From 40e39de3df72f7e68d7ec236bd36b07e664d8bd3 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 6 Aug 2026 18:55:46 +0000
Subject: [PATCH 01/31] udisks: 2.11.1 -> 2.11.2

(cherry picked from commit e248743ab2f257e73787d650173c0616e810376d)
---
 pkgs/by-name/ud/udisks/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ud/udisks/package.nix b/pkgs/by-name/ud/udisks/package.nix
index bcbb9d450506..9761a5e10247 100644
--- a/pkgs/by-name/ud/udisks/package.nix
+++ b/pkgs/by-name/ud/udisks/package.nix
@@ -42,13 +42,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "udisks";
-  version = "2.11.1";
+  version = "2.11.2";
 
   src = fetchFromGitHub {
     owner = "storaged-project";
     repo = "udisks";
     tag = "udisks-${finalAttrs.version}";
-    hash = "sha256-FZr5AhAxvMbaonYIClHgxsoHaGR2nIClK65IEaYxMeA=";
+    hash = "sha256-bzTposLFl8jrRr+MphV8uM60TBFPuvwEKBUgVlq1YNo=";
   };
 
   outputs = [

From f223883455f2d2b0d3a84766e35f44685214b9f5 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 1 Aug 2026 08:25:01 +0000
Subject: [PATCH 02/31] jetbrains.pycharm: 2026.2 -> 2026.2.0.1

(cherry picked from commit 19c7019c1cf51b306513d8955cb29b28b73c99e5)
---
 .../editors/jetbrains/ides/pycharm.nix           | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/pkgs/applications/editors/jetbrains/ides/pycharm.nix b/pkgs/applications/editors/jetbrains/ides/pycharm.nix
index c67b7f7e49a8..b3b40d7bfbc3 100644
--- a/pkgs/applications/editors/jetbrains/ides/pycharm.nix
+++ b/pkgs/applications/editors/jetbrains/ides/pycharm.nix
@@ -13,20 +13,20 @@ let
   # update-script-start: urls
   urls = {
     x86_64-linux = {
-      url = "https://download.jetbrains.com/python/pycharm-2026.2.tar.gz";
-      hash = "sha256-rDb3wHQ0ZSFb+CJwebdycpRTOMSFwdprkk5WRoBGvVo=";
+      url = "https://download.jetbrains.com/python/pycharm-2026.2.0.1.tar.gz";
+      hash = "sha256-SjfLLRVwNVPGHoFNjgFL+kcwhQhHDeX5aMTpZFt3FnU=";
     };
     aarch64-linux = {
-      url = "https://download.jetbrains.com/python/pycharm-2026.2-aarch64.tar.gz";
-      hash = "sha256-O2PS9JDBTFQcmK/YUfIYBpo8iFzq7dm9sA5aByhc+AI=";
+      url = "https://download.jetbrains.com/python/pycharm-2026.2.0.1-aarch64.tar.gz";
+      hash = "sha256-8ptqeCpY+rsjJxXbj++XZb/a68brWQ7UYsT5ZWIidCc=";
     };
     x86_64-darwin = {
       url = "https://download.jetbrains.com/python/pycharm-2026.1.4.dmg";
       hash = "sha256-Q5hTcYoNUzmAxwcsXJNS4medQjFKWc/Sgkybt4PQPfg=";
     };
     aarch64-darwin = {
-      url = "https://download.jetbrains.com/python/pycharm-2026.2-aarch64.dmg";
-      hash = "sha256-wiOQISfsvBnlpjeyzAPXUJfXOwYwrZ8nGoiRRvQ4YUY=";
+      url = "https://download.jetbrains.com/python/pycharm-2026.2.0.1-aarch64.dmg";
+      hash = "sha256-X3YP6mtKkBvBp2UoQWfwX5AjenwwwKTSmP9GUESVDdQ=";
     };
   };
   # update-script-end: urls
@@ -40,8 +40,8 @@ in
   product = "PyCharm";
 
   # update-script-start: version
-  version = "2026.2";
-  buildNumber = "262.8665.309";
+  version = "2026.2.0.1";
+  buildNumber = "262.8665.369";
   # update-script-end: version
 
   src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));

From 394aa214ce7514f9f79729054cdc572bbe790f32 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 12 Aug 2026 17:01:48 +0000
Subject: [PATCH 03/31] pnpm: 11.20.0 -> 11.21.0

(cherry picked from commit 69bdc46745b8a36894656ca1895ddcf93e1d82c8)
---
 pkgs/development/tools/pnpm/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/tools/pnpm/default.nix b/pkgs/development/tools/pnpm/default.nix
index 63d0aee7da4e..4d4444515db3 100644
--- a/pkgs/development/tools/pnpm/default.nix
+++ b/pkgs/development/tools/pnpm/default.nix
@@ -53,8 +53,8 @@ let
       hash = "sha256-WOFDJYhx31FYm2UcBiBdq+xIdmpdu6PCWZm2m1C+WY4=";
     };
     "11" = {
-      version = "11.20.0";
-      hash = "sha256-NOGYyx5DI3UX7O39MfmuJqbAo+U2bOWKLQX0sh+18Zo=";
+      version = "11.21.0";
+      hash = "sha256-hyN9N+rbedxiagV26zpS0j1wQiwyOuXgD8BckfQyN4A=";
     };
   };
 

From 7268f9331c34d0d036775af4d1267077eed45a3e Mon Sep 17 00:00:00 2001
From: Chris Moultrie <821688+tebriel@users.noreply.github.com>
Date: Tue, 14 Jul 2026 09:36:19 -0400
Subject: [PATCH 04/31] navidromePlugins.listenbrainz-daily-playlist: 5.0.2 ->
 6.0.0

(cherry picked from commit ba31f6a0e3d10c722694b9da291df379244abcde)
---
 .../plugins/listenbrainz-daily-playlist/package.nix         | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/na/navidrome/plugins/listenbrainz-daily-playlist/package.nix b/pkgs/by-name/na/navidrome/plugins/listenbrainz-daily-playlist/package.nix
index ae2fc72d2e33..9023735ac6f3 100644
--- a/pkgs/by-name/na/navidrome/plugins/listenbrainz-daily-playlist/package.nix
+++ b/pkgs/by-name/na/navidrome/plugins/listenbrainz-daily-playlist/package.nix
@@ -5,16 +5,16 @@
 }:
 buildNavidromePlugin rec {
   pname = "listenbrainz-daily-playlist";
-  version = "5.0.2";
+  version = "6.0.0";
 
   src = pkgs.fetchFromGitHub {
     owner = "kgarner7";
     repo = "navidrome-listenbrainz-daily-playlist";
     tag = "v${version}";
-    hash = "sha256-DsbnTu+Xi9pAG9fKgtlixxrd3od41TTeZ1hdjyEyGnk=";
+    hash = "sha256-Pzn6KwYzaCNGRH93lR4wfVnTiFr2zo8J2DAAZd41oas=";
   };
 
-  vendorHash = "sha256-zCKLwS85+aC4jfRcC2SjKGK/OYjW+izIhKKKLxNroQg=";
+  vendorHash = "sha256-wvRQjLom1ZmDabsPwin5uiR8ggSDWBrEvaFljuUd/bo=";
 
   meta = {
     description = "fetch daily/weekly playlists from ListenBrainz";

From 214c4062fc0ec2464ca6b408518ed6d65724b2d5 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 13 Aug 2026 11:08:34 +0000
Subject: [PATCH 05/31] garnet: 2.1.1 -> 2.1.4

(cherry picked from commit ea8d5bc3e8b6cfe77b3421f58dfa4fea02516c83)
---
 pkgs/by-name/ga/garnet/deps.json   | 4 ++--
 pkgs/by-name/ga/garnet/package.nix | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ga/garnet/deps.json b/pkgs/by-name/ga/garnet/deps.json
index aaca6301cd63..42438fb9e103 100644
--- a/pkgs/by-name/ga/garnet/deps.json
+++ b/pkgs/by-name/ga/garnet/deps.json
@@ -31,8 +31,8 @@
   },
   {
     "pname": "diskann-garnet",
-    "version": "4.0.2",
-    "hash": "sha256-0uV+dqa730iH0GDNzaU2mXaMwzPI2B4VF/mjcTtHQOU="
+    "version": "4.0.4",
+    "hash": "sha256-R1MB/9HGe9clojNjFnfQKsUe7Vf81iuGbo4FQVNf1Uo="
   },
   {
     "pname": "KeraLua",
diff --git a/pkgs/by-name/ga/garnet/package.nix b/pkgs/by-name/ga/garnet/package.nix
index 42ba249ccc48..876f5b6571b1 100644
--- a/pkgs/by-name/ga/garnet/package.nix
+++ b/pkgs/by-name/ga/garnet/package.nix
@@ -8,13 +8,13 @@
 
 buildDotnetModule rec {
   pname = "garnet";
-  version = "2.1.1";
+  version = "2.1.4";
 
   src = fetchFromGitHub {
     owner = "microsoft";
     repo = "garnet";
     tag = "v${version}";
-    hash = "sha256-ngHibS0opJlZEW54kx4p61r4Djoli2Vl6z4qXm/gLIw=";
+    hash = "sha256-bzmB7PbYp09Jo7WZO1e4yipaonFljnLJfkucA+qAF/4=";
   };
 
   projectFile = "main/GarnetServer/GarnetServer.csproj";

From e37da56733ab1e7e16478aea39b80f5c8f0d142e Mon Sep 17 00:00:00 2001
From: thesn10 <38666407+thesn10@users.noreply.github.com>
Date: Wed, 12 Aug 2026 23:27:59 +0200
Subject: [PATCH 06/31] gpac: 26.02.0 -> 26.07.0

(cherry picked from commit 488aa6181519d668722e89dd912e2ac88f551aa3)
---
 pkgs/by-name/gp/gpac/package.nix | 19 +++++--------------
 1 file changed, 5 insertions(+), 14 deletions(-)

diff --git a/pkgs/by-name/gp/gpac/package.nix b/pkgs/by-name/gp/gpac/package.nix
index 8481df4a695d..54b9e0b45eb9 100644
--- a/pkgs/by-name/gp/gpac/package.nix
+++ b/pkgs/by-name/gp/gpac/package.nix
@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  fetchpatch2,
   gitUpdater,
   unstableGitUpdater,
   cctools,
@@ -40,12 +39,12 @@
 
 let
   stable = rec {
-    version = "26.02.0";
+    version = "26.07.0";
     src = fetchFromGitHub {
       owner = "gpac";
       repo = "gpac";
       rev = "v${version}";
-      hash = "sha256-UtL+KG3dsp6dD7cfTK7e17ngt/RHKJL0s5IopTM3VOk=";
+      hash = "sha256-L4GKXCFsKVxWXZJJeiAegXJySoS9+/V+/cuzEJEse+I=";
     };
     updateScript = gitUpdater {
       rev-prefix = "v";
@@ -53,12 +52,12 @@ let
     };
   };
   unstable = {
-    version = "26.02.0-unstable-2026-04-29";
+    version = "26.07.0-unstable-2026-08-04";
     src = fetchFromGitHub {
       owner = "gpac";
       repo = "gpac";
-      rev = "525bf1af642c30af04e4df5345e6d798c0a4d8a1";
-      hash = "sha256-G/4gefsS2hUKo8VEt80YZOaGJSjrzXFrdHO/u33BiDw=";
+      rev = "014bb6de5136e9466f6339486901db4d46570784";
+      hash = "sha256-Uj3+CH2xkw504A2LUmruQ5vdQXhGqKY7Lx1Yp5263J0=";
     };
     updateScript = unstableGitUpdater {
       tagFormat = "v*";
@@ -111,14 +110,6 @@ stdenv.mkDerivation (finalAttrs: {
     curl
   ];
 
-  patches = lib.optionals (releaseChannel == "stable") [
-    (fetchpatch2 {
-      # CVE-2026-7135 fix
-      url = "https://github.com/gpac/gpac/commit/cf6ac48c972eaaee2af270adc3f36615325deb3e.patch?full_index=1";
-      hash = "sha256-JaJiQAQvzdB74ag2/aZTiQa2NqlgqgMYS1tsk/R+wiI=";
-    })
-  ];
-
   enableParallelBuilding = true;
 
   passthru.updateScript = channelToUse.updateScript;

From 2ca96c19efbf7a2c1bff65e5ab1dcf02d9841c1a Mon Sep 17 00:00:00 2001
From: Carl Richard Theodor Schneider <dev.github@crtified.me>
Date: Sun, 16 Aug 2026 02:42:27 +0200
Subject: [PATCH 07/31] rlottie: 0.2-unstable-2026-07-03 ->
 0.2-unstable-2026-08-11

(cherry picked from commit 0283bad9440b51377454092671914264ce408c49)
---
 pkgs/by-name/rl/rlottie/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/rl/rlottie/package.nix b/pkgs/by-name/rl/rlottie/package.nix
index f1c415592b5c..e62fc40d8929 100644
--- a/pkgs/by-name/rl/rlottie/package.nix
+++ b/pkgs/by-name/rl/rlottie/package.nix
@@ -10,13 +10,13 @@
 
 stdenv.mkDerivation {
   pname = "rlottie";
-  version = "0.2-unstable-2026-07-03";
+  version = "0.2-unstable-2026-08-11";
 
   src = fetchFromGitHub {
     owner = "Samsung";
     repo = "rlottie";
-    rev = "f487eff2f8086b84ae1c7faa0418abec909e874b";
-    hash = "sha256-/Sv5qX1V6VltJN0+bkKU2utaj8Yw1owb0KjJFWv41Js=";
+    rev = "27f2f23ece8a98f3e0a870e2c125faaac37e8904";
+    hash = "sha256-wEcdPKmS0f6C0A/Rg7vsZGoRi2Uv1EmA31BR2EmIlGg=";
   };
 
   nativeBuildInputs = [

From 6a7accceeafd145a9dbebedcdc7e99631ce93071 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 15 Aug 2026 02:20:50 +0000
Subject: [PATCH 08/31] vivaldi: 8.1.4087.61 -> 8.1.4087.66

(cherry picked from commit dc146c99d8935dab5876a15018cc6908ab83d5ab)
---
 pkgs/by-name/vi/vivaldi/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/vi/vivaldi/package.nix b/pkgs/by-name/vi/vivaldi/package.nix
index 83440be7198f..d690cd6aa021 100644
--- a/pkgs/by-name/vi/vivaldi/package.nix
+++ b/pkgs/by-name/vi/vivaldi/package.nix
@@ -66,7 +66,7 @@
 
 stdenv.mkDerivation rec {
   pname = "vivaldi";
-  version = "8.1.4087.61";
+  version = "8.1.4087.66";
 
   suffix =
     {
@@ -79,8 +79,8 @@ stdenv.mkDerivation rec {
     url = "https://downloads.vivaldi.com/stable/vivaldi-stable_${version}-1_${suffix}.deb";
     hash =
       {
-        aarch64-linux = "sha256-dr6elx+KCmwqwPDnGXO8M4vMmEjCUfILULBKuKvQMEg=";
-        x86_64-linux = "sha256-fluTiicLsQgqGsdBZlRo8QSLI03xjhhXwuZog3Dc44Y=";
+        aarch64-linux = "sha256-7cTCzyIb0e+y0Pa6Im0QGBp7J5KhbYWsYEAgTtcNZIw=";
+        x86_64-linux = "sha256-fwwJ07JmPT+6st8aYgvmkQtn6Pc8aP4GcSf1jAnRBAg=";
       }
       .${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
   };

From 74a46296de75a212f087ccf01d306a06033d9029 Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Sun, 16 Aug 2026 10:01:28 +0000
Subject: [PATCH 09/31] exo: add CVE-2026-14738 to meta.knownVulnerabilities

(cherry picked from commit da18f5a1e3e282acf248ed872192db69d58fd259)
---
 pkgs/by-name/ex/exo/package.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkgs/by-name/ex/exo/package.nix b/pkgs/by-name/ex/exo/package.nix
index d8acacd3973a..ddfbd103e0df 100644
--- a/pkgs/by-name/ex/exo/package.nix
+++ b/pkgs/by-name/ex/exo/package.nix
@@ -225,5 +225,9 @@ python3Packages.buildPythonApplication (finalAttrs: {
     license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [ GaetanLepage ];
     mainProgram = "exo";
+    knownVulnerabilities = [
+      # https://github.com/NixOS/nixpkgs/issues/538886
+      "CVE-2026-14738"
+    ];
   };
 })

From a43feb110fdc05145f026a5ce3fd78a55470f15c Mon Sep 17 00:00:00 2001
From: Vegard Bieker Matthey <VegardMatthey@protonmail.com>
Date: Tue, 4 Aug 2026 15:56:50 +0200
Subject: [PATCH 10/31] calibre: 9.11.0 -> 9.13.0

(cherry picked from commit 8200b7851bd1be631958e5648f75c7f8bf7015ba)
---
 pkgs/by-name/ca/calibre/dont_build_unrar_plugin.patch | 11 ++++++-----
 pkgs/by-name/ca/calibre/package.nix                   |  9 +++++----
 2 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/pkgs/by-name/ca/calibre/dont_build_unrar_plugin.patch b/pkgs/by-name/ca/calibre/dont_build_unrar_plugin.patch
index e88e7374431c..e501844516f7 100644
--- a/pkgs/by-name/ca/calibre/dont_build_unrar_plugin.patch
+++ b/pkgs/by-name/ca/calibre/dont_build_unrar_plugin.patch
@@ -1,12 +1,13 @@
 diff --git a/src/calibre/ebooks/metadata/archive.py b/src/calibre/ebooks/metadata/archive.py
-index 50b4750124..858e39eece 100644
+index 83a549d3b6..a4c5fe5ce5 100644
 --- a/src/calibre/ebooks/metadata/archive.py
 +++ b/src/calibre/ebooks/metadata/archive.py
-@@ -99,7 +99,7 @@ class ArchiveExtract(FileTypePlugin):
-     description = _('Extract common e-book formats from archive files '
-         '(ZIP/RAR/7z). Also try to autodetect if they are actually '
-         'CBZ/CBR/CB7 files.')
+@@ -127,7 +127,7 @@ class ArchiveExtract(FileTypePlugin):
+     name = 'Archive Extract'
+     author = 'Kovid Goyal'
+     description = _('Extract common e-book formats from archive files (ZIP/RAR/7z). Also try to autodetect if they are actually CBZ/CBR/CB7 files.')
 -    file_types = {'zip', 'rar', '7z'}
 +    file_types = {'zip', '7z'}
      supported_platforms = ['windows', 'osx', 'linux']
      on_import = True
+ 
diff --git a/pkgs/by-name/ca/calibre/package.nix b/pkgs/by-name/ca/calibre/package.nix
index 3366415baac9..89a6d8844292 100644
--- a/pkgs/by-name/ca/calibre/package.nix
+++ b/pkgs/by-name/ca/calibre/package.nix
@@ -40,11 +40,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "calibre";
-  version = "9.11.0";
+  version = "9.13.0";
 
   src = fetchurl {
     url = "https://download.calibre-ebook.com/${finalAttrs.version}/calibre-${finalAttrs.version}.tar.xz";
-    hash = "sha256-UNQuOzLsURb2sd8JlTf0vsrza/7ez59YG3Q/Edi2yzY=";
+    hash = "sha256-ONfYjXq8vGLG/jV1SD+1STzpYtJhqXihpNtNWLxLN5M=";
   };
 
   patches =
@@ -57,12 +57,12 @@ stdenv.mkDerivation (finalAttrs: {
       (fetchpatch {
         name = "0001-only-plugin-update-${debian-tag}.patch";
         url = "https://github.com/debian-calibre/calibre/raw/refs/tags/debian/${debian-tag}/debian/patches/0001-only-plugin-update.patch";
-        hash = "sha256-/Hz8DSL1VC/wwQPOssM54MInLidfo7kJoR69yi2wAP4=";
+        hash = "sha256-2QhNf9CBxvoMiK9ZqBWnA/zdcIYpY+HGG0uguUZbinw=";
       })
       (fetchpatch {
         name = "0007-Hardening-Qt-code-${debian-tag}.patch";
         url = "https://github.com/debian-calibre/calibre/raw/refs/tags/debian/${debian-tag}/debian/patches/hardening/0007-Hardening-Qt-code.patch";
-        hash = "sha256-/xXkxFJNRnjH8RmXcotrPI6rZ+I1ENjikl1eLU0NEjQ=";
+        hash = "sha256-ItJalYmBhK4Qgz6QDGbPpBMaa6oGQetQvg5ie3oxFMM=";
       })
     ]
     ++ lib.optional (!unrarSupport) ./dont_build_unrar_plugin.patch;
@@ -123,6 +123,7 @@ stdenv.mkDerivation (finalAttrs: {
         dnspython
         faust-cchardet
         feedparser
+        feedparser-sgmllib
         html2text
         html5-parser
         lxml

From f363f9aed5f25151018797c6a5c388dcaab40abf Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 15 Aug 2026 12:09:32 +0000
Subject: [PATCH 11/31] checkstyle: 13.9.0 -> 13.10.0

(cherry picked from commit f4521e7cfec886cea46d4f95b14bcfb8e2a606f0)
---
 pkgs/by-name/ch/checkstyle/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ch/checkstyle/package.nix b/pkgs/by-name/ch/checkstyle/package.nix
index 9fb629e6dfb6..149f768dd576 100644
--- a/pkgs/by-name/ch/checkstyle/package.nix
+++ b/pkgs/by-name/ch/checkstyle/package.nix
@@ -8,17 +8,17 @@
 }:
 
 maven.buildMavenPackage (finalAttrs: {
-  version = "13.9.0";
+  version = "13.10.0";
   pname = "checkstyle";
 
   src = fetchFromGitHub {
     owner = "checkstyle";
     repo = "checkstyle";
     tag = "checkstyle-${finalAttrs.version}";
-    hash = "sha256-1ddajDPf32fauHA3zFTMa6s/cJqrhTI1z4E2GOWRxn4=";
+    hash = "sha256-RJ0ALYE+X2wUdFB4WpGIKYYeRau7AHr5m2Qk3amiXX4=";
   };
 
-  mvnHash = "sha256-T5zXmanif0ttB1srKzYeoXAQQqhRfAUW2V7v7N/I79k=";
+  mvnHash = "sha256-NWTabR7E3aXkLaERZmolOoWPzERnOT/1q7+DW815p9U=";
 
   nativeBuildInputs = [
     maven

From 23a9453e9e997ad6fccace8d73a611487b08942b Mon Sep 17 00:00:00 2001
From: Vegard Bieker Matthey <VegardMatthey@protonmail.com>
Date: Mon, 10 Aug 2026 20:44:20 +0200
Subject: [PATCH 12/31] maintainers: add ar4m1s

(cherry picked from commit f390d0d6bdeaea7dad307b10be80ab1c876a7b84)
---
 maintainers/maintainer-list.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 7564e6556dcf..ccb50ef99e53 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -2102,6 +2102,12 @@
     githubId = 8436007;
     name = "Aria Edmonds";
   };
+  ar4m1s = {
+    name = "Aramis";
+    github = "Ar4m1s";
+    githubId = 59250656;
+    matrix = "@vegardbm:matrix.org";
+  };
   arbel-arad = {
     email = "arbel@spacetime.technology";
     github = "arbel-arad";

From c8ab23b48706d359b039bc412ae5802b1fe3657a Mon Sep 17 00:00:00 2001
From: Vegard Bieker Matthey <VegardMatthey@protonmail.com>
Date: Mon, 10 Aug 2026 19:51:28 +0200
Subject: [PATCH 13/31] feedparser-sgmllib: init at 2.1.0

Co-authored-by: h7x4 <h7x4@nani.wtf>
Co-authored-by: Peder Bergebakken Sundt <pbsds@hotmail.com>
(cherry picked from commit 98a5088236f65365df5054144ee683a96ea28086)
---
 .../feedparser-sgmllib/default.nix            | 34 +++++++++++++++++++
 pkgs/top-level/python-packages.nix            |  2 ++
 2 files changed, 36 insertions(+)
 create mode 100644 pkgs/development/python-modules/feedparser-sgmllib/default.nix

diff --git a/pkgs/development/python-modules/feedparser-sgmllib/default.nix b/pkgs/development/python-modules/feedparser-sgmllib/default.nix
new file mode 100644
index 000000000000..41d1748ff1c4
--- /dev/null
+++ b/pkgs/development/python-modules/feedparser-sgmllib/default.nix
@@ -0,0 +1,34 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchPypi,
+  pytestCheckHook,
+  poetry-core,
+}:
+
+buildPythonPackage rec {
+  pname = "feedparser-sgmllib";
+  version = "2.1.0";
+  pyproject = true;
+  src = fetchPypi {
+    pname = "feedparser_sgmllib";
+    inherit version;
+    hash = "sha256-YfrPKRjEOJtbAHFPdsXgNDH/zZTNH1HWV+3WzXw5ZXk=";
+  };
+  build-system = [ poetry-core ];
+  dependencies = [ ];
+
+  doCheck = true;
+  nativeCheckInputs = [ pytestCheckHook ];
+
+  pythonImportsCheck = [ "feedparser_sgmllib" ];
+
+  meta = {
+    homepage = "https://pypi.org/project/feedparser-sgmllib/";
+    changelog = "https://github.com/python-syndication/feedparser-sgmllib/releases/tag/v${version}";
+
+    description = "Python 3 port of sgmllib designed for use with feedparser";
+    license = lib.licenses.psfl;
+    maintainers = with lib.maintainers; [ ar4m1s ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 1c3140566cee..e6766b6cf928 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -5545,6 +5545,8 @@ self: super: with self; {
 
   feedparser = callPackage ../development/python-modules/feedparser { };
 
+  feedparser-sgmllib = callPackage ../development/python-modules/feedparser-sgmllib { };
+
   fenics-basix = callPackage ../development/python-modules/fenics-basix { };
 
   fenics-dolfinx = callPackage ../development/python-modules/fenics-dolfinx { };

From cd8b7116a1c2c90020a55047c8a94db134dda363 Mon Sep 17 00:00:00 2001
From: Pavol Rusnak <pavol@rusnak.io>
Date: Fri, 31 Jul 2026 14:55:06 +0200
Subject: [PATCH 14/31] python3Packages.trezor: 0.20.0 -> 0.20.2

(cherry picked from commit efabce55eaeabb5476b80f2adc4870414353a5f7)
---
 pkgs/development/python-modules/trezor/default.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/development/python-modules/trezor/default.nix b/pkgs/development/python-modules/trezor/default.nix
index 6b124472de72..cc6a730bc3da 100644
--- a/pkgs/development/python-modules/trezor/default.nix
+++ b/pkgs/development/python-modules/trezor/default.nix
@@ -3,7 +3,7 @@
   lib,
   buildPythonPackage,
   fetchPypi,
-  hatchling,
+  flit-core,
   pytestCheckHook,
   pytest-random-order,
   # dependencies
@@ -30,15 +30,15 @@
 
 buildPythonPackage rec {
   pname = "trezor";
-  version = "0.20.0";
+  version = "0.20.2";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-TAmOIDFbJxZnOr3vQCgi5xiRAVmMfAPyN0ndIBDuJQQ=";
+    hash = "sha256-CrPOu0T+y1Mrd9WitAG1AYeh1wtyUabMLfVJTlL/31c=";
   };
 
-  build-system = [ hatchling ];
+  build-system = [ flit-core ];
 
   dependencies = [
     click

From 6653219f3940526848fbd8ca95cb9dedf547e61c Mon Sep 17 00:00:00 2001
From: Mark Polyakov <mark@markasoftware.com>
Date: Sat, 15 Aug 2026 15:57:39 -0700
Subject: [PATCH 15/31] electrum: move trezor into default dependencies

The Trezor dependency (which enables support for the Trezor hardware wallet) was gated behind the
enablePythonEcdsa override prior to this change because the trezor python package used to depend on
the ecdsa python package which is marked insecure. However, modern versions of the trezor package no
longer depend on ecdsa so it should be enabled by default, like the Ledger hardware wallet package.

(cherry picked from commit d0da9f0d5974816bef06398b27923b8cb1ad1017)
---
 pkgs/applications/misc/electrum/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/applications/misc/electrum/default.nix b/pkgs/applications/misc/electrum/default.nix
index ae0950b70b13..57139a1ab172 100644
--- a/pkgs/applications/misc/electrum/default.nix
+++ b/pkgs/applications/misc/electrum/default.nix
@@ -67,13 +67,13 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
       ledger-bitcoin
       cbor2
       pyserial
+      trezor
     ]
     ++ lib.optionals enablePythonEcdsa [
       # enablePythonEcdsa gates plugins known to pull in python-ecdsa, which we
       # avoid by default due to CVE-2024-23342.
       ckcc-protocol
       keepkey
-      trezor
       bitbox02
     ]
     ++ lib.optionals enableQt [

From 671880aa1c1b5e73cffac67a9d46c8709cc64243 Mon Sep 17 00:00:00 2001
From: Ryan Omasta <git@ryand.ca>
Date: Wed, 12 Aug 2026 20:20:27 -0600
Subject: [PATCH 16/31] electrum: 4.8.0 -> 4.8.1

https://github.com/spesmilo/electrum/blob/4.8.1/RELEASE-NOTES
Diff: https://github.com/spesmilo/electrum/compare/4.8.0...4.8.1
(cherry picked from commit 3ffc4733f9034112c97ec62b5d758dc413e8bbfd)
---
 pkgs/applications/misc/electrum/default.nix | 23 ++++++++++-----------
 1 file changed, 11 insertions(+), 12 deletions(-)

diff --git a/pkgs/applications/misc/electrum/default.nix b/pkgs/applications/misc/electrum/default.nix
index ae0950b70b13..c09b6dc1ee6f 100644
--- a/pkgs/applications/misc/electrum/default.nix
+++ b/pkgs/applications/misc/electrum/default.nix
@@ -9,6 +9,8 @@
   enablePythonEcdsa ? false,
   callPackage,
   qtwayland,
+
+  writableTmpDirAsHomeHook,
 }:
 
 let
@@ -22,17 +24,15 @@ let
 in
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "electrum";
-  version = "4.8.0";
+  version = "4.8.1";
   pyproject = true;
 
   src = fetchurl {
     url = "https://download.electrum.org/${finalAttrs.version}/Electrum-${finalAttrs.version}.tar.gz";
-    hash = "sha256-z14bzs81eJNTMSWSBLTyCmsljDNztG54SVkoTcSqvsM=";
+    hash = "sha256-71t/YdLItZg6D5yFFVbjpveKncIv5hG7pJxu67a9/b4=";
   };
 
-  build-system = with python3.pkgs; [
-    setuptools
-  ];
+  build-system = [ python3.pkgs.setuptools ];
 
   nativeBuildInputs = [
     python3.pkgs.pythonRelaxDepsHook
@@ -90,11 +90,9 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
     "protobuf"
   ];
 
-  checkInputs =
-    with python3.pkgs;
-    lib.optionals enableQt [
-      pyqt6
-    ];
+  checkInputs = lib.optionals enableQt [
+    python3.pkgs.pyqt6
+  ];
   disabledTestPaths = lib.optionals (!enableQt) [
     "tests/test_qml_types.py"
   ];
@@ -132,14 +130,15 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
     pytestCheckHook
     pyaes
     pycryptodomex
+
+    # avoid homeless-shelter error in tests
+    writableTmpDirAsHomeHook
   ];
 
   enabledTestPaths = [ "tests" ];
 
-  # avoid homeless-shelter error in tests
   preCheck = ''
     export PYTHONPATH=${python3.pkgs.protobuf}/${python3.sitePackages}:$PYTHONPATH
-    export HOME="$(mktemp -d)"
   '';
 
   postCheck = ''

From fbd253fc832c742b3448fbfb189b2a5100672d4f Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 16 Aug 2026 01:07:54 +0000
Subject: [PATCH 17/31] porxie: 0.3.3 -> 0.3.4

(cherry picked from commit 79446bb8966502997ba73e9830cec3449835c08b)
---
 pkgs/by-name/po/porxie/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/po/porxie/package.nix b/pkgs/by-name/po/porxie/package.nix
index d8dd4adf7346..782bb71f1c59 100644
--- a/pkgs/by-name/po/porxie/package.nix
+++ b/pkgs/by-name/po/porxie/package.nix
@@ -11,15 +11,15 @@ rustPlatform.buildRustPackage (finalAttrs: {
   __structuredAttrs = true;
 
   pname = "porxie";
-  version = "0.3.3";
+  version = "0.3.4";
 
   src = fetchFromCodeberg {
     owner = "Blooym";
     repo = "porxie";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-nB0QbGJ6emO1WLbIYAvCni6Xjs1AgQo8in6Y3Tof01g=";
+    hash = "sha256-jj8NLmaYVVBNpojq3cTuNXYEgBAxQ6wcPH2sLSB5cbo=";
   };
-  cargoHash = "sha256-7iupGBdDvk4hofMVNuVTt67M7EOveYb3hD1mk2BJRbU=";
+  cargoHash = "sha256-ZXNbZtqMayiVc7BOmmeRyN/Z5pKJRHJmgclaCLyVhYc=";
 
   buildInputs = [ rust-jemalloc-sys ];
 

From 005426b897a021869ccd508179aaee2aed5c1c70 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 12 Aug 2026 09:54:47 +0000
Subject: [PATCH 18/31] modrinth-app-unwrapped: 0.17.3 -> 0.17.5

(cherry picked from commit f87c72c5ac550d1ac1621fd106c61922e531b29e)
---
 pkgs/by-name/mo/modrinth-app-unwrapped/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/mo/modrinth-app-unwrapped/package.nix b/pkgs/by-name/mo/modrinth-app-unwrapped/package.nix
index fd37b195cda4..84b7167aed58 100644
--- a/pkgs/by-name/mo/modrinth-app-unwrapped/package.nix
+++ b/pkgs/by-name/mo/modrinth-app-unwrapped/package.nix
@@ -31,13 +31,13 @@ in
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "modrinth-app-unwrapped";
-  version = "0.17.3";
+  version = "0.17.5";
 
   src = fetchFromGitHub {
     owner = "modrinth";
     repo = "code";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-9PpUh02d0av3mPvDbNSIJeVqN5pG/8K6WHa/pT0Jems=";
+    hash = "sha256-HNy+3Pmq3TzyC+APMjbRnkHNGkLmAo9gwlhA98rEoTI=";
   };
 
   patches = [
@@ -67,7 +67,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
       --replace-fail '1.0.0-local' '${finalAttrs.version}'
   '';
 
-  cargoHash = "sha256-grrFXOZtno6Z7deTYn8DcOkQ9y2LEOvKi8+cezh0RXQ=";
+  cargoHash = "sha256-xxENtlRwBvizNAlyKk+DdyqZN5YMJmm4CTGv8G6SXA8=";
 
   mitmCache = gradle.fetchDeps {
     inherit (finalAttrs) pname;
@@ -78,7 +78,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_10;
     fetcherVersion = 3;
-    hash = "sha256-mMoNSvA0GZ7lUfXY3Yqpi3CWifTfwGDQJKG6dJbAhOc=";
+    hash = "sha256-N4bNjls36V9H5gq4vEBFrjhanMXTGGiTl2Z04YTEUx4=";
   };
 
   nativeBuildInputs = [

From b83411c4b8241fd0dc9abb4a7aef387c59dc8a3e Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 9 Aug 2026 13:04:14 +0000
Subject: [PATCH 19/31] roundcube: 1.7.2 -> 1.7.3

(cherry picked from commit 2238fdf816da96813945d90d80d5502b038c54ec)
---
 pkgs/servers/roundcube/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/roundcube/default.nix b/pkgs/servers/roundcube/default.nix
index 242bb2a03523..8ca94ed55d71 100644
--- a/pkgs/servers/roundcube/default.nix
+++ b/pkgs/servers/roundcube/default.nix
@@ -11,11 +11,11 @@
 
 stdenv.mkDerivation rec {
   pname = "roundcube";
-  version = "1.7.2";
+  version = "1.7.3";
 
   src = fetchurl {
     url = "https://github.com/roundcube/roundcubemail/releases/download/${version}/roundcubemail-${version}-complete.tar.gz";
-    sha256 = "sha256-Ab+e3hZl5QfblLqxNh6+0g7jU9ugS8YosA+27KBa89E=";
+    sha256 = "sha256-RDzeLqA7hAzkcB/iPCc/AeaHAvF20oLmAkgja7tfX4U=";
   };
 
   patches = [ ./0001-Don-t-resolve-symlinks-when-trying-to-find-INSTALL_P.patch ];

From a9186cd31fa47529cabf7be4c4ca20630d385e02 Mon Sep 17 00:00:00 2001
From: Beardhatcode <git@beardhatcode.be>
Date: Fri, 14 Aug 2026 12:17:31 +0200
Subject: [PATCH 20/31] nextcloud32: 32.0.13 -> 32.0.14

(cherry picked from commit 497f6e8dbf1bb51ac1f65fef0004e89af5bf57c8)
---
 pkgs/servers/nextcloud/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/nextcloud/default.nix b/pkgs/servers/nextcloud/default.nix
index 2866bac3edee..d5966cb17118 100644
--- a/pkgs/servers/nextcloud/default.nix
+++ b/pkgs/servers/nextcloud/default.nix
@@ -57,8 +57,8 @@ let
 in
 {
   nextcloud32 = generic {
-    version = "32.0.13";
-    hash = "sha256-7rAaOJp2z+RfweD2GhW1x0vkDNKciuT1TNa0J817nvA=";
+    version = "32.0.14";
+    hash = "sha512-2bO5WilP+dar/LnyHZ3qxFz6Q0fsG6mBGJzrEDvlHGbWkM1sUsBqA4sUyOQGGevyEr9biMNv1a7vXdOG75nHvA==";
     packages = nextcloud32Packages;
   };
 

From f5de3a82994704006b974427c0f7277659ee3c56 Mon Sep 17 00:00:00 2001
From: Beardhatcode <git@beardhatcode.be>
Date: Fri, 14 Aug 2026 12:18:23 +0200
Subject: [PATCH 21/31] nextcloud33: 33.0.7 -> 33.0.8

(cherry picked from commit b5034a788e0d81407481e875c00f77eff6c9f1b5)
---
 pkgs/servers/nextcloud/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/nextcloud/default.nix b/pkgs/servers/nextcloud/default.nix
index d5966cb17118..a9ecdbb5572d 100644
--- a/pkgs/servers/nextcloud/default.nix
+++ b/pkgs/servers/nextcloud/default.nix
@@ -63,8 +63,8 @@ in
   };
 
   nextcloud33 = generic {
-    version = "33.0.7";
-    hash = "sha256-uuGoL8u/TWmZTS1Y1OgVFm+/T+1a06VRIfOM4H7emRM=";
+    version = "33.0.8";
+    hash = "sha512-L5ryxWhjhUNnHMGBrY36/qoRVYmu39OiYkDYs8l7Wcer8v3fAUVooo0ESAaMBNcSzP2dB36CmbSxFD+BXdguPQ==";
     packages = nextcloud33Packages;
   };
 

From f1b20bce68a07ff7725b94a35c86d0dcc090ef4b Mon Sep 17 00:00:00 2001
From: Beardhatcode <git@beardhatcode.be>
Date: Fri, 14 Aug 2026 12:19:12 +0200
Subject: [PATCH 22/31] nextcloud34: 34.0.2 -> 34.0.3

(cherry picked from commit bb394468b572c182b9a52a3d15dc7bf96e822f05)
---
 pkgs/servers/nextcloud/default.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/servers/nextcloud/default.nix b/pkgs/servers/nextcloud/default.nix
index a9ecdbb5572d..fc6b64f516f5 100644
--- a/pkgs/servers/nextcloud/default.nix
+++ b/pkgs/servers/nextcloud/default.nix
@@ -69,11 +69,11 @@ in
   };
 
   nextcloud34 = generic {
-    version = "34.0.2";
-    hash = "sha256-Qc4x3xLMgQkMPQf+DouQveYckrGK6A5NZIutQ9eZEQE=";
+    version = "34.0.3";
+    hash = "sha512-NGPbverlJ1oHkbEVz4au1BxaE4/dGbsy7BKDemaYEGtvFy4k+xJkotTiCyuAW894QbIzjk4C8f1TlPvtgwzGlQ==";
     packages = nextcloud34Packages;
   };
 
   # tip: get the sha with:
-  # curl 'https://download.nextcloud.com/server/releases/nextcloud-${version}.tar.bz2.sha256'
+  # curl  "https://download.nextcloud.com/server/releases/nextcloud-${version}.tar.bz2.sha512" | grep '.tar.bz2'  | cut -f1 -d' ' | xargs nix hash convert --hash-algo sha512 --to sri
 }

From da3b73c10fe7c6a8a9b3528657bdb53740195bee Mon Sep 17 00:00:00 2001
From: Beardhatcode <git@beardhatcode.be>
Date: Sun, 16 Aug 2026 10:27:46 +0200
Subject: [PATCH 23/31] nextcloud*.packages: update

(cherry picked from commit 6fbed08655c87a89103ab9b9c03c1007f7d77655)
---
 pkgs/servers/nextcloud/packages/32.json | 94 ++++++++++++++-----------
 pkgs/servers/nextcloud/packages/33.json | 88 +++++++++++++----------
 pkgs/servers/nextcloud/packages/34.json | 82 +++++++++++----------
 3 files changed, 147 insertions(+), 117 deletions(-)

diff --git a/pkgs/servers/nextcloud/packages/32.json b/pkgs/servers/nextcloud/packages/32.json
index afcfa4a94e7e..dc05653104bf 100644
--- a/pkgs/servers/nextcloud/packages/32.json
+++ b/pkgs/servers/nextcloud/packages/32.json
@@ -1,8 +1,8 @@
 {
   "bookmarks": {
-    "hash": "sha256-0jBKcGX6ljlXruILcKlsm7ZBrC5hyDuHp/9lgG0eoBE=",
-    "url": "https://github.com/nextcloud/bookmarks/releases/download/v16.2.4/bookmarks-16.2.4.tar.gz",
-    "version": "16.2.4",
+    "hash": "sha256-7lmGi79YEkDS9pvm3vvc90o38x4W9WAsolE9lMOorRQ=",
+    "url": "https://github.com/nextcloud/bookmarks/releases/download/v16.2.5/bookmarks-16.2.5.tar.gz",
+    "version": "16.2.5",
     "description": "- 📂 Sort bookmarks into folders\n- 🏷 Add tags and personal notes\n- ☠ Find broken links and duplicates\n- 📲 Synchronize with all your browsers and devices\n- 📔 Store archived versions of your links in case they are depublished\n- 🔍 Full-text search on site contents\n- 👪 Share bookmarks with other users, groups and teams or via public links\n- ⚛ Generate RSS feeds of your collections\n- 📈 Stats on how often you access which links\n- 🔒 Automatic backups of your bookmarks collection\n- 💼 Built-in Dashboard widgets for frequent and recent links\n\nRequirements:\n - PHP extensions:\n   - intl: *\n   - mbstring: *\n - when using MySQL, use at least v8.0",
     "homepage": "https://github.com/nextcloud/bookmarks",
     "licenses": [
@@ -10,9 +10,9 @@
     ]
   },
   "calendar": {
-    "hash": "sha256-hsfZxdBFWz4jFU5EsSySRYZjV3KF5Zd4oDglyENqsUM=",
-    "url": "https://github.com/nextcloud-releases/calendar/releases/download/v6.5.2/calendar-v6.5.2.tar.gz",
-    "version": "6.5.2",
+    "hash": "sha256-g2eJkxTushDijhzOEtjDwiTgOBhF0IthdZXpHTFe21M=",
+    "url": "https://github.com/nextcloud-releases/calendar/releases/download/v6.5.3/calendar-v6.5.3.tar.gz",
+    "version": "6.5.3",
     "description": "A Calendar app for Nextcloud. Easily sync events from various devices with your Nextcloud and edit them online.\n\n* 🚀 **Integration with other Nextcloud apps!** Like Contacts, Talk, Tasks, Deck and Circles\n* 🌐 **WebCal Support!** Want to see your favorite team's matchdays in your calendar? No problem!\n* 🙋 **Attendees!** Invite people to your events\n* ⌚ **Free/Busy!** See when your attendees are available to meet\n* ⏰ **Reminders!** Get alarms for events inside your browser and via email\n* 🔍 **Search!** Find your events at ease\n* ☑️ **Tasks!** See tasks or Deck cards with a due date directly in the calendar\n* 🔈 **Talk rooms!** Create an associated Talk room when booking a meeting with just one click\n* 📆 **Appointment booking** Send people a link so they can book an appointment with you [using this app](https://apps.nextcloud.com/apps/appointments)\n* 📎 **Attachments!** Add, upload and view event attachments\n* 🙈 **We’re not reinventing the wheel!** Based on the great [c-dav library](https://github.com/nextcloud/cdav-library), [ical.js](https://github.com/mozilla-comm/ical.js) and [fullcalendar](https://github.com/fullcalendar/fullcalendar) libraries.",
     "homepage": "https://github.com/nextcloud/calendar/",
     "licenses": [
@@ -30,9 +30,9 @@
     ]
   },
   "collectives": {
-    "hash": "sha256-/MGwV78AAzsoAvI11JeodQsbiMZs1J58NzsGrEIv5EA=",
-    "url": "https://github.com/nextcloud/collectives/releases/download/v4.4.2/collectives-4.4.2.tar.gz",
-    "version": "4.4.2",
+    "hash": "sha256-q8PSInnVjzfZ+RbtYNqEqxidzxKOHOdTwzgotA1Fh0I=",
+    "url": "https://github.com/nextcloud/collectives/releases/download/v4.5.0/collectives-4.5.0.tar.gz",
+    "version": "4.5.0",
     "description": "Your space to collaboratively write and organize. Collectives is designed for groups and communities\nto structure shared knowledge and cultivate trust.\n\n* **👥 Non-hierarchical at its core**: Each collective is backed by a\n  [Nextcloud Team](https://docs.nextcloud.com/server/latest/user_manual/en/groupware/contacts.html#teams) - its\n  content is owned by the group, not a single user.\n* **📝 Collaborative page editing** thanks to the [Text app](https://github.com/nextcloud/text).\n* **🔤 Well-known [Markdown](https://en.wikipedia.org/wiki/Markdown) syntax** for page formatting.\n* **🔎 Full-text search** to find content straight away.",
     "homepage": "https://collectives.cloud/",
     "licenses": [
@@ -40,9 +40,9 @@
     ]
   },
   "contacts": {
-    "hash": "sha256-AOxrSz7kEHReWiu11sIWuhJUXd5zqpObzrahE9eg1wY=",
-    "url": "https://github.com/nextcloud-releases/contacts/releases/download/v8.3.17/contacts-v8.3.17.tar.gz",
-    "version": "8.3.17",
+    "hash": "sha256-msfZHR/iHhdNgImdIWlz90GtTJsW0MLMyU4M5yBelPA=",
+    "url": "https://github.com/nextcloud-releases/contacts/releases/download/v8.3.18/contacts-v8.3.18.tar.gz",
+    "version": "8.3.18",
     "description": "The Nextcloud contacts app is a user interface for Nextcloud's CardDAV server. Easily sync contacts from various devices with your Nextcloud and edit them online.\n\n* 🚀 **Integration with other Nextcloud apps!** Currently Mail and Calendar – more to come.\n* 🎉 **Never forget a birthday!** You can sync birthdays and other recurring events with your Nextcloud Calendar.\n* 👥 **Sharing of Adressbooks!** You want to share your contacts with your friends or coworkers? No problem!\n* 🙈 **We’re not reinventing the wheel!** Based on the great and open SabreDAV library.",
     "homepage": "https://github.com/nextcloud/contacts#readme",
     "licenses": [
@@ -100,9 +100,9 @@
     ]
   },
   "end_to_end_encryption": {
-    "hash": "sha256-Tlv1zPWp8mLpZFrsxcbfqqro1tx5XGS+vgxrEYWe054=",
-    "url": "https://github.com/nextcloud-releases/end_to_end_encryption/releases/download/v1.18.3/end_to_end_encryption-v1.18.3.tar.gz",
-    "version": "1.18.3",
+    "hash": "sha256-jhNzX5DHfbgfQnJ2pxAFlRqdcvV5D2j6CLd8pB5NgPU=",
+    "url": "https://github.com/nextcloud-releases/end_to_end_encryption/releases/download/v1.18.4/end_to_end_encryption-v1.18.4.tar.gz",
+    "version": "1.18.4",
     "description": "## **End-to-End Encryption**\n\n### For End Users\n\n**Protect your most sensitive files with strong encryption.**\n\nThe End-to-End Encryption app gives you complete control over your data privacy.\nWith this app, you can encrypt specific folders so that only you (and those you trust) can access their contents.\nYour files are encrypted on your device before they reach the server, ensuring that no one—not even the server administrator—can read them.\n\n**Benefits:**\n- 🔒 **True privacy**: Files are encrypted on your device and can only be decrypted by you\n- 📱 **Works across all platforms**: Fully supported on desktop, Android, iOS clients, and as you wish even in the browser\n- 🎯 **Selective encryption**: Choose which folders to encrypt\n- 🛡️ **Secure sharing**: Share encrypted files with other users or even secure public upload using the encrypted file drop\n\n---\n\n### For Administrators\n\n**Enterprise-ready end-to-end encryption infrastructure for your Nextcloud instance.**\n\nThis app provides all the necessary server-side APIs and infrastructure to enable End-to-End encryption (E2EE) for your users.\nIt ensures that encrypted data remains secure throughout its lifecycle on your server.\n\n**Technical highlights:**\n- 🔐 **Complete API suite**: Provides all client-side APIs needed for E2EE implementation\n- 🔒 **Secure FileDrop integration**: Enables secure file sharing with encryption\n- 🛡️ **Zero-knowledge architecture**: Server never has access to encryption keys\n- ⚙️ **Group restrictions**: Limit app usage to specific user groups if needed\n- 🔄 **Background job management**: Automatic rollback handling for failed operations\n\n### Setup\nThis application provides the server-side infrastructure for end-to-end encryption, but it requires client support to function.\nTo enable end-to-end encryption, users will need to install the corresponding client-side app on their devices (desktop, Android, iOS) or use the web client.\n\nUsing the web interface, after enabling it in the personal settings, allows you to encrypt files and folders directly in the browser,\nproviding a seamless experience without needing additional software. But also requires some kind of trust in the server as the code is delivered by the server and could be manipulated.\n\nOnce enable through clients or the web interface, you can create encrypted folders and upload or move files into them.\nThe clients and the web interface will handle the encryption and decryption processes automatically.\n\n⚠️ This comes with some limitations and caveats, as only normal file operations can be handled.\nMeaning that some apps in the web interface do not work with encrypted files.",
     "homepage": "https://github.com/nextcloud/end_to_end_encryption",
     "licenses": [
@@ -129,6 +129,16 @@
       "agpl"
     ]
   },
+  "files_mindmap": {
+    "hash": "sha256-aEZHuvKEt+g5Zd1zvVTQtgdNdACaxZ4xE/qrNiF71/8=",
+    "url": "https://github.com/nextcloud-releases/files_mindmap/releases/download/v0.1.0/files_mindmap-v0.1.0.tar.gz",
+    "version": "0.1.0",
+    "description": "This application enables Nextcloud users to open, save and edit mind map files in the web browser. If enabled, an entry in the \"New\" button at the top of the web browser the mind map file entry appears. When clicked, a new mind map file opens in the browser and the file can be saved into the current Nextcloud folder.",
+    "homepage": "https://github.com/nextcloud/files_mindmap",
+    "licenses": [
+      "AGPL-3.0-or-later"
+    ]
+  },
   "files_retention": {
     "hash": "sha256-48fC7VDNZs2+qienMP5hBAWgRkm/i+Q2WXnrd8fz16Q=",
     "url": "https://github.com/nextcloud-releases/files_retention/releases/download/v3.0.0/files_retention-v3.0.0.tar.gz",
@@ -160,9 +170,9 @@
     ]
   },
   "groupfolders": {
-    "hash": "sha256-7afza6xNdNqNzIhiRuRHyhruATFrJmlaQm/fYQNS3Pw=",
-    "url": "https://github.com/nextcloud-releases/groupfolders/releases/download/v20.1.17/groupfolders-v20.1.17.tar.gz",
-    "version": "20.1.17",
+    "hash": "sha256-NGGhjcCgcziKpItkEoc9AvBAs+fzeJ9CLqj6ucuBJzM=",
+    "url": "https://github.com/nextcloud-releases/groupfolders/releases/download/v20.1.18/groupfolders-v20.1.18.tar.gz",
+    "version": "20.1.18",
     "description": "Team Folders (formerly \"Group Folders\") allows administrators to create and manage shared\nfolders for selected teams within Nextcloud.\n\nAdmins can grant one or more teams access to a folder, configure permissions (such as read,\nwrite, and sharing rights), and assign storage quotas from the Team Folders section (under\nadmin settings). The app also supports advanced permissions and integration with Nextcloud’s\ntrash and versioning systems.\n\nAs of Hub 10 / Nextcloud 31, admins must be members of a team to assign that team to a Team\nFolder.",
     "homepage": "https://github.com/nextcloud/groupfolders",
     "licenses": [
@@ -170,9 +180,9 @@
     ]
   },
   "guests": {
-    "hash": "sha256-MK3P6fMKYWgKkYTPy9oQFTea/B2iJoZANVVT/HFEnKI=",
-    "url": "https://github.com/nextcloud-releases/guests/releases/download/v4.8.0/guests-v4.8.0.tar.gz",
-    "version": "4.8.0",
+    "hash": "sha256-wXrcJwW68wgA0VEcA/3Uc8ew2NG1lzAQ4aaqI0pT2oE=",
+    "url": "https://github.com/nextcloud-releases/guests/releases/download/v4.9.0/guests-v4.9.0.tar.gz",
+    "version": "4.9.0",
     "description": "👥 Allows for better collaboration with external users by allowing users to create guests account.\n\nGuests accounts can be created from the share menu by entering either the recipients email or name and choosing \"create guest account\", once the share is created the guest user will receive an email notification about the mail with a link to set their password.\n\nGuests users can only access files shared to them and cannot create any files outside of shares, additionally, the apps accessible to guest accounts are whitelisted.",
     "homepage": "https://github.com/nextcloud/guests/",
     "licenses": [
@@ -220,9 +230,9 @@
     ]
   },
   "mail": {
-    "hash": "sha256-s5AQlgs3zYQF/iZVHh6K9+uuFa/8ugqpOYC+hsVqqHg=",
-    "url": "https://github.com/nextcloud-releases/mail/releases/download/v5.10.10/mail-v5.10.10.tar.gz",
-    "version": "5.10.10",
+    "hash": "sha256-g0NnYTFAZunc64EtophBogeBkkTEDOqednfgV/+iFag=",
+    "url": "https://github.com/nextcloud-releases/mail/releases/download/v5.10.12/mail-v5.10.12.tar.gz",
+    "version": "5.10.12",
     "description": "**💌 A mail app for Nextcloud**\n\n- **🚀 Integration with other Nextcloud apps!** Currently Contacts, Calendar & Files – more to come.\n- **📥 Multiple mail accounts!** Personal and company account? No problem, and a nice unified inbox. Connect any IMAP account.\n- **🔒 Send & receive encrypted mails!** Using the great [Mailvelope](https://mailvelope.com) browser extension.\n- **🙈 We’re not reinventing the wheel!** Based on the great [Horde](https://www.horde.org) libraries.\n- **📬 Want to host your own mail server?** We do not have to reimplement this as you could set up [Mail-in-a-Box](https://mailinabox.email)!\n\n## Ethical AI Rating\n\n### Priority Inbox\n\nPositive:\n* The software for training and inferencing of this model is open source.\n* The model is created and trained on-premises based on the user's own data.\n* The training data is accessible to the user, making it possible to check or correct for bias or optimise the performance and CO2 usage.\n\n### Thread Summaries (opt-in)\n\n**Rating:** 🟢/🟡/🟠/🔴\n\nThe rating depends on the installed text processing backend. See [the rating overview](https://docs.nextcloud.com/server/latest/admin_manual/ai/index.html) for details.\n\nLearn more about the Nextcloud Ethical AI Rating [in our blog](https://nextcloud.com/blog/nextcloud-ethical-ai-rating/).",
     "homepage": "https://github.com/nextcloud/mail#readme",
     "licenses": [
@@ -250,9 +260,9 @@
     ]
   },
   "news": {
-    "hash": "sha256-25VyIvV7d5/hvWuT0IXzpgygLYHRrmqHg2pa+QQpK90=",
-    "url": "https://github.com/nextcloud/news/releases/download/28.6.0/news.tar.gz",
-    "version": "28.6.0",
+    "hash": "sha256-qurdLAGKotjlhEMJ1cdUroukcGfwb4eg+Cr+WvJX3/g=",
+    "url": "https://github.com/nextcloud/news/releases/download/28.7.0/news.tar.gz",
+    "version": "28.7.0",
     "description": "📰 A RSS/Atom Feed reader App for Nextcloud\n\n- 📲 Synchronize your feeds with multiple mobile or desktop [clients](https://nextcloud.github.io/news/clients/)\n- 🔄 Automatic updates of your news feeds\n- 🆓 Free and open source under AGPLv3, no ads or premium functions\n\n**System Cron is currently required for this app to work**\n\nRequirements can be found [here](https://nextcloud.github.io/news/install/#dependencies)\n\nThe Changelog is available [here](https://github.com/nextcloud/news/blob/master/CHANGELOG.md)\n\nCreate a [bug report](https://github.com/nextcloud/news/issues/new/choose)\n\nCreate a [feature request](https://github.com/nextcloud/news/discussions/new)\n\nReport a [feed issue](https://github.com/nextcloud/news/discussions/new)",
     "homepage": "https://github.com/nextcloud/news",
     "licenses": [
@@ -280,9 +290,9 @@
     ]
   },
   "oidc": {
-    "hash": "sha256-mPa+8iIPDTZ+VlYn+MhzAtSGGY/CmkXoiQAB0YgBX0w=",
-    "url": "https://github.com/H2CK/oidc/releases/download/2.0.4/oidc-2.0.4.tar.gz",
-    "version": "2.0.4",
+    "hash": "sha256-rvk81T0zE4EGCp1gQnmFagl7/eVuzRrRcRcabmjzHRw=",
+    "url": "https://github.com/H2CK/oidc/releases/download/2.0.6/oidc-2.0.6.tar.gz",
+    "version": "2.0.6",
     "description": "Nextcloud as OpenID Connect Identity Provider\n\nWith this app you can use Nextcloud as OpenID Connect Identity Provider. If other services\nare configured correctly, you are able to access those services with your Nextcloud login.\n\nFull documentation can be found at:\n\n- [User Documentation](https://github.com/H2CK/oidc/wiki#user-documentation)\n- [Developer Documentation](https://github.com/H2CK/oidc/wiki#developer-documentation)",
     "homepage": "https://github.com/H2CK/oidc",
     "licenses": [
@@ -290,9 +300,9 @@
     ]
   },
   "oidc_login": {
-    "hash": "sha256-5pdHzB57lsJHuOBiYRTONgBZoZgh1EFyE+B16A5/Lds=",
-    "url": "https://github.com/pulsejet/nextcloud-oidc-login/releases/download/v3.3.2/oidc_login.tar.gz",
-    "version": "3.3.2",
+    "hash": "sha256-ENVhD9WxL6t2O7PFn8EZUBGl1vy/MQmRvAyftQRUH8c=",
+    "url": "https://github.com/pulsejet/nextcloud-oidc-login/releases/download/v3.3.4/oidc_login.tar.gz",
+    "version": "3.3.4",
     "description": "# OpenID Connect Login\n\nProvides user creation and login via one single OpenID Connect provider. Even though this is a fork of [nextcloud-social-login](https://github.com/zorn-v/nextcloud-social-login), it fundamentally differs in two ways - aims for simplistic, single provider login (and hence is very minimalistic), and it supports having LDAP as the primary user backend. This way, you can use OpenID Connect to login to Nextcloud while maintaining an LDAP backend with attributes with the LDAP plugin.\n\n### Features\n\n- Automatic [Identity provider endpoints discovery](https://openid.net/specs/openid-connect-discovery-1_0.html)\n- User creation at first login\n- User profile update at login (name, email, avatar, groups etc.)\n- Group creation\n- Automatic redirection from the nextcloud login page to the Identity Provider login page\n- WebDAV endpoints `Bearer` and `Basic` authentication\n- Optional removal of special characters in UID\n- Mapping of multiple names to a single display name\n- Mapping for birthdate",
     "homepage": "https://github.com/pulsejet/nextcloud-single-openid-connect",
     "licenses": [
@@ -310,9 +320,9 @@
     ]
   },
   "pantry": {
-    "hash": "sha256-kPldsAVbpoJ+6kMWmh70j3HBTlzZibtbyr5tvT0ZcaA=",
-    "url": "https://github.com/chenasraf/nextcloud-pantry/releases/download/v0.24.0/pantry-v0.24.0.tar.gz",
-    "version": "0.24.0",
+    "hash": "sha256-C/ejBie1LNZJ/XE72gEwK3+VhOp77qQG1EAO7R5gyik=",
+    "url": "https://github.com/chenasraf/nextcloud-pantry/releases/download/v0.27.0/pantry-v0.27.0.tar.gz",
+    "version": "0.27.0",
     "description": "Pantry helps households stay organized in Nextcloud.\n\n- **Houses** group members and their shared data. A person can belong to multiple houses and switch between them freely.\n- **Checklists** support recurring items (e.g. milk every week) that automatically reappear when due. Share lists with the whole household so everyone knows what to pick up.\n- **Photo boards** let you keep shared reference photos organized in folders — the right brand of dog food, a favorite recipe card, a product label, and so on.\n- **Notes wall** gives the household a lightweight shared space for reminders, pinned messages, and quick notes with customizable colors.\n- **Notifications** keep everyone in the loop when photos are uploaded or notes are added or edited.\n\nAll data is scoped to a house; members only see the houses they belong to.\n\nPantry also has companion apps for mobile and desktop that let you manage your lists, photos and notes on the go and keep everything in sync with your Nextcloud instance.\n\n**Companion apps:** Android ([Google Play](https://play.google.com/store/apps/details?id=dev.casraf.pantry), [F-Droid](https://f-droid.org/en/packages/dev.casraf.pantry/)) | iOS/macOS ([App Store](https://apps.apple.com/us/app/pantry-for-nextcloud/id6762161619))",
     "homepage": "https://github.com/chenasraf/nextcloud-pantry",
     "licenses": [
@@ -390,9 +400,9 @@
     ]
   },
   "richdocuments": {
-    "hash": "sha256-A9+QNq9CSwfGkBDfSz4lJH2TY8pdvmOeTJS+Cd1urAc=",
-    "url": "https://github.com/nextcloud-releases/richdocuments/releases/download/v9.2.0/richdocuments-v9.2.0.tar.gz",
-    "version": "9.2.0",
+    "hash": "sha256-3QOOs+hITC6U7d41Y8fgd5debcRJhHVMh4EpGhHzMC8=",
+    "url": "https://github.com/nextcloud-releases/richdocuments/releases/download/v9.2.1/richdocuments-v9.2.1.tar.gz",
+    "version": "9.2.1",
     "description": "This application can connect to a Collabora Online (or other) server (WOPI-like Client). Nextcloud is the WOPI Host. Please read the documentation to learn more about that.\n\nYou can also edit your documents off-line with the Collabora Office app from the **[Android](https://play.google.com/store/apps/details?id=com.collabora.libreoffice)** and **[iOS](https://apps.apple.com/us/app/collabora-office/id1440482071)** store.",
     "homepage": "https://collaboraoffice.com/",
     "licenses": [
@@ -410,9 +420,9 @@
     ]
   },
   "spreed": {
-    "hash": "sha256-bYTR4bv0BoNB9syzXRuRYB2TXNqD7shTWrhAd2csVtU=",
-    "url": "https://github.com/nextcloud-releases/spreed/releases/download/v22.0.16/spreed-v22.0.16.tar.gz",
-    "version": "22.0.16",
+    "hash": "sha256-hZ5WfqAhgC4LHC5D90grOl736y7Tb5JbgXg2ntDAw+o=",
+    "url": "https://github.com/nextcloud-releases/spreed/releases/download/v22.0.17/spreed-v22.0.17.tar.gz",
+    "version": "22.0.17",
     "description": "Chat, video & audio-conferencing using WebRTC\n\n* 💬 **Chat** Nextcloud Talk comes with a simple text chat, allowing you to share or upload files from your Nextcloud Files app or local device and mention other participants.\n* 👥 **Private, group, public and password protected calls!** Invite someone, a whole group or send a public link to invite to a call.\n* 🌐 **Federated chats** Chat with other Nextcloud users on their servers\n* 💻 **Screen sharing!** Share your screen with the participants of your call.\n* 🚀 **Integration with other Nextcloud apps** like Files, Calendar, User status, Dashboard, Flow, Maps, Smart picker, Contacts, Deck, and many more.\n* 🌉 **Sync with other chat solutions** With [Matterbridge](https://github.com/42wim/matterbridge/) being integrated in Talk, you can easily sync a lot of other chat solutions to Nextcloud Talk and vice-versa.",
     "homepage": "https://github.com/nextcloud/spreed",
     "licenses": [
diff --git a/pkgs/servers/nextcloud/packages/33.json b/pkgs/servers/nextcloud/packages/33.json
index 2d698afffcae..f5ce17a80937 100644
--- a/pkgs/servers/nextcloud/packages/33.json
+++ b/pkgs/servers/nextcloud/packages/33.json
@@ -1,8 +1,8 @@
 {
   "bookmarks": {
-    "hash": "sha256-0jBKcGX6ljlXruILcKlsm7ZBrC5hyDuHp/9lgG0eoBE=",
-    "url": "https://github.com/nextcloud/bookmarks/releases/download/v16.2.4/bookmarks-16.2.4.tar.gz",
-    "version": "16.2.4",
+    "hash": "sha256-7lmGi79YEkDS9pvm3vvc90o38x4W9WAsolE9lMOorRQ=",
+    "url": "https://github.com/nextcloud/bookmarks/releases/download/v16.2.5/bookmarks-16.2.5.tar.gz",
+    "version": "16.2.5",
     "description": "- 📂 Sort bookmarks into folders\n- 🏷 Add tags and personal notes\n- ☠ Find broken links and duplicates\n- 📲 Synchronize with all your browsers and devices\n- 📔 Store archived versions of your links in case they are depublished\n- 🔍 Full-text search on site contents\n- 👪 Share bookmarks with other users, groups and teams or via public links\n- ⚛ Generate RSS feeds of your collections\n- 📈 Stats on how often you access which links\n- 🔒 Automatic backups of your bookmarks collection\n- 💼 Built-in Dashboard widgets for frequent and recent links\n\nRequirements:\n - PHP extensions:\n   - intl: *\n   - mbstring: *\n - when using MySQL, use at least v8.0",
     "homepage": "https://github.com/nextcloud/bookmarks",
     "licenses": [
@@ -10,9 +10,9 @@
     ]
   },
   "calendar": {
-    "hash": "sha256-hsfZxdBFWz4jFU5EsSySRYZjV3KF5Zd4oDglyENqsUM=",
-    "url": "https://github.com/nextcloud-releases/calendar/releases/download/v6.5.2/calendar-v6.5.2.tar.gz",
-    "version": "6.5.2",
+    "hash": "sha256-g2eJkxTushDijhzOEtjDwiTgOBhF0IthdZXpHTFe21M=",
+    "url": "https://github.com/nextcloud-releases/calendar/releases/download/v6.5.3/calendar-v6.5.3.tar.gz",
+    "version": "6.5.3",
     "description": "A Calendar app for Nextcloud. Easily sync events from various devices with your Nextcloud and edit them online.\n\n* 🚀 **Integration with other Nextcloud apps!** Like Contacts, Talk, Tasks, Deck and Circles\n* 🌐 **WebCal Support!** Want to see your favorite team's matchdays in your calendar? No problem!\n* 🙋 **Attendees!** Invite people to your events\n* ⌚ **Free/Busy!** See when your attendees are available to meet\n* ⏰ **Reminders!** Get alarms for events inside your browser and via email\n* 🔍 **Search!** Find your events at ease\n* ☑️ **Tasks!** See tasks or Deck cards with a due date directly in the calendar\n* 🔈 **Talk rooms!** Create an associated Talk room when booking a meeting with just one click\n* 📆 **Appointment booking** Send people a link so they can book an appointment with you [using this app](https://apps.nextcloud.com/apps/appointments)\n* 📎 **Attachments!** Add, upload and view event attachments\n* 🙈 **We’re not reinventing the wheel!** Based on the great [c-dav library](https://github.com/nextcloud/cdav-library), [ical.js](https://github.com/mozilla-comm/ical.js) and [fullcalendar](https://github.com/fullcalendar/fullcalendar) libraries.",
     "homepage": "https://github.com/nextcloud/calendar/",
     "licenses": [
@@ -30,9 +30,9 @@
     ]
   },
   "collectives": {
-    "hash": "sha256-/MGwV78AAzsoAvI11JeodQsbiMZs1J58NzsGrEIv5EA=",
-    "url": "https://github.com/nextcloud/collectives/releases/download/v4.4.2/collectives-4.4.2.tar.gz",
-    "version": "4.4.2",
+    "hash": "sha256-q8PSInnVjzfZ+RbtYNqEqxidzxKOHOdTwzgotA1Fh0I=",
+    "url": "https://github.com/nextcloud/collectives/releases/download/v4.5.0/collectives-4.5.0.tar.gz",
+    "version": "4.5.0",
     "description": "Your space to collaboratively write and organize. Collectives is designed for groups and communities\nto structure shared knowledge and cultivate trust.\n\n* **👥 Non-hierarchical at its core**: Each collective is backed by a\n  [Nextcloud Team](https://docs.nextcloud.com/server/latest/user_manual/en/groupware/contacts.html#teams) - its\n  content is owned by the group, not a single user.\n* **📝 Collaborative page editing** thanks to the [Text app](https://github.com/nextcloud/text).\n* **🔤 Well-known [Markdown](https://en.wikipedia.org/wiki/Markdown) syntax** for page formatting.\n* **🔎 Full-text search** to find content straight away.",
     "homepage": "https://collectives.cloud/",
     "licenses": [
@@ -40,9 +40,9 @@
     ]
   },
   "contacts": {
-    "hash": "sha256-mTUhggHOP40Gs74xoLbfn7uiP2mTck/zeZaG3Yc8Pqk=",
-    "url": "https://github.com/nextcloud-releases/contacts/releases/download/v8.7.5/contacts-v8.7.5.tar.gz",
-    "version": "8.7.5",
+    "hash": "sha256-B48CNJDLuSwaI6AWdeGBxHKu+sx02O7TwXAk1MCozPU=",
+    "url": "https://github.com/nextcloud-releases/contacts/releases/download/v8.7.6/contacts-v8.7.6.tar.gz",
+    "version": "8.7.6",
     "description": "The Nextcloud contacts app is a user interface for Nextcloud's CardDAV server. Easily sync contacts from various devices with your Nextcloud and edit them online.\n\n* 🚀 **Integration with other Nextcloud apps!** Currently Mail and Calendar – more to come.\n* 🎉 **Never forget a birthday!** You can sync birthdays and other recurring events with your Nextcloud Calendar.\n* 👥 **Sharing of Adressbooks!** You want to share your contacts with your friends or coworkers? No problem!\n* 🙈 **We’re not reinventing the wheel!** Based on the great and open SabreDAV library.",
     "homepage": "https://github.com/nextcloud/contacts#readme",
     "licenses": [
@@ -100,9 +100,9 @@
     ]
   },
   "end_to_end_encryption": {
-    "hash": "sha256-NfnIdc2Q8GgfgjqD8PeTS+O5vTWMBld+vCX/6ng/Im8=",
-    "url": "https://github.com/nextcloud-releases/end_to_end_encryption/releases/download/v2.2.1/end_to_end_encryption-v2.2.1.tar.gz",
-    "version": "2.2.1",
+    "hash": "sha256-7gSfnKtpurk35wv5hxMLHfE/pFLx0iOjxB3AnMYiodU=",
+    "url": "https://github.com/nextcloud-releases/end_to_end_encryption/releases/download/v2.2.2/end_to_end_encryption-v2.2.2.tar.gz",
+    "version": "2.2.2",
     "description": "## **End-to-End Encryption**\n\n### For End Users\n\n**Protect your most sensitive files with strong encryption.**\n\nThe End-to-End Encryption app gives you complete control over your data privacy.\nWith this app, you can encrypt specific folders so that only you (and those you trust) can access their contents.\nYour files are encrypted on your device before they reach the server, ensuring that no one—not even the server administrator—can read them.\n\n**Benefits:**\n- 🔒 **True privacy**: Files are encrypted on your device and can only be decrypted by you\n- 📱 **Works across all platforms**: Fully supported on desktop, Android, iOS clients, and as you wish even in the browser\n- 🎯 **Selective encryption**: Choose which folders to encrypt\n- 🛡️ **Secure sharing**: Share encrypted files with other users or even secure public upload using the encrypted file drop\n\n---\n\n### For Administrators\n\n**Enterprise-ready end-to-end encryption infrastructure for your Nextcloud instance.**\n\nThis app provides all the necessary server-side APIs and infrastructure to enable End-to-End encryption (E2EE) for your users.\nIt ensures that encrypted data remains secure throughout its lifecycle on your server.\n\n**Technical highlights:**\n- 🔐 **Complete API suite**: Provides all client-side APIs needed for E2EE implementation\n- 🔒 **Secure FileDrop integration**: Enables secure file sharing with encryption\n- 🛡️ **Zero-knowledge architecture**: Server never has access to encryption keys\n- ⚙️ **Group restrictions**: Limit app usage to specific user groups if needed\n- 🔄 **Background job management**: Automatic rollback handling for failed operations\n\n### Setup\nThis application provides the server-side infrastructure for end-to-end encryption, but it requires client support to function.\nTo enable end-to-end encryption, users will need to install the corresponding client-side app on their devices (desktop, Android, iOS) or use the web client.\n\nUsing the web interface, after enabling it in the personal settings, allows you to encrypt files and folders directly in the browser,\nproviding a seamless experience without needing additional software. But also requires some kind of trust in the server as the code is delivered by the server and could be manipulated.\n\nOnce enable through clients or the web interface, you can create encrypted folders and upload or move files into them.\nThe clients and the web interface will handle the encryption and decryption processes automatically.\n\n⚠️ This comes with some limitations and caveats, as only normal file operations can be handled.\nMeaning that some apps in the web interface do not work with encrypted files.",
     "homepage": "https://github.com/nextcloud/end_to_end_encryption",
     "licenses": [
@@ -129,6 +129,16 @@
       "agpl"
     ]
   },
+  "files_mindmap": {
+    "hash": "sha256-aEZHuvKEt+g5Zd1zvVTQtgdNdACaxZ4xE/qrNiF71/8=",
+    "url": "https://github.com/nextcloud-releases/files_mindmap/releases/download/v0.1.0/files_mindmap-v0.1.0.tar.gz",
+    "version": "0.1.0",
+    "description": "This application enables Nextcloud users to open, save and edit mind map files in the web browser. If enabled, an entry in the \"New\" button at the top of the web browser the mind map file entry appears. When clicked, a new mind map file opens in the browser and the file can be saved into the current Nextcloud folder.",
+    "homepage": "https://github.com/nextcloud/files_mindmap",
+    "licenses": [
+      "AGPL-3.0-or-later"
+    ]
+  },
   "files_retention": {
     "hash": "sha256-67MPooGJuSX/sL/l44z/9CYSlv5/ACVRpl1Z5QTJ/xw=",
     "url": "https://github.com/nextcloud-releases/files_retention/releases/download/v4.0.1/files_retention-v4.0.1.tar.gz",
@@ -160,9 +170,9 @@
     ]
   },
   "groupfolders": {
-    "hash": "sha256-m6fjc3HX5+79weOe+AShySwbHv3IA+4DfApZOACVqKk=",
-    "url": "https://github.com/nextcloud-releases/groupfolders/releases/download/v21.0.13/groupfolders-v21.0.13.tar.gz",
-    "version": "21.0.13",
+    "hash": "sha256-Hs3WRKLpE96LMzVgcXZg8Lp1g2MJxEY6+Fjohs3Dpow=",
+    "url": "https://github.com/nextcloud-releases/groupfolders/releases/download/v21.0.15/groupfolders-v21.0.15.tar.gz",
+    "version": "21.0.15",
     "description": "Team Folders (formerly \"Group Folders\") allows administrators to create and manage shared\nfolders for selected teams within Nextcloud.\n\nAdmins can grant one or more teams access to a folder, configure permissions (such as read,\nwrite, and sharing rights), and assign storage quotas from the Team Folders section (under\nadmin settings). The app also supports advanced permissions and integration with Nextcloud’s\ntrash and versioning systems.\n\nAs of Hub 10 / Nextcloud 31, admins must be members of a team to assign that team to a Team\nFolder.",
     "homepage": "https://github.com/nextcloud/groupfolders",
     "licenses": [
@@ -170,9 +180,9 @@
     ]
   },
   "guests": {
-    "hash": "sha256-MK3P6fMKYWgKkYTPy9oQFTea/B2iJoZANVVT/HFEnKI=",
-    "url": "https://github.com/nextcloud-releases/guests/releases/download/v4.8.0/guests-v4.8.0.tar.gz",
-    "version": "4.8.0",
+    "hash": "sha256-wXrcJwW68wgA0VEcA/3Uc8ew2NG1lzAQ4aaqI0pT2oE=",
+    "url": "https://github.com/nextcloud-releases/guests/releases/download/v4.9.0/guests-v4.9.0.tar.gz",
+    "version": "4.9.0",
     "description": "👥 Allows for better collaboration with external users by allowing users to create guests account.\n\nGuests accounts can be created from the share menu by entering either the recipients email or name and choosing \"create guest account\", once the share is created the guest user will receive an email notification about the mail with a link to set their password.\n\nGuests users can only access files shared to them and cannot create any files outside of shares, additionally, the apps accessible to guest accounts are whitelisted.",
     "homepage": "https://github.com/nextcloud/guests/",
     "licenses": [
@@ -220,9 +230,9 @@
     ]
   },
   "mail": {
-    "hash": "sha256-s5AQlgs3zYQF/iZVHh6K9+uuFa/8ugqpOYC+hsVqqHg=",
-    "url": "https://github.com/nextcloud-releases/mail/releases/download/v5.10.10/mail-v5.10.10.tar.gz",
-    "version": "5.10.10",
+    "hash": "sha256-g0NnYTFAZunc64EtophBogeBkkTEDOqednfgV/+iFag=",
+    "url": "https://github.com/nextcloud-releases/mail/releases/download/v5.10.12/mail-v5.10.12.tar.gz",
+    "version": "5.10.12",
     "description": "**💌 A mail app for Nextcloud**\n\n- **🚀 Integration with other Nextcloud apps!** Currently Contacts, Calendar & Files – more to come.\n- **📥 Multiple mail accounts!** Personal and company account? No problem, and a nice unified inbox. Connect any IMAP account.\n- **🔒 Send & receive encrypted mails!** Using the great [Mailvelope](https://mailvelope.com) browser extension.\n- **🙈 We’re not reinventing the wheel!** Based on the great [Horde](https://www.horde.org) libraries.\n- **📬 Want to host your own mail server?** We do not have to reimplement this as you could set up [Mail-in-a-Box](https://mailinabox.email)!\n\n## Ethical AI Rating\n\n### Priority Inbox\n\nPositive:\n* The software for training and inferencing of this model is open source.\n* The model is created and trained on-premises based on the user's own data.\n* The training data is accessible to the user, making it possible to check or correct for bias or optimise the performance and CO2 usage.\n\n### Thread Summaries (opt-in)\n\n**Rating:** 🟢/🟡/🟠/🔴\n\nThe rating depends on the installed text processing backend. See [the rating overview](https://docs.nextcloud.com/server/latest/admin_manual/ai/index.html) for details.\n\nLearn more about the Nextcloud Ethical AI Rating [in our blog](https://nextcloud.com/blog/nextcloud-ethical-ai-rating/).",
     "homepage": "https://github.com/nextcloud/mail#readme",
     "licenses": [
@@ -250,9 +260,9 @@
     ]
   },
   "news": {
-    "hash": "sha256-25VyIvV7d5/hvWuT0IXzpgygLYHRrmqHg2pa+QQpK90=",
-    "url": "https://github.com/nextcloud/news/releases/download/28.6.0/news.tar.gz",
-    "version": "28.6.0",
+    "hash": "sha256-qurdLAGKotjlhEMJ1cdUroukcGfwb4eg+Cr+WvJX3/g=",
+    "url": "https://github.com/nextcloud/news/releases/download/28.7.0/news.tar.gz",
+    "version": "28.7.0",
     "description": "📰 A RSS/Atom Feed reader App for Nextcloud\n\n- 📲 Synchronize your feeds with multiple mobile or desktop [clients](https://nextcloud.github.io/news/clients/)\n- 🔄 Automatic updates of your news feeds\n- 🆓 Free and open source under AGPLv3, no ads or premium functions\n\n**System Cron is currently required for this app to work**\n\nRequirements can be found [here](https://nextcloud.github.io/news/install/#dependencies)\n\nThe Changelog is available [here](https://github.com/nextcloud/news/blob/master/CHANGELOG.md)\n\nCreate a [bug report](https://github.com/nextcloud/news/issues/new/choose)\n\nCreate a [feature request](https://github.com/nextcloud/news/discussions/new)\n\nReport a [feed issue](https://github.com/nextcloud/news/discussions/new)",
     "homepage": "https://github.com/nextcloud/news",
     "licenses": [
@@ -280,9 +290,9 @@
     ]
   },
   "oidc": {
-    "hash": "sha256-mPa+8iIPDTZ+VlYn+MhzAtSGGY/CmkXoiQAB0YgBX0w=",
-    "url": "https://github.com/H2CK/oidc/releases/download/2.0.4/oidc-2.0.4.tar.gz",
-    "version": "2.0.4",
+    "hash": "sha256-rvk81T0zE4EGCp1gQnmFagl7/eVuzRrRcRcabmjzHRw=",
+    "url": "https://github.com/H2CK/oidc/releases/download/2.0.6/oidc-2.0.6.tar.gz",
+    "version": "2.0.6",
     "description": "Nextcloud as OpenID Connect Identity Provider\n\nWith this app you can use Nextcloud as OpenID Connect Identity Provider. If other services\nare configured correctly, you are able to access those services with your Nextcloud login.\n\nFull documentation can be found at:\n\n- [User Documentation](https://github.com/H2CK/oidc/wiki#user-documentation)\n- [Developer Documentation](https://github.com/H2CK/oidc/wiki#developer-documentation)",
     "homepage": "https://github.com/H2CK/oidc",
     "licenses": [
@@ -290,9 +300,9 @@
     ]
   },
   "oidc_login": {
-    "hash": "sha256-5pdHzB57lsJHuOBiYRTONgBZoZgh1EFyE+B16A5/Lds=",
-    "url": "https://github.com/pulsejet/nextcloud-oidc-login/releases/download/v3.3.2/oidc_login.tar.gz",
-    "version": "3.3.2",
+    "hash": "sha256-ENVhD9WxL6t2O7PFn8EZUBGl1vy/MQmRvAyftQRUH8c=",
+    "url": "https://github.com/pulsejet/nextcloud-oidc-login/releases/download/v3.3.4/oidc_login.tar.gz",
+    "version": "3.3.4",
     "description": "# OpenID Connect Login\n\nProvides user creation and login via one single OpenID Connect provider. Even though this is a fork of [nextcloud-social-login](https://github.com/zorn-v/nextcloud-social-login), it fundamentally differs in two ways - aims for simplistic, single provider login (and hence is very minimalistic), and it supports having LDAP as the primary user backend. This way, you can use OpenID Connect to login to Nextcloud while maintaining an LDAP backend with attributes with the LDAP plugin.\n\n### Features\n\n- Automatic [Identity provider endpoints discovery](https://openid.net/specs/openid-connect-discovery-1_0.html)\n- User creation at first login\n- User profile update at login (name, email, avatar, groups etc.)\n- Group creation\n- Automatic redirection from the nextcloud login page to the Identity Provider login page\n- WebDAV endpoints `Bearer` and `Basic` authentication\n- Optional removal of special characters in UID\n- Mapping of multiple names to a single display name\n- Mapping for birthdate",
     "homepage": "https://github.com/pulsejet/nextcloud-single-openid-connect",
     "licenses": [
@@ -310,9 +320,9 @@
     ]
   },
   "pantry": {
-    "hash": "sha256-kPldsAVbpoJ+6kMWmh70j3HBTlzZibtbyr5tvT0ZcaA=",
-    "url": "https://github.com/chenasraf/nextcloud-pantry/releases/download/v0.24.0/pantry-v0.24.0.tar.gz",
-    "version": "0.24.0",
+    "hash": "sha256-C/ejBie1LNZJ/XE72gEwK3+VhOp77qQG1EAO7R5gyik=",
+    "url": "https://github.com/chenasraf/nextcloud-pantry/releases/download/v0.27.0/pantry-v0.27.0.tar.gz",
+    "version": "0.27.0",
     "description": "Pantry helps households stay organized in Nextcloud.\n\n- **Houses** group members and their shared data. A person can belong to multiple houses and switch between them freely.\n- **Checklists** support recurring items (e.g. milk every week) that automatically reappear when due. Share lists with the whole household so everyone knows what to pick up.\n- **Photo boards** let you keep shared reference photos organized in folders — the right brand of dog food, a favorite recipe card, a product label, and so on.\n- **Notes wall** gives the household a lightweight shared space for reminders, pinned messages, and quick notes with customizable colors.\n- **Notifications** keep everyone in the loop when photos are uploaded or notes are added or edited.\n\nAll data is scoped to a house; members only see the houses they belong to.\n\nPantry also has companion apps for mobile and desktop that let you manage your lists, photos and notes on the go and keep everything in sync with your Nextcloud instance.\n\n**Companion apps:** Android ([Google Play](https://play.google.com/store/apps/details?id=dev.casraf.pantry), [F-Droid](https://f-droid.org/en/packages/dev.casraf.pantry/)) | iOS/macOS ([App Store](https://apps.apple.com/us/app/pantry-for-nextcloud/id6762161619))",
     "homepage": "https://github.com/chenasraf/nextcloud-pantry",
     "licenses": [
@@ -410,9 +420,9 @@
     ]
   },
   "spreed": {
-    "hash": "sha256-4wltvkDx1Dnt5ybKj850+dqr4jqkB0Jt3IU75dpirCA=",
-    "url": "https://github.com/nextcloud-releases/spreed/releases/download/v23.0.9/spreed-v23.0.9.tar.gz",
-    "version": "23.0.9",
+    "hash": "sha256-vyBw3S0Xe8Qz/nOXdCy7wfVBetAHnHOWSTMNsYV6sb0=",
+    "url": "https://github.com/nextcloud-releases/spreed/releases/download/v23.0.10/spreed-v23.0.10.tar.gz",
+    "version": "23.0.10",
     "description": "Chat, video & audio-conferencing using WebRTC\n\n* 💬 **Chat** Nextcloud Talk comes with a simple text chat, allowing you to share or upload files from your Nextcloud Files app or local device and mention other participants.\n* 👥 **Private, group, public and password protected calls!** Invite someone, a whole group or send a public link to invite to a call.\n* 🌐 **Federated chats** Chat with other Nextcloud users on their servers\n* 💻 **Screen sharing!** Share your screen with the participants of your call.\n* 🚀 **Integration with other Nextcloud apps** like Files, Calendar, User status, Dashboard, Flow, Maps, Smart picker, Contacts, Deck, and many more.\n* 🌉 **Sync with other chat solutions** With [Matterbridge](https://github.com/42wim/matterbridge/) being integrated in Talk, you can easily sync a lot of other chat solutions to Nextcloud Talk and vice-versa.",
     "homepage": "https://github.com/nextcloud/spreed",
     "licenses": [
diff --git a/pkgs/servers/nextcloud/packages/34.json b/pkgs/servers/nextcloud/packages/34.json
index fbf4bb205f2d..a0c9a806ab78 100644
--- a/pkgs/servers/nextcloud/packages/34.json
+++ b/pkgs/servers/nextcloud/packages/34.json
@@ -1,8 +1,8 @@
 {
   "bookmarks": {
-    "hash": "sha256-0jBKcGX6ljlXruILcKlsm7ZBrC5hyDuHp/9lgG0eoBE=",
-    "url": "https://github.com/nextcloud/bookmarks/releases/download/v16.2.4/bookmarks-16.2.4.tar.gz",
-    "version": "16.2.4",
+    "hash": "sha256-7lmGi79YEkDS9pvm3vvc90o38x4W9WAsolE9lMOorRQ=",
+    "url": "https://github.com/nextcloud/bookmarks/releases/download/v16.2.5/bookmarks-16.2.5.tar.gz",
+    "version": "16.2.5",
     "description": "- 📂 Sort bookmarks into folders\n- 🏷 Add tags and personal notes\n- ☠ Find broken links and duplicates\n- 📲 Synchronize with all your browsers and devices\n- 📔 Store archived versions of your links in case they are depublished\n- 🔍 Full-text search on site contents\n- 👪 Share bookmarks with other users, groups and teams or via public links\n- ⚛ Generate RSS feeds of your collections\n- 📈 Stats on how often you access which links\n- 🔒 Automatic backups of your bookmarks collection\n- 💼 Built-in Dashboard widgets for frequent and recent links\n\nRequirements:\n - PHP extensions:\n   - intl: *\n   - mbstring: *\n - when using MySQL, use at least v8.0",
     "homepage": "https://github.com/nextcloud/bookmarks",
     "licenses": [
@@ -10,9 +10,9 @@
     ]
   },
   "calendar": {
-    "hash": "sha256-hsfZxdBFWz4jFU5EsSySRYZjV3KF5Zd4oDglyENqsUM=",
-    "url": "https://github.com/nextcloud-releases/calendar/releases/download/v6.5.2/calendar-v6.5.2.tar.gz",
-    "version": "6.5.2",
+    "hash": "sha256-g2eJkxTushDijhzOEtjDwiTgOBhF0IthdZXpHTFe21M=",
+    "url": "https://github.com/nextcloud-releases/calendar/releases/download/v6.5.3/calendar-v6.5.3.tar.gz",
+    "version": "6.5.3",
     "description": "A Calendar app for Nextcloud. Easily sync events from various devices with your Nextcloud and edit them online.\n\n* 🚀 **Integration with other Nextcloud apps!** Like Contacts, Talk, Tasks, Deck and Circles\n* 🌐 **WebCal Support!** Want to see your favorite team's matchdays in your calendar? No problem!\n* 🙋 **Attendees!** Invite people to your events\n* ⌚ **Free/Busy!** See when your attendees are available to meet\n* ⏰ **Reminders!** Get alarms for events inside your browser and via email\n* 🔍 **Search!** Find your events at ease\n* ☑️ **Tasks!** See tasks or Deck cards with a due date directly in the calendar\n* 🔈 **Talk rooms!** Create an associated Talk room when booking a meeting with just one click\n* 📆 **Appointment booking** Send people a link so they can book an appointment with you [using this app](https://apps.nextcloud.com/apps/appointments)\n* 📎 **Attachments!** Add, upload and view event attachments\n* 🙈 **We’re not reinventing the wheel!** Based on the great [c-dav library](https://github.com/nextcloud/cdav-library), [ical.js](https://github.com/mozilla-comm/ical.js) and [fullcalendar](https://github.com/fullcalendar/fullcalendar) libraries.",
     "homepage": "https://github.com/nextcloud/calendar/",
     "licenses": [
@@ -30,9 +30,9 @@
     ]
   },
   "collectives": {
-    "hash": "sha256-/MGwV78AAzsoAvI11JeodQsbiMZs1J58NzsGrEIv5EA=",
-    "url": "https://github.com/nextcloud/collectives/releases/download/v4.4.2/collectives-4.4.2.tar.gz",
-    "version": "4.4.2",
+    "hash": "sha256-q8PSInnVjzfZ+RbtYNqEqxidzxKOHOdTwzgotA1Fh0I=",
+    "url": "https://github.com/nextcloud/collectives/releases/download/v4.5.0/collectives-4.5.0.tar.gz",
+    "version": "4.5.0",
     "description": "Your space to collaboratively write and organize. Collectives is designed for groups and communities\nto structure shared knowledge and cultivate trust.\n\n* **👥 Non-hierarchical at its core**: Each collective is backed by a\n  [Nextcloud Team](https://docs.nextcloud.com/server/latest/user_manual/en/groupware/contacts.html#teams) - its\n  content is owned by the group, not a single user.\n* **📝 Collaborative page editing** thanks to the [Text app](https://github.com/nextcloud/text).\n* **🔤 Well-known [Markdown](https://en.wikipedia.org/wiki/Markdown) syntax** for page formatting.\n* **🔎 Full-text search** to find content straight away.",
     "homepage": "https://collectives.cloud/",
     "licenses": [
@@ -40,9 +40,9 @@
     ]
   },
   "contacts": {
-    "hash": "sha256-mTUhggHOP40Gs74xoLbfn7uiP2mTck/zeZaG3Yc8Pqk=",
-    "url": "https://github.com/nextcloud-releases/contacts/releases/download/v8.7.5/contacts-v8.7.5.tar.gz",
-    "version": "8.7.5",
+    "hash": "sha256-B48CNJDLuSwaI6AWdeGBxHKu+sx02O7TwXAk1MCozPU=",
+    "url": "https://github.com/nextcloud-releases/contacts/releases/download/v8.7.6/contacts-v8.7.6.tar.gz",
+    "version": "8.7.6",
     "description": "The Nextcloud contacts app is a user interface for Nextcloud's CardDAV server. Easily sync contacts from various devices with your Nextcloud and edit them online.\n\n* 🚀 **Integration with other Nextcloud apps!** Currently Mail and Calendar – more to come.\n* 🎉 **Never forget a birthday!** You can sync birthdays and other recurring events with your Nextcloud Calendar.\n* 👥 **Sharing of Adressbooks!** You want to share your contacts with your friends or coworkers? No problem!\n* 🙈 **We’re not reinventing the wheel!** Based on the great and open SabreDAV library.",
     "homepage": "https://github.com/nextcloud/contacts#readme",
     "licenses": [
@@ -100,9 +100,9 @@
     ]
   },
   "end_to_end_encryption": {
-    "hash": "sha256-NfnIdc2Q8GgfgjqD8PeTS+O5vTWMBld+vCX/6ng/Im8=",
-    "url": "https://github.com/nextcloud-releases/end_to_end_encryption/releases/download/v2.2.1/end_to_end_encryption-v2.2.1.tar.gz",
-    "version": "2.2.1",
+    "hash": "sha256-7gSfnKtpurk35wv5hxMLHfE/pFLx0iOjxB3AnMYiodU=",
+    "url": "https://github.com/nextcloud-releases/end_to_end_encryption/releases/download/v2.2.2/end_to_end_encryption-v2.2.2.tar.gz",
+    "version": "2.2.2",
     "description": "## **End-to-End Encryption**\n\n### For End Users\n\n**Protect your most sensitive files with strong encryption.**\n\nThe End-to-End Encryption app gives you complete control over your data privacy.\nWith this app, you can encrypt specific folders so that only you (and those you trust) can access their contents.\nYour files are encrypted on your device before they reach the server, ensuring that no one—not even the server administrator—can read them.\n\n**Benefits:**\n- 🔒 **True privacy**: Files are encrypted on your device and can only be decrypted by you\n- 📱 **Works across all platforms**: Fully supported on desktop, Android, iOS clients, and as you wish even in the browser\n- 🎯 **Selective encryption**: Choose which folders to encrypt\n- 🛡️ **Secure sharing**: Share encrypted files with other users or even secure public upload using the encrypted file drop\n\n---\n\n### For Administrators\n\n**Enterprise-ready end-to-end encryption infrastructure for your Nextcloud instance.**\n\nThis app provides all the necessary server-side APIs and infrastructure to enable End-to-End encryption (E2EE) for your users.\nIt ensures that encrypted data remains secure throughout its lifecycle on your server.\n\n**Technical highlights:**\n- 🔐 **Complete API suite**: Provides all client-side APIs needed for E2EE implementation\n- 🔒 **Secure FileDrop integration**: Enables secure file sharing with encryption\n- 🛡️ **Zero-knowledge architecture**: Server never has access to encryption keys\n- ⚙️ **Group restrictions**: Limit app usage to specific user groups if needed\n- 🔄 **Background job management**: Automatic rollback handling for failed operations\n\n### Setup\nThis application provides the server-side infrastructure for end-to-end encryption, but it requires client support to function.\nTo enable end-to-end encryption, users will need to install the corresponding client-side app on their devices (desktop, Android, iOS) or use the web client.\n\nUsing the web interface, after enabling it in the personal settings, allows you to encrypt files and folders directly in the browser,\nproviding a seamless experience without needing additional software. But also requires some kind of trust in the server as the code is delivered by the server and could be manipulated.\n\nOnce enable through clients or the web interface, you can create encrypted folders and upload or move files into them.\nThe clients and the web interface will handle the encryption and decryption processes automatically.\n\n⚠️ This comes with some limitations and caveats, as only normal file operations can be handled.\nMeaning that some apps in the web interface do not work with encrypted files.",
     "homepage": "https://github.com/nextcloud/end_to_end_encryption",
     "licenses": [
@@ -129,6 +129,16 @@
       "agpl"
     ]
   },
+  "files_mindmap": {
+    "hash": "sha256-aEZHuvKEt+g5Zd1zvVTQtgdNdACaxZ4xE/qrNiF71/8=",
+    "url": "https://github.com/nextcloud-releases/files_mindmap/releases/download/v0.1.0/files_mindmap-v0.1.0.tar.gz",
+    "version": "0.1.0",
+    "description": "This application enables Nextcloud users to open, save and edit mind map files in the web browser. If enabled, an entry in the \"New\" button at the top of the web browser the mind map file entry appears. When clicked, a new mind map file opens in the browser and the file can be saved into the current Nextcloud folder.",
+    "homepage": "https://github.com/nextcloud/files_mindmap",
+    "licenses": [
+      "AGPL-3.0-or-later"
+    ]
+  },
   "files_retention": {
     "hash": "sha256-aHcg9eKEd/4CXNUy5rrWmw9pP/mf54wp/PVQfqrHSM0=",
     "url": "https://github.com/nextcloud-releases/files_retention/releases/download/v5.0.0/files_retention-v5.0.0.tar.gz",
@@ -170,9 +180,9 @@
     ]
   },
   "guests": {
-    "hash": "sha256-MK3P6fMKYWgKkYTPy9oQFTea/B2iJoZANVVT/HFEnKI=",
-    "url": "https://github.com/nextcloud-releases/guests/releases/download/v4.8.0/guests-v4.8.0.tar.gz",
-    "version": "4.8.0",
+    "hash": "sha256-wXrcJwW68wgA0VEcA/3Uc8ew2NG1lzAQ4aaqI0pT2oE=",
+    "url": "https://github.com/nextcloud-releases/guests/releases/download/v4.9.0/guests-v4.9.0.tar.gz",
+    "version": "4.9.0",
     "description": "👥 Allows for better collaboration with external users by allowing users to create guests account.\n\nGuests accounts can be created from the share menu by entering either the recipients email or name and choosing \"create guest account\", once the share is created the guest user will receive an email notification about the mail with a link to set their password.\n\nGuests users can only access files shared to them and cannot create any files outside of shares, additionally, the apps accessible to guest accounts are whitelisted.",
     "homepage": "https://github.com/nextcloud/guests/",
     "licenses": [
@@ -220,9 +230,9 @@
     ]
   },
   "mail": {
-    "hash": "sha256-s5AQlgs3zYQF/iZVHh6K9+uuFa/8ugqpOYC+hsVqqHg=",
-    "url": "https://github.com/nextcloud-releases/mail/releases/download/v5.10.10/mail-v5.10.10.tar.gz",
-    "version": "5.10.10",
+    "hash": "sha256-g0NnYTFAZunc64EtophBogeBkkTEDOqednfgV/+iFag=",
+    "url": "https://github.com/nextcloud-releases/mail/releases/download/v5.10.12/mail-v5.10.12.tar.gz",
+    "version": "5.10.12",
     "description": "**💌 A mail app for Nextcloud**\n\n- **🚀 Integration with other Nextcloud apps!** Currently Contacts, Calendar & Files – more to come.\n- **📥 Multiple mail accounts!** Personal and company account? No problem, and a nice unified inbox. Connect any IMAP account.\n- **🔒 Send & receive encrypted mails!** Using the great [Mailvelope](https://mailvelope.com) browser extension.\n- **🙈 We’re not reinventing the wheel!** Based on the great [Horde](https://www.horde.org) libraries.\n- **📬 Want to host your own mail server?** We do not have to reimplement this as you could set up [Mail-in-a-Box](https://mailinabox.email)!\n\n## Ethical AI Rating\n\n### Priority Inbox\n\nPositive:\n* The software for training and inferencing of this model is open source.\n* The model is created and trained on-premises based on the user's own data.\n* The training data is accessible to the user, making it possible to check or correct for bias or optimise the performance and CO2 usage.\n\n### Thread Summaries (opt-in)\n\n**Rating:** 🟢/🟡/🟠/🔴\n\nThe rating depends on the installed text processing backend. See [the rating overview](https://docs.nextcloud.com/server/latest/admin_manual/ai/index.html) for details.\n\nLearn more about the Nextcloud Ethical AI Rating [in our blog](https://nextcloud.com/blog/nextcloud-ethical-ai-rating/).",
     "homepage": "https://github.com/nextcloud/mail#readme",
     "licenses": [
@@ -250,9 +260,9 @@
     ]
   },
   "news": {
-    "hash": "sha256-25VyIvV7d5/hvWuT0IXzpgygLYHRrmqHg2pa+QQpK90=",
-    "url": "https://github.com/nextcloud/news/releases/download/28.6.0/news.tar.gz",
-    "version": "28.6.0",
+    "hash": "sha256-qurdLAGKotjlhEMJ1cdUroukcGfwb4eg+Cr+WvJX3/g=",
+    "url": "https://github.com/nextcloud/news/releases/download/28.7.0/news.tar.gz",
+    "version": "28.7.0",
     "description": "📰 A RSS/Atom Feed reader App for Nextcloud\n\n- 📲 Synchronize your feeds with multiple mobile or desktop [clients](https://nextcloud.github.io/news/clients/)\n- 🔄 Automatic updates of your news feeds\n- 🆓 Free and open source under AGPLv3, no ads or premium functions\n\n**System Cron is currently required for this app to work**\n\nRequirements can be found [here](https://nextcloud.github.io/news/install/#dependencies)\n\nThe Changelog is available [here](https://github.com/nextcloud/news/blob/master/CHANGELOG.md)\n\nCreate a [bug report](https://github.com/nextcloud/news/issues/new/choose)\n\nCreate a [feature request](https://github.com/nextcloud/news/discussions/new)\n\nReport a [feed issue](https://github.com/nextcloud/news/discussions/new)",
     "homepage": "https://github.com/nextcloud/news",
     "licenses": [
@@ -280,9 +290,9 @@
     ]
   },
   "oidc": {
-    "hash": "sha256-mPa+8iIPDTZ+VlYn+MhzAtSGGY/CmkXoiQAB0YgBX0w=",
-    "url": "https://github.com/H2CK/oidc/releases/download/2.0.4/oidc-2.0.4.tar.gz",
-    "version": "2.0.4",
+    "hash": "sha256-rvk81T0zE4EGCp1gQnmFagl7/eVuzRrRcRcabmjzHRw=",
+    "url": "https://github.com/H2CK/oidc/releases/download/2.0.6/oidc-2.0.6.tar.gz",
+    "version": "2.0.6",
     "description": "Nextcloud as OpenID Connect Identity Provider\n\nWith this app you can use Nextcloud as OpenID Connect Identity Provider. If other services\nare configured correctly, you are able to access those services with your Nextcloud login.\n\nFull documentation can be found at:\n\n- [User Documentation](https://github.com/H2CK/oidc/wiki#user-documentation)\n- [Developer Documentation](https://github.com/H2CK/oidc/wiki#developer-documentation)",
     "homepage": "https://github.com/H2CK/oidc",
     "licenses": [
@@ -290,9 +300,9 @@
     ]
   },
   "oidc_login": {
-    "hash": "sha256-5pdHzB57lsJHuOBiYRTONgBZoZgh1EFyE+B16A5/Lds=",
-    "url": "https://github.com/pulsejet/nextcloud-oidc-login/releases/download/v3.3.2/oidc_login.tar.gz",
-    "version": "3.3.2",
+    "hash": "sha256-ENVhD9WxL6t2O7PFn8EZUBGl1vy/MQmRvAyftQRUH8c=",
+    "url": "https://github.com/pulsejet/nextcloud-oidc-login/releases/download/v3.3.4/oidc_login.tar.gz",
+    "version": "3.3.4",
     "description": "# OpenID Connect Login\n\nProvides user creation and login via one single OpenID Connect provider. Even though this is a fork of [nextcloud-social-login](https://github.com/zorn-v/nextcloud-social-login), it fundamentally differs in two ways - aims for simplistic, single provider login (and hence is very minimalistic), and it supports having LDAP as the primary user backend. This way, you can use OpenID Connect to login to Nextcloud while maintaining an LDAP backend with attributes with the LDAP plugin.\n\n### Features\n\n- Automatic [Identity provider endpoints discovery](https://openid.net/specs/openid-connect-discovery-1_0.html)\n- User creation at first login\n- User profile update at login (name, email, avatar, groups etc.)\n- Group creation\n- Automatic redirection from the nextcloud login page to the Identity Provider login page\n- WebDAV endpoints `Bearer` and `Basic` authentication\n- Optional removal of special characters in UID\n- Mapping of multiple names to a single display name\n- Mapping for birthdate",
     "homepage": "https://github.com/pulsejet/nextcloud-single-openid-connect",
     "licenses": [
@@ -310,9 +320,9 @@
     ]
   },
   "pantry": {
-    "hash": "sha256-kPldsAVbpoJ+6kMWmh70j3HBTlzZibtbyr5tvT0ZcaA=",
-    "url": "https://github.com/chenasraf/nextcloud-pantry/releases/download/v0.24.0/pantry-v0.24.0.tar.gz",
-    "version": "0.24.0",
+    "hash": "sha256-C/ejBie1LNZJ/XE72gEwK3+VhOp77qQG1EAO7R5gyik=",
+    "url": "https://github.com/chenasraf/nextcloud-pantry/releases/download/v0.27.0/pantry-v0.27.0.tar.gz",
+    "version": "0.27.0",
     "description": "Pantry helps households stay organized in Nextcloud.\n\n- **Houses** group members and their shared data. A person can belong to multiple houses and switch between them freely.\n- **Checklists** support recurring items (e.g. milk every week) that automatically reappear when due. Share lists with the whole household so everyone knows what to pick up.\n- **Photo boards** let you keep shared reference photos organized in folders — the right brand of dog food, a favorite recipe card, a product label, and so on.\n- **Notes wall** gives the household a lightweight shared space for reminders, pinned messages, and quick notes with customizable colors.\n- **Notifications** keep everyone in the loop when photos are uploaded or notes are added or edited.\n\nAll data is scoped to a house; members only see the houses they belong to.\n\nPantry also has companion apps for mobile and desktop that let you manage your lists, photos and notes on the go and keep everything in sync with your Nextcloud instance.\n\n**Companion apps:** Android ([Google Play](https://play.google.com/store/apps/details?id=dev.casraf.pantry), [F-Droid](https://f-droid.org/en/packages/dev.casraf.pantry/)) | iOS/macOS ([App Store](https://apps.apple.com/us/app/pantry-for-nextcloud/id6762161619))",
     "homepage": "https://github.com/chenasraf/nextcloud-pantry",
     "licenses": [
@@ -410,9 +420,9 @@
     ]
   },
   "spreed": {
-    "hash": "sha256-YfObmXwsAAXOvTCNzjshQ9k1eLhvD0EQEM3bKtMdH5M=",
-    "url": "https://github.com/nextcloud-releases/spreed/releases/download/v24.0.3/spreed-v24.0.3.tar.gz",
-    "version": "24.0.3",
+    "hash": "sha256-puSnXtbKLtKX2EgXGoqCPB8n98cf+vvUXoEAGrn3FkY=",
+    "url": "https://github.com/nextcloud-releases/spreed/releases/download/v24.0.4/spreed-v24.0.4.tar.gz",
+    "version": "24.0.4",
     "description": "Chat, video & audio-conferencing using WebRTC\n\n* 💬 **Chat** Nextcloud Talk comes with a simple text chat, allowing you to share or upload files from your Nextcloud Files app or local device and mention other participants.\n* 👥 **Private, group, public and password protected calls!** Invite someone, a whole group or send a public link to invite to a call.\n* 🌐 **Federated chats** Chat with other Nextcloud users on their servers\n* 💻 **Screen sharing!** Share your screen with the participants of your call.\n* 🚀 **Integration with other Nextcloud apps** like Files, Calendar, User status, Dashboard, Flow, Maps, Smart picker, Contacts, Deck, and many more.\n* 🌉 **Sync with other chat solutions** With [Matterbridge](https://github.com/42wim/matterbridge/) being integrated in Talk, you can easily sync a lot of other chat solutions to Nextcloud Talk and vice-versa.",
     "homepage": "https://github.com/nextcloud/spreed",
     "licenses": [

From 93192ab47b108a009aa4ac16709d76387fa2bd06 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 9 Aug 2026 13:07:33 +0000
Subject: [PATCH 24/31] cel-go: 0.30.0 -> 0.31.0

(cherry picked from commit bdd977b75880c6526e7e6a3c9b079baac816b9ab)
---
 pkgs/by-name/ce/cel-go/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ce/cel-go/package.nix b/pkgs/by-name/ce/cel-go/package.nix
index a0fd02ebefa3..ed38e6ef81fb 100644
--- a/pkgs/by-name/ce/cel-go/package.nix
+++ b/pkgs/by-name/ce/cel-go/package.nix
@@ -26,18 +26,18 @@ let
 in
 buildGoModule (finalAttrs: {
   pname = "cel-go";
-  version = "0.30.0";
+  version = "0.31.0";
 
   src = fetchFromGitHub {
     owner = "google";
     repo = "cel-go";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-D07O4eLNvOLecIRDylUC5Rrc8EfworHwEPIzTZV82IU=";
+    hash = "sha256-d2qteEY7aRKvzD+uF7uNibUv5dECaL61NogbZfd3cAQ=";
   };
 
   modRoot = "repl";
 
-  vendorHash = "sha256-AR1XxMJZEtfFgq/H/N07d/qpnI7K1/IHZCHqvqIfeC8=";
+  vendorHash = "sha256-SetkDfzfR/zqkNirGeGlczvV5h/CM9GiAPP2pKq6QDU=";
 
   subPackages = [
     "main"

From df6a682fd789fff9161f6c3e238ce2a888ade005 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Sat, 8 Aug 2026 00:08:58 +0300
Subject: [PATCH 25/31] mount-zip: 1.12 -> 1.16

(cherry picked from commit 8a7b4a4fac244225b617bfe568d3a86ed2090078)
---
 pkgs/by-name/mo/mount-zip/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/mo/mount-zip/package.nix b/pkgs/by-name/mo/mount-zip/package.nix
index c364c239e3ee..2e6f608acee0 100644
--- a/pkgs/by-name/mo/mount-zip/package.nix
+++ b/pkgs/by-name/mo/mount-zip/package.nix
@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "mount-zip";
-  version = "1.12";
+  version = "1.16";
 
   src = fetchFromGitHub {
     owner = "google";
     repo = "mount-zip";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-z+WBELX+LUE749PEOIpWOHUtir7V7qOKagifQkIdgFk=";
+    hash = "sha256-YNbaMn5yOFa/g3alANly4vZyEzborK19MUhSFh4T3b8=";
   };
 
   strictDeps = true;

From bf79e0de04f6c3be297c5540834be7151e2b5b58 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 11 Aug 2026 18:18:33 +0000
Subject: [PATCH 26/31] grafana-loki: 3.7.4 -> 3.7.6

(cherry picked from commit 2fefb3ecfd12920307169c0dc9896b6914f023ca)
---
 pkgs/by-name/gr/grafana-loki/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gr/grafana-loki/package.nix b/pkgs/by-name/gr/grafana-loki/package.nix
index e4f85a26f108..9ac2dc1922c1 100644
--- a/pkgs/by-name/gr/grafana-loki/package.nix
+++ b/pkgs/by-name/gr/grafana-loki/package.nix
@@ -9,14 +9,14 @@
 }:
 
 buildGoModule (finalAttrs: {
-  version = "3.7.4";
+  version = "3.7.6";
   pname = "grafana-loki";
 
   src = fetchFromGitHub {
     owner = "grafana";
     repo = "loki";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-sTmez6HBu8rQigToUqVFthYIkQ7E+rFVCSH0e8GBQVw=";
+    hash = "sha256-Wf3VN8qdr//YfF0B0IfPlYkfDllGQO8iKIEwjU6uYQo=";
   };
 
   vendorHash = null;

From 76ec27b021ec39935e3b81dbe70d99e4f702a345 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 16 Aug 2026 14:16:50 +0000
Subject: [PATCH 27/31] ghgrab: 2.0.1 -> 2.0.2

(cherry picked from commit 1d6bb4f6ceb907fdbc33dff474eef6aff44194fc)
---
 pkgs/by-name/gh/ghgrab/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/gh/ghgrab/package.nix b/pkgs/by-name/gh/ghgrab/package.nix
index 14a0e3259716..7d85cda39e9d 100644
--- a/pkgs/by-name/gh/ghgrab/package.nix
+++ b/pkgs/by-name/gh/ghgrab/package.nix
@@ -8,16 +8,16 @@
 # note: upstream has a flake
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ghgrab";
-  version = "2.0.1";
+  version = "2.0.2";
 
   src = fetchFromGitHub {
     owner = "abhixdd";
     repo = "ghgrab";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-5eGJqnGTctaXM5x/1QUcL9ne4kPZhjiN7+D3Lb0UJpc=";
+    hash = "sha256-MRELy+iwLt+qbO3ODHHNZcSSAiEtII2hEoMs3Snu+u8=";
   };
 
-  cargoHash = "sha256-nn7oT0TIBFxfFVOvLIvp9TswPIr6v+ttdw74CnaKqAQ=";
+  cargoHash = "sha256-Qq4l+BSNlpHrGAUtLXpyNJj0NdGVar+hIfMQPM5b8rU=";
 
   doInstallCheck = true;
   versionCheckProgramArg = "--version";

From eabc4f2aa5a2e5e9bfe0fc2923d40ac08e6793b2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 15 Aug 2026 15:19:14 +0000
Subject: [PATCH 28/31] node-core-utils: 7.0.0 -> 7.1.0

(cherry picked from commit 96c320d909ee958679a54da83f6feacf005e86b8)
---
 pkgs/by-name/no/node-core-utils/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/no/node-core-utils/package.nix b/pkgs/by-name/no/node-core-utils/package.nix
index 21ff00f26b55..79a936d6edd4 100644
--- a/pkgs/by-name/no/node-core-utils/package.nix
+++ b/pkgs/by-name/no/node-core-utils/package.nix
@@ -9,16 +9,16 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "node-core-utils";
-  version = "7.0.0";
+  version = "7.1.0";
 
   src = fetchFromGitHub {
     owner = "nodejs";
     repo = "node-core-utils";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-cnnzFa8RK7HSuOcbW1Cwz+gQ1+jbcOYD844F2hXlSBI=";
+    hash = "sha256-qNyBR4rRr9moRpy7iVObtnDLZwjJuUhrNuLlFrJ7+lE=";
   };
 
-  npmDepsHash = "sha256-K6wY8NmzrE/uCyK/EAc8oAiO/0jmYYHhgcIO37AANO0=";
+  npmDepsHash = "sha256-uASahJmUBtm0k15MCixQpngmZnoBpie6+rj+UnJXtBc=";
 
   dontNpmBuild = true;
   dontNpmPrune = true;

From ce7487ce6f815e52c5e561e141a6c54679be0823 Mon Sep 17 00:00:00 2001
From: DarkOnion0 <darkonion0@clapot.org>
Date: Sun, 16 Aug 2026 19:05:04 +0200
Subject: [PATCH 29/31] drawio: 30.2.6 -> 31.1.8

(cherry picked from commit 2aca8be4484f972f60c95c74c07d88343f2ca614)
---
 pkgs/by-name/dr/drawio/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/dr/drawio/package.nix b/pkgs/by-name/dr/drawio/package.nix
index 0d88e62ee094..8b68c6750100 100644
--- a/pkgs/by-name/dr/drawio/package.nix
+++ b/pkgs/by-name/dr/drawio/package.nix
@@ -14,14 +14,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "drawio";
-  version = "30.2.6";
+  version = "31.1.8";
 
   src = fetchFromGitHub {
     owner = "jgraph";
     repo = "drawio-desktop";
     rev = "v${finalAttrs.version}";
     fetchSubmodules = true;
-    hash = "sha256-hn+Lrsn+aNZqVFcyLinuJjUiQgai0o4F5d5cT9CvtLA=";
+    hash = "sha256-tVGBZ+zMl/co0l5oOp78GJG0kexgaiPx7f03WaNHxoY=";
   };
 
   # `@electron/fuses` tries to run `codesign` and fails. Disable and use autoSignDarwinBinariesHook instead
@@ -32,7 +32,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   offlineCache = fetchNpmDeps {
     src = finalAttrs.src;
-    hash = "sha256-PnYUy0Arxo5uTYyYfUEkbd4u7oIOHkEc0/ufp0umBhE=";
+    hash = "sha256-Yh8j7KDzsWpGIpYM/NuikPoNDiodJZZUTNqFOThmOXQ=";
   };
 
   nativeBuildInputs = [

From 3b91c7b6017052b060696d877d297b2a76a7f0a8 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 31 May 2026 22:48:48 +0000
Subject: [PATCH 30/31] kas: 5.2 -> 5.3

(cherry picked from commit 8fa7495c27c18feaf12f458fe8292d09ea078ccb)
---
 pkgs/by-name/ka/kas/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ka/kas/package.nix b/pkgs/by-name/ka/kas/package.nix
index aefdb619ea41..5481bd00740a 100644
--- a/pkgs/by-name/ka/kas/package.nix
+++ b/pkgs/by-name/ka/kas/package.nix
@@ -8,14 +8,14 @@
 
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "kas";
-  version = "5.2";
+  version = "5.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "siemens";
     repo = "kas";
     tag = finalAttrs.version;
-    hash = "sha256-lEhgEotQE5ceH1NEBlTzD33W09NQjzo4bCpZi9rcQE0=";
+    hash = "sha256-XeAu8BNfcNmwDn25MA0uVmADjuYRkQxq+mG2XvRoJIE=";
   };
 
   patches = [ ./pass-terminfo-env.patch ];

From fccdbb1a43f59b407159fbea11c401fc299b99e9 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 27 Jun 2026 23:21:24 +0000
Subject: [PATCH 31/31] kas: 5.3 -> 5.4

(cherry picked from commit ded00ca14faa8dcf6e05eec2c700f60eec002c05)
---
 pkgs/by-name/ka/kas/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ka/kas/package.nix b/pkgs/by-name/ka/kas/package.nix
index 5481bd00740a..49fd9e9a81ff 100644
--- a/pkgs/by-name/ka/kas/package.nix
+++ b/pkgs/by-name/ka/kas/package.nix
@@ -8,14 +8,14 @@
 
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "kas";
-  version = "5.3";
+  version = "5.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "siemens";
     repo = "kas";
     tag = finalAttrs.version;
-    hash = "sha256-XeAu8BNfcNmwDn25MA0uVmADjuYRkQxq+mG2XvRoJIE=";
+    hash = "sha256-wETe3VgG5ZEQjWXgcC/u42ZzzPIMqrBEcZmaDcK5yRY=";
   };
 
   patches = [ ./pass-terminfo-env.patch ];