Merge staging-next into staging

2026-09-30 20:00:10 +00:00 · 2026-09-20 00:27:50 +00:00
parent 6819cbce30 0e14e38a34
commit 9dc31ff839
119 changed files with 841 additions and 641 deletions
--- a/doc/release-notes/rl-2611.section.md
+++ b/doc/release-notes/rl-2611.section.md
@@ -66,6 +66,8 @@

 - `sing-box` has been updated to 1.14.0, which has removed some deprecated options.  See [upstream documentation](https://sing-box.sagernet.org/migration/) for details and migration options.

+- `xray` The `allowInsecure` option is no longer supported.
+
 - `gotosocial` has been updated to 0.22.0. This release contains a very long database migration, which should not be cancelled or interrupted under any circumstances.
 -  Postgres users: Following the migration, if you encounter slowdown on Postgres specifically (ie., timing out while loading timelines) you may need to run some manual database maintenance steps. Please check https://docs.gotosocial.org/en/stable/admin/database_maintenance/#postgres.

@@ -250,6 +252,10 @@

 - The fwts efi-runtime kernel module was removed.

+- `nextcloud35`: Added for the Nextcloud 35 major release.
+
+  See https://nextcloud.com/blog/nextcloud-hub26-summer/ for more details on the new major version.
+
 - `homebox` v0.26.0 introduced a new, required value to be set, `HBOX_AUTH_API_KEY_PEPPER`. If one is not provided the module will create one, it is recommended that you back this up as it is part of API Key generation and validation.

 - `nextpnr` introduced support for the nexus and gatemate architectures. Building support for each individual architecture can be configured using the package parameters.
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -31588,6 +31588,11 @@
    githubId = 72203260;
    name = "wyndon";
  };
+  wyspr = {
+    name = "wyspr";
+    github = "preprocesor";
+    githubId = 5649544;
+  };
  wyvie = {
    email = "elijahrum@gmail.com";
    github = "alicerum";
--- a/nixos/doc/manual/release-notes/rl-2611.section.md
+++ b/nixos/doc/manual/release-notes/rl-2611.section.md
@@ -381,8 +381,8 @@
  - If [`services.nextcloud.package`](#opt-services.nextcloud.package) is specified explicitly, this package will be installed (**recommended**)
  - If `system.stateVersion` is >=26.11, `pkgs.nextcloud34` will be installed by default.
  - If [`system.stateVersion`](#opt-system.stateVersion) is >=26.05, `pkgs.nextcloud33` will be installed by default.
-  - If [`system.stateVersion`](#opt-system.stateVersion) is >=25.11, `pkgs.nextcloud32` will be installed by default.
-  - Please note that Nextcloud prohibits skipping major versions while upgrading. You can upgrade to specific versions by declaring `services.nextcloud.package = pkgs.nextcloud33;`.
+  - `nextcloud32` is EOL and was thus removed.
+  - Please note that an upgrade from v32 (or older) to v34 directly is not possible. Please upgrade to `nextcloud33` (or earlier) first. Nextcloud prohibits skipping major versions while upgrading. You can upgrade by declaring `services.nextcloud.package = pkgs.nextcloud33;`.

 - `trilium-desktop` and `trilium-server` have been updated to 0.104.0. This release includes security hardening fixes that may break functionality. [See upstream release note for details](https://github.com/TriliumNext/Trilium/releases/tag/v0.104.0).

--- a/nixos/modules/services/web-apps/nextcloud.md
+++ b/nixos/modules/services/web-apps/nextcloud.md
@@ -5,7 +5,7 @@ self-hostable cloud platform. The server setup can be automated using
 [services.nextcloud](#opt-services.nextcloud.enable). A
 desktop client is packaged at `pkgs.nextcloud-client`.

-The current default by NixOS is `nextcloud34` which is also the latest
+The current default by NixOS is `nextcloud35` which is also the latest
 major version available.

 ## Basic usage {#module-services-nextcloud-basic-usage}
--- a/nixos/modules/services/web-apps/nextcloud.nix
+++ b/nixos/modules/services/web-apps/nextcloud.nix
@@ -465,9 +465,9 @@ in
      type = lib.types.package;
      description = "Which package to use for the Nextcloud instance.";
      relatedPackages = [
-        "nextcloud32"
        "nextcloud33"
        "nextcloud34"
+        "nextcloud35"
      ];
    };
    phpPackage = lib.mkPackageOption pkgs "php" {
@@ -1196,7 +1196,7 @@ in
      {
        warnings =
          let
-            latest = 34;
+            latest = 35;
            upgradeWarning = major: nixos: ''
              A legacy Nextcloud install (from before NixOS ${nixos}) may be installed.

@@ -1230,7 +1230,8 @@ in
          ++ (lib.optional (lib.versionOlder cfg.package.version "31") (upgradeWarning 30 "25.05"))
          ++ (lib.optional (lib.versionOlder cfg.package.version "32") (upgradeWarning 31 "25.11"))
          ++ (lib.optional (lib.versionOlder cfg.package.version "33") (upgradeWarning 32 "26.05"))
-          ++ (lib.optional (lib.versionOlder cfg.package.version "34") (upgradeWarning 33 "26.11"));
+          ++ (lib.optional (lib.versionOlder cfg.package.version "34") (upgradeWarning 33 "26.11"))
+          ++ (lib.optional (lib.versionOlder cfg.package.version "35") (upgradeWarning 34 "26.11"));

        services.nextcloud.package = lib.mkDefault (
          if pkgs ? nextcloud then
@@ -1246,7 +1247,7 @@ in
          else if lib.versionOlder stateVersion "26.11" then
            pkgs.nextcloud33
          else
-            pkgs.nextcloud34
+            pkgs.nextcloud35
        );

        services.nextcloud.phpOptions = lib.mkMerge [
--- a/nixos/tests/nextcloud/default.nix
+++ b/nixos/tests/nextcloud/default.nix
@@ -149,8 +149,8 @@ let
 in
 listToAttrs (
  concatMap genTests [
-    32
    33
    34
+    35
  ]
 )
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -2047,8 +2047,8 @@ let
        mktplcRef = {
          name = "gitlab-workflow";
          publisher = "gitlab";
-          version = "6.89.0";
-          hash = "sha256-KRU+nfUgnE7o08iTbSWDI01dBRiCelirXhnynpndXfQ=";
+          version = "6.90.3";
+          hash = "sha256-/6R/3FUXuvy836YeZSbw6HMrrIXdPbKqdNFBl4z36Y0=";
        };
        meta = {
          description = "GitLab extension for Visual Studio Code";
--- a/pkgs/applications/editors/vscode/extensions/google.colab/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/google.colab/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    publisher = "google";
    name = "colab";
-    version = "0.9.3";
-    hash = "sha256-zUppzF8/xyQ4ITXtm+zoAss5KWMbDxOkN0Otz+tEZEE=";
+    version = "0.9.6";
+    hash = "sha256-+Pb04QDCugRs8a4NM4VbTt2TtKXQKeNZKLtzKvn/7Ak=";
  };

  meta = {
--- a/pkgs/applications/editors/vscode/extensions/mongodb.mongodb-vscode/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/mongodb.mongodb-vscode/default.nix
@@ -4,8 +4,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "mongodb-vscode";
    publisher = "mongodb";
-    version = "1.17.0";
-    hash = "sha256-MFfB/094dp/YA2y6HbPSoPr/xVYOrqpRcBMMmZuvEMs=";
+    version = "1.17.1";
+    hash = "sha256-yoUFxyu4rgJVbSLU4BMdR4rF53DHQHw5qGFwqRw0X7I=";
  };

  meta = {
--- a/pkgs/applications/networking/browsers/brave/packages/brave-origin.nix
+++ b/pkgs/applications/networking/browsers/brave/packages/brave-origin.nix
@@ -1,21 +1,21 @@
 # Expression generated by update.py; do not edit it by hand!
 rec {
  pname = "brave-origin";
-  version = "1.95.101";
+  version = "1.95.102";
  flavor = "origin";

  archives = {
    aarch64-linux = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-origin_${version}_arm64.deb";
-      sha256 = "c8bccc15a7db38e260203ede15fe3e5bc3591b23f7f8bdfef1c18acc8ee8e540";
+      sha256 = "3869eb0a0037a399871def707016e45e1eca113a493dc78c81666cfbe1639aab";
    };
    x86_64-linux = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-origin_${version}_amd64.deb";
-      sha256 = "d0cf5a3ff164aec9fd3c8259d25cbfce44b010fe36c36096a67966e4b03d99b3";
+      sha256 = "296dab8bd88cfcf7178dac175d65acd2284046706690f64b0923d819ffc5f217";
    };
    aarch64-darwin = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/Brave-Origin-arm64.dmg";
-      sha256 = "2861104b0926036980223a502fe7b84da2517608189605072bd10333bd7061cf";
+      sha256 = "e24b7585526746c0533541eec011f20dd17980a0ad0302e848f04087f7d434d8";
    };
  };
 }
--- a/pkgs/applications/networking/browsers/brave/packages/brave.nix
+++ b/pkgs/applications/networking/browsers/brave/packages/brave.nix
@@ -1,20 +1,20 @@
 # Expression generated by update.py; do not edit it by hand!
 rec {
  pname = "brave";
-  version = "1.95.101";
+  version = "1.95.102";

  archives = {
    aarch64-linux = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_arm64.deb";
-      sha256 = "8260ff8796cc3fc8741324786cbb67ea56320f48f76700082c86c734dfd2df25";
+      sha256 = "d92e02754ec727430f530e51d8a3a51041d0df07d62589072c1a4d06bbf0037b";
    };
    x86_64-linux = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_amd64.deb";
-      sha256 = "7c41a55820117d93b821e55e55defb5f6cae8a86115c88f3a1026cd27f1c73cc";
+      sha256 = "930110fe57c83be3327388a943e9eacbcec083a3e1b4bc08bec413788418bdfe";
    };
    aarch64-darwin = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/Brave-Browser-arm64.dmg";
-      sha256 = "2deaed060d24f0809bb87332a4d75c7dd140bd38d0915b9e63791917eee3898f";
+      sha256 = "97eb5f8a17d1a0e191d3a47059e79b9fa47d3930035d10a23ad086df9e4ab1fb";
    };
  };
 }
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -218,13 +218,13 @@
    "vendorHash": "sha256-scHNFyHn4VYm8wtuBdVCpgKCzwPhzrC3KBs1YHXPwos="
  },
  "cloudflare_cloudflare": {
-    "hash": "sha256-o+p2QDCwzmhDJx1sUlFZVmZuvo0TiEM9JuLMxg6/B8Y=",
+    "hash": "sha256-F/Qkcu9XHxWrVbGVqWw2/AB1CDcY4hKm5cGDDtnsxP8=",
    "homepage": "https://registry.terraform.io/providers/cloudflare/cloudflare",
    "owner": "cloudflare",
    "repo": "terraform-provider-cloudflare",
-    "rev": "v5.24.0",
+    "rev": "v5.25.0",
    "spdx": "Apache-2.0",
-    "vendorHash": "sha256-RGloUh/lLCCfDJkPiXFfj9JdwI+OV2B/9YBelJZb4vU="
+    "vendorHash": "sha256-FGt4e+WyF5Wx3jw+U+L2kdybOnnAW/AA+mBeVbRQI0Y="
  },
  "cloudfoundry-community_cloudfoundry": {
    "hash": "sha256-1nYncJLVU/f9WD6Quh9IieIXgixPzbPk4zbtI1zmf9g=",
@@ -301,13 +301,13 @@
    "vendorHash": "sha256-KBzkbWlFM0SB+YzVU4YIaJxvQlMHalPeKPvvHh4L2kw="
  },
  "datadrivers_nexus": {
-    "hash": "sha256-t9hpZ4COmMPvs4TgcZLeuOA23oD5vvHw8UVK7SpzI0Y=",
+    "hash": "sha256-+MTyr7voagijpqTb7vswO8PAFZpxz3UWAQLEs0os4+s=",
    "homepage": "https://registry.terraform.io/providers/datadrivers/nexus",
    "owner": "datadrivers",
    "repo": "terraform-provider-nexus",
-    "rev": "v3.0.0",
+    "rev": "v3.0.1",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-DXQ8bfDLI0Wt2UXXeRXaZkgLXoYKjJ6MMNeTbZctD6E="
+    "vendorHash": "sha256-kPx/SicGbmkAu7L11WgWK3PO8M2AkUP4sdUCHOwdKbY="
  },
  "denoland_deno": {
    "hash": "sha256-7IvJrhXMeAmf8e21QBdYNSJyVMEzLpat4Tm4zHWglW8=",
@@ -1148,13 +1148,13 @@
    "vendorHash": "sha256-6M6jTrukO0VhyZRdYbbICm22upbGyOkUSuHqMLTPcEM="
  },
  "rootlyhq_rootly": {
-    "hash": "sha256-wfwqPk5D3D3PwzOfA9i6qxaAmN84MjHiNAablIX9iKg=",
+    "hash": "sha256-bn5QMl+9okXzkfZDOdbYPpMs5x0JDL22cwW6AXFkE5A=",
    "homepage": "https://registry.terraform.io/providers/rootlyhq/rootly",
    "owner": "rootlyhq",
    "repo": "terraform-provider-rootly",
-    "rev": "v5.21.0",
+    "rev": "v5.21.1",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-cJVExBKr7kWKzXnBTztNnyUsw/qeKhP+TncCPoPt2Y0="
+    "vendorHash": "sha256-2zHDQyIQQm9ySpPSjobQXTXFopT4290b1O0y+lvVD88="
  },
  "rundeck_rundeck": {
    "hash": "sha256-g8unbz8+UGLiAOJju6E2bLkygvZgHkv173PdMDefmrc=",
@@ -1355,13 +1355,13 @@
    "vendorHash": "sha256-SF11E60OQiRdf+Pf6XyJg60yGRnGOcSzhrYccrWaeYE="
  },
  "terraform-lxd_lxd": {
-    "hash": "sha256-fGiXnP8neze47FQXVCFlScya9ih67/5TQW5xKEBnI+Y=",
+    "hash": "sha256-U/x3CkUynyMvB9FWzlYgXIfC6/RWeNRV++4ceGW3Rnc=",
    "homepage": "https://registry.terraform.io/providers/terraform-lxd/lxd",
    "owner": "terraform-lxd",
    "repo": "terraform-provider-lxd",
-    "rev": "v3.0.2",
+    "rev": "v3.1.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-jOZw/va3dA0DYmnYSKbASHvyL7levjf1Bk6WelLga+Q="
+    "vendorHash": "sha256-OHCnxqn09NyqsdTCRUJseNAL1DMpvl6Icu3YEzjLgPM="
  },
  "terraform-provider-openstack_openstack": {
    "hash": "sha256-6TcyPUacJNfGsaevg1DQ+WJrMFvGeo2mmsE2+P3RAZM=",
--- a/pkgs/by-name/an/ankama-launcher/package.nix
+++ b/pkgs/by-name/an/ankama-launcher/package.nix
@@ -5,15 +5,15 @@
 }:
 let
  pname = "ankama-launcher";
-  version = "3.14.14";
+  version = "3.15.5";

  # The original URL for the launcher is:
  # https://launcher.cdn.ankama.com/installers/production/Ankama%20Launcher-Setup-x86_64.AppImage
  # As it does not encode the version, we use the wayback machine (web.archive.org) to get a fixed URL.
  # To update the client, head to web.archive.org and create a new snapshot of the download page.
  src = fetchurl {
-    url = "https://web.archive.org/web/20260605015300/https://launcher.cdn.ankama.com/installers/production/Ankama%20Launcher-Setup-x86_64.AppImage";
-    hash = "sha256-9w1ho9DZvDHXQbXjpMY1wnWDwYlMKO1igrJcCahQkVQ=";
+    url = "https://web.archive.org/web/20260909143802/https://launcher.cdn.ankama.com/installers/production/Ankama%20Launcher-Setup-x86_64.AppImage";
+    hash = "sha256-6q0kAFXtrnud8rvxN6o6mIiwklzjZYAopf1MlS3ODbU=";
  };

  appimageContents = appimageTools.extract { inherit pname version src; };
--- a/pkgs/by-name/an/anydesk/package.nix
+++ b/pkgs/by-name/an/anydesk/package.nix
@@ -37,7 +37,6 @@
  freetype,
  fontconfig,
  polkit,
-  polkit_gnome,
  pciutils,
  copyDesktopItems,
  pulseaudio,
@@ -86,7 +85,6 @@ stdenv.mkDerivation (finalAttrs: {
    freetype
    fontconfig
    polkit
-    polkit_gnome
    pulseaudio
    libxcb
    libxkbfile
--- a/pkgs/by-name/as/asphyxia/package.nix
+++ b/pkgs/by-name/as/asphyxia/package.nix
@@ -0,0 +1,45 @@
+{
+  lib,
+  fetchFromGitHub,
+  libpcap,
+  nix-update-script,
+  pkg-config,
+  rustPlatform,
+  versionCheckHook,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "asphyxia";
+  version = "0.10.0";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "jtprogru";
+    repo = "asphyxia";
+    tag = finalAttrs.version;
+    hash = "sha256-XjpGhdHYzTCFtQ2W9KD8VY7RSvQPPgbxJD80GIAaKFM=";
+  };
+
+  cargoHash = "sha256-lOH8mrZiauXoI7jYFHQ/klo9enS0aOixk5b6InUED2o=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [ libpcap ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  __darwinAllowLocalNetworking = true;
+
+  meta = {
+    description = "Parallel network scanner";
+    homepage = "https://github.com/jtprogru/asphyxia";
+    changelog = "https://github.com/jtprogru/asphyxia/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "asphyxia";
+  };
+})
--- a/pkgs/by-name/b6/b612/package.nix
+++ b/pkgs/by-name/b6/b612/package.nix
@@ -19,7 +19,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
  nativeBuildInputs = [ installFonts ];

  meta = {
-    homepage = "https://b612-font.com/";
+    homepage = "https://projects.eclipse.org/projects/polarsys.b612";
    description = "Highly legible font family for use on aircraft cockpit screens";
    longDescription = ''
      B612 is the result of a research project initiated by Airbus. The font
--- a/pkgs/by-name/bb/bbedit/package.nix
+++ b/pkgs/by-name/bb/bbedit/package.nix
@@ -34,7 +34,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
    description = "Powerful and full-featured professional HTML and text editor for macOS";
    homepage = "https://www.barebones.com/products/bbedit/";
    license = lib.licenses.unfree;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ iedame ];
    platforms = lib.platforms.darwin;
    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
  };
--- a/pkgs/by-name/ca/calibre-web/package.nix
+++ b/pkgs/by-name/ca/calibre-web/package.nix
@@ -37,7 +37,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
    mv cps src/calibreweb

    substituteInPlace pyproject.toml \
-      --replace-fail 'cps = "calibreweb.__main__:main"' 'calibre-web = "calibreweb.__main__:main"'
+      --replace-fail 'cps = "calibreweb.__main__:main"' 'calibre-web = "calibreweb:main"'
  '';

  build-system = [ python3Packages.setuptools ];
--- a/pkgs/by-name/cl/clojure-lsp/package.nix
+++ b/pkgs/by-name/cl/clojure-lsp/package.nix
@@ -9,11 +9,11 @@

 buildGraalvmNativeImage (finalAttrs: {
  pname = "clojure-lsp";
-  version = "2026.02.20-16.08.58";
+  version = "2026.07.06-14.34.19";

  src = fetchurl {
    url = "https://github.com/clojure-lsp/clojure-lsp/releases/download/${finalAttrs.version}/clojure-lsp-standalone.jar";
-    hash = "sha256-sSE/BIRT5CNc2ZS3LwSMLvQDVKLMlM1BIhKq6joX3c8=";
+    hash = "sha256-GU92OeKzKm42Qy+6fMSpsSj0WInSrQVyVVFSPxZNaEY=";
  };

  strictDeps = true;
--- a/pkgs/by-name/co/codex/package.nix
+++ b/pkgs/by-name/co/codex/package.nix
@@ -29,18 +29,18 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "codex";
-  version = "0.154.0";
+  version = "0.155.1";

  src = fetchFromGitHub {
    owner = "openai";
    repo = "codex";
    tag = "rust-v${finalAttrs.version}";
-    hash = "sha256-Nm+61N6YHxGhjLsm/giVSEg4QvJmIgWxyTQ1L89kpCs=";
+    hash = "sha256-iFW66odceRNBsVG5bD9SdcQGxhpm/QIZwYjGCrfMXiI=";
  };

  sourceRoot = "${finalAttrs.src.name}/codex-rs";

-  cargoHash = "sha256-9F8dyEiVkhelrIyfQ9ZkvuxfIYNN6akbpadREa4A1n0=";
+  cargoHash = "sha256-6IAX/SFSSgSKKFxKsUXoZ9nNQaHJ+EjZ5a4bJwyDdF0=";

  __structuredAttrs = true;

--- a/pkgs/by-name/co/cogitator/package.nix
+++ b/pkgs/by-name/co/cogitator/package.nix
@@ -0,0 +1,64 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  nix-update-script,
+  openssl,
+  pkg-config,
+  rustPlatform,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "cogitator";
+  version = "0.7.0";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "LeechoShoop";
+    repo = "cogitator";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-1v7OXCgjvTrFhSpGgnnfre2oSfSldKj52xSJq/6YtiU=";
+  };
+
+  cargoHash = "sha256-FJP5Gg8EvfTxms7mX9J6wW9HM3nYAxILUS1Oj7iedn4=";
+
+  # netstat2 0.9.1's glob imports of libc and its own ffi types are ambiguous
+  # with newer libc versions that now define __be16/tcp_info themselves
+  postPatch = ''
+        netstat2Dir="../${finalAttrs.pname}-${finalAttrs.version}-vendor/source-registry-0/netstat2-0.9.1/src/integrations/linux"
+        substituteInPlace "$netstat2Dir/ffi/structs.rs" \
+          --replace-fail \
+            'use crate::integrations::linux::ffi::types::*;' \
+            'use crate::integrations::linux::ffi::types::*;
+    use crate::integrations::linux::ffi::types::__be16;'
+        substituteInPlace "$netstat2Dir/netlink_iterator.rs" \
+          --replace-fail \
+            '*const tcp_info' \
+            '*const crate::integrations::linux::ffi::tcp_info'
+  '';
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [ openssl ];
+
+  checkFlagsArray = [
+    # Tests are broken
+    "--skip=proxy_guard::tests::relative_uri_no_host_header_falls_back_to_tunnel_host"
+    "--skip=spider::tests::audit_html_flags_potential_token_leak_without_panicking"
+  ];
+
+  postInstall = lib.optionalString (!stdenv.hostPlatform.isDarwin) ''
+    mv $out/bin/Cogitator $out/bin/$pname
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Terminal TLS MITM intercepting proxy and web security toolkit";
+    homepage = "https://github.com/LeechoShoop/cogitator";
+    changelog = "https://github.com/LeechoShoop/cogitator/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "cogitator";
+  };
+})
--- a/pkgs/by-name/cr/crack-hash/package.nix
+++ b/pkgs/by-name/cr/crack-hash/package.nix
@@ -0,0 +1,38 @@
+{
+  lib,
+  fetchFromGitHub,
+  nix-update-script,
+  rustPlatform,
+  versionCheckHook,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "crack-hash";
+  version = "1.1.0-unstable-2025-12-31";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "kOaDT";
+    repo = "crack-hash";
+    # https://github.com/kOaDT/crack-hash/issues/2
+    rev = "887bedec144b59488b93dbe33a6f781f83360ea7";
+    hash = "sha256-h2NEuyEX5JEpSmtT7Pn/TJkKeMx+dupLQo4iLHcw3AY=";
+  };
+
+  cargoHash = "sha256-mD/3pWY8jf8QCgtYYtPxyVD6SheYi76tNhoJ4uyJ0WU=";
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  doInstallCheck = false;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Hash cracking tool";
+    homepage = "https://github.com/kOaDT/crack-hash";
+    # https://github.com/kOaDT/crack-hash/issues/1
+    license = lib.licenses.unfree;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "crack-hash";
+  };
+})
--- a/pkgs/by-name/cr/crun/package.nix
+++ b/pkgs/by-name/cr/crun/package.nix
@@ -15,11 +15,23 @@
  nixosTests,
  criu,
  versionCheckHook,
+  wamr,
+  wasmedge,
+  wasmer,
+  wasmtime,
  withLibkrun ? lib.meta.availableOn stdenv.hostPlatform libkrun,
  withLibkrunSEV ? false,
+  withWamr ? false,
+  withWasmedge ? false,
+  withWasmer ? false,
+  withWasmtime ? false,
 }:

 let
+  wamrShared = wamr.overrideAttrs (old: {
+    cmakeFlags = (old.cmakeFlags or [ ]) ++ [ "-DBUILD_SHARED_LIBS=ON" ];
+  });
+
  # these tests require additional permissions
  disabledTests = [
    "test_capabilities.py"
@@ -80,17 +92,44 @@ stdenv.mkDerivation (finalAttrs: {
  ]
  ++ lib.optionals withLibkrunSEV [
    libkrun-sev
+  ]
+  ++ lib.optionals withWasmtime [
+    wasmtime.dev
+    wasmtime.lib
+  ]
+  ++ lib.optionals withWasmedge [
+    wasmedge
+  ]
+  ++ lib.optionals withWamr [
+    wamrShared
+  ]
+  ++ lib.optionals withWasmer [
+    wasmer
  ];

-  configureFlags = lib.optionals withLibkrun [
-    "--with-libkrun"
-  ];
+  configureFlags =
+    lib.optionals withLibkrun [
+      "--with-libkrun"
+    ]
+    ++ lib.optionals withWamr [
+      "--with-wamr"
+    ]
+    ++ lib.optionals withWasmedge [
+      "--with-wasmedge"
+    ]
+    ++ lib.optionals withWasmer [
+      "--with-wasmer"
+    ]
+    ++ lib.optionals withWasmtime [
+      "--with-wasmtime"
+    ];

  enableParallelBuilding = true;
  strictDeps = true;

  env = {
-    NIX_LDFLAGS = "-lcriu";
+    # wamr.c calls two functions directly instead of via dlsym (upstream bug)
+    NIX_LDFLAGS = "-lcriu" + lib.optionalString withWamr " -liwasm";
  };

  # we need this before autoreconfHook does its thing in order to initialize
@@ -110,6 +149,22 @@ stdenv.mkDerivation (finalAttrs: {
  + lib.optionalString withLibkrunSEV ''
    substituteInPlace src/libcrun/handlers/krun.c \
      --replace-fail '"libkrun-sev.so.1"' '"${libkrun-sev}/lib/libkrun-sev.so.1"'
+  ''
+  + lib.optionalString withWamr ''
+    substituteInPlace src/libcrun/handlers/wamr.c \
+      --replace-fail '"libiwasm.so"' '"${wamrShared}/lib/libiwasm.so"'
+  ''
+  + lib.optionalString withWasmedge ''
+    substituteInPlace src/libcrun/handlers/wasmedge.c \
+      --replace-fail '"libwasmedge.so.0"' '"${wasmedge}/lib/libwasmedge.so.0"'
+  ''
+  + lib.optionalString withWasmer ''
+    substituteInPlace src/libcrun/handlers/wasmer.c \
+      --replace-fail '"libwasmer.so"' '"${wasmer}/lib/libwasmer.so"'
+  ''
+  + lib.optionalString withWasmtime ''
+    substituteInPlace src/libcrun/handlers/wasmtime.c \
+      --replace-fail '"libwasmtime.so"' '"${wasmtime.lib}/lib/libwasmtime.so"'
  '';

  doCheck = true;
--- a/pkgs/by-name/da/datafusion-cli/package.nix
+++ b/pkgs/by-name/da/datafusion-cli/package.nix
@@ -8,17 +8,17 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "datafusion-cli";
-  version = "55.0.0";
+  version = "55.1.0";

  src = fetchFromGitHub {
    name = "datafusion-cli-source";
    owner = "apache";
    repo = "datafusion";
    tag = finalAttrs.version;
-    hash = "sha256-wP63vXcMuxoZzoQVGorSjjGUdRa8z8z9oB7Y8HApDYE=";
+    hash = "sha256-wUrGYaZ5MXP4uIg1n+QmW+5Q+BFDUOnX8IbgWTeY3vw=";
  };

-  cargoHash = "sha256-D6kmXzKb9VFGkxKahQdWZXFAAN4klpmTgKIsgrTnKmg=";
+  cargoHash = "sha256-oZ184w5lAvK4OL7MKR3d51/b9EWxCrXeRQUqUSwiGig=";

  buildAndTestSubdir = "datafusion-cli";

--- a/pkgs/by-name/de/defuddle/package.nix
+++ b/pkgs/by-name/de/defuddle/package.nix
@@ -18,10 +18,6 @@ buildNpmPackage rec {

  npmDepsHash = "sha256-BxGIVt2gkNQkWXQyLnPQQAtCNFJKlXmTctKVAxFzjfM=";

-  # jsdom is both a peerDependency and devDependency; pruning
-  # devDependencies removes it, but the CLI needs it at runtime.
-  dontNpmPrune = true;
-
  passthru.updateScript = nix-update-script { };

  __structuredAttrs = true;
--- a/pkgs/by-name/dm/dms-shell/package.nix
+++ b/pkgs/by-name/dm/dms-shell/package.nix
@@ -85,7 +85,7 @@ buildGoModule (
      install -D ${finalAttrs.src}/assets/com.danklinux.dms.notepad.desktop \
        $out/share/applications/com.danklinux.dms.notepad.desktop
      install -D ${finalAttrs.src}/core/assets/danklogo.svg \
-        $out/share/hicolor/scalable/apps/danklogo.svg
+        $out/share/icons/hicolor/scalable/apps/danklogo.svg

      wrapProgram $out/bin/dms \
        --run 'export DMS_ORIG_NIXPKGS_QT6_QML_IMPORT_PATH="''${NIXPKGS_QT6_QML_IMPORT_PATH:-}"' \
--- a/pkgs/by-name/do/docker-sbx/package.nix
+++ b/pkgs/by-name/do/docker-sbx/package.nix
@@ -15,9 +15,9 @@
 }:
 let
  hashes = {
-    "x86_64-linux" = "sha256-LsRbx5OMIML0Bv6MxyKUrVqVS9wEdgFIS4m/GhCDEdQ=";
-    "aarch64-linux" = "sha256-OcRwpfXgmRscI1iVLiqzKnsDCb+lesYra7xktGbQLBc=";
-    "aarch64-darwin" = "sha256-0S+gau7OKY2W2uBYEB8lZTd3CgDvRuZYR2Lg8nsGpaM=";
+    "x86_64-linux" = "sha256-PrFbhETpaaqo1jclC+8PK/kMsDCroKcBala45fzdJf4=";
+    "aarch64-linux" = "sha256-Ma46iMwIN0PllWn+3WofUns73WxWfVjlvGDGwK8ZpUA=";
+    "aarch64-darwin" = "sha256-6fybO66cVyilcm9JubNgkyhRnaV288mf2Ofl0TcAinw=";
  };
  platformName = {
    "x86_64-linux" = "linux-amd64";
@@ -27,7 +27,7 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "docker-sbx";
-  version = "0.39.0";
+  version = "0.43.0";
  src =
    let
      throwPlat = throw "Unsupported platform ${stdenvNoCC.hostPlatform.system}";
--- a/pkgs/by-name/do/dovi-tool/package.nix
+++ b/pkgs/by-name/do/dovi-tool/package.nix
@@ -17,16 +17,16 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "dovi-tool";
-  version = "2.3.3";
+  version = "2.3.4";

  src = fetchFromGitHub {
    owner = "quietvoid";
    repo = "dovi_tool";
    tag = finalAttrs.version;
-    hash = "sha256-oXHXt1u1zxWti22tT4nJQhVdCtIshKrlve8896QQg84=";
+    hash = "sha256-CDAyfW3Yed9Vxn7f0XE1kLOPQrvH1IIvz7MSE8YSZ5Y=";
  };

-  cargoHash = "sha256-rJw9fEZ696N8xsFXCL5GWIuLYPXKp2K0WqFxbM1iGiw=";
+  cargoHash = "sha256-x9WS7XLljDkePC4TXegT8invNxB+SVtBw/xC0Iw51VE=";

  nativeBuildInputs = lib.optionals (!stdenv.hostPlatform.isDarwin) [
    pkg-config
--- a/pkgs/by-name/ed/editorconfig-checker/package.nix
+++ b/pkgs/by-name/ed/editorconfig-checker/package.nix
@@ -9,16 +9,16 @@

 buildGoModule (finalAttrs: {
  pname = "editorconfig-checker";
-  version = "4.0.1";
+  version = "4.0.2";

  src = fetchFromGitHub {
    owner = "editorconfig-checker";
    repo = "editorconfig-checker";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-7mqmDyyDs+BzCLXF6AiDS/uCUXgLf0ImRkqgR/OZ9DY=";
+    hash = "sha256-clahBJTjfUIMn4D6OxZDXtQ+nnjuExQsuxI/lp0AYrs=";
  };

-  vendorHash = "sha256-/0SKWWZpCWWHKZqz1ZC+LbkXf6iow8LUT0Yg101tGs8=";
+  vendorHash = "sha256-DufIXNRFuQ+qymKeAaPNB4j8CS6M1FU3p8V9sPOWmCI=";

  # Tests run on source and don't expect vendor dir.
  doCheck = false;
--- a/pkgs/by-name/el/electron-cash/package.nix
+++ b/pkgs/by-name/el/electron-cash/package.nix
@@ -9,14 +9,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "electron-cash";
-  version = "4.4.2";
+  version = "4.4.6";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Electron-Cash";
    repo = "Electron-Cash";
    tag = version;
-    sha256 = "sha256-hqaPxetS6JONvlRMjNonXUGFpdmnuadD00gcPzY07x0=";
+    sha256 = "sha256-uzYkkth38PaAz8EULh1qwdY6/NxOW7xtjW2tmYyMC1Q=";
  };

  build-system = with python3Packages; [
@@ -80,7 +80,7 @@ python3Packages.buildPythonApplication rec {
    substituteInPlace setup.py \
      --replace-fail "(share_dir" '("share"'
    substituteInPlace electroncash/secp256k1.py \
-      --replace-fail "libsecp256k1.so.0" "${secp256k1}/lib/libsecp256k1.so.5"
+      --replace-fail "libsecp256k1.so.0" "${secp256k1}/lib/libsecp256k1.so"
    substituteInPlace contrib/requirements/requirements.txt \
      --replace-fail "python-dateutil<2.9" "python-dateutil<2.10"
  '';
--- a/pkgs/by-name/el/element-call/package.nix
+++ b/pkgs/by-name/el/element-call/package.nix
@@ -58,20 +58,20 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "element-call";
-  version = "0.25.0";
+  version = "0.26.0";

  src = fetchFromGitHub {
    owner = "element-hq";
    repo = "element-call";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Nbb+ob16I3rHQ8BEN041nmQItHDBoakB3SojD0tCy9w=";
+    hash = "sha256-QAgYeWV37VtEnvoDvqEAqXoR1mRVVpyA4XqCPEXGSGk=";
  };

  pnpmDeps = fetchPnpmDeps {
    inherit (finalAttrs) pname version src;
    inherit pnpm;
    fetcherVersion = 4;
-    hash = "sha256-/yGajAaFupPmL1/HL2qMGdpG8l0kP5t5iwb0/u2ANi8=";
+    hash = "sha256-0ZBSIIfZwxgtEGvedEEc7bbod2UUeFGGqquJna7cr8s=";
  };

  inherit matrix-js-sdk;
--- a/pkgs/by-name/fi/filezilla/package.nix
+++ b/pkgs/by-name/fi/filezilla/package.nix
@@ -23,13 +23,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "filezilla";
-  version = "3.70.6";
+  version = "3.71.1";

  src = fetchurl {
    # Upstream download link was made unstable on purpose
    # See https://trac.filezilla-project.org/ticket/13186
    url = "https://sources.archlinux.org/other/filezilla/filezilla-${finalAttrs.version}.tar.xz";
-    hash = "sha256-PdJCWpf5bbjMiyEuG2BdeVEljj2jJ5yQEHq/SmqJyD8=";
+    hash = "sha256-Pfm5s+Wyw33G2ey4g1VKuhQKAuxHw9a1IzO/FzOvTaQ=";
  };

  configureFlags = [
--- a/pkgs/by-name/fi/firewalld/package.nix
+++ b/pkgs/by-name/fi/firewalld/package.nix
@@ -43,7 +43,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "firewalld";
-  version = "2.5.1";
+  version = "2.5.2";

  __structuredAttrs = true;
  strictDeps = true;
@@ -52,7 +52,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "firewalld";
    repo = "firewalld";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-fwVRGA8IBwxVc7keo8Yv9qMwv1+PwC6IViD04mQQcug=";
+    hash = "sha256-LKwjponEBNhCtTifeJQQrWP+1vdpaiH1UhriUCAljBE=";
  };

  patches = [
--- a/pkgs/by-name/fz/fzssh/package.nix
+++ b/pkgs/by-name/fz/fzssh/package.nix
@@ -19,14 +19,14 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "fzssh";
-  version = "1.3.0";
+  version = "1.4.0";
  __structuredAttrs = true;

  src = fetchurl {
    # Upstream download link was made unstable on purpose
    # See https://trac.filezilla-project.org/ticket/13186
    url = "https://sources.archlinux.org/other/packages/fzssh/fzssh-${finalAttrs.version}.tar.xz";
-    hash = "sha256-hkWCsgNyZYi1oW2GFB/5Wrd9I5l2L+u+H97ZLk8EeZY=";
+    hash = "sha256-DFMXgpg2RATh/kzj1QJnzxI45StBSmpTNWvEOzeBEzg=";
  };

  strictDeps = true;
@@ -54,7 +54,7 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "https://lib.filezilla-project.org/";
    description = "SSH/SFTP library based on libfilezilla";
    license = lib.licenses.gpl3Plus;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ iedame ];
    pkgConfigModules = [ "libfzssh-client" ];
  };
 })
--- a/pkgs/by-name/gc/gcr_3/package.nix
+++ b/pkgs/by-name/gc/gcr_3/package.nix
@@ -88,6 +88,9 @@ stdenv.mkDerivation (finalAttrs: {
  ]
  ++ lib.optionals (!systemdSupport) [
    "-Dsystemd=disabled"
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isMusl [
+    "-Dc_args=-D_GNU_SOURCE"
  ];

  doCheck = false; # fails 21 out of 603 tests, needs dbus daemon
--- a/pkgs/by-name/go/goverlay/package.nix
+++ b/pkgs/by-name/go/goverlay/package.nix
@@ -32,13 +32,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "goverlay";
-  version = "1.9.0";
+  version = "1.9.2";

  src = fetchFromGitHub {
    owner = "benjamimgois";
    repo = "goverlay";
    tag = finalAttrs.version;
-    hash = "sha256-Il2EtcTLswmhQhIZ8lcOWqryoqvSNXZ3b1FiJPv85M8=";
+    hash = "sha256-gU2jgmjPP1H9aqBVSz+M/ZkHa0TqzS1fAcgQr5EU/8o=";
  };

  outputs = [
@@ -77,6 +77,10 @@ stdenv.mkDerivation (finalAttrs: {

  doCheck = true;

+  nativeCheckInputs = [
+    curl
+  ];
+
  checkPhase = ''
    # test-logic
    HOME=$(mktemp -d) lazbuild --lazarusdir=${lazarus-qt6}/share/lazarus -B tests/logic/logic_tests.lpi --widgetset=qt6
@@ -87,15 +91,6 @@ stdenv.mkDerivation (finalAttrs: {
      ]
    }
    ./tests/logic/logic_tests
-    # test-gui
-    HOME=$(mktemp -d) lazbuild --lazarusdir=${lazarus-qt6}/share/lazarus -B tests/gui/gui_tests.lpi --widgetset=qt6
-    patchelf ./tests/gui/gui_tests --set-rpath ${
-      lib.makeLibraryPath [
-        libx11
-        qt6Packages.libqtpas
-      ]
-    }
-    QT_QPA_PLATFORM=offscreen ./tests/gui/gui_tests
  '';

  preFixup = ''
--- a/pkgs/by-name/je/jellyfin-mpv-shim/package.nix
+++ b/pkgs/by-name/je/jellyfin-mpv-shim/package.nix
@@ -10,14 +10,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "jellyfin-mpv-shim";
-  version = "2.10.0";
+  version = "3.0.0";
  pyproject = true;

  # contains shaderpacks
  src = fetchPypi {
    pname = "jellyfin_mpv_shim";
    inherit version;
-    hash = "sha256-ZWmJQJAGAonStZyWww4P+034f2vGnTwLua7KUOqoBBE=";
+    hash = "sha256-K4dmJ7/aNsxEWKLXY8RNvszmA8FstzD/Kh7M0wkU/Rs=";
  };

  nativeBuildInputs = [
@@ -34,10 +34,9 @@ python3Packages.buildPythonApplication rec {
    python-mpv-jsonipc
    requests

-    # gui + mirror dependencies
+    # gui dependencies
    pillow
    pystray
-    tkinter

    # discord rich presence dependency
    pypresence
--- a/pkgs/by-name/jo/joplin-cli/package.nix
+++ b/pkgs/by-name/jo/joplin-cli/package.nix
@@ -113,11 +113,11 @@ stdenv.mkDerivation (finalAttrs: {
    rm -rf $out/lib/packages/lib/node_modules/canvas

    # Remove extra files
-    rm -rf $out/lib/packages/app-cli/{app/*.test.ts,*.md,.*ignore,tests/,tools/,*.js,*.json,*.sh}
+    rm -rf $out/lib/packages/app-cli/{app/,*.md,.*ignore,tests/,tools/,*.js,tsconfig.json,*.sh}

    # Link final binary
-    chmod +x $out/lib/packages/app-cli/app/main.js
-    ln -s $out/lib/packages/app-cli/app/main.js $out/bin/joplin
+    chmod +x $out/lib/packages/app-cli/build/main.js
+    ln -s $out/lib/packages/app-cli/build/main.js $out/bin/joplin
    patchShebangs $out/bin/joplin

    runHook postInstall
--- a/pkgs/applications/networking/cluster/kubectl-view-allocations/default.nix
+++ b/pkgs/applications/networking/cluster/kubectl-view-allocations/default.nix
@@ -6,14 +6,16 @@
  versionCheckHook,
 }:

-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
  pname = "kubectl-view-allocations";
  version = "3.0.2";

+  __structuredAttrs = true;
+
  src = fetchFromGitHub {
    owner = "davidB";
    repo = "kubectl-view-allocations";
-    tag = version;
+    tag = finalAttrs.version;
    hash = "sha256-/rtHY5vgurdl9BviyLdZ/8Rii4OCRTZYRl8OXriD8NM=";
  };

@@ -29,4 +31,4 @@ rustPlatform.buildRustPackage rec {
    maintainers = with lib.maintainers; [ mrene ];
    platforms = lib.platforms.unix;
  };
-}
+})
--- a/pkgs/by-name/li/libation/deps.json
+++ b/pkgs/by-name/li/libation/deps.json
@@ -11,8 +11,8 @@
  },
  {
    "pname": "AudibleApi",
-    "version": "14.1.0",
-    "hash": "sha256-F5cc22t2pPKzVuTgtucwqYiuW3OHGiuB5DiAw5P3q1A="
+    "version": "14.1.2",
+    "hash": "sha256-eKBIjV1K2iaDt29ioY2NmLs7bv8JbUCxe4EtF4+eYqw="
  },
  {
    "pname": "Avalonia",
@@ -136,13 +136,13 @@
  },
  {
    "pname": "Dinah.Core",
-    "version": "11.0.0.1",
-    "hash": "sha256-Gx2t4FJYHgjf99jQ0W7f7MiWW+PhnO2rnOcqNZS4aLc="
+    "version": "11.0.1.1",
+    "hash": "sha256-gsr1DSNh/wOYaW3CgJZDFEjFDEc30XwKr3WoG4WQYUM="
  },
  {
    "pname": "Dinah.EntityFrameworkCore",
-    "version": "11.0.0.1",
-    "hash": "sha256-lQoLY2rXypMS6C2LBHTVYjIyfK395guFG0ln5ylUhW0="
+    "version": "11.0.1.1",
+    "hash": "sha256-wbqRL1dPobNmTTxfHFdqK6cX6QTsRZUDvDXtk1ikMNo="
  },
  {
    "pname": "DocumentFormat.OpenXml",
--- a/pkgs/by-name/li/libation/package.nix
+++ b/pkgs/by-name/li/libation/package.nix
@@ -17,13 +17,13 @@

 buildDotnetModule rec {
  pname = "libation";
-  version = "14.2.0";
+  version = "14.2.2";

  src = fetchFromGitHub {
    owner = "rmcrackan";
    repo = "Libation";
    tag = "v${version}";
-    hash = "sha256-uTVKxMaYhcqWHSx21OIPqX2cIvfnEGiUKk4X1vfAF5s=";
+    hash = "sha256-IP3q8n5Bt3fjujkkFfUa3KhM8O5KA5AVAQJkPbwTHvg=";
  };

  sourceRoot = "${src.name}/Source";
--- a/pkgs/by-name/li/libretroPackages/cores/flycast.nix
+++ b/pkgs/by-name/li/libretroPackages/cores/flycast.nix
@@ -8,13 +8,13 @@
 }:
 mkLibretroCore {
  core = "flycast";
-  version = "0-unstable-2026-09-04";
+  version = "0-unstable-2026-09-15";

  src = fetchFromGitHub {
    owner = "flyinghead";
    repo = "flycast";
-    rev = "d8a76809e57027da36d88bafb670983541de5ba1";
-    hash = "sha256-YMwaZwMac6mBRcZ//3gXnirewzPRbksFFBb51BkSAWY=";
+    rev = "8933f9fe0ccd3f7cbe2e77717ea3a6db8b472129";
+    hash = "sha256-6XBCWmyVRSbfAbaxvFpe6/39kPYrqvefsjebXZu7yuY=";
    fetchSubmodules = true;
  };

--- a/pkgs/by-name/li/libretroPackages/cores/snes9x2010.nix
+++ b/pkgs/by-name/li/libretroPackages/cores/snes9x2010.nix
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore rec {
  core = "snes9x2010";
-  version = "0-unstable-2026-08-16";
+  version = "0-unstable-2026-09-13";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "snes9x2010";
-    rev = "7db129b1ecdccb38cb4d7184bcbed39beed79656";
-    hash = "sha256-KvUseE8hYMv8W73gBYgzoFq5wklHHzU7B1DttBQS+yQ=";
+    rev = "38fe97c000ac3f2ea92e929dc24c25fcec0bc567";
+    hash = "sha256-9Iu5v9Vd7iiqeBhE4VM57tslgU0Ldk80hB08uLV3D0U=";
  };

  makeFlags = [ "GIT_VERSION=${builtins.substring 0 7 src.rev}" ];
--- a/pkgs/by-name/li/linecast/package.nix
+++ b/pkgs/by-name/li/linecast/package.nix
@@ -4,11 +4,12 @@
  fetchFromGitHub,
  nix-update-script,
  versionCheckHook,
+  bashInteractive,
 }:

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "linecast";
-  version = "2.3.3";
+  version = "2.6.1";
  pyproject = true;
  __structuredAttrs = true;

@@ -16,7 +17,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
    owner = "ashuttl";
    repo = "linecast";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-4ddHtUpmRw/ed56WwjTrZL/3W6sKqUYbzAN3lL7XAy8=";
+    hash = "sha256-Z8aO32j2em2ctW2cEv5Xxo4rc9gS8dDH8GMYx1yiEps=";
  };

  build-system = [
@@ -34,6 +35,7 @@ python3Packages.buildPythonApplication (finalAttrs: {

  nativeCheckInputs = [
    python3Packages.pytestCheckHook
+    bashInteractive
  ];

  nativeInstallCheckInputs = [ versionCheckHook ];
--- a/pkgs/by-name/li/liteparse/package.nix
+++ b/pkgs/by-name/li/liteparse/package.nix
@@ -64,14 +64,14 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "liteparse";
-  version = "2.14.2";
+  version = "2.14.4";
  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "run-llama";
    repo = "liteparse";
    tag = "crates-v${finalAttrs.version}";
-    hash = "sha256-57orag1GemhqlGVDGWDLyer9H53xR8pBoOnMHIyEBz0=";
+    hash = "sha256-E8SjKTw9yCQWKRzwszPneGg74s9CG6wglekeZzH9tNQ=";
  };

  postPatch = ''
@@ -106,7 +106,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
    tesseract
  ];

-  cargoHash = "sha256-EfZOu8aAi1S/hnmvzMZfreHxyeI25ul/OBKrhionJ+o=";
+  cargoHash = "sha256-JaETOf3tRlrr39WyVo2R/IyHZ/qFubk04CNLKdzbebQ=";
  cargoBuildFlags = [
    "--package"
    "liteparse"
--- a/pkgs/by-name/ll/llmfit/package.nix
+++ b/pkgs/by-name/ll/llmfit/package.nix
@@ -2,6 +2,7 @@
  lib,
  rustPlatform,
  fetchFromGitHub,
+  versionCheckHook,
  nix-update-script,
 }:

@@ -9,6 +10,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
  pname = "llmfit";
  version = "1.1.10";

+  __structuredAttrs = true;
+
  src = fetchFromGitHub {
    owner = "AlexsJones";
    repo = "llmfit";
@@ -18,6 +21,9 @@ rustPlatform.buildRustPackage (finalAttrs: {

  cargoHash = "sha256-1lK/zNcSei/DRInfl2I3EanmuXk0LqRVyFF7G3bJPXU=";

+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
  passthru.updateScript = nix-update-script { };

  meta = {
--- a/pkgs/by-name/ma/maestro/package.nix
+++ b/pkgs/by-name/ma/maestro/package.nix
@@ -10,11 +10,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "maestro";
-  version = "2.8.0";
+  version = "2.10.0";

  src = fetchurl {
    url = "https://github.com/mobile-dev-inc/maestro/releases/download/cli-${finalAttrs.version}/maestro.zip";
-    hash = "sha256-s+VhFhkE+zkYdcpYNNWyLPCwHAUt0bQIrYPjDY+JUbM=";
+    hash = "sha256-KbZ14QzBIIDkRem/suK05N+5wPLjDViEEg0li14c2ZE=";
  };

  dontUnpack = true;
--- a/pkgs/by-name/ma/mautrix-gmessages/package.nix
+++ b/pkgs/by-name/ma/mautrix-gmessages/package.nix
@@ -16,17 +16,17 @@

 buildGoModule rec {
  pname = "mautrix-gmessages";
-  version = "26.08";
-  tag = "v0.2608.0";
+  version = "26.09";
+  tag = "v0.2609.0";

  src = fetchFromGitHub {
    owner = "mautrix";
    repo = "gmessages";
    inherit tag;
-    hash = "sha256-wqjc074zKHkgqFcnBPFmR36xE5CVzRvupF3AdlQ0Lwk=";
+    hash = "sha256-xIPH/IqnxfyeCaW/9utpN+SPZRkEp5KyabwjT8PsMUI=";
  };

-  vendorHash = "sha256-UL7YxLF/DMwkGP8TEaN48wYGrlfBYHSZQqc7UqdhDKE=";
+  vendorHash = "sha256-fCu/cJoQdWZHAYgfYtGj+sxeJ9P6br7BinJiMkX5vk8=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/ma/mautrix-meta/package.nix
+++ b/pkgs/by-name/ma/mautrix-meta/package.nix
@@ -15,8 +15,8 @@

 buildGoModule rec {
  pname = "mautrix-meta";
-  version = "26.08.1";
-  tag = "v0.2608.1";
+  version = "26.09";
+  tag = "v0.2609.0";

  subPackages = [
    "cmd/mautrix-meta"
@@ -27,13 +27,13 @@ buildGoModule rec {
    owner = "mautrix";
    repo = "meta";
    inherit tag;
-    hash = "sha256-xTfbLtQ1lo6ukWlGjNwjxYaLMod6hljhQEcwdSgoBcQ=";
+    hash = "sha256-HTvdg1Bhwvo3Pm7jpugf8x//6OrPaDUa39mdN2Ct1vM=";
  };

  buildInputs = lib.optional (!withGoolm) olm;
  tags = lib.optional withGoolm "goolm";

-  vendorHash = "sha256-CCGF13D0QO2GAE+kN/7xl924rSloqikDoGPr00clofI=";
+  vendorHash = "sha256-Eh+2TLSnOmhteWPzzUQIgOI380UNNV38fvTjb+qYDDM=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/mi/minecraft-server/versions.json
+++ b/pkgs/by-name/mi/minecraft-server/versions.json
@@ -1,4 +1,10 @@
 {
+  "26.3": {
+    "sha1": "33680f5f2ac32864d6d7cf5e56a705fdb3e05f4c",
+    "url": "https://piston-data.mojang.com/v1/objects/33680f5f2ac32864d6d7cf5e56a705fdb3e05f4c/server.jar",
+    "version": "26.3",
+    "javaVersion": 25
+  },
  "26.2": {
    "sha1": "823e2250d24b3ddac457a60c92a6a941943fcd6a",
    "url": "https://piston-data.mojang.com/v1/objects/823e2250d24b3ddac457a60c92a6a941943fcd6a/server.jar",
--- a/pkgs/by-name/ne/nextvi/package.nix
+++ b/pkgs/by-name/ne/nextvi/package.nix
@@ -7,13 +7,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "nextvi";
-  version = "7.5";
+  version = "7.6";

  src = fetchFromGitHub {
    owner = "kyx0r";
    repo = "nextvi";
    tag = finalAttrs.version;
-    hash = "sha256-TB2zRgZ7bZhmdzPog5CSUYXBo56K+iSX7EAcI2NxP18=";
+    hash = "sha256-Qzd+zOv0lFWZU6M91XR38JXUu6q+m9fbDtx98V2TIOs=";
  };

  nativeBuildInputs = [ installShellFiles ];
--- a/pkgs/by-name/om/omnictl/package.nix
+++ b/pkgs/by-name/om/omnictl/package.nix
@@ -1,23 +1,23 @@
 {
  lib,
  stdenv,
-  buildGoModule,
+  buildGo127Module,
  fetchFromGitHub,
  installShellFiles,
 }:

-buildGoModule rec {
+buildGo127Module rec {
  pname = "omnictl";
-  version = "1.10.6";
+  version = "1.12.1";

  src = fetchFromGitHub {
    owner = "siderolabs";
    repo = "omni";
    rev = "v${version}";
-    hash = "sha256-3Fm7WM8ge7rz9h/UlvULrG8yzol8e/i+3FSvRBf/g+k=";
+    hash = "sha256-nERNdWZLCw/7o03MH7y+PpglA72Yf/llKvSJNQeLS1k=";
  };

-  vendorHash = "sha256-JZmRdWwZ2s5Ot+GopWg1jgCKruE+z6rltGch/DApuoI=";
+  vendorHash = "sha256-2bHYQdNMZPNpw7DzYBSHU044dx9cWU95Cwf5zev4Aqg=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/op/openobserve/package.nix
+++ b/pkgs/by-name/op/openobserve/package.nix
@@ -22,7 +22,7 @@
 }:

 let
-  version = "1.0.1";
+  version = "1.0.3";
  updateScript = gitUpdater {
    rev-prefix = "v";
    ignoredVersions = "rc";
@@ -47,7 +47,7 @@ if enableEnterprise then

    src = fetchurl {
      url = "https://downloads.openobserve.ai/releases/o2-enterprise/v${finalAttrs.version}/openobserve-ee-v${finalAttrs.version}-linux-amd64-musl.tar.gz";
-      hash = "sha256-dcdprmmIIF/8QfrWYkLspFjqTDUuHHE4RFpUPSHIqcA=";
+      hash = "sha256-J6w1bpb4BfmDIdf+SkQyi1tnVPsOtWsEEshvrEUUL7E=";
    };

    # The tarball is a single flat `openobserve` binary.
@@ -139,7 +139,7 @@ else
        owner = "openobserve";
        repo = "openobserve";
        tag = "v${finalAttrs.version}";
-        hash = "sha256-rC4aykzrcMskAtEyW3XJyAYG4H0p+mTe66uyrfZr+3U=";
+        hash = "sha256-lSsLW6QmDLuRD+hak1ya0cKjDJW50iiErhsDYUo4bcc=";
      };

      patches = [
--- a/pkgs/by-name/op/openttd-jgrpp/package.nix
+++ b/pkgs/by-name/op/openttd-jgrpp/package.nix
@@ -7,13 +7,13 @@

 openttd.overrideAttrs (oldAttrs: rec {
  pname = "openttd-jgrpp";
-  version = "0.73.2";
+  version = "0.73.3";

  src = fetchFromGitHub {
    owner = "JGRennison";
    repo = "OpenTTD-patches";
    rev = "jgrpp-${version}";
-    hash = "sha256-FfR/H+EieZgVaGTJOQZrQpUMbJa/eXE37FWEYFD2sM0=";
+    hash = "sha256-iGEYQ5VpEpaMqrXm3tvvuQXv7m47x0aAHUvyWTUv5dE=";
  };
  patches = [ ];

--- a/pkgs/by-name/pa/pandora-launcher/package.nix
+++ b/pkgs/by-name/pa/pandora-launcher/package.nix
@@ -5,6 +5,7 @@
 {
  addDriverRunpath,
  alsa-lib,
+  bubblewrap,
  flite,
  gamemode,
  glfw3-minecraft,
@@ -31,6 +32,7 @@
  symlinkJoin,
  udev,
  vulkan-loader,
+  xdg-dbus-proxy,
  xrandr,

  additionalLibs ? [ ],
@@ -45,6 +47,7 @@
  ],
  msaClientID ? null,
  textToSpeechSupport ? stdenv.hostPlatform.isLinux,
+  sandboxSupport ? stdenv.hostPlatform.isLinux,
 }:

 assert lib.assertMsg (
@@ -55,6 +58,10 @@ assert lib.assertMsg (
  textToSpeechSupport -> stdenv.hostPlatform.isLinux
 ) "textToSpeechSupport only has an effect on Linux.";

+assert lib.assertMsg (
+  sandboxSupport -> stdenv.hostPlatform.isLinux
+) "sandboxSupport only has an effect on Linux.";
+
 let
  pandora-launcher' = pandora-launcher-unwrapped.override { inherit msaClientID; };
 in
@@ -106,6 +113,10 @@ symlinkJoin {
        pciutils # need lspci
        xrandr # needed for LWJGL [2.9.2, 3) https://github.com/LWJGL/lwjgl/issues/128
      ]
+      ++ lib.optionals sandboxSupport [
+        bubblewrap
+        xdg-dbus-proxy
+      ]
      ++ additionalPrograms;

    in
--- a/pkgs/by-name/po/pond/package.nix
+++ b/pkgs/by-name/po/pond/package.nix
@@ -0,0 +1,44 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitLab,
+
+  ncurses,
+}:
+stdenv.mkDerivation {
+  pname = "pond";
+  version = "0-unstable-2025-01-03";
+
+  strictDeps = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitLab {
+    owner = "alice-lefebvre";
+    repo = "pond";
+    rev = "6f7620940d896a1717e764da0b4b41c96362ac8d";
+    hash = "sha256-qQxtEJHRMvR9hmpRbEBmKwuFjjb9FeGLY/LlHdHh+rI=";
+  };
+
+  buildInputs = [ ncurses ];
+
+  postPatch = ''
+    substituteInPlace Makefile \
+      --replace-fail "gcc" "$CC" \
+      --replace-fail "-lcurses" "-lncurses"
+  '';
+
+  installPhase = ''
+    runHook preInstall;
+    install -m555 -Dt $out/bin bin/pond
+    runHook postInstall;
+  '';
+
+  meta = {
+    homepage = "https://gitlab.com/alice-lefebvre/pond";
+    description = "Software that simulates a little pond";
+    mainProgram = "pond";
+    license = lib.licenses.gpl3;
+    platforms = lib.platforms.linux ++ lib.platforms.darwin;
+    maintainers = with lib.maintainers; [ wyspr ];
+  };
+}
--- a/pkgs/by-name/po/portwave/package.nix
+++ b/pkgs/by-name/po/portwave/package.nix
@@ -0,0 +1,47 @@
+{
+  lib,
+  fetchFromGitHub,
+  nix-update-script,
+  openssl,
+  pkg-config,
+  rustPlatform,
+  versionCheckHook,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "portwave";
+  version = "0.19.3";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "assassin-marcos";
+    repo = "portwave";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-N1/ryYMwlkwPfOZexZVFiR2Wr8w8zq6l9gKK4PLPJqU=";
+  };
+
+  cargoHash = "sha256-5UOsPswU+nyH5x3JDcyPgUbhIPxRzWzWyekwZboKdlE=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [ openssl ];
+
+  env = {
+    OPENSSL_NO_VENDOR = true;
+  };
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "IPv4/IPv6 port scanner with adaptive concurrency";
+    homepage = "https://github.com/assassin-marcos/portwave";
+    changelog = "https://github.com/assassin-marcos/portwave/blob/${finalAttrs.src.rev}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "portwave";
+  };
+})
--- a/pkgs/by-name/pr/proton-ge-bin/package.nix
+++ b/pkgs/by-name/pr/proton-ge-bin/package.nix
@@ -15,7 +15,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
  steamDisplayName = "GE-Proton";

  pname = "proton-ge-bin";
-  version = "GE-Proton11-6";
+  version = "GE-Proton11-7";

  inherit (finalAttrs.passthru.variants.${stdenvNoCC.hostPlatform.system}) src toolName;

@@ -54,14 +54,14 @@ stdenvNoCC.mkDerivation (finalAttrs: {
        toolName = "${finalAttrs.version}-x86_64";
        src = fetchzip {
          url = "https://github.com/GloriousEggroll/proton-ge-custom/releases/download/${finalAttrs.version}/${finalAttrs.version}-x86_64.tar.gz";
-          hash = "sha256-rX27DUrrrHtR1cgyr/424m9JPjrdASIisVGv2vWzMAs=";
+          hash = "sha256-ftW0vE45v2JsbaYqo/So0ZFfvdtakHX0XEXEE4TdxLk=";
        };
      };
      "aarch64-linux" = {
        toolName = "${finalAttrs.version}-aarch64";
        src = fetchzip {
          url = "https://github.com/GloriousEggroll/proton-ge-custom/releases/download/${finalAttrs.version}/${finalAttrs.version}-aarch64.tar.gz";
-          hash = "sha256-sIwM++9FJzpIq4LkYQDL1TIfPFEnaVowrGT/3JPfPZk=";
+          hash = "sha256-tyI95zCUQklRVA9YtarD+gBQouMVcJmv7BafNx5CQu8=";
        };
      };
    };
--- a/pkgs/by-name/ro/rox-filer/package.nix
+++ b/pkgs/by-name/ro/rox-filer/package.nix
@@ -1,111 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchurl,
-  fetchpatch,
-  pkg-config,
-  wrapGAppsHook3,
-  libxml2,
-  gtk2,
-  libsm,
-  shared-mime-info,
-}:
-
-stdenv.mkDerivation (finalAttrs: {
-  pname = "rox-filer";
-  version = "2.11";
-
-  src = fetchurl {
-    url = "mirror://sourceforge/rox/rox-filer-${finalAttrs.version}.tar.bz2";
-    sha256 = "a929bd32ee18ef7a2ed48b971574574592c42e34ae09f36604bf663d7c101ba8";
-  };
-
-  nativeBuildInputs = [
-    pkg-config
-    wrapGAppsHook3
-  ];
-  buildInputs = [
-    libxml2
-    gtk2
-    shared-mime-info
-    libsm
-  ];
-
-  env = {
-    NIX_LDFLAGS = "-lm";
-    NIX_CFLAGS_COMPILE = "-fpermissive";
-  };
-
-  patches = [
-    ./rox-filer-2.11-in-source-build.patch
-    # Pull upstream fix for -fno-common toolchains like upstream gcc-10:
-    #   https://github.com/rox-desktop/rox-filer/pull/15
-    (fetchpatch {
-      name = "fno-common.patch";
-      url = "https://github.com/rox-desktop/rox-filer/commit/86b0bb9144186d51ea9b898905111bd8b143b552.patch";
-      sha256 = "1csyx229i09p00lbdlkdqdhn3x2lb5zby1h9rkjgzlr2qz74gc69";
-    })
-  ];
-
-  # go to the source directory after unpacking the sources
-  sourceRoot = "rox-filer-${finalAttrs.version}/ROX-Filer";
-
-  # account for 'setSourceRoot' offset
-  patchFlags = [ "-p2" ];
-
-  # patch the main.c to disable the lookup of the APP_DIR environment variable,
-  # which is used to lookup the location for certain images when rox-filer
-  # starts; rather override the location with an absolute path to the directory
-  # where images are stored to prevent having to use a wrapper, which sets the
-  # APP_DIR environment variable prior to starting rox-filer
-  preConfigure = ''
-    sed -i -e "s:g_strdup(getenv(\"APP_DIR\")):\"$out\":" src/main.c
-    mkdir build
-    cd build
-  '';
-
-  configureScript = "../src/configure";
-
-  installPhase = ''
-    mkdir -p "$out"
-    cd ..
-    cp -av Help Messages Options.xml ROX images style.css .DirIcon "$out"
-
-    # create the man/ directory, which will be moved from $out to share/ in the fixup phase
-    mkdir "$out/man/"
-    cp -av ../rox.1 "$out/man/"
-
-    # the main executable
-    mkdir "$out/bin/"
-    cp -v ROX-Filer "$out/bin/rox"
-
-    # mime types
-    mkdir -p "$out/ROX/MIME"
-    cd "$out/ROX/MIME"
-    ln -sv text-x-{diff,patch}.png
-    ln -sv application-x-font-{afm,type1}.png
-    ln -sv application-xml{,-dtd}.png
-    ln -sv application-xml{,-external-parsed-entity}.png
-    ln -sv application-{,rdf+}xml.png
-    ln -sv application-x{ml,-xbel}.png
-    ln -sv application-{x-shell,java}script.png
-    ln -sv application-x-{bzip,xz}-compressed-tar.png
-    ln -sv application-x-{bzip,lzma}-compressed-tar.png
-    ln -sv application-x-{bzip-compressed-tar,lzo}.png
-    ln -sv application-x-{bzip,xz}.png
-    ln -sv application-x-{gzip,lzma}.png
-    ln -sv application-{msword,rtf}.png
-  '';
-
-  meta = {
-    description = "Fast, lightweight, gtk2 file manager";
-    mainProgram = "rox";
-    homepage = "http://rox.sourceforge.net/desktop";
-    license = with lib.licenses; [
-      gpl2
-      lgpl2
-    ];
-    platforms = lib.platforms.linux;
-    maintainers = [ lib.maintainers.eleanor ];
-  };
-})
--- a/pkgs/by-name/ro/rox-filer/rox-filer-2.11-in-source-build.patch
+++ b/pkgs/by-name/ro/rox-filer/rox-filer-2.11-in-source-build.patch
@@ -1,16 +0,0 @@
--- a/Rox-Filer/src/configure	2011-10-09 16:32:14.000000000 +0200
-+++ b/Rox-Filer/src/configure	2016-03-20 09:26:31.640891863 +0100
-@@ -2132,13 +2132,6 @@
- 
- 
- ac_config_headers="$ac_config_headers config.h"
-
-
- if [ -f configure ]; then
-	as_fn_error $? "Please run configure from the build directory (try ../AppRun --compile)" "$LINENO" 5
-	exit 1
-fi
-
- ac_ext=c
- ac_cpp='$CPP $CPPFLAGS'
- ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
--- a/pkgs/by-name/sb/sby/package.nix
+++ b/pkgs/by-name/sb/sby/package.nix
@@ -13,18 +13,20 @@
 }:

 let
-  pythonEnv = python3.withPackages (ps: with ps; [ click ]);
+  pythonDeps = ps: with ps; [ click ];
+  pythonEnv = python3.withPackages pythonDeps;
+  checkPythonEnv = python3.withPackages (ps: pythonDeps ps ++ [ ps.xmlschema ]);
 in

 stdenv.mkDerivation (finalAttrs: {
  pname = "sby";
-  version = "0.68";
+  version = "0.69";

  src = fetchFromGitHub {
    owner = "YosysHQ";
    repo = "sby";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-WRZp4+gwUgDKCWAdBK/36ArM2KFGyLBZ20S32k7YN+8=";
+    hash = "sha256-BNxSMDtfnNrIOrXYxXD7XAHNJUGifEFRYrYpyteAMHQ=";
  };

  postPatch = ''
@@ -68,8 +70,7 @@ stdenv.mkDerivation (finalAttrs: {
  '';

  nativeCheckInputs = [
-    python3
-    python3.pkgs.xmlschema
+    checkPythonEnv
    yosys
    yices
    z3
--- a/pkgs/by-name/sl/slint-lsp/package.nix
+++ b/pkgs/by-name/sl/slint-lsp/package.nix
@@ -18,14 +18,14 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "slint-lsp";
-  version = "1.17.1";
+  version = "1.18.0";

  src = fetchCrate {
    inherit (finalAttrs) pname version;
-    hash = "sha256-GAy2D2eEx2NYEXx/x4z+43CbRV7gWwY2Sgd9iAK6T2Y=";
+    hash = "sha256-eSKW6iMoiv84CglF39fdu61D87xWv5eQzuXCo0+9hjY=";
  };

-  cargoHash = "sha256-4Cs+ezxoBeeGeUcJK0ury63zW0AJADDZk/zhIeJV6Uc=";
+  cargoHash = "sha256-qNyuTeQ8BtLi+jPcZ4Ff0TzAl0Kbbcz4+ba0FTz3r9U=";

  rpathLibs = [
    fontconfig
--- a/pkgs/by-name/sl/slint-viewer/package.nix
+++ b/pkgs/by-name/sl/slint-viewer/package.nix
@@ -20,14 +20,14 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "slint-viewer";
-  version = "1.17.1";
+  version = "1.18.0";

  src = fetchCrate {
    inherit (finalAttrs) pname version;
-    hash = "sha256-Jo2nAYUx6N2fJvX4hHckRKr2gr6xsGW9lNMD45+/uNY=";
+    hash = "sha256-lCDhKt1lKZnzKuOuusbWYqwLBH8NJ8sF/UaDk7gjfLc=";
  };

-  cargoHash = "sha256-TsM2CFsNDu4SRPcDwAWoPOtWPMf/Z3R9HlSlh4Ly92s=";
+  cargoHash = "sha256-vp8hJuskBxeyZ2vxoKe73kEI8TR13ooNwqP7gw19yo4=";

  buildInputs = [
    qt6.qtbase
--- a/pkgs/by-name/sm/smtpeek/package.nix
+++ b/pkgs/by-name/sm/smtpeek/package.nix
@@ -0,0 +1,33 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "smtpeek";
+  version = "1.0.0";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "0xricksanchez";
+    repo = "SMTPeek";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-IIsy6MfyjrhuG/6AAYC7hnS/OBv32XPRaQ3L0IYozHM=";
+  };
+
+  cargoHash = "sha256-JowidHb7CPJQVFKFxhBgsObZdDd8Mp1FnATyJzXzb5k=";
+
+  nativeBuildInputs = [ rustPlatform.bindgenHook ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "SMTP user validation";
+    homepage = "https://github.com/0xricksanchez/SMTPeek";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "smtpeek";
+  };
+})
--- a/pkgs/by-name/sn/sniffcrack/package.nix
+++ b/pkgs/by-name/sn/sniffcrack/package.nix
@@ -0,0 +1,42 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  pkg-config,
+  libpcap,
+  vulkan-loader,
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "sniffcrack";
+  version = "0-unstable-2026-08-19";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "THE-M0P";
+    repo = "sniffcrack";
+    rev = "44b5b5be5fa04143d45382d4130e9fdbb5213eb6";
+    hash = "sha256-9/CbkRk85P/dFNVl8rxEWWSjFwc44vJK1Iv4IXkeVkw=";
+  };
+
+  cargoHash = "sha256-hm+p54vCD+rQtuBtp4e2PPGScp+ijGVkZ14tSoeAaWY=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [
+    libpcap
+    vulkan-loader
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Linux Wi-Fi assessment tool for WPA/WPA2 handshake capture and password auditing";
+    homepage = "https://github.com/THE-M0P/sniffcrack";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "sniffcrack";
+    platforms = lib.platforms.linux;
+  };
+})
--- a/pkgs/by-name/sp/spotatui/package.nix
+++ b/pkgs/by-name/sp/spotatui/package.nix
@@ -14,16 +14,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "spotatui";
-  version = "0.41.0";
+  version = "0.42.0";

  src = fetchFromGitHub {
    owner = "LargeModGames";
    repo = "spotatui";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-uTNrynFPVQibgt4pBVvPLbxN4EFdAC7ezZ91GftSHac=";
+    hash = "sha256-u5gpXOVrJILp423aFdsw740J1w8oXNh9yVdhfd1JQbs=";
  };

-  cargoHash = "sha256-X2xyEN43jwT6xr3iACLdvuOaH0SQdtxeJBBP1rEhy80=";
+  cargoHash = "sha256-C83fpo+ozkmnvfiZ2479nDri1PO+TZewmphXs4qVUZw=";

  nativeBuildInputs = [ pkg-config ] ++ lib.optional withPipewireVisualizer rustPlatform.bindgenHook;

@@ -38,8 +38,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
    "cover-art"
    "discord-rpc"
    "mpris"
+    "scripting"
    "streaming"
    "telemetry"
+    "tui"
  ]
  ++ lib.optional withAiDj "ai-dj"
  ++ lib.optional withPipewireVisualizer "audio-viz"
--- a/pkgs/by-name/st/stargate-libcds/package.nix
+++ b/pkgs/by-name/st/stargate-libcds/package.nix
@@ -17,11 +17,14 @@ stdenv.mkDerivation (finalAttrs: {
  };

  # Fix 'error: unrecognized command line option' in platforms other than x86
-  env = lib.optionalAttrs stdenv.hostPlatform.isx86_64 {
-    PLAT_FLAGS = toString [
-      "-mfpmath=sse"
-      "-mssse3"
-    ];
+  env = {
+    PLAT_FLAGS = toString (
+      [ ]
+      ++ lib.optional stdenv.hostPlatform.isx86_64 [
+        "-mfpmath=sse"
+        "-mssse3"
+      ]
+    );
  };

  patches = [
--- a/pkgs/by-name/sy/systemd-lsp/package.nix
+++ b/pkgs/by-name/sy/systemd-lsp/package.nix
@@ -3,20 +3,37 @@
  fetchFromGitHub,
  nix-update-script,
  rustPlatform,
+  stdenv,
 }:

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "systemd-lsp";
-  version = "2026.01.06";
+  version = "2026.08.03";
+
+  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "JFryy";
    repo = "systemd-lsp";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-wTqbktVaGUk3/cJ3oH1GXvddqVKJQe09sRiyaU+cqCg=";
+    hash = "sha256-yMUUtcSpXn02zbxcljbkzT02DUEJPQBwCopmDxbTmR4=";
  };

-  cargoHash = "sha256-2+0+VeHEsUyTivDU7FQbm44RZe0t0hsVHNN2fplDlRI=";
+  postPatch = ''
+    substituteInPlace tests/cli_tests.rs \
+      --replace-fail 'target/release' \
+                     "target/${stdenv.hostPlatform.rust.cargoShortTarget}/$cargoBuildType"
+  '';
+
+  cargoHash = "sha256-2+JTKSzreTmdUiv++WaG8kVV2hXDn6qeY9Cp7n51MP4=";
+
+  doInstallCheck = true;
+  # Avoid versionCheckHook because upstream names tags differently from the version.
+  installCheckPhase = ''
+    runHook preInstallCheck
+    "$out/bin/${finalAttrs.meta.mainProgram}" --help
+    runHook postInstallCheck
+  '';

  passthru.updateScript = nix-update-script { };

@@ -26,5 +43,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ mahyarmirrashed ];
    mainProgram = "systemd-lsp";
+    platforms = with lib.platforms; unix ++ windows;
  };
 })
--- a/pkgs/by-name/ta/taterclient-ddnet/package.nix
+++ b/pkgs/by-name/ta/taterclient-ddnet/package.nix
@@ -33,18 +33,18 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "taterclient-ddnet";
-  version = "10.8.7";
+  version = "10.9.0";

  src = fetchFromGitHub {
    owner = "TaterClient";
    repo = "TClient";
    tag = "V${finalAttrs.version}";
-    hash = "sha256-jGi0eRKeYVGWes4AAzasKjdSqoYrEalxVHR/dYEzSXo=";
+    hash = "sha256-QlLxY1k9S9mvRJ0LL7/jpBfIn638eEEnQQ6tKvT/MJY=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) pname src version;
-    hash = "sha256-VKGc4LQjt2FHbELLBKtV8rKpxjGBrzlA3m9BSdZ/6Z0=";
+    hash = "sha256-n+1SlgmjSe0ul/iuK3kjTGSvyYwdxwcRrCAnZyavZA8=";
  };

  nativeBuildInputs = [
@@ -107,7 +107,7 @@ stdenv.mkDerivation (finalAttrs: {
    # git rev-parse --short=32 HEAD
    #
    # In accordance with this script https://github.com/TaterClient/TClient/blob/master/scripts/git_revision.py
-    DDNET_GIT_SHORTREV_HASH = "4e4269396b97d06879c11ae3b9696c3d";
+    DDNET_GIT_SHORTREV_HASH = "6b4118bf0ec86822dea43cc3e97b0645";
  };

  # Since we are not building the server executable, the `run_tests` Makefile target
--- a/pkgs/by-name/ti/tic-80/package.nix
+++ b/pkgs/by-name/ti/tic-80/package.nix
@@ -11,6 +11,8 @@
  libGL,
  libGLU,
  libx11,
+  giflib,
+  libpng,
  janet,
  lua5_3_compat,
  quickjs,
@@ -20,37 +22,29 @@
  withPro ? false,
 }:
 let
-  # git rev-list HEAD --count
-  revision = "3049";
-  year = "2025";
+  year = "2026";
 in

 stdenv.mkDerivation {
  pname = "tic-80";
-  # use an untagged version until upstream tags a new version. We want
-  # 'PREFER_SYSTEM_LIBRARIES', and without it tic-80 won't build
-  version = "1.1-unstable-2025-12-30";
+  version = "1.2.0";

  src = fetchFromGitHub {
    owner = "nesbox";
    repo = "TIC-80";
-    rev = "881828910e77c799c1a6894cadc2d05a5c2f3f70";
+    rev = "v1.2.0";
    # TIC-80 vendors its dependencies as submodules. For the following dependencies,
    # there are no (or no compatible) packages in nixpkgs yet, so we use the vendored
    # ones as a fill-in: wasm, squirrel, pocketpy, argparse, naett,
    # sdlgpu, mruby.
    fetchSubmodules = true;
-    hash = "sha256-bqLVoLJpT62k9d+WZUgIu4ClcJNUvURB7j+NE/fzWNk=";
+    hash = "sha256-RTtqgGAAolK1qoaKV08i/KfGu7fd34W+AyXeNcqPVgk=";
  };

-  # TIC-80 tries to determine the revision part of the version using its Git history.
-  # Because using leaveDotGit tends be non-reproducible with submodules, we just
-  # hardcode it.
  # To avoid the awkward copyright range of "2017-1980", which would be caused by the
  # sandbox environment, hardcode the year of the release.
  postPatch = ''
    substituteInPlace cmake/version.cmake \
-      --replace-fail 'set(VERSION_REVISION 0)' 'set(VERSION_REVISION ${revision})' \
      --replace-fail 'string(TIMESTAMP VERSION_YEAR "%Y")' 'set(VERSION_YEAR "${year}")'
  '';

@@ -95,6 +89,8 @@ stdenv.mkDerivation {
    libGL
    libGLU
    libx11
+    giflib
+    libpng
    janet
    (lua5_3_compat.withPackages (ps: [ ps.fennel ]))
    quickjs
--- a/pkgs/by-name/ti/times-newer-roman/package.nix
+++ b/pkgs/by-name/ti/times-newer-roman/package.nix
@@ -7,7 +7,7 @@

 stdenvNoCC.mkDerivation {
  pname = "times-newer-roman";
-  version = "unstable-2018-09-11";
+  version = "0-unstable-2018-09-11";

  src = fetchzip {
    url = "https://web.archive.org/web/20210609022835/https://timesnewerroman.com/assets/TimesNewerRoman.zip";
--- a/pkgs/by-name/um/umpire/package.nix
+++ b/pkgs/by-name/um/umpire/package.nix
@@ -4,6 +4,7 @@
  fetchFromGitHub,
  cmake,
  config,
+  symlinkJoin,
  cudaSupport ? config.cudaSupport,
  cudaPackages ? null,
  rocmSupport ? config.rocmSupport,
@@ -12,6 +13,17 @@

 assert cudaSupport -> cudaPackages != null;

+let
+  rocm-sdk = symlinkJoin {
+    name = "rocm-merged";
+    paths = with rocmPackages; [
+      clr
+      rocm-comgr
+      rocm-device-libs
+      rocm-runtime
+    ];
+  };
+in
 stdenv.mkDerivation (finalAttrs: {
  pname = "umpire";
  version = "2025.12.0";
@@ -34,7 +46,7 @@ stdenv.mkDerivation (finalAttrs: {
    cudaPackages.cuda_nvcc
  ]
  ++ lib.optionals rocmSupport [
-    rocmPackages.clr
+    rocm-sdk
  ];

  buildInputs = lib.optionals cudaSupport (
@@ -52,6 +64,7 @@ stdenv.mkDerivation (finalAttrs: {
    ]
    ++ lib.optionals rocmSupport [
      "-DENABLE_HIP=ON"
+      "-DROCM_ROOT_DIR=${rocm-sdk}"
    ];

  passthru = { inherit rocmSupport; };
--- a/pkgs/by-name/un/unblob/package.nix
+++ b/pkgs/by-name/un/unblob/package.nix
@@ -128,9 +128,10 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
    "test_all_handlers[filesystem.extfs]"
    # regression in erofs-utils 1.9 https://github.com/onekey-sec/unblob/commit/c7c9f20dd871a5694d41a95ca3041eb0c98e257a
    "test_all_handlers[filesystem.android.erofs]"
-    # unblob's landlock sandbox denies hardlinks within the extract dir (EXDEV). https://github.com/onekey-sec/unblob/issues/1210
+    # unblob's landlock sandbox denies hardlinks and renames within the extract dir (EXDEV). https://github.com/onekey-sec/unblob/issues/1210
    "test_all_handlers[filesystem.romfs]"
    "test_all_handlers[filesystem.yaffs]"
+    "test_all_handlers[filesystem.btrfs_stream]"
  ];

  passthru = {
--- a/pkgs/by-name/vi/vicinae/package.nix
+++ b/pkgs/by-name/vi/vicinae/package.nix
@@ -25,13 +25,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "vicinae";
-  version = "0.28.1";
+  version = "0.29.0";

  src = fetchFromGitHub {
    owner = "vicinaehq";
    repo = "vicinae";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-zRvJ9/LVAIoW2qKveqD6WSdr0jDypPrbQdw1aatRS70=";
+    hash = "sha256-+Ti1hcYdjgdAZWu5f6myDckjp7ox0mtux7q8U1t44jo=";
  };

  apiDeps = fetchNpmDeps {
--- a/pkgs/by-name/wy/wyrd/package.nix
+++ b/pkgs/by-name/wy/wyrd/package.nix
@@ -3,10 +3,13 @@
  stdenv,
  fetchFromGitLab,
  makeWrapper,
-  ocamlPackages,
+  ocaml-ng,
  remind,
 }:

+let
+  ocamlPackages = ocaml-ng.ocamlPackages_4_14;
+in
 stdenv.mkDerivation (finalAttrs: {
  pname = "wyrd";
  version = "1.7.4";
@@ -19,6 +22,7 @@ stdenv.mkDerivation (finalAttrs: {
  };

  strictDeps = true;
+  __structuredAttrs = true;

  nativeBuildInputs = [
    makeWrapper
--- a/pkgs/by-name/xr/xray/package.nix
+++ b/pkgs/by-name/xr/xray/package.nix
@@ -2,7 +2,7 @@
  lib,
  fetchFromGitHub,
  symlinkJoin,
-  buildGo126Module,
+  buildGo127Module,
  makeWrapper,
  nix-update-script,
  v2ray-rules-dat,
@@ -11,18 +11,18 @@
  ],
 }:

-buildGo126Module (finalAttrs: {
+buildGo127Module (finalAttrs: {
  pname = "xray";
-  version = "26.3.27";
+  version = "26.9.9";

  src = fetchFromGitHub {
    owner = "XTLS";
    repo = "Xray-core";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-tSSoaIKHgLf9ry6p0Y+BM1Nx8X+40BDDfJJYkABUoEc=";
+    hash = "sha256-GqPEAgWM9Wx19uxMj0LGeOyHreLbU0IMSmalwLe/SIc=";
  };

-  vendorHash = "sha256-kwvck6Eo/e6qgb1ENznhwZ/GPX75ssLUvR2u8Qm3UIM=";
+  vendorHash = "sha256-6Qa05hFdvfLlH8WQd426IU7MScmeevIgrgP5037pNek=";

  nativeBuildInputs = [ makeWrapper ];

--- a/pkgs/by-name/yo/yosys/package.nix
+++ b/pkgs/by-name/yo/yosys/package.nix
@@ -93,7 +93,7 @@ stdenv.mkDerivation (finalAttrs: {
  };

  postPatch = ''
-    patchShebangs tests
+    patchShebangs tests ./misc/yosys-config.in
    substituteInPlace tests/aiger/generate_mk.py \
      --replace-fail 'SHELL := /usr/bin/env bash' 'SHELL := ${stdenv.shell}'
  ''
@@ -122,7 +122,7 @@ stdenv.mkDerivation (finalAttrs: {
    zlib
  ]
  ++ lib.optionals enablePython [
-    python3
+    pythonEnv
  ];

  cmakeFlags = [
--- a/pkgs/development/python-modules/aioamazondevices/default.nix
+++ b/pkgs/development/python-modules/aioamazondevices/default.nix
@@ -15,14 +15,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "aioamazondevices";
-  version = "15.1.0";
+  version = "16.3.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "chemelli74";
    repo = "aioamazondevices";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-sx10iI7k5nMt6OmgLrNcEmQDOoPEuCOiSYAL5ctc+Xs=";
+    hash = "sha256-LasHNM7Uj/9A50mUWdE4E627AMBORYP5FCqNT7mJiVs=";
  };

  build-system = [ poetry-core ];
--- a/pkgs/development/python-modules/aioharmony/default.nix
+++ b/pkgs/development/python-modules/aioharmony/default.nix
@@ -11,16 +11,16 @@
  slixmpp,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "aioharmony";
-  version = "1.0.8";
+  version = "1.0.10";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Harmony-Libs";
    repo = "aioharmony";
-    tag = "v${version}";
-    hash = "sha256-7K/I71yonmAqLp12Hk8e72BBfF/sez1cFdQbnixDdbg=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-j4VlYxGd3I6SLZjJUOSZW9hyfSkX04L/8CGBWp7vTj0=";
  };

  build-system = [ setuptools ];
@@ -43,10 +43,11 @@ buildPythonPackage rec {
  ];

  meta = {
+    description = "Python library for interacting with the Logitech Harmony devices";
    homepage = "https://github.com/Harmony-Libs/aioharmony";
-    description = "Python library for interacting the Logitech Harmony devices";
-    mainProgram = "aioharmony";
+    changelog = "https://github.com/Harmony-Libs/aioharmony/releases/tag/${finalAttrs.src.tag}";
    license = lib.licenses.asl20;
    maintainers = with lib.maintainers; [ oro ];
+    mainProgram = "aioharmony";
  };
-}
+})
--- a/pkgs/development/python-modules/cvxpy/default.nix
+++ b/pkgs/development/python-modules/cvxpy/default.nix
@@ -28,7 +28,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "cvxpy";
-  version = "1.9.2";
+  version = "1.9.3";
  pyproject = true;
  __structuredAttrs = true;

@@ -36,7 +36,7 @@ buildPythonPackage (finalAttrs: {
    owner = "cvxpy";
    repo = "cvxpy";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-nYfS9HXWTKcvVrq+wm5cgvB7keMAQPmKEe8bI0jngFg=";
+    hash = "sha256-7EBvCt+Qic+lfl8g5MMIJTKCnsfSm8fmUdq6P2SdF5I=";
  };

  postPatch =
--- a/pkgs/development/python-modules/flax/default.nix
+++ b/pkgs/development/python-modules/flax/default.nix
@@ -87,13 +87,15 @@ buildPythonPackage (finalAttrs: {

  nativeCheckInputs = [
    cloudpickle
-    keras
    einops
    pytestCheckHook
    pytest-xdist
    sphinx
-    tensorflow
    torch
+  ]
+  ++ lib.optionals tensorflow.meta.available [
+    keras
+    tensorflow
  ];

  disabledTestPaths = [
@@ -107,6 +109,10 @@ buildPythonPackage (finalAttrs: {
    # `tensorflow_datasets`, `vocabulary`) so the benefits of trying to run them
    # would be limited anyway.
    "examples/*"
+  ]
+  ++ lib.optionals (!tensorflow.meta.available) [
+    "tests/io_test.py"
+    "tests/tensorboard_test.py"
  ];

  disabledTests = [
--- a/pkgs/development/python-modules/hassil/default.nix
+++ b/pkgs/development/python-modules/hassil/default.nix
@@ -16,7 +16,7 @@

 let
  pname = "hassil";
-  version = "3.12.0";
+  version = "3.12.1";
 in
 buildPythonPackage rec {
  inherit pname version;
@@ -26,7 +26,7 @@ buildPythonPackage rec {
    owner = "OHF-Voice";
    repo = "hassil";
    tag = "v${version}";
-    hash = "sha256-v43znTyEx+QGTdn/9lDfBWqGzWMSzSj+Af5bRw84MZQ=";
+    hash = "sha256-jbodtdsEBDL4nB8kBkPjxFsMOMvsGPDpfMokMRF4xIA=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/heudiconv/default.nix
+++ b/pkgs/development/python-modules/heudiconv/default.nix
@@ -19,12 +19,12 @@

 buildPythonPackage rec {
  pname = "heudiconv";
-  version = "1.5.0";
+  version = "1.5.1";
  pyproject = true;

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-N3W6lkUwb7ejZwyIrvvZBBOuuypchIaEYx6XQhmvSwc=";
+    hash = "sha256-EO3iKhFs7U/ekueeUK8PRif6NFcV6xoDIMC+9js0Q8o=";
  };

  postPatch = ''
--- a/pkgs/development/python-modules/lyngdorf/default.nix
+++ b/pkgs/development/python-modules/lyngdorf/default.nix
@@ -10,14 +10,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "lyngdorf";
-  version = "1.4.8";
+  version = "1.10.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "fishloa";
    repo = "lyngdorf";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-KasnlVp9Hx4B3NccLL1qaViLJRLKFY41yXu2bz1/8hA=";
+    hash = "sha256-CXKDXaCwn9n3VprpS5JuKXI/zOEPPgv94cyhEtDEknw=";
  };

  build-system = [ poetry-core ];
--- a/pkgs/development/python-modules/mistralai/default.nix
+++ b/pkgs/development/python-modules/mistralai/default.nix
@@ -36,7 +36,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "mistralai";
-  version = "2.9.4";
+  version = "2.10.1";
  pyproject = true;
  __structuredAttrs = true;

@@ -44,7 +44,7 @@ buildPythonPackage (finalAttrs: {
    owner = "mistralai";
    repo = "client-python";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-w7nU4fiduMhpuvKZMJ3JTLEg8Bvuv5L5OXeJYve3/fI=";
+    hash = "sha256-T3B2fzhL63ttPWAJ3+/3B/+g1Qqk7bGKGY+ZnC/OChg=";
  };

  preBuild = ''
--- a/pkgs/development/python-modules/neopool-modbus/default.nix
+++ b/pkgs/development/python-modules/neopool-modbus/default.nix
@@ -11,7 +11,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "neopool-modbus";
-  version = "4.5.1";
+  version = "4.8.0";
  pyproject = true;

  disabled = pythonOlder "3.13";
@@ -20,7 +20,7 @@ buildPythonPackage (finalAttrs: {
    owner = "svasek";
    repo = "python-neopool-modbus";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-HF2HqbEgt3bIUZ8MiWtYAht3QBAua/FgMXkppJye6KA=";
+    hash = "sha256-6m67J+wbcfpgRkSdXeu9zbJ4a/aAdogy2Qhe7iXSkKg=";
  };

  build-system = [ hatchling ];
--- a/pkgs/development/python-modules/pystiebeleltron/default.nix
+++ b/pkgs/development/python-modules/pystiebeleltron/default.nix
@@ -9,16 +9,16 @@
  pytest-mock,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "pystiebeleltron";
-  version = "0.7.1";
+  version = "0.8.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "ThyMYthOS";
    repo = "python-stiebel-eltron";
-    tag = "v${version}";
-    hash = "sha256-UWUSxdSuLDkYWHvgNbZ6TmXSMU8/sKa77I5JHHgTy0k=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-+Sj3qh8tNw7xoSdK6B8ooDgM52HZ2uN1AcXrEXyKvRE=";
  };

  build-system = [ hatchling ];
@@ -39,7 +39,8 @@ buildPythonPackage rec {
  meta = {
    description = "Python API for interacting with the Stiebel Eltron ISG web gateway via Modbus";
    homepage = "https://github.com/ThyMYthOS/python-stiebel-eltron";
+    changelog = "https://github.com/ThyMYthOS/python-stiebel-eltron/releases/tag/${finalAttrs.src.tag}";
    license = lib.licenses.mit;
    maintainers = [ lib.maintainers.jamiemagee ];
  };
-}
+})
--- a/pkgs/development/python-modules/python-xbox/default.nix
+++ b/pkgs/development/python-modules/python-xbox/default.nix
@@ -15,16 +15,16 @@
  respx,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "python-xbox";
-  version = "0.2.2";
+  version = "0.3.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "tr4nt0r";
    repo = "python-xbox";
-    tag = "v${version}";
-    hash = "sha256-hYkxoypKqG+UtATplR3j5aSpGxsyyXGsINlYHBMlBvw=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Aw6EdGkKDEb75mAPZm+z4V1Y4sCNGIxbOmSE9tv1YFY=";
  };

  build-system = [
@@ -59,10 +59,10 @@ buildPythonPackage rec {
  ];

  meta = {
-    changelog = "https://github.com/tr4nt0r/python-xbox/releases/tag/${src.tag}";
+    changelog = "https://github.com/tr4nt0r/python-xbox/releases/tag/${finalAttrs.src.tag}";
    description = "Library to authenticate with Xbox Network and use their API";
    homepage = "https://github.com/tr4nt0r/python-xbox";
    license = lib.licenses.mit;
    maintainers = [ lib.maintainers.dotlambda ];
  };
-}
+})
--- a/pkgs/development/python-modules/reolink-aio/default.nix
+++ b/pkgs/development/python-modules/reolink-aio/default.nix
@@ -12,14 +12,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "reolink-aio";
-  version = "0.21.16";
+  version = "0.21.17";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "starkillerOG";
    repo = "reolink_aio";
    tag = finalAttrs.version;
-    hash = "sha256-aTPXma80N8LZCaI1Jn9gOribVYIGn/tny7VRATFf7wM=";
+    hash = "sha256-BOkqsoD8o01gRRqcVL5K0iEtka3Mljy7WLGxg2KpZ8I=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/reolink/default.nix
+++ b/pkgs/development/python-modules/reolink/default.nix
@@ -10,15 +10,15 @@
  setuptools,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "reolink";
-  version = "0.64";
+  version = "0.0.64";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "fwestenberg";
    repo = "reolink";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
    hash = "sha256-3r5BwVlNolji2HIGjqv8gkizx4wWxrKYkiNmSJedKmI=";
  };

@@ -62,8 +62,8 @@ buildPythonPackage rec {
  meta = {
    description = "Module to interact with the Reolink IP camera API";
    homepage = "https://github.com/fwestenberg/reolink";
-    changelog = "https://github.com/fwestenberg/reolink/releases/tag/${src.tag}";
+    changelog = "https://github.com/fwestenberg/reolink/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ fab ];
  };
-}
+})
--- a/pkgs/development/python-modules/robot-descriptions/default.nix
+++ b/pkgs/development/python-modules/robot-descriptions/default.nix
@@ -16,14 +16,14 @@

 buildPythonPackage rec {
  pname = "robot-descriptions";
-  version = "3.1.0";
+  version = "3.2.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "robot-descriptions";
    repo = "robot_descriptions.py";
    tag = "v${version}";
-    hash = "sha256-tbyMcoZXnzWGZ9tO/2hBXNimJQa1UTxPLpyrI1yalWI=";
+    hash = "sha256-ImrZgxC9V1nX0+0LK/xXfLe1SkYlVayISKmG8f9+eTI=";
  };

  build-system = [
--- a/pkgs/development/python-modules/ytmusicapi/default.nix
+++ b/pkgs/development/python-modules/ytmusicapi/default.nix
@@ -8,14 +8,14 @@

 buildPythonPackage rec {
  pname = "ytmusicapi";
-  version = "1.12.2";
+  version = "1.12.3";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "sigma67";
    repo = "ytmusicapi";
    tag = version;
-    hash = "sha256-kYx1pimYj+WBYgmxQUin/Af3d6o7HJzqy7DUkbDyKBI=";
+    hash = "sha256-mIxtr018hE3LSJCJdD2Lr8UUOic8m2rmPwU86EJuLFk=";
  };

  build-system = [ setuptools-scm ];
--- a/pkgs/os-specific/linux/evdi/default.nix
+++ b/pkgs/os-specific/linux/evdi/default.nix
@@ -16,13 +16,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "evdi";
-  version = "1.15.0";
+  version = "1.15.1";

  src = fetchFromGitHub {
    owner = "DisplayLink";
    repo = "evdi";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-CXF7PvmrPjjNoWXbWxEkFE/Sw4bO6YqDplPwF/OxhB0=";
+    hash = "sha256-3g6OETXJSf6AScJ2K9F67mPlh3Wpi20Yq+f+xe78p9Y=";
  };

  patches = [
--- a/pkgs/servers/home-assistant/component-packages.nix
+++ b/pkgs/servers/home-assistant/component-packages.nix
@@ -2,7 +2,7 @@
 # Do not edit!

 {
-  version = "2026.9.2";
+  version = "2026.9.3";
  components = {
    "3_day_blinds" =
      ps: with ps; [
--- a/pkgs/servers/home-assistant/custom-components/garmin_connect/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/garmin_connect/package.nix
@@ -8,13 +8,13 @@
 buildHomeAssistantComponent rec {
  owner = "cyberjunky";
  domain = "garmin_connect";
-  version = "3.0.16";
+  version = "3.0.18";

  src = fetchFromGitHub {
    owner = "cyberjunky";
    repo = "home-assistant-garmin_connect";
    tag = version;
-    hash = "sha256-GHwGogWAlugqWMndJ1C/UaYITy+hrOF+G5rKW5OXNEI=";
+    hash = "sha256-76i6HdKdDxQq6kMPBkdTsfg+r3oCBd4X3WyQzdwi4+k=";
  };

  dependencies = [
--- a/pkgs/servers/home-assistant/custom-components/gtfs-realtime/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/gtfs-realtime/package.nix
@@ -12,13 +12,13 @@
 buildHomeAssistantComponent rec {
  owner = "bcpearce";
  domain = "gtfs_realtime";
-  version = "0.4.9";
+  version = "0.4.10";

  src = fetchFromGitHub {
    owner = "bcpearce";
    repo = "homeassistant-gtfs-realtime";
    tag = version;
-    hash = "sha256-a9ZL5NQvmMi58rfTG3REDpYAkg8Y4PmeYn/brBz5K3U=";
+    hash = "sha256-XKQsHN9gnVrRT+SFJMPU+qO2KCApgmkDB1PKW2PJeNg=";
  };

  dependencies = [ gtfs-station-stop ];
--- a/pkgs/servers/home-assistant/custom-components/octopus_energy/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/octopus_energy/package.nix
@@ -11,13 +11,13 @@
 buildHomeAssistantComponent rec {
  owner = "BottlecapDave";
  domain = "octopus_energy";
-  version = "19.0.1";
+  version = "19.1.0";

  src = fetchFromGitHub {
    inherit owner;
    repo = "HomeAssistant-OctopusEnergy";
    tag = "v${version}";
-    hash = "sha256-PtDyUk4OzElgB0FeM/028O108R7J97k5SwGfNAIybJ8=";
+    hash = "sha256-mUQXW6oW7JBDgDV+Sw3EGwVvBhwukEdNJmsxs8TK03Q=";
  };

  dependencies = [ pydantic ];
--- a/pkgs/servers/home-assistant/custom-components/powercalc/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/powercalc/package.nix
@@ -19,13 +19,13 @@
 buildHomeAssistantComponent rec {
  owner = "bramstroker";
  domain = "powercalc";
-  version = "1.25.3";
+  version = "1.25.4";

  src = fetchFromGitHub {
    inherit owner;
    repo = "homeassistant-powercalc";
    tag = "v${version}";
-    hash = "sha256-Cwg0E0ppk7auAiOb++F56UqEc6cBbGi7fAdFJVn1wbI=";
+    hash = "sha256-TNXXUdfivIhE5ZfzjFrSCVz/T7BoydTWd2jWfpTOiX4=";
  };

  dependencies = [ numpy ];
--- a/pkgs/servers/home-assistant/custom-components/solis-sensor/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/solis-sensor/package.nix
@@ -9,13 +9,13 @@
 buildHomeAssistantComponent rec {
  owner = "hultenvp";
  domain = "solis";
-  version = "4.0.1";
+  version = "4.0.3";

  src = fetchFromGitHub {
    owner = "hultenvp";
    repo = "solis-sensor";
    rev = "v${version}";
-    hash = "sha256-53bRd+Zz46Mxiycpa8h4DXc9wUFmkczNtpteTkci4Q0=";
+    hash = "sha256-0l7Kf4xS9LOUSVMsuaao8sgP7xbig9hmcmgDNh99Rj0=";
  };

  dependencies = [ aiofiles ];
--- a/pkgs/servers/home-assistant/custom-components/spook/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/spook/package.nix
@@ -7,13 +7,13 @@
 buildHomeAssistantComponent rec {
  owner = "frenck";
  domain = "spook";
-  version = "5.4.0";
+  version = "5.5.0";

  src = fetchFromGitHub {
    inherit owner;
    repo = domain;
    tag = "v${version}";
-    hash = "sha256-dv9rOpgVu/zT6U7w/anzAwkAa3/LuxAP0Pd1cLiPwxM=";
+    hash = "sha256-AWz8hQLKmhe4mugTCIsvRutknBwgdZS7omBkyFtSEOQ=";
  };

  patches = [ ./remove-sub-integration-symlink-hack.patch ];
--- a/Show More
+++ b/Show More