Merge master into staging-next

2026-08-25 17:55:21 +00:00 · 2026-08-15 06:07:08 +00:00
parent a5bd5f902e f676c070f5
commit e66866b155
35 changed files with 670 additions and 122 deletions
--- a/pkgs/applications/version-management/sublime-merge/default.nix
+++ b/pkgs/applications/version-management/sublime-merge/default.nix
@@ -11,9 +11,9 @@ in
  } { };

  sublime-merge-dev = common {
-    buildVersion = "2124";
+    buildVersion = "2126";
    dev = true;
-    aarch64sha256 = "jYd22OPZnC6X2Ceuzz4ZiqqD1pFsmQsrihIqY3A+gAc=";
-    x64sha256 = "3Tm9TH+kzTCElFLI44K00CXTuV98+uCswy4auXcY+YY=";
+    aarch64sha256 = "sqrcGszq1Vi0DDbPds7ABsM7i1/6EEErTAC/Og3wwhc=";
+    x64sha256 = "2Jia6Ep6iVz8PI6G2L52CEMnYpOK+MPZiwC/YVn3O9I=";
  } { };
 }
--- a/pkgs/by-name/db/dblab/package.nix
+++ b/pkgs/by-name/db/dblab/package.nix
@@ -7,16 +7,16 @@

 buildGoModule (finalAttrs: {
  pname = "dblab";
-  version = "0.47.3";
+  version = "0.48.0";

  src = fetchFromGitHub {
    owner = "danvergara";
    repo = "dblab";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-gaCTvULdyZQRF3Fc3JRz3rWHyc68zwqxIcaujFq6RaA=";
+    hash = "sha256-JOwET0v6EENlbK0iDBY7/zjreZQ2EUddfFvaiv3y858=";
  };

-  vendorHash = "sha256-widzVKA85qslxuuO/ledG+IUvr+vw2HUiD3kVbe2D2A=";
+  vendorHash = "sha256-nFgwoX2GxjRdqXcocTvz7L0NA+kN1+67uTpler8di/E=";
  # Fix case-insensitive conflicts producing platform-dependent checksums
  # https://github.com/microsoft/go-mssqldb/issues/234
  proxyVendor = true;
--- a/pkgs/by-name/di/diffoscope/package.nix
+++ b/pkgs/by-name/di/diffoscope/package.nix
@@ -112,12 +112,12 @@ in
 # Note: when upgrading this package, please run the list-missing-tools.sh script as described below!
 python.pkgs.buildPythonApplication rec {
  pname = "diffoscope";
-  version = "327";
+  version = "328";
  pyproject = true;

  src = fetchurl {
    url = "https://diffoscope.org/archive/diffoscope-${version}.tar.bz2";
-    hash = "sha256-WCEyBp4HQ0BhxyP/GACQOBH+GMo2GuR13U1RXBEVz94=";
+    hash = "sha256-7cQyrdXldqS9vkGGs+Lgc6gojtYFv8WdJMO1ObZ3NSs=";
  };

  outputs = [
--- a/pkgs/by-name/fa/fail2ban/package.nix
+++ b/pkgs/by-name/fa/fail2ban/package.nix
@@ -11,12 +11,15 @@
 python3.pkgs.buildPythonApplication (finalAttrs: {
  pname = "fail2ban";
  version = "1.1.0";
-  format = "setuptools";
+  pyproject = true;
+
+  __structuredAttrs = true;
+  strictDeps = true;

  src = fetchFromGitHub {
    owner = "fail2ban";
    repo = "fail2ban";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
    hash = "sha256-0xPNhbu6/p/cbHOr5Y+PXbMbt5q/S13S5100ZZSdylE=";
  };

@@ -35,16 +38,16 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
    (builtins.any lib.id)
  ]) [ "doc" ];

+  build-system = [ python3.pkgs.setuptools ];
+
  nativeBuildInputs = [ installShellFiles ];

-  pythonPath =
+  dependencies =
    with python3.pkgs;
-    lib.optionals stdenv.hostPlatform.isLinux [
+    [ distutils ]
+    ++ lib.optionals stdenv.hostPlatform.isLinux [
      systemd-python
      pyinotify
-
-      # https://github.com/fail2ban/fail2ban/issues/3787, remove it in the next release
-      setuptools
    ];

  preConfigure = ''
@@ -109,6 +112,7 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
  meta = {
    homepage = "https://www.fail2ban.org/";
    description = "Program that scans log files for repeated failing login attempts and bans IP addresses";
+    changelog = "https://github.com/fail2ban/fail2ban/blob/${finalAttrs.src.tag}/ChangeLog";
    license = lib.licenses.gpl2Plus;
    maintainers = with lib.maintainers; [
      Deric-W
--- a/pkgs/by-name/gp/gpauth/package.nix
+++ b/pkgs/by-name/gp/gpauth/package.nix
@@ -37,6 +37,12 @@ rustPlatform.buildRustPackage (finalAttrs: {
    webkitgtk_4_1
  ];

+  checkFlags = lib.optionals stdenv.hostPlatform.isDarwin [
+    # Fail in sandbox because netdev tries to read SystemConfiguration
+    "--skip=cli::tests::host_id_arg_sets_profile_host_id_seed"
+    "--skip=cli::tests::client_version_arg_sets_profile_client_version"
+  ];
+
  passthru.updateScript = nix-update-script { };

  meta = {
--- a/pkgs/by-name/gp/gpclient/package.nix
+++ b/pkgs/by-name/gp/gpclient/package.nix
@@ -84,6 +84,21 @@ rustPlatform.buildRustPackage {
    pango
  ];

+  checkFlags = lib.optionals stdenv.hostPlatform.isDarwin [
+    # Fail in sandbox because netdev tries to read SystemConfiguration
+    "--skip=connect::args::tests::deprecated_profile_override_flags_do_not_affect_os_profile"
+    "--skip=connect::args::tests::stdin_host_id_sets_profile_runtime_identity_seed"
+    "--skip=hip::tests::host_info_os_vendor_is_linux_for_linux_profile"
+    "--skip=hip::tests::host_info_os_vendor_is_apple_for_mac_profile"
+    "--skip=hip::tests::host_info_os_vendor_is_microsoft_for_windows_profile"
+    "--skip=hip::tests::host_info_host_id_comes_from_os_profile"
+    "--skip=hip::tests::host_info_host_id_independent_of_runtime_for_each_os"
+    "--skip=hip::tests::hip_os_version_argument_is_ignored"
+    "--skip=hip::tests::host_id_argument_sets_profile_runtime_identity"
+    "--skip=hip::tests::host_info_uses_host_id_argument_for_native_profile"
+    "--skip=session::tests::builds_session_context_from_os_profile"
+  ];
+
  postPatch = ''
    substituteInPlace crates/openconnect/src/vpn_utils.rs \
      --replace-fail /usr/local/libexec/gpclient/vpnc-script $out/libexec/gpclient/vpnc-script \
--- a/pkgs/by-name/ha/harmonist/package.nix
+++ b/pkgs/by-name/ha/harmonist/package.nix
@@ -6,16 +6,16 @@

 buildGoModule (finalAttrs: {
  pname = "harmonist";
-  version = "1.0.2";
+  version = "1.0.3";

  src = fetchFromCodeberg {
    owner = "anaseto";
    repo = "harmonist";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-JR2EM9tlxNuntx//BV/hqsBv5fCkjjxZOcZtx+CZgIo=";
+    hash = "sha256-9cEKkvQze+hg4CwDe5epTpuQPevylwnSP5xQAVGJ/wQ=";
  };

-  vendorHash = "sha256-0gtDnV+ofHj705nXFpZHP6imIU5G2ItQr6B17S59teI=";
+  vendorHash = "sha256-wibNLDdykV2psOnJbMKu0EZSrrhKRxrN/OTWXmUz2FM=";

  ldflags = [
    "-s"
@@ -33,6 +33,7 @@ buildGoModule (finalAttrs: {
      management and character building, relying on items and player
      adaptability for character progression.
    '';
+    changelog = "https://codeberg.org/anaseto/harmonist/src/tag/v${finalAttrs.version}/CHANGES.md";
    homepage = "https://harmonist.tuxfamily.org/";
    license = lib.licenses.isc;
    maintainers = [ ];
--- a/pkgs/by-name/in/incus-compose/package.nix
+++ b/pkgs/by-name/in/incus-compose/package.nix
@@ -7,17 +7,17 @@

 buildGoModule (finalAttrs: {
  pname = "incus-compose";
-  version = "1.1.0";
+  version = "1.2.0";
  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "lxc";
    repo = "incus-compose";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-MrVqFs7+0aeOe+SizykVAMkNlrGM/SKWY+GUWHG9xQU=";
+    hash = "sha256-8DnXFp1CYyT37cYgK5Zmay4FUlPAUnwokjuWcphpQBY=";
  };

-  vendorHash = "sha256-KnQQX66X41cMv3+gu+IsPE5St47SGr6i2Y/gUFpIjmQ=";
+  vendorHash = "sha256-zDwyAc10juzy6LKe/8tdRS3A642IuMrQqIs7Zj+h2Mk=";

  env.CGO_ENABLED = 0;

--- a/pkgs/by-name/in/incus-ui-canonical/package.nix
+++ b/pkgs/by-name/in/incus-ui-canonical/package.nix
@@ -20,14 +20,14 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "incus-ui-canonical";
-  version = "0.21.5";
+  version = "0.21.6";

  src = fetchFromGitHub {
    owner = "zabbly";
    repo = "incus-ui-canonical";
    # only use tags prefixed by incus- they are the tested fork versions
    tag = "incus-${finalAttrs.version}";
-    hash = "sha256-HUx5QAXFtW+l3LYNWgiGWyOQzbHRbFQ1OpI0cSVLkd8=";
+    hash = "sha256-emg02O8WUk9RWsA3Uz+bIfNXkE1IUa3ob1Xm14AAj98=";
  };

  offlineCache = fetchYarnDeps {
--- a/pkgs/by-name/in/intercal/package.nix
+++ b/pkgs/by-name/in/intercal/package.nix
@@ -13,11 +13,11 @@
 stdenv.mkDerivation rec {

  pname = "intercal";
-  version = "0.34";
+  version = "0.35";

  src = fetchurl {
    url = "http://catb.org/esr/intercal/intercal-${version}.tar.gz";
-    hash = "sha256-fvYUjDUd9mhGbi3L15UXci+RwzyqORWVcTfzgzcfjVU=";
+    hash = "sha256-tV6O3GjiUXoGepAnZuL1e5e1AlU/3LritaskY7pY8OE=";
  };

  postPatch = ''
--- a/pkgs/by-name/je/jetty/default.nix
+++ b/pkgs/by-name/je/jetty/default.nix
@@ -52,7 +52,7 @@ let
 in
 {
  jetty_12 = generic {
-    version = "12.1.11";
-    hash = "sha256-fkXPjyO6xFZ/r5RiSzrEPgrrSSXLklQJ52BAmQocvpw=";
+    version = "12.1.12";
+    hash = "sha256-7sBxMaaCvL+7BBEjKTKnIZa1jxh0EoYpYq8Hreu3d7w=";
  };
 }
--- a/pkgs/by-name/lu/lue/package.nix
+++ b/pkgs/by-name/lu/lue/package.nix
@@ -3,19 +3,18 @@
  python3,
  fetchFromGitHub,
  ffmpeg,
-  nix-update-script,
 }:

 python3.pkgs.buildPythonApplication (finalAttrs: {
  pname = "lue";
-  version = "0.4.0";
+  version = "0.5.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "paulilaaso";
    repo = "lue";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-T7uh9PSCTkT+jYxQYC4ebPkabDz3pc6JjCGtgNatIAM=";
+    hash = "sha256-tscMjgJ1YxJ96BMGbxlsa12bXJtFRTAjyxsFuvNkzYI=";
  };

  build-system = with python3.pkgs; [
@@ -45,8 +44,6 @@ python3.pkgs.buildPythonApplication (finalAttrs: {

  makeWrapperArgs = [ "--prefix PATH :${lib.makeBinPath [ ffmpeg ]}" ];

-  passthru.updateScript = nix-update-script { };
-
  meta = {
    description = "Terminal eBook Reader with Text-to-Speech";
    homepage = "https://github.com/paulilaaso/lue";
--- a/pkgs/by-name/ma/mailpit/source.nix
+++ b/pkgs/by-name/ma/mailpit/source.nix
@@ -1,6 +1,6 @@
 {
-  version = "1.30.6";
-  hash = "sha256-XB88EPRfZAcseYvPWsJSuI5FEtbH9VYTg6TuSh503uQ=";
-  npmDepsHash = "sha256-BgNbQ+hH04GOQllXm0/K0v7YM2DoKE/KXLR6z9p2Bso=";
-  vendorHash = "sha256-2HPXdCuFAg5AR0hLPlKdzxlkJL6XOdBjZPU+x66wtDE=";
+  version = "1.30.7";
+  hash = "sha256-d5JNwHLSwY2AbOgTkV+2dSwHAK1JDYG0I7Pet4zzM7Q=";
+  npmDepsHash = "sha256-Imj09aydZBtOpECIkU6oWoxRjTxDyuY3+jBrhL0VtNM=";
+  vendorHash = "sha256-xbajtiWFfXDz430SgJ+C9rqMEl+UcHp6TJj7obKDQH0=";
 }
--- a/pkgs/by-name/ma/martian-mono/package.nix
+++ b/pkgs/by-name/ma/martian-mono/package.nix
@@ -1,39 +1,55 @@
 {
  lib,
  stdenvNoCC,
-  fetchzip,
+  fetchFromGitHub,
+  installFonts,
+  python3Packages,
 }:

-stdenvNoCC.mkDerivation rec {
+stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "martian-mono";
  version = "1.1.0";

-  src = fetchzip {
-    url = "https://github.com/evilmartians/mono/releases/download/v${version}/martian-mono-${version}-otf.zip";
-    sha256 = "sha256-W6ewNtFDS1O1fwoAe27tIgNZn7AAKo965dWkZYzsg+o=";
-    stripRoot = false;
+  outputs = [
+    "out"
+    "webfont"
+  ];
+
+  strictDeps = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "evilmartians";
+    repo = "mono";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-qm1Ljz344BTesQXIjKwuE4XwXwskZQlNkCgaVyst54o=";
  };

-  dontPatch = true;
-  dontConfigure = true;
-  dontBuild = true;
-  doCheck = false;
-  dontFixup = true;
+  env.PROTOCOL_BUFFERS_PYTHON_IMPLEMENTATION = "python";

-  installPhase = ''
-    runHook preInstall
+  nativeBuildInputs = [
+    python3Packages.gftools
+    python3Packages.fontmake
+    installFonts
+  ];

-    install -Dm644 -t $out/share/fonts/opentype/ *.otf
-
-    runHook postInstall
+  buildPhase = ''
+    runHook preBuild
+    # clean out the prebuilt files
+    rm -r fonts
+    gftools builder sources/config.yaml
+    runHook postBuild
  '';

+  dontUseNinjaBuild = true;
+  dontUseNinjaInstall = true;
+
  meta = {
    description = "Free and open-source monospaced font from Evil Martians";
    homepage = "https://github.com/evilmartians/mono";
-    changelog = "https://github.com/evilmartians/mono/raw/v${version}/Changelog.md";
+    changelog = "https://github.com/evilmartians/mono/raw/${finalAttrs.src.tag}/Changelog.md";
    license = lib.licenses.ofl;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ pancaek ];
    platforms = lib.platforms.all;
  };
-}
+})
--- a/pkgs/by-name/pa/pana/package.nix
+++ b/pkgs/by-name/pa/pana/package.nix
@@ -9,13 +9,13 @@
 }:
 buildDartApplication rec {
  pname = "pana";
-  version = "0.23.16";
+  version = "0.23.18";

  src = fetchFromGitHub {
    owner = "dart-lang";
    repo = "pana";
    tag = version;
-    hash = "sha256-cA707l5SGGh+tzD2TOx2eYEh3zfQawstFCTocgcnXJk=";
+    hash = "sha256-P/Z6MNcrvcbwe21XAEZqp5RUoDlT1ljNN37pDm5pD+8=";
  };

  dartEntryPoints = {
--- a/pkgs/by-name/pa/pana/pubspec.lock.json
+++ b/pkgs/by-name/pa/pana/pubspec.lock.json
@@ -4,21 +4,21 @@
      "dependency": "transitive",
      "description": {
        "name": "_fe_analyzer_shared",
-        "sha256": "1b0e6a07425a3e460666e88bf1c949ccc7bb0116ad562ce94a1eca60fe820725",
+        "sha256": "9a3386eea899815698dd55995277cf7cb8572ee52b399a6edfb7ae2b50e5fc19",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "103.0.0"
+      "version": "105.0.0"
    },
    "analyzer": {
      "dependency": "direct main",
      "description": {
        "name": "analyzer",
-        "sha256": "61c04d0c1bfed555c681ea079519933f071a5a026578ff73c4ff0df2d3462e5e",
+        "sha256": "62993bed6eadbe9596c5c20d5c167e7bc563c5fe266657a04ddeb93bdb84f4c9",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "13.3.0"
+      "version": "14.1.0"
    },
    "args": {
      "dependency": "direct main",
@@ -451,7 +451,7 @@
      "version": "1.9.1"
    },
    "pool": {
-      "dependency": "transitive",
+      "dependency": "direct dev",
      "description": {
        "name": "pool",
        "sha256": "978783255c543aa3586a1b3c21f6e9d720eb315376a915872c61ef8b5c20177d",
--- a/pkgs/by-name/po/postfix-tlspol/package.nix
+++ b/pkgs/by-name/po/postfix-tlspol/package.nix
@@ -7,13 +7,13 @@

 buildGoModule (finalAttrs: {
  pname = "postfix-tlspol";
-  version = "1.12.1";
+  version = "1.12.2";

  src = fetchFromGitHub {
    owner = "Zuplu";
    repo = "postfix-tlspol";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-K2vByo2QtSfDjywTHQxYRidWosWMkIiFiLd4bjMoccY=";
+    hash = "sha256-1NIk3KXsUgf+CsbPRErNCJEP4RVuOUKnDq0akUfNKuE=";
  };

  vendorHash = null;
--- a/pkgs/by-name/re/readeck/package.nix
+++ b/pkgs/by-name/re/readeck/package.nix
@@ -6,32 +6,39 @@
  nodejs_22,
  npmHooks,
  python3,
+  templ,
  nix-update-script,
 }:

 buildGoModule (finalAttrs: {
  pname = "readeck";
-  version = "0.22.3";
+  version = "0.23.0";

  src = fetchFromCodeberg {
    owner = "readeck";
    repo = "readeck";
    tag = finalAttrs.version;
-    hash = "sha256-F4aj+vgCmwCnSBNa72kgCINNtmS6Zk1oeILZVXF5G+Y=";
+    hash = "sha256-NH1d3kf0Q9IOAlI3qYpmttXTQsrciMrQJkWGF+Ji62I=";
  };

  nativeBuildInputs = [
    nodejs_22
    npmHooks.npmConfigHook
    (python3.withPackages (ps: with ps; [ babel ]))
+    templ
  ];

  npmRoot = "web";

  env.NODE_PATH = "$npmDeps";

+  postPatch = ''
+    substituteInPlace go.mod --replace-fail "1.26.6" "1.26.5"
+    templ generate
+  '';
+
  preBuild = ''
-    make generate
+    make TEMPL=templ generate
  '';

  subPackages = [ "." ];
@@ -62,10 +69,10 @@ buildGoModule (finalAttrs: {

  npmDeps = fetchNpmDeps {
    src = "${finalAttrs.src}/web";
-    hash = "sha256-ysDEkoL0e84udmCmvfTMA5lWS08aSyyTuCq+/8s3FMw=";
+    hash = "sha256-y+bma874Xd/N2urPia8vYFzavgBJsM29VuSS5iQWayA=";
  };

-  vendorHash = "sha256-cfd52pO2uUT5fdqCXM2rreXztb63FzUWv0s5/wbKXDw=";
+  vendorHash = "sha256-hAqQRtlaHcMrtatMowL/lmS5U+Jx6AmF0Q2tuiXqTTs=";

  passthru.updateScript = nix-update-script { };

--- a/pkgs/by-name/ro/rot8/Cargo.lock
+++ b/pkgs/by-name/ro/rot8/Cargo.lock
@@ -0,0 +1,461 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c982642fa9e8606056828ee9a8505737230110bb1099153c79efe865c59d12ba"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "atty"
+version = "0.2.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9b39be18770d11421cdb1b9947a45dd3f37e93092cbf377614828a319d5fee8"
+dependencies = [
+ "hermit-abi",
+ "libc",
+ "winapi",
+]
+
+[[package]]
+name = "autocfg"
+version = "1.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53"
+
+[[package]]
+name = "bitflags"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
+
+[[package]]
+name = "bitflags"
+version = "2.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da"
+
+[[package]]
+name = "cc"
+version = "1.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d262e149917187838d5b42777c8253bcb64500067342904e7d429499a6f277e"
+dependencies = [
+ "find-msvc-tools",
+ "shlex",
+]
+
+[[package]]
+name = "clap"
+version = "3.2.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ea181bf566f71cb9a5d17a59e1871af638180a18fb0035c92ae62b705207123"
+dependencies = [
+ "atty",
+ "bitflags 1.3.2",
+ "clap_lex",
+ "indexmap",
+ "strsim",
+ "termcolor",
+ "textwrap",
+]
+
+[[package]]
+name = "clap_lex"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2850f2f5a82cbf437dd5af4d49848fbdfc27c157c3d010345776f952765261c5"
+dependencies = [
+ "os_str_bytes",
+]
+
+[[package]]
+name = "downcast-rs"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75b325c5dbd37f80359721ad39aca5a29fb04c89279657cffdda8736d0c0b9d2"
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys",
+]
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26b73573e6edcd2af0cdf47bd6cb58f0b3839491263c314eaad1ccf24430e1de"
+
+[[package]]
+name = "glob"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4eba85ea1d0a966a983acd07deee566e67395d2d96b6fb39e62b5a833f1eb0b"
+
+[[package]]
+name = "hashbrown"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888"
+
+[[package]]
+name = "hermit-abi"
+version = "0.1.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "62b467343b94ba476dcb2500d242dadbb39557df889310ac77c5d99100aaac33"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "indexmap"
+version = "1.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99"
+dependencies = [
+ "autocfg",
+ "hashbrown",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "libc"
+version = "0.2.189"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3eaf3ede3fee6db1a4c2ee091bf8a8b4dccdc6d17f656fb07896ee72867612f2"
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
+
+[[package]]
+name = "memchr"
+version = "2.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
+
+[[package]]
+name = "os_str_bytes"
+version = "6.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e2355d85b9a3786f481747ced0e0ff2ba35213a1f9bd406ed906554d7af805a1"
+
+[[package]]
+name = "pkg-config"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19f132c84eca552bf34cab8ec81f1c1dcc229b811638f9d283dceabe58c5569e"
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.107"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quick-xml"
+version = "0.41.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e660451e55124f798a69a5af3f49ccfbefbd41910eefd25caf2393e1f3473ec1"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "regex"
+version = "1.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f020237b6c8eed93db2e2cb53c00c60a8e1bc73da7d073199a1180401450218d"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad8553b9b26413251cbf30e620595c7a41b3887f03da04579c0e6b0d6a06b4b2"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
+
+[[package]]
+name = "rot8"
+version = "1.0.1"
+dependencies = [
+ "clap",
+ "glob",
+ "regex",
+ "serde",
+ "serde_json",
+ "wayland-client",
+ "wayland-protocols-wlr",
+]
+
+[[package]]
+name = "rustix"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
+dependencies = [
+ "bitflags 2.13.1",
+ "errno",
+ "libc",
+ "linux-raw-sys",
+ "windows-sys",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.151"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "shlex"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"
+
+[[package]]
+name = "smallvec"
+version = "1.15.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ed6a63f02c8539c91a8685a86f4099661ba3da017932f6ebbea6de3f0fa7c90"
+
+[[package]]
+name = "strsim"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73473c0e59e6d5812c5dfe2a064a6444949f089e20eec9a2e5506596494e4623"
+
+[[package]]
+name = "syn"
+version = "3.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53e9bae58849f64dfa4f5d5ae372c8341f7305f82a3868709269343628b659a3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "termcolor"
+version = "1.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06794f8f6c5c898b3275aebefa6b8a1cb24cd2c6c79397ab15774837a0bc5755"
+dependencies = [
+ "winapi-util",
+]
+
+[[package]]
+name = "textwrap"
+version = "0.16.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c13547615a44dc9c452a8a534638acdf07120d4b6847c8178705da06306a3057"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "wayland-backend"
+version = "0.3.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "016ccf01d1c58b6f8999612813e17c9b2390f7d70671428869913310f83f54b8"
+dependencies = [
+ "cc",
+ "downcast-rs",
+ "rustix",
+ "smallvec",
+ "wayland-sys",
+]
+
+[[package]]
+name = "wayland-client"
+version = "0.31.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3c36a0f861ad76d0901f2800b46321410d9f73f2ea88aac0650d86c32688073"
+dependencies = [
+ "bitflags 2.13.1",
+ "rustix",
+ "wayland-backend",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-protocols"
+version = "0.31.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f81f365b8b4a97f422ac0e8737c438024b5951734506b0e1d775c73030561f4"
+dependencies = [
+ "bitflags 2.13.1",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-protocols-wlr"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad1f61b76b6c2d8742e10f9ba5c3737f6530b4c243132c2a2ccc8aa96fe25cd6"
+dependencies = [
+ "bitflags 2.13.1",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-protocols",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-scanner"
+version = "0.31.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "338e30461b3a2b67d70eb30a6d89f8e0c93a833e07d2ae89085cd070c4a00ac0"
+dependencies = [
+ "proc-macro2",
+ "quick-xml",
+ "quote",
+]
+
+[[package]]
+name = "wayland-sys"
+version = "0.31.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8eab23fefc9e41f8e841df4a9c707e8a8c4ed26e944ef69297184de2785e3be"
+dependencies = [
+ "pkg-config",
+]
+
+[[package]]
+name = "winapi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
+dependencies = [
+ "winapi-i686-pc-windows-gnu",
+ "winapi-x86_64-pc-windows-gnu",
+]
+
+[[package]]
+name = "winapi-i686-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
+
+[[package]]
+name = "winapi-util"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
+dependencies = [
+ "windows-sys",
+]
+
+[[package]]
+name = "winapi-x86_64-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b"
--- a/pkgs/by-name/ro/rot8/package.nix
+++ b/pkgs/by-name/ro/rot8/package.nix
@@ -6,16 +6,24 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "rot8";
-  version = "1.0.0";
+  version = "1.0.1";

  src = fetchFromGitHub {
    owner = "efernau";
    repo = "rot8";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-dHx3vFY0ztyTIlzUi22TYphPD5hvgfHrWaaeoGxnvW0=";
+    hash = "sha256-9zjAi4yIpTqcJ338t0CVoOo0jlzrzRMfTH4ZRqBVAQg=";
  };

-  cargoHash = "sha256-MZz8IZDux9VEDDLQjkT96smNsygY1vYG2QBw3Q09hqw=";
+  # Upstream dropped Cargo.lock from the repo, so it has to be
+  # generated manually with `cargo generate-lockfile`.
+  cargoDeps = rustPlatform.importCargoLock {
+    lockFile = ./Cargo.lock;
+  };
+
+  postPatch = ''
+    ln -s ${./Cargo.lock} Cargo.lock
+  '';

  meta = {
    description = "Screen rotation daemon for X11 and wlroots";
--- a/pkgs/by-name/sn/snyk/package.nix
+++ b/pkgs/by-name/sn/snyk/package.nix
@@ -10,13 +10,13 @@

 buildNpmPackage (finalAttrs: {
  pname = "snyk";
-  version = "1.1306.1";
+  version = "1.1306.4";

  src = fetchFromGitHub {
    owner = "snyk";
    repo = "cli";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-L2aR09o2FVYKDXdbRr9cw93cerWybw3b6Tdvs5Q1atQ=";
+    hash = "sha256-DNG9b96nrkm0E/eoYer6NCh8Hh4xcuYV5PVmHYWZnV4=";

    # TODO: Remove once https://github.com/snyk/cli/pull/6924 is released.
    postFetch = ''
@@ -26,7 +26,7 @@ buildNpmPackage (finalAttrs: {

  npmDepsFetcherVersion = 2;

-  npmDepsHash = "sha256-e7C2ZG7SH9xjfU07lX8rzPeox6k2Fdz7AowOduLxvvs=";
+  npmDepsHash = "sha256-+8OU6eXza7r45sY8nX8SK/rrqDc6Nj46DsX7C8lZVYY=";

  nodejs = nodejs_24;

--- a/pkgs/by-name/sp/spec-kit/package.nix
+++ b/pkgs/by-name/sp/spec-kit/package.nix
@@ -7,13 +7,13 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "spec-kit";
-  version = "0.16.1";
+  version = "0.16.3";

  src = fetchFromGitHub {
    owner = "github";
    repo = "spec-kit";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Js/yEO63OG4rZ32Vm5qGDOFlVnitxqr/NIIQS6kwdRs=";
+    hash = "sha256-uQafjPA4mVn6N89HS9UNQzV1QzDXkgYO3FVBzSzoCBg=";
  };

  pyproject = true;
--- a/pkgs/by-name/sq/squeezelite/package.nix
+++ b/pkgs/by-name/sq/squeezelite/package.nix
@@ -39,13 +39,13 @@ stdenv.mkDerivation {
  pname = binName;
  # versions are specified in `squeezelite.h`
  # see https://github.com/ralph-irving/squeezelite/issues/29
-  version = "2.0.0.1584";
+  version = "2.0.0.1586";

  src = fetchFromGitHub {
    owner = "ralph-irving";
    repo = "squeezelite";
-    rev = "e1028f3cd058789c12b765d68b82e8b3b0b43a7b";
-    hash = "sha256-FKO+5oYQhufN8kMIYYvoskR43BBjqI0fK70/jLH0Oj4=";
+    rev = "de709765072a1ef270f63956370c5b25a1ea1159";
+    hash = "sha256-sAjZ0o6sRh8+oFRDlG2YRDS3qzCL6bzybwZkkWPG2Kw=";
  };

  buildInputs = [
--- a/pkgs/by-name/su/supersonic/package.nix
+++ b/pkgs/by-name/su/supersonic/package.nix
@@ -23,20 +23,16 @@

 buildGoModule (finalAttrs: {
  pname = "supersonic";
-  version = "0.22.0";
+  version = "0.22.1";

  src = fetchFromGitHub {
-    owner = "dweymouth";
+    owner = "supersonic-app";
    repo = "supersonic";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Ynw/NLDk2AVmn30llFtt/A9hEheUZ+/VZqXOIdiUSxQ=";
+    hash = "sha256-cK5iFVvu7aGtxQXdFN13EWHoxfC1CPIUqLglfdMq+Ww=";
  };

-  vendorHash = "sha256-W5Uwma72lqJB+QHkSasi7WArsYlfXLVPph9TlDSxFEk=";
-
-  # "go mod vendor" fails to build; go-gl/glfw fails with an error like:
-  # xdg-shell-client-protocol.h: No such file or directory
-  proxyVendor = true;
+  vendorHash = "sha256-2mbWUaHB+jJkuwYrZ0xqrl5Ndj4Kuh07t1LSz66SWO8=";

  nativeBuildInputs = [
    copyDesktopItems
--- a/pkgs/by-name/sv/svelte-check/package.nix
+++ b/pkgs/by-name/sv/svelte-check/package.nix
@@ -14,13 +14,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "svelte-check";
-  version = "4.7.4";
+  version = "4.7.5";

  src = fetchFromGitHub {
    owner = "sveltejs";
    repo = "language-tools";
    tag = "svelte-check@${finalAttrs.version}";
-    hash = "sha256-fjJp+4XAwUPZV8kVvgHnb1LVJbamzrboS3Taax1Vwvs=";
+    hash = "sha256-9fpWKLmuH9TZAyARYgBxQYlx6qz36fU3HueKAGR0H6E=";
  };

  pnpmWorkspaces = [ "svelte-check..." ];
--- a/pkgs/by-name/ti/timidity/package.nix
+++ b/pkgs/by-name/ti/timidity/package.nix
@@ -8,19 +8,23 @@
  ncurses,
  alsa-lib,
  buildPackages,
+  versionCheckHook,

  ## Additional optional output modes
  enableVorbis ? false,
  libvorbis,
 }:

-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
  pname = "timidity";
  version = "2.15.0";

+  __structuredAttrs = true;
+  strictDeps = true;
+
  src = fetchurl {
-    url = "mirror://sourceforge/timidity/TiMidity++-${version}.tar.bz2";
-    sha256 = "1xf8n6dqzvi6nr2asags12ijbj1lwk1hgl3s27vm2szib8ww07qn";
+    url = "mirror://sourceforge/timidity/TiMidity++-${finalAttrs.version}.tar.bz2";
+    hash = "sha256-Fh/AOVrxa1H3EXrQB8PkNMglowj6Ka1Etibuj5uxyPU=";
  };

  patches = [
@@ -63,7 +67,7 @@ stdenv.mkDerivation rec {

  configureFlags = [
    "--enable-ncurses"
-    ("--enable-audio=" + builtins.concatStringsSep "," enabledOutputModes)
+    ("--enable-audio=" + builtins.concatStringsSep "," finalAttrs.enabledOutputModes)
    "lib_cv_va_copy=yes"
    "lib_cv___va_copy=yes"
  ]
@@ -108,11 +112,21 @@ stdenv.mkDerivation rec {
    cp ${./timidity.cfg} $out/share/timidity/timidity.cfg
    substituteAllInPlace $out/share/timidity/timidity.cfg
    tar --strip-components=1 -xf $instruments -C $out/share/timidity/
-    # All but one of the symlinks in the instruments tarball have their permissions set to 0000.
-    # This causes problems on systems like Darwin that actually use symlink permissions.
-    chmod -Rh u+rwX $out/share/timidity/
+  ''
+  # All but one of the symlinks in the instruments tarball have their permissions set to 0000.
+  # This causes problems on systems like Darwin that actually use symlink permissions.
+  # Nix chowns the output to root but never canonicalises symlink modes, so this has to grant
+  # read to everyone: with u+rwX only root could readlink(), which breaks NAR serialisation
+  # (`nix copy`, `nix-copy-closure`) for unprivileged users.
+  + ''
+    chmod -Rh a+rX $out/share/timidity/
  '';

+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  doInstallCheck = true;
+
  passthru.tests = nixosTests.timidity;

  meta = {
@@ -123,4 +137,4 @@ stdenv.mkDerivation rec {
    platforms = lib.platforms.unix;
    mainProgram = "timidity";
  };
-}
+})
--- a/pkgs/by-name/we/weasis/package.nix
+++ b/pkgs/by-name/we/weasis/package.nix
@@ -32,12 +32,12 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "weasis";
-  version = "4.7.1";
+  version = "4.7.2";

  # Their build instructions indicate to use the packaging script
  src = fetchzip {
    url = "https://github.com/nroduit/Weasis/releases/download/v${finalAttrs.version}/weasis-native.zip";
-    hash = "sha256-bLqiq4V1a1q2NsUu19MDGkvz0KQoPAruEx9OKWbhsDA=";
+    hash = "sha256-PxU6la1zjLvk6ghLGru4hRYD/D+XsfiTjj00i5Gjzb4=";
    stripRoot = false;
  };

--- a/pkgs/by-name/wi/wio/package.nix
+++ b/pkgs/by-name/wi/wio/package.nix
@@ -50,7 +50,8 @@ stdenv.mkDerivation (finalAttrs: {
    xwayland
  ];

-  strictDeps = false; # why is it so hard?
+  strictDeps = true;
+  __structuredAttrs = true;

  env.NIX_CFLAGS_COMPILE = "-Wno-error=maybe-uninitialized";

--- a/pkgs/development/python-modules/awkward-cpp/default.nix
+++ b/pkgs/development/python-modules/awkward-cpp/default.nix
@@ -17,14 +17,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "awkward-cpp";
-  version = "55";
+  version = "56";
  pyproject = true;
  __structuredAttrs = true;

  src = fetchPypi {
    pname = "awkward_cpp";
    inherit (finalAttrs) version;
-    hash = "sha256-4si+Pmo1PW0qk9Zb4ZALqZd2WxYOp2aPmrIh3l+4o3M=";
+    hash = "sha256-zTY1+rkmxmMMCoXZK1mhWFHE9aiB6nSZhAaQJ2NPj1I=";
  };

  build-system = [
--- a/pkgs/development/python-modules/awkward/default.nix
+++ b/pkgs/development/python-modules/awkward/default.nix
@@ -24,7 +24,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "awkward";
-  version = "2.12.0";
+  version = "2.13.0";
  pyproject = true;
  __structuredAttrs = true;

@@ -32,7 +32,7 @@ buildPythonPackage (finalAttrs: {
    owner = "scikit-hep";
    repo = "awkward";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-X5fwX4HCMPRaYEIEf5cgGWUodtb6eEmU7ue6mjCzVSA=";
+    hash = "sha256-z6/OoWLB5VqNe7iciiemXFp+RnvCLHn4cOA6zS3t6BE=";
  };

  build-system = [
--- a/pkgs/development/python-modules/dlinfo/default.nix
+++ b/pkgs/development/python-modules/dlinfo/default.nix
@@ -33,6 +33,10 @@ buildPythonPackage rec {

  pythonImportsCheck = [ "dlinfo" ];

+  # all tests are broken, see:
+  # https://github.com/fphammerle/python-dlinfo/pull/64
+  doCheck = !stdenv.hostPlatform.isDarwin;
+
  meta = {
    changelog = "https://github.com/fphammerle/python-dlinfo/blob/${src.tag}/CHANGELOG.md";
    description = "Python wrapper for libc's dlinfo and dyld_find on Mac";
--- a/pkgs/development/python-modules/hist/default.nix
+++ b/pkgs/development/python-modules/hist/default.nix
@@ -1,12 +1,19 @@
 {
  lib,
-  fetchPypi,
+  stdenv,
  buildPythonPackage,
-  boost-histogram,
-  histoprint,
+  fetchFromGitHub,
+
+  # build-system
  hatchling,
  hatch-vcs,
+
+  # dependencies
+  boost-histogram,
+  histoprint,
  numpy,
+
+  # tests
  pytestCheckHook,
  pytest-mpl,
 }:
@@ -15,10 +22,13 @@ buildPythonPackage (finalAttrs: {
  pname = "hist";
  version = "2.11.0";
  pyproject = true;
+  __structuredAttrs = true;

-  src = fetchPypi {
-    inherit (finalAttrs) pname version;
-    hash = "sha256-kusfoMo5utYZ9/cEs7qTxEs1U7BEX22ywXxnwBuctTQ=";
+  src = fetchFromGitHub {
+    owner = "scikit-hep";
+    repo = "hist";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-vAaP8oaZUUofymLu0uId94X+vt4o4XyRj5gITxs0ASs=";
  };

  build-system = [
@@ -32,17 +42,23 @@ buildPythonPackage (finalAttrs: {
    numpy
  ];

-  checkInputs = [
+  nativeCheckInputs = [
    pytestCheckHook
    pytest-mpl
  ];

+  disabledTests = lib.optionals stdenv.hostPlatform.isDarwin [
+    # line 23: 92372 Trace/BPT trap: 5
+    "test_to_hist_empty"
+  ];
+
  pythonImportsCheck = [ "hist" ];

  meta = {
    description = "Histogramming for analysis powered by boost-histogram";
    mainProgram = "";
    homepage = "https://hist.readthedocs.io/";
+    downloadPage = "https://github.com/scikit-hep/hist";
    changelog = "https://github.com/scikit-hep/hist/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.bsd3;
    maintainers = with lib.maintainers; [ veprbl ];
--- a/pkgs/development/python-modules/pytibber/default.nix
+++ b/pkgs/development/python-modules/pytibber/default.nix
@@ -7,19 +7,20 @@
  pytest-asyncio,
  pytestCheckHook,
  setuptools,
+  tenacity,
  websockets,
 }:

 buildPythonPackage (finalAttrs: {
  pname = "pytibber";
-  version = "0.37.6";
+  version = "0.38.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Danielhiversen";
    repo = "pyTibber";
    tag = finalAttrs.version;
-    hash = "sha256-pyU8ju1T+AI4UvWq4/gtS8wV0a/cZfoRzlWpoK9eTtM=";
+    hash = "sha256-8b13QG0BHy53xj7N2yDju53ZKfjGpNbe0rUEopPAfVQ=";
  };

  build-system = [ setuptools ];
@@ -27,6 +28,7 @@ buildPythonPackage (finalAttrs: {
  dependencies = [
    aiohttp
    gql
+    tenacity
    websockets
  ];

--- a/pkgs/development/python-modules/reqif/default.nix
+++ b/pkgs/development/python-modules/reqif/default.nix
@@ -12,14 +12,14 @@

 buildPythonPackage rec {
  pname = "reqif";
-  version = "0.0.52";
+  version = "0.0.54";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "strictdoc-project";
    repo = "reqif";
    tag = version;
-    hash = "sha256-4F6yev82Gie03bytJPcHoHPK8AfyYS6Eowg10dTAjGU=";
+    hash = "sha256-42iDfZTlNiYMWz/l5NO4aQ/MqfhNj/RXcv9qOiAaloM=";
  };

  postPatch = ''
--- a/pkgs/development/python-modules/rocketchat-api/default.nix
+++ b/pkgs/development/python-modules/rocketchat-api/default.nix
@@ -8,16 +8,16 @@
  requests,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "rocketchat-api";
-  version = "3.7.0";
+  version = "3.7.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "jadolg";
    repo = "rocketchat_API";
-    tag = version;
-    hash = "sha256-s+RyHzuWI5pVshTG/DsgtC9+lpexTMkPJYNpNrI7Jkc=";
+    tag = finalAttrs.version;
+    hash = "sha256-hAm67dEHXQy3huW9hFxxdVuEdqpgZpjuZMYM3KVq3GA=";
  };

  build-system = [
@@ -40,10 +40,10 @@ buildPythonPackage rec {
  doCheck = false;

  meta = {
-    changelog = "https://github.com/jadolg/rocketchat_API/releases/tag/${src.tag}";
+    changelog = "https://github.com/jadolg/rocketchat_API/releases/tag/${finalAttrs.src.tag}";
    description = "Python API wrapper for Rocket.Chat";
    homepage = "https://github.com/jadolg/rocketchat_API";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ dotlambda ];
  };
-}
+})