From 4f953395dffaff867abdc286263f3a05358127ad Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Fri, 29 May 2026 23:42:53 +0200
Subject: [PATCH 01/40] glycin-loaders: allow configuring loaders to build via
 override

(cherry picked from commit 9b14bd07ee93cc1f1bece1a52d7da5d21e5ce2e5)
---
 pkgs/by-name/gl/glycin-loaders/package.nix | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/pkgs/by-name/gl/glycin-loaders/package.nix b/pkgs/by-name/gl/glycin-loaders/package.nix
index f9b97462d915..329c0d47ec01 100644
--- a/pkgs/by-name/gl/glycin-loaders/package.nix
+++ b/pkgs/by-name/gl/glycin-loaders/package.nix
@@ -20,8 +20,20 @@
   shared-mime-info,
   rustc,
   rustPlatform,
+
+  # List of loaders to build.
+  # https://gitlab.gnome.org/GNOME/glycin/-/blob/2.1.1/meson_options.txt?ref_type=tags#L26-43
+  enabledLoaders ? [
+    "heif"
+    "image-rs"
+    "jxl"
+    "svg"
+  ],
 }:
 
+# Doesn't produce any output if no loaders are enabled
+assert enabledLoaders != [ ];
+
 stdenv.mkDerivation (finalAttrs: {
   pname = "glycin-loaders";
 
@@ -65,6 +77,9 @@ stdenv.mkDerivation (finalAttrs: {
     "-Dlibglycin-gtk4=false"
     "-Dvapi=false"
     (lib.mesonBool "tests" finalAttrs.finalPackage.doCheck)
+    (lib.mesonOption "loaders" (
+      lib.concatMapStringsSep "," (loader: "glycin-${loader}") enabledLoaders
+    ))
   ];
 
   strictDeps = true;
@@ -91,6 +106,8 @@ stdenv.mkDerivation (finalAttrs: {
   env.CARGO_BUILD_TARGET = stdenv.hostPlatform.rust.rustcTargetSpec;
 
   passthru = {
+    inherit enabledLoaders;
+
     tests = {
       withTests = finalAttrs.finalPackage.overrideAttrs {
         doCheck = true;

From 28b57324e610b8df4cb8738ca07f935e64c135b1 Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sun, 31 May 2026 23:58:10 +0200
Subject: [PATCH 02/40] glycin-loaders: consistently use `lib.mesonBool`

(cherry picked from commit f527f6d8a87c64a49dfda35068a530c4996a5c6a)
---
 pkgs/by-name/gl/glycin-loaders/package.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/gl/glycin-loaders/package.nix b/pkgs/by-name/gl/glycin-loaders/package.nix
index 329c0d47ec01..8d1998e1c3b4 100644
--- a/pkgs/by-name/gl/glycin-loaders/package.nix
+++ b/pkgs/by-name/gl/glycin-loaders/package.nix
@@ -71,11 +71,11 @@ stdenv.mkDerivation (finalAttrs: {
   ];
 
   mesonFlags = [
-    "-Dglycin-loaders=true"
-    "-Dglycin-thumbnailer=false"
-    "-Dlibglycin=false"
-    "-Dlibglycin-gtk4=false"
-    "-Dvapi=false"
+    (lib.mesonBool "glycin-loaders" true)
+    (lib.mesonBool "glycin-thumbnailer" false)
+    (lib.mesonBool "libglycin" false)
+    (lib.mesonBool "libglycin-gtk4" false)
+    (lib.mesonBool "vapi" false)
     (lib.mesonBool "tests" finalAttrs.finalPackage.doCheck)
     (lib.mesonOption "loaders" (
       lib.concatMapStringsSep "," (loader: "glycin-${loader}") enabledLoaders

From 96367ea0bd65300d75b9b786094377785fa1baac Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Wed, 25 Mar 2026 13:30:21 +0100
Subject: [PATCH 03/40] glycin-thumbnailer: init at 2.1.1

(cherry picked from commit d4ccc96bfe453bac2bfc6ff0e40a4cee2e8fb70b)
---
 .../by-name/gl/glycin-thumbnailer/package.nix | 81 +++++++++++++++++++
 1 file changed, 81 insertions(+)
 create mode 100644 pkgs/by-name/gl/glycin-thumbnailer/package.nix

diff --git a/pkgs/by-name/gl/glycin-thumbnailer/package.nix b/pkgs/by-name/gl/glycin-thumbnailer/package.nix
new file mode 100644
index 000000000000..8ae50e84b7d5
--- /dev/null
+++ b/pkgs/by-name/gl/glycin-thumbnailer/package.nix
@@ -0,0 +1,81 @@
+{
+  lib,
+  stdenv,
+  cargo,
+  fontconfig,
+  glib,
+  glycin-loaders,
+  libglycin,
+  libseccomp,
+  meson,
+  ninja,
+  pkg-config,
+  rustc,
+  rustPlatform,
+  wrapGAppsNoGuiHook,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "glycin-thumbnailer";
+
+  inherit (libglycin) version src cargoDeps;
+
+  nativeBuildInputs = [
+    cargo
+    libglycin.patchVendorHook
+    meson
+    ninja
+    pkg-config
+    rustc
+    rustPlatform.cargoSetupHook
+    wrapGAppsNoGuiHook
+  ];
+
+  buildInputs = [
+    fontconfig
+    glib
+    glycin-loaders
+    libglycin
+    libglycin.setupHook
+    libseccomp
+  ];
+
+  mesonFlags = [
+    (lib.mesonBool "glycin-loaders" false)
+    (lib.mesonBool "glycin-thumbnailer" true)
+    (lib.mesonBool "libglycin" false)
+    (lib.mesonBool "libglycin-gtk4" false)
+  ];
+
+  strictDeps = true;
+  __structuredAttrs = true;
+
+  # Thumbnailer files are in `glycin-loaders`, but we provide them in this package
+  postInstall = ''
+    mkdir -p $out/share/thumbnailers
+    (
+      shopt -s failglob
+
+      for loader in ${lib.concatStringsSep " " glycin-loaders.passthru.enabledLoaders}; do
+        substitute \
+          "../glycin-loaders/glycin-$loader/glycin-$loader.thumbnailer.in" \
+          "$out/share/thumbnailers/glycin-$loader.thumbnailer" \
+          --subst-var-by "BINDIR" "$out/bin"
+      done
+    )
+  '';
+
+  meta = {
+    description = "Glycin thumbnailers for several formats";
+    homepage = "https://gitlab.gnome.org/GNOME/glycin";
+    changelog = "https://gitlab.gnome.org/GNOME/glycin/-/tags/${finalAttrs.version}";
+    license = with lib.licenses; [
+      mpl20 # or
+      lgpl21Plus
+    ];
+    maintainers = with lib.maintainers; [ thunze ];
+    teams = [ lib.teams.gnome ];
+    platforms = lib.platforms.linux;
+    mainProgram = "glycin-thumbnailer";
+  };
+})

From 3cb4c47bf6a9506b69551a0fddf30a7c412ebf6c Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Wed, 25 Mar 2026 13:40:29 +0100
Subject: [PATCH 04/40] glycin-loaders: don't install thumbnailer files

These are now provided by glycin-thumbnailer.

(cherry picked from commit 53716654ff45801d54f2a0dda702022e6e993ed5)
---
 pkgs/by-name/gl/glycin-loaders/package.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/by-name/gl/glycin-loaders/package.nix b/pkgs/by-name/gl/glycin-loaders/package.nix
index 8d1998e1c3b4..5d3c419ee496 100644
--- a/pkgs/by-name/gl/glycin-loaders/package.nix
+++ b/pkgs/by-name/gl/glycin-loaders/package.nix
@@ -103,6 +103,11 @@ stdenv.mkDerivation (finalAttrs: {
     export XDG_CACHE_HOME=$(mktemp -d)
   '';
 
+  # Thumbnailer files are provided by glycin-thumbnailer
+  postInstall = ''
+    rm -r $out/share/thumbnailers
+  '';
+
   env.CARGO_BUILD_TARGET = stdenv.hostPlatform.rust.rustcTargetSpec;
 
   passthru = {

From 8da22b9259b5794369dbde8bdb3157d755bd3af0 Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Wed, 25 Mar 2026 13:41:01 +0100
Subject: [PATCH 05/40] libglycin: add glycin-thumbnailer to `passthru.tests`

(cherry picked from commit 3298717b08706d9b95577d846bde6c1f414405c1)
---
 pkgs/by-name/li/libglycin/package.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/by-name/li/libglycin/package.nix b/pkgs/by-name/li/libglycin/package.nix
index b2eeab914a7f..4dc30b8f88a0 100644
--- a/pkgs/by-name/li/libglycin/package.nix
+++ b/pkgs/by-name/li/libglycin/package.nix
@@ -15,6 +15,7 @@
   glib,
   gobject-introspection,
   glycin-loaders,
+  glycin-thumbnailer,
   libglycin-gtk4,
   fontconfig,
   libseccomp,
@@ -146,6 +147,7 @@ stdenv.mkDerivation (finalAttrs: {
     tests = {
       inherit
         glycin-loaders
+        glycin-thumbnailer
         libglycin-gtk4
         ;
     };

From d1f3aa33e157c82d61f92ef76bb7fc531b001d39 Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Wed, 25 Mar 2026 13:41:32 +0100
Subject: [PATCH 06/40] glycin-thumbnailer: add thumbnailer package test

(cherry picked from commit aac10d3941fba7db4901830285dcd51ad165f964)
---
 .../by-name/gl/glycin-thumbnailer/package.nix |  3 ++
 pkgs/by-name/gl/glycin-thumbnailer/tests.nix  | 44 +++++++++++++++++++
 2 files changed, 47 insertions(+)
 create mode 100644 pkgs/by-name/gl/glycin-thumbnailer/tests.nix

diff --git a/pkgs/by-name/gl/glycin-thumbnailer/package.nix b/pkgs/by-name/gl/glycin-thumbnailer/package.nix
index 8ae50e84b7d5..71587b42237e 100644
--- a/pkgs/by-name/gl/glycin-thumbnailer/package.nix
+++ b/pkgs/by-name/gl/glycin-thumbnailer/package.nix
@@ -1,6 +1,7 @@
 {
   lib,
   stdenv,
+  callPackage,
   cargo,
   fontconfig,
   glib,
@@ -65,6 +66,8 @@ stdenv.mkDerivation (finalAttrs: {
     )
   '';
 
+  passthru.tests.thumbnailer = callPackage ./tests.nix { };
+
   meta = {
     description = "Glycin thumbnailers for several formats";
     homepage = "https://gitlab.gnome.org/GNOME/glycin";
diff --git a/pkgs/by-name/gl/glycin-thumbnailer/tests.nix b/pkgs/by-name/gl/glycin-thumbnailer/tests.nix
new file mode 100644
index 000000000000..da7f2a845de1
--- /dev/null
+++ b/pkgs/by-name/gl/glycin-thumbnailer/tests.nix
@@ -0,0 +1,44 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitLab,
+  glycin-thumbnailer,
+  shared-mime-info,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "glycin-thumbnailer-test";
+  inherit (glycin-thumbnailer) version;
+
+  src = fetchFromGitLab {
+    domain = "gitlab.gnome.org";
+    owner = "sophie-h";
+    repo = "test-images";
+    rev = "f7a06d9131a5686c1b58c56f42f9fda9ea5e620d";
+    hash = "sha256-qoteYmliUha3lY21PRM0FaeYu9aD5MsygBTsTYog9SE=";
+  };
+
+  # Fix incorrectly detected MIME types
+  preBuild = ''
+    export XDG_DATA_DIRS=${shared-mime-info}/share:$XDG_DATA_DIRS
+  '';
+
+  buildPhase = ''
+    runHook preBuild
+
+    cd images/
+    mkdir -p $out
+
+    for image in color/* icon/*; do
+      for size in 128 256 512 1024; do
+        input="file://$(realpath "$image")"
+        output="$out/$(basename "$image")-$size.png"
+
+        ${lib.getExe glycin-thumbnailer} -i "$input" -o "$output" -s $size
+        file -E "$output"
+      done
+    done
+
+    runHook postBuild
+  '';
+})

From 0c123530322e8d3e8e5ce79e61313563e7fc6eed Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 30 May 2026 00:02:13 +0200
Subject: [PATCH 07/40] glycin-thumbnailer: add package test for building with
 all loaders

(cherry picked from commit c7cd5a89bbae17e0149e09b1a09ebddcaffee3eb)
---
 pkgs/by-name/gl/glycin-thumbnailer/package.nix | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/gl/glycin-thumbnailer/package.nix b/pkgs/by-name/gl/glycin-thumbnailer/package.nix
index 71587b42237e..0782d55ddd1b 100644
--- a/pkgs/by-name/gl/glycin-thumbnailer/package.nix
+++ b/pkgs/by-name/gl/glycin-thumbnailer/package.nix
@@ -6,6 +6,7 @@
   fontconfig,
   glib,
   glycin-loaders,
+  glycin-thumbnailer,
   libglycin,
   libseccomp,
   meson,
@@ -66,7 +67,20 @@ stdenv.mkDerivation (finalAttrs: {
     )
   '';
 
-  passthru.tests.thumbnailer = callPackage ./tests.nix { };
+  passthru.tests = {
+    all-loaders = glycin-thumbnailer.override {
+      glycin-loaders = glycin-loaders.override {
+        enabledLoaders = [
+          "heif"
+          "image-rs"
+          "jxl"
+          "raw"
+          "svg"
+        ];
+      };
+    };
+    thumbnailer = callPackage ./tests.nix { };
+  };
 
   meta = {
     description = "Glycin thumbnailers for several formats";

From 639161f5595e0c132e43dd928e58bdbfe547520f Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Mon, 1 Jun 2026 01:08:11 +0200
Subject: [PATCH 08/40] {libglycin{,-gtk4},glycin-{loaders,thumbnailer}}: use
 compound license

(cherry picked from commit 68241438a0197b948d14bbdfc6e8400e34841377)
---
 pkgs/by-name/gl/glycin-loaders/package.nix     | 10 ++++++----
 pkgs/by-name/gl/glycin-thumbnailer/package.nix | 10 ++++++----
 pkgs/by-name/li/libglycin-gtk4/package.nix     | 10 ++++++----
 pkgs/by-name/li/libglycin/package.nix          | 10 ++++++----
 4 files changed, 24 insertions(+), 16 deletions(-)

diff --git a/pkgs/by-name/gl/glycin-loaders/package.nix b/pkgs/by-name/gl/glycin-loaders/package.nix
index 5d3c419ee496..bb6e645bb5f1 100644
--- a/pkgs/by-name/gl/glycin-loaders/package.nix
+++ b/pkgs/by-name/gl/glycin-loaders/package.nix
@@ -124,10 +124,12 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Glycin loaders for several formats";
     homepage = "https://gitlab.gnome.org/GNOME/glycin";
     teams = [ lib.teams.gnome ];
-    license = with lib.licenses; [
-      mpl20 # or
-      lgpl21Plus
-    ];
+    license =
+      with lib.licenses;
+      OR [
+        mpl20
+        lgpl21Plus
+      ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/by-name/gl/glycin-thumbnailer/package.nix b/pkgs/by-name/gl/glycin-thumbnailer/package.nix
index 0782d55ddd1b..f90b4dd1e43e 100644
--- a/pkgs/by-name/gl/glycin-thumbnailer/package.nix
+++ b/pkgs/by-name/gl/glycin-thumbnailer/package.nix
@@ -86,10 +86,12 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Glycin thumbnailers for several formats";
     homepage = "https://gitlab.gnome.org/GNOME/glycin";
     changelog = "https://gitlab.gnome.org/GNOME/glycin/-/tags/${finalAttrs.version}";
-    license = with lib.licenses; [
-      mpl20 # or
-      lgpl21Plus
-    ];
+    license =
+      with lib.licenses;
+      OR [
+        mpl20
+        lgpl21Plus
+      ];
     maintainers = with lib.maintainers; [ thunze ];
     teams = [ lib.teams.gnome ];
     platforms = lib.platforms.linux;
diff --git a/pkgs/by-name/li/libglycin-gtk4/package.nix b/pkgs/by-name/li/libglycin-gtk4/package.nix
index a7c2b7901ec1..3f9956a3f58a 100644
--- a/pkgs/by-name/li/libglycin-gtk4/package.nix
+++ b/pkgs/by-name/li/libglycin-gtk4/package.nix
@@ -89,10 +89,12 @@ stdenv.mkDerivation (finalAttrs: {
   meta = {
     description = "C-Bindings to convert glycin frames to GDK Textures";
     homepage = "https://gitlab.gnome.org/GNOME/glycin";
-    license = with lib.licenses; [
-      mpl20 # or
-      lgpl21Plus
-    ];
+    license =
+      with lib.licenses;
+      OR [
+        mpl20
+        lgpl21Plus
+      ];
     teams = [ lib.teams.gnome ];
     platforms = lib.platforms.linux;
     pkgConfigModules = [
diff --git a/pkgs/by-name/li/libglycin/package.nix b/pkgs/by-name/li/libglycin/package.nix
index 4dc30b8f88a0..52bcf6c6716a 100644
--- a/pkgs/by-name/li/libglycin/package.nix
+++ b/pkgs/by-name/li/libglycin/package.nix
@@ -157,10 +157,12 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Sandboxed and extendable image loading library";
     homepage = "https://gitlab.gnome.org/GNOME/glycin";
     changelog = "https://gitlab.gnome.org/GNOME/glycin/-/tags/${finalAttrs.version}";
-    license = with lib.licenses; [
-      mpl20 # or
-      lgpl21Plus
-    ];
+    license =
+      with lib.licenses;
+      OR [
+        mpl20
+        lgpl21Plus
+      ];
     maintainers = [ ];
     teams = [ lib.teams.gnome ];
     platforms = lib.platforms.linux;

From e2a9340623314f98fcdbe36dbc2ced7c3306b01f Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 2 Aug 2026 14:10:56 +0000
Subject: [PATCH 09/40] lighthouse-steamvr: 1.4.0 -> 1.5.0

(cherry picked from commit 2e26b42c705a96f20593d3c9725d21eec63e8459)
---
 pkgs/by-name/li/lighthouse-steamvr/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/li/lighthouse-steamvr/package.nix b/pkgs/by-name/li/lighthouse-steamvr/package.nix
index fa11ee8d3136..09423b9d5ae3 100644
--- a/pkgs/by-name/li/lighthouse-steamvr/package.nix
+++ b/pkgs/by-name/li/lighthouse-steamvr/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "Lighthouse";
-  version = "1.4.0";
+  version = "1.5.0";
 
   src = fetchFromGitHub {
     owner = "ShayBox";
     repo = "Lighthouse";
     rev = finalAttrs.version;
-    hash = "sha256-Ai+d7BKA1o98iOhQ7VXltnWHW/knw122xLZHhFM6gZ0=";
+    hash = "sha256-2AJMXnfMvtYfCWusVDdZYUzKIPxey2mP4v3JVhsp2JE=";
   };
 
-  cargoHash = "sha256-+5fxqWq7akICVmDa8Lc6M8laEAWrrEyg4uCFLoCNRpo=";
+  cargoHash = "sha256-fOiVMg3K3wYhgYZ9kx3WfAgrgcSzUKjKyvXm5N386nw=";
 
   nativeBuildInputs = [ pkg-config ];
 

From 64586c0d9e9bb90f11b8f3b8899de5c4d502e247 Mon Sep 17 00:00:00 2001
From: Luna Simons <luna@bddvlpr.com>
Date: Wed, 5 Aug 2026 13:44:55 +0200
Subject: [PATCH 10/40] lighthouse-steamvr: fix hash, target cli

(cherry picked from commit 7f689b4d63446892a36ea320bc0e9fc5fc2fdf65)

Reason: previous version bump has an invalid hash as its tag has been replaced upstream.
---
 pkgs/by-name/li/lighthouse-steamvr/package.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/li/lighthouse-steamvr/package.nix b/pkgs/by-name/li/lighthouse-steamvr/package.nix
index 09423b9d5ae3..1059c89afdac 100644
--- a/pkgs/by-name/li/lighthouse-steamvr/package.nix
+++ b/pkgs/by-name/li/lighthouse-steamvr/package.nix
@@ -14,7 +14,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "ShayBox";
     repo = "Lighthouse";
     rev = finalAttrs.version;
-    hash = "sha256-2AJMXnfMvtYfCWusVDdZYUzKIPxey2mP4v3JVhsp2JE=";
+    hash = "sha256-qlQyDY+ZU4m3GBtn60DUiGJDhC8OF+WTqXc4BQIf+OI=";
   };
 
   cargoHash = "sha256-fOiVMg3K3wYhgYZ9kx3WfAgrgcSzUKjKyvXm5N386nw=";
@@ -22,6 +22,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   nativeBuildInputs = [ pkg-config ];
 
   buildInputs = [ dbus ];
+  buildFeatures = [ "cli" ];
 
   meta = {
     description = "VR Lighthouse power state management";

From e47144b3c246700f3a1db2c5b60938f5a89dafe0 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 8 Aug 2026 13:31:44 +0000
Subject: [PATCH 11/40] docker: 29.6.2 -> 29.7.2

(cherry picked from commit 33bf23c59a88db0263dea14a595f0302eaf240ac)
---
 .../applications/virtualization/docker/default.nix | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/pkgs/applications/virtualization/docker/default.nix b/pkgs/applications/virtualization/docker/default.nix
index 7da9fdfbf704..52b99ed04569 100644
--- a/pkgs/applications/virtualization/docker/default.nix
+++ b/pkgs/applications/virtualization/docker/default.nix
@@ -424,18 +424,18 @@ in
 
   docker_29 =
     let
-      version = "29.6.2";
+      version = "29.7.2";
     in
     callPackage dockerGen {
       inherit version;
       cliRev = "v${version}";
-      cliHash = "sha256-WpPSePMCfWAVxCkX1nZyI+sra/Vug009ZPmnVKDaX0I=";
+      cliHash = "sha256-ZYXRX4IQfUbb21yk/NodO5NH5OeX/KFDL9UdFS1e5ng=";
       mobyRev = "docker-v${version}";
-      mobyHash = "sha256-zrvrZCRUuiZ2vixZNOUFeGmDehHzSI+FzDMzV1gMqMc=";
-      runcRev = "v1.3.6";
-      runcHash = "sha256-cBMYZOElWHQ4OkF2NlYJSZrlW4833WD8CRJRkkXeKJc=";
-      containerdRev = "v2.2.6";
-      containerdHash = "sha256-Ngo9x847cXFYPnj/0I+g7BeV7e1/5T2YXfA1zkIdiPg=";
+      mobyHash = "sha256-k28c4cwt+ASVj8FTvM8dgIOL3yqR5wbI21r3LtrVamU=";
+      runcRev = "v1.4.3";
+      runcHash = "sha256-I9DruagoSWjrEBB4n+w5rzali5wvD/q3tVQFWPDnLAI=";
+      containerdRev = "v2.3.3";
+      containerdHash = "sha256-wa9Pixaq5RRrJucWibbBe4n6s53Pdj+mr5gLoFmDgLU=";
       tiniRev = "369448a167e8b3da4ca5bca0b3307500c3371828";
       tiniHash = "sha256-jCBNfoJAjmcTJBx08kHs+FmbaU82CbQcf0IVjd56Nuw=";
     };

From b6d3b4b5481c932e3a24502ac699360db6609723 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 10 Aug 2026 08:24:55 +0000
Subject: [PATCH 12/40] upower: 1.91.2 -> 1.91.3

(cherry picked from commit 6a227e78593519c45f78a098128520db3f742f6c)
---
 pkgs/by-name/up/upower/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/up/upower/package.nix b/pkgs/by-name/up/upower/package.nix
index df714dfef4c3..a317da29cb3c 100644
--- a/pkgs/by-name/up/upower/package.nix
+++ b/pkgs/by-name/up/upower/package.nix
@@ -38,7 +38,7 @@ assert withDocs -> withIntrospection;
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "upower";
-  version = "1.91.2";
+  version = "1.91.3";
 
   outputs = [
     "out"
@@ -52,7 +52,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "upower";
     repo = "upower";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-lr7Va7jmC7Hy+kY8YIbAEE5mK3TxU9LtgTKxEyM1QY8=";
+    hash = "sha256-QdAJxaua43iGovQeRg+n1MypS5CS0Ro3gqF9Tv8eMBg=";
   };
 
   patches =

From 4d893bd8ffdfacc438e053e936e2f8426ca81cc5 Mon Sep 17 00:00:00 2001
From: UwU 420 <164377175+uwu-420@users.noreply.github.com>
Date: Mon, 17 Aug 2026 11:41:42 +0200
Subject: [PATCH 13/40] opencloud: 7.2.0 -> 7.2.3

Diff: https://github.com/opencloud-eu/opencloud/compare/v7.2.0...v7.2.3

Changelog: https://github.com/opencloud-eu/opencloud/blob/v7.2.3/CHANGELOG.md

Assisted-by: OpenAI Codex (GPT-5)
---
 pkgs/by-name/op/opencloud/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/op/opencloud/package.nix b/pkgs/by-name/op/opencloud/package.nix
index 983299455638..f28d1cb2e764 100644
--- a/pkgs/by-name/op/opencloud/package.nix
+++ b/pkgs/by-name/op/opencloud/package.nix
@@ -28,13 +28,13 @@ let
 in
 buildGoModule (finalAttrs: {
   pname = "opencloud";
-  version = "7.2.0";
+  version = "7.2.3";
 
   src = fetchFromGitHub {
     owner = "opencloud-eu";
     repo = "opencloud";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-GAoDEXk7sBN7N0V/msi/fcJS72RqqlF6Qb5B9hArmvk=";
+    hash = "sha256-5wmXBLO6wmlBRu0FWDGMzFipRSARyK2LED1BR0Vwnt0=";
   };
 
   postPatch = ''

From 61c91d5aa09a29ee7c7c295cc4392e2b238bad41 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 22 May 2026 12:47:06 +0000
Subject: [PATCH 14/40] libgit2: 1.9.3 -> 1.9.4

(cherry picked from commit 9dc20fcb5590998f4d52f7f5360a06d090de7d55)
---
 pkgs/by-name/li/libgit2/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/li/libgit2/package.nix b/pkgs/by-name/li/libgit2/package.nix
index 6ecfe9388430..c17240378a92 100644
--- a/pkgs/by-name/li/libgit2/package.nix
+++ b/pkgs/by-name/li/libgit2/package.nix
@@ -23,7 +23,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libgit2";
-  version = "1.9.3";
+  version = "1.9.4";
   # also check the following packages for updates: python3Packages.pygit2 and libgit2-glib
 
   outputs = [
@@ -36,7 +36,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "libgit2";
     repo = "libgit2";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-nJrRdPs86oGNL4W2CJb16oSUgfzYr9A2i5sw9BAehME=";
+    hash = "sha256-ZKUiz3pdFE2SKxh53X2oyr7hs32Njj5YVA0OXDXz7h0=";
   };
 
   cmakeFlags = [

From 9652fb43736098ecd625dba890f5a2e924cbde85 Mon Sep 17 00:00:00 2001
From: SchweGELBin <schwegelbin@gmail.com>
Date: Sun, 16 Aug 2026 23:04:35 +0200
Subject: [PATCH 15/40] mautrix-whatsapp: 26.07 -> 26.08

(cherry picked from commit 92abca22a4b31bddefc34878cb35b58986741ca7)
---
 pkgs/by-name/ma/mautrix-whatsapp/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ma/mautrix-whatsapp/package.nix b/pkgs/by-name/ma/mautrix-whatsapp/package.nix
index 237445a9e328..70804bb29811 100644
--- a/pkgs/by-name/ma/mautrix-whatsapp/package.nix
+++ b/pkgs/by-name/ma/mautrix-whatsapp/package.nix
@@ -14,20 +14,20 @@
 
 buildGoModule rec {
   pname = "mautrix-whatsapp";
-  version = "26.07";
-  tag = "v0.2607.0";
+  version = "26.08";
+  tag = "v0.2608.0";
 
   src = fetchFromGitHub {
     owner = "mautrix";
     repo = "whatsapp";
     inherit tag;
-    hash = "sha256-cl3nJY9ui9J9fE9T1hBUV/o8lH0usrsUcpj9OwXxgtY=";
+    hash = "sha256-gB+XIS8b1W9wOcKnSlLgctjaD1mBvkNrS3ak9Xq39wg=";
   };
 
   buildInputs = lib.optional (!withGoolm) olm;
   tags = lib.optional withGoolm "goolm";
 
-  vendorHash = "sha256-fVs5su6UkjvQEkoWJH6WL1FCZNdwj0jzrjfpbWOHWDU=";
+  vendorHash = "sha256-02XiudW2yxseGWyNegNUIfA8RBJCyjhhgeKncLy6nQg=";
 
   ldflags = [
     "-s"

From ebcbbf71bbd477a3fde5cf9495c7cea71b10c6d3 Mon Sep 17 00:00:00 2001
From: UwU 420 <164377175+uwu-420@users.noreply.github.com>
Date: Tue, 18 Aug 2026 15:19:32 +0200
Subject: [PATCH 16/40] opencloud: allow local networking in Darwin tests

Assisted-by: OpenAI Codex (GPT-5)
(cherry picked from commit 285d60b4c40b1508fd321af6946c412ea8e7941d)
---
 pkgs/by-name/op/opencloud/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/op/opencloud/package.nix b/pkgs/by-name/op/opencloud/package.nix
index f28d1cb2e764..72bee11ec18f 100644
--- a/pkgs/by-name/op/opencloud/package.nix
+++ b/pkgs/by-name/op/opencloud/package.nix
@@ -92,6 +92,9 @@ buildGoModule (finalAttrs: {
     rm services/search/pkg/opensearch/*_test.go
   '';
 
+  # The activitylog tests start a local NATS server.
+  __darwinAllowLocalNetworking = true;
+
   env = {
     # avoids 'make generate' calling `git`, otherwise no-op
     STRING = finalAttrs.version;

From 5e14d9af9b5a3fbab90b54803dcffb9d333fe55c Mon Sep 17 00:00:00 2001
From: Marc Bornand <dev.mbornand@systemb.ch>
Date: Tue, 18 Aug 2026 08:20:34 +0000
Subject: [PATCH 17/40] librewolf-unwrapped: 153.0.4-1 -> 154.0-2

(cherry picked from commit adb136cf572069307ca8ea800eec776f43c76b97)
---
 pkgs/by-name/li/librewolf-unwrapped/librewolf.nix |  3 +++
 pkgs/by-name/li/librewolf-unwrapped/src.json      | 10 +++++-----
 2 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/li/librewolf-unwrapped/librewolf.nix b/pkgs/by-name/li/librewolf-unwrapped/librewolf.nix
index e633da31cc11..a58fb3f9303a 100644
--- a/pkgs/by-name/li/librewolf-unwrapped/librewolf.nix
+++ b/pkgs/by-name/li/librewolf-unwrapped/librewolf.nix
@@ -34,6 +34,9 @@ rec {
       patch -p1 < ${source}/$patch_name
     done <${source}/assets/patches.txt
 
+    sed -i 's/5bc8c9bbe8c0eabe408d9a7cd7a8e6e09eee0ead817607643882b38a36d07c91/bddacbe056ce7458663a39dc99d5bb3434099aa69cae793cf0c57d4e54f5a6a4/g' third_party/rust/glean-core/.cargo-checksum.json
+    sed -i 's/c20989b1aa336b0849e96ec1b2beea1eab825ffd192c2c3a636e20f830b811d0/0b43fbc5f86c6c247c5189af58be425a829c3b09018c6b26589661eec9a5ad24/g' third_party/rust/glean-core/.cargo-checksum.json
+
     rm toolkit/components/ml/content/backends/OpenAIPipeline.mjs
     rm -rf toolkit/components/ml/vendor/openai
 
diff --git a/pkgs/by-name/li/librewolf-unwrapped/src.json b/pkgs/by-name/li/librewolf-unwrapped/src.json
index 07577047724b..f8a454af709b 100644
--- a/pkgs/by-name/li/librewolf-unwrapped/src.json
+++ b/pkgs/by-name/li/librewolf-unwrapped/src.json
@@ -1,11 +1,11 @@
 {
-  "packageVersion": "153.0.4-1",
+  "packageVersion": "154.0-2",
   "source": {
-    "rev": "153.0.4-1",
-    "hash": "sha256-Wa62qksr9/N768dqbTuJ7etZkTbe7QPSXQ4w7YD1xRE="
+    "rev": "154.0-2",
+    "hash": "sha256-J7n4xjl6RO9PQD0rMWeB+0EKkZcvopY8GvkM0+WbkM4="
   },
   "firefox": {
-    "version": "153.0.4",
-    "hash": "sha512-kIG+7X8IeXwhKAlBac+Vr0o14gj9IrunCb+xoZ4V0VqkhPzK5xFU0q4P+VW/YpzWNMx+1rGANxrqeS2vfGif9w=="
+    "version": "154.0",
+    "hash": "sha512-p3zWZJgq3WKGgRZ+9ZOb1r8MiUqjgMymb5tfsmWUeHTR6BnUImTx3QfIQ/im3AINomjMqf8eBk/KAZ3pGvm5lg=="
   }
 }

From 5c3a2199027aabfc91f5c2986549093c4d23cc06 Mon Sep 17 00:00:00 2001
From: Marc Bornand <dev.mbornand@systemb.ch>
Date: Tue, 18 Aug 2026 15:35:51 +0200
Subject: [PATCH 18/40] librewolf-unwrapped: move source to librewolf.dev

Apply path from Hythera https://github.com/NixOS/nixpkgs/pull/553838#pullrequestreview-4961566683

(cherry picked from commit 9ff29eaa743e64dd663930de5b50b2b44f5bfd67)
---
 pkgs/by-name/li/librewolf-unwrapped/src.nix    | 5 +++--
 pkgs/by-name/li/librewolf-unwrapped/update.nix | 4 ++--
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/li/librewolf-unwrapped/src.nix b/pkgs/by-name/li/librewolf-unwrapped/src.nix
index fd8e8a7656bc..5270c1821773 100644
--- a/pkgs/by-name/li/librewolf-unwrapped/src.nix
+++ b/pkgs/by-name/li/librewolf-unwrapped/src.nix
@@ -1,16 +1,17 @@
 {
   lib,
   fetchurl,
-  fetchFromCodeberg,
+  fetchFromGitLab,
 }:
 let
   src = lib.importJSON ./src.json;
 in
 {
   inherit (src) packageVersion;
-  source = fetchFromCodeberg (
+  source = fetchFromGitLab (
     src.source
     // {
+      domain = "librewolf.dev";
       owner = "librewolf";
       repo = "source";
       fetchSubmodules = true;
diff --git a/pkgs/by-name/li/librewolf-unwrapped/update.nix b/pkgs/by-name/li/librewolf-unwrapped/update.nix
index db09200e5520..d9d3e3d1cc44 100644
--- a/pkgs/by-name/li/librewolf-unwrapped/update.nix
+++ b/pkgs/by-name/li/librewolf-unwrapped/update.nix
@@ -33,7 +33,7 @@ writeScript "update-librewolf" ''
   }
   set -euo pipefail
 
-  latestTag=$(curl "https://codeberg.org/api/v1/repos/librewolf/source/tags?page=1&limit=1" | jq -r .[0].name)
+  latestTag=$(curl "https://librewolf.dev/api/v1/repos/librewolf/source/tags?page=1&limit=1" | jq -r .[0].name)
   echo "latestTag=$latestTag"
 
   srcJson=pkgs/by-name/li/librewolf-unwrapped/src.json
@@ -45,7 +45,7 @@ writeScript "update-librewolf" ''
   fi
 
   prefetchOut=$(mktemp)
-  repoUrl=https://codeberg.org/librewolf/source.git
+  repoUrl=https://librewolf.dev/librewolf/source.git
   nix-prefetch-git $repoUrl --quiet --rev $latestTag --fetch-submodules > $prefetchOut
   srcDir=$(jq -r .path < $prefetchOut)
   srcHash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 $(jq -r .sha256 < $prefetchOut))

From 45248efcd18faaf7ba3dd1b61e06c44d7e2a61b5 Mon Sep 17 00:00:00 2001
From: UwU 420 <164377175+uwu-420@users.noreply.github.com>
Date: Wed, 19 Aug 2026 07:15:00 +0200
Subject: [PATCH 19/40] opencloud.web: 7.2.0 -> 7.1.4

OpenCloud 7.2.3 pins web 7.1.4 from the stable-7.1 branch.

Upstream pin: https://github.com/opencloud-eu/opencloud/blob/v7.2.3/services/web/Makefile#L3-L4

Changelog: https://github.com/opencloud-eu/web/blob/v7.1.4/CHANGELOG.md

Not-cherry-picked-because: master follows OpenCloud's rolling release line
Assisted-by: OpenAI Codex (GPT-5)
---
 pkgs/by-name/op/opencloud/web.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/op/opencloud/web.nix b/pkgs/by-name/op/opencloud/web.nix
index 13e0d4a25879..d6ee7b45a808 100644
--- a/pkgs/by-name/op/opencloud/web.nix
+++ b/pkgs/by-name/op/opencloud/web.nix
@@ -10,20 +10,20 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "opencloud-web";
-  version = "7.2.0";
+  version = "7.1.4";
 
   src = fetchFromGitHub {
     owner = "opencloud-eu";
     repo = "web";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BiOue8+zQ3+6RLiDbLMnxKEen2aav3bljji4d+0Hr5c=";
+    hash = "sha256-Wg4VGweWBiTRGDRIbe4spFQB1MEC25zXZBAIa4+YttY=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_11;
     fetcherVersion = 4;
-    hash = "sha256-gCsgnOEi9rvtwTZy8J/i63D92Gl2V9ZihxCJ+Y5hLUE=";
+    hash = "sha256-YEdZ5B11I6U140qam7e1TMOacRqUeINhr/TI13ddAa0=";
   };
 
   nativeBuildInputs = [

From 81cac941661ed71eeb92d8c44a929673a8cc11a9 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 19 Aug 2026 05:47:14 +0000
Subject: [PATCH 20/40] javaPackages.compiler.openjdk8: 8u502-b07 -> 8u504-b01

(cherry picked from commit 1450625dba070e990a4ffa9f83ec5292007e10b2)
---
 pkgs/development/compilers/openjdk/8/source.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/compilers/openjdk/8/source.json b/pkgs/development/compilers/openjdk/8/source.json
index 894732a60e1f..c6e10c13600d 100644
--- a/pkgs/development/compilers/openjdk/8/source.json
+++ b/pkgs/development/compilers/openjdk/8/source.json
@@ -1,6 +1,6 @@
 {
-  "hash": "sha256-7sbEwNSd0SNdsfWREU6EIk+/9UMlZfWYEv+UQ6iJ3VI=",
+  "hash": "sha256-c0x+4FW1BqpvoMKfkhsea8xBIoRPc7NJuzDk5pcJnd0=",
   "owner": "openjdk",
   "repo": "jdk8u",
-  "rev": "refs/tags/jdk8u502-b07"
+  "rev": "refs/tags/jdk8u504-b01"
 }

From 9af4509390427b56ca7d11fa1be44399923a6343 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 19 Aug 2026 05:23:31 +0000
Subject: [PATCH 21/40] rustywind: 0.26.0 -> 0.27.0

(cherry picked from commit df5e746cee9861410d9ef088c985508b496e0ca4)
---
 pkgs/by-name/ru/rustywind/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ru/rustywind/package.nix b/pkgs/by-name/ru/rustywind/package.nix
index 5eec1a568907..767162a54185 100644
--- a/pkgs/by-name/ru/rustywind/package.nix
+++ b/pkgs/by-name/ru/rustywind/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rustywind";
-  version = "0.26.0";
+  version = "0.27.0";
 
   src = fetchFromGitHub {
     owner = "avencera";
     repo = "rustywind";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-uxgp8cwOswrhDLtx5ZAxsdy96/+UjYhzNKwvt0DBmhk=";
+    hash = "sha256-VlmJJ9movoMumCChINLikz1HJ+KjMvZiTiBhrSCEAdk=";
   };
 
-  cargoHash = "sha256-W5dPMSkihxWryLEpQhqt9IpiwyAYSsIgQLbwjnXVjEk=";
+  cargoHash = "sha256-DAozCVsUBUp6TsbmtfZnU3G73OZE4qtDqtJzpv3fvp4=";
 
   doInstallCheck = true;
   nativeInstallCheckInputs = [ versionCheckHook ];

From ea92e9275af3891bb8b5d19ac03596673668d43b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 18 Aug 2026 21:10:47 +0000
Subject: [PATCH 22/40] upsun: 5.10.8 -> 5.11.0

(cherry picked from commit 3a0a7c75787658ca1c6ec9828756227bf893c338)
---
 pkgs/by-name/up/upsun/versions.json | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/pkgs/by-name/up/upsun/versions.json b/pkgs/by-name/up/upsun/versions.json
index 7d76f8484395..5b82974bf70e 100644
--- a/pkgs/by-name/up/upsun/versions.json
+++ b/pkgs/by-name/up/upsun/versions.json
@@ -1,19 +1,19 @@
 {
-  "version": "5.10.8",
+  "version": "5.11.0",
   "darwin-amd64": {
-    "hash": "sha256-8M7L9GAwaSpFg6VHI4T5CI2oBE2Z8It3Pt2Wr76Z+is=",
-    "url": "https://github.com/upsun/cli/releases/download/v5.10.8/upsun_5.10.8_darwin_all.tar.gz"
+    "hash": "sha256-kVnCzv0cfSLX6EjZp2cc7haCjJ4bBpAotSfL2jCdjoY=",
+    "url": "https://github.com/upsun/cli/releases/download/v5.11.0/upsun_5.11.0_darwin_all.tar.gz"
   },
   "darwin-arm64": {
-    "hash": "sha256-8M7L9GAwaSpFg6VHI4T5CI2oBE2Z8It3Pt2Wr76Z+is=",
-    "url": "https://github.com/upsun/cli/releases/download/v5.10.8/upsun_5.10.8_darwin_all.tar.gz"
+    "hash": "sha256-kVnCzv0cfSLX6EjZp2cc7haCjJ4bBpAotSfL2jCdjoY=",
+    "url": "https://github.com/upsun/cli/releases/download/v5.11.0/upsun_5.11.0_darwin_all.tar.gz"
   },
   "linux-amd64": {
-    "hash": "sha256-ymKZVLavGiGarDvdzYvxCVTHqPm2YPR5bJqQTQddiPw=",
-    "url": "https://github.com/upsun/cli/releases/download/v5.10.8/upsun_5.10.8_linux_amd64.tar.gz"
+    "hash": "sha256-wPEbVEsFGfshxWGXCOzodSap0DuWetCvdwJj76kFVOc=",
+    "url": "https://github.com/upsun/cli/releases/download/v5.11.0/upsun_5.11.0_linux_amd64.tar.gz"
   },
   "linux-arm64": {
-    "hash": "sha256-Fe4oSes/i3LdRP5bzI/d3gA2QtsfCO0dVswVoNMQXCs=",
-    "url": "https://github.com/upsun/cli/releases/download/v5.10.8/upsun_5.10.8_linux_arm64.tar.gz"
+    "hash": "sha256-rejRYbSHuddU43tpp/WDKz+KarNIHxrK2SJ/ftNoAHo=",
+    "url": "https://github.com/upsun/cli/releases/download/v5.11.0/upsun_5.11.0_linux_arm64.tar.gz"
   }
 }

From e70ce5c9d7455d3143b19d010c15897a2c70c9a1 Mon Sep 17 00:00:00 2001
From: Udo Sauer <fernsehmuell@googlemail.com>
Date: Fri, 14 Aug 2026 20:06:40 +0200
Subject: [PATCH 23/40] anker-powerconf-c200-linux-tools: init at 0.1.0

(cherry picked from commit d2f3663a735255ffc2a92eab2c4d93839e5fa2ad)
---
 .../package.nix                               | 41 +++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 pkgs/by-name/an/anker-powerconf-c200-linux-tools/package.nix

diff --git a/pkgs/by-name/an/anker-powerconf-c200-linux-tools/package.nix b/pkgs/by-name/an/anker-powerconf-c200-linux-tools/package.nix
new file mode 100644
index 000000000000..1d4842c4eaa8
--- /dev/null
+++ b/pkgs/by-name/an/anker-powerconf-c200-linux-tools/package.nix
@@ -0,0 +1,41 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "anker-powerconf-c200-linux-tools";
+  version = "0.1.0";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "erans";
+    repo = "anker-powerconf-c200-linux-tools";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-txIVTbqxnFQ8GcJgxTp89Qc3U5CXkYolXCO4E1PXHHA=";
+  };
+
+  strictDeps = true;
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p "$out"/bin
+    cp ./build/anker-powerconf-c200-linux-tools "$out"/bin
+
+    runHook postInstall
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Linux CLI tools for the Anker PowerConf C200 webcam";
+    mainProgram = "anker-powerconf-c200-linux-tools";
+    homepage = "https://github.com/erans/anker-powerconf-c200-linux-tools";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fernsehmuell ];
+    platforms = lib.platforms.linux;
+  };
+})

From 677a0b8d6a9b5757321e5e2e0fbce550ed02a22d Mon Sep 17 00:00:00 2001
From: lukas-sgx <lukas.soigneux@epitech.eu>
Date: Wed, 19 Aug 2026 12:32:44 +0000
Subject: [PATCH 24/40] whoami: 1.11.0 -> 1.12.0

(cherry picked from commit 7918111dfb7db13f94c57309f3f66b39e25116e7)
---
 pkgs/by-name/wh/whoami/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/wh/whoami/package.nix b/pkgs/by-name/wh/whoami/package.nix
index d3a7006aceaa..f9cefa780c3a 100644
--- a/pkgs/by-name/wh/whoami/package.nix
+++ b/pkgs/by-name/wh/whoami/package.nix
@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "whoami";
-  version = "1.11.0";
+  version = "1.12.0";
 
   src = fetchFromGitHub {
     owner = "traefik";
     repo = "whoami";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-3jzLdCmmts/7S1Oxig9Dg3kRGh/H5l5UD7ztev0yvXY=";
+    hash = "sha256-0ijolVbIttA7yhnN8eDx/FercHh9x81Hpk/CqGzmwhs=";
   };
 
-  vendorHash = "sha256-0Qxw+MUYVgzgWB8vi3HBYtVXSq/btfh4ZfV/m1chNrA=";
+  vendorHash = "sha256-2smvg0b226PSvAEOssCM5NXIqluDBmjzjYd54LWs27A=";
 
   ldflags = [ "-s" ];
 

From e4ee974b80cef606fe64d854fcb0be5324cfa308 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 18 Aug 2026 18:52:14 +0000
Subject: [PATCH 25/40] godotPackages.export-template: 4.7.1-stable ->
 4.7.2-stable

(cherry picked from commit 1d6326282f265aea56bda85fdcc9fc8cf1336002)
---
 pkgs/development/tools/godot/4.7/default.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/development/tools/godot/4.7/default.nix b/pkgs/development/tools/godot/4.7/default.nix
index 3d411ed36a14..a2bfae19dc52 100644
--- a/pkgs/development/tools/godot/4.7/default.nix
+++ b/pkgs/development/tools/godot/4.7/default.nix
@@ -1,11 +1,11 @@
 {
-  version = "4.7.1-stable";
-  hash = "sha256-3JzJuFbicIJ4AiEVxh5t1/q9mjxwFXZvTAfEBdrIzsc=";
+  version = "4.7.2-stable";
+  hash = "sha256-RyUaOUkE6rYQcn1KKRY2GQ4vj8Gs7N24EJ+vU13meJE=";
   default = {
-    exportTemplatesHash = "sha256-hkCdtiALb4/TIwmJwtIAKFHz3Ris8R1726/d9aDdD3I=";
+    exportTemplatesHash = "sha256-8phJC41E2TS+QlpaZaUb8V9CJCiyKaBqbhHZ/+okgBE=";
   };
   mono = {
-    exportTemplatesHash = "sha256-75pwi+UezZdM19zNyv16GHDaPT4cJMByvbuYGMen22M=";
+    exportTemplatesHash = "sha256-kvhoHjSe8fkIkbeS2pXjsrC9HtYQt4AYxY/rLYfhWp0=";
     nugetDeps = ./deps.json;
   };
 }

From fc917a9b60f25011b207a6f277b6a81aada86118 Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 27 Jun 2026 09:45:58 +0200
Subject: [PATCH 26/40] nixos/gnome: add glycin-thumbnailer and
 gst-thumbnailers

These are the new multimedia thumbnailers developed for GNOME.

gst-thumbnailers in particular is useful because it adds support for
video thumbnailing back to GNOME. Video thumbnailing was previously
provided by totem, but totem isn't shipped by default anymore as it was
replaced by showtime.

Adding them to `optionalPackages` as they are not core apps as per [1].

[1] https://gitlab.gnome.org/GNOME/gnome-build-meta/-/blob/6be2940aa35c91133a909f8462a36cdd66defafb/elements/core/meta-gnome-core-apps.bst

(cherry picked from commit a13398a4e7d060143ced2b03929aabb88b83e69a)
---
 nixos/modules/services/desktop-managers/gnome.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixos/modules/services/desktop-managers/gnome.nix b/nixos/modules/services/desktop-managers/gnome.nix
index 3747a491098f..a56325fe7201 100644
--- a/nixos/modules/services/desktop-managers/gnome.nix
+++ b/nixos/modules/services/desktop-managers/gnome.nix
@@ -435,6 +435,7 @@ in
           optionalPackages = [
             pkgs.adwaita-icon-theme
             nixos-background-info
+            pkgs.glycin-thumbnailer # Image thumbnailers
             pkgs.gnome-backgrounds
             pkgs.gnome-bluetooth
             pkgs.gnome-color-manager
@@ -443,6 +444,7 @@ in
             pkgs.gnome-user-docs
             pkgs.glib # for gsettings program
             pkgs.gnome-menus
+            pkgs.gst-thumbnailers # Audio and video thumbnailers
             pkgs.gtk3.out # for gtk-launch program
             pkgs.xdg-user-dirs # Update user dirs as described in https://freedesktop.org/wiki/Software/xdg-user-dirs/
             pkgs.xdg-user-dirs-gtk # Used to create the default bookmarks

From b264f0d62bc1882c733b59905c693b15497e318d Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 27 Jun 2026 09:49:06 +0200
Subject: [PATCH 27/40] glycin-thumbnailer: remove redundant `shopt -s
 failglob`

That's a leftover from when we didn't have `enabledLoaders` yet in
#503377.

(cherry picked from commit 64262df5c3cd5405117ac819d3770ffbd7c7b7e0)
---
 pkgs/by-name/gl/glycin-thumbnailer/package.nix | 15 ++++++---------
 1 file changed, 6 insertions(+), 9 deletions(-)

diff --git a/pkgs/by-name/gl/glycin-thumbnailer/package.nix b/pkgs/by-name/gl/glycin-thumbnailer/package.nix
index f90b4dd1e43e..f35f43a68f37 100644
--- a/pkgs/by-name/gl/glycin-thumbnailer/package.nix
+++ b/pkgs/by-name/gl/glycin-thumbnailer/package.nix
@@ -55,16 +55,13 @@ stdenv.mkDerivation (finalAttrs: {
   # Thumbnailer files are in `glycin-loaders`, but we provide them in this package
   postInstall = ''
     mkdir -p $out/share/thumbnailers
-    (
-      shopt -s failglob
 
-      for loader in ${lib.concatStringsSep " " glycin-loaders.passthru.enabledLoaders}; do
-        substitute \
-          "../glycin-loaders/glycin-$loader/glycin-$loader.thumbnailer.in" \
-          "$out/share/thumbnailers/glycin-$loader.thumbnailer" \
-          --subst-var-by "BINDIR" "$out/bin"
-      done
-    )
+    for loader in ${lib.concatStringsSep " " glycin-loaders.passthru.enabledLoaders}; do
+      substitute \
+        "../glycin-loaders/glycin-$loader/glycin-$loader.thumbnailer.in" \
+        "$out/share/thumbnailers/glycin-$loader.thumbnailer" \
+        --subst-var-by "BINDIR" "$out/bin"
+    done
   '';
 
   passthru.tests = {

From 62cc1071b02e58f2cc1543be8b96f7602d456013 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 18 Aug 2026 17:08:58 +0000
Subject: [PATCH 28/40] openbao: 2.6.1 -> 2.6.2

(cherry picked from commit e7acc4a6d720afc34c7901ce3f03d3bdb5e4af19)
---
 pkgs/by-name/op/openbao/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/op/openbao/package.nix b/pkgs/by-name/op/openbao/package.nix
index d9d1317f85b5..f8f27f239081 100644
--- a/pkgs/by-name/op/openbao/package.nix
+++ b/pkgs/by-name/op/openbao/package.nix
@@ -14,16 +14,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "openbao";
-  version = "2.6.1";
+  version = "2.6.2";
 
   src = fetchFromGitHub {
     owner = "openbao";
     repo = "openbao";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-2wl06I6/yF/V5P9MFCCzpEiX4G+YTtXWRjvh+wDyB1U=";
+    hash = "sha256-iFOah7LkuiL4MGhi6ANpgCYDYQl33gF+F4agdKLEFTk=";
   };
 
-  vendorHash = "sha256-2MMWs30e7GB0pcPmmDvw6RTBzKYXNwothAuQMZAFHoE=";
+  vendorHash = "sha256-gORWU9Yn+AX00mQD5uq9k7ksbkLVWv8W2N4IxEOsE88=";
 
   proxyVendor = true;
 

From e4a91ff9db76d008b6c3e79b15abbcc56932f3d2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 19 Aug 2026 17:29:19 +0000
Subject: [PATCH 29/40] python3Packages.flask-security: 5.8.1 -> 5.8.2

(cherry picked from commit 36706461e6575ca239659c9f782f207f53386a6c)
---
 pkgs/development/python-modules/flask-security/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/flask-security/default.nix b/pkgs/development/python-modules/flask-security/default.nix
index d715cd322f53..70f7f543996c 100644
--- a/pkgs/development/python-modules/flask-security/default.nix
+++ b/pkgs/development/python-modules/flask-security/default.nix
@@ -51,14 +51,14 @@
 
 buildPythonPackage rec {
   pname = "flask-security";
-  version = "5.8.1";
+  version = "5.8.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pallets-eco";
     repo = "flask-security";
     tag = version;
-    hash = "sha256-xNWgLIk/AB5beZQX7jzh8uQ9o0Gq+W5rgowBS215pk4=";
+    hash = "sha256-WRhQqSSlPKqY/NxqPCG3izYy782vCq6JGRzReL8Qwqw=";
   };
 
   build-system = [ flit-core ];

From 55b843cae8e920eda6b82f3be0db92657b7d9a5a Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Wed, 19 Aug 2026 21:26:00 +0300
Subject: [PATCH 30/40] linux_7_1: 7.1.8 -> 7.1.9

(cherry picked from commit 40e92c93fcbfd78a433b73c08232e433ed45d2e5)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 934c89870e83..a47c03a92d82 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -35,8 +35,8 @@
         "lts": true
     },
     "7.1": {
-        "version": "7.1.8",
-        "hash": "sha256:0j9c88akklsdhivrlx7i0ccgzxcwcgp1zc6dzi65p79796sdq0gz",
+        "version": "7.1.9",
+        "hash": "sha256:1c3jq2y2isas3hi8dla4qs0wl6z6p9shjaqgk1987cwp72pa8w9j",
         "lts": false
     },
     "7.2": {

From 478a1dcfed7f86ba1b1ca87d26afbd2c43263a5a Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Wed, 19 Aug 2026 21:26:09 +0300
Subject: [PATCH 31/40] linux_6_18: 6.18.44 -> 6.18.45

(cherry picked from commit 812fbe2a4f4f356406c1edf46180fc16486455d3)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index a47c03a92d82..383bedaac22f 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -30,8 +30,8 @@
         "lts": true
     },
     "6.18": {
-        "version": "6.18.44",
-        "hash": "sha256:0hqd4izrmabjcp22z7h8zrxxp1r2azz78la0j0nfha38y0wdjwhg",
+        "version": "6.18.45",
+        "hash": "sha256:0cxbvrb43mqxjmxyz2i7n5xghrk4gx7n24js2an199lwaxb4myih",
         "lts": true
     },
     "7.1": {

From 18de1dc1005a23d411e1ca19c01a403a2f4ccf0a Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Wed, 19 Aug 2026 21:26:20 +0300
Subject: [PATCH 32/40] linux_6_12: 6.12.103 -> 6.12.104

(cherry picked from commit 5801384b33fba5fb5501473a81952c323d7cfdd0)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 383bedaac22f..284561c3af8b 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -25,8 +25,8 @@
         "lts": true
     },
     "6.12": {
-        "version": "6.12.103",
-        "hash": "sha256:0xiizhw3kk2ggx9yymzmpj0q9ckday1492vqdrhsayw7x2nslhzi",
+        "version": "6.12.104",
+        "hash": "sha256:16drg5rvgbg4s24byj3wkq4ib5l6azmlxd5aqpq0rgb329m1d7cl",
         "lts": true
     },
     "6.18": {

From 6263859747f4ad37ed1052aaad6eb0f4e3c937b0 Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Wed, 19 Aug 2026 21:26:28 +0300
Subject: [PATCH 33/40] linux_6_6: 6.6.151 -> 6.6.152

(cherry picked from commit e10073105524cbc6fff8f27c6aa05852379ea7d4)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 284561c3af8b..82214861c65c 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -20,8 +20,8 @@
         "lts": true
     },
     "6.6": {
-        "version": "6.6.151",
-        "hash": "sha256:1xv9k5r0rm3gda5hzw7i6rjrpwnhlryzk9j1xfy70as1ffpfa0fy",
+        "version": "6.6.152",
+        "hash": "sha256:1mkhvln2x9npklg1b9b2gkavxcjmj9826sq0fh5rv16scf60b2vp",
         "lts": true
     },
     "6.12": {

From 8460691627bad4ac875da6c02c1d9d10c16630da Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Wed, 19 Aug 2026 21:26:34 +0300
Subject: [PATCH 34/40] linux_6_1: 6.1.182 -> 6.1.183

(cherry picked from commit dcc51e8a1feb0c8b113b5274aedca51d0b9f6393)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 82214861c65c..219637c438fe 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -5,8 +5,8 @@
         "lts": false
     },
     "6.1": {
-        "version": "6.1.182",
-        "hash": "sha256:118z7jqabpja5xzlqj73alvsg4sjs6fg5iv8x0da4940dsxid17k",
+        "version": "6.1.183",
+        "hash": "sha256:1qn0zw987amv77h7pj9rkc852haw783fxvqscp71bi1q97z0fb9n",
         "lts": true
     },
     "5.15": {

From 71b23c911c2f80c440d106f5603c30e2295104da Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Wed, 19 Aug 2026 21:26:37 +0300
Subject: [PATCH 35/40] linux_5_15: 5.15.215 -> 5.15.216

(cherry picked from commit 6521f09935cc6705130965928339d6a86cf31644)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 219637c438fe..56f2ed091a08 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -10,8 +10,8 @@
         "lts": true
     },
     "5.15": {
-        "version": "5.15.215",
-        "hash": "sha256:19xp4gyp9h341dmvg36i3jm4zgk4lgwrrrdjkzbacgw1l2fjfzym",
+        "version": "5.15.216",
+        "hash": "sha256:1v854sl38sxsl9zwm9sy6l3hgq24356angizxi7g98xf0lhgpbq9",
         "lts": true
     },
     "5.10": {

From dff97b63b174f4ae697dfdbade554974a6e1c4d8 Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Wed, 19 Aug 2026 21:26:41 +0300
Subject: [PATCH 36/40] linux_5_10: 5.10.264 -> 5.10.265

(cherry picked from commit 8a3e4a0b34e9b274779ddbb391b32fb6308aa11f)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 56f2ed091a08..d0555c6f753d 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -15,8 +15,8 @@
         "lts": true
     },
     "5.10": {
-        "version": "5.10.264",
-        "hash": "sha256:17j8bdqsq6n0zl5a59chiapxpn7yapqvihqq37414dbq6bn54xgj",
+        "version": "5.10.265",
+        "hash": "sha256:0i96z6iq218bcqyy4hllz9jnaj0j012ix82lf5gkvnj9kqbbj36i",
         "lts": true
     },
     "6.6": {

From 48974cc204b901cbfcd74fa5bfd1dd164c29f1e0 Mon Sep 17 00:00:00 2001
From: isabel <isabel@isabelroses.com>
Date: Wed, 19 Aug 2026 09:56:00 +0100
Subject: [PATCH 37/40] wakapi: 2.17.5 -> 2.17.6

Diff: https://github.com/muety/wakapi/compare/2.17.5...2.17.6

Changelog: https://github.com/muety/wakapi/releases/tag/2.17.6
(cherry picked from commit d984e55745c1f082844665d79e0c70a392ebd683)
---
 pkgs/by-name/wa/wakapi/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/wa/wakapi/package.nix b/pkgs/by-name/wa/wakapi/package.nix
index 943b967335ca..e7a4cddf8580 100644
--- a/pkgs/by-name/wa/wakapi/package.nix
+++ b/pkgs/by-name/wa/wakapi/package.nix
@@ -6,7 +6,7 @@
   nix-update-script,
 }:
 let
-  version = "2.17.5";
+  version = "2.17.6";
 in
 buildGoLatestModule {
   pname = "wakapi";
@@ -16,10 +16,10 @@ buildGoLatestModule {
     owner = "muety";
     repo = "wakapi";
     tag = version;
-    hash = "sha256-CQliu0fPg1k28sL6lhgoXh1GEVM3dBXl6rN0yvHpA2U=";
+    hash = "sha256-fKCfjLh/nf6rRqxdGPWfEY9EDh+5sXSKkvzgq7D4ocE=";
   };
 
-  vendorHash = "sha256-kA+XeHU7XalQ2xnUfaZcvRAwHDF1hSPUGNXQ7e9y31M=";
+  vendorHash = "sha256-eyldhpDU5fT7tHdsQZ4qUrPlu1QSYaXX8FgksvAXiOw=";
 
   # Not a go module required by the project, contains development utilities
   excludedPackages = [ "scripts" ];

From 99948a6146edb825463b794e274c69c20b273ef2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 11 Aug 2026 19:14:43 +0000
Subject: [PATCH 38/40] ironwail: 0.8.1 -> 0.8.2

(cherry picked from commit a1e80a244d3414ff4be9f8bdad2f6ec72486b26c)
---
 pkgs/by-name/ir/ironwail/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ir/ironwail/package.nix b/pkgs/by-name/ir/ironwail/package.nix
index 51821de58b41..7e20aec5c355 100644
--- a/pkgs/by-name/ir/ironwail/package.nix
+++ b/pkgs/by-name/ir/ironwail/package.nix
@@ -23,11 +23,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "ironwail";
-  version = "0.8.1";
+  version = "0.8.2";
 
   src = fetchurl {
     url = "https://github.com/andrei-drexler/ironwail/archive/refs/tags/v${finalAttrs.version}.tar.gz";
-    hash = "sha256-TlEMuwmpQIoIyjyQo9T/h3T7rPHX+K8TqHKSt+UtMBg=";
+    hash = "sha256-rt+u0oY2W7UzsIUs5Tvd3IcBXsM2Z0UEfXNVLejc06U=";
   };
 
   sourceRoot = "${finalAttrs.pname}-${finalAttrs.version}/Quake";

From e651c28f356df693b51087cc0dcc4bb7d9a12e29 Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Thu, 13 Aug 2026 21:56:59 +0200
Subject: [PATCH 39/40] nss_latest: 3.126 -> 3.127

https://github.com/mozilla/nss/blob/master/doc/src/releases/nss_3_127.md
(cherry picked from commit 6cb968ffd1a7d65f337ed3a7b5156fdf24fc9c80)
---
 pkgs/development/libraries/nss/latest.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/libraries/nss/latest.nix b/pkgs/development/libraries/nss/latest.nix
index 81261040032a..4bbe446610e2 100644
--- a/pkgs/development/libraries/nss/latest.nix
+++ b/pkgs/development/libraries/nss/latest.nix
@@ -5,8 +5,8 @@
 #       Example: nix-shell ./maintainers/scripts/update.nix --argstr package cacert
 
 import ./generic.nix {
-  version = "3.126";
-  hash = "sha256-+yiBEc8WLZ6qiO8MBQBiIXfm4OEJ9EFgmw2rY+U/bp8=";
+  version = "3.127";
+  hash = "sha256-SiaKDkDTHqhTCs/pcwOAk0lgIayeMKOwGLAZr9WKS4Q=";
   filename = "latest.nix";
   versionRegex = "NSS_(\\d+)_(\\d+)(?:_(\\d+))?_RTM";
 }

From 52ebc2c9b2e01ed64ce052932885678fd893e5b5 Mon Sep 17 00:00:00 2001
From: Felix Singer <felixsinger@posteo.net>
Date: Sat, 8 Aug 2026 09:14:18 +0200
Subject: [PATCH 40/40] flashprog: 1.5 -> 1.6

https://flashprog.org/wiki/Flashprog/v1.6

Signed-off-by: Felix Singer <felixsinger@posteo.net>
(cherry picked from commit 8ec13bd8e05165a6492743c814cd370089c41862)
---
 pkgs/by-name/fl/flashprog/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/fl/flashprog/package.nix b/pkgs/by-name/fl/flashprog/package.nix
index 3f7d9aa58be8..6483464e89d7 100644
--- a/pkgs/by-name/fl/flashprog/package.nix
+++ b/pkgs/by-name/fl/flashprog/package.nix
@@ -17,12 +17,12 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "flashprog";
-  version = "1.5";
+  version = "1.6";
 
   src = fetchgit {
     url = "https://review.sourcearcade.org/flashprog";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-laU2S7SPFCso/HzPSpbEM6hAE5/XYkNoBqFTT4PU8TU=";
+    hash = "sha256-Ih6cRUbmKIKRt8dIGNBbaLDomNvVdcl5P/lRBAzwwTI=";
   };
 
   nativeBuildInputs = [