diff --git a/doc/release-notes/rl-2611.section.md b/doc/release-notes/rl-2611.section.md
index ba5cddc4f56d..896517492ed2 100644
--- a/doc/release-notes/rl-2611.section.md
+++ b/doc/release-notes/rl-2611.section.md
@@ -97,6 +97,8 @@
 
 - `pdns` has been updated from `5.0.x` to `5.1.x`. Please be sure to review the [Upgrade Notes](https://doc.powerdns.com/authoritative/upgrading.html#to-5-1-0) before upgrading. Namely LUA record updates are no longer allowed by default, and the embedded webserver no longer includes a `access-control-allow-origin: *` header by default.
 
+- `davmail` no longer supports building with GTK 2, and the `preferGtk3` override flag has been removed as GTK 3 is always used.
+
 - Support for the legacy U‐Boot image format has been removed from the Linux kernel builders, as it is deprecated upstream and no longer used by any platform in Nixpkgs.
 
 - `etcd_3_4` package was dropped, as it's gone EOL. Please upgrade to either 3.5 or 3.6. See [migration notes](https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/) for incompatibilities and upgrade procedure.
diff --git a/lib/systems/default.nix b/lib/systems/default.nix
index eff129fb1e5d..262cb722a090 100644
--- a/lib/systems/default.nix
+++ b/lib/systems/default.nix
@@ -585,6 +585,7 @@ let
               "i686" = "386";
               "loongarch64" = "loong64";
               "mips" = "mips";
+              "mips64" = "mips64";
               "mips64el" = "mips64le";
               "mipsel" = "mipsle";
               "powerpc64" = "ppc64";
diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 89ccec3c26d2..f2ed390c0edb 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -5398,6 +5398,12 @@
     githubId = 718298;
     name = "Michael Livshin";
   };
+  cnst = {
+    name = "cnst";
+    email = "mail@cnst.dev";
+    github = "cnsta";
+    githubId = 61944575;
+  };
   CnTeng = {
     name = "CnTeng";
     email = "me@snakepi.xyz";
@@ -16568,6 +16574,7 @@
     name = "Lewis";
   };
   lubsch = {
+    matrix = "@lubsch:matrix.org";
     github = "lubsch";
     githubId = 33580245;
     name = "Benjamin Lohmar";
@@ -29060,6 +29067,12 @@
     githubId = 10110;
     name = "Travis B. Hartwell";
   };
+  travisty- = {
+    email = "travis@traviskinney.co";
+    github = "travisty-";
+    githubId = 10015877;
+    name = "Travis Kinney";
+  };
   traxys = {
     email = "quentin+dev@familleboyer.net";
     github = "traxys";
diff --git a/nixos/doc/manual/release-notes/rl-2611.section.md b/nixos/doc/manual/release-notes/rl-2611.section.md
index 0fe2a5b7287d..850007a70f66 100644
--- a/nixos/doc/manual/release-notes/rl-2611.section.md
+++ b/nixos/doc/manual/release-notes/rl-2611.section.md
@@ -58,6 +58,8 @@
 
 - [Unpackerr](https://unpackerr.zip), extracts downloads for Radarr, Sonarr, Lidarr, Readarr, and/or a Watch folder. Available as [services.unpackerr](#opt-services.unpackerr.enable).
 
+- [ioquake3](https://ioquake3.org), a open-source port of the 3D action shooter Quake 3 Arena. Available as [programs.ioquake3](#opt-programs.ioquake3.enable).
+
 - [Matrix Authentication Service](https://github.com/element-hq/matrix-authentication-service) is an OAuth2.0 and OpenID Connect provider for Matrix homeservers (such as Synapse). It replaces standard password authentication with modern OpenID Connect flows, and can delegate authentication to upstream OIDC providers. Available as [services.matrix-authentication-service](#opt-services.matrix-authentication-service.enable).
 
 - [stash-clipboard](https://github.com/NotAShelf/stash), a Wayland clipboard "manager" with fast persistent history and multi-media support. Available as [services.stash-clipboard](#opt-services.stash-clipboard.enable).
diff --git a/nixos/lib/testing/driver.nix b/nixos/lib/testing/driver.nix
index c15578f4fbfc..31173219f88c 100644
--- a/nixos/lib/testing/driver.nix
+++ b/nixos/lib/testing/driver.nix
@@ -68,9 +68,11 @@ let
         ++ lib.optionals (!config.skipTypeCheck) [ hostPkgs.ty ]
         ++ lib.optionals (!config.skipLint) [ hostPkgs.ruff ];
         buildInputs = [ testDriver ];
-        testScript = config.testScriptString;
         preferLocalBuild = true;
-        passthru = config.passthru;
+        passthru = config.passthru // {
+          # testScript used to be a part of the derivation attributes, kept for backwards compat.
+          testScript = config.testScriptString;
+        };
         meta = config.meta // {
           mainProgram = "nixos-test-driver";
         };
@@ -82,7 +84,7 @@ let
           # prepend type hints so the test script can be type checked with ty
           cat "${../test-script-prepend.py}" >> testScriptWithTypes
           echo "${toString typeHints}" >> testScriptWithTypes
-          echo -n "$testScript" >> testScriptWithTypes
+          cat "${config.driverConfiguration.test_script}" >> testScriptWithTypes
         ''}
 
         ${lib.optionalString (!config.skipTypeCheck) ''
diff --git a/nixos/modules/image/amend-repart-definitions.py b/nixos/modules/image/amend-repart-definitions.py
index 939340266ab7..be8a207726fd 100644
--- a/nixos/modules/image/amend-repart-definitions.py
+++ b/nixos/modules/image/amend-repart-definitions.py
@@ -13,8 +13,8 @@ files using the same mechanism.
 """
 
 import json
-import sys
 import shutil
+import sys
 from pathlib import Path
 
 
diff --git a/nixos/modules/image/repart-image.nix b/nixos/modules/image/repart-image.nix
index 9b4447b18816..129aad48d2f8 100644
--- a/nixos/modules/image/repart-image.nix
+++ b/nixos/modules/image/repart-image.nix
@@ -86,7 +86,6 @@ let
         depsBuildBuild = [ ruff ];
         nativeBuildInputs = [
           python3
-          black
           mypy
         ];
       }
@@ -94,8 +93,8 @@ let
         install ${./amend-repart-definitions.py} $out
         patchShebangs --build $out
 
-        black --check --diff $out
-        ruff check --line-length 88 $out
+        ruff format --check $out
+        ruff check $out
         mypy --strict $out
       '';
 
diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix
index c33d7a1cbbb1..9ba6ce891c52 100644
--- a/nixos/modules/module-list.nix
+++ b/nixos/modules/module-list.nix
@@ -247,6 +247,7 @@
   ./programs/iftop.nix
   ./programs/iio-hyprland.nix
   ./programs/immersed.nix
+  ./programs/ioquake3.nix
   ./programs/iotop.nix
   ./programs/jai-jail.nix
   ./programs/java.nix
diff --git a/nixos/modules/programs/ioquake3.nix b/nixos/modules/programs/ioquake3.nix
new file mode 100644
index 000000000000..1f35d8270c6f
--- /dev/null
+++ b/nixos/modules/programs/ioquake3.nix
@@ -0,0 +1,79 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+let
+  cfg = config.programs.ioquake3;
+
+  toIoquake3Value = value: if lib.isBool value then (if value then "1" else "0") else toString value;
+
+  # Quake 3 is unable to read or execute long config files from the Nix store,
+  # therefore we link it to /etc
+  fsBasepath = "/etc/xdg/ioquake3";
+
+  toIoquake3Config =
+    settings:
+    lib.concatStrings (
+      lib.mapAttrsToList (name: value: ''seta ${name} "${toIoquake3Value value}"'' + "\n") settings
+    );
+
+  configFile = pkgs.writeText "ioquake3-settings.cfg" (toIoquake3Config cfg.settings);
+
+  ioquake3Wrapped = pkgs.symlinkJoin {
+    name = "ioquake3-wrapped";
+    paths = [ cfg.package ];
+    nativeBuildInputs = [ pkgs.makeWrapper ];
+    postBuild = ''
+      wrapProgram "$out/bin/ioquake3" --add-flags  "+set fs_basepath ${fsBasepath} +exec settings.cfg"
+    '';
+  };
+in
+{
+  options.programs.ioquake3 = {
+    enable = lib.mkEnableOption "ioquake3, an enhanced, cross-platform, open source engine for id Software's Quake 3";
+
+    package = lib.mkPackageOption pkgs "ioquake3" { };
+
+    settings = lib.mkOption {
+      type = lib.types.attrsOf (
+        lib.types.oneOf [
+          lib.types.str
+          lib.types.int
+          lib.types.float
+          lib.types.bool
+        ]
+      );
+      default = { };
+      example = lib.literalExpression ''
+        {
+          name = "Player";
+          sensitivity = 5;
+          r_fullscreen = true;
+          cl_maxfps = 125;
+        }
+      '';
+      description = ''
+        ioquake3 configuration, written out as a cfg file that is loaded on
+        startup via `+exec`. Keys are cvar names, values are the cvar
+        values.
+
+        See <https://ioquake3.org/help/players-guide/> for some available
+        configuration options.
+      '';
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    environment = {
+      systemPackages = [ ioquake3Wrapped ];
+      etc."xdg/ioquake3/baseq3/settings.cfg".source = configFile;
+    };
+  };
+
+  meta = {
+    maintainers = with lib.maintainers; [ onny ];
+  };
+}
diff --git a/nixos/modules/programs/wayland/niri.nix b/nixos/modules/programs/wayland/niri.nix
index 31cc485c4e00..67869517d706 100644
--- a/nixos/modules/programs/wayland/niri.nix
+++ b/nixos/modules/programs/wayland/niri.nix
@@ -33,6 +33,14 @@ in
         services = {
           displayManager.sessionPackages = [ cfg.package ];
 
+          # GDM 50 falls back to launching "gnome-session" as the user
+          # session command when neither AccountsService nor displayManager
+          # .defaultSession pins one. On Niri-only setups that produces a
+          # login loop because gnome-session isn't installed. Pin Niri as
+          # the default so it works out of the box; users with multiple
+          # sessions can still override.
+          displayManager.defaultSession = lib.mkDefault "niri";
+
           # Recommended by upstream
           # https://github.com/YaLTeR/niri/wiki/Important-Software#portals
           gnome.gnome-keyring.enable = lib.mkDefault true;
diff --git a/nixos/modules/services/networking/knot-resolver.nix b/nixos/modules/services/networking/knot-resolver.nix
index d943b29b5b73..4aa8d47f110a 100644
--- a/nixos/modules/services/networking/knot-resolver.nix
+++ b/nixos/modules/services/networking/knot-resolver.nix
@@ -10,17 +10,17 @@ let
   configFile = pkgs.callPackage (
     {
       runCommandLocal,
-      remarshal_0_17,
+      remarshal,
       stdenv,
     }:
     runCommandLocal "knot-resolver.yaml"
       {
-        nativeBuildInputs = [ remarshal_0_17 ];
+        nativeBuildInputs = [ remarshal ];
         value = builtins.toJSON cfg.settings;
         passAsFile = [ "value" ];
       }
       ''
-        json2yaml "$valuePath" "$out"
+        remarshal --from json --to yaml-1.1 "$valuePath" "$out"
         ${
           # We skip validation if the build platform cannot execute # the binary targeting the host platform.
           lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
diff --git a/nixos/modules/services/web-apps/tabbyapi.nix b/nixos/modules/services/web-apps/tabbyapi.nix
index a955afe463b5..7c357b15551f 100644
--- a/nixos/modules/services/web-apps/tabbyapi.nix
+++ b/nixos/modules/services/web-apps/tabbyapi.nix
@@ -35,12 +35,14 @@ in
               type = lib.types.str;
               default = "127.0.0.1";
               description = "The IP to host on. Use 0.0.0.0 to expose on all network adapters.";
+              example = "0.0.0.0";
             };
 
             port = lib.mkOption {
               type = lib.types.port;
               default = 5000;
               description = "The port to host on.";
+              example = 8080;
             };
 
             disable_auth = lib.mkOption {
@@ -58,10 +60,34 @@ in
               description = "Disable fetching external content in response to requests, such as images from URLs.";
             };
 
+            send_tracebacks = lib.mkOption {
+              type = lib.types.bool;
+              default = false;
+              description = ''
+                Send tracebacks over the API.
+                NOTE: Only enable this for debug purposes.
+              '';
+            };
+
             api_servers = lib.mkOption {
               type = lib.types.listOf lib.types.str;
               default = [ "OAI" ];
               description = "Select API servers to enable. Possible values: OAI, Kobold.";
+              example = [
+                "OAI"
+                "Kobold"
+              ];
+            };
+
+            sse_ping_interval = lib.mkOption {
+              type = lib.types.ints.unsigned;
+              default = 15;
+              description = ''
+                Seconds between SSE keep-alive pings on streaming responses.
+                Pings are SSE comments, ignored by compliant clients, and prevent
+                connections from dropping during long prefills. Set to 0 to disable.
+              '';
+              example = 0;
             };
           };
 
@@ -72,6 +98,12 @@ in
               description = "Enable prompt logging.";
             };
 
+            log_generation_params = lib.mkOption {
+              type = lib.types.bool;
+              default = false;
+              description = "Enable generation parameter logging.";
+            };
+
             log_requests = lib.mkOption {
               type = lib.types.bool;
               default = false;
@@ -141,6 +173,15 @@ in
               '';
             };
 
+            use_dummy_models = lib.mkOption {
+              type = lib.types.bool;
+              default = false;
+              description = ''
+                Sends dummy model names when the models endpoint is queried.
+                Enable this if the client is looking for specific OAI models.
+              '';
+            };
+
             model_name = lib.mkOption {
               type = lib.types.nullOr lib.types.str;
               default = null;
@@ -151,6 +192,20 @@ in
               example = "Qwen3_5-9B";
             };
 
+            use_as_default = lib.mkOption {
+              type = lib.types.listOf lib.types.str;
+              default = [ ];
+              description = ''
+                Names of args to use as a fallback for API load requests.
+                For example, if you always want cache_mode to be Q4 instead of only on the
+                initial model load, add "cache_mode" to this list.
+              '';
+              example = [
+                "max_seq_len"
+                "cache_mode"
+              ];
+            };
+
             max_seq_len = lib.mkOption {
               type = lib.types.nullOr lib.types.int;
               default = null;
@@ -158,6 +213,22 @@ in
                 Max sequence length (default: min(max_position_embeddings, cache_size)).
                 Set to -1 to fetch from the model's config.json.
               '';
+              example = 32768;
+            };
+
+            cache_size = lib.mkOption {
+              type = lib.types.nullOr (
+                lib.types.addCheck lib.types.ints.positive (n: lib.mod n 256 == 0)
+                // {
+                  description = "positive integer, multiple of 256";
+                }
+              );
+              default = null;
+              description = ''
+                Size of the key/value cache to allocate, in tokens (default: 4096).
+                Must be a multiple of 256.
+              '';
+              example = 32768;
             };
 
             cache_mode = lib.mkOption {
@@ -168,6 +239,7 @@ in
                 Specify the pair k_bits,v_bits where k_bits and v_bits are integers from 2-8 (e.g. '8,8').
                 The legacy values 'FP16', 'Q8', 'Q6', 'Q4' are also accepted.
               '';
+              example = "8,8";
             };
 
             tensor_parallel = lib.mkOption {
@@ -185,6 +257,111 @@ in
               description = "Automatically allocate resources to GPUs. Not parsed for single GPU users.";
             };
 
+            autosplit_reserve = lib.mkOption {
+              type = lib.types.listOf lib.types.number;
+              default = [ 96 ];
+              description = ''
+                Reserve VRAM used for autosplit loading, as a list of MB per GPU
+                (default: 96 MB on GPU 0).
+              '';
+              example = [
+                96
+                96
+              ];
+            };
+
+            gpu_split = lib.mkOption {
+              type = lib.types.listOf lib.types.number;
+              default = [ ];
+              description = ''
+                List of VRAM sizes to split between GPUs, in GB.
+                Used with tensor parallelism.
+              '';
+              example = [
+                16
+                24
+              ];
+            };
+
+            cpu_moe_offload_layers = lib.mkOption {
+              type = lib.types.ints.unsigned;
+              default = 0;
+              description = ''
+                Number of mixture-of-expert layers to offload to CPU inference.
+                Only affects MoE models. Set a large value such as 999 to offload all layers.
+              '';
+              example = 999;
+            };
+
+            rope_scale = lib.mkOption {
+              type = lib.types.nullOr lib.types.number;
+              default = 1.0;
+              description = ''
+                Rope scale, same as compress_pos_emb.
+                Use if the model was trained on long context with rope.
+                Set to null to pull the value from the model.
+
+                NOTE: If a model has YaRN rope scaling, it will automatically be enabled by
+                ExLlama and the rope_scale and rope_alpha settings won't apply.
+              '';
+              example = 4.0;
+            };
+
+            rope_alpha = lib.mkOption {
+              type = lib.types.nullOr (lib.types.either lib.types.number (lib.types.enum [ "auto" ]));
+              default = null;
+              description = ''
+                Rope alpha, same as alpha_value. Set to "auto" to auto-calculate.
+                Leaving this null will either pull from the model or auto-calculate.
+              '';
+              example = "auto";
+            };
+
+            chunk_size = lib.mkOption {
+              type = lib.types.ints.positive;
+              default = 2048;
+              description = ''
+                Chunk size for prompt ingestion.
+                A lower value reduces VRAM usage but decreases ingestion speed.
+                NOTE: Effects vary depending on the model. An ideal value is between 512 and 4096.
+              '';
+              example = 512;
+            };
+
+            output_chunking = lib.mkOption {
+              type = lib.types.bool;
+              default = true;
+              description = ''
+                Use output chunking. Instead of allocating cache space for the entire completion
+                at once, allocate in chunks as needed. Used by EXL3 models only.
+              '';
+            };
+
+            max_batch_size = lib.mkOption {
+              type = lib.types.nullOr lib.types.ints.positive;
+              default = null;
+              description = ''
+                Set the maximum number of generation jobs that can run concurrently.
+                The default maximum batch size for transformer architectures is 32. Recurrent
+                models with linear or sliding attention use more VRAM to support larger batches,
+                so the default value is reduced to 4. If you do not require concurrency at all,
+                you can reduce it further to minimize VRAM overhead.
+              '';
+              example = 1;
+            };
+
+            prompt_template = lib.mkOption {
+              type = lib.types.nullOr lib.types.str;
+              default = null;
+              description = ''
+                Set the prompt template for this model.
+                If null, attempts to look for the model's chat template.
+                If a model contains multiple templates in its tokenizer_config.json,
+                set this to the name of the template you want to use.
+                NOTE: Only works with chat completion message lists!
+              '';
+            };
+
             dummy_model_names = lib.mkOption {
               type = lib.types.listOf lib.types.str;
               default = [ "gpt-3.5-turbo" ];
@@ -192,6 +369,10 @@ in
                 A list of fake model names that are sent via the /v1/models endpoint.
                 Also used as bypasses for strict mode if inline_model_loading is true.
               '';
+              example = [
+                "gpt-3.5-turbo"
+                "gpt-4"
+              ];
             };
 
             vision = lib.mkOption {
@@ -200,6 +381,34 @@ in
               description = "Enables vision support if the model supports it.";
             };
 
+            template_vars_default = lib.mkOption {
+              type = lib.types.attrsOf lib.types.anything;
+              default = { };
+              description = ''
+                Default chat template variables. Merged into the template variables of every
+                chat completion request; values sent by the client (template_vars /
+                chat_template_kwargs, or the top-level reasoning_effort field) take precedence.
+                Use for model-specific reasoning knobs.
+              '';
+              example = {
+                enable_thinking = true;
+              };
+            };
+
+            template_vars_force = lib.mkOption {
+              type = lib.types.attrsOf lib.types.anything;
+              default = { };
+              description = ''
+                Forced chat template variables. Like template_vars_default, but these override
+                any values sent by the client.
+                Replaces the deprecated force_enable_thinking option, which is still accepted
+                as an alias for { enable_thinking = true; }.
+              '';
+              example = {
+                reasoning_effort = "high";
+              };
+            };
+
             reasoning = lib.mkOption {
               type = lib.types.bool;
               default = false;
@@ -220,7 +429,243 @@ in
               default = "</think>";
               description = "The end token for reasoning content.";
             };
+
+            start_in_reasoning = lib.mkOption {
+              type = lib.types.enum [
+                "auto"
+                "always"
+                "never"
+              ];
+              default = "auto";
+              description = ''
+                Whether generation starts inside a reasoning block.
+                "auto" guesses by scanning the end of the templated prompt for an unclosed
+                reasoning start token.
+              '';
+              example = "always";
+            };
+
+            tool_calls_in_reasoning = lib.mkOption {
+              type = lib.types.bool;
+              default = true;
+              description = ''
+                Parse tool calls that occur inside reasoning content.
+                If false, tool call tags inside a reasoning block are treated as plain
+                reasoning text.
+              '';
+            };
+
+            tool_format = lib.mkOption {
+              type = lib.types.nullOr lib.types.str;
+              default = null;
+              description = ''
+                Tool format, e.g. "qwen3_coder". See upstream docs for supported formats.
+                If null, tool calls from the model will not be parsed by the server.
+              '';
+              example = "qwen3_coder";
+            };
+
+            harmony = lib.mkOption {
+              type = lib.types.nullOr lib.types.bool;
+              default = null;
+              description = ''
+                Parse responses in the Harmony message format (gpt-oss models).
+                Auto-detected from the model's special tokens when null; set to true or false
+                to override. Setting tool_format to "harmony" is equivalent to setting this to
+                true. When active, supersedes the reasoning and tool format settings.
+              '';
+            };
           };
+
+          draft_model = {
+            draft_mode = lib.mkOption {
+              type = lib.types.enum [
+                "model"
+                "disabled"
+                "mtp"
+                "ngram"
+              ];
+              default = "model";
+              description = ''
+                Drafting mode for exllamav3.
+                In "model" mode, drafting is disabled if no draft_model_name is provided.
+              '';
+              example = "ngram";
+            };
+
+            draft_model_dir = lib.mkOption {
+              type = lib.types.str;
+              default = "models";
+              description = "Directory to look for draft models. Relative to the state directory.";
+              example = "drafts";
+            };
+
+            draft_model_name = lib.mkOption {
+              type = lib.types.nullOr lib.types.str;
+              default = null;
+              description = ''
+                An initial draft model to load.
+                Ensure the model is in the draft model directory.
+              '';
+              example = "Qwen3-0.6B-exl3";
+            };
+
+            draft_rope_scale = lib.mkOption {
+              type = lib.types.nullOr lib.types.number;
+              default = 1.0;
+              description = ''
+                Rope scale for draft models, same as compress_pos_emb.
+                Use if the draft model was trained on long context with rope.
+              '';
+              example = 4.0;
+            };
+
+            draft_rope_alpha = lib.mkOption {
+              type = lib.types.nullOr lib.types.number;
+              default = null;
+              description = ''
+                Rope alpha for draft models, same as alpha_value.
+                Leaving this null will either pull from the model or auto-calculate.
+              '';
+              example = 2.0;
+            };
+
+            draft_cache_mode = lib.mkOption {
+              type = lib.types.enum [
+                "FP16"
+                "Q8"
+                "Q6"
+                "Q4"
+              ];
+              default = "FP16";
+              description = ''
+                Cache mode for draft models to save VRAM.
+                Unlike the model's cache_mode, this does not accept a k_bits,v_bits pair.
+              '';
+              example = "Q8";
+            };
+
+            draft_gpu_split = lib.mkOption {
+              type = lib.types.listOf lib.types.number;
+              default = [ ];
+              description = ''
+                List of VRAM sizes to split between GPUs, in GB.
+                If this is empty, the draft model is autosplit.
+              '';
+              example = [
+                2
+                2
+              ];
+            };
+
+            draft_num_tokens = lib.mkOption {
+              type = lib.types.nullOr lib.types.ints.positive;
+              default = null;
+              description = ''
+                Number of tokens to draft per iteration (default: draft model default).
+                Recurrent (linear or sliding attention) models use more VRAM for longer drafts.
+                This overhead multiplies with the max batch size, so for models with long drafts
+                (e.g. DFlash with 15 tokens by default) shorter drafts may be preferable.
+              '';
+              example = 4;
+            };
+
+            dynamic_draft = lib.mkOption {
+              type = lib.types.bool;
+              default = false;
+              description = ''
+                Adjust number of draft tokens dynamically based on observed acceptance rates.
+                Ceiling is given by draft_num_tokens.
+              '';
+            };
+
+            ngram_match_min = lib.mkOption {
+              type = lib.types.ints.positive;
+              default = 2;
+              description = ''
+                Minimum match length for exllamav3 n-gram drafting.
+                Only used when draft_mode is "ngram".
+              '';
+              example = 3;
+            };
+          };
+
+          sampling = {
+            override_preset = lib.mkOption {
+              type = lib.types.nullOr lib.types.str;
+              default = null;
+              description = ''
+                Select a sampler override preset, found in the sampler-overrides folder.
+                This overrides default fallbacks for sampler values that are passed to the API.
+                NOTE: "safe_defaults" is noob friendly and provides fallbacks for frontends that
+                don't send sampling parameters. Leave this null for any advanced usage.
+              '';
+              example = "safe_defaults";
+            };
+          };
+
+          lora = {
+            lora_dir = lib.mkOption {
+              type = lib.types.str;
+              default = "loras";
+              description = "Directory to look for LoRAs. Relative to the state directory.";
+            };
+
+            loras = lib.mkOption {
+              type = lib.types.listOf (
+                lib.types.submodule {
+                  options = {
+                    name = lib.mkOption {
+                      type = lib.types.str;
+                      description = "Name of the LoRA directory inside lora_dir.";
+                    };
+
+                    scaling = lib.mkOption {
+                      type = lib.types.number;
+                      default = 1.0;
+                      description = "Scaling factor for this LoRA.";
+                    };
+                  };
+                }
+              );
+              default = [ ];
+              description = "List of LoRAs to load and associated scaling factors.";
+              example = [
+                {
+                  name = "lora1";
+                  scaling = 1.0;
+                }
+              ];
+            };
+          };
+
+          memory = {
+            sysmem_recurrent_cache = lib.mkOption {
+              type = lib.types.ints.unsigned;
+              default = 4096;
+              description = "Max size of recurrent cache in system memory, in MB.";
+              example = 8192;
+            };
+
+            sysmem_kv_cache = lib.mkOption {
+              type = lib.types.ints.unsigned;
+              default = 0;
+              description = "Size of system memory second-tier key/value cache, in MB.";
+              example = 4096;
+            };
+
+            cuda_malloc_async = lib.mkOption {
+              type = lib.types.bool;
+              default = true;
+              description = ''
+                Use the cudaMallocAsync backend in Torch.
+                Enabling this is generally preferable, but it may cause issues with certain
+                workloads. Try disabling it if you experience intermittent OoM errors. If false,
+                Torch will use the allocator defined by the system environment.
+              '';
+            };
+          };
+
         };
       };
     };
@@ -236,6 +681,14 @@ in
             services.tabbyapi.package = pkgs.pkgsCuda.tabbyapi;
         '';
       }
+      {
+        assertion = !(cfg.settings.model ? force_enable_thinking);
+        message = ''
+          services.tabbyapi.settings.model.force_enable_thinking is deprecated upstream.
+          Use template_vars_force instead:
+            services.tabbyapi.settings.model.template_vars_force.enable_thinking = true;
+        '';
+      }
     ];
     networking.firewall.allowedTCPPorts = lib.mkIf cfg.openFirewall [
       cfg.settings.network.port
diff --git a/nixos/modules/system/boot/loader/efi.nix b/nixos/modules/system/boot/loader/efi.nix
index 2725d3678d52..523afbeed66e 100644
--- a/nixos/modules/system/boot/loader/efi.nix
+++ b/nixos/modules/system/boot/loader/efi.nix
@@ -1,4 +1,4 @@
-{ lib, ... }:
+{ config, lib, ... }:
 {
   options.boot.loader.efi = {
 
@@ -14,4 +14,10 @@
       description = "Where the EFI System Partition is mounted.";
     };
   };
+
+  config = {
+    # Applied to all bootloader support random seed initialization
+    systemd.services.systemd-boot-random-seed.environment.SYSTEMD_ESP_PATH =
+      config.boot.loader.efi.efiSysMountPoint;
+  };
 }
diff --git a/nixos/modules/system/boot/stage-1.nix b/nixos/modules/system/boot/stage-1.nix
index 08ab6bec05a1..ea395f307647 100644
--- a/nixos/modules/system/boot/stage-1.nix
+++ b/nixos/modules/system/boot/stage-1.nix
@@ -206,6 +206,7 @@ let
         if [ -z "${toString (pkgs.stdenv.hostPlatform != pkgs.stdenv.buildPlatform)}" ]; then
         # Make sure that the patchelf'ed binaries still work.
         echo "testing patched programs..."
+        set -x
         $out/bin/ash -c 'echo hello world' | grep "hello world"
         $out/bin/mount -V 2>&1 | grep -q "mount from util-linux"
         $out/bin/blkid -V 2>&1 | grep -q 'libblkid'
@@ -218,6 +219,7 @@ let
         ''}
 
         ${config.boot.initrd.extraUtilsCommandsTest}
+        set +x
         fi
       ''; # */
 
diff --git a/nixos/tests/web-apps/dashy.nix b/nixos/tests/web-apps/dashy.nix
index d83c14d3294f..d54b08d60b3a 100644
--- a/nixos/tests/web-apps/dashy.nix
+++ b/nixos/tests/web-apps/dashy.nix
@@ -18,7 +18,7 @@ let
     ];
   };
 
-  customSettingsYaml = (pkgs.formats.yaml_1_1 { }).generate "custom-conf.yaml" customSettings;
+  customSettingsYaml = (pkgs.formats.yaml_1_2 { }).generate "custom-conf.yaml" customSettings;
 in
 {
   name = "dashy";
diff --git a/pkgs/applications/editors/vscode/extensions/default.nix b/pkgs/applications/editors/vscode/extensions/default.nix
index da80a3543a26..d4dcf8a7c136 100644
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -1174,8 +1174,8 @@ let
         mktplcRef = {
           publisher = "DanielSanMedium";
           name = "dscodegpt";
-          version = "3.24.29";
-          hash = "sha256-E/B1YiTc2RR/dh3QpYTO/bgzFldYQfuM/tZ650nJYJA=";
+          version = "3.24.39";
+          hash = "sha256-r1XkER09s+38uCbUxK9MM5bHRNp3UnMj6VJCHUMZM1Q=";
         };
         meta = {
           changelog = "https://marketplace.visualstudio.com/items/DanielSanMedium.dscodegpt/changelog";
@@ -1760,8 +1760,8 @@ let
         mktplcRef = {
           name = "foam-vscode";
           publisher = "foam";
-          version = "0.44.4";
-          hash = "sha256-YMNYT/QDcg25fG2fidbFOU41RBIk/l49Se5ca4AyMe8=";
+          version = "0.44.5";
+          hash = "sha256-MiQ1Ze0vW0JCfmKVFe6eAWBbHhZqDKtRhhiQMkBgRe4=";
         };
         meta = {
           changelog = "https://marketplace.visualstudio.com/items/foam.foam-vscode/changelog";
@@ -4852,8 +4852,8 @@ let
         mktplcRef = {
           name = "emacs-mcx";
           publisher = "tuttieee";
-          version = "0.111.0";
-          hash = "sha256-3z4B1NBQD3hbGcwWpS48bXuUAN1jVlSRLF0PDKGJH3A=";
+          version = "0.111.1";
+          hash = "sha256-+0wIC/7xbun2Wf8wePU6NSR9UMNd0RvLz6UdAM3X5Y4=";
         };
         meta = {
           changelog = "https://github.com/whitphx/vscode-emacs-mcx/blob/main/CHANGELOG.md";
diff --git a/pkgs/applications/editors/vscode/extensions/ms-windows-ai-studio.windows-ai-studio/default.nix b/pkgs/applications/editors/vscode/extensions/ms-windows-ai-studio.windows-ai-studio/default.nix
index 1b8d91123f51..5ee8388e2461 100644
--- a/pkgs/applications/editors/vscode/extensions/ms-windows-ai-studio.windows-ai-studio/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/ms-windows-ai-studio.windows-ai-studio/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "windows-ai-studio";
     publisher = "ms-windows-ai-studio";
-    version = "1.6.5";
-    hash = "sha256-cKI2LTojwUaC4nrBhqtffx4kAIwGZBS+gTK6X2PE/PE=";
+    version = "1.6.6";
+    hash = "sha256-3eG6OIjCLBYgP0bweyZGv9OUiKN1xQa3ufdt3JUq9FQ=";
   };
 
   meta = {
diff --git a/pkgs/applications/emulators/libretro/cores/dolphin.nix b/pkgs/applications/emulators/libretro/cores/dolphin.nix
index 64400aff3e01..269ee10624f0 100644
--- a/pkgs/applications/emulators/libretro/cores/dolphin.nix
+++ b/pkgs/applications/emulators/libretro/cores/dolphin.nix
@@ -20,13 +20,13 @@
 }:
 mkLibretroCore {
   core = "dolphin";
-  version = "0-unstable-2026-07-23";
+  version = "0-unstable-2026-08-02";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "dolphin";
-    rev = "c6b869102f6b9f450f0a9878330d00484754879d";
-    hash = "sha256-7sImbA1uzpwGovo4+5bK9SJpIDIvdB5FhN2IuxVaiQ8=";
+    rev = "49d36c0a08a9f7c0798f71bc8bc43f5d122f7552";
+    hash = "sha256-b/hTu1amuKCau/QmBwyDjQQ83lTvQmr70rn/9uce2N0=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/applications/emulators/libretro/cores/picodrive.nix b/pkgs/applications/emulators/libretro/cores/picodrive.nix
index 3fd2ac7014a3..f3a2a7ee7224 100644
--- a/pkgs/applications/emulators/libretro/cores/picodrive.nix
+++ b/pkgs/applications/emulators/libretro/cores/picodrive.nix
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "picodrive";
-  version = "0-unstable-2026-07-23";
+  version = "0-unstable-2026-07-29";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "picodrive";
-    rev = "78a662e3135871a6c657d5e61900f6704152e594";
-    hash = "sha256-3+x1ILIUq+/nwfUGXweNIq3PFTAaP56/6G+dX4dEZ/Y=";
+    rev = "6248b51ffbe212ce441de023ccea6b10fa4d7082";
+    hash = "sha256-jiP6/MqLOl5/+CU/cUgKNpXxUtianOkEV1GQHQS+AAw=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/applications/gis/qgis/unwrapped-ltr.nix b/pkgs/applications/gis/qgis/unwrapped-ltr.nix
index 8473fc68145d..8a836784edce 100644
--- a/pkgs/applications/gis/qgis/unwrapped-ltr.nix
+++ b/pkgs/applications/gis/qgis/unwrapped-ltr.nix
@@ -85,7 +85,7 @@ let
   ];
 in
 mkDerivation rec {
-  version = "3.44.11";
+  version = "3.44.12";
   pname = "qgis-ltr-unwrapped";
   outputs = [ "out" ] ++ lib.optional (!stdenv.hostPlatform.isDarwin) "man";
 
@@ -93,7 +93,7 @@ mkDerivation rec {
     owner = "qgis";
     repo = "QGIS";
     rev = "final-${lib.replaceStrings [ "." ] [ "_" ] version}";
-    hash = "sha256-gWSl9OrRSxreQdKxKKDCOUWBE5uE2w3/ebW266LCWLI=";
+    hash = "sha256-G/7Tnr9u6VgbQFCmGqeqXap0081mFW4UOYix8nM+/co=";
   };
 
   passthru = {
diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index 3b4038913926..2d172e847f87 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -36,13 +36,13 @@
     "vendorHash": "sha256-Ii0NfdkAxD9CGKUOzg1T9r0LsNajHBTfEY9GNBxxngc="
   },
   "akamai_akamai": {
-    "hash": "sha256-AYvC8s8OKwlwF8eDoCsuOhOanCwbn/5u/vGumee6FNg=",
+    "hash": "sha256-XGTdfOUr3Nb2vV49aGZThuae/n9KrM3NZ8A0P/LrSXg=",
     "homepage": "https://registry.terraform.io/providers/akamai/akamai",
     "owner": "akamai",
     "repo": "terraform-provider-akamai",
-    "rev": "v10.3.0",
+    "rev": "v10.4.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-031RZo1EqWrt79NvdrrZ9FW/E+mfwkGmr7wyMYX4SHg="
+    "vendorHash": "sha256-DTPaRkNWitoriOE0G+RctMIHAdSPK4wq410a+XxLnOY="
   },
   "aliyun_alicloud": {
     "hash": "sha256-es2ti8tSgShwUWYtZ7OEff88LLiAnK4B/Hq9PaNEEOc=",
@@ -535,11 +535,11 @@
     "vendorHash": null
   },
   "hashicorp_azurerm": {
-    "hash": "sha256-M8Kq0lVbPtob2g8j8k4OJenAz8f5jjSobf192TrpSEg=",
+    "hash": "sha256-iskhDSt6pjQjdiqhlVd7PmOewTduOxRL9KWPoIHKLLU=",
     "homepage": "https://registry.terraform.io/providers/hashicorp/azurerm",
     "owner": "hashicorp",
     "repo": "terraform-provider-azurerm",
-    "rev": "v4.81.0",
+    "rev": "v5.0.1",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },
diff --git a/pkgs/applications/networking/irc/weechat/default.nix b/pkgs/applications/networking/irc/weechat/default.nix
index aacea71aedf9..73c8763b5de5 100644
--- a/pkgs/applications/networking/irc/weechat/default.nix
+++ b/pkgs/applications/networking/irc/weechat/default.nix
@@ -105,11 +105,11 @@ assert lib.all (p: p.enabled -> !(builtins.elem null p.buildInputs)) plugins;
 
 stdenv.mkDerivation rec {
   pname = "weechat";
-  version = "4.9.5";
+  version = "4.10.0";
 
   src = fetchurl {
     url = "https://weechat.org/files/src/weechat-${version}.tar.xz";
-    hash = "sha256-OzlGEE5kU20GAjcKMOVd1aMBzI/0IBhP8KEBkm2tHRY=";
+    hash = "sha256-w6fnxqVAHd6aRtAmT6RKowMsqYqoZBDEVNPeXGlQXFQ=";
   };
 
   # Why is this needed? https://github.com/weechat/weechat/issues/2031
diff --git a/pkgs/applications/virtualization/docker/compose.nix b/pkgs/applications/virtualization/docker/compose.nix
index d4a785417e24..bd3751b5d19d 100644
--- a/pkgs/applications/virtualization/docker/compose.nix
+++ b/pkgs/applications/virtualization/docker/compose.nix
@@ -6,16 +6,16 @@
 }:
 buildGoModule rec {
   pname = "docker-compose";
-  version = "5.3.1";
+  version = "5.4.0";
 
   src = fetchFromGitHub {
     owner = "docker";
     repo = "compose";
     tag = "v${version}";
-    hash = "sha256-UNORlxZ/b4Jrp9v8pbsxTt8PrYq1/u4AjBU8+pfuG1k=";
+    hash = "sha256-BLApJ1RWI2nUM3EDFLWBPwIbT+wUUCqxCRjc7QlkFd4=";
   };
 
-  vendorHash = "sha256-Ug6/hpuHgJ2CAUX87/+Tt3cHm4AbJF9oznx61kTVKI4=";
+  vendorHash = "sha256-NCHNe+aLNsJNtKdgQxyL6cMuu9XxA5ycleHf9gToEks=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
 
diff --git a/pkgs/applications/window-managers/hyprwm/hyprland-plugins/hypr-darkwindow.nix b/pkgs/applications/window-managers/hyprwm/hyprland-plugins/hypr-darkwindow.nix
index 74b57dd395e6..c165932cf0b4 100644
--- a/pkgs/applications/window-managers/hyprwm/hyprland-plugins/hypr-darkwindow.nix
+++ b/pkgs/applications/window-managers/hyprwm/hyprland-plugins/hypr-darkwindow.nix
@@ -7,7 +7,7 @@
 
 mkHyprlandPlugin (finalAttrs: {
   pluginName = "hypr-darkwindow";
-  version = "0.56.0";
+  version = "0.56.1";
 
   src = fetchFromGitHub {
     owner = "micha4w";
diff --git a/pkgs/build-support/bintools-wrapper/darwin-install_name_tool-wrapper.sh b/pkgs/build-support/bintools-wrapper/darwin-install_name_tool-wrapper.sh
deleted file mode 100755
index 376a7abfe41c..000000000000
--- a/pkgs/build-support/bintools-wrapper/darwin-install_name_tool-wrapper.sh
+++ /dev/null
@@ -1,49 +0,0 @@
-#! @shell@
-# shellcheck shell=bash
-
-set -eu -o pipefail +o posix
-shopt -s nullglob
-
-if (( "${NIX_DEBUG:-0}" >= 7 )); then
-    set -x
-fi
-
-source @signingUtils@
-
-extraAfter=()
-extraBefore=()
-params=("$@")
-
-input=
-
-pprev=
-prev=
-for p in \
-    ${extraBefore+"${extraBefore[@]}"} \
-    ${params+"${params[@]}"} \
-    ${extraAfter+"${extraAfter[@]}"}
-do
-    if [ "$pprev" != "-change" ] && [[ "$prev" != -* ]] && [[ "$p" != -* ]]; then
-        input="$p"
-    fi
-    pprev="$prev"
-    prev="$p"
-done
-
-# Optionally print debug info.
-if (( "${NIX_DEBUG:-0}" >= 1 )); then
-    # Old bash workaround, see above.
-    echo "extra flags before to @prog@:" >&2
-    printf "  %q\n" ${extraBefore+"${extraBefore[@]}"}  >&2
-    echo "original flags to @prog@:" >&2
-    printf "  %q\n" ${params+"${params[@]}"} >&2
-    echo "extra flags after to @prog@:" >&2
-    printf "  %q\n" ${extraAfter+"${extraAfter[@]}"} >&2
-fi
-
-@prog@ \
-    ${extraBefore+"${extraBefore[@]}"} \
-    ${params+"${params[@]}"} \
-    ${extraAfter+"${extraAfter[@]}"}
-
-sign "$input"
diff --git a/pkgs/build-support/bintools-wrapper/darwin-strip-wrapper.sh b/pkgs/build-support/bintools-wrapper/darwin-strip-wrapper.sh
deleted file mode 100755
index a67699547a6f..000000000000
--- a/pkgs/build-support/bintools-wrapper/darwin-strip-wrapper.sh
+++ /dev/null
@@ -1,78 +0,0 @@
-#! @shell@
-# shellcheck shell=bash
-
-set -eu -o pipefail +o posix
-shopt -s nullglob
-
-if (( "${NIX_DEBUG:-0}" >= 7 )); then
-    set -x
-fi
-
-source @signingUtils@
-
-extraAfter=()
-extraBefore=()
-params=("$@")
-
-output=
-inputs=()
-
-restAreFiles=
-prev=
-for p in \
-    ${extraBefore+"${extraBefore[@]}"} \
-    ${params+"${params[@]}"} \
-    ${extraAfter+"${extraAfter[@]}"}
-do
-    if [ "$restAreFiles" ]; then
-        inputs+=("$p")
-    else
-        case "$prev" in
-            -s|-R|-d|-arch)
-                # Unrelated arguments with values
-                ;;
-            -o)
-                # Explicit output
-                output="$p"
-                ;;
-            *)
-                # Any other orgument either takes no value, or is a file.
-                if [[ "$p" != -* ]]; then
-                    inputs+=("$p")
-                fi
-                ;;
-        esac
-
-        if [ "$p" == - ]; then
-            restAreFiles=1
-        fi
-    fi
-
-    prev="$p"
-done
-
-# Optionally print debug info.
-if (( "${NIX_DEBUG:-0}" >= 1 )); then
-    # Old bash workaround, see above.
-    echo "extra flags before to @prog@:" >&2
-    printf "  %q\n" ${extraBefore+"${extraBefore[@]}"}  >&2
-    echo "original flags to @prog@:" >&2
-    printf "  %q\n" ${params+"${params[@]}"} >&2
-    echo "extra flags after to @prog@:" >&2
-    printf "  %q\n" ${extraAfter+"${extraAfter[@]}"} >&2
-fi
-
-@prog@ \
-    ${extraBefore+"${extraBefore[@]}"} \
-    ${params+"${params[@]}"} \
-    ${extraAfter+"${extraAfter[@]}"}
-
-if [ "$output" ]; then
-    # Single explicit output
-    signIfRequired "$output"
-else
-    # Multiple inputs, rewritten in place
-    for input in "${inputs[@]}"; do
-      signIfRequired "$input"
-    done
-fi
diff --git a/pkgs/build-support/writers/test.nix b/pkgs/build-support/writers/test.nix
index e39681865ab2..996aaa01e9af 100644
--- a/pkgs/build-support/writers/test.nix
+++ b/pkgs/build-support/writers/test.nix
@@ -477,7 +477,11 @@ recurseIntoAttrs {
 
     yaml = expectDataEqual {
       file = writeYAML "data.yaml" { hello = "world"; };
-      expected = "hello: world\n";
+      expected = ''
+        %YAML 1.1
+        ---
+        hello: world
+      '';
     };
   };
 
diff --git a/pkgs/by-name/ac/actual-server/missing-hashes.json b/pkgs/by-name/ac/actual-server/missing-hashes.json
index 9b2f64c6f2bb..891b358c55cb 100644
--- a/pkgs/by-name/ac/actual-server/missing-hashes.json
+++ b/pkgs/by-name/ac/actual-server/missing-hashes.json
@@ -1,56 +1,56 @@
 {
   "@esbuild/aix-ppc64@npm:0.25.12": "b2cc7e0cd348bc315907f6ce090ee545d4157a19fc44327ff0262ba9296f0fad19c57dd679b1b526a0a18f34f1971b128e15b41bca794c74a9b2c32238fdd537",
-  "@esbuild/aix-ppc64@npm:0.27.2": "9c18cc2e4a03339a55013aac05b4a3fc4b77e75715dc252d034aa3d43b754abc053a7601b95e31249f4b6e69b68db2f5e6cb04b0ed619f825f2f70daff1a78d7",
+  "@esbuild/aix-ppc64@npm:0.28.1": "98a9325bec976ebe1cbbf2441fdbe895b36733919b9df7d62e7b73a1e199810affeac17d172cc5cf61196c9b1ede8073ca5d088ca52b14800b76f49bacc480b3",
   "@esbuild/android-arm64@npm:0.25.12": "f770937988ec42e289277abc03800ccf88902684dbda3013a8ab274bb9eca36d35619a75f0f0510e225bdb4c7cf9a426218c7d2641a98fed74287a52d60d8865",
-  "@esbuild/android-arm64@npm:0.27.2": "a318fc9ffcdad7fda8bb521af8b17f73d93d9a94b4cca9301fbf72cf3f5a6e945edd589a47388de70f3e9582655dcf5b5bb928a11e306368fae4a9106d5143d2",
+  "@esbuild/android-arm64@npm:0.28.1": "ec3e3c62bc684a09393ca10a0f64b166938f66e4b1972f6db63bf55463bf039736549d9808e50996eb0fedea70744b466aeb816c44e78f2b5d232aeb9929e3ac",
   "@esbuild/android-arm@npm:0.25.12": "7a5d507aa717d85470c595e11f3c03fbf4f0bffdd10d30f49e1a3f14c2553191f156b214eacd6911fa36719faef23c28be7d88ac876ec300995987964ea16e99",
-  "@esbuild/android-arm@npm:0.27.2": "01114275e096b9177ad2496730087ee081d6e65a75bc087457b527c5baac5a8ccb362435f45232532bf6f97de95e1790dbce127d55abd5e4152c7214682bf4d3",
+  "@esbuild/android-arm@npm:0.28.1": "cda56884826ac2aa5dd3be5df9e89834df3b46515cf14099ddfc5bcfc80122d4f8d74b3831a0ac447d87dda73ae90fba49dc4e352b11240c2b055cdca69a0a02",
   "@esbuild/android-x64@npm:0.25.12": "cd459b0433b0541bae9ffafd274c57529125719a5b78f4ee92aa9f8a1f54b002a18d889bee19084a503c114412269ef4e740d21b4a2de811ec2a076e96b35f48",
-  "@esbuild/android-x64@npm:0.27.2": "e92c5b6919081a14c8882f1167cf90b4e4bba745ad6e9a23428f85a1cd5e79dfa3f1d2fc943686b237e4cd09fac52ad3b3791deab6a0419ee10859284d3834aa",
+  "@esbuild/android-x64@npm:0.28.1": "7f2ba14ba06fd3f2faff467e6fceb2466cd44d1d6039ae1c01f24336a5a1ad0f9c3721000331ded3f250587e4be5e7194d68dd33c55339dc26e1200e13e16d2d",
   "@esbuild/darwin-arm64@npm:0.25.12": "067f4588b9b64c93742c4a8cec35282dd076583006ce8089aae3095fcae5b606a2f60d86caf0527be6009be234178fb83d360af82698e2017a6f9fb9345e084d",
-  "@esbuild/darwin-arm64@npm:0.27.2": "5e99db5037167bad4a095fc445b94a2ce02357870ed58b79e13ae6bc09b5cb33d7e03f925492df940f9e0ad685a889f02beec1431d8fbf4c7ced55b2f48f5659",
+  "@esbuild/darwin-arm64@npm:0.28.1": "9798bd013921f8dc5126eb12eba4ddfce9198d11eba6ae844f66d25919d5d26be2aa46b4da8d442ad0e7673e88b2f3d9e505d71692cd030bda9a7b762921c05d",
   "@esbuild/darwin-x64@npm:0.25.12": "c29947d07adacadcb29092860b69d1b668d9c5abfaf525e2a7f3ece61c3f4e72a95c1c66ad0e80fbf31d01210ae4e8330d4ae6d9c6c9ad2b8aa159eb115f9a8d",
-  "@esbuild/darwin-x64@npm:0.27.2": "87f2fbc4cf11724ef805b17cbdc7b0a9498332bc4b61d55e110ecc3b09bc488b88c0bd140ea48924e9c97a2063cf7e440fef13dd56e415c46799619d61086910",
+  "@esbuild/darwin-x64@npm:0.28.1": "aaddefac25e025e309c71dc5c7074d8c295f44779e41add06dbf65d48b2a6a72b579266748e7f0ab3b2be1ed07be8d541e954f75dda2a2992f36f4c805d91fe1",
   "@esbuild/freebsd-arm64@npm:0.25.12": "c51691aeb04e41c554a59cbb5ab8d917446f352aeec70e3d5a7f25409e9115ff2db930589052df3e7d60f03eff4c298bda89db62f2408d1a49b6a70e69c5d4a0",
-  "@esbuild/freebsd-arm64@npm:0.27.2": "1ffa23243b913e377a5b09fd97ad9f089be3695aafdd893b60bb7f9be479256d8b7546f0bc96c4e61133fe7aeeaf95a8e941e82a65d99008ff82c99bdec85eee",
+  "@esbuild/freebsd-arm64@npm:0.28.1": "a325b7833f978b62bf25157ea5a951e29b9b0a1db9665ee52498644c9b250977ab6f21c049137d0a271bb0442b3e6d6148c257bace84476196b46570ce837d62",
   "@esbuild/freebsd-x64@npm:0.25.12": "9b84c48176350811690751c34d1513005290641923a161f96cb433cbcbb8c072ecb92cef39ba641f48032071f74c6119e5f081b5788242109426c54f3ef1a01e",
-  "@esbuild/freebsd-x64@npm:0.27.2": "44f744b289cf9e115b0adfac1905818d756dfced14213bf144d9016d96f67575ef2a55526f76e29ee775fcfec7274ba3a5e6833f35ed79a4592d3f5eac278267",
+  "@esbuild/freebsd-x64@npm:0.28.1": "f092ddacd0bc715f443b62382dd8ba8f85d272f62caa47f603e85b9c5b14fef67c610523006ca88cae19e2829fe41a2a0ae92b7c158ef1038c714552dea57554",
   "@esbuild/linux-arm64@npm:0.25.12": "1e9cc29569890f5944e7dbe2e597eb19d76e85fe07aef6253129b16800ccb5b33a79cea17873d7debdf681d34adf77e06ae99742fe06cab095f3db441b741b1e",
-  "@esbuild/linux-arm64@npm:0.27.2": "2b037d74eaff4e9b5a6076760ede873320707636a3495939687cdd0c2c7150883111273bc0a8663fa305c42f439f4748b5ad7f15a1a1ea9fa7db575d9faf2d1b",
+  "@esbuild/linux-arm64@npm:0.28.1": "bfda225d3101bb3ed5a74f979d50564a17ccf3799ad65fb968c5b15c9ceb9077c105a9bb5763d42f33f1917ac709e5779cd2112e5420188963568e80ac8439f8",
   "@esbuild/linux-arm@npm:0.25.12": "fcf091d6a51834c9a942ee33b568342990c7fa29d2ff338ce628a41bc415696d09bca7ef502c2b04518973010f73ab3d13e37096030db9c8d393ab29408f104b",
-  "@esbuild/linux-arm@npm:0.27.2": "28cfc3a9ca11fc899649e7a706fb4b2ee57999bd92e86c23726b3ed0f832732411dd0aa3e2bcdb4105759f83bc4e5adc98dc195aaafce736c910db4e43694702",
+  "@esbuild/linux-arm@npm:0.28.1": "b440cf89adf6dd1079bcf7d9aa915f70f467002bbb69bda21f4a3d160c9ae93bc6d8eb73b2831c8607fb1527d8ada288d907440e36969cb60000e4df85b7c549",
   "@esbuild/linux-ia32@npm:0.25.12": "ccd563c3189e5f651b479dd80d3bebd9d5c4747ce7448bb80266c804c3141eb3514b8c70445d77301899c54c1ff8c74614f8423704fde475a5c67efe86713235",
-  "@esbuild/linux-ia32@npm:0.27.2": "ac6cc92b9be2ec6d9d483c53fc973e6381765b784a2e1b71fa93ea0cf976344c2e3e0bfda0140b0829b3ec4304d9b886692b2891e68c17d2121066d06e67f0ac",
+  "@esbuild/linux-ia32@npm:0.28.1": "4329d81cf06331e537c8ebb571a9d4ca968811bee7c7cb4f975b8343c9f7649a8b2b9902b0974be0e2224656b1a0d21f3b191304db8cec52d006b80061faf4c2",
   "@esbuild/linux-loong64@npm:0.25.12": "6df2710d99d84006ad8151a9ca26861dbb97524a15e61f56eb1a5a76786865ad03be838fe3d414a72b239262364964528f3136c2965b3c442c7ed85090b145c4",
-  "@esbuild/linux-loong64@npm:0.27.2": "625f5b6c2218a3acb2cff8f7f02a53ca89d13925f8932260ddad01595c6907beda4a79e4b767b1101f5971049f88d3ec6ab29cf565b4d61d9b0d7277e2cb578d",
+  "@esbuild/linux-loong64@npm:0.28.1": "76b4d0f2cf716576181065e3fd2d6ffa9b0d0c39987e8d3d1b8d1e8aaa2563779cd4f861c881e3e7a9302f2d03d5543b8f726a99603e6aa754c8154772d0f434",
   "@esbuild/linux-mips64el@npm:0.25.12": "883bd8c4afd70b8e372db8a6bdb429d419ae30253a63987ff824994958d8431b6e51ead05e6372b2a233e025ea57f6f65b04ebaff8308e39acf54bfa73a5cae2",
-  "@esbuild/linux-mips64el@npm:0.27.2": "0c62692cb3a297b37212dfde52a861861843a716f6b3bdb73da49ba249a4c001b989ea61dc4540c430fac59ce2f8fc45035cdfac80172c5ddaf1b9df8471aecf",
+  "@esbuild/linux-mips64el@npm:0.28.1": "59825a73d04187818c6fb53b22e2915a4c0e6c8fee9017d75dcafbdc66699f2765377faf801495d69952230935557f58360481a7edd78073816270aa8bd0cbee",
   "@esbuild/linux-ppc64@npm:0.25.12": "71f8544a3b99b4c95d49604b66d144e9617ae9925914c1bd5bc6731d15d4e48e7f8e9bffd85835e1c93a88c3537b53f3e99b500e4dd2533af9483055b02f9d38",
-  "@esbuild/linux-ppc64@npm:0.27.2": "b804d2dd0a6a85fe1c731828c725731a55ab120d2cc16941d560b2e9af5c2ec51586914ce26a84a326a9d46fa61eb8bb1f843953fe29ddd43b3f3099c491b5ff",
+  "@esbuild/linux-ppc64@npm:0.28.1": "3186d54b33d9b4849d6fe4fa2aeed4966a4117f9a27bf2d59f07f3ea651a9724a2eb9aaaf98813aac6dc726710a337bfc2472dd714262894fabf498a369fbd74",
   "@esbuild/linux-riscv64@npm:0.25.12": "fe8048262c5c6a040c047a9b7ab8547b0e7a32ce50f622ea8dadc3ec22065676efbc9b36896ca96959f77839757319633a2d05af5f2de7b32389a03b80f027f1",
-  "@esbuild/linux-riscv64@npm:0.27.2": "03e67e7207a83801363e3637f9a35fb6224ed4dc23bbf6eca41904fc42f5a6806e1e591666bf48dbf62eba97d41ff4355413b14dcb2339007b22c693374c49f6",
+  "@esbuild/linux-riscv64@npm:0.28.1": "f01572cf6398b466d44bfa68dbc5f56a37b74e645673198f7ba157d215ccba35ea46e220a2526008d5679cef47a4368dd46480d4ba4c7330a491d215fe3f649f",
   "@esbuild/linux-s390x@npm:0.25.12": "e5c023be1dfd75c915453763f944db8ab3da4f60a00c2b0e6f3b9349bc6c51e5ac5ce928db56e8f316e910213adf2172efd1b37abe070f6cda0c28583d770bab",
-  "@esbuild/linux-s390x@npm:0.27.2": "eb24b9c0a4a1492e4ff34a87933f6a3b348739c12f864b408144efdf949871c1fbb02a1cca741bfa11fd08aebe585d046fd3311b462ce4c795e3064ba3912469",
+  "@esbuild/linux-s390x@npm:0.28.1": "aad20d457c0441d7bf2f6c8dbe74297d4c3a3c90cf709a971a4a19b2c70497bf91ac4a80fa6168ccf6063eb284ea0f41f2293283e8351348369af551ffe6f3cf",
   "@esbuild/linux-x64@npm:0.25.12": "8b2c7f5e00c40058f5c150df267cd303eae5907822f196902cd8e64af70475e800a7f132ac6388aa2b77b877d6314147e67f3fb67d97c867adccd54a2a6caaf6",
-  "@esbuild/linux-x64@npm:0.27.2": "ed1542f203329521fb1f308696c76ba59ed4a4616a24e21bf4820685362bba209d5c44c2f4e66c88dc7b7399df9ace625454d4829ee529d076ccaf61566e11cf",
+  "@esbuild/linux-x64@npm:0.28.1": "d361ac73388af397803dc26242265c8f00fce91d9dd587b04d230c686294585c541f43dee706e23f8d56754e3a3da653b00b3f55855182d60deabc024acf19f7",
   "@esbuild/netbsd-arm64@npm:0.25.12": "19bc5a1295697aa8787929472323494302d117ea1e592f17cfae443525c1e5917a5f77e6582fc1ec9de3a11a9e296bc12749c6b12cde0aab10695b5c25f29f73",
-  "@esbuild/netbsd-arm64@npm:0.27.2": "576dd082047077b9cc41fbeffd728821a4f3b80969c1d2d6c274301122c6de2050f484fd4e946777527b8a15bd2a5ac54f85ca7ab95ea72b5345177e6a888687",
+  "@esbuild/netbsd-arm64@npm:0.28.1": "73e2d620958bcb61367849046397dee40dbd9bd6d0d4172bb87ef90ad644ed16e48386debd1ef0323648358fc617c0d8fae58be984774a2e8622712c7ab7f04b",
   "@esbuild/netbsd-x64@npm:0.25.12": "8eb2ff51aa39b43a021e4b51411789b6299fd0dc38b3896719684333e32fd42ed4508ab67dcc88435631e5333573a4848dbfeec12569de46c2318dcdb39ad3ab",
-  "@esbuild/netbsd-x64@npm:0.27.2": "f8994af3e2ff3c9a91e874e58698b66e6f8d4e72dbc0aaf749b74a79420954146ed053359b0a4c213918582cee187d8a371737a33cfb93e624b4d091e5a6c240",
+  "@esbuild/netbsd-x64@npm:0.28.1": "663a35913d3d3a2f566d31ec00477954cc570f386d56a5ffffa1d7bb58bccfbe241780fc429c2e41463cef5d1d422ca02fe174df970932b46d225ff0bd333b65",
   "@esbuild/openbsd-arm64@npm:0.25.12": "5ff26a012d0d35673bc3800d28f284a62c310801a68c55b2d1ed8a7e09ef7568117fb8ab2d7ec7a6e7d73ce6a9e05150ee07335fc6447ba98658469b9da1cb2e",
-  "@esbuild/openbsd-arm64@npm:0.27.2": "f710da24beeb747ef3a11b9d99085a14f5c929f942fd9d9a05b7806d5ff1b85631bfa506eb7a6aed9fd01ec99bf91f24736f9f0e0eb6b7c0019fe0dddd2e615c",
+  "@esbuild/openbsd-arm64@npm:0.28.1": "8add19644eca9a23cefc2a109644df802c626cc3460adef6f030ce72d1fcb127a4ff2b14a21cb51bbd68ec5a652f0bd7105c1a0d76a30f44fbf822c010096cd9",
   "@esbuild/openbsd-x64@npm:0.25.12": "41dce65493548bc0dc411a6175e9fb109a93bbbf370ef444d1459698226ad2a3096ab7edd420c27eb3d15e6bbd0bc79357bd7c0a59c5527ace0fefac181638f8",
-  "@esbuild/openbsd-x64@npm:0.27.2": "62670fbe1f609c5362df7b45968ded512a0860e2ad8a4715a89993abfa2f9f08a28f1294c7857d80e6d3f713639a71d291c06a961b331de67ad350032d1b8e96",
+  "@esbuild/openbsd-x64@npm:0.28.1": "ad12be1ed38cc61410aa6210f88b8aa8dc3e6ee717dce32dba6e7cbaa57414af6e5314e7cdf9baa4affafe2d6a88e230d361a0ddadf76d06070b63bbf0a97cb2",
   "@esbuild/openharmony-arm64@npm:0.25.12": "b3e0502067e760e5b92d3180e20372cbb2dba8267fbb56206d50bdeccd8895feb408020b98c3f17054eea0f1fba365385850cb91d1f79a25dfa3751032278825",
-  "@esbuild/openharmony-arm64@npm:0.27.2": "e279efdc18301add96ea791ba9ef117cae05346688cd521fd225a60ad166add4bc995af985058e3b6ab9e65a7c49a79108a294d6aa26a1d1685ad0db194e2c56",
+  "@esbuild/openharmony-arm64@npm:0.28.1": "5ecd637058887c8458ebc7e95c67adee2397ebd8e5f6c302c17816eeb77963b1feeaff4e3f7823c0d85f0fc10771caa96175e2f0909b00e60ca5d90d22690a15",
   "@esbuild/sunos-x64@npm:0.25.12": "50ed9767e00ff74a1d98d94c5fe6027bc5e9e095a64735d1d0676ec72adc4b15b0095e97f5ac71602f2c5fcdcf3e9f6cfe005315e998d9d3e12ca93a2076b639",
-  "@esbuild/sunos-x64@npm:0.27.2": "7234302321d36576b5a9f027915417cddc195a67b19cdfb50e69c337ee0dd63a88be6b72d7ef299cd569d1af62e54774303d52d3d6b5e5858db975241ae467d6",
+  "@esbuild/sunos-x64@npm:0.28.1": "e3286191315e30471e9cc176281a5d7acf5b877a95ea2868195024548a984e08b0214ea90e504e5bb5c595f9d3da9a5b961b52f79988702036b59233378580c4",
   "@esbuild/win32-arm64@npm:0.25.12": "4969d20da28a0c783ada6116724f51a542fad81dab043c4f6f9b7c8f4a68be558f03beb29d75bd550ab6e63f720535ebacb9ce1760099be7a63d4e1ec8351e2b",
-  "@esbuild/win32-arm64@npm:0.27.2": "36620fddf79da3e8e527ef8331436929fa7a0b23c9b591af8f8573d80ed9c4ef45b24c6fa0abbb01d187dec497efa6c9d9d397d575afc1f28477e9ca16a48d73",
+  "@esbuild/win32-arm64@npm:0.28.1": "55e83fa2b63511bc3d2138ff84091b452936072b5b8e24405a5669f04355263b3f452861c13fc0c01ad80ebeb0df069da0318631386c9d66cda8ccbeca0fa82e",
   "@esbuild/win32-ia32@npm:0.25.12": "60ce7d21c5e01c8b0c8c2c4660ff6d890a32b1acf09f5499f950a86bc5c6da17eee760c6bb7a720a0429f7633bbb38b2db517e444408d8a6ff6fc76157310980",
-  "@esbuild/win32-ia32@npm:0.27.2": "96e8c1fa0ec2b5529ead2ba703e5da7644c138b2f9b6e285c05513f0455e99b2b0dcf399f01779fb384e22810e82f892491e44402772c62d3fe094b025bbdc0f",
+  "@esbuild/win32-ia32@npm:0.28.1": "dcd2579f97b8b5217e807d3a069461635ff6c1f13bc6e678fb0e385db4bf569afbbfe9f54ee512f0e120c6cc2689889725b8e2efdb17e3bb1603cffb58a4b6b3",
   "@esbuild/win32-x64@npm:0.25.12": "bbdc69d57d85a6b8af85731c0979186aba54eb34c8d1de5eab4aa1d8fd45e3b38b5426c287cedf43228bb0794a741d9b2c55284c7db7d79335bc33dc389e7bb3",
-  "@esbuild/win32-x64@npm:0.27.2": "1ed08bebd916c16003f3784276ae683ab41d34951a0c272f6e072b8067a2b4bacd6f6f75a8dcea375b8545e15891d305425cf7c8dd31f7deab56ef22cde4a1e2",
+  "@esbuild/win32-x64@npm:0.28.1": "1d7e7661663e2b0d814550e461fd06b814b3ac1ffda1e84468da3b7c29a1ad8a6067a8b7dcf6e66e38918b43a440c6302052f1bdb40c48a6d49a82c616e12f2d",
   "@node-rs/jieba-android-arm-eabi@npm:1.10.4": "60a55caf33f914d1b6b2947c88ea5fa9a58a84d2bedfccb8639162991b9092ec86964b64979c0ca0cf0d5e5be2766236a612b67ea03b3b3c4ec4d608dde2475a",
   "@node-rs/jieba-android-arm64@npm:1.10.4": "e54d5d1c8fab348ef86c1e0aaf4aea8e2e52924ac1c4bed6ef76588b7446122c332b593e4b471b3268eae4386ab991e9eb0337962b8f17bd2dafa1baf1b7c755",
   "@node-rs/jieba-darwin-arm64@npm:1.10.4": "6ec6503fd063d03c0284210b869e31b8db306777ae7acca8be3a9fa979f57cb7729a35723eda3c76ed6366e7b4022c4b9c5f350ff65cd82925f381965640999c",
@@ -66,127 +66,108 @@
   "@node-rs/jieba-win32-ia32-msvc@npm:1.10.4": "38deadbf93c6ffb410a880f8938034635e2ca755b956b7cf0b751f287dbfb4b5e58a492f532f23b30e77a7b3889467055c4d9be4d76df8c4416d97f96c242f93",
   "@node-rs/jieba-win32-x64-msvc@npm:1.10.4": "073b499e19d211f416a604a791c7a29c99552b328d0565d8381258a49682f87014274eebdaafcc9477238a2fd555b0e18fedccb45a49715ad3332958c6f43905",
   "@oxc-parser/binding-android-arm-eabi@npm:0.127.0": "e7fd819437dbd74cf322c152800bf88bf791e181c6c95e027f709e8447bdad718abe8cd6281dfc8abdadc54201a63040d44ec9c08931dc06f2671656fa9bdbac",
-  "@oxc-parser/binding-android-arm-eabi@npm:0.135.0": "a47a390b49484c5f235298caf5a1392e7c2394e39fd08c320574902c85684ed53ac0e8303e273cf387f023c47ecd24afed6b5f7bb961bcf7c88d56a5f470ad52",
+  "@oxc-parser/binding-android-arm-eabi@npm:0.137.0": "f342139ec2520c580bc2156433217f23a832fa8e12815fc59628821dc929ab22e122ed5b088abc094f913ee10ba171fc69150ae0663ec8dcb669b07e7d37c7df",
   "@oxc-parser/binding-android-arm64@npm:0.127.0": "2eee0c6fca35fe0119d0870e2f97e1bb6deab419c5f50216a3c449047597639312e7b60485bf8a21c5268049d54296757c3c52583dacd2503e8f4d669dafddce",
-  "@oxc-parser/binding-android-arm64@npm:0.135.0": "09662b6d3753b2f3fbdad4396ae6b33be036062c238347412d9c7f1edfd2cad310358f8969ddb1347c70978161bcae661def6ee832d6242010167143d464367d",
+  "@oxc-parser/binding-android-arm64@npm:0.137.0": "2f1a26cb5936fedf20511c8680726f788858c979eeddada8fa449aad1f52635f51bff777f0d58e7f56bdd3650af0fedaae6610a16d207b088f7c10bf1c50559b",
   "@oxc-parser/binding-darwin-arm64@npm:0.127.0": "1da8651d064bafe012ef049d8b79cadb923246a0ef3e58b90cdc98eb40a11af4bc23d64606ee292a8c0edcb1e70a6057322c8aa52a9d7a5d640697917bed262f",
-  "@oxc-parser/binding-darwin-arm64@npm:0.135.0": "67589e5ca2b81b03250dd6723b80fa84b5c0ad66d13b7f7a1f5d6eac075a957f5214b85f01147c1eb01c1f35488e5e9ab92c43748d2ab9b852150de64f0abb31",
+  "@oxc-parser/binding-darwin-arm64@npm:0.137.0": "594845efface3dc87b81f96929ef723d544caefedcd033cc98eabb5211ccb6ce201ccecc16315940c02f7a5ee3720fcb0ee966045c4b658643aa48b112c3db1a",
   "@oxc-parser/binding-darwin-x64@npm:0.127.0": "0c56f6bd4b853643b5827579b98a0786bdb3bffaa7dd3486f9b24c3f2f2d5357956ad9e9de79803ccc183293f54710360fcc85255dae0db70ddb36345d1c8cfb",
-  "@oxc-parser/binding-darwin-x64@npm:0.135.0": "bfec48010a9cc9d9ac66b8e33f40e68592945eb2d4a26a017f8d0e17a9ccd336602ed7c9f160ce630b9c23d13ccb84daa4a781fe00092a3804bbaf0247f3124f",
+  "@oxc-parser/binding-darwin-x64@npm:0.137.0": "e6e7d0a82e6f6d63e5cc5a28d28cb78abe97c184735d6b74ff427e9c5145838e9ff51231f45c9deb214884e067c39c0aa2beef8d6a72f151c98e1c354dea71c1",
   "@oxc-parser/binding-freebsd-x64@npm:0.127.0": "94ed852d51f194a573b17a1f91a962f8fb200cda46e1d5adc14d0e6c5f8d3d941521f596d5ebd5addff7002eb0983924ea36d0120618340b01e1a0830147883e",
-  "@oxc-parser/binding-freebsd-x64@npm:0.135.0": "b4401dc37384b237002cdaae6dd49cd1472bd6bd6385af66c3fa0b951da2bb2bb70b01f734ec06ade2bc8b129eb540764e80309e9842b2f8f1115b73712b1b74",
+  "@oxc-parser/binding-freebsd-x64@npm:0.137.0": "6f2afd209f63ef68c2197917b2a1acd60ad670e0787c727d97b39368fe7bec10bcd4b198d8acc762ae475a3dd3adea68be17935f7c359fe763de3dd9f3e26292",
   "@oxc-parser/binding-linux-arm-gnueabihf@npm:0.127.0": "bdef00b9048e6ed29c8ebea9eb6b4a155bdf08d2eaf7dee2634fd3a456db7c3faedd3d9c0e51bf040caac86a01b1fb9b224447ba435324e5e35b10341ca40294",
-  "@oxc-parser/binding-linux-arm-gnueabihf@npm:0.135.0": "2e3c4132e91ffa76f54f721ca0ae18d24529f5bf3886dc2737ee10b4bf47d0bd954187a3d68c861754ea339b0fe4384861cb6b42e681f8255c1b7d7d487fbb35",
+  "@oxc-parser/binding-linux-arm-gnueabihf@npm:0.137.0": "4ac0a561d10012c7c80f35bc30dbc99815db7fcd9790b25dc6f3e4f6e08b4a5a1708e764f04b5782687f5804a6449e49005ca463e60ffb8e44bc34a2041f4cf4",
   "@oxc-parser/binding-linux-arm-musleabihf@npm:0.127.0": "4574976e4dc88000417299adfe886a527e5ad65e307d7ccb527371d74e7c39bcdb647802047853557e0be92a270096d520bd36af4ea152b675bd27ae701b4ef2",
-  "@oxc-parser/binding-linux-arm-musleabihf@npm:0.135.0": "6c21ba9e714d0c7af7c835bb574c20cf19eb7a82469a8c123c703a1ca04afb883d6dc87fc5a217f6e69b23fb7e5ecdd18b23c81195bec3e4f9a1654c31be91e1",
+  "@oxc-parser/binding-linux-arm-musleabihf@npm:0.137.0": "a25c63205293be06f7da4f6d06421c0610bae3d12f2d38ff9498c77af4aa1431ed4b7184241ab726b135bb3da8b3e23dfa93785306e304fcb7c14085b8e183b8",
   "@oxc-parser/binding-linux-arm64-gnu@npm:0.127.0": "66aa5cacd1aec33b65f09d13fb32376ee297211cf1ba93c03f274e98a24f1ea41563fa73f3241c43af7813e301f11f65fe4cd759eb05efcca64955457d71bcb9",
-  "@oxc-parser/binding-linux-arm64-gnu@npm:0.135.0": "f840e428a5afe3b3a18077c1e22210483aa67c0f2e7675471c2829eb8d2ecdea8082e4459b0e3219616c9f760fb5e15e4687a1455b8f4ce1b7807026e9c0bc65",
+  "@oxc-parser/binding-linux-arm64-gnu@npm:0.137.0": "a5a75336a211b76a413f2def44880af3f235006664ef2f1423efdf9d39228e1fd81ae8dd83b0555dd68e725a124c7a066dabdb75f5e1ed0839e22362ce86d74d",
   "@oxc-parser/binding-linux-arm64-musl@npm:0.127.0": "8e7146df02d2d2efb7549301ab0c31ac06cf779561db874c8c3b3fa1f2dc2cabbc8cb31e544da8128605a128c688399ada59000ff670bb03e5ff709156df0091",
-  "@oxc-parser/binding-linux-arm64-musl@npm:0.135.0": "86fe9381f2cdb52f81345fd3152e00b76fce57e41383277bf5071cb2eabf389dc17c4de91ca695eec1eba00a6cc2f63664332f9a4ba58e0187362b0b669e2d8b",
+  "@oxc-parser/binding-linux-arm64-musl@npm:0.137.0": "c2352091b8edd81a787dd691d361f8d6de9cf96b58bd1bcf361c8a5f396ac0a10abc980de7f8aab35aaffddecf4f742b9ca9d735db6707ad76c9b0746341e09a",
   "@oxc-parser/binding-linux-ppc64-gnu@npm:0.127.0": "c0986057e6787120cc7f60f67ae61563b2873cbccb038ec880f969a43e7e7007c375971d1775b3694485d40e3216d5845f966c8f719fe87c5abcebe40149ee07",
-  "@oxc-parser/binding-linux-ppc64-gnu@npm:0.135.0": "50fc74f6aec424d34654ea2a553ffdf5bb765dc36ff05fee078bb063ac39defaba595c484c689a27d04312f0b0504a032067c6243a4ea4137cd4aeed74b7d636",
+  "@oxc-parser/binding-linux-ppc64-gnu@npm:0.137.0": "5fc0f1975eeaed85a07b2eb98974587d8da31326c3f137cde3675b71784b1708f2b058597a01371a3f47aa88f3384395eb7be47ed61bc28ecf6867b8d7bdaebb",
   "@oxc-parser/binding-linux-riscv64-gnu@npm:0.127.0": "a4b39d58ce024a967a34cdf9af53c85ee8cad9f9bc7503eb7436a00428c80da6e30a383a224237e4b37d05d40ab2136c3f9ed532220bddff5203361a04234672",
-  "@oxc-parser/binding-linux-riscv64-gnu@npm:0.135.0": "410920d4cf238c469de0f5410893372caff906e178de243aca65302be9a248c6930c59c62151a09edc4b8303b097d16431ec9c9a42d0a040fd4b8085f7f3a98a",
+  "@oxc-parser/binding-linux-riscv64-gnu@npm:0.137.0": "da09b3c91dcd3549f8350974882df24f0bfa043f6001f4497277f21fc585698c2b637068cec25aae59af619b53a4d2026c49f8ca2379d7fe3fa7b7f4ec3c0bd6",
   "@oxc-parser/binding-linux-riscv64-musl@npm:0.127.0": "1c1345817a5830c8b896e5283dd99caae5f6af03da50a14adb7a2060057ee6cc279cbdc665622f67234d2a84047672c2742288fa5a52359323a78fd1aa065740",
-  "@oxc-parser/binding-linux-riscv64-musl@npm:0.135.0": "823e9f54ea425644ea12a95cc427ddfaa369027f6a2019a4fcffa7dc9eb6baf0f3c1589d3da60518c3429cdf752d427670ee938f9553366fb153522e316c0581",
+  "@oxc-parser/binding-linux-riscv64-musl@npm:0.137.0": "5d8f3df301a79cfa57b5ecab5eebd7601e3e8c0ec982e8e71e8c1a83f8f05e7a50725c47b92aee623719d25eeead168e2344cd69beee0e93a7d96b46a6068b06",
   "@oxc-parser/binding-linux-s390x-gnu@npm:0.127.0": "d70bc89961b303494e8dc574b3ee4c64563e1217f32e60d9823bbe51421d19d713097607e12d588659b8ed79258b196b1809e085db52f6b3831613f64d9324d5",
-  "@oxc-parser/binding-linux-s390x-gnu@npm:0.135.0": "2057e3b0a9397dbae5266704d0e1312d9f771c06602fc9c32952e15a8218cb7a1b1e8e2a1a4ad29a71f8975c8f922304bbf7d1bb00c9b8aa1a34c2fc6b80214a",
+  "@oxc-parser/binding-linux-s390x-gnu@npm:0.137.0": "2a264e87ee624616472a9930d2a1173a2576f3fba85690adeccf5c32d93df840eb917f148d002474702258f9d2f93aeee097446b0cdabd1ab422f7e5cd16e31d",
   "@oxc-parser/binding-linux-x64-gnu@npm:0.127.0": "481f7a1f8757c987f578a75e8325a1bed03e89b8942455a6fe574b9d8adcb4079b7659fc9e58a000887dd0f5c4740ae2ac44269707e0a3d205cbceddcc75549c",
-  "@oxc-parser/binding-linux-x64-gnu@npm:0.135.0": "49b0e1e7b6f88cc5f4be698f6837209b0d6bb833ed7d35b0ff0e29a54c65ae65a821173945737fc1521cf27f8142b42f2a09794c5831630da84b414de272959d",
+  "@oxc-parser/binding-linux-x64-gnu@npm:0.137.0": "a780f2f589c9987edc681c02040dbb91125e759a4cef22c56258618607d51a0ef2b1e7e678fe44f08c9adc382573ecfeef23a56ebf12e7074b12149d013cbd13",
   "@oxc-parser/binding-linux-x64-musl@npm:0.127.0": "6d16c6827c1ad4a275357717ffafbe3a3e59607f63ceeb6f36cbeecdc0aba6071d4ce6aadb5f9c7b8f77d2520f13388663d967ceb26ff93089aa117bf686889e",
-  "@oxc-parser/binding-linux-x64-musl@npm:0.135.0": "c1e44c559a5a49bd95ad15221b11f08756492bc70987d4492afa63f68874f8c5ec8dbcea84acdda655d96c9d60370954f68977d712f15ca59422591f47c61fe5",
+  "@oxc-parser/binding-linux-x64-musl@npm:0.137.0": "a5a8c2c33a61ab7b3fe4492ae4507c707f656e783cd184956c09d807545030275a2602ef6b6a0e32a8892550e5379080938f58ef71a705d55cca614e5d8bbcc0",
   "@oxc-parser/binding-openharmony-arm64@npm:0.127.0": "cbf640b4c9a7a491a7d8a5d2585842da84d306a23565ec6f079d845bdf3893cf9f1fe50e22e6d26e9ab98f8231606e49fb94aa346407eedf680d92716142ef4e",
-  "@oxc-parser/binding-openharmony-arm64@npm:0.135.0": "12364a2ce9c3adf119b85df4c922a83b220ca64f5fc77ed1c9504a1fb685b145edc67c46b3f9136d81b3b977552ff3dcd5262620a2a1579f54c7f9529ffcb35c",
+  "@oxc-parser/binding-openharmony-arm64@npm:0.137.0": "2c680e2eb62cfbda8262e99ddff0703fe9c1475018b902733e11d55fb6773b2f54e0fbab895ff3d305dbd228a57e03a94bc4e9c585f242575dac2766a2843920",
   "@oxc-parser/binding-wasm32-wasi@npm:0.127.0": "44cee540065e94ef484565a29cad59077cc065ac882cde5da8bfff3fc96e012f284f6c2cdaa5da62a646639850a7326a876bef4b8d402f1e50401b062bfe1426",
-  "@oxc-parser/binding-wasm32-wasi@npm:0.135.0": "6e67ad18fddbec5666a795596a56cee518726bd1b02c5e3158191a7503e697831c4cf4f53424230ce0a589b73203e89604e2ae55b06e3e021cf3e882f6938602",
+  "@oxc-parser/binding-wasm32-wasi@npm:0.137.0": "83d44e5b24c26dc4ba63d07935b531f526778ae7f420bcfc8836268b6a05802945eba12706750c0244dd4a660670d27f72ac3d66a8a95fb418ab8b65838333a8",
   "@oxc-parser/binding-win32-arm64-msvc@npm:0.127.0": "998315e47c7ae648d512530e84cd248d6f74e3921573e1e9b14a73b70b3848d826e52fbe28022c7596fec02b055731a9a480b60a89c5e6f6f38dfbf13ec03524",
-  "@oxc-parser/binding-win32-arm64-msvc@npm:0.135.0": "9b15a6109561fdd52a199c87c2808687494ad0848f6fab777dd1ad8f07103b2a8fa430344891bc572931b967820a6ebdf63d122ad45bd3cf87064992d84ea3ee",
+  "@oxc-parser/binding-win32-arm64-msvc@npm:0.137.0": "b484dd6f3763b9b35139c2ce0a20aba5cd61c41ad982c8ebf64f2813408516ca48931e36442015d6c4f215567fd57c48991c53a722a27e8637e13a9e4c0a9d15",
   "@oxc-parser/binding-win32-ia32-msvc@npm:0.127.0": "d78eef92eb0203a7bb38cacaebb1364dd9c285365ffa204c29062e6f850e519be66b72b6d4cf9899084645906b8b9026d2957c6dab4bc2a20ba70c1e9790c3d9",
-  "@oxc-parser/binding-win32-ia32-msvc@npm:0.135.0": "fb5f6271f619fb6606070fed933dbc6bd58564d5c89ee53e54dce6a5107c360c4490c786b1a39ebcfa0e405546496e2371348a81377c2ad16cc03864dc9328f0",
+  "@oxc-parser/binding-win32-ia32-msvc@npm:0.137.0": "ae6b21ce2eeb05b6dc2a47b61160aea2bea430fd5eae30be5b1c84b8fb29ecc430e60b2185281fa7ad3200c2f898f2d61561e1e38c2c7e3ab460650e3405d52a",
   "@oxc-parser/binding-win32-x64-msvc@npm:0.127.0": "ab53173be7f2202ca31dbdbeb990b46983e8a2b8a7c643a8242d3e9d32f627160ca7f35dbb2c0a3d7b2709e7c94176239501712e5929835f5c758324655918c4",
-  "@oxc-parser/binding-win32-x64-msvc@npm:0.135.0": "ea5bdb283739cce9acba051f52aea7df8eb73fcd1e9ba8d7bedff31af101bf07398726e722930ef268781983a6e010914ef33f4fe540ba47ebd1c2d6cc7a0cd6",
-  "@oxc-resolver/binding-android-arm-eabi@npm:11.20.0": "869d3813513bae96b2f33c3acb13a2cd0af94c929b668f1bfab7380fa1610db28c66b6ef1859012d80ef81ebccdef3f8b65cfcb98002812eec8e20fac62714c1",
+  "@oxc-parser/binding-win32-x64-msvc@npm:0.137.0": "e925380b7dbd977f8c25d11c65dfb1832a82b7868f1170e43d1fcc00cc1fc3c5e64eaa8c21940a0c58f3984eb2e0e447aac58bb9cc26e3bcc28116ce4ef8fd06",
   "@oxc-resolver/binding-android-arm-eabi@npm:11.21.3": "7753c5536f77492993647d75ecf63997fc2c28cc0f19526f714d187c326f28fcbdc41356cd0558b889fb5e002957e66ee4d9584b84a135f0ecb5b83a64077404",
-  "@oxc-resolver/binding-android-arm64@npm:11.20.0": "7fc6c58c43b0d45b3d1c5bea9c6da3c42efc1a33c1e5ec928f2abc4c745b6a2a0a1875fa785c97a99a59f7bdc81db9977870f47a5530075cef2ed398ba23687a",
   "@oxc-resolver/binding-android-arm64@npm:11.21.3": "2283884a7140ad0fa625eaecaf1f7b3f89a5c605d2ba38f66336772f3acbd6035f437ee1b338fa22119fb79792f03a67a046c81d6affe0b3b397de6c19b03406",
-  "@oxc-resolver/binding-darwin-arm64@npm:11.20.0": "bbb1080d8ae8cc92ecc5c8bcf323c807ff00203cf1fdad7b8c66792445d270e6427f5795dd2bf54482a7fb72801e52eb8bb5ee861c052b27bb8ee845e7b5d1ae",
   "@oxc-resolver/binding-darwin-arm64@npm:11.21.3": "aef8175b317e31d7f07dc67382be8deb44a4380aa8f905b4db80b6d919d91612aebd7f67a55fd65183c82d23af183c447254c2828a2529b673e49a2f18521060",
-  "@oxc-resolver/binding-darwin-x64@npm:11.20.0": "c470e8d3ace09e87ddba732d4c26b8066c00b5e3db235afeb01331ccfe369b2736ffee349db4d5141063ff3bf578839e4f22a08facd49d214874f789736334ea",
   "@oxc-resolver/binding-darwin-x64@npm:11.21.3": "fd7f96fa2e7e29e3a9e73394e79a988b2ba91243e193d379aff8cdbf0a2f2f3222b9ff4226b5dbcac6ccb401541e9899262ed1e4418bc69de980d63acaaec82c",
-  "@oxc-resolver/binding-freebsd-x64@npm:11.20.0": "433c3692f2b8b67e787af9f24172c579a100863644896d4676ca58f32211e8d5a519a4e516c2eaab4dcbc4e7b6f384bb0b8e8bb044e2805a4e773e14d56d96fc",
   "@oxc-resolver/binding-freebsd-x64@npm:11.21.3": "67f3c8791ee8d202c9c9bddc45ff82af26d10f8718dc70090525faa6083c04d78aaadedc1b19e71757c0c38f2010d9f9ce5c40ced3a43cd6c6b6aaa4b671858b",
-  "@oxc-resolver/binding-linux-arm-gnueabihf@npm:11.20.0": "71c57f90a16796a231184fec52caac9b6e7e22c39c81af9fbcf408a430c30852cefbd8658f7f523626bb43314ff300c92fe1080d994c9e90da4a3e21b271a5b7",
   "@oxc-resolver/binding-linux-arm-gnueabihf@npm:11.21.3": "343434f09025f7f7f80c26bb1e6b34ee5704c9d81e7e5582cab8a18055887fa2e6a7c1d560cea3aee8cfd18180f65d622510186ebfdc0a270842c6290252c935",
-  "@oxc-resolver/binding-linux-arm-musleabihf@npm:11.20.0": "76efe95e9b857d3207d8c711077eb2b60a919ade7e1778aa82463beaeac638fe4a002116f234aa0edec8f4fb7399bacb9b6f89ea4b490d2ae801e93973481638",
   "@oxc-resolver/binding-linux-arm-musleabihf@npm:11.21.3": "0680fed46aa5db6e8339e2436ad7382493bb701bb4d5481f6cf3056e0a6571ea3682b11e1c990ff24900c6418d3ac424ace2b0a43a660e33f32bbd9b0b6f56d9",
-  "@oxc-resolver/binding-linux-arm64-gnu@npm:11.20.0": "7650a239e45f488e1598296572c1050ca8e2278731bbb571a92f70cd524fe760a47ae3272c6fec65170c408789dccdbb0f1974064d11a17a27e08fffc00a7517",
   "@oxc-resolver/binding-linux-arm64-gnu@npm:11.21.3": "664db26300f8fdcb5de559b883a59517e725e46c9a018c9de187bd360e4229be11d86ed942d214c8110c0c7c3fa6ed35b3c832dc07b12eeca11eb6ddcade59a4",
-  "@oxc-resolver/binding-linux-arm64-musl@npm:11.20.0": "1729fb7810c9a9a118ee5ebc49006491969c0785300808d6869c331cc2ea054fe2e49e0d7e9e433e6e12baefd20cd8b60cba5b29f1ac92192a20f7620493788a",
   "@oxc-resolver/binding-linux-arm64-musl@npm:11.21.3": "20c8322222a1ffd162b9ebcc390bc6de3705e0f3efef259b87d21e502cf448911da289e0eaeb49aa1173c6e86580c06e824e711c7ada637a055e01095329dbe3",
-  "@oxc-resolver/binding-linux-ppc64-gnu@npm:11.20.0": "607683f3bed552b1ac4b83fed81b4bc9dcae0b9b58c863573c95e791261ecffb13625b557c6c9e1bef3da5c1df79f041f5a7c8f93aed43b4b3ca1df33755ba6e",
   "@oxc-resolver/binding-linux-ppc64-gnu@npm:11.21.3": "5962128b365fba91c53dbe0d0c2898d48357d86799d9286255ddf23756480963ad51db5e1fa9acfabcfe30c742c37800450ad46d7b150b040f7caf4e54d6825c",
-  "@oxc-resolver/binding-linux-riscv64-gnu@npm:11.20.0": "4a58183ecbccb76355582482dc052a8e92f25de4811f5d574c3d6b5169443d403d18f74e3f1373da0aa211b854072ed9ca765124f669a53ab1e8599d257b27dc",
   "@oxc-resolver/binding-linux-riscv64-gnu@npm:11.21.3": "cfc933789d035737e6ade6b229c4a09a6e35370c9f4b6b7f0f6631074fda83dce9739a918a904beec14eee874ff400e79d3c9003c4a9b733a30bf19122702ae8",
-  "@oxc-resolver/binding-linux-riscv64-musl@npm:11.20.0": "0d1e8bcc0c077f01305fa0f85d462a10d4bb09b25f3de8c077acfd6bae8f898989087b7b451a6b05978bcc8cf386fd5453074cc3c64e08b8465fdd99b795e131",
   "@oxc-resolver/binding-linux-riscv64-musl@npm:11.21.3": "c2c3e4632a75307aa1c818e154713d993a862cc117ac6f498a80b713dd03558d90b6425650a38ff403e8a0bdab04632524777e4d5449b9c58c9557cae095533b",
-  "@oxc-resolver/binding-linux-s390x-gnu@npm:11.20.0": "4e81f672700db7c5f33c583f04851c62dcc5826c2ad7a366794e3aae21e4a1e4655dae0f563660a9883084da98f5998650b5fe3e1bb10b0d1817670d2060bb22",
   "@oxc-resolver/binding-linux-s390x-gnu@npm:11.21.3": "034fb6020a70acbdec5ace9230fdfd8fe29f58767493884ebe8beb2f261a78cfa908fc2da9e52db1547c9d6535e9093d073a5b47ccecf61660faee90230d3875",
-  "@oxc-resolver/binding-linux-x64-gnu@npm:11.20.0": "9bcc10d91d411e1e3c22c8c5502edea1e95043101da2c1e28d06b046368055bd0524a51f16976003d453f0962626cabb232def1a94737e43ace6767ce06cb189",
   "@oxc-resolver/binding-linux-x64-gnu@npm:11.21.3": "095e91519ad47c8fd190d3b7429a34f89d45044ed61e5356ddcdcfd3366ef8581dc5ce6c84daefe0acfb48bc6860853c46d04906095617a3a9d68e0459ef6d70",
-  "@oxc-resolver/binding-linux-x64-musl@npm:11.20.0": "89daa69818f1c7d6fbe53402589ef81b76e52d46d3fd45bf4f7139930a7bb2e3f9506017fa32baf22c30cc308737a57858777c00fd0f882fd6911f2a9ef90467",
   "@oxc-resolver/binding-linux-x64-musl@npm:11.21.3": "855a3c0b7bd5fe86f6544d7a6780009f0513229d38c38f59c09087771c01b03c14380f168e8f4f45619ce1a93cab669096b06b1029ba7c3881c16bd85777a0f1",
-  "@oxc-resolver/binding-openharmony-arm64@npm:11.20.0": "d6e3767f86b203e07b51fe1750b29a2c7b7a9fb3ef73c5bc4f1f1e2991374d53ae1705e81c035cc48955bf47a24911e5f36d50ed45e43d318ae010345e00f8cf",
   "@oxc-resolver/binding-openharmony-arm64@npm:11.21.3": "bb4ae4c1904799c5c522ab391d192ed6ae99d3c2589c885dad31a056a87e22391e3f83d7336c23aef87d43a26fe9fa823126048c15b5038382d0748f3c937891",
-  "@oxc-resolver/binding-wasm32-wasi@npm:11.20.0": "f748fd1c0e8c8ce47b4773e1fd93ea2386e0d605ee099e0a665637b4113dea286d2786a00b74958671c657c243fe1e7811ad798ff64baa899fe4347240718838",
   "@oxc-resolver/binding-wasm32-wasi@npm:11.21.3": "58838221e4b4218454e2106d064734aee24a704f6cba39fd936762ab4d4a3a832c075e75ee617172bd5c61f55208793c36d4c73b94eda66ef08566a712bce719",
-  "@oxc-resolver/binding-win32-arm64-msvc@npm:11.20.0": "58cbeb0cf65845ab163a7bd53b6aea93e1d9a600028b87e018bf6a5bfd55756fcca88a961c9ef6e588c11d8bcfe8690347dd5e263f36a7336e4f034ac97dfbdd",
   "@oxc-resolver/binding-win32-arm64-msvc@npm:11.21.3": "c3f631b772bcc242a32d4206172f9a8ade522fe957d6fdad5525f172b7ffad9e65bb92ed81b881f8b2a709a57ad55dc63d2caa4ddc0d791ab9f66bd9d8b6aa33",
-  "@oxc-resolver/binding-win32-x64-msvc@npm:11.20.0": "7b0973006a664c089a9feb7ccf9224a2d6a91c38e9e83e8e874bfd3ab1bc3e9d81c16bf68238455ee576a78441865e88f20d31439d538bfc916bd773ac6a98c8",
   "@oxc-resolver/binding-win32-x64-msvc@npm:11.21.3": "499b5ae8adcc42957aeaca8068721dcc2d728940cd07bbe00a0d4bbebcebda88b1d36f7e28bc0f452747d06404bc7e3fc7c48a8f02a0ae42abb981e6d86807e5",
-  "@oxfmt/binding-android-arm-eabi@npm:0.44.0": "f2b29210336a7a06da7b20dd7b793b3e5f0fb1785af1deb7ecce7a8360a694d20998cec5cdfa6ef97cf6d3ed964f7771c32ace3c762b091e4ff716663d153f40",
-  "@oxfmt/binding-android-arm64@npm:0.44.0": "08581f63c72281f9abb02c8414803eb352c2b0b59d6a16ad525ae14c1f94cadec7986cfa3f1caf1f1ef6f35811c18f070b409fb087878c413d740d4da271373b",
-  "@oxfmt/binding-darwin-arm64@npm:0.44.0": "e77c7798f60ac34847d861e7e26973c434d00de3ba8bcc789a9658bd55173dce42fbe2db7fa33535f77a6f3d806f95ed18a177ca1fd24035298aeec7d76ae5c0",
-  "@oxfmt/binding-darwin-x64@npm:0.44.0": "8f2932eaf568c807e9f0a1b246eb43fa84d17ec904423b44b07f494bd7dd2fb77a467d2e6a983d9bcaa072950b52b9bc34d4d1a91491514251532edee0873b0b",
-  "@oxfmt/binding-freebsd-x64@npm:0.44.0": "2554102821657a66f606cee2ddd283d14a0de691fb016817221ced0be39fc5af7dfe23886ea0bb4079cab48aa56beb4be7d34d38863518c48eef6fd0c64a315d",
-  "@oxfmt/binding-linux-arm-gnueabihf@npm:0.44.0": "cd24da3e57c6757b07ed5e13d3e3293790ecc1c2f198356d16f3cf58b221ec7901417c275a51cf9464faf533aa6a99aaa1b9ff845f2ceb71699e6939c49b2d90",
-  "@oxfmt/binding-linux-arm-musleabihf@npm:0.44.0": "5980bd7834eb040c5e0e7551d0032e17c73d446253af017c7f7053a0672d51f0346d03b6530979c6f6f6f8564cde6a11ac329c48338c16bee73d188bb7692649",
-  "@oxfmt/binding-linux-arm64-gnu@npm:0.44.0": "0b79af84e92ce7200d524e04e48e59276580552763a62b05d247066f0a788729db94fd985c81b92348d794a5f654e686a17542b228b4a5ac0776c30a786abafa",
-  "@oxfmt/binding-linux-arm64-musl@npm:0.44.0": "1a281d213b7f02f6e28519b2ce7a4bd5c9b540c0c37f2c3b9b786cd616fa91e134b5a17d3da593f311e7b272d5534fa913af40829463987ddf2dc70fcda63cfd",
-  "@oxfmt/binding-linux-ppc64-gnu@npm:0.44.0": "b0a0d63384eeb33fed63d353b292db5ef1dac113b692455b36f462d97f66b8d719a07b71affe63f6f555856d1261c24eccccadc72f04f720b7470321aaacc67e",
-  "@oxfmt/binding-linux-riscv64-gnu@npm:0.44.0": "b005497fedfde005c8165a646d4b7faf35c63242458166c130d7e15e6eb8c285cfc9907cf44885c05f4976d99366064ce13eadf2d6c7867b75f9ad28765720f0",
-  "@oxfmt/binding-linux-riscv64-musl@npm:0.44.0": "2f95d5cfdbba63b9e74158ce9c64262f1be28a2483c961f7e376d27c43fc582ded2a2358d459b1f503100c766b5207e7e77fa2e27e69f2a3975ddb75bc9d93b2",
-  "@oxfmt/binding-linux-s390x-gnu@npm:0.44.0": "bfd75043bd870f1b5142966383d7256f3fc596e6ce2de4365e964efc0c6f716f222d9dfccdaa901e2b55edfe24a6ef83a2ea70ad2b79c31da1c9507d157504ec",
-  "@oxfmt/binding-linux-x64-gnu@npm:0.44.0": "4039e8c3027499baafd8da1e612c6fe01d0ce86c7993064c133e879c64355f02f9d9f951388919610264fd33c2917fb6535bb0c72e3b222cd3bdc4bf4beb8471",
-  "@oxfmt/binding-linux-x64-musl@npm:0.44.0": "7dd406f8d19af090cc6c42aa9d420a5d074c15a0a214cfadb9c3c6a6f7588eddb38a91595371b0d9d247635ec7d130e349e93edec7be759888b702b4a8405919",
-  "@oxfmt/binding-openharmony-arm64@npm:0.44.0": "5b9078488871e85d57a5af8eae390dba125f37a5ec1e1d120ee34d1d9b368f6b5715f26d3fcb3adbbc1d2f06cc928e3f73103f116f0323fa02d0f5305621e7d3",
-  "@oxfmt/binding-win32-arm64-msvc@npm:0.44.0": "d9aa3808de1a6e910e463235674cad17f90f015883bd1a74bdf9a1eb17b9ff0733f39f4d0a3af9b005fd55ec5584393fd1a6effb2858bd677aa205a2b8ed153c",
-  "@oxfmt/binding-win32-ia32-msvc@npm:0.44.0": "b441cb9974a64d1e6dbca885000aaa76e36e6bf99020bd7172238b60c165587de737c6715259b19ac982bb5f3d008a1cf7088f8be06e4343c4acac7702da88f3",
-  "@oxfmt/binding-win32-x64-msvc@npm:0.44.0": "35e4722f8594092dde9b5ee51693766928205c7bbab44e25710584ac13ae71460bf3dfe34d7222eba5d24d8bfb58700cf551873bea876858c1cb3fdb355f9945",
-  "@oxlint-tsgolint/darwin-arm64@npm:0.23.0": "ab24b6a39b1f7f92307de7bbd84246836599f53da25ec45c7b35159dd7c5ec8cdd3cdfa3b73b8a0ea9a85d64af267be093232f633aafa184739b9822c14fdd95",
-  "@oxlint-tsgolint/darwin-x64@npm:0.23.0": "1ac3825249c7b7af11a3d854a98067cdeb37aba2ae63220861e5a4afb15fa01d3e5b565d9f726810d1d7ee04441917ac10b94180e2d2346c8969a3f16a11adff",
-  "@oxlint-tsgolint/linux-arm64@npm:0.23.0": "fac741be0b6ab3ba0b815cf1d0b37e0c878c374618d1baa19672780ecab79fe5f3dc993d6f70aa9cbf2aa5266fade4278563931d1d5d6a2c55d31fc9871010db",
-  "@oxlint-tsgolint/linux-x64@npm:0.23.0": "bb5fd89a2aeb1c859ae0f97ae81039616f95ac92e04efd88dd378703d88264117b935bcc824a25942b32f83bd05884103c02b1ea5bb91252df815327f8c42bea",
-  "@oxlint-tsgolint/win32-arm64@npm:0.23.0": "20bfa7f5a28d31ae3fae61c0cdb713c3c47854c7c9aafddf2881520902b2e66a5e0fbe617669b07e6fa613cd78af8a3b11378d02a927193933b3fbfb5cdb32e8",
-  "@oxlint-tsgolint/win32-x64@npm:0.23.0": "245a0c1cfb78a81dea25975397ad2634c74e9fcbc53206482e3f81d244620c865da7025375952a64a06bef590fc558fe33ecedb1db5d54a15d76ab5765091b22",
-  "@oxlint/binding-android-arm-eabi@npm:1.69.0": "e8cffa63f160db2a14c8bf5c715b51abbd84b8c0adc400b1ad21bb9db2bb0900ae1e0ddd77f81d99838ae1515dd4df4a7d0de37f429f11f6269ac2db1ceb1441",
-  "@oxlint/binding-android-arm64@npm:1.69.0": "5f3802330b9968ab061541f7b92080a06ce454eff6683ce224ea290d4decc1dcec3c809e8984bbb598e6c1f10ca532479f900d13b9627152cb43401526095eef",
-  "@oxlint/binding-darwin-arm64@npm:1.69.0": "04f32a6f25736a2a4543a213aeeeb0bc7ecbbeb030489fd2f52fdfe330aa245a1806e124e15c8ec9fb86d75f73545a46d3425d43cb1c7720e9bc5c23542c94e5",
-  "@oxlint/binding-darwin-x64@npm:1.69.0": "a788cb404b79772d825c46ee7730e97985ed39585d8434b48b249d02c8a2a44e2873d19f7b4d4da12a6abd4a2cd7a0120b385c87146437ec043a260743704187",
-  "@oxlint/binding-freebsd-x64@npm:1.69.0": "2bc52185fb3af1ace5dbba6eb1717a14631bd3981733fd10aa36e5d8fe825f0685cfda1ddfe477a63a530a95344fa6fa4e0e94ca1aea00feb19fb13f5fc687bc",
-  "@oxlint/binding-linux-arm-gnueabihf@npm:1.69.0": "06605e4dc6514100109bc66e6ab478c4d5d926d4238e712910837d05f423ae1d25eaa9f5cbf329f38dfa5e07d7031916c1e4345995efa2a4dd26a5a80ee97f99",
-  "@oxlint/binding-linux-arm-musleabihf@npm:1.69.0": "670147842e6d0eea03543f7b8e8bfd291876c597839eecb237493c37e21e14aea623e956e600e0766922f168cbb7fadbf7042e2aff381172baf8906a6e5ab75e",
-  "@oxlint/binding-linux-arm64-gnu@npm:1.69.0": "efb547265545d058acd31fd7e40d18f4e888da8b9a386f7f37f1179cc651da0db5c7ff4cbab1099b58656dbceaf3f6de951f97aba6cd206042df615a0efbfd34",
-  "@oxlint/binding-linux-arm64-musl@npm:1.69.0": "78d8e8b8bccc8c7a8e0afcd049f6705bc25b66a5d8fc509ea8be27f21f8ba6ecc683f87a7c468365d29c9ab41ba4471d0c453f98a4e581f06c09c4ae374766b0",
-  "@oxlint/binding-linux-ppc64-gnu@npm:1.69.0": "b5e8a95793baf3f83f291fcedd01538e672e557e7ddcf8057211e64276a53dc7081756c2b873610cb348fcf2a6efc1d751e518def65eee36277b92c294e33852",
-  "@oxlint/binding-linux-riscv64-gnu@npm:1.69.0": "5227ec211e9944530b9b05bd54ef36f7de9270f39018214ebc3832ced03617b84dd3086f588ac25e45a6e06bd21066a303ad207f8b6611592a144f9c09364115",
-  "@oxlint/binding-linux-riscv64-musl@npm:1.69.0": "45ac0756d43fdfdd9a4ae68ebc9c15385198f011d661db07b66552ae752a99f9bdc5b4efd00891c423bf5fe66de94088fe23c02427f44f6917ad9180a3bfa846",
-  "@oxlint/binding-linux-s390x-gnu@npm:1.69.0": "83f31f3a9a43c6a15b8e0a1008313d541db5357a2efa411f1e164362aaa79c468fba2e561c159edde35ebdd9d52137bde01ab40a18f48fccd9eaba573b659fe1",
-  "@oxlint/binding-linux-x64-gnu@npm:1.69.0": "7ca4469f595966587e967c23aa8cc54e330455ae6da4430888d8760972644469b8d4c2d74e092b923799b95a0b7149a38107b2473bb22741b9065fdd8bc7c72b",
-  "@oxlint/binding-linux-x64-musl@npm:1.69.0": "ab396a701dc3fd87e2ace55e97da092f5679b9721276a611d1e0843cf4d782cb25fe67392a2b1b59013f88ca6748a9c4b26ba5fe09a5cfba24d5c1b56ea895e2",
-  "@oxlint/binding-openharmony-arm64@npm:1.69.0": "987e1e3e1e42e41afc3e62744b674a13bc467f1683e41d40429d773fb5faea275ae74c12891186b4869de5315e51960be13c9a98ce8d044e1666a09505204cd8",
-  "@oxlint/binding-win32-arm64-msvc@npm:1.69.0": "d409472b8aa3784a18e79aa4d98b2acad9e6c483629a902f34acb47895b5fa36de31438dc880b6509fe815a0103a321b72729267698a7f29c14f10d4e8abf027",
-  "@oxlint/binding-win32-ia32-msvc@npm:1.69.0": "13b7b5702b644031e106d452f837dcd0aae4da21c6b1c770567886ed64fa834fbf9819e853fe61b9c582c2e726eaf7d4d666520c681e4fc10b8391a3fe10f3b1",
-  "@oxlint/binding-win32-x64-msvc@npm:1.69.0": "d25bc3ba61e59ab530e6d056727b0e805a4cadf22176ba383a851455bf0a08408ecf8ae51641ed0d0b78984fd8e1f52c06d56d386263f60c4667a1989d6e3db0",
+  "@oxfmt/binding-android-arm-eabi@npm:0.59.0": "274770e77d4ccbe3968273c67ca1a057dfb7fbcbc32b00b7fdb87f1b16446f3feff3987076686df74d23df665eff14738feb97c6cc80f7d9bb32a7227e71a05b",
+  "@oxfmt/binding-android-arm64@npm:0.59.0": "c40e75a874dfcfb7e3963e2ea6ea042c299149b2c0d362573b777649118d90dd5d41141393a397d09d02f92f5c5e1f336610ed2bae75e055265865b9e184bffc",
+  "@oxfmt/binding-darwin-arm64@npm:0.59.0": "a0c24b4915513578dd45e33cf67932ca7833b131651c516607580e59e1e28eb4a66587815f6d9364390d83ab62f3762074ea0fcac926fa5f3f6897dba775b067",
+  "@oxfmt/binding-darwin-x64@npm:0.59.0": "5fabe903fb686672814924a0055f99ee31e0cbf5af38c7a54acf6c87156134e79d2429cab6c9762dc2103ada79fca0de6a7eed0b211345afa0067e0b42dfc4bd",
+  "@oxfmt/binding-freebsd-x64@npm:0.59.0": "1925f899717fe00b3c8abd47a5941c4e18318d03d4426250a1db89f83d90f907b420dc5e726cb6231602095bee5f8887f23a9689b9d587557918c1ae5e4a4f10",
+  "@oxfmt/binding-linux-arm-gnueabihf@npm:0.59.0": "9ac9e43e1c0fe9dd235a3317c20ae801f189975bfedc777e58b626cc0ed1eaa304a9e40426dbbc705d2cddd678bad4f544fc98dfcbc985fd95d5ce2c2f849855",
+  "@oxfmt/binding-linux-arm-musleabihf@npm:0.59.0": "937fd4947da8ed47896a7f9a54c473ed2896c2827b12ba53ba128d51d794fe3de0b4597b0ee241045e3edafc5072fef799b9eac89beda4c8350ff23805a08953",
+  "@oxfmt/binding-linux-arm64-gnu@npm:0.59.0": "66302fba3dec6326dd4a89451df68433243eccaec95c84b7e5febb81c2adbc799f0341365e544bc7e8990dd0a8849259bc4a6d28e798a6baab63466d1c1357b1",
+  "@oxfmt/binding-linux-arm64-musl@npm:0.59.0": "a179611bb77a0cbebce3b23c4e89938c9b1a7101a246a04ed1f453e553ddbd83170dd910c17a890e4f5e86d76b374345c6a6516655b96e0f79ff157152db18f0",
+  "@oxfmt/binding-linux-ppc64-gnu@npm:0.59.0": "60d4f351ac682c8690f00d90ab66ec3d1ee9d602be8534d04fe45b6de18ade84a1e70b135d6ddfdff66698537bd1a098d455befda57f7ca79f8e1275ea839e5d",
+  "@oxfmt/binding-linux-riscv64-gnu@npm:0.59.0": "454d6e7e9e8d9c671f342d023bb6637b5561db9730e9f1eab462372dcb9e890a498445ae35d830b9fd3969e17f2ce631808d731b94d23294f992d4c347dd0444",
+  "@oxfmt/binding-linux-riscv64-musl@npm:0.59.0": "dc5aa5a68a0a68a5cbc36088a644ad9864f1b0bed590b90899fb33e7f317de45924ca2f78663640f38990da5d18912b92d1b8e06bc50680d4d7cec635ac264fc",
+  "@oxfmt/binding-linux-s390x-gnu@npm:0.59.0": "0bcb65749cd773526827756225c27b594b547198c1698d45e44d96505bcce9514494f241744a99442f3a93c6c16cc8b8914b96411fbe4544131fa5187dbdd2e4",
+  "@oxfmt/binding-linux-x64-gnu@npm:0.59.0": "3b2a149397e3f5fa4f9484c4133ca40774ac15572db4d4c965a81984427696c23f8f6f5528ef2aed41b9399042d3681a6715ebf2c9721c3d9461931acab81ec2",
+  "@oxfmt/binding-linux-x64-musl@npm:0.59.0": "96243112a669df1f3bf4c6bae35f1177ec34647248fbc6ac05824ef248bf7c91afe7f9286fe6516250b98bc21ed774dd94b693231610f03d25f5b837982ea46f",
+  "@oxfmt/binding-openharmony-arm64@npm:0.59.0": "b46711e002021b1d084fe39e58e595a5e96227d0cb159fe90882d4e617b36c865d923540e95826d8fb5e5eddc85608831c489123dec89693c6c3a61dca024cea",
+  "@oxfmt/binding-win32-arm64-msvc@npm:0.59.0": "d68c0ccc0e732aacdf4629b80e03932b631e8823ea786371845904966d1176e4618d5884efb3975e50a2947cf71affcc32bf9c5f724ca1037e9b53f6a05f49cd",
+  "@oxfmt/binding-win32-ia32-msvc@npm:0.59.0": "9826350b30e74e33a315c5519bbda75a2cabd9e755ccb55fbb135f8da20e69025a73d2765dd8d904e9ebf4c450f25987b6f58244c94d517ea319bb0c31f0f64b",
+  "@oxfmt/binding-win32-x64-msvc@npm:0.59.0": "7fe0c79db93e7c7803e23f825e7345d41d52bf99e547d4d9a07aac37e2a5195607e53cab01b41caf021fbcdf07520682635c8fabcae109a9265264734cabb261",
+  "@oxlint-tsgolint/darwin-arm64@npm:0.25.0": "83b52c8c64b8c882b7aa929d0914d0c7b4410a7941ebec285348d47c2bebc97e2cd030bf5e08112aa9f78b2a4ea14586fef4ebe101cc6ba4ca57b947b86322cd",
+  "@oxlint-tsgolint/darwin-x64@npm:0.25.0": "fecec162da157de118bf296bb97932bd45754dd79f5037fa9f2b241445f6f9120b16c791e8314092db87f5ae4e16babdc342ad781a215a71d85d53117c1f14cc",
+  "@oxlint-tsgolint/linux-arm64@npm:0.25.0": "1a378105438d2bea43dec541e099292adc36ed34ad5e5ee3e55fb0aad6e9b3e5b9615b052df2d86fde221926ac05a6d36db9a50a02343d5407f71465abbd3324",
+  "@oxlint-tsgolint/linux-x64@npm:0.25.0": "5f5bd9fef645621435625516bd72427f9e02880994054e8e9f96d1d902a23c9c14699f35f7967fcc578204fe3cff3116a802e84bce02e9b76c3a396306ed811a",
+  "@oxlint-tsgolint/win32-arm64@npm:0.25.0": "be98b033f36b9622d3aa7b60b98e8c6882281fdb74e6ffbebb7646d9d3b13bfa02b1a9ecdeb4db0bf0fc1a0be26d5775abf6752f11d76c419ec0e5a2a4fca7d7",
+  "@oxlint-tsgolint/win32-x64@npm:0.25.0": "da8c552a511f0726c67d0ba086f61b02eff78106804cfb5b61cfd1d5e2850130b936bec73a301a17c6b61318aede46f1b678ed18b837bf7f18bdee1681e98cd3",
+  "@oxlint/binding-android-arm-eabi@npm:1.74.0": "5339a97e25147107130dc819ea19104c80f3b01c80b8cb582af47fbb2e225457c3b02c4be2840ed7eca5528bc93d235f262ccf20530e002fe83a7705537cd484",
+  "@oxlint/binding-android-arm64@npm:1.74.0": "e4eed40ac885f0b34dad8506440f35b268669dd56dc79bf3b82bd6820228bdfb4ba5f94491f3f06c75fb0afd4c1c55484b6130d6b8263c9b9f5baf61dc378789",
+  "@oxlint/binding-darwin-arm64@npm:1.74.0": "6fa89df6c6a007355ef5a75cc0ea72274f77d35ac2afc82300f69765883b0f75dbdf8894811364873072add9cd828ad390482645c150ad5682381ce18e3a8b97",
+  "@oxlint/binding-darwin-x64@npm:1.74.0": "1269bffbdb92619b7f66e38ca4d4e32ad1a05f2cd4c12f42d788d60a7fde958c51bb64ed2d0eb131906733c22b510d09553c57f5d17bb3369b9005cd044af6ec",
+  "@oxlint/binding-freebsd-x64@npm:1.74.0": "65c2fee37c1aabce691417ac75c9cc9b85cedb0c04d82a05f11d8491adb18a6746165c3f6e08c993afa7a37d133f9241afed41238d27d11f30082817836c237e",
+  "@oxlint/binding-linux-arm-gnueabihf@npm:1.74.0": "c18c5251cc48949ad9b048f253a8bc9181e219166198f3b4562c6ee093513c8df8c416615abf8d33c6b948153eb9a72c83080bfe9e3ef586b4d955b178a29021",
+  "@oxlint/binding-linux-arm-musleabihf@npm:1.74.0": "7cec8299a32b3e3cbe4490cd3ebf39f5076e3c7f9da6892505fc07576e348e99332658c3ec7ed5813441b2c533d76e0b86853b47736221556624952261b0e8f5",
+  "@oxlint/binding-linux-arm64-gnu@npm:1.74.0": "71b427f9b44a06b34c9eb2936d61a74241a07bd2ea55d44cf140056f1c3302968fcfc65052a2b5958778e92ad8d42a6f5ca0bbde86ae04a77390fdee53b6cc99",
+  "@oxlint/binding-linux-arm64-musl@npm:1.74.0": "fbda414282d79f18e72905aa06c596beea6e3af1e2628e769902c39103f4e9142c25d93edc3818200f691be30f387a0c3bfead3db7cb413028f739e4e61f6107",
+  "@oxlint/binding-linux-ppc64-gnu@npm:1.74.0": "01249871a7fccd3f63fd6e3dfd21d7c5d80c70b720a8eca1f7e2c8e37607e027d9e6580e92ff3faa0aa49e0f6b4554d4db6c0d8184f6d7e310579c16f939d39e",
+  "@oxlint/binding-linux-riscv64-gnu@npm:1.74.0": "f8e84c1afb3e5de6cbc4a8b5f6cd08bd1461f9bc3bd97c39ed5232c848e8a02e069214d2c7dd7c1b8f2f034a7630da1770c6293bebb13509b6328508eee21ae2",
+  "@oxlint/binding-linux-riscv64-musl@npm:1.74.0": "649a14bd44ac81a301a0151ac5e40244a3eda01d2cb4aa0c9e1a74164acaaed83b4175a0007e5f01b0190a0d55ee200f192f67d88b9de128e49414fd9b59a8ea",
+  "@oxlint/binding-linux-s390x-gnu@npm:1.74.0": "64e4da1e5a8d3953c37bd433193179321f620f5c05a160ec23ffbd61dc98668f8341085d256196c12c7887da23f7d64d9e3d39b68ad3c1fcdb117b37b65728ec",
+  "@oxlint/binding-linux-x64-gnu@npm:1.74.0": "9f094c5d0ea8051f97187ad05cedbd09bdddb35bb120628907261aab676b81823dff7d0e546b256fd140617e76fb76fa2d4aed7a195b26535df0cc8524899c2e",
+  "@oxlint/binding-linux-x64-musl@npm:1.74.0": "1cfe7ec31d60a5ff119b7ca48d6593121efb87f2cd67a0704e453efd2129d3713a2c326cbbbcef7906ef3c6936ee643cd790aeffda2ee1ed597555ff26e3b99e",
+  "@oxlint/binding-openharmony-arm64@npm:1.74.0": "5ff5cb27fb7b913b3cfe5ef33657dfd63c696a4bf057413b99d046ee11199e70cd0471fd8340e6b4ece4cad3ed89227ef2425a410480a7d6368a5ca290cee380",
+  "@oxlint/binding-win32-arm64-msvc@npm:1.74.0": "4d18d720886b114c8fa4758163d5a87f0f74344e00dabce3c045144452690db164dd578664435878ef311c60ac82023a571851c2f0d651ff6b6ad3aef033d6eb",
+  "@oxlint/binding-win32-ia32-msvc@npm:1.74.0": "497d52c8887095007ae14866c3e9e734c637b5b8ead69cd87f7eacd9d06c0d2dc07e465db5140eedc646528f4bd25995afd8127fc5c1e8d471728619c83677f8",
+  "@oxlint/binding-win32-x64-msvc@npm:1.74.0": "a0c87d5cea9a33d470a20f84d457b8d24e91fea00dc7d998475bc4469ecc2ea9df14c7b1cfaf9136d4dbca6460c8506d545d9ac7ad66a4ae400c80d59d50cede",
   "@parcel/watcher-android-arm64@npm:2.5.1": "e9c94ede3bd5c5d999d117d22ac8032a17f8ebc72db3eff04ccb2b4e6718db19f24bf29a66a610e03f4ee95e2cd7b2d30c15b1845eb897b971fec75dbdd76141",
   "@parcel/watcher-darwin-arm64@npm:2.5.1": "0cab55a55c128ac5742388fc8dbfeb9877018509943801ce8a52b57bb6dca24189d025d38684b1e482cb7816368a52c6434dfe45d3997e2fd2509276f48774ea",
   "@parcel/watcher-darwin-x64@npm:2.5.1": "bf07b8ca9a435fb885fb0ca6565204d2f2098d7f632faf26a6478bb39f538c73b50afca17c193dc189a80a864d85e40f924ec7f21a0e7ad7d0de6f97f7154134",
@@ -200,36 +181,36 @@
   "@parcel/watcher-win32-arm64@npm:2.5.1": "0f467a731cf9403b8bc7d35418d991596cf5e7898029796b4c769bcbb38cd07ae6ec05ef0f19298e5f11e73ec5198bc474d79b056bdfbaea513525725103d7dd",
   "@parcel/watcher-win32-ia32@npm:2.5.1": "9ab5f3e9849a6077c8c2aba7bdf9030dea38f0ab9180792ecd30094520cddf16f3b68006f666845b86c5ef0e05c648364475c9ba151e0269561891ca3e276667",
   "@parcel/watcher-win32-x64@npm:2.5.1": "e588d87d5b892484d252ac8e1ec3f4bf7a664d91f0d03dd93764be8db2c35f81879275908dcbec42b0e43bc99c7afdfd29fe687ec022bb2c8c4bc7edd29eaa15",
-  "@rolldown/binding-android-arm64@npm:1.0.3": "c73fbb421576421485f0d0f708df38938addbf48a237f08e8a4a46bad876cadf445c74c93008b3cea8c1be07a32a390a6067b0220aa838912b6a530f53f1338b",
-  "@rolldown/binding-android-arm64@npm:1.1.1": "7a6a6682dbccfa55cdc8653d1a1e92bdca1970616acb347dad8ff5f2495fb4ad8d1f7f5fce064ecfd72fa0df72dc10fadd962bf500a1a5c399d1c9dcbae2b749",
-  "@rolldown/binding-darwin-arm64@npm:1.0.3": "f140da4f3132f341a3f9c79e98d3baa6cac0034cbf4980b44ac37c67c523114feadacb5be451262923a0426c6523f5ba6f207d7fbdf4e95ac978add1ad829f96",
-  "@rolldown/binding-darwin-arm64@npm:1.1.1": "4aea3a7c56af47fd7e128f2e1038a83c3a6dab6ac6db181b30a9815b40bf8a2ffd676f43dfa690cd08092ca0d0c922705e3be98c0f81819cae9223bb7b64435c",
-  "@rolldown/binding-darwin-x64@npm:1.0.3": "ff7845f382344709fc166f7f87bea55eccf3400c2e3d7d70889c5be72640cfa7f7e2880893f8687776254cace09076767bb95ac7ed816547495e7d894f747651",
-  "@rolldown/binding-darwin-x64@npm:1.1.1": "c01c865bcf09162e3ab1c5c9bfaa461307b687708e1fda46c763ade305b4fcb79691501173670d12010c247bb671cb9682a6449c658d24b6e0388fa5a9bb65b0",
-  "@rolldown/binding-freebsd-x64@npm:1.0.3": "d6c401dfa68b6840a9a56e879198267ce8406f16108679caf6e6eb709c8ee0f2641c55d250b51ce47097000626c604bee7e7e2d9e2d70f71109b38e35fe4b836",
-  "@rolldown/binding-freebsd-x64@npm:1.1.1": "32fcac299ac43b09dfc17e478e7d0b13af742ef38dda5c4b41a5289c0b54479aca8e1c17982a8e5aa9f9a8ee8650bd145c0ac0f71ff3e19409063edb5d3504ef",
-  "@rolldown/binding-linux-arm-gnueabihf@npm:1.0.3": "8843aad46237e6a0569196eb605e29afaaf449c06ca4ed1a02e8083c86264f7cc940b085aafe6349f2011b2a44f6dfa8d58b55803e09561f12ea110bd3cb53ff",
-  "@rolldown/binding-linux-arm-gnueabihf@npm:1.1.1": "b9354e847db640142a757470c3017253ec4f8ce65cf118bfe2e437fea5f30aaea98d7e416d04a8c8a2763f777fe20e982dfa2dc4cba2d498de050d03b7141515",
-  "@rolldown/binding-linux-arm64-gnu@npm:1.0.3": "dc34425af444478f539854b02683b14ceef88520634a1dfefbc12c6a2c403c9879c8697ff87188aef199d692508d1109d69f545d6cc3414bd409202fd7f5ca1c",
-  "@rolldown/binding-linux-arm64-gnu@npm:1.1.1": "7dfcf379e0a37fc31a5ec908be9a7821d58f5f93bc7a7d2c0209eb4c7908e4f0e1b6c3ec65619ce60b779019f3a75eafa61558667fd7e101cbeea20d143b6476",
-  "@rolldown/binding-linux-arm64-musl@npm:1.0.3": "f04750497d329d71e17b86cacbc64cc78c7bf8eea0653f40a12f6b07e0baf70054feb8418538937ebb7e909f3b8a730f34e06370d6dc9188a4ea00fd3a947545",
-  "@rolldown/binding-linux-arm64-musl@npm:1.1.1": "b558ea9c6a420be7ad757ee05c77c86107915930396b100ae6b687fc4a4aac2cb01603c8678674472f98d1c3c96a025f930b61ba8921065f2770a0b1bc3a1ef9",
-  "@rolldown/binding-linux-ppc64-gnu@npm:1.0.3": "289963b6842c40d2a30457d6da2b824ecf4e502ae85e3ca7f48c45071b94a0759e327df7687b6930e418c71f7e6716ba43d061dcb9ff30e330708b4031b521eb",
-  "@rolldown/binding-linux-ppc64-gnu@npm:1.1.1": "f3269b611a8fe5b940ba9e233216f699fe5e04663cb51bd7ae6b2e6f2a3da00368851e9c4b159b2c52b029fc194768365afb808d85262fe97d3c819c988737b9",
-  "@rolldown/binding-linux-s390x-gnu@npm:1.0.3": "df6ef349cc8a8b8a6089726627f0c0db089ea57a4980bed6fae5e0246cdbbd2dbfa4e322ad90493a685ad895b21dfd982ebbebee159a7e50e873eabdc52fca8a",
-  "@rolldown/binding-linux-s390x-gnu@npm:1.1.1": "d6e516087d3dadbc14aa5e603985acb5db40f30968238d7c331a6165880f5851f4969bda1f7e8100f119d90bf6172d26f3f1987a68c7a471552be569000e6deb",
-  "@rolldown/binding-linux-x64-gnu@npm:1.0.3": "5d8faa3524898d23161a79ba6ad6fdeac8774c1a15c876a0eaadce582bcc584ec463ac8c2d685de509d04098202b67c8dfad515fcf0a614542af2b4260909597",
-  "@rolldown/binding-linux-x64-gnu@npm:1.1.1": "1126f59382a45e2b25754f9f834b66fb0cbba08b6cdc3fe88d63cfae56c7b753a995483c834326645963705f196fa710e9d1a2f5af7eaff6cfb39bd4afb0decf",
-  "@rolldown/binding-linux-x64-musl@npm:1.0.3": "a0cbdbba526790dd69f8de7810a90ee944f4a920f01326cff331702527b4dbf1377afd1dd9d65ded169f12fb3a1f0ec6d77c931a27e03cafcab453b2bfd3c317",
-  "@rolldown/binding-linux-x64-musl@npm:1.1.1": "6733c08cde69e0c471fb61d1ea9a128063da40612a1f028da325949800c9d1ea49bdae7eacbffb5fe95bbe1a651fef6f3f2466774e639a0016ad04bec3296f7c",
-  "@rolldown/binding-openharmony-arm64@npm:1.0.3": "ab0ca503f2b342e25f466dc65bd35d509ff629996086f480fefdfc7e54c0958d8f51daf51204a485f3c23b1405c824387524dd83a634f5a1304bf0c4722e0995",
-  "@rolldown/binding-openharmony-arm64@npm:1.1.1": "b977df43a86cd2a84a02cc857da9449b6ad1d98b59b6a951efce880672eef4f4d41547e71fc180d33d7cb452c40ee999d882a66568ffceba693342d3cea51dce",
-  "@rolldown/binding-wasm32-wasi@npm:1.0.3": "f540fdaebd7747dc436271fb8e22a60d08deac0b125e02f63cf0fd29cc0d228969d6ee6d49e150d9fd4f8bcd24795c116f86949bedce3cff505402ab2f4455a2",
-  "@rolldown/binding-wasm32-wasi@npm:1.1.1": "8d2b40ee92ccd7bb368cf73469825a36d00f0fd29b47fd895699efb1a1ecdb616f9459076e99b4c2d5f9e5ecf3f072405b8f2488c4392505749beef57f6ba4ef",
-  "@rolldown/binding-win32-arm64-msvc@npm:1.0.3": "b85acf5cd1065ae5260ebd43586eea6dca66675b8346fe42a14c3a95e46943f290684b36cf359c0f01c38256558e819c74571945c13adfcbdc6238ef018ad877",
-  "@rolldown/binding-win32-arm64-msvc@npm:1.1.1": "d3b31389f7354b0589fb7b1b2d4aabc76508ae6ac85648567792b32c66d80a683ced8ee02af9165f3fcfe0fa094996f69f3a1ea37c2d1d5b404c0f83ca890934",
-  "@rolldown/binding-win32-x64-msvc@npm:1.0.3": "d76ebc4fb315deddce845b82eaa07eedf88bb5f9500fa50d241805055dea593ddfcbd762d59116f35ecd6b4bcef3dba5e513180e8d9301486eac272904ce91cf",
-  "@rolldown/binding-win32-x64-msvc@npm:1.1.1": "6e7cea53c2d7c5d14479dad8b1dfb29d761ac4a1eee34e4a0afaef470afa7e8aeb4442f127b25ca5763597902d3a26e21f431d6676d5d45088b0ae8c47e56ccf",
+  "@rolldown/binding-android-arm64@npm:1.1.5": "c3922a72e09e0230ab7b395bf573dd1eb9fada069b45118bdafe3c558ad8a3f90dffd214bf6710c9b73d9485a98aeaa133a755a3862652c6cbbfa0394c86c2ef",
+  "@rolldown/binding-android-arm64@npm:1.2.0": "ff8fc14f88216c2b7e701ff34abc72fd7940a8973eec13cf51dade2a18c19fd1278b5c1bda8949b7a7861f3f743e86e69ec2c56adf70ac481b1a735467a5f66a",
+  "@rolldown/binding-darwin-arm64@npm:1.1.5": "50842b58a4103e84e72a5e009a9232e8943c8e0cd1fd061bac1376fd173f22d6545ff2fdebdc1b9cdec0943e84d3e8ccbd94aa629fce2e9a7dc5212ef8e8b23b",
+  "@rolldown/binding-darwin-arm64@npm:1.2.0": "a446a643950faa2f376fb4212dde3cdf302c3ac5fc18f67e60981be4d9b01563afba2208639c349c0f9fae71c1e48b2630384c96dfbd5e9b96b5a0ca43ce08da",
+  "@rolldown/binding-darwin-x64@npm:1.1.5": "0ad12792b186ea8088ef4a275e43c76ef1217a6d57a0f86c5bc50f7279735e713e5e02173a77b7be313d307fad6b4ca733ee9ad691c7882497d57211010bb469",
+  "@rolldown/binding-darwin-x64@npm:1.2.0": "24a7e1453390691f6c123019a69147bb88cb9bc569dc6b51f39212ff7263098560abc4bbc44afb8eac37a03e2c3bbd9f25478541e2ed230c887e747c089cda6b",
+  "@rolldown/binding-freebsd-x64@npm:1.1.5": "bb8f54069382fa58d621be517373d7ab860eccd70bc6a8eebde90c97ef2615532d9f0eaf2f203ed87541ec8c85ee1c735c22f68c861c37ecb762f2991207a80e",
+  "@rolldown/binding-freebsd-x64@npm:1.2.0": "063da8483f1ff3c78888ea6fa186225df4bd3d6420c99c03b353436c2e6b69bcc3d5863f63c3460ce24668bc2da19af5181fa8ba3dd9929df9150a7780f3318c",
+  "@rolldown/binding-linux-arm-gnueabihf@npm:1.1.5": "8b806cfbdcbb134a1f223d3d5a8e770452cefe84c3f9d43b1605e2775eaf60260c18f1ff66b2f1c7f30d88481fdbcfd41c2ed0ecc5f9e5cebca70064ded263e0",
+  "@rolldown/binding-linux-arm-gnueabihf@npm:1.2.0": "2d1da49fc7de8b63df25b0e6a1016d53602f93db1deb2903784f75fb6b1701048f710e304313ff931792ba12c22206df756cb85ef596a6f8a2a732d6af85f522",
+  "@rolldown/binding-linux-arm64-gnu@npm:1.1.5": "bef8dba97e612afb18218f0b8c341b687ba17b4e241f8575d7c42e94cabdeb89c52881e6dab668b329b4267ccaf45cc64ccf65f57a5cdbb4af5e0cc6a561d09a",
+  "@rolldown/binding-linux-arm64-gnu@npm:1.2.0": "f897abd7551543f835145cffaa329362f64b71dab40861aa03037b188151fb939aa10f0f9bb34f91c178b1011459746be400b7604368cba1dbd5918af52f63b0",
+  "@rolldown/binding-linux-arm64-musl@npm:1.1.5": "e4bc793d61823160c6ae9c7f8eda2b4f4e002b1115607037285902ea4215d51e07787166087abd73d2bcc0034a3d1e225eb8821afcb90a8093cfb14ff88ed925",
+  "@rolldown/binding-linux-arm64-musl@npm:1.2.0": "eb9b31cbf7dbc3a034193b76e96f526b609983740cec5db26fc0374cc746551dc5ca5987d56664d0711ed77a5f8ed0264584e8631e8546afba492b2eeb603a50",
+  "@rolldown/binding-linux-ppc64-gnu@npm:1.1.5": "fe0ad9df136998bb3331505bf61b434414e51cbd9c012c1eabd8d698e5dd253889052a26f144b7297810d0e61113cac7d2e1d23cee3eec47c2d92ba68a4dd9b7",
+  "@rolldown/binding-linux-ppc64-gnu@npm:1.2.0": "c5ec77089e53948030cec2bb97cd2eae47e1a0fa1761dfc4c934ff500d62d7ad592fb49033d4cd28774cef7ccc5990dee141bf95c1dfa02199c5bc2c2c470d0e",
+  "@rolldown/binding-linux-s390x-gnu@npm:1.1.5": "859fb9809f9c5cb05cd31e08337a7e9f1c98e4a8a0b2500a52e284412f49dc725b19a29f2ddc3d6d682cb614d2b54049545560026eeb6091e07a83539bc777b7",
+  "@rolldown/binding-linux-s390x-gnu@npm:1.2.0": "e3552f555dfe4f940a0ee6fc3561d2f8401ae3958dff08a3244fc29c9da16e8b25a45cebc1ca6aa73cee822faf321cecc206eb3c83f6a15af2ba0cc422501690",
+  "@rolldown/binding-linux-x64-gnu@npm:1.1.5": "4bda45d9446e6227c59fab2b72930d34a5dcc0443ac779d4f50bdd3773fe031cc6df82a8f583d592dde0c01311eaf8362073cf547398591786bfa9167be42f53",
+  "@rolldown/binding-linux-x64-gnu@npm:1.2.0": "d0dc9e49efbc9fce585c405825c3d3565a5e6f1bf87ce1d2f404b9e1a752304bf333ccec503f57c4336656626d1e34a92d91999fe09c6e9cefbbdd543b084354",
+  "@rolldown/binding-linux-x64-musl@npm:1.1.5": "80edebc0dfe8126b0eb591e215f88e90521dd9ee92232ab8c53647796eeb9b5108bfdafaf9b3d4ac28a1dd3d1bd7257891b29b9fab0ef98908f5920832592a2e",
+  "@rolldown/binding-linux-x64-musl@npm:1.2.0": "2dd11b2034f34e77ae191c97d92d31c1ac0938cb8c6688c635792ea1298d77cf5e68eaf848962dabd97d983e2e1cecfb7f7d9be721aea9f90c064aa9e6793820",
+  "@rolldown/binding-openharmony-arm64@npm:1.1.5": "e2fae6cfe4d453ca6caac1a2246fe1024eb369d2310666cab5afe9745a5afc3cffd2a0310be8c8256bb2953df811c5e0a4870dd27a8b7c1167312136deceec31",
+  "@rolldown/binding-openharmony-arm64@npm:1.2.0": "9d1d4a478cbd3fda636877a061bc84dda6690c73a4f767562d9a9cf7739cd086b68c9b9ff4587bc3c75edcb93cfcb7125946e436190d72e81991489eb672ce01",
+  "@rolldown/binding-wasm32-wasi@npm:1.1.5": "76b5952fff32a964a5e2f2a470e2562e641736e5f726fbdbe26ec3344816526c19681fda0a4b8b730be4e802513aac9c8f5a167698211ace023bfaa553be6a93",
+  "@rolldown/binding-wasm32-wasi@npm:1.2.0": "edd735c6924cb47b3ccb91a50412b8e86f12a756846c9c700f9e9d72f48f39b54d5be64e96002f6ecafb5c7626e27f7ac399446b62e0d09ef7fdef62ed14e049",
+  "@rolldown/binding-win32-arm64-msvc@npm:1.1.5": "027bc08bc246800ba24405b173ab9240e6e42b8f128ac21d45eb544aa628eb136306d9f7b7c46e66d186bf70da6aec10e0f7ab6865e578790285ce58ea738dbf",
+  "@rolldown/binding-win32-arm64-msvc@npm:1.2.0": "4c4e753bdfdd6e2dc054d4ac8654602c7db46c967b7c9e90e01bb14352b16bd3cf155dcaf517fd4c825e3ab786eaba3b098a3d68449d19466fe863af52bbc791",
+  "@rolldown/binding-win32-x64-msvc@npm:1.1.5": "57e762d5ddf73df7eb146544d6b9fc809b4297338e4de1560fddccb117a785ebea82d3bce6fced522a38e90ba57eae47fc3deffc18cd6eca65efffb71491f829",
+  "@rolldown/binding-win32-x64-msvc@npm:1.2.0": "36e63cf5f0782ed48e9cf452bef7e6c0e3d06ef2a4bf752581e3c02013d65eecd9241f9dad2a71e901c5a52b4ea57ffcbb0d500007c9bc9c326e7774816ff5e5",
   "@rollup/rollup-android-arm-eabi@npm:4.61.1": "fd5cd7af9a2046adba5537f304ce3655cbe260ef5b362ac618223c0bbe1a28751077daf86c087cb5b3955ab19881ac2a79ead2f3e5122b284f43ff9228db2124",
   "@rollup/rollup-android-arm64@npm:4.61.1": "be6b2f5f56f41e540ebb73640ca0d370e530d54bf0c18920e22ec5f6671780d3c6a4235d2257b06189aefd6e26962aeb93f8c4a2fc94f9b3dd4ca2137f40cd68",
   "@rollup/rollup-darwin-arm64@npm:4.61.1": "29ccb594a4430bdc3ea218d1bdb46f88e1a905a54be392149fb362041c6970a916a6dfc87205933fd7eb4ef28be59b1e5404e6bae668722437c09e84a31a7392",
diff --git a/pkgs/by-name/ac/actual-server/package.nix b/pkgs/by-name/ac/actual-server/package.nix
index d0d4ebb7270e..ed081679146a 100644
--- a/pkgs/by-name/ac/actual-server/package.nix
+++ b/pkgs/by-name/ac/actual-server/package.nix
@@ -15,13 +15,13 @@
 let
   nodejs = nodejs_22;
   yarn-berry = yarn-berry_4.override { inherit nodejs; };
-  version = "26.7.0";
+  version = "26.8.0";
   src = fetchFromGitHub {
     name = "actualbudget-actual-source";
     owner = "actualbudget";
     repo = "actual";
     tag = "v${version}";
-    hash = "sha256-KePWt08rAhLZUrgyN7tdFUQXR/5y0TvakReji4eMwxg=";
+    hash = "sha256-AHifM1g0SAb3NzvCq1J5FVhWcA0wU/WufCFxnOjYpc8=";
   };
   translations = fetchFromGitHub {
     name = "actualbudget-translations-source";
@@ -29,8 +29,8 @@ let
     repo = "translations";
     # Note to updaters: this repo is not tagged, so just update this to the Git
     # tip at the time the update is performed.
-    rev = "c26df422b50745085191721b1f078664daac947d";
-    hash = "sha256-u3EVA8J0VCLPafidGHhDiySB2fQdibntN+6FfErQi70=";
+    rev = "f5a3541768632052e2e2039f977e3dc608ef0b60";
+    hash = "sha256-NTEStwU6UzbrGpYoEosbwstoQAXvZYqgK2HCF6Jf6Ak=";
   };
 
 in
@@ -41,12 +41,6 @@ stdenv.mkDerivation (finalAttrs: {
   ];
   sourceRoot = "${src.name}/";
 
-  patches = [
-    # Remove after upstream updates to Yarn 4.14
-    # https://github.com/actualbudget/actual/blob/master/package.json#L123
-    ./yarn-4.14-support.patch
-  ];
-
   nativeBuildInputs = [
     yarn-berry
     nodejs
@@ -71,6 +65,9 @@ stdenv.mkDerivation (finalAttrs: {
   __darwinAllowLocalNetworking = true;
 
   postPatch = ''
+    # We bring our own yarn
+    sed -i '/yarnPath:/d' .yarnrc.yml
+
     ln -sv ../../../${translations.name} ./packages/desktop-client/locale
 
     patchShebangs --build ./bin ./packages/*/bin
@@ -114,8 +111,8 @@ stdenv.mkDerivation (finalAttrs: {
 
   missingHashes = ./missing-hashes.json;
   offlineCache = yarn-berry.fetchYarnBerryDeps {
-    inherit (finalAttrs) src missingHashes patches;
-    hash = "sha256-eZxQAf2AfNd+0wrSEmE9kg5XWdqhE3Dlf6OGc1bZhXA=";
+    inherit (finalAttrs) src missingHashes;
+    hash = "sha256-wYBRDhf1lu1xiNdWh7jXM2Ecimj/aETI863G0PlFLRU=";
   };
 
   pname = "actual-server";
diff --git a/pkgs/by-name/ac/actual-server/yarn-4.14-support.patch b/pkgs/by-name/ac/actual-server/yarn-4.14-support.patch
deleted file mode 100644
index 36a538d849e4..000000000000
--- a/pkgs/by-name/ac/actual-server/yarn-4.14-support.patch
+++ /dev/null
@@ -1,32 +0,0 @@
-diff --git a/.yarnrc.yml b/.yarnrc.yml
-index 597597bbc..0ff5d2399 100644
---- a/.yarnrc.yml
-+++ b/.yarnrc.yml
-@@ -6,11 +6,12 @@ enableTransparentWorkspaces: false
- 
- nodeLinker: node-modules
- 
--yarnPath: .yarn/releases/yarn-4.13.0.cjs
-+approvedGitRepositories:
-+  - "**"
- 
- # Secure default: don't run postinstall scripts.
- # If a new package requires them, add it to dependenciesMeta in package.json.
--enableScripts: false
-+enableScripts: true
- 
- # Supply-chain defense: don't install package versions published less than 3
- # days ago, giving the community time to catch compromised releases. Trusted
-diff --git a/yarn.lock b/yarn.lock
-index 479cebb2c..9d78fba85 100644
---- a/yarn.lock
-+++ b/yarn.lock
-@@ -2,7 +2,7 @@
- # Manual changes might be lost - proceed with caution!
- 
- __metadata:
--  version: 8
-+  version: 9
-   cacheKey: 10
- 
- "7zip-bin@npm:~5.2.0":
diff --git a/pkgs/by-name/ag/agevault/package.nix b/pkgs/by-name/ag/agevault/package.nix
new file mode 100644
index 000000000000..56dd08d45e38
--- /dev/null
+++ b/pkgs/by-name/ag/agevault/package.nix
@@ -0,0 +1,35 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  versionCheckHook,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "agevault";
+  version = "1.1.2";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "ndavd";
+    repo = "agevault";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Uc4g1dBGIIXciTbZRi7ADfQGiGNe0447kZ+unY1L+w8=";
+  };
+
+  vendorHash = "sha256-yt4K+EcoZMJ36E5qolZdbDoeWp1WhVzppVx6nDrFq2s=";
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+
+  meta = {
+    homepage = "https://github.com/ndavd/agevault";
+    changelog = "https://github.com/ndavd/agevault/releases/tag/v${finalAttrs.version}";
+    maintainers = with lib.maintainers; [ ndavd ];
+    mainProgram = "agevault";
+    description = "Directory encryption tool using age file encryption";
+    license = lib.licenses.mit;
+    platforms = lib.platforms.unix;
+  };
+})
diff --git a/pkgs/by-name/al/aligator/package.nix b/pkgs/by-name/al/aligator/package.nix
index cef4597e0a37..cacad509d7e8 100644
--- a/pkgs/by-name/al/aligator/package.nix
+++ b/pkgs/by-name/al/aligator/package.nix
@@ -6,14 +6,9 @@
   nix-update-script,
   stdenv,
 
-  # nativeBuildInputs
-  doxygen,
-  cmake,
-  graphviz,
-  pkg-config,
-
   # buildInputs
   fmt,
+  jrl-cmakemodules,
   mimalloc,
 
   # propagatedBuildInputs
@@ -57,15 +52,11 @@ stdenv.mkDerivation (finalAttrs: {
 
   strictDeps = true;
 
-  nativeBuildInputs = [
-    doxygen
-    cmake
-    graphviz
-    pkg-config
-  ];
+  nativeBuildInputs = jrl-cmakemodules.docsNativeBuildInputs;
 
   buildInputs = [
     fmt
+    jrl-cmakemodules
     mimalloc
   ]
   ++ lib.optionals stdenv.hostPlatform.isDarwin [
@@ -82,7 +73,7 @@ stdenv.mkDerivation (finalAttrs: {
     gbenchmark
   ];
 
-  cmakeFlags = [
+  cmakeFlags = jrl-cmakemodules.docsCmakeFlags ++ [
     (lib.cmakeBool "BUILD_PYTHON_INTERFACE" false)
     (lib.cmakeBool "BUILD_WITH_PINOCCHIO_SUPPORT" true)
     (lib.cmakeBool "BUILD_CROCODDYL_COMPAT" true)
diff --git a/pkgs/by-name/an/anki/missing-hashes.json b/pkgs/by-name/an/anki/missing-hashes.json
index de1720fac5bd..64d7b9692a63 100644
--- a/pkgs/by-name/an/anki/missing-hashes.json
+++ b/pkgs/by-name/an/anki/missing-hashes.json
@@ -1,62 +1,66 @@
 {
-  "@dprint/darwin-arm64@npm:0.47.4": "67db15f5ae385010d1d80435c1b856ffe461739ab5e9bfb9972d21ef627f610b4aae40d7c53985ddff7d1109e8fc3c283c5a3c0d529b4b010e690577b7d0a36d",
-  "@dprint/darwin-x64@npm:0.47.4": "fcbbb05193c9174eec7491f2bc4551681099c9930c6ec1bab96699031d6bc83a417e07d332c8e1b4881d18a2814dfa08b1723066ead0d2e93833300ada81ea3a",
-  "@dprint/linux-arm64-glibc@npm:0.47.4": "9c3d6afd31938f51fe1da6b6aa8f4007c674667ee51edffa8ed92f9ea343b08b3df779f5b4d843363eb656df164ecc2f337b929446e5e9151a1c783d42fef03e",
-  "@dprint/linux-arm64-musl@npm:0.47.4": "af08edd5fed8725daf6cc49ca5bad03bc6e550d7fa42b596fd3fdc2c5b15013f83a4ae36ee0986934170e18148baf5c4f12c414fba09360624e1cdcf957121f1",
-  "@dprint/linux-x64-glibc@npm:0.47.4": "215c4033a6f8b0f73cbce552c9e0b39a16169a82088b293bc14b54fc5115de8ecb4f703c943cbf0f9c10375396ff9aed510ed2476723fd31f767c51b408457ab",
-  "@dprint/linux-x64-musl@npm:0.47.4": "c8b4c979a92fe897220877b40d59aa6e899ca2a39ce5368ba181ef3c3a376a119f4608b2a5e5271d1d811e055882cad86b890abd91970a32fb32ecfb5bbebdd7",
-  "@dprint/win32-arm64@npm:0.47.4": "5278a87a006758a9fe2b870a571895a6b19afb938cff35a180f192413ddfb8a4b612fcd1817c92e03dc0b587ed0c8ff750213c59d60ef3f0d02a4e2a4c938c5a",
-  "@dprint/win32-x64@npm:0.47.4": "5c5737f28ca10e51f3a548ad0160868a0b643f56a32eae5c8c151944ff47cb79aa109630c1ecf458233c2a3b521d5d284d3a25b60bbcd38885e7908f0db25d16",
-  "@esbuild/aix-ppc64@npm:0.25.3": "5e3ec55997c8d3c9c0fa565cbd04f1566795fe47626d63f6a593a39190402869a2561c772d1db5621719fa9db174f4cbc201032447b97a1cc28e69a9426a893e",
+  "@dprint/darwin-arm64@npm:0.54.0": "0fee449c8b7173aadc309902b910d7835a40eb7932dfe726bdae8c0505e9c2954f5f513686d22396b958549023d2a468a47c9211b936c1cb9a8ceebf22938a98",
+  "@dprint/darwin-x64@npm:0.54.0": "8d6452922a2ac9b2646333c18552acc682e82af58df3ba182389bd1eab6d94b756818da66a9563f9eb1c9a05c9c61aae58c4dcf85cfbcf3906331bb7c2e7fe5f",
+  "@dprint/linux-arm64-glibc@npm:0.54.0": "727d4fce736752eda9ef3fb8f70e5147acf94689d2d468a22dda6aab2d90f6cdca3687b271d7a83f86e848e9c36f79021d393e86d56c91a1bbf69d692e7446aa",
+  "@dprint/linux-arm64-musl@npm:0.54.0": "5e043caabe2f4134ea36a42ddc607703fae95dc682d37211a187aac548fdc306c49df199faf347051f09e8eb3a725e520001b0cb570b29497fe1ea1dfd791ae0",
+  "@dprint/linux-loong64-glibc@npm:0.54.0": "df30fe63f1965c4cf6f3ae79b82871987d9e11eda007e4201887a911871228f519097c724c00d697dceb13a56b0c1a515e65f3f52220012407017dc2e54a1832",
+  "@dprint/linux-loong64-musl@npm:0.54.0": "a77c13a8492b24ce54200e1672b7f70949d55f620174284479c6e4c03aa0c478c520f5553922f36bd1cafa67a0d5272f4d304eca6ae16e9644aa6bfe5eab6771",
+  "@dprint/linux-riscv64-glibc@npm:0.54.0": "f391c16d1e0d7323640405995e69ede5ef3a8d1422a53d94a2d2c8f11ecd10e8c031f73a626afad17bc7427350bc5813530dc272db7454dd8849f26eb3cc34c7",
+  "@dprint/linux-x64-glibc@npm:0.54.0": "0dafd406566b141a8d3b98f5411927934989c289deb943ea0c3a410a79c9e9f299910b0029fd08559f434d6908236a3eb4d6d99aa7ed4f8a0741ad6ac68dc8fd",
+  "@dprint/linux-x64-musl@npm:0.54.0": "a486e256e2b5b5ae3e698fbf1abb91897c0e46610c7eaf901daf87b8e695eeb8677a733549ec50a6fe85c0b3efedef65cabf8384c2dac4b7249a2c35e7fab640",
+  "@dprint/win32-arm64@npm:0.54.0": "4855dfdeecc48814879cf97966932b593ea1ae9717dc2923c31d49f0b7c8de3ec42308ea2755be9c37f8480230b8a503a603cbb21794338025db1f0de0a5e007",
+  "@dprint/win32-x64@npm:0.54.0": "7183a7902dfe9db91ace0d9e69177c21b4567e780f9676998438c6fdfa7052c8bdd468cd9b5b4d83ed341df6619cce56f73a7984e62635fcaccb25360209f19e",
   "@esbuild/aix-ppc64@npm:0.25.5": "fb872b34a2843293dc60e809968fedf93e0d8f7174b062decffae6ba861eb56aaea0cd0aba87ba99162ceb2a690f0cde4fc29c000b52c035e40c91ec7861d43e",
-  "@esbuild/android-arm64@npm:0.25.3": "d840843df6b82cc918abea3e706235ae256caa7b6feaf4b78f47d97cfc476ffc905d5e4263f066ae96dcc997bdc4e33458ed3436d6a38d147cd401071dc92d10",
+  "@esbuild/aix-ppc64@npm:0.28.0": "bedc005d10511c3ee50a02edbb380d3134d34f038cb2638257cb9344aa399276e672c44f7e7eb395a96ccc843e0a5903eb0349f22be30af49ae338ed222d5662",
   "@esbuild/android-arm64@npm:0.25.5": "c818e799b19b5587466bf68a27b578ccaaf866c1d144573fbde7659e3fd3f555422ec3e67f5bd186a87648957d1b6e74df4f847edea7219c16979c9916f36e91",
-  "@esbuild/android-arm@npm:0.25.3": "185f4827b86ebc797ec74a98a75256a401eda92af862d217c10268816e8c4feeb49d82e965916dd2df238d7f3eda98325085e8d36cccf63c6cb2d3a11b3c6ee0",
+  "@esbuild/android-arm64@npm:0.28.0": "76fa5b984e742b96e427749530e4e973b8da60950163c2dbd766c75ed4f616b7f06d08f01d5b6bd06b6a25cf59b27c3519a4ba343792003b5fcadf463b3d6575",
   "@esbuild/android-arm@npm:0.25.5": "a5384933f9f2ffcadce2be49da6ff43249fe42f32a04071316434e9f633fc20c8d4029072e9a53555620c3531045786297607b852579eee30b6dbc3bc9d98cd9",
-  "@esbuild/android-x64@npm:0.25.3": "0328941aaedafe3e0164a93a0e57178ca5fbe5a336709bd24270329a504bdb76bfc4b7a63e07c2f6fdea1fbd4b25d53320ca5665351d477e8e77b2fd071732ee",
+  "@esbuild/android-arm@npm:0.28.0": "b1e649f838c94ebac74e1c10561f010608f7226c0e444b4e178546cf6295bd46d691c52542bbe01598004e638bf9d75ed688b85b6ae31df55f2e2194482733ff",
   "@esbuild/android-x64@npm:0.25.5": "8ce115dc7e1e6735f23b4aadb2dfca29c0abd8577ce34802ea3d017a64e388928949134fe225dfe190babdc5ec01be5fc7794eca84738cdefc12c5e3789ce43b",
-  "@esbuild/darwin-arm64@npm:0.25.3": "c10ed8ec813cad217666f556481baa0c4286f2a0567ca662fbf3088cb960421729eaf6b5a8504b9c956a1497f88141549af5f7c0f907a27a2c546e75fb4c678e",
+  "@esbuild/android-x64@npm:0.28.0": "9b611b9099d552e755d7b6b28dc39c26aad759ceb9379761a0bf2dfe6077c2437aea784152aefc711166b55c4159f03e6e2f39c1c71ffb923c5ef75c93f7282b",
   "@esbuild/darwin-arm64@npm:0.25.5": "a009eab62f2bd284a6f2001d5e08217059186ffc16907bbe873e1de40fe9b5ed92c0db2f4c4d0dc41545838850a430c8f2f35d7bdb9cd01a1a04293acd97afca",
-  "@esbuild/darwin-x64@npm:0.25.3": "9828c988e7a54e63c7afca426348bd09d5c70b4ec799908ec5310347a14c94900f58e14f2b2eeea87d68b382078977bd5d5629546b307e8ac093168a7c72712d",
+  "@esbuild/darwin-arm64@npm:0.28.0": "09ecf7709c8d86f35624fa9d3475ccb3d1beb9704ddfd71b71adcefc23c3aa8ab95263542bbca52cb0d50f23cf831f468968978969184e1da00dc84cd8c61953",
   "@esbuild/darwin-x64@npm:0.25.5": "cac8021a7a0c549263e076913346b35a5bb81f76ffbc1abfad5e7b67303f013ac0c76f111bf624ea8447b327ec86c18a60c6ff307d743a2269f5d47313f5b2de",
-  "@esbuild/freebsd-arm64@npm:0.25.3": "4b20547db6bc1dea0e14f4bb96fb474d6e80e8d01c4fdc141d77a1693be06aee5ea3d4968f80276f87037086822c336defa358cb315bd671a7af9c672a081811",
+  "@esbuild/darwin-x64@npm:0.28.0": "ba5ab146a8542f093bbe752fe85402894da18b304ae1f08eb455a864f124c61e1e03f8ad18c28eb2b9c1bd930c54dc773ad32b7ab4c7d7eb31f7be04451e74f4",
   "@esbuild/freebsd-arm64@npm:0.25.5": "d248e7103b7094eb4288db7c9a78b2905a25b4a957f2b945531ca88d3394f45ceca2343a7c84954734534af6159bc741eb3d5c1ed9df990f7395337a1b14192c",
-  "@esbuild/freebsd-x64@npm:0.25.3": "083edc9e2de8f3dc407b52836b49ebea29d0d543786c706b744c77646f5fde53327b786d156b79b859fb61eaac191733d275a183807c8599d51cd4416d00f5d6",
+  "@esbuild/freebsd-arm64@npm:0.28.0": "8c05cebfefb0c9f481b52ce8b0290d0e5f6fda17939e27d60d6440c00312a5a10b82ca6e8ddbc19c9a1a2973282c9393958b8ace0512741d76429465d3bdb415",
   "@esbuild/freebsd-x64@npm:0.25.5": "8a7be0740f07f5dbb3e24bf782ca6ef518a8ce9b53e5d864221722045713586d41774cbd531df97dc868b291b3b303c12e50ca8611c3cb7b5fe09a30b38285eb",
-  "@esbuild/linux-arm64@npm:0.25.3": "bad206365faf883e5f7615daef3d65b7a82d6c9e401fd67353352c532a42310dcf6491dbf0e094c8007fb6d73e45183bb63cc10585cfaadc1386fbf78c529dc1",
+  "@esbuild/freebsd-x64@npm:0.28.0": "da4a620d46b73b610dccfa8c80d110175bb207e0a6bd1bfa96f98d427b3d14bbe54096ccdabaf10fb189a21f6555f7721737106d30ff12933c08ef1aee7adac0",
   "@esbuild/linux-arm64@npm:0.25.5": "ce3c8fca47cf0a92148fb288eb35a5c4a4dcf7a700730b3a48fdd63c13e17c719eb6b350378203fba773477eb5be637f47a6d52c5d4ce5bdc0075ee917156006",
-  "@esbuild/linux-arm@npm:0.25.3": "4659e20bf62737bb6ba5e54f36f87260e8092f6c55aed6a73457cb002f7af990bb205ca48d0c19078540a210b65a1db1a1cecd7a4ed06f4fe4eb1c0d27c30bd0",
+  "@esbuild/linux-arm64@npm:0.28.0": "589f88f21542ff9822fee3f6130051f19e19ec6714abc48d39795b201585c4f0e8dac42ec10a3e61521a4ad499abad5b3a8a8424d871ff5f464b86ba1bae8a65",
   "@esbuild/linux-arm@npm:0.25.5": "cc81ea76ab86ed2a837c9da329f7c63412d288dc0aa608c8dcdf51705dc93d5b7f966a429be4896babe611074e5898c7e6c8e07ad7f50123a05478975294fbb4",
-  "@esbuild/linux-ia32@npm:0.25.3": "96cf22e5979c95aff499cf0ebd576e21964d9a7412bf5cd4eb1ab71cb555aef2b4d5d3e8aae34ab80354125f1ec571f0ddb3f728f9e19cebbeceff75bb9d0686",
+  "@esbuild/linux-arm@npm:0.28.0": "429f4d7b938f2b72884f472bd9288c91899cacb4bf9c61df293dbe9e3c0368cc1700171cf86c3051df9e6ebdc8c1366db6a573995d327f156de63fd28a23e3a7",
   "@esbuild/linux-ia32@npm:0.25.5": "bfed6750923afd56148f658f6ec8995479f5115116dc212ecb9e4c556064422e22eda855177e7c02cbc945494e4db1167101918c5fa932278115db2c7025a3f6",
-  "@esbuild/linux-loong64@npm:0.25.3": "9d12d8deaf0bdd5d64c062c65eb0e3ea24ab98b1e6ec34b2b14bb3902e5e3504442c3273f6dc05228f6104650ddaf0d37ba86033f19e7b065766c3d528c0f6a3",
+  "@esbuild/linux-ia32@npm:0.28.0": "45fcf60da75745f20ec6d98914de1dbb6bd97231a3d9fa1861a47ae43eb7db23780696530d17d68ee55693d189672b763cbdb9d0ad1ee5429ee9c7168a23dce8",
   "@esbuild/linux-loong64@npm:0.25.5": "e5c20140bbbdba53f0d86dd72961ed73e6255d2ada2d3a626f390b352170605644822ad7592f695b6e520edcefe0c5f6ba19d10694b5d11d725745d9792bde01",
-  "@esbuild/linux-mips64el@npm:0.25.3": "f117b06fe2d39b08571fd84ed191801cc9501342a514d5d83494219ad14bee9713b6332d0836f192c224b1f9a01405f3d6e2d22952e399bababd527bfeac9c0f",
+  "@esbuild/linux-loong64@npm:0.28.0": "d7a5710068e5909661f48c276d82c836b9b6131076e550c83d83e63db3f2538ecd3a3694dcbf8129bb773f7ca580b2fbef38ec15b9028d246cbc0e77a1a5946c",
   "@esbuild/linux-mips64el@npm:0.25.5": "6b3559517efd0dd1301debc7af7e275b055859c26facdda2e229b1aaab6ebea4c480a1da151c46211ee4035d95bfa7f0cdacf735b57ee99d41b69c77357310b9",
-  "@esbuild/linux-ppc64@npm:0.25.3": "ef777920724eecd3bb20f9718901498001ed8b28ced1a6c9a8e947c5ae412d31856761556b9d89bdae1cd9af3ff53f9c83756fac3b4e99b53ebdce44c5ff0cdd",
+  "@esbuild/linux-mips64el@npm:0.28.0": "1aa72c485a56cf432748b8e0527e86a88deda0574e13d914dbe657dc2878ecc8b441783bd6c1582c0359b5a33d30216c0c94b3c9c17e5ca975fe6aa4b80aaa2c",
   "@esbuild/linux-ppc64@npm:0.25.5": "a1a1af99d758efce928335637924dcd8ddec4201af51014e1f831b012d53a0a673b1e0c31036ec9e8c5a0311439283419ec8abdfc67ecb245fa7f7b653006ed0",
-  "@esbuild/linux-riscv64@npm:0.25.3": "87d71b5c361f7d95c173f8c1051e8dce165ff3d6100ef0e5cbd090f8249c58d7f5a38e93774d081afe4fecf3a6e725102dbf9ffa51e5b4960ccd1b072cf86e10",
+  "@esbuild/linux-ppc64@npm:0.28.0": "306bf03b0f6fd738bf74d9dfb23b8937227521b832fd901994600691b1f1fadb698a67a9990713b72ca1114715f82f0df35877281945e81b824ed437bf432742",
   "@esbuild/linux-riscv64@npm:0.25.5": "6cd8dce6723b73e0f89898ab6cd52e0d009afdacdfc0d5529134de7b832c92c2e0421fbb5cbfc0e0c0b2b00a9b1ff2c4cdb9695b2c535ebc174960e986c727a7",
-  "@esbuild/linux-s390x@npm:0.25.3": "9972d82725c5818fca8ef1625c3f55a8033c2d678c809a01580780fd5171025e4f90b60fdfe6ff925a1738bb6cff85dea104fdce57badf0a270ed1d290345e23",
+  "@esbuild/linux-riscv64@npm:0.28.0": "c09c0f0ada23a3e55767586f3a341958c071d0b9adfe5460986e5e69f7397dfe2e37e2896a1c61092cececa929241d37f19b75ed608f5f00d535cd3b24c4ef1f",
   "@esbuild/linux-s390x@npm:0.25.5": "31b86dbc93d19eb362bad3353e65d6da771118346e723582d06c05f1b6ffad1c3765001b5215ef1e8f0c2bb29130d98815359bbc88e5c08304354d5a92e6ea94",
-  "@esbuild/linux-x64@npm:0.25.3": "434e21ed68e25e2043295fca9c382461bf50f031c45480a1482f297412f95ebfb183339001444e5d1e6b14358571c395f17ddb8bb9bbd22aefe82740463bc18c",
+  "@esbuild/linux-s390x@npm:0.28.0": "40a939574f16362a5c9f1f82c20a8d82686efcf5f77e4b6c7e5c05bdcc596d8ce2ca188e6e7fa4772d4167bd18da630a3a3b3b70aa28308d3a9d1d48ff112feb",
   "@esbuild/linux-x64@npm:0.25.5": "f878a3e40edfd8a50de94bf982a9eaf03e636a0332af163a6c905490063aae652384fb392d4765c4338fb6f991034949c92ec768ee65c3b2fceeb494b89fe8b3",
-  "@esbuild/netbsd-arm64@npm:0.25.3": "4dbc6ef9a5ddcf44f2df0fe39c662189eb4cea38fe5778ecc81cc29af68fba2ac077c5b308ad84b8263bb6bea9f03732507b79966d051d860a2344b8fe8ddc4d",
+  "@esbuild/linux-x64@npm:0.28.0": "cde673ae0b9945bdc665c68b2df7ebe39d37bcd388c8e607ed4d369e7b6123ecdf3d1feb097ae13403d83c15952cb952d16f96146fa1a52405f09ec0e438d0f6",
   "@esbuild/netbsd-arm64@npm:0.25.5": "941c5e28a63a93f19122271b5490e196db12815702c2266c6d66401b6909a4364ab889611ba81c5359624e3ce61f0505a680a1179ed9a555d1415fa1c485d75d",
-  "@esbuild/netbsd-x64@npm:0.25.3": "d42fca551f67c20b18d11cae67fed9675b90293c901b3b152d6e0c1153db1443f7b8a4f7786797b1946d19881db64b50f32e883d756ce3fdf8b844a1c71611f3",
+  "@esbuild/netbsd-arm64@npm:0.28.0": "c9738a8c3cfb817d9fbb46aa52fa532a0a74dc6d7d4e260e1eb8fd0acf729208932ce7f43e2c2dbf6cb1ca21f5db55f329936f81ae871953ff0e67e42d8eb362",
   "@esbuild/netbsd-x64@npm:0.25.5": "edbefdd88ca24a373497a7c8d1fdab418827ff89c6eee1c574159dbb4d9174552aa87753f35525a894964b77c14b012164ec5582b9f19dd4d6c1f5d45df411c7",
-  "@esbuild/openbsd-arm64@npm:0.25.3": "3aee3b70a7f41ce2355d93bd955718683861ffe9e6b5550c37caa28b8b16e6414222c806f413c37eb553c3990a22b8fdb88721c619f553d809db92cd070ed383",
+  "@esbuild/netbsd-x64@npm:0.28.0": "c0be9ca72b5c18279e02e63a17a7fef428395f48fc1e0e251622c3cfe8a70b15cfb0bb814d355318917461a4e20d11723b837f6e4d1f1c0ce44e915ff80b3047",
   "@esbuild/openbsd-arm64@npm:0.25.5": "d44633a374c109d2fb9c678882016e3ec3d79f0c5f21a6e6fb0114ea709bc539200b037a4e3ec52304eea2f8c5957bf16c6f0a7af5cfde41b652c4bac604bba6",
-  "@esbuild/openbsd-x64@npm:0.25.3": "d158b78f95feb68c6217f114a3178058aa93933e83897546ffecb6b9ab8e0fe5fed69940651b6c42c1ac9064a42a29fa1c2da316dc64ab146107c2c2599e68c6",
+  "@esbuild/openbsd-arm64@npm:0.28.0": "fda84f2526cb29d943047f68e725c688e4a89ebcbc224e19ddc3479509783cd254e581b19c8fad1a28e55e193512f37842252f36b06b3df2c005a0dbca0a0d84",
   "@esbuild/openbsd-x64@npm:0.25.5": "efc4641ea653dedc9886f0603c2e7cfc6fbe94c34d4cdaee9b060a8b9d8143d1192c45da93b3e802af2c26f72ab1ad3a3fad0e0cb297d06de55814fe83ccd32c",
-  "@esbuild/sunos-x64@npm:0.25.3": "8b6bd4c43c023d0dcb9966349ec1f2ccdfb6163aea2c1c06060806795ed1fb083e22cb9e80e7853ba8c62a74d1bafa36dabab70881e7d6782c2dfb237f93bcc0",
+  "@esbuild/openbsd-x64@npm:0.28.0": "7a67881986611c0b851c246c2ccdb445ecc5e587c70efae0165cd963d149ebfec3a7b6820338cf38dc70cee95fbd17e80dcb636c7f1de113c9a85dfe867a0d97",
+  "@esbuild/openharmony-arm64@npm:0.28.0": "8cd175332efcedc6b69a980410426cbb7c76ed264f28cbf16cc807938e29f39c03353901179a88655377c39db1860d9df5c76294f2624a2db75b387334e9baa3",
   "@esbuild/sunos-x64@npm:0.25.5": "29860663381b6098c0fda6f69235407654dfad953e83b3f9f06a270950d5c37da4ca60a4b5915b8e2606d468b560be6179870f64a22d5b046e8a930c31a7b554",
-  "@esbuild/win32-arm64@npm:0.25.3": "c49c827b8cae7eb2a4a6b38a1321c0c1bca1693826c7268d3c3b9361df360b897f583e91b9acff3eeb0c9f477d39c00a2d89c71436b64091442e74011a41f2ed",
+  "@esbuild/sunos-x64@npm:0.28.0": "99820c945c05651182afe4ec5a1bad80790775acefa403f25ad48ed9638efc573f3bf6fabdd273556854c609990a8a0c8fda7b140edabe3322d6a3ea77734d9c",
   "@esbuild/win32-arm64@npm:0.25.5": "a77d395251c8a62ab0cec07d5230222823fa02fbf3ef008d94b5213a335c9f949872c3f1c2f947abaa28098b669018e429af42f59616e049860a0072f3b006de",
-  "@esbuild/win32-ia32@npm:0.25.3": "84acc7f9d65de4875bfe09976620e94327bef444b1b8a795d98173ca777a2070b775763bd927ee475503455b2c1109bf5c911fdfe7c73de7d32124ccf3858afd",
+  "@esbuild/win32-arm64@npm:0.28.0": "84314f636841e4568e4960e4ee50e66c5d4d74fc274d256f3c903904186014bed197316c8bedb3c38f9855ca8ad9c4ecc1c6e64df4c40ea6cd5f4cb7739ab66c",
   "@esbuild/win32-ia32@npm:0.25.5": "ff1b6cbe835082aef5b93c3e2012d51be431d05c6ae5f90a5bc89687c687e8e2340c262dedddd124b27b511616bbc4088b5a4a949d3147f677084dc6ec572629",
-  "@esbuild/win32-x64@npm:0.25.3": "2b88dffa4814240cf7d88a6dee449361ae411a0d9cc6ebc327de59f4f6662a65fb2ef62fa38258bae422933d97a416db50ec4f04875ddf61d15f47bc0ec1ab22",
+  "@esbuild/win32-ia32@npm:0.28.0": "41296dae0b5e74ca689460cd510cb88df7b92d0c027130c373138e09847dd48eb685c2c825f36337a7bff7c6eceba2cb75b7f4f76d78e140504159a59e2feb89",
   "@esbuild/win32-x64@npm:0.25.5": "266e69e8d37bd4deb77443588e49472e4e9791178cb39e1692eabb67cf65d8e85a932ac468e7ebb2072c8a9ee23ad413c8f0f7d954c474f643cedbbf7aad952a",
+  "@esbuild/win32-x64@npm:0.28.0": "f2d53b57cb338ddf0bbfb5eb64dc95bd0b686817eee8ab2307085c04f18e1d9d5b27e1b74f327cd46a8f246e3df9fc6ee9158ab9977255b7d4a511d438e411de",
   "@parcel/watcher-android-arm64@npm:2.4.1": "88cb813d54227fc25e487f00497cdd58974a07e1c22a5cc7cf922983d908b460e0876ec0c9acf333a5b6f5623dc50729f8b92612970bfbd5a12d4e5cffc025ff",
   "@parcel/watcher-darwin-arm64@npm:2.4.1": "342502e0f175dbd0649f2edffc9f7d76823668e12184a62d8e542df454a067bcade1cfd298975bf7238a7575a9d721c6d7ccb0e8c9102dca5394c9fef2349561",
   "@parcel/watcher-darwin-x64@npm:2.4.1": "175868753e64ea7bc70993a05a34694e8ad85d9d4a08bf9a36573925777369a0701f2971d6ff14f9ed525c9b7725ce40629cad97fd7c67dc653f247884d99a62",
@@ -69,24 +73,29 @@
   "@parcel/watcher-win32-arm64@npm:2.4.1": "35fc4e90eb74a4e583377821775d5f90269deeaa61221fbb69127b3151279a37d4038df91beb38e51367ebb9d92f6b0295b58c0e4a7ac3ecc0adb0f27c935c69",
   "@parcel/watcher-win32-ia32@npm:2.4.1": "0b12602039c1ebb6ea711bde1996ca66d814668a02d33b2b949c66111de9e3fbc6f4d8b9b6c985affa1eafa6089b4c13b0e0db8f8d3a7a2d19849c7d7f639f1c",
   "@parcel/watcher-win32-x64@npm:2.4.1": "56f160729dc8c47d940187b4a2e9a4100be77fc2acc2dd5e4cb527d036676eecba454548cf00fb6d7c44757e42d77dc4d2d8ff19c1ce64759a7fde2097aa6bfe",
-  "@rollup/rollup-android-arm-eabi@npm:4.44.1": "ec8b655e2930312fe94eded1cfe439901bbd442a891494a512259caa0bd936c29b9d06debb061bece88f5d41f619ccb4d0d77d0fe190f1a5c25a3a1a724d255f",
-  "@rollup/rollup-android-arm64@npm:4.44.1": "5eb5c7de31f435afb97feebd06feefb93c2cb272002240b8530c1f274436ea578d8320d67fa49eb1409ddb20a47219efff59a09b22a426584b881d36adac7bea",
-  "@rollup/rollup-darwin-arm64@npm:4.44.1": "93cef94c44d1baabc5346148d59ebb5d640948b2895bbc5de6804908999857f331c388eb449f98eba98d2b239492e91211accee7eaf4b579ae3c007705d76246",
-  "@rollup/rollup-darwin-x64@npm:4.44.1": "d235e7f40080cc19295d45935b83a0238cb66962e7d6d4af0eb261012d80bc344fe073ec9dcc3d39092138a66e7a69c4e79cbac7c6ee49b8329b80d12d52968f",
-  "@rollup/rollup-freebsd-arm64@npm:4.44.1": "e26f6bf6914e190d72f74da4c8e47c27661fc99f6310f80e664acfcd6262f4981ff043ff53ccc06dc6a232d481f9f0055e32dba3b65442259316b18fc0ea9087",
-  "@rollup/rollup-freebsd-x64@npm:4.44.1": "d06455bfbe8bf71996864879b8b9b4f95617adda959a5a143be0df9a5bf749cd52740a9a3b2548e67be00eef9ccb99ef04368a052afceae2011e2a817baf4156",
-  "@rollup/rollup-linux-arm-gnueabihf@npm:4.44.1": "1bb6818627de1434f889c8a6bfc13a0205f25055bcc9f39483e445411c753111c7d082cfca2affdeeaad46c3711e3ece140fabb7173ef3cd19446d3682863854",
-  "@rollup/rollup-linux-arm-musleabihf@npm:4.44.1": "6e9eff8ad332d9923a7cadc0ce1911c4e0a2f8457a8131485f0bce241bb7c223dc811b976ffb9ca08d4930630c647219dbfcdab639c3a8bef075b68285c01960",
-  "@rollup/rollup-linux-arm64-gnu@npm:4.44.1": "a5382c59bf531afd774b7de82d1600bfb5915a0708ad6c7099ffd1af657b813a525de18902178120b247c95e21487f0c96a8eecc8d9ae9163da12ecb4a5ed3d3",
-  "@rollup/rollup-linux-arm64-musl@npm:4.44.1": "44944da3785383b8cdb5f8b4eb627737edc10e206ec66ec6a762f75f2dcc12dff7bfaae864d37941d5d30c50c8fee5f5a2b12c19627b356e0aea3186f80e2d48",
-  "@rollup/rollup-linux-loongarch64-gnu@npm:4.44.1": "1f7502f1777622abb717a3109bf69907ba46a277a6ea33b99d6cea8e33f74b6d8a979ac5bfa33398f31211687adf7458ef9680b7f2e3523d82088a3d59857c8f",
-  "@rollup/rollup-linux-powerpc64le-gnu@npm:4.44.1": "535c564216655518831098e5481f06b62452fad69209409776f4508e9c73265dfe531983a64b47c9090b244668b4c023c906061eee5a4c3c29c1c9822f1d1209",
-  "@rollup/rollup-linux-riscv64-gnu@npm:4.44.1": "423cb7d6578052d23374fe2ec3b996be9a420785fe324a0d1aa38e9e9d3f4b34ba3673f4ce5f622c7ed99bf82c4e24f55469b6e75deb5f27eb67369c052d8a9b",
-  "@rollup/rollup-linux-riscv64-musl@npm:4.44.1": "03a0530b45b554363296e938493e263aa26c342080aea72c9e2b673fc42d5ed2d9267d283ef136c71da64bc85a03fd360988aedbfc68029bd948567afafe71a6",
-  "@rollup/rollup-linux-s390x-gnu@npm:4.44.1": "93fecf841caf9621a99b8f0938d21a261ccc1ee7dced2ff47de659662a3bbbc0e3cc45ef38d3aca84918ecaeff51188a68a109db337892518ccfa393c305fafc",
-  "@rollup/rollup-linux-x64-gnu@npm:4.44.1": "b401ab19f21fb0f8ff50662a9fbe823d4c7904fdf0f8de17c3338107e3974ac89ba1189b7c6f0f2ff8734cfd07325bcb5e5dc6a5d53df076fe34757233063a72",
-  "@rollup/rollup-linux-x64-musl@npm:4.44.1": "87ef16e6ca9ae5d398f5b7e1b58033cf1b5f87efb0ab7c4b16dc7dd213a1b3a9305c2624b11e89539d75d146912eb7a41a139270464fc617fd1c2917e391fc56",
-  "@rollup/rollup-win32-arm64-msvc@npm:4.44.1": "5f4fe05f1c778d839ce22c2b1a1419d8c511fd10793326dab5a033978f259733b6d042519a26ad7df3f5b2cce75bfc2d2600d9c43ec9cf16d6acf105bedf00e7",
-  "@rollup/rollup-win32-ia32-msvc@npm:4.44.1": "5639edf6114f38055489c35f03f5d039b4719ae50309db235dc176c026fb8eb5bb028e0db2769ed4faec34722200f6a31df62c23a0f8c90a13568685a6f00140",
-  "@rollup/rollup-win32-x64-msvc@npm:4.44.1": "d23d4b88a0a96965ba20e75bb9f5bea6e22cab53b9658a54317634363a64aa43dd1ff66f569d0e4fecc34d60d554a64ae905fd85cbc436f78544d6f9d550ebe2"
+  "@rollup/rollup-android-arm-eabi@npm:4.59.0": "2826ff51b8b07599cd7c2e7d2fe2e7c2e3af86fcfeadf632ca9d3f27d016b7dad5942644affabde024d1b27c279b94dcf9a6ae4c45863c7305bd58471dc1a94e",
+  "@rollup/rollup-android-arm64@npm:4.59.0": "b2a578f38602c9db45e262a9d5aacd19816e141dcb6d710e6353b70a02f5e933c4e4e46da9ecfcadb8bfc1daf4fe231f441f4c4fa069a8eaf38a5ac6f3a0462d",
+  "@rollup/rollup-darwin-arm64@npm:4.59.0": "3cc95b3da303d2a7a57a98fe560e257cd145fc94a89db4a98af89ac1fa84b6885af940433b3d32269c261da6bd11e083f0388048e8b9724606e6e3515538cfb3",
+  "@rollup/rollup-darwin-x64@npm:4.59.0": "0f77763272fe9cbd8962d8a3231aee1b3d86c61b9550f1820159e5201d3faef3cc2d7f0863d55be5495b92a39faf5063637227698388773d1584c6034934edbd",
+  "@rollup/rollup-freebsd-arm64@npm:4.59.0": "51775730151716411b33649e556a74a2a46a5ca727ad1d31e8b5df7fbf7d791268061ca0a495b36c8f89860250d7593e3fbcf3a2a67c4cdac19fc49250b3f59c",
+  "@rollup/rollup-freebsd-x64@npm:4.59.0": "d4cb336a08634b2107217e276423a95fde1b7bfee45fe8963cf366f6f6db991484a4a4f01efae7bfd86de416f21f967c2252ea79f780e52bfaa4a63263cede63",
+  "@rollup/rollup-linux-arm-gnueabihf@npm:4.59.0": "f69c727132578aa389e8726521e29e8ebf0ff52c6a64b9a1963d50990bce3f8ff90a452d69fd3c27c86bd5afe7281c011118a538108e9e62578c13223896abbf",
+  "@rollup/rollup-linux-arm-musleabihf@npm:4.59.0": "35f8eb802ffc4a29bdf62d8b862d67058db8f9514ea5c511679c5cf2e2d7b1d27b120784873862a6b131cac50df660f1c8e9c72f5b7d1f10550672315e0a24b9",
+  "@rollup/rollup-linux-arm64-gnu@npm:4.59.0": "028f9caabc51ee7256c6f6ba1af54eef0cb7360bc845d49bea12fd59ca0dedc357aa847922f190b9c3be268373703e808d5135c50293b45f04dd912bc5a862da",
+  "@rollup/rollup-linux-arm64-musl@npm:4.59.0": "776dd1c831b89e87f6f0a0286d8ca8f78e9f2a5f3181f9b1b4faba3be5a6e5670533dd54d960c48cb1014edee443ff27f347eb602e69d95983d957e197f8f92c",
+  "@rollup/rollup-linux-loong64-gnu@npm:4.59.0": "0a5f62209161ed05d730a9a4e8d9d705dec17aefe1d69050f4158ed41377cb2554e9a2b6765e48352739c7212b920fd803db00836222a618184ce930afa85256",
+  "@rollup/rollup-linux-loong64-musl@npm:4.59.0": "f09230ee8be94149ee57380f2e968d622601c18b922bf40470c296d04b5c161caa8e9cf84e14f72a4d253447d916ef7ae2d9b6b81f48d105117cc6430d6a357d",
+  "@rollup/rollup-linux-ppc64-gnu@npm:4.59.0": "447c223d4abcafe628546ad41fe28c676d9d06604cb41f3cbb1082113a79c46489117a52a0c8070519c6e62e463e41ee5b23f276576537164f2b85413730d6db",
+  "@rollup/rollup-linux-ppc64-musl@npm:4.59.0": "58d5e4fa5f84a19529e454e23dde39436ae73f025c69de454b5cb5e0b4a66c327e86e69a5812e9dc629c17cb5f4e218a57514170f12ac70beed1db7785e98273",
+  "@rollup/rollup-linux-riscv64-gnu@npm:4.59.0": "4604f76606c4b86ae01f92adddea6cb993bbd819ae4a5a4efdb1aa4eea2bfae25290bdd35bbb1683f87666d99122c62fb41a217a09b19ba8acc28e901cdda20e",
+  "@rollup/rollup-linux-riscv64-musl@npm:4.59.0": "e76794d08db7938f40521ce44e1e4da38bcf516da6a0b9c2c5fc7b08cddb36372103d854af4eef9d8529401aa814eb143f8d69b10cfa4b633bb69edbe39a5a34",
+  "@rollup/rollup-linux-s390x-gnu@npm:4.59.0": "64a101f176a7b29c352d2c51fae1331f457fbc7cc4181151a9d57498ee230c29d444a9c3e470169082a209c9d63366f808c911a0afd8e06dd83e8164214bd875",
+  "@rollup/rollup-linux-x64-gnu@npm:4.59.0": "9933d8f44c8b873ff2a1c03c35ea00abc924ec7a1e232bb37e023bb4f245dfd8050d1ad452efe5addc00f15900bcd04fab4f62cab47d3a6a3123224bd3d49879",
+  "@rollup/rollup-linux-x64-musl@npm:4.59.0": "328a20267480eeb8dd724f2356f79fa400e1383f90827b7c64c5121a53ccc93c228ee9a3646f7510616fba9cb5d34a1b7ce18999ee50602399947770a40cb3e0",
+  "@rollup/rollup-openbsd-x64@npm:4.59.0": "f54636cc4745ce1c0ad31ccdd6201187518252d05d4f0b173c54511925ddf2e7bc6ceb0265e668bc881f44f45061638f3a84183f0787ade03bdd4437595af03e",
+  "@rollup/rollup-openharmony-arm64@npm:4.59.0": "60aceb22385cfc660ae4b0f746d6f2b336438f3c4e784f8714883e10ec3d7a94adff151df9dbd1fdb255576f06530435038cd2538877ed684ca2856e5569132b",
+  "@rollup/rollup-win32-arm64-msvc@npm:4.59.0": "ff8862260fce025b2a8be2c7f19ae82a4dd29e3787f221672b21c699df7bbe3c63b8372647852df9dda2f3fa1a553c3a5fdccb17ddaf3a84566e59f8d3295118",
+  "@rollup/rollup-win32-ia32-msvc@npm:4.59.0": "e63244f7566e663de6b6e9d2e3bbcb23bb46b3aacbd4965d3798e709f039e99035577fa0af30d075f43139a8f83738ebcbb91faae534570fcdc4fb3776c87955",
+  "@rollup/rollup-win32-x64-gnu@npm:4.59.0": "5a2728d880c990bf1c6ba2821deae0bab40471fa5e6a5c2dad192a3810137b76fffe24e1b4aabad67aabfdc1e510fd141f43c00cf9a87dab8b1da4f521606148",
+  "@rollup/rollup-win32-x64-msvc@npm:4.59.0": "e7da947539bb2a0c6c9061f9c62ec67a928fe579563e17f302dc2035a0c38439c7b835b894143a278114298ab636241b6f1b23d61d95c7d1a6488439b68454b7"
 }
diff --git a/pkgs/by-name/an/anki/package.nix b/pkgs/by-name/an/anki/package.nix
index 1b7bacf5b7ad..ff9cd45ea1eb 100644
--- a/pkgs/by-name/an/anki/package.nix
+++ b/pkgs/by-name/an/anki/package.nix
@@ -37,12 +37,12 @@ let
   yarn-berry = yarn-berry_4;
 
   pname = "anki";
-  version = "25.09.4";
-  rev = "d52ca669f6deac5966b1c5035bc2dc77c78d3260";
+  version = "26.08";
+  rev = "666c2c64d4a1772c03948f5b667438da63ddaa76";
 
-  srcHash = "sha256-brwJjsqjiCd+QDZoB9Pv3TJxTTAfDm8KtYFvJhJpELk=";
-  cargoHash = "sha256-qcB+r9VzBz6ACZaXPL26MOxxtb/h2OIuxyc54vUgfPM=";
-  yarnHash = "sha256-wi8e9B0EtRMoyH6KhRBNDHM/ffJ+/0Y4f4AZ7eUcXmA=";
+  srcHash = "sha256-0sqtKiMqw7MLXVFSCT1sKX/VO7q5BY63pJP5OnCE2zo=";
+  cargoHash = "sha256-LQ5uD86ZOKXy9vGbTqPBi3Q57PZEjwQkbHR94QAIVMg=";
+  yarnHash = "sha256-bOgiZImraPXR/gVk9MB3o9GScMGvLvdhc9mLAaCA4IE=";
   pythonDeps =
     with python3Packages;
     [
@@ -59,11 +59,11 @@ let
       beautifulsoup4
       flask
       jsonschema
-      pip-system-certs
       pyqt6
       pyqt6-sip
       pyqt6-webengine
       send2trash
+      truststore
       waitress
 
       # build-system deps (needed by uv for editable installs)
@@ -75,6 +75,7 @@ let
       trove-classifiers
 
       # transitive deps
+      asgiref
       attrs
       blinker
       certifi
@@ -93,7 +94,6 @@ let
       soupsieve
       urllib3
       werkzeug
-      wrapt
     ]
     ++ lib.optionals stdenv.hostPlatform.isDarwin [
       anki-audio
@@ -196,6 +196,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
 
   nativeCheckInputs = with python3Packages; [
     pytest
+    pytest-mock
     mock
     astroid
   ];
@@ -250,12 +251,12 @@ python3Packages.buildPythonApplication (finalAttrs: {
     uv pip install --prefix ./out/pyenv -r requirements.txt
     # pyqt6-qt6 and pyqt6-webengine-qt6 are C++ Qt runtimes provided by the
     # system, not Python packages, so exclude them from resolution.
-    uv export --project qt --extra qt --extra audio \
+    uv export --project qt --no-dev --extra qt --extra audio \
       --no-emit-package "pyqt6-qt6" \
       --no-emit-package "pyqt6-webengine-qt6" \
       | strip_versions > requirements.txt
     uv pip install --prefix ./out/pyenv -r requirements.txt
-    uv export --project pylib | strip_versions > requirements.txt
+    uv export --project pylib --no-dev | strip_versions > requirements.txt
     uv pip install --prefix ./out/pyenv -r requirements.txt
 
     # anki's build tooling expects python and protoc-gen-mypy in pyenv
@@ -276,6 +277,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
   '';
 
   # mimic https://github.com/ankitects/anki/blob/76d8807315fcc2675e7fa44d9ddf3d4608efc487/build/ninja_gen/src/python.rs#L232-L250
+  # TODO: switch to pytestCheckHook. see also https://github.com/attoknot/nixpkgs/tree/anki-pytestCheckHook
   checkPhase =
     let
       disabledTestsString =
@@ -289,15 +291,18 @@ python3Packages.buildPythonApplication (finalAttrs: {
             (lib.concatStringsSep " and ")
             lib.escapeShellArg
           ];
+      # qt/tests/test_installer.py is for the installer.
+      # those tests use the package `briefcase` which isn't on nixpkgs yet
+      # and isn't included in this derivation, so they fail
 
     in
     ''
       runHook preCheck
       export PYTHONPATH=$PYTHONPATH:$PWD/out/pyenv/${python3.sitePackages}
-      HOME=$TMP ANKI_TEST_MODE=1 PYTHONPATH=$PYTHONPATH:$PWD/out/pylib \
+      ANKI_TEST_MODE=1 PYTHONPATH=$PYTHONPATH:$PWD/out/pylib \
         pytest -p no:cacheprovider pylib/tests -k ${disabledTestsString}
-      HOME=$TMP ANKI_TEST_MODE=1 PYTHONPATH=$PYTHONPATH:$PWD/out/pylib:$PWD/pylib:$PWD/out/qt \
-        pytest -p no:cacheprovider qt/tests -k ${disabledTestsString}
+      ANKI_TEST_MODE=1 PYTHONPATH=$PYTHONPATH:$PWD/out/pylib:$PWD/pylib:$PWD/out/qt \
+        pytest -p no:cacheprovider qt/tests -k ${disabledTestsString} --ignore qt/tests/test_installer.py
       runHook postCheck
     '';
 
@@ -312,14 +317,16 @@ python3Packages.buildPythonApplication (finalAttrs: {
     # https://github.com/NixOS/nixpkgs/issues/438598
     mv $lib/bin $out/bin
 
-    install -D -t $out/share/applications qt/launcher/lin/anki.desktop
+    ankilinux='qt/installer/linux-template/{{ cookiecutter.format }}/{{ cookiecutter.app_name }}'
+
+    install -D -t $out/share/applications "$ankilinux"/anki.desktop
     install -D -t $doc/share/doc/anki README* LICENSE*
-    install -D -t $out/share/mime/packages qt/launcher/lin/anki.xml
+    install -D -t $out/share/mime/packages "$ankilinux"/anki.xml
 
     mkdir -p $out/share/icons/hicolor/{32x32,128x128}/apps
-    magick qt/launcher/lin/anki.xpm $out/share/icons/hicolor/32x32/apps/anki.png
-    magick qt/launcher/lin/anki.png -resize 128x128 $out/share/icons/hicolor/128x128/apps/anki.png
-    installManPage qt/launcher/lin/anki.1
+    magick "$ankilinux"/anki.xpm $out/share/icons/hicolor/32x32/apps/anki.png
+    magick "$ankilinux"/anki.png -resize 128x128 $out/share/icons/hicolor/128x128/apps/anki.png
+    installManPage "$ankilinux"/anki.1
 
     runHook postInstall
   '';
diff --git a/pkgs/by-name/ap/app2unit/package.nix b/pkgs/by-name/ap/app2unit/package.nix
index 97fea036f6a9..2f36b08d3401 100644
--- a/pkgs/by-name/ap/app2unit/package.nix
+++ b/pkgs/by-name/ap/app2unit/package.nix
@@ -11,13 +11,13 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "app2unit";
-  version = "1.4.2";
+  version = "1.4.4";
 
   src = fetchFromGitHub {
     owner = "Vladimir-csp";
     repo = "app2unit";
     tag = "v${finalAttrs.version}";
-    sha256 = "sha256-jUAjcpR4IszvmqWAIjZo0rWZt9yydCe3xH4X+mJ5O8k=";
+    sha256 = "sha256-TIY+/9ekGub+10uyqXy5aYU+2NLysMtaQnD1PIjBCFA=";
   };
 
   passthru.updateScript = nix-update-script { };
@@ -63,7 +63,10 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     homepage = "https://github.com/Vladimir-csp/app2unit";
     license = lib.licenses.gpl3;
     mainProgram = "app2unit";
-    maintainers = with lib.maintainers; [ fazzi ];
+    maintainers = with lib.maintainers; [
+      fazzi
+      cnst
+    ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/by-name/ar/arity/package.nix b/pkgs/by-name/ar/arity/package.nix
new file mode 100644
index 000000000000..89c88c7d0c5e
--- /dev/null
+++ b/pkgs/by-name/ar/arity/package.nix
@@ -0,0 +1,53 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  installShellFiles,
+  versionCheckHook,
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "arity";
+  version = "0.13.0";
+
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "jolars";
+    repo = "arity";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-PveNcJisds0obKzUDzZ409kinWvhFO8qpvwCzhfdla8=";
+  };
+
+  cargoHash = "sha256-7Mvw9reJFmBPs8Ksn/mbSbeizdT8GhwvXT06NMlCXxc=";
+
+  nativeBuildInputs = [
+    installShellFiles
+  ];
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  doInstallCheck = true;
+
+  postInstall = ''
+    installShellCompletion --cmd arity \
+      --bash target/completions/arity.bash \
+      --fish target/completions/arity.fish \
+      --zsh target/completions/_arity
+
+    installManPage target/man/*
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Language server, formatter, and linter for R";
+    homepage = "https://arity.cc";
+    changelog = "https://github.com/jolars/arity/blob/${finalAttrs.src.tag}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers.jolars ];
+    mainProgram = "arity";
+  };
+})
diff --git a/pkgs/by-name/at/atlas/package.nix b/pkgs/by-name/at/atlas/package.nix
index 8ac36b85e054..3180ae8a7c9f 100644
--- a/pkgs/by-name/at/atlas/package.nix
+++ b/pkgs/by-name/at/atlas/package.nix
@@ -9,13 +9,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "atlas";
-  version = "1.2.3";
+  version = "1.3.0";
 
   src = fetchFromGitHub {
     owner = "ariga";
     repo = "atlas";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Ox/EgTSz0ONEJqLyiJsvpgUNfHyV2rQYXrIAImDwrLo=";
+    hash = "sha256-4zn/+xdcWzgB5SVZQ6tHBowrf33pvcKr1775MVcDQSc=";
   };
 
   modRoot = "cmd/atlas";
diff --git a/pkgs/by-name/au/aurulent-sans/package.nix b/pkgs/by-name/au/aurulent-sans/package.nix
index 6ffa590a1c8f..62d438afb654 100644
--- a/pkgs/by-name/au/aurulent-sans/package.nix
+++ b/pkgs/by-name/au/aurulent-sans/package.nix
@@ -2,33 +2,31 @@
   lib,
   stdenvNoCC,
   fetchFromGitHub,
+  installFonts,
 }:
 
-stdenvNoCC.mkDerivation rec {
+stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "aurulent-sans";
   version = "0.1";
 
+  __structuredAttrs = true;
+  strictDeps = true;
+
   src = fetchFromGitHub {
     owner = "deepfire";
     repo = "hartke-aurulent-sans";
-    rev = "${pname}-${version}";
+    tag = "aurulent-sans-${finalAttrs.version}";
     hash = "sha256-M/duhgqxXZJq5su9FrsGjZdm+wtO5B5meoDomde+GwY=";
   };
 
-  installPhase = ''
-    runHook preInstall
-
-    install -Dm644 *.otf -t $out/share/fonts
-
-    runHook postInstall
-  '';
+  nativeBuildInputs = [ installFonts ];
 
   meta = {
     description = "Aurulent Sans";
-    longDescription = "Aurulent Sans is a humanist sans serif intended to be used as an interface font.";
+    longDescription = "Aurulent Sans is a humanist sans serif intended to be used as an interface font";
     homepage = "http://delubrum.org/";
     maintainers = with lib.maintainers; [ pancaek ];
     license = lib.licenses.ofl;
     platforms = lib.platforms.all;
   };
-}
+})
diff --git a/pkgs/by-name/au/automatic-timezoned/package.nix b/pkgs/by-name/au/automatic-timezoned/package.nix
index fe0a9d171b97..f4acca89856e 100644
--- a/pkgs/by-name/au/automatic-timezoned/package.nix
+++ b/pkgs/by-name/au/automatic-timezoned/package.nix
@@ -7,16 +7,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "automatic-timezoned";
-  version = "2.0.149";
+  version = "2.0.151";
 
   src = fetchFromGitHub {
     owner = "maxbrunet";
     repo = "automatic-timezoned";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-FQ4SJcHkdNJcZOncY0BHg+CwnUcyszzfYPCUhWZHhi0=";
+    sha256 = "sha256-k5LjeOripX6r6EKs6+NpaoBjLIBH+C7Xe/5Hk6ZKcdw=";
   };
 
-  cargoHash = "sha256-4+gNtQrlaDrSCUFEIByFUQnITSkF9Mo9bq6Ug9d7t1w=";
+  cargoHash = "sha256-X7rHgemEuW1/+MkNpw3HSmQEnPMyu09zDPvVcOicYVo=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
 
diff --git a/pkgs/by-name/ba/babashka-unwrapped/package.nix b/pkgs/by-name/ba/babashka-unwrapped/package.nix
index e762e658beaa..2e5045d65184 100644
--- a/pkgs/by-name/ba/babashka-unwrapped/package.nix
+++ b/pkgs/by-name/ba/babashka-unwrapped/package.nix
@@ -8,11 +8,11 @@
 
 buildGraalvmNativeImage (finalAttrs: {
   pname = "babashka-unwrapped";
-  version = "1.12.218";
+  version = "1.13.219";
 
   src = fetchurl {
     url = "https://github.com/babashka/babashka/releases/download/v${finalAttrs.version}/babashka-${finalAttrs.version}-standalone.jar";
-    sha256 = "sha256-CEApb2noPYfRYRDTo1RBLOZELvEuxGO4HW1CB//bky8=";
+    sha256 = "sha256-cVcfEt7OVKHG3I9ZSEk6mU5ULKAXJYsEEBD2D4SUZxc=";
   };
 
   nativeBuildInputs = [ installShellFiles ];
diff --git a/pkgs/by-name/ba/babashka/clojure-tools.nix b/pkgs/by-name/ba/babashka/clojure-tools.nix
index a537a00c7389..19c32f4af7ab 100644
--- a/pkgs/by-name/ba/babashka/clojure-tools.nix
+++ b/pkgs/by-name/ba/babashka/clojure-tools.nix
@@ -7,10 +7,10 @@
 }:
 clojure.overrideAttrs (previousAttrs: {
   pname = "babashka-clojure-tools";
-  version = "1.12.4.1618";
+  version = "1.12.5.1654";
 
   src = fetchurl {
     url = previousAttrs.src.url;
-    hash = "sha256-E3adptY6mN6yAkN4rhpk5O4hGsEDU0DfynppRMQc3iE=";
+    hash = "sha256-3IbMVrw3L87we9h/RGk+60thz19ENHiDh4Nk0Dtfs0I=";
   };
 })
diff --git a/pkgs/by-name/ba/bant/package.nix b/pkgs/by-name/ba/bant/package.nix
index 0ddb20e49e33..13161d009f01 100644
--- a/pkgs/by-name/ba/bant/package.nix
+++ b/pkgs/by-name/ba/bant/package.nix
@@ -20,13 +20,13 @@ let
 in
 buildBazelPackage rec {
   pname = "bant";
-  version = "0.3.3";
+  version = "0.3.4";
 
   src = fetchFromGitHub {
     owner = "hzeller";
     repo = "bant";
     rev = "v${version}";
-    hash = "sha256-6c403+DK1tcQxC16FKEtdhnJEA9LJl8H8Usnw08FBnA=";
+    hash = "sha256-sS907wkF1QN10FRSJZ9LBqHT1Z5z2BWIjXkneQT6h0Y=";
   };
 
   bazelFlags = [
diff --git a/pkgs/by-name/ba/bats/package.nix b/pkgs/by-name/ba/bats/package.nix
index 64b2dea84c7a..b3f58b58499d 100644
--- a/pkgs/by-name/ba/bats/package.nix
+++ b/pkgs/by-name/ba/bats/package.nix
@@ -29,13 +29,13 @@
 
 resholve.mkDerivation (finalAttrs: {
   pname = "bats";
-  version = "1.12.0";
+  version = "1.14.0";
 
   src = fetchFromGitHub {
     owner = "bats-core";
     repo = "bats-core";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-5VCkOzyaUOBW+HVVHDkH9oCWDI/MJW6yrLTQG60Ralk=";
+    hash = "sha256-pUuSjXxMCFLlsTvErgerHLnaQmcA9eXuKZKRkuOGJ8k=";
   };
 
   patchPhase = ''
diff --git a/pkgs/by-name/be/bearer/package.nix b/pkgs/by-name/be/bearer/package.nix
index 05d5868f7520..e2e03a508ac7 100644
--- a/pkgs/by-name/be/bearer/package.nix
+++ b/pkgs/by-name/be/bearer/package.nix
@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "bearer";
-  version = "2.0.2";
+  version = "2.1.0";
 
   src = fetchFromGitHub {
     owner = "bearer";
     repo = "bearer";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-oYlW9sVyoJXOqcGLcF65c+QsTNquz0Ij1HnMjAbnZZI=";
+    hash = "sha256-OUsy3DDuo1ptTtbIOEOhqfG4wlaVu1ZSKJqt9h2ZRI0=";
   };
 
-  vendorHash = "sha256-Y32HdEk+9fftDP4cttn6r3GMq3YqeyXpsRaU5ApkGa4=";
+  vendorHash = "sha256-PTyozkuRlD/VCqPqbDfdhMYHH1z3+S1X6ykPg/xP680=";
 
   subPackages = [ "cmd/bearer" ];
 
diff --git a/pkgs/by-name/be/beekeeper-studio/package.nix b/pkgs/by-name/be/beekeeper-studio/package.nix
index 38c91e3269b9..48ef88a3e9d9 100644
--- a/pkgs/by-name/be/beekeeper-studio/package.nix
+++ b/pkgs/by-name/be/beekeeper-studio/package.nix
@@ -40,7 +40,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "beekeeper-studio";
-  version = "5.9.2";
+  version = "5.9.3";
 
   src =
     let
@@ -54,9 +54,9 @@ stdenv.mkDerivation (finalAttrs: {
     fetchurl {
       url = "https://github.com/beekeeper-studio/beekeeper-studio/releases/download/v${finalAttrs.version}/${asset}";
       hash = selectSystem {
-        x86_64-linux = "sha256-O987wpgrue1yD4jgm0x0IpfbaTKNZrjhabTiwv94caA=";
-        aarch64-linux = "sha256-IZc9VVo66CQjqQUKz4DNvWWAa2JArwqiVTgdLbR9uDk=";
-        aarch64-darwin = "sha256-iwakEsMtinchJInFqAcr7RlzbE82xATvDaHMl5Y1Q7Y=";
+        x86_64-linux = "sha256-ngVE7hjtr/a6CBASwZA3gmvk7+WR2okQy+ywXbEUQpk=";
+        aarch64-linux = "sha256-aAoputvhCHqekT+pdaZEmps4aa48gz9DDCgomJvWQSw=";
+        aarch64-darwin = "sha256-SCttC+P3ZSAlU8mBWfPpT4wAVtwcvpgePhJp+sbsvU8=";
       };
     };
 
diff --git a/pkgs/by-name/bo/boringssl/package.nix b/pkgs/by-name/bo/boringssl/package.nix
index 3ac6ddb79621..f02541e32ca0 100644
--- a/pkgs/by-name/bo/boringssl/package.nix
+++ b/pkgs/by-name/bo/boringssl/package.nix
@@ -13,19 +13,14 @@
 # reference: https://boringssl.googlesource.com/boringssl/+/refs/tags/0.20250818.0/BUILDING.md
 stdenv.mkDerivation (finalAttrs: {
   pname = "boringssl";
-  version = "0.20260526.0";
+  version = "0.20260803.0";
 
   src = fetchgit {
     url = "https://boringssl.googlesource.com/boringssl";
     tag = finalAttrs.version;
-    hash = "sha256-SmyImyzGn7v2b5qGJbMmQZX5bODA9i6+8jy3uGwOawA=";
+    hash = "sha256-GmaXG6I2euA+Q7naO2Oxu+P4mK37RbgwW5iM7ync6Gg=";
   };
 
-  patches = [
-    # Add SECP224R1 for backward compatibility
-    ./secp224r1-compat.patch
-  ];
-
   nativeBuildInputs = [
     cmake
     ninja
diff --git a/pkgs/by-name/bo/boringssl/secp224r1-compat.patch b/pkgs/by-name/bo/boringssl/secp224r1-compat.patch
deleted file mode 100644
index b710a8dbec19..000000000000
--- a/pkgs/by-name/bo/boringssl/secp224r1-compat.patch
+++ /dev/null
@@ -1,20 +0,0 @@
-diff --git a/include/openssl/ssl.h b/include/openssl/ssl.h
-index 51417d412..a961a1093 100644
---- a/include/openssl/ssl.h
-+++ b/include/openssl/ssl.h
-@@ -2522,6 +2522,7 @@ OPENSSL_EXPORT size_t SSL_CTX_get_num_tickets(const SSL_CTX *ctx);
- // |SSL_SIGN_*|.
- 
- // SSL_GROUP_* define TLS group IDs.
-+#define SSL_GROUP_SECP224R1 22
- #define SSL_GROUP_SECP256R1 23
- #define SSL_GROUP_SECP384R1 24
- #define SSL_GROUP_SECP521R1 25
-@@ -5836,6 +5837,7 @@ OPENSSL_EXPORT int SSL_CTX_set_tlsext_status_arg(SSL_CTX *ctx, void *arg);
- #define SSL_R_TLSV1_CERTIFICATE_REQUIRED SSL_R_TLSV1_ALERT_CERTIFICATE_REQUIRED
- 
- // The following symbols are compatibility aliases for |SSL_GROUP_*|.
-+#define SSL_CURVE_SECP224R1 SSL_GROUP_SECP224R1
- #define SSL_CURVE_SECP256R1 SSL_GROUP_SECP256R1
- #define SSL_CURVE_SECP384R1 SSL_GROUP_SECP384R1
- #define SSL_CURVE_SECP521R1 SSL_GROUP_SECP521R1
diff --git a/pkgs/by-name/bo/bottom/package.nix b/pkgs/by-name/bo/bottom/package.nix
index 8f4e6d278c1a..2f55746ae16e 100644
--- a/pkgs/by-name/bo/bottom/package.nix
+++ b/pkgs/by-name/bo/bottom/package.nix
@@ -12,16 +12,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "bottom";
-  version = "0.14.6";
+  version = "0.14.7";
 
   src = fetchFromGitHub {
     owner = "ClementTsang";
     repo = "bottom";
     tag = finalAttrs.version;
-    hash = "sha256-52aUYfFm72nSG7bAlwa18kMu13i+c4myl2QfaA2YZmw=";
+    hash = "sha256-EXbj/T3wt4gph1FZ71iK0rdRZMewY3EHpOMWsCFUnc0=";
   };
 
-  cargoHash = "sha256-N+dfYORAdWAg5qUrFEgXbiRtYJpcvV1AcbLR5WiD0QI=";
+  cargoHash = "sha256-2Erh+pgZPZEmvFAtWNPqKVkQx3/hznC82M5a36cWfZY=";
 
   nativeBuildInputs = [
     autoAddDriverRunpath
diff --git a/pkgs/by-name/br/brise/package.nix b/pkgs/by-name/br/brise/package.nix
index c6fb6b1c7dc0..1d402e244731 100644
--- a/pkgs/by-name/br/brise/package.nix
+++ b/pkgs/by-name/br/brise/package.nix
@@ -6,8 +6,9 @@
 }:
 
 stdenv.mkDerivation {
+  # TODO deprecate in favor of "plum" (https://github.com/rime/plum)
   pname = "brise";
-  version = "unstable-2017-09-16";
+  version = "0-unstable-2016-12-02";
 
   src = fetchFromGitHub {
     owner = "rime";
diff --git a/pkgs/by-name/bu/budgie-desktop-with-plugins/package.nix b/pkgs/by-name/bu/budgie-desktop-with-plugins/package.nix
index 3c0b3d6eb7ec..607a19eaa1f5 100644
--- a/pkgs/by-name/bu/budgie-desktop-with-plugins/package.nix
+++ b/pkgs/by-name/bu/budgie-desktop-with-plugins/package.nix
@@ -23,7 +23,7 @@ stdenv.mkDerivation {
     wrapGAppsHook3
   ];
 
-  buildInputs = lib.forEach plugins (plugin: plugin.buildInputs) ++ plugins;
+  buildInputs = lib.concatMap (plugin: plugin.buildInputs or [ ]) plugins ++ plugins;
 
   dontUnpack = true;
   dontConfigure = true;
diff --git a/pkgs/by-name/ca/cairo/package.nix b/pkgs/by-name/ca/cairo/package.nix
index 163a15c9bfca..172deabc7149 100644
--- a/pkgs/by-name/ca/cairo/package.nix
+++ b/pkgs/by-name/ca/cairo/package.nix
@@ -99,11 +99,8 @@ stdenv.mkDerivation (
           {
             linux = "true";
             freebsd = "true";
-            netbsd = "false";
-            windows = "false";
           }
-          .${stdenv.hostPlatform.parsed.kernel.name}
-            or (throw "Unknown value for ipc_rmid_deferred_release on ${stdenv.hostPlatform.parsed.kernel.name}")
+          .${stdenv.hostPlatform.parsed.kernel.name} or "false"
         }
       ''}"
     ];
diff --git a/pkgs/by-name/ca/camunda-modeler/package.nix b/pkgs/by-name/ca/camunda-modeler/package.nix
index ea539768df3e..66e0d9762c94 100644
--- a/pkgs/by-name/ca/camunda-modeler/package.nix
+++ b/pkgs/by-name/ca/camunda-modeler/package.nix
@@ -10,11 +10,11 @@
 
 stdenvNoCC.mkDerivation rec {
   pname = "camunda-modeler";
-  version = "5.49.0";
+  version = "5.50.0";
 
   src = fetchurl {
     url = "https://github.com/camunda/camunda-modeler/releases/download/v${version}/camunda-modeler-${version}-linux-x64.tar.gz";
-    hash = "sha256-HHaw+k5QwcjrxpsYyqTg6EkQlGDg16gbcuRl9y31aqU=";
+    hash = "sha256-khLBro0jYICQhZpRLNNlX++vEmSiQ5RCnyEz1+D95b4=";
   };
   sourceRoot = "camunda-modeler-${version}-linux-x64";
 
diff --git a/pkgs/by-name/ca/cargo-semver-checks/package.nix b/pkgs/by-name/ca/cargo-semver-checks/package.nix
index 5f0ed6d9cde3..a4cf210527ef 100644
--- a/pkgs/by-name/ca/cargo-semver-checks/package.nix
+++ b/pkgs/by-name/ca/cargo-semver-checks/package.nix
@@ -11,16 +11,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-semver-checks";
-  version = "0.49.0";
+  version = "0.50.0";
 
   src = fetchFromGitHub {
     owner = "obi1kenobi";
     repo = "cargo-semver-checks";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-dTfcpUVR3zDtNLTKG/Oj1dxVEzLuCYR3tFlCIapYJp8=";
+    hash = "sha256-tXUEWla7dUjx7eaNzKyHNg59LXr8LP+jXxkexR3vSdk=";
   };
 
-  cargoHash = "sha256-VZxaEwQqHt8LKXp/SzOUAxT6e8jvCnS7OlyxTI1rg6c=";
+  cargoHash = "sha256-rc3F104atiV+KecsNtThfFwe80jyKOFLHKn53Nhm++w=";
 
   nativeBuildInputs = [
     cmake
diff --git a/pkgs/by-name/ck/ckan/package.nix b/pkgs/by-name/ck/ckan/package.nix
index 3b54608150a7..bcfede0f034f 100644
--- a/pkgs/by-name/ck/ckan/package.nix
+++ b/pkgs/by-name/ck/ckan/package.nix
@@ -4,8 +4,6 @@
   fetchurl,
   makeWrapper,
   mono,
-  gtk2,
-  curl,
   imagemagick,
   copyDesktopItems,
   makeDesktopItem,
@@ -36,11 +34,6 @@ stdenv.mkDerivation rec {
 
   buildInputs = [ mono ];
 
-  libraries = lib.makeLibraryPath [
-    gtk2
-    curl
-  ];
-
   dontBuild = true;
 
   installPhase = ''
@@ -51,8 +44,7 @@ stdenv.mkDerivation rec {
     done
     install -m 644 -D $src $out/bin/ckan.exe
     makeWrapper ${mono}/bin/mono $out/bin/ckan \
-      --add-flags $out/bin/ckan.exe \
-      --set LD_LIBRARY_PATH $libraries
+      --add-flags $out/bin/ckan.exe
     runHook postInstall
   '';
 
diff --git a/pkgs/by-name/co/coal/package.nix b/pkgs/by-name/co/coal/package.nix
index eceb6312814b..98d764680a91 100644
--- a/pkgs/by-name/co/coal/package.nix
+++ b/pkgs/by-name/co/coal/package.nix
@@ -2,14 +2,11 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  cmake,
-  doxygen,
   boost,
   eigen,
   jrl-cmakemodules,
   assimp,
   octomap,
-  pkg-config,
   qhull,
   zlib,
 }:
@@ -27,15 +24,14 @@ stdenv.mkDerivation (finalAttrs: {
 
   strictDeps = true;
 
-  nativeBuildInputs = [
-    cmake
-    doxygen
-    pkg-config
+  nativeBuildInputs = jrl-cmakemodules.docsNativeBuildInputs;
+
+  buildInputs = [
+    jrl-cmakemodules
   ];
 
   propagatedBuildInputs = [
     assimp
-    jrl-cmakemodules
     octomap
     qhull
     zlib
@@ -43,7 +39,7 @@ stdenv.mkDerivation (finalAttrs: {
     eigen
   ];
 
-  cmakeFlags = [
+  cmakeFlags = jrl-cmakemodules.docsCmakeFlags ++ [
     (lib.cmakeBool "COAL_BACKWARD_COMPATIBILITY_WITH_HPP_FCL" true)
     (lib.cmakeBool "COAL_HAS_QHULL" true)
     (lib.cmakeBool "INSTALL_DOCUMENTATION" true)
diff --git a/pkgs/by-name/co/communique/package.nix b/pkgs/by-name/co/communique/package.nix
index 9aa8b7f77250..44cda23eaffd 100644
--- a/pkgs/by-name/co/communique/package.nix
+++ b/pkgs/by-name/co/communique/package.nix
@@ -11,17 +11,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "communique";
-  version = "1.2.3";
+  version = "1.3.0";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "jdx";
     repo = "communique";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-F7m6PxPOuQlZFIVYBUl650JsaZVJJmC1c+6jMgmGgc8=";
+    hash = "sha256-bT3OiP3hYWNY0iXnfxg8Q6ndQBbcqgyLL2TVgOKP5gQ=";
   };
 
-  cargoHash = "sha256-KyGbkVNi2rHTJfIeeq6nVFDhkWmaKh/IZ6xiVxPaXWQ=";
+  cargoHash = "sha256-hg6r7kmyeFONeVndCoRZB9JzYrAX8QUKiZpSMbSGxoA=";
 
   nativeCheckInputs = [
     cacert
diff --git a/pkgs/by-name/cr/crocoddyl/package.nix b/pkgs/by-name/cr/crocoddyl/package.nix
index da6255b7b1e1..d66f2c857466 100644
--- a/pkgs/by-name/cr/crocoddyl/package.nix
+++ b/pkgs/by-name/cr/crocoddyl/package.nix
@@ -1,16 +1,15 @@
 {
   blas,
-  cmake,
-  doxygen,
   example-robot-data,
+  jrl-cmakemodules,
   fetchFromGitHub,
+  fontconfig,
   ffmpeg,
   ipopt,
   lapack,
   llvmPackages,
   lib,
   pinocchio,
-  pkg-config,
   stdenv,
 
   withMultithread ? true,
@@ -34,11 +33,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   strictDeps = true;
 
-  nativeBuildInputs = [
-    cmake
-    doxygen
-    pkg-config
-  ];
+  nativeBuildInputs = jrl-cmakemodules.docsNativeBuildInputs;
 
   propagatedBuildInputs = [
     blas
@@ -48,7 +43,10 @@ stdenv.mkDerivation (finalAttrs: {
     pinocchio
   ];
 
-  buildInputs = lib.optionals (stdenv.hostPlatform.isDarwin && withMultithread) [
+  buildInputs = [
+    jrl-cmakemodules
+  ]
+  ++ lib.optionals (stdenv.hostPlatform.isDarwin && withMultithread) [
     llvmPackages.openmp
   ];
 
@@ -56,7 +54,7 @@ stdenv.mkDerivation (finalAttrs: {
     ffmpeg
   ];
 
-  cmakeFlags = [
+  cmakeFlags = jrl-cmakemodules.docsCmakeFlags ++ [
     (lib.cmakeBool "INSTALL_DOCUMENTATION" true)
     (lib.cmakeBool "BUILD_EXAMPLES" false)
     (lib.cmakeBool "BUILD_PYTHON_INTERFACE" false)
@@ -74,6 +72,9 @@ stdenv.mkDerivation (finalAttrs: {
 
   doCheck = true;
 
+  # Fontconfig error: Cannot load default config file: No such file: (null)
+  env.FONTCONFIG_FILE = "${fontconfig.out}/etc/fonts/fonts.conf";
+
   meta = {
     description = "Crocoddyl optimal control library";
     homepage = "https://github.com/loco-3d/crocoddyl";
diff --git a/pkgs/by-name/cr/cronet-go/package.nix b/pkgs/by-name/cr/cronet-go/package.nix
index ffdbf1e7b9eb..099206a3f26b 100644
--- a/pkgs/by-name/cr/cronet-go/package.nix
+++ b/pkgs/by-name/cr/cronet-go/package.nix
@@ -95,7 +95,10 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     description = "Go bindings for naiveproxy";
     homepage = "https://github.com/SagerNet/cronet-go";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ prince213 ];
+    maintainers = with lib.maintainers; [
+      prince213
+      moraxyc
+    ];
     platforms = lib.platforms.darwin ++ lib.platforms.linux;
   };
 })
diff --git a/pkgs/by-name/da/darktable/package.nix b/pkgs/by-name/da/darktable/package.nix
index 88e96055a2db..844ba190a7da 100644
--- a/pkgs/by-name/da/darktable/package.nix
+++ b/pkgs/by-name/da/darktable/package.nix
@@ -225,6 +225,7 @@ stdenv.mkDerivation rec {
     description = "Virtual lighttable and darkroom for photographers";
     homepage = "https://www.darktable.org";
     changelog = "https://github.com/darktable-org/darktable/releases/tag/release-${version}";
+    mainProgram = "darktable";
     license = lib.licenses.gpl3Plus;
     platforms = with lib.platforms; linux ++ darwin;
     maintainers = with lib.maintainers; [
diff --git a/pkgs/by-name/da/dart-sass/package.nix b/pkgs/by-name/da/dart-sass/package.nix
index 3b353bc72db6..d8189c93703c 100644
--- a/pkgs/by-name/da/dart-sass/package.nix
+++ b/pkgs/by-name/da/dart-sass/package.nix
@@ -23,13 +23,13 @@ let
 in
 buildDartApplication rec {
   pname = "dart-sass";
-  version = "1.101.2";
+  version = "1.102.0";
 
   src = fetchFromGitHub {
     owner = "sass";
     repo = "dart-sass";
     tag = version;
-    hash = "sha256-7q42Dv1HUWxeXa4j306ssKJrBsPKAFezqntx4mZXgw0=";
+    hash = "sha256-XyO93wC1X//vy8yB3nKdTksdi646wUVhIu4O5Sb+Kwk=";
   };
 
   pubspecLock = lib.importJSON ./pubspec.lock.json;
diff --git a/pkgs/by-name/da/dart-sass/pubspec.lock.json b/pkgs/by-name/da/dart-sass/pubspec.lock.json
index b274072bc956..f79bf0f9f5b6 100644
--- a/pkgs/by-name/da/dart-sass/pubspec.lock.json
+++ b/pkgs/by-name/da/dart-sass/pubspec.lock.json
@@ -114,11 +114,11 @@
       "dependency": "direct dev",
       "description": {
         "name": "cli_util",
-        "sha256": "5909d2c6b66817222779e1eedc19e0e28b76d1df7bd9856a4792ccb9881df358",
+        "sha256": "71e43f1976c3eae2d9468a5b4d6600bf8cae61508b87f27fa1799228935d48ab",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.5.1"
+      "version": "0.5.2"
     },
     "collection": {
       "dependency": "direct main",
@@ -484,11 +484,11 @@
       "dependency": "transitive",
       "description": {
         "name": "posix",
-        "sha256": "185ef7606574f789b40f289c233efa52e96dead518aed988e040a10737febb07",
+        "sha256": "bc1bad54ad2b735816e31f8d4600cfde6c7839975085ddfbca48b6c9f7c4044e",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "6.5.0"
+      "version": "6.5.2"
     },
     "protobuf": {
       "dependency": "direct main",
diff --git a/pkgs/by-name/da/dashy-ui/package.nix b/pkgs/by-name/da/dashy-ui/package.nix
index 70f4ce154563..a01e848d696a 100644
--- a/pkgs/by-name/da/dashy-ui/package.nix
+++ b/pkgs/by-name/da/dashy-ui/package.nix
@@ -11,7 +11,7 @@
   nixosTests,
   nodejs_24,
   nodejs-slim_24,
-  remarshal_0_17,
+  remarshal,
   nix-update-script,
   settings ? { },
 }:
@@ -68,7 +68,7 @@ stdenv.mkDerivation (finalAttrs: {
     yarnBuildHook
     nodejs_24
     # For yaml conversion
-    remarshal_0_17
+    remarshal
   ];
   doDist = false;
   meta = {
diff --git a/pkgs/by-name/da/davmail/package.nix b/pkgs/by-name/da/davmail/package.nix
index 026e4cde54ee..2aff83ac7242 100644
--- a/pkgs/by-name/da/davmail/package.nix
+++ b/pkgs/by-name/da/davmail/package.nix
@@ -5,7 +5,6 @@
   nix-update-script,
   makeWrapper,
   glib,
-  gtk2,
   gtk3,
   ant,
   jdk,
@@ -13,13 +12,11 @@
   coreutils,
   gnugrep,
   zulu,
-  preferGtk3 ? true,
   preferZulu ? false,
 }:
 
 let
   jre' = (if preferZulu then zulu else jdk).override { enableJavaFX = true; };
-  gtk' = if preferGtk3 then gtk3 else gtk2;
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "davmail";
@@ -57,7 +54,7 @@ stdenv.mkDerivation (finalAttrs: {
     cp -R ./dist/{lib,davmail{,.jar}} $out/share/davmail
     chmod +x $out/share/davmail/davmail
     makeWrapper $out/share/davmail/davmail $out/bin/davmail \
-      --set-default JAVA_OPTS "-Xmx512M -Dsun.net.inetaddr.ttl=60 -Djdk.gtk.version=${lib.versions.major gtk'.version}" \
+      --set-default JAVA_OPTS "-Xmx512M -Dsun.net.inetaddr.ttl=60 -Djdk.gtk.version=${lib.versions.major gtk3.version}" \
       --prefix PATH : ${
         lib.makeBinPath [
           jre'
@@ -68,7 +65,7 @@ stdenv.mkDerivation (finalAttrs: {
       --prefix LD_LIBRARY_PATH : ${
         lib.makeLibraryPath [
           glib
-          gtk'
+          gtk3
           libxtst
         ]
       }
diff --git a/pkgs/by-name/dr/dr14_tmeter/package.nix b/pkgs/by-name/dr/dr14_tmeter/package.nix
index 921b920cc613..27696128cbec 100644
--- a/pkgs/by-name/dr/dr14_tmeter/package.nix
+++ b/pkgs/by-name/dr/dr14_tmeter/package.nix
@@ -2,22 +2,29 @@
   lib,
   fetchFromGitHub,
   python3Packages,
-  pkgs,
+  flac,
+  vorbis-tools,
+  ffmpeg,
+  faad2,
+  lame,
 }:
 
 python3Packages.buildPythonApplication {
   pname = "dr14_tmeter";
   version = "1.0.16-unstable-2025-09-27";
-  format = "setuptools";
+  pyproject = true;
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "hboetes";
     repo = "dr14_t.meter";
     rev = "f9d62f60c30d9404d4c4b644931e76049332310c";
-    sha256 = "sha256-3z9Gi32aG6Tk9UHpfT1VqmBZpFJrlKB+NZFu3CH+18U=";
+    hash = "sha256-3z9Gi32aG6Tk9UHpfT1VqmBZpFJrlKB+NZFu3CH+18U=";
   };
 
-  propagatedBuildInputs = with pkgs; [
+  build-system = with python3Packages; [ setuptools ];
+
+  dependencies = [
     python3Packages.numpy
     python3Packages.mutagen
     flac
diff --git a/pkgs/by-name/du/dutctl/package.nix b/pkgs/by-name/du/dutctl/package.nix
index f229bf700eea..cb3855e1c448 100644
--- a/pkgs/by-name/du/dutctl/package.nix
+++ b/pkgs/by-name/du/dutctl/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "dutctl";
-  version = "1.0.0-alpha.1-unstable-2026-07-24";
+  version = "1.0.0-alpha.1-unstable-2026-07-29";
 
   src = fetchFromGitHub {
     owner = "BlindspotSoftware";
     repo = "dutctl";
-    rev = "9be7f4dbc49fc9fc748ce06935619ce9a15f655d";
-    hash = "sha256-uQtH3zpqjTV2spStBorqpFX0KDFhuN178JHYCsSC8sQ=";
+    rev = "3021a5295fe81b90415c339bb3c0ae384362b5ac";
+    hash = "sha256-wgPGhUEwbB2UGNMW03KqEcgeM3a6ytVGtQrLWNyU89Y=";
   };
 
   vendorHash = "sha256-2Y2+ytXm17LQHulod8QIXtvAOaCMNrqj83PGbb78Uqg=";
diff --git a/pkgs/by-name/ei/eiquadprog/package.nix b/pkgs/by-name/ei/eiquadprog/package.nix
index d454b9c1ba42..145c9051b8d4 100644
--- a/pkgs/by-name/ei/eiquadprog/package.nix
+++ b/pkgs/by-name/ei/eiquadprog/package.nix
@@ -1,12 +1,9 @@
 {
   boost,
-  cmake,
-  doxygen,
   eigen,
   fetchFromGitHub,
   jrl-cmakemodules,
   lib,
-  pkg-config,
   stdenv,
 }:
 
@@ -26,12 +23,10 @@ stdenv.mkDerivation (finalAttrs: {
     "doc"
   ];
 
-  nativeBuildInputs = [
-    cmake
-    doxygen
-    pkg-config
-    jrl-cmakemodules
-  ];
+  cmakeFlags = jrl-cmakemodules.docsCmakeFlags;
+
+  nativeBuildInputs = jrl-cmakemodules.docsNativeBuildInputs;
+  buildInputs = [ jrl-cmakemodules ];
   propagatedBuildInputs = [ eigen ];
   checkInputs = [ boost ];
 
diff --git a/pkgs/by-name/en/ente-web/package.nix b/pkgs/by-name/en/ente-web/package.nix
index 95ca7968b1d3..552f1df0d8f0 100644
--- a/pkgs/by-name/en/ente-web/package.nix
+++ b/pkgs/by-name/en/ente-web/package.nix
@@ -24,7 +24,7 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "ente-web-${enteApp}";
-  version = "1.3.58";
+  version = "1.3.59";
 
   src = fetchFromGitHub {
     owner = "ente";
@@ -35,7 +35,7 @@ buildNpmPackage (finalAttrs: {
     ];
     tag = "photos-v${finalAttrs.version}";
     fetchSubmodules = true;
-    hash = "sha256-44iid/vsx3rKt/NGCgdZweJHW24ysQ7qSRq8Hayng9c=";
+    hash = "sha256-M2JFNfozDU6AeHpPul6rLtwxjc//CdxTLjl4vWojv8w=";
   };
   sourceRoot = "${finalAttrs.src.name}/web";
 
@@ -47,11 +47,11 @@ buildNpmPackage (finalAttrs: {
       sourceRoot
       cargoRoot
       ;
-    hash = "sha256-dyDNhDNbcssV4mTzGZkysTftgFfKXNLX2S0jmkX5JR4=";
+    hash = "sha256-66MZPxwXkvna3IfDGH6vPJ5CxTaYl1AJ/7qGYKHt1Mg=";
   };
   cargoRoot = "../rust";
 
-  npmDepsHash = "sha256-JZnF6MfEkm4HCslEgpAuCrSYQYnt8tNPUTFRb1CIVe4=";
+  npmDepsHash = "sha256-+ygPdfrgVGephAtef7VhRrLGLtTb503BlaJbiIzfEl8=";
 
   nativeBuildInputs = [
     binaryen
diff --git a/pkgs/by-name/ex/example-robot-data/package.nix b/pkgs/by-name/ex/example-robot-data/package.nix
index d9a84112c608..c88c990dd961 100644
--- a/pkgs/by-name/ex/example-robot-data/package.nix
+++ b/pkgs/by-name/ex/example-robot-data/package.nix
@@ -1,10 +1,7 @@
 {
-  cmake,
-  doxygen,
   fetchFromGitHub,
   lib,
   jrl-cmakemodules,
-  pkg-config,
   stdenv,
 }:
 
@@ -26,17 +23,13 @@ stdenv.mkDerivation (finalAttrs: {
 
   strictDeps = true;
 
-  nativeBuildInputs = [
-    cmake
-    doxygen
-    pkg-config
-  ];
+  nativeBuildInputs = jrl-cmakemodules.docsNativeBuildInputs;
 
-  propagatedBuildInputs = [
+  buildInputs = [
     jrl-cmakemodules
   ];
 
-  cmakeFlags = [ (lib.cmakeBool "BUILD_PYTHON_INTERFACE" false) ];
+  cmakeFlags = jrl-cmakemodules.docsCmakeFlags ++ [ (lib.cmakeBool "BUILD_PYTHON_INTERFACE" false) ];
 
   doCheck = true;
 
diff --git a/pkgs/by-name/fa/fabric-ai/package.nix b/pkgs/by-name/fa/fabric-ai/package.nix
index ea65534a6a4a..6526f3217e27 100644
--- a/pkgs/by-name/fa/fabric-ai/package.nix
+++ b/pkgs/by-name/fa/fabric-ai/package.nix
@@ -8,13 +8,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "fabric-ai";
-  version = "1.4.460";
+  version = "1.4.468";
 
   src = fetchFromGitHub {
     owner = "danielmiessler";
     repo = "fabric";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-WJYaVhooDMX2SCaDfbyfYbJb2zckJ0dsHcEOOLLGkKE=";
+    hash = "sha256-ZHxzorUDKRxS44ogbivUff+gPtN+RD6z2V6jo2TfAtw=";
   };
 
   vendorHash = "sha256-FOnCNQB/GDUAtEC/jRb80Pn/psSPantWhUk7zrFbcRE=";
diff --git a/pkgs/by-name/fa/faiss/package.nix b/pkgs/by-name/fa/faiss/package.nix
index 749fdbf20f8a..934f801fba54 100644
--- a/pkgs/by-name/fa/faiss/package.nix
+++ b/pkgs/by-name/fa/faiss/package.nix
@@ -42,7 +42,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "faiss";
-  version = "1.14.2";
+  version = "1.15.0";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -53,7 +53,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "facebookresearch";
     repo = "faiss";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-g8URLqh7VXlb5vvpkiUUfE6cgtkMwYNGzs26iUtg28A=";
+    hash = "sha256-cP13HRNa17KL5ZE6if8QmoyKQBLf8ckAa0bOaioEOgE=";
   };
 
   nativeBuildInputs = [
@@ -83,6 +83,11 @@ stdenv.mkDerivation (finalAttrs: {
     (lib.cmakeBool "FAISS_ENABLE_GPU" cudaSupport)
     (lib.cmakeBool "FAISS_ENABLE_PYTHON" pythonSupport)
     (lib.cmakeFeature "FAISS_OPT_LEVEL" optLevel)
+
+    # NOTE The `metal` command-line utility used to build the Metal kernels is not open-source.
+    # To build mlx with Metal support in Nix, you'd need to use one of the sandbox escape
+    # hatches which let you interact with a native install of Xcode, such as `composeXcodeWrapper`
+    (lib.cmakeBool "FAISS_ENABLE_METAL" false)
   ]
   ++ lib.optionals cudaSupport [
     (lib.cmakeFeature "CMAKE_CUDA_ARCHITECTURES" flags.cmakeCudaArchitecturesString)
diff --git a/pkgs/by-name/fa/famistudio/package.nix b/pkgs/by-name/fa/famistudio/package.nix
index 6493f8d92fbd..cef2e4d43aa0 100644
--- a/pkgs/by-name/fa/famistudio/package.nix
+++ b/pkgs/by-name/fa/famistudio/package.nix
@@ -30,13 +30,13 @@ let
 in
 buildDotnetModule (finalAttrs: {
   pname = "famistudio";
-  version = "4.5.1";
+  version = "4.5.2";
 
   src = fetchFromGitHub {
     owner = "BleuBleu";
     repo = "FamiStudio";
     tag = finalAttrs.version;
-    hash = "sha256-VbE9wdO//rAEtxHtol/4hHd9tw4berdncMjIXZvOIYE=";
+    hash = "sha256-KWICbVN2930hn3gHF2Wo/s941+yhNFy5zqV74MVoDcM=";
   };
 
   postPatch =
diff --git a/pkgs/by-name/fa/fatou/package.nix b/pkgs/by-name/fa/fatou/package.nix
new file mode 100644
index 000000000000..9e6fd85c7b18
--- /dev/null
+++ b/pkgs/by-name/fa/fatou/package.nix
@@ -0,0 +1,53 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  installShellFiles,
+  versionCheckHook,
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "fatou";
+  version = "0.6.0";
+
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "jolars";
+    repo = "fatou";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-lbMT9CQV/nEfjxfnnpRDPhWmSbyD1nESp797hkWE1iA=";
+  };
+
+  cargoHash = "sha256-FOID5+PfNFFCCl5zG7NwZRwAg4KjuByjhtXRC5QUBW4=";
+
+  nativeBuildInputs = [
+    installShellFiles
+  ];
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  doInstallCheck = true;
+
+  postInstall = ''
+    installShellCompletion --cmd fatou \
+      --bash target/completions/fatou.bash \
+      --fish target/completions/fatou.fish \
+      --zsh target/completions/_fatou
+
+    installManPage target/man/*
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Language server, formatter, and linter for Julia";
+    homepage = "https://fatou.dev/";
+    changelog = "https://github.com/jolars/fatou/blob/${finalAttrs.src.tag}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers.jolars ];
+    mainProgram = "fatou";
+  };
+})
diff --git a/pkgs/by-name/fe/feishu-cli/package.nix b/pkgs/by-name/fe/feishu-cli/package.nix
index 2b6b44c8209a..8bbdd285cf31 100644
--- a/pkgs/by-name/fe/feishu-cli/package.nix
+++ b/pkgs/by-name/fe/feishu-cli/package.nix
@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "feishu-cli";
-  version = "1.37.1";
+  version = "1.38.3";
 
   src = fetchFromGitHub {
     owner = "riba2534";
     repo = "feishu-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-d6hOSDjkfdIBv9T/UzRuksjKnOh0Dl4/HyBdzGSzork=";
+    hash = "sha256-wLPR7uet73JUOgXqneNAPy3Rk3/WMSnIa6zIQUXEcic=";
   };
 
-  vendorHash = "sha256-vRefU38o9Q4Q96aXoUXUggcRsfQePjlUrSsNERJH3YU=";
+  vendorHash = "sha256-JhrcuZ/FyvtUfsSq6YoYHNMjqFU/+FhxgCJ5bPtyYD8=";
 
   subPackages = [ "." ];
 
diff --git a/pkgs/by-name/fl/flux9s/package.nix b/pkgs/by-name/fl/flux9s/package.nix
index 394d996e5249..790c73a0a3d9 100644
--- a/pkgs/by-name/fl/flux9s/package.nix
+++ b/pkgs/by-name/fl/flux9s/package.nix
@@ -9,16 +9,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "flux9s";
-  version = "0.12.0";
+  version = "1.0.0";
 
   src = fetchFromGitHub {
     owner = "dgunzy";
     repo = "flux9s";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kwUoA5NTjJjCI3aUgpFOcDpRZbDEPCTzzsk7TxVn6K4=";
+    hash = "sha256-DpXTWnFjQ023cWEe46Qu+m200vVNnraSq7RNVcr9GxM=";
   };
 
-  cargoHash = "sha256-5UOaIbaAlBufB4BJ+ZX82xaKTQ4qDDRZWaweM8d2AOY=";
+  cargoHash = "sha256-R3dEHn6XY+6q6kZcp43T/ASGiEIqvtlORRJ9VOgW9f0=";
 
   nativeBuildInputs = [ pkg-config ];
 
diff --git a/pkgs/by-name/fr/framework-tool-tui/package.nix b/pkgs/by-name/fr/framework-tool-tui/package.nix
index 0c9c957e1d8b..e3468a432221 100644
--- a/pkgs/by-name/fr/framework-tool-tui/package.nix
+++ b/pkgs/by-name/fr/framework-tool-tui/package.nix
@@ -7,16 +7,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "framework-tool-tui";
-  version = "0.8.4";
+  version = "0.8.5";
 
   src = fetchFromGitHub {
     owner = "grouzen";
     repo = "framework-tool-tui";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-IZq2amZYQJxt9ojZfjgrj303vdh+NAKg6fmd2TZa4q8=";
+    hash = "sha256-AvxLx3BoAcbL7iekRZwlSA04VdBN3EVZYOCsPfZ9ZFc=";
   };
 
-  cargoHash = "sha256-jd6M7tq4BTAsETimFsSmX1KLz7G+wTloBFmq4V8svRg=";
+  cargoHash = "sha256-y+QJ4gKZ17oYxDLnt3UrGRmdEF1OJqzxvsJTKsYNOFw=";
 
   nativeBuildInputs = [ pkg-config ];
   buildInputs = [ udev ];
diff --git a/pkgs/by-name/ga/gale/package.nix b/pkgs/by-name/ga/gale/package.nix
index dc8eca9df22b..9f729b80a834 100644
--- a/pkgs/by-name/ga/gale/package.nix
+++ b/pkgs/by-name/ga/gale/package.nix
@@ -38,13 +38,13 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "gale";
-  version = "1.19.0";
+  version = "1.19.2";
 
   src = fetchFromGitHub {
     owner = "Kesomannen";
     repo = "gale";
     tag = finalAttrs.version;
-    hash = "sha256-VufV/Z1XODQKwbEpMrw0xNMdMl8D1t3bPIfdwRhQI9I=";
+    hash = "sha256-L3w9XKIeZik2+ezdNk1DDch6c613qiXhxNHqgU6lZoQ=";
   };
 
   pnpmDeps = fetchPnpmDeps {
@@ -70,7 +70,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   cargoRoot = "src-tauri";
   buildAndTestSubdir = finalAttrs.cargoRoot;
 
-  cargoHash = "sha256-4WSWvMQIYPzfxjDyuQI37ymxJhMVGxmxYDVSoknIzmg=";
+  cargoHash = "sha256-qZCKaVcmgFZJ2s/fyGKqgLJS5kGziaBjrTa3QIvjkPM=";
 
   checkFlags = [
     "--skip=config::bepinex::tests::check_from_string" # Fails a left == right check, even with left and right data being identical
diff --git a/pkgs/by-name/gh/ghqr/package.nix b/pkgs/by-name/gh/ghqr/package.nix
index 898a07dd9cf7..74d92433e817 100644
--- a/pkgs/by-name/gh/ghqr/package.nix
+++ b/pkgs/by-name/gh/ghqr/package.nix
@@ -10,17 +10,17 @@
 
 buildGoModule (finalAttrs: {
   pname = "ghqr";
-  version = "0.5.1";
+  version = "0.6.0";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "microsoft";
     repo = "ghqr";
     tag = "v.${finalAttrs.version}";
-    hash = "sha256-cyXuBP/Uj9UdvwoV/rKWUNts44DoKnHAeOD5dzBqZBM=";
+    hash = "sha256-rfYocQRAC+0VEn9Zlh5idhHSgvb+FyK1ZRe9ICBlXuk=";
   };
 
-  vendorHash = "sha256-R/jo2Stwt9gZkJg9WfWSBTn/+3oravtE6+yh287MjDQ=";
+  vendorHash = "sha256-y0xTK9RYBXAY3P8ddQD9ktwxkNRkFqYirL7voMBk1UI=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/gi/gitlab-ci-local/package.nix b/pkgs/by-name/gi/gitlab-ci-local/package.nix
index 2d4fcb5ad5a8..17f631ccbe6c 100644
--- a/pkgs/by-name/gi/gitlab-ci-local/package.nix
+++ b/pkgs/by-name/gi/gitlab-ci-local/package.nix
@@ -15,13 +15,13 @@
 
 let
   pname = "gitlab-ci-local";
-  version = "4.73.0";
+  version = "4.74.0";
 
   src = fetchFromGitHub {
     owner = "firecow";
     repo = "gitlab-ci-local";
     rev = version;
-    hash = "sha256-gwjTnDc/JI645lLuaAz0gjIsBIxLFzJTMCsmrUKIz6U=";
+    hash = "sha256-G1rtcMQ8My6whu3VLLwRc7TE42RzpBqzn3I1lK/Ts4M=";
   };
 
   node_modules = stdenv.mkDerivation {
@@ -57,7 +57,7 @@ let
       runHook postInstall
     '';
 
-    outputHash = "sha256-EDGVXMyfPVoAxpMndHI3en6R6Wz/wJ9aKmuvAVg44ww=";
+    outputHash = "sha256-OS+HgVvaqy6NQ5pC4BbZwSAcYpGU2ka5VFLtEIQ9NyM=";
 
     outputHashAlgo = "sha256";
     outputHashMode = "recursive";
diff --git a/pkgs/by-name/go/golds/package.nix b/pkgs/by-name/go/golds/package.nix
index b492fb0775e1..7893b9202809 100644
--- a/pkgs/by-name/go/golds/package.nix
+++ b/pkgs/by-name/go/golds/package.nix
@@ -8,13 +8,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "golds";
-  version = "0.8.4";
+  version = "0.8.5";
 
   src = fetchFromGitHub {
     owner = "go101";
     repo = "golds";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Jt0Q6Ie1HSqRs4+zlmNOXlSMXfWu0nSIOjglduq4FUE=";
+    hash = "sha256-WYjNvpNT5vuiHqo6TWE+uhptG4fke3eaKkJbeNIwwoU=";
   };
 
   # nixpkgs is not using the go distpack archive and missing a VERSION file in the source
diff --git a/pkgs/by-name/gy/gyroflow-bin/package.nix b/pkgs/by-name/gy/gyroflow-bin/package.nix
deleted file mode 100644
index 5b4736bb35ad..000000000000
--- a/pkgs/by-name/gy/gyroflow-bin/package.nix
+++ /dev/null
@@ -1,49 +0,0 @@
-{
-  lib,
-  stdenvNoCC,
-  fetchurl,
-  _7zz,
-  makeWrapper,
-  gyroflow,
-  nix-update-script,
-}:
-
-stdenvNoCC.mkDerivation (finalAttrs: {
-  pname = "gyroflow-bin";
-  version = "1.6.3";
-  __structuredAttrs = true;
-  strictDeps = true;
-
-  src = fetchurl {
-    url = "https://github.com/gyroflow/gyroflow/releases/download/v${finalAttrs.version}/Gyroflow-mac-universal.dmg";
-    hash = "sha256-++Jnk8Y58UENiZXeutGIchWHEIy2p0Ik6Hn3nku4ocA=";
-  };
-
-  sourceRoot = ".";
-
-  nativeBuildInputs = [
-    _7zz
-    makeWrapper
-  ];
-
-  installPhase = ''
-    runHook preInstall
-
-    mkdir -p $out/Applications
-    cp -r "Gyroflow v${finalAttrs.version}/Gyroflow.app" $out/Applications/
-
-    makeWrapper $out/Applications/Gyroflow.app/Contents/MacOS/gyroflow $out/bin/gyroflow
-
-    runHook postInstall
-  '';
-
-  meta = gyroflow.meta // {
-    description = "Advanced gyro-based video stabilization tool (pre-built macOS binary)";
-    maintainers = with lib.maintainers; [ Br1ght0ne ];
-    mainProgram = "gyroflow";
-    platforms = lib.platforms.darwin;
-    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
-  };
-
-  passthru.updateScript = nix-update-script { };
-})
diff --git a/pkgs/by-name/gy/gyroflow/package.nix b/pkgs/by-name/gy/gyroflow/package.nix
index f3db838c18c9..be5401d80fa2 100644
--- a/pkgs/by-name/gy/gyroflow/package.nix
+++ b/pkgs/by-name/gy/gyroflow/package.nix
@@ -1,7 +1,9 @@
 {
   lib,
+  stdenv,
   rustPlatform,
   fetchFromGitHub,
+  fetchurl,
   makeDesktopItem,
   clang,
   copyDesktopItems,
@@ -10,56 +12,88 @@
   qt6,
   alsa-lib,
   bash,
-  ffmpeg,
+  bzip2,
+  ffmpeg_7,
+  libicns,
+  libxml2,
   mdk-sdk,
+  nix-update-script,
   ocl-icd,
   opencv,
+  versionCheckHook,
+  zlib,
 }:
 let
-  lens-profiles = fetchFromGitHub {
-    owner = "gyroflow";
-    repo = "lens_profiles";
-    tag = "v36";
-    hash = "sha256-JjH7cGT9hzB9pv0W6FUPaejkiUj357IM2siJNrSHiYY=";
+  lens-profiles-version = "v41";
+
+  lens-profiles-db = fetchurl {
+    url = "https://github.com/gyroflow/lens_profiles/releases/download/${lens-profiles-version}/profiles.cbor.gz";
+    hash = "sha256-W5E2aXt13fnNogll8X54a2yFMOPVkQn4dQUGlgLn9nY=";
   };
 in
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "gyroflow";
   version = "1.6.3";
 
   src = fetchFromGitHub {
     owner = "gyroflow";
     repo = "gyroflow";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-ncGbM8wIwnyLHp+oArgDnKCCGIeywdH7YGZPgRBLiJM=";
   };
 
   cargoHash = "sha256-9UamQxrKVMSivhZ/cvRRCliaf3eFeHg5XPPtuaRKrg0=";
 
+  __structuredAttrs = true;
+  strictDeps = true;
+
   nativeBuildInputs = [
     clang
-    copyDesktopItems
-    patchelf
     pkg-config
     rustPlatform.bindgenHook
     qt6.wrapQtAppsHook
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
+    copyDesktopItems
+    patchelf
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    libicns
   ];
 
   buildInputs = [
-    alsa-lib
     bash
-    ffmpeg
+    ffmpeg_7
     mdk-sdk
-    ocl-icd
     opencv
     qt6.qtbase
     qt6.qtdeclarative
     qt6.qtsvg
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
+    alsa-lib
+    ocl-icd
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    bzip2
+    libxml2
+    zlib
   ];
 
   postPatch = ''
+    install -Dm644 ${lens-profiles-db} resources/camera_presets/profiles.cbor.gz
+
     substituteInPlace build.rs \
       --replace-fail 'println!("cargo:rustc-link-lib=static:+whole-archive=z")' ""
+
+    # Breaks reproducibility with build time embedded in the binary
+    substituteInPlace build.rs \
+      --replace-fail 'println!("cargo:rustc-env=BUILD_TIME={}", (time.as_secs() - 1642516578) / 600);' ""
+  ''
+  + lib.optionalString stdenv.hostPlatform.isDarwin ''
+    substituteInPlace build.rs \
+      --replace-fail 'println!("cargo:rustc-link-lib=static:+whole-archive=x264");' "" \
+      --replace-fail 'println!("cargo:rustc-link-lib=static=x265");' ""
   '';
 
   # qml-video-rs and gyroflow assume that all Qt headers are installed
@@ -70,22 +104,36 @@ rustPlatform.buildRustPackage rec {
   # https://github.com/gyroflow/gyroflow/blob/v1.5.4/build.rs#L163-L186
   # Additionally gyroflow needs QtQuickControls2:
   # https://github.com/gyroflow/gyroflow/blob/v1.5.4/build.rs#L173
-  env.NIX_CFLAGS_COMPILE = toString [
-    "-I${qt6.qtdeclarative}/include/QtQuick"
-    "-I${qt6.qtdeclarative}/include/QtQuick/${qt6.qtdeclarative.version}"
-    "-I${qt6.qtdeclarative}/include/QtQuick/${qt6.qtdeclarative.version}/QtQuick"
-    "-I${qt6.qtdeclarative}/include/QtQml"
-    "-I${qt6.qtdeclarative}/include/QtQml/${qt6.qtdeclarative.version}"
-    "-I${qt6.qtdeclarative}/include/QtQml/${qt6.qtdeclarative.version}/QtQml"
-    "-I${qt6.qtdeclarative}/include/QtQuickControls2"
-  ];
+  env.NIX_CFLAGS_COMPILE = toString (
+    if stdenv.hostPlatform.isDarwin then
+      [
+        "-F${qt6.qtdeclarative}/lib"
+        "-I${qt6.qtdeclarative}/lib/QtQuick.framework/Headers"
+        "-I${qt6.qtdeclarative}/lib/QtQuick.framework/Headers/${qt6.qtdeclarative.version}"
+        "-I${qt6.qtdeclarative}/lib/QtQuick.framework/Headers/${qt6.qtdeclarative.version}/QtQuick"
+        "-I${qt6.qtdeclarative}/lib/QtQml.framework/Headers"
+        "-I${qt6.qtdeclarative}/lib/QtQml.framework/Headers/${qt6.qtdeclarative.version}"
+        "-I${qt6.qtdeclarative}/lib/QtQml.framework/Headers/${qt6.qtdeclarative.version}/QtQml"
+        "-I${qt6.qtdeclarative}/lib/QtQuickControls2.framework/Headers"
+      ]
+    else
+      [
+        "-I${qt6.qtdeclarative}/include/QtQuick"
+        "-I${qt6.qtdeclarative}/include/QtQuick/${qt6.qtdeclarative.version}"
+        "-I${qt6.qtdeclarative}/include/QtQuick/${qt6.qtdeclarative.version}/QtQuick"
+        "-I${qt6.qtdeclarative}/include/QtQml"
+        "-I${qt6.qtdeclarative}/include/QtQml/${qt6.qtdeclarative.version}"
+        "-I${qt6.qtdeclarative}/include/QtQml/${qt6.qtdeclarative.version}/QtQml"
+        "-I${qt6.qtdeclarative}/include/QtQuickControls2"
+      ]
+  );
 
   # FFMPEG_DIR is used by ffmpeg-sys-next/build.rs and
   # gyroflow/build.rs.  ffmpeg-sys-next fails to build if this dir
   # does not contain ffmpeg *headers*.  gyroflow assumes that it
   # contains ffmpeg *libraries*, but builds fine as long as it is set
   # with any value.
-  env.FFMPEG_DIR = ffmpeg.dev;
+  env.FFMPEG_DIR = ffmpeg_7.dev;
 
   # These variables are needed by gyroflow/build.rs.
   # OPENCV_LINK_LIBS is based on the value in gyroflow/_scripts/common.just, with opencv_dnn added to fix linking.
@@ -95,35 +143,79 @@ rustPlatform.buildRustPackage rec {
   # For qml-video-rs. It concatenates "lib/" to this value so it needs a trailing "/":
   env.MDK_SDK = "${mdk-sdk}/";
 
-  preCheck = ''
-    # qml-video-rs/build.rs wants to overwrite it:
-    find target -name libmdk.so.0 -exec chmod +w {} \;
-  '';
-
   doCheck = false; # No tests.
 
-  postInstall = ''
-    mkdir -p $out/opt/Gyroflow
-    cp -r resources $out/opt/Gyroflow/
-    ln -s ${lens-profiles} $out/opt/Gyroflow/resources/camera_presets
+  # mdk-sdk license key is hardcoded to 'gyroflow' process name, wrapQt changes it,
+  # which breaks the license check and throws a QR code
+  dontWrapQtApps = true;
 
-    rm -rf $out/lib
-    patchelf $out/bin/gyroflow --add-rpath ${mdk-sdk}/lib
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
 
-    mv $out/bin/gyroflow $out/opt/Gyroflow/
-    ln -s ../opt/Gyroflow/gyroflow $out/bin/
+  postInstall =
+    if stdenv.hostPlatform.isDarwin then
+      ''
+        contents=$out/Applications/Gyroflow.app/Contents
 
-    install -D ${./gyroflow-open.sh} $out/bin/gyroflow-open
-    install -Dm644 ${./gyroflow-mime.xml} $out/share/mime/packages/gyroflow.xml
-    install -Dm644 resources/icon.svg $out/share/icons/hicolor/scalable/apps/gyroflow.svg
-  '';
+        mkdir -p $out/Applications
+        cp -r _deployment/mac/Gyroflow.app $out/Applications/
+        find $out/Applications/Gyroflow.app -name .empty -delete
 
-  desktopItems = [
+        # Qt is located through wrapQtAppsHook, so drop upstream's qt.conf,
+        # which points plugin and QML lookups back inside the bundle.
+        rm $contents/Resources/qt.conf
+
+        substituteInPlace $contents/Info.plist \
+          --replace-fail \
+            '<key>CFBundleExecutable</key>                  <string>gyroflow</string>' \
+            '<key>CFBundleExecutable</key>                  <string>gyroflow-launcher</string>'
+
+        png2icns $contents/Resources/AppIcon.icns resources/icon_1024_mac.png
+
+        install -Dm644 ${lens-profiles-db} $contents/Resources/camera_presets/profiles.cbor.gz
+
+        install_name_tool -add_rpath ${mdk-sdk}/lib $out/bin/gyroflow
+        mv $out/bin/gyroflow $contents/MacOS/gyroflow
+        rmdir $out/bin
+
+        rm -rf $out/lib
+      ''
+    else
+      ''
+        mkdir -p $out/opt/Gyroflow
+        cp -r resources $out/opt/Gyroflow/
+
+        rm -rf $out/lib
+        patchelf $out/bin/gyroflow --add-rpath ${mdk-sdk}/lib
+
+        mv $out/bin/gyroflow $out/opt/Gyroflow/
+
+        install -D ${./gyroflow-open.sh} $out/bin/gyroflow-open
+        install -Dm644 ${./gyroflow-mime.xml} $out/share/mime/packages/gyroflow.xml
+        install -Dm644 resources/icon.svg $out/share/icons/hicolor/scalable/apps/gyroflow.svg
+      '';
+
+  postFixup =
+    if stdenv.hostPlatform.isDarwin then
+      ''
+        macos=$out/Applications/Gyroflow.app/Contents/MacOS
+        makeQtWrapper $macos/gyroflow $macos/gyroflow-launcher
+
+        mkdir -p $out/bin
+        ln -s ../Applications/Gyroflow.app/Contents/MacOS/gyroflow-launcher $out/bin/gyroflow
+      ''
+    else
+      ''
+        makeQtWrapper $out/opt/Gyroflow/gyroflow $out/bin/gyroflow
+      '';
+
+  desktopItems = lib.optionals stdenv.hostPlatform.isLinux [
     (makeDesktopItem {
       name = "gyroflow";
       desktopName = "Gyroflow";
       genericName = "Video stabilization using gyroscope data";
-      comment = meta.description;
+      comment = finalAttrs.meta.description;
       icon = "gyroflow";
       exec = "gyroflow-open %u";
       terminal = false;
@@ -140,14 +232,23 @@ rustPlatform.buildRustPackage rec {
     })
   ];
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Advanced gyro-based video stabilization tool";
     homepage = "https://gyroflow.xyz";
+    mainProgram = "gyroflow";
     license = with lib.licenses; [
       gpl3Plus
       cc0
     ];
-    maintainers = [ ];
-    platforms = [ "x86_64-linux" ];
+    maintainers = with lib.maintainers; [
+      Br1ght0ne
+      BatteredBunny
+    ];
+    platforms = [
+      "aarch64-darwin"
+      "x86_64-linux"
+    ];
   };
-}
+})
diff --git a/pkgs/by-name/ha/harlequin/package.nix b/pkgs/by-name/ha/harlequin/package.nix
index 26246b46aa86..4ccfc4385d78 100644
--- a/pkgs/by-name/ha/harlequin/package.nix
+++ b/pkgs/by-name/ha/harlequin/package.nix
@@ -29,14 +29,14 @@ let
 in
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "harlequin";
-  version = "2.5.2";
+  version = "2.6.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "tconbeer";
     repo = "harlequin";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ea8fR+tsur/tIQwfUS88HvjCADv8VgEjHD7JnR44Twk=";
+    hash = "sha256-jZGQ6t6djiKK9B+R8TYMPwXKkLPk7Z+dXuUcVQuZMfU=";
   };
 
   pythonRelaxDeps = [
@@ -90,6 +90,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
 
   nativeCheckInputs = with python3Packages; [
     pytest-asyncio
+    pytest-xdist
     pytestCheckHook
     versionCheckHook
     writableTmpDirAsHomeHook
@@ -117,7 +118,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
   meta = {
     description = "SQL IDE for Your Terminal";
     homepage = "https://harlequin.sh";
-    changelog = "https://github.com/tconbeer/harlequin/releases/tag/v${finalAttrs.version}";
+    changelog = "https://github.com/tconbeer/harlequin/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     mainProgram = "harlequin";
     maintainers = with lib.maintainers; [ pcboy ];
diff --git a/pkgs/by-name/he/heimdall-proxy/package.nix b/pkgs/by-name/he/heimdall-proxy/package.nix
index c4fa3bfaed21..98f58b379f3a 100644
--- a/pkgs/by-name/he/heimdall-proxy/package.nix
+++ b/pkgs/by-name/he/heimdall-proxy/package.nix
@@ -4,7 +4,7 @@
   lib,
 }:
 let
-  version = "0.17.18";
+  version = "0.17.19";
 in
 buildGoModule {
   pname = "heimdall-proxy";
@@ -15,10 +15,10 @@ buildGoModule {
     owner = "dadrus";
     repo = "heimdall";
     tag = "v${version}";
-    hash = "sha256-XNcUn/Xr1zYEfURX1POwGdSZqdmPTA8SqRzP+4qNECE=";
+    hash = "sha256-O1qqME2k2SggvYPlqX61wQn9yeh8skqe9Fjsc/GhUPc=";
   };
 
-  vendorHash = "sha256-r2IpMllA8EDCGwz91qXhsRR2LoTqRbxPXfN6PIJWvqk=";
+  vendorHash = "sha256-85Aty7bCV7sq4CDAk7CCGQuD18P1Uj1AMO191k+YAHY=";
 
   tags = [ "sqlite" ];
 
diff --git a/pkgs/by-name/in/intel-media-driver/cmake4.patch b/pkgs/by-name/in/intel-media-driver/cmake4.patch
index 9cd8cdb82bce..7ed2a4ec79b7 100644
--- a/pkgs/by-name/in/intel-media-driver/cmake4.patch
+++ b/pkgs/by-name/in/intel-media-driver/cmake4.patch
@@ -63,19 +63,6 @@ index af622be19cb..40e4eba171e 100644
  
  project(KrnToHex_IGA)
  
-diff --git a/cmrtlib/CMakeLists.txt b/cmrtlib/CMakeLists.txt
-index 9ecb1e4e10a..54f907b3772 100644
---- a/cmrtlib/CMakeLists.txt
-+++ b/cmrtlib/CMakeLists.txt
-@@ -19,7 +19,7 @@
- # OTHER DEALINGS IN THE SOFTWARE.
- 
- set(BUILD_ALL $ENV{BUILD_ALL})
--cmake_minimum_required(VERSION 2.8)
-+cmake_minimum_required(VERSION 3.5)
- project(CM_RT)
- add_subdirectory(${CMAKE_CURRENT_LIST_DIR}/linux)
- 
 diff --git a/cmrtlib/linux/CMakeLists.txt b/cmrtlib/linux/CMakeLists.txt
 index b066138d9df..df02bab2a69 100644
 --- a/cmrtlib/linux/CMakeLists.txt
@@ -141,16 +128,3 @@ index 6b1f7433596..bba044a97d8 100644
  
  project(devult)
  
-diff --git a/os_release_info.cmake b/os_release_info.cmake
-index b4a84e2c5cb..a3b879d8545 100644
---- a/os_release_info.cmake
-+++ b/os_release_info.cmake
-@@ -29,7 +29,7 @@ set(_os_release_info TRUE)
- # of the local cmake environment.
- 
- # Set cmake policies for at least this level:
--cmake_minimum_required(VERSION 2.8.12)
-+cmake_minimum_required(VERSION 3.5)
- 
- 
- # Function get_os_release_info - Determine and return OS name and version
diff --git a/pkgs/by-name/in/intel-media-driver/package.nix b/pkgs/by-name/in/intel-media-driver/package.nix
index 7ae6748c96c2..4d2484c7f48c 100644
--- a/pkgs/by-name/in/intel-media-driver/package.nix
+++ b/pkgs/by-name/in/intel-media-driver/package.nix
@@ -17,7 +17,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "intel-media-driver";
-  version = "26.1.6";
+  version = "26.2.4";
 
   outputs = [
     "out"
@@ -28,7 +28,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "intel";
     repo = "media-driver";
     tag = "intel-media-${finalAttrs.version}";
-    hash = "sha256-Jk9pIZ1V1tKi9l6u10tftClVZhYn2ECvALt26n58XC0=";
+    hash = "sha256-dgdqezwnwY5FCaDhov0ft4gnhRdCDyD2DFJ17sF2d4o=";
   };
 
   patches = [
diff --git a/pkgs/by-name/jo/jocalsend/package.nix b/pkgs/by-name/jo/jocalsend/package.nix
index 6597f1be5bb7..ff99d535f161 100644
--- a/pkgs/by-name/jo/jocalsend/package.nix
+++ b/pkgs/by-name/jo/jocalsend/package.nix
@@ -9,7 +9,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "jocalsend";
-  version = "1.618033988";
+  version = "1.6180339887";
 
   __structuredAttrs = true;
 
@@ -18,10 +18,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "nebkor";
     repo = "joecalsend";
     tag = finalAttrs.version;
-    hash = "sha256-nzsvVC1e8ENh0bpQwiogGew823NNmSNXN+VZZHfVFIY=";
+    hash = "sha256-sOgFOAJXX5mugjMfTICNrJHc/DRD5zdZsg/K4cbRjlQ=";
   };
 
-  cargoHash = "sha256-5V/a6rj08Ucu6S+SBukYQktWLVnnbXeoGan1oYTozHc=";
+  cargoHash = "sha256-UEzyy6SQ3ntJHeXivd6e8Xvr4aTdpfYrFMWqLjoBrJc=";
 
   nativeBuildInputs = [
     pkg-config
diff --git a/pkgs/by-name/jr/jrl-cmakemodules-scripts/package.nix b/pkgs/by-name/jr/jrl-cmakemodules-scripts/package.nix
new file mode 100644
index 000000000000..2bce816b5831
--- /dev/null
+++ b/pkgs/by-name/jr/jrl-cmakemodules-scripts/package.nix
@@ -0,0 +1,35 @@
+{
+  jrl-cmakemodules,
+  python3Packages,
+}:
+python3Packages.buildPythonApplication (finalAttrs: {
+  inherit (jrl-cmakemodules) version src;
+
+  pname = "jrl-cmakemodules-scripts";
+  pyproject = true;
+
+  sourceRoot = "${finalAttrs.src.name}/v2/scripts";
+
+  build-system = [ python3Packages.setuptools ];
+
+  dependencies = [
+    python3Packages.cmake-parser
+    python3Packages.packaging
+    python3Packages.rich
+    python3Packages.ruamel-yaml
+    python3Packages.tomlkit
+  ];
+
+  nativeCheckInputs = [
+    python3Packages.pytest-mock
+    python3Packages.pytestCheckHook
+  ];
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = jrl-cmakemodules.meta // {
+    description = "Release scripting tools for JRL CMake modules";
+    mainProgram = "jrl-release";
+  };
+})
diff --git a/pkgs/by-name/jr/jrl-cmakemodules/package.nix b/pkgs/by-name/jr/jrl-cmakemodules/package.nix
index 43bbda66f170..47a037752c74 100644
--- a/pkgs/by-name/jr/jrl-cmakemodules/package.nix
+++ b/pkgs/by-name/jr/jrl-cmakemodules/package.nix
@@ -4,8 +4,32 @@
   fetchFromGitHub,
   nix-update-script,
   cmake,
+
+  # docs
+  doxygen,
+  graphviz,
+  ghostscript,
+  pdf2svg,
+  pkg-config,
+  texliveBasic,
+  writableTmpDirAsHomeHook,
+
+  # tests
+  catch2_3,
+  matio,
+  python3Packages,
+  simde,
+  suitesparse,
 }:
 
+let
+  doxygenTexlive = texliveBasic.withPackages (ps: [
+    ps.newunicodechar
+    ps.stmaryrd
+    ps.xcolor
+  ]);
+in
+
 stdenv.mkDerivation (finalAttrs: {
   pname = "jrl-cmakemodules";
   version = "2.1.0";
@@ -19,7 +43,43 @@ stdenv.mkDerivation (finalAttrs: {
 
   nativeBuildInputs = [ cmake ];
 
-  passthru.updateScript = nix-update-script { };
+  cmakeFlags = [
+    (lib.cmakeBool "JRL_CMAKEMODULES_GENERATE_API_DOC" true)
+    (lib.cmakeBool "JRL_CMAKEMODULES_BUILD_TESTS" finalAttrs.doCheck)
+  ];
+
+  doCheck = true;
+
+  checkInputs = [
+    catch2_3
+    matio
+    python3Packages.boost
+    python3Packages.nanobind
+    python3Packages.numpy
+    python3Packages.pytest
+    simde
+    suitesparse
+  ];
+
+  passthru = {
+    updateScript = nix-update-script { };
+    docsNativeBuildInputs = [
+      cmake
+      doxygen
+      doxygenTexlive
+      graphviz
+      ghostscript
+      pdf2svg
+      pkg-config
+      writableTmpDirAsHomeHook
+    ];
+    docsCmakeFlags = [
+      (lib.cmakeFeature "DOXYGEN_FORMULA_FONTSIZE" "13")
+      (lib.cmakeFeature "DOXYGEN_HTML_FORMULA_FORMAT" "svg")
+      (lib.cmakeFeature "DOXYGEN_HTML_OUTPUT" "doxygen-html")
+      (lib.cmakeBool "DOXYGEN_USE_MATHJAX" false)
+    ];
+  };
 
   meta = {
     description = "CMake utility toolbox";
diff --git a/pkgs/by-name/ju/justbuild/package.nix b/pkgs/by-name/ju/justbuild/package.nix
index 2192558735b4..9293bf217992 100644
--- a/pkgs/by-name/ju/justbuild/package.nix
+++ b/pkgs/by-name/ju/justbuild/package.nix
@@ -34,13 +34,13 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "justbuild";
-  version = "1.6.5";
+  version = "1.6.6";
 
   src = fetchFromGitHub {
     owner = "just-buildsystem";
     repo = "justbuild";
     tag = "v${version}";
-    hash = "sha256-aeBIgbjSD9iVhwtkOOs63Xrpn8OshoABtOZhrjn3/jw=";
+    hash = "sha256-WvoH4xPtXbF0QoJLVOcrajavfbsEdnFSV+P6eTWV/vA=";
   };
 
   bazelapi = fetchurl {
diff --git a/pkgs/by-name/ka/karakeep/package.nix b/pkgs/by-name/ka/karakeep/package.nix
index 55d4e20cbc2a..3cb1de13e404 100644
--- a/pkgs/by-name/ka/karakeep/package.nix
+++ b/pkgs/by-name/ka/karakeep/package.nix
@@ -11,20 +11,20 @@
   python3,
   srcOnly,
   removeReferencesTo,
-  pnpm_9,
+  pnpm_11,
   fetchPnpmDeps,
   pnpmConfigHook,
   versionCheckHook,
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "karakeep";
-  version = "0.32.0";
+  version = "0.33.0";
 
   src = fetchFromGitHub {
     owner = "karakeep-app";
     repo = "karakeep";
     tag = "cli/v${finalAttrs.version}";
-    hash = "sha256-P88DQi0T7tmBH7cjs8/Hz77bU0oG7u67XPoLsdePNhI=";
+    hash = "sha256-WL4M2rpbIDUTUUCuw2T5tG4VCMGZaLsWq+BCAQBa2Sc=";
   };
 
   patches = [
@@ -44,7 +44,7 @@ stdenv.mkDerivation (finalAttrs: {
     nodejs
     node-gyp
     pnpmConfigHook
-    pnpm_9
+    pnpm_11
   ];
 
   buildInputs = [
@@ -58,9 +58,9 @@ stdenv.mkDerivation (finalAttrs: {
       src
       patches
       ;
-    pnpm = pnpm_9;
-    fetcherVersion = 3;
-    hash = "sha256-aT4JPx3iYw4kw8GHXKWMnelSVT0q2S3PK8DgSCQCyKQ=";
+    pnpm = pnpm_11;
+    fetcherVersion = 4;
+    hash = "sha256-JhD1soZj8l6ZVtTOSZc1lMfWfi3R0PU/SsVHEvr50PI=";
   };
   buildPhase = ''
     runHook preBuild
diff --git a/pkgs/by-name/ka/karakeep/patches/cache-from-env-not-nix-store.patch b/pkgs/by-name/ka/karakeep/patches/cache-from-env-not-nix-store.patch
index cdae13c94a2e..6366280c44e0 100644
--- a/pkgs/by-name/ka/karakeep/patches/cache-from-env-not-nix-store.patch
+++ b/pkgs/by-name/ka/karakeep/patches/cache-from-env-not-nix-store.patch
@@ -5,10 +5,10 @@ index cba8876..c3d7c43 100644
 @@ -495,7 +495,8 @@ class ImageOptimizerCache {
          ]);
      }
-     constructor({ distDir, nextConfig }){
--        this.cacheDir = (0, _path.join)(distDir, 'cache', 'images');
+     constructor({ distDir, nextConfig, cacheHandler }){
+-        this.cacheDir = (0, _path.join)(/* turbopackIgnore: true */ distDir, 'cache', 'images');
 +        const cacheDir = process.env['NEXT_CACHE_DIR'] || (0, _path.join)(distDir, 'cache');
 +        this.cacheDir = (0, _path.join)(cacheDir, 'images');
          this.nextConfig = nextConfig;
-     }
-     async get(cacheKey) {
+         this.cacheHandler = cacheHandler;
+         // Eagerly start LRU initialization for filesystem cache
diff --git a/pkgs/by-name/ka/karakeep/patches/dont-lock-pnpm-version.patch b/pkgs/by-name/ka/karakeep/patches/dont-lock-pnpm-version.patch
index b9e5609b33f0..10e0e7d3d3cf 100644
--- a/pkgs/by-name/ka/karakeep/patches/dont-lock-pnpm-version.patch
+++ b/pkgs/by-name/ka/karakeep/patches/dont-lock-pnpm-version.patch
@@ -5,6 +5,6 @@ requirement.
 ---
 --- a/package.json
 +++ b/package.json
-@@ -40 +40 @@
--  "packageManager": "pnpm@9.15.9",
-+  "packageManager": "pnpm",
+@@ -41 +41 @@
+-  "packageManager": "pnpm@11.2.1"
++  "packageManager": "pnpm"
diff --git a/pkgs/by-name/ki/kingfisher/package.nix b/pkgs/by-name/ki/kingfisher/package.nix
index 589b9cc1acc1..e43b203c3f99 100644
--- a/pkgs/by-name/ki/kingfisher/package.nix
+++ b/pkgs/by-name/ki/kingfisher/package.nix
@@ -16,7 +16,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "kingfisher";
-  version = "1.109.0";
+  version = "1.110.0";
 
   __structuredAttrs = true;
 
@@ -24,10 +24,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "mongodb";
     repo = "kingfisher";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-IdHL4qAVvHRbvEt+GKjGPX62SXp/WPvwJkvMqtZcqU8=";
+    hash = "sha256-Awl9uEsT8/vzjGoFm4nxfU8q1Dc0Pze59YKRsIS7jWg=";
   };
 
-  cargoHash = "sha256-f+y3KXd8bBxdZtP+kGiFYUoVLzH7CLOtznAsCjAQYL8=";
+  cargoHash = "sha256-AIaJtM3gozfmcvPmtBi/h+Kf1UN47Jqd895pKRRPJR4=";
 
   nativeBuildInputs = [
     cmake
diff --git a/pkgs/by-name/ko/komodo/package.nix b/pkgs/by-name/ko/komodo/package.nix
index 1db23f3ce013..f57c1d8b0ca6 100644
--- a/pkgs/by-name/ko/komodo/package.nix
+++ b/pkgs/by-name/ko/komodo/package.nix
@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "komodo";
-  version = "2.2.0";
+  version = "2.3.1";
 
   src = fetchFromGitHub {
     owner = "moghtech";
     repo = "komodo";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Hw0JD4e/ODK19M/bZtX9foCu5c79XA8Jgv2fleltdLs=";
+    hash = "sha256-nEST1Mp/WJJ+GtsC9cX10w3thywe3dHNrQV5iLPXMIQ=";
   };
 
-  cargoHash = "sha256-b/AgQBmS1QfP+BOCT4xL8majVKobig5M2YJhGuXMToc=";
+  cargoHash = "sha256-krFHWiHgdBL2jIr0YsBrNG4+NaaoaSVf6q65jWiQGsg=";
 
   nativeBuildInputs = [ pkg-config ];
 
diff --git a/pkgs/by-name/li/libretro-shaders-slang/package.nix b/pkgs/by-name/li/libretro-shaders-slang/package.nix
index c69961f1a1c7..ba57b54b7425 100644
--- a/pkgs/by-name/li/libretro-shaders-slang/package.nix
+++ b/pkgs/by-name/li/libretro-shaders-slang/package.nix
@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation {
   pname = "libretro-shaders-slang";
-  version = "0-unstable-2026-07-15";
+  version = "0-unstable-2026-08-03";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "slang-shaders";
-    rev = "3b0d6aa1d134a168478cd9c904a866d969f8882b";
-    hash = "sha256-wSrKcrX5GcTXfaxxjyd7COAFsaZsed8pYtScqGo+LA8=";
+    rev = "620114039b453ebb2e3de1a5846b0d9b05676bf4";
+    hash = "sha256-ox5Mo9ShWAVQDT6tboA72Mugny3aCQaN1QLpTs4bR6Y=";
   };
 
   dontConfigure = true;
diff --git a/pkgs/by-name/li/libudev-zero/package.nix b/pkgs/by-name/li/libudev-zero/package.nix
index bbaab9072059..9c42647ef9a4 100644
--- a/pkgs/by-name/li/libudev-zero/package.nix
+++ b/pkgs/by-name/li/libudev-zero/package.nix
@@ -8,13 +8,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libudev-zero";
-  version = "1.0.4";
+  version = "1.0.5";
 
   src = fetchFromGitHub {
     owner = "illiliti";
     repo = "libudev-zero";
     rev = finalAttrs.version;
-    sha256 = "sha256-uKOfN9oJBFkR5n92bQ8RxVxfNaE2EKajrQseDkH5q+k=";
+    sha256 = "sha256-kHTWoHxORizNF8614E0gfWeJgobDxqtoUpawQmEvtAQ=";
   };
 
   makeFlags = [
diff --git a/pkgs/by-name/ls/lstk/package.nix b/pkgs/by-name/ls/lstk/package.nix
index 7a3609d407b2..0be3aa2ea982 100644
--- a/pkgs/by-name/ls/lstk/package.nix
+++ b/pkgs/by-name/ls/lstk/package.nix
@@ -7,7 +7,7 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "lstk";
-  version = "0.18.0";
+  version = "0.20.1";
 
   __structuredAttrs = true;
 
@@ -15,10 +15,10 @@ buildGoModule (finalAttrs: {
     owner = "localstack";
     repo = "lstk";
     tag = "v${finalAttrs.version}";
-    sha256 = "sha256-ukmz27Bq4yrJ0oNIwwG4dyy1nLrFLL8KNEJjnihvTEU=";
+    sha256 = "sha256-PL6Xqq1S4RDm0Uj5Am9UiJJJ8Q/nWszuyRXkW+Y9cCE=";
   };
 
-  vendorHash = "sha256-hia/DjlnvnjuJvTE52Twr61bDFR9Oz/gFpp94FY3pYc=";
+  vendorHash = "sha256-WiWMOudPoS3qOMs+m/pz9VYZ9OPRn3IWHxAMC6eBjtg=";
 
   excludedPackages = "test/integration";
 
diff --git a/pkgs/by-name/lx/lxappearance/package.nix b/pkgs/by-name/lx/lxappearance/package.nix
index 8e083b830e76..a1735c56f049 100644
--- a/pkgs/by-name/lx/lxappearance/package.nix
+++ b/pkgs/by-name/lx/lxappearance/package.nix
@@ -6,12 +6,10 @@
   intltool,
   pkg-config,
   libx11,
-  gtk2,
   gtk3,
   libxslt,
   docbook_xsl,
   wrapGAppsHook3,
-  withGtk3 ? true,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
@@ -38,7 +36,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   buildInputs = [
     libx11
-    (if withGtk3 then gtk3 else gtk2)
+    gtk3
   ];
 
   patches = [
@@ -47,7 +45,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   env.XSLTPROC = lib.getExe' libxslt "xsltproc";
 
-  configureFlags = lib.optional withGtk3 "--enable-gtk3";
+  configureFlags = [ "--enable-gtk3" ];
 
   meta = {
     description = "Lightweight program for configuring the theme and fonts of gtk applications";
diff --git a/pkgs/by-name/lx/lxpanel/package.nix b/pkgs/by-name/lx/lxpanel/package.nix
index d23c0eed34a5..7952ee45f5d6 100644
--- a/pkgs/by-name/lx/lxpanel/package.nix
+++ b/pkgs/by-name/lx/lxpanel/package.nix
@@ -8,14 +8,11 @@
   m4,
   intltool,
   libxmlxx,
-  keybinder,
   keybinder3,
-  gtk2-x11,
   gtk3,
   libx11,
   libfm,
   libwnck,
-  libwnck2,
   libxmu,
   libxpm,
   cairo,
@@ -27,7 +24,6 @@
   curl,
   supportAlsa ? false,
   alsa-lib,
-  withGtk3 ? true,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
@@ -53,11 +49,11 @@ stdenv.mkDerivation (finalAttrs: {
   ];
 
   buildInputs = [
-    (if withGtk3 then keybinder3 else keybinder)
-    (if withGtk3 then gtk3 else gtk2-x11)
+    (libfm.override { withGtk3 = true; })
+    keybinder3
+    gtk3
     libx11
-    (libfm.override { inherit withGtk3; })
-    (if withGtk3 then libwnck else libwnck2)
+    libwnck
     libxmu
     libxpm
     cairo
@@ -71,7 +67,7 @@ stdenv.mkDerivation (finalAttrs: {
   ]
   ++ lib.optional supportAlsa alsa-lib;
 
-  configureFlags = lib.optional withGtk3 "--enable-gtk3";
+  configureFlags = [ "--enable-gtk3" ];
 
   meta = {
     description = "Lightweight X11 desktop panel for LXDE";
diff --git a/pkgs/by-name/ma/mango/package.nix b/pkgs/by-name/ma/mango/package.nix
index cf7b26258152..b5609f42c260 100644
--- a/pkgs/by-name/ma/mango/package.nix
+++ b/pkgs/by-name/ma/mango/package.nix
@@ -27,13 +27,13 @@ stdenv.mkDerivation (finalAttrs: {
   __structuredAttrs = true;
   strictDeps = true;
   pname = "mango";
-  version = "0.15.5";
+  version = "0.15.6";
 
   src = fetchFromGitHub {
     owner = "mangowm";
     repo = "mango";
     tag = finalAttrs.version;
-    hash = "sha256-dg2cRIOPqjW/Q+5NLS8OWfIyVsRoGZT1Dji8SSVnpmE=";
+    hash = "sha256-DWa1m7y8iYGQ5sm8oCE9GkiWs63KI4G0gdQ2qpbh6Ks=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/ma/marelle/package.nix b/pkgs/by-name/ma/marelle/package.nix
new file mode 100644
index 000000000000..86677a1b0302
--- /dev/null
+++ b/pkgs/by-name/ma/marelle/package.nix
@@ -0,0 +1,44 @@
+{
+  lib,
+  stdenvNoCC,
+  fetchFromGitLab,
+  installFonts,
+}:
+
+stdenvNoCC.mkDerivation (finalAttrs: {
+  pname = "marelle";
+  version = "1.004";
+
+  outputs = [
+    "out"
+    "webfont"
+  ];
+
+  src = fetchFromGitLab {
+    domain = "forge.apps.education.fr";
+    owner = "marelle";
+    repo = "marelle.forge.apps.education.fr";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-BNUNHQ7Vjh34CPMd+YG2aVc1ttg65LUKH0ToJ1VAw2U=";
+  };
+
+  # public/fonts/ duplicates fonts/webfonts/
+  postPatch = ''
+    rm -rf public/fonts
+  '';
+
+  nativeBuildInputs = [
+    installFonts
+  ];
+
+  strictDeps = true;
+  __structuredAttrs = true;
+
+  meta = {
+    description = "Cursive font for teaching handwritting in primary school";
+    homepage = "https://marelle.forge.apps.education.fr";
+    license = lib.licenses.ofl;
+    maintainers = with lib.maintainers; [ nim65s ];
+    platforms = lib.platforms.all;
+  };
+})
diff --git a/pkgs/by-name/md/mdk-sdk/package.nix b/pkgs/by-name/md/mdk-sdk/package.nix
index 5901881abcc7..419f4bd4d8dc 100644
--- a/pkgs/by-name/md/mdk-sdk/package.nix
+++ b/pkgs/by-name/md/mdk-sdk/package.nix
@@ -12,6 +12,7 @@
   libglvnd,
   libpulseaudio,
   libxcb,
+  lz4,
   wayland,
   xz,
   zlib,
@@ -29,20 +30,40 @@ let
       aarch64-linux = "arm64";
       x86_64-linux = "amd64";
     }
-    .${stdenv.hostPlatform.system};
-in
-stdenv.mkDerivation rec {
-  pname = "mdk-sdk";
-  version = "0.35.1";
+    .${stdenv.hostPlatform.system} or "";
 
-  src = fetchurl {
+  version = "0.37.0";
+
+  linux = {
     url = "https://github.com/wang-bin/mdk-sdk/releases/download/v${version}/mdk-sdk-linux.tar.xz";
-    hash = "sha256-qdsYWu0bRRhPTbOEeGBFhPdk3S2JpqroOz+gd3KMDts=";
+    hash = "sha256-bBneSsNHfMH2MoDddT1cOtnyWjRNYHo0UTqnjrLpk4Q=";
   };
 
-  nativeBuildInputs = [ autoPatchelfHook ];
+  darwin = {
+    url = "https://github.com/wang-bin/mdk-sdk/releases/download/v${version}/mdk-sdk-apple.tar.xz";
+    hash = "sha256-KGKzwy/unzkCUoh/dGjk0BVEUgDdMx5jy1Qt5C357DQ=";
+  };
 
-  buildInputs = [
+  sources = {
+    aarch64-linux = linux;
+    x86_64-linux = linux;
+    aarch64-darwin = darwin;
+  };
+
+  source =
+    sources.${stdenv.hostPlatform.system} or (throw "Unsupported system ${stdenv.hostPlatform.system}");
+in
+stdenv.mkDerivation {
+  pname = "mdk-sdk";
+  inherit version;
+
+  src = fetchurl { inherit (source) url hash; };
+
+  nativeBuildInputs = lib.optionals stdenv.hostPlatform.isLinux [ autoPatchelfHook ];
+
+  dontStrip = stdenv.hostPlatform.isDarwin;
+
+  buildInputs = lib.optionals stdenv.hostPlatform.isLinux [
     alsa-lib
     gcc-unwrapped
     libx11
@@ -52,6 +73,7 @@ stdenv.mkDerivation rec {
     libglvnd
     libpulseaudio
     libxcb
+    lz4
     wayland
     xz
     zlib
@@ -61,34 +83,49 @@ stdenv.mkDerivation rec {
     fribidi
   ];
 
-  appendRunpaths = lib.makeLibraryPath [
-    libva
-    libvdpau
-    addDriverRunpath.driverLink
+  appendRunpaths = lib.optionalString stdenv.hostPlatform.isLinux (
+    lib.makeLibraryPath [
+      libva
+      libvdpau
+      addDriverRunpath.driverLink
+    ]
+  );
+
+  autoPatchelfIgnoreMissingDeps = lib.optionals stdenv.hostPlatform.isLinux [
+    "librockchip_mpp.so.1"
   ];
 
-  autoPatchelfIgnoreMissingDeps = [ "librockchip_mpp.so.1" ];
+  installPhase =
+    if stdenv.hostPlatform.isDarwin then
+      ''
+        runHook preInstall
 
-  installPhase = ''
-    runHook preInstall
+        mkdir -p $out/lib $out/Frameworks
+        cp -a lib/mdk.xcframework/macos-arm64_x86_64/mdk.framework $out/lib/
+        cp -a lib/cmake $out/lib/cmake
+        ln -s ../lib/mdk.framework $out/Frameworks/mdk.framework
+        cp -a include $out/include
 
-    mkdir $out
-    cp -r include $out/include
-    cp -r lib/${arch} $out/lib
-    cp -r lib/cmake $out/lib/cmake
-    ln -s . $out/lib/${arch}
+        runHook postInstall
+      ''
+    else
+      ''
+        runHook preInstall
 
-    runHook postInstall
-  '';
+        mkdir $out
+        cp -r include $out/include
+        cp -r lib/${arch} $out/lib
+        cp -r lib/cmake $out/lib/cmake
+        ln -s . $out/lib/${arch}
+
+        runHook postInstall
+      '';
 
   meta = {
     description = "Multimedia development kit";
     homepage = "https://github.com/wang-bin/mdk-sdk";
     license = lib.licenses.unfree;
     maintainers = [ ];
-    platforms = [
-      "x86_64-linux"
-      "aarch64-linux"
-    ];
+    platforms = builtins.attrNames sources;
   };
 }
diff --git a/pkgs/by-name/mi/mim-solvers/package.nix b/pkgs/by-name/mi/mim-solvers/package.nix
index bd3ac880fd01..66c702dd4a70 100644
--- a/pkgs/by-name/mi/mim-solvers/package.nix
+++ b/pkgs/by-name/mi/mim-solvers/package.nix
@@ -1,12 +1,10 @@
 {
-  cmake,
   crocoddyl,
   ctestCheckHook,
   fetchFromGitHub,
-  fetchpatch,
+  jrl-cmakemodules,
   lib,
   llvmPackages,
-  pkg-config,
   proxsuite,
   stdenv,
   nix-update-script,
@@ -23,21 +21,19 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-t21zzUo+Oiqvr3lYN9v1lCeoki3I1FWPqo3gWzM6Kdw=";
   };
 
-  nativeBuildInputs = [
-    cmake
-    pkg-config
-  ];
+  nativeBuildInputs = jrl-cmakemodules.docsNativeBuildInputs;
 
-  buildInputs = lib.optional (
-    stdenv.hostPlatform.isDarwin && crocoddyl.withMultithread
-  ) llvmPackages.openmp;
+  buildInputs = [
+    jrl-cmakemodules
+  ]
+  ++ lib.optional (stdenv.hostPlatform.isDarwin && crocoddyl.withMultithread) llvmPackages.openmp;
 
   propagatedBuildInputs = [
     crocoddyl
     proxsuite
   ];
 
-  cmakeFlags = [
+  cmakeFlags = jrl-cmakemodules.docsCmakeFlags ++ [
     (lib.cmakeBool "BUILD_PYTHON_INTERFACE" false)
     (lib.cmakeBool "BUILD_WITH_PROXSUITE" true)
     (lib.cmakeBool "BUILD_WITH_MULTITHREADS" crocoddyl.withMultithread)
diff --git a/pkgs/by-name/mi/mirrord/manifest.json b/pkgs/by-name/mi/mirrord/manifest.json
index 985ad5e9007b..1560bc42f9c0 100644
--- a/pkgs/by-name/mi/mirrord/manifest.json
+++ b/pkgs/by-name/mi/mirrord/manifest.json
@@ -1,17 +1,17 @@
 {
-  "version": "3.237.0",
+  "version": "3.243.0",
   "assets": {
     "x86_64-linux": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.237.0/mirrord_linux_x86_64",
-      "hash": "sha256-dxZKf1uLKIyMT+Li4N1VsVbqE2GyAcaFk8rv4KUz1bI="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.243.0/mirrord_linux_x86_64",
+      "hash": "sha256-v3w6D26/EkvmUgx2k85SMyIHy5EGuAcVFTiqiGDRKQg="
     },
     "aarch64-linux": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.237.0/mirrord_linux_aarch64",
-      "hash": "sha256-+/UrxpUaFZoQDdcNRgMrTgBVQetlVg9HghcccfJymro="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.243.0/mirrord_linux_aarch64",
+      "hash": "sha256-kWCApwaMbxVKpNsnZ52AHWJ6DwWsMu5tqIZAjlwmthw="
     },
     "aarch64-darwin": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.237.0/mirrord_mac_universal",
-      "hash": "sha256-EIxUSodBjgcPfACHND2l7pqbtXUzfjGSLPZyoF8A9Ss="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.243.0/mirrord_mac_universal",
+      "hash": "sha256-oLP8hCNh3rmyS2A/RtIRjfUSTxmfyS1n+vK/tgnBasw="
     }
   }
 }
diff --git a/pkgs/by-name/mk/mkbrr/package.nix b/pkgs/by-name/mk/mkbrr/package.nix
index cdf3e4c080ad..29c25e36fbad 100644
--- a/pkgs/by-name/mk/mkbrr/package.nix
+++ b/pkgs/by-name/mk/mkbrr/package.nix
@@ -7,16 +7,19 @@
 
 buildGoModule (finalAttrs: {
   pname = "mkbrr";
-  version = "1.22.0";
+  version = "1.24.1";
 
   src = fetchFromGitHub {
     owner = "autobrr";
     repo = "mkbrr";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-M4lulMYb6jomS2sZ4E5nA6rP1KmuGiMjQEyuXqyl2vQ=";
+    hash = "sha256-O2zN/qdsIQqT+NieOW/XEKlVqPpacQwCbEQK1EYgSfE=";
   };
 
-  vendorHash = "sha256-BNswyeGBhm0CY6D9HcJHTDKIGCJ5QotiwRnr22HltMo=";
+  vendorHash = "sha256-Ow8dQKBmFZj8QsAVqjLrYndklOrwcKOfhtZBdhyjXQs=";
+
+  # From v1.23.0, a separate Go module (GUI) was introduced into the repo. Build only the cli tool.
+  subPackages = [ "." ];
 
   ldflags = [
     "-s"
@@ -38,6 +41,7 @@ buildGoModule (finalAttrs: {
   meta = {
     description = "Tool to create, modify and inspect torrent files";
     homepage = "https://github.com/autobrr/mkbrr";
+    changelog = "https://github.com/autobrr/mkbrr/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.gpl2Plus;
     maintainers = with lib.maintainers; [ ambroisie ];
     mainProgram = "mkbrr";
diff --git a/pkgs/by-name/mo/mongodb-compass/package.nix b/pkgs/by-name/mo/mongodb-compass/package.nix
index a1789c333cfc..cb0ef2d742cb 100644
--- a/pkgs/by-name/mo/mongodb-compass/package.nix
+++ b/pkgs/by-name/mo/mongodb-compass/package.nix
@@ -52,7 +52,7 @@
 
 let
   pname = "mongodb-compass";
-  version = "1.49.10";
+  version = "1.49.12";
 
   selectSystem =
     attrs:
@@ -66,8 +66,8 @@ let
       }
     }";
     hash = selectSystem {
-      x86_64-linux = "sha256-faD8sIbnho5urBWE0btcmD7tXT8eQCNyJYzpIyI+bA4=";
-      aarch64-darwin = "sha256-HGOJPYC4+CgLQQ3BNUTNZUln5oqPkC8ewHft99LCZQ8=";
+      x86_64-linux = "sha256-syuoNZ2MmPHgTi55HioqkYQzS1LsbzcgdWoFeM+z2Rg=";
+      aarch64-darwin = "sha256-BY5EUWJdPg4OJ7+ehCb/H8dIAoJVYlJnNcSPp0r/XfA=";
     };
   };
 
@@ -119,13 +119,16 @@ in
 stdenv.mkDerivation (finalAttrs: {
   inherit pname version src;
 
-  buildInputs = lib.optionals stdenv.hostPlatform.isLinux [
-    dpkg
-    wrapGAppsHook3
-    patchelf
-  ];
+  __structuredAttrs = true;
+  strictDeps = true;
 
-  nativeBuildInputs = lib.optionals stdenv.hostPlatform.isDarwin [ unzip ];
+  nativeBuildInputs =
+    lib.optionals stdenv.hostPlatform.isLinux [
+      dpkg
+      wrapGAppsHook3
+      patchelf
+    ]
+    ++ lib.optionals stdenv.hostPlatform.isDarwin [ unzip ];
 
   dontUnpack = stdenv.hostPlatform.isLinux;
   dontFixup = stdenv.hostPlatform.isDarwin;
@@ -156,7 +159,8 @@ stdenv.mkDerivation (finalAttrs: {
       patchelf --set-rpath ${rpath}:$out/lib/mongodb-compass "$file" || true
     done
 
-    wrapGAppsHook $out/bin/mongodb-compass
+    gappsWrapperArgsHook
+    wrapGApp "$out/bin/mongodb-compass"
   '';
 
   installPhase = ''
@@ -185,6 +189,7 @@ stdenv.mkDerivation (finalAttrs: {
   meta = {
     description = "GUI for MongoDB";
     homepage = "https://github.com/mongodb-js/compass";
+    changelog = "https://github.com/mongodb-js/compass/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.sspl;
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
     mainProgram = "mongodb-compass";
diff --git a/pkgs/by-name/mo/mouser/package.nix b/pkgs/by-name/mo/mouser/package.nix
index e51d8b9c2544..64e46c28ab7c 100644
--- a/pkgs/by-name/mo/mouser/package.nix
+++ b/pkgs/by-name/mo/mouser/package.nix
@@ -12,7 +12,7 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "mouser";
-  version = "3.7.0";
+  version = "3.7.3";
   pyproject = false;
 
   __structuredAttrs = true;
@@ -21,7 +21,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     owner = "TomBadash";
     repo = "Mouser";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Pjcx7YChgu7R8Kdv8fOJcxq98nwh/izpjbOO+4/cdk4=";
+    hash = "sha256-eAbaT9Q/dwmd++CXLjnWso8s7FGYKvbm+ja9MmRGq7A=";
   };
 
   nativeBuildInputs = lib.optionals stdenv.hostPlatform.isLinux [
diff --git a/pkgs/by-name/mp/mpv/scripts/videoclip.nix b/pkgs/by-name/mp/mpv/scripts/videoclip.nix
index ee75757f57e8..88f245f97540 100644
--- a/pkgs/by-name/mp/mpv/scripts/videoclip.nix
+++ b/pkgs/by-name/mp/mpv/scripts/videoclip.nix
@@ -1,38 +1,37 @@
 {
   lib,
-  fetchFromGitHub,
-  curl,
-  xclip,
-  wl-clipboard,
-  stdenv,
   buildLua,
-  unstableGitUpdater,
+  fetchFromGitHub,
+  gitUpdater,
+  stdenv,
+  curl,
+  wl-clipboard,
+  xclip,
 }:
-buildLua {
+buildLua (finalAttrs: {
   pname = "videoclip";
-  version = "0.2-unstable-2026-07-07";
+  version = "26.7.30.0";
 
   src = fetchFromGitHub {
     owner = "Ajatt-Tools";
     repo = "videoclip";
-    rev = "979bae398da7ccd70cb2fb305c371b7af9259b10";
-    hash = "sha256-k3fxSeAjRZg4J5x5IQhKGYtUqfBE4heR1KNurGTElGs=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-4ptnF3/L3U0CDucYcd8/O5EN1mUtnor+iXLRXbiC7os=";
   };
 
-  patchPhase = ''
-    substituteInPlace platform.lua \
-    --replace \'curl\' \'${lib.getExe curl}\' \
+  postPatch = ''
+    substituteInPlace videoclip/platform.lua \
+      --replace-fail "'curl'" "'${lib.getExe curl}'"
   ''
   + lib.optionalString stdenv.hostPlatform.isLinux ''
-    --replace xclip ${lib.getExe xclip} \
-    --replace wl-copy ${lib.getExe' wl-clipboard "wl-copy"}
+    substituteInPlace videoclip/platform.lua \
+      --replace-fail '"wl-copy' '"${lib.getExe' wl-clipboard "wl-copy"}' \
+      --replace-fail '"xclip' '"${lib.getExe xclip}'
   '';
 
-  scriptPath = ".";
-  passthru.scriptName = "videoclip";
-  passthru.updateScript = unstableGitUpdater {
-    tagPrefix = "v";
-  };
+  scriptPath = "videoclip";
+
+  passthru.updateScript = gitUpdater { rev-prefix = "v"; };
 
   meta = {
     description = "Easily create videoclips with mpv";
@@ -41,4 +40,4 @@ buildLua {
     platforms = lib.platforms.all;
     maintainers = with lib.maintainers; [ BatteredBunny ];
   };
-}
+})
diff --git a/pkgs/by-name/mt/mtail/package.nix b/pkgs/by-name/mt/mtail/package.nix
index aa47f549cb5c..708f39c7333d 100644
--- a/pkgs/by-name/mt/mtail/package.nix
+++ b/pkgs/by-name/mt/mtail/package.nix
@@ -9,6 +9,7 @@
 buildGoModule (finalAttrs: {
   pname = "mtail";
   version = "3.4.6";
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "jaqx0r";
diff --git a/pkgs/by-name/mu/museum/package.nix b/pkgs/by-name/mu/museum/package.nix
index 27b5b1a8fcce..fc76db5947de 100644
--- a/pkgs/by-name/mu/museum/package.nix
+++ b/pkgs/by-name/mu/museum/package.nix
@@ -10,17 +10,17 @@
 
 buildGoModule (finalAttrs: {
   pname = "museum";
-  version = "1.3.58";
+  version = "1.3.59";
 
   src = fetchFromGitHub {
     owner = "ente";
     repo = "ente";
     sparseCheckout = [ "server" ];
     tag = "photos-v${finalAttrs.version}";
-    hash = "sha256-G9T5qsBKzO7bMCf3IexF9YyDeHK+gZI1Unm4pBq69iI=";
+    hash = "sha256-4M43ilrv3zbk64rQpyE+kd7qSiUyotwGnLa8DVyaOpY=";
   };
 
-  vendorHash = "sha256-Ri2hsPkBvAGGbk9vREmkYxY+JX+nv/OfIAkhU2y0xnQ=";
+  vendorHash = "sha256-Nbh9fs+43e1iE1ujr9T5vu7K1QscG+jdq5+iad4HkDc=";
 
   sourceRoot = "${finalAttrs.src.name}/server";
 
diff --git a/pkgs/by-name/na/namespace-cli/package.nix b/pkgs/by-name/na/namespace-cli/package.nix
index fbc2880c0a4b..0829e6516e15 100644
--- a/pkgs/by-name/na/namespace-cli/package.nix
+++ b/pkgs/by-name/na/namespace-cli/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "namespace-cli";
-  version = "0.0.550";
+  version = "0.0.551";
 
   src = fetchFromGitHub {
     owner = "namespacelabs";
     repo = "foundation";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Ek6+s10KvZhPoHGBpw2k3ARBpwi1hbyChieyAxF1ac4=";
+    hash = "sha256-utBatGjHNLTT+hdYde5NIZmD7c+oS9zFl9dCyrtMx2s=";
   };
 
-  vendorHash = "sha256-hOt0ItxXUcinp8+/XiHq18kRz2heVmHKpWhNP0i4a+Y=";
+  vendorHash = "sha256-1MjkgJvn2u2zcO6lMAHdEbiGVp24D3Gv98GQZxGk27Y=";
 
   subPackages = [
     "cmd/nsc"
diff --git a/pkgs/by-name/na/nano/package.nix b/pkgs/by-name/na/nano/package.nix
index 2e68584027ee..69c06cece607 100644
--- a/pkgs/by-name/na/nano/package.nix
+++ b/pkgs/by-name/na/nano/package.nix
@@ -31,11 +31,11 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "nano";
-  version = "9.1";
+  version = "9.2";
 
   src = fetchurl {
     url = "mirror://gnu/nano/nano-${version}.tar.xz";
-    hash = "sha256-X0d2QnTLdTI0nOCqIOwQ8ejoUabp+j62aBLEPRltsEI=";
+    hash = "sha256-Bey5kke3guils6Je1BAd0DSwI2kC90SbyXlbcXZC9+k=";
   };
 
   nativeBuildInputs = [ texinfo ] ++ lib.optional enableNls gettext;
diff --git a/pkgs/by-name/nd/ndcurves/package.nix b/pkgs/by-name/nd/ndcurves/package.nix
index ddd3895bc4ad..42407d74e08d 100644
--- a/pkgs/by-name/nd/ndcurves/package.nix
+++ b/pkgs/by-name/nd/ndcurves/package.nix
@@ -29,34 +29,32 @@ stdenv.mkDerivation (finalAttrs: {
 
   strictDeps = true;
 
-  nativeBuildInputs = [
-    cmake
-    doxygen
-    pkg-config
-  ]
-  ++ lib.optionals pythonSupport [
-    python3Packages.python
-    python3Packages.pythonImportsCheckHook
-  ];
-  propagatedBuildInputs = [
-    jrl-cmakemodules
-  ]
-  ++ lib.optionals pythonSupport [
-    python3Packages.eigenpy
-    python3Packages.pinocchio
-  ]
-  ++ lib.optional (!pythonSupport) pinocchio;
+  buildInputs = [ jrl-cmakemodules ];
+  nativeBuildInputs =
+    jrl-cmakemodules.docsNativeBuildInputs
+    ++ lib.optionals pythonSupport [
+      python3Packages.python
+      python3Packages.pythonImportsCheckHook
+    ];
+  propagatedBuildInputs =
+    lib.optionals pythonSupport [
+      python3Packages.eigenpy
+      python3Packages.pinocchio
+    ]
+    ++ lib.optional (!pythonSupport) pinocchio;
 
-  cmakeFlags = [
-    (lib.cmakeBool "BUILD_PYTHON_INTERFACE" pythonSupport)
-    (lib.cmakeBool "CURVES_WITH_PINOCCHIO_SUPPORT" true)
-  ]
-  ++ lib.optional stdenv.hostPlatform.isAarch64 (
-    lib.cmakeFeature "CMAKE_CTEST_ARGUMENTS" "--exclude-regex;'curves_tests|python-curves'"
-  )
-  ++ lib.optional (stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isx86_64) (
-    lib.cmakeFeature "CMAKE_CTEST_ARGUMENTS" "--exclude-regex;'test-so3-smooth'"
-  );
+  cmakeFlags =
+    jrl-cmakemodules.docsCmakeFlags
+    ++ [
+      (lib.cmakeBool "BUILD_PYTHON_INTERFACE" pythonSupport)
+      (lib.cmakeBool "CURVES_WITH_PINOCCHIO_SUPPORT" true)
+    ]
+    ++ lib.optional stdenv.hostPlatform.isAarch64 (
+      lib.cmakeFeature "CMAKE_CTEST_ARGUMENTS" "--exclude-regex;'curves_tests|python-curves'"
+    )
+    ++ lib.optional (stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isx86_64) (
+      lib.cmakeFeature "CMAKE_CTEST_ARGUMENTS" "--exclude-regex;'test-so3-smooth'"
+    );
 
   doCheck = true;
 
diff --git a/pkgs/by-name/ne/nerva/package.nix b/pkgs/by-name/ne/nerva/package.nix
index c41516426b85..fb7ca097822f 100644
--- a/pkgs/by-name/ne/nerva/package.nix
+++ b/pkgs/by-name/ne/nerva/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "nerva";
-  version = "1.57.0";
+  version = "1.57.1";
 
   src = fetchFromGitHub {
     owner = "praetorian-inc";
     repo = "nerva";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-6E0HrSrZUmT02utEZxosTB4ReKvUJPl7SySGGUXAI3E=";
+    hash = "sha256-bkS+PxtqhtSvdh19Op0+prAJwb88mbhX6wRtuht8vrY=";
   };
 
   vendorHash = "sha256-Z0MSD+1/1VzrJ+pz5x0JvxrCxtJe59ckaTqHK/+TVN8=";
diff --git a/pkgs/by-name/ne/netbird-dashboard/package.nix b/pkgs/by-name/ne/netbird-dashboard/package.nix
index dafe5d3c2d90..a70071699999 100644
--- a/pkgs/by-name/ne/netbird-dashboard/package.nix
+++ b/pkgs/by-name/ne/netbird-dashboard/package.nix
@@ -6,13 +6,13 @@
 
 buildNpmPackage rec {
   pname = "netbird-dashboard";
-  version = "2.90.8";
+  version = "2.90.9";
 
   src = fetchFromGitHub {
     owner = "netbirdio";
     repo = "dashboard";
     rev = "v${version}";
-    hash = "sha256-783g44brRVBU7b4YAaZ6Qk3RVf5zHKmN1eYU2Oe1aGo=";
+    hash = "sha256-cDA1Tbw3yiaeYHN9Pnbz1vxxCK45W6V7k3Bh/Lz/VLA=";
   };
 
   npmDepsHash = "sha256-A6zXrOPdxLepi7XPn67YsY673iFOAgJqCEynn4SYco8=";
diff --git a/pkgs/by-name/ne/netbird/package.nix b/pkgs/by-name/ne/netbird/package.nix
index a5655cd8e5b9..8f81ff599cb6 100644
--- a/pkgs/by-name/ne/netbird/package.nix
+++ b/pkgs/by-name/ne/netbird/package.nix
@@ -73,13 +73,13 @@ let
 in
 buildGoModule (finalAttrs: {
   pname = "netbird-${componentName}";
-  version = "0.76.0";
+  version = "0.76.1";
 
   src = fetchFromGitHub {
     owner = "netbirdio";
     repo = "netbird";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-gICLAHmsn5Ylrm4tGaOQNr9ieuaSf3jt2KLDFrd08c0=";
+    hash = "sha256-gxcb1CQ2f8g8wYEt1z2rvJrcoXy2k7pSSMaLmfqmISc=";
   };
 
   overrideModAttrs = final: prev: {
diff --git a/pkgs/by-name/ne/newsflash/package.nix b/pkgs/by-name/ne/newsflash/package.nix
index 839f3307e9ea..6b8f0460e2db 100644
--- a/pkgs/by-name/ne/newsflash/package.nix
+++ b/pkgs/by-name/ne/newsflash/package.nix
@@ -29,18 +29,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "newsflash";
-  version = "5.2.4";
+  version = "5.2.5";
 
   src = fetchFromGitLab {
     owner = "news-flash";
     repo = "news_flash_gtk";
     tag = "v.${finalAttrs.version}";
-    hash = "sha256-8Gs87eqcs/7SWNlv4pI4Y78bZb/gGhx0DtPzyZhe1Ew=";
+    hash = "sha256-oii3/VIV0zivHz/ZscVtJVvPm4SSlzpR+o6t0cS8JO8=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-rklPsg9rYXkC29kSyST4JrrsPlL7FEx+wOuFypqWc7I=";
+    hash = "sha256-hR0rfOOLTVt8FuTG0RT80iO8Tt4UwMZwk/VYsBAoLBw=";
   };
 
   postPatch = ''
diff --git a/pkgs/by-name/ni/niks3/package.nix b/pkgs/by-name/ni/niks3/package.nix
index 1f8479fdbbcf..2e1c955df1dd 100644
--- a/pkgs/by-name/ni/niks3/package.nix
+++ b/pkgs/by-name/ni/niks3/package.nix
@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "niks3";
-  version = "1.7.0";
+  version = "1.8.0";
 
   src = fetchFromGitHub {
     owner = "Mic92";
     repo = "niks3";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-+Aj5ca1iUqbDW9MjFGoGoylnVjcMQLlT/OlH2yMrg/I=";
+    hash = "sha256-86afR/fMjLRLmBEMFA6ow6SRI9T5Qe83l0em/FciW2g=";
   };
 
-  vendorHash = "sha256-zYGAd2N3qGavAlT4MggSME7r04kAVn19N7Nh0L0DK5k=";
+  vendorHash = "sha256-qkB99S/9fmSk5G9uHyQF/z+joi9JACIJWaHMrIo4ziU=";
 
   subPackages = [
     "cmd/niks3"
diff --git a/pkgs/by-name/ni/nip2/package.nix b/pkgs/by-name/ni/nip2/package.nix
deleted file mode 100644
index f20cef494d57..000000000000
--- a/pkgs/by-name/ni/nip2/package.nix
+++ /dev/null
@@ -1,81 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchFromGitHub,
-  fetchpatch,
-  autoreconfHook,
-  pkg-config,
-  glib,
-  libxml2,
-  flex,
-  bison,
-  vips,
-  gtk2,
-  fftw,
-  gsl,
-  goffice,
-  libgsf,
-  makeWrapper,
-}:
-
-stdenv.mkDerivation (finalAttrs: {
-  pname = "nip2";
-  version = "8.9.1";
-
-  src = fetchFromGitHub {
-    owner = "libvips";
-    repo = "nip2";
-    tag = "v${finalAttrs.version}";
-    hash = "sha256-SemlINqrqzWa7/sU6KnWiDJW8FLSYVZnCDtJNE0wjhg=";
-  };
-
-  patches = [
-    (fetchpatch {
-      name = "do-not-redeclare-statfs.patch";
-      url = "https://github.com/libvips/nip2/commit/045268a78c40d7f546220504f971c728aebc00be.patch";
-      hash = "sha256-A17+/Vmjf0l1Jpl22VL11gj5m6oFB8DnvkH2EHiRTw8=";
-    })
-    (fetchpatch {
-      name = "declare-function-arguments-for-function-pointer.patch";
-      url = "https://github.com/libvips/nip2/commit/8c60c517b59f806da84d57cb1d083a213b811151.patch";
-      hash = "sha256-o5OHNSbUORGquhyCYCtGQTY74IfroByaa0UAXYsP484=";
-    })
-  ];
-
-  nativeBuildInputs = [
-    autoreconfHook
-    bison
-    flex
-    pkg-config
-    makeWrapper
-    glib
-  ];
-
-  preAutoreconf = ''
-    glib-gettextize --force --copy
-  '';
-
-  buildInputs = [
-    glib
-    libxml2
-    vips
-    gtk2
-    fftw
-    gsl
-    goffice
-    libgsf
-  ];
-
-  postFixup = ''
-    wrapProgram $out/bin/nip2 --set VIPSHOME "$out"
-  '';
-
-  meta = {
-    homepage = "https://github.com/libvips/nip2";
-    description = "Graphical user interface for VIPS image processing system";
-    license = lib.licenses.gpl2Plus;
-    maintainers = with lib.maintainers; [ kovirobi ];
-    platforms = lib.platforms.unix;
-    mainProgram = "nip2";
-  };
-})
diff --git a/pkgs/by-name/ni/nixos-rebuild-ng/package.nix b/pkgs/by-name/ni/nixos-rebuild-ng/package.nix
index 8112f3d867f8..6abad34892bb 100644
--- a/pkgs/by-name/ni/nixos-rebuild-ng/package.nix
+++ b/pkgs/by-name/ni/nixos-rebuild-ng/package.nix
@@ -55,6 +55,7 @@ python3Packages.buildPythonApplication rec {
 
     installShellCompletion --cmd ${executable} \
       --bash <(shtab --shell bash nixos_rebuild.get_main_parser) \
+      --fish <(shtab --shell fish nixos_rebuild.get_main_parser) \
       --zsh <(shtab --shell zsh nixos_rebuild.get_main_parser)
   '';
 
diff --git a/pkgs/by-name/no/nocturne/package.nix b/pkgs/by-name/no/nocturne/package.nix
index d7cc8945c3a5..ff6726c8f738 100644
--- a/pkgs/by-name/no/nocturne/package.nix
+++ b/pkgs/by-name/no/nocturne/package.nix
@@ -16,6 +16,8 @@
   python3,
   python3Packages,
   libadwaita,
+  libportal,
+  libportal-gtk4,
   gobject-introspection,
   libsecret,
   gst_all_1,
@@ -31,13 +33,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "nocturne";
-  version = "1.4.2";
+  version = "1.5.1";
 
   src = fetchFromGitHub {
     owner = "Jeffser";
     repo = "Nocturne";
     tag = finalAttrs.version;
-    hash = "sha256-q2jN1X/2Iayzqf+2d1roQ9dbZKGqWy3sXC78lKXLzPM=";
+    hash = "sha256-83RvrMFUmBUmeObz2u+ScNrT8hb9y02xxWiFqYGnAEU=";
   };
 
   __structuredAttrs = true;
@@ -63,6 +65,8 @@ stdenv.mkDerivation (finalAttrs: {
   buildInputs = [
     gtk4
     libadwaita
+    libportal
+    libportal-gtk4
     libsecret
     python3
     glib-networking
diff --git a/pkgs/by-name/nx/nxv/package.nix b/pkgs/by-name/nx/nxv/package.nix
index af4ed4d0ad6e..a9daa1fac9a1 100644
--- a/pkgs/by-name/nx/nxv/package.nix
+++ b/pkgs/by-name/nx/nxv/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "nxv";
-  version = "0.6.0";
+  version = "0.7.0";
 
   src = fetchFromGitHub {
     owner = "utensils";
     repo = "nxv";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Ym30QiImry+3Io933SFQw5q6Lyl5p8nuidQhrXHSv54=";
+    hash = "sha256-tjVhLHn2FH4QQ5ynLEiB2nJTmpu4viho2Sf+mc7YWX8=";
   };
 
-  cargoHash = "sha256-syAlYsXPxMUIyPNankujiVD3lXaAgGmr5v585ysxIWI=";
+  cargoHash = "sha256-Gx45+hiRByQc/OcHlJ7L4G+xh/IZHWipslQ3Xv5+fHE=";
 
   # Tests use mockito which needs to bind to localhost
   __darwinAllowLocalNetworking = true;
diff --git a/pkgs/by-name/ob/obsidian/package.nix b/pkgs/by-name/ob/obsidian/package.nix
index ab9bcafde919..844af6d69a7c 100644
--- a/pkgs/by-name/ob/obsidian/package.nix
+++ b/pkgs/by-name/ob/obsidian/package.nix
@@ -137,15 +137,14 @@ let
       appname
       meta
       ;
-    sourceRoot = "${appname}.app";
     nativeBuildInputs = [
       makeWrapper
       _7zz
     ];
     installPhase = ''
       runHook preInstall
-      mkdir -p $out/{Applications/${appname}.app,bin}
-      cp -R . $out/Applications/${appname}.app
+      mkdir -p $out/{Applications,bin}
+      cp -R ${appname}.app $out/Applications
       makeWrapper $out/Applications/${appname}.app/Contents/MacOS/${appname} $out/bin/obsidian
       makeWrapper $out/Applications/${appname}.app/Contents/MacOS/obsidian-cli $out/bin/obsidian-cli
       runHook postInstall
diff --git a/pkgs/by-name/op/opengist/package.nix b/pkgs/by-name/op/opengist/package.nix
index fe22f29e9708..b7a90e7cccdd 100644
--- a/pkgs/by-name/op/opengist/package.nix
+++ b/pkgs/by-name/op/opengist/package.nix
@@ -13,13 +13,13 @@
 buildGoModule (finalAttrs: {
   pname = "opengist";
 
-  version = "1.14.0";
+  version = "1.15.0";
 
   src = fetchFromGitHub {
     owner = "thomiceli";
     repo = "opengist";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-glKhgETje+TRmwnSWJ+fVla0hsyljZLnRKcM4xi+zQ8=";
+    hash = "sha256-yE9HvRFEQzv3Fhhbs9hXeLc4vudCMi+NMA2T8YUlREw=";
   };
 
   frontend = buildNpmPackage {
@@ -36,10 +36,10 @@ buildGoModule (finalAttrs: {
       cp -R public $out
     '';
 
-    npmDepsHash = "sha256-Zz6qoqTV/O73OrBL7ry1VXK9nF6Eb6QeqcefLpyMN1c=";
+    npmDepsHash = "sha256-hAG0vGjG+ejumjoslYs/UnYBImZDNsTQUDtssT0X/HI=";
   };
 
-  vendorHash = "sha256-J4JMOCj7S8N0kX7VBZmrAiPuXjWur+MIkS8pMVmkLbs=";
+  vendorHash = "sha256-YU1OdYM9GzUGHypgIhWvJCvYEzlKsaKGN0NZRBfT8FY=";
 
   tags = [ "fs_embed" ];
 
diff --git a/pkgs/by-name/op/openshadinglanguage/libclang-no-shared.patch b/pkgs/by-name/op/openshadinglanguage/libclang-no-shared.patch
new file mode 100644
index 000000000000..25eb8619fb3b
--- /dev/null
+++ b/pkgs/by-name/op/openshadinglanguage/libclang-no-shared.patch
@@ -0,0 +1,24 @@
+diff --git a/src/cmake/modules/FindLLVM.cmake b/src/cmake/modules/FindLLVM.cmake
+index 56809dc3..b1a1ec1e 100644
+--- a/src/cmake/modules/FindLLVM.cmake
++++ b/src/cmake/modules/FindLLVM.cmake
+@@ -103,19 +103,6 @@ if (NOT LLVM_LIBRARY)
+     set (LLVM_LIBRARY "${LLVM_LIBRARIES}")
+ endif ()
+ 
+-execute_process (COMMAND ${LLVM_CONFIG} --shared-mode
+-       OUTPUT_VARIABLE LLVM_SHARED_MODE
+-       OUTPUT_STRIP_TRAILING_WHITESPACE)
+-if (LLVM_SHARED_MODE STREQUAL "shared")
+-    find_library ( _CLANG_CPP_LIBRARY
+-                   NAMES "clang-cpp"
+-                   PATHS ${LLVM_LIB_DIR}
+-                   NO_DEFAULT_PATH)
+-    if (_CLANG_CPP_LIBRARY)
+-        list (APPEND CLANG_LIBRARIES ${_CLANG_CPP_LIBRARY})
+-    endif ()
+-endif ()
+-
+ foreach (COMPONENT clangFrontend clangDriver clangSerialization
+                    clangParse clangSema clangAnalysis clangAST
+                    clangASTMatchers clangEdit clangLex
diff --git a/pkgs/by-name/op/openshadinglanguage/package.nix b/pkgs/by-name/op/openshadinglanguage/package.nix
index d0f4997ccacd..c7a1fcb5c64a 100644
--- a/pkgs/by-name/op/openshadinglanguage/package.nix
+++ b/pkgs/by-name/op/openshadinglanguage/package.nix
@@ -31,6 +31,8 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-edtYKN2obQexQtclrIUflm3upc14MhHQ7eLvit5Hqq0=";
   };
 
+  patches = [ ./libclang-no-shared.patch ];
+
   cmakeFlags = [
     (lib.cmakeBool "LLVM_STATIC" true)
     (lib.cmakeBool "USE_QT" false)
@@ -38,7 +40,6 @@ stdenv.mkDerivation (finalAttrs: {
     # Build system implies llvm-config and llvm-as are in the same directory.
     # Override defaults.
     (lib.cmakeFeature "LLVM_BC_GENERATOR" "${clang}/bin/clang++")
-    (lib.cmakeFeature "LLVM_CONFIG" "${llvm.dev}/bin/llvm-config")
     (lib.cmakeFeature "LLVM_DIRECTORY" "${llvm}")
   ];
 
@@ -53,7 +54,6 @@ stdenv.mkDerivation (finalAttrs: {
 
   nativeBuildInputs = [
     bison
-    clang
     cmake
     flex
   ];
diff --git a/pkgs/by-name/ox/oxlint/package.nix b/pkgs/by-name/ox/oxlint/package.nix
index ed35ab136096..2647a436ec1b 100644
--- a/pkgs/by-name/ox/oxlint/package.nix
+++ b/pkgs/by-name/ox/oxlint/package.nix
@@ -23,25 +23,25 @@
 # runs without an external linter, which leaves `jsPlugins` configs inert.
 stdenv.mkDerivation (finalAttrs: {
   pname = "oxlint";
-  version = "1.75.0";
+  version = "1.76.0";
 
   src = fetchFromGitHub {
     owner = "oxc-project";
     repo = "oxc";
     tag = "oxlint_v${finalAttrs.version}";
-    hash = "sha256-pKnIgGlIajq/VCAafvOY6KCkNOd/D2ozU9FM3EARVH8=";
+    hash = "sha256-uXkAD4+B8ghUbti1ts1RO+Jc0wQlpovl6+JzZA1JaRk=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-zY8Rgw75mRK7i0mFjsWF3sbqsR9T8Ce4JlptHldd5oM=";
+    hash = "sha256-eZAJdMDC09nE9n2Arh72ZZUQjmMFdA68rPCmH2tSx2w=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_10;
     fetcherVersion = 3;
-    hash = "sha256-dBFsEaurRYGxet6kRF6M1LjSlBu3zU33Ul5vjcH2MWQ=";
+    hash = "sha256-WZ4eYwQNeDF55ax3mW5swKafCDeYG5rWPPzJk5f+H1k=";
   };
 
   dontUseCmakeConfigure = true;
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-alicloud/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-alicloud/package.nix
new file mode 100644
index 000000000000..42d9fcebf8c4
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-alicloud/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-alicloud";
+  version = "1.1.2";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-alicloud";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-ycDGDgLdqCmq41/ApuRecQWSOz+W+QMVDp0f7pWVkPA=";
+  };
+
+  vendorHash = "sha256-TXSFmO2vtcWZ9rGSSen+Qz4rIO1MjiFrRTnNcmmfvs8=";
+
+  meta = {
+    description = "Packer plugin for Alicloud";
+    homepage = "https://github.com/hashicorp/packer-plugin-alicloud";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-amazon/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-amazon/package.nix
new file mode 100644
index 000000000000..20f4244e30f3
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-amazon/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-amazon";
+  version = "1.8.1";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-amazon";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Wq8Vs9Kuu8WRyt9OkfNnlWO0GDR8cejjBuZgAgKpLVM=";
+  };
+
+  vendorHash = "sha256-18ZbQEhtq7MzNBsWX/+m5NFTWOasXemRRSrpKpZ3y0A=";
+
+  meta = {
+    description = "Packer plugin for Amazon";
+    homepage = "https://github.com/hashicorp/packer-plugin-amazon";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-ansible/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-ansible/package.nix
new file mode 100644
index 000000000000..5c73f7b92945
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-ansible/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-ansible";
+  version = "1.1.5";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-ansible";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-1v1d7yAQOy9sE9F1G1uinKNOjddrsxdT9mywht8r14g=";
+  };
+
+  vendorHash = "sha256-s6xZHyDOGNxrGINN11AnM3fspi6gE4RpXocgUJkHScs=";
+
+  meta = {
+    description = "Packer plugin for Ansible";
+    homepage = "https://github.com/hashicorp/packer-plugin-ansible";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-azure/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-azure/package.nix
new file mode 100644
index 000000000000..621ef79e87fe
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-azure/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-azure";
+  version = "2.6.2";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-azure";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-/qPiWEdyIbykDlGeP5UX4WkD7jgka64D3oRPwTLsnKo=";
+  };
+
+  vendorHash = "sha256-Wr+7GFORRzhYmQkgAvGFm7z22n8azaaCZjOcWuvZJ2s=";
+
+  meta = {
+    description = "Packer plugin for Azure";
+    homepage = "https://github.com/hashicorp/packer-plugin-azure";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-chef/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-chef/package.nix
new file mode 100644
index 000000000000..47915f6b5f43
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-chef/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-chef";
+  version = "1.0.2";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-chef";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-YZulUoet6GHLQ4Zlf4DGkS9e9SdB1g3Ua/KQRCcQgYg=";
+  };
+
+  vendorHash = "sha256-CQDfUi3wBEh7D7bawmEmRRpKCPXdFpneaIcLwMcZGOY=";
+
+  meta = {
+    description = "Packer plugin for Chef";
+    homepage = "https://github.com/hashicorp/packer-plugin-chef";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-cloudstack/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-cloudstack/package.nix
new file mode 100644
index 000000000000..569d90a8dd0b
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-cloudstack/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-cloudstack";
+  version = "1.0.2";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-cloudstack";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-uZazRrUcA7w3QzEcyNCJXT0A50Xuq5ZRHEozRmO/oGQ=";
+  };
+
+  vendorHash = "sha256-GP56XVGelgceqy0HM7Hp0Sq1uHGkNwRkoxrhGlE8gl8=";
+
+  meta = {
+    description = "Packer plugin for CloudStack";
+    homepage = "https://github.com/hashicorp/packer-plugin-cloudstack";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-converge/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-converge/package.nix
new file mode 100644
index 000000000000..b128343ea977
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-converge/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-converge";
+  version = "1.0.1";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-converge";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-ZSEguniezoP+yccXBobuzjeOyrKBZ+qjeI2B8CsIyVU=";
+  };
+
+  vendorHash = "sha256-h+BZydIrt1xTXV8JHWItV+zCC6btkbPgJp/JKfwGRfQ=";
+
+  meta = {
+    description = "Packer plugin for Converge";
+    homepage = "https://github.com/hashicorp/packer-plugin-converge";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-docker/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-docker/package.nix
index d1ed5c201dfc..5b2ada8343e5 100644
--- a/pkgs/by-name/pa/packer/plugins/packer-plugin-docker/package.nix
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-docker/package.nix
@@ -7,16 +7,16 @@
 mkPackerPlugin (finalAttrs: {
 
   pname = "packer-plugin-docker";
-  version = "1.1.2";
+  version = "1.1.3";
 
   src = fetchFromGitHub {
     owner = "hashicorp";
     repo = "packer-plugin-docker";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-h89FGwUQjTk81CYUe1xmKxSHr1t3wyBg9lHUTqmVym8=";
+    hash = "sha256-rv12zSAH8TbbrRKk1/gd558EYTlBeBdHRMD6OQA6Xrg=";
   };
 
-  vendorHash = "sha256-mvyafYSLi/q7lWorfKc4Gc4oM7yti3v/bLcVnNkH7ZY=";
+  vendorHash = "sha256-He7xU6naVhwSatAntw/BgMIm+3vN5onCbaaH/6XmlIY=";
 
   meta = {
     description = "Packer plugin for Docker";
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-googlecompute/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-googlecompute/package.nix
new file mode 100644
index 000000000000..534ec3f6443a
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-googlecompute/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-googlecompute";
+  version = "1.2.6";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-googlecompute";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-c03UZdswKvHJbOWWITX5TQ08jfBfRpri3y2+6wRuXr8=";
+  };
+
+  vendorHash = "sha256-yRDNWloQZVSeGaoKdxgoxN8OCqzOnExNOxXJ7yByd+E=";
+
+  meta = {
+    description = "Packer plugin for Google Compute Engine";
+    homepage = "https://github.com/hashicorp/packer-plugin-googlecompute";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-hashicups/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-hashicups/package.nix
new file mode 100644
index 000000000000..c269760ef0fc
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-hashicups/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-hashicups";
+  version = "1.0.2";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-hashicups";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-3SiJDvsSFd0FlEsl9s7kYfcPlJ8ooXY0ykkm3rAIdY0=";
+  };
+
+  vendorHash = "sha256-WwpyDVUz3zOx5KPG98Q3hwLVO0p8wAe7cIV/VjWEImY=";
+
+  meta = {
+    description = "Packer plugin for HashiCups";
+    homepage = "https://github.com/hashicorp/packer-plugin-hashicups";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-hyperone/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-hyperone/package.nix
new file mode 100644
index 000000000000..5b7ebc94fa44
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-hyperone/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-hyperone";
+  version = "1.0.1";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-hyperone";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-CusY70gsoDFA5K38QEzwCq/lCE8D72iDqNm/0u3kcv4=";
+  };
+
+  vendorHash = "sha256-l71v9ymLio4iHg1AKt6GHXkukmLGTDGXFoEaqf0i54E=";
+
+  meta = {
+    description = "Packer plugin for HyperOne";
+    homepage = "https://github.com/hashicorp/packer-plugin-hyperone";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-hyperv/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-hyperv/package.nix
new file mode 100644
index 000000000000..0895ca91f082
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-hyperv/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-hyperv";
+  version = "1.1.5";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-hyperv";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-dxwbsdNvzJcqQa2B9cEXwFq3IUIAEeWjoklAKyii64I=";
+  };
+
+  vendorHash = "sha256-J83f4pfD/J2lOZf7Uq01UKckfUmx0D9DRbz9V6ePdjI=";
+
+  meta = {
+    description = "Packer plugin for Hyper-V";
+    homepage = "https://github.com/hashicorp/packer-plugin-hyperv";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-inspec/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-inspec/package.nix
new file mode 100644
index 000000000000..0361b87c6caf
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-inspec/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-inspec";
+  version = "1.0.0";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-inspec";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-XUzPdKAJQa/hXKlQ66+k+X1bAki3yb1GFBRS6NY/dWU=";
+  };
+
+  vendorHash = "sha256-o2/YgIPqfr1KiZ9jB2C8ZcpfJAcVRNMrEZ8/CEbW0io=";
+
+  meta = {
+    description = "Packer plugin for InSpec";
+    homepage = "https://github.com/hashicorp/packer-plugin-inspec";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-jdcloud/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-jdcloud/package.nix
new file mode 100644
index 000000000000..a67f3e3d3f8f
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-jdcloud/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-jdcloud";
+  version = "1.0.2";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-jdcloud";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-mYU/Gkb2P3OK4f7UP4UfxMadXe+nJ1q44U0ygEcnuuA=";
+  };
+
+  vendorHash = "sha256-+I4P7ILupygb3YrV/Z11PYYnmj0jMNBpo4nfOBqhOEM=";
+
+  meta = {
+    description = "Packer plugin for JDCloud";
+    homepage = "https://github.com/hashicorp/packer-plugin-jdcloud";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-kubevirt/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-kubevirt/package.nix
new file mode 100644
index 000000000000..ac33978b6447
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-kubevirt/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-kubevirt";
+  version = "0.8.0";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-kubevirt";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-h2XYo7b3+URK2f9zIe4snqW5q6jc4zWssBcOigLtS/g=";
+  };
+
+  vendorHash = "sha256-UT07PiFCr8UyADPbc5I/60/A1KbJ+lZEi23IsBKxueM=";
+
+  meta = {
+    description = "Packer plugin for KubeVirt";
+    homepage = "https://github.com/hashicorp/packer-plugin-kubevirt";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-lxc/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-lxc/package.nix
new file mode 100644
index 000000000000..7ca3f183c5a4
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-lxc/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-lxc";
+  version = "1.0.2";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-lxc";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-I+rwq8IyqDjr549J5Yo2ZxB+UhiSPPM6wo+auJsLk9c=";
+  };
+
+  vendorHash = "sha256-KSsGU+Ss2+jkCqZExwuCy15r94Ykh7GRaBW46li213I=";
+
+  meta = {
+    description = "Packer plugin for LXC";
+    homepage = "https://github.com/hashicorp/packer-plugin-lxc";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-lxd/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-lxd/package.nix
new file mode 100644
index 000000000000..d6bd4dda40d4
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-lxd/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-lxd";
+  version = "1.0.3";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-lxd";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-NMTdyxrQtzYJhYaUYbScFGqCkSr23hoyWJk6AVd+sio=";
+  };
+
+  vendorHash = "sha256-db043PTjfoBkmt8b5O8YpQsi1TWvQaWSRiucXSxg3S4=";
+
+  meta = {
+    description = "Packer plugin for LXD";
+    homepage = "https://github.com/hashicorp/packer-plugin-lxd";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-ncloud/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-ncloud/package.nix
new file mode 100644
index 000000000000..4b475ab44e7b
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-ncloud/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-ncloud";
+  version = "1.1.2";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-ncloud";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-y/eagxmVLBi4JviWHRsJmDcCR2droP6Eoo4Z8JiLfUc=";
+  };
+
+  vendorHash = "sha256-jyk11hyZTZMo8aSXc6Ot87eUfkj3qiZPjYOL3D6h9Vs=";
+
+  meta = {
+    description = "Packer plugin for Naver Cloud";
+    homepage = "https://github.com/hashicorp/packer-plugin-ncloud";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-oneandone/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-oneandone/package.nix
new file mode 100644
index 000000000000..99044523777e
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-oneandone/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-oneandone";
+  version = "1.0.1";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-oneandone";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-H16HxXwVMO3IKncPaK67vuvoePwrvoleB3RyHG61PEw=";
+  };
+
+  vendorHash = "sha256-qTdseoxyLrG21zHp95f+DQ+MfNIbuPMCAoihBv7uRTQ=";
+
+  meta = {
+    description = "Packer plugin for 1&1";
+    homepage = "https://github.com/hashicorp/packer-plugin-oneandone";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-openstack/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-openstack/package.nix
new file mode 100644
index 000000000000..4a5954b8dc4e
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-openstack/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-openstack";
+  version = "1.1.4";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-openstack";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-U+1JXMGjNe/mA3ut55f0ZshwrmGiEMPxYcH/P7R3seU=";
+  };
+
+  vendorHash = "sha256-UZMxHidxQkJ02P8NB08UO+ArsOMAiEbqf49q5BOVqwc=";
+
+  meta = {
+    description = "Packer plugin for OpenStack";
+    homepage = "https://github.com/hashicorp/packer-plugin-openstack";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-oracle/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-oracle/package.nix
new file mode 100644
index 000000000000..60740c16d475
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-oracle/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-oracle";
+  version = "1.1.2";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-oracle";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-wSJ+gFS3DDTi77/zRMyficw0xjdOrKMyrcH9lG/RnD0=";
+  };
+
+  vendorHash = "sha256-6owPthxQg7QlPyq7K4VVhna7LgHwgNRoSGUPBNiU0jU=";
+
+  meta = {
+    description = "Packer plugin for Oracle Cloud";
+    homepage = "https://github.com/hashicorp/packer-plugin-oracle";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-profitbricks/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-profitbricks/package.nix
new file mode 100644
index 000000000000..bbc8fd993cc4
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-profitbricks/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-profitbricks";
+  version = "1.0.2";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-profitbricks";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-52lZfGIRqhF175TF/VsLrkVlxUNc9qqFrNd7qKPB670=";
+  };
+
+  vendorHash = "sha256-/CbyMclRa6JElOBHpQlqEZohYzDFU1aLPQ1JFX94rBQ=";
+
+  meta = {
+    description = "Packer plugin for ProfitBricks";
+    homepage = "https://github.com/hashicorp/packer-plugin-profitbricks";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-proxmox/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-proxmox/package.nix
new file mode 100644
index 000000000000..9eef614b7d72
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-proxmox/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-proxmox";
+  version = "1.2.3";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-proxmox";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-5v0Js0CHiJ15kL6RLc7ztWQVpiA49HpWCLsgA26mzmA=";
+  };
+
+  vendorHash = "sha256-T1AA7Wu0xeCXPKT/+Et4jV8V3ga2fXHS2MRw6W4gCHU=";
+
+  meta = {
+    description = "Packer plugin for Proxmox";
+    homepage = "https://github.com/hashicorp/packer-plugin-proxmox";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-puppet/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-puppet/package.nix
new file mode 100644
index 000000000000..05dcc77c221a
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-puppet/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-puppet";
+  version = "1.0.1";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-puppet";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-qwLq9OVrSyGQdFGhYgzO1x0B7lTVTnDv24wvo1OLlMs=";
+  };
+
+  vendorHash = "sha256-SmOoso0A0w34Tp6LEFOM3pxvJSkMZNi9Wvy5w7s4dc0=";
+
+  meta = {
+    description = "Packer plugin for Puppet";
+    homepage = "https://github.com/hashicorp/packer-plugin-puppet";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-qemu/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-qemu/package.nix
index 40eba546df60..7e23eee12246 100644
--- a/pkgs/by-name/pa/packer/plugins/packer-plugin-qemu/package.nix
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-qemu/package.nix
@@ -7,16 +7,16 @@
 mkPackerPlugin (finalAttrs: {
 
   pname = "packer-plugin-qemu";
-  version = "1.1.4";
+  version = "1.1.5";
 
   src = fetchFromGitHub {
     owner = "hashicorp";
     repo = "packer-plugin-qemu";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Ose7ueo9V2zJ5K5yvew9ErTD9lR+rkp1UB/yDi+U+fY=";
+    hash = "sha256-hHAxagcOCgcf5rVdObWlWmKonV5GJDfxzyc1g5hdNnM=";
   };
 
-  vendorHash = "sha256-pgfI/ntG6Fesimw3jk70GP+lBUEUMfq6wbqXx8xCTf0=";
+  vendorHash = "sha256-l7ITkEiyzMnonVqLByQQnwL0idJ3b1lXYU8X6uH+Oqg=";
 
   meta = {
     description = "Packer plugin for QEMU";
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-salt/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-salt/package.nix
new file mode 100644
index 000000000000..987fcc5439a4
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-salt/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-salt";
+  version = "1.0.0";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-salt";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-l9EY6GFYGh9ZlcX+TPB+5HQ+cXF16NxG0AVTfMzB8Eo=";
+  };
+
+  vendorHash = "sha256-6lL6i8eutpndkoN2h2hverwyXrTu8mxLuSYBoGwWgGU=";
+
+  meta = {
+    description = "Packer plugin for Salt";
+    homepage = "https://github.com/hashicorp/packer-plugin-salt";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-scaffolding/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-scaffolding/package.nix
new file mode 100644
index 000000000000..0d78f7682c17
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-scaffolding/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-scaffolding";
+  version = "0.1.0";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-scaffolding";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-PcPOAhUQBCFfa10Itysvyrr1v62+z5OYjQzLC/0wktg=";
+  };
+
+  vendorHash = "sha256-hYvMwLPKD5af1sh0lqJppGoHXhWfFh3I9vUU+4PqTlA=";
+
+  meta = {
+    description = "Packer plugin for scaffolding";
+    homepage = "https://github.com/hashicorp/packer-plugin-scaffolding";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-sdk/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-sdk/package.nix
new file mode 100644
index 000000000000..30011bd8dc49
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-sdk/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-sdk";
+  version = "0.6.9";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-sdk";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-shbo6S45EVH2z/yfTlUdKmzAP5udV5i6zzWmf8dM6Ds=";
+  };
+
+  vendorHash = "sha256-Cp7kpt9Oqp6CR+MnANj+JGj5scZ7d7UrxR2MaGExRXY=";
+
+  meta = {
+    description = "Packer plugin for the Packer SDK";
+    homepage = "https://github.com/hashicorp/packer-plugin-sdk";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-tencentcloud/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-tencentcloud/package.nix
new file mode 100644
index 000000000000..183d5db06d17
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-tencentcloud/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-tencentcloud";
+  version = "1.2.0";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-tencentcloud";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-WFbcHEWsuuAU++2xZYHJU/KiSSQRWXjS2fCED6ixpEs=";
+  };
+
+  vendorHash = "sha256-f33yHGixgWRGFEo3Z7TPcJzsV87fVw13aBJS1fg4Qe8=";
+
+  meta = {
+    description = "Packer plugin for Tencent Cloud";
+    homepage = "https://github.com/hashicorp/packer-plugin-tencentcloud";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-triton/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-triton/package.nix
new file mode 100644
index 000000000000..28d248239eed
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-triton/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-triton";
+  version = "1.0.2";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-triton";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-V601v5FGRXA/pAMdRVHVVaH1glJHWkiX5Qtg3ysbbdw=";
+  };
+
+  vendorHash = "sha256-u3ufvGQOg3EEOXFiwZrssyISrH3MS63Cpg/o4QFZGKY=";
+
+  meta = {
+    description = "Packer plugin for Triton";
+    homepage = "https://github.com/hashicorp/packer-plugin-triton";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-vagrant/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-vagrant/package.nix
new file mode 100644
index 000000000000..a357f4ccefc9
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-vagrant/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-vagrant";
+  version = "1.1.7";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-vagrant";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-kx6EBekBgYl2hD6rWWDSX9ar5KJjU0voNrbOzotfu5w=";
+  };
+
+  vendorHash = "sha256-49tupxkWxcgBsq186oEm61Suf+eIfB4uT15EetQtmFE=";
+
+  meta = {
+    description = "Packer plugin for Vagrant";
+    homepage = "https://github.com/hashicorp/packer-plugin-vagrant";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-virtualbox/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-virtualbox/package.nix
new file mode 100644
index 000000000000..46d1cf90be0b
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-virtualbox/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-virtualbox";
+  version = "1.1.4";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-virtualbox";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-SQCkEvc0Bs3PX/QYZDzjNdzkkmJc5XF2RCi/sP22A4E=";
+  };
+
+  vendorHash = "sha256-S7WwlCdMd+m+Y5fgLhSzH4CGPBLBGwJ6KXCqPuYh2ws=";
+
+  meta = {
+    description = "Packer plugin for VirtualBox";
+    homepage = "https://github.com/hashicorp/packer-plugin-virtualbox";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pa/packer/plugins/packer-plugin-yandex/package.nix b/pkgs/by-name/pa/packer/plugins/packer-plugin-yandex/package.nix
new file mode 100644
index 000000000000..854d925eb30b
--- /dev/null
+++ b/pkgs/by-name/pa/packer/plugins/packer-plugin-yandex/package.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  mkPackerPlugin,
+  fetchFromGitHub,
+}:
+
+mkPackerPlugin (finalAttrs: {
+
+  pname = "packer-plugin-yandex";
+  version = "1.1.3";
+
+  src = fetchFromGitHub {
+    owner = "hashicorp";
+    repo = "packer-plugin-yandex";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-MM4GgXiUQMSch1oZfFLE9UHotVOFFvdaSA+QLBPV6ao=";
+  };
+
+  vendorHash = "sha256-7PSzKoa7YA5oyfuHL0Pm7I4DyRv6RAe+LR299nLFm44=";
+
+  meta = {
+    description = "Packer plugin for Yandex Cloud";
+    homepage = "https://github.com/hashicorp/packer-plugin-yandex";
+    license = lib.licenses.mpl20;
+    maintainers = with lib.maintainers; [ jlesquembre ];
+  };
+})
diff --git a/pkgs/by-name/pc/pcmanfm/package.nix b/pkgs/by-name/pc/pcmanfm/package.nix
index ed916d3ffb9b..6eaa493ed6ba 100644
--- a/pkgs/by-name/pc/pcmanfm/package.nix
+++ b/pkgs/by-name/pc/pcmanfm/package.nix
@@ -11,17 +11,13 @@
   pkg-config,
   wrapGAppsHook3,
   adwaita-icon-theme,
-  withGtk3 ? true,
-  gtk2,
   gtk3,
   gettext,
   nix-update-script,
 }:
 
 let
-  libfm' = libfm.override { inherit withGtk3; };
-  gtk = if withGtk3 then gtk3 else gtk2;
-  inherit (lib) optional;
+  libfm' = libfm.override { withGtk3 = true; };
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "pcmanfm";
@@ -43,7 +39,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   buildInputs = [
     glib
-    gtk
+    gtk3
     libfm'
     libx11
     pango
@@ -52,7 +48,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   env.ACLOCAL = "aclocal -I ${gettext}/share/gettext/m4";
 
-  configureFlags = optional withGtk3 "--with-gtk=3";
+  configureFlags = [ "--with-gtk=3" ];
 
   passthru.updateScript = nix-update-script { };
 
diff --git a/pkgs/by-name/pd/pdfding/frontend.nix b/pkgs/by-name/pd/pdfding/frontend.nix
index 454fd415c04d..f8ee7827db89 100644
--- a/pkgs/by-name/pd/pdfding/frontend.nix
+++ b/pkgs/by-name/pd/pdfding/frontend.nix
@@ -31,7 +31,7 @@ stdenv.mkDerivation (finalAttrs: {
   npmDeps = fetchNpmDeps {
     inherit (finalAttrs) src;
     name = "pdfding-${finalAttrs.version}-npm-deps";
-    hash = "sha256-TDX2xoHj07aUeuLPt/TlgkdRdTiv3fNbriChzEB4EXk=";
+    hash = "sha256-4mnw9sLQBZCBqmTKkjNHx03pgmvQ4CuDg3NOke4vMHs=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/pd/pdfding/package.nix b/pkgs/by-name/pd/pdfding/package.nix
index c91b06171ddc..59fe84d69daf 100644
--- a/pkgs/by-name/pd/pdfding/package.nix
+++ b/pkgs/by-name/pd/pdfding/package.nix
@@ -12,12 +12,12 @@ let
 in
 python.pkgs.buildPythonPackage (finalAttrs: {
   pname = "pdfding";
-  version = "1.11.0";
+  version = "1.12.0";
   src = fetchFromGitHub {
     owner = "mrmn2";
     repo = "PdfDing";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-9gvuU/u8J717Zo7p35kUHX+VNY+c2Ex6vRwMpYr864U=";
+    hash = "sha256-LcZa9BxP99lI7Hqt3seyBeFNn4oLtR31yjq3Ap/IwUE=";
   };
   pyproject = true;
 
diff --git a/pkgs/by-name/pe/perf/package.nix b/pkgs/by-name/pe/perf/package.nix
index 2bd4953a7231..4824a7bcc91d 100644
--- a/pkgs/by-name/pe/perf/package.nix
+++ b/pkgs/by-name/pe/perf/package.nix
@@ -28,8 +28,6 @@
   numactl,
   zlib,
   babeltrace,
-  withGtk ? false,
-  gtk2,
   withZstd ? true,
   zstd,
   withLibcap ? true,
@@ -86,8 +84,8 @@ stdenv.mkDerivation {
     "ASCIIDOC8=1"
     "ARCH=${stdenv.hostPlatform.linuxArch}"
     "CROSS_COMPILE=${stdenv.cc.targetPrefix}"
+    "NO_GTK2=1"
   ]
-  ++ lib.optional (!withGtk) "NO_GTK2=1"
   ++ lib.optional (!withZstd) "NO_LIBZSTD=1"
   ++ lib.optional (!withLibcap) "NO_LIBCAP=1"
   ++ lib.optional (!withPython) "NO_LIBPYTHON=1";
@@ -124,7 +122,6 @@ stdenv.mkDerivation {
     libpfm
   ]
   ++ lib.optional (lib.meta.availableOn stdenv.hostPlatform systemtap-unwrapped) systemtap-unwrapped
-  ++ lib.optional withGtk gtk2
   ++ lib.optional withZstd zstd
   ++ lib.optional withLibcap libcap
   ++ lib.optionals withPython [
diff --git a/pkgs/by-name/ph/phira-unwrapped/package.nix b/pkgs/by-name/ph/phira-unwrapped/package.nix
index 1daece210526..d8abd2388a71 100644
--- a/pkgs/by-name/ph/phira-unwrapped/package.nix
+++ b/pkgs/by-name/ph/phira-unwrapped/package.nix
@@ -14,7 +14,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "phira-unwrapped";
-  version = "0.7.1";
+  version = "0.8.0";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -23,7 +23,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "TeamFlos";
     repo = "phira";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-bn1vRxL4O32Txna3RqafOzXISziDiL//S8NwiIK5c4M=";
+    hash = "sha256-/ziX3rkHs38BKNQU8Q9NJC51ArJbs/HBSKN7BIozCBY=";
   };
 
   nativeBuildInputs = [
@@ -54,7 +54,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     ./assets.patch
   ];
 
-  cargoHash = "sha256-a+bQ5d9n18jrsgnqygBlMKWlu7KPU5tbQQSXRXE5zWY=";
+  cargoHash = "sha256-R4JljAElhxT88Ar1cvBlv0qSquyrvia7Rbygr9NSxwY=";
 
   # The developer put assets necessary for this test in gitignore, so it cannot run.
   checkFlags = [ "--skip=test_parse_chart" ];
@@ -74,6 +74,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
     install -Dm644 assets/icon.png $out/share/icons/hicolor/128x128/apps/phira.png
   '';
 
+  passthru.updateScript = ./update.sh;
+
   meta = {
     description = "Rhythm game with custom charts and multiplayer";
     homepage = "https://github.com/TeamFlos/phira";
diff --git a/pkgs/by-name/ph/phira-unwrapped/update.sh b/pkgs/by-name/ph/phira-unwrapped/update.sh
new file mode 100755
index 000000000000..a02de512be38
--- /dev/null
+++ b/pkgs/by-name/ph/phira-unwrapped/update.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -p nix-update nix gnused -i bash
+
+set -euo pipefail
+
+old_version="$(nix-instantiate --eval --raw -A phira-unwrapped.version)"
+nix-update phira-unwrapped
+version="$(nix-instantiate --eval --raw -A phira-unwrapped.version)"
+if [[ "$old_version" == "$version" ]]; then
+  exit 0
+fi
+
+file="$(nix-instantiate --eval --raw -A phira.meta.position | cut -d : -f 1)"
+hash="$(nix-prefetch-url --unpack "https://github.com/TeamFlos/phira/releases/download/v$version/Phira-windows-x86_64-v$version.zip")"
+hash="$(nix-hash --to-sri --type sha256 "$hash")"
+sed -i "s|hash = \".*\";|hash = \"$hash\";|" "$file"
diff --git a/pkgs/by-name/ph/phira/package.nix b/pkgs/by-name/ph/phira/package.nix
index 590eac607de1..ccbe8e8244fd 100644
--- a/pkgs/by-name/ph/phira/package.nix
+++ b/pkgs/by-name/ph/phira/package.nix
@@ -12,7 +12,7 @@
   # A derivation or a path that contains a dir `assets`.
   overrideAssets ? fetchzip {
     url = "https://github.com/TeamFlos/phira/releases/download/v${phira-unwrapped.version}/Phira-windows-x86_64-v${phira-unwrapped.version}.zip";
-    hash = "sha256-p0+o7q42caHqVWnHtgknYaCIJemG/9fNKF7pqTnRGE4=";
+    hash = "sha256-1/FBg1i8O83yusEAFlXiYWyabv04n1qkXwLgWaw8sTc=";
     stripRoot = false;
     meta.license = lib.licenses.unfree;
   },
@@ -54,6 +54,9 @@ symlinkJoin {
 
   passthru.assets = overrideAssets;
 
-  meta = phira-unwrapped.meta;
+  meta = phira-unwrapped.meta // {
+    # trick meta.position
+    description = phira-unwrapped.meta.description;
+  };
 
 }
diff --git a/pkgs/by-name/pi/pinnacle/package.nix b/pkgs/by-name/pi/pinnacle/package.nix
index 3e42a9c08ed8..8c944589fd22 100644
--- a/pkgs/by-name/pi/pinnacle/package.nix
+++ b/pkgs/by-name/pi/pinnacle/package.nix
@@ -13,7 +13,7 @@
   mesa,
   xwayland,
   libinput,
-  libdisplay-info,
+  libdisplay-info_0_3,
   git,
   libgbm,
   rustc,
@@ -44,6 +44,10 @@ let
     license = lib.licenses.gpl3;
     mainProgram = "pinnacle";
     platforms = lib.platforms.linux;
+    badPlatforms = [
+      # tests fail https://hydra.nixos.org/build/337493260
+      "aarch64-linux"
+    ];
     maintainers = with lib.maintainers; [ cassandracomar ];
   };
 
@@ -96,7 +100,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     libinput
     mesa
     xwayland
-    libdisplay-info
+    libdisplay-info_0_3
     libgbm
     lua5_4
 
diff --git a/pkgs/by-name/pi/pinocchio/package.nix b/pkgs/by-name/pi/pinocchio/package.nix
index 66de2a0d5466..842951d1f6a5 100644
--- a/pkgs/by-name/pi/pinocchio/package.nix
+++ b/pkgs/by-name/pi/pinocchio/package.nix
@@ -5,10 +5,8 @@
   nix-update-script,
   stdenv,
 
-  # nativeBuildInputs
-  cmake,
-  doxygen,
-  pkg-config,
+  # buildInputs
+  jrl-cmakemodules,
 
   # propagatedBuildInputs
   boost,
@@ -16,7 +14,6 @@
   coal,
   console-bridge,
   eigen,
-  jrl-cmakemodules,
   urdfdom,
 
   # nativeCheckInputs
@@ -52,10 +49,10 @@ stdenv.mkDerivation (finalAttrs: {
 
   strictDeps = true;
 
-  nativeBuildInputs = [
-    cmake
-    doxygen
-    pkg-config
+  nativeBuildInputs = jrl-cmakemodules.docsNativeBuildInputs;
+
+  buildInputs = [
+    jrl-cmakemodules
   ];
 
   propagatedBuildInputs = [
@@ -63,7 +60,6 @@ stdenv.mkDerivation (finalAttrs: {
     coal
     console-bridge
     eigen
-    jrl-cmakemodules
     urdfdom
   ]
   ++ lib.optionals collisionSupport [ coal ]
@@ -88,7 +84,7 @@ stdenv.mkDerivation (finalAttrs: {
       "test-cpp-algorithm-utils-force"
     ];
 
-  cmakeFlags = [
+  cmakeFlags = jrl-cmakemodules.docsCmakeFlags ++ [
     (lib.cmakeBool "BUILD_PYTHON_INTERFACE" false)
     (lib.cmakeBool "BUILD_WITH_CASADI_SUPPORT" casadiSupport)
     (lib.cmakeBool "BUILD_WITH_COLLISION_SUPPORT" collisionSupport)
diff --git a/pkgs/by-name/pk/pktgen/package.nix b/pkgs/by-name/pk/pktgen/package.nix
index 2084beea66c2..e4cb6944c325 100644
--- a/pkgs/by-name/pk/pktgen/package.nix
+++ b/pkgs/by-name/pk/pktgen/package.nix
@@ -11,9 +11,7 @@
   lua5_3,
   numactl,
   util-linux,
-  gtk2,
   which,
-  withGtk ? false,
   nix-update-script,
 }:
 
@@ -44,15 +42,10 @@ stdenv.mkDerivation (finalAttrs: {
     lua5_3
     numactl
     which
-  ]
-  ++ lib.optionals withGtk [
-    gtk2
   ];
 
   env = {
     RTE_SDK = dpdk;
-    GUI = lib.optionalString withGtk "true";
-
     NIX_CFLAGS_COMPILE = toString [
       "-Wno-error=sign-compare"
     ];
diff --git a/pkgs/applications/networking/instant-messengers/profanity/default.nix b/pkgs/by-name/pr/profanity/package.nix
similarity index 86%
rename from pkgs/applications/networking/instant-messengers/profanity/default.nix
rename to pkgs/by-name/pr/profanity/package.nix
index 117a95f4e476..7f4780fb80ff 100644
--- a/pkgs/applications/networking/instant-messengers/profanity/default.nix
+++ b/pkgs/by-name/pr/profanity/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  config,
   meson,
   ninja,
   cmocka,
@@ -18,21 +19,28 @@
   pkg-config,
   readline,
   sqlite,
-  autoAwaySupport ? true,
+
+  # Read from config.profanity, falling back to true
+  autoAwaySupport ? config.profanity.autoAwaySupport or true,
   libxscrnsaver,
   libx11,
-  notifySupport ? true,
+
+  notifySupport ? config.profanity.notifySupport or true,
   libnotify,
   gdk-pixbuf,
-  omemoSupport ? true,
+
+  omemoSupport ? config.profanity.omemoSupport or true,
   libsignal-protocol-c,
   libgcrypt,
   qrencode,
-  pgpSupport ? true,
+
+  pgpSupport ? config.profanity.pgpSupport or true,
   gpgme,
-  pythonPluginSupport ? true,
+
+  pythonPluginSupport ? config.profanity.pythonPluginSupport or true,
   python3,
-  traySupport ? true,
+
+  traySupport ? config.profanity.traySupport or true,
   gtk3,
   otrSupport ? true,
   libotr,
@@ -48,7 +56,7 @@ stdenv.mkDerivation (finalAttrs: {
   src = fetchFromGitHub {
     owner = "profanity-im";
     repo = "profanity";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     hash = "sha256-rPiYzG5KvJyKt7b99AImmO6wTYxZPFcf/6Xhz8SrgIo=";
   };
 
diff --git a/pkgs/by-name/pr/proxsuite/package.nix b/pkgs/by-name/pr/proxsuite/package.nix
index 4c0516b67752..666c8e5eb248 100644
--- a/pkgs/by-name/pr/proxsuite/package.nix
+++ b/pkgs/by-name/pr/proxsuite/package.nix
@@ -7,15 +7,12 @@
   pythonSupport ? false,
   python3Packages,
 
-  # nativeBuildInputs
-  cmake,
-  doxygen,
-  graphviz,
+  # buildInputs
+  jrl-cmakemodules,
 
   # propagatedBuildInputs
   cereal,
   eigen,
-  jrl-cmakemodules,
   simde,
 
   # nativeCheckInputs
@@ -46,7 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
     "out"
   ];
 
-  cmakeFlags = [
+  cmakeFlags = jrl-cmakemodules.docsCmakeFlags ++ [
     (lib.cmakeBool "BUILD_DOCUMENTATION" true)
     (lib.cmakeBool "INSTALL_DOCUMENTATION" true)
     (lib.cmakeBool "BUILD_PYTHON_INTERFACE" pythonSupport)
@@ -54,20 +51,18 @@ stdenv.mkDerivation (finalAttrs: {
 
   strictDeps = true;
 
-  nativeBuildInputs = [
-    cmake
-    doxygen
-    graphviz
-  ]
-  ++ lib.optionals pythonSupport [
-    python3Packages.python
-    python3Packages.pythonImportsCheckHook
-  ];
+  nativeBuildInputs =
+    jrl-cmakemodules.docsNativeBuildInputs
+    ++ lib.optionals pythonSupport [
+      python3Packages.python
+      python3Packages.pythonImportsCheckHook
+    ];
+
+  buildInputs = [ jrl-cmakemodules ];
 
   propagatedBuildInputs = [
     cereal
     eigen
-    jrl-cmakemodules
     simde
   ]
   ++ lib.optionals pythonSupport [ python3Packages.nanobind ];
diff --git a/pkgs/by-name/pr/proxyman/darwin.nix b/pkgs/by-name/pr/proxyman/darwin.nix
new file mode 100644
index 000000000000..e56e0f85f383
--- /dev/null
+++ b/pkgs/by-name/pr/proxyman/darwin.nix
@@ -0,0 +1,48 @@
+{
+  stdenvNoCC,
+  fetchurl,
+  _7zz,
+  makeWrapper,
+  pname,
+  updateScript,
+  meta,
+}:
+stdenvNoCC.mkDerivation (finalAttrs: {
+  inherit pname;
+  version = "6.14.0";
+
+  src = fetchurl {
+    url = "https://github.com/ProxymanApp/Proxyman/releases/download/${finalAttrs.version}/Proxyman_${finalAttrs.version}.dmg";
+    hash = "sha256-bdIitfbr5Pr0glJcVDMfE/1ehpbRy5/pwXmUz0ivuvo=";
+  };
+
+  sourceRoot = ".";
+
+  nativeBuildInputs = [
+    _7zz
+    makeWrapper
+  ];
+
+  unpackCmd = "7zz x -snld -xr'!*:com.apple.*' $curSrc";
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/Applications
+    cp -R Proxyman.app $out/Applications
+    makeWrapper $out/Applications/Proxyman.app/Contents/MacOS/Proxyman $out/bin/proxyman
+
+    runHook postInstall
+  '';
+
+  dontFixup = true;
+
+  passthru = {
+    inherit updateScript;
+  };
+
+  meta = meta // {
+    changelog = "https://proxyman.com/changelog";
+    platforms = [ "aarch64-darwin" ];
+  };
+})
diff --git a/pkgs/by-name/pr/proxyman/linux.nix b/pkgs/by-name/pr/proxyman/linux.nix
new file mode 100644
index 000000000000..efdefd4ba196
--- /dev/null
+++ b/pkgs/by-name/pr/proxyman/linux.nix
@@ -0,0 +1,57 @@
+{
+  appimageTools,
+  fetchurl,
+  asar,
+  pname,
+  updateScript,
+  meta,
+}:
+let
+  version = "3.16.1";
+
+  src = fetchurl {
+    url = "https://github.com/ProxymanApp/proxyman-windows-linux/releases/download/${version}/Proxyman-${version}.AppImage";
+    hash = "sha256-rykOZVrh3MATFDzwLS7gEj5sMD9udsWAi+68Quqzk0c=";
+  };
+
+  appimageContents = appimageTools.extract {
+    inherit pname version src;
+    postExtract = ''
+      ${asar}/bin/asar extract $out/resources/app.asar app
+
+      # This will fix the issue with Proxyman not detecting NixOS as a valid Linux environment
+      substituteInPlace app/dist/main/main.js \
+        --replace-fail 'systemTrustFilename:"/etc/ca-certificates/trust-source/anchors/%s.crt",trustCommands:["update-ca-trust extract"]' 'systemTrustFilename:"/etc/ssl/certs/%s.crt",trustCommands:[]' \
+        --replace-fail '{path:"/etc/ca-certificates/trust-source/anchors/",distroFamily:"arch"}' '{path:"/etc/ssl/certs/",distroFamily:"arch"}'
+
+      # This will permanently mark the certificate as installed, as this should be done through Nix config rather than
+      # placing / editing a file in /etc like Proxyman would expect.
+      # Configure the certificate located in "~/.config/Proxyman/certificate/certs/ca.pem" using security.pki.certificates in your nix config
+      substituteInPlace app/dist/main/main.js --replace-fail "return this.isFile(this.getNewCertPath(e))" "return true"
+
+      ${asar}/bin/asar pack app $out/resources/app.asar
+    '';
+  };
+
+in
+appimageTools.wrapAppImage {
+  inherit pname version;
+  src = appimageContents;
+
+  extraInstallCommands = ''
+    install -Dm444 ${appimageContents}/proxyman.desktop -t $out/share/applications
+    install -Dm444 ${appimageContents}/proxyman.png -t $out/share/icons/hicolor/256x256/apps
+    substituteInPlace $out/share/applications/proxyman.desktop \
+      --replace-fail "Exec=AppRun" "Exec=proxyman --"
+  '';
+
+  passthru = {
+    inherit updateScript;
+    inherit src;
+  };
+
+  meta = meta // {
+    changelog = "https://proxyman.com/changelog-windows";
+    platforms = [ "x86_64-linux" ];
+  };
+}
diff --git a/pkgs/by-name/pr/proxyman/package.nix b/pkgs/by-name/pr/proxyman/package.nix
index 41dc9b3b4f36..5e68fd64ca25 100644
--- a/pkgs/by-name/pr/proxyman/package.nix
+++ b/pkgs/by-name/pr/proxyman/package.nix
@@ -1,63 +1,68 @@
 {
   lib,
-  appimageTools,
-  fetchurl,
-  asar,
-  nix-update-script,
+  stdenv,
+  callPackage,
+  writeShellScript,
+  curl,
+  jq,
+  common-updater-scripts,
 }:
 let
   pname = "proxyman";
-  version = "3.16.1";
 
-  src = fetchurl {
-    url = "https://github.com/ProxymanApp/proxyman-windows-linux/releases/download/${version}/Proxyman-${version}.AppImage";
-    hash = "sha256-rykOZVrh3MATFDzwLS7gEj5sMD9udsWAi+68Quqzk0c=";
-  };
+  updateScript = {
+    command = writeShellScript "proxyman-update-script" ''
+      set -euo pipefail
 
-  appimageContents = appimageTools.extract {
-    inherit pname version src;
-    postExtract = ''
-      ${asar}/bin/asar extract $out/resources/app.asar app
+      updateArtifact() {
+        local repo=$1 url=$2 file=$3 system=$4 label=$5
+        local version hash
+        version=$(${lib.getExe curl} --fail -s ''${GITHUB_TOKEN:+-H "Authorization: bearer $GITHUB_TOKEN"} \
+          "https://api.github.com/repos/$repo/releases/latest" | ${lib.getExe jq} -r .tag_name)
+        if [[ -z "$version" || "$version" == "null" ]]; then
+          echo "could not determine latest release of $repo" >&2
+          return 1
+        fi
+        if grep -q "version = \"$version\";" "$file"; then
+          echo '[]'
+          return
+        fi
+        url=''${url//@version@/$version}
+        hash=$(nix store prefetch-file --json "$url" | ${lib.getExe jq} -r .hash)
+        ${lib.getExe' common-updater-scripts "update-source-version"} proxyman "$version" "$hash" \
+          --file="$file" --system="$system" --print-changes \
+          | ${lib.getExe jq} --arg label "$label" \
+              'map(.commitMessage = "proxyman: (\($label)) \(.oldVersion) -> \(.newVersion)")'
+      }
 
-      # This will fix the issue with Proxyman not detecting NixOS as a valid Linux environment
-      substituteInPlace app/dist/main/main.js \
-        --replace-fail 'systemTrustFilename:"/etc/ca-certificates/trust-source/anchors/%s.crt",trustCommands:["update-ca-trust extract"]' 'systemTrustFilename:"/etc/ssl/certs/%s.crt",trustCommands:[]' \
-        --replace-fail '{path:"/etc/ca-certificates/trust-source/anchors/",distroFamily:"arch"}' '{path:"/etc/ssl/certs/",distroFamily:"arch"}'
+      # Electron app for Linux
+      linuxChanges=$(updateArtifact ProxymanApp/proxyman-windows-linux \
+        "https://github.com/ProxymanApp/proxyman-windows-linux/releases/download/@version@/Proxyman-@version@.AppImage" \
+        pkgs/by-name/pr/proxyman/linux.nix x86_64-linux linux)
 
-      # This will permanently mark the certificate as installed, as this should be done through Nix config rather than
-      # placing / editing a file in /etc like Proxyman would expect.
-      # Configure the certificate located in "~/.config/Proxyman/certificate/certs/ca.pem" using security.pki.certificates in your nix config
-      substituteInPlace app/dist/main/main.js --replace-fail "return this.isFile(this.getNewCertPath(e))" "return true"
+      # Native macOS app (independent versioning)
+      darwinChanges=$(updateArtifact ProxymanApp/Proxyman \
+        "https://github.com/ProxymanApp/Proxyman/releases/download/@version@/Proxyman_@version@.dmg" \
+        pkgs/by-name/pr/proxyman/darwin.nix aarch64-darwin darwin)
 
-      ${asar}/bin/asar pack app $out/resources/app.asar
+      ${lib.getExe jq} -n "$linuxChanges + $darwinChanges"
     '';
-  };
-
-in
-appimageTools.wrapAppImage {
-  inherit pname version;
-  src = appimageContents;
-
-  extraInstallCommands = ''
-    install -Dm444 ${appimageContents}/proxyman.desktop -t $out/share/applications
-    install -Dm444 ${appimageContents}/proxyman.png -t $out/share/icons/hicolor/256x256/apps
-    substituteInPlace $out/share/applications/proxyman.desktop \
-      --replace-fail "Exec=AppRun" "Exec=proxyman --"
-  '';
-
-  passthru = {
-    updateScript = nix-update-script { };
-    inherit src; # needed for nix-update to find the GitHub URL
+    supportedFeatures = [ "commit" ];
   };
 
   meta = {
     description = "Capture, inspect, and manipulate HTTP(s) requests/responses with ease";
     homepage = "https://proxyman.com";
-    changelog = "https://proxyman.com/changelog-windows";
     license = lib.licenses.unfree;
     mainProgram = "proxyman";
-    maintainers = with lib.maintainers; [ nilathedragon ];
-    platforms = [ "x86_64-linux" ];
+    maintainers = with lib.maintainers; [
+      nilathedragon
+      matteopacini
+    ];
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
   };
-}
+in
+if stdenv.hostPlatform.isDarwin then
+  callPackage ./darwin.nix { inherit pname updateScript meta; }
+else
+  callPackage ./linux.nix { inherit pname updateScript meta; }
diff --git a/pkgs/by-name/pr/proxysql/btree-cstdint.patch b/pkgs/by-name/pr/proxysql/btree-cstdint.patch
new file mode 100644
index 000000000000..c5eae1c371d2
--- /dev/null
+++ b/pkgs/by-name/pr/proxysql/btree-cstdint.patch
@@ -0,0 +1,16 @@
+The vendored copy of Google's cpp-btree relies on <cstdint> being pulled in
+transitively.  libstdc++ 15 no longer does so, which makes uint8_t/uint16_t
+undeclared, and the resulting fallback to int trips the kNodeValues
+COMPILE_ASSERT with a "1 << 32" shift.
+
+diff --git a/include/btree.h b/include/btree.h
+--- a/include/btree.h
++++ b/include/btree.h
+@@ -104,6 +104,7 @@
+ #include <stddef.h>
+ #include <string.h>
+ #include <sys/types.h>
++#include <cstdint>
+ #include <algorithm>
+ #include <functional>
+ #include <iostream>
diff --git a/pkgs/by-name/pr/proxysql/makefiles.patch b/pkgs/by-name/pr/proxysql/makefiles.patch
index 17facc6744c1..bc47db822b4a 100644
--- a/pkgs/by-name/pr/proxysql/makefiles.patch
+++ b/pkgs/by-name/pr/proxysql/makefiles.patch
@@ -151,7 +151,7 @@ index 87d2a20e..505e069a 100644
  	cd mariadb-client-library && tar -zxf mariadb-connector-c-3.3.8-src.tar.gz
  	cd mariadb-client-library/mariadb_client && patch -p0 < ../plugin_auth_CMakeLists.txt.patch
 -	cd mariadb-client-library/mariadb_client && cmake . -Wno-dev -DCMAKE_BUILD_TYPE=RelWithDebInfo -DOPENSSL_ROOT_DIR=$(SSL_IDIR) -DOPENSSL_LIBRARIES=$(SSL_LDIR) -DICONV_LIBRARIES=$(brew --prefix libiconv)/lib -DICONV_INCLUDE=$(brew --prefix libiconv)/include .
-+	cd mariadb-client-library/mariadb_client && cmake . -Wno-dev -DCMAKE_POLICY_VERSION_MINIMUM=3.5 -DCMAKE_BUILD_TYPE=RelWithDebInfo -DOPENSSL_ROOT_DIR=$(SSL_IDIR) -DOPENSSL_LIBRARIES=$(SSL_LDIR) -DICONV_LIBRARIES=$(brew --prefix libiconv)/lib -DICONV_INCLUDE=$(brew --prefix libiconv)/include .
++	cd mariadb-client-library/mariadb_client && cmake . -Wno-dev -DCMAKE_POLICY_VERSION_MINIMUM=3.5 -DCMAKE_C_FLAGS=-std=gnu17 -DCMAKE_BUILD_TYPE=RelWithDebInfo -DOPENSSL_ROOT_DIR=$(SSL_IDIR) -DOPENSSL_LIBRARIES=$(SSL_LDIR) -DICONV_LIBRARIES=$(brew --prefix libiconv)/lib -DICONV_INCLUDE=$(brew --prefix libiconv)/include .
  ifeq ($(PROXYDEBUG),1)
  	cd mariadb-client-library/mariadb_client && patch -p0 < ../ma_context.h.patch
  else ifeq ($(USEVALGRIND),1)
diff --git a/pkgs/by-name/pr/proxysql/package.nix b/pkgs/by-name/pr/proxysql/package.nix
index 852c812b6d66..e31b2d20537d 100644
--- a/pkgs/by-name/pr/proxysql/package.nix
+++ b/pkgs/by-name/pr/proxysql/package.nix
@@ -49,6 +49,7 @@ stdenv.mkDerivation (finalAttrs: {
   patches = [
     ./makefiles.patch
     ./dont-phone-home.patch
+    ./btree-cstdint.patch
   ];
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/pu/pulsemeeter/package.nix b/pkgs/by-name/pu/pulsemeeter/package.nix
index 38e5b67807b0..b80e37f80193 100644
--- a/pkgs/by-name/pu/pulsemeeter/package.nix
+++ b/pkgs/by-name/pu/pulsemeeter/package.nix
@@ -12,14 +12,14 @@
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "pulsemeeter";
-  version = "2.1.1";
+  version = "2.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "theRealCarneiro";
     repo = "pulsemeeter";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-m64frtEVqwJEc0rfKoPIbTJtASE+aPAdBBSrPNHIXRY=";
+    hash = "sha256-DBT0ZivOQd6w1Ce1NLcLbk5YL+8+H5XUZboiEzna678=";
   };
 
   build-system = with python3Packages; [
diff --git a/pkgs/by-name/qe/qemu/fix-tls-tests-without-tasn1.patch b/pkgs/by-name/qe/qemu/fix-tls-tests-without-tasn1.patch
new file mode 100644
index 000000000000..a55e692abff5
--- /dev/null
+++ b/pkgs/by-name/qe/qemu/fix-tls-tests-without-tasn1.patch
@@ -0,0 +1,31 @@
+diff --git a/tests/qtest/migration/tls-tests.c b/tests/qtest/migration/tls-tests.c
+index 827cc7bcf8..9bdb1165af 100644
+--- a/tests/qtest/migration/tls-tests.c
++++ b/tests/qtest/migration/tls-tests.c
+@@ -492,6 +492,7 @@ static void test_precopy_tcp_no_tls(char *name, MigrateCommon *args)
+     test_precopy_common(args);
+ }
+ 
++#ifdef CONFIG_TASN1
+ static void *
+ migrate_hook_start_tls_x509_no_host(QTestState *from, QTestState *to)
+ {
+@@ -519,7 +520,6 @@ static void test_precopy_tcp_tls_no_hostname(char *name, MigrateCommon *args)
+     test_precopy_common(args);
+ }
+ 
+-#ifdef CONFIG_TASN1
+ static void test_precopy_tcp_tls_x509_default_host(char *name,
+                                                    MigrateCommon *args)
+ {
+@@ -719,8 +719,10 @@ void migration_test_add_tls(MigrationTestEnv *env)
+ 
+     migration_test_add("/migration/precopy/tcp/no-tls",
+                        test_precopy_tcp_no_tls);
++#ifdef CONFIG_TASN1
+     migration_test_add("/migration/precopy/tcp/tls/no-hostname",
+                        test_precopy_tcp_tls_no_hostname);
++#endif /* CONFIG_TASN1 */
+ 
+     migration_test_add("/migration/precopy/unix/tls/psk",
+                        test_precopy_unix_tls_psk);
diff --git a/pkgs/by-name/qe/qemu/package.nix b/pkgs/by-name/qe/qemu/package.nix
index 77fbe5ede54a..b1c0edd1c1f9 100644
--- a/pkgs/by-name/qe/qemu/package.nix
+++ b/pkgs/by-name/qe/qemu/package.nix
@@ -280,6 +280,12 @@ stdenv.mkDerivation (finalAttrs: {
       sha256 = "sha256-oC+bRjEHixv1QEFO9XAm4HHOwoiT+NkhknKGPydnZ5E=";
       revert = true;
     })
+
+    # Fix compilation of the TLS migration tests when gnutls is available
+    # but libtasn1 is not, as in the minimal build, see #547163.
+    # Submitted upstream, remove when included in a release:
+    # https://lists.gnu.org/archive/html/qemu-devel/2026-07/msg08469.html
+    ./fix-tls-tests-without-tasn1.patch
   ]
   ++ lib.optional nixosTestRunner ./force-uid0-on-9p.patch;
 
diff --git a/pkgs/by-name/ra/radvd/package.nix b/pkgs/by-name/ra/radvd/package.nix
index 020ff1bb43c9..2e124236cbea 100644
--- a/pkgs/by-name/ra/radvd/package.nix
+++ b/pkgs/by-name/ra/radvd/package.nix
@@ -36,6 +36,8 @@ stdenv.mkDerivation (finalAttrs: {
     libbsd
   ];
 
+  configureFlags = [ "--sysconfdir=/etc" ];
+
   # Needed for cross-compilation
   makeFlags = [ "AR=${stdenv.cc.targetPrefix}ar" ];
 
diff --git a/pkgs/by-name/ra/raindrop/package.nix b/pkgs/by-name/ra/raindrop/package.nix
new file mode 100644
index 000000000000..cbbc3e8748f9
--- /dev/null
+++ b/pkgs/by-name/ra/raindrop/package.nix
@@ -0,0 +1,135 @@
+{
+  asar,
+  buildNpmPackage,
+  copyDesktopItems,
+  electron,
+  fetchFromGitHub,
+  lib,
+  makeDesktopItem,
+  makeWrapper,
+}:
+let
+  sources = lib.importJSON ./sources.json;
+  inherit (sources) version;
+
+  webapp = buildNpmPackage {
+    pname = "raindrop-webapp";
+    inherit version;
+
+    src = fetchFromGitHub {
+      owner = "raindropio";
+      repo = "app";
+      rev = sources.webappRev;
+      hash = sources.webappHash;
+    };
+
+    npmDepsHash = sources.webappNpmHash;
+
+    npmBuildScript = "build:electron";
+
+    # The post-install script for @sentry/cli tries to download a native binary
+    # which won't work in the Nix sandbox, and we don't want the telemetry anyway.
+    env.SENTRYCLI_SKIP_DOWNLOAD = "1";
+
+    installPhase = ''
+      runHook preInstall
+      mkdir -p $out
+      cp -r dist/electron/prod/* $out/
+      runHook postInstall
+    '';
+  };
+in
+buildNpmPackage {
+  pname = "raindrop";
+  inherit version;
+
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "raindropio";
+    repo = "desktop";
+    rev = sources.desktopRev;
+    hash = sources.desktopHash;
+  };
+
+  npmDepsHash = sources.desktopNpmHash;
+
+  makeCacheWritable = true;
+  dontNpmBuild = true;
+
+  env.ELECTRON_SKIP_BINARY_DOWNLOAD = "1";
+
+  # The "0.0.0" placeholder is normally replaced by electron-builder at
+  # release time. We skip that process, so we have to patch it ourselves.
+  postPatch = ''
+    substituteInPlace package.json \
+      --replace-fail '"version": "0.0.0"' '"version": "${version}"'
+  '';
+
+  nativeBuildInputs = [
+    asar
+    copyDesktopItems
+    makeWrapper
+  ];
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/share/raindrop
+
+    # The path must match how the desktop app references the webapp submodule.
+    mkdir -p app/webapp/dist/electron/prod
+    cp package.json app/
+    cp -r src app/
+    cp -r ${webapp}/* app/webapp/dist/electron/prod/
+    cp -r node_modules app/
+
+    # --ignore-scripts prevents post-install hooks from running (and failing).
+    npm prune --prefix app --omit=dev --ignore-scripts 2>/dev/null || true
+
+    asar pack app $out/share/raindrop/app.asar
+
+    for size in 16 32 48 64 128 256 512; do
+      install -Dm 644 "build/linux/''${size}x''${size}.png" \
+        "$out/share/icons/hicolor/''${size}x''${size}/apps/raindrop.png"
+    done
+
+    makeWrapper ${lib.getExe electron} $out/bin/raindrop \
+      --add-flags $out/share/raindrop/app.asar \
+      --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto --enable-features=WaylandWindowDecorations --enable-wayland-ime=true}}" \
+      --set-default ELECTRON_FORCE_IS_PACKAGED 1 \
+      --set-default ELECTRON_IS_DEV 0 \
+      --inherit-argv0
+
+    runHook postInstall
+  '';
+
+  desktopItems = [
+    (makeDesktopItem {
+      name = "raindrop";
+      icon = "raindrop";
+      exec = "raindrop %U";
+      desktopName = "Raindrop.io";
+      genericName = "Bookmark Manager";
+      comment = "All-in-one bookmark manager";
+      categories = [
+        "Archiving"
+        "Utility"
+      ];
+      startupWMClass = "Raindrop.io";
+      mimeTypes = [ "x-scheme-handler/rnio" ];
+    })
+  ];
+
+  passthru.updateScript = ./update.sh;
+
+  meta = {
+    description = "All-in-one bookmark manager";
+    homepage = "https://raindrop.io";
+    changelog = "https://github.com/raindropio/desktop/releases/tag/v${version}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ travisty- ];
+    mainProgram = "raindrop";
+    platforms = [ "x86_64-linux" ];
+  };
+}
diff --git a/pkgs/by-name/ra/raindrop/sources.json b/pkgs/by-name/ra/raindrop/sources.json
new file mode 100644
index 000000000000..3cabe6ca1149
--- /dev/null
+++ b/pkgs/by-name/ra/raindrop/sources.json
@@ -0,0 +1,9 @@
+{
+  "version": "5.7.9",
+  "desktopRev": "v5.7.9",
+  "desktopHash": "sha256-l80wujoB+tTDg6sE13ilnu/RQxHqqwPDukO+nIfznec=",
+  "desktopNpmHash": "sha256-+m9Fvt3NCvf0DBe/79sPWOgiewfZC4XOV4O7p76uSy8=",
+  "webappRev": "c062e549efc885beaf630e433102f6a2cbbee6b0",
+  "webappHash": "sha256-PrxE2RL+1nEcLPxe5uRHpibokFxzRH+gZqpkw9imeaY=",
+  "webappNpmHash": "sha256-UP3E6ZXRSGJlP+j7qidf2jRSQ3v07ymMhJHm+FvGjQA="
+}
diff --git a/pkgs/by-name/ra/raindrop/update.sh b/pkgs/by-name/ra/raindrop/update.sh
new file mode 100755
index 000000000000..6f5e517a438c
--- /dev/null
+++ b/pkgs/by-name/ra/raindrop/update.sh
@@ -0,0 +1,50 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p curl git jq nix prefetch-npm-deps
+# shellcheck shell=bash
+
+# Regenerates the hashes in sources.json. Pass a version to pin a
+# release, or no arguments to auto-detect the latest GitHub release.
+
+# Usage: ./update.sh [version]
+
+set -euo pipefail
+
+root="$(git rev-parse --show-toplevel)"
+
+# Outputs the source hash (SRI) and npm deps hash (SRI).
+prefetch() {
+  local this hash path
+  this="$(nix-prefetch-url --unpack --print-path --type sha256 "$1" 2>/dev/null)"
+  hash="$(head -1 <<< "$this")"
+  path="$(tail -1 <<< "$this")"
+  nix hash convert --hash-algo sha256 "$hash"
+  prefetch-npm-deps "${path}/package-lock.json" 2>/dev/null | tail -1
+}
+
+version="${1:-}"
+if [ -z "$version" ]; then
+  version="$(curl -fsSL 'https://api.github.com/repos/raindropio/desktop/releases/latest' | jq -r '.tag_name | ltrimstr("v")')"
+fi
+
+echo "Updating raindrop to v${version}..."
+
+# The webapp is a Git submodule of desktop; the Contents API returns the commit SHA it's pinned to.
+webapp_rev="$(curl -fsSL "https://api.github.com/repos/raindropio/desktop/contents/webapp?ref=v${version}" | jq -r '.sha')"
+
+echo "  Fetching desktop..."
+readarray -t desktop < <(prefetch "https://github.com/raindropio/desktop/archive/refs/tags/v${version}.tar.gz")
+
+echo "  Fetching webapp..."
+readarray -t webapp < <(prefetch "https://github.com/raindropio/app/archive/${webapp_rev}.tar.gz")
+
+jq -n \
+  --arg version "$version" \
+  --arg desktopRev "v${version}" \
+  --arg desktopHash "${desktop[0]}" \
+  --arg desktopNpmHash "${desktop[1]}" \
+  --arg webappRev "$webapp_rev" \
+  --arg webappHash "${webapp[0]}" \
+  --arg webappNpmHash "${webapp[1]}" \
+  '$ARGS.named' > "$root/pkgs/by-name/ra/raindrop/sources.json"
+
+echo "Updated sources.json to v${version}"
diff --git a/pkgs/by-name/re/reindeer/package.nix b/pkgs/by-name/re/reindeer/package.nix
index a0de1bc728d9..7f6b49aca436 100644
--- a/pkgs/by-name/re/reindeer/package.nix
+++ b/pkgs/by-name/re/reindeer/package.nix
@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "reindeer";
-  version = "2026.05.04.00";
+  version = "2026.07.27.00";
 
   src = fetchFromGitHub {
     owner = "facebookincubator";
     repo = "reindeer";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-m27zMZbDv/2bXhb16rFxUUokEn0bxyrhpxlOSZvVcfk=";
+    hash = "sha256-8/AtBZzjC5NSashMtEjCasZU53GqZTkoAhWytoIweGU=";
   };
 
-  cargoHash = "sha256-nJU9ClYxRkAfFkOq1V7k34pjdqJntDr3gJekUibq304=";
+  cargoHash = "sha256-MB/TQnOB96x86uAQJNt6IiTUmy74Dom4xtqWGga6GkA=";
 
   nativeBuildInputs = [ pkg-config ];
 
diff --git a/pkgs/by-name/re/remarshal_0_17/package.nix b/pkgs/by-name/re/remarshal_0_17/package.nix
deleted file mode 100644
index a4109bad5238..000000000000
--- a/pkgs/by-name/re/remarshal_0_17/package.nix
+++ /dev/null
@@ -1,76 +0,0 @@
-{
-  lib,
-  python3Packages,
-  fetchFromGitHub,
-  fetchPypi,
-  fetchpatch,
-}:
-
-let
-  packageOverrides = self: super: {
-    tomlkit = super.tomlkit.overridePythonAttrs (oldAttrs: rec {
-      version = "0.12.5";
-      src = fetchPypi {
-        pname = "tomlkit";
-        inherit version;
-        hash = "sha256-7vNPujmDTU1rc8m6fz5NHEF6Tlb4mn6W4JDdDSS4+zw=";
-      };
-      patches = [
-        (fetchpatch {
-          url = "https://github.com/python-poetry/tomlkit/commit/05d9be1c2b2a95a4eb3a53d999f1483dd7abae5a.patch";
-          hash = "sha256-9pLGxcGHs+XoKrqlh7Q0dyc07XrK7J6u2T7Kvfd0ICc=";
-          excludes = [ ".github/workflows/tests.yml" ];
-        })
-      ];
-    });
-  };
-  python = python3Packages.python.override (old: {
-    self = python3Packages.python;
-    packageOverrides = lib.composeExtensions (old.packageOverrides or (_: _: { })) packageOverrides;
-  });
-  pythonPackages = python.pkgs;
-in
-pythonPackages.buildPythonApplication (finalAttrs: {
-  pname = "remarshal";
-  version = "0.17.1"; # last version with YAML 1.1 support, do not update
-  pyproject = true;
-
-  __structuredAttrs = true;
-
-  src = fetchFromGitHub {
-    owner = "remarshal-project";
-    repo = "remarshal";
-    tag = "v${finalAttrs.version}";
-    hash = "sha256-2WxMh5P/8NvElymnMU3JzQU0P4DMXFF6j15OxLaS+VA=";
-  };
-
-  pythonRemoveDeps = [ "pytest" ];
-
-  build-system = [ pythonPackages.poetry-core ];
-
-  dependencies = with pythonPackages; [
-    cbor2
-    colorama
-    python-dateutil
-    pyyaml
-    rich-argparse
-    ruamel-yaml
-    tomlkit
-    u-msgpack-python
-  ];
-
-  pythonRelaxDeps = [ "cbor2" ];
-
-  nativeCheckInputs = [ pythonPackages.pytestCheckHook ];
-
-  # nixpkgs-update: no auto update
-
-  meta = {
-    changelog = "https://github.com/remarshal-project/remarshal/releases/tag/${finalAttrs.src.tag}";
-    description = "Convert between TOML, YAML and JSON";
-    license = lib.licenses.mit;
-    homepage = "https://github.com/remarshal-project/remarshal";
-    maintainers = with lib.maintainers; [ hexa ];
-    mainProgram = "remarshal";
-  };
-})
diff --git a/pkgs/by-name/re/remote-touchpad/package.nix b/pkgs/by-name/re/remote-touchpad/package.nix
index 1547b7284454..3e91a903bf33 100644
--- a/pkgs/by-name/re/remote-touchpad/package.nix
+++ b/pkgs/by-name/re/remote-touchpad/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "remote-touchpad";
-  version = "1.5.3";
+  version = "1.5.4";
 
   src = fetchFromGitHub {
     owner = "unrud";
     repo = "remote-touchpad";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-9K/AdkfpQbXPDIwai3h98G4lo4p8c/yTLxirhbo03U4=";
+    sha256 = "sha256-Erflr02yv6RT6vF9/WKMO7h0lEr2NMPinK7bj/SPMvI=";
   };
 
   buildInputs = [
@@ -27,7 +27,7 @@ buildGoModule (finalAttrs: {
   ];
   tags = [ "portal,x11" ];
 
-  vendorHash = "sha256-nkzvE59H7adyzveXYFI1NVwIh8chBRrVZZKfLY0fEaw=";
+  vendorHash = "sha256-9e8mfGpR7HtpB+Fca69pKQH52FZciOnpsD/bi1JW4q0=";
 
   meta = {
     description = "Control mouse and keyboard from the web browser of a smartphone";
diff --git a/pkgs/by-name/re/resterm/package.nix b/pkgs/by-name/re/resterm/package.nix
index 1ed421f5632c..66f145378d8d 100644
--- a/pkgs/by-name/re/resterm/package.nix
+++ b/pkgs/by-name/re/resterm/package.nix
@@ -8,13 +8,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "resterm";
-  version = "0.48.1";
+  version = "0.49.4";
 
   src = fetchFromGitHub {
     owner = "unkn0wn-root";
     repo = "resterm";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-pOP09WnnPFCMUnwhcNTwctQVYNLmnC8f1oGdXzBlIwQ=";
+    hash = "sha256-4hLhmQ2ks1g9eF+wKKLc8/6g07IHisgwYMBhGr4DjbE=";
   };
 
   vendorHash = "sha256-K6edyYLkVQwEZBAfRwgckUJI8dmo/ZxFRjEkExtyLxY=";
diff --git a/pkgs/by-name/ro/roslyn-ls/deps.json b/pkgs/by-name/ro/roslyn-ls/deps.json
index bc4dc7a7f91e..499c26d1b5cd 100644
--- a/pkgs/by-name/ro/roslyn-ls/deps.json
+++ b/pkgs/by-name/ro/roslyn-ls/deps.json
@@ -19,15 +19,15 @@
   },
   {
     "pname": "MessagePack",
-    "version": "2.5.198",
-    "hash": "sha256-La9QIOel2n2yZaOPaRi04Q/7YudWQ4SiDxgpacFivgI=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/messagepack/2.5.198/messagepack.2.5.198.nupkg"
+    "version": "2.5.302",
+    "hash": "sha256-Dx/ofFClAvm+7NhI4k1OjNMIYAksRJcnFtmP0wPrgZ0=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/messagepack/2.5.302/messagepack.2.5.302.nupkg"
   },
   {
     "pname": "MessagePack.Annotations",
-    "version": "2.5.198",
-    "hash": "sha256-WnXjX2pGroKn+KukCgPeUUZAkz2S6CdMrCc9P2VcBDQ=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/messagepack.annotations/2.5.198/messagepack.annotations.2.5.198.nupkg"
+    "version": "2.5.302",
+    "hash": "sha256-4RIgRR1NctocYHAqzVqjEG/Xw/qNev/d4erkUNQHVbI=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/messagepack.annotations/2.5.302/messagepack.annotations.2.5.302.nupkg"
   },
   {
     "pname": "MessagePackAnalyzer",
@@ -37,9 +37,9 @@
   },
   {
     "pname": "Microsoft.Bcl.AsyncInterfaces",
-    "version": "10.0.1",
-    "hash": "sha256-aHoslRGmAot/z1GCCqSzjAxT/hltxOOIZ1/oti4WbGY=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/microsoft.bcl.asyncinterfaces/10.0.1/microsoft.bcl.asyncinterfaces.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-x8HC64abrN9BmlnYBswEzHClDEWcHAnskeaMX9N8/QQ=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/microsoft.bcl.asyncinterfaces/10.0.8/microsoft.bcl.asyncinterfaces.10.0.8.nupkg"
   },
   {
     "pname": "Microsoft.Bcl.HashCode",
@@ -61,9 +61,9 @@
   },
   {
     "pname": "Microsoft.Build.Framework",
-    "version": "18.0.2",
-    "hash": "sha256-fO31KAdDs2J0RUYD1ov9UB3ucsbALan7K0YdWW+yg7A=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/microsoft.build.framework/18.0.2/microsoft.build.framework.18.0.2.nupkg"
+    "version": "18.7.1",
+    "hash": "sha256-reiTfnhkYsgfMBlcyGpDICzVtmJaAt0iOjiq9vg9owg=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/microsoft.build.framework/18.7.1/microsoft.build.framework.18.7.1.nupkg"
   },
   {
     "pname": "Microsoft.Build.Locator",
@@ -85,15 +85,15 @@
   },
   {
     "pname": "Microsoft.CodeAnalysis.Analyzers",
-    "version": "5.9.0-1.26328.17",
-    "hash": "sha256-aWe3nfOBKVjSkouoeriDT4yX5AY6B5990XhcX7DFwuA=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.analyzers/5.9.0-1.26328.17/microsoft.codeanalysis.analyzers.5.9.0-1.26328.17.nupkg"
+    "version": "5.10.0-1.26365.3",
+    "hash": "sha256-CGEwbd5XUK8W9Xz7/d28L6umsG0Yj2HoIOrzTKvX/Mc=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.analyzers/5.10.0-1.26365.3/microsoft.codeanalysis.analyzers.5.10.0-1.26365.3.nupkg"
   },
   {
     "pname": "Microsoft.CodeAnalysis.BannedApiAnalyzers",
-    "version": "5.9.0-1.26328.17",
-    "hash": "sha256-JB+G5zwSoJN9TnfEFh6Oyp4CxaS/XqXDWp098fPMR3o=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.bannedapianalyzers/5.9.0-1.26328.17/microsoft.codeanalysis.bannedapianalyzers.5.9.0-1.26328.17.nupkg"
+    "version": "5.10.0-1.26365.3",
+    "hash": "sha256-e4GCNviU6nJO6/YnCjwy4KhKKcn9u/F0EKazw3QR9rM=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.bannedapianalyzers/5.10.0-1.26365.3/microsoft.codeanalysis.bannedapianalyzers.5.10.0-1.26365.3.nupkg"
   },
   {
     "pname": "Microsoft.CodeAnalysis.Common",
@@ -115,9 +115,9 @@
   },
   {
     "pname": "Microsoft.CodeAnalysis.PublicApiAnalyzers",
-    "version": "5.9.0-1.26328.17",
-    "hash": "sha256-kbfXTr3leMWiLLlG37M4iqzbhGJN74XmdqN0hciWqUM=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.publicapianalyzers/5.9.0-1.26328.17/microsoft.codeanalysis.publicapianalyzers.5.9.0-1.26328.17.nupkg"
+    "version": "5.10.0-1.26365.3",
+    "hash": "sha256-PZTUhVsBhGDiFLXCMsoTuiNVYOSxKTIiNjBHB3Pkz+A=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.publicapianalyzers/5.10.0-1.26365.3/microsoft.codeanalysis.publicapianalyzers.5.10.0-1.26365.3.nupkg"
   },
   {
     "pname": "Microsoft.CSharp",
@@ -133,15 +133,15 @@
   },
   {
     "pname": "Microsoft.DotNet.Arcade.Sdk",
-    "version": "10.0.0-beta.26324.4",
-    "hash": "sha256-fWa0FQbzdjixhefPDMlrjqrv+8emp6OjgSI5/yGuzHI=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/1a5f89f6-d8da-4080-b15f-242650c914a8/nuget/v3/flat2/microsoft.dotnet.arcade.sdk/10.0.0-beta.26324.4/microsoft.dotnet.arcade.sdk.10.0.0-beta.26324.4.nupkg"
+    "version": "10.0.0-beta.26378.2",
+    "hash": "sha256-/yZ+hZ/Yf4e6Nvb1bNktZ/R3bqeRHLGnBOQkHhT2SxE=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/1a5f89f6-d8da-4080-b15f-242650c914a8/nuget/v3/flat2/microsoft.dotnet.arcade.sdk/10.0.0-beta.26378.2/microsoft.dotnet.arcade.sdk.10.0.0-beta.26378.2.nupkg"
   },
   {
     "pname": "Microsoft.DotNet.XliffTasks",
-    "version": "10.0.0-beta.26324.4",
-    "hash": "sha256-CjmPwtmujQM9GK/yfP8nvHQk2KNosyr0dxLsR2SSobs=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/1a5f89f6-d8da-4080-b15f-242650c914a8/nuget/v3/flat2/microsoft.dotnet.xlifftasks/10.0.0-beta.26324.4/microsoft.dotnet.xlifftasks.10.0.0-beta.26324.4.nupkg"
+    "version": "10.0.0-beta.26378.2",
+    "hash": "sha256-NjiGwdFamNFb/t4hgarRKB9lr78Avorwp/vCX3FlGWE=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/1a5f89f6-d8da-4080-b15f-242650c914a8/nuget/v3/flat2/microsoft.dotnet.xlifftasks/10.0.0-beta.26378.2/microsoft.dotnet.xlifftasks.10.0.0-beta.26378.2.nupkg"
   },
   {
     "pname": "Microsoft.Extensions.Configuration",
@@ -235,9 +235,15 @@
   },
   {
     "pname": "Microsoft.NET.StringTools",
-    "version": "18.0.2",
-    "hash": "sha256-W8K0uyVtSlL21XXTUmBk9z+ECIlBhgBZUZtm0W5C2wc=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/microsoft.net.stringtools/18.0.2/microsoft.net.stringtools.18.0.2.nupkg"
+    "version": "18.4.0",
+    "hash": "sha256-uyHzUxlqdLe1QnDp4LNeANJcrSm/9zuxQyVcjUZNyAM=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/microsoft.net.stringtools/18.4.0/microsoft.net.stringtools.18.4.0.nupkg"
+  },
+  {
+    "pname": "Microsoft.NET.StringTools",
+    "version": "18.7.1",
+    "hash": "sha256-sTEk+neir/Qbrn93/T1C3qUl25J0kvD/Mf6ojoBgzQc=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/microsoft.net.stringtools/18.7.1/microsoft.net.stringtools.18.7.1.nupkg"
   },
   {
     "pname": "Microsoft.NETCore.Platforms",
@@ -259,9 +265,9 @@
   },
   {
     "pname": "Microsoft.ServiceHub.Analyzers",
-    "version": "4.9.14-beta",
-    "hash": "sha256-VV99hhKmo87BlxUO2nAPeLmsJ/LE35/L2fne/ZkjfcI=",
-    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.servicehub.analyzers/4.9.14-beta/microsoft.servicehub.analyzers.4.9.14-beta.nupkg"
+    "version": "4.10.128",
+    "hash": "sha256-gQrf735ItSPBwfLyeQkpCJ0ja1nOy+LRle45R4/69R0=",
+    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.servicehub.analyzers/4.10.128/microsoft.servicehub.analyzers.4.10.128.nupkg"
   },
   {
     "pname": "Microsoft.ServiceHub.Client",
@@ -271,9 +277,9 @@
   },
   {
     "pname": "Microsoft.ServiceHub.Framework",
-    "version": "4.9.14-beta",
-    "hash": "sha256-yA/03/aQEepEBSQHilfn3uYQVkEXtOLsH6llghEAuKM=",
-    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.servicehub.framework/4.9.14-beta/microsoft.servicehub.framework.4.9.14-beta.nupkg"
+    "version": "4.10.128",
+    "hash": "sha256-TKwHo2CxlSWvRVl3t9/uW1ifZkFj3oW4ONOZxjVNbRY=",
+    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.servicehub.framework/4.10.128/microsoft.servicehub.framework.4.10.128.nupkg"
   },
   {
     "pname": "Microsoft.TestPlatform.ObjectModel",
@@ -289,15 +295,15 @@
   },
   {
     "pname": "Microsoft.VisualStudio.Composition",
-    "version": "18.3.36",
-    "hash": "sha256-GTOsRNmN80IgT21AZUDn6ZpsdHoHyTcrDjiTibits6I=",
-    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.composition/18.3.36/microsoft.visualstudio.composition.18.3.36.nupkg"
+    "version": "18.9.15",
+    "hash": "sha256-F9/Q64TnBAZKIaFeapgEBrG7xsiJAzqvQYpV1GgdEsA=",
+    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.composition/18.9.15/microsoft.visualstudio.composition.18.9.15.nupkg"
   },
   {
     "pname": "Microsoft.VisualStudio.Composition.Analyzers",
-    "version": "18.3.36",
-    "hash": "sha256-hOW5zrcfyVbCZmzsVNq3r6cfY1FBcxklXzzrpkM3PeA=",
-    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.composition.analyzers/18.3.36/microsoft.visualstudio.composition.analyzers.18.3.36.nupkg"
+    "version": "18.9.15",
+    "hash": "sha256-C9mX9TTyVv6igDzfLshwSQne0OvwQqUGCz4huCEipIE=",
+    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.composition.analyzers/18.9.15/microsoft.visualstudio.composition.analyzers.18.9.15.nupkg"
   },
   {
     "pname": "Microsoft.VisualStudio.Debugger.Contracts",
@@ -313,9 +319,9 @@
   },
   {
     "pname": "Microsoft.VisualStudio.RpcContracts",
-    "version": "17.15.25-pre",
-    "hash": "sha256-Ii7X1gRprfJPwRuWbp8+2KNp9B3qLttJErh7KuVaUgo=",
-    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.rpccontracts/17.15.25-pre/microsoft.visualstudio.rpccontracts.17.15.25-pre.nupkg"
+    "version": "18.9.453",
+    "hash": "sha256-QF2sRrzeHv7i+6KOTpdC77lrBiF/84LtZW5bawXEibE=",
+    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.rpccontracts/18.9.453/microsoft.visualstudio.rpccontracts.18.9.453.nupkg"
   },
   {
     "pname": "Microsoft.VisualStudio.SolutionPersistence",
@@ -325,21 +331,21 @@
   },
   {
     "pname": "Microsoft.VisualStudio.Telemetry",
-    "version": "18.0.22",
-    "hash": "sha256-0Y5PFohljinGeJGVSJqYSUGUq49SRpW29/W/ucKklXQ=",
-    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.telemetry/18.0.22/microsoft.visualstudio.telemetry.18.0.22.nupkg"
+    "version": "18.3.113",
+    "hash": "sha256-oUREpGmc5Inu57zGkmo25BUkqCo/zG1YEz/pUVX/A1I=",
+    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.telemetry/18.3.113/microsoft.visualstudio.telemetry.18.3.113.nupkg"
   },
   {
     "pname": "Microsoft.VisualStudio.Threading",
-    "version": "17.15.22-alpha",
-    "hash": "sha256-LO8aishMaE97UkwqBv21lbmKZNHoKqKrRlbBvkcIGQ4=",
-    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.threading/17.15.22-alpha/microsoft.visualstudio.threading.17.15.22-alpha.nupkg"
+    "version": "18.7.19",
+    "hash": "sha256-RUOLjvGWFzTZssq7Sp5jdZIZtJJ0MLTvY/hnv/B4RWc=",
+    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.threading/18.7.19/microsoft.visualstudio.threading.18.7.19.nupkg"
   },
   {
     "pname": "Microsoft.VisualStudio.Threading.Analyzers",
-    "version": "17.15.20-alpha",
-    "hash": "sha256-0Jw6ZAvu7YyM5TgCTTpEeTzcWh1nAIeWvzT6Hj32uSs=",
-    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.threading.analyzers/17.15.20-alpha/microsoft.visualstudio.threading.analyzers.17.15.20-alpha.nupkg"
+    "version": "18.7.19",
+    "hash": "sha256-qH4MOHyqLyCeplOi6sEfb6zDea88MN7va0glEVx1NhI=",
+    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.threading.analyzers/18.7.19/microsoft.visualstudio.threading.analyzers.18.7.19.nupkg"
   },
   {
     "pname": "Microsoft.VisualStudio.Threading.Only",
@@ -355,9 +361,9 @@
   },
   {
     "pname": "Microsoft.VisualStudio.Threading.Only",
-    "version": "17.15.22-alpha",
-    "hash": "sha256-+st04bceIFbmImRdFGNZ7DDYKl8Vd+TjTE/xiJQwZcs=",
-    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.threading.only/17.15.22-alpha/microsoft.visualstudio.threading.only.17.15.22-alpha.nupkg"
+    "version": "18.7.19",
+    "hash": "sha256-sVEo9W4MkdEs2xERdED9436+pT6gXcCPVzdcZdtRd3g=",
+    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.threading.only/18.7.19/microsoft.visualstudio.threading.only.18.7.19.nupkg"
   },
   {
     "pname": "Microsoft.VisualStudio.Utilities.Internal",
@@ -377,6 +383,12 @@
     "hash": "sha256-sB8GLRiJHX3Py7qeBUnUANiDWhyPtISon6HQs+8wKms=",
     "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/microsoft.visualstudio.validation/17.8.8/microsoft.visualstudio.validation.17.8.8.nupkg"
   },
+  {
+    "pname": "Microsoft.VisualStudio.Validation",
+    "version": "18.7.1",
+    "hash": "sha256-ZDeeThip1A9cLzh2Ik37Qpe0Ri+jkYIpHIK6RTDn1sU=",
+    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/microsoft.visualstudio.validation/18.7.1/microsoft.visualstudio.validation.18.7.1.nupkg"
+  },
   {
     "pname": "Microsoft.Win32.Registry",
     "version": "5.0.0",
@@ -385,15 +397,21 @@
   },
   {
     "pname": "Nerdbank.MessagePack",
-    "version": "1.0.2",
-    "hash": "sha256-p0z9y7YxEN57Zl/iZvTE/+CfuWjIXPhyan/1IAK4G8o=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nerdbank.messagepack/1.0.2/nerdbank.messagepack.1.0.2.nupkg"
+    "version": "1.1.62",
+    "hash": "sha256-aGwc6hrRR8QFa224W9vTtoKBY+nco5OwT4glzwxFf14=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nerdbank.messagepack/1.1.62/nerdbank.messagepack.1.1.62.nupkg"
+  },
+  {
+    "pname": "Nerdbank.MessagePack",
+    "version": "1.2.4",
+    "hash": "sha256-6Cb01QAHuSTVstpcx6aVVpcJEn5kIUa3OgUZmAIh70Q=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nerdbank.messagepack/1.2.4/nerdbank.messagepack.1.2.4.nupkg"
   },
   {
     "pname": "Nerdbank.Streams",
-    "version": "2.12.87",
-    "hash": "sha256-BglFZT1nSyJO8mB235sP5yyu51iaGXwRHSOV8aeeY2A=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nerdbank.streams/2.12.87/nerdbank.streams.2.12.87.nupkg"
+    "version": "2.13.16",
+    "hash": "sha256-VdiB31IDleh/hDFtxAtL2N0WAHo8PgyyyX3Q6/un93A=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nerdbank.streams/2.13.16/nerdbank.streams.2.13.16.nupkg"
   },
   {
     "pname": "NETStandard.Library",
@@ -409,69 +427,69 @@
   },
   {
     "pname": "Newtonsoft.Json",
-    "version": "13.0.3",
-    "hash": "sha256-hy/BieY4qxBWVVsDqqOPaLy1QobiIapkbrESm6v2PHc=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/newtonsoft.json/13.0.3/newtonsoft.json.13.0.3.nupkg"
+    "version": "13.0.4",
+    "hash": "sha256-8JCB1FdAW681qXP6DFDWvycu1oPyVoxaYgpJ2pUvZSk=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/newtonsoft.json/13.0.4/newtonsoft.json.13.0.4.nupkg"
   },
   {
     "pname": "NuGet.Common",
-    "version": "6.8.0-rc.112",
-    "hash": "sha256-LfIF8idaAeEfEeaXlhUhw4KcY0QXzMNwHqvAInSgF5c=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/nuget.common/6.8.0-rc.112/nuget.common.6.8.0-rc.112.nupkg"
+    "version": "6.14.0",
+    "hash": "sha256-jDOwt3veI1GSG8CfBnf2+dJxD3E/Nmlc+vHtD4J76Ms=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nuget.common/6.14.0/nuget.common.6.14.0.nupkg"
   },
   {
     "pname": "NuGet.Configuration",
-    "version": "6.8.0-rc.112",
-    "hash": "sha256-tWhwgxiaXcWPXdZVnDS2wsdblN6FoPR/uGmW57y3Fnw=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/nuget.configuration/6.8.0-rc.112/nuget.configuration.6.8.0-rc.112.nupkg"
+    "version": "6.14.0",
+    "hash": "sha256-1PN9s6fhCw3wd2260U6hQ4vG3jIvcG8GIn1oQgxMXA0=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nuget.configuration/6.14.0/nuget.configuration.6.14.0.nupkg"
   },
   {
     "pname": "NuGet.DependencyResolver.Core",
-    "version": "6.8.0-rc.112",
-    "hash": "sha256-nS0Km+T6sRdIQLzwqjluHoV3MQe2dxwYhCrnKuURoSs=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/nuget.dependencyresolver.core/6.8.0-rc.112/nuget.dependencyresolver.core.6.8.0-rc.112.nupkg"
+    "version": "6.14.0",
+    "hash": "sha256-DnVsiwn4ulGNngLgiRy4yEXvjprnLOFC73n3z6u5kIk=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nuget.dependencyresolver.core/6.14.0/nuget.dependencyresolver.core.6.14.0.nupkg"
   },
   {
     "pname": "NuGet.Frameworks",
-    "version": "6.8.0-rc.112",
-    "hash": "sha256-0dmY/5/Pa+FW3ck0q8zdeHjt59PAeNNCh0tu+wY2260=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/nuget.frameworks/6.8.0-rc.112/nuget.frameworks.6.8.0-rc.112.nupkg"
+    "version": "6.14.0",
+    "hash": "sha256-3ViM3R1ucQMEL2hQYsivT86kI6veMQK2xDsiAcFcVQk=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nuget.frameworks/6.14.0/nuget.frameworks.6.14.0.nupkg"
   },
   {
     "pname": "NuGet.LibraryModel",
-    "version": "6.8.0-rc.112",
-    "hash": "sha256-8D1DetEC3pkDDRGdmjlfrKRQ9xqEwqnga3ZixZYMsIg=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/nuget.librarymodel/6.8.0-rc.112/nuget.librarymodel.6.8.0-rc.112.nupkg"
+    "version": "6.14.0",
+    "hash": "sha256-5P3TAObxl4YcdqztASLuDgKyZw7GGNkDla0fBJj4AbI=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nuget.librarymodel/6.14.0/nuget.librarymodel.6.14.0.nupkg"
   },
   {
     "pname": "NuGet.Packaging",
-    "version": "6.8.0-rc.112",
-    "hash": "sha256-Z9E9TIQSd+8gkOyc2k4LompDwdLQJMGNbHEt3DG1I4g=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/nuget.packaging/6.8.0-rc.112/nuget.packaging.6.8.0-rc.112.nupkg"
+    "version": "6.14.0",
+    "hash": "sha256-Yafbnxs3maj55bJ1oKQiZ0QkntFUzXdhorL94YEUOhY=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nuget.packaging/6.14.0/nuget.packaging.6.14.0.nupkg"
   },
   {
     "pname": "NuGet.ProjectModel",
-    "version": "6.8.0-rc.112",
-    "hash": "sha256-geQh1fSRTp2FTzeilFL8gxFFq7q8u7YaakShPKiTwns=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/nuget.projectmodel/6.8.0-rc.112/nuget.projectmodel.6.8.0-rc.112.nupkg"
+    "version": "6.14.0",
+    "hash": "sha256-9hPoEeXLSBkKii1m3pB4t0e8Pp8/K7l/vQfnoN21F8I=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nuget.projectmodel/6.14.0/nuget.projectmodel.6.14.0.nupkg"
   },
   {
     "pname": "NuGet.Protocol",
-    "version": "6.8.0-rc.112",
-    "hash": "sha256-6r/MJCo2ngibSAfNdH+xmeNUl38EPjQkaewKsTJpfvU=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/nuget.protocol/6.8.0-rc.112/nuget.protocol.6.8.0-rc.112.nupkg"
+    "version": "6.14.0",
+    "hash": "sha256-uLDKfs+QN1MdnuQtTES8qfNzzsmYKM6XB9pwJc4G+eo=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nuget.protocol/6.14.0/nuget.protocol.6.14.0.nupkg"
   },
   {
     "pname": "NuGet.Versioning",
-    "version": "6.8.0-rc.112",
-    "hash": "sha256-BzAWS5wpGnNj0gU33sfWao7BELGjrQBT4xj3EC7qRRE=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/nuget.versioning/6.8.0-rc.112/nuget.versioning.6.8.0-rc.112.nupkg"
+    "version": "6.14.0",
+    "hash": "sha256-DqdOJgsphKxSvqB8b60zNPCaiLfbiu3WnUJ/90feLrY=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/nuget.versioning/6.14.0/nuget.versioning.6.14.0.nupkg"
   },
   {
     "pname": "PolyType",
-    "version": "1.0.0",
-    "hash": "sha256-1/6tVCqzz7sG2knjO+HOTfr0tfnVi+xCTUvCcf7s4Hs=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/polytype/1.0.0/polytype.1.0.0.nupkg"
+    "version": "1.3.1",
+    "hash": "sha256-J/7MGrY/O0MW429HtRFHPbOD21XLa0c1XSg+wJFky4w=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/polytype/1.3.1/polytype.1.3.1.nupkg"
   },
   {
     "pname": "PowerShell",
@@ -481,9 +499,9 @@
   },
   {
     "pname": "Roslyn.Diagnostics.Analyzers",
-    "version": "5.9.0-1.26328.17",
-    "hash": "sha256-IXs1ePseeGg8wgsjooNXnqhqhi8VHKNUo8dMohJzVUY=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/roslyn.diagnostics.analyzers/5.9.0-1.26328.17/roslyn.diagnostics.analyzers.5.9.0-1.26328.17.nupkg"
+    "version": "5.10.0-1.26365.3",
+    "hash": "sha256-aY7TDxi4DKTkpXnHPuhhWAOOY2Qksb8LNUXWoKuGISo=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/roslyn.diagnostics.analyzers/5.10.0-1.26365.3/roslyn.diagnostics.analyzers.5.10.0-1.26365.3.nupkg"
   },
   {
     "pname": "SQLite3MC.PCLRaw.bundle",
@@ -511,9 +529,9 @@
   },
   {
     "pname": "StreamJsonRpc",
-    "version": "2.23.41-alpha",
-    "hash": "sha256-zTq/O6hLbOvcpzPwWxKE7a2NdetdFwPOAYw1afvCAbM=",
-    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/streamjsonrpc/2.23.41-alpha/streamjsonrpc.2.23.41-alpha.nupkg"
+    "version": "2.26.5",
+    "hash": "sha256-6JIRGfv2va3Ny3SkfRlep45dwrWj3cgj7e5NbINhjJo=",
+    "url": "https://pkgs.dev.azure.com/azure-public/3ccf6661-f8ce-4e8a-bb2e-eff943ddd3c7/_packaging/491596af-6d2d-439e-80bb-1ebb3b54f9a8/nuget/v3/flat2/streamjsonrpc/2.26.5/streamjsonrpc.2.26.5.nupkg"
   },
   {
     "pname": "System.Buffers",
@@ -523,15 +541,15 @@
   },
   {
     "pname": "System.CodeDom",
-    "version": "8.0.0",
-    "hash": "sha256-uwVhi3xcvX7eiOGQi7dRETk3Qx1EfHsUfchZsEto338=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.codedom/8.0.0/system.codedom.8.0.0.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-BePlDeK617FVuzguexH5RnBDyapaN/zY47lpV/3nzyw=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.codedom/10.0.8/system.codedom.10.0.8.nupkg"
   },
   {
     "pname": "System.Collections.Immutable",
-    "version": "10.0.1",
-    "hash": "sha256-ODbNYiCAQHHvlEnKHqyBRDfR/g7Lh2LfSQ/Zb4fNSeg=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.collections.immutable/10.0.1/system.collections.immutable.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-HTsGt7wf5O54IXUvy3UeIrzJn+ICRlRbwU60d5YH33I=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.collections.immutable/10.0.8/system.collections.immutable.10.0.8.nupkg"
   },
   {
     "pname": "System.Collections.Immutable",
@@ -547,15 +565,15 @@
   },
   {
     "pname": "System.ComponentModel.Composition",
-    "version": "10.0.1",
-    "hash": "sha256-7EBJ8eJFnWezsn1q8+1/zG4hovpXwuhIDkCB1z7kBPU=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.componentmodel.composition/10.0.1/system.componentmodel.composition.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-pWKlYq/0148HJJjonRh7s/CIBcjvxl+dhGiK9gQJ4zI=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.componentmodel.composition/10.0.8/system.componentmodel.composition.10.0.8.nupkg"
   },
   {
     "pname": "System.Composition",
-    "version": "10.0.1",
-    "hash": "sha256-t6hzhdjJl8XBIAry9auOZEy8jkKy1qDRmrZxO+IsmXQ=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.composition/10.0.1/system.composition.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-sp1IzwdxzVZwEF3mOCkobc5SYUGm/u3FDZUPkekoxZs=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.composition/10.0.8/system.composition.10.0.8.nupkg"
   },
   {
     "pname": "System.Composition.AttributedModel",
@@ -565,39 +583,39 @@
   },
   {
     "pname": "System.Composition.AttributedModel",
-    "version": "9.0.0",
-    "hash": "sha256-a7y7H6zj+kmYkllNHA402DoVfY9IaqC3Ooys8Vzl24M=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.composition.attributedmodel/9.0.0/system.composition.attributedmodel.9.0.0.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-6iUFdykgMj6yOG10qR3TOz6mrQnfDGsr4Q8WP65hBFU=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.composition.attributedmodel/10.0.8/system.composition.attributedmodel.10.0.8.nupkg"
   },
   {
     "pname": "System.Composition.Convention",
-    "version": "10.0.1",
-    "hash": "sha256-eWrZ0FvOnhhayxT193qjUy2f0cwhf01jJazpgfVb3Fk=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.composition.convention/10.0.1/system.composition.convention.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-MIQePJ3OkWpA07U+xH1PwiV88WtSGBaTxUrA1j4hD6Y=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.composition.convention/10.0.8/system.composition.convention.10.0.8.nupkg"
   },
   {
     "pname": "System.Composition.Hosting",
-    "version": "10.0.1",
-    "hash": "sha256-plHdjDS7vCYaP7Uasnx1J9arP9dzDFUl9EPelYj0f0Q=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.composition.hosting/10.0.1/system.composition.hosting.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-SOAD0Yz8A/XJ8tEi7Q8DL9H7FzTcgg8HAbnZYKiyZNk=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.composition.hosting/10.0.8/system.composition.hosting.10.0.8.nupkg"
   },
   {
     "pname": "System.Composition.Runtime",
-    "version": "10.0.1",
-    "hash": "sha256-mOQdwuSR9Akrbvgq0Ujr+uDN+vFjNbOi1ucOUspvEhU=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.composition.runtime/10.0.1/system.composition.runtime.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-hRkoJ8S1oD4FKjnaDYwfzX2Pys6QvGiiX6YxrdGgAyA=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.composition.runtime/10.0.8/system.composition.runtime.10.0.8.nupkg"
   },
   {
     "pname": "System.Composition.TypedParts",
-    "version": "10.0.1",
-    "hash": "sha256-5jBc/52m2MQxR5+AkauTEGhza4sNXr9An1IPQNkvffA=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.composition.typedparts/10.0.1/system.composition.typedparts.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-NYo2dvMJ9WU0BKIGDkuIpFQHkbZE1sGJAtY8fINFpqo=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.composition.typedparts/10.0.8/system.composition.typedparts.10.0.8.nupkg"
   },
   {
     "pname": "System.Configuration.ConfigurationManager",
-    "version": "10.0.1",
-    "hash": "sha256-XmXL//tniOp4RYiXs9HzNbwODjyGYW/bsWO0OuWXAxE=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.configuration.configurationmanager/10.0.1/system.configuration.configurationmanager.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-6FF/OGPRewqc3lGehKbKvr/hykiChtXcgOvJAt0hg6k=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.configuration.configurationmanager/10.0.8/system.configuration.configurationmanager.10.0.8.nupkg"
   },
   {
     "pname": "System.Data.DataSetExtensions",
@@ -607,15 +625,15 @@
   },
   {
     "pname": "System.Diagnostics.DiagnosticSource",
-    "version": "10.0.1",
-    "hash": "sha256-YxT94fUULFXIJ+hCM+4d156q50xDqxTev0S1MsIujwA=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.diagnostics.diagnosticsource/10.0.1/system.diagnostics.diagnosticsource.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-WUukX2DEBYxDiJVcGosDMfq16sarrbDGtzq7p5WC7EE=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.diagnostics.diagnosticsource/10.0.8/system.diagnostics.diagnosticsource.10.0.8.nupkg"
   },
   {
     "pname": "System.Diagnostics.EventLog",
-    "version": "10.0.1",
-    "hash": "sha256-Yn8jT9uKNnknLsSvtV9hyqfz/5x/aKnZt6XtfQOIdVM=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.diagnostics.eventlog/10.0.1/system.diagnostics.eventlog.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-bOSqKzHaZsJz+gDbWFbaJzY8PqLKywEEBxleFJgUztw=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.diagnostics.eventlog/10.0.8/system.diagnostics.eventlog.10.0.8.nupkg"
   },
   {
     "pname": "System.Diagnostics.PerformanceCounter",
@@ -631,15 +649,21 @@
   },
   {
     "pname": "System.IO.Pipelines",
-    "version": "10.0.1",
-    "hash": "sha256-3NHQjvO1mSPo8Hq9vMM5QeKJeS9/y3UpznideAf5pJA=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.io.pipelines/10.0.1/system.io.pipelines.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-/7LqBohsw/Z6/2tDUKoLjQyR8mEbvk4vU2t83EcB2ag=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.io.pipelines/10.0.8/system.io.pipelines.10.0.8.nupkg"
+  },
+  {
+    "pname": "System.IO.Pipes.AccessControl",
+    "version": "5.0.0",
+    "hash": "sha256-3yFWwBEvLy8bQt4h6R9QoQr/QOTCthnijnEhz0pahUo=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.io.pipes.accesscontrol/5.0.0/system.io.pipes.accesscontrol.5.0.0.nupkg"
   },
   {
     "pname": "System.Management",
-    "version": "7.0.0",
-    "hash": "sha256-QEdYBz8f80t9mvhSzOHsSIc7J0VeOEOzkZnROr/kffQ=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.management/7.0.0/system.management.7.0.0.nupkg"
+    "version": "9.0.5",
+    "hash": "sha256-r1BSfaOI0SSl3ScAUXIYDiEjnljqEJ5Ncx3fXjtwTaU=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.management/9.0.5/system.management.9.0.5.nupkg"
   },
   {
     "pname": "System.Memory",
@@ -673,9 +697,9 @@
   },
   {
     "pname": "System.Reflection.Metadata",
-    "version": "10.0.1",
-    "hash": "sha256-xjAyoQOjVuQUXSop9Uz7/lBHk5b7iukDriEpMpOQFTg=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.reflection.metadata/10.0.1/system.reflection.metadata.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-3pMFj5vVnC05yH6EeAkN6g58gywTnpcXkemj9DKpI1U=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.reflection.metadata/10.0.8/system.reflection.metadata.10.0.8.nupkg"
   },
   {
     "pname": "System.Reflection.Metadata",
@@ -701,17 +725,23 @@
     "hash": "sha256-qOyWEBbNr3EjyS+etFG8/zMbuPjA+O+di717JP9Cxyg=",
     "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.security.accesscontrol/6.0.0/system.security.accesscontrol.6.0.0.nupkg"
   },
+  {
+    "pname": "System.Security.AccessControl",
+    "version": "6.0.1",
+    "hash": "sha256-Ri4m95ZBfopDUGVahbvUIzuUy9D3FQwcXprP2I6IUUE=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.security.accesscontrol/6.0.1/system.security.accesscontrol.6.0.1.nupkg"
+  },
   {
     "pname": "System.Security.Cryptography.Pkcs",
-    "version": "8.0.1",
-    "hash": "sha256-KMNIkJ3yQ/5O6WIhPjyAIarsvIMhkp26A6aby5KkneU=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.security.cryptography.pkcs/8.0.1/system.security.cryptography.pkcs.8.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-WWhAGpwsxnjHA0jZCMRgNhq2JjBkx+w1TOJfIhJQqGo=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.security.cryptography.pkcs/10.0.8/system.security.cryptography.pkcs.10.0.8.nupkg"
   },
   {
     "pname": "System.Security.Cryptography.ProtectedData",
-    "version": "10.0.1",
-    "hash": "sha256-B2sQ5rfu4fROzUDbi0A2rHPq27QDmQa3k56MfpE1adA=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.security.cryptography.protecteddata/10.0.1/system.security.cryptography.protecteddata.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-GYRQSkRnDWytMIQcoNrAVbJda5nzfbtg1HJuwRZVxH0=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.security.cryptography.protecteddata/10.0.8/system.security.cryptography.protecteddata.10.0.8.nupkg"
   },
   {
     "pname": "System.Security.Permissions",
@@ -733,15 +763,15 @@
   },
   {
     "pname": "System.Text.Encodings.Web",
-    "version": "10.0.1",
-    "hash": "sha256-dBN9Rpe+J1F8/cdzwNxLHYiqvzgSX1r9128YXyb2DKM=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.text.encodings.web/10.0.1/system.text.encodings.web.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-HGgwNazFJc8PPhjA3p4P3Zgc/Zg8KOk+0uruWPHuo3M=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.text.encodings.web/10.0.8/system.text.encodings.web.10.0.8.nupkg"
   },
   {
     "pname": "System.Text.Json",
-    "version": "10.0.1",
-    "hash": "sha256-WfSgOpRL4DKfIry/H+eHxJHHrj6ENZ3+P6Q2ol3R2XM=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.text.json/10.0.1/system.text.json.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-RTXz0xPQalhyyRLXiu6reSl+dsUXE58GzjYmPP9+hYU=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.text.json/10.0.8/system.text.json.10.0.8.nupkg"
   },
   {
     "pname": "System.Threading.Channels",
@@ -751,9 +781,9 @@
   },
   {
     "pname": "System.Threading.Tasks.Dataflow",
-    "version": "10.0.1",
-    "hash": "sha256-DNuL4wsPOIE3jCRyacBpYyptQTXo6NkUjsEEFbQ73mY=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.threading.tasks.dataflow/10.0.1/system.threading.tasks.dataflow.10.0.1.nupkg"
+    "version": "10.0.8",
+    "hash": "sha256-A8ZxvuZZTAmnRkUVTtSaKPOfntTEuKLK23CeuomYsgE=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.threading.tasks.dataflow/10.0.8/system.threading.tasks.dataflow.10.0.8.nupkg"
   },
   {
     "pname": "System.Threading.Tasks.Extensions",
@@ -763,9 +793,9 @@
   },
   {
     "pname": "System.ValueTuple",
-    "version": "4.6.1",
-    "hash": "sha256-Hb87MPcNdHQRlREDzFEKU8ZqtKN26bjyAiimJmm6LWI=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.valuetuple/4.6.1/system.valuetuple.4.6.1.nupkg"
+    "version": "4.6.2",
+    "hash": "sha256-dv0ONmorkGVf0V1Vewt5UEGXdINYy1eP4xk/bZe92ao=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/45bacae2-5efb-47c8-91e5-8ec20c22b4f8/nuget/v3/flat2/system.valuetuple/4.6.2/system.valuetuple.4.6.2.nupkg"
   },
   {
     "pname": "System.Windows.Extensions",
diff --git a/pkgs/by-name/ro/roslyn-ls/package.nix b/pkgs/by-name/ro/roslyn-ls/package.nix
index f481416c8936..9e51067b2b93 100644
--- a/pkgs/by-name/ro/roslyn-ls/package.nix
+++ b/pkgs/by-name/ro/roslyn-ls/package.nix
@@ -38,18 +38,18 @@ in
 buildDotnetModule (finalAttrs: {
   inherit pname dotnet-sdk dotnet-runtime;
 
-  vsVersion = "2.146.2-prerelease";
+  vsVersion = "2.147.94-prerelease";
   src = fetchFromGitHub {
     owner = "dotnet";
     repo = "roslyn";
     rev = "VSCode-CSharp-${finalAttrs.vsVersion}";
-    hash = "sha256-LYCGG6fwbdywx6opoQHdx2GDZE6M3m5886zqZAHjy0Y=";
+    hash = "sha256-0t0EKs4FlgJ5wpL8+mUf+1hdumC3pHCVFwTOqR3vVZo=";
   };
 
   # versioned independently from vscode-csharp
   # "roslyn" in here:
   # https://github.com/dotnet/vscode-csharp/blob/main/package.json
-  version = "5.10.0-1.26352.10";
+  version = "5.11.0-1.26379.2";
   projectFile = "src/LanguageServer/${project}/${project}.csproj";
   useDotnetFromEnv = true;
   nugetDeps = ./deps.json;
diff --git a/pkgs/by-name/ru/rusty-psn/package.nix b/pkgs/by-name/ru/rusty-psn/package.nix
index 6bb7a8add975..3e2d35c0886e 100644
--- a/pkgs/by-name/ru/rusty-psn/package.nix
+++ b/pkgs/by-name/ru/rusty-psn/package.nix
@@ -24,16 +24,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "rusty-psn";
-  version = "0.5.10";
+  version = "0.6.0";
 
   src = fetchFromGitHub {
     owner = "RainbowCookie32";
     repo = "rusty-psn";
     tag = "v${version}";
-    hash = "sha256-3sy3PBiV7ioRnYwI2vF6lGVj3Q/Ls6GmENyGePCgQ3k=";
+    hash = "sha256-xdhNwKWJ2DjwKAPCeW26Ccl7oCmWdlNoAdZQKcDU8Ew=";
   };
 
-  cargoHash = "sha256-orsCExYx9ZGtda13mmFk7665WFwZ7E7rr5wEcDxc+vY=";
+  cargoHash = "sha256-Kf/+5u1zPLNCFhT+IDvFWnrG4TfcjzJjaTw8w0vyfi0=";
 
   # Tests require network access
   doCheck = false;
diff --git a/pkgs/by-name/sa/satty/package.nix b/pkgs/by-name/sa/satty/package.nix
index 10a039fe384d..3d9b5bf7e359 100644
--- a/pkgs/by-name/sa/satty/package.nix
+++ b/pkgs/by-name/sa/satty/package.nix
@@ -17,16 +17,16 @@
 rustPlatform.buildRustPackage (finalAttrs: {
 
   pname = "satty";
-  version = "0.21.1";
+  version = "0.22.0";
 
   src = fetchFromGitHub {
     owner = "Satty-org";
     repo = "Satty";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-pD91+MbieZ5/YoUR0lcKnJ9bA1fn7I97NbnIwm/kL7E=";
+    hash = "sha256-76J4ZlBKeow2sWs1SeSkE8R2fKRTFD+B+7Vx3nbbQxY=";
   };
 
-  cargoHash = "sha256-Oavfb2Jp9WO0eaT5TqRwSxU3+rm9lBxwuWTWnc2CnZ0=";
+  cargoHash = "sha256-R8I8eZ8vy6w1DGNrkP9Os2tAOIetqXCyn0cxWpk9F+w=";
 
   # Generate shell completions and man file
   buildFeatures = [ "ci-release" ];
diff --git a/pkgs/by-name/sh/shopify-cli/package.nix b/pkgs/by-name/sh/shopify-cli/package.nix
index bfa75b433c8f..830fe89f013b 100644
--- a/pkgs/by-name/sh/shopify-cli/package.nix
+++ b/pkgs/by-name/sh/shopify-cli/package.nix
@@ -19,20 +19,20 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "shopify";
-  version = "4.5.2";
+  version = "4.6.0";
 
   src = fetchFromGitHub {
     owner = "shopify";
     repo = "cli";
     tag = finalAttrs.version;
-    hash = "sha256-nASorXGqT9/qixYDcEznXL6FJJTokhKmw2ShMDKJTjc=";
+    hash = "sha256-iSXONoEcnLvaEGRzsXhyogjOw3jiQ5+JqDyKgplL9zg=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     inherit pnpm;
     fetcherVersion = 3;
-    hash = "sha256-kePjDqONRE0I11bztaH0+uu6t2dUtSD347EIOS5O1CE=";
+    hash = "sha256-091Zp3bzAYdZzOElCz9WqdkuRfz1T6BFBCj4EfegQ4g=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/si/sing-box/package.nix b/pkgs/by-name/si/sing-box/package.nix
index 42960d0db491..638b85e58b4d 100644
--- a/pkgs/by-name/si/sing-box/package.nix
+++ b/pkgs/by-name/si/sing-box/package.nix
@@ -18,7 +18,7 @@ assert lib.assertMsg (
 ) "Dynamic linking to cronet-go is only available on Linux.";
 buildGoModule (finalAttrs: {
   pname = "sing-box";
-  version = "1.13.15";
+  version = "1.13.16";
 
   __structuredAttrs = true;
 
@@ -27,10 +27,10 @@ buildGoModule (finalAttrs: {
     owner = "SagerNet";
     repo = "sing-box";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-YkbF5+smzP+AQ161xvTBO01ZIB3PonHVM0l5DVRSnFs=";
+    hash = "sha256-GAIU0SRvxU92E40zCkMsiSPuIEIUZM5vORN2u2XIhqs=";
   };
 
-  vendorHash = "sha256-HIMKtolVXbmyV1vmXXAt3O/2NTp4HwzhUWChs8I4+cs=";
+  vendorHash = "sha256-ZUEpYfgb/iflImVCdLIgUzfp4QY9ho1gYkIAJV1tXrg=";
 
   tags = [
     "with_gvisor"
@@ -111,6 +111,7 @@ buildGoModule (finalAttrs: {
     maintainers = with lib.maintainers; [
       nickcao
       prince213
+      moraxyc
     ];
     mainProgram = "sing-box";
   };
diff --git a/pkgs/by-name/si/siyuan/package.nix b/pkgs/by-name/si/siyuan/package.nix
index 88adb201f72a..cdf2d7e714ec 100644
--- a/pkgs/by-name/si/siyuan/package.nix
+++ b/pkgs/by-name/si/siyuan/package.nix
@@ -34,20 +34,20 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "siyuan";
-  version = "3.7.1";
+  version = "3.7.3";
 
   src = fetchFromGitHub {
     owner = "siyuan-note";
     repo = "siyuan";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-K31h2noDpTn7vCXj16K2dxRPww5z+HC/nA4Gn5MAVms=";
+    hash = "sha256-7Uoo8vYaci8ROk5pqs14dNrU3q7UsadDXyw1mW8Mx5I=";
   };
 
   kernel = buildGoModule {
     name = "${finalAttrs.pname}-${finalAttrs.version}-kernel";
     inherit (finalAttrs) src;
     sourceRoot = "${finalAttrs.src.name}/kernel";
-    vendorHash = "sha256-fZLVqrWTWUHo6BhixB6+krXaM7WCiZpusHA8T2SicgQ=";
+    vendorHash = "sha256-weg5MRidW8JId13Ug1VaVgaIcJqydGBR/EquFOS3QO4=";
 
     patches = [
       (replaceVars ./set-pandoc-path.patch {
@@ -70,6 +70,9 @@ stdenv.mkDerivation (finalAttrs: {
       "-X 'github.com/siyuan-note/siyuan/kernel/util.Mode=prod'"
     ];
     tags = [ "fts5" ];
+
+    # filepath.ToSlash does not convert Windows path separators on Unix.
+    checkFlags = [ "-skip=^TestSyObjectBase/windows_backslash$" ];
   };
 
   nativeBuildInputs = [
@@ -95,7 +98,7 @@ stdenv.mkDerivation (finalAttrs: {
       ;
     inherit pnpm;
     fetcherVersion = 4;
-    hash = "sha256-1QIGx0Zm6v4FIR1EYgXQzmBMZBa9Bi24vouT1K6v9EQ=";
+    hash = "sha256-i7llORlVU1CCmyVCvJr7xCQffTmbmIA9rT68Raqg5y8=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/app";
diff --git a/pkgs/by-name/sn/sniffnet/package.nix b/pkgs/by-name/sn/sniffnet/package.nix
index cc679143edf3..72cbf58c8be7 100644
--- a/pkgs/by-name/sn/sniffnet/package.nix
+++ b/pkgs/by-name/sn/sniffnet/package.nix
@@ -29,16 +29,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "sniffnet";
-  version = "1.5.0";
+  version = "1.5.1";
 
   src = fetchFromGitHub {
     owner = "gyulyvgc";
     repo = "sniffnet";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ifXccpoyz+NnZDjbRXlVZXfd2TLvOhGVB504hDyIjnE=";
+    hash = "sha256-3XWUT50NCZSzUNldGGVxLA2Tgqc7tyYjtede9yH6ARg=";
   };
 
-  cargoHash = "sha256-Tw32dOzFkO/cOlLdTfHeybhmbidgsnfYMIeHhfrrtVc=";
+  cargoHash = "sha256-VMhlncF3fXWr92OM2Y9EqwMQhJlzzc/5no69+M5hDnU=";
 
   nativeBuildInputs = [ pkg-config ];
 
@@ -64,6 +64,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   checkFlags = [
     "--skip=secondary_threads::check_updates::tests::fetch_latest_release_from_github"
     "--skip=utils::check_updates::tests::fetch_latest_release_from_github"
+    "--skip=networking::types::latency::tests::test_measures_ipv4_loopback_latency"
+    "--skip=networking::types::latency::tests::test_measures_ipv6_loopback_latency"
   ];
 
   postInstall = ''
diff --git a/pkgs/by-name/so/soapysdr/package.nix b/pkgs/by-name/so/soapysdr/package.nix
index cabb13b6f0f2..dd4b9be28947 100644
--- a/pkgs/by-name/so/soapysdr/package.nix
+++ b/pkgs/by-name/so/soapysdr/package.nix
@@ -18,15 +18,13 @@
 stdenv.mkDerivation (finalAttrs: {
   pname = "soapysdr";
   # Don't forget to change passthru.abiVersion
-  version = "0.8.1-unstable-2025-10-05-03";
+  version = "0.8.1-unstable-2026-01-02";
 
   src = fetchFromGitHub {
     owner = "pothosware";
     repo = "SoapySDR";
-
-    # update to include latest patch for newer cmake support
-    rev = "1667b4e6301d7ad47b340dcdcd6e9969bf57d843";
-    hash = "sha256-UCpYBUb2k1bHy1z2Mvmv+1ZX1BloSsPrTydFV3Ga3Os=";
+    rev = "1551ea0d39ce546b32a15808b9b1241018a89fc8";
+    hash = "sha256-k1ocvnkgmucewWeUgj7hY8hj9gOBl3G2iH9KM2h/Sck=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/sp/sparkle/package.nix b/pkgs/by-name/sp/sparkle/package.nix
index 15ea2d2c21c8..8e0839c0151b 100644
--- a/pkgs/by-name/sp/sparkle/package.nix
+++ b/pkgs/by-name/sp/sparkle/package.nix
@@ -41,20 +41,20 @@ in
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "sparkle";
-  version = "1.26.6";
+  version = "1.26.7";
 
   src = fetchFromGitHub {
     owner = "xishang0128";
     repo = "sparkle";
     tag = finalAttrs.version;
-    hash = "sha256-IFK7rhT3i+Qct0FIEYFbgQpJ5cjS7JMKd2tmOq5ZSNg=";
+    hash = "sha256-R9FVlt0rLxgIpeIJbwoIIYPmpP3LKoRWyt7u4ohbN4E=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     inherit pnpm;
     fetcherVersion = 4;
-    hash = "sha256-+OHO0Rvp33QUDRFjKwDpaIzdciwbsjEwoQxmqd4TouA=";
+    hash = "sha256-hSozWInESlJhEjNKbVLgRJG+G7dFgFb+834rugHh05c=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/st/stackit-cli/package.nix b/pkgs/by-name/st/stackit-cli/package.nix
index ef9d3082fabf..114bafb0b103 100644
--- a/pkgs/by-name/st/stackit-cli/package.nix
+++ b/pkgs/by-name/st/stackit-cli/package.nix
@@ -12,16 +12,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "stackit-cli";
-  version = "0.67.0";
+  version = "0.68.0";
 
   src = fetchFromGitHub {
     owner = "stackitcloud";
     repo = "stackit-cli";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-8fwTJfvsK9cYlu+m+BtcT8M0FPOfyUqcHFHsnz/qBQM=";
+    hash = "sha256-ifi+lUXZ0pn5GdjdeyjRD1Xixe/wZGlUp7gKvH6udng=";
   };
 
-  vendorHash = "sha256-z7y7N3/DilvNa7eo0xP33fUIYWXqYdpLgkcqub3ezYU=";
+  vendorHash = "sha256-hAgtOsfHh5QtbWbItHAckuw7wP+aeAAL5JDYZXokgJ0=";
 
   subPackages = [ "." ];
 
diff --git a/pkgs/by-name/st/starship/package.nix b/pkgs/by-name/st/starship/package.nix
index d24d03b9a61d..f9696fd123c4 100644
--- a/pkgs/by-name/st/starship/package.nix
+++ b/pkgs/by-name/st/starship/package.nix
@@ -34,6 +34,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     presetdir=$out/share/starship/presets/
     mkdir -p $presetdir
     cp docs/public/presets/toml/*.toml $presetdir
+    install -Dm644 .github/config-schema.json $out/share/starship/config-schema.json
   ''
   + lib.optionalString (stdenv.hostPlatform.emulatorAvailable buildPackages) (
     let
@@ -55,8 +56,13 @@ rustPlatform.buildRustPackage (finalAttrs: {
     writableTmpDirAsHomeHook
   ];
 
-  passthru.tests = {
-    inherit (nixosTests) starship;
+  passthru = {
+    jsonschema = {
+      config = "${finalAttrs.finalPackage}/share/starship/config-schema.json";
+    };
+    tests = {
+      inherit (nixosTests) starship;
+    };
   };
 
   meta = {
diff --git a/pkgs/by-name/st/streamlink/package.nix b/pkgs/by-name/st/streamlink/package.nix
index ec665ae01763..23e22581b3d9 100644
--- a/pkgs/by-name/st/streamlink/package.nix
+++ b/pkgs/by-name/st/streamlink/package.nix
@@ -7,29 +7,22 @@
   extras ? [
     "decompress"
   ],
-  fetchpatch2,
 }:
 
 python3Packages.buildPythonApplication rec {
   pname = "streamlink";
-  version = "8.4.0";
+  version = "8.5.0";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-9HfpSTM2vLfDorEO6nKmCumn9J6WitoNTQG/946sRLs=";
+    hash = "sha256-gIJwNzTfe+BzfE2b4d6/VyquZmnP5cWJFEGnoWNv8yA=";
   };
 
   patches = [
     (replaceVars ./ffmpeg-path.patch {
       ffmpeg = lib.getExe ffmpeg;
     })
-    # remove when bumping to >8.4.0
-    (fetchpatch2 {
-      name = "fix-read-timeout-test.patch";
-      url = "https://github.com/streamlink/streamlink/commit/a1875a2c85cef47ddf6b1375c3651d52c8e799a1.patch?full_index=1";
-      hash = "sha256-9C4NedVyuk0ed3JvpKtvxei3Wo+r4SPlQXbBpoRXZ4k=";
-    })
   ];
 
   nativeBuildInputs = with python3Packages; [
diff --git a/pkgs/by-name/su/suil/package.nix b/pkgs/by-name/su/suil/package.nix
index 9a234b973c1b..e884f08fd9cb 100644
--- a/pkgs/by-name/su/suil/package.nix
+++ b/pkgs/by-name/su/suil/package.nix
@@ -16,8 +16,6 @@
   lv2,
 
   # options
-  withGtk2 ? false,
-  gtk2,
   withGtk3 ? true,
   gtk3,
   withQt5 ? true,
@@ -51,7 +49,7 @@ stdenv.mkDerivation (finalAttrs: {
   ];
 
   mesonFlags = [
-    (mesonEnable "gtk2" withGtk2)
+    (mesonEnable "gtk2" false)
     (mesonEnable "gtk3" withGtk3)
     (mesonEnable "qt5" withQt5)
     (mesonEnable "x11" withX11)
@@ -60,7 +58,6 @@ stdenv.mkDerivation (finalAttrs: {
   buildInputs = [
     lv2
   ]
-  ++ lib.optionals withGtk2 [ gtk2 ]
   ++ lib.optionals withGtk3 [ gtk3 ]
   ++ lib.optionals withQt5 (
     with qt5;
diff --git a/pkgs/by-name/su/supabase-cli/package.nix b/pkgs/by-name/su/supabase-cli/package.nix
index 851827cff5e7..9cf8e6b76ef4 100644
--- a/pkgs/by-name/su/supabase-cli/package.nix
+++ b/pkgs/by-name/su/supabase-cli/package.nix
@@ -9,7 +9,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "supabase-cli";
-  version = "2.109.1";
+  version = "2.111.0";
 
   __structuredAttrs = true;
 
@@ -17,13 +17,13 @@ buildGoModule (finalAttrs: {
     owner = "supabase";
     repo = "cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-wTqvbcYC2QeeUXUzkmvUin0oXulmhMXIiyNCXaWqPSQ=";
+    hash = "sha256-uZXSlrzNtX7pdT4ppWKQ8rddiD6TPMTi9nBUWtUH5mM=";
   };
 
   # Supabase is in the process of porting the CLI to TS, for now we continue with the Go cli.
   sourceRoot = "${finalAttrs.src.name}/apps/cli-go";
 
-  vendorHash = "sha256-qfQgcdRv4GHmZWQWth3Hqknlr9yCjRkZFO0p2jeZG0A=";
+  vendorHash = "sha256-CkDH+8SsReL8+XtCPW0M2Ohd2HJJgOLzCU0TdZhTqmI=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/sv/svelte-check/package.nix b/pkgs/by-name/sv/svelte-check/package.nix
index c2db29dcf953..e7f8db77482c 100644
--- a/pkgs/by-name/sv/svelte-check/package.nix
+++ b/pkgs/by-name/sv/svelte-check/package.nix
@@ -14,13 +14,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "svelte-check";
-  version = "4.3.1";
+  version = "4.7.4";
 
   src = fetchFromGitHub {
     owner = "sveltejs";
     repo = "language-tools";
-    tag = "svelte-check-${finalAttrs.version}";
-    hash = "sha256-+KDl7tTyXo6QMQpMGA4hSChDaPrfqfVKJXGunTlo9Rg=";
+    tag = "svelte-check@${finalAttrs.version}";
+    hash = "sha256-fjJp+4XAwUPZV8kVvgHnb1LVJbamzrboS3Taax1Vwvs=";
   };
 
   pnpmWorkspaces = [ "svelte-check..." ];
@@ -34,7 +34,7 @@ stdenv.mkDerivation (finalAttrs: {
       ;
     inherit pnpm;
     fetcherVersion = 3;
-    hash = "sha256-43AIkVzpcq/Y+QO2k7pkr6CN340idXJEpie0gVdxra8=";
+    hash = "sha256-lzphyVC1fpT5EFIuVz7ZMAiSLeyXhjSuOpAqSklh6QU=";
   };
 
   nativeBuildInputs = [
@@ -72,7 +72,7 @@ stdenv.mkDerivation (finalAttrs: {
     extraArgs = [
       "--use-github-releases"
       "--version-regex"
-      "svelte-check-(.*)"
+      "svelte-check@(.*)"
     ];
   };
 
diff --git a/pkgs/by-name/sy/systemd-manager-tui/package.nix b/pkgs/by-name/sy/systemd-manager-tui/package.nix
index 1c65394dcd13..3ef1a4a86123 100644
--- a/pkgs/by-name/sy/systemd-manager-tui/package.nix
+++ b/pkgs/by-name/sy/systemd-manager-tui/package.nix
@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "systemd-manager-tui";
-  version = "1.2.4";
+  version = "1.2.5";
 
   src = fetchFromGitHub {
     owner = "Matheus-git";
     repo = "systemd-manager-tui";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-cai+5DugKSupFZASNg4QelB3sPi4MvTy5YkA0hB13wo=";
+    hash = "sha256-Gu6MP5noy0FjRaDQ65KRAV49GObZF3Q9WGgyNBgLHPE=";
   };
 
-  cargoHash = "sha256-y3RoekDMK+COaC0zuSTD6l/Ugl81qLG/3VSWYTDRA5o=";
+  cargoHash = "sha256-qN97kNdQrKzKSRBmpjv+8tFm9oTMEGNXOTh7YwAfHQo=";
 
   meta = {
     homepage = "https://github.com/Matheus-git/systemd-manager-tui";
diff --git a/pkgs/by-name/sy/systemdgenie/package.nix b/pkgs/by-name/sy/systemdgenie/package.nix
index 35fa333eb6c3..7db76624565f 100644
--- a/pkgs/by-name/sy/systemdgenie/package.nix
+++ b/pkgs/by-name/sy/systemdgenie/package.nix
@@ -10,14 +10,14 @@
 
 stdenv.mkDerivation {
   pname = "systemdgenie";
-  version = "0.99.0-unstable-2026-07-03";
+  version = "0.99.0-unstable-2026-07-27";
 
   src = fetchFromGitLab {
     domain = "invent.kde.org";
     repo = "SystemdGenie";
     owner = "system";
-    rev = "5e30259b7a234291bb0e337c7c9e5b4892304c99";
-    hash = "sha256-C6CwoHYqc3GS5xvIJA+Jv2cbe7iw7vqdxwh9Sh67ucw=";
+    rev = "4373b42ce49950cb0c1e541e0068c20c7a6fcd7d";
+    hash = "sha256-Ly8g2pkl24C8NE49A4Vy7KQT4ayy56FYiMRI8ahfx4c=";
   };
 
   strictDeps = true;
diff --git a/pkgs/by-name/ta/tabbyapi/package.nix b/pkgs/by-name/ta/tabbyapi/package.nix
index 2ecf9cb6b700..e6eed91c61ff 100644
--- a/pkgs/by-name/ta/tabbyapi/package.nix
+++ b/pkgs/by-name/ta/tabbyapi/package.nix
@@ -7,14 +7,14 @@
 }:
 python3Packages.buildPythonApplication {
   pname = "tabbyapi";
-  version = "0-unstable-2026-07-18";
+  version = "0-unstable-2026-07-31";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "theroyallab";
     repo = "tabbyAPI";
-    rev = "0158fb48d76546a6475d1d63f6cd5b90932d1d11";
-    hash = "sha256-Bkpx3MyZg7Np5zXAsq8mgxdAFsHUZhy2NZ93XSLbJgk=";
+    rev = "29680f496b57e3ed1a496c580677d2d67ac729b8";
+    hash = "sha256-eB8Q4iVlNCrgHHWutuhxzD+bQfC5Yx3z2rSCCSFsrL4=";
   };
 
   build-system = with python3Packages; [
diff --git a/pkgs/by-name/tc/tclint/package.nix b/pkgs/by-name/tc/tclint/package.nix
index b602814a48fe..e8a00d71aa9a 100644
--- a/pkgs/by-name/tc/tclint/package.nix
+++ b/pkgs/by-name/tc/tclint/package.nix
@@ -16,14 +16,15 @@ let
 in
 pythonPackages.buildPythonApplication (finalAttrs: {
   pname = "tclint";
-  version = "0.8.0";
+  version = "0.9.0";
   pyproject = true;
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "nmoroze";
     repo = "tclint";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-HEmNdDq8xeGHCLJRvGGa13KaX7iLyyNkv3nYcJsZjrw=";
+    hash = "sha256-+ev/zqZwgW80XmVs8T+Ji37aJMOpr/1QyLAeHJES13Y=";
   };
 
   build-system = with pythonPackages; [
@@ -53,7 +54,6 @@ pythonPackages.buildPythonApplication (finalAttrs: {
     pythonPackages.pytestCheckHook
     versionCheckHook
   ];
-  versionCheckProgramArg = "--version";
 
   disabledTestPaths = [
     # Fails to find lsprotocol in the sandbox, even when added to nativeCheckInputs
diff --git a/pkgs/by-name/te/teams-for-linux/package.nix b/pkgs/by-name/te/teams-for-linux/package.nix
index f00639492b77..4a83647f5f47 100644
--- a/pkgs/by-name/te/teams-for-linux/package.nix
+++ b/pkgs/by-name/te/teams-for-linux/package.nix
@@ -19,16 +19,16 @@ let
 in
 buildNpmPackage rec {
   pname = "teams-for-linux";
-  version = "2.13.0";
+  version = "2.14.1";
 
   src = fetchFromGitHub {
     owner = "IsmaelMartinez";
     repo = "teams-for-linux";
     tag = "v${version}";
-    hash = "sha256-30jt23bsJ1XE2gclRg06AM+mk1IrerNnkbWVDRfjqHo=";
+    hash = "sha256-0urL/M7XBBPB+RiLglUx0CQUii+Fji1dXurha/2URug=";
   };
 
-  npmDepsHash = "sha256-pz2htdFmczmZJtcrpI/X0nUUF++x2vtcYZiTWjEYglo=";
+  npmDepsHash = "sha256-F8FxTkVDfCLp0ukNm9/ixWtglYRiJt9+va6qJdB06qI=";
 
   nativeBuildInputs = [
     makeWrapper
diff --git a/pkgs/by-name/th/thc-hydra/package.nix b/pkgs/by-name/th/thc-hydra/package.nix
index 4e8abd6bb1ba..80b92eb23e03 100644
--- a/pkgs/by-name/th/thc-hydra/package.nix
+++ b/pkgs/by-name/th/thc-hydra/package.nix
@@ -11,10 +11,6 @@
   libmysqlclient,
   libpq,
   samba,
-  withGUI ? false,
-  makeWrapper,
-  pkg-config,
-  gtk2,
 }:
 
 stdenv.mkDerivation rec {
@@ -43,11 +39,6 @@ stdenv.mkDerivation rec {
         --replace-fail "-lcurses" "-lncurses"
     '';
 
-  nativeBuildInputs = lib.optionals withGUI [
-    pkg-config
-    makeWrapper
-  ];
-
   buildInputs = [
     zlib
     openssl
@@ -58,18 +49,12 @@ stdenv.mkDerivation rec {
     libmysqlclient
     libpq
     samba
-  ]
-  ++ lib.optional withGUI gtk2;
+  ];
 
   enableParallelBuilding = true;
 
   env.DATADIR = "/share/${pname}";
 
-  postInstall = lib.optionalString withGUI ''
-    wrapProgram $out/bin/xhydra \
-      --add-flags --hydra-path --add-flags "$out/bin/hydra"
-  '';
-
   meta = {
     description = "Very fast network logon cracker which support many different services";
     homepage = "https://github.com/vanhauser-thc/thc-hydra"; # https://www.thc.org/
diff --git a/pkgs/by-name/ti/timewarrior/package.nix b/pkgs/by-name/ti/timewarrior/package.nix
index 8ff3c671ffba..dd6778547186 100644
--- a/pkgs/by-name/ti/timewarrior/package.nix
+++ b/pkgs/by-name/ti/timewarrior/package.nix
@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "timewarrior";
-  version = "1.9.1";
+  version = "1.10.0";
 
   src = fetchFromGitHub {
     owner = "GothenburgBitFactory";
     repo = "timewarrior";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-wwuyXcLCrNvpDIQvoBt/OQlwoTMhPzGZ+WrZdTo6IPo=";
+    hash = "sha256-kJdPnjQ2ZXLx5/o6CmKnlrxadhYMpQlbkJv8tHUVcCM=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/by-name/tl/tlsx/package.nix b/pkgs/by-name/tl/tlsx/package.nix
index 3101a77a19af..ac4a924dd8f7 100644
--- a/pkgs/by-name/tl/tlsx/package.nix
+++ b/pkgs/by-name/tl/tlsx/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "tlsx";
-  version = "1.2.2";
+  version = "1.3.0";
 
   src = fetchFromGitHub {
     owner = "projectdiscovery";
     repo = "tlsx";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kS1X14+LJHar0p2nH+EUqtqVrWRG8yMXVaINNkAwhd8=";
+    hash = "sha256-3klBmWQfp8PLF4/8bZjHCk+4hiUXX3E+izIfDG2FMfU=";
   };
 
-  vendorHash = "sha256-gWDSBjrTsRShihc/jun5lL1cauJU45qaND0IL17pqn8=";
+  vendorHash = "sha256-5zqiA4Aoc5qjxXf8q+IzJqycSv49hJfynAVQ5Yomrro=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/tm/tmuxp/package.nix b/pkgs/by-name/tm/tmuxp/package.nix
index 8456eb09530b..2908b7f98281 100644
--- a/pkgs/by-name/tm/tmuxp/package.nix
+++ b/pkgs/by-name/tm/tmuxp/package.nix
@@ -34,6 +34,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
   postInstall = ''
     installShellCompletion --cmd tmuxp \
       --bash <(shtab --shell=bash -u tmuxp.cli.create_parser) \
+      --fish <(shtab --shell=fish -u tmuxp.cli.create_parser) \
       --zsh <(shtab --shell=zsh -u tmuxp.cli.create_parser)
   '';
 
diff --git a/pkgs/by-name/tr/trivy/package.nix b/pkgs/by-name/tr/trivy/package.nix
index dce19339476e..f745f30f2f42 100644
--- a/pkgs/by-name/tr/trivy/package.nix
+++ b/pkgs/by-name/tr/trivy/package.nix
@@ -10,19 +10,19 @@
 
 buildGoModule (finalAttrs: {
   pname = "trivy";
-  version = "0.72.0";
+  version = "0.73.0";
 
   src = fetchFromGitHub {
     owner = "aquasecurity";
     repo = "trivy";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BfYgHa5Qv5rwJSRLdaDeCU4pz1jrUG72QzsJ98F5Is8=";
+    hash = "sha256-+iJb/Eg97kjNzg6OTuEWXAPJ/32FpfVU2ED4/6A4U+I=";
   };
 
   # Hash mismatch on across Linux and Darwin
   proxyVendor = true;
 
-  vendorHash = "sha256-IeX4c34/AUt9MZCFHVs43+9lmDX2gYJhPAi7/lUeWgI=";
+  vendorHash = "sha256-0upMQ2fKKfaHAL/SVyzPpdRoBwMNS9PdHPHGAmEm148=";
 
   subPackages = [ "cmd/trivy" ];
 
diff --git a/pkgs/by-name/tr/trusttunnel-endpoint/boring-no-secp224r1.patch b/pkgs/by-name/tr/trusttunnel-endpoint/boring-no-secp224r1.patch
new file mode 100644
index 000000000000..96f0886f8930
--- /dev/null
+++ b/pkgs/by-name/tr/trusttunnel-endpoint/boring-no-secp224r1.patch
@@ -0,0 +1,47 @@
+--- a/src/nid.rs
++++ b/src/nid.rs
+@@ -173,7 +173,6 @@ impl Nid {
+     pub const SECP160R2: Nid = Nid(ffi::NID_secp160r2);
+     pub const SECP192K1: Nid = Nid(ffi::NID_secp192k1);
+     pub const SECP224K1: Nid = Nid(ffi::NID_secp224k1);
+-    pub const SECP224R1: Nid = Nid(ffi::NID_secp224r1);
+     pub const SECP256K1: Nid = Nid(ffi::NID_secp256k1);
+     pub const SECP384R1: Nid = Nid(ffi::NID_secp384r1);
+     pub const SECP521R1: Nid = Nid(ffi::NID_secp521r1);
+--- a/src/ssl/mod.rs
++++ b/src/ssl/mod.rs
+@@ -708,8 +708,6 @@ pub struct SslCurveNid(c_int);
+ pub struct SslCurve(c_int);
+
+ impl SslCurve {
+-    pub const SECP224R1: SslCurve = SslCurve(ffi::SSL_CURVE_SECP224R1 as _);
+-
+     pub const SECP256R1: SslCurve = SslCurve(ffi::SSL_CURVE_SECP256R1 as _);
+
+     pub const SECP384R1: SslCurve = SslCurve(ffi::SSL_CURVE_SECP384R1 as _);
+@@ -774,7 +772,6 @@ impl SslCurve {
+     #[allow(dead_code)]
+     pub fn nid(&self) -> Option<SslCurveNid> {
+         match self.0 {
+-            ffi::SSL_CURVE_SECP224R1 => Some(ffi::NID_secp224r1),
+             ffi::SSL_CURVE_SECP256R1 => Some(ffi::NID_X9_62_prime256v1),
+             ffi::SSL_CURVE_SECP384R1 => Some(ffi::NID_secp384r1),
+             ffi::SSL_CURVE_SECP521R1 => Some(ffi::NID_secp521r1),
+--- a/src/ssl/test/mod.rs
++++ b/src/ssl/test/mod.rs
+@@ -989,7 +989,6 @@ fn get_curve() {
+
+ #[test]
+ fn get_curve_name() {
+-    assert_eq!(SslCurve::SECP224R1.name(), Some("P-224"));
+     assert_eq!(SslCurve::SECP256R1.name(), Some("P-256"));
+     assert_eq!(SslCurve::SECP384R1.name(), Some("P-384"));
+     assert_eq!(SslCurve::SECP521R1.name(), Some("P-521"));
+@@ -1001,7 +1000,6 @@ fn get_curve_name() {
+ fn set_curves() {
+     let mut ctx = SslContext::builder(SslMethod::tls()).unwrap();
+     ctx.set_curves(&[
+-        SslCurve::SECP224R1,
+         SslCurve::SECP256R1,
+         SslCurve::SECP384R1,
+         SslCurve::X25519,
diff --git a/pkgs/by-name/tr/trusttunnel-endpoint/package.nix b/pkgs/by-name/tr/trusttunnel-endpoint/package.nix
index be5c3aee93c3..49d321b02640 100644
--- a/pkgs/by-name/tr/trusttunnel-endpoint/package.nix
+++ b/pkgs/by-name/tr/trusttunnel-endpoint/package.nix
@@ -26,6 +26,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
     substituteInPlace $cargoDepsCopy/*/boring-sys-*/build/main.rs $cargoDepsCopy/*/quiche-*/src/build.rs \
       --replace-fail "cargo:rustc-link-lib=static=crypto" "cargo:rustc-link-lib=dylib=crypto" \
       --replace-fail "cargo:rustc-link-lib=static=ssl" "cargo:rustc-link-lib=dylib=ssl"
+
+    # remove reference to deprecated boringssl API
+    patch -d $cargoDepsCopy/*/boring-4.19.0/ -p1 -i ${./boring-no-secp224r1.patch}
   '';
 
   env = {
diff --git a/pkgs/by-name/ts/tsid/package.nix b/pkgs/by-name/ts/tsid/package.nix
index ec43fc9c74f2..a9167ce1a6d5 100644
--- a/pkgs/by-name/ts/tsid/package.nix
+++ b/pkgs/by-name/ts/tsid/package.nix
@@ -1,11 +1,9 @@
 {
-  cmake,
-  doxygen,
   eiquadprog,
   fetchFromGitHub,
+  jrl-cmakemodules,
   lib,
   osqp-eigen,
-  pkg-config,
   pinocchio,
   proxsuite,
   stdenv,
@@ -22,7 +20,7 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-f/SecQfEmrlelVR5584KIHFwwrp5Cy2aBMKI/rxuPmc=";
   };
 
-  cmakeFlags = [
+  cmakeFlags = jrl-cmakemodules.docsCmakeFlags ++ [
     (lib.cmakeBool "BUILD_PYTHON_INTERFACE" false)
     (lib.cmakeBool "BUILD_WITH_OSQP" true)
     (lib.cmakeBool "BUILD_WITH_PROXQP" true)
@@ -34,10 +32,10 @@ stdenv.mkDerivation (finalAttrs: {
     "doc"
   ];
 
-  nativeBuildInputs = [
-    doxygen
-    cmake
-    pkg-config
+  nativeBuildInputs = jrl-cmakemodules.docsNativeBuildInputs;
+
+  buildInputs = [
+    jrl-cmakemodules
   ];
 
   propagatedBuildInputs = [
diff --git a/pkgs/by-name/tu/tuicr/package.nix b/pkgs/by-name/tu/tuicr/package.nix
index 2209fb92bce2..4901d33ee75b 100644
--- a/pkgs/by-name/tu/tuicr/package.nix
+++ b/pkgs/by-name/tu/tuicr/package.nix
@@ -2,14 +2,14 @@
   lib,
   rustPlatform,
   fetchFromGitHub,
-  openssl,
-  git,
+  gitMinimal,
+  versionCheckHook,
   nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "tuicr";
-  version = "0.19.1";
+  version = "0.20.0";
 
   __structuredAttrs = true;
 
@@ -17,26 +17,33 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "agavra";
     repo = "tuicr";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-uLtwpieKBTbLLDmgE4LLNljvv69i0cBRvU1WEgy09Xo=";
+    hash = "sha256-ByeWD4mC1DiH6L971mC7Qv6zUVmaf2lneewK2ZWXxg8=";
   };
 
-  cargoHash = "sha256-jEPgXXlqTgVX+GutQX8JCwtLS0J3cx7RV76NdM5m6QE=";
+  cargoHash = "sha256-MVDq+78HIwjqQiO7R/ZAXd16Bye0fktxbiRIzEOH7vQ=";
 
   strictDeps = true;
 
-  nativeCheckInputs = [ git ];
+  nativeCheckInputs = [
+    gitMinimal
+  ];
 
   checkFlags = [
     # expects to be run inside the upstream git repository
     "--skip=should_return_no_changes_for_clean_repo"
   ];
 
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  doInstallCheck = true;
+
   passthru.updateScript = nix-update-script { };
 
   meta = {
     description = "Review AI-generated diffs like a GitHub pull request, right from your terminal";
     homepage = "https://tuicr.dev";
-    changelog = "https://github.com/agavra/tuicr/blob/v${finalAttrs.version}/CHANGELOG.md";
+    changelog = "https://github.com/agavra/tuicr/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ Br1ght0ne ];
     mainProgram = "tuicr";
diff --git a/pkgs/by-name/ty/typora/package.nix b/pkgs/by-name/ty/typora/package.nix
index 1d41a550e53f..7226d9f1aef3 100644
--- a/pkgs/by-name/ty/typora/package.nix
+++ b/pkgs/by-name/ty/typora/package.nix
@@ -20,7 +20,7 @@
 
 let
   pname = "typora";
-  version = "1.13.6";
+  version = "1.14.8";
 
   passthru = {
     sources = {
@@ -29,21 +29,21 @@ let
           "https://download.typora.io/linux/typora_${version}_amd64.deb"
           "https://downloads.typoraio.cn/linux/typora_${version}_amd64.deb"
         ];
-        hash = "sha256-EwVqMinvC26R5ULDGiiONwS3sH3GBJ/sPr2pnqfQR5s=";
+        hash = "sha256-mfnGSAlWeLq7bas6SQKgWLLJXY1xM9CIA+iIf464z0U=";
       };
       aarch64-linux = fetchurl {
         urls = [
           "https://download.typora.io/linux/typora_${version}_arm64.deb"
           "https://downloads.typoraio.cn/linux/typora_${version}_arm64.deb"
         ];
-        hash = "sha256-3/eS9xAC7+V55grhHPLU/9+JefkXgIyKlEh3vRkqZUo=";
+        hash = "sha256-FsV0u9CXf6FdEeKqJZlpNjvGOv1pDNYD3J4neKpD0pw=";
       };
       aarch64-darwin = fetchurl {
         urls = [
           "https://download.typora.io/mac/Typora-${version}.dmg"
           "https://downloads.typoraio.cn/mac/Typora-${version}.dmg"
         ];
-        hash = "sha256-kXnzhuu3ItF9mV0x+v7+hbYNCOo1DAfIzYMHwAL+LHM=";
+        hash = "sha256-XVXfmKTsKuougrBaecJWatP4g93bl0p8xEUzbjf4374=";
       };
     };
     updateScript = ./update.sh;
diff --git a/pkgs/by-name/tz/tzf-rs/package.nix b/pkgs/by-name/tz/tzf-rs/package.nix
index a18cdfcb2967..f1d52f57ffb7 100644
--- a/pkgs/by-name/tz/tzf-rs/package.nix
+++ b/pkgs/by-name/tz/tzf-rs/package.nix
@@ -6,7 +6,7 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "tzf-rs";
-  version = "1.3.6";
+  version = "1.3.7";
 
   __structuredAttrs = true;
 
@@ -14,7 +14,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "ringsaturn";
     repo = "tzf-rs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-rvnykaYvQ992ehVwVds9UtTH9b4iydxac1JtNfKmYv0=";
+    hash = "sha256-YFDoNlBLeFqv2aGa4Wbd9CwDAz6FOd+8OjSksGzzzlI=";
   };
 
   buildFeatures = [
@@ -22,7 +22,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "export-geojson"
   ];
 
-  cargoHash = "sha256-Pm/89K4RKdjxT/LKfJzYlhTOqz40sXo8PMj7q1FHj3M=";
+  cargoHash = "sha256-FehvfC5cvmTjMqUR0nTkcUDC/IK+e5S/snKMI9OBJaM=";
 
   passthru.updateScript = nix-update-script { };
 
diff --git a/pkgs/by-name/ui/uiua/unstable.nix b/pkgs/by-name/ui/uiua/unstable.nix
index 53444c259903..bddbdc88ef0a 100644
--- a/pkgs/by-name/ui/uiua/unstable.nix
+++ b/pkgs/by-name/ui/uiua/unstable.nix
@@ -1,8 +1,8 @@
 rec {
-  version = "0.19.0-dev.4";
+  version = "0.19.0-rc.1";
   tag = version;
-  hash = "sha256-Df/d6dCYXRG8uWVTpLR3I8llS1ujT3QFnx5TCZSxf+0=";
-  cargoHash = "sha256-cXD780n7qI8baDYyOdJvFBvXV2qCTiutgLc19+ewHnk=";
+  hash = "sha256-xN154QH0CxPaoAN8oa5jj3G/wBRQgdBmYYnv0qMjShs=";
+  cargoHash = "sha256-lC3hm6cdd7IyjjsGvXX39JAqVfA6SEkV0kEnXL83sC4=";
   updateScript = ./update-unstable.sh;
   patches = [ ./0001-no-network-test.patch ];
 }
diff --git a/pkgs/by-name/up/uptime-kuma/package.nix b/pkgs/by-name/up/uptime-kuma/package.nix
index f4317ee785f6..b13caedcc4dc 100644
--- a/pkgs/by-name/up/uptime-kuma/package.nix
+++ b/pkgs/by-name/up/uptime-kuma/package.nix
@@ -9,16 +9,16 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "uptime-kuma";
-  version = "2.4.0";
+  version = "2.5.0";
 
   src = fetchFromGitHub {
     owner = "louislam";
     repo = "uptime-kuma";
     tag = finalAttrs.version;
-    hash = "sha256-iqkf9/UAQOnSA+nncK/fmjbqZpIQeUmigI/78m5qKrM=";
+    hash = "sha256-C9XBPhCQNU5y2C9svsieiC0FTMdW9sJQI2OeiCjqte8=";
   };
 
-  npmDepsHash = "sha256-chvykBfnARLto+Il9gumm6UTRSTPPBjg5pj4yGFiOcg=";
+  npmDepsHash = "sha256-qe8qK0bWYFyzClrMNAXdxuqrBIn14Xf3oN40ch1cqnY=";
 
   patches = [
     # Fixes the permissions of the database being not set correctly
diff --git a/pkgs/by-name/va/vale/styles.nix b/pkgs/by-name/va/vale/styles.nix
index 6b89c5cc517c..5099b2950695 100644
--- a/pkgs/by-name/va/vale/styles.nix
+++ b/pkgs/by-name/va/vale/styles.nix
@@ -94,12 +94,12 @@ in
 
   microsoft = buildStyle rec {
     name = "Microsoft";
-    version = "0.14.2";
+    version = "0.15.0";
     src = fetchFromGitHub {
       owner = "errata-ai";
       repo = "Microsoft";
       rev = "v${version}";
-      hash = "sha256-Sie4bBeKPOFOJhgd+mLbiz4vG+xpKL0LnwnRQHzOw+Q=";
+      hash = "sha256-S3FPe6XR6DRjJ6Cn/Jcy211MV9KWXJvZ02tpMHjwlOY=";
     };
     meta = {
       description = "Vale-compatible implementation of the Microsoft Writing Style Guide";
diff --git a/pkgs/by-name/vi/vi-mongo/package.nix b/pkgs/by-name/vi/vi-mongo/package.nix
index be406acf0858..c2505dc11158 100644
--- a/pkgs/by-name/vi/vi-mongo/package.nix
+++ b/pkgs/by-name/vi/vi-mongo/package.nix
@@ -9,13 +9,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "vi-mongo";
-  version = "0.2.3";
+  version = "0.3.0";
 
   src = fetchFromGitHub {
     owner = "kopecmaciej";
     repo = "vi-mongo";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-wPijV+5wTZWG60E2Tdp+mj75eh8go6JVZF2JTcp1Ais=";
+    hash = "sha256-7fBD5pstRNcRbd3KAKmHyLmwKJa3mp++LzFrYw4e1Ew=";
   };
 
   vendorHash = "sha256-CuFoH6crS6BOsSj2hNGw7loi4RixHbyJGySfxglUUmg=";
diff --git a/pkgs/by-name/vi/vips/package.nix b/pkgs/by-name/vi/vips/package.nix
index b8416afee457..b8ebc992f44a 100644
--- a/pkgs/by-name/vi/vips/package.nix
+++ b/pkgs/by-name/vi/vips/package.nix
@@ -58,7 +58,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "vips";
-  version = "8.18.3";
+  version = "8.18.4";
 
   outputs = [
     "bin"
@@ -72,7 +72,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "libvips";
     repo = "libvips";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-P8qjbCcpWNgKthZrXd+GykfPoU2x6avMNoYX1I+YE+k=";
+    hash = "sha256-qSXNXqNXZZFLFOIn24FLB8LNS7JiBdxFI2mRu0oICHM=";
     # Remove unicode file names which leads to different checksums on HFS+
     # vs. other filesystems because of unicode normalisation.
     postFetch = ''
diff --git a/pkgs/by-name/vi/virtnbdbackup/package.nix b/pkgs/by-name/vi/virtnbdbackup/package.nix
index 6b3797b9ddbe..29a0180f68fe 100644
--- a/pkgs/by-name/vi/virtnbdbackup/package.nix
+++ b/pkgs/by-name/vi/virtnbdbackup/package.nix
@@ -7,14 +7,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "virtnbdbackup";
-  version = "2.47";
+  version = "2.48";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "abbbi";
     repo = "virtnbdbackup";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-YcSYuXL7jZn2g4Uluw35ID/1EqJCs8M2M+2dYywupjk=";
+    hash = "sha256-qbuTyu3j9775s0VmL+RJLEVYAd2vNqjhETJc2idZ45M=";
   };
 
   build-system = with python3Packages; [
diff --git a/pkgs/by-name/vi/vivaldi/package.nix b/pkgs/by-name/vi/vivaldi/package.nix
index c40b74db9e09..83440be7198f 100644
--- a/pkgs/by-name/vi/vivaldi/package.nix
+++ b/pkgs/by-name/vi/vivaldi/package.nix
@@ -66,7 +66,7 @@
 
 stdenv.mkDerivation rec {
   pname = "vivaldi";
-  version = "8.1.4087.58";
+  version = "8.1.4087.61";
 
   suffix =
     {
@@ -79,8 +79,8 @@ stdenv.mkDerivation rec {
     url = "https://downloads.vivaldi.com/stable/vivaldi-stable_${version}-1_${suffix}.deb";
     hash =
       {
-        aarch64-linux = "sha256-Yvs3HRbsrgTeYXAKrRliLArXtK96jnjjf7x/sdpwvig=";
-        x86_64-linux = "sha256-/2GdNvj9+O6LDfqJdjNNdNWJymNAtnpTnzznW/4jINE=";
+        aarch64-linux = "sha256-dr6elx+KCmwqwPDnGXO8M4vMmEjCUfILULBKuKvQMEg=";
+        x86_64-linux = "sha256-fluTiicLsQgqGsdBZlRo8QSLI03xjhhXwuZog3Dc44Y=";
       }
       .${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
   };
diff --git a/pkgs/by-name/wo/wofi-power-menu/package.nix b/pkgs/by-name/wo/wofi-power-menu/package.nix
index 774b715dc419..a85db571265d 100644
--- a/pkgs/by-name/wo/wofi-power-menu/package.nix
+++ b/pkgs/by-name/wo/wofi-power-menu/package.nix
@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "wofi-power-menu";
-  version = "0.3.4";
+  version = "0.3.5";
 
   src = fetchFromGitHub {
     owner = "szaffarano";
     repo = "wofi-power-menu";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-5dhwDfWL0pP28rgbS5eoOARrXDZVTF6EDNimcfcjH3Y=";
+    hash = "sha256-5aWlTtFlflj1Ts0NU/afP9dp3+G6Vqgp220YD3q9sps=";
   };
 
-  cargoHash = "sha256-Avful4JlhYrdHpzWfseCmmx5jxuOJxEA2Yl6dfkJpXs=";
+  cargoHash = "sha256-wTDam0bBFss1DqdJNQ+lFwJUmVCQaIYtgC2wIMFO6sk=";
 
   nativeBuildInputs = [ makeBinaryWrapper ];
 
diff --git a/pkgs/by-name/xr/xremap/package.nix b/pkgs/by-name/xr/xremap/package.nix
index d4a684a4a570..c6138945a2d9 100644
--- a/pkgs/by-name/xr/xremap/package.nix
+++ b/pkgs/by-name/xr/xremap/package.nix
@@ -58,13 +58,13 @@ assert (
 );
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "xremap${variant.suffix or ""}";
-  version = "0.15.9";
+  version = "0.15.10";
 
   src = fetchFromGitHub {
     owner = "xremap";
     repo = "xremap";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BgRp0y5bkmMwRCdIKHrXIbv6Kl7Hn9IphburN7i7sE8=";
+    hash = "sha256-tOQ5q+Xg7JN2P9c1UEG7s9hysC+Z06wxiJ0yPweA4fw=";
   };
 
   nativeBuildInputs = [ pkg-config ];
@@ -72,7 +72,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   buildNoDefaultFeatures = true;
   buildFeatures = variant.features;
 
-  cargoHash = "sha256-sfdUs9WLtwGSZHraDz0YEzGX1o9uQaYi1JiRnUvjyVs=";
+  cargoHash = "sha256-HbM6UwGRyQIS/Sq0OQdm0eYok6CemTOu88i4w7X5aIY=";
 
   passthru = lib.mapAttrs (name: lib.const (xremap.override { withVariant = name; })) variants;
 
diff --git a/pkgs/by-name/ye/yersinia/package.nix b/pkgs/by-name/ye/yersinia/package.nix
index 8de177b26463..83eca37d529a 100644
--- a/pkgs/by-name/ye/yersinia/package.nix
+++ b/pkgs/by-name/ye/yersinia/package.nix
@@ -8,9 +8,6 @@
   ncurses,
   libpcap,
   libnet,
-  # alpha version of GTK interface
-  withGtk ? false,
-  gtk2,
   # enable remote admin interface
   enableAdmin ? false,
 }:
@@ -44,17 +41,16 @@ stdenv.mkDerivation {
     libpcap
     libnet
     ncurses
-  ]
-  ++ lib.optional withGtk gtk2;
+  ];
 
   autoreconfPhase = "./autogen.sh";
 
   configureFlags = [
     "--with-pcap-includes=${lib.getDev libpcap}/include"
     "--with-libnet-includes=${lib.getDev libnet}/include"
+    "--disable-gtk"
   ]
-  ++ lib.optional (!enableAdmin) "--disable-admin"
-  ++ lib.optional (!withGtk) "--disable-gtk";
+  ++ lib.optional (!enableAdmin) "--disable-admin";
 
   makeFlags = [ "LDFLAGS=-lncurses" ];
 
diff --git a/pkgs/by-name/ze/zed-editor/package.nix b/pkgs/by-name/ze/zed-editor/package.nix
index 034204e8ccbb..d7a4a72e88a1 100644
--- a/pkgs/by-name/ze/zed-editor/package.nix
+++ b/pkgs/by-name/ze/zed-editor/package.nix
@@ -98,7 +98,7 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "zed-editor";
-  version = "1.13.1";
+  version = "1.13.2";
 
   outputs = [
     "out"
@@ -111,7 +111,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "zed-industries";
     repo = "zed";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-NPLuMYJD29zNYNMLR24FXQh4IvUEJxJyMtTYEAeTJNk=";
+    hash = "sha256-RbldT52JzEKvI1ES+HbwcNT4fTGx78vrEiT8+W83sDo=";
   };
 
   postPatch = ''
@@ -134,7 +134,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
       --replace-fail 'builder.include(&glib_path_config);' 'builder.include("${lib.getLib glib}/lib/glib-2.0/include");'
   '';
 
-  cargoHash = "sha256-HXv/8b1+CahO/l5sP9ZMREI4/zk2HSh7gStR6XB+cQY=";
+  cargoHash = "sha256-9DsCcOTJJvvjjivyxFgzkVJSvq/bNFg3hbtEltJyP6M=";
 
   __structuredAttrs = true;
 
diff --git a/pkgs/by-name/ze/zellij/plugins/rust/autolock.nix b/pkgs/by-name/ze/zellij/plugins/rust/autolock.nix
new file mode 100644
index 000000000000..00c8153dcf02
--- /dev/null
+++ b/pkgs/by-name/ze/zellij/plugins/rust/autolock.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  fetchFromGitHub,
+  rustPlatform,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "zellij-autolock";
+  version = "0.2.2";
+
+  src = fetchFromGitHub {
+    owner = "fresh2dev";
+    repo = "zellij-autolock";
+    tag = finalAttrs.version;
+    hash = "sha256-uU7wWSdOhRLQN6cG4NvA9yASlvRwB6gggX89B5K9dyQ=";
+  };
+
+  cargoHash = "sha256-ULBQN+EBvyEIdoaLpiMNqoDEQ8Lu0Sc3OeweuKMiIU0=";
+
+  meta = {
+    description = "Autolock Zellij when certain processes open";
+    homepage = "https://github.com/fresh2dev/zellij-autolock";
+    changelog = "https://github.com/fresh2dev/zellij-autolock/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ilkecan ];
+  };
+})
diff --git a/pkgs/by-name/ze/zellij/plugins/rust/workspace.nix b/pkgs/by-name/ze/zellij/plugins/rust/workspace.nix
new file mode 100644
index 000000000000..bfce93c3da9d
--- /dev/null
+++ b/pkgs/by-name/ze/zellij/plugins/rust/workspace.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  fetchFromGitHub,
+  rustPlatform,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "zellij-workspace";
+  version = "0.3.2";
+
+  src = fetchFromGitHub {
+    owner = "vdbulcke";
+    repo = "zellij-workspace";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-EMUZl5sxdJ/kNMdREpKmXRIxKd13P0Qb/oQ/eNmN3hI=";
+  };
+
+  cargoHash = "sha256-EkPwtJ134yfzVDVXp4uXjzyhFetp6TC10DSePua/g1k=";
+
+  meta = {
+    description = "Zellij plugin for applying layouts to current zellij session";
+    homepage = "https://github.com/vdbulcke/zellij-workspace";
+    changelog = "https://github.com/vdbulcke/zellij-workspace/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ilkecan ];
+  };
+})
diff --git a/pkgs/by-name/zu/zuban/package.nix b/pkgs/by-name/zu/zuban/package.nix
index 6c8266fdd4b2..63b562acb99f 100644
--- a/pkgs/by-name/zu/zuban/package.nix
+++ b/pkgs/by-name/zu/zuban/package.nix
@@ -9,13 +9,13 @@
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "zuban";
 
-  version = "0.9.0";
+  version = "0.9.1";
 
   src = fetchFromGitHub {
     owner = "zubanls";
     repo = "zuban";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-g06iHdbKb/uZkGkbX7fHB0MMDbuYYnGodQAEPvA18KA=";
+    hash = "sha256-06NECIV6f1kFspWMMOQ4C+t83ESwv8CVuoShH4G0VyU=";
     fetchSubmodules = true;
   };
 
@@ -26,7 +26,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   buildAndTestSubdir = "crates/zuban";
 
-  cargoHash = "sha256-bfiWuig9ySkbJ/2CL4jGlNYn/YvVClB3Eg0cq8dKi3E=";
+  cargoHash = "sha256-m5d5Q/fv3yAlUT8ILaA54uQe6FVrKFk5YGXX97ln1p0=";
 
   nativeInstallCheckInputs = [
     versionCheckHook
diff --git a/pkgs/development/compilers/sbcl/default.nix b/pkgs/development/compilers/sbcl/default.nix
index 3289dd72f3ab..7af5780c6d93 100644
--- a/pkgs/development/compilers/sbcl/default.nix
+++ b/pkgs/development/compilers/sbcl/default.nix
@@ -186,6 +186,19 @@ stdenv.mkDerivation (finalAttrs: {
         ./patches/dynamic-space-size-envvar-2.5.2-tests.patch
       ];
 
+  postPatch =
+    # On SBCL < 2.5.0, `elf-sans-immobile.test.sh` triggers a bug in ZFS and
+    # causes the build to hang indefinitely. See:
+    # https://github.com/NixOS/nixpkgs/issues/544703#issuecomment-5141409041
+    # https://github.com/openzfs/zfs/issues/18135#issuecomment-5141375047
+    # To unbreak Hydra, skip the test.
+    if lib.versionOlder finalAttrs.version "2.5.0" then
+      ''
+        rm tests/elf-sans-immobile.test.sh
+      ''
+    else
+      null;
+
   sbclPatchPhase =
     lib.optionalString (finalAttrs.disabledTestFiles != [ ]) ''
       (cd tests ; rm -f ${lib.concatStringsSep " " finalAttrs.disabledTestFiles})
diff --git a/pkgs/development/libraries/science/chemistry/simple-dftd3/python.nix b/pkgs/development/libraries/science/chemistry/simple-dftd3/python.nix
index 9048ff6281ae..dae7c45ed3a7 100644
--- a/pkgs/development/libraries/science/chemistry/simple-dftd3/python.nix
+++ b/pkgs/development/libraries/science/chemistry/simple-dftd3/python.nix
@@ -17,12 +17,12 @@
 
 buildPythonPackage {
   inherit (simple-dftd3)
-    pname
     version
     src
     meta
     ;
 
+  pname = "dftd3";
   pyproject = true;
 
   build-system = [
diff --git a/pkgs/development/ocaml-modules/aeneas/default.nix b/pkgs/development/ocaml-modules/aeneas/default.nix
index 13e23a8839e4..7fe508b5a6d1 100644
--- a/pkgs/development/ocaml-modules/aeneas/default.nix
+++ b/pkgs/development/ocaml-modules/aeneas/default.nix
@@ -18,7 +18,7 @@
 buildDunePackage (finalAttrs: {
   pname = "aeneas";
   # Keep aeneas and charon in sync
-  version = "${charon.version}-bc2eb6f";
+  version = "${charon.version}-daa85d7";
   __structuredAttrs = true;
 
   minimalOCamlVersion = "5.1";
@@ -27,7 +27,7 @@ buildDunePackage (finalAttrs: {
     owner = "AeneasVerif";
     repo = "aeneas";
     tag = "nightly-${finalAttrs.version}";
-    hash = "sha256-V5+3pPpDhcrRGA9kmYmod3/pScwfYZEj6MJKsuhbROk=";
+    hash = "sha256-NuJi6a99GzS/SLvM4wGUTBN4Td2XqD4Ei61eCR8zHWs=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/src";
diff --git a/pkgs/development/ocaml-modules/charon/default.nix b/pkgs/development/ocaml-modules/charon/default.nix
index b3dbaf0c2ade..7cda2d16bbd4 100644
--- a/pkgs/development/ocaml-modules/charon/default.nix
+++ b/pkgs/development/ocaml-modules/charon/default.nix
@@ -16,14 +16,14 @@
 
 buildDunePackage (finalAttrs: {
   pname = "charon";
-  version = "2026.07.16";
+  version = "2026.08.03";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "AeneasVerif";
     repo = "charon";
     tag = "nightly-${finalAttrs.version}";
-    hash = "sha256-n0dY7T8HMbNPTibD53Vpd4ZS/0KNqEfazPJJxy4Uk3g=";
+    hash = "sha256-ecRxops1EdgTulggQDA2yCFxjMp1LNnF5EEWTIsyIZw=";
   };
 
   propagatedBuildInputs = [
diff --git a/pkgs/development/python-modules/agentic-threat-hunting-framework/default.nix b/pkgs/development/python-modules/agentic-threat-hunting-framework/default.nix
index 422fc20dd437..25e5a5615da4 100644
--- a/pkgs/development/python-modules/agentic-threat-hunting-framework/default.nix
+++ b/pkgs/development/python-modules/agentic-threat-hunting-framework/default.nix
@@ -16,14 +16,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "agentic-threat-hunting-framework";
-  version = "0.16.0";
+  version = "0.18.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Nebulock-Inc";
     repo = "agentic-threat-hunting-framework";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-KyrWJlfrpb7vjOVZvIw9f4KZCxpFZtwhmD0oFxQJ7RE=";
+    hash = "sha256-QABUV/aSVvYm/aPkxI1WxIlA+uDlCX90bipLs5Ez6h0=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/aioamazondevices/default.nix b/pkgs/development/python-modules/aioamazondevices/default.nix
index 3e9c820fb092..50dcf70a873b 100644
--- a/pkgs/development/python-modules/aioamazondevices/default.nix
+++ b/pkgs/development/python-modules/aioamazondevices/default.nix
@@ -15,14 +15,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "aioamazondevices";
-  version = "14.2.0";
+  version = "14.2.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "chemelli74";
     repo = "aioamazondevices";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-KP1Rc+8c5RNTtCmuNjbjVhNEElwMKOGvumdWF+BIn0I=";
+    hash = "sha256-/odlNQg1buiZkcpWaDzSKo5mfJVdow/dD/gyef6NOOo=";
   };
 
   build-system = [ poetry-core ];
diff --git a/pkgs/development/python-modules/apache-beam/default.nix b/pkgs/development/python-modules/apache-beam/default.nix
index a3c834e0e751..7675694f7d25 100644
--- a/pkgs/development/python-modules/apache-beam/default.nix
+++ b/pkgs/development/python-modules/apache-beam/default.nix
@@ -79,13 +79,23 @@ buildPythonPackage (finalAttrs: {
 
   sourceRoot = "${finalAttrs.src.name}/sdks/python";
 
+  patches = [
+    # Beam's dataframe module references DataFrame.first/last/bool/applymap, all removed in
+    # pandas 3. Their `with_docs_from` decorators do getattr at import, crashing frames.py (which
+    # then never registers the deferred types). Guard them behind hasattr like the neighboring
+    # ffill/bfill aliases. Upstream caps pandas < 2.4, so this is nixpkgs-local.
+    ./pandas-3-compat.patch
+  ];
+
   postPatch = ''
     substituteInPlace pyproject.toml \
       --replace-fail "distlib==0.4.2" "distlib" \
       --replace-fail "cython>=3.2.5,<4" "cython" \
+      --replace-fail "numpy>=1.14.3,<2.5.0" "numpy" \
       --replace-fail "==" ">="
 
     substituteInPlace setup.py \
+      --replace-fail "numpy>=1.14.3,<2.5.0" "numpy" \
       --replace-fail "  copy_tests_from_docs()" ""
   '';
 
@@ -94,6 +104,7 @@ buildPythonPackage (finalAttrs: {
     "envoy-data-plane"
     "httplib2"
     "jsonpickle"
+    "numpy"
     "objsize"
     "protobuf"
     "pyarrow"
@@ -238,6 +249,12 @@ buildPythonPackage (finalAttrs: {
     # grpc_status:14, grpc_message:"Cancelling all calls"}"
     # Upstream issue https://github.com/apache/beam/issues/33851
     "apache_beam/runners/portability/portable_runner_test.py"
+
+    # Pandas 3 behavioral changes in Beam's dataframe module (upstream caps pandas < 2.4):
+    # the doctests compare against pandas-version-specific output and the taxiride example
+    # relies on DataFrame APIs removed in pandas 3.
+    "apache_beam/dataframe/doctests_test.py"
+    "apache_beam/examples/dataframe/taxiride_test.py"
   ]
   ++ lib.optionals (pythonAtLeast "3.13") [
     # > instruction = ofs_table[pc]
@@ -307,6 +324,28 @@ buildPythonPackage (finalAttrs: {
 
     # AssertionError: False is not true
     "test_samples_all_with_both_experiments"
+
+    # ValueError: buffer source array is read-only (Cython coder over a read-only numpy buffer)
+    "test_coders_microbenchmark"
+
+    # Pandas 3 behavioral changes in Beam's dataframe module (upstream caps pandas < 2.4).
+    # groupby() no longer accepts the removed `axis` argument:
+    "test_groupby_apply"
+    "test_groupby_sum_mean"
+    "test_scalar"
+    # (only surface on Python 3.13, but same groupby() `axis` root cause)
+    "test_dataframes_with_grouped_index"
+    "test_dataframes_with_multi_index"
+    "test_dataframes_with_multi_index_get_result"
+    # read_csv attribute/dtype differences:
+    "test_csv_splitter_00_defaults"
+    "test_csv_splitter_01_header"
+    "test_csv_splitter_05_names_and_header"
+    "test_csv_splitter_06_skip_blank_lines"
+    "test_csv_splitter_07_skip_blank_lines"
+    "test_csv_splitter_08_comment"
+    # nan instead of None for missing values:
+    "test_convert_with_none"
   ]
   ++ lib.optionals stdenv.hostPlatform.isDarwin [
     #  PermissionError: [Errno 13] Permission denied: '/tmp/...'
diff --git a/pkgs/development/python-modules/apache-beam/pandas-3-compat.patch b/pkgs/development/python-modules/apache-beam/pandas-3-compat.patch
new file mode 100644
index 000000000000..b15907528659
--- /dev/null
+++ b/pkgs/development/python-modules/apache-beam/pandas-3-compat.patch
@@ -0,0 +1,169 @@
+--- a/apache_beam/dataframe/frames.py
++++ b/apache_beam/dataframe/frames.py
+@@ -335,35 +335,37 @@
+   if hasattr(pd.DataFrame, 'pad'):
+     pad = _fillna_alias('pad')
+ 
+-  @frame_base.with_docs_from(pd.DataFrame)
+-  def first(self, offset):
+-    per_partition = expressions.ComputedExpression(
+-        'first-per-partition', lambda df: df.sort_index().first(offset=offset),
+-        [self._expr],
+-        preserves_partition_by=partitionings.Arbitrary(),
+-        requires_partition_by=partitionings.Arbitrary())
+-    with expressions.allow_non_parallel_operations(True):
+-      return frame_base.DeferredFrame.wrap(
+-          expressions.ComputedExpression(
+-              'first', lambda df: df.sort_index().first(offset=offset),
+-              [per_partition],
+-              preserves_partition_by=partitionings.Arbitrary(),
+-              requires_partition_by=partitionings.Singleton()))
++  if hasattr(pd.DataFrame, 'first'):
++    @frame_base.with_docs_from(pd.DataFrame)
++    def first(self, offset):
++      per_partition = expressions.ComputedExpression(
++          'first-per-partition', lambda df: df.sort_index().first(offset=offset),
++          [self._expr],
++          preserves_partition_by=partitionings.Arbitrary(),
++          requires_partition_by=partitionings.Arbitrary())
++      with expressions.allow_non_parallel_operations(True):
++        return frame_base.DeferredFrame.wrap(
++            expressions.ComputedExpression(
++                'first', lambda df: df.sort_index().first(offset=offset),
++                [per_partition],
++                preserves_partition_by=partitionings.Arbitrary(),
++                requires_partition_by=partitionings.Singleton()))
+ 
+-  @frame_base.with_docs_from(pd.DataFrame)
+-  def last(self, offset):
+-    per_partition = expressions.ComputedExpression(
+-        'last-per-partition', lambda df: df.sort_index().last(offset=offset),
+-        [self._expr],
+-        preserves_partition_by=partitionings.Arbitrary(),
+-        requires_partition_by=partitionings.Arbitrary())
+-    with expressions.allow_non_parallel_operations(True):
+-      return frame_base.DeferredFrame.wrap(
+-          expressions.ComputedExpression(
+-              'last', lambda df: df.sort_index().last(offset=offset),
+-              [per_partition],
+-              preserves_partition_by=partitionings.Arbitrary(),
+-              requires_partition_by=partitionings.Singleton()))
++  if hasattr(pd.DataFrame, 'last'):
++    @frame_base.with_docs_from(pd.DataFrame)
++    def last(self, offset):
++      per_partition = expressions.ComputedExpression(
++          'last-per-partition', lambda df: df.sort_index().last(offset=offset),
++          [self._expr],
++          preserves_partition_by=partitionings.Arbitrary(),
++          requires_partition_by=partitionings.Arbitrary())
++      with expressions.allow_non_parallel_operations(True):
++        return frame_base.DeferredFrame.wrap(
++            expressions.ComputedExpression(
++                'last', lambda df: df.sort_index().last(offset=offset),
++                [per_partition],
++                preserves_partition_by=partitionings.Arbitrary(),
++                requires_partition_by=partitionings.Singleton()))
+ 
+   @frame_base.with_docs_from(pd.DataFrame)
+   @frame_base.args_to_kwargs(pd.DataFrame)
+@@ -798,27 +800,28 @@
+               requires_partition_by=partitionings.Singleton(),
+               preserves_partition_by=partitionings.Singleton()))
+ 
+-  @frame_base.with_docs_from(pd.DataFrame)
+-  def bool(self):
+-    # TODO: Documentation about DeferredScalar
+-    # Will throw if any partition has >1 element
+-    bools = expressions.ComputedExpression(
+-        'get_bools',
+-        # Wrap scalar results in a Series for easier concatenation later
+-        lambda df: pd.Series([], dtype=bool)
+-        if df.empty else pd.Series([df.bool()]),
+-        [self._expr],
+-        requires_partition_by=partitionings.Arbitrary(),
+-        preserves_partition_by=partitionings.Singleton())
++  if hasattr(pd.DataFrame, 'bool'):
++    @frame_base.with_docs_from(pd.DataFrame)
++    def bool(self):
++      # TODO: Documentation about DeferredScalar
++      # Will throw if any partition has >1 element
++      bools = expressions.ComputedExpression(
++          'get_bools',
++          # Wrap scalar results in a Series for easier concatenation later
++          lambda df: pd.Series([], dtype=bool)
++          if df.empty else pd.Series([df.bool()]),
++          [self._expr],
++          requires_partition_by=partitionings.Arbitrary(),
++          preserves_partition_by=partitionings.Singleton())
+ 
+-    with expressions.allow_non_parallel_operations(True):
+-      # Will throw if overall dataset has != 1 element
+-      return frame_base.DeferredFrame.wrap(
+-          expressions.ComputedExpression(
+-              'combine_all_bools', lambda bools: bools.bool(), [bools],
+-              proxy=bool(),
+-              requires_partition_by=partitionings.Singleton(),
+-              preserves_partition_by=partitionings.Singleton()))
++      with expressions.allow_non_parallel_operations(True):
++        # Will throw if overall dataset has != 1 element
++        return frame_base.DeferredFrame.wrap(
++            expressions.ComputedExpression(
++                'combine_all_bools', lambda bools: bools.bool(), [bools],
++                proxy=bool(),
++                requires_partition_by=partitionings.Singleton(),
++                preserves_partition_by=partitionings.Singleton()))
+ 
+   @frame_base.with_docs_from(pd.DataFrame)
+   def equals(self, other):
+@@ -2932,7 +2935,8 @@
+ 
+   agg = aggregate
+ 
+-  applymap = frame_base._elementwise_method('applymap', base=pd.DataFrame)
++  if hasattr(pd.DataFrame, 'applymap'):
++    applymap = frame_base._elementwise_method('applymap', base=pd.DataFrame)
+   if PD_VERSION >= (2, 1):
+     map = frame_base._elementwise_method('map', base=pd.DataFrame)
+   add_prefix = frame_base._elementwise_method('add_prefix', base=pd.DataFrame)
+@@ -4414,18 +4418,19 @@
+ 
+     return self.apply(apply_fn).droplevel(self._grouping_columns)
+ 
+-  @property  # type: ignore
+-  @frame_base.with_docs_from(DataFrameGroupBy)
+-  def dtypes(self):
+-    return frame_base.DeferredFrame.wrap(
+-        expressions.ComputedExpression(
+-            'dtypes',
+-            lambda gb: gb.dtypes,
+-            [self._expr],
+-            requires_partition_by=partitionings.Arbitrary(),
+-            preserves_partition_by=partitionings.Arbitrary()
+-        )
+-    )
++  if hasattr(DataFrameGroupBy, 'dtypes'):
++    @property  # type: ignore
++    @frame_base.with_docs_from(DataFrameGroupBy)
++    def dtypes(self):
++      return frame_base.DeferredFrame.wrap(
++          expressions.ComputedExpression(
++              'dtypes',
++              lambda gb: gb.dtypes,
++              [self._expr],
++              requires_partition_by=partitionings.Arbitrary(),
++              preserves_partition_by=partitionings.Arbitrary()
++          )
++      )
+ 
+   if hasattr(DataFrameGroupBy, 'value_counts'):
+     @frame_base.with_docs_from(DataFrameGroupBy)
+@@ -4745,7 +4750,8 @@
+   describe = frame_base.not_implemented_method('describe',
+                                                base_type=DataFrameGroupBy)
+   diff = frame_base._elementwise_method('diff', base=DataFrameGroupBy)
+-  fillna = frame_base._elementwise_method('fillna', base=DataFrameGroupBy)
++  if hasattr(DataFrameGroupBy, 'fillna'):
++    fillna = frame_base._elementwise_method('fillna', base=DataFrameGroupBy)
+   filter = frame_base._elementwise_method('filter', base=DataFrameGroupBy)
+   first = frame_base._elementwise_method('first', base=DataFrameGroupBy)
+   get_group = frame_base._elementwise_method('get_group', base=DataFrameGroupBy)
diff --git a/pkgs/development/python-modules/autofaiss/default.nix b/pkgs/development/python-modules/autofaiss/default.nix
index ffe764851671..654fdb48380b 100644
--- a/pkgs/development/python-modules/autofaiss/default.nix
+++ b/pkgs/development/python-modules/autofaiss/default.nix
@@ -14,18 +14,20 @@
   numpy,
   pyarrow,
 
+  # tests
   pytestCheckHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "autofaiss";
   version = "2.18.0";
   pyproject = true;
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "criteo";
     repo = "autofaiss";
-    tag = version;
+    tag = finalAttrs.version;
     hash = "sha256-XuubpTxmyKdV9nWqLTljp5cNyIwLt2BKJYcBzwPNzD8=";
   };
 
@@ -40,12 +42,10 @@ buildPythonPackage rec {
   ];
 
   pythonRelaxDeps = [
+    "pandas"
     # As of v2.15.4, autofaiss asks for fire<0.5 but we have fire v0.5.0 in
     # nixpkgs at the time of writing (2022-12-25).
     "fire"
-    # As of v2.15.3, autofaiss asks for pyarrow<8 but we have pyarrow v9.0.0 in
-    # nixpkgs at the time of writing (2022-12-15).
-    "pyarrow"
 
     # No official numpy2 support yet
     "numpy"
@@ -60,7 +60,9 @@ buildPythonPackage rec {
     pyarrow
   ];
 
-  nativeCheckInputs = [ pytestCheckHook ];
+  nativeCheckInputs = [
+    pytestCheckHook
+  ];
 
   disabledTests = [
     # Attempts to spin up a Spark cluster and talk to it which doesn't work in
@@ -81,8 +83,8 @@ buildPythonPackage rec {
     description = "Automatically create Faiss knn indices with the most optimal similarity search parameters";
     mainProgram = "autofaiss";
     homepage = "https://github.com/criteo/autofaiss";
-    changelog = "https://github.com/criteo/autofaiss/blob/${version}/CHANGELOG.md";
+    changelog = "https://github.com/criteo/autofaiss/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ samuela ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/botorch/default.nix b/pkgs/development/python-modules/botorch/default.nix
index 1cc078b4224a..0bcaf74767cd 100644
--- a/pkgs/development/python-modules/botorch/default.nix
+++ b/pkgs/development/python-modules/botorch/default.nix
@@ -3,6 +3,7 @@
   stdenv,
   buildPythonPackage,
   fetchFromGitHub,
+  fetchpatch,
 
   # build-system
   setuptools,
@@ -42,6 +43,16 @@ buildPythonPackage (finalAttrs: {
     hash = "sha256-tUTtImqPlbS8g1oLoTTCCWQbeLwLop13qPjFrQeMtb8=";
   };
 
+  patches = [
+    # Allow scipy 1.18 in batched L-BFGS-B fast path
+    # https://github.com/meta-pytorch/botorch/pull/3328
+    (fetchpatch {
+      name = "scipy-1.18.patch";
+      url = "https://github.com/meta-pytorch/botorch/commit/611f14acc8c1b2f30ce2ae058568d90f96bbb2ec.patch";
+      hash = "sha256-PiXq9GmPaWQXh+emY7aNI53Y+ufl8K5uOFa8GD0clP8=";
+    })
+  ];
+
   build-system = [
     setuptools
     setuptools-scm
diff --git a/pkgs/development/python-modules/busylight-core/default.nix b/pkgs/development/python-modules/busylight-core/default.nix
index be098b691e4f..173f676bb41b 100644
--- a/pkgs/development/python-modules/busylight-core/default.nix
+++ b/pkgs/development/python-modules/busylight-core/default.nix
@@ -12,21 +12,17 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "busylight-core";
-  version = "2.2.0";
+  version = "2.4.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "JnyJny";
-    repo = "busylight-core";
-    tag = "v${finalAttrs.version}";
-    hash = "sha256-as2IvaxyMjGKPGlBmz1cntAhbpuW+f3INtnNIcwpWh8=";
+    repo = "busylight";
+    tag = "busylight-core/v${finalAttrs.version}";
+    hash = "sha256-m7ZxZkaWnkQV/KZ/xm3+uSfftL1V5Lxolx2lB63Mzyk=";
+    rootDir = "packages/busylight-core";
   };
 
-  postPatch = ''
-    substituteInPlace pyproject.toml \
-      --replace-fail "uv_build>=0.7.19,<0.8" "uv_build"
-  '';
-
   build-system = [ uv-build ];
 
   dependencies = [
@@ -44,8 +40,8 @@ buildPythonPackage (finalAttrs: {
 
   meta = {
     description = "Library for interacting programmatically with USB-connected LED lights";
-    homepage = "https://github.com/JnyJny/busylight-core";
-    changelog = "https://github.com/JnyJny/busylight-core/blob/${finalAttrs.src.tag}/CHANGELOG.md";
+    homepage = "https://github.com/JnyJny/busylight";
+    changelog = "https://github.com/JnyJny/busylight/blob/${finalAttrs.src.tag}/${finalAttrs.src.rootDir}/CHANGELOG.md";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ fab ];
   };
diff --git a/pkgs/development/python-modules/busylight-for-humans/default.nix b/pkgs/development/python-modules/busylight-for-humans/default.nix
index 9950b2edc9ad..8d2ed0b0f191 100644
--- a/pkgs/development/python-modules/busylight-for-humans/default.nix
+++ b/pkgs/development/python-modules/busylight-for-humans/default.nix
@@ -5,7 +5,6 @@
   busylight-core,
   fastapi,
   fetchFromGitHub,
-  hatchling,
   hidapi,
   httpx,
   loguru,
@@ -14,26 +13,27 @@
   pytestCheckHook,
   typer,
   udevCheckHook,
+  uv-build,
   uvicorn,
   webcolors,
 }:
 
 buildPythonPackage (finalAttrs: {
   pname = "busylight-for-humans";
-  version = "0.48.0";
+  version = "1.0.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "JnyJny";
     repo = "busylight";
-    tag = "v${finalAttrs.version}";
-    hash = "sha256-5sQXW55P/iWhDWY6bGzN8IrWCJyrSvu2ObtIOolo2X0=";
+    tag = "busylight-cli/v${finalAttrs.version}";
+    hash = "sha256-h+YPrcf32SgzdQDYCeQlh4enzsXfsHr470W3tiFBO7g=";
+    rootDir = "packages/busylight";
   };
 
-  build-system = [ hatchling ];
+  build-system = [ uv-build ];
 
   dependencies = [
-    bitvector-for-humans
     busylight-core
     hidapi
     loguru
@@ -53,13 +53,10 @@ buildPythonPackage (finalAttrs: {
   nativeCheckInputs = [
     httpx
     pytestCheckHook
-    pytest-mock
     udevCheckHook
   ]
   ++ lib.flatten (builtins.attrValues finalAttrs.passthru.optional-dependencies);
 
-  disabledTestPaths = [ "tests/test_pydantic_models.py" ];
-
   pythonImportsCheck = [ "busylight" ];
 
   postInstall = ''
@@ -70,7 +67,7 @@ buildPythonPackage (finalAttrs: {
   meta = {
     description = "Control USB connected presence lights from multiple vendors via the command-line or web API";
     homepage = "https://github.com/JnyJny/busylight";
-    changelog = "https://github.com/JnyJny/busylight/releases/tag/${finalAttrs.src.tag}";
+    changelog = "https://github.com/JnyJny/busylight/blob/${finalAttrs.src.tag}/${finalAttrs.src.rootDir}/CHANGELOG.md";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [
       das_j
diff --git a/pkgs/development/python-modules/cadwyn/default.nix b/pkgs/development/python-modules/cadwyn/default.nix
index 412ee3d271d8..ebc4d3a57d45 100644
--- a/pkgs/development/python-modules/cadwyn/default.nix
+++ b/pkgs/development/python-modules/cadwyn/default.nix
@@ -27,14 +27,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "cadwyn";
-  version = "7.1.1";
+  version = "7.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "zmievsa";
     repo = "cadwyn";
     tag = finalAttrs.version;
-    hash = "sha256-jw3IfjYDECW+cY+W4bfXN6tPIgr2lBkj16goF1wD2Is=";
+    hash = "sha256-Kf82lJS8c6f0m2DFrbhRcBOK5C8Qpz+KHob65VeIqn4=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/cel-python/default.nix b/pkgs/development/python-modules/cel-python/default.nix
new file mode 100644
index 000000000000..46ce25d69767
--- /dev/null
+++ b/pkgs/development/python-modules/cel-python/default.nix
@@ -0,0 +1,66 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+
+  # build-system
+  hatchling,
+
+  # dependencies
+  google-re2,
+  jmespath,
+  lark,
+  pendulum,
+  pyyaml,
+
+  # tests
+  pytestCheckHook,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "cel-python";
+  version = "0.5.0";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "cloud-custodian";
+    repo = "cel-python";
+    tag = "v${lib.versions.majorMinor finalAttrs.version}";
+    hash = "sha256-DPHgHRvzQnBzjl2y9yNWt330xF535dO0iBObuqlr+PI=";
+  };
+
+  build-system = [ hatchling ];
+
+  dependencies = [
+    google-re2
+    jmespath
+    lark
+    pendulum
+    pyyaml
+  ];
+
+  pythonImportsCheck = [ "celpy" ];
+
+  nativeCheckInputs = [
+    pytestCheckHook
+  ];
+
+  enabledTestPaths = [
+    "tests"
+  ];
+
+  disabledTestPaths = [
+    # Require cloud-custodian (c7n)
+    "tests/test_c7n_to_cel.py"
+    "tests/test_c7nlib.py"
+  ];
+
+  meta = {
+    description = "Pure Python implementation of the Common Expression Language";
+    homepage = "https://github.com/cloud-custodian/cel-python";
+    changelog = "https://github.com/cloud-custodian/cel-python/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ GaetanLepage ];
+  };
+})
diff --git a/pkgs/development/python-modules/chromadb/default.nix b/pkgs/development/python-modules/chromadb/default.nix
index db63f9cfbe18..1c68f44e324d 100644
--- a/pkgs/development/python-modules/chromadb/default.nix
+++ b/pkgs/development/python-modules/chromadb/default.nix
@@ -112,6 +112,10 @@ buildPythonPackage (finalAttrs: {
       sed -i '1i #![recursion_limit = "256"]' rust/segment/src/lib.rs
     '';
 
+  pythonRemoveDeps = [
+    "build"
+  ];
+
   pythonRelaxDeps = [
     "fastapi"
     "posthog"
@@ -134,7 +138,6 @@ buildPythonPackage (finalAttrs: {
 
   dependencies = [
     bcrypt
-    build
     fastapi
     grpcio
     httpx
diff --git a/pkgs/development/python-modules/cmake-parser/default.nix b/pkgs/development/python-modules/cmake-parser/default.nix
new file mode 100644
index 000000000000..2ad7294720c1
--- /dev/null
+++ b/pkgs/development/python-modules/cmake-parser/default.nix
@@ -0,0 +1,46 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  setuptools-scm,
+  attrs,
+  nix-update-script,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "cmake-parser";
+  version = "0.9.2";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "roehling";
+    repo = "cmake_parser";
+    tag = finalAttrs.version;
+    hash = "sha256-4hJYlnDOuO+Rs1r9/scWK+BZAU9zSH5BTEvkiS3LUh8=";
+  };
+
+  build-system = [
+    setuptools
+    setuptools-scm
+  ];
+
+  dependencies = [
+    attrs
+  ];
+
+  pythonImportsCheck = [
+    "cmake_parser"
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Parse CMake files with Python";
+    homepage = "https://github.com/roehling/cmake_parser";
+    changelog = "https://github.com/roehling/cmake_parser/blob/${finalAttrs.src.rev}/CHANGELOG.rst";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ nim65s ];
+  };
+})
diff --git a/pkgs/development/python-modules/crewai-cli/default.nix b/pkgs/development/python-modules/crewai-cli/default.nix
new file mode 100644
index 000000000000..64beda797437
--- /dev/null
+++ b/pkgs/development/python-modules/crewai-cli/default.nix
@@ -0,0 +1,139 @@
+{
+  lib,
+  buildPythonPackage,
+
+  # build-system
+  hatchling,
+
+  # dependencies
+  appdirs,
+  certifi,
+  click,
+  crewai-core,
+  cryptography,
+  httpx,
+  packaging,
+  pydantic,
+  pydantic-settings,
+  pyjwt,
+  python-dotenv,
+  rich,
+  textual,
+  tomli,
+  tomli-w,
+  uv,
+
+  # tests
+  versionCheckHook,
+
+  # passthru
+  aiohttp,
+  crewai,
+  pytest-asyncio,
+  pytest-recording,
+  pytest-subprocess,
+  pytest-timeout,
+  pytest-xdist,
+  pytestCheckHook,
+  vcrpy,
+  writableTmpDirAsHomeHook,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "crewai-cli";
+  version = "1.15.10";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  inherit (crewai-core) src;
+
+  sourceRoot = "${finalAttrs.src.name}/lib/cli";
+
+  build-system = [
+    hatchling
+  ];
+
+  pythonRelaxDeps = [
+    "click"
+    "crewai-core"
+    "pydantic"
+    "pydantic-settings"
+    "pyjwt"
+    "python-dotenv"
+    "textual"
+    "tomli"
+    "tomli-w"
+    "uv"
+  ];
+  dependencies = [
+    appdirs
+    certifi
+    click
+    crewai-core
+    cryptography
+    httpx
+    packaging
+    pydantic
+    pydantic-settings
+    pyjwt
+    python-dotenv
+    rich
+    textual
+    tomli
+    tomli-w
+    uv
+  ];
+
+  pythonImportsCheck = [ "crewai_cli" ];
+
+  nativeCheckInputs = [
+    versionCheckHook
+  ];
+
+  disabledTests = [
+    # error: Failed to discover managed Python installations
+    # Caused by: Could not read ELF interpreter from any of the following paths: /bin/sh, /usr/bin/env, /bin/dash, /bin/ls
+    "test_create_crew"
+    "test_deploy_with_project_name"
+    "test_deploy_with_remote_keeps_remote_path_when_fetch_fails"
+    "test_deploy_with_remote_keeps_remote_path_when_initial_commit_fails"
+    "test_deploy_with_uuid"
+    "test_json_runner_code_loads_current_cli_package_over_project_env"
+    "test_json_runner_imports_with_older_project_env_crewai_core"
+    "test_missing_crewai_package_shows_full_install_hint"
+    "test_publish_calls_api"
+    "test_publish_metadata_extraction_failure_continues_with_warning"
+
+    # ValueError: Git fetch failed with exit code
+    "test_publish_api_error"
+    "test_publish_failure"
+
+    # AssertionError: assert '"crewai[tools]>=1.15.0,<2.0.0"' in content
+    "test_create_success"
+  ];
+
+  # Circular dependency with crewai
+  passthru.tests = finalAttrs.finalPackage.overrideAttrs (old: {
+    nativeInstallCheckInputs = [
+      aiohttp
+      crewai
+      pytest-asyncio
+      pytest-recording
+      pytest-subprocess
+      pytest-timeout
+      pytest-xdist
+      pytestCheckHook
+      vcrpy
+      writableTmpDirAsHomeHook
+    ];
+  });
+
+  meta = {
+    description = "CLI for CrewAI: scaffold, run, deploy and manage AI agent crews";
+    homepage = "https://github.com/crewAIInc/crewAI/tree/main/lib/cli";
+    changelog = "https://github.com/crewAIInc/crewAI/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ GaetanLepage ];
+    mainProgram = "crewai";
+  };
+})
diff --git a/pkgs/development/python-modules/crewai-core/default.nix b/pkgs/development/python-modules/crewai-core/default.nix
new file mode 100644
index 000000000000..de9591bca56a
--- /dev/null
+++ b/pkgs/development/python-modules/crewai-core/default.nix
@@ -0,0 +1,92 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+
+  # build-system
+  hatchling,
+
+  # dependencies
+  appdirs,
+  cryptography,
+  httpx,
+  opentelemetry-api,
+  opentelemetry-exporter-otlp-proto-http,
+  opentelemetry-sdk,
+  packaging,
+  portalocker,
+  pydantic,
+  pyjwt,
+  rich,
+  tomli,
+
+  # tests
+  pytestCheckHook,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "crewai-core";
+  version = "1.15.10";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "crewAIInc";
+    repo = "crewAI";
+    tag = finalAttrs.version;
+    hash = "sha256-O59F1TqQsTW2TBkuUTiNu4f35UeajRVSVc2HomxHK3Q=";
+  };
+
+  sourceRoot = "${finalAttrs.src.name}/lib/crewai-core";
+
+  build-system = [ hatchling ];
+
+  pythonRelaxDeps = [
+    "opentelemetry-api"
+    "opentelemetry-exporter-otlp-proto-http"
+    "opentelemetry-sdk"
+    "portalocker"
+    "pydantic"
+    "tomli"
+  ];
+
+  dependencies = [
+    appdirs
+    cryptography
+    httpx
+    opentelemetry-api
+    opentelemetry-exporter-otlp-proto-http
+    opentelemetry-sdk
+    packaging
+    portalocker
+    pydantic
+    pyjwt
+    rich
+    tomli
+  ];
+
+  pythonImportsCheck = [ "crewai_core" ];
+
+  nativeCheckInputs = [
+    pytestCheckHook
+  ];
+
+  enabledTestPaths = [
+    "tests"
+  ];
+
+  pytestFlags = [
+    # Avoid loading the repository-wide conftest.py (needs many optional test deps)
+    "--confcutdir=tests"
+    # Drop addopts from the repository-wide pyproject.toml (xdist, socket, timeout)
+    "--override-ini=addopts="
+  ];
+
+  meta = {
+    description = "Shared utilities for CrewAI (version, paths, user-data, telemetry, printer)";
+    homepage = "https://github.com/crewAIInc/crewAI/tree/main/lib/crewai-core";
+    changelog = "https://github.com/crewAIInc/crewAI/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ GaetanLepage ];
+  };
+})
diff --git a/pkgs/development/python-modules/crewai/default.nix b/pkgs/development/python-modules/crewai/default.nix
index 204551a50f69..7e500de2cb1c 100644
--- a/pkgs/development/python-modules/crewai/default.nix
+++ b/pkgs/development/python-modules/crewai/default.nix
@@ -1,7 +1,6 @@
 {
   lib,
   buildPythonPackage,
-  fetchFromGitHub,
   nix-update-script,
 
   # build-system
@@ -11,14 +10,17 @@
   aiofiles,
   aiosqlite,
   appdirs,
+  cel-python,
   chromadb,
   click,
+  crewai-cli,
+  crewai-core,
+  httpx,
   instructor,
   json-repair,
   json5,
   jsonref,
   lancedb,
-  litellm,
   mcp,
   openai,
   opentelemetry-api,
@@ -31,12 +33,14 @@
   pydantic-settings,
   pyjwt,
   python-dotenv,
+  pyyaml,
   regex,
-  textual,
   tokenizers,
   tomli,
   tomli-w,
-  uv,
+
+  # optional-dependencies
+  litellm,
 
   # tests
   a2a-sdk,
@@ -50,34 +54,24 @@
   pytestCheckHook,
   qdrant-client,
   vcrpy,
-  versionCheckHook,
   writableTmpDirAsHomeHook,
 }:
 
 buildPythonPackage (finalAttrs: {
   pname = "crewai";
-  version = "1.14.4";
+  version = "1.15.10";
   pyproject = true;
+  __structuredAttrs = true;
 
-  src = fetchFromGitHub {
-    owner = "crewAIInc";
-    repo = "crewAI";
-    tag = finalAttrs.version;
-    hash = "sha256-QrJM2oVoqos8GMhrn9E6i1m1O1guP/q+51b8NYtJA5Q=";
-  };
+  inherit (crewai-core) src;
 
-  postPatch = ''
-    substituteInPlace ../../conftest.py \
-      --replace-fail \
-        "import vcr.stubs.httpx_stubs as httpx_stubs" \
-        "import vcr.stubs.httpcore_stubs as httpx_stubs" \
-      --replace-fail \
-        "def _patched_make_vcr_request(httpx_request: Any, **kwargs: Any) -> Any:" \
-        "def _patched_make_vcr_request(httpx_request: Any, request_body: Any = None, **kwargs: Any) -> Any:" \
-      --replace-fail \
-        "raw_body = httpx_request.read()" \
-        "raw_body = request_body if request_body is not None else httpx_request.read()"
-  '';
+  postPatch =
+    # The crewai executable is provided by the crewai-cli package (a dependency);
+    # drop the duplicate entry point to avoid a file collision in shared environments.
+    ''
+      substituteInPlace pyproject.toml \
+        --replace-fail 'crewai = "crewai_cli.cli:crewai"' ""
+    '';
 
   sourceRoot = "${finalAttrs.src.name}/lib/crewai";
 
@@ -90,7 +84,6 @@ buildPythonPackage (finalAttrs: {
     "json-repair"
     "json5"
     "lancedb"
-    "litellm"
     "mcp"
     "openai"
     "opentelemetry-api"
@@ -106,21 +99,23 @@ buildPythonPackage (finalAttrs: {
     "tokenizers"
     "tomli"
     "tomli-w"
-    "uv"
   ];
 
   dependencies = [
     aiofiles
     aiosqlite
     appdirs
+    cel-python
     chromadb
     click
+    crewai-cli
+    crewai-core
+    httpx
     instructor
     json-repair
     json5
     jsonref
     lancedb
-    litellm
     mcp
     openai
     opentelemetry-api
@@ -133,19 +128,21 @@ buildPythonPackage (finalAttrs: {
     pydantic-settings
     pyjwt
     python-dotenv
+    pyyaml
     regex
-    textual
     tokenizers
     tomli
     tomli-w
-    uv
   ];
 
+  optional-dependencies = {
+    litellm = [ litellm ];
+  };
+
   pythonImportsCheck = [ "crewai" ];
 
   disabledTestPaths = [
     # Ignore tests that require {chromadb, telemetry, security, test_agent}
-    "tests/cli/test_git.py" # require git
     "tests/test_crew.py" # require require API keys
     "tests/rag/chromadb/test_client.py" # issue with chromadb
     "tests/telemetry/test_telemetry.py" # telemetry need network access
@@ -180,6 +177,7 @@ buildPythonPackage (finalAttrs: {
     "tests/agents/test_lite_agent.py"
 
     # Tests requiring crewai-files
+    "tests/agents/test_agent_executor.py"
     "tests/llms/test_multimodal.py"
     "tests/llms/test_multimodal_integration.py"
     "tests/test_agent_multimodal.py"
@@ -476,16 +474,9 @@ buildPythonPackage (finalAttrs: {
     "test_areset_wrong_client_type"
     "test_adelete_collection"
 
-    # Tests requiring litellm
-    "test_litellm_anthropic_error_handling"
-    "test_litellm_auth_error_handling"
-    "test_crew_agent_executor_litellm_auth_error"
-    "test_agent_with_callbacks"
-    "test_crew_memoization"
-    "test_task_guardrail"
-    "test_crew_name"
-    "test_get_conversion_instructions_non_gpt"
-    "test_supports_function_calling_false"
+    # Tests requiring crewai-tools
+    "test_non_ok_response_becomes_a_tool_failure"
+    "test_ok_response_still_returns_json"
 
     # Tests requiring network
     "test_agent_events_have_event_ids"
@@ -546,13 +537,14 @@ buildPythonPackage (finalAttrs: {
     anthropic
     boto3
     google-genai
-    pytestCheckHook
+    # litellm is an optional dependency upstream, but the test suite requires it
+    litellm
     pytest-asyncio
     pytest-recording
     pytest-xdist
+    pytestCheckHook
     qdrant-client
     vcrpy
-    versionCheckHook
     writableTmpDirAsHomeHook
   ];
 
@@ -574,6 +566,5 @@ buildPythonPackage (finalAttrs: {
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ liberodark ];
     platforms = lib.platforms.linux;
-    mainProgram = "crewai";
   };
 })
diff --git a/pkgs/development/python-modules/databricks-sdk/default.nix b/pkgs/development/python-modules/databricks-sdk/default.nix
index 1ba07027e78e..2addea4ec542 100644
--- a/pkgs/development/python-modules/databricks-sdk/default.nix
+++ b/pkgs/development/python-modules/databricks-sdk/default.nix
@@ -22,7 +22,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "databricks-sdk";
-  version = "0.122.0";
+  version = "0.123.0";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -30,7 +30,7 @@ buildPythonPackage (finalAttrs: {
     owner = "databricks";
     repo = "databricks-sdk-py";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-guq9OWQpMd9fFe3/ZNJ4CNgc3ljov17F2WbE564tHBE=";
+    hash = "sha256-mSxTk8wq9Hq9xL20Jt8kWpry5F5SljMIcFsv8UohY1c=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/deebot-client/default.nix b/pkgs/development/python-modules/deebot-client/default.nix
index 1cbfa7e81bc8..8611b867da24 100644
--- a/pkgs/development/python-modules/deebot-client/default.nix
+++ b/pkgs/development/python-modules/deebot-client/default.nix
@@ -4,6 +4,7 @@
   aiomqtt,
   buildPythonPackage,
   cachetools,
+  cryptography,
   defusedxml,
   docker,
   fetchFromGitHub,
@@ -23,7 +24,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "deebot-client";
-  version = "18.4.0";
+  version = "18.5.1";
   pyproject = true;
 
   disabled = pythonOlder "3.14";
@@ -32,12 +33,12 @@ buildPythonPackage (finalAttrs: {
     owner = "DeebotUniverse";
     repo = "client.py";
     tag = finalAttrs.version;
-    hash = "sha256-SFOwIK1rjvbLw5W0d6vzXVUDlUOlBYOu/GMvlwwFDs0=";
+    hash = "sha256-7edi2hTn4K+lJDKJbMmu4JY86fhmSUcRvxr1ZzaurSU=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-mvHHwfeP7k8bvOMFcNTn7wZlumMJ8wx7H+p8SNreIuE=";
+    hash = "sha256-j70hY9MskVKrfWYtQKj13LVdC8WbHdPe9w/88BWPvlM=";
   };
 
   nativeBuildInputs = [
@@ -53,6 +54,7 @@ buildPythonPackage (finalAttrs: {
     aiohttp
     aiomqtt
     cachetools
+    cryptography
     defusedxml
     orjson
   ];
diff --git a/pkgs/development/python-modules/django-crispy-forms/default.nix b/pkgs/development/python-modules/django-crispy-forms/default.nix
index ad544f5eff1e..26194d5e8a1e 100644
--- a/pkgs/development/python-modules/django-crispy-forms/default.nix
+++ b/pkgs/development/python-modules/django-crispy-forms/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "django-crispy-forms";
-  version = "2.6";
+  version = "2.7";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "django-crispy-forms";
     repo = "django-crispy-forms";
     tag = finalAttrs.version;
-    hash = "sha256-yU5xNlV3OFZUdO6zK1sG7mHGkNXLwZocEH8JhvAwyAc=";
+    hash = "sha256-Fi4g1jAMUZP3th22TS/n8nIKz8yKgJDj4oJq0+5+W4I=";
   };
 
   propagatedBuildInputs = [
diff --git a/pkgs/development/python-modules/django-localflavor/default.nix b/pkgs/development/python-modules/django-localflavor/default.nix
index 16561e2d5871..c00292c2676c 100644
--- a/pkgs/development/python-modules/django-localflavor/default.nix
+++ b/pkgs/development/python-modules/django-localflavor/default.nix
@@ -17,14 +17,14 @@
 
 buildPythonPackage rec {
   pname = "django-localflavor";
-  version = "5.0";
+  version = "5.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "django";
     repo = "django-localflavor";
     tag = version;
-    hash = "sha256-eYhkWfxoZlnxhCIaqBhoEt0+SbkZKkUNUAy4p3tYf4A=";
+    hash = "sha256-pvfXZVHL1/uXibfhimF3T76w2KwlwEVhJFe2VXWM55k=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/django-simple-captcha/default.nix b/pkgs/development/python-modules/django-simple-captcha/default.nix
index 56323e781f2b..a6951cb80730 100644
--- a/pkgs/development/python-modules/django-simple-captcha/default.nix
+++ b/pkgs/development/python-modules/django-simple-captcha/default.nix
@@ -20,14 +20,14 @@
 
 buildPythonPackage rec {
   pname = "django-simple-captcha";
-  version = "0.6.3";
+  version = "0.7.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mbi";
     repo = "django-simple-captcha";
     tag = "v${version}";
-    hash = "sha256-Fee7YfIWGyKMsN7XQz10bjIhbjUYRuY7Oe4Q8n8ILz0=";
+    hash = "sha256-httRO6OYKgo3/E2Z9EFdhuuLqcrcfB3EgxptZ7XDYlc=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/django-tenants/default.nix b/pkgs/development/python-modules/django-tenants/default.nix
index 818ee54866ae..345e01ead7cd 100644
--- a/pkgs/development/python-modules/django-tenants/default.nix
+++ b/pkgs/development/python-modules/django-tenants/default.nix
@@ -2,7 +2,6 @@
   lib,
   buildPythonPackage,
   fetchFromGitHub,
-  pyprojectVersionPatchHook,
   setuptools,
   django,
   psycopg,
@@ -10,20 +9,16 @@
 
 buildPythonPackage rec {
   pname = "django-tenants";
-  version = "3.11.2";
+  version = "3.12.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "django-tenants";
     repo = "django-tenants";
     tag = "v${version}";
-    hash = "sha256-J7poXEHbRxhULYwFbV4tktet5wdsvd7RNHgivETy9+8=";
+    hash = "sha256-0HFkLG2GDECiaG9OKYR4V1q5oy0vzmthlKoiSM5IIFc=";
   };
 
-  nativeBuildInputs = [
-    pyprojectVersionPatchHook
-  ];
-
   build-system = [ setuptools ];
 
   dependencies = [
diff --git a/pkgs/development/python-modules/django-vcache/default.nix b/pkgs/development/python-modules/django-vcache/default.nix
index 962bee51346c..8a37756f3cdc 100644
--- a/pkgs/development/python-modules/django-vcache/default.nix
+++ b/pkgs/development/python-modules/django-vcache/default.nix
@@ -12,19 +12,19 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "django-vcache";
-  version = "2.3.0";
+  version = "3.1.1";
   pyproject = true;
 
   src = fetchFromGitLab {
     owner = "glitchtip";
     repo = "django-vcache";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-/LyNJlz3Tx6tgQAwY4vIIsDlL2nCvKM6bna2bXyP5So=";
+    hash = "sha256-9KsIijeWC97IAD+xlE78UvSSIUp5DbpOdaDRcw8ZxWQ=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) src;
-    hash = "sha256-a9+3k6YTotmj+LBO6OyVd2NUh3hpLwpKXJsX7pBxXNE=";
+    hash = "sha256-tpf0r32wNJ/XCmNutoirTobqKgsEX96s4MsI6+p7KlQ=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/dsmr-parser/default.nix b/pkgs/development/python-modules/dsmr-parser/default.nix
index 0abdc91b1741..1dd9f92d7f3a 100644
--- a/pkgs/development/python-modules/dsmr-parser/default.nix
+++ b/pkgs/development/python-modules/dsmr-parser/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "dsmr-parser";
-  version = "1.11.1";
+  version = "1.11.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ndokter";
     repo = "dsmr_parser";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-2q2e1/xt8a24QmACZUc9zWOnAiFhEYMg+44kOlx1JAk=";
+    hash = "sha256-MIiJwCRIUSrmp+wfJrfCPW0JY22ATfA66uENgPySgCc=";
   };
 
   pythonRelaxDeps = [ "dlms_cosem" ];
diff --git a/pkgs/development/python-modules/eigenpy/default.nix b/pkgs/development/python-modules/eigenpy/default.nix
index 6d518ff7e734..b3eb184358af 100644
--- a/pkgs/development/python-modules/eigenpy/default.nix
+++ b/pkgs/development/python-modules/eigenpy/default.nix
@@ -3,22 +3,17 @@
 
   buildPythonPackage,
   fetchFromGitHub,
-  writableTmpDirAsHomeHook,
   fontconfig,
 
   # nativeBuildInputs
-  cmake,
-  doxygen,
-  graphviz,
-  pkg-config,
   scipy,
 
   # buildInputs
   boost,
+  jrl-cmakemodules,
 
   # propagatedBuildInputs
   eigen,
-  jrl-cmakemodules,
   numpy,
 }:
 
@@ -40,7 +35,7 @@ buildPythonPackage rec {
     "out"
   ];
 
-  cmakeFlags = [
+  cmakeFlags = jrl-cmakemodules.docsCmakeFlags ++ [
     "-DINSTALL_DOCUMENTATION=ON"
     "-DBUILD_TESTING=ON"
     "-DBUILD_TESTING_SCIPY=ON"
@@ -51,20 +46,17 @@ buildPythonPackage rec {
   # Fontconfig error: Cannot load default config file: No such file: (null)
   env.FONTCONFIG_FILE = "${fontconfig.out}/etc/fonts/fonts.conf";
 
-  nativeBuildInputs = [
-    cmake
-    doxygen
-    graphviz
-    pkg-config
+  nativeBuildInputs = jrl-cmakemodules.docsNativeBuildInputs ++ [
     scipy
-    writableTmpDirAsHomeHook
   ];
 
-  buildInputs = [ boost ];
+  buildInputs = [
+    boost
+    jrl-cmakemodules
+  ];
 
   propagatedBuildInputs = [
     eigen
-    jrl-cmakemodules
     numpy
   ];
 
diff --git a/pkgs/development/python-modules/energieleser/default.nix b/pkgs/development/python-modules/energieleser/default.nix
index f01d2c2a223a..ec82ab412e1e 100644
--- a/pkgs/development/python-modules/energieleser/default.nix
+++ b/pkgs/development/python-modules/energieleser/default.nix
@@ -11,14 +11,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "energieleser";
-  version = "0.1.5";
+  version = "0.1.6";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "nineti-GmbH";
     repo = "energieleser.py";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-vJ4eJaf0ue4N9aXwsPR79sTVt3NM1GKNw5XomhQUUdU=";
+    hash = "sha256-bg+XdASeegWLWU7kjywmMSih3SarVB3Mc2YHVCnU93w=";
   };
 
   build-system = [ poetry-core ];
diff --git a/pkgs/development/python-modules/etils/default.nix b/pkgs/development/python-modules/etils/default.nix
index 469e2365dc30..cca686975039 100644
--- a/pkgs/development/python-modules/etils/default.nix
+++ b/pkgs/development/python-modules/etils/default.nix
@@ -1,5 +1,6 @@
 {
   lib,
+  stdenv,
   buildPythonPackage,
   fetchFromGitHub,
 
@@ -139,6 +140,10 @@ buildPythonPackage (finalAttrs: {
     "test_array_spec_valid"
     "test_obj"
     "test_spec_like"
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    # AssertionError: assert '/tmp/to/something' == '/private/tmp/to/something'
+    "test_repr"
   ];
 
   disabledTestPaths = [
diff --git a/pkgs/development/python-modules/example-robot-data/default.nix b/pkgs/development/python-modules/example-robot-data/default.nix
index fe452c73b439..f8ba30e176e9 100644
--- a/pkgs/development/python-modules/example-robot-data/default.nix
+++ b/pkgs/development/python-modules/example-robot-data/default.nix
@@ -27,7 +27,6 @@ toPythonModule (
     propagatedBuildInputs = [
       pinocchio
     ]
-    ++ super.propagatedBuildInputs
     ++ lib.optional buildStandalone example-robot-data;
 
     nativeCheckInputs = [
diff --git a/pkgs/development/python-modules/exllamav3/default.nix b/pkgs/development/python-modules/exllamav3/default.nix
index c339bd7165e1..86cd146e35ee 100644
--- a/pkgs/development/python-modules/exllamav3/default.nix
+++ b/pkgs/development/python-modules/exllamav3/default.nix
@@ -27,14 +27,14 @@ let
 in
 buildPythonPackage.override { inherit (torch) stdenv; } (finalAttrs: {
   pname = "exllamav3";
-  version = "1.2.1";
+  version = "1.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "turboderp-org";
     repo = "exllamav3";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ErsCtCM/T1YuCQAwrKhc860ETLgiS5Qu4nrQSuEzsPk=";
+    hash = "sha256-pWdh5fiGZEkdSLXvI5DAEdj6XmBFquzew57L1YIsEg8=";
   };
 
   pythonRelaxDeps = [
diff --git a/pkgs/development/python-modules/fastapi-mail/default.nix b/pkgs/development/python-modules/fastapi-mail/default.nix
index 32b330d35bbf..cd73682509b9 100644
--- a/pkgs/development/python-modules/fastapi-mail/default.nix
+++ b/pkgs/development/python-modules/fastapi-mail/default.nix
@@ -12,6 +12,7 @@
   poetry-core,
   pydantic-settings,
   pydantic,
+  pyprojectVersionPatchHook,
   pytest-asyncio,
   pytestCheckHook,
   redis,
@@ -21,32 +22,27 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "fastapi-mail";
-  version = "1.6.2";
+  version = "1.6.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "sabuhish";
     repo = "fastapi-mail";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-oWm2FvXCyz+0QRvClcJoKF17rWggAtQasa5h1pZ6N4Y=";
+    hash = "sha256-7Of7PSfY5lFbuxqBM5IyCnOa1CwbOijruSSrRylz3S8=";
   };
 
-  pythonRelaxDeps = [
-    "aiosmtplib"
-    "cryptography"
-    "email-validator"
-    "regex"
-    "pydantic"
-  ];
-
   build-system = [ poetry-core ];
 
+  nativeBuildInputs = [ pyprojectVersionPatchHook ];
+
   dependencies = [
     aiosmtplib
     blinker
     cryptography
     email-validator
     fakeredis
+    httpx
     jinja2
     pydantic
     pydantic-settings
@@ -55,7 +51,6 @@ buildPythonPackage (finalAttrs: {
   ];
 
   optional-dependencies = {
-    httpx = [ httpx ];
     redis = [ redis ];
   };
 
diff --git a/pkgs/development/python-modules/fastbencode/default.nix b/pkgs/development/python-modules/fastbencode/default.nix
index 79d8045bdb0b..0428ff424fe1 100644
--- a/pkgs/development/python-modules/fastbencode/default.nix
+++ b/pkgs/development/python-modules/fastbencode/default.nix
@@ -12,19 +12,19 @@
 
 buildPythonPackage rec {
   pname = "fastbencode";
-  version = "0.3.10";
+  version = "0.3.11";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "breezy-team";
     repo = "fastbencode";
     tag = "v${version}";
-    hash = "sha256-e+Ei+UIJ5sve6k3ApPJ2nswTgZLkzxZmpthK/f/rfCs=";
+    hash = "sha256-hQwu0VKJ6tp155meE5JXbk5xEmcfktBHgUqVJYs2exM=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname version src;
-    hash = "sha256-dqD/QF6/XCB9H/QkEobfIOo9S663fh9AHUuHqCoEcLM=";
+    hash = "sha256-QHu3ryg7beYVBSWFxkX7CaJLcsrmGpGAm9Ee9ZHKTgk=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/python-modules/fressnapftracker/default.nix b/pkgs/development/python-modules/fressnapftracker/default.nix
index 53b1b86b88dc..d1fc2d7395b8 100644
--- a/pkgs/development/python-modules/fressnapftracker/default.nix
+++ b/pkgs/development/python-modules/fressnapftracker/default.nix
@@ -15,14 +15,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "fressnapftracker";
-  version = "0.2.2";
+  version = "0.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "eifinger";
     repo = "fressnapftracker";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-gJsE/1HnUXEDa5Y7eLtHexx+G00MGQDZJu3pui9OeMM=";
+    hash = "sha256-4ZsK/yW+E4nwP5S300FPXnfPe11fIL2ULII2SkhLAys=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/python-modules/funsor/default.nix b/pkgs/development/python-modules/funsor/default.nix
index 04ece9b20542..4c57b7fbb58c 100644
--- a/pkgs/development/python-modules/funsor/default.nix
+++ b/pkgs/development/python-modules/funsor/default.nix
@@ -2,7 +2,6 @@
   lib,
   buildPythonPackage,
   fetchFromGitHub,
-  fetchpatch,
 
   # build-system
   setuptools,
@@ -29,7 +28,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "funsor";
-  version = "0.4.7";
+  version = "0.4.8";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -37,15 +36,15 @@ buildPythonPackage (finalAttrs: {
     owner = "pyro-ppl";
     repo = "funsor";
     tag = finalAttrs.version;
-    hash = "sha256-0STJv1OOliJaHdmYUXdnOnocH3hVXceH/Uw5nILvT+U=";
+    hash = "sha256-iTkDd6vz4wesY3jABSMxLtTKioP98DhGB0plLL+vhNY=";
   };
 
   patches = [
-    # Compatibility with torch >= 2.5 (arg_constraints is now a property)
-    (fetchpatch {
-      url = "https://github.com/pyro-ppl/funsor/commit/c5e2a48d73cad4e98058147af4090171272a44e5.patch";
-      hash = "sha256-sTR+hbJtS0Th5sIqlvB2bReEC0wnEbnB7gAiZKiqjAQ=";
-    })
+    # Compatibility with torch >= 2.5, where `Uniform.arg_constraints` is a property.
+    # Remaining part of the pending upstream PR https://github.com/pyro-ppl/funsor/pull/610
+    # (the `Uniform` parameter registration was already merged as part of
+    # https://github.com/pyro-ppl/funsor/pull/614).
+    ./torch-arg-constraints-property.patch
   ];
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/funsor/torch-arg-constraints-property.patch b/pkgs/development/python-modules/funsor/torch-arg-constraints-property.patch
new file mode 100644
index 000000000000..e6dd756af6d1
--- /dev/null
+++ b/pkgs/development/python-modules/funsor/torch-arg-constraints-property.patch
@@ -0,0 +1,52 @@
+diff --git a/funsor/distribution.py b/funsor/distribution.py
+index 5a48ecb..cfb2d2e 100644
+--- a/funsor/distribution.py
++++ b/funsor/distribution.py
+@@ -309,7 +309,10 @@ class Distribution(Funsor, metaclass=DistributionMeta):
+     @classmethod
+     @functools.lru_cache(maxsize=5000)
+     def _infer_param_domain(cls, name, raw_shape):
+-        support = cls.dist_class.arg_constraints.get(name, None)
++        constraints = getattr(cls.dist_class, "arg_constraints", {})
++        if isinstance(constraints, property):
++            constraints = {}
++        support = constraints.get(name, None)
+         # XXX: if the backend does not have the same definition of constraints, we should
+         # define backend-specific distributions and overide these `infer_value_domain`,
+         # `infer_param_domain` methods.
+@@ -330,9 +333,8 @@ class Distribution(Funsor, metaclass=DistributionMeta):
+         # for discrete multivariate distributions in Pyro
+         elif support_name == "Real":
+             if name == "logits" and (
+-                "probs" in cls.dist_class.arg_constraints
+-                and type(cls.dist_class.arg_constraints["probs"]).__name__.lstrip("_")
+-                == "Simplex"
++                "probs" in constraints
++                and type(constraints.get("probs")).__name__.lstrip("_") == "Simplex"
+             ):
+                 output = Reals[raw_shape[-1 - event_dim :]]
+             else:
+@@ -377,10 +379,13 @@ def make_dist(
+     backend_dist_class, param_names=(), generate_eager=True, generate_to_funsor=True
+ ):
+     if not param_names:
++        constraints = getattr(backend_dist_class, "arg_constraints", {})
++        if isinstance(constraints, property):
++            constraints = {}
+         param_names = tuple(
+             name
+             for name in inspect.getfullargspec(backend_dist_class.__init__)[0][1:]
+-            if name in backend_dist_class.arg_constraints
++            if name in constraints
+         )
+ 
+     @makefun.with_signature(
+@@ -608,7 +613,7 @@ class CoerceDistributionToFunsor:
+     def __call__(self, cls, args, kwargs):
+         # Check whether distribution class takes any tensor inputs.
+         arg_constraints = getattr(cls, "arg_constraints", None)
+-        if not arg_constraints:
++        if not arg_constraints or isinstance(arg_constraints, property):
+             return
+ 
+         # Check whether any tensor inputs are actually funsors.
diff --git a/pkgs/development/python-modules/gepa/default.nix b/pkgs/development/python-modules/gepa/default.nix
new file mode 100644
index 000000000000..c81c06a0ee70
--- /dev/null
+++ b/pkgs/development/python-modules/gepa/default.nix
@@ -0,0 +1,35 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "gepa";
+  version = "0.1.3";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "gepa-ai";
+    repo = "gepa";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-9gxOfjiOK1BP+YiAY4SufohMyPaUM5c7jJfJsGnRgSs=";
+  };
+
+  build-system = [ setuptools ];
+
+  pythonImportsCheck = [ "gepa" ];
+
+  # test suite requires network access
+  doCheck = false;
+
+  meta = {
+    description = "A framework for optimizing textual system components using LLM-based reflection and Pareto-efficient evolutionary search";
+    homepage = "https://github.com/gepa-ai/gepa";
+    changelog = "https://github.com/gepa-ai/gepa/releases/tag/v${finalAttrs.version}";
+    maintainers = with lib.maintainers; [ jherland ];
+    license = lib.licenses.mit;
+  };
+})
diff --git a/pkgs/development/python-modules/hass-client/default.nix b/pkgs/development/python-modules/hass-client/default.nix
index ba0fdc3aec80..5b8ebf454ffa 100644
--- a/pkgs/development/python-modules/hass-client/default.nix
+++ b/pkgs/development/python-modules/hass-client/default.nix
@@ -7,25 +7,28 @@
   fetchFromGitHub,
   lib,
   orjson,
+  pyprojectVersionPatchHook,
+  pytest-asyncio,
+  pytest-cov-stub,
+  pytestCheckHook,
   setuptools,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "hass-client";
-  version = "1.2.3";
+  version = "1.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "music-assistant";
     repo = "python-hass-client";
-    tag = version;
-    hash = "sha256-uCVwxa/KTiOmaexmdeynL2LSqBhDu8Zfre+Nh9Oauiw=";
+    tag = finalAttrs.version;
+    hash = "sha256-mrS3kuG/6ZE02B0Ua10AAAsgVBrEDRJxNfmIHT+EHWw=";
   };
 
-  postPatch = ''
-    substituteInPlace pyproject.toml \
-      --replace-fail "1.0.0" "${version}"
-  '';
+  nativeBuildInputs = [
+    pyprojectVersionPatchHook
+  ];
 
   build-system = [
     setuptools
@@ -48,14 +51,17 @@ buildPythonPackage rec {
     "hass_client"
   ];
 
-  # upstream has no tests
-  doCheck = false;
+  nativeCheckInputs = [
+    pytest-asyncio
+    pytest-cov-stub
+    pytestCheckHook
+  ];
 
   meta = {
-    changelog = "https://github.com/music-assistant/python-hass-client/releases/tag/${version}";
+    changelog = "https://github.com/music-assistant/python-hass-client/releases/tag/${finalAttrs.version}";
     description = "Basic client for connecting to Home Assistant over websockets and REST";
     homepage = "https://github.com/music-assistant/python-hass-client";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ dotlambda ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/iamdata/default.nix b/pkgs/development/python-modules/iamdata/default.nix
index 00e924d73860..fb58f9f99440 100644
--- a/pkgs/development/python-modules/iamdata/default.nix
+++ b/pkgs/development/python-modules/iamdata/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "iamdata";
-  version = "0.1.202607301";
+  version = "0.1.202608031";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "cloud-copilot";
     repo = "iam-data-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-lEDf8Su+wWwS1PG3zrU26aL4rtXtFE7itxTd7aLqP+0=";
+    hash = "sha256-pOaSqBOTIwEDqXMHVeCXcSckbbpKaaa7UkwibnOhLhQ=";
   };
 
   __darwinAllowLocalNetworking = true;
diff --git a/pkgs/development/python-modules/ibm-cloud-sdk-core/default.nix b/pkgs/development/python-modules/ibm-cloud-sdk-core/default.nix
index 5d10f3739173..d19cf94ba4f0 100644
--- a/pkgs/development/python-modules/ibm-cloud-sdk-core/default.nix
+++ b/pkgs/development/python-modules/ibm-cloud-sdk-core/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage rec {
   pname = "ibm-cloud-sdk-core";
-  version = "3.25.0";
+  version = "3.26.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "IBM";
     repo = "python-sdk-core";
     tag = "v${version}";
-    hash = "sha256-UA4xZ9doaz/4yYdbXJoevXrdzsrfuv/nhSd2+rkHAQ4=";
+    hash = "sha256-indY3DCATi3Czs8Btlyhx3H1ZsMZSbgddIa9XC06FEI=";
   };
 
   pythonRelaxDeps = [ "requests" ];
diff --git a/pkgs/development/python-modules/imgw-pib/default.nix b/pkgs/development/python-modules/imgw-pib/default.nix
index 8754970e098a..5b29b4593a74 100644
--- a/pkgs/development/python-modules/imgw-pib/default.nix
+++ b/pkgs/development/python-modules/imgw-pib/default.nix
@@ -17,14 +17,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "imgw-pib";
-  version = "2.5.0";
+  version = "2.5.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "bieniu";
     repo = "imgw-pib";
     tag = finalAttrs.version;
-    hash = "sha256-fbW350Foj9X3JgtcN+M3LpHcmnh/eWvULW2w7cc7lig=";
+    hash = "sha256-nxQeYLDf7TEbbvbEygssH0X/sXLnoXoB1teZM8w70jQ=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/lance-namespace-urllib3-client/default.nix b/pkgs/development/python-modules/lance-namespace-urllib3-client/default.nix
index d059a9441e63..856391e06be0 100644
--- a/pkgs/development/python-modules/lance-namespace-urllib3-client/default.nix
+++ b/pkgs/development/python-modules/lance-namespace-urllib3-client/default.nix
@@ -18,7 +18,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "lance-namespace-urllib3-client";
-  version = "0.8.6";
+  version = "0.9.0";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -26,7 +26,7 @@ buildPythonPackage (finalAttrs: {
     owner = "lancedb";
     repo = "lance-namespace";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-QYzVsarjTg2arNNuCFbVgtA7rfLTm6AJD3liNr3QuSU=";
+    hash = "sha256-8BfKK7k7NDptFYjaJ312QID/tIr24y3oGTmxHz/b2w0=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/python/lance_namespace_urllib3_client";
diff --git a/pkgs/development/python-modules/lance-namespace/default.nix b/pkgs/development/python-modules/lance-namespace/default.nix
index 1f570a3a5be5..371949cc66fc 100644
--- a/pkgs/development/python-modules/lance-namespace/default.nix
+++ b/pkgs/development/python-modules/lance-namespace/default.nix
@@ -30,7 +30,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "lance-namespace";
-  version = "0.8.6";
+  version = "0.9.0";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -38,7 +38,7 @@ buildPythonPackage (finalAttrs: {
     owner = "lancedb";
     repo = "lance-namespace";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-QYzVsarjTg2arNNuCFbVgtA7rfLTm6AJD3liNr3QuSU=";
+    hash = "sha256-8BfKK7k7NDptFYjaJ312QID/tIr24y3oGTmxHz/b2w0=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/python/lance_namespace";
diff --git a/pkgs/development/python-modules/lancedb/default.nix b/pkgs/development/python-modules/lancedb/default.nix
index d06a03ae56ba..096766b79646 100644
--- a/pkgs/development/python-modules/lancedb/default.nix
+++ b/pkgs/development/python-modules/lancedb/default.nix
@@ -42,7 +42,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "lancedb";
-  version = "0.32.0";
+  version = "0.36.0";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -50,16 +50,36 @@ buildPythonPackage (finalAttrs: {
     owner = "lancedb";
     repo = "lancedb";
     tag = "python-v${finalAttrs.version}";
-    hash = "sha256-OIoQCk0YlWpaaau4AiWxarvH4oy1rAjaS9yvs3mIzzo=";
+    hash = "sha256-JOUrLHoVBZs4B8UGYFZIs00kzBnxFFAkTXFIz2bOZ7w=";
   };
 
   buildAndTestSubdir = "python";
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-rfAhvC6byg134NF21CR5n0A0DL42CLGy7VvHi9aZUrw=";
+    hash = "sha256-KEczUf/e3+Eb53pouOzajp+yVjWctDUNbdVEgQVoCZE=";
   };
 
+  # `lance-linalg`'s AVX-512 VNNI u8-distance kernels call `_mm512_dpbusd_epi32` /
+  # `_mm512_dpwssd_epi32`. With the current toolchain, stdarch's signature for these intrinsics
+  # mismatches LLVM's `llvm.x86.avx512.vpdpbusd.512`, so the crate fails to compile.
+  # Drop the AVX-512 VNNI dispatch branch: the kernels then become dead code (their module is
+  # crate-private and otherwise only used from `#[cfg(test)]`, which is not built for
+  # dependencies), so they are never codegen'd and runtime dispatch falls back to the equivalent
+  # AVX2 / scalar kernels.
+  postPatch = ''
+    lanceDistance="$cargoDepsCopy/source-registry-0/lance-linalg-9.0.0/src/distance"
+
+    substituteInPlace "$lanceDistance/dot_u8.rs" \
+      --replace-fail "return |a, b| unsafe { x86::dot_u8_avx512_vnni(a, b) };" ""
+
+    substituteInPlace "$lanceDistance/l2_u8.rs" \
+      --replace-fail "return |a, b| unsafe { x86::l2_u8_avx512_vnni(a, b) };" ""
+
+    substituteInPlace "$lanceDistance/cosine_u8.rs" \
+      --replace-fail "return |a, b| unsafe { x86::cosine_u8_accum_avx512_vnni(a, b) };" ""
+  '';
+
   build-system = [ rustPlatform.maturinBuildHook ];
 
   nativeBuildInputs = [
@@ -110,7 +130,7 @@ buildPythonPackage (finalAttrs: {
   disabledTests = [
     # Requires internet access
     # RuntimeError: lance error: LanceError(IO): Generic S3 error
-    "test_bucket_without_dots_passes"
+    "test_bucket_without_dots_is_not_rejected"
 
     # lance_namespace.errors.UnsupportedOperationError: Not supported: create_empty_table
     "TestAsyncNamespaceConnection"
diff --git a/pkgs/development/python-modules/langgraph-runtime-inmem/default.nix b/pkgs/development/python-modules/langgraph-runtime-inmem/default.nix
index 2d4495724662..b71f232b093c 100644
--- a/pkgs/development/python-modules/langgraph-runtime-inmem/default.nix
+++ b/pkgs/development/python-modules/langgraph-runtime-inmem/default.nix
@@ -14,7 +14,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "langgraph-runtime-inmem";
-  version = "0.31.1";
+  version = "0.31.2";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -22,7 +22,7 @@ buildPythonPackage (finalAttrs: {
   src = fetchPypi {
     pname = "langgraph_runtime_inmem";
     inherit (finalAttrs) version;
-    hash = "sha256-mNTJgdiFkQgOgy+681ALxQOMceo3jWn+cfBvH67weAU=";
+    hash = "sha256-VE7gXsjV+pXhz85rZnD9mhgwp5QRXvxEjdgF7tjNBAE=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/marisa/default.nix b/pkgs/development/python-modules/marisa/default.nix
index 10d7a790ad21..0f2e02d25294 100644
--- a/pkgs/development/python-modules/marisa/default.nix
+++ b/pkgs/development/python-modules/marisa/default.nix
@@ -13,6 +13,13 @@ buildPythonPackage {
 
   patches = marisa.patches or [ ];
 
+  # fix The 'marisa' derivation has version '0.3.1' but .dist-info/METADATA specifies version '0.0.0'.
+  postPatch = ''
+    substituteInPlace bindings/python/setup.py --replace-fail \
+      'setup(name = "marisa",' \
+      'setup(name = "marisa", version = "${marisa.version}"',
+  '';
+
   build-system = [ setuptools ];
 
   nativeBuildInputs = [ swig ];
diff --git a/pkgs/development/python-modules/modelscope/default.nix b/pkgs/development/python-modules/modelscope/default.nix
index 65328d8b3903..e4f153bce457 100644
--- a/pkgs/development/python-modules/modelscope/default.nix
+++ b/pkgs/development/python-modules/modelscope/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "modelscope";
-  version = "1.38.1";
+  version = "1.39.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "modelscope";
     repo = "modelscope";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BTiK6rk9j5Wh6DZZ8eufzAyP8wWCEfIzQKeJ3fJzsjg=";
+    hash = "sha256-tkwgn3EeR6SVIcOIMJ2U+ktFAckhaFLubRgteO4BGxA=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/nanoeigenpy/default.nix b/pkgs/development/python-modules/nanoeigenpy/default.nix
index f5e4424dc825..cb0bc0f29bc3 100644
--- a/pkgs/development/python-modules/nanoeigenpy/default.nix
+++ b/pkgs/development/python-modules/nanoeigenpy/default.nix
@@ -6,8 +6,6 @@
   python,
 
   # nativeBuildInputs
-  cmake,
-  doxygen,
   nanobind,
 
   # propagatedBuildInputs
@@ -50,7 +48,7 @@ buildPythonPackage rec {
     "out"
   ];
 
-  cmakeFlags = [
+  cmakeFlags = jrl-cmakemodules.docsCmakeFlags ++ [
     (lib.cmakeBool "INSTALL_DOCUMENTATION" true)
     (lib.cmakeBool "BUILD_TESTING" true)
     (lib.cmakeBool "BUILD_WITH_CHOLMOD_SUPPORT" true)
@@ -62,16 +60,11 @@ buildPythonPackage rec {
 
   strictDeps = true;
 
-  nativeBuildInputs = [
-    cmake
-    doxygen
-    nanobind
-  ];
-
+  buildInputs = [ jrl-cmakemodules ];
+  nativeBuildInputs = jrl-cmakemodules.docsNativeBuildInputs ++ [ nanobind ];
   propagatedBuildInputs = [
     suitesparse
     eigen
-    jrl-cmakemodules
   ];
 
   dependencies = [
diff --git a/pkgs/development/python-modules/nibe/default.nix b/pkgs/development/python-modules/nibe/default.nix
index 109a05ac1b51..50990d074ac7 100644
--- a/pkgs/development/python-modules/nibe/default.nix
+++ b/pkgs/development/python-modules/nibe/default.nix
@@ -18,14 +18,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "nibe";
-  version = "2.23.0";
+  version = "2.24.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "yozik04";
     repo = "nibe";
     tag = finalAttrs.version;
-    hash = "sha256-jBLsddnhUKdIntKmux6N/J07fnoVCBq0IbWyiWGKvlw=";
+    hash = "sha256-LIGwxo82UrPXC6qh7pvhnhAbC5XzDPADFun5rADDASo=";
   };
 
   pythonRelaxDeps = [ "async-modbus" ];
diff --git a/pkgs/development/python-modules/nicegui-highcharts/default.nix b/pkgs/development/python-modules/nicegui-highcharts/default.nix
index 107efc786a6a..c61759f69041 100644
--- a/pkgs/development/python-modules/nicegui-highcharts/default.nix
+++ b/pkgs/development/python-modules/nicegui-highcharts/default.nix
@@ -5,6 +5,7 @@
   fetchFromGitHub,
   nicegui,
   hatchling,
+  pyprojectVersionPatchHook,
 }:
 
 buildPythonPackage (finalAttrs: {
@@ -23,6 +24,8 @@ buildPythonPackage (finalAttrs: {
 
   build-system = [ hatchling ];
 
+  nativeBuildInputs = [ pyprojectVersionPatchHook ];
+
   dependencies = [
     docutils
     nicegui
diff --git a/pkgs/development/python-modules/nomadnet/default.nix b/pkgs/development/python-modules/nomadnet/default.nix
index ceac31302271..43aebc2a797f 100644
--- a/pkgs/development/python-modules/nomadnet/default.nix
+++ b/pkgs/development/python-modules/nomadnet/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "nomadnet";
-  version = "1.2.7";
+  version = "1.2.8";
   pyproject = true;
 
   __structuredAttrs = true;
 
   src = fetchPypi {
     inherit (finalAttrs) version pname;
-    hash = "sha256-52pFpgeRBXouASwpx8vLn+ZDHx7Tl6NttkgRkENhT1s=";
+    hash = "sha256-6RQsbUIruRc2r+br62GArjRQTst7xrR5R1YFVvjroeE=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/oelint-data/default.nix b/pkgs/development/python-modules/oelint-data/default.nix
index a4cb12dbd2ae..07d3428441b1 100644
--- a/pkgs/development/python-modules/oelint-data/default.nix
+++ b/pkgs/development/python-modules/oelint-data/default.nix
@@ -8,7 +8,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "oelint-data";
-  version = "1.5.12";
+  version = "1.5.13";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -16,7 +16,7 @@ buildPythonPackage (finalAttrs: {
     owner = "priv-kweihmann";
     repo = "oelint-data";
     tag = finalAttrs.version;
-    hash = "sha256-ZGA6E+VpNY4Gmu5i8riEQZixsMb83bgvwq/ujeJE+LY=";
+    hash = "sha256-EopsL123qEP8kHseMD550co0bCv9xis5pVCS9zGl+rc=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/pyimouapi/default.nix b/pkgs/development/python-modules/pyimouapi/default.nix
index 70e7d7462d38..5b3e673949f8 100644
--- a/pkgs/development/python-modules/pyimouapi/default.nix
+++ b/pkgs/development/python-modules/pyimouapi/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pyimouapi";
-  version = "1.3.2";
+  version = "1.3.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Imou-OpenPlatform";
     repo = "Py-Imou-Open-Api";
     tag = finalAttrs.version;
-    hash = "sha256-SxAeBh26pgxMGZdkiPMM9hBC40xgLkAVu81AznT8dwk=";
+    hash = "sha256-g70zYBmhQXlk1EUExqWuHWDenx8ZCcnMvh8wo1hLS4g=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/pylance/default.nix b/pkgs/development/python-modules/pylance/default.nix
index 2016c83e9c24..5f1d4861de29 100644
--- a/pkgs/development/python-modules/pylance/default.nix
+++ b/pkgs/development/python-modules/pylance/default.nix
@@ -35,7 +35,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pylance";
-  version = "8.0.0";
+  version = "9.0.0";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -43,7 +43,7 @@ buildPythonPackage (finalAttrs: {
     owner = "lancedb";
     repo = "lance";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-pxggvF23u3Wfm6YdaHwbDUZDUwtJ4tOaTLViUfGZ0B8=";
+    hash = "sha256-G4BcK/con6a1MOlA9pB3+uI8YULLNg71G8bFLKhUedg=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/python";
@@ -55,9 +55,29 @@ buildPythonPackage (finalAttrs: {
       src
       sourceRoot
       ;
-    hash = "sha256-VSy1cOshPLAic+1HkTGiavdNRffiEVAlWThNeebJSyg=";
+    hash = "sha256-IzB+kzjAEWQpA0gCyKAXI+5XAJK00AV3alFRgastbPM=";
   };
 
+  # `lance-linalg`'s AVX-512 VNNI u8-distance kernels call `_mm512_dpbusd_epi32` /
+  # `_mm512_dpwssd_epi32`. With the current toolchain, stdarch's signature for these intrinsics
+  # mismatches LLVM's `llvm.x86.avx512.vpdpbusd.512`, so the crate fails to compile.
+  # Drop the AVX-512 VNNI dispatch branch: the kernels then become dead code (their module is
+  # crate-private and otherwise only used from `#[cfg(test)]`, which is not built for
+  # dependencies), so they are never codegen'd and runtime dispatch falls back to the equivalent
+  # AVX2 / scalar kernels.
+  postPatch = ''
+    lanceDistance="../rust/lance-linalg/src/distance"
+
+    substituteInPlace "$lanceDistance/dot_u8.rs" \
+      --replace-fail "return |a, b| unsafe { x86::dot_u8_avx512_vnni(a, b) };" ""
+
+    substituteInPlace "$lanceDistance/l2_u8.rs" \
+      --replace-fail "return |a, b| unsafe { x86::l2_u8_avx512_vnni(a, b) };" ""
+
+    substituteInPlace "$lanceDistance/cosine_u8.rs" \
+      --replace-fail "return |a, b| unsafe { x86::cosine_u8_accum_avx512_vnni(a, b) };" ""
+  '';
+
   nativeBuildInputs = [
     pkg-config
     protobuf # for protoc
@@ -74,8 +94,10 @@ buildPythonPackage (finalAttrs: {
     protobuf
   ];
 
-  pythonRelaxDeps = [ "pyarrow" ];
-
+  pythonRelaxDeps = [
+    "lance-namespace"
+    "pyarrow"
+  ];
   dependencies = [
     lance-namespace
     numpy
diff --git a/pkgs/development/python-modules/pyportainer/default.nix b/pkgs/development/python-modules/pyportainer/default.nix
index d70bc3a7c59e..294248a93071 100644
--- a/pkgs/development/python-modules/pyportainer/default.nix
+++ b/pkgs/development/python-modules/pyportainer/default.nix
@@ -17,14 +17,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pyportainer";
-  version = "1.0.42";
+  version = "1.0.43";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "erwindouna";
     repo = "pyportainer";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Mnn9cpTei7dJCPomON0XskvNDSEb+XP9tMihoN7vS8E=";
+    hash = "sha256-KE/qXqExL7eYSZZz3+4SQNAmia8N63eZnOITQkcgzfQ=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/pysbd/default.nix b/pkgs/development/python-modules/pysbd/default.nix
index 09e666419918..1f6509265b26 100644
--- a/pkgs/development/python-modules/pysbd/default.nix
+++ b/pkgs/development/python-modules/pysbd/default.nix
@@ -2,36 +2,44 @@
   lib,
   buildPythonPackage,
   fetchFromGitHub,
+  setuptools,
+  pytestCheckHook,
   tqdm,
   spacy,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "pysbd";
   version = "0.3.4";
-  format = "setuptools";
+  pyproject = true;
+
+  __structuredAttrs = true;
 
   # provides no sdist on pypi
   src = fetchFromGitHub {
     owner = "nipunsadvilkar";
     repo = "pySBD";
-    rev = "v${version}";
-    sha256 = "12p7qm237z56hw4zr03n8rycgfymhki2m9c4w3ib0mvqq122a5dp";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-txUlRMB4V7Di4ISlKuKE1bvHfEZ2gPwJh6b8M0TF54o=";
   };
 
-  nativeCheckInputs = [
-    tqdm
-    spacy
+  build-system = [
+    setuptools
   ];
 
-  doCheck = false; # requires pyconll and blingfire
+  nativeCheckInputs = [
+    pytestCheckHook
+    spacy
+    tqdm
+  ];
 
   pythonImportsCheck = [ "pysbd" ];
 
   meta = {
     description = "Pysbd (Python Sentence Boundary Disambiguation) is a rule-based sentence boundary detection that works out-of-the-box across many languages";
     homepage = "https://github.com/nipunsadvilkar/pySBD";
+    changelog = "https://github.com/nipunsadvilkar/pySBD/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     license = lib.licenses.mit;
     teams = [ lib.teams.tts ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/pythonkuma/default.nix b/pkgs/development/python-modules/pythonkuma/default.nix
index 72d4bbc8b87c..9b86ae19f3d7 100644
--- a/pkgs/development/python-modules/pythonkuma/default.nix
+++ b/pkgs/development/python-modules/pythonkuma/default.nix
@@ -40,7 +40,7 @@ buildPythonPackage (finalAttrs: {
   meta = {
     description = "Simple Python wrapper for Uptime Kuma";
     homepage = "https://github.com/tr4nt0r/pythonkuma";
-    changelog = "https://github.com/tr4nt0r/pythonkuma/releases/tag/v${finalAttrs.src.tag}";
+    changelog = "https://github.com/tr4nt0r/pythonkuma/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = [ lib.maintainers.jamiemagee ];
   };
diff --git a/pkgs/development/python-modules/pyworxcloud/default.nix b/pkgs/development/python-modules/pyworxcloud/default.nix
index 9094d60fe0ce..17c6ba8e37de 100644
--- a/pkgs/development/python-modules/pyworxcloud/default.nix
+++ b/pkgs/development/python-modules/pyworxcloud/default.nix
@@ -6,6 +6,7 @@
   fetchFromGitHub,
   poetry-core,
   paho-mqtt,
+  pyprojectVersionPatchHook,
   requests,
   urllib3,
   tzdata,
@@ -27,6 +28,8 @@ buildPythonPackage (finalAttrs: {
 
   build-system = [ poetry-core ];
 
+  nativeBuildInputs = [ pyprojectVersionPatchHook ];
+
   dependencies = [
     aiohttp
     awsiotsdk
diff --git a/pkgs/development/python-modules/resvg-py/default.nix b/pkgs/development/python-modules/resvg-py/default.nix
index 6d30ded2d52e..3670f085f13e 100644
--- a/pkgs/development/python-modules/resvg-py/default.nix
+++ b/pkgs/development/python-modules/resvg-py/default.nix
@@ -12,19 +12,19 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "resvg-py";
-  version = "0.3.3";
+  version = "0.3.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "baseplate-admin";
     repo = "resvg-py";
     tag = finalAttrs.version;
-    hash = "sha256-XYV3XVLZNlCGPvvYPtyr4UX+9yuXnV7ZWwqt2I/rxTc=";
+    hash = "sha256-SRY22I4wK3v8RrwkS3/5YjBe+IRLnUS/KYYThDUByXY=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-v7Y+Kh8Z5S5gn8zoijjwKq8UZGT36azltC62m9xCHiY=";
+    hash = "sha256-5gyzo48SEct7kaN9ckectoHsuS1EJcJOdT+dxpKw+QQ=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/semgrep/common.nix b/pkgs/development/python-modules/semgrep/common.nix
index e6343b7edba9..cd193e883fbe 100644
--- a/pkgs/development/python-modules/semgrep/common.nix
+++ b/pkgs/development/python-modules/semgrep/common.nix
@@ -1,9 +1,9 @@
 { lib }:
 
 rec {
-  version = "1.164.0";
+  version = "1.172.0";
 
-  srcHash = "sha256-ced287/jH+as/1rGBOfoZ06UuQ1sf1YI4AMHbHrtnHU=";
+  srcHash = "sha256-dILO0ia4zriHiC1jVv02YOyj0Snni4aY66g+omApqSQ=";
 
   # This tag is used to select the correct wheel from PyPI.
   # It is updated by the update.sh script.
@@ -17,8 +17,8 @@ rec {
     "cli/src/semgrep/semgrep_interfaces" = {
       owner = "semgrep";
       repo = "semgrep-interfaces";
-      rev = "f4a74a03e8ec3dd368b96101648a3210e03fa61e";
-      hash = "sha256-dy+oOB0QmZjMpTYINSPIjzhpN6d/45DaajqumKIYxC4=";
+      rev = "6dc898658d554ce80e6fdd58904adea2fd0e30c8";
+      hash = "sha256-7JMo2TU5JbPscrfI1qdz1P2bF6J8dTDhOqAQXxa3tm8=";
     };
   };
 
@@ -29,15 +29,15 @@ rec {
   core = {
     x86_64-linux = {
       platform = "manylinux_2_34_x86_64";
-      hash = "sha256-dFrlzhvvfJsDyStDHRdMpu54AaXioEfGSsIQTH5pUvs=";
+      hash = "sha256-2LlK9CZqV1KHrSzYRFc3Q6tP5Y9r+22SKTJ4B5N+reM=";
     };
     aarch64-linux = {
       platform = "manylinux_2_34_aarch64";
-      hash = "sha256-N24E9xOyRO7pXopRs+gSQM2nwHE214GfcntcoH7H7Kk=";
+      hash = "sha256-yIGjBbll5ZS4ixXCxkGbOY525DjsYeYJFsiy7/6SckA=";
     };
     aarch64-darwin = {
       platform = "macosx_11_0_arm64";
-      hash = "sha256-AsKxA5Wmy3NEQJ0kS6ylE33d0W86e9F494aiIkwyrcA=";
+      hash = "sha256-CeksnmwWNaFUnU4pey1KloTc01GyFu1/LrUc/FVHnEk=";
     };
   };
 
diff --git a/pkgs/development/python-modules/semgrep/default.nix b/pkgs/development/python-modules/semgrep/default.nix
index 69df6e0beeb5..853da1f60fca 100644
--- a/pkgs/development/python-modules/semgrep/default.nix
+++ b/pkgs/development/python-modules/semgrep/default.nix
@@ -5,8 +5,10 @@
   semgrep-core,
 
   # check tools
-  git,
+  addBinToPathHook,
+  gitMinimal,
   pytestCheckHook,
+  writableTmpDirAsHomeHook,
 
   # python runtime dependencies
   attrs,
@@ -15,6 +17,7 @@
   click-option-group,
   colorama,
   defusedxml,
+  exceptiongroup,
   glom,
   jsonschema,
   mcp,
@@ -51,33 +54,54 @@
 
 let
   common = import ./common.nix { inherit lib; };
-  semgrepBinPath = lib.makeBinPath [ semgrep-core ];
 in
-buildPythonPackage rec {
-  format = "setuptools";
+buildPythonPackage (finalAttrs: {
   pname = "semgrep";
   inherit (common) version;
+  pyproject = true;
+  __structuredAttrs = true;
+
   src = fetchFromGitHub {
     owner = "semgrep";
     repo = "semgrep";
-    rev = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = common.srcHash;
   };
 
+  sourceRoot = "${finalAttrs.src.name}/cli";
+
   # prepare a subset of the submodules as we only need a handful
   # and there are many many submodules total
   postPatch =
-    (lib.concatStringsSep "\n" (
-      lib.mapAttrsToList (path: submodule: ''
-        # substitute ${path}
-        # remove git submodule placeholder
-        rm -r ${path}
-        # link submodule
-        ln -s ${submodule}/ ${path}
-      '') passthru.submodulesSubset
-    ))
+    lib.concatStringsSep "\n" (
+      lib.mapAttrsToList (
+        path: submodule:
+        let
+          path' = lib.removePrefix "cli/" path;
+        in
+        ''
+          # substitute ${path'}
+          # remove git submodule placeholder
+          rm -r ${path'}
+          # link submodule
+          ln -s ${submodule}/ ${path'}
+        ''
+      ) finalAttrs.passthru.submodulesSubset
+    )
+    # hardcode the path to the shared `semgrep-core` binary so that it does not
+    # need to be copied into the wheel nor be present on PATH at runtime.
+    # There are two independent lookups: one in the library and one in the CLI
+    # entrypoint (which execs semgrep-core directly).
     + ''
-      cd cli
+      substituteInPlace src/semgrep/semgrep_core.py \
+        --replace-fail \
+          'ret = compute_executable_path("semgrep-core")' \
+          'ret = "${lib.getExe semgrep-core}"'
+
+      substituteInPlace src/semgrep/console_scripts/entrypoint.py \
+        --replace-fail \
+          'path = shutil.which(core)' \
+          'path = "${lib.getExe semgrep-core}" if not pro else shutil.which(core)'
     '';
 
   # tell cli/setup.py to not copy semgrep-core into the result
@@ -87,9 +111,16 @@ buildPythonPackage rec {
 
   pythonRelaxDeps = [
     "boltons"
+    "click"
+    "exceptiongroup"
     "glom"
+    "jsonschema"
+    "mcp"
+    "opentelemetry-api"
+    "opentelemetry-exporter-otlp-proto-http"
+    "opentelemetry-sdk"
+    "wcmatch"
   ];
-
   dependencies = [
     attrs
     boltons
@@ -97,6 +128,7 @@ buildPythonPackage rec {
     click-option-group
     colorama
     defusedxml
+    exceptiongroup
     glom
     jsonschema
     mcp
@@ -119,11 +151,11 @@ buildPythonPackage rec {
     wcmatch
   ];
 
-  doCheck = true;
-
   nativeCheckInputs = [
-    git
+    addBinToPathHook
+    gitMinimal
     pytestCheckHook
+    writableTmpDirAsHomeHook
 
     flaky
     pytest-asyncio
@@ -152,35 +184,18 @@ buildPythonPackage rec {
     "test_send"
     # many child tests require networking to download files
     "TestConfigLoaderForProducts"
+    # require networking (pro install metrics are sent to semgrep.dev)
+    "test_install_command_download_error_records_download_reason"
+    "test_install_command_metrics_off"
+    "test_install_command_sends_failure_metrics"
+    "test_install_command_sends_metrics_when_logged_in"
+    "test_run_install_success_records_outcome"
+    "test_run_install_version_check_failure_records_error"
   ];
 
-  preCheck = ''
-    # tests need a home directory
-    export HOME="$(mktemp -d)"
-
-    # tests need access to `semgrep-core`
-    export OLD_PATH="$PATH"
-    export PATH="$PATH:${semgrepBinPath}"
-  '';
-
-  postCheck = ''
-    export PATH="$OLD_PATH"
-    unset OLD_PATH
-  '';
-
-  # since we stop cli/setup.py from finding semgrep-core and copying it into
-  # the result we need to provide it on the PATH
-  preFixup = ''
-    makeWrapperArgs+=(--prefix PATH : ${semgrepBinPath})
-  '';
-
-  postInstall = ''
-    chmod +x $out/bin/{,py}semgrep
-  '';
-
   passthru = {
     inherit common semgrep-core;
-    submodulesSubset = lib.mapAttrs (k: args: fetchFromGitHub args) common.submodules;
+    submodulesSubset = lib.mapAttrs (_: args: fetchFromGitHub args) common.submodules;
     updateScript = ./update.sh;
   };
 
@@ -188,4 +203,4 @@ buildPythonPackage rec {
     description = common.meta.description + " - cli";
     inherit (semgrep-core.meta) platforms;
   };
-}
+})
diff --git a/pkgs/development/python-modules/semgrep/semgrep-core.nix b/pkgs/development/python-modules/semgrep/semgrep-core.nix
index b71eecfdcbe4..65949ff664b4 100644
--- a/pkgs/development/python-modules/semgrep/semgrep-core.nix
+++ b/pkgs/development/python-modules/semgrep/semgrep-core.nix
@@ -3,17 +3,20 @@
   stdenv,
   fetchPypi,
 
-  autoPatchelfHook,
+  patchelf,
   unzip,
 }:
 
 let
   common = import ./common.nix { inherit lib; };
 in
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "semgrep-core";
   inherit (common) version;
 
+  __structuredAttrs = true;
+  strictDeps = true;
+
   # fetch pre-built semgrep-core since the ocaml build is complex and relies on
   # the opam package manager at some point
   # pulling it out of the python wheel as r2c no longer release a built binary
@@ -22,22 +25,23 @@ stdenv.mkDerivation rec {
     let
       inherit (stdenv.hostPlatform) system;
       data = common.core.${system} or (throw "Unsupported system: ${system}");
+      python = common.pythonWheelTag;
     in
-    fetchPypi rec {
+    fetchPypi {
       pname = "semgrep";
-      inherit version;
+      inherit (finalAttrs) version;
       format = "wheel";
       dist = python;
-      python = common.pythonWheelTag;
+      inherit python;
       inherit (data) platform hash;
     };
 
   nativeBuildInputs = [
     unzip
   ]
-  ++ lib.optional stdenv.hostPlatform.isLinux autoPatchelfHook;
-
-  buildInputs = lib.optional stdenv.hostPlatform.isLinux stdenv.cc.cc.lib;
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
+    patchelf
+  ];
 
   # _tryUnzip from unzip's setup-hook doesn't recognise .whl
   # "do not know how to unpack source archive"
@@ -53,26 +57,36 @@ stdenv.mkDerivation rec {
 
   installPhase = ''
     runHook preInstall
-    install -Dm 755 -t $out/bin semgrep-${version}.data/purelib/semgrep/bin/semgrep-core
+    install -Dm 755 -t $out/bin semgrep-${finalAttrs.version}.data/purelib/semgrep/bin/semgrep-core
 
     # copy bundled libs as well
     # keeping them in bin/libs matches the layout in the wheel
-    if [ -d semgrep-${version}.data/purelib/semgrep/bin/libs ]; then
+    if [ -d semgrep-${finalAttrs.version}.data/purelib/semgrep/bin/libs ]; then
       mkdir -p $out/bin/libs
-      cp -rf semgrep-${version}.data/purelib/semgrep/bin/libs/* $out/bin/libs/
-
-      # help autoPatchelfHook find these libs
-      if [ -n "''${autoPatchelfHook:-}" ]; then
-        appendAutoPatchelfSearchPath $out/bin/libs
-      fi
+      cp -rf semgrep-${finalAttrs.version}.data/purelib/semgrep/bin/libs/* $out/bin/libs/
     fi
     runHook postInstall
   '';
 
+  # Multiple rewrites of this large binary corrupt it on aarch64: patchelf leaves `.dynstr`
+  # outside any loadable segment, so ld.so segfaults reading the rpath at startup (patchelf bug,
+  # see https://github.com/NixOS/patchelf/issues/244). So we avoid autoPatchelfHook, disable
+  # stdenv's own `strip` and `patchelf --shrink-rpath`, and fix the interpreter and rpath in a
+  # single patchelf call below. The bundled bin/libs reference each other via $ORIGIN, so only the
+  # main binary needs it.
+  dontPatchELF = true;
+  dontStrip = true;
+  postFixup = lib.optionalString stdenv.hostPlatform.isLinux ''
+    patchelf \
+      --set-interpreter "$(cat ${stdenv.cc}/nix-support/dynamic-linker)" \
+      --set-rpath "$out/bin/libs:${lib.makeLibraryPath [ stdenv.cc.libc ]}" \
+      $out/bin/semgrep-core
+  '';
+
   meta = common.meta // {
     description = common.meta.description + " - core binary";
     mainProgram = "semgrep-core";
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
     platforms = lib.attrNames common.core;
   };
-}
+})
diff --git a/pkgs/development/python-modules/shtab/default.nix b/pkgs/development/python-modules/shtab/default.nix
index d239d5d40837..605f1b5d8138 100644
--- a/pkgs/development/python-modules/shtab/default.nix
+++ b/pkgs/development/python-modules/shtab/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "shtab";
-  version = "1.8.0";
+  version = "1.9.2";
   pyproject = true;
 
   src = fetchFromGitHub {
-    owner = "iterative";
+    owner = "tqdm";
     repo = "shtab";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-VK3+JLb9Lh+YHixMa1Hjm5bYJ9vSmMPIkN6c3DeHDo8=";
+    hash = "sha256-+9M0IfiD5CJcg4AHqCfq1UON/E63etwzvx7Gc82H0PE=";
   };
 
   nativeBuildInputs = [
@@ -37,10 +37,10 @@ buildPythonPackage (finalAttrs: {
   pythonImportsCheck = [ "shtab" ];
 
   meta = {
-    description = "Module for shell tab completion of Python CLI applications";
+    description = "Automagic shell tab completion for Python CLI applications";
     mainProgram = "shtab";
-    homepage = "https://docs.iterative.ai/shtab/";
-    changelog = "https://github.com/iterative/shtab/releases/tag/${finalAttrs.src.tag}";
+    homepage = "https://tqdm.github.io/shtab/";
+    changelog = "https://github.com/tqdm/shtab/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ fab ];
   };
diff --git a/pkgs/development/python-modules/skrl/default.nix b/pkgs/development/python-modules/skrl/default.nix
index 6fa48b98f9bb..35de6f8cd12a 100644
--- a/pkgs/development/python-modules/skrl/default.nix
+++ b/pkgs/development/python-modules/skrl/default.nix
@@ -19,16 +19,21 @@
   flax,
   hypothesis,
   jax,
+  mujoco,
   optax,
   pettingzoo,
   pygame,
   pymunk,
+  pytest-xdist,
   pytestCheckHook,
+  warp-lang,
+  warp-nn,
+  writableTmpDirAsHomeHook,
 }:
 
 buildPythonPackage (finalAttrs: {
   pname = "skrl";
-  version = "1.4.3";
+  version = "2.1.0";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -36,26 +41,9 @@ buildPythonPackage (finalAttrs: {
     owner = "Toni-SM";
     repo = "skrl";
     tag = finalAttrs.version;
-    hash = "sha256-5lkoYAmMIWqK3+E3WxXMWS9zal2DhZkfl30EkrHKpdI=";
+    hash = "sha256-pntQ/7kefi7LLLG1DTKY9Zjlzb0UXiduQCzlX5PkZds=";
   };
 
-  # Fix Jax 0.10.0 compatibility
-  # TypeError: clip() got an unexpected keyword argument 'a_min'
-  postPatch = ''
-    substituteInPlace skrl/models/jax/gaussian.py \
-      --replace-fail \
-        "jnp.clip(log_std, a_min=log_std_min, a_max=log_std_max)" \
-        "jnp.clip(log_std, min=log_std_min, max=log_std_max)" \
-      --replace-fail \
-        "jnp.clip(actions, a_min=clip_actions_min, a_max=clip_actions_max)" \
-        "jnp.clip(actions, min=clip_actions_min, max=clip_actions_max)"
-
-    substituteInPlace skrl/models/jax/deterministic.py \
-      --replace-fail \
-        "jnp.clip(actions, a_min=self._d_clip_actions_min, a_max=self._d_clip_actions_max)" \
-        "jnp.clip(actions, min=self._d_clip_actions_min, max=self._d_clip_actions_max)"
-  '';
-
   build-system = [ setuptools ];
 
   dependencies = [
@@ -74,20 +62,37 @@ buildPythonPackage (finalAttrs: {
     flax
     hypothesis
     jax
+    mujoco
     optax
     pettingzoo
     pygame
     pymunk
+    pytest-xdist
     pytestCheckHook
+    warp-lang
+    warp-nn
+    writableTmpDirAsHomeHook
   ];
 
   disabledTests = [
+    # Flaky when using pytest-xdist
+    "test_agent"
+
     # TypeError: The array passed to from_dlpack must have __dlpack__ and __dlpack_device__ methods
     "test_env"
     "test_multi_agent_env"
 
     # OverflowError
     "test_key"
+
+    # Require GPU access
+    "test_device[cuda]"
+    "test_parse_device[cuda]"
+  ];
+
+  disabledTestPaths = [
+    # TypeError: Can't instantiate abstract class Memory without an implementation for abstract method 'sample'
+    "tests/memories/torch/test_base.py"
   ];
 
   meta = {
diff --git a/pkgs/development/python-modules/sqlfmt/default.nix b/pkgs/development/python-modules/sqlfmt/default.nix
index 05432ca9b957..68cda3e0e04d 100644
--- a/pkgs/development/python-modules/sqlfmt/default.nix
+++ b/pkgs/development/python-modules/sqlfmt/default.nix
@@ -26,20 +26,19 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "sqlfmt";
-  version = "0.30.0";
+  version = "0.31.0";
   pyproject = true;
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "tconbeer";
     repo = "sqlfmt";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-/8BTH2nuqO+du6PsTPB59L21HvvAIZKDcG1kV9XHxsg=";
+    hash = "sha256-nbgLzeMOXgiXtvV/XHu1I0LkwwaTrzj8ga6EtoZuvRk=";
   };
 
   build-system = [ hatchling ];
 
-  pythonRelaxDeps = [ "click" ];
-
   dependencies = [
     click
     jinja2
@@ -61,13 +60,10 @@ buildPythonPackage (finalAttrs: {
     versionCheckHook
     writableTmpDirAsHomeHook
   ]
-  ++ lib.flatten (builtins.attrValues finalAttrs.passthru.optional-dependencies);
+  ++ lib.concatAttrValues finalAttrs.passthru.optional-dependencies;
 
-  disabledTestPaths = [
-    # TypeError: CliRunner.__init__() got an unexpected keyword argument 'mix_stderr'
-    "tests/functional_tests/test_end_to_end.py"
-    "tests/unit_tests/test_cli.py"
-  ];
+  # importlib.metadata.PackageNotFoundError: No package metadata was found for sqlfmt
+  dontCheckPythonMetadata = true;
 
   meta = {
     description = "Formatter for dbt SQL files";
diff --git a/pkgs/development/python-modules/ssdp/default.nix b/pkgs/development/python-modules/ssdp/default.nix
index 313a4ed57354..8b0b232b2b5b 100644
--- a/pkgs/development/python-modules/ssdp/default.nix
+++ b/pkgs/development/python-modules/ssdp/default.nix
@@ -1,5 +1,6 @@
 {
   lib,
+  fetchpatch,
   buildPythonPackage,
   click,
   fetchFromGitHub,
@@ -22,6 +23,14 @@ buildPythonPackage (finalAttrs: {
     hash = "sha256-1LO5+lfykaepp+MfS/2mlngobhcV1nZvU19Jb0sbVzk=";
   };
 
+  patches = [
+    # Fix CLI test skipping under pytest >= 9.1
+    (fetchpatch {
+      url = "https://github.com/lukegb/ssdp/commit/e5570a13342a2b7271acae1408b37a49e0729e3c.patch";
+      hash = "sha256-RwpsrGRn6rEowwHc39bLO8dVTKJP3d3v7Rr1d8sKYvM=";
+    })
+  ];
+
   build-system = [
     flit-core
     flit-scm
diff --git a/pkgs/development/python-modules/steampy/default.nix b/pkgs/development/python-modules/steampy/default.nix
index dc3f48c16b93..7aa0059f885d 100644
--- a/pkgs/development/python-modules/steampy/default.nix
+++ b/pkgs/development/python-modules/steampy/default.nix
@@ -27,6 +27,12 @@ buildPythonPackage (finalAttrs: {
     hash = "sha256-dGcqJGRQ88vXy+x2U+ykutP4RnzTUqJlmhXmcr+4maE=";
   };
 
+  postPatch = ''
+    # https://github.com/bukson/steampy/pull/463
+    substituteInPlace ./setup.py --replace-fail \
+      '1.2.0' '1.2.1'
+  '';
+
   build-system = [ setuptools ];
 
   dependencies = [
diff --git a/pkgs/development/python-modules/stripe/default.nix b/pkgs/development/python-modules/stripe/default.nix
index 050db17d7a55..b6a50ee469de 100644
--- a/pkgs/development/python-modules/stripe/default.nix
+++ b/pkgs/development/python-modules/stripe/default.nix
@@ -9,12 +9,12 @@
 
 buildPythonPackage rec {
   pname = "stripe";
-  version = "15.3.1";
+  version = "15.4.0";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-L5qNlh5cLsGRSftOC0fZcJ0BSmhZLNsfTv0ESryNI1k=";
+    hash = "sha256-+UwngKdyjF+0l4ng+7GOmEJn+T+nJOhACzGuvzbQGx4=";
   };
 
   build-system = [ flit-core ];
diff --git a/pkgs/development/python-modules/swisshydrodata/default.nix b/pkgs/development/python-modules/swisshydrodata/default.nix
index 04cef8823c70..c7f05a5c2530 100644
--- a/pkgs/development/python-modules/swisshydrodata/default.nix
+++ b/pkgs/development/python-modules/swisshydrodata/default.nix
@@ -3,31 +3,31 @@
   aiohttp,
   buildPythonPackage,
   fetchFromGitHub,
+  pyprojectVersionPatchHook,
   pytest-asyncio,
   pytest-cov-stub,
   pytestCheckHook,
-  pythonOlder,
   requests-mock,
   requests,
   setuptools,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "swisshydrodata";
   version = "0.3.1";
   pyproject = true;
 
-  disabled = pythonOlder "3.12";
-
   src = fetchFromGitHub {
     owner = "Bouni";
     repo = "swisshydrodata";
-    tag = version;
+    tag = finalAttrs.version;
     hash = "sha256-Yy/sc/SKKftIsZLyIJabrgcgYwbBxZMXbhTaWSIKpM8=";
   };
 
   build-system = [ setuptools ];
 
+  nativeBuildInputs = [ pyprojectVersionPatchHook ];
+
   dependencies = [
     requests
     aiohttp
@@ -45,8 +45,8 @@ buildPythonPackage rec {
   meta = {
     description = "Python client to get data from the Swiss federal Office for Environment FEON";
     homepage = "https://github.com/bouni/swisshydrodata";
-    changelog = "https://github.com/Bouni/swisshydrodata/releases/tag/${src.tag}";
+    changelog = "https://github.com/Bouni/swisshydrodata/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/syne-tune/default.nix b/pkgs/development/python-modules/syne-tune/default.nix
index 21645320fe63..c788e5d43a6e 100644
--- a/pkgs/development/python-modules/syne-tune/default.nix
+++ b/pkgs/development/python-modules/syne-tune/default.nix
@@ -1,6 +1,5 @@
 {
   lib,
-  stdenv,
   buildPythonPackage,
   fetchFromGitHub,
 
@@ -11,119 +10,65 @@
   dill,
   numpy,
   pandas,
+  psutil,
+  scikit-learn,
   sortedcontainers,
+  statsmodels,
+  tqdm,
   typing-extensions,
+  xgboost,
 
-  # optional-dependencies
-  autograd,
+  # tests
   botorch,
-  # configspace,
   fastparquet,
   h5py,
   huggingface-hub,
-  matplotlib,
   pymoo,
-  scikit-learn,
-  scipy,
-  # smac,
-  statsmodels,
-  xgboost,
-  # yahpo-gym,
-
-  # tests
-  pytestCheckHook,
   pytest-timeout,
-  ray,
+  pytestCheckHook,
   writableTmpDirAsHomeHook,
 }:
 buildPythonPackage (finalAttrs: {
   pname = "syne-tune";
-  version = "0.15.0";
+  version = "0.16.0";
   pyproject = true;
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "syne-tune";
     repo = "syne-tune";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-UNBpfC+aLXhkbyvCG2K00yedJnpYpfldqisZ/wDPtuA=";
+    hash = "sha256-fejG/KWWT6HrGCGzGh4p/Q3kzIDgYbRgfwGQf5sgKic=";
   };
 
   build-system = [
     setuptools
   ];
 
-  pythonRelaxDeps = [
-    "numpy"
-  ];
-
   dependencies = [
     dill
     numpy
     pandas
+    psutil
+    scikit-learn
     sortedcontainers
+    statsmodels
+    tqdm
     typing-extensions
+    xgboost
   ];
 
-  optional-dependencies = lib.fix (self: {
-    blackbox-repository = [
-      fastparquet
-      h5py
-      huggingface-hub
-      numpy
-      pandas
-      scikit-learn
-      xgboost
-    ];
-    bore = [
-      scikit-learn
-      xgboost
-    ];
-    botorch = [ botorch ];
-    gpsearchers = [
-      autograd
-      scipy
-    ];
-    kde = [ statsmodels ];
-    moo = [
-      pymoo
-      scipy
-    ];
-    sklearn = [ scikit-learn ];
-    # smac = [ smac swig ]; # smac unavailable on nixpkgs
-    visual = [ matplotlib ];
-    # yahpo = [ configspace onnxruntime pandas pyyaml yahpo-gym ]; # yahpo-gym unavailable on nixpkgs
-  });
+  pythonImportsCheck = [ "syne_tune" ];
 
   nativeCheckInputs = [
-    pytestCheckHook
+    botorch
+    fastparquet
+    h5py
+    huggingface-hub
+    pymoo
     pytest-timeout
-    ray
+    pytestCheckHook
     writableTmpDirAsHomeHook
-  ]
-  ++ ray.optional-dependencies.tune
-  ++ finalAttrs.passthru.optional-dependencies.blackbox-repository
-  ++ finalAttrs.passthru.optional-dependencies.bore
-  ++ finalAttrs.passthru.optional-dependencies.botorch
-  ++ finalAttrs.passthru.optional-dependencies.gpsearchers
-  ++ finalAttrs.passthru.optional-dependencies.kde
-  ++ finalAttrs.passthru.optional-dependencies.sklearn;
-
-  disabledTests = [
-    # NameError: name 'HV' is not defined
-    # these require pkg `pymoo` and adding `pymoo` raises:
-    # setuptools.errors.PackageDiscoveryError: Multiple top-level packages discovered in a flat-layout: ['cma', 'notebooks'].
-    "test_append_hypervolume_indicator"
-    "test_hypervolume"
-    "test_hypervolume_progress"
-    "test_hypervolume_simple"
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isDarwin [
-    # assert np.float64(1.0114686865847489e-12) < 1e-12
-    "test_cholesky_factorization"
-  ];
-
-  pythonImportsCheck = [
-    "syne_tune"
   ];
 
   meta = {
diff --git a/pkgs/development/python-modules/teslemetry-stream/default.nix b/pkgs/development/python-modules/teslemetry-stream/default.nix
index 3d10234f79aa..cdc2c0f4e875 100644
--- a/pkgs/development/python-modules/teslemetry-stream/default.nix
+++ b/pkgs/development/python-modules/teslemetry-stream/default.nix
@@ -6,16 +6,16 @@
   aiohttp,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "teslemetry-stream";
-  version = "0.9.2";
+  version = "0.10.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Teslemetry";
     repo = "python-teslemetry-stream";
-    tag = "v${version}";
-    hash = "sha256-NbSeaLIBIQjrNSSoLIMlhcZ9zA1FVg+uTpRxz1/qX1Y=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-ko9H0qhstD9VnR5707E9BUdJG2/KGGLsUxQpQ8F28y4=";
   };
 
   build-system = [ setuptools ];
@@ -27,10 +27,10 @@ buildPythonPackage rec {
   pythonImportsCheck = [ "teslemetry_stream" ];
 
   meta = {
-    changelog = "https://github.com/Teslemetry/python-teslemetry-stream/releases/tag/${src.tag}";
+    changelog = "https://github.com/Teslemetry/python-teslemetry-stream/releases/tag/${finalAttrs.src.tag}";
     description = "Python library for the Teslemetry Streaming API";
     homepage = "https://github.com/Teslemetry/python-teslemetry-stream";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ hexa ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/textualeffects/default.nix b/pkgs/development/python-modules/textualeffects/default.nix
index 3c1b4dcc8cc5..2ac9109581f4 100644
--- a/pkgs/development/python-modules/textualeffects/default.nix
+++ b/pkgs/development/python-modules/textualeffects/default.nix
@@ -10,6 +10,7 @@ buildPythonPackage rec {
   pname = "textualeffects";
   version = "0.2.0";
   pyproject = true;
+  __structuredAttrs = true;
 
   src = fetchPypi {
     inherit pname version;
@@ -28,7 +29,7 @@ buildPythonPackage rec {
   meta = {
     description = "Visual effects for Textual, a TerminalTextEffects wrapper";
     homepage = "https://github.com/ggozad/textualeffects";
-    changelog = "https://github.com/ggozad/textualeffects/blob/v${version}/CHANGES.txt";
+    changelog = "https://github.com/ggozad/textualeffects/releases/tag/${version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ gaelj ];
   };
diff --git a/pkgs/development/python-modules/verilogae/default.nix b/pkgs/development/python-modules/verilogae/default.nix
index 85b7fded9846..ea5f7fffa954 100644
--- a/pkgs/development/python-modules/verilogae/default.nix
+++ b/pkgs/development/python-modules/verilogae/default.nix
@@ -2,7 +2,6 @@
   lib,
   buildPythonPackage,
   fetchFromGitHub,
-  pythonAtLeast,
   nix-update-script,
   setuptools-rust,
   rustPlatform,
@@ -17,27 +16,32 @@
 
 buildPythonPackage.override { stdenv = llvmPackages.stdenv; } rec {
   pname = "verilogae";
-  version = "24.0.0mob-unstable-2025-07-21";
+  version = "24.0.0mob-unstable-2026-08-01";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "OpenVAF";
     repo = "OpenVAF-Reloaded";
-    rev = "d878f5519b1767b64c6ebeb4d67e29e7cd46e60b";
-    hash = "sha256-TDE2Ewokhm2KSKe+sunUbV8KD3kaTSd5dB3CLCWGJ9U=";
+    rev = "3369a83f9c626f6d298f9f881379f561ce432e27";
+    hash = "sha256-+7Ni75QPkgHm1jh7ppiP0oRtDhmzV3OpNqpPWtGhVF4=";
   };
 
-  # segfault in pythonImportsCheckPhase
-  disabled = pythonAtLeast "3.14";
+  # upstream's ./configure is an LLVM auto-detection script, not autotools
+  dontConfigure = true;
 
   postPatch = ''
     substituteInPlace openvaf/osdi/build.rs \
       --replace-fail "-fPIC" ""
+
+    # upstream no longer defaults to an LLVM version; select the one we build with
+    substituteInPlace setup.py \
+      --replace-fail "binding=Binding.NoBinding," \
+        'binding=Binding.NoBinding, features=["llvm${lib.versions.major llvmPackages.llvm.version}"],'
   '';
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname version src;
-    hash = "sha256-5SLrVL3h6+tptHv3GV7r8HUTrYQC9VdF68O2/Uct3xA=";
+    hash = "sha256-+jvaiBCmjd3RrlES+Sc1SskEMOtO1ykOdInMTH/Gazo=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/python-modules/warp-nn/default.nix b/pkgs/development/python-modules/warp-nn/default.nix
new file mode 100644
index 000000000000..39ced41c0bd8
--- /dev/null
+++ b/pkgs/development/python-modules/warp-nn/default.nix
@@ -0,0 +1,56 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+
+  # build-system
+  setuptools,
+
+  # dependencies
+  warp-lang,
+
+  # tests
+  hypothesis,
+  pytestCheckHook,
+  torch,
+  writableTmpDirAsHomeHook,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "warp-nn";
+  version = "0.3.0";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "NVIDIA";
+    repo = "warp-nn";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-dziGJhuuLHy8gEB39tvpLTHjPOwz6YVhsCB6KbIb7vI=";
+  };
+
+  build-system = [
+    setuptools
+  ];
+
+  dependencies = [
+    warp-lang
+  ];
+
+  pythonImportsCheck = [ "warp_nn" ];
+
+  nativeCheckInputs = [
+    hypothesis
+    pytestCheckHook
+    torch
+    writableTmpDirAsHomeHook
+  ];
+
+  meta = {
+    description = "CUDA Graphable Neural Networks for NVIDIA Warp";
+    homepage = "https://github.com/NVIDIA/warp-nn";
+    changelog = "https://github.com/NVIDIA/warp-nn/blob/${finalAttrs.src.tag}/CHANGELOG.md";
+    license = lib.licenses.tost;
+    maintainers = with lib.maintainers; [ GaetanLepage ];
+  };
+})
diff --git a/pkgs/development/python-modules/whenever/default.nix b/pkgs/development/python-modules/whenever/default.nix
index 2d6056d1f890..b76997879701 100644
--- a/pkgs/development/python-modules/whenever/default.nix
+++ b/pkgs/development/python-modules/whenever/default.nix
@@ -19,19 +19,19 @@
 
 buildPythonPackage rec {
   pname = "whenever";
-  version = "0.10.3";
+  version = "0.10.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ariebovenberg";
     repo = "whenever";
     tag = version;
-    hash = "sha256-CBNk69vS4BqavwatOoA312/6M3EnARIzL7C62KrIvXY=";
+    hash = "sha256-yDI5TAnEyVPNYXqsCEitFrQnk+Ed0CyRKcCykxFqeWU=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit src;
-    hash = "sha256-bmKUeVZwaqCN81v1YDnz66ZsUE8VTMBHlph6ZootKu8=";
+    hash = "sha256-ZJhHIY9oFGGfK0XdZtzH7uSqbg3y3aDEh5q4ba5W0tI=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/youtokentome/default.nix b/pkgs/development/python-modules/youtokentome/default.nix
index da93fded7160..e327a05b0e54 100644
--- a/pkgs/development/python-modules/youtokentome/default.nix
+++ b/pkgs/development/python-modules/youtokentome/default.nix
@@ -1,14 +1,15 @@
 {
   lib,
   buildPythonPackage,
-  fetchFromGitHub,
-  setuptools,
   click,
   cython,
+  fetchFromGitHub,
+  setuptools,
   tabulate,
+  tokenizers,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "youtokentome";
   version = "1.0.7";
   pyproject = true;
@@ -16,28 +17,35 @@ buildPythonPackage rec {
   src = fetchFromGitHub {
     owner = "VKCOM";
     repo = "YouTokenToMe";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-+GI752Ih7Ou1wyChR2y80BJmeTYdHWLPX6A1lvMyLGU=";
   };
 
-  nativeBuildInputs = [
-    cython
-    setuptools
-  ];
+  postPatch = ''
+    substituteInPlace setup.py \
+      --replace-fail 'version="1.0.6",' 'version = "${finalAttrs.version}",'
+  '';
 
-  propagatedBuildInputs = [
+  build-system = [ setuptools ];
+
+  nativeBuildInputs = [ cython ];
+
+  dependencies = [
     click
     tabulate
   ];
 
+  # Tests are outdated
+  doCheck = false;
+
   pythonImportsCheck = [ "youtokentome" ];
 
   meta = {
     description = "Unsupervised text tokenizer";
-    mainProgram = "yttm";
     homepage = "https://github.com/VKCOM/YouTokenToMe";
-    changelog = "https://github.com/VKCOM/YouTokenToMe/releases/tag/v${version}";
+    changelog = "https://github.com/VKCOM/YouTokenToMe/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "yttm";
   };
-}
+})
diff --git a/pkgs/development/python-modules/zhong-hong-hvac/default.nix b/pkgs/development/python-modules/zhong-hong-hvac/default.nix
index c04344d1349b..76f19fbd9491 100644
--- a/pkgs/development/python-modules/zhong-hong-hvac/default.nix
+++ b/pkgs/development/python-modules/zhong-hong-hvac/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage rec {
   pname = "zhong-hong-hvac";
-  version = "1.0.13";
+  version = "1.0.15";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "crhan";
     repo = "ZhongHongHVAC";
     tag = "v${version}";
-    hash = "sha256-WLSmzvRydfYhLBZZW4EZDCFXZYqowA6vS0GJUl2UadQ=";
+    hash = "sha256-ZCbo7U6bevnzybVVplSgdFLiuz9+HXiE0r/8sYJ+euQ=";
   };
 
   build-system = [ poetry-core ];
diff --git a/pkgs/development/web/nodejs/v26.nix b/pkgs/development/web/nodejs/v26.nix
index 86e135291d37..785b403d240a 100644
--- a/pkgs/development/web/nodejs/v26.nix
+++ b/pkgs/development/web/nodejs/v26.nix
@@ -23,8 +23,8 @@ let
       [ ];
 in
 buildNodejs {
-  version = "26.5.1";
-  sha256 = "df7770a9a99346f8b73ba6d31ad89bd6f868b51c7387c3627dcb44ca065f4948";
+  version = "26.6.0";
+  sha256 = "ecb6eec812505c9292529087a2436ec6c891ffe0e3a897833416e5d7436d659f";
   patches =
     (lib.optional (!(stdenv.hostPlatform.emulatorAvailable buildPackages)) (fetchpatch2 {
       url = "https://raw.githubusercontent.com/buildroot/buildroot/2f0c31bffdb59fb224387e35134a6d5e09a81d57/package/nodejs/nodejs-src/0003-include-obj-name-in-shared-intermediate.patch";
diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 39ae3efec3ce..ddc0eb62956b 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -1,7 +1,7 @@
 {
     "testing": {
-        "version": "7.2-rc5",
-        "hash": "sha256:05vi7q57qj4nybk3m38araknj6yxaaqjdd0cnw07c07qrjcd2lm7",
+        "version": "7.2-rc6",
+        "hash": "sha256:03q060s94c8p55p29npm62f7rcp9pc0hacq60w4spgwp26j8w2sm",
         "lts": false
     },
     "6.1": {
@@ -20,23 +20,23 @@
         "lts": true
     },
     "6.6": {
-        "version": "6.6.147",
-        "hash": "sha256:1fsavd2armiwrnz0w556dmm54z76zwy2as0qbbaq6s04xsvjjqz7",
+        "version": "6.6.148",
+        "hash": "sha256:0ppp203swylf9ixrgdsbw3gq6xdrxwxdrkqi6x4irsv0ax5rjx5n",
         "lts": true
     },
     "6.12": {
-        "version": "6.12.100",
-        "hash": "sha256:147fvkpsa9n5gv207xyb6if0vmahmvpvrb2bfy32wj866i9p7yb7",
+        "version": "6.12.101",
+        "hash": "sha256:0xlaq8gz9v7ya2w38r2hps58rp7xqf6bp7bw3cazfj9zjc8ws88d",
         "lts": true
     },
     "6.18": {
-        "version": "6.18.41",
-        "hash": "sha256:1skk2aimvhhymsvs15p83v2mwnlwbmghh82x79isia6lz3q75z0p",
+        "version": "6.18.42",
+        "hash": "sha256:1rv3xn5hw8w5y8wdgy2zx78n22n1qhihrd22dbjnfi5lixgfza1m",
         "lts": true
     },
     "7.1": {
-        "version": "7.1.5",
-        "hash": "sha256:1rs162gcf6hsafrrmp3y8k9myn20s3s62xdp4zf39pxw7imik812",
+        "version": "7.1.6",
+        "hash": "sha256:1hamv3kp3iz2mlyv72sv1rcnfwjqhfvnzza89fwn4iljilcdfpcr",
         "lts": false
     }
 }
diff --git a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix
index 5b5628d19405..c64a7ce1fd44 100644
--- a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix
+++ b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix
@@ -15,14 +15,14 @@ let
   variants = {
     # ./update-xanmod.sh lts
     lts = {
-      version = "6.18.41";
-      hash = "sha256-nGDN+qkTNaUVgV+aFOvEtwkDaK7uqpjvXgENpkviDFg=";
+      version = "6.18.42";
+      hash = "sha256-yDtXLGdFM4rg8mtxUJbUvCvjs2dvFiSGuCV7seKlWqM=";
       isLTS = true;
     };
     # ./update-xanmod.sh main
     main = {
-      version = "7.1.5";
-      hash = "sha256-zELqn/UieXjOBkTNTLi2OCkK4+rpD/IfJEDb7GTTJfk=";
+      version = "7.1.6";
+      hash = "sha256-H+dNmTMCWfJm792HR6lz1wVUD70pyZpn5HlTUXwsnLI=";
     };
   };
 
diff --git a/pkgs/os-specific/linux/kernel/zen-kernels.nix b/pkgs/os-specific/linux/kernel/zen-kernels.nix
index c9602d0e5872..400a5d5a3cdd 100644
--- a/pkgs/os-specific/linux/kernel/zen-kernels.nix
+++ b/pkgs/os-specific/linux/kernel/zen-kernels.nix
@@ -18,7 +18,7 @@ in
 buildLinux (
   args
   // rec {
-    version = "7.1.4";
+    version = "7.1.5";
     pname = "linux-zen";
     modDirVersion = lib.versions.pad 3 "${version}-${suffix}";
     isZen = true;
@@ -27,7 +27,7 @@ buildLinux (
       owner = "zen-kernel";
       repo = "zen-kernel";
       rev = "v${version}-${suffix}";
-      sha256 = "1k27xhzd390krk60kay6cabl0jlpb26m6cwvdh3r8izbwgx1r0ig";
+      sha256 = "11d3c2hx2py6fy6qj0dqk2w392m144wjrfg5ldfh93x9mp4ffhjd";
     };
 
     # This is based on the following source:
diff --git a/pkgs/os-specific/linux/lkrg/default.nix b/pkgs/os-specific/linux/lkrg/default.nix
index 734a8cef3f7f..d4f6ca01c4c8 100644
--- a/pkgs/os-specific/linux/lkrg/default.nix
+++ b/pkgs/os-specific/linux/lkrg/default.nix
@@ -13,13 +13,13 @@ in
 stdenv.mkDerivation (finalAttrs: {
   name = "${finalAttrs.pname}-${finalAttrs.version}-${kernel.version}";
   pname = "lkrg";
-  version = "1.0.0";
+  version = "1.0.1";
 
   src = fetchFromGitHub {
     owner = "lkrg-org";
     repo = "lkrg";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-Eb0+rgbI+gbY1NjVyPLB6kZgDsYoSCxjy162GophiMI=";
+    hash = "sha256-j/0iK/I+pj69Z39lZJFaCQ3WxzZL6663Kxy4Sf46tOo=";
   };
 
   hardeningDisable = [ "pic" ];
diff --git a/pkgs/pkgs-lib/formats.nix b/pkgs/pkgs-lib/formats.nix
index e5f941af3770..a38b92f9444f 100644
--- a/pkgs/pkgs-lib/formats.nix
+++ b/pkgs/pkgs-lib/formats.nix
@@ -167,16 +167,16 @@ optionalAttrs allowAliases aliases
       generate =
         name: value:
         pkgs.callPackage (
-          { runCommand, remarshal_0_17 }:
+          { runCommand, remarshal }:
           runCommand name
             {
-              nativeBuildInputs = [ remarshal_0_17 ];
+              nativeBuildInputs = [ remarshal ];
               inherit value;
               preferLocalBuild = true;
               __structuredAttrs = true;
             }
             ''
-              json2yaml ${
+              remarshal --from json --to yaml-1.1 ${
                 # attributes with null values are omitted from the JSON with structured attrs
                 # yaml_1_1Null test keeps this in check
                 if value == null then ''<(echo "null")'' else ''--unwrap value "$NIX_ATTRS_JSON_FILE"''
diff --git a/pkgs/pkgs-lib/tests/formats.nix b/pkgs/pkgs-lib/tests/formats.nix
index b03b44c99150..56ce50ed6953 100644
--- a/pkgs/pkgs-lib/tests/formats.nix
+++ b/pkgs/pkgs-lib/tests/formats.nix
@@ -168,6 +168,8 @@ runBuildTests {
       time = "22:30:00";
     };
     expected = ''
+      %YAML 1.1
+      ---
       attrs:
         foo: null
       'false': false
@@ -188,8 +190,9 @@ runBuildTests {
     format = formats.yaml_1_1 { };
     input = null;
     expected = ''
-      null
-      ...
+      %YAML 1.1
+      ---
+        null
     '';
   };
 
diff --git a/pkgs/servers/home-assistant/custom-components/volkswagencarnet/package.nix b/pkgs/servers/home-assistant/custom-components/volkswagencarnet/package.nix
index 2b86460d333a..d4ea95cd308a 100644
--- a/pkgs/servers/home-assistant/custom-components/volkswagencarnet/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/volkswagencarnet/package.nix
@@ -10,13 +10,13 @@
 buildHomeAssistantComponent rec {
   owner = "robinostlund";
   domain = "volkswagencarnet";
-  version = "5.4.11";
+  version = "5.4.12";
 
   src = fetchFromGitHub {
     owner = "robinostlund";
     repo = "homeassistant-volkswagencarnet";
     tag = "v${version}";
-    hash = "sha256-soSTa6FYnNpzsl5goKS9xcSnubiXXUUGOJ3tDgbFDc8=";
+    hash = "sha256-LtNyzWTyROXYcki/hhExD77Ah6Ka8G8zVLxV4RP0Z1w=";
   };
 
   postPatch = ''
diff --git a/pkgs/servers/http/nginx/modules/echo/package.nix b/pkgs/servers/http/nginx/modules/echo/package.nix
index ea4a748cc50f..03c215d76990 100644
--- a/pkgs/servers/http/nginx/modules/echo/package.nix
+++ b/pkgs/servers/http/nginx/modules/echo/package.nix
@@ -6,14 +6,14 @@
 
 mkNginxPlugin (finalAttrs: {
   pname = "echo";
-  version = "0.63";
+  version = "0.65";
 
   src = fetchFromGitHub {
     name = "echo";
     owner = "openresty";
     repo = "echo-nginx-module";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-K7oOE0yxPYLf+3YMVbBsncpHRpGHXjs/8B5QPO3MQC4=";
+    hash = "sha256-DiukXNS1ZoKVMnDD/65DZxxQSS/lAKZ5b0Pp0Hs6MTc=";
   };
 
   meta = {
diff --git a/pkgs/servers/http/nginx/modules/lua/package.nix b/pkgs/servers/http/nginx/modules/lua/package.nix
index 58c3094376ad..f8f45586e4ab 100644
--- a/pkgs/servers/http/nginx/modules/lua/package.nix
+++ b/pkgs/servers/http/nginx/modules/lua/package.nix
@@ -7,13 +7,13 @@
 
 mkNginxPlugin (finalAttrs: {
   pname = "lua";
-  version = "0.10.29";
+  version = "0.10.31";
 
   src = fetchFromGitHub {
     owner = "openresty";
     repo = "lua-nginx-module";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-z62Vwrthl1FJiTdrdhifZZe6crdi8c6sTkUim6KmVlU=";
+    hash = "sha256-pS3Ce8duBtD1qb/E3NNnkuNU/39D4S9dJlGIfd9hkkc=";
   };
 
   buildInputs = [ luajit_openresty ];
diff --git a/pkgs/servers/http/nginx/modules/modsecurity/package.nix b/pkgs/servers/http/nginx/modules/modsecurity/package.nix
index 43b18cb900a4..ec3cd5fa0d3c 100644
--- a/pkgs/servers/http/nginx/modules/modsecurity/package.nix
+++ b/pkgs/servers/http/nginx/modules/modsecurity/package.nix
@@ -12,13 +12,13 @@
 
 mkNginxPlugin (finalAttrs: {
   pname = "modsecurity";
-  version = "1.0.3-unstable-2025-02-17";
+  version = "1.0.4";
 
   src = fetchFromGitHub {
     owner = "owasp-modsecurity";
     repo = "ModSecurity-nginx";
-    rev = "0b4f0cf38502f34a30c8543039f345cfc075670d";
-    hash = "sha256-P3IwKFR4NbaMXYY+O9OHfZWzka4M/wr8sJpX94LzQTU=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-pOHn4lHISqRspbRxtB4XpbEydeKVlXpvEVHzSbuLp/s=";
   };
 
   buildInputs = [
@@ -32,7 +32,7 @@ mkNginxPlugin (finalAttrs: {
 
   meta = {
     description = "Open source, cross platform web application firewall (WAF)";
-    homepage = "https://github.com/owasp-modsecurity/ModSecurity";
+    homepage = "https://github.com/owasp-modsecurity/ModSecurity-nginx";
     license = lib.licenses.asl20;
     maintainers = [ ];
   };
diff --git a/pkgs/servers/http/nginx/modules/moreheaders/package.nix b/pkgs/servers/http/nginx/modules/moreheaders/package.nix
index 051206ac8db2..e47efb7decde 100644
--- a/pkgs/servers/http/nginx/modules/moreheaders/package.nix
+++ b/pkgs/servers/http/nginx/modules/moreheaders/package.nix
@@ -6,13 +6,13 @@
 
 mkNginxPlugin (finalAttrs: {
   pname = "moreheaders";
-  version = "0.36";
+  version = "0.40";
 
   src = fetchFromGitHub {
     owner = "openresty";
     repo = "headers-more-nginx-module";
     tag = "v${finalAttrs.version}";
-    sha256 = "sha256-X+ygIesQ9PGm5yM+u1BOLYVpm1172P8jWwXNr3ixFY4=";
+    sha256 = "sha256-4oddjLXtJyDmxCa2ocBtNAeKWXxI38I9eHeFVw9/ANc=";
   };
 
   meta = {
diff --git a/pkgs/servers/http/nginx/modules/pam/package.nix b/pkgs/servers/http/nginx/modules/pam/package.nix
index bb2bb00331b8..4c9166dd40a0 100644
--- a/pkgs/servers/http/nginx/modules/pam/package.nix
+++ b/pkgs/servers/http/nginx/modules/pam/package.nix
@@ -7,13 +7,13 @@
 
 mkNginxPlugin (finalAttrs: {
   pname = "pam";
-  version = "1.5.3";
+  version = "1.5.5";
 
   src = fetchFromGitHub {
     owner = "sto";
     repo = "ngx_http_auth_pam_module";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Kojk0/zxAktpZ/8YvCglVlN0xi+jELYGMcU8CZukliY=";
+    hash = "sha256-ESlrWZwpLE0bVS1MwTc2Zcu7892HsaCQ7APGsmdbIuU=";
   };
 
   buildInputs = [ pam ];
diff --git a/pkgs/servers/http/nginx/modules/set-misc/package.nix b/pkgs/servers/http/nginx/modules/set-misc/package.nix
index 0f299ad65240..2fb1c10c2d41 100644
--- a/pkgs/servers/http/nginx/modules/set-misc/package.nix
+++ b/pkgs/servers/http/nginx/modules/set-misc/package.nix
@@ -8,13 +8,13 @@
 
 mkNginxPlugin (finalAttrs: {
   pname = "set-misc";
-  version = "0.33";
+  version = "0.34";
 
   src = fetchFromGitHub {
     owner = "openresty";
     repo = "set-misc-nginx-module";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-jMMj3Ki1uSfQzagoB/O4NarxPjiaF9YRwjSKo+cgMxo=";
+    hash = "sha256-2QHidYeKCELkWAdXwmMq9DsirK7I06gbsUVz6uJy+CI=";
   };
 
   passthru.tests.nginx = nginx.override {
diff --git a/pkgs/servers/http/nginx/modules/upstream-check/package.nix b/pkgs/servers/http/nginx/modules/upstream-check/package.nix
index b91fd1190405..780238a06496 100644
--- a/pkgs/servers/http/nginx/modules/upstream-check/package.nix
+++ b/pkgs/servers/http/nginx/modules/upstream-check/package.nix
@@ -6,13 +6,13 @@
 
 mkNginxPlugin (finalAttrs: {
   pname = "upstream-check";
-  version = "0.3.0-unstable-2019-11-03";
+  version = "0.4.0";
 
   src = fetchFromGitHub {
     owner = "yaoweibin";
     repo = "nginx_upstream_check_module";
-    rev = "e538034b6ad7992080d2403d6d3da56e4f7ac01e";
-    hash = "sha256-lJzVs+B/1VjGiQeDyl0md/6o1AYVgeWxx7+LAwiYxxs=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-UttWL83yG/QbMstfQwv2cK7mJTzR4G5rv7cktPpC6sI=";
   };
 
   meta = {
diff --git a/pkgs/servers/sql/postgresql/ext/pg_rational.nix b/pkgs/servers/sql/postgresql/ext/pg_rational.nix
index db3fdd340ac9..6092b2ea98ee 100644
--- a/pkgs/servers/sql/postgresql/ext/pg_rational.nix
+++ b/pkgs/servers/sql/postgresql/ext/pg_rational.nix
@@ -7,13 +7,13 @@
 
 postgresqlBuildExtension (finalAttrs: {
   pname = "pg_rational";
-  version = "0.0.2";
+  version = "0.0.3";
 
   src = fetchFromGitHub {
     owner = "begriffs";
     repo = "pg_rational";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Sp5wuX2nP3KGyWw7MFa11rI1CPIKIWBt8nvBSsASIEw=";
+    hash = "sha256-8ctA1XkBOMyO0V9sy2ll6q89jLa7aG5xW9rtr3ugoeA=";
   };
 
   meta = {
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 4170973abee3..8f4da2320b2d 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -1060,6 +1060,7 @@ mapAliases {
   gutenprintBin = gutenprint-bin; # Added 2025-08-21
   gwrap = warnAlias "The 'gwrap' alias has been removed. The correct name of the package is 'g-wrap'" g-wrap; # Added 2026-01-25
   gxneur = throw "'gxneur' has been removed due to lack of maintenance and reliance on gnome2 and 2to3."; # Added 2025-08-17
+  gyroflow-bin = warnAlias "'gyroflow-bin' has been replaced by 'gyroflow'" gyroflow; # Added 2026-08-02
   hacpack = throw "hacpack has been removed from nixpkgs, as it has been taken down upstream"; # Added 2025-09-26
   harmony-music = throw "harmony-music is unmaintained and has been removed"; # Added 2025-08-26
   hasmail = throw "'hasmail' has been removed, as the GTK 2 project is no longer maintained upstream."; # Added 2026-05-22
@@ -1497,6 +1498,7 @@ mapAliases {
   luminanceHDR = throw "'luminanceHDR' has been removed as it depended on EOL qt5 webengine and was unmaintained"; # Added 2026-04-17
   lunarvim = throw "'lunarvim' has been removed since it was abandoned upstream and relied on an older version of 'neovim' to work properly"; # Added 2026-02-05
   lunatic = throw "'lunatic' has been removed, as it is unmaintained"; # Added 2026-05-04
+  lxappearance-gtk2 = throw "'lxappearance-gtk2' was removed because it depended on the deprecated GTK2 engine. Consider using the GTK3-based 'lxappearance' instead."; # Added 2026-07-22
   lxd = throw "
     LXD has been removed from NixOS due to lack of Nixpkgs maintenance.
     Consider migrating or switching to Incus, or remove from your configuration.
@@ -1722,6 +1724,7 @@ mapAliases {
   nim_2_0 = throw "'nim_2_0' has been upgraded and removed, please use 'nim'"; # Added 2026-03-06
   nim_2_2 = throw "'nim_2_2' has been upgraded and removed, please use 'nim'"; # Added 2026-03-06
   nimbo = throw "'nimbo' has been removed due to being archived upstream."; # Added 2026-01-18
+  nip2 = throw "'nip2' has been removed due to lack of maintenance and relying on gtk2.";
   nitrokey-fido2-firmware = throw "'nitrokey-fido2-firmware' has been removed as it was broken and unmaintained upstream since 2022"; # Added 2026-03-23
   nix-direnv-flakes = throw "'nix-direnv-flakes' has been renamed to/replaced by 'nix-direnv'"; # Converted to throw 2025-10-27
   nix-ld-rs = throw "'nix-ld-rs' has been renamed to/replaced by 'nix-ld'"; # Converted to throw 2025-10-27
@@ -2081,6 +2084,7 @@ mapAliases {
   redpanda = throw "'redpanda' has been renamed to/replaced by 'redpanda-client'"; # Converted to throw 2025-10-27
   redshift-plasma-applet = throw "'redshift-plasma-applet' has been removed as it is obsolete and lacks maintenance upstream."; # Added 2025-11-09
   reiserfsprogs = throw "'reiserfsprogs' has been removed as ReiserFS has not been actively maintained for many years."; # Added 2025-11-13
+  remarshal_0_17 = throw "'remarshal_0_17' has been removed because 'remarshal' supports YAML 1.1 with the `--to yaml-1.1` flag."; # added 2026-07-30
   remodel = throw "'remodel' has been removed because it was unmaintained upstream, deprecated in favor of 'lune'"; # Added 2026-05-08
   remotebox = throw "remotebox has been removed because it was unmaintained and broken for a long time"; # Added 2025-09-11
   resp-app = throw "'resp-app' has been replaced by 'redisinsight'"; # Added 2025-12-17
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index a332705983b0..93b5e26d4ae8 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -9210,14 +9210,6 @@ with pkgs;
 
   inherit (pidginPackages) pidgin;
 
-  # perhaps there are better apps for this task? It's how I had configured my previous system.
-  # And I don't want to rewrite all rules
-  profanity = callPackage ../applications/networking/instant-messengers/profanity (
-    {
-    }
-    // (config.profanity or { })
-  );
-
   puredata-with-plugins =
     plugins: callPackage ../by-name/pu/puredata/wrapper.nix { inherit plugins; };
 
@@ -10201,11 +10193,6 @@ with pkgs;
 
   ### DESKTOPS/LXDE
 
-  lxappearance-gtk2 = callPackage ../by-name/lx/lxappearance/package.nix {
-    gtk2 = gtk2-x11;
-    withGtk3 = false;
-  };
-
   lxqt = recurseIntoAttrs (
     import ../desktops/lxqt {
       inherit pkgs;
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 9aff07bb77d4..1c7a15a11e6e 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -2932,6 +2932,8 @@ self: super: with self; {
 
   cdxj-indexer = callPackage ../development/python-modules/cdxj-indexer { };
 
+  cel-python = callPackage ../development/python-modules/cel-python { };
+
   celery = callPackage ../development/python-modules/celery { };
 
   celery-batches = callPackage ../development/python-modules/celery-batches { };
@@ -3281,6 +3283,8 @@ self: super: with self; {
 
   cmake-build-extension = callPackage ../development/python-modules/cmake-build-extension { };
 
+  cmake-parser = callPackage ../development/python-modules/cmake-parser { };
+
   cmarkgfm = callPackage ../development/python-modules/cmarkgfm { };
 
   cmd2 = callPackage ../development/python-modules/cmd2 { };
@@ -3677,6 +3681,10 @@ self: super: with self; {
 
   crewai = callPackage ../development/python-modules/crewai { };
 
+  crewai-cli = callPackage ../development/python-modules/crewai-cli { };
+
+  crewai-core = callPackage ../development/python-modules/crewai-core { };
+
   crispy-bootstrap3 = callPackage ../development/python-modules/crispy-bootstrap3 { };
 
   crispy-bootstrap4 = callPackage ../development/python-modules/crispy-bootstrap4 { };
@@ -5339,9 +5347,7 @@ self: super: with self; {
 
   eheimdigital = callPackage ../development/python-modules/eheimdigital { };
 
-  eigenpy = callPackage ../development/python-modules/eigenpy {
-    inherit (pkgs) graphviz; # need the `dot` program, not the python module
-  };
+  eigenpy = callPackage ../development/python-modules/eigenpy { };
 
   einops = callPackage ../development/python-modules/einops { };
 
@@ -6655,6 +6661,8 @@ self: super: with self; {
 
   geotorch = callPackage ../development/python-modules/geotorch { };
 
+  gepa = callPackage ../development/python-modules/gepa { };
+
   gepetto-gui = toPythonModule (gepetto-viewer.withPlugins [ gepetto-viewer-corba ]);
 
   gepetto-viewer = toPythonModule (pkgs.gepetto-viewer.override { python3Packages = self; });
@@ -21983,6 +21991,8 @@ self: super: with self; {
     llvmPackages = pkgs.llvmPackages_21;
   };
 
+  warp-nn = callPackage ../development/python-modules/warp-nn { };
+
   warrant = callPackage ../development/python-modules/warrant { };
 
   warrant-lite = callPackage ../development/python-modules/warrant-lite { };
diff --git a/pkgs/top-level/release-python.nix b/pkgs/top-level/release-python.nix
index 47b2133368b3..51407db2654f 100644
--- a/pkgs/top-level/release-python.nix
+++ b/pkgs/top-level/release-python.nix
@@ -54,7 +54,7 @@ let
       meta.description = "Release-critical packages from the python package sets";
       constituents = [
         jobs.nixos-render-docs.x86_64-linux # Used in nixos manual
-        jobs.remarshal_0_17.x86_64-linux # Used in pkgs.formats.yaml_1_1
+        jobs.remarshal.x86_64-linux # Used in pkgs.formats.yaml_1_1
         jobs.python313Packages.afdko.x86_64-linux # Used in noto-fonts-color-emoji
         jobs.python313Packages.buildcatrust.x86_64-linux # Used in pkgs.cacert
         jobs.python313Packages.colorama.x86_64-linux # Used in nixos test-driver