Merge 77ac76b5ca into haskell-updates

2026-07-18 14:41:18 +00:00 · 2025-09-24 00:20:03 +00:00
parent e2bb0d4103 77ac76b5ca
commit a65ddea965
265 changed files with 1612 additions and 1472 deletions
--- a/doc/build-helpers/images/appimagetools.section.md
+++ b/doc/build-helpers/images/appimagetools.section.md
@@ -110,12 +110,12 @@ appimageTools.wrapType2 {
  extraPkgs = pkgs: [ pkgs.at-spi2-core ];

  extraInstallCommands = ''
-    mv $out/bin/${pname}-${version} $out/bin/${pname}
+    mv $out/bin/irccloud-${version} $out/bin/irccloud
    install -m 444 -D ${appimageContents}/irccloud.desktop $out/share/applications/irccloud.desktop
    install -m 444 -D ${appimageContents}/usr/share/icons/hicolor/512x512/apps/irccloud.png \
      $out/share/icons/hicolor/512x512/apps/irccloud.png
    substituteInPlace $out/share/applications/irccloud.desktop \
-      --replace-fail 'Exec=AppRun' 'Exec=${pname}'
+      --replace-fail 'Exec=AppRun' 'Exec=irccloud'
  '';
 }
 ```
@@ -125,11 +125,16 @@ appimageTools.wrapType2 {
 The argument passed to `extract` can also contain a `postExtract` attribute, which allows you to execute additional commands after the files are extracted from the AppImage.
 `postExtract` must be a string with commands to run.

+:::{.warning}
+When specifying `postExtract`, you should use `appimageTools.wrapAppImage` instead of `appimageTools.wrapType2`.
+Otherwise `wrapType2` will extract the AppImage contents without respecting the `postExtract` instructions.
+:::
+
 :::{.example #ex-extracting-appimage-with-postextract}

 # Extracting an AppImage to install extra files, using `postExtract`

-This is a rewrite of [](#ex-extracting-appimage) to use `postExtract`.
+This is a rewrite of [](#ex-extracting-appimage) to use `postExtract` and `wrapAppImage`.

 ```nix
 { appimageTools, fetchurl }:
@@ -145,21 +150,26 @@ let
  appimageContents = appimageTools.extract {
    inherit pname version src;
    postExtract = ''
-      substituteInPlace $out/irccloud.desktop --replace-fail 'Exec=AppRun' 'Exec=${pname}'
+      substituteInPlace $out/irccloud.desktop --replace-fail 'Exec=AppRun' 'Exec=irccloud'
    '';
  };
 in
-appimageTools.wrapType2 {
-  inherit pname version src;
+appimageTools.wrapAppImage {
+  inherit pname version;
+
+  src = appimageContents;

  extraPkgs = pkgs: [ pkgs.at-spi2-core ];

  extraInstallCommands = ''
-    mv $out/bin/${pname}-${version} $out/bin/${pname}
+    mv $out/bin/irccloud-${version} $out/bin/irccloud
    install -m 444 -D ${appimageContents}/irccloud.desktop $out/share/applications/irccloud.desktop
    install -m 444 -D ${appimageContents}/usr/share/icons/hicolor/512x512/apps/irccloud.png \
      $out/share/icons/hicolor/512x512/apps/irccloud.png
  '';
+
+  # specify src archive for nix-update
+  passthru.src = src;
 }
 ```

--- a/maintainers/team-list.nix
+++ b/maintainers/team-list.nix
@@ -843,8 +843,12 @@ with lib.maintainers;

  marketing = {
    members = [
+      djacu
+      flyfloh
+      thilobillerbeck
      tomberek
    ];
+    githubTeams = [ "marketing-team" ];
    scope = "Marketing of Nix/NixOS/nixpkgs.";
    shortName = "Marketing";
    enableFeatureFreezePing = true;
--- a/nixos/modules/services/networking/hostapd.nix
+++ b/nixos/modules/services/networking/hostapd.nix
@@ -274,7 +274,7 @@ in
              channel = mkOption {
                default = 0;
                example = 11;
-                type = types.ints.positive;
+                type = types.ints.unsigned;
                description = ''
                  The channel to operate on. Use 0 to enable ACS (Automatic Channel Selection).
                  Beware that not every device supports ACS in which case {command}`hostapd`
--- a/nixos/modules/services/web-apps/miniflux.nix
+++ b/nixos/modules/services/web-apps/miniflux.nix
@@ -17,7 +17,7 @@ let
    ;
  cfg = config.services.miniflux;

-  defaultAddress = "localhost:8080";
+  boolToInt = b: if b then 1 else 0;

  pgbin = "${config.services.postgresql.package}/bin";
  preStart = pkgs.writeScript "miniflux-pre-start" ''
@@ -44,25 +44,53 @@ in
      };

      config = mkOption {
-        type =
-          with types;
-          attrsOf (oneOf [
-            str
-            int
-          ]);
-        example = literalExpression ''
-          {
-            CLEANUP_FREQUENCY = 48;
-            LISTEN_ADDR = "localhost:8080";
-          }
-        '';
+        type = types.submodule {
+          freeformType =
+            with types;
+            attrsOf (oneOf [
+              str
+              int
+            ]);
+          options = {
+            LISTEN_ADDR = mkOption {
+              type = types.str;
+              default = "localhost:8080";
+              description = ''
+                Address to listen on. Use absolute path for a Unix socket.
+                Multiple addresses can be specified, separated by commas.
+              '';
+              example = "127.0.0.1:8080, 127.0.0.1:8081";
+            };
+            DATABASE_URL = mkOption {
+              type = types.str;
+              defaultText = "user=miniflux host=/run/postgresql dbname=miniflux";
+              description = ''
+                Postgresql connection parameters.
+                See [lib/pq](https://pkg.go.dev/github.com/lib/pq#hdr-Connection_String_Parameters) for more details.
+              '';
+            };
+            RUN_MIGRATIONS = mkOption {
+              type = with types; coercedTo bool boolToInt int;
+              default = true;
+              description = "Run database migrations.";
+            };
+            CREATE_ADMIN = mkOption {
+              type = with types; coercedTo bool boolToInt int;
+              default = true;
+              description = "Create an admin user from environment variables.";
+            };
+            WATCHDOG = mkOption {
+              type = with types; coercedTo bool boolToInt int;
+              default = true;
+              description = "Enable or disable Systemd watchdog.";
+            };
+          };
+        };
+        default = { };
        description = ''
          Configuration for Miniflux, refer to
          <https://miniflux.app/docs/configuration.html>
          for documentation on the supported values.
-
-          Correct configuration for the database is already provided.
-          By default, listens on ${defaultAddress}.
        '';
      };

@@ -87,11 +115,7 @@ in
      }
    ];
    services.miniflux.config = {
-      LISTEN_ADDR = mkDefault defaultAddress;
      DATABASE_URL = lib.mkIf cfg.createDatabaseLocally "user=miniflux host=/run/postgresql dbname=miniflux";
-      RUN_MIGRATIONS = 1;
-      CREATE_ADMIN = lib.mkDefault 1;
-      WATCHDOG = 1;
    };

    services.postgresql = lib.mkIf cfg.createDatabaseLocally {
--- a/nixos/modules/tasks/filesystems/bcachefs.nix
+++ b/nixos/modules/tasks/filesystems/bcachefs.nix
@@ -231,6 +231,10 @@ in
    lib.mkMerge [
      {
        inherit assertions;
+
+        # Bcachefs upstream recommends using the latest kernel
+        boot.kernelPackages = lib.mkDefault pkgs.linuxPackages_latest;
+
        # needed for systemd-remount-fs
        system.fsPackages = [ cfg.package ];
        services.udev.packages = [ cfg.package ];
--- a/pkgs/applications/audio/mopidy/tidal.nix
+++ b/pkgs/applications/audio/mopidy/tidal.nix
@@ -7,14 +7,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "Mopidy-Tidal";
-  version = "0.3.10";
+  version = "0.3.11";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "tehkillerbee";
    repo = "mopidy-tidal";
    tag = "v${version}";
-    hash = "sha256-hUYT9c4bEPfUU3f2ywK0MO0jDDLmM+3hp17XH4XJQt8=";
+    hash = "sha256-wqx/30UQVm1fEwP/bZeW7TtzGfn/wI0klQnFr9E3AOs=";
  };

  build-system = [ python3Packages.poetry-core ];
--- a/pkgs/applications/editors/rednotebook/default.nix
+++ b/pkgs/applications/editors/rednotebook/default.nix
@@ -16,14 +16,14 @@

 buildPythonApplication rec {
  pname = "rednotebook";
-  version = "2.39";
+  version = "2.41";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "jendrikseipp";
    repo = "rednotebook";
    tag = "v${version}";
-    sha256 = "sha256-H7Ub4dCJQa4Y3DNBzeIYWlNkpYftezY2MNWokw8ocoA=";
+    sha256 = "sha256-sWfazIeROc3Pf4pUaUdcF00A5AV7bxzwI3R6eoSQkto=";
  };

  # We have not packaged tests.
--- a/pkgs/applications/editors/vscode/extensions/betterthantomorrow.calva/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/betterthantomorrow.calva/default.nix
@@ -11,8 +11,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "calva";
    publisher = "betterthantomorrow";
-    version = "2.0.525";
-    hash = "sha256-pTRyDsgxd9o8Y9p2rsZTT+uG6+mSBBM/k4nczvlYGrM=";
+    version = "2.0.528";
+    hash = "sha256-YnY15/I0bJ14J4KDU7AI6Y2lE7SWug/yoH0X+upqKzA=";
  };

  nativeBuildInputs = [
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -262,8 +262,8 @@ let
        mktplcRef = {
          name = "ng-template";
          publisher = "Angular";
-          version = "20.2.1";
-          hash = "sha256-oemc2lJDPsWWG+tcJAk8u5lSGUpIoI6K/fE/TZC5bWw=";
+          version = "20.2.2";
+          hash = "sha256-2I5Pmd05zNGjM15tFo2yw6AGUKp3zxufVcoe4oSAO5U=";
        };
        meta = {
          changelog = "https://marketplace.visualstudio.com/items/Angular.ng-template/changelog";
@@ -1256,10 +1256,6 @@ let

      dendron.dendron = callPackage ./dendron.dendron { };

-      dendron.dendron-markdown-preview-enhanced =
-        callPackage ./dendron.dendron-markdown-preview-enhanced
-          { };
-
      dendron.dendron-paste-image = callPackage ./dendron.dendron-paste-image { };

      dendron.dendron-snippet-maker = callPackage ./dendron.dendron-snippet-maker { };
@@ -1441,8 +1437,8 @@ let
          # semver scheme, contrary to preview versions which are listed on
          # the VSCode Marketplace and use a calver scheme. We should avoid
          # using preview versions, because they expire after two weeks.
-          version = "17.3.4";
-          hash = "sha256-HrIvJ0+E9lL6wa6lQSjvqdiQiVVCcKAJIPp+x8x/QMc=";
+          version = "17.4.1";
+          hash = "sha256-H14LJ1diURp6dtZE5djSmvI7aJFBnwVAj7Qi7VFf5oo=";
        };
        meta = {
          changelog = "https://marketplace.visualstudio.com/items/eamodio.gitlens/changelog";
@@ -1588,8 +1584,8 @@ let
        mktplcRef = {
          name = "vscode-great-icons";
          publisher = "emmanuelbeziat";
-          version = "2.1.119";
-          hash = "sha256-mE9VU5K/+NLjHk/XQ7fb+wZ9FNAfsIwmPu7IAoei8Iw=";
+          version = "2.1.120";
+          hash = "sha256-m5CPmilGF1jguhTZhPAUMrfzU4HU5SkiWeGOMAD+D/Y=";
        };
        meta = {
          license = lib.licenses.mit;
@@ -2307,8 +2303,8 @@ let
        mktplcRef = {
          name = "vscode-vibrancy-continued";
          publisher = "illixion";
-          version = "1.1.59";
-          hash = "sha256-ClzUxKdiYZqAlmXJ3W54kJddLRov5XKo0t8PPWA/Qq8=";
+          version = "1.1.60";
+          hash = "sha256-GHAyC9ScrBV/huVXXrgbubrBmKIzUhYmCL2+GqoOjqc=";
        };
        meta = {
          downloadPage = "https://marketplace.visualstudio.com/items?itemName=illixion.vscode-vibrancy-continued";
@@ -3661,8 +3657,8 @@ let
        mktplcRef = {
          name = "ocaml-platform";
          publisher = "ocamllabs";
-          version = "1.32.0";
-          hash = "sha256-tLGHAEvKy+83PcF35zMABV7HtdXZGwCBdhMB+EG1El0=";
+          version = "1.32.3";
+          hash = "sha256-KUzLrt7y3I6szpWVGk0NtBfXncw6ovNAkm1HyHj+MDk=";
        };
      };

@@ -3862,8 +3858,8 @@ let
        mktplcRef = {
          publisher = "redhat";
          name = "java";
-          version = "1.44.0";
-          hash = "sha256-KlB0YlAIdVMuLzBv5S9DbANBBDQoTog1FC8ykFeTvnM=";
+          version = "1.45.0";
+          hash = "sha256-aLyAU5J+65Cw3UsYey9Y2/bSMWFiz3TNOwBBvjev8dY=";
        };
        buildInputs = [ jdk ];
        meta = {
@@ -3897,6 +3893,8 @@ let

      reditorsupport.r = callPackage ./reditorsupport.r { };

+      reditorsupport.r-syntax = callPackage ./reditorsupport.r-syntax { };
+
      release-candidate.vscode-scheme-repl = callPackage ./release-candidate.vscode-scheme-repl { };

      reloadedextensions.reloaded-cpp = buildVscodeMarketplaceExtension {
@@ -5526,6 +5524,7 @@ let
    _2gua = throw "_2gua is deprecated in favor of 2gua"; # Added 2024-05-29
    _4ops = throw "_4ops is deprecated in favor of 4ops"; # Added 2024-05-29
    Arjun.swagger-viewer = throw "Arjun.swagger-viewer is deprecated in favor of arjun.swagger-viewer"; # Added 2024-05-29
+    dendron.dendron-markdown-preview-enhanced = throw "dendron.dendron-markdown-preview-enhanced has been removed from the VSCode marketplace."; # Added 2025-08-21
    equinusocio.vsc-material-theme = throw "'equinusocio.vsc-material-theme' has been removed due to security concerns. The extension contained potentially malicious code and was taken down."; # Added 2025-02-28
    equinusocio.vsc-material-theme-icons = throw "'equinusocio.vsc-material-theme-icons' has been removed due to security concerns. The extension contained potentially malicious code and was taken down."; # Added 2025-02-28
    jakebecker.elixir-ls = throw "jakebecker.elixir-ls is deprecated in favor of elixir-lsp.vscode-elixir-ls"; # Added 2024-05-29
--- a/pkgs/applications/editors/vscode/extensions/dendron.dendron-markdown-preview-enhanced/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/dendron.dendron-markdown-preview-enhanced/default.nix
@@ -1,17 +0,0 @@
-{ lib, vscode-utils }:
-
-vscode-utils.buildVscodeMarketplaceExtension {
-  mktplcRef = {
-    name = "dendron-markdown-preview-enhanced";
-    publisher = "dendron";
-    version = "0.10.57";
-    hash = "sha256-uJmdsC+nKCkAJVH+szNepPcyfHD4ZQ83on195jjqZig=";
-  };
-  meta = {
-    description = "SUPER POWERFUL markdown extension for Visual Studio Code to bring you a wonderful markdown writing experience";
-    downloadPage = "https://marketplace.visualstudio.com/items?itemName=dendron.dendron-markdown-preview-enhanced";
-    homepage = "https://github.com/dendronhq/markdown-preview-enhanced";
-    license = lib.licenses.ncsa;
-    maintainers = [ lib.maintainers.ivyfanchiang ];
-  };
-}
--- a/pkgs/applications/editors/vscode/extensions/github.copilot-chat/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/github.copilot-chat/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    publisher = "github";
    name = "copilot-chat";
-    version = "0.30.1";
-    hash = "sha256-itANvwMSzFBPnU4B6erEXO/x3SNlqHygXlTE6jLc+0U=";
+    version = "0.31.0";
+    hash = "sha256-jMy6mjPUxz3p1dvrveZ/9tyn+KZ6rBLJinZMBUUb9QY=";
  };

  meta = {
--- a/pkgs/applications/editors/vscode/extensions/github.copilot/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/github.copilot/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    publisher = "github";
    name = "copilot";
-    version = "1.350.0";
-    hash = "sha256-F675MNhjhg0ZP1CepJA1m6Cb5rRcd1vj9tBeNLqjzA0=";
+    version = "1.372.0";
+    hash = "sha256-1L4zE2waIjI1Z8hYFaeHbnSWX9g31Sre4uDNOiQ2Fz8=";
  };

  meta = {
--- a/pkgs/applications/editors/vscode/extensions/language-packs.nix
+++ b/pkgs/applications/editors/vscode/extensions/language-packs.nix
@@ -13,7 +13,7 @@ let
  buildVscodeLanguagePack =
    {
      language,
-      version ? "1.103.2025080609",
+      version ? "1.104.2025091009",
      hash,
    }:
    buildVscodeMarketplaceExtension {
@@ -41,71 +41,71 @@ in
  # French
  vscode-language-pack-fr = buildVscodeLanguagePack {
    language = "fr";
-    hash = "sha256-EN562YK/mAUpvwuNXL+reLMuh5EdY6TcVJbt7clSK2Q=";
+    hash = "sha256-7/TiCJ+PhrUpCLznMpxN10GpCObi4gclYz87vOsU2yI=";
  };
  # Italian
  vscode-language-pack-it = buildVscodeLanguagePack {
    language = "it";
-    hash = "sha256-gsYvAR3HvqzYzEQDUeJD7Wg4fpk+byUGz1IvQh6+oms=";
+    hash = "sha256-94b/U8yLMlomLx/zi9L/2yOZTb51OIqRgT1Z/xADzG0=";
  };
  # German
  vscode-language-pack-de = buildVscodeLanguagePack {
    language = "de";
-    hash = "sha256-l0lBj1gGGrTqCsjLVamIejbhchIzb7SpZfKed+nT/nQ=";
+    hash = "sha256-jUDGqsXZpHeKr+xgSwNYWKJTKs/3axV7o8iv7xlxP9w=";
  };
  # Spanish
  vscode-language-pack-es = buildVscodeLanguagePack {
    language = "es";
-    hash = "sha256-I6IHTWorrK4QnN+RRHIi4cS/SlxerjbYLhJuJeWzJW4=";
+    hash = "sha256-hXOdM867rympTOJJh3v8y6B6FIez3+jhQa4kqL2p+98=";
  };
  # Russian
  vscode-language-pack-ru = buildVscodeLanguagePack {
    language = "ru";
-    hash = "sha256-Tba4zLqxFLdupIPah2059oA9ZQVzq7Z77pwFAH96CLY=";
+    hash = "sha256-Qt4V5ro1YvZkSkk2mxB/HLXsI3ewmmKor2ZxsMDAHRg=";
  };
  # Chinese (Simplified)
  vscode-language-pack-zh-hans = buildVscodeLanguagePack {
    language = "zh-hans";
-    hash = "sha256-hSHHAh59Kwgm/fG21EMAEHgBuDnin4+3IrCUWSjbGJ8=";
+    hash = "sha256-IBXnZNAorbFVu68UOwaGyVBNyPTILYgEZBy6k/EUNjA=";
  };
  # Chinese (Traditional)
  vscode-language-pack-zh-hant = buildVscodeLanguagePack {
    language = "zh-hant";
-    hash = "sha256-hKZzKPXExkw3FGjE33eHJy8CiIxkQdRreRDHonHdt9A=";
+    hash = "sha256-iy3+HNkRFwJps/hqQMUjQfWxULewhF+sV1qg8BrMmQo=";
  };
  # Japanese
  vscode-language-pack-ja = buildVscodeLanguagePack {
    language = "ja";
-    hash = "sha256-UFhdArcnxzCXr4Ha9B5WGdJ8fV+jqitJYgS7bFdo7qU=";
+    hash = "sha256-wZgMj8mmg8lIxX3JCi2fwS0l3/tSrOWuQpuTsW+J4wg=";
  };
  # Korean
  vscode-language-pack-ko = buildVscodeLanguagePack {
    language = "ko";
-    hash = "sha256-SOu9WXhSy2VOlCuhRlyU2vwrHKAqtacEHqv1jmfVOe0=";
+    hash = "sha256-5GL95M9y60PjgNL7x/9JthV/g6+okoxT0uwmf/qPvqQ=";
  };
  # Czech
  vscode-language-pack-cs = buildVscodeLanguagePack {
    language = "cs";
-    hash = "sha256-AR+88WY5AhN2VCzuiFPR60K4KyO31nxlyI8g8Ya+278=";
+    hash = "sha256-PzhBxDl2X1LStXMHgqMPzl9v7XJ9VuL/8sCsdJ4mFfA=";
  };
  # Portuguese (Brazil)
  vscode-language-pack-pt-br = buildVscodeLanguagePack {
    language = "pt-BR";
-    hash = "sha256-oIdLJqu07BmyDhROvHt0pbsdITkmI+bMlWybuU9kwpU=";
+    hash = "sha256-a8eGCArxLbMdQjpRBtcZJ8xlp9+Mbabiy6/v3/HANTQ=";
  };
  # Turkish
  vscode-language-pack-tr = buildVscodeLanguagePack {
    language = "tr";
-    hash = "sha256-5G3f4mdT29R4ics/ukxgBDZJ8FT0iCe9r4LPfgKjRjc=";
+    hash = "sha256-ZE9RXpV+k/7KcKlpE8AwW+3y2tupARhXTnucKfM304I=";
  };
  # Polish
  vscode-language-pack-pl = buildVscodeLanguagePack {
    language = "pl";
-    hash = "sha256-nhF2DDvPGjOLQid++XxvG3vSU5OSZ3gVrHdujGCsQjA=";
+    hash = "sha256-V6E5BsIRIPkZhq3g7F65/ml02HibeZyIs17R4TtJQU0=";
  };
  # Pseudo Language
  vscode-language-pack-qps-ploc = buildVscodeLanguagePack {
    language = "qps-ploc";
-    hash = "sha256-DpsMvjzXo56RYUPgsctwpdvd7gTiFQSGiZeqZcJZU4k=";
+    hash = "sha256-Tzqd6BJDGSxtxbZodWvBS64FIvxOmP5SaB+iAl3kU5w=";
  };
 }
--- a/pkgs/applications/editors/vscode/extensions/ms-pyright.pyright/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/ms-pyright.pyright/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    publisher = "ms-pyright";
    name = "pyright";
-    version = "1.1.403";
-    hash = "sha256-t5YB1wO76XSnGCG8YKW1HR0aqv+JzefrtSBfVLzuDOU=";
+    version = "1.1.405";
+    hash = "sha256-2UULr/D2ym5kBhbexl6U0r3dugZUuU+ks8FFfCi1A2k=";
  };

  meta = {
--- a/pkgs/applications/editors/vscode/extensions/reditorsupport.r-syntax/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/reditorsupport.r-syntax/default.nix
@@ -0,0 +1,21 @@
+{ lib, vscode-utils }:
+
+vscode-utils.buildVscodeMarketplaceExtension {
+  mktplcRef = {
+    name = "r-syntax";
+    publisher = "REditorSupport";
+    version = "0.1.3";
+    hash = "sha256-grkfkmyERVUkB8kSH+NPd2Mv4WF/h/obw8ebmxPx5zU=";
+  };
+  meta = {
+    changelog = "https://marketplace.visualstudio.com/items/REditorSupport.r-syntax/changelog";
+    description = "R Synxtax Highlight for Visual Studio Code";
+    downloadPage = "https://marketplace.visualstudio.com/items?itemName=REditorSupport.r-syntax";
+    homepage = "https://github.com/REditorSupport/vscode-R-syntax";
+    license = lib.licenses.mit;
+    maintainers = [
+      lib.maintainers.ivyfanchiang
+      lib.maintainers.pandapip1
+    ];
+  };
+}
--- a/pkgs/applications/editors/vscode/extensions/reditorsupport.r/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/reditorsupport.r/default.nix
@@ -35,6 +35,9 @@ vscode-utils.buildVscodeMarketplaceExtension {
    downloadPage = "https://marketplace.visualstudio.com/items?itemName=REditorSupport.r";
    homepage = "https://github.com/REditorSupport/vscode-R";
    license = lib.licenses.mit;
-    maintainers = [ lib.maintainers.pandapip1 ];
+    maintainers = [
+      lib.maintainers.pandapip1
+      lib.maintainers.ivyfanchiang
+    ];
  };
 }
--- a/pkgs/applications/editors/vscode/extensions/tekumara.typos-vscode/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/tekumara.typos-vscode/default.nix
@@ -14,19 +14,19 @@ let
    {
      x86_64-linux = {
        arch = "linux-x64";
-        hash = "sha256-4vZn0n2oQ0Bu1k/mOo5QYON9FyUCnifQWi7rt8v64Qw=";
+        hash = "sha256-wOlZPf43h/xHgmKRxPWuCdqqorft/cV/V1qlSR7/r3Y=";
      };
      aarch64-linux = {
        arch = "linux-arm64";
-        hash = "sha256-L7FproPmOySe3SuLyvaD5hje9/QecRpVgSATSzddD9U=";
+        hash = "sha256-LcNCD3OHq1IREEZ5y9fkCcdtjXBOd5UuhvG833oAx3Q=";
      };
      x86_64-darwin = {
        arch = "darwin-x64";
-        hash = "sha256-fJt5UXPdUSQHD1t1ThArnD2n+1hVpzXJD+CNKzQoaI0=";
+        hash = "sha256-I+2SYCPHXTIrZg2imWRpdj4KbuPcdJ3GQdrxu3bInbs=";
      };
      aarch64-darwin = {
        arch = "darwin-arm64";
-        hash = "sha256-u3H2+nz6lJtMXn38dDnshaJcnoC7cKJg2q2n0nCa0Dc=";
+        hash = "sha256-PaXHB8lMKpKgaOekBPvzmYPsokaR2pZTzJsIcYujS3A=";
      };
    }
    .${system} or (throw "Unsupported system: ${system}");
@@ -38,7 +38,7 @@ vscode-utils.buildVscodeMarketplaceExtension {
    # Please update the corresponding binary (typos-lsp)
    # when updating this extension.
    # See pkgs/by-name/ty/typos-lsp/package.nix
-    version = "0.1.43";
+    version = "0.1.44";
    inherit (extInfo) hash arch;
  };

--- a/pkgs/applications/editors/vscode/extensions/visualjj.visualjj/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/visualjj.visualjj/default.nix
@@ -11,26 +11,26 @@ vscode-utils.buildVscodeMarketplaceExtension {
      sources = {
        "x86_64-linux" = {
          arch = "linux-x64";
-          hash = "sha256-EfUwtKKyoX1/JNoVe3YsfxoLmjHWkLgFHKQqwDMjGMs=";
+          hash = "sha256-cuCxSODDNf2nhiUwgQT5SRugRLYOhq3igsvgP/hzcZE=";
        };
        "x86_64-darwin" = {
          arch = "darwin-x64";
-          hash = "sha256-fZRQIFwDsUsIw9YwsjMhMPeMTOe/JATDBq66yKfJQRU=";
+          hash = "sha256-OQqw/f2gSmFLN9CDn/auxXY6ao/XieAY7XVcI/kf1TA=";
        };
        "aarch64-linux" = {
          arch = "linux-arm64";
-          hash = "sha256-ig80H563Mv0Xs4Jh9Ni8Hn9vXAFYwycqNvSO3JJ3t+8=";
+          hash = "sha256-qMWJS/4afJkSENk+BdaPPAynjEMErT2jjeFAkOSMfZ4=";
        };
        "aarch64-darwin" = {
          arch = "darwin-arm64";
-          hash = "sha256-9D1H/u8YvgCvVcvm/Cy8GqQrutkSj6E7aqZdyX96LDw=";
+          hash = "sha256-cj6cu/uSHflJHKub4LKaqPOMc7EC3Hlzxp7DfDpi9hU=";
        };
      };
    in
    {
      name = "visualjj";
      publisher = "visualjj";
-      version = "0.16.2";
+      version = "0.16.4";
    }
    // sources.${stdenvNoCC.hostPlatform.system}
      or (throw "Unsupported system ${stdenvNoCC.hostPlatform.system}");
--- a/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix
+++ b/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix
@@ -10,11 +10,11 @@
 buildMozillaMach rec {
  pname = "firefox-beta";
  binaryName = pname;
-  version = "144.0b1";
+  version = "144.0b4";
  applicationName = "Firefox Beta";
  src = fetchurl {
    url = "mirror://mozilla/firefox/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "a5a13bcb819523e936dadcb3d31ba6b24905f9b37104afd23ab267caf15d692bb048542b542012bd95048e0fb42aefd48e92bd38b536be9dd273c468c9def428";
+    sha512 = "f49e852eae3c453e4de46cde42f3d23d977a71414e8193b49ceff7816d8aff4d11e915860b6c732a64922bb2b897ff39b9fe9919458eb943ffd03efbc1c75650";
  };

  meta = {
--- a/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix
+++ b/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix
@@ -10,13 +10,13 @@
 buildMozillaMach rec {
  pname = "firefox-devedition";
  binaryName = pname;
-  version = "144.0b1";
+  version = "144.0b4";
  applicationName = "Firefox Developer Edition";
  requireSigning = false;
  branding = "browser/branding/aurora";
  src = fetchurl {
    url = "mirror://mozilla/devedition/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "f50d5ef185f77ab70b43bc52d8d7e5d2e4be731505b8b53fa5a28c18d7e8fb59b4c1d9af3a18b2a2f0a1047133face63ba52991995a848a3c1d956907ef4d926";
+    sha512 = "144a10bc0c2121e22990def70e1b5bcc033a8b8cd7ad433a1b1d5db33599d05142d1f5c1e486f919e7b839849aaf83c6c4287df89f337151b82f220f9bd7fe52";
  };

  # buildMozillaMach sets MOZ_APP_REMOTINGNAME during configuration, but
--- a/pkgs/applications/office/libreoffice/default.nix
+++ b/pkgs/applications/office/libreoffice/default.nix
@@ -130,6 +130,7 @@
  ],
  withFonts ? false,
  withHelp ? true,
+  withJava ? true,
  kdeIntegration ? false,
  variant ? "fresh",
  debugLogging ? variant == "still",
@@ -349,7 +350,6 @@ stdenv.mkDerivation (finalAttrs: {
  '';

  nativeBuildInputs = [
-    ant
    autoconf
    automake
    bison
@@ -359,7 +359,6 @@ stdenv.mkDerivation (finalAttrs: {
    gettext
    gperf
    icu
-    jdk21
    libmysqlclient
    libtool
    libxml2
@@ -374,6 +373,10 @@ stdenv.mkDerivation (finalAttrs: {
  ]
  ++ optionals kdeIntegration [
    qt6.qtbase
+  ]
+  ++ optionals withJava [
+    ant
+    jdk21
  ];

  buildInputs =
@@ -409,7 +412,6 @@ stdenv.mkDerivation (finalAttrs: {
      (harfbuzz.override { withIcu = true; })
      hunspell
      icu
-      jre'
      lcms2
      libGL
      libGLU
@@ -474,6 +476,9 @@ stdenv.mkDerivation (finalAttrs: {
      qt6.qtbase
      kdePackages.kcoreaddons
      kdePackages.kio
+    ]
+    ++ optionals withJava [
+      jre'
    ];

  preConfigure = ''
@@ -516,7 +521,6 @@ stdenv.mkDerivation (finalAttrs: {
    "--without-buildconfig-recorded"

    (lib.withFeature withHelp "help")
-    "--with-beanshell-jar=${bsh}"
    "--with-vendor=NixOS"
    "--disable-report-builder"
    "--disable-online-update"
@@ -524,7 +528,7 @@ stdenv.mkDerivation (finalAttrs: {
    "--enable-dbus"
    "--enable-release-build"
    "--enable-epm"
-    "--with-ant-home=${ant.home}"
+    (lib.withFeature withJava "java")

    # Without these, configure does not finish
    "--without-junit"
@@ -543,7 +547,6 @@ stdenv.mkDerivation (finalAttrs: {
    (lib.withFeature withFonts "fonts")
    "--without-doxygen"

-    "--with-system-beanshell"
    "--with-system-cairo"
    "--with-system-coinmp"
    "--with-system-headers"
@@ -596,6 +599,11 @@ stdenv.mkDerivation (finalAttrs: {
    "--enable-kf6"
    "--enable-qt6"
  ]
+  ++ optionals withJava [
+    "--with-system-beanshell"
+    "--with-ant-home=${ant.home}"
+    "--with-beanshell-jar=${bsh}"
+  ]
  ++ (
    if variant == "fresh" || variant == "collabora" then
      [
@@ -670,7 +678,7 @@ stdenv.mkDerivation (finalAttrs: {

  passthru = {
    inherit srcs;
-    jdk = jre';
+    jdk = if withJava then jre' else null;
    python = python311; # for unoconv
    updateScript = [
      ./update.sh
--- a/pkgs/applications/search/recoll/default.nix
+++ b/pkgs/applications/search/recoll/default.nix
@@ -75,11 +75,11 @@ in

 mkDerivation rec {
  pname = "recoll";
-  version = "1.43.4";
+  version = "1.43.5";

  src = fetchurl {
    url = "https://www.recoll.org/${pname}-${version}.tar.gz";
-    hash = "sha256-QsciFCPPThcOlMoAx24ykigfHSEopnUtViquHf1kNMs=";
+    hash = "sha256-Px3uK7I/MkrJbAOmV2ipVct/+p05SST6TLTYoDaLNdQ=";
  };

  mesonFlags = [
--- a/pkgs/by-name/af/afflib/package.nix
+++ b/pkgs/by-name/af/afflib/package.nix
@@ -5,7 +5,7 @@
  zlib,
  curl,
  expat,
-  fuse,
+  fuse3,
  openssl,
  autoreconfHook,
  python3,
@@ -13,14 +13,14 @@
 }:

 stdenv.mkDerivation rec {
-  version = "3.7.21";
+  version = "3.7.22";
  pname = "afflib";

  src = fetchFromGitHub {
    owner = "sshock";
    repo = "AFFLIBv3";
    tag = "v${version}";
-    sha256 = "sha256-CBDkeUzHnRBkLUYl0JuQcVnQWap0l7dAca1deZVoNDM=";
+    sha256 = "sha256-pGInhJQBhFJhft/KfB3J3S9/BVp9D8TZ+uw2CUNVC+Q=";
  };

  nativeBuildInputs = [ autoreconfHook ];
@@ -31,7 +31,7 @@ stdenv.mkDerivation rec {
    openssl
    python3
  ]
-  ++ lib.optionals (with stdenv; isLinux || isDarwin) [ fuse ]
+  ++ lib.optionals (with stdenv; isLinux || isDarwin) [ fuse3 ]
  ++ lib.optionals stdenv.hostPlatform.isDarwin [ libiconv ];

  meta = {
--- a/pkgs/by-name/al/alfaview/package.nix
+++ b/pkgs/by-name/al/alfaview/package.nix
@@ -27,11 +27,11 @@

 stdenv.mkDerivation rec {
  pname = "alfaview";
-  version = "9.22.12";
+  version = "9.23.1";

  src = fetchurl {
    url = "https://assets.alfaview.com/stable/linux/deb/${pname}_${version}.deb";
-    hash = "sha256-WMy05L4z1j1izQthFX5gZGO0Vg3gPHnwXblP8E7psnk=";
+    hash = "sha256-T1RsG/8uuPtma7TCNww4V6tKzPK0Ds8zmdjk2duhMEw=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/an/angular-language-server/package.nix
+++ b/pkgs/by-name/an/angular-language-server/package.nix
@@ -16,11 +16,11 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "angular-language-server";
-  version = "20.2.1";
+  version = "20.2.2";
  src = fetchurl {
    name = "angular-language-server-${finalAttrs.version}.zip";
    url = "https://github.com/angular/vscode-ng-language-service/releases/download/v${finalAttrs.version}/ng-template.vsix";
-    hash = "sha256-oemc2lJDPsWWG+tcJAk8u5lSGUpIoI6K/fE/TZC5bWw=";
+    hash = "sha256-2I5Pmd05zNGjM15tFo2yw6AGUKp3zxufVcoe4oSAO5U=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ap/apriltag/package.nix
+++ b/pkgs/by-name/ap/apriltag/package.nix
@@ -15,13 +15,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "apriltags";
-  version = "3.4.4";
+  version = "3.4.5";

  src = fetchFromGitHub {
    owner = "AprilRobotics";
    repo = "AprilTags";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-fHVwRE7qAJZ5Q1SFUfS5du91CUcb3+3n12M/NThDEV4=";
+    hash = "sha256-pBUjRKfP884+bNgV5B4b8TiuhyZ9p/jIluxs+idv/28=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ar/archivy/package.nix
+++ b/pkgs/by-name/ar/archivy/package.nix
@@ -24,12 +24,12 @@ let
 in
 py.pkgs.buildPythonApplication rec {
  pname = "archivy";
-  version = "1.7.3";
+  version = "1.7.7";
  format = "pyproject";

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-ns1Y0DqqnTAQMEt+oBJ/P2gqKqPsX9P3/Z4561qzuns";
+    hash = "sha256-XFzWD4KAW5jt5BwXZvO0iZdJKpzC6dRkxNLv5N8XUfc=";
  };

  build-system = with py.pkgs; [
--- a/pkgs/by-name/ba/bash-pinyin-completion-rs/package.nix
+++ b/pkgs/by-name/ba/bash-pinyin-completion-rs/package.nix
@@ -7,18 +7,18 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "bash-pinyin-completion-rs";
-  version = "0.3.1";
+  version = "0.3.2";

  src = fetchFromGitHub {
    owner = "AOSC-Dev";
    repo = "bash-pinyin-completion-rs";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-TBTVUDtlBCvfmWcwcSr9xLXE1cBLHeptklwR3hD+49Y=";
+    hash = "sha256-r+B11TgMOhwslqygv72S9uhF7v79MAzUu5XHlD/P3HY=";
  };

  strictDeps = true;

-  cargoHash = "sha256-DmFsRoguommcBbeJrCcTRm815c7gLnUQ+7n0/Iz6Gvk=";
+  cargoHash = "sha256-IEtGulY6EqJ74ok1xLY64K1yKSZcmb/wyObtcaHYMRk=";

  postInstall = ''
    substituteInPlace scripts/bash_pinyin_completion \
--- a/pkgs/by-name/ba/bazarr/package.nix
+++ b/pkgs/by-name/ba/bazarr/package.nix
@@ -17,11 +17,11 @@ let
 in
 stdenv.mkDerivation rec {
  pname = "bazarr";
-  version = "1.5.2";
+  version = "1.5.3";

  src = fetchzip {
    url = "https://github.com/morpheus65535/bazarr/releases/download/v${version}/bazarr.zip";
-    hash = "sha256-A6fm5zqlrml7iT3jS9r/XJbCyL+lr/V6WCisxtTKDjA=";
+    hash = "sha256-2JzsGnGgrkD5G0ZmrphkPZTnak3gdkHloXRKA+p9Y/0=";
    stripRoot = false;
  };

--- a/pkgs/by-name/be/bepasty/package.nix
+++ b/pkgs/by-name/be/bepasty/package.nix
@@ -27,7 +27,7 @@ in

 bepastyPython.pkgs.buildPythonPackage rec {
  pname = "bepasty";
-  version = "1.2.1";
+  version = "1.2.2";
  format = "pyproject";

  propagatedBuildInputs = with bepastyPython.pkgs; [
@@ -50,7 +50,7 @@ bepastyPython.pkgs.buildPythonPackage rec {

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-08cyr2AruGAfHAwHHS8WMfJh7DBKymaYyz4AxI/ubkE=";
+    hash = "sha256-teazPj+IrgbVeUkWqgWhpIldgfCTbZYJAqn5Q5blcm8=";
  };

  nativeCheckInputs = with bepastyPython.pkgs; [
--- a/pkgs/by-name/be/bettercap/package.nix
+++ b/pkgs/by-name/be/bettercap/package.nix
@@ -12,13 +12,13 @@

 buildGoModule rec {
  pname = "bettercap";
-  version = "2.41.1";
+  version = "2.41.4";

  src = fetchFromGitHub {
    owner = "bettercap";
    repo = "bettercap";
    rev = "v${version}";
-    sha256 = "sha256-NvCAG5+oZ5Xf2gbFKNlLXNxkvvK10py+qksJ5te2aGI=";
+    sha256 = "sha256-y23gNqS5f/MP+wyRMxe40I+9RuZGyZEok17LIc9Z8O4=";
  };

  vendorHash = "sha256-1kgjMPsj8z2Cl0YWe/1zY0Zuiza0X+ZAIgsMqPhCrMw=";
--- a/pkgs/by-name/bi/bird3/package.nix
+++ b/pkgs/by-name/bi/bird3/package.nix
@@ -12,14 +12,14 @@

 stdenv.mkDerivation rec {
  pname = "bird";
-  version = "3.1.2";
+  version = "3.1.4";

  src = fetchFromGitLab {
    domain = "gitlab.nic.cz";
    owner = "labs";
    repo = "bird";
    rev = "v${version}";
-    hash = "sha256-3Ms9yozF/Ox/kSP9rzKvkrA0VBPQb1VjtbEInl8/KZM=";
+    hash = "sha256-xLhx+GWUrbyTXNdacy67F3f9liWHTwVPEDF7O37Q5Es=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/bk/bkcrack/package.nix
+++ b/pkgs/by-name/bk/bkcrack/package.nix
@@ -8,13 +8,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "bkcrack";
-  version = "1.7.1";
+  version = "1.8.0";

  src = fetchFromGitHub {
    owner = "kimci86";
    repo = "bkcrack";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-88zAR1XE+C5UNmvY/ph1I1tL2nVGbywqh6zHRGbImXU=";
+    hash = "sha256-MFY+YBw9cpmUHrL7fpop63ty0ZdESlAgrWRYwK0IowY=";
  };

  passthru.updateScript = nix-update-script { };
--- a/pkgs/by-name/bl/bloop/package.nix
+++ b/pkgs/by-name/bl/bloop/package.nix
@@ -11,7 +11,7 @@

 stdenv.mkDerivation rec {
  pname = "bloop";
-  version = "2.0.13";
+  version = "2.0.14";

  platform =
    if stdenv.hostPlatform.isLinux && stdenv.hostPlatform.isx86_64 then
@@ -42,11 +42,11 @@ stdenv.mkDerivation rec {
    url = "https://github.com/scalacenter/bloop/releases/download/v${version}/bloop-${platform}";
    sha256 =
      if stdenv.hostPlatform.isLinux && stdenv.hostPlatform.isx86_64 then
-        "sha256-d6Fz87qvjIHhcU3sL6PalZGbkt1hZIMJEbiqJtRb2/0="
+        "sha256-r99N4VxIlpOwSe9f9PoEalzsi0v5YKU2is4+gpg7rpo="
      else if stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isx86_64 then
-        "sha256-LuX8LFYNzrcqJl9RTLLjQTDsdQg2KmJ+ijKwmi34E3A="
+        "sha256-7U9zugsEDtVSlwn8sbth51RKAWx/+vRSZ8yNQAACHdo="
      else if stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isAarch64 then
-        "sha256-jH7zHVns7pDlrRRAGO2nZ5VW71Wyuz0a0oBmXZ4fOAA="
+        "sha256-jT8GQim1dzOIbsg2hCgtS7MH+zHajYnppM50nh+HeYo="
      else
        throw "unsupported platform";
  };
--- a/pkgs/by-name/br/brewtarget/package.nix
+++ b/pkgs/by-name/br/brewtarget/package.nix
@@ -15,13 +15,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "brewtarget";
-  version = "4.1.3";
+  version = "4.2.1";

  src = fetchFromGitHub {
    owner = "Brewtarget";
    repo = "brewtarget";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-VVdihVdNIAtPlugqGWDWvxMdOFGLnRmewPt6BgvbxBk=";
+    hash = "sha256-/BEVnAtuwDnJXra9EAMD3LhA/93nFJ5ObCSgSy3CJnk=";
    fetchSubmodules = true;
  };

--- a/pkgs/by-name/bz/bzmenu/package.nix
+++ b/pkgs/by-name/bz/bzmenu/package.nix
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage rec {
  pname = "bzmenu";
-  version = "0.2.1";
+  version = "0.3.0";

  src = fetchFromGitHub {
    owner = "e-tho";
    repo = "bzmenu";
    tag = "v${version}";
-    hash = "sha256-42ZiENkqFXFhtqn26r9AIsG9sE+W0nGxm2zKdcbY5ss=";
+    hash = "sha256-5Xb/7DhwZ3hLO1rAceMaR3ifgI36Sn+W+S7PN8EOdOQ=";
  };

-  cargoHash = "sha256-DvnWw4yH4ghFb368cms981pENez0zTgvpMghDTrah50=";
+  cargoHash = "sha256-zTwgWk5ix1TGTi8rZjznJqdHbgnRHjA42Ly7PQQiMZw=";

  nativeBuildInputs = [
    pkg-config
--- a/pkgs/by-name/ci/circleci-cli/package.nix
+++ b/pkgs/by-name/ci/circleci-cli/package.nix
@@ -7,13 +7,13 @@

 buildGoModule rec {
  pname = "circleci-cli";
-  version = "0.1.33128";
+  version = "0.1.33163";

  src = fetchFromGitHub {
    owner = "CircleCI-Public";
    repo = "circleci-cli";
    rev = "v${version}";
-    sha256 = "sha256-8rh/cG0ottG65ogACjA5sdf9M3satR4S0iZctZwzqkE=";
+    sha256 = "sha256-sXAssSnxoaPNXSp2SBCzJ3zbYpMNTxND5SUe0lKb2cs=";
  };

  vendorHash = "sha256-RQK51VSag1AkJMa/rmWpSuuzhRqSG2a3+sNisp0q7lU=";
--- a/pkgs/by-name/ck/ckbcomp/package.nix
+++ b/pkgs/by-name/ck/ckbcomp/package.nix
@@ -8,14 +8,14 @@

 stdenv.mkDerivation rec {
  pname = "ckbcomp";
-  version = "1.240";
+  version = "1.242";

  src = fetchFromGitLab {
    domain = "salsa.debian.org";
    owner = "installer-team";
    repo = "console-setup";
    rev = version;
-    sha256 = "sha256-cKMgFW97B0ippQjXur8e5rrlEVo5EBoAgCCni2MY5Ys=";
+    sha256 = "sha256-5PV1Mbg7ZGQsotwnBVz8DI77Y8ULCnoTANqBLlP3YrE=";
  };

  buildInputs = [ perl ];
--- a/pkgs/by-name/cm/cminpack/package.nix
+++ b/pkgs/by-name/cm/cminpack/package.nix
@@ -3,21 +3,27 @@
  stdenv,
  cmake,
  fetchFromGitHub,
-  withBlas ? true,
+  withBlas ? false,
  blas,
+  nix-update-script,
 }:

 stdenv.mkDerivation rec {
  pname = "cminpack";
-  version = "1.3.8";
+  version = "1.3.11";

  src = fetchFromGitHub {
    owner = "devernay";
    repo = "cminpack";
    rev = "v${version}";
-    hash = "sha256-eFJ43cHbSbWld+gPpMaNiBy1X5TIcN9aVxjh8PxvVDU=";
+    hash = "sha256-GF9HiITX/XV8hXrp5lJw2XM0Zyb/CBkMZkRFBbQj03A=";
  };

+  postPatch = ''
+    substituteInPlace cmake/cminpack.pc.in \
+      --replace-fail ''\'''${prefix}/' ""
+  '';
+
  strictDeps = true;

  nativeBuildInputs = [
@@ -33,6 +39,10 @@ stdenv.mkDerivation rec {
    "-DBUILD_SHARED_LIBS=${if stdenv.hostPlatform.isStatic then "OFF" else "ON"}"
  ];

+  passthru = {
+    updateScript = nix-update-script { };
+  };
+
  meta = {
    description = "Software for solving nonlinear equations and nonlinear least squares problems";
    homepage = "http://devernay.free.fr/hacks/cminpack/";
--- a/pkgs/by-name/co/codebook/package.nix
+++ b/pkgs/by-name/co/codebook/package.nix
@@ -7,17 +7,17 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "codebook";
-  version = "0.3.9";
+  version = "0.3.10";

  src = fetchFromGitHub {
    owner = "blopker";
    repo = "codebook";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-yt7eQIQvufqPO8NIs7MMUyPGSSE7Vazou7MWZ5yinHk=";
+    hash = "sha256-MBhPVCnNXIFqwhWEY9ZDFVEQf7DRq2ZY6mamaMfneCc=";
  };

  buildAndTestSubdir = "crates/codebook-lsp";
-  cargoHash = "sha256-3KCE+OK4hw/CsczY52OgLp+RBsySO5tNlwbmtHD05qs=";
+  cargoHash = "sha256-LiVveJ27R6Joz3hpCn2sSiikMlerusSjD/eLfn+gaEw=";

  # Integration tests require internet access for dictionaries
  doCheck = false;
--- a/pkgs/by-name/co/commitizen/package.nix
+++ b/pkgs/by-name/co/commitizen/package.nix
@@ -1,6 +1,5 @@
 {
  lib,
-  commitizen,
  fetchFromGitHub,
  gitMinimal,
  stdenv,
@@ -20,7 +19,7 @@ python3Packages.buildPythonPackage rec {
    owner = "commitizen-tools";
    repo = "commitizen";
    tag = "v${version}";
-    hash = "sha256-vHA+TvKs9TOu/0/FpxLHHbDgshQFhP9Dwe6ZMnUOBKc=";
+    hash = "sha256-4hsKCBJHeRjc519h7KO/X8BJhGuw0N6XmC6u+QEiAnc=";
  };

  pythonRelaxDeps = [
--- a/pkgs/by-name/cp/cppcheck/package.nix
+++ b/pkgs/by-name/cp/cppcheck/package.nix
@@ -21,7 +21,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "cppcheck";
-  version = "2.18.1";
+  version = "2.18.3";

  outputs = [
    "out"
@@ -32,7 +32,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "danmar";
    repo = "cppcheck";
    tag = finalAttrs.version;
-    hash = "sha256-SWMjxMtdISAOxMWteouOzr8DeRpqn16OlPDhR0Yb3QQ=";
+    hash = "sha256-c32dNM1tNN+Nqv5GmKHnAhWx8r9RTcv3FQ/+ROGurkw=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/db/dbgate/package.nix
+++ b/pkgs/by-name/db/dbgate/package.nix
@@ -8,25 +8,25 @@

 let
  pname = "dbgate";
-  version = "6.6.1";
+  version = "6.6.3";
  src =
    fetchurl
      {
        aarch64-linux = {
          url = "https://github.com/dbgate/dbgate/releases/download/v${version}/dbgate-${version}-linux_arm64.AppImage";
-          hash = "sha256-8cQ9hhz+nURXuPfgVLClQr6tKgQ/wu7LWIsxhrJWiAQ=";
+          hash = "sha256-/Ouoo+ygEcj5u597+peqxQ0BFAi6Dp1Dy5BEJbHjo/s=";
        };
        x86_64-linux = {
          url = "https://github.com/dbgate/dbgate/releases/download/v${version}/dbgate-${version}-linux_x86_64.AppImage";
-          hash = "sha256-OldLkZrqvBT6+ECCpRkuys5BOSJNY31ttFa52lWmLLk=";
+          hash = "sha256-FUwRXpuIPubtVAendCDTiXNJ5TQ1LBB5MD25hH5EzGE=";
        };
        x86_64-darwin = {
          url = "https://github.com/dbgate/dbgate/releases/download/v${version}/dbgate-${version}-mac_x64.dmg";
-          hash = "sha256-1wLWK4v5KmkGlFZpROtKALSKDyhF8cJ9pU391FYpXUo=";
+          hash = "sha256-UgdSHW5Gs0cat6leIFJtp3OspgQRV2AHnk/sZ1b7z/U=";
        };
        aarch64-darwin = {
          url = "https://github.com/dbgate/dbgate/releases/download/v${version}/dbgate-${version}-mac_universal.dmg";
-          hash = "sha256-bAvqGy7hEQbIhtx4wybxbzATogthcNREkjFDC5kb7WU=";
+          hash = "sha256-mvONm929IG2ViH0h7u/7fRZ6ghDaPsy7cqpqIp/JgM4=";
        };
      }
      .${stdenv.hostPlatform.system} or (throw "dbgate: ${stdenv.hostPlatform.system} is unsupported.");
--- a/pkgs/by-name/de/deark/package.nix
+++ b/pkgs/by-name/de/deark/package.nix
@@ -7,13 +7,13 @@
 }:
 stdenv.mkDerivation rec {
  pname = "deark";
-  version = "1.7.0";
+  version = "1.7.1";

  src = fetchFromGitHub {
    owner = "jsummers";
    repo = "deark";
    tag = "v${version}";
-    hash = "sha256-dyX41gWZnZ/07Vyxo1x4Y8neGHS5ev+YyBJ0cUH+gKY=";
+    hash = "sha256-EnolN4uSHDm1sIkbwCmZUe70DdHyXP3Si4QwGaMtN0A=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/di/dircolors-solarized/package.nix
+++ b/pkgs/by-name/di/dircolors-solarized/package.nix
@@ -7,13 +7,13 @@

 stdenv.mkDerivation {
  pname = "dircolors-solarized";
-  version = "0-unstable-2025-08-01";
+  version = "0-unstable-2025-09-22";

  src = fetchFromGitHub {
    owner = "seebi";
    repo = "dircolors-solarized";
-    rev = "13c1af03d398f46957e22cec6b001e5663ed473e";
-    hash = "sha256-abaFq/8+UAQLfbzCuFH2uglN8ugafTp2Evk4+dchylo=";
+    rev = "38971d217512a23391139fcee2a520eba7cddf37";
+    hash = "sha256-UlSbg3njsVV7+Dlu5CXAmz7BcyihDIVwiWFzV157RSw=";
  };

  dontBuild = true;
--- a/pkgs/by-name/do/dotenvx/package.nix
+++ b/pkgs/by-name/do/dotenvx/package.nix
@@ -8,16 +8,16 @@

 buildNpmPackage rec {
  pname = "dotenvx";
-  version = "1.48.4";
+  version = "1.50.1";

  src = fetchFromGitHub {
    owner = "dotenvx";
    repo = "dotenvx";
    tag = "v${version}";
-    hash = "sha256-reWOFI17YSaCTFriCpJELdDj9K2MintKt9OBy/2aXE4=";
+    hash = "sha256-fh819FxXugCUF9TMxCAIog0SP52YnPHL6gvVtoS6fN8=";
  };

-  npmDepsHash = "sha256-XPkqJVkShCzft4LEobCUgbsyl5W/vHXRPNPKltFO5hc=";
+  npmDepsHash = "sha256-P7BSVGoHBJrR5AUT70a10BqKNJxG+GW8FpkaKTEUA/c=";

  dontNpmBuild = true;

--- a/pkgs/by-name/du/duo-unix/package.nix
+++ b/pkgs/by-name/du/duo-unix/package.nix
@@ -9,11 +9,11 @@

 stdenv.mkDerivation rec {
  pname = "duo-unix";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchurl {
    url = "https://dl.duosecurity.com/duo_unix-${version}.tar.gz";
-    sha256 = "sha256-QpF+qZeCd4n7A+dl7e0KfwpQ+CIJIoNZMafEPz2Dtik=";
+    sha256 = "sha256-o5myAUg2tf+Yu7tB93EU/gZkGAHYtrEh6zyCiVJ2pmY=";
  };

  buildInputs = [
--- a/pkgs/by-name/ea/easytier/package.nix
+++ b/pkgs/by-name/ea/easytier/package.nix
@@ -41,10 +41,14 @@ rustPlatform.buildRustPackage rec {
  buildFeatures = lib.optional stdenv.hostPlatform.isMips "mips" ++ lib.optional withQuic "quic";

  postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
-    installShellCompletion --cmd easytier \
+    installShellCompletion --cmd easytier-cli \
      --bash <($out/bin/easytier-cli gen-autocomplete bash) \
      --fish <($out/bin/easytier-cli gen-autocomplete fish) \
      --zsh <($out/bin/easytier-cli gen-autocomplete zsh)
+    installShellCompletion --cmd easytier-core \
+      --bash <($out/bin/easytier-core --gen-autocomplete bash) \
+      --fish <($out/bin/easytier-core --gen-autocomplete fish) \
+      --zsh <($out/bin/easytier-core --gen-autocomplete zsh)
  '';

  doCheck = false; # tests failed due to heavy rely on network
--- a/pkgs/by-name/ec/ecs-agent/package.nix
+++ b/pkgs/by-name/ec/ecs-agent/package.nix
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "amazon-ecs-agent";
-  version = "1.98.0";
+  version = "1.99.0";

  src = fetchFromGitHub {
    rev = "v${version}";
    owner = "aws";
    repo = "amazon-ecs-agent";
-    hash = "sha256-zp1Rdl6Gl24hXFNMZX3qcf7p3eAdzE0EA5ZnwjW4guU=";
+    hash = "sha256-b+GxUVqKnMlZITrZ0/MO6kZVw5mLrrgLVdKAe0xS/7w=";
  };

  vendorHash = null;
--- a/pkgs/by-name/ep/epubcheck/package.nix
+++ b/pkgs/by-name/ep/epubcheck/package.nix
@@ -8,11 +8,11 @@

 stdenv.mkDerivation rec {
  pname = "epubcheck";
-  version = "5.2.1";
+  version = "5.3.0";

  src = fetchzip {
    url = "https://github.com/w3c/epubcheck/releases/download/v${version}/epubcheck-${version}.zip";
-    sha256 = "sha256-BL+DNd6QeAx4MATaXVX/4mtalY7jzAdYeUsPktPp4UA=";
+    sha256 = "sha256-wROsu/s0EuNQQsbMtxWVIwDZvDozBk/kfwxhivCIRAo=";
  };

  nativeBuildInputs = [ makeWrapper ];
--- a/pkgs/by-name/ex/expliot/package.nix
+++ b/pkgs/by-name/ex/expliot/package.nix
@@ -1,5 +1,6 @@
 {
  lib,
+  fetchFromGitHub,
  fetchFromGitLab,
  python3,
 }:
@@ -14,6 +15,21 @@ let
          inherit version;
          hash = "sha256-cBqMmXXEq8ReXROQarFJ+Vn4EoaRBjRzI6P4msDoKmI=";
        };
+        dependencies = oldAttrs.dependencies ++ [
+          python3.pkgs.attrs
+          python3.pkgs.colorama
+        ];
+        doCheck = false;
+      });
+
+      paho-mqtt = super.paho-mqtt.overridePythonAttrs (oldAttrs: rec {
+        version = "1.6.1";
+        src = fetchFromGitHub {
+          inherit (oldAttrs.src) owner repo;
+          tag = "v${version}";
+          hash = "sha256-9nH6xROVpmI+iTKXfwv2Ar1PAmWbEunI3HO0pZyK6Rg=";
+        };
+        build-system = with self; [ setuptools ];
        doCheck = false;
      });
    };
@@ -24,12 +40,12 @@ with py.pkgs;
 buildPythonApplication rec {
  pname = "expliot";
  version = "0.9.8";
-  format = "setuptools";
+  pyproject = true;

  src = fetchFromGitLab {
    owner = "expliot_framework";
    repo = "expliot";
-    rev = version;
+    tag = version;
    hash = "sha256-7Cuj3YKKwDxP2KKueJR9ZO5Bduv+lw0Y87Rw4b0jbGY=";
  };

@@ -42,10 +58,9 @@ buildPythonApplication rec {
    "zeroconf"
  ];

-  nativeBuildInputs = [
-  ];
+  build-system = [ setuptools ];

-  propagatedBuildInputs = [
+  dependencies = [
    aiocoap
    awsiotpythonsdk
    bluepy
@@ -67,13 +82,10 @@ buildPythonApplication rec {
  # Project has no tests
  doCheck = false;

-  pythonImportsCheck = [
-    "expliot"
-  ];
+  pythonImportsCheck = [ "expliot" ];

  meta = with lib; {
    description = "IoT security testing and exploitation framework";
-    mainProgram = "expliot";
    longDescription = ''
      EXPLIoT is a Framework for security testing and exploiting IoT
      products and IoT infrastructure. It provides a set of plugins
@@ -83,7 +95,8 @@ buildPythonApplication rec {
      purpose of the framework i.e. IoT exploitation.
    '';
    homepage = "https://expliot.readthedocs.io/";
-    license = with licenses; [ agpl3Plus ];
+    license = licenses.agpl3Plus;
    maintainers = with maintainers; [ fab ];
+    mainProgram = "expliot";
  };
 }
--- a/pkgs/by-name/fa/fastfetch/package.nix
+++ b/pkgs/by-name/fa/fastfetch/package.nix
@@ -59,13 +59,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "fastfetch";
-  version = "2.52.0";
+  version = "2.53.0";

  src = fetchFromGitHub {
    owner = "fastfetch-cli";
    repo = "fastfetch";
    tag = finalAttrs.version;
-    hash = "sha256-Zylq4Ae1Ut2iB4qOnOtGkjDjuPxRyr221FVzOx3kdIE=";
+    hash = "sha256-Cq6Nq7UpeW7MFi6VjsWmU2M3FjzDiAyhwnl4yTQFRnA=";
  };

  outputs = [
--- a/pkgs/by-name/fa/faudio/package.nix
+++ b/pkgs/by-name/fa/faudio/package.nix
@@ -10,13 +10,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "faudio";
-  version = "25.08";
+  version = "25.09";

  src = fetchFromGitHub {
    owner = "FNA-XNA";
    repo = "FAudio";
    tag = finalAttrs.version;
-    hash = "sha256-yhKmY5aysu1wIx0BDdQ6fyf5qn9XCwtNCIjDeJjBGg8=";
+    hash = "sha256-vrqUyoihbOJcTzKYP6RqoiIUtaG2LUsq6tWi1pczET8=";
  };

  nativeBuildInputs = [ cmake ];
--- a/pkgs/by-name/fl/flac2all/package.nix
+++ b/pkgs/by-name/fl/flac2all/package.nix
@@ -11,12 +11,12 @@

 python3Packages.buildPythonApplication rec {
  pname = "flac2all";
-  version = "5.1";
+  version = "5.4";
  format = "pyproject";

  src = fetchPypi {
    inherit pname version;
-    sha256 = "OBjlr7cbSx2WOIfZUNwHy5Hpb2Fmh3vmZdc70JiWsiI=";
+    sha256 = "sha256-UGrkCQcpNzWH2hIRd1oTDryUeDumgHKuuxsbC87xaUI=";
  };

  # Not sure why this is needed, but setup.py expects this to be set
--- a/pkgs/by-name/fl/flix/package.nix
+++ b/pkgs/by-name/fl/flix/package.nix
@@ -8,11 +8,11 @@

 stdenvNoCC.mkDerivation rec {
  pname = "flix";
-  version = "0.60.0";
+  version = "0.62.0";

  src = fetchurl {
    url = "https://github.com/flix/flix/releases/download/v${version}/flix.jar";
-    sha256 = "sha256-mSCxB8m060K/F8b1VhQbTMjtv//feS3pobxShFBc08U=";
+    sha256 = "sha256-YUFeEeDpgRQ9nciOMtyoFjEJ81D8ATQFBgb1H707FtM=";
  };

  dontUnpack = true;
--- a/pkgs/by-name/fl/fluent-bit/package.nix
+++ b/pkgs/by-name/fl/fluent-bit/package.nix
@@ -29,13 +29,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "fluent-bit";
-  version = "4.0.7";
+  version = "4.0.10";

  src = fetchFromGitHub {
    owner = "fluent";
    repo = "fluent-bit";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-ytLPjgODX1JKuyRD5uzJiZnJRKApZ9HSjQV5f+Ur22c=";
+    hash = "sha256-fYgZULGGlvuxgI5qOQ83AxcpEQQlw3ZpYLpu3hDJiSc=";
  };

  # The source build documentation covers some dependencies and CMake options.
--- a/pkgs/by-name/fl/flyway/package.nix
+++ b/pkgs/by-name/fl/flyway/package.nix
@@ -9,10 +9,10 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "flyway";
-  version = "11.11.0";
+  version = "11.13.0";
  src = fetchurl {
    url = "https://github.com/flyway/flyway/releases/download/flyway-${finalAttrs.version}/flyway-commandline-${finalAttrs.version}.tar.gz";
-    sha256 = "sha256-IIRJQjsCJAnmr2//daMJ0kInYJSbidHz5/YKRZD8v0M=";
+    sha256 = "sha256-yIptnNIt76qYer9AhLRZ0hhuUhx56PWXU3jjkLBz11M=";
  };
  nativeBuildInputs = [ makeWrapper ];
  dontBuild = true;
--- a/pkgs/by-name/fo/forbidden/package.nix
+++ b/pkgs/by-name/fo/forbidden/package.nix
@@ -6,14 +6,14 @@

 python3.pkgs.buildPythonApplication rec {
  pname = "forbidden";
-  version = "13.2";
+  version = "13.4";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "ivan-sincek";
    repo = "forbidden";
    tag = "v${version}";
-    hash = "sha256-DQ8zjiLTgBBoqp8AP5BYULz4KGnVEt8e7bkfYRGWvFw=";
+    hash = "sha256-eOf74JWDzYz73axY9+6bRcSfJAdHMh3H4+cuUojSU4A=";
  };

  build-system = with python3.pkgs; [ setuptools ];
--- a/pkgs/by-name/fr/freetds/package.nix
+++ b/pkgs/by-name/fr/freetds/package.nix
@@ -15,11 +15,11 @@ assert odbcSupport -> unixODBC != null;

 stdenv.mkDerivation rec {
  pname = "freetds";
-  version = "1.5.4";
+  version = "1.5.6";

  src = fetchurl {
    url = "https://www.freetds.org/files/stable/${pname}-${version}.tar.bz2";
-    hash = "sha256-HQJO9BjXSjqPLMqC8Q8VYfHd4o3D1vZcgV8Hdk1Pfqg=";
+    hash = "sha256-2twI5prvFFI/2u4JFw1Z2vG2QT6NWFjQnJSWZ0ugjFc=";
  };

  patches = [
--- a/pkgs/by-name/ga/gabutdm/package.nix
+++ b/pkgs/by-name/ga/gabutdm/package.nix
@@ -21,13 +21,13 @@

 stdenv.mkDerivation rec {
  pname = "gabutdm";
-  version = "2.6.0";
+  version = "2.7.0";

  src = fetchFromGitHub {
    owner = "gabutakut";
    repo = "gabutdm";
    rev = version;
-    hash = "sha256-FKOgoJ0QreYk3PgvUoQMczC3tXkthw86/Y3pnm6tTQk=";
+    hash = "sha256-nzhEJiGBH+semfwLPdpIfPNGQLorqPwwmiAUNM91Br4=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ge/gex/package.nix
+++ b/pkgs/by-name/ge/gex/package.nix
@@ -1,7 +1,7 @@
 {
  lib,
  rustPlatform,
-  fetchFromGitHub,
+  fetchFromGitea,
  pkg-config,
  libgit2,
  nix-update-script,
@@ -13,10 +13,11 @@ rustPlatform.buildRustPackage rec {
  pname = "gex";
  version = "0.6.4";

-  src = fetchFromGitHub {
+  src = fetchFromGitea {
+    domain = "codeberg.org";
    owner = "Piturnah";
    repo = "gex";
-    rev = "v${version}";
+    tag = "v${version}";
    hash = "sha256-Xer7a3UtFIv3idchI7DfZ5u6qgDW/XFWi5ihtcREXqo=";
  };

@@ -41,8 +42,8 @@ rustPlatform.buildRustPackage rec {

  meta = with lib; {
    description = "Git Explorer: cross-platform git workflow improvement tool inspired by Magit";
-    homepage = "https://github.com/Piturnah/gex";
-    changelog = "https://github.com/Piturnah/gex/releases/tag/${src.rev}";
+    homepage = "https://codeberg.org/Piturnah/gex";
+    changelog = "https://codeberg.org/Piturnah/gex/releases/tag/${src.tag}";
    license = with licenses; [
      asl20 # or
      mit
--- a/pkgs/by-name/gi/git-relevant-history/package.nix
+++ b/pkgs/by-name/gi/git-relevant-history/package.nix
@@ -1,6 +1,7 @@
 {
  lib,
  fetchFromGitHub,
+  unstableGitUpdater,
  python3,
  git,
  git-filter-repo,
@@ -8,7 +9,7 @@

 python3.pkgs.buildPythonApplication {
  pname = "git-relevant-history";
-  version = "2022-09-15";
+  version = "1.0.0-unstable-2022-09-15";
  format = "setuptools";
  src = fetchFromGitHub {
    owner = "rainlabs-eu";
@@ -22,6 +23,8 @@ python3.pkgs.buildPythonApplication {
    python3.pkgs.docopt
  ];

+  passthru.updateScript = unstableGitUpdater { tagPrefix = "v"; };
+
  meta = with lib; {
    description = "Extract only relevant history from git repo";
    homepage = "https://github.com/rainlabs-eu/git-relevant-history";
--- a/pkgs/by-name/gi/gitaly/package.nix
+++ b/pkgs/by-name/gi/gitaly/package.nix
@@ -7,7 +7,7 @@
 }:

 let
-  version = "18.3.2";
+  version = "18.4.0";
  package_version = "v${lib.versions.major version}";
  gitaly_package = "gitlab.com/gitlab-org/gitaly/${package_version}";

@@ -21,10 +21,10 @@ let
      owner = "gitlab-org";
      repo = "gitaly";
      rev = "v${version}";
-      hash = "sha256-R/35xYOCq/dlwLQ/in6u+DLifxsGpqBx58flX+FrVCo=";
+      hash = "sha256-Xg+JRw/W93n6FGjjQRTULuCTRQxvPyyQJKACQNaYyyg=";
    };

-    vendorHash = "sha256-JFGzGwYi4owq0oVLucm7UGuq8PE4FH9Gp8HyBRoE6cs=";
+    vendorHash = "sha256-DNZgdP7juELUX0cs0tnyqdf1yiUJ0S17nm0xqTk3KHQ=";

    ldflags = [
      "-X ${gitaly_package}/internal/version.version=${version}"
--- a/pkgs/by-name/gi/github-mcp-server/package.nix
+++ b/pkgs/by-name/gi/github-mcp-server/package.nix
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "github-mcp-server";
-  version = "0.14.0";
+  version = "0.15.0";

  src = fetchFromGitHub {
    owner = "github";
    repo = "github-mcp-server";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-IGjbuW4gPOZQrLMhyrZ3ii/GeRrgEyNVb0w3/Z0hihU=";
+    hash = "sha256-D6oEnaHrGnFfuO6NXRYbJ665OlWcwHo+JLfCPrdDkE4=";
  };

-  vendorHash = "sha256-F6PR4bxFSixgYQX65zjrVxcxEQxCoavQqa5mBGrZH8o=";
+  vendorHash = "sha256-0QqgyjK3QID72aMI6l6ofXAUt94PYFqO8dWech7yaFw=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/gi/gitlab-ci-ls/package.nix
+++ b/pkgs/by-name/gi/gitlab-ci-ls/package.nix
@@ -8,15 +8,15 @@

 rustPlatform.buildRustPackage rec {
  pname = "gitlab-ci-ls";
-  version = "1.1.9";
+  version = "1.2.1";
  src = fetchFromGitHub {
    owner = "alesbrelih";
    repo = "gitlab-ci-ls";
    rev = "${version}";
-    hash = "sha256-RHdzcNqnibWpGn8eqekTlFf201HHwWABV2PNtbbTook=";
+    hash = "sha256-WVwRV5STQlyPhUESHV8ICnQFJfa2TCvOW5HFtuDfTRw=";
  };

-  cargoHash = "sha256-SZLSTstzokjazhvVXyHjGhsfQ3vKxmSijHiq9dP5ADc=";
+  cargoHash = "sha256-d8X4EuXJjgQ4vPhqMJR+w/pSu/muqYtpoNXKxvPLUkA=";

  nativeBuildInputs = [ pkg-config ];
  buildInputs = [ openssl ];
--- a/pkgs/by-name/gi/gitlab-elasticsearch-indexer/code-parser.nix
+++ b/pkgs/by-name/gi/gitlab-elasticsearch-indexer/code-parser.nix
@@ -0,0 +1,43 @@
+{
+  lib,
+  fetchFromGitLab,
+  rustPlatform,
+  pkg-config,
+  openssl,
+  clang,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "gitlab-code-parser";
+  version = "0.16.1";
+
+  src = fetchFromGitLab {
+    owner = "gitlab-org";
+    repo = "rust/gitlab-code-parser";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-GskOPKv1Jp3eqd+a9nEwZPfHfOw6luyglPXzJZAPvBc=";
+  };
+
+  cargoHash = "sha256-g6FV8kX3/9wk692FJLNyGNzv3ffE8RWmMYmvmUIqzVs=";
+
+  nativeBuildInputs = [
+    pkg-config
+    rustPlatform.bindgenHook
+    clang
+  ];
+  buildInputs = [
+    openssl.dev
+  ];
+
+  preInstall = ''
+    mkdir -p $out/include
+    cp crates/parser-c-bindings/target/include/parser-c-bindings.h $out/include
+  '';
+
+  meta = {
+    description = "A single, efficient and extensible static code‑analysis library";
+    changelog = "https://gitlab.com/gitlab-org/rust/gitlab-code-parser/-/blob/v${finalAttrs.version}/CHANGELOG.md?ref_type=tags";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ leona ];
+  };
+})
--- a/pkgs/by-name/gi/gitlab-elasticsearch-indexer/package.nix
+++ b/pkgs/by-name/gi/gitlab-elasticsearch-indexer/package.nix
@@ -1,28 +1,40 @@
 {
  lib,
+  callPackage,
  buildGoModule,
  fetchFromGitLab,
  pkg-config,
  icu,
 }:
-
+let
+  codeParserBindings = callPackage ./code-parser.nix { };
+in
 buildGoModule rec {
  pname = "gitlab-elasticsearch-indexer";
-  version = "5.7.0";
+  version = "5.9.1";

  # nixpkgs-update: no auto update
  src = fetchFromGitLab {
    owner = "gitlab-org";
    repo = "gitlab-elasticsearch-indexer";
    rev = "v${version}";
-    hash = "sha256-Qlz8YT6lGUtnMXCrfZZjzmSz0AivzcCVEd/tEKzfoYg=";
+    hash = "sha256-Xt22fyTM4rfqUpNE6Q3yfT9r4vqME3KmqxYCqUKmnLQ=";
  };

-  vendorHash = "sha256-C0B9fe/S5TODgVTMGBBD5oGH/DsxAvCB6tBLaRdswCA=";
+  vendorHash = "sha256-pY8hHFy0AxMwol00BN85jPR0ZnHVgno10Tp+Opz65tQ=";

  buildInputs = [ icu ];
  nativeBuildInputs = [ pkg-config ];

+  env = {
+    CGO_LDFLAGS = "-L${codeParserBindings}/lib";
+    CGO_CFLAGS = "-I${codeParserBindings}/include";
+  };
+
+  passthru = {
+    inherit codeParserBindings;
+  };
+
  meta = with lib; {
    description = "Indexes Git repositories into Elasticsearch for GitLab";
    mainProgram = "gitlab-elasticsearch-indexer";
--- a/pkgs/by-name/gi/gitlab-pages/package.nix
+++ b/pkgs/by-name/gi/gitlab-pages/package.nix
@@ -6,17 +6,17 @@

 buildGoModule rec {
  pname = "gitlab-pages";
-  version = "18.3.2";
+  version = "18.4.0";

  # nixpkgs-update: no auto update
  src = fetchFromGitLab {
    owner = "gitlab-org";
    repo = "gitlab-pages";
    rev = "v${version}";
-    hash = "sha256-UrO7RIMr6+u8zfbw/AkUOOydt8Yozbu1ypZ5BNF3as0=";
+    hash = "sha256-yaIqPr5f2GdRtgLn2XQHNBf0n0O97WlOcCdIule53eA=";
  };

-  vendorHash = "sha256-WCdpccNeVCEvo158uSyDlsGxneU72zKiV7J7JPhtPBw=";
+  vendorHash = "sha256-FdmozSo/eWTnAxrO+/TZOKataLwDkKfwGOXymkRBVCI=";
  subPackages = [ "." ];

  ldflags = [
--- a/pkgs/by-name/gi/gitlab/data.json
+++ b/pkgs/by-name/gi/gitlab/data.json
@@ -1,15 +1,15 @@
 {
-  "version": "18.3.2",
-  "repo_hash": "0n234gk7w75n4vmfdgwjksbksfcnj69f1wczydcylinaxv2jm50n",
-  "yarn_hash": "0g1iafhfdgshy7d6p27qy042j8xyf6gj4rws9wrzdh51fmv4p3bj",
+  "version": "18.4.0",
+  "repo_hash": "0vp4wnipbl8v9vm4xjvwqgzgff4i9xn5p690vw4yvngs7gnclv11",
+  "yarn_hash": "1s9fz2apb7wkpppq14b3020b2pqdah917wblvzk32np8s2dqqc14",
  "owner": "gitlab-org",
  "repo": "gitlab",
-  "rev": "v18.3.2-ee",
+  "rev": "v18.4.0-ee",
  "passthru": {
-    "GITALY_SERVER_VERSION": "18.3.2",
-    "GITLAB_PAGES_VERSION": "18.3.2",
+    "GITALY_SERVER_VERSION": "18.4.0",
+    "GITLAB_PAGES_VERSION": "18.4.0",
    "GITLAB_SHELL_VERSION": "14.45.2",
-    "GITLAB_ELASTICSEARCH_INDEXER_VERSION": "5.7.0",
-    "GITLAB_WORKHORSE_VERSION": "18.3.2"
+    "GITLAB_ELASTICSEARCH_INDEXER_VERSION": "5.9.1",
+    "GITLAB_WORKHORSE_VERSION": "18.4.0"
  }
 }
--- a/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix
+++ b/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix
@@ -10,7 +10,7 @@ in
 buildGoModule rec {
  pname = "gitlab-workhorse";

-  version = "18.3.2";
+  version = "18.4.0";

  # nixpkgs-update: no auto update
  src = fetchFromGitLab {
@@ -22,7 +22,7 @@ buildGoModule rec {

  sourceRoot = "${src.name}/workhorse";

-  vendorHash = "sha256-Nev8UXAjvxWItGT3LLcq0cs0wKKXWR6ml+1YBDiYJm4=";
+  vendorHash = "sha256-R9hI+y4n+6YM0dXIRvNZWwy1gAasdKHBWmFBXJaI1G0=";
  buildInputs = [ git ];
  ldflags = [ "-X main.Version=${version}" ];
  doCheck = false;
--- a/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile
+++ b/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile
@@ -26,9 +26,9 @@ gem 'bundler-checksum', '~> 0.1.0', path: 'gems/bundler-checksum', require: fals
 # See https://docs.gitlab.com/ee/development/gemfile.html#upgrade-rails for guidelines when upgrading Rails

 if next?
-  gem 'rails', '~> 7.2.2.1', feature_category: :shared
+  gem 'rails', '~> 7.2.2.2', feature_category: :shared
 else
-  gem 'rails', '~> 7.1.5.1', feature_category: :shared
+  gem 'rails', '~> 7.1.5.2', feature_category: :shared
 end

 gem 'activerecord-gitlab', path: 'gems/activerecord-gitlab', feature_category: :shared
@@ -81,7 +81,7 @@ gem 'logger', '~> 1.7.0', feature_category: :shared
 gem 'marginalia', '~> 1.11.1', feature_category: :database

 # Authorization
-gem 'declarative_policy', '~> 1.1.0', feature_category: :shared
+gem 'declarative_policy', '~> 2.0.1', feature_category: :shared

 # For source code paths mapping
 gem 'coverband', '6.1.5', require: false, feature_category: :shared
@@ -152,7 +152,7 @@ gem 'gpgme', '~> 2.0.24', feature_category: :source_code_management
 # LDAP Auth
 # GitLab fork with several improvements to original library. For full list of changes
 # see https://github.com/intridea/omniauth-ldap/compare/master...gitlabhq:master
-gem 'gitlab_omniauth-ldap', '~> 2.2.0', require: 'omniauth-ldap', feature_category: :system_access
+gem 'gitlab_omniauth-ldap', '~> 2.3.0', require: 'omniauth-ldap', feature_category: :system_access
 gem 'net-ldap', '~> 0.17.1', feature_category: :system_access

 # API
@@ -171,12 +171,13 @@ gem 'apollo_upload_server', '~> 2.1.6', feature_category: :api
 # Cells
 gem 'gitlab-topology-service-client', '~> 0.1',
  path: 'vendor/gems/gitlab-topology-service-client',
+  require: 'gitlab/cells/topology_service',
  feature_category: :cell

 # Duo Workflow
-gem 'gitlab-duo-workflow-service-client', '~> 0.2',
+gem 'gitlab-duo-workflow-service-client', '~> 0.3',
  path: 'vendor/gems/gitlab-duo-workflow-service-client',
-  feature_category: :duo_workflow
+  feature_category: :agent_foundations

 # Generate Fake data
 gem 'ffaker', '~> 2.24', feature_category: :shared
@@ -192,6 +193,7 @@ gem 'hamlit', '~> 3.0.0', feature_category: :shared
 # Files attachments
 gem 'carrierwave', '~> 1.3', feature_category: :shared
 gem 'mini_magick', '~> 4.12', feature_category: :shared
+gem 'marcel', '~> 1.0.4', feature_category: :shared

 # PDF generation
 gem 'prawn', feature_category: :vulnerability_management
@@ -199,10 +201,8 @@ gem 'prawn-svg', feature_category: :vulnerability_management

 # for backups
 gem 'fog-aws', '~> 3.26', feature_category: :shared
-# Locked until fog-google resolves https://github.com/fog/fog-google/issues/421.
-# Also see config/initializers/fog_core_patch.rb.
-gem 'fog-core', '= 2.1.0', feature_category: :shared
-gem 'fog-google', '~> 1.24.1', require: 'fog/google', feature_category: :shared
+gem 'fog-core', '~> 2.5', feature_category: :shared
+gem 'fog-google', '~> 1.25', require: 'fog/google', feature_category: :shared
 gem 'fog-local', '~> 0.8', feature_category: :shared
 # NOTE:
 # the fog-aliyun gem since v0.4 pulls in aliyun-sdk transitively, which monkey-patches
@@ -211,25 +211,25 @@ gem 'fog-local', '~> 0.8', feature_category: :shared
 # We may want to update this dependency if this is ever addressed upstream, e.g. via
 # https://github.com/aliyun/aliyun-oss-ruby-sdk/pull/93
 gem 'fog-aliyun', '~> 0.4', feature_category: :shared
-gem 'gitlab-fog-azure-rm', '~> 2.2.0', require: 'fog/azurerm', feature_category: :shared
+gem 'gitlab-fog-azure-rm', '~> 2.3.0', require: 'fog/azurerm', feature_category: :shared

 # for Google storage

 # Need this specific version of google-apis-storage_v1 so that fog-google will utilize the updated list_objects with
 # match_glob support in google-apis-core 0.11.1. Because of this we also have to bump google-cloud-storage to 1.45.0.
 gem 'google-apis-storage_v1', '~> 0.29', feature_category: :shared
-gem 'google-cloud-storage', '~> 1.45.0', feature_category: :shared
+gem 'google-cloud-storage', '~> 1.57.0', feature_category: :shared
 # We need >= 0.11.1 because that's when match_glob support is added to list_objects
 gem 'google-apis-core', '~> 0.18.0', '>= 0.18.0', feature_category: :shared
-gem 'google-apis-compute_v1', '~> 0.127.0', feature_category: :shared
+gem 'google-apis-compute_v1', '~> 0.129.0', feature_category: :shared
 gem 'google-apis-container_v1', '~> 0.100.0', feature_category: :shared
-gem 'google-apis-container_v1beta1', '~> 0.43.0', feature_category: :shared
+gem 'google-apis-container_v1beta1', '~> 0.90.0', feature_category: :shared
 gem 'google-apis-cloudbilling_v1', '~> 0.22.0', feature_category: :shared
 gem 'google-apis-cloudresourcemanager_v1', '~> 0.31.0', feature_category: :shared
 gem 'google-apis-iam_v1', '~> 0.73.0', feature_category: :shared
 gem 'google-apis-serviceusage_v1', '~> 0.28.0', feature_category: :shared
 gem 'google-apis-sqladmin_v1beta4', '~> 0.41.0', feature_category: :shared
-gem 'google-apis-androidpublisher_v3', '~> 0.84.0', feature_category: :shared
+gem 'google-apis-androidpublisher_v3', '~> 0.86.0', feature_category: :shared

 gem 'googleauth', '~> 1.14', feature_category: :shared
 gem 'google-cloud-artifact_registry-v1', '~> 0.11.0', feature_category: :shared
@@ -380,9 +380,9 @@ gem 'rack-proxy', '~> 0.7.7', feature_category: :shared
 gem 'cssbundling-rails', '1.4.3', feature_category: :shared
 gem 'terser', '1.0.2', feature_category: :shared

-gem 'click_house-client', '0.3.5', feature_category: :database
+gem 'click_house-client', '0.5.1', feature_category: :database
 gem 'addressable', '~> 2.8', feature_category: :shared
-gem 'gon', '~> 6.4.0', feature_category: :shared
+gem 'gon', '~> 6.5.0', feature_category: :shared
 gem 'request_store', '~> 1.7.0', feature_category: :shared
 gem 'base32', '~> 0.3.0', feature_category: :shared
 gem 'gitlab-license', '~> 2.6', feature_category: :shared
@@ -403,7 +403,7 @@ gem 'gitlab-schema-validation', path: 'gems/gitlab-schema-validation', feature_c
 gem 'gitlab-http', path: 'gems/gitlab-http', feature_category: :shared

 gem 'premailer-rails', '~> 1.12.0', feature_category: :notifications
-gem 'gitlab-labkit', '~> 0.39.0', feature_category: :shared
+gem 'gitlab-labkit', '~> 0.40.0', feature_category: :shared
 gem 'thrift', '~> 0.22.0', feature_category: :shared

 # I18n
@@ -430,12 +430,16 @@ gem 'prometheus-client-mmap', '~> 1.2.9', require: 'prometheus/client', feature_

 # Event-driven reactor for Ruby
 # Required manually in config/initializers/require_async_gem
-gem 'async', '~> 2.24.0', require: false, feature_category: :shared
+gem 'async', '~> 2.28.0', require: false, feature_category: :shared
 gem 'io-event', '~> 1.12', require: false, feature_category: :shared

 # Security report schemas used to validate CI job artifacts of security jobs
 gem 'gitlab-security_report_schemas', '0.1.3.min15.0.0.max15.2.3', feature_category: :vulnerability_management

+# Frontend bundling
+gem 'vite_rails', '~> 3.0.17', feature_category: :shared
+gem 'vite_ruby', '~> 3.9.0', feature_category: :shared
+
 # OpenTelemetry
 group :opentelemetry do
  # Core OpenTelemetry gems
@@ -470,7 +474,8 @@ gem 'warning', '~> 1.5.0', feature_category: :shared

 group :development do
  gem 'lefthook', '~> 1.12.0', require: false, feature_category: :tooling
-  gem 'rubocop', feature_category: :tooling
+  gem 'rubocop', feature_category: :tooling, require: false
+  gem 'debug', '~> 1.11.0', feature_category: :shared

  gem 'solargraph', '~> 0.54.0', require: false, feature_category: :shared
  gem 'solargraph-rspec', '~> 0.5.1', require: false, feature_category: :shared
@@ -526,9 +531,6 @@ group :development, :test do
  gem 'benchmark-ips', '~> 2.14.0', require: false, feature_category: :shared
  gem 'benchmark-memory', '~> 0.1', require: false, feature_category: :shared

-  # Profiling data from CI/CD pipelines
-  gem 'influxdb-client', '~> 3.1', require: false, feature_category: :tooling
-
  gem 'knapsack', '~> 4.0.0', feature_category: :tooling
  gem 'gitlab-crystalball', '~> 1.1.0', require: false, feature_category: :tooling
  gem 'test_file_finder', '~> 0.3.1', feature_category: :tooling
@@ -543,11 +545,6 @@ group :development, :test do

  gem 'pact', '~> 1.64', feature_category: :shared

-  # For now we only use vite in development / test, and not for production builds
-  # See: https://gitlab.com/gitlab-org/frontend/rfcs/-/issues/106
-  gem 'vite_rails', '~> 3.0.17', feature_category: :shared
-  gem 'vite_ruby', '~> 3.9.0', feature_category: :shared
-
  gem 'gitlab-housekeeper', path: 'gems/gitlab-housekeeper', feature_category: :tooling

  gem 'yard', '~> 0.9', require: false, feature_category: :tooling
@@ -607,7 +604,7 @@ group :test do
  # Moved in `test` because https://gitlab.com/gitlab-org/gitlab/-/issues/217527
  gem 'derailed_benchmarks', require: false, feature_category: :shared

-  gem 'gitlab_quality-test_tooling', '~> 2.18.0', require: false, feature_category: :tooling
+  gem 'gitlab_quality-test_tooling', '~> 2.20.0', require: false, feature_category: :tooling
 end

 gem 'octokit', '~> 9.0', feature_category: :importers
@@ -643,10 +640,10 @@ gem 'ssh_data', '~> 1.3', feature_category: :shared
 gem 'spamcheck', '~> 1.3.0', feature_category: :insider_threat

 # Gitaly GRPC protocol definitions
-gem 'gitaly', '~> 18.2.0', feature_category: :gitaly
+gem 'gitaly', '~> 18.4.0.pre.rc1', feature_category: :gitaly

 # KAS GRPC protocol definitions
-gem 'gitlab-kas-grpc', '~> 18.2.0', feature_category: :deployment_management
+gem 'gitlab-kas-grpc', '~> 18.3.0', feature_category: :deployment_management

 gem 'grpc', '~> 1.74.0', feature_category: :shared

@@ -684,7 +681,7 @@ gem 'lru_redux', feature_category: :shared
 # fix STARTTLS handling until https://github.com/mikel/mail/pull/1536 is
 # released.
 gem 'mail', '= 2.8.1', feature_category: :shared
-gem 'mail-smtp_pool', '~> 0.1.0', path: 'vendor/gems/mail-smtp_pool', require: false, feature_category: :shared
+gem 'mail-smtp_pool', '~> 0.1.0', path: 'gems/mail-smtp_pool', require: false, feature_category: :shared

 gem 'microsoft_graph_mailer', '~> 0.1.0', path: 'vendor/gems/microsoft_graph_mailer', feature_category: :shared

@@ -700,7 +697,7 @@ gem 'json', '~> 2.13.0', feature_category: :shared
 gem 'json_schemer', '~> 2.3.0', feature_category: :shared
 gem 'oj', '~> 3.16.0', '>=3.16.10', feature_category: :shared
 gem 'oj-introspect', '~> 0.8', feature_category: :shared
-gem 'multi_json', '~> 1.14.1', feature_category: :shared
+gem 'multi_json', '~> 1.17.0', feature_category: :shared
 gem 'yajl-ruby', '~> 1.4.3', require: 'yajl', feature_category: :shared

 gem 'webauthn', '~> 3.0', feature_category: :shared
@@ -725,7 +722,7 @@ gem 'cvss-suite', '~> 3.3.0', require: 'cvss_suite', feature_category: :software
 gem 'arr-pm', '~> 0.0.12', feature_category: :package_registry

 # Remote Development
-gem 'devfile', '~> 0.4.4', feature_category: :workspaces
+gem 'devfile', '~> 0.4.8', feature_category: :workspaces
 gem 'hashdiff', '~> 1.2.0', feature_category: :workspaces

 # Apple plist parsing
@@ -733,7 +730,11 @@ gem 'CFPropertyList', '~> 3.0.0', feature_category: :mobile_devops
 gem 'app_store_connect', feature_category: :mobile_devops

 # For phone verification
-gem 'telesignenterprise', '~> 2.2', feature_category: :insider_threat
+gem 'telesignenterprise', '~> 2.6', feature_category: :insider_threat
+
+# NOTE: In Ruby 3.4 base64 was moved out of the stdlib
+# This gem was added while upgrading `telesignenterprise` to 2.6.0 to ensure compatibility with Ruby 3.4
+gem "base64", "~> 0.2.0", feature_category: :shared

 # BufferedIO patch
 gem 'net-protocol', '~> 0.2.2', feature_category: :shared
--- a/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile.lock
+++ b/pkgs/by-name/gi/gitlab/rubyEnv/Gemfile.lock
@@ -111,7 +111,7 @@ PATH
 PATH
  remote: gems/gitlab-utils
  specs:
-    gitlab-utils (0.1.0)
+    gitlab-utils (0.2.0)
      actionview (>= 6.1.7.2)
      activesupport (>= 6.1.7.2)
      addressable (~> 2.8)
@@ -124,6 +124,13 @@ PATH
      diffy (~> 3.4)
      oj (~> 3.16, >= 3.16.10)

+PATH
+  remote: gems/mail-smtp_pool
+  specs:
+    mail-smtp_pool (0.1.0)
+      connection_pool (~> 2.0)
+      mail (~> 2.8)
+
 PATH
  remote: vendor/gems/devise-pbkdf2-encryptable
  specs:
@@ -139,7 +146,7 @@ PATH
 PATH
  remote: vendor/gems/gitlab-duo-workflow-service-client
  specs:
-    gitlab-duo-workflow-service-client (0.2)
+    gitlab-duo-workflow-service-client (0.3)
      grpc

 PATH
@@ -149,13 +156,6 @@ PATH
      google-protobuf (~> 3)
      grpc

-PATH
-  remote: vendor/gems/mail-smtp_pool
-  specs:
-    mail-smtp_pool (0.1.0)
-      connection_pool (~> 2.0)
-      mail (~> 2.8)
-
 PATH
  remote: vendor/gems/microsoft_graph_mailer
  specs:
@@ -204,35 +204,35 @@ GEM
      base64 (~> 0.2)
      faraday (>= 1.0, < 3.0.0)
      faraday-retry (>= 1.0, < 3.0.0)
-    actioncable (7.1.5.1)
-      actionpack (= 7.1.5.1)
-      activesupport (= 7.1.5.1)
+    actioncable (7.1.5.2)
+      actionpack (= 7.1.5.2)
+      activesupport (= 7.1.5.2)
      nio4r (~> 2.0)
      websocket-driver (>= 0.6.1)
      zeitwerk (~> 2.6)
-    actionmailbox (7.1.5.1)
-      actionpack (= 7.1.5.1)
-      activejob (= 7.1.5.1)
-      activerecord (= 7.1.5.1)
-      activestorage (= 7.1.5.1)
-      activesupport (= 7.1.5.1)
+    actionmailbox (7.1.5.2)
+      actionpack (= 7.1.5.2)
+      activejob (= 7.1.5.2)
+      activerecord (= 7.1.5.2)
+      activestorage (= 7.1.5.2)
+      activesupport (= 7.1.5.2)
      mail (>= 2.7.1)
      net-imap
      net-pop
      net-smtp
-    actionmailer (7.1.5.1)
-      actionpack (= 7.1.5.1)
-      actionview (= 7.1.5.1)
-      activejob (= 7.1.5.1)
-      activesupport (= 7.1.5.1)
+    actionmailer (7.1.5.2)
+      actionpack (= 7.1.5.2)
+      actionview (= 7.1.5.2)
+      activejob (= 7.1.5.2)
+      activesupport (= 7.1.5.2)
      mail (~> 2.5, >= 2.5.4)
      net-imap
      net-pop
      net-smtp
      rails-dom-testing (~> 2.2)
-    actionpack (7.1.5.1)
-      actionview (= 7.1.5.1)
-      activesupport (= 7.1.5.1)
+    actionpack (7.1.5.2)
+      actionview (= 7.1.5.2)
+      activesupport (= 7.1.5.2)
      nokogiri (>= 1.8.5)
      racc
      rack (>= 2.2.4)
@@ -240,35 +240,35 @@ GEM
      rack-test (>= 0.6.3)
      rails-dom-testing (~> 2.2)
      rails-html-sanitizer (~> 1.6)
-    actiontext (7.1.5.1)
-      actionpack (= 7.1.5.1)
-      activerecord (= 7.1.5.1)
-      activestorage (= 7.1.5.1)
-      activesupport (= 7.1.5.1)
+    actiontext (7.1.5.2)
+      actionpack (= 7.1.5.2)
+      activerecord (= 7.1.5.2)
+      activestorage (= 7.1.5.2)
+      activesupport (= 7.1.5.2)
      globalid (>= 0.6.0)
      nokogiri (>= 1.8.5)
-    actionview (7.1.5.1)
-      activesupport (= 7.1.5.1)
+    actionview (7.1.5.2)
+      activesupport (= 7.1.5.2)
      builder (~> 3.1)
      erubi (~> 1.11)
      rails-dom-testing (~> 2.2)
      rails-html-sanitizer (~> 1.6)
-    activejob (7.1.5.1)
-      activesupport (= 7.1.5.1)
+    activejob (7.1.5.2)
+      activesupport (= 7.1.5.2)
      globalid (>= 0.3.6)
-    activemodel (7.1.5.1)
-      activesupport (= 7.1.5.1)
-    activerecord (7.1.5.1)
-      activemodel (= 7.1.5.1)
-      activesupport (= 7.1.5.1)
+    activemodel (7.1.5.2)
+      activesupport (= 7.1.5.2)
+    activerecord (7.1.5.2)
+      activemodel (= 7.1.5.2)
+      activesupport (= 7.1.5.2)
      timeout (>= 0.4.0)
-    activestorage (7.1.5.1)
-      actionpack (= 7.1.5.1)
-      activejob (= 7.1.5.1)
-      activerecord (= 7.1.5.1)
-      activesupport (= 7.1.5.1)
+    activestorage (7.1.5.2)
+      actionpack (= 7.1.5.2)
+      activejob (= 7.1.5.2)
+      activerecord (= 7.1.5.2)
+      activesupport (= 7.1.5.2)
      marcel (~> 1.0)
-    activesupport (7.1.5.1)
+    activesupport (7.1.5.2)
      base64
      benchmark (>= 0.3)
      bigdecimal
@@ -308,12 +308,12 @@ GEM
    asciidoctor-plantuml (0.0.16)
      asciidoctor (>= 2.0.17, < 3.0.0)
    ast (2.4.2)
-    async (2.24.0)
+    async (2.28.0)
      console (~> 1.29)
      fiber-annotation
-      io-event (~> 1.9)
+      io-event (~> 1.11)
      metrics (~> 0.12)
-      traces (~> 0.15)
+      traces (~> 0.18)
    atlassian-jwt (0.2.1)
      jwt (~> 2.1)
    attr_encrypted (4.2.0)
@@ -323,7 +323,7 @@ GEM
    awrence (1.2.1)
    aws-eventstream (1.3.0)
    aws-partitions (1.1001.0)
-    aws-sdk-cloudformation (1.133.0)
+    aws-sdk-cloudformation (1.134.0)
      aws-sdk-core (~> 3, >= 3.225.0)
      aws-sigv4 (~> 1.5)
    aws-sdk-core (3.226.3)
@@ -421,7 +421,7 @@ GEM
      cork
      nap
      open4 (~> 1.3)
-    click_house-client (0.3.5)
+    click_house-client (0.5.1)
      activerecord (>= 7.0, < 9.0)
      activesupport (>= 7.0, < 9.0)
      addressable (~> 2.8)
@@ -432,7 +432,7 @@ GEM
    colored2 (3.1.2)
    commonmarker (0.23.11)
    concurrent-ruby (1.3.5)
-    connection_pool (2.5.3)
+    connection_pool (2.5.4)
    console (1.29.2)
      fiber-annotation
      fiber-local (~> 1.1)
@@ -480,12 +480,15 @@ GEM
    database_cleaner-core (2.0.1)
    date (3.4.1)
    deb_version (1.0.2)
+    debug (1.11.0)
+      irb (~> 1.10)
+      reline (>= 0.3.8)
    debug_inspector (1.1.0)
    deckar01-task_list (2.3.4)
      html-pipeline (~> 2.0)
    declarative (0.0.20)
-    declarative_policy (1.1.0)
-    deprecation_toolkit (2.2.3)
+    declarative_policy (2.0.1)
+    deprecation_toolkit (2.2.4)
      activesupport (>= 6.1)
    derailed_benchmarks (2.2.1)
      base64
@@ -507,7 +510,7 @@ GEM
      thor (>= 0.19, < 2)
    descendants_tracker (0.0.4)
      thread_safe (~> 0.3, >= 0.3.1)
-    devfile (0.4.4)
+    devfile (0.4.8)
    device_detector (1.1.3)
    devise (4.9.4)
      bcrypt (~> 3.0)
@@ -584,7 +587,8 @@ GEM
      tzinfo
    ethon (0.16.0)
      ffi (>= 1.15.0)
-    excon (0.99.0)
+    excon (1.3.0)
+      logger
    execjs (2.8.1)
    expgen (0.1.1)
      parslet
@@ -650,19 +654,19 @@ GEM
      fog-json
      ipaddress (~> 0.8)
      xml-simple (~> 1.1)
-    fog-aws (3.28.0)
-      base64 (~> 0.2.0)
-      fog-core (~> 2.1)
+    fog-aws (3.33.0)
+      base64 (>= 0.2, < 0.4)
+      fog-core (~> 2.6)
      fog-json (~> 1.1)
      fog-xml (~> 0.1)
-    fog-core (2.1.0)
+    fog-core (2.6.0)
      builder
-      excon (~> 0.58)
-      formatador (~> 0.2)
+      excon (~> 1.0)
+      formatador (>= 0.2, < 2.0)
      mime-types
-    fog-google (1.24.1)
+    fog-google (1.25.0)
      addressable (>= 2.7.0)
-      fog-core (< 2.5)
+      fog-core (~> 2.5)
      fog-json (~> 1.2)
      fog-xml (~> 0.1.0)
      google-apis-compute_v1 (~> 0.53)
@@ -676,14 +680,14 @@ GEM
    fog-json (1.2.0)
      fog-core
      multi_json (~> 1.10)
-    fog-local (0.8.0)
+    fog-local (0.9.0)
      fog-core (>= 1.27, < 3.0)
    fog-xml (0.1.5)
      fog-core
      nokogiri (>= 1.5.11, < 2.0.0)
    formatador (0.2.5)
    forwardable (1.3.3)
-    fugit (1.11.1)
+    fugit (1.11.2)
      et-orbi (~> 1, >= 1.2.11)
      raabro (~> 1.4)
    fuzzyurl (0.9.0)
@@ -712,14 +716,14 @@ GEM
    git (1.19.1)
      addressable (~> 2.8)
      rchardet (~> 1.8)
-    gitaly (18.2.1)
+    gitaly (18.4.0.pre.rc1)
      grpc (~> 1.0)
    gitlab (4.19.0)
      httparty (~> 0.20)
      terminal-table (>= 1.5.1)
    gitlab-chronic (0.10.6)
      numerizer (~> 0.2)
-    gitlab-cloud-connector (1.26.0)
+    gitlab-cloud-connector (1.32.0)
      activesupport (~> 7.0)
      jwt (~> 2.9)
    gitlab-crystalball (1.1.1)
@@ -732,7 +736,7 @@ GEM
    gitlab-experiment (0.9.1)
      activesupport (>= 3.0)
      request_store (>= 1.0)
-    gitlab-fog-azure-rm (2.2.0)
+    gitlab-fog-azure-rm (2.3.0)
      faraday (~> 2.0)
      faraday-follow_redirects (~> 0.3.0)
      faraday-net_http_persistent (~> 2.0)
@@ -743,14 +747,15 @@ GEM
      nokogiri (~> 1, >= 1.10.8)
    gitlab-glfm-markdown (0.0.33)
      rb_sys (~> 0.9.109)
-    gitlab-kas-grpc (18.2.1)
+    gitlab-kas-grpc (18.3.2)
      grpc (~> 1.0)
-    gitlab-labkit (0.39.0)
+    gitlab-labkit (0.40.0)
      actionpack (>= 5.0.0, < 8.1.0)
      activesupport (>= 5.0.0, < 8.1.0)
      google-protobuf (~> 3)
      grpc (>= 1.62)
      jaeger-client (~> 1.1.0)
+      json-schema (~> 5.1)
      opentracing (~> 0.4)
      pg_query (>= 6.1.0, < 7.0)
      prometheus-client-mmap (~> 1.2.9)
@@ -769,7 +774,7 @@ GEM
      activesupport (>= 5.2.0)
      rake (~> 13.0)
      snowplow-tracker (~> 0.8.0)
-    gitlab-secret_detection (0.33.0)
+    gitlab-secret_detection (0.33.3)
      grpc (>= 1.63.0, < 2)
      grpc_reflection (~> 0.1)
      parallel (~> 1)
@@ -792,12 +797,12 @@ GEM
      rubocop-rspec_rails (~> 2.30.0)
    gitlab_chronic_duration (0.12.0)
      numerizer (~> 0.2)
-    gitlab_omniauth-ldap (2.2.0)
+    gitlab_omniauth-ldap (2.3.0)
      net-ldap (~> 0.16)
      omniauth (>= 1.3, < 3)
      pyu-ruby-sasl (>= 0.0.3.3, < 0.1)
      rubyntlm (~> 0.5)
-    gitlab_quality-test_tooling (2.18.0)
+    gitlab_quality-test_tooling (2.20.0)
      activesupport (>= 7.0, < 7.3)
      amatch (~> 0.4.1)
      fog-google (~> 1.24, >= 1.24.1)
@@ -812,12 +817,12 @@ GEM
      zeitwerk (>= 2, < 3)
    globalid (1.1.0)
      activesupport (>= 5.0)
-    gon (6.4.0)
+    gon (6.5.0)
      actionpack (>= 3.0.20)
      i18n (>= 0.7)
      multi_json
      request_store (>= 1.0)
-    google-apis-androidpublisher_v3 (0.84.0)
+    google-apis-androidpublisher_v3 (0.86.0)
      google-apis-core (>= 0.15.0, < 2.a)
    google-apis-bigquery_v2 (0.90.0)
      google-apis-core (>= 0.15.0, < 2.a)
@@ -825,12 +830,12 @@ GEM
      google-apis-core (>= 0.9.1, < 2.a)
    google-apis-cloudresourcemanager_v1 (0.31.0)
      google-apis-core (>= 0.9.1, < 2.a)
-    google-apis-compute_v1 (0.127.0)
+    google-apis-compute_v1 (0.129.0)
      google-apis-core (>= 0.15.0, < 2.a)
    google-apis-container_v1 (0.100.0)
      google-apis-core (>= 0.15.0, < 2.a)
-    google-apis-container_v1beta1 (0.43.0)
-      google-apis-core (>= 0.9.1, < 2.a)
+    google-apis-container_v1beta1 (0.90.0)
+      google-apis-core (>= 0.15.0, < 2.a)
    google-apis-core (0.18.0)
      addressable (~> 2.5, >= 2.5.1)
      googleauth (~> 1.9)
@@ -843,8 +848,8 @@ GEM
      google-apis-core (>= 0.11.0, < 2.a)
    google-apis-iam_v1 (0.73.0)
      google-apis-core (>= 0.15.0, < 2.a)
-    google-apis-iamcredentials_v1 (0.15.0)
-      google-apis-core (>= 0.9.0, < 2.a)
+    google-apis-iamcredentials_v1 (0.24.0)
+      google-apis-core (>= 0.15.0, < 2.a)
    google-apis-monitoring_v3 (0.54.0)
      google-apis-core (>= 0.11.0, < 2.a)
    google-apis-pubsub_v1 (0.45.0)
@@ -853,8 +858,8 @@ GEM
      google-apis-core (>= 0.9.1, < 2.a)
    google-apis-sqladmin_v1beta4 (0.41.0)
      google-apis-core (>= 0.9.1, < 2.a)
-    google-apis-storage_v1 (0.29.0)
-      google-apis-core (>= 0.11.0, < 2.a)
+    google-apis-storage_v1 (0.56.0)
+      google-apis-core (>= 0.15.0, < 2.a)
    google-cloud-artifact_registry-v1 (0.11.0)
      gapic-common (>= 0.20.0, < 2.a)
      google-cloud-errors (~> 1.0)
@@ -884,13 +889,14 @@ GEM
    google-cloud-location (0.6.0)
      gapic-common (>= 0.20.0, < 2.a)
      google-cloud-errors (~> 1.0)
-    google-cloud-storage (1.45.0)
+    google-cloud-storage (1.57.0)
      addressable (~> 2.8)
      digest-crc (~> 0.4)
-      google-apis-iamcredentials_v1 (~> 0.1)
-      google-apis-storage_v1 (~> 0.29.0)
+      google-apis-core (>= 0.18, < 2)
+      google-apis-iamcredentials_v1 (~> 0.18)
+      google-apis-storage_v1 (>= 0.42)
      google-cloud-core (~> 1.6)
-      googleauth (>= 0.16.2, < 2.a)
+      googleauth (~> 1.9)
      mini_mime (~> 1.0)
    google-cloud-storage_transfer (1.2.0)
      google-cloud-core (~> 1.6)
@@ -1064,6 +1070,9 @@ GEM
      bindata
      faraday (~> 2.0)
      faraday-follow_redirects
+    json-schema (5.2.2)
+      addressable (~> 2.8)
+      bigdecimal (~> 3.1)
    json_schemer (2.3.0)
      bigdecimal
      hana (~> 1.3)
@@ -1103,7 +1112,7 @@ GEM
    language_server-protocol (3.17.0.3)
    launchy (2.5.2)
      addressable (~> 2.8)
-    lefthook (1.12.2)
+    lefthook (1.12.3)
    letter_opener (1.10.0)
      launchy (>= 2.2, < 4)
    letter_opener_web (3.0.0)
@@ -1162,7 +1171,7 @@ GEM
      net-imap
      net-pop
      net-smtp
-    marcel (1.0.2)
+    marcel (1.0.4)
    marginalia (1.11.1)
      actionpack (>= 5.2)
      activerecord (>= 5.2)
@@ -1174,7 +1183,7 @@ GEM
      mime-types-data (~> 3.2015)
    mime-types-data (3.2023.1003)
    mini_histogram (0.3.1)
-    mini_magick (4.12.0)
+    mini_magick (4.13.2)
    mini_mime (1.1.2)
    mini_portile2 (2.8.8)
    minitest (5.11.3)
@@ -1187,7 +1196,7 @@ GEM
      chef-utils
    mize (0.6.1)
    msgpack (1.5.4)
-    multi_json (1.14.1)
+    multi_json (1.17.0)
    multi_xml (0.6.0)
    multipart-post (2.2.3)
    murmurhash3 (0.1.7)
@@ -1456,7 +1465,7 @@ GEM
    pdf-core (0.10.0)
    peek (1.1.0)
      railties (>= 4.0.0)
-    pg (1.6.1)
+    pg (1.6.2)
    pg_query (6.1.0)
      google-protobuf (>= 3.25.3)
    plist (3.7.0)
@@ -1541,20 +1550,20 @@ GEM
    rackup (1.0.1)
      rack (< 3)
      webrick
-    rails (7.1.5.1)
-      actioncable (= 7.1.5.1)
-      actionmailbox (= 7.1.5.1)
-      actionmailer (= 7.1.5.1)
-      actionpack (= 7.1.5.1)
-      actiontext (= 7.1.5.1)
-      actionview (= 7.1.5.1)
-      activejob (= 7.1.5.1)
-      activemodel (= 7.1.5.1)
-      activerecord (= 7.1.5.1)
-      activestorage (= 7.1.5.1)
-      activesupport (= 7.1.5.1)
+    rails (7.1.5.2)
+      actioncable (= 7.1.5.2)
+      actionmailbox (= 7.1.5.2)
+      actionmailer (= 7.1.5.2)
+      actionpack (= 7.1.5.2)
+      actiontext (= 7.1.5.2)
+      actionview (= 7.1.5.2)
+      activejob (= 7.1.5.2)
+      activemodel (= 7.1.5.2)
+      activerecord (= 7.1.5.2)
+      activestorage (= 7.1.5.2)
+      activesupport (= 7.1.5.2)
      bundler (>= 1.15.0)
-      railties (= 7.1.5.1)
+      railties (= 7.1.5.2)
    rails-controller-testing (1.0.5)
      actionpack (>= 5.0.1.rc1)
      actionview (>= 5.0.1.rc1)
@@ -1569,9 +1578,9 @@ GEM
    rails-i18n (7.0.10)
      i18n (>= 0.7, < 2)
      railties (>= 6.0.0, < 8)
-    railties (7.1.5.1)
-      actionpack (= 7.1.5.1)
-      activesupport (= 7.1.5.1)
+    railties (7.1.5.2)
+      actionpack (= 7.1.5.2)
+      activesupport (= 7.1.5.2)
      irb
      rackup (>= 1.0.0)
      rake (>= 12.2)
@@ -1606,7 +1615,7 @@ GEM
      actionpack (>= 5)
      redis-rack (>= 2.1.0, < 4)
      redis-store (>= 1.1.0, < 2)
-    redis-client (0.25.1)
+    redis-client (0.25.3)
      connection_pool
    redis-cluster-client (0.13.5)
      redis-client (~> 0.24)
@@ -1641,7 +1650,7 @@ GEM
    retriable (3.1.2)
    reverse_markdown (3.0.0)
      nokogiri
-    rexml (3.4.1)
+    rexml (3.4.2)
    rinku (2.0.0)
    rotp (6.3.0)
    rouge (4.6.0)
@@ -1890,10 +1899,10 @@ GEM
    table_print (1.5.7)
    tanuki_emoji (0.13.0)
      i18n (~> 1.14)
-    telesign (2.2.4)
+    telesign (2.4.0)
      net-http-persistent (>= 3.0.0, < 5.0)
-    telesignenterprise (2.2.2)
-      telesign (~> 2.2.3)
+    telesignenterprise (2.6.0)
+      telesign (~> 2.4.0)
    temple (0.8.2)
    term-ansicolor (1.7.1)
      tins (~> 1.0)
@@ -1920,7 +1929,7 @@ GEM
      bindata (~> 2.4)
      openssl (> 2.0)
      openssl-signature_algorithm (~> 1.0)
-    traces (0.15.2)
+    traces (0.18.1)
    trailblazer-option (0.1.2)
    train-core (3.10.8)
      addressable (~> 2.5)
@@ -2067,7 +2076,7 @@ DEPENDENCIES
  asciidoctor-include-ext (~> 0.4.0)
  asciidoctor-kroki (~> 0.10.0)
  asciidoctor-plantuml (~> 0.0.16)
-  async (~> 2.24.0)
+  async (~> 2.28.0)
  atlassian-jwt (~> 0.2.1)
  attr_encrypted (~> 4.2)
  awesome_print
@@ -2077,6 +2086,7 @@ DEPENDENCIES
  axe-core-rspec (~> 4.10.0)
  babosa (~> 2.0)
  base32 (~> 0.3.0)
+  base64 (~> 0.2.0)
  batch-loader (~> 2.0.5)
  bcrypt (~> 3.1, >= 3.1.14)
  benchmark-ips (~> 2.14.0)
@@ -2091,7 +2101,7 @@ DEPENDENCIES
  carrierwave (~> 1.3)
  charlock_holmes (~> 0.7.9)
  circuitbox (= 2.0.0)
-  click_house-client (= 0.3.5)
+  click_house-client (= 0.5.1)
  commonmarker (~> 0.23.10)
  concurrent-ruby (~> 1.1)
  connection_pool (~> 2.5.3)
@@ -2102,11 +2112,12 @@ DEPENDENCIES
  csv_builder!
  cvss-suite (~> 3.3.0)
  database_cleaner-active_record (~> 2.2.0)
+  debug (~> 1.11.0)
  deckar01-task_list (= 2.3.4)
-  declarative_policy (~> 1.1.0)
+  declarative_policy (~> 2.0.1)
  deprecation_toolkit (~> 2.2.3)
  derailed_benchmarks
-  devfile (~> 0.4.4)
+  devfile (~> 0.4.8)
  device_detector
  devise (~> 4.9.3)
  devise-pbkdf2-encryptable (~> 0.0.0)!
@@ -2139,29 +2150,29 @@ DEPENDENCIES
  flipper-active_support_cache_store (~> 0.28.0)
  fog-aliyun (~> 0.4)
  fog-aws (~> 3.26)
-  fog-core (= 2.1.0)
-  fog-google (~> 1.24.1)
+  fog-core (~> 2.5)
+  fog-google (~> 1.25)
  fog-local (~> 0.8)
  fugit (~> 1.11.1)
  gdk-toogle (~> 0.9, >= 0.9.5)
  gettext (~> 3.5, >= 3.5.1)
  gettext_i18n_rails (~> 1.13.0)
  git (~> 1.8)
-  gitaly (~> 18.2.0)
+  gitaly (~> 18.4.0.pre.rc1)
  gitlab-active-context!
  gitlab-backup-cli!
  gitlab-chronic (~> 0.10.5)
  gitlab-cloud-connector (~> 1.26)
  gitlab-crystalball (~> 1.1.0)
  gitlab-dangerfiles (~> 4.10.0)
-  gitlab-duo-workflow-service-client (~> 0.2)!
+  gitlab-duo-workflow-service-client (~> 0.3)!
  gitlab-experiment (~> 0.9.1)
-  gitlab-fog-azure-rm (~> 2.2.0)
+  gitlab-fog-azure-rm (~> 2.3.0)
  gitlab-glfm-markdown (~> 0.0.33)
  gitlab-housekeeper!
  gitlab-http!
-  gitlab-kas-grpc (~> 18.2.0)
-  gitlab-labkit (~> 0.39.0)
+  gitlab-kas-grpc (~> 18.3.0)
+  gitlab-labkit (~> 0.40.0)
  gitlab-license (~> 2.6)
  gitlab-mail_room (~> 0.0.24)
  gitlab-markup (~> 2.0.0)
@@ -2178,15 +2189,15 @@ DEPENDENCIES
  gitlab-topology-service-client (~> 0.1)!
  gitlab-utils!
  gitlab_chronic_duration (~> 0.12)
-  gitlab_omniauth-ldap (~> 2.2.0)
-  gitlab_quality-test_tooling (~> 2.18.0)
-  gon (~> 6.4.0)
-  google-apis-androidpublisher_v3 (~> 0.84.0)
+  gitlab_omniauth-ldap (~> 2.3.0)
+  gitlab_quality-test_tooling (~> 2.20.0)
+  gon (~> 6.5.0)
+  google-apis-androidpublisher_v3 (~> 0.86.0)
  google-apis-cloudbilling_v1 (~> 0.22.0)
  google-apis-cloudresourcemanager_v1 (~> 0.31.0)
-  google-apis-compute_v1 (~> 0.127.0)
+  google-apis-compute_v1 (~> 0.129.0)
  google-apis-container_v1 (~> 0.100.0)
-  google-apis-container_v1beta1 (~> 0.43.0)
+  google-apis-container_v1beta1 (~> 0.90.0)
  google-apis-core (~> 0.18.0, >= 0.18.0)
  google-apis-iam_v1 (~> 0.73.0)
  google-apis-serviceusage_v1 (~> 0.28.0)
@@ -2195,7 +2206,7 @@ DEPENDENCIES
  google-cloud-artifact_registry-v1 (~> 0.11.0)
  google-cloud-bigquery (~> 1.0)
  google-cloud-compute-v1 (~> 2.6.0)
-  google-cloud-storage (~> 1.45.0)
+  google-cloud-storage (~> 1.57.0)
  google-protobuf (~> 3.25, >= 3.25.3)
  googleauth (~> 1.14)
  gpgme (~> 2.0.24)
@@ -2221,7 +2232,6 @@ DEPENDENCIES
  httparty (~> 0.23.0)
  i18n_data (~> 0.13.1)
  icalendar (~> 2.10.1)
-  influxdb-client (~> 3.1)
  invisible_captcha (~> 2.3.0)
  io-event (~> 1.12)
  ipaddress (~> 0.8.3)
@@ -2249,12 +2259,13 @@ DEPENDENCIES
  lru_redux
  mail (= 2.8.1)
  mail-smtp_pool (~> 0.1.0)!
+  marcel (~> 1.0.4)
  marginalia (~> 1.11.1)
  memory_profiler (~> 1.0)
  microsoft_graph_mailer (~> 0.1.0)!
  mini_magick (~> 4.12)
  minitest (~> 5.11.0)
-  multi_json (~> 1.14.1)
+  multi_json (~> 1.17.0)
  mutex_m (~> 0.3)
  net-http (= 0.6.0)
  net-ldap (~> 0.17.1)
@@ -2331,7 +2342,7 @@ DEPENDENCIES
  rack-oauth2 (~> 2.2.1)
  rack-proxy (~> 0.7.7)
  rack-timeout (~> 0.7.0)
-  rails (~> 7.1.5.1)
+  rails (~> 7.1.5.2)
  rails-controller-testing
  rails-i18n (~> 7.0, >= 7.0.9)
  rainbow (~> 3.0)
@@ -2396,7 +2407,7 @@ DEPENDENCIES
  state_machines-rspec (~> 0.6)
  sys-filesystem (~> 1.4.3)
  tanuki_emoji (~> 0.13)
-  telesignenterprise (~> 2.2)
+  telesignenterprise (~> 2.6)
  terser (= 1.0.2)
  test-prof (~> 1.4.0)
  test_file_finder (~> 0.3.1)
--- a/pkgs/by-name/gi/gitlab/rubyEnv/gemset.nix
+++ b/pkgs/by-name/gi/gitlab/rubyEnv/gemset.nix
@@ -30,10 +30,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "03dai8z2dxb2cf29hp6md7bhysyipxvw2qnm2bj98yyrnaskfikn";
+      sha256 = "0dsyppp79da5p5jh3wxry08vy401xrff4sgww47i2l93mdyldpbr";
      type = "gem";
    };
-    version = "7.1.5.1";
+    version = "7.1.5.2";
  };
  actionmailbox = {
    dependencies = [
@@ -55,10 +55,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "02inlpsmjz8rz159ljhzac1dvzq5k1pnmmx2pf4gmrj3zs4hbhn3";
+      sha256 = "0kmcvibpi4ppk1j1dkqhglix73xhyr29k6l2ziy92azy0b0isaqr";
      type = "gem";
    };
-    version = "7.1.5.1";
+    version = "7.1.5.2";
  };
  actionmailer = {
    dependencies = [
@@ -80,10 +80,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0ncplhcrxldj6jvbaw9g8ik4cznjlf3lyfzgrwy0jfxjh3cdc4xj";
+      sha256 = "02w6kq5c2pjp1svfxxqqa46z6zgj2y7x6wybgpln9g5i3vn5yp3s";
      type = "gem";
    };
-    version = "7.1.5.1";
+    version = "7.1.5.2";
  };
  actionpack = {
    dependencies = [
@@ -105,10 +105,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "066p70mngqk8m7qp3wq2frbl1w8imdcrdxb06cxwq5izykcn7hib";
+      sha256 = "1za4sv0ch8j7adfldglp8jalcc8s68h031sqldw0f9pbmb4fvgx7";
      type = "gem";
    };
-    version = "7.1.5.1";
+    version = "7.1.5.2";
  };
  actiontext = {
    dependencies = [
@@ -127,10 +127,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1v7psa946frm79x04vywnd0h069jgxy5xghm7y5sgijvmp7n3qmq";
+      sha256 = "01q275ihq4gds2yvlbzdpqap95z5divwany0x5lcnqhpc7j7hmjh";
      type = "gem";
    };
-    version = "7.1.5.1";
+    version = "7.1.5.2";
  };
  actionview = {
    dependencies = [
@@ -149,10 +149,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1apnqjfwbvyhf7svlamal1pvy2x78fk42lqbnllqwy816lhrlmcc";
+      sha256 = "1jd1biyrf3n45jilazfqli27jnlk60bpn82mi4i1wqxcgsn1djag";
      type = "gem";
    };
-    version = "7.1.5.1";
+    version = "7.1.5.2";
  };
  activejob = {
    dependencies = [
@@ -167,10 +167,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0rspwfvhxs5by6im90rrjp2sy1wzdpcgb9xm0qfljk3zhmn3fcvn";
+      sha256 = "0kl0ppvvxhd4igaxpbn64yyam120vyf0h2bbzqs1xa6dqnjn5dmg";
      type = "gem";
    };
-    version = "7.1.5.1";
+    version = "7.1.5.2";
  };
  activemodel = {
    dependencies = [ "activesupport" ];
@@ -183,10 +183,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1wci45aas8g909zby9j91m87ff5j28qwl0i7izzbszsahmk78wkl";
+      sha256 = "1df89b7pf66r5v6ixf2kn5mb3mzhpkggqqw544685vhlhrmabdjg";
      type = "gem";
    };
-    version = "7.1.5.1";
+    version = "7.1.5.2";
  };
  activerecord = {
    dependencies = [
@@ -203,10 +203,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1qzij5xmsqqxsc9v9kil68aif5bvly06vqf4pnjrnfzkkdhd22pl";
+      sha256 = "0alxm4yk5zqnzfj8jj06cwfzgb3gvcvab8mzd0lgs9x75lmsfgcj";
      type = "gem";
    };
-    version = "7.1.5.1";
+    version = "7.1.5.2";
  };
  activerecord-gitlab = {
    dependencies = [ "activerecord" ];
@@ -234,10 +234,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0qzz8dxwj70zys1lmqk1x0sl4rb7ddw6v2bgmpm6dijqd03qnsxf";
+      sha256 = "163wq77fx38vjdb4jhvfphahnrzdp2kq9ngg02g5y4zaghacp6pd";
      type = "gem";
    };
-    version = "7.1.5.1";
+    version = "7.1.5.2";
  };
  activesupport = {
    dependencies = [
@@ -263,10 +263,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1f6gqyl49hdabid5jkrfq0127gd396srsgpy7p5ni61v8wp4h34z";
+      sha256 = "1lbfsgmbn87mim29v7h5w4v8zflhx6zxrbbp95hfmgxcr2wk204h";
      type = "gem";
    };
-    version = "7.1.5.1";
+    version = "7.1.5.2";
  };
  addressable = {
    dependencies = [ "public_suffix" ];
@@ -454,10 +454,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0xs3qdlm8fj6zksqp5daamc51azwgbrp3b6mbqcxl22qdnn137aq";
+      sha256 = "0vhmmn7n92ilvkvbdbav85hyg8w047zm20vbfzk502g0j495sv4n";
      type = "gem";
    };
-    version = "2.24.0";
+    version = "2.28.0";
  };
  atlassian-jwt = {
    dependencies = [ "jwt" ];
@@ -543,10 +543,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "08d3khg5bpi73vmghphr5w4acds2vr8gcdpm93fsaj38wvb960s9";
+      sha256 = "1vfqzm1l24sks97y1iyg6bmmnf99hinymc3dw4bzkq546rx36ldq";
      type = "gem";
    };
-    version = "1.133.0";
+    version = "1.134.0";
  };
  aws-sdk-core = {
    dependencies = [
@@ -1128,10 +1128,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0lf1lr3h9bfzyfrh5m8v5p900ld545y13vks1gyy163riyi8wfxx";
+      sha256 = "0s9dgq9k6caappqr6y6vbzx3d8pmcb58cbp37am9slmfyvq2l0hh";
      type = "gem";
    };
-    version = "0.3.5";
+    version = "0.5.1";
  };
  coderay = {
    groups = [
@@ -1220,10 +1220,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0nrhsk7b3sjqbyl1cah6ibf1kvi3v93a7wf4637d355hp614mmyg";
+      sha256 = "02p7l47gvchbvnbag6kb4x2hg8n28r25ybslyvrr2q214wir5qg9";
      type = "gem";
    };
-    version = "2.5.3";
+    version = "2.5.4";
  };
  console = {
    dependencies = [
@@ -1494,6 +1494,20 @@ src: {
    };
    version = "1.0.2";
  };
+  debug = {
+    dependencies = [
+      "irb"
+      "reline"
+    ];
+    groups = [ "development" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1wmfy5n5v2rzpr5vz698sqfj1gl596bxrqw44sahq4x0rxjdn98l";
+      type = "gem";
+    };
+    version = "1.11.0";
+  };
  debug_inspector = {
    groups = [
      "default"
@@ -1533,10 +1547,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1jri6fqpyrlnhl99mhqlqwpi6z8idb7g421rysxz40yyk8lwzx4s";
+      sha256 = "1s76qc7fz4ww4nf545jyp4fd3j10cn8zhbxii7pxdnkyr1zsdias";
      type = "gem";
    };
-    version = "1.1.0";
+    version = "2.0.1";
  };
  deprecation_toolkit = {
    dependencies = [ "activesupport" ];
@@ -1547,10 +1561,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0k8j50avgs2pgv20wvrzr77g9yvhi5sa9yh93n72nyd4hhbd28cb";
+      sha256 = "09i5rffqgn9idg7nk47zfhrf3lnwsjws1xlqxqkj7lncmrgdgnmi";
      type = "gem";
    };
-    version = "2.2.3";
+    version = "2.2.4";
  };
  derailed_benchmarks = {
    dependencies = [
@@ -1600,10 +1614,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1dcj3r8gh4y4cks1qk5qhj89ggk6z8kmk3hq9nlvnm9pnb7m9fbs";
+      sha256 = "1nnd5jbasxvk9wjjy68yymd98ah8wjzkrpskvs74djl8rj8yzj6j";
      type = "gem";
    };
-    version = "0.4.4";
+    version = "0.4.8";
  };
  device_detector = {
    groups = [ "default" ];
@@ -2081,14 +2095,18 @@ src: {
    version = "0.16.0";
  };
  excon = {
-    groups = [ "default" ];
+    dependencies = [ "logger" ];
+    groups = [
+      "default"
+      "test"
+    ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0j826kfvzn7nc5pv950n270r0sx1702k988ad11cdlav3dcxxw09";
+      sha256 = "1gj6h2r9ylkmz9wjlf6p04d3hw99qfnf0wb081lzjx3alk13ngfq";
      type = "gem";
    };
-    version = "0.99.0";
+    version = "1.3.0";
  };
  execjs = {
    groups = [ "default" ];
@@ -2486,10 +2504,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1kb7jlynlf4ppjp0vyp02kyajpr86k8z64pakjz18f8jxc9pwbkx";
+      sha256 = "18m71bpib6x9shbjhmzww28pas15abngah7vmrkfigfnw5ccsjyf";
      type = "gem";
    };
-    version = "3.28.0";
+    version = "3.33.0";
  };
  fog-core = {
    dependencies = [
@@ -2498,14 +2516,17 @@ src: {
      "formatador"
      "mime-types"
    ];
-    groups = [ "default" ];
+    groups = [
+      "default"
+      "test"
+    ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1agd6xgzk0rxrsjdpn94v4hy89s0nm2cs4zg2p880w2dan9xgrak";
+      sha256 = "1rjv4iqr64arxv07bh84zzbr1y081h21592b5zjdrk937al8mq1z";
      type = "gem";
    };
-    version = "2.1.0";
+    version = "2.6.0";
  };
  fog-google = {
    dependencies = [
@@ -2522,14 +2543,17 @@ src: {
      "google-apis-storage_v1"
      "google-cloud-env"
    ];
-    groups = [ "default" ];
+    groups = [
+      "default"
+      "test"
+    ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1q2qhdkz7axp1f853d3jxx852gj5idrqhypxk8k3zm9fs72lxmnw";
+      sha256 = "13z1ghq9ifd1n2yp1srf7r03hw7y5hl52frarbb8x4zmmfqa7bjq";
      type = "gem";
    };
-    version = "1.24.1";
+    version = "1.25.0";
  };
  fog-json = {
    dependencies = [
@@ -2551,10 +2575,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0yggsxd7c58p5i8zgvfw9rkqlg75l6hkbwnpgawd2sacwl4jsfr6";
+      sha256 = "073ad9c07vnpx823a4x710cx3azbal8mgqhq21j2sfilafqzzd9b";
      type = "gem";
    };
-    version = "0.8.0";
+    version = "0.9.0";
  };
  fog-xml = {
    dependencies = [
@@ -2605,10 +2629,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0s4qhq3mjl0gak5wl20w9d5jhq069mk1393dkj76s8i2pvkqb578";
+      sha256 = "1zp6zpc4ahpd4gdnz5s672n7x113p6h478qc9m8x8y0cfm7j6bjc";
      type = "gem";
    };
-    version = "1.11.1";
+    version = "1.11.2";
  };
  fuzzyurl = {
    groups = [ "default" ];
@@ -2738,10 +2762,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1cwvbk5ijg41rrghcljjqkf8dnp1cc4l5576460fqadwgmfi62bl";
+      sha256 = "0677zbflbjvmxbf6riczscjl6g3pqdh5xb1f783d4lfhdi43rbg4";
      type = "gem";
    };
-    version = "18.2.1";
+    version = "18.4.0.pre.rc1";
  };
  gitlab = {
    dependencies = [
@@ -2832,10 +2856,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1k0b1wanf53lrymh3np0m5k12kc93w99rrzvw5lpv2zjwwmgij61";
+      sha256 = "0h9kfc8ni6lc0jy5r8hvs1768130adq75pnn4vy7jfl7fk7683yp";
      type = "gem";
    };
-    version = "1.26.0";
+    version = "1.32.0";
  };
  gitlab-crystalball = {
    dependencies = [
@@ -2881,7 +2905,7 @@ src: {
      path = "${src}/vendor/gems/gitlab-duo-workflow-service-client";
      type = "path";
    };
-    version = "0.2";
+    version = "0.3";
  };
  gitlab-experiment = {
    dependencies = [
@@ -2912,10 +2936,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1acbwzi4dkixfmb2rggzf4pg65cyxhbggrs4642p8y7mf0hpraii";
+      sha256 = "03xwn2477zhc4654c7s1ks72w9lbns79n2qhfca7m17349vivpw8";
      type = "gem";
    };
-    version = "2.2.0";
+    version = "2.3.0";
  };
  gitlab-glfm-markdown = {
    dependencies = [ "rb_sys" ];
@@ -2969,10 +2993,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1qj5n9dfslfra3xrrq12mdzrk1ln3hv154wik9y0jd4vmym1j5cp";
+      sha256 = "1k0jbpfycg23pm8gddwzxj8b1wpvqisxc6dd33xxr2f7canr8bx8";
      type = "gem";
    };
-    version = "18.2.1";
+    version = "18.3.2";
  };
  gitlab-labkit = {
    dependencies = [
@@ -2981,6 +3005,7 @@ src: {
      "google-protobuf"
      "grpc"
      "jaeger-client"
+      "json-schema"
      "opentracing"
      "pg_query"
      "prometheus-client-mmap"
@@ -2990,10 +3015,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "07jpj78nnjmgz9brxxzqbx7l9fajyfq74l4vjavqmnff18vgr0gf";
+      sha256 = "0awcb5bb9y1y61yzzvj5gkm03w232njym7cdw0s2gpgwh37q6pyg";
      type = "gem";
    };
-    version = "0.39.0";
+    version = "0.40.0";
  };
  gitlab-license = {
    groups = [ "default" ];
@@ -3133,10 +3158,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "14ds4l7802ypxx56pid7xlhnlbk5ir9zc8adfm96yy9k2sgfmdnf";
+      sha256 = "0h7wf8p369zqw51ikychqsii2kh9f920jwhr4b352p1sd1a59qf8";
      type = "gem";
    };
-    version = "0.33.0";
+    version = "0.33.3";
  };
  gitlab-security_report_schemas = {
    dependencies = [
@@ -3215,7 +3240,7 @@ src: {
      path = "${src}/gems/gitlab-utils";
      type = "path";
    };
-    version = "0.1.0";
+    version = "0.2.0";
  };
  gitlab_chronic_duration = {
    dependencies = [ "numerizer" ];
@@ -3239,10 +3264,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1343sax19jidp7nr4s8bxpkyqwy6zb9lfslg99jys8xinfn20kdv";
+      sha256 = "1d53lfi4xk8v20xqgz3xqcdb7jg4cq3jcir03lp1ywf26zz3cw0n";
      type = "gem";
    };
-    version = "2.2.0";
+    version = "2.3.0";
  };
  gitlab_quality-test_tooling = {
    dependencies = [
@@ -3263,10 +3288,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0pbi6kifymdimcnbsgknlqb7hdcnz045sacxaf8pnkiqcxc0bav8";
+      sha256 = "1xxi1grl13663cwmpqvyq75carn05nd8ns26aq34xjqmk0gc8j9c";
      type = "gem";
    };
-    version = "2.18.0";
+    version = "2.20.0";
  };
  globalid = {
    dependencies = [ "activesupport" ];
@@ -3294,10 +3319,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1w6ji15jrl4p6q0gxy5mmqspvzbmgkqj1d3xmbqr0a1rb7b1i9p3";
+      sha256 = "1aw1bn51h4kjlxaskaiwi8x2n9g3cyxn0rjqnilxwszj474y69i2";
      type = "gem";
    };
-    version = "6.4.0";
+    version = "6.5.0";
  };
  google-apis-androidpublisher_v3 = {
    dependencies = [ "google-apis-core" ];
@@ -3305,10 +3330,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "06ppk1ghm9rxp9dqkgyjh8qs3g6lhvr2zkqmrxc9f0psrcxkxjvq";
+      sha256 = "1bvyp1bnvlnrl90w15gnn8cg42balvahwpp1y60vj6kc6al759kk";
      type = "gem";
    };
-    version = "0.84.0";
+    version = "0.86.0";
  };
  google-apis-bigquery_v2 = {
    dependencies = [ "google-apis-core" ];
@@ -3355,10 +3380,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1f0a46djzbmr41ykz25ibjnn91dnk11vr71k01m2yiiz1pqw9j5p";
+      sha256 = "1lzm0qxzs0hbf889p5rbx6954ldd4zn5j0dihvy4gz0r8mbd8rxp";
      type = "gem";
    };
-    version = "0.127.0";
+    version = "0.129.0";
  };
  google-apis-container_v1 = {
    dependencies = [ "google-apis-core" ];
@@ -3377,10 +3402,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1l0k0davbaaqx76jy9vb6vk6j0l9hl68jmkgn7m6r4nvi37qzi38";
+      sha256 = "0jbb5zqv7krxy60iylrnwb9qz0brbgj2m66w5kdhq040ww0760lx";
      type = "gem";
    };
-    version = "0.43.0";
+    version = "0.90.0";
  };
  google-apis-core = {
    dependencies = [
@@ -3428,14 +3453,17 @@ src: {
  };
  google-apis-iamcredentials_v1 = {
    dependencies = [ "google-apis-core" ];
-    groups = [ "default" ];
+    groups = [
+      "default"
+      "test"
+    ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "06smnmn2s460xl9x9rh07a3fkqdrjjy6azmx8iywggqgv2k5d8p9";
+      sha256 = "1133kisa29q36db74lb28id3n65zfqpjw99may4jgddpiz3xlx2p";
      type = "gem";
    };
-    version = "0.15.0";
+    version = "0.24.0";
  };
  google-apis-monitoring_v3 = {
    dependencies = [ "google-apis-core" ];
@@ -3483,14 +3511,17 @@ src: {
  };
  google-apis-storage_v1 = {
    dependencies = [ "google-apis-core" ];
-    groups = [ "default" ];
+    groups = [
+      "default"
+      "test"
+    ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1k432qgxf41c4m6d68rascm0gyj18r7ypmrnyzmxh7k7nh543awx";
+      sha256 = "0aqq1n6ipy9m0j820csprkgpj8brrlxmp4dvdzk5s252n46xks5l";
      type = "gem";
    };
-    version = "0.29.0";
+    version = "0.56.0";
  };
  google-cloud-artifact_registry-v1 = {
    dependencies = [
@@ -3612,6 +3643,7 @@ src: {
    dependencies = [
      "addressable"
      "digest-crc"
+      "google-apis-core"
      "google-apis-iamcredentials_v1"
      "google-apis-storage_v1"
      "google-cloud-core"
@@ -3622,10 +3654,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0033bi8qwm0ksxsv5zhz4nzwsiaapq3xk79z8f8rx3v09vdap07j";
+      sha256 = "0awv6z8ifaw2sdvr9z4yy70gcjbhvdn79j6hylccscykpwar6xib";
      type = "gem";
    };
-    version = "1.45.0";
+    version = "1.57.0";
  };
  google-cloud-storage_transfer = {
    dependencies = [
@@ -4518,6 +4550,20 @@ src: {
    };
    version = "1.16.6";
  };
+  json-schema = {
+    dependencies = [
+      "addressable"
+      "bigdecimal"
+    ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1ma0k5889hzydba2ci8lqg87pxsh9zabz7jchm9cbacwsw7axgk0";
+      type = "gem";
+    };
+    version = "5.2.2";
+  };
  json_schemer = {
    dependencies = [
      "bigdecimal"
@@ -4722,10 +4768,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0jqyzwgs02lyvf2v4f810scxjy1zn8w00bhc2kssv7i8h2fxm0rk";
+      sha256 = "0pqam7p5f72ic1x16jmgvydjxgqd0lddq4pnkxjmwn174yk2k778";
      type = "gem";
    };
-    version = "1.12.2";
+    version = "1.12.3";
  };
  letter_opener = {
    dependencies = [ "launchy" ];
@@ -4987,7 +5033,7 @@ src: {
    groups = [ "default" ];
    platforms = [ ];
    source = {
-      path = "${src}/vendor/gems/mail-smtp_pool";
+      path = "${src}/gems/mail-smtp_pool";
      type = "path";
    };
    version = "0.1.0";
@@ -4995,15 +5041,16 @@ src: {
  marcel = {
    groups = [
      "default"
+      "development"
      "test"
    ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0kky3yiwagsk8gfbzn3mvl2fxlh3b39v6nawzm4wpjs6xxvvc4x0";
+      sha256 = "190n2mk8m1l708kr88fh6mip9sdsh339d2s6sgrik3sbnvz4jmhd";
      type = "gem";
    };
-    version = "1.0.2";
+    version = "1.0.4";
  };
  marginalia = {
    dependencies = [
@@ -5130,10 +5177,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0slh78f9z6n0l1i2km7m48yz7l4fjrk88sj1f4mh1wb39sl2yc37";
+      sha256 = "1nfxjpmka12ihbwd87d5k2hh7d2pv3aq95x0l2lh8gca1s72bmki";
      type = "gem";
    };
-    version = "4.12.0";
+    version = "4.13.2";
  };
  mini_mime = {
    groups = [
@@ -5244,14 +5291,18 @@ src: {
    version = "1.5.4";
  };
  multi_json = {
-    groups = [ "default" ];
+    groups = [
+      "default"
+      "development"
+      "test"
+    ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0xy54mjf7xg41l8qrg1bqri75agdqmxap9z466fjismc1rn2jwfr";
+      sha256 = "06sabsvnw0x1aqdcswc6bqrqz6705548bfd8z22jxgxfjrn1yn3n";
      type = "gem";
    };
-    version = "1.14.1";
+    version = "1.17.0";
  };
  multi_xml = {
    groups = [ "default" ];
@@ -6637,10 +6688,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0swf0a0r2xryx788q09w4zcwdq7v1pwq5fvkgr9m8abhbxgaf472";
+      sha256 = "0xf8i58shwvwlka4ld12nxcgqv0d5r1yizsvw74w5jaw83yllqaq";
      type = "gem";
    };
-    version = "1.6.1";
+    version = "1.6.2";
  };
  pg_query = {
    dependencies = [ "google-protobuf" ];
@@ -7144,10 +7195,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0148c00v3hks98rymdiilhjm0i8qw5fla4gww0fb94k3ggns5bh5";
+      sha256 = "0ikmj9p48n8mms39jq8w91y12cm7zmxc7a1r9i7vzfn509r0i4m2";
      type = "gem";
    };
-    version = "7.1.5.1";
+    version = "7.1.5.2";
  };
  rails-controller-testing = {
    dependencies = [
@@ -7235,10 +7286,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1yz28fq55drl4c2dwgap96xcjf6qns2ghc3c3gffzm6yw9i5bq8b";
+      sha256 = "08fnm4bfkmjknnzmi1wkvyw9b2r4c5ammk0jzp4mgfgv1fgwh2mg";
      type = "gem";
    };
-    version = "7.1.5.1";
+    version = "7.1.5.2";
  };
  rainbow = {
    groups = [
@@ -7463,10 +7514,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1gb838wvrmsv2zf6g6injf1dvgxhh5km28n3xrrrqk0rjn7hy4s0";
+      sha256 = "0l2fsgfzzrspgrg6x3s38hws5clgbn1aaxcmiyz5jz6xd3dpkxdz";
      type = "gem";
    };
-    version = "0.25.1";
+    version = "0.25.3";
  };
  redis-cluster-client = {
    dependencies = [ "redis-client" ];
@@ -7660,10 +7711,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1jmbf6lf7pcyacpb939xjjpn1f84c3nw83dy3p1lwjx0l2ljfif7";
+      sha256 = "05y4lwzci16c2xgckmpxkzq4czgkyaiiqhvrabdgaym3aj2jd10k";
      type = "gem";
    };
-    version = "3.4.1";
+    version = "3.4.2";
  };
  rinku = {
    groups = [ "default" ];
@@ -9033,10 +9084,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0hjcaiy58zg7vpy5vsaaz6ss8w6nlkkvz1p758gdmd5wlxpfkinw";
+      sha256 = "17xkgjlakaj1sipxk0d8nxvl6xis6n1a7zsv8w0wjzzv3h47d6h0";
      type = "gem";
    };
-    version = "2.2.4";
+    version = "2.4.0";
  };
  telesignenterprise = {
    dependencies = [ "telesign" ];
@@ -9044,10 +9095,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1cziz60q1pav635fln5xiag7vqvf992sk9xi1l5gxhm8ccra0izi";
+      sha256 = "1wkxsv85zc7qalxj7gjv6py4chr093n9fx3plbqmfznjcd2sqbhp";
      type = "gem";
    };
-    version = "2.2.2";
+    version = "2.6.0";
  };
  temple = {
    groups = [
@@ -9277,10 +9328,10 @@ src: {
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "109dh1xmsmvkg1pf3306svigh3m8kdmjqlznyk4bi2r4nws7hm6j";
+      sha256 = "0kn4qn9wzypw5693kza96s52avlzw0ax7x5vq4s4cvm97zx9hd3y";
      type = "gem";
    };
-    version = "0.15.2";
+    version = "0.18.1";
  };
  trailblazer-option = {
    groups = [ "default" ];
--- a/pkgs/by-name/gi/gitlab/update.py
+++ b/pkgs/by-name/gi/gitlab/update.py
@@ -1,5 +1,5 @@
 #!/usr/bin/env nix-shell
-#! nix-shell -I nixpkgs=../../../.. -i python3 -p bundix bundler nix-update nix python3 python3Packages.requests python3Packages.click python3Packages.click-log python3Packages.packaging prefetch-yarn-deps git
+#! nix-shell -I nixpkgs=../../../.. -i python3 -p bundix bundler nix-update nix python3 python3Packages.requests python3Packages.click python3Packages.click-log python3Packages.packaging prefetch-yarn-deps git go

 import click
 import click_log
@@ -44,7 +44,7 @@ class GitLabRepo:
        # sort, but ignore v, -ee and -gitlab for sorting comparisons
        versions.sort(
            key=lambda x: Version(
-                x.replace("v", "").replace("-ee", "").replace("-gitlab", "").replace("-ahmed-master-test", "")
+                x.replace("v", "").replace("-ee", "").replace("-gitlab", "")
            ),
            reverse=True,
        )
@@ -336,6 +336,29 @@ def update_gitlab_elasticsearch_indexer():
    data = _get_data_json()
    gitlab_elasticsearch_indexer_version = data['passthru']['GITLAB_ELASTICSEARCH_INDEXER_VERSION']
    _call_nix_update('gitlab-elasticsearch-indexer', gitlab_elasticsearch_indexer_version)
+    # Update the dependency gitlab-code-parser
+    src_workdir = subprocess.check_output(
+        [
+            "nix-build",
+            "-A",
+            "gitlab-elasticsearch-indexer.src",
+        ],
+        cwd=NIXPKGS_PATH,
+    ).decode("utf-8").strip()
+    codeparser_module = json.loads(
+        subprocess.check_output(
+            [
+                "go",
+                "list",
+                "-m",
+                "-json",
+                "gitlab.com/gitlab-org/rust/gitlab-code-parser/bindings/go"
+            ],
+            cwd=src_workdir
+        ).decode("utf-8").strip()
+    )
+    codeparser_version = codeparser_module["Version"].replace("v", "")
+    _call_nix_update('gitlab-elasticsearch-indexer.codeParserBindings', codeparser_version)


@cli.command("update-all")
--- a/pkgs/by-name/go/golangci-lint/package.nix
+++ b/pkgs/by-name/go/golangci-lint/package.nix
@@ -14,16 +14,16 @@

 buildGo125Module (finalAttrs: {
  pname = "golangci-lint";
-  version = "2.4.0";
+  version = "2.5.0";

  src = fetchFromGitHub {
    owner = "golangci";
    repo = "golangci-lint";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-JMFSYT9aiBdr/lOy+GYigbpMHETTQAomGZ7ehyr8U/M=";
+    hash = "sha256-7dHr7cd+yYofIb+yR2kKfj0k0onLH2W/YuxNor7zPeo=";
  };

-  vendorHash = "sha256-o01naYSkPpsXSvFlphGqJR14j3IBmTGBHpsu7DUE1Xg=";
+  vendorHash = "sha256-QEYbFz7SJxLMblkNqaRLDn/PO+mtSPvNYiEUmZh0sLQ=";

  subPackages = [ "cmd/golangci-lint" ];

@@ -34,7 +34,7 @@ buildGo125Module (finalAttrs: {
    "-w"
    "-X main.version=${finalAttrs.version}"
    "-X main.commit=v${finalAttrs.version}"
-    "-X main.date=19700101-00:00:00"
+    "-X main.date=1970-01-01T00:00:00Z"
  ];

  postInstall =
--- a/pkgs/by-name/gp/gpu-screen-recorder/package.nix
+++ b/pkgs/by-name/gp/gpu-screen-recorder/package.nix
@@ -28,12 +28,12 @@

 stdenv.mkDerivation rec {
  pname = "gpu-screen-recorder";
-  version = "5.6.8";
+  version = "5.7.0";

  src = fetchgit {
    url = "https://repo.dec05eba.com/${pname}";
    tag = version;
-    hash = "sha256-uASmN6RoLoOrPfHhMssaGABBAMxrQcBEO3Czqsgrrlc=";
+    hash = "sha256-1F4j62wqF+C6eA5ECCjqCoY8+DINBPVKnsWQi6GF2Us=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/gr/groovy/package.nix
+++ b/pkgs/by-name/gr/groovy/package.nix
@@ -15,11 +15,11 @@

 stdenv.mkDerivation rec {
  pname = "groovy";
-  version = "4.0.28";
+  version = "5.0.1";

  src = fetchurl {
    url = "mirror://apache/groovy/${version}/distribution/apache-groovy-binary-${version}.zip";
-    sha256 = "sha256-agUr/SynfVfg2zBKMT3ZpymUXFoxQg5tSFBb5IQL/FQ=";
+    sha256 = "sha256-vmahfzT2n0c7I5WOvuB3Doiq9zXXm6liRUN1w40oVKU=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ha/hasura-cli/package.nix
+++ b/pkgs/by-name/ha/hasura-cli/package.nix
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "hasura";
-  version = "2.48.3";
+  version = "2.48.5";

  src = fetchFromGitHub {
    owner = "hasura";
    repo = "graphql-engine";
    rev = "v${version}";
-    sha256 = "sha256-HFikSDueHqmfilyPKszQO9pfucGPkOqJ+rd/VbJecZQ=";
+    sha256 = "sha256-3mKwhRDmsI2fo5hd6DM3/+Nmf4eOswE2RUcOieOeSCE=";
  };
  modRoot = "./cli";

--- a/pkgs/by-name/hc/hcdiag/package.nix
+++ b/pkgs/by-name/hc/hcdiag/package.nix
@@ -8,13 +8,13 @@

 buildGoModule rec {
  pname = "hcdiag";
-  version = "0.5.8";
+  version = "0.5.9";

  src = fetchFromGitHub {
    owner = "hashicorp";
    repo = "hcdiag";
    tag = "v${version}";
-    hash = "sha256-6qsp74wp8LCBgeQTn4Edms8kzpKx9O4soGRwIFUVIk4=";
+    hash = "sha256-OLL7yrlVacw51NyroW6kalqXDrw3YKwBTPThiCYUjuw=";
  };

  vendorHash = "sha256-ZuG++2bItCdnTcSaeBumIS2DqF+U6ZP7UTYM2DC+YGw=";
--- a/pkgs/by-name/ht/httm/package.nix
+++ b/pkgs/by-name/ht/httm/package.nix
@@ -7,16 +7,16 @@

 rustPlatform.buildRustPackage rec {
  pname = "httm";
-  version = "0.48.4";
+  version = "0.48.5";

  src = fetchFromGitHub {
    owner = "kimono-koans";
    repo = "httm";
    rev = version;
-    hash = "sha256-636Two3kGtzpx6gQfvBKhhz5BQflP8joYpw0CY5UnoA=";
+    hash = "sha256-d/yARvzoNkepI4nR22Z0UVBwqRymrmh9oY7ff9g3Lio=";
  };

-  cargoHash = "sha256-95xqzwFcTusL50Ue6dsM2BhD6J2Fi/qsrGQYniFVVd4=";
+  cargoHash = "sha256-ZUQ4Q7W6rB17U5mrZWI6UwyfuYLzRk+zm4MpuYU/oAE=";

  nativeBuildInputs = [ installShellFiles ];

--- a/pkgs/by-name/ht/httpstat/package.nix
+++ b/pkgs/by-name/ht/httpstat/package.nix
@@ -8,13 +8,13 @@

 python3Packages.buildPythonApplication rec {
  pname = "httpstat";
-  version = "1.3.1";
+  version = "1.3.2";
  format = "pyproject";
  src = fetchFromGitHub {
    owner = "reorx";
    repo = "httpstat";
    rev = version;
-    sha256 = "sha256-zUdis41sQpJ1E3LdNwaCVj6gexi/Rk21IBUgoFISiDM=";
+    sha256 = "sha256-dOHFLw8suvpuZkcKEzq5HktMYBGE7+vtTD609TkAFfw=";
  };

  build-system = with python3Packages; [ setuptools ];
--- a/pkgs/by-name/hy/hyperrogue/package.nix
+++ b/pkgs/by-name/hy/hyperrogue/package.nix
@@ -18,13 +18,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "hyperrogue";
-  version = "13.1c";
+  version = "13.1e";

  src = fetchFromGitHub {
    owner = "zenorogue";
    repo = "hyperrogue";
    tag = "v${finalAttrs.version}";
-    sha256 = "sha256-OkLi1FCxlm+bdjF5YC0kgfbSSjdh5wN1LTOcp6vqCuw=";
+    sha256 = "sha256-teoSI6JrqDAkyNhVaIVZcfM93LxjQah0+eJFKfI5iP4=";
  };

  env = {
--- a/pkgs/by-name/in/infrastructure-agent/package.nix
+++ b/pkgs/by-name/in/infrastructure-agent/package.nix
@@ -6,16 +6,16 @@
 }:
 buildGoModule rec {
  pname = "infrastructure-agent";
-  version = "1.66.1";
+  version = "1.67.3";

  src = fetchFromGitHub {
    owner = "newrelic";
    repo = "infrastructure-agent";
    rev = version;
-    hash = "sha256-CY//39V6uqFmk4mx5E4IXZnSKByuTjWSg6P9Zqfqe80=";
+    hash = "sha256-3XIxSYpGR2B3/D6vBj6ameHJYrvaU8Dcs/6k7quHN9Y=";
  };

-  vendorHash = "sha256-UNbWsPu+1Qsjpa4T1Im8e+hm4XO7lQDkGutK5MLMUpc=";
+  vendorHash = "sha256-Bo/NfqTlEOBBjrEuxpc2OBEWRLuFWyx+bBQBa28XcfM=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/iw/iwmenu/package.nix
+++ b/pkgs/by-name/iw/iwmenu/package.nix
@@ -6,16 +6,16 @@

 rustPlatform.buildRustPackage rec {
  pname = "iwmenu";
-  version = "0.2.0";
+  version = "0.3.0";

  src = fetchFromGitHub {
    owner = "e-tho";
    repo = "iwmenu";
    tag = "v${version}";
-    hash = "sha256-F1w2Lp0/iXUHh0PXAZ/wD78C2uVtAcWlEKqBI5I/hnE=";
+    hash = "sha256-Xge7olQxXrdLvtXrjOCEf4/maGmQa/OSQ38KqrOWvoY=";
  };

-  cargoHash = "sha256-NjA8n11pOytXsotEQurYxDHPhwXG5vpdlyscmVUIzfA=";
+  cargoHash = "sha256-yi42BrdcAVEbkvPOyi4VxWO6F0x7vbjLZ/hLqWdeIn0=";

  meta = {
    homepage = "https://github.com/e-tho/iwmenu";
--- a/pkgs/by-name/ja/jailer/package.nix
+++ b/pkgs/by-name/ja/jailer/package.nix
@@ -14,13 +14,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "jailer";
-  version = "16.7.1";
+  version = "16.9.1";

  src = fetchFromGitHub {
    owner = "Wisser";
    repo = "Jailer";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-76l8f8CKUxbpR3xeWtbcUt67c44W/2Kv9tKDfvHBCLo=";
+    hash = "sha256-6lyPWzC3nE4wFYzcfXRIl8sr8rtCQ1wX5wZuMrQQHhI=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ja/jan/package.nix
+++ b/pkgs/by-name/ja/jan/package.nix
@@ -6,10 +6,10 @@

 let
  pname = "Jan";
-  version = "0.6.9";
+  version = "0.6.10";
  src = fetchurl {
    url = "https://github.com/menloresearch/jan/releases/download/v${version}/jan_${version}_amd64.AppImage";
-    hash = "sha256-633tZXjKWwXW7VZoHz8GpGX5GWsEoZM3FbfjUJdntOs=";
+    hash = "sha256-eag8c/Jp2ahV71kEuFoT2rmz0S9RPbiqy5YBO0Z+ICY=";
  };

  appimageContents = appimageTools.extractType2 { inherit pname version src; };
--- a/pkgs/by-name/je/jetbrains-toolbox/package.nix
+++ b/pkgs/by-name/je/jetbrains-toolbox/package.nix
@@ -10,7 +10,7 @@

 let
  pname = "jetbrains-toolbox";
-  version = "2.8.0.51430";
+  version = "2.9.0.56191";

  updateScript = ./update.sh;

@@ -55,10 +55,10 @@ let
        aarch64 = "-arm64";
      };
      hash = selectSystem {
-        x86_64-linux = "sha256-f/pAYcITnJUDvWmIdYsgMdVwN5Je3V1SWdSyoyLMUuc=";
-        aarch64-linux = "sha256-ocASvocUeQtZlrxwHqImk6rLk/XvxreaRIPwnb8ZWuc=";
-        x86_64-darwin = "sha256-u/7ebU3oj8ZPnLRS0AiTMZHcTh5dCJmDLkjESOE9TyI=";
-        aarch64-darwin = "sha256-gHbtrvWyTsiOBJIHR5uqyj1C/nBB6KANivM3lezkauQ=";
+        x86_64-linux = "sha256-alhX+m7AQgvrzEGBdJQ4j10IsbNpuTqQEMXFjriu1ms=";
+        aarch64-linux = "sha256-sUL5FeySOLiy3H2DeY7orPlkC4KsYlcA2pw0B5dWw78=";
+        x86_64-darwin = "sha256-qC0jmRmREUqixlhcSWuHCbE4NecQaj7E9mjc3u4wq2I=";
+        aarch64-darwin = "sha256-cTc0s/DwCYyPwPWUcWcMcZTGVIxpDQsNYG3yoKyx5Tw=";
      };
    in
    selectKernel {
--- a/pkgs/by-name/ju/juce/package.nix
+++ b/pkgs/by-name/ju/juce/package.nix
@@ -34,13 +34,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "juce";
-  version = "8.0.9";
+  version = "8.0.10";

  src = fetchFromGitHub {
    owner = "juce-framework";
    repo = "juce";
    tag = finalAttrs.version;
-    hash = "sha256-RUrKQFRLX68L3ROCUFaODSaRMH6zPpAKbc4/e5yDcZ4=";
+    hash = "sha256-YSNVQ337/IAlz3mFNgJisIY5D9wPz6sFboMNwsjcGBo=";
  };

  patches = [
--- a/pkgs/by-name/ju/junicode/package.nix
+++ b/pkgs/by-name/ju/junicode/package.nix
@@ -8,11 +8,11 @@

 stdenvNoCC.mkDerivation rec {
  pname = "junicode";
-  version = "2.216";
+  version = "2.218";

  src = fetchzip {
    url = "https://github.com/psb1558/Junicode-font/releases/download/v${version}/Junicode_${version}.zip";
-    hash = "sha256-DiO5+IQfhBuzK3GE41XCm5ik0f/fyibt6V0714uDiYE=";
+    hash = "sha256-X4BN4USa/Ig2TqauOVMwAAASYISGuVHl/43Kqm0r828=";
  };

  outputs = [
--- a/pkgs/by-name/ku/kubefirst/package.nix
+++ b/pkgs/by-name/ku/kubefirst/package.nix
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "kubefirst";
-  version = "2.9.0";
+  version = "2.9.1";

  src = fetchFromGitHub {
    owner = "konstructio";
    repo = "kubefirst";
    tag = "v${version}";
-    hash = "sha256-oPuvkFT3MUv5LY1qhfjFEfgxvZRGziLUyEZhHKVdGrQ=";
+    hash = "sha256-llWJTBI0MBVDG2zgersQM7F5RM5ZhpbkF67QxcSeAU0=";
  };

  vendorHash = "sha256-1u34cuPUY/5fYd073UhRUu/5/1nhPadTI06+3o+uE7w=";
--- a/pkgs/by-name/ky/kyverno-chainsaw/package.nix
+++ b/pkgs/by-name/ky/kyverno-chainsaw/package.nix
@@ -11,16 +11,16 @@

 buildGoModule rec {
  pname = "kyverno-chainsaw";
-  version = "0.2.12";
+  version = "0.2.13";

  src = fetchFromGitHub {
    owner = "kyverno";
    repo = "chainsaw";
    rev = "v${version}";
-    hash = "sha256-BxSJu71/KhVtWEOw2V+nteZnvyyoGvrbWQmHGqDtLa0=";
+    hash = "sha256-DbwqcHBmKAzq3xzUVGOdXjF8uaUWkEKRlz9m7tfyIdY=";
  };

-  vendorHash = "sha256-zB2HkY8ryPWln0HcKZPMCSKUnbCh/2UivteN6danNJU=";
+  vendorHash = "sha256-e4hSfmnROnfLRNvmfN0VFoIR0zVaqBhd0/c4lIyScvY=";

  subPackages = [ "." ];

--- a/pkgs/by-name/lc/lcov/package.nix
+++ b/pkgs/by-name/lc/lcov/package.nix
@@ -23,13 +23,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "lcov";
-  version = "2.3.1";
+  version = "2.3.2";

  src = fetchFromGitHub {
    owner = "linux-test-project";
    repo = "lcov";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-31318or9AQ7iyu9DNQEvf5jaDzrneOOqOXu0HF1eag4=";
+    hash = "sha256-msttwM5QlSkeruKoVwZYpymz5JOJRb6QoSeF19AkEGI=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/le/lefthook/package.nix
+++ b/pkgs/by-name/le/lefthook/package.nix
@@ -8,7 +8,7 @@

 let
  pname = "lefthook";
-  version = "1.12.4";
+  version = "1.13.0";
 in
 buildGoModule {
  inherit pname version;
@@ -17,7 +17,7 @@ buildGoModule {
    owner = "evilmartians";
    repo = "lefthook";
    rev = "v${version}";
-    hash = "sha256-GP1pd+ZEJxArjWHtNM+wU/nCzQIvfqCIvRMcWc+iUiw=";
+    hash = "sha256-K7qTf5wTBhOZpYMfCs+G+EeAXClYw37H2L1tAfcVeAE=";
  };

  vendorHash = "sha256-n+5tIEI/s32w8oWws6loFrtc8CSb2d368uqKZRkVuJs=";
--- a/pkgs/by-name/li/libmamba/package.nix
+++ b/pkgs/by-name/li/libmamba/package.nix
@@ -21,13 +21,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libmamba";
-  version = "2.3.0";
+  version = "2.3.2";

  src = fetchFromGitHub {
    owner = "mamba-org";
    repo = "mamba";
    tag = finalAttrs.version;
-    hash = "sha256-EwG5pR3nOYffQdK3xIKJztkKLqMi6Hj9fmkihn9pZHE=";
+    hash = "sha256-344CRyIIrIFrDFbdxdGH7iOidoDhfovd3EySXlOF+4M=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/li/libraw/package.nix
+++ b/pkgs/by-name/li/libraw/package.nix
@@ -7,20 +7,19 @@
  pkg-config,

  # for passthru.tests
-  freeimage,
  hdrmerge,
  imagemagick,
  python3,
 }:

-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
  pname = "libraw";
  version = "0.21.4";

  src = fetchFromGitHub {
    owner = "LibRaw";
    repo = "LibRaw";
-    rev = version;
+    tag = finalAttrs.version;
    hash = "sha256-JAGIM7A9RbK22F8KczRcb+29t4fDDXzoCA3a4s/z6Q8=";
  };

@@ -45,17 +44,17 @@ stdenv.mkDerivation rec {
  '';

  passthru.tests = {
-    inherit imagemagick hdrmerge; # freeimage
+    inherit imagemagick hdrmerge;
    inherit (python3.pkgs) rawkit;
  };

-  meta = with lib; {
+  meta = {
    description = "Library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others)";
    homepage = "https://www.libraw.org/";
-    license = with licenses; [
+    license = with lib.licenses; [
      cddl
      lgpl2Plus
    ];
-    platforms = platforms.unix;
+    platforms = lib.platforms.unix;
  };
-}
+})
--- a/pkgs/by-name/li/libremines/package.nix
+++ b/pkgs/by-name/li/libremines/package.nix
@@ -9,13 +9,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libremines";
-  version = "2.0.1";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "Bollos00";
    repo = "libremines";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-TQwjEgtqAvKnrpia6VloRgFwtq5TNDmxU+ZWjtEK/n8=";
+    hash = "sha256-JLA+QpPhhEiv75jpzKncBHsC5WGK0dht5jVJx56pz88=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/li/limine/package.nix
+++ b/pkgs/by-name/li/limine/package.nix
@@ -42,14 +42,14 @@ in
 # as bootloader for various platforms and corresponding binary and helper files.
 stdenv.mkDerivation (finalAttrs: {
  pname = "limine";
-  version = "10.0.0";
+  version = "10.0.1";

  # We don't use the Git source but the release tarball, as the source has a
  # `./bootstrap` script performing network access to download resources.
  # Packaging that in Nix is very cumbersome.
  src = fetchurl {
    url = "https://codeberg.org/Limine/Limine/releases/download/v${finalAttrs.version}/limine-${finalAttrs.version}.tar.gz";
-    hash = "sha256-y709MUhV/SwohrKCHUW2iLAlQ/RzLxn1AeTVVo4Mf4c=";
+    hash = "sha256-7P8N/HomleQBnoaX6S5V7KwX1GYVIY7XkUYU9Xo9jlk=";
  };

  enableParallelBuilding = true;
--- a/pkgs/by-name/li/linux-router/package.nix
+++ b/pkgs/by-name/li/linux-router/package.nix
@@ -41,13 +41,13 @@

 stdenv.mkDerivation rec {
  pname = "linux-router";
-  version = "0.7.6";
+  version = "0.8.1";

  src = fetchFromGitHub {
    owner = "garywill";
    repo = "linux-router";
    tag = version;
-    hash = "sha256-iiIDWDPz8MBwsBcJAWVNeuGwaNJ7xh7gFfRqXTG4oGQ=";
+    hash = "sha256-tBrHuZKTf+7ABmE4FVYT9ny62CBa2A7va7OOFUsKJtM=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ll/lldap/package.nix
+++ b/pkgs/by-name/ll/lldap/package.nix
@@ -10,6 +10,10 @@
  wasm-bindgen-cli_0_2_100,
  wasm-pack,
  which,
+  runCommand,
+  cacert,
+  curl,
+  staticAssetsHash ? "sha256-xVbHD9s3ofbtHCDvjYwmsWXDEJ9z9vRxQDRR6pW6rt8=",
 }:

 let
@@ -29,7 +33,35 @@ let
    cargoHash = "sha256-SO7+HiiXNB/KF3fjzSMeiTPjRQq/unEfsnplx4kZv9c=";
  };

+  staticAssets =
+    src:
+    runCommand "${commonDerivationAttrs.pname}-static-assets"
+      {
+        outputHash = staticAssetsHash;
+        outputHashAlgo = "sha256";
+        outputHashMode = "recursive";
+
+        inherit src;
+
+        nativeBuildInputs = [
+          curl
+        ];
+
+        env.SSL_CERT_FILE = "${cacert}/etc/ssl/certs/ca-bundle.crt";
+      }
+      ''
+        mkdir $out
+        mkdir $out/fonts
+        for file in $(cat ${src}/app/static/libraries.txt); do
+          curl $file --location --remote-name --output-dir $out
+        done
+        for file in $(cat ${src}/app/static/fonts/fonts.txt); do
+          curl $file --location --remote-name --output-dir $out/fonts
+        done
+      '';
+
  frontend = rustPlatform.buildRustPackage (
+    finalAttrs:
    commonDerivationAttrs
    // {
      pname = commonDerivationAttrs.pname + "-frontend";
@@ -49,7 +81,10 @@ let

      installPhase = ''
        mkdir -p $out
-        cp -R app/{index.html,pkg,static} $out/
+        cp -R app/{pkg,static} $out/
+        cp app/index_local.html $out/index.html
+        cp -R ${staticAssets finalAttrs.src}/* $out/static
+        rm $out/static/libraries.txt $out/static/fonts/fonts.txt
      '';

      doCheck = false;
--- a/pkgs/by-name/lu/luau-lsp/package.nix
+++ b/pkgs/by-name/lu/luau-lsp/package.nix
@@ -9,13 +9,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "luau-lsp";
-  version = "1.53.3";
+  version = "1.53.5";

  src = fetchFromGitHub {
    owner = "JohnnyMorganz";
    repo = "luau-lsp";
    tag = finalAttrs.version;
-    hash = "sha256-JO0RVrixjJWCQTVHIU/rcf78QyIb1rYGXP8+mnTpmvg=";
+    hash = "sha256-T0zwaBR2KYD5kcoo7mPomNVIixz/8J6ZMJSjfeVnPEs=";
    fetchSubmodules = true;
  };

--- a/Show More
+++ b/Show More