4eda9602296cac8"
- dependencies = [
-- "bitflags 2.9.3",
-+ "bitflags 2.11.1",
-  "errno",
-  "libc",
-  "linux-raw-sys",
-diff --git a/Cargo.toml b/Cargo.toml
---- a/Cargo.toml
-+++ b/Cargo.toml
-@@ -33,7 +33,7 @@
- serde_derive = "1.0.198"
- 
- [dependencies.ffmpeg-next]
--version = "8.0.0"
-+version = "8.1.0"
- default-features = false
- features = ["codec", "format"]
- 
diff --git a/pkgs/by-name/me/metadata/package.nix b/pkgs/by-name/me/metadata/package.nix
index 8e3c75f30c07..2a40294dc12c 100644
--- a/pkgs/by-name/me/metadata/package.nix
+++ b/pkgs/by-name/me/metadata/package.nix
@@ -11,21 +11,18 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "metadata";
-  version = "0.1.12";
+  version = "0.1.13";
 
   src = fetchFromGitHub {
     owner = "zmwangx";
     repo = "metadata";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-gDOYqPwrWUfUTCx+p+ZpwsP8XxUufDCGem/WzW5cQPc=";
+    hash = "sha256-E9UL10RYHibbaLIHbgMxuOAz7RLKGcZgyfvS1HDFZjE=";
   };
 
-  cargoPatches = [
-    # bump ffmpeg-next 8.0.0 -> 8.1.0 for ffmpeg 8.1 enum variants
-    ./ffmpeg-next-8.1.patch
-  ];
+  cargoHash = "sha256-oVP9DXnVU1uZrGkJuELRtExpQnYqrzhjxGpIDWDbbbA=";
 
-  cargoHash = "sha256-TgF88oaf6567Xk20TkqbtE+H+nEKTiUSyswvxvCNFVI=";
+  env.FFMPEG_DIR = ffmpeg.dev;
 
   nativeBuildInputs = [
     pkg-config
@@ -34,25 +31,18 @@ rustPlatform.buildRustPackage (finalAttrs: {
     rustPlatform.bindgenHook
   ];
 
-  postBuild = ''
-    a2x --doctype manpage --format manpage man/metadata.1.adoc
-  '';
-  postInstall = ''
-    installManPage man/metadata.1
-  '';
-
   buildInputs = [
     ffmpeg
     glib
   ];
 
-  env.FFMPEG_DIR = ffmpeg.dev;
+  postBuild = ''
+    a2x --doctype manpage --format manpage man/metadata.1.adoc
+  '';
 
-  checkFlags = [
-    # "AAC (HE-AAC v2)" is reported as "AAC (LC)" in newer ffmpeg
-    # https://github.com/zmwangx/metadata/issues/13
-    "--skip=aac_he_aac"
-  ];
+  postInstall = ''
+    installManPage man/metadata.1
+  '';
 
   nativeInstallCheckInputs = [ versionCheckHook ];
   doInstallCheck = true;

From 475ca4e8993a21f5da739b9b72307f97a5c7f667 Mon Sep 17 00:00:00 2001
From: Darren Rambaud <225436867+debtquity@users.noreply.github.com>
Date: Sun, 30 Aug 2026 23:36:57 -0500
Subject: [PATCH 047/146] metadata: add debtquity as maintainer

* no maintainer, will adopt the package
---
 pkgs/by-name/me/metadata/package.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/me/metadata/package.nix b/pkgs/by-name/me/metadata/package.nix
index 2a40294dc12c..fe94d7b6c789 100644
--- a/pkgs/by-name/me/metadata/package.nix
+++ b/pkgs/by-name/me/metadata/package.nix
@@ -49,9 +49,11 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   meta = {
     description = "Media metadata parser and formatter designed for human consumption, powered by FFmpeg";
-    maintainers = [ ];
     license = lib.licenses.mit;
     homepage = "https://github.com/zmwangx/metadata";
     mainProgram = "metadata";
+    maintainers = with lib.maintainers; [
+      debtquity
+    ];
   };
 })

From 678438680f2b625351c2b4a968543a7af963e179 Mon Sep 17 00:00:00 2001
From: Logan Devine <logan@zirco.dev>
Date: Thu, 20 Aug 2026 14:41:54 -0700
Subject: [PATCH 048/146] dcpomatic: init at 2.19.1

---
 pkgs/by-name/dc/dcpomatic/asdcplib.nix        |  55 ++++++++
 .../leqm-nrt-libsndfile-linking.patch         |  12 ++
 pkgs/by-name/dc/dcpomatic/leqm-nrt.nix        |  48 +++++++
 pkgs/by-name/dc/dcpomatic/libcxml.nix         |  55 ++++++++
 pkgs/by-name/dc/dcpomatic/libdcp.nix          |  84 +++++++++++++
 pkgs/by-name/dc/dcpomatic/libsub.nix          |  57 +++++++++
 pkgs/by-name/dc/dcpomatic/libttf.nix          |  47 +++++++
 pkgs/by-name/dc/dcpomatic/package.nix         | 118 ++++++++++++++++++
 8 files changed, 476 insertions(+)
 create mode 100644 pkgs/by-name/dc/dcpomatic/asdcplib.nix
 create mode 100644 pkgs/by-name/dc/dcpomatic/leqm-nrt-libsndfile-linking.patch
 create mode 100644 pkgs/by-name/dc/dcpomatic/leqm-nrt.nix
 create mode 100644 pkgs/by-name/dc/dcpomatic/libcxml.nix
 create mode 100644 pkgs/by-name/dc/dcpomatic/libdcp.nix
 create mode 100644 pkgs/by-name/dc/dcpomatic/libsub.nix
 create mode 100644 pkgs/by-name/dc/dcpomatic/libttf.nix
 create mode 100644 pkgs/by-name/dc/dcpomatic/package.nix

diff --git a/pkgs/by-name/dc/dcpomatic/asdcplib.nix b/pkgs/by-name/dc/dcpomatic/asdcplib.nix
new file mode 100644
index 000000000000..e6633fc44696
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/asdcplib.nix
@@ -0,0 +1,55 @@
+{
+  lib,
+  stdenv,
+  fetchgit,
+
+  wafHook,
+  python3,
+  gitMinimal,
+  pkg-config,
+  openssl,
+  boost,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "asdcplib";
+  version = "1.0.11";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/asdcplib";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-VkXDiNYPXU4eOgOfhZB3RMoSp1ujL2jMdAYwjdyIei0=";
+  };
+
+  # for some reason the version is not set properly upstream
+  postPatch = ''
+    substituteInPlace wscript \
+      --replace-fail \
+        "VERSION = open('VERSION').read().strip()" \
+        "VERSION = '${finalAttrs.version}'"
+  '';
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+  ];
+
+  buildInputs = [
+    openssl
+    boost
+  ];
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = {
+    description = "asdcplib library for low-level DCP handling";
+    homepage = "https://git.carlh.net/cgit/asdcplib";
+    downloadPage = "https://git.carlh.net/cgit/asdcplib";
+    license = lib.licenses.bsd3;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})
diff --git a/pkgs/by-name/dc/dcpomatic/leqm-nrt-libsndfile-linking.patch b/pkgs/by-name/dc/dcpomatic/leqm-nrt-libsndfile-linking.patch
new file mode 100644
index 000000000000..924eff5fa865
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/leqm-nrt-libsndfile-linking.patch
@@ -0,0 +1,12 @@
+diff --git a/src/wscript b/src/wscript
+index cbea215..62b0a06 100644
+--- a/src/wscript
++++ b/src/wscript
+@@ -6,6 +6,7 @@ def build(bld):
+     obj.source = 'leqm_nrt.cc'
+ 
+     if bld.env.WITH_LIBSNDFILE:
++        obj.uselib = 'SNDFILE'
+         obj = bld(features='cxx cxxprogram')
+         obj.name = 'leqm_nrt_cli'
+         obj.target = 'leqm_nrt'
diff --git a/pkgs/by-name/dc/dcpomatic/leqm-nrt.nix b/pkgs/by-name/dc/dcpomatic/leqm-nrt.nix
new file mode 100644
index 000000000000..801325f05cbe
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/leqm-nrt.nix
@@ -0,0 +1,48 @@
+{
+  stdenv,
+  lib,
+  fetchgit,
+  wafHook,
+  python3,
+  gitMinimal,
+  pkg-config,
+  libsndfile,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "leqm-nrt";
+  version = "0.0.2";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/leqm-nrt";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-rynqxvh2FT03Fs5XOV5ZBLzB6lJlop793cMv0FB3s1g=";
+  };
+
+  patches = [
+    ./leqm-nrt-libsndfile-linking.patch
+  ];
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+  ];
+
+  buildInputs = [
+    libsndfile
+  ];
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = {
+    description = "a non-real-time implementation of Leq(M) measurement";
+    homepage = "https://git.carlh.net/cgit/leqm-nrt";
+    downloadPage = "https://git.carlh.net/cgit/leqm-nrt";
+    license = lib.licenses.gpl3Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})
diff --git a/pkgs/by-name/dc/dcpomatic/libcxml.nix b/pkgs/by-name/dc/dcpomatic/libcxml.nix
new file mode 100644
index 000000000000..f0c5430dfe35
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/libcxml.nix
@@ -0,0 +1,55 @@
+{
+  lib,
+  stdenv,
+  fetchgit,
+
+  wafHook,
+  python3,
+  gitMinimal,
+  pkg-config,
+  libxmlxx,
+  boost,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "libcxml";
+  version = "0.17.17";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/libcxml.git";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-fd6KYSQnFw3aHCQOT6TTcGUvTxIWrJeRT5rmk2CgbrQ=";
+  };
+
+  # for some reason the version is not set properly upstream
+  postPatch = ''
+    substituteInPlace wscript \
+      --replace-fail \
+        "this_version = subprocess.Popen(shlex.split('git tag -l --points-at HEAD'), stdout=subprocess.PIPE).communicate()[0].decode('UTF-8')" \
+        "this_version = 'v${finalAttrs.version}'"
+  '';
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+  ];
+
+  buildInputs = [
+    libxmlxx
+    boost
+  ];
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = {
+    description = "libxml++ helper library";
+    homepage = "https://git.carlh.net/cgit/libcxml";
+    downloadPage = "https://git.carlh.net/cgit/libcxml";
+    license = lib.licenses.gpl2Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})
diff --git a/pkgs/by-name/dc/dcpomatic/libdcp.nix b/pkgs/by-name/dc/dcpomatic/libdcp.nix
new file mode 100644
index 000000000000..4f05059d69a5
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/libdcp.nix
@@ -0,0 +1,84 @@
+{
+  lib,
+  stdenv,
+  fetchgit,
+
+  wafHook,
+  python3,
+  gitMinimal,
+  pkg-config,
+  openssl,
+  libxmlxx,
+  libcxml,
+  xmlsec,
+  imagemagick,
+  libsndfile,
+  openjpeg,
+  boost,
+  xercesc,
+  ffmpeg-headless,
+  fmt,
+  fast-float,
+  libtool,
+  libharu,
+  asdcplib,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "libdcp";
+  version = "1.10.61";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/libdcp";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-MV2kANCq8IqsSJIk95rqIX7iSGmnDVetXPMLn5mEOEs=";
+  };
+
+  # for some reason the version is not set properly upstream
+  postPatch = ''
+    substituteInPlace wscript \
+      --replace-fail \
+        "this_version = subprocess.Popen(shlex.split('git tag -l --points-at HEAD'), stdout=subprocess.PIPE).communicate()[0].decode('UTF-8')" \
+        "this_version = 'v${finalAttrs.version}'"
+  '';
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+  ];
+
+  buildInputs = [
+    openssl
+    libxmlxx
+    libcxml
+    xmlsec
+    imagemagick
+    libsndfile
+    openjpeg
+    asdcplib
+    xercesc
+    boost
+    ffmpeg-headless
+    fmt
+    fast-float
+    libtool
+    libharu
+  ];
+
+  propagatedBuildInputs = [
+    asdcplib
+  ];
+
+  __structuredAttrs = true;
+
+  meta = {
+    description = "DCP handling library";
+    homepage = "https://git.carlh.net/cgit/libdcp";
+    downloadPage = "https://git.carlh.net/cgit/libdcp";
+    license = lib.licenses.gpl2Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})
diff --git a/pkgs/by-name/dc/dcpomatic/libsub.nix b/pkgs/by-name/dc/dcpomatic/libsub.nix
new file mode 100644
index 000000000000..d28c4162c514
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/libsub.nix
@@ -0,0 +1,57 @@
+{
+  lib,
+  stdenv,
+  fetchgit,
+
+  wafHook,
+  python3,
+  gitMinimal,
+  pkg-config,
+  openssl,
+  boost,
+  fmt,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "libsub";
+  version = "1.6.62";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/libsub";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-NSCg+YnxUPII16K1SGozBRYorm0UVGTGozJOhLti4kc=";
+  };
+
+  # for some reason the version is not set properly upstream
+  postPatch = ''
+    substituteInPlace wscript \
+      --replace-fail \
+        "this_version = subprocess.Popen(shlex.split('git tag -l --points-at HEAD'), stdout=subprocess.PIPE).communicate()[0].decode('UTF-8')" \
+        "this_version = 'v${finalAttrs.version}'"
+  '';
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+  ];
+
+  buildInputs = [
+    openssl
+    boost
+    fmt
+  ];
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = {
+    description = "Subtitle handling library";
+    homepage = "https://git.carlh.net/cgit/libsub";
+    downloadPage = "https://git.carlh.net/cgit/libsub";
+    license = lib.licenses.gpl2Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})
diff --git a/pkgs/by-name/dc/dcpomatic/libttf.nix b/pkgs/by-name/dc/dcpomatic/libttf.nix
new file mode 100644
index 000000000000..0447c3aa57b0
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/libttf.nix
@@ -0,0 +1,47 @@
+{
+  lib,
+  stdenv,
+  fetchgit,
+
+  wafHook,
+  python3,
+  gitMinimal,
+  pkg-config,
+  boost,
+  fmt,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "libttf";
+  version = "0.0.7";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/libttf";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-pLduKqcfCw8m4hZn8KsVa8rHESEPSQrvW4NCBcwXT5g=";
+  };
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+  ];
+
+  buildInputs = [
+    boost
+    fmt
+  ];
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = {
+    description = "Limited TTF manipulation library";
+    homepage = "https://git.carlh.net/cgit/libttf";
+    downloadPage = "https://git.carlh.net/cgit/libttf";
+    license = lib.licenses.gpl2Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})
diff --git a/pkgs/by-name/dc/dcpomatic/package.nix b/pkgs/by-name/dc/dcpomatic/package.nix
new file mode 100644
index 000000000000..54c14a28031f
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/package.nix
@@ -0,0 +1,118 @@
+{
+  lib,
+  stdenv,
+  fetchgit,
+  callPackage,
+
+  wafHook,
+  wrapGAppsHook3,
+  python3,
+  gitMinimal,
+  pkg-config,
+  boost,
+  curl,
+  icu,
+  libsamplerate,
+  glib,
+  libzip,
+  bzip2,
+  fontconfig,
+  pangomm,
+  libxmlxx,
+  libssh,
+  xmlsec,
+  xercesc,
+  ffmpeg-headless,
+  fmt,
+  nettle,
+  libjpeg,
+  sqlite,
+  wxwidgets_3_2,
+  rtaudio,
+  libGL,
+  libGLU,
+  libsndfile,
+  libtool,
+  libharu,
+  openssl,
+  nlohmann_json,
+}:
+let
+  libcxml = callPackage ./libcxml.nix { };
+  leqm-nrt = callPackage ./leqm-nrt.nix { };
+  asdcplib = callPackage ./asdcplib.nix { };
+  libttf = callPackage ./libttf.nix { };
+  libsub = callPackage ./libsub.nix { };
+  libdcp = callPackage ./libdcp.nix { inherit libcxml asdcplib; };
+in
+stdenv.mkDerivation (finalAttrs: {
+  pname = "dcpomatic";
+  version = "2.19.1";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/dcpomatic";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-c+An8V/A7Vk0ChGQULk9uj0zN5slLb8wSKlWl+3uL1Y=";
+  };
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+    fontconfig
+    wrapGAppsHook3
+    wxwidgets_3_2
+  ];
+
+  buildInputs = [
+    boost
+    curl
+    icu
+    libsamplerate
+    glib
+    libzip
+    bzip2
+    pangomm
+    leqm-nrt
+    libttf
+    libcxml
+    libxmlxx
+    libssh
+    libdcp
+    xmlsec
+    xercesc
+    ffmpeg-headless
+    fmt
+    libsub
+    nettle
+    libjpeg
+    sqlite
+    wxwidgets_3_2
+    rtaudio
+    libGL
+    libGLU
+    libsndfile
+    libtool
+    libharu
+    openssl
+    nlohmann_json
+  ];
+
+  postInstall = ''
+    ln -s ${openssl}/bin/openssl $out/bin/dcpomatic2_openssl
+    ln -s ${libdcp}/share/libdcp $out/share/libdcp
+  '';
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = {
+    description = "Convert video, audio and subtitles into DCP";
+    homepage = "https://dcpomatic.com/";
+    downloadPage = "https://git.carlh.net/cgit/dcpomatic";
+    license = lib.licenses.gpl2Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})

From aaca900a3f9e2ac069791b1b1c7e13c4db1a316c Mon Sep 17 00:00:00 2001
From: Darren Rambaud <225436867+debtquity@users.noreply.github.com>
Date: Mon, 31 Aug 2026 11:16:54 -0500
Subject: [PATCH 049/146] spnavcfg: add `libx11` to build inputs

* missing header file prevented successful build on darwin system

Resolves: #558459
---
 pkgs/by-name/sp/spnavcfg/package.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkgs/by-name/sp/spnavcfg/package.nix b/pkgs/by-name/sp/spnavcfg/package.nix
index 5df968215be0..de62b1e22831 100644
--- a/pkgs/by-name/sp/spnavcfg/package.nix
+++ b/pkgs/by-name/sp/spnavcfg/package.nix
@@ -5,6 +5,7 @@
   pkg-config,
   libspnav,
   qt6,
+  libx11,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
@@ -22,6 +23,9 @@ stdenv.mkDerivation (finalAttrs: {
   nativeBuildInputs = [
     pkg-config
     qt6.wrapQtAppsHook
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    libx11
   ];
 
   buildInputs = [

From 69463f51e9e1034d5b70e9c59237aae5f15f4065 Mon Sep 17 00:00:00 2001
From: Henner Zeller <h.zeller@acm.org>
Date: Sat, 29 Aug 2026 16:53:48 +0200
Subject: [PATCH 050/146] verible: 0.0.4023 -> 0.0.4148

---
 pkgs/by-name/ve/verible/package.nix | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/pkgs/by-name/ve/verible/package.nix b/pkgs/by-name/ve/verible/package.nix
index d4a04d6ab80d..4914649da996 100644
--- a/pkgs/by-name/ve/verible/package.nix
+++ b/pkgs/by-name/ve/verible/package.nix
@@ -16,11 +16,11 @@ let
   registry = fetchFromGitHub {
     owner = "bazelbuild";
     repo = "bazel-central-registry";
-    rev = "3f863a3f35f31b61982d813835d8637b3d93d87a";
-    hash = "sha256-BsxP3GrS98ubIAkFx/c4pB1i97ZZL2TijS+2ORnooww=";
+    rev = "6d7a78e3bb927a52e3e2a5087729f9136d35c084";
+    hash = "sha256-qH4MYS12oKni1JMtZEm7KEpK68CSr3/45aWGmxaydEE=";
   };
-  GIT_DATE = "2025-08-29";
-  GIT_VERSION = "v0.0-4023-gc1271a00";
+  GIT_DATE = "2026-08-16";
+  GIT_VERSION = "v0.0-4148-g1ea007ec";
 in
 buildBazelPackage {
   pname = "verible";
@@ -46,7 +46,7 @@ buildBazelPackage {
     owner = "chipsalliance";
     repo = "verible";
     tag = GIT_VERSION;
-    hash = "sha256-N+yjRcVxFI56kP3zq+qFHNXZLTtVnQaVnseZS13YN0s=";
+    hash = "sha256-6mKnmIIGu7PX6dOelPW6/9dacpqFOtPEC/0wCraoEAQ=";
   };
 
   bazel = bazel_7;
@@ -65,9 +65,9 @@ buildBazelPackage {
     '';
     hash =
       {
-        aarch64-linux = "sha256-KsXrwRIiCft/WaT0uj28gOj5ahhTKxcaiosbY7Mo3JY=";
-        x86_64-linux = "sha256-X7/W2iOTXruRO2wx9J5tGYvy2IuZ6mXiRAmUI5Eq9Vc=";
-        aarch64-darwin = "sha256-XGDsePwK70cdF9tgtykezlJdbGnnwNSbeZlpM67PhPc=";
+        aarch64-linux = "sha256-1jEiJJycHZ2LybV13AUCXjUbUTY1ZhH09aG9oVzOEto=";
+        x86_64-linux = "sha256-RXji3oV9ccUfje8+i73w7dox9e4wZH3KADJ+YecFgL4=";
+        aarch64-darwin = "sha256-mQM82RlRIyLRZeo5vQh+Bm7W+1eCmwj9yEYRe9blJFg=";
       }
       .${system} or (throw "No hash for system: ${system}");
   };

From 29ca010761c2eb07e6fb9f7e8f16494f7a575701 Mon Sep 17 00:00:00 2001
From: Weijia Wang <9713184+wegank@users.noreply.github.com>
Date: Tue, 1 Sep 2026 18:31:38 +0200
Subject: [PATCH 051/146] nomad_1_{9,10,11}: use buildGo126Module

---
 pkgs/applications/networking/cluster/nomad/default.nix | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/pkgs/applications/networking/cluster/nomad/default.nix b/pkgs/applications/networking/cluster/nomad/default.nix
index f95a2ec08764..6076f4fedd42 100644
--- a/pkgs/applications/networking/cluster/nomad/default.nix
+++ b/pkgs/applications/networking/cluster/nomad/default.nix
@@ -1,6 +1,5 @@
 {
   lib,
-  buildGo125Module,
   buildGo126Module,
   fetchFromGitHub,
   nixosTests,
@@ -96,7 +95,7 @@ rec {
   };
 
   nomad_1_11 = generic {
-    buildGoModule = buildGo125Module;
+    buildGoModule = buildGo126Module;
     version = "1.11.3";
     hash = "sha256-J+w53HlMlrXX5yKjDYhf3rSGt1pmOyNcPlOqyUrkLWE=";
     vendorHash = "sha256-67etQUjcPXz4VVpNXLVusQlEybxEqKfYQcNTNL4X8bA=";
@@ -108,7 +107,7 @@ rec {
   };
 
   nomad_1_10 = generic {
-    buildGoModule = buildGo125Module;
+    buildGoModule = buildGo126Module;
     version = "1.10.5";
     hash = "sha256-NFH++oYWb6vQN6cOPByscI/ZBWDNy4YbcLiBMO3/jVU=";
     vendorHash = "sha256-QcTw9kKwoHIvXZoxfDohFG+sBs8OLvYPeygygDClsn8=";
@@ -120,7 +119,7 @@ rec {
   };
 
   nomad_1_9 = generic {
-    buildGoModule = buildGo125Module;
+    buildGoModule = buildGo126Module;
     version = "1.9.7";
     hash = "sha256-U02H6DPr1friQ9EwqD/wQnE2Fm20OE5xNccPDJfnsqI=";
     vendorHash = "sha256-9GnwqkexJAxrhW9yJFaDTdSaZ+p+/dcMuhlusp4cmyw=";

From 7334529e517e8c71cefbb6ac36ac7c3021cab400 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kier=C3=A1n=20Meinhardt?= <kmein@posteo.de>
Date: Tue, 1 Sep 2026 21:06:23 +0200
Subject: [PATCH 052/146] flake-du: 0.1.0 -> 0.2.0

---
 pkgs/by-name/fl/flake-du/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/fl/flake-du/package.nix b/pkgs/by-name/fl/flake-du/package.nix
index 5f722207eea3..6fb96f9ca1c9 100644
--- a/pkgs/by-name/fl/flake-du/package.nix
+++ b/pkgs/by-name/fl/flake-du/package.nix
@@ -4,7 +4,7 @@
   fetchgit,
 }:
 let
-  version = "0.1.0";
+  version = "0.2.0";
 in
 rustPlatform.buildRustPackage {
   pname = "flake-du";
@@ -13,7 +13,7 @@ rustPlatform.buildRustPackage {
   src = fetchgit {
     url = "https://github.com/kmein/flake-du";
     rev = "v${version}";
-    sha256 = "sha256-+YfQRi6QE4xNUcIcEc9HWIbnin6GCVp4SYrjvBwksys=";
+    hash = "sha256-mwSZvAEs4RKzIKErnxPhK7J7yhqo1ibDRy0FXoKlsHY=";
   };
 
   cargoHash = "sha256-DYVT9jM9WcgoVSOnoUIWWR9EmNywR1f4xZOAzkbNkCk=";

From 6ff4774f7e1fd98eb47568e0815c1821df6bb78d Mon Sep 17 00:00:00 2001
From: Thiago Kenji Okada <thiagokokada@gmail.com>
Date: Tue, 1 Sep 2026 21:28:45 +0100
Subject: [PATCH 053/146] nixos-rebuild: support --specialisation for
 build-vm{,with-bootloader}

Fix #555715.
---
 .../src/nixos_rebuild/services.py             | 20 ++---
 .../nixos-rebuild-ng/src/tests/test_main.py   | 53 +++++++++++++
 .../src/tests/test_services.py                | 74 +++++++++++++------
 3 files changed, 116 insertions(+), 31 deletions(-)

diff --git a/pkgs/by-name/ni/nixos-rebuild-ng/src/nixos_rebuild/services.py b/pkgs/by-name/ni/nixos-rebuild-ng/src/nixos_rebuild/services.py
index 9994941ebb4d..018705d3a03a 100644
--- a/pkgs/by-name/ni/nixos-rebuild-ng/src/nixos_rebuild/services.py
+++ b/pkgs/by-name/ni/nixos-rebuild-ng/src/nixos_rebuild/services.py
@@ -92,7 +92,7 @@ def _get_system_attr(
     action: Action,
     args: argparse.Namespace,
     flake: Flake | None,
-    build_attr: BuildAttr,
+    build_attr: BuildAttr | None,
     grouped_nix_args: GroupedNixArgs,
 ) -> str:
     match action:
@@ -102,22 +102,24 @@ def _get_system_attr(
                 eval_flags=grouped_nix_args.flake_eval_flags,
             )
             _validate_image_variant(args.image_variant, variants)
-            attr = f"config.system.build.images.{args.image_variant}"
-        case Action.BUILD_IMAGE:
+            return f"config.system.build.images.{args.image_variant}"
+        case Action.BUILD_IMAGE if build_attr:
             variants = nix.get_build_image_variants(
                 build_attr,
                 instantiate_flags=grouped_nix_args.common_flags,
             )
             _validate_image_variant(args.image_variant, variants)
-            attr = f"config.system.build.images.{args.image_variant}"
+            return f"config.system.build.images.{args.image_variant}"
         case Action.BUILD_VM:
-            attr = "config.system.build.vm"
+            if args.specialisation:
+                return f"config.specialisation.{args.specialisation}.configuration.system.build.vm"
+            return "config.system.build.vm"
         case Action.BUILD_VM_WITH_BOOTLOADER:
-            attr = "config.system.build.vmWithBootLoader"
+            if args.specialisation:
+                return f"config.specialisation.{args.specialisation}.configuration.system.build.vmWithBootLoader"
+            return "config.system.build.vmWithBootLoader"
         case _:
-            attr = "config.system.build.toplevel"
-
-    return attr
+            return "config.system.build.toplevel"
 
 
 def _rollback_system(
diff --git a/pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_main.py b/pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_main.py
index bacfd86ef934..825c8e41d3d2 100644
--- a/pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_main.py
+++ b/pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_main.py
@@ -416,6 +416,59 @@ def test_execute_nix_build_vm(mock_run: Mock, tmp_path: Path) -> None:
     )
 
 
+@patch.dict(os.environ, {}, clear=True)
+@patch("subprocess.run", autospec=True)
+def test_execute_nix_build_vm_with_bootloader_and_specialisation(
+    mock_run: Mock, tmp_path: Path
+) -> None:
+    config_path = tmp_path / "test"
+    config_path.touch()
+
+    def run_side_effect(args: list[str], **kwargs: Any) -> CompletedProcess[str]:
+        if args[0] == "nix-build":
+            return CompletedProcess([], 0, str(config_path))
+        elif args[0] == "nix-instantiate":
+            return CompletedProcess([], 1)
+        else:
+            return CompletedProcess([], 0)
+
+    mock_run.side_effect = run_side_effect
+
+    nr.execute(
+        [
+            "nixos-rebuild",
+            "build-vm-with-bootloader",
+            "--specialisation",
+            "custom-specialisation",
+            "--no-flake",
+            "--no-reexec",
+        ]
+    )
+
+    assert mock_run.call_count == 2
+    mock_run.assert_has_calls(
+        [
+            call(
+                ["nix-instantiate", "--find-file", "nixos-system"],
+                check=False,
+                capture_output=True,
+                **DEFAULT_RUN_KWARGS,
+            ),
+            call(
+                [
+                    "nix-build",
+                    "<nixpkgs/nixos>",
+                    "--attr",
+                    "config.specialisation.custom-specialisation.configuration.system.build.vmWithBootLoader",
+                ],
+                check=True,
+                stdout=PIPE,
+                **DEFAULT_RUN_KWARGS,
+            ),
+        ]
+    )
+
+
 @patch.dict(os.environ, {}, clear=True)
 @patch("subprocess.run", autospec=True)
 def test_execute_nix_build_image_flake(mock_run: Mock, tmp_path: Path) -> None:
diff --git a/pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_services.py b/pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_services.py
index 6bd823b1d48d..60ba1de9351b 100644
--- a/pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_services.py
+++ b/pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_services.py
@@ -1,3 +1,4 @@
+import argparse
 import os
 from pathlib import Path
 from subprocess import CompletedProcess
@@ -10,13 +11,63 @@ import nixos_rebuild.services as s
 
 from .helpers import get_qualified_name
 
+grouped_nix_args = n.models.GroupedNixArgs(
+    build_flags={"build": True},
+    common_flags={"common": True},
+    copy_flags={"copy": True},
+    flake_eval_flags={"flake_eval": True},
+    flake_build_flags={"flake_build": True},
+)
+
+
+# TODO: add tests for Action.BUILD_IMAGE
+def test__get_system_attr() -> None:
+    args = argparse.Namespace(specialisation=None)
+    tests = {
+        n.models.Action.BOOT: "config.system.build.toplevel",
+        n.models.Action.BUILD_VM: "config.system.build.vm",
+        n.models.Action.BUILD_VM_WITH_BOOTLOADER: "config.system.build.vmWithBootLoader",
+    }
+    for action, expected_system_attr in tests.items():
+        assert (
+            s._get_system_attr(
+                action=action,
+                args=args,
+                flake=None,
+                build_attr=None,
+                grouped_nix_args=grouped_nix_args,
+            )
+            == expected_system_attr
+        )
+
+    args = argparse.Namespace(specialisation="custom-specialisation")
+    tests = {
+        n.models.Action.BOOT: "config.system.build.toplevel",
+        n.models.Action.BUILD_VM: "config.specialisation.custom-specialisation.configuration.system.build.vm",
+        n.models.Action.BUILD_VM_WITH_BOOTLOADER: "config.specialisation.custom-specialisation.configuration.system.build.vmWithBootLoader",
+    }
+    for action, expected_system_attr in tests.items():
+        assert (
+            s._get_system_attr(
+                action=action,
+                args=args,
+                flake=None,
+                build_attr=None,
+                grouped_nix_args=grouped_nix_args,
+            )
+            == expected_system_attr
+        )
+
 
 @patch.dict(os.environ, {}, clear=True)
 @patch("os.execve", autospec=True)
 @patch(get_qualified_name(n.nix.run_wrapper, n.nix), autospec=True)
 @patch(get_qualified_name(s.nix.build), autospec=True)
 def test_reexec(
-    mock_build: Mock, mock_run: Mock, mock_execve: Mock, monkeypatch: MonkeyPatch
+    mock_build: Mock,
+    mock_run: Mock,
+    mock_execve: Mock,
+    monkeypatch: MonkeyPatch,
 ) -> None:
     mock_run.return_value = CompletedProcess([], 0, stdout="")
 
@@ -25,13 +76,6 @@ def test_reexec(
     args, _ = n.parse_args(argv)
     mock_build.return_value = Path("/path")
 
-    grouped_nix_args = n.models.GroupedNixArgs(
-        build_flags={"build": True},
-        common_flags={"common": True},
-        copy_flags={"copy": True},
-        flake_eval_flags={"flake_eval": True},
-        flake_build_flags={"flake_build": True},
-    )
     s.reexec(argv, args, grouped_nix_args)
     mock_build.assert_has_calls(
         [
@@ -78,13 +122,6 @@ def test_reexec_flake(
     args, _ = n.parse_args(argv)
     mock_build.return_value = Path("/path")
 
-    grouped_nix_args = n.models.GroupedNixArgs(
-        build_flags={"build": True},
-        common_flags={"common": True},
-        copy_flags={"copy": True},
-        flake_eval_flags={"flake_eval": True},
-        flake_build_flags={"flake_build": True},
-    )
     s.reexec(argv, args, grouped_nix_args)
     mock_build.assert_called_once_with(
         s.NIXOS_REBUILD_ATTR,
@@ -124,13 +161,6 @@ def test_reexec_skip_if_already_reexec(mock_build: Mock, mock_execve: Mock) -> N
     args, _ = n.parse_args(argv)
     mock_build.return_value = Path("/path")
 
-    grouped_nix_args = n.models.GroupedNixArgs(
-        build_flags={"build": True},
-        common_flags={"common": True},
-        copy_flags={"copy": True},
-        flake_eval_flags={"flake_eval": True},
-        flake_build_flags={"flake_build": True},
-    )
     s.reexec(argv, args, grouped_nix_args)
     mock_build.assert_not_called()
     mock_execve.assert_not_called()

From 698426d3b385936860e0a4e55de38881a39231d9 Mon Sep 17 00:00:00 2001
From: "git@71rd.net" <git@71rd.net>
Date: Tue, 1 Sep 2026 17:21:12 +0000
Subject: [PATCH 054/146] alerta-server: mark as insecure

version 9.0.1 is vulnerable to CVE-2026-34400

Closes #505619
---
 pkgs/by-name/al/alerta-server/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/al/alerta-server/package.nix b/pkgs/by-name/al/alerta-server/package.nix
index 0c83ccd4fbc6..b774ec203cbf 100644
--- a/pkgs/by-name/al/alerta-server/package.nix
+++ b/pkgs/by-name/al/alerta-server/package.nix
@@ -50,5 +50,8 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
     mainProgram = "alertad";
     license = lib.licenses.asl20;
     maintainers = [ ];
+    knownVulnerabilities = [
+      "CVE-2026-34400: vulnerable to SQL injection via the Postgres query parser, which built WHERE clauses by interpolating user-supplied search terms directly into SQL strings via f-strings. This issue has been patched in version 9.1.0." # 505619 in nixpkgs
+    ];
   };
 })

From 42d123ebf9bb0928a419f6d64f5ed2e5957fe32c Mon Sep 17 00:00:00 2001
From: Mateusz Wykurz <wykurz@gmail.com>
Date: Tue, 1 Sep 2026 19:57:57 -0600
Subject: [PATCH 055/146] rcp: 0.37.0 -> 0.40.0

https://github.com/wykurz/rcp/blob/v0.40.0/CHANGELOG.md

Use upstream's rcp_nix_sandbox cfg-based test selection instead of maintaining downstream test-name skips.

Assisted-by: Codex (GPT-5)
---
 pkgs/by-name/rc/rcp/package.nix | 57 ++++++++-------------------------
 1 file changed, 14 insertions(+), 43 deletions(-)

diff --git a/pkgs/by-name/rc/rcp/package.nix b/pkgs/by-name/rc/rcp/package.nix
index 40f8072897e8..ca936f1f27e9 100644
--- a/pkgs/by-name/rc/rcp/package.nix
+++ b/pkgs/by-name/rc/rcp/package.nix
@@ -6,58 +6,29 @@
 
 pkgsStatic.rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rcp";
-  version = "0.37.0";
+  version = "0.40.0";
 
   src = fetchFromGitHub {
     owner = "wykurz";
     repo = "rcp";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-svJA9QyqwpY1xzOQ09qFlZwrGp3HZXW9T2AICVJfqOs=";
+    hash = "sha256-xAuKhgnH5j5NioXDivwpaZFKkkTzGWJglbmVw5koaqE=";
   };
 
-  cargoHash = "sha256-QJr6kM520OWxje7Q5FZWgJH1IS8j+Jv1vNf7VyCINNA=";
+  cargoHash = "sha256-hNZhL+kZgm2pX28mKdCgpGyBexI33idlEfPB8OmgGOY=";
 
-  env.RUSTFLAGS = "--cfg tokio_unstable";
-
-  checkFlags = [
-    # these tests set setuid permissions on a test file (3oXXX) which doesn't work in a sandbox
-    "--skip=copy::copy_tests::check_default_mode"
-    "--skip=test_weird_permissions"
-    "--skip=test_edge_case_special_permissions"
-    "--skip=test_default_strips_special_bits_on_directories"
-    "--skip=test_default_strips_special_bits_on_files"
-    "--skip=test_default_preserves_special_bits_on_directories"
-    "--skip=test_preserve_all_preserves_special_bits_on_directories"
-    "--skip=test_preserve_all_preserves_special_bits_on_files"
-    "--skip=test_preserve_settings_dir_gid_time_7777"
-    "--skip=test_preserve_settings_dir_7777_preserves_special_bits"
-    "--skip=test_preserve_settings_file_7777_preserves_special_bits"
-    "--skip=test_preserve_settings_none_strips_special_bits_on_directories"
-    "--skip=no_setid_clears_bits_for_unchanged_owner_rule"
-    "--skip=no_setid_clears_existing_bits_for_unrelated_mode"
-    "--skip=no_setid_dry_run_reports_but_does_not_clear_bits"
-    "--skip=no_setid_respects_filter_and_per_type_scope"
-    "--skip=no_setid_retains_sticky_and_clears_setgid_on_directory"
-    # this test expects overwrite behavior that doesn't work in a sandbox
-    "--skip=test_overwrite_behavior"
-    # these tests require network access to determine local IP address
-    "--skip=test_remote"
-    # these tests expect to find version/git info from Cargo.toml, which isn't available in the sandbox
-    "--skip=version::tests::test_current_version"
-    "--skip=test_protocol_version_has_git_info"
-    "--skip=test_rcpd_protocol_version_has_git_info"
-    # these tests shell out to `getent` to resolve real user/group names, which isn't available in the sandbox
-    "--skip=chmod::tests::getent_real_resolves_root"
-    "--skip=chmod::tests::getent_real_option_like_name_fails_closed_no_injection"
-    "--skip=rejects_unknown_group"
-    # these tests change ownership and set setuid/setgid bits (fchown / chmod / chgrp),
-    # which the unprivileged sandbox build user isn't permitted to do (EPERM)
-    "--skip=safedir::tests::set_dir_metadata_fd_applies"
-    "--skip=safedir::tests::set_file_metadata_fd_ordering_preserves_setuid"
-    "--skip=applies_per_type_modes_recursively"
-    "--skip=group_change_preserves_setgid_across_chgrp"
-    "--skip=preserves_setgid_through_mode_change"
+  # Enable upstream's Nix sandbox test filter without replacing nixpkgs'
+  # target-specific Rust flags. Keep this config identical in both phases so
+  # Cargo can reuse the release artifacts built before the checks.
+  cargoBuildFlags = [
+    "--config"
+    ''target.'cfg(all())'.rustflags=["--cfg","tokio_unstable","--cfg","rcp_nix_sandbox"]''
   ];
+  cargoTestFlags = finalAttrs.cargoBuildFlags;
+
+  # fixtures that mutate process-global admission, congestion, hook and file-descriptor
+  # state are only supported under nextest's process isolation or single-threaded libtest
+  dontUseCargoParallelTests = true;
 
   meta = {
     changelog = "https://github.com/wykurz/rcp/releases/tag/v${finalAttrs.version}";

From e8272d2e3c211f8467edd0a8a6e979064a8557d2 Mon Sep 17 00:00:00 2001
From: commitmaniac <201806046+commitmaniac@users.noreply.github.com>
Date: Wed, 2 Sep 2026 04:07:00 -0400
Subject: [PATCH 056/146] ipatool: 2.3.2 -> 2.5.0

---
 pkgs/by-name/ip/ipatool/package.nix | 19 +++++++++++++++----
 1 file changed, 15 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ip/ipatool/package.nix b/pkgs/by-name/ip/ipatool/package.nix
index 2051f6796f67..a4013de57aab 100644
--- a/pkgs/by-name/ip/ipatool/package.nix
+++ b/pkgs/by-name/ip/ipatool/package.nix
@@ -6,26 +6,30 @@
   testers,
   ipatool,
   writableTmpDirAsHomeHook,
+  installShellFiles,
 }:
 
 buildGoModule (finalAttrs: {
   pname = "ipatool";
-  version = "2.3.2";
+  version = "2.5.0";
 
   src = fetchFromGitHub {
     owner = "majd";
     repo = "ipatool";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-jIdjTDs/g41j805vkC1PqLvChtzB055JYmd4GbEHNZU=";
+    hash = "sha256-yC6MSyL3b9u/mb+YJUIZTsH2dtVgE0w2K3F2LlQE9tI=";
   };
 
-  vendorHash = "sha256-HNus5wZUmiuVVdDj4i9X9sO8iyccrq4h//s0zkQNYjY=";
+  vendorHash = "sha256-/DIJ41YXPMKZgnNraBasnJ1AIgfC5OA3fLn/vFJqs/Q=";
 
   # Fixes "import lookup disabled by -mod=vendor" for onepassword-sdk-go on macOS
   proxyVendor = true;
 
   # Fixes "unable to open output file '/homeless-shelter/.cache/clang/ModuleCache/" on macOS
-  nativeBuildInputs = [ writableTmpDirAsHomeHook ];
+  nativeBuildInputs = [
+    writableTmpDirAsHomeHook
+    installShellFiles
+  ];
 
   ldflags = [
     "-s"
@@ -40,6 +44,13 @@ buildGoModule (finalAttrs: {
   # '';
   doCheck = false;
 
+  postInstall = ''
+    installShellCompletion --cmd ipatool \
+      --bash <($out/bin/ipatool completion bash) \
+      --fish <($out/bin/ipatool completion fish) \
+      --zsh <($out/bin/ipatool completion zsh)
+  '';
+
   passthru = {
     updateScript = nix-update-script { };
     tests.version = testers.testVersion {

From c8068a40582768ce6d73b798f62985a197eca463 Mon Sep 17 00:00:00 2001
From: Dennis Wuitz <dennish@wuitz.de>
Date: Tue, 1 Sep 2026 19:13:21 +0200
Subject: [PATCH 057/146] nixos/polkit: allow devices: yubico and fprintd

---
 nixos/modules/security/polkit.nix | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/nixos/modules/security/polkit.nix b/nixos/modules/security/polkit.nix
index 94237502160e..841554ab5729 100644
--- a/nixos/modules/security/polkit.nix
+++ b/nixos/modules/security/polkit.nix
@@ -151,6 +151,17 @@ in
         # ~/.config/Yubico/u2f_keys (the default key file location)
         ProtectHome = "read-only";
       })
+      (mkIf config.security.pam.yubico.enable {
+        # Override upstream PrivateDevices=yes to allow access to /dev/hidraw*
+        PrivateDevices = false;
+        DeviceAllow = [ "char-hidraw rw" ];
+      })
+      (mkIf config.services.fprintd.enable {
+        # Override upstream PrivateDevices=yes to allow access to /dev/bus/usb/**
+        PrivateDevices = false;
+        DeviceAllow = [ "char-usb_device rw" ];
+        RestrictAddressFamilies = [ "AF_NETLINK" ];
+      })
       (mkIf config.security.pam.zfs.enable {
         PrivateDevices = false;
         DeviceAllow = [

From fc2d76d597fd77c5a47009985c94810a771d8cf1 Mon Sep 17 00:00:00 2001
From: KangaZero <samuelyongw@gmail.com>
Date: Wed, 2 Sep 2026 23:06:11 +0900
Subject: [PATCH 058/146] decasify: 0.11.3 -> 0.11.4

Added `versionCheckHook`
---
 pkgs/by-name/de/decasify/package.nix | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/de/decasify/package.nix b/pkgs/by-name/de/decasify/package.nix
index acbb0ded69a9..eda0f14b801c 100644
--- a/pkgs/by-name/de/decasify/package.nix
+++ b/pkgs/by-name/de/decasify/package.nix
@@ -10,22 +10,25 @@
   cargo,
   rustc,
   rustPlatform,
+
+  # nativeInstallCheckInputs
+  versionCheckHook,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "decasify";
-  version = "0.11.3";
+  version = "0.11.4";
 
   src = fetchurl {
     url = "https://github.com/alerque/decasify/releases/download/v${finalAttrs.version}/decasify-${finalAttrs.version}.tar.zst";
-    hash = "sha256-JATJ8cFjtCkK65NpTTrUkYHAo4nDrqftarqyJInRTpM=";
+    hash = "sha256-N+VnUMfMvnJfRN0GXG28Fw+Sr6lQwzXn+CVvIbo7j8w=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
     dontConfigure = true;
     nativeBuildInputs = [ zstd ];
-    hash = "sha256-hXU9Yw9rGQDkNnwy63LYPIrreOO2P/f8jVaPnVOhrWI=";
+    hash = "sha256-nkuKeVGqn/stlezRDIf6vGQSqNzVCnrkvuFXqkLdvdE=";
   };
 
   nativeBuildInputs = [
@@ -46,6 +49,9 @@ stdenv.mkDerivation (finalAttrs: {
 
   enableParallelBuilding = true;
 
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
   meta = {
     description = "Utility to change the case of prose strings following natural language style guides";
     longDescription = ''

From da60aa7e7a642be2b74a34ab769294781db0c7a1 Mon Sep 17 00:00:00 2001
From: Ross Smyth <18294397+RossSmyth@users.noreply.github.com>
Date: Wed, 2 Sep 2026 14:33:41 -0400
Subject: [PATCH 059/146] streamlink-twitch-gui-bin: drop

---
 .../video/streamlink-twitch-gui/bin.nix       | 159 ------------------
 pkgs/top-level/aliases.nix                    |   1 +
 pkgs/top-level/all-packages.nix               |   2 -
 3 files changed, 1 insertion(+), 161 deletions(-)
 delete mode 100644 pkgs/applications/video/streamlink-twitch-gui/bin.nix

diff --git a/pkgs/applications/video/streamlink-twitch-gui/bin.nix b/pkgs/applications/video/streamlink-twitch-gui/bin.nix
deleted file mode 100644
index 006b2635f597..000000000000
--- a/pkgs/applications/video/streamlink-twitch-gui/bin.nix
+++ /dev/null
@@ -1,159 +0,0 @@
-{
-  autoPatchelfHook,
-  fetchurl,
-  lib,
-  copyDesktopItems,
-  makeDesktopItem,
-  makeWrapper,
-  stdenv,
-  wrapGAppsHook3,
-  at-spi2-core,
-  atk,
-  alsa-lib,
-  cairo,
-  cups,
-  dbus,
-  expat,
-  gcc-unwrapped,
-  gdk-pixbuf,
-  glib,
-  pango,
-  gtk3-x11,
-  libudev0-shim,
-  libuuid,
-  libgbm,
-  nss,
-  nspr,
-  libxtst,
-  libxscrnsaver,
-  libxrender,
-  libxrandr,
-  libxi,
-  libxfixes,
-  libxext,
-  libxdamage,
-  libxcursor,
-  libxcomposite,
-  libx11,
-  libxcb,
-  streamlink,
-}:
-let
-  basename = "streamlink-twitch-gui";
-  runtimeLibs = lib.makeLibraryPath [
-    gtk3-x11
-    libudev0-shim
-  ];
-  runtimeBins = lib.makeBinPath [ streamlink ];
-
-in
-stdenv.mkDerivation rec {
-  pname = "${basename}-bin";
-  version = "2.5.3";
-
-  src =
-    {
-      x86_64-linux = fetchurl {
-        url = "https://github.com/streamlink/${basename}/releases/download/v${version}/${basename}-v${version}-linux64.tar.gz";
-        hash = "sha256-ue5Ehj/dLOIJNJVq0Pd6EbA1hkVPz5m+3chVvEXaH6U=";
-      };
-      i686-linux = fetchurl {
-        url = "https://github.com/streamlink/${basename}/releases/download/v${version}/${basename}-v${version}-linux32.tar.gz";
-        hash = "sha256-y252QhVsRakngdApOHgegMMhs61KTxL9gfPjBjaSKOI=";
-      };
-    }
-    .${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
-
-  nativeBuildInputs = [
-    at-spi2-core
-    atk
-    alsa-lib
-    autoPatchelfHook
-    cairo
-    copyDesktopItems
-    cups.lib
-    dbus.lib
-    expat
-    gcc-unwrapped
-    gdk-pixbuf
-    glib
-    pango
-    gtk3-x11
-    libgbm
-    nss
-    nspr
-    libuuid
-    libx11
-    libxcb
-    libxcomposite
-    libxcursor
-    libxdamage
-    libxext
-    libxfixes
-    libxi
-    libxrandr
-    libxrender
-    libxscrnsaver
-    libxtst
-    makeWrapper
-    wrapGAppsHook3
-  ];
-
-  buildInputs = [ streamlink ];
-
-  dontBuild = true;
-  dontConfigure = true;
-
-  installPhase = ''
-    runHook preInstall
-    mkdir -p $out/{bin,opt/${basename},share}
-
-    # Install all files, remove unnecessary ones
-    cp -a . $out/opt/${basename}/
-    rm -r $out/opt/${basename}/{{add,remove}-menuitem.sh,credits.html,icons/}
-    ln -s $out/opt/${basename}/${basename} $out/bin/
-    for res in 16 32 48 64 128 256; do
-      install -Dm644 \
-        icons/icon-"$res".png \
-        $out/share/icons/hicolor/"$res"x"$res"/apps/${basename}.png
-    done
-    runHook postInstall
-  '';
-
-  preFixup = ''
-    gappsWrapperArgs+=(
-      --add-flags "--no-version-check" \
-      --prefix LD_LIBRARY_PATH : ${runtimeLibs} \
-      --prefix PATH : ${runtimeBins}
-    )
-  '';
-
-  desktopItems = [
-    (makeDesktopItem {
-      name = basename;
-      exec = basename;
-      icon = basename;
-      desktopName = "Streamlink Twitch GUI";
-      genericName = meta.description;
-      categories = [
-        "AudioVideo"
-        "Network"
-      ];
-    })
-  ];
-
-  meta = {
-    description = "Twitch.tv browser for Streamlink";
-    longDescription = "Browse Twitch.tv and watch streams in your videoplayer of choice";
-    homepage = "https://streamlink.github.io/streamlink-twitch-gui/";
-    downloadPage = "https://github.com/streamlink/streamlink-twitch-gui/releases";
-    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
-    license = lib.licenses.mit;
-    mainProgram = "streamlink-twitch-gui";
-    maintainers = [ ];
-    platforms = [
-      "x86_64-linux"
-      "i686-linux"
-    ];
-  };
-}
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index a086ec1d5fc9..d8ff6273c1d6 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -2324,6 +2324,7 @@ mapAliases {
   stract = throw "'stract' has been removed because the upstream project was archived on 2026-04-02"; # Added 2026-07-28
   strawberry-qt5 = throw "strawberry-qt5 has been replaced by strawberry"; # Converted to throw 2025-07-19
   strawberry-qt6 = throw "strawberry-qt6 has been replaced by strawberry"; # Added 2025-07-19
+  streamlink-twitch-gui-bin = throw "'streamlink-twitch-gui-bin' has be removed due to lack on maintence and insecure electron"; # Added 2026-09-02
   stremio = throw "'stremio' has been removed as it depended on the vulnerable and outdated qt5 webengine. On Linux, consider using 'stremio-linux-shell' instead."; # Added 2026-02-11
   stringsWithDeps = warnAlias "'stringsWithDeps' has been removed from pkgs, use `lib.stringsWithDeps` instead" lib.stringsWithDeps; # Added 2025-10-30
   subberthehut = throw "'subberthehut' has been removed as it was unmaintained upstream"; # Added 2025-05-17
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index ec92562a1abc..f0d3d8dc53e6 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -6708,8 +6708,6 @@ with pkgs;
 
   stlink-gui = callPackage ../by-name/st/stlink/package.nix { withGUI = true; };
 
-  streamlink-twitch-gui-bin = callPackage ../applications/video/streamlink-twitch-gui/bin.nix { };
-
   szurubooru = callPackage ../servers/web-apps/szurubooru { };
 
   tclap = tclap_1_2;

From 4d9aeded81eeb7b57e6c7f490d44f89b04ea708b Mon Sep 17 00:00:00 2001
From: Dionysis Grigoropoulos <dgrig@erethon.com>
Date: Thu, 3 Sep 2026 00:40:50 +0300
Subject: [PATCH 060/146] matrix-alertmanager: 0.9.0 -> 0.10.0

Diff: https://github.com/jaywink/matrix-alertmanager/compare/v0.9.0...v0.10.0
Changelog: https://github.com/jaywink/matrix-alertmanager/blob/v0.10.0/CHANGELOG.md#0100---2026-08-16
---
 pkgs/by-name/ma/matrix-alertmanager/package.nix | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ma/matrix-alertmanager/package.nix b/pkgs/by-name/ma/matrix-alertmanager/package.nix
index f27339a8038e..140306cd191a 100644
--- a/pkgs/by-name/ma/matrix-alertmanager/package.nix
+++ b/pkgs/by-name/ma/matrix-alertmanager/package.nix
@@ -3,17 +3,18 @@
   buildNpmPackage,
   fetchFromGitHub,
   jq,
+  nix-update-script,
 }:
 
 buildNpmPackage rec {
   pname = "matrix-alertmanager";
-  version = "0.9.0";
+  version = "0.10.0";
 
   src = fetchFromGitHub {
     owner = "jaywink";
     repo = "matrix-alertmanager";
     rev = "v${version}";
-    hash = "sha256-t5e9UfRtt1OzxEXuMkPLW352BbAVSLEt26fo5YppQQc=";
+    hash = "sha256-kdz5KyT0ZIbiq6MMVAQBPjz2QP1kcNWtEv10/RzH/14=";
   };
 
   postPatch = ''
@@ -21,10 +22,12 @@ buildNpmPackage rec {
     mv package.json.tmp package.json
   '';
 
-  npmDepsHash = "sha256-4UYX9ndqecr06/gZeouzrDss6568jBXY1ypcVX7DEVk=";
+  npmDepsHash = "sha256-r1OvxCk6dgVAb3NKxveTr/1PTRFYQVDhQmBHbikzALE=";
 
   dontNpmBuild = true;
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     changelog = "https://github.com/jaywink/matrix-alertmanager/blob/${src.rev}/CHANGELOG.md";
     description = "Bot to receive Alertmanager webhook events and forward them to chosen rooms";

From 01039a4fd9aa93ab4e0e9780e14a884f1a1672a4 Mon Sep 17 00:00:00 2001
From: Dionysis Grigoropoulos <dgrig@erethon.com>
Date: Thu, 3 Sep 2026 01:17:31 +0300
Subject: [PATCH 061/146] meh: Fix build for giflib 6

---
 pkgs/by-name/me/meh/gif.patch   | 18 ++++++++++++++++++
 pkgs/by-name/me/meh/package.nix |  2 ++
 2 files changed, 20 insertions(+)
 create mode 100644 pkgs/by-name/me/meh/gif.patch

diff --git a/pkgs/by-name/me/meh/gif.patch b/pkgs/by-name/me/meh/gif.patch
new file mode 100644
index 000000000000..93cf1e8e75bb
--- /dev/null
+++ b/pkgs/by-name/me/meh/gif.patch
@@ -0,0 +1,18 @@
+diff --git a/src/gif.c b/src/gif.c
+index 9d492c2..a1455a5 100644
+--- a/src/gif.c
++++ b/src/gif.c
+@@ -96,11 +96,11 @@ error:
+ 
+ void gif_close(struct image *img){
+ 	struct gif_t *g = (struct gif_t *)img;
+-#if defined(GIFLIB_MAJOR) && defined(GIFLIB_MINOR) && (GIFLIB_MAJOR == 5 && GIFLIB_MINOR >= 1)
++#if defined(GIFLIB_MAJOR) && defined(GIFLIB_MINOR) && ((GIFLIB_MAJOR == 5 && GIFLIB_MINOR >= 1) || GIFLIB_MAJOR == 6)
+ 	int ret;
+ #endif
+ 
+-#if defined(GIFLIB_MAJOR) && defined(GIFLIB_MINOR) && (GIFLIB_MAJOR == 5 && GIFLIB_MINOR >= 1)
++#if defined(GIFLIB_MAJOR) && defined(GIFLIB_MINOR) && ((GIFLIB_MAJOR == 5 && GIFLIB_MINOR >= 1) || GIFLIB_MAJOR == 6)
+ 	DGifCloseFile(g->gif,&ret);
+ 	if(ret != GIF_OK) {
+ #if defined(GIFLIB_MAJOR) && GIFLIB_MAJOR >= 5
diff --git a/pkgs/by-name/me/meh/package.nix b/pkgs/by-name/me/meh/package.nix
index ac5a7024224d..4e0f6b5d1c8d 100644
--- a/pkgs/by-name/me/meh/package.nix
+++ b/pkgs/by-name/me/meh/package.nix
@@ -35,6 +35,8 @@ stdenv.mkDerivation {
     giflib
   ];
 
+  patches = [ ./gif.patch ];
+
   meta = {
     description = "Minimal image viewer using raw XLib";
     homepage = "https://www.johnhawthorn.com/meh/";

From e0d9c4c5a56359f033919661efc3d266c0f10b66 Mon Sep 17 00:00:00 2001
From: Angel J <78835633+iamanaws@users.noreply.github.com>
Date: Wed, 2 Sep 2026 18:04:55 -0700
Subject: [PATCH 062/146] wasmi: 1.1.0 -> 2.0.0

---
 pkgs/by-name/wa/wasmi/package.nix | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/wa/wasmi/package.nix b/pkgs/by-name/wa/wasmi/package.nix
index 65e9e01b0aa7..953ed0e1bfca 100644
--- a/pkgs/by-name/wa/wasmi/package.nix
+++ b/pkgs/by-name/wa/wasmi/package.nix
@@ -3,21 +3,27 @@
   rustPlatform,
   fetchFromGitHub,
   nix-update-script,
+  testers,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "wasmi";
-  version = "1.1.0";
+  version = "2.0.0";
 
   src = fetchFromGitHub {
     owner = "wasmi-labs";
     repo = "wasmi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-54mZxX7ygmX93V3l1ZRqDdbGe5uk772GSaNmXnV3iEQ=";
+    hash = "sha256-oGuw8//jsmeTxwHli7EAy4+W/iB/kSW40DFLjObA4hg=";
     fetchSubmodules = true;
   };
 
-  cargoHash = "sha256-v38ThWgelSmxWLhOHqmJIbh1sisB1K56825ut/mZoMs=";
+  cargoHash = "sha256-QhSY6VGtpy2s7Dmp+cm65PCkM4zoeJ/ZrjjEGVWLgm4=";
+
+  passthru.tests.version = testers.testVersion {
+    package = finalAttrs.finalPackage;
+  };
+
   passthru.updateScript = nix-update-script { };
 
   meta = {
@@ -29,6 +35,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
       mit
     ];
     maintainers = with lib.maintainers; [ iamanaws ];
-    mainProgram = "wasmi_cli";
+    mainProgram = "wasmi";
   };
 })

From 4e166ae5274b0b120d0c653e2f5ae93bb943c30c Mon Sep 17 00:00:00 2001
From: Angel J <78835633+iamanaws@users.noreply.github.com>
Date: Wed, 2 Sep 2026 18:20:28 -0700
Subject: [PATCH 063/146] cargo-typify: 0.6.2 -> 0.7.0

---
 pkgs/by-name/ca/cargo-typify/package.nix | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-typify/package.nix b/pkgs/by-name/ca/cargo-typify/package.nix
index b292a4632890..cce55e38aeca 100644
--- a/pkgs/by-name/ca/cargo-typify/package.nix
+++ b/pkgs/by-name/ca/cargo-typify/package.nix
@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-typify";
-  version = "0.6.2";
+  version = "0.7.0";
 
   src = fetchFromGitHub {
     owner = "oxidecomputer";
     repo = "typify";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Ym3xPMn36+Y8dnImmuegjwrARPzozhwI+qhDCXmFsHg=";
+    hash = "sha256-1JnNNapIg0uholQkgnqU+KQ1q1SCF0MJmrO8XybxBzw=";
   };
 
-  cargoHash = "sha256-3hh4M5cqwLDHcHI+YGKXQOeTXGcVTec+xk+mZcVp0IU=";
+  cargoHash = "sha256-tH6Unl9mFUmpIiDoHp7ZUwaKAK8QEWGf2ldKbcyBET0=";
 
   nativeBuildInputs = [
     rustfmt
@@ -46,6 +46,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
       --set RUSTFMT "${lib.getExe rustfmt}"
   '';
 
+  passthru.updateScript = gitUpdater { rev-prefix = "v"; };
+
   meta = {
     description = "JSON Schema to Rust type converter";
     homepage = "https://github.com/oxidecomputer/typify";

From ea036f3ae4ee825597d95435135cfe306dbe42c1 Mon Sep 17 00:00:00 2001
From: HigherOrderLogic <73709188+HigherOrderLogic@users.noreply.github.com>
Date: Thu, 3 Sep 2026 04:45:22 +0000
Subject: [PATCH 064/146] docs/tauri: update bundle type link

---
 doc/hooks/tauri.section.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/hooks/tauri.section.md b/doc/hooks/tauri.section.md
index 0eb1740644b4..f6af168793aa 100644
--- a/doc/hooks/tauri.section.md
+++ b/doc/hooks/tauri.section.md
@@ -73,7 +73,7 @@ Controls the flags passed to `cargo tauri build`.
 
 #### `tauriBundleType` {#tauri-bundle-type}
 
-The [bundle type](https://tauri.app/v1/guides/building/) to build.
+The [bundle type](https://tauri.app/reference/javascript/api/namespaceapp/#bundletype) to build.
 
 #### `dontTauriBuild` {#dont-tauri-build}
 

From fa4d88448b099de5cd49d4d04f88ec8a7321f208 Mon Sep 17 00:00:00 2001
From: Weijia Wang <9713184+wegank@users.noreply.github.com>
Date: Thu, 3 Sep 2026 09:25:34 +0200
Subject: [PATCH 065/146] nemo-qml-plugin-dbus: move to pkgs/by-name

---
 .../ne/nemo-qml-plugin-dbus/package.nix}               | 10 ++++------
 pkgs/top-level/all-packages.nix                        |  2 --
 2 files changed, 4 insertions(+), 8 deletions(-)
 rename pkgs/{development/libraries/nemo-qml-plugin-dbus/default.nix => by-name/ne/nemo-qml-plugin-dbus/package.nix} (86%)

diff --git a/pkgs/development/libraries/nemo-qml-plugin-dbus/default.nix b/pkgs/by-name/ne/nemo-qml-plugin-dbus/package.nix
similarity index 86%
rename from pkgs/development/libraries/nemo-qml-plugin-dbus/default.nix
rename to pkgs/by-name/ne/nemo-qml-plugin-dbus/package.nix
index e499f7705ba8..bfc7a9f8b48f 100644
--- a/pkgs/development/libraries/nemo-qml-plugin-dbus/default.nix
+++ b/pkgs/by-name/ne/nemo-qml-plugin-dbus/package.nix
@@ -2,9 +2,7 @@
   lib,
   stdenv,
   fetchFromGitLab,
-  qmake,
-  wrapQtAppsHook,
-  qtbase,
+  qt5,
 }:
 
 stdenv.mkDerivation rec {
@@ -20,8 +18,8 @@ stdenv.mkDerivation rec {
   };
 
   nativeBuildInputs = [
-    qmake
-    wrapQtAppsHook
+    qt5.qmake
+    qt5.wrapQtAppsHook
   ];
 
   postPatch = ''
@@ -30,7 +28,7 @@ stdenv.mkDerivation rec {
       --replace /usr $out \
       --replace '$$[QT_INSTALL_LIBS]' $out'/lib'
     substituteInPlace src/plugin/plugin.pro \
-      --replace '$$[QT_INSTALL_QML]' $out'/${qtbase.qtQmlPrefix}'
+      --replace '$$[QT_INSTALL_QML]' $out'/${qt5.qtbase.qtQmlPrefix}'
   '';
 
   meta = {
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index f654c50e5ced..39740ff6ab2c 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -6214,8 +6214,6 @@ with pkgs;
 
   mygpoclient = with python3.pkgs; toPythonApplication mygpoclient;
 
-  nemo-qml-plugin-dbus = libsForQt5.callPackage ../development/libraries/nemo-qml-plugin-dbus { };
-
   ncurses5 = ncurses.override {
     abiVersion = "5";
   };

From aec3c0f5b4093e47c2435cb375d117670aa250cd Mon Sep 17 00:00:00 2001
From: Henrique Oliveira <github@m0streng0.eu>
Date: Thu, 3 Sep 2026 10:10:26 +0200
Subject: [PATCH 066/146] ostui: 1.3.8 -> 1.3.9

---
 pkgs/by-name/os/ostui/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/os/ostui/package.nix b/pkgs/by-name/os/ostui/package.nix
index 704a43c59cd0..d38ff81f0446 100644
--- a/pkgs/by-name/os/ostui/package.nix
+++ b/pkgs/by-name/os/ostui/package.nix
@@ -8,13 +8,13 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "ostui";
-  version = "1.3.8";
+  version = "1.3.9";
 
   src = fetchFromSourcehut {
     owner = "~ser";
     repo = "ostui";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-+G+lox1gDP+EeHFkWbUHzVrrrel7d99gYUNyYXdOJ0I=";
+    hash = "sha256-al8vMreGUS4Y6/407wXozZRb5rnKyXKBzXN+Z3d2MC4=";
   };
 
   vendorHash = "sha256-cCyOG6nqlw2DPbA1dCuki5cpDy9LmZV/3YGyB3nCreI=";

From 6e18669d0addf55be6983d25ffe3209ff3ad4582 Mon Sep 17 00:00:00 2001
From: Artem Leshchev <matshch@avride.ai>
Date: Thu, 3 Sep 2026 08:20:16 -0500
Subject: [PATCH 067/146] desync: 1.1.0 -> 1.1.3

---
 pkgs/by-name/de/desync/package.nix | 28 ++++++----------------------
 1 file changed, 6 insertions(+), 22 deletions(-)

diff --git a/pkgs/by-name/de/desync/package.nix b/pkgs/by-name/de/desync/package.nix
index 0fdfd2b85e37..d122b225d523 100644
--- a/pkgs/by-name/de/desync/package.nix
+++ b/pkgs/by-name/de/desync/package.nix
@@ -8,16 +8,18 @@
 
 buildGoModule (finalAttrs: {
   pname = "desync";
-  version = "1.1.0";
+  version = "1.1.3";
 
   src = fetchFromGitHub {
     owner = "folbricht";
     repo = "desync";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ViwNE+8fmYbAMPFd8yiWXDLbaenkgri9PBe92M0Se5U=";
+    hash = "sha256-xiiN+0veHRxVNsIpob7W/iRH+dABYIiWfw22DH1bTEs=";
   };
 
-  vendorHash = "sha256-dAFci7GXe1fPPABIG1dngEyGqC5TKa90fyQPYSbJJrk=";
+  vendorHash = "sha256-FRXwQUOD1UiGSlGkBLXT0RGG382RJdEGUJxaQiyzR9A=";
+
+  ldflags = [ "-X main.version=${finalAttrs.src.tag}" ];
 
   nativeBuildInputs = [ installShellFiles ];
 
@@ -26,25 +28,7 @@ buildGoModule (finalAttrs: {
 
   checkFlags =
     let
-      skippedTests = [
-        "TestExtract" # block cloning fails on ZFS
-        "TestExtractCommand/extract_while_regenerating_the_corrupted_seed" # block cloning fails on ZFS
-        "TestExtractCommand/extract_with_seed_directory" # block cloning fails on ZFS
-        "TestExtractCommand/extract_with_single_seed" # block cloning fails on ZFS
-        "TestExtractCommand/extract_with_single_seed,_explicit_data_directory_and_unexpected_seed_options" # block cloning fails on ZFS
-        "TestExtractCommand/extract_with_single_seed_and_explicit_data_directory" # block cloning fails on ZFS
-        "TestExtractWithNonStaticSeeds" # block cloning fails on ZFS
-        "TestLocalFSDirSetgidWhilePopulated" # cannot setgid in /tmp
-        "TestMountIndex" # FUSE does not work in sandbox
-        "TestSeed/extract_repetitive_file" # block cloning fails on ZFS
-        "TestTar" # xattr.list: operation not supported
-        "TestUnTarDirMTime" # xattr.list: operation not supported
-        "TestUnTarIntoReadOnlyDir" # xattr.list: operation not supported
-        "TestUnTarNoSamePermissionsOverReadOnlyTree" # xattr.list: operation not supported
-        "TestUnTarReadOnlyDir" # xattr.list: operation not supported
-        "TestUnTarReadOnlyDirNoSamePermissions" # xattr.list: operation not supported
-      ]
-      ++ lib.optionals stdenv.hostPlatform.isDarwin [
+      skippedTests = lib.optionals stdenv.hostPlatform.isDarwin [
         "TestS3StoreGetChunk/fail" # sendfile is not permitted in Darwin sandbox
         "TestS3StoreGetChunk/recover" # sendfile is not permitted in Darwin sandbox
       ];

From 816af67ddedbd35593cb430e9cb7bdb94ec35bec Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Daniels=20=C5=A0atcs?= <dev@dshatz.com>
Date: Fri, 4 Sep 2026 01:05:56 +0300
Subject: [PATCH 068/146] kotlin-cli: 0.11.1 -> 0.12.0

---
 pkgs/by-name/ko/kotlin-cli/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ko/kotlin-cli/package.nix b/pkgs/by-name/ko/kotlin-cli/package.nix
index 02ca48c9c907..203541a40c2a 100644
--- a/pkgs/by-name/ko/kotlin-cli/package.nix
+++ b/pkgs/by-name/ko/kotlin-cli/package.nix
@@ -10,11 +10,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "kotlin-cli";
-  version = "0.11.1";
+  version = "0.12.0";
 
   src = fetchurl {
     url = "https://packages.jetbrains.team/maven/p/amper/amper/org/jetbrains/kotlin/kotlin-cli/${finalAttrs.version}/kotlin-cli-${finalAttrs.version}-dist.tgz";
-    hash = "sha256-De0qQ09r8ZOyTiptVsO6RD9CMnIRVaZaqoNyeJQSES8=";
+    hash = "sha256-YmstbodTrXW0sCFE5ZfS9EHdlAeUvlEDNSry6ADk4T4=";
   };
   sourceRoot = ".";
   dontBuild = true;

From 9f22d683fd95b6404e8264c077bc17c7b7114088 Mon Sep 17 00:00:00 2001
From: Philip Johansson <philip@phlipphlop.me>
Date: Fri, 4 Sep 2026 14:22:22 +0200
Subject: [PATCH 069/146] qbit-manage: 4.11.0 -> 4.13.0

---
 pkgs/by-name/qb/qbit-manage/package.nix | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/qb/qbit-manage/package.nix b/pkgs/by-name/qb/qbit-manage/package.nix
index 94186235f679..8a233bd85b98 100644
--- a/pkgs/by-name/qb/qbit-manage/package.nix
+++ b/pkgs/by-name/qb/qbit-manage/package.nix
@@ -8,13 +8,13 @@
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "qbit-manage";
-  version = "4.11.0";
+  version = "4.13.0";
 
   src = fetchFromGitHub {
     owner = "StuffAnThings";
     repo = "qbit_manage";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-3HYxrFvte38ZKcKJOW86Yp1nGvEvzmflapNkVd9hSGg=";
+    hash = "sha256-Btj6Lavz5vcCURDKy7OTdEonTD5jwBbAwSMzK06lK3o=";
   };
 
   pyproject = true;
@@ -42,7 +42,6 @@ python3Packages.buildPythonApplication (finalAttrs: {
 
   pythonRelaxDeps = [
     "bencode.py"
-    "gitpython"
     "humanize"
   ];
 

From e0151549dba328f2c6ad8f3e81e6f5cebbfb8040 Mon Sep 17 00:00:00 2001
From: thedb <thedb11@gmail.com>
Date: Sat, 29 Aug 2026 12:00:00 +0200
Subject: [PATCH 070/146] windows.sdk: fix 'fetchWinSdk' by adding the package
 'cacert' to nativeBuildInputs

---
 pkgs/os-specific/windows/msvcSdk/fetchWinSdk.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/pkgs/os-specific/windows/msvcSdk/fetchWinSdk.nix b/pkgs/os-specific/windows/msvcSdk/fetchWinSdk.nix
index 3c498df81b74..597fb7f595e2 100644
--- a/pkgs/os-specific/windows/msvcSdk/fetchWinSdk.nix
+++ b/pkgs/os-specific/windows/msvcSdk/fetchWinSdk.nix
@@ -3,6 +3,7 @@
   config,
   stdenvNoCC,
   xwin,
+  cacert,
 }:
 let
   host = stdenvNoCC.hostPlatform;
@@ -45,7 +46,10 @@ lib.extendMkDerivation {
 
       strictDeps = true;
 
-      nativeBuildInputs = [ xwin ];
+      nativeBuildInputs = [
+        xwin
+        cacert
+      ];
 
       outputHashAlgo = "sha256";
       outputHashMode = "recursive";

From eb209e0afb150c9f4997f015823b5dffdc164875 Mon Sep 17 00:00:00 2001
From: Pascal Dietrich <cameo007@mintux.de>
Date: Fri, 4 Sep 2026 17:16:39 +0200
Subject: [PATCH 071/146] andcli: 2.8.1 -> 2.9.0

---
 pkgs/by-name/an/andcli/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/an/andcli/package.nix b/pkgs/by-name/an/andcli/package.nix
index 1c819c2fb3fd..f0293cc4a704 100644
--- a/pkgs/by-name/an/andcli/package.nix
+++ b/pkgs/by-name/an/andcli/package.nix
@@ -9,7 +9,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "andcli";
-  version = "2.8.1";
+  version = "2.9.0";
 
   __structuredAttrs = true;
 
@@ -19,10 +19,10 @@ buildGoModule (finalAttrs: {
     owner = "tjblackheart";
     repo = "andcli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BVF+r8N+/PvARxANlL7nPf23ABbp+O1DNPblMyXroq8=";
+    hash = "sha256-ls/QWEAxxnsersk7L3AaRo5jo1Vsao61c2mgjt91sAQ=";
   };
 
-  vendorHash = "sha256-aFOwfloqFPPMgCufwmDgfM9lDinkFvu4i+BiVUo+Iwk=";
+  vendorHash = "sha256-+qz2vIh4GTkdmhjGvYqJYZ9ZMI9f+yXObmyGHk/5Cyg=";
 
   ldflags = [
     "-s"

From 4c4970bce22f01b6d104f23362fe643e78384461 Mon Sep 17 00:00:00 2001
From: Sebastian Friedrich <35170732+sebfried@users.noreply.github.com>
Date: Fri, 4 Sep 2026 20:34:59 +0200
Subject: [PATCH 072/146] buzz-cli: 0.1.0-unstable-2026-08-27 ->
 0.1.0-unstable-2026-09-02

Assisted-by: OpenAI Codex (gpt-5.6-sol)
---
 pkgs/by-name/bu/buzz-cli/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/bu/buzz-cli/package.nix b/pkgs/by-name/bu/buzz-cli/package.nix
index a320b4990a03..6ed02fa5d5af 100644
--- a/pkgs/by-name/bu/buzz-cli/package.nix
+++ b/pkgs/by-name/bu/buzz-cli/package.nix
@@ -8,7 +8,7 @@
 
 rustPlatform.buildRustPackage {
   pname = "buzz-cli";
-  version = "0.1.0-unstable-2026-08-27";
+  version = "0.1.0-unstable-2026-09-02";
   __structuredAttrs = true;
   __darwinAllowLocalNetworking = true;
   strictDeps = true;
@@ -16,11 +16,11 @@ rustPlatform.buildRustPackage {
   src = fetchFromGitHub {
     owner = "block";
     repo = "buzz";
-    rev = "0808ab485c39c3c12ef02af2188c65a5145eb99d";
-    hash = "sha256-+vYRX6yZmyWxtpcaQj62ujmcG2uwo3fdaX5Oo6Q1jEE=";
+    rev = "47d068e2109d077414cbf2f4f1c927f6d051037a";
+    hash = "sha256-sLIyStOy330KzzVF9QnIn27loT5QXCRz0U4NN9bxU40=";
   };
 
-  cargoHash = "sha256-y067FJWvsJAe6mvtnLPSW1YK0/gcBrKuZX45OCO8/2U=";
+  cargoHash = "sha256-q8FUmTHnPfy/Ub+TNs3UK3exOoX1GdZGwHkH5pDteKE=";
   cargoBuildFlags = [ "--package=buzz-cli" ];
   cargoTestFlags = [ "--package=buzz-cli" ];
 

From 9336d3e693ceb8ce9348c3e951cb8456c0cc455e Mon Sep 17 00:00:00 2001
From: Pascal Dietrich <cameo007@mintux.de>
Date: Fri, 4 Sep 2026 18:02:10 +0200
Subject: [PATCH 073/146] bulwark: remove musl binaries on glibc and vice-versa

---
 pkgs/by-name/bu/bulwark/package.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/pkgs/by-name/bu/bulwark/package.nix b/pkgs/by-name/bu/bulwark/package.nix
index feefcad00e50..9ab8dfebdd9f 100644
--- a/pkgs/by-name/bu/bulwark/package.nix
+++ b/pkgs/by-name/bu/bulwark/package.nix
@@ -4,6 +4,7 @@
   fetchFromGitHub,
   google-fonts,
   nodejs,
+  stdenv,
   nix-update-script,
   nixosTests,
 }:
@@ -67,6 +68,12 @@ buildNpmPackage (finalAttrs: {
     runHook postInstall
   '';
 
+  postInstall = ''
+    # sharp picks its native binary by libc (detect-libc), so the copies built
+    # for the other libc can never be loaded.
+    rm -rf $out/node_modules/@img/*-${if stdenv.hostPlatform.isMusl then "linux" else "linuxmusl"}-*
+  '';
+
   __structuredAttrs = true;
 
   passthru = {

From 7621b0cdb300c9da4c404570a53739d322d2c9cc Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Fri, 4 Sep 2026 22:05:02 +0200
Subject: [PATCH 074/146] cherrytree: remove unused gtksourceviewmm dependency

Dropped upstream in version 1.2.0 [1].

[1] https://github.com/giuspen/cherrytree/blob/0445ed0df7192daee8c1446070364a5fc456eabd/changelog.txt#L155
---
 pkgs/by-name/ch/cherrytree/package.nix | 2 --
 1 file changed, 2 deletions(-)

diff --git a/pkgs/by-name/ch/cherrytree/package.nix b/pkgs/by-name/ch/cherrytree/package.nix
index 94acf177de62..2b18d23122b7 100644
--- a/pkgs/by-name/ch/cherrytree/package.nix
+++ b/pkgs/by-name/ch/cherrytree/package.nix
@@ -8,7 +8,6 @@
   wrapGAppsHook3,
   gtkmm3,
   gtksourceview4,
-  gtksourceviewmm,
   gspell,
   libxmlxx,
   sqlite,
@@ -40,7 +39,6 @@ stdenv.mkDerivation (finalAttrs: {
   buildInputs = [
     gtkmm3
     gtksourceview4
-    gtksourceviewmm
     gspell
     libxmlxx
     sqlite

From 48235560c5b3a9de2949b76b16783f0f92c39de8 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 5 Sep 2026 00:37:27 +0000
Subject: [PATCH 075/146] webdump: 0.2 -> 0.3

---
 pkgs/by-name/we/webdump/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/we/webdump/package.nix b/pkgs/by-name/we/webdump/package.nix
index 49b5aa52c996..1b7f442fdd14 100644
--- a/pkgs/by-name/we/webdump/package.nix
+++ b/pkgs/by-name/we/webdump/package.nix
@@ -5,12 +5,12 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "webdump";
-  version = "0.2";
+  version = "0.3";
 
   src = fetchgit {
     url = "git://git.codemadness.org/webdump";
     tag = finalAttrs.version;
-    hash = "sha256-YtgZkAnbQkIr2fhUYpSp/PaduuBFjxIkrkaROxrmT/0=";
+    hash = "sha256-XaqnFaCfTlzTkuMXrt1sQRCnO29yD1aCj/owmVAqDXU=";
   };
 
   makeFlags = [ "PREFIX=${placeholder "out"}" ];

From a05a2974828cc27b347dec65449037acd0b44d47 Mon Sep 17 00:00:00 2001
From: Rachala Raj <rachalaraj@users.noreply.github.com>
Date: Sun, 23 Aug 2026 02:54:41 +0530
Subject: [PATCH 076/146] cpak: init at 2.12.7

A portable, low-overhead application format and rootless container sandbox for Linux.

https://cpak.it

https://github.com/Containerpak/cpak/releases/tag/v2.12.7

Assisted-by: Antigravity (Gemini 3.8 Flash)
---
 pkgs/by-name/cp/cpak/package.nix | 55 ++++++++++++++++++++++++++++++++
 1 file changed, 55 insertions(+)
 create mode 100644 pkgs/by-name/cp/cpak/package.nix

diff --git a/pkgs/by-name/cp/cpak/package.nix b/pkgs/by-name/cp/cpak/package.nix
new file mode 100644
index 000000000000..8d68dd6c5638
--- /dev/null
+++ b/pkgs/by-name/cp/cpak/package.nix
@@ -0,0 +1,55 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  nix-update-script,
+  versionCheckHook,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "cpak";
+  version = "2.12.7";
+
+  src = fetchFromGitHub {
+    owner = "Containerpak";
+    repo = "cpak";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-bISKyH1+Yr1EBzZYIK0xpe0jmBiWtCnByz4Ng01QJCI=";
+  };
+
+  vendorHash = "sha256-cgqb2AY06Ru+JJIK7vyaLSPyjJqiLvNytvSQCgDOASc=";
+
+  subPackages = [
+    "."
+    "cmd/cpak-storaged"
+    "cmd/cpak-sign"
+  ];
+
+  tags = [ "cpak_ui_builtin" ];
+
+  __structuredAttrs = true;
+
+  env.CGO_ENABLED = 0;
+
+  ldflags = [
+    "-s"
+    "-w"
+    "-X main.version=${finalAttrs.version}"
+    "-X main.selfUpdateMode=disabled"
+  ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Decentralized, portable, low-overhead containerized application format for Linux";
+    homepage = "https://cpak.it";
+    changelog = "https://github.com/Containerpak/cpak/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.lgpl21Only;
+    maintainers = with lib.maintainers; [ rachalaraj ];
+    mainProgram = "cpak";
+    platforms = lib.platforms.linux;
+  };
+})

From 3c495a143b45ab3b9e52dcb59c761639d738f6fb Mon Sep 17 00:00:00 2001
From: yvnth <yashupress@gmail.com>
Date: Sat, 29 Aug 2026 14:59:36 +0530
Subject: [PATCH 077/146] tombi: 1.4.1 -> 1.5.2

tombi: 1.4.1 -> 1.5.1

tombi: 1.4.1 -> 1.5.2
---
 pkgs/by-name/to/tombi/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/to/tombi/package.nix b/pkgs/by-name/to/tombi/package.nix
index 456eeceee466..b5ddada95e8a 100644
--- a/pkgs/by-name/to/tombi/package.nix
+++ b/pkgs/by-name/to/tombi/package.nix
@@ -9,7 +9,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "tombi";
-  version = "1.4.1";
+  version = "1.5.2";
 
   __structuredAttrs = true;
 
@@ -17,7 +17,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "tombi-toml";
     repo = "tombi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-O9rtdhbyZn/hdUogWJz+H8bxOzj1leZnqMBpTgQ+ePM=";
+    hash = "sha256-HMAyzISP/q+eBAPPg/8FHa6eQ4xbA8sHne1dm+veUyo=";
   };
 
   # Tests relies on the presence of network
@@ -26,7 +26,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "--package"
     "tombi-cli"
   ];
-  cargoHash = "sha256-9mEPyzSaxJLeejNuHMwBYjJ+pfDcNvarykPLgBxGtLs=";
+  cargoHash = "sha256-9x7Qesl6OsiN79b1MqP5BMF/0VOymER57ijwHzs0Taw=";
 
   postPatch = ''
     substituteInPlace Cargo.toml \

From 97249804a6563737c3eed9dafb642e3d011188e9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Sat, 5 Sep 2026 18:29:11 +0200
Subject: [PATCH 078/146] python3Packages.vodozemac: execute tests

---
 .../development/python-modules/vodozemac/default.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/pkgs/development/python-modules/vodozemac/default.nix b/pkgs/development/python-modules/vodozemac/default.nix
index c66213e8e731..d50225b6f73b 100644
--- a/pkgs/development/python-modules/vodozemac/default.nix
+++ b/pkgs/development/python-modules/vodozemac/default.nix
@@ -1,7 +1,9 @@
 {
   buildPythonPackage,
   fetchFromGitHub,
+  hypothesis,
   lib,
+  pytestCheckHook,
   rustPlatform,
 }:
 
@@ -27,6 +29,16 @@ buildPythonPackage (finalAttrs: {
     rustPlatform.cargoSetupHook
   ];
 
+  preCheck = ''
+    # do not shadow imports
+    rm -r vodozemac
+  '';
+
+  nativeCheckInputs = [
+    hypothesis
+    pytestCheckHook
+  ];
+
   meta = {
     description = "Python bindings for vodozemac";
     homepage = "https://github.com/matrix-nio/vodozemac-python";

From 91c2b050a517a9b0a772d8c0dfc424d191ffc63f Mon Sep 17 00:00:00 2001
From: Thierry Delafontaine <delafthi@pm.me>
Date: Thu, 23 Jul 2026 22:45:41 +0200
Subject: [PATCH 079/146] crossover: init at 26.3.0

---
 pkgs/by-name/cr/crossover/package.nix | 73 +++++++++++++++++++++++++++
 1 file changed, 73 insertions(+)
 create mode 100644 pkgs/by-name/cr/crossover/package.nix

diff --git a/pkgs/by-name/cr/crossover/package.nix b/pkgs/by-name/cr/crossover/package.nix
new file mode 100644
index 000000000000..59a6fce0fe34
--- /dev/null
+++ b/pkgs/by-name/cr/crossover/package.nix
@@ -0,0 +1,73 @@
+{
+  lib,
+  stdenvNoCC,
+  fetchurl,
+  unzip,
+  writeShellScript,
+  curl,
+  gnugrep,
+  gnused,
+  coreutils,
+  common-updater-scripts,
+}:
+stdenvNoCC.mkDerivation (finalAttrs: {
+  pname = "crossover";
+  version = "26.3.0";
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  src = fetchurl {
+    url = "https://media.codeweavers.com/pub/crossover/cxmac/demo/crossover-${finalAttrs.version}.zip";
+    hash = "sha256-hojghIxOX3nxzDUctS0yRH2gDGwAz9O0uy0WTURYmiY=";
+  };
+
+  sourceRoot = ".";
+
+  nativeBuildInputs = [ unzip ];
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/Applications
+    cp -R CrossOver.app $out/Applications/
+
+    runHook postInstall
+  '';
+
+  passthru.updateScript = writeShellScript "crossover-update-script" ''
+    set -euo pipefail
+    export PATH="${
+      lib.makeBinPath [
+        curl
+        gnugrep
+        gnused
+        coreutils
+        common-updater-scripts
+      ]
+    }"
+
+    new_version=$(curl -s "https://www.codeweavers.com/xml/versions/cxmac.xml" \
+      | grep -oE 'crossover-[0-9]+\.[0-9]+\.[0-9]+\.zip' \
+      | sed -E 's/crossover-(.*)\.zip/\1/' \
+      | sort -V \
+      | tail -n1)
+
+    if [[ "${finalAttrs.version}" = "$new_version" ]]; then
+      echo "crossover is already at the latest version $new_version."
+      exit 0
+    fi
+
+    update-source-version "crossover" "$new_version" \
+      --ignore-same-version
+  '';
+
+  meta = {
+    description = "Run Windows applications on macOS without a Windows license";
+    homepage = "https://www.codeweavers.com/crossover";
+    license = lib.licenses.unfree;
+    maintainers = [ lib.maintainers.delafthi ];
+    platforms = lib.platforms.darwin;
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+  };
+})

From 7fa8acd2815477d4ad25c85c6b1526645753743f Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 5 Sep 2026 19:30:52 +0000
Subject: [PATCH 080/146] stump: 0.1.6 -> 0.1.7

---
 pkgs/by-name/st/stump/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/st/stump/package.nix b/pkgs/by-name/st/stump/package.nix
index e3dc64d4d1a1..f5e0603feccf 100644
--- a/pkgs/by-name/st/stump/package.nix
+++ b/pkgs/by-name/st/stump/package.nix
@@ -20,13 +20,13 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "stump";
-  version = "0.1.6";
+  version = "0.1.7";
 
   src = fetchFromGitHub {
     owner = "stumpapp";
     repo = "stump";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-y870qA9r9uhFJthKiz0uIu6xFMtZ0L5xBj4iRr20/QI=";
+    hash = "sha256-ERERTzoh0RoWtVNrOejiyFu7ZmSVgUVGFaTsj36Je48=";
   };
 
   frontend = stdenv.mkDerivation (_: {
@@ -35,7 +35,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
     yarnOfflineCache = fetchYarnDeps {
       yarnLock = finalAttrs.src + "/yarn.lock";
-      hash = "sha256-j+S3FkiWZRZyX3CfwEDbspjG+oltECgIFOZZuN7FKRY=";
+      hash = "sha256-x5aZLRhNmoxcrMOQNvNDfuJCfc0ezYazVGm17v3CwqE=";
     };
 
     nativeBuildInputs = [
@@ -60,7 +60,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   __structuredAttrs = true;
 
-  cargoHash = "sha256-2WI/sjRM9GESBc3APrTwQ2F28CPkZCUfzEE+EMMWHKA=";
+  cargoHash = "sha256-4qCxyoo1WyurXLEw5Nq291Tglds0Lg1LGHfgZxsoZBQ=";
 
   cargoBuildFlags = [
     "--package"

From bb27c8f09f773048b990e4ca4acc6d70ba279f4d Mon Sep 17 00:00:00 2001
From: JuliusFreudenberger <julius+git@jfreudenberger.de>
Date: Sun, 6 Sep 2026 01:00:31 +0200
Subject: [PATCH 081/146] gocron: 0.9.14 -> 0.11.0

---
 nixos/tests/gocron.nix             |  4 ++--
 pkgs/by-name/go/gocron/package.nix | 32 ++++++++++--------------------
 2 files changed, 12 insertions(+), 24 deletions(-)

diff --git a/nixos/tests/gocron.nix b/nixos/tests/gocron.nix
index 2625dc474b53..67ba07456494 100644
--- a/nixos/tests/gocron.nix
+++ b/nixos/tests/gocron.nix
@@ -34,10 +34,10 @@
       return status == 0 and int(output) == 1
 
     def start_job():
-      machine.succeed("curl -X POST http://localhost:8156/api/jobs/Test%20job")
+      machine.succeed("curl -X POST http://localhost:8156/api/jobs/test-job")
 
     def job_ran_successfully() -> bool:
-      output = machine.succeed("curl http://localhost:8156/api/runs/Test%20job | jq '.[0].status_id, .[0].logs.[2].message'")
+      output = machine.succeed("curl http://localhost:8156/api/runs/test-job | jq '.[0].status_id, .[0].logs.[2].message'")
       split_output = output.split('\n')
       ran_successfully = int(split_output[0]) == 3
       log_message_as_expected = "Job runs not successfully" in split_output[1]
diff --git a/pkgs/by-name/go/gocron/package.nix b/pkgs/by-name/go/gocron/package.nix
index bc9ea1e8dd31..e2b005e452f7 100644
--- a/pkgs/by-name/go/gocron/package.nix
+++ b/pkgs/by-name/go/gocron/package.nix
@@ -2,12 +2,8 @@
   lib,
   fetchFromGitHub,
   nodejs,
-  fetchYarnDeps,
-  yarnConfigHook,
-  yarnBuildHook,
-  yarnInstallHook,
-  stdenv,
-  buildGoModule,
+  buildNpmPackage,
+  buildGo127Module,
   makeWrapper,
   bash,
   versionCheckHook,
@@ -15,38 +11,30 @@
   nixosTests,
 }:
 
-buildGoModule (finalAttrs: {
+buildGo127Module (finalAttrs: {
 
   pname = "gocron";
-  version = "0.9.14";
+  version = "0.11.0";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "flohoss";
     repo = "gocron";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-LKjK5V+WrzTJlWPytafy8Ypva41RW4/12aSGaJj572I=";
+    hash = "sha256-NyL//yrKqYiwwQBdJHwQcPvjKssX4o9XrymI/6Hvbhc=";
   };
 
-  gocron-web = stdenv.mkDerivation (finalAttrsWebassets: {
+  gocron-web = buildNpmPackage (finalAttrsWebassets: {
     pname = "${finalAttrs.pname}-web";
     src = "${finalAttrs.src}/web";
     inherit (finalAttrs) version;
 
-    yarnOfflineCache = fetchYarnDeps {
-      yarnLock = finalAttrsWebassets.src + "/yarn.lock";
-      hash = "sha256-f0xnF9gd3c0KPrORPVkApyWPy+DazyzHeQu32wWybiw=";
-    };
+    npmDepsHash = "sha256-LVazZ0O82sQGxqyu0Dh4G/SmM33ftLoGqpgKrHMFGks=";
 
-    nativeBuildInputs = [
-      yarnConfigHook
-      yarnBuildHook
-      yarnInstallHook
-      nodejs
-    ];
+    dontNpmInstall = true;
 
     preBuild = ''
-      yarn types
+      npm run types
     '';
 
     postBuild = ''
@@ -55,7 +43,7 @@ buildGoModule (finalAttrs: {
 
   });
 
-  vendorHash = "sha256-VbmS9Fh0pr/dUB+pZBqKbi4bu6Do/3TRr9uI3TmGsOM=";
+  vendorHash = "sha256-p45E84MWNTa0VvvGiOfOZ/ZEJ41m0Wu7g1nTEFYkU6c=";
 
   postPatch = ''
     substituteInPlace handlers/web.go \

From e61a1fc400fe2883f79f66c0877a432a0876b594 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 6 Sep 2026 01:34:43 +0000
Subject: [PATCH 082/146] python3Packages.pyhik: 0.4.5 -> 0.4.6

---
 pkgs/development/python-modules/pyhik/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/pyhik/default.nix b/pkgs/development/python-modules/pyhik/default.nix
index 0395a626535b..18ba93e0830a 100644
--- a/pkgs/development/python-modules/pyhik/default.nix
+++ b/pkgs/development/python-modules/pyhik/default.nix
@@ -9,14 +9,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pyhik";
-  version = "0.4.5";
+  version = "0.4.6";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mezz64";
     repo = "pyHik";
     tag = finalAttrs.version;
-    hash = "sha256-3OiPU94Z9CBmxJPhmPRLLMpykW+USpckPwqPPeCAPng=";
+    hash = "sha256-UlKQxbTnqxdyRYbpecP5OEnCILnAhifIsjEixxvVBjc=";
   };
 
   build-system = [

From 5cd45f8749c3f597cfba04c2ee7999155078285f Mon Sep 17 00:00:00 2001
From: Shogo Takata <shogo-takata@st.go.tuat.ac.jp>
Date: Fri, 4 Sep 2026 10:43:17 +0900
Subject: [PATCH 083/146] espresso: 2.4 -> 2.5.1

---
 pkgs/by-name/es/espresso/package.nix | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/pkgs/by-name/es/espresso/package.nix b/pkgs/by-name/es/espresso/package.nix
index 1ce6e8a5c848..de0011113d81 100644
--- a/pkgs/by-name/es/espresso/package.nix
+++ b/pkgs/by-name/es/espresso/package.nix
@@ -4,23 +4,22 @@
   cmake,
   stdenv,
   nix-update-script,
+  asciidoctor,
 }:
 stdenv.mkDerivation rec {
   pname = "espresso";
-  version = "2.4";
+  version = "2.5.1";
   src = fetchFromGitHub {
     owner = "chipsalliance";
     repo = "espresso";
     rev = "v${version}";
-    hash = "sha256-z5By57VbmIt4sgRgvECnLbZklnDDWUA6fyvWVyXUzsI=";
+    hash = "sha256-dZigbd4md8ffFawpPB/N/TccBQL6sbMKN2VdGu+fhKY=";
   };
 
-  postPatch = ''
-    substituteInPlace utility/port.h \
-      --replace-fail "VOID_HACK srandom();" "VOID_HACK srandom(unsigned int __seed);"
-  '';
-
-  nativeBuildInputs = [ cmake ];
+  nativeBuildInputs = [
+    cmake
+    asciidoctor
+  ];
 
   doCheck = true;
 
@@ -42,6 +41,7 @@ stdenv.mkDerivation rec {
       heuristic Boolean minimization.
     '';
     homepage = "https://github.com/chipsalliance/espresso";
+    changelog = "https://github.com/chipsalliance/espresso/releases/tag/v${version}";
     maintainers = with lib.maintainers; [ pineapplehunter ];
     mainProgram = "espresso";
     platforms = lib.platforms.all;

From 75096f0d6e0f409c9a99e6fc4c52c955b5f06feb Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 6 Sep 2026 06:36:18 +0000
Subject: [PATCH 084/146] docker-compose: 5.5.0 -> 5.5.1

---
 pkgs/applications/virtualization/docker/compose.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/virtualization/docker/compose.nix b/pkgs/applications/virtualization/docker/compose.nix
index 2b0f3d80176d..f924baad13bf 100644
--- a/pkgs/applications/virtualization/docker/compose.nix
+++ b/pkgs/applications/virtualization/docker/compose.nix
@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "docker-compose";
-  version = "5.5.0";
+  version = "5.5.1";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "docker";
     repo = "compose";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-EUPf76jj4Wc287zZNiDzSljAnwl8adSkUAz8JJaT1es=";
+    hash = "sha256-f4lIO9zSONHSQoZy80NSg3pcXyDfT5GXRcB3RkXC9sw=";
   };
 
-  vendorHash = "sha256-3Jlc/0g/IjH7hhnx70PgZ76Dl8nPzv9M2Gee3TXOGCg=";
+  vendorHash = "sha256-8I+gPz7gdNKjuqLi0AnW4NjaONKxoYIhHZR064QYt6g=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
 

From 2c50c5cb30c055a27fd7795ec19fd91f117a423e Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 6 Sep 2026 07:50:36 +0000
Subject: [PATCH 085/146] thrift-ls: 0.2.11 -> 0.2.12

---
 pkgs/by-name/th/thrift-ls/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/th/thrift-ls/package.nix b/pkgs/by-name/th/thrift-ls/package.nix
index 156d8752aeaa..57e9270b02eb 100644
--- a/pkgs/by-name/th/thrift-ls/package.nix
+++ b/pkgs/by-name/th/thrift-ls/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "thrift-ls";
-  version = "0.2.11";
+  version = "0.2.12";
 
   src = fetchFromGitHub {
     owner = "joyme123";
     repo = "thrift-ls";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-iXrfGoX24bOqV39PhHIshb7GzqDt7EW3aRwTptd50e8=";
+    hash = "sha256-Ts0zy/wBjZTm71Umk46KBkdbUm/Akf/KXdoKp8G95ks=";
   };
 
   vendorHash = "sha256-SGCJ12BxjFUQ7bnaNY0bvrrtm2qNNrwYKKfNEi1lPco=";

From 3b767b520f84298fcd8348fc55028731e2233524 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 6 Sep 2026 11:02:31 +0000
Subject: [PATCH 086/146] roundcube: 1.7.3 -> 1.7.4

---
 pkgs/servers/roundcube/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/roundcube/default.nix b/pkgs/servers/roundcube/default.nix
index 8ca94ed55d71..fbb272d1e38e 100644
--- a/pkgs/servers/roundcube/default.nix
+++ b/pkgs/servers/roundcube/default.nix
@@ -11,11 +11,11 @@
 
 stdenv.mkDerivation rec {
   pname = "roundcube";
-  version = "1.7.3";
+  version = "1.7.4";
 
   src = fetchurl {
     url = "https://github.com/roundcube/roundcubemail/releases/download/${version}/roundcubemail-${version}-complete.tar.gz";
-    sha256 = "sha256-RDzeLqA7hAzkcB/iPCc/AeaHAvF20oLmAkgja7tfX4U=";
+    sha256 = "sha256-LGyHjwCT8b9/tghngdLdkmnWUsAWuGk5wVfF8XKROaI=";
   };
 
   patches = [ ./0001-Don-t-resolve-symlinks-when-trying-to-find-INSTALL_P.patch ];

From f1b6e2953b4706bf70f9fbd6b2b55bcc49c3c755 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 6 Sep 2026 11:38:41 +0000
Subject: [PATCH 087/146] tabiew: 0.14.2 -> 0.15.0

---
 pkgs/by-name/ta/tabiew/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ta/tabiew/package.nix b/pkgs/by-name/ta/tabiew/package.nix
index c9bf8a5fa50d..67e0bffe6efd 100644
--- a/pkgs/by-name/ta/tabiew/package.nix
+++ b/pkgs/by-name/ta/tabiew/package.nix
@@ -7,16 +7,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "tabiew";
-  version = "0.14.2";
+  version = "0.15.0";
 
   src = fetchFromGitHub {
     owner = "shshemi";
     repo = "tabiew";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kFmlXjC7L8rW5XfIIMiDcGDxoGlcICuwOZh6jkecFWY=";
+    hash = "sha256-iHdHeWx8xxqirwiGdeSbvHDXYPn1UkqoQMosaiakQz0=";
   };
 
-  cargoHash = "sha256-vEGa1LyMRZkiWCtS+DjqRteZv/4kNbyh2yMrYVv73YM=";
+  cargoHash = "sha256-MemnQS6lRmIzo9x94yorGIp2upTY/CW/3jGh73AdowQ=";
 
   nativeBuildInputs = [
     installShellFiles

From ca75742496ade81a53998c2b46fde31d460b7dd2 Mon Sep 17 00:00:00 2001
From: Aiden Schembri <aidsch0605@outlook.com>
Date: Sun, 6 Sep 2026 13:58:43 +0200
Subject: [PATCH 088/146] discord: adjust desktop entry

---
 .../networking/instant-messengers/discord/linux.nix            | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pkgs/applications/networking/instant-messengers/discord/linux.nix b/pkgs/applications/networking/instant-messengers/discord/linux.nix
index ff5329b90985..3f9782c147e2 100644
--- a/pkgs/applications/networking/instant-messengers/discord/linux.nix
+++ b/pkgs/applications/networking/instant-messengers/discord/linux.nix
@@ -285,7 +285,8 @@ stdenv.mkDerivation (finalAttrs: {
     exec = binaryName;
     icon = pname;
     inherit desktopName;
-    genericName = meta.description;
+    comment = meta.description;
+    genericName = "Instant Messenger";
     categories = [
       "Network"
       "InstantMessaging"

From 80f0fff78df719c1de9fe8eddc633242bb035ad5 Mon Sep 17 00:00:00 2001
From: Aiden Schembri <aidsch0605@outlook.com>
Date: Sun, 6 Sep 2026 14:16:17 +0200
Subject: [PATCH 089/146] devin-desktop: fix name

---
 pkgs/by-name/de/devin-desktop/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/de/devin-desktop/package.nix b/pkgs/by-name/de/devin-desktop/package.nix
index debdffb8c53d..4e6e289966d6 100644
--- a/pkgs/by-name/de/devin-desktop/package.nix
+++ b/pkgs/by-name/de/devin-desktop/package.nix
@@ -21,8 +21,8 @@ in
   pname = "devin-desktop";
 
   executableName = "devin-desktop";
-  longName = "devin-desktop";
-  shortName = "devin-desktop";
+  longName = "Devin Desktop";
+  shortName = "Devin Desktop";
   libraryName = "devin-desktop";
   iconName = "devin-desktop";
 

From 4dfff6adc31d02cdccc92fdc12f144071a0a1530 Mon Sep 17 00:00:00 2001
From: Pascal Dietrich <cameo007@mintux.de>
Date: Fri, 4 Sep 2026 17:11:41 +0200
Subject: [PATCH 090/146] tauno-monitor: 0.2.20 -> 0.2.24

---
 pkgs/by-name/ta/tauno-monitor/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ta/tauno-monitor/package.nix b/pkgs/by-name/ta/tauno-monitor/package.nix
index 9a02cdd189b5..0899eec44de4 100644
--- a/pkgs/by-name/ta/tauno-monitor/package.nix
+++ b/pkgs/by-name/ta/tauno-monitor/package.nix
@@ -14,7 +14,7 @@
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "tauno-monitor";
-  version = "0.2.20";
+  version = "0.2.24";
   pyproject = false;
 
   __structuredAttrs = true;
@@ -23,7 +23,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     owner = "taunoe";
     repo = "tauno-monitor";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-rtFnWK1K4S866lgR/lGaTB+REqDExKsEFePX8cwai5E=";
+    hash = "sha256-HtoXdKKa/2nvBZVUXSrXH/7JHzdQObjW+7QTx/e8IWo=";
   };
 
   nativeBuildInputs = [

From bb2479d6957e86e507588b6bf4d9c85b15b77920 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 6 Sep 2026 14:36:25 +0000
Subject: [PATCH 091/146] python3Packages.tomlrt: 2.2.5 -> 2.2.7

---
 pkgs/development/python-modules/tomlrt/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/tomlrt/default.nix b/pkgs/development/python-modules/tomlrt/default.nix
index da071596d7d7..7bc86037ae7a 100644
--- a/pkgs/development/python-modules/tomlrt/default.nix
+++ b/pkgs/development/python-modules/tomlrt/default.nix
@@ -9,12 +9,12 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "tomlrt";
-  version = "2.2.5";
+  version = "2.2.7";
   pyproject = true;
 
   src = fetchPypi {
     inherit (finalAttrs) pname version;
-    hash = "sha256-8c3MzVL5SCHUZJM6hsYfGt/pkG/iH/Xxz+Ar3e59HCU=";
+    hash = "sha256-tfZZ0Jq/YNIAONrLNH5yC85PmX8iiteruoCMUvBriBU=";
   };
 
   build-system = [ hatchling ];

From 9e4da38625d812a1ee0b3c5bac9beb01a47a7104 Mon Sep 17 00:00:00 2001
From: Eric Rodrigues Pires <eric@eric.dev.br>
Date: Sun, 6 Sep 2026 12:33:10 -0300
Subject: [PATCH 092/146] eggdrop: 1.10.1 -> 1.10.2

---
 pkgs/by-name/eg/eggdrop/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/eg/eggdrop/package.nix b/pkgs/by-name/eg/eggdrop/package.nix
index 95184cc39a82..c60f64f0fc70 100644
--- a/pkgs/by-name/eg/eggdrop/package.nix
+++ b/pkgs/by-name/eg/eggdrop/package.nix
@@ -8,11 +8,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "eggdrop";
-  version = "1.10.1";
+  version = "1.10.2";
 
   src = fetchurl {
     url = "https://ftp.eggheads.org/pub/eggdrop/source/${lib.versions.majorMinor finalAttrs.version}/eggdrop-${finalAttrs.version}.tar.gz";
-    hash = "sha256-pc33RE14HC/09dC+FCAvXQlx4AOHGBpJtyUFf+lTEtU=";
+    hash = "sha256-1mRrYwh54azZsFP/oS9GZn+QcUXymvHfD4J0nvMDKpQ=";
   };
 
   buildInputs = [

From 2ecafd30f66b430e6c393115bfb9598bafab7c06 Mon Sep 17 00:00:00 2001
From: Matt McHenry <github@matt.mchenryfamily.org>
Date: Mon, 19 Jan 2026 10:29:01 -0500
Subject: [PATCH 093/146] fscrypt: drop -experimental suffix and corresponding
 comment

upstream removed their warning in v0.3.1 (sept. 2021):
https://github.com/google/fscrypt/commit/3f865a76c5891b1664136decb4f2eb6ee5391f57

fixes #221731
---
 nixos/modules/security/pam.nix                            | 8 ++++----
 .../fs/{fscrypt-experimental => fscrypt}/package.nix      | 3 ---
 pkgs/by-name/si/sirikali/package.nix                      | 4 ++--
 pkgs/top-level/aliases.nix                                | 1 +
 4 files changed, 7 insertions(+), 9 deletions(-)
 rename pkgs/by-name/fs/{fscrypt-experimental => fscrypt}/package.nix (94%)

diff --git a/nixos/modules/security/pam.nix b/nixos/modules/security/pam.nix
index c263c04cb0c3..fb3be94e3b1f 100644
--- a/nixos/modules/security/pam.nix
+++ b/nixos/modules/security/pam.nix
@@ -1252,7 +1252,7 @@ let
                       name = "fscrypt";
                       enable = config.security.pam.enableFscrypt;
                       control = "optional";
-                      modulePath = "${pkgs.fscrypt-experimental}/lib/security/pam_fscrypt.so";
+                      modulePath = "${pkgs.fscrypt}/lib/security/pam_fscrypt.so";
                     }
                     {
                       name = "zfs_key";
@@ -1449,7 +1449,7 @@ let
                 name = "fscrypt";
                 enable = config.security.pam.enableFscrypt;
                 control = "optional";
-                modulePath = "${pkgs.fscrypt-experimental}/lib/security/pam_fscrypt.so";
+                modulePath = "${pkgs.fscrypt}/lib/security/pam_fscrypt.so";
               }
               {
                 name = "zfs_key";
@@ -1610,7 +1610,7 @@ let
                 name = "fscrypt";
                 enable = config.security.pam.enableFscrypt;
                 control = "optional";
-                modulePath = "${pkgs.fscrypt-experimental}/lib/security/pam_fscrypt.so";
+                modulePath = "${pkgs.fscrypt}/lib/security/pam_fscrypt.so";
               }
               {
                 name = "zfs_key-skip-systemd";
@@ -2663,7 +2663,7 @@ in
       ++ lib.optionals config.security.pam.enableOTPW [ pkgs.otpw ]
       ++ lib.optionals config.security.pam.oath.enable [ pkgs.oath-toolkit ]
       ++ lib.optionals config.security.pam.p11.enable [ pkgs.pam_p11 ]
-      ++ lib.optionals config.security.pam.enableFscrypt [ pkgs.fscrypt-experimental ]
+      ++ lib.optionals config.security.pam.enableFscrypt [ pkgs.fscrypt ]
       ++ lib.optionals config.security.pam.u2f.enable [ pkgs.pam_u2f ];
 
     security.wrappers = {
diff --git a/pkgs/by-name/fs/fscrypt-experimental/package.nix b/pkgs/by-name/fs/fscrypt/package.nix
similarity index 94%
rename from pkgs/by-name/fs/fscrypt-experimental/package.nix
rename to pkgs/by-name/fs/fscrypt/package.nix
index 9566b1cf0ec6..197b68daf3f7 100644
--- a/pkgs/by-name/fs/fscrypt-experimental/package.nix
+++ b/pkgs/by-name/fs/fscrypt/package.nix
@@ -4,11 +4,8 @@
   fetchFromGitHub,
   gnum4,
   pam,
-  fscrypt-experimental,
 }:
 
-# Don't use this for anything important yet!
-
 buildGoModule rec {
   pname = "fscrypt";
   version = "0.3.7";
diff --git a/pkgs/by-name/si/sirikali/package.nix b/pkgs/by-name/si/sirikali/package.nix
index a2ebb86b243a..3435d3660f58 100644
--- a/pkgs/by-name/si/sirikali/package.nix
+++ b/pkgs/by-name/si/sirikali/package.nix
@@ -8,7 +8,7 @@
   pkg-config,
   qt6,
   kdePackages,
-  fscrypt-experimental,
+  fscrypt,
   gocryptfs,
   sshfs,
   libgcrypt,
@@ -46,7 +46,7 @@ stdenv.mkDerivation (finalAttrs: {
   qtWrapperArgs = [
     "--prefix PATH : ${
       lib.makeBinPath [
-        fscrypt-experimental
+        fscrypt
         gocryptfs
         sshfs
       ]
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 90369d595043..5a8cb53e2cd8 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -924,6 +924,7 @@ mapAliases {
   freerdpUnstable = throw "'freerdpUnstable' has been renamed to/replaced by 'freerdp'"; # Converted to throw 2025-10-27
   frozen-bubble = throw "'frozen-bubble' has been removed because it is broken and unmaintained"; # Added 2026-05-17
   frugal = throw "'frugal' was removed because upstream has been pulled"; # Added 2025-12-20
+  fscrypt-experimental = warnAlias "'fscrypt-experimental' has been renamed to/replaced by 'fscrypt'" fscrypt; # Added 2026-01-19
   fuse-7z-ng = throw "'fuse-7z-ng' was removed as it is unmaintained, and depends on fuse2"; # Added 2026-05-05
   fuse-ext2 = throw "'fuse-ext2' was removed as it is unmaintained, and depends on fuse2"; # Added 2026-08-05
   fusee-launcher = throw "'fusee-launcher' was removed as upstream removed the original source repository fearing legal repercussions"; # Added 2025-07-05

From 3eacde45be5af5387927f46da46e8b971d51571a Mon Sep 17 00:00:00 2001
From: Matt McHenry <github@matt.mchenryfamily.org>
Date: Sun, 6 Sep 2026 15:07:41 -0400
Subject: [PATCH 094/146] fscrypt: enable __structuredAttrs

required by PR checks for the parent commit, which see this as a new
package
---
 pkgs/by-name/fs/fscrypt/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/fs/fscrypt/package.nix b/pkgs/by-name/fs/fscrypt/package.nix
index 197b68daf3f7..6d75b313a87e 100644
--- a/pkgs/by-name/fs/fscrypt/package.nix
+++ b/pkgs/by-name/fs/fscrypt/package.nix
@@ -25,6 +25,7 @@ buildGoModule rec {
 
   vendorHash = "sha256-lR3qcRSVQjxyBuqHv5warfVVJy5zdomfE0DEJbA/RkQ=";
 
+  __structuredAttrs = true;
   doCheck = false;
 
   nativeBuildInputs = [ gnum4 ];

From 530958c60125981035cf99d77a9925eff7932e68 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 6 Sep 2026 20:51:32 +0000
Subject: [PATCH 095/146] dotenvx: 2.22.0 -> 2.23.0

---
 pkgs/by-name/do/dotenvx/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/do/dotenvx/package.nix b/pkgs/by-name/do/dotenvx/package.nix
index 41045bbaf678..1a46ab96c100 100644
--- a/pkgs/by-name/do/dotenvx/package.nix
+++ b/pkgs/by-name/do/dotenvx/package.nix
@@ -7,16 +7,16 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "dotenvx";
-  version = "2.22.0";
+  version = "2.23.0";
 
   src = fetchFromGitHub {
     owner = "dotenvx";
     repo = "dotenvx";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-V9JkdNNRKvlSreA8OH/IA7UsPDzOKARI+52JTnv3GM8=";
+    hash = "sha256-cvIblWPNhJPah8nWrJqHAwawQ9C8EueB0leF+miOIH0=";
   };
 
-  npmDepsHash = "sha256-d/0mqanXqy9KyK0vlCpAElB3WSi9F77l3Jbw9a9zEeI=";
+  npmDepsHash = "sha256-5dhLX6yWdQlS5XHF3Evbk5xbD87HJEiMRDdHTstzfWw=";
 
   dontNpmBuild = true;
 

From 9481ee1006cef617017d7c6557c737a399fd5ff2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 02:16:01 +0000
Subject: [PATCH 096/146] netatalk: 4.5.1 -> 4.5.2

---
 pkgs/by-name/ne/netatalk/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ne/netatalk/package.nix b/pkgs/by-name/ne/netatalk/package.nix
index 1afd577178aa..900be2d101ca 100644
--- a/pkgs/by-name/ne/netatalk/package.nix
+++ b/pkgs/by-name/ne/netatalk/package.nix
@@ -39,11 +39,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "netatalk";
-  version = "4.5.1";
+  version = "4.5.2";
 
   src = fetchurl {
     url = "mirror://sourceforge/netatalk/netatalk/netatalk-${finalAttrs.version}.tar.xz";
-    hash = "sha256-8JHeELDECZbr99ZQLPlHz9h9/hp+YvnZYBMiVXOThSQ=";
+    hash = "sha256-LN/VQg6Okchcgt2mapLc3Vl07vB2/rFpsnnGABM/OLI=";
   };
 
   nativeBuildInputs = [

From a0be97d6079d5f75bef64470f424fee3fc3ebe9b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 02:34:57 +0000
Subject: [PATCH 097/146] wakatime-cli: 2.25.0 -> 2.26.0

---
 pkgs/by-name/wa/wakatime-cli/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/wa/wakatime-cli/package.nix b/pkgs/by-name/wa/wakatime-cli/package.nix
index c7254b576b93..b5317d2821e2 100644
--- a/pkgs/by-name/wa/wakatime-cli/package.nix
+++ b/pkgs/by-name/wa/wakatime-cli/package.nix
@@ -9,13 +9,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "wakatime-cli";
-  version = "2.25.0";
+  version = "2.26.0";
 
   src = fetchFromGitHub {
     owner = "wakatime";
     repo = "wakatime-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-gbGI8mxB68O4s5q6c0wFQFKlwYOca/HkXzPX5sZPy5g=";
+    hash = "sha256-iZ5VzEncryr7rcPA9ly8Q4zlIvV78ytsTKXbIeYqTj4=";
   };
 
   vendorHash = "sha256-QSvd688wjKKnSSnHjlmXxgbT7xXl1hf/juhOLK1qWDw=";

From ddbb362db741f2d84103a0c5e6491f55a607334a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 03:36:28 +0000
Subject: [PATCH 098/146] postgresqlPackages.pg_background: 2.0.2 -> 2.0.3

---
 pkgs/servers/sql/postgresql/ext/pg_background.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/sql/postgresql/ext/pg_background.nix b/pkgs/servers/sql/postgresql/ext/pg_background.nix
index 5fb41ae83b87..22d020e5031e 100644
--- a/pkgs/servers/sql/postgresql/ext/pg_background.nix
+++ b/pkgs/servers/sql/postgresql/ext/pg_background.nix
@@ -8,13 +8,13 @@
 
 postgresqlBuildExtension (finalAttrs: {
   pname = "pg_background";
-  version = "2.0.2";
+  version = "2.0.3";
 
   src = fetchFromGitHub {
     owner = "vibhorkum";
     repo = "pg_background";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-7lQrNrWpgvW98MomZ0xu3PYf0dnMlvLP3W1e9l49cBI=";
+    hash = "sha256-ZYBHUN+/fYSiozuZNVMFUZiAZl3qP4LOEdxeGVA+rmg=";
   };
 
   buildInputs = postgresql.buildInputs;

From 2e6256bcacdf550323a33ac2104f0f39536143d7 Mon Sep 17 00:00:00 2001
From: KangaZero <samuelyongw@gmail.com>
Date: Mon, 7 Sep 2026 14:49:08 +0900
Subject: [PATCH 099/146] rustfetch: 0.2.0 -> 0.3.0

Added `buildInputs` to add needed package `libxcb` for linux platforms
Added `checkFlags` to skip test that requires os calls
Added `versionCheckHook`
---
 pkgs/by-name/ru/rustfetch/package.nix | 19 ++++++++++++++++---
 1 file changed, 16 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ru/rustfetch/package.nix b/pkgs/by-name/ru/rustfetch/package.nix
index a79134cb102e..797597906063 100644
--- a/pkgs/by-name/ru/rustfetch/package.nix
+++ b/pkgs/by-name/ru/rustfetch/package.nix
@@ -2,18 +2,31 @@
   lib,
   fetchFromGitHub,
   rustPlatform,
+  libxcb,
+  stdenv,
+  versionCheckHook,
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rustfetch";
-  version = "0.2.0";
+  version = "0.3.0";
 
   src = fetchFromGitHub {
     owner = "lemuray";
     repo = "rustfetch";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-iGcxDKl36kbEi+OiH4gB2+HxP37bpqAMZguIXDzq3Jw=";
+    hash = "sha256-7+25SYYpOwbJM3UofTjk8hAuDVQ33tUge+2k1oSRvvY=";
   };
-  cargoHash = "sha256-87wfFczmgCft4ke/RQKi54wvqFKGRJMtqhkwQgDCedg=";
+  cargoHash = "sha256-/D6y6h86V7qUfJqXW6XXTHAyiqwNJAfSQOLHxNfajv8=";
+
+  buildInputs = lib.optionals stdenv.hostPlatform.isLinux [ libxcb ];
+
+  checkFlags = [
+    # requires os calls which will error out to "Permission denied" in the sandbox
+    "--skip=test_no_pretty_name"
+  ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
 
   meta = {
     description = "CLI tool designed to fetch system information in the fastest and safest way possible";

From 7f5ee656c2d2abc89e61429b53bb459b5bb29bd3 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 07:37:55 +0000
Subject: [PATCH 100/146] python3Packages.homevolt: 0.5.0 -> 0.7.0

---
 pkgs/development/python-modules/homevolt/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/homevolt/default.nix b/pkgs/development/python-modules/homevolt/default.nix
index ca108dc42400..f11a3412fd49 100644
--- a/pkgs/development/python-modules/homevolt/default.nix
+++ b/pkgs/development/python-modules/homevolt/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "homevolt";
-  version = "0.5.0";
+  version = "0.7.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Danielhiversen";
     repo = "pyHomevolt";
     tag = finalAttrs.version;
-    hash = "sha256-Z+3JwACbdFVivWbhlxO73m1rjyGS+Vc/Y3QICqEY9O0=";
+    hash = "sha256-70as5Hi5/AR5o43/oRVIlW1f8P2pW6KpMSOlfGdWpfw=";
   };
 
   build-system = [ setuptools ];

From 220531eee4d953078ca78c25d648ae351162d800 Mon Sep 17 00:00:00 2001
From: marcg <marcgrec@tuta.com>
Date: Mon, 7 Sep 2026 10:48:26 +0300
Subject: [PATCH 101/146] python3Packages.raylib: rename from
 raylib-python-cffi

The project name (e.g. on PyPI) is raylib.
---
 .../{raylib-python-cffi => raylib}/default.nix              | 4 ++--
 .../{raylib-python-cffi => raylib}/passthru-tests.nix       | 6 +++---
 .../use-direct-pkg-config-name.patch                        | 0
 pkgs/top-level/python-aliases.nix                           | 1 +
 pkgs/top-level/python-packages.nix                          | 2 +-
 5 files changed, 7 insertions(+), 6 deletions(-)
 rename pkgs/development/python-modules/{raylib-python-cffi => raylib}/default.nix (92%)
 rename pkgs/development/python-modules/{raylib-python-cffi => raylib}/passthru-tests.nix (86%)
 rename pkgs/development/python-modules/{raylib-python-cffi => raylib}/use-direct-pkg-config-name.patch (100%)

diff --git a/pkgs/development/python-modules/raylib-python-cffi/default.nix b/pkgs/development/python-modules/raylib/default.nix
similarity index 92%
rename from pkgs/development/python-modules/raylib-python-cffi/default.nix
rename to pkgs/development/python-modules/raylib/default.nix
index 659109475bec..8ff9fd08e3d4 100644
--- a/pkgs/development/python-modules/raylib-python-cffi/default.nix
+++ b/pkgs/development/python-modules/raylib/default.nix
@@ -15,7 +15,7 @@
 }:
 
 buildPythonPackage (finalAttrs: {
-  pname = "raylib-python-cffi";
+  pname = "raylib";
   version = "6.0.1.0";
   pyproject = true;
 
@@ -51,7 +51,7 @@ buildPythonPackage (finalAttrs: {
 
   passthru.tests = import ./passthru-tests.nix {
     inherit writers;
-    raylib-python-cffi = finalAttrs.finalPackage;
+    raylib = finalAttrs.finalPackage;
   };
 
   meta = {
diff --git a/pkgs/development/python-modules/raylib-python-cffi/passthru-tests.nix b/pkgs/development/python-modules/raylib/passthru-tests.nix
similarity index 86%
rename from pkgs/development/python-modules/raylib-python-cffi/passthru-tests.nix
rename to pkgs/development/python-modules/raylib/passthru-tests.nix
index 20934ec45ad4..01a859e2f070 100644
--- a/pkgs/development/python-modules/raylib-python-cffi/passthru-tests.nix
+++ b/pkgs/development/python-modules/raylib/passthru-tests.nix
@@ -1,13 +1,13 @@
 {
-  raylib-python-cffi,
+  raylib,
   writers,
 }:
 let
-  src = raylib-python-cffi.src;
+  src = raylib.src;
   writeTest =
     name: path:
     writers.writePython3Bin name {
-      libraries = [ raylib-python-cffi ];
+      libraries = [ raylib ];
       doCheck = false;
     } (builtins.readFile (src + path));
 
diff --git a/pkgs/development/python-modules/raylib-python-cffi/use-direct-pkg-config-name.patch b/pkgs/development/python-modules/raylib/use-direct-pkg-config-name.patch
similarity index 100%
rename from pkgs/development/python-modules/raylib-python-cffi/use-direct-pkg-config-name.patch
rename to pkgs/development/python-modules/raylib/use-direct-pkg-config-name.patch
diff --git a/pkgs/top-level/python-aliases.nix b/pkgs/top-level/python-aliases.nix
index 5afbf7876efd..d50b7912c90e 100644
--- a/pkgs/top-level/python-aliases.nix
+++ b/pkgs/top-level/python-aliases.nix
@@ -651,6 +651,7 @@ mapAliases {
   radicale_infcloud = throw "'radicale_infcloud' has been renamed to/replaced by 'radicale-infcloud'"; # Converted to throw 2025-10-29
   radio_beam = throw "'radio_beam' has been renamed to/replaced by 'radio-beam'"; # Converted to throw 2025-10-29
   random-user-agent = throw "random-user-agent has been removed as it was abandoned upstream in 2018; use fake-useragent instead"; # Added 2025-10-17
+  raylib-python-cffi = raylib; # added 2026-09-07
   readme_renderer = throw "'readme_renderer' has been renamed to/replaced by 'readme-renderer'"; # Converted to throw 2025-10-29
   readthedocs-sphinx-ext = throw "'readthedocs-sphinx-ext' has been removed because it was archived upstream."; # added 2025-12-03
   recursivePthLoader = throw "'recursivePthLoader' has been renamed to/replaced by 'recursive-pth-loader'"; # Converted to throw 2025-10-29
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 28bc163dd195..5310ca819a90 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -17765,7 +17765,7 @@ self: super: with self; {
 
   ray = callPackage ../development/python-modules/ray { };
 
-  raylib-python-cffi = callPackage ../development/python-modules/raylib-python-cffi { };
+  raylib = callPackage ../development/python-modules/raylib { inherit (pkgs) raylib; };
 
   razdel = callPackage ../development/python-modules/razdel { };
 

From d9d761d7690a6cf771796f0a9914275b05c4013c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 09:00:11 +0000
Subject: [PATCH 102/146] 
 home-assistant-custom-lovelace-modules.swipe-navigation: 1.16.0 -> 1.16.1

---
 .../custom-lovelace-modules/swipe-navigation/package.nix    | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/servers/home-assistant/custom-lovelace-modules/swipe-navigation/package.nix b/pkgs/servers/home-assistant/custom-lovelace-modules/swipe-navigation/package.nix
index 7a823ec9bf6f..6d6892f6f639 100644
--- a/pkgs/servers/home-assistant/custom-lovelace-modules/swipe-navigation/package.nix
+++ b/pkgs/servers/home-assistant/custom-lovelace-modules/swipe-navigation/package.nix
@@ -6,16 +6,16 @@
 
 buildNpmPackage rec {
   pname = "swipe-navigation";
-  version = "1.16.0";
+  version = "1.16.1";
 
   src = fetchFromGitHub {
     owner = "zanna-37";
     repo = "hass-swipe-navigation";
     tag = "v${version}";
-    hash = "sha256-a2ZbMQgFi4bJPnZeSB60THFd46O/K4QERCmZQMjC0ZI=";
+    hash = "sha256-6EMpxiug6YNDjekqyXMIv12Eg4iW42rOR2InNGzGmQU=";
   };
 
-  npmDepsHash = "sha256-vQnYQ7iKSotbdresqXMNUJALMVPYxk0FtZxAhJTQ8pc=";
+  npmDepsHash = "sha256-cySnkW+UOFSbQtsvx4av7UqVxHH0AEb0LzbFQOIvBME=";
 
   buildPhase = ''
     runHook preBuild

From e7d725c7bb3e6f42c578d5006cf10bc330352c35 Mon Sep 17 00:00:00 2001
From: Thomas <thomas.erents@gmail.com>
Date: Mon, 7 Sep 2026 12:21:33 +0200
Subject: [PATCH 103/146] openvpn3: use finalAttrs

---
 pkgs/by-name/op/openvpn3/package.nix | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/pkgs/by-name/op/openvpn3/package.nix b/pkgs/by-name/op/openvpn3/package.nix
index 6fa76e6e2ff3..e7be7c41893e 100644
--- a/pkgs/by-name/op/openvpn3/package.nix
+++ b/pkgs/by-name/op/openvpn3/package.nix
@@ -35,14 +35,14 @@ let
     hash = "sha256-ZFvxwzWiRgi0s08W7RC5I3u7ATFIhmj7hkVCAiOeCGw=";
   };
 in
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "openvpn3";
   version = "27.1";
 
   src = fetchFromGitHub {
     owner = "OpenVPN";
     repo = "openvpn3-linux";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-Egt6lVcvlmxnABw4v0cdROQzVdkA3DgOGGCSgl+QFdM=";
     # `openvpn3-core` is a submodule.
     # TODO: make it into a separate package
@@ -63,7 +63,7 @@ stdenv.mkDerivation rec {
 
   postPatch = ''
     echo '#define OPENVPN_VERSION "3.git:unknown:unknown"
-    #define PACKAGE_GUIVERSION "v${builtins.replaceStrings [ "_" ] [ ":" ] version}"
+    #define PACKAGE_GUIVERSION "v${builtins.replaceStrings [ "_" ] [ ":" ] finalAttrs.version}"
     #define PACKAGE_NAME "openvpn3-linux"
     ' > ./src/build-version.h
 
@@ -134,7 +134,7 @@ stdenv.mkDerivation rec {
   '';
   postFixup = ''
     wrapPythonPrograms
-    wrapPythonProgramsIn "$out/libexec/openvpn3-linux" "$out ${pythonPath}"
+    wrapPythonProgramsIn "$out/libexec/openvpn3-linux" "$out ${finalAttrs.pythonPath}"
   '';
 
   env.NIX_LDFLAGS = "-lpthread";
@@ -145,10 +145,10 @@ stdenv.mkDerivation rec {
     description = "OpenVPN 3 Linux client";
     license = lib.licenses.agpl3Plus;
     homepage = "https://github.com/OpenVPN/openvpn3-linux/";
-    changelog = "https://github.com/OpenVPN/openvpn3-linux/releases/tag/v${version}";
+    changelog = "https://github.com/OpenVPN/openvpn3-linux/releases/tag/v${finalAttrs.version}";
     maintainers = with lib.maintainers; [
       progrm_jarvis
     ];
     platforms = lib.platforms.linux;
   };
-}
+})

From 6e4a60a9d0ae035af4c3a50fc1d872a80a7069a5 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 10:23:46 +0000
Subject: [PATCH 104/146] prometheus-redis-exporter: 1.90.0 -> 1.91.0

---
 pkgs/by-name/pr/prometheus-redis-exporter/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/pr/prometheus-redis-exporter/package.nix b/pkgs/by-name/pr/prometheus-redis-exporter/package.nix
index 9cc239a737f0..c837af8b33d6 100644
--- a/pkgs/by-name/pr/prometheus-redis-exporter/package.nix
+++ b/pkgs/by-name/pr/prometheus-redis-exporter/package.nix
@@ -12,7 +12,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "redis_exporter";
-  version = "1.90.0";
+  version = "1.91.0";
 
   __structuredAttrs = true;
 
@@ -20,7 +20,7 @@ buildGoModule (finalAttrs: {
     owner = "oliver006";
     repo = "redis_exporter";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-IZgFd6hlWVsUAx2sQsB8lTp7aZEGGmJ8BequT/TsZ+w=";
+    hash = "sha256-BECFx4sHL9zEEk5wKSZ9U1IEK6l2C9M8zdNrVJwc8LY=";
   };
 
   vendorHash = "sha256-+g1HSv+AxXsNzVr6QHpm2EJnRR80rPCtBnPgwq6aq5I=";

From 93275c3f32d203112c735d0a653b8549840bd0e8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20van=20Br=C3=BCgge?= <supermanitu@gmail.com>
Date: Mon, 7 Sep 2026 13:46:26 +0200
Subject: [PATCH 105/146] stump: Add jvanbruegge as maintainer

---
 pkgs/by-name/st/stump/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/st/stump/package.nix b/pkgs/by-name/st/stump/package.nix
index e3dc64d4d1a1..eff201dbb3a3 100644
--- a/pkgs/by-name/st/stump/package.nix
+++ b/pkgs/by-name/st/stump/package.nix
@@ -118,5 +118,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
     license = lib.licenses.mit;
     platforms = [ "x86_64-linux" ];
     mainProgram = "stump_server";
+    maintainers = with lib.maintainers; [ jvanbruegge ];
   };
 })

From 8c812ca2c66111152292e1c33424e74e7e797170 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Janne=20He=C3=9F?= <janne@hess.ooo>
Date: Mon, 7 Sep 2026 14:56:52 +0200
Subject: [PATCH 106/146] bookorbit: 2.8.1 -> 2.9.0

---
 pkgs/by-name/bo/bookorbit/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/bo/bookorbit/package.nix b/pkgs/by-name/bo/bookorbit/package.nix
index e58c655518b1..51be3ed823b4 100644
--- a/pkgs/by-name/bo/bookorbit/package.nix
+++ b/pkgs/by-name/bo/bookorbit/package.nix
@@ -16,7 +16,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "bookorbit";
-  version = "2.8.1";
+  version = "2.9.0";
   __structuredAttrs = true;
   strictDeps = true;
 
@@ -24,7 +24,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "bookorbit";
     repo = "bookorbit";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Un30txjsp+sdEPX9DTQ4f0ht7klDhbDptizUzQMP5AA=";
+    hash = "sha256-Dj/H7HWzxscl+uSMGDRgAwLeHDzcZEOM0RsiWrPJjUs=";
   };
 
   pnpmWorkspaces = [
@@ -41,7 +41,7 @@ stdenv.mkDerivation (finalAttrs: {
       ;
     inherit pnpm;
     fetcherVersion = 4;
-    hash = "sha256-y/cdgAjv8ZWlF4IikKb0pPqrlakMfTo9nY1Bb9AnxlM=";
+    hash = "sha256-NVI9R6n9HIE2VufTcqe4cjZbTK30R/i6dZy39TGH8qs=";
   };
 
   nativeBuildInputs = [

From 0ff529a1df644c578db31c089ff314dc09083f01 Mon Sep 17 00:00:00 2001
From: Kenichi Kamiya <kachick1@gmail.com>
Date: Tue, 8 Sep 2026 00:07:19 +0900
Subject: [PATCH 107/146] typescript_7: remove $out/bin/tsgo

The tsgo symlink was kept for backward compatibility when the package was
named typescript-go.
Since it was renamed to typescript_7, we can remove this symlink.

Follow-up:
* 37cee940fb6189f93930800d9cddfe0ef75c72f8
* fb0d03977c62a27dd4259ff55e7ab66045094c43
---
 pkgs/by-name/ty/typescript_7/package.nix | 1 -
 1 file changed, 1 deletion(-)

diff --git a/pkgs/by-name/ty/typescript_7/package.nix b/pkgs/by-name/ty/typescript_7/package.nix
index 40e88778c44d..00bdbc982e6d 100644
--- a/pkgs/by-name/ty/typescript_7/package.nix
+++ b/pkgs/by-name/ty/typescript_7/package.nix
@@ -58,7 +58,6 @@ buildGoModule (finalAttrs: {
     mv "$out/bin/tsgo" "$lib_dir/tsc"
 
     ln -s "$lib_dir/tsc" "$out/bin/tsc"
-    ln -s "$lib_dir/tsc" "$out/bin/tsgo"
   '';
 
   nativeInstallCheckInputs = [

From 59db99299be4c6551a2e3584dbf84960237370f1 Mon Sep 17 00:00:00 2001
From: Michael Mulqueen <michael@mulqueen.me.uk>
Date: Mon, 7 Sep 2026 15:31:49 +0000
Subject: [PATCH 108/146] maintainers: add mmulqueen

---
 maintainers/maintainer-list.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 18bbe6ca8151..2a64a282a6c5 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -19342,6 +19342,12 @@
     githubId = 708570;
     name = "Manuel Mendez";
   };
+  mmulqueen = {
+    email = "michael@mulqueen.me.uk";
+    github = "mmulqueen";
+    githubId = 6616321;
+    name = "Michael Mulqueen";
+  };
   mmusnjak = {
     email = "marko.musnjak@gmail.com";
     github = "mmusnjak";

From cd3ced13bd393309800adaf8cb45b729b7fbfbd4 Mon Sep 17 00:00:00 2001
From: Michael Mulqueen <michael@mulqueen.me.uk>
Date: Mon, 7 Sep 2026 15:32:45 +0000
Subject: [PATCH 109/146] python3Packages.pystrich: init at 0.20

---
 .../python-modules/pystrich/default.nix       | 65 +++++++++++++++++++
 pkgs/top-level/python-packages.nix            |  4 ++
 2 files changed, 69 insertions(+)
 create mode 100644 pkgs/development/python-modules/pystrich/default.nix

diff --git a/pkgs/development/python-modules/pystrich/default.nix b/pkgs/development/python-modules/pystrich/default.nix
new file mode 100644
index 000000000000..5f8b74cd16db
--- /dev/null
+++ b/pkgs/development/python-modules/pystrich/default.nix
@@ -0,0 +1,65 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  hatchling,
+  pillow,
+  typing-extensions,
+  pytestCheckHook,
+  ezdxf,
+  fonttools,
+  hypothesis,
+  zxing-cpp,
+  dmtx-utils,
+  librsvg,
+  ghostscript,
+  nix-update-script,
+}:
+
+buildPythonPackage rec {
+  pname = "pystrich";
+  version = "0.20";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "mmulqueen";
+    repo = "pyStrich";
+    tag = version;
+    hash = "sha256-08IKFJfcK0I+phUejUY7FHh2a7efR+UKrj+tsKEwSJ4=";
+  };
+
+  build-system = [ hatchling ];
+
+  dependencies = [
+    pillow
+    typing-extensions
+  ];
+
+  optional-dependencies = {
+    png = [ pillow ];
+  };
+
+  nativeCheckInputs = [
+    pytestCheckHook
+    ezdxf
+    fonttools
+    hypothesis
+    zxing-cpp
+    dmtx-utils
+    librsvg
+    ghostscript
+  ];
+
+  pythonImportsCheck = [ "pystrich" ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Pure-Python module to generate 1D and 2D barcodes";
+    homepage = "https://github.com/mmulqueen/pyStrich";
+    changelog = "https://github.com/mmulqueen/pyStrich/releases/tag/${version}";
+    license = lib.licenses.asl20;
+    mainProgram = "pystrich";
+    maintainers = with lib.maintainers; [ mmulqueen ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index ac53973c897e..fbc62c22c01a 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -16284,6 +16284,10 @@ self: super: with self; {
 
   pystray = callPackage ../development/python-modules/pystray { };
 
+  pystrich = callPackage ../development/python-modules/pystrich {
+    inherit (pkgs) ghostscript;
+  };
+
   pysubs2 = callPackage ../development/python-modules/pysubs2 { };
 
   pysuezv2 = callPackage ../development/python-modules/pysuezv2 { };

From b80f7bf81d677dcbb35b4e0b2201225231c3acac Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 15:52:09 +0000
Subject: [PATCH 110/146] snyk: 1.1307.0 -> 1.1307.1

---
 pkgs/by-name/sn/snyk/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/sn/snyk/package.nix b/pkgs/by-name/sn/snyk/package.nix
index 76a10f987737..ea69348dc705 100644
--- a/pkgs/by-name/sn/snyk/package.nix
+++ b/pkgs/by-name/sn/snyk/package.nix
@@ -10,13 +10,13 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "snyk";
-  version = "1.1307.0";
+  version = "1.1307.1";
 
   src = fetchFromGitHub {
     owner = "snyk";
     repo = "cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-5Y9uMGxjP26q0zNIqp7Piauy0r5X8DthnYgL+F6eZrM=";
+    hash = "sha256-VhbtP1aHIkYaPbptkJMT/cMAhqFeAwTwSZioIAUbO8k=";
 
     # TODO: Remove once https://github.com/snyk/cli/pull/6924 is released.
     postFetch = ''
@@ -26,7 +26,7 @@ buildNpmPackage (finalAttrs: {
 
   npmDepsFetcherVersion = 2;
 
-  npmDepsHash = "sha256-xyLSYNXdZHvVXKMS87DKeCde1/XXZDNL3bnsiExXqng=";
+  npmDepsHash = "sha256-mTP5Tyi41BhSaDjCallH6r+PAFd/UCqNLxUkk2DzcLE=";
 
   nodejs = nodejs_24;
 

From 0d7d82b7c93e4f89b8cbbcddc799c7af2360457f Mon Sep 17 00:00:00 2001
From: Kenichi Kamiya <kachick1@gmail.com>
Date: Tue, 8 Sep 2026 01:02:29 +0900
Subject: [PATCH 111/146] typescript-go: throw error for symlink deletion

Removing a symlink is a critical issue rather than a warning,
so throw an error to notify the user.
---
 pkgs/top-level/aliases.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 779a47b910db..417bbf67e2d8 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -2554,7 +2554,7 @@ mapAliases {
   trust-dns = throw "'trust-dns' has been renamed to/replaced by 'hickory-dns'"; # Converted to throw 2025-10-27
   tvbrowser-bin = throw "'tvbrowser-bin' has been renamed to/replaced by 'tvbrowser'"; # Converted to throw 2025-10-27
   twitterBootstrap = warnAlias "'twitterBootstrap' has been renamed to 'twitter-bootstrap'"; # Added 2026-02-12
-  typescript-go = lib.warnOnInstantiate "'typescript-go' has been renamed to 'typescript'" typescript; # Added 2026-09-02
+  typescript-go = throw "'typescript-go' has been renamed to/replaced by 'typescript'"; # Added 2026-09-08
   typodermic-free-fonts = throw "'typodermic-free-fonts' has been removed as it is unmaintained in nixpkgs, and the src is prone to breakage."; # Added 2026-05-07
   typodermic-public-domain = throw "'typodermic-public-domain' has been removed as it is unmaintained in nixpkgs, and the src is prone to breakage."; # Added 2026-05-07
   typst-fmt = throw "'typst-fmt' has been renamed to/replaced by 'typstfmt'"; # Converted to throw 2025-10-27

From 3e8c05e17acaadf8df2fa57b22394ac5c20b48ac Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 16:16:45 +0000
Subject: [PATCH 112/146] terraform-providers.datadog_datadog: 4.19.0 -> 4.20.0

---
 .../networking/cluster/terraform-providers/providers.json   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index af25b5adbe5f..5915c31c5fd6 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -292,13 +292,13 @@
     "vendorHash": "sha256-3o6YRDrq4rQhNAFyqiGJrAoxuAykWw85OExRGSE3kGI="
   },
   "datadog_datadog": {
-    "hash": "sha256-ATKQBtgI4yfjZo09iMPlH7g14xc6bI9ebP64GTtNZwk=",
+    "hash": "sha256-Sq3gP01DrTm41fLTZvavNTNhMy7AfMcbxe+ac8omJIQ=",
     "homepage": "https://registry.terraform.io/providers/DataDog/datadog",
     "owner": "DataDog",
     "repo": "terraform-provider-datadog",
-    "rev": "v4.19.0",
+    "rev": "v4.20.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-Uy798AsTpZNtaggIxUlf3WNIFTmvigtPp0yWygcyzJY="
+    "vendorHash": "sha256-PoM4C03Q8bAz1hqasx0SWYWEVW7dS7tCcI+tLE2MHLE="
   },
   "datadrivers_nexus": {
     "hash": "sha256-t9hpZ4COmMPvs4TgcZLeuOA23oD5vvHw8UVK7SpzI0Y=",

From 64cac736bada9e4369f3374dda1ec97546bf9be3 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 16:18:06 +0000
Subject: [PATCH 113/146] terraform-providers.hashicorp_aws: 6.62.0 -> 6.63.0

---
 .../networking/cluster/terraform-providers/providers.json   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index af25b5adbe5f..c3bba82c2e0f 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -517,13 +517,13 @@
     "vendorHash": "sha256-ikBqIxD5aTOcwNHCMN6EaOwSHCAP5n/SULuqQXPLpOc="
   },
   "hashicorp_aws": {
-    "hash": "sha256-INQXP7BRW+QbcxYd6QmIKLzilmXlT2ntVMONcpk5Q4g=",
+    "hash": "sha256-qSGvtJqiViBdBZD6gMZSaUXbZNZmCBBb1kkKUjCK0YM=",
     "homepage": "https://registry.terraform.io/providers/hashicorp/aws",
     "owner": "hashicorp",
     "repo": "terraform-provider-aws",
-    "rev": "v6.62.0",
+    "rev": "v6.63.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-e6ILWC7E2S9u+evH9OmS1hyn6WmYn9r0ch/zfJJ7xrg="
+    "vendorHash": "sha256-lrcDMPenGnTgKnrdL9oCk3Pg/WObKYqKxbLXqjWR7U4="
   },
   "hashicorp_awscc": {
     "hash": "sha256-cVpZA8XK3d6RDjdo8KMbQ/J540ZRzUb79S2wq/Vzo6Y=",

From b161b3d9742f5641278be0f77de6ecde1fe1340a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 16:29:01 +0000
Subject: [PATCH 114/146] kubectl-gadget: 0.55.1 -> 0.56.0

---
 pkgs/by-name/ku/kubectl-gadget/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ku/kubectl-gadget/package.nix b/pkgs/by-name/ku/kubectl-gadget/package.nix
index 74182cc03d4c..b4245558c2a8 100644
--- a/pkgs/by-name/ku/kubectl-gadget/package.nix
+++ b/pkgs/by-name/ku/kubectl-gadget/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "kubectl-gadget";
-  version = "0.55.1";
+  version = "0.56.0";
 
   src = fetchFromGitHub {
     owner = "inspektor-gadget";
     repo = "inspektor-gadget";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-trpvsOefcmajxmVTPGLDKjS7To5psgIBGcQ/XxlFeHo=";
+    hash = "sha256-HyQpkaa6MfBi1JJarXRSTpYUjx/golGl1lIStHAU3YU=";
   };
 
-  vendorHash = "sha256-AJmtOmFV06WYtHD5e/3TuzxsRVypoIVIiTxgesNtCKk=";
+  vendorHash = "sha256-mXHoMsJMwNwsnpoLDc7OLiOUZhlbcslySkyJRAC9hb8=";
 
   env.CGO_ENABLED = 0;
 

From fe55c67b87cef8e3e3089c59b79c7b07cfbb7484 Mon Sep 17 00:00:00 2001
From: Kenichi Kamiya <kachick1@gmail.com>
Date: Tue, 8 Sep 2026 01:48:54 +0900
Subject: [PATCH 115/146] mediaharbor: set meta.platforms

The installPhase uses x86_64-unknown-linux-gnu,
so this package cannot build on other platforms.
---
 pkgs/by-name/me/mediaharbor/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/me/mediaharbor/package.nix b/pkgs/by-name/me/mediaharbor/package.nix
index 00aca70d202a..a1f54f646e5b 100644
--- a/pkgs/by-name/me/mediaharbor/package.nix
+++ b/pkgs/by-name/me/mediaharbor/package.nix
@@ -103,5 +103,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
     license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [ idkdontaskm3 ];
     mainProgram = "mediaharbor";
+    platforms = [
+      "x86_64-linux"
+    ];
   };
 })

From de0f2fff2565f704fb25c72a105b92db74fb04ea Mon Sep 17 00:00:00 2001
From: KristijanZic <kristijan.zic@10x.engineering>
Date: Mon, 7 Sep 2026 18:58:54 +0200
Subject: [PATCH 116/146] vimPlugins.boolean-toggle-nvim: init at 0.5.0-1

https://github.com/DrKJeff16/boolean-toggle.nvim
---
 .../applications/editors/vim/plugins/generated.nix | 14 ++++++++++++++
 .../editors/vim/plugins/vim-plugin-names           |  1 +
 2 files changed, 15 insertions(+)

diff --git a/pkgs/applications/editors/vim/plugins/generated.nix b/pkgs/applications/editors/vim/plugins/generated.nix
index 061506e170f6..9f5b9d6a7f91 100644
--- a/pkgs/applications/editors/vim/plugins/generated.nix
+++ b/pkgs/applications/editors/vim/plugins/generated.nix
@@ -2155,6 +2155,20 @@ final: prev: {
     meta.hydraPlatforms = [ ];
   };
 
+  boolean-toggle-nvim = buildVimPlugin {
+    pname = "boolean-toggle.nvim";
+    version = "0.5.0-1";
+    src = fetchFromGitHub {
+      owner = "DrKJeff16";
+      repo = "boolean-toggle.nvim";
+      tag = "v0.5.0-1";
+      hash = "sha256-93ppL2JP2K+lfeCtJG0R8YW6cLk8JJrPa5RAGKnzOlE=";
+    };
+    meta.homepage = "https://github.com/DrKJeff16/boolean-toggle.nvim/";
+    meta.license = getLicenseFromSpdxId "GPL-2.0-only";
+    meta.hydraPlatforms = [ ];
+  };
+
   bracey-vim = buildVimPlugin {
     pname = "bracey.vim";
     version = "0-unstable-2021-08-20";
diff --git a/pkgs/applications/editors/vim/plugins/vim-plugin-names b/pkgs/applications/editors/vim/plugins/vim-plugin-names
index 92f1696b4f7d..dc639e73c13f 100644
--- a/pkgs/applications/editors/vim/plugins/vim-plugin-names
+++ b/pkgs/applications/editors/vim/plugins/vim-plugin-names
@@ -152,6 +152,7 @@ https://github.com/HampusHauffman/block.nvim/,,
 https://github.com/uloco/bluloco.nvim/,,
 https://github.com/rockerBOO/boo-colorscheme-nvim/,,
 https://github.com/nat-418/boole.nvim/,,
+https://github.com/DrKJeff16/boolean-toggle.nvim/,,
 https://github.com/turbio/bracey.vim/,,
 https://github.com/fruit-in/brainfuck-vim/,,
 https://github.com/famiu/bufdelete.nvim/,,

From f68355b7889c35ac3b7c5e01edd3d21c073f166c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 17:22:53 +0000
Subject: [PATCH 117/146] e1s: 1.0.53 -> 2.0.0

---
 pkgs/by-name/e1/e1s/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/e1/e1s/package.nix b/pkgs/by-name/e1/e1s/package.nix
index e8a3c4ac3744..6cefad52e851 100644
--- a/pkgs/by-name/e1/e1s/package.nix
+++ b/pkgs/by-name/e1/e1s/package.nix
@@ -5,16 +5,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "e1s";
-  version = "1.0.53";
+  version = "2.0.0";
 
   src = fetchFromGitHub {
     owner = "keidarcy";
     repo = "e1s";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Cy/aZVO6xM1oCeyT6x1O+otbUZ5lS90fl3iZzkf02QM=";
+    hash = "sha256-bOG6txoreiP/buYO3rvcxhL1yAxlECkbwf9FqvWLz9k=";
   };
 
-  vendorHash = "sha256-8z2RVT2W8TLXdZBAmi/2fu63pijVgzqSvF9xpGexlQ0=";
+  vendorHash = "sha256-vVUuoAsoxVKDGxLOQBjOx56IiPWBbtYBJbJNq+kPV7A=";
 
   meta = {
     description = "Easily Manage AWS ECS Resources in Terminal";

From 354cf73bf7b6b0806eaf1e52cbddddf03bd854fa Mon Sep 17 00:00:00 2001
From: Defelo <mail@defelo.de>
Date: Mon, 7 Sep 2026 16:14:29 +0000
Subject: [PATCH 118/146] radicle-ci-broker: 0.31.0 -> 0.32.1

Changelog: https://radicle.network/nodes/seed.radicle.dev/rad:zwTxygwuz5LDGBq255RA2CbNGrz8/tree/NEWS.md
---
 pkgs/by-name/ra/radicle-ci-broker/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ra/radicle-ci-broker/package.nix b/pkgs/by-name/ra/radicle-ci-broker/package.nix
index f9989d01d7f4..cfde3d844912 100644
--- a/pkgs/by-name/ra/radicle-ci-broker/package.nix
+++ b/pkgs/by-name/ra/radicle-ci-broker/package.nix
@@ -14,14 +14,14 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "radicle-ci-broker";
-  version = "0.31.0";
+  version = "0.32.1";
 
   src = fetchFromRadicle {
     seed = "seed.radicle.dev";
     repo = "zwTxygwuz5LDGBq255RA2CbNGrz8";
     node = "z6MkgEMYod7Hxfy9qCvDv5hYHkZ4ciWmLFgfvm3Wn1b2w2FV";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-yY2ke4JBAn0ZTaZ7HV8GCPF5Yqj1j+7GvjFXQQVM3ME=";
+    hash = "sha256-+NPlpDGrHjCB1ny81wbaM3f/b3wLFaH5ldINeTuV5hI=";
     leaveDotGit = true;
     postFetch = ''
       git -C $out rev-parse --short HEAD > $out/.git_head
@@ -29,7 +29,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     '';
   };
 
-  cargoHash = "sha256-+XB2+k18gWEO7tpsQK+ua133PcZ0mxV+txle7VutXIk=";
+  cargoHash = "sha256-o0s6za+IxeJQkwHKuMPJk+uDcMp7VRq+mMqpX3bcWVY=";
 
   postPatch = ''
     substituteInPlace build.rs \
@@ -41,7 +41,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   '';
 
   preCheck = ''
-    ln -s "$PWD/target/${stdenv.hostPlatform.rust.rustcTarget}/$cargoBuildType" target/debug
+    export SUBPLOT_DIR="$PWD/target/${stdenv.hostPlatform.rust.rustcTarget}/$cargoBuildType"
 
     rad auth --alias alice --stdin </dev/null
   '';

From 7a3e7fd763268561e99cb7e5eb9533b55b817ea7 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 17:45:15 +0000
Subject: [PATCH 119/146] lux-cli: 0.42.1 -> 0.43.5

---
 pkgs/by-name/lu/lux-cli/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/lu/lux-cli/package.nix b/pkgs/by-name/lu/lux-cli/package.nix
index 6cb7f6bb20e9..ea20ea19d394 100644
--- a/pkgs/by-name/lu/lux-cli/package.nix
+++ b/pkgs/by-name/lu/lux-cli/package.nix
@@ -19,18 +19,18 @@
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "lux-cli";
 
-  version = "0.42.1";
+  version = "0.43.5";
 
   src = fetchFromGitHub {
     owner = "lumen-oss";
     repo = "lux";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-wjEci3i1auW76bssZ97IwY4AMG+wyvik5ZC/IMkXcGg=";
+    hash = "sha256-Uo180nB7/7lcYeaOCcOODtWJaqf4eQeMPKHN2OIVP70=";
   };
 
   buildAndTestSubdir = "lux-cli";
 
-  cargoHash = "sha256-EquC8//qIAY3qFZ11jxvJFlSXARLSFWGnLlxj4k8t5o=";
+  cargoHash = "sha256-fQoKFzMhvwlEXLmJQGiarPp2gtAJjodjQK7DjnY7reM=";
 
   nativeInstallCheckInputs = [
     versionCheckHook

From 008162aeecceac8834d8824272acdf23a81551d6 Mon Sep 17 00:00:00 2001
From: Kenichi Kamiya <kachick1@gmail.com>
Date: Tue, 8 Sep 2026 02:53:08 +0900
Subject: [PATCH 120/146] mediaharbor: drop unused typescript_7 from
 nativeBuildInputs

The `tsc` command runs through `npm run build`:
https://github.com/MediaHarbor/mediaharbor/blob/v2.1.0/package.json#L7
---
 pkgs/by-name/me/mediaharbor/package.nix | 2 --
 1 file changed, 2 deletions(-)

diff --git a/pkgs/by-name/me/mediaharbor/package.nix b/pkgs/by-name/me/mediaharbor/package.nix
index 00aca70d202a..2e02f05de423 100644
--- a/pkgs/by-name/me/mediaharbor/package.nix
+++ b/pkgs/by-name/me/mediaharbor/package.nix
@@ -20,7 +20,6 @@
   pango,
   pkg-config,
   rustPlatform,
-  typescript_7,
   webkitgtk_4_1,
   wrapGAppsHook4,
   zlib,
@@ -59,7 +58,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
     nodejs
     npmHooks.npmConfigHook
     pkg-config
-    typescript_7
     wrapGAppsHook4
   ];
 

From 93e56317a2928cfa5f9e2dcb00666297e66c34b5 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 18:27:19 +0000
Subject: [PATCH 121/146] terraform-providers.aminueza_minio: 3.41.0 -> 3.41.1

---
 .../networking/cluster/terraform-providers/providers.json   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index af25b5adbe5f..76d5d1153c46 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -54,13 +54,13 @@
     "vendorHash": "sha256-bJcVf4Yj70VwKn0p6RN+/dc5J+K6xFJcifVei9dK2bA="
   },
   "aminueza_minio": {
-    "hash": "sha256-2NbI/ANAuCogB4H31N2k5dPpg8jqRULFdWD0+NxQD5c=",
+    "hash": "sha256-pw8QgjdU0c4w6ZUJLCy3zTEk0UTML1Mymh+UsmBAdrQ=",
     "homepage": "https://registry.terraform.io/providers/aminueza/minio",
     "owner": "aminueza",
     "repo": "terraform-provider-minio",
-    "rev": "v3.41.0",
+    "rev": "v3.41.1",
     "spdx": "AGPL-3.0",
-    "vendorHash": "sha256-NplukDVIzE8OUBOUdi0NTEPYBIGTwIaXxd+j5FdJjf8="
+    "vendorHash": "sha256-V9yH/dGXZJ85XVQAksL4QCRbhS9yrXy2tY8Jr+kKQdk="
   },
   "archessmn_powerdns": {
     "hash": "sha256-1bjQFu3k0ERBga94pQ8HZjbfu3qlxnMQLjSkDU6Vp/I=",

From 52d1ba7218c1b05bf00ba593d6d69287bbdd140d Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 18:28:38 +0000
Subject: [PATCH 122/146] python3Packages.google-cloud-pubsub: 2.39.2 -> 2.40.0

---
 .../python-modules/google-cloud-pubsub/default.nix            | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/google-cloud-pubsub/default.nix b/pkgs/development/python-modules/google-cloud-pubsub/default.nix
index 1098fe1b78e1..250981eee590 100644
--- a/pkgs/development/python-modules/google-cloud-pubsub/default.nix
+++ b/pkgs/development/python-modules/google-cloud-pubsub/default.nix
@@ -20,13 +20,13 @@
 
 buildPythonPackage rec {
   pname = "google-cloud-pubsub";
-  version = "2.39.2";
+  version = "2.40.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "google_cloud_pubsub";
     inherit version;
-    hash = "sha256-k0o6t0lqbaCc2X2Ga+8+RwkukEaIpm9gdQiVp0hL1YU=";
+    hash = "sha256-/n1+t291P2rrzdovTf9TZ0jRmZFH9k2VWlVPVyq7FYU=";
   };
 
   build-system = [ setuptools ];

From 685a484d03b465d4c67bd32f152517bad6c6f42b Mon Sep 17 00:00:00 2001
From: John Rinehart <johnrichardrinehart@gmail.com>
Date: Mon, 7 Sep 2026 07:42:20 -0400
Subject: [PATCH 123/146] audacity: 3.7.9 -> 4.0.0

Make Audacity 4 the default, retain Audacity 3 as audacity_3, and provide audacity_4 as an alias.

Use the official offline source archive and system libraries. Disable WebKit in wxWidgets, enable strict dependency checking, and declare Expat explicitly.

Build for the configured Darwin architecture and minimum macOS version. Fetch commit-pinned upstream fixes for wxWidgets framework linking and deployment target overrides.

Assisted-by: OpenAI Codex / GPT-5.6-sol

Assisted-by: OpenAI Codex / GPT-6-astra
---
 .../audacity/audacity-deployment-target.patch |  20 ++
 .../audacity/macdeployqt-extra-options.patch  |  25 ++
 .../muse-deps-wxwidgets-frameworks.patch      |  13 +
 .../muse-framework-deployment-target.patch    |  21 ++
 pkgs/by-name/au/audacity/package.nix          | 274 ++++++++----------
 pkgs/by-name/au/audacity_3/package.nix        | 221 ++++++++++++++
 .../{audacity => audacity_3}/rapidjson.patch  |   0
 pkgs/top-level/aliases.nix                    |   1 +
 8 files changed, 427 insertions(+), 148 deletions(-)
 create mode 100644 pkgs/by-name/au/audacity/audacity-deployment-target.patch
 create mode 100644 pkgs/by-name/au/audacity/macdeployqt-extra-options.patch
 create mode 100644 pkgs/by-name/au/audacity/muse-deps-wxwidgets-frameworks.patch
 create mode 100644 pkgs/by-name/au/audacity/muse-framework-deployment-target.patch
 create mode 100644 pkgs/by-name/au/audacity_3/package.nix
 rename pkgs/by-name/au/{audacity => audacity_3}/rapidjson.patch (100%)

diff --git a/pkgs/by-name/au/audacity/audacity-deployment-target.patch b/pkgs/by-name/au/audacity/audacity-deployment-target.patch
new file mode 100644
index 000000000000..5a95fd6f86b6
--- /dev/null
+++ b/pkgs/by-name/au/audacity/audacity-deployment-target.patch
@@ -0,0 +1,20 @@
+diff --git a/buildscripts/cmake/SetupBuildEnvironment.cmake b/buildscripts/cmake/SetupBuildEnvironment.cmake
+index d45a7728590..c4c77d48198 100644
+--- a/buildscripts/cmake/SetupBuildEnvironment.cmake
++++ b/buildscripts/cmake/SetupBuildEnvironment.cmake
+@@ -159,7 +159,13 @@
+         endif()
+     endif() #MUE_COMPILE_QT5_COMPAT
+ 
+-    set(MACOSX_DEPLOYMENT_TARGET 10.15)
+-    set(CMAKE_OSX_DEPLOYMENT_TARGET 10.15)
++    if (NOT CMAKE_OSX_DEPLOYMENT_TARGET)
++        if (NOT "$ENV{MACOSX_DEPLOYMENT_TARGET}" STREQUAL "")
++            set(CMAKE_OSX_DEPLOYMENT_TARGET "$ENV{MACOSX_DEPLOYMENT_TARGET}")
++        else()
++            set(CMAKE_OSX_DEPLOYMENT_TARGET 10.15)
++        endif()
++    endif()
++    set(MACOSX_DEPLOYMENT_TARGET "${CMAKE_OSX_DEPLOYMENT_TARGET}")
+ endif(OS_IS_MAC)
+ 
diff --git a/pkgs/by-name/au/audacity/macdeployqt-extra-options.patch b/pkgs/by-name/au/audacity/macdeployqt-extra-options.patch
new file mode 100644
index 000000000000..1bc7672fc481
--- /dev/null
+++ b/pkgs/by-name/au/audacity/macdeployqt-extra-options.patch
@@ -0,0 +1,25 @@
+diff --git a/CMakeLists.txt b/CMakeLists.txt
+index 17e3e15e4de..49d869a6777 100644
+--- a/CMakeLists.txt
++++ b/CMakeLists.txt
+@@ -62,6 +62,8 @@
+ 
+ set(AU4_REVISION "" CACHE STRING "Build revision")
+ 
++set(AU4_MACDEPLOYQT_EXTRA_OPTIONS "" CACHE STRING "Semicolon-separated extra arguments for macdeployqt")
++
+ # Modules (alphabetical order please)
+ option(AU_BUILD_APPSHELL_MODULE "Build appshell module" ON)
+ option(AU_BUILD_APPSHELL_TESTS "Build appshell tests" ${MUSE_ENABLE_UNIT_TESTS})
+diff --git a/src/app/CMakeLists.txt b/src/app/CMakeLists.txt
+index a653a0b4cda..1ee5a5b31eb 100644
+--- a/src/app/CMakeLists.txt
++++ b/src/app/CMakeLists.txt
+@@ -418,6 +418,7 @@
+         DEPLOY_TOOL_OPTIONS
+             -qmldir=${PROJECT_SOURCE_DIR}/src
+             -qmldir=${PROJECT_SOURCE_DIR}/muse/framework
++            ${AU4_MACDEPLOYQT_EXTRA_OPTIONS}
+     )
+     install(SCRIPT ${deploy_script})
+ 
diff --git a/pkgs/by-name/au/audacity/muse-deps-wxwidgets-frameworks.patch b/pkgs/by-name/au/audacity/muse-deps-wxwidgets-frameworks.patch
new file mode 100644
index 000000000000..c4bd00ce8eda
--- /dev/null
+++ b/pkgs/by-name/au/audacity/muse-deps-wxwidgets-frameworks.patch
@@ -0,0 +1,13 @@
+diff --git a/muse_deps/recipes/wxwidgets/meta.cmake b/muse_deps/recipes/wxwidgets/meta.cmake
+index b30de19..3d18391 100644
+--- a/muse_deps/recipes/wxwidgets/meta.cmake
++++ b/muse_deps/recipes/wxwidgets/meta.cmake
+@@ -35,6 +35,8 @@
+     endif()
+     separate_arguments(wx_cxx_list NATIVE_COMMAND "${wx_cxx}")
+     separate_arguments(wx_libs_list NATIVE_COMMAND "${wx_libs}")
++    # Keep framework flags and names together as a single CMake link item.
++    string(REGEX REPLACE "-framework;([^;]+)" "-framework \\1" wx_libs_list "${wx_libs_list}")
+ 
+     set(incs "")
+     set(opts "")
diff --git a/pkgs/by-name/au/audacity/muse-framework-deployment-target.patch b/pkgs/by-name/au/audacity/muse-framework-deployment-target.patch
new file mode 100644
index 000000000000..27d15d5739b3
--- /dev/null
+++ b/pkgs/by-name/au/audacity/muse-framework-deployment-target.patch
@@ -0,0 +1,21 @@
+diff --git a/muse/buildscripts/cmake/SetupBuildEnvironment.cmake b/muse/buildscripts/cmake/SetupBuildEnvironment.cmake
+index 994b4ab30a..71a910bcfa 100644
+--- a/muse/buildscripts/cmake/SetupBuildEnvironment.cmake
++++ b/muse/buildscripts/cmake/SetupBuildEnvironment.cmake
+@@ -63,8 +63,14 @@
+ 
+ # Mac-specific
+ if(OS_IS_MAC)
+-    set(MACOSX_DEPLOYMENT_TARGET 10.15.4)
+-    set(CMAKE_OSX_DEPLOYMENT_TARGET 10.15.4)
++    if(NOT CMAKE_OSX_DEPLOYMENT_TARGET)
++        if(NOT "$ENV{MACOSX_DEPLOYMENT_TARGET}" STREQUAL "")
++            set(CMAKE_OSX_DEPLOYMENT_TARGET "$ENV{MACOSX_DEPLOYMENT_TARGET}")
++        else()
++            set(CMAKE_OSX_DEPLOYMENT_TARGET 10.15.4)
++        endif()
++    endif()
++    set(MACOSX_DEPLOYMENT_TARGET "${CMAKE_OSX_DEPLOYMENT_TARGET}")
+ endif(OS_IS_MAC)
+ 
+ # MSVC-specific
diff --git a/pkgs/by-name/au/audacity/package.nix b/pkgs/by-name/au/audacity/package.nix
index 9b096104c63d..aa0c40ef7d60 100644
--- a/pkgs/by-name/au/audacity/package.nix
+++ b/pkgs/by-name/au/audacity/package.nix
@@ -1,212 +1,190 @@
 {
-  stdenv,
   lib,
-  fetchFromGitHub,
+  stdenv,
+  fetchurl,
+
+  # nativeBuildInputs
   cmake,
-  makeWrapper,
-  wrapGAppsHook3,
+  git,
+  linuxHeaders,
+  ninja,
   pkg-config,
   python3,
-  gettext,
-  file,
-  libvorbis,
-  libmad,
+  qt6,
+  wrapGAppsHook3,
+
+  # buildInputs
+  alsa-lib,
+  expat,
+  ffmpeg,
+  flac,
+  freetype,
+  harfbuzz,
+  lame,
   libjack2,
-  lv2,
-  lilv,
+  libogg,
+  libopus,
+  libsndfile,
+  libvorbis,
   mpg123,
   opusfile,
-  rapidjson,
-  serd,
-  sord,
-  sqlite,
-  sratom,
-  suil,
-  libsndfile,
-  soxr,
-  flac,
-  lame,
-  twolame,
-  expat,
-  libid3tag,
-  libopus,
-  libuuid,
-  ffmpeg,
-  soundtouch,
-  portaudio, # given up fighting their portaudio.patch?
-  portmidi,
-  linuxHeaders,
-  alsa-lib,
-  at-spi2-core,
-  dbus,
-  libepoxy,
-  libxdmcp,
-  libxtst,
-  libpthread-stubs,
-  libsbsms_2_3_0,
-  libselinux,
-  libsepol,
-  libxkbcommon,
-  util-linux,
+  portaudio,
+  pugixml,
+  utf8cpp,
   wavpack,
   wxwidgets_3_2,
-  gtk3,
-  libpng,
-  libjpeg,
+  zlib,
 }:
-
-# TODO
-# 1. detach sbsms
-
+let
+  wxwidgets = wxwidgets_3_2.override { withWebKit = false; };
+in
 stdenv.mkDerivation (finalAttrs: {
   pname = "audacity";
-  version = "3.7.9";
+  version = "4.0.0";
 
-  src = fetchFromGitHub {
-    owner = "audacity";
-    repo = "audacity";
-    rev = "Audacity-${finalAttrs.version}";
-    hash = "sha256-q/5LPL76GPEFGRxTZcuxmLuq15fwbw2Mak/q2RObghk=";
+  src = fetchurl {
+    url = "https://github.com/audacity/audacity/releases/download/Audacity-${finalAttrs.version}/audacity-sources-${finalAttrs.version}.tar.xz";
+    hash = "sha256-spB2+Z+l0vUi0AHbRyqJbbgfnv/v0VlIyUBXF1OFgFg=";
   };
 
   patches = [
-    # Introduced by https://github.com/Tencent/rapidjson/commit/b1c0c2843fcb2aca9ecc650fc035c57ffc13697c#diff-2f1bcf2729ff7c408adb0c2cc2cfa01602bd5646b05b3e4bc7e46b606035d249R21
-    ./rapidjson.patch
+    # https://github.com/musescore/muse_deps/pull/47
+    ./muse-deps-wxwidgets-frameworks.patch
+    # https://github.com/audacity/audacity/pull/12021
+    ./audacity-deployment-target.patch
+    # https://github.com/musescore/muse_framework/pull/278
+    ./muse-framework-deployment-target.patch
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    # https://github.com/audacity/audacity/pull/12056
+    ./macdeployqt-extra-options.patch
   ];
 
-  postPatch = ''
-    mkdir src/private
-    substituteInPlace scripts/build/macOS/fix_bundle.py \
-      --replace-fail "path.startswith('/usr/lib/')" "path.startswith('/usr/lib/') or path.startswith('${builtins.storeDir}')"
-  ''
-  + lib.optionalString stdenv.hostPlatform.isLinux ''
-    substituteInPlace libraries/lib-files/FileNames.cpp \
+  postPatch = lib.optionalString stdenv.hostPlatform.isLinux ''
+    substituteInPlace au3/libraries/au3-files/FileNames.cpp \
       --replace-fail /usr/include/linux/magic.h ${linuxHeaders}/include/linux/magic.h
   '';
 
   nativeBuildInputs = [
     cmake
-    gettext
+    git
+    ninja
     pkg-config
     python3
-    makeWrapper
-    wrapGAppsHook3
+    qt6.qttools
+    qt6.wrapQtAppsHook
+    wxwidgets
   ]
   ++ lib.optionals stdenv.hostPlatform.isLinux [
     linuxHeaders
+    wrapGAppsHook3
   ];
 
   buildInputs = [
     expat
     ffmpeg
-    file
     flac
-    gtk3
+    freetype
+    harfbuzz
     lame
-    libid3tag
     libjack2
-    libmad
+    libogg
     libopus
-    libsbsms_2_3_0
     libsndfile
     libvorbis
-    lilv
-    lv2
     mpg123
     opusfile
-    portmidi
-    rapidjson
-    serd
-    sord
-    soundtouch
-    soxr
-    sqlite
-    sratom
-    suil
-    twolame
     portaudio
+    pugixml
+    qt6.qt5compat
+    qt6.qtbase
+    qt6.qtdeclarative
+    qt6.qtnetworkauth
+    qt6.qtshadertools
+    qt6.qtsvg
+    utf8cpp
     wavpack
-    wxwidgets_3_2
+    wxwidgets
+    zlib
   ]
   ++ lib.optionals stdenv.hostPlatform.isLinux [
-    alsa-lib # for portaudio
-    at-spi2-core
-    dbus
-    libepoxy
-    libxdmcp
-    libxtst
-    libpthread-stubs
-    libxkbcommon
-    libselinux
-    libsepol
-    libuuid
-    util-linux
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isDarwin [
-    libpng
-    libjpeg
+    alsa-lib
+    qt6.qtwayland
   ];
 
   cmakeFlags = [
-    "-DAUDACITY_BUILD_LEVEL=2"
-    "-DAUDACITY_REV_LONG=nixpkgs"
-    "-DAUDACITY_REV_TIME=nixpkgs"
-    "-DDISABLE_DYNAMIC_LOADING_FFMPEG=ON"
-    "-Daudacity_conan_enabled=Off"
-    "-Daudacity_use_ffmpeg=loaded"
-    "-Daudacity_has_vst3=Off"
-    "-Daudacity_has_crashreports=Off"
-
-    # RPATH of binary /nix/store/.../bin/... contains a forbidden reference to /build/
-    "-DCMAKE_SKIP_BUILD_RPATH=ON"
-
-    # Fix duplicate store paths
-    "-DCMAKE_INSTALL_LIBDIR=lib"
+    (lib.cmakeFeature "AU4_BUILD_MODE" "release")
+    (lib.cmakeFeature "EXTDEPS_OVERRIDE_ALL" "SYSTEM")
+    (lib.cmakeBool "MUSE_COMPILE_USE_CCACHE" false)
+    (lib.cmakeBool "MUSE_ENABLE_UNIT_TESTS" finalAttrs.finalPackage.doCheck)
+    (lib.cmakeBool "MUSE_MODULE_DIAGNOSTICS_CRASHPAD_CLIENT" false)
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    (lib.cmakeFeature "CMAKE_OSX_ARCHITECTURES" stdenv.hostPlatform.darwinArch)
+    (lib.cmakeFeature "CMAKE_OSX_DEPLOYMENT_TARGET" stdenv.hostPlatform.darwinMinVersion)
+    # Nix performs stripping after deployment.
+    (lib.cmakeFeature "AU4_MACDEPLOYQT_EXTRA_OPTIONS" "-no-strip")
   ];
 
-  # [ 57%] Generating LightThemeAsCeeCode.h...
-  # ../../utils/image-compiler: error while loading shared libraries:
-  # lib-theme.so: cannot open shared object file: No such file or directory
-  preBuild = ''
-    export LD_LIBRARY_PATH=$PWD/Release/lib/audacity
+  preConfigure = ''
+    cmakeFlagsArray+=("-DEXTDEPS_CACHE=$PWD/offline-deps")
   '';
 
-  doCheck = false; # Test fails
+  preInstall = lib.optionalString stdenv.hostPlatform.isDarwin ''
+    export NIX_QMLIMPORTSCANNER=${lib.getBin qt6.qtdeclarative}/libexec/qmlimportscanner
+    export QML2_IMPORT_PATH=
+    for input in ${lib.escapeShellArgs finalAttrs.buildInputs}; do
+      addToSearchPath QML2_IMPORT_PATH "$input/${qt6.qtbase.qtQmlPrefix}"
+    done
+  '';
+
+  postInstall = lib.optionalString stdenv.hostPlatform.isDarwin ''
+    mkdir -p "$out/Applications"
+    mv "$out/audacity.app" "$out/Applications/"
+  '';
+
+  qtWrapperArgs = [
+    "--prefix"
+    "${lib.optionalString stdenv.hostPlatform.isDarwin "DY"}LD_LIBRARY_PATH"
+    ":"
+    (lib.makeLibraryPath [
+      ffmpeg
+      libjack2
+    ])
+  ];
+
+  preFixup = lib.optionalString stdenv.hostPlatform.isLinux ''
+    qtWrapperArgs+=("''${gappsWrapperArgs[@]}")
+  '';
+
+  postFixup = lib.optionalString stdenv.hostPlatform.isDarwin ''
+    # Use bundled Qt plugins, not a second Qt installation from the store.
+    wrapProgram "$out/Applications/audacity.app/Contents/MacOS/audacity" \
+      ${lib.escapeShellArgs finalAttrs.qtWrapperArgs} \
+      --unset QT_PLUGIN_PATH \
+      --unset NIXPKGS_QT6_QML_IMPORT_PATH \
+      --unset QML2_IMPORT_PATH \
+      --unset QML_IMPORT_PATH
+    mkdir -p "$out/bin"
+    makeWrapper "$out/Applications/audacity.app/Contents/MacOS/audacity" "$out/bin/audacity"
+  '';
 
   dontWrapGApps = true;
+  # Automatic scanning would wrap bundled framework libraries as executables.
+  dontWrapQtApps = stdenv.hostPlatform.isDarwin;
 
-  # Replace audacity's wrapper, to:
-  # - Put it in the right place; it shouldn't be in "$out/audacity"
-  # - Add the ffmpeg dynamic dependency
-  # - Use Xwayland by default on Wayland. See https://github.com/audacity/audacity/pull/5977
-  postFixup =
-    lib.optionalString stdenv.hostPlatform.isLinux ''
-      wrapProgram "$out/bin/audacity" \
-        "''${gappsWrapperArgs[@]}" \
-        --prefix LD_LIBRARY_PATH : "$out/lib/audacity":${lib.makeLibraryPath [ ffmpeg ]} \
-        --suffix AUDACITY_MODULES_PATH : "$out/lib/audacity/modules" \
-        --suffix AUDACITY_PATH : "$out/share/audacity" \
-        --set-default GDK_BACKEND x11
-    ''
-    + lib.optionalString stdenv.hostPlatform.isDarwin ''
-      mkdir -p $out/{Applications,bin}
-      mv $out/Audacity.app $out/Applications/
-      makeWrapper $out/Applications/Audacity.app/Contents/MacOS/Audacity $out/bin/audacity
-    '';
+  strictDeps = true;
+  __structuredAttrs = true;
 
   meta = {
     description = "Sound editor with graphical UI";
     mainProgram = "audacity";
     homepage = "https://www.audacityteam.org";
-    changelog = "https://github.com/audacity/audacity/releases";
-    license = with lib.licenses; [
-      gpl2Plus
-      # Must be GPL3 when building with "technologies that require it,
-      # such as the VST3 audio plugin interface".
-      # https://github.com/audacity/audacity/discussions/2142.
-      gpl3
-      # Documentation.
-      cc-by-30
+    changelog = "https://github.com/audacity/audacity/releases/tag/Audacity-${finalAttrs.version}";
+    license = lib.licenses.AND [
+      lib.licenses.gpl2Plus
+      lib.licenses.gpl3Only
+      lib.licenses.cc-by-30
     ];
     maintainers = with lib.maintainers; [
       veprbl
diff --git a/pkgs/by-name/au/audacity_3/package.nix b/pkgs/by-name/au/audacity_3/package.nix
new file mode 100644
index 000000000000..753bb70f7ec6
--- /dev/null
+++ b/pkgs/by-name/au/audacity_3/package.nix
@@ -0,0 +1,221 @@
+{
+  stdenv,
+  lib,
+  fetchFromGitHub,
+  cmake,
+  makeWrapper,
+  wrapGAppsHook3,
+  pkg-config,
+  python3,
+  gettext,
+  file,
+  libvorbis,
+  libmad,
+  libjack2,
+  lv2,
+  lilv,
+  mpg123,
+  opusfile,
+  rapidjson,
+  serd,
+  sord,
+  sqlite,
+  sratom,
+  suil,
+  libsndfile,
+  soxr,
+  flac,
+  lame,
+  twolame,
+  expat,
+  libid3tag,
+  libopus,
+  libuuid,
+  ffmpeg,
+  soundtouch,
+  portaudio, # given up fighting their portaudio.patch?
+  portmidi,
+  linuxHeaders,
+  alsa-lib,
+  at-spi2-core,
+  dbus,
+  libepoxy,
+  libxdmcp,
+  libxtst,
+  libpthread-stubs,
+  libsbsms_2_3_0,
+  libselinux,
+  libsepol,
+  libxkbcommon,
+  util-linux,
+  wavpack,
+  wxwidgets_3_2,
+  gtk3,
+  libpng,
+  libjpeg,
+}:
+
+# TODO
+# 1. detach sbsms
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "audacity";
+  version = "3.7.9";
+
+  src = fetchFromGitHub {
+    owner = "audacity";
+    repo = "audacity";
+    rev = "Audacity-${finalAttrs.version}";
+    hash = "sha256-q/5LPL76GPEFGRxTZcuxmLuq15fwbw2Mak/q2RObghk=";
+  };
+
+  patches = [
+    # Introduced by https://github.com/Tencent/rapidjson/commit/b1c0c2843fcb2aca9ecc650fc035c57ffc13697c#diff-2f1bcf2729ff7c408adb0c2cc2cfa01602bd5646b05b3e4bc7e46b606035d249R21
+    ./rapidjson.patch
+  ];
+
+  postPatch = ''
+    mkdir src/private
+    substituteInPlace scripts/build/macOS/fix_bundle.py \
+      --replace-fail "path.startswith('/usr/lib/')" "path.startswith('/usr/lib/') or path.startswith('${builtins.storeDir}')"
+  ''
+  + lib.optionalString stdenv.hostPlatform.isLinux ''
+    substituteInPlace libraries/lib-files/FileNames.cpp \
+      --replace-fail /usr/include/linux/magic.h ${linuxHeaders}/include/linux/magic.h
+  '';
+
+  nativeBuildInputs = [
+    cmake
+    gettext
+    pkg-config
+    python3
+    makeWrapper
+    wrapGAppsHook3
+    wxwidgets_3_2
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
+    linuxHeaders
+  ];
+
+  buildInputs = [
+    expat
+    ffmpeg
+    file
+    flac
+    gtk3
+    lame
+    libid3tag
+    libjack2
+    libmad
+    libopus
+    libsbsms_2_3_0
+    libsndfile
+    libvorbis
+    lilv
+    lv2
+    mpg123
+    opusfile
+    portmidi
+    rapidjson
+    serd
+    sord
+    soundtouch
+    soxr
+    sqlite
+    sratom
+    suil
+    twolame
+    portaudio
+    wavpack
+    wxwidgets_3_2
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
+    alsa-lib # for portaudio
+    at-spi2-core
+    dbus
+    libepoxy
+    libxdmcp
+    libxtst
+    libpthread-stubs
+    libxkbcommon
+    libselinux
+    libsepol
+    libuuid
+    util-linux
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    libpng
+    libjpeg
+  ];
+
+  cmakeFlags = [
+    "-DAUDACITY_BUILD_LEVEL=2"
+    "-DAUDACITY_REV_LONG=nixpkgs"
+    "-DAUDACITY_REV_TIME=nixpkgs"
+    "-DDISABLE_DYNAMIC_LOADING_FFMPEG=ON"
+    "-Daudacity_conan_enabled=Off"
+    "-Daudacity_use_ffmpeg=loaded"
+    "-Daudacity_has_vst3=Off"
+    "-Daudacity_has_crashreports=Off"
+
+    # RPATH of binary /nix/store/.../bin/... contains a forbidden reference to /build/
+    "-DCMAKE_SKIP_BUILD_RPATH=ON"
+
+    # Fix duplicate store paths
+    "-DCMAKE_INSTALL_LIBDIR=lib"
+  ];
+
+  # [ 57%] Generating LightThemeAsCeeCode.h...
+  # ../../utils/image-compiler: error while loading shared libraries:
+  # lib-theme.so: cannot open shared object file: No such file or directory
+  preBuild = ''
+    export LD_LIBRARY_PATH=$PWD/Release/lib/audacity
+  '';
+
+  doCheck = false; # Test fails
+
+  dontWrapGApps = true;
+
+  strictDeps = true;
+  __structuredAttrs = true;
+
+  # Replace audacity's wrapper, to:
+  # - Put it in the right place; it shouldn't be in "$out/audacity"
+  # - Add the ffmpeg dynamic dependency
+  # - Use Xwayland by default on Wayland. See https://github.com/audacity/audacity/pull/5977
+  postFixup =
+    lib.optionalString stdenv.hostPlatform.isLinux ''
+      wrapProgram "$out/bin/audacity" \
+        "''${gappsWrapperArgs[@]}" \
+        --prefix LD_LIBRARY_PATH : "$out/lib/audacity":${lib.makeLibraryPath [ ffmpeg ]} \
+        --suffix AUDACITY_MODULES_PATH : "$out/lib/audacity/modules" \
+        --suffix AUDACITY_PATH : "$out/share/audacity" \
+        --set-default GDK_BACKEND x11
+    ''
+    + lib.optionalString stdenv.hostPlatform.isDarwin ''
+      mkdir -p $out/{Applications,bin}
+      mv $out/Audacity.app $out/Applications/
+      makeWrapper $out/Applications/Audacity.app/Contents/MacOS/Audacity $out/bin/audacity
+    '';
+
+  meta = {
+    description = "Sound editor with graphical UI";
+    mainProgram = "audacity";
+    homepage = "https://www.audacityteam.org";
+    changelog = "https://github.com/audacity/audacity/releases";
+    license = with lib.licenses; [
+      gpl2Plus
+      # Must be GPL3 when building with "technologies that require it,
+      # such as the VST3 audio plugin interface".
+      # https://github.com/audacity/audacity/discussions/2142.
+      gpl3
+      # Documentation.
+      cc-by-30
+    ];
+    maintainers = with lib.maintainers; [
+      veprbl
+      wegank
+    ];
+    platforms = lib.platforms.unix;
+  };
+})
diff --git a/pkgs/by-name/au/audacity/rapidjson.patch b/pkgs/by-name/au/audacity_3/rapidjson.patch
similarity index 100%
rename from pkgs/by-name/au/audacity/rapidjson.patch
rename to pkgs/by-name/au/audacity_3/rapidjson.patch
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 779a47b910db..63f528871fc8 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -360,6 +360,7 @@ mapAliases {
   astronomer = throw "'astronomer' has been removed, as it has been unmaintained upstream since August 2020"; # Added 2026-01-01
   atlassian-cli = appfire-cli; # Added 2025-09-29
   ats = throw "'ats' has been removed as it is unmaintained for 10 years and broken"; # Added 2025-05-17
+  audacity_4 = audacity; # Added 2026-09-05
   audio-recorder = throw "'audio-recorder' has been removed, as it is unmaintained upstream and broken. Consider using 'gnome-sound-recorder' or 'reco' instead"; # Added 2026-01-02
   august = throw "'august' has been removed, as it has been unmaintained since august 2023"; # Added 2025-12-25
   AusweisApp2 = throw "'AusweisApp2' has been renamed to/replaced by 'ausweisapp'"; # Converted to throw 2025-10-27

From 8a4b9d1552aaa408edd593a068f9f1ff4a3a0aeb Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 19:14:27 +0000
Subject: [PATCH 124/146] ralphex: 1.6.1 -> 1.7.0

---
 pkgs/by-name/ra/ralphex/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ra/ralphex/package.nix b/pkgs/by-name/ra/ralphex/package.nix
index 133f8c47a260..49d5cf14cbca 100644
--- a/pkgs/by-name/ra/ralphex/package.nix
+++ b/pkgs/by-name/ra/ralphex/package.nix
@@ -9,7 +9,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "ralphex";
-  version = "1.6.1";
+  version = "1.7.0";
 
   __structuredAttrs = true;
 
@@ -17,7 +17,7 @@ buildGoModule (finalAttrs: {
     owner = "umputun";
     repo = "ralphex";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-M1VeZgpNv64ZbcNvhzscnhTJhuR6yrh+clAWAce7vxI=";
+    hash = "sha256-fwbT23wzJrc7ljI4R2Lmdf0q0Y0/DeBbYYt2WMN/67A=";
   };
 
   vendorHash = null;

From 2dd5703b71a7f506a28879c07d8e3cc3bb8cfb09 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 19:26:54 +0000
Subject: [PATCH 125/146] mo-viewer: 1.6.7 -> 1.6.8

---
 pkgs/by-name/mo/mo-viewer/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/mo/mo-viewer/package.nix b/pkgs/by-name/mo/mo-viewer/package.nix
index 40dfd43afeff..61a920c8ae3d 100644
--- a/pkgs/by-name/mo/mo-viewer/package.nix
+++ b/pkgs/by-name/mo/mo-viewer/package.nix
@@ -15,13 +15,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "mo-viewer";
-  version = "1.6.7";
+  version = "1.6.8";
 
   src = fetchFromGitHub {
     owner = "k1LoW";
     repo = "mo";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-8A3km3N9pGm/gBvIxManVgBV5opMZIoNR/JE93gX5yk=";
+    hash = "sha256-aam8kDxZfNXJyGeyj4ZtDRLcZ9mPVKNHnHfVFFkv/Ro=";
   };
 
   frontend = stdenvNoCC.mkDerivation (finalFrontendAttrs: {
@@ -35,7 +35,7 @@ buildGoModule (finalAttrs: {
       sourceRoot = "${finalFrontendAttrs.src.name}/internal/frontend";
       pnpm = pnpm_10;
       fetcherVersion = 4;
-      hash = "sha256-tjeDH6wiA3KjUyhpQfvrSsXqSRf1bOOA0vPfkUR8Kvc=";
+      hash = "sha256-jvTMP8XKUpanM2CQVX/cZr2sqMt6Zgh1JKJhaCeGKt4=";
     };
 
     nativeBuildInputs = [
@@ -63,7 +63,7 @@ buildGoModule (finalAttrs: {
     '';
   });
 
-  vendorHash = "sha256-gaw85ILGr3iDWZ8ibRAA7l+UROCaItDBauCVtbZNa0U=";
+  vendorHash = "sha256-9LXhQUTsk0+UCtXWMFsE4aGG+2MSOyM+U6dlWw+0G+c=";
 
   preBuild = ''
     cp -r ${finalAttrs.frontend} internal/static/dist

From 98bdcd4776779f0f75f586aa5b6b6bf825cdb061 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 19:29:08 +0000
Subject: [PATCH 126/146] python3Packages.google-maps-routing: 0.11.0 -> 0.11.1

---
 .../python-modules/google-maps-routing/default.nix            | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/google-maps-routing/default.nix b/pkgs/development/python-modules/google-maps-routing/default.nix
index b035d6f99a74..ef6257b4cf7f 100644
--- a/pkgs/development/python-modules/google-maps-routing/default.nix
+++ b/pkgs/development/python-modules/google-maps-routing/default.nix
@@ -15,14 +15,14 @@
 
 buildPythonPackage rec {
   pname = "google-maps-routing";
-  version = "0.11.0";
+  version = "0.11.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "googleapis";
     repo = "google-cloud-python";
     tag = "google-maps-routing-v${version}";
-    hash = "sha256-M/7uDWWz4YCfxa4gyM9BaAo10iyTMvtR2MhNpdFYnis=";
+    hash = "sha256-vsJuqmG2/H5Lf/uGnEnkmBDBL2Mkxzk1z8gbGEpR0Eg=";
   };
 
   sourceRoot = "${src.name}/packages/google-maps-routing";

From e03ad2d81236dec35b2f7b57faf75c6e85d098a8 Mon Sep 17 00:00:00 2001
From: Maximilian Bosch <maximilian@mbosch.me>
Date: Fri, 4 Sep 2026 16:29:44 +0200
Subject: [PATCH 127/146] matrix-synapse: 1.159.0 -> 1.160.0

ChangeLog: https://github.com/element-hq/synapse/releases/tag/v1.160.0
---
 pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix b/pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix
index 5129e48db8d0..52f3f9ad0390 100644
--- a/pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix
+++ b/pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix
@@ -14,19 +14,19 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "matrix-synapse";
-  version = "1.159.0";
+  version = "1.160.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "element-hq";
     repo = "synapse";
     rev = "v${version}";
-    hash = "sha256-Fdbr+uMKFTZl1ETyaDavsSCpJYwS5+eLqifMlLGtDeA=";
+    hash = "sha256-sf7YS3AKPnhQySGZD1uvHvpVdUWIV/hrzBLvmbvS3bA=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname version src;
-    hash = "sha256-9VmEej1AKvGMMgbdyvm0DFZJ9sLP2WcV29+xVtOLV4g=";
+    hash = "sha256-154xfJLCCcPbjxknbm5HanJyMGnAJCTZKH8BYvMCvpo=";
   };
 
   build-system =
@@ -165,7 +165,7 @@ python3Packages.buildPythonApplication rec {
 
   meta = {
     homepage = "https://matrix.org";
-    changelog = "https://github.com/element-hq/synapse/releases/tag/v${version}";
+    changelog = "https://github.com/element-hq/synapse/blob/v${version}/CHANGES.md";
     description = "Matrix reference homeserver";
     license = lib.licenses.agpl3Plus;
     maintainers = with lib.maintainers; [ sumnerevans ];

From b6de21dca46ae008661ccba48c9011da3d060861 Mon Sep 17 00:00:00 2001
From: Robert Hensing <robert@roberthensing.nl>
Date: Mon, 7 Sep 2026 21:31:49 +0200
Subject: [PATCH 128/146] dockerTools: use nix through nativeBuildInputs

It works much the same, but allows nix as a whole to be overridden.
The only build time difference is that it now uses PATH, and that's
ok.
---
 pkgs/build-support/docker/default.nix | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/pkgs/build-support/docker/default.nix b/pkgs/build-support/docker/default.nix
index 6e61677350fe..8efa2aedc601 100644
--- a/pkgs/build-support/docker/default.nix
+++ b/pkgs/build-support/docker/default.nix
@@ -71,9 +71,7 @@ let
       # A user is required by nix
       # https://github.com/NixOS/nix/blob/9348f9291e5d9e4ba3c4347ea1b235640f54fd79/src/libutil/util.cc#L478
       export USER=nobody
-      ${lib.getExe' buildPackages.nix "nix-store"} --load-db < ${
-        closureInfo { rootPaths = contentsList; }
-      }/registration
+      nix-store --load-db < ${closureInfo { rootPaths = contentsList; }}/registration
       # Reset registration times to make the image reproducible
       ${lib.getExe buildPackages.sqlite} nix/var/nix/db/db.sqlite "UPDATE ValidPaths SET registrationTime = ''${SOURCE_DATE_EPOCH}"
 
@@ -430,6 +428,7 @@ rec {
       keepContentsDirlinks ? false,
       # Additional commands to run on the layer before it is tar'd up.
       extraCommands ? "",
+      nativeBuildInputs ? [ ],
       uid ? 0,
       gid ? 0,
     }:
@@ -441,7 +440,8 @@ rec {
           jshon
           rsync
           tarsum
-        ];
+        ]
+        ++ nativeBuildInputs;
       }
       ''
         mkdir layer
@@ -705,6 +705,7 @@ rec {
               uid
               gid
               ;
+            nativeBuildInputs = optionals includeNixDB [ nix ];
             extraCommands = extraCommandsWithDB;
             copyToRoot = rootContents;
           }
@@ -1082,6 +1083,9 @@ rec {
         ]
         ++ optionals enableFakechroot [
           proot
+        ]
+        ++ optionals includeNixDB [
+          nix
         ];
         postBuild = ''
           mv $out old_out

From 529c73bd1660abfe526d71ac9c4765af940228c2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 20:17:39 +0000
Subject: [PATCH 129/146] terraform-providers.e-breuninger_netbox: 5.7.0 ->
 5.8.0

---
 .../networking/cluster/terraform-providers/providers.json   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index af25b5adbe5f..dbc14983914e 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -382,13 +382,13 @@
     "vendorHash": "sha256-uokHd4hDvWl6mrBa062F/uZmYPnW3TIZZKZwKBVq+Lo="
   },
   "e-breuninger_netbox": {
-    "hash": "sha256-qyzw5a35twJ5gsEe0ANv6a9MMD0UyV8hYbYt/2bBJ/k=",
+    "hash": "sha256-tbBCGOcbDhiOjdgyS9lSw6IbMgzZwnbM40/InvhUKCA=",
     "homepage": "https://registry.terraform.io/providers/e-breuninger/netbox",
     "owner": "e-breuninger",
     "repo": "terraform-provider-netbox",
-    "rev": "v5.7.0",
+    "rev": "v5.8.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-y9GRTuoh1X6GfGkGZbPpO500y8DoJS1dnwZL3BCTUcY="
+    "vendorHash": "sha256-NbFksqqwwelhSig6+5kqoTuUsUab8we+sSp1izfpF10="
   },
   "equinix_equinix": {
     "hash": "sha256-gPuRvWQiJZdyUGTNMCQSEFmbqC5ralxroBSbBprFe/8=",

From eaea9e06437eaf7a1b46df142daf4d6835040f30 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 20:30:59 +0000
Subject: [PATCH 130/146] allure: 2.46.0 -> 2.46.1

---
 pkgs/by-name/al/allure/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/al/allure/package.nix b/pkgs/by-name/al/allure/package.nix
index 9fdbc94dde16..4af64c724290 100644
--- a/pkgs/by-name/al/allure/package.nix
+++ b/pkgs/by-name/al/allure/package.nix
@@ -8,11 +8,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "allure";
-  version = "2.46.0";
+  version = "2.46.1";
 
   src = fetchurl {
     url = "https://github.com/allure-framework/allure2/releases/download/${finalAttrs.version}/allure-${finalAttrs.version}.tgz";
-    hash = "sha256-KRyhI4t+Z9Vho1/N758shQyBHBxh9FsccNbX87sBpog=";
+    hash = "sha256-N0KBZPMQyNE3z90sOiXQSbIzJh3asT4b1N/XYntcv40=";
   };
 
   dontConfigure = true;

From 18ce8a2d5d5bda5a5317ecf3025e03748a362aca Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Mon, 7 Sep 2026 20:57:07 +0000
Subject: [PATCH 131/146] python3Packages.mizani: 0.14.5 -> 0.14.6

Diff: https://github.com/has2k1/mizani/compare/v0.14.5...v0.14.6

Changelog: https://github.com/has2k1/mizani/releases/tag/v0.14.6
---
 pkgs/development/python-modules/mizani/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mizani/default.nix b/pkgs/development/python-modules/mizani/default.nix
index 797697dbd2f4..f577be157085 100644
--- a/pkgs/development/python-modules/mizani/default.nix
+++ b/pkgs/development/python-modules/mizani/default.nix
@@ -19,7 +19,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "mizani";
-  version = "0.14.5";
+  version = "0.14.6";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -27,7 +27,7 @@ buildPythonPackage (finalAttrs: {
     owner = "has2k1";
     repo = "mizani";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-dKBj8hAYg+2CKYa2f0YRbbllrSacwFcejwnxvcw7F2k=";
+    hash = "sha256-YbBHgfcyyK5hCjeILgvl03+uWsOJwLF55UKecd8g4Y0=";
   };
 
   build-system = [ setuptools-scm ];

From 3ccf4d7d046d2c6ffe915f4fb09b106e4f6433ea Mon Sep 17 00:00:00 2001
From: John Rinehart <johnrichardrinehart@gmail.com>
Date: Mon, 7 Sep 2026 17:02:17 -0400
Subject: [PATCH 132/146] audacity: add johnrichardrinehart as maintainer

---
 pkgs/by-name/au/audacity/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/au/audacity/package.nix b/pkgs/by-name/au/audacity/package.nix
index aa0c40ef7d60..272a4e1a89f9 100644
--- a/pkgs/by-name/au/audacity/package.nix
+++ b/pkgs/by-name/au/audacity/package.nix
@@ -187,6 +187,7 @@ stdenv.mkDerivation (finalAttrs: {
       lib.licenses.cc-by-30
     ];
     maintainers = with lib.maintainers; [
+      johnrichardrinehart
       veprbl
       wegank
     ];

From 3de34915571438faeba57fe56a38f2cb5b34ce40 Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Mon, 7 Sep 2026 21:04:08 +0000
Subject: [PATCH 133/146] linux_7_2: 7.2.3 -> 7.2.4

---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 42f187174d44..b19d41eeb0b8 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -40,8 +40,8 @@
         "lts": false
     },
     "7.2": {
-        "version": "7.2.3",
-        "hash": "sha256:00yd1rar9dxgdfx1003c9m5bs90bv6da7j2117pwcgmiwzl5k8lb",
+        "version": "7.2.4",
+        "hash": "sha256:1p98bi0zzk3al2d0i28ms4h8vq2ps3n2prdsy69c9nip2zh0ww81",
         "lts": false
     }
 }

From 10d202d8cd1357e435848366f226faa172eaf3b1 Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Mon, 7 Sep 2026 21:04:11 +0000
Subject: [PATCH 134/146] linux_6_18: 6.18.49 -> 6.18.50

---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index b19d41eeb0b8..3e9c1d6477e7 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -30,8 +30,8 @@
         "lts": true
     },
     "6.18": {
-        "version": "6.18.49",
-        "hash": "sha256:14c1l9hbqcjlzfl7bssa43yqsg26sycp5plx4wfnzshz24rnz0mf",
+        "version": "6.18.50",
+        "hash": "sha256:0q842zpaqb5vi749g2lawa62p9gsb3h3p99vbrjdj4afmcfh9z6j",
         "lts": true
     },
     "7.1": {

From ac63aaa40bea925946d719a839684f5e84ce6661 Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Mon, 7 Sep 2026 21:04:13 +0000
Subject: [PATCH 135/146] linux_6_12: 6.12.108 -> 6.12.109

---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 3e9c1d6477e7..0371dd05f274 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -25,8 +25,8 @@
         "lts": true
     },
     "6.12": {
-        "version": "6.12.108",
-        "hash": "sha256:1bxsykj1w8slrn837z05ax8r9d5kkgk5kbjzbngmrm921lhfmlg1",
+        "version": "6.12.109",
+        "hash": "sha256:1yp370f2y5czvq24xqply8f6a14gnpjqkfmfyhcm1q9lld9fb12l",
         "lts": true
     },
     "6.18": {

From b50c7ee5dfa331135dacad4cbacfaba8830adefe Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 21:05:22 +0000
Subject: [PATCH 136/146] edhm-ui: 3.0.70 -> 3.0.71

---
 pkgs/by-name/ed/edhm-ui/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ed/edhm-ui/package.nix b/pkgs/by-name/ed/edhm-ui/package.nix
index cfd0561164b6..3cdf18a1c09f 100644
--- a/pkgs/by-name/ed/edhm-ui/package.nix
+++ b/pkgs/by-name/ed/edhm-ui/package.nix
@@ -28,13 +28,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "edhm-ui";
-  version = "3.0.70";
+  version = "3.0.71";
 
   strictDeps = true;
 
   src = fetchzip {
     url = "https://github.com/BlueMystical/EDHM_UI/releases/download/v${finalAttrs.version}/edhm-ui-v3-linux-x64.zip";
-    hash = "sha256-jAvUWrjQl8dmXxd99ONYqgdnPkzDQwdSEf8ar2nLEds=";
+    hash = "sha256-wMsP2VeSbo78II/tT5nBAvOIQc3lCBqy+l0F2r3ulEM=";
   };
 
   nativeBuildInputs = [

From 488a7a7ebbb3e4f00b6ddd306811a6a7118694ad Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Wed, 2 Sep 2026 23:20:18 +1000
Subject: [PATCH 137/146] linux_7_1: remove

EOL
---
 pkgs/os-specific/linux/kernel/kernels-org.json |  5 -----
 pkgs/top-level/linux-kernels.nix               | 11 ++---------
 2 files changed, 2 insertions(+), 14 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 0371dd05f274..bde07a2a15ca 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -34,11 +34,6 @@
         "hash": "sha256:0q842zpaqb5vi749g2lawa62p9gsb3h3p99vbrjdj4afmcfh9z6j",
         "lts": true
     },
-    "7.1": {
-        "version": "7.1.13",
-        "hash": "sha256:1mqshj3ldn0md1c0am35skznnq5vmz3fvrr0cqmwwp6bzpx9akb1",
-        "lts": false
-    },
     "7.2": {
         "version": "7.2.4",
         "hash": "sha256:1p98bi0zzk3al2d0i28ms4h8vq2ps3n2prdsy69c9nip2zh0ww81",
diff --git a/pkgs/top-level/linux-kernels.nix b/pkgs/top-level/linux-kernels.nix
index 4d01ae53eb59..ffe4a88dcc8a 100644
--- a/pkgs/top-level/linux-kernels.nix
+++ b/pkgs/top-level/linux-kernels.nix
@@ -92,14 +92,6 @@ in
           ];
         };
 
-        linux_7_1 = callPackage ../os-specific/linux/kernel/mainline.nix {
-          branch = "7.1";
-          kernelPatches = [
-            kernelPatches.bridge_stp_helper
-            kernelPatches.request_key_helper
-          ];
-        };
-
         linux_7_2 = callPackage ../os-specific/linux/kernel/mainline.nix {
           branch = "7.2";
           kernelPatches = [
@@ -176,6 +168,7 @@ in
         linux_6_17 = throw "linux 6.17 was removed because it has reached its end of life upstream";
         linux_6_19 = throw "linux 6.19 was removed because it has reached its end of life upstream";
         linux_7_0 = throw "linux 7.0 was removed because it has reached its end of life upstream";
+        linux_7_1 = throw "linux 7.1 was removed because it has reached its end of life upstream";
 
         linux_5_10_hardened = throw "linux_hardened on nixpkgs only contains latest stable and latest LTS";
         linux_5_15_hardened = throw "linux_hardened on nixpkgs only contains latest stable and latest LTS";
@@ -663,7 +656,6 @@ in
     linux_6_6 = recurseIntoAttrs (packagesFor kernels.linux_6_6);
     linux_6_12 = recurseIntoAttrs (packagesFor kernels.linux_6_12);
     linux_6_18 = recurseIntoAttrs (packagesFor kernels.linux_6_18);
-    linux_7_1 = recurseIntoAttrs (packagesFor kernels.linux_7_1);
     linux_7_2 = recurseIntoAttrs (packagesFor kernels.linux_7_2);
   }
   // lib.optionalAttrs config.allowAliases {
@@ -679,6 +671,7 @@ in
     linux_6_17 = throw "linux 6.17 was removed because it reached its end of life upstream"; # Added 2025-12-22
     linux_6_19 = throw "linux 6.19 was removed because it reached its end of life upstream"; # Added 2026-04-23
     linux_7_0 = throw "linux 7.0 was removed because it has reached its end of life upstream"; # Added 2026-06-27
+    linux_7_1 = throw "linux 7.1 was removed because it has reached its end of life upstream"; # Added 2026-09-02
   };
 
   rpiPackages = {

From b99ff14a032fcd048d37f680c6bb411f5e149bd9 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 21:19:16 +0000
Subject: [PATCH 138/146] bzip3: 1.5.3 -> 1.5.4

---
 pkgs/by-name/bz/bzip3/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/bz/bzip3/package.nix b/pkgs/by-name/bz/bzip3/package.nix
index e70cb63a5a95..2f7bdb1b9ba2 100644
--- a/pkgs/by-name/bz/bzip3/package.nix
+++ b/pkgs/by-name/bz/bzip3/package.nix
@@ -9,7 +9,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bzip3";
-  version = "1.5.3";
+  version = "1.5.4";
 
   outputs = [
     "bin"
@@ -21,7 +21,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "iczelia";
     repo = "bzip3";
     tag = finalAttrs.version;
-    hash = "sha256-SOouMUctxsAJdkt84rJBaCbK23GKmXRH9nVgGdDodsk=";
+    hash = "sha256-uLL87HbohLNTm+Pq96iNlN+zqjG/bxCV7BJk1H7DvgY=";
   };
 
   postPatch = ''

From 5c685d899f7c59170e5794bfc8dc25f597a095bd Mon Sep 17 00:00:00 2001
From: Sigmanificient <edhyjox@gmail.com>
Date: Mon, 7 Sep 2026 23:35:36 +0200
Subject: [PATCH 139/146] python3Packages.tomlrt: add meta.changelog

---
 pkgs/development/python-modules/tomlrt/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/development/python-modules/tomlrt/default.nix b/pkgs/development/python-modules/tomlrt/default.nix
index 7bc86037ae7a..336324a556b0 100644
--- a/pkgs/development/python-modules/tomlrt/default.nix
+++ b/pkgs/development/python-modules/tomlrt/default.nix
@@ -28,6 +28,7 @@ buildPythonPackage (finalAttrs: {
   meta = {
     description = "A format-preserving TOML reader and writer for Python";
     homepage = "https://github.com/dimbleby/tomlrt";
+    changelog = "https://github.com/dimbleby/tomlrt/blob/v${finalAttrs.version}/CHANGELOG.md";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ aaronjheng ];
   };

From 18016a3fd97138482290c50a24bdd2e57167aca2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 21:41:26 +0000
Subject: [PATCH 140/146] gpu-screen-recorder: 6.0.1 -> 6.1.1

---
 pkgs/by-name/gp/gpu-screen-recorder/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gp/gpu-screen-recorder/package.nix b/pkgs/by-name/gp/gpu-screen-recorder/package.nix
index bbb4f51b8e67..76be3244e115 100644
--- a/pkgs/by-name/gp/gpu-screen-recorder/package.nix
+++ b/pkgs/by-name/gp/gpu-screen-recorder/package.nix
@@ -29,12 +29,12 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gpu-screen-recorder";
-  version = "6.0.1";
+  version = "6.1.1";
 
   src = fetchgit {
     url = "https://repo.dec05eba.com/gpu-screen-recorder";
     tag = finalAttrs.version;
-    hash = "sha256-mq+I90JaVsYZgPFLHRO/Qebv5p3XQZ6VaNbvHJBfXbQ=";
+    hash = "sha256-I5q2bvCjoXkXue/rr6IhwwhdQkxMmf1MgaKEjh+IZP8=";
   };
 
   postPatch = ''

From 4e7d83c10a0fdd8a5c8fb5a4118bc6d2d23cc2f2 Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Tue, 8 Sep 2026 06:53:49 +0900
Subject: [PATCH 141/146] nixos/tests/portunus: fix flakiness

---
 nixos/tests/portunus.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/nixos/tests/portunus.nix b/nixos/tests/portunus.nix
index 5562c7f5ac8a..d5eba1cd3fdd 100644
--- a/nixos/tests/portunus.nix
+++ b/nixos/tests/portunus.nix
@@ -13,6 +13,7 @@
 
   testScript = ''
     machine.wait_for_unit("portunus.service")
-    machine.succeed("curl --fail -vvv http://localhost:8080/")
+    machine.wait_for_open_port(8080)
+    machine.wait_until_succeeds("curl --fail -vvv http://localhost:8080/")
   '';
 }

From 51c3d3b0c0fe8432bdfe38f1734e549fa27c9052 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 22:01:37 +0000
Subject: [PATCH 142/146] terraform-providers.cloudamqp_cloudamqp: 1.47.0 ->
 1.48.0

---
 .../networking/cluster/terraform-providers/providers.json     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index af25b5adbe5f..64db431eb95d 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -209,11 +209,11 @@
     "vendorHash": "sha256-R3w7olc94QJuMk62bfvuM9aU+KlmNTUhojl/j9gmHjk="
   },
   "cloudamqp_cloudamqp": {
-    "hash": "sha256-UOEZK9zjHwUId86hawiWVtXAY3eGwbQIQLSmLHBbgCc=",
+    "hash": "sha256-GMfBdLUqw/3WEtZfP6ShCEwheHeUa/1EDMzIuYGalvA=",
     "homepage": "https://registry.terraform.io/providers/cloudamqp/cloudamqp",
     "owner": "cloudamqp",
     "repo": "terraform-provider-cloudamqp",
-    "rev": "v1.47.0",
+    "rev": "v1.48.0",
     "spdx": "MPL-2.0",
     "vendorHash": "sha256-hgi4CyYMNBmxAUc93uFc4J13nlgVOQNLYyLYz+rnWlM="
   },

From 96bbea5cc74ddf540827d980513a73f937f323c5 Mon Sep 17 00:00:00 2001
From: Weijia Wang <9713184+wegank@users.noreply.github.com>
Date: Tue, 8 Sep 2026 00:09:06 +0200
Subject: [PATCH 143/146] simdutf: restrict patch to version 9.1.0

---
 pkgs/by-name/si/simdutf/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/si/simdutf/package.nix b/pkgs/by-name/si/simdutf/package.nix
index 6157622c3450..542b6f7248e2 100644
--- a/pkgs/by-name/si/simdutf/package.nix
+++ b/pkgs/by-name/si/simdutf/package.nix
@@ -23,7 +23,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   # https://github.com/simdutf/simdutf/issues/1032
   # FIXME: remove in next release
-  patches = lib.optionals stdenv.hostPlatform.isLoongArch64 [
+  patches = lib.optionals (stdenv.hostPlatform.isLoongArch64 && finalAttrs.version == "9.1.0") [
     (fetchpatch2 {
       url = "https://github.com/simdutf/simdutf/commit/1f8ef080486c31cbd70db21a05a008700eb03aae.patch?full_index=1";
       hash = "sha256-p1qJFUQ4KhSSLSBIiC9se/TxrWFqywdVKNgh78TkMyE=";

From 754fa60a03871f876b49ec9ea9eafd7f58159dbd Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 22:34:34 +0000
Subject: [PATCH 144/146] webdav: 5.15.0 -> 5.15.1

---
 pkgs/by-name/we/webdav/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/we/webdav/package.nix b/pkgs/by-name/we/webdav/package.nix
index e00e1b7acaeb..4e2657c1f399 100644
--- a/pkgs/by-name/we/webdav/package.nix
+++ b/pkgs/by-name/we/webdav/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "webdav";
-  version = "5.15.0";
+  version = "5.15.1";
 
   src = fetchFromGitHub {
     owner = "hacdias";
     repo = "webdav";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-W3zvXL90I271FdapZggA6YMsqjbc6Umbqh/u5ly9FdQ=";
+    hash = "sha256-XN4GTerwdjJNmAf1gLjl/q+rmT2nBeQk3c6kX25Ij3Q=";
   };
 
   vendorHash = "sha256-k3616W8xjTCNZLCL38J4CcX272BhgpC59mUAWderIFM=";

From d9151633e30a57bad765b07dd9b13ca8ac49253d Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 22:50:58 +0000
Subject: [PATCH 145/146] terraform-providers.tencentcloudstack_tencentcloud:
 1.83.27 -> 1.83.29

---
 .../networking/cluster/terraform-providers/providers.json     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index af25b5adbe5f..433fec92e6ee 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -1328,11 +1328,11 @@
     "vendorHash": "sha256-kWwfjiWDm/voT95oxyNtCltRzeBJYR3gJo1USV0j/Uo="
   },
   "tencentcloudstack_tencentcloud": {
-    "hash": "sha256-p8DBZ2NRC5Dswf+iRSg00zBi3+mA1Y3jNKS5ikpJ1Qo=",
+    "hash": "sha256-nuzKpMtJT0y4OuSvYTKbAs1+FYTpnXnWYI9oEzdt1BM=",
     "homepage": "https://registry.terraform.io/providers/tencentcloudstack/tencentcloud",
     "owner": "tencentcloudstack",
     "repo": "terraform-provider-tencentcloud",
-    "rev": "v1.83.27",
+    "rev": "v1.83.29",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },

From 5c891ec93e9311b526b8220ff2378b5989cb9a36 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Sep 2026 23:20:13 +0000
Subject: [PATCH 146/146] shfmt: 3.14.0 -> 3.14.1

---
 pkgs/by-name/sh/shfmt/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/sh/shfmt/package.nix b/pkgs/by-name/sh/shfmt/package.nix
index e684a7940eaf..9c7ad435859c 100644
--- a/pkgs/by-name/sh/shfmt/package.nix
+++ b/pkgs/by-name/sh/shfmt/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "shfmt";
-  version = "3.14.0";
+  version = "3.14.1";
 
   src = fetchFromGitHub {
     owner = "mvdan";
     repo = "sh";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-W0/40VfqHxKsdIZQzjv3T4Vc/BVgLl9aMuwSUycvclE=";
+    hash = "sha256-taZfXF8i8Kb6RjW7tWMFfaHH8K4OE4FT+U+X0IBaj08=";
   };
 
   vendorHash = "sha256-OfdXhgPyRRifRK4CylmOqWh0qmZ80mNAhBZtqJlwPPY=";