diff --git a/ci/github-script/bot.js b/ci/github-script/bot.js
index d14096add651..f178b6028783 100644
--- a/ci/github-script/bot.js
+++ b/ci/github-script/bot.js
@@ -46,7 +46,7 @@ module.exports = async ({ github, context, core, dry }) => {
           name: 'maintainers',
         })
       ).data.artifacts[0]
-      if (!artifact) continue
+      if (!artifact || artifact.expired) continue
 
       await artifactClient.downloadArtifact(artifact.id, {
         findBy: {
@@ -152,6 +152,8 @@ module.exports = async ({ github, context, core, dry }) => {
       })
     ).data
 
+    log('author', pull_request.user?.login)
+
     const maintainers = await getMaintainerMap(pull_request.base.ref)
 
     const merge_bot_eligible = await handleMerge({
@@ -607,7 +609,7 @@ module.exports = async ({ github, context, core, dry }) => {
         ).data.artifacts[0]
 
         // If the artifact is not available, the next iteration starts at the beginning.
-        if (artifact) {
+        if (artifact && !artifact.expired) {
           stats.artifacts++
 
           const { downloadPath } = await artifactClient.downloadArtifact(
diff --git a/ci/github-script/reviewers.js b/ci/github-script/reviewers.js
index 07a77a5fec0d..b581f3c20755 100644
--- a/ci/github-script/reviewers.js
+++ b/ci/github-script/reviewers.js
@@ -14,7 +14,7 @@ async function handleReviewers({
   const pull_number = pull_request.number
 
   const requested_reviewers = new Set(
-    pull_request.requested_reviewers.map(({ login }) => login),
+    pull_request.requested_reviewers.map(({ login }) => login.toLowerCase()),
   )
   log(
     'reviewers - requested_reviewers',
@@ -22,7 +22,7 @@ async function handleReviewers({
   )
 
   const existing_reviewers = new Set(
-    reviews.map(({ user }) => user?.login).filter(Boolean),
+    reviews.map(({ user }) => user?.login.toLowerCase()).filter(Boolean),
   )
   log(
     'reviewers - existing_reviewers',
@@ -43,9 +43,11 @@ async function handleReviewers({
 
   const users = new Set([
     ...(await Promise.all(
-      maintainers.map(async (id) => (await getUser(id)).login),
+      maintainers.map(async (id) => (await getUser(id)).login.toLowerCase()),
     )),
-    ...owners.filter((handle) => handle && !handle.includes('/')),
+    ...owners
+      .filter((handle) => handle && !handle.includes('/'))
+      .map((handle) => handle.toLowerCase()),
   ])
   log('reviewers - users', Array.from(users).join(', '))
 
@@ -60,14 +62,14 @@ async function handleReviewers({
   const team_members = new Set(
     (await Promise.all(Array.from(teams, getTeamMembers)))
       .flat(1)
-      .map(({ login }) => login),
+      .map(({ login }) => login.toLowerCase()),
   )
   log('reviewers - team_members', Array.from(team_members).join(', '))
 
   const new_reviewers = users
     .union(team_members)
     // We can't request a review from the author.
-    .difference(new Set([pull_request.user?.login]))
+    .difference(new Set([pull_request.user?.login.toLowerCase()]))
   log('reviewers - new_reviewers', Array.from(new_reviewers).join(', '))
 
   // Filter users to repository collaborators. If they're not, they can't be requested
diff --git a/nixos/modules/config/vte.nix b/nixos/modules/config/vte.nix
index 75ac3bae4be3..8ed746d4966d 100644
--- a/nixos/modules/config/vte.nix
+++ b/nixos/modules/config/vte.nix
@@ -9,7 +9,12 @@ let
   vteInitSnippet = ''
     # Show current working directory in VTE terminals window title.
     # Supports both bash and zsh, requires interactive shell.
-    . ${pkgs.vte-gtk4}/etc/profile.d/vte.sh
+    . ${
+      pkgs.vte.override {
+        withApp = false;
+        gtkVersion = null;
+      }
+    }/etc/profile.d/vte.sh
   '';
 
 in
diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix
index 196871d14b22..70ac9882958b 100644
--- a/nixos/modules/module-list.nix
+++ b/nixos/modules/module-list.nix
@@ -1123,6 +1123,7 @@
   ./services/networking/chisel-server.nix
   ./services/networking/cjdns.nix
   ./services/networking/clatd.nix
+  ./services/networking/cloudflare-ddns.nix
   ./services/networking/cloudflare-dyndns.nix
   ./services/networking/cloudflare-warp.nix
   ./services/networking/cloudflared.nix
diff --git a/nixos/modules/security/apparmor/includes.nix b/nixos/modules/security/apparmor/includes.nix
index 4b759e1d94f9..92f5aa8d66b2 100644
--- a/nixos/modules/security/apparmor/includes.nix
+++ b/nixos/modules/security/apparmor/includes.nix
@@ -19,7 +19,7 @@ let
           mode ? "r",
           trail ? "",
         }:
-        lib.optionalString (hasAttr path etc) "${mode} ${config.environment.etc.${path}.source}${trail},";
+        lib.optionalString (hasAttr path etc) "${config.environment.etc.${path}.source}${trail} ${mode},";
     in
     if isAttrs arg then go arg else go { path = arg; };
 in
@@ -93,19 +93,19 @@ in
     ];
     "abstractions/base" = ''
       include "${pkgs.apparmor-profiles}/etc/apparmor.d/abstractions/base"
-      r ${pkgs.stdenv.cc.libc}/share/locale/**,
-      r ${pkgs.stdenv.cc.libc}/share/locale.alias,
-      r ${config.i18n.glibcLocales}/lib/locale/locale-archive,
+      ${pkgs.stdenv.cc.libc}/share/locale/** r,
+      ${pkgs.stdenv.cc.libc}/share/locale.alias r,
+      ${config.i18n.glibcLocales}/lib/locale/locale-archive r,
       ${etcRule "localtime"}
-      r ${pkgs.tzdata}/share/zoneinfo/**,
-      r ${pkgs.stdenv.cc.libc}/share/i18n/**,
+      ${pkgs.tzdata}/share/zoneinfo/** r,
+      ${pkgs.stdenv.cc.libc}/share/i18n/** r,
     '';
     "abstractions/bash" = ''
       include "${pkgs.apparmor-profiles}/etc/apparmor.d/abstractions/bash"
 
       # bash inspects filesystems at startup
       # and /etc/mtab is linked to /proc/mounts
-      r @{PROC}/mounts,
+      @{PROC}/mounts r,
 
       # system-wide bash configuration
     ''
@@ -296,8 +296,8 @@ in
       # looking up users by name or id, groups by name or id, hosts by name
       # or IP, etc. These operations may be performed through files, dns,
       # NIS, NIS+, LDAP, hesiod, wins, etc. Allow them all here.
-      mr ${getLib pkgs.nss}/lib/libnss_*.so*,
-      mr ${getLib pkgs.nss}/lib64/libnss_*.so*,
+      ${getLib pkgs.nss}/lib/libnss_*.so* mr,
+      ${getLib pkgs.nss}/lib64/libnss_*.so* mr,
     ''
     + lib.concatMapStringsSep "\n" etcRule [
       "group"
@@ -463,11 +463,11 @@ in
       include "${pkgs.apparmor-profiles}/etc/apparmor.d/abstractions/ssl_certs"
 
       # For the NixOS module: security.acme
-      r /var/lib/acme/*/cert.pem,
-      r /var/lib/acme/*/chain.pem,
-      r /var/lib/acme/*/fullchain.pem,
+      /var/lib/acme/*/cert.pem r,
+      /var/lib/acme/*/chain.pem r,
+      /var/lib/acme/*/fullchain.pem r,
 
-      r /etc/pki/tls/certs/,
+      /etc/pki/tls/certs/ r,
 
     ''
     + lib.concatMapStringsSep "\n" etcRule [
@@ -510,8 +510,8 @@ in
     ];
     "abstractions/ssl_keys" = ''
       # security.acme NixOS module
-      r /var/lib/acme/*/full.pem,
-      r /var/lib/acme/*/key.pem,
+      /var/lib/acme/*/full.pem r,
+      /var/lib/acme/*/key.pem r,
     '';
     "abstractions/vulkan" = ''
       include "${pkgs.apparmor-profiles}/etc/apparmor.d/abstractions/vulkan"
diff --git a/nixos/modules/services/display-managers/gdm.nix b/nixos/modules/services/display-managers/gdm.nix
index cd8a168c7347..41f184b94f62 100644
--- a/nixos/modules/services/display-managers/gdm.nix
+++ b/nixos/modules/services/display-managers/gdm.nix
@@ -179,47 +179,33 @@ in
 
     services.xserver.displayManager.lightdm.enable = false;
 
-    users.users.gdm = {
-      name = "gdm";
-      uid = config.ids.uids.gdm;
-      group = "gdm";
-      description = "GDM user";
-    };
+    users.users = lib.mkMerge [
+      {
+        gdm = {
+          name = "gdm";
+          uid = config.ids.uids.gdm;
+          group = "gdm";
+          description = "GDM user";
+        };
 
-    users.users.gdm-greeter = {
-      isSystemUser = true;
-      uid = 60578;
-      group = "gdm";
-      home = "/run/gdm";
-    };
+        gdm-greeter = {
+          isSystemUser = true;
+          uid = 60578;
+          group = "gdm";
+          home = "/run/gdm";
+        };
+      }
 
-    users.users.gdm-greeter-1 = {
-      isSystemUser = true;
-      uid = 60579;
-      group = "gdm";
-      home = "/run/gdm-1";
-    };
-
-    users.users.gdm-greeter-2 = {
-      isSystemUser = true;
-      uid = 60580;
-      group = "gdm";
-      home = "/run/gdm-2";
-    };
-
-    users.users.gdm-greeter-3 = {
-      isSystemUser = true;
-      uid = 60581;
-      group = "gdm";
-      home = "/run/gdm-3";
-    };
-
-    users.users.gdm-greeter-4 = {
-      isSystemUser = true;
-      uid = 60582;
-      group = "gdm";
-      home = "/run/gdm-4";
-    };
+      (lib.genAttrs' [ 1 2 3 4 ] (
+        i:
+        lib.nameValuePair "gdm-greeter-${toString i}" {
+          isSystemUser = true;
+          uid = 60578 + i;
+          group = "gdm";
+          home = "/run/gdm-${toString i}";
+        }
+      ))
+    ];
 
     users.groups.gdm.gid = config.ids.gids.gdm;
 
diff --git a/nixos/modules/services/networking/cloudflare-ddns.nix b/nixos/modules/services/networking/cloudflare-ddns.nix
index bf9f36e94e96..438794dc5dd7 100644
--- a/nixos/modules/services/networking/cloudflare-ddns.nix
+++ b/nixos/modules/services/networking/cloudflare-ddns.nix
@@ -22,9 +22,8 @@ in
       description = ''
         Path to a file containing the Cloudflare API authentication token.
         The file content should be in the format `CLOUDFLARE_API_TOKEN=YOUR_SECRET_TOKEN`.
-        The service user `${cfg.user}` needs read access to this file.
+        The service user needs read access to this file.
         Ensure permissions are secure (e.g., `0400` or `0440`) and ownership is appropriate
-        (e.g., `owner = root`, `group = ${cfg.group}`).
         Using `CLOUDFLARE_API_TOKEN` is preferred over the deprecated `CF_API_TOKEN`.
       '';
       example = "/run/secrets/cloudflare-ddns-token";
@@ -324,4 +323,7 @@ in
       };
     };
   };
+  meta.maintainers = with lib.maintainers; [
+    shokerplz
+  ];
 }
diff --git a/nixos/modules/services/networking/murmur.nix b/nixos/modules/services/networking/murmur.nix
index c67b4ac47390..9b1cf76860e3 100644
--- a/nixos/modules/services/networking/murmur.nix
+++ b/nixos/modules/services/networking/murmur.nix
@@ -401,40 +401,40 @@ in
     ];
 
     security.apparmor.policies."bin.mumble-server".profile = ''
+      abi <abi/4.0>,
       include <tunables/global>
 
-      ${cfg.package}/bin/{mumble-server,.mumble-server-wrapped} {
+      profile ${cfg.package}/bin/{mumble-server,.mumble-server-wrapped} {
         include <abstractions/base>
         include <abstractions/nameservice>
         include <abstractions/ssl_certs>
         include "${pkgs.apparmorRulesFromClosure { name = "mumble-server"; } cfg.package}"
-        pix ${cfg.package}/bin/.mumble-server-wrapped,
+        ${cfg.package}/bin/.mumble-server-wrapped pix,
 
-        r ${config.environment.etc."os-release".source},
-        r ${config.environment.etc."lsb-release".source},
-        owner rwk ${cfg.stateDir}/murmur.sqlite,
-        owner rw ${cfg.stateDir}/murmur.sqlite-journal,
-        owner r ${cfg.stateDir}/,
-        r /run/murmur/murmurd.pid,
-        r /run/murmur/murmurd.ini,
-        r ${configFile},
-    ''
-    + lib.optionalString cfg.logToFile ''
-      rw /var/log/murmur/murmurd.log,
-    ''
-    + lib.optionalString (cfg.sslCert != null) ''
-      r ${cfg.sslCert},
-    ''
-    + lib.optionalString (cfg.sslKey != null) ''
-      r ${cfg.sslKey},
-    ''
-    + lib.optionalString (cfg.sslCa != null) ''
-      r ${cfg.sslCa},
-    ''
-    + lib.optionalString (cfg.dbus != null) ''
-      dbus bus=${cfg.dbus}
-    ''
-    + ''
+        ${config.environment.etc."os-release".source} r,
+        ${config.environment.etc."lsb-release".source} r,
+        owner ${cfg.stateDir}/murmur.sqlite rwk,
+        owner ${cfg.stateDir}/murmur.sqlite-journal rw,
+        owner ${cfg.stateDir}/ r,
+        /run/murmur/murmurd.pid r,
+        /run/murmur/murmurd.ini r,
+        ${configFile} r,
+        ${lib.optionalString cfg.logToFile ''
+          /var/log/murmur/murmurd.log rw,
+        ''}
+        ${lib.optionalString (cfg.sslCert != null) ''
+          ${cfg.sslCert} r,
+        ''}
+        ${lib.optionalString (cfg.sslKey != null) ''
+          ${cfg.sslKey} r,
+        ''}
+        ${lib.optionalString (cfg.sslCa != null) ''
+          ${cfg.sslCa} r,
+        ''}
+        ${lib.optionalString (cfg.dbus != null) ''
+          dbus bus=${cfg.dbus},
+        ''}
+        include if exists <local/bin.mumble-server>
       }
     '';
   };
diff --git a/nixos/modules/services/security/nginx-sso.nix b/nixos/modules/services/security/nginx-sso.nix
index 437eb0c62796..f6e3b5deef1d 100644
--- a/nixos/modules/services/security/nginx-sso.nix
+++ b/nixos/modules/services/security/nginx-sso.nix
@@ -65,6 +65,7 @@ in
         StateDirectory = "nginx-sso";
         WorkingDirectory = "/var/lib/nginx-sso";
         RuntimeDirectory = "nginx-sso";
+        RuntimeDirectoryMode = "0700"; # Contains secrets
         ExecStart = ''
           ${lib.getExe cfg.package} \
             --config ${configPath} \
diff --git a/nixos/modules/services/torrent/transmission.nix b/nixos/modules/services/torrent/transmission.nix
index 3f6ed9eff4d1..87493ec6ba62 100644
--- a/nixos/modules/services/torrent/transmission.nix
+++ b/nixos/modules/services/torrent/transmission.nix
@@ -585,23 +585,23 @@ in
       include "${cfg.package.apparmor}/bin.transmission-daemon"
     '';
     security.apparmor.includes."local/bin.transmission-daemon" = ''
-      r ${config.systemd.services.transmission.environment.CURL_CA_BUNDLE},
+      ${config.systemd.services.transmission.environment.CURL_CA_BUNDLE} r,
 
-      owner rw ${cfg.home}/${settingsDir}/**,
-      rw ${cfg.settings.download-dir}/**,
+      owner ${cfg.home}/${settingsDir}/** rw,
+      ${cfg.settings.download-dir}/** rw,
       ${optionalString cfg.settings.incomplete-dir-enabled ''
-        rw ${cfg.settings.incomplete-dir}/**,
+        ${cfg.settings.incomplete-dir}/** rw,
       ''}
       ${optionalString cfg.settings.watch-dir-enabled ''
-        r${optionalString cfg.settings.trash-original-torrent-files "w"} ${cfg.settings.watch-dir}/**,
+        ${cfg.settings.watch-dir}/** r${optionalString cfg.settings.trash-original-torrent-files "w"},
       ''}
       profile dirs {
-        rw ${cfg.settings.download-dir}/**,
+        ${cfg.settings.download-dir}/** rw,
         ${optionalString cfg.settings.incomplete-dir-enabled ''
-          rw ${cfg.settings.incomplete-dir}/**,
+          ${cfg.settings.incomplete-dir}/** rw,
         ''}
         ${optionalString cfg.settings.watch-dir-enabled ''
-          r${optionalString cfg.settings.trash-original-torrent-files "w"} ${cfg.settings.watch-dir}/**,
+          ${cfg.settings.watch-dir}/** r${optionalString cfg.settings.trash-original-torrent-files "w"},
         ''}
       }
 
@@ -612,12 +612,12 @@ in
           # any existing profile for script-torrent-done-filename
           # FIXME: to be tested as I'm not sure it works well with NoNewPrivileges=
           # https://gitlab.com/apparmor/apparmor/-/wikis/AppArmorStacking#seccomp-and-no_new_privs
-          px ${cfg.settings.script-torrent-done-filename} -> &@{dirs},
+          ${cfg.settings.script-torrent-done-filename} px -> &@{dirs},
         ''
       }
 
       ${optionalString (cfg.webHome != null) ''
-        r ${cfg.webHome}/**,
+        ${cfg.webHome}/** r,
       ''}
     '';
   };
diff --git a/nixos/modules/services/web-apps/miniflux.nix b/nixos/modules/services/web-apps/miniflux.nix
index 572e4f1700d6..03447395fef6 100644
--- a/nixos/modules/services/web-apps/miniflux.nix
+++ b/nixos/modules/services/web-apps/miniflux.nix
@@ -207,15 +207,18 @@ in
     environment.systemPackages = [ cfg.package ];
 
     security.apparmor.policies."bin.miniflux".profile = ''
+      abi <abi/4.0>,
       include <tunables/global>
-      ${cfg.package}/bin/miniflux {
+
+      profile ${cfg.package}/bin/miniflux {
         include <abstractions/base>
         include <abstractions/nameservice>
         include <abstractions/ssl_certs>
         include <abstractions/golang>
         include "${pkgs.apparmorRulesFromClosure { name = "miniflux"; } cfg.package}"
-        r ${cfg.package}/bin/miniflux,
-        rw /run/miniflux/**,
+        ${cfg.package}/bin/miniflux r,
+        /run/miniflux/** rw,
+        include if exists <local/bin.miniflux>
       }
     '';
   };
diff --git a/nixos/tests/systemd-shutdown.nix b/nixos/tests/systemd-shutdown.nix
index f4685605bb61..827cbac300d8 100644
--- a/nixos/tests/systemd-shutdown.nix
+++ b/nixos/tests/systemd-shutdown.nix
@@ -27,7 +27,7 @@ in
     # automatically and that 'systemd-shutdown' runs our script.
     machine.wait_for_unit("multi-user.target")
     # .shutdown() would wait for the machine to power off
-    machine.succeed("systemctl poweroff")
+    machine.execute("systemctl poweroff", check_return=False)
     # Message printed by systemd-shutdown
     machine.wait_for_console_text("Unmounting '/oldroot'")
     machine.wait_for_console_text("${msg}")
diff --git a/pkgs/applications/misc/electrum/default.nix b/pkgs/applications/misc/electrum/default.nix
index 0197aa8e1c30..8a55b89bf897 100644
--- a/pkgs/applications/misc/electrum/default.nix
+++ b/pkgs/applications/misc/electrum/default.nix
@@ -7,6 +7,7 @@
   python3,
   zbar,
   enableQt ? true,
+  enablePythonEcdsa ? false,
   callPackage,
   qtwayland,
 }:
@@ -22,15 +23,25 @@ let
 in
 python3.pkgs.buildPythonApplication rec {
   pname = "electrum";
-  version = "4.6.0";
-  format = "setuptools";
+  version = "4.6.2";
+  pyproject = true;
 
   src = fetchurl {
     url = "https://download.electrum.org/${version}/Electrum-${version}.tar.gz";
-    hash = "sha256-aQqZXyfqFgc1j2r836eaaayOmSzDijHlYXmF+OBw418=";
+    hash = "sha256-ZrwzAeeMNrs6KzLGDg5oBF7E+GGLYCVczO6R18TKRuE=";
   };
 
-  build-system = [ protobuf ] ++ lib.optionals enableQt [ wrapQtAppsHook ];
+  build-system = with python3.pkgs; [
+    setuptools
+  ];
+
+  nativeBuildInputs = [
+    protobuf
+    python3.pkgs.pythonRelaxDepsHook
+  ]
+  ++ lib.optionals enableQt [
+    wrapQtAppsHook
+  ];
   buildInputs = lib.optional (stdenv.hostPlatform.isLinux && enableQt) qtwayland;
 
   dependencies =
@@ -56,18 +67,31 @@ python3.pkgs.buildPythonApplication rec {
       electrum-ecc
       # plugins
       ledger-bitcoin
+      cbor2
+      pyserial
+    ]
+    ++ lib.optionals enablePythonEcdsa [
+      # enablePythonEcdsa gates plugins known to pull in python-ecdsa, which we
+      # avoid by default due to CVE-2024-23342.
       ckcc-protocol
       keepkey
       trezor
       bitbox02
-      cbor2
-      pyserial
     ]
     ++ lib.optionals enableQt [
       pyqt6
       qdarkstyle
     ];
 
+  pythonRelaxDeps = [
+    "attrs"
+    "dnspython"
+  ];
+
+  pythonRemoveDeps = [
+    "protobuf"
+  ];
+
   checkInputs =
     with python3.pkgs;
     lib.optionals enableQt [
@@ -77,7 +101,11 @@ python3.pkgs.buildPythonApplication rec {
     "tests/test_qml_types.py"
   ];
 
-  postPatch =
+  postPatch = ''
+    # Upstream tarball omits regenerated protobuf bindings in some releases.
+    protoc --python_out=. electrum/paymentrequest.proto
+  ''
+  + (
     if enableQt then
       ''
         substituteInPlace ./electrum/qrscanner.py \
@@ -86,7 +114,8 @@ python3.pkgs.buildPythonApplication rec {
     else
       ''
         sed -i '/qdarkstyle/d' contrib/requirements/requirements.txt
-      '';
+      ''
+  );
 
   postInstall = lib.optionalString stdenv.hostPlatform.isLinux ''
     substituteInPlace $out/share/applications/electrum.desktop \
@@ -98,7 +127,15 @@ python3.pkgs.buildPythonApplication rec {
     wrapQtApp $out/bin/electrum
   '';
 
+  preFixup = ''
+    makeWrapperArgs+=(--prefix PYTHONPATH : ${python3.pkgs.protobuf}/${python3.sitePackages})
+  ''
+  + lib.optionalString enableQt ''
+    qtWrapperArgs+=(--prefix PYTHONPATH : ${python3.pkgs.protobuf}/${python3.sitePackages})
+  '';
+
   nativeCheckInputs = with python3.pkgs; [
+    protobuf
     pytestCheckHook
     pyaes
     pycryptodomex
@@ -108,6 +145,7 @@ python3.pkgs.buildPythonApplication rec {
 
   # avoid homeless-shelter error in tests
   preCheck = ''
+    export PYTHONPATH=${python3.pkgs.protobuf}/${python3.sitePackages}:$PYTHONPATH
     export HOME="$(mktemp -d)"
   '';
 
diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index 1fd62412d6d4..ee64d2313f61 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -63,13 +63,13 @@
     "vendorHash": "sha256-QWBzQXx/dzWZr9dn3LHy8RIvZL1EA9xYqi7Ppzvju7g="
   },
   "auth0_auth0": {
-    "hash": "sha256-Hxvk8TTTF+zFgbtnlQ36Ksw1jHlegVnFTbh+xuV1FEs=",
+    "hash": "sha256-J2fMZBWbLL4hEPTqN7aKrqSOPQPA11NGZ/yILZQot1Q=",
     "homepage": "https://registry.terraform.io/providers/auth0/auth0",
     "owner": "auth0",
     "repo": "terraform-provider-auth0",
-    "rev": "v1.35.0",
+    "rev": "v1.36.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-+laQm8vbuf1WmUVovdD1qvWWJd65W9fzHzINFVPtRh4="
+    "vendorHash": "sha256-2UfA1QHpVgRKi6PtZ5cHHuO4m5cN6KWlLt3hmPca6HY="
   },
   "aviatrixsystems_aviatrix": {
     "hash": "sha256-V1JRVOMHQu5KlPFw7q/qZuHlJjdVSQotI9w7s88v8GM=",
@@ -1030,13 +1030,13 @@
     "vendorHash": "sha256-ofzbDmivXgH1i1Gjhpyp0bk3FDs5SnxwoRuNAWyMqyI="
   },
   "opentelekomcloud_opentelekomcloud": {
-    "hash": "sha256-gwHugaLKjLIp7LHHbo4F25P3ncgjGavKYcIfSjXs7KM=",
+    "hash": "sha256-dKeoICBZca/IayPwX8HedPl+HgemC9IHPzzKlI8281Y=",
     "homepage": "https://registry.terraform.io/providers/opentelekomcloud/opentelekomcloud",
     "owner": "opentelekomcloud",
     "repo": "terraform-provider-opentelekomcloud",
-    "rev": "v1.36.52",
+    "rev": "v1.36.53",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-0RE5ZqB16JPoFPZYgwupNyYZiXQnC3Sq4f+CLNjD6BM="
+    "vendorHash": "sha256-JH7wPgkGKEUBOgv09sz4rfJm+RJQwy3Z2dqHxrF8lZU="
   },
   "opsgenie_opsgenie": {
     "hash": "sha256-Y67kcg/ovvZc22l1CBz0Mqu7DAIit5F0jQNfQrl2EGI=",
diff --git a/pkgs/applications/networking/p2p/transmission/4.nix b/pkgs/applications/networking/p2p/transmission/4.nix
index be91f8d4bf07..a49cc0c788fa 100644
--- a/pkgs/applications/networking/p2p/transmission/4.nix
+++ b/pkgs/applications/networking/p2p/transmission/4.nix
@@ -175,21 +175,22 @@ stdenv.mkDerivation (finalAttrs: {
   postInstall = ''
     mkdir $apparmor
     cat >$apparmor/bin.transmission-daemon <<EOF
+    abi <abi/4.0>,
     include <tunables/global>
-    $out/bin/transmission-daemon {
+    profile $out/bin/transmission-daemon {
       include <abstractions/base>
       include <abstractions/nameservice>
       include <abstractions/ssl_certs>
       include "${apparmorRules}"
-      r @{PROC}/sys/kernel/random/uuid,
-      r @{PROC}/sys/vm/overcommit_memory,
-      r @{PROC}/@{pid}/environ,
-      r @{PROC}/@{pid}/mounts,
-      rwk /tmp/tr_session_id_*,
+      @{PROC}/sys/kernel/random/uuid r,
+      @{PROC}/sys/vm/overcommit_memory r,
+      @{PROC}/@{pid}/environ r,
+      @{PROC}/@{pid}/mounts r,
+      /tmp/tr_session_id_* rwk,
 
-      r $out/share/transmission/public_html/**,
+      $out/share/transmission/public_html/** r,
 
-      include <local/bin.transmission-daemon>
+      include if exists <local/bin.transmission-daemon>
     }
     EOF
     install -Dm0444 -t $out/share/icons ../qt/icons/transmission.svg
diff --git a/pkgs/build-support/rust/build-rust-crate/test/default.nix b/pkgs/build-support/rust/build-rust-crate/test/default.nix
index 50e045921387..d5c56858c6a4 100644
--- a/pkgs/build-support/rust/build-rust-crate/test/default.nix
+++ b/pkgs/build-support/rust/build-rust-crate/test/default.nix
@@ -774,6 +774,7 @@ rec {
           # On Darwin, the debug symbols are in a separate directory.
           "./bin/test_binary1.dSYM/Contents/Info.plist"
           "./bin/test_binary1.dSYM/Contents/Resources/DWARF/test_binary1"
+          "./bin/test_binary1.dSYM/Contents/Resources/Relocations/${stdenv.hostPlatform.rust.platform.arch}/test_binary1.yml"
         ];
       };
 
diff --git a/pkgs/build-support/rust/build-rust-package/default.nix b/pkgs/build-support/rust/build-rust-package/default.nix
index 7efbc8a9ea36..7ad39a58935c 100644
--- a/pkgs/build-support/rust/build-rust-package/default.nix
+++ b/pkgs/build-support/rust/build-rust-package/default.nix
@@ -15,6 +15,16 @@
   windows,
 }:
 
+let
+  interpolateString =
+    s:
+    if lib.isList s then
+      lib.concatMapStringsSep " " (s: "${s}") (lib.filter (s: s != null) s)
+    else if s == null then
+      ""
+    else
+      "${s}";
+in
 lib.extendMkDerivation {
   constructDrv = stdenv.mkDerivation;
 
@@ -23,6 +33,7 @@ lib.extendMkDerivation {
     "cargoUpdateHook"
     "cargoLock"
     "useFetchCargoVendor"
+    "RUSTFLAGS"
   ];
 
   extendDrvArgs =
@@ -77,11 +88,19 @@ lib.extendMkDerivation {
     assert lib.warnIf (args ? useFetchCargoVendor)
       "buildRustPackage: `useFetchCargoVendor` is non‐optional and enabled by default as of 25.05, remove it"
       true;
+    {
+      env = {
+        PKG_CONFIG_ALLOW_CROSS = if stdenv.buildPlatform != stdenv.hostPlatform then 1 else 0;
+        RUST_LOG = logLevel;
+        RUSTFLAGS =
+          lib.optionalString (
+            stdenv.hostPlatform.isDarwin && buildType == "debug"
+          ) "-C split-debuginfo=packed "
+          # Workaround the existing RUSTFLAGS specified as a list.
+          + interpolateString (args.RUSTFLAGS or "");
+      }
+      // args.env or { };
 
-    lib.optionalAttrs (stdenv.hostPlatform.isDarwin && buildType == "debug") {
-      RUSTFLAGS = "-C split-debuginfo=packed " + (args.RUSTFLAGS or "");
-    }
-    // {
       cargoDeps =
         if cargoVendorDir != null then
           null
@@ -143,15 +162,6 @@ lib.extendMkDerivation {
 
       patches = cargoPatches ++ patches;
 
-      PKG_CONFIG_ALLOW_CROSS = if stdenv.buildPlatform != stdenv.hostPlatform then 1 else 0;
-
-      postUnpack = ''
-        eval "$cargoDepsHook"
-
-        export RUST_LOG=${logLevel}
-      ''
-      + (args.postUnpack or "");
-
       configurePhase =
         args.configurePhase or ''
           runHook preConfigure
diff --git a/pkgs/build-support/rust/hooks/cargo-setup-hook.sh b/pkgs/build-support/rust/hooks/cargo-setup-hook.sh
index 1c779a6541d8..4ba6760a1a23 100644
--- a/pkgs/build-support/rust/hooks/cargo-setup-hook.sh
+++ b/pkgs/build-support/rust/hooks/cargo-setup-hook.sh
@@ -1,6 +1,8 @@
 cargoSetupPostUnpackHook() {
     echo "Executing cargoSetupPostUnpackHook"
 
+    eval "${cargoDepsHook-}"
+
     # Some cargo builds include build hooks that modify their own vendor
     # dependencies. This copies the vendor directory into the build tree and makes
     # it writable. If we're using a tarball, the unpackFile hook already handles
diff --git a/pkgs/by-name/_7/_7-segment-font/package.nix b/pkgs/by-name/_7/_7-segment-font/package.nix
new file mode 100644
index 000000000000..0d039af7c020
--- /dev/null
+++ b/pkgs/by-name/_7/_7-segment-font/package.nix
@@ -0,0 +1,38 @@
+{
+  stdenvNoCC,
+  fetchurl,
+  lib,
+}:
+stdenvNoCC.mkDerivation {
+  pname = "7-segment-font";
+  version = "3.0-unstable-2025-06-03";
+
+  src = fetchurl {
+    url = "https://torinak.com/font/7segment.ttf";
+    hash = "sha256-zIjaEGDLR9ad192GH9pIU6/A3ZGAuR0oF3ZB3Ew3Xbs=";
+  };
+
+  dontUnpack = true;
+
+  installPhase = ''
+    runHook preInstall
+
+    install -Dm444 "$src" "$out/share/fonts/truetype/7segment.ttf"
+
+    runHook postInstall
+  '';
+
+  meta = {
+    description = "Font that imitates classic seven-segment LCD and LED displays";
+    longDescription = ''
+      A font that imitates classic seven-segment LCD and LED displays.
+      Beside digits, it contains Latin letters and some symbols constructed from segments,
+      with separate dot and colon as used in calculators and digital clocks.
+    '';
+    homepage = "https://torinak.com/font/7-segment";
+    downloadPage = "https://torinak.com/font/7-segment";
+    license = lib.licenses.ofl;
+    maintainers = with lib.maintainers; [ elfenermarcell ];
+    platforms = lib.platforms.all;
+  };
+}
diff --git a/pkgs/by-name/an/antimatter-dimensions/package.nix b/pkgs/by-name/an/antimatter-dimensions/package.nix
index 7052b32ae64e..bcff103c86ed 100644
--- a/pkgs/by-name/an/antimatter-dimensions/package.nix
+++ b/pkgs/by-name/an/antimatter-dimensions/package.nix
@@ -19,12 +19,12 @@ let
 in
 buildNpmPackage rec {
   pname = "antimatter-dimensions";
-  version = "0-unstable-2025-09-17";
+  version = "0-unstable-2025-11-20";
   src = fetchFromGitHub {
     owner = "IvarK";
     repo = "AntimatterDimensionsSourceCode";
-    rev = "8b5a34c1211df7cb35969dc8e5d402b0b28b7589";
-    hash = "sha256-ptyLpGtHHhsPBS//LpuO327uXPqQWTs1DLGjcsrvZtw=";
+    rev = "8ae221fcb07db667b3d04114c2b977175966611d";
+    hash = "sha256-IseAfEz+nSzY2XD15HbJWeLmYFMvAYO33bPItXJCy58=";
   };
   nativeBuildInputs = [
     copyDesktopItems
diff --git a/pkgs/by-name/as/ast-grep/package.nix b/pkgs/by-name/as/ast-grep/package.nix
index 2c11477fd2a9..c64889b297f3 100644
--- a/pkgs/by-name/as/ast-grep/package.nix
+++ b/pkgs/by-name/as/ast-grep/package.nix
@@ -11,13 +11,13 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ast-grep";
-  version = "0.39.9";
+  version = "0.40.0";
 
   src = fetchFromGitHub {
     owner = "ast-grep";
     repo = "ast-grep";
     tag = finalAttrs.version;
-    hash = "sha256-OzDx1/U4uZuMGanTaDi1Bu3ueMaf83jJIqy+20+cX0g=";
+    hash = "sha256-tbN8MiesWWIHew5/2STNhXu+3eXjMLRrcm8+9cZf+tM=";
   };
 
   # error: linker `aarch64-linux-gnu-gcc` not found
@@ -25,7 +25,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     rm .cargo/config.toml
   '';
 
-  cargoHash = "sha256-YtukqwUvpAQf8Dxf0rhowylt8h1VhN9PcnF+QiB8WmA=";
+  cargoHash = "sha256-+wetHwdURcNPLa9TGZmS4HlyYcQHSpLnXbrNXS/JckM=";
 
   nativeBuildInputs = [ installShellFiles ];
 
diff --git a/pkgs/by-name/at/at-spi2-core/package.nix b/pkgs/by-name/at/at-spi2-core/package.nix
index c9879d33eed5..1ca88332ea10 100644
--- a/pkgs/by-name/at/at-spi2-core/package.nix
+++ b/pkgs/by-name/at/at-spi2-core/package.nix
@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchurl,
-  fetchpatch,
   meson,
   ninja,
   pkg-config,
@@ -29,7 +28,7 @@
 
 stdenv.mkDerivation rec {
   pname = "at-spi2-core";
-  version = "2.58.0";
+  version = "2.58.1";
 
   outputs = [
     "out"
@@ -39,18 +38,9 @@ stdenv.mkDerivation rec {
 
   src = fetchurl {
     url = "mirror://gnome/sources/at-spi2-core/${lib.versions.majorMinor version}/at-spi2-core-${version}.tar.xz";
-    hash = "sha256-390zANong6IZaf+t4oiYF/t8GQak75JJfrpllps9q1o=";
+    hash = "sha256-fzdKajjNcP9LMsnToDEL+oBNlG/tTJ5pp9SfrNy5Xpw=";
   };
 
-  # TODO apply unconditionally on rebuild
-  patches = lib.optionals stdenv.isDarwin [
-    (fetchpatch {
-      name = "timersub.patch";
-      url = "https://github.com/GNOME/at-spi2-core/commit/02108ea1b96db0189b2d4a9eceb843e1f13b7bdf.diff";
-      hash = "sha256-pVBhawfRnJoXmovl9CAmzh+YWJkbvlOVrCs8XanjP00=";
-    })
-  ];
-
   nativeBuildInputs = [
     glib
     meson
diff --git a/pkgs/by-name/aw/awscli2/package.nix b/pkgs/by-name/aw/awscli2/package.nix
index 99bac8ec2404..c6bac261b91a 100644
--- a/pkgs/by-name/aw/awscli2/package.nix
+++ b/pkgs/by-name/aw/awscli2/package.nix
@@ -26,8 +26,8 @@ let
         prompt-toolkit = prev.prompt-toolkit.overridePythonAttrs (prev: rec {
           version = "3.0.51";
           src = prev.src.override {
-            inherit version;
-            hash = "sha256-kxoWLjsn/JDIbxtIux+yxSjCdhR15XycBt4TMRx7VO0=";
+            tag = version;
+            hash = "sha256-pNYmjAgnP9nK40VS/qvPR3g+809Yra2ISASWJDdQKrU=";
           };
         });
         python-dateutil = prev.python-dateutil.overridePythonAttrs (prev: rec {
@@ -73,14 +73,14 @@ let
 in
 py.pkgs.buildPythonApplication rec {
   pname = "awscli2";
-  version = "2.31.11"; # N.B: if you change this, check if overrides are still up-to-date
+  version = "2.31.39"; # N.B: if you change this, check if overrides are still up-to-date
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "aws";
     repo = "aws-cli";
     tag = version;
-    hash = "sha256-JyTL3q8MMKSKbNiJvBL3u7vpUNFt9rp2Ueh8mL9FRkM=";
+    hash = "sha256-IuOamzLmnU3wIhgQIsWbU6GSRM2XLv0eH0gezp9IHNA=";
   };
 
   postPatch = ''
diff --git a/pkgs/by-name/bl/bluez-headers/package.nix b/pkgs/by-name/bl/bluez-headers/package.nix
index 2ac0d24640fb..a3e2e4bf15ba 100644
--- a/pkgs/by-name/bl/bluez-headers/package.nix
+++ b/pkgs/by-name/bl/bluez-headers/package.nix
@@ -10,22 +10,22 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bluez-headers";
-  version = "5.83";
+  version = "5.84";
 
   # This package has the source, because of the emulatorAvailable check in the
   # bluez function args, that causes an infinite recursion with Python on cross
   # builds.
   src = fetchurl {
     url = "mirror://kernel/linux/bluetooth/bluez-${finalAttrs.version}.tar.xz";
-    hash = "sha256-EIUi2QnSIFgTmb/sk9qrYgNVOc7vPdo+eZcHhcY70kw=";
+    hash = "sha256-W6c9Aw97AAh9Z4ALDjIWAa7A+JKCfHLlosg5DYyIaxE=";
   };
 
   dontConfigure = true;
   dontBuild = true;
 
   installPhase = ''
-    mkdir -p $out/include/bluetooth
-    cp -v lib/*.h "$out/include/bluetooth/"
+    mkdir -p $out/include/
+    cp -rv lib/* "$out/include/"
   '';
 
   meta = {
diff --git a/pkgs/by-name/br/brotli/package.nix b/pkgs/by-name/br/brotli/package.nix
index 80030636ab98..bb6c287c870f 100644
--- a/pkgs/by-name/br/brotli/package.nix
+++ b/pkgs/by-name/br/brotli/package.nix
@@ -4,12 +4,11 @@
   fetchFromGitHub,
   fetchpatch,
   cmake,
+  python3Packages,
   staticOnly ? stdenv.hostPlatform.isStatic,
   testers,
 }:
 
-# ?TODO: there's also python lib in there
-
 stdenv.mkDerivation (finalAttrs: {
   pname = "brotli";
   version = "1.1.0";
@@ -54,7 +53,10 @@ stdenv.mkDerivation (finalAttrs: {
     cp ../docs/*.3 $out/share/man/man3/
   '';
 
-  passthru.tests.pkg-config = testers.testMetaPkgConfig finalAttrs.finalPackage;
+  passthru.tests = {
+    pkg-config = testers.testMetaPkgConfig finalAttrs.finalPackage;
+    python = python3Packages.brotli;
+  };
 
   meta = with lib; {
     homepage = "https://github.com/google/brotli";
diff --git a/pkgs/by-name/ca/cargo-binstall/package.nix b/pkgs/by-name/ca/cargo-binstall/package.nix
index a5d03b4de076..7f00872f9a8f 100644
--- a/pkgs/by-name/ca/cargo-binstall/package.nix
+++ b/pkgs/by-name/ca/cargo-binstall/package.nix
@@ -11,16 +11,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "cargo-binstall";
-  version = "1.16.0";
+  version = "1.16.1";
 
   src = fetchFromGitHub {
     owner = "cargo-bins";
     repo = "cargo-binstall";
     tag = "v${version}";
-    hash = "sha256-zJUTwmmF/yEZwAI9R+Kau+eqB/MMqs05BoZkzR6B1VY=";
+    hash = "sha256-NqpYd/K95yTxT5WFTUURk3eS7aV4FY9J7VZCqKQBHNg=";
   };
 
-  cargoHash = "sha256-T2pIWKLJhLXZAaRjWSJGbwhQwSf5j1Qem0evVbQeoWM=";
+  cargoHash = "sha256-lFK89J7GNqU5tcNdse7LWYdUj5y30Vkowv1/o1SjwZ4=";
 
   nativeBuildInputs = [
     pkg-config
diff --git a/pkgs/by-name/cl/cloudflare-ddns/package.nix b/pkgs/by-name/cl/cloudflare-ddns/package.nix
index 618ee55a3164..01ad2288c1cf 100644
--- a/pkgs/by-name/cl/cloudflare-ddns/package.nix
+++ b/pkgs/by-name/cl/cloudflare-ddns/package.nix
@@ -29,7 +29,7 @@ buildGoModule (finalAttrs: {
     homepage = "https://github.com/favonia/cloudflare-ddns";
     mainProgram = "ddns";
     license = licenses.asl20;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ shokerplz ];
     platforms = platforms.unix ++ platforms.darwin;
   };
 })
diff --git a/pkgs/by-name/co/codebook/package.nix b/pkgs/by-name/co/codebook/package.nix
index 455de0a48643..6cccddb1caf5 100644
--- a/pkgs/by-name/co/codebook/package.nix
+++ b/pkgs/by-name/co/codebook/package.nix
@@ -8,17 +8,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "codebook";
-  version = "0.3.18";
+  version = "0.3.20";
 
   src = fetchFromGitHub {
     owner = "blopker";
     repo = "codebook";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-KRygy6YC7W7V0TFarKSnCS9Ww3M8q3xJvg925aolLmM=";
+    hash = "sha256-lsjP230lgQDOLmU4fWR4oUyQ4P2hH5YB9ZvC8ZjeFf0=";
   };
 
   buildAndTestSubdir = "crates/codebook-lsp";
-  cargoHash = "sha256-HAJglGtOy+OMZoB50Uz5vrf8IXqBKMMO/Hr9Lcry2+Q=";
+  cargoHash = "sha256-ifs3C2nNDv3pXq4hfCtBS455Sj4FVz7VEoR5LQIUHFQ=";
 
   CARGO_PROFILE_RELEASE_LTO = "fat";
   CARGO_PROFILE_RELEASE_CODEGEN_UNITS = "1";
diff --git a/pkgs/by-name/co/cosmic-applets/package.nix b/pkgs/by-name/co/cosmic-applets/package.nix
index 242380c0ab11..34d627680ed5 100644
--- a/pkgs/by-name/co/cosmic-applets/package.nix
+++ b/pkgs/by-name/co/cosmic-applets/package.nix
@@ -20,14 +20,14 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-applets";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-applets";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-eWyFLaBvs/vQCsQgQwLNgATl/wxjtT5545hfi3xZmAg=";
+    hash = "sha256-4cQ3MFV2l75ZTMkc4lri48hPE21os6xygr3MDP7RSEA=";
   };
 
   cargoHash = "sha256-XOA5yREoQHGxPI9PVYd2UsaHRCIfbb3Tkr1eovqIIow=";
diff --git a/pkgs/by-name/co/cosmic-applibrary/package.nix b/pkgs/by-name/co/cosmic-applibrary/package.nix
index 69293994e97b..cca1ad004f8a 100644
--- a/pkgs/by-name/co/cosmic-applibrary/package.nix
+++ b/pkgs/by-name/co/cosmic-applibrary/package.nix
@@ -11,17 +11,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-applibrary";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-applibrary";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-1c1ndBpF3PQ0XUBhQDcUTCvraaa/gMuPeTiS735BAGg=";
+    hash = "sha256-G8zH66v5YLqF8p1WhCBnXeI2ac3igGCAFJTvgeTTCUE=";
   };
 
-  cargoHash = "sha256-CX1/6fXL63P1J6yjvFKd91WqSf4+mf+GOtX1O9fHfgg=";
+  cargoHash = "sha256-s+Q8hj8/dqwGpCq87BWTtk/PmAg55cMI/KLL96SaqUo=";
 
   nativeBuildInputs = [
     just
diff --git a/pkgs/by-name/co/cosmic-bg/package.nix b/pkgs/by-name/co/cosmic-bg/package.nix
index b7322a4124e9..801e3ec0ba06 100644
--- a/pkgs/by-name/co/cosmic-bg/package.nix
+++ b/pkgs/by-name/co/cosmic-bg/package.nix
@@ -13,7 +13,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-bg";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
diff --git a/pkgs/by-name/co/cosmic-comp/package.nix b/pkgs/by-name/co/cosmic-comp/package.nix
index dd52793523b4..6283fd14850a 100644
--- a/pkgs/by-name/co/cosmic-comp/package.nix
+++ b/pkgs/by-name/co/cosmic-comp/package.nix
@@ -20,17 +20,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-comp";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-comp";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-JC11Y5Ow3cOHoZ/hVSczIOVKzXT+vPKieHVZW07TQcc=";
+    hash = "sha256-qE+m/LEe1ky+7A4PAzQrhZyguRsCID7IFwCx/yriYQE=";
   };
 
-  cargoHash = "sha256-3F4cR7qj5KA0Y7V5F2UNeOWW6CxoSAlbH5mxR8REOCc=";
+  cargoHash = "sha256-xaA0qwOxT/RNyUXOazJeO8oVR5pzxW15KFZ+IrWsL5o=";
 
   separateDebugInfo = true;
 
diff --git a/pkgs/by-name/co/cosmic-edit/package.nix b/pkgs/by-name/co/cosmic-edit/package.nix
index 09e5b69bf93b..5a34bef09c5b 100644
--- a/pkgs/by-name/co/cosmic-edit/package.nix
+++ b/pkgs/by-name/co/cosmic-edit/package.nix
@@ -16,14 +16,14 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-edit";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-edit";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-sZTv1iUbzC9AYXgWqIWqpjZgJez45LS2cl+p1ZhvhnE=";
+    hash = "sha256-V3O4ktSJ1cLAgtFvHqzX0AanJdir/HfqdvgCiHINyxg=";
   };
 
   cargoHash = "sha256-ELQrRDTNAX5eWWjsmWfg8BCKnaM+tqncS2O4jA3N9W8=";
diff --git a/pkgs/by-name/co/cosmic-files/package.nix b/pkgs/by-name/co/cosmic-files/package.nix
index d3094848ac73..d3660d35a6ce 100644
--- a/pkgs/by-name/co/cosmic-files/package.nix
+++ b/pkgs/by-name/co/cosmic-files/package.nix
@@ -12,14 +12,14 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-files";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-files";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-k7Y3j1h1C9guJetTYay7zCY8IF3r1LQu+WwhSkx8y8E=";
+    hash = "sha256-6r2HBxp7sZ79MKZoONXmopKea2unqZ91xaq4l6QiE9w=";
   };
 
   cargoHash = "sha256-L3a3gtqW5Zjufom8NDeklKe6rOnzd8sEaCPIVGsOqWM=";
diff --git a/pkgs/by-name/co/cosmic-greeter/package.nix b/pkgs/by-name/co/cosmic-greeter/package.nix
index 2ce1f95204b5..0720afaf9958 100644
--- a/pkgs/by-name/co/cosmic-greeter/package.nix
+++ b/pkgs/by-name/co/cosmic-greeter/package.nix
@@ -19,20 +19,20 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-greeter";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-greeter";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-9nZ8e6xocz8HfTwTeHpYOi/ptljhhEENnbmnD/DeLEI=";
+    hash = "sha256-r/xhJR3xtLxPusMUKzS2PGsS51m1jfoxZByJWcXLaoY=";
   };
 
   cargoHash = "sha256-4yRBgFrH4RBpuvChTED+ynx+PyFumoT2Z+R1gXxF4Xc=";
 
   env = {
-    VERGEN_GIT_COMMIT_DATE = "2025-11-12";
+    VERGEN_GIT_COMMIT_DATE = "2025-11-20";
     VERGEN_GIT_SHA = finalAttrs.src.tag;
   };
 
diff --git a/pkgs/by-name/co/cosmic-icons/package.nix b/pkgs/by-name/co/cosmic-icons/package.nix
index 09e071d72655..3a2f4630dfe3 100644
--- a/pkgs/by-name/co/cosmic-icons/package.nix
+++ b/pkgs/by-name/co/cosmic-icons/package.nix
@@ -9,7 +9,7 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "cosmic-icons";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
diff --git a/pkgs/by-name/co/cosmic-idle/package.nix b/pkgs/by-name/co/cosmic-idle/package.nix
index 1d55e092b988..b68b2c03827c 100644
--- a/pkgs/by-name/co/cosmic-idle/package.nix
+++ b/pkgs/by-name/co/cosmic-idle/package.nix
@@ -16,17 +16,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-idle";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-idle";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-dRvcow+rZ4sJV6pBxRIw6SCmU3aXP9uVKtFEJ9vozzI=";
+    hash = "sha256-qVrcMI7sr0mWyYW1fM6oP/6qKEhlqqyQ/WiJaWfCQPU=";
   };
 
-  cargoHash = "sha256-iFR0kFyzawlXrWItzFQbG/tKGd3Snwk/0LYkPzCkJUQ=";
+  cargoHash = "sha256-vfuhXT/MJHchJdW+3GPuvZbYVdClpsbNfOzLKWW4LPY=";
 
   nativeBuildInputs = [
     just
diff --git a/pkgs/by-name/co/cosmic-initial-setup/package.nix b/pkgs/by-name/co/cosmic-initial-setup/package.nix
index aacd9c69cb08..daaab3772438 100644
--- a/pkgs/by-name/co/cosmic-initial-setup/package.nix
+++ b/pkgs/by-name/co/cosmic-initial-setup/package.nix
@@ -14,7 +14,7 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-initial-setup";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
diff --git a/pkgs/by-name/co/cosmic-launcher/package.nix b/pkgs/by-name/co/cosmic-launcher/package.nix
index 3f8764c05800..a1ab169f9548 100644
--- a/pkgs/by-name/co/cosmic-launcher/package.nix
+++ b/pkgs/by-name/co/cosmic-launcher/package.nix
@@ -11,17 +11,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-launcher";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-launcher";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-zLZJbf7LuGXnDd4F6ReS6BB6yvkvPOq0OOXZbKZJdec=";
+    hash = "sha256-lVNvmpiShkdT+VZMxV1bvYyC17edaepwlkmOvNMng8k=";
   };
 
-  cargoHash = "sha256-2kkKPU4iEsInLwJyEyJ15/T1pVfDsKD69DISGilNWws=";
+  cargoHash = "sha256-pHW7kBbEQ8P9Ugkgzn1olSlMCeetuNQ2jMJyEteoeIo=";
 
   nativeBuildInputs = [
     just
@@ -51,7 +51,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
         cosmic-autologin-noxwayland
         ;
     };
-    passthru.updateScript = nix-update-script {
+    updateScript = nix-update-script {
       extraArgs = [
         "--version"
         "unstable"
diff --git a/pkgs/by-name/co/cosmic-notifications/package.nix b/pkgs/by-name/co/cosmic-notifications/package.nix
index 7b3d534f916e..221320dd0ffe 100644
--- a/pkgs/by-name/co/cosmic-notifications/package.nix
+++ b/pkgs/by-name/co/cosmic-notifications/package.nix
@@ -12,7 +12,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-notifications";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
diff --git a/pkgs/by-name/co/cosmic-osd/package.nix b/pkgs/by-name/co/cosmic-osd/package.nix
index bf851d99eed4..5b19c4de318b 100644
--- a/pkgs/by-name/co/cosmic-osd/package.nix
+++ b/pkgs/by-name/co/cosmic-osd/package.nix
@@ -13,14 +13,14 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-osd";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-osd";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-5GrYWrg/trnzk5gtelVUPmtm3MWiTyqaq6QIGadr3t8=";
+    hash = "sha256-gAmsLScFKgs2bUf0c4NuP2Zuuz+vz8Y7w4uQtKzXSRo=";
   };
 
   cargoHash = "sha256-cpNp/by8TU2lbb2d3smxUr48mTSLnoPXseiRZScwSXI=";
diff --git a/pkgs/by-name/co/cosmic-panel/package.nix b/pkgs/by-name/co/cosmic-panel/package.nix
index fdec631e661b..f1539687b7b1 100644
--- a/pkgs/by-name/co/cosmic-panel/package.nix
+++ b/pkgs/by-name/co/cosmic-panel/package.nix
@@ -11,14 +11,14 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-panel";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-panel";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-u3jRjDNwF3QY4R/I99C5Ko34wtmX4ZqhnXnUbrk+iac=";
+    hash = "sha256-gvEHieM8osGyRrkeE8gEOPduTv3y3KgoZ2YhFgW5qp8=";
   };
 
   cargoHash = "sha256-ZkjXZrcA4qKHSjEOxj7+j10PxJw/du8B2Mee2fxPJxs=";
diff --git a/pkgs/by-name/co/cosmic-player/package.nix b/pkgs/by-name/co/cosmic-player/package.nix
index 9b8f785a19ab..5b9032fa2ada 100644
--- a/pkgs/by-name/co/cosmic-player/package.nix
+++ b/pkgs/by-name/co/cosmic-player/package.nix
@@ -18,14 +18,14 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-player";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-player";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-TiD1gQ44Oqm0qWmZsIcFBG4fjmlr4LWaAMjOx+ulOcE=";
+    hash = "sha256-RNDc+NCih1bsdqa4DCOrtiKPsdVaQ6fvj9VGQAoNri8=";
   };
 
   cargoHash = "sha256-ST/04USAIHvySOoKvh5EPCDlUOjHxbiRFouLunaleKw=";
diff --git a/pkgs/by-name/co/cosmic-randr/package.nix b/pkgs/by-name/co/cosmic-randr/package.nix
index e008fed1b5fa..a921ee941fe8 100644
--- a/pkgs/by-name/co/cosmic-randr/package.nix
+++ b/pkgs/by-name/co/cosmic-randr/package.nix
@@ -12,7 +12,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-randr";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
diff --git a/pkgs/by-name/co/cosmic-screenshot/package.nix b/pkgs/by-name/co/cosmic-screenshot/package.nix
index 3daa9bb3f902..aa0f12a16fcf 100644
--- a/pkgs/by-name/co/cosmic-screenshot/package.nix
+++ b/pkgs/by-name/co/cosmic-screenshot/package.nix
@@ -6,11 +6,12 @@
   just,
   pkg-config,
   nixosTests,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-screenshot";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
@@ -38,13 +39,23 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "target/${stdenv.hostPlatform.rust.cargoShortTarget}"
   ];
 
-  passthru.tests = {
-    inherit (nixosTests)
-      cosmic
-      cosmic-autologin
-      cosmic-noxwayland
-      cosmic-autologin-noxwayland
-      ;
+  passthru = {
+    tests = {
+      inherit (nixosTests)
+        cosmic
+        cosmic-autologin
+        cosmic-noxwayland
+        cosmic-autologin-noxwayland
+        ;
+    };
+    updateScript = nix-update-script {
+      extraArgs = [
+        "--version"
+        "unstable"
+        "--version-regex"
+        "epoch-(.*)"
+      ];
+    };
   };
 
   meta = with lib; {
diff --git a/pkgs/by-name/co/cosmic-session/package.nix b/pkgs/by-name/co/cosmic-session/package.nix
index f2a174192055..3efee330f80e 100644
--- a/pkgs/by-name/co/cosmic-session/package.nix
+++ b/pkgs/by-name/co/cosmic-session/package.nix
@@ -7,11 +7,12 @@
   dbus,
   stdenv,
   nixosTests,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-session";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
@@ -60,6 +61,14 @@ rustPlatform.buildRustPackage (finalAttrs: {
         cosmic-autologin-noxwayland
         ;
     };
+    updateScript = nix-update-script {
+      extraArgs = [
+        "--version"
+        "unstable"
+        "--version-regex"
+        "epoch-(.*)"
+      ];
+    };
   };
 
   meta = {
diff --git a/pkgs/by-name/co/cosmic-settings-daemon/package.nix b/pkgs/by-name/co/cosmic-settings-daemon/package.nix
index aec760648ac6..5680859fe516 100644
--- a/pkgs/by-name/co/cosmic-settings-daemon/package.nix
+++ b/pkgs/by-name/co/cosmic-settings-daemon/package.nix
@@ -11,18 +11,19 @@
   udev,
   openssl,
   nixosTests,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-settings-daemon";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-settings-daemon";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-WLZJx8FwseCD7hHU60+HekNBxUE6B/6HRhP8oqokTNI=";
+    hash = "sha256-w+k0x+9GlbAEZshfwIcO6I8hVhHdARJn/CA7QBDOVCo=";
   };
 
   postPatch = ''
@@ -50,13 +51,23 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   dontCargoInstall = true;
 
-  passthru.tests = {
-    inherit (nixosTests)
-      cosmic
-      cosmic-autologin
-      cosmic-noxwayland
-      cosmic-autologin-noxwayland
-      ;
+  passthru = {
+    tests = {
+      inherit (nixosTests)
+        cosmic
+        cosmic-autologin
+        cosmic-noxwayland
+        cosmic-autologin-noxwayland
+        ;
+    };
+    updateScript = nix-update-script {
+      extraArgs = [
+        "--version"
+        "unstable"
+        "--version-regex"
+        "epoch-(.*)"
+      ];
+    };
   };
 
   meta = {
diff --git a/pkgs/by-name/co/cosmic-settings/package.nix b/pkgs/by-name/co/cosmic-settings/package.nix
index 181a5eb64eb8..ef27d12bc7bd 100644
--- a/pkgs/by-name/co/cosmic-settings/package.nix
+++ b/pkgs/by-name/co/cosmic-settings/package.nix
@@ -28,14 +28,14 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-settings";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-settings";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-mE5zcFBFHBLisxrBJRYC0C33MrW5dG0DyzKPJ5kgT1c=";
+    hash = "sha256-CIY7SAS6WCn41mM+MpKaCm08cfnVIqFl+/t5u5717Lw=";
   };
 
   cargoHash = "sha256-Su+yAQLr3Us8YNU8z83XO1UDjjOY3SCGnkmwGaIGFho=";
diff --git a/pkgs/by-name/co/cosmic-store/package.nix b/pkgs/by-name/co/cosmic-store/package.nix
index 6431f32d0017..3c060790157b 100644
--- a/pkgs/by-name/co/cosmic-store/package.nix
+++ b/pkgs/by-name/co/cosmic-store/package.nix
@@ -15,14 +15,14 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-store";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-store";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-uY+W1FqhAMUe7X9j9G8YP+GCcbjzRvGyRxn4BW8o0Zg=";
+    hash = "sha256-6Qn9+kwuiArxTHpN410gy+7bKXBwv87OPPDMatAYr38=";
   };
 
   cargoHash = "sha256-nJLowAuWvj5JfmPyExQyfCJ9pqNJ0OdzPPku9z7RDWc=";
diff --git a/pkgs/by-name/co/cosmic-term/package.nix b/pkgs/by-name/co/cosmic-term/package.nix
index 17ec757b6584..789751c7e352 100644
--- a/pkgs/by-name/co/cosmic-term/package.nix
+++ b/pkgs/by-name/co/cosmic-term/package.nix
@@ -15,14 +15,14 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-term";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-term";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-O2vUdwHP+BgOsBu9dcx34WPFGsVXbG7enxMT7dRiq5o=";
+    hash = "sha256-kyswCFnor2tg64BodSwiRYqzjxRN6r7zqm2z/egmX1I=";
   };
 
   cargoHash = "sha256-7+1tvJ/B+YITI5XXr1A+jlRRNRoNZ1ZsGeeAfGPT/00=";
diff --git a/pkgs/by-name/co/cosmic-wallpapers/package.nix b/pkgs/by-name/co/cosmic-wallpapers/package.nix
index 9ee777e8599d..2312df47ac71 100644
--- a/pkgs/by-name/co/cosmic-wallpapers/package.nix
+++ b/pkgs/by-name/co/cosmic-wallpapers/package.nix
@@ -7,7 +7,7 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "cosmic-wallpapers";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
diff --git a/pkgs/by-name/co/cosmic-workspaces-epoch/package.nix b/pkgs/by-name/co/cosmic-workspaces-epoch/package.nix
index 07b1d4fa52a5..0beaa33ca243 100644
--- a/pkgs/by-name/co/cosmic-workspaces-epoch/package.nix
+++ b/pkgs/by-name/co/cosmic-workspaces-epoch/package.nix
@@ -14,17 +14,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-workspaces-epoch";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-workspaces-epoch";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-WHMOA7fNPIAwaQmzqyo+XlBYl+13cz0LrRpT0GUa8Vs=";
+    hash = "sha256-7iOiVrMHpE5oG/qIH0DIgBeHEEm0x7HIDLv64FFs300=";
   };
 
-  cargoHash = "sha256-BE6s2dmbgXlFXrtd8b9k2LltLnegLzWbIUlaEQvv+5o=";
+  cargoHash = "sha256-7BdyHz66A+QhJY0haohaQiNkhpmX9rqIW9gD8E4Q7Qg=";
 
   separateDebugInfo = true;
 
diff --git a/pkgs/by-name/cr/croc/package.nix b/pkgs/by-name/cr/croc/package.nix
index 52c9f555acf1..eaed61dc285c 100644
--- a/pkgs/by-name/cr/croc/package.nix
+++ b/pkgs/by-name/cr/croc/package.nix
@@ -3,24 +3,41 @@
   buildGoModule,
   fetchFromGitHub,
   callPackage,
+  installShellFiles,
   nixosTests,
+  stdenv,
 }:
 
 buildGoModule rec {
   pname = "croc";
-  version = "10.3.0";
+  version = "10.3.1";
 
   src = fetchFromGitHub {
     owner = "schollz";
     repo = "croc";
     rev = "v${version}";
-    hash = "sha256-5mxrfYAR4kTy9hdbsC7wFdroHf68dknPH3mq4KXG36Y=";
+    hash = "sha256-oNk4ReqteTeWKjsmVPC2yVRv1A9WN9jUbiT40flfM+o=";
   };
 
   vendorHash = "sha256-xEF1vjYQaeDYxcC3FTgR0zCFqvziNIrJVpJJT4o1cVU=";
 
   subPackages = [ "." ];
 
+  nativeBuildInputs = [
+    installShellFiles
+  ];
+
+  postInstall = ''
+    installShellCompletion --cmd croc \
+      --bash src/install/bash_autocomplete \
+  ''
+  + lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
+    --fish <($out/bin/croc generate-fish-completion) \
+  ''
+  + ''
+    --zsh src/install/zsh_autocomplete
+  '';
+
   passthru = {
     tests = {
       local-relay = callPackage ./test-local-relay.nix { };
diff --git a/pkgs/by-name/cu/cue/package.nix b/pkgs/by-name/cu/cue/package.nix
index ee2c8a058abf..230f20d04491 100644
--- a/pkgs/by-name/cu/cue/package.nix
+++ b/pkgs/by-name/cu/cue/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "cue";
-  version = "0.15.0";
+  version = "0.15.1";
 
   src = fetchFromGitHub {
     owner = "cue-lang";
     repo = "cue";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-yyvIjaOElEHR75o+DgVOG1EklXaWGdjvv15iMvfbkeA=";
+    hash = "sha256-0DxJK5S1uWR5MbI8VzUxQv+YTwIIm1yK77Td+Qf278I=";
   };
 
   vendorHash = "sha256-ivFw62+pg503EEpRsdGSQrFNah87RTUrRXUSPZMFLG4=";
diff --git a/pkgs/by-name/cu/cups/package.nix b/pkgs/by-name/cu/cups/package.nix
index cbb6616f968c..9af3d80d2e4f 100644
--- a/pkgs/by-name/cu/cups/package.nix
+++ b/pkgs/by-name/cu/cups/package.nix
@@ -10,8 +10,8 @@
   libtiff,
   pam,
   dbus,
-  enableSystemd ? lib.meta.availableOn stdenv.hostPlatform systemd,
-  systemd,
+  enableSystemd ? lib.meta.availableOn stdenv.hostPlatform systemdLibs,
+  systemdLibs,
   acl,
   gmp,
   darwin,
@@ -76,7 +76,7 @@ stdenv.mkDerivation rec {
     dbus
     acl
   ]
-  ++ lib.optional enableSystemd systemd;
+  ++ lib.optional enableSystemd systemdLibs;
 
   propagatedBuildInputs = [ gmp ];
 
diff --git a/pkgs/by-name/cu/curlMinimal/fix-h2-paused-transfers.patch b/pkgs/by-name/cu/curlMinimal/fix-h2-paused-transfers.patch
deleted file mode 100644
index 50e202684b8c..000000000000
--- a/pkgs/by-name/cu/curlMinimal/fix-h2-paused-transfers.patch
+++ /dev/null
@@ -1,27 +0,0 @@
-From 7e91f24c73256af59ac9061c41b73a184c4690aa Mon Sep 17 00:00:00 2001
-From: Stefan Eissing <stefan@eissing.org>
-Date: Mon, 3 Nov 2025 15:07:57 +0100
-Subject: [PATCH] cw-out: fix EAGAIN handling on pause
-
-The interim CURLE_AGAIN result was not always converted to a
-CURLE_OK and then caused write callers to report a failure.
-
-Fixes #19334
-Reported-by: pennae on github
-Closes #19338
----
- lib/cw-out.c | 1 +
- 1 file changed, 1 insertion(+)
-
-diff --git a/lib/cw-out.c b/lib/cw-out.c
-index 1f4031649267..9c0a36e7e5e2 100644
---- a/lib/cw-out.c
-+++ b/lib/cw-out.c
-@@ -302,6 +302,7 @@ static CURLcode cw_out_buf_flush(struct cw_out_ctx *ctx,
-                               &consumed);
-     if(result && (result != CURLE_AGAIN))
-       return result;
-+    result = CURLE_OK;
- 
-     if(consumed) {
-       if(consumed == curlx_dyn_len(&cwbuf->b)) {
diff --git a/pkgs/by-name/cu/curlMinimal/package.nix b/pkgs/by-name/cu/curlMinimal/package.nix
index 244454016e47..f64a4c9de767 100644
--- a/pkgs/by-name/cu/curlMinimal/package.nix
+++ b/pkgs/by-name/cu/curlMinimal/package.nix
@@ -86,7 +86,7 @@ assert
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "curl";
-  version = "8.16.0";
+  version = "8.17.0";
 
   src = fetchurl {
     urls = [
@@ -95,17 +95,9 @@ stdenv.mkDerivation (finalAttrs: {
         builtins.replaceStrings [ "." ] [ "_" ] finalAttrs.version
       }/curl-${finalAttrs.version}.tar.xz"
     ];
-    hash = "sha256-QMjN28tsxiUcA96kI6Ryps6kA3vmVLpc9d7G6y0i/x0=";
+    hash = "sha256-lV9ucprWs1ZiYOj+9oYg52ujwxrPChhSRBahhaz3eZI=";
   };
 
-  patches = [
-    # Bug introduced in curl@fa915b (8.16.0) https://github.com/curl/curl/issues/19334 Paused
-    # HTTP/2 transfers will return the wrong errors and trash the whole
-    # transfer. Remove this patch once curl is updated to 8.17.0 which will be
-    # released on the 5th November 2025.
-    ./fix-h2-paused-transfers.patch
-  ];
-
   # this could be accomplished by updateAutotoolsGnuConfigScriptsHook, but that causes infinite recursion
   # necessary for FreeBSD code path in configure
   postPatch = ''
diff --git a/pkgs/by-name/da/dav1d/package.nix b/pkgs/by-name/da/dav1d/package.nix
index 23d72c245d00..443ad79790c5 100644
--- a/pkgs/by-name/da/dav1d/package.nix
+++ b/pkgs/by-name/da/dav1d/package.nix
@@ -27,13 +27,13 @@ assert useVulkan -> withExamples;
 
 stdenv.mkDerivation rec {
   pname = "dav1d";
-  version = "1.5.1";
+  version = "1.5.2";
 
   src = fetchFromGitHub {
     owner = "videolan";
     repo = "dav1d";
     rev = version;
-    hash = "sha256-qcs9QoZ/uWEQ8l1ChZ8nYctZnnWJ0VvCw1q2rEktC9g=";
+    hash = "sha256-rxRO5EWjrOUsCYXd2rDDhfcEZbfSuMfjujRAHTqUYhI=";
   };
 
   outputs = [
diff --git a/pkgs/by-name/dc/dconf/package.nix b/pkgs/by-name/dc/dconf/package.nix
index 916d5551f93c..70ef73c20761 100644
--- a/pkgs/by-name/dc/dconf/package.nix
+++ b/pkgs/by-name/dc/dconf/package.nix
@@ -25,9 +25,9 @@
   withDocs ? withIntrospection,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "dconf";
-  version = "0.40.0";
+  version = "0.49.0";
 
   outputs = [
     "out"
@@ -37,8 +37,8 @@ stdenv.mkDerivation rec {
   ++ lib.optional withDocs "devdoc";
 
   src = fetchurl {
-    url = "mirror://gnome/sources/${pname}/${lib.versions.majorMinor version}/${pname}-${version}.tar.xz";
-    sha256 = "0cs5nayg080y8pb9b7qccm1ni8wkicdmqp1jsgc22110r6j24zyg";
+    url = "mirror://gnome/sources/dconf/${lib.versions.majorMinor finalAttrs.version}/dconf-${finalAttrs.version}.tar.xz";
+    sha256 = "FqR+SaWBVtu5ZXjhcIMlKZ5MGe6pvhKNW9Ev0JY9bDY=";
   };
 
   nativeBuildInputs = [
@@ -79,15 +79,13 @@ stdenv.mkDerivation rec {
     !stdenv.hostPlatform.isAarch32 && !stdenv.hostPlatform.isAarch64 && !stdenv.hostPlatform.isDarwin;
 
   postPatch = ''
-    chmod +x meson_post_install.py tests/test-dconf.py
-    patchShebangs meson_post_install.py
-    patchShebangs tests/test-dconf.py
+    chmod +x tests/test-dconf.py tests/shellcheck.sh
+    patchShebangs tests/test-dconf.py tests/shellcheck.sh
   '';
 
   passthru = {
     updateScript = gnome.updateScript {
-      packageName = pname;
-      versionPolicy = "odd-unstable";
+      packageName = "dconf";
     };
     tests = { inherit (nixosTests) dconf; };
   };
@@ -103,4 +101,4 @@ stdenv.mkDerivation rec {
     teams = [ teams.gnome ];
     mainProgram = "dconf";
   };
-}
+})
diff --git a/pkgs/by-name/do/docfd/package.nix b/pkgs/by-name/do/docfd/package.nix
index 14e0d9983153..c8ea6c3c58f7 100644
--- a/pkgs/by-name/do/docfd/package.nix
+++ b/pkgs/by-name/do/docfd/package.nix
@@ -14,7 +14,7 @@
 
 ocamlPackages.buildDunePackage rec {
   pname = "docfd";
-  version = "12.0.0";
+  version = "12.1.0";
 
   minimalOCamlVersion = "5.1";
 
@@ -22,7 +22,7 @@ ocamlPackages.buildDunePackage rec {
     owner = "darrenldl";
     repo = "docfd";
     rev = version;
-    hash = "sha256-Tb5J9FgI2JBpl5oejWRT3ixzt7kufnM+Xy6DdiB9s98=";
+    hash = "sha256-fDvjnqAH0ALP1im34vxmXtO7kst0G/iPu3VLLBas5YI=";
   };
 
   # Compatibility with nottui ≥ 0.4
diff --git a/pkgs/by-name/do/dolfinx/package.nix b/pkgs/by-name/do/dolfinx/package.nix
index 5711046df824..93def43bc33b 100644
--- a/pkgs/by-name/do/dolfinx/package.nix
+++ b/pkgs/by-name/do/dolfinx/package.nix
@@ -26,14 +26,14 @@ let
   );
 in
 stdenv.mkDerivation (finalAttrs: {
-  version = "0.10.0.post2";
+  version = "0.10.0.post3";
   pname = "dolfinx";
 
   src = fetchFromGitHub {
     owner = "fenics";
     repo = "dolfinx";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Q1dQkDU6kfP5LFS0UwPwsff2hcHLAa3ZOk/hG0gGAbs=";
+    hash = "sha256-YsFya92lz9Twc1PsSLGj6tJNvKb+MQfpmN/qOFxbe34=";
   };
 
   preConfigure = ''
diff --git a/pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix b/pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix
index 068439c2091e..b68fc6eb9f4b 100644
--- a/pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix
+++ b/pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix
@@ -1,7 +1,7 @@
 { mkDprintPlugin }:
 mkDprintPlugin {
   description = "Biome (JS/TS) wrapper plugin";
-  hash = "sha256-6UIeTsS5ovtH79gP4PGn0ePttqr4Vuo+RgXTk+jSZjE=";
+  hash = "sha256-V8lXwGRWGvl/g2kjqL8Ei1N7V0nuTP2WcLFWJvC7D+A=";
   initConfig = {
     configExcludes = [ "**/node_modules" ];
     configKey = "biome";
@@ -16,6 +16,6 @@ mkDprintPlugin {
   };
   pname = "dprint-plugin-biome";
   updateUrl = "https://plugins.dprint.dev/dprint/biome/latest.json";
-  url = "https://plugins.dprint.dev/biome-0.11.4.wasm";
-  version = "0.11.4";
+  url = "https://plugins.dprint.dev/biome-0.11.6.wasm";
+  version = "0.11.6";
 }
diff --git a/pkgs/by-name/ec/ecspresso/package.nix b/pkgs/by-name/ec/ecspresso/package.nix
index c05d90e3f81b..a081936553e9 100644
--- a/pkgs/by-name/ec/ecspresso/package.nix
+++ b/pkgs/by-name/ec/ecspresso/package.nix
@@ -7,20 +7,20 @@
 
 buildGoModule rec {
   pname = "ecspresso";
-  version = "2.6.3";
+  version = "2.6.4";
 
   src = fetchFromGitHub {
     owner = "kayac";
     repo = "ecspresso";
     tag = "v${version}";
-    hash = "sha256-ZruQx2Nm/1An9yGNhQ/2Kbah4eSFBD/pp3c6WZIBGXA=";
+    hash = "sha256-7Lli3PQZDmMBzgVbHy8ayweK+yn23IVqPTI6M+Un5i0=";
   };
 
   subPackages = [
     "cmd/ecspresso"
   ];
 
-  vendorHash = "sha256-oq2BOzSHwAq/gNBknwm1LXUKu+est/kjM1jlVBvQZbg=";
+  vendorHash = "sha256-UkfkCEyHwxOEEVcxtsMdeRuJhQqW3vLHEDf8+O82zs4=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/es/esphome/package.nix b/pkgs/by-name/es/esphome/package.nix
index 93c366b2e72a..fe94bdb69450 100644
--- a/pkgs/by-name/es/esphome/package.nix
+++ b/pkgs/by-name/es/esphome/package.nix
@@ -33,14 +33,14 @@ let
 in
 python.pkgs.buildPythonApplication rec {
   pname = "esphome";
-  version = "2025.10.5";
+  version = "2025.11.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "esphome";
     repo = "esphome";
     tag = version;
-    hash = "sha256-o40zMoqgjBpkn80dUvr7mJQ/EtmIHEI/cf/E+wbBPOw=";
+    hash = "sha256-ezyuV9PcZ5SsJc5viyV+8n+pW8k0SV2bXr+JPVkOdus=";
   };
 
   patches = [
@@ -64,10 +64,6 @@ python.pkgs.buildPythonApplication rec {
   pythonRemoveDeps = [
     "esptool"
     "platformio"
-    # esp-idf v5.1 uses esp-idf-kconfig instead:
-    # https://github.com/espressif/esp-idf/blob/release/v5.1/tools/requirements/requirements.core.txt#L15
-    # Can be removed once this pr is released: https://github.com/esphome/esphome/pull/11210
-    "kconfiglib"
   ];
 
   postPatch = ''
@@ -82,6 +78,7 @@ python.pkgs.buildPythonApplication rec {
   dependencies = with python.pkgs; [
     aioesphomeapi
     argcomplete
+    bleak
     cairosvg
     click
     colorama
@@ -137,7 +134,10 @@ python.pkgs.buildPythonApplication rec {
       pytest-mock
       pytestCheckHook
     ]
-    ++ [ versionCheckHook ];
+    ++ [
+      git
+      versionCheckHook
+    ];
 
   disabledTestPaths = [
     # platformio builds; requires networking for dependency resolution
@@ -172,6 +172,9 @@ python.pkgs.buildPythonApplication rec {
     "test_upload_using_esptool_with_file_path"
     # AssertionError: Expected 'run_external_command' to have been called once. Called 0 times.
     "test_run_platformio_cli_sets_environment_variables"
+    # Expects a full git clone
+    "test_clang_tidy_mode_full_scan"
+    "test_clang_tidy_mode_targeted_scan"
   ];
 
   versionCheckProgramArg = "--version";
diff --git a/pkgs/by-name/ex/exfatprogs/package.nix b/pkgs/by-name/ex/exfatprogs/package.nix
index 28f0f8e44c7a..dec77d11b738 100644
--- a/pkgs/by-name/ex/exfatprogs/package.nix
+++ b/pkgs/by-name/ex/exfatprogs/package.nix
@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation rec {
   pname = "exfatprogs";
-  version = "1.2.9";
+  version = "1.3.0";
 
   src = fetchFromGitHub {
     owner = "exfatprogs";
     repo = "exfatprogs";
     rev = version;
-    sha256 = "sha256-EENBlf5beuLJ++N7YThxzz2I/FXzb02by3KOUPOuEV4=";
+    sha256 = "sha256-2kD2ZENAyhApYHs6+NNYkxfLj5fw/cIHRUhw0UnQx04=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/fi/firebase-tools/package.nix b/pkgs/by-name/fi/firebase-tools/package.nix
index df9d5950bf75..73fd930c97d0 100644
--- a/pkgs/by-name/fi/firebase-tools/package.nix
+++ b/pkgs/by-name/fi/firebase-tools/package.nix
@@ -10,16 +10,16 @@
 
 buildNpmPackage rec {
   pname = "firebase-tools";
-  version = "14.24.1";
+  version = "14.26.0";
 
   src = fetchFromGitHub {
     owner = "firebase";
     repo = "firebase-tools";
     tag = "v${version}";
-    hash = "sha256-eXADtJFQWC5Qf013fkJ4AdukyaKlc5Rorys/jNG9f+E=";
+    hash = "sha256-rtLjvD7HYqc2acteeBZEnFqMkAK3f5/5X8hgwPVMv+k=";
   };
 
-  npmDepsHash = "sha256-m5Rz2JH9e/rJ4tKwNiiZb7wnOmeMDxYuUrVx6QZy25w=";
+  npmDepsHash = "sha256-BqMXNV0sSfy+hitq4Ngv1OrYgC/vyqZCG39S0HMJh4o=";
 
   # No more package-lock.json in upstream src
   postPatch = ''
diff --git a/pkgs/by-name/fl/fluidsynth/package.nix b/pkgs/by-name/fl/fluidsynth/package.nix
index 88e013502421..60852d919bf6 100644
--- a/pkgs/by-name/fl/fluidsynth/package.nix
+++ b/pkgs/by-name/fl/fluidsynth/package.nix
@@ -13,13 +13,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "fluidsynth";
-  version = "2.5.0";
+  version = "2.5.1";
 
   src = fetchFromGitHub {
     owner = "FluidSynth";
     repo = "fluidsynth";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ouPCbXg9vgxSAHsReC7dmF1cstQZ1HaUoWcLChE35Hk=";
+    hash = "sha256-gTkW2X7fcmxJwYf13Yma6cBigz4sbsb99dBSYTDlcyY=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/by-name/ge/gemini-cli/package.nix b/pkgs/by-name/ge/gemini-cli/package.nix
index 38783059c419..b58aa9ddfc24 100644
--- a/pkgs/by-name/ge/gemini-cli/package.nix
+++ b/pkgs/by-name/ge/gemini-cli/package.nix
@@ -13,16 +13,16 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "gemini-cli";
-  version = "0.17.0";
+  version = "0.17.1";
 
   src = fetchFromGitHub {
     owner = "google-gemini";
     repo = "gemini-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-pJveHjguNl8J67zu6O867iM/JlXM9VTAokIQYHvxUYs=";
+    hash = "sha256-zfORrAMVozHiUawWiy3TMT+pjEaRJ/DrHeDFPJiCp38=";
   };
 
-  npmDepsHash = "sha256-SVjUt8xoBtuZJa0mUfZCf/XXxc8OxDU7FG8ZYPTM3j4=";
+  npmDepsHash = "sha256-dKaKRuHzvNJgi8LP4kKsb68O5k2MTqblQ+7cjYqLqs0=";
 
   nativeBuildInputs = [
     jq
diff --git a/pkgs/by-name/gi/gi-docgen/package.nix b/pkgs/by-name/gi/gi-docgen/package.nix
index 1ff554f2f4a5..9e04c3425914 100644
--- a/pkgs/by-name/gi/gi-docgen/package.nix
+++ b/pkgs/by-name/gi/gi-docgen/package.nix
@@ -9,13 +9,13 @@
 
 python3.pkgs.buildPythonApplication rec {
   pname = "gi-docgen";
-  version = "2025.4";
+  version = "2025.5";
 
   format = "other";
 
   src = fetchurl {
     url = "mirror://gnome/sources/gi-docgen/${lib.versions.major version}/gi-docgen-${version}.tar.xz";
-    hash = "sha256-Zshl1Fn+vfteQHiojfBhg2IMPpH3JtHcYI2I7jYFUm4=";
+    hash = "sha256-JXmjP/h7Yi0Q0QLJG30OzlBjQLcONNu2UiFj4WyQrKM=";
   };
 
   depsBuildBuild = [
diff --git a/pkgs/by-name/gs/gsettings-desktop-schemas/package.nix b/pkgs/by-name/gs/gsettings-desktop-schemas/package.nix
index cbeece5a07aa..c4ee1db9fae9 100644
--- a/pkgs/by-name/gs/gsettings-desktop-schemas/package.nix
+++ b/pkgs/by-name/gs/gsettings-desktop-schemas/package.nix
@@ -17,11 +17,11 @@
 
 stdenv.mkDerivation rec {
   pname = "gsettings-desktop-schemas";
-  version = "49.0";
+  version = "49.1";
 
   src = fetchurl {
     url = "mirror://gnome/sources/${pname}/${lib.versions.major version}/${pname}-${version}.tar.xz";
-    hash = "sha256-kSkFzEU4KIikdwLtEQHGsI69ASKjKmfZQKuBFqlsUg0=";
+    hash = "sha256-d3p/g9XlqAdrm/gJyyQQGxsbqcIwI148PejhOWjtDmM=";
   };
 
   strictDeps = true;
diff --git a/pkgs/by-name/ha/haguichi/package.nix b/pkgs/by-name/ha/haguichi/package.nix
index 0575fa7bf918..27e840b2a81f 100644
--- a/pkgs/by-name/ha/haguichi/package.nix
+++ b/pkgs/by-name/ha/haguichi/package.nix
@@ -18,13 +18,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "haguichi";
-  version = "1.5.2";
+  version = "1.5.3";
 
   src = fetchFromGitHub {
     owner = "ztefn";
     repo = "haguichi";
     tag = finalAttrs.version;
-    hash = "sha256-IEcBCiPU9NPrAbTCnONraeVb/Nlq/u4fsEZX+Vd1DiY=";
+    hash = "sha256-cVM8VbW8aFq9fXFiVfGhkIhyqSXG2zyB3HyA5tTEDVY=";
   };
 
   postPatch = ''
diff --git a/pkgs/by-name/ha/haproxy/package.nix b/pkgs/by-name/ha/haproxy/package.nix
index cc5c4be08fc1..0998f1f775c6 100644
--- a/pkgs/by-name/ha/haproxy/package.nix
+++ b/pkgs/by-name/ha/haproxy/package.nix
@@ -43,11 +43,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "haproxy";
-  version = "3.2.8";
+  version = "3.2.9";
 
   src = fetchurl {
     url = "https://www.haproxy.org/download/${lib.versions.majorMinor finalAttrs.version}/src/haproxy-${finalAttrs.version}.tar.gz";
-    hash = "sha256-RnA/uUcg+SzOKwgEmkDZF2liA3umdohcVaVr2dYl58I=";
+    hash = "sha256-5mDRQbKQGfTRmHhbCDTMPpyW787rgHwv/y/JNb0zVMI=";
   };
 
   buildInputs = [
diff --git a/pkgs/by-name/hw/hwdata/package.nix b/pkgs/by-name/hw/hwdata/package.nix
index 28440ad5a0be..b8b15bd8ca18 100644
--- a/pkgs/by-name/hw/hwdata/package.nix
+++ b/pkgs/by-name/hw/hwdata/package.nix
@@ -6,13 +6,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "hwdata";
-  version = "0.400";
+  version = "0.401";
 
   src = fetchFromGitHub {
     owner = "vcrhonek";
     repo = "hwdata";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-X3LL3PZjEiGrkntegcSWNW2Wsx/IpdTowSVp/F4ov+E=";
+    hash = "sha256-2NZwylrUfnzA0aE+xlVZ7QCpCzfW9DwGzRVHirt0TRU=";
   };
 
   doCheck = false; # this does build machine-specific checks (e.g. enumerates PCI bus)
diff --git a/pkgs/by-name/in/inetutils/package.nix b/pkgs/by-name/in/inetutils/package.nix
index ee1a08aee946..ffc901683e0d 100644
--- a/pkgs/by-name/in/inetutils/package.nix
+++ b/pkgs/by-name/in/inetutils/package.nix
@@ -71,16 +71,18 @@ stdenv.mkDerivation rec {
   postInstall = ''
     mkdir $apparmor
     cat >$apparmor/bin.ping <<EOF
-    $out/bin/ping {
+    abi <abi/4.0>,
+    include <tunables/global>
+    profile $out/bin/ping {
       include <abstractions/base>
       include <abstractions/consoles>
       include <abstractions/nameservice>
       include "${apparmorRulesFromClosure { name = "ping"; } [ stdenv.cc.libc ]}"
-      include <local/bin.ping>
       capability net_raw,
       network inet raw,
       network inet6 raw,
       mr $out/bin/ping,
+      include if exists <local/bin.ping>
     }
     EOF
   '';
diff --git a/pkgs/by-name/is/isocodes/package.nix b/pkgs/by-name/is/isocodes/package.nix
index 68c43ab4be2a..a8af805b92de 100644
--- a/pkgs/by-name/is/isocodes/package.nix
+++ b/pkgs/by-name/is/isocodes/package.nix
@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "iso-codes";
-  version = "4.18.0";
+  version = "4.19.0";
 
   src = fetchurl {
     url =
       with finalAttrs;
       "https://salsa.debian.org/iso-codes-team/iso-codes/-/archive/v${version}/${pname}-v${version}.tar.gz";
-    hash = "sha256-UR9nv0tRqnfxfEWtv/UzJCtQ8eNw/kmlcGtjQZAvrIc=";
+    hash = "sha256-SxQ6iR/rfRu2TkT+PvJT7za6EYXR0SnBQlM43G5G4n0=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/ko/kolla/package.nix b/pkgs/by-name/ko/kolla/package.nix
index 7caac82ac09e..88b0ad2c2094 100644
--- a/pkgs/by-name/ko/kolla/package.nix
+++ b/pkgs/by-name/ko/kolla/package.nix
@@ -7,14 +7,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "kolla";
-  version = "20.3.0";
+  version = "21.0.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "openstack";
     repo = "kolla";
     tag = version;
-    hash = "sha256-DLoQkI2cWaH+LYA97/ramOb2bAeZ8kRX386QX8WEivI=";
+    hash = "sha256-wbVaPIvn4jPcb+h5yKhLDmvT6/widfSX2iV+2KNW8pM=";
   };
 
   postPatch = ''
diff --git a/pkgs/by-name/li/libadwaita/package.nix b/pkgs/by-name/li/libadwaita/package.nix
index dd4ea744d0c1..e29c04dd5b15 100644
--- a/pkgs/by-name/li/libadwaita/package.nix
+++ b/pkgs/by-name/li/libadwaita/package.nix
@@ -23,7 +23,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libadwaita";
-  version = "1.8.0";
+  version = "1.8.1";
 
   outputs = [
     "out"
@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "GNOME";
     repo = "libadwaita";
     tag = finalAttrs.version;
-    hash = "sha256-neF7nt7x3QhSsWuWGouqniFlDHw1Soco7Dpzhy15gWE=";
+    hash = "sha256-9CcmzwQYZZc6dZAv6x90Od4lrRcYZIejzPgm6S1vz/U=";
   };
 
   depsBuildBuild = [
diff --git a/pkgs/by-name/li/libapparmor/apparmorRulesFromClosure.nix b/pkgs/by-name/li/libapparmor/apparmorRulesFromClosure.nix
index a12b8f0459be..3de57c122ce6 100644
--- a/pkgs/by-name/li/libapparmor/apparmorRulesFromClosure.nix
+++ b/pkgs/by-name/li/libapparmor/apparmorRulesFromClosure.nix
@@ -9,18 +9,18 @@
   # TODO: factorize here some other common paths
   # that may emerge from use cases.
   baseRules ? [
-    "r $path"
-    "r $path/etc/**"
-    "mr $path/share/**"
+    "$path r"
+    "$path/etc/** r"
+    "$path/share/** mr"
     # Note that not all libraries are prefixed with "lib",
     # eg. glibc-2.30/lib/ld-2.30.so
-    "mr $path/lib/**.so*"
-    "mr $path/lib64/**.so*"
+    "$path/lib/**.so* mr"
+    "$path/lib64/**.so* mr"
     # eg. glibc-2.30/lib/gconv/gconv-modules
-    "r $path/lib/**"
-    "r $path/lib64/**"
+    "$path/lib/** r"
+    "$path/lib64/** r"
     # Internal executables
-    "ixr $path/libexec/**"
+    "$path/libexec/** ixr"
   ],
   name ? "",
 }:
diff --git a/pkgs/by-name/li/libcap/package.nix b/pkgs/by-name/li/libcap/package.nix
index 76e0ee1d0fe6..8e3efdd4d520 100644
--- a/pkgs/by-name/li/libcap/package.nix
+++ b/pkgs/by-name/li/libcap/package.nix
@@ -3,6 +3,7 @@
   lib,
   buildPackages,
   fetchurl,
+  fetchpatch,
   runtimeShell,
   pkgsBuildHost,
   usePam ? !isStatic,
@@ -28,11 +29,11 @@ assert usePam -> pam != null;
 
 stdenv.mkDerivation rec {
   pname = "libcap";
-  version = "2.76";
+  version = "2.77";
 
   src = fetchurl {
     url = "mirror://kernel/linux/libs/security/linux-privs/libcap2/${pname}-${version}.tar.xz";
-    hash = "sha256-Yp2kqymQDQ9/zDYicHN0MRmSX9cRyZoWibv1ybQMjm8=";
+    hash = "sha256-iXvBi0Svwmxw54zq09uzHhVKzCS+4IWloJB5qI2/b1I=";
   };
 
   outputs = [
@@ -73,6 +74,13 @@ stdenv.mkDerivation rec {
     "LIBCSTATIC=yes"
   ];
 
+  patches = [
+    (fetchpatch {
+      url = "https://git.kernel.org/pub/scm/libs/libcap/libcap.git/patch/?id=d628b3bfe40338d4efff6b0ae50f250a0eb884c7";
+      hash = "sha256-Eiv/BOJZkduL+hOEJd8K1LQd9wvOeCKchE2GaLcerVc=";
+    })
+  ];
+
   postPatch = ''
     patchShebangs ./progs/mkcapshdoc.sh
 
@@ -86,11 +94,6 @@ stdenv.mkDerivation rec {
       --replace 'lib_prefix=$(exec_prefix)' "lib_prefix=$lib" \
       --replace 'inc_prefix=$(prefix)' "inc_prefix=$dev" \
       --replace 'man_prefix=$(prefix)' "man_prefix=$doc"
-  ''
-  + lib.optionalString withGo ''
-    # disable cross compilation for artifacts which are run as part of the build
-    substituteInPlace go/Makefile \
-      --replace-fail '$(GO) run' 'GOOS= GOARCH= $(GO) run'
   '';
 
   installFlags = [ "RAISE_SETFCAP=no" ];
diff --git a/pkgs/by-name/li/libdeflate/package.nix b/pkgs/by-name/li/libdeflate/package.nix
index 0a14d75ea7dc..c04a7bc35a8a 100644
--- a/pkgs/by-name/li/libdeflate/package.nix
+++ b/pkgs/by-name/li/libdeflate/package.nix
@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libdeflate";
-  version = "1.24";
+  version = "1.25";
 
   src = fetchFromGitHub {
     owner = "ebiggers";
     repo = "libdeflate";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-IaXXm9VrZ0Pgb3yTh1fPKkifJDvCxvCfTH08Sdho0Ko=";
+    hash = "sha256-2TiV3kmFs9j4aYetoYeWg3+MoZ542/0zaD0hwn9b8ZA=";
   };
 
   cmakeFlags = [
diff --git a/pkgs/by-name/li/libdrm/package.nix b/pkgs/by-name/li/libdrm/package.nix
index 9c38c381502e..f78ff46011f2 100644
--- a/pkgs/by-name/li/libdrm/package.nix
+++ b/pkgs/by-name/li/libdrm/package.nix
@@ -16,11 +16,11 @@
 
 stdenv.mkDerivation rec {
   pname = "libdrm";
-  version = "2.4.127";
+  version = "2.4.128";
 
   src = fetchurl {
     url = "https://dri.freedesktop.org/${pname}/${pname}-${version}.tar.xz";
-    hash = "sha256-BRrrPlQqV2IQGP/EQ/sIjdabeO7wzkgItgTOD+rJ9H8=";
+    hash = "sha256-O7NduHAMKgtWnyxnKaU/VJV4aFazEIVMjeV3gqIr3aw=";
   };
 
   outputs = [
diff --git a/pkgs/by-name/li/libressl/default.nix b/pkgs/by-name/li/libressl/default.nix
index 279cbdf60f2e..2667f2c1bf97 100644
--- a/pkgs/by-name/li/libressl/default.nix
+++ b/pkgs/by-name/li/libressl/default.nix
@@ -117,30 +117,9 @@ let
   };
 in
 {
-  libressl_4_0 = generic {
-    version = "4.0.1";
-    hash = "sha256-IClLh3eMJidIk4Y5Q8hjWJebSZ03tJl31r+Gj3tZfL0=";
-    # Fixes build on loongarch64
-    # https://github.com/libressl/portable/pull/1146
-    patches = [
-      (fetchpatch {
-        name = "0100-ALT-basic-loongarch64-support.patch";
-        url = "https://git.altlinux.org/gears/L/LibreSSL.git?p=LibreSSL.git;a=blob_plain;f=patches/0100-ALT-basic-loongarch64-support.patch;hb=70ddea860b8b62531bd3968bf4d7a5c4b7086776";
-        stripLen = 2;
-        extraPrefix = "";
-        postFetch = ''
-          substituteInPlace "$out" \
-            --replace-fail "a//dev/null" "/dev/null"
-        '';
-        hash = "sha256-dEdtmHHiR7twAqgebXv1Owle/KYCak71NhDCp0PdseU=";
-      })
-      common-cmake-install-full-dirs-patch
-    ];
-  };
-
   libressl_4_1 = generic {
-    version = "4.1.1";
-    hash = "sha256-x/96fWddX1dzCUDlzP8dvi3NW3QFtTl+D3/9ZqXtVnk=";
+    version = "4.1.2";
+    hash = "sha256-+6Ti+ip/UjBt96OJlwoQ6YuX6w7bKZqf252/SZmcYeE=";
     # Fixes build on loongarch64
     # https://github.com/libressl/portable/pull/1184
     postPatch = ''
@@ -158,8 +137,8 @@ in
   };
 
   libressl_4_2 = generic {
-    version = "4.2.0";
-    hash = "sha256-D326RNfLjfjVPyz78ZVSVLwSjgCJWV8aui+s+u6ECLI=";
+    version = "4.2.1";
+    hash = "sha256-bVwvWFg1iOp5H0yGRQBAcdAN+lVKW/eIoAbKHrWr1ws=";
     patches = [
       common-cmake-install-full-dirs-patch
     ];
diff --git a/pkgs/by-name/li/librsvg/package.nix b/pkgs/by-name/li/librsvg/package.nix
index 978cc3cad3b7..4e4b9f000378 100644
--- a/pkgs/by-name/li/librsvg/package.nix
+++ b/pkgs/by-name/li/librsvg/package.nix
@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchurl,
-  fetchpatch,
   pkg-config,
   meson,
   ninja,
@@ -50,7 +49,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "librsvg";
-  version = "2.61.2";
+  version = "2.61.3";
 
   outputs = [
     "out"
@@ -62,23 +61,13 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/librsvg/${lib.versions.majorMinor finalAttrs.version}/librsvg-${finalAttrs.version}.tar.xz";
-    hash = "sha256-RkTYNiPdYcxEecKzw3Lh2isoFVLryQA1yNGsUC6x3AA=";
+    hash = "sha256-pW0sgNdErS8nGPhd9Gb+cdJP8fm8Pl71iL3k1+h4FfI=";
   };
 
-  patches = [
-    (fetchpatch {
-      # https://gitlab.gnome.org/GNOME/librsvg/-/merge_requests/1149
-      # libxml 2.15+ requires adjustments to error handling
-      # remove next librsvg release
-      url = "https://gitlab.gnome.org/GNOME/librsvg/-/commit/6663df8e9aec323f0c124e97a7c7447a90c67c4a.patch";
-      hash = "sha256-+iyRvxVMxSCW0IIizXXheBFytwhBtU4cyJNTBebCOSg=";
-    })
-  ];
-
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) src;
     name = "librsvg-deps-${finalAttrs.version}";
-    hash = "sha256-OZspQg9ryDNILUZMiB77vIF0uGCMyVe7blX5BJk102k=";
+    hash = "sha256-5uNkjfZhETuG8Sjw66zapYXOj4dgz9Ziry2kAV+pvZQ=";
     dontConfigure = true;
   };
 
diff --git a/pkgs/by-name/li/liburcu/package.nix b/pkgs/by-name/li/liburcu/package.nix
index 3ba541fd11ca..e7dae0dec76d 100644
--- a/pkgs/by-name/li/liburcu/package.nix
+++ b/pkgs/by-name/li/liburcu/package.nix
@@ -3,15 +3,16 @@
   stdenv,
   fetchurl,
   perl,
+  gitUpdater,
 }:
 
 stdenv.mkDerivation rec {
-  version = "0.15.3";
+  version = "0.15.5";
   pname = "liburcu";
 
   src = fetchurl {
     url = "https://lttng.org/files/urcu/userspace-rcu-${version}.tar.bz2";
-    hash = "sha256-Jmh+yE4+EUdZRUyISgir6ved7AmwQYld30xF7BUKy20=";
+    hash = "sha256-sveHqKg1EsMlmecc2rzFExRklHuCAUiWvRFBOy14LeE=";
   };
 
   outputs = [
@@ -27,6 +28,11 @@ stdenv.mkDerivation rec {
   preCheck = "patchShebangs tests/unit";
   doCheck = true;
 
+  passthru.updateScript = gitUpdater {
+    url = "https://git.lttng.org/userspace-rcu.git";
+    rev-prefix = "v";
+  };
+
   meta = {
     description = "Userspace RCU (read-copy-update) library";
     homepage = "https://lttng.org/urcu";
diff --git a/pkgs/by-name/lz/lz4/package.nix b/pkgs/by-name/lz/lz4/package.nix
index 23c13065ae40..bab192f7c424 100644
--- a/pkgs/by-name/lz/lz4/package.nix
+++ b/pkgs/by-name/lz/lz4/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch,
   cmake,
   valgrind,
   testers,
@@ -18,6 +19,14 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-/dG1n59SKBaEBg72pAWltAtVmJ2cXxlFFhP+klrkTos=";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2025-62813.patch";
+      url = "https://github.com/lz4/lz4/commit/f64efec011c058bd70348576438abac222fe6c82.patch";
+      hash = "sha256-qOvK0A3MGX14WdhThV7m4G6s+ZMP6eA/07A2BY5nesY=";
+    })
+  ];
+
   nativeBuildInputs = [
     cmake
   ];
diff --git a/pkgs/by-name/ma/mautrix-slack/package.nix b/pkgs/by-name/ma/mautrix-slack/package.nix
index aa30a179f011..141c9617654d 100644
--- a/pkgs/by-name/ma/mautrix-slack/package.nix
+++ b/pkgs/by-name/ma/mautrix-slack/package.nix
@@ -14,17 +14,17 @@
 }:
 buildGoModule rec {
   pname = "mautrix-slack";
-  version = "25.10";
-  tag = "v0.2510.0";
+  version = "25.11";
+  tag = "v0.2511.0";
 
   src = fetchFromGitHub {
     owner = "mautrix";
     repo = "slack";
-    tag = tag;
-    hash = "sha256-PeSE7WKFSSxZyyG9TJmYeCzHY3bPvkHZ5l+mLzr8tS8=";
+    inherit tag;
+    hash = "sha256-9f+GL0eziA2Z9qFXY9VRwj6PK0jUm4bo90pJEuNR1IY=";
   };
 
-  vendorHash = "sha256-9MsHRU2EqMTWEMVraJ/6/084X5yx3zzSdxP8zSYFJ1E=";
+  vendorHash = "sha256-djNvUIlJuWqqREV3tYmEe9yolKymhuzA0jsp714qfOQ=";
 
   buildInputs = lib.optional (!withGoolm) olm;
   tags = lib.optional withGoolm "goolm";
diff --git a/pkgs/by-name/md/mdbook/package.nix b/pkgs/by-name/md/mdbook/package.nix
index 3c408a3815e9..6a21c8180575 100644
--- a/pkgs/by-name/md/mdbook/package.nix
+++ b/pkgs/by-name/md/mdbook/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch2,
   nix,
   rustPlatform,
   installShellFiles,
@@ -22,6 +23,14 @@ rustPlatform.buildRustPackage rec {
 
   cargoHash = "sha256-wvTixSVHXglJM+nBMulZNZKF8pZfNd2G8Z+1PlAWmpk=";
 
+  patches = [
+    (fetchpatch2 {
+      name = "fix-rust-1.91-tests.patch";
+      url = "https://github.com/rust-lang/mdBook/commit/841c68d05e763b031524a2b4d679f033cd15e64c.patch?full_index=1";
+      hash = "sha256-KDQhmFX2TWamtdyssFL69MP3vg9LABb+bF8/7vaFsew=";
+    })
+  ];
+
   nativeBuildInputs = [ installShellFiles ];
 
   postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
diff --git a/pkgs/by-name/mj/mjpegtools/package.nix b/pkgs/by-name/mj/mjpegtools/package.nix
index ad5ad85e729c..bfd9320ed020 100644
--- a/pkgs/by-name/mj/mjpegtools/package.nix
+++ b/pkgs/by-name/mj/mjpegtools/package.nix
@@ -56,6 +56,13 @@ stdenv.mkDerivation rec {
 
   postPatch = ''
     sed -i -e '/ARCHFLAGS=/s:=.*:=:' configure
+  ''
+  # Only ppc64le baseline guarantees AltiVec, no configure option to disable it so just make checks never signal success.
+  # AltiVec code also fails without disabling new compiler warnings:
+  # quant_non_intra.c:72:42: error: initialization of '__vector unsigned short *' {aka '__vector(8) short unsigned int *'} from incompatible pointer type 'uint16_t *' {aka 'short unsigned int *'} [-Wincompatible-pointer-types]
+  + lib.optionalString (!(stdenv.hostPlatform.isPower64 && stdenv.hostPlatform.isLittleEndian)) ''
+    substituteInPlace configure \
+      --replace-fail 'have_altivec=true' 'have_altivec=false'
   '';
 
   enableParallelBuilding = true;
diff --git a/pkgs/by-name/ml/mlt/package.nix b/pkgs/by-name/ml/mlt/package.nix
index ae965a28077c..718ef3ef656c 100644
--- a/pkgs/by-name/ml/mlt/package.nix
+++ b/pkgs/by-name/ml/mlt/package.nix
@@ -6,7 +6,7 @@
   cmake,
   pkg-config,
   which,
-  ffmpeg_7,
+  ffmpeg,
   fftw,
   frei0r,
   libdv,
@@ -25,6 +25,7 @@
   cudaSupport ? config.cudaSupport,
   cudaPackages ? { },
   enableJackrack ? stdenv.hostPlatform.isLinux,
+  gdk-pixbuf,
   glib,
   ladspa-sdk,
   ladspaPlugins,
@@ -40,13 +41,13 @@
 
 stdenv.mkDerivation rec {
   pname = "mlt";
-  version = "7.32.0";
+  version = "7.34.1";
 
   src = fetchFromGitHub {
     owner = "mltframework";
     repo = "mlt";
     tag = "v${version}";
-    hash = "sha256-8T5FXXGs7SxL6nD+R1Q/0Forsdp5Xux4S3VLvgqXzw8=";
+    hash = "sha256-zdfjl4ZrdmX445hYx2CoKj1NuXQslQpTC5m96zPrZes=";
     # The submodule contains glaxnimate code, since MLT uses internally some functions defined in glaxnimate.
     # Since glaxnimate is not available as a library upstream, we cannot remove for now this dependency on
     # submodules until upstream exports glaxnimate as a library: https://gitlab.com/mattbas/glaxnimate/-/issues/545
@@ -71,8 +72,9 @@ stdenv.mkDerivation rec {
   ];
 
   buildInputs = [
-    (opencv4.override { inherit ffmpeg_7; })
-    ffmpeg_7
+    gdk-pixbuf
+    (opencv4.override { inherit ffmpeg; })
+    ffmpeg
     fftw
     frei0r
     libdv
@@ -118,9 +120,18 @@ stdenv.mkDerivation rec {
   ++ lib.optionals enablePython [
     "-DSWIG_PYTHON=ON"
   ]
-  ++ lib.optionals (qt != null) [
-    "-DMOD_QT${lib.versions.major qt.qtbase.version}=ON"
-    "-DMOD_GLAXNIMATE${if lib.versions.major qt.qtbase.version == "5" then "" else "_QT6"}=ON"
+  ++ lib.optionals (qt == null) [
+    "-DMOD_QT6=OFF"
+  ]
+  ++ lib.optionals (qt != null && lib.versions.major qt.qtbase.version == "5") [
+    "-DMOD_QT=ON"
+    "-DMOD_QT6=OFF"
+    "-DMOD_GLAXNIMATE=ON"
+  ]
+  ++ lib.optionals (qt != null && lib.versions.major qt.qtbase.version == "6") [
+    "-DMOD_QT6=ON"
+    "-DMOD_QT=OFF"
+    "-DMOD_GLAXNIMATE_QT6=ON"
   ];
 
   preFixup = ''
@@ -137,7 +148,7 @@ stdenv.mkDerivation rec {
   '';
 
   passthru = {
-    ffmpeg = ffmpeg_7;
+    inherit ffmpeg;
   };
 
   passthru.updateScript = gitUpdater {
diff --git a/pkgs/by-name/mu/munge/package.nix b/pkgs/by-name/mu/munge/package.nix
index ecfd36396afd..1fbd0e3947d6 100644
--- a/pkgs/by-name/mu/munge/package.nix
+++ b/pkgs/by-name/mu/munge/package.nix
@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "munge";
-  version = "0.5.16";
+  version = "0.5.17";
 
   src = fetchFromGitHub {
     owner = "dun";
     repo = "munge";
     rev = "munge-${finalAttrs.version}";
-    sha256 = "sha256-fv42RMUAP8Os33/iHXr70i5Pt2JWZK71DN5vFI3q7Ak=";
+    sha256 = "sha256-MfxED81P4ipdP4fuxwmpNrAeej3ZH+qiHIt5bSrct1o=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/n8/n8n/package.nix b/pkgs/by-name/n8/n8n/package.nix
index 0006949db1ec..b092c5d4d939 100644
--- a/pkgs/by-name/n8/n8n/package.nix
+++ b/pkgs/by-name/n8/n8n/package.nix
@@ -17,19 +17,19 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "n8n";
-  version = "1.118.2";
+  version = "1.119.2";
 
   src = fetchFromGitHub {
     owner = "n8n-io";
     repo = "n8n";
     tag = "n8n@${finalAttrs.version}";
-    hash = "sha256-2mcQ2hMYGydqpP4hqppqdEwB1WxM8J6taWQwoA1MN7Y=";
+    hash = "sha256-vf2cjTwjN6gbLNtpjyj6X5XSlytH64TbXyqSvqi3E6k=";
   };
 
   pnpmDeps = pnpm_10.fetchDeps {
     inherit (finalAttrs) pname version src;
     fetcherVersion = 2;
-    hash = "sha256-pBF4usm5Gd+sygf2uZAovpGnEFlywVg2KToMiUSfyZI=";
+    hash = "sha256-0Dhw0VFIuANOa8Oq8eI1YeUQhuGBO+t56ywUlx8Z2jM=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/ns/nspr/package.nix b/pkgs/by-name/ns/nspr/package.nix
index 7e24a62ccf39..d16052a7603c 100644
--- a/pkgs/by-name/ns/nspr/package.nix
+++ b/pkgs/by-name/ns/nspr/package.nix
@@ -8,11 +8,11 @@
 
 stdenv.mkDerivation rec {
   pname = "nspr";
-  version = "4.37";
+  version = "4.38.2";
 
   src = fetchurl {
     url = "mirror://mozilla/nspr/releases/v${version}/src/nspr-${version}.tar.gz";
-    hash = "sha256-X5NE7Q4xhVvTj4izPJ2auU9wzlR+8yE+SI0VIPYYQPo=";
+    hash = "sha256-5Akvrqt3vcmzLbERPkIVlI7naOJsRmbbO1pgs18skQU=";
   };
 
   patches = [
diff --git a/pkgs/by-name/od/odamex/package.nix b/pkgs/by-name/od/odamex/package.nix
index b0031195ed9e..2e32151b459e 100644
--- a/pkgs/by-name/od/odamex/package.nix
+++ b/pkgs/by-name/od/odamex/package.nix
@@ -52,13 +52,13 @@ in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "odamex";
-  version = "11.1.1";
+  version = "11.2.0";
 
   src = fetchFromGitHub {
     owner = "odamex";
     repo = "odamex";
     tag = finalAttrs.version;
-    hash = "sha256-UUUavIaU65vU80Bp2cVjHg8IubpA6qMqZmDYvTDjfEw=";
+    hash = "sha256-f9st852Sqmdmb/qNP1ioBY9MApt9Ruw8dBjkkyGM5Qs=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/by-name/pa/parca-agent/package.nix b/pkgs/by-name/pa/parca-agent/package.nix
index 14e88c000fea..96875107cf5c 100644
--- a/pkgs/by-name/pa/parca-agent/package.nix
+++ b/pkgs/by-name/pa/parca-agent/package.nix
@@ -8,18 +8,18 @@
 
 buildGoModule (finalAttrs: {
   pname = "parca-agent";
-  version = "0.43.0";
+  version = "0.44.0";
 
   src = fetchFromGitHub {
     owner = "parca-dev";
     repo = "parca-agent";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-xIe3s/7/raZuunR+Gx/icLHhT5VUNhcfBGbTqHybxu4=";
+    hash = "sha256-RSVeb40KQA/F8tj329Vis4pSVsJL9PlA69iA+RJwdt8=";
     fetchSubmodules = true;
   };
 
   proxyVendor = true;
-  vendorHash = "sha256-UQnIGTZQOgPWqJcc75pyaMFh8P8JKvtvlGneo5F3NEM=";
+  vendorHash = "sha256-98Ndx9eIVIJA9Zox/9fQ80MZwVjuAtInRWbFncQRz/4=";
 
   buildInputs = [
     stdenv.cc.libc.static
diff --git a/pkgs/by-name/pg/pgweb/package.nix b/pkgs/by-name/pg/pgweb/package.nix
index cb2964bcc694..3cb46bbeb0b5 100644
--- a/pkgs/by-name/pg/pgweb/package.nix
+++ b/pkgs/by-name/pg/pgweb/package.nix
@@ -9,13 +9,13 @@
 
 buildGoModule rec {
   pname = "pgweb";
-  version = "0.16.2";
+  version = "0.17.0";
 
   src = fetchFromGitHub {
     owner = "sosedoff";
     repo = "pgweb";
     rev = "v${version}";
-    hash = "sha256-gZK8+H3dBMzSVyE96E7byihKMR4+1YlVFZJtCTGUZwI=";
+    hash = "sha256-3UWld72AN504+Bo8aIY31qMO1xIRL3MXG5ImzMeSoU8=";
   };
 
   postPatch = ''
@@ -23,7 +23,7 @@ buildGoModule rec {
     rm -f pkg/client/{client,dump}_test.go
   '';
 
-  vendorHash = "sha256-Jpvf6cST3kBvYzCQLoJ1fijUC/hP1ouptd2bQZ1J/Lo=";
+  vendorHash = "sha256-7gfziA+rKwS6u63I6DaA2Fi/wvtr1rAJupSNJZB72dU=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/pk/pkgsite/package.nix b/pkgs/by-name/pk/pkgsite/package.nix
index 6af8b3162f61..982dca5a53ec 100644
--- a/pkgs/by-name/pk/pkgsite/package.nix
+++ b/pkgs/by-name/pk/pkgsite/package.nix
@@ -7,13 +7,13 @@
 
 buildGoModule {
   pname = "pkgsite";
-  version = "0-unstable-2025-11-13";
+  version = "0-unstable-2025-11-20";
 
   src = fetchFromGitHub {
     owner = "golang";
     repo = "pkgsite";
-    rev = "28eed86815232e48f5e757569fcd061f858142d4";
-    hash = "sha256-de6aDMNOE+N6OWwHD2p6jjuX2z0d6eKZeAYgatuJLgk=";
+    rev = "84333735ffe124f7bd904805fd488b93841de49f";
+    hash = "sha256-XYySnVvnNZr1tg46AoYBsmeT5y/StByWcQhnNOdoLJo=";
   };
 
   vendorHash = "sha256-Zv9kyBGLicSJlWD0/wv6ggteA+DttOb18/P5s91tJxE=";
diff --git a/pkgs/by-name/re/rebels-in-the-sky/package.nix b/pkgs/by-name/re/rebels-in-the-sky/package.nix
index 633a78f640e3..e3e692092682 100644
--- a/pkgs/by-name/re/rebels-in-the-sky/package.nix
+++ b/pkgs/by-name/re/rebels-in-the-sky/package.nix
@@ -14,16 +14,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rebels-in-the-sky";
-  version = "1.1.2";
+  version = "1.1.3";
 
   src = fetchFromGitHub {
     owner = "ricott1";
     repo = "rebels-in-the-sky";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-37sStLh2gZm5aV2czvV7lU+aCUyed8/ZKPRUb02AQQw=";
+    hash = "sha256-F7UsJ5EJDuDlre/UBUcHR3zNk3cvlpPsOYPsAy/n8MI=";
   };
 
-  cargoHash = "sha256-qj9Utd8mICP7Ulx86PWNusV/7OvfaI4u3qvbp69kYP0=";
+  cargoHash = "sha256-+OavpkMn2bQMLK7J3dzW0MnxVKdmpPoibpQG4cC4EvQ=";
 
   patches = lib.optionals (!withRadio) [
     ./disable-radio.patch
diff --git a/pkgs/by-name/re/redumper/package.nix b/pkgs/by-name/re/redumper/package.nix
index 19fb8c4a5ae5..7c14c117fdb0 100644
--- a/pkgs/by-name/re/redumper/package.nix
+++ b/pkgs/by-name/re/redumper/package.nix
@@ -9,13 +9,13 @@
 # redumper is using C++ modules, this requires latest C++20 compiler and build tools
 llvmPackages.libcxxStdenv.mkDerivation (finalAttrs: {
   pname = "redumper";
-  version = "657";
+  version = "664";
 
   src = fetchFromGitHub {
     owner = "superg";
     repo = "redumper";
     tag = "b${finalAttrs.version}";
-    hash = "sha256-dkdG00nbnHSC8xC6540KJmTDnEohLQfHpvYzc5dS6tk=";
+    hash = "sha256-fc3M6Pim+x/UwHOWZDp3yjLx7ajcNaIfYgamskwPDSA=";
   };
 
   nativeBuildInputs = [
@@ -24,6 +24,8 @@ llvmPackages.libcxxStdenv.mkDerivation (finalAttrs: {
     llvmPackages.clang-tools
   ];
 
+  env.NIX_CFLAGS_COMPILE = "-isystem ${llvmPackages.libcxx.dev}/include/c++/v1";
+
   # https://github.com/superg/redumper/blob/main/.github/workflows/cmake.yml
   cmakeFlags = [
     "-DCMAKE_BUILD_WITH_INSTALL_RPATH=ON"
diff --git a/pkgs/by-name/ri/rio/package.nix b/pkgs/by-name/ri/rio/package.nix
index bf76b8fcdd0c..fde71f28c022 100644
--- a/pkgs/by-name/ri/rio/package.nix
+++ b/pkgs/by-name/ri/rio/package.nix
@@ -50,16 +50,16 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rio";
-  version = "0.2.35";
+  version = "0.2.36";
 
   src = fetchFromGitHub {
     owner = "raphamorim";
     repo = "rio";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-KQC8I/XBZ7uBEug5QNxmNbPom0MY10fprO4iCxgLtps=";
+    hash = "sha256-c/+agFoGRB+kvVSUo5+yc1LlSvLsgD5J1yk2ufDRgc4=";
   };
 
-  cargoHash = "sha256-Xq387L6V7BlL7jad1liH7qEhD4T5t8N+POTCG1oZ9xU=";
+  cargoHash = "sha256-KITGepJC6luNwA7ypGDjajLtmBx5faV2ruJ0aXyrFVo=";
 
   nativeBuildInputs = [
     rustPlatform.bindgenHook
diff --git a/pkgs/by-name/sc/scons/no-man-pages.patch b/pkgs/by-name/sc/scons/no-man-pages.patch
deleted file mode 100644
index 4dd459b8261e..000000000000
--- a/pkgs/by-name/sc/scons/no-man-pages.patch
+++ /dev/null
@@ -1,14 +0,0 @@
---- a/setup.cfg
-+++ b/setup.cfg
-@@ -67,11 +67,6 @@ console_scripts =
- SCons.Tool.docbook = *.*
- 
- 
--[options.data_files]
--. = scons.1
--    scons-time.1
--    sconsign.1
--
- [sdist]
-     dist_dir=build/dist
- 
diff --git a/pkgs/by-name/sc/scons/package.nix b/pkgs/by-name/sc/scons/package.nix
index 5781d12a24bd..c1393046acdd 100644
--- a/pkgs/by-name/sc/scons/package.nix
+++ b/pkgs/by-name/sc/scons/package.nix
@@ -6,26 +6,18 @@
 }:
 python3Packages.buildPythonApplication rec {
   pname = "scons";
-  version = "4.7.0";
+  version = "4.10.0";
 
   src = fetchFromGitHub {
     owner = "Scons";
     repo = "scons";
-    rev = version;
-    hash = "sha256-7VzGuz9CAUF6MRCEpj5z1FkZD19/Ic+YBukYQocvkr0=";
+    tag = version;
+    hash = "sha256-ZmJETrznHH3zsNBO5o8JCvf+6l7NICOAfIqASYzYBaM=";
   };
 
   pyproject = true;
 
-  patches = [
-    ./env.patch
-    ./no-man-pages.patch
-    # Fix builds on sandboxed Darwin: https://github.com/SCons/scons/pull/4603
-    (fetchpatch {
-      url = "https://github.com/SCons/scons/commit/2d5e3a40a613225b329776ab9dbd9abcd2d24222.patch";
-      hash = "sha256-N1xQOvsPTi7a2maEZJQVu6vJ9AoWMqDOsScXHp9KuXI=";
-    })
-  ];
+  patches = [ ./env.patch ];
 
   build-system = [
     python3Packages.setuptools
diff --git a/pkgs/by-name/sd/sdl2-compat/package.nix b/pkgs/by-name/sd/sdl2-compat/package.nix
index 0aec5ddf963f..e16eb5927cec 100644
--- a/pkgs/by-name/sd/sdl2-compat/package.nix
+++ b/pkgs/by-name/sd/sdl2-compat/package.nix
@@ -2,6 +2,7 @@
   cmake,
   lib,
   fetchFromGitHub,
+  fetchpatch2,
   ninja,
   sdl3,
   stdenv,
@@ -71,7 +72,15 @@ stdenv.mkDerivation (finalAttrs: {
 
   doCheck = true;
 
-  patches = [ ./find-headers.patch ];
+  patches = [
+    ./find-headers.patch
+
+    # https://github.com/libsdl-org/sdl2-compat/pull/545
+    (fetchpatch2 {
+      url = "https://github.com/libsdl-org/sdl2-compat/commit/b799076c72c2492224e81544f58f92b737cccbd3.patch?full_index=1";
+      hash = "sha256-fAc8yBlT+XFHDKcF4MFgBAz2WtXGmhYzNNrjaGSr+do=";
+    })
+  ];
   setupHook = ./setup-hook.sh;
 
   postFixup = ''
diff --git a/pkgs/by-name/se/serie/package.nix b/pkgs/by-name/se/serie/package.nix
index ab0a72d1c9b0..fb02a4996571 100644
--- a/pkgs/by-name/se/serie/package.nix
+++ b/pkgs/by-name/se/serie/package.nix
@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "serie";
-  version = "0.5.3";
+  version = "0.5.4";
 
   src = fetchFromGitHub {
     owner = "lusingander";
     repo = "serie";
     rev = "v${version}";
-    hash = "sha256-HzAgPCAHOdxXPwPWPPU9VaNrVJL42TlbYMD/n7AeOH8=";
+    hash = "sha256-4F17DArBV3kKQJi24pwD+JE7W9AuAQrxJcU1YTj93os=";
   };
 
-  cargoHash = "sha256-dRR3Zr2QM1yDDxiKqugwMtz5f5ted0oHSdR47XUTQUc=";
+  cargoHash = "sha256-wvvtlhlgwZylE6tucVcmsGbos6h5Nc8ZfP8zlkcIoqw=";
 
   nativeCheckInputs = [ gitMinimal ];
 
diff --git a/pkgs/by-name/so/sord/package.nix b/pkgs/by-name/so/sord/package.nix
index bec23bbd710c..3575d79cf8b5 100644
--- a/pkgs/by-name/so/sord/package.nix
+++ b/pkgs/by-name/so/sord/package.nix
@@ -2,7 +2,7 @@
   lib,
   stdenv,
   doxygen,
-  fetchFromGitHub,
+  fetchFromGitLab,
   meson,
   ninja,
   pcre2,
@@ -14,13 +14,14 @@
 
 stdenv.mkDerivation rec {
   pname = "sord";
-  version = "0.16.18";
+  version = "0.16.20";
 
-  src = fetchFromGitHub {
+  src = fetchFromGitLab {
+    domain = "gitlab.com";
     owner = "drobilla";
     repo = "sord";
-    rev = "v${version}";
-    hash = "sha256-cFobmmO2RHJdfCgTyGigzsdLpj7YF6U3r71i267Azks=";
+    tag = "v${version}";
+    hash = "sha256-+f3dxhcxVoub+KeI5c5/J87SVvAawrm5cZgo2qogdRM=";
   };
 
   outputs = [
diff --git a/pkgs/by-name/sp/spicetify-cli/package.nix b/pkgs/by-name/sp/spicetify-cli/package.nix
index 74247a932a35..cd7648156c33 100644
--- a/pkgs/by-name/sp/spicetify-cli/package.nix
+++ b/pkgs/by-name/sp/spicetify-cli/package.nix
@@ -7,16 +7,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "spicetify-cli";
-  version = "2.42.0";
+  version = "2.42.1";
 
   src = fetchFromGitHub {
     owner = "spicetify";
     repo = "cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-beMxE5ZpFqilgk4Xa0mvJyexDAFdwKUa1rJipFXBM7I=";
+    hash = "sha256-O2bS5LYUMj4u7MksbWjGGgpQJ39/OlMAkFSHKrVIX/k=";
   };
 
-  vendorHash = "sha256-UwZ5wtZ5akmn3GF93XAqJqr9mUfbFQTD/LU8YUeoaGA=";
+  vendorHash = "sha256-DiVu/ePiZvn9+B/r8LS0qLt8eXKAtg4IXZ1WRzzAvcE=";
 
   postPatch = ''
     substituteInPlace src/preprocess/preprocess.go \
diff --git a/pkgs/by-name/sq/squashfsTools/package.nix b/pkgs/by-name/sq/squashfsTools/package.nix
index 9f475c41f446..5039d9079bcc 100644
--- a/pkgs/by-name/sq/squashfsTools/package.nix
+++ b/pkgs/by-name/sq/squashfsTools/package.nix
@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation rec {
   pname = "squashfs";
-  version = "4.7.2";
+  version = "4.7.4";
 
   src = fetchFromGitHub {
     owner = "plougher";
     repo = "squashfs-tools";
     rev = version;
-    hash = "sha256-iQ+pBt+jvqI6zgZRV2MZM3CeFqiXe8Z+SS+rLOB4DLw=";
+    hash = "sha256-xvTSGVwtzJjoAIF6GClASUIB5eIk+uquQNNzHIuwkuY=";
   };
 
   strictDeps = true;
diff --git a/pkgs/by-name/sr/sratom/package.nix b/pkgs/by-name/sr/sratom/package.nix
index bcff1fc39ee9..b55a15c1785a 100644
--- a/pkgs/by-name/sr/sratom/package.nix
+++ b/pkgs/by-name/sr/sratom/package.nix
@@ -13,7 +13,7 @@
 
 stdenv.mkDerivation rec {
   pname = "sratom";
-  version = "0.6.18";
+  version = "0.6.20";
 
   outputs = [
     "out"
@@ -22,7 +22,7 @@ stdenv.mkDerivation rec {
 
   src = fetchurl {
     url = "https://download.drobilla.net/${pname}-${version}.tar.xz";
-    hash = "sha256-TGptngtNbAHMBqiEmRD+zrkuZmyzh3nGFN0kBKmTHpI=";
+    hash = "sha256-OCbpGGyrxDyl41n8w9gjgGAjL1+KIJC+XcmrOQ5bZHc=";
   };
 
   strictDeps = true;
diff --git a/pkgs/by-name/te/temporal-ui-server/package.nix b/pkgs/by-name/te/temporal-ui-server/package.nix
index 7546e44b7da0..476ef63696e1 100644
--- a/pkgs/by-name/te/temporal-ui-server/package.nix
+++ b/pkgs/by-name/te/temporal-ui-server/package.nix
@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "temporal-ui-server";
-  version = "2.43.2";
+  version = "2.43.3";
 
   src = fetchFromGitHub {
     owner = "temporalio";
     repo = "ui-server";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Z7a/21whiCjiQiqKE8aDcptSFw+op82xnqXfzVjGw6o=";
+    hash = "sha256-5JE5t8NHVNz1sO03yAw5eytsr55IACFgJRgbRxhx0Sg=";
   };
 
-  vendorHash = "sha256-HmysULH81cYOuMyW9qZRsQhv7chDobD7PnWmu3uCvJw=";
+  vendorHash = "sha256-yScJo+GEGO2LIAts5WPzS4YjPHZK9wZtPrfRg1b7H2Q=";
 
   postInstall = ''
     mv $out/bin/server $out/bin/temporal-ui-server
diff --git a/pkgs/by-name/ur/url-parser/package.nix b/pkgs/by-name/ur/url-parser/package.nix
index 54a9f90f2aa2..45c8d73237e8 100644
--- a/pkgs/by-name/ur/url-parser/package.nix
+++ b/pkgs/by-name/ur/url-parser/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "url-parser";
-  version = "2.1.11";
+  version = "2.1.12";
 
   src = fetchFromGitHub {
     owner = "thegeeklab";
     repo = "url-parser";
     tag = "v${version}";
-    hash = "sha256-5llWyqIO5vsjvf8NChssgWaiJ9ENUN72sy4shjmA9co=";
+    hash = "sha256-LZAOQ1/4tfH1Q4H/YPIoLUnfbRplWqmf5A48qsQpahE=";
   };
 
-  vendorHash = "sha256-SHW/l1TVq5zzYcjhkIMbF5yF5KKIbMfPgrASNQ9A3VU=";
+  vendorHash = "sha256-dnBZsV9f3V0o2VifEAIK8YxX+VnlRxL35TtaNW2nd4g=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/ut/utf8proc/package.nix b/pkgs/by-name/ut/utf8proc/package.nix
index 049a99ef79e7..28577b96d663 100644
--- a/pkgs/by-name/ut/utf8proc/package.nix
+++ b/pkgs/by-name/ut/utf8proc/package.nix
@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation rec {
   pname = "utf8proc";
-  version = "2.11.0";
+  version = "2.11.1";
 
   src = fetchFromGitHub {
     owner = "JuliaStrings";
     repo = "utf8proc";
     rev = "v${version}";
-    hash = "sha256-iNITnxA1cacOBRU/XV22yzjB0XUOCYsaLLLPYLa+AoA=";
+    hash = "sha256-fFeevzek6Oql+wMmkZXVzKlDh3wZ6AjGCKJFsXBaqzg=";
   };
 
   nativeBuildInputs = [ cmake ];
diff --git a/pkgs/by-name/uv/uv/package.nix b/pkgs/by-name/uv/uv/package.nix
index 11a3d85cf615..0ab5dfc75259 100644
--- a/pkgs/by-name/uv/uv/package.nix
+++ b/pkgs/by-name/uv/uv/package.nix
@@ -18,16 +18,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "uv";
-  version = "0.9.7";
+  version = "0.9.9";
 
   src = fetchFromGitHub {
     owner = "astral-sh";
     repo = "uv";
     tag = finalAttrs.version;
-    hash = "sha256-I0Oe6vaH7iQh+Ubp5RIk8Ol6Ni7OPu8HKX0fqLdewyk=";
+    hash = "sha256-i9vdpHA9EfXmw5fhK1tTZG0T2zOlDbjPCGBIizvQzZw=";
   };
 
-  cargoHash = "sha256-K/RP7EA0VAAI8TGx+VwfKPmyT6+x4p3kekuoMZ0/egc=";
+  cargoHash = "sha256-RZkIjHQElqrj+UAz+q6w1CYW3E5/YW9uy2E5KpKvw+w=";
 
   buildInputs = [
     rust-jemalloc-sys
@@ -62,7 +62,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   passthru = {
     tests.uv-python = python3Packages.uv;
 
-    # Updating `uv` needs to be done on staging. Disabling r-ryantm update bot:
+    # Updating `uv` needs to be done on staging until the next staging branch-off.
+    # Disabling r-ryantm update bot:
     # nixpkgs-update: no auto update
     updateScript = nix-update-script { };
   };
diff --git a/pkgs/by-name/va/vacuum-tube/package.nix b/pkgs/by-name/va/vacuum-tube/package.nix
index 2fabeb6cda57..528fccf219e7 100644
--- a/pkgs/by-name/va/vacuum-tube/package.nix
+++ b/pkgs/by-name/va/vacuum-tube/package.nix
@@ -10,16 +10,16 @@
 
 buildNpmPackage rec {
   pname = "vacuum-tube";
-  version = "1.3.25";
+  version = "1.4.0";
 
   src = fetchFromGitHub {
     owner = "shy1132";
     repo = "VacuumTube";
     tag = "v${version}";
-    hash = "sha256-Jx7C9CVeGQhXH8TlZA4X2k6Eel192rcZGJ8MegVzhuQ=";
+    hash = "sha256-fWcEdxP14wRltPtKIZGyGLpk0PWIJgTcxj93HpWmf2k=";
   };
 
-  npmDepsHash = "sha256-JuNRlsW4n0mCG9tMqg3UPFT/8yU+9j+0bIEJMyqTKY8=";
+  npmDepsHash = "sha256-5B5ADVxbfd6vzVGH4+ASQvxMMh1+/LsvelXgkVrPrEM=";
 
   env = {
     ELECTRON_SKIP_BINARY_DOWNLOAD = true;
diff --git a/pkgs/by-name/vt/vte/package.nix b/pkgs/by-name/vt/vte/package.nix
index 6dc2f3aaecba..0468b6f91a51 100644
--- a/pkgs/by-name/vt/vte/package.nix
+++ b/pkgs/by-name/vt/vte/package.nix
@@ -34,6 +34,7 @@
   nixosTests,
   blackbox-terminal,
   darwinMinVersionHook,
+  withApp ? true,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
@@ -60,6 +61,23 @@ stdenv.mkDerivation (finalAttrs: {
       url = "https://git.alpinelinux.org/aports/plain/community/vte3/fix-W_EXITCODE.patch?id=4d35c076ce77bfac7655f60c4c3e4c86933ab7dd";
       hash = "sha256-FkVyhsM0mRUzZmS2Gh172oqwcfXv6PyD6IEgjBhy2uU=";
     })
+
+    # Skip test depending on gdk when building without gtk3 and gtk4
+    (fetchpatch {
+      url = "https://github.com/GNOME/vte/commit/f946e5bacf97305453d731c507885c52d4c34171.patch";
+      hash = "sha256-axi16Fpt4d32akFYeAR+SuUIwzRhjhK2oHp/yAXVRgk=";
+    })
+    # https://gitlab.gnome.org/GNOME/vte/-/merge_requests/11
+    (fetchpatch {
+      url = "https://gitlab.gnome.org/GNOME/vte/-/commit/f672ed15a88dd3e25c33aa0a5ef6f6d291a6d5c7.patch";
+      hash = "sha256-JdLDild5j7marvR5n2heW9YD00+bwzJIoxDlzO5r/6w=";
+    })
+
+    # Add option to not build the vte application
+    (fetchpatch {
+      url = "https://github.com/GNOME/vte/commit/6b7a6a7df9df99368b7ce5ac5903bd2578167567.patch";
+      hash = "sha256-s3HigfTZLtGmsZS6dfD3YE95ZdBjB4WOWDvuoatOu3o=";
+    })
   ];
 
   nativeBuildInputs = [
@@ -107,11 +125,10 @@ stdenv.mkDerivation (finalAttrs: {
 
   mesonFlags = [
     "-Ddocs=true"
+    (lib.mesonBool "app" withApp)
     (lib.mesonBool "gtk3" (gtkVersion == "3"))
     (lib.mesonBool "gtk4" (gtkVersion == "4"))
-  ]
-  ++ lib.optionals (!systemdSupport) [
-    "-D_systemd=false"
+    (lib.mesonBool "_systemd" (!systemdSupport))
   ]
   ++ lib.optionals stdenv.hostPlatform.isDarwin [
     # -Bsymbolic-functions is not supported on darwin
@@ -125,11 +142,11 @@ stdenv.mkDerivation (finalAttrs: {
   );
 
   postPatch = ''
-    patchShebangs perf/*
-    patchShebangs src/app/meson_desktopfile.py
-    patchShebangs src/parser-seq.py
-    patchShebangs src/minifont-coverage.py
-    patchShebangs src/modes.py
+    patchShebangs perf/* \
+      src/app/meson_desktopfile.py \
+      src/parser-seq.py \
+      src/minifont-coverage.py \
+      src/modes.py
   '';
 
   postFixup = ''
diff --git a/pkgs/by-name/wa/waagent/package.nix b/pkgs/by-name/wa/waagent/package.nix
index 2804923a182d..64b9783d7ee3 100644
--- a/pkgs/by-name/wa/waagent/package.nix
+++ b/pkgs/by-name/wa/waagent/package.nix
@@ -15,14 +15,14 @@ let
 in
 python.pkgs.buildPythonApplication rec {
   pname = "waagent";
-  version = "2.14.0.1";
+  version = "2.15.0.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Azure";
     repo = "WALinuxAgent";
     tag = "v${version}";
-    hash = "sha256-1q/buJSVaxu2ZTpDAw5slgQIJ0pih2i6nA42hgKqJ5I=";
+    hash = "sha256-P+jxn0W8LaTxDcvKlWjCK1Z9X1l/jf1s41bO9N34N0Q=";
   };
   patches = [
     # Suppress the following error when waagent tries to configure sshd:
diff --git a/pkgs/by-name/wa/waf/package.nix b/pkgs/by-name/wa/waf/package.nix
index 6f4fe6d9cba2..ad1b14998c63 100644
--- a/pkgs/by-name/wa/waf/package.nix
+++ b/pkgs/by-name/wa/waf/package.nix
@@ -12,13 +12,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "waf";
-  version = "2.1.6";
+  version = "2.1.7";
 
   src = fetchFromGitLab {
     owner = "ita1024";
     repo = "waf";
     rev = "waf-${finalAttrs.version}";
-    hash = "sha256-srBBRe7OLNM86OVJYYk6A0EYJi+rdJ/xG7f+YBdrclE=";
+    hash = "sha256-qJDnox7+MUtAK8NaaDgEdRVU4YVA8f5Ky9Suv/qLI3g=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/xd/xdg-desktop-portal-cosmic/package.nix b/pkgs/by-name/xd/xdg-desktop-portal-cosmic/package.nix
index f9eb7c36e7e4..6b2bb8da9889 100644
--- a/pkgs/by-name/xd/xdg-desktop-portal-cosmic/package.nix
+++ b/pkgs/by-name/xd/xdg-desktop-portal-cosmic/package.nix
@@ -16,17 +16,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "xdg-desktop-portal-cosmic";
-  version = "1.0.0-beta.6";
+  version = "1.0.0-beta.7";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "xdg-desktop-portal-cosmic";
     tag = "epoch-${finalAttrs.version}";
-    hash = "sha256-ONAj1yfTL6VdpK1iO89ika/HBFBADdaGQPZ1ml8vg1g=";
+    hash = "sha256-oqggnwDzmi6ES3o3Pt51QwZUuqtqlbrMxFGaftyqgRo=";
   };
 
-  cargoHash = "sha256-V1tFOZa2f+Z0MMuIoHlbB7BrXfsUhmuhoqOu9fjteEA=";
+  cargoHash = "sha256-CqzM1hVdY3+NhH58NDlOaFVU1na/bkh6fI9rAp2Vwog=";
 
   separateDebugInfo = true;
 
diff --git a/pkgs/by-name/xk/xkeyboard-config/package.nix b/pkgs/by-name/xk/xkeyboard-config/package.nix
index 76f05d89a425..038e63760f78 100644
--- a/pkgs/by-name/xk/xkeyboard-config/package.nix
+++ b/pkgs/by-name/xk/xkeyboard-config/package.nix
@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchurl,
-  fetchpatch2,
   pkg-config,
   meson,
   ninja,
@@ -14,23 +13,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "xkeyboard-config";
-  version = "2.45";
+  version = "2.46";
 
   src = fetchurl {
     url = "mirror://xorg/individual/data/xkeyboard-config/xkeyboard-config-${finalAttrs.version}.tar.xz";
-    hash = "sha256-Fp4HWpLZV6V3h8GZ6E41nfKTG3GWwcW0o9V27mI1qHw=";
+    hash = "sha256-EMWCGPtg0I+x97MDBN6zukdhMZWqigioHxlyd1zMNkA=";
   };
 
-  patches = [
-    # Patch that reverts a commit in 2.45 that broke the us-mac keyboard layout.
-    # Remove when 2.46 is released.
-    # https://github.com/NixOS/nixpkgs/issues/426375
-    (fetchpatch2 {
-      url = "https://gitlab.freedesktop.org/xkeyboard-config/xkeyboard-config/-/commit/11dbaeb23d06c0d21efe538c90b44ffc8fc3a071.patch";
-      hash = "sha256-qZkO1GQvbtTFeXqCuA7bjgQX5jq9c+LiKa/ziP1w2sI=";
-    })
-  ];
-
   strictDeps = true;
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/ya/yara/package.nix b/pkgs/by-name/ya/yara/package.nix
index 0867a3175cef..317575a66bfc 100644
--- a/pkgs/by-name/ya/yara/package.nix
+++ b/pkgs/by-name/ya/yara/package.nix
@@ -19,13 +19,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "yara";
-  version = "4.5.4";
+  version = "4.5.5";
 
   src = fetchFromGitHub {
     owner = "VirusTotal";
     repo = "yara";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-vSwjP0wbC65jEOxY9zrHAV1gEhcZ96emqvkuUw20Twc=";
+    hash = "sha256-a+oLxVJgdDrnOra85PPo8ZlFhinawWHuRtVE39S8yJk=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/ya/yazi/plugins/git/default.nix b/pkgs/by-name/ya/yazi/plugins/git/default.nix
index 362cc189c192..d9e4648950dd 100644
--- a/pkgs/by-name/ya/yazi/plugins/git/default.nix
+++ b/pkgs/by-name/ya/yazi/plugins/git/default.nix
@@ -5,13 +5,13 @@
 }:
 mkYaziPlugin {
   pname = "git.yazi";
-  version = "25.5.31-unstable-2025-07-05";
+  version = "25.5.31-unstable-2025-11-19";
 
   src = fetchFromGitHub {
     owner = "yazi-rs";
     repo = "plugins";
-    rev = "cbc4450a6c238114362e3c2fbca355166c2a2202";
-    hash = "sha256-otD7zmm/Juh68D2czRhtU7CZFIaMgADxuo8p68cS7fk=";
+    rev = "2301ff803a033cd16d16e62697474d6cb9a94711";
+    hash = "sha256-+lirIBXv3EvztE/1b3zHnQ9r5N3VWBCUuH3gZR52fE0=";
   };
 
   meta = {
diff --git a/pkgs/by-name/ya/yazi/plugins/mediainfo/default.nix b/pkgs/by-name/ya/yazi/plugins/mediainfo/default.nix
index 8e046356a4a2..42ccebb1e014 100644
--- a/pkgs/by-name/ya/yazi/plugins/mediainfo/default.nix
+++ b/pkgs/by-name/ya/yazi/plugins/mediainfo/default.nix
@@ -5,13 +5,13 @@
 }:
 mkYaziPlugin {
   pname = "mediainfo.yazi";
-  version = "25.5.31-unstable-2025-11-04";
+  version = "25.5.31-unstable-2025-11-15";
 
   src = fetchFromGitHub {
     owner = "boydaihungst";
     repo = "mediainfo.yazi";
-    rev = "7543154138ffb2bb0c738419af6ff4595152a809";
-    hash = "sha256-qWh/2WA1pBhze+g5aDSl4gHk2zJSgnl4WZr74FfNA74=";
+    rev = "1099409ca956282efe49dea8ab53f8be95feb72a";
+    hash = "sha256-K2SHIzmNtICgVchSPB1mtTboyvDPIq+hN3GEOR20hpk=";
   };
 
   meta = {
diff --git a/pkgs/by-name/ya/yazi/plugins/recycle-bin/default.nix b/pkgs/by-name/ya/yazi/plugins/recycle-bin/default.nix
index a3e01204d065..b722b6d069d2 100644
--- a/pkgs/by-name/ya/yazi/plugins/recycle-bin/default.nix
+++ b/pkgs/by-name/ya/yazi/plugins/recycle-bin/default.nix
@@ -5,13 +5,13 @@
 }:
 mkYaziPlugin {
   pname = "recycle-bin.yazi";
-  version = "0-unstable-2025-11-03";
+  version = "0-unstable-2025-11-11";
 
   src = fetchFromGitHub {
     owner = "uhs-robert";
     repo = "recycle-bin.yazi";
-    rev = "bce0eb110e2447544fd619f30ff82bfee51a6347";
-    hash = "sha256-dj/lKod8I6Fs1Vp2e6AOEmUVSwT12Ck7zT5e4Qsmzt0=";
+    rev = "1762676a032e0de6d4712ae06d14973670621f61";
+    hash = "sha256-LzqFBLqaclRgjyLKL0OxlAao+MMivh4Ww7UZf2gcOUM=";
   };
 
   meta = {
diff --git a/pkgs/desktops/lomiri/services/lomiri-polkit-agent/default.nix b/pkgs/desktops/lomiri/services/lomiri-polkit-agent/default.nix
index 5326211f9793..468d847f1469 100644
--- a/pkgs/desktops/lomiri/services/lomiri-polkit-agent/default.nix
+++ b/pkgs/desktops/lomiri/services/lomiri-polkit-agent/default.nix
@@ -18,24 +18,17 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "lomiri-polkit-agent";
-  version = "0.3.1";
+  version = "0.3.2";
 
   src = fetchFromGitLab {
     owner = "ubports";
     repo = "development/core/lomiri-polkit-agent";
     tag = finalAttrs.version;
-    hash = "sha256-6n/NIUstXODq1fGPF6ioXOWR39kTlzKWdAdW1LbnFy0=";
+    hash = "sha256-JKU2lm5wco9aC2cu3lgJ9OfGAzKQO/wQXFPEdb9Uz3Y=";
   };
 
   strictDeps = true;
 
-  postPatch = ''
-    # CMake 4 compat
-    # Remove when https://gitlab.com/ubports/development/core/lomiri-polkit-agent/-/commit/cb81d853ce6dd3bb11030f5a23b6a13f926779a1 in release
-    substituteInPlace CMakeLists.txt \
-      --replace-fail 'VERSION 3.5' 'VERSION 3.10'
-  '';
-
   nativeBuildInputs = [
     cmake
     pkg-config
diff --git a/pkgs/development/compilers/go/1.24.nix b/pkgs/development/compilers/go/1.24.nix
index 17be8a607ec0..cdd21e4c4004 100644
--- a/pkgs/development/compilers/go/1.24.nix
+++ b/pkgs/development/compilers/go/1.24.nix
@@ -9,45 +9,18 @@
   buildPackages,
   pkgsBuildTarget,
   targetPackages,
-  testers,
-  skopeo,
   buildGo124Module,
+  callPackage,
 }:
 
 let
   goBootstrap = buildPackages.callPackage ./bootstrap122.nix { };
 
-  skopeoTest = skopeo.override { buildGoModule = buildGo124Module; };
-
   # We need a target compiler which is still runnable at build time,
   # to handle the cross-building case where build != host == target
   targetCC = pkgsBuildTarget.targetPackages.stdenv.cc;
 
   isCross = stdenv.buildPlatform != stdenv.targetPlatform;
-
-  # In order for buildmode=pie to work either Go's internal linker must know how
-  # to produce position-independent executables or Go must be using an external linker.
-  #
-  # go-default-pie.patch tries to enable position-independent codegen (PIE) only when the platform
-  # reports support (via BuildModeSupported(..., "pie", ...)).
-  #
-  # That probe is not fully reliable: for example, `pkgsi686Linux.go` can fail during bootstrap
-  # with message 'default PIE binary requires external (cgo) linking, but cgo is not enabled'
-  # despite CGO being enabled. (we set `CGO_ENABLED=1`).
-  #
-  # To avoid such breakage, limit this patch to a small set of explicitly tested platforms
-  # rather than relying on the general BuildModeSupported("pie") check.
-  supportsDefaultPie =
-    let
-      hasPie = {
-        "amd64" = true;
-        "arm64" = true;
-        "ppc64le" = true;
-        "riscv64" = true;
-      };
-    in
-    hasPie.${stdenv.hostPlatform.go.GOARCH} or false
-    && hasPie.${stdenv.targetPlatform.go.GOARCH} or false;
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "go";
@@ -89,11 +62,6 @@ stdenv.mkDerivation (finalAttrs: {
     ./remove-tools-1.11.patch
     ./go_no_vendor_checks-1.23.patch
     ./go-env-go_ldso.patch
-  ]
-  ++ lib.optionals supportsDefaultPie [
-    (replaceVars ./go-default-pie.patch {
-      inherit (stdenv.targetPlatform.go) GOARCH;
-    })
   ];
 
   inherit (stdenv.targetPlatform.go) GOOS GOARCH GOARM;
@@ -195,14 +163,10 @@ stdenv.mkDerivation (finalAttrs: {
   disallowedReferences = [ goBootstrap ];
 
   passthru = {
-    inherit goBootstrap skopeoTest;
-    tests = {
-      skopeo = testers.testVersion { package = skopeoTest; };
-      version = testers.testVersion {
-        package = finalAttrs.finalPackage;
-        command = "go version";
-        version = "go${finalAttrs.version}";
-      };
+    inherit goBootstrap;
+    tests = callPackage ./tests.nix {
+      go = finalAttrs.finalPackage;
+      buildGoModule = buildGo124Module;
     };
   };
 
diff --git a/pkgs/development/compilers/go/1.25.nix b/pkgs/development/compilers/go/1.25.nix
index 20f8bc52a533..e807f81f4ab7 100644
--- a/pkgs/development/compilers/go/1.25.nix
+++ b/pkgs/development/compilers/go/1.25.nix
@@ -10,57 +10,26 @@
   pkgsBuildTarget,
   targetPackages,
   # for testing
-  testers,
-  runCommand,
-  bintools,
-  skopeo,
-  clickhouse-backup,
   buildGo125Module,
+  callPackage,
 }:
 
 let
   goBootstrap = buildPackages.callPackage ./bootstrap122.nix { };
 
-  skopeoTest = skopeo.override { buildGoModule = buildGo125Module; };
-  clickhouse-backupTest = clickhouse-backup.override { buildGoModule = buildGo125Module; };
-
   # We need a target compiler which is still runnable at build time,
   # to handle the cross-building case where build != host == target
   targetCC = pkgsBuildTarget.targetPackages.stdenv.cc;
 
   isCross = stdenv.buildPlatform != stdenv.targetPlatform;
-
-  # go-default-pie.patch tries to enable position-independent codegen (PIE) only when the platform
-  # reports support (via BuildModeSupported(..., "pie", ...)).
-  #
-  # In order for buildmode=pie to work either Go's internal linker must know how
-  # to produce position-independent executables or Go must be using an external linker.
-  #
-  # That probe is not fully reliable: for example, `pkgsi686Linux.go` can fail during bootstrap
-  # with message 'default PIE binary requires external (cgo) linking, but cgo is not enabled'
-  # despite CGO being enabled. (we set `CGO_ENABLED=1`).
-  #
-  # To avoid such breakage, limit this patch to a small set of explicitly tested platforms
-  # rather than relying on the general BuildModeSupported("pie") check.
-  supportsDefaultPie =
-    let
-      hasPie = {
-        "amd64" = true;
-        "arm64" = true;
-        "ppc64le" = true;
-        "riscv64" = true;
-      };
-    in
-    hasPie.${stdenv.hostPlatform.go.GOARCH} or false
-    && hasPie.${stdenv.targetPlatform.go.GOARCH} or false;
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "go";
-  version = "1.25.3";
+  version = "1.25.4";
 
   src = fetchurl {
     url = "https://go.dev/dl/go${finalAttrs.version}.src.tar.gz";
-    hash = "sha256-qBpLpZPQAV4QxR4mfeP/B8eskU38oDfZUX0ClRcJd5U=";
+    hash = "sha256-FgBDt/F7bWC1A2lDaRf9qNUDRkC6Oa4kMca5WoicyYw=";
   };
 
   strictDeps = true;
@@ -94,11 +63,6 @@ stdenv.mkDerivation (finalAttrs: {
     ./remove-tools-1.11.patch
     ./go_no_vendor_checks-1.23.patch
     ./go-env-go_ldso.patch
-  ]
-  ++ lib.optionals supportsDefaultPie [
-    (replaceVars ./go-default-pie.patch {
-      inherit (stdenv.targetPlatform.go) GOARCH;
-    })
   ];
 
   inherit (stdenv.targetPlatform.go) GOOS GOARCH GOARM;
@@ -200,31 +164,10 @@ stdenv.mkDerivation (finalAttrs: {
   disallowedReferences = [ goBootstrap ];
 
   passthru = {
-    inherit goBootstrap skopeoTest;
-    tests = {
-      skopeo = testers.testVersion { package = skopeoTest; };
-      version = testers.testVersion {
-        package = finalAttrs.finalPackage;
-        command = "go version";
-        version = "go${finalAttrs.version}";
-      };
-      # Picked clickhouse-backup as a package that sets CGO_ENABLED=0
-      # Running and outputting the right version proves a working ELF interpreter was picked
-      clickhouse-backup = testers.testVersion { package = clickhouse-backupTest; };
-      clickhouse-backup-is-pie = runCommand "has-pie" { meta.broken = stdenv.hostPlatform.isStatic; } ''
-        ${lib.optionalString (!isCross) ''
-          if ${lib.getExe' bintools "readelf"} -p .comment ${lib.getExe clickhouse-backup} | grep -Fq "GCC: (GNU)"; then
-            echo "${lib.getExe clickhouse-backup} has a GCC .comment, but it should have used the internal go linker"
-            exit 1
-          fi
-        ''}
-        if ${lib.getExe' bintools "readelf"} -h ${lib.getExe clickhouse-backup} | grep -q "Type:.*DYN"; then
-          touch $out
-        else
-          echo "ERROR: clickhouse-backup is NOT PIE"
-          exit 1
-        fi
-      '';
+    inherit goBootstrap;
+    tests = callPackage ./tests.nix {
+      go = finalAttrs.finalPackage;
+      buildGoModule = buildGo125Module;
     };
   };
 
diff --git a/pkgs/development/compilers/go/go-default-pie.patch b/pkgs/development/compilers/go/go-default-pie.patch
deleted file mode 100644
index bce8d8dafd3d..000000000000
--- a/pkgs/development/compilers/go/go-default-pie.patch
+++ /dev/null
@@ -1,13 +0,0 @@
-diff --git a/src/internal/platform/supported.go b/src/internal/platform/supported.go
-index f9706a6988..abac42d550 100644
---- a/src/internal/platform/supported.go
-+++ b/src/internal/platform/supported.go
-@@ -249,7 +253,7 @@ func DefaultPIE(goos, goarch string, isRace bool) bool {
- 	case "darwin":
- 		return true
- 	}
--	return false
-+	return goarch == "@GOARCH@" && BuildModeSupported("gc", "pie", goos, goarch)
- }
- 
- // ExecutableHasDWARF reports whether the linked executable includes DWARF
diff --git a/pkgs/development/compilers/go/tests.nix b/pkgs/development/compilers/go/tests.nix
new file mode 100644
index 000000000000..3eeaa8b53262
--- /dev/null
+++ b/pkgs/development/compilers/go/tests.nix
@@ -0,0 +1,61 @@
+{
+  lib,
+  stdenv,
+  go,
+  buildGoModule,
+  # A package that relies on CGO
+  skopeo,
+  testers,
+  runCommand,
+  bintools,
+  # A package with CGO_ENABLED=0
+  athens,
+}:
+let
+  skopeo' = skopeo.override { buildGoModule = buildGoModule; };
+  athens' = athens.override { buildGoModule = buildGoModule; };
+  expectedCgoEnabledType = "DYN";
+  expectedCgoDisabledType = "EXE";
+in
+{
+  skopeo = testers.testVersion { package = skopeo'; };
+  version = testers.testVersion {
+    package = go;
+    command = "go version";
+    version = "go${go.version}";
+  };
+  athens = testers.testVersion { package = athens'; };
+}
+# bin type tests assume ELF file + linux-specific exe types
+// lib.optionalAttrs stdenv.hostPlatform.isLinux {
+  skopeo-bin-type = runCommand "skopeo-bin-type" { meta.broken = stdenv.hostPlatform.isStatic; } ''
+    bin="${lib.getExe' skopeo' ".skopeo-wrapped"}"
+    if ! ${lib.getExe' bintools "readelf"} -p .comment $bin | grep -Fq "GCC: (GNU)"; then
+      echo "${lib.getExe skopeo} should have been externally linked, but no GNU .comment section found"
+      exit 1
+    fi
+    if ${lib.getExe' bintools "readelf"} -h $bin | grep -q "Type:.*${expectedCgoEnabledType}"; then
+      touch $out
+    else
+      echo "ERROR: $bin is NOT ${expectedCgoEnabledType}"
+      exit 1
+    fi
+  '';
+  athens-bin-type = runCommand "athens-bin-type" { meta.broken = stdenv.hostPlatform.isStatic; } ''
+    bin="${lib.getExe athens'}"
+    ${lib.optionalString (stdenv.buildPlatform == stdenv.targetPlatform) ''
+      # For CGO_ENABLED=0 the internal linker should be used, except
+      # for cross where we rely on external linking by default
+      if ${lib.getExe' bintools "readelf"} -p .comment ${lib.getExe athens'} | grep -Fq "GCC: (GNU)"; then
+        echo "${lib.getExe athens'} has a GCC .comment, but it should have used the internal go linker"
+        exit 1
+      fi
+    ''}
+    if ${lib.getExe' bintools "readelf"} -h "$bin" | grep -q "Type:.*${expectedCgoDisabledType}"; then
+      touch $out
+    else
+      echo "ERROR: $bin is NOT ${expectedCgoDisabledType}"
+      exit 1
+    fi
+  '';
+}
diff --git a/pkgs/development/compilers/rust/1_90.nix b/pkgs/development/compilers/rust/1_91.nix
similarity index 51%
rename from pkgs/development/compilers/rust/1_90.nix
rename to pkgs/development/compilers/rust/1_91.nix
index 22124d21362b..a5fee800afa4 100644
--- a/pkgs/development/compilers/rust/1_90.nix
+++ b/pkgs/development/compilers/rust/1_91.nix
@@ -44,8 +44,8 @@ let
 in
 import ./default.nix
   {
-    rustcVersion = "1.90.0";
-    rustcSha256 = "sha256-eZqfnLpO1TUeBxBIvPa1VgdV2QCWSN7zOkB91JYfm34=";
+    rustcVersion = "1.91.1";
+    rustcSha256 = "sha256-ONziBdOfYVcSYfBEQjehzp7+y5cOdg2OxNlXr1tEVyM=";
 
     llvmSharedForBuild = llvmSharedFor pkgsBuildBuild;
     llvmSharedForHost = llvmSharedFor pkgsBuildHost;
@@ -59,30 +59,30 @@ import ./default.nix
     # Note: the version MUST be the same version that we are building. Upstream
     # ensures that each released compiler can compile itself:
     # https://github.com/NixOS/nixpkgs/pull/351028#issuecomment-2438244363
-    bootstrapVersion = "1.90.0";
+    bootstrapVersion = "1.91.1";
 
     # fetch hashes by running `print-hashes.sh ${bootstrapVersion}`
     bootstrapHashes = {
-      i686-unknown-linux-gnu = "8f389b9eb1513785f5589816b60b5a7ca3b24c29bedce7ec0d1c2f8c3ccfb0cc";
-      x86_64-unknown-linux-gnu = "e453bae1c68d02fe2eae065c5452d5731308164cd154154c6ee442d2fa590685";
-      x86_64-unknown-linux-musl = "251c9fe4e3374f2f9f629a7a83238c618e016b1bda1b9de5e8385cb3a6f057fa";
-      arm-unknown-linux-gnueabihf = "61f3987f61bf73562f04dcacfee1a2bad8d16d41f7a3f81ad82dd9b9cbc559ce";
-      armv7-unknown-linux-gnueabihf = "06cfb7f1bd3ce50480eed73ad9ae4f8f665d154fa4c713bc08541197eecd4ae0";
-      aarch64-unknown-linux-gnu = "293f412e3412c3aa3398c78ebbdf898fa08eacad80c85a7332ce1a455504c5fc";
-      aarch64-unknown-linux-musl = "b3ac31ca2e1a720709bf4fb678b2a2f98464c55662c516dfffcbdadd95a420c9";
-      x86_64-apple-darwin = "3d1d24e1d4bedb421ca1a16060c21f4d803eaefba585c0b5b5d0b1e56692ef4b";
-      aarch64-apple-darwin = "a11b52e34f5e80cb25d49f7943ae60e0b069b431727a4c09b2c890ceebee3687";
-      powerpc64-unknown-linux-gnu = "39720c905b8a730cfa725b7e201cd238d15c33112bd4c31b168ca6d1cb898cac";
-      powerpc64le-unknown-linux-gnu = "4061405099dc0aba379fe7b7a616d320272ef9325114dfa8f106c303f9b5695c";
-      powerpc64le-unknown-linux-musl = "0d97ef122126a0de87a8581f48ef85ff0887b733b429ffcec4651699b5444511";
-      riscv64gc-unknown-linux-gnu = "42cc3b3bb008e24a39bd98887c43ef32c2d997f801c86ca47f2119e5e3589fcb";
-      s390x-unknown-linux-gnu = "345c9b902ebee656533d2cfba39c1a020e6a41a4a9609f87430ff8a5d680d649";
-      loongarch64-unknown-linux-gnu = "1c116041a2bc7ab2697218f99ad8cccbe3d6b63fcbf516cb9d985cb00efcdb09";
-      loongarch64-unknown-linux-musl = "0ae18468c7cd3872d1b685cf960426aeb7467629f69eabb497bee6f0fff9cb04";
-      x86_64-unknown-freebsd = "6c7ebf6acbe00873680a190152d47aeebe76e237195b974c593a67227123b2ef";
+      i686-unknown-linux-gnu = "b596ac56c67cf893e58ecf3263e59ac10157e9f50047e8d3d84faf288273ea47";
+      x86_64-unknown-linux-gnu = "1c955c040dd087e4751d15588ddec288b4208bea16f8ec5046c164877e55fff7";
+      x86_64-unknown-linux-musl = "e690ea46a73b11268c0487a4bca440142d69de7c0ca062fcdf2b99ad0e42e8e5";
+      arm-unknown-linux-gnueabihf = "4899619845a875b2e51825943fad66cf42dced0e1f66470222ff0653776bd59e";
+      armv7-unknown-linux-gnueabihf = "c51a61f304c0019c57169b964ec26f7a7ff7dcefaf42b973237f96fb457b25c8";
+      aarch64-unknown-linux-gnu = "50213385f288b8760b2efd54ac066ef9a76475e778cbe3b0fcbd3f898fc00674";
+      aarch64-unknown-linux-musl = "d374258cd00b4069e44266ab58b321208187511606236ebcc791a5a2d86554e1";
+      x86_64-apple-darwin = "05adbd08e6535ed22a9c3d8f11d90df51eb6393488cbbb0c81f2b18d56e4d1ee";
+      aarch64-apple-darwin = "f6727c9ab64a5b2a15623f29a023faf0c6a6aeb1347d102b88d595e5c1d9beae";
+      powerpc64-unknown-linux-gnu = "94d86d13af288c4a06c8ea8b563e3889d55cc6064a06defd3b612eeeda902b93";
+      powerpc64le-unknown-linux-gnu = "355f8043cd506fa718892eeedeebc9d6cc3de1a7757fdb8385c7bdc4cbc853ac";
+      powerpc64le-unknown-linux-musl = "c17d51f54c00a371fbab80519b454a901a4b36b9f5a3a692e8816480d8f87067";
+      riscv64gc-unknown-linux-gnu = "08230d9c59105270b2e06c5e87078a2a478efcacef8a88aedcccca9f317fa492";
+      s390x-unknown-linux-gnu = "fb87330d72636d30f0a9b4b640f994186fc3ad0c0f3c89b2e0f7f31cfd7885f6";
+      loongarch64-unknown-linux-gnu = "be6f676ae2ad80d4242798429915f708e3ecae7c895936c5fee172a4f7f2eec8";
+      loongarch64-unknown-linux-musl = "7b071bc98d1e42dd802cc5b5bb83a9467d02ad6621231363519c869d322dcd5f";
+      x86_64-unknown-freebsd = "9e231fa573b6bb99654a689687aede2014d4c21ac3c8422534c990c859632f50";
     };
 
-    selectRustPackage = pkgs: pkgs.rust_1_90;
+    selectRustPackage = pkgs: pkgs.rust_1_91;
   }
 
   (
diff --git a/pkgs/development/compilers/rust/rustc.nix b/pkgs/development/compilers/rust/rustc.nix
index 9bb69eb243bb..d2364f7aa533 100644
--- a/pkgs/development/compilers/rust/rustc.nix
+++ b/pkgs/development/compilers/rust/rustc.nix
@@ -62,12 +62,6 @@ stdenv.mkDerivation (finalAttrs: {
     passthru.isReleaseTarball = true;
   };
 
-  hardeningDisable = optionals stdenv.cc.isClang [
-    # remove once https://github.com/NixOS/nixpkgs/issues/318674 is
-    # addressed properly
-    "zerocallusedregs"
-  ];
-
   __darwinAllowLocalNetworking = true;
 
   # rustc complains about modified source files otherwise
@@ -238,6 +232,11 @@ stdenv.mkDerivation (finalAttrs: {
       # doesn't work) to build a linker.
       "--disable-llvm-bitcode-linker"
     ]
+    ++ optionals (!fastCross && stdenv.targetPlatform.config != "wasm32-unknown-none") [
+      # See https://github.com/rust-lang/rust/issues/132802
+      "--set=target.wasm32-unknown-unknown.optimized-compiler-builtins=false"
+      "--set=target.wasm32v1-none.optimized-compiler-builtins=false"
+    ]
     ++ optionals (stdenv.targetPlatform.isLinux && !(stdenv.targetPlatform.useLLVM or false)) [
       "--enable-profiler" # build libprofiler_builtins
     ]
@@ -281,12 +280,13 @@ stdenv.mkDerivation (finalAttrs: {
       ''
         runHook preBuild
 
-        mkdir -p build/${stdenv.hostPlatform.rust.rustcTargetSpec}/stage0-{std,rustc}/${stdenv.hostPlatform.rust.rustcTargetSpec}/release/
+        mkdir -p build/${stdenv.hostPlatform.rust.rustcTargetSpec}/stage{0,1}-{std,rustc}/${stdenv.hostPlatform.rust.rustcTargetSpec}/release/
         ln -s ${rustc.unwrapped}/lib/rustlib/${stdenv.hostPlatform.rust.rustcTargetSpec}/libstd-*.so build/${stdenv.hostPlatform.rust.rustcTargetSpec}/stage0-std/${stdenv.hostPlatform.rust.rustcTargetSpec}/release/libstd.so
         ln -s ${rustc.unwrapped}/lib/rustlib/${stdenv.hostPlatform.rust.rustcTargetSpec}/librustc_driver-*.so build/${stdenv.hostPlatform.rust.rustcTargetSpec}/stage0-rustc/${stdenv.hostPlatform.rust.rustcTargetSpec}/release/librustc.so
         ln -s ${rustc.unwrapped}/bin/rustc build/${stdenv.hostPlatform.rust.rustcTargetSpec}/stage0-rustc/${stdenv.hostPlatform.rust.rustcTargetSpec}/release/rustc-main
+        ln -s ${rustc.unwrapped}/bin/rustc build/${stdenv.hostPlatform.rust.rustcTargetSpec}/stage1-rustc/${stdenv.hostPlatform.rust.rustcTargetSpec}/release/rustc-main
         touch build/${stdenv.hostPlatform.rust.rustcTargetSpec}/stage0-std/${stdenv.hostPlatform.rust.rustcTargetSpec}/release/.libstd-stamp
-        touch build/${stdenv.hostPlatform.rust.rustcTargetSpec}/stage0-rustc/${stdenv.hostPlatform.rust.rustcTargetSpec}/release/.librustc-stamp
+        touch build/${stdenv.hostPlatform.rust.rustcTargetSpec}/stage{0,1}-rustc/${stdenv.hostPlatform.rust.rustcTargetSpec}/release/.librustc-stamp
         python ./x.py --keep-stage=0 --stage=1 build library
 
         runHook postBuild
diff --git a/pkgs/development/compilers/sbcl/default.nix b/pkgs/development/compilers/sbcl/default.nix
index 29345c0b4394..24bfe176570c 100644
--- a/pkgs/development/compilers/sbcl/default.nix
+++ b/pkgs/development/compilers/sbcl/default.nix
@@ -30,8 +30,8 @@ let
     "2.4.10".sha256 = "sha256-zus5a2nSkT7uBIQcKva+ylw0LOFGTD/j5FPy3hDF4vg=";
     # By unofficial and very loose convention we keep the latest version of
     # SBCL, and the previous one in case someone quickly needs to roll back.
-    "2.5.7".sha256 = "sha256-xPr+t5VpnVvP+QhQkazHYtz15V+FI1Yl89eu8SyJ0dM=";
     "2.5.9".sha256 = "sha256-0bGQItQ9xJPtyXK25ZyTrmaEyWP90rQTsJZeGM1r0eI=";
+    "2.5.10".sha256 = "sha256-v1+0nypC82s+AD0uTSNDhq3fB9ndjKhjRlaSfMls4SU=";
   };
   # Collection of pre-built SBCL binaries for platforms that need them for
   # bootstrapping. Ideally these are to be avoided.  If ECL (or any other
diff --git a/pkgs/development/interpreters/guile/3.0.nix b/pkgs/development/interpreters/guile/3.0.nix
index d3bf1518868c..979c1acb5671 100644
--- a/pkgs/development/interpreters/guile/3.0.nix
+++ b/pkgs/development/interpreters/guile/3.0.nix
@@ -126,6 +126,9 @@ builder rec {
   #  https://github.com/NixOS/nixpkgs/pull/160051#issuecomment-1046193028
   ++ lib.optional (stdenv.hostPlatform.isDarwin) "--disable-lto";
 
+  # Fix build with gcc15
+  env.NIX_CFLAGS_COMPILE = toString [ "-std=gnu17" ];
+
   postInstall = ''
     wrapProgram $out/bin/guile-snarf --prefix PATH : "${gawk}/bin"
   ''
diff --git a/pkgs/development/interpreters/spidermonkey/140.nix b/pkgs/development/interpreters/spidermonkey/140.nix
index af269d60324a..862aa494d240 100644
--- a/pkgs/development/interpreters/spidermonkey/140.nix
+++ b/pkgs/development/interpreters/spidermonkey/140.nix
@@ -1,4 +1,4 @@
 import ./common.nix {
-  version = "140.4.0";
-  hash = "sha512-z84L3PbUWZx7lrzNn9E5C/s2RduSdqNpowdgzmgZhQqqQlGGnmvTxdhYLqNyi5IHYsXxb3zhLOFRw+dDJ7jIEQ==";
+  version = "140.5.0";
+  hash = "sha512-QSI2oly+oXG9W9U15Fw7pAlXqU4fjdOrdCQeCqHEB1/LjTlLlhlZnWDOPkVj5xLIJfqL7EQXlPIpNWgC9ysoYQ==";
 }
diff --git a/pkgs/development/libraries/gdk-pixbuf/default.nix b/pkgs/development/libraries/gdk-pixbuf/default.nix
index 9ae7a4c31133..f62230c7649e 100644
--- a/pkgs/development/libraries/gdk-pixbuf/default.nix
+++ b/pkgs/development/libraries/gdk-pixbuf/default.nix
@@ -28,7 +28,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gdk-pixbuf";
-  version = "2.44.3";
+  version = "2.44.4";
 
   outputs = [
     "out"
@@ -44,7 +44,7 @@ stdenv.mkDerivation (finalAttrs: {
     in
     fetchurl {
       url = "mirror://gnome/sources/${pname}/${lib.versions.majorMinor version}/${pname}-${version}.tar.xz";
-      hash = "sha256-QKktzCN/+UtjqAwVmj9vIs1Z9vtJYfIBx4eZ+iyKwKY=";
+      hash = "sha256-k6Gqw/FCeuc0Vzl1gqLDjQSWOKgBeIzL1fSMpge9vRc=";
     };
 
   patches = [
diff --git a/pkgs/development/libraries/gtk/4.x.nix b/pkgs/development/libraries/gtk/4.x.nix
index 9b5a9daaa063..9522692b4b56 100644
--- a/pkgs/development/libraries/gtk/4.x.nix
+++ b/pkgs/development/libraries/gtk/4.x.nix
@@ -4,6 +4,7 @@
   buildPackages,
   replaceVars,
   fetchurl,
+  fetchpatch,
   pkg-config,
   docutils,
   gettext,
@@ -69,7 +70,7 @@ in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gtk4";
-  version = "4.20.2";
+  version = "4.20.3";
 
   outputs = [
     "out"
@@ -85,9 +86,15 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/gtk/${lib.versions.majorMinor finalAttrs.version}/gtk-${finalAttrs.version}.tar.xz";
-    hash = "sha256-XoJA7eyvr/K4uvRmO9zqpmjvEKIHvuTX+Q4BDhC93Fw=";
+    hash = "sha256-KHPykDCIpmxxFz6i7YX/riZqZrlyw6SEK7svbxh+wVM=";
   };
 
+  # TODO: make it unconditional on rebuild, drop on version >= 4.20.4
+  patches = lib.optional stdenv.hostPlatform.is32bit (fetchpatch {
+    url = "https://gitlab.gnome.org/GNOME/gtk/-/commit/3b7ed49f26700c65fa9c6f41cf40d4fd5f921756.diff";
+    hash = "sha256-P6cE7fnR5W+H0EWQWJ3hYSu4MwMygPIfS6e0IiXlQv8=";
+  });
+
   depsBuildBuild = [
     pkg-config
   ];
diff --git a/pkgs/development/libraries/libxcrypt/default.nix b/pkgs/development/libraries/libxcrypt/default.nix
index b848ace3879d..075c25104dc2 100644
--- a/pkgs/development/libraries/libxcrypt/default.nix
+++ b/pkgs/development/libraries/libxcrypt/default.nix
@@ -12,11 +12,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libxcrypt";
-  version = "4.4.38";
+  version = "4.5.2";
 
   src = fetchurl {
     url = "https://github.com/besser82/libxcrypt/releases/download/v${finalAttrs.version}/libxcrypt-${finalAttrs.version}.tar.xz";
-    hash = "sha256-gDBLnDBup5kyfwHZp1Sb2ygxd4kYJjHxtU9FEbQgbdY=";
+    hash = "sha256-cVE6McAaQovM1TZ6Mv2V8RXW2sUPtbYMd51ceUKuwHE=";
   };
 
   # this could be accomplished by updateAutotoolsGnuConfigScriptsHook, but that causes infinite recursion
@@ -78,9 +78,10 @@ stdenv.mkDerivation (finalAttrs: {
       '';
     };
     enabledCryptSchemeIds = [
-      # https://github.com/besser82/libxcrypt/blob/v4.4.35/lib/hashes.conf
+      # https://github.com/besser82/libxcrypt/blob/v4.5.0/lib/hashes.conf
       "y" # yescrypt
       "gy" # gost_yescrypt
+      "sm3y" # sm3_yescrypt
       "7" # scrypt
       "2b" # bcrypt
       "2y" # bcrypt_y
diff --git a/pkgs/development/libraries/mbedtls/3.nix b/pkgs/development/libraries/mbedtls/3.nix
index 05793b55d070..f9ddbfd83d82 100644
--- a/pkgs/development/libraries/mbedtls/3.nix
+++ b/pkgs/development/libraries/mbedtls/3.nix
@@ -1,8 +1,8 @@
 { callPackage, fetchurl }:
 
 callPackage ./generic.nix {
-  version = "3.6.4";
-  hash = "sha256-y5YqKtjW4IXyIZkoJvwCGC4scx0qdeV40rynHza4NUE=";
+  version = "3.6.5";
+  hash = "sha256-CAMksh7i4mg5zVTYLB/SZWFVmgQBMhPnislLCD9j7+o=";
 
   patches = [
     # Fixes the build with GCC 14 on aarch64.
diff --git a/pkgs/development/libraries/ncurses/default.nix b/pkgs/development/libraries/ncurses/default.nix
index 16ee5939891d..39e73047f2bd 100644
--- a/pkgs/development/libraries/ncurses/default.nix
+++ b/pkgs/development/libraries/ncurses/default.nix
@@ -65,7 +65,8 @@ stdenv.mkDerivation (finalAttrs: {
     "--with-versioned-syms"
   ]
   ++ lib.optional (!finalAttrs.separateDebugInfo) "--without-debug"
-  ++ lib.optional unicodeSupport "--enable-widec"
+  ++ lib.optional (unicodeSupport && abiVersion == "5") "--enable-widec"
+  ++ lib.optional (!unicodeSupport && abiVersion == "6") "--disable-widec"
   ++ lib.optional (!withCxx) "--without-cxx"
   ++ lib.optional (abiVersion == "5") "--with-abi-version=5"
   ++ lib.optional stdenv.hostPlatform.isNetBSD "--enable-rpath"
diff --git a/pkgs/development/libraries/ngtcp2/default.nix b/pkgs/development/libraries/ngtcp2/default.nix
index 49a2f417a0d5..cef563d99f7a 100644
--- a/pkgs/development/libraries/ngtcp2/default.nix
+++ b/pkgs/development/libraries/ngtcp2/default.nix
@@ -14,11 +14,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "ngtcp2";
-  version = "1.15.1";
+  version = "1.17.0";
 
   src = fetchurl {
     url = "https://github.com/ngtcp2/ngtcp2/releases/download/v${finalAttrs.version}/ngtcp2-${finalAttrs.version}.tar.bz2";
-    hash = "sha256-Bbf6cvldAd3fvDVuHL89VPx1h1wvY2CGW5gIsDNM75c=";
+    hash = "sha256-j8hYGdFp5il4pODbNlVILOdJUafqsMdmc3tXoxQY2mE=";
   };
 
   outputs = [
diff --git a/pkgs/development/libraries/opencv/4.x.nix b/pkgs/development/libraries/opencv/4.x.nix
index a44697a89dfb..9451668a5837 100644
--- a/pkgs/development/libraries/opencv/4.x.nix
+++ b/pkgs/development/libraries/opencv/4.x.nix
@@ -3,6 +3,7 @@
   stdenv,
   fetchurl,
   fetchFromGitHub,
+  fetchpatch,
   cmake,
   pkg-config,
   unzip,
@@ -58,7 +59,7 @@
   enableVtk ? false,
   vtk,
   enableFfmpeg ? true,
-  ffmpeg_7,
+  ffmpeg,
   enableGStreamer ? true,
   elfutils,
   gst_all_1,
@@ -299,6 +300,16 @@ effectiveStdenv.mkDerivation {
   patches = [
     ./cmake-don-t-use-OpenCVFindOpenEXR.patch
     ./0001-cmake-OpenCVUtils.cmake-invalidate-Nix-store-paths-b.patch
+    (fetchpatch {
+      name = "ffmpeg-8-support.patch";
+      url = "https://github.com/opencv/opencv/commit/90c444abd387ffa70b2e72a34922903a2f0f4f5a.patch";
+      hash = "sha256-iRRparDJoNhrvELH6cAagWcVzpiE2lfivHVxvZyi3ik=";
+    })
+    (fetchpatch {
+      name = "fix-ffmpeg-8-support.patch";
+      url = "https://github.com/opencv/opencv/commit/dbb622b7f59c3f0e5bd3487252ef37cf72dcdcdb.patch";
+      hash = "sha256-MS9WizZQu0Gxw/daDDFmETxcDJYRTyhSq/xK0X5lAZM=";
+    })
   ]
   ++ optionals enableCuda [
     ./cuda_opt_flow.patch
@@ -365,7 +376,7 @@ effectiveStdenv.mkDerivation {
     openjpeg
   ]
   ++ optionals enableFfmpeg [
-    ffmpeg_7
+    ffmpeg
   ]
   ++ optionals (enableGStreamer && effectiveStdenv.hostPlatform.isLinux) [
     elfutils
diff --git a/pkgs/development/libraries/protobuf/33.nix b/pkgs/development/libraries/protobuf/33.nix
index 24ace1256005..6365e5fac5a5 100644
--- a/pkgs/development/libraries/protobuf/33.nix
+++ b/pkgs/development/libraries/protobuf/33.nix
@@ -2,8 +2,8 @@
 
 callPackage ./generic.nix (
   {
-    version = "33.0";
-    hash = "sha256-VoMMMyPGAyjhXrYw7muHFBRjYshfqgLZZPPOXCfmmPs=";
+    version = "33.1";
+    hash = "sha256-IW6wLkr/NwIZy5N8s+7Fe9CSexXgliW8QSlvmUD+g5Q=";
   }
   // args
 )
diff --git a/pkgs/development/libraries/spandsp/default.nix b/pkgs/development/libraries/spandsp/default.nix
index 87996abdeeb0..0a06b112e4c2 100644
--- a/pkgs/development/libraries/spandsp/default.nix
+++ b/pkgs/development/libraries/spandsp/default.nix
@@ -2,8 +2,6 @@
   fetchurl,
   fetchpatch,
   callPackage,
-  lib,
-  stdenv,
 }:
 
 (callPackage ./common.nix { }) rec {
@@ -13,31 +11,14 @@
     sha256 = "0rclrkyspzk575v8fslzjpgp4y2s4x7xk3r55ycvpi4agv33l1fc";
   };
   patches = [
-    # FIXME: clean up rebuild avoidance on staging.
-    (
-      if
-        lib.elem stdenv.hostPlatform.config [
-          "arm64-apple-darwin"
-          "aarch64-unknown-linux-gnu"
-          "x86_64-apple-darwin"
-          "x86_64-unknown-linux-gnu"
-        ]
-      then
-        fetchpatch {
-          url = "https://github.com/freeswitch/spandsp/commit/f7b96b08db148763039cf3459d0e00da9636eb92.patch";
-          includes = [ "spandsp-sim/g1050.c" ];
-          hash = "sha256-TwMhWJXQG/UaWddWgice0klp1uATyHMiE6DcsCebXYQ=";
-        }
-      else
-        fetchpatch {
-          url = "https://github.com/freeswitch/spandsp/commit/f7b96b08db148763039cf3459d0e00da9636eb92.patch";
-          includes = [
-            "spandsp-sim/g1050.c"
-            "spandsp-sim/test_utils.c"
-          ];
-          hash = "sha256-2MmVgyMUK0Zn+mL7IX57Y7brYpgmt4GVlis5/NstuNM=";
-        }
-    )
+    (fetchpatch {
+      url = "https://github.com/freeswitch/spandsp/commit/f7b96b08db148763039cf3459d0e00da9636eb92.patch";
+      includes = [
+        "spandsp-sim/g1050.c"
+        "spandsp-sim/test_utils.c"
+      ];
+      hash = "sha256-2MmVgyMUK0Zn+mL7IX57Y7brYpgmt4GVlis5/NstuNM=";
+    })
     (fetchpatch {
       url = "https://github.com/freeswitch/spandsp/commit/f47bcdc301fbddad44e918939eed1b361882f740.patch";
       hash = "sha256-O+lIC3V92GVFoiHsUQOXkoTN2hJ7v5+LQP7RrAhvwlY=";
diff --git a/pkgs/development/lua-modules/generated-packages.nix b/pkgs/development/lua-modules/generated-packages.nix
index c59f7408556a..ad5f52d27194 100644
--- a/pkgs/development/lua-modules/generated-packages.nix
+++ b/pkgs/development/lua-modules/generated-packages.nix
@@ -814,15 +814,15 @@ final: prev: {
     }:
     buildLuarocksPackage {
       pname = "fzf-lua";
-      version = "0.0.2296-1";
+      version = "0.0.2308-1";
       knownRockspec =
         (fetchurl {
-          url = "mirror://luarocks/fzf-lua-0.0.2296-1.rockspec";
-          sha256 = "1nlsfr036l09ry34pidnq8w2ihz4zn16bmzb8jn2nlrf7l8jibqn";
+          url = "mirror://luarocks/fzf-lua-0.0.2308-1.rockspec";
+          sha256 = "1x51fr0wc7lli21nsyy135rrbrjvc5w0kgl7l9mwhcvh3nvwl04y";
         }).outPath;
       src = fetchzip {
-        url = "https://github.com/ibhagwan/fzf-lua/archive/a8458b79a957a6e3e217d84106a0fd4b9470ff4c.zip";
-        sha256 = "0wswrbfjjyid1zgqmjcxkl7mljsmlayzkfnkpc3zy82ry8li0nis";
+        url = "https://github.com/ibhagwan/fzf-lua/archive/3b4a5d13adeb33f387d744b6ed777bb5401cba94.zip";
+        sha256 = "0mnr8124346l4mi9b52gs6cgqvcas4mpgv5h2psxhnf0r542mwi5";
       };
 
       disabled = luaOlder "5.1";
@@ -880,8 +880,8 @@ final: prev: {
       src = fetchFromGitHub {
         owner = "lewis6991";
         repo = "gitsigns.nvim";
-        rev = "20ad4419564d6e22b189f6738116b38871082332";
-        hash = "sha256-eGpB7YYWbyCCGYXEYAM432srSp/lUo5C1b0J3OYjwnY=";
+        rev = "cdafc320f03f2572c40ab93a4eecb733d4016d07";
+        hash = "sha256-w2/osNJwbtmUxxQIXBsyqMYrvyNUaVzXrUNGYqGmzi4=";
       };
 
       disabled = lua.luaversion != "5.1";
@@ -903,15 +903,15 @@ final: prev: {
     }:
     buildLuarocksPackage {
       pname = "grug-far.nvim";
-      version = "1.6.52-1";
+      version = "1.6.53-1";
       knownRockspec =
         (fetchurl {
-          url = "mirror://luarocks/grug-far.nvim-1.6.52-1.rockspec";
-          sha256 = "0drax65xyp8lhk1cahqjdlphb16kicajr4gb7ar4l2q1scl01b4k";
+          url = "mirror://luarocks/grug-far.nvim-1.6.53-1.rockspec";
+          sha256 = "0wi4b1iv8clspp5nflmf7qfl56dwgclfzvh83wyp6zgp7i1s0rxm";
         }).outPath;
       src = fetchzip {
-        url = "https://github.com/MagicDuck/grug-far.nvim/archive/3e72397465f774b01aa38e4fe8e6eecf23d766d9.zip";
-        sha256 = "16pbhmb2y8rpvdzib8m56jx54v44vkn452sj9jgwp5q7izqb4kds";
+        url = "https://github.com/MagicDuck/grug-far.nvim/archive/b58b2d65863f4ebad88b10a1ddd519e5380466e0.zip";
+        sha256 = "06g8710k74ymwcm358y6h2c12v4n8wr95nhs2a0514xlqa3khadq";
       };
 
       disabled = luaOlder "5.1";
@@ -2763,7 +2763,7 @@ final: prev: {
       knownRockspec =
         (fetchurl {
           url = "mirror://luarocks/lualine.nvim-scm-1.rockspec";
-          sha256 = "1mixb73qp35wv4bjkkakxjzvczc2gk5m4ywylj5xx41r074hpp1f";
+          sha256 = "13h6fazrz05fhr63c9zid0wz5pjwaa14v458xrwsz1srcwg0fi12";
         }).outPath;
       src = fetchFromGitHub {
         owner = "nvim-lualine";
@@ -3370,15 +3370,15 @@ final: prev: {
     }:
     buildLuarocksPackage {
       pname = "luautf8";
-      version = "0.1.7-1";
+      version = "0.2.0-1";
       knownRockspec =
         (fetchurl {
-          url = "mirror://luarocks/luautf8-0.1.7-1.rockspec";
-          sha256 = "0a06r8g2vnh2vzwghjiz7bwkl0x75q52skvylgz9c37i62swbwgl";
+          url = "mirror://luarocks/luautf8-0.2.0-1.rockspec";
+          sha256 = "13lm2d7nc0igy739f3b9jrn4i4m373dqwkw41x0zzp0cm0v1c09m";
         }).outPath;
       src = fetchurl {
-        url = "https://github.com/starwing/luautf8/archive/refs/tags/0.1.7.tar.gz";
-        sha256 = "1fqrka532hx97kj5iqnx4h5x5i2a319iv2b6zmifflmh6lya6mgw";
+        url = "https://github.com/starwing/luautf8/archive/refs/tags/0.2.0.tar.gz";
+        sha256 = "0cmj4cp3sp3h2084qrix60vhrcg2xp56scn5qvsn8s5qjkci377p";
       };
 
       disabled = luaOlder "5.1";
@@ -3980,15 +3980,15 @@ final: prev: {
     }:
     buildLuarocksPackage {
       pname = "neotest";
-      version = "5.13.1-1";
+      version = "5.13.4-1";
       knownRockspec =
         (fetchurl {
-          url = "mirror://luarocks/neotest-5.13.1-1.rockspec";
-          sha256 = "1c60i9vdakbafaij2ip3ki0m1jwd2c2adrq2i0gy3l796w03cf9n";
+          url = "mirror://luarocks/neotest-5.13.4-1.rockspec";
+          sha256 = "0rv4m9qjpn6ckaqim49vy932765p9di4r563w684wz0ficdwjch3";
         }).outPath;
       src = fetchzip {
-        url = "https://github.com/nvim-neotest/neotest/archive/366175e1e74ff112787f9adbfb072eeaedd2a88e.zip";
-        sha256 = "0d3rlbpdqsj1wk9v6xs63w8pbnhk9nrxdp6kmc4mkj0nf71b3j9a";
+        url = "https://github.com/nvim-neotest/neotest/archive/deadfb1af5ce458742671ad3a013acb9a6b41178.zip";
+        sha256 = "0qiff2cg7dz96mvfihgb9rgmg0zsjf95nvxnfnzw0pnp65ch4bnh";
       };
 
       disabled = luaOlder "5.1";
@@ -4081,8 +4081,8 @@ final: prev: {
       src = fetchFromGitHub {
         owner = "hrsh7th";
         repo = "nvim-cmp";
-        rev = "106c4bcc053a5da783bf4a9d907b6f22485c2ea0";
-        hash = "sha256-Pnfa1u+hoVIKo7Jvv3VF/p6m0ALXywwUNEb2FI7TeEc=";
+        rev = "d97d85e01339f01b842e6ec1502f639b080cb0fc";
+        hash = "sha256-Z6F8auKq1jSgGoPhV4RbkB1YTexnolSbEjpa/JJI/Fc=";
       };
 
       disabled = luaOlder "5.1" || luaAtLeast "5.4";
@@ -5000,13 +5000,13 @@ final: prev: {
       knownRockspec =
         (fetchurl {
           url = "mirror://luarocks/telescope.nvim-scm-1.rockspec";
-          sha256 = "07mjkv1nv9b3ifxk2bbpbhvp0awblyklyz6aaqw418x4gm4q1g35";
+          sha256 = "11dy6rkgkhc7zdrrvn361rwyf702yvvkhd0wz52pr757z534fk8s";
         }).outPath;
       src = fetchFromGitHub {
         owner = "nvim-telescope";
         repo = "telescope.nvim";
-        rev = "0294ae3eafe662c438addb8692d9c98ef73a983e";
-        hash = "sha256-9u2S9Tn1ZhB6JTm8k34FcFV4ex4FL4eAn5InGrWPgD0=";
+        rev = "83a3a713d6b2d2a408491a1b959e55a7fa8678e8";
+        hash = "sha256-6hrylUCc6KlcbnMgcJNJhbX2Cgu0YHKoMPOqpaKRljE=";
       };
 
       disabled = lua.luaversion != "5.1";
diff --git a/pkgs/development/lua-modules/overrides.nix b/pkgs/development/lua-modules/overrides.nix
index 419e3e07117e..e8f13169c3d0 100644
--- a/pkgs/development/lua-modules/overrides.nix
+++ b/pkgs/development/lua-modules/overrides.nix
@@ -72,8 +72,8 @@ let
     ;
 in
 {
-  argparse = prev.argparse.overrideAttrs (oa: {
-
+  # keep-sorted start block=yes case=no newline_separated=yes
+  argparse = prev.argparse.overrideAttrs {
     doCheck = true;
     nativeCheckInputs = [ final.busted ];
 
@@ -83,10 +83,8 @@ in
       busted spec/
       runHook postCheck
     '';
-  });
-  ##########################################3
-  #### manual fixes for generated packages
-  ##########################################3
+  };
+
   busted = prev.busted.overrideAttrs (oa: {
     nativeBuildInputs = oa.nativeBuildInputs ++ [
       installShellFiles
@@ -102,6 +100,8 @@ in
     '';
   });
 
+  cjson = prev.lua-cjson;
+
   cqueues = prev.cqueues.overrideAttrs (oa: {
     # Parse out a version number without the Lua version inserted
     version =
@@ -193,15 +193,15 @@ in
     '';
   };
 
-  # Until https://github.com/swarn/fzy-lua/pull/8 is merged,
-  # we have to invoke busted manually
-  fzy = prev.fzy.overrideAttrs (oa: {
+  fzy = prev.fzy.overrideAttrs {
     doCheck = true;
     nativeCheckInputs = [ final.busted ];
+    # Until https://github.com/swarn/fzy-lua/pull/8 is merged,
+    # we have to invoke busted manually
     checkPhase = ''
       busted
     '';
-  });
+  };
 
   grug-far-nvim = prev.grug-far-nvim.overrideAttrs {
     doCheck = lua.luaversion == "5.1" && !stdenv.hostPlatform.isDarwin;
@@ -237,20 +237,26 @@ in
 
   };
 
-  http = prev.http.overrideAttrs (oa: {
-    /*
-      TODO: separate docs derivation? (pandoc is heavy)
-      nativeBuildInputs = [ pandoc ];
-      makeFlags = [ "-C doc" "lua-http.html" "lua-http.3" ];
-    */
-  });
+  haskell-tools-nvim = prev.haskell-tools-nvim.overrideAttrs {
+    doCheck = lua.luaversion == "5.1";
+    nativeCheckInputs = [
+      final.nlua
+      final.busted
+      writableTmpDirAsHomeHook
+    ];
+    checkPhase = ''
+      runHook preCheck
+      busted --lua=nlua
+      runHook postCheck
+    '';
+  };
 
-  image-nvim = prev.image-nvim.overrideAttrs (oa: {
+  image-nvim = prev.image-nvim.overrideAttrs {
     propagatedBuildInputs = [
       lua
       luajitPackages.magick
     ];
-  });
+  };
 
   ldbus = prev.ldbus.overrideAttrs (oa: {
     luarocksConfig = oa.luarocksConfig // {
@@ -265,25 +271,6 @@ in
     ];
   });
 
-  ljsyscall = prev.ljsyscall.overrideAttrs (oa: rec {
-    version = "unstable-20180515";
-    # package hasn't seen any release for a long time
-    src = fetchFromGitHub {
-      owner = "justincormack";
-      repo = "ljsyscall";
-      rev = "e587f8c55aad3955dddab3a4fa6c1968037b5c6e";
-      sha256 = "06v52agqyziwnbp2my3r7liv245ddmb217zmyqakh0ldjdsr8lz4";
-    };
-    knownRockspec = "rockspec/ljsyscall-scm-1.rockspec";
-    # actually library works fine with lua 5.2
-    preConfigure = ''
-      sed -i 's/lua == 5.1/lua >= 5.1, < 5.3/' ${knownRockspec}
-    '';
-    meta.broken = luaOlder "5.1" || luaAtLeast "5.3";
-
-    propagatedBuildInputs = oa.propagatedBuildInputs ++ lib.optional (!isLuaJIT) final.luaffi;
-  });
-
   lgi = prev.lgi.overrideAttrs (oa: {
     nativeBuildInputs = oa.nativeBuildInputs ++ [
       pkg-config
@@ -324,12 +311,31 @@ in
     meta.broken = luaOlder "5.1" || luaAtLeast "5.4";
   });
 
+  ljsyscall = prev.ljsyscall.overrideAttrs (oa: rec {
+    version = "unstable-20180515";
+    # package hasn't seen any release for a long time
+    src = fetchFromGitHub {
+      owner = "justincormack";
+      repo = "ljsyscall";
+      rev = "e587f8c55aad3955dddab3a4fa6c1968037b5c6e";
+      sha256 = "06v52agqyziwnbp2my3r7liv245ddmb217zmyqakh0ldjdsr8lz4";
+    };
+    knownRockspec = "rockspec/ljsyscall-scm-1.rockspec";
+    # actually library works fine with lua 5.2
+    preConfigure = ''
+      sed -i 's/lua == 5.1/lua >= 5.1, < 5.3/' ${knownRockspec}
+    '';
+    meta.broken = luaOlder "5.1" || luaAtLeast "5.3";
+
+    propagatedBuildInputs = oa.propagatedBuildInputs ++ lib.optional (!isLuaJIT) final.luaffi;
+  });
+
   llscheck = prev.llscheck.overrideAttrs (oa: {
     propagatedBuildInputs = oa.propagatedBuildInputs ++ [ lua-language-server ];
   });
 
   lmathx = prev.luaLib.overrideLuarocks prev.lmathx (
-    drv:
+    _drv:
     if luaAtLeast "5.1" && luaOlder "5.2" then
       {
         version = "20120430.51-1";
@@ -367,7 +373,7 @@ in
       }
   );
 
-  lmpfrlib = prev.lmpfrlib.overrideAttrs (oa: {
+  lmpfrlib = prev.lmpfrlib.overrideAttrs {
     externalDeps = [
       {
         name = "GMP";
@@ -381,7 +387,7 @@ in
     unpackPhase = ''
       cp $src $(stripHash $src)
     '';
-  });
+  };
 
   lrexlib-gnu = prev.lrexlib-gnu.overrideAttrs (oa: {
     buildInputs = oa.buildInputs ++ [
@@ -389,23 +395,23 @@ in
     ];
   });
 
-  lrexlib-oniguruma = prev.lrexlib-oniguruma.overrideAttrs (oa: {
+  lrexlib-oniguruma = prev.lrexlib-oniguruma.overrideAttrs {
     externalDeps = [
       {
         name = "ONIG";
         dep = oniguruma;
       }
     ];
-  });
+  };
 
-  lrexlib-pcre = prev.lrexlib-pcre.overrideAttrs (oa: {
+  lrexlib-pcre = prev.lrexlib-pcre.overrideAttrs {
     externalDeps = [
       {
         name = "PCRE";
         dep = pcre;
       }
     ];
-  });
+  };
 
   lrexlib-posix = prev.lrexlib-posix.overrideAttrs (oa: {
     buildInputs = oa.buildInputs ++ [
@@ -413,12 +419,6 @@ in
     ];
   });
 
-  luacheck = prev.luacheck.overrideAttrs (oa: {
-    meta = oa.meta // {
-      mainProgram = "luacheck";
-    };
-  });
-
   lua-curl = prev.lua-curl.overrideAttrs (oa: {
     buildInputs = oa.buildInputs ++ [
       curl.dev
@@ -431,15 +431,15 @@ in
     ];
   });
 
-  lua-lsp = prev.lua-lsp.overrideAttrs (oa: {
+  lua-lsp = prev.lua-lsp.overrideAttrs {
     # until Alloyed/lua-lsp#28
     postConfigure = ''
       substituteInPlace ''${rockspecFilename} \
         --replace '"dkjson ~> 2.5",' '"dkjson >= 2.5",'
     '';
-  });
+  };
 
-  lua-resty-jwt = prev.lua-resty-jwt.overrideAttrs (oa: {
+  lua-resty-jwt = prev.lua-resty-jwt.overrideAttrs {
     src = fetchFromGitHub {
       owner = "cdbattags";
       repo = "lua-resty-jwt";
@@ -447,6 +447,33 @@ in
       hash = "sha256-5lnr0ka6ijfujiRjqwCPb6jzItXx45FIN8CvhR/KiB8=";
       fetchSubmodules = true;
     };
+  };
+
+  lua-rtoml = prev.lua-rtoml.overrideAttrs (oa: {
+
+    cargoDeps = rustPlatform.fetchCargoVendor {
+      inherit (oa) src;
+      hash = "sha256-7mFn4dLgaxfAxtPFCc3VzcBx2HuywcZTYqCGTbaGS0k=";
+    };
+
+    propagatedBuildInputs = oa.propagatedBuildInputs ++ [
+      cargo
+      rustPlatform.cargoSetupHook
+    ];
+
+    # ld: symbol(s) not found for architecture arm64
+    # clang-16: error: linker command failed with exit code 1 (use -v to see invocation)
+    meta.broken = stdenv.hostPlatform.isDarwin;
+  });
+
+  lua-subprocess = prev.lua-subprocess.overrideAttrs {
+    meta.broken = luaOlder "5.1" || luaAtLeast "5.4";
+  };
+
+  lua-yajl = prev.lua-yajl.overrideAttrs (oa: {
+    buildInputs = oa.buildInputs ++ [
+      yajl
+    ];
   });
 
   lua-zlib = prev.lua-zlib.overrideAttrs (oa: {
@@ -458,6 +485,12 @@ in
     };
   });
 
+  luacheck = prev.luacheck.overrideAttrs (oa: {
+    meta = oa.meta // {
+      mainProgram = "luacheck";
+    };
+  });
+
   luadbi-mysql = prev.luadbi-mysql.overrideAttrs (oa: {
 
     luarocksConfig = lib.recursiveUpdate oa.luarocksConfig {
@@ -478,14 +511,14 @@ in
     ];
   });
 
-  luadbi-sqlite3 = prev.luadbi-sqlite3.overrideAttrs (oa: {
+  luadbi-sqlite3 = prev.luadbi-sqlite3.overrideAttrs {
     externalDeps = [
       {
         name = "SQLITE";
         dep = sqlite;
       }
     ];
-  });
+  };
 
   luaevent = prev.luaevent.overrideAttrs (oa: {
     propagatedBuildInputs = oa.propagatedBuildInputs ++ [
@@ -509,9 +542,10 @@ in
     ];
   });
 
-  # TODO Somehow automatically amend buildInputs for things that need luaffi
-  # but are in luajitPackages?
-  luaffi = prev.luaffi.overrideAttrs (oa: {
+  luaffi = prev.luaffi.overrideAttrs {
+    # TODO Somehow automatically amend buildInputs for things that need luaffi
+    # but are in luajitPackages?
+
     # The packaged .src.rock version is pretty old, and doesn't work with Lua 5.3
     src = fetchFromGitHub {
       owner = "facebook";
@@ -521,7 +555,7 @@ in
     };
     knownRockspec = with prev.luaffi; "${pname}-${version}.rockspec";
     meta.broken = luaOlder "5.1" || luaAtLeast "5.4" || isLuaJIT;
-  });
+  };
 
   lualdap = prev.lualdap.overrideAttrs (_: {
     externalDeps = [
@@ -589,8 +623,8 @@ in
     '';
   });
 
-  # As a nix user, use this derivation instead of "luarocks_bootstrap"
   luarocks = prev.luarocks.overrideAttrs (oa: {
+    # As a nix user, use this derivation instead of "luarocks_bootstrap"
 
     nativeBuildInputs = oa.nativeBuildInputs ++ [
       installShellFiles
@@ -628,76 +662,44 @@ in
 
   });
 
-  luasec = prev.luasec.overrideAttrs (oa: {
+  luasec = prev.luasec.overrideAttrs {
     externalDeps = [
       {
         name = "OPENSSL";
         dep = openssl;
       }
     ];
-  });
+  };
 
-  luasql-sqlite3 = prev.luasql-sqlite3.overrideAttrs (oa: {
+  luasql-sqlite3 = prev.luasql-sqlite3.overrideAttrs {
     externalDeps = [
       {
         name = "SQLITE";
         dep = sqlite;
       }
     ];
-  });
+  };
 
   luasystem = prev.luasystem.overrideAttrs (
-    oa:
+    _oa:
     lib.optionalAttrs stdenv.hostPlatform.isLinux {
       buildInputs = [ glibc.out ];
     }
   );
 
-  luazip = prev.luazip.overrideAttrs (oa: {
-    buildInputs = oa.buildInputs ++ [
-      zziplib
-    ];
-  });
-
-  # lua-resty-session =  prev.lua-resty-session.overrideAttrs (oa: {
-  #   # lua_pack and lua-ffi-zlib are unpackaged, causing this package to not evaluate
-  #   meta.broken = true;
-  # });
-
-  lua-yajl = prev.lua-yajl.overrideAttrs (oa: {
-    buildInputs = oa.buildInputs ++ [
-      yajl
-    ];
-  });
-
-  luaunbound = prev.luaunbound.overrideAttrs (oa: {
+  luaunbound = prev.luaunbound.overrideAttrs {
     externalDeps = [
       {
         name = "libunbound";
         dep = unbound;
       }
     ];
-  });
+  };
 
-  lua-subprocess = prev.lua-subprocess.overrideAttrs (oa: {
-    meta.broken = luaOlder "5.1" || luaAtLeast "5.4";
-  });
-
-  lua-rtoml = prev.lua-rtoml.overrideAttrs (oa: {
-
-    cargoDeps = rustPlatform.fetchCargoVendor {
-      src = oa.src;
-      hash = "sha256-7mFn4dLgaxfAxtPFCc3VzcBx2HuywcZTYqCGTbaGS0k=";
-    };
-
-    propagatedBuildInputs = oa.propagatedBuildInputs ++ [
-      cargo
-      rustPlatform.cargoSetupHook
+  luazip = prev.luazip.overrideAttrs (oa: {
+    buildInputs = oa.buildInputs ++ [
+      zziplib
     ];
-
-    # ld: symbol(s) not found for architecture arm64
-    # clang-16: error: linker command failed with exit code 1 (use -v to see invocation)
-    meta.broken = stdenv.hostPlatform.isDarwin;
   });
 
   lush-nvim = prev.lush-nvim.overrideAttrs {
@@ -735,7 +737,13 @@ in
 
   lux-lua = final.callPackage ./lux-lua.nix { inherit lua; };
 
-  lz-n = prev.lz-n.overrideAttrs (oa: {
+  lyaml = prev.lyaml.overrideAttrs {
+    buildInputs = [
+      libyaml
+    ];
+  };
+
+  lz-n = prev.lz-n.overrideAttrs {
     doCheck = lua.luaversion == "5.1";
     nativeCheckInputs = [
       final.nlua
@@ -747,9 +755,9 @@ in
       busted --lua=nlua
       runHook postCheck
     '';
-  });
+  };
 
-  lze = prev.lze.overrideAttrs (oa: {
+  lze = prev.lze.overrideAttrs {
     doCheck = lua.luaversion == "5.1";
     nativeCheckInputs = [
       final.nlua
@@ -761,9 +769,9 @@ in
       busted --lua=nlua
       runHook postCheck
     '';
-  });
+  };
 
-  lzextras = prev.lzextras.overrideAttrs (oa: {
+  lzextras = prev.lzextras.overrideAttrs {
     doCheck = lua.luaversion == "5.1";
     checkInputs = [
       final.lze
@@ -777,104 +785,7 @@ in
       busted --lua=nlua
       runHook postCheck
     '';
-  });
-
-  neotest = prev.neotest.overrideAttrs (oa: {
-    doCheck = stdenv.hostPlatform.isLinux;
-    nativeCheckInputs = oa.nativeCheckInputs ++ [
-      final.nlua
-      final.busted
-      neovim-unwrapped
-      writableTmpDirAsHomeHook
-    ];
-
-    checkPhase = ''
-      runHook preCheck
-      export LUA_PATH="./lua/?.lua;./lua/?/init.lua;$LUA_PATH"
-
-      # TODO: Investigate if test infra issue or upstream issue
-      # Remove failing subprocess tests that require channel functionality
-      rm tests/unit/lib/subprocess_spec.lua
-
-      nvim --headless -i NONE \
-        --cmd "set rtp+=${vimPlugins.plenary-nvim}" \
-        -c "PlenaryBustedDirectory tests/ {sequential = true}"
-
-      runHook postCheck
-    '';
-  });
-
-  haskell-tools-nvim = prev.haskell-tools-nvim.overrideAttrs (oa: {
-    doCheck = lua.luaversion == "5.1";
-    nativeCheckInputs = [
-      final.nlua
-      final.busted
-      writableTmpDirAsHomeHook
-    ];
-    checkPhase = ''
-      runHook preCheck
-      busted --lua=nlua
-      runHook postCheck
-    '';
-  });
-
-  neorg = prev.neorg.overrideAttrs (oa: {
-    # Relax dependencies
-    postConfigure = ''
-      substituteInPlace ''${rockspecFilename} \
-        --replace-fail "'nvim-nio ~> 1.7'," "'nvim-nio >= 1.7'," \
-        --replace-fail "'plenary.nvim == 0.1.4'," "'plenary.nvim'," \
-        --replace-fail "'nui.nvim == 0.3.0'," "'nui.nvim',"
-    '';
-  });
-
-  nvim-nio = prev.nvim-nio.overrideAttrs (oa: {
-    doCheck = lua.luaversion == "5.1";
-    nativeCheckInputs = [
-      final.nlua
-      final.busted
-      writableTmpDirAsHomeHook
-    ];
-
-    # upstream uses PlenaryBusted which is a pain to setup
-    checkPhase = ''
-      runHook preCheck
-      busted --lua=nlua --lpath='lua/?.lua' --lpath='lua/?/init.lua' tests/
-      runHook postCheck
-    '';
-  });
-
-  plenary-nvim = prev.plenary-nvim.overrideAttrs (oa: {
-    postPatch = ''
-      sed -Ei lua/plenary/curl.lua \
-          -e 's@(command\s*=\s*")curl(")@\1${curl}/bin/curl\2@'
-    '';
-
-    # disabled for now because too flaky
-    doCheck = false;
-    # for env/find/ls
-    checkInputs = [
-      which
-      neovim-unwrapped
-      coreutils
-      findutils
-      writableTmpDirAsHomeHook
-    ];
-
-    checkPhase = ''
-      runHook preCheck
-      # remove failing tests, need internet access for instance
-      rm tests/plenary/job_spec.lua tests/plenary/scandir_spec.lua tests/plenary/curl_spec.lua
-      make test
-      runHook postCheck
-    '';
-  });
-
-  lyaml = prev.lyaml.overrideAttrs (oa: {
-    buildInputs = [
-      libyaml
-    ];
-  });
+  };
 
   magick = prev.magick.overrideAttrs (oa: {
     buildInputs = oa.buildInputs ++ [
@@ -904,14 +815,104 @@ in
     };
   });
 
-  nlua = prev.nlua.overrideAttrs (oa: {
+  neorg = prev.neorg.overrideAttrs {
+    # Relax dependencies
+    postConfigure = ''
+      substituteInPlace ''${rockspecFilename} \
+        --replace-fail "'nvim-nio ~> 1.7'," "'nvim-nio >= 1.7'," \
+        --replace-fail "'plenary.nvim == 0.1.4'," "'plenary.nvim'," \
+        --replace-fail "'nui.nvim == 0.3.0'," "'nui.nvim',"
+    '';
+  };
+
+  neotest = prev.neotest.overrideAttrs (oa: {
+    doCheck = stdenv.hostPlatform.isLinux;
+    nativeCheckInputs = oa.nativeCheckInputs ++ [
+      final.nlua
+      final.busted
+      neovim-unwrapped
+      writableTmpDirAsHomeHook
+    ];
+
+    checkPhase = ''
+      runHook preCheck
+      export LUA_PATH="./lua/?.lua;./lua/?/init.lua;$LUA_PATH"
+
+      # TODO: Investigate if test infra issue or upstream issue
+      # Remove failing subprocess tests that require channel functionality
+      rm tests/unit/lib/subprocess_spec.lua
+
+      nvim --headless -i NONE \
+        --cmd "set rtp+=${vimPlugins.plenary-nvim}" \
+        -c "PlenaryBustedDirectory tests/ {sequential = true}"
+
+      runHook postCheck
+    '';
+  });
+
+  nlua = prev.nlua.overrideAttrs {
 
     # patchShebang removes the nvim in nlua's shebang so we hardcode one
     postFixup = ''
       sed -i -e "1 s|.*|#\!${coreutils}/bin/env -S ${neovim-unwrapped}/bin/nvim -l|" "$out/bin/nlua"
     '';
     dontPatchShebangs = true;
-  });
+  };
+
+  nvim-nio = prev.nvim-nio.overrideAttrs {
+    doCheck = lua.luaversion == "5.1";
+    nativeCheckInputs = [
+      final.nlua
+      final.busted
+      writableTmpDirAsHomeHook
+    ];
+
+    # upstream uses PlenaryBusted which is a pain to setup
+    checkPhase = ''
+      runHook preCheck
+      busted --lua=nlua --lpath='lua/?.lua' --lpath='lua/?/init.lua' tests/
+      runHook postCheck
+    '';
+  };
+
+  orgmode = prev.orgmode.overrideAttrs {
+    # Patch in tree-sitter-orgmode dependency
+    postPatch = ''
+      substituteInPlace lua/orgmode/config/init.lua \
+        --replace-fail \
+        "require('orgmode.utils.treesitter.install').install()" \
+        "pcall(function() vim.treesitter.language.add('org', { path = '${final.tree-sitter-orgmode}/lib/lua/${final.tree-sitter-orgmode.lua.luaversion}/parser/org.so'}) end)" \
+        --replace-fail \
+        "require('orgmode.utils.treesitter.install').reinstall()" \
+        "pcall(function() vim.treesitter.language.add('org', { path = '${final.tree-sitter-orgmode}/lib/lua/${final.tree-sitter-orgmode.lua.luaversion}/parser/org.so'}) end)"
+    '';
+  };
+
+  plenary-nvim = prev.plenary-nvim.overrideAttrs {
+    postPatch = ''
+      sed -Ei lua/plenary/curl.lua \
+          -e 's@(command\s*=\s*")curl(")@\1${curl}/bin/curl\2@'
+    '';
+
+    # disabled for now because too flaky
+    doCheck = false;
+    # for env/find/ls
+    checkInputs = [
+      which
+      neovim-unwrapped
+      coreutils
+      findutils
+      writableTmpDirAsHomeHook
+    ];
+
+    checkPhase = ''
+      runHook preCheck
+      # remove failing tests, need internet access for instance
+      rm tests/plenary/job_spec.lua tests/plenary/scandir_spec.lua tests/plenary/curl_spec.lua
+      make test
+      runHook postCheck
+    '';
+  };
 
   psl = prev.psl.overrideAttrs (drv: {
     buildInputs = drv.buildInputs or [ ] ++ [ libpsl ];
@@ -922,23 +923,22 @@ in
     };
   });
 
-  rapidjson = prev.rapidjson.overrideAttrs (oa: {
+  rapidjson = prev.rapidjson.overrideAttrs {
     preBuild = ''
       sed -i '/set(CMAKE_CXX_FLAGS/d' CMakeLists.txt
       sed -i '/set(CMAKE_C_FLAGS/d' CMakeLists.txt
     '';
-  });
+  };
 
-  # upstream broken, can't be generated, so moved out from the generated set
   readline = final.callPackage (
     {
       buildLuarocksPackage,
       fetchurl,
       luaAtLeast,
       luaOlder,
-      lua,
       luaposix,
     }:
+    # upstream broken, can't be generated, so moved out from the generated set
     buildLuarocksPackage {
       pname = "readline";
       version = "3.2-0";
@@ -977,7 +977,7 @@ in
     }
   ) { };
 
-  rocks-dev-nvim = prev.rocks-dev-nvim.overrideAttrs (oa: {
+  rocks-dev-nvim = prev.rocks-dev-nvim.overrideAttrs {
 
     # E5113: Error while calling lua chunk [...] pl.path requires LuaFileSystem
     doCheck = luaOlder "5.2";
@@ -990,9 +990,9 @@ in
       busted spec
       runHook postCheck
     '';
-  });
+  };
 
-  rtp-nvim = prev.rtp-nvim.overrideAttrs (oa: {
+  rtp-nvim = prev.rtp-nvim.overrideAttrs {
     doCheck = lua.luaversion == "5.1";
     nativeCheckInputs = [
       final.nlua
@@ -1004,9 +1004,9 @@ in
       busted --lua=nlua
       runHook postCheck
     '';
-  });
+  };
 
-  rustaceanvim = prev.rustaceanvim.overrideAttrs (oa: {
+  rustaceanvim = prev.rustaceanvim.overrideAttrs {
     doCheck = lua.luaversion == "5.1";
     nativeCheckInputs = [
       final.nlua
@@ -1018,7 +1018,7 @@ in
       busted --lua=nlua
       runHook postCheck
     '';
-  });
+  };
 
   sofa = prev.sofa.overrideAttrs (oa: {
     nativeBuildInputs = oa.nativeBuildInputs ++ [
@@ -1032,7 +1032,7 @@ in
     '';
   });
 
-  sqlite = prev.sqlite.overrideAttrs (drv: {
+  sqlite = prev.sqlite.overrideAttrs {
     doCheck = stdenv.hostPlatform.isLinux;
     nativeCheckInputs = [
       final.plenary-nvim
@@ -1053,26 +1053,25 @@ in
         -u test/minimal_init.vim --cmd "set rtp+=${vimPlugins.plenary-nvim}" \
         -c "PlenaryBustedDirectory test/auto/ { sequential = true, minimal_init = './test/minimal_init.vim' }"
     '';
+  };
 
-  });
-
-  std-_debug = prev.std-_debug.overrideAttrs (oa: {
+  std-_debug = prev.std-_debug.overrideAttrs {
     # run make to generate lib/std/_debug/version.lua
     preConfigure = ''
       make all
     '';
-  });
+  };
 
-  std-normalize = prev.std-normalize.overrideAttrs (oa: {
+  std-normalize = prev.std-normalize.overrideAttrs {
     # run make to generate lib/std/_debug/version.lua
     preConfigure = ''
       make all
     '';
-  });
+  };
 
   tiktoken_core = prev.tiktoken_core.overrideAttrs (oa: {
     cargoDeps = rustPlatform.fetchCargoVendor {
-      src = oa.src;
+      inherit (oa) src;
       hash = "sha256-egmb4BTbORpTpVO50IcqbZU1Y0hioXLMkxxUAo05TIA=";
     };
     nativeBuildInputs = oa.nativeBuildInputs ++ [
@@ -1093,7 +1092,7 @@ in
   toml-edit = prev.toml-edit.overrideAttrs (oa: {
 
     cargoDeps = rustPlatform.fetchCargoVendor {
-      src = oa.src;
+      inherit (oa) src;
       hash = "sha256-ow0zefFFrU91Q2PJww2jtd6nqUjwXUtfQzjkzl/AXuo=";
     };
 
@@ -1140,19 +1139,6 @@ in
       ];
   });
 
-  orgmode = prev.orgmode.overrideAttrs (oa: {
-    # Patch in tree-sitter-orgmode dependency
-    postPatch = ''
-      substituteInPlace lua/orgmode/config/init.lua \
-        --replace-fail \
-        "require('orgmode.utils.treesitter.install').install()" \
-        "pcall(function() vim.treesitter.language.add('org', { path = '${final.tree-sitter-orgmode}/lib/lua/${final.tree-sitter-orgmode.lua.luaversion}/parser/org.so'}) end)" \
-        --replace-fail \
-        "require('orgmode.utils.treesitter.install').reinstall()" \
-        "pcall(function() vim.treesitter.language.add('org', { path = '${final.tree-sitter-orgmode}/lib/lua/${final.tree-sitter-orgmode.lua.luaversion}/parser/org.so'}) end)"
-    '';
-  });
-
   tree-sitter-orgmode = prev.tree-sitter-orgmode.overrideAttrs (oa: {
     propagatedBuildInputs =
       let
@@ -1171,7 +1157,7 @@ in
   });
 
   vstruct = prev.vstruct.overrideAttrs (_: {
-    meta.broken = (luaOlder "5.1" || luaAtLeast "5.4");
+    meta.broken = luaOlder "5.1" || luaAtLeast "5.4";
   });
 
   vusted = prev.vusted.overrideAttrs (_: {
@@ -1181,14 +1167,5 @@ in
     '';
   });
 
-  telescope-nvim = prev.telescope-nvim.overrideAttrs {
-    # NOTE: Until luarocks rockspec is updated with changes from upstream repo
-    postConfigure = ''
-      substituteInPlace ''${rockspecFilename} \
-        --replace-fail "'autoload'," ""
-    '';
-  };
-
-  # aliases
-  cjson = prev.lua-cjson;
+  # keep-sorted end
 }
diff --git a/pkgs/development/python-modules/aioinflux/default.nix b/pkgs/development/python-modules/aioinflux/default.nix
index ef5f9bcf6340..679b9ff5a3ff 100644
--- a/pkgs/development/python-modules/aioinflux/default.nix
+++ b/pkgs/development/python-modules/aioinflux/default.nix
@@ -4,20 +4,23 @@
   fetchPypi,
   aiohttp,
   ciso8601,
+  setuptools,
   pandas,
 }:
 
 buildPythonPackage rec {
   pname = "aioinflux";
   version = "0.9.0";
-  format = "setuptools";
+  pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    sha256 = "1jy5mcg9wdz546s9wdwsgkxhm2ac4dmphd9vz243db39j1m0a3bj";
+    hash = "sha256-cg0FapBprDaI+Ds1eGsjTIkK+3yaN560IeU3nh6rxcs=";
   };
 
-  propagatedBuildInputs = [
+  build-system = [ setuptools ];
+
+  dependencies = [
     aiohttp
     ciso8601
     pandas
@@ -31,6 +34,7 @@ buildPythonPackage rec {
   meta = with lib; {
     description = "Asynchronous Python client for InfluxDB";
     homepage = "https://github.com/gusutabopb/aioinflux";
+    changelog = "https://github.com/gusutabopb/aioinflux/releases/tag/v${version}";
     license = licenses.mit;
     maintainers = with maintainers; [
       liamdiprose
diff --git a/pkgs/development/python-modules/async-dns/default.nix b/pkgs/development/python-modules/async-dns/default.nix
index cbc8f15ed210..1df1b5b39976 100644
--- a/pkgs/development/python-modules/async-dns/default.nix
+++ b/pkgs/development/python-modules/async-dns/default.nix
@@ -4,29 +4,35 @@
   fetchFromGitHub,
   poetry-core,
   python,
-  pythonOlder,
+  writableTmpDirAsHomeHook,
 }:
 
 buildPythonPackage rec {
   pname = "async-dns";
   version = "2.0.0";
-  disabled = pythonOlder "3.6";
-  format = "pyproject";
+  pyproject = true;
 
   src = fetchFromGitHub {
     owner = "gera2ld";
     repo = "async_dns";
-    rev = "v${version}";
-    sha256 = "0vn7hxvpzikd7q61a27fwzal4lwsra2063awyr6fjpy6lh3cjdwf";
+    tag = "v${version}";
+    hash = "sha256-jjfJBqTGX+lM9lwNA4TKmlNC1efuCBUMPm3Gf3eHx24=";
   };
 
-  nativeBuildInputs = [ poetry-core ];
+  build-system = [ poetry-core ];
+
+  nativeCheckInputs = [
+    writableTmpDirAsHomeHook
+  ];
 
   checkPhase = ''
-    export HOME=$TMPDIR
+    runHook preCheck
+
     # Test needs network access
     rm -r tests/resolver
     ${python.interpreter} -m unittest
+
+    runHook postCheck
   '';
 
   pythonImportsCheck = [ "async_dns" ];
@@ -34,7 +40,8 @@ buildPythonPackage rec {
   meta = with lib; {
     description = "Python DNS library";
     homepage = "https://github.com/gera2ld/async_dns";
-    license = with licenses; [ mit ];
+    changelog = "https://github.com/gera2ld/async_dns/releases/tag/${src.tag}";
+    license = licenses.mit;
     maintainers = with maintainers; [ fab ];
   };
 }
diff --git a/pkgs/development/python-modules/awscrt/default.nix b/pkgs/development/python-modules/awscrt/default.nix
index ec378fcd8df9..6b0d24f08285 100644
--- a/pkgs/development/python-modules/awscrt/default.nix
+++ b/pkgs/development/python-modules/awscrt/default.nix
@@ -11,20 +11,22 @@
 
 buildPythonPackage rec {
   pname = "awscrt";
-  version = "0.27.6";
+  version = "0.28.4";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-RfPdCz+xPfvqhW3ZbJrP53vrpXubAZRE7pYu0rdidt0=";
+    hash = "sha256-0oNQlOktCj0XItA6/VSYMRWyFy1XWBpmStairz0zwSw=";
   };
 
   build-system = [ setuptools ];
 
   nativeBuildInputs = [ cmake ] ++ lib.optionals (!stdenv.hostPlatform.isDarwin) [ perl ];
 
+  hardeningDisable = [ "fortify" ]; # needed for jitterentropy
+
   dontUseCmakeConfigure = true;
 
   pythonImportsCheck = [ "awscrt" ];
diff --git a/pkgs/development/python-modules/azure-mgmt-netapp/default.nix b/pkgs/development/python-modules/azure-mgmt-netapp/default.nix
index 4575d6f1ba8a..c7f46485f0f3 100644
--- a/pkgs/development/python-modules/azure-mgmt-netapp/default.nix
+++ b/pkgs/development/python-modules/azure-mgmt-netapp/default.nix
@@ -10,13 +10,13 @@
 
 buildPythonPackage rec {
   pname = "azure-mgmt-netapp";
-  version = "14.0.0";
+  version = "14.0.1";
   pyproject = true;
 
   src = fetchPypi {
     pname = "azure_mgmt_netapp";
     inherit version;
-    hash = "sha256-ykYLisZMhwPUnos5pJzgbxZsqF6R6IcQRAyMSF+96G4=";
+    hash = "sha256-P5ZE9oPOO8oLorpyPTdsc7/f4QMQxsl8PoA1Eag/5ng=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/blosc2/default.nix b/pkgs/development/python-modules/blosc2/default.nix
index 050e881ea0de..cec75daa220c 100644
--- a/pkgs/development/python-modules/blosc2/default.nix
+++ b/pkgs/development/python-modules/blosc2/default.nix
@@ -32,14 +32,14 @@
 
 buildPythonPackage rec {
   pname = "blosc2";
-  version = "3.11.0";
+  version = "3.11.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Blosc";
     repo = "python-blosc2";
     tag = "v${version}";
-    hash = "sha256-L4NTURGmRlM2ZY11NvP36EoImPu1ncb+CBFCeuCC+eQ=";
+    hash = "sha256-n+DSBzb3XXzMEqx8ApFLymU1/IPZTcEFgRarvmYkZVY=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/python-modules/brotli/default.nix b/pkgs/development/python-modules/brotli/default.nix
index ea4b5c43a455..fb78ead78779 100644
--- a/pkgs/development/python-modules/brotli/default.nix
+++ b/pkgs/development/python-modules/brotli/default.nix
@@ -1,38 +1,50 @@
 {
   lib,
+  brotli,
   buildPythonPackage,
   fetchFromGitHub,
+  pkgconfig,
   pytestCheckHook,
   setuptools,
 }:
 
 buildPythonPackage rec {
   pname = "brotli";
-  version = "1.1.0";
+  version = "1.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "google";
     repo = "brotli";
     tag = "v${version}";
-    hash = "sha256-U1vAupUthD5W0xvlOKdgm9MAVLqsVyZUaFdeLsDAbDM=";
+    hash = "sha256-ePfllKdY12hOPuO9uHuXFZ3Bdib6BLD4ghiaeurJZ28=";
     # .gitattributes is not correct or GitHub does not parse it correct and the archive is missing the test data
     forceFetchGit = true;
   };
 
-  build-system = [ setuptools ];
+  build-system = [
+    pkgconfig
+    setuptools
+  ];
 
   # only returns information how to really build
   dontConfigure = true;
 
+  env.USE_SYSTEM_BROTLI = 1;
+
+  buildInputs = [
+    brotli
+  ];
+
   nativeCheckInputs = [ pytestCheckHook ];
 
   enabledTestPaths = [ "python/tests" ];
 
-  meta = with lib; {
+  meta = {
+    changelog = "https://github.com/google/brotli/blob/${src.tag}/CHANGELOG.md";
     homepage = "https://github.com/google/brotli";
     description = "Generic-purpose lossless compression algorithm";
-    license = licenses.mit;
+    license = lib.licenses.mit;
     maintainers = [ ];
   };
 }
diff --git a/pkgs/development/python-modules/chroma-hnswlib/default.nix b/pkgs/development/python-modules/chroma-hnswlib/default.nix
index 00728a35d395..2e00d1ae3df0 100644
--- a/pkgs/development/python-modules/chroma-hnswlib/default.nix
+++ b/pkgs/development/python-modules/chroma-hnswlib/default.nix
@@ -12,7 +12,7 @@
 
 buildPythonPackage rec {
   pname = "chroma-hnswlib";
-  version = "0.7.6";
+  version = "0.8.2";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
@@ -21,7 +21,7 @@ buildPythonPackage rec {
     owner = "chroma-core";
     repo = "hnswlib";
     tag = version;
-    hash = "sha256-pjz5SGg2drO6fkml9ojFG7/Gq3/Y7vPaOHc+3LKnjUw=";
+    hash = "sha256-Fs/BuocZblMSlmP6yp+aykbs0n1AdvL3AVAQI1AnZ9o=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/python-modules/chromadb/default.nix b/pkgs/development/python-modules/chromadb/default.nix
index 06c7acde4293..193fb863e7a7 100644
--- a/pkgs/development/python-modules/chromadb/default.nix
+++ b/pkgs/development/python-modules/chromadb/default.nix
@@ -67,19 +67,19 @@
 
 buildPythonPackage rec {
   pname = "chromadb";
-  version = "1.2.2";
+  version = "1.3.5";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "chroma-core";
     repo = "chroma";
     tag = version;
-    hash = "sha256-D8vLkV8T1igOoCgJDiccLytxlXdF0oLJZTQpBsLM7Z0=";
+    hash = "sha256-pIVoPW7Sdc3XN66SuA6IILQkhoNwqy/X4OWgW08CC58=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname version src;
-    hash = "sha256-f5lU1ClKEZjzOAkng1B37d4VmHYzLOP2uMvoN1RFFoo=";
+    hash = "sha256-3cY9d28dE7Ndh0o1MiBLSwRggkjjnXRcnmsvC2t5S7A=";
   };
 
   # Can't use fetchFromGitHub as the build expects a zipfile
@@ -224,6 +224,7 @@ buildPythonPackage rec {
     "chromadb/test/ef"
     "chromadb/test/property/test_cross_version_persist.py"
     "chromadb/test/stress"
+    "chromadb/test/api/test_schema_e2e.py"
 
     # Excessively slow
     "chromadb/test/property/test_add.py"
diff --git a/pkgs/development/python-modules/click/default.nix b/pkgs/development/python-modules/click/default.nix
index e028343fbb65..368589cac6ef 100644
--- a/pkgs/development/python-modules/click/default.nix
+++ b/pkgs/development/python-modules/click/default.nix
@@ -2,6 +2,7 @@
   lib,
   buildPythonPackage,
   fetchFromGitHub,
+  fetchpatch,
   importlib-metadata,
   pytestCheckHook,
 
@@ -26,6 +27,15 @@ buildPythonPackage rec {
     hash = "sha256-3FfLKwpfkiGfY2+H2fQoZwLBqfPlV46xw2Bc4YEsyps=";
   };
 
+  patches = [
+    # https://github.com/pallets/click/pull/2940
+    (fetchpatch {
+      name = "fix-SystemExit-when-using-stdin.patch";
+      url = "https://github.com/pallets/click/commit/93c6966eb3a575c2b600434d1cc9f4b3aee505ac.patch";
+      hash = "sha256-DkVF0JnKbcsdAhgVjWJEDZZ8vr2sf6wba8P3SyRUy6o=";
+    })
+  ];
+
   build-system = [ flit-core ];
 
   nativeCheckInputs = [ pytestCheckHook ];
diff --git a/pkgs/development/python-modules/crccheck/default.nix b/pkgs/development/python-modules/crccheck/default.nix
index b822ef875f06..25f90363c517 100644
--- a/pkgs/development/python-modules/crccheck/default.nix
+++ b/pkgs/development/python-modules/crccheck/default.nix
@@ -7,12 +7,9 @@
   setuptools-scm,
 }:
 
-let
+buildPythonPackage rec {
   pname = "crccheck";
   version = "1.3.1";
-in
-buildPythonPackage {
-  inherit pname version;
   pyproject = true;
 
   src = fetchFromGitHub {
@@ -29,9 +26,12 @@ buildPythonPackage {
 
   nativeCheckInputs = [ unittestCheckHook ];
 
+  pythonImportsCheck = [ "crccheck" ];
+
   meta = with lib; {
     description = "Python library for CRCs and checksums";
     homepage = "https://github.com/MartinScharrer/crccheck";
+    changelog = "https://github.com/MartinScharrer/crccheck/releases/tag/${src.tag}";
     license = licenses.mit;
     maintainers = [ ];
     platforms = platforms.linux;
diff --git a/pkgs/development/python-modules/crewai/default.nix b/pkgs/development/python-modules/crewai/default.nix
index df91398c1121..e128cba62b36 100644
--- a/pkgs/development/python-modules/crewai/default.nix
+++ b/pkgs/development/python-modules/crewai/default.nix
@@ -105,6 +105,9 @@ buildPythonPackage rec {
     "tests/test_crew.py" # require require API keys
     "tests/rag/chromadb/test_client.py" # issue with chromadb
     "tests/telemetry/test_telemetry.py" # telemetry need network access
+
+    # ImportError: cannot import name 'InitFrom' from 'qdrant_client.models'
+    "tests/rag/qdrant/test_client.py"
   ];
 
   disabledTests = [
diff --git a/pkgs/development/python-modules/dissect-qnxfs/default.nix b/pkgs/development/python-modules/dissect-qnxfs/default.nix
index 0bf58f3af9b1..3e15b4b29303 100644
--- a/pkgs/development/python-modules/dissect-qnxfs/default.nix
+++ b/pkgs/development/python-modules/dissect-qnxfs/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage rec {
   pname = "dissect-qnxfs";
-  version = "1.1";
+  version = "1.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "fox-it";
     repo = "dissect.qnxfs";
     tag = version;
-    hash = "sha256-XKiVfJWxrh4rAVXrQMd761cU8t9PhtCXkZOORd2euA8=";
+    hash = "sha256-p+2Hs2cjqcnHsdtlbif/330WGeBNkDsGCcT+L6sEtAw=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/dissect-xfs/default.nix b/pkgs/development/python-modules/dissect-xfs/default.nix
index 98d7c457b06e..57d986d0dec4 100644
--- a/pkgs/development/python-modules/dissect-xfs/default.nix
+++ b/pkgs/development/python-modules/dissect-xfs/default.nix
@@ -7,21 +7,18 @@
   setuptools,
   setuptools-scm,
   pytestCheckHook,
-  pythonOlder,
 }:
 
 buildPythonPackage rec {
   pname = "dissect-xfs";
-  version = "3.12";
+  version = "3.13";
   pyproject = true;
 
-  disabled = pythonOlder "3.11";
-
   src = fetchFromGitHub {
     owner = "fox-it";
     repo = "dissect.xfs";
     tag = version;
-    hash = "sha256-DKM6z5lasvy2Is64W2lvClgpXslTgNehrfBpa/KtkT0=";
+    hash = "sha256-dFM/xYJR3wBvOe/8rLJz4AK2jmp67T5vo/4TCMRSXzw=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/fonttools/default.nix b/pkgs/development/python-modules/fonttools/default.nix
index 65f72e01e919..056c4d8df771 100644
--- a/pkgs/development/python-modules/fonttools/default.nix
+++ b/pkgs/development/python-modules/fonttools/default.nix
@@ -21,7 +21,7 @@
   xattr,
   skia-pathops,
   uharfbuzz,
-  pytest7CheckHook,
+  pytestCheckHook,
 }:
 
 buildPythonPackage rec {
@@ -29,8 +29,6 @@ buildPythonPackage rec {
   version = "4.60.1";
   pyproject = true;
 
-  disabled = pythonOlder "3.8";
-
   src = fetchFromGitHub {
     owner = "fonttools";
     repo = "fonttools";
@@ -68,9 +66,7 @@ buildPythonPackage rec {
     extras // { all = lib.concatLists (lib.attrValues extras); };
 
   nativeCheckInputs = [
-    # test suite fails with pytest>=8.0.1
-    # https://github.com/fonttools/fonttools/issues/3458
-    pytest7CheckHook
+    pytestCheckHook
   ]
   ++ lib.concatLists (
     lib.attrVals (
diff --git a/pkgs/development/python-modules/holidays/default.nix b/pkgs/development/python-modules/holidays/default.nix
index fc76273c14c9..647859ca8621 100644
--- a/pkgs/development/python-modules/holidays/default.nix
+++ b/pkgs/development/python-modules/holidays/default.nix
@@ -15,14 +15,14 @@
 
 buildPythonPackage rec {
   pname = "holidays";
-  version = "0.84";
+  version = "0.85";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "vacanza";
     repo = "python-holidays";
     tag = "v${version}";
-    hash = "sha256-sqeU9FsIeWy4dHmC3K2ChHhtfSsWGXGWUGV90g7kmvs=";
+    hash = "sha256-ExleK66foB2Q/KK7zcPJ16q4ucz3gOkntB2SQETfHqk=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/mitmproxy/default.nix b/pkgs/development/python-modules/mitmproxy/default.nix
index f0ce75afc207..78cc884abc32 100644
--- a/pkgs/development/python-modules/mitmproxy/default.nix
+++ b/pkgs/development/python-modules/mitmproxy/default.nix
@@ -18,6 +18,7 @@
   ldap3,
   mitmproxy-rs,
   msgpack,
+  nixosTests,
   publicsuffix2,
   pyopenssl,
   pyparsing,
@@ -50,6 +51,7 @@ buildPythonPackage rec {
 
   pythonRelaxDeps = [
     "bcrypt"
+    "brotli"
     "cryptography"
     "flask"
     "h2"
@@ -146,6 +148,10 @@ buildPythonPackage rec {
 
   pythonImportsCheck = [ "mitmproxy" ];
 
+  passthru.tests = {
+    inherit (nixosTests) mitmproxy;
+  };
+
   meta = with lib; {
     description = "Man-in-the-middle proxy";
     homepage = "https://mitmproxy.org/";
diff --git a/pkgs/development/python-modules/mmengine/default.nix b/pkgs/development/python-modules/mmengine/default.nix
index 0217e140b77b..5a0a50a8bc20 100644
--- a/pkgs/development/python-modules/mmengine/default.nix
+++ b/pkgs/development/python-modules/mmengine/default.nix
@@ -21,7 +21,6 @@
 
   # tests
   bitsandbytes,
-  coverage,
   dvclive,
   lion-pytorch,
   lmdb,
@@ -89,7 +88,6 @@ buildPythonPackage rec {
 
   nativeCheckInputs = [
     bitsandbytes
-    coverage
     dvclive
     lion-pytorch
     lmdb
diff --git a/pkgs/development/python-modules/narwhals/default.nix b/pkgs/development/python-modules/narwhals/default.nix
index a33dad202948..049411653ca0 100644
--- a/pkgs/development/python-modules/narwhals/default.nix
+++ b/pkgs/development/python-modules/narwhals/default.nix
@@ -1,5 +1,6 @@
 {
   lib,
+  stdenv,
   buildPythonPackage,
   dask,
   duckdb,
@@ -82,6 +83,11 @@ buildPythonPackage rec {
     "test_collect_empty"
   ];
 
+  disabledTestPaths = lib.optionals (stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isx86_64) [
+    # Segfault in included polars/lazyframe
+    "tests/tpch_q1_test.py"
+  ];
+
   pytestFlags = [
     "-Wignore::DeprecationWarning"
   ];
diff --git a/pkgs/development/python-modules/pikepdf/default.nix b/pkgs/development/python-modules/pikepdf/default.nix
index 8227e6c2e080..4c636e8e40ea 100644
--- a/pkgs/development/python-modules/pikepdf/default.nix
+++ b/pkgs/development/python-modules/pikepdf/default.nix
@@ -25,7 +25,7 @@
 
 buildPythonPackage rec {
   pname = "pikepdf";
-  version = "10.0.0";
+  version = "10.0.2";
   pyproject = true;
 
   src = fetchFromGitHub {
@@ -38,7 +38,7 @@ buildPythonPackage rec {
     postFetch = ''
       rm "$out/.git_archival.txt"
     '';
-    hash = "sha256-DiNRjN4tnADaFOxLV9wdvJe9KEOb+h9IOSzaPGtGuk0=";
+    hash = "sha256-ncWgIcQp6/GOrNwIvwJ4nvf+SUfr0N53MXYq9LpfiB4=";
   };
 
   patches = [
diff --git a/pkgs/development/python-modules/prompt-toolkit/default.nix b/pkgs/development/python-modules/prompt-toolkit/default.nix
index b88ff4b53bab..e1ad03755362 100644
--- a/pkgs/development/python-modules/prompt-toolkit/default.nix
+++ b/pkgs/development/python-modules/prompt-toolkit/default.nix
@@ -1,7 +1,7 @@
 {
   lib,
   buildPythonPackage,
-  fetchPypi,
+  fetchFromGitHub,
   pytestCheckHook,
   setuptools,
   wcwidth,
@@ -12,10 +12,11 @@ buildPythonPackage rec {
   version = "3.0.52";
   pyproject = true;
 
-  src = fetchPypi {
-    pname = "prompt_toolkit";
-    inherit version;
-    hash = "sha256-KM3hkpKcjnMh3oXeHdvnNvE3UUiwLy4X7dhABCsb6FU=";
+  src = fetchFromGitHub {
+    owner = "prompt-toolkit";
+    repo = "python-prompt-toolkit";
+    tag = version;
+    hash = "sha256-ggCy7xTvOkjy6DgsO/rPNtQiAQ4FjsK4ShrvkIHioNQ=";
   };
 
   postPatch = ''
@@ -47,8 +48,8 @@ buildPythonPackage rec {
       with a nice interactive Python shell (called ptpython) built on top.
     '';
     homepage = "https://github.com/jonathanslenders/python-prompt-toolkit";
-    changelog = "https://github.com/prompt-toolkit/python-prompt-toolkit/blob/${version}/CHANGELOG";
+    changelog = "https://github.com/prompt-toolkit/python-prompt-toolkit/releases/tag/${src.tag}";
     license = licenses.bsd3;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ sarahec ];
   };
 }
diff --git a/pkgs/development/python-modules/protobuf/6.nix b/pkgs/development/python-modules/protobuf/6.nix
index f5ce6a82e716..bba5b5da6dac 100644
--- a/pkgs/development/python-modules/protobuf/6.nix
+++ b/pkgs/development/python-modules/protobuf/6.nix
@@ -9,12 +9,12 @@
 
 buildPythonPackage rec {
   pname = "protobuf";
-  version = "6.33.0";
+  version = "6.33.1";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-FAMD1cjSA3cwxUj4x7k7ILsdwwG+KAw3i4K4iUWJyVQ=";
+    hash = "sha256-l/ZXV+jQmHDeb9lzrt25L4VDVgcjXSCy3+2TQF0AyFs=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/pycurl/default.nix b/pkgs/development/python-modules/pycurl/default.nix
index beac9451932a..224a3f9ebe6f 100644
--- a/pkgs/development/python-modules/pycurl/default.nix
+++ b/pkgs/development/python-modules/pycurl/default.nix
@@ -34,6 +34,13 @@ buildPythonPackage rec {
       url = "https://github.com/pycurl/pycurl/commit/eb7f52eeef85feb6c117678d52803050bbdd7bc8.patch";
       hash = "sha256-hdwazS7R9duuMd/7S3SNAxVcToo3GhtyWu/1Q6qTMYc=";
     })
+    # curl 8.17+ compatibility
+    # https://github.com/pycurl/pycurl/pull/909
+    (fetchpatch {
+      name = "pycurl-8.17.0-compat.patch";
+      url = "https://github.com/pycurl/pycurl/commit/ea92e3ca230a3ff3d464cb6816102fa157177aca.patch";
+      hash = "sha256-kmlsG0SFfS9FdRNp8pPgudcWK6hSyD9x5oAedZLgBcY=";
+    })
   ];
 
   preConfigure = ''
diff --git a/pkgs/development/python-modules/pygobject/3.nix b/pkgs/development/python-modules/pygobject/3.nix
index 9825af96472e..c058a77b461a 100644
--- a/pkgs/development/python-modules/pygobject/3.nix
+++ b/pkgs/development/python-modules/pygobject/3.nix
@@ -18,7 +18,7 @@
 
 buildPythonPackage rec {
   pname = "pygobject";
-  version = "3.54.3";
+  version = "3.54.5";
 
   outputs = [
     "out"
@@ -30,8 +30,8 @@ buildPythonPackage rec {
   format = "other";
 
   src = fetchurl {
-    url = "mirror://gnome/sources/${pname}/${lib.versions.majorMinor version}/${pname}-${version}.tar.gz";
-    hash = "sha256-qNoJE0oPfVZJHPJBIUXjWqdOkddg6PM3CWoc2guSuuc=";
+    url = "mirror://gnome/sources/pygobject/${lib.versions.majorMinor version}/pygobject-${version}.tar.gz";
+    hash = "sha256-tmVvY0j1JFYGzxXqSMOEx/BRVsderSBsGyRsgKIvtYU=";
   };
 
   depsBuildBuild = [ pkg-config ];
@@ -63,8 +63,8 @@ buildPythonPackage rec {
 
   passthru = {
     updateScript = gnome.updateScript {
-      packageName = pname;
-      attrPath = "python3.pkgs.${pname}3";
+      packageName = "pygobject";
+      attrPath = "python3.pkgs.pygobject3";
       versionPolicy = "odd-unstable";
     };
   };
diff --git a/pkgs/development/python-modules/ray/default.nix b/pkgs/development/python-modules/ray/default.nix
index d326f4073b9d..ab83a4f77e56 100644
--- a/pkgs/development/python-modules/ray/default.nix
+++ b/pkgs/development/python-modules/ray/default.nix
@@ -45,8 +45,10 @@
   async-timeout,
   hf-transfer,
   jsonref,
+  meson,
   ninja,
   # nixl,
+  pybind11,
   typer,
   vllm,
   # observability
@@ -72,7 +74,7 @@
 
 let
   pname = "ray";
-  version = "2.51.1";
+  version = "2.52.0";
 in
 buildPythonPackage rec {
   inherit pname version;
@@ -92,22 +94,22 @@ buildPythonPackage rec {
       # Results are in ./ray-hashes.nix
       hashes = {
         x86_64-linux = {
-          cp310 = "sha256-iiH1kUuqPe78tPpfOHjgO1icGQuGT+G4Dm3Ay/uiYAQ=";
-          cp311 = "sha256-3TUwENJUi8NF5GxFeV9wKRu0YMI2qmozk7UanNhhtW8=";
-          cp312 = "sha256-Tnhtp4Ys9zZkl30CEqUF1tWlhb6t9j59weHBKSWb7iA=";
-          cp313 = "sha256-Jl7Nb9bUppWwnGhuF9WPygwJ5xmMBzYornv0l0sD6co=";
+          cp310 = "sha256-iPeskSt4y0NrSo5bNwrRFjGPkm1U+HMQIAMs+wnPx9w=";
+          cp311 = "sha256-WaItjqIbrU5wOsWjoZR8L8CaQ7TpBDZm2fjTls7ruXQ=";
+          cp312 = "sha256-VAxy0ZDsgn4xIkiEhakpoakIRgqlH9IkdpaoU0O3qxY=";
+          cp313 = "sha256-NvmUXgFmH2oQEPREDVqVXKot6hC5MPe9Na5kAWtYEpw=";
         };
         aarch64-linux = {
-          cp310 = "sha256-Nv61GfMcUtO0281o/7K6+TGVzuwG6nEeIVWQlrq5X+0=";
-          cp311 = "sha256-0tfIr0VEH/ULwAI1LTHgr+xchd1Qdb9ScCcXiTFJe84=";
-          cp312 = "sha256-C+2UCHErrRUR5laDpFUwL4jZTl5ctqWMxKFUth2KC0o=";
-          cp313 = "sha256-PyvSrPm39HOMF9CFksqq0m6vt6T8OArZq0LV8KePc60=";
+          cp310 = "sha256-D1XiF+55XKyziEui6vleRn+ilTJiaqZ/c8GmS39BPUQ=";
+          cp311 = "sha256-qZCjrmzRPboh7cO1ZOJXOvVYu4KrY9LZJTKkNqh4v3w=";
+          cp312 = "sha256-9u3su848Tq4zXpcTTT/6yVP0Yz+nxvEuPeppY0kYqKI=";
+          cp313 = "sha256-tU6gRycJrC1NdhjNecx6EL90m+7hCxKWRHTo6EEl+g8=";
         };
         aarch64-darwin = {
-          cp310 = "sha256-6M4hjIXp9AQ8NxNvyQtBNDvbhE/NyVIPIcAA0djUn4k=";
-          cp311 = "sha256-vYIR/AM74bzpwDnkdOl6kHe+WTAgl4/c+6HXcL3EC6U=";
-          cp312 = "sha256-74R7AlynWLruRXGhygAdlziXytdy+OldfzA9JMOLZJ4=";
-          cp313 = "sha256-2BVHiGQ1FC29eb/x1OTt9Xil8g47EbvUztSc+vvTfSc=";
+          cp310 = "sha256-T6s0v0vZBUYaSMzlfG+QHbo/LlLZLk8LA3ODEQhJS+w=";
+          cp311 = "sha256-pe8+qUnfLplVJ/6R4C4p1Vqr6FbTV+kBn0OsA70rnvQ=";
+          cp312 = "sha256-5wCpzAoPnUqSsea64/QQHo0Gh3rUOSnuOpKlchBP9Q8=";
+          cp313 = "sha256-jWpJg3XWwFRA6ljlr+WCE01wDNjUWntrEocbdbIRcZ0=";
         };
       };
     in
@@ -185,13 +187,16 @@ buildPythonPackage rec {
         hf-transfer
         jsonref
         jsonschema
+        meson
         ninja
         # nixl
+        pybind11
         typer
         vllm
       ]
       ++ self.data
       ++ self.serve
+      ++ vllm.optional-dependencies.audio
     );
     observability = [
       memray
diff --git a/pkgs/development/python-modules/regex/default.nix b/pkgs/development/python-modules/regex/default.nix
index 4ca491e0e076..7a581c682ceb 100644
--- a/pkgs/development/python-modules/regex/default.nix
+++ b/pkgs/development/python-modules/regex/default.nix
@@ -1,19 +1,24 @@
 {
-  lib,
   buildPythonPackage,
-  fetchPypi,
+  fetchFromGitHub,
+  lib,
   python,
   setuptools,
 }:
 
-buildPythonPackage rec {
-  pname = "regex";
+let
   version = "2025.9.18";
+in
+buildPythonPackage {
+  pname = "regex";
+  inherit version;
   pyproject = true;
 
-  src = fetchPypi {
-    inherit pname version;
-    hash = "sha256-xbojJ0xhxv70R7pqOTMyl9DCR/UwWdugvKQVysUR7cQ=";
+  src = fetchFromGitHub {
+    owner = "mrabarnett";
+    repo = "mrab-regex";
+    tag = version;
+    hash = "sha256-s/jaRbQffd1DmGribk8gwTraKEhWfvFZboWXUduhM8A=";
   };
 
   build-system = [ setuptools ];
@@ -24,13 +29,13 @@ buildPythonPackage rec {
 
   pythonImportsCheck = [ "regex" ];
 
-  meta = with lib; {
+  meta = {
     description = "Alternative regular expression module, to replace re";
     homepage = "https://github.com/mrabarnett/mrab-regex";
     license = [
-      licenses.asl20
-      licenses.cnri-python
+      lib.licenses.asl20
+      lib.licenses.cnri-python
     ];
-    maintainers = with lib.maintainers; [ dwoffinden ];
+    maintainers = [ lib.maintainers.dwoffinden ];
   };
 }
diff --git a/pkgs/development/python-modules/scipy/default.nix b/pkgs/development/python-modules/scipy/default.nix
index 663389069579..16ae631686e4 100644
--- a/pkgs/development/python-modules/scipy/default.nix
+++ b/pkgs/development/python-modules/scipy/default.nix
@@ -50,8 +50,8 @@ let
   #     nix-shell maintainers/scripts/update.nix --argstr package python3.pkgs.scipy
   #
   # The update script uses sed regexes to replace them with the updated hashes.
-  version = "1.16.2";
-  srcHash = "sha256-vWXJyLvOqCC5jwDawWHF6K2GVU2gnvW4a85lF/6tVYg=";
+  version = "1.16.3";
+  srcHash = "sha256-2NVmsJqsUjWSD7oEJhRkRjbKvqwikBJenAhBio/+IuU=";
   datasetsHashes = {
     ascent = "1qjp35ncrniq9rhzb14icwwykqg2208hcssznn3hz27w39615kh3";
     ecg = "1bwbjp43b7znnwha5hv6wiz3g0bhwrpqpi75s12zidxrbwvd62pj";
diff --git a/pkgs/development/python-modules/swh-core/default.nix b/pkgs/development/python-modules/swh-core/default.nix
index 3ce0191925f6..940cf4980cd8 100644
--- a/pkgs/development/python-modules/swh-core/default.nix
+++ b/pkgs/development/python-modules/swh-core/default.nix
@@ -18,6 +18,7 @@
   hypothesis,
   iso8601,
   lzip,
+  moto,
   msgpack,
   postgresql,
   postgresqlTestHook,
@@ -29,7 +30,9 @@
   pytest-postgresql,
   pytz,
   requests-mock,
+  swh-model,
   systemd-python,
+  tqdm,
   types-deprecated,
   types-psycopg2,
   types-pytz,
@@ -41,7 +44,7 @@
 
 buildPythonPackage rec {
   pname = "swh-core";
-  version = "4.5.2";
+  version = "4.6.0";
   pyproject = true;
 
   src = fetchFromGitLab {
@@ -50,7 +53,7 @@ buildPythonPackage rec {
     owner = "devel";
     repo = "swh-core";
     tag = "v${version}";
-    hash = "sha256-yNWij9GclQCysQe9Bukr4cHlZgSQqLAuX1KwGWzAK+0=";
+    hash = "sha256-dI+xfj0DnUbBdYIVycyJQg3B/jnH/eg/Ju8YX2k8Qkc=";
   };
 
   build-system = [
@@ -58,6 +61,11 @@ buildPythonPackage rec {
     setuptools-scm
   ];
 
+  pythonRelaxDeps = [
+    # we patched click 8.2.1
+    "click"
+  ];
+
   dependencies = [
     backports-entry-points-selectable
     click
@@ -79,6 +87,7 @@ buildPythonPackage rec {
     hypothesis
     iso8601
     lzip
+    moto
     msgpack
     postgresql
     postgresqlTestHook
@@ -90,7 +99,9 @@ buildPythonPackage rec {
     pytest-postgresql
     pytz
     requests-mock
+    swh-model
     systemd-python
+    tqdm
     types-deprecated
     types-psycopg2
     types-pytz
@@ -111,6 +122,7 @@ buildPythonPackage rec {
   ];
 
   meta = {
+    changelog = "https://gitlab.softwareheritage.org/swh/devel/swh-core/-/tags/${src.tag}";
     description = "Low-level utilities and helpers used by almost all other modules in the stack";
     homepage = "https://gitlab.softwareheritage.org/swh/devel/swh-core";
     license = lib.licenses.gpl3Only;
diff --git a/pkgs/development/python-modules/swh-objstorage/default.nix b/pkgs/development/python-modules/swh-objstorage/default.nix
index ee234b521c95..c8ca0dc87afd 100644
--- a/pkgs/development/python-modules/swh-objstorage/default.nix
+++ b/pkgs/development/python-modules/swh-objstorage/default.nix
@@ -18,7 +18,7 @@
   tenacity,
   swh-core,
   swh-model,
-  swh-perfecthash,
+  swh-shard,
   aiohttp,
   azure-core,
   azure-storage-blob,
@@ -40,7 +40,7 @@
 
 buildPythonPackage rec {
   pname = "swh-objstorage";
-  version = "4.0.0";
+  version = "5.1.0";
   pyproject = true;
 
   src = fetchFromGitLab {
@@ -49,7 +49,7 @@ buildPythonPackage rec {
     owner = "devel";
     repo = "swh-objstorage";
     tag = "v${version}";
-    hash = "sha256-c0ZH2PMT9DVnpTV5PDyX0Yw4iHiJSolEgq/bMXEwXG8=";
+    hash = "sha256-NnNT9Lt/LGDIJpUmfkfPn6JnF3k8Usf2UVa88zHPKlg=";
   };
 
   build-system = [
@@ -71,7 +71,7 @@ buildPythonPackage rec {
     tenacity
     swh-core
     swh-model
-    swh-perfecthash
+    swh-shard
   ];
 
   preCheck = ''
@@ -110,6 +110,7 @@ buildPythonPackage rec {
   ];
 
   meta = {
+    changelog = "https://gitlab.softwareheritage.org/swh/devel/swh-objstorage/-/tags/${src.tag}";
     description = "Content-addressable object storage for the Software Heritage project";
     homepage = "https://gitlab.softwareheritage.org/swh/devel/swh-objstorage";
     license = lib.licenses.gpl3Only;
diff --git a/pkgs/development/python-modules/swh-perfecthash/default.nix b/pkgs/development/python-modules/swh-perfecthash/default.nix
deleted file mode 100644
index ec3e2fa0e908..000000000000
--- a/pkgs/development/python-modules/swh-perfecthash/default.nix
+++ /dev/null
@@ -1,62 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitLab,
-  setuptools,
-  setuptools-scm,
-  cffi,
-  pytestCheckHook,
-  pytest-mock,
-  pkgs, # only for cmph
-}:
-
-buildPythonPackage rec {
-  pname = "swh-perfecthash";
-  version = "1.3.2";
-  pyproject = true;
-
-  src = fetchFromGitLab {
-    domain = "gitlab.softwareheritage.org";
-    group = "swh";
-    owner = "devel";
-    repo = "swh-perfecthash";
-    tag = "v${version}";
-    hash = "sha256-cG0h0lfSSooA7Mzrlsi5yIcbkbxQZ7mI5NtiB7D5Crs=";
-  };
-
-  build-system = [
-    setuptools
-    setuptools-scm
-  ];
-
-  dependencies = [
-    cffi
-    pkgs.cmph
-  ];
-
-  # The installed library clashes with the `swh` directory remaining in the source path.
-  # Usually, we get around this by `rm -rf` the python source files to ensure that the installed package is used.
-  # Here, we cannot do that as it would also remove the tests which are also in the `swh` directory.
-  preCheck = ''
-    rm -rf swh/perfecthash/*.py
-  '';
-
-  pythonImportsCheck = [ "swh.perfecthash" ];
-
-  nativeCheckInputs = [
-    pytestCheckHook
-    pytest-mock
-  ];
-
-  disabledTests = [
-    # Flake tests
-    "test_build_speed"
-  ];
-
-  meta = {
-    description = "Perfect hash table for software heritage object storage";
-    homepage = "https://gitlab.softwareheritage.org/swh/devel/swh-perfecthash";
-    license = lib.licenses.gpl3Only;
-    maintainers = [ ];
-  };
-}
diff --git a/pkgs/development/python-modules/swh-scanner/default.nix b/pkgs/development/python-modules/swh-scanner/default.nix
index 03fef49e9878..5dca94bb53d2 100644
--- a/pkgs/development/python-modules/swh-scanner/default.nix
+++ b/pkgs/development/python-modules/swh-scanner/default.nix
@@ -2,7 +2,6 @@
   lib,
   buildPythonPackage,
   fetchFromGitLab,
-  fetchpatch,
   setuptools,
   setuptools-scm,
   requests,
@@ -36,15 +35,6 @@ buildPythonPackage rec {
     hash = "sha256-baUUuYFapBD7iuDaDP8CSR9f4glVZcS5qBpZddVf7z8=";
   };
 
-  patches = [
-    # To be removed at the next release
-    # See https://gitlab.softwareheritage.org/swh/devel/swh-scanner/-/merge_requests/160
-    (fetchpatch {
-      url = "https://gitlab.softwareheritage.org/swh/devel/swh-scanner/-/commit/0eb273475826b0074844c7619b767c052562cfe4.patch";
-      hash = "sha256-i3hpaQJmHpIYgix+/npICQGtJ/IKVRXcCTm2O1VsR9M=";
-    })
-  ];
-
   build-system = [
     setuptools
     setuptools-scm
@@ -78,11 +68,14 @@ buildPythonPackage rec {
   disabledTestPaths = [
     # pytestRemoveBytecodePhase fails with: "error (ignored): error: opening directory "/tmp/nix-build-python3.12-swh-scanner-0.8.3.drv-5/build/pytest-of-nixbld/pytest-0/test_randomdir_policy_info_cal0/big-directory/dir/dir/dir/ ......"
     "swh/scanner/tests/test_policy.py"
+    # TypeError: CliRunner.__init__() got an unexpected keyword argument 'mix_stderr'
+    "swh/scanner/tests/test_cli.py"
   ];
 
   meta = {
-    description = "Implementation of the Data model of the Software Heritage project, used to archive source code artifacts";
-    homepage = "https://gitlab.softwareheritage.org/swh/devel/swh-model";
+    changelog = "https://gitlab.softwareheritage.org/swh/devel/swh-scanner/-/tags/${src.tag}";
+    description = "Source code scanner to analyze code bases and compare them with source code artifacts archived by Software Heritage";
+    homepage = "https://gitlab.softwareheritage.org/swh/devel/swh-scanner";
     license = lib.licenses.gpl3Only;
     maintainers = [ ];
   };
diff --git a/pkgs/development/python-modules/swh-scheduler/default.nix b/pkgs/development/python-modules/swh-scheduler/default.nix
index ba2f4e10d1b3..7bb37313ed3c 100644
--- a/pkgs/development/python-modules/swh-scheduler/default.nix
+++ b/pkgs/development/python-modules/swh-scheduler/default.nix
@@ -30,7 +30,7 @@
 
 buildPythonPackage rec {
   pname = "swh-scheduler";
-  version = "3.1.0";
+  version = "3.3.0";
   pyproject = true;
 
   src = fetchFromGitLab {
@@ -39,7 +39,7 @@ buildPythonPackage rec {
     owner = "devel";
     repo = "swh-scheduler";
     tag = "v${version}";
-    hash = "sha256-YpMHeZVHK8IPIiuBaPNR0D/yB9lIQ3DK7NEAiBmjWpA=";
+    hash = "sha256-Kv5QH3sj/InKOSjxGtwVxtoAluHx5eIxO5GqcbOs0NY=";
   };
 
   build-system = [
@@ -47,6 +47,11 @@ buildPythonPackage rec {
     setuptools-scm
   ];
 
+  pythonRelaxDeps = [
+    # we patched click 8.2.1
+    "click"
+  ];
+
   dependencies = [
     celery
     flask
@@ -80,6 +85,7 @@ buildPythonPackage rec {
   disabledTests = [ "test_setup_log_handler_with_env_configuration" ];
 
   meta = {
+    changelog = "https://gitlab.softwareheritage.org/swh/devel/swh-scheduler/-/tags/${src.tag}";
     description = "Job scheduler for the Software Heritage project";
     homepage = "https://gitlab.softwareheritage.org/swh/devel/swh-scheduler";
     license = lib.licenses.gpl3Only;
diff --git a/pkgs/development/python-modules/swh-shard/default.nix b/pkgs/development/python-modules/swh-shard/default.nix
new file mode 100644
index 000000000000..a07c344b04a2
--- /dev/null
+++ b/pkgs/development/python-modules/swh-shard/default.nix
@@ -0,0 +1,72 @@
+{
+  buildPythonPackage,
+  click,
+  cmake,
+  cmph,
+  fetchFromGitLab,
+  lib,
+  ninja,
+  pkg-config,
+  pybind11,
+  pytest-mock,
+  pytestCheckHook,
+  scikit-build-core,
+  setuptools-scm,
+}:
+
+buildPythonPackage rec {
+  pname = "swh-shard";
+  version = "2.2.0";
+  pyproject = true;
+
+  src = fetchFromGitLab {
+    domain = "gitlab.softwareheritage.org";
+    group = "swh";
+    owner = "devel";
+    repo = "swh-shard";
+    tag = "v${version}";
+    hash = "sha256-97oZ+Wa8GmyL2V4CnlSvaTbQZJ+mPbg6uVmWd0oxv1Q=";
+  };
+
+  build-system = [
+    cmake
+    ninja
+    pybind11
+    scikit-build-core
+    setuptools-scm
+  ];
+
+  nativeBuildInputs = [
+    pkg-config
+  ];
+
+  dontUseCmakeConfigure = true;
+
+  buildInputs = [
+    cmph
+  ];
+
+  dependencies = [
+    click
+  ];
+
+  pythonImportsCheck = [ "swh.shard" ];
+
+  nativeCheckInputs = [
+    pytest-mock
+    pytestCheckHook
+  ];
+
+  preCheck = ''
+    # import from $out
+    rm src/swh/shard/*.py
+  '';
+
+  meta = {
+    changelog = "https://gitlab.softwareheritage.org/swh/devel/swh-shard/-/tags/v2.2.0";
+    description = "Shard File Format for the Software Heritage Object Storage";
+    homepage = "https://gitlab.softwareheritage.org/swh/devel/swh-shard";
+    license = lib.licenses.gpl3Only;
+    maintainers = [ lib.maintainers.dotlambda ];
+  };
+}
diff --git a/pkgs/development/python-modules/swh-storage/default.nix b/pkgs/development/python-modules/swh-storage/default.nix
index 74e312d07606..dcf09bf27cf4 100644
--- a/pkgs/development/python-modules/swh-storage/default.nix
+++ b/pkgs/development/python-modules/swh-storage/default.nix
@@ -12,6 +12,8 @@
   iso8601,
   mypy-extensions,
   psycopg,
+  psycopg-pool,
+  pyasyncore,
   redis,
   tenacity,
   swh-core,
@@ -30,7 +32,7 @@
 
 buildPythonPackage rec {
   pname = "swh-storage";
-  version = "3.1.0";
+  version = "4.1.0";
   pyproject = true;
 
   src = fetchFromGitLab {
@@ -39,7 +41,7 @@ buildPythonPackage rec {
     owner = "devel";
     repo = "swh-storage";
     tag = "v${version}";
-    hash = "sha256-Bxwc8OccmqadLjHtmhToHBYHGkD7Fw3Cl3go9VLV/Bs=";
+    hash = "sha256-JXeHE/wZ3Wcf1I1eGyCNlCGsreiQH6kCYZoDXV1h0A0=";
   };
 
   build-system = [
@@ -47,6 +49,11 @@ buildPythonPackage rec {
     setuptools-scm
   ];
 
+  pythonRelaxDeps = [
+    # we patched click 8.2.1
+    "click"
+  ];
+
   dependencies = [
     backports-entry-points-selectable
     cassandra-driver
@@ -56,13 +63,14 @@ buildPythonPackage rec {
     iso8601
     mypy-extensions
     psycopg
+    psycopg-pool
+    pyasyncore
     redis
     tenacity
     swh-core
     swh-model
     swh-objstorage
-  ]
-  ++ psycopg.optional-dependencies.pool;
+  ];
 
   pythonImportsCheck = [ "swh.storage" ];
 
@@ -88,11 +96,13 @@ buildPythonPackage rec {
     "swh/storage/tests/test_cassandra_migration.py"
     "swh/storage/tests/test_cassandra_ttl.py"
     "swh/storage/tests/test_cli_cassandra.py"
+    "swh/storage/tests/test_cli_object_references_cassandra.py"
     # Failing tests
     "swh/storage/tests/test_cli_object_references.py"
   ];
 
   meta = {
+    changelog = "https://gitlab.softwareheritage.org/swh/devel/swh-storage/-/tags/${src.tag}";
     description = "Abstraction layer over the archive, allowing to access all stored source code artifacts as well as their metadata";
     homepage = "https://gitlab.softwareheritage.org/swh/devel/swh-storage";
     license = lib.licenses.gpl3Only;
diff --git a/pkgs/development/python-modules/swh-web-client/default.nix b/pkgs/development/python-modules/swh-web-client/default.nix
index b7ec8be2d090..deeba3f3a3b1 100644
--- a/pkgs/development/python-modules/swh-web-client/default.nix
+++ b/pkgs/development/python-modules/swh-web-client/default.nix
@@ -37,6 +37,11 @@ buildPythonPackage rec {
     setuptools-scm
   ];
 
+  pythonRelaxDeps = [
+    # we patched click 8.2.1
+    "click"
+  ];
+
   dependencies = [
     click
     dateutils
diff --git a/pkgs/development/python-modules/types-aiobotocore-packages/default.nix b/pkgs/development/python-modules/types-aiobotocore-packages/default.nix
index ba86ce7085a7..6a29d20ded7b 100644
--- a/pkgs/development/python-modules/types-aiobotocore-packages/default.nix
+++ b/pkgs/development/python-modules/types-aiobotocore-packages/default.nix
@@ -61,620 +61,620 @@ let
 in
 {
   types-aiobotocore-accessanalyzer =
-    buildTypesAiobotocorePackage "accessanalyzer" "2.25.1"
-      "sha256-pMf7hKCKrl3MRRxugI7uLwA8jCnVUUW/8rFKD8fnuLw=";
+    buildTypesAiobotocorePackage "accessanalyzer" "2.25.2"
+      "sha256-IEVDklcUHZFgtP4QlI9bGOJ6dx+rJoBF3XRoFH5DZV0=";
 
   types-aiobotocore-account =
-    buildTypesAiobotocorePackage "account" "2.25.1"
-      "sha256-NrlheHJhq7vLK/6WfIX1/FAsfdJBd9PDsH7VabzpE4s=";
+    buildTypesAiobotocorePackage "account" "2.25.2"
+      "sha256-lBkm+8rmTzl9q9g7Fzgp9sdAosdDckamnxeUWZxir+E=";
 
   types-aiobotocore-acm =
-    buildTypesAiobotocorePackage "acm" "2.25.1"
-      "sha256-h3fi1vZkjNPaTmsWrDbfRHBzHwuA0CuaEua4yqnaIwI=";
+    buildTypesAiobotocorePackage "acm" "2.25.2"
+      "sha256-lNlDVxNTMz9vGU94nIjkEji35679Bm0yv4CUGYGpADE=";
 
   types-aiobotocore-acm-pca =
-    buildTypesAiobotocorePackage "acm-pca" "2.25.1"
-      "sha256-ydvC2o0RHJ60kQ7hF2K8cGa9VDyWxTTYLz7bA0bWanw=";
+    buildTypesAiobotocorePackage "acm-pca" "2.25.2"
+      "sha256-N+knWZbvPGheg1JAp1xuUTpIQex4q4sntsJqTA73Y+Y=";
 
   types-aiobotocore-alexaforbusiness =
     buildTypesAiobotocorePackage "alexaforbusiness" "2.13.0"
       "sha256-+w/InoQR2aZ5prieGhgEEp7auBiSSghG5zIIHY5Kyao=";
 
   types-aiobotocore-amp =
-    buildTypesAiobotocorePackage "amp" "2.25.1"
-      "sha256-u00hvOdYiQ+vG8AdRTzq5G9nZTP6H0SlcXtMzTNxf3s=";
+    buildTypesAiobotocorePackage "amp" "2.25.2"
+      "sha256-My6WiULfsM3fZTlvcB1nS1t+QbXWngPKDlsDym+GbB0=";
 
   types-aiobotocore-amplify =
-    buildTypesAiobotocorePackage "amplify" "2.25.1"
-      "sha256-Sn9pLDv7/Q2xuvaTHmU2mC3aRc5M2KfgNDWJ9Ywjkw0=";
+    buildTypesAiobotocorePackage "amplify" "2.25.2"
+      "sha256-t+8zj70sq2Z28CLqrZig6iGYsVpCDK6lQP8VBVbvKlM=";
 
   types-aiobotocore-amplifybackend =
-    buildTypesAiobotocorePackage "amplifybackend" "2.25.1"
-      "sha256-23aPaq7yZ9O2TAPUug9LuQKceS27Hfvy0RbuZGtMsoQ=";
+    buildTypesAiobotocorePackage "amplifybackend" "2.25.2"
+      "sha256-lGQKvzPp/4/imk+cimBv6JGzMb7pOHW1M8sqhlLDWtY=";
 
   types-aiobotocore-amplifyuibuilder =
-    buildTypesAiobotocorePackage "amplifyuibuilder" "2.25.1"
-      "sha256-tU7YrUUAmhQTejakvWtRhnwsQzYfaBBqsJasCzr6yXU=";
+    buildTypesAiobotocorePackage "amplifyuibuilder" "2.25.2"
+      "sha256-Rif++XP7pJB8qF8RZuZFAWDb25d2yPvvW+LGuVzEDBI=";
 
   types-aiobotocore-apigateway =
-    buildTypesAiobotocorePackage "apigateway" "2.25.1"
-      "sha256-LiUzw6fVFux1bfk+uC9+lDYltb0SeQBBIeDHIH8r06M=";
+    buildTypesAiobotocorePackage "apigateway" "2.25.2"
+      "sha256-nuWtmXwABeagUB+ZwBQdChlsYcr8o8LLWwR/moCS5Ug=";
 
   types-aiobotocore-apigatewaymanagementapi =
-    buildTypesAiobotocorePackage "apigatewaymanagementapi" "2.25.1"
-      "sha256-IuYIXBgxzmBx9ESWJzZfCff/+U6sAaXmUnR5rddzYOc=";
+    buildTypesAiobotocorePackage "apigatewaymanagementapi" "2.25.2"
+      "sha256-zw8Hvozkw5CVVNLknURQlCxWPj/54PUtvRRJsZPUpkI=";
 
   types-aiobotocore-apigatewayv2 =
-    buildTypesAiobotocorePackage "apigatewayv2" "2.25.1"
-      "sha256-3nFS7CIGrtbdemO3RrNm4C83KT2g73gkHQ2rQzgIUto=";
+    buildTypesAiobotocorePackage "apigatewayv2" "2.25.2"
+      "sha256-r/jzrpCxyhMRLL027ReAn4VoLi38QcDglhf5tDHXDoY=";
 
   types-aiobotocore-appconfig =
-    buildTypesAiobotocorePackage "appconfig" "2.25.1"
-      "sha256-FjqC6XNq5bAAXve4P59UBV2jNObnKSsE+5KQ0DBi0Fk=";
+    buildTypesAiobotocorePackage "appconfig" "2.25.2"
+      "sha256-4cNOGYpc+yIEWdJyNUg/H9bQ1QYIVlhhzJO24m+bkNg=";
 
   types-aiobotocore-appconfigdata =
-    buildTypesAiobotocorePackage "appconfigdata" "2.25.1"
-      "sha256-a4mSCE+SGxA1aG2QW0ZX6Dws59vATbRARBJ9/GtR6yU=";
+    buildTypesAiobotocorePackage "appconfigdata" "2.25.2"
+      "sha256-5tG2fa1jkG5GAY86hfN7qiIlj7eyB9UMZfFPz/hSR88=";
 
   types-aiobotocore-appfabric =
-    buildTypesAiobotocorePackage "appfabric" "2.25.1"
-      "sha256-LlynUDfbycY9CJZgzqXOdYd2ZMZ0/TLNQbdnrgIqomU=";
+    buildTypesAiobotocorePackage "appfabric" "2.25.2"
+      "sha256-RnQmDns+PGXWlacfQvRGbE62Bgzn7Ywu8y5zrBns9x8=";
 
   types-aiobotocore-appflow =
-    buildTypesAiobotocorePackage "appflow" "2.25.1"
-      "sha256-QYVkBbjrtZYZ7oV8h8dCjxgMbzmmvH/WrQIOsD8AL7g=";
+    buildTypesAiobotocorePackage "appflow" "2.25.2"
+      "sha256-drfnki+v2Q53QvmV0b1FbZLArS7t8poPwwVGxfV9w/E=";
 
   types-aiobotocore-appintegrations =
-    buildTypesAiobotocorePackage "appintegrations" "2.25.1"
-      "sha256-VgBvQiZnRVMoJkrVqNukVyise5V58abDyr1NnqCqfKE=";
+    buildTypesAiobotocorePackage "appintegrations" "2.25.2"
+      "sha256-9G/D6fljKmCxHpcek2Igg7r9c5vfY4Z6YAUn7PSKLYY=";
 
   types-aiobotocore-application-autoscaling =
-    buildTypesAiobotocorePackage "application-autoscaling" "2.25.1"
-      "sha256-oLfCSFpDDEval46hOzX2YcGsuc2bhAirj3fDe/yczTY=";
+    buildTypesAiobotocorePackage "application-autoscaling" "2.25.2"
+      "sha256-dZ6lSgGt/boCIRzw8SF4V1UmTYMGFmdtZPnfECRfUaU=";
 
   types-aiobotocore-application-insights =
-    buildTypesAiobotocorePackage "application-insights" "2.25.1"
-      "sha256-9BAFQtXHFc6DckhQUVOdvWeKQyOoPa7NEhkOSXoumGY=";
+    buildTypesAiobotocorePackage "application-insights" "2.25.2"
+      "sha256-++JxtGTETwjLcZLxPlvqdd8eJYIQwvu4ktz8WyFRla0=";
 
   types-aiobotocore-applicationcostprofiler =
-    buildTypesAiobotocorePackage "applicationcostprofiler" "2.25.1"
-      "sha256-3dwAoxqJMIz7l8zCXzYu4+0sZNh+uy6V9ZDabSHNFSM=";
+    buildTypesAiobotocorePackage "applicationcostprofiler" "2.25.2"
+      "sha256-hifchHQHQWmuYR1eMlTawb+v7YcqFT9WUuRzWZt0Miw=";
 
   types-aiobotocore-appmesh =
-    buildTypesAiobotocorePackage "appmesh" "2.25.1"
-      "sha256-zvOjVKnAAHhBz5FqYUHaQ7NIWm7qMJmiZxKRqtnwL8w=";
+    buildTypesAiobotocorePackage "appmesh" "2.25.2"
+      "sha256-mIr99MgKQHHLUf21F4bWWxsja5v7mSI13X97Q3fGjBo=";
 
   types-aiobotocore-apprunner =
-    buildTypesAiobotocorePackage "apprunner" "2.25.1"
-      "sha256-ESvmAX+E5KIzfq/1K9WykdmZCgHalisSFj+hSvXrobw=";
+    buildTypesAiobotocorePackage "apprunner" "2.25.2"
+      "sha256-VHwS2bYiyXWQX97rxH4OJifliMXtyve6pUKUZRjMKes=";
 
   types-aiobotocore-appstream =
-    buildTypesAiobotocorePackage "appstream" "2.25.1"
-      "sha256-SofwNEbH+UNkuvVLf4xstUZuoCKXAlb/S5sDlegxPZo=";
+    buildTypesAiobotocorePackage "appstream" "2.25.2"
+      "sha256-YbYiz/Eu2LONb+j0r1fnjmL3Ur/CuZRFB5eYc29+XR0=";
 
   types-aiobotocore-appsync =
-    buildTypesAiobotocorePackage "appsync" "2.25.1"
-      "sha256-r6ohR0fJkJ+BSiagpBmGB5MSgDe+kSMRKG6+TMV9zVo=";
+    buildTypesAiobotocorePackage "appsync" "2.25.2"
+      "sha256-9YzlcCwMEN4/6WN1FSD6xgX/YErA/KY+XIsI+B8cIfA=";
 
   types-aiobotocore-arc-zonal-shift =
-    buildTypesAiobotocorePackage "arc-zonal-shift" "2.25.1"
-      "sha256-mz6U/7XgHObleR+oIGuWkZboJpdTngoN6RfDpJj5R8U=";
+    buildTypesAiobotocorePackage "arc-zonal-shift" "2.25.2"
+      "sha256-hghumRzqZq012I58LscweLLIlF8pumI9x9UApuAHlrY=";
 
   types-aiobotocore-athena =
-    buildTypesAiobotocorePackage "athena" "2.25.1"
-      "sha256-BTAzbChHrJbA6+1rKZRQW1+5MOAS/ggs9Ss7Mz2LPJ0=";
+    buildTypesAiobotocorePackage "athena" "2.25.2"
+      "sha256-xcF4E97R7nSyk1NWfjeDEjEOeC0RFgwl+mF3pVjnWMc=";
 
   types-aiobotocore-auditmanager =
-    buildTypesAiobotocorePackage "auditmanager" "2.25.1"
-      "sha256-m0zmqMtfrgV6qXRZ8f+JijZjxEQhAVLf4Cwn/vuP3D0=";
+    buildTypesAiobotocorePackage "auditmanager" "2.25.2"
+      "sha256-pQc++c5VLsXfqPC/oSzLawFdFiyMerwySFOOTsEEHt4=";
 
   types-aiobotocore-autoscaling =
-    buildTypesAiobotocorePackage "autoscaling" "2.25.1"
-      "sha256-GjxZLNJsmGKmDdEyUp+BgWOVVPMCcOTuS086K0ylJrE=";
+    buildTypesAiobotocorePackage "autoscaling" "2.25.2"
+      "sha256-y8+kALV1vSdG6LNIFtix05R4WSjkW5s1ksP3TgC3Yqc=";
 
   types-aiobotocore-autoscaling-plans =
-    buildTypesAiobotocorePackage "autoscaling-plans" "2.25.1"
-      "sha256-ygu9bCuR+5HPDtbvJH1WhgnT4/SwtXt1f4hXDA2DAwI=";
+    buildTypesAiobotocorePackage "autoscaling-plans" "2.25.2"
+      "sha256-OCek+Co+1p0DcaiYK5tF+eYiUxFN/YEcQr5dgMY43oo=";
 
   types-aiobotocore-backup =
-    buildTypesAiobotocorePackage "backup" "2.25.1"
-      "sha256-JZ4D9JHea3ZRGXozfffb2uRXwIDVhTyUYNdnDhejW6g=";
+    buildTypesAiobotocorePackage "backup" "2.25.2"
+      "sha256-gIItTVD+2uF1icezCy95+O8X/GUqN3HE892vKc14btw=";
 
   types-aiobotocore-backup-gateway =
-    buildTypesAiobotocorePackage "backup-gateway" "2.25.1"
-      "sha256-b6YRUDiAVpLnj3OYV5sg9HRVrOF4Y8hXkTxuKWqzs3w=";
+    buildTypesAiobotocorePackage "backup-gateway" "2.25.2"
+      "sha256-bVoYRLiK68lI2nHWPY1Dyg1NrpU7ycd/VUTzDvzTJSs=";
 
   types-aiobotocore-backupstorage =
     buildTypesAiobotocorePackage "backupstorage" "2.13.0"
       "sha256-YUKtBdBrdwL2yqDqOovvzDPbcv/sD8JLRnKz3Oh7iSU=";
 
   types-aiobotocore-batch =
-    buildTypesAiobotocorePackage "batch" "2.25.1"
-      "sha256-luTZN4zcbtETtUkdxgV97AQBeJPFRyU425yxSUb4RhI=";
+    buildTypesAiobotocorePackage "batch" "2.25.2"
+      "sha256-Z95XnWYb8nDxWsC0SSyC2KHB+zz6m3NuWPkv2b+EovE=";
 
   types-aiobotocore-billingconductor =
-    buildTypesAiobotocorePackage "billingconductor" "2.25.1"
-      "sha256-WUjkK78F2yyX4/NeYx3aGun/bycstgjbUlvlDlujXLo=";
+    buildTypesAiobotocorePackage "billingconductor" "2.25.2"
+      "sha256-xwVUi04Eq4/HT5G38x1uXrKofRUG6X+Dj1rbWoyt3yA=";
 
   types-aiobotocore-braket =
-    buildTypesAiobotocorePackage "braket" "2.25.1"
-      "sha256-pvjnnRSL5E3NvhnGLcYP47AKmUUMfUtEafrj0Rp4ZuY=";
+    buildTypesAiobotocorePackage "braket" "2.25.2"
+      "sha256-h0oHoMOHat1hDr3zplueVpN8dwhTktofv1Pss1nqVPM=";
 
   types-aiobotocore-budgets =
-    buildTypesAiobotocorePackage "budgets" "2.25.1"
-      "sha256-b/BWtLpIbnTEtxaeKevuQXyWmB+brLHkWRKdINOSkBg=";
+    buildTypesAiobotocorePackage "budgets" "2.25.2"
+      "sha256-JPUgfNM5EjFzfi0TjzlHf3g7tY87w2UXgUMQpaux4Qw=";
 
   types-aiobotocore-ce =
-    buildTypesAiobotocorePackage "ce" "2.25.1"
-      "sha256-YRwRTbM6hLZ1bhPqgXbyORysHylNZOFwHvHs9B+1yeQ=";
+    buildTypesAiobotocorePackage "ce" "2.25.2"
+      "sha256-EDmfPfiwPKmohKDaCy7Br5QFbkgOghj3PuP8MijNCa8=";
 
   types-aiobotocore-chime =
-    buildTypesAiobotocorePackage "chime" "2.25.1"
-      "sha256-PvXAg9TTWM7I6ou2XuFMgDGTLOmcT918lPlx54u5WaU=";
+    buildTypesAiobotocorePackage "chime" "2.25.2"
+      "sha256-TjYkrRLpHizqLdtm0+cWdA0hX0aPfCHtjORkfqnc//A=";
 
   types-aiobotocore-chime-sdk-identity =
-    buildTypesAiobotocorePackage "chime-sdk-identity" "2.25.1"
-      "sha256-L0R80FKwnDdLNwH6tBEv2pgUZY6RpKHsWddUwuaLPOg=";
+    buildTypesAiobotocorePackage "chime-sdk-identity" "2.25.2"
+      "sha256-AvCru00Rcjm5q0kcRD/8dCh5ZWwmtX88wZ5L5Rw7PlA=";
 
   types-aiobotocore-chime-sdk-media-pipelines =
-    buildTypesAiobotocorePackage "chime-sdk-media-pipelines" "2.25.1"
-      "sha256-mkb2hWMWJpsaZXsh5rLfFxWz4TlKaKh6Ia/QPclVLXs=";
+    buildTypesAiobotocorePackage "chime-sdk-media-pipelines" "2.25.2"
+      "sha256-5BMPIS1aLSG9YTQqdaaIxFdtKE5LTg105UofjdhypVM=";
 
   types-aiobotocore-chime-sdk-meetings =
-    buildTypesAiobotocorePackage "chime-sdk-meetings" "2.25.1"
-      "sha256-0bWn+pHJC0xoDtttDvk1fWSojZnsUHulQwQ6hm0nXMw=";
+    buildTypesAiobotocorePackage "chime-sdk-meetings" "2.25.2"
+      "sha256-ERuzfZzB1DUaEcwv1XJaqOIU3TI5HfgK2SK76O1f340=";
 
   types-aiobotocore-chime-sdk-messaging =
-    buildTypesAiobotocorePackage "chime-sdk-messaging" "2.25.1"
-      "sha256-FFOQM66QQe5FL2TsNuWETlXqLZlpEwVBWmIfi5nA5MA=";
+    buildTypesAiobotocorePackage "chime-sdk-messaging" "2.25.2"
+      "sha256-J+YYzAJG1Qu3ghCuI5LT6zc288r2ChCVmetnmCvBNSY=";
 
   types-aiobotocore-chime-sdk-voice =
-    buildTypesAiobotocorePackage "chime-sdk-voice" "2.25.1"
-      "sha256-3jI5Dpev1/FRvQaFRuK4YCwADvNhDZS0gKvfs6R44oQ=";
+    buildTypesAiobotocorePackage "chime-sdk-voice" "2.25.2"
+      "sha256-S6lM7Rbnz51wwFd98jrD90dBByFA+/f2OSjtUgWY1W4=";
 
   types-aiobotocore-cleanrooms =
-    buildTypesAiobotocorePackage "cleanrooms" "2.25.1"
-      "sha256-Ng/Gms7t26ekVebxDjSYT1nL5cGMU5MdLmpjSGrbwZI=";
+    buildTypesAiobotocorePackage "cleanrooms" "2.25.2"
+      "sha256-mvHayGHokzEyhwwdouuNM9x22bHRBXOQ/cR30Bvhsjw=";
 
   types-aiobotocore-cloud9 =
-    buildTypesAiobotocorePackage "cloud9" "2.25.1"
-      "sha256-DDKyv9XwaKMDhOfqCcdZQhucmx6MsUj7CdHWNMn/Y0E=";
+    buildTypesAiobotocorePackage "cloud9" "2.25.2"
+      "sha256-iaS3NKUf2G3qTwIaDquem196bu+5kTDt8ZRqLzHj+zI=";
 
   types-aiobotocore-cloudcontrol =
-    buildTypesAiobotocorePackage "cloudcontrol" "2.25.1"
-      "sha256-VM4XlicQ3/3WgQ4A7qZjW0FdwSMum3SrDC2/k5fd+u4=";
+    buildTypesAiobotocorePackage "cloudcontrol" "2.25.2"
+      "sha256-UdFZKXNaBoOcBB7Xhdy8+mF8fItSbN5tEEz+ZbTIzC8=";
 
   types-aiobotocore-clouddirectory =
-    buildTypesAiobotocorePackage "clouddirectory" "2.25.1"
-      "sha256-aMYXOK9LAJDx+quW9Di0qQlrccnOiNEXbIQFQdx9c4Q=";
+    buildTypesAiobotocorePackage "clouddirectory" "2.25.2"
+      "sha256-hvz3fFknWNzlw9iTnNMjUBqRykMirQkbgIr97l+jjjs=";
 
   types-aiobotocore-cloudformation =
-    buildTypesAiobotocorePackage "cloudformation" "2.25.1"
-      "sha256-QZ51v4CYjZ2q6CsEm8ZJxGVwMkHWy17UZ2SoCUksQ90=";
+    buildTypesAiobotocorePackage "cloudformation" "2.25.2"
+      "sha256-xLv7qGULxQ6K1SQ91j8dxRTQ8RpVcGGGgKfzDkpbKpA=";
 
   types-aiobotocore-cloudfront =
-    buildTypesAiobotocorePackage "cloudfront" "2.25.1"
-      "sha256-yEWzYkAjRXYqddN/craJno5ubG8zeBznXPneQrff13I=";
+    buildTypesAiobotocorePackage "cloudfront" "2.25.2"
+      "sha256-+ENxWaoQfraFUn8HDUiIkpOw40/LB7QeFk6hSCF/3y0=";
 
   types-aiobotocore-cloudhsm =
-    buildTypesAiobotocorePackage "cloudhsm" "2.25.1"
-      "sha256-Ag/j5kEPq4pGhLA8R2YwYHlcKTsGmtAYsrTkVPPGrvA=";
+    buildTypesAiobotocorePackage "cloudhsm" "2.25.2"
+      "sha256-ptmTvJkzhhbu4Vrped7frQZH4ycQNLIvTefqm2fCNxQ=";
 
   types-aiobotocore-cloudhsmv2 =
-    buildTypesAiobotocorePackage "cloudhsmv2" "2.25.1"
-      "sha256-QQpvGaJYuT+R9PvOz+GKifdProjd+RjzSPd1UKD7ZVg=";
+    buildTypesAiobotocorePackage "cloudhsmv2" "2.25.2"
+      "sha256-fL3pDlKrXxvYY29CgAg9mPtsOfA1QPM1oO6aWsXnhqM=";
 
   types-aiobotocore-cloudsearch =
-    buildTypesAiobotocorePackage "cloudsearch" "2.25.1"
-      "sha256-m8eggf66DQ7NmOaSZlZLajwxABJJuYdTbMnjJK1dKIU=";
+    buildTypesAiobotocorePackage "cloudsearch" "2.25.2"
+      "sha256-73W62nFCs4PSoAPZolcLzrazSqCnszMSt0oZFouiNTM=";
 
   types-aiobotocore-cloudsearchdomain =
-    buildTypesAiobotocorePackage "cloudsearchdomain" "2.25.1"
-      "sha256-COxi6Eskcw7NFi7+AX0pFDOBaVM7d/5atgqZXH4+9Z0=";
+    buildTypesAiobotocorePackage "cloudsearchdomain" "2.25.2"
+      "sha256-j55NjUJl4imYkW5HiqC4qlFiDYnGH3oAFhfknNuwey8=";
 
   types-aiobotocore-cloudtrail =
-    buildTypesAiobotocorePackage "cloudtrail" "2.25.1"
-      "sha256-XWPOUppk3BVuILfDd8lPfJYET/fX6cbJBE7OUDu54O8=";
+    buildTypesAiobotocorePackage "cloudtrail" "2.25.2"
+      "sha256-Y5QzJ8Sp7o85MZ1KnYQHslcP0O6uXOa8/B4lOPX9x2g=";
 
   types-aiobotocore-cloudtrail-data =
-    buildTypesAiobotocorePackage "cloudtrail-data" "2.25.1"
-      "sha256-fmagIWKA6u8DyF2mXqUEnh/di9KrB4RQKqxr/lxGMUU=";
+    buildTypesAiobotocorePackage "cloudtrail-data" "2.25.2"
+      "sha256-lSP5vEUV5HcoPXa+pWWjsWShL6siiIbFGpPtBl7wLxc=";
 
   types-aiobotocore-cloudwatch =
-    buildTypesAiobotocorePackage "cloudwatch" "2.25.1"
-      "sha256-HJ3i0DCZ148BWm8372pa85IYd39eRPSi3FN6+2V4uVs=";
+    buildTypesAiobotocorePackage "cloudwatch" "2.25.2"
+      "sha256-kNP9fVpYJEiAHOKa9h3HoEn5AqnKthMXw43AIEL99q4=";
 
   types-aiobotocore-codeartifact =
-    buildTypesAiobotocorePackage "codeartifact" "2.25.1"
-      "sha256-mLeFITDCRQntGeY2Pr96CzBlzzwEE0bB1zsFJCiGdPo=";
+    buildTypesAiobotocorePackage "codeartifact" "2.25.2"
+      "sha256-SRlZBQaa3ormxORXP0RGSZDOvlhYWLt0nGPiODL4YG0=";
 
   types-aiobotocore-codebuild =
-    buildTypesAiobotocorePackage "codebuild" "2.25.1"
-      "sha256-ZQFHXzMteTmUiGwbOcUxyOkbRpKqPHExaHzAw1ea0oA=";
+    buildTypesAiobotocorePackage "codebuild" "2.25.2"
+      "sha256-MrbRMYgNylPMRxvcja/yIGGlmpeHWT0oNnghhAXcXNw=";
 
   types-aiobotocore-codecatalyst =
-    buildTypesAiobotocorePackage "codecatalyst" "2.25.1"
-      "sha256-kCxNxMjTyu81w27iX88VOR28IedCQPiLbk+JtUEaKnM=";
+    buildTypesAiobotocorePackage "codecatalyst" "2.25.2"
+      "sha256-DMNLQhHJ3nYzVSLt385YrpNdkvZ2H1PKf95FyGJYnqI=";
 
   types-aiobotocore-codecommit =
-    buildTypesAiobotocorePackage "codecommit" "2.25.1"
-      "sha256-GiIGF+GO8uG76xzlDS8QEG2ks01zp/YL4jsP9j+SVaI=";
+    buildTypesAiobotocorePackage "codecommit" "2.25.2"
+      "sha256-RMC64Zb8Dfup7xBKgXEF1N+xQKLNd0Ok7hG11cjKpDE=";
 
   types-aiobotocore-codedeploy =
-    buildTypesAiobotocorePackage "codedeploy" "2.25.1"
-      "sha256-ygdqG0X99K+w/9VSyOu2kL/F+VGX1ohXdTJhYi/1qSw=";
+    buildTypesAiobotocorePackage "codedeploy" "2.25.2"
+      "sha256-LdvRhAs3OvRn6P5eayOzxNg65WQ7Bx4MgUPcKzJpNZc=";
 
   types-aiobotocore-codeguru-reviewer =
-    buildTypesAiobotocorePackage "codeguru-reviewer" "2.25.1"
-      "sha256-oiKSZ5Igp7u/pdttfIDVi1isycVR9D4bwsjJFHksCds=";
+    buildTypesAiobotocorePackage "codeguru-reviewer" "2.25.2"
+      "sha256-tyGnH4kZW/DuD7LK4BxZ/VJWWqf2K3F2hvySrxkkL0Y=";
 
   types-aiobotocore-codeguru-security =
-    buildTypesAiobotocorePackage "codeguru-security" "2.25.1"
-      "sha256-lIbsSb76kkPaRG7BMWlpqlMIuStlrUqHUdKUD5YDjv0=";
+    buildTypesAiobotocorePackage "codeguru-security" "2.25.2"
+      "sha256-6V2MXIjuFOXQMRaJ0GOZXBn2xHi+lc487xaRFXfKhSo=";
 
   types-aiobotocore-codeguruprofiler =
-    buildTypesAiobotocorePackage "codeguruprofiler" "2.25.1"
-      "sha256-tLWNVtIHL8TOKfB7AIdpgDs1TWBA2CJPo9ASJM2fL20=";
+    buildTypesAiobotocorePackage "codeguruprofiler" "2.25.2"
+      "sha256-hQauCvao281bbAtP2sQXLxncTuQv9MQA5FhNQEjlHrA=";
 
   types-aiobotocore-codepipeline =
-    buildTypesAiobotocorePackage "codepipeline" "2.25.1"
-      "sha256-7MRqQmc25O/p7Vdd0S0VzKCi3WCCQom8DQa7h66cCfQ=";
+    buildTypesAiobotocorePackage "codepipeline" "2.25.2"
+      "sha256-8moeRFg8AR4hpEiVCHf2WjNx92jQQ7b3peiJsPfdp3Q=";
 
   types-aiobotocore-codestar =
     buildTypesAiobotocorePackage "codestar" "2.13.3"
       "sha256-Z1ewx2RjmxbOQZ7wXaN54PVOuRs6LP3rMpsrVTacwjo=";
 
   types-aiobotocore-codestar-connections =
-    buildTypesAiobotocorePackage "codestar-connections" "2.25.1"
-      "sha256-NUd+hoUI8NVzEC9GjNm8x3hl4VigVuPbqtL51R5NxQU=";
+    buildTypesAiobotocorePackage "codestar-connections" "2.25.2"
+      "sha256-4t7biB4JAOYPrEj1ynAqam6r5Zuh3VIS7Md9NyYQv/k=";
 
   types-aiobotocore-codestar-notifications =
-    buildTypesAiobotocorePackage "codestar-notifications" "2.25.1"
-      "sha256-tdFxJ+sotgAivk2EjPtfnZrItMefRzos3eyhGBKmf9A=";
+    buildTypesAiobotocorePackage "codestar-notifications" "2.25.2"
+      "sha256-l9mZ6ipzSA6p8pd4QKVqWI5pbLLNGmMBVJjK4NqhJzk=";
 
   types-aiobotocore-cognito-identity =
-    buildTypesAiobotocorePackage "cognito-identity" "2.25.1"
-      "sha256-jVGkQ8M0+DGQM1ZagJRSz0RpW7Mf9JMDIsj39Iooo9k=";
+    buildTypesAiobotocorePackage "cognito-identity" "2.25.2"
+      "sha256-jo3fUFnmH1ntN96nIh1OCkagxzhNRfn3sANtRgcNflU=";
 
   types-aiobotocore-cognito-idp =
-    buildTypesAiobotocorePackage "cognito-idp" "2.25.1"
-      "sha256-iVnoDEaLaSJh1+qKzU1cZPEm7oWIThQ8pqn31rOzroU=";
+    buildTypesAiobotocorePackage "cognito-idp" "2.25.2"
+      "sha256-PSkZx0T6vobbbGZMGc7npUJtO/2zPv7WzttzHj6Tb3w=";
 
   types-aiobotocore-cognito-sync =
-    buildTypesAiobotocorePackage "cognito-sync" "2.25.1"
-      "sha256-vtp1UlB4IruJpPgoMzXYU3myJsInTle4poG5skwoECE=";
+    buildTypesAiobotocorePackage "cognito-sync" "2.25.2"
+      "sha256-uTEZdH60rT5iy3tHz30MM12aKXBU3zHaKKEc8Npctbo=";
 
   types-aiobotocore-comprehend =
-    buildTypesAiobotocorePackage "comprehend" "2.25.1"
-      "sha256-O5fBqCBYjN8KVxM4JIPb2GRZWBGmSRh50GP6YVX3cxI=";
+    buildTypesAiobotocorePackage "comprehend" "2.25.2"
+      "sha256-iICHg2TK4H1tM9A8nrT5L262nvjrNuOBlbnL7rVfQ/0=";
 
   types-aiobotocore-comprehendmedical =
-    buildTypesAiobotocorePackage "comprehendmedical" "2.25.1"
-      "sha256-iL2mwlvH/QWGYrfo5eSBrXwuD9dOeYERs4KnnVXq3Vc=";
+    buildTypesAiobotocorePackage "comprehendmedical" "2.25.2"
+      "sha256-3hSn+3a3f9r6PS9Xe4YZINhL6HvYVNHiHQREuMRwt/I=";
 
   types-aiobotocore-compute-optimizer =
-    buildTypesAiobotocorePackage "compute-optimizer" "2.25.1"
-      "sha256-3cjSJXnoUABnSIha09JiKQ6KJc14y728sIUTj2bTmBg=";
+    buildTypesAiobotocorePackage "compute-optimizer" "2.25.2"
+      "sha256-zmVBk4gkorIRKYMpyVFDPoFnjelJg7JJra1LJW4oKKA=";
 
   types-aiobotocore-config =
-    buildTypesAiobotocorePackage "config" "2.25.1"
-      "sha256-FDoimD6RmhEIHCfADM46I4Z2cDCMf9fa+rvqnk4LFpc=";
+    buildTypesAiobotocorePackage "config" "2.25.2"
+      "sha256-JJydZdv7myZk4DoDFs01WB6zjLbjYOLykPcm2h4Dxyc=";
 
   types-aiobotocore-connect =
-    buildTypesAiobotocorePackage "connect" "2.25.1"
-      "sha256-cRoK6Qa+e6FirscAnrQrLNHLVw0nPi8cbNDbGC1TIC8=";
+    buildTypesAiobotocorePackage "connect" "2.25.2"
+      "sha256-kd2yClVpJuezDOcreSW1ncTa5yKyt+GVUVIWEVuPWWo=";
 
   types-aiobotocore-connect-contact-lens =
-    buildTypesAiobotocorePackage "connect-contact-lens" "2.25.1"
-      "sha256-pbRhq1ahJqC9SGGNvyKhgodH0QYr4xXgWbyXHorid40=";
+    buildTypesAiobotocorePackage "connect-contact-lens" "2.25.2"
+      "sha256-jj0eSvmA8dQoL/Z9i3Vp9uYgZWTRtesMQprqYSVkPGI=";
 
   types-aiobotocore-connectcampaigns =
-    buildTypesAiobotocorePackage "connectcampaigns" "2.25.1"
-      "sha256-ubRcR3OrXySTq6YLCbyVx+h3ge3At8JFmlyU4uGiGoU=";
+    buildTypesAiobotocorePackage "connectcampaigns" "2.25.2"
+      "sha256-P51izlKyq+6fVO3HWD9GI4qdq29+3wRk/0GIzfdMvtM=";
 
   types-aiobotocore-connectcases =
-    buildTypesAiobotocorePackage "connectcases" "2.25.1"
-      "sha256-WAsExzxO7tJdCYmeSDkIgGlMDtl8MLeRgTGwziS1q2Q=";
+    buildTypesAiobotocorePackage "connectcases" "2.25.2"
+      "sha256-l5Ko3NJdblcilDwGzOIHXaC2NLANYD+nZzQXfbj9+68=";
 
   types-aiobotocore-connectparticipant =
-    buildTypesAiobotocorePackage "connectparticipant" "2.25.1"
-      "sha256-zzNuF/MPygSrO+JEYK4E5djVC0OWcP91nzXdrxcnhEc=";
+    buildTypesAiobotocorePackage "connectparticipant" "2.25.2"
+      "sha256-33nJKV7Ysvz1rEoNE5ChPXCbKAcn7IfsqkKaEDSqyo0=";
 
   types-aiobotocore-controltower =
-    buildTypesAiobotocorePackage "controltower" "2.25.1"
-      "sha256-LXMPOwrb4fBsek/Tkn7ytFH9ed4HRdSUZ5lPDWR11hk=";
+    buildTypesAiobotocorePackage "controltower" "2.25.2"
+      "sha256-Gg8X+poQcE9nP1713ZRVQ9gT+pppHoRBxET+RrvkuJI=";
 
   types-aiobotocore-cur =
-    buildTypesAiobotocorePackage "cur" "2.25.1"
-      "sha256-NZL4dZqjTEq8YAMLj2LPc3w2lPsA8bmeHELy0WQpbQw=";
+    buildTypesAiobotocorePackage "cur" "2.25.2"
+      "sha256-ud01zv7990vtVJRfa5j8blXcBmJ/2Vk4NYt2zp339v4=";
 
   types-aiobotocore-customer-profiles =
-    buildTypesAiobotocorePackage "customer-profiles" "2.25.1"
-      "sha256-KMJdRLF+LwZBCrVSe/IFLfkEVSEcpJAiGy8aL6v1hPs=";
+    buildTypesAiobotocorePackage "customer-profiles" "2.25.2"
+      "sha256-YX10YoQsn/ndErOAAAey+DrJtxv9U79jdQuFRprZLyM=";
 
   types-aiobotocore-databrew =
-    buildTypesAiobotocorePackage "databrew" "2.25.1"
-      "sha256-ZOjiIHV4LK/tIb+TwKob+GUESDoGSmaUytmnDCQBVpc=";
+    buildTypesAiobotocorePackage "databrew" "2.25.2"
+      "sha256-YrBWF10XRXtWKvkUBN51z+6cWqy1McGe4ZyNhVklHBw=";
 
   types-aiobotocore-dataexchange =
-    buildTypesAiobotocorePackage "dataexchange" "2.25.1"
-      "sha256-qbiVpy3Sf/MVJlVA/G6b80nxZP12DH5vwJ9h1BiOFVU=";
+    buildTypesAiobotocorePackage "dataexchange" "2.25.2"
+      "sha256-8B/6r7PR/pZNt+vbTfPAVYc1MLdx6uZXgVNwQC/qURY=";
 
   types-aiobotocore-datapipeline =
-    buildTypesAiobotocorePackage "datapipeline" "2.25.1"
-      "sha256-RImEQAt0XMEaBoGCsFo0fPc/QI6Tn52fENZWc5hjei4=";
+    buildTypesAiobotocorePackage "datapipeline" "2.25.2"
+      "sha256-OAKDSxCkPK+TMa4o1+iouJDjGxzanzF1A4ubP4ecAkg=";
 
   types-aiobotocore-datasync =
-    buildTypesAiobotocorePackage "datasync" "2.25.1"
-      "sha256-AZ7ecgO9ydeP/DpTACSDVpBfO6SbObkFusCUW45kDLE=";
+    buildTypesAiobotocorePackage "datasync" "2.25.2"
+      "sha256-Mz8ZXMDAVrh3ABn3JQZhF9XQKIJJDuLvRaRa12lc3EM=";
 
   types-aiobotocore-dax =
-    buildTypesAiobotocorePackage "dax" "2.25.1"
-      "sha256-/Fbdg7dBIr405gDlwnPf4I6cGFYUc+xYSVBtepdD+og=";
+    buildTypesAiobotocorePackage "dax" "2.25.2"
+      "sha256-+pyf8C9B6pCC8zxzGjH3LCvcg32KsWoyOinnAQ/49iY=";
 
   types-aiobotocore-detective =
-    buildTypesAiobotocorePackage "detective" "2.25.1"
-      "sha256-ppqy3MzS5iReH3QeuK/9trxSD29XFc9Iaks7l5o7IWI=";
+    buildTypesAiobotocorePackage "detective" "2.25.2"
+      "sha256-in6d71h+KK6oYWdcZuWM2VZyTk1wClQliNQXX9PcMkg=";
 
   types-aiobotocore-devicefarm =
-    buildTypesAiobotocorePackage "devicefarm" "2.25.1"
-      "sha256-pfBVL3751S7FesucixmUltCW5ysMoHWdFVlYyo61O+c=";
+    buildTypesAiobotocorePackage "devicefarm" "2.25.2"
+      "sha256-+bHDMOHYq2UR1kgEInmaOdrF37IYGfW2PVsNU8M7whk=";
 
   types-aiobotocore-devops-guru =
-    buildTypesAiobotocorePackage "devops-guru" "2.25.1"
-      "sha256-0le2Rz9G51StrvMRhJ5BRyAI8xSLiGZNkJi2GV7Qq1U=";
+    buildTypesAiobotocorePackage "devops-guru" "2.25.2"
+      "sha256-dRbTGobvRbkUu1U07mA7dqTVxw4b1rFHF02BW62ABRk=";
 
   types-aiobotocore-directconnect =
-    buildTypesAiobotocorePackage "directconnect" "2.25.1"
-      "sha256-m+V/k7Xrh6vauxeAtbR2IxF5cyayArXx7HX4XUiNQkI=";
+    buildTypesAiobotocorePackage "directconnect" "2.25.2"
+      "sha256-oRHQzv3gfKMorkB9fYcTSDQ0QlpX79QEouU01fLKu7Y=";
 
   types-aiobotocore-discovery =
-    buildTypesAiobotocorePackage "discovery" "2.25.1"
-      "sha256-AgwyYGJuP7COXNRHc2J0RUOXrhqn4AL6FygcwFosULc=";
+    buildTypesAiobotocorePackage "discovery" "2.25.2"
+      "sha256-R0uSdznVdJFeS/bAmFMBxfX5mi+VfzzrzQa6516fAZU=";
 
   types-aiobotocore-dlm =
-    buildTypesAiobotocorePackage "dlm" "2.25.1"
-      "sha256-2MydYzp1s/WslaWOLpFCX7CZh3HOChscSlF1Rvf0W54=";
+    buildTypesAiobotocorePackage "dlm" "2.25.2"
+      "sha256-KsYxPjxmMOlsNevGUrgxt4NHhsX90U/PFjY6igQFw5g=";
 
   types-aiobotocore-dms =
-    buildTypesAiobotocorePackage "dms" "2.25.1"
-      "sha256-F4EYJX0zMIyigb9IeOofLYknO9x8eMYkghcayJh9CT0=";
+    buildTypesAiobotocorePackage "dms" "2.25.2"
+      "sha256-E1TzcUsbYJreNjKXfCskkDx7/cf8S11zCdYg2TU1zMA=";
 
   types-aiobotocore-docdb =
-    buildTypesAiobotocorePackage "docdb" "2.25.1"
-      "sha256-hiMgd8uwenokK2rLmLTsL2t9Gf9AEh5zwl7ZWplmsEg=";
+    buildTypesAiobotocorePackage "docdb" "2.25.2"
+      "sha256-yNgg6k//9YXSB+DBEpmr1UlwEDDtbvbEWoenxkHoomk=";
 
   types-aiobotocore-docdb-elastic =
-    buildTypesAiobotocorePackage "docdb-elastic" "2.25.1"
-      "sha256-QN9shKZxGJOLUEXQqj8hXMTLTEr1UrokfbMMpEEiCP4=";
+    buildTypesAiobotocorePackage "docdb-elastic" "2.25.2"
+      "sha256-qpJkEHKno1Pn0YXUCHPtOC58UFePmz/pHJ55TxHFgYQ=";
 
   types-aiobotocore-drs =
-    buildTypesAiobotocorePackage "drs" "2.25.1"
-      "sha256-MtyU0mfNKhv4JKMc7tU537J5EBh3nSkJ9S6XE9PhVP4=";
+    buildTypesAiobotocorePackage "drs" "2.25.2"
+      "sha256-SkcPhHaKQ9Z7qbvylkB/2ZZGy2/OEHmUAzu3ZjQ5HeM=";
 
   types-aiobotocore-ds =
-    buildTypesAiobotocorePackage "ds" "2.25.1"
-      "sha256-zIw7F5xlQuyvYONd/smlQblPIghx8dJx/Jp1bLEZmik=";
+    buildTypesAiobotocorePackage "ds" "2.25.2"
+      "sha256-iyQEoAjPToWO7AFyb5GPnt3NndhIRC30Wq2Fq3poNRo=";
 
   types-aiobotocore-dynamodb =
-    buildTypesAiobotocorePackage "dynamodb" "2.25.1"
-      "sha256-teNsqR6E9MHuOTQ0BcZe91LGL3ACeBL+XkYg/kmObrE=";
+    buildTypesAiobotocorePackage "dynamodb" "2.25.2"
+      "sha256-dc/T4+4halnfGBQZXgbNZyPE+IMV2p92+eNyC+X/0s0=";
 
   types-aiobotocore-dynamodbstreams =
-    buildTypesAiobotocorePackage "dynamodbstreams" "2.25.1"
-      "sha256-WTeRsXfwodBbd7S5EzNeVhfrMc7Fa9VXNI1HLJIXdXg=";
+    buildTypesAiobotocorePackage "dynamodbstreams" "2.25.2"
+      "sha256-Fhk/vbYOR0gpDe3hTMskto9wh5o3UIqncStU5hvCDF4=";
 
   types-aiobotocore-ebs =
-    buildTypesAiobotocorePackage "ebs" "2.25.1"
-      "sha256-/il4ZSLbU7h8hT1of3mGOi6xDmGRE+jdClHWXBVrTWY=";
+    buildTypesAiobotocorePackage "ebs" "2.25.2"
+      "sha256-A7b6BrPL86JURM9zCBJFuteuBDYqVdX/6cXTUAlwHeQ=";
 
   types-aiobotocore-ec2 =
-    buildTypesAiobotocorePackage "ec2" "2.25.1"
-      "sha256-8UN28Xt4Tg0wXphHH7XHOzcOW3TMPRJdY8oWKBjuZN0=";
+    buildTypesAiobotocorePackage "ec2" "2.25.2"
+      "sha256-UCcgZHxQW0JA9FMpFdvBapZSBr4cRQcbYhQI16SK274=";
 
   types-aiobotocore-ec2-instance-connect =
-    buildTypesAiobotocorePackage "ec2-instance-connect" "2.25.1"
-      "sha256-l7GjTL4vhBekTzMbfXKL5uEpFGPTUNbXLx0eVN587HU=";
+    buildTypesAiobotocorePackage "ec2-instance-connect" "2.25.2"
+      "sha256-OSgk3yu88gpj598WGjUThsAGHHvBSVbzuoCCuKskkp4=";
 
   types-aiobotocore-ecr =
-    buildTypesAiobotocorePackage "ecr" "2.25.1"
-      "sha256-MekJgC0s6pP83ouPqfItVTP1c6Bs5MnjfA0pLWaiYJk=";
+    buildTypesAiobotocorePackage "ecr" "2.25.2"
+      "sha256-LX5TAXuncQHfXiRULvbvWhDKcLebePUVtjyONjGEcME=";
 
   types-aiobotocore-ecr-public =
-    buildTypesAiobotocorePackage "ecr-public" "2.25.1"
-      "sha256-Y+rZaJoC7yjcak6RJ0Or5uxjRwEcHsAvRRbB9TxPaV8=";
+    buildTypesAiobotocorePackage "ecr-public" "2.25.2"
+      "sha256-tyj/+OK76XxBPXb38W9n9LdJITzD5dcfyAAO/zc8Jvs=";
 
   types-aiobotocore-ecs =
-    buildTypesAiobotocorePackage "ecs" "2.25.1"
-      "sha256-ZB0VYZUCX5VSvITicKqGi8mSJ2HTwmGyPCx2tWCYk9U=";
+    buildTypesAiobotocorePackage "ecs" "2.25.2"
+      "sha256-2+fi0ALJStbYWiy327Qetq5S+zVst+cBzeBgsLN7Sp4=";
 
   types-aiobotocore-efs =
-    buildTypesAiobotocorePackage "efs" "2.25.1"
-      "sha256-w2fINiB7CbEIEaPXzgIsU5IE5IqmBS6RPfUjI7S0x2E=";
+    buildTypesAiobotocorePackage "efs" "2.25.2"
+      "sha256-4trHKR96HIHo2sIJHMNwykgSdlBTec3/KsGQHBD2qgA=";
 
   types-aiobotocore-eks =
-    buildTypesAiobotocorePackage "eks" "2.25.1"
-      "sha256-2DYF0O+fJ5OC6IkZhFrm7qKFT4OX9OS02beCCJ+6E2A=";
+    buildTypesAiobotocorePackage "eks" "2.25.2"
+      "sha256-PGFzPj9Yj+MYKOGUcfifLqR48HzyiCaqpcrDAphA4pU=";
 
   types-aiobotocore-elastic-inference =
     buildTypesAiobotocorePackage "elastic-inference" "2.20.0"
       "sha256-jFSY7JBVjDQi6dCqlX2LG7jxpSKfILv3XWbYidvtGos=";
 
   types-aiobotocore-elasticache =
-    buildTypesAiobotocorePackage "elasticache" "2.25.1"
-      "sha256-aHOjTSjW6DTiEz6yP423sQYGdQeB4kn9otn/E1R+Hv0=";
+    buildTypesAiobotocorePackage "elasticache" "2.25.2"
+      "sha256-OBxp5BxcRQnDUUmDd6rboq3C4Oi0p5aStqoFMCgdXkc=";
 
   types-aiobotocore-elasticbeanstalk =
-    buildTypesAiobotocorePackage "elasticbeanstalk" "2.25.1"
-      "sha256-kM2JAP9d889/w+NBy6CaYOaizwXod+h54prPNwzV5q4=";
+    buildTypesAiobotocorePackage "elasticbeanstalk" "2.25.2"
+      "sha256-Kx9/13qjDSznU/vFpOMn2uIfmv+TZ7qP5dyI6locQVo=";
 
   types-aiobotocore-elastictranscoder =
-    buildTypesAiobotocorePackage "elastictranscoder" "2.25.1"
-      "sha256-Ds9xTgBqqBsJtcgEn/6Tobmq7zh1aijQFTog/BUjbPQ=";
+    buildTypesAiobotocorePackage "elastictranscoder" "2.25.2"
+      "sha256-5t214U60d2kSf8bmUiEkj4OMFf3+SbNRGqLif1Rj28E=";
 
   types-aiobotocore-elb =
-    buildTypesAiobotocorePackage "elb" "2.25.1"
-      "sha256-PLXSbA80ViW1yXfJ72wg9QT9IOZmNZgYfjmqqgiXHmk=";
+    buildTypesAiobotocorePackage "elb" "2.25.2"
+      "sha256-kw5WvoEdWSosiqInf4UYu+KiT/VbQV1nVEO8MwhAKaU=";
 
   types-aiobotocore-elbv2 =
-    buildTypesAiobotocorePackage "elbv2" "2.25.1"
-      "sha256-IXPQ9uf3U3+12zLRw012SwQXd/IEBRD5xJhHm1z6Cc8=";
+    buildTypesAiobotocorePackage "elbv2" "2.25.2"
+      "sha256-40bV+lL65lvnkmVCXKD+F7sWa3sn+aee75pYpqlze0w=";
 
   types-aiobotocore-emr =
-    buildTypesAiobotocorePackage "emr" "2.25.1"
-      "sha256-VT2D7yolP7VjXSMiiY0Iyfz2nswdLNA8AXU2YktWBsU=";
+    buildTypesAiobotocorePackage "emr" "2.25.2"
+      "sha256-GKDnn+q3KHpgWnJVdCQ6/TcCvEKOKEnFuvp9EIIBS2w=";
 
   types-aiobotocore-emr-containers =
-    buildTypesAiobotocorePackage "emr-containers" "2.25.1"
-      "sha256-RCNZ+7tGGlpqSD11PO2LZ1rpaG5v7OHt1m9Tp+BxFho=";
+    buildTypesAiobotocorePackage "emr-containers" "2.25.2"
+      "sha256-uzaxAAoS2b2IrsSzrdoPTopLRE9x4kXu+I+DGqfbO2U=";
 
   types-aiobotocore-emr-serverless =
-    buildTypesAiobotocorePackage "emr-serverless" "2.25.1"
-      "sha256-pf0XYupllHLkbG4RCMsDoCWjYXxhzCRneCxPqgTpdv0=";
+    buildTypesAiobotocorePackage "emr-serverless" "2.25.2"
+      "sha256-2aiEQtEv0nLjFJWaAUe/E4blpBboZDAW9+upmhlZCoY=";
 
   types-aiobotocore-entityresolution =
-    buildTypesAiobotocorePackage "entityresolution" "2.25.1"
-      "sha256-SQYZ7q9IR8Wb8eKcVLzHQiF6BZrRrrzGmcnj7Z+DnfQ=";
+    buildTypesAiobotocorePackage "entityresolution" "2.25.2"
+      "sha256-zJzRxpm7uagRwfLdwt/tS3pdLGpECMuZXitq7MDDzI4=";
 
   types-aiobotocore-es =
-    buildTypesAiobotocorePackage "es" "2.25.1"
-      "sha256-5rsR0DjUEdJ5OJfOhFtoxouPLYS462FvsynL2QDzDG0=";
+    buildTypesAiobotocorePackage "es" "2.25.2"
+      "sha256-NK+YUpC75lpC4nWox1CpG4cmJJK5wx8uwC1vy8H/Z94=";
 
   types-aiobotocore-events =
-    buildTypesAiobotocorePackage "events" "2.25.1"
-      "sha256-cabvdIyHxNjdaj0dQ8CCQq+DoFFfHFN4IziblgYwxEQ=";
+    buildTypesAiobotocorePackage "events" "2.25.2"
+      "sha256-U2cdpbAE496OkkvikFkseVh+OegBTlwpv5nqRnY2YU4=";
 
   types-aiobotocore-evidently =
-    buildTypesAiobotocorePackage "evidently" "2.25.1"
-      "sha256-vmYnXUjDWnet/5Ct1D3Yv6YAchOOGHkCaIdXnCDFX3M=";
+    buildTypesAiobotocorePackage "evidently" "2.25.2"
+      "sha256-qAs/EJou4PBT/in0w8JDMWhsIxZgvPiZGKuPTNQUUCQ=";
 
   types-aiobotocore-finspace =
-    buildTypesAiobotocorePackage "finspace" "2.25.1"
-      "sha256-zgahm0k1C84fh95ptjidhEPw5eEWhLv9to/1dFiRPBA=";
+    buildTypesAiobotocorePackage "finspace" "2.25.2"
+      "sha256-DnMewOnAHJf+ExZwlLKJIz785Sr4SQt22wB54cfIA08=";
 
   types-aiobotocore-finspace-data =
-    buildTypesAiobotocorePackage "finspace-data" "2.25.1"
-      "sha256-XrPXBKuNYWT5b6Pm7fDjbePlvQ75oewg3QY59VtRmbA=";
+    buildTypesAiobotocorePackage "finspace-data" "2.25.2"
+      "sha256-xNLAi3IacbqeSj9Tc6tuM8cFYXV9LTrVMMrMuOaHoYI=";
 
   types-aiobotocore-firehose =
-    buildTypesAiobotocorePackage "firehose" "2.25.1"
-      "sha256-Whm24y+Ke7GEduNpTeyqrD730DqVlKyAgttdqKZGjms=";
+    buildTypesAiobotocorePackage "firehose" "2.25.2"
+      "sha256-Uat0v5pcM7UHQWzdNfFT+PlBNQ3ctwnqHZe9MH31MjU=";
 
   types-aiobotocore-fis =
-    buildTypesAiobotocorePackage "fis" "2.25.1"
-      "sha256-Gqb0dUFjDN1HrqnpzpYMNynaiJodjtRVJqrg0hTxV4w=";
+    buildTypesAiobotocorePackage "fis" "2.25.2"
+      "sha256-mhXOn6NpHXkyNlljoLztMzCUlJnq/4S2RoanP4rkZ50=";
 
   types-aiobotocore-fms =
-    buildTypesAiobotocorePackage "fms" "2.25.1"
-      "sha256-NDvYv51GImqnOscZXytvgO2z7CmVmZK3v2od0iTswfw=";
+    buildTypesAiobotocorePackage "fms" "2.25.2"
+      "sha256-dKi7CgYbsJUvVfCE0RS3cLqI/iJSx1wf3aYtLCUTZ0c=";
 
   types-aiobotocore-forecast =
-    buildTypesAiobotocorePackage "forecast" "2.25.1"
-      "sha256-3gpCjo8El+NGeQEJ+48DHhEmDyq9lgxLUdaw6w4fKy0=";
+    buildTypesAiobotocorePackage "forecast" "2.25.2"
+      "sha256-t38/Zmq8LsHTYPvVBNvfKOFsJh1H8mTNpOuAOfn268o=";
 
   types-aiobotocore-forecastquery =
-    buildTypesAiobotocorePackage "forecastquery" "2.25.1"
-      "sha256-ihmh48cBKFjC8sp9rLU0CKCanTOFETt86CMvoHjHOuM=";
+    buildTypesAiobotocorePackage "forecastquery" "2.25.2"
+      "sha256-unT0W95NPPdCaQaXbmodcRNLUtla6nFQ9XsLTaF8jLw=";
 
   types-aiobotocore-frauddetector =
-    buildTypesAiobotocorePackage "frauddetector" "2.25.1"
-      "sha256-iE8I+VRtN44OAlTnRoimXl0X/ZQLjsrvP+VP2MkAqXs=";
+    buildTypesAiobotocorePackage "frauddetector" "2.25.2"
+      "sha256-6hUMCYRPfQPk+ufDNEeQL/vI8tSuzWu1YRdfsBBSLRc=";
 
   types-aiobotocore-fsx =
-    buildTypesAiobotocorePackage "fsx" "2.25.1"
-      "sha256-MvIqZuVr3UBCNzT4J17QD4meDG3yXe+GsY58bN71sqo=";
+    buildTypesAiobotocorePackage "fsx" "2.25.2"
+      "sha256-kEeOKl23sv9KJoq3Si9b/pHS7XL65Nq1mal/ogmikYg=";
 
   types-aiobotocore-gamelift =
-    buildTypesAiobotocorePackage "gamelift" "2.25.1"
-      "sha256-ODGJ7Dmt5eQ1lLbS8UOC9fTchMwmHoNj3/te0YKPzn0=";
+    buildTypesAiobotocorePackage "gamelift" "2.25.2"
+      "sha256-vsYGOElYaWo6ogenqYr6PnHtluMXnFDscrQXB0nPD1s=";
 
   types-aiobotocore-gamesparks =
     buildTypesAiobotocorePackage "gamesparks" "2.7.0"
       "sha256-oVbKtuLMPpCQcZYx/cH1Dqjv/t6/uXsveflfFVqfN+8=";
 
   types-aiobotocore-glacier =
-    buildTypesAiobotocorePackage "glacier" "2.25.1"
-      "sha256-v4PcomqqABgRN4CoTC7oXBm48jEwW+Uh1isiyhB7a8g=";
+    buildTypesAiobotocorePackage "glacier" "2.25.2"
+      "sha256-rvNIShaXuazqjXpmNJOkzvYQgz9RL4EYatCjAbgKCI0=";
 
   types-aiobotocore-globalaccelerator =
-    buildTypesAiobotocorePackage "globalaccelerator" "2.25.1"
-      "sha256-f14ruCUHfPSVWxWnpMvDxkvq+V344Vy+guOH5XBc/Zs=";
+    buildTypesAiobotocorePackage "globalaccelerator" "2.25.2"
+      "sha256-070hbQGvK+Zu3ChPBAOfkm2EehOEfj60ieo/xXUWV0U=";
 
   types-aiobotocore-glue =
-    buildTypesAiobotocorePackage "glue" "2.25.1"
-      "sha256-nu0XNx6ZgJU6XBw4cISVqfuW7Fjdqg+ip20X6mNBT5A=";
+    buildTypesAiobotocorePackage "glue" "2.25.2"
+      "sha256-rBTwtr0klPbQ6+mC15Fj/yItNsJu0FhDSYXLMga83pQ=";
 
   types-aiobotocore-grafana =
-    buildTypesAiobotocorePackage "grafana" "2.25.1"
-      "sha256-NlUOwigxEY47czNgVrBkXUGbC4Im4YHLnXnkF+0GTKE=";
+    buildTypesAiobotocorePackage "grafana" "2.25.2"
+      "sha256-sRHDeDpnfhwk4LQjeouOPzmZUL7M2jY54cBg6TRgNoY=";
 
   types-aiobotocore-greengrass =
-    buildTypesAiobotocorePackage "greengrass" "2.25.1"
-      "sha256-UJOGHdL0ffK5EQxbVXfFRdGhk8UId78dKxNDQTrvjlU=";
+    buildTypesAiobotocorePackage "greengrass" "2.25.2"
+      "sha256-/0uklw1i2EY6WzzTxLIqgorhQoljyU9IRxuzQjh1W8Q=";
 
   types-aiobotocore-greengrassv2 =
-    buildTypesAiobotocorePackage "greengrassv2" "2.25.1"
-      "sha256-6PdS9LsfF+e+KLLM8SKCgMo9payxN25gOxB77/vw9Qw=";
+    buildTypesAiobotocorePackage "greengrassv2" "2.25.2"
+      "sha256-G9cJzBWFap+aiq/+SO/AvHJPv3W0dW0VsGmxCnzZWeQ=";
 
   types-aiobotocore-groundstation =
-    buildTypesAiobotocorePackage "groundstation" "2.25.1"
-      "sha256-aBFZniSBz+draLIP45cJbNbGByDdp536+ePyP5Sh+qQ=";
+    buildTypesAiobotocorePackage "groundstation" "2.25.2"
+      "sha256-skdsb8uGe9r7UQZWxlNeWXxkMlQYbAtQ60xAvBVpXBQ=";
 
   types-aiobotocore-guardduty =
-    buildTypesAiobotocorePackage "guardduty" "2.25.1"
-      "sha256-3y+mwiRyGpLmJkkV/SmsziVxCgAoWnPW0GVqi9kdxCE=";
+    buildTypesAiobotocorePackage "guardduty" "2.25.2"
+      "sha256-1cjUwVNQgl1gyI+pALGpbytjfkrET4l8rxqreQZjAaU=";
 
   types-aiobotocore-health =
-    buildTypesAiobotocorePackage "health" "2.25.1"
-      "sha256-IZUIDo/EVlzmHY6f7evtRvZqLcEacKAXoKnC7xvlcXk=";
+    buildTypesAiobotocorePackage "health" "2.25.2"
+      "sha256-2EoAh3qXl2B5xpL3O8Kh+LGpmJypD+EdMk0DLSC4x30=";
 
   types-aiobotocore-healthlake =
-    buildTypesAiobotocorePackage "healthlake" "2.25.1"
-      "sha256-raz2M776ZuZdYcWqTkrWGfTMr9wOY3wdgbVxI/U5JSw=";
+    buildTypesAiobotocorePackage "healthlake" "2.25.2"
+      "sha256-SA/SsA9dN5z0pZU7CSDUgtAfC2KL6okJNYYEyRCBXBs=";
 
   types-aiobotocore-honeycode =
     buildTypesAiobotocorePackage "honeycode" "2.13.0"
       "sha256-DeeheoQeFEcDH21DSNs2kSR1rjnPLtTgz0yNCFnE+Io=";
 
   types-aiobotocore-iam =
-    buildTypesAiobotocorePackage "iam" "2.25.1"
-      "sha256-kVin4vrKRyQ8HlNkyEL0cAJ/eyGw3L1yMTEtLktzDhI=";
+    buildTypesAiobotocorePackage "iam" "2.25.2"
+      "sha256-qxr8H+75b5joWgYD5OngJAvowvE1emfiOCDwf+imVs0=";
 
   types-aiobotocore-identitystore =
-    buildTypesAiobotocorePackage "identitystore" "2.25.1"
-      "sha256-8M/Y4TilJMbTxgcmeNBshSm8ENhmF6hVwFRplAQRetE=";
+    buildTypesAiobotocorePackage "identitystore" "2.25.2"
+      "sha256-olypKwxXq7blgh1KxnFjPOQ2LsJGdyr5wtjlI7GCk4g=";
 
   types-aiobotocore-imagebuilder =
-    buildTypesAiobotocorePackage "imagebuilder" "2.25.1"
-      "sha256-pXnb0N+50HysZULA0bKbTPfeHaW8AZHQvAfwKfJWbx4=";
+    buildTypesAiobotocorePackage "imagebuilder" "2.25.2"
+      "sha256-lkyF1sTuKEpGk5D5hu4D22JGTtl2jdLKPYjWOcdoKcM=";
 
   types-aiobotocore-importexport =
-    buildTypesAiobotocorePackage "importexport" "2.25.1"
-      "sha256-nXIV3ULJh2g/0crKh7bCDuof2/W4ek2YVi/dQWbNJr0=";
+    buildTypesAiobotocorePackage "importexport" "2.25.2"
+      "sha256-C+EfG+E6ssDSbAEUeZJj7boV8LbBNiP8IqxGe9wBeyo=";
 
   types-aiobotocore-inspector =
-    buildTypesAiobotocorePackage "inspector" "2.25.1"
-      "sha256-EjwIzddKYCCR8br4dF/mrplZjVGZwZ/6XZjEH53/QVo=";
+    buildTypesAiobotocorePackage "inspector" "2.25.2"
+      "sha256-E0kpaswtjZuja4oadv6mfOVBx7V9rzmLVOj/9I6HOgI=";
 
   types-aiobotocore-inspector2 =
-    buildTypesAiobotocorePackage "inspector2" "2.25.1"
-      "sha256-ISW+Ezs/W6wBQ89/ltMFYPc7Xz8iALO8jZXVh1sYJWg=";
+    buildTypesAiobotocorePackage "inspector2" "2.25.2"
+      "sha256-W5iQ9DMwhKRFb/GlXCd/1ikTYIQmc5LDk1tlFmioLSc=";
 
   types-aiobotocore-internetmonitor =
-    buildTypesAiobotocorePackage "internetmonitor" "2.25.1"
-      "sha256-0vQfu8Xvr7GVE101gzCQN9T0Vf5v0jYpd4qrwFJuRsE=";
+    buildTypesAiobotocorePackage "internetmonitor" "2.25.2"
+      "sha256-lp/NFksSRfiVyA28/q179XmP1b2519cJqMcOGszG0sM=";
 
   types-aiobotocore-iot =
-    buildTypesAiobotocorePackage "iot" "2.25.1"
-      "sha256-zpiY+EizDLanYnf93oqgujGdAQqkJfLm6Coy//fQ6/c=";
+    buildTypesAiobotocorePackage "iot" "2.25.2"
+      "sha256-5riC4MVTOeoWOTkG9KfZv7pqrus8zoUJjwmgBTTNnLY=";
 
   types-aiobotocore-iot-data =
-    buildTypesAiobotocorePackage "iot-data" "2.25.1"
-      "sha256-INReAIKUi2aPGtv35fHQEjSz9S7VV4RptWahxuqqOgs=";
+    buildTypesAiobotocorePackage "iot-data" "2.25.2"
+      "sha256-g6wLfpVAeNwN8lTEd3WldKzyCdTcVVxJtAMGlsvJXyo=";
 
   types-aiobotocore-iot-jobs-data =
-    buildTypesAiobotocorePackage "iot-jobs-data" "2.25.1"
-      "sha256-jHw1yGj9VRsKLYWzbI3b1leXnm2qY6hUieC+iPEHeNg=";
+    buildTypesAiobotocorePackage "iot-jobs-data" "2.25.2"
+      "sha256-bNem7hNY+n8YyWRHfla3XrIIjQ2XtYNj2lXswGU4E5A=";
 
   types-aiobotocore-iot-roborunner =
     buildTypesAiobotocorePackage "iot-roborunner" "2.12.2"
@@ -689,168 +689,168 @@ in
       "sha256-qK5dPunPAbC7xIramYINSda50Zum6yQ4n2BfuOgLC58=";
 
   types-aiobotocore-iotanalytics =
-    buildTypesAiobotocorePackage "iotanalytics" "2.25.1"
-      "sha256-EvK6tsT0S4kF1BdN/NM9Lu2fgrQ9l4fYVRO89XPRNgg=";
+    buildTypesAiobotocorePackage "iotanalytics" "2.25.2"
+      "sha256-1WvVA00h5geNrEHppF7Hi15j+8STdQCE77I/4egS168=";
 
   types-aiobotocore-iotdeviceadvisor =
-    buildTypesAiobotocorePackage "iotdeviceadvisor" "2.25.1"
-      "sha256-TMPUr5RT9F6ND7IL99uXcp5AYCJbyCw9bnx4EkSTTEU=";
+    buildTypesAiobotocorePackage "iotdeviceadvisor" "2.25.2"
+      "sha256-MbYARIi0FUixr0BrOx8i2zkQ5ScNl2JekXKqFR6AJzI=";
 
   types-aiobotocore-iotevents =
-    buildTypesAiobotocorePackage "iotevents" "2.25.1"
-      "sha256-qx6iI0wNYHsWwGCWtnLIyqaBrqcc3NHD4GXrxUQyie0=";
+    buildTypesAiobotocorePackage "iotevents" "2.25.2"
+      "sha256-nOA2CgNX8FMkkAnvdKx+1cJ2J6oVpA/SzQqhbW939zM=";
 
   types-aiobotocore-iotevents-data =
-    buildTypesAiobotocorePackage "iotevents-data" "2.25.1"
-      "sha256-nWej3asj5URYUQbRI6jlwhI1mmKlhP4mXVY90qsmpsE=";
+    buildTypesAiobotocorePackage "iotevents-data" "2.25.2"
+      "sha256-zJWDinktOdzVwFRDvhe2oJ60a+0ornkuZmFFIEHG1LU=";
 
   types-aiobotocore-iotfleethub =
     buildTypesAiobotocorePackage "iotfleethub" "2.24.2"
       "sha256-WzdCGMVRCl8x+UswlyApMYMYT3Rvtng0ID2YyV08NzA=";
 
   types-aiobotocore-iotfleetwise =
-    buildTypesAiobotocorePackage "iotfleetwise" "2.25.1"
-      "sha256-1RbQs39myewtwNh2SUAIchtx0Sham/uWrKWAmGXEKKU=";
+    buildTypesAiobotocorePackage "iotfleetwise" "2.25.2"
+      "sha256-dfs2kqZud8YyuKJ7h5f5FOaepAbgwyuVxPf2BsTv8ng=";
 
   types-aiobotocore-iotsecuretunneling =
-    buildTypesAiobotocorePackage "iotsecuretunneling" "2.25.1"
-      "sha256-Cw1eny/hylsafHfAhBELpirbjTv7ZiBHcy3qkxWUdDk=";
+    buildTypesAiobotocorePackage "iotsecuretunneling" "2.25.2"
+      "sha256-xiDy1kKgS/f1FJh2NqNe5L8f0xmzZwpyUaRoCuP6VRc=";
 
   types-aiobotocore-iotsitewise =
-    buildTypesAiobotocorePackage "iotsitewise" "2.25.1"
-      "sha256-GBKfLgU1zLjiu9HCRXzReR0LK4aRHnLW2KfMYk0wKVY=";
+    buildTypesAiobotocorePackage "iotsitewise" "2.25.2"
+      "sha256-ZwnG/eOWi6uvWx9grxW6OBsIaf+Kf3vEl2P+RlCtjL4=";
 
   types-aiobotocore-iotthingsgraph =
-    buildTypesAiobotocorePackage "iotthingsgraph" "2.25.1"
-      "sha256-GIDKKN+09LHdT72SQ+metNS4tFfCg0qi7oDZmqt/Icg=";
+    buildTypesAiobotocorePackage "iotthingsgraph" "2.25.2"
+      "sha256-+2aoGkoFdsT16dpHqxnLkB1JOk8CdEkTbPeT2ft8EbY=";
 
   types-aiobotocore-iottwinmaker =
-    buildTypesAiobotocorePackage "iottwinmaker" "2.25.1"
-      "sha256-MVaQcl8FenrpHkoIB9sVYHgEXX2vFYd2AOnb/gYObYs=";
+    buildTypesAiobotocorePackage "iottwinmaker" "2.25.2"
+      "sha256-VmLslrYD8bZXjYAiup5Ym55ZnUxgaC2BIu4tdop+y/0=";
 
   types-aiobotocore-iotwireless =
-    buildTypesAiobotocorePackage "iotwireless" "2.25.1"
-      "sha256-/zxM35oRqcd/mR0lL7g4sIrraEwMYULQoaVp/HUQwBc=";
+    buildTypesAiobotocorePackage "iotwireless" "2.25.2"
+      "sha256-GT7wWOP1X/rrAbCRAiiTgKNwXlvjf3RSOQ6GcwIrFgw=";
 
   types-aiobotocore-ivs =
-    buildTypesAiobotocorePackage "ivs" "2.25.1"
-      "sha256-MY3e1jrSRp9s1t7Tl9mM4Ysy4sHoq8qSdpS2xuLpAhI=";
+    buildTypesAiobotocorePackage "ivs" "2.25.2"
+      "sha256-MJlGDg4v0RSJ3rvF7i1rxtgdI3pjr0IcJZsrmP3DHDE=";
 
   types-aiobotocore-ivs-realtime =
-    buildTypesAiobotocorePackage "ivs-realtime" "2.25.1"
-      "sha256-gfDE8X90aAEkJkZ0bQrIEbFhUwKWQVQpNkVXru74WeI=";
+    buildTypesAiobotocorePackage "ivs-realtime" "2.25.2"
+      "sha256-kohM7k5ybZtI1adzTvY/f66QUVmYC4P1YmLz2nlzHv4=";
 
   types-aiobotocore-ivschat =
-    buildTypesAiobotocorePackage "ivschat" "2.25.1"
-      "sha256-feBTEGa/xjshYQjMHskSyX0QIYBxsUlp8VFZn4F1zh8=";
+    buildTypesAiobotocorePackage "ivschat" "2.25.2"
+      "sha256-mt0mckRiQlBFYgUvXptSHVPVI+xdaNrOFdNEHzy9eEI=";
 
   types-aiobotocore-kafka =
-    buildTypesAiobotocorePackage "kafka" "2.25.1"
-      "sha256-ZIQF+gh05jQTMEYA+E+g8LT5vusi/hm3EFC+f7hbDMs=";
+    buildTypesAiobotocorePackage "kafka" "2.25.2"
+      "sha256-oDPmGo/sQb9JzKpmR/vDVHKdBmjqoZggxYloXE8sO0c=";
 
   types-aiobotocore-kafkaconnect =
-    buildTypesAiobotocorePackage "kafkaconnect" "2.25.1"
-      "sha256-zA5rx/dxGTNsNWc04mVVLpuF7nMyuuVsRHUnRalDGos=";
+    buildTypesAiobotocorePackage "kafkaconnect" "2.25.2"
+      "sha256-0HC7FMCn9WfiyZjCwWUnWcDq/Y9QqyzXnmNe4wqwpqk=";
 
   types-aiobotocore-kendra =
-    buildTypesAiobotocorePackage "kendra" "2.25.1"
-      "sha256-0xl78ZSC1A9OlN//j8GLRsqrnaiRjdTg/2uLysO/it0=";
+    buildTypesAiobotocorePackage "kendra" "2.25.2"
+      "sha256-9hoLqHHyM5ApiZF46j4TQftcsxflpgmeowV7vs8AFbc=";
 
   types-aiobotocore-kendra-ranking =
-    buildTypesAiobotocorePackage "kendra-ranking" "2.25.1"
-      "sha256-eStRE99IbPwwTHpd5FTiidVlGIrhHjK9T/aWRKXlJ6I=";
+    buildTypesAiobotocorePackage "kendra-ranking" "2.25.2"
+      "sha256-Mt1jTUTHmLJnVL+hGYpqSqdGq2DEJBkMJzVS5ukaFDQ=";
 
   types-aiobotocore-keyspaces =
-    buildTypesAiobotocorePackage "keyspaces" "2.25.1"
-      "sha256-1vAdMrOWS/nsWL/LFRK33G7NJlsOwCj5Zrii8700MuM=";
+    buildTypesAiobotocorePackage "keyspaces" "2.25.2"
+      "sha256-L8VS25Bp36xluWUs9QoVE/qRAXrqsCD27R2LSPLmruE=";
 
   types-aiobotocore-kinesis =
-    buildTypesAiobotocorePackage "kinesis" "2.25.1"
-      "sha256-VqIhrN1ipNF4RXGTGjwOOd7e5kWqpTUMbS+8rHkfM5M=";
+    buildTypesAiobotocorePackage "kinesis" "2.25.2"
+      "sha256-mCFqvsi+1PW3VwALLkykyfISkXVEX7HCfDgJIZQzdvo=";
 
   types-aiobotocore-kinesis-video-archived-media =
-    buildTypesAiobotocorePackage "kinesis-video-archived-media" "2.25.1"
-      "sha256-7I4WVXId0/NxqXKX7266MnSp4gSfFINyfd4ENRgTkFE=";
+    buildTypesAiobotocorePackage "kinesis-video-archived-media" "2.25.2"
+      "sha256-5kFLsQQZi9VhBWJiVKjTgFr9Gio59Y5AhUf5294MySU=";
 
   types-aiobotocore-kinesis-video-media =
-    buildTypesAiobotocorePackage "kinesis-video-media" "2.25.1"
-      "sha256-2G3ba2byZmzsU1Cww8S4oEp0/f9HtfBtCM5ONr8yaYE=";
+    buildTypesAiobotocorePackage "kinesis-video-media" "2.25.2"
+      "sha256-nb9TVdiEVlPy+mLYivALEUZgfhYqYGJjFRqMo6fp3Wc=";
 
   types-aiobotocore-kinesis-video-signaling =
-    buildTypesAiobotocorePackage "kinesis-video-signaling" "2.25.1"
-      "sha256-mhLGgVHM150A78AYPhGDXy6gJ/BCWUUUrsDXFsr5/Bw=";
+    buildTypesAiobotocorePackage "kinesis-video-signaling" "2.25.2"
+      "sha256-ApCbbCWPFEuw74dMKxqPNCknDf+zgBcnnvP3q+hq3os=";
 
   types-aiobotocore-kinesis-video-webrtc-storage =
-    buildTypesAiobotocorePackage "kinesis-video-webrtc-storage" "2.25.1"
-      "sha256-U2oRuMMR5nTQuwCqczNSTGg9Xp8wg75QjKm8BXihKtw=";
+    buildTypesAiobotocorePackage "kinesis-video-webrtc-storage" "2.25.2"
+      "sha256-TDawYu1ExF3mMen9eNCiY1UMixdZ5K0WhHWHGfvKhOU=";
 
   types-aiobotocore-kinesisanalytics =
-    buildTypesAiobotocorePackage "kinesisanalytics" "2.25.1"
-      "sha256-5k3NKQ+IpRQSYA7OHo1BgERVi0wwzhQ4bQjy6dt2Pd0=";
+    buildTypesAiobotocorePackage "kinesisanalytics" "2.25.2"
+      "sha256-CQXuj7d21j6VDF5vE3FzAGOtYIneFAJiL7ioDJsg+UY=";
 
   types-aiobotocore-kinesisanalyticsv2 =
-    buildTypesAiobotocorePackage "kinesisanalyticsv2" "2.25.1"
-      "sha256-QU2tu6YzbTF4rmS/IYiE7GMUl5+AUWGf6BCuBRw8ERE=";
+    buildTypesAiobotocorePackage "kinesisanalyticsv2" "2.25.2"
+      "sha256-XHF4hST83t8R/TbfOBVXP5lMuQClES+XaKf7KSauH/g=";
 
   types-aiobotocore-kinesisvideo =
-    buildTypesAiobotocorePackage "kinesisvideo" "2.25.1"
-      "sha256-yZ9YcWur+c5LxS1hgltY63IgYg0ehs1bYbFKB6E8AcE=";
+    buildTypesAiobotocorePackage "kinesisvideo" "2.25.2"
+      "sha256-hnS3pir4ObjSzwpOKdOL6Z13SKFooRYL7LAePK3gzxs=";
 
   types-aiobotocore-kms =
-    buildTypesAiobotocorePackage "kms" "2.25.1"
-      "sha256-Xu4HQpBUp6aImKtNKsvlTrQiKWriXOxvOlZSu1EH7fE=";
+    buildTypesAiobotocorePackage "kms" "2.25.2"
+      "sha256-4+ZRU+rDGLge2OLJqpD65R4nR4lp4RqDQsMJ12vX0AI=";
 
   types-aiobotocore-lakeformation =
-    buildTypesAiobotocorePackage "lakeformation" "2.25.1"
-      "sha256-7WfyjgLC/eVL/nL47m2WKYgBBrxXfXg5S9H9WEvgKBs=";
+    buildTypesAiobotocorePackage "lakeformation" "2.25.2"
+      "sha256-DlrQ9PobstugpGPFYDI+qmUdJXSEtJOT1TUS/pzzP70=";
 
   types-aiobotocore-lambda =
-    buildTypesAiobotocorePackage "lambda" "2.25.1"
-      "sha256-ljf8SXSxJUwOWgclJPXnDnLbw0sCIF1or0ukzK/DQoY=";
+    buildTypesAiobotocorePackage "lambda" "2.25.2"
+      "sha256-WkUkI9LAWLORwuQ8gJH7l92Alcz/1+6WZIgw0bznB/o=";
 
   types-aiobotocore-lex-models =
-    buildTypesAiobotocorePackage "lex-models" "2.25.1"
-      "sha256-xaJqyruf7YLIyeYR/6cPCebno9Ps15uNlLwAI2oepH4=";
+    buildTypesAiobotocorePackage "lex-models" "2.25.2"
+      "sha256-vh9YBdvDuN9P/18SRJEkw4u2iHGWZcNXzJFxhmfIzEQ=";
 
   types-aiobotocore-lex-runtime =
-    buildTypesAiobotocorePackage "lex-runtime" "2.25.1"
-      "sha256-4OkvrDwiZlmRYqYsHqfmMYes+DRadgfx9pU04V/3mG0=";
+    buildTypesAiobotocorePackage "lex-runtime" "2.25.2"
+      "sha256-8lplzdiDbe6ugflU6B2399wpnWn1/02PxfD3Y1Nfcyo=";
 
   types-aiobotocore-lexv2-models =
-    buildTypesAiobotocorePackage "lexv2-models" "2.25.1"
-      "sha256-3T7nhP3oE8XVSlINSdAsh/xDuiF1hYm3lG49+3DDLd4=";
+    buildTypesAiobotocorePackage "lexv2-models" "2.25.2"
+      "sha256-ERcdhhhV3smH4ldT3RXggbUTpyIrhdWN4AOtM+yEBLg=";
 
   types-aiobotocore-lexv2-runtime =
-    buildTypesAiobotocorePackage "lexv2-runtime" "2.25.1"
-      "sha256-+3pkXJMbs9HCQnfFwZOn2uJ5P3DES9DivhCLXRuUbfc=";
+    buildTypesAiobotocorePackage "lexv2-runtime" "2.25.2"
+      "sha256-w94hz4nxE9bOef6/sUHJ98brAHYEbeMqsJrNnhAGBsk=";
 
   types-aiobotocore-license-manager =
-    buildTypesAiobotocorePackage "license-manager" "2.25.1"
-      "sha256-U1w8TffyAhdmXEKurRWAh8dglmGvpfgFp3O0jOshTD8=";
+    buildTypesAiobotocorePackage "license-manager" "2.25.2"
+      "sha256-wYdKQouFpqYSwJnhODLRq85RijCfi0NyZ9QfblUw3LE=";
 
   types-aiobotocore-license-manager-linux-subscriptions =
-    buildTypesAiobotocorePackage "license-manager-linux-subscriptions" "2.25.1"
-      "sha256-0KDJ8/OtiRkOkv6OWnFbm4DLLv3n44s4ACF/AeEzhCo=";
+    buildTypesAiobotocorePackage "license-manager-linux-subscriptions" "2.25.2"
+      "sha256-iYdFS/wK8w/8k4U4HHIywdWfrndqIiW8fORPeAscpoE=";
 
   types-aiobotocore-license-manager-user-subscriptions =
-    buildTypesAiobotocorePackage "license-manager-user-subscriptions" "2.25.1"
-      "sha256-LMcYBP3+g0YyMcPp+4+DxZWASKo1sYNcbc3YY7BcZ1M=";
+    buildTypesAiobotocorePackage "license-manager-user-subscriptions" "2.25.2"
+      "sha256-lnE4SloS8g7lDE0x5Q+qCITeyLrcGRwI+6lZBcIGH2w=";
 
   types-aiobotocore-lightsail =
-    buildTypesAiobotocorePackage "lightsail" "2.25.1"
-      "sha256-1JZa9NH6OC/SyKegM1RkGIMwJDxbSBCik7aKTC9osZU=";
+    buildTypesAiobotocorePackage "lightsail" "2.25.2"
+      "sha256-+G/8W+9NbMbJT0oy8pLmSJLF7vtG2HplKya8bzCm2+c=";
 
   types-aiobotocore-location =
-    buildTypesAiobotocorePackage "location" "2.25.1"
-      "sha256-9RxipPP1FNi6smaWhDRt1KEFt/K310WNDXAysLwbzuc=";
+    buildTypesAiobotocorePackage "location" "2.25.2"
+      "sha256-8uIByz83NRpkCJl2Wff82hm9vWW/0HLcHq9ypeKuDXo=";
 
   types-aiobotocore-logs =
-    buildTypesAiobotocorePackage "logs" "2.25.1"
-      "sha256-yTa4bDiTYSGy+W9t1h+zcuJ8x8yrSoVBKUrw15EXSV0=";
+    buildTypesAiobotocorePackage "logs" "2.25.2"
+      "sha256-h4gPST8V8xHEIbj4TMBdN6xREBfqnfgMYeuKCzoLffY=";
 
   types-aiobotocore-lookoutequipment =
-    buildTypesAiobotocorePackage "lookoutequipment" "2.25.1"
-      "sha256-CJw3DYxfQWo9dbo8qLoikLwLjTwprlXDpHLZaofqoB4=";
+    buildTypesAiobotocorePackage "lookoutequipment" "2.25.2"
+      "sha256-GPLq/zfOTWA9E2a/eSWFuGaHyZSgahG28NuIOHfoTMk=";
 
   types-aiobotocore-lookoutmetrics =
     buildTypesAiobotocorePackage "lookoutmetrics" "2.24.2"
@@ -861,160 +861,160 @@ in
       "sha256-HvNqynXLpYFJceCmrlncodqWuoczilMB8QtbCS5pcDM=";
 
   types-aiobotocore-m2 =
-    buildTypesAiobotocorePackage "m2" "2.25.1"
-      "sha256-YBLEKNiv4BRE+fBxZrLrBxrgnwjLCX7W7gufDQ4Tfow=";
+    buildTypesAiobotocorePackage "m2" "2.25.2"
+      "sha256-YbWneWHZ/Ec/bnLTdOGQEAmabSPZ0aP2+9Ant+mWO1g=";
 
   types-aiobotocore-machinelearning =
-    buildTypesAiobotocorePackage "machinelearning" "2.25.1"
-      "sha256-htYyBXnVid1XXUPyEympHz/jf9e2xx2cnxd4HvaOAFQ=";
+    buildTypesAiobotocorePackage "machinelearning" "2.25.2"
+      "sha256-S5y7vhPepXu4r4bsSXJakD6yZxgLSLhDhwpbG0NXqn0=";
 
   types-aiobotocore-macie =
     buildTypesAiobotocorePackage "macie" "2.7.0"
       "sha256-hJJtGsK2b56nKX1ZhiarC+ffyjHYWRiC8II4oyDZWWw=";
 
   types-aiobotocore-macie2 =
-    buildTypesAiobotocorePackage "macie2" "2.25.1"
-      "sha256-sTZ4Fv+jh1SjH4l9evSmpF2SqXL7yfkhPFvF0F+CG1Y=";
+    buildTypesAiobotocorePackage "macie2" "2.25.2"
+      "sha256-qIvrKot9j/V5Ze41i8969zJ2fTFghJciMpFcvUMUaNE=";
 
   types-aiobotocore-managedblockchain =
-    buildTypesAiobotocorePackage "managedblockchain" "2.25.1"
-      "sha256-R9D/cYVwEc/HAS891vM/cpHjf5ozAVRAx1oGJDes+kk=";
+    buildTypesAiobotocorePackage "managedblockchain" "2.25.2"
+      "sha256-qyceXJgZ7WBPrLx6qhX+Hjy6Gn+ZvhlTaUBdMc52hH0=";
 
   types-aiobotocore-managedblockchain-query =
-    buildTypesAiobotocorePackage "managedblockchain-query" "2.25.1"
-      "sha256-R8PLtNdR9ymQ7NQrg+w2caSjT1c00EurbKI2eopEpgU=";
+    buildTypesAiobotocorePackage "managedblockchain-query" "2.25.2"
+      "sha256-6RHcu96TCIavgycEbYM4Q9suVDd3TDO0DvyqcK5VOMo=";
 
   types-aiobotocore-marketplace-catalog =
-    buildTypesAiobotocorePackage "marketplace-catalog" "2.25.1"
-      "sha256-ImY0tHrxtZXZJxEMwXCO3XloNpxuOoPzEbt/7JSm7NY=";
+    buildTypesAiobotocorePackage "marketplace-catalog" "2.25.2"
+      "sha256-qj3TSjteoHDDQAdy55D6cJhH05PUZplNt/zxHh2fEBo=";
 
   types-aiobotocore-marketplace-entitlement =
-    buildTypesAiobotocorePackage "marketplace-entitlement" "2.25.1"
-      "sha256-+ze5GYms+hngOUkpAqP7rBtEMdq9E49sPmrx81jzciU=";
+    buildTypesAiobotocorePackage "marketplace-entitlement" "2.25.2"
+      "sha256-DRKMayesiEf1sOcfnoxGF8vPY/uX0rpYufUYiJUQSVs=";
 
   types-aiobotocore-marketplacecommerceanalytics =
-    buildTypesAiobotocorePackage "marketplacecommerceanalytics" "2.25.1"
-      "sha256-D26pEIMDQjcqC0EmDkUizlIiy20ShLShrFKhGUZoPjc=";
+    buildTypesAiobotocorePackage "marketplacecommerceanalytics" "2.25.2"
+      "sha256-qxtdh9tSI4hpRq3jBU6JxvqSu3YkTbHhMxJ1ekQx9JU=";
 
   types-aiobotocore-mediaconnect =
-    buildTypesAiobotocorePackage "mediaconnect" "2.25.1"
-      "sha256-gTxXOCYkF/jb9AsVZRGpBToKSPSRcnwhUXty6NSXMGo=";
+    buildTypesAiobotocorePackage "mediaconnect" "2.25.2"
+      "sha256-aDGNCaBg0o4wNFRyKUUWWraybEZeelFd8XKl70RpQtQ=";
 
   types-aiobotocore-mediaconvert =
-    buildTypesAiobotocorePackage "mediaconvert" "2.25.1"
-      "sha256-5CHQIQEgMMyvHqzZ6a+kEhA4oxLL5BqxkziX5M/CuVA=";
+    buildTypesAiobotocorePackage "mediaconvert" "2.25.2"
+      "sha256-At89/Du/ui/NM1WeQomgur8VF4hS/vyzt2mD1LysWHU=";
 
   types-aiobotocore-medialive =
-    buildTypesAiobotocorePackage "medialive" "2.25.1"
-      "sha256-6fjkDyU5ZQiwWo/kPm/m+6JpR2NjmrdfZQ8KpEKJ4CM=";
+    buildTypesAiobotocorePackage "medialive" "2.25.2"
+      "sha256-anrK2JZmOh4WZ543bh2RCbuELbuhvEOXtYbGhZ/UqrA=";
 
   types-aiobotocore-mediapackage =
-    buildTypesAiobotocorePackage "mediapackage" "2.25.1"
-      "sha256-+ahjkffPZtKJzrqdvk+irhruXuATlq7ffwYkKTbop9o=";
+    buildTypesAiobotocorePackage "mediapackage" "2.25.2"
+      "sha256-E3jZUhnUKvhneoCay65koa+T6mbua1Lbax6kBjrItx4=";
 
   types-aiobotocore-mediapackage-vod =
-    buildTypesAiobotocorePackage "mediapackage-vod" "2.25.1"
-      "sha256-5T/gShK8QCbvOdlyCT0l4En4UfsCJq9kQWT1T8pCcpk=";
+    buildTypesAiobotocorePackage "mediapackage-vod" "2.25.2"
+      "sha256-uL4hVr/G00kA7wG+atjbn1lLLoTV0AnXYYDluCfSmqE=";
 
   types-aiobotocore-mediapackagev2 =
-    buildTypesAiobotocorePackage "mediapackagev2" "2.25.1"
-      "sha256-fbo9TWM6isRD2oyClirrmVCD/yCFWSNSZWOY1nkAbo8=";
+    buildTypesAiobotocorePackage "mediapackagev2" "2.25.2"
+      "sha256-tZCiBFSee+6HplPoPHoVMaR0XrvKZtlWKzVqlXkdW5k=";
 
   types-aiobotocore-mediastore =
-    buildTypesAiobotocorePackage "mediastore" "2.25.1"
-      "sha256-qby7zbqRhERKtKXaCsnNKp21UfUkNxN7ovgn+ydqvtc=";
+    buildTypesAiobotocorePackage "mediastore" "2.25.2"
+      "sha256-7ANK/FhmUkUUUreA4xLJAqYI53ioFO07kDNHLYkyBlU=";
 
   types-aiobotocore-mediastore-data =
-    buildTypesAiobotocorePackage "mediastore-data" "2.25.1"
-      "sha256-r6DpBRlchtGfTWjgBX9qieF/ol9jIFyQsFWSVhv9EuQ=";
+    buildTypesAiobotocorePackage "mediastore-data" "2.25.2"
+      "sha256-XFex66jlYRKiCfRdiZVX28QwXe8+PC2uB5LM+8mOfiw=";
 
   types-aiobotocore-mediatailor =
-    buildTypesAiobotocorePackage "mediatailor" "2.25.1"
-      "sha256-SknZ55MUJ1f/6fs/M6D8pQdFA5T1+cE/LwPEdO1owZc=";
+    buildTypesAiobotocorePackage "mediatailor" "2.25.2"
+      "sha256-COlacwu57atUhHwb157igyHuqh2XazkBpSVh91z4nAw=";
 
   types-aiobotocore-medical-imaging =
-    buildTypesAiobotocorePackage "medical-imaging" "2.25.1"
-      "sha256-/6JkPuPsAKADg+KoVDLWogxoFxaONOlPkt319jqchHk=";
+    buildTypesAiobotocorePackage "medical-imaging" "2.25.2"
+      "sha256-NHoq/spW3VagYD79oHmdJWvie0+8xosoOMekLZVwQQA=";
 
   types-aiobotocore-memorydb =
-    buildTypesAiobotocorePackage "memorydb" "2.25.1"
-      "sha256-veLI4515eH7RNobGspj3n2taZXoKE2aRHkLfFNK3C0M=";
+    buildTypesAiobotocorePackage "memorydb" "2.25.2"
+      "sha256-/59U+2UMahLGM8GqafX2ZPxrA7rIT4Z9qwNDW3zmKxY=";
 
   types-aiobotocore-meteringmarketplace =
-    buildTypesAiobotocorePackage "meteringmarketplace" "2.25.1"
-      "sha256-Z6STpBR6U5uhuuwN0jUTYaV6lax0WOut+C15MZOYhrc=";
+    buildTypesAiobotocorePackage "meteringmarketplace" "2.25.2"
+      "sha256-PpQcRmsKJ/hQwg/5heNMnpODolJful2lloGZaf0pQLE=";
 
   types-aiobotocore-mgh =
-    buildTypesAiobotocorePackage "mgh" "2.25.1"
-      "sha256-U6Nnh3am7cuU2nRxolEjYO68PDmu216iK/qXRxbpaZ0=";
+    buildTypesAiobotocorePackage "mgh" "2.25.2"
+      "sha256-KdrWfPA/CicV8vNUjnrw/5w9QKda1sA1gXwiz7umR/o=";
 
   types-aiobotocore-mgn =
-    buildTypesAiobotocorePackage "mgn" "2.25.1"
-      "sha256-xUe7nPbocz5X2KA23zhaIfgmzQuAt4GhTs3qjBb/Abs=";
+    buildTypesAiobotocorePackage "mgn" "2.25.2"
+      "sha256-nBPit2aPt6Zs9AQmji828swj1A9L5W3olAc95fTQl3s=";
 
   types-aiobotocore-migration-hub-refactor-spaces =
-    buildTypesAiobotocorePackage "migration-hub-refactor-spaces" "2.25.1"
-      "sha256-KD70JU4ij1TCkFJpB9RdlhZtderHMmhnpVsB1Em0Uo8=";
+    buildTypesAiobotocorePackage "migration-hub-refactor-spaces" "2.25.2"
+      "sha256-XTHyGqOf67eu+bzyx0l+UpgIIA5uHfyltglvjhsD2l0=";
 
   types-aiobotocore-migrationhub-config =
-    buildTypesAiobotocorePackage "migrationhub-config" "2.25.1"
-      "sha256-/ofmxL+9WGzHimyeu/ubGjJY+1p/ksnvppfGFeVPqTM=";
+    buildTypesAiobotocorePackage "migrationhub-config" "2.25.2"
+      "sha256-8q5MpnVx1zo1C4Olk93vFw8pHhVQ7jRlfX1nyIBZBzw=";
 
   types-aiobotocore-migrationhuborchestrator =
-    buildTypesAiobotocorePackage "migrationhuborchestrator" "2.25.1"
-      "sha256-86pMcT1xCW3k946V/HW3tKMNlElyyvUGQqLJ9C2P2LY=";
+    buildTypesAiobotocorePackage "migrationhuborchestrator" "2.25.2"
+      "sha256-njVMttM0+1igXhrM3OIUTLv+97K4/Ast1NFwzFvAVCM=";
 
   types-aiobotocore-migrationhubstrategy =
-    buildTypesAiobotocorePackage "migrationhubstrategy" "2.25.1"
-      "sha256-lHQDdeXh1nghHrPHFO2wK3l6H+RWrFlCo+v8hDYZmJo=";
+    buildTypesAiobotocorePackage "migrationhubstrategy" "2.25.2"
+      "sha256-PREO7b44lmLvdug5wuQaKskllldvil1q8gDYT3kJjoQ=";
 
   types-aiobotocore-mobile =
     buildTypesAiobotocorePackage "mobile" "2.13.2"
       "sha256-OxB91BCAmYnY72JBWZaBlEkpAxN2Q5aY4i1Pt3eD9hc=";
 
   types-aiobotocore-mq =
-    buildTypesAiobotocorePackage "mq" "2.25.1"
-      "sha256-3TJ5O1KpWvle27CkVYqMaNCmtmia6bM95y3aWFIIqek=";
+    buildTypesAiobotocorePackage "mq" "2.25.2"
+      "sha256-AwInW1TGOr0n0TUYizaSQ0o9Y6ckmmmep6mAh6XW+Bo=";
 
   types-aiobotocore-mturk =
-    buildTypesAiobotocorePackage "mturk" "2.25.1"
-      "sha256-I8EU1PauqhHehGanWoNf7i+JBiWhF4LOBP1ZPVGH54k=";
+    buildTypesAiobotocorePackage "mturk" "2.25.2"
+      "sha256-HbrgZBxr2QtDwJgd42zZV+4BoRtYsri6lYe2oYWnwMs=";
 
   types-aiobotocore-mwaa =
-    buildTypesAiobotocorePackage "mwaa" "2.25.1"
-      "sha256-Bom5eQ5HpMB9+PZoWSPYHB5jla3cFrY2BCyDckWabGI=";
+    buildTypesAiobotocorePackage "mwaa" "2.25.2"
+      "sha256-6+pGFAX1sTopVOBq1eRM9c154OB7zFHP3aKjSzLSjcc=";
 
   types-aiobotocore-neptune =
-    buildTypesAiobotocorePackage "neptune" "2.25.1"
-      "sha256-FbRm4kz/GxaDs3YSTlSkYpLePhaoylV77/gclb3V2Ew=";
+    buildTypesAiobotocorePackage "neptune" "2.25.2"
+      "sha256-Zpl4Anrfd58nH8vkgnFA6qLlVZkG4ZEqBn5vW6ZXQOA=";
 
   types-aiobotocore-network-firewall =
-    buildTypesAiobotocorePackage "network-firewall" "2.25.1"
-      "sha256-ivJTgZ4/5Ztk7ZJWkb8uAdIv9d5QX0QbhnfNU4n6AVA=";
+    buildTypesAiobotocorePackage "network-firewall" "2.25.2"
+      "sha256-/7j4x/JPaKBhHo7yN2wkPMbg9qLRPHTwlRO+6Gkc6Lg=";
 
   types-aiobotocore-networkmanager =
-    buildTypesAiobotocorePackage "networkmanager" "2.25.1"
-      "sha256-VBHKK+AQTPOy5thvl1gH/DfOajQlCrupa+rP3h7VqfY=";
+    buildTypesAiobotocorePackage "networkmanager" "2.25.2"
+      "sha256-ZiIH0oKyydgSqE7FaI2xKjdNKK+5mskPc1NytqVw5js=";
 
   types-aiobotocore-nimble =
     buildTypesAiobotocorePackage "nimble" "2.15.2"
       "sha256-PChX5Jbgr0d1YaTZU9AbX3cM7NrhkyunK6/X3l+I8Q0=";
 
   types-aiobotocore-oam =
-    buildTypesAiobotocorePackage "oam" "2.25.1"
-      "sha256-o4I8eY/BG7ejzov3Hs1y4TKfZuXfbdv6jjqAn9aNPXA=";
+    buildTypesAiobotocorePackage "oam" "2.25.2"
+      "sha256-w3SEOR6BQSA5ckP9HROOR4cAbo2+4D0hEZi26pCNMnU=";
 
   types-aiobotocore-omics =
-    buildTypesAiobotocorePackage "omics" "2.25.1"
-      "sha256-H/tLdJuHNEBI0w94YU295OIkskrFByN1ekighcati7Y=";
+    buildTypesAiobotocorePackage "omics" "2.25.2"
+      "sha256-PAG9T7YOsYdtWjZvUxNUIYnWYrizZHpmH78ayWmTCKY=";
 
   types-aiobotocore-opensearch =
-    buildTypesAiobotocorePackage "opensearch" "2.25.1"
-      "sha256-ZwQuf9rlfeSs44wgtPcJao0Lz5H2P89y7QBvluiBb0Y=";
+    buildTypesAiobotocorePackage "opensearch" "2.25.2"
+      "sha256-5nRwfDho/9yvcH0dYpxeCzVIQrF9J9dnv5Qm4WvZ5zA=";
 
   types-aiobotocore-opensearchserverless =
-    buildTypesAiobotocorePackage "opensearchserverless" "2.25.1"
-      "sha256-I0hnxRWGsRMt/Da8zSt0cuCbDvuKBK8HULbVyAGEg/A=";
+    buildTypesAiobotocorePackage "opensearchserverless" "2.25.2"
+      "sha256-saBUVPlT3ODQJ7Jk5G71R7Qq7/L14qtXnRMcCd+0OY4=";
 
   types-aiobotocore-opsworks =
     buildTypesAiobotocorePackage "opsworks" "2.24.2"
@@ -1025,80 +1025,80 @@ in
       "sha256-i+qoE5XXWpZ7dQeDagkD2MhnBjwbKTJYyZxATDh8h9M=";
 
   types-aiobotocore-organizations =
-    buildTypesAiobotocorePackage "organizations" "2.25.1"
-      "sha256-7ov9lMR1nexCkf65s/pgCy9Vtd+VUyJO+6Bkkv7eShQ=";
+    buildTypesAiobotocorePackage "organizations" "2.25.2"
+      "sha256-dO8JE2pbNt6rDAuHiwbMuTg2V0fKCGjc6d/Cd3OVhUQ=";
 
   types-aiobotocore-osis =
-    buildTypesAiobotocorePackage "osis" "2.25.1"
-      "sha256-1V/emHqt57hc5v6zz5Bgrwbov89vRnYC/B/LWdtHsMc=";
+    buildTypesAiobotocorePackage "osis" "2.25.2"
+      "sha256-0nk0lMWUbuINhT60pLowKwAaOGQbd/9sf7wEj2lNhl0=";
 
   types-aiobotocore-outposts =
-    buildTypesAiobotocorePackage "outposts" "2.25.1"
-      "sha256-VQLNTzlQy8ZbIwZQOLmFsROFFx4Uz26uHknHX6Dw4rQ=";
+    buildTypesAiobotocorePackage "outposts" "2.25.2"
+      "sha256-c/1DDIt+MBMt09ZZHMAnvG81lDq9AFisbIWIBG6D5MQ=";
 
   types-aiobotocore-panorama =
-    buildTypesAiobotocorePackage "panorama" "2.25.1"
-      "sha256-WqjtRmV9Xqi4UjZKemRTmMCwGD9cg2BBqbAdyWmV5nc=";
+    buildTypesAiobotocorePackage "panorama" "2.25.2"
+      "sha256-Zv0yeFB5IpB3kqlOowfNswR+G5OX82OJBt1QUisDlos=";
 
   types-aiobotocore-payment-cryptography =
-    buildTypesAiobotocorePackage "payment-cryptography" "2.25.1"
-      "sha256-7PZBzCSMCey5zHsCVL60fwO03iEOlgUtEbYPVLZ76zM=";
+    buildTypesAiobotocorePackage "payment-cryptography" "2.25.2"
+      "sha256-KrTughOEYCqNpOv/Y2jmJfRexOrzV5yJomLPTQRdXjs=";
 
   types-aiobotocore-payment-cryptography-data =
-    buildTypesAiobotocorePackage "payment-cryptography-data" "2.25.1"
-      "sha256-t36O6v9iAG71B+P+P0LrhcV0n2312AzG+6Tnh6xwK8Q=";
+    buildTypesAiobotocorePackage "payment-cryptography-data" "2.25.2"
+      "sha256-jzGSwUw5gsrr+1tu3+Rdo1K0d5AqmcUUI8nolCOT4bU=";
 
   types-aiobotocore-personalize =
-    buildTypesAiobotocorePackage "personalize" "2.25.1"
-      "sha256-Cx3PnSzQ5dKSi7VwZv6raRfDnHyDb9PB/BHoUFRvkGY=";
+    buildTypesAiobotocorePackage "personalize" "2.25.2"
+      "sha256-8spaqQ+k5d7WGon8CiJ5LgbhsZBGexTHby5YGnL1a4U=";
 
   types-aiobotocore-personalize-events =
-    buildTypesAiobotocorePackage "personalize-events" "2.25.1"
-      "sha256-cGvvL0lSjJZUP7AuoduimNNLT8GHPr66M8iggZzEIEA=";
+    buildTypesAiobotocorePackage "personalize-events" "2.25.2"
+      "sha256-s1GQchI2rx+ajsA5UENZVWo9KY1GMdUMDpLt7ePGImg=";
 
   types-aiobotocore-personalize-runtime =
-    buildTypesAiobotocorePackage "personalize-runtime" "2.25.1"
-      "sha256-eHZiMuSIfanu06cxxtHeF3k1jQzjU/5WQA00zzUVQQ0=";
+    buildTypesAiobotocorePackage "personalize-runtime" "2.25.2"
+      "sha256-bhEeoFRrlzCM9FoulsT/DRkye/pfFIrn4dzk30s2RKQ=";
 
   types-aiobotocore-pi =
-    buildTypesAiobotocorePackage "pi" "2.25.1"
-      "sha256-x26NLlWyh08auFYhA2bCr6VxyzQ+7w00LbKpTO7W/V0=";
+    buildTypesAiobotocorePackage "pi" "2.25.2"
+      "sha256-OUd0S5oRAdGqeajxHX59x25igGgFIhr7yAHMYqsQh1M=";
 
   types-aiobotocore-pinpoint =
-    buildTypesAiobotocorePackage "pinpoint" "2.25.1"
-      "sha256-Yyl+pY2nGiuDwjv3eg6XIntlNhc2pFrd/v0T1d7aTAQ=";
+    buildTypesAiobotocorePackage "pinpoint" "2.25.2"
+      "sha256-M2sQEvHFE0vV1l1eePhb54HGsJ2RrkaK2M9J0IVlfX8=";
 
   types-aiobotocore-pinpoint-email =
-    buildTypesAiobotocorePackage "pinpoint-email" "2.25.1"
-      "sha256-ywY0uaUrz49I2EvJpm4Jg9Wtl3OQzcYhGQBUsFF0atI=";
+    buildTypesAiobotocorePackage "pinpoint-email" "2.25.2"
+      "sha256-ZnMOcODdmzB/N6QCmCOSAyL2CXss1GcOU+Fh9Wyh+5g=";
 
   types-aiobotocore-pinpoint-sms-voice =
-    buildTypesAiobotocorePackage "pinpoint-sms-voice" "2.25.1"
-      "sha256-XuPuyCsSDdz3ETarckujmuILzm1UwzKXcxUmtPYBUCE=";
+    buildTypesAiobotocorePackage "pinpoint-sms-voice" "2.25.2"
+      "sha256-6F3QLsaPLU4BBtaONj2lKedt8oYaj+gAb1YUvwcmbzg=";
 
   types-aiobotocore-pinpoint-sms-voice-v2 =
-    buildTypesAiobotocorePackage "pinpoint-sms-voice-v2" "2.25.1"
-      "sha256-Mo8bMMauv+IX1v7Njzjix0+xgICqqWWOEBVilhAhVe4=";
+    buildTypesAiobotocorePackage "pinpoint-sms-voice-v2" "2.25.2"
+      "sha256-j7BCnRMXe9+d0kRJVaYEr54Bo+ujjS1Hi1yfjHCBkdE=";
 
   types-aiobotocore-pipes =
-    buildTypesAiobotocorePackage "pipes" "2.25.1"
-      "sha256-CUro+DiCxLkji1qCmQrVJRaaW5SHIYPOVd7+xRnLogw=";
+    buildTypesAiobotocorePackage "pipes" "2.25.2"
+      "sha256-3FqyC9tFQz0ZEW3TBgN5lHeaY5dCNnpIwxi7z+BL0hc=";
 
   types-aiobotocore-polly =
-    buildTypesAiobotocorePackage "polly" "2.25.1"
-      "sha256-4BZnldgRXtY6XfCymsAz7qIyR/0ctkYDtKKsCkrrPX0=";
+    buildTypesAiobotocorePackage "polly" "2.25.2"
+      "sha256-DIlOVgsbGsqMsAQRwr/YmDD/lW2UUyjLNppMn9VtfoU=";
 
   types-aiobotocore-pricing =
-    buildTypesAiobotocorePackage "pricing" "2.25.1"
-      "sha256-OgIvlBBFKsbEa20TNr78rZiJzDyBa7oLL7PP7F6UvmU=";
+    buildTypesAiobotocorePackage "pricing" "2.25.2"
+      "sha256-aSteb3n8TbdQxdOvmVRRcuwCRq6IE1/trY3wBuDW4io=";
 
   types-aiobotocore-privatenetworks =
     buildTypesAiobotocorePackage "privatenetworks" "2.22.0"
       "sha256-yaYvgVKcr3l2eq0dMzmQEZHxgblTLlVF9cZRnObiB7M=";
 
   types-aiobotocore-proton =
-    buildTypesAiobotocorePackage "proton" "2.25.1"
-      "sha256-C8IkedXkHQ3b7T64UmhsAyrWJkVyR6AosMJXPce2Hwg=";
+    buildTypesAiobotocorePackage "proton" "2.25.2"
+      "sha256-JnoxcrN0S/qZ3mhVqKxY7Nbf3kegEx5Xnc6ZxUKeeyE=";
 
   types-aiobotocore-qldb =
     buildTypesAiobotocorePackage "qldb" "2.24.2"
@@ -1109,200 +1109,200 @@ in
       "sha256-Lk9RLigcg4F/AsgKneBUoyPyeUh46ra+BLCw94b74eU=";
 
   types-aiobotocore-quicksight =
-    buildTypesAiobotocorePackage "quicksight" "2.25.1"
-      "sha256-Alqzh6EhFqB0+RW4Xj2Kcwm/Uf8WrmLV0gQJXBkNc3Q=";
+    buildTypesAiobotocorePackage "quicksight" "2.25.2"
+      "sha256-HnGgyqUvB+hjpqWPU24TAr5kJCYcPls9TsCqsXbWdcY=";
 
   types-aiobotocore-ram =
-    buildTypesAiobotocorePackage "ram" "2.25.1"
-      "sha256-NMFYqTWMzxAHQ1UoFXs736y9dGruQHPznQNa+Bz+gHc=";
+    buildTypesAiobotocorePackage "ram" "2.25.2"
+      "sha256-y4KEJDBFOwbSGuMdIhkb2ZK9Gh7axRBBaKcStagc6Ek=";
 
   types-aiobotocore-rbin =
-    buildTypesAiobotocorePackage "rbin" "2.25.1"
-      "sha256-MF4qteKqIeE5Ff/t77H0axItUZDN67ld5+69RLiasdU=";
+    buildTypesAiobotocorePackage "rbin" "2.25.2"
+      "sha256-WfqcriciQKLy4gQFNTbBU65R6b9o+WU2rPbVORigzh4=";
 
   types-aiobotocore-rds =
-    buildTypesAiobotocorePackage "rds" "2.25.1"
-      "sha256-ynDhs6cUED7FyN3lsW2qxj4C1+bu3iM4aJAmJVmkKNY=";
+    buildTypesAiobotocorePackage "rds" "2.25.2"
+      "sha256-BQ9R+G5QcH3iViK79qJ6s658fikXmKESHzkqjDz3i2M=";
 
   types-aiobotocore-rds-data =
-    buildTypesAiobotocorePackage "rds-data" "2.25.1"
-      "sha256-6e/kUWDGZIwF1kWncWG2zQYuOxIHqZxs/CdKlomGBCQ=";
+    buildTypesAiobotocorePackage "rds-data" "2.25.2"
+      "sha256-1hTSDOuk6kkscJJMSpxtzv+Yq842JC693qUULggw77g=";
 
   types-aiobotocore-redshift =
-    buildTypesAiobotocorePackage "redshift" "2.25.1"
-      "sha256-3gGMkI6XUd19SAlbUSPaeBEYjb6NpEdIjGbrOsGB3F0=";
+    buildTypesAiobotocorePackage "redshift" "2.25.2"
+      "sha256-o69QtsQL6+hicLZrEl9Ws6be8jYk38rS2qyFzKG8vnM=";
 
   types-aiobotocore-redshift-data =
-    buildTypesAiobotocorePackage "redshift-data" "2.25.1"
-      "sha256-Ed9TbzWal+6591Wa1/fsBfK1mUvG5Zhe/cWb0ajsXho=";
+    buildTypesAiobotocorePackage "redshift-data" "2.25.2"
+      "sha256-cM+3HLOFfWrEawh6po1zebYx/iw5FjYUvB+y0X1VeAM=";
 
   types-aiobotocore-redshift-serverless =
-    buildTypesAiobotocorePackage "redshift-serverless" "2.25.1"
-      "sha256-iIOlV1vhLTfgzef2wXSmuYjA7xnxHdIVvxGK41028DQ=";
+    buildTypesAiobotocorePackage "redshift-serverless" "2.25.2"
+      "sha256-xZsnMH6mKYIi17QlOqHRUbntwh6rLyZlvigN2M13qt8=";
 
   types-aiobotocore-rekognition =
-    buildTypesAiobotocorePackage "rekognition" "2.25.1"
-      "sha256-8oHNREd5Qzw6/WUbB9eS7DAuksxqy0C1M8at/wXWQts=";
+    buildTypesAiobotocorePackage "rekognition" "2.25.2"
+      "sha256-MPiEtnazV91O74r0iQ285THqbiLqoAWxb2OF1XXK2Ew=";
 
   types-aiobotocore-resiliencehub =
-    buildTypesAiobotocorePackage "resiliencehub" "2.25.1"
-      "sha256-REQPDlOxP0VvwWtgn8H6OllOZF7vUm0w0PTZG8TCMK8=";
+    buildTypesAiobotocorePackage "resiliencehub" "2.25.2"
+      "sha256-MemIUV9PmsV+1hmRJrzry5cWyZ+Sol8fwjpIT129em8=";
 
   types-aiobotocore-resource-explorer-2 =
-    buildTypesAiobotocorePackage "resource-explorer-2" "2.25.1"
-      "sha256-YhFtahge0fMdlLhjMCBVpb2vfXK79+C/pWU1LSprBPA=";
+    buildTypesAiobotocorePackage "resource-explorer-2" "2.25.2"
+      "sha256-P1hKQiKYdj2ENId6Xd17v2TAOH0cYJZs0M8l93yAdjA=";
 
   types-aiobotocore-resource-groups =
-    buildTypesAiobotocorePackage "resource-groups" "2.25.1"
-      "sha256-bNSc8duIR+enlHsx+tGodmYZKvhNEnCb89rME3d+olM=";
+    buildTypesAiobotocorePackage "resource-groups" "2.25.2"
+      "sha256-mehT32Cu11oq9/nAlrbBWG9Bk8Led/CXCm8Am7VoG8c=";
 
   types-aiobotocore-resourcegroupstaggingapi =
-    buildTypesAiobotocorePackage "resourcegroupstaggingapi" "2.25.1"
-      "sha256-CcyWYEZhkcsK4Cc0DEhhAtZO6l3f3JvayVGnVGLGPrQ=";
+    buildTypesAiobotocorePackage "resourcegroupstaggingapi" "2.25.2"
+      "sha256-aY46IDVal+xGidm+Ov4GyY+uz15nT8BWYR3dQu7uri4=";
 
   types-aiobotocore-robomaker =
     buildTypesAiobotocorePackage "robomaker" "2.24.2"
       "sha256-EczunxMisSO9t2iYzXuzTeFiNalu2EyDRIOE7TW5fOg=";
 
   types-aiobotocore-rolesanywhere =
-    buildTypesAiobotocorePackage "rolesanywhere" "2.25.1"
-      "sha256-sC1cBmmtTPD+OnNxhkBnOsV+OCrMrUihTI91ttp7mHc=";
+    buildTypesAiobotocorePackage "rolesanywhere" "2.25.2"
+      "sha256-oYy2x4IOVeM3RaphZGI/JcOnZ2+SSOinB7eOC14CsX0=";
 
   types-aiobotocore-route53 =
-    buildTypesAiobotocorePackage "route53" "2.25.1"
-      "sha256-2HxzyANMkFirBa3HRuuYVplBiWx4w3EmXXsDZc+J7yY=";
+    buildTypesAiobotocorePackage "route53" "2.25.2"
+      "sha256-ikAu/EgY3+nIli8hQ80hq806vZwfCSQpt4jS7EhE9Zw=";
 
   types-aiobotocore-route53-recovery-cluster =
-    buildTypesAiobotocorePackage "route53-recovery-cluster" "2.25.1"
-      "sha256-5dqjnOTv0ecdnFV4KBZC0cOWQetbQuYdQnZfhAQpTVM=";
+    buildTypesAiobotocorePackage "route53-recovery-cluster" "2.25.2"
+      "sha256-GUzOVHDOGQviIujhWIVC6y/gRawsqK4DRMhuam0N1/M=";
 
   types-aiobotocore-route53-recovery-control-config =
-    buildTypesAiobotocorePackage "route53-recovery-control-config" "2.25.1"
-      "sha256-VCy/iOKouH59pW/ZWYE3h3KpSYssykaJf+/fBtBn2jk=";
+    buildTypesAiobotocorePackage "route53-recovery-control-config" "2.25.2"
+      "sha256-Onq9TVrQ5J4EgkMfkajHnw7Gp4TSEbhyOFEnCODLwKw=";
 
   types-aiobotocore-route53-recovery-readiness =
-    buildTypesAiobotocorePackage "route53-recovery-readiness" "2.25.1"
-      "sha256-J1wgqdueLzQVc+WprQrM59/idKjsfkwH7RkhRzcRMeU=";
+    buildTypesAiobotocorePackage "route53-recovery-readiness" "2.25.2"
+      "sha256-c/qst7MAAyUIokZoh84dKs0i+WCoSQA6xh99YQvXZm4=";
 
   types-aiobotocore-route53domains =
-    buildTypesAiobotocorePackage "route53domains" "2.25.1"
-      "sha256-dx4o2BwambQ1yerQmcwb4o5kUSZtT5/d7r1rCR9mrxc=";
+    buildTypesAiobotocorePackage "route53domains" "2.25.2"
+      "sha256-MwG+PJGNx/NcZJDL8c3DCoE2FBseyTTFHdShEbbvevU=";
 
   types-aiobotocore-route53resolver =
-    buildTypesAiobotocorePackage "route53resolver" "2.25.1"
-      "sha256-36T8DEfhP6VRB8FaZDYj+Tf4X8veszit1T0oU4Iz9DE=";
+    buildTypesAiobotocorePackage "route53resolver" "2.25.2"
+      "sha256-SasLn3MEK1/MAHBVctJORkMTrZRsdEWjvemliiG1wb4=";
 
   types-aiobotocore-rum =
-    buildTypesAiobotocorePackage "rum" "2.25.1"
-      "sha256-jfqJnb/JBDwsSbWcU6Jx2QQ5aNxPsSlWSpelnHfI2oA=";
+    buildTypesAiobotocorePackage "rum" "2.25.2"
+      "sha256-WtE80P8/53O2uySzTADOue/V7GAbAEy6xvlC/cRhwIE=";
 
   types-aiobotocore-s3 =
-    buildTypesAiobotocorePackage "s3" "2.25.1"
-      "sha256-13Kd6kTRROmiT90X9NxmuYrXGGT5v2622wWVjg5Z0B4=";
+    buildTypesAiobotocorePackage "s3" "2.25.2"
+      "sha256-Z4qkJUka8ZvW0BHVns27t65+lYAO/dz0/VWatyyU4ZQ=";
 
   types-aiobotocore-s3control =
-    buildTypesAiobotocorePackage "s3control" "2.25.1"
-      "sha256-v3s/yij/m0wn0e2igkAsgEDxqLMFirlK+6A6S9IWfdE=";
+    buildTypesAiobotocorePackage "s3control" "2.25.2"
+      "sha256-Z5NdbrneSn+wvSV+cqEmhR+XJj75T5M9BM6T2jG8Fgg=";
 
   types-aiobotocore-s3outposts =
-    buildTypesAiobotocorePackage "s3outposts" "2.25.1"
-      "sha256-2xwgdhBz/3xbsDfHTUGEKDZIAKROjJMTY3r9d1CEyLk=";
+    buildTypesAiobotocorePackage "s3outposts" "2.25.2"
+      "sha256-oUsMwIvMhGH+aD7sWvXrNth6gAc9DRHI09cU+OrQTmg=";
 
   types-aiobotocore-sagemaker =
-    buildTypesAiobotocorePackage "sagemaker" "2.25.1"
-      "sha256-33vfo2JuPk0vhqq1zoh664pNVrZmOdxSs1WlwJfsSjA=";
+    buildTypesAiobotocorePackage "sagemaker" "2.25.2"
+      "sha256-m4js7ovT8ZA5aWixnabpG/MXwo3S+eWp5nW+u/t7MC0=";
 
   types-aiobotocore-sagemaker-a2i-runtime =
-    buildTypesAiobotocorePackage "sagemaker-a2i-runtime" "2.25.1"
-      "sha256-zr5xYHvjFEiMvPQQlpmm2iSqfvckpz8RIIWMJ04Y4yo=";
+    buildTypesAiobotocorePackage "sagemaker-a2i-runtime" "2.25.2"
+      "sha256-7Qr0XBjlFzkmVB7C7WOlYWKbwWcJEi8vy2RK+qn7nE0=";
 
   types-aiobotocore-sagemaker-edge =
-    buildTypesAiobotocorePackage "sagemaker-edge" "2.25.1"
-      "sha256-UjasiJChpyYY1aetTdb2asvKAEmACLcbNkwycxICYVU=";
+    buildTypesAiobotocorePackage "sagemaker-edge" "2.25.2"
+      "sha256-A4IS8g8NFTFbJSZphqo6a06E8eJD1BwdKbw7rIiu49o=";
 
   types-aiobotocore-sagemaker-featurestore-runtime =
-    buildTypesAiobotocorePackage "sagemaker-featurestore-runtime" "2.25.1"
-      "sha256-rod2cAIgI2J/jiNZgeYbv96C8iZESw4nkLYqjy433oA=";
+    buildTypesAiobotocorePackage "sagemaker-featurestore-runtime" "2.25.2"
+      "sha256-Nfe7eC1so9KdS04bDamIWhNigjbgq+Thz2RG/EMlhwI=";
 
   types-aiobotocore-sagemaker-geospatial =
-    buildTypesAiobotocorePackage "sagemaker-geospatial" "2.25.1"
-      "sha256-hO8+y0xp1rF1okyV2RvopptK7nzJMjzTzv6qO6riU/I=";
+    buildTypesAiobotocorePackage "sagemaker-geospatial" "2.25.2"
+      "sha256-fwo5NiBw7em2fbh3yVjHaTGRpjqAlY5iMQsty4HQDsg=";
 
   types-aiobotocore-sagemaker-metrics =
-    buildTypesAiobotocorePackage "sagemaker-metrics" "2.25.1"
-      "sha256-hT6WD7+R0VGCwZtm3d0R2E4edZiN63I17BT7PwjeflU=";
+    buildTypesAiobotocorePackage "sagemaker-metrics" "2.25.2"
+      "sha256-M0Jwr2wDThnN/svLt1gI5TznP1O1XnBOHb9NDzw7OyE=";
 
   types-aiobotocore-sagemaker-runtime =
-    buildTypesAiobotocorePackage "sagemaker-runtime" "2.25.1"
-      "sha256-kWck0jciPxQA7a9BSquGjmODtRU+czu/ALYQj1KCfb8=";
+    buildTypesAiobotocorePackage "sagemaker-runtime" "2.25.2"
+      "sha256-boH4ui89Xbftyk7e+udTMuReuYijeRoQd346S4pstzk=";
 
   types-aiobotocore-savingsplans =
-    buildTypesAiobotocorePackage "savingsplans" "2.25.1"
-      "sha256-uqadHqwcN/NqSE0bwOZ/nVSjIsXTYzT7ukKqFy7932Q=";
+    buildTypesAiobotocorePackage "savingsplans" "2.25.2"
+      "sha256-X0/zJsYNPHqTLwgCWMNnuWluFbzNudOfwLZC/8/3418=";
 
   types-aiobotocore-scheduler =
-    buildTypesAiobotocorePackage "scheduler" "2.25.1"
-      "sha256-Jy+zO7oAZmCC1GXQlC0wTl8Yo8nTfRhHuS2c/QRZkFg=";
+    buildTypesAiobotocorePackage "scheduler" "2.25.2"
+      "sha256-4NkSUfG7f9xbiP/qejBrcM4/pVKs1nbTsEC3Ai9K1u4=";
 
   types-aiobotocore-schemas =
-    buildTypesAiobotocorePackage "schemas" "2.25.1"
-      "sha256-/XGQ0ZTB8nKpSmR/9/4fQQiG935A4LauI9IhMXkX6yg=";
+    buildTypesAiobotocorePackage "schemas" "2.25.2"
+      "sha256-LXIojO67yX5N7spXUUit67VnGXR7HGJ9mnAD38cyR1M=";
 
   types-aiobotocore-sdb =
-    buildTypesAiobotocorePackage "sdb" "2.25.1"
-      "sha256-0QSS2edC+Zu+ejGHqcD1BM6Bpe7U8YIL8UL6irzqnb4=";
+    buildTypesAiobotocorePackage "sdb" "2.25.2"
+      "sha256-KLojew5L5OZJORFqnX+iOYc+NuSacKIhIuLNaO53Uhg=";
 
   types-aiobotocore-secretsmanager =
-    buildTypesAiobotocorePackage "secretsmanager" "2.25.1"
-      "sha256-3jTwBTOOlz6S1PE5J0bs/0D4gYTj9NrIbu9HVvwYyYE=";
+    buildTypesAiobotocorePackage "secretsmanager" "2.25.2"
+      "sha256-QDsOrUlDEXfIbxa1Ij5t3R/PRUVzIgZHsk4Fnu6t9vI=";
 
   types-aiobotocore-securityhub =
-    buildTypesAiobotocorePackage "securityhub" "2.25.1"
-      "sha256-5CLojBa5NT6SiX2MIMK0x8Dn9hrgsgcrXtrGfjLU9hU=";
+    buildTypesAiobotocorePackage "securityhub" "2.25.2"
+      "sha256-X3m2pYT//vWq1d+8PRka2eDv4l3CiLH2ZuVLGM98V+8=";
 
   types-aiobotocore-securitylake =
-    buildTypesAiobotocorePackage "securitylake" "2.25.1"
-      "sha256-pCF+YoOT0JyHzFJuDQZVOsU/gXoVwRHNMp5jA4NFNdY=";
+    buildTypesAiobotocorePackage "securitylake" "2.25.2"
+      "sha256-E6/FccJAlnTHCZjKG+JucSMHWEorpdYP+sKXwLKpyrk=";
 
   types-aiobotocore-serverlessrepo =
-    buildTypesAiobotocorePackage "serverlessrepo" "2.25.1"
-      "sha256-a2j9C13E2wPn2ihrI2Uj4rKQwq0kNF7yWN+3HP//MaA=";
+    buildTypesAiobotocorePackage "serverlessrepo" "2.25.2"
+      "sha256-g6l/6KFa73MYE0PSvl6PEdfHuE3ij0TNPqx5+dK1udg=";
 
   types-aiobotocore-service-quotas =
-    buildTypesAiobotocorePackage "service-quotas" "2.25.1"
-      "sha256-c4mD5zrUirartw35srgRiaTAwL0r1HgU4pgg2sr2g4o=";
+    buildTypesAiobotocorePackage "service-quotas" "2.25.2"
+      "sha256-NjfZsVuaB5zI3/5EuM15D7mM6lHVRTz6KrMI2B+nbeU=";
 
   types-aiobotocore-servicecatalog =
-    buildTypesAiobotocorePackage "servicecatalog" "2.25.1"
-      "sha256-+Tn50szRX2GsJ0rcEzXVOVg/uz5MUPlI6xqfgxh2EEE=";
+    buildTypesAiobotocorePackage "servicecatalog" "2.25.2"
+      "sha256-uzQaPQZFCzv6VUDJxHdGa948VJCxn2NznHVpEohXzx0=";
 
   types-aiobotocore-servicecatalog-appregistry =
-    buildTypesAiobotocorePackage "servicecatalog-appregistry" "2.25.1"
-      "sha256-0Wg6O+Zo9Dn1Okb3IDemWt2jc+3VZpmHlf+DzMoMkK4=";
+    buildTypesAiobotocorePackage "servicecatalog-appregistry" "2.25.2"
+      "sha256-plc4BQ4qAGknWErN2ebG7Qa4yfIZ53VdWXGLWGj3FYk=";
 
   types-aiobotocore-servicediscovery =
-    buildTypesAiobotocorePackage "servicediscovery" "2.25.1"
-      "sha256-5Kgi5daBavtNVS4YUOO7g90dJnmdLdELC07wI7ePcXM=";
+    buildTypesAiobotocorePackage "servicediscovery" "2.25.2"
+      "sha256-boUZCGEBYg8su3BhK8MaBywQhQy5vShB7qlvXhA+W8Y=";
 
   types-aiobotocore-ses =
-    buildTypesAiobotocorePackage "ses" "2.25.1"
-      "sha256-CKGPfkrN1HyMdsa//DJ7Bch7Y1thc+MVLQV0Jji4YJw=";
+    buildTypesAiobotocorePackage "ses" "2.25.2"
+      "sha256-fHv1A31/W1iyxflLNgdJVISL4fXOu94w+DnkWmEWHbk=";
 
   types-aiobotocore-sesv2 =
-    buildTypesAiobotocorePackage "sesv2" "2.25.1"
-      "sha256-bYgAoR6KZV3p7uB1RxBjDwmrbT/y9d2qqRm8LaubAGA=";
+    buildTypesAiobotocorePackage "sesv2" "2.25.2"
+      "sha256-xHqQJ/bLmwGjYJUvLS5ReaG9RB4IrWI7LDMR6jeYqyY=";
 
   types-aiobotocore-shield =
-    buildTypesAiobotocorePackage "shield" "2.25.1"
-      "sha256-T0oAXM+In4CULYQ2VGC2klP0kDRHbT5upNxWy3HZvpA=";
+    buildTypesAiobotocorePackage "shield" "2.25.2"
+      "sha256-AR/Ou5K0uL/056VW/fSxtyxQCEmI0aRmAg0aKYCxAEc=";
 
   types-aiobotocore-signer =
-    buildTypesAiobotocorePackage "signer" "2.25.1"
-      "sha256-aSv3CpJFP/1QPzE5zCNeG/+fJZv/HflupdjiBlklB5U=";
+    buildTypesAiobotocorePackage "signer" "2.25.2"
+      "sha256-UwuSnhTOygGyR2SOoUjbNJBOlA+kXVK5Z/5482kIsRU=";
 
   types-aiobotocore-simspaceweaver =
-    buildTypesAiobotocorePackage "simspaceweaver" "2.25.1"
-      "sha256-8rheniPeQXu5Utno3uYGSiKoFWKAl2nwsAHWGpYp0OQ=";
+    buildTypesAiobotocorePackage "simspaceweaver" "2.25.2"
+      "sha256-pirV04Q1tTL/SsA4TbwmCXXYWTfFQt+cADu0inYIlOk=";
 
   types-aiobotocore-sms =
     buildTypesAiobotocorePackage "sms" "2.24.2"
@@ -1313,162 +1313,162 @@ in
       "sha256-nlg8QppdMa4MMLUQZXcxnypzv5II9PqEtuVc09UmjKU=";
 
   types-aiobotocore-snow-device-management =
-    buildTypesAiobotocorePackage "snow-device-management" "2.25.1"
-      "sha256-tf50jHZwJH1TV8RLgtrysdZE2pou/csX2kHMIxpMVe4=";
+    buildTypesAiobotocorePackage "snow-device-management" "2.25.2"
+      "sha256-1wLvRk7FyWumejawyrHkc2RKipe/xyRYgU3fdX9HADM=";
 
   types-aiobotocore-snowball =
-    buildTypesAiobotocorePackage "snowball" "2.25.1"
-      "sha256-bTE0DdrDoqsMaaYzCAf83e3b9jiSjtSQXSGOz8idZA0=";
+    buildTypesAiobotocorePackage "snowball" "2.25.2"
+      "sha256-V3aFIrmtrK0zILT2/7MwDXBdKhAanWSaOkGUG8EzeXE=";
 
   types-aiobotocore-sns =
-    buildTypesAiobotocorePackage "sns" "2.25.1"
-      "sha256-TIKKaHH1EKBi7pku8Mm7ioQk8Wmvaf930QAfsBWKoC4=";
+    buildTypesAiobotocorePackage "sns" "2.25.2"
+      "sha256-6LQYAP8vd11/aO4HlXKZ79x13CR5Ww3leaf5T+iTgts=";
 
   types-aiobotocore-sqs =
-    buildTypesAiobotocorePackage "sqs" "2.25.1"
-      "sha256-D2p2YaTgLgnFruSxpiQrCctoG3ACdQAYSv2cL11z0dA=";
+    buildTypesAiobotocorePackage "sqs" "2.25.2"
+      "sha256-YLOPTt5tg8xr2C2ysHIamDzVAQ8c+njtqo5bOAkXsHc=";
 
   types-aiobotocore-ssm =
-    buildTypesAiobotocorePackage "ssm" "2.25.1"
-      "sha256-lP7Yb20X072jM8RxF23S0GnU7JA8fk3eETC3HeqpU9o=";
+    buildTypesAiobotocorePackage "ssm" "2.25.2"
+      "sha256-X6oz36PvyB9q8GZsS4MjPfgYcyMN6l8xgjOUT/9zh68=";
 
   types-aiobotocore-ssm-contacts =
-    buildTypesAiobotocorePackage "ssm-contacts" "2.25.1"
-      "sha256-yA3+GRPLt0kery3/6bZEdYoQFXkJzL0X/Z6O8VEqMfk=";
+    buildTypesAiobotocorePackage "ssm-contacts" "2.25.2"
+      "sha256-5zWlITNHtAHHIpjtxYtPib7KVxk/Jt/Dd9iJtCw3dLM=";
 
   types-aiobotocore-ssm-incidents =
-    buildTypesAiobotocorePackage "ssm-incidents" "2.25.1"
-      "sha256-PwfHjcjp3QULZ8RwBwVLHOYM2Xpu6zaxhz2l5cvM4s8=";
+    buildTypesAiobotocorePackage "ssm-incidents" "2.25.2"
+      "sha256-2iNhPY2eaU+AO5lo9clycd0gDQjDAs1wZf8QyPcMS+s=";
 
   types-aiobotocore-ssm-sap =
-    buildTypesAiobotocorePackage "ssm-sap" "2.25.1"
-      "sha256-0VKoinD0qL3qlx9tsuOPSjpS6kMZVvlNJPmt7vtqT18=";
+    buildTypesAiobotocorePackage "ssm-sap" "2.25.2"
+      "sha256-307LaZUb5nozKZpGeWXQa7QzhCFCqtHvZUqpRGRMk1g=";
 
   types-aiobotocore-sso =
-    buildTypesAiobotocorePackage "sso" "2.25.1"
-      "sha256-NtGZGmiqsUDfx6/Mgod9foxHsN79SmWhPgSm+f7DZ8s=";
+    buildTypesAiobotocorePackage "sso" "2.25.2"
+      "sha256-QW2nIHxE+Ln//tAza0l4eJLhD+hOZkS3yUtAkNI0jC8=";
 
   types-aiobotocore-sso-admin =
-    buildTypesAiobotocorePackage "sso-admin" "2.25.1"
-      "sha256-RC4ZODQkzpGrYJFdTXAoDINnHnn7Mx13KntJFYWRdCc=";
+    buildTypesAiobotocorePackage "sso-admin" "2.25.2"
+      "sha256-5zg/JlCVsW9nS9SAgXut2efHftfHLMjX82hPuJy2ksA=";
 
   types-aiobotocore-sso-oidc =
-    buildTypesAiobotocorePackage "sso-oidc" "2.25.1"
-      "sha256-mMiaTQeCQipDPU7yeEp/vBM79UX2z8ykQZ9NkP4/TrE=";
+    buildTypesAiobotocorePackage "sso-oidc" "2.25.2"
+      "sha256-wxn2CFcKeTHQ7krf0ma+GVtj74Kkj/p6jUE5OLcRlF0=";
 
   types-aiobotocore-stepfunctions =
-    buildTypesAiobotocorePackage "stepfunctions" "2.25.1"
-      "sha256-hgaJ33L3J7E34vzjIX3mmPeryPCwvT6bsIri0ydxuIE=";
+    buildTypesAiobotocorePackage "stepfunctions" "2.25.2"
+      "sha256-MbW+UDqsRKf70ir45sptYlHR3KERTL85XhYWiejki/o=";
 
   types-aiobotocore-storagegateway =
-    buildTypesAiobotocorePackage "storagegateway" "2.25.1"
-      "sha256-G5PzzfZQHL+rlxjAnknjaQ8qLWKzYM9KZb2FNQnT+EY=";
+    buildTypesAiobotocorePackage "storagegateway" "2.25.2"
+      "sha256-E7L7+KuSakHszktTGwMHKupMfu/jNJkNgmWjLVSHpAc=";
 
   types-aiobotocore-sts =
-    buildTypesAiobotocorePackage "sts" "2.25.1"
-      "sha256-NCgBo+f70ag0P0/5K9j9qjHKlmFYyH4hv9BJbEAvBSc=";
+    buildTypesAiobotocorePackage "sts" "2.25.2"
+      "sha256-E0InEkPQP9jUoeq1ZtkTf3Dscju2rWE2acdBUqw6BCc=";
 
   types-aiobotocore-support =
-    buildTypesAiobotocorePackage "support" "2.25.1"
-      "sha256-5teV0lI4CmF85kT+drAsEkIhgo35g5ighO56xuzwzKc=";
+    buildTypesAiobotocorePackage "support" "2.25.2"
+      "sha256-hDpBS5hZdlS7+3gQEyZxfZEq3lKUI55KIDD8IwaCXBY=";
 
   types-aiobotocore-support-app =
-    buildTypesAiobotocorePackage "support-app" "2.25.1"
-      "sha256-SEg5HRuZeM6sM9fo6Xhyb3PSJqGTA2rzfQme86Wk4OU=";
+    buildTypesAiobotocorePackage "support-app" "2.25.2"
+      "sha256-5yQd+l6oIaUO9GRNysKXBu3XViKofbUYJey9eO/5rmk=";
 
   types-aiobotocore-swf =
-    buildTypesAiobotocorePackage "swf" "2.25.1"
-      "sha256-J909yOVc3k5L/+D2A1X/lQeUj5QAZZseRclm19PPU+g=";
+    buildTypesAiobotocorePackage "swf" "2.25.2"
+      "sha256-VLYDLm6OC2AuvKZSdDdWnYUqeMhOvzH1X8nz7T8gXi4=";
 
   types-aiobotocore-synthetics =
-    buildTypesAiobotocorePackage "synthetics" "2.25.1"
-      "sha256-avrQl5UDznK9XeHrT8mrqgsGVtHYQnIoH5QELCsZQgs=";
+    buildTypesAiobotocorePackage "synthetics" "2.25.2"
+      "sha256-PDnh4RIE2M9IGnIObZpyfwitCbwwDMdO1Cd2I96F19E=";
 
   types-aiobotocore-textract =
-    buildTypesAiobotocorePackage "textract" "2.25.1"
-      "sha256-NJ4c0IbysfJj9g2vVN2My4cjZmrfPPXZltfcx4wyz+Y=";
+    buildTypesAiobotocorePackage "textract" "2.25.2"
+      "sha256-uKz1pPOWo474dOSuvegbDYEmvdFP0NAdNPJInjbp4XQ=";
 
   types-aiobotocore-timestream-query =
-    buildTypesAiobotocorePackage "timestream-query" "2.25.1"
-      "sha256-IQTvO1eg+FZQBgwPYhOWicf0UepFZcC9co2KFsY2tXs=";
+    buildTypesAiobotocorePackage "timestream-query" "2.25.2"
+      "sha256-rCyZ7XTSufUWNILASHToO9hX5lqoG11GNx55rKSbEbY=";
 
   types-aiobotocore-timestream-write =
-    buildTypesAiobotocorePackage "timestream-write" "2.25.1"
-      "sha256-tTLiDEhn1yNKAr2YVvMlwMFgcaGRCn/sgB/2s9wTH/4=";
+    buildTypesAiobotocorePackage "timestream-write" "2.25.2"
+      "sha256-tMnAN2/aFHXDWlG+6xfB9l3x0NZYxx1OFCdYuSAg3sg=";
 
   types-aiobotocore-tnb =
-    buildTypesAiobotocorePackage "tnb" "2.25.1"
-      "sha256-XZDMQfEqTof4t/Ib/CTAC7MtI+q4XYm/yIagLpM8lxo=";
+    buildTypesAiobotocorePackage "tnb" "2.25.2"
+      "sha256-nLVbqJ/EmnIjNDHEiNvvt9ERgFgzN1h3StKoJRxhDWs=";
 
   types-aiobotocore-transcribe =
-    buildTypesAiobotocorePackage "transcribe" "2.25.1"
-      "sha256-WUpjeRnFUypY/u7/yTeEAETHQxxiYfjmsgWzYTeoY/Y=";
+    buildTypesAiobotocorePackage "transcribe" "2.25.2"
+      "sha256-QLd7BD5aQISweJwtpkZqvXnWrZFI6mtlsH2Cqy2m0qA=";
 
   types-aiobotocore-transfer =
-    buildTypesAiobotocorePackage "transfer" "2.25.1"
-      "sha256-tn/drUwCeBR512eVttK8fV3Anueh09XJ/jazATKfGvM=";
+    buildTypesAiobotocorePackage "transfer" "2.25.2"
+      "sha256-xV3U/3sm95AvdaoB7Gbt4TBZmaB/3Vr5DPWDgVBSzJY=";
 
   types-aiobotocore-translate =
-    buildTypesAiobotocorePackage "translate" "2.25.1"
-      "sha256-Ix5h8GkPJfMGul/SrN3V2Y1FMGwMmc+M/smTrP+eeu4=";
+    buildTypesAiobotocorePackage "translate" "2.25.2"
+      "sha256-OnwTrcl5IivstCBPxL5L1FHzOHkgoP4ckt78ROjI76o=";
 
   types-aiobotocore-verifiedpermissions =
-    buildTypesAiobotocorePackage "verifiedpermissions" "2.25.1"
-      "sha256-1r1U5sh45xD8gepfm+4RVCh9dkXd0ce0nSaNCcbXGxk=";
+    buildTypesAiobotocorePackage "verifiedpermissions" "2.25.2"
+      "sha256-hyHQ2pKSwsfiATWjG0A+Th4h7S1t4hpZV2XMpxVuo2E=";
 
   types-aiobotocore-voice-id =
-    buildTypesAiobotocorePackage "voice-id" "2.25.1"
-      "sha256-KV7C7b7pOUbF2vR1e1D+COg4gcv03Fo1WxTK265OF/s=";
+    buildTypesAiobotocorePackage "voice-id" "2.25.2"
+      "sha256-HBVCiam1snON2/ofnBZeLgFwtXksftt/wU97VO8selU=";
 
   types-aiobotocore-vpc-lattice =
-    buildTypesAiobotocorePackage "vpc-lattice" "2.25.1"
-      "sha256-TSU+o55xTECgvUj9IJZOOTaTcRBj+ZyD+UzVPOBd2KE=";
+    buildTypesAiobotocorePackage "vpc-lattice" "2.25.2"
+      "sha256-mesor2Mn8DCTrsS1jqJUzvQryqzDfay6CsuXwdZI46o=";
 
   types-aiobotocore-waf =
-    buildTypesAiobotocorePackage "waf" "2.25.1"
-      "sha256-CTP+nEVc3xo7vOJci9+6eSCxO9V2m6AyT87bufEf+BQ=";
+    buildTypesAiobotocorePackage "waf" "2.25.2"
+      "sha256-y0BWcRKW3SE2DdsvMS6oe4jz6h1ksBp4BwbQ0jB6M6g=";
 
   types-aiobotocore-waf-regional =
-    buildTypesAiobotocorePackage "waf-regional" "2.25.1"
-      "sha256-NFeBg4RI3rumIRNpResrvWvwS3EJIICGPpjwk0Usi3o=";
+    buildTypesAiobotocorePackage "waf-regional" "2.25.2"
+      "sha256-q461MckctNY7+vfJnbWSTJaG4xsG+lXieujmoScEIZ0=";
 
   types-aiobotocore-wafv2 =
-    buildTypesAiobotocorePackage "wafv2" "2.25.1"
-      "sha256-LzXnnD7y5ce3u9dYmWCXI196SEjnyNDKypd+1SvFPIo=";
+    buildTypesAiobotocorePackage "wafv2" "2.25.2"
+      "sha256-dJihdjOMtnnrihFTA5AlB3jJ5auiwhr+GjOwFTWu5ow=";
 
   types-aiobotocore-wellarchitected =
-    buildTypesAiobotocorePackage "wellarchitected" "2.25.1"
-      "sha256-Uz3KB7wefEnDkgctwYedWm6tugsh+Hl4tsSUcOa5d+0=";
+    buildTypesAiobotocorePackage "wellarchitected" "2.25.2"
+      "sha256-oCFtzcmkBb4DXzp1aNvbJHSDmVYzreK/9c4bD36vBpU=";
 
   types-aiobotocore-wisdom =
-    buildTypesAiobotocorePackage "wisdom" "2.25.1"
-      "sha256-HYhiSYnCfNcMrg8jg50KWPXoLURwtwsB83ipgrppvwk=";
+    buildTypesAiobotocorePackage "wisdom" "2.25.2"
+      "sha256-WpQwt6W1eFs18LiDdiCu23caJdz773IDlksFf0eqnoo=";
 
   types-aiobotocore-workdocs =
-    buildTypesAiobotocorePackage "workdocs" "2.25.1"
-      "sha256-Ra5jZjeZPOLF7qduM/m5C3GDyfRo9bEwip/ZI2BHtLc=";
+    buildTypesAiobotocorePackage "workdocs" "2.25.2"
+      "sha256-9omeJus64ob2dl5+XlC1NdpJUmFPypi7Ykut30rTWxo=";
 
   types-aiobotocore-worklink =
     buildTypesAiobotocorePackage "worklink" "2.15.1"
       "sha256-VvuxiybvGaehPqyVUYGO1bbVSQ0OYgk6LbzgoKLHF2c=";
 
   types-aiobotocore-workmail =
-    buildTypesAiobotocorePackage "workmail" "2.25.1"
-      "sha256-W6q0Skbf3pmG4HhGOk/3qdDhaO/JE1I/pSZk/V+gBh0=";
+    buildTypesAiobotocorePackage "workmail" "2.25.2"
+      "sha256-N78CJhAyGLeimpBaMALmO/L+WD10CL+6Y9DfY5zKvQw=";
 
   types-aiobotocore-workmailmessageflow =
-    buildTypesAiobotocorePackage "workmailmessageflow" "2.25.1"
-      "sha256-+5JPzpS1F/KNLHzCjnw7Msou4kZlAP/FLylcSgMfI9o=";
+    buildTypesAiobotocorePackage "workmailmessageflow" "2.25.2"
+      "sha256-5mnYGmH4f35KvnVLBM20dbFSKavvlT+frDD80R6QLFA=";
 
   types-aiobotocore-workspaces =
-    buildTypesAiobotocorePackage "workspaces" "2.25.1"
-      "sha256-LoTEJsKXnEDFT01wnwAPjsUdfWnNKRnnXGhFQo2vhOM=";
+    buildTypesAiobotocorePackage "workspaces" "2.25.2"
+      "sha256-hh35xtsO8A2r/neAaNkfTJTfH1Tmoi3ghPLlgAanMBQ=";
 
   types-aiobotocore-workspaces-web =
-    buildTypesAiobotocorePackage "workspaces-web" "2.25.1"
-      "sha256-5Zl/uK4FMTm2U+GyvlO/8MUyPre0//iWRU89bzmZkZw=";
+    buildTypesAiobotocorePackage "workspaces-web" "2.25.2"
+      "sha256-CiyBtyvaljno38C0A9kh6nNqZTF+t2htfEHvjg2zn9k=";
 
   types-aiobotocore-xray =
-    buildTypesAiobotocorePackage "xray" "2.25.1"
-      "sha256-1szHKPThLxDPWbjQBBxBA2SH0/lWAEGPYe0PMu6enq4=";
+    buildTypesAiobotocorePackage "xray" "2.25.2"
+      "sha256-96oY3VaT2gc7FdQ3GOOSVNXEm1LQLhM8ROFxetvRo3s=";
 }
diff --git a/pkgs/development/python-modules/types-aiobotocore/update.sh b/pkgs/development/python-modules/types-aiobotocore/update.sh
index 089a6b92267f..86ed1b610118 100755
--- a/pkgs/development/python-modules/types-aiobotocore/update.sh
+++ b/pkgs/development/python-modules/types-aiobotocore/update.sh
@@ -5,7 +5,7 @@ set -eu -o pipefail
 
 source_file=pkgs/development/python-modules/types-aiobotocore-packages/default.nix
 
-nix-update python312Packages.types-aiobotocore --commit --build
+nix-update python313Packages.types-aiobotocore --commit --build
 
 packages=(
   types-aiobotocore-accessanalyzer
@@ -66,11 +66,13 @@ packages=(
   types-aiobotocore-codebuild
   types-aiobotocore-codecatalyst
   types-aiobotocore-codecommit
+  types-aiobotocore-codeconnections
   types-aiobotocore-codedeploy
   types-aiobotocore-codeguru-reviewer
   types-aiobotocore-codeguru-security
   types-aiobotocore-codeguruprofiler
   types-aiobotocore-codepipeline
+  types-aiobotocore-codestar
   types-aiobotocore-codestar-connections
   types-aiobotocore-codestar-notifications
   types-aiobotocore-cognito-identity
@@ -83,16 +85,20 @@ packages=(
   types-aiobotocore-connect
   types-aiobotocore-connect-contact-lens
   types-aiobotocore-connectcampaigns
+  types-aiobotocore-connectcampaignsv2
   types-aiobotocore-connectcases
   types-aiobotocore-connectparticipant
+  types-aiobotocore-controlcatalog
   types-aiobotocore-controltower
   types-aiobotocore-cur
   types-aiobotocore-customer-profiles
   types-aiobotocore-databrew
   types-aiobotocore-dataexchange
   types-aiobotocore-datapipeline
+  types-aiobotocore-datazone
   types-aiobotocore-datasync
   types-aiobotocore-dax
+  types-aiobotocore-deadline
   types-aiobotocore-detective
   types-aiobotocore-devicefarm
   types-aiobotocore-devops-guru
@@ -104,6 +110,7 @@ packages=(
   types-aiobotocore-docdb-elastic
   types-aiobotocore-drs
   types-aiobotocore-ds
+  types-aiobotocore-dsql
   types-aiobotocore-dynamodb
   types-aiobotocore-dynamodbstreams
   types-aiobotocore-ebs
@@ -134,6 +141,7 @@ packages=(
   types-aiobotocore-forecast
   types-aiobotocore-forecastquery
   types-aiobotocore-frauddetector
+  types-aiobotocore-freetier
   types-aiobotocore-fsx
   types-aiobotocore-gamelift
   types-aiobotocore-glacier
@@ -160,7 +168,6 @@ packages=(
   types-aiobotocore-iotdeviceadvisor
   types-aiobotocore-iotevents
   types-aiobotocore-iotevents-data
-  types-aiobotocore-iotfleethub
   types-aiobotocore-iotfleetwise
   types-aiobotocore-iotsecuretunneling
   types-aiobotocore-iotsitewise
@@ -197,8 +204,6 @@ packages=(
   types-aiobotocore-location
   types-aiobotocore-logs
   types-aiobotocore-lookoutequipment
-  types-aiobotocore-lookoutmetrics
-  types-aiobotocore-lookoutvision
   types-aiobotocore-m2
   types-aiobotocore-machinelearning
   types-aiobotocore-macie2
@@ -235,8 +240,6 @@ packages=(
   types-aiobotocore-omics
   types-aiobotocore-opensearch
   types-aiobotocore-opensearchserverless
-  types-aiobotocore-opsworks
-  types-aiobotocore-opsworkscm
   types-aiobotocore-organizations
   types-aiobotocore-osis
   types-aiobotocore-outposts
@@ -255,8 +258,6 @@ packages=(
   types-aiobotocore-polly
   types-aiobotocore-pricing
   types-aiobotocore-proton
-  types-aiobotocore-qldb
-  types-aiobotocore-qldb-session
   types-aiobotocore-quicksight
   types-aiobotocore-ram
   types-aiobotocore-rbin
@@ -266,11 +267,11 @@ packages=(
   types-aiobotocore-redshift-data
   types-aiobotocore-redshift-serverless
   types-aiobotocore-rekognition
+  types-aiobotocore-repostspace
   types-aiobotocore-resiliencehub
   types-aiobotocore-resource-explorer-2
   types-aiobotocore-resource-groups
   types-aiobotocore-resourcegroupstaggingapi
-  types-aiobotocore-robomaker
   types-aiobotocore-rolesanywhere
   types-aiobotocore-route53
   types-aiobotocore-route53-recovery-cluster
@@ -278,6 +279,7 @@ packages=(
   types-aiobotocore-route53-recovery-readiness
   types-aiobotocore-route53domains
   types-aiobotocore-route53resolver
+  types-aiobotocore-rtbfabric
   types-aiobotocore-rum
   types-aiobotocore-s3
   types-aiobotocore-s3control
@@ -306,7 +308,6 @@ packages=(
   types-aiobotocore-shield
   types-aiobotocore-signer
   types-aiobotocore-simspaceweaver
-  types-aiobotocore-sms
   types-aiobotocore-snow-device-management
   types-aiobotocore-snowball
   types-aiobotocore-sns
diff --git a/pkgs/development/python-modules/uv-build/default.nix b/pkgs/development/python-modules/uv-build/default.nix
index 84840a3df9e1..e9111bd69b13 100644
--- a/pkgs/development/python-modules/uv-build/default.nix
+++ b/pkgs/development/python-modules/uv-build/default.nix
@@ -1,26 +1,34 @@
 {
   lib,
   pkgs,
+  fetchFromGitHub,
   buildPythonPackage,
   rustPlatform,
   callPackage,
 }:
 
-buildPythonPackage {
+buildPythonPackage rec {
   pname = "uv-build";
+  version = "0.9.7";
   pyproject = true;
 
-  inherit (pkgs.uv)
-    version
-    src
-    cargoDeps
-    ;
+  src = fetchFromGitHub {
+    owner = "astral-sh";
+    repo = "uv";
+    tag = version;
+    hash = "sha256-I0Oe6vaH7iQh+Ubp5RIk8Ol6Ni7OPu8HKX0fqLdewyk=";
+  };
 
   nativeBuildInputs = [
     rustPlatform.cargoSetupHook
     rustPlatform.maturinBuildHook
   ];
 
+  cargoDeps = rustPlatform.fetchCargoVendor {
+    inherit pname version src;
+    hash = "sha256-K/RP7EA0VAAI8TGx+VwfKPmyT6+x4p3kekuoMZ0/egc=";
+  };
+
   buildAndTestSubdir = "crates/uv-build";
 
   # $src/.github/workflows/build-binaries.yml#L139
@@ -32,7 +40,11 @@ buildPythonPackage {
   doCheck = false;
 
   # Run the tests of a package built by `uv_build`.
-  passthru.tests.built-by-uv = callPackage ./built-by-uv.nix { inherit (pkgs) uv; };
+  passthru = {
+    tests.built-by-uv = callPackage ./built-by-uv.nix { inherit (pkgs) uv; };
+
+    # updateScript is not needed here, as updating is done on staging
+  };
 
   meta = {
     description = "Minimal build backend for uv";
diff --git a/pkgs/development/tools/electron/CrabbyAvif-Switch-from-no_sanitize-cfi-to-sanitize-cfi-off-2.patch b/pkgs/development/tools/electron/CrabbyAvif-Switch-from-no_sanitize-cfi-to-sanitize-cfi-off-2.patch
new file mode 100644
index 000000000000..87140cbd11e6
--- /dev/null
+++ b/pkgs/development/tools/electron/CrabbyAvif-Switch-from-no_sanitize-cfi-to-sanitize-cfi-off-2.patch
@@ -0,0 +1,13 @@
+diff --git a/third_party/crabbyavif/src/src/reformat/libyuv.rs b/third_party/crabbyavif/src/src/reformat/libyuv.rs
+index dd12964..4ae9dc0 100644
+--- a/third_party/crabbyavif/src/src/reformat/libyuv.rs
++++ b/third_party/crabbyavif/src/src/reformat/libyuv.rs
+@@ -823,7 +823,7 @@ fn rgb_to_yuv_conversion_function(
+     }
+ }
+ 
+-#[cfg_attr(feature = "disable_cfi", no_sanitize(cfi))]
++#[cfg_attr(feature = "disable_cfi", sanitize(cfi = "off"))]
+ pub(crate) fn rgb_to_yuv(rgb: &rgb::Image, image: &mut image::Image) -> AvifResult<()> {
+     let conversion_function = rgb_to_yuv_conversion_function(rgb, image)?;
+     let plane_u8 = image.plane_ptrs_mut();
diff --git a/pkgs/development/tools/electron/common.nix b/pkgs/development/tools/electron/common.nix
index 1cc57988ff23..2fb4b0dccb19 100644
--- a/pkgs/development/tools/electron/common.nix
+++ b/pkgs/development/tools/electron/common.nix
@@ -106,6 +106,34 @@ in
         url = "https://github.com/chromium/chromium/commit/23d818d3c7fba4658248f17fd7b8993199242aa9.patch";
         hash = "sha256-JVv36PgU/rr34jrhgCyf4Pp8o5j2T8fD1xBVH1avT48=";
       })
+      # Fix build with Rust 1.91.0
+      # https://chromium-review.googlesource.com/c/chromium/src/+/6949745
+      (fetchpatch {
+        name = "Remove-unicode_width-from-rust-dependencies.patch";
+        url = "https://github.com/chromium/chromium/commit/0420449584e2afb7473393f536379efe194ba23c.patch";
+        hash = "sha256-2x1QoKkZEBfJw0hBjaErN/E47WrVfZvDngAXSIDzJs4=";
+      })
+      (fetchpatch {
+        name = "CrabbyAvif-Switch-from-no_sanitize-cfi-to-sanitize-cfi-off-1.patch";
+        url = "https://github.com/webmproject/CrabbyAvif/commit/4c70b98d1ebc8a210f2919be7ccabbcf23061cb5.patch";
+        extraPrefix = "third_party/crabbyavif/src/";
+        stripLen = 1;
+        hash = "sha256-E8/PmL+8+ZSoDO6L0/YOygIsliCDmcaBptXsi2L6ETQ=";
+      })
+      # backport of https://github.com/webmproject/CrabbyAvif/commit/3ba05863e84fd3acb4f4af2b4545221b317a2e55
+      ./CrabbyAvif-Switch-from-no_sanitize-cfi-to-sanitize-cfi-off-2.patch
+      # https://chromium-review.googlesource.com/c/chromium/src/+/6879484
+      (fetchpatch {
+        name = "crabbyavif-BUILD-gn-Temporarily-remove-disable_cfi-feature.patch";
+        url = "https://github.com/chromium/chromium/commit/e46275404d8f8a65ed84b3e583e9b78e4298acc7.patch";
+        hash = "sha256-2Dths53ervzCPKFbAVxeBHxtPHckxYhesJhaYZbxGSA=";
+      })
+      # https://chromium-review.googlesource.com/c/chromium/src/+/6960510
+      (fetchpatch {
+        name = "crabbyavif-BUILD-gn-Enable-disable_cfi-feature.patch";
+        url = "https://github.com/chromium/chromium/commit/9415f40bc6f853547f791e633be638c71368ce56.patch";
+        hash = "sha256-+M4gI77SoQ4dYIe/iGFgIwF1fS/6KQ8s16vj8ht/rik=";
+      })
     ];
 
   npmRoot = "third_party/node";
diff --git a/pkgs/os-specific/linux/nvidia-x11/default.nix b/pkgs/os-specific/linux/nvidia-x11/default.nix
index a7ed20f09ea9..ba2a6be25cc7 100644
--- a/pkgs/os-specific/linux/nvidia-x11/default.nix
+++ b/pkgs/os-specific/linux/nvidia-x11/default.nix
@@ -121,11 +121,11 @@ rec {
   # Vulkan developer beta driver
   # See here for more information: https://developer.nvidia.com/vulkan-driver
   vulkan_beta = generic rec {
-    version = "580.94.10";
+    version = "580.94.11";
     persistencedVersion = "580.95.05";
     settingsVersion = "580.95.05";
-    sha256_64bit = "sha256-Wybq98YiRN93EXs+KAcvxpZFcEdMTGEr7igGOYy9nAg=";
-    openSha256 = "sha256-OIN6JkveBGTJ4MpLiBy/+NOXz9yIkB23rY2OTTddYWg=";
+    sha256_64bit = "sha256-zcyK5mz8XubxdjdNbTJvaIHW1ehyV4jKZ8kNByKNDQU=";
+    openSha256 = "sha256-Eb6RJo4u08lWp1cs8WBThPH7r90Pj6MPtUYI5N3rOEI=";
     settingsSha256 = "sha256-F2wmUEaRrpR1Vz0TQSwVK4Fv13f3J9NJLtBe4UP2f14=";
     persistencedSha256 = "sha256-QCwxXQfG/Pa7jSTBB0xD3lsIofcerAWWAHKvWjWGQtg=";
     url = "https://developer.nvidia.com/downloads/vulkan-beta-${lib.concatStrings (lib.splitVersion version)}-linux";
diff --git a/pkgs/os-specific/linux/systemd/0012-path-util.h-add-placeholder-for-DEFAULT_PATH_NORMAL.patch b/pkgs/os-specific/linux/systemd/0012-path-util.h-add-placeholder-for-DEFAULT_PATH_NORMAL.patch
index 1168d1249858..e49f506639d5 100644
--- a/pkgs/os-specific/linux/systemd/0012-path-util.h-add-placeholder-for-DEFAULT_PATH_NORMAL.patch
+++ b/pkgs/os-specific/linux/systemd/0012-path-util.h-add-placeholder-for-DEFAULT_PATH_NORMAL.patch
@@ -6,24 +6,26 @@ Subject: [PATCH] path-util.h: add placeholder for DEFAULT_PATH_NORMAL
 This will be the $PATH used to lookup ExecStart= etc. options, which
 systemd itself uses extensively.
 ---
- src/basic/path-util.h | 6 +++---
- 1 file changed, 3 insertions(+), 3 deletions(-)
+ src/basic/path-util.h | 8 ++++----
+ 1 file changed, 4 insertions(+), 4 deletions(-)
 
 diff --git a/src/basic/path-util.h b/src/basic/path-util.h
-index 45518c07e5..94bef2f4b4 100644
+index a3a82574dd..b836dba7f1 100644
 --- a/src/basic/path-util.h
 +++ b/src/basic/path-util.h
-@@ -9,10 +9,10 @@
+@@ -9,11 +9,11 @@
  #define PATH_MERGED_BIN(x) x "bin"
  #define PATH_MERGED_BIN_NULSTR(x) x "bin\0"
  
--#define DEFAULT_PATH_WITH_SBIN PATH_SPLIT_BIN("/usr/local/") ":" PATH_SPLIT_BIN("/usr/")
+-#define DEFAULT_PATH_WITH_FULL_SBIN PATH_SPLIT_BIN("/usr/local/") ":" PATH_SPLIT_BIN("/usr/")
+-#define DEFAULT_PATH_WITH_LOCAL_SBIN PATH_SPLIT_BIN("/usr/local/") ":" PATH_MERGED_BIN("/usr/")
 -#define DEFAULT_PATH_WITHOUT_SBIN PATH_MERGED_BIN("/usr/local/") ":" PATH_MERGED_BIN("/usr/")
-+#define DEFAULT_PATH_WITH_SBIN "@defaultPathNormal@"
-+#define DEFAULT_PATH_WITHOUT_SBIN DEFAULT_PATH_WITH_SBIN
++#define DEFAULT_PATH_WITH_FULL_SBIN "@defaultPathNormal@"
++#define DEFAULT_PATH_WITH_LOCAL_SBIN DEFAULT_PATH_WITH_FULL_SBIN
++#define DEFAULT_PATH_WITHOUT_SBIN DEFAULT_PATH_WITH_FULL_SBIN
  
--#define DEFAULT_PATH_COMPAT PATH_SPLIT_BIN("/usr/local/") ":" PATH_SPLIT_BIN("/usr/") ":" PATH_SPLIT_BIN("/")
-+#define DEFAULT_PATH_COMPAT DEFAULT_PATH_WITH_SBIN
+-#define DEFAULT_PATH_COMPAT DEFAULT_PATH_WITH_FULL_SBIN ":" PATH_SPLIT_BIN("/")
++#define DEFAULT_PATH_COMPAT DEFAULT_PATH_WITH_FULL_SBIN
  
  const char* default_PATH(void);
  
diff --git a/pkgs/os-specific/linux/systemd/default.nix b/pkgs/os-specific/linux/systemd/default.nix
index a6624aaa803b..8c5aa4097a4b 100644
--- a/pkgs/os-specific/linux/systemd/default.nix
+++ b/pkgs/os-specific/linux/systemd/default.nix
@@ -203,13 +203,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   inherit pname;
-  version = "258.1";
+  version = "258.2";
 
   src = fetchFromGitHub {
     owner = "systemd";
     repo = "systemd";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-LA+6/d9W3CxK0G2sXsPHM4BVLf8IzsWW6IxJFby6/JU=";
+    hash = "sha256-1iWeuNefDOIEUSTzxzvt+jfcs6sSMPhxQfdwp0mqUjQ=";
   };
 
   # On major changes, or when otherwise required, you *must* :
@@ -221,16 +221,6 @@ stdenv.mkDerivation (finalAttrs: {
   # Use `find . -name "*.patch" | sort` to get an up-to-date listing of all
   # patches
   patches = [
-    # https://github.com/systemd/systemd/pull/39094
-    (fetchpatch {
-      url = "https://github.com/systemd/systemd/commit/8b4ee3d68d2e70d9a396b74d155eab3b11763311.patch";
-      hash = "sha256-JJDaSHQjd1QZ18CQHq40viB0AF/0MiescmZUcc/6LDg=";
-    })
-    (fetchpatch {
-      url = "https://github.com/systemd/systemd/commit/13b0e7fc6d2623800ba04b104f3b628388c9f5e6.patch";
-      hash = "sha256-X+tY3NjfRJpF6wvd++xEps0DIFTbX/6Zw9oO4Y9FmNI=";
-    })
-
     ./0001-Start-device-units-for-uninitialised-encrypted-devic.patch
     ./0002-Don-t-try-to-unmount-nix-or-nix-store.patch
     ./0003-Fix-NixOS-containers.patch
@@ -445,6 +435,10 @@ stdenv.mkDerivation (finalAttrs: {
     # independent of upstream changes to the default.
     (lib.mesonOption "debug-shell" "/bin/sh")
 
+    # Use the correct path for Bash for user shells (e.g. used in nspawn and
+    # homed), which otherwise defaults to /bin/bash.
+    (lib.mesonOption "default-user-shell" "/run/current-system/sw/bin/bash")
+
     # Attempts to check /usr/sbin and that fails in macOS sandbox because
     # permission is denied. If /usr/sbin is not a symlink, it defaults to true.
     # We set it to false since stdenv moves sbin/* to bin and creates a symlink,
diff --git a/pkgs/shells/bash/5.nix b/pkgs/shells/bash/5.nix
index 017edfe2613e..015872e3b2f7 100644
--- a/pkgs/shells/bash/5.nix
+++ b/pkgs/shells/bash/5.nix
@@ -5,7 +5,7 @@
   fetchurl,
   updateAutotoolsGnuConfigScriptsHook,
   bison,
-  util-linux,
+  util-linuxMinimal,
   coreutils,
   libredirect,
   glibcLocales,
@@ -49,7 +49,7 @@ lib.warnIf (withDocs != null)
     # bionic libc is super weird and has issues with fortify outside of its own libc, check this comment:
     # https://github.com/NixOS/nixpkgs/pull/192630#discussion_r978985593
     # or you can check libc/include/sys/cdefs.h in bionic source code
-    ++ lib.optional (stdenv.hostPlatform.libc == "bionic") "fortify";
+    ++ lib.optionals (stdenv.hostPlatform.libc == "bionic") [ "fortify" ];
 
     outputs = [
       "out"
@@ -130,9 +130,9 @@ lib.warnIf (withDocs != null)
       updateAutotoolsGnuConfigScriptsHook
       bison
     ]
-    ++ lib.optional stdenv.hostPlatform.isDarwin stdenv.cc.bintools;
+    ++ lib.optionals stdenv.hostPlatform.isDarwin [ stdenv.cc.bintools ];
 
-    buildInputs = lib.optional interactive readline;
+    buildInputs = lib.optionals interactive [ readline ];
 
     enableParallelBuilding = true;
 
@@ -167,7 +167,7 @@ lib.warnIf (withDocs != null)
         doCheck = true;
 
         nativeCheckInputs = attrs.nativeCheckInputs or [ ] ++ [
-          util-linux
+          util-linuxMinimal
           libredirect.hook
           glibcLocales
           gnused
@@ -255,7 +255,7 @@ lib.warnIf (withDocs != null)
       });
     };
 
-    meta = with lib; {
+    meta = {
       homepage = "https://www.gnu.org/software/bash/";
       description =
         "GNU Bourne-Again Shell, the de facto standard shell on Linux"
@@ -270,8 +270,8 @@ lib.warnIf (withDocs != null)
         interactive use.  In addition, most sh scripts can be run by
         Bash without modification.
       '';
-      license = licenses.gpl3Plus;
-      platforms = platforms.all;
+      license = lib.licenses.gpl3Plus;
+      platforms = lib.platforms.all;
       # https://github.com/NixOS/nixpkgs/issues/333338
       badPlatforms = [ lib.systems.inspect.patterns.isMinGW ];
       maintainers = with lib.maintainers; [ infinisil ];
diff --git a/pkgs/tools/inputmethods/ibus/default.nix b/pkgs/tools/inputmethods/ibus/default.nix
index 3f0701ddaa47..74df7eefb93d 100644
--- a/pkgs/tools/inputmethods/ibus/default.nix
+++ b/pkgs/tools/inputmethods/ibus/default.nix
@@ -67,13 +67,13 @@ in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "ibus";
-  version = "1.5.32";
+  version = "1.5.33";
 
   src = fetchFromGitHub {
     owner = "ibus";
     repo = "ibus";
     tag = finalAttrs.version;
-    hash = "sha256-Rp2Aw2C2LXMBp8++pnZtPHiPoFDERpkDsKd0E//twuY=";
+    hash = "sha256-cpNZI6KbL9zUJHw1szpWl4lOEAvlBdd+FA6xGh1sYYY=";
   };
 
   patches = [
@@ -88,6 +88,8 @@ stdenv.mkDerivation (finalAttrs: {
       PYTHON = null;
     })
     ./build-without-dbus-launch.patch
+    # https://github.com/NixOS/nixpkgs/issues/230290
+    ./vala-parallelism.patch
   ];
 
   outputs = [
diff --git a/pkgs/tools/inputmethods/ibus/vala-parallelism.patch b/pkgs/tools/inputmethods/ibus/vala-parallelism.patch
new file mode 100644
index 000000000000..f4c47a76c39c
--- /dev/null
+++ b/pkgs/tools/inputmethods/ibus/vala-parallelism.patch
@@ -0,0 +1,13 @@
+diff --git a/ui/gtk3/Makefile.am b/ui/gtk3/Makefile.am
+index 3ada6501..2066a8f5 100644
+--- a/ui/gtk3/Makefile.am
++++ b/ui/gtk3/Makefile.am
+@@ -304,6 +304,8 @@ panelbinding.o: $(srcdir)/panelbinding.c
+ 	$(AM_V_CC_no)$(COMPILE) -c -o $@ $<
+ 	$(NULL)
+ 
++.NOTPARALLEL:
++
+ MAINTAINERCLEANFILES += extension.c panelbinding.c
+ 
+ man_seven_DATA = ibus-emoji.7
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 789496df1041..ce75607dd4eb 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -5216,15 +5216,15 @@ with pkgs;
   wrapRustcWith = { rustc-unwrapped, ... }@args: callPackage ../build-support/rust/rustc-wrapper args;
   wrapRustc = rustc-unwrapped: wrapRustcWith { inherit rustc-unwrapped; };
 
-  rust_1_90 = callPackage ../development/compilers/rust/1_90.nix { };
-  rust = rust_1_90;
+  rust_1_91 = callPackage ../development/compilers/rust/1_91.nix { };
+  rust = rust_1_91;
 
   mrustc = callPackage ../development/compilers/mrustc { };
   mrustc-minicargo = callPackage ../development/compilers/mrustc/minicargo.nix { };
   mrustc-bootstrap = callPackage ../development/compilers/mrustc/bootstrap.nix { };
 
-  rustPackages_1_90 = rust_1_90.packages.stable;
-  rustPackages = rustPackages_1_90;
+  rustPackages_1_91 = rust_1_91.packages.stable;
+  rustPackages = rustPackages_1_91;
 
   inherit (rustPackages)
     cargo
@@ -8157,7 +8157,6 @@ with pkgs;
   zunclient = with python313Packages; toPythonApplication python-zunclient;
 
   inherit (callPackages ../by-name/li/libressl { })
-    libressl_4_0
     libressl_4_1
     libressl_4_2
     ;
@@ -8237,7 +8236,9 @@ with pkgs;
 
   prospector = callPackage ../development/tools/prospector { };
 
-  protobuf = protobuf_33;
+  # this version should align with the static protobuf version linked into python3.pkgs.tensorflow
+  # $ nix-shell -I nixpkgs=$(git rev-parse --show-toplevel) -p python3.pkgs.tensorflow --run "python3 -c 'import google.protobuf; print(google.protobuf.__version__)'"
+  protobuf = protobuf_32;
 
   inherit
     ({
@@ -8896,23 +8897,25 @@ with pkgs;
       "3000"
     ];
   };
-  sbcl_2_5_7 = wrapLisp {
-    pkg = callPackage ../development/compilers/sbcl { version = "2.5.7"; };
-    faslExt = "fasl";
-    flags = [
-      "--dynamic-space-size"
-      "3000"
-    ];
-  };
+
   sbcl_2_5_9 = wrapLisp {
     pkg = callPackage ../development/compilers/sbcl { version = "2.5.9"; };
+
     faslExt = "fasl";
     flags = [
       "--dynamic-space-size"
       "3000"
     ];
   };
-  sbcl = sbcl_2_5_9;
+  sbcl_2_5_10 = wrapLisp {
+    pkg = callPackage ../development/compilers/sbcl { version = "2.5.10"; };
+    faslExt = "fasl";
+    flags = [
+      "--dynamic-space-size"
+      "3000"
+    ];
+  };
+  sbcl = sbcl_2_5_10;
 
   sbclPackages = recurseIntoAttrs sbcl.pkgs;
 
diff --git a/pkgs/top-level/python-aliases.nix b/pkgs/top-level/python-aliases.nix
index 61df6b217968..ada61035c432 100644
--- a/pkgs/top-level/python-aliases.nix
+++ b/pkgs/top-level/python-aliases.nix
@@ -450,6 +450,7 @@ mapAliases {
   sqlalchemy_migrate = throw "'sqlalchemy_migrate' has been renamed to/replaced by 'sqlalchemy-migrate'"; # Converted to throw 2025-10-29
   subunit2sql = throw "subunit2sql has been removed because it has been marked as broken since at least November 2024."; # Added 2025-10-04
   supervise_api = throw "'supervise_api' has been renamed to/replaced by 'supervise-api'"; # Converted to throw 2025-10-29
+  swh-perfecthash = throw "'swh-perfecthash' has been renamed to/replaced by 'swh-shard'"; # added 2025-11-13
   synologydsm-api = throw "'synologydsm-api' has been renamed to/replaced by 'py-synologydsm-api'"; # Converted to throw 2025-10-29
   systemd = throw "systemd was removed because it was misnamed; use systemd-python instead"; # added 2025-11-09
   sysv_ipc = throw "'sysv_ipc' has been renamed to/replaced by 'sysv-ipc'"; # Converted to throw 2025-10-29
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index c8c34d8468f3..cabddf5f36b1 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -2209,7 +2209,9 @@ self: super: with self; {
 
   brother-ql = callPackage ../development/python-modules/brother-ql { };
 
-  brotli = callPackage ../development/python-modules/brotli { };
+  brotli = callPackage ../development/python-modules/brotli {
+    inherit (pkgs) brotli;
+  };
 
   brotli-asgi = callPackage ../development/python-modules/brotli-asgi { };
 
@@ -18162,12 +18164,12 @@ self: super: with self; {
 
   swh-objstorage = callPackage ../development/python-modules/swh-objstorage { };
 
-  swh-perfecthash = callPackage ../development/python-modules/swh-perfecthash { };
-
   swh-scanner = callPackage ../development/python-modules/swh-scanner { };
 
   swh-scheduler = callPackage ../development/python-modules/swh-scheduler { };
 
+  swh-shard = callPackage ../development/python-modules/swh-shard { };
+
   swh-storage = callPackage ../development/python-modules/swh-storage { };
 
   swh-web-client = callPackage ../development/python-modules/swh-web-client { };