Merge master into staging-nixos

doc/release-notes/rl-2611.section.md

@@ -136,6 +136,13 @@
   Additionally, the kernel module tree used inside the VM has been split out of the `kernel` argument into a new `kernelModules` argument (defaulting to `kernel`).
   Callers that overrode `kernel` with a module tree (e.g. from `pkgs.aggregateModules`) to make extra modules available must now pass it via `kernelModules` instead, keeping `kernel` pointing at a bootable kernel derivation.
 
+- The JetBrains IDEs have all been moved to the top-level:
+  - `jetbrains.idea` and `jetbrains.idea-oss` have been renamed to `intellij-idea` and `intellij-idea-oss` respectively.
+  - `jetbrains.mps` has been renamed to `jetbrains-mps`.
+  - `jetbrains.gateway` has been renamed to `jetbrains-gateway`.
+  - All other IDEs have directly moved to the top-level with no prefix  (e.g. `jetbrains.pycharm` -> `pycharm`).
+  - `jetbrains.plugins` remains unchanged for now.
+
 - The ARMv5 Linux kernel build now uses a standard configuration and generates a standard compressed image instead of the deprecated legacy U‐Boot image format.
   `lib.systems.{examples,platforms}.{sheevaplug,pogoplug4}` have been unified into `lib.systems.examples.armv5tel-multiplatform`.
   Note that there is no official support for ARMv5 and it is not possible to build even a simple NixOS configuration out of the box.

maintainers/maintainer-list.nix

@@ -26777,6 +26777,9 @@
     name = "Dom Rodriguez";
     github = "shymega";
     githubId = 1334592;
+    email = "shymega@shymega.org.uk";
+    matrix = "@dom:rodriguez.org.uk";
+    keys = [ { fingerprint = "EB0D 45E6 D0DC 1BA1 A2B5  FC24 72DC F123 1E54 BD43"; } ];
   };
   siddarthkay = {
     email = "siddarthkay@gmail.com";

nixos/modules/hardware/printers.nix

@@ -298,6 +298,14 @@ in
           lpadmin =
             args:
             let
+              toLpadminArgs =
+                # Not using toCommandLineShellGNU since it omits empty strings for short options.
+                lib.cli.toCommandLineShell (optionName: {
+                  option = "-${optionName}";
+                  sep = null;
+                  explicitBool = false;
+                });
+
               # -d, -p and -x are subcommands that must be specified at the start.
               argsDpx = lib.intersectAttrs {
                 d = true;
@@ -310,9 +318,7 @@ in
                 "x"
               ];
             in
-            "lpadmin ${lib.cli.toCommandLineShellGNU { } argsDpx} ${
-              lib.cli.toCommandLineShellGNU { } argsWoDpx
-            }";
+            "lpadmin ${toLpadminArgs argsDpx} ${toLpadminArgs argsWoDpx}";
 
         in
         ''

nixos/modules/services/web-apps/firefly-iii-data-importer.nix

@@ -84,11 +84,12 @@ in
 
     group = lib.mkOption {
       type = lib.types.str;
-      default = if cfg.enableNginx then "nginx" else defaultGroup;
-      defaultText = "If `services.firefly-iii-data-importer.enableNginx` is true then `nginx` else ${defaultGroup}";
+      default = defaultGroup;
       description = ''
-        Group under which firefly-iii-data-importer runs. It is best to set this to the group
-        of whatever webserver is being used as the frontend.
+        Group under which firefly-iii-data-importer runs.
+        While this also changes which group has access to the phpfpm socket,
+        changing {option}`services.firefly-iii-data-importer.poolConfig."listen.group"`
+        is preferred.
       '';
     };
 
@@ -149,6 +150,9 @@ in
       default = { };
       defaultText = lib.literalExpression ''
         {
+          "listen.mode" = "0660";
+          "listen.owner" = if config.services.firefly-iii-data-importer.enableNginx then config.services.nginx.user else config.services.firefly-iii-data-importer.user;
+          "listen.group" = if config.services.firefly-iii-data-importer.enableNginx then config.services.nginx.group else config.services.firefly-iii-data-importer.group;
           "pm" = "dynamic";
           "pm.max_children" = 32;
           "pm.start_servers" = 2;
@@ -201,9 +205,9 @@ in
         log_errors = on
       '';
       settings = {
-        "listen.mode" = "0660";
-        "listen.owner" = user;
-        "listen.group" = group;
+        "listen.mode" = lib.mkDefault "0660";
+        "listen.owner" = lib.mkDefault (if cfg.enableNginx then config.services.nginx.user else user);
+        "listen.group" = lib.mkDefault (if cfg.enableNginx then config.services.nginx.group else group);
         "pm" = lib.mkDefault "dynamic";
         "pm.max_children" = lib.mkDefault 32;
         "pm.start_servers" = lib.mkDefault 2;

nixos/modules/services/web-apps/firefly-iii.nix

@@ -93,11 +93,12 @@ in
 
     group = lib.mkOption {
       type = lib.types.str;
-      default = if cfg.enableNginx then "nginx" else defaultGroup;
-      defaultText = "If `services.firefly-iii.enableNginx` is true then `nginx` else ${defaultGroup}";
+      default = defaultGroup;
       description = ''
-        Group under which firefly-iii runs. It is best to set this to the group
-        of whatever webserver is being used as the frontend.
+        Group under which firefly-iii runs.
+        While this also changes which group has access to the phpfpm socket,
+        changing {option}`services.firefly-iii.poolConfig."listen.group"`
+        is preferred.
       '';
     };
 
@@ -151,6 +152,9 @@ in
       default = { };
       defaultText = ''
         {
+          "listen.mode" = "0660";
+          "listen.owner" = if config.services.firefly-iii.enableNginx then config.services.nginx.user else config.services.firefly-iii.user;
+          "listen.group" = if config.services.firefly-iii.enableNginx then config.services.nginx.group else config.services.firefly-iii.group;
           "pm" = "dynamic";
           "pm.max_children" = 32;
           "pm.start_servers" = 2;
@@ -295,8 +299,8 @@ in
       '';
       settings = {
         "listen.mode" = lib.mkDefault "0660";
-        "listen.owner" = lib.mkDefault user;
-        "listen.group" = lib.mkDefault group;
+        "listen.owner" = lib.mkDefault (if cfg.enableNginx then config.services.nginx.user else user);
+        "listen.group" = lib.mkDefault (if cfg.enableNginx then config.services.nginx.group else group);
         "pm" = lib.mkDefault "dynamic";
         "pm.max_children" = lib.mkDefault 32;
         "pm.start_servers" = lib.mkDefault 2;

nixos/modules/system/boot/networkd.nix

@@ -2497,11 +2497,6 @@ let
   networkdOptions = {
     networkConfig = mkOption {
       default = { };
-      defaultText = lib.literalExpression ''
-        {
-          IPv6PrivacyExtensions = true;
-        }
-      '';
       example = {
         SpeedMeter = true;
         ManageForeignRoutingPolicyRules = false;
@@ -4001,10 +3996,7 @@ let
       };
 
       config = {
-        networkConfig = {
-          IPv6PrivacyExtensions = lib.mkOptionDefault true;
-        }
-        // optionalAttrs (config.routeTables != { }) {
+        networkConfig = optionalAttrs (config.routeTables != { }) {
           RouteTable = mapAttrsToList (name: number: "${name}:${toString number}") config.routeTables;
         };
       };

nixos/tests/all-tests.nix

@@ -1726,6 +1726,7 @@ in
   sonic-server = runTest ./sonic-server.nix;
   spacecookie = runTest ./spacecookie.nix;
   spark = handleTestOn [ "x86_64-linux" "aarch64-linux" ] ./spark { };
+  speechd = runTest ./speechd.nix;
   speedtest-tracker = runTest ./speedtest-tracker.nix;
   spiped = runTest ./spiped.nix;
   spire = runTest ./spire.nix;

nixos/tests/printing.nix

@@ -55,6 +55,7 @@ in
         {
           name = "DeskjetRemote";
           deviceUri = "ipp://server/printers/DeskjetLocal";
+          location = "";
           model = "drv:///sample.drv/deskjet.ppd";
         }
         {
@@ -95,6 +96,10 @@ in
 
     client.wait_until_succeeds("journalctl -u cups.service --grep 'CUPS provisioning complete'")
 
+    with subtest("Empty printer options are handled correctly"):
+        client.wait_for_file("/etc/cups/printers.conf")
+        client.fail("grep -F 'Location -mdrv://' /etc/cups/printers.conf")
+
     with subtest("UNIX socket is used for connections"):
         assert "/var/run/cups/cups.sock" in client.succeed("lpstat -H")
 

nixos/tests/speechd.nix

@@ -0,0 +1,49 @@
+{ lib, ... }:
+{
+  name = "speechd";
+  meta.maintainers = [ lib.maintainers.h7x4 ];
+
+  nodes.machine =
+    { pkgs, ... }:
+    {
+      imports = [ ./common/user-account.nix ];
+
+      environment.systemPackages = [ pkgs.speechd ];
+
+      # Without a real sound card, libao (speech-dispatcher's audio backend)
+      # fails to open any device. libao's built-in "null" driver always succeeds.
+      environment.etc."libao.conf".text = ''
+        default_driver=null
+      '';
+
+      services.speechd = {
+        enable = true;
+        config = ''
+          AddModule "testmodule" "sd_generic" "testmodule.conf"
+          DefaultModule "testmodule"
+        '';
+        modules.testmodule = ''
+          AddVoice "en" "male1" "testmodule_voice"
+          GenericLanguage "en" "en"
+          GenericExecuteSynth "echo \'$DATA\' >> /tmp/speechd-spoken.txt"
+        '';
+      };
+    };
+
+  testScript =
+    { nodes, ... }:
+    let
+      user = nodes.machine.users.users.alice;
+      uid = toString user.uid;
+      aliceRun = command: "su - ${user.name} -c 'XDG_RUNTIME_DIR=/run/user/${uid} ${command}'";
+    in
+    ''
+      machine.wait_for_unit("multi-user.target")
+      machine.succeed("loginctl enable-linger ${user.name}")
+      machine.wait_for_unit("user@${uid}.service")
+      machine.wait_for_unit("speech-dispatcher.socket", "${user.name}")
+
+      machine.succeed("${aliceRun "spd-say 'hello'"}")
+      machine.wait_until_succeeds("grep -q 'hello' /tmp/speechd-spoken.txt")
+    '';
+}

pkgs/applications/editors/jetbrains/default.nix

@@ -1,9 +1,25 @@
 {
   # keep-sorted start
   callPackage,
+  clion,
   config,
+  datagrip,
+  dataspell,
+  goland,
+  intellij-idea,
+  intellij-idea-oss,
+  jetbrains,
+  jetbrains-gateway,
+  jetbrains-mps,
   lib,
+  phpstorm,
+  pycharm,
+  pycharm-oss,
+  rider,
+  ruby-mine,
+  rust-rover,
   stdenv,
+  webstorm,
   # keep-sorted end
 
   vmopts ? null,
@@ -19,48 +35,40 @@
   cythonDebugSpeedupsHook = callPackage ./hooks/cython-debug-speedups.nix { };
   sharedLibsHook = callPackage ./hooks/shared-libs.nix { };
 
-  # Sorted alphabetically. Deprecated products and aliases are at the very end.
-  clion = callPackage ./ides/clion.nix { };
-  datagrip = callPackage ./ides/datagrip.nix { };
-  dataspell = callPackage ./ides/dataspell.nix { };
-  gateway = callPackage ./ides/gateway.nix { };
-  goland = callPackage ./ides/goland.nix { };
-  idea = callPackage ./ides/idea.nix { };
-  idea-oss = callPackage ./ides/idea-oss.nix { };
-  mps = callPackage ./ides/mps.nix { };
-  phpstorm = callPackage ./ides/phpstorm.nix { };
-  pycharm = callPackage ./ides/pycharm.nix { };
-  pycharm-oss = callPackage ./ides/pycharm-oss.nix { };
-  rider = callPackage ./ides/rider.nix { };
-  ruby-mine = callPackage ./ides/ruby-mine.nix { };
-  rust-rover = callPackage ./ides/rust-rover.nix { };
-  webstorm = callPackage ./ides/webstorm.nix { };
-
   # Plugins
   plugins = callPackage ./plugins { };
 }
 
 // lib.optionalAttrs config.allowAliases {
+  # These now all live in by-name.
+  # This is managed by the maintainers/scripts/remove-old-aliases.py script, please run it to update these,
+  # but make sure the warning/throw text says "'jetbrains.xyz' has been..." (add the jetbrains prefix).
+  # Also update the names in the old aliases at the bottom then!
+  clion = clion; # Added 2026-08-15
+  datagrip = datagrip; # Added 2026-08-15
+  dataspell = dataspell; # Added 2026-08-15
+  gateway = jetbrains-gateway; # Added 2026-08-15
+  goland = goland; # Added 2026-08-15
+  idea = intellij-idea; # Added 2026-08-15
+  idea-oss = intellij-idea-oss; # Added 2026-08-15
+  mps = jetbrains-mps; # Added 2026-08-15
+  phpstorm = phpstorm; # Added 2026-08-15
+  pycharm = pycharm; # Added 2026-08-15
+  pycharm-oss = pycharm-oss; # Added 2026-08-15
+  rider = rider; # Added 2026-08-15
+  ruby-mine = ruby-mine; # Added 2026-08-15
+  rust-rover = rust-rover; # Added 2026-08-15
+  webstorm = webstorm; # Added 2026-08-15
 
   # Deprecated products and aliases.
-
   aqua = throw "jetbrains.aqua: Aqua has been removed as it has been discontinued by JetBrains";
-
   idea-community = throw "jetbrains.idea-community: IntelliJ IDEA Community has been removed as it has been discontinued by JetBrains. Either switch to 'jetbrains.idea-oss' or 'jetbrains.idea'. See: https://blog.jetbrains.com/idea/2025/07/intellij-idea-unified-distribution-plan/";
-
   idea-community-bin = throw "jetbrains.idea-community-bin: IntelliJ IDEA Community has been removed as it has been discontinued by JetBrains. Either switch to 'jetbrains.idea-oss' or 'jetbrains.idea'. See: https://blog.jetbrains.com/idea/2025/07/intellij-idea-unified-distribution-plan/";
-
   idea-community-src = throw "jetbrains.idea-community-src: IntelliJ IDEA Community has been removed as it has been discontinued by JetBrains. Either switch to 'jetbrains.idea-oss' or 'jetbrains.idea'. See: https://blog.jetbrains.com/idea/2025/07/intellij-idea-unified-distribution-plan/";
-
   idea-ultimate = throw "'jetbrains.idea-ultimate' has been renamed to/replaced by 'jetbrains.idea'";
-
   pycharm-community = throw "jetbrains.pycharm-community: PyCharm Community has been removed as it has been discontinued by JetBrains. Either switch to 'jetbrains.pycharm-oss' or 'jetbrains.pycharm'. See: https://blog.jetbrains.com/pycharm/2025/04/pycharm-2025";
-
   pycharm-community-bin = throw "jetbrains.pycharm-community-bin: PyCharm Community has been removed as it has been discontinued by JetBrains. Either switch to 'jetbrains.pycharm-oss' or 'jetbrains.pycharm'. See: https://blog.jetbrains.com/pycharm/2025/04/pycharm-2025";
-
   pycharm-community-src = throw "jetbrains.pycharm-community-src: PyCharm Community has been removed as it has been discontinued by JetBrains. Either switch to 'jetbrains.pycharm-oss' or 'jetbrains.pycharm'. See: https://blog.jetbrains.com/pycharm/2025/04/pycharm-2025";
-
   pycharm-professional = throw "'jetbrains.pycharm-professional' has been renamed to/replaced by 'jetbrains.pycharm'";
-
   writerside = throw "jetbrains.writerside: Writerside has been removed as it has been discontinued by JetBrains";
 }

pkgs/applications/editors/jetbrains/plugins/tests.nix

@@ -1,11 +1,26 @@
 {
   # keep-sorted start
+  clion,
+  datagrip,
+  dataspell,
   fetchurl,
   fetchzip,
+  goland,
+  intellij-idea,
+  intellij-idea-oss,
   jetbrains,
+  jetbrains-gateway,
+  jetbrains-mps,
   lib,
+  phpstorm,
+  pycharm,
+  pycharm-oss,
+  rider,
+  ruby-mine,
   runCommand,
+  rust-rover,
   symlinkJoin,
+  webstorm,
   # keep-sorted end
 
   # If not set, all IDEs are tested.
@@ -15,17 +30,16 @@
 let
   ides =
     if ide == null then
-      with jetbrains;
       [
         # keep-sorted start
         clion
         datagrip
         dataspell
-        gateway
         goland
-        idea
-        idea-oss
-        mps
+        intellij-idea
+        intellij-idea-oss
+        jetbrains-gateway
+        jetbrains-mps
         phpstorm
         pycharm
         pycharm-oss

pkgs/applications/editors/jetbrains/readme.md

@@ -1,13 +1,35 @@
 This directory contains the build expressions needed to build any of the JetBrains IDEs.
 The jdk is in `pkgs/development/compilers/jetbrains-jdk`.
 
+## IDE packages
+
+The IDEs live in by-name/:
+
+| IDE Name                       | Package Location                              |
+|--------------------------------|-----------------------------------------------|
+| Clion                          | pkgs/by-name/cl/clion/package.nix             |
+| DataGrip                       | pkgs/by-name/da/datagrip/package.nix          |
+| DataSpell                      | pkgs/by-name/da/dataspell/package.nix         |
+| Gateway                        | pkgs/by-name/je/jetbrains-gateway/package.nix |
+| Goland                         | pkgs/by-name/go/goland/package.nix            |
+| IntelliJ IDEA                  | pkgs/by-name/in/intellij-idea/package.nix     |
+| IntelliJ IDEA (Open Source)    | pkgs/by-name/in/intellij-idea-oss/package.nix |
+| MPS                            | pkgs/by-name/je/jetbrains-mps/package.nix     |
+| PhpStorm                       | pkgs/by-name/ph/phpstorm/package.nix          |
+| PyCharm                        | pkgs/by-name/py/pycharm/package.nix           |
+| PyCharm (Open Source)          | pkgs/by-name/py/pycharm-oss/package.nix       |
+| Rider                          | pkgs/by-name/ri/rider/package.nix             |
+| RubyMine                       | pkgs/by-name/ru/ruby-mine/package.nix         |
+| RustRover                      | pkgs/by-name/ru/rust-rover/package.nix        |
+| WebStorm                       | pkgs/by-name/we/webstorm/package.nix          |
+
 ## Tests:
 - To test the build process of every IDE (as well as the process for adding plugins), build `jetbrains.plugins.tests.empty`.
 - To test that plugins are correctly stored in the plugins directory, build `jetbrains.plugins.tests.stored-correctly`.
 
 ## How to use plugins:
  - Pass your IDE package and a list of plugin packages to `jetbrains.plugins.addPlugins`.
-   E.g. `pkgs.jetbrains.plugins.addPlugins pkgs.jetbrains.idea [ ideavim ]`
+   E.g. `pkgs.jetbrains.plugins.addPlugins pkgs.intellij-idea [ ideavim ]`
  - The list has to contain drvs giving the directory contents of the plugin or a single `.jar` (executable).
 
 Nixpkgs does not package JetBrains plugins, however you can use third-party sources, such as
@@ -51,9 +73,9 @@ To keep things simple, the update script will search for the following markers a
 Any comments or other manual changes between these markers will be removed when the script runs.
 
 ## How to add an IDE:
- - Add a new derivation in `ides/`
+ - Add a new derivation in `/pkgs/by-name/...`
  - Add an entry to the URL templates in `updater/updateInfo.json`
- - Add it to `default.nix`
+ - Add it to the table at the top ("IDE packages")
 
 ### TODO:
  - get rid of remaining `overrideAttrs` in IDE drvs:

pkgs/applications/editors/jetbrains/updater/jetbrains_nix_updater/config.py

@@ -24,6 +24,7 @@ class UpdaterConfig:
     no_bin: bool
     no_src: bool
     no_maven_deps: bool
+    dry_run: bool
 
     def __init__(self, argparse_result):
         self.nixpkgs_root = (
@@ -47,3 +48,4 @@ class UpdaterConfig:
         self.no_bin = argparse_result.no_bin
         self.no_src = argparse_result.no_src
         self.no_maven_deps = argparse_result.no_maven_deps
+        self.dry_run = argparse_result.dry_run

pkgs/applications/editors/jetbrains/updater/jetbrains_nix_updater/ides.py

@@ -22,43 +22,33 @@ class Ide:
     update_info: UpdateInfo | None
 
 
-def is_source_ide(drv_path: Path):
-    assert " " not in str(drv_path)
-    try:
-        return (
-            run_command(
-                [
-                    "nix-instantiate",
-                    "--eval",
-                    "-E",
-                    f'builtins.hasAttr "mkJetBrainsSource" (builtins.functionArgs (import {drv_path}))',
-                ]
-            )
-            == "true"
-        )
-    except CalledProcessError as ex:
-        print(f"Failed to eval {drv_path}: {ex.stderr}", file=sys.stderr)
-        exit(1)
+def by_name_path(ide_name: str, nixpkgs_root: Path) -> Path:
+    by_name_stem = ide_name[0:2]
+    return nixpkgs_root / "pkgs" / "by-name" / by_name_stem / ide_name
 
 
-def get_single_ide(update_info: dict[str, UpdateInfo], jb_root: Path, name: str) -> Ide:
-    drv_path = jb_root / "ides" / f"{name}.nix"
+def is_source_ide(ide_name: str):
+    return ide_name.endswith("-oss")
+
+
+def get_single_ide(update_info: dict[str, UpdateInfo], nixpkgs_root: Path, name: str) -> Ide:
+    drv_path = by_name_path(name, nixpkgs_root) / "package.nix"
     if not drv_path.exists():
         raise Exception(f"IDE not found at {drv_path}")
     return Ide(
         name=name,
         drv_path=drv_path,
-        is_source=is_source_ide(drv_path),
+        is_source=is_source_ide(name),
         update_info=update_info.get(name),
     )
 
 
-def get_all_ides(update_info: dict[str, UpdateInfo], jb_root: Path) -> Iterable[Ide]:
-    for file in sorted((jb_root / "ides").iterdir()):
-        if file.suffix == ".nix":
-            yield Ide(
-                name=file.stem,
-                drv_path=file,
-                is_source=is_source_ide(file),
-                update_info=update_info.get(file.stem),
-            )
+def get_all_ides(update_info: dict[str, UpdateInfo], nixpkgs_root: Path) -> Iterable[Ide]:
+    for name, update_info in update_info.items():
+        drv_path = by_name_path(name, nixpkgs_root) / "package.nix"
+        yield Ide(
+            name=name,
+            drv_path=drv_path,
+            is_source=is_source_ide(name),
+            update_info=update_info,
+        )

pkgs/applications/editors/jetbrains/updater/jetbrains_nix_updater/update_src.py

@@ -1,3 +1,4 @@
+import os.path
 import sys
 
 import json
@@ -8,7 +9,7 @@ from subprocess import CalledProcessError
 
 from jetbrains_nix_updater.config import UpdaterConfig
 from jetbrains_nix_updater.fetcher import VersionInfo
-from jetbrains_nix_updater.ides import Ide
+from jetbrains_nix_updater.ides import Ide, by_name_path
 from jetbrains_nix_updater.update_src_maven import (
     get_maven_deps_for_ide,
     ensure_is_list,
@@ -148,10 +149,6 @@ def generate_jps_hash(config: UpdaterConfig, root_path: Path) -> str:
     )
 
 
-def maven_out_path(jb_root: Path, name: str) -> Path:
-    return jb_root / "source" / f"{name}_maven_artefacts.json"
-
-
 def run_src_update(ide: Ide, info: VersionInfo, config: UpdaterConfig) -> bool:
     variant = ide.name.removesuffix("-oss")
     try:
@@ -194,7 +191,7 @@ def run_src_update(ide: Ide, info: VersionInfo, config: UpdaterConfig) -> bool:
                         androidHash = "{android_hash}";
                         jpsHash = "{jps_hash}";
                         restarterHash = "{restarter_hash}";
-                        mvnDeps = ../source/{variant}_maven_artefacts.json;
+                        mvnDeps = ./maven_artefacts.json;
                         repositories = [
                             {repositories_nix}
                         ];
@@ -213,7 +210,12 @@ def run_src_update(ide: Ide, info: VersionInfo, config: UpdaterConfig) -> bool:
     if not config.no_maven_deps:
         print("[*] Collecting maven hashes")
         maven_hashes = get_maven_deps_for_ide(config, ide)
-        with open(maven_out_path(config.jetbrains_root, variant), "w") as f:
-            json.dump(maven_hashes, f, indent=4)
-            f.write("\n")
+        maven_out_path = by_name_path(ide.name, config.nixpkgs_root) / "maven_artefacts.json"
+        if config.dry_run:
+            assert maven_out_path.parent.exists()
+            print(f"[D] --dry-run: {maven_out_path} not modified", file=sys.stderr)
+        else:
+            with open(maven_out_path, "w") as f:
+                json.dump(maven_hashes, f, indent=4)
+                f.write("\n")
     return True

pkgs/applications/editors/jetbrains/updater/jetbrains_nix_updater/util.py

@@ -1,3 +1,4 @@
+import sys
 from typing import Iterable
 
 import subprocess
@@ -45,6 +46,10 @@ def replace_blocks(
     with open(file, "r") as f:
         lines = f.readlines()
 
+    if config.dry_run:
+        print(f"[D] --dry-run: {file} not modified", file=sys.stderr)
+        return
+
     for name, block in blocks:
         old_lines = lines
         lines = []

pkgs/applications/editors/jetbrains/updater/main.py

@@ -34,6 +34,9 @@ def main():
         action="store_true",
         help="do not update maven dependencies for source IDEs",
     )
+    parser.add_argument(
+        "--dry-run", action="store_true", help="do not change any files"
+    )
     parser.add_argument(
         "--old-version",
         type=str,
@@ -50,9 +53,9 @@ def main():
     version_fetcher = VersionFetcher()
 
     ides_to_run_for = (
-        [get_single_ide(update_info, config.jetbrains_root, config.ide)]
+        [get_single_ide(update_info, config.nixpkgs_root, config.ide)]
         if config.ide is not None
-        else list(get_all_ides(update_info, config.jetbrains_root))
+        else list(get_all_ides(update_info, config.nixpkgs_root))
     )
 
     print(f"[.] found IDEs to update: {', '.join(ide.name for ide in ides_to_run_for)}")

pkgs/applications/editors/jetbrains/updater/updateInfo.json

@@ -23,14 +23,6 @@
       "aarch64-darwin": "https://download.jetbrains.com/python/dataspell-{version}-aarch64.dmg"
     }
   },
-  "gateway": {
-    "channel": "GW-RELEASE-licensing-RELEASE",
-    "urls": {
-      "x86_64-linux": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}.tar.gz",
-      "aarch64-linux": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}-aarch64.tar.gz",
-      "aarch64-darwin": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}-aarch64.dmg"
-    }
-  },
   "goland": {
     "channel": "GO-RELEASE-licensing-RELEASE",
     "urls": {
@@ -39,7 +31,7 @@
       "aarch64-darwin": "https://download.jetbrains.com/go/goland-{version}-aarch64.dmg"
     }
   },
-  "idea": {
+  "intellij-idea": {
     "channel": "IU-RELEASE-licensing-RELEASE",
     "urls": {
       "x86_64-linux": "https://download.jetbrains.com/idea/ideaIU-{version}.tar.gz",
@@ -47,11 +39,19 @@
       "aarch64-darwin": "https://download.jetbrains.com/idea/ideaIU-{version}-aarch64.dmg"
     }
   },
-  "idea-oss": {
+  "intellij-dea-oss": {
     "channel": "IU-RELEASE-licensing-RELEASE",
     "urls": {}
   },
-  "mps": {
+  "jetbrains-gateway": {
+    "channel": "GW-RELEASE-licensing-RELEASE",
+    "urls": {
+      "x86_64-linux": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}.tar.gz",
+      "aarch64-linux": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}-aarch64.tar.gz",
+      "aarch64-darwin": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}-aarch64.dmg"
+    }
+  },
+  "jetbrains-mps": {
     "channel": "MPS-RELEASE-licensing-RELEASE",
     "urls": {
       "x86_64-linux": "https://download.jetbrains.com/mps/{versionMajorMinor}/MPS-{version}.tar.gz",

pkgs/applications/editors/vim/plugins/generated.nix

@@ -461,12 +461,12 @@ final: prev: {
 
   SchemaStore-nvim = buildVimPlugin {
     pname = "SchemaStore.nvim";
-    version = "0-unstable-2026-09-20";
+    version = "0-unstable-2026-09-24";
     src = fetchFromGitHub {
       owner = "b0o";
       repo = "SchemaStore.nvim";
-      rev = "b73cf982d16ff69e528d2ab269482f11c0825f64";
-      hash = "sha256-RqfC4ZceON7BTRsjdw4HYxQkOQg3XD4TTHNDy7rquMM=";
+      rev = "12dd0de1f15d598db2cc0d075f4f0d13a3290d4d";
+      hash = "sha256-CwAbTCSjMb85sSNNEFu0Cm09qj55WzNsw/01Yi1itKo=";
     };
     meta.homepage = "https://github.com/b0o/SchemaStore.nvim/";
     meta.license = getLicenseFromSpdxId "Apache-2.0";
@@ -1625,12 +1625,12 @@ final: prev: {
 
   base16-nvim = buildVimPlugin {
     pname = "base16-nvim";
-    version = "0-unstable-2026-09-13";
+    version = "0-unstable-2026-09-24";
     src = fetchFromGitHub {
       owner = "RRethy";
       repo = "base16-nvim";
-      rev = "44fc7a0d7ad878f90b04ffe8fa58c99c19007509";
-      hash = "sha256-Wb0fSya++a64lPIVtcdQjX9wkLfCEtq5uq6KG8jHvPY=";
+      rev = "feefc7e2a7bc7c2d814be1cc4b37ed599c52dad1";
+      hash = "sha256-U45ShqydwxkUbaIbRt0ERzCK65UYFlwLTdaL0jIz0QA=";
     };
     meta.homepage = "https://github.com/RRethy/base16-nvim/";
     meta.license = getLicenseFromSpdxId "MIT";
@@ -1751,12 +1751,12 @@ final: prev: {
 
   black-metal-theme-neovim = buildVimPlugin {
     pname = "black-metal-theme-neovim";
-    version = "2.0";
+    version = "2.1.0";
     src = fetchFromGitHub {
       owner = "metalelf0";
       repo = "black-metal-theme-neovim";
-      tag = "2.0";
-      hash = "sha256-z+qJfvCIV5WEAvKIkttDKpfBDt1xDBkTYLk2EoZbnj8=";
+      tag = "v2.1.0";
+      hash = "sha256-rVZPpbakoC6AoSPi8adKoY5aYGO/syjpwGTrsXm3Yag=";
     };
     meta.homepage = "https://github.com/metalelf0/black-metal-theme-neovim/";
     meta.license = getLicenseFromSpdxId "Apache-2.0";
@@ -3513,12 +3513,12 @@ final: prev: {
 
   coc-nvim = buildVimPlugin {
     pname = "coc.nvim";
-    version = "0.0.82-unstable-2026-09-19";
+    version = "0.0.82-unstable-2026-09-22";
     src = fetchFromGitHub {
       owner = "neoclide";
       repo = "coc.nvim";
-      rev = "85709b90d7d3fa6962609b6adadac9f7b2067819";
-      hash = "sha256-MWCpHBXmlle96So8Tlc3+i9du+FCH4IRE2VwHaQFXjk=";
+      rev = "f5910295483bfbe8b58e6f2002e9ae280e5b700e";
+      hash = "sha256-fXxJRSEfj/o/43fd+iADJl7ARYOZd01iLbSYnFHG1Sc=";
     };
     meta.homepage = "https://github.com/neoclide/coc.nvim/";
     meta.license = getLicenseFromSpdxId "MIT";
@@ -4130,12 +4130,12 @@ final: prev: {
 
   copilot-lua = buildVimPlugin {
     pname = "copilot.lua";
-    version = "3.1.8";
+    version = "3.1.10";
     src = fetchFromGitHub {
       owner = "zbirenbaum";
       repo = "copilot.lua";
-      tag = "v3.1.8";
-      hash = "sha256-qqunTfZsgYEMiDnXaji6eyfBSbhmhFuAnh93UR7oimE=";
+      tag = "v3.1.10";
+      hash = "sha256-zL2yBu52mnMEj52tutE1aa++O75CAYGr9uHafDH8Qv0=";
     };
     meta.homepage = "https://github.com/zbirenbaum/copilot.lua/";
     meta.license = getLicenseFromSpdxId "MIT";
@@ -4228,12 +4228,12 @@ final: prev: {
 
   coq_nvim = buildVimPlugin {
     pname = "coq_nvim";
-    version = "0-unstable-2026-09-19";
+    version = "0-unstable-2026-09-22";
     src = fetchFromGitHub {
       owner = "ms-jpq";
       repo = "coq_nvim";
-      rev = "ed3778bb812961c60290ab6521eb2a90abeae4cf";
-      hash = "sha256-6JqW/vpN8MmWkNIJizmmcSF+he/RaIpn284Gk7Lx1jw=";
+      rev = "0cdbf99893729c5ffa74064382efc53364d7045d";
+      hash = "sha256-cAIZQcBVqTyaPW2+hH8kZRyTu8M1RQzLjLnHI4moICg=";
     };
     meta.homepage = "https://github.com/ms-jpq/coq_nvim/";
     meta.license = getLicenseFromSpdxId "GPL-3.0-only";
@@ -4945,12 +4945,12 @@ final: prev: {
     pname = "deoplete-github";
     version = "0-unstable-2018-03-04";
     src = fetchFromGitHub {
-      owner = "SevereOverfl0w";
+      owner = "dkarvik";
       repo = "deoplete-github";
       rev = "8e30256e50b3914a7e57ea4d5976b6a499fb936f";
       hash = "sha256-9ZU9DgMkBPIu/vy01TZqLWdOvpnzmfUwa/oEErEtwYY=";
     };
-    meta.homepage = "https://github.com/SevereOverfl0w/deoplete-github/";
+    meta.homepage = "https://github.com/dkarvik/deoplete-github/";
     meta.license = unfree;
     meta.hydraPlatforms = [ ];
   };
@@ -6683,12 +6683,12 @@ final: prev: {
 
   git-dev-nvim = buildVimPlugin {
     pname = "git-dev.nvim";
-    version = "0.11.1";
+    version = "0.11.2";
     src = fetchFromGitHub {
       owner = "moyiz";
       repo = "git-dev.nvim";
-      tag = "v0.11.1";
-      hash = "sha256-pDz0IRlnnVHQ5G3Ga8I2wF8jDcF3hiyvMo5s5fwcV88=";
+      tag = "v0.11.2";
+      hash = "sha256-locfBfG9LYjxK1toQyqvuB/dP62jsRmz0S/qfVZbZNU=";
     };
     meta.homepage = "https://github.com/moyiz/git-dev.nvim/";
     meta.license = getLicenseFromSpdxId "BSD-3-Clause";
@@ -6781,11 +6781,11 @@ final: prev: {
 
   gitlab-vim = buildVimPlugin {
     pname = "gitlab.vim";
-    version = "1.1.0-unstable-2026-08-24";
+    version = "1.1.0-unstable-2026-09-21";
     src = fetchgit {
       url = "https://gitlab.com/gitlab-org/editor-extensions/gitlab.vim";
-      rev = "0cc64de832d79da7f2a53b111d7209a726fc33c8";
-      hash = "sha256-3YeU4TJ01pp70nm8Xl4xp07mADIZu1maNmbogbLl+Mw=";
+      rev = "185263ed2fc125b377f0825736b32702943bad43";
+      hash = "sha256-T4O2tCefTnA4gzIlIhK1RXAj/OFlYUWbdCJsVLdDODY=";
     };
     meta.homepage = "https://gitlab.com/gitlab-org/editor-extensions/gitlab.vim";
     meta.license = unfree;
@@ -7003,12 +7003,12 @@ final: prev: {
 
   gruber-darker-nvim = buildVimPlugin {
     pname = "gruber-darker.nvim";
-    version = "0-unstable-2026-09-05";
+    version = "0-unstable-2026-09-23";
     src = fetchFromGitHub {
       owner = "blazkowolf";
       repo = "gruber-darker.nvim";
-      rev = "50fa4e583099729fcaaadc73a5afb74f7a91a625";
-      hash = "sha256-TgLuVBTnZnX+siZoE3Vzt5qtxP5Ab3VZUbjOOEQa7E8=";
+      rev = "35cb97959ef01f7193c94c404c13ddb3d4346654";
+      hash = "sha256-mlezA4AMPv9fW0rHcGWBIYswPFNnob7NDX5TyC3fSCM=";
     };
     meta.homepage = "https://github.com/blazkowolf/gruber-darker.nvim/";
     meta.license = getLicenseFromSpdxId "MIT";
@@ -8489,12 +8489,12 @@ final: prev: {
 
   kitty-scrollback-nvim = buildVimPlugin {
     pname = "kitty-scrollback.nvim";
-    version = "9.2.1";
+    version = "9.3.1";
     src = fetchFromGitHub {
       owner = "mikesmithgh";
       repo = "kitty-scrollback.nvim";
-      tag = "v9.2.1";
-      hash = "sha256-8IkvoJ8nTlP5WCqMpJqUhBsz7OYB/Mlp1lH5TJRpvOE=";
+      tag = "v9.3.1";
+      hash = "sha256-d3QGc4243XrzRpVgj0D137+x/r8VzjYdDJrElp/yv4I=";
     };
     meta.homepage = "https://github.com/mikesmithgh/kitty-scrollback.nvim/";
     meta.license = getLicenseFromSpdxId "Apache-2.0";
@@ -9244,12 +9244,12 @@ final: prev: {
 
   llm-nvim = buildVimPlugin {
     pname = "llm.nvim";
-    version = "0-unstable-2026-09-17";
+    version = "0-unstable-2026-09-23";
     src = fetchFromGitHub {
       owner = "huggingface";
       repo = "llm.nvim";
-      rev = "c7fdccf643758a19b472a034822eb204f8981155";
-      hash = "sha256-23gONtsP6CLsSbS68a8DAqDs5jLW4Q7qzwc75bOTEOs=";
+      rev = "fba54982924b701600f34dba0ce643de1514b698";
+      hash = "sha256-Pj64ZWjJnf1Y/ZfqrtowHRkJzSrjvSGIwt7Fpx4kWRE=";
     };
     meta.homepage = "https://github.com/huggingface/llm.nvim/";
     meta.license = getLicenseFromSpdxId "Apache-2.0";
@@ -11218,12 +11218,12 @@ final: prev: {
 
   neoconf-nvim = buildVimPlugin {
     pname = "neoconf.nvim";
-    version = "1.4.0-unstable-2026-09-20";
+    version = "1.4.0-unstable-2026-09-24";
     src = fetchFromGitHub {
       owner = "folke";
       repo = "neoconf.nvim";
-      rev = "a469ca99c14c1d19f908d1ce61fe8aa26bfdfb30";
-      hash = "sha256-fscYezkV5k1aa2d12XhYxKTggmD1vjKQGdumLtEESa8=";
+      rev = "03fad132dfb3f8a61b55b4731ee62d6fa7db9f2f";
+      hash = "sha256-JVprbeJUCAIXMw8vS5CW5qz0jR2DL5G/Fc9nYEfdUcM=";
     };
     meta.homepage = "https://github.com/folke/neoconf.nvim/";
     meta.license = getLicenseFromSpdxId "Apache-2.0";
@@ -11682,12 +11682,12 @@ final: prev: {
 
   neotest-java = buildVimPlugin {
     pname = "neotest-java";
-    version = "0.38.4";
+    version = "0.39.0";
     src = fetchFromGitHub {
       owner = "rcasia";
       repo = "neotest-java";
-      tag = "v0.38.4";
-      hash = "sha256-yXS54cs+Q+zJ4rUMbhwgRTMLNZUptfVWusj2muumyIo=";
+      tag = "v0.39.0";
+      hash = "sha256-FByGkU2pig8b9w59812B7o7IgSFnEjeDM7shRzAaoi8=";
     };
     meta.homepage = "https://github.com/rcasia/neotest-java/";
     meta.license = getLicenseFromSpdxId "MIT";
@@ -12283,12 +12283,12 @@ final: prev: {
 
   no-neck-pain-nvim = buildVimPlugin {
     pname = "no-neck-pain.nvim";
-    version = "3.0.0";
+    version = "3.0.1";
     src = fetchFromGitHub {
       owner = "shortcuts";
       repo = "no-neck-pain.nvim";
-      tag = "v3.0.0";
-      hash = "sha256-8YxDFzSZmcqF1yUbUwVacLZF2JnSb4Z3b630x22YOtw=";
+      tag = "v3.0.1";
+      hash = "sha256-RUCBdraqR1M9iYIXR8Rwp/9jj2gSPSzucAUJi5aYEUU=";
     };
     meta.homepage = "https://github.com/shortcuts/no-neck-pain.nvim/";
     meta.license = getLicenseFromSpdxId "MIT";
@@ -12437,12 +12437,12 @@ final: prev: {
 
   numb-nvim = buildVimPlugin {
     pname = "numb.nvim";
-    version = "1.2.0";
+    version = "1.2.1";
     src = fetchFromGitHub {
       owner = "nacro90";
       repo = "numb.nvim";
-      tag = "v1.2.0";
-      hash = "sha256-MRpfVTwlWZl9eKMiLg7eSMeKyhnxSNI3ZJ/TOzW43B0=";
+      tag = "v1.2.1";
+      hash = "sha256-HlMAZhrM+HnMDwBqXhEjD26y0hkWq6orNDDuUMO0KGM=";
     };
     meta.homepage = "https://github.com/nacro90/numb.nvim/";
     meta.license = getLicenseFromSpdxId "MIT";
@@ -13355,12 +13355,12 @@ final: prev: {
 
   nvim-lspconfig = buildVimPlugin {
     pname = "nvim-lspconfig";
-    version = "2.11.0";
+    version = "2.12.0";
     src = fetchFromGitHub {
       owner = "neovim";
       repo = "nvim-lspconfig";
-      tag = "v2.11.0";
-      hash = "sha256-d1vDEfiNSo9ccSPqTHEFqXVFCPhp/0ZozTzcyLiJrGg=";
+      tag = "v2.12.0";
+      hash = "sha256-FPk6fSdp13byZBp4pAPng1WefLEGoeauNcw62s/+i2Y=";
     };
     meta.homepage = "https://github.com/neovim/nvim-lspconfig/";
     meta.license = getLicenseFromSpdxId "Apache-2.0";
@@ -14769,12 +14769,12 @@ final: prev: {
 
   otter-nvim = buildVimPlugin {
     pname = "otter.nvim";
-    version = "2.14.6";
+    version = "2.14.7";
     src = fetchFromGitHub {
       owner = "jmbuhr";
       repo = "otter.nvim";
-      tag = "v2.14.6";
-      hash = "sha256-hfyZ9eG6dMbDzPtQ8wIrx4B3la2VQqnZuXS2eG9gaFU=";
+      tag = "v2.14.7";
+      hash = "sha256-IlchxTOuuIXAP9fwU8HzQrtjWaAm9Y4oQFGYunYpWgc=";
     };
     meta.homepage = "https://github.com/jmbuhr/otter.nvim/";
     meta.license = getLicenseFromSpdxId "MIT";
@@ -15387,12 +15387,12 @@ final: prev: {
 
   project-nvim = buildVimPlugin {
     pname = "project.nvim";
-    version = "6.3.1-1";
+    version = "6.4.0-1";
     src = fetchFromGitHub {
       owner = "DrKJeff16";
       repo = "project.nvim";
-      tag = "v6.3.1-1";
-      hash = "sha256-Z1m4SpTpLEp7aOgmbAQlsjCuM3JgVnRfBh2vhef2ghY=";
+      tag = "v6.4.0-1";
+      hash = "sha256-YpLFIn1Kz/WwbGlJLt9urbOyVSwvjeZlr/aRnWW4o8g=";
     };
     meta.homepage = "https://github.com/DrKJeff16/project.nvim/";
     meta.license = getLicenseFromSpdxId "Apache-2.0";
@@ -15779,12 +15779,12 @@ final: prev: {
 
   refactoring-nvim = buildVimPlugin {
     pname = "refactoring.nvim";
-    version = "0-unstable-2026-09-18";
+    version = "0-unstable-2026-09-23";
     src = fetchFromGitHub {
       owner = "theprimeagen";
       repo = "refactoring.nvim";
-      rev = "8bcf893eb3871bc87b42adffe2fb9b0b7dc9d328";
-      hash = "sha256-FjlWKAB8w4FQE9zOLJ00S5906AhOh0Wl5bWj49GudGM=";
+      rev = "684b3484796ea44595bebbfddee4fa4dbfc90939";
+      hash = "sha256-AYYzm0JwklBxZNO+pNdKOcPvWQa4y24SIlblzAlGs9E=";
     };
     meta.homepage = "https://github.com/theprimeagen/refactoring.nvim/";
     meta.license = getLicenseFromSpdxId "MIT";
@@ -16858,12 +16858,12 @@ final: prev: {
 
   spring-boot-nvim = buildVimPlugin {
     pname = "spring-boot.nvim";
-    version = "0-unstable-2026-09-01";
+    version = "0-unstable-2026-09-24";
     src = fetchFromGitHub {
       owner = "JavaHello";
       repo = "spring-boot.nvim";
-      rev = "eea95b752bceb6ca410b3e2d87a1a02d08bd61a6";
-      hash = "sha256-GYer7azYjYWGMTzNDLxHshGYJCl+2zi2+78LjHsuaUc=";
+      rev = "9880be48170a21d97444b1eba75853fd3bad33c3";
+      hash = "sha256-+zgi9Jhh5f3kPr5VC2KZ3x7OEXdTao5gQM48y5NlGo4=";
     };
     meta.homepage = "https://github.com/JavaHello/spring-boot.nvim/";
     meta.license = getLicenseFromSpdxId "Apache-2.0";
@@ -18207,12 +18207,12 @@ final: prev: {
 
   tinted-nvim = buildVimPlugin {
     pname = "tinted-nvim";
-    version = "1.0.0-unstable-2026-09-13";
+    version = "1.0.0-unstable-2026-09-24";
     src = fetchFromGitHub {
       owner = "tinted-theming";
       repo = "tinted-nvim";
-      rev = "72c8e25efea5b7911863a0c4380bb1e014f3e41a";
-      hash = "sha256-Y7zUq8poJFwfkaUEYFXjDpVRbzRdlD8VUqC+ER9GPnI=";
+      rev = "7df9050dc4fa07efcdaf4046b2d746a9f39b0a5b";
+      hash = "sha256-8KL8OKA7iib0L1jfVMhkR8VHbgk+AMTJDRJj1dAjpXY=";
     };
     meta.homepage = "https://github.com/tinted-theming/tinted-nvim/";
     meta.license = getLicenseFromSpdxId "MIT";
@@ -18221,12 +18221,12 @@ final: prev: {
 
   tinted-vim = buildVimPlugin {
     pname = "tinted-vim";
-    version = "01-unstable-2026-09-13";
+    version = "01-unstable-2026-09-24";
     src = fetchFromGitHub {
       owner = "tinted-theming";
       repo = "tinted-vim";
-      rev = "4242c2e29728af4d00fea05b094992747ad99a17";
-      hash = "sha256-w1JZrHJeTuasHOVGIdhV4GIKP4GzVhATykYVFrmpHPc=";
+      rev = "57f981abc891b9adaa69cdc43d590f569bd5ec18";
+      hash = "sha256-TESqcY8VNmi/ONSqcILNPHvGVRfXMxttFDIvwKB+doU=";
     };
     meta.homepage = "https://github.com/tinted-theming/tinted-vim/";
     meta.license = unfree;
@@ -18249,12 +18249,12 @@ final: prev: {
 
   tiny-code-action-nvim = buildVimPlugin {
     pname = "tiny-code-action.nvim";
-    version = "0-unstable-2026-04-25";
+    version = "0-unstable-2026-09-22";
     src = fetchFromGitHub {
       owner = "rachartier";
       repo = "tiny-code-action.nvim";
-      rev = "0d040ed81f7953118b81cd12681fcdfcac069803";
-      hash = "sha256-UF9zeO5Uujdt2MEwy2d2Lhk6JRnEN4vrEvYslv0/zaA=";
+      rev = "91a9c32228e9a7761d241023d9ebb9d11d8fb10d";
+      hash = "sha256-PLGomUsZt5KPabBtl1xof83sOxI7bv7DkHKjOnf8+/Q=";
     };
     meta.homepage = "https://github.com/rachartier/tiny-code-action.nvim/";
     meta.license = getLicenseFromSpdxId "MIT";
@@ -18517,12 +18517,12 @@ final: prev: {
 
   treesj = buildVimPlugin {
     pname = "treesj";
-    version = "0-unstable-2026-05-28";
+    version = "0-unstable-2026-09-23";
     src = fetchFromGitHub {
       owner = "Wansmer";
       repo = "treesj";
-      rev = "79aedb401bbdc7e4202f7881eab5f6feb2105b0a";
-      hash = "sha256-MoR46Z3ghEfsVaB8D3tE154DRdg/2iT2l54PICgC/X4=";
+      rev = "9f349ba62c524f065d6f43254d731ddf8319b9bf";
+      hash = "sha256-8U+TKUyRBZ2o7Ue3ibUEkSSlNZEzaWH6o3LtKetDeIk=";
     };
     meta.homepage = "https://github.com/Wansmer/treesj/";
     meta.license = getLicenseFromSpdxId "MIT";
@@ -23379,12 +23379,12 @@ final: prev: {
 
   vim-pets = buildVimPlugin {
     pname = "vim-pets";
-    version = "0-unstable-2026-08-01";
+    version = "0-unstable-2026-09-21";
     src = fetchFromGitHub {
       owner = "MeF0504";
       repo = "vim-pets";
-      rev = "461b3530341c00334b1bc75f64b35baff09910c4";
-      hash = "sha256-Zp/cpdwxWzbRVxrkkIdpB+tLgM2JJLA/mm+c1+oqM3M=";
+      rev = "270aaaae963390650658ac7cce7cfce32d09b6d2";
+      hash = "sha256-AE+j8gZx5P70qW26abyWvui5YhToTyc1iFHCz0L76eU=";
     };
     meta.homepage = "https://github.com/MeF0504/vim-pets/";
     meta.license = getLicenseFromSpdxId "MIT";
@@ -26206,12 +26206,12 @@ final: prev: {
 
   yanky-nvim = buildVimPlugin {
     pname = "yanky.nvim";
-    version = "2.0.0-unstable-2026-07-22";
+    version = "2.0.0-unstable-2026-09-21";
     src = fetchFromGitHub {
       owner = "gbprod";
       repo = "yanky.nvim";
-      rev = "dd6689fdda85f66cab7d9b1a1664625f3be0920d";
-      hash = "sha256-2uNKHtFfIokuZ8AcPP5LXuStxPzQGP2Jcq04DsYM9s4=";
+      rev = "4b4ddd196526fd3d6fd091d931810f9743e936d3";
+      hash = "sha256-UcW2WSMz21gfE6u0ZNYsFhHipbwxK5XxTjg+ZtginEE=";
     };
     meta.homepage = "https://github.com/gbprod/yanky.nvim/";
     meta.license = getLicenseFromSpdxId "WTFPL";
@@ -26348,12 +26348,12 @@ final: prev: {
 
   zen-nvim = buildVimPlugin {
     pname = "zen.nvim";
-    version = "0-unstable-2026-09-12";
+    version = "0-unstable-2026-09-24";
     src = fetchFromGitHub {
       owner = "sand4rt";
       repo = "zen.nvim";
-      rev = "5fd4b1cc12b91930d1a55d9b98ef01ed963a0b46";
-      hash = "sha256-xO+Xn3FR27Ib8aU7Of1LCpeEjOeg0PJVg29yTH2br3o=";
+      rev = "48b408bcd8229c340360afe1edf14ebeb324e005";
+      hash = "sha256-Zk8M4rXHfBbt4iSoDkdaIPo7K6xQ1fyclayPcHIOszU=";
     };
     meta.homepage = "https://github.com/sand4rt/zen.nvim/";
     meta.license = getLicenseFromSpdxId "MIT";

pkgs/applications/editors/vim/plugins/non-generated/vim-markdown-composer/default.nix

@@ -1,24 +1,24 @@
 {
+  lib,
   fetchFromGitHub,
   nix-update-script,
   rustPlatform,
   vimUtils,
 }:
 let
-  version = "0-unstable-2022-06-14";
+  version = "0-unstable-2025-10-23";
   src = fetchFromGitHub {
     owner = "euclio";
     repo = "vim-markdown-composer";
-    rev = "e6f99bc20cfcb277c63041b1f766e6d5940bcc76";
-    sha256 = "0ljv8cvca8nk91g67mnzip81say04b1wbj9bzcgzy8m6qkz1r2h3";
-    fetchSubmodules = true;
+    rev = "4f53f1c6e41c8fb916c50b50e18284d923f0f3cd";
+    sha256 = "sha256-QODj8J2d2Qo8/B0rv5HthSidZcBgY11oNKwT8jCO6kI=";
   };
 
   vim-markdown-composer-bin = rustPlatform.buildRustPackage {
     pname = "vim-markdown-composer-bin";
     inherit src version;
 
-    cargoHash = "sha256-xzlEIaDEYDbxJ6YqzF+lSHcB9O+brClw026YI1YeNUc=";
+    cargoHash = "sha256-/wkXbd4cEOEVhWW5KzMavay7a4XI1deonjn0QCP6z7I=";
     # tests require network access
     doCheck = false;
   };
@@ -45,8 +45,9 @@ vimUtils.buildVimPlugin {
   };
 
   meta = {
+    description = "(Neo)vim plugin for asynchronous Markdown previews";
     homepage = "https://github.com/euclio/vim-markdown-composer/";
-    # rust build error
-    broken = true;
+    # https://github.com/euclio/vim-markdown-composer/blob/4f53f1c6e41c8fb916c50b50e18284d923f0f3cd/doc/markdown-composer.txt#L4
+    license = lib.licenses.mit;
   };
 }

pkgs/applications/editors/vim/plugins/vim-plugin-names

@@ -351,7 +351,7 @@ https://github.com/Shougo/deol.nvim/,,
 https://github.com/deoplete-plugins/deoplete-clang/,,
 https://github.com/deoplete-plugins/deoplete-dictionary/,,
 https://github.com/ponko2/deoplete-fish/,,
-https://github.com/SevereOverfl0w/deoplete-github/,,
+https://github.com/dkarvik/deoplete-github/,,
 https://github.com/deoplete-plugins/deoplete-go/,,
 https://github.com/Inazuma110/deoplete-greek/,,
 https://github.com/deoplete-plugins/deoplete-jedi/,,

pkgs/applications/editors/vscode/extensions/anthropic.claude-code/default.nix

@@ -21,22 +21,22 @@ vscode-utils.buildVscodeMarketplaceExtension (finalAttrs: {
       sources = {
         "x86_64-linux" = {
           arch = "linux-x64";
-          hash = "sha256-iq0u498LpvJU3l5gQzp4sqgcj/JvDki79WftHFfWp3o=";
+          hash = "sha256-pXzLJ/1g33JUorADMf0EzvI7DY2kbAZSnkttPY5ekOs=";
         };
         "aarch64-linux" = {
           arch = "linux-arm64";
-          hash = "sha256-fjDbAo9LtB/xG67pW/jOYICcAmeOLpV/WIWOlM9UDUc=";
+          hash = "sha256-CEKNRiYs8Grko5nVGSanAgj5WmLC7hnMBC9OXElrmoQ=";
         };
         "aarch64-darwin" = {
           arch = "darwin-arm64";
-          hash = "sha256-5MZ9XLtkL/dD2xX4XtgXHIfR1Gu0kkaEyCvnJEXcxQo=";
+          hash = "sha256-eu+5zAGdzFsx/PeAgCj60ppP0CMQEsZGaVlR+8OfFbQ=";
         };
       };
     in
     {
       name = "claude-code";
       publisher = "anthropic";
-      version = "2.1.280";
+      version = "2.1.281";
     }
     // sources.${stdenvNoCC.hostPlatform.system}
       or (throw "Unsupported system ${stdenvNoCC.hostPlatform.system}");

pkgs/applications/graphics/inkscape/extensions/applytransforms/default.nix

@@ -7,7 +7,7 @@
 
 stdenv.mkDerivation {
   pname = "inkscape-applytransforms";
-  version = "0-unstable-2021-05-11";
+  version = "0-unstable-2024-12-19";
 
   strictDeps = true;
   __structuredAttrs = true;
@@ -15,8 +15,8 @@ stdenv.mkDerivation {
   src = fetchFromGitHub {
     owner = "Klowner";
     repo = "inkscape-applytransforms";
-    rev = "5b3ed4af0fb66e399e686fc2b649b56db84f6042";
-    hash = "sha256-XWwkuw+Um/cflRWjIeIgQUxJLrk2DLDmx7K+pMWvIlI=";
+    rev = "979f98dfe199d25ceecff68a86684b941e703e18";
+    hash = "sha256-vRhNsHx5QkJPQgeToh4GRKD7EpMwLnN8QhrAP0WWTjU=";
   };
 
   nativeCheckInputs = [

pkgs/applications/version-management/sublime-merge/default.nix

@@ -5,9 +5,9 @@ let
 in
 {
   sublime-merge = common {
-    buildVersion = "2125";
-    aarch64sha256 = "Zs4VKbFKkw4KRViX/QGVtVo4hluJ3HVen39Vq3Xz3KI=";
-    x64sha256 = "0Zlv4nZMb2FDUG5KLkHTXJjdRzTa3TuNL54yacFVR/c=";
+    buildVersion = "2132";
+    aarch64sha256 = "70KdQ9lqkhFSfWU9fkhuawJpEkj6bkeU+XlLJIGKK54=";
+    x64sha256 = "As7Nj3vrEE6JmN/oZ8e4EzhY+qLpPYja7/FJUjDRs9g=";
   } { };
 
   sublime-merge-dev = common {

pkgs/by-name/ar/ares-cli/package.nix

@@ -8,18 +8,18 @@
 
 buildNpmPackage rec {
   pname = "ares-cli";
-  version = "3.2.5";
+  version = "3.2.6";
   src = fetchFromGitHub {
     owner = "webos-tools";
     repo = "cli";
     rev = "v${version}";
-    hash = "sha256-NWTDAgMGX+dPOIM8B7clx9sAYdWh+3VciWjTu1Qc39M=";
+    hash = "sha256-ziOZb+kzsAge6OxB/Vsaj04duZfeuezZFet2HdXPA58=";
   };
 
   nodejs = nodejs_22;
 
   dontNpmBuild = true;
-  npmDepsHash = "sha256-9nksCIrEltYdV5CeNUfIMgh5oMvzuelfOwdgzVoq1LE=";
+  npmDepsHash = "sha256-k8PRP1liSbJze2SHkmvUBqcGuAusnudwgj6ANMu32A8=";
 
   passthru.updateScript = nix-update-script { };
 

pkgs/by-name/ch/chirp/package.nix

@@ -7,18 +7,19 @@
   python3Packages,
   unstableGitUpdater,
   wrapGAppsHook3,
+  writableTmpDirAsHomeHook,
 }:
 
 python3Packages.buildPythonApplication {
   pname = "chirp";
-  version = "0.4.0-unstable-2026-05-18";
+  version = "0.4.0-unstable-2026-09-25";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "kk7ds";
     repo = "chirp";
-    rev = "36add258760361a7922c80e919d598cefa414f3c";
-    hash = "sha256-Kjpradtp0sEWjAzoXvhiVJ9eY0TliGSOvdHFAKcDm9Q=";
+    rev = "67f5e10f229769023f83c707b8152355b6d90819";
+    hash = "sha256-g4otWAm8E+9/CZjO/tuUm2oH+LU00wGsaDfaCwS9egw=";
   };
 
   nativeBuildInputs = [
@@ -48,6 +49,7 @@ python3Packages.buildPythonApplication {
     pytest-xdist
     ddt
     pyyaml
+    writableTmpDirAsHomeHook
   ];
 
   postPatch = ''
@@ -59,10 +61,6 @@ python3Packages.buildPythonApplication {
     make -C chirp/locale
   '';
 
-  preCheck = ''
-    export HOME="$TMPDIR"
-  '';
-
   # many upstream test failures
   doCheck = false;
 

pkgs/by-name/cl/claude-code/manifest.zst.json

@@ -1,62 +1,61 @@
 {
-  "version": "2.1.280",
+  "version": "2.1.281",
   "manifestSignatureEnforcement": "flag",
-  "commit": "80abbfe7d7232280011ff01a21ae3338f4c6e372",
-  "modsCommit": "8187baaaafb3a9ada02d3d6fb4e8d68587aef6b0",
-  "buildDate": "2026-09-21T20:56:45Z",
+  "commit": "3e320108de6831eb996e9a3f7795152073cc0d0c",
+  "modsCommit": "56f36532530f88b572854538d685fcf781141e8c",
+  "buildDate": "2026-09-23T02:34:19Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude.zst",
-      "checksum": "214fafd9d60bc0397cb68747b765ab752be4b53303c176ad885c4cafbe30826f",
-      "size": 72900982,
+      "checksum": "056662a4e3a5ca37770730a59345d1b5796ef65444c32b97d236651ab68f3fa1",
+      "size": 74110572,
       "bundle": {
-        "checksum": "5882f558c44d569dd35047588143a536711d4e415bebf94da1543a25e5bc5898",
-        "size": 72903461
+        "checksum": "01c192d55a6fa8fcc84557bbd913dfb43ae65f15c39bd1fba9161fc4ff7de175",
+        "size": 74115578
       }
     },
     "darwin-x64": {
       "binary": "claude.zst",
-      "checksum": "2b5ca074d02ea5dd507db0a90ba55847e297061ca3e987ddc49ea89ae0ff2e7e",
-      "size": 77008555,
+      "checksum": "085dd9952999c742cf262d0fed571c3bcd749d5127eb7dd455bc5be0948c7b9d",
+      "size": 78229557,
       "bundle": {
-        "checksum": "bf78bfd5af2400f39d21378198f689c3856d7a11aeb9919b012f27143e946cbf",
-        "size": 77013965
+        "checksum": "05e821e3c9f1178b603c6f7fcb3e05b1a038f885cb55eed42ad8df9bbfc7fdad",
+        "size": 78233701
       }
     },
     "linux-arm64": {
       "binary": "claude.zst",
-      "checksum": "6a01f30418f35122a672ccf74bed64aba5119ad47c71548a3b447cc9fec48c81",
-      "size": 82030081
+      "checksum": "7583b65585561c714e18caca45e0e0fb9bdba6d7ed6ee5d5171834d5c657aea6",
+      "size": 83227605
     },
     "linux-x64": {
       "binary": "claude.zst",
-      "checksum": "27910e2ae704d8f2e8024897d8fdf1e7710807baf4f6982c0e3797c058315384",
-      "size": 82761570
+      "checksum": "4ffb9f6baada4d88bbd8c586773efd0605c524c7a31cc3833eeda229717a7b25",
+      "size": 83964259
     },
     "linux-arm64-musl": {
       "binary": "claude.zst",
-      "checksum": "32dbe8a94da9689791688e0febfb88c39897ad67f055853e7ae1b6d11c4b4e39",
-      "size": 80444179
+      "checksum": "b5400b7f787e78f6c206c1adf70c65b5b6835f2899b61edfa83a117be92111d5",
+      "size": 81645720
     },
     "linux-x64-musl": {
       "binary": "claude.zst",
-      "checksum": "2b2e206987e357997bf5c06baf697379b5980a7cc6f1462ca70a6757ece58890",
-      "size": 81193598
+      "checksum": "3921fd07a12e93f858c8b706eca0e4d7b12af14f4af5378d3b87254b4231def5",
+      "size": 82393109
     },
     "win32-x64": {
       "binary": "claude.exe.zst",
-      "checksum": "cb50dbe5b595b52925d753b10d5907748a4137e7f0bff84d03ea60cd9a28eaf9",
-      "size": 85069447
+      "checksum": "62f544612ca7e31cdc197bdf8651abcc529bd716964d2517e101177c6b94c70a",
+      "size": 86264937
     },
     "win32-arm64": {
       "binary": "claude.exe.zst",
-      "checksum": "705dccf9d924d471e32efa19157283da2cdd0b8cfc71d7e0a9e3ec4d13ac381b",
-      "size": 81530251
+      "checksum": "41b632497a440de03904c03483d000b4004b908a5f3eb71f139de6dbd40cd685",
+      "size": 82711371
     }
   },
   "sdkCompat": {
     "testedWrapperVersions": [
-      "0.3.240",
       "0.3.241",
       "0.3.242",
       "0.3.243",
@@ -85,7 +84,8 @@
       "0.3.275",
       "0.3.276",
       "0.3.277",
-      "0.3.278"
+      "0.3.278",
+      "0.3.280"
     ],
     "harnessSchema": 1
   }

pkgs/by-name/co/codex/package.nix

@@ -29,18 +29,18 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "codex";
-  version = "0.156.1";
+  version = "0.157.0";
 
   src = fetchFromGitHub {
     owner = "openai";
     repo = "codex";
     tag = "rust-v${finalAttrs.version}";
-    hash = "sha256-H53f57hmnyCtn5yPxtBe/A92qyQyzQBeU/vK2qSBrvI=";
+    hash = "sha256-/f/k77vnFjPfnnf+X2E7rY2FxUR1xAcJZiPTv9Q8JVI=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/codex-rs";
 
-  cargoHash = "sha256-W87rX/W2J1pwqNrihX+Rj6DfagoZYuB6C+l/S4BhyJM=";
+  cargoHash = "sha256-Mp4chq9QuQB19FrOZBhmUtPrDoEpZZna79+MZs9rGUo=";
 
   __structuredAttrs = true;
 

pkgs/by-name/co/codexbar/package.nix

@@ -9,13 +9,13 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "codexbar";
-  version = "0.45.1";
+  version = "0.65.0";
   __structuredAttrs = true;
   strictDeps = true;
 
   src = fetchurl {
     url = "https://github.com/steipete/CodexBar/releases/download/v${finalAttrs.version}/CodexBar-macos-universal-${finalAttrs.version}.zip";
-    hash = "sha256-N/DfZw1H42R0rsyCWzsfrI6DAgCnmCvSgqeODoXQta0=";
+    hash = "sha256-z4/RfA+1T0h1+qiwndnexwXUIPRn8g01zZP3TMzlOLQ=";
   };
 
   sourceRoot = ".";

pkgs/by-name/cu/cups-bjnp/package.nix

@@ -39,5 +39,6 @@ stdenv.mkDerivation (finalAttrs: {
     '';
     homepage = "http://cups-bjnp.sourceforge.net";
     platforms = lib.platforms.linux;
+    license = lib.licenses.gpl2Plus;
   };
 })

pkgs/by-name/de/dejavu_fontsEnv/package.nix

@@ -1,9 +0,0 @@
-{
-  buildEnv,
-  dejavu_fonts,
-}:
-
-buildEnv {
-  inherit (dejavu_fonts) pname version;
-  paths = [ dejavu_fonts.out ];
-}

pkgs/by-name/di/diamond/package.nix

@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "diamond";
-  version = "2.2.7";
+  version = "2.2.8";
 
   src = fetchFromGitHub {
     owner = "bbuchfink";
     repo = "diamond";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-bWJIcQJR2BQED8YGnDSWIO+UehWThgJwHv7hGuT99D8=";
+    hash = "sha256-Z1+CJyKBRjTDVDAJ3uWPQd9KLIc03JNIoTTUuzHMB5U=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/dj/djvu2pdf/package.nix

@@ -1,44 +0,0 @@
-{
-  lib,
-  stdenv,
-  makeWrapper,
-  fetchurl,
-  djvulibre,
-  ghostscript,
-  which,
-}:
-
-stdenv.mkDerivation (finalAttrs: {
-  version = "0.9.2";
-  pname = "djvu2pdf";
-
-  src = fetchurl {
-    url = "https://0x2a.at/site/projects/djvu2pdf/djvu2pdf-${finalAttrs.version}.tar.gz";
-    sha256 = "0v2ax30m7j1yi4m02nzn9rc4sn4vzqh5vywdh96r64j4pwvn5s5g";
-  };
-
-  nativeBuildInputs = [ makeWrapper ];
-
-  installPhase = ''
-    mkdir -p $out/bin
-    cp -p djvu2pdf $out/bin
-    wrapProgram $out/bin/djvu2pdf --prefix PATH : ${
-      lib.makeBinPath [
-        ghostscript
-        djvulibre
-        which
-      ]
-    }
-
-    mkdir -p $out/man/man1
-    cp -p djvu2pdf.1.gz $out/man/man1
-  '';
-
-  meta = {
-    description = "Convert DjVu files to PDF files";
-    homepage = "https://0x2a.at/site/projects/djvu2pdf/";
-    license = lib.licenses.gpl1Only;
-    platforms = lib.platforms.all;
-    mainProgram = "djvu2pdf";
-  };
-})

pkgs/by-name/fi/firefoxpwa-unwrapped/package.nix

@@ -14,26 +14,26 @@
   stdenv,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "firefoxpwa-unwrapped";
-  version = "2.19.0";
+  version = "2.20.0";
 
   src = fetchFromGitHub {
     owner = "filips123";
     repo = "PWAsForFirefox";
-    rev = "v${version}";
-    hash = "sha256-T3VtyPmPz9u4sS9tgQxyks2w7VFLuyTjThDYFapiPOc=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-4Gbwfx/Gv21dvCEeS6HE1zHflD7xABRX3rAJdHWIsHU=";
   };
 
-  sourceRoot = "${src.name}/native";
+  sourceRoot = "${finalAttrs.src.name}/native";
   buildFeatures = [ "immutable-runtime" ];
 
   cargoHash = "sha256-Uxi/ujhtRK8TbRZTj7cQB9P7hD5Qao7K2rqeNXWLhXQ=";
 
   preConfigure = ''
-    sed -i 's;version = "0.0.0";version = "${version}";' Cargo.toml
-    sed -zi 's;name = "firefoxpwa"\nversion = "0.0.0";name = "firefoxpwa"\nversion = "${version}";' Cargo.lock
-    sed -i $'s;DISTRIBUTION_VERSION = \'0.0.0\';DISTRIBUTION_VERSION = \'${version}\';' userchrome/profile/chrome/pwa/chrome.sys.mjs
+    sed -i 's;version = "0.0.0";version = "${finalAttrs.version}";' Cargo.toml
+    sed -zi 's;name = "firefoxpwa"\nversion = "0.0.0";name = "firefoxpwa"\nversion = "${finalAttrs.version}";' Cargo.lock
+    sed -i $'s;DISTRIBUTION_VERSION = \'0.0.0\';DISTRIBUTION_VERSION = \'${finalAttrs.version}\';' userchrome/profile/chrome/pwa/chrome.sys.mjs
   '';
 
   nativeBuildInputs = [
@@ -137,7 +137,7 @@ rustPlatform.buildRustPackage rec {
       possible for the extension to detect and use it.
     '';
     homepage = "https://pwasforfirefox.filips.si/";
-    changelog = "https://github.com/filips123/PWAsForFirefox/releases/tag/v${version}";
+    changelog = "https://github.com/filips123/PWAsForFirefox/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mpl20;
     platforms = lib.platforms.linux;
     maintainers = with lib.maintainers; [
@@ -146,4 +146,4 @@ rustPlatform.buildRustPackage rec {
     ];
     mainProgram = "firefoxpwa";
   };
-}
+})

pkgs/by-name/fl/flatten-references-graph/package.nix

@@ -1,4 +1,5 @@
 {
+  lib,
   callPackage,
   nix-gitignore,
   python3Packages,
@@ -34,4 +35,6 @@ pythonPackages.buildPythonApplication {
   passthru = {
     dev-shell = callPackage ./dev-shell.nix { };
   };
+
+  meta.license = lib.licenses.mit;
 }

pkgs/by-name/fm/fmd-server/package.nix

@@ -17,12 +17,12 @@ buildGoModule (
   in
   {
     pname = "fmd-server";
-    version = "0.16.0";
+    version = "0.17.0";
     src = fetchFromGitLab {
       owner = "fmd-foss";
       repo = "fmd-server";
       tag = "v${finalAttrs.version}";
-      hash = "sha256-1agmYDK+YDG7uH5aTpqbEM5apA+/wOMKh4Ez7bbcag4=";
+      hash = "sha256-drZQj5tp0cHvrc+T1ESBHNNt0VoHhS9O93LIwjw2eCc=";
     };
 
     pnpmDeps = fetchPnpmDeps {
@@ -30,10 +30,10 @@ buildGoModule (
       pnpm = pnpm_11;
       sourceRoot = "${finalAttrs.src.name}/${ui.pnpmRoot}";
       fetcherVersion = 4;
-      hash = "sha256-Jyfe0g0H0VxMSMG/CX8HsLQkLVEc3XESn4i8fsaySqs=";
+      hash = "sha256-L6O1xsRw3ZwWg+83hC5n3a83RzSh9u0289gUHzfubJE=";
     };
 
-    vendorHash = "sha256-YU+jkRMwXXyYm6BwBcsFxVLwgGuu322comuoMbP/OT8=";
+    vendorHash = "sha256-fTteh+h4PqiISrqSjEK59jBog+tOu7Yzql8nYRK7q74=";
 
     preBuild = ''
       cp -r ${ui}/${ui.distRoot} web/

pkgs/by-name/fo/font-util/package.nix

@@ -47,8 +47,8 @@ stdenv.mkDerivation (finalAttrs: {
       # or its an older version that the one on spdx
       unicodeTOU
     ];
-    maintainers = [ ];
     pkgConfigModules = [ "fontutil" ];
     platforms = lib.platforms.unix;
+    teams = [ lib.teams.freedesktop ];
   };
 })

pkgs/by-name/fo/fosrl-newt/package.nix

@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "newt";
-  version = "1.16.0";
+  version = "1.17.0";
 
   src = fetchFromGitHub {
     owner = "fosrl";
     repo = "newt";
     tag = finalAttrs.version;
-    hash = "sha256-Ehmo7RUbZDZhBYAmaheh6IT01rhDj3LsQrXbaYQpSxg=";
+    hash = "sha256-lwDywGs1Wh5jl9xwEd7KvXqEkLw7gCas44SbHtKx8Ps=";
   };
 
-  vendorHash = "sha256-JhNBJhj5YX3Wurv7r/JDu6YtHizOMLk+NCob7ISx+3c=";
+  vendorHash = "sha256-VOXZWcPnBSc8EKYLKhsrQTHSjXvpaEYoewYLCxJ8Nk8=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
 

pkgs/by-name/fp/fprintd/package.nix

@@ -119,6 +119,6 @@ stdenv.mkDerivation (finalAttrs: {
     description = "D-Bus daemon that offers libfprint functionality over the D-Bus interprocess communication bus";
     license = lib.licenses.gpl2Plus;
     platforms = lib.platforms.linux;
-    maintainers = [ ];
+    teams = [ lib.teams.freedesktop ];
   };
 })

pkgs/by-name/fu/fuzzel/package.nix

@@ -28,13 +28,13 @@ assert (svgSupport && svgBackend == "nanosvg") -> enableCairo;
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "fuzzel";
-  version = "1.14.1";
+  version = "1.15.0";
 
   src = fetchFromCodeberg {
     owner = "dnkl";
     repo = "fuzzel";
     rev = finalAttrs.version;
-    hash = "sha256-VhUYNi0/NTrx84KxBgPP1bE2sN1HXqtayg4oY7BLZK4=";
+    hash = "sha256-krlBdIu/WhIep5YyhkGiq0csb/Z2bf6sQWTxqOP1j14=";
   };
 
   depsBuildBuild = [

pkgs/by-name/gi/git-bug/package.nix

@@ -1,30 +1,103 @@
 {
   lib,
   buildGoModule,
+  stdenvNoCC,
   fetchFromGitHub,
   gitMinimal,
   installShellFiles,
+  pnpm_10,
+  pnpmConfigHook,
+  pnpmBuildHook,
+  fetchPnpmDeps,
+  nodejs,
 }:
-
+let
+  pnpm = pnpm_10;
+in
 buildGoModule (finalAttrs: {
   pname = "git-bug";
-  version = "0.10.1";
+  version = "0.11.0";
+
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "git-bug";
     repo = "git-bug";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-iLYhVv6QMZStuNtxvvIylFSVb1zLfC58NU2QJChFfug=";
+    hash = "sha256-lyQy6P929SQcmXZ1GI+5MtXoYD0b0xr69X9/y+1xCUs=";
   };
 
-  vendorHash = "sha256-qztAkP+CHhryhfv1uKHEpDutofMwHGun7Vr30BHWAOE=";
+  webui = stdenvNoCC.mkDerivation {
+    inherit (finalAttrs) version src;
+    pname = "${finalAttrs.pname}-webui";
 
-  nativeBuildInputs = [ installShellFiles ];
+    pnpmDeps = fetchPnpmDeps {
+      inherit (finalAttrs)
+        pname
+        version
+        src
+        ;
+      inherit pnpm;
+
+      sourceRoot = "${finalAttrs.src.name}/webui";
+      fetcherVersion = 4;
+      hash = "sha256-CQC+VWv9HwEiDQlS7t03k8zkqQLMGG7sX8qL3boFlhQ=";
+    };
+
+    nativeBuildInputs = [
+      pnpm
+      nodejs
+      pnpmConfigHook
+      pnpmBuildHook
+    ];
+
+    pnpmRoot = "webui";
+
+    installPhase = ''
+      runHook preInstall
+
+      cp -r webui/ $out
+
+      runHook postInstall
+    '';
+  };
+
+  vendorHash = "sha256-TwAgpdlitF3O68wA+jyagifrLSRG7WCCZvJ1XJjP/pI=";
+
+  overrideModAttrs = _: {
+    # prevent `go mod vendor` from finding Go stuff in webui's node_modules
+    preBuild = "";
+  };
+
+  nativeBuildInputs = [
+    installShellFiles
+  ];
 
   nativeCheckInputs = [
     gitMinimal
   ];
 
+  excludedPackages = [
+    "./webui/node_modules"
+    "cmd"
+    "doc"
+    "completion"
+  ];
+
+  tags = [
+    "webui"
+  ];
+
+  ldflags = [
+    "-X main.version=${finalAttrs.version}"
+  ];
+
+  preBuild = ''
+    rm -rf webui
+    cp -r ${finalAttrs.webui} webui
+    CC="$CC_FOR_BUILD" LD="$CC_FOR_BUILD" GOOS= GOARCH= go generate
+  '';
+
   checkFlags =
     let
       integrationTests = [
@@ -40,16 +113,7 @@ buildGoModule (finalAttrs: {
       "-skip=^${lib.concatStringsSep "$|^" integrationTests}$"
     ];
 
-  excludedPackages = [
-    "doc"
-    "misc"
-  ];
-
-  ldflags = [
-    "-X github.com/git-bug/git-bug/commands.GitCommit=v${finalAttrs.version}"
-    "-X github.com/git-bug/git-bug/commands.GitLastTag=${finalAttrs.version}"
-    "-X github.com/git-bug/git-bug/commands.GitExactTag=${finalAttrs.version}"
-  ];
+  __darwinAllowLocalNetworking = true;
 
   postInstall = ''
     installShellCompletion \

pkgs/by-name/he/hermitcli/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "hermit";
-  version = "0.52.3";
+  version = "0.53.0";
 
   src = fetchFromGitHub {
     rev = "v${finalAttrs.version}";
     owner = "cashapp";
     repo = "hermit";
-    hash = "sha256-bcTj0JR2sAfTPBi5z0s2ZCWu16HYr51JD1qMhA8extE=";
+    hash = "sha256-yhKvRgrX4pN21kXUU0qZGnenVtWlT3tnsKWZ4Iu8wb0=";
   };
 
-  vendorHash = "sha256-+UIWiP+CvRJQhTS2hMWrb3gB8kEN6fa6xIaYBNUxHOs=";
+  vendorHash = "sha256-2sj1Tc+3icoOPKq1hcOxSjKarxQ7Vvvvx9iAWWrb3Xo=";
 
   subPackages = [ "cmd/hermit" ];
 

pkgs/by-name/hk/hk/package.nix

@@ -15,7 +15,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "hk";
-  version = "1.58.1";
+  version = "2.0.1";
 
   __structuredAttrs = true;
 
@@ -23,10 +23,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "jdx";
     repo = "hk";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-XSZy4dbKPDRkGc8BrVCz8H0STb64uJEoJBQ5lwiwsv4=";
+    hash = "sha256-Rfl4Ssps+2PUcwj01+srDFPjMq78ec4XWmhgMlbq7iM=";
   };
 
-  cargoHash = "sha256-WQ/ICFoRuZBEXGaLbScnwBv4s6AhdtgoUSxoYwmQT0c=";
+  cargoHash = "sha256-P6RV8R1hRPkBX0iAfNEiFAuVdcUfg3PpsZ1YB7s2B3E=";
 
   nativeBuildInputs = [
     installShellFiles

pkgs/by-name/im/immich-cli/package.nix

@@ -4,6 +4,7 @@
   jq,
   nodejs,
   makeWrapper,
+  runtimeShellPackage,
   stdenv,
   versionCheckHook,
   pnpmConfigHook,
@@ -12,6 +13,9 @@ stdenv.mkDerivation (finalAttrs: {
   pname = "immich-cli";
   inherit (immich) version src pnpmDeps;
 
+  __structuredAttrs = true;
+  strictDeps = true;
+
   nativeBuildInputs = [
     jq
     makeWrapper
@@ -20,6 +24,10 @@ stdenv.mkDerivation (finalAttrs: {
     immich.pnpm
   ];
 
+  buildInputs = [
+    runtimeShellPackage
+  ];
+
   buildPhase = ''
     runHook preBuild
 

pkgs/by-name/im/immich-kiosk/package.nix

@@ -1,6 +1,6 @@
 {
   lib,
-  buildGoModule,
+  buildGo127Module,
   fetchFromGitHub,
   nodejs,
   fetchNpmDeps,
@@ -8,30 +8,30 @@
   go-task,
 }:
 
-buildGoModule rec {
+buildGo127Module rec {
   pname = "immich-kiosk";
-  version = "0.42.0";
+  version = "0.44.1";
 
   src = fetchFromGitHub {
     owner = "damongolding";
     repo = "immich-kiosk";
     tag = "v${version}";
-    hash = "sha256-NgNVTVU7WlOBiaLXviTUYAq3PSLQuCKICP3rO/2U61Y=";
+    hash = "sha256-IJPJ5c6mlsvx3gDkzk3okTxWJENDv5Rsok3vO+rrwvI=";
   };
 
   postPatch = ''
     # Delete vendor directory to regenerate it consistently across platforms
     rm -rf vendor
     # immich-kiosk bumps go at a faster cadence than nixpkgs
-    sed -i -E 's/^go 1\.26\.[0-9]+$/go 1.26/' go.mod
+    sed -i -E 's/^go 1\.27\.[0-9]+$/go 1.27/' go.mod
   '';
-  vendorHash = "sha256-E+IS0/GxTpasiyKBj6oN9Jb3R4fzXZJ4v8bVkxlHWIk=";
+  vendorHash = "sha256-pAixcJ577ioezOn1qiSFCUYcMiOgNy+S2ZKT9wNy2Yg=";
   proxyVendor = true;
 
   npmDeps = fetchNpmDeps {
     inherit src;
     sourceRoot = "${src.name}/frontend";
-    hash = "sha256-Tebhu7qdn7DHTwEBeN2htZJuhYfPE15NyUskIxrfqls=";
+    hash = "sha256-mhqhc+imdMb/w1U3cZS55P3WEWKxPvfTe4CHPZSVoOs=";
   };
   # Frontend is in a subdirectory
   npmRoot = "frontend";

pkgs/by-name/im/immich-machine-learning/package.nix

@@ -16,6 +16,8 @@ python.pkgs.buildPythonApplication rec {
   src = "${immich.src}/machine-learning";
   pyproject = true;
 
+  __structuredAttrs = true;
+
   pythonRelaxDeps = [
     "onnx"
   ];

pkgs/by-name/im/immich/package.nix

@@ -33,6 +33,7 @@
   pango,
   perl,
   pixman,
+  runtimeShellPackage,
   vips,
   buildPackages,
 }:
@@ -111,6 +112,9 @@ stdenv.mkDerivation (finalAttrs: {
   pname = "immich";
   version = "3.2.2";
 
+  __structuredAttrs = true;
+  strictDeps = true;
+
   src = fetchFromGitHub {
     owner = "immich-app";
     repo = "immich";
@@ -157,6 +161,8 @@ stdenv.mkDerivation (finalAttrs: {
     pixman
     # Required for sharp
     vips
+    # Required for some packages in node_modules
+    runtimeShellPackage
   ];
 
   env.SHARP_FORCE_GLOBAL_LIBVIPS = 1;

pkgs/by-name/in/incus/package.nix

@@ -1,7 +1,7 @@
 import ./generic.nix {
-  hash = "sha256-9q4YrumeCb8u0O6e0Ftisb33s2dz/DOdUO3JD05W8K0=";
-  version = "7.4.0";
-  vendorHash = "sha256-zplmn+JH/zEaQgo2xa5wzc6rCIb5tLIVlM1vYJpw9zQ=";
+  hash = "sha256-Kqz1fF/0jvqOtYqYSPI37M5vmqNrpfdZx2isbLcJTJg=";
+  version = "7.5.1";
+  vendorHash = "sha256-erg2ull2Dvw4lXIcjDyS/HVObqYUIh7k4GUsTJ61giY=";
   patches = fetchpatch2: [ ];
   nixUpdateExtraArgs = [
     "--override-filename=pkgs/by-name/in/incus/package.nix"

pkgs/by-name/in/intellij-idea-oss/package.nix

@@ -18,7 +18,7 @@ let
     androidHash = "sha256-uvoDTv/7RlyxRp1d9v2tN9IJkv9d1QEkZpp23hae84k=";
     jpsHash = "sha256-iHpt926BDLNUwHRXvkqVgwlWiLo1qSZEaGeJcS0Fjmk=";
     restarterHash = "sha256-acCmC58URd6p9uKZrm0qWgdZkqu9yqCs23v8qgxV2Ag=";
-    mvnDeps = ../source/idea_maven_artefacts.json;
+    mvnDeps = ./maven_artefacts.json;
     repositories = [
       "repo1.maven.org/maven2"
       "packages.jetbrains.team/maven/p/ij/intellij-dependencies"
@@ -50,7 +50,7 @@ jetbrains.mkJetBrainsProduct {
   # the jdk is bundled on Darwin.
   jdk = if lib.meta.availableOn stdenv.hostPlatform jetbrains.jdk then jetbrains.jdk else null;
 
-  pname = "idea-oss";
+  pname = "intellij-idea-oss";
 
   wmClass = "jetbrains-idea-ce";
   product = "IntelliJ IDEA Open Source";

pkgs/by-name/in/intellij-idea/package.nix

@@ -17,16 +17,16 @@ let
   # update-script-start: urls
   urls = {
     x86_64-linux = {
-      url = "https://download.jetbrains.com/idea/ideaIU-2026.2.2.tar.gz";
-      hash = "sha256-8cxTKaet86s72IhnRBA/fTvPHKEuaZdi7Nm//lczX4s=";
+      url = "https://download.jetbrains.com/idea/ideaIU-2026.2.3.tar.gz";
+      hash = "sha256-aHUciuTUlAclHNGX33lfvtkbb9yF0QxzxGSameSWqzc=";
     };
     aarch64-linux = {
-      url = "https://download.jetbrains.com/idea/ideaIU-2026.2.2-aarch64.tar.gz";
-      hash = "sha256-BLq6b7EDSuv7+G6LVRhsgYuT27vhMQEpdXGP9/cHQPU=";
+      url = "https://download.jetbrains.com/idea/ideaIU-2026.2.3-aarch64.tar.gz";
+      hash = "sha256-hzKG3WQGlxojEYJ+3WbFYGDDRVgqSmsXdOOSUYOwLsU=";
     };
     aarch64-darwin = {
-      url = "https://download.jetbrains.com/idea/ideaIU-2026.2.2-aarch64.dmg";
-      hash = "sha256-9KRfRRAIyGzk6TQtWTH9ichVP506tugBLadTPp/lwkk=";
+      url = "https://download.jetbrains.com/idea/ideaIU-2026.2.3-aarch64.dmg";
+      hash = "sha256-qsPNxthEG5QFJHP+43qWeSQqNvSfYP3ObM6qPnrUbjM=";
     };
   };
   # update-script-end: urls
@@ -34,15 +34,15 @@ in
 jetbrains.mkJetBrainsProduct {
   inherit jetbrains-libdbm fsnotifier;
 
-  pname = "idea";
+  pname = "intellij-idea";
 
   wmClass = "jetbrains-idea";
   product = "IntelliJ IDEA";
   productShort = "IDEA";
 
   # update-script-start: version
-  version = "2026.2.2";
-  buildNumber = "262.10315.125";
+  version = "2026.2.3";
+  buildNumber = "262.10968.63";
   # update-script-end: version
 
   src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));

pkgs/by-name/je/jellyfin-tui/package.nix

@@ -13,16 +13,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "jellyfin-tui";
-  version = "1.5.2";
+  version = "1.6.0";
 
   src = fetchFromGitHub {
     owner = "dhonus";
     repo = "jellyfin-tui";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ZdcAPN+APEnkQbPdLpcQd/fdQnEP6peQ+xdZI5sskSM=";
+    hash = "sha256-+ACqw95a761H6ye8dwZDhKIUQbAy80n+43wLysYgr8k=";
   };
 
-  cargoHash = "sha256-mri4PhYcUTWWKLl39sDhLUsFQFGLUAvDlhKNcj9gTFU=";
+  cargoHash = "sha256-ZY/wBrziKoYkY+uGdxK/JTWpQmvT3xORf9U4Fhx1Jwo=";
 
   nativeBuildInputs = [ pkg-config ];
   buildInputs = [

pkgs/by-name/ko/komari-agent/package.nix

@@ -7,13 +7,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "komari-agent";
-  version = "1.2.60";
+  version = "1.5.11";
 
   src = fetchFromGitHub {
     owner = "komari-monitor";
     repo = "komari-agent";
     tag = finalAttrs.version;
-    hash = "sha256-SsM/RbwdWmKty+6ueL4J9auKcPkRMNX59Imko3oPOiQ=";
+    hash = "sha256-1jemWrMcdJ4RIhcRyxmFahLQZ34Q1QSQLgO6BoHhOGw=";
   };
 
   vendorHash = "sha256-teKx9u7M2ZQdd7G3xSCqhwjcHRzBzKeBViSl62TRg+g=";

pkgs/by-name/la/lazysql/package.nix

@@ -11,16 +11,16 @@
 
 buildGoModule rec {
   pname = "lazysql";
-  version = "0.5.7";
+  version = "0.5.9";
 
   src = fetchFromGitHub {
     owner = "jorgerojas26";
     repo = "lazysql";
     rev = "v${version}";
-    hash = "sha256-5JGSpA4tAV6/f9y58PfjGOamxRYyCKKZXecRzpvq4E0=";
+    hash = "sha256-A9arRNJXJGbb1xuSknTVhNNe+KGxFdtv4Qhpe9stRF8=";
   };
 
-  vendorHash = "sha256-FyvPTqvlNtU3Yud5Pq9CRLG0xg4LIXb9CDEBvigGow8=";
+  vendorHash = "sha256-g2gXH0PzleT77ycLosflk7gyHL59mFtDD/6ImWtGg7o=";
 
   ldflags = [
     "-X main.version=${version}"

pkgs/by-name/li/libcava/package.nix

@@ -1,4 +1,5 @@
 {
+  lib,
   cava,
   fetchFromGitHub,
   nix-update-script,
@@ -8,13 +9,13 @@
 cava.overrideAttrs (old: rec {
   pname = "libcava";
   # fork may not be updated when we update upstream
-  version = "0.10.7";
+  version = "1.0.0";
 
   src = fetchFromGitHub {
     owner = "LukashonakV";
     repo = "cava";
     tag = version;
-    hash = "sha256-zkyj1vBzHtoypX4Bxdh1Vmwh967DKKxN751v79hzmgQ=";
+    hash = "sha256-0r5aAmTs+FcmS501tNYKxG9H+Pq6i32BDRBEjWW6M74=";
   };
 
   nativeBuildInputs = old.nativeBuildInputs ++ [
@@ -34,5 +35,6 @@ cava.overrideAttrs (old: rec {
   meta = old.meta // {
     homepage = "https://github.com/LukashonakV/cava";
     description = "Fork of CAVA to build it as a shared library";
+    maintainers = old.meta.maintainers ++ [ lib.maintainers.PerchunPak ];
   };
 })

pkgs/by-name/li/libfprint/package.nix

@@ -95,6 +95,6 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Library designed to make it easy to add support for consumer fingerprint readers";
     license = lib.licenses.lgpl21Only;
     platforms = lib.platforms.linux;
-    maintainers = [ ];
+    teams = [ lib.teams.freedesktop ];
   };
 })

pkgs/by-name/li/libglvnd/package.nix

@@ -112,6 +112,6 @@ stdenv.mkDerivation (finalAttrs: {
     platforms = lib.platforms.unix;
     # https://gitlab.freedesktop.org/glvnd/libglvnd/-/issues/212
     badPlatforms = [ lib.systems.inspect.platformPatterns.isStatic ];
-    maintainers = [ ];
+    teams = [ lib.teams.freedesktop ];
   };
 })

pkgs/by-name/li/libslirp/package.nix

@@ -39,7 +39,7 @@ stdenv.mkDerivation (finalAttrs: {
     description = "General purpose TCP-IP emulator";
     homepage = "https://gitlab.freedesktop.org/slirp/libslirp";
     license = lib.licenses.bsd3;
-    maintainers = [ ];
     platforms = lib.platforms.unix;
+    teams = [ lib.teams.freedesktop ];
   };
 })

pkgs/by-name/ma/manifold/package.nix

@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "manifold";
-  version = "3.5.3";
+  version = "3.5.4";
 
   src = fetchFromGitHub {
     owner = "elalish";
     repo = "manifold";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-slJDQ1yiveQiLeLAbsToWfRvRkPHNjUpCbVjTB0YR+4=";
+    hash = "sha256-O9ciIM5so9WiooNw3BfLTg6u7KPTV0vTbWVec/y0crQ=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/ma/matrix-authentication-service/package.nix

@@ -23,22 +23,29 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "matrix-authentication-service";
-  version = "1.24.0";
+  version = "1.25.1";
 
   src = fetchFromGitHub {
     owner = "element-hq";
     repo = "matrix-authentication-service";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-LWGnfM7os9GT6fa/Vk1wAEp9m1L5rEL7tSPmgEKMNfQ=";
+    hash = "sha256-crgPUarH69AEbrRtBBHg4CeYXdSupxeEcjgh17bCdIk=";
   };
 
-  cargoHash = "sha256-jAJuRwhc+0IAikLyqctHuCQcS61iNj7iKWHJdRAqsAk=";
+  patches = [ ./remove-runtime.patch ];
+
+  cargoHash = "sha256-Y7IlfHRkn5a5+IOa0R1OA3sDVF+5NxiYsZnREWYNAyo=";
 
   pnpmDeps = fetchPnpmDeps {
-    inherit (finalAttrs) pname version src;
+    inherit (finalAttrs)
+      pname
+      version
+      src
+      patches
+      ;
     inherit pnpm;
     fetcherVersion = 4;
-    hash = "sha256-DxEjMhYqZGbnobQ/F0WFXq7qaxSkWDcoZ0kmWJsdxEQ=";
+    hash = "sha256-nF0e88a4SJtZOZAc62sGp192GjM/gJJ7r5NbrCgJ1es=";
   };
 
   pnpmRoot = "frontend";

pkgs/by-name/ma/matrix-authentication-service/remove-runtime.patch

@@ -0,0 +1,25 @@
+diff --git a/package.json b/package.json
+--- a/package.json
++++ b/package.json
+@@ -5,8 +5 @@
+-  "devEngines": {
+-    "runtime": {
+-      "name": "node",
+-      "version": "24.15.0",
+-      "onFail": "download"
+-    }
+-  },
+   "devDependencies": {
+diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
+--- a/pnpm-lock.yaml
++++ b/pnpm-lock.yaml
+@@ -14,9 +14,6 @@ importers:
+       '@localazy/cli':
+         specifier: ^2.0.11
+         version: 2.0.11
+-      node:
+-        specifier: runtime:24.15.0
+-        version: runtime:24.15.0
+       semver:
+         specifier: ^7.8.5
+         version: 7.8.5

pkgs/by-name/na/navidrome/package.nix

@@ -20,16 +20,16 @@
 
 buildGo127Module (finalAttrs: {
   pname = "navidrome";
-  version = "0.64.1";
+  version = "0.64.2";
 
   src = fetchFromGitHub {
     owner = "navidrome";
     repo = "navidrome";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-zjg5JwpzcDe8LFvF/soE4IrsdpkNpO7psAoQrHlKCVI=";
+    hash = "sha256-6667wi23YSPdF/LL5k7VmYEAM5rxQYjqlvAtg5vJzj4=";
   };
 
-  vendorHash = "sha256-vndJx4BcXQCJewKCv3TvSrxG6sCykfBvkOQK/kVQIPk=";
+  vendorHash = "sha256-/3NhF/OHDxWrciN5GdROiO1yhjjdm5F5ntW7h6tzFGc=";
 
   npmRoot = "ui";
 

pkgs/by-name/ne/neatvnc/package.nix

@@ -20,13 +20,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "neatvnc";
-  version = "1.0.1";
+  version = "1.0.2";
 
   src = fetchFromGitHub {
     owner = "any1";
     repo = "neatvnc";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-ZQdx3NvoFh+lubF1tglYBeEBb4XpD5I1mN3ufibD+uA=";
+    hash = "sha256-nXb8ETCWjpRgpDmgJxLdjJun2S6xXGgbOslJleHi/Do=";
   };
 
   strictDeps = true;

pkgs/by-name/ne/netbox/plugins/netbox-fms/package.nix

@@ -0,0 +1,44 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  netbox,
+  python,
+}:
+buildPythonPackage (finalAttrs: {
+  pname = "netbox-fms";
+  version = "0.3.0";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "jsenecal";
+    repo = "netbox-fms";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-5RPcJFxwQYJWUipHU05gp7zovWPnviWHlkqCHEs16tw=";
+  };
+
+  build-system = [ setuptools ];
+
+  nativeCheckInputs = [ netbox ];
+
+  preFixup = ''
+    export PYTHONPATH=${netbox}/opt/netbox/netbox:$PYTHONPATH
+  '';
+
+  dontUsePythonImportsCheck = python.pythonVersion != netbox.python.pythonVersion;
+
+  pythonImportsCheck = [ "netbox_fms" ];
+
+  passthru.pluginName = "netbox_fms";
+
+  meta = {
+    description = "NetBox plugin for Fiber Management System: fiber cable management, splice planning, and circuit provisioning";
+    homepage = "https://jsenecal.github.io/netbox-fms/";
+    changelog = "https://jsenecal.github.io/netbox-fms/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.agpl3Only;
+    maintainers = with lib.maintainers; [ felbinger ];
+    platforms = lib.platforms.linux;
+  };
+})

pkgs/by-name/ne/netbox/plugins/netbox-wdm/package.nix

@@ -0,0 +1,43 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  netbox,
+  python,
+}:
+buildPythonPackage (finalAttrs: {
+  pname = "netbox-wdm";
+  version = "0.2.2";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "jsenecal";
+    repo = "netbox-wdm";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-wSW9nLqUIt+L4f8wlqX+Ox7rLnlqzRfQKpf44k+PhKE=";
+  };
+
+  build-system = [ setuptools ];
+
+  nativeCheckInputs = [ netbox ];
+
+  preFixup = ''
+    export PYTHONPATH=${netbox}/opt/netbox/netbox:$PYTHONPATH
+  '';
+
+  dontUsePythonImportsCheck = python.pythonVersion != netbox.python.pythonVersion;
+
+  pythonImportsCheck = [ "netbox_wdm" ];
+
+  passthru.pluginName = "netbox_wdm";
+
+  meta = {
+    description = "NetBox plugin for WDM wavelength management, ITU channel plans, ROADM editing, and wavelength service tracking";
+    homepage = "https://jsenecal.github.io/netbox-wdm/";
+    license = lib.licenses.agpl3Only;
+    maintainers = with lib.maintainers; [ felbinger ];
+    platforms = lib.platforms.linux;
+  };
+})

pkgs/by-name/ni/ninjabrain-bot/package.nix

@@ -65,6 +65,7 @@ maven.buildMavenPackage (finalAttrs: {
     makeWrapperArgs=(
       --add-flags "-Dawt.useSystemAAFontSettings=on"
       --add-flags "-Dswing.aatext=true"
+      --add-flags "-Dswing.defaultlaf=javax.swing.plaf.metal.MetalLookAndFeel"
       --add-flags "-jar $out/share/java/ninjabrain-bot.jar"
     )
 

pkgs/by-name/om/omegat/package.nix

@@ -8,13 +8,13 @@
 }:
 
 stdenv.mkDerivation {
-  version = "6.0.1";
+  version = "6.1.1";
   pname = "omegat";
 
   src = fetchurl {
     # their zip has repeated files or something, so no fetchzip
-    url = "mirror://sourceforge/project/omegat/OmegaT%20-%20Standard/OmegaT%206.0.1/OmegaT_6.0.1_Without_JRE.zip";
-    sha256 = "sha256-Rj50bzT8k7+GWb0p/ma+zy+PzkF7tB6iV4F4UVAImJg=";
+    url = "mirror://sourceforge/project/omegat/OmegaT%20-%20Standard/OmegaT%206.1.1/OmegaT_6.1.1_Without_JRE.zip";
+    sha256 = "sha256-apnR+GeHs+ySARtH2LvYR9hfRuznC0xqrWN8WOtq9uk=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/or/orbiton/package.nix

@@ -12,13 +12,13 @@
 
 buildGoModule rec {
   pname = "orbiton";
-  version = "2.74.4";
+  version = "2.74.5";
 
   src = fetchFromGitHub {
     owner = "xyproto";
     repo = "orbiton";
     tag = "v${version}";
-    hash = "sha256-LwwHwi1NyKqyzJou4sh+gM2NxNdYvpBN2Zx8SIOHX40=";
+    hash = "sha256-kR73i/0YHn8Kwu/5tkLm9/xBlU3Z1CVNayMiZ+qNp/A=";
   };
 
   vendorHash = null;

pkgs/by-name/p2/p2pool/package.nix

@@ -16,13 +16,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "p2pool";
-  version = "4.18";
+  version = "4.18.1";
 
   src = fetchFromGitHub {
     owner = "SChernykh";
     repo = "p2pool";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-nmh6XY7fP/qddzVyb1yiJ5dcOxZctCjodi5uf3M3NfM=";
+    hash = "sha256-4YMcQS+94seDI0abUGmNalhqA+08Gu5VYuxKYokbVuQ=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/pi/pihole-ftl/package.nix

@@ -18,13 +18,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "pihole-ftl";
-  version = "6.7";
+  version = "6.7.1";
 
   src = fetchFromGitHub {
     owner = "pi-hole";
     repo = "FTL";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-vViQ9ZAhajIfCQvOtKjMO2wj8CRt/1h/dzHHFevbbFU=";
+    hash = "sha256-TP4HFgZKAbrLaMeIkY4MKAAs86cAALXbgPwd8oc0BrA=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/po/porxie/package.nix

@@ -11,15 +11,15 @@ rustPlatform.buildRustPackage (finalAttrs: {
   __structuredAttrs = true;
 
   pname = "porxie";
-  version = "0.3.4";
+  version = "0.3.5";
 
   src = fetchFromCodeberg {
     owner = "Blooym";
     repo = "porxie";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-jj8NLmaYVVBNpojq3cTuNXYEgBAxQ6wcPH2sLSB5cbo=";
+    hash = "sha256-q1nb4JVmqGQ2HcjoQBZTymKmWInS80EFxrSo2IzwqVc=";
   };
-  cargoHash = "sha256-ZXNbZtqMayiVc7BOmmeRyN/Z5pKJRHJmgclaCLyVhYc=";
+  cargoHash = "sha256-WrxG3GaAwVb/2Za+ExSt12POSGZUyPfXZAgPYyZb6rA=";
 
   buildInputs = [ rust-jemalloc-sys ];
 

pkgs/by-name/pr/proxmark3/package.nix

@@ -30,13 +30,13 @@
 assert withBlueshark -> stdenv.hostPlatform.isLinux;
 stdenv.mkDerivation (finalAttrs: {
   pname = "proxmark3";
-  version = "4.21128";
+  version = "4.23346";
 
   src = fetchFromGitHub {
     owner = "RfidResearchGroup";
     repo = "proxmark3";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-KlSYbYEdLVsQCbRilqolGewH5ra9QXOHVgYk34aCous=";
+    hash = "sha256-/YQHqy/GBHoa0yLQsPlUIPlAI+CNNuXaMYFmnYYDURU=";
   };
 
   postPatch = ''

pkgs/by-name/py/pycharm-oss/package.nix

@@ -17,7 +17,7 @@ let
     androidHash = "sha256-FA/6ry1M7+RISJL+2SR9QkDvAGJAkXhFMh9YoOEU5nk=";
     jpsHash = "sha256-iHpt926BDLNUwHRXvkqVgwlWiLo1qSZEaGeJcS0Fjmk=";
     restarterHash = "sha256-acCmC58URd6p9uKZrm0qWgdZkqu9yqCs23v8qgxV2Ag=";
-    mvnDeps = ../source/pycharm_maven_artefacts.json;
+    mvnDeps = ./maven_artefacts.json;
     repositories = [
       "repo1.maven.org/maven2"
       "packages.jetbrains.team/maven/p/ij/intellij-dependencies"

pkgs/by-name/re/redis/package.nix

@@ -27,13 +27,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "redis";
-  version = "8.10.1";
+  version = "8.10.2";
 
   src = fetchFromGitHub {
     owner = "redis";
     repo = "redis";
     tag = finalAttrs.version;
-    hash = "sha256-fGLuOuiM3VHj70qlSpb2s25RYD8gFARrqwAhW6CIHXE=";
+    hash = "sha256-lje8tQPxIgOt8xOlSySmD2ZNcLOvIGIQMbdmQiFrj1k=";
   };
 
   patches = [

pkgs/by-name/ri/riot-redis/package.nix

@@ -1,44 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchzip,
-  jre_headless,
-  makeWrapper,
-}:
-
-stdenv.mkDerivation (finalAttrs: {
-  pname = "riot-redis";
-  version = "2.19.0";
-
-  src = fetchzip {
-    url = "https://github.com/redis-developer/riot/releases/download/v${finalAttrs.version}/riot-redis-${finalAttrs.version}.zip";
-    sha256 = "sha256-q2ZqFVdjg5HSH4kiwoC1W+a8VgHNxBgNeMaw5n97isc=";
-  };
-
-  buildInputs = [ jre_headless ];
-  nativeBuildInputs = [ makeWrapper ];
-
-  installPhase = ''
-    runHook preInstall
-
-    mkdir -p $out/bin
-    cp bin/riot-redis $out/bin
-    cp -R lib $out
-    chmod +x $out/bin/*
-
-    wrapProgram $out/bin/riot-redis \
-      --set JAVA_HOME "${jre_headless}"
-
-    runHook postInstall
-  '';
-
-  meta = {
-    homepage = "https://github.com/redis-developer/riot";
-    description = "Get data in and out of Redis";
-    mainProgram = "riot-redis";
-    license = lib.licenses.asl20;
-    sourceProvenance = with lib.sourceTypes; [ binaryBytecode ];
-    maintainers = with lib.maintainers; [ wesnel ];
-    teams = [ lib.teams.redis ];
-  };
-})

pkgs/by-name/ri/riotx/package.nix

@@ -0,0 +1,68 @@
+{
+  coreutils,
+  fetchzip,
+  findutils,
+  gnused,
+  installShellFiles,
+  jre_headless,
+  lib,
+  makeWrapper,
+  stdenv,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "riotx";
+  version = "1.15.0";
+
+  src = fetchzip {
+    url = "https://github.com/redis/riotx-dist/releases/download/v${finalAttrs.version}/riotx-${finalAttrs.version}.zip";
+    hash = "sha256-CozuLIkWrRX/b8a+LvEF3r/CwO8JnmLzTsxy5USIU9U=";
+  };
+
+  nativeBuildInputs = [
+    installShellFiles
+    makeWrapper
+  ];
+
+  buildInputs = [ jre_headless ];
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/bin
+    cp bin/riotx $out/bin
+    cp -r lib $out
+
+    wrapProgram $out/bin/riotx \
+      --set JAVA_HOME "${jre_headless}" \
+      --set PATH ${
+        lib.makeBinPath [
+          coreutils
+          findutils
+          gnused
+        ]
+      }
+
+    runHook postInstall
+  '';
+
+  postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
+    installShellCompletion --cmd riotx \
+        --bash <($out/bin/riotx generate-completion bash) \
+        --zsh <($out/bin/riotx generate-completion zsh)
+  '';
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = {
+    changelog = "https://github.com/redis/riotx-dist/releases/tag/v${finalAttrs.version}";
+    description = "Data integration tool for Redis Cloud and Redis Software";
+    homepage = "https://redis.github.io/riotx";
+    license = lib.licenses.unfree;
+    mainProgram = "riotx";
+    platforms = lib.platforms.unix;
+    sourceProvenance = with lib.sourceTypes; [ binaryBytecode ];
+    teams = [ lib.teams.redis ];
+  };
+})

pkgs/by-name/rm/rmapi/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "rmapi";
-  version = "0.0.34";
+  version = "0.0.35";
 
   src = fetchFromGitHub {
     owner = "ddvk";
     repo = "rmapi";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-g7KFLa+VBkubzdrgMFDVvAuscw41nyfHd7DWvh3S+NU=";
+    sha256 = "sha256-mRJH0fQ8e4igR7IwcJdvUhrZDXvpTt/Dac7Pc9p7ITw=";
   };
 
   vendorHash = "sha256-Qisfw+lCFZns13jRe9NskCaCKVj5bV1CV8WPpGBhKFc=";

pkgs/by-name/ro/rofimoji/package.nix

@@ -16,14 +16,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "rofimoji";
-  version = "6.8.0";
+  version = "6.9.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "fdw";
     repo = "rofimoji";
     tag = finalAttrs.version;
-    hash = "sha256-KOWj/u5JxgHiUf/hPBu+PfPgSRd/HVivU3F8oWqzIv4=";
+    hash = "sha256-NmMJL08FMrSlKcmyuX6qeRILmqk5++C5WUwIiJiHcdI=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/rs/rsop/package.nix

@@ -11,16 +11,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rsop";
-  version = "0.11.0";
+  version = "0.11.3";
 
   src = fetchFromCodeberg {
     owner = "heiko";
     repo = "rsop";
     rev = "rsop/v${finalAttrs.version}";
-    hash = "sha256-vZW4L3hm2vRRoLcxU631jiNrbk+w0hDaL4VXIrtP2aY=";
+    hash = "sha256-RqrHJuqgO+m6bWjDcjDaiAgnIJoyUEPxGG/VWQOc8KM=";
   };
 
-  cargoHash = "sha256-qrurMKwSs0w2D6KPto7tpsuLGuAJ9drKhdmIAbEaD9M=";
+  cargoHash = "sha256-mWjPIsir3h/OOHqAaEd64s+2CrowlmXpNa9U9LGKpuA=";
 
   nativeBuildInputs = [ pkg-config ];
 

pkgs/by-name/rs/rssguard/package.nix

@@ -33,6 +33,10 @@ stdenv.mkDerivation (finalAttrs: {
     qt6.wrapQtAppsHook
   ];
 
+  # This string must have quotes around Release or the package will break!
+  # See https://github.com/NixOS/nixpkgs/issues/563621
+  cmakeBuildType = "\"Release\"";
+
   dontWrapGApps = true;
 
   preFixup = ''

pkgs/by-name/rt/rt/package.nix

@@ -4,7 +4,6 @@
   autoreconfHook,
   buildEnv,
   fetchFromGitHub,
-  fetchpatch,
   perl,
   perlPackages,
   makeWrapper,
@@ -14,24 +13,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rt";
-  version = "5.0.8";
+  version = "6.0.3";
 
   src = fetchFromGitHub {
     repo = "rt";
     rev = "rt-${finalAttrs.version}";
     owner = "bestpractical";
-    hash = "sha256-4/iC1PjLgLAp7XWTafe8HW3bTkDWWQxtSEIOs8wluzE=";
+    hash = "sha256-wmYBeHb/aGKzbDD7mbSMpz0eEZHRq+Jr5+hDK0Hl9+s=";
   };
 
   patches = [
     ./dont-check-users_groups.patch # needed for "make testdeps" to work in the build
     ./override-generated.patch
-    # Fix "Wide character in subroutine entry" crash on every request
-    # merged upstream
-    (fetchpatch {
-      url = "https://github.com/bestpractical/rt/commit/f8f03dd6e69dfbf4eb71e3ded0f793af4721a06d.patch";
-      hash = "sha256-Mk8ve8n5tgyyHT7RAt2o+QnUlcYNOu95lNjku6VgXS0=";
-    })
   ];
 
   nativeBuildInputs = [
@@ -50,6 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
           BusinessHours
           CGIEmulatePSGI
           CGIPSGI
+          CSSInliner
           CSSMinifierXS
           CSSSquish
           ConvertColor
@@ -65,6 +59,7 @@ stdenv.mkDerivation (finalAttrs: {
           DateExtract
           DateManip
           DateTimeFormatNatural
+          DateTimeSet
           DevelGlobalDestruction
           EmailAddress
           EmailAddressList
@@ -78,6 +73,8 @@ stdenv.mkDerivation (finalAttrs: {
           GDGraph
           GnuPGInterface
           GraphViz2
+          HashMerge
+          HashMergeExtra
           HTMLFormatExternal
           HTMLFormatTextWithLinks
           HTMLFormatTextWithLinksAndTables
@@ -87,6 +84,7 @@ stdenv.mkDerivation (finalAttrs: {
           HTMLQuoted
           HTMLRewriteAttributes
           HTMLScrubber
+          Imager
           IPCRun
           IPCRun3
           JSON

pkgs/by-name/sd/SDL_mixer/package.nix

@@ -8,6 +8,7 @@
   libvorbis,
   pkg-config,
   libmpg123,
+  libmikmod,
   flac,
   autoreconfHook,
   stdenv,
@@ -34,12 +35,20 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-FwDwUPLzuOlokKP91w8dF/BJPG2rFIlgn5kR6Tka0ws=";
   };
 
+  # Upstream does an okay job bumping these vendor dependencies, and we don't use them in nix anyways.
+  # However, we want to be sure to not accidentally use these,
+  # e.g. with automatic feature detection, so just remove them.
+  postPatch = ''
+    rm -rf external/*
+  '';
+
   nativeBuildInputs = [
     pkg-config
     # upstream configure is pre-built expecting FHS compliance:
     # ./configure: line 5346: /usr/bin/file: No such file or directory
     autoreconfHook
     SDL # for sdl.m4
+    libmikmod # for libmikmod-config
   ];
 
   buildInputs = [
@@ -50,6 +59,7 @@ stdenv.mkDerivation (finalAttrs: {
     libvorbis
     libmpg123
     flac
+    libmikmod
   ];
 
   configureFlags = [

pkgs/by-name/sk/sketchybar-app-font/package.nix

@@ -10,13 +10,13 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "sketchybar-app-font";
-  version = "2.0.86";
+  version = "3.0.1";
 
   src = fetchFromGitHub {
     owner = "kvndrsslr";
     repo = "sketchybar-app-font";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-H1QPAhhODBjE+rK1FhrtK/oyMtmhHYYHHQUd+10QK7A=";
+    hash = "sha256-fKo44hqg94d8WjN3RyzP/HIjuWDvtR8KFFtTQVDw68s=";
   };
 
   pnpmDeps = fetchPnpmDeps {

pkgs/by-name/sp/speechd/package.nix

@@ -33,6 +33,7 @@
   withPico ? true,
   picotts,
   libsOnly ? false,
+  nixosTests,
 }:
 
 let
@@ -152,6 +153,8 @@ stdenv.mkDerivation (finalAttrs: {
 
   enableParallelBuilding = true;
 
+  passthru.tests.nixos = nixosTests.speechd;
+
   meta = {
     description =
       "Common interface to speech synthesis" + lib.optionalString libsOnly " - client libraries only";

pkgs/by-name/ss/sshwifty/package.nix

@@ -13,13 +13,13 @@
 # so let's build using the latest Go available in nixpkgs.
 buildGoLatestModule (finalAttrs: {
   pname = "sshwifty";
-  version = "0.4.10-beta-release";
+  version = "0.4.11-beta-release";
 
   src = fetchFromGitHub {
     owner = "nirui";
     repo = "sshwifty";
     tag = finalAttrs.version;
-    hash = "sha256-6Yxwz4AXyUKz9FredI3c1HpjptaV2X0iXY+z8Lev1xg=";
+    hash = "sha256-Vb2G7zV6RrAgwpxpnbEVwo1TRatlilHgH1g19uVwAKs=";
   };
 
   nativeBuildInputs = [
@@ -34,10 +34,10 @@ buildGoLatestModule (finalAttrs: {
 
   npmDeps = fetchNpmDeps {
     inherit (finalAttrs) src;
-    hash = "sha256-GYcqCYQ/l21q1vvIkl9np+1ko5woD004OFXiW4jSkZc=";
+    hash = "sha256-NnRQStZooSS87GyeRc7gls/9EMPdndr/OkHFFHt46HQ=";
   };
 
-  vendorHash = "sha256-O3oEbTGJWWWTQSadctcBy0lpNzovw7SCT9/7moJOs0g=";
+  vendorHash = "sha256-C60bf9QjY/37zSjSfwhBgtN2lqd4d8TBJqZYtBOCHug=";
 
   preBuild = ''
     # Generate static pages

pkgs/by-name/st/starc/package.nix

@@ -6,11 +6,11 @@
 }:
 appimageTools.wrapType2 (finalAttrs: {
   pname = "starc";
-  version = "0.8.2";
+  version = "0.8.3";
 
   src = fetchurl {
     url = "https://github.com/story-apps/starc/releases/download/v${finalAttrs.version}/starc-setup.AppImage";
-    hash = "sha256-7uwc4gD+AlbYGMffaWj3v2Zt2x6P5edPXY3BsznBNdQ=";
+    hash = "sha256-ZNd69E70yTFOQGBAZuOJqKlzGS+0xSsAP2uh1EWb6B8=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

pkgs/by-name/st/stash-clipboard/package.nix

@@ -7,16 +7,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "stash-clipboard";
-  version = "0.5.1";
+  version = "0.5.2";
 
   src = fetchFromGitHub {
     owner = "NotAShelf";
     repo = "stash";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-vB3fyaq8ca+y0ct0RQhFTZAVG/vgYXOd9kPocky/wmM=";
+    hash = "sha256-HnKYO6TSX3RNkC2DDBgb6brX8bFrKw4kg0RBwZXZMDI=";
   };
 
-  cargoHash = "sha256-m5ra/XCWogrY3edfQfrvKFHKP7mEWWRNJPYC/phPeDA=";
+  cargoHash = "sha256-PP/jh6AJPmjg93zSN0E8QLE+bN77edAV/dHxdtPy9+4=";
 
   __structuredAttrs = true;
 

pkgs/by-name/t3/t3code/unwrapped.nix

@@ -1,7 +1,7 @@
 {
   cctools,
   copyDesktopItems,
-  electron_43,
+  electron_44,
   fetchFromGitHub,
   installShellFiles,
   lib,
@@ -14,6 +14,7 @@
   nodejs,
   pkg-config,
   python3,
+  spdx-license-list-data,
   stdenv,
   writeDarwinBundle,
   xcbuild,
@@ -28,7 +29,7 @@ stdenv.mkDerivation (
   finalAttrs:
   let
     appName = "T3 Code (Alpha)";
-    electron = electron_43;
+    electron = electron_44;
     pnpm = pnpm_11;
     desktopIcon =
       if stdenv.hostPlatform.isDarwin then
@@ -39,7 +40,7 @@ stdenv.mkDerivation (
   in
   {
     pname = "t3code-unwrapped";
-    version = "0.0.40";
+    version = "0.0.42";
     strictDeps = true;
     __structuredAttrs = true;
 
@@ -47,13 +48,17 @@ stdenv.mkDerivation (
       owner = "pingdotgg";
       repo = "t3code";
       tag = "v${finalAttrs.version}";
-      hash = "sha256-J8kXpfMfm03/DDAiWXJuANwUNDshhiUn7Lf9tV42Xfw=";
+      hash = "sha256-YV86WqqpGQwjeovXB0IoE3f/o4IUC5DDVdBEdT4xzjc=";
     };
 
     postPatch = ''
       substituteInPlace apps/web/vite.config.ts \
         --replace-fail 'const host = explicitHost || "localhost";' \
                        'const host = explicitHost || "127.0.0.1";'
+
+      mkdir -p .generated/third-party-licenses/spdx/v3.28.0
+      cp ${spdx-license-list-data.json}/json/details/*.json \
+        .generated/third-party-licenses/spdx/v3.28.0
     '';
 
     nativeBuildInputs = [
@@ -100,7 +105,7 @@ stdenv.mkDerivation (
         ;
 
       fetcherVersion = 4;
-      hash = "sha256-+UsoURSM4VP+CgF1fWROBEB85EuH+iJJM/xDPFigCKk=";
+      hash = "sha256-gEY2em9pNTC1EuVX0V3L/Wu1apZ+BKBXxALEcPQ/pwA=";
     };
 
     preBuild = ''