Merge staging-next into staging

2026-09-28 19:00:46 +00:00 · 2025-02-24 18:05:31 +00:00
parent b8de2d206a ea0c8cf7a3
commit a1e04459e2
80 changed files with 4878 additions and 1272 deletions
--- a/doc/release-notes/rl-2505.section.md
+++ b/doc/release-notes/rl-2505.section.md
@@ -59,3 +59,5 @@
    - `lib.types.listOf`

 - Plasma 5 and Qt 5 based versions of associated software are deprecated in NixOS 25.05, and will be removed in NixOS 25.11. Users are encouraged to upgrade to Plasma 6.
+
+- `rustPlatform.buildRustPackage` stops handling the deprecated argument `cargoSha256`. Out-of-tree packages that haven't migrated from `cargoSha256` to `cargoHash` now receive errors.
--- a/nixos/modules/programs/xonsh.nix
+++ b/nixos/modules/programs/xonsh.nix
@@ -23,28 +23,30 @@ in
      };

      package = lib.mkPackageOption pkgs "xonsh" {
-        example = "pkgs.xonsh.override { extraPackages = ps: [ ps.requests ]; }";
+        extraDescription = ''
+          The argument `extraPackages` of this package will be overridden by
+          the option `programs.xonsh.extraPackages`.
+        '';
      };

      config = lib.mkOption {
        default = "";
-        description = "Control file to customize your shell behavior.";
+        description = ''
+          Extra text added to the end of `/etc/xonsh/xonshrc`,
+          the system-wide control file for xonsh.
+        '';
        type = lib.types.lines;
      };

      extraPackages = lib.mkOption {
        default = (ps: [ ]);
+        defaultText = lib.literalExpression "ps: [ ]";
+        example = lib.literalExpression ''
+          ps: with ps; [ numpy xonsh.xontribs.xontrib-vox ]
+        '';
        type = with lib.types; coercedTo (listOf lib.types.package) (v: (_: v)) (functionTo (listOf lib.types.package));
        description = ''
-          Add the specified extra packages to the xonsh package.
-          Preferred over using `programs.xonsh.package` as it composes with `programs.xonsh.xontribs`.
-
-          Take care in using this option along with manually defining the package
-          option above, as the two can result in conflicting sets of build dependencies.
-          This option assumes that the package option has an overridable argument
-          called `extraPackages`, so if you override the package option but also
-          intend to use this option, be sure that your resulting package still honors
-          the necessary option.
+          Xontribs and extra Python packages to be available in xonsh.
        '';
      };
    };
--- a/nixos/modules/services/networking/avahi-daemon.nix
+++ b/nixos/modules/services/networking/avahi-daemon.nix
@@ -91,7 +91,8 @@ in

    ipv6 = lib.mkOption {
      type = lib.types.bool;
-      default = true;
+      default = config.networking.enableIPv6;
+      defaultText = lib.literalExpression "config.networking.enableIPv6";
      description = "Whether to use IPv6.";
    };

--- a/nixos/modules/services/networking/flannel.nix
+++ b/nixos/modules/services/networking/flannel.nix
@@ -7,13 +7,15 @@
 let
  cfg = config.services.flannel;

-  networkConfig = lib.filterAttrs (n: v: v != null) {
-    Network = cfg.network;
-    SubnetLen = cfg.subnetLen;
-    SubnetMin = cfg.subnetMin;
-    SubnetMax = cfg.subnetMax;
-    Backend = cfg.backend;
-  };
+  networkConfig =
+    (lib.filterAttrs (n: v: v != null) {
+      Network = cfg.network;
+      SubnetLen = cfg.subnetLen;
+      SubnetMin = cfg.subnetMin;
+      SubnetMax = cfg.subnetMax;
+      Backend = cfg.backend;
+    })
+    // cfg.extraNetworkConfig;
 in
 {
  options.services.flannel = {
@@ -139,6 +141,15 @@ in
        Type = "vxlan";
      };
    };
+
+    extraNetworkConfig = lib.mkOption {
+      description = "Extra configuration to be added to the net-conf.json/etcd-backed network configuration.";
+      type = (pkgs.formats.json { }).type;
+      default = { };
+      example = {
+        EnableIPv6 = true;
+      };
+    };
  };

  config = lib.mkIf cfg.enable {
@@ -184,6 +195,8 @@ in
      };
    };

+    boot.kernelModules = [ "br_netfilter" ];
+
    services.etcd.enable = lib.mkDefault (
      cfg.storageBackend == "etcd" && cfg.etcd.endpoints == [ "http://127.0.0.1:2379" ]
    );
--- a/nixos/modules/tasks/filesystems.nix
+++ b/nixos/modules/tasks/filesystems.nix
@@ -400,7 +400,7 @@ in
        # Filesystems.
        ${makeFstabEntries fileSystems {}}

-        # Swap devices.
+        ${lib.optionalString (config.swapDevices != []) "# Swap devices."}
        ${flip concatMapStrings config.swapDevices (sw:
            "${sw.realDevice} none swap ${swapOptions sw}\n"
        )}
--- a/pkgs/applications/editors/emacs/elisp-packages/manual-packages/straight/default.nix
+++ b/pkgs/applications/editors/emacs/elisp-packages/manual-packages/straight/default.nix
@@ -8,13 +8,13 @@

 melpaBuild {
  pname = "straight";
-  version = "0-unstable-2024-10-06";
+  version = "0-unstable-2025-01-30";

  src = fetchFromGitHub {
    owner = "radian-software";
    repo = "straight.el";
-    rev = "33fb4695066781c634ff1c3c81ba96e880deccf7";
-    hash = "sha256-3NPVLTn0ka0RvSLXW9gDKam3xajp62/mLupc8uyatzo=";
+    rev = "44a866f28f3ded6bcd8bc79ddc73b8b5044de835";
+    hash = "sha256-riKagjhCn5NyTerw1WqGOn37TZNfmhPb7DS49TXw1CA=";
  };

  nativeBuildInputs = [ git ];
--- a/pkgs/applications/editors/vim/plugins/generated.nix
+++ b/pkgs/applications/editors/vim/plugins/generated.nix
@@ -3246,12 +3246,12 @@ final: prev:

  crates-nvim = buildVimPlugin {
    pname = "crates.nvim";
-    version = "2025-02-07";
+    version = "2025-02-20";
    src = fetchFromGitHub {
      owner = "saecki";
      repo = "crates.nvim";
-      rev = "1d92a7f449a2a76d8f4c3459bd98f450e76d2ea3";
-      sha256 = "1y2d100zrihznhiw5chqj11nfrjkd9rax6aqjdgfb4cd0fa2jgms";
+      rev = "1803c8b5516610ba7cdb759a4472a78414ee6cd4";
+      sha256 = "0bqcdsbhs1ab51nmqd3cx7p6nlpmrjj0a53hax9scpqzr23nvr66";
    };
    meta.homepage = "https://github.com/saecki/crates.nvim/";
    meta.hydraPlatforms = [ ];
--- a/pkgs/applications/graphics/drawio/default.nix
+++ b/pkgs/applications/graphics/drawio/default.nix
@@ -130,7 +130,13 @@ stdenv.mkDerivation rec {
  meta = with lib; {
    description = "Desktop application for creating diagrams";
    homepage = "https://about.draw.io/";
-    license = licenses.unfree;
+    license = with lib.licenses; [
+      # The LICENSE file of https://github.com/jgraph/drawio claims Apache License Version 2.0 again since https://github.com/jgraph/drawio/commit/5b2e73471e4fea83d681f0cec5d1aaf7c3884996
+      asl20
+      # But the README says:
+      # The minified code authored by us in this repo is licensed under an Apache v2 license, but the sources to build those files are not in this repo. This is not an open source project.
+      unfreeRedistributable
+    ];
    changelog = "https://github.com/jgraph/drawio-desktop/releases/tag/v${version}";
    maintainers = with maintainers; [ darkonion0 ];
    platforms = platforms.darwin ++ platforms.linux;
--- a/pkgs/applications/networking/cluster/kuma/default.nix
+++ b/pkgs/applications/networking/cluster/kuma/default.nix
@@ -15,17 +15,17 @@

 buildGoModule rec {
  inherit pname;
-  version = "2.9.2";
+  version = "2.9.3";
  tags = lib.optionals enableGateway [ "gateway" ];

  src = fetchFromGitHub {
    owner = "kumahq";
    repo = "kuma";
    rev = version;
-    hash = "sha256-c7ps2J15Hms1sM3e4uPvKZwYjhudEdw+220jNQemxag=";
+    hash = "sha256-EdAIP0hz93sEfHHdOS4SJMBaRVRLVLw9ZlUwYwgx/Iw=";
  };

-  vendorHash = "sha256-++oL9OetEApRdfjypknPE3GFjLZbKexjtnySIOZJg8U=";
+  vendorHash = "sha256-0kqV7uFYyUmXB64GEZbU30V2GTKTXHB3KcS/FmHr5sE=";

  # no test files
  doCheck = false;
--- a/pkgs/applications/networking/cluster/roxctl/default.nix
+++ b/pkgs/applications/networking/cluster/roxctl/default.nix
@@ -2,16 +2,16 @@

 buildGoModule rec {
  pname = "roxctl";
-  version = "4.6.0";
+  version = "4.6.2";

  src = fetchFromGitHub {
    owner = "stackrox";
    repo = "stackrox";
    rev = version;
-    sha256 = "sha256-G/AKJV4D7bsObU9wkKysyi/KMay+B7OhAZi59jDiVFk=";
+    sha256 = "sha256-UgwWNacoPSMtZBLnGh/e7tIgXksBgBcCyZJ3XpKUapQ=";
  };

-  vendorHash = "sha256-iB5LkGEvkxxFO+/wFSZMP2byA5Pu2sEzS6mdnVD0/wY=";
+  vendorHash = "sha256-NqPon1S0GzdyIDMNejIXmlkppR8DnXWNdXuyuiA2Vxo=";

  nativeBuildInputs = [ installShellFiles ];

--- a/pkgs/applications/version-management/git/default.nix
+++ b/pkgs/applications/version-management/git/default.nix
@@ -60,15 +60,6 @@ stdenv.mkDerivation (finalAttrs: {
    ./installCheck-path.patch
  ] ++ lib.optionals withSsh [
    ./ssh-path.patch
-  ] ++ lib.optionals (guiSupport && stdenv.hostPlatform.isDarwin) [
-    # Needed to workaround an issue in macOS where gitk shows a empty window
-    # https://github.com/Homebrew/homebrew-core/issues/68798
-    # https://github.com/git/git/pull/944
-    (fetchpatch {
-      name = "gitk_check_main_window_visibility_before_waiting_for_it_to_show.patch";
-      url = "https://github.com/git/git/commit/1db62e44b7ec93b6654271ef34065b31496cd02e.patch";
-      hash = "sha256-ntvnrYFFsJ1Ebzc6vM9/AMFLHMS1THts73PIOG5DkQo=";
-    })
  ];

  postPatch = ''
--- a/pkgs/build-support/rust/build-rust-package/default.nix
+++ b/pkgs/build-support/rust/build-rust-package/default.nix
@@ -83,7 +83,7 @@ lib.extendMkDerivation {
          cargoDeps
        else if cargoLock != null then
          importCargoLock cargoLock
-        else if (args.cargoHash or null == null) && (args.cargoSha256 or null == null) then
+        else if args.cargoHash or null == null then
          throw "cargoHash, cargoVendorDir, cargoDeps, or cargoLock must be set"
        else if useFetchCargoVendor then
          fetchCargoVendor (
@@ -116,15 +116,10 @@ lib.extendMkDerivation {
                postUnpack
                cargoUpdateHook
                ;
+              hash = args.cargoHash;
              name = cargoDepsName;
              patches = cargoPatches;
            }
-            // lib.optionalAttrs (args ? cargoHash) {
-              hash = args.cargoHash;
-            }
-            // lib.optionalAttrs (args ? cargoSha256) {
-              sha256 = lib.warn "cargoSha256 is deprecated. Please use cargoHash with SRI hash instead" args.cargoSha256;
-            }
            // depsExtraArgs
          );

--- a/pkgs/by-name/ad/adif-multitool/package.nix
+++ b/pkgs/by-name/ad/adif-multitool/package.nix
@@ -5,7 +5,7 @@
 }:
 buildGoModule rec {
  pname = "adif-multitool";
-  version = "0.1.18";
+  version = "0.1.20";

  vendorHash = "sha256-U9BpTDHjUZicMjKeyxyM/eOxJeAY2DMQMHOEMiCeN/U=";

@@ -13,7 +13,7 @@ buildGoModule rec {
    owner = "flwyd";
    repo = "adif-multitool";
    rev = "v${version}";
-    hash = "sha256-GH35dcSjoOTaQiA4j9F5fbz3XStkjlKA0he7msaJHD8=";
+    hash = "sha256-qeAH8UTyEZn8As3wTjluONpjeT/5l9zicN5+8uwnbLo=";
  };

  meta = with lib; {
--- a/pkgs/by-name/ar/argocd/package.nix
+++ b/pkgs/by-name/ar/argocd/package.nix
@@ -8,17 +8,17 @@

 buildGoModule rec {
  pname = "argocd";
-  version = "2.13.4";
+  version = "2.14.2";

  src = fetchFromGitHub {
    owner = "argoproj";
    repo = "argo-cd";
    rev = "v${version}";
-    hash = "sha256-LBA6GFMBY1zW7h94DBokxA/9dx5/tCSRe+rYQCOgSgo=";
+    hash = "sha256-HiKTJ6X8py/mIcU+jSRonvYBxQMZ6Onzmu0/SorvPKg=";
  };

  proxyVendor = true; # darwin/linux hash mismatch
-  vendorHash = "sha256-HN0kxDG1DCl6lwmf44lMZmAZ2ban4iT8EIQ03dvZ6X0=";
+  vendorHash = "sha256-T8VZXE9Cgr5oNuVzKlPgoKosjGB+2fTB8qnoDFYZ2Xk=";

  # Set target as ./cmd per cli-local
  # https://github.com/argoproj/argo-cd/blob/master/Makefile#L227
--- a/pkgs/by-name/at/atlantis/package.nix
+++ b/pkgs/by-name/at/atlantis/package.nix
@@ -6,20 +6,20 @@

 buildGoModule rec {
  pname = "atlantis";
-  version = "0.32.0";
+  version = "0.33.0";

  src = fetchFromGitHub {
    owner = "runatlantis";
    repo = "atlantis";
    rev = "v${version}";
-    hash = "sha256-7D7msKDnHym3uiMJur2kCRf6MurwkMEKI+aYcwqOVX0=";
+    hash = "sha256-6/e3h4et5xzo0Eoh5I90FW9drOUSut1Wz7MgTSlVXGk=";
  };
  ldflags = [
    "-X=main.version=${version}"
    "-X=main.date=1970-01-01T00:00:00Z"
  ];

-  vendorHash = "sha256-wPsEE6sR1GDD3Npdcf/JmeZc451+x9UBE8+DwXkj/qE=";
+  vendorHash = "sha256-OZBvDblAQ3VZ4AOnfSOlGrcKKzAkngRanwLzU0dPe+s=";

  subPackages = [ "." ];

--- a/pkgs/by-name/ba/bazel-buildtools/package.nix
+++ b/pkgs/by-name/ba/bazel-buildtools/package.nix
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "bazel-buildtools";
-  version = "7.3.1";
+  version = "8.0.3";

  src = fetchFromGitHub {
    owner = "bazelbuild";
    repo = "buildtools";
    rev = "v${version}";
-    hash = "sha256-AdwJDRw+AY3F+ZDaKqn5YzAVyAzvrV+d1WTk8OJtUdk=";
+    hash = "sha256-m1z3i1rddwXZK5VF4qwhaMCS5U3FZ5SawJz/IgdRgdU=";
  };

  vendorHash = "sha256-sYZ7ogQY0dWOwJMvLljOjaKeYGYdLrF5AnetregdlYY=";
--- a/pkgs/by-name/ba/bazel-remote/package.nix
+++ b/pkgs/by-name/ba/bazel-remote/package.nix
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "bazel-remote";
-  version = "2.4.4";
+  version = "2.5.0";

  src = fetchFromGitHub {
    owner = "buchgr";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-ncYE48DtH+mIM9ZR7IB38SzQFordhMGLp79poqDKWLE=";
+    hash = "sha256-vNj1w08g7364DcN2reIdamMxKNApKquf/CvFZx3Gu7A=";
  };

-  vendorHash = "sha256-7rxrnxZwxqRRQf1sWk8ILi2IV/pYmxBuwHl9khfCrKE=";
+  vendorHash = "sha256-UakVmKimlWRcubUIvVgBO+ffltrPwYHhfXwFNbl3J3I=";

  subPackages = [ "." ];

--- a/pkgs/by-name/bu/buildkite-cli/package.nix
+++ b/pkgs/by-name/bu/buildkite-cli/package.nix
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "buildkite-cli";
-  version = "3.5.0";
+  version = "3.6.0";

  src = fetchFromGitHub {
    owner = "buildkite";
    repo = "cli";
    rev = "v${version}";
-    sha256 = "sha256-UKpvqjHnkDv6HDpDmXe3ZoFSMGmPE/KLc7TuJKjNJXw=";
+    sha256 = "sha256-QHbSoZt+UucGLQjbQbeGf20/jeuUGfMti7J1PRkVydM=";
  };

-  vendorHash = "sha256-FV35NCwntmIWakcNH9nu1MTwZArERCc8hN57PmunkX4=";
+  vendorHash = "sha256-AXwNICrzLrOPQWfgTvbv+NcEJZqkeG3YUY8C65Ud/1Y=";

  doCheck = false;

--- a/pkgs/by-name/ca/capnproto/package.nix
+++ b/pkgs/by-name/ca/capnproto/package.nix
@@ -9,14 +9,14 @@

 stdenv.mkDerivation rec {
  pname = "capnproto";
-  version = "1.0.2";
+  version = "1.1.0";

  # release tarballs are missing some ekam rules
  src = fetchFromGitHub {
    owner = "capnproto";
    repo = "capnproto";
    rev = "v${version}";
-    sha256 = "sha256-LVdkqVBTeh8JZ1McdVNtRcnFVwEJRNjt0JV2l7RkuO8=";
+    hash = "sha256-gxkko7LFyJNlxpTS+CWOd/p9x/778/kNIXfpDGiKM2A=";
  };

  nativeBuildInputs = [ cmake ];
--- a/pkgs/by-name/ca/catppuccin/package.nix
+++ b/pkgs/by-name/ca/catppuccin/package.nix
@@ -269,7 +269,7 @@ lib.checkListOfEnum "${pname}: variant" validVariants [ variant ] lib.checkListO
      ''
      + lib.optionalString (lib.elem "qt5ct" themeList) ''
        mkdir -p "$out/qt5ct"
-        cp "${sources.qt5ct}/themes/Catppuccin-${variant}-${accent}.conf" "$out/qt5ct"
+        cp "${sources.qt5ct}/themes/catppuccin-${variant}-${accent}.conf" "$out/qt5ct"

      ''
      + lib.optionalString (lib.elem "rofi" themeList) ''
--- a/pkgs/by-name/ci/cirrus-cli/package.nix
+++ b/pkgs/by-name/ci/cirrus-cli/package.nix
@@ -7,13 +7,13 @@

 buildGoModule rec {
  pname = "cirrus-cli";
-  version = "0.137.3";
+  version = "0.138.1";

  src = fetchFromGitHub {
    owner = "cirruslabs";
    repo = "cirrus-cli";
    rev = "v${version}";
-    hash = "sha256-7yI0dcE6hxfAZeZ5ylw5s6CBye1hTSW/nLtFZs4k/xw=";
+    hash = "sha256-k9laBOhkor2jW7dMaVNXFK+FzSC/4DgJFM5k1NhX4V4=";
  };

  vendorHash = "sha256-GjCwH0Xe9wyacfokI5EzF2TKUnSMKCdOljahChPBlso=";
--- a/pkgs/by-name/co/consul-template/package.nix
+++ b/pkgs/by-name/co/consul-template/package.nix
@@ -7,16 +7,16 @@

 buildGoModule rec {
  pname = "consul-template";
-  version = "0.39.1";
+  version = "0.40.0";

  src = fetchFromGitHub {
    owner = "hashicorp";
    repo = "consul-template";
    rev = "v${version}";
-    hash = "sha256-VaNAy6bB59QRf29Sgprv7HtVfjvCNic7r31gU2e6prQ=";
+    hash = "sha256-iqBcY7FYCO4qqQRAHxA2sxTnyL5c0vLVWKuhqvX0oJE=";
  };

-  vendorHash = "sha256-OTpon/UIDbH5zbcIyAWqKgTTMNGxytgcMlgaiHOBmeo=";
+  vendorHash = "sha256-Slp+x+cYYIC/XgICb9qDdqq1gTDxLNwXyClaWZt1fs8=";

  # consul-template tests depend on vault and consul services running to
  # execute tests so we skip them here
--- a/pkgs/by-name/co/coroot-node-agent/package.nix
+++ b/pkgs/by-name/co/coroot-node-agent/package.nix
@@ -7,13 +7,13 @@

 buildGoModule rec {
  pname = "coroot-node-agent";
-  version = "1.23.8";
+  version = "1.23.11";

  src = fetchFromGitHub {
    owner = "coroot";
    repo = "coroot-node-agent";
    rev = "v${version}";
-    hash = "sha256-fuV6YAj6LgPrJcpbAGGhREfJeDVz0FlTO9hoGlHIOQw=";
+    hash = "sha256-gO7vuaGSsxvF8ltuAlx8b6pbovauX0GVAqYcBseXAd8=";
  };

  vendorHash = "sha256-SxyIlyDHuu8Ls1+/rujWE9elZiTfSYWIrV8vP5xsqTU=";
--- a/pkgs/by-name/cr/crowdsec/package.nix
+++ b/pkgs/by-name/cr/crowdsec/package.nix
@@ -7,16 +7,16 @@

 buildGoModule rec {
  pname = "crowdsec";
-  version = "1.6.4";
+  version = "1.6.5";

  src = fetchFromGitHub {
    owner = "crowdsecurity";
    repo = pname;
    tag = "v${version}";
-    hash = "sha256-U3YnLjsD+Kl/6HD+RPP0gWa4N96X5wkbdCmIrxas1I8=";
+    hash = "sha256-Jt5qFY41TnkvDw2BPd+vfyskhLpnJnsiUmUJcADQ0so=";
  };

-  vendorHash = "sha256-PtBVXPbLNdJyS8v8H9eRB6sTPaiseg18+eXToHvH7tw=";
+  vendorHash = "sha256-I9h63iePhEMCy8IQNTomhgduGOyC3aoxz/0L4JQhhF8=";

  nativeBuildInputs = [ installShellFiles ];

--- a/pkgs/by-name/cy/cyclonedx-python/package.nix
+++ b/pkgs/by-name/cy/cyclonedx-python/package.nix
@@ -6,14 +6,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "cyclonedx-python";
-  version = "5.1.2";
+  version = "5.2.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "CycloneDX";
    repo = "cyclonedx-python";
    tag = "v${version}";
-    hash = "sha256-jh/7sMVBQWptC6Zi+yEwraR7leoyqYg4is83qao7gaY=";
+    hash = "sha256-wUXSmZeCiHxVgufP3g5AaZtfAQil5sqAJF6q6bngZps=";
  };

  build-system = with python3Packages; [ poetry-core ];
@@ -35,7 +35,7 @@ python3Packages.buildPythonApplication rec {
  meta = {
    description = "Creates CycloneDX Software Bill of Materials (SBOM) from Python projects";
    homepage = "https://github.com/CycloneDX/cyclonedx-python";
-    changelog = "https://github.com/CycloneDX/cyclonedx-python/releases/tag/v${version}";
+    changelog = "https://github.com/CycloneDX/cyclonedx-python/releases/tag/${src.tag}";
    license = lib.licenses.asl20;
    maintainers = lib.teams.cyberus.members;
    mainProgram = "cyclonedx-py";
--- a/pkgs/by-name/da/dart-sass/package.nix
+++ b/pkgs/by-name/da/dart-sass/package.nix
@@ -46,6 +46,11 @@ buildDartApplication rec {

  dartCompileFlags = [ "--define=version=${version}" ];

+  postInstall = ''
+    # dedupe identiall binaries
+    ln -rsf $out/bin/{,dart-}sass
+  '';
+
  passthru = {
    inherit embedded-protocol-version embedded-protocol;
    updateScript = ./update.sh;
--- a/pkgs/by-name/do/dolt/package.nix
+++ b/pkgs/by-name/do/dolt/package.nix
@@ -2,18 +2,18 @@

 buildGoModule rec {
  pname = "dolt";
-  version = "1.48.0";
+  version = "1.49.1";

  src = fetchFromGitHub {
    owner = "dolthub";
    repo = "dolt";
    rev = "v${version}";
-    sha256 = "sha256-aP8kiIrkwwn9lPXUdREEn1RjVBEk9Jnm0BGCRVmc3Qo=";
+    sha256 = "sha256-AaJlp7bLjZ8OlBwztUGvG6uswPCuHoRuGU4CwNog0E8=";
  };

  modRoot = "./go";
  subPackages = [ "cmd/dolt" ];
-  vendorHash = "sha256-DLBgF82IvcaxtYi0IgrSv/7WuvzWUOHNZd1mJTZoTHg=";
+  vendorHash = "sha256-QZ34FecHoZ8mhupmpIhguDnhmk/L5vKIa2AnapQCbXM=";
  proxyVendor = true;
  doCheck = false;

--- a/pkgs/by-name/ec/eclib/package.nix
+++ b/pkgs/by-name/ec/eclib/package.nix
@@ -14,7 +14,7 @@ assert withFlint -> flint != null;

 stdenv.mkDerivation rec {
  pname = "eclib";
-  version = "20240408"; # upgrade might break the sage interface
+  version = "20250122"; # upgrade might break the sage interface
  # sage tests to run:
  # src/sage/interfaces/mwrank.py
  # src/sage/libs/eclib
@@ -28,8 +28,8 @@ stdenv.mkDerivation rec {
    #
    # see https://github.com/JohnCremona/eclib/issues/64#issuecomment-789788561
    # for upstream's explanation of the above
-    url = "https://github.com/JohnCremona/eclib/releases/download/v${version}/eclib-${version}.tar.bz2";
-    sha256 = "sha256-O6kI4gGd5T/LoUFEnKpvqC8DYFv4O/nagJLfU4ravnw=";
+    url = "https://github.com/JohnCremona/eclib/releases/download/${version}/eclib-${version}.tar.bz2";
+    sha256 = "sha256-n4wrMuJKTyDXzC0zbqMMjqA7WwlTwtMq3aDEludhaJk=";
  };
  buildInputs = [
    pari
--- a/pkgs/by-name/ec/ecs-agent/package.nix
+++ b/pkgs/by-name/ec/ecs-agent/package.nix
@@ -2,13 +2,13 @@

 buildGoModule rec {
  pname = "amazon-ecs-agent";
-  version = "1.89.3";
+  version = "1.90.0";

  src = fetchFromGitHub {
    rev = "v${version}";
    owner = "aws";
    repo = pname;
-    hash = "sha256-zhltYmhISAbxYL+oeJLoxd5OaFjAoTJHAJWuIaBPYZs=";
+    hash = "sha256-XzcEmXW2JblclSFyZgejn802tiNpbNUw22493lhsiqc=";
  };

  vendorHash = null;
--- a/pkgs/by-name/ek/ekam/package.nix
+++ b/pkgs/by-name/ek/ekam/package.nix
@@ -2,9 +2,16 @@
  lib,
  stdenv,
  fetchFromGitHub,
-  capnproto,
 }:

+let
+  capnproto.src = fetchFromGitHub {
+    owner = "capnproto";
+    repo = "capnproto";
+    tag = "v1.0.2";
+    hash = "sha256-LVdkqVBTeh8JZ1McdVNtRcnFVwEJRNjt0JV2l7RkuO8=";
+  };
+in
 stdenv.mkDerivation {
  pname = "ekam";
  version = "unstable-2021-09-18";
--- a/pkgs/by-name/ep/epoll-shim/package.nix
+++ b/pkgs/by-name/ep/epoll-shim/package.nix
@@ -20,10 +20,15 @@ stdenv.mkDerivation (finalAttrs: {
    cmake
  ];

-  cmakeFlags = [
-    "-DCMAKE_INSTALL_PKGCONFIGDIR=${placeholder "out"}/lib/pkgconfig"
-    "-DBUILD_TESTING=${lib.boolToString finalAttrs.finalPackage.doCheck}"
-  ];
+  cmakeFlags =
+    [
+      "-DCMAKE_INSTALL_PKGCONFIGDIR=${placeholder "out"}/lib/pkgconfig"
+      "-DBUILD_TESTING=${lib.boolToString finalAttrs.finalPackage.doCheck}"
+    ]
+    ++ lib.optionals (stdenv.buildPlatform != stdenv.hostPlatform && stdenv.hostPlatform.isFreeBSD) [
+      # fails in cross configurations for not being able to detect this value
+      "-DALLOWS_ONESHOT_TIMERS_WITH_TIMEOUT_ZERO=YES"
+    ];

  # https://github.com/jiixyj/epoll-shim/issues/41
  # https://github.com/jiixyj/epoll-shim/pull/34
--- a/pkgs/by-name/fh/fh/package.nix
+++ b/pkgs/by-name/fh/fh/package.nix
@@ -12,17 +12,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "fh";
-  version = "0.1.21";
+  version = "0.1.22";

  src = fetchFromGitHub {
    owner = "DeterminateSystems";
    repo = "fh";
    rev = "v${version}";
-    hash = "sha256-EepDB25iZ8li+fGwhqOqg7XipFBishv4SvcDE2FE+is=";
+    hash = "sha256-yOqXcn/OMfC97t002V8yzZn1PhuV8lIp5szPA7eys1Q=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-HfA0I1HZDwuTpyrWKAWcceamHw2flDA/35+bpkwFxm4=";
+  cargoHash = "sha256-+6/gTY0pqpsq8QByVLbC1KnT2G1CJwLtpIFrUnyzlU0=";

  nativeBuildInputs = [
    installShellFiles
--- a/pkgs/by-name/fi/firefly-iii-data-importer/package.nix
+++ b/pkgs/by-name/fi/firefly-iii-data-importer/package.nix
@@ -13,13 +13,13 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "firefly-iii-data-importer";
-  version = "1.6.0";
+  version = "1.6.1";

  src = fetchFromGitHub {
    owner = "firefly-iii";
    repo = "data-importer";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-f/kvSQMA4w+wwD+hM6kGduV3AQmmYe2w5u3dhnJBS9s=";
+    hash = "sha256-/mQnv/81XpdiXayC4+kw0QihZSPBkz59eJCdEBodudQ=";
  };

  buildInputs = [ php84 ];
@@ -38,12 +38,12 @@ stdenvNoCC.mkDerivation (finalAttrs: {
  composerStrictValidation = true;
  strictDeps = true;

-  vendorHash = "sha256-Jn0H63VxIGjgVOT6yyXEhRdMWeIInMdv6mi5JQXp68Q=";
+  vendorHash = "sha256-9WSq8kUoXyClAHvuMtqzlfcITgCgXdulslDAzlaJ9LU=";

  npmDeps = fetchNpmDeps {
    inherit (finalAttrs) src;
    name = "${finalAttrs.pname}-npm-deps";
-    hash = "sha256-hUq5pp62K2XAnjU9QhQE+PogUSla9R1xG7beW4bgrV8=";
+    hash = "sha256-6yfXh9KX0ucAB+wo/xG4gRGmDL+CPtLkcq390iVz2qU=";
  };

  composerRepository = php84.mkComposerRepository {
--- a/pkgs/by-name/fi/firefly-iii/package.nix
+++ b/pkgs/by-name/fi/firefly-iii/package.nix
@@ -13,13 +13,13 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "firefly-iii";
-  version = "6.2.6";
+  version = "6.2.9";

  src = fetchFromGitHub {
    owner = "firefly-iii";
    repo = "firefly-iii";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-JMBnlWQ1dtib3vjF9US9RAegINF+NLqgPhJIkYjZm9A=";
+    hash = "sha256-CF/Q7kLpNJuFxCvFuHdrobApjgnr4Fh991kgZLK0I5w=";
  };

  buildInputs = [ php84 ];
@@ -38,12 +38,12 @@ stdenvNoCC.mkDerivation (finalAttrs: {
  composerStrictValidation = true;
  strictDeps = true;

-  vendorHash = "sha256-Fpv9bqUz60ZFij3wk5h6uRfDU9uJlb/OIdcDuMyFGdo=";
+  vendorHash = "sha256-AMJ5Adyrks7Yk8X4ypwz0OdOlCWx+I2jfJQsX7SPvzk=";

  npmDeps = fetchNpmDeps {
    inherit (finalAttrs) src;
    name = "${finalAttrs.pname}-npm-deps";
-    hash = "sha256-k17rcJxmttLMspKiX/j0Oeo5uvFcCqhHN7kxLsod1Xc=";
+    hash = "sha256-XBJz2ILQOFHfW940A4kS7115gVsUTM1oA/vcjw3NZ2A=";
  };

  composerRepository = php84.mkComposerRepository {
--- a/pkgs/by-name/fl/flips/package.nix
+++ b/pkgs/by-name/fl/flips/package.nix
@@ -8,39 +8,37 @@
  wrapGAppsHook3,
 }:

-stdenv.mkDerivation {
+stdenv.mkDerivation rec {
  pname = "flips";
-  version = "unstable-2023-03-15";
+  version = "196";

  src = fetchFromGitHub {
    owner = "Alcaro";
    repo = "Flips";
-    rev = "fdd5c6e34285beef5b9be759c9b91390df486c66";
-    hash = "sha256-uuHgpt7aWqiMTUILm5tAEGGeZrls3g/DdylYQgsfpTw=";
+    tag = "v${version}";
+    hash = "sha256-lQ88Iz607AcVzvN/jLGhOn7qiRe9pau9oQcLMt7JIT8=";
  };

  nativeBuildInputs = [
    pkg-config
    wrapGAppsHook3
  ];
+
  buildInputs = [
    gtk3
    libdivsufsort
  ];
-  patches = [ ./use-system-libdivsufsort.patch ];
-  makeFlags = [ "PREFIX=${placeholder "out"}" ];
-  buildPhase = ''
-    runHook preBuild
-    ./make.sh
-    runHook postBuild
-  '';

-  meta = with lib; {
+  patches = [ ./use-system-libdivsufsort.patch ];
+
+  makeFlags = [ "PREFIX=${placeholder "out"}" ];
+
+  meta = {
    description = "Patcher for IPS and BPS files";
    homepage = "https://github.com/Alcaro/Flips";
-    license = licenses.gpl3Plus;
+    license = lib.licenses.gpl3Plus;
    maintainers = with lib.maintainers; [ aleksana ];
-    platforms = platforms.linux;
+    platforms = lib.platforms.linux;
    mainProgram = "flips";
  };
 }
--- a/pkgs/by-name/go/goperf/package.nix
+++ b/pkgs/by-name/go/goperf/package.nix
@@ -9,15 +9,15 @@

 buildGoModule rec {
  pname = "goperf";
-  version = "0-unstable-2025-01-06";
+  version = "0-unstable-2025-02-14";

  src = fetchgit {
    url = "https://go.googlesource.com/perf";
-    rev = "400946f43c825f133ced1d2662be611959d1335c";
-    hash = "sha256-w7HUDDfsZ60ZNryewh83mJ6ZMfMpnvW6ehhijKss7B0=";
+    rev = "c95ad7d5b636f67d322a7e4832e83103d0fdd292";
+    hash = "sha256-FKQDuXxTsJnlsggmrtcUaWAZsLmayiou9zxNU59W2rM=";
  };

-  vendorHash = "sha256-WHkeLS8Sdq2oP7hD0MKVrcENclaOWTeSVCXm+aimqIU=";
+  vendorHash = "sha256-sUtjJc5VBrzPNbK7NiDIKprUN1xzACSKQtJ4h1MRaL8=";

  passthru.updateScript = writeShellScript "update-goperf" ''
    export UPDATE_NIX_ATTR_PATH=goperf
--- a/pkgs/by-name/im/imposm/package.nix
+++ b/pkgs/by-name/im/imposm/package.nix
@@ -8,13 +8,13 @@

 buildGoModule rec {
  pname = "imposm";
-  version = "0.14.0";
+  version = "0.14.1";

  src = fetchFromGitHub {
    owner = "omniscale";
    repo = "imposm3";
-    rev = "v${version}";
-    hash = "sha256-4PwJzR/xeVdqAiHXzMAqI2m8qeqFXLZxy9V3o59eKwA=";
+    tag = "v${version}";
+    hash = "sha256-PF7pi2UTZJe7WzfaJrQrOGusO/RRfh8KNz8YyrVcBvg=";
  };

  vendorHash = null;
@@ -32,12 +32,12 @@ buildGoModule rec {
  # requires network access
  doCheck = false;

-  meta = with lib; {
+  meta = {
    description = "Imposm imports OpenStreetMap data into PostGIS";
    homepage = "https://imposm.org/";
    changelog = "https://github.com/omniscale/imposm3/releases/tag/${src.rev}";
-    license = licenses.apsl20;
-    maintainers = with maintainers; [ sikmir ];
+    license = lib.licenses.apsl20;
+    maintainers = with lib.maintainers; [ sikmir ];
    mainProgram = "imposm";
  };
 }
--- a/pkgs/by-name/jd/jd-diff-patch/package.nix
+++ b/pkgs/by-name/jd/jd-diff-patch/package.nix
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "jd-diff-patch";
-  version = "1.9.1";
+  version = "2.1.2";

  src = fetchFromGitHub {
    owner = "josephburnett";
    repo = "jd";
    rev = "v${version}";
-    sha256 = "sha256-qq/Y2/NGK3xsgljT0D9+dD1D1UfjB9Niay81nQJ4gX0=";
+    sha256 = "sha256-chCxbbRZEE29KVnTQWID889kJ2H4qJGVL+vsxzr6VtA=";
  };

  # not including web ui
--- a/pkgs/by-name/ki/kics/package.nix
+++ b/pkgs/by-name/ki/kics/package.nix
@@ -8,16 +8,16 @@

 buildGoModule rec {
  pname = "kics";
-  version = "2.1.4";
+  version = "2.1.5";

  src = fetchFromGitHub {
    owner = "Checkmarx";
    repo = "kics";
    tag = "v${version}";
-    hash = "sha256-sjGPDDcAeHS2fC8NhIdew5yeJmDQfb9A15LxmvxoHK0=";
+    hash = "sha256-eLMXUnqcobKlrz63TV2/ge8JjplfdxYe+eTSPtnhdxU=";
  };

-  vendorHash = "sha256-gDppOwWOn8CoVTBsTdHIc6yGcqO379ijV5YccRIuMfs=";
+  vendorHash = "sha256-2+maZVsB/iVBf+vDkCh7ZPM4o84DjxISCg06AahwcZM=";

  subPackages = [ "cmd/console" ];

--- a/pkgs/by-name/ko/konstraint/package.nix
+++ b/pkgs/by-name/ko/konstraint/package.nix
@@ -7,15 +7,15 @@

 buildGoModule rec {
  pname = "konstraint";
-  version = "0.39.0";
+  version = "0.40.0";

  src = fetchFromGitHub {
    owner = "plexsystems";
    repo = pname;
    rev = "v${version}";
-    sha256 = "sha256-pn5uL3ibDb3vXaBhf34LmFNGpR8SYJkg5IcnN+eVfWk=";
+    sha256 = "sha256-xSDJ9UaAYjsyEy+VGOQNrJSYh+Fulp+vDnXxPjRSotk=";
  };
-  vendorHash = "sha256-ZpNLxoUHwNMzMiKSm8rY27dH9AukXZEitrFb7TlSyQ0=";
+  vendorHash = "sha256-pb34eqOmGBdYMRw8mIP4upnKEhevxoCkPVnH9E7W2Q8=";

  # Exclude go within .github folder
  excludedPackages = ".github";
--- a/pkgs/by-name/m8/m8c/package.nix
+++ b/pkgs/by-name/m8/m8c/package.nix
@@ -9,13 +9,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "m8c";
-  version = "1.7.8";
+  version = "1.7.9";

  src = fetchFromGitHub {
    owner = "laamaa";
    repo = "m8c";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-kUXNtAO8yUBeBg1NEwk+3jB7lL8ITm5hmXiemTUWbGc=";
+    hash = "sha256-ijPRh/aurquh5JFngtoIBniopfVC67lL2X0M7AxT4SU=";
  };

  makeFlags = [ "CC=${stdenv.cc.targetPrefix}cc" ];
--- a/pkgs/by-name/me/melange/package.nix
+++ b/pkgs/by-name/me/melange/package.nix
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "melange";
-  version = "0.19.3";
+  version = "0.20.0";

  src = fetchFromGitHub {
    owner = "chainguard-dev";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-90Ezv9PM1lFRq4b0ACrc34OteF6P/8DhZy+5kCnInSI=";
+    hash = "sha256-wSuZHHHLkS0Fr7NaRQpt7raUHeApBFy+C57YiaX6P0s=";
    # populate values that require us to use git. By doing this in postFetch we
    # can delete .git afterwards and maintain better reproducibility of the src.
    leaveDotGit = true;
@@ -25,7 +25,7 @@ buildGoModule rec {
    '';
  };

-  vendorHash = "sha256-V1BDcAD84W5n/IOAcO+eMd+LnSe0sgNgBeq95dOl/Us=";
+  vendorHash = "sha256-Tc+ZpmCsJyuJyQDV6wAiagJ7kMxHxpRLOwLg/+o3P38=";

  subPackages = [ "." ];

--- a/pkgs/by-name/ne/nezha-theme-nazhua/package.nix
+++ b/pkgs/by-name/ne/nezha-theme-nazhua/package.nix
@@ -12,13 +12,13 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "nezha-theme-nazhua";
-  version = "0.5.7";
+  version = "0.5.8";

  src = fetchFromGitHub {
    owner = "hi2shark";
    repo = "nazhua";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-DkM+BV0Qw8vpSjxiHFcYUauP9SaiSDhAgKz+13tEsDI=";
+    hash = "sha256-aRHMOyTWBYXgVBAXshQNHds+KZn4F8Gz9mzazIwT5TQ=";
  };

  yarnOfflineCache = fetchYarnDeps {
--- a/pkgs/by-name/ni/niri/package.nix
+++ b/pkgs/by-name/ni/niri/package.nix
@@ -103,10 +103,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
    );
  };

-  preCheck = ''
-    export XDG_RUNTIME_DIR=$(mktemp -d)
-  '';
-
  nativeInstallCheckInputs = [ versionCheckHook ];
  versionCheckProgramArg = "--version";
  doInstallCheck = true;
--- a/pkgs/by-name/ni/nixpkgs-hammering/package.nix
+++ b/pkgs/by-name/ni/nixpkgs-hammering/package.nix
@@ -10,13 +10,13 @@
 }:

 let
-  version = "0-unstable-2024-12-22";
+  version = "0-unstable-2025-02-09";

  src = fetchFromGitHub {
    owner = "jtojnar";
    repo = "nixpkgs-hammering";
-    rev = "56e8d636b3e7188dae2832fc405db2e388be634b";
-    hash = "sha256-hr+BHAmWT/FCLI5zNEHgtKdBbIYgmAydrErRu9RfuuM=";
+    rev = "df77e6533c21737e5976c6fe4a4d81d7dcfc3e0e";
+    hash = "sha256-Nr/4WcBMA/fc9WfNECB/nM85JfT2xwQYwS7Jq6rGKoM=";
  };

  meta = with lib; {
--- a/pkgs/by-name/no/notation/package.nix
+++ b/pkgs/by-name/no/notation/package.nix
@@ -9,16 +9,16 @@

 buildGoModule rec {
  pname = "notation";
-  version = "1.3.0";
+  version = "1.3.1";

  src = fetchFromGitHub {
    owner = "notaryproject";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-gLhvXDD6hFnQw7Q9wq/9S4heB921Hjj+rPI7yhsg9SE=";
+    hash = "sha256-KxxksliL2ZxbvwbLKB81Lhpvjab9nm4o3QBT2CVFwDw=";
  };

-  vendorHash = "sha256-CqvRTHnEZTaSSHx3g6yx1yMdI3YbdWsGo9hsnXdIuUs=";
+  vendorHash = "sha256-Mjuw0J5ITLcTWbCUYKLBDrK84wrN7KC05dn0+eBqb9s=";

  nativeBuildInputs = [
    installShellFiles
--- a/pkgs/by-name/nv/nvidia_oc/package.nix
+++ b/pkgs/by-name/nv/nvidia_oc/package.nix
@@ -8,17 +8,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "nvidia_oc";
-  version = "0.1.18";
+  version = "0.1.19";

  src = fetchFromGitHub {
    owner = "Dreaming-Codes";
    repo = "nvidia_oc";
    tag = version;
-    hash = "sha256-4dXdOwo7RidYEwKkoJp3+IvkGcXuS+irRbOlsfOKqIQ=";
+    hash = "sha256-OYQuCNHByt9y6XGIayCw8uvZHeITqRk8PV06+pT0dhA=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-CxiKkm4NyYtKqSf/FtE7Pp3myCYxMMaV0h3Khd6HgTY=";
+  cargoHash = "sha256-94uoOzbC1ocK1LWHArUYqfaBFzOUQNSLPKnMRXXjBQ0=";

  nativeBuildInputs = [
    autoAddDriverRunpath
--- a/pkgs/by-name/op/openvswitch/package.nix
+++ b/pkgs/by-name/op/openvswitch/package.nix
@@ -30,13 +30,13 @@

 stdenv.mkDerivation rec {
  pname = if withDPDK then "openvswitch-dpdk" else "openvswitch";
-  version = "3.4.1";
+  version = "3.5.0";

  src = fetchFromGitHub {
    owner = "openvswitch";
    repo = "ovs";
    tag = "v${version}";
-    hash = "sha256-EudcANZ0aUImQ/HWSX1PRklvhP2D5L3ugXaC0GKyF0Q=";
+    hash = "sha256-fEntEZHmQX78XZZic9hFr07PWC2RQIpuCfb1FYX3hd0=";
  };

  outputs = [
--- a/pkgs/by-name/ph/phrase-cli/package.nix
+++ b/pkgs/by-name/ph/phrase-cli/package.nix
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "phrase-cli";
-  version = "2.35.6";
+  version = "2.36.0";

  src = fetchFromGitHub {
    owner = "phrase";
    repo = "phrase-cli";
    rev = version;
-    sha256 = "sha256-oTiADsEck/TZpXlC7/HEBSyd68QAjUq76AGeawIPhS0=";
+    sha256 = "sha256-/ZZPqU/bG0dCfyxKg2Bo/222Or0ZcSR1Jb5eOqqy3wY=";
  };

-  vendorHash = "sha256-wIlntsf3PaRLWYZiI17ZdXidBV7LwAZdibUIX8yqATo=";
+  vendorHash = "sha256-LtymNbvrm0PBj6EM9KN6LU+M2gsdenYOJma00ZDtlpU=";

  ldflags = [ "-X=github.com/phrase/phrase-cli/cmd.PHRASE_CLIENT_VERSION=${version}" ];

--- a/pkgs/by-name/re/reindeer/package.nix
+++ b/pkgs/by-name/re/reindeer/package.nix
@@ -9,17 +9,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "reindeer";
-  version = "2025.02.03.00";
+  version = "2025.02.17.00";

  src = fetchFromGitHub {
    owner = "facebookincubator";
    repo = "reindeer";
    tag = "v${version}";
-    hash = "sha256-dEtwCGtS8JE24aBGIHvTgUimNccDmjCCEjX5zA1I4bU=";
+    hash = "sha256-ANoqccJaVVybRZ9al2PAoWSDgYscSKJNZEp/2kxDNwg=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-mhqT0vZRrmYN6UR9omEjQa/1JJ2pI3yu5HveMlbvvR0=";
+  cargoHash = "sha256-3dYg2FqTj73L/EpUNEt9PhkRXyAUxeKT2n9/IDi9QPM=";

  nativeBuildInputs = [ pkg-config ];

--- a/pkgs/by-name/re/revive/package.nix
+++ b/pkgs/by-name/re/revive/package.nix
@@ -2,13 +2,13 @@

 buildGoModule rec {
  pname = "revive";
-  version = "1.6.0";
+  version = "1.7.0";

  src = fetchFromGitHub {
    owner = "mgechev";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-MiD5b5cLUY+ORrHtyqynM/kdFKIHb/4CMWd6Dq+6TcY=";
+    hash = "sha256-omG3fLsrl8wrfp4EFBYdagKEBn2SRPE/MVrLMs6gGds=";
    # populate values that require us to use git. By doing this in postFetch we
    # can delete .git afterwards and maintain better reproducibility of the src.
    leaveDotGit = true;
@@ -18,7 +18,7 @@ buildGoModule rec {
      rm -rf $out/.git
    '';
  };
-  vendorHash = "sha256-KFLnc7PFKbZ8VOUOx0EnRLyMYQzZVFZphDhk2KNRiIc=";
+  vendorHash = "sha256-emR8QR/OYQIWZBMcSU2VzWb5kazSVGGudLAJL9uGDNw=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/sa/sage/sage-src.nix
+++ b/pkgs/by-name/sa/sage/sage-src.nix
@@ -96,6 +96,13 @@ stdenv.mkDerivation rec {
      url = "https://github.com/sagemath/sage/compare/10.6.beta2...26f411e5939718d4439325ff669635e5a72d50e5.diff";
      hash = "sha256-Z4JwCuUDpqktAzNtVKRUbrJEh7TmCtFI7PJnOrcEbr4=";
    })
+
+    # https://github.com/sagemath/sage/pull/38962, landed in 10.6.beta7
+    (fetchpatch {
+      name = "eclib-update.patch";
+      url = "https://github.com/sagemath/sage/commit/5289298248a1d6ab11ccf169e636d951f1d77c41.diff";
+      hash = "sha256-iQNqvywvtnvqAA9o8zn4il/XIFBiuEX+vSFZHPaPzcs=";
+    })
  ];

  patches = nixPatches ++ bugfixPatches ++ packageUpgradePatches;
--- a/pkgs/by-name/si/sing-box/package.nix
+++ b/pkgs/by-name/si/sing-box/package.nix
@@ -12,13 +12,13 @@

 buildGoModule rec {
  pname = "sing-box";
-  version = "1.11.3";
+  version = "1.11.4";

  src = fetchFromGitHub {
    owner = "SagerNet";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-TaCz3IS+t4v7p/gT19DCP5ARM3nvFqDPGtMv/Vvwmtk=";
+    hash = "sha256-Zm8hfB5tuOvTi29GZG7AvFKc3CVz8wo+KMxJKhvrSlw=";
  };

  vendorHash = "sha256-Ix4Pzq+yGfaJNPJnhLGgcCzZ85hGjSU24NffMR3ZSxQ=";
--- a/pkgs/by-name/ss/ssm-session-manager-plugin/package.nix
+++ b/pkgs/by-name/ss/ssm-session-manager-plugin/package.nix
@@ -6,13 +6,13 @@
 }:
 buildGoModule rec {
  pname = "ssm-session-manager-plugin";
-  version = "1.2.694.0";
+  version = "1.2.707.0";

  src = fetchFromGitHub {
    owner = "aws";
    repo = "session-manager-plugin";
    rev = version;
-    hash = "sha256-pPILtad+ZZ01m6jBDl1M/koCPN7BUCfVfu3QM1inv1g=";
+    hash = "sha256-4DPwFKt5pNNl4AczgIhZA7CuBHx7q41jMZKenDFYmwg=";
  };

  patches = [
--- a/pkgs/by-name/sy/syn2mas/package.nix
+++ b/pkgs/by-name/sy/syn2mas/package.nix
@@ -6,18 +6,18 @@

 buildNpmPackage rec {
  pname = "syn2mas";
-  version = "0.13.0";
+  version = "0.14.0";

  src = fetchFromGitHub {
    owner = "element-hq";
    repo = "matrix-authentication-service";
    rev = "v${version}";
-    hash = "sha256-rFex6stw++xNrcCYnYn3N0HrUQd91DAw9QU0R2MUzyQ=";
+    hash = "sha256-k+om7LfHcVr5ugJAXicFIcz2CNGGEzVb+O8uXdVukpE=";
  };

  sourceRoot = "${src.name}/tools/syn2mas";

-  npmDepsHash = "sha256-liwFM3HkZtZTJmaqF/7WvYxf2EKgjNF5xCHP/OxFK/k=";
+  npmDepsHash = "sha256-n/YkWm4JoXAY6smULQNQDTHGtYkPBXsxfo3BU05zIbA=";

  dontBuild = true;

--- a/pkgs/by-name/te/testkube/package.nix
+++ b/pkgs/by-name/te/testkube/package.nix
@@ -5,16 +5,16 @@
 }:
 buildGoModule rec {
  pname = "testkube";
-  version = "2.1.88";
+  version = "2.1.90";

  src = fetchFromGitHub {
    owner = "kubeshop";
    repo = "testkube";
    rev = "v${version}";
-    hash = "sha256-HHGY6tCB9e7RRnv9oK33Ys7kWpeDNHZkBk5RMKI1vLA=";
+    hash = "sha256-aFe+AcW8mRcPDcT4jTpDrRn/8ROT6WSu3DO0penba6c=";
  };

-  vendorHash = "sha256-Dqqelz1pgLbJX2IuYfQ1HoUYkPQhzJ5A+1+XLCzFdxo=";
+  vendorHash = "sha256-XkjZIHUH5VtYxdvHSVlulX+pFxcAaKX/wTK4g233mq4=";

  ldflags = [
    "-X main.version=${version}"
--- a/pkgs/by-name/vi/vitess/package.nix
+++ b/pkgs/by-name/vi/vitess/package.nix
@@ -2,16 +2,16 @@

 buildGoModule rec {
  pname = "vitess";
-  version = "21.0.1";
+  version = "21.0.3";

  src = fetchFromGitHub {
    owner = "vitessio";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-UtacNZswbvkb78l5BITRorNtiZRMoJlWr0waimCvDFo=";
+    hash = "sha256-ZSxshQF84DjMQsurYhcMObPzzfT63oj8c5Pt9f9N+5Q=";
  };

-  vendorHash = "sha256-ash8IzT3mw7cpbkX/TU+lnIS7pSjaiFXuLbloZhuCBg=";
+  vendorHash = "sha256-S8hYoP8SU4bKkYLTAcF5Al74gSw+b1oxnuaV1dZSyXA=";

  buildInputs = [ sqlite ];

--- a/pkgs/by-name/wa/wallust/package.nix
+++ b/pkgs/by-name/wa/wallust/package.nix
@@ -8,7 +8,7 @@
  installShellFiles,
 }:
 let
-  version = "3.1.0";
+  version = "3.2.0";
 in
 rustPlatform.buildRustPackage {
  pname = "wallust";
@@ -19,11 +19,11 @@ rustPlatform.buildRustPackage {
    owner = "explosion-mental";
    repo = "wallust";
    rev = version;
-    hash = "sha256-Tad+zyhmTr734GEW0A4SNrfWzqcL0gLFsM6MoMrV17k=";
+    hash = "sha256-71vLHuzLcNTvwE7j6iIQZJWD18IQnA0OwF/cOAZCLL8=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-Kd+03yERyTxBJ5GSVQQqY4PxV7DfE1REeh43RpSfJNo=";
+  cargoHash = "sha256-TxlGzfupx9661T8nGvSxurz9cxc9C3udOnoU3PXVCdQ=";

  nativeBuildInputs = [
    makeWrapper
--- a/pkgs/by-name/wa/wazero/package.nix
+++ b/pkgs/by-name/wa/wazero/package.nix
@@ -8,13 +8,13 @@

 buildGoModule rec {
  pname = "wazero";
-  version = "1.8.2";
+  version = "1.9.0";

  src = fetchFromGitHub {
    owner = "tetratelabs";
    repo = "wazero";
    rev = "v${version}";
-    hash = "sha256-pU5Pnh9E16fqhN1zNhEWS3CiK8dD2ilHT+JUc2fekPU=";
+    hash = "sha256-yxnHLc0PFxh8NRBgK2hvhKaxRM1w3IZ9TnfJM0+uadg=";
  };

  vendorHash = null;
--- a/pkgs/by-name/wg/wgcf/package.nix
+++ b/pkgs/by-name/wg/wgcf/package.nix
@@ -6,18 +6,18 @@

 buildGoModule rec {
  pname = "wgcf";
-  version = "2.2.24";
+  version = "2.2.25";

  src = fetchFromGitHub {
    owner = "ViRb3";
    repo = pname;
    tag = "v${version}";
-    hash = "sha256-BtZvR+dZzauByQR5+VWzh6tOgAQV1sXfr0ThOy05uRo=";
+    hash = "sha256-XlQ75sjMjwi7gBWHlKyYjfdtBhEw86cSH2bSHVP/qKo=";
  };

  subPackages = ".";

-  vendorHash = "sha256-txE00e8n9JJ89G1Exp/k8LTv36+MkGduCjqL7mHXuoQ=";
+  vendorHash = "sha256-lUC6m8nFXYUD1DJ3ODOCJ31ww0sdv2CDm6K/RAJWdWQ=";

  meta = with lib; {
    description = "Cross-platform, unofficial CLI for Cloudflare Warp";
--- a/pkgs/development/compilers/llvm/default.nix
+++ b/pkgs/development/compilers/llvm/default.nix
@@ -32,9 +32,9 @@ let
    "19.1.7".officialRelease.sha256 = "sha256-cZAB5vZjeTsXt9QHbP5xluWNQnAHByHtHnAhVDV0E6I=";
    "20.1.0-rc2".officialRelease.sha256 = "sha256-lBx+MWfYBM6XSJozacALMGlo0DUUWqnsBQyO8lDljSo=";
    "21.0.0-git".gitRelease = {
-      rev = "ef9f0b3c414a5d55e694829514d7b2ff8736d3c3";
-      rev-version = "21.0.0-unstable-2025-02-17";
-      sha256 = "sha256-EpMIADP2aIY68Ys1/Sl6hg1ew0An9ik0c17anxBEl1w=";
+      rev = "4d928d5b5858de18f47f68c0d309dafd24cea875";
+      rev-version = "21.0.0-unstable-2025-02-23";
+      sha256 = "sha256-wR/PuKdQhCVC0ONnJ/KUIcE6fUSkm0ZEeyhF4B9ZFA4=";
    };
  } // llvmVersions;

--- a/pkgs/development/cuda-modules/cuda/extension.nix
+++ b/pkgs/development/cuda-modules/cuda/extension.nix
@@ -18,6 +18,7 @@ let
    "12.3" = "12.3.0";
    "12.4" = "12.4.0";
    "12.6" = "12.6.0";
+    "12.8" = "12.8.0";
  };

  # Check if the current CUDA version is supported.
--- a/pkgs/development/cuda-modules/cuda/manifests/feature_12.8.0.json
+++ b/pkgs/development/cuda-modules/cuda/manifests/feature_12.8.0.json
--- a/pkgs/development/cuda-modules/cuda/manifests/redistrib_12.8.0.json
+++ b/pkgs/development/cuda-modules/cuda/manifests/redistrib_12.8.0.json
--- a/pkgs/development/cuda-modules/cudatoolkit/releases.nix
+++ b/pkgs/development/cuda-modules/cudatoolkit/releases.nix
@@ -99,4 +99,10 @@
    url = "https://developer.download.nvidia.com/compute/cuda/12.6.0/local_installers/cuda_12.6.0_560.28.03_linux.run";
    sha256 = "sha256-MasEOU5psU3YZW4rRMKHfbGg6Jjf+KdUakxihDgQG5Q=";
  };
+
+  "12.8" = {
+    version = "12.8.0";
+    url = "https://developer.download.nvidia.com/compute/cuda/12.8.0/local_installers/cuda_12.8.0_570.86.10_linux.run";
+    sha256 = "sha256-YQhn3NbZTE42xJJPHQG52yjsCBZOivbHZPIbhCAGlfg=";
+  };
 }
--- a/pkgs/development/cuda-modules/gpus.nix
+++ b/pkgs/development/cuda-modules/gpus.nix
@@ -184,4 +184,58 @@
    dontDefaultAfter = null;
    maxCudaVersion = null;
  }
+  {
+    # NVIDIA B100
+    archName = "Blackwell";
+    computeCapability = "10.0";
+    isJetson = false;
+    minCudaVersion = "12.8";
+    dontDefaultAfter = null;
+    maxCudaVersion = null;
+  }
+  {
+    # NVIDIA B100 Accelerated
+    archName = "Blackwell";
+    computeCapability = "10.0a";
+    isJetson = false;
+    minCudaVersion = "12.8";
+    dontDefaultAfter = null;
+    maxCudaVersion = null;
+  }
+  {
+    # NVIDIA Blackwell
+    archName = "Blackwell";
+    computeCapability = "10.1";
+    isJetson = false;
+    minCudaVersion = "12.8";
+    dontDefaultAfter = null;
+    maxCudaVersion = null;
+  }
+  {
+    # NVIDIA Blackwell Accelerated
+    archName = "Blackwell";
+    computeCapability = "10.1a";
+    isJetson = false;
+    minCudaVersion = "12.8";
+    dontDefaultAfter = null;
+    maxCudaVersion = null;
+  }
+  {
+    # NVIDIA GeForce RTX 5090 (GB202), RTX 5080 (GB203), RTX 5070 (GB205)
+    archName = "Blackwell";
+    computeCapability = "12.0";
+    isJetson = false;
+    minCudaVersion = "12.8";
+    dontDefaultAfter = null;
+    maxCudaVersion = null;
+  }
+  {
+    # NVIDIA Blackwell Accelerated
+    archName = "Blackwell";
+    computeCapability = "12.0a";
+    isJetson = false;
+    minCudaVersion = "12.8";
+    dontDefaultAfter = null;
+    maxCudaVersion = null;
+  }
 ]
--- a/pkgs/development/cuda-modules/nvcc-compatibilities.nix
+++ b/pkgs/development/cuda-modules/nvcc-compatibilities.nix
@@ -98,7 +98,8 @@ let
    # No changes from 12.2 to 12.3
    "12.3" = attrs."12.2";

-    # No changes from 12.2 to 12.3
+    # Added support for Clang 17 and GCC 13
+    # https://docs.nvidia.com/cuda/archive/12.4.0/cuda-installation-guide-linux/index.html#host-compiler-support-policy
    "12.4" = attrs."12.3" // {
      clangMaxMajorVersion = "17";
      gccMaxMajorVersion = "13";
@@ -110,6 +111,12 @@ let
      clangMaxMajorVersion = "18";
    };

+    # Added support for Clang 19 and GCC 14
+    # https://docs.nvidia.com/cuda/archive/12.8.0/cuda-installation-guide-linux/index.html#host-compiler-support-policy
+    "12.8" = attrs."12.6" // {
+      clangMaxMajorVersion = "19";
+      gccMaxMajorVersion = "14";
+    };
  };
 in
 attrs
--- a/pkgs/development/python-modules/atproto/default.nix
+++ b/pkgs/development/python-modules/atproto/default.nix
@@ -0,0 +1,107 @@
+{
+  lib,
+  fetchFromGitHub,
+  buildPythonPackage,
+  pythonOlder,
+  nix-update-script,
+
+  # build-system
+  poetry-core,
+  poetry-dynamic-versioning,
+
+  # dependencies
+  click,
+  cryptography,
+  dnspython,
+  httpx,
+  libipld,
+  pydantic,
+  typing-extensions,
+  websockets,
+
+  # nativeCheckInputs
+  pytestCheckHook,
+  pytest-asyncio,
+  coverage,
+}:
+
+buildPythonPackage rec {
+  pname = "atproto";
+  version = "0.0.59";
+  format = "pyproject";
+  disabled = pythonOlder "3.8";
+
+  # use GitHub, pypi does not include tests
+  src = fetchFromGitHub {
+    owner = "MarshalX";
+    repo = "atproto";
+    tag = "v${version}";
+    hash = "sha256-Q+ZJMbchz3u7kXAR9fJpzJd6Zdc44LkntPmEE7IeW6A=";
+  };
+
+  POETRY_DYNAMIC_VERSIONING_BYPASS = version;
+
+  build-system = [
+    poetry-core
+    poetry-dynamic-versioning
+  ];
+
+  dependencies = [
+    click
+    cryptography
+    dnspython
+    httpx
+    libipld
+    pydantic
+    typing-extensions
+    websockets
+  ];
+
+  pythonRelaxDeps = [
+    "websockets"
+  ];
+
+  nativeCheckInputs = [
+    pytestCheckHook
+    pytest-asyncio
+    coverage
+  ];
+
+  disabledTestPaths = [
+    # the required `_PATH_TO_LEXICONS` is outside the package tree
+    "tests/test_atproto_lexicon/test_lexicon_parser.py"
+    # touches network
+    "tests/test_atproto_identity/test_atproto_data.py"
+    "tests/test_atproto_identity/test_async_atproto_data.py"
+    "tests/test_atproto_identity/test_did_resolver.py"
+    "tests/test_atproto_identity/test_async_did_resolver.py"
+    "tests/test_atproto_identity/test_did_resolver_cache.py"
+    "tests/test_atproto_identity/test_async_did_resolver_cache.py"
+    "tests/test_atproto_identity/test_handle_resolver.py"
+    "tests/test_atproto_identity/test_async_handle_resolver.py"
+    "tests/test_atproto_server/auth/test_custom_feed_auth.py"
+  ];
+
+  pythonImportsCheck = [
+    "atproto"
+    "atproto_cli"
+    "atproto_client"
+    "atproto_codegen"
+    "atproto_core"
+    "atproto_crypto"
+    "atproto_firehose"
+    "atproto_identity"
+    "atproto_lexicon"
+    "atproto_server"
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "AT Protocol (Bluesky) SDK for Python";
+    homepage = "https://github.com/MarshalX/atproto";
+    changelog = "https://github.com/MarshalX/atproto/blob/v${version}/CHANGES.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ vji ];
+  };
+}
--- a/pkgs/development/python-modules/libipld/default.nix
+++ b/pkgs/development/python-modules/libipld/default.nix
@@ -0,0 +1,68 @@
+{
+  lib,
+  fetchPypi,
+  buildPythonPackage,
+  pythonOlder,
+  rustPlatform,
+  nix-update-script,
+
+  # build-system
+  maturin,
+
+  # nativeCheckInputs
+  pytestCheckHook,
+  pytest-benchmark,
+  pytest-codspeed,
+  pytest-xdist,
+}:
+
+buildPythonPackage rec {
+  pname = "libipld";
+  version = "3.0.1";
+  format = "pyproject";
+  disabled = pythonOlder "3.8";
+
+  # use pypi, GitHub does not include Cargo.lock
+  src = fetchPypi {
+    inherit pname version;
+    hash = "sha256-KXB1LecOX9ysRkaQDN76oNygjbm11ZxAtUltmeO/+mQ=";
+  };
+
+  cargoDeps = rustPlatform.fetchCargoVendor {
+    inherit src;
+    hash = "sha256-V/UGTO+VEBtv5gwKR/fZmmhbeYILsIVc7Mq/Rl6E4Dw=";
+  };
+
+  build-system = [
+    maturin
+  ];
+
+  nativeBuildInputs = with rustPlatform; [
+    cargoSetupHook
+    maturinBuildHook
+  ];
+
+  nativeCheckInputs = [
+    pytestCheckHook
+    pytest-benchmark
+    pytest-codspeed
+    pytest-xdist
+  ];
+
+  disabledTests = [
+    # touches network
+    "test_decode_car"
+  ];
+
+  pythonImportsCheck = [ "libipld" ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Fast Python library to work with IPLD: DAG-CBOR, CID, CAR, multibase";
+    homepage = "https://github.com/MarshalX/python-libipld";
+    changelog = "https://github.com/MarshalX/python-libipld/blob/v${version}/CHANGES.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ vji ];
+  };
+}
--- a/pkgs/development/tools/ocaml/js_of_ocaml/compiler-wasm.nix
+++ b/pkgs/development/tools/ocaml/js_of_ocaml/compiler-wasm.nix
@@ -0,0 +1,41 @@
+{
+  lib,
+  buildDunePackage,
+  binaryen,
+  cmdliner,
+  js_of_ocaml-compiler,
+  menhir,
+  menhirLib,
+  ppxlib,
+  sedlex,
+  yojson,
+}:
+
+buildDunePackage {
+  pname = "wasm_of_ocaml-compiler";
+  inherit (js_of_ocaml-compiler) version src;
+  minimalOCamlVersion = "4.12";
+
+  nativeBuildInputs = [
+    binaryen
+    menhir
+  ];
+
+  buildInputs = [
+    cmdliner
+    ppxlib
+  ];
+
+  propagatedBuildInputs = [
+    js_of_ocaml-compiler
+    menhirLib
+    sedlex
+    yojson
+  ];
+
+  meta = js_of_ocaml-compiler.meta // {
+    description = "Compiler from OCaml bytecode to WebAssembly";
+    mainProgram = "wasm_of_ocaml";
+    maintainers = [ lib.maintainers.stepbrobd ];
+  };
+}
--- a/pkgs/servers/home-assistant/custom-components/versatile_thermostat/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/versatile_thermostat/package.nix
@@ -8,13 +8,13 @@
 buildHomeAssistantComponent rec {
  owner = "jmcollin78";
  domain = "versatile_thermostat";
-  version = "7.2.3";
+  version = "7.2.4";

  src = fetchFromGitHub {
    inherit owner;
    repo = domain;
    rev = "refs/tags/${version}";
-    hash = "sha256-OYqN8xdNl7A5pxSKR8PeKRQ54RARo8JKILlv+cqSYpE=";
+    hash = "sha256-djrhF4BMjQNYHAQNUobqcN5M+ptA/oEjDRR8ZRbBmH8=";
  };

  passthru.updateScript = gitUpdater { ignoredVersions = "(Alpha|Beta|alpha|beta).*"; };
--- a/pkgs/tools/admin/google-cloud-sdk/components.json
+++ b/pkgs/tools/admin/google-cloud-sdk/components.json
--- a/pkgs/tools/admin/google-cloud-sdk/data.nix
+++ b/pkgs/tools/admin/google-cloud-sdk/data.nix
@@ -1,27 +1,27 @@
 # DO NOT EDIT! This file is generated automatically by update.sh
 { }:
 {
-  version = "506.0.0";
+  version = "511.0.0";
  googleCloudSdkPkgs = {
    x86_64-linux = {
-      url = "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-sdk-506.0.0-linux-x86_64.tar.gz";
-      sha256 = "0mc8mbqgg3mrid7xvyhhlcmwpi35d887fad3avbbffd4xf9l6spz";
+      url = "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-sdk-511.0.0-linux-x86_64.tar.gz";
+      sha256 = "10ylljpr3xqf6n58gknfbhabgvhg97agbvnxbaqmi0jv4aqkqbzx";
    };
    x86_64-darwin = {
-      url = "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-sdk-506.0.0-darwin-x86_64.tar.gz";
-      sha256 = "1mvhynl775jv1x59b60ka1bz8jnb3cr96mck678xc03wr8vqb1ds";
+      url = "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-sdk-511.0.0-darwin-x86_64.tar.gz";
+      sha256 = "0a3g1ic19843cg79lfalngzxqygvw8m6w5lkp3qzr9gx4pcb8jsn";
    };
    aarch64-linux = {
-      url = "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-sdk-506.0.0-linux-arm.tar.gz";
-      sha256 = "16yg58ijb89hfn5sg7bdayh3dj9xcvv318r9bil3qy2g1h3m8373";
+      url = "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-sdk-511.0.0-linux-arm.tar.gz";
+      sha256 = "05k0yqyyfb8ln9l9zq3b3ar83k0dxj5mm47iazrj3lqvjsbk27r7";
    };
    aarch64-darwin = {
-      url = "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-sdk-506.0.0-darwin-arm.tar.gz";
-      sha256 = "0hpv0z4hg1rbgac8vpayxfgl2xxlp63yyk78b6qjfnwcnpv0v98m";
+      url = "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-sdk-511.0.0-darwin-arm.tar.gz";
+      sha256 = "0kwjfx61v1m5l8b5nxyzbr9igswr8bjbs6sh8az5mhlv9djsisfl";
    };
    i686-linux = {
-      url = "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-sdk-506.0.0-linux-x86.tar.gz";
-      sha256 = "1bbjvcg2smnh19985g9zc8cjgm6dnkpg5wvnspz7hvjdr1c5qqc8";
+      url = "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-sdk-511.0.0-linux-x86.tar.gz";
+      sha256 = "1rwc7f4mx6chs38jgmcqy726k1bmzxzwki19zbnj2la1mxr6ic34";
    };
  };
 }
--- a/pkgs/tools/networking/flannel/default.nix
+++ b/pkgs/tools/networking/flannel/default.nix
@@ -7,16 +7,16 @@

 buildGoModule rec {
  pname = "flannel";
-  version = "0.26.3";
+  version = "0.26.4";
  rev = "v${version}";

-  vendorHash = "sha256-OTorRwkCl4CQUDHNxr1A4XmSmPvZij4OqPpg+mPRe68=";
+  vendorHash = "sha256-Fh1GnUQwNO+F9/hzfM+xE1tho8M0NNNveHbWT9TxmjE=";

  src = fetchFromGitHub {
    inherit rev;
    owner = "flannel-io";
    repo = "flannel";
-    sha256 = "sha256-YsrWZpCE79jmJRkpGTuB5D8kw4HEjXG4WzqR3IkRzQU=";
+    sha256 = "sha256-tzwvmoYnWOqqQCGB2+lzxNWyDJkfky/URt61ZK3gp7g=";
  };

  ldflags = [ "-X github.com/flannel-io/flannel/pkg/version.Version=${rev}" ];
--- a/pkgs/tools/networking/iperf/3.nix
+++ b/pkgs/tools/networking/iperf/3.nix
@@ -9,11 +9,11 @@

 stdenv.mkDerivation rec {
  pname = "iperf";
-  version = "3.17.1";
+  version = "3.18";

  src = fetchurl {
    url = "https://downloads.es.net/pub/iperf/iperf-${version}.tar.gz";
-    hash = "sha256-hEBMqEMbWV6GxHPY8j2LsQKBAAHxX+r2EO/9OzGHiKo=";
+    hash = "sha256-wGGBdVFDMedmUiUA4gyUv7KTtEJOsn1yB/tCe4jSC6s=";
  };

  buildInputs = [ openssl ] ++ lib.optionals stdenv.hostPlatform.isLinux [ lksctp-tools ];
--- a/pkgs/tools/networking/veilid/Cargo.lock
+++ b/pkgs/tools/networking/veilid/Cargo.lock
--- a/pkgs/tools/networking/veilid/default.nix
+++ b/pkgs/tools/networking/veilid/default.nix
@@ -15,13 +15,13 @@

 rustPlatform.buildRustPackage rec {
  pname = "veilid";
-  version = "0.4.1";
+  version = "0.4.3";

  src = fetchFromGitLab {
    owner = "veilid";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-/RdPq2rHs+lfB3odwO7yRGFi3j0INdJvbWccTsGO54g=";
+    hash = "sha256-D6mfYiUj9W+2l/is/KkzwIQ1Erbapf5dl4uWGKd42r4=";
  };

  cargoLock = {
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -2968,6 +2968,7 @@ with pkgs;
  cudaPackages_12_3 = callPackage ./cuda-packages.nix { cudaVersion = "12.3"; };
  cudaPackages_12_4 = callPackage ./cuda-packages.nix { cudaVersion = "12.4"; };
  cudaPackages_12_6 = callPackage ./cuda-packages.nix { cudaVersion = "12.6"; };
+  cudaPackages_12_8 = callPackage ./cuda-packages.nix { cudaVersion = "12.8"; };
  cudaPackages_12 = cudaPackages_12_4; # Latest supported by cudnn

  cudaPackages = recurseIntoAttrs cudaPackages_12;
--- a/pkgs/top-level/ocaml-packages.nix
+++ b/pkgs/top-level/ocaml-packages.nix
@@ -2012,6 +2012,8 @@ let

    wasm = callPackage ../development/ocaml-modules/wasm { };

+    wasm_of_ocaml-compiler = callPackage ../development/tools/ocaml/js_of_ocaml/compiler-wasm.nix { };
+
    wayland = callPackage ../development/ocaml-modules/wayland { };

    webbrowser = callPackage ../development/ocaml-modules/webbrowser { };
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -998,6 +998,8 @@ self: super: with self; {

  atomman = callPackage ../development/python-modules/atomman { };

+  atproto = callPackage ../development/python-modules/atproto { };
+
  atpublic = callPackage ../development/python-modules/atpublic { };

  atsim-potentials = callPackage ../development/python-modules/atsim-potentials { };
@@ -7407,6 +7409,8 @@ self: super: with self; {
    inherit python;
  })).python;

+  libipld = callPackage ../development/python-modules/libipld { };
+
  libkeepass = callPackage ../development/python-modules/libkeepass { };

  libknot = callPackage ../development/python-modules/libknot { };