From 3002121e4431e52388c21980854e4c12f1d80b1b Mon Sep 17 00:00:00 2001
From: Yueh-Shun Li <shamrocklee@posteo.net>
Date: Sat, 13 Jun 2026 14:51:34 +0800
Subject: [PATCH 01/57] python3Packages.plover_5: handle PySide6-Essentials
 exclusion with pythonRemoveDeps

(cherry picked from commit da525beb6c40ee2245e7f8acdb6d316082b2a550)
---
 pkgs/development/python-modules/plover/5.nix | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/plover/5.nix b/pkgs/development/python-modules/plover/5.nix
index 7676abeb0ee2..e6d992c64974 100644
--- a/pkgs/development/python-modules/plover/5.nix
+++ b/pkgs/development/python-modules/plover/5.nix
@@ -53,10 +53,16 @@ buildPythonPackage (finalAttrs: {
   # pythonRelaxDeps seemingly doesn't work here
   postPatch = ''
     sed -i 's/,<77//g' pyproject.toml
-    sed -i /PySide6-Essentials/d pyproject.toml
   '';
 
-  pythonRelaxDeps = [ "xkbcommon" ];
+  pythonRelaxDeps = [
+    "xkbcommon"
+  ];
+
+  pythonRemoveDeps = [
+    # We currently don't have it in Nixpkgs.
+    "PySide6-Essentials"
+  ];
 
   build-system = [
     babel

From f6eaeda255d6957b6ab10fb6174b8a79e8b45480 Mon Sep 17 00:00:00 2001
From: Yueh-Shun Li <shamrocklee@posteo.net>
Date: Sat, 13 Jun 2026 14:46:24 +0800
Subject: [PATCH 02/57] plover_4, plover_5: add optional-dependencies.gui-qt

(cherry picked from commit 22ecf4e4ab34caa7d5669d39e11bc5917d5aba65)
---
 pkgs/development/python-modules/plover/4.nix | 5 +++++
 pkgs/development/python-modules/plover/5.nix | 6 ++++++
 2 files changed, 11 insertions(+)

diff --git a/pkgs/development/python-modules/plover/4.nix b/pkgs/development/python-modules/plover/4.nix
index eee8ac5e5dc8..50a262bf043c 100644
--- a/pkgs/development/python-modules/plover/4.nix
+++ b/pkgs/development/python-modules/plover/4.nix
@@ -56,6 +56,11 @@ buildPythonPackage (finalAttrs: {
     wcwidth
     xlib
   ];
+  optional-dependencies = {
+    gui-qt = [
+      pyqt5
+    ];
+  };
   nativeBuildInputs = [
     wrapQtAppsHook
   ];
diff --git a/pkgs/development/python-modules/plover/5.nix b/pkgs/development/python-modules/plover/5.nix
index e6d992c64974..c34003ea1585 100644
--- a/pkgs/development/python-modules/plover/5.nix
+++ b/pkgs/development/python-modules/plover/5.nix
@@ -110,6 +110,12 @@ buildPythonPackage (finalAttrs: {
     pyobjc-framework-Cocoa
     pyobjc-framework-Quartz
   ];
+  optional-dependencies = {
+    gui-qt = [
+      # TODO(@ShamrockLee): use PySide6-Essentials once available
+      pyside6
+    ];
+  };
   nativeBuildInputs = [
     wrapQtAppsHook
   ];

From 12a56c34a857e2a76b359de6496a03dbe0e9547f Mon Sep 17 00:00:00 2001
From: Yueh-Shun Li <shamrocklee@posteo.net>
Date: Sat, 13 Jun 2026 19:20:46 +0800
Subject: [PATCH 03/57] python3Packages.plover-combo: init at
 2.0.0-unstable-2025-09-11

Add plover-combo to test plover_5's plover_build_utils.setup.BuildUi

(cherry picked from commit 10fdfd69124a46a216cbb0c888492855718d4236)
---
 .../python-modules/plover-combo/default.nix   | 52 +++++++++++++++++++
 pkgs/top-level/python-packages.nix            |  2 +
 2 files changed, 54 insertions(+)
 create mode 100644 pkgs/development/python-modules/plover-combo/default.nix

diff --git a/pkgs/development/python-modules/plover-combo/default.nix b/pkgs/development/python-modules/plover-combo/default.nix
new file mode 100644
index 000000000000..1f9d43488c21
--- /dev/null
+++ b/pkgs/development/python-modules/plover-combo/default.nix
@@ -0,0 +1,52 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  plover,
+  setuptools,
+  wheel,
+  nix-update-script,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "plover-combo";
+  version = "2.0.0-unstable-2025-09-11";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "opensteno";
+    repo = "plover_combo";
+    rev = "82e4b498bd0d7878af4e60fd26453362f41132a8";
+    hash = "sha256-GCRfoYu/LZDIGs/9RXDCcTEke3PHMifBEuDUrGH/Juc=";
+  };
+
+  build-system = [
+    plover
+    setuptools
+    wheel
+  ];
+
+  dependency = [
+    plover
+  ]
+  ++ plover.optional-dependencies.gui-qt;
+
+  pythonImportsCheck = [
+    "plover_combo"
+
+    # Modules providing Plover entry points
+    "plover_combo.combo_ui"
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Combo Mode for Plover";
+    homepage = "https://github.com/opensteno/plover_combo";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [
+      ShamrockLee
+    ];
+  };
+})
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 3e36fb99dccb..9b3d6c7cb898 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -12806,6 +12806,8 @@ self: super: with self; {
   # https://github.com/opensteno/plover_plugins_registry/blob/master/unsupported.json
   plover = plover_5;
 
+  plover-combo = callPackage ../development/python-modules/plover-combo { };
+
   plover-dict-commands = callPackage ../development/python-modules/plover-dict-commands { };
 
   plover-lapwing-aio = callPackage ../development/python-modules/plover-lapwing-aio { };

From 446e8713bbd1a9e1bce96d33f68c5203eb061c57 Mon Sep 17 00:00:00 2001
From: Yueh-Shun Li <shamrocklee@posteo.net>
Date: Sat, 13 Jun 2026 19:28:53 +0800
Subject: [PATCH 04/57] plover_5: fix plover_build_utils.setup pyside6-rcc and
 pyside6-uic invocation

(cherry picked from commit 428dff617c5f2ed04b045803463df27a6e9a3859)
---
 pkgs/development/python-modules/plover/5.nix | 33 +++++++++++---------
 1 file changed, 19 insertions(+), 14 deletions(-)

diff --git a/pkgs/development/python-modules/plover/5.nix b/pkgs/development/python-modules/plover/5.nix
index c34003ea1585..9a5db28094f0 100644
--- a/pkgs/development/python-modules/plover/5.nix
+++ b/pkgs/development/python-modules/plover/5.nix
@@ -36,6 +36,20 @@
   pyobjc-core,
 }:
 
+let
+  # Replacement for missing pyside6-essentials tools,
+  # workaround for https://github.com/NixOS/nixpkgs/issues/277849.
+  # Ideally this would be solved in pyside6 itself but I spent four
+  # hours trying to untangle its build system before giving up. If
+  # anyone wants to spend the time fixing it feel free to request
+  # me (@Pandapip1) as a reviewer.
+  pyside-tools-rcc = buildPackages.writeShellScriptBin "pyside6-rcc" ''
+    exec ${buildPackages.qt6.qtbase}/libexec/rcc -g python "$@"
+  '';
+  pyside-tools-uic = buildPackages.writeShellScriptBin "pyside6-uic" ''
+    exec ${buildPackages.qt6.qtbase}/libexec/uic -g python "$@"
+  '';
+in
 buildPythonPackage (finalAttrs: {
   __structuredAttrs = true;
 
@@ -50,9 +64,13 @@ buildPythonPackage (finalAttrs: {
     hash = "sha256-1NpZmUDq806geKANqswPYglHwInxum/c/Hxq7JhTpbc=";
   };
 
-  # pythonRelaxDeps seemingly doesn't work here
   postPatch = ''
+    # pythonRelaxDeps doesn't work for build-system dependencies
     sed -i 's/,<77//g' pyproject.toml
+
+    substituteInPlace plover_build_utils/setup.py \
+      --replace-fail "pyside6-rcc" ${lib.getExe pyside-tools-rcc} \
+      --replace-fail "pyside6-uic" ${lib.getExe pyside-tools-uic}
   '';
 
   pythonRelaxDeps = [
@@ -69,19 +87,6 @@ buildPythonPackage (finalAttrs: {
     setuptools
     pyside6
     wheel
-
-    # Replacement for missing pyside6-essentials tools,
-    # workaround for https://github.com/NixOS/nixpkgs/issues/277849.
-    # Ideally this would be solved in pyside6 itself but I spent four
-    # hours trying to untangle its build system before giving up. If
-    # anyone wants to spend the time fixing it feel free to request
-    # me (@Pandapip1) as a reviewer.
-    (buildPackages.writeShellScriptBin "pyside6-uic" ''
-      exec ${qtbase}/libexec/uic -g python "$@"
-    '')
-    (buildPackages.writeShellScriptBin "pyside6-rcc" ''
-      exec ${qtbase}/libexec/rcc -g python "$@"
-    '')
   ];
   dependencies = [
     appdirs

From 104ddd0803f67c0a20bd41dabb7c54f51e9092a3 Mon Sep 17 00:00:00 2001
From: patka <patka@patka.dev>
Date: Sun, 21 Jun 2026 13:27:31 +0200
Subject: [PATCH 05/57] freeswitch: 1.10.12 -> 1.11.1

(cherry picked from commit 34bf0414d5fc6ea5e158dcda3fffbe71f9b07197)
---
 pkgs/by-name/fr/freeswitch/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/fr/freeswitch/package.nix b/pkgs/by-name/fr/freeswitch/package.nix
index c80de735f401..f8a2d2e02dc9 100644
--- a/pkgs/by-name/fr/freeswitch/package.nix
+++ b/pkgs/by-name/fr/freeswitch/package.nix
@@ -12,7 +12,7 @@
   sqlite,
   libjpeg,
   speex,
-  pcre,
+  pcre2,
   libuuid,
   ldns,
   libedit,
@@ -109,12 +109,12 @@ in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "freeswitch";
-  version = "1.10.12";
+  version = "1.11.1";
   src = fetchFromGitHub {
     owner = "signalwire";
     repo = "freeswitch";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-uOO+TpKjJkdjEp4nHzxcHtZOXqXzpkIF3dno1AX17d8=";
+    hash = "sha256-uXn5MLEsGPfRzTQJ/v3Tq1yXVIWZQwNQIyvZulMxSqU=";
   };
 
   postPatch = ''
@@ -146,7 +146,7 @@ stdenv.mkDerivation (finalAttrs: {
     readline
     libjpeg
     sqlite
-    pcre
+    pcre2
     speex
     ldns
     libedit

From e7d2ba1b187b0c85f2e13b8951a18205c52d795d Mon Sep 17 00:00:00 2001
From: Thomas Gerbet <thomas@gerbet.me>
Date: Sat, 25 Jul 2026 15:23:38 +0200
Subject: [PATCH 06/57] ocelot-desktop: avoid putting empty segments in PATH
 and LD_LIBRARY_PATH

(cherry picked from commit d92de35181ffc884a7f88dab44d0610f1141daec)
---
 pkgs/by-name/oc/ocelot-desktop/package.nix | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/oc/ocelot-desktop/package.nix b/pkgs/by-name/oc/ocelot-desktop/package.nix
index 16e9fc6d3c1a..683a8384d9c9 100644
--- a/pkgs/by-name/oc/ocelot-desktop/package.nix
+++ b/pkgs/by-name/oc/ocelot-desktop/package.nix
@@ -81,9 +81,13 @@ stdenv.mkDerivation (finalAttrs: {
       install -Dm644 ${finalAttrs.src} $out/share/ocelot-desktop/ocelot-desktop.jar
 
       makeBinaryWrapper ${jre}/bin/java $out/bin/ocelot-desktop \
-        --set JAVA_HOME ${jre.home} \
-        --prefix LD_LIBRARY_PATH : "${lib.makeLibraryPath runtimeLibs}" \
-        --prefix PATH : "${lib.makeBinPath runtimePrograms}" \
+        --set JAVA_HOME ${jre.home} ${
+          lib.optionalString (
+            runtimeLibs != [ ]
+          ) "--prefix LD_LIBRARY_PATH : \"${lib.makeLibraryPath runtimeLibs}\""
+        } ${
+          lib.optionalString (runtimePrograms != [ ]) "--prefix PATH : \"${lib.makeBinPath runtimePrograms}\""
+        } \
         --add-flags "-jar $out/share/ocelot-desktop/ocelot-desktop.jar"
 
       # copy icons from zip file

From 350fcc3193994d85ada45b0d7ee4c5c2f6d19b1c Mon Sep 17 00:00:00 2001
From: Sean Buckley <sean.bck@gmail.com>
Date: Sun, 2 Aug 2026 19:00:33 -0400
Subject: [PATCH 07/57] brave: 1.92.144 -> 1.93.129

https://community.brave.app/t/release-channel-1-93-129/656295

Not-cherry-picked-because: stable branch still requires x86_64-darwin
---
 pkgs/by-name/br/brave/package.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/br/brave/package.nix b/pkgs/by-name/br/brave/package.nix
index 0b0a483ca026..4a83aec8cebe 100644
--- a/pkgs/by-name/br/brave/package.nix
+++ b/pkgs/by-name/br/brave/package.nix
@@ -3,24 +3,24 @@
 
 let
   pname = "brave";
-  version = "1.92.144";
+  version = "1.93.129";
 
   allArchives = {
     aarch64-linux = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_arm64.deb";
-      hash = "sha256-Z9uUJRaMx+P35oXtvAnjHyOQOXt8mW5oyyEtnD754x8=";
+      hash = "sha256-pO6vTzTv7OKcP5uJwlcc+vUdg/0Lm2Q6apnEhjRxasM=";
     };
     x86_64-linux = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_amd64.deb";
-      hash = "sha256-no/KD+3EB6CqvVWEmDB/8k2rv1wau469FBXMNWN7z6k=";
+      hash = "sha256-fOyneo8kzoGqldT6nYRzFqgy1+WhKGhcSkJQTCd4w6k=";
     };
     aarch64-darwin = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-v${version}-darwin-arm64.zip";
-      hash = "sha256-YidWCVGP36wn1goAulSbVrKFoHI1NA/pLtfPjIXBO48=";
+      hash = "sha256-phHj7wAZKhRsqYrApNONbjM3RQBra893cDUq6e2lBrs=";
     };
     x86_64-darwin = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-v${version}-darwin-x64.zip";
-      hash = "sha256-fP+TPE2+Whqe6kpH3GG441fQQ5YX42bwdkSDoTGgYwk=";
+      hash = "sha256-eE2j3C94h86GqC4XliD1xAqyqJJhfJCITN9ze3LBxLU=";
     };
   };
 

From 1e826ad01023caf9c244973c182908bf415d9424 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 2 Jun 2026 19:55:56 +0000
Subject: [PATCH 08/57] nats-server: 2.14.1 -> 2.14.2

(cherry picked from commit 0ba17dd3af44de8205c142c9ad18e2aad6add798)
Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
---
 pkgs/by-name/na/nats-server/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/na/nats-server/package.nix b/pkgs/by-name/na/nats-server/package.nix
index f2ac5a94bf0c..8b1b47de2a4a 100644
--- a/pkgs/by-name/na/nats-server/package.nix
+++ b/pkgs/by-name/na/nats-server/package.nix
@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "nats-server";
-  version = "2.14.1";
+  version = "2.14.2";
 
   src = fetchFromGitHub {
     owner = "nats-io";
     repo = "nats-server";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-SvgOts4bI60vKVDw5IZzn3PIoXVXk3sysqDf3doJ164=";
+    hash = "sha256-XK+Yu1DGmS8F0Sbi3Y6KrGtOw63JzJ1ax5LjoZWCkcY=";
   };
 
-  vendorHash = "sha256-/tmb8bd89+BWmbt6mJyRiFPvFSRMoU6eXr4WnWS0oog=";
+  vendorHash = "sha256-q52NL8I/7xkLb6qeDyv8vTuW0C3CRFuyc6UIPw92uD4=";
 
   doCheck = false;
 

From 12703f5b673612a1c38eb70b97c1792e50323029 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 29 Jun 2026 17:32:57 +0000
Subject: [PATCH 09/57] nats-server: 2.14.2 -> 2.14.3

(cherry picked from commit 60f9d957a3d1cbe546ad58e08393c5ee04f8fe76)
Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
---
 pkgs/by-name/na/nats-server/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/na/nats-server/package.nix b/pkgs/by-name/na/nats-server/package.nix
index 8b1b47de2a4a..c35933178c98 100644
--- a/pkgs/by-name/na/nats-server/package.nix
+++ b/pkgs/by-name/na/nats-server/package.nix
@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "nats-server";
-  version = "2.14.2";
+  version = "2.14.3";
 
   src = fetchFromGitHub {
     owner = "nats-io";
     repo = "nats-server";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-XK+Yu1DGmS8F0Sbi3Y6KrGtOw63JzJ1ax5LjoZWCkcY=";
+    hash = "sha256-139eSr6ECC1vThHbdnDPg8wJS0FJuwDKpm4BupRdjSk=";
   };
 
-  vendorHash = "sha256-q52NL8I/7xkLb6qeDyv8vTuW0C3CRFuyc6UIPw92uD4=";
+  vendorHash = "sha256-F7XKN/MMX8FOiRY8gugrKU2j+RQE/vY3eTV7ORVRc2U=";
 
   doCheck = false;
 

From 3a81874bcf65392a7930298587f9cafeed6bb505 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 30 Jul 2026 17:25:00 +0000
Subject: [PATCH 10/57] nats-server: 2.14.3 -> 2.14.4

(cherry picked from commit 51d6cb46a15af4c95f38afdf44bde5a28db9df18)
Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
---
 pkgs/by-name/na/nats-server/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/na/nats-server/package.nix b/pkgs/by-name/na/nats-server/package.nix
index c35933178c98..31a5d4c09ad4 100644
--- a/pkgs/by-name/na/nats-server/package.nix
+++ b/pkgs/by-name/na/nats-server/package.nix
@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "nats-server";
-  version = "2.14.3";
+  version = "2.14.4";
 
   src = fetchFromGitHub {
     owner = "nats-io";
     repo = "nats-server";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-139eSr6ECC1vThHbdnDPg8wJS0FJuwDKpm4BupRdjSk=";
+    hash = "sha256-Jbw+R1na8tjTLyKJC/KDPhA1G1jgNxMhC+xD38IWH2k=";
   };
 
-  vendorHash = "sha256-F7XKN/MMX8FOiRY8gugrKU2j+RQE/vY3eTV7ORVRc2U=";
+  vendorHash = "sha256-Lmbacb85+hTe4QoeO72aPOytZQiMQCymOelmGwh0/2E=";
 
   doCheck = false;
 

From de795435c35029ea3d2ee9999ca40e7193a9c765 Mon Sep 17 00:00:00 2001
From: Gerhard Schwanzer <geri@sdf.org>
Date: Sat, 25 Jul 2026 21:14:14 +0200
Subject: [PATCH 11/57] siyuan: 3.7.1 -> 3.7.3

Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
(cherry picked from commit 4afb4e6743bf9f7abff902e3bd74b1d518f2b020)
---
 pkgs/by-name/si/siyuan/package.nix | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/si/siyuan/package.nix b/pkgs/by-name/si/siyuan/package.nix
index 032bf5a838d4..3277eb02d0e9 100644
--- a/pkgs/by-name/si/siyuan/package.nix
+++ b/pkgs/by-name/si/siyuan/package.nix
@@ -34,20 +34,20 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "siyuan";
-  version = "3.7.1";
+  version = "3.7.3";
 
   src = fetchFromGitHub {
     owner = "siyuan-note";
     repo = "siyuan";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-K31h2noDpTn7vCXj16K2dxRPww5z+HC/nA4Gn5MAVms=";
+    hash = "sha256-7Uoo8vYaci8ROk5pqs14dNrU3q7UsadDXyw1mW8Mx5I=";
   };
 
   kernel = buildGoModule {
     name = "${finalAttrs.pname}-${finalAttrs.version}-kernel";
     inherit (finalAttrs) src;
     sourceRoot = "${finalAttrs.src.name}/kernel";
-    vendorHash = "sha256-fZLVqrWTWUHo6BhixB6+krXaM7WCiZpusHA8T2SicgQ=";
+    vendorHash = "sha256-weg5MRidW8JId13Ug1VaVgaIcJqydGBR/EquFOS3QO4=";
 
     patches = [
       (replaceVars ./set-pandoc-path.patch {
@@ -70,6 +70,9 @@ stdenv.mkDerivation (finalAttrs: {
       "-X 'github.com/siyuan-note/siyuan/kernel/util.Mode=prod'"
     ];
     tags = [ "fts5" ];
+
+    # filepath.ToSlash does not convert Windows path separators on Unix.
+    checkFlags = [ "-skip=^TestSyObjectBase/windows_backslash$" ];
   };
 
   nativeBuildInputs = [
@@ -94,7 +97,7 @@ stdenv.mkDerivation (finalAttrs: {
       ;
     inherit pnpm;
     fetcherVersion = 3;
-    hash = "sha256-4yqTBR8gv5q6uyuDq7Bgs1275YBQ87aaTYkNFtamVek=";
+    hash = "sha256-QzoQLOUFaQwv8+u/oIZ6mq7AIzLZtogKjBIr6SnlK1c=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/app";

From 7be77dd2694b794ccb88441b184abfbbedb1a4a9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Mon, 3 Aug 2026 13:50:33 -0700
Subject: [PATCH 12/57] coturn: 4.13.1 -> 4.16.0

Diff: https://github.com/coturn/coturn/compare/4.13.1...4.16.0

Changelog: https://github.com/coturn/coturn/blob/4.16.0/ChangeLog
(cherry picked from commit 0e631895ab3f871fafeef2ca5007b4acd83f8954)
---
 .../dont-call-setgroups-unconditionally.patch | 46 -------------------
 pkgs/by-name/co/coturn/package.nix            | 10 +---
 2 files changed, 2 insertions(+), 54 deletions(-)
 delete mode 100644 pkgs/by-name/co/coturn/dont-call-setgroups-unconditionally.patch

diff --git a/pkgs/by-name/co/coturn/dont-call-setgroups-unconditionally.patch b/pkgs/by-name/co/coturn/dont-call-setgroups-unconditionally.patch
deleted file mode 100644
index 6b7780cbee84..000000000000
--- a/pkgs/by-name/co/coturn/dont-call-setgroups-unconditionally.patch
+++ /dev/null
@@ -1,46 +0,0 @@
-From 1b5da9c7c5423eed7a567a02e66c244705116724 Mon Sep 17 00:00:00 2001
-From: networkException <git@nwex.de>
-Date: Thu, 30 May 2024 02:07:04 +0200
-Subject: [PATCH] Don't call `setgroups` unconditionally in mainrelay
-
-This patch moves the call to `setgroups` from the beginning of the
-`drop_priviliges` function to branch in which `setuid` is actually
-called. This still fulfills the intention of
-acbf7e15c9290e0891a6b6b5ce6e81bbaa77ce5a, initially introducting
-the call to `setgroups`:
-
-> Fix related to POS36-C and rpmlint error
-> "missing-call-to-setgroups-before-setuid".
-
-As per this intention is is not required to call `setgroups`
-otherwise, reducing the more exotic (as in not part of POSIX and
-considered priviliged by systemd) system calls coturn needs to make
-at startup.
----
- src/apps/relay/mainrelay.c | 6 +++++-
- 1 file changed, 5 insertions(+), 1 deletion(-)
-
-diff --git a/src/apps/relay/mainrelay.c b/src/apps/relay/mainrelay.c
-index cf370ec8a..56eaf82d0 100644
---- a/src/apps/relay/mainrelay.c
-+++ b/src/apps/relay/mainrelay.c
-@@ -2913,7 +2913,6 @@ static void drop_privileges(void) {
- #if defined(WINDOWS)
-   // TODO: implement it!!!
- #else
--  setgroups(0, NULL);
-   if (procgroupid_set) {
-     if (getgid() != procgroupid) {
-       if (setgid(procgroupid) != 0) {
-@@ -2929,6 +2928,11 @@ static void drop_privileges(void) {
- 
-   if (procuserid_set) {
-     if (procuserid != getuid()) {
-+      if (setgroups(0, NULL) != 0) {
-+        perror("setgroups: Unable drop supplementary groups");
-+        exit(-1);
-+      }
-+
-       if (setuid(procuserid) != 0) {
-         perror("setuid: Unable to change user privileges");
-         exit(-1);
diff --git a/pkgs/by-name/co/coturn/package.nix b/pkgs/by-name/co/coturn/package.nix
index 142647a7f086..b8b1ab56b55f 100644
--- a/pkgs/by-name/co/coturn/package.nix
+++ b/pkgs/by-name/co/coturn/package.nix
@@ -5,7 +5,6 @@
   openssl,
   libevent,
   pkg-config,
-  libprom,
   libmicrohttpd,
   sqlite,
   nixosTests,
@@ -14,13 +13,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "coturn";
-  version = "4.13.1";
+  version = "4.16.0";
 
   src = fetchFromGitHub {
     owner = "coturn";
     repo = "coturn";
     tag = finalAttrs.version;
-    hash = "sha256-66bPrw/jUleEOKBBdNDa8qyxxQCiLk5saTnUQfDdTak=";
+    hash = "sha256-XQeS81QImTQXeC60PKNPGAvlM39AsVLOGn+H72i9Kb8=";
   };
 
   nativeBuildInputs = [
@@ -30,7 +29,6 @@ stdenv.mkDerivation (finalAttrs: {
   buildInputs = [
     openssl
     (libevent.override { inherit openssl; })
-    libprom
     libmicrohttpd
     sqlite.dev
   ]
@@ -40,10 +38,6 @@ stdenv.mkDerivation (finalAttrs: {
 
   patches = [
     ./pure-configure.patch
-
-    # Don't call setgroups unconditionally in mainrelay
-    # https://github.com/coturn/coturn/pull/1508
-    ./dont-call-setgroups-unconditionally.patch
   ];
 
   configureFlags = [

From 75e3752362102d04e7631186a2ee48125889b646 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 3 Aug 2026 23:14:00 +0000
Subject: [PATCH 13/57] rclone: 1.74.4 -> 1.75.0

(cherry picked from commit 406cce9c0da9a2935588c0267a16bbbcba958d0c)
---
 pkgs/by-name/rc/rclone/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/rc/rclone/package.nix b/pkgs/by-name/rc/rclone/package.nix
index 8bcd90b05e6e..12a0f918b981 100644
--- a/pkgs/by-name/rc/rclone/package.nix
+++ b/pkgs/by-name/rc/rclone/package.nix
@@ -17,7 +17,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "rclone";
-  version = "1.74.4";
+  version = "1.75.0";
 
   outputs = [
     "out"
@@ -28,10 +28,10 @@ buildGoModule (finalAttrs: {
     owner = "rclone";
     repo = "rclone";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-n+s9OiSwjiFwR1/DEd81YZIAyaMWMj0g8ORf6grnE3M=";
+    hash = "sha256-8Al3jB+R8U68TuIfDQ+q9V/OjIed176csajwiSljwZU=";
   };
 
-  vendorHash = "sha256-PVTcYFRr4Zb4VVsY6dkO+emZ48Nyr9aUBJbehFlDh9c=";
+  vendorHash = "sha256-jjbDyZwHCx9oeFuMVMY5sJeRNlCUyU9quO/aqzxeJnU=";
 
   subPackages = [ "." ];
 

From af38b7121febf53f1a026bf84adb8b8d40a37e86 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 5 Aug 2026 19:01:52 +0000
Subject: [PATCH 14/57] firefox-beta-unwrapped: 153.0b13 -> 154.0b7

(cherry picked from commit 1e590b71fe44f5abc17fe5495743caeeb32589d2)
---
 .../networking/browsers/firefox/packages/firefox-beta.nix     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix b/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix
index 83fb6538eb5b..545d8bf9b2bd 100644
--- a/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix
+++ b/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix
@@ -10,11 +10,11 @@
 buildMozillaMach rec {
   pname = "firefox-beta";
   binaryName = "firefox-beta";
-  version = "153.0b13";
+  version = "154.0b7";
   applicationName = "Firefox Beta";
   src = fetchurl {
     url = "mirror://mozilla/firefox/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "fecfb1837d1907d54ed52bc40113804b6637352c2cbe6eb906f950d7749cbece32446b42c392102fa9e16591949619237dc2dbeb13bec18697ddd42e9ce8d4dd";
+    sha512 = "2a7da6938054f01a443da8d7cbaa38c99d76d90661f404754096041d9e8d5a27b118dcebd27687867706ba2540e5d453b8908e35f75a712220e812436d239dee";
   };
 
   meta = {

From 15949e5ea990dca7b68207a55a2c12ab5c318b27 Mon Sep 17 00:00:00 2001
From: Sizhe Zhao <prc.zhao@outlook.com>
Date: Sun, 2 Aug 2026 23:41:45 +0800
Subject: [PATCH 15/57] obsidian: fix build on darwin
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

(cherry picked from commit c594c220ba1f91031d7639c22fbe51d67487b96b)
Signed-off-by: Wölfchen <w-lfchen@posteo.net>
---
 pkgs/by-name/ob/obsidian/package.nix | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ob/obsidian/package.nix b/pkgs/by-name/ob/obsidian/package.nix
index 155cec03b9e6..33169fc7ba8e 100644
--- a/pkgs/by-name/ob/obsidian/package.nix
+++ b/pkgs/by-name/ob/obsidian/package.nix
@@ -140,15 +140,14 @@ let
       appname
       meta
       ;
-    sourceRoot = "${appname}.app";
     nativeBuildInputs = [
       makeWrapper
       _7zz
     ];
     installPhase = ''
       runHook preInstall
-      mkdir -p $out/{Applications/${appname}.app,bin}
-      cp -R . $out/Applications/${appname}.app
+      mkdir -p $out/{Applications,bin}
+      cp -R ${appname}.app $out/Applications
       makeWrapper $out/Applications/${appname}.app/Contents/MacOS/${appname} $out/bin/obsidian
       makeWrapper $out/Applications/${appname}.app/Contents/MacOS/obsidian-cli $out/bin/obsidian-cli
       runHook postInstall

From aba9d1cbca9f8697481c18f2338a980cb18b6468 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 6 Aug 2026 08:38:20 +0000
Subject: [PATCH 16/57] mailpit: 1.30.5 -> 1.30.6

(cherry picked from commit 09bfbf1ee4d7f9a8a966158d1b3391ac600233e7)
---
 pkgs/by-name/ma/mailpit/source.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ma/mailpit/source.nix b/pkgs/by-name/ma/mailpit/source.nix
index 59cb7d7891ee..574ebd869266 100644
--- a/pkgs/by-name/ma/mailpit/source.nix
+++ b/pkgs/by-name/ma/mailpit/source.nix
@@ -1,6 +1,6 @@
 {
-  version = "1.30.5";
-  hash = "sha256-Iw5lTBREiFJ8M4igxv729gV8o9Sp2dqdpd48369cv3c=";
-  npmDepsHash = "sha256-aJmcVMZmVM3QJ6Jh5Kf5efDQVqm+W3qvKwxb3FRDbQ8=";
-  vendorHash = "sha256-o0svdQvYvTAsplFlP2aOChC2JC1mnzJM1QTyu8HcZjI=";
+  version = "1.30.6";
+  hash = "sha256-XB88EPRfZAcseYvPWsJSuI5FEtbH9VYTg6TuSh503uQ=";
+  npmDepsHash = "sha256-BgNbQ+hH04GOQllXm0/K0v7YM2DoKE/KXLR6z9p2Bso=";
+  vendorHash = "sha256-2HPXdCuFAg5AR0hLPlKdzxlkJL6XOdBjZPU+x66wtDE=";
 }

From 42a46f2965cedd4d1af045fcc2909040963d8d5a Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sat, 20 Jun 2026 10:41:47 +0200
Subject: [PATCH 17/57] python3Packages.banks: 2.4.2 -> 2.4.3

Diff: https://github.com/masci/banks/compare/v2.4.2...v2.4.3

Changelog: https://github.com/masci/banks/releases/tag/v2.4.3
(cherry picked from commit 12e285daa765540584a2ecbff17597e310e10b4e)
---
 pkgs/development/python-modules/banks/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/banks/default.nix b/pkgs/development/python-modules/banks/default.nix
index d0440bd9dc0c..a3dd269437bc 100644
--- a/pkgs/development/python-modules/banks/default.nix
+++ b/pkgs/development/python-modules/banks/default.nix
@@ -19,14 +19,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "banks";
-  version = "2.4.2";
+  version = "2.4.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "masci";
     repo = "banks";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-FSulHLWXNO9jz9K7qgrrZcvfe2iQGxdkJVOZlo+Qw/c=";
+    hash = "sha256-6B/jbvW+nfsruPJMk+z5SP2LS85MYOlmMpBYHypUOHA=";
   };
 
   env.SSL_CERT_FILE = "${cacert}/etc/ssl/certs/ca-bundle.crt";

From f0327695ddd2c094dd67dd48682513778fc22f37 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 26 Jun 2026 22:14:04 +0200
Subject: [PATCH 18/57] python3Packages.banks: 2.4.3 -> 2.4.4

Diff: https://github.com/masci/banks/compare/v2.4.3...v2.4.4

Changelog: https://github.com/masci/banks/releases/tag/v2.4.4
(cherry picked from commit 08b369df1c3a2e9ec8a466d8c802858e871b92c0)
---
 pkgs/development/python-modules/banks/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/banks/default.nix b/pkgs/development/python-modules/banks/default.nix
index a3dd269437bc..c4bc1a3f1d80 100644
--- a/pkgs/development/python-modules/banks/default.nix
+++ b/pkgs/development/python-modules/banks/default.nix
@@ -19,14 +19,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "banks";
-  version = "2.4.3";
+  version = "2.4.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "masci";
     repo = "banks";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-6B/jbvW+nfsruPJMk+z5SP2LS85MYOlmMpBYHypUOHA=";
+    hash = "sha256-LlUVwGCcY/CA0XTjpppv6QNnyagDZR6+SaRfkyHVBw4=";
   };
 
   env.SSL_CERT_FILE = "${cacert}/etc/ssl/certs/ca-bundle.crt";

From 8e31a7d6ce6437a35112c9653355332dd3e308be Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Thu, 30 Jul 2026 19:22:12 +0200
Subject: [PATCH 19/57] python3Packages.banks: 2.4.4 -> 2.4.5

Diff: https://github.com/masci/banks/compare/v2.4.4...v2.4.5

Changelog: https://github.com/masci/banks/releases/tag/v2.4.5
(cherry picked from commit 5c82996d4dd80a8d0684ee0dcde8d213fda28a6b)
---
 pkgs/development/python-modules/banks/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/banks/default.nix b/pkgs/development/python-modules/banks/default.nix
index c4bc1a3f1d80..6ac37202a0dd 100644
--- a/pkgs/development/python-modules/banks/default.nix
+++ b/pkgs/development/python-modules/banks/default.nix
@@ -19,14 +19,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "banks";
-  version = "2.4.4";
+  version = "2.4.5";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "masci";
     repo = "banks";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-LlUVwGCcY/CA0XTjpppv6QNnyagDZR6+SaRfkyHVBw4=";
+    hash = "sha256-VAo1pQVgoNs12FZ8NqJZ1WydQIJmju9M6KAcL15hKMg=";
   };
 
   env.SSL_CERT_FILE = "${cacert}/etc/ssl/certs/ca-bundle.crt";

From 0a901c53461ebda24cbaef58813e72e807596797 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 3 Aug 2026 05:26:54 +0000
Subject: [PATCH 20/57] hey-mail: 1.3.3 -> 1.3.6

(cherry picked from commit 82a27d0ffdcf82049933f2d6ba31b2e9afd88350)
---
 pkgs/by-name/he/hey-mail/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/he/hey-mail/package.nix b/pkgs/by-name/he/hey-mail/package.nix
index 26c2a482e23d..bee1c1725011 100644
--- a/pkgs/by-name/he/hey-mail/package.nix
+++ b/pkgs/by-name/he/hey-mail/package.nix
@@ -94,12 +94,12 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "hey-mail";
-  version = "1.3.3";
-  rev = "31";
+  version = "1.3.6";
+  rev = "33";
 
   src = fetchurl {
     url = "https://api.snapcraft.io/api/v1/snaps/download/lfWUNpR7PrPGsDfuxIhVxbj0wZHoH7bK_${finalAttrs.rev}.snap";
-    hash = "sha512-0KhmZ1xkEPuuzukeKbWW7jeNh2TOINMnOtuwpZQIM7sgDhCSl2DEZnguEKY2DvGNTTQxVWSZcuU/KSSblqIE4Q==";
+    hash = "sha512-UVutihbA/CDPefCqiJtSbHSWDZj5yHGAEpVO9kd/a72DEszcUid7Xg5HzDQYifDEXyP//AfLFP1rAa058K2SNg==";
   };
 
   nativeBuildInputs = [

From 9d4fb54fedbe3988cc22e9fee750b227aafb655f Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 31 Jul 2026 14:46:46 +0000
Subject: [PATCH 21/57] traefik: 3.7.8 -> 3.7.10

(cherry picked from commit fca89ca63a6d79ec4260ce295b202abbd8de8abc)
---
 pkgs/by-name/tr/traefik/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/tr/traefik/package.nix b/pkgs/by-name/tr/traefik/package.nix
index 9d81b4b20549..7db094b3af91 100644
--- a/pkgs/by-name/tr/traefik/package.nix
+++ b/pkgs/by-name/tr/traefik/package.nix
@@ -8,16 +8,16 @@
 
 buildGo126Module (finalAttrs: {
   pname = "traefik";
-  version = "3.7.8";
+  version = "3.7.10";
 
   # Archive with static assets for webui
   src = fetchzip {
     url = "https://github.com/traefik/traefik/releases/download/v${finalAttrs.version}/traefik-v${finalAttrs.version}.src.tar.gz";
-    hash = "sha256-nFc3Mcy0kbeEvyrKfrF9AR60RZOEIMMwsUmefUAi84Y=";
+    hash = "sha256-Y7SQ4MOqsoNREZ7FXiMaOb9/gP+eTVImSiLcnJ4bRhA=";
     stripRoot = false;
   };
 
-  vendorHash = "sha256-z+Ku6GOecoiZ8eJVHUiD/GxV2blSIfLOs+Yr4B8coI8=";
+  vendorHash = "sha256-qN+5DiiJpk6Eh/848PLUUtjrGp4QtiIuI4drPzdsriA=";
 
   proxyVendor = true;
 

From a151dcfb133cd8da2d0ce1b0eaa2ef52fef4fc9b Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 18 Jul 2026 22:39:22 +0200
Subject: [PATCH 22/57] gexiv2_0_16: 0.16.0 -> 0.16.1

https://gitlab.gnome.org/GNOME/gexiv2/-/compare/0.16.0...0.16.1
(cherry picked from commit b1797c03b7596eee4d698223d9f694f38cdafba2)
---
 pkgs/by-name/ge/gexiv2_0_16/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ge/gexiv2_0_16/package.nix b/pkgs/by-name/ge/gexiv2_0_16/package.nix
index 800d2f25767a..0f0f0127ad28 100644
--- a/pkgs/by-name/ge/gexiv2_0_16/package.nix
+++ b/pkgs/by-name/ge/gexiv2_0_16/package.nix
@@ -18,7 +18,7 @@ stdenv.mkDerivation (finalAttrs: {
   pname = "gexiv2";
   __structuredAttrs = true;
   strictDeps = true;
-  version = "0.16.0";
+  version = "0.16.1";
 
   outputs = [
     "out"
@@ -28,7 +28,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/gexiv2/${lib.versions.majorMinor finalAttrs.version}/gexiv2-${finalAttrs.version}.tar.xz";
-    sha256 = "2W+JXyRTn5ZvV3srskia6E+CMpcKjQwGTkoAdHSne7s=";
+    sha256 = "sha256-GOmgXGN6d+gAsAHYf3Dk0Cp7pBt3RUAKMUoQcqHdyUM=";
   };
 
   depsBuildBuild = [

From 93436a780a815aeb44fe6a512f697c7db5e04ca1 Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 18 Jul 2026 20:44:29 +0000
Subject: [PATCH 23/57] glibmm_2_68: 2.88.0 -> 2.88.1

https://gitlab.gnome.org/GNOME/glibmm/-/compare/2.88.0...2.88.1
(cherry picked from commit 9aa64382928a36f8db26837237a841365069205a)
---
 pkgs/by-name/gl/glibmm_2_68/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gl/glibmm_2_68/package.nix b/pkgs/by-name/gl/glibmm_2_68/package.nix
index 0500dca513a4..fecf47a2d198 100644
--- a/pkgs/by-name/gl/glibmm_2_68/package.nix
+++ b/pkgs/by-name/gl/glibmm_2_68/package.nix
@@ -13,7 +13,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "glibmm";
-  version = "2.88.0";
+  version = "2.88.1";
 
   outputs = [
     "out"
@@ -22,7 +22,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/glibmm/${lib.versions.majorMinor finalAttrs.version}/glibmm-${finalAttrs.version}.tar.xz";
-    hash = "sha256-plSdo6bEPeg7hxfa5UE8V6YNkvbsxiRhXGEtC7CtD+I=";
+    hash = "sha256-wTn5YrFXXIgnzTnRrCG3o2e+O9oUCcDH4hopCQ83FQY=";
   };
 
   nativeBuildInputs = [

From cb5db36e02ee9ee84d064f8146e88eaee8c418cc Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 18 Jul 2026 21:01:49 +0000
Subject: [PATCH 24/57] libglycin: 2.1.1 -> 2.1.5

https://gitlab.gnome.org/GNOME/glycin/-/compare/2.1.1...2.1.5
(cherry picked from commit 9c5ec6dfca3e9a1443101fdd4a058d55890d44f4)
---
 pkgs/by-name/li/libglycin/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/li/libglycin/package.nix b/pkgs/by-name/li/libglycin/package.nix
index b2eeab914a7f..3a00f5a33c38 100644
--- a/pkgs/by-name/li/libglycin/package.nix
+++ b/pkgs/by-name/li/libglycin/package.nix
@@ -31,7 +31,7 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "libglycin";
-  version = "2.1.1";
+  version = "2.1.5";
 
   outputs = [
     "out"
@@ -43,12 +43,12 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/glycin/${lib.versions.majorMinor finalAttrs.version}/glycin-${finalAttrs.version}.tar.xz";
-    hash = "sha256-jo6S4xKxTSxfOgR73FMFrcuZMe8BUM90v1JqN0Hm+zI=";
+    hash = "sha256-bAl1fukGMwpgtnBXU6pWvKAHrSGblebjU3UQ1BvDQcg=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-BaIQs2be/W/dQFbO9KthJUWVE2vCT6H594geYJqzIzc=";
+    hash = "sha256-6vCucnT3xPWSm3TSi3WzgJdiiBFHvGMpab4d53OfThg=";
   };
 
   nativeBuildInputs = [

From 1e72eed83da8373653418fba8ec84a71d8efd230 Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 18 Jul 2026 21:12:38 +0000
Subject: [PATCH 25/57] gnome-remote-desktop: 50.1 -> 50.2

https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/compare/50.1...50.2
(cherry picked from commit 0bfb44884086c79cdfe46e9ef28f64d5e5ee299f)
---
 pkgs/by-name/gn/gnome-remote-desktop/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gn/gnome-remote-desktop/package.nix b/pkgs/by-name/gn/gnome-remote-desktop/package.nix
index c59dcfaf7316..15d17bd37689 100644
--- a/pkgs/by-name/gn/gnome-remote-desktop/package.nix
+++ b/pkgs/by-name/gn/gnome-remote-desktop/package.nix
@@ -35,11 +35,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-remote-desktop";
-  version = "50.1";
+  version = "50.2";
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnome-remote-desktop/${lib.versions.major finalAttrs.version}/gnome-remote-desktop-${finalAttrs.version}.tar.xz";
-    hash = "sha256-CJBJEZ4fJEL+l3PwKFNlztwgf0y8fOmvOI4VNmjisXE=";
+    hash = "sha256-Md9ij0ETVz8Tb/yNwAF2Ou1jPNhb7SHli8YfihffCR8=";
   };
 
   nativeBuildInputs = [

From 4bdced70179af3db6e4725616c3cb08f3fe7c05a Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 18 Jul 2026 21:19:00 +0000
Subject: [PATCH 26/57] gnome-shell: 50.2 -> 50.3

https://gitlab.gnome.org/GNOME/gnome-shell/-/compare/50.2...50.3
(cherry picked from commit 93866ee249bd4b103061b7d78fbe994a99b09aab)
---
 pkgs/by-name/gn/gnome-shell/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gn/gnome-shell/package.nix b/pkgs/by-name/gn/gnome-shell/package.nix
index 94315515d002..5fe0434cf185 100644
--- a/pkgs/by-name/gn/gnome-shell/package.nix
+++ b/pkgs/by-name/gn/gnome-shell/package.nix
@@ -73,7 +73,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-shell";
-  version = "50.2";
+  version = "50.3";
 
   outputs = [
     "out"
@@ -82,7 +82,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnome-shell/${lib.versions.major finalAttrs.version}/gnome-shell-${finalAttrs.version}.tar.xz";
-    hash = "sha256-UyFUIOUO/dTQYRultZ4Qy0yJ+j9R4q3f2Vyt4GGgmik=";
+    hash = "sha256-RQRYxEom0lqbhCiOErkAXUxcRGSM/Gt5C+GaBd5/FzU=";
   };
 
   patches = [

From 32a9045c3271f63a0bb5b15cb092d9a577e51ad5 Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 18 Jul 2026 21:25:55 +0000
Subject: [PATCH 27/57] mm-common: 1.0.7 -> 1.0.8

https://gitlab.gnome.org/GNOME/mm-common/-/compare/1.0.7...1.0.8
(cherry picked from commit bbe8ee46ae72372cffabf8d17d5a38822d6fdd45)
---
 pkgs/by-name/mm/mm-common/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/mm/mm-common/package.nix b/pkgs/by-name/mm/mm-common/package.nix
index 72e4d1427c04..b1f3765c829a 100644
--- a/pkgs/by-name/mm/mm-common/package.nix
+++ b/pkgs/by-name/mm/mm-common/package.nix
@@ -11,11 +11,11 @@
 
 stdenv.mkDerivation rec {
   pname = "mm-common";
-  version = "1.0.7";
+  version = "1.0.8";
 
   src = fetchurl {
     url = "mirror://gnome/sources/mm-common/${lib.versions.majorMinor version}/mm-common-${version}.tar.xz";
-    sha256 = "SUq/zngUGCWbHp2IiMc69N5LbzvjbMddm6qLqg8qejk=";
+    sha256 = "sYnuY26DnRLADavvrgmf1IirI1jewk0mR2HAEZULAqk=";
   };
 
   strictDeps = true;

From ac5bcf836504bceb4997c93a3a436dbdf9d7d00a Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 18 Jul 2026 21:37:28 +0000
Subject: [PATCH 28/57] mutter: 50.2 -> 50.3

https://gitlab.gnome.org/GNOME/mutter/-/compare/50.2...50.3
(cherry picked from commit b5f9ec6012825e2f4c3d25fa8cc14919496b1489)
---
 pkgs/by-name/mu/mutter/package.nix | 14 ++------------
 1 file changed, 2 insertions(+), 12 deletions(-)

diff --git a/pkgs/by-name/mu/mutter/package.nix b/pkgs/by-name/mu/mutter/package.nix
index e258f804ac7b..05809ec61f24 100644
--- a/pkgs/by-name/mu/mutter/package.nix
+++ b/pkgs/by-name/mu/mutter/package.nix
@@ -1,6 +1,5 @@
 {
   fetchurl,
-  fetchpatch,
   runCommand,
   lib,
   stdenv,
@@ -72,7 +71,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "mutter";
-  version = "50.2";
+  version = "50.3";
 
   outputs = [
     "out"
@@ -83,18 +82,9 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/mutter/${lib.versions.major finalAttrs.version}/mutter-${finalAttrs.version}.tar.xz";
-    hash = "sha256-/ejfinRlAMUfHJJbUeV8PdhwByM771Yweegx9Tv6O1Y=";
+    hash = "sha256-JWY/p6/JakwJJEiZDA2mZLfwTdjZ9eO5vitJixswPLQ=";
   };
 
-  patches = [
-    # mutter 50.2 spams logs, clutter_input_focus_set_cursor_location
-    # https://gitlab.gnome.org/GNOME/mutter/-/work_items/4840
-    (fetchpatch {
-      url = "https://gitlab.gnome.org/GNOME/mutter/-/commit/f1570318ec3e9a38615eb91708bb71628ab8bcfd.patch";
-      hash = "sha256-73GI2DTgoEBUQGa7nTUIur/ZuDHgDu4SwjUWHBRCyuo=";
-    })
-  ];
-
   mesonFlags = [
     "-Degl_device=true"
     "-Dinstalled_tests=false" # TODO: enable these

From 61c26e31ddd9f4b68ad94ca38426ceda3025d1d7 Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 18 Jul 2026 21:45:06 +0000
Subject: [PATCH 29/57] pangomm_2_48: 2.56.1 -> 2.56.2

https://gitlab.gnome.org/GNOME/pangomm/-/compare/2.56.1...2.56.2
(cherry picked from commit d43473666e6119e057b1d32262ac64b6f26bcfba)
---
 pkgs/development/libraries/pangomm/2.48.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/libraries/pangomm/2.48.nix b/pkgs/development/libraries/pangomm/2.48.nix
index 3cc2d8a93b28..e0b881b8277a 100644
--- a/pkgs/development/libraries/pangomm/2.48.nix
+++ b/pkgs/development/libraries/pangomm/2.48.nix
@@ -14,7 +14,7 @@
 
 stdenv.mkDerivation rec {
   pname = "pangomm";
-  version = "2.56.1";
+  version = "2.56.2";
 
   outputs = [
     "out"
@@ -23,7 +23,7 @@ stdenv.mkDerivation rec {
 
   src = fetchurl {
     url = "mirror://gnome/sources/pangomm/${lib.versions.majorMinor version}/pangomm-${version}.tar.xz";
-    hash = "sha256-U59apg6b3GuVW7RI4qYswUVidE32kCWAQPu3S/iFdV0=";
+    hash = "sha256-8emEyFqFtqDmFhY2ZSH1HdgoKgcrtF0VtQhHYrYvTA4=";
   };
 
   nativeBuildInputs = [

From 44914b109ac014b0e0594ed2052fbdfcb68efecf Mon Sep 17 00:00:00 2001
From: qubitnano <146656568+qubitnano@users.noreply.github.com>
Date: Thu, 30 Jul 2026 20:37:44 -0400
Subject: [PATCH 30/57] mongodb-7_0: 7.0.37 -> 7.0.39

https://www.mongodb.com/docs/manual/release-notes/7.0-changelog/#7.0.39-changelog

Fixes: CVE-2026-9737
Fixes: CVE-2026-13055
Fixes: CVE-2026-13059
Fixes: CVE-2026-13060
Fixes: CVE-2026-13061
Fixes: CVE-2026-13062
Fixes: CVE-2026-13065
Fixes: CVE-2026-13066
Fixes: CVE-2026-13068
Fixes: CVE-2026-13069
Fixes: CVE-2026-13070
Fixes: CVE-2026-13071
Fixes: CVE-2026-13072
Fixes: CVE-2026-13074
Fixes: CVE-2026-13077
Fixes: CVE-2026-13078
(cherry picked from commit aeda64b2ec870ea97ebafbaf4fe2c195204d631a)
---
 pkgs/servers/nosql/mongodb/7.0.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/nosql/mongodb/7.0.nix b/pkgs/servers/nosql/mongodb/7.0.nix
index 3104b048a6e8..b4254c47be61 100644
--- a/pkgs/servers/nosql/mongodb/7.0.nix
+++ b/pkgs/servers/nosql/mongodb/7.0.nix
@@ -21,8 +21,8 @@ let
 in
 buildMongoDB {
   inherit avxSupport;
-  version = "7.0.37";
-  hash = "sha256-oDBNZTeM3UkXIfhG9IHnZYECVq4+n7pLUtYa8a5ki7E=";
+  version = "7.0.39";
+  hash = "sha256-VB20nhb0mMf9xVs/R4i+4wWoqHoDNWNouDw3FRehBP8=";
   patches = [
     # ModuleNotFoundError: No module named 'mongo_tooling_metrics':
     # NameError: name 'SConsToolingMetrics' is not defined:

From 684c8ec144298c788d160f32b07f102d85d6916d Mon Sep 17 00:00:00 2001
From: Hythera <87016780+Hythera@users.noreply.github.com>
Date: Fri, 29 May 2026 23:52:28 +0200
Subject: [PATCH 31/57] super: fix license

(cherry picked from commit 1ac89ed4e8015d2141da72587ac2f4a2f7b282ee)
---
 pkgs/by-name/su/super/package.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/su/super/package.nix b/pkgs/by-name/su/super/package.nix
index 295109bc241d..a2b911e44652 100644
--- a/pkgs/by-name/su/super/package.nix
+++ b/pkgs/by-name/su/super/package.nix
@@ -39,7 +39,12 @@ buildGoModule (finalAttrs: {
     changelog = "https://github.com/brimdata/super/releases/tag/v${finalAttrs.version}";
     description = "Analytics database that puts JSON and relational tables on equal footing";
     homepage = "https://superdb.org";
-    license = lib.licenses.bsd3;
+    license = {
+      free = false;
+      fullName = "SuperDB Source Available License version 1.0";
+      redistributable = true;
+      url = "https://github.com/brimdata/super/blob/5baa422ab9791bfc1a7f778b2e4354885825adf8/LICENSE.md";
+    };
     mainProgram = "super";
     maintainers = with lib.maintainers; [ hythera ];
   };

From 7e251080c8fb7605fe9575f785b7f6872fc0934a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 9 Aug 2026 07:02:47 +0000
Subject: [PATCH 32/57] stremio-linux-shell: 1.1.4 -> 1.2.0

(cherry picked from commit d40fcdd5aed5e5be79501c78d1eec31fa481f340)
---
 pkgs/by-name/st/stremio-linux-shell/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/st/stremio-linux-shell/package.nix b/pkgs/by-name/st/stremio-linux-shell/package.nix
index 6798234bb43d..717779fa16ec 100644
--- a/pkgs/by-name/st/stremio-linux-shell/package.nix
+++ b/pkgs/by-name/st/stremio-linux-shell/package.nix
@@ -26,7 +26,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "stremio-linux-shell";
-  version = "1.1.4";
+  version = "1.2.0";
 
   strictDeps = true;
   __structuredAttrs = true;
@@ -35,10 +35,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "Stremio";
     repo = "stremio-linux-shell";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-cwETbsY9WEqOi59jObTUKfcoWZxJ0JS4Ql31dCxz2TA=";
+    hash = "sha256-JFG+sUuK+l8Ik00vHPiXJwan0rmMBiY85DnvudYKCsw=";
   };
 
-  cargoHash = "sha256-n1JBFJxYPhndkPx8izuUNkiefKHXrL19sk+XK7+W0xA=";
+  cargoHash = "sha256-FnQ2FN9NtL/YyRmLlyGQApjzV/4uS8OnnY8kbTWTGe8=";
 
   patches = [
     ./out-path.patch

From 7bf023e9260bffd35c3b551480b8d4acadcd98b0 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 8 Aug 2026 02:34:28 +0000
Subject: [PATCH 33/57] ledger-live-desktop: 4.13.0 -> 4.13.1

(cherry picked from commit b307775e73b22356868f68c625b9100e62b8789e)
---
 pkgs/by-name/le/ledger-live-desktop/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/le/ledger-live-desktop/package.nix b/pkgs/by-name/le/ledger-live-desktop/package.nix
index 8f1a977aaad6..a2a3113a03ab 100644
--- a/pkgs/by-name/le/ledger-live-desktop/package.nix
+++ b/pkgs/by-name/le/ledger-live-desktop/package.nix
@@ -8,11 +8,11 @@
 
 let
   pname = "ledger-live-desktop";
-  version = "4.13.0";
+  version = "4.13.1";
 
   src = fetchurl {
     url = "https://download.live.ledger.com/${pname}-${version}-linux-x86_64.AppImage";
-    hash = "sha256-jqeJb2rOXJ1lD+fGOi4XlW5LweGvIC1+pYrmNedCIT4=";
+    hash = "sha256-0ncrYTQWiFJICaovN0iMs0pFHFUiOjYcUZosetS2r4Y=";
   };
 
   appimageContents = appimageTools.extractType2 {

From eca5b84a97d4c5230650fcd369d524c94747f0c3 Mon Sep 17 00:00:00 2001
From: Gerhard Schwanzer <geri@sdf.org>
Date: Sun, 9 Aug 2026 15:18:55 +0200
Subject: [PATCH 34/57] rubyPackages.puma: 7.1.0 -> 7.2.1

https://redirect.github.com/puma/puma/releases/tag/v7.2.1

Fixes CVE-2026-47736 and CVE-2026-47737.

Not-cherry-picked-because: release-26.05 stays on Puma 7 due to Puma 8 breaking changes
Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
---
 pkgs/top-level/ruby-packages.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/top-level/ruby-packages.nix b/pkgs/top-level/ruby-packages.nix
index f5fbb3d223f7..eade5217826f 100644
--- a/pkgs/top-level/ruby-packages.nix
+++ b/pkgs/top-level/ruby-packages.nix
@@ -3552,10 +3552,10 @@
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1pa9zpr51kqnsq549p6apvnr95s9flx6bnwqii24s8jg2b5i0p74";
+      sha256 = "1c0l2jb2d75zdw7diqhh6sciwlxcwfacshp107af0cnmmff0xgyp";
       type = "gem";
     };
-    version = "7.1.0";
+    version = "7.2.1";
   };
   pwntools = {
     dependencies = [

From 2b2e7fda473c2632a726ee9f47d04156f8363de4 Mon Sep 17 00:00:00 2001
From: Gerhard Schwanzer <geri@sdf.org>
Date: Mon, 3 Aug 2026 21:59:12 +0200
Subject: [PATCH 35/57] rubyPackages.nokogiri: 1.18.10 -> 1.19.4

https://redirect.github.com/sparklemotion/nokogiri/releases/tag/v1.19.4

Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
(cherry picked from commit 24c090e8a8a832c88504b225a89ee05e630b1aab)
---
 pkgs/top-level/ruby-packages.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/top-level/ruby-packages.nix b/pkgs/top-level/ruby-packages.nix
index f5fbb3d223f7..cca66523737b 100644
--- a/pkgs/top-level/ruby-packages.nix
+++ b/pkgs/top-level/ruby-packages.nix
@@ -3150,10 +3150,10 @@
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1hcwwr2h8jnqqxmf8mfb52b0dchr7pm064ingflb78wa00qhgk6m";
+      sha256 = "1d9safb4dly6qmc2g06444l0zifby52yy6j1a5fa1g4j3ihm3jah";
       type = "gem";
     };
-    version = "1.18.10";
+    version = "1.19.4";
   };
   observer = {
     groups = [ "default" ];

From e7e336c78ef2c9b2f4cc95198599394d46d81dce Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 9 Aug 2026 06:59:57 +0000
Subject: [PATCH 36/57] searchix: 0.4.9 -> 0.4.10

(cherry picked from commit e7b2fe624d0e2585d8393177ffabe877231e1e28)
---
 pkgs/by-name/se/searchix/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/se/searchix/package.nix b/pkgs/by-name/se/searchix/package.nix
index d8858a425861..14a451ebe150 100644
--- a/pkgs/by-name/se/searchix/package.nix
+++ b/pkgs/by-name/se/searchix/package.nix
@@ -18,16 +18,16 @@ in
 
 buildGoModule (finalAttrs: {
   pname = "searchix";
-  version = "0.4.9";
+  version = "0.4.10";
 
   src = fetchFromCodeberg {
     owner = "alinnow";
     repo = "searchix";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-pyBl6y53Efa+4qQ92elA4r+zO7rPxha+4hnmmFTsoaE=";
+    hash = "sha256-TO+PaNovMJ6WzZoc6iYJ9jfLzZXZ3y4GwqcMm+afD/o=";
   };
 
-  vendorHash = "sha256-BG6v4HsXtSCmEmzdawH1YfEfDMbXNH8XGMF+jJgy+3w=";
+  vendorHash = "sha256-TveAe1aUYLUQuZQXCBYYFx0d0+Ql+IxFn9C9cFNsRAw=";
 
   overrideModAttrs = old: {
     # netdb.go allows /etc/protocols and /etc/services to not exist and happily proceeds, but it panic()s if they exist but return permission denied.

From 839a0127c567bb01607dc5335359598b83b20a0d Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 4 Aug 2026 04:43:11 +0000
Subject: [PATCH 37/57] megasync: 6.4.0.2 -> 6.5.1.0

(cherry picked from commit df478f2ebff93d0f686d2bec0912debcdef171f8)
---
 pkgs/by-name/me/megasync/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/me/megasync/package.nix b/pkgs/by-name/me/megasync/package.nix
index cd1b46912f2b..ebe590af1e0b 100644
--- a/pkgs/by-name/me/megasync/package.nix
+++ b/pkgs/by-name/me/megasync/package.nix
@@ -34,13 +34,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "megasync";
-  version = "6.4.0.2";
+  version = "6.5.1.0";
 
   src = fetchFromGitHub rec {
     owner = "meganz";
     repo = "MEGAsync";
     tag = "v${finalAttrs.version}_Linux";
-    hash = "sha256-PgIRIr3+XRwv48EpREL56yzuqI8Ws72V4o3pTSR1ZfA=";
+    hash = "sha256-SkLh2YmXCzrVJs01FhqrSIeeacJCB2KPu61fKoZ/26s=";
     fetchSubmodules = false; # DesignTokensImporter cannot be fetched, see #1010 in github:meganz/megasync
     leaveDotGit = true;
     postFetch = ''

From 9180d936eca75f153986c0f8278db64b8bd92fc1 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 5 Aug 2026 20:02:59 +0000
Subject: [PATCH 38/57] keycloak: 26.7.0 -> 26.7.1

(cherry picked from commit 9346f2b3bdabdf970c63bb960e08c5f42c8e0645)
---
 pkgs/by-name/ke/keycloak/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ke/keycloak/package.nix b/pkgs/by-name/ke/keycloak/package.nix
index bd7675168fe5..11480a1ebe93 100644
--- a/pkgs/by-name/ke/keycloak/package.nix
+++ b/pkgs/by-name/ke/keycloak/package.nix
@@ -24,11 +24,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "keycloak";
-  version = "26.7.0";
+  version = "26.7.1";
 
   src = fetchzip {
     url = "https://github.com/keycloak/keycloak/releases/download/${finalAttrs.version}/keycloak-${finalAttrs.version}.zip";
-    hash = "sha256-QfPCgwUZYwiCWZgL8DVlVAYE3AoZnDHn99j+f/oo0Hs=";
+    hash = "sha256-YkjFJcD2G132mUm4HmyHriAK+b+3UCUeLilEMeKBZho=";
   };
 
   nativeBuildInputs = [

From b9639f0ad501b0d59a4a2d15b85245ec7c6d1a03 Mon Sep 17 00:00:00 2001
From: Thomas Gerbet <thomas.gerbet@3ds.com>
Date: Thu, 6 Aug 2026 10:55:17 +0000
Subject: [PATCH 39/57] cosign: 3.1.1 -> 3.1.3

https://github.com/sigstore/cosign/releases/tag/v3.1.3
https://github.com/sigstore/cosign/releases/tag/v3.1.2

Fixes https://github.com/sigstore/cosign/security/advisories/GHSA-fx35-mq7g-6g98

(cherry picked from commit 15738eeffdb9859a4b277c1309b3be54449c4bf6)
---
 pkgs/by-name/co/cosign/package.nix | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/co/cosign/package.nix b/pkgs/by-name/co/cosign/package.nix
index 3f8b82bf9771..7a84d52232bd 100644
--- a/pkgs/by-name/co/cosign/package.nix
+++ b/pkgs/by-name/co/cosign/package.nix
@@ -13,13 +13,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "cosign";
-  version = "3.1.1";
+  version = "3.1.3";
 
   src = fetchFromGitHub {
     owner = "sigstore";
     repo = "cosign";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-DOsGLU6W0JrUGpthILTZfKv3fC45SlIXkvt+idUn5Tc=";
+    hash = "sha256-6YgCEeDwjNNMMh1tE/DUbScR7ZYf+FNMhFs+q7b0MuM=";
   };
 
   buildInputs = lib.optional (stdenv.hostPlatform.isLinux && pivKeySupport) (lib.getDev pcsclite);
@@ -29,7 +29,7 @@ buildGoModule (finalAttrs: {
     installShellFiles
   ];
 
-  vendorHash = "sha256-AeVvp+6iKiTZ4dWy5kjAS2njI3IU+ANgTdUxOFcihSg=";
+  vendorHash = "sha256-1ouPW3HBjyTB2qRg7DNNLs5eO8UF1UKJLYPPNfJX4NU=";
 
   subPackages = [
     "cmd/cosign"
@@ -61,6 +61,8 @@ buildGoModule (finalAttrs: {
         "TestGetRekorPubKeys"
         "TestVerifyEmbeddedSCT"
         "TestValidateAndUnpackCertWithSCT"
+        "TestVerifySkWithoutIdentities"
+        "TestVerifyAttestationSkWithoutIdentities"
       ];
     in
     [ "-skip=^${builtins.concatStringsSep "$|^" skippedTests}$" ];

From 2ea4ff95c3afa19deb34ad032871f7315deec861 Mon Sep 17 00:00:00 2001
From: jopejoe1 <jopejoe1@missing.ninja>
Date: Sun, 9 Aug 2026 09:22:54 +0000
Subject: [PATCH 40/57] firefox-beta-unwrapped: 154.0b7 -> 154.0b8

(cherry picked from commit 05f072e8ca6c8487e339e46bec4d011c67ebcf06)
---
 .../networking/browsers/firefox/packages/firefox-beta.nix     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix b/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix
index 545d8bf9b2bd..f9cd0d05cc82 100644
--- a/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix
+++ b/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix
@@ -10,11 +10,11 @@
 buildMozillaMach rec {
   pname = "firefox-beta";
   binaryName = "firefox-beta";
-  version = "154.0b7";
+  version = "154.0b8";
   applicationName = "Firefox Beta";
   src = fetchurl {
     url = "mirror://mozilla/firefox/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "2a7da6938054f01a443da8d7cbaa38c99d76d90661f404754096041d9e8d5a27b118dcebd27687867706ba2540e5d453b8908e35f75a712220e812436d239dee";
+    sha512 = "efb179b9f074dc5935ec21f162375fe2a5ed7635135ff9c1fc407519a83ca97b72356207582b407596e80aabbea2b9ce39df9a7e5ca8728aae76af7b43b38382";
   };
 
   meta = {

From 00b95e754370c0e2e40ebfb8d2f2a1c74d135946 Mon Sep 17 00:00:00 2001
From: jopejoe1 <jopejoe1@missing.ninja>
Date: Sun, 9 Aug 2026 09:23:02 +0000
Subject: [PATCH 41/57] firefox-devedition-unwrapped: 154.0b4 -> 154.0b8

(cherry picked from commit 4c525329781e01dc6e316ae991eff366e1a33d45)
---
 .../browsers/firefox/packages/firefox-devedition.nix          | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix b/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix
index 1955de70d183..30350ffd8de8 100644
--- a/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix
+++ b/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix
@@ -10,13 +10,13 @@
 buildMozillaMach rec {
   pname = "firefox-devedition";
   binaryName = "firefox-devedition";
-  version = "154.0b4";
+  version = "154.0b8";
   applicationName = "Firefox Developer Edition";
   requireSigning = false;
   branding = "browser/branding/aurora";
   src = fetchurl {
     url = "mirror://mozilla/devedition/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "1dae1edf7b97891224d186f469e31cfa0d2c4fbbdfd6d03f74c03b4421902739fee8d359c66b3c2c431318a4212b0e6221456a233fd6a141c96122f3c6e62bea";
+    sha512 = "03de3fe8558f91799f8c2b2d949375e96b18ae206b4496a6b33099a905e2499e6e9f99d9ad8130d3f230b1258b37a4894f267e7d701b90252ef934bd834e9529";
   };
 
   # buildMozillaMach sets MOZ_APP_REMOTINGNAME during configuration, but

From 5bf0d84cb1976de7c62584a7819c24724ab61a89 Mon Sep 17 00:00:00 2001
From: Michael Daniels <mdaniels5757@gmail.com>
Date: Sun, 15 Feb 2026 17:18:42 -0500
Subject: [PATCH 42/57] CONTRIBUTING: clarify release note conventions

(cherry picked from commit 77b21fad9fe0c8ce050a1d2e6fc6103f5a71591a)
---
 CONTRIBUTING.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 3a92b81bf934..6e56cc1a792c 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -571,7 +571,10 @@ If a contributor does not want committers to push to their branch, they must unc
 
 ### Release notes
 
-If you removed packages or made some major NixOS changes, write about it in the next release notes in [`nixos/doc/manual/release-notes`](./nixos/doc/manual/release-notes).
+If you add or remove a NixOS module, or make other breaking or significant NixOS changes, write about it in the next NixOS release notes in [`nixos/doc/manual/release-notes`](./nixos/doc/manual/release-notes).
+
+If you make major or breaking changes to a package (other than removal), write about it in the next Nixpkgs release notes in [`doc/release-notes`](./doc/release-notes).
+Package removals should not get a Nixpkgs release note, [a throwing alias should be added instead](./pkgs/README.md#steps-to-remove-a-package-from-nixpkgs).
 
 ### File naming and organisation
 

From 33f260ee26f13e3f1f2f279766197a0e28e3339d Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 8 Aug 2026 14:27:23 +0000
Subject: [PATCH 43/57] gdm: 50.1 -> 50.2

https://gitlab.gnome.org/GNOME/gdm/-/compare/50.1...50.2
(cherry picked from commit 949db84c7c5c4b588e4422a70eba717e906caca5)
---
 pkgs/by-name/gd/gdm/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gd/gdm/package.nix b/pkgs/by-name/gd/gdm/package.nix
index 6495cdc457d8..ca207b294483 100644
--- a/pkgs/by-name/gd/gdm/package.nix
+++ b/pkgs/by-name/gd/gdm/package.nix
@@ -44,7 +44,7 @@ in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gdm";
-  version = "50.1";
+  version = "50.2";
 
   outputs = [
     "out"
@@ -53,7 +53,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/gdm/${lib.versions.major finalAttrs.version}/gdm-${finalAttrs.version}.tar.xz";
-    hash = "sha256-dwFZNzUSGSQQ9BK10MRnjsFXPxrks5yB/nWGH+iJAXQ=";
+    hash = "sha256-ikZ55Hzd/osKG9nTg2BC3raPs+Gw5+Yt/QYx3FtvxUE=";
   };
 
   mesonFlags = [

From 2f396e43ee42a52206a2e055d4df558a5cb6379d Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 8 Aug 2026 17:06:01 +0200
Subject: [PATCH 44/57] gexiv2_0_16: 0.16.1 -> 0.16.2

https://gitlab.gnome.org/GNOME/gexiv2/-/compare/0.16.1...0.16.2
(cherry picked from commit 6ce4213ebd64842530956c450815212ecb2d087e)
---
 pkgs/by-name/ge/gexiv2_0_16/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ge/gexiv2_0_16/package.nix b/pkgs/by-name/ge/gexiv2_0_16/package.nix
index 0f0f0127ad28..450291460013 100644
--- a/pkgs/by-name/ge/gexiv2_0_16/package.nix
+++ b/pkgs/by-name/ge/gexiv2_0_16/package.nix
@@ -18,7 +18,7 @@ stdenv.mkDerivation (finalAttrs: {
   pname = "gexiv2";
   __structuredAttrs = true;
   strictDeps = true;
-  version = "0.16.1";
+  version = "0.16.2";
 
   outputs = [
     "out"
@@ -28,7 +28,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/gexiv2/${lib.versions.majorMinor finalAttrs.version}/gexiv2-${finalAttrs.version}.tar.xz";
-    sha256 = "sha256-GOmgXGN6d+gAsAHYf3Dk0Cp7pBt3RUAKMUoQcqHdyUM=";
+    hash = "sha256-qtniQP3/voXjkPRu4KVn4lG66lwpw9hpAmA4hoPcjQo=";
   };
 
   depsBuildBuild = [

From b2062cd75278c1bbfda6b2ada891fba8927573f7 Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 8 Aug 2026 15:44:25 +0000
Subject: [PATCH 45/57] gnome-control-center: 50.3 -> 50.4

https://gitlab.gnome.org/GNOME/gnome-control-center/-/compare/50.3...50.4
(cherry picked from commit 34c4f17ab7c4e5421e96e24dd43e311a5a7864b5)
---
 pkgs/by-name/gn/gnome-control-center/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gn/gnome-control-center/package.nix b/pkgs/by-name/gn/gnome-control-center/package.nix
index c019f5cdd555..19c2c61da20a 100644
--- a/pkgs/by-name/gn/gnome-control-center/package.nix
+++ b/pkgs/by-name/gn/gnome-control-center/package.nix
@@ -77,11 +77,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-control-center";
-  version = "50.3";
+  version = "50.4";
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnome-control-center/${lib.versions.major finalAttrs.version}/gnome-control-center-${finalAttrs.version}.tar.xz";
-    hash = "sha256-Bu67D9MFbE2NeLvTdUyWEI84HXC3YNpCPFAklGlEKHw=";
+    hash = "sha256-WFbHOZm+30XnT3O6w9YeK17BaJ+LzxlDc3uu7oIE+xE=";
   };
 
   patches = [

From b1c1414564158c92f4d3573c77b3368d143e248a Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 8 Aug 2026 15:46:30 +0000
Subject: [PATCH 46/57] gnome-initial-setup: 50.0 -> 50.1

https://gitlab.gnome.org/GNOME/gnome-initial-setup/-/compare/50.0...50.1
(cherry picked from commit 3e9fa4911aac51970d3056f3f38d39626c369ea2)
---
 pkgs/by-name/gn/gnome-initial-setup/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gn/gnome-initial-setup/package.nix b/pkgs/by-name/gn/gnome-initial-setup/package.nix
index 7a982e044d49..734644ba3fd6 100644
--- a/pkgs/by-name/gn/gnome-initial-setup/package.nix
+++ b/pkgs/by-name/gn/gnome-initial-setup/package.nix
@@ -37,11 +37,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-initial-setup";
-  version = "50.0";
+  version = "50.1";
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnome-initial-setup/${lib.versions.major finalAttrs.version}/gnome-initial-setup-${finalAttrs.version}.tar.xz";
-    hash = "sha256-LalrdqNDRGilV/5IG4z+YGJi81N7AKTCDUqiOaROluE=";
+    hash = "sha256-su0FI1iW9H9VJJirWrKfVQHmqMQe5kXyqRhiCx3pHmA=";
   };
 
   patches = [

From 5838863b01127f71d92e444e49af84e7da67c8cf Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 8 Aug 2026 15:49:12 +0000
Subject: [PATCH 47/57] gnome-maps: 50.2 -> 50.3

https://gitlab.gnome.org/GNOME/gnome-maps/-/compare/50.2...50.3
(cherry picked from commit bf330246df564f6656676cca358b19087156989c)
---
 pkgs/by-name/gn/gnome-maps/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gn/gnome-maps/package.nix b/pkgs/by-name/gn/gnome-maps/package.nix
index 1964011ceb20..6c429e5a408e 100644
--- a/pkgs/by-name/gn/gnome-maps/package.nix
+++ b/pkgs/by-name/gn/gnome-maps/package.nix
@@ -31,11 +31,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-maps";
-  version = "50.2";
+  version = "50.3";
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnome-maps/${lib.versions.major finalAttrs.version}/gnome-maps-${finalAttrs.version}.tar.xz";
-    hash = "sha256-KKRGfR7J/jjrf4YmdMGZ6IQIbiXkwLDYDrUEVoICzr8=";
+    hash = "sha256-CJyo4Vq9cqyD2zhs7xnOveBe74t26qyBkGpLBTVUTiw=";
   };
 
   doCheck = !stdenv.hostPlatform.isDarwin;

From 9152a598f2b096d3db7879e6455a98edf1b52bed Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 8 Aug 2026 15:55:54 +0000
Subject: [PATCH 48/57] gnome-shell: 50.3 -> 50.4

https://gitlab.gnome.org/GNOME/gnome-shell/-/compare/50.3...50.4
(cherry picked from commit 99853d1a585e300e65ecf22c7f9c3321fa1ca363)
---
 pkgs/by-name/gn/gnome-shell/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gn/gnome-shell/package.nix b/pkgs/by-name/gn/gnome-shell/package.nix
index 5fe0434cf185..18428f58ef0e 100644
--- a/pkgs/by-name/gn/gnome-shell/package.nix
+++ b/pkgs/by-name/gn/gnome-shell/package.nix
@@ -73,7 +73,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-shell";
-  version = "50.3";
+  version = "50.4";
 
   outputs = [
     "out"
@@ -82,7 +82,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnome-shell/${lib.versions.major finalAttrs.version}/gnome-shell-${finalAttrs.version}.tar.xz";
-    hash = "sha256-RQRYxEom0lqbhCiOErkAXUxcRGSM/Gt5C+GaBd5/FzU=";
+    hash = "sha256-xTGTlTnbMWpBrvI2cDcKvRMw0yVPhLyw+fTa5dbjYs8=";
   };
 
   patches = [

From ac8b2ce9766049cb36dc756dcebac8e6a9df161c Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 8 Aug 2026 16:00:56 +0000
Subject: [PATCH 49/57] gnome-user-docs: 50.2 -> 50.4

https://gitlab.gnome.org/GNOME/gnome-user-docs/-/compare/50.2...50.4
(cherry picked from commit e5de747a122536b5adc48b1cb4904cabe5dc492a)
---
 pkgs/by-name/gn/gnome-user-docs/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gn/gnome-user-docs/package.nix b/pkgs/by-name/gn/gnome-user-docs/package.nix
index 6327615c371b..3a55e12ccb93 100644
--- a/pkgs/by-name/gn/gnome-user-docs/package.nix
+++ b/pkgs/by-name/gn/gnome-user-docs/package.nix
@@ -11,11 +11,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-user-docs";
-  version = "50.2";
+  version = "50.4";
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnome-user-docs/${lib.versions.major finalAttrs.version}/gnome-user-docs-${finalAttrs.version}.tar.xz";
-    hash = "sha256-g0hj2RYYmuE/clYr6B04FyMuE20NN+w3aBERH/oVlUI=";
+    hash = "sha256-zYdoQ1NDY1uy3P9pygORZxVTJGnEZd9IBMN63ZihNJc=";
   };
 
   nativeBuildInputs = [

From f3c2899745902f0515742a9abbfe6963f643fb81 Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 8 Aug 2026 16:04:37 +0000
Subject: [PATCH 50/57] gvfs: 1.60.1 -> 1.60.2

https://gitlab.gnome.org/GNOME/gvfs/-/compare/1.60.1...1.60.2
(cherry picked from commit 72f9c0ee7a0c7a9e7c83399020d50f69bb8a1202)
---
 pkgs/by-name/gv/gvfs/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gv/gvfs/package.nix b/pkgs/by-name/gv/gvfs/package.nix
index 0310a8c5e75a..0fb65fc217e8 100644
--- a/pkgs/by-name/gv/gvfs/package.nix
+++ b/pkgs/by-name/gv/gvfs/package.nix
@@ -46,11 +46,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gvfs";
-  version = "1.60.1";
+  version = "1.60.2";
 
   src = fetchurl {
     url = "mirror://gnome/sources/gvfs/${lib.versions.majorMinor finalAttrs.version}/gvfs-${finalAttrs.version}.tar.xz";
-    hash = "sha256-kOq6Mzq30xp/3q3kWVSlE8NmHM672aE4qrP7SB37nkA=";
+    hash = "sha256-qNd0RhWkiKVZMC/gzI9BjVtEq6PCuiFj5anm9gfBvpo=";
   };
 
   patches = [

From df616f9ff9455b87a47a41d61b8407995c9f1ee2 Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 8 Aug 2026 16:08:57 +0000
Subject: [PATCH 51/57] libshumate: 1.6.2 -> 1.6.3

https://gitlab.gnome.org/GNOME/libshumate/-/compare/1.6.2...1.6.3
(cherry picked from commit 427f4afb492dbe1e88b4fba0ba1bef81edfc39b1)
---
 pkgs/by-name/li/libshumate/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/li/libshumate/package.nix b/pkgs/by-name/li/libshumate/package.nix
index de1ae55529a8..1070378b3b8a 100644
--- a/pkgs/by-name/li/libshumate/package.nix
+++ b/pkgs/by-name/li/libshumate/package.nix
@@ -23,7 +23,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libshumate";
-  version = "1.6.2";
+  version = "1.6.3";
 
   outputs = [
     "out"
@@ -34,7 +34,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/libshumate/${lib.versions.majorMinor finalAttrs.version}/libshumate-${finalAttrs.version}.tar.xz";
-    hash = "sha256-IjZLuY+LUgM0M2q4IkAZagljSJuGpbODKOG+orZPOp4=";
+    hash = "sha256-/RXJE5bc2C/OMCFkhUGqiR5xpr3e/8A9OFl1gKfajKE=";
   };
 
   depsBuildBuild = [

From 3a31dd9ea23c23630bdd30bec4626c46047bbcf6 Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 8 Aug 2026 16:11:02 +0000
Subject: [PATCH 52/57] mutter: 50.3 -> 50.4

https://gitlab.gnome.org/GNOME/mutter/-/compare/50.3...50.4
(cherry picked from commit c2a0a3ea9bde3da2ae72ff6a30c2edb69cf50ecf)
---
 pkgs/by-name/mu/mutter/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/mu/mutter/package.nix b/pkgs/by-name/mu/mutter/package.nix
index 05809ec61f24..552c84d5fcfe 100644
--- a/pkgs/by-name/mu/mutter/package.nix
+++ b/pkgs/by-name/mu/mutter/package.nix
@@ -71,7 +71,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "mutter";
-  version = "50.3";
+  version = "50.4";
 
   outputs = [
     "out"
@@ -82,7 +82,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/mutter/${lib.versions.major finalAttrs.version}/mutter-${finalAttrs.version}.tar.xz";
-    hash = "sha256-JWY/p6/JakwJJEiZDA2mZLfwTdjZ9eO5vitJixswPLQ=";
+    hash = "sha256-Jz0zyHWry0tsvqP07ARdGBVfvFEMNSH8fkeSY3ExCYg=";
   };
 
   mesonFlags = [

From 8c242464b0dbd67779cdf45ade31ada62000b180 Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Sun, 9 Aug 2026 22:42:52 +0000
Subject: [PATCH 53/57] linux_testing: 7.2-rc6 -> 7.2-rc7

(cherry picked from commit 63e225c4442a04d68dda0be02e9fcc79552e994e)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 17e4187965c2..b326427dfd9b 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -1,7 +1,7 @@
 {
     "testing": {
-        "version": "7.2-rc6",
-        "hash": "sha256:03q060s94c8p55p29npm62f7rcp9pc0hacq60w4spgwp26j8w2sm",
+        "version": "7.2-rc7",
+        "hash": "sha256:1qr0k903z5v5w9zm5xsmmzcgxmxgx9vwz32g6zhs14s4sn5s0dgw",
         "lts": false
     },
     "6.1": {

From 0e4315ce4324ed5df6a2834588c588846306fd2c Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Sun, 9 Aug 2026 22:42:54 +0000
Subject: [PATCH 54/57] linux_7_1: 7.1.7 -> 7.1.8

(cherry picked from commit 256b6f72edd8585ebce6cf082e2af2d38f78df1c)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index b326427dfd9b..f3d6709e653b 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -35,8 +35,8 @@
         "lts": true
     },
     "7.1": {
-        "version": "7.1.7",
-        "hash": "sha256:1pr6br5xzzzj5s5pd3zy61k2pz2yn4dar4xbx51j1mm4hil2m3ya",
+        "version": "7.1.8",
+        "hash": "sha256:0j9c88akklsdhivrlx7i0ccgzxcwcgp1zc6dzi65p79796sdq0gz",
         "lts": false
     }
 }

From 5057e4c81176dd975321e1f5cfe860d6f61d4a0d Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Sun, 9 Aug 2026 22:42:57 +0000
Subject: [PATCH 55/57] linux_6_18: 6.18.43 -> 6.18.44

(cherry picked from commit 510f4c4b5c9937bfabb088d84cec199371dbbee1)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index f3d6709e653b..5aa168e5f1bb 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -30,8 +30,8 @@
         "lts": true
     },
     "6.18": {
-        "version": "6.18.43",
-        "hash": "sha256:0pbvljkw7fwaz2ph9n42fq05ifavwj1102r0d11md8f4qwkbkbm1",
+        "version": "6.18.44",
+        "hash": "sha256:0hqd4izrmabjcp22z7h8zrxxp1r2azz78la0j0nfha38y0wdjwhg",
         "lts": true
     },
     "7.1": {

From a806b2496560e853615440250a4db3c4641a8e71 Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Sun, 9 Aug 2026 22:42:59 +0000
Subject: [PATCH 56/57] linux_6_12: 6.12.102 -> 6.12.103

(cherry picked from commit 2226b96ba4e595905159a7f17af13570980d69da)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 5aa168e5f1bb..7d824820f04c 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -25,8 +25,8 @@
         "lts": true
     },
     "6.12": {
-        "version": "6.12.102",
-        "hash": "sha256:00sqcn7q4ibha1v2sdqbx3xvz0gdb39hn15pqawklckijgsbajv9",
+        "version": "6.12.103",
+        "hash": "sha256:0xiizhw3kk2ggx9yymzmpj0q9ckday1492vqdrhsayw7x2nslhzi",
         "lts": true
     },
     "6.18": {

From 12b1837faf1e97b386bc250add92188adc602eb7 Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Sun, 9 Aug 2026 22:43:01 +0000
Subject: [PATCH 57/57] linux_6_6: 6.6.150 -> 6.6.151

(cherry picked from commit ed11f2c00d78d369593f7ec510d180d5ecbf017e)
---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 7d824820f04c..6c9d29978922 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -20,8 +20,8 @@
         "lts": true
     },
     "6.6": {
-        "version": "6.6.150",
-        "hash": "sha256:0yc948nv0lhqfjphj2mjsqasa367sn76fl70z456r4sij4k27f3f",
+        "version": "6.6.151",
+        "hash": "sha256:1xv9k5r0rm3gda5hzw7i6rjrpwnhlryzk9j1xfy70as1ffpfa0fy",
         "lts": true
     },
     "6.12": {