diff --git a/doc/release-notes/rl-2611.section.md b/doc/release-notes/rl-2611.section.md
index d0a2a1b0cd5b..d81e56e02933 100644
--- a/doc/release-notes/rl-2611.section.md
+++ b/doc/release-notes/rl-2611.section.md
@@ -66,6 +66,8 @@
 
 - `sing-box` has been updated to 1.14.0, which has removed some deprecated options.  See [upstream documentation](https://sing-box.sagernet.org/migration/) for details and migration options.
 
+- `xray` The `allowInsecure` option is no longer supported.
+
 - `gotosocial` has been updated to 0.22.0. This release contains a very long database migration, which should not be cancelled or interrupted under any circumstances.
  -  Postgres users: Following the migration, if you encounter slowdown on Postgres specifically (ie., timing out while loading timelines) you may need to run some manual database maintenance steps. Please check https://docs.gotosocial.org/en/stable/admin/database_maintenance/#postgres.
 
@@ -250,6 +252,10 @@
 
 - The fwts efi-runtime kernel module was removed.
 
+- `nextcloud35`: Added for the Nextcloud 35 major release.
+
+  See https://nextcloud.com/blog/nextcloud-hub26-summer/ for more details on the new major version.
+
 - `homebox` v0.26.0 introduced a new, required value to be set, `HBOX_AUTH_API_KEY_PEPPER`. If one is not provided the module will create one, it is recommended that you back this up as it is part of API Key generation and validation.
 
 - `nextpnr` introduced support for the nexus and gatemate architectures. Building support for each individual architecture can be configured using the package parameters.
diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 8495bc41199a..9eeda4761001 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -31588,6 +31588,11 @@
     githubId = 72203260;
     name = "wyndon";
   };
+  wyspr = {
+    name = "wyspr";
+    github = "preprocesor";
+    githubId = 5649544;
+  };
   wyvie = {
     email = "elijahrum@gmail.com";
     github = "alicerum";
diff --git a/nixos/doc/manual/release-notes/rl-2611.section.md b/nixos/doc/manual/release-notes/rl-2611.section.md
index dfeef32848a8..5e93cb7c77b9 100644
--- a/nixos/doc/manual/release-notes/rl-2611.section.md
+++ b/nixos/doc/manual/release-notes/rl-2611.section.md
@@ -381,8 +381,8 @@
   - If [`services.nextcloud.package`](#opt-services.nextcloud.package) is specified explicitly, this package will be installed (**recommended**)
   - If `system.stateVersion` is >=26.11, `pkgs.nextcloud34` will be installed by default.
   - If [`system.stateVersion`](#opt-system.stateVersion) is >=26.05, `pkgs.nextcloud33` will be installed by default.
-  - If [`system.stateVersion`](#opt-system.stateVersion) is >=25.11, `pkgs.nextcloud32` will be installed by default.
-  - Please note that Nextcloud prohibits skipping major versions while upgrading. You can upgrade to specific versions by declaring `services.nextcloud.package = pkgs.nextcloud33;`.
+  - `nextcloud32` is EOL and was thus removed.
+  - Please note that an upgrade from v32 (or older) to v34 directly is not possible. Please upgrade to `nextcloud33` (or earlier) first. Nextcloud prohibits skipping major versions while upgrading. You can upgrade by declaring `services.nextcloud.package = pkgs.nextcloud33;`.
 
 - `trilium-desktop` and `trilium-server` have been updated to 0.104.0. This release includes security hardening fixes that may break functionality. [See upstream release note for details](https://github.com/TriliumNext/Trilium/releases/tag/v0.104.0).
 
diff --git a/nixos/modules/services/web-apps/nextcloud.md b/nixos/modules/services/web-apps/nextcloud.md
index ad2b66ec941c..c4fb11759d26 100644
--- a/nixos/modules/services/web-apps/nextcloud.md
+++ b/nixos/modules/services/web-apps/nextcloud.md
@@ -5,7 +5,7 @@ self-hostable cloud platform. The server setup can be automated using
 [services.nextcloud](#opt-services.nextcloud.enable). A
 desktop client is packaged at `pkgs.nextcloud-client`.
 
-The current default by NixOS is `nextcloud34` which is also the latest
+The current default by NixOS is `nextcloud35` which is also the latest
 major version available.
 
 ## Basic usage {#module-services-nextcloud-basic-usage}
diff --git a/nixos/modules/services/web-apps/nextcloud.nix b/nixos/modules/services/web-apps/nextcloud.nix
index ab087cbce682..4d37641eccbe 100644
--- a/nixos/modules/services/web-apps/nextcloud.nix
+++ b/nixos/modules/services/web-apps/nextcloud.nix
@@ -465,9 +465,9 @@ in
       type = lib.types.package;
       description = "Which package to use for the Nextcloud instance.";
       relatedPackages = [
-        "nextcloud32"
         "nextcloud33"
         "nextcloud34"
+        "nextcloud35"
       ];
     };
     phpPackage = lib.mkPackageOption pkgs "php" {
@@ -1196,7 +1196,7 @@ in
       {
         warnings =
           let
-            latest = 34;
+            latest = 35;
             upgradeWarning = major: nixos: ''
               A legacy Nextcloud install (from before NixOS ${nixos}) may be installed.
 
@@ -1230,7 +1230,8 @@ in
           ++ (lib.optional (lib.versionOlder cfg.package.version "31") (upgradeWarning 30 "25.05"))
           ++ (lib.optional (lib.versionOlder cfg.package.version "32") (upgradeWarning 31 "25.11"))
           ++ (lib.optional (lib.versionOlder cfg.package.version "33") (upgradeWarning 32 "26.05"))
-          ++ (lib.optional (lib.versionOlder cfg.package.version "34") (upgradeWarning 33 "26.11"));
+          ++ (lib.optional (lib.versionOlder cfg.package.version "34") (upgradeWarning 33 "26.11"))
+          ++ (lib.optional (lib.versionOlder cfg.package.version "35") (upgradeWarning 34 "26.11"));
 
         services.nextcloud.package = lib.mkDefault (
           if pkgs ? nextcloud then
@@ -1246,7 +1247,7 @@ in
           else if lib.versionOlder stateVersion "26.11" then
             pkgs.nextcloud33
           else
-            pkgs.nextcloud34
+            pkgs.nextcloud35
         );
 
         services.nextcloud.phpOptions = lib.mkMerge [
diff --git a/nixos/tests/nextcloud/default.nix b/nixos/tests/nextcloud/default.nix
index 6c7ef18068e7..9f8e29859fe3 100644
--- a/nixos/tests/nextcloud/default.nix
+++ b/nixos/tests/nextcloud/default.nix
@@ -149,8 +149,8 @@ let
 in
 listToAttrs (
   concatMap genTests [
-    32
     33
     34
+    35
   ]
 )
diff --git a/pkgs/applications/editors/vscode/extensions/default.nix b/pkgs/applications/editors/vscode/extensions/default.nix
index 9f0f2fe0a8aa..8fbb2e4781b1 100644
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -2047,8 +2047,8 @@ let
         mktplcRef = {
           name = "gitlab-workflow";
           publisher = "gitlab";
-          version = "6.89.0";
-          hash = "sha256-KRU+nfUgnE7o08iTbSWDI01dBRiCelirXhnynpndXfQ=";
+          version = "6.90.3";
+          hash = "sha256-/6R/3FUXuvy836YeZSbw6HMrrIXdPbKqdNFBl4z36Y0=";
         };
         meta = {
           description = "GitLab extension for Visual Studio Code";
diff --git a/pkgs/applications/editors/vscode/extensions/google.colab/default.nix b/pkgs/applications/editors/vscode/extensions/google.colab/default.nix
index cb7a4c55bc45..4742e6c7f46f 100644
--- a/pkgs/applications/editors/vscode/extensions/google.colab/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/google.colab/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     publisher = "google";
     name = "colab";
-    version = "0.9.3";
-    hash = "sha256-zUppzF8/xyQ4ITXtm+zoAss5KWMbDxOkN0Otz+tEZEE=";
+    version = "0.9.6";
+    hash = "sha256-+Pb04QDCugRs8a4NM4VbTt2TtKXQKeNZKLtzKvn/7Ak=";
   };
 
   meta = {
diff --git a/pkgs/applications/editors/vscode/extensions/mongodb.mongodb-vscode/default.nix b/pkgs/applications/editors/vscode/extensions/mongodb.mongodb-vscode/default.nix
index 3df92b6cada1..06045df7d7be 100644
--- a/pkgs/applications/editors/vscode/extensions/mongodb.mongodb-vscode/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/mongodb.mongodb-vscode/default.nix
@@ -4,8 +4,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "mongodb-vscode";
     publisher = "mongodb";
-    version = "1.17.0";
-    hash = "sha256-MFfB/094dp/YA2y6HbPSoPr/xVYOrqpRcBMMmZuvEMs=";
+    version = "1.17.1";
+    hash = "sha256-yoUFxyu4rgJVbSLU4BMdR4rF53DHQHw5qGFwqRw0X7I=";
   };
 
   meta = {
diff --git a/pkgs/applications/networking/browsers/brave/packages/brave-origin.nix b/pkgs/applications/networking/browsers/brave/packages/brave-origin.nix
index 4f2aa1c3b51c..6208fc42a4d8 100644
--- a/pkgs/applications/networking/browsers/brave/packages/brave-origin.nix
+++ b/pkgs/applications/networking/browsers/brave/packages/brave-origin.nix
@@ -1,21 +1,21 @@
 # Expression generated by update.py; do not edit it by hand!
 rec {
   pname = "brave-origin";
-  version = "1.95.101";
+  version = "1.95.102";
   flavor = "origin";
 
   archives = {
     aarch64-linux = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-origin_${version}_arm64.deb";
-      sha256 = "c8bccc15a7db38e260203ede15fe3e5bc3591b23f7f8bdfef1c18acc8ee8e540";
+      sha256 = "3869eb0a0037a399871def707016e45e1eca113a493dc78c81666cfbe1639aab";
     };
     x86_64-linux = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-origin_${version}_amd64.deb";
-      sha256 = "d0cf5a3ff164aec9fd3c8259d25cbfce44b010fe36c36096a67966e4b03d99b3";
+      sha256 = "296dab8bd88cfcf7178dac175d65acd2284046706690f64b0923d819ffc5f217";
     };
     aarch64-darwin = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/Brave-Origin-arm64.dmg";
-      sha256 = "2861104b0926036980223a502fe7b84da2517608189605072bd10333bd7061cf";
+      sha256 = "e24b7585526746c0533541eec011f20dd17980a0ad0302e848f04087f7d434d8";
     };
   };
 }
diff --git a/pkgs/applications/networking/browsers/brave/packages/brave.nix b/pkgs/applications/networking/browsers/brave/packages/brave.nix
index aabf22e9481e..a6e5acfe14b4 100644
--- a/pkgs/applications/networking/browsers/brave/packages/brave.nix
+++ b/pkgs/applications/networking/browsers/brave/packages/brave.nix
@@ -1,20 +1,20 @@
 # Expression generated by update.py; do not edit it by hand!
 rec {
   pname = "brave";
-  version = "1.95.101";
+  version = "1.95.102";
 
   archives = {
     aarch64-linux = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_arm64.deb";
-      sha256 = "8260ff8796cc3fc8741324786cbb67ea56320f48f76700082c86c734dfd2df25";
+      sha256 = "d92e02754ec727430f530e51d8a3a51041d0df07d62589072c1a4d06bbf0037b";
     };
     x86_64-linux = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_amd64.deb";
-      sha256 = "7c41a55820117d93b821e55e55defb5f6cae8a86115c88f3a1026cd27f1c73cc";
+      sha256 = "930110fe57c83be3327388a943e9eacbcec083a3e1b4bc08bec413788418bdfe";
     };
     aarch64-darwin = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/Brave-Browser-arm64.dmg";
-      sha256 = "2deaed060d24f0809bb87332a4d75c7dd140bd38d0915b9e63791917eee3898f";
+      sha256 = "97eb5f8a17d1a0e191d3a47059e79b9fa47d3930035d10a23ad086df9e4ab1fb";
     };
   };
 }
diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index f9a8c2316589..68fbb0d11e11 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -218,13 +218,13 @@
     "vendorHash": "sha256-scHNFyHn4VYm8wtuBdVCpgKCzwPhzrC3KBs1YHXPwos="
   },
   "cloudflare_cloudflare": {
-    "hash": "sha256-o+p2QDCwzmhDJx1sUlFZVmZuvo0TiEM9JuLMxg6/B8Y=",
+    "hash": "sha256-F/Qkcu9XHxWrVbGVqWw2/AB1CDcY4hKm5cGDDtnsxP8=",
     "homepage": "https://registry.terraform.io/providers/cloudflare/cloudflare",
     "owner": "cloudflare",
     "repo": "terraform-provider-cloudflare",
-    "rev": "v5.24.0",
+    "rev": "v5.25.0",
     "spdx": "Apache-2.0",
-    "vendorHash": "sha256-RGloUh/lLCCfDJkPiXFfj9JdwI+OV2B/9YBelJZb4vU="
+    "vendorHash": "sha256-FGt4e+WyF5Wx3jw+U+L2kdybOnnAW/AA+mBeVbRQI0Y="
   },
   "cloudfoundry-community_cloudfoundry": {
     "hash": "sha256-1nYncJLVU/f9WD6Quh9IieIXgixPzbPk4zbtI1zmf9g=",
@@ -301,13 +301,13 @@
     "vendorHash": "sha256-KBzkbWlFM0SB+YzVU4YIaJxvQlMHalPeKPvvHh4L2kw="
   },
   "datadrivers_nexus": {
-    "hash": "sha256-t9hpZ4COmMPvs4TgcZLeuOA23oD5vvHw8UVK7SpzI0Y=",
+    "hash": "sha256-+MTyr7voagijpqTb7vswO8PAFZpxz3UWAQLEs0os4+s=",
     "homepage": "https://registry.terraform.io/providers/datadrivers/nexus",
     "owner": "datadrivers",
     "repo": "terraform-provider-nexus",
-    "rev": "v3.0.0",
+    "rev": "v3.0.1",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-DXQ8bfDLI0Wt2UXXeRXaZkgLXoYKjJ6MMNeTbZctD6E="
+    "vendorHash": "sha256-kPx/SicGbmkAu7L11WgWK3PO8M2AkUP4sdUCHOwdKbY="
   },
   "denoland_deno": {
     "hash": "sha256-7IvJrhXMeAmf8e21QBdYNSJyVMEzLpat4Tm4zHWglW8=",
@@ -1148,13 +1148,13 @@
     "vendorHash": "sha256-6M6jTrukO0VhyZRdYbbICm22upbGyOkUSuHqMLTPcEM="
   },
   "rootlyhq_rootly": {
-    "hash": "sha256-wfwqPk5D3D3PwzOfA9i6qxaAmN84MjHiNAablIX9iKg=",
+    "hash": "sha256-bn5QMl+9okXzkfZDOdbYPpMs5x0JDL22cwW6AXFkE5A=",
     "homepage": "https://registry.terraform.io/providers/rootlyhq/rootly",
     "owner": "rootlyhq",
     "repo": "terraform-provider-rootly",
-    "rev": "v5.21.0",
+    "rev": "v5.21.1",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-cJVExBKr7kWKzXnBTztNnyUsw/qeKhP+TncCPoPt2Y0="
+    "vendorHash": "sha256-2zHDQyIQQm9ySpPSjobQXTXFopT4290b1O0y+lvVD88="
   },
   "rundeck_rundeck": {
     "hash": "sha256-g8unbz8+UGLiAOJju6E2bLkygvZgHkv173PdMDefmrc=",
@@ -1355,13 +1355,13 @@
     "vendorHash": "sha256-SF11E60OQiRdf+Pf6XyJg60yGRnGOcSzhrYccrWaeYE="
   },
   "terraform-lxd_lxd": {
-    "hash": "sha256-fGiXnP8neze47FQXVCFlScya9ih67/5TQW5xKEBnI+Y=",
+    "hash": "sha256-U/x3CkUynyMvB9FWzlYgXIfC6/RWeNRV++4ceGW3Rnc=",
     "homepage": "https://registry.terraform.io/providers/terraform-lxd/lxd",
     "owner": "terraform-lxd",
     "repo": "terraform-provider-lxd",
-    "rev": "v3.0.2",
+    "rev": "v3.1.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-jOZw/va3dA0DYmnYSKbASHvyL7levjf1Bk6WelLga+Q="
+    "vendorHash": "sha256-OHCnxqn09NyqsdTCRUJseNAL1DMpvl6Icu3YEzjLgPM="
   },
   "terraform-provider-openstack_openstack": {
     "hash": "sha256-6TcyPUacJNfGsaevg1DQ+WJrMFvGeo2mmsE2+P3RAZM=",
diff --git a/pkgs/by-name/an/ankama-launcher/package.nix b/pkgs/by-name/an/ankama-launcher/package.nix
index c0791db9e72e..5b6e0d5aefce 100644
--- a/pkgs/by-name/an/ankama-launcher/package.nix
+++ b/pkgs/by-name/an/ankama-launcher/package.nix
@@ -5,15 +5,15 @@
 }:
 let
   pname = "ankama-launcher";
-  version = "3.14.14";
+  version = "3.15.5";
 
   # The original URL for the launcher is:
   # https://launcher.cdn.ankama.com/installers/production/Ankama%20Launcher-Setup-x86_64.AppImage
   # As it does not encode the version, we use the wayback machine (web.archive.org) to get a fixed URL.
   # To update the client, head to web.archive.org and create a new snapshot of the download page.
   src = fetchurl {
-    url = "https://web.archive.org/web/20260605015300/https://launcher.cdn.ankama.com/installers/production/Ankama%20Launcher-Setup-x86_64.AppImage";
-    hash = "sha256-9w1ho9DZvDHXQbXjpMY1wnWDwYlMKO1igrJcCahQkVQ=";
+    url = "https://web.archive.org/web/20260909143802/https://launcher.cdn.ankama.com/installers/production/Ankama%20Launcher-Setup-x86_64.AppImage";
+    hash = "sha256-6q0kAFXtrnud8rvxN6o6mIiwklzjZYAopf1MlS3ODbU=";
   };
 
   appimageContents = appimageTools.extract { inherit pname version src; };
diff --git a/pkgs/by-name/an/anydesk/package.nix b/pkgs/by-name/an/anydesk/package.nix
index 28c2e9e83788..9040328d192d 100644
--- a/pkgs/by-name/an/anydesk/package.nix
+++ b/pkgs/by-name/an/anydesk/package.nix
@@ -37,7 +37,6 @@
   freetype,
   fontconfig,
   polkit,
-  polkit_gnome,
   pciutils,
   copyDesktopItems,
   pulseaudio,
@@ -86,7 +85,6 @@ stdenv.mkDerivation (finalAttrs: {
     freetype
     fontconfig
     polkit
-    polkit_gnome
     pulseaudio
     libxcb
     libxkbfile
diff --git a/pkgs/by-name/as/asphyxia/package.nix b/pkgs/by-name/as/asphyxia/package.nix
new file mode 100644
index 000000000000..65615fbd3e1c
--- /dev/null
+++ b/pkgs/by-name/as/asphyxia/package.nix
@@ -0,0 +1,45 @@
+{
+  lib,
+  fetchFromGitHub,
+  libpcap,
+  nix-update-script,
+  pkg-config,
+  rustPlatform,
+  versionCheckHook,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "asphyxia";
+  version = "0.10.0";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "jtprogru";
+    repo = "asphyxia";
+    tag = finalAttrs.version;
+    hash = "sha256-XjpGhdHYzTCFtQ2W9KD8VY7RSvQPPgbxJD80GIAaKFM=";
+  };
+
+  cargoHash = "sha256-lOH8mrZiauXoI7jYFHQ/klo9enS0aOixk5b6InUED2o=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [ libpcap ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  __darwinAllowLocalNetworking = true;
+
+  meta = {
+    description = "Parallel network scanner";
+    homepage = "https://github.com/jtprogru/asphyxia";
+    changelog = "https://github.com/jtprogru/asphyxia/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "asphyxia";
+  };
+})
diff --git a/pkgs/by-name/b6/b612/package.nix b/pkgs/by-name/b6/b612/package.nix
index 4812e55b09c2..b7648aac7386 100644
--- a/pkgs/by-name/b6/b612/package.nix
+++ b/pkgs/by-name/b6/b612/package.nix
@@ -19,7 +19,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   nativeBuildInputs = [ installFonts ];
 
   meta = {
-    homepage = "https://b612-font.com/";
+    homepage = "https://projects.eclipse.org/projects/polarsys.b612";
     description = "Highly legible font family for use on aircraft cockpit screens";
     longDescription = ''
       B612 is the result of a research project initiated by Airbus. The font
diff --git a/pkgs/by-name/bb/bbedit/package.nix b/pkgs/by-name/bb/bbedit/package.nix
index e2a82850ce15..cadb3f5b0522 100644
--- a/pkgs/by-name/bb/bbedit/package.nix
+++ b/pkgs/by-name/bb/bbedit/package.nix
@@ -34,7 +34,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     description = "Powerful and full-featured professional HTML and text editor for macOS";
     homepage = "https://www.barebones.com/products/bbedit/";
     license = lib.licenses.unfree;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ iedame ];
     platforms = lib.platforms.darwin;
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
   };
diff --git a/pkgs/by-name/ca/calibre-web/package.nix b/pkgs/by-name/ca/calibre-web/package.nix
index 81fff0bb8cc0..f3dbabd0fe66 100644
--- a/pkgs/by-name/ca/calibre-web/package.nix
+++ b/pkgs/by-name/ca/calibre-web/package.nix
@@ -37,7 +37,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     mv cps src/calibreweb
 
     substituteInPlace pyproject.toml \
-      --replace-fail 'cps = "calibreweb.__main__:main"' 'calibre-web = "calibreweb.__main__:main"'
+      --replace-fail 'cps = "calibreweb.__main__:main"' 'calibre-web = "calibreweb:main"'
   '';
 
   build-system = [ python3Packages.setuptools ];
diff --git a/pkgs/by-name/cl/clojure-lsp/package.nix b/pkgs/by-name/cl/clojure-lsp/package.nix
index 7d8fa1cc2b47..e3ba66964d9f 100644
--- a/pkgs/by-name/cl/clojure-lsp/package.nix
+++ b/pkgs/by-name/cl/clojure-lsp/package.nix
@@ -9,11 +9,11 @@
 
 buildGraalvmNativeImage (finalAttrs: {
   pname = "clojure-lsp";
-  version = "2026.02.20-16.08.58";
+  version = "2026.07.06-14.34.19";
 
   src = fetchurl {
     url = "https://github.com/clojure-lsp/clojure-lsp/releases/download/${finalAttrs.version}/clojure-lsp-standalone.jar";
-    hash = "sha256-sSE/BIRT5CNc2ZS3LwSMLvQDVKLMlM1BIhKq6joX3c8=";
+    hash = "sha256-GU92OeKzKm42Qy+6fMSpsSj0WInSrQVyVVFSPxZNaEY=";
   };
 
   strictDeps = true;
diff --git a/pkgs/by-name/co/codex/package.nix b/pkgs/by-name/co/codex/package.nix
index d85fd1e80dde..e9efdd09961b 100644
--- a/pkgs/by-name/co/codex/package.nix
+++ b/pkgs/by-name/co/codex/package.nix
@@ -29,18 +29,18 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "codex";
-  version = "0.154.0";
+  version = "0.155.1";
 
   src = fetchFromGitHub {
     owner = "openai";
     repo = "codex";
     tag = "rust-v${finalAttrs.version}";
-    hash = "sha256-Nm+61N6YHxGhjLsm/giVSEg4QvJmIgWxyTQ1L89kpCs=";
+    hash = "sha256-iFW66odceRNBsVG5bD9SdcQGxhpm/QIZwYjGCrfMXiI=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/codex-rs";
 
-  cargoHash = "sha256-9F8dyEiVkhelrIyfQ9ZkvuxfIYNN6akbpadREa4A1n0=";
+  cargoHash = "sha256-6IAX/SFSSgSKKFxKsUXoZ9nNQaHJ+EjZ5a4bJwyDdF0=";
 
   __structuredAttrs = true;
 
diff --git a/pkgs/by-name/co/cogitator/package.nix b/pkgs/by-name/co/cogitator/package.nix
new file mode 100644
index 000000000000..d9fef39b7a5a
--- /dev/null
+++ b/pkgs/by-name/co/cogitator/package.nix
@@ -0,0 +1,64 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  nix-update-script,
+  openssl,
+  pkg-config,
+  rustPlatform,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "cogitator";
+  version = "0.7.0";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "LeechoShoop";
+    repo = "cogitator";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-1v7OXCgjvTrFhSpGgnnfre2oSfSldKj52xSJq/6YtiU=";
+  };
+
+  cargoHash = "sha256-FJP5Gg8EvfTxms7mX9J6wW9HM3nYAxILUS1Oj7iedn4=";
+
+  # netstat2 0.9.1's glob imports of libc and its own ffi types are ambiguous
+  # with newer libc versions that now define __be16/tcp_info themselves
+  postPatch = ''
+        netstat2Dir="../${finalAttrs.pname}-${finalAttrs.version}-vendor/source-registry-0/netstat2-0.9.1/src/integrations/linux"
+        substituteInPlace "$netstat2Dir/ffi/structs.rs" \
+          --replace-fail \
+            'use crate::integrations::linux::ffi::types::*;' \
+            'use crate::integrations::linux::ffi::types::*;
+    use crate::integrations::linux::ffi::types::__be16;'
+        substituteInPlace "$netstat2Dir/netlink_iterator.rs" \
+          --replace-fail \
+            '*const tcp_info' \
+            '*const crate::integrations::linux::ffi::tcp_info'
+  '';
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [ openssl ];
+
+  checkFlagsArray = [
+    # Tests are broken
+    "--skip=proxy_guard::tests::relative_uri_no_host_header_falls_back_to_tunnel_host"
+    "--skip=spider::tests::audit_html_flags_potential_token_leak_without_panicking"
+  ];
+
+  postInstall = lib.optionalString (!stdenv.hostPlatform.isDarwin) ''
+    mv $out/bin/Cogitator $out/bin/$pname
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Terminal TLS MITM intercepting proxy and web security toolkit";
+    homepage = "https://github.com/LeechoShoop/cogitator";
+    changelog = "https://github.com/LeechoShoop/cogitator/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "cogitator";
+  };
+})
diff --git a/pkgs/by-name/cr/crack-hash/package.nix b/pkgs/by-name/cr/crack-hash/package.nix
new file mode 100644
index 000000000000..d679acbe52e8
--- /dev/null
+++ b/pkgs/by-name/cr/crack-hash/package.nix
@@ -0,0 +1,38 @@
+{
+  lib,
+  fetchFromGitHub,
+  nix-update-script,
+  rustPlatform,
+  versionCheckHook,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "crack-hash";
+  version = "1.1.0-unstable-2025-12-31";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "kOaDT";
+    repo = "crack-hash";
+    # https://github.com/kOaDT/crack-hash/issues/2
+    rev = "887bedec144b59488b93dbe33a6f781f83360ea7";
+    hash = "sha256-h2NEuyEX5JEpSmtT7Pn/TJkKeMx+dupLQo4iLHcw3AY=";
+  };
+
+  cargoHash = "sha256-mD/3pWY8jf8QCgtYYtPxyVD6SheYi76tNhoJ4uyJ0WU=";
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  doInstallCheck = false;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Hash cracking tool";
+    homepage = "https://github.com/kOaDT/crack-hash";
+    # https://github.com/kOaDT/crack-hash/issues/1
+    license = lib.licenses.unfree;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "crack-hash";
+  };
+})
diff --git a/pkgs/by-name/cr/crun/package.nix b/pkgs/by-name/cr/crun/package.nix
index dbe2a4b97914..e578a68c8e94 100644
--- a/pkgs/by-name/cr/crun/package.nix
+++ b/pkgs/by-name/cr/crun/package.nix
@@ -15,11 +15,23 @@
   nixosTests,
   criu,
   versionCheckHook,
+  wamr,
+  wasmedge,
+  wasmer,
+  wasmtime,
   withLibkrun ? lib.meta.availableOn stdenv.hostPlatform libkrun,
   withLibkrunSEV ? false,
+  withWamr ? false,
+  withWasmedge ? false,
+  withWasmer ? false,
+  withWasmtime ? false,
 }:
 
 let
+  wamrShared = wamr.overrideAttrs (old: {
+    cmakeFlags = (old.cmakeFlags or [ ]) ++ [ "-DBUILD_SHARED_LIBS=ON" ];
+  });
+
   # these tests require additional permissions
   disabledTests = [
     "test_capabilities.py"
@@ -80,17 +92,44 @@ stdenv.mkDerivation (finalAttrs: {
   ]
   ++ lib.optionals withLibkrunSEV [
     libkrun-sev
+  ]
+  ++ lib.optionals withWasmtime [
+    wasmtime.dev
+    wasmtime.lib
+  ]
+  ++ lib.optionals withWasmedge [
+    wasmedge
+  ]
+  ++ lib.optionals withWamr [
+    wamrShared
+  ]
+  ++ lib.optionals withWasmer [
+    wasmer
   ];
 
-  configureFlags = lib.optionals withLibkrun [
-    "--with-libkrun"
-  ];
+  configureFlags =
+    lib.optionals withLibkrun [
+      "--with-libkrun"
+    ]
+    ++ lib.optionals withWamr [
+      "--with-wamr"
+    ]
+    ++ lib.optionals withWasmedge [
+      "--with-wasmedge"
+    ]
+    ++ lib.optionals withWasmer [
+      "--with-wasmer"
+    ]
+    ++ lib.optionals withWasmtime [
+      "--with-wasmtime"
+    ];
 
   enableParallelBuilding = true;
   strictDeps = true;
 
   env = {
-    NIX_LDFLAGS = "-lcriu";
+    # wamr.c calls two functions directly instead of via dlsym (upstream bug)
+    NIX_LDFLAGS = "-lcriu" + lib.optionalString withWamr " -liwasm";
   };
 
   # we need this before autoreconfHook does its thing in order to initialize
@@ -110,6 +149,22 @@ stdenv.mkDerivation (finalAttrs: {
   + lib.optionalString withLibkrunSEV ''
     substituteInPlace src/libcrun/handlers/krun.c \
       --replace-fail '"libkrun-sev.so.1"' '"${libkrun-sev}/lib/libkrun-sev.so.1"'
+  ''
+  + lib.optionalString withWamr ''
+    substituteInPlace src/libcrun/handlers/wamr.c \
+      --replace-fail '"libiwasm.so"' '"${wamrShared}/lib/libiwasm.so"'
+  ''
+  + lib.optionalString withWasmedge ''
+    substituteInPlace src/libcrun/handlers/wasmedge.c \
+      --replace-fail '"libwasmedge.so.0"' '"${wasmedge}/lib/libwasmedge.so.0"'
+  ''
+  + lib.optionalString withWasmer ''
+    substituteInPlace src/libcrun/handlers/wasmer.c \
+      --replace-fail '"libwasmer.so"' '"${wasmer}/lib/libwasmer.so"'
+  ''
+  + lib.optionalString withWasmtime ''
+    substituteInPlace src/libcrun/handlers/wasmtime.c \
+      --replace-fail '"libwasmtime.so"' '"${wasmtime.lib}/lib/libwasmtime.so"'
   '';
 
   doCheck = true;
diff --git a/pkgs/by-name/da/datafusion-cli/package.nix b/pkgs/by-name/da/datafusion-cli/package.nix
index b62bc197c8d0..850743d43e7f 100644
--- a/pkgs/by-name/da/datafusion-cli/package.nix
+++ b/pkgs/by-name/da/datafusion-cli/package.nix
@@ -8,17 +8,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "datafusion-cli";
-  version = "55.0.0";
+  version = "55.1.0";
 
   src = fetchFromGitHub {
     name = "datafusion-cli-source";
     owner = "apache";
     repo = "datafusion";
     tag = finalAttrs.version;
-    hash = "sha256-wP63vXcMuxoZzoQVGorSjjGUdRa8z8z9oB7Y8HApDYE=";
+    hash = "sha256-wUrGYaZ5MXP4uIg1n+QmW+5Q+BFDUOnX8IbgWTeY3vw=";
   };
 
-  cargoHash = "sha256-D6kmXzKb9VFGkxKahQdWZXFAAN4klpmTgKIsgrTnKmg=";
+  cargoHash = "sha256-oZ184w5lAvK4OL7MKR3d51/b9EWxCrXeRQUqUSwiGig=";
 
   buildAndTestSubdir = "datafusion-cli";
 
diff --git a/pkgs/by-name/de/defuddle/package.nix b/pkgs/by-name/de/defuddle/package.nix
index f08f4cf26a75..451eb3a25391 100644
--- a/pkgs/by-name/de/defuddle/package.nix
+++ b/pkgs/by-name/de/defuddle/package.nix
@@ -18,10 +18,6 @@ buildNpmPackage rec {
 
   npmDepsHash = "sha256-BxGIVt2gkNQkWXQyLnPQQAtCNFJKlXmTctKVAxFzjfM=";
 
-  # jsdom is both a peerDependency and devDependency; pruning
-  # devDependencies removes it, but the CLI needs it at runtime.
-  dontNpmPrune = true;
-
   passthru.updateScript = nix-update-script { };
 
   __structuredAttrs = true;
diff --git a/pkgs/by-name/dm/dms-shell/package.nix b/pkgs/by-name/dm/dms-shell/package.nix
index 1132c9257267..f586b991ee98 100644
--- a/pkgs/by-name/dm/dms-shell/package.nix
+++ b/pkgs/by-name/dm/dms-shell/package.nix
@@ -85,7 +85,7 @@ buildGoModule (
       install -D ${finalAttrs.src}/assets/com.danklinux.dms.notepad.desktop \
         $out/share/applications/com.danklinux.dms.notepad.desktop
       install -D ${finalAttrs.src}/core/assets/danklogo.svg \
-        $out/share/hicolor/scalable/apps/danklogo.svg
+        $out/share/icons/hicolor/scalable/apps/danklogo.svg
 
       wrapProgram $out/bin/dms \
         --run 'export DMS_ORIG_NIXPKGS_QT6_QML_IMPORT_PATH="''${NIXPKGS_QT6_QML_IMPORT_PATH:-}"' \
diff --git a/pkgs/by-name/do/docker-sbx/package.nix b/pkgs/by-name/do/docker-sbx/package.nix
index e08fe53b538a..1ec96b3bfc3f 100644
--- a/pkgs/by-name/do/docker-sbx/package.nix
+++ b/pkgs/by-name/do/docker-sbx/package.nix
@@ -15,9 +15,9 @@
 }:
 let
   hashes = {
-    "x86_64-linux" = "sha256-LsRbx5OMIML0Bv6MxyKUrVqVS9wEdgFIS4m/GhCDEdQ=";
-    "aarch64-linux" = "sha256-OcRwpfXgmRscI1iVLiqzKnsDCb+lesYra7xktGbQLBc=";
-    "aarch64-darwin" = "sha256-0S+gau7OKY2W2uBYEB8lZTd3CgDvRuZYR2Lg8nsGpaM=";
+    "x86_64-linux" = "sha256-PrFbhETpaaqo1jclC+8PK/kMsDCroKcBala45fzdJf4=";
+    "aarch64-linux" = "sha256-Ma46iMwIN0PllWn+3WofUns73WxWfVjlvGDGwK8ZpUA=";
+    "aarch64-darwin" = "sha256-6fybO66cVyilcm9JubNgkyhRnaV288mf2Ofl0TcAinw=";
   };
   platformName = {
     "x86_64-linux" = "linux-amd64";
@@ -27,7 +27,7 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "docker-sbx";
-  version = "0.39.0";
+  version = "0.43.0";
   src =
     let
       throwPlat = throw "Unsupported platform ${stdenvNoCC.hostPlatform.system}";
diff --git a/pkgs/by-name/do/dovi-tool/package.nix b/pkgs/by-name/do/dovi-tool/package.nix
index 5c611438cf69..3cdddf975e42 100644
--- a/pkgs/by-name/do/dovi-tool/package.nix
+++ b/pkgs/by-name/do/dovi-tool/package.nix
@@ -17,16 +17,16 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "dovi-tool";
-  version = "2.3.3";
+  version = "2.3.4";
 
   src = fetchFromGitHub {
     owner = "quietvoid";
     repo = "dovi_tool";
     tag = finalAttrs.version;
-    hash = "sha256-oXHXt1u1zxWti22tT4nJQhVdCtIshKrlve8896QQg84=";
+    hash = "sha256-CDAyfW3Yed9Vxn7f0XE1kLOPQrvH1IIvz7MSE8YSZ5Y=";
   };
 
-  cargoHash = "sha256-rJw9fEZ696N8xsFXCL5GWIuLYPXKp2K0WqFxbM1iGiw=";
+  cargoHash = "sha256-x9WS7XLljDkePC4TXegT8invNxB+SVtBw/xC0Iw51VE=";
 
   nativeBuildInputs = lib.optionals (!stdenv.hostPlatform.isDarwin) [
     pkg-config
diff --git a/pkgs/by-name/ed/editorconfig-checker/package.nix b/pkgs/by-name/ed/editorconfig-checker/package.nix
index a6d9171fce87..e066d2398f17 100644
--- a/pkgs/by-name/ed/editorconfig-checker/package.nix
+++ b/pkgs/by-name/ed/editorconfig-checker/package.nix
@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "editorconfig-checker";
-  version = "4.0.1";
+  version = "4.0.2";
 
   src = fetchFromGitHub {
     owner = "editorconfig-checker";
     repo = "editorconfig-checker";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-7mqmDyyDs+BzCLXF6AiDS/uCUXgLf0ImRkqgR/OZ9DY=";
+    hash = "sha256-clahBJTjfUIMn4D6OxZDXtQ+nnjuExQsuxI/lp0AYrs=";
   };
 
-  vendorHash = "sha256-/0SKWWZpCWWHKZqz1ZC+LbkXf6iow8LUT0Yg101tGs8=";
+  vendorHash = "sha256-DufIXNRFuQ+qymKeAaPNB4j8CS6M1FU3p8V9sPOWmCI=";
 
   # Tests run on source and don't expect vendor dir.
   doCheck = false;
diff --git a/pkgs/by-name/el/electron-cash/package.nix b/pkgs/by-name/el/electron-cash/package.nix
index b8c8b6b05fb7..05bd7ee5157b 100644
--- a/pkgs/by-name/el/electron-cash/package.nix
+++ b/pkgs/by-name/el/electron-cash/package.nix
@@ -9,14 +9,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "electron-cash";
-  version = "4.4.2";
+  version = "4.4.6";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Electron-Cash";
     repo = "Electron-Cash";
     tag = version;
-    sha256 = "sha256-hqaPxetS6JONvlRMjNonXUGFpdmnuadD00gcPzY07x0=";
+    sha256 = "sha256-uzYkkth38PaAz8EULh1qwdY6/NxOW7xtjW2tmYyMC1Q=";
   };
 
   build-system = with python3Packages; [
@@ -80,7 +80,7 @@ python3Packages.buildPythonApplication rec {
     substituteInPlace setup.py \
       --replace-fail "(share_dir" '("share"'
     substituteInPlace electroncash/secp256k1.py \
-      --replace-fail "libsecp256k1.so.0" "${secp256k1}/lib/libsecp256k1.so.5"
+      --replace-fail "libsecp256k1.so.0" "${secp256k1}/lib/libsecp256k1.so"
     substituteInPlace contrib/requirements/requirements.txt \
       --replace-fail "python-dateutil<2.9" "python-dateutil<2.10"
   '';
diff --git a/pkgs/by-name/el/element-call/package.nix b/pkgs/by-name/el/element-call/package.nix
index 98e63698b458..304397931dc5 100644
--- a/pkgs/by-name/el/element-call/package.nix
+++ b/pkgs/by-name/el/element-call/package.nix
@@ -58,20 +58,20 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "element-call";
-  version = "0.25.0";
+  version = "0.26.0";
 
   src = fetchFromGitHub {
     owner = "element-hq";
     repo = "element-call";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Nbb+ob16I3rHQ8BEN041nmQItHDBoakB3SojD0tCy9w=";
+    hash = "sha256-QAgYeWV37VtEnvoDvqEAqXoR1mRVVpyA4XqCPEXGSGk=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     inherit pnpm;
     fetcherVersion = 4;
-    hash = "sha256-/yGajAaFupPmL1/HL2qMGdpG8l0kP5t5iwb0/u2ANi8=";
+    hash = "sha256-0ZBSIIfZwxgtEGvedEEc7bbod2UUeFGGqquJna7cr8s=";
   };
 
   inherit matrix-js-sdk;
diff --git a/pkgs/by-name/fi/filezilla/package.nix b/pkgs/by-name/fi/filezilla/package.nix
index 95e651debf48..939e7721001a 100644
--- a/pkgs/by-name/fi/filezilla/package.nix
+++ b/pkgs/by-name/fi/filezilla/package.nix
@@ -23,13 +23,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "filezilla";
-  version = "3.70.6";
+  version = "3.71.1";
 
   src = fetchurl {
     # Upstream download link was made unstable on purpose
     # See https://trac.filezilla-project.org/ticket/13186
     url = "https://sources.archlinux.org/other/filezilla/filezilla-${finalAttrs.version}.tar.xz";
-    hash = "sha256-PdJCWpf5bbjMiyEuG2BdeVEljj2jJ5yQEHq/SmqJyD8=";
+    hash = "sha256-Pfm5s+Wyw33G2ey4g1VKuhQKAuxHw9a1IzO/FzOvTaQ=";
   };
 
   configureFlags = [
diff --git a/pkgs/by-name/fi/firewalld/package.nix b/pkgs/by-name/fi/firewalld/package.nix
index 8e214219a5b5..a98ed2ff03ab 100644
--- a/pkgs/by-name/fi/firewalld/package.nix
+++ b/pkgs/by-name/fi/firewalld/package.nix
@@ -43,7 +43,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "firewalld";
-  version = "2.5.1";
+  version = "2.5.2";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -52,7 +52,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "firewalld";
     repo = "firewalld";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-fwVRGA8IBwxVc7keo8Yv9qMwv1+PwC6IViD04mQQcug=";
+    hash = "sha256-LKwjponEBNhCtTifeJQQrWP+1vdpaiH1UhriUCAljBE=";
   };
 
   patches = [
diff --git a/pkgs/by-name/fz/fzssh/package.nix b/pkgs/by-name/fz/fzssh/package.nix
index eaf2bbda4c52..482ab10f5a1d 100644
--- a/pkgs/by-name/fz/fzssh/package.nix
+++ b/pkgs/by-name/fz/fzssh/package.nix
@@ -19,14 +19,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "fzssh";
-  version = "1.3.0";
+  version = "1.4.0";
   __structuredAttrs = true;
 
   src = fetchurl {
     # Upstream download link was made unstable on purpose
     # See https://trac.filezilla-project.org/ticket/13186
     url = "https://sources.archlinux.org/other/packages/fzssh/fzssh-${finalAttrs.version}.tar.xz";
-    hash = "sha256-hkWCsgNyZYi1oW2GFB/5Wrd9I5l2L+u+H97ZLk8EeZY=";
+    hash = "sha256-DFMXgpg2RATh/kzj1QJnzxI45StBSmpTNWvEOzeBEzg=";
   };
 
   strictDeps = true;
@@ -54,7 +54,7 @@ stdenv.mkDerivation (finalAttrs: {
     homepage = "https://lib.filezilla-project.org/";
     description = "SSH/SFTP library based on libfilezilla";
     license = lib.licenses.gpl3Plus;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ iedame ];
     pkgConfigModules = [ "libfzssh-client" ];
   };
 })
diff --git a/pkgs/by-name/gc/gcr_3/package.nix b/pkgs/by-name/gc/gcr_3/package.nix
index 62ed7cf25e9c..73ac2531c2c9 100644
--- a/pkgs/by-name/gc/gcr_3/package.nix
+++ b/pkgs/by-name/gc/gcr_3/package.nix
@@ -88,6 +88,9 @@ stdenv.mkDerivation (finalAttrs: {
   ]
   ++ lib.optionals (!systemdSupport) [
     "-Dsystemd=disabled"
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isMusl [
+    "-Dc_args=-D_GNU_SOURCE"
   ];
 
   doCheck = false; # fails 21 out of 603 tests, needs dbus daemon
diff --git a/pkgs/by-name/go/goverlay/package.nix b/pkgs/by-name/go/goverlay/package.nix
index f7f10c6e3b81..6051d804c3da 100644
--- a/pkgs/by-name/go/goverlay/package.nix
+++ b/pkgs/by-name/go/goverlay/package.nix
@@ -32,13 +32,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "goverlay";
-  version = "1.9.0";
+  version = "1.9.2";
 
   src = fetchFromGitHub {
     owner = "benjamimgois";
     repo = "goverlay";
     tag = finalAttrs.version;
-    hash = "sha256-Il2EtcTLswmhQhIZ8lcOWqryoqvSNXZ3b1FiJPv85M8=";
+    hash = "sha256-gU2jgmjPP1H9aqBVSz+M/ZkHa0TqzS1fAcgQr5EU/8o=";
   };
 
   outputs = [
@@ -77,6 +77,10 @@ stdenv.mkDerivation (finalAttrs: {
 
   doCheck = true;
 
+  nativeCheckInputs = [
+    curl
+  ];
+
   checkPhase = ''
     # test-logic
     HOME=$(mktemp -d) lazbuild --lazarusdir=${lazarus-qt6}/share/lazarus -B tests/logic/logic_tests.lpi --widgetset=qt6
@@ -87,15 +91,6 @@ stdenv.mkDerivation (finalAttrs: {
       ]
     }
     ./tests/logic/logic_tests
-    # test-gui
-    HOME=$(mktemp -d) lazbuild --lazarusdir=${lazarus-qt6}/share/lazarus -B tests/gui/gui_tests.lpi --widgetset=qt6
-    patchelf ./tests/gui/gui_tests --set-rpath ${
-      lib.makeLibraryPath [
-        libx11
-        qt6Packages.libqtpas
-      ]
-    }
-    QT_QPA_PLATFORM=offscreen ./tests/gui/gui_tests
   '';
 
   preFixup = ''
diff --git a/pkgs/by-name/je/jellyfin-mpv-shim/package.nix b/pkgs/by-name/je/jellyfin-mpv-shim/package.nix
index 09bc30ca7aa4..d27be525effa 100644
--- a/pkgs/by-name/je/jellyfin-mpv-shim/package.nix
+++ b/pkgs/by-name/je/jellyfin-mpv-shim/package.nix
@@ -10,14 +10,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "jellyfin-mpv-shim";
-  version = "2.10.0";
+  version = "3.0.0";
   pyproject = true;
 
   # contains shaderpacks
   src = fetchPypi {
     pname = "jellyfin_mpv_shim";
     inherit version;
-    hash = "sha256-ZWmJQJAGAonStZyWww4P+034f2vGnTwLua7KUOqoBBE=";
+    hash = "sha256-K4dmJ7/aNsxEWKLXY8RNvszmA8FstzD/Kh7M0wkU/Rs=";
   };
 
   nativeBuildInputs = [
@@ -34,10 +34,9 @@ python3Packages.buildPythonApplication rec {
     python-mpv-jsonipc
     requests
 
-    # gui + mirror dependencies
+    # gui dependencies
     pillow
     pystray
-    tkinter
 
     # discord rich presence dependency
     pypresence
diff --git a/pkgs/by-name/jo/joplin-cli/package.nix b/pkgs/by-name/jo/joplin-cli/package.nix
index 0c07ab58aee8..b0d81537b620 100644
--- a/pkgs/by-name/jo/joplin-cli/package.nix
+++ b/pkgs/by-name/jo/joplin-cli/package.nix
@@ -113,11 +113,11 @@ stdenv.mkDerivation (finalAttrs: {
     rm -rf $out/lib/packages/lib/node_modules/canvas
 
     # Remove extra files
-    rm -rf $out/lib/packages/app-cli/{app/*.test.ts,*.md,.*ignore,tests/,tools/,*.js,*.json,*.sh}
+    rm -rf $out/lib/packages/app-cli/{app/,*.md,.*ignore,tests/,tools/,*.js,tsconfig.json,*.sh}
 
     # Link final binary
-    chmod +x $out/lib/packages/app-cli/app/main.js
-    ln -s $out/lib/packages/app-cli/app/main.js $out/bin/joplin
+    chmod +x $out/lib/packages/app-cli/build/main.js
+    ln -s $out/lib/packages/app-cli/build/main.js $out/bin/joplin
     patchShebangs $out/bin/joplin
 
     runHook postInstall
diff --git a/pkgs/applications/networking/cluster/kubectl-view-allocations/default.nix b/pkgs/by-name/ku/kubectl-view-allocations/package.nix
similarity index 87%
rename from pkgs/applications/networking/cluster/kubectl-view-allocations/default.nix
rename to pkgs/by-name/ku/kubectl-view-allocations/package.nix
index 6692697c2cb4..cdbbe7ed0254 100644
--- a/pkgs/applications/networking/cluster/kubectl-view-allocations/default.nix
+++ b/pkgs/by-name/ku/kubectl-view-allocations/package.nix
@@ -6,14 +6,16 @@
   versionCheckHook,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "kubectl-view-allocations";
   version = "3.0.2";
 
+  __structuredAttrs = true;
+
   src = fetchFromGitHub {
     owner = "davidB";
     repo = "kubectl-view-allocations";
-    tag = version;
+    tag = finalAttrs.version;
     hash = "sha256-/rtHY5vgurdl9BviyLdZ/8Rii4OCRTZYRl8OXriD8NM=";
   };
 
@@ -29,4 +31,4 @@ rustPlatform.buildRustPackage rec {
     maintainers = with lib.maintainers; [ mrene ];
     platforms = lib.platforms.unix;
   };
-}
+})
diff --git a/pkgs/by-name/li/libation/deps.json b/pkgs/by-name/li/libation/deps.json
index a0a71d263c1c..e34232e3263f 100644
--- a/pkgs/by-name/li/libation/deps.json
+++ b/pkgs/by-name/li/libation/deps.json
@@ -11,8 +11,8 @@
   },
   {
     "pname": "AudibleApi",
-    "version": "14.1.0",
-    "hash": "sha256-F5cc22t2pPKzVuTgtucwqYiuW3OHGiuB5DiAw5P3q1A="
+    "version": "14.1.2",
+    "hash": "sha256-eKBIjV1K2iaDt29ioY2NmLs7bv8JbUCxe4EtF4+eYqw="
   },
   {
     "pname": "Avalonia",
@@ -136,13 +136,13 @@
   },
   {
     "pname": "Dinah.Core",
-    "version": "11.0.0.1",
-    "hash": "sha256-Gx2t4FJYHgjf99jQ0W7f7MiWW+PhnO2rnOcqNZS4aLc="
+    "version": "11.0.1.1",
+    "hash": "sha256-gsr1DSNh/wOYaW3CgJZDFEjFDEc30XwKr3WoG4WQYUM="
   },
   {
     "pname": "Dinah.EntityFrameworkCore",
-    "version": "11.0.0.1",
-    "hash": "sha256-lQoLY2rXypMS6C2LBHTVYjIyfK395guFG0ln5ylUhW0="
+    "version": "11.0.1.1",
+    "hash": "sha256-wbqRL1dPobNmTTxfHFdqK6cX6QTsRZUDvDXtk1ikMNo="
   },
   {
     "pname": "DocumentFormat.OpenXml",
diff --git a/pkgs/by-name/li/libation/package.nix b/pkgs/by-name/li/libation/package.nix
index 43e975a97966..9484bb687334 100644
--- a/pkgs/by-name/li/libation/package.nix
+++ b/pkgs/by-name/li/libation/package.nix
@@ -17,13 +17,13 @@
 
 buildDotnetModule rec {
   pname = "libation";
-  version = "14.2.0";
+  version = "14.2.2";
 
   src = fetchFromGitHub {
     owner = "rmcrackan";
     repo = "Libation";
     tag = "v${version}";
-    hash = "sha256-uTVKxMaYhcqWHSx21OIPqX2cIvfnEGiUKk4X1vfAF5s=";
+    hash = "sha256-IP3q8n5Bt3fjujkkFfUa3KhM8O5KA5AVAQJkPbwTHvg=";
   };
 
   sourceRoot = "${src.name}/Source";
diff --git a/pkgs/by-name/li/libretroPackages/cores/flycast.nix b/pkgs/by-name/li/libretroPackages/cores/flycast.nix
index 284e869c752b..267abc02e75e 100644
--- a/pkgs/by-name/li/libretroPackages/cores/flycast.nix
+++ b/pkgs/by-name/li/libretroPackages/cores/flycast.nix
@@ -8,13 +8,13 @@
 }:
 mkLibretroCore {
   core = "flycast";
-  version = "0-unstable-2026-09-04";
+  version = "0-unstable-2026-09-15";
 
   src = fetchFromGitHub {
     owner = "flyinghead";
     repo = "flycast";
-    rev = "d8a76809e57027da36d88bafb670983541de5ba1";
-    hash = "sha256-YMwaZwMac6mBRcZ//3gXnirewzPRbksFFBb51BkSAWY=";
+    rev = "8933f9fe0ccd3f7cbe2e77717ea3a6db8b472129";
+    hash = "sha256-6XBCWmyVRSbfAbaxvFpe6/39kPYrqvefsjebXZu7yuY=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/by-name/li/libretroPackages/cores/snes9x2010.nix b/pkgs/by-name/li/libretroPackages/cores/snes9x2010.nix
index efa29cb2a124..35fe87caab9a 100644
--- a/pkgs/by-name/li/libretroPackages/cores/snes9x2010.nix
+++ b/pkgs/by-name/li/libretroPackages/cores/snes9x2010.nix
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore rec {
   core = "snes9x2010";
-  version = "0-unstable-2026-08-16";
+  version = "0-unstable-2026-09-13";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "snes9x2010";
-    rev = "7db129b1ecdccb38cb4d7184bcbed39beed79656";
-    hash = "sha256-KvUseE8hYMv8W73gBYgzoFq5wklHHzU7B1DttBQS+yQ=";
+    rev = "38fe97c000ac3f2ea92e929dc24c25fcec0bc567";
+    hash = "sha256-9Iu5v9Vd7iiqeBhE4VM57tslgU0Ldk80hB08uLV3D0U=";
   };
 
   makeFlags = [ "GIT_VERSION=${builtins.substring 0 7 src.rev}" ];
diff --git a/pkgs/by-name/li/linecast/package.nix b/pkgs/by-name/li/linecast/package.nix
index 5117bd85955b..58fe54a358ac 100644
--- a/pkgs/by-name/li/linecast/package.nix
+++ b/pkgs/by-name/li/linecast/package.nix
@@ -4,11 +4,12 @@
   fetchFromGitHub,
   nix-update-script,
   versionCheckHook,
+  bashInteractive,
 }:
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "linecast";
-  version = "2.3.3";
+  version = "2.6.1";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -16,7 +17,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     owner = "ashuttl";
     repo = "linecast";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-4ddHtUpmRw/ed56WwjTrZL/3W6sKqUYbzAN3lL7XAy8=";
+    hash = "sha256-Z8aO32j2em2ctW2cEv5Xxo4rc9gS8dDH8GMYx1yiEps=";
   };
 
   build-system = [
@@ -34,6 +35,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
 
   nativeCheckInputs = [
     python3Packages.pytestCheckHook
+    bashInteractive
   ];
 
   nativeInstallCheckInputs = [ versionCheckHook ];
diff --git a/pkgs/by-name/li/liteparse/package.nix b/pkgs/by-name/li/liteparse/package.nix
index 95925f4c852b..2d99e012b6f3 100644
--- a/pkgs/by-name/li/liteparse/package.nix
+++ b/pkgs/by-name/li/liteparse/package.nix
@@ -64,14 +64,14 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "liteparse";
-  version = "2.14.2";
+  version = "2.14.4";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "run-llama";
     repo = "liteparse";
     tag = "crates-v${finalAttrs.version}";
-    hash = "sha256-57orag1GemhqlGVDGWDLyer9H53xR8pBoOnMHIyEBz0=";
+    hash = "sha256-E8SjKTw9yCQWKRzwszPneGg74s9CG6wglekeZzH9tNQ=";
   };
 
   postPatch = ''
@@ -106,7 +106,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     tesseract
   ];
 
-  cargoHash = "sha256-EfZOu8aAi1S/hnmvzMZfreHxyeI25ul/OBKrhionJ+o=";
+  cargoHash = "sha256-JaETOf3tRlrr39WyVo2R/IyHZ/qFubk04CNLKdzbebQ=";
   cargoBuildFlags = [
     "--package"
     "liteparse"
diff --git a/pkgs/by-name/ll/llmfit/package.nix b/pkgs/by-name/ll/llmfit/package.nix
index 1e175faeac19..cab25a1e7b89 100644
--- a/pkgs/by-name/ll/llmfit/package.nix
+++ b/pkgs/by-name/ll/llmfit/package.nix
@@ -2,6 +2,7 @@
   lib,
   rustPlatform,
   fetchFromGitHub,
+  versionCheckHook,
   nix-update-script,
 }:
 
@@ -9,6 +10,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   pname = "llmfit";
   version = "1.1.10";
 
+  __structuredAttrs = true;
+
   src = fetchFromGitHub {
     owner = "AlexsJones";
     repo = "llmfit";
@@ -18,6 +21,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   cargoHash = "sha256-1lK/zNcSei/DRInfl2I3EanmuXk0LqRVyFF7G3bJPXU=";
 
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
   passthru.updateScript = nix-update-script { };
 
   meta = {
diff --git a/pkgs/by-name/ma/maestro/package.nix b/pkgs/by-name/ma/maestro/package.nix
index 661a62b95de8..4d495252ca64 100644
--- a/pkgs/by-name/ma/maestro/package.nix
+++ b/pkgs/by-name/ma/maestro/package.nix
@@ -10,11 +10,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "maestro";
-  version = "2.8.0";
+  version = "2.10.0";
 
   src = fetchurl {
     url = "https://github.com/mobile-dev-inc/maestro/releases/download/cli-${finalAttrs.version}/maestro.zip";
-    hash = "sha256-s+VhFhkE+zkYdcpYNNWyLPCwHAUt0bQIrYPjDY+JUbM=";
+    hash = "sha256-KbZ14QzBIIDkRem/suK05N+5wPLjDViEEg0li14c2ZE=";
   };
 
   dontUnpack = true;
diff --git a/pkgs/by-name/ma/mautrix-gmessages/package.nix b/pkgs/by-name/ma/mautrix-gmessages/package.nix
index bbbb82fb436b..b5f5070e19b7 100644
--- a/pkgs/by-name/ma/mautrix-gmessages/package.nix
+++ b/pkgs/by-name/ma/mautrix-gmessages/package.nix
@@ -16,17 +16,17 @@
 
 buildGoModule rec {
   pname = "mautrix-gmessages";
-  version = "26.08";
-  tag = "v0.2608.0";
+  version = "26.09";
+  tag = "v0.2609.0";
 
   src = fetchFromGitHub {
     owner = "mautrix";
     repo = "gmessages";
     inherit tag;
-    hash = "sha256-wqjc074zKHkgqFcnBPFmR36xE5CVzRvupF3AdlQ0Lwk=";
+    hash = "sha256-xIPH/IqnxfyeCaW/9utpN+SPZRkEp5KyabwjT8PsMUI=";
   };
 
-  vendorHash = "sha256-UL7YxLF/DMwkGP8TEaN48wYGrlfBYHSZQqc7UqdhDKE=";
+  vendorHash = "sha256-fCu/cJoQdWZHAYgfYtGj+sxeJ9P6br7BinJiMkX5vk8=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/ma/mautrix-meta/package.nix b/pkgs/by-name/ma/mautrix-meta/package.nix
index 8d613dacb8dc..32c43304178b 100644
--- a/pkgs/by-name/ma/mautrix-meta/package.nix
+++ b/pkgs/by-name/ma/mautrix-meta/package.nix
@@ -15,8 +15,8 @@
 
 buildGoModule rec {
   pname = "mautrix-meta";
-  version = "26.08.1";
-  tag = "v0.2608.1";
+  version = "26.09";
+  tag = "v0.2609.0";
 
   subPackages = [
     "cmd/mautrix-meta"
@@ -27,13 +27,13 @@ buildGoModule rec {
     owner = "mautrix";
     repo = "meta";
     inherit tag;
-    hash = "sha256-xTfbLtQ1lo6ukWlGjNwjxYaLMod6hljhQEcwdSgoBcQ=";
+    hash = "sha256-HTvdg1Bhwvo3Pm7jpugf8x//6OrPaDUa39mdN2Ct1vM=";
   };
 
   buildInputs = lib.optional (!withGoolm) olm;
   tags = lib.optional withGoolm "goolm";
 
-  vendorHash = "sha256-CCGF13D0QO2GAE+kN/7xl924rSloqikDoGPr00clofI=";
+  vendorHash = "sha256-Eh+2TLSnOmhteWPzzUQIgOI380UNNV38fvTjb+qYDDM=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/mi/minecraft-server/versions.json b/pkgs/by-name/mi/minecraft-server/versions.json
index 192cef5383f4..5b67989dc6ac 100644
--- a/pkgs/by-name/mi/minecraft-server/versions.json
+++ b/pkgs/by-name/mi/minecraft-server/versions.json
@@ -1,4 +1,10 @@
 {
+  "26.3": {
+    "sha1": "33680f5f2ac32864d6d7cf5e56a705fdb3e05f4c",
+    "url": "https://piston-data.mojang.com/v1/objects/33680f5f2ac32864d6d7cf5e56a705fdb3e05f4c/server.jar",
+    "version": "26.3",
+    "javaVersion": 25
+  },
   "26.2": {
     "sha1": "823e2250d24b3ddac457a60c92a6a941943fcd6a",
     "url": "https://piston-data.mojang.com/v1/objects/823e2250d24b3ddac457a60c92a6a941943fcd6a/server.jar",
diff --git a/pkgs/by-name/ne/nextvi/package.nix b/pkgs/by-name/ne/nextvi/package.nix
index 0e89664c3576..7133e49b6532 100644
--- a/pkgs/by-name/ne/nextvi/package.nix
+++ b/pkgs/by-name/ne/nextvi/package.nix
@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "nextvi";
-  version = "7.5";
+  version = "7.6";
 
   src = fetchFromGitHub {
     owner = "kyx0r";
     repo = "nextvi";
     tag = finalAttrs.version;
-    hash = "sha256-TB2zRgZ7bZhmdzPog5CSUYXBo56K+iSX7EAcI2NxP18=";
+    hash = "sha256-Qzd+zOv0lFWZU6M91XR38JXUu6q+m9fbDtx98V2TIOs=";
   };
 
   nativeBuildInputs = [ installShellFiles ];
diff --git a/pkgs/by-name/om/omnictl/package.nix b/pkgs/by-name/om/omnictl/package.nix
index a512ba947c8a..74ff6c597b43 100644
--- a/pkgs/by-name/om/omnictl/package.nix
+++ b/pkgs/by-name/om/omnictl/package.nix
@@ -1,23 +1,23 @@
 {
   lib,
   stdenv,
-  buildGoModule,
+  buildGo127Module,
   fetchFromGitHub,
   installShellFiles,
 }:
 
-buildGoModule rec {
+buildGo127Module rec {
   pname = "omnictl";
-  version = "1.10.6";
+  version = "1.12.1";
 
   src = fetchFromGitHub {
     owner = "siderolabs";
     repo = "omni";
     rev = "v${version}";
-    hash = "sha256-3Fm7WM8ge7rz9h/UlvULrG8yzol8e/i+3FSvRBf/g+k=";
+    hash = "sha256-nERNdWZLCw/7o03MH7y+PpglA72Yf/llKvSJNQeLS1k=";
   };
 
-  vendorHash = "sha256-JZmRdWwZ2s5Ot+GopWg1jgCKruE+z6rltGch/DApuoI=";
+  vendorHash = "sha256-2bHYQdNMZPNpw7DzYBSHU044dx9cWU95Cwf5zev4Aqg=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/op/openobserve/package.nix b/pkgs/by-name/op/openobserve/package.nix
index 31afdf0a5864..21a26b42f228 100644
--- a/pkgs/by-name/op/openobserve/package.nix
+++ b/pkgs/by-name/op/openobserve/package.nix
@@ -22,7 +22,7 @@
 }:
 
 let
-  version = "1.0.1";
+  version = "1.0.3";
   updateScript = gitUpdater {
     rev-prefix = "v";
     ignoredVersions = "rc";
@@ -47,7 +47,7 @@ if enableEnterprise then
 
     src = fetchurl {
       url = "https://downloads.openobserve.ai/releases/o2-enterprise/v${finalAttrs.version}/openobserve-ee-v${finalAttrs.version}-linux-amd64-musl.tar.gz";
-      hash = "sha256-dcdprmmIIF/8QfrWYkLspFjqTDUuHHE4RFpUPSHIqcA=";
+      hash = "sha256-J6w1bpb4BfmDIdf+SkQyi1tnVPsOtWsEEshvrEUUL7E=";
     };
 
     # The tarball is a single flat `openobserve` binary.
@@ -139,7 +139,7 @@ else
         owner = "openobserve";
         repo = "openobserve";
         tag = "v${finalAttrs.version}";
-        hash = "sha256-rC4aykzrcMskAtEyW3XJyAYG4H0p+mTe66uyrfZr+3U=";
+        hash = "sha256-lSsLW6QmDLuRD+hak1ya0cKjDJW50iiErhsDYUo4bcc=";
       };
 
       patches = [
diff --git a/pkgs/by-name/op/openttd-jgrpp/package.nix b/pkgs/by-name/op/openttd-jgrpp/package.nix
index f863a40dfc81..eb24fd55cfc4 100644
--- a/pkgs/by-name/op/openttd-jgrpp/package.nix
+++ b/pkgs/by-name/op/openttd-jgrpp/package.nix
@@ -7,13 +7,13 @@
 
 openttd.overrideAttrs (oldAttrs: rec {
   pname = "openttd-jgrpp";
-  version = "0.73.2";
+  version = "0.73.3";
 
   src = fetchFromGitHub {
     owner = "JGRennison";
     repo = "OpenTTD-patches";
     rev = "jgrpp-${version}";
-    hash = "sha256-FfR/H+EieZgVaGTJOQZrQpUMbJa/eXE37FWEYFD2sM0=";
+    hash = "sha256-iGEYQ5VpEpaMqrXm3tvvuQXv7m47x0aAHUvyWTUv5dE=";
   };
   patches = [ ];
 
diff --git a/pkgs/by-name/pa/pandora-launcher/package.nix b/pkgs/by-name/pa/pandora-launcher/package.nix
index a762bc581b74..a2145bc4e73b 100644
--- a/pkgs/by-name/pa/pandora-launcher/package.nix
+++ b/pkgs/by-name/pa/pandora-launcher/package.nix
@@ -5,6 +5,7 @@
 {
   addDriverRunpath,
   alsa-lib,
+  bubblewrap,
   flite,
   gamemode,
   glfw3-minecraft,
@@ -31,6 +32,7 @@
   symlinkJoin,
   udev,
   vulkan-loader,
+  xdg-dbus-proxy,
   xrandr,
 
   additionalLibs ? [ ],
@@ -45,6 +47,7 @@
   ],
   msaClientID ? null,
   textToSpeechSupport ? stdenv.hostPlatform.isLinux,
+  sandboxSupport ? stdenv.hostPlatform.isLinux,
 }:
 
 assert lib.assertMsg (
@@ -55,6 +58,10 @@ assert lib.assertMsg (
   textToSpeechSupport -> stdenv.hostPlatform.isLinux
 ) "textToSpeechSupport only has an effect on Linux.";
 
+assert lib.assertMsg (
+  sandboxSupport -> stdenv.hostPlatform.isLinux
+) "sandboxSupport only has an effect on Linux.";
+
 let
   pandora-launcher' = pandora-launcher-unwrapped.override { inherit msaClientID; };
 in
@@ -106,6 +113,10 @@ symlinkJoin {
         pciutils # need lspci
         xrandr # needed for LWJGL [2.9.2, 3) https://github.com/LWJGL/lwjgl/issues/128
       ]
+      ++ lib.optionals sandboxSupport [
+        bubblewrap
+        xdg-dbus-proxy
+      ]
       ++ additionalPrograms;
 
     in
diff --git a/pkgs/by-name/po/pond/package.nix b/pkgs/by-name/po/pond/package.nix
new file mode 100644
index 000000000000..b36b687ee2b4
--- /dev/null
+++ b/pkgs/by-name/po/pond/package.nix
@@ -0,0 +1,44 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitLab,
+
+  ncurses,
+}:
+stdenv.mkDerivation {
+  pname = "pond";
+  version = "0-unstable-2025-01-03";
+
+  strictDeps = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitLab {
+    owner = "alice-lefebvre";
+    repo = "pond";
+    rev = "6f7620940d896a1717e764da0b4b41c96362ac8d";
+    hash = "sha256-qQxtEJHRMvR9hmpRbEBmKwuFjjb9FeGLY/LlHdHh+rI=";
+  };
+
+  buildInputs = [ ncurses ];
+
+  postPatch = ''
+    substituteInPlace Makefile \
+      --replace-fail "gcc" "$CC" \
+      --replace-fail "-lcurses" "-lncurses"
+  '';
+
+  installPhase = ''
+    runHook preInstall;
+    install -m555 -Dt $out/bin bin/pond
+    runHook postInstall;
+  '';
+
+  meta = {
+    homepage = "https://gitlab.com/alice-lefebvre/pond";
+    description = "Software that simulates a little pond";
+    mainProgram = "pond";
+    license = lib.licenses.gpl3;
+    platforms = lib.platforms.linux ++ lib.platforms.darwin;
+    maintainers = with lib.maintainers; [ wyspr ];
+  };
+}
diff --git a/pkgs/by-name/po/portwave/package.nix b/pkgs/by-name/po/portwave/package.nix
new file mode 100644
index 000000000000..dc97cbbd04fb
--- /dev/null
+++ b/pkgs/by-name/po/portwave/package.nix
@@ -0,0 +1,47 @@
+{
+  lib,
+  fetchFromGitHub,
+  nix-update-script,
+  openssl,
+  pkg-config,
+  rustPlatform,
+  versionCheckHook,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "portwave";
+  version = "0.19.3";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "assassin-marcos";
+    repo = "portwave";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-N1/ryYMwlkwPfOZexZVFiR2Wr8w8zq6l9gKK4PLPJqU=";
+  };
+
+  cargoHash = "sha256-5UOsPswU+nyH5x3JDcyPgUbhIPxRzWzWyekwZboKdlE=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [ openssl ];
+
+  env = {
+    OPENSSL_NO_VENDOR = true;
+  };
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "IPv4/IPv6 port scanner with adaptive concurrency";
+    homepage = "https://github.com/assassin-marcos/portwave";
+    changelog = "https://github.com/assassin-marcos/portwave/blob/${finalAttrs.src.rev}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "portwave";
+  };
+})
diff --git a/pkgs/by-name/pr/proton-ge-bin/package.nix b/pkgs/by-name/pr/proton-ge-bin/package.nix
index 5d83a2262865..22fdbb4309fc 100644
--- a/pkgs/by-name/pr/proton-ge-bin/package.nix
+++ b/pkgs/by-name/pr/proton-ge-bin/package.nix
@@ -15,7 +15,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   steamDisplayName = "GE-Proton";
 
   pname = "proton-ge-bin";
-  version = "GE-Proton11-6";
+  version = "GE-Proton11-7";
 
   inherit (finalAttrs.passthru.variants.${stdenvNoCC.hostPlatform.system}) src toolName;
 
@@ -54,14 +54,14 @@ stdenvNoCC.mkDerivation (finalAttrs: {
         toolName = "${finalAttrs.version}-x86_64";
         src = fetchzip {
           url = "https://github.com/GloriousEggroll/proton-ge-custom/releases/download/${finalAttrs.version}/${finalAttrs.version}-x86_64.tar.gz";
-          hash = "sha256-rX27DUrrrHtR1cgyr/424m9JPjrdASIisVGv2vWzMAs=";
+          hash = "sha256-ftW0vE45v2JsbaYqo/So0ZFfvdtakHX0XEXEE4TdxLk=";
         };
       };
       "aarch64-linux" = {
         toolName = "${finalAttrs.version}-aarch64";
         src = fetchzip {
           url = "https://github.com/GloriousEggroll/proton-ge-custom/releases/download/${finalAttrs.version}/${finalAttrs.version}-aarch64.tar.gz";
-          hash = "sha256-sIwM++9FJzpIq4LkYQDL1TIfPFEnaVowrGT/3JPfPZk=";
+          hash = "sha256-tyI95zCUQklRVA9YtarD+gBQouMVcJmv7BafNx5CQu8=";
         };
       };
     };
diff --git a/pkgs/by-name/ro/rox-filer/package.nix b/pkgs/by-name/ro/rox-filer/package.nix
deleted file mode 100644
index 38691d8cc796..000000000000
--- a/pkgs/by-name/ro/rox-filer/package.nix
+++ /dev/null
@@ -1,111 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchurl,
-  fetchpatch,
-  pkg-config,
-  wrapGAppsHook3,
-  libxml2,
-  gtk2,
-  libsm,
-  shared-mime-info,
-}:
-
-stdenv.mkDerivation (finalAttrs: {
-  pname = "rox-filer";
-  version = "2.11";
-
-  src = fetchurl {
-    url = "mirror://sourceforge/rox/rox-filer-${finalAttrs.version}.tar.bz2";
-    sha256 = "a929bd32ee18ef7a2ed48b971574574592c42e34ae09f36604bf663d7c101ba8";
-  };
-
-  nativeBuildInputs = [
-    pkg-config
-    wrapGAppsHook3
-  ];
-  buildInputs = [
-    libxml2
-    gtk2
-    shared-mime-info
-    libsm
-  ];
-
-  env = {
-    NIX_LDFLAGS = "-lm";
-    NIX_CFLAGS_COMPILE = "-fpermissive";
-  };
-
-  patches = [
-    ./rox-filer-2.11-in-source-build.patch
-    # Pull upstream fix for -fno-common toolchains like upstream gcc-10:
-    #   https://github.com/rox-desktop/rox-filer/pull/15
-    (fetchpatch {
-      name = "fno-common.patch";
-      url = "https://github.com/rox-desktop/rox-filer/commit/86b0bb9144186d51ea9b898905111bd8b143b552.patch";
-      sha256 = "1csyx229i09p00lbdlkdqdhn3x2lb5zby1h9rkjgzlr2qz74gc69";
-    })
-  ];
-
-  # go to the source directory after unpacking the sources
-  sourceRoot = "rox-filer-${finalAttrs.version}/ROX-Filer";
-
-  # account for 'setSourceRoot' offset
-  patchFlags = [ "-p2" ];
-
-  # patch the main.c to disable the lookup of the APP_DIR environment variable,
-  # which is used to lookup the location for certain images when rox-filer
-  # starts; rather override the location with an absolute path to the directory
-  # where images are stored to prevent having to use a wrapper, which sets the
-  # APP_DIR environment variable prior to starting rox-filer
-  preConfigure = ''
-    sed -i -e "s:g_strdup(getenv(\"APP_DIR\")):\"$out\":" src/main.c
-    mkdir build
-    cd build
-  '';
-
-  configureScript = "../src/configure";
-
-  installPhase = ''
-    mkdir -p "$out"
-    cd ..
-    cp -av Help Messages Options.xml ROX images style.css .DirIcon "$out"
-
-    # create the man/ directory, which will be moved from $out to share/ in the fixup phase
-    mkdir "$out/man/"
-    cp -av ../rox.1 "$out/man/"
-
-    # the main executable
-    mkdir "$out/bin/"
-    cp -v ROX-Filer "$out/bin/rox"
-
-    # mime types
-    mkdir -p "$out/ROX/MIME"
-    cd "$out/ROX/MIME"
-    ln -sv text-x-{diff,patch}.png
-    ln -sv application-x-font-{afm,type1}.png
-    ln -sv application-xml{,-dtd}.png
-    ln -sv application-xml{,-external-parsed-entity}.png
-    ln -sv application-{,rdf+}xml.png
-    ln -sv application-x{ml,-xbel}.png
-    ln -sv application-{x-shell,java}script.png
-    ln -sv application-x-{bzip,xz}-compressed-tar.png
-    ln -sv application-x-{bzip,lzma}-compressed-tar.png
-    ln -sv application-x-{bzip-compressed-tar,lzo}.png
-    ln -sv application-x-{bzip,xz}.png
-    ln -sv application-x-{gzip,lzma}.png
-    ln -sv application-{msword,rtf}.png
-  '';
-
-  meta = {
-    description = "Fast, lightweight, gtk2 file manager";
-    mainProgram = "rox";
-    homepage = "http://rox.sourceforge.net/desktop";
-    license = with lib.licenses; [
-      gpl2
-      lgpl2
-    ];
-    platforms = lib.platforms.linux;
-    maintainers = [ lib.maintainers.eleanor ];
-  };
-})
diff --git a/pkgs/by-name/ro/rox-filer/rox-filer-2.11-in-source-build.patch b/pkgs/by-name/ro/rox-filer/rox-filer-2.11-in-source-build.patch
deleted file mode 100644
index c68bba7ec6cf..000000000000
--- a/pkgs/by-name/ro/rox-filer/rox-filer-2.11-in-source-build.patch
+++ /dev/null
@@ -1,16 +0,0 @@
---- a/Rox-Filer/src/configure	2011-10-09 16:32:14.000000000 +0200
-+++ b/Rox-Filer/src/configure	2016-03-20 09:26:31.640891863 +0100
-@@ -2132,13 +2132,6 @@
- 
- 
- ac_config_headers="$ac_config_headers config.h"
--
--
-- if [ -f configure ]; then
--	as_fn_error $? "Please run configure from the build directory (try ../AppRun --compile)" "$LINENO" 5
--	exit 1
--fi
--
- ac_ext=c
- ac_cpp='$CPP $CPPFLAGS'
- ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
diff --git a/pkgs/by-name/sb/sby/package.nix b/pkgs/by-name/sb/sby/package.nix
index 442ab21f8e9b..5dbe0043e237 100644
--- a/pkgs/by-name/sb/sby/package.nix
+++ b/pkgs/by-name/sb/sby/package.nix
@@ -13,18 +13,20 @@
 }:
 
 let
-  pythonEnv = python3.withPackages (ps: with ps; [ click ]);
+  pythonDeps = ps: with ps; [ click ];
+  pythonEnv = python3.withPackages pythonDeps;
+  checkPythonEnv = python3.withPackages (ps: pythonDeps ps ++ [ ps.xmlschema ]);
 in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "sby";
-  version = "0.68";
+  version = "0.69";
 
   src = fetchFromGitHub {
     owner = "YosysHQ";
     repo = "sby";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-WRZp4+gwUgDKCWAdBK/36ArM2KFGyLBZ20S32k7YN+8=";
+    hash = "sha256-BNxSMDtfnNrIOrXYxXD7XAHNJUGifEFRYrYpyteAMHQ=";
   };
 
   postPatch = ''
@@ -68,8 +70,7 @@ stdenv.mkDerivation (finalAttrs: {
   '';
 
   nativeCheckInputs = [
-    python3
-    python3.pkgs.xmlschema
+    checkPythonEnv
     yosys
     yices
     z3
diff --git a/pkgs/by-name/sl/slint-lsp/package.nix b/pkgs/by-name/sl/slint-lsp/package.nix
index 5b19b603b1f2..ef85c398530a 100644
--- a/pkgs/by-name/sl/slint-lsp/package.nix
+++ b/pkgs/by-name/sl/slint-lsp/package.nix
@@ -18,14 +18,14 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "slint-lsp";
-  version = "1.17.1";
+  version = "1.18.0";
 
   src = fetchCrate {
     inherit (finalAttrs) pname version;
-    hash = "sha256-GAy2D2eEx2NYEXx/x4z+43CbRV7gWwY2Sgd9iAK6T2Y=";
+    hash = "sha256-eSKW6iMoiv84CglF39fdu61D87xWv5eQzuXCo0+9hjY=";
   };
 
-  cargoHash = "sha256-4Cs+ezxoBeeGeUcJK0ury63zW0AJADDZk/zhIeJV6Uc=";
+  cargoHash = "sha256-qNyuTeQ8BtLi+jPcZ4Ff0TzAl0Kbbcz4+ba0FTz3r9U=";
 
   rpathLibs = [
     fontconfig
diff --git a/pkgs/by-name/sl/slint-viewer/package.nix b/pkgs/by-name/sl/slint-viewer/package.nix
index 13ac5c6e8265..6269b3b3d9a0 100644
--- a/pkgs/by-name/sl/slint-viewer/package.nix
+++ b/pkgs/by-name/sl/slint-viewer/package.nix
@@ -20,14 +20,14 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "slint-viewer";
-  version = "1.17.1";
+  version = "1.18.0";
 
   src = fetchCrate {
     inherit (finalAttrs) pname version;
-    hash = "sha256-Jo2nAYUx6N2fJvX4hHckRKr2gr6xsGW9lNMD45+/uNY=";
+    hash = "sha256-lCDhKt1lKZnzKuOuusbWYqwLBH8NJ8sF/UaDk7gjfLc=";
   };
 
-  cargoHash = "sha256-TsM2CFsNDu4SRPcDwAWoPOtWPMf/Z3R9HlSlh4Ly92s=";
+  cargoHash = "sha256-vp8hJuskBxeyZ2vxoKe73kEI8TR13ooNwqP7gw19yo4=";
 
   buildInputs = [
     qt6.qtbase
diff --git a/pkgs/by-name/sm/smtpeek/package.nix b/pkgs/by-name/sm/smtpeek/package.nix
new file mode 100644
index 000000000000..ce5a3a57fb13
--- /dev/null
+++ b/pkgs/by-name/sm/smtpeek/package.nix
@@ -0,0 +1,33 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "smtpeek";
+  version = "1.0.0";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "0xricksanchez";
+    repo = "SMTPeek";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-IIsy6MfyjrhuG/6AAYC7hnS/OBv32XPRaQ3L0IYozHM=";
+  };
+
+  cargoHash = "sha256-JowidHb7CPJQVFKFxhBgsObZdDd8Mp1FnATyJzXzb5k=";
+
+  nativeBuildInputs = [ rustPlatform.bindgenHook ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "SMTP user validation";
+    homepage = "https://github.com/0xricksanchez/SMTPeek";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "smtpeek";
+  };
+})
diff --git a/pkgs/by-name/sn/sniffcrack/package.nix b/pkgs/by-name/sn/sniffcrack/package.nix
new file mode 100644
index 000000000000..69de30cf8ccf
--- /dev/null
+++ b/pkgs/by-name/sn/sniffcrack/package.nix
@@ -0,0 +1,42 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  pkg-config,
+  libpcap,
+  vulkan-loader,
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "sniffcrack";
+  version = "0-unstable-2026-08-19";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "THE-M0P";
+    repo = "sniffcrack";
+    rev = "44b5b5be5fa04143d45382d4130e9fdbb5213eb6";
+    hash = "sha256-9/CbkRk85P/dFNVl8rxEWWSjFwc44vJK1Iv4IXkeVkw=";
+  };
+
+  cargoHash = "sha256-hm+p54vCD+rQtuBtp4e2PPGScp+ijGVkZ14tSoeAaWY=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [
+    libpcap
+    vulkan-loader
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Linux Wi-Fi assessment tool for WPA/WPA2 handshake capture and password auditing";
+    homepage = "https://github.com/THE-M0P/sniffcrack";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "sniffcrack";
+    platforms = lib.platforms.linux;
+  };
+})
diff --git a/pkgs/by-name/sp/spotatui/package.nix b/pkgs/by-name/sp/spotatui/package.nix
index 4183d04981a3..67230515facb 100644
--- a/pkgs/by-name/sp/spotatui/package.nix
+++ b/pkgs/by-name/sp/spotatui/package.nix
@@ -14,16 +14,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "spotatui";
-  version = "0.41.0";
+  version = "0.42.0";
 
   src = fetchFromGitHub {
     owner = "LargeModGames";
     repo = "spotatui";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-uTNrynFPVQibgt4pBVvPLbxN4EFdAC7ezZ91GftSHac=";
+    hash = "sha256-u5gpXOVrJILp423aFdsw740J1w8oXNh9yVdhfd1JQbs=";
   };
 
-  cargoHash = "sha256-X2xyEN43jwT6xr3iACLdvuOaH0SQdtxeJBBP1rEhy80=";
+  cargoHash = "sha256-C83fpo+ozkmnvfiZ2479nDri1PO+TZewmphXs4qVUZw=";
 
   nativeBuildInputs = [ pkg-config ] ++ lib.optional withPipewireVisualizer rustPlatform.bindgenHook;
 
@@ -38,8 +38,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "cover-art"
     "discord-rpc"
     "mpris"
+    "scripting"
     "streaming"
     "telemetry"
+    "tui"
   ]
   ++ lib.optional withAiDj "ai-dj"
   ++ lib.optional withPipewireVisualizer "audio-viz"
diff --git a/pkgs/by-name/st/stargate-libcds/package.nix b/pkgs/by-name/st/stargate-libcds/package.nix
index 7402befafb96..a024dcea2c09 100644
--- a/pkgs/by-name/st/stargate-libcds/package.nix
+++ b/pkgs/by-name/st/stargate-libcds/package.nix
@@ -17,11 +17,14 @@ stdenv.mkDerivation (finalAttrs: {
   };
 
   # Fix 'error: unrecognized command line option' in platforms other than x86
-  env = lib.optionalAttrs stdenv.hostPlatform.isx86_64 {
-    PLAT_FLAGS = toString [
-      "-mfpmath=sse"
-      "-mssse3"
-    ];
+  env = {
+    PLAT_FLAGS = toString (
+      [ ]
+      ++ lib.optional stdenv.hostPlatform.isx86_64 [
+        "-mfpmath=sse"
+        "-mssse3"
+      ]
+    );
   };
 
   patches = [
diff --git a/pkgs/by-name/sy/systemd-lsp/package.nix b/pkgs/by-name/sy/systemd-lsp/package.nix
index 1a2c38d50e37..1e5b9c268816 100644
--- a/pkgs/by-name/sy/systemd-lsp/package.nix
+++ b/pkgs/by-name/sy/systemd-lsp/package.nix
@@ -3,20 +3,37 @@
   fetchFromGitHub,
   nix-update-script,
   rustPlatform,
+  stdenv,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "systemd-lsp";
-  version = "2026.01.06";
+  version = "2026.08.03";
+
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "JFryy";
     repo = "systemd-lsp";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-wTqbktVaGUk3/cJ3oH1GXvddqVKJQe09sRiyaU+cqCg=";
+    hash = "sha256-yMUUtcSpXn02zbxcljbkzT02DUEJPQBwCopmDxbTmR4=";
   };
 
-  cargoHash = "sha256-2+0+VeHEsUyTivDU7FQbm44RZe0t0hsVHNN2fplDlRI=";
+  postPatch = ''
+    substituteInPlace tests/cli_tests.rs \
+      --replace-fail 'target/release' \
+                     "target/${stdenv.hostPlatform.rust.cargoShortTarget}/$cargoBuildType"
+  '';
+
+  cargoHash = "sha256-2+JTKSzreTmdUiv++WaG8kVV2hXDn6qeY9Cp7n51MP4=";
+
+  doInstallCheck = true;
+  # Avoid versionCheckHook because upstream names tags differently from the version.
+  installCheckPhase = ''
+    runHook preInstallCheck
+    "$out/bin/${finalAttrs.meta.mainProgram}" --help
+    runHook postInstallCheck
+  '';
 
   passthru.updateScript = nix-update-script { };
 
@@ -26,5 +43,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ mahyarmirrashed ];
     mainProgram = "systemd-lsp";
+    platforms = with lib.platforms; unix ++ windows;
   };
 })
diff --git a/pkgs/by-name/ta/taterclient-ddnet/package.nix b/pkgs/by-name/ta/taterclient-ddnet/package.nix
index 2e64842b5750..ed659feab1a4 100644
--- a/pkgs/by-name/ta/taterclient-ddnet/package.nix
+++ b/pkgs/by-name/ta/taterclient-ddnet/package.nix
@@ -33,18 +33,18 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "taterclient-ddnet";
-  version = "10.8.7";
+  version = "10.9.0";
 
   src = fetchFromGitHub {
     owner = "TaterClient";
     repo = "TClient";
     tag = "V${finalAttrs.version}";
-    hash = "sha256-jGi0eRKeYVGWes4AAzasKjdSqoYrEalxVHR/dYEzSXo=";
+    hash = "sha256-QlLxY1k9S9mvRJ0LL7/jpBfIn638eEEnQQ6tKvT/MJY=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname src version;
-    hash = "sha256-VKGc4LQjt2FHbELLBKtV8rKpxjGBrzlA3m9BSdZ/6Z0=";
+    hash = "sha256-n+1SlgmjSe0ul/iuK3kjTGSvyYwdxwcRrCAnZyavZA8=";
   };
 
   nativeBuildInputs = [
@@ -107,7 +107,7 @@ stdenv.mkDerivation (finalAttrs: {
     # git rev-parse --short=32 HEAD
     #
     # In accordance with this script https://github.com/TaterClient/TClient/blob/master/scripts/git_revision.py
-    DDNET_GIT_SHORTREV_HASH = "4e4269396b97d06879c11ae3b9696c3d";
+    DDNET_GIT_SHORTREV_HASH = "6b4118bf0ec86822dea43cc3e97b0645";
   };
 
   # Since we are not building the server executable, the `run_tests` Makefile target
diff --git a/pkgs/by-name/ti/tic-80/package.nix b/pkgs/by-name/ti/tic-80/package.nix
index 76d7382ec097..0a90d7f497f5 100644
--- a/pkgs/by-name/ti/tic-80/package.nix
+++ b/pkgs/by-name/ti/tic-80/package.nix
@@ -11,6 +11,8 @@
   libGL,
   libGLU,
   libx11,
+  giflib,
+  libpng,
   janet,
   lua5_3_compat,
   quickjs,
@@ -20,37 +22,29 @@
   withPro ? false,
 }:
 let
-  # git rev-list HEAD --count
-  revision = "3049";
-  year = "2025";
+  year = "2026";
 in
 
 stdenv.mkDerivation {
   pname = "tic-80";
-  # use an untagged version until upstream tags a new version. We want
-  # 'PREFER_SYSTEM_LIBRARIES', and without it tic-80 won't build
-  version = "1.1-unstable-2025-12-30";
+  version = "1.2.0";
 
   src = fetchFromGitHub {
     owner = "nesbox";
     repo = "TIC-80";
-    rev = "881828910e77c799c1a6894cadc2d05a5c2f3f70";
+    rev = "v1.2.0";
     # TIC-80 vendors its dependencies as submodules. For the following dependencies,
     # there are no (or no compatible) packages in nixpkgs yet, so we use the vendored
     # ones as a fill-in: wasm, squirrel, pocketpy, argparse, naett,
     # sdlgpu, mruby.
     fetchSubmodules = true;
-    hash = "sha256-bqLVoLJpT62k9d+WZUgIu4ClcJNUvURB7j+NE/fzWNk=";
+    hash = "sha256-RTtqgGAAolK1qoaKV08i/KfGu7fd34W+AyXeNcqPVgk=";
   };
 
-  # TIC-80 tries to determine the revision part of the version using its Git history.
-  # Because using leaveDotGit tends be non-reproducible with submodules, we just
-  # hardcode it.
   # To avoid the awkward copyright range of "2017-1980", which would be caused by the
   # sandbox environment, hardcode the year of the release.
   postPatch = ''
     substituteInPlace cmake/version.cmake \
-      --replace-fail 'set(VERSION_REVISION 0)' 'set(VERSION_REVISION ${revision})' \
       --replace-fail 'string(TIMESTAMP VERSION_YEAR "%Y")' 'set(VERSION_YEAR "${year}")'
   '';
 
@@ -95,6 +89,8 @@ stdenv.mkDerivation {
     libGL
     libGLU
     libx11
+    giflib
+    libpng
     janet
     (lua5_3_compat.withPackages (ps: [ ps.fennel ]))
     quickjs
diff --git a/pkgs/by-name/ti/times-newer-roman/package.nix b/pkgs/by-name/ti/times-newer-roman/package.nix
index 22501cca0dca..7c497cf2788b 100644
--- a/pkgs/by-name/ti/times-newer-roman/package.nix
+++ b/pkgs/by-name/ti/times-newer-roman/package.nix
@@ -7,7 +7,7 @@
 
 stdenvNoCC.mkDerivation {
   pname = "times-newer-roman";
-  version = "unstable-2018-09-11";
+  version = "0-unstable-2018-09-11";
 
   src = fetchzip {
     url = "https://web.archive.org/web/20210609022835/https://timesnewerroman.com/assets/TimesNewerRoman.zip";
diff --git a/pkgs/by-name/um/umpire/package.nix b/pkgs/by-name/um/umpire/package.nix
index bc06de5c1d0f..862e916fde63 100644
--- a/pkgs/by-name/um/umpire/package.nix
+++ b/pkgs/by-name/um/umpire/package.nix
@@ -4,6 +4,7 @@
   fetchFromGitHub,
   cmake,
   config,
+  symlinkJoin,
   cudaSupport ? config.cudaSupport,
   cudaPackages ? null,
   rocmSupport ? config.rocmSupport,
@@ -12,6 +13,17 @@
 
 assert cudaSupport -> cudaPackages != null;
 
+let
+  rocm-sdk = symlinkJoin {
+    name = "rocm-merged";
+    paths = with rocmPackages; [
+      clr
+      rocm-comgr
+      rocm-device-libs
+      rocm-runtime
+    ];
+  };
+in
 stdenv.mkDerivation (finalAttrs: {
   pname = "umpire";
   version = "2025.12.0";
@@ -34,7 +46,7 @@ stdenv.mkDerivation (finalAttrs: {
     cudaPackages.cuda_nvcc
   ]
   ++ lib.optionals rocmSupport [
-    rocmPackages.clr
+    rocm-sdk
   ];
 
   buildInputs = lib.optionals cudaSupport (
@@ -52,6 +64,7 @@ stdenv.mkDerivation (finalAttrs: {
     ]
     ++ lib.optionals rocmSupport [
       "-DENABLE_HIP=ON"
+      "-DROCM_ROOT_DIR=${rocm-sdk}"
     ];
 
   passthru = { inherit rocmSupport; };
diff --git a/pkgs/by-name/un/unblob/package.nix b/pkgs/by-name/un/unblob/package.nix
index 171e5937be53..316bed2e2f09 100644
--- a/pkgs/by-name/un/unblob/package.nix
+++ b/pkgs/by-name/un/unblob/package.nix
@@ -128,9 +128,10 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
     "test_all_handlers[filesystem.extfs]"
     # regression in erofs-utils 1.9 https://github.com/onekey-sec/unblob/commit/c7c9f20dd871a5694d41a95ca3041eb0c98e257a
     "test_all_handlers[filesystem.android.erofs]"
-    # unblob's landlock sandbox denies hardlinks within the extract dir (EXDEV). https://github.com/onekey-sec/unblob/issues/1210
+    # unblob's landlock sandbox denies hardlinks and renames within the extract dir (EXDEV). https://github.com/onekey-sec/unblob/issues/1210
     "test_all_handlers[filesystem.romfs]"
     "test_all_handlers[filesystem.yaffs]"
+    "test_all_handlers[filesystem.btrfs_stream]"
   ];
 
   passthru = {
diff --git a/pkgs/by-name/vi/vicinae/package.nix b/pkgs/by-name/vi/vicinae/package.nix
index 526eeba74398..d8c540935690 100644
--- a/pkgs/by-name/vi/vicinae/package.nix
+++ b/pkgs/by-name/vi/vicinae/package.nix
@@ -25,13 +25,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "vicinae";
-  version = "0.28.1";
+  version = "0.29.0";
 
   src = fetchFromGitHub {
     owner = "vicinaehq";
     repo = "vicinae";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-zRvJ9/LVAIoW2qKveqD6WSdr0jDypPrbQdw1aatRS70=";
+    hash = "sha256-+Ti1hcYdjgdAZWu5f6myDckjp7ox0mtux7q8U1t44jo=";
   };
 
   apiDeps = fetchNpmDeps {
diff --git a/pkgs/tools/misc/wyrd/default.nix b/pkgs/by-name/wy/wyrd/package.nix
similarity index 93%
rename from pkgs/tools/misc/wyrd/default.nix
rename to pkgs/by-name/wy/wyrd/package.nix
index 47b47c339eb6..74a18994e075 100644
--- a/pkgs/tools/misc/wyrd/default.nix
+++ b/pkgs/by-name/wy/wyrd/package.nix
@@ -3,10 +3,13 @@
   stdenv,
   fetchFromGitLab,
   makeWrapper,
-  ocamlPackages,
+  ocaml-ng,
   remind,
 }:
 
+let
+  ocamlPackages = ocaml-ng.ocamlPackages_4_14;
+in
 stdenv.mkDerivation (finalAttrs: {
   pname = "wyrd";
   version = "1.7.4";
@@ -19,6 +22,7 @@ stdenv.mkDerivation (finalAttrs: {
   };
 
   strictDeps = true;
+  __structuredAttrs = true;
 
   nativeBuildInputs = [
     makeWrapper
diff --git a/pkgs/by-name/xr/xray/package.nix b/pkgs/by-name/xr/xray/package.nix
index 90a95f780c3f..f399f2f30caa 100644
--- a/pkgs/by-name/xr/xray/package.nix
+++ b/pkgs/by-name/xr/xray/package.nix
@@ -2,7 +2,7 @@
   lib,
   fetchFromGitHub,
   symlinkJoin,
-  buildGo126Module,
+  buildGo127Module,
   makeWrapper,
   nix-update-script,
   v2ray-rules-dat,
@@ -11,18 +11,18 @@
   ],
 }:
 
-buildGo126Module (finalAttrs: {
+buildGo127Module (finalAttrs: {
   pname = "xray";
-  version = "26.3.27";
+  version = "26.9.9";
 
   src = fetchFromGitHub {
     owner = "XTLS";
     repo = "Xray-core";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-tSSoaIKHgLf9ry6p0Y+BM1Nx8X+40BDDfJJYkABUoEc=";
+    hash = "sha256-GqPEAgWM9Wx19uxMj0LGeOyHreLbU0IMSmalwLe/SIc=";
   };
 
-  vendorHash = "sha256-kwvck6Eo/e6qgb1ENznhwZ/GPX75ssLUvR2u8Qm3UIM=";
+  vendorHash = "sha256-6Qa05hFdvfLlH8WQd426IU7MScmeevIgrgP5037pNek=";
 
   nativeBuildInputs = [ makeWrapper ];
 
diff --git a/pkgs/by-name/yo/yosys/package.nix b/pkgs/by-name/yo/yosys/package.nix
index 60c26569131b..06ae8074685e 100644
--- a/pkgs/by-name/yo/yosys/package.nix
+++ b/pkgs/by-name/yo/yosys/package.nix
@@ -93,7 +93,7 @@ stdenv.mkDerivation (finalAttrs: {
   };
 
   postPatch = ''
-    patchShebangs tests
+    patchShebangs tests ./misc/yosys-config.in
     substituteInPlace tests/aiger/generate_mk.py \
       --replace-fail 'SHELL := /usr/bin/env bash' 'SHELL := ${stdenv.shell}'
   ''
@@ -122,7 +122,7 @@ stdenv.mkDerivation (finalAttrs: {
     zlib
   ]
   ++ lib.optionals enablePython [
-    python3
+    pythonEnv
   ];
 
   cmakeFlags = [
diff --git a/pkgs/development/python-modules/aioamazondevices/default.nix b/pkgs/development/python-modules/aioamazondevices/default.nix
index c9e000a0a075..c33e894f95b3 100644
--- a/pkgs/development/python-modules/aioamazondevices/default.nix
+++ b/pkgs/development/python-modules/aioamazondevices/default.nix
@@ -15,14 +15,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "aioamazondevices";
-  version = "15.1.0";
+  version = "16.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "chemelli74";
     repo = "aioamazondevices";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-sx10iI7k5nMt6OmgLrNcEmQDOoPEuCOiSYAL5ctc+Xs=";
+    hash = "sha256-LasHNM7Uj/9A50mUWdE4E627AMBORYP5FCqNT7mJiVs=";
   };
 
   build-system = [ poetry-core ];
diff --git a/pkgs/development/python-modules/aioharmony/default.nix b/pkgs/development/python-modules/aioharmony/default.nix
index 6bc82851f106..9bf77f30410d 100644
--- a/pkgs/development/python-modules/aioharmony/default.nix
+++ b/pkgs/development/python-modules/aioharmony/default.nix
@@ -11,16 +11,16 @@
   slixmpp,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "aioharmony";
-  version = "1.0.8";
+  version = "1.0.10";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Harmony-Libs";
     repo = "aioharmony";
-    tag = "v${version}";
-    hash = "sha256-7K/I71yonmAqLp12Hk8e72BBfF/sez1cFdQbnixDdbg=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-j4VlYxGd3I6SLZjJUOSZW9hyfSkX04L/8CGBWp7vTj0=";
   };
 
   build-system = [ setuptools ];
@@ -43,10 +43,11 @@ buildPythonPackage rec {
   ];
 
   meta = {
+    description = "Python library for interacting with the Logitech Harmony devices";
     homepage = "https://github.com/Harmony-Libs/aioharmony";
-    description = "Python library for interacting the Logitech Harmony devices";
-    mainProgram = "aioharmony";
+    changelog = "https://github.com/Harmony-Libs/aioharmony/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ oro ];
+    mainProgram = "aioharmony";
   };
-}
+})
diff --git a/pkgs/development/python-modules/cvxpy/default.nix b/pkgs/development/python-modules/cvxpy/default.nix
index 8a3b75467771..d5bd7f374de5 100644
--- a/pkgs/development/python-modules/cvxpy/default.nix
+++ b/pkgs/development/python-modules/cvxpy/default.nix
@@ -28,7 +28,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "cvxpy";
-  version = "1.9.2";
+  version = "1.9.3";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -36,7 +36,7 @@ buildPythonPackage (finalAttrs: {
     owner = "cvxpy";
     repo = "cvxpy";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-nYfS9HXWTKcvVrq+wm5cgvB7keMAQPmKEe8bI0jngFg=";
+    hash = "sha256-7EBvCt+Qic+lfl8g5MMIJTKCnsfSm8fmUdq6P2SdF5I=";
   };
 
   postPatch =
diff --git a/pkgs/development/python-modules/flax/default.nix b/pkgs/development/python-modules/flax/default.nix
index c23bb35dbe40..76001649da4f 100644
--- a/pkgs/development/python-modules/flax/default.nix
+++ b/pkgs/development/python-modules/flax/default.nix
@@ -87,13 +87,15 @@ buildPythonPackage (finalAttrs: {
 
   nativeCheckInputs = [
     cloudpickle
-    keras
     einops
     pytestCheckHook
     pytest-xdist
     sphinx
-    tensorflow
     torch
+  ]
+  ++ lib.optionals tensorflow.meta.available [
+    keras
+    tensorflow
   ];
 
   disabledTestPaths = [
@@ -107,6 +109,10 @@ buildPythonPackage (finalAttrs: {
     # `tensorflow_datasets`, `vocabulary`) so the benefits of trying to run them
     # would be limited anyway.
     "examples/*"
+  ]
+  ++ lib.optionals (!tensorflow.meta.available) [
+    "tests/io_test.py"
+    "tests/tensorboard_test.py"
   ];
 
   disabledTests = [
diff --git a/pkgs/development/python-modules/hassil/default.nix b/pkgs/development/python-modules/hassil/default.nix
index 06bf5dfcdb4d..031b89cf33be 100644
--- a/pkgs/development/python-modules/hassil/default.nix
+++ b/pkgs/development/python-modules/hassil/default.nix
@@ -16,7 +16,7 @@
 
 let
   pname = "hassil";
-  version = "3.12.0";
+  version = "3.12.1";
 in
 buildPythonPackage rec {
   inherit pname version;
@@ -26,7 +26,7 @@ buildPythonPackage rec {
     owner = "OHF-Voice";
     repo = "hassil";
     tag = "v${version}";
-    hash = "sha256-v43znTyEx+QGTdn/9lDfBWqGzWMSzSj+Af5bRw84MZQ=";
+    hash = "sha256-jbodtdsEBDL4nB8kBkPjxFsMOMvsGPDpfMokMRF4xIA=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/heudiconv/default.nix b/pkgs/development/python-modules/heudiconv/default.nix
index 0547e9cecfe3..42a27f4c99cd 100644
--- a/pkgs/development/python-modules/heudiconv/default.nix
+++ b/pkgs/development/python-modules/heudiconv/default.nix
@@ -19,12 +19,12 @@
 
 buildPythonPackage rec {
   pname = "heudiconv";
-  version = "1.5.0";
+  version = "1.5.1";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-N3W6lkUwb7ejZwyIrvvZBBOuuypchIaEYx6XQhmvSwc=";
+    hash = "sha256-EO3iKhFs7U/ekueeUK8PRif6NFcV6xoDIMC+9js0Q8o=";
   };
 
   postPatch = ''
diff --git a/pkgs/development/python-modules/lyngdorf/default.nix b/pkgs/development/python-modules/lyngdorf/default.nix
index b3e12f50de33..df4610c850f5 100644
--- a/pkgs/development/python-modules/lyngdorf/default.nix
+++ b/pkgs/development/python-modules/lyngdorf/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "lyngdorf";
-  version = "1.4.8";
+  version = "1.10.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "fishloa";
     repo = "lyngdorf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-KasnlVp9Hx4B3NccLL1qaViLJRLKFY41yXu2bz1/8hA=";
+    hash = "sha256-CXKDXaCwn9n3VprpS5JuKXI/zOEPPgv94cyhEtDEknw=";
   };
 
   build-system = [ poetry-core ];
diff --git a/pkgs/development/python-modules/mistralai/default.nix b/pkgs/development/python-modules/mistralai/default.nix
index 56e9cf455aa4..5203b261ebac 100644
--- a/pkgs/development/python-modules/mistralai/default.nix
+++ b/pkgs/development/python-modules/mistralai/default.nix
@@ -36,7 +36,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "mistralai";
-  version = "2.9.4";
+  version = "2.10.1";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -44,7 +44,7 @@ buildPythonPackage (finalAttrs: {
     owner = "mistralai";
     repo = "client-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-w7nU4fiduMhpuvKZMJ3JTLEg8Bvuv5L5OXeJYve3/fI=";
+    hash = "sha256-T3B2fzhL63ttPWAJ3+/3B/+g1Qqk7bGKGY+ZnC/OChg=";
   };
 
   preBuild = ''
diff --git a/pkgs/development/python-modules/neopool-modbus/default.nix b/pkgs/development/python-modules/neopool-modbus/default.nix
index 2a2018a45624..a28f8d05a0cb 100644
--- a/pkgs/development/python-modules/neopool-modbus/default.nix
+++ b/pkgs/development/python-modules/neopool-modbus/default.nix
@@ -11,7 +11,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "neopool-modbus";
-  version = "4.5.1";
+  version = "4.8.0";
   pyproject = true;
 
   disabled = pythonOlder "3.13";
@@ -20,7 +20,7 @@ buildPythonPackage (finalAttrs: {
     owner = "svasek";
     repo = "python-neopool-modbus";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-HF2HqbEgt3bIUZ8MiWtYAht3QBAua/FgMXkppJye6KA=";
+    hash = "sha256-6m67J+wbcfpgRkSdXeu9zbJ4a/aAdogy2Qhe7iXSkKg=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/pystiebeleltron/default.nix b/pkgs/development/python-modules/pystiebeleltron/default.nix
index 1c67d16d7d09..e895dab1d067 100644
--- a/pkgs/development/python-modules/pystiebeleltron/default.nix
+++ b/pkgs/development/python-modules/pystiebeleltron/default.nix
@@ -9,16 +9,16 @@
   pytest-mock,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "pystiebeleltron";
-  version = "0.7.1";
+  version = "0.8.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ThyMYthOS";
     repo = "python-stiebel-eltron";
-    tag = "v${version}";
-    hash = "sha256-UWUSxdSuLDkYWHvgNbZ6TmXSMU8/sKa77I5JHHgTy0k=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-+Sj3qh8tNw7xoSdK6B8ooDgM52HZ2uN1AcXrEXyKvRE=";
   };
 
   build-system = [ hatchling ];
@@ -39,7 +39,8 @@ buildPythonPackage rec {
   meta = {
     description = "Python API for interacting with the Stiebel Eltron ISG web gateway via Modbus";
     homepage = "https://github.com/ThyMYthOS/python-stiebel-eltron";
+    changelog = "https://github.com/ThyMYthOS/python-stiebel-eltron/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = [ lib.maintainers.jamiemagee ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/python-xbox/default.nix b/pkgs/development/python-modules/python-xbox/default.nix
index c8b8d2e97153..02afea22246a 100644
--- a/pkgs/development/python-modules/python-xbox/default.nix
+++ b/pkgs/development/python-modules/python-xbox/default.nix
@@ -15,16 +15,16 @@
   respx,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "python-xbox";
-  version = "0.2.2";
+  version = "0.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "tr4nt0r";
     repo = "python-xbox";
-    tag = "v${version}";
-    hash = "sha256-hYkxoypKqG+UtATplR3j5aSpGxsyyXGsINlYHBMlBvw=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Aw6EdGkKDEb75mAPZm+z4V1Y4sCNGIxbOmSE9tv1YFY=";
   };
 
   build-system = [
@@ -59,10 +59,10 @@ buildPythonPackage rec {
   ];
 
   meta = {
-    changelog = "https://github.com/tr4nt0r/python-xbox/releases/tag/${src.tag}";
+    changelog = "https://github.com/tr4nt0r/python-xbox/releases/tag/${finalAttrs.src.tag}";
     description = "Library to authenticate with Xbox Network and use their API";
     homepage = "https://github.com/tr4nt0r/python-xbox";
     license = lib.licenses.mit;
     maintainers = [ lib.maintainers.dotlambda ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/reolink-aio/default.nix b/pkgs/development/python-modules/reolink-aio/default.nix
index 0750fe18235d..10c2909a5844 100644
--- a/pkgs/development/python-modules/reolink-aio/default.nix
+++ b/pkgs/development/python-modules/reolink-aio/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "reolink-aio";
-  version = "0.21.16";
+  version = "0.21.17";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "starkillerOG";
     repo = "reolink_aio";
     tag = finalAttrs.version;
-    hash = "sha256-aTPXma80N8LZCaI1Jn9gOribVYIGn/tny7VRATFf7wM=";
+    hash = "sha256-BOkqsoD8o01gRRqcVL5K0iEtka3Mljy7WLGxg2KpZ8I=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/reolink/default.nix b/pkgs/development/python-modules/reolink/default.nix
index d67d0c7c1120..868274e449d7 100644
--- a/pkgs/development/python-modules/reolink/default.nix
+++ b/pkgs/development/python-modules/reolink/default.nix
@@ -10,15 +10,15 @@
   setuptools,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "reolink";
-  version = "0.64";
+  version = "0.0.64";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "fwestenberg";
     repo = "reolink";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-3r5BwVlNolji2HIGjqv8gkizx4wWxrKYkiNmSJedKmI=";
   };
 
@@ -62,8 +62,8 @@ buildPythonPackage rec {
   meta = {
     description = "Module to interact with the Reolink IP camera API";
     homepage = "https://github.com/fwestenberg/reolink";
-    changelog = "https://github.com/fwestenberg/reolink/releases/tag/${src.tag}";
+    changelog = "https://github.com/fwestenberg/reolink/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/robot-descriptions/default.nix b/pkgs/development/python-modules/robot-descriptions/default.nix
index 688a4e883cf4..dcdf9bd493bc 100644
--- a/pkgs/development/python-modules/robot-descriptions/default.nix
+++ b/pkgs/development/python-modules/robot-descriptions/default.nix
@@ -16,14 +16,14 @@
 
 buildPythonPackage rec {
   pname = "robot-descriptions";
-  version = "3.1.0";
+  version = "3.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "robot-descriptions";
     repo = "robot_descriptions.py";
     tag = "v${version}";
-    hash = "sha256-tbyMcoZXnzWGZ9tO/2hBXNimJQa1UTxPLpyrI1yalWI=";
+    hash = "sha256-ImrZgxC9V1nX0+0LK/xXfLe1SkYlVayISKmG8f9+eTI=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/ytmusicapi/default.nix b/pkgs/development/python-modules/ytmusicapi/default.nix
index 35461cbfb199..355c6352a45b 100644
--- a/pkgs/development/python-modules/ytmusicapi/default.nix
+++ b/pkgs/development/python-modules/ytmusicapi/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage rec {
   pname = "ytmusicapi";
-  version = "1.12.2";
+  version = "1.12.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "sigma67";
     repo = "ytmusicapi";
     tag = version;
-    hash = "sha256-kYx1pimYj+WBYgmxQUin/Af3d6o7HJzqy7DUkbDyKBI=";
+    hash = "sha256-mIxtr018hE3LSJCJdD2Lr8UUOic8m2rmPwU86EJuLFk=";
   };
 
   build-system = [ setuptools-scm ];
diff --git a/pkgs/os-specific/linux/evdi/default.nix b/pkgs/os-specific/linux/evdi/default.nix
index 38ea0890f98f..723a496581a8 100644
--- a/pkgs/os-specific/linux/evdi/default.nix
+++ b/pkgs/os-specific/linux/evdi/default.nix
@@ -16,13 +16,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "evdi";
-  version = "1.15.0";
+  version = "1.15.1";
 
   src = fetchFromGitHub {
     owner = "DisplayLink";
     repo = "evdi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-CXF7PvmrPjjNoWXbWxEkFE/Sw4bO6YqDplPwF/OxhB0=";
+    hash = "sha256-3g6OETXJSf6AScJ2K9F67mPlh3Wpi20Yq+f+xe78p9Y=";
   };
 
   patches = [
diff --git a/pkgs/servers/home-assistant/component-packages.nix b/pkgs/servers/home-assistant/component-packages.nix
index e74b419a4471..9d282c78b370 100644
--- a/pkgs/servers/home-assistant/component-packages.nix
+++ b/pkgs/servers/home-assistant/component-packages.nix
@@ -2,7 +2,7 @@
 # Do not edit!
 
 {
-  version = "2026.9.2";
+  version = "2026.9.3";
   components = {
     "3_day_blinds" =
       ps: with ps; [
diff --git a/pkgs/servers/home-assistant/custom-components/garmin_connect/package.nix b/pkgs/servers/home-assistant/custom-components/garmin_connect/package.nix
index e92880a31426..98e9755a450d 100644
--- a/pkgs/servers/home-assistant/custom-components/garmin_connect/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/garmin_connect/package.nix
@@ -8,13 +8,13 @@
 buildHomeAssistantComponent rec {
   owner = "cyberjunky";
   domain = "garmin_connect";
-  version = "3.0.16";
+  version = "3.0.18";
 
   src = fetchFromGitHub {
     owner = "cyberjunky";
     repo = "home-assistant-garmin_connect";
     tag = version;
-    hash = "sha256-GHwGogWAlugqWMndJ1C/UaYITy+hrOF+G5rKW5OXNEI=";
+    hash = "sha256-76i6HdKdDxQq6kMPBkdTsfg+r3oCBd4X3WyQzdwi4+k=";
   };
 
   dependencies = [
diff --git a/pkgs/servers/home-assistant/custom-components/gtfs-realtime/package.nix b/pkgs/servers/home-assistant/custom-components/gtfs-realtime/package.nix
index d6c19559c7cb..4686707f8227 100644
--- a/pkgs/servers/home-assistant/custom-components/gtfs-realtime/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/gtfs-realtime/package.nix
@@ -12,13 +12,13 @@
 buildHomeAssistantComponent rec {
   owner = "bcpearce";
   domain = "gtfs_realtime";
-  version = "0.4.9";
+  version = "0.4.10";
 
   src = fetchFromGitHub {
     owner = "bcpearce";
     repo = "homeassistant-gtfs-realtime";
     tag = version;
-    hash = "sha256-a9ZL5NQvmMi58rfTG3REDpYAkg8Y4PmeYn/brBz5K3U=";
+    hash = "sha256-XKQsHN9gnVrRT+SFJMPU+qO2KCApgmkDB1PKW2PJeNg=";
   };
 
   dependencies = [ gtfs-station-stop ];
diff --git a/pkgs/servers/home-assistant/custom-components/octopus_energy/package.nix b/pkgs/servers/home-assistant/custom-components/octopus_energy/package.nix
index fb159e59edec..e7d9fffcbd72 100644
--- a/pkgs/servers/home-assistant/custom-components/octopus_energy/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/octopus_energy/package.nix
@@ -11,13 +11,13 @@
 buildHomeAssistantComponent rec {
   owner = "BottlecapDave";
   domain = "octopus_energy";
-  version = "19.0.1";
+  version = "19.1.0";
 
   src = fetchFromGitHub {
     inherit owner;
     repo = "HomeAssistant-OctopusEnergy";
     tag = "v${version}";
-    hash = "sha256-PtDyUk4OzElgB0FeM/028O108R7J97k5SwGfNAIybJ8=";
+    hash = "sha256-mUQXW6oW7JBDgDV+Sw3EGwVvBhwukEdNJmsxs8TK03Q=";
   };
 
   dependencies = [ pydantic ];
diff --git a/pkgs/servers/home-assistant/custom-components/powercalc/package.nix b/pkgs/servers/home-assistant/custom-components/powercalc/package.nix
index ac06e3a70bed..cf1e956547ec 100644
--- a/pkgs/servers/home-assistant/custom-components/powercalc/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/powercalc/package.nix
@@ -19,13 +19,13 @@
 buildHomeAssistantComponent rec {
   owner = "bramstroker";
   domain = "powercalc";
-  version = "1.25.3";
+  version = "1.25.4";
 
   src = fetchFromGitHub {
     inherit owner;
     repo = "homeassistant-powercalc";
     tag = "v${version}";
-    hash = "sha256-Cwg0E0ppk7auAiOb++F56UqEc6cBbGi7fAdFJVn1wbI=";
+    hash = "sha256-TNXXUdfivIhE5ZfzjFrSCVz/T7BoydTWd2jWfpTOiX4=";
   };
 
   dependencies = [ numpy ];
diff --git a/pkgs/servers/home-assistant/custom-components/solis-sensor/package.nix b/pkgs/servers/home-assistant/custom-components/solis-sensor/package.nix
index bb4e0b6ce674..4c99f32f764b 100644
--- a/pkgs/servers/home-assistant/custom-components/solis-sensor/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/solis-sensor/package.nix
@@ -9,13 +9,13 @@
 buildHomeAssistantComponent rec {
   owner = "hultenvp";
   domain = "solis";
-  version = "4.0.1";
+  version = "4.0.3";
 
   src = fetchFromGitHub {
     owner = "hultenvp";
     repo = "solis-sensor";
     rev = "v${version}";
-    hash = "sha256-53bRd+Zz46Mxiycpa8h4DXc9wUFmkczNtpteTkci4Q0=";
+    hash = "sha256-0l7Kf4xS9LOUSVMsuaao8sgP7xbig9hmcmgDNh99Rj0=";
   };
 
   dependencies = [ aiofiles ];
diff --git a/pkgs/servers/home-assistant/custom-components/spook/package.nix b/pkgs/servers/home-assistant/custom-components/spook/package.nix
index a155d2af00b1..372cd281a10d 100644
--- a/pkgs/servers/home-assistant/custom-components/spook/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/spook/package.nix
@@ -7,13 +7,13 @@
 buildHomeAssistantComponent rec {
   owner = "frenck";
   domain = "spook";
-  version = "5.4.0";
+  version = "5.5.0";
 
   src = fetchFromGitHub {
     inherit owner;
     repo = domain;
     tag = "v${version}";
-    hash = "sha256-dv9rOpgVu/zT6U7w/anzAwkAa3/LuxAP0Pd1cLiPwxM=";
+    hash = "sha256-AWz8hQLKmhe4mugTCIsvRutknBwgdZS7omBkyFtSEOQ=";
   };
 
   patches = [ ./remove-sub-integration-symlink-hack.patch ];
diff --git a/pkgs/servers/home-assistant/custom-components/tibber_local/package.nix b/pkgs/servers/home-assistant/custom-components/tibber_local/package.nix
index 97c965c632dd..1acf87860924 100644
--- a/pkgs/servers/home-assistant/custom-components/tibber_local/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/tibber_local/package.nix
@@ -8,13 +8,13 @@
 buildHomeAssistantComponent rec {
   owner = "marq24";
   domain = "tibber_local";
-  version = "2026.9.3";
+  version = "2026.9.4";
 
   src = fetchFromGitHub {
     inherit owner;
     repo = "ha-tibber-pulse-local";
     tag = version;
-    hash = "sha256-S5pdVjb1kX4C8x+nm6QirrVXZVFymL+ldv3DPJx4pOo=";
+    hash = "sha256-lLEzziGQCfEN8gIoy+VlUq1EcNU/q/61margJKBQxUE=";
   };
 
   dependencies = [
diff --git a/pkgs/servers/home-assistant/custom-components/tuya_local/package.nix b/pkgs/servers/home-assistant/custom-components/tuya_local/package.nix
index f8cf3db4d523..4a68b4db095a 100644
--- a/pkgs/servers/home-assistant/custom-components/tuya_local/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/tuya_local/package.nix
@@ -11,13 +11,13 @@
 buildHomeAssistantComponent rec {
   owner = "make-all";
   domain = "tuya_local";
-  version = "2026.9.0";
+  version = "2026.9.1";
 
   src = fetchFromGitHub {
     inherit owner;
     repo = "tuya-local";
     tag = version;
-    hash = "sha256-BRbJIlMs2IQWpcvaqSRsZdx0V1LC6JjaQrNTA0Mj2wk=";
+    hash = "sha256-RYAmRAbGMh+xWKXK3bTPjH9IvhvY7sNnl+19N0IcG5E=";
   };
 
   dependencies = [
diff --git a/pkgs/servers/home-assistant/custom-components/waste_collection_schedule/package.nix b/pkgs/servers/home-assistant/custom-components/waste_collection_schedule/package.nix
index 9677dc6f6bff..32b73f1f23e2 100644
--- a/pkgs/servers/home-assistant/custom-components/waste_collection_schedule/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/waste_collection_schedule/package.nix
@@ -20,13 +20,13 @@
 buildHomeAssistantComponent rec {
   owner = "mampfes";
   domain = "waste_collection_schedule";
-  version = "2.34.1";
+  version = "2.34.2";
 
   src = fetchFromGitHub {
     inherit owner;
     repo = "hacs_waste_collection_schedule";
     tag = "v${version}";
-    hash = "sha256-Eql14DO55xS3qwknmS7etp0a5zRMAfS2GRyfoUaqg1I=";
+    hash = "sha256-vGsyNR04aGwj/cp4m23kg+PS5bLGgUM6jI8rhnPHJjU=";
   };
 
   dependencies = [
diff --git a/pkgs/servers/home-assistant/custom-lovelace-modules/auto-entities/package.nix b/pkgs/servers/home-assistant/custom-lovelace-modules/auto-entities/package.nix
index a5dfd553cedf..f8ce7a5a2ef4 100644
--- a/pkgs/servers/home-assistant/custom-lovelace-modules/auto-entities/package.nix
+++ b/pkgs/servers/home-assistant/custom-lovelace-modules/auto-entities/package.nix
@@ -6,16 +6,16 @@
 
 buildNpmPackage rec {
   pname = "auto-entities";
-  version = "2.7.0";
+  version = "2.8.0";
 
   src = fetchFromGitHub {
     owner = "Lint-Free-Technology";
     repo = "lovelace-auto-entities";
     tag = "v${version}";
-    hash = "sha256-VFpr02OwxPv2kE1QNYv5FDHAyofq8vyesOnG80ALobk=";
+    hash = "sha256-jShhP0dxx2FZqVE5SmQ5g5/p9jG9T2V85Ql0oAvT9hA=";
   };
 
-  npmDepsHash = "sha256-8trmC1mgT7c7nxIBMSaGMgJbiEt5riLTJhZCpActulI=";
+  npmDepsHash = "sha256-ZksTHT4IXU2raJAsUKlmyl5N7VgX193Os+J9pczq05Y=";
 
   installPhase = ''
     runHook preInstall
diff --git a/pkgs/servers/home-assistant/custom-lovelace-modules/custom-sidebar/package.nix b/pkgs/servers/home-assistant/custom-lovelace-modules/custom-sidebar/package.nix
index 163cac7f01b5..1d6bd7f5d985 100644
--- a/pkgs/servers/home-assistant/custom-lovelace-modules/custom-sidebar/package.nix
+++ b/pkgs/servers/home-assistant/custom-lovelace-modules/custom-sidebar/package.nix
@@ -12,20 +12,20 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "custom-sidebar";
-  version = "17.1.0";
+  version = "17.2.0";
 
   src = fetchFromGitHub {
     owner = "elchininet";
     repo = "custom-sidebar";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-rkQfiWUNgt/w9OZ6s01vPabMNOalhqUNoY/e2xiQpXE=";
+    hash = "sha256-8KTO0Y6GPJc+EGlilZGWP301NPUo+5K9Vf8CMllTe6c=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     inherit pnpm;
     fetcherVersion = 3;
-    hash = "sha256-gVlWRdg0ET8HymPMCXiP2IGwM8mKMK8lVUg86XpxXH0=";
+    hash = "sha256-2FAULKg/USyBjmyNyOmR6Mi0jPVH3dS3kNK7XRQEk7g=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/servers/home-assistant/custom-lovelace-modules/kiosk-mode/package.nix b/pkgs/servers/home-assistant/custom-lovelace-modules/kiosk-mode/package.nix
index 23110c3dac89..97edfbce4ceb 100644
--- a/pkgs/servers/home-assistant/custom-lovelace-modules/kiosk-mode/package.nix
+++ b/pkgs/servers/home-assistant/custom-lovelace-modules/kiosk-mode/package.nix
@@ -12,13 +12,13 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "kiosk-mode";
-  version = "14.2.0";
+  version = "14.2.1";
 
   src = fetchFromGitHub {
     owner = "nemesisre";
     repo = "kiosk-mode";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-htFxbcoTu4yh3hNxpo++GdMdaQXK46gcdzkQfy6V/tA=";
+    hash = "sha256-8QflfG1D2/29QemkMX4KwQa7p/xvZxm3xoGw5i2wy+Q=";
   };
 
   pnpmDeps = fetchPnpmDeps {
diff --git a/pkgs/servers/home-assistant/custom-lovelace-modules/light-entity-card/package.nix b/pkgs/servers/home-assistant/custom-lovelace-modules/light-entity-card/package.nix
index 95c7e3e0c721..67aaf7fe9cad 100644
--- a/pkgs/servers/home-assistant/custom-lovelace-modules/light-entity-card/package.nix
+++ b/pkgs/servers/home-assistant/custom-lovelace-modules/light-entity-card/package.nix
@@ -6,13 +6,13 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "light-entity-card";
-  version = "6.3.1";
+  version = "6.4.0";
 
   src = fetchFromGitHub {
     owner = "ljmerza";
     repo = "light-entity-card";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Y25jtbKJNTVi6XUHntm2AtIzuht96/o5l+uScwEE9So=";
+    hash = "sha256-19P+X59S32kOo+qZ1sh9iFiVT7+jhuYsRrGp/6E0HD4=";
   };
 
   npmDepsHash = "sha256-Sl2TgA73Wq1n//lqokLC7iHcE1Oqt+ZP6MT+Deidhn0=";
diff --git a/pkgs/servers/home-assistant/custom-lovelace-modules/sonos-card/package.nix b/pkgs/servers/home-assistant/custom-lovelace-modules/sonos-card/package.nix
index 6c9a10821790..44e3d5f5ce72 100644
--- a/pkgs/servers/home-assistant/custom-lovelace-modules/sonos-card/package.nix
+++ b/pkgs/servers/home-assistant/custom-lovelace-modules/sonos-card/package.nix
@@ -6,13 +6,13 @@
 
 buildNpmPackage rec {
   pname = "sonos-card";
-  version = "10.8.2";
+  version = "10.8.4";
 
   src = fetchFromGitHub {
     owner = "punxaphil";
     repo = "custom-sonos-card";
     tag = "v${version}";
-    hash = "sha256-Ml5GLYdpa/FkVfUJstu2DCp8c9+Mw7cw+lWFZunN04Y=";
+    hash = "sha256-i+SpCLmtq2EtaZA5RNwa5Ikl4EymOlJostdwXH5WllA=";
   };
 
   postPatch = ''
@@ -21,7 +21,7 @@ buildNpmPackage rec {
       --replace-fail "&& bash create-dist-maxi-media-player.sh" ""
   '';
 
-  npmDepsHash = "sha256-tc+m3TJLcF0FNbMZA1lAlzpSYos79HF87IsWdKSmoLQ=";
+  npmDepsHash = "sha256-yrDqJdQ9LjDlcnDpQC5JmvZcloVtoOaNP0dzdiCU+7Y=";
 
   installPhase = ''
     runHook preInstall
diff --git a/pkgs/servers/home-assistant/custom-lovelace-modules/versatile-thermostat-ui-card/package.nix b/pkgs/servers/home-assistant/custom-lovelace-modules/versatile-thermostat-ui-card/package.nix
index dee06017714e..1f825f37fe79 100644
--- a/pkgs/servers/home-assistant/custom-lovelace-modules/versatile-thermostat-ui-card/package.nix
+++ b/pkgs/servers/home-assistant/custom-lovelace-modules/versatile-thermostat-ui-card/package.nix
@@ -6,13 +6,13 @@
 
 buildNpmPackage rec {
   pname = "versatile-thermostat-ui-card";
-  version = "3.3.0";
+  version = "3.4.0";
 
   src = fetchFromGitHub {
     owner = "jmcollin78";
     repo = "versatile-thermostat-ui-card";
     rev = "${version}";
-    hash = "sha256-l5GfmK3fAolJvY8q6iX5zjwjW/f6zDOG5vpKsPPR8gs=";
+    hash = "sha256-N3v5VD0XdvKlMyMvyJ4gXB2yRt3qfJpngbzLdTGy5Ec=";
   };
 
   npmFlags = [ "--legacy-peer-deps" ];
diff --git a/pkgs/servers/home-assistant/default.nix b/pkgs/servers/home-assistant/default.nix
index 2f3544522445..b8dd2c3526e2 100644
--- a/pkgs/servers/home-assistant/default.nix
+++ b/pkgs/servers/home-assistant/default.nix
@@ -251,7 +251,7 @@ let
   extraBuildInputs = extraPackages python3Packages;
 
   # Don't forget to run update-component-packages.py after updating
-  hassVersion = "2026.9.2";
+  hassVersion = "2026.9.3";
 
 in
 python3Packages.buildPythonApplication rec {
@@ -272,13 +272,13 @@ python3Packages.buildPythonApplication rec {
     owner = "home-assistant";
     repo = "core";
     tag = version;
-    hash = "sha256-JBGydiQydkIDPl1HybR7OK8Y1iuqht3olOlzY1tz/KQ=";
+    hash = "sha256-oqgvO3mjsHsdujlGp0lwAfH6r0dGBxf0R+lILCTueeQ=";
   };
 
   # Secondary source is pypi sdist for translations
   sdist = fetchPypi {
     inherit pname version;
-    hash = "sha256-CnnNTxNkK+pO0YczaZiRoNplH2s74fzCv7XEWdxvd+E=";
+    hash = "sha256-J+G3e9jJxdmn9aw4pg9G5qD5QTVKUJkVomLw1Lz/84g=";
   };
 
   build-system = with python3Packages; [
diff --git a/pkgs/servers/home-assistant/pytest-homeassistant-custom-component.nix b/pkgs/servers/home-assistant/pytest-homeassistant-custom-component.nix
index f217952815df..e0b844a9c776 100644
--- a/pkgs/servers/home-assistant/pytest-homeassistant-custom-component.nix
+++ b/pkgs/servers/home-assistant/pytest-homeassistant-custom-component.nix
@@ -19,7 +19,7 @@
 
 buildPythonPackage rec {
   pname = "pytest-homeassistant-custom-component";
-  version = "0.13.365";
+  version = "0.13.366";
   pyproject = true;
 
   disabled = pythonOlder "3.13";
@@ -28,7 +28,7 @@ buildPythonPackage rec {
     owner = "MatthewFlamm";
     repo = "pytest-homeassistant-custom-component";
     tag = version;
-    hash = "sha256-ETvPBSmFySu10Q2MLeKAZNEdb2XnYxTzThSSg6bkG8Y=";
+    hash = "sha256-XNzVIBamQGDUhABw+ml5ZT0jDP8yPSu/OLgKODZsVAc=";
   };
 
   patches = [
diff --git a/pkgs/servers/home-assistant/stubs.nix b/pkgs/servers/home-assistant/stubs.nix
index 1f2103bf6bde..3407e92e028d 100644
--- a/pkgs/servers/home-assistant/stubs.nix
+++ b/pkgs/servers/home-assistant/stubs.nix
@@ -10,7 +10,7 @@
 
 buildPythonPackage rec {
   pname = "homeassistant-stubs";
-  version = "2026.9.2";
+  version = "2026.9.3";
   pyproject = true;
 
   disabled = python.version != home-assistant.python3Packages.python.version;
@@ -19,7 +19,7 @@ buildPythonPackage rec {
     owner = "KapJI";
     repo = "homeassistant-stubs";
     tag = version;
-    hash = "sha256-VL420WZG/C5Ru5tAkR2n15CCFW0UQ5f3hjTE31mGj+k=";
+    hash = "sha256-D02IDJwl3kQRi8OGNCvofGU+ICiyDyFxWnP2S8ZZrv8=";
   };
 
   build-system = [
diff --git a/pkgs/servers/http/angie/default.nix b/pkgs/servers/http/angie/default.nix
index 54cfe4a72e4c..26fdcd220def 100644
--- a/pkgs/servers/http/angie/default.nix
+++ b/pkgs/servers/http/angie/default.nix
@@ -9,11 +9,11 @@
 
 callPackage ../nginx/generic.nix args rec {
   pname = "angie";
-  version = "1.12.1";
+  version = "1.12.2";
 
   src = fetchurl {
     url = "https://download.angie.software/files/angie-${version}.tar.gz";
-    hash = "sha256-X08gO+Kspv4gdwtInHIORuUdM35SEGXn5HK2HiTj0vU=";
+    hash = "sha256-TwpRsd6N2fCSSLKEW7+k308DSHe/kvYF5Jn9f/8Jx3w=";
   };
 
   configureFlags = lib.optionals withAcme [
diff --git a/pkgs/servers/monitoring/zabbix/versions.nix b/pkgs/servers/monitoring/zabbix/versions.nix
index af5a4c44335c..7cc388aaaeb3 100644
--- a/pkgs/servers/monitoring/zabbix/versions.nix
+++ b/pkgs/servers/monitoring/zabbix/versions.nix
@@ -1,11 +1,11 @@
 generic: {
   v74 = generic {
-    version = "7.4.13";
-    hash = "sha256-68T7BUr5GbEjYi/uqdTDmXEc8FB+8ZPi3tdnE6gO48Y=";
+    version = "7.4.14";
+    hash = "sha256-795fbxmJbwIAu1JF44ZgNWZyccex6EYm0mCV8kpvu0I=";
   };
   v70 = generic {
-    version = "7.0.29";
-    hash = "sha256-GE0DRU1/8tSfodKSCCrTNbzpB7oi4w1UA10FMpcIzjI=";
+    version = "7.0.30";
+    hash = "sha256-wMpAeRGa3uxBNeM1HRuEkVet4HbDUsAGco5zLxcHIyw=";
   };
   v60 = generic {
     version = "6.0.48";
diff --git a/pkgs/servers/nextcloud/default.nix b/pkgs/servers/nextcloud/default.nix
index 11627029bb4b..e4702c36a26b 100644
--- a/pkgs/servers/nextcloud/default.nix
+++ b/pkgs/servers/nextcloud/default.nix
@@ -3,9 +3,9 @@
   stdenvNoCC,
   fetchurl,
   nixosTests,
-  nextcloud32Packages,
   nextcloud33Packages,
   nextcloud34Packages,
+  nextcloud35Packages,
 }:
 
 let
@@ -56,12 +56,6 @@ let
     };
 in
 {
-  nextcloud32 = generic {
-    version = "32.0.15";
-    hash = "sha256-aXSsEZUCXxNkPfF21Fas9FI3kNVIjCBbV1OfZCx9Fkw=";
-    packages = nextcloud32Packages;
-  };
-
   nextcloud33 = generic {
     version = "33.0.9";
     hash = "sha256-8zHBBB0CfmWIUm0qAM5CvHCpYi6rWHHAvpF3JSz3dCM=";
@@ -74,6 +68,12 @@ in
     packages = nextcloud34Packages;
   };
 
+  nextcloud35 = generic {
+    version = "35.0.0";
+    hash = "sha256-2MFl52SnpN6C6z3sUQ1m4Z8tgiGFcmBK+cFdmamKKaA=";
+    packages = nextcloud35Packages;
+  };
+
   # tip: get the sha with:
   # curl  "https://download.nextcloud.com/server/releases/nextcloud-${version}.tar.bz2.sha512" | grep '.tar.bz2'  | cut -f1 -d' ' | xargs nix hash convert --hash-algo sha512 --to sri
 }
diff --git a/pkgs/servers/nextcloud/packages/32.json b/pkgs/servers/nextcloud/packages/35.json
similarity index 80%
rename from pkgs/servers/nextcloud/packages/32.json
rename to pkgs/servers/nextcloud/packages/35.json
index 41bccdc3a359..8c857b3690ac 100644
--- a/pkgs/servers/nextcloud/packages/32.json
+++ b/pkgs/servers/nextcloud/packages/35.json
@@ -1,14 +1,4 @@
 {
-  "bookmarks": {
-    "hash": "sha256-eNMD82GUlOTp3/Y6u/Bg2pUmKayQv/jPbSAZtlAELtE=",
-    "url": "https://github.com/nextcloud/bookmarks/releases/download/v16.2.6/bookmarks-16.2.6.tar.gz",
-    "version": "16.2.6",
-    "description": "- 📂 Sort bookmarks into folders\n- 🏷 Add tags and personal notes\n- ☠ Find broken links and duplicates\n- 📲 Synchronize with all your browsers and devices\n- 📔 Store archived versions of your links in case they are depublished\n- 🔍 Full-text search on site contents\n- 👪 Share bookmarks with other users, groups and teams or via public links\n- ⚛ Generate RSS feeds of your collections\n- 📈 Stats on how often you access which links\n- 🔒 Automatic backups of your bookmarks collection\n- 💼 Built-in Dashboard widgets for frequent and recent links\n\nRequirements:\n - PHP extensions:\n   - intl: *\n   - mbstring: *\n - when using MySQL, use at least v8.0",
-    "homepage": "https://github.com/nextcloud/bookmarks",
-    "licenses": [
-      "agpl"
-    ]
-  },
   "calendar": {
     "hash": "sha256-Z8d3puqXRAnp0ijCP8YPK+jmddN2UxtrGxJfLwNlc40=",
     "url": "https://github.com/nextcloud-releases/calendar/releases/download/v6.5.4/calendar-v6.5.4.tar.gz",
@@ -20,9 +10,9 @@
     ]
   },
   "checksum": {
-    "hash": "sha256-xA+BdtbAJVtM6YO5vdW7lfOGlyAkEhHlaCMvHmoHYX4=",
-    "url": "https://github.com/westberliner/checksum/releases/download/v2.1.0/checksum.tar.gz",
-    "version": "2.0.3",
+    "hash": "sha256-6qPZvsml3LBYuuDnMwHg4WssxyQjr6op3AKlsMBLCGk=",
+    "url": "https://github.com/westberliner/checksum/releases/download/v2.1.2/checksum.tar.gz",
+    "version": "2.1.2",
     "description": "Allows users to create a hash checksum of a file.\n        Possible algorithms are md5, sha1, sha256, sha384, sha512, sha3-256, sha3-512 and crc32.\n\n        Just open the details view of the file (Sidebar). There should be a new tab called \"Checksum\".\n        Select a algorithm and it will try to generate a hash.\n        If you want an other algorithm, just click on the reload button.",
     "homepage": "https://github.com/westberliner/checksum/",
     "licenses": [
@@ -40,13 +30,13 @@
     ]
   },
   "contacts": {
-    "hash": "sha256-Mf8KOfwLLN/OxhC4E3YceIVO+m3y2MKt41ZoW0Gv/Zo=",
-    "url": "https://github.com/nextcloud-releases/contacts/releases/download/v8.3.19/contacts-v8.3.19.tar.gz",
-    "version": "8.3.19",
+    "hash": "sha256-BvXaSNcIhM72D6r4uzaosuwip7zbCuz0lwppNhRWKFQ=",
+    "url": "https://github.com/nextcloud-releases/contacts/releases/download/v8.9.0/contacts-v8.9.0.tar.gz",
+    "version": "8.9.0",
     "description": "The Nextcloud contacts app is a user interface for Nextcloud's CardDAV server. Easily sync contacts from various devices with your Nextcloud and edit them online.\n\n* 🚀 **Integration with other Nextcloud apps!** Currently Mail and Calendar – more to come.\n* 🎉 **Never forget a birthday!** You can sync birthdays and other recurring events with your Nextcloud Calendar.\n* 👥 **Sharing of Adressbooks!** You want to share your contacts with your friends or coworkers? No problem!\n* 🙈 **We’re not reinventing the wheel!** Based on the great and open SabreDAV library.",
     "homepage": "https://github.com/nextcloud/contacts#readme",
     "licenses": [
-      "agpl"
+      "AGPL-3.0-or-later"
     ]
   },
   "cookbook": {
@@ -60,49 +50,29 @@
     ]
   },
   "cospend": {
-    "hash": "sha256-mclcZDNmvpYX/2q7azyiTLSCiTYvk7ILeqtb/8+0ADQ=",
-    "url": "https://github.com/julien-nc/cospend-nc/releases/download/v3.2.0/cospend-3.2.0.tar.gz",
-    "version": "3.2.0",
+    "hash": "sha256-anScVCo9brBmlNU1oPbXdJEqM38oyltOmtVRzKR6mt4=",
+    "url": "https://github.com/julien-nc/cospend-nc/releases/download/v4.1.3/cospend-4.1.3.tar.gz",
+    "version": "4.1.3",
     "description": "# Nextcloud Cospend 💰\n\nNextcloud Cospend is a group/shared budget manager. It was inspired by the great [IHateMoney](https://github.com/spiral-project/ihatemoney/).\n\nYou can use it when you share a house, when you go on vacation with friends, whenever you share expenses with a group of people.\n\nIt lets you create projects with members and bills. Each member has a balance computed from the project bills. Balances are not an absolute amount of money at members disposal but rather a relative information showing if a member has spent more for the group than the group has spent for her/him, independently of exactly who spent money for whom. This way you can see who owes the group and who the group owes. Ultimately you can ask for a settlement plan telling you which payments to make to reset members balances.\n\nProject members are independent from Nextcloud users. Projects can be shared with other Nextcloud users or via public links.\n\n[MoneyBuster](https://gitlab.com/eneiluj/moneybuster) Android client is [available in F-Droid](https://f-droid.org/packages/net.eneiluj.moneybuster/) and on the [Play store](https://play.google.com/store/apps/details?id=net.eneiluj.moneybuster).\n\n[PayForMe](https://github.com/mayflower/PayForMe) iOS client is currently under developpement!\n\nThe private and public APIs are documented using [the Nextcloud OpenAPI extractor](https://github.com/nextcloud/openapi-extractor/). This documentation can be accessed directly in Nextcloud. All you need is to install Cospend (>= v1.6.0) and use the [the OCS API Viewer app](https://apps.nextcloud.com/apps/ocs_api_viewer) to browse the OpenAPI documentation.\n\n## Features\n\n* ✎ Create/edit/delete projects, members, bills, bill categories, currencies\n* ⚖ Check member balances\n* 🗠 Display project statistics\n* ♻ Display settlement plan\n* Move bills from one project to another\n* Move bills to trash before actually deleting them\n* Archive old projects before deleting them\n* 🎇 Automatically create reimbursement bills from settlement plan\n* 🗓 Create recurring bills (day/week/month/year)\n* 📊 Optionally provide custom amount for each member in new bills\n* 🔗 Link personal files to bills (picture of physical receipt for example)\n* 👩 Public links for people outside Nextcloud (can be password protected)\n* 👫 Share projects with Nextcloud users/groups/circles\n* 🖫 Import/export projects as csv (compatible with csv files from IHateMoney and SplitWise)\n* 🔗 Generate link/QRCode to easily add projects in MoneyBuster\n* 🗲 Implement Nextcloud notifications and activity stream\n\nThis app usually support the 2 or 3 last major versions of Nextcloud.\n\nThis app is under development.\n\n🌍 Help us to translate this app on [Nextcloud-Cospend/MoneyBuster Crowdin project](https://crowdin.com/project/moneybuster).\n\n⚒ Check out other ways to help in the [contribution guidelines](https://github.com/julien-nc/cospend-nc/blob/master/CONTRIBUTING.md).\n\n## Documentation\n\n* [User documentation](https://github.com/julien-nc/cospend-nc/blob/master/docs/user.md)\n* [Admin documentation](https://github.com/julien-nc/cospend-nc/blob/master/docs/admin.md)\n* [Developer documentation](https://github.com/julien-nc/cospend-nc/blob/master/docs/dev.md)\n* [CHANGELOG](https://github.com/julien-nc/cospend-nc/blob/master/CHANGELOG.md#change-log)\n* [AUTHORS](https://github.com/julien-nc/cospend-nc/blob/master/AUTHORS.md#authors)\n\n## Known issues\n\n* It does not make you rich\n\nAny feedback will be appreciated.\n\n\n\n## Donation\n\nI develop this app during my free time.\n\n* [Donate with Paypal](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=66PALMY8SF5JE) (you don't need a paypal account)\n* [Donate with Liberapay : ![Donate using Liberapay](https://liberapay.com/assets/widgets/donate.svg)](https://liberapay.com/eneiluj/donate)",
     "homepage": "https://github.com/julien-nc/cospend-nc",
     "licenses": [
       "agpl"
     ]
   },
-  "dav_push": {
-    "hash": "sha256-OafUgG58+LsxibS/9aZjiOkdQcBV34xE6cmO9IkHMUo=",
-    "url": "https://github.com/bitfireAT/nc_ext_dav_push/releases/download/v1.0.2/dav_push.tar.gz",
-    "version": "1.0.2",
-    "description": "In proprietary environments, changes in events and contacts are nowadays usually pushed to other clients so that they can update their views almost in real-time.\n\nWebDAV however (and in this context, especially CalDAV and CardDAV) doesn't currently support push notifications of clients when a collection has changed. So clients have to periodically ask the server for changes. This causes unnecessary delays and battery usage.\n\nThe WebDAV-Push standard, which is currently in development, wants to solve this problem with an open protocol, too.\n\nThis is the server part of these efforts to draft a standard and provide a working implementation (server + client) in order to demonstrate it.\n\n\nThe current WebDAV-Push draft is provided by [@bitfireAT](https://github.com/bitfireAT).\n          \nThis Nextcloud extension has been developed by [@verdigado](https://github.com/verdigado).",
-    "homepage": "",
-    "licenses": [
-      "agpl"
-    ]
-  },
   "deck": {
-    "hash": "sha256-IxFC2nLtam9010MwQx8/k3DnJxTjDGe4ulx286VUUnk=",
-    "url": "https://github.com/nextcloud-releases/deck/releases/download/v1.16.8/deck-v1.16.8.tar.gz",
-    "version": "1.16.8",
+    "hash": "sha256-SUauPg95OdjN1sOnLzXMyScD0sWmlFhtZc4C1yTT6qg=",
+    "url": "https://github.com/nextcloud-releases/deck/releases/download/v1.19.0/deck-v1.19.0.tar.gz",
+    "version": "1.19.0",
     "description": "Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.\n\n\n- 📥 Add your tasks to cards and put them in order\n- 📄 Write down additional notes in Markdown\n- 🔖 Assign labels for even better organization\n- 👥 Share with your team, friends or family\n- 📎 Attach files and embed them in your Markdown description\n- 💬 Discuss with your team using comments\n- ⚡ Keep track of changes in the activity stream\n- 🚀 Get your project organized",
     "homepage": "https://github.com/nextcloud/deck",
     "licenses": [
       "agpl"
     ]
   },
-  "drawio": {
-    "hash": "sha256-0QhvtGe7WtySzBAIicSEyfgRlCjs8gZsmIosZ8pv7bg=",
-    "url": "https://github.com/arnowelzel/drawio-nextcloud/releases/download/v4.1.4/drawio-v4.1.4.tar.gz",
-    "version": "4.1.4",
-    "description": "Integrates the diagrams.net diagram editor with Nextcloud. Users can create and edit .drawio diagrams and .dwb whiteboards directly within the Nextcloud file manager.\n\n**Features:**\n\n- Create and edit diagrams and whiteboards from the Nextcloud \"+\" menu\n- Click any .drawio or .dwb file to open the editor inline\n- Autosave with optimistic conflict detection\n- Inline diagram previews in Text, Collectives, Talk, Notes, and Deck\n- Supports public share links (read-only and editable)\n- Offline mode for privacy-sensitive deployments\n- Configurable editor URL for self-hosted diagrams.net instances",
-    "homepage": "https://github.com/arnowelzel/drawio-nextcloud",
-    "licenses": [
-      "agpl"
-    ]
-  },
   "end_to_end_encryption": {
-    "hash": "sha256-w6iCdQDRkX/Tvh/578BuTIKWXMVWKqYMeq5bEl7uZB0=",
-    "url": "https://github.com/nextcloud-releases/end_to_end_encryption/releases/download/v1.18.5/end_to_end_encryption-v1.18.5.tar.gz",
-    "version": "1.18.5",
+    "hash": "sha256-qfLYRPig+ZkvmHyVfjFRSafUEJrF1q/qU4XqbIf5xp4=",
+    "url": "https://github.com/nextcloud-releases/end_to_end_encryption/releases/download/v2.2.4/end_to_end_encryption-v2.2.4.tar.gz",
+    "version": "2.2.4",
     "description": "## **End-to-End Encryption**\n\n### For End Users\n\n**Protect your most sensitive files with strong encryption.**\n\nThe End-to-End Encryption app gives you complete control over your data privacy.\nWith this app, you can encrypt specific folders so that only you (and those you trust) can access their contents.\nYour files are encrypted on your device before they reach the server, ensuring that no one—not even the server administrator—can read them.\n\n**Benefits:**\n- 🔒 **True privacy**: Files are encrypted on your device and can only be decrypted by you\n- 📱 **Works across all platforms**: Fully supported on desktop, Android, iOS clients, and as you wish even in the browser\n- 🎯 **Selective encryption**: Choose which folders to encrypt\n- 🛡️ **Secure sharing**: Share encrypted files with other users or even secure public upload using the encrypted file drop\n\n---\n\n### For Administrators\n\n**Enterprise-ready end-to-end encryption infrastructure for your Nextcloud instance.**\n\nThis app provides all the necessary server-side APIs and infrastructure to enable End-to-End encryption (E2EE) for your users.\nIt ensures that encrypted data remains secure throughout its lifecycle on your server.\n\n**Technical highlights:**\n- 🔐 **Complete API suite**: Provides all client-side APIs needed for E2EE implementation\n- 🔒 **Secure FileDrop integration**: Enables secure file sharing with encryption\n- 🛡️ **Zero-knowledge architecture**: Server never has access to encryption keys\n- ⚙️ **Group restrictions**: Limit app usage to specific user groups if needed\n- 🔄 **Background job management**: Automatic rollback handling for failed operations\n\n### Setup\nThis application provides the server-side infrastructure for end-to-end encryption, but it requires client support to function.\nTo enable end-to-end encryption, users will need to install the corresponding client-side app on their devices (desktop, Android, iOS) or use the web client.\n\nUsing the web interface, after enabling it in the personal settings, allows you to encrypt files and folders directly in the browser,\nproviding a seamless experience without needing additional software. But also requires some kind of trust in the server as the code is delivered by the server and could be manipulated.\n\nOnce enable through clients or the web interface, you can create encrypted folders and upload or move files into them.\nThe clients and the web interface will handle the encryption and decryption processes automatically.\n\n⚠️ This comes with some limitations and caveats, as only normal file operations can be handled.\nMeaning that some apps in the web interface do not work with encrypted files.",
     "homepage": "https://github.com/nextcloud/end_to_end_encryption",
     "licenses": [
@@ -110,9 +80,9 @@
     ]
   },
   "files_automatedtagging": {
-    "hash": "sha256-Y/GpyHsZ1Jks+yyy2Nqj0BOwVRWma1xfGoVuZZoSRDE=",
-    "url": "https://github.com/nextcloud-releases/files_automatedtagging/releases/download/v3.0.3/files_automatedtagging-v3.0.3.tar.gz",
-    "version": "3.0.3",
+    "hash": "sha256-r3p7EcsSiTxXiB5fgsSlsaj+Qt5Wcp/WDAIVNHmkcGw=",
+    "url": "https://github.com/nextcloud-releases/files_automatedtagging/releases/download/v6.0.0/files_automatedtagging-v6.0.0.tar.gz",
+    "version": "6.0.0",
     "description": "An app for Nextcloud that automatically assigns tags to newly uploaded files based on some conditions.\n\nThe tags can later be used to control retention, file access, automatic script execution and more.\n\n## How it works\nTo define tags, administrators can create and manage a set of rule groups. Each rule group consists of one or more rules combined through operators. Rules can include criteria like file type, size, time and more. A request matches a group if all rules evaluate to true. On uploading a file all defined groups are evaluated and when matching, the given tags are assigned to the file.",
     "homepage": "https://github.com/nextcloud/files_automatedtagging",
     "licenses": [
@@ -120,9 +90,9 @@
     ]
   },
   "files_linkeditor": {
-    "hash": "sha256-C0JWqDDnaG9eYOzaTGeEk6gIhOlXhc1A9dH0uFNo5uA=",
-    "url": "https://github.com/te-online/nextcloud-app-releases/raw/main/files_linkeditor/v1.1.26/files_linkeditor.tar.gz",
-    "version": "1.1.26",
+    "hash": "sha256-eMPzDIv7xXoP5pSRf17paIngimuX8zqxLMJSc7ws+G8=",
+    "url": "https://github.com/te-online/nextcloud-app-releases/raw/main/files_linkeditor/v1.1.27/files_linkeditor.tar.gz",
+    "version": "1.1.27",
     "description": "### External web links in Nextcloud!\n* ✍️ **create and edit** .URL and .webloc links in the file view\n* 🌍 **open links** by clicking them and confirming you want to go to the external site\n* 📤 **works in public shares** so you can share links easily with others\n* 🔄 **sync your links** as .URL and .webloc are web links as created on most operating systems.\n\n_[View changelog](https://github.com/te-online/files_linkeditor/blob/main/CHANGELOG.md)_",
     "homepage": "https://github.com/te-online/files_linkeditor",
     "licenses": [
@@ -140,39 +110,29 @@
     ]
   },
   "files_retention": {
-    "hash": "sha256-48fC7VDNZs2+qienMP5hBAWgRkm/i+Q2WXnrd8fz16Q=",
-    "url": "https://github.com/nextcloud-releases/files_retention/releases/download/v3.0.0/files_retention-v3.0.0.tar.gz",
-    "version": "3.0.0",
+    "hash": "sha256-119E42joqgFGvozs/gt8KqU9hhlH7PoZT+Y/T+bOIEs=",
+    "url": "https://github.com/nextcloud-releases/files_retention/releases/download/v6.0.0/files_retention-v6.0.0.tar.gz",
+    "version": "6.0.0",
     "description": "An app for Nextcloud to control automatic deletion of files after a given time.\nOptionally the users can be informed the day before.",
     "homepage": "https://github.com/nextcloud/files_retention",
     "licenses": [
-      "agpl"
+      "AGPL-3.0-or-later"
     ]
   },
   "forms": {
-    "hash": "sha256-f+LNscBPLdFI1t0VivnivlcG0HIWrqlQk7pYDcfGWIA=",
-    "url": "https://github.com/nextcloud-releases/forms/releases/download/v5.3.6/forms-v5.3.6.tar.gz",
-    "version": "5.3.6",
+    "hash": "sha256-/fjUsXViNBHkxcR/DpflTrcP2Xuiv44/gu+PKUQ3ihk=",
+    "url": "https://github.com/nextcloud-releases/forms/releases/download/v5.4.0/forms-v5.4.0.tar.gz",
+    "version": "5.4.0",
     "description": "**Simple surveys and questionnaires, self-hosted!**\n\n- **📝 Simple design:** No mass of options, only the essentials. Works well on mobile of course.\n- **📊 View & export results:** Results are visualized and can also be exported as CSV in the same format used by Google Forms.\n- **🔒 Data under your control!** Unlike in Google Forms, Typeform, Doodle and others, the survey info and responses are kept private on your instance.\n- **🧑‍💻 Connect to your software:** Easily integrate Forms into your service with our full-fledged [REST-API](https://github.com/nextcloud/forms/blob/main/docs/API_v3.md).\n- **🙋 Get involved!** We have lots of stuff planned like more question types, collaboration on forms, [and much more](https://github.com/nextcloud/forms/milestones)!",
     "homepage": "https://github.com/nextcloud/forms",
     "licenses": [
       "AGPL-3.0-or-later"
     ]
   },
-  "gpoddersync": {
-    "hash": "sha256-V4iJr1p5uqxdrvE50bjyNTiHdsZATewaBXKQ8Ma0dHg=",
-    "url": "https://github.com/thrillfall/nextcloud-gpodder/releases/download/3.17.0/gpoddersync.tar.gz",
-    "version": "3.17.0",
-    "description": "Expose GPodder API to sync podcast consumer apps like AntennaPod",
-    "homepage": "https://github.com/thrillfall/nextcloud-gpodder",
-    "licenses": [
-      "agpl"
-    ]
-  },
   "groupfolders": {
-    "hash": "sha256-NGGhjcCgcziKpItkEoc9AvBAs+fzeJ9CLqj6ucuBJzM=",
-    "url": "https://github.com/nextcloud-releases/groupfolders/releases/download/v20.1.18/groupfolders-v20.1.18.tar.gz",
-    "version": "20.1.18",
+    "hash": "sha256-OUnmpFlHGICQwXDGmDquEaHWYTTsMX/+e3YJBi867PM=",
+    "url": "https://github.com/nextcloud-releases/groupfolders/releases/download/v23.0.1/groupfolders-v23.0.1.tar.gz",
+    "version": "23.0.1",
     "description": "Team Folders (formerly \"Group Folders\") allows administrators to create and manage shared\nfolders for selected teams within Nextcloud.\n\nAdmins can grant one or more teams access to a folder, configure permissions (such as read,\nwrite, and sharing rights), and assign storage quotas from the Team Folders section (under\nadmin settings). The app also supports advanced permissions and integration with Nextcloud’s\ntrash and versioning systems.\n\nAs of Hub 10 / Nextcloud 31, admins must be members of a team to assign that team to a Team\nFolder.",
     "homepage": "https://github.com/nextcloud/groupfolders",
     "licenses": [
@@ -180,9 +140,9 @@
     ]
   },
   "guests": {
-    "hash": "sha256-wXrcJwW68wgA0VEcA/3Uc8ew2NG1lzAQ4aaqI0pT2oE=",
-    "url": "https://github.com/nextcloud-releases/guests/releases/download/v4.9.0/guests-v4.9.0.tar.gz",
-    "version": "4.9.0",
+    "hash": "sha256-FVsiiFpKecrVqQMYXFPyyIt4zDc+KL2TGpafwx33i/c=",
+    "url": "https://github.com/nextcloud-releases/guests/releases/download/v4.10.0/guests-v4.10.0.tar.gz",
+    "version": "4.10.0",
     "description": "👥 Allows for better collaboration with external users by allowing users to create guests account.\n\nGuests accounts can be created from the share menu by entering either the recipients email or name and choosing \"create guest account\", once the share is created the guest user will receive an email notification about the mail with a link to set their password.\n\nGuests users can only access files shared to them and cannot create any files outside of shares, additionally, the apps accessible to guest accounts are whitelisted.",
     "homepage": "https://github.com/nextcloud/guests/",
     "licenses": [
@@ -190,9 +150,9 @@
     ]
   },
   "impersonate": {
-    "hash": "sha256-mOlaUYaGRoYITwjIpwhUnKLh9HOVef77dCpFP4bC5RQ=",
-    "url": "https://github.com/nextcloud-releases/impersonate/releases/download/v3.0.1/impersonate-v3.0.1.tar.gz",
-    "version": "3.0.1",
+    "hash": "sha256-A/5EiGfge/Tm492V81UPige1yJaDorrxOCsc1c8KF70=",
+    "url": "https://github.com/nextcloud-releases/impersonate/releases/download/v6.0.0/impersonate-v6.0.0.tar.gz",
+    "version": "6.0.0",
     "description": "By installing the impersonate app of your Nextcloud you enable administrators to impersonate other users on the Nextcloud server. This is especially useful for debugging issues reported by users.\n\nTo impersonate a user an administrator has to simply follow the following four steps:\n\n1. Login as administrator to Nextcloud.\n2. Open users administration interface.\n3. Select the impersonate button on the affected user.\n4. Confirm the impersonation.\n\nThe administrator is then logged-in as the user, to switch back to the regular user account they simply have to press the logout button.\n\n**Note:**\n\n- This app is not compatible with instances that have encryption enabled.\n- While impersonate actions are logged note that actions performed impersonated will be logged as the impersonated user.\n- Impersonating a user is only possible after their first login.\n- You can limit which users/groups can use impersonation in Administration settings > Additional settings.",
     "homepage": "https://github.com/nextcloud/impersonate",
     "licenses": [
@@ -210,9 +170,9 @@
     ]
   },
   "integration_openai": {
-    "hash": "sha256-BWe76pULLPkOVUfGvs6TdQAIBItuqINWdCYQ/QN58qs=",
-    "url": "https://github.com/nextcloud-releases/integration_openai/releases/download/v3.10.2/integration_openai-v3.10.2.tar.gz",
-    "version": "3.10.2",
+    "hash": "sha256-yYC0fUYtb4SkFh4TEiJ3+gSbBlDaFCB9mAZu59W6USc=",
+    "url": "https://github.com/nextcloud-releases/integration_openai/releases/download/v5.0.0/integration_openai-v5.0.0.tar.gz",
+    "version": "5.0.0",
     "description": "⚠️ The smart pickers have been removed from this app\nas they are now included in the [Assistant app](https://apps.nextcloud.com/apps/assistant).\n\nThis app implements:\n\n* Text generation providers: Free prompt, Summarize, Headline, Context Write, Chat, and Reformulate (using any available large language model)\n* A Translation provider (using any available language model)\n* A SpeechToText provider (using Whisper)\n* An image generation provider\n\n⚠️ Context Write, Summarize, Headline and Reformulate have mainly been tested with OpenAI.\nThey might work when connecting to other services, without any guarantee.\n\nInstead of connecting to the OpenAI API for these, you can also connect to a self-hosted [LocalAI](https://localai.io) instance or [Ollama](https://ollama.com/) instance\nor to any service that implements an API similar to the OpenAI one, for example:\n[IONOS AI Model Hub](https://docs.ionos.com/cloud/ai/ai-model-hub), [Plusserver](https://www.plusserver.com/en/ai-platform/) or [MistralAI](https://mistral.ai).\n\n⚠️ This app is mainly tested with OpenAI. We do not guarantee it works perfectly\nwith other services that implement OpenAI-compatible APIs with slight differences.\n\n## Improve AI task pickup speed\n\nTo avoid task processing execution delay, setup at 4 background job workers in the main server (where Nextcloud is installed). The setup process is documented here: https://docs.nextcloud.com/server/latest/admin_manual/ai/overview.html#improve-ai-task-pickup-speed\n\n## Ethical AI Rating\n### Rating for Text generation using ChatGPT via the OpenAI API: 🔴\n\nNegative:\n* The software for training and inference of this model is proprietary, limiting running it locally or training by yourself\n* The trained model is not freely available, so the model can not be run on-premises\n* The training data is not freely available, limiting the ability of external parties to check and correct for bias or optimise the model's performance and CO2 usage.\n\n\n### Rating for Translation using ChatGPT via the OpenAI API: 🔴\n\nNegative:\n* The software for training and inference of this model is proprietary, limiting running it locally or training by yourself\n* The trained model is not freely available, so the model can not be run on-premises\n* The training data is not freely available, limiting the ability of external parties to check and correct for bias or optimise the model's performance and CO2 usage.\n\n### Rating for Image generation using DALL·E via the OpenAI API: 🔴\n\nNegative:\n* The software for training and inferencing of this model is proprietary, limiting running it locally or training by yourself\n* The trained model is not freely available, so the model can not be ran on-premises\n* The training data is not freely available, limiting the ability of external parties to check and correct for bias or optimise the model’s performance and CO2 usage.\n\n\n### Rating for Speech-To-Text using Whisper via the OpenAI API: 🟡\n\nPositive:\n* The software for training and inferencing of this model is open source\n* The trained model is freely available, and thus can run on-premise\n\nNegative:\n* The training data is not freely available, limiting the ability of external parties to check and correct for bias or optimise the model’s performance and CO2 usage.\n\n### Rating for Text-To-Speech via the OpenAI API: 🔴\n\nNegative:\n* The software for training and inferencing of this model is proprietary, limiting running it locally or training by yourself\n* The trained model is not freely available, so the model can not be ran on-premises\n* The training data is not freely available, limiting the ability of external parties to check and correct for bias or optimise the model’s performance and CO2 usage.\n\n### Rating for Text generation via LocalAI: 🟢\n\nPositive:\n* The software for training and inferencing of this model is open source\n* The trained model is freely available, and thus can be ran on-premises\n* The training data is freely available, making it possible to check or correct for bias or optimise the performance and CO2 usage.\n\n\n### Rating for Image generation using Stable Diffusion via LocalAI : 🟡\n\nPositive:\n* The software for training and inferencing of this model is open source\n* The trained model is freely available, and thus can be ran on-premises\n\nNegative:\n* The training data is not freely available, limiting the ability of external parties to check and correct for bias or optimise the model’s performance and CO2 usage.\n\n\n### Rating for Speech-To-Text using Whisper via LocalAI: 🟡\n\nPositive:\n* The software for training and inferencing of this model is open source\n* The trained model is freely available, and thus can be ran on-premises\n\nNegative:\n* The training data is not freely available, limiting the ability of external parties to check and correct for bias or optimise the model’s performance and CO2 usage.\n\nLearn more about the Nextcloud Ethical AI Rating [in our blog](https://nextcloud.com/blog/nextcloud-ethical-ai-rating/).",
     "homepage": "https://github.com/nextcloud/integration_openai",
     "licenses": [
@@ -220,9 +180,9 @@
     ]
   },
   "integration_paperless": {
-    "hash": "sha256-j+X0JyLA2BgtPZcKQ5kqpk6LJevAgE6cbgdOF1IE6eo=",
-    "url": "https://github.com/nextcloud-releases/integration_paperless/releases/download/v1.0.10/integration_paperless-v1.0.10.tar.gz",
-    "version": "1.0.10",
+    "hash": "sha256-KT9X3aCvyR5CIsOK21GwvIRuyUCXMKl5ugdR43GHLqQ=",
+    "url": "https://github.com/nextcloud-releases/integration_paperless/releases/download/v1.0.14/integration_paperless-v1.0.14.tar.gz",
+    "version": "1.0.14",
     "description": "Integration with the [Paperless](https://docs.paperless-ngx.com) Document Management System.\nIt adds a file action menu item that can be used to upload a file from your Nextcloud Files to Paperless.",
     "homepage": "",
     "licenses": [
@@ -230,9 +190,9 @@
     ]
   },
   "mail": {
-    "hash": "sha256-WNrLQWrH36G3EcelwV1QLKLV+fC0UlOgWX6znSnq+IE=",
-    "url": "https://github.com/nextcloud-releases/mail/releases/download/v5.11.5/mail-v5.11.5.tar.gz",
-    "version": "5.11.5",
+    "hash": "sha256-EtH7wjaYlYp6muuWHfKHHWLBQrDBTgsbrSt9FoLbH/s=",
+    "url": "https://github.com/nextcloud-releases/mail/releases/download/v5.12.0/mail-v5.12.0.tar.gz",
+    "version": "5.12.0",
     "description": "**💌 A mail app for Nextcloud**\n\n- **🚀 Integration with other Nextcloud apps!** Currently Contacts, Calendar & Files – more to come.\n- **📥 Multiple mail accounts!** Personal and company account? No problem, and a nice unified inbox. Connect any IMAP account.\n- **🔒 Send & receive encrypted mails!** Using the great [Mailvelope](https://mailvelope.com) browser extension.\n- **🙈 We’re not reinventing the wheel!** Based on the great [Horde](https://www.horde.org) libraries.\n- **📬 Want to host your own mail server?** We do not have to reimplement this as you could set up [Mail-in-a-Box](https://mailinabox.email)!\n\n## Ethical AI Rating\n\n### Priority Inbox\n\nPositive:\n* The software for training and inferencing of this model is open source.\n* The model is created and trained on-premises based on the user's own data.\n* The training data is accessible to the user, making it possible to check or correct for bias or optimise the performance and CO2 usage.\n\n### Thread Summaries (opt-in)\n\n**Rating:** 🟢/🟡/🟠/🔴\n\nThe rating depends on the installed text processing backend. See [the rating overview](https://docs.nextcloud.com/server/latest/admin_manual/ai/index.html) for details.\n\nLearn more about the Nextcloud Ethical AI Rating [in our blog](https://nextcloud.com/blog/nextcloud-ethical-ai-rating/).",
     "homepage": "https://github.com/nextcloud/mail#readme",
     "licenses": [
@@ -259,16 +219,6 @@
       "agpl"
     ]
   },
-  "news": {
-    "hash": "sha256-qurdLAGKotjlhEMJ1cdUroukcGfwb4eg+Cr+WvJX3/g=",
-    "url": "https://github.com/nextcloud/news/releases/download/28.7.0/news.tar.gz",
-    "version": "28.7.0",
-    "description": "📰 A RSS/Atom Feed reader App for Nextcloud\n\n- 📲 Synchronize your feeds with multiple mobile or desktop [clients](https://nextcloud.github.io/news/clients/)\n- 🔄 Automatic updates of your news feeds\n- 🆓 Free and open source under AGPLv3, no ads or premium functions\n\n**System Cron is currently required for this app to work**\n\nRequirements can be found [here](https://nextcloud.github.io/news/install/#dependencies)\n\nThe Changelog is available [here](https://github.com/nextcloud/news/blob/master/CHANGELOG.md)\n\nCreate a [bug report](https://github.com/nextcloud/news/issues/new/choose)\n\nCreate a [feature request](https://github.com/nextcloud/news/discussions/new)\n\nReport a [feed issue](https://github.com/nextcloud/news/discussions/new)",
-    "homepage": "https://github.com/nextcloud/news",
-    "licenses": [
-      "agpl"
-    ]
-  },
   "nextpod": {
     "hash": "sha256-wgW0X2j2Cv5rp/OFa0xsuiYuE1TJr/+ooED48JcsAvo=",
     "url": "https://github.com/pbek/nextcloud-nextpod/releases/download/v0.7.12/nextpod-nc.tar.gz",
@@ -280,19 +230,19 @@
     ]
   },
   "notes": {
-    "hash": "sha256-G/npepK65ZAaF8k2ZsSsDzbd/mjGnKpdI2ixi+avf9w=",
-    "url": "https://github.com/nextcloud-releases/notes/releases/download/v5.0.2/notes-v5.0.2.tar.gz",
-    "version": "5.0.2",
+    "hash": "sha256-A8ST9FyxelAFoNzpHE5ZspTvkdRSDD70SiHV5h5BlSY=",
+    "url": "https://github.com/nextcloud-releases/notes/releases/download/v6.1.0/notes-v6.1.0.tar.gz",
+    "version": "6.1.0",
     "description": "The Notes app is a distraction free notes taking app for [Nextcloud](https://www.nextcloud.com/). It provides categories for better organization and supports formatting using [Markdown](https://en.wikipedia.org/wiki/Markdown) syntax. Notes are saved as files in your Nextcloud, so you can view and edit them with every Nextcloud client. Furthermore, a separate [REST API](https://github.com/nextcloud/notes/blob/master/docs/api/README.md) allows for an easy integration into apps ([Android](https://github.com/nextcloud/notes-android), [iOS](https://github.com/nextcloud/notes-ios), as well as [3rd-party apps](https://github.com/nextcloud/notes/wiki#3rd-party-clients) which allow convenient access to your Nextcloud notes). Further features include marking notes as favorites.",
     "homepage": "https://github.com/nextcloud/notes",
     "licenses": [
-      "agpl"
+      "AGPL-3.0-or-later"
     ]
   },
   "oidc": {
-    "hash": "sha256-3EjIMQYI4oy4z9Iug3beCsuIK3h2eloKGB+UVdjeQiA=",
-    "url": "https://github.com/H2CK/oidc/releases/download/2.2.2/oidc-2.2.2.tar.gz",
-    "version": "2.2.2",
+    "hash": "sha256-s8ghs4gHsP/ljG3Rkcw7fqObhaenv/7Tla/8qg/CtZo=",
+    "url": "https://github.com/H2CK/oidc/releases/download/2.3.0/oidc-2.3.0.tar.gz",
+    "version": "2.3.0",
     "description": "Nextcloud as OpenID Connect Identity Provider\n\nWith this app you can use Nextcloud as OpenID Connect Identity Provider. If other services\nare configured correctly, you are able to access those services with your Nextcloud login.\n\nFull documentation can be found at:\n\n- [User Documentation](https://github.com/H2CK/oidc/wiki#user-documentation)\n- [Developer Documentation](https://github.com/H2CK/oidc/wiki#developer-documentation)",
     "homepage": "https://github.com/H2CK/oidc",
     "licenses": [
@@ -300,29 +250,19 @@
     ]
   },
   "oidc_login": {
-    "hash": "sha256-ENVhD9WxL6t2O7PFn8EZUBGl1vy/MQmRvAyftQRUH8c=",
-    "url": "https://github.com/pulsejet/nextcloud-oidc-login/releases/download/v3.3.4/oidc_login.tar.gz",
-    "version": "3.3.4",
+    "hash": "sha256-2E42FuhlJZwUKvbPQLbwCSIorXi+2EP4XGV19FlCiEs=",
+    "url": "https://github.com/pulsejet/nextcloud-oidc-login/releases/download/v3.4.0/oidc_login.tar.gz",
+    "version": "3.4.0",
     "description": "# OpenID Connect Login\n\nProvides user creation and login via one single OpenID Connect provider. Even though this is a fork of [nextcloud-social-login](https://github.com/zorn-v/nextcloud-social-login), it fundamentally differs in two ways - aims for simplistic, single provider login (and hence is very minimalistic), and it supports having LDAP as the primary user backend. This way, you can use OpenID Connect to login to Nextcloud while maintaining an LDAP backend with attributes with the LDAP plugin.\n\n### Features\n\n- Automatic [Identity provider endpoints discovery](https://openid.net/specs/openid-connect-discovery-1_0.html)\n- User creation at first login\n- User profile update at login (name, email, avatar, groups etc.)\n- Group creation\n- Automatic redirection from the nextcloud login page to the Identity Provider login page\n- WebDAV endpoints `Bearer` and `Basic` authentication\n- Optional removal of special characters in UID\n- Mapping of multiple names to a single display name\n- Mapping for birthdate",
     "homepage": "https://github.com/pulsejet/nextcloud-single-openid-connect",
     "licenses": [
       "agpl"
     ]
   },
-  "onlyoffice": {
-    "hash": "sha256-sMgBVVAv6n6TlrvcndzRLc1xPJ6eA4hYBqDpiDabW1k=",
-    "url": "https://github.com/ONLYOFFICE/onlyoffice-nextcloud/releases/download/v9.14.2/onlyoffice.tar.gz",
-    "version": "9.14.2",
-    "description": "The ONLYOFFICE app for Nextcloud brings powerful document editing and collaboration tools directly to your Nextcloud environment. With this integration, you can seamlessly create, edit, and co-author text documents, spreadsheets, presentations, and PDFs, as well as build and fill out PDF forms.\n\nCollaborate with your team in real time, make use of Track Changes, version history, comments, integrated chat, and more. Work together on files with federated cloud sharing. Flexible access permissions allow you to control who can view, edit, or comment, ensuring secure role-based collaboration tailored to your needs. Documents can also be protected with watermarks, password settings, and encryption for added security.\n\nThe app offers support for over 50 file formats, including DOCX, XLSX, PPTX, PDF, RTF, TXT, CSV, ODT, ODS, ODP, EPUB, FB2, HTML, HWP, HWPX, Pages, Numbers, Keynote, etc. Seamless desktop and mobile app integration means you'll have access to your Nextcloud files wherever you go.\n\nFurthermore, you can seamlessly connect any AI assistant, including local ones, directly to the editors to work faster and more efficient. This allows you to leverage various AI models for tasks like chatbot interactions, translations, OCR, and more.\n\nWhether you’re working with internal teams or external collaborators, the ONLYOFFICE app for Nextcloud enhances productivity, simplifies workflows, and ensures your files remain secure.",
-    "homepage": "https://www.onlyoffice.com",
-    "licenses": [
-      "agpl"
-    ]
-  },
   "pantry": {
-    "hash": "sha256-enZ1i/BVnsx/d++Hx3DU3kzljJW9zr/rblz7/u+GrNQ=",
-    "url": "https://github.com/chenasraf/nextcloud-pantry/releases/download/v0.31.1/pantry-v0.31.1.tar.gz",
-    "version": "0.31.1",
+    "hash": "sha256-jJKOGlbj6fzDpLMFH6JT3ePwddcC4tQMFlDfipb3iRk=",
+    "url": "https://github.com/chenasraf/nextcloud-pantry/releases/download/v0.32.0/pantry-v0.32.0.tar.gz",
+    "version": "0.32.0",
     "description": "Pantry helps households stay organized in Nextcloud.\n\n- **Houses** group members and their shared data. A person can belong to multiple houses and switch between them freely.\n- **Checklists** support recurring items (e.g. milk every week) that automatically reappear when due. Share lists with the whole household so everyone knows what to pick up.\n- **Shopping mode** turns your lists into a store-by-store trip — pick the lists and the route, check items off as you walk, see which housemates are out shopping, and finish with a priced review that lands in your shopping history.\n- **Barcode scanning** prefills an item from a product's EAN or UPC. Scan with the camera or type the code in, and Pantry looks up the name, category and photo for you to review.\n- **Custom fields** attach your own information to checklist items — an expiry date, an aisle number, a size, a yes/no flag. Define a field once for the house or a single list; date fields can send a reminder before they come due.\n- **Photo boards** let you keep shared reference photos organized in folders — the right brand of dog food, a favorite recipe card, a product label, and so on.\n- **Notes wall** gives the household a lightweight shared space for reminders, pinned messages, and quick notes with customizable colors.\n- **Notifications** keep everyone in the loop when photos are uploaded or notes are added or edited.\n\nAll data is scoped to a house; members only see the houses they belong to.\n\nPantry also has companion apps for mobile, watch and desktop that let you manage your lists, photos and notes on the go and keep everything in sync with your Nextcloud instance.\n\n**Companion apps:** Android ([Google Play](https://play.google.com/store/apps/details?id=dev.casraf.pantry), [F-Droid](https://f-droid.org/en/packages/dev.casraf.pantry/)) | iOS/macOS ([App Store](https://apps.apple.com/us/app/pantry-for-nextcloud/id6762161619)) | Wear OS ([Google Play](https://play.google.com/store/apps/details?id=dev.casraf.pantry)) | [Windows](https://pantry.casraf.dev/docs/getting-started/apps#desktop) | [Linux](https://pantry.casraf.dev/docs/getting-started/apps#desktop)\n\n**Website:** [pantry.casraf.dev](https://pantry.casraf.dev) | **Documentation:** [pantry.casraf.dev/docs](https://pantry.casraf.dev/docs)",
     "homepage": "https://pantry.casraf.dev",
     "licenses": [
@@ -330,35 +270,15 @@
     ]
   },
   "phonetrack": {
-    "hash": "sha256-KHrJ2a2YU5hJHc+BOGdnaWdkWHHZO2C9tgUTgWSKvJ0=",
-    "url": "https://github.com/julien-nc/phonetrack/releases/download/v1.3.3/phonetrack-1.3.3.tar.gz",
-    "version": "1.3.3",
+    "hash": "sha256-aKny+yFvDxI/dg1xXI0lkKk7ijEOwtkWUfDuGaiYbyg=",
+    "url": "https://github.com/julien-nc/phonetrack/releases/download/v1.3.5/phonetrack-1.3.5.tar.gz",
+    "version": "1.3.5",
     "description": "# PhoneTrack Nextcloud application\n\n📱 PhoneTrack is a Nextcloud application to track and store mobile device's locations.\n\n🗺 It receives information from mobile phone's logging apps and displays it dynamically on a map.\n\n🌍 Help us to translate this app on [PhoneTrack Crowdin project](https://crowdin.com/project/phonetrack).\n\n⚒ Check out other ways to help in the [contribution guidelines](https://gitlab.com/eneiluj/phonetrack-oc/blob/master/CONTRIBUTING.md).\n\nHow to use PhoneTrack :\n\n- Create a tracking session.\n- Give the logging link\\* to the mobile devices. Choose the [logging method](https://github.com/julien-nc/phonetrack/blob/main/doc/user.md#logging-methods) you prefer.\n- Watch the session's devices location in real time (or not) in PhoneTrack or share it with public pages.\n\n(\\*) Don't forget to set the device name in the link (rather than in the logging app settings). Replace \"yourname\" with the desired device name.\nSetting the device name in logging app settings only works with Owntracks, Traccar and OpenGTS.\n\nOn PhoneTrack main page, while watching a session, you can :\n\n- 📍 Display location history\n- ⛛ Filter points\n- ✎ Manually edit/add/delete points\n- ✎ Edit devices (rename, change colour/shape, move to another session)\n- ⛶ Define geofencing zones for devices\n- ⚇ Define proximity alerts for device pairs\n- 🖧 Share a session to other Nextcloud users or with a public link (read-only)\n- 🔗 Generate public share links with optional restrictions (filters, device name, last positions only, geofencing simplification)\n- 🖫 Import/export a session in GPX format (one file with one track per device or one file per device)\n- 🗠 Display sessions statistics\n- 🔒 [Reserve a device name](https://github.com/julien-nc/phonetrack/blob/main/doc/user.md#device-name-reservation) to make sure only authorized user can log with this name\n- 🗓 Toggle session auto export and auto purge (daily/weekly/monthly)\n- ◔ Choose what to do when point number quota is reached (block logging or delete oldest point)\n\nPublic page and public filtered page work like main page except there is only one session displayed, everything is read-only and there is no need to be logged in.\n\nThis app is under development.\n\n## Install\n\nSee the [AdminDoc](https://gitlab.com/eneiluj/phonetrack-oc/wikis/admindoc) for installation details.\n\nCheck [CHANGELOG](https://gitlab.com/eneiluj/phonetrack-oc/blob/master/CHANGELOG.md#change-log) file to see what's new and what's coming in next release.\n\nCheck [AUTHORS](https://gitlab.com/eneiluj/phonetrack-oc/blob/master/AUTHORS.md#authors) file to see complete list of authors.\n\n## Known issues\n\n- PhoneTrack **now works** with Nextcloud group restriction activated. See [admindoc](https://github.com/julien-nc/phonetrack/blob/main/doc/admin.md#issue-with-phonetrack-restricted-to-some-groups-in-nextcloud).\n\nAny feedback will be appreciated.\n\n\n\n## Donation\n\nI develop this app during my free time.\n\n* [Donate with Paypal](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=66PALMY8SF5JE) (you don't need a paypal account)\n* [Donate with Liberapay : ![Donate using Liberapay](https://liberapay.com/assets/widgets/donate.svg)](https://liberapay.com/eneiluj/donate)",
     "homepage": "https://github.com/julien-nc/phonetrack",
     "licenses": [
       "agpl"
     ]
   },
-  "polls": {
-    "hash": "sha256-ufV7hjBCAI0aqXT7b3K78RSnus2v7qqg3EpG4i+THTY=",
-    "url": "https://github.com/nextcloud-releases/polls/releases/download/v9.2.1/polls-v9.2.1.tar.gz",
-    "version": "9.2.1",
-    "description": "A polls app, similar to Doodle/DuD-Poll with the possibility to restrict access (members, certain groups/users, hidden and public).",
-    "homepage": "https://github.com/nextcloud/polls",
-    "licenses": [
-      "agpl"
-    ]
-  },
-  "previewgenerator": {
-    "hash": "sha256-ip4gqIP2ciT45zlHr7R22YCb15kawM2S1/r87b5lyoc=",
-    "url": "https://github.com/nextcloud-releases/previewgenerator/releases/download/v5.14.0/previewgenerator-v5.14.0.tar.gz",
-    "version": "5.14.0",
-    "description": "The Preview Generator app allows admins to pre-generate previews. The app listens to edit events and stores this information. Once a cron job is triggered it will generate start preview generation. This means that you can better utilize your system by pre-generating previews when your system is normally idle and thus putting less load on your machine when the requests are actually served.\n\nThe app does not replace on demand preview generation so if a preview is requested before it is pre-generated it will still be shown.\nThe first time you install this app, before using a cron job, you properly want to generate all previews via:\n**occ preview:generate-all -vvv**\n\nThe preview queue will be processed automatically by a background job if the system cron background job mode is configured in Nextcloud. Additionally, you may run **occ preview:pre-generate -vvv** to a process the queue of pending previews immediately.",
-    "homepage": "https://github.com/nextcloud/previewgenerator",
-    "licenses": [
-      "agpl"
-    ]
-  },
   "qownnotesapi": {
     "hash": "sha256-6J2o1EBZq1XOBsKAQCBFArsXg07Bvt5h+uL1zp9ddlc=",
     "url": "https://github.com/pbek/qownnotesapi/releases/download/v26.8.0/qownnotesapi-nc.tar.gz",
@@ -369,24 +289,14 @@
       "agpl"
     ]
   },
-  "quota_warning": {
-    "hash": "sha256-bX9f6Zu53lZfG8zpfEwRxvIFVxARs4y6NLNNAK3DhUI=",
-    "url": "https://github.com/nextcloud-releases/quota_warning/releases/download/v1.24.0/quota_warning-v1.24.0.tar.gz",
-    "version": "1.24.0",
-    "description": "This app sends notifications to users when they reached 85, 90 and 95% of their quota (checked once a day).\nIn addition an email can be sent to the users. The three percentages can be changed in the admin settings.\nIt is also possible to have a link in the email and the notification for upsell options.",
-    "homepage": "https://github.com/nextcloud/quota_warning",
-    "licenses": [
-      "agpl"
-    ]
-  },
   "registration": {
-    "hash": "sha256-mXsG5SfMrOp/G/4w9dbcwk41bLRUyrzWGTkoNeE0E88=",
-    "url": "https://github.com/nextcloud-releases/registration/releases/download/v3.0.0/registration-v3.0.0.tar.gz",
-    "version": "3.0.0",
+    "hash": "sha256-YDSq95WVm6WYwHNcqDWz+QwrvlhbqyCuf6RkD+mcAes=",
+    "url": "https://github.com/nextcloud-releases/registration/releases/download/v3.1.0/registration-v3.1.0.tar.gz",
+    "version": "3.1.0",
     "description": "User registration\n\nThis app allows users to register a new account.\n\n# Features\n\n- Add users to a given group\n- Allow-list with email domains (including wildcard) to register with\n- Administrator will be notified via email for new user creation or require approval\n- Supports Nextcloud's Client Login Flow v1 and v2 - allowing registration in the mobile Apps and Desktop clients\n\n# Web form registration flow\n\n1. User enters their email address\n2. Verification link is sent to the email address\n3. User clicks on the verification link\n4. User is lead to a form where they can choose their username and password\n5. New account is created and is logged in automatically",
     "homepage": "https://github.com/nextcloud/registration",
     "licenses": [
-      "agpl"
+      "AGPL-3.0-or-later"
     ]
   },
   "repod": {
@@ -400,9 +310,9 @@
     ]
   },
   "richdocuments": {
-    "hash": "sha256-bDAmicmIEIxlPm4LHaiAOXQ10yl2c/URUz3+++TYj1g=",
-    "url": "https://github.com/nextcloud-releases/richdocuments/releases/download/v9.2.2/richdocuments-v9.2.2.tar.gz",
-    "version": "9.2.2",
+    "hash": "sha256-OuP6U21EDgbzZKtmEzHcfWeNFCbM+PPRH/xwnt57hD4=",
+    "url": "https://github.com/nextcloud-releases/richdocuments/releases/download/v12.0.0/richdocuments-v12.0.0.tar.gz",
+    "version": "12.0.0",
     "description": "This application can connect to a Collabora Online (or other) server (WOPI-like Client). Nextcloud is the WOPI Host. Please read the documentation to learn more about that.\n\nYou can also edit your documents off-line with the Collabora Office app from the **[Android](https://play.google.com/store/apps/details?id=com.collabora.libreoffice)** and **[iOS](https://apps.apple.com/us/app/collabora-office/id1440482071)** store.",
     "homepage": "https://collaboraoffice.com/",
     "licenses": [
@@ -420,23 +330,23 @@
     ]
   },
   "spreed": {
-    "hash": "sha256-DE/O3pFaPvtrV3wEEk80H+IwYIQ2SAaTGKvYQ+Y0vUk=",
-    "url": "https://github.com/nextcloud-releases/spreed/releases/download/v22.0.18/spreed-v22.0.18.tar.gz",
-    "version": "22.0.18",
+    "hash": "sha256-evrABcdya5miGVFR6wSlylDCmT2j59QW124A8JTOe0U=",
+    "url": "https://github.com/nextcloud-releases/spreed/releases/download/v25.0.0/spreed-v25.0.0.tar.gz",
+    "version": "25.0.0",
     "description": "Chat, video & audio-conferencing using WebRTC\n\n* 💬 **Chat** Nextcloud Talk comes with a simple text chat, allowing you to share or upload files from your Nextcloud Files app or local device and mention other participants.\n* 👥 **Private, group, public and password protected calls!** Invite someone, a whole group or send a public link to invite to a call.\n* 🌐 **Federated chats** Chat with other Nextcloud users on their servers\n* 💻 **Screen sharing!** Share your screen with the participants of your call.\n* 🚀 **Integration with other Nextcloud apps** like Files, Calendar, User status, Dashboard, Flow, Maps, Smart picker, Contacts, Deck, and many more.\n* 🌉 **Sync with other chat solutions** With [Matterbridge](https://github.com/42wim/matterbridge/) being integrated in Talk, you can easily sync a lot of other chat solutions to Nextcloud Talk and vice-versa.",
     "homepage": "https://github.com/nextcloud/spreed",
     "licenses": [
-      "agpl"
+      "AGPL-3.0-or-later"
     ]
   },
   "tables": {
-    "hash": "sha256-ao6ClLhGfJw2pyTV1vbWK5uXsoW43ikXEoEpWN+htyc=",
-    "url": "https://github.com/nextcloud-releases/tables/releases/download/v1.0.10/tables-v1.0.10.tar.gz",
-    "version": "1.0.10",
+    "hash": "sha256-E12Ax2B74LEfiwRTF1/bkFYBH5iksvcxre5ZqzC1T8M=",
+    "url": "https://github.com/nextcloud-releases/tables/releases/download/v2.3.1/tables-v2.3.1.tar.gz",
+    "version": "2.3.1",
     "description": "Manage data the way you need it.\n\nWith this app you are able to create your own tables with individual columns. You can start with a template or from scratch and add your wanted columns.\nYou can choose from the following column types:\n- Text line or rich text\n- Link to urls or other nextcloud resources\n- Numbers\n- Progress bar\n- Stars rating\n- Yes/No tick\n- Date and/or time\n- (Multi) selection\n- Users, groups and teams\n\nShare your tables and views with users and groups within your cloud.\n\nHave a good time and manage whatever you want.",
     "homepage": "https://github.com/nextcloud/tables",
     "licenses": [
-      "agpl"
+      "AGPL-3.0-or-later"
     ]
   },
   "tasks": {
@@ -459,16 +369,6 @@
       "agpl"
     ]
   },
-  "twofactor_admin": {
-    "hash": "sha256-IkHzIqRBhG6zr+8y5ifrRfsKl9TyMDx7G1JGogbQrDM=",
-    "url": "https://github.com/nextcloud-releases/twofactor_admin/releases/download/v4.12.0/twofactor_admin-v4.12.0.tar.gz",
-    "version": "4.12.0",
-    "description": "This two-factor auth (2FA) provider for Nextcloud allows admins to generate a one-time\n\t\tcode for users to log into a 2FA protected account. This is helpful in situations where\n\t\tusers have lost access to their other 2FA methods or mandatory 2FA without any previously\n\t\tenabled 2FA provider.",
-    "homepage": "",
-    "licenses": [
-      "agpl"
-    ]
-  },
   "twofactor_webauthn": {
     "hash": "sha256-fqNB9gtJAuW4LjQhZ7ESN6ZMyba/lYRHwNMOtVf0avg=",
     "url": "https://github.com/nextcloud-releases/twofactor_webauthn/releases/download/v2.7.1/twofactor_webauthn-v2.7.1.tar.gz",
@@ -480,25 +380,15 @@
     ]
   },
   "unroundedcorners": {
-    "hash": "sha256-0+fOJnPsuengy8TPzTKizDnDXTlZStalFDOv+dFlRgc=",
-    "url": "https://github.com/OliverParoczai/nextcloud-unroundedcorners/releases/download/v1.1.5/unroundedcorners-v1.1.5.tar.gz",
-    "version": "1.1.5",
+    "hash": "sha256-RCnXfnl2dJ0NpcNJ+0+jcSsp/h4hHemPg3fkjkFoGl0=",
+    "url": "https://github.com/OliverParoczai/nextcloud-unroundedcorners/releases/download/v1.1.6/unroundedcorners-v1.1.6.tar.gz",
+    "version": "1.1.6",
     "description": "# Unrounded Corners\nA Nextcloud app that restores the corners of buttons and widgets to their original looks by unrounding them.",
     "homepage": "https://github.com/OliverParoczai/nextcloud-unroundedcorners",
     "licenses": [
       "agpl"
     ]
   },
-  "uppush": {
-    "hash": "sha256-SRRFA1nQk0OsCm+FEaEN32bDTNCbcKyM0ZOhy5yXUEc=",
-    "url": "https://codeberg.org/NextPush/uppush/archive/2.5.0.tar.gz",
-    "version": "2.5.0",
-    "description": "Once the mobile phone is connected with NextPush, push notifications can be forwarded to applications implementing UnifiedPush.\n\nMore information about UnifiedPush at https://unifiedpush.org",
-    "homepage": "",
-    "licenses": [
-      "agpl"
-    ]
-  },
   "user_oidc": {
     "hash": "sha256-iHkgUEwvDg0FWr1mIl7ntm11b1D+Wjc5d51rLOEIYz8=",
     "url": "https://github.com/nextcloud-releases/user_oidc/releases/download/v8.11.0/user_oidc-v8.11.0.tar.gz",
@@ -520,9 +410,9 @@
     ]
   },
   "whiteboard": {
-    "hash": "sha256-GV5dCxn7t+F2vSyJur/VUUrvAiSv5dDvI5ME6EBGof4=",
-    "url": "https://github.com/nextcloud-releases/whiteboard/releases/download/v1.5.9/whiteboard-v1.5.9.tar.gz",
-    "version": "1.5.9",
+    "hash": "sha256-OCRziJb63ffrnc5HWcKz9/ipW4jBpA9ba7343OeiUqs=",
+    "url": "https://github.com/nextcloud-releases/whiteboard/releases/download/v2.0.0/whiteboard-v2.0.0.tar.gz",
+    "version": "2.0.0",
     "description": "The official whiteboard app for Nextcloud. It allows users to create and share whiteboards with other users and collaborate in real-time.\n\n**Whiteboard requires a separate collaboration server to work.** Please see the [documentation](https://github.com/nextcloud/whiteboard?tab=readme-ov-file#backend) on how to install it.\n\n- 🎨 Drawing shapes, writing text, connecting elements\n- 📝 Real-time collaboration\n- 🖼️ Add images with drag and drop\n- 📊 Easily add mermaid diagrams\n- ✨ Use the Smart Picker to embed other elements from Nextcloud\n- 📦 Image export\n- 💪 Strong foundation: We use Excalidraw as our base library",
     "homepage": "https://github.com/nextcloud/whiteboard",
     "licenses": [
diff --git a/pkgs/servers/sql/postgresql/ext/timescaledb.nix b/pkgs/servers/sql/postgresql/ext/timescaledb.nix
index 4880effa40a9..7b33a4b6aaa3 100644
--- a/pkgs/servers/sql/postgresql/ext/timescaledb.nix
+++ b/pkgs/servers/sql/postgresql/ext/timescaledb.nix
@@ -13,13 +13,13 @@
 
 postgresqlBuildExtension (finalAttrs: {
   pname = "timescaledb${lib.optionalString (!enableUnfree) "-apache"}";
-  version = "2.29.2";
+  version = "2.30.1";
 
   src = fetchFromGitHub {
     owner = "timescale";
     repo = "timescaledb";
     tag = finalAttrs.version;
-    hash = "sha256-pR68kA795hFX4aEC7UXyruigDNnudQVekDg+eIpdzJU=";
+    hash = "sha256-VkAkOpngiJ5Wzfk2goTfvXim66HID05UKkWmv3wryLA=";
   };
 
   nativeBuildInputs = [ cmake ];
@@ -105,7 +105,7 @@ postgresqlBuildExtension (finalAttrs: {
       lib.versionOlder postgresql.version "16"
       ||
         # Check after next package update.
-        lib.warnIf (finalAttrs.version != "2.29.2") "Is postgresql19Packages.timescaledb still broken?" (
+        lib.warnIf (finalAttrs.version != "2.30.1") "Is postgresql19Packages.timescaledb still broken?" (
           lib.versionAtLeast postgresql.version "19"
         );
   };
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index d65b750e049c..0eda11db63b8 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -1816,18 +1816,18 @@ mapAliases {
   newlibCross = throw "'newlibCross' has been renamed to/replaced by 'newlib'"; # Converted to throw 2025-10-27
   newt-go = fosrl-newt; # Added 2025-06-24
   next-ls = throw "'next-ls' has been removed because it was deprecated and archived upstream. Consider using 'beamPackages.expert' instead"; # Added 2026-02-24
-  nextcloud31 = throw "
-    Nextcloud v31 has been removed from `nixpkgs` as the support for is dropped
-    by upstream in 2025-09. Please upgrade to at least Nextcloud v32 by declaring
+  nextcloud32 = throw "
+    Nextcloud v32 has been removed from `nixpkgs` as the support for is dropped
+    by upstream in 2026-09. Please upgrade to at least Nextcloud v33 by declaring
 
-        services.nextcloud.package = pkgs.nextcloud32;
+        services.nextcloud.package = pkgs.nextcloud33;
 
     in your NixOS config.
 
-    WARNING: if you were on Nextcloud 30 you have to upgrade to Nextcloud 31
-    first on 25.11 because Nextcloud doesn't support upgrades across multiple major versions!
-  "; # Added 2026-02-20
-  nextcloud31Packages = throw "Nextcloud 31 is EOL!"; # Added 2026-02-20
+    WARNING: if you were on Nextcloud 31 you have to upgrade to Nextcloud 32
+    first on 26.05 because Nextcloud doesn't support upgrades across multiple major versions!
+  "; # Added 2026-09-19
+  nextcloud32Packages = throw "Nextcloud 32 is EOL!"; # Added 2026-09-19
   nfstrace = throw "nfstrace has been removed, as it was broken"; # Added 2025-08-25
   nginxQuic = throw "'nginxQuic' has been removed. QUIC support is now available in the default nginx builds.";
   ngrid = throw "'ngrid' has been removed as it has been unmaintained upstream and broken"; # Added 2025-11-15
@@ -2261,6 +2261,7 @@ mapAliases {
   rote = throw "rote has been removed due to lack of upstream maintenance"; # Added 2025-09-10
   rott = throw "'rott' has been dropped in favor of its maintained fork 'taradino'"; # Added 2026-01-25
   rott-shareware = throw "'rott-shareware' has been dropped in favor of its maintained fork 'taradino-shareware'"; # Added 2026-01-25
+  rox-filer = throw "'rox-filer' has been dropped due to lack of upstream maintenance"; # Added 2026-09-04
   rpPPPoE = warnAlias "'rpPPPoE' has been renamed to 'rp-pppoe'" rp-pppoe; # Added 2026-02-12
   rquickshare-legacy = throw "The legacy version depends on insecure package libsoup2, please use the main version"; # Added 2025-10-09
   rr-unstable = throw "'rr-unstable' has been renamed to/replaced by 'rr'"; # Converted to throw 2025-10-27
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 5a15b0d25fd7..3090ebfb60b5 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -2517,14 +2517,14 @@ with pkgs;
   libnma-gtk4 = libnma.override { withGtk4 = true; };
 
   inherit (callPackages ../servers/nextcloud { })
-    nextcloud32
     nextcloud33
     nextcloud34
+    nextcloud35
     ;
 
-  nextcloud32Packages = callPackage ../servers/nextcloud/packages { ncVersion = "32"; };
   nextcloud33Packages = callPackage ../servers/nextcloud/packages { ncVersion = "33"; };
   nextcloud34Packages = callPackage ../servers/nextcloud/packages { ncVersion = "34"; };
+  nextcloud35Packages = callPackage ../servers/nextcloud/packages { ncVersion = "35"; };
 
   nextcloud-notify_push = callPackage ../servers/nextcloud/notify_push.nix { };
 
@@ -2986,10 +2986,6 @@ with pkgs;
   # https://github.com/NixOS/nixpkgs/issues/227327
   wafHook = waf.hook;
 
-  wyrd = callPackage ../tools/misc/wyrd {
-    ocamlPackages = ocaml-ng.ocamlPackages_4_14;
-  };
-
   # A minimal xar is needed to break an infinite recursion between macfuse-stubs and xar.
   # It is also needed to reduce the amount of unnecessary stuff in the Darwin bootstrap.
   xarMinimal = callPackage ../by-name/xa/xar/package.nix { e2fsprogs = null; };
@@ -8752,10 +8748,6 @@ with pkgs;
 
   kubectl-convert = kubectl.convert;
 
-  kubectl-view-allocations =
-    callPackage ../applications/networking/cluster/kubectl-view-allocations
-      { };
-
   linkerd = callPackage ../applications/networking/cluster/linkerd { };
   linkerd_edge = callPackage ../applications/networking/cluster/linkerd/edge.nix { };
   linkerd_stable = linkerd;