diff --git a/doc/hooks/tauri.section.md b/doc/hooks/tauri.section.md
index 0eb1740644b4..f6af168793aa 100644
--- a/doc/hooks/tauri.section.md
+++ b/doc/hooks/tauri.section.md
@@ -73,7 +73,7 @@ Controls the flags passed to `cargo tauri build`.
 
 #### `tauriBundleType` {#tauri-bundle-type}
 
-The [bundle type](https://tauri.app/v1/guides/building/) to build.
+The [bundle type](https://tauri.app/reference/javascript/api/namespaceapp/#bundletype) to build.
 
 #### `dontTauriBuild` {#dont-tauri-build}
 
diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 18bbe6ca8151..599e79d45e15 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -4474,6 +4474,14 @@
     githubId = 510553;
     name = "Jos van Bakel";
   };
+  c2fc2f = {
+    name = "c2fc2f";
+    github = "c2fc2f";
+    githubId = 59392138;
+    email = "contact@c2fc2f.com";
+    matrix = "@c2fc2f:sagbot.com";
+    keys = [ { fingerprint = "6EF1 8507 76B5 ABCE 5BF0  C0F8 42E0 E1D1 0B61 1208"; } ];
+  };
   c31io = {
     email = "celiogrand@outlook.com";
     github = "c31io";
@@ -19342,6 +19350,12 @@
     githubId = 708570;
     name = "Manuel Mendez";
   };
+  mmulqueen = {
+    email = "michael@mulqueen.me.uk";
+    github = "mmulqueen";
+    githubId = 6616321;
+    name = "Michael Mulqueen";
+  };
   mmusnjak = {
     email = "marko.musnjak@gmail.com";
     github = "mmusnjak";
diff --git a/nixos/doc/manual/release-notes/rl-2611.section.md b/nixos/doc/manual/release-notes/rl-2611.section.md
index 4852ac1cb0b2..11e7a7a8ce71 100644
--- a/nixos/doc/manual/release-notes/rl-2611.section.md
+++ b/nixos/doc/manual/release-notes/rl-2611.section.md
@@ -207,6 +207,8 @@
 
 - `fail2ban` has been updated to 1.1.1, which has a few breaking changes compared to 1.1.0 ([changelog](https://github.com/fail2ban/fail2ban/blob/1.1.1/ChangeLog))
 
+- `services.neo4j.tls.<policy_name>`: This policy is no longer enabled by default. If you rely on this policy, you must now explicitly opt-in by setting `services.neo4j.tls.<policy_name>.enable = true;`.
+
 - `systemd.user.extraConfig` has been removed in favor of the structured [](#opt-systemd.user.settings.Manager) option. Use `systemd.user.settings.Manager` to set any `systemd-user.conf(5)` option directly. For example, replace `systemd.user.extraConfig = "DefaultTimeoutStartSec=60";` with `systemd.user.settings.Manager.DefaultTimeoutStartSec = 60;`.
 
 - `matrix-appservice-discord` was removed from nixpkgs along with its NixOS module (`services.matrix-appservice-discord`) as it is no longer actively maintained upstream. Use the actively-maintained puppeting bridge [`mautrix-discord`](#opt-services.mautrix-discord.enable) instead.
diff --git a/nixos/modules/security/pam.nix b/nixos/modules/security/pam.nix
index c263c04cb0c3..fb3be94e3b1f 100644
--- a/nixos/modules/security/pam.nix
+++ b/nixos/modules/security/pam.nix
@@ -1252,7 +1252,7 @@ let
                       name = "fscrypt";
                       enable = config.security.pam.enableFscrypt;
                       control = "optional";
-                      modulePath = "${pkgs.fscrypt-experimental}/lib/security/pam_fscrypt.so";
+                      modulePath = "${pkgs.fscrypt}/lib/security/pam_fscrypt.so";
                     }
                     {
                       name = "zfs_key";
@@ -1449,7 +1449,7 @@ let
                 name = "fscrypt";
                 enable = config.security.pam.enableFscrypt;
                 control = "optional";
-                modulePath = "${pkgs.fscrypt-experimental}/lib/security/pam_fscrypt.so";
+                modulePath = "${pkgs.fscrypt}/lib/security/pam_fscrypt.so";
               }
               {
                 name = "zfs_key";
@@ -1610,7 +1610,7 @@ let
                 name = "fscrypt";
                 enable = config.security.pam.enableFscrypt;
                 control = "optional";
-                modulePath = "${pkgs.fscrypt-experimental}/lib/security/pam_fscrypt.so";
+                modulePath = "${pkgs.fscrypt}/lib/security/pam_fscrypt.so";
               }
               {
                 name = "zfs_key-skip-systemd";
@@ -2663,7 +2663,7 @@ in
       ++ lib.optionals config.security.pam.enableOTPW [ pkgs.otpw ]
       ++ lib.optionals config.security.pam.oath.enable [ pkgs.oath-toolkit ]
       ++ lib.optionals config.security.pam.p11.enable [ pkgs.pam_p11 ]
-      ++ lib.optionals config.security.pam.enableFscrypt [ pkgs.fscrypt-experimental ]
+      ++ lib.optionals config.security.pam.enableFscrypt [ pkgs.fscrypt ]
       ++ lib.optionals config.security.pam.u2f.enable [ pkgs.pam_u2f ];
 
     security.wrappers = {
diff --git a/nixos/modules/security/polkit.nix b/nixos/modules/security/polkit.nix
index 94237502160e..841554ab5729 100644
--- a/nixos/modules/security/polkit.nix
+++ b/nixos/modules/security/polkit.nix
@@ -151,6 +151,17 @@ in
         # ~/.config/Yubico/u2f_keys (the default key file location)
         ProtectHome = "read-only";
       })
+      (mkIf config.security.pam.yubico.enable {
+        # Override upstream PrivateDevices=yes to allow access to /dev/hidraw*
+        PrivateDevices = false;
+        DeviceAllow = [ "char-hidraw rw" ];
+      })
+      (mkIf config.services.fprintd.enable {
+        # Override upstream PrivateDevices=yes to allow access to /dev/bus/usb/**
+        PrivateDevices = false;
+        DeviceAllow = [ "char-usb_device rw" ];
+        RestrictAddressFamilies = [ "AF_NETLINK" ];
+      })
       (mkIf config.security.pam.zfs.enable {
         PrivateDevices = false;
         DeviceAllow = [
diff --git a/nixos/modules/services/databases/neo4j.nix b/nixos/modules/services/databases/neo4j.nix
index b15f3be474b2..dcb5221eda68 100644
--- a/nixos/modules/services/databases/neo4j.nix
+++ b/nixos/modules/services/databases/neo4j.nix
@@ -13,6 +13,7 @@ let
     opt: lib.isOption opt && opt.type == lib.types.path && opt.highestPrio >= 1500;
 
   sslPolicies = lib.mapAttrsToList (name: conf: ''
+    dbms.ssl.policy.${name}.enabled=${lib.boolToString conf.enable}
     dbms.ssl.policy.${name}.allow_key_generation=${lib.boolToString conf.allowKeyGeneration}
     dbms.ssl.policy.${name}.base_directory=${conf.baseDirectory}
     ${lib.optionalString (conf.ciphers != null) ''
@@ -35,7 +36,7 @@ let
     dbms.ssl.policy.${name}.tls_versions=${lib.concatStringsSep "," conf.tlsVersions}
     dbms.ssl.policy.${name}.trust_all=${lib.boolToString conf.trustAll}
     dbms.ssl.policy.${name}.trusted_dir=${conf.trustedDir}
-  '') cfg.ssl.policies;
+  '') (lib.filterAttrs (_: v: v.enable) cfg.ssl.policies);
 
   serverConfig = pkgs.writeText "neo4j.conf" ''
     # General
@@ -467,6 +468,8 @@ in
             }:
             {
               options = {
+                enable = lib.mkEnableOption "this policy";
+
                 allowKeyGeneration = lib.mkOption {
                   type = lib.types.bool;
                   default = false;
@@ -714,6 +717,6 @@ in
     };
 
   meta = {
-    maintainers = [ ];
+    maintainers = [ lib.maintainers.c2fc2f ];
   };
 }
diff --git a/nixos/tests/gocron.nix b/nixos/tests/gocron.nix
index 2625dc474b53..67ba07456494 100644
--- a/nixos/tests/gocron.nix
+++ b/nixos/tests/gocron.nix
@@ -34,10 +34,10 @@
       return status == 0 and int(output) == 1
 
     def start_job():
-      machine.succeed("curl -X POST http://localhost:8156/api/jobs/Test%20job")
+      machine.succeed("curl -X POST http://localhost:8156/api/jobs/test-job")
 
     def job_ran_successfully() -> bool:
-      output = machine.succeed("curl http://localhost:8156/api/runs/Test%20job | jq '.[0].status_id, .[0].logs.[2].message'")
+      output = machine.succeed("curl http://localhost:8156/api/runs/test-job | jq '.[0].status_id, .[0].logs.[2].message'")
       split_output = output.split('\n')
       ran_successfully = int(split_output[0]) == 3
       log_message_as_expected = "Job runs not successfully" in split_output[1]
diff --git a/nixos/tests/lomiri-system-settings.nix b/nixos/tests/lomiri-system-settings.nix
index 4b7975e26d56..c267a0ef3157 100644
--- a/nixos/tests/lomiri-system-settings.nix
+++ b/nixos/tests/lomiri-system-settings.nix
@@ -29,6 +29,7 @@
         ubuntu-classic
       ];
 
+      services.printing.enable = true;
       services.upower.enable = true;
     };
 
@@ -37,7 +38,7 @@
   testScript =
     let
       settingsPages = [
-        # Base pages
+        # Network
         {
           name = "wifi";
           type = "internal";
@@ -55,6 +56,8 @@
           element = "Add|Manual|Configuration";
           skipOCR = true;
         }
+
+        # Personal
         {
           name = "appearance";
           type = "internal";
@@ -85,6 +88,13 @@
           type = "internal";
           element = "Edge drag";
         }
+
+        # System
+        {
+          name = "printing";
+          type = "internal";
+          element = "no printers configured";
+        }
         {
           name = "mouse";
           type = "internal";
@@ -95,13 +105,10 @@
           type = "internal";
           element = "Time zone|Set the time and date";
         }
-
-        # External plugins
         {
           name = "security-privacy";
-          type = "external";
+          type = "internal";
           element = "Locking|unlocking|permissions";
-          elementLocalised = "Sperren|Entsperren|Berechtigungen";
         }
       ];
     in
diff --git a/nixos/tests/portunus.nix b/nixos/tests/portunus.nix
index 5562c7f5ac8a..d5eba1cd3fdd 100644
--- a/nixos/tests/portunus.nix
+++ b/nixos/tests/portunus.nix
@@ -13,6 +13,7 @@
 
   testScript = ''
     machine.wait_for_unit("portunus.service")
-    machine.succeed("curl --fail -vvv http://localhost:8080/")
+    machine.wait_for_open_port(8080)
+    machine.wait_until_succeeds("curl --fail -vvv http://localhost:8080/")
   '';
 }
diff --git a/pkgs/applications/editors/vim/plugins/generated.nix b/pkgs/applications/editors/vim/plugins/generated.nix
index 061506e170f6..9f5b9d6a7f91 100644
--- a/pkgs/applications/editors/vim/plugins/generated.nix
+++ b/pkgs/applications/editors/vim/plugins/generated.nix
@@ -2155,6 +2155,20 @@ final: prev: {
     meta.hydraPlatforms = [ ];
   };
 
+  boolean-toggle-nvim = buildVimPlugin {
+    pname = "boolean-toggle.nvim";
+    version = "0.5.0-1";
+    src = fetchFromGitHub {
+      owner = "DrKJeff16";
+      repo = "boolean-toggle.nvim";
+      tag = "v0.5.0-1";
+      hash = "sha256-93ppL2JP2K+lfeCtJG0R8YW6cLk8JJrPa5RAGKnzOlE=";
+    };
+    meta.homepage = "https://github.com/DrKJeff16/boolean-toggle.nvim/";
+    meta.license = getLicenseFromSpdxId "GPL-2.0-only";
+    meta.hydraPlatforms = [ ];
+  };
+
   bracey-vim = buildVimPlugin {
     pname = "bracey.vim";
     version = "0-unstable-2021-08-20";
diff --git a/pkgs/applications/editors/vim/plugins/vim-plugin-names b/pkgs/applications/editors/vim/plugins/vim-plugin-names
index 92f1696b4f7d..dc639e73c13f 100644
--- a/pkgs/applications/editors/vim/plugins/vim-plugin-names
+++ b/pkgs/applications/editors/vim/plugins/vim-plugin-names
@@ -152,6 +152,7 @@ https://github.com/HampusHauffman/block.nvim/,,
 https://github.com/uloco/bluloco.nvim/,,
 https://github.com/rockerBOO/boo-colorscheme-nvim/,,
 https://github.com/nat-418/boole.nvim/,,
+https://github.com/DrKJeff16/boolean-toggle.nvim/,,
 https://github.com/turbio/bracey.vim/,,
 https://github.com/fruit-in/brainfuck-vim/,,
 https://github.com/famiu/bufdelete.nvim/,,
diff --git a/pkgs/applications/networking/cluster/nomad/default.nix b/pkgs/applications/networking/cluster/nomad/default.nix
index f95a2ec08764..6076f4fedd42 100644
--- a/pkgs/applications/networking/cluster/nomad/default.nix
+++ b/pkgs/applications/networking/cluster/nomad/default.nix
@@ -1,6 +1,5 @@
 {
   lib,
-  buildGo125Module,
   buildGo126Module,
   fetchFromGitHub,
   nixosTests,
@@ -96,7 +95,7 @@ rec {
   };
 
   nomad_1_11 = generic {
-    buildGoModule = buildGo125Module;
+    buildGoModule = buildGo126Module;
     version = "1.11.3";
     hash = "sha256-J+w53HlMlrXX5yKjDYhf3rSGt1pmOyNcPlOqyUrkLWE=";
     vendorHash = "sha256-67etQUjcPXz4VVpNXLVusQlEybxEqKfYQcNTNL4X8bA=";
@@ -108,7 +107,7 @@ rec {
   };
 
   nomad_1_10 = generic {
-    buildGoModule = buildGo125Module;
+    buildGoModule = buildGo126Module;
     version = "1.10.5";
     hash = "sha256-NFH++oYWb6vQN6cOPByscI/ZBWDNy4YbcLiBMO3/jVU=";
     vendorHash = "sha256-QcTw9kKwoHIvXZoxfDohFG+sBs8OLvYPeygygDClsn8=";
@@ -120,7 +119,7 @@ rec {
   };
 
   nomad_1_9 = generic {
-    buildGoModule = buildGo125Module;
+    buildGoModule = buildGo126Module;
     version = "1.9.7";
     hash = "sha256-U02H6DPr1friQ9EwqD/wQnE2Fm20OE5xNccPDJfnsqI=";
     vendorHash = "sha256-9GnwqkexJAxrhW9yJFaDTdSaZ+p+/dcMuhlusp4cmyw=";
diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index af25b5adbe5f..d4d090c85a74 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -54,13 +54,13 @@
     "vendorHash": "sha256-bJcVf4Yj70VwKn0p6RN+/dc5J+K6xFJcifVei9dK2bA="
   },
   "aminueza_minio": {
-    "hash": "sha256-2NbI/ANAuCogB4H31N2k5dPpg8jqRULFdWD0+NxQD5c=",
+    "hash": "sha256-pw8QgjdU0c4w6ZUJLCy3zTEk0UTML1Mymh+UsmBAdrQ=",
     "homepage": "https://registry.terraform.io/providers/aminueza/minio",
     "owner": "aminueza",
     "repo": "terraform-provider-minio",
-    "rev": "v3.41.0",
+    "rev": "v3.41.1",
     "spdx": "AGPL-3.0",
-    "vendorHash": "sha256-NplukDVIzE8OUBOUdi0NTEPYBIGTwIaXxd+j5FdJjf8="
+    "vendorHash": "sha256-V9yH/dGXZJ85XVQAksL4QCRbhS9yrXy2tY8Jr+kKQdk="
   },
   "archessmn_powerdns": {
     "hash": "sha256-1bjQFu3k0ERBga94pQ8HZjbfu3qlxnMQLjSkDU6Vp/I=",
@@ -209,11 +209,11 @@
     "vendorHash": "sha256-R3w7olc94QJuMk62bfvuM9aU+KlmNTUhojl/j9gmHjk="
   },
   "cloudamqp_cloudamqp": {
-    "hash": "sha256-UOEZK9zjHwUId86hawiWVtXAY3eGwbQIQLSmLHBbgCc=",
+    "hash": "sha256-GMfBdLUqw/3WEtZfP6ShCEwheHeUa/1EDMzIuYGalvA=",
     "homepage": "https://registry.terraform.io/providers/cloudamqp/cloudamqp",
     "owner": "cloudamqp",
     "repo": "terraform-provider-cloudamqp",
-    "rev": "v1.47.0",
+    "rev": "v1.48.0",
     "spdx": "MPL-2.0",
     "vendorHash": "sha256-hgi4CyYMNBmxAUc93uFc4J13nlgVOQNLYyLYz+rnWlM="
   },
@@ -292,13 +292,13 @@
     "vendorHash": "sha256-3o6YRDrq4rQhNAFyqiGJrAoxuAykWw85OExRGSE3kGI="
   },
   "datadog_datadog": {
-    "hash": "sha256-ATKQBtgI4yfjZo09iMPlH7g14xc6bI9ebP64GTtNZwk=",
+    "hash": "sha256-Sq3gP01DrTm41fLTZvavNTNhMy7AfMcbxe+ac8omJIQ=",
     "homepage": "https://registry.terraform.io/providers/DataDog/datadog",
     "owner": "DataDog",
     "repo": "terraform-provider-datadog",
-    "rev": "v4.19.0",
+    "rev": "v4.20.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-Uy798AsTpZNtaggIxUlf3WNIFTmvigtPp0yWygcyzJY="
+    "vendorHash": "sha256-PoM4C03Q8bAz1hqasx0SWYWEVW7dS7tCcI+tLE2MHLE="
   },
   "datadrivers_nexus": {
     "hash": "sha256-t9hpZ4COmMPvs4TgcZLeuOA23oD5vvHw8UVK7SpzI0Y=",
@@ -382,13 +382,13 @@
     "vendorHash": "sha256-uokHd4hDvWl6mrBa062F/uZmYPnW3TIZZKZwKBVq+Lo="
   },
   "e-breuninger_netbox": {
-    "hash": "sha256-qyzw5a35twJ5gsEe0ANv6a9MMD0UyV8hYbYt/2bBJ/k=",
+    "hash": "sha256-tbBCGOcbDhiOjdgyS9lSw6IbMgzZwnbM40/InvhUKCA=",
     "homepage": "https://registry.terraform.io/providers/e-breuninger/netbox",
     "owner": "e-breuninger",
     "repo": "terraform-provider-netbox",
-    "rev": "v5.7.0",
+    "rev": "v5.8.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-y9GRTuoh1X6GfGkGZbPpO500y8DoJS1dnwZL3BCTUcY="
+    "vendorHash": "sha256-NbFksqqwwelhSig6+5kqoTuUsUab8we+sSp1izfpF10="
   },
   "equinix_equinix": {
     "hash": "sha256-gPuRvWQiJZdyUGTNMCQSEFmbqC5ralxroBSbBprFe/8=",
@@ -517,13 +517,13 @@
     "vendorHash": "sha256-ikBqIxD5aTOcwNHCMN6EaOwSHCAP5n/SULuqQXPLpOc="
   },
   "hashicorp_aws": {
-    "hash": "sha256-INQXP7BRW+QbcxYd6QmIKLzilmXlT2ntVMONcpk5Q4g=",
+    "hash": "sha256-qSGvtJqiViBdBZD6gMZSaUXbZNZmCBBb1kkKUjCK0YM=",
     "homepage": "https://registry.terraform.io/providers/hashicorp/aws",
     "owner": "hashicorp",
     "repo": "terraform-provider-aws",
-    "rev": "v6.62.0",
+    "rev": "v6.63.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-e6ILWC7E2S9u+evH9OmS1hyn6WmYn9r0ch/zfJJ7xrg="
+    "vendorHash": "sha256-lrcDMPenGnTgKnrdL9oCk3Pg/WObKYqKxbLXqjWR7U4="
   },
   "hashicorp_awscc": {
     "hash": "sha256-cVpZA8XK3d6RDjdo8KMbQ/J540ZRzUb79S2wq/Vzo6Y=",
@@ -1328,11 +1328,11 @@
     "vendorHash": "sha256-kWwfjiWDm/voT95oxyNtCltRzeBJYR3gJo1USV0j/Uo="
   },
   "tencentcloudstack_tencentcloud": {
-    "hash": "sha256-p8DBZ2NRC5Dswf+iRSg00zBi3+mA1Y3jNKS5ikpJ1Qo=",
+    "hash": "sha256-nuzKpMtJT0y4OuSvYTKbAs1+FYTpnXnWYI9oEzdt1BM=",
     "homepage": "https://registry.terraform.io/providers/tencentcloudstack/tencentcloud",
     "owner": "tencentcloudstack",
     "repo": "terraform-provider-tencentcloud",
-    "rev": "v1.83.27",
+    "rev": "v1.83.29",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },
diff --git a/pkgs/applications/networking/instant-messengers/discord/linux.nix b/pkgs/applications/networking/instant-messengers/discord/linux.nix
index ff5329b90985..3f9782c147e2 100644
--- a/pkgs/applications/networking/instant-messengers/discord/linux.nix
+++ b/pkgs/applications/networking/instant-messengers/discord/linux.nix
@@ -285,7 +285,8 @@ stdenv.mkDerivation (finalAttrs: {
     exec = binaryName;
     icon = pname;
     inherit desktopName;
-    genericName = meta.description;
+    comment = meta.description;
+    genericName = "Instant Messenger";
     categories = [
       "Network"
       "InstantMessaging"
diff --git a/pkgs/applications/video/streamlink-twitch-gui/bin.nix b/pkgs/applications/video/streamlink-twitch-gui/bin.nix
deleted file mode 100644
index 006b2635f597..000000000000
--- a/pkgs/applications/video/streamlink-twitch-gui/bin.nix
+++ /dev/null
@@ -1,159 +0,0 @@
-{
-  autoPatchelfHook,
-  fetchurl,
-  lib,
-  copyDesktopItems,
-  makeDesktopItem,
-  makeWrapper,
-  stdenv,
-  wrapGAppsHook3,
-  at-spi2-core,
-  atk,
-  alsa-lib,
-  cairo,
-  cups,
-  dbus,
-  expat,
-  gcc-unwrapped,
-  gdk-pixbuf,
-  glib,
-  pango,
-  gtk3-x11,
-  libudev0-shim,
-  libuuid,
-  libgbm,
-  nss,
-  nspr,
-  libxtst,
-  libxscrnsaver,
-  libxrender,
-  libxrandr,
-  libxi,
-  libxfixes,
-  libxext,
-  libxdamage,
-  libxcursor,
-  libxcomposite,
-  libx11,
-  libxcb,
-  streamlink,
-}:
-let
-  basename = "streamlink-twitch-gui";
-  runtimeLibs = lib.makeLibraryPath [
-    gtk3-x11
-    libudev0-shim
-  ];
-  runtimeBins = lib.makeBinPath [ streamlink ];
-
-in
-stdenv.mkDerivation rec {
-  pname = "${basename}-bin";
-  version = "2.5.3";
-
-  src =
-    {
-      x86_64-linux = fetchurl {
-        url = "https://github.com/streamlink/${basename}/releases/download/v${version}/${basename}-v${version}-linux64.tar.gz";
-        hash = "sha256-ue5Ehj/dLOIJNJVq0Pd6EbA1hkVPz5m+3chVvEXaH6U=";
-      };
-      i686-linux = fetchurl {
-        url = "https://github.com/streamlink/${basename}/releases/download/v${version}/${basename}-v${version}-linux32.tar.gz";
-        hash = "sha256-y252QhVsRakngdApOHgegMMhs61KTxL9gfPjBjaSKOI=";
-      };
-    }
-    .${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
-
-  nativeBuildInputs = [
-    at-spi2-core
-    atk
-    alsa-lib
-    autoPatchelfHook
-    cairo
-    copyDesktopItems
-    cups.lib
-    dbus.lib
-    expat
-    gcc-unwrapped
-    gdk-pixbuf
-    glib
-    pango
-    gtk3-x11
-    libgbm
-    nss
-    nspr
-    libuuid
-    libx11
-    libxcb
-    libxcomposite
-    libxcursor
-    libxdamage
-    libxext
-    libxfixes
-    libxi
-    libxrandr
-    libxrender
-    libxscrnsaver
-    libxtst
-    makeWrapper
-    wrapGAppsHook3
-  ];
-
-  buildInputs = [ streamlink ];
-
-  dontBuild = true;
-  dontConfigure = true;
-
-  installPhase = ''
-    runHook preInstall
-    mkdir -p $out/{bin,opt/${basename},share}
-
-    # Install all files, remove unnecessary ones
-    cp -a . $out/opt/${basename}/
-    rm -r $out/opt/${basename}/{{add,remove}-menuitem.sh,credits.html,icons/}
-    ln -s $out/opt/${basename}/${basename} $out/bin/
-    for res in 16 32 48 64 128 256; do
-      install -Dm644 \
-        icons/icon-"$res".png \
-        $out/share/icons/hicolor/"$res"x"$res"/apps/${basename}.png
-    done
-    runHook postInstall
-  '';
-
-  preFixup = ''
-    gappsWrapperArgs+=(
-      --add-flags "--no-version-check" \
-      --prefix LD_LIBRARY_PATH : ${runtimeLibs} \
-      --prefix PATH : ${runtimeBins}
-    )
-  '';
-
-  desktopItems = [
-    (makeDesktopItem {
-      name = basename;
-      exec = basename;
-      icon = basename;
-      desktopName = "Streamlink Twitch GUI";
-      genericName = meta.description;
-      categories = [
-        "AudioVideo"
-        "Network"
-      ];
-    })
-  ];
-
-  meta = {
-    description = "Twitch.tv browser for Streamlink";
-    longDescription = "Browse Twitch.tv and watch streams in your videoplayer of choice";
-    homepage = "https://streamlink.github.io/streamlink-twitch-gui/";
-    downloadPage = "https://github.com/streamlink/streamlink-twitch-gui/releases";
-    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
-    license = lib.licenses.mit;
-    mainProgram = "streamlink-twitch-gui";
-    maintainers = [ ];
-    platforms = [
-      "x86_64-linux"
-      "i686-linux"
-    ];
-  };
-}
diff --git a/pkgs/applications/virtualization/docker/compose.nix b/pkgs/applications/virtualization/docker/compose.nix
index 2b0f3d80176d..f924baad13bf 100644
--- a/pkgs/applications/virtualization/docker/compose.nix
+++ b/pkgs/applications/virtualization/docker/compose.nix
@@ -7,17 +7,17 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "docker-compose";
-  version = "5.5.0";
+  version = "5.5.1";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "docker";
     repo = "compose";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-EUPf76jj4Wc287zZNiDzSljAnwl8adSkUAz8JJaT1es=";
+    hash = "sha256-f4lIO9zSONHSQoZy80NSg3pcXyDfT5GXRcB3RkXC9sw=";
   };
 
-  vendorHash = "sha256-3Jlc/0g/IjH7hhnx70PgZ76Dl8nPzv9M2Gee3TXOGCg=";
+  vendorHash = "sha256-8I+gPz7gdNKjuqLi0AnW4NjaONKxoYIhHZR064QYt6g=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
 
diff --git a/pkgs/build-support/docker/default.nix b/pkgs/build-support/docker/default.nix
index 6e61677350fe..8efa2aedc601 100644
--- a/pkgs/build-support/docker/default.nix
+++ b/pkgs/build-support/docker/default.nix
@@ -71,9 +71,7 @@ let
       # A user is required by nix
       # https://github.com/NixOS/nix/blob/9348f9291e5d9e4ba3c4347ea1b235640f54fd79/src/libutil/util.cc#L478
       export USER=nobody
-      ${lib.getExe' buildPackages.nix "nix-store"} --load-db < ${
-        closureInfo { rootPaths = contentsList; }
-      }/registration
+      nix-store --load-db < ${closureInfo { rootPaths = contentsList; }}/registration
       # Reset registration times to make the image reproducible
       ${lib.getExe buildPackages.sqlite} nix/var/nix/db/db.sqlite "UPDATE ValidPaths SET registrationTime = ''${SOURCE_DATE_EPOCH}"
 
@@ -430,6 +428,7 @@ rec {
       keepContentsDirlinks ? false,
       # Additional commands to run on the layer before it is tar'd up.
       extraCommands ? "",
+      nativeBuildInputs ? [ ],
       uid ? 0,
       gid ? 0,
     }:
@@ -441,7 +440,8 @@ rec {
           jshon
           rsync
           tarsum
-        ];
+        ]
+        ++ nativeBuildInputs;
       }
       ''
         mkdir layer
@@ -705,6 +705,7 @@ rec {
               uid
               gid
               ;
+            nativeBuildInputs = optionals includeNixDB [ nix ];
             extraCommands = extraCommandsWithDB;
             copyToRoot = rootContents;
           }
@@ -1082,6 +1083,9 @@ rec {
         ]
         ++ optionals enableFakechroot [
           proot
+        ]
+        ++ optionals includeNixDB [
+          nix
         ];
         postBuild = ''
           mv $out old_out
diff --git a/pkgs/by-name/al/alerta-server/package.nix b/pkgs/by-name/al/alerta-server/package.nix
index 0c83ccd4fbc6..b774ec203cbf 100644
--- a/pkgs/by-name/al/alerta-server/package.nix
+++ b/pkgs/by-name/al/alerta-server/package.nix
@@ -50,5 +50,8 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
     mainProgram = "alertad";
     license = lib.licenses.asl20;
     maintainers = [ ];
+    knownVulnerabilities = [
+      "CVE-2026-34400: vulnerable to SQL injection via the Postgres query parser, which built WHERE clauses by interpolating user-supplied search terms directly into SQL strings via f-strings. This issue has been patched in version 9.1.0." # 505619 in nixpkgs
+    ];
   };
 })
diff --git a/pkgs/by-name/al/allure/package.nix b/pkgs/by-name/al/allure/package.nix
index 9fdbc94dde16..4af64c724290 100644
--- a/pkgs/by-name/al/allure/package.nix
+++ b/pkgs/by-name/al/allure/package.nix
@@ -8,11 +8,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "allure";
-  version = "2.46.0";
+  version = "2.46.1";
 
   src = fetchurl {
     url = "https://github.com/allure-framework/allure2/releases/download/${finalAttrs.version}/allure-${finalAttrs.version}.tgz";
-    hash = "sha256-KRyhI4t+Z9Vho1/N758shQyBHBxh9FsccNbX87sBpog=";
+    hash = "sha256-N0KBZPMQyNE3z90sOiXQSbIzJh3asT4b1N/XYntcv40=";
   };
 
   dontConfigure = true;
diff --git a/pkgs/by-name/an/andcli/package.nix b/pkgs/by-name/an/andcli/package.nix
index 1c819c2fb3fd..f0293cc4a704 100644
--- a/pkgs/by-name/an/andcli/package.nix
+++ b/pkgs/by-name/an/andcli/package.nix
@@ -9,7 +9,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "andcli";
-  version = "2.8.1";
+  version = "2.9.0";
 
   __structuredAttrs = true;
 
@@ -19,10 +19,10 @@ buildGoModule (finalAttrs: {
     owner = "tjblackheart";
     repo = "andcli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BVF+r8N+/PvARxANlL7nPf23ABbp+O1DNPblMyXroq8=";
+    hash = "sha256-ls/QWEAxxnsersk7L3AaRo5jo1Vsao61c2mgjt91sAQ=";
   };
 
-  vendorHash = "sha256-aFOwfloqFPPMgCufwmDgfM9lDinkFvu4i+BiVUo+Iwk=";
+  vendorHash = "sha256-+qz2vIh4GTkdmhjGvYqJYZ9ZMI9f+yXObmyGHk/5Cyg=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/au/audacity/audacity-deployment-target.patch b/pkgs/by-name/au/audacity/audacity-deployment-target.patch
new file mode 100644
index 000000000000..5a95fd6f86b6
--- /dev/null
+++ b/pkgs/by-name/au/audacity/audacity-deployment-target.patch
@@ -0,0 +1,20 @@
+diff --git a/buildscripts/cmake/SetupBuildEnvironment.cmake b/buildscripts/cmake/SetupBuildEnvironment.cmake
+index d45a7728590..c4c77d48198 100644
+--- a/buildscripts/cmake/SetupBuildEnvironment.cmake
++++ b/buildscripts/cmake/SetupBuildEnvironment.cmake
+@@ -159,7 +159,13 @@
+         endif()
+     endif() #MUE_COMPILE_QT5_COMPAT
+ 
+-    set(MACOSX_DEPLOYMENT_TARGET 10.15)
+-    set(CMAKE_OSX_DEPLOYMENT_TARGET 10.15)
++    if (NOT CMAKE_OSX_DEPLOYMENT_TARGET)
++        if (NOT "$ENV{MACOSX_DEPLOYMENT_TARGET}" STREQUAL "")
++            set(CMAKE_OSX_DEPLOYMENT_TARGET "$ENV{MACOSX_DEPLOYMENT_TARGET}")
++        else()
++            set(CMAKE_OSX_DEPLOYMENT_TARGET 10.15)
++        endif()
++    endif()
++    set(MACOSX_DEPLOYMENT_TARGET "${CMAKE_OSX_DEPLOYMENT_TARGET}")
+ endif(OS_IS_MAC)
+ 
diff --git a/pkgs/by-name/au/audacity/macdeployqt-extra-options.patch b/pkgs/by-name/au/audacity/macdeployqt-extra-options.patch
new file mode 100644
index 000000000000..1bc7672fc481
--- /dev/null
+++ b/pkgs/by-name/au/audacity/macdeployqt-extra-options.patch
@@ -0,0 +1,25 @@
+diff --git a/CMakeLists.txt b/CMakeLists.txt
+index 17e3e15e4de..49d869a6777 100644
+--- a/CMakeLists.txt
++++ b/CMakeLists.txt
+@@ -62,6 +62,8 @@
+ 
+ set(AU4_REVISION "" CACHE STRING "Build revision")
+ 
++set(AU4_MACDEPLOYQT_EXTRA_OPTIONS "" CACHE STRING "Semicolon-separated extra arguments for macdeployqt")
++
+ # Modules (alphabetical order please)
+ option(AU_BUILD_APPSHELL_MODULE "Build appshell module" ON)
+ option(AU_BUILD_APPSHELL_TESTS "Build appshell tests" ${MUSE_ENABLE_UNIT_TESTS})
+diff --git a/src/app/CMakeLists.txt b/src/app/CMakeLists.txt
+index a653a0b4cda..1ee5a5b31eb 100644
+--- a/src/app/CMakeLists.txt
++++ b/src/app/CMakeLists.txt
+@@ -418,6 +418,7 @@
+         DEPLOY_TOOL_OPTIONS
+             -qmldir=${PROJECT_SOURCE_DIR}/src
+             -qmldir=${PROJECT_SOURCE_DIR}/muse/framework
++            ${AU4_MACDEPLOYQT_EXTRA_OPTIONS}
+     )
+     install(SCRIPT ${deploy_script})
+ 
diff --git a/pkgs/by-name/au/audacity/muse-deps-wxwidgets-frameworks.patch b/pkgs/by-name/au/audacity/muse-deps-wxwidgets-frameworks.patch
new file mode 100644
index 000000000000..c4bd00ce8eda
--- /dev/null
+++ b/pkgs/by-name/au/audacity/muse-deps-wxwidgets-frameworks.patch
@@ -0,0 +1,13 @@
+diff --git a/muse_deps/recipes/wxwidgets/meta.cmake b/muse_deps/recipes/wxwidgets/meta.cmake
+index b30de19..3d18391 100644
+--- a/muse_deps/recipes/wxwidgets/meta.cmake
++++ b/muse_deps/recipes/wxwidgets/meta.cmake
+@@ -35,6 +35,8 @@
+     endif()
+     separate_arguments(wx_cxx_list NATIVE_COMMAND "${wx_cxx}")
+     separate_arguments(wx_libs_list NATIVE_COMMAND "${wx_libs}")
++    # Keep framework flags and names together as a single CMake link item.
++    string(REGEX REPLACE "-framework;([^;]+)" "-framework \\1" wx_libs_list "${wx_libs_list}")
+ 
+     set(incs "")
+     set(opts "")
diff --git a/pkgs/by-name/au/audacity/muse-framework-deployment-target.patch b/pkgs/by-name/au/audacity/muse-framework-deployment-target.patch
new file mode 100644
index 000000000000..27d15d5739b3
--- /dev/null
+++ b/pkgs/by-name/au/audacity/muse-framework-deployment-target.patch
@@ -0,0 +1,21 @@
+diff --git a/muse/buildscripts/cmake/SetupBuildEnvironment.cmake b/muse/buildscripts/cmake/SetupBuildEnvironment.cmake
+index 994b4ab30a..71a910bcfa 100644
+--- a/muse/buildscripts/cmake/SetupBuildEnvironment.cmake
++++ b/muse/buildscripts/cmake/SetupBuildEnvironment.cmake
+@@ -63,8 +63,14 @@
+ 
+ # Mac-specific
+ if(OS_IS_MAC)
+-    set(MACOSX_DEPLOYMENT_TARGET 10.15.4)
+-    set(CMAKE_OSX_DEPLOYMENT_TARGET 10.15.4)
++    if(NOT CMAKE_OSX_DEPLOYMENT_TARGET)
++        if(NOT "$ENV{MACOSX_DEPLOYMENT_TARGET}" STREQUAL "")
++            set(CMAKE_OSX_DEPLOYMENT_TARGET "$ENV{MACOSX_DEPLOYMENT_TARGET}")
++        else()
++            set(CMAKE_OSX_DEPLOYMENT_TARGET 10.15.4)
++        endif()
++    endif()
++    set(MACOSX_DEPLOYMENT_TARGET "${CMAKE_OSX_DEPLOYMENT_TARGET}")
+ endif(OS_IS_MAC)
+ 
+ # MSVC-specific
diff --git a/pkgs/by-name/au/audacity/package.nix b/pkgs/by-name/au/audacity/package.nix
index 9b096104c63d..272a4e1a89f9 100644
--- a/pkgs/by-name/au/audacity/package.nix
+++ b/pkgs/by-name/au/audacity/package.nix
@@ -1,214 +1,193 @@
 {
-  stdenv,
   lib,
-  fetchFromGitHub,
+  stdenv,
+  fetchurl,
+
+  # nativeBuildInputs
   cmake,
-  makeWrapper,
-  wrapGAppsHook3,
+  git,
+  linuxHeaders,
+  ninja,
   pkg-config,
   python3,
-  gettext,
-  file,
-  libvorbis,
-  libmad,
+  qt6,
+  wrapGAppsHook3,
+
+  # buildInputs
+  alsa-lib,
+  expat,
+  ffmpeg,
+  flac,
+  freetype,
+  harfbuzz,
+  lame,
   libjack2,
-  lv2,
-  lilv,
+  libogg,
+  libopus,
+  libsndfile,
+  libvorbis,
   mpg123,
   opusfile,
-  rapidjson,
-  serd,
-  sord,
-  sqlite,
-  sratom,
-  suil,
-  libsndfile,
-  soxr,
-  flac,
-  lame,
-  twolame,
-  expat,
-  libid3tag,
-  libopus,
-  libuuid,
-  ffmpeg,
-  soundtouch,
-  portaudio, # given up fighting their portaudio.patch?
-  portmidi,
-  linuxHeaders,
-  alsa-lib,
-  at-spi2-core,
-  dbus,
-  libepoxy,
-  libxdmcp,
-  libxtst,
-  libpthread-stubs,
-  libsbsms_2_3_0,
-  libselinux,
-  libsepol,
-  libxkbcommon,
-  util-linux,
+  portaudio,
+  pugixml,
+  utf8cpp,
   wavpack,
   wxwidgets_3_2,
-  gtk3,
-  libpng,
-  libjpeg,
+  zlib,
 }:
-
-# TODO
-# 1. detach sbsms
-
+let
+  wxwidgets = wxwidgets_3_2.override { withWebKit = false; };
+in
 stdenv.mkDerivation (finalAttrs: {
   pname = "audacity";
-  version = "3.7.9";
+  version = "4.0.0";
 
-  src = fetchFromGitHub {
-    owner = "audacity";
-    repo = "audacity";
-    rev = "Audacity-${finalAttrs.version}";
-    hash = "sha256-q/5LPL76GPEFGRxTZcuxmLuq15fwbw2Mak/q2RObghk=";
+  src = fetchurl {
+    url = "https://github.com/audacity/audacity/releases/download/Audacity-${finalAttrs.version}/audacity-sources-${finalAttrs.version}.tar.xz";
+    hash = "sha256-spB2+Z+l0vUi0AHbRyqJbbgfnv/v0VlIyUBXF1OFgFg=";
   };
 
   patches = [
-    # Introduced by https://github.com/Tencent/rapidjson/commit/b1c0c2843fcb2aca9ecc650fc035c57ffc13697c#diff-2f1bcf2729ff7c408adb0c2cc2cfa01602bd5646b05b3e4bc7e46b606035d249R21
-    ./rapidjson.patch
+    # https://github.com/musescore/muse_deps/pull/47
+    ./muse-deps-wxwidgets-frameworks.patch
+    # https://github.com/audacity/audacity/pull/12021
+    ./audacity-deployment-target.patch
+    # https://github.com/musescore/muse_framework/pull/278
+    ./muse-framework-deployment-target.patch
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    # https://github.com/audacity/audacity/pull/12056
+    ./macdeployqt-extra-options.patch
   ];
 
-  postPatch = ''
-    mkdir src/private
-    substituteInPlace scripts/build/macOS/fix_bundle.py \
-      --replace-fail "path.startswith('/usr/lib/')" "path.startswith('/usr/lib/') or path.startswith('${builtins.storeDir}')"
-  ''
-  + lib.optionalString stdenv.hostPlatform.isLinux ''
-    substituteInPlace libraries/lib-files/FileNames.cpp \
+  postPatch = lib.optionalString stdenv.hostPlatform.isLinux ''
+    substituteInPlace au3/libraries/au3-files/FileNames.cpp \
       --replace-fail /usr/include/linux/magic.h ${linuxHeaders}/include/linux/magic.h
   '';
 
   nativeBuildInputs = [
     cmake
-    gettext
+    git
+    ninja
     pkg-config
     python3
-    makeWrapper
-    wrapGAppsHook3
+    qt6.qttools
+    qt6.wrapQtAppsHook
+    wxwidgets
   ]
   ++ lib.optionals stdenv.hostPlatform.isLinux [
     linuxHeaders
+    wrapGAppsHook3
   ];
 
   buildInputs = [
     expat
     ffmpeg
-    file
     flac
-    gtk3
+    freetype
+    harfbuzz
     lame
-    libid3tag
     libjack2
-    libmad
+    libogg
     libopus
-    libsbsms_2_3_0
     libsndfile
     libvorbis
-    lilv
-    lv2
     mpg123
     opusfile
-    portmidi
-    rapidjson
-    serd
-    sord
-    soundtouch
-    soxr
-    sqlite
-    sratom
-    suil
-    twolame
     portaudio
+    pugixml
+    qt6.qt5compat
+    qt6.qtbase
+    qt6.qtdeclarative
+    qt6.qtnetworkauth
+    qt6.qtshadertools
+    qt6.qtsvg
+    utf8cpp
     wavpack
-    wxwidgets_3_2
+    wxwidgets
+    zlib
   ]
   ++ lib.optionals stdenv.hostPlatform.isLinux [
-    alsa-lib # for portaudio
-    at-spi2-core
-    dbus
-    libepoxy
-    libxdmcp
-    libxtst
-    libpthread-stubs
-    libxkbcommon
-    libselinux
-    libsepol
-    libuuid
-    util-linux
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isDarwin [
-    libpng
-    libjpeg
+    alsa-lib
+    qt6.qtwayland
   ];
 
   cmakeFlags = [
-    "-DAUDACITY_BUILD_LEVEL=2"
-    "-DAUDACITY_REV_LONG=nixpkgs"
-    "-DAUDACITY_REV_TIME=nixpkgs"
-    "-DDISABLE_DYNAMIC_LOADING_FFMPEG=ON"
-    "-Daudacity_conan_enabled=Off"
-    "-Daudacity_use_ffmpeg=loaded"
-    "-Daudacity_has_vst3=Off"
-    "-Daudacity_has_crashreports=Off"
-
-    # RPATH of binary /nix/store/.../bin/... contains a forbidden reference to /build/
-    "-DCMAKE_SKIP_BUILD_RPATH=ON"
-
-    # Fix duplicate store paths
-    "-DCMAKE_INSTALL_LIBDIR=lib"
+    (lib.cmakeFeature "AU4_BUILD_MODE" "release")
+    (lib.cmakeFeature "EXTDEPS_OVERRIDE_ALL" "SYSTEM")
+    (lib.cmakeBool "MUSE_COMPILE_USE_CCACHE" false)
+    (lib.cmakeBool "MUSE_ENABLE_UNIT_TESTS" finalAttrs.finalPackage.doCheck)
+    (lib.cmakeBool "MUSE_MODULE_DIAGNOSTICS_CRASHPAD_CLIENT" false)
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    (lib.cmakeFeature "CMAKE_OSX_ARCHITECTURES" stdenv.hostPlatform.darwinArch)
+    (lib.cmakeFeature "CMAKE_OSX_DEPLOYMENT_TARGET" stdenv.hostPlatform.darwinMinVersion)
+    # Nix performs stripping after deployment.
+    (lib.cmakeFeature "AU4_MACDEPLOYQT_EXTRA_OPTIONS" "-no-strip")
   ];
 
-  # [ 57%] Generating LightThemeAsCeeCode.h...
-  # ../../utils/image-compiler: error while loading shared libraries:
-  # lib-theme.so: cannot open shared object file: No such file or directory
-  preBuild = ''
-    export LD_LIBRARY_PATH=$PWD/Release/lib/audacity
+  preConfigure = ''
+    cmakeFlagsArray+=("-DEXTDEPS_CACHE=$PWD/offline-deps")
   '';
 
-  doCheck = false; # Test fails
+  preInstall = lib.optionalString stdenv.hostPlatform.isDarwin ''
+    export NIX_QMLIMPORTSCANNER=${lib.getBin qt6.qtdeclarative}/libexec/qmlimportscanner
+    export QML2_IMPORT_PATH=
+    for input in ${lib.escapeShellArgs finalAttrs.buildInputs}; do
+      addToSearchPath QML2_IMPORT_PATH "$input/${qt6.qtbase.qtQmlPrefix}"
+    done
+  '';
+
+  postInstall = lib.optionalString stdenv.hostPlatform.isDarwin ''
+    mkdir -p "$out/Applications"
+    mv "$out/audacity.app" "$out/Applications/"
+  '';
+
+  qtWrapperArgs = [
+    "--prefix"
+    "${lib.optionalString stdenv.hostPlatform.isDarwin "DY"}LD_LIBRARY_PATH"
+    ":"
+    (lib.makeLibraryPath [
+      ffmpeg
+      libjack2
+    ])
+  ];
+
+  preFixup = lib.optionalString stdenv.hostPlatform.isLinux ''
+    qtWrapperArgs+=("''${gappsWrapperArgs[@]}")
+  '';
+
+  postFixup = lib.optionalString stdenv.hostPlatform.isDarwin ''
+    # Use bundled Qt plugins, not a second Qt installation from the store.
+    wrapProgram "$out/Applications/audacity.app/Contents/MacOS/audacity" \
+      ${lib.escapeShellArgs finalAttrs.qtWrapperArgs} \
+      --unset QT_PLUGIN_PATH \
+      --unset NIXPKGS_QT6_QML_IMPORT_PATH \
+      --unset QML2_IMPORT_PATH \
+      --unset QML_IMPORT_PATH
+    mkdir -p "$out/bin"
+    makeWrapper "$out/Applications/audacity.app/Contents/MacOS/audacity" "$out/bin/audacity"
+  '';
 
   dontWrapGApps = true;
+  # Automatic scanning would wrap bundled framework libraries as executables.
+  dontWrapQtApps = stdenv.hostPlatform.isDarwin;
 
-  # Replace audacity's wrapper, to:
-  # - Put it in the right place; it shouldn't be in "$out/audacity"
-  # - Add the ffmpeg dynamic dependency
-  # - Use Xwayland by default on Wayland. See https://github.com/audacity/audacity/pull/5977
-  postFixup =
-    lib.optionalString stdenv.hostPlatform.isLinux ''
-      wrapProgram "$out/bin/audacity" \
-        "''${gappsWrapperArgs[@]}" \
-        --prefix LD_LIBRARY_PATH : "$out/lib/audacity":${lib.makeLibraryPath [ ffmpeg ]} \
-        --suffix AUDACITY_MODULES_PATH : "$out/lib/audacity/modules" \
-        --suffix AUDACITY_PATH : "$out/share/audacity" \
-        --set-default GDK_BACKEND x11
-    ''
-    + lib.optionalString stdenv.hostPlatform.isDarwin ''
-      mkdir -p $out/{Applications,bin}
-      mv $out/Audacity.app $out/Applications/
-      makeWrapper $out/Applications/Audacity.app/Contents/MacOS/Audacity $out/bin/audacity
-    '';
+  strictDeps = true;
+  __structuredAttrs = true;
 
   meta = {
     description = "Sound editor with graphical UI";
     mainProgram = "audacity";
     homepage = "https://www.audacityteam.org";
-    changelog = "https://github.com/audacity/audacity/releases";
-    license = with lib.licenses; [
-      gpl2Plus
-      # Must be GPL3 when building with "technologies that require it,
-      # such as the VST3 audio plugin interface".
-      # https://github.com/audacity/audacity/discussions/2142.
-      gpl3
-      # Documentation.
-      cc-by-30
+    changelog = "https://github.com/audacity/audacity/releases/tag/Audacity-${finalAttrs.version}";
+    license = lib.licenses.AND [
+      lib.licenses.gpl2Plus
+      lib.licenses.gpl3Only
+      lib.licenses.cc-by-30
     ];
     maintainers = with lib.maintainers; [
+      johnrichardrinehart
       veprbl
       wegank
     ];
diff --git a/pkgs/by-name/au/audacity_3/package.nix b/pkgs/by-name/au/audacity_3/package.nix
new file mode 100644
index 000000000000..753bb70f7ec6
--- /dev/null
+++ b/pkgs/by-name/au/audacity_3/package.nix
@@ -0,0 +1,221 @@
+{
+  stdenv,
+  lib,
+  fetchFromGitHub,
+  cmake,
+  makeWrapper,
+  wrapGAppsHook3,
+  pkg-config,
+  python3,
+  gettext,
+  file,
+  libvorbis,
+  libmad,
+  libjack2,
+  lv2,
+  lilv,
+  mpg123,
+  opusfile,
+  rapidjson,
+  serd,
+  sord,
+  sqlite,
+  sratom,
+  suil,
+  libsndfile,
+  soxr,
+  flac,
+  lame,
+  twolame,
+  expat,
+  libid3tag,
+  libopus,
+  libuuid,
+  ffmpeg,
+  soundtouch,
+  portaudio, # given up fighting their portaudio.patch?
+  portmidi,
+  linuxHeaders,
+  alsa-lib,
+  at-spi2-core,
+  dbus,
+  libepoxy,
+  libxdmcp,
+  libxtst,
+  libpthread-stubs,
+  libsbsms_2_3_0,
+  libselinux,
+  libsepol,
+  libxkbcommon,
+  util-linux,
+  wavpack,
+  wxwidgets_3_2,
+  gtk3,
+  libpng,
+  libjpeg,
+}:
+
+# TODO
+# 1. detach sbsms
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "audacity";
+  version = "3.7.9";
+
+  src = fetchFromGitHub {
+    owner = "audacity";
+    repo = "audacity";
+    rev = "Audacity-${finalAttrs.version}";
+    hash = "sha256-q/5LPL76GPEFGRxTZcuxmLuq15fwbw2Mak/q2RObghk=";
+  };
+
+  patches = [
+    # Introduced by https://github.com/Tencent/rapidjson/commit/b1c0c2843fcb2aca9ecc650fc035c57ffc13697c#diff-2f1bcf2729ff7c408adb0c2cc2cfa01602bd5646b05b3e4bc7e46b606035d249R21
+    ./rapidjson.patch
+  ];
+
+  postPatch = ''
+    mkdir src/private
+    substituteInPlace scripts/build/macOS/fix_bundle.py \
+      --replace-fail "path.startswith('/usr/lib/')" "path.startswith('/usr/lib/') or path.startswith('${builtins.storeDir}')"
+  ''
+  + lib.optionalString stdenv.hostPlatform.isLinux ''
+    substituteInPlace libraries/lib-files/FileNames.cpp \
+      --replace-fail /usr/include/linux/magic.h ${linuxHeaders}/include/linux/magic.h
+  '';
+
+  nativeBuildInputs = [
+    cmake
+    gettext
+    pkg-config
+    python3
+    makeWrapper
+    wrapGAppsHook3
+    wxwidgets_3_2
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
+    linuxHeaders
+  ];
+
+  buildInputs = [
+    expat
+    ffmpeg
+    file
+    flac
+    gtk3
+    lame
+    libid3tag
+    libjack2
+    libmad
+    libopus
+    libsbsms_2_3_0
+    libsndfile
+    libvorbis
+    lilv
+    lv2
+    mpg123
+    opusfile
+    portmidi
+    rapidjson
+    serd
+    sord
+    soundtouch
+    soxr
+    sqlite
+    sratom
+    suil
+    twolame
+    portaudio
+    wavpack
+    wxwidgets_3_2
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
+    alsa-lib # for portaudio
+    at-spi2-core
+    dbus
+    libepoxy
+    libxdmcp
+    libxtst
+    libpthread-stubs
+    libxkbcommon
+    libselinux
+    libsepol
+    libuuid
+    util-linux
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    libpng
+    libjpeg
+  ];
+
+  cmakeFlags = [
+    "-DAUDACITY_BUILD_LEVEL=2"
+    "-DAUDACITY_REV_LONG=nixpkgs"
+    "-DAUDACITY_REV_TIME=nixpkgs"
+    "-DDISABLE_DYNAMIC_LOADING_FFMPEG=ON"
+    "-Daudacity_conan_enabled=Off"
+    "-Daudacity_use_ffmpeg=loaded"
+    "-Daudacity_has_vst3=Off"
+    "-Daudacity_has_crashreports=Off"
+
+    # RPATH of binary /nix/store/.../bin/... contains a forbidden reference to /build/
+    "-DCMAKE_SKIP_BUILD_RPATH=ON"
+
+    # Fix duplicate store paths
+    "-DCMAKE_INSTALL_LIBDIR=lib"
+  ];
+
+  # [ 57%] Generating LightThemeAsCeeCode.h...
+  # ../../utils/image-compiler: error while loading shared libraries:
+  # lib-theme.so: cannot open shared object file: No such file or directory
+  preBuild = ''
+    export LD_LIBRARY_PATH=$PWD/Release/lib/audacity
+  '';
+
+  doCheck = false; # Test fails
+
+  dontWrapGApps = true;
+
+  strictDeps = true;
+  __structuredAttrs = true;
+
+  # Replace audacity's wrapper, to:
+  # - Put it in the right place; it shouldn't be in "$out/audacity"
+  # - Add the ffmpeg dynamic dependency
+  # - Use Xwayland by default on Wayland. See https://github.com/audacity/audacity/pull/5977
+  postFixup =
+    lib.optionalString stdenv.hostPlatform.isLinux ''
+      wrapProgram "$out/bin/audacity" \
+        "''${gappsWrapperArgs[@]}" \
+        --prefix LD_LIBRARY_PATH : "$out/lib/audacity":${lib.makeLibraryPath [ ffmpeg ]} \
+        --suffix AUDACITY_MODULES_PATH : "$out/lib/audacity/modules" \
+        --suffix AUDACITY_PATH : "$out/share/audacity" \
+        --set-default GDK_BACKEND x11
+    ''
+    + lib.optionalString stdenv.hostPlatform.isDarwin ''
+      mkdir -p $out/{Applications,bin}
+      mv $out/Audacity.app $out/Applications/
+      makeWrapper $out/Applications/Audacity.app/Contents/MacOS/Audacity $out/bin/audacity
+    '';
+
+  meta = {
+    description = "Sound editor with graphical UI";
+    mainProgram = "audacity";
+    homepage = "https://www.audacityteam.org";
+    changelog = "https://github.com/audacity/audacity/releases";
+    license = with lib.licenses; [
+      gpl2Plus
+      # Must be GPL3 when building with "technologies that require it,
+      # such as the VST3 audio plugin interface".
+      # https://github.com/audacity/audacity/discussions/2142.
+      gpl3
+      # Documentation.
+      cc-by-30
+    ];
+    maintainers = with lib.maintainers; [
+      veprbl
+      wegank
+    ];
+    platforms = lib.platforms.unix;
+  };
+})
diff --git a/pkgs/by-name/au/audacity/rapidjson.patch b/pkgs/by-name/au/audacity_3/rapidjson.patch
similarity index 100%
rename from pkgs/by-name/au/audacity/rapidjson.patch
rename to pkgs/by-name/au/audacity_3/rapidjson.patch
diff --git a/pkgs/by-name/bo/bookorbit/package.nix b/pkgs/by-name/bo/bookorbit/package.nix
index e58c655518b1..51be3ed823b4 100644
--- a/pkgs/by-name/bo/bookorbit/package.nix
+++ b/pkgs/by-name/bo/bookorbit/package.nix
@@ -16,7 +16,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "bookorbit";
-  version = "2.8.1";
+  version = "2.9.0";
   __structuredAttrs = true;
   strictDeps = true;
 
@@ -24,7 +24,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "bookorbit";
     repo = "bookorbit";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Un30txjsp+sdEPX9DTQ4f0ht7klDhbDptizUzQMP5AA=";
+    hash = "sha256-Dj/H7HWzxscl+uSMGDRgAwLeHDzcZEOM0RsiWrPJjUs=";
   };
 
   pnpmWorkspaces = [
@@ -41,7 +41,7 @@ stdenv.mkDerivation (finalAttrs: {
       ;
     inherit pnpm;
     fetcherVersion = 4;
-    hash = "sha256-y/cdgAjv8ZWlF4IikKb0pPqrlakMfTo9nY1Bb9AnxlM=";
+    hash = "sha256-NVI9R6n9HIE2VufTcqe4cjZbTK30R/i6dZy39TGH8qs=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/bu/bulwark/package.nix b/pkgs/by-name/bu/bulwark/package.nix
index feefcad00e50..9ab8dfebdd9f 100644
--- a/pkgs/by-name/bu/bulwark/package.nix
+++ b/pkgs/by-name/bu/bulwark/package.nix
@@ -4,6 +4,7 @@
   fetchFromGitHub,
   google-fonts,
   nodejs,
+  stdenv,
   nix-update-script,
   nixosTests,
 }:
@@ -67,6 +68,12 @@ buildNpmPackage (finalAttrs: {
     runHook postInstall
   '';
 
+  postInstall = ''
+    # sharp picks its native binary by libc (detect-libc), so the copies built
+    # for the other libc can never be loaded.
+    rm -rf $out/node_modules/@img/*-${if stdenv.hostPlatform.isMusl then "linux" else "linuxmusl"}-*
+  '';
+
   __structuredAttrs = true;
 
   passthru = {
diff --git a/pkgs/by-name/bu/buzz-cli/package.nix b/pkgs/by-name/bu/buzz-cli/package.nix
index a320b4990a03..6ed02fa5d5af 100644
--- a/pkgs/by-name/bu/buzz-cli/package.nix
+++ b/pkgs/by-name/bu/buzz-cli/package.nix
@@ -8,7 +8,7 @@
 
 rustPlatform.buildRustPackage {
   pname = "buzz-cli";
-  version = "0.1.0-unstable-2026-08-27";
+  version = "0.1.0-unstable-2026-09-02";
   __structuredAttrs = true;
   __darwinAllowLocalNetworking = true;
   strictDeps = true;
@@ -16,11 +16,11 @@ rustPlatform.buildRustPackage {
   src = fetchFromGitHub {
     owner = "block";
     repo = "buzz";
-    rev = "0808ab485c39c3c12ef02af2188c65a5145eb99d";
-    hash = "sha256-+vYRX6yZmyWxtpcaQj62ujmcG2uwo3fdaX5Oo6Q1jEE=";
+    rev = "47d068e2109d077414cbf2f4f1c927f6d051037a";
+    hash = "sha256-sLIyStOy330KzzVF9QnIn27loT5QXCRz0U4NN9bxU40=";
   };
 
-  cargoHash = "sha256-y067FJWvsJAe6mvtnLPSW1YK0/gcBrKuZX45OCO8/2U=";
+  cargoHash = "sha256-q8FUmTHnPfy/Ub+TNs3UK3exOoX1GdZGwHkH5pDteKE=";
   cargoBuildFlags = [ "--package=buzz-cli" ];
   cargoTestFlags = [ "--package=buzz-cli" ];
 
diff --git a/pkgs/by-name/bz/bzip3/package.nix b/pkgs/by-name/bz/bzip3/package.nix
index e70cb63a5a95..2f7bdb1b9ba2 100644
--- a/pkgs/by-name/bz/bzip3/package.nix
+++ b/pkgs/by-name/bz/bzip3/package.nix
@@ -9,7 +9,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bzip3";
-  version = "1.5.3";
+  version = "1.5.4";
 
   outputs = [
     "bin"
@@ -21,7 +21,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "iczelia";
     repo = "bzip3";
     tag = finalAttrs.version;
-    hash = "sha256-SOouMUctxsAJdkt84rJBaCbK23GKmXRH9nVgGdDodsk=";
+    hash = "sha256-uLL87HbohLNTm+Pq96iNlN+zqjG/bxCV7BJk1H7DvgY=";
   };
 
   postPatch = ''
diff --git a/pkgs/by-name/ca/cargo-typify/package.nix b/pkgs/by-name/ca/cargo-typify/package.nix
index 74b0a06aadeb..a8300f4b53c4 100644
--- a/pkgs/by-name/ca/cargo-typify/package.nix
+++ b/pkgs/by-name/ca/cargo-typify/package.nix
@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-typify";
-  version = "0.6.2";
+  version = "0.7.0";
 
   src = fetchFromGitHub {
     owner = "oxidecomputer";
     repo = "typify";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Ym3xPMn36+Y8dnImmuegjwrARPzozhwI+qhDCXmFsHg=";
+    hash = "sha256-1JnNNapIg0uholQkgnqU+KQ1q1SCF0MJmrO8XybxBzw=";
   };
 
-  cargoHash = "sha256-3hh4M5cqwLDHcHI+YGKXQOeTXGcVTec+xk+mZcVp0IU=";
+  cargoHash = "sha256-tH6Unl9mFUmpIiDoHp7ZUwaKAK8QEWGf2ldKbcyBET0=";
 
   nativeBuildInputs = [
     rustfmt
@@ -46,6 +46,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
       --set RUSTFMT "${lib.getExe rustfmt}"
   '';
 
+  passthru.updateScript = gitUpdater { rev-prefix = "v"; };
+
   meta = {
     description = "JSON Schema to Rust type converter";
     homepage = "https://github.com/oxidecomputer/typify";
diff --git a/pkgs/by-name/ch/cherrytree/package.nix b/pkgs/by-name/ch/cherrytree/package.nix
index 94acf177de62..2b18d23122b7 100644
--- a/pkgs/by-name/ch/cherrytree/package.nix
+++ b/pkgs/by-name/ch/cherrytree/package.nix
@@ -8,7 +8,6 @@
   wrapGAppsHook3,
   gtkmm3,
   gtksourceview4,
-  gtksourceviewmm,
   gspell,
   libxmlxx,
   sqlite,
@@ -40,7 +39,6 @@ stdenv.mkDerivation (finalAttrs: {
   buildInputs = [
     gtkmm3
     gtksourceview4
-    gtksourceviewmm
     gspell
     libxmlxx
     sqlite
diff --git a/pkgs/by-name/cp/cpak/package.nix b/pkgs/by-name/cp/cpak/package.nix
new file mode 100644
index 000000000000..8d68dd6c5638
--- /dev/null
+++ b/pkgs/by-name/cp/cpak/package.nix
@@ -0,0 +1,55 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  nix-update-script,
+  versionCheckHook,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "cpak";
+  version = "2.12.7";
+
+  src = fetchFromGitHub {
+    owner = "Containerpak";
+    repo = "cpak";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-bISKyH1+Yr1EBzZYIK0xpe0jmBiWtCnByz4Ng01QJCI=";
+  };
+
+  vendorHash = "sha256-cgqb2AY06Ru+JJIK7vyaLSPyjJqiLvNytvSQCgDOASc=";
+
+  subPackages = [
+    "."
+    "cmd/cpak-storaged"
+    "cmd/cpak-sign"
+  ];
+
+  tags = [ "cpak_ui_builtin" ];
+
+  __structuredAttrs = true;
+
+  env.CGO_ENABLED = 0;
+
+  ldflags = [
+    "-s"
+    "-w"
+    "-X main.version=${finalAttrs.version}"
+    "-X main.selfUpdateMode=disabled"
+  ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Decentralized, portable, low-overhead containerized application format for Linux";
+    homepage = "https://cpak.it";
+    changelog = "https://github.com/Containerpak/cpak/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.lgpl21Only;
+    maintainers = with lib.maintainers; [ rachalaraj ];
+    mainProgram = "cpak";
+    platforms = lib.platforms.linux;
+  };
+})
diff --git a/pkgs/by-name/cr/crossover/package.nix b/pkgs/by-name/cr/crossover/package.nix
new file mode 100644
index 000000000000..59a6fce0fe34
--- /dev/null
+++ b/pkgs/by-name/cr/crossover/package.nix
@@ -0,0 +1,73 @@
+{
+  lib,
+  stdenvNoCC,
+  fetchurl,
+  unzip,
+  writeShellScript,
+  curl,
+  gnugrep,
+  gnused,
+  coreutils,
+  common-updater-scripts,
+}:
+stdenvNoCC.mkDerivation (finalAttrs: {
+  pname = "crossover";
+  version = "26.3.0";
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  src = fetchurl {
+    url = "https://media.codeweavers.com/pub/crossover/cxmac/demo/crossover-${finalAttrs.version}.zip";
+    hash = "sha256-hojghIxOX3nxzDUctS0yRH2gDGwAz9O0uy0WTURYmiY=";
+  };
+
+  sourceRoot = ".";
+
+  nativeBuildInputs = [ unzip ];
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/Applications
+    cp -R CrossOver.app $out/Applications/
+
+    runHook postInstall
+  '';
+
+  passthru.updateScript = writeShellScript "crossover-update-script" ''
+    set -euo pipefail
+    export PATH="${
+      lib.makeBinPath [
+        curl
+        gnugrep
+        gnused
+        coreutils
+        common-updater-scripts
+      ]
+    }"
+
+    new_version=$(curl -s "https://www.codeweavers.com/xml/versions/cxmac.xml" \
+      | grep -oE 'crossover-[0-9]+\.[0-9]+\.[0-9]+\.zip' \
+      | sed -E 's/crossover-(.*)\.zip/\1/' \
+      | sort -V \
+      | tail -n1)
+
+    if [[ "${finalAttrs.version}" = "$new_version" ]]; then
+      echo "crossover is already at the latest version $new_version."
+      exit 0
+    fi
+
+    update-source-version "crossover" "$new_version" \
+      --ignore-same-version
+  '';
+
+  meta = {
+    description = "Run Windows applications on macOS without a Windows license";
+    homepage = "https://www.codeweavers.com/crossover";
+    license = lib.licenses.unfree;
+    maintainers = [ lib.maintainers.delafthi ];
+    platforms = lib.platforms.darwin;
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+  };
+})
diff --git a/pkgs/by-name/da/databricks-cli/package.nix b/pkgs/by-name/da/databricks-cli/package.nix
index fc060d1c1fc0..a66160999bda 100644
--- a/pkgs/by-name/da/databricks-cli/package.nix
+++ b/pkgs/by-name/da/databricks-cli/package.nix
@@ -9,22 +9,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "databricks-cli";
-  version = "1.11.0";
+  version = "1.14.0";
 
   src = fetchFromGitHub {
     owner = "databricks";
     repo = "cli";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-ViMRqQ9lfek1ETCW30NDmIlG5dtPDmNv4F1EeDwlk6k=";
+    hash = "sha256-iR7fvhLHUVUBpVC2TlAkFcuTe0l+HJmLnmxhOYp8O7U=";
   };
 
-  # Otherwise these tests fail asserting that the version is 0.0.0-dev
-  postPatch = ''
-    substituteInPlace bundle/deploy/terraform/init_test.go \
-      --replace-fail "cli/0.0.0-dev" "cli/${finalAttrs.version}"
-  '';
-
-  vendorHash = "sha256-LjU4cWFiCrmNwRFt9rAFDQhRw1fN2lLK03/z7wTr+E4=";
+  vendorHash = "sha256-xKv7EYwyEeuxlM+fMa+FpIygWxswQSkuwGzQYWHHvy0=";
 
   subPackages = [ "." ];
 
diff --git a/pkgs/by-name/dc/dcpomatic/asdcplib.nix b/pkgs/by-name/dc/dcpomatic/asdcplib.nix
new file mode 100644
index 000000000000..e6633fc44696
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/asdcplib.nix
@@ -0,0 +1,55 @@
+{
+  lib,
+  stdenv,
+  fetchgit,
+
+  wafHook,
+  python3,
+  gitMinimal,
+  pkg-config,
+  openssl,
+  boost,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "asdcplib";
+  version = "1.0.11";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/asdcplib";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-VkXDiNYPXU4eOgOfhZB3RMoSp1ujL2jMdAYwjdyIei0=";
+  };
+
+  # for some reason the version is not set properly upstream
+  postPatch = ''
+    substituteInPlace wscript \
+      --replace-fail \
+        "VERSION = open('VERSION').read().strip()" \
+        "VERSION = '${finalAttrs.version}'"
+  '';
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+  ];
+
+  buildInputs = [
+    openssl
+    boost
+  ];
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = {
+    description = "asdcplib library for low-level DCP handling";
+    homepage = "https://git.carlh.net/cgit/asdcplib";
+    downloadPage = "https://git.carlh.net/cgit/asdcplib";
+    license = lib.licenses.bsd3;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})
diff --git a/pkgs/by-name/dc/dcpomatic/leqm-nrt-libsndfile-linking.patch b/pkgs/by-name/dc/dcpomatic/leqm-nrt-libsndfile-linking.patch
new file mode 100644
index 000000000000..924eff5fa865
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/leqm-nrt-libsndfile-linking.patch
@@ -0,0 +1,12 @@
+diff --git a/src/wscript b/src/wscript
+index cbea215..62b0a06 100644
+--- a/src/wscript
++++ b/src/wscript
+@@ -6,6 +6,7 @@ def build(bld):
+     obj.source = 'leqm_nrt.cc'
+ 
+     if bld.env.WITH_LIBSNDFILE:
++        obj.uselib = 'SNDFILE'
+         obj = bld(features='cxx cxxprogram')
+         obj.name = 'leqm_nrt_cli'
+         obj.target = 'leqm_nrt'
diff --git a/pkgs/by-name/dc/dcpomatic/leqm-nrt.nix b/pkgs/by-name/dc/dcpomatic/leqm-nrt.nix
new file mode 100644
index 000000000000..801325f05cbe
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/leqm-nrt.nix
@@ -0,0 +1,48 @@
+{
+  stdenv,
+  lib,
+  fetchgit,
+  wafHook,
+  python3,
+  gitMinimal,
+  pkg-config,
+  libsndfile,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "leqm-nrt";
+  version = "0.0.2";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/leqm-nrt";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-rynqxvh2FT03Fs5XOV5ZBLzB6lJlop793cMv0FB3s1g=";
+  };
+
+  patches = [
+    ./leqm-nrt-libsndfile-linking.patch
+  ];
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+  ];
+
+  buildInputs = [
+    libsndfile
+  ];
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = {
+    description = "a non-real-time implementation of Leq(M) measurement";
+    homepage = "https://git.carlh.net/cgit/leqm-nrt";
+    downloadPage = "https://git.carlh.net/cgit/leqm-nrt";
+    license = lib.licenses.gpl3Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})
diff --git a/pkgs/by-name/dc/dcpomatic/libcxml.nix b/pkgs/by-name/dc/dcpomatic/libcxml.nix
new file mode 100644
index 000000000000..f0c5430dfe35
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/libcxml.nix
@@ -0,0 +1,55 @@
+{
+  lib,
+  stdenv,
+  fetchgit,
+
+  wafHook,
+  python3,
+  gitMinimal,
+  pkg-config,
+  libxmlxx,
+  boost,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "libcxml";
+  version = "0.17.17";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/libcxml.git";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-fd6KYSQnFw3aHCQOT6TTcGUvTxIWrJeRT5rmk2CgbrQ=";
+  };
+
+  # for some reason the version is not set properly upstream
+  postPatch = ''
+    substituteInPlace wscript \
+      --replace-fail \
+        "this_version = subprocess.Popen(shlex.split('git tag -l --points-at HEAD'), stdout=subprocess.PIPE).communicate()[0].decode('UTF-8')" \
+        "this_version = 'v${finalAttrs.version}'"
+  '';
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+  ];
+
+  buildInputs = [
+    libxmlxx
+    boost
+  ];
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = {
+    description = "libxml++ helper library";
+    homepage = "https://git.carlh.net/cgit/libcxml";
+    downloadPage = "https://git.carlh.net/cgit/libcxml";
+    license = lib.licenses.gpl2Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})
diff --git a/pkgs/by-name/dc/dcpomatic/libdcp.nix b/pkgs/by-name/dc/dcpomatic/libdcp.nix
new file mode 100644
index 000000000000..4f05059d69a5
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/libdcp.nix
@@ -0,0 +1,84 @@
+{
+  lib,
+  stdenv,
+  fetchgit,
+
+  wafHook,
+  python3,
+  gitMinimal,
+  pkg-config,
+  openssl,
+  libxmlxx,
+  libcxml,
+  xmlsec,
+  imagemagick,
+  libsndfile,
+  openjpeg,
+  boost,
+  xercesc,
+  ffmpeg-headless,
+  fmt,
+  fast-float,
+  libtool,
+  libharu,
+  asdcplib,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "libdcp";
+  version = "1.10.61";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/libdcp";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-MV2kANCq8IqsSJIk95rqIX7iSGmnDVetXPMLn5mEOEs=";
+  };
+
+  # for some reason the version is not set properly upstream
+  postPatch = ''
+    substituteInPlace wscript \
+      --replace-fail \
+        "this_version = subprocess.Popen(shlex.split('git tag -l --points-at HEAD'), stdout=subprocess.PIPE).communicate()[0].decode('UTF-8')" \
+        "this_version = 'v${finalAttrs.version}'"
+  '';
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+  ];
+
+  buildInputs = [
+    openssl
+    libxmlxx
+    libcxml
+    xmlsec
+    imagemagick
+    libsndfile
+    openjpeg
+    asdcplib
+    xercesc
+    boost
+    ffmpeg-headless
+    fmt
+    fast-float
+    libtool
+    libharu
+  ];
+
+  propagatedBuildInputs = [
+    asdcplib
+  ];
+
+  __structuredAttrs = true;
+
+  meta = {
+    description = "DCP handling library";
+    homepage = "https://git.carlh.net/cgit/libdcp";
+    downloadPage = "https://git.carlh.net/cgit/libdcp";
+    license = lib.licenses.gpl2Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})
diff --git a/pkgs/by-name/dc/dcpomatic/libsub.nix b/pkgs/by-name/dc/dcpomatic/libsub.nix
new file mode 100644
index 000000000000..d28c4162c514
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/libsub.nix
@@ -0,0 +1,57 @@
+{
+  lib,
+  stdenv,
+  fetchgit,
+
+  wafHook,
+  python3,
+  gitMinimal,
+  pkg-config,
+  openssl,
+  boost,
+  fmt,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "libsub";
+  version = "1.6.62";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/libsub";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-NSCg+YnxUPII16K1SGozBRYorm0UVGTGozJOhLti4kc=";
+  };
+
+  # for some reason the version is not set properly upstream
+  postPatch = ''
+    substituteInPlace wscript \
+      --replace-fail \
+        "this_version = subprocess.Popen(shlex.split('git tag -l --points-at HEAD'), stdout=subprocess.PIPE).communicate()[0].decode('UTF-8')" \
+        "this_version = 'v${finalAttrs.version}'"
+  '';
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+  ];
+
+  buildInputs = [
+    openssl
+    boost
+    fmt
+  ];
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = {
+    description = "Subtitle handling library";
+    homepage = "https://git.carlh.net/cgit/libsub";
+    downloadPage = "https://git.carlh.net/cgit/libsub";
+    license = lib.licenses.gpl2Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})
diff --git a/pkgs/by-name/dc/dcpomatic/libttf.nix b/pkgs/by-name/dc/dcpomatic/libttf.nix
new file mode 100644
index 000000000000..0447c3aa57b0
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/libttf.nix
@@ -0,0 +1,47 @@
+{
+  lib,
+  stdenv,
+  fetchgit,
+
+  wafHook,
+  python3,
+  gitMinimal,
+  pkg-config,
+  boost,
+  fmt,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "libttf";
+  version = "0.0.7";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/libttf";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-pLduKqcfCw8m4hZn8KsVa8rHESEPSQrvW4NCBcwXT5g=";
+  };
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+  ];
+
+  buildInputs = [
+    boost
+    fmt
+  ];
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = {
+    description = "Limited TTF manipulation library";
+    homepage = "https://git.carlh.net/cgit/libttf";
+    downloadPage = "https://git.carlh.net/cgit/libttf";
+    license = lib.licenses.gpl2Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})
diff --git a/pkgs/by-name/dc/dcpomatic/package.nix b/pkgs/by-name/dc/dcpomatic/package.nix
new file mode 100644
index 000000000000..54c14a28031f
--- /dev/null
+++ b/pkgs/by-name/dc/dcpomatic/package.nix
@@ -0,0 +1,118 @@
+{
+  lib,
+  stdenv,
+  fetchgit,
+  callPackage,
+
+  wafHook,
+  wrapGAppsHook3,
+  python3,
+  gitMinimal,
+  pkg-config,
+  boost,
+  curl,
+  icu,
+  libsamplerate,
+  glib,
+  libzip,
+  bzip2,
+  fontconfig,
+  pangomm,
+  libxmlxx,
+  libssh,
+  xmlsec,
+  xercesc,
+  ffmpeg-headless,
+  fmt,
+  nettle,
+  libjpeg,
+  sqlite,
+  wxwidgets_3_2,
+  rtaudio,
+  libGL,
+  libGLU,
+  libsndfile,
+  libtool,
+  libharu,
+  openssl,
+  nlohmann_json,
+}:
+let
+  libcxml = callPackage ./libcxml.nix { };
+  leqm-nrt = callPackage ./leqm-nrt.nix { };
+  asdcplib = callPackage ./asdcplib.nix { };
+  libttf = callPackage ./libttf.nix { };
+  libsub = callPackage ./libsub.nix { };
+  libdcp = callPackage ./libdcp.nix { inherit libcxml asdcplib; };
+in
+stdenv.mkDerivation (finalAttrs: {
+  pname = "dcpomatic";
+  version = "2.19.1";
+
+  src = fetchgit {
+    url = "https://git.carlh.net/git/dcpomatic";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-c+An8V/A7Vk0ChGQULk9uj0zN5slLb8wSKlWl+3uL1Y=";
+  };
+
+  nativeBuildInputs = [
+    wafHook
+    python3
+    gitMinimal
+    pkg-config
+    fontconfig
+    wrapGAppsHook3
+    wxwidgets_3_2
+  ];
+
+  buildInputs = [
+    boost
+    curl
+    icu
+    libsamplerate
+    glib
+    libzip
+    bzip2
+    pangomm
+    leqm-nrt
+    libttf
+    libcxml
+    libxmlxx
+    libssh
+    libdcp
+    xmlsec
+    xercesc
+    ffmpeg-headless
+    fmt
+    libsub
+    nettle
+    libjpeg
+    sqlite
+    wxwidgets_3_2
+    rtaudio
+    libGL
+    libGLU
+    libsndfile
+    libtool
+    libharu
+    openssl
+    nlohmann_json
+  ];
+
+  postInstall = ''
+    ln -s ${openssl}/bin/openssl $out/bin/dcpomatic2_openssl
+    ln -s ${libdcp}/share/libdcp $out/share/libdcp
+  '';
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  meta = {
+    description = "Convert video, audio and subtitles into DCP";
+    homepage = "https://dcpomatic.com/";
+    downloadPage = "https://git.carlh.net/cgit/dcpomatic";
+    license = lib.licenses.gpl2Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ logn ];
+  };
+})
diff --git a/pkgs/by-name/de/decasify/package.nix b/pkgs/by-name/de/decasify/package.nix
index acbb0ded69a9..eda0f14b801c 100644
--- a/pkgs/by-name/de/decasify/package.nix
+++ b/pkgs/by-name/de/decasify/package.nix
@@ -10,22 +10,25 @@
   cargo,
   rustc,
   rustPlatform,
+
+  # nativeInstallCheckInputs
+  versionCheckHook,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "decasify";
-  version = "0.11.3";
+  version = "0.11.4";
 
   src = fetchurl {
     url = "https://github.com/alerque/decasify/releases/download/v${finalAttrs.version}/decasify-${finalAttrs.version}.tar.zst";
-    hash = "sha256-JATJ8cFjtCkK65NpTTrUkYHAo4nDrqftarqyJInRTpM=";
+    hash = "sha256-N+VnUMfMvnJfRN0GXG28Fw+Sr6lQwzXn+CVvIbo7j8w=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
     dontConfigure = true;
     nativeBuildInputs = [ zstd ];
-    hash = "sha256-hXU9Yw9rGQDkNnwy63LYPIrreOO2P/f8jVaPnVOhrWI=";
+    hash = "sha256-nkuKeVGqn/stlezRDIf6vGQSqNzVCnrkvuFXqkLdvdE=";
   };
 
   nativeBuildInputs = [
@@ -46,6 +49,9 @@ stdenv.mkDerivation (finalAttrs: {
 
   enableParallelBuilding = true;
 
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
   meta = {
     description = "Utility to change the case of prose strings following natural language style guides";
     longDescription = ''
diff --git a/pkgs/by-name/de/desync/package.nix b/pkgs/by-name/de/desync/package.nix
index 0fdfd2b85e37..d122b225d523 100644
--- a/pkgs/by-name/de/desync/package.nix
+++ b/pkgs/by-name/de/desync/package.nix
@@ -8,16 +8,18 @@
 
 buildGoModule (finalAttrs: {
   pname = "desync";
-  version = "1.1.0";
+  version = "1.1.3";
 
   src = fetchFromGitHub {
     owner = "folbricht";
     repo = "desync";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ViwNE+8fmYbAMPFd8yiWXDLbaenkgri9PBe92M0Se5U=";
+    hash = "sha256-xiiN+0veHRxVNsIpob7W/iRH+dABYIiWfw22DH1bTEs=";
   };
 
-  vendorHash = "sha256-dAFci7GXe1fPPABIG1dngEyGqC5TKa90fyQPYSbJJrk=";
+  vendorHash = "sha256-FRXwQUOD1UiGSlGkBLXT0RGG382RJdEGUJxaQiyzR9A=";
+
+  ldflags = [ "-X main.version=${finalAttrs.src.tag}" ];
 
   nativeBuildInputs = [ installShellFiles ];
 
@@ -26,25 +28,7 @@ buildGoModule (finalAttrs: {
 
   checkFlags =
     let
-      skippedTests = [
-        "TestExtract" # block cloning fails on ZFS
-        "TestExtractCommand/extract_while_regenerating_the_corrupted_seed" # block cloning fails on ZFS
-        "TestExtractCommand/extract_with_seed_directory" # block cloning fails on ZFS
-        "TestExtractCommand/extract_with_single_seed" # block cloning fails on ZFS
-        "TestExtractCommand/extract_with_single_seed,_explicit_data_directory_and_unexpected_seed_options" # block cloning fails on ZFS
-        "TestExtractCommand/extract_with_single_seed_and_explicit_data_directory" # block cloning fails on ZFS
-        "TestExtractWithNonStaticSeeds" # block cloning fails on ZFS
-        "TestLocalFSDirSetgidWhilePopulated" # cannot setgid in /tmp
-        "TestMountIndex" # FUSE does not work in sandbox
-        "TestSeed/extract_repetitive_file" # block cloning fails on ZFS
-        "TestTar" # xattr.list: operation not supported
-        "TestUnTarDirMTime" # xattr.list: operation not supported
-        "TestUnTarIntoReadOnlyDir" # xattr.list: operation not supported
-        "TestUnTarNoSamePermissionsOverReadOnlyTree" # xattr.list: operation not supported
-        "TestUnTarReadOnlyDir" # xattr.list: operation not supported
-        "TestUnTarReadOnlyDirNoSamePermissions" # xattr.list: operation not supported
-      ]
-      ++ lib.optionals stdenv.hostPlatform.isDarwin [
+      skippedTests = lib.optionals stdenv.hostPlatform.isDarwin [
         "TestS3StoreGetChunk/fail" # sendfile is not permitted in Darwin sandbox
         "TestS3StoreGetChunk/recover" # sendfile is not permitted in Darwin sandbox
       ];
diff --git a/pkgs/by-name/de/devin-desktop/package.nix b/pkgs/by-name/de/devin-desktop/package.nix
index debdffb8c53d..4e6e289966d6 100644
--- a/pkgs/by-name/de/devin-desktop/package.nix
+++ b/pkgs/by-name/de/devin-desktop/package.nix
@@ -21,8 +21,8 @@ in
   pname = "devin-desktop";
 
   executableName = "devin-desktop";
-  longName = "devin-desktop";
-  shortName = "devin-desktop";
+  longName = "Devin Desktop";
+  shortName = "Devin Desktop";
   libraryName = "devin-desktop";
   iconName = "devin-desktop";
 
diff --git a/pkgs/by-name/do/dotenvx/package.nix b/pkgs/by-name/do/dotenvx/package.nix
index 41045bbaf678..1a46ab96c100 100644
--- a/pkgs/by-name/do/dotenvx/package.nix
+++ b/pkgs/by-name/do/dotenvx/package.nix
@@ -7,16 +7,16 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "dotenvx";
-  version = "2.22.0";
+  version = "2.23.0";
 
   src = fetchFromGitHub {
     owner = "dotenvx";
     repo = "dotenvx";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-V9JkdNNRKvlSreA8OH/IA7UsPDzOKARI+52JTnv3GM8=";
+    hash = "sha256-cvIblWPNhJPah8nWrJqHAwawQ9C8EueB0leF+miOIH0=";
   };
 
-  npmDepsHash = "sha256-d/0mqanXqy9KyK0vlCpAElB3WSi9F77l3Jbw9a9zEeI=";
+  npmDepsHash = "sha256-5dhLX6yWdQlS5XHF3Evbk5xbD87HJEiMRDdHTstzfWw=";
 
   dontNpmBuild = true;
 
diff --git a/pkgs/by-name/e1/e1s/package.nix b/pkgs/by-name/e1/e1s/package.nix
index e8a3c4ac3744..6cefad52e851 100644
--- a/pkgs/by-name/e1/e1s/package.nix
+++ b/pkgs/by-name/e1/e1s/package.nix
@@ -5,16 +5,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "e1s";
-  version = "1.0.53";
+  version = "2.0.0";
 
   src = fetchFromGitHub {
     owner = "keidarcy";
     repo = "e1s";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Cy/aZVO6xM1oCeyT6x1O+otbUZ5lS90fl3iZzkf02QM=";
+    hash = "sha256-bOG6txoreiP/buYO3rvcxhL1yAxlECkbwf9FqvWLz9k=";
   };
 
-  vendorHash = "sha256-8z2RVT2W8TLXdZBAmi/2fu63pijVgzqSvF9xpGexlQ0=";
+  vendorHash = "sha256-vVUuoAsoxVKDGxLOQBjOx56IiPWBbtYBJbJNq+kPV7A=";
 
   meta = {
     description = "Easily Manage AWS ECS Resources in Terminal";
diff --git a/pkgs/by-name/ed/edhm-ui/package.nix b/pkgs/by-name/ed/edhm-ui/package.nix
index cfd0561164b6..3cdf18a1c09f 100644
--- a/pkgs/by-name/ed/edhm-ui/package.nix
+++ b/pkgs/by-name/ed/edhm-ui/package.nix
@@ -28,13 +28,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "edhm-ui";
-  version = "3.0.70";
+  version = "3.0.71";
 
   strictDeps = true;
 
   src = fetchzip {
     url = "https://github.com/BlueMystical/EDHM_UI/releases/download/v${finalAttrs.version}/edhm-ui-v3-linux-x64.zip";
-    hash = "sha256-jAvUWrjQl8dmXxd99ONYqgdnPkzDQwdSEf8ar2nLEds=";
+    hash = "sha256-wMsP2VeSbo78II/tT5nBAvOIQc3lCBqy+l0F2r3ulEM=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/eg/eggdrop/package.nix b/pkgs/by-name/eg/eggdrop/package.nix
index 95184cc39a82..c60f64f0fc70 100644
--- a/pkgs/by-name/eg/eggdrop/package.nix
+++ b/pkgs/by-name/eg/eggdrop/package.nix
@@ -8,11 +8,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "eggdrop";
-  version = "1.10.1";
+  version = "1.10.2";
 
   src = fetchurl {
     url = "https://ftp.eggheads.org/pub/eggdrop/source/${lib.versions.majorMinor finalAttrs.version}/eggdrop-${finalAttrs.version}.tar.gz";
-    hash = "sha256-pc33RE14HC/09dC+FCAvXQlx4AOHGBpJtyUFf+lTEtU=";
+    hash = "sha256-1mRrYwh54azZsFP/oS9GZn+QcUXymvHfD4J0nvMDKpQ=";
   };
 
   buildInputs = [
diff --git a/pkgs/by-name/es/espresso/package.nix b/pkgs/by-name/es/espresso/package.nix
index 1ce6e8a5c848..de0011113d81 100644
--- a/pkgs/by-name/es/espresso/package.nix
+++ b/pkgs/by-name/es/espresso/package.nix
@@ -4,23 +4,22 @@
   cmake,
   stdenv,
   nix-update-script,
+  asciidoctor,
 }:
 stdenv.mkDerivation rec {
   pname = "espresso";
-  version = "2.4";
+  version = "2.5.1";
   src = fetchFromGitHub {
     owner = "chipsalliance";
     repo = "espresso";
     rev = "v${version}";
-    hash = "sha256-z5By57VbmIt4sgRgvECnLbZklnDDWUA6fyvWVyXUzsI=";
+    hash = "sha256-dZigbd4md8ffFawpPB/N/TccBQL6sbMKN2VdGu+fhKY=";
   };
 
-  postPatch = ''
-    substituteInPlace utility/port.h \
-      --replace-fail "VOID_HACK srandom();" "VOID_HACK srandom(unsigned int __seed);"
-  '';
-
-  nativeBuildInputs = [ cmake ];
+  nativeBuildInputs = [
+    cmake
+    asciidoctor
+  ];
 
   doCheck = true;
 
@@ -42,6 +41,7 @@ stdenv.mkDerivation rec {
       heuristic Boolean minimization.
     '';
     homepage = "https://github.com/chipsalliance/espresso";
+    changelog = "https://github.com/chipsalliance/espresso/releases/tag/v${version}";
     maintainers = with lib.maintainers; [ pineapplehunter ];
     mainProgram = "espresso";
     platforms = lib.platforms.all;
diff --git a/pkgs/by-name/ex/extism-js-core/package.nix b/pkgs/by-name/ex/extism-js-core/package.nix
index c54fef1d5441..be57e7646d4d 100644
--- a/pkgs/by-name/ex/extism-js-core/package.nix
+++ b/pkgs/by-name/ex/extism-js-core/package.nix
@@ -6,23 +6,22 @@
   lld,
   nodejs,
   npmHooks,
-  runCommand,
   rustPlatform,
   stdenv,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "extism-js-core";
-  version = "1.6.0";
+  version = "1.7.0";
 
   src = fetchFromGitHub {
     owner = "extism";
     repo = "js-pdk";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-CLyH0gDtw988cTcw4B86/kejfbYWMXEVG9Y6PKAZazE=";
+    hash = "sha256-U2C82By8JXUrtaAceZ5xr5Fb9Ltipyvd/sXG+Dsi8F8=";
   };
 
-  cargoHash = "sha256-9lFX+Q4318ClVIRT4/uCesyNYwU9H2vV+fD3553M2Dc=";
+  cargoHash = "sha256-BBhHTzG0FU4AOuUz7yjp4bpELr1vEVdwT+vyyuITagE=";
 
   npmDeps = fetchNpmDeps {
     name = "${finalAttrs.pname}-${finalAttrs.version}-npm-deps";
@@ -35,7 +34,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   # https://github.com/extism/js-pdk/pull/154
   postPatch = ''
     substituteInPlace Cargo.toml \
-      --replace-fail '1.5.1' '${finalAttrs.version}'
+      --replace-fail '1.6.1' '${finalAttrs.version}'
   '';
 
   preBuild = ''
@@ -60,22 +59,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     rustPlatform.bindgenHook
   ];
 
-  # io-extras v0.18.4 uses #![feature]
-  env.RUSTC_BOOTSTRAP = 1;
-
   env.RUSTFLAGS = "-C linker=wasm-ld";
 
-  # rquickjs-sys expects the dir structure from wasi-sdk
-  # https://github.com/DelSkayn/rquickjs/blob/v0.11.0/sys/build.rs#L216-L230
-  # TODO: revisit when https://github.com/DelSkayn/rquickjs/pull/648 is released and extism updated
-  env.WASI_SDK = runCommand "wasi-sdk" { } ''
-    mkdir -p $out/bin
-    ln -s ${lib.getExe' stdenv.cc "wasm32-unknown-wasip1-clang"} $out/bin/clang
-    ln -s ${lib.getExe' stdenv.cc "wasm32-unknown-wasip1-ar"} $out/bin/ar
-    ln -s ${stdenv.cc}/nix-support $out/nix-support
-    mkdir -p $out/share
-    ln -s ${stdenv.cc.libc} $out/share/wasi-sysroot
-  '';
+  # stdenv handles setting up the appropriate env variables
+  env.RQUICKJS_SYS_NO_WASI_SDK = 1;
 
   cargoBuildFlags = [ "--package=js-pdk-core" ];
 
diff --git a/pkgs/by-name/ex/extism-js/package.nix b/pkgs/by-name/ex/extism-js/package.nix
index 748f126bc823..8662737726da 100644
--- a/pkgs/by-name/ex/extism-js/package.nix
+++ b/pkgs/by-name/ex/extism-js/package.nix
@@ -33,9 +33,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
     zstd
   ];
 
-  # fs-set-times v0.20.3 uses #![feature]
-  env.RUSTC_BOOTSTRAP = 1;
-
   env.EXTISM_ENGINE_PATH = "${pkgsCross.wasm32-wasip1.extism-js-core}/bin/js_pdk_core.wasm";
   env.ZSTD_SYS_USE_PKG_CONFIG = true;
 
diff --git a/pkgs/by-name/fl/flake-du/package.nix b/pkgs/by-name/fl/flake-du/package.nix
index 5f722207eea3..6fb96f9ca1c9 100644
--- a/pkgs/by-name/fl/flake-du/package.nix
+++ b/pkgs/by-name/fl/flake-du/package.nix
@@ -4,7 +4,7 @@
   fetchgit,
 }:
 let
-  version = "0.1.0";
+  version = "0.2.0";
 in
 rustPlatform.buildRustPackage {
   pname = "flake-du";
@@ -13,7 +13,7 @@ rustPlatform.buildRustPackage {
   src = fetchgit {
     url = "https://github.com/kmein/flake-du";
     rev = "v${version}";
-    sha256 = "sha256-+YfQRi6QE4xNUcIcEc9HWIbnin6GCVp4SYrjvBwksys=";
+    hash = "sha256-mwSZvAEs4RKzIKErnxPhK7J7yhqo1ibDRy0FXoKlsHY=";
   };
 
   cargoHash = "sha256-DYVT9jM9WcgoVSOnoUIWWR9EmNywR1f4xZOAzkbNkCk=";
diff --git a/pkgs/by-name/fs/fscrypt-experimental/package.nix b/pkgs/by-name/fs/fscrypt/package.nix
similarity index 94%
rename from pkgs/by-name/fs/fscrypt-experimental/package.nix
rename to pkgs/by-name/fs/fscrypt/package.nix
index 9566b1cf0ec6..6d75b313a87e 100644
--- a/pkgs/by-name/fs/fscrypt-experimental/package.nix
+++ b/pkgs/by-name/fs/fscrypt/package.nix
@@ -4,11 +4,8 @@
   fetchFromGitHub,
   gnum4,
   pam,
-  fscrypt-experimental,
 }:
 
-# Don't use this for anything important yet!
-
 buildGoModule rec {
   pname = "fscrypt";
   version = "0.3.7";
@@ -28,6 +25,7 @@ buildGoModule rec {
 
   vendorHash = "sha256-lR3qcRSVQjxyBuqHv5warfVVJy5zdomfE0DEJbA/RkQ=";
 
+  __structuredAttrs = true;
   doCheck = false;
 
   nativeBuildInputs = [ gnum4 ];
diff --git a/pkgs/by-name/ge/getmail6/package.nix b/pkgs/by-name/ge/getmail6/package.nix
index 0ebcddd09f8e..c193e3039618 100644
--- a/pkgs/by-name/ge/getmail6/package.nix
+++ b/pkgs/by-name/ge/getmail6/package.nix
@@ -6,14 +6,14 @@
 
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "getmail6";
-  version = "6.20.00";
+  version = "6.20.01";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "getmail6";
     repo = "getmail6";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-f0IH0wI7Ue/HjvMIhBRGaMoO9BYDJoH/3fWRDsFD9+8=";
+    hash = "sha256-U5/vOpVVuPc1ITn0SCr7bnDFUwSBqFr51dUsyiMbORM=";
   };
 
   build-system = with python3.pkgs; [
diff --git a/pkgs/by-name/go/gocron/package.nix b/pkgs/by-name/go/gocron/package.nix
index bc9ea1e8dd31..e2b005e452f7 100644
--- a/pkgs/by-name/go/gocron/package.nix
+++ b/pkgs/by-name/go/gocron/package.nix
@@ -2,12 +2,8 @@
   lib,
   fetchFromGitHub,
   nodejs,
-  fetchYarnDeps,
-  yarnConfigHook,
-  yarnBuildHook,
-  yarnInstallHook,
-  stdenv,
-  buildGoModule,
+  buildNpmPackage,
+  buildGo127Module,
   makeWrapper,
   bash,
   versionCheckHook,
@@ -15,38 +11,30 @@
   nixosTests,
 }:
 
-buildGoModule (finalAttrs: {
+buildGo127Module (finalAttrs: {
 
   pname = "gocron";
-  version = "0.9.14";
+  version = "0.11.0";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "flohoss";
     repo = "gocron";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-LKjK5V+WrzTJlWPytafy8Ypva41RW4/12aSGaJj572I=";
+    hash = "sha256-NyL//yrKqYiwwQBdJHwQcPvjKssX4o9XrymI/6Hvbhc=";
   };
 
-  gocron-web = stdenv.mkDerivation (finalAttrsWebassets: {
+  gocron-web = buildNpmPackage (finalAttrsWebassets: {
     pname = "${finalAttrs.pname}-web";
     src = "${finalAttrs.src}/web";
     inherit (finalAttrs) version;
 
-    yarnOfflineCache = fetchYarnDeps {
-      yarnLock = finalAttrsWebassets.src + "/yarn.lock";
-      hash = "sha256-f0xnF9gd3c0KPrORPVkApyWPy+DazyzHeQu32wWybiw=";
-    };
+    npmDepsHash = "sha256-LVazZ0O82sQGxqyu0Dh4G/SmM33ftLoGqpgKrHMFGks=";
 
-    nativeBuildInputs = [
-      yarnConfigHook
-      yarnBuildHook
-      yarnInstallHook
-      nodejs
-    ];
+    dontNpmInstall = true;
 
     preBuild = ''
-      yarn types
+      npm run types
     '';
 
     postBuild = ''
@@ -55,7 +43,7 @@ buildGoModule (finalAttrs: {
 
   });
 
-  vendorHash = "sha256-VbmS9Fh0pr/dUB+pZBqKbi4bu6Do/3TRr9uI3TmGsOM=";
+  vendorHash = "sha256-p45E84MWNTa0VvvGiOfOZ/ZEJ41m0Wu7g1nTEFYkU6c=";
 
   postPatch = ''
     substituteInPlace handlers/web.go \
diff --git a/pkgs/by-name/gp/gpu-screen-recorder-gtk/package.nix b/pkgs/by-name/gp/gpu-screen-recorder-gtk/package.nix
index 7e21b627e26a..6a9a762fb633 100644
--- a/pkgs/by-name/gp/gpu-screen-recorder-gtk/package.nix
+++ b/pkgs/by-name/gp/gpu-screen-recorder-gtk/package.nix
@@ -79,6 +79,7 @@ stdenv.mkDerivation (finalAttrs: {
     maintainers = with lib.maintainers; [
       babbaj
       js6pak
+      keenanweaver
     ];
     platforms = lib.platforms.linux;
   };
diff --git a/pkgs/by-name/gp/gpu-screen-recorder/package.nix b/pkgs/by-name/gp/gpu-screen-recorder/package.nix
index bbb4f51b8e67..a47e25162b27 100644
--- a/pkgs/by-name/gp/gpu-screen-recorder/package.nix
+++ b/pkgs/by-name/gp/gpu-screen-recorder/package.nix
@@ -29,12 +29,12 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gpu-screen-recorder";
-  version = "6.0.1";
+  version = "6.1.1";
 
   src = fetchgit {
     url = "https://repo.dec05eba.com/gpu-screen-recorder";
     tag = finalAttrs.version;
-    hash = "sha256-mq+I90JaVsYZgPFLHRO/Qebv5p3XQZ6VaNbvHJBfXbQ=";
+    hash = "sha256-I5q2bvCjoXkXue/rr6IhwwhdQkxMmf1MgaKEjh+IZP8=";
   };
 
   postPatch = ''
@@ -104,6 +104,7 @@ stdenv.mkDerivation (finalAttrs: {
     maintainers = with lib.maintainers; [
       babbaj
       js6pak
+      keenanweaver
     ];
     platforms = lib.platforms.linux;
   };
diff --git a/pkgs/by-name/ip/ipatool/package.nix b/pkgs/by-name/ip/ipatool/package.nix
index 2051f6796f67..a4013de57aab 100644
--- a/pkgs/by-name/ip/ipatool/package.nix
+++ b/pkgs/by-name/ip/ipatool/package.nix
@@ -6,26 +6,30 @@
   testers,
   ipatool,
   writableTmpDirAsHomeHook,
+  installShellFiles,
 }:
 
 buildGoModule (finalAttrs: {
   pname = "ipatool";
-  version = "2.3.2";
+  version = "2.5.0";
 
   src = fetchFromGitHub {
     owner = "majd";
     repo = "ipatool";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-jIdjTDs/g41j805vkC1PqLvChtzB055JYmd4GbEHNZU=";
+    hash = "sha256-yC6MSyL3b9u/mb+YJUIZTsH2dtVgE0w2K3F2LlQE9tI=";
   };
 
-  vendorHash = "sha256-HNus5wZUmiuVVdDj4i9X9sO8iyccrq4h//s0zkQNYjY=";
+  vendorHash = "sha256-/DIJ41YXPMKZgnNraBasnJ1AIgfC5OA3fLn/vFJqs/Q=";
 
   # Fixes "import lookup disabled by -mod=vendor" for onepassword-sdk-go on macOS
   proxyVendor = true;
 
   # Fixes "unable to open output file '/homeless-shelter/.cache/clang/ModuleCache/" on macOS
-  nativeBuildInputs = [ writableTmpDirAsHomeHook ];
+  nativeBuildInputs = [
+    writableTmpDirAsHomeHook
+    installShellFiles
+  ];
 
   ldflags = [
     "-s"
@@ -40,6 +44,13 @@ buildGoModule (finalAttrs: {
   # '';
   doCheck = false;
 
+  postInstall = ''
+    installShellCompletion --cmd ipatool \
+      --bash <($out/bin/ipatool completion bash) \
+      --fish <($out/bin/ipatool completion fish) \
+      --zsh <($out/bin/ipatool completion zsh)
+  '';
+
   passthru = {
     updateScript = nix-update-script { };
     tests.version = testers.testVersion {
diff --git a/pkgs/by-name/ko/kotlin-cli/package.nix b/pkgs/by-name/ko/kotlin-cli/package.nix
index 02ca48c9c907..203541a40c2a 100644
--- a/pkgs/by-name/ko/kotlin-cli/package.nix
+++ b/pkgs/by-name/ko/kotlin-cli/package.nix
@@ -10,11 +10,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "kotlin-cli";
-  version = "0.11.1";
+  version = "0.12.0";
 
   src = fetchurl {
     url = "https://packages.jetbrains.team/maven/p/amper/amper/org/jetbrains/kotlin/kotlin-cli/${finalAttrs.version}/kotlin-cli-${finalAttrs.version}-dist.tgz";
-    hash = "sha256-De0qQ09r8ZOyTiptVsO6RD9CMnIRVaZaqoNyeJQSES8=";
+    hash = "sha256-YmstbodTrXW0sCFE5ZfS9EHdlAeUvlEDNSry6ADk4T4=";
   };
   sourceRoot = ".";
   dontBuild = true;
diff --git a/pkgs/by-name/ku/kubectl-gadget/package.nix b/pkgs/by-name/ku/kubectl-gadget/package.nix
index 74182cc03d4c..b4245558c2a8 100644
--- a/pkgs/by-name/ku/kubectl-gadget/package.nix
+++ b/pkgs/by-name/ku/kubectl-gadget/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "kubectl-gadget";
-  version = "0.55.1";
+  version = "0.56.0";
 
   src = fetchFromGitHub {
     owner = "inspektor-gadget";
     repo = "inspektor-gadget";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-trpvsOefcmajxmVTPGLDKjS7To5psgIBGcQ/XxlFeHo=";
+    hash = "sha256-HyQpkaa6MfBi1JJarXRSTpYUjx/golGl1lIStHAU3YU=";
   };
 
-  vendorHash = "sha256-AJmtOmFV06WYtHD5e/3TuzxsRVypoIVIiTxgesNtCKk=";
+  vendorHash = "sha256-mXHoMsJMwNwsnpoLDc7OLiOUZhlbcslySkyJRAC9hb8=";
 
   env.CGO_ENABLED = 0;
 
diff --git a/pkgs/by-name/lu/lux-cli/package.nix b/pkgs/by-name/lu/lux-cli/package.nix
index 6cb7f6bb20e9..ea20ea19d394 100644
--- a/pkgs/by-name/lu/lux-cli/package.nix
+++ b/pkgs/by-name/lu/lux-cli/package.nix
@@ -19,18 +19,18 @@
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "lux-cli";
 
-  version = "0.42.1";
+  version = "0.43.5";
 
   src = fetchFromGitHub {
     owner = "lumen-oss";
     repo = "lux";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-wjEci3i1auW76bssZ97IwY4AMG+wyvik5ZC/IMkXcGg=";
+    hash = "sha256-Uo180nB7/7lcYeaOCcOODtWJaqf4eQeMPKHN2OIVP70=";
   };
 
   buildAndTestSubdir = "lux-cli";
 
-  cargoHash = "sha256-EquC8//qIAY3qFZ11jxvJFlSXARLSFWGnLlxj4k8t5o=";
+  cargoHash = "sha256-fQoKFzMhvwlEXLmJQGiarPp2gtAJjodjQK7DjnY7reM=";
 
   nativeInstallCheckInputs = [
     versionCheckHook
diff --git a/pkgs/by-name/ma/matrix-alertmanager/package.nix b/pkgs/by-name/ma/matrix-alertmanager/package.nix
index f27339a8038e..140306cd191a 100644
--- a/pkgs/by-name/ma/matrix-alertmanager/package.nix
+++ b/pkgs/by-name/ma/matrix-alertmanager/package.nix
@@ -3,17 +3,18 @@
   buildNpmPackage,
   fetchFromGitHub,
   jq,
+  nix-update-script,
 }:
 
 buildNpmPackage rec {
   pname = "matrix-alertmanager";
-  version = "0.9.0";
+  version = "0.10.0";
 
   src = fetchFromGitHub {
     owner = "jaywink";
     repo = "matrix-alertmanager";
     rev = "v${version}";
-    hash = "sha256-t5e9UfRtt1OzxEXuMkPLW352BbAVSLEt26fo5YppQQc=";
+    hash = "sha256-kdz5KyT0ZIbiq6MMVAQBPjz2QP1kcNWtEv10/RzH/14=";
   };
 
   postPatch = ''
@@ -21,10 +22,12 @@ buildNpmPackage rec {
     mv package.json.tmp package.json
   '';
 
-  npmDepsHash = "sha256-4UYX9ndqecr06/gZeouzrDss6568jBXY1ypcVX7DEVk=";
+  npmDepsHash = "sha256-r1OvxCk6dgVAb3NKxveTr/1PTRFYQVDhQmBHbikzALE=";
 
   dontNpmBuild = true;
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     changelog = "https://github.com/jaywink/matrix-alertmanager/blob/${src.rev}/CHANGELOG.md";
     description = "Bot to receive Alertmanager webhook events and forward them to chosen rooms";
diff --git a/pkgs/by-name/ma/matrix-commander-rs/package.nix b/pkgs/by-name/ma/matrix-commander-rs/package.nix
index 69f29c697c08..89238f84df21 100644
--- a/pkgs/by-name/ma/matrix-commander-rs/package.nix
+++ b/pkgs/by-name/ma/matrix-commander-rs/package.nix
@@ -5,20 +5,23 @@
   pkg-config,
   rustPlatform,
   perl,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "matrix-commander-rs";
-  version = "1.0.1";
+  version = "0.11.0";
 
   src = fetchFromGitHub {
     owner = "8go";
     repo = "matrix-commander-rs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-SyAKKSPGO8yjP3Pgsr2sPW5cpNyNLiYTy7CDDAXdztw=";
+    hash = "sha256-eWD1nj+xRWNkyC3lM/hIZACI2i1Awl9NTgslR8rJZSc=";
   };
 
-  cargoHash = "sha256-X1xBhJ0B4FcC66qKtYZbcX2+92hy2R4fM/GYBI8AFTY=";
+  cargoHash = "sha256-OWuKwaJfwOAtwtN0so/afWeHq2oslAT2YahnJC0QB6w=";
+
+  __structuredAttrs = true;
 
   nativeBuildInputs = [
     pkg-config
@@ -27,12 +30,22 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   buildInputs = [ openssl ];
 
+  passthru.updateScript = nix-update-script {
+    extraArgs = [
+      "--version-regex"
+      "^v(0.*)$" # https://github.com/8go/matrix-commander-rs/issues/194#issuecomment-4864773450
+    ];
+  };
+
   meta = {
     description = "CLI-based Matrix client app for sending and receiving";
     homepage = "https://github.com/8go/matrix-commander-rs";
-    changelog = "https://github.com/8go/matrix-commander-rs/releases/tag/v${finalAttrs.version}";
+    changelog = "https://github.com/8go/matrix-commander-rs/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.gpl3Only;
-    maintainers = with lib.maintainers; [ fab ];
+    maintainers = with lib.maintainers; [
+      fab
+      ilkecan
+    ];
     mainProgram = "matrix-commander-rs";
   };
 })
diff --git a/pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix b/pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix
index 5129e48db8d0..52f3f9ad0390 100644
--- a/pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix
+++ b/pkgs/by-name/ma/matrix-synapse-unwrapped/package.nix
@@ -14,19 +14,19 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "matrix-synapse";
-  version = "1.159.0";
+  version = "1.160.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "element-hq";
     repo = "synapse";
     rev = "v${version}";
-    hash = "sha256-Fdbr+uMKFTZl1ETyaDavsSCpJYwS5+eLqifMlLGtDeA=";
+    hash = "sha256-sf7YS3AKPnhQySGZD1uvHvpVdUWIV/hrzBLvmbvS3bA=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname version src;
-    hash = "sha256-9VmEej1AKvGMMgbdyvm0DFZJ9sLP2WcV29+xVtOLV4g=";
+    hash = "sha256-154xfJLCCcPbjxknbm5HanJyMGnAJCTZKH8BYvMCvpo=";
   };
 
   build-system =
@@ -165,7 +165,7 @@ python3Packages.buildPythonApplication rec {
 
   meta = {
     homepage = "https://matrix.org";
-    changelog = "https://github.com/element-hq/synapse/releases/tag/v${version}";
+    changelog = "https://github.com/element-hq/synapse/blob/v${version}/CHANGES.md";
     description = "Matrix reference homeserver";
     license = lib.licenses.agpl3Plus;
     maintainers = with lib.maintainers; [ sumnerevans ];
diff --git a/pkgs/by-name/mc/mcp-proxy/package.nix b/pkgs/by-name/mc/mcp-proxy/package.nix
index e964f39d87a9..525ab84eeaf0 100644
--- a/pkgs/by-name/mc/mcp-proxy/package.nix
+++ b/pkgs/by-name/mc/mcp-proxy/package.nix
@@ -2,16 +2,17 @@
   lib,
   python3Packages,
   fetchFromGitHub,
+  versionCheckHook,
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "mcp-proxy";
-  version = "0.10.0";
+  version = "0.12.0";
 
   src = fetchFromGitHub {
     owner = "sparfenyuk";
     repo = "mcp-proxy";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Hig+ZDFdToiYGOjb/rpqxnu8MaLmQLgSh5WYcgJGA1I=";
+    hash = "sha256-rurNHP5TprhFUrg+0E6FnNxhCqQv2xtkfhUrGUdGod0=";
   };
 
   pyproject = true;
@@ -19,10 +20,15 @@ python3Packages.buildPythonApplication (finalAttrs: {
   build-system = [ python3Packages.setuptools ];
 
   dependencies = with python3Packages; [
-    uvicorn
+    httpx-auth
     mcp
+    uvicorn
   ];
 
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+
   nativeCheckInputs = with python3Packages; [
     pytestCheckHook
     pytest-asyncio
diff --git a/pkgs/by-name/me/mediaharbor/package.nix b/pkgs/by-name/me/mediaharbor/package.nix
index 00aca70d202a..80ca5ba8053b 100644
--- a/pkgs/by-name/me/mediaharbor/package.nix
+++ b/pkgs/by-name/me/mediaharbor/package.nix
@@ -20,7 +20,6 @@
   pango,
   pkg-config,
   rustPlatform,
-  typescript_7,
   webkitgtk_4_1,
   wrapGAppsHook4,
   zlib,
@@ -59,7 +58,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
     nodejs
     npmHooks.npmConfigHook
     pkg-config
-    typescript_7
     wrapGAppsHook4
   ];
 
@@ -103,5 +101,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
     license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [ idkdontaskm3 ];
     mainProgram = "mediaharbor";
+    platforms = [
+      "x86_64-linux"
+    ];
   };
 })
diff --git a/pkgs/by-name/me/meh/gif.patch b/pkgs/by-name/me/meh/gif.patch
new file mode 100644
index 000000000000..93cf1e8e75bb
--- /dev/null
+++ b/pkgs/by-name/me/meh/gif.patch
@@ -0,0 +1,18 @@
+diff --git a/src/gif.c b/src/gif.c
+index 9d492c2..a1455a5 100644
+--- a/src/gif.c
++++ b/src/gif.c
+@@ -96,11 +96,11 @@ error:
+ 
+ void gif_close(struct image *img){
+ 	struct gif_t *g = (struct gif_t *)img;
+-#if defined(GIFLIB_MAJOR) && defined(GIFLIB_MINOR) && (GIFLIB_MAJOR == 5 && GIFLIB_MINOR >= 1)
++#if defined(GIFLIB_MAJOR) && defined(GIFLIB_MINOR) && ((GIFLIB_MAJOR == 5 && GIFLIB_MINOR >= 1) || GIFLIB_MAJOR == 6)
+ 	int ret;
+ #endif
+ 
+-#if defined(GIFLIB_MAJOR) && defined(GIFLIB_MINOR) && (GIFLIB_MAJOR == 5 && GIFLIB_MINOR >= 1)
++#if defined(GIFLIB_MAJOR) && defined(GIFLIB_MINOR) && ((GIFLIB_MAJOR == 5 && GIFLIB_MINOR >= 1) || GIFLIB_MAJOR == 6)
+ 	DGifCloseFile(g->gif,&ret);
+ 	if(ret != GIF_OK) {
+ #if defined(GIFLIB_MAJOR) && GIFLIB_MAJOR >= 5
diff --git a/pkgs/by-name/me/meh/package.nix b/pkgs/by-name/me/meh/package.nix
index ac5a7024224d..4e0f6b5d1c8d 100644
--- a/pkgs/by-name/me/meh/package.nix
+++ b/pkgs/by-name/me/meh/package.nix
@@ -35,6 +35,8 @@ stdenv.mkDerivation {
     giflib
   ];
 
+  patches = [ ./gif.patch ];
+
   meta = {
     description = "Minimal image viewer using raw XLib";
     homepage = "https://www.johnhawthorn.com/meh/";
diff --git a/pkgs/by-name/me/metadata/ffmpeg-next-8.1.patch b/pkgs/by-name/me/metadata/ffmpeg-next-8.1.patch
deleted file mode 100644
index d31eb0b14241..000000000000
--- a/pkgs/by-name/me/metadata/ffmpeg-next-8.1.patch
+++ /dev/null
@@ -1,71 +0,0 @@
-diff --git a/Cargo.lock b/Cargo.lock
---- a/Cargo.lock
-+++ b/Cargo.lock
-@@ -37,7 +37,7 @@
- source = "registry+https://github.com/rust-lang/crates.io-index"
- checksum = "4f72209734318d0b619a5e0f5129918b848c416e122a3c4ce054e03cb87b726f"
- dependencies = [
-- "bitflags 2.9.3",
-+ "bitflags 2.11.1",
-  "cexpr",
-  "clang-sys",
-  "itertools",
-@@ -57,9 +57,9 @@
- 
- [[package]]
- name = "bitflags"
--version = "2.9.3"
-+version = "2.11.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "34efbcccd345379ca2868b2b2c9d3782e9cc58ba87bc7d79d5b53d9c9ae6f25d"
-+checksum = "c4512299f36f043ab09a583e57bceb5a5aab7a73db1805848e8fef3c9e8c78b3"
- 
- [[package]]
- name = "block-buffer"
-@@ -204,20 +204,20 @@
- 
- [[package]]
- name = "ffmpeg-next"
--version = "8.0.0"
-+version = "8.1.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "d658424d233cbd993a972dd73a66ca733acd12a494c68995c9ac32ae1fe65b40"
-+checksum = "f7c4bd5ab1ac61f29c634df1175d350ded29cf74c3c6d4f7030431a5ae3c7d5d"
- dependencies = [
-- "bitflags 2.9.3",
-+ "bitflags 2.11.1",
-  "ffmpeg-sys-next",
-  "libc",
- ]
- 
- [[package]]
- name = "ffmpeg-sys-next"
--version = "8.0.1"
-+version = "8.1.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "9bca20aa4ee774fe384c2490096c122b0b23cf524a9910add0686691003d797b"
-+checksum = "a314bc0e022a33a99567ed4bd2576bd58ffd8fcff7891c29194cfecc26a62547"
- dependencies = [
-  "bindgen",
-  "cc",
-@@ -606,7 +606,7 @@
- source = "registry+https://github.com/rust-lang/crates.io-index"
- checksum = "11181fbabf243db407ef8df94a6ce0b2f9a733bd8be4ad02b4eda9602296cac8"
- dependencies = [
-- "bitflags 2.9.3",
-+ "bitflags 2.11.1",
-  "errno",
-  "libc",
-  "linux-raw-sys",
-diff --git a/Cargo.toml b/Cargo.toml
---- a/Cargo.toml
-+++ b/Cargo.toml
-@@ -33,7 +33,7 @@
- serde_derive = "1.0.198"
- 
- [dependencies.ffmpeg-next]
--version = "8.0.0"
-+version = "8.1.0"
- default-features = false
- features = ["codec", "format"]
- 
diff --git a/pkgs/by-name/me/metadata/package.nix b/pkgs/by-name/me/metadata/package.nix
index 8e3c75f30c07..fe94d7b6c789 100644
--- a/pkgs/by-name/me/metadata/package.nix
+++ b/pkgs/by-name/me/metadata/package.nix
@@ -11,21 +11,18 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "metadata";
-  version = "0.1.12";
+  version = "0.1.13";
 
   src = fetchFromGitHub {
     owner = "zmwangx";
     repo = "metadata";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-gDOYqPwrWUfUTCx+p+ZpwsP8XxUufDCGem/WzW5cQPc=";
+    hash = "sha256-E9UL10RYHibbaLIHbgMxuOAz7RLKGcZgyfvS1HDFZjE=";
   };
 
-  cargoPatches = [
-    # bump ffmpeg-next 8.0.0 -> 8.1.0 for ffmpeg 8.1 enum variants
-    ./ffmpeg-next-8.1.patch
-  ];
+  cargoHash = "sha256-oVP9DXnVU1uZrGkJuELRtExpQnYqrzhjxGpIDWDbbbA=";
 
-  cargoHash = "sha256-TgF88oaf6567Xk20TkqbtE+H+nEKTiUSyswvxvCNFVI=";
+  env.FFMPEG_DIR = ffmpeg.dev;
 
   nativeBuildInputs = [
     pkg-config
@@ -34,34 +31,29 @@ rustPlatform.buildRustPackage (finalAttrs: {
     rustPlatform.bindgenHook
   ];
 
-  postBuild = ''
-    a2x --doctype manpage --format manpage man/metadata.1.adoc
-  '';
-  postInstall = ''
-    installManPage man/metadata.1
-  '';
-
   buildInputs = [
     ffmpeg
     glib
   ];
 
-  env.FFMPEG_DIR = ffmpeg.dev;
+  postBuild = ''
+    a2x --doctype manpage --format manpage man/metadata.1.adoc
+  '';
 
-  checkFlags = [
-    # "AAC (HE-AAC v2)" is reported as "AAC (LC)" in newer ffmpeg
-    # https://github.com/zmwangx/metadata/issues/13
-    "--skip=aac_he_aac"
-  ];
+  postInstall = ''
+    installManPage man/metadata.1
+  '';
 
   nativeInstallCheckInputs = [ versionCheckHook ];
   doInstallCheck = true;
 
   meta = {
     description = "Media metadata parser and formatter designed for human consumption, powered by FFmpeg";
-    maintainers = [ ];
     license = lib.licenses.mit;
     homepage = "https://github.com/zmwangx/metadata";
     mainProgram = "metadata";
+    maintainers = with lib.maintainers; [
+      debtquity
+    ];
   };
 })
diff --git a/pkgs/by-name/mo/mo-viewer/package.nix b/pkgs/by-name/mo/mo-viewer/package.nix
index 40dfd43afeff..61a920c8ae3d 100644
--- a/pkgs/by-name/mo/mo-viewer/package.nix
+++ b/pkgs/by-name/mo/mo-viewer/package.nix
@@ -15,13 +15,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "mo-viewer";
-  version = "1.6.7";
+  version = "1.6.8";
 
   src = fetchFromGitHub {
     owner = "k1LoW";
     repo = "mo";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-8A3km3N9pGm/gBvIxManVgBV5opMZIoNR/JE93gX5yk=";
+    hash = "sha256-aam8kDxZfNXJyGeyj4ZtDRLcZ9mPVKNHnHfVFFkv/Ro=";
   };
 
   frontend = stdenvNoCC.mkDerivation (finalFrontendAttrs: {
@@ -35,7 +35,7 @@ buildGoModule (finalAttrs: {
       sourceRoot = "${finalFrontendAttrs.src.name}/internal/frontend";
       pnpm = pnpm_10;
       fetcherVersion = 4;
-      hash = "sha256-tjeDH6wiA3KjUyhpQfvrSsXqSRf1bOOA0vPfkUR8Kvc=";
+      hash = "sha256-jvTMP8XKUpanM2CQVX/cZr2sqMt6Zgh1JKJhaCeGKt4=";
     };
 
     nativeBuildInputs = [
@@ -63,7 +63,7 @@ buildGoModule (finalAttrs: {
     '';
   });
 
-  vendorHash = "sha256-gaw85ILGr3iDWZ8ibRAA7l+UROCaItDBauCVtbZNa0U=";
+  vendorHash = "sha256-9LXhQUTsk0+UCtXWMFsE4aGG+2MSOyM+U6dlWw+0G+c=";
 
   preBuild = ''
     cp -r ${finalAttrs.frontend} internal/static/dist
diff --git a/pkgs/by-name/mp/mpv-shim-default-shaders/package.nix b/pkgs/by-name/mp/mpv-shim-default-shaders/package.nix
index f036332f6394..4c0065a80353 100644
--- a/pkgs/by-name/mp/mpv-shim-default-shaders/package.nix
+++ b/pkgs/by-name/mp/mpv-shim-default-shaders/package.nix
@@ -6,13 +6,13 @@
 
 stdenv.mkDerivation rec {
   pname = "mpv-shim-default-shaders";
-  version = "2.1.0";
+  version = "3.0.0";
 
   src = fetchFromGitHub {
     owner = "iwalton3";
     repo = "default-shader-pack";
     rev = "v${version}";
-    sha256 = "sha256-BM2GvmUoWQUUMH464YIIqu5A1t1B+otbJxAGFbySuq8=";
+    sha256 = "sha256-lHFidCHBduvNBy1HGgqLDqZMJeLv3jfVWQ73Hlev7w8=";
   };
 
   installPhase = ''
diff --git a/pkgs/by-name/my/myx/package.nix b/pkgs/by-name/my/myx/package.nix
new file mode 100644
index 000000000000..1c552188e305
--- /dev/null
+++ b/pkgs/by-name/my/myx/package.nix
@@ -0,0 +1,47 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  pkg-config,
+  stdenv,
+  alsa-lib,
+  openssl,
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "myx";
+  version = "0.4.0";
+
+  src = fetchFromGitHub {
+    owner = "HaseebKhalid1507";
+    repo = "Myx";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-72Q0AkUT8ms0+zbtVEBjqnku7njUAzVk/Y/d2AyQVeQ=";
+  };
+
+  cargoHash = "sha256-aNDKxvz918mwLteGpgQR7cpXs3VK12OHrfm4Q/jT+1s=";
+
+  nativeBuildInputs = lib.optionals stdenv.hostPlatform.isLinux [
+    pkg-config
+  ];
+
+  buildInputs = lib.optionals stdenv.hostPlatform.isLinux [
+    alsa-lib
+    openssl
+  ];
+
+  __structuredAttrs = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Lean, beautiful terminal Spotify player";
+    homepage = "https://github.com/HaseebKhalid1507/Myx";
+    changelog = "https://github.com/HaseebKhalid1507/Myx/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    mainProgram = "myx";
+    platforms = lib.platforms.unix;
+    maintainers = with lib.maintainers; [ miniharinn ];
+  };
+})
diff --git a/pkgs/development/libraries/nemo-qml-plugin-dbus/default.nix b/pkgs/by-name/ne/nemo-qml-plugin-dbus/package.nix
similarity index 86%
rename from pkgs/development/libraries/nemo-qml-plugin-dbus/default.nix
rename to pkgs/by-name/ne/nemo-qml-plugin-dbus/package.nix
index e499f7705ba8..bfc7a9f8b48f 100644
--- a/pkgs/development/libraries/nemo-qml-plugin-dbus/default.nix
+++ b/pkgs/by-name/ne/nemo-qml-plugin-dbus/package.nix
@@ -2,9 +2,7 @@
   lib,
   stdenv,
   fetchFromGitLab,
-  qmake,
-  wrapQtAppsHook,
-  qtbase,
+  qt5,
 }:
 
 stdenv.mkDerivation rec {
@@ -20,8 +18,8 @@ stdenv.mkDerivation rec {
   };
 
   nativeBuildInputs = [
-    qmake
-    wrapQtAppsHook
+    qt5.qmake
+    qt5.wrapQtAppsHook
   ];
 
   postPatch = ''
@@ -30,7 +28,7 @@ stdenv.mkDerivation rec {
       --replace /usr $out \
       --replace '$$[QT_INSTALL_LIBS]' $out'/lib'
     substituteInPlace src/plugin/plugin.pro \
-      --replace '$$[QT_INSTALL_QML]' $out'/${qtbase.qtQmlPrefix}'
+      --replace '$$[QT_INSTALL_QML]' $out'/${qt5.qtbase.qtQmlPrefix}'
   '';
 
   meta = {
diff --git a/pkgs/by-name/ne/neo4j/package.nix b/pkgs/by-name/ne/neo4j/package.nix
index 29d1366ca89d..38ca05837843 100644
--- a/pkgs/by-name/ne/neo4j/package.nix
+++ b/pkgs/by-name/ne/neo4j/package.nix
@@ -56,7 +56,7 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Highly scalable, robust (fully ACID) native graph database";
     homepage = "https://neo4j.com/";
     license = lib.licenses.gpl3;
-    maintainers = [ ];
+    maintainers = [ lib.maintainers.c2fc2f ];
     platforms = lib.platforms.unix;
   };
 })
diff --git a/pkgs/by-name/ne/netatalk/package.nix b/pkgs/by-name/ne/netatalk/package.nix
index 1afd577178aa..900be2d101ca 100644
--- a/pkgs/by-name/ne/netatalk/package.nix
+++ b/pkgs/by-name/ne/netatalk/package.nix
@@ -39,11 +39,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "netatalk";
-  version = "4.5.1";
+  version = "4.5.2";
 
   src = fetchurl {
     url = "mirror://sourceforge/netatalk/netatalk/netatalk-${finalAttrs.version}.tar.xz";
-    hash = "sha256-8JHeELDECZbr99ZQLPlHz9h9/hp+YvnZYBMiVXOThSQ=";
+    hash = "sha256-LN/VQg6Okchcgt2mapLc3Vl07vB2/rFpsnnGABM/OLI=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/ni/nixtamal/package.nix b/pkgs/by-name/ni/nixtamal/package.nix
index 679262844969..fe12acece5f8 100644
--- a/pkgs/by-name/ni/nixtamal/package.nix
+++ b/pkgs/by-name/ni/nixtamal/package.nix
@@ -21,7 +21,7 @@
 
 ocamlPackages.buildDunePackage (finalAttrs: {
   pname = "nixtamal";
-  version = "1.10.0";
+  version = "1.10.1";
   release_year = 2026;
 
   minimalOCamlVersion = "5.3";
@@ -30,7 +30,7 @@ ocamlPackages.buildDunePackage (finalAttrs: {
     url = "https://darcs.toastal.in.th/nixtamal/stable/";
     mirrors = [ "https://smeder.ee/~toastal/nixtamal.darcs" ];
     rev = finalAttrs.version;
-    hash = "sha256-IiR8hihbhdGDIcKA4dwQPcieSxT6VOlB2TcuHB16PmQ=";
+    hash = "sha256-cKYsuwUq2IVr50Tnc7qzMZANkldFAVDaXFWfgx7i8Ks=";
   };
 
   nativeBuildInputs = [
@@ -56,6 +56,7 @@ ocamlPackages.buildDunePackage (finalAttrs: {
     camomile
     eio
     eio_main
+    eio_posix
     jingoo
     (jsont.override {
       withBrr = false;
diff --git a/pkgs/by-name/op/openvpn3/package.nix b/pkgs/by-name/op/openvpn3/package.nix
index 6fa76e6e2ff3..e7be7c41893e 100644
--- a/pkgs/by-name/op/openvpn3/package.nix
+++ b/pkgs/by-name/op/openvpn3/package.nix
@@ -35,14 +35,14 @@ let
     hash = "sha256-ZFvxwzWiRgi0s08W7RC5I3u7ATFIhmj7hkVCAiOeCGw=";
   };
 in
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "openvpn3";
   version = "27.1";
 
   src = fetchFromGitHub {
     owner = "OpenVPN";
     repo = "openvpn3-linux";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-Egt6lVcvlmxnABw4v0cdROQzVdkA3DgOGGCSgl+QFdM=";
     # `openvpn3-core` is a submodule.
     # TODO: make it into a separate package
@@ -63,7 +63,7 @@ stdenv.mkDerivation rec {
 
   postPatch = ''
     echo '#define OPENVPN_VERSION "3.git:unknown:unknown"
-    #define PACKAGE_GUIVERSION "v${builtins.replaceStrings [ "_" ] [ ":" ] version}"
+    #define PACKAGE_GUIVERSION "v${builtins.replaceStrings [ "_" ] [ ":" ] finalAttrs.version}"
     #define PACKAGE_NAME "openvpn3-linux"
     ' > ./src/build-version.h
 
@@ -134,7 +134,7 @@ stdenv.mkDerivation rec {
   '';
   postFixup = ''
     wrapPythonPrograms
-    wrapPythonProgramsIn "$out/libexec/openvpn3-linux" "$out ${pythonPath}"
+    wrapPythonProgramsIn "$out/libexec/openvpn3-linux" "$out ${finalAttrs.pythonPath}"
   '';
 
   env.NIX_LDFLAGS = "-lpthread";
@@ -145,10 +145,10 @@ stdenv.mkDerivation rec {
     description = "OpenVPN 3 Linux client";
     license = lib.licenses.agpl3Plus;
     homepage = "https://github.com/OpenVPN/openvpn3-linux/";
-    changelog = "https://github.com/OpenVPN/openvpn3-linux/releases/tag/v${version}";
+    changelog = "https://github.com/OpenVPN/openvpn3-linux/releases/tag/v${finalAttrs.version}";
     maintainers = with lib.maintainers; [
       progrm_jarvis
     ];
     platforms = lib.platforms.linux;
   };
-}
+})
diff --git a/pkgs/by-name/os/ostui/package.nix b/pkgs/by-name/os/ostui/package.nix
index 704a43c59cd0..d38ff81f0446 100644
--- a/pkgs/by-name/os/ostui/package.nix
+++ b/pkgs/by-name/os/ostui/package.nix
@@ -8,13 +8,13 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "ostui";
-  version = "1.3.8";
+  version = "1.3.9";
 
   src = fetchFromSourcehut {
     owner = "~ser";
     repo = "ostui";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-+G+lox1gDP+EeHFkWbUHzVrrrel7d99gYUNyYXdOJ0I=";
+    hash = "sha256-al8vMreGUS4Y6/407wXozZRb5rnKyXKBzXN+Z3d2MC4=";
   };
 
   vendorHash = "sha256-cCyOG6nqlw2DPbA1dCuki5cpDy9LmZV/3YGyB3nCreI=";
diff --git a/pkgs/by-name/po/pokego/package.nix b/pkgs/by-name/po/pokego/package.nix
index 41d4a7ab9aa4..41f961839fe7 100644
--- a/pkgs/by-name/po/pokego/package.nix
+++ b/pkgs/by-name/po/pokego/package.nix
@@ -1,25 +1,28 @@
 {
   lib,
-  buildGoModule,
+  stdenv,
+  buildPackages,
+  buildGo127Module,
   fetchFromGitHub,
   installShellFiles,
   nix-update-script,
 }:
 
-buildGoModule (finalAttrs: {
+buildGo127Module (finalAttrs: {
   pname = "pokego";
-  version = "0.5.2";
-
+  version = "0.5.6";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "rubiin";
     repo = "pokego";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-GBKQ9YV98znhTP9QsvAAyva8dNohFS8dbQ4FAG5IDig=";
+    hash = "sha256-esUIcW7lJ6WDmu2nWeVg3UdKB5sZ7lT/ffA4FSi0/Go=";
   };
 
-  vendorHash = "sha256-a/YYEMVCqyg76P2Pyfpej46vYQhnnJjicpxNMAZGOVg=";
+  vendorHash = "sha256-Ip2GuQDOolMyDvfmXcJRlY2rMp1amS8owkqcNMOR1+Y=";
+
+  doCheck = false;
 
   ldflags = [
     "-s"
@@ -28,11 +31,20 @@ buildGoModule (finalAttrs: {
 
   nativeBuildInputs = [ installShellFiles ];
 
-  postInstall = ''
-    installShellCompletion completions/pokego.bash
-    installShellCompletion completions/pokego.fish
-    installShellCompletion completions/pokego.zsh
-  '';
+  postInstall =
+    let
+      exe =
+        if stdenv.buildPlatform.canExecute stdenv.hostPlatform then
+          "$out/bin/pokego"
+        else
+          lib.getExe buildPackages.pokego;
+    in
+    ''
+      installShellCompletion --cmd pokego \
+        --bash <(${exe} completion bash) \
+        --fish <(${exe} completion fish) \
+        --zsh <(${exe} completion zsh)
+    '';
 
   passthru.updateScript = nix-update-script { };
 
diff --git a/pkgs/by-name/pr/prometheus-redis-exporter/package.nix b/pkgs/by-name/pr/prometheus-redis-exporter/package.nix
index 9cc239a737f0..c837af8b33d6 100644
--- a/pkgs/by-name/pr/prometheus-redis-exporter/package.nix
+++ b/pkgs/by-name/pr/prometheus-redis-exporter/package.nix
@@ -12,7 +12,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "redis_exporter";
-  version = "1.90.0";
+  version = "1.91.0";
 
   __structuredAttrs = true;
 
@@ -20,7 +20,7 @@ buildGoModule (finalAttrs: {
     owner = "oliver006";
     repo = "redis_exporter";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-IZgFd6hlWVsUAx2sQsB8lTp7aZEGGmJ8BequT/TsZ+w=";
+    hash = "sha256-BECFx4sHL9zEEk5wKSZ9U1IEK6l2C9M8zdNrVJwc8LY=";
   };
 
   vendorHash = "sha256-+g1HSv+AxXsNzVr6QHpm2EJnRR80rPCtBnPgwq6aq5I=";
diff --git a/pkgs/by-name/qb/qbit-manage/package.nix b/pkgs/by-name/qb/qbit-manage/package.nix
index 94186235f679..8a233bd85b98 100644
--- a/pkgs/by-name/qb/qbit-manage/package.nix
+++ b/pkgs/by-name/qb/qbit-manage/package.nix
@@ -8,13 +8,13 @@
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "qbit-manage";
-  version = "4.11.0";
+  version = "4.13.0";
 
   src = fetchFromGitHub {
     owner = "StuffAnThings";
     repo = "qbit_manage";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-3HYxrFvte38ZKcKJOW86Yp1nGvEvzmflapNkVd9hSGg=";
+    hash = "sha256-Btj6Lavz5vcCURDKy7OTdEonTD5jwBbAwSMzK06lK3o=";
   };
 
   pyproject = true;
@@ -42,7 +42,6 @@ python3Packages.buildPythonApplication (finalAttrs: {
 
   pythonRelaxDeps = [
     "bencode.py"
-    "gitpython"
     "humanize"
   ];
 
diff --git a/pkgs/by-name/ra/radicle-ci-broker/package.nix b/pkgs/by-name/ra/radicle-ci-broker/package.nix
index f9989d01d7f4..cfde3d844912 100644
--- a/pkgs/by-name/ra/radicle-ci-broker/package.nix
+++ b/pkgs/by-name/ra/radicle-ci-broker/package.nix
@@ -14,14 +14,14 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "radicle-ci-broker";
-  version = "0.31.0";
+  version = "0.32.1";
 
   src = fetchFromRadicle {
     seed = "seed.radicle.dev";
     repo = "zwTxygwuz5LDGBq255RA2CbNGrz8";
     node = "z6MkgEMYod7Hxfy9qCvDv5hYHkZ4ciWmLFgfvm3Wn1b2w2FV";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-yY2ke4JBAn0ZTaZ7HV8GCPF5Yqj1j+7GvjFXQQVM3ME=";
+    hash = "sha256-+NPlpDGrHjCB1ny81wbaM3f/b3wLFaH5ldINeTuV5hI=";
     leaveDotGit = true;
     postFetch = ''
       git -C $out rev-parse --short HEAD > $out/.git_head
@@ -29,7 +29,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     '';
   };
 
-  cargoHash = "sha256-+XB2+k18gWEO7tpsQK+ua133PcZ0mxV+txle7VutXIk=";
+  cargoHash = "sha256-o0s6za+IxeJQkwHKuMPJk+uDcMp7VRq+mMqpX3bcWVY=";
 
   postPatch = ''
     substituteInPlace build.rs \
@@ -41,7 +41,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   '';
 
   preCheck = ''
-    ln -s "$PWD/target/${stdenv.hostPlatform.rust.rustcTarget}/$cargoBuildType" target/debug
+    export SUBPLOT_DIR="$PWD/target/${stdenv.hostPlatform.rust.rustcTarget}/$cargoBuildType"
 
     rad auth --alias alice --stdin </dev/null
   '';
diff --git a/pkgs/by-name/ra/ralphex/package.nix b/pkgs/by-name/ra/ralphex/package.nix
index 133f8c47a260..49d5cf14cbca 100644
--- a/pkgs/by-name/ra/ralphex/package.nix
+++ b/pkgs/by-name/ra/ralphex/package.nix
@@ -9,7 +9,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "ralphex";
-  version = "1.6.1";
+  version = "1.7.0";
 
   __structuredAttrs = true;
 
@@ -17,7 +17,7 @@ buildGoModule (finalAttrs: {
     owner = "umputun";
     repo = "ralphex";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-M1VeZgpNv64ZbcNvhzscnhTJhuR6yrh+clAWAce7vxI=";
+    hash = "sha256-fwbT23wzJrc7ljI4R2Lmdf0q0Y0/DeBbYYt2WMN/67A=";
   };
 
   vendorHash = null;
diff --git a/pkgs/by-name/rc/rcp/package.nix b/pkgs/by-name/rc/rcp/package.nix
index 40f8072897e8..ca936f1f27e9 100644
--- a/pkgs/by-name/rc/rcp/package.nix
+++ b/pkgs/by-name/rc/rcp/package.nix
@@ -6,58 +6,29 @@
 
 pkgsStatic.rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rcp";
-  version = "0.37.0";
+  version = "0.40.0";
 
   src = fetchFromGitHub {
     owner = "wykurz";
     repo = "rcp";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-svJA9QyqwpY1xzOQ09qFlZwrGp3HZXW9T2AICVJfqOs=";
+    hash = "sha256-xAuKhgnH5j5NioXDivwpaZFKkkTzGWJglbmVw5koaqE=";
   };
 
-  cargoHash = "sha256-QJr6kM520OWxje7Q5FZWgJH1IS8j+Jv1vNf7VyCINNA=";
+  cargoHash = "sha256-hNZhL+kZgm2pX28mKdCgpGyBexI33idlEfPB8OmgGOY=";
 
-  env.RUSTFLAGS = "--cfg tokio_unstable";
-
-  checkFlags = [
-    # these tests set setuid permissions on a test file (3oXXX) which doesn't work in a sandbox
-    "--skip=copy::copy_tests::check_default_mode"
-    "--skip=test_weird_permissions"
-    "--skip=test_edge_case_special_permissions"
-    "--skip=test_default_strips_special_bits_on_directories"
-    "--skip=test_default_strips_special_bits_on_files"
-    "--skip=test_default_preserves_special_bits_on_directories"
-    "--skip=test_preserve_all_preserves_special_bits_on_directories"
-    "--skip=test_preserve_all_preserves_special_bits_on_files"
-    "--skip=test_preserve_settings_dir_gid_time_7777"
-    "--skip=test_preserve_settings_dir_7777_preserves_special_bits"
-    "--skip=test_preserve_settings_file_7777_preserves_special_bits"
-    "--skip=test_preserve_settings_none_strips_special_bits_on_directories"
-    "--skip=no_setid_clears_bits_for_unchanged_owner_rule"
-    "--skip=no_setid_clears_existing_bits_for_unrelated_mode"
-    "--skip=no_setid_dry_run_reports_but_does_not_clear_bits"
-    "--skip=no_setid_respects_filter_and_per_type_scope"
-    "--skip=no_setid_retains_sticky_and_clears_setgid_on_directory"
-    # this test expects overwrite behavior that doesn't work in a sandbox
-    "--skip=test_overwrite_behavior"
-    # these tests require network access to determine local IP address
-    "--skip=test_remote"
-    # these tests expect to find version/git info from Cargo.toml, which isn't available in the sandbox
-    "--skip=version::tests::test_current_version"
-    "--skip=test_protocol_version_has_git_info"
-    "--skip=test_rcpd_protocol_version_has_git_info"
-    # these tests shell out to `getent` to resolve real user/group names, which isn't available in the sandbox
-    "--skip=chmod::tests::getent_real_resolves_root"
-    "--skip=chmod::tests::getent_real_option_like_name_fails_closed_no_injection"
-    "--skip=rejects_unknown_group"
-    # these tests change ownership and set setuid/setgid bits (fchown / chmod / chgrp),
-    # which the unprivileged sandbox build user isn't permitted to do (EPERM)
-    "--skip=safedir::tests::set_dir_metadata_fd_applies"
-    "--skip=safedir::tests::set_file_metadata_fd_ordering_preserves_setuid"
-    "--skip=applies_per_type_modes_recursively"
-    "--skip=group_change_preserves_setgid_across_chgrp"
-    "--skip=preserves_setgid_through_mode_change"
+  # Enable upstream's Nix sandbox test filter without replacing nixpkgs'
+  # target-specific Rust flags. Keep this config identical in both phases so
+  # Cargo can reuse the release artifacts built before the checks.
+  cargoBuildFlags = [
+    "--config"
+    ''target.'cfg(all())'.rustflags=["--cfg","tokio_unstable","--cfg","rcp_nix_sandbox"]''
   ];
+  cargoTestFlags = finalAttrs.cargoBuildFlags;
+
+  # fixtures that mutate process-global admission, congestion, hook and file-descriptor
+  # state are only supported under nextest's process isolation or single-threaded libtest
+  dontUseCargoParallelTests = true;
 
   meta = {
     changelog = "https://github.com/wykurz/rcp/releases/tag/v${finalAttrs.version}";
diff --git a/pkgs/by-name/ru/rustfetch/package.nix b/pkgs/by-name/ru/rustfetch/package.nix
index a79134cb102e..797597906063 100644
--- a/pkgs/by-name/ru/rustfetch/package.nix
+++ b/pkgs/by-name/ru/rustfetch/package.nix
@@ -2,18 +2,31 @@
   lib,
   fetchFromGitHub,
   rustPlatform,
+  libxcb,
+  stdenv,
+  versionCheckHook,
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rustfetch";
-  version = "0.2.0";
+  version = "0.3.0";
 
   src = fetchFromGitHub {
     owner = "lemuray";
     repo = "rustfetch";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-iGcxDKl36kbEi+OiH4gB2+HxP37bpqAMZguIXDzq3Jw=";
+    hash = "sha256-7+25SYYpOwbJM3UofTjk8hAuDVQ33tUge+2k1oSRvvY=";
   };
-  cargoHash = "sha256-87wfFczmgCft4ke/RQKi54wvqFKGRJMtqhkwQgDCedg=";
+  cargoHash = "sha256-/D6y6h86V7qUfJqXW6XXTHAyiqwNJAfSQOLHxNfajv8=";
+
+  buildInputs = lib.optionals stdenv.hostPlatform.isLinux [ libxcb ];
+
+  checkFlags = [
+    # requires os calls which will error out to "Permission denied" in the sandbox
+    "--skip=test_no_pretty_name"
+  ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
 
   meta = {
     description = "CLI tool designed to fetch system information in the fastest and safest way possible";
diff --git a/pkgs/by-name/sh/shfmt/package.nix b/pkgs/by-name/sh/shfmt/package.nix
index e684a7940eaf..9c7ad435859c 100644
--- a/pkgs/by-name/sh/shfmt/package.nix
+++ b/pkgs/by-name/sh/shfmt/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "shfmt";
-  version = "3.14.0";
+  version = "3.14.1";
 
   src = fetchFromGitHub {
     owner = "mvdan";
     repo = "sh";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-W0/40VfqHxKsdIZQzjv3T4Vc/BVgLl9aMuwSUycvclE=";
+    hash = "sha256-taZfXF8i8Kb6RjW7tWMFfaHH8K4OE4FT+U+X0IBaj08=";
   };
 
   vendorHash = "sha256-OfdXhgPyRRifRK4CylmOqWh0qmZ80mNAhBZtqJlwPPY=";
diff --git a/pkgs/by-name/si/sirikali/package.nix b/pkgs/by-name/si/sirikali/package.nix
index a2ebb86b243a..3435d3660f58 100644
--- a/pkgs/by-name/si/sirikali/package.nix
+++ b/pkgs/by-name/si/sirikali/package.nix
@@ -8,7 +8,7 @@
   pkg-config,
   qt6,
   kdePackages,
-  fscrypt-experimental,
+  fscrypt,
   gocryptfs,
   sshfs,
   libgcrypt,
@@ -46,7 +46,7 @@ stdenv.mkDerivation (finalAttrs: {
   qtWrapperArgs = [
     "--prefix PATH : ${
       lib.makeBinPath [
-        fscrypt-experimental
+        fscrypt
         gocryptfs
         sshfs
       ]
diff --git a/pkgs/by-name/sn/snyk/package.nix b/pkgs/by-name/sn/snyk/package.nix
index 76a10f987737..ea69348dc705 100644
--- a/pkgs/by-name/sn/snyk/package.nix
+++ b/pkgs/by-name/sn/snyk/package.nix
@@ -10,13 +10,13 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "snyk";
-  version = "1.1307.0";
+  version = "1.1307.1";
 
   src = fetchFromGitHub {
     owner = "snyk";
     repo = "cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-5Y9uMGxjP26q0zNIqp7Piauy0r5X8DthnYgL+F6eZrM=";
+    hash = "sha256-VhbtP1aHIkYaPbptkJMT/cMAhqFeAwTwSZioIAUbO8k=";
 
     # TODO: Remove once https://github.com/snyk/cli/pull/6924 is released.
     postFetch = ''
@@ -26,7 +26,7 @@ buildNpmPackage (finalAttrs: {
 
   npmDepsFetcherVersion = 2;
 
-  npmDepsHash = "sha256-xyLSYNXdZHvVXKMS87DKeCde1/XXZDNL3bnsiExXqng=";
+  npmDepsHash = "sha256-mTP5Tyi41BhSaDjCallH6r+PAFd/UCqNLxUkk2DzcLE=";
 
   nodejs = nodejs_24;
 
diff --git a/pkgs/by-name/sp/spnavcfg/package.nix b/pkgs/by-name/sp/spnavcfg/package.nix
index 5df968215be0..de62b1e22831 100644
--- a/pkgs/by-name/sp/spnavcfg/package.nix
+++ b/pkgs/by-name/sp/spnavcfg/package.nix
@@ -5,6 +5,7 @@
   pkg-config,
   libspnav,
   qt6,
+  libx11,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
@@ -22,6 +23,9 @@ stdenv.mkDerivation (finalAttrs: {
   nativeBuildInputs = [
     pkg-config
     qt6.wrapQtAppsHook
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    libx11
   ];
 
   buildInputs = [
diff --git a/pkgs/by-name/st/stump/package.nix b/pkgs/by-name/st/stump/package.nix
index e3dc64d4d1a1..5d7f77351d82 100644
--- a/pkgs/by-name/st/stump/package.nix
+++ b/pkgs/by-name/st/stump/package.nix
@@ -20,13 +20,13 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "stump";
-  version = "0.1.6";
+  version = "0.1.7";
 
   src = fetchFromGitHub {
     owner = "stumpapp";
     repo = "stump";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-y870qA9r9uhFJthKiz0uIu6xFMtZ0L5xBj4iRr20/QI=";
+    hash = "sha256-ERERTzoh0RoWtVNrOejiyFu7ZmSVgUVGFaTsj36Je48=";
   };
 
   frontend = stdenv.mkDerivation (_: {
@@ -35,7 +35,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
     yarnOfflineCache = fetchYarnDeps {
       yarnLock = finalAttrs.src + "/yarn.lock";
-      hash = "sha256-j+S3FkiWZRZyX3CfwEDbspjG+oltECgIFOZZuN7FKRY=";
+      hash = "sha256-x5aZLRhNmoxcrMOQNvNDfuJCfc0ezYazVGm17v3CwqE=";
     };
 
     nativeBuildInputs = [
@@ -60,7 +60,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   __structuredAttrs = true;
 
-  cargoHash = "sha256-2WI/sjRM9GESBc3APrTwQ2F28CPkZCUfzEE+EMMWHKA=";
+  cargoHash = "sha256-4qCxyoo1WyurXLEw5Nq291Tglds0Lg1LGHfgZxsoZBQ=";
 
   cargoBuildFlags = [
     "--package"
@@ -118,5 +118,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
     license = lib.licenses.mit;
     platforms = [ "x86_64-linux" ];
     mainProgram = "stump_server";
+    maintainers = with lib.maintainers; [ jvanbruegge ];
   };
 })
diff --git a/pkgs/by-name/su/supercell-wx/package.nix b/pkgs/by-name/su/supercell-wx/package.nix
index 8c530536e06e..e54c68693016 100644
--- a/pkgs/by-name/su/supercell-wx/package.nix
+++ b/pkgs/by-name/su/supercell-wx/package.nix
@@ -92,6 +92,7 @@ stdenv.mkDerivation (finalAttrs: {
     ./patches/explicit-link-aws-crt.patch # fix missing symbols from aws-crt-cpp
     # }}}
     ./patches/boost-1.89-compat.patch
+    ./patches/memcpy-cstring.patch
   ];
 
   # This also may be submitted upstream to maplibre-native-qt, which is currently vendored
diff --git a/pkgs/by-name/su/supercell-wx/patches/memcpy-cstring.patch b/pkgs/by-name/su/supercell-wx/patches/memcpy-cstring.patch
new file mode 100644
index 000000000000..1804e36f115f
--- /dev/null
+++ b/pkgs/by-name/su/supercell-wx/patches/memcpy-cstring.patch
@@ -0,0 +1,12 @@
+diff --git a/wxdata/source/scwx/zip/zip_stream_writer.cpp b/wxdata/source/scwx/zip/zip_stream_writer.cpp
+index 3822ea20..a455f63b 100644
+--- a/wxdata/source/scwx/zip/zip_stream_writer.cpp
++++ b/wxdata/source/scwx/zip/zip_stream_writer.cpp
+@@ -2,6 +2,7 @@
+ #include <scwx/util/logger.hpp>
+ 
+ #include <cstdlib>
++#include <cstring>
+ #include <fstream>
+ 
+ #include <zip.h>
diff --git a/pkgs/by-name/ta/tabiew/package.nix b/pkgs/by-name/ta/tabiew/package.nix
index c9bf8a5fa50d..67e0bffe6efd 100644
--- a/pkgs/by-name/ta/tabiew/package.nix
+++ b/pkgs/by-name/ta/tabiew/package.nix
@@ -7,16 +7,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "tabiew";
-  version = "0.14.2";
+  version = "0.15.0";
 
   src = fetchFromGitHub {
     owner = "shshemi";
     repo = "tabiew";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kFmlXjC7L8rW5XfIIMiDcGDxoGlcICuwOZh6jkecFWY=";
+    hash = "sha256-iHdHeWx8xxqirwiGdeSbvHDXYPn1UkqoQMosaiakQz0=";
   };
 
-  cargoHash = "sha256-vEGa1LyMRZkiWCtS+DjqRteZv/4kNbyh2yMrYVv73YM=";
+  cargoHash = "sha256-MemnQS6lRmIzo9x94yorGIp2upTY/CW/3jGh73AdowQ=";
 
   nativeBuildInputs = [
     installShellFiles
diff --git a/pkgs/by-name/ta/tauno-monitor/package.nix b/pkgs/by-name/ta/tauno-monitor/package.nix
index 9a02cdd189b5..0899eec44de4 100644
--- a/pkgs/by-name/ta/tauno-monitor/package.nix
+++ b/pkgs/by-name/ta/tauno-monitor/package.nix
@@ -14,7 +14,7 @@
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "tauno-monitor";
-  version = "0.2.20";
+  version = "0.2.24";
   pyproject = false;
 
   __structuredAttrs = true;
@@ -23,7 +23,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     owner = "taunoe";
     repo = "tauno-monitor";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-rtFnWK1K4S866lgR/lGaTB+REqDExKsEFePX8cwai5E=";
+    hash = "sha256-HtoXdKKa/2nvBZVUXSrXH/7JHzdQObjW+7QTx/e8IWo=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/th/thrift-ls/package.nix b/pkgs/by-name/th/thrift-ls/package.nix
index 156d8752aeaa..57e9270b02eb 100644
--- a/pkgs/by-name/th/thrift-ls/package.nix
+++ b/pkgs/by-name/th/thrift-ls/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "thrift-ls";
-  version = "0.2.11";
+  version = "0.2.12";
 
   src = fetchFromGitHub {
     owner = "joyme123";
     repo = "thrift-ls";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-iXrfGoX24bOqV39PhHIshb7GzqDt7EW3aRwTptd50e8=";
+    hash = "sha256-Ts0zy/wBjZTm71Umk46KBkdbUm/Akf/KXdoKp8G95ks=";
   };
 
   vendorHash = "sha256-SGCJ12BxjFUQ7bnaNY0bvrrtm2qNNrwYKKfNEi1lPco=";
diff --git a/pkgs/by-name/to/tombi/package.nix b/pkgs/by-name/to/tombi/package.nix
index 456eeceee466..b5ddada95e8a 100644
--- a/pkgs/by-name/to/tombi/package.nix
+++ b/pkgs/by-name/to/tombi/package.nix
@@ -9,7 +9,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "tombi";
-  version = "1.4.1";
+  version = "1.5.2";
 
   __structuredAttrs = true;
 
@@ -17,7 +17,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "tombi-toml";
     repo = "tombi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-O9rtdhbyZn/hdUogWJz+H8bxOzj1leZnqMBpTgQ+ePM=";
+    hash = "sha256-HMAyzISP/q+eBAPPg/8FHa6eQ4xbA8sHne1dm+veUyo=";
   };
 
   # Tests relies on the presence of network
@@ -26,7 +26,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "--package"
     "tombi-cli"
   ];
-  cargoHash = "sha256-9mEPyzSaxJLeejNuHMwBYjJ+pfDcNvarykPLgBxGtLs=";
+  cargoHash = "sha256-9x7Qesl6OsiN79b1MqP5BMF/0VOymER57ijwHzs0Taw=";
 
   postPatch = ''
     substituteInPlace Cargo.toml \
diff --git a/pkgs/by-name/ty/typescript_7/package.nix b/pkgs/by-name/ty/typescript_7/package.nix
index 40e88778c44d..00bdbc982e6d 100644
--- a/pkgs/by-name/ty/typescript_7/package.nix
+++ b/pkgs/by-name/ty/typescript_7/package.nix
@@ -58,7 +58,6 @@ buildGoModule (finalAttrs: {
     mv "$out/bin/tsgo" "$lib_dir/tsc"
 
     ln -s "$lib_dir/tsc" "$out/bin/tsc"
-    ln -s "$lib_dir/tsc" "$out/bin/tsgo"
   '';
 
   nativeInstallCheckInputs = [
diff --git a/pkgs/by-name/ty/typst/typst-packages-from-universe.toml b/pkgs/by-name/ty/typst/typst-packages-from-universe.toml
index 8b282ab01a86..a4bce7473dd7 100644
--- a/pkgs/by-name/ty/typst/typst-packages-from-universe.toml
+++ b/pkgs/by-name/ty/typst/typst-packages-from-universe.toml
@@ -98,6 +98,86 @@ license = [
 ]
 homepage = "https://git.sr.ht/~slowjo/typst-abbr"
 
+[abbrev."0.1.7"]
+url = "https://packages.typst.org/preview/abbrev-0.1.7.tar.gz"
+hash = "sha256-BNg9prcMY2683lwfBPlcqHYETKp2nxleGqEO45suYtY="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.6"]
+url = "https://packages.typst.org/preview/abbrev-0.1.6.tar.gz"
+hash = "sha256-6rskqBKyhiTXteNkvudDhJNTm19taPvDtBVjbpKYgxk="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.5"]
+url = "https://packages.typst.org/preview/abbrev-0.1.5.tar.gz"
+hash = "sha256-m8m1gOBbIyBuh5OloE/6IZxgWDeM7wKt4Y6RILnjRSE="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.4"]
+url = "https://packages.typst.org/preview/abbrev-0.1.4.tar.gz"
+hash = "sha256-M6viS4UJOJn6Gv/QYmqiWrq0El4KM/TEUbxCzyjGRJI="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.3"]
+url = "https://packages.typst.org/preview/abbrev-0.1.3.tar.gz"
+hash = "sha256-OIoG/8fJgno52d17UpFK4W2kGWAkFhNP4fR791EhITs="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.2"]
+url = "https://packages.typst.org/preview/abbrev-0.1.2.tar.gz"
+hash = "sha256-DqUbpD6FkAZ/X+EyGUDmjZKGTM2jL5/kOY2JY9MkEuE="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.1"]
+url = "https://packages.typst.org/preview/abbrev-0.1.1.tar.gz"
+hash = "sha256-iIGegaPmex1BDiTqy36HOPLiq0hmVbCvXpWEMjWXB+c="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
+[abbrev."0.1.0"]
+url = "https://packages.typst.org/preview/abbrev-0.1.0.tar.gz"
+hash = "sha256-mlQtfnl5gq5Ta6EJiWmh3AzIirRh7iy5xMZv4oyZsS8="
+typstDeps = []
+description = "Create and manage abbreviations in your documents"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/girasole123/Abbrev"
+
 [abiding-ifacconf."0.2.1"]
 url = "https://packages.typst.org/preview/abiding-ifacconf-0.2.1.tar.gz"
 hash = "sha256-2/ddqX3thtyv3FNzgJMR5BD50rqlx7VfZmTdojVuBHE="
@@ -809,6 +889,16 @@ license = [
 ]
 homepage = "https://github.com/a-mhamdi/ailab-isetbz"
 
+[aimesymb."0.1.0"]
+url = "https://packages.typst.org/preview/aimesymb-0.1.0.tar.gz"
+hash = "sha256-IS4L/iyj2RmY70q3wuNElnfH6E0kq9+7AXetbjWQa5U="
+typstDeps = []
+description = "Use AMSa and AMSb designs in mixed-font math equations"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/AprilGrimoire/aimesymb"
+
 [aio-studi-and-thesis."0.2.0"]
 url = "https://packages.typst.org/preview/aio-studi-and-thesis-0.2.0.tar.gz"
 hash = "sha256-nUWgmzV7hr+8GhqCoq9shi4CVDkXx1/T9piZFoKgZEI="
@@ -2490,6 +2580,16 @@ license = [
 ]
 homepage = "https://github.com/felsenhower/typst-autograph.git"
 
+[automosaic."0.1.0"]
+url = "https://packages.typst.org/preview/automosaic-0.1.0.tar.gz"
+hash = "sha256-yaGg1d0eXZAv4e/FfKuaVzCxlvuO//4no7kX70d05fE="
+typstDeps = []
+description = "Aspect-ratio-preserving nested tree layouts for photo mosaics, with automatic arrangement search"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Uspfe/typst-mosaic"
+
 [awesome-mff-cuni."0.1.0"]
 url = "https://packages.typst.org/preview/awesome-mff-cuni-0.1.0.tar.gz"
 hash = "sha256-Iw2kwl07R8vJh3FgZeW61FGNotQQwAY4VFuFhQCVhgk="
@@ -2536,6 +2636,30 @@ license = [
 ]
 homepage = "https://github.com/rezaarezvan/axiomst"
 
+[axodendron."0.1.1"]
+url = "https://packages.typst.org/preview/axodendron-0.1.1.tar.gz"
+hash = "sha256-YvjEeUi8aBSQucDZAaouGAEZlTJMiMSbkdNx+tb8ywM="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Analyze and visualize neuronal morphologies from SWC files"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/rice8y/axodendron"
+
+[axodendron."0.1.0"]
+url = "https://packages.typst.org/preview/axodendron-0.1.0.tar.gz"
+hash = "sha256-G6C//0Nsuw35Hb7uRs9ROxRcs9KPrq1O7Qcig75rv9A="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Analyze and visualize neuronal morphologies from SWC files"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/rice8y/axodendron"
+
 [babble-bubbles."0.1.0"]
 url = "https://packages.typst.org/preview/babble-bubbles-0.1.0.tar.gz"
 hash = "sha256-orOm67ydNPmIangnUNiiHiPU6Y5ivQ4KEmCWkFdwdw0="
@@ -3333,6 +3457,16 @@ license = [
 ]
 homepage = "https://github.com/Tikitikitikidesuka/typst-upm-report"
 
+[beautiframe."0.4.5"]
+url = "https://packages.typst.org/preview/beautiframe-0.4.5.tar.gz"
+hash = "sha256-+SJVxd+97tYdo4MYMz/dOhyHKZfVry5dsurNnB15qeY="
+typstDeps = []
+description = "Beautiful theorem-like environments with 9 styles and French math preset"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-beautiframe"
+
 [beautiframe."0.4.0"]
 url = "https://packages.typst.org/preview/beautiframe-0.4.0.tar.gz"
 hash = "sha256-Ler8KNZmq+GEGewLhKPeEgADDX+ih2ZLoz1EQNCHYg8="
@@ -3825,6 +3959,18 @@ license = [
 ]
 homepage = "https://github.com/daleione/blockcell"
 
+[blockst."0.3.0"]
+url = "https://packages.typst.org/preview/blockst-0.3.0.tar.gz"
+hash = "sha256-1BLxds2Z7DtVMPrJ6YmDx+4eMEbTpUO/HnPi4GQn/EM="
+typstDeps = [
+    "manifesto_0_2_0",
+]
+description = "Render Scratch-style blocks for educational documents"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Loewe1000/blockst"
+
 [blockst."0.2.1"]
 url = "https://packages.typst.org/preview/blockst-0.2.1.tar.gz"
 hash = "sha256-7wufSSdzfR6fGlFrORDuqFyaf670Ae2j/um0W94mKu0="
@@ -4090,6 +4236,24 @@ license = [
     "Apache-2.0",
 ]
 
+[bookly."5.0.0"]
+url = "https://packages.typst.org/preview/bookly-5.0.0.tar.gz"
+hash = "sha256-WmGR5m8EVqPdj399fNFdvFm/OZYWu8rO3yvNLSpo5kA="
+typstDeps = [
+    "equate_0_3_3",
+    "hydra_0_6_3",
+    "marginalia_0_3_1",
+    "showybox_2_0_4",
+    "suboutline_0_3_0",
+    "suboutline_0_3_1",
+    "subpar_0_2_2",
+]
+description = "A clean, customizable template for writing and publishing structured books with front matter, chapters, and consistent styling"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/maucejo/bookly"
+
 [bookly."4.1.3"]
 url = "https://packages.typst.org/preview/bookly-4.1.3.tar.gz"
 hash = "sha256-fjWL69uI5/qVtbMldKuiemwKL83BXXsn2Lz0kEBMLtY="
@@ -5153,6 +5317,16 @@ license = [
 ]
 homepage = "https://github.com/TAJD/calendaring"
 
+[calepin."0.1.0"]
+url = "https://packages.typst.org/preview/calepin-0.1.0.tar.gz"
+hash = "sha256-glSfRPXxw4wx4xz03M2gmgfOKg9ixVA99rTC4YWVoSE="
+typstDeps = []
+description = "Computational notebooks and static websites with executable code chunks in R, Python, and Julia"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/vincentarelbundock/calepin"
+
 [calepin."0.0.1"]
 url = "https://packages.typst.org/preview/calepin-0.0.1.tar.gz"
 hash = "sha256-W81to8aoLmCYjPucu2XVW/XcSYVTmzypwcTqsLI/cx4="
@@ -5275,6 +5449,16 @@ license = [
 ]
 homepage = "https://github.com/knuesel/callisto"
 
+[calloutly."1.2.0"]
+url = "https://packages.typst.org/preview/calloutly-1.2.0.tar.gz"
+hash = "sha256-kZH/mMGbpeHmpzC1AImPpdbZ6qbCdtg9zBXcVWYhTiU="
+typstDeps = []
+description = "Create customizable Markdown-style Callouts"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Alpha9463/typst-callout"
+
 [calloutly."1.1.0"]
 url = "https://packages.typst.org/preview/calloutly-1.1.0.tar.gz"
 hash = "sha256-0F6IRJa4trVMSOCNLZ1UzfQ4zmvkP7gxfHL69jk3VdA="
@@ -5417,6 +5601,16 @@ license = [
 ]
 homepage = "https://github.com/SchrodingerBlume/typst-cap-able"
 
+[cardinal-su-thesis."0.1.0"]
+url = "https://packages.typst.org/preview/cardinal-su-thesis-0.1.0.tar.gz"
+hash = "sha256-xlRh6zqZRpSMGtQvdELqnxqjoHwreUETPMd6qRewdSw="
+typstDeps = []
+description = "Ph.D. dissertation or Engineer thesis at Stanford"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/mayasheth/cardinal-su-thesis"
+
 [cartao."0.2.0"]
 url = "https://packages.typst.org/preview/cartao-0.2.0.tar.gz"
 hash = "sha256-EN47shdewOszij89m1kqWciX9C27PGTIfpJsV29zA+s="
@@ -5469,6 +5663,19 @@ license = [
 ]
 homepage = "https://github.com/jiang131072/casual-szu-report"
 
+[caterpillar."0.1.0"]
+url = "https://packages.typst.org/preview/caterpillar-0.1.0.tar.gz"
+hash = "sha256-RNb090/yhlUR4Mo6i2Qj2gaErEbUzVJY24J6rwbXF+4="
+typstDeps = [
+    "beautiframe_0_4_0",
+    "tidy_0_4_3",
+]
+description = "Parse content to create your own syntactic rules"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/retroflexivity/typst-caterpillar"
+
 [catiche."0.1.0"]
 url = "https://packages.typst.org/preview/catiche-0.1.0.tar.gz"
 hash = "sha256-w6odvmwn4ouT7Vx4A1kWg47eob1Xlv/dz85SZM9jjv8="
@@ -5541,6 +5748,16 @@ license = [
 ]
 homepage = "https://github.com/jneug/typst-ccicons"
 
+[cekinar."0.1.0"]
+url = "https://packages.typst.org/preview/cekinar-0.1.0.tar.gz"
+hash = "sha256-4hTBVs16twIlk/wAagQuNeA3gfv+DpEIguCwSC0PRGY="
+typstDeps = []
+description = "Slovenian UPN QR payment slips for completing payment orders"
+license = [
+    "EUPL-1.2",
+]
+homepage = "https://codeberg.org/hpcfzl/cekinar"
+
 [cellpress-unofficial."0.1.1"]
 url = "https://packages.typst.org/preview/cellpress-unofficial-0.1.1.tar.gz"
 hash = "sha256-tcztgYuJ2aezrNldO2A15GA/uYXh7bcKxon0byhDTUY="
@@ -6423,6 +6640,18 @@ license = [
 ]
 homepage = "https://github.com/JeppeKlitgaard/chomp"
 
+[chordish."0.2.3"]
+url = "https://packages.typst.org/preview/chordish-0.2.3.tar.gz"
+hash = "sha256-ZNNvYdrnY7xv48wXqNnoSsMUGnQ0j4F9PptS5XZwhYU="
+typstDeps = [
+    "conchord_0_4_0",
+]
+description = "A simple template for creating guitar and ukulele chord sheets"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/soxfox42/chordish"
+
 [chordish."0.2.2"]
 url = "https://packages.typst.org/preview/chordish-0.2.2.tar.gz"
 hash = "sha256-oajeuplN1X9jATQKp/VJYDlDQU+j9AbDwEzw3KhaM9c="
@@ -7153,6 +7382,28 @@ license = [
 ]
 homepage = "https://github.com/ppgsi-lab/classic-ppgsi"
 
+[classic-thesis-uct."0.1.3"]
+url = "https://packages.typst.org/preview/classic-thesis-uct-0.1.3.tar.gz"
+hash = "sha256-WhueF8XXUzbgsQU5cfqIfsadJxxDlPI9H1G/h+GYGbM="
+typstDeps = []
+description = "PhD thesis at the University of Cape Town in the Classic Thesis tradition"
+license = [
+    "GPL-2.0-or-later",
+    "MIT-0",
+]
+homepage = "https://github.com/james-hepworth/classic-thesis-uct"
+
+[classic-thesis-uct."0.1.2"]
+url = "https://packages.typst.org/preview/classic-thesis-uct-0.1.2.tar.gz"
+hash = "sha256-QWPtdFBpTWQ0p5bPSBoeZaRXCBryN9kGY/821+B2o3g="
+typstDeps = []
+description = "PhD thesis at the University of Cape Town in the Classic Thesis tradition"
+license = [
+    "GPL-2.0-or-later",
+    "MIT-0",
+]
+homepage = "https://github.com/james-hepworth/classic-thesis-uct"
+
 [classic-thesis-uct."0.1.1"]
 url = "https://packages.typst.org/preview/classic-thesis-uct-0.1.1.tar.gz"
 hash = "sha256-LXxM8JARS/v/X0IwmpKFXdSMlB9wJTxbWfFL0C0Z3Xk="
@@ -7478,6 +7729,20 @@ license = [
 ]
 homepage = "https://github.com/TomPlanche/clean-cnam-template"
 
+[clean-dhbw."0.6.0"]
+url = "https://packages.typst.org/preview/clean-dhbw-0.6.0.tar.gz"
+hash = "sha256-jyC/gDNNk3H9znOu9Lh9FJyMonZ/Q9zwUoYjCJQzA+E="
+typstDeps = [
+    "codelst_2_0_2",
+    "glossarium_0_5_10",
+    "hydra_0_6_2",
+]
+description = "A Typst Template for DHBW"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/roland-KA/clean-dhbw-typst-template"
+
 [clean-dhbw."0.5.0"]
 url = "https://packages.typst.org/preview/clean-dhbw-0.5.0.tar.gz"
 hash = "sha256-tx5RLraOj+CQXMAnXxUL+WQcKIMymNldv9N/r8iBmFc="
@@ -7986,6 +8251,21 @@ license = [
 ]
 homepage = "https://github.com/sebaseb98/clean-math-thesis"
 
+[clean-othaw."0.3.7"]
+url = "https://packages.typst.org/preview/clean-othaw-0.3.7.tar.gz"
+hash = "sha256-efJTz3Jo1Rvz+fDQV+Pbt/VgEhgK8JrikYc0ifgPbb0="
+typstDeps = [
+    "codelst_2_0_2",
+    "glossarium_0_5_6",
+    "hydra_0_6_1",
+    "muchpdf_0_1_2",
+]
+description = "Thesis at OTH Amberg-Weiden"
+license = [
+    "MIT",
+]
+homepage = "https://codeberg.org/ruebe5w/clean-othaw"
+
 [clean-othaw."0.3.6"]
 url = "https://packages.typst.org/preview/clean-othaw-0.3.6.tar.gz"
 hash = "sha256-Ib8YLb136qPfYY4GJnnYFL68UwcCeb2ayv5n0bMU6jc="
@@ -9006,6 +9286,22 @@ license = [
 ]
 homepage = "https://github.com/micheledusi/Combo"
 
+[community-cnam-thesis."0.1.1"]
+url = "https://packages.typst.org/preview/community-cnam-thesis-0.1.1.tar.gz"
+hash = "sha256-oxGKFwM69jYl4niJsRVhhzpPPDduERuM2UG18f8P+AY="
+typstDeps = [
+    "bookly_5_0_0",
+    "cheq_0_4_0",
+    "lovelace_0_3_1",
+    "marginalia_0_3_1",
+    "zebraw_0_6_3",
+]
+description = "Template for writing theses of Cnam"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/maucejo/community-cnam-thesis"
+
 [community-cnam-thesis."0.1.0"]
 url = "https://packages.typst.org/preview/community-cnam-thesis-0.1.0.tar.gz"
 hash = "sha256-iy5QmU8j+3Ch/ufX/stXh6GMCmNsy1p+FosmlfLFm8w="
@@ -9101,6 +9397,16 @@ license = [
 ]
 homepage = "https://github.com/shonk-software/community-ostfalia-thesis"
 
+[community-pens-report."0.1.0"]
+url = "https://packages.typst.org/preview/community-pens-report-0.1.0.tar.gz"
+hash = "sha256-gdPQBVC0VrV4O3UOAENO9Sg2+OVdhHLLHkWYkKgXdbM="
+typstDeps = []
+description = "Final project report at Politeknik Elektronika Negeri Surabaya (PENS"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/azzamjhd/community-pens-report"
+
 [commute."0.3.0"]
 url = "https://packages.typst.org/preview/commute-0.3.0.tar.gz"
 hash = "sha256-HmdNs0aGWjv76Fa6HvSc6xijfKIyQx/75TT9Ui5Uo04="
@@ -9300,6 +9606,46 @@ license = [
 ]
 homepage = "https://github.com/ODAncona/confusion-matrix"
 
+[conic-toan."0.3.6"]
+url = "https://packages.typst.org/preview/conic-toan-0.3.6.tar.gz"
+hash = "sha256-vZ/Ok/0+YDJqb72nu/MNYKRyu7WZ0yLNPvukW6ovmtQ="
+typstDeps = []
+description = "Draw math figures, graphs and variation tables"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Thutran1891/conic-toan"
+
+[conic-toan."0.3.5"]
+url = "https://packages.typst.org/preview/conic-toan-0.3.5.tar.gz"
+hash = "sha256-uVEypjBoetXaJbQcO5R0fgsx8R1D2ImPIBxrcD88WnI="
+typstDeps = []
+description = "Draw math figures, graphs and variation tables"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Thutran1891/conic-toan"
+
+[conic-toan."0.3.4"]
+url = "https://packages.typst.org/preview/conic-toan-0.3.4.tar.gz"
+hash = "sha256-1bml03WFC+YBTf9wbnOiEuOIhM+jVa1/zUBcwqaqKgE="
+typstDeps = []
+description = "Draw math figures, graphs and variation tables"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Thutran1891/conic-toan"
+
+[conic-toan."0.3.3"]
+url = "https://packages.typst.org/preview/conic-toan-0.3.3.tar.gz"
+hash = "sha256-/pB+EA0+rY/eGxQ85C7Xlq4iy2RSMshj8dSt8hu9IAk="
+typstDeps = []
+description = "Draw math figures, graphs and variation tables"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Thutran1891/conic-toan"
+
 [conic-toan."0.3.2"]
 url = "https://packages.typst.org/preview/conic-toan-0.3.2.tar.gz"
 hash = "sha256-cbYqa8bUsPq6pOBToXK9A8iCWoUO2nxBuXa/eEHeup4="
@@ -9741,6 +10087,18 @@ license = [
 ]
 homepage = "https://github.com/hpdell/ctyp"
 
+[ctz-euclide."0.3.0"]
+url = "https://packages.typst.org/preview/ctz-euclide-0.3.0.tar.gz"
+hash = "sha256-ES55rmM8ZLvy/h3mPwSy/3fRmpavFYjNp/GzxSSfVQo="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Euclidean geometry constructions and drawing, a port of the LaTeX tkz-euclide package"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-ctz-euclide"
+
 [ctz-euclide."0.2.0"]
 url = "https://packages.typst.org/preview/ctz-euclide-0.2.0.tar.gz"
 hash = "sha256-WogIAB8HkAcHRP36khFs6kWEej/vROs/LlcpEzdobSA="
@@ -10315,6 +10673,16 @@ license = [
 ]
 homepage = "https://github.com/Otto-AA/dashy-todo"
 
+[datehog."0.1.1"]
+url = "https://packages.typst.org/preview/datehog-0.1.1.tar.gz"
+hash = "sha256-sGhaHzOHMPlC9Ko36b+dQ/lk//A+3OW6Fbeed/CaPCA="
+typstDeps = []
+description = "Date parsing and epoch arithmetic"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/zral0kh/datehog"
+
 [dati-basati."0.1.0"]
 url = "https://packages.typst.org/preview/dati-basati-0.1.0.tar.gz"
 hash = "sha256-Zkhz3Q9/t234Sknc6czzI26euRPv0a4NWSTmnkJZBxQ="
@@ -10507,6 +10875,16 @@ license = [
 ]
 homepage = "https://github.com/YDX-2147483647/typst-debug-city"
 
+[decasify."0.11.4"]
+url = "https://packages.typst.org/preview/decasify-0.11.4.tar.gz"
+hash = "sha256-uyXiHzXNaQB9rNe/DzMt6Z27xglFDRkq/LaaJlJMsjk="
+typstDeps = []
+description = "Locale and style-guide aware text casing functions for natural language prose"
+license = [
+    "LGPL-3.0-only",
+]
+homepage = "https://github.com/alerque/decasify"
+
 [decasify."0.11.3"]
 url = "https://packages.typst.org/preview/decasify-0.11.3.tar.gz"
 hash = "sha256-1lp39se+LMexQuikdREu1CKxVq2kOsIiqlhVAR/5Hpg="
@@ -10748,6 +11126,24 @@ license = [
 ]
 homepage = "https://github.com/ecomaikgolf/typst-isec-master-thesis-template/"
 
+[definitely-not-tue-thesis."0.1.0"]
+url = "https://packages.typst.org/preview/definitely-not-tue-thesis-0.1.0.tar.gz"
+hash = "sha256-vCGDiIJCUwIPR437Y4QklwUU0WZ3UPvmBeBU4hUMevA="
+typstDeps = [
+    "cetz_0_5_2",
+    "drafting_0_2_2",
+    "glossarium_0_5_10",
+    "hydra_0_6_3",
+    "i-figured_0_2_4",
+    "in-dexter_0_7_2",
+    "retrofit_0_2_0",
+]
+description = "An unofficial, community-built thesis template in the TU/e house style"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/alikaansun/TUe_typst_thesis_template"
+
 [definitely-not-tuw-thesis."0.2.0"]
 url = "https://packages.typst.org/preview/definitely-not-tuw-thesis-0.2.0.tar.gz"
 hash = "sha256-iCD1hRTNh+5ok8+QRCwRbNIZN/SwqdE4i566zYExHJ8="
@@ -10911,6 +11307,22 @@ license = [
     "MIT-0",
 ]
 
+[dhbw-oderso."2.4.0"]
+url = "https://packages.typst.org/preview/dhbw-oderso-2.4.0.tar.gz"
+hash = "sha256-qlKEZ7vVY2nQujhkJlKe0aaTpR78tIhqVRtV11QxREw="
+typstDeps = [
+    "codly_1_3_0",
+    "drafting_0_2_2",
+    "glossarium_0_5_10",
+    "hydra_0_6_3",
+    "linguify_0_5_0",
+]
+description = "All kinds of theses at DHBW and IHK"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/dhbw-typst/oderso-template"
+
 [dhbw-oderso."2.3.0"]
 url = "https://packages.typst.org/preview/dhbw-oderso-2.3.0.tar.gz"
 hash = "sha256-gCyXWsz7Yzmh5I2poE/KMtS0G3IiKx6AQWTP1H18Pt8="
@@ -11298,6 +11710,24 @@ license = [
 ]
 homepage = "https://github.com/ParaN3xus/digestify"
 
+[digidraw."0.9.3"]
+url = "https://packages.typst.org/preview/digidraw-0.9.3.tar.gz"
+hash = "sha256-jkP0kbUblXRw7fCxJDy4QgM6X9i3MzvsqjMLZvxWQV8="
+typstDeps = [
+    "alertoni_1_0_0",
+    "cetz_0_5_2",
+    "chribel_1_2_0",
+    "cmarker_0_1_10",
+    "tableau-icons_0_344_0",
+    "tidy_0_4_3",
+    "tiptoe_0_4_0",
+]
+description = "Drawing digital timing diagrams with style and (almost all of) the WaveDrom syntax"
+license = [
+    "EUPL-1.2",
+]
+homepage = "https://codeberg.org/joelvonrotz/typst-digidraw"
+
 [digidraw."0.9.2"]
 url = "https://packages.typst.org/preview/digidraw-0.9.2.tar.gz"
 hash = "sha256-5zjaQF5VludfGiYTOH/u1iphWIcMtNzd1jgaoSwWzB0="
@@ -11496,6 +11926,28 @@ license = [
     "MIT",
 ]
 
+[dorodango."0.2.0"]
+url = "https://packages.typst.org/preview/dorodango-0.2.0.tar.gz"
+hash = "sha256-AcnuSXHRThxuWjpyuGRKxHfJtq2lISkxlmGk4libeOQ="
+typstDeps = [
+    "tidy_0_4_3",
+]
+description = "dorodango: a package for drawing squircles"
+license = [
+    "MIT",
+]
+
+[dorodango."0.1.0"]
+url = "https://packages.typst.org/preview/dorodango-0.1.0.tar.gz"
+hash = "sha256-2IHpqOMGtDeE7XmcZrbOl69B8OrUQm+luFqpbYZ9Uu8="
+typstDeps = [
+    "tidy_0_4_3",
+]
+description = "dorodango: a package for drawing squircles"
+license = [
+    "MIT",
+]
+
 [dovenv."0.1.0"]
 url = "https://packages.typst.org/preview/dovenv-0.1.0.tar.gz"
 hash = "sha256-H0yY6dW6FwFTkTE6K8A0UmjSbPbIFuh+RH2ggD6JbZw="
@@ -11723,6 +12175,32 @@ license = [
 ]
 homepage = "https://github.com/kn0kh/easy-abi-ausarbeitung"
 
+[easy-hgb-thesis."0.2.1"]
+url = "https://packages.typst.org/preview/easy-hgb-thesis-0.2.1.tar.gz"
+hash = "sha256-aBfZSoLxTJ3A8LaDOzNWhSdkVggEKBfIXKIluPZVhqQ="
+typstDeps = [
+    "datify_1_3_0",
+    "lilaq_0_6_0",
+]
+description = "Opinionated bachelor's, master's thesis or protocols for the FH Upper Austria, especially campus Hagenberg"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/TimerErTim/hagenberg-thesis-typst"
+
+[easy-hgb-thesis."0.2.0"]
+url = "https://packages.typst.org/preview/easy-hgb-thesis-0.2.0.tar.gz"
+hash = "sha256-r9/ZADTm2NdPN0EenHigv6VohE71y+9UKnICuyLSOsc="
+typstDeps = [
+    "datify_1_3_0",
+    "lilaq_0_6_0",
+]
+description = "Opinionated bachelor's, master's thesis or protocols for the FH Upper Austria, especially campus Hagenberg"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/TimerErTim/hagenberg-thesis-typst"
+
 [easy-hgb-thesis."0.1.0"]
 url = "https://packages.typst.org/preview/easy-hgb-thesis-0.1.0.tar.gz"
 hash = "sha256-J4Vw3/4nD8qjz+3D3xzrSKALbmaMWtCVFc6m8JZPEbY="
@@ -11788,6 +12266,20 @@ license = [
 ]
 homepage = "https://github.com/swaits/typst-collection"
 
+[easy-wi-hwr."0.1.3"]
+url = "https://packages.typst.org/preview/easy-wi-hwr-0.1.3.tar.gz"
+hash = "sha256-6MQykfKe5b3xYbBIoLDRRTeazmmavDsY0TeXZ4x+DVU="
+typstDeps = [
+    "glossarium_0_5_10",
+    "linguify_0_5_0",
+    "mmdr_0_2_2",
+]
+description = "Paper template for HWR Berlin (Wirtschaftsinformatik"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/lultoni/easy-wi-hwr"
+
 [easy-wi-hwr."0.1.2"]
 url = "https://packages.typst.org/preview/easy-wi-hwr-0.1.2.tar.gz"
 hash = "sha256-SzbOoiEBE2xXfQhMvWdZ+8YxtpXR0DJDraXd4+laIUE="
@@ -12728,6 +13220,16 @@ license = [
     "GPL-3.0-or-later",
 ]
 
+[endfield-doc."0.1.2"]
+url = "https://packages.typst.org/preview/endfield-doc-0.1.2.tar.gz"
+hash = "sha256-XeAR4WF1vTYe+x8Fk+Fmeyf5jRcNAbORWINadWBlqrM="
+typstDeps = []
+description = "A4 document theme styled after the Arknights: Endfield aesthetic"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Ives-Natsume/typst-endfield-doc-theme.git"
+
 [endfield-doc."0.1.1"]
 url = "https://packages.typst.org/preview/endfield-doc-0.1.1.tar.gz"
 hash = "sha256-xruMhvMEVHx2aglikhTZwMyV5sLJIzS0Usaf9m08e+Y="
@@ -12760,6 +13262,19 @@ license = [
 ]
 homepage = "https://github.com/pawawa-pururun/energy-dia"
 
+[enja-bib."0.2.0"]
+url = "https://packages.typst.org/preview/enja-bib-0.2.0.tar.gz"
+hash = "sha256-CpDxJK9cvikVmCc4WvcktVoTPtQejVfBVlV7FT8BnwI="
+typstDeps = [
+    "auto-jrubby_0_3_4",
+    "citegeist_0_3_1",
+]
+description = "A package for handling BibTeX that includes both English and Japanese"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/tkrhsmt/typst-BibTeX-jp"
+
 [enja-bib."0.1.0"]
 url = "https://packages.typst.org/preview/enja-bib-0.1.0.tar.gz"
 hash = "sha256-JJNYAVj8FM+rf8EpjHiF3sPSjDKIjTn5UpDZ1Qqe5yI="
@@ -13028,6 +13543,17 @@ license = [
 ]
 homepage = "https://github.com/EsotericSquishyy/ergo"
 
+[eskd-drafting."0.1.0"]
+url = "https://packages.typst.org/preview/eskd-drafting-0.1.0.tar.gz"
+hash = "sha256-wR3qHKTd3LeGfLxDLzAhBDhVe4cbEAICAG9X7mOR/vw="
+typstDeps = []
+description = "Draft ESKD technical drawings and documentation layouts"
+license = [
+    "MIT",
+    "MIT-0",
+]
+homepage = "https://github.com/runasexe/eskd-drafting"
+
 [esotefy."1.0.0"]
 url = "https://packages.typst.org/preview/esotefy-1.0.0.tar.gz"
 hash = "sha256-Yaex2nIpddDiJoTyV0Sl7oWltnxD4MfSIHoNbQuFv+s="
@@ -13038,6 +13564,17 @@ license = [
 ]
 homepage = "git@github.com:Thumuss/brainfuck.git"
 
+[ethz-cadmo-inspired-thesis."0.2.0"]
+url = "https://packages.typst.org/preview/ethz-cadmo-inspired-thesis-0.2.0.tar.gz"
+hash = "sha256-GWx3tkQDhViKJ19Xt7I/BeMgckD2lYjLPM+PXrCCW0U="
+typstDeps = [
+    "wordometer_0_1_5",
+]
+description = "Thesis inspired by the ETHZ CADMO group"
+license = [
+    "MIT",
+]
+
 [ethz-cadmo-inspired-thesis."0.1.0"]
 url = "https://packages.typst.org/preview/ethz-cadmo-inspired-thesis-0.1.0.tar.gz"
 hash = "sha256-mDZleaAZ5qHgtrZufME7Hv9xmqpAqHrSeGVZe1jQ8wQ="
@@ -13273,6 +13810,32 @@ license = [
 ]
 homepage = "https://github.com/wensimehrp/exemel"
 
+[exercise-bank."0.6.3"]
+url = "https://packages.typst.org/preview/exercise-bank-0.6.3.tar.gz"
+hash = "sha256-IUXanpSZDisePhtgRbTfSimxtg/mZ3RG7mKPZnHv/sk="
+typstDeps = [
+    "tiaoma_0_3_0",
+    "wrap-it_0_1_1",
+]
+description = "Exercise management with solutions, metadata, filtering, and exercise banks for educational documents"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-exercise-bank"
+
+[exercise-bank."0.6.2"]
+url = "https://packages.typst.org/preview/exercise-bank-0.6.2.tar.gz"
+hash = "sha256-9jrZdquCfI/bDAUHB/eRm4MXx+rrtflsZmClsqkCc5k="
+typstDeps = [
+    "tiaoma_0_3_0",
+    "wrap-it_0_1_1",
+]
+description = "Exercise management with solutions, metadata, filtering, and exercise banks for educational documents"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-exercise-bank"
+
 [exercise-bank."0.6.1"]
 url = "https://packages.typst.org/preview/exercise-bank-0.6.1.tar.gz"
 hash = "sha256-+ZzncBWAEE/D8+iHiBGw05FXJL9ws3aPGZqUDxu0zKs="
@@ -13409,6 +13972,26 @@ license = [
 ]
 homepage = "https://github.com/hongjr03/typst-xml-table-parser"
 
+[exp-resume."0.1.2"]
+url = "https://packages.typst.org/preview/exp-resume-0.1.2.tar.gz"
+hash = "sha256-w5nQbLaXfD+9+MEU0FlHy5e5OaDQwr0kdmCCpRtoLuc="
+typstDeps = []
+description = "ATS-friendly resume with configurable sections and contact links"
+license = [
+    "Unlicense",
+]
+homepage = "https://github.com/tahzeer/exp-resume-template"
+
+[exp-resume."0.1.1"]
+url = "https://packages.typst.org/preview/exp-resume-0.1.1.tar.gz"
+hash = "sha256-UcAgWAdFeFdADSWiCAdUvygr0o3ImGmGRFflg3NlZRY="
+typstDeps = []
+description = "ATS-friendly resume with configurable sections and contact links"
+license = [
+    "Unlicense",
+]
+homepage = "https://github.com/tahzeer/exp-resume-template"
+
 [exzellenz-tum-thesis."0.2.1"]
 url = "https://packages.typst.org/preview/exzellenz-tum-thesis-0.2.1.tar.gz"
 hash = "sha256-Pf2StcgjknXNI4JbpNnEnv4O2N+e2tAQiYVJV6zm3q0="
@@ -13927,6 +14510,33 @@ license = [
 ]
 homepage = "https://github.com/yangyuchenhahaha/-typst-"
 
+[fei-thesis."0.0.2"]
+url = "https://packages.typst.org/preview/fei-thesis-0.0.2.tar.gz"
+hash = "sha256-1yVlrzSMbLGEzVZHq+U1WEI4fdqw3yfw5qjyVeM4mZM="
+typstDeps = [
+    "abbr_0_3_1",
+    "chemformula_0_1_3",
+    "mitex_0_2_7",
+    "numbly_0_1_0",
+    "physica_0_9_8",
+]
+description = "Official template for writing thesis on Slovak University of Technology in Bratislava Faculty of Electrical Engineering and Information Technology  (STU FEI"
+license = [
+    "MIT",
+]
+
+[fernmind."0.1.0"]
+url = "https://packages.typst.org/preview/fernmind-0.1.0.tar.gz"
+hash = "sha256-x4qTTCf8gyEd4dgu/GkPFcV2iHzEKhM/hZ7rbzVpSSo="
+typstDeps = [
+    "cuti_0_4_0",
+    "tablem_0_3_0",
+]
+description = "Forest-green theme for Chinese documents with light and dark modes"
+license = [
+    "MIT",
+]
+
 [ferrmat."0.1.2"]
 url = "https://packages.typst.org/preview/ferrmat-0.1.2.tar.gz"
 hash = "sha256-qiMKwxldWpW0nPtggaGu/TISLPJ5W5hTVPmWriySDzo="
@@ -14112,6 +14722,16 @@ license = [
 ]
 homepage = "https://github.com/gauthamrmn/fibber"
 
+[ficons."0.1.0"]
+url = "https://packages.typst.org/preview/ficons-0.1.0.tar.gz"
+hash = "sha256-Wr8olFNzvBSOp3cjOuTSNvm6f0t3gly18VElvMq9Y6o="
+typstDeps = []
+description = "Open source vector icons"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/BalderHolst/typst-feather-icons"
+
 [fig-plucker."0.1.0"]
 url = "https://packages.typst.org/preview/fig-plucker-0.1.0.tar.gz"
 hash = "sha256-RhOEdnOB1oa4p9RC9vuW8j3Zxfl7k0q/uyoxLNZRXWQ="
@@ -15176,6 +15796,19 @@ license = [
 ]
 homepage = "https://github.com/Brndan/lettre"
 
+[forum-acusticum-2026."0.1.1"]
+url = "https://packages.typst.org/preview/forum-acusticum-2026-0.1.1.tar.gz"
+hash = "sha256-48/DTWeE1df0YccJi6wbLzqRuNrslO/hDc32u1w2asc="
+typstDeps = [
+    "pubmatter_0_2_2",
+    "unify_0_8_1",
+]
+description = "Proceedings of the EAA Forum Acusticum 2026 conference in Graz, Austria"
+license = [
+    "MIT",
+]
+homepage = "https://git.iem.at/fa26-templates/fa26-typst-template"
+
 [forum-acusticum-2026."0.1.0"]
 url = "https://packages.typst.org/preview/forum-acusticum-2026-0.1.0.tar.gz"
 hash = "sha256-41a7WuO6FdbApZP3n7mhv7+m4pkwDjtw1wAFdzCBNqo="
@@ -15389,6 +16022,26 @@ license = [
 ]
 homepage = "https://github.com/Freezy727/freeCV"
 
+[fretwork."0.3.0"]
+url = "https://packages.typst.org/preview/fretwork-0.3.0.tar.gz"
+hash = "sha256-ZMyRDg4SgFVYNUooVDJlx+V2cjhS8iQgEoR2hOiSFk8="
+typstDeps = []
+description = "Publication-quality guitar tablature: rhythm stems, technique symbols and ASCII tab import"
+license = [
+    "EUPL-1.2",
+]
+homepage = "https://github.com/snaggen/fretwork"
+
+[fretwork."0.2.0"]
+url = "https://packages.typst.org/preview/fretwork-0.2.0.tar.gz"
+hash = "sha256-NLpBquTDO47vtmtFQaWPS3DVPSsVE/IHlvJQpbn5l2w="
+typstDeps = []
+description = "Publication-quality guitar tablature: rhythm stems, technique symbols and ASCII tab import"
+license = [
+    "EUPL-1.2",
+]
+homepage = "https://github.com/snaggen/fretwork"
+
 [fretwork."0.1.0"]
 url = "https://packages.typst.org/preview/fretwork-0.1.0.tar.gz"
 hash = "sha256-MbaLrlJnFLWrBpII1/LVInda6gVL0AB96zAPNzblc+o="
@@ -15519,6 +16172,16 @@ license = [
 ]
 homepage = "https://github.com/ludwig-austermann/typst-funarray"
 
+[functable."0.2.0"]
+url = "https://packages.typst.org/preview/functable-0.2.0.tar.gz"
+hash = "sha256-3prNOrse9JF0ljHXBjtDm32OmoXU/2k1pjcSx7kZyog="
+typstDeps = []
+description = "Sign, variation, and convexity tables in the French tkz-tab style, plus value tables (tableaux de valeurs"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-functable"
+
 [functable."0.1.0"]
 url = "https://packages.typst.org/preview/functable-0.1.0.tar.gz"
 hash = "sha256-aaFdzAm8CiB1gfPDAWDJqz8saza4nXR8xa15TtN8Gn8="
@@ -15599,6 +16262,18 @@ license = [
     "GPL-3.0-or-later",
 ]
 
+[g-exam."0.4.5"]
+url = "https://packages.typst.org/preview/g-exam-0.4.5.tar.gz"
+hash = "sha256-UoEVJb6KqpKYjcUKR1njw9mCeXi0PXVitH+N1bFAM+o="
+typstDeps = [
+    "oxifmt_1_0_0",
+]
+description = "Create exams with student information, grade chart, score control, questions, and sub-questions"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/MatheSchool/typst-g-exam"
+
 [g-exam."0.4.4"]
 url = "https://packages.typst.org/preview/g-exam-0.4.4.tar.gz"
 hash = "sha256-yQxwV6uSj38UKRDvfNR9IUkmsYGtGbxfBr6pj1ebMKg="
@@ -17192,6 +17867,18 @@ license = [
 ]
 homepage = "https://github.com/jbirnick/typst-great-theorems"
 
+[gribouille."0.7.0"]
+url = "https://packages.typst.org/preview/gribouille-0.7.0.tar.gz"
+hash = "sha256-e5IozoqtmitNcbvJ/oMNXC1ReY8Wjn7gKG4zO/Ffj/I="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Create elegant graphics with the Grammar of Graphics"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/mcanouil/gribouille"
+
 [gribouille."0.6.0"]
 url = "https://packages.typst.org/preview/gribouille-0.6.0.tar.gz"
 hash = "sha256-qOgyA6C2rZwdVj+UVXpYglphNp3ecU5xJ3eekOgz73I="
@@ -17809,6 +18496,16 @@ license = [
     "MIT",
 ]
 
+[hanko-kitei."0.1.0"]
+url = "https://packages.typst.org/preview/hanko-kitei-0.1.0.tar.gz"
+hash = "sha256-/sQVW+StUlqP4vdcvl1fF5NcuUjTOSZlaTg9OKJjm9U="
+typstDeps = []
+description = "Japanese workplace regulations with automatic numbering"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/liquidcatmofu/typst-hanko-kitei"
+
 [hannes-thesis."0.1.0"]
 url = "https://packages.typst.org/preview/hannes-thesis-0.1.0.tar.gz"
 hash = "sha256-MVv9O8FR6jJGQ6nNJjnwkNz8Lj+CC9bThWHZ6zsdkac="
@@ -19594,6 +20291,26 @@ license = [
 ]
 homepage = "https://github.com/RubixDev/typst-i-figured"
 
+[iarticle."0.1.1"]
+url = "https://packages.typst.org/preview/iarticle-0.1.1.tar.gz"
+hash = "sha256-n1RaBFCadyB23ri8pIA9EDA6Qe0KVkHnITb7Jzz4D+I="
+typstDeps = []
+description = "i18n-aware article and report templates"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hideo67/iarticle"
+
+[iarticle."0.1.0"]
+url = "https://packages.typst.org/preview/iarticle-0.1.0.tar.gz"
+hash = "sha256-v7v/ljL3NV0jmHaULG9gMEp1PkytUXkW80+VA7bIVmU="
+typstDeps = []
+description = "i18n-aware article and report templates"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hideo67/iarticle"
+
 [ibanator."0.1.0"]
 url = "https://packages.typst.org/preview/ibanator-0.1.0.tar.gz"
 hash = "sha256-d9H+0Cc03IzLCWHVSzqT41xYUTwN0qQryb4SAYtaQQU="
@@ -20220,6 +20937,26 @@ license = [
     "MIT",
 ]
 
+[implicplot."0.2.0"]
+url = "https://packages.typst.org/preview/implicplot-0.2.0.tar.gz"
+hash = "sha256-9gUtRr9Y/0jO+qv7mZJ0BflwnNCIdZl8lJl8H66ode0="
+typstDeps = []
+description = "Rigorous implicit-relation plotting: pixel rasters by interval arithmetic, and curves traced with a guaranteed topology"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/uwni/implicplot"
+
+[implicplot."0.1.0"]
+url = "https://packages.typst.org/preview/implicplot-0.1.0.tar.gz"
+hash = "sha256-2nBDPwAo6NVo3n8oKs8TMANY/F54BLip+4w/84m7EKc="
+typstDeps = []
+description = "Rigorous implicit-relation plotting: pixel rasters by interval arithmetic, and curves traced with a guaranteed topology"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/uwni/implicplot"
+
 [imprecv."1.0.1"]
 url = "https://packages.typst.org/preview/imprecv-1.0.1.tar.gz"
 hash = "sha256-q0y6QunluYMFNTJKlUqFheRDKzkQ7L7cuOKCX37/PXU="
@@ -20545,6 +21282,16 @@ license = [
 ]
 homepage = "https://github.com/euwbah/intextual"
 
+[intl-math."0.1.0"]
+url = "https://packages.typst.org/preview/intl-math-0.1.0.tar.gz"
+hash = "sha256-+Kr75Uj7vdnuDOLGdOZlYQ5iW3/PoPDhG3fyc4di+CM="
+typstDeps = []
+description = "Math operators that print in the document's language: you write sin(x) and it typesets sen(x) in Spanish, sin(x) in English. New languages can be added without forking"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/13Stokes31/intl-math"
+
 [intsketcher."0.5.0"]
 url = "https://packages.typst.org/preview/intsketcher-0.5.0.tar.gz"
 hash = "sha256-4pWeSY/zHRWzSVZ7JZiD7CW2i3Z2XLK1QqrzIWcAHKo="
@@ -20567,6 +21314,16 @@ license = [
 ]
 homepage = "https://github.com/ck3d/typst2commonmark"
 
+[invaria."0.2.0"]
+url = "https://packages.typst.org/preview/invaria-0.2.0.tar.gz"
+hash = "sha256-3HIT/a28XqsGOF1/0UQdPA3tCgk5/zsEISYgV2gKRRk="
+typstDeps = []
+description = "Access to (physical) constants and their associated metadata"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/q-wertz/invaria"
+
 [invicta-thesis."1.1.0"]
 url = "https://packages.typst.org/preview/invicta-thesis-1.1.0.tar.gz"
 hash = "sha256-VJAA89Y1si6Tt0r/QygREJTDYQglXzpEBYSqe3AxDb0="
@@ -20597,6 +21354,21 @@ license = [
 ]
 homepage = "https://github.com/ad-si/invoice-maker"
 
+[invoice-pro."0.4.1"]
+url = "https://packages.typst.org/preview/invoice-pro-0.4.1.tar.gz"
+hash = "sha256-NI4v5jlM/GN2flF4Ctc44ggNGsr9xQXvIwUQu1aBqWE="
+typstDeps = [
+    "ibanator_0_1_0",
+    "letter-pro_3_0_0",
+    "loom_0_1_1",
+    "sepay_0_1_1",
+]
+description = "A professional, DIN 5008 compliant invoice template with automatic calculations, EPC-QR-Code (GiroCode), and ZUGFeRD e-invoicing support"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/leonieziechmann/invoice-pro"
+
 [invoice-pro."0.4.0"]
 url = "https://packages.typst.org/preview/invoice-pro-0.4.0.tar.gz"
 hash = "sha256-JUS7thdGes0RBM4kEu6MxyBL8rTv3B6ynAEJcgjecBg="
@@ -22478,6 +23250,16 @@ license = [
     "MIT",
 ]
 
+[kinetic-kit."0.1.0"]
+url = "https://packages.typst.org/preview/kinetic-kit-0.1.0.tar.gz"
+hash = "sha256-4CAenShsYyuRVEjrCwPdhqM3+H/Ebhxq3pw3IrwaZyI="
+typstDeps = []
+description = "Doctoral, Bachelor's and Master's theses at the Karlsruhe Institute of Technology"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/ll-nick/kinetic-kit"
+
 [kino."0.1.0"]
 url = "https://packages.typst.org/preview/kino-0.1.0.tar.gz"
 hash = "sha256-jdKv+Zh/RoxsZnI3nNnWJHQnawOpaXxu5bKwxxb4yp4="
@@ -22669,6 +23451,23 @@ license = [
 ]
 homepage = "https://github.com/Harry-Chen/kouhu"
 
+[kthesis."0.1.8"]
+url = "https://packages.typst.org/preview/kthesis-0.1.8.tar.gz"
+hash = "sha256-9kIcfM2S7xhrJRLcxd/wz0Buv0skRg6qWid0vR7+LV4="
+typstDeps = [
+    "glossarium_0_5_10",
+    "headcount_0_1_1",
+    "hydra_0_6_3",
+    "linguify_0_5_0",
+    "valkyrie_0_2_2",
+]
+description = "Unofficial thesis template for KTH Royal Institute of Technology"
+license = [
+    "MIT",
+    "MIT-0",
+]
+homepage = "https://github.com/RafDevX/kthesis-typst"
+
 [kthesis."0.1.7"]
 url = "https://packages.typst.org/preview/kthesis-0.1.7.tar.gz"
 hash = "sha256-5lj6fk+LR7ySDT0CwK4wAy1OrwtEOkJAuoLonDuOxpY="
@@ -22808,6 +23607,20 @@ license = [
 ]
 homepage = "https://github.com/ludwig-austermann/kuddle"
 
+[kulemt."2.2.0"]
+url = "https://packages.typst.org/preview/kulemt-2.2.0.tar.gz"
+hash = "sha256-DiVffg1pLqnJfAGJVxFWm81/TUqf5jeqiCBD2g8zklY="
+typstDeps = [
+    "hydra_0_6_3",
+]
+description = "Master's thesis at KU Leuven's engineering faculty"
+license = [
+    "LPPL-1.3c",
+    "MIT",
+    "MIT-0",
+]
+homepage = "https://gitlab.kuleuven.be/oo-firw/student-resources/firw-master-thesis-template"
+
 [kunskap."0.1.0"]
 url = "https://packages.typst.org/preview/kunskap-0.1.0.tar.gz"
 hash = "sha256-drCRPbJP5vdJ1/oAcEVVlt8/UO+eHVH+GYRAsvJQYlg="
@@ -22930,6 +23743,30 @@ license = [
 ]
 homepage = "https://github.com/luca-schlecker/typst-lambdabus"
 
+[lamportian-dramatis."0.2.0"]
+url = "https://packages.typst.org/preview/lamportian-dramatis-0.2.0.tar.gz"
+hash = "sha256-nZ332smBDIn/IE5cT+POJuZhn3gFJcGGqNUpyFaEc3c="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw Lamport diagrams of replicas exchanging messages (with all the drama it entails"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/mvaled/lamportian-dramatis"
+
+[lamportian-dramatis."0.1.0"]
+url = "https://packages.typst.org/preview/lamportian-dramatis-0.1.0.tar.gz"
+hash = "sha256-n6TUxMUCYg+/hPBoc0l6lbiKBCWmPFR3LSEX9rplp80="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw Lamport diagrams of replicas exchanging messages (with all the drama it entails"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/mvaled/lamportian-dramatis"
+
 [larnt."0.1.0"]
 url = "https://packages.typst.org/preview/larnt-0.1.0.tar.gz"
 hash = "sha256-1w1uzJywcgntnVcOz7p3seWQwp1/JZdn1LYYfpUINFw="
@@ -23457,6 +24294,16 @@ license = [
 ]
 homepage = "https://github.com/Sematre/typst-letter-pro"
 
+[letterloom."3.0.1"]
+url = "https://packages.typst.org/preview/letterloom-3.0.1.tar.gz"
+hash = "sha256-+rbqcwvUVQRVr3WizAUE921DueYkPInrvggfJlRJmqo="
+typstDeps = []
+description = "A highly customizable template for polished and professional letters"
+license = [
+    "Unlicense",
+]
+homepage = "https://github.com/nandac/letterloom"
+
 [letterloom."3.0.0"]
 url = "https://packages.typst.org/preview/letterloom-3.0.0.tar.gz"
 hash = "sha256-Wy99MXOeF+tpIFbNxXm2I8xHJVvfZXQKwjDZLG/riPs="
@@ -23916,6 +24763,34 @@ license = [
     "MIT",
 ]
 
+[longops."0.1.1"]
+url = "https://packages.typst.org/preview/longops-0.1.1.tar.gz"
+hash = "sha256-sMJIwvbufkQ/sQsYBlp/c6Hfx1W2Hf9Ves3STdTAeJA="
+typstDeps = [
+    "codly_1_3_0",
+    "tidy_0_4_3",
+    "zero_0_7_0",
+]
+description = "Long operations and detailed calculations.                        Opérations posées et calculs détaillés"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Akilon27/longops"
+
+[longops."0.1.0"]
+url = "https://packages.typst.org/preview/longops-0.1.0.tar.gz"
+hash = "sha256-hYnWN/nD9WvT5E2sMDSCo8KXPCfNoeAD6ZZrxVMU46k="
+typstDeps = [
+    "codly_1_3_0",
+    "tidy_0_4_3",
+    "zero_0_6_1",
+]
+description = "Long operations and detailed calculations.                        Opérations posées et calculs détaillés"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Akilon27/longops"
+
 [loom."0.1.1"]
 url = "https://packages.typst.org/preview/loom-0.1.1.tar.gz"
 hash = "sha256-VW1jJF9OtFQ01ZERhZiVETEU+Dkx7mPWy8I/OLHPhJ8="
@@ -24611,6 +25486,16 @@ license = [
 ]
 homepage = "https://github.com/senaalem/ISMIN_reports_template"
 
+[maquette."0.1.3"]
+url = "https://packages.typst.org/preview/maquette-0.1.3.tar.gz"
+hash = "sha256-clDkF011l2KyOGnuaWCi3p4cGHlZktiLkkC18XKCDJw="
+typstDeps = []
+description = "🫖 Render 3D models (PLY, STL, OBJ) as SVG or PNG images"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/bernsteining/maquette"
+
 [maquette."0.1.2"]
 url = "https://packages.typst.org/preview/maquette-0.1.2.tar.gz"
 hash = "sha256-hDs+6YluhszrWul03/cZ17acDtdkrANgnPq35NyLlR4="
@@ -24816,6 +25701,28 @@ license = [
 ]
 homepage = "https://github.com/cskeeters/typst-markly"
 
+[mastermind."0.2.0"]
+url = "https://packages.typst.org/preview/mastermind-0.2.0.tar.gz"
+hash = "sha256-A8UvEh9ZCio/LI3ZUaZkLrUURLUpHq7cmLrF1w+fVSw="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw UML class diagrams"
+license = [
+    "GPL-3.0-or-later",
+]
+
+[mastermind."0.1.1"]
+url = "https://packages.typst.org/preview/mastermind-0.1.1.tar.gz"
+hash = "sha256-K62E9kKIW6Yp+QK9j5fmi7gBRwIXlDm13fTC8xgOKOA="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw UML class diagrams"
+license = [
+    "GPL-3.0-or-later",
+]
+
 [mastermind."0.1.0"]
 url = "https://packages.typst.org/preview/mastermind-0.1.0.tar.gz"
 hash = "sha256-bwhVRmcd3H0KL34hiS0l+EE89mLPYdfkVTR15W3s3Lc="
@@ -24862,6 +25769,16 @@ license = [
 ]
 homepage = "https://github.com/rojul/typst-materialize"
 
+[materially."0.1.0"]
+url = "https://packages.typst.org/preview/materially-0.1.0.tar.gz"
+hash = "sha256-QKHp7CsXquV/ovMnkBdQiBbxDlxqkn7vVKQN3SZZ1w0="
+typstDeps = []
+description = "Google Material Symbols Library"
+license = [
+    "Apache-2.0",
+]
+homepage = "https://github.com/cskeeters/typst-materially"
+
 [matofletcher."0.1.1"]
 url = "https://packages.typst.org/preview/matofletcher-0.1.1.tar.gz"
 hash = "sha256-UUeM/e0eqinqVUiE5zgq+8RdzJSFW++POAAiun6yIXE="
@@ -25399,6 +26316,17 @@ license = [
 ]
 homepage = "https://github.com/davidculemann/typst-templates"
 
+[merman."0.2.0"]
+url = "https://packages.typst.org/preview/merman-0.2.0.tar.gz"
+hash = "sha256-kNpv39VCyAm+9F/9Vcxcx4xSkwinpLQ4IkWqEig8GHk="
+typstDeps = []
+description = "Render Mermaid diagrams as SVG"
+license = [
+    "MIT",
+    "Apache-2.0",
+]
+homepage = "https://github.com/Latias94/merman"
+
 [merman."0.1.0"]
 url = "https://packages.typst.org/preview/merman-0.1.0.tar.gz"
 hash = "sha256-NR7ElPGfLkLHlURHtNhzWkBftDSkqDtPnwiVl5fCENc="
@@ -25410,6 +26338,30 @@ license = [
 ]
 homepage = "https://github.com/Latias94/merman"
 
+[mesa."0.4.0"]
+url = "https://packages.typst.org/preview/mesa-0.4.0.tar.gz"
+hash = "sha256-k01KbZxO4yGYPIyb7lejxW95COSu131Mo/VIrWtuz6E="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw semiconductor devices and fabrication process flows from GDS layouts"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/digiefel/mesa"
+
+[mesa."0.2.0"]
+url = "https://packages.typst.org/preview/mesa-0.2.0.tar.gz"
+hash = "sha256-3e9UNhF4RDJP9xY+zKqCSateaXAy7TjNG3KbTyxZSC8="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw semiconductor devices and fabrication process flows from GDS layouts"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/digiefel/mesa"
+
 [mesa."0.1.0"]
 url = "https://packages.typst.org/preview/mesa-0.1.0.tar.gz"
 hash = "sha256-troki8xIzgGZBaY4pCPhtt1Chq619HPDALk+GfikMwg="
@@ -25422,6 +26374,18 @@ license = [
 ]
 homepage = "https://github.com/digiefel/mesa"
 
+[meshpad."0.1.0"]
+url = "https://packages.typst.org/preview/meshpad-0.1.0.tar.gz"
+hash = "sha256-d2Vw4qAwbO3tQcNfYbwfCl5cFDYgA6we8a6ZsJKlTyE="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Configurable grid backgrounds for printable worksheets: square, ruled and dot grids, with darker major lines every N steps, with CeTZ"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/13Stokes31/meshpad"
+
 [messeji."0.3.0"]
 url = "https://packages.typst.org/preview/messeji-0.3.0.tar.gz"
 hash = "sha256-vqIQjUdm4KvrDNTr5SnWqzVwSkG/dRVvQy/0W6o0P/g="
@@ -25632,6 +26596,18 @@ license = [
 ]
 homepage = "https://github.com/mayconfmelo/min-article"
 
+[min-book."1.5.1"]
+url = "https://packages.typst.org/preview/min-book-1.5.1.tar.gz"
+hash = "sha256-pcVLj+lrouY1lML3BIppRWg5roo1H2Yz6lQngaABYFY="
+typstDeps = [
+    "min-manual_1_4_0",
+]
+description = "Simple and complete books without introducing new syntax"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/mayconfmelo/min-book"
+
 [min-book."1.5.0"]
 url = "https://packages.typst.org/preview/min-book-1.5.0.tar.gz"
 hash = "sha256-tVxJ0vJ3/oZWz3B6wvtQ4RVOsqYT2cHTW1uBRNqGW0o="
@@ -25804,6 +26780,19 @@ license = [
 ]
 homepage = "https://github.com/mayconfmelo/min-resume"
 
+[min-writing."0.1.0"]
+url = "https://packages.typst.org/preview/min-writing-0.1.0.tar.gz"
+hash = "sha256-f0rWq6qCreBZ13V6Qu55Zt9CHR3Ib1RVqOJ44zXxHFA="
+typstDeps = [
+    "min-manual_0_3_0",
+    "nexus-tools_0_3_0",
+]
+description = "Quick and simple general-purpose notes with extended syntax"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/mayconfmelo/min-writing"
+
 [minerva-report-fcfm."0.2.2"]
 url = "https://packages.typst.org/preview/minerva-report-fcfm-0.2.2.tar.gz"
 hash = "sha256-HK/jzmCXp6i6+Iy/7RfCrKPWp6J1NTb59oLi11SJmfw="
@@ -27465,6 +28454,16 @@ license = [
 ]
 homepage = "https://github.com/bulgogipedas/modern-jakarta-cv"
 
+[modern-mailmerge."0.1.0"]
+url = "https://packages.typst.org/preview/modern-mailmerge-0.1.0.tar.gz"
+hash = "sha256-DkLoPAZ4hk16MJi1/gv+mD2ED4tXnhxrKsEPElpDHGM="
+typstDeps = []
+description = "A powerful, feature-rich mail merge package. Easily generate personalized letters, certificates, address labels, badges, and envelopes from CSV data"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/aurghya-0/typst-mailmerge"
+
 [modern-mla."0.1.0"]
 url = "https://packages.typst.org/preview/modern-mla-0.1.0.tar.gz"
 hash = "sha256-JGsMcYkoS8P5D/n94WPCE1vCQIhGOHbu4adZ5T0UYQ4="
@@ -29084,6 +30083,16 @@ license = [
 ]
 homepage = "https://github.com/alex289/whs-typst-templates"
 
+[modern-wku-thesis."0.1.3"]
+url = "https://packages.typst.org/preview/modern-wku-thesis-0.1.3.tar.gz"
+hash = "sha256-5MPHjMKBccFv6aChguBw7WvmwTHkSxwyZf9n+aRhx4I="
+typstDeps = []
+description = "Graduate thesis template at Wenzhou-Kean University Computer Science and Mathematics department"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/timmycheng/modern-wku-thesis"
+
 [modern-wku-thesis."0.1.2"]
 url = "https://packages.typst.org/preview/modern-wku-thesis-0.1.2.tar.gz"
 hash = "sha256-aPA8fg7i/54tDdKPe+e9Qmin8z9xjit/y+B8ar/hjyU="
@@ -29436,6 +30445,15 @@ license = [
 ]
 homepage = "https://github.com/jxpeng98/typst-coverletter"
 
+[modernpro-cv."2.1.0"]
+url = "https://packages.typst.org/preview/modernpro-cv-2.1.0.tar.gz"
+hash = "sha256-zpaYIiWH86UyNz2WuV8aaYsf5+w0XNbmohPQ5/lM4OI="
+typstDeps = []
+description = "A clean, modern CV template for academic and professional applications"
+license = [
+    "MIT",
+]
+
 [modernpro-cv."2.0.0"]
 url = "https://packages.typst.org/preview/modernpro-cv-2.0.0.tar.gz"
 hash = "sha256-1ZA1sOlbtJApd4swq4b6vARghA4YIRcyj2I3wFHZAX8="
@@ -29570,6 +30588,22 @@ license = [
 ]
 homepage = "https://github.com/Universitaet-Bremen/typst-template-slides"
 
+[molchemist."0.1.5"]
+url = "https://packages.typst.org/preview/molchemist-0.1.5.tar.gz"
+hash = "sha256-B2mZ12myWfXec14EYYmH10kS48uIYdU8h8svE/VQkPo="
+typstDeps = [
+    "alchemist_0_2_0",
+    "cetz_0_5_2",
+]
+description = "Render chemical structures from Molfile, SDF, and SMILES data"
+license = [
+    "MIT",
+    "BSD-3-Clause",
+    "Apache-2.0",
+    "LLVM-exception",
+]
+homepage = "https://github.com/rice8y/molchemist"
+
 [molchemist."0.1.4"]
 url = "https://packages.typst.org/preview/molchemist-0.1.4.tar.gz"
 hash = "sha256-bq8+Y3+t4A5mnGSlO7/suMNm71+CLM5OWXVjGB6ciA4="
@@ -29637,6 +30671,18 @@ license = [
 ]
 homepage = "https://github.com/rice8y/molchemist"
 
+[molfig."0.1.4"]
+url = "https://packages.typst.org/preview/molfig-0.1.4.tar.gz"
+hash = "sha256-15B0BSNBMmP1gUPQ9VzmTxopK9rOOK7Hgyxnh53uSYw="
+typstDeps = [
+    "maquette_0_1_3",
+]
+description = "Render molecular structures through maquette"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/rice8y/molfig"
+
 [molfig."0.1.3"]
 url = "https://packages.typst.org/preview/molfig-0.1.3.tar.gz"
 hash = "sha256-xnmdzWKTq5v/wbSOq9rBxkRpoRQFuaxcuSoJiZM61KU="
@@ -29711,6 +30757,16 @@ license = [
 ]
 homepage = "https://github.com/SillyFreak/typst-moodular"
 
+[mosaic."0.0.1"]
+url = "https://packages.typst.org/preview/mosaic-0.0.1.tar.gz"
+hash = "sha256-wkRVjD3tJNXoUM9EdZZR5fg9hbV3Ia2GgwOPMg6e3PE="
+typstDeps = []
+description = "Build slide decks with themes, layouts, and components"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/vincentarelbundock/mosaic"
+
 [mousse-notes."1.1.0"]
 url = "https://packages.typst.org/preview/mousse-notes-1.1.0.tar.gz"
 hash = "sha256-FAyLs78XRXsFYg7Zek1SZGUk66Y4Jrsd/+I7hRNnqcY="
@@ -29731,6 +30787,22 @@ license = [
 ]
 homepage = "https://github.com/dogeystamp/mousse-notes"
 
+[moustaches."0.1.0"]
+url = "https://packages.typst.org/preview/moustaches-0.1.0.tar.gz"
+hash = "sha256-I990FoJ5qQu2qqrOanmN8SibtTQXUMyAAdKOepSKeaY="
+typstDeps = [
+    "cetz_0_5_2",
+    "cetz-plot_0_1_4",
+    "codly_1_3_0",
+    "tidy_0_4_3",
+    "tiptoe_0_4_0",
+]
+description = "Statistiques françaises (tableaux et diagrammes"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Akilon27/moustaches"
+
 [mrbogo-cv."1.0.5"]
 url = "https://packages.typst.org/preview/mrbogo-cv-1.0.5.tar.gz"
 hash = "sha256-i0D7aXG5KaoQYoPHFcCtN/au7P+Z7OqtdRgYE7FXoFg="
@@ -30004,6 +31076,25 @@ license = [
 ]
 homepage = "https://github.com/Enter-tainer/natrix"
 
+[navigator."0.1.7"]
+url = "https://packages.typst.org/preview/navigator-0.1.7.tar.gz"
+hash = "sha256-2Wv1MMcefPTOoxjRZZsyLx5NSFzP24iY45hoRZQIoPY="
+typstDeps = [
+    "diatypst_0_9_3",
+    "mosaic_0_0_1",
+    "navigator_0_1_6",
+    "polylux_0_4_0",
+    "presentate_0_2_6",
+    "slydekit_0_1_0",
+    "touying_0_7_4",
+    "typslides_1_3_4",
+]
+description = "Navigation tools for presentations"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/eusebe/typst-navigator"
+
 [navigator."0.1.6"]
 url = "https://packages.typst.org/preview/navigator-0.1.6.tar.gz"
 hash = "sha256-6QZ7Aluf0iVJnZlHSLxLm0/CDFLRQlxBZVIXyRNm4QY="
@@ -30447,6 +31538,16 @@ license = [
     "MIT",
 ]
 
+[nexus-tools."0.3.0"]
+url = "https://packages.typst.org/preview/nexus-tools-0.3.0.tar.gz"
+hash = "sha256-LC+4IEAfTwkBcyIjRft3ix8qKHgm/WAMAdItsziMZ2o="
+typstDeps = []
+description = "Faster and easier development using commonly used features"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/mayconfmelo/nexus-tools"
+
 [nexus-tools."0.2.0"]
 url = "https://packages.typst.org/preview/nexus-tools-0.2.0.tar.gz"
 hash = "sha256-8wsKzL2WIFRjUfxc8sle1BgNqJEk1c+EEo+kDd9VHgg="
@@ -31318,6 +32419,38 @@ license = [
 ]
 homepage = "https://github.com/nutthead/nutthead-ebnf.typ"
 
+[oak-grove."0.1.0"]
+url = "https://packages.typst.org/preview/oak-grove-0.1.0.tar.gz"
+hash = "sha256-3CGleUT/j7VXF2+gy/pp6wJz1uF93TnZcQB1Ks1Z3hg="
+typstDeps = [
+    "elembic_1_1_1",
+]
+description = "Create problem sets with support for multiple solutions, tags, links and code"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/alex-touza/oak-grove"
+
+[oasis-align."0.4.1"]
+url = "https://packages.typst.org/preview/oasis-align-0.4.1.tar.gz"
+hash = "sha256-/vdGaO6cpnfN2lL5MrwgRWnGNDiHuw70IcB2v79+OSQ="
+typstDeps = []
+description = "Cleanly place content side by side with equal heights using automatic content sizing"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/jdpieck/oasis-align"
+
+[oasis-align."0.4.0"]
+url = "https://packages.typst.org/preview/oasis-align-0.4.0.tar.gz"
+hash = "sha256-lVCcXXgC3QJYhOAgFoss/YARpnKxXbgE8yZhDEUDZFo="
+typstDeps = []
+description = "Cleanly place content side by side with equal heights using automatic content sizing"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/jdpieck/oasis-align"
+
 [oasis-align."0.3.3"]
 url = "https://packages.typst.org/preview/oasis-align-0.3.3.tar.gz"
 hash = "sha256-i1zZnVEGn5966680C1HU8l48O7Dp3UIcliCuV21JOVY="
@@ -32158,6 +33291,17 @@ license = [
 ]
 homepage = "https://github.com/PgBiel/typst-oxifmt"
 
+[packrat."0.1.0"]
+url = "https://packages.typst.org/preview/packrat-0.1.0.tar.gz"
+hash = "sha256-bToVJQHMjdua1MAXE+eejZ3QTE2fsjjE+We84HUg2HM="
+typstDeps = []
+description = "Decode and extraction functions"
+license = [
+    "MIT",
+    "Apache-2.0",
+]
+homepage = "https://github.com/T1mVo/packrat"
+
 [paddling-tongji-thesis."0.1.1"]
 url = "https://packages.typst.org/preview/paddling-tongji-thesis-0.1.1.tar.gz"
 hash = "sha256-Td3duVmDepTzdrAo8nJNF1n8fsu8oTt45kNFvAkHNi8="
@@ -32514,6 +33658,18 @@ license = [
 ]
 homepage = "https://github.com/ZaninDavide/patatrac"
 
+[patstdlib."0.3.3"]
+url = "https://packages.typst.org/preview/patstdlib-0.3.3.tar.gz"
+hash = "sha256-Js72dhe1TijH8n8Mx+/0cJXn2EozyLRLpSof1AHh4bo="
+typstDeps = [
+    "algorithmic_1_0_7",
+]
+description = "Some standard pieces I find useful: fonts, subfigures, algorithms, labeled enums, etc"
+license = [
+    "Apache-2.0",
+]
+homepage = "https://github.com/patrick-kidger/patstdlib"
+
 [patstdlib."0.3.2"]
 url = "https://packages.typst.org/preview/patstdlib-0.3.2.tar.gz"
 hash = "sha256-BtOxMjT9Mytk8PDqt4KScL3Lksf/Dhn+87uAvJ7359Y="
@@ -32597,6 +33753,18 @@ license = [
 ]
 homepage = "https://github.com/QuadnucYard/pavemat"
 
+[payqr-swiss."0.5.0"]
+url = "https://packages.typst.org/preview/payqr-swiss-0.5.0.tar.gz"
+hash = "sha256-Qf2EBpJkmxob7HMPTSDkHT4O3soxFVUTxjWf+BxcwIU="
+typstDeps = [
+    "tiaoma_0_3_0",
+]
+description = "A Swiss QR bill generator for Typst"
+license = [
+    "LGPL-3.0-only",
+]
+homepage = "https://github.com/philippdrebes/typst-payqr-swiss"
+
 [payqr-swiss."0.4.1"]
 url = "https://packages.typst.org/preview/payqr-swiss-0.4.1.tar.gz"
 hash = "sha256-eTih4Yh88VfUvnfDRj3OTspaoD68/iSES9gUITHNLMY="
@@ -32717,6 +33885,16 @@ license = [
 ]
 homepage = "https://github.com/thatfloflo/typst-pc-letter"
 
+[pdf-decorating."0.1.1"]
+url = "https://packages.typst.org/preview/pdf-decorating-0.1.1.tar.gz"
+hash = "sha256-EFKVRlRHLkHbvT+fcRTqQtVyzBQ7Q3wISsLf1ni8Rrs="
+typstDeps = []
+description = "PDF Web UI Library: CommonMark, GiHub Markup"
+license = [
+    "Apache-2.0",
+]
+homepage = "https://github.com/hackyardo/pdf-decorating"
+
 [pdf-decorating."0.1.0"]
 url = "https://packages.typst.org/preview/pdf-decorating-0.1.0.tar.gz"
 hash = "sha256-rvNMygnv9VLd4oOAs+FYnBG539GMkK8Zu4k8h7CzfkM="
@@ -33195,6 +34373,19 @@ license = [
 ]
 homepage = "https://gitlab.com/Jed_Hed/pf2e-typst"
 
+[phonokit."0.5.13"]
+url = "https://packages.typst.org/preview/phonokit-0.5.13.tar.gz"
+hash = "sha256-13CArOdlQd4AsYryatVXAPicOzaO5dCVtDyLWcyJF8A="
+typstDeps = [
+    "cetz_0_5_2",
+    "lilaq_0_6_0",
+]
+description = "A toolkit to create phonological representations"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/guilhermegarcia/phonokit"
+
 [phonokit."0.5.12"]
 url = "https://packages.typst.org/preview/phonokit-0.5.12.tar.gz"
 hash = "sha256-ISt6wnql7vm/9reI/nphaB4ZtfthhczAIQKsGijfHGU="
@@ -34008,6 +35199,40 @@ license = [
 ]
 homepage = "https://github.com/GiggleLiu/pixel-family"
 
+[pku-thesis-pass."0.3.1"]
+url = "https://packages.typst.org/preview/pku-thesis-pass-0.3.1.tar.gz"
+hash = "sha256-VqcNJuhRd5diZxNz/Jm9FLRbjDZsgyynGvAfsUowxvU="
+typstDeps = [
+    "codly_1_3_0",
+    "codly-languages_0_1_10",
+    "cuti_0_4_0",
+    "gb7714-bilingual_0_2_3",
+    "itemize_0_2_0",
+    "wordometer_0_1_5",
+]
+description = "北京大学学位论文模板（Peking University Thesis Template）"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/chuxinyuan/pku-thesis-pass"
+
+[pku-thesis-pass."0.3.0"]
+url = "https://packages.typst.org/preview/pku-thesis-pass-0.3.0.tar.gz"
+hash = "sha256-AMVSfzx1v1R+q5swvT+oqGYz6ZIv85E8Pdr8ByqQsBw="
+typstDeps = [
+    "codly_1_3_0",
+    "codly-languages_0_1_10",
+    "cuti_0_4_0",
+    "gb7714-bilingual_0_2_3",
+    "itemize_0_2_0",
+    "wordometer_0_1_5",
+]
+description = "北京大学学位论文模板（Peking University Thesis Template）"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/chuxinyuan/pku-thesis-pass"
+
 [pku-thesis-pass."0.2.0"]
 url = "https://packages.typst.org/preview/pku-thesis-pass-0.2.0.tar.gz"
 hash = "sha256-c1l0PjoHmCRrIhORYWZwuZkKpipSBYJfqUocDLpGH34="
@@ -34150,6 +35375,16 @@ license = [
 ]
 homepage = "https://github.com/sghng/pmetrika"
 
+[pointless-size."0.1.3"]
+url = "https://packages.typst.org/preview/pointless-size-0.1.3.tar.gz"
+hash = "sha256-eNzAXR6H6cBIa9ue89Z9f3Ve2a/yBPMq6YX1Ivm25/Q="
+typstDeps = []
+description = "中文字号的号数制及字体度量单位 Chinese size system (hào-system) and type-related measurements units"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/YDX-2147483647/typst-pointless-size"
+
 [pointless-size."0.1.2"]
 url = "https://packages.typst.org/preview/pointless-size-0.1.2.tar.gz"
 hash = "sha256-4ONS8ENcA0agL+32H+SlKOHdpXpbmy25TdugHaVNGCU="
@@ -34278,6 +35513,19 @@ license = [
     "MIT",
 ]
 
+[polycv."0.1.1"]
+url = "https://packages.typst.org/preview/polycv-0.1.1.tar.gz"
+hash = "sha256-r8MFS77jR9GYUT5OwmcEnFpThSXhJNWY3QMP9Rf3jxI="
+typstDeps = [
+    "fontawesome_0_6_2",
+    "jsonschemeyst_0_0_1",
+]
+description = "A data-driven, not-a-boring CV and cover-letter template"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/bbinet/polycv"
+
 [polylux."0.4.0"]
 url = "https://packages.typst.org/preview/polylux-0.4.0.tar.gz"
 hash = "sha256-bhceuU/TCLHCItOw0EPWUIm/fraa4YzVZxbgvIlqYtk="
@@ -34391,6 +35639,18 @@ license = [
     "MIT",
 ]
 
+[prefigure."0.1.0"]
+url = "https://packages.typst.org/preview/prefigure-0.1.0.tar.gz"
+hash = "sha256-yPAInPbzbPnf5gO6SAu68++oyHLlyiLrfiGyhcuYB8k="
+typstDeps = [
+    "xmlit_0_1_3",
+]
+description = "Author and render PreFigure mathematical diagrams"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/davidaustinm/prefigure"
+
 [preprintx."0.1.0"]
 url = "https://packages.typst.org/preview/preprintx-0.1.0.tar.gz"
 hash = "sha256-BiNhERcjuSbBkT53vlGAaBEfdMo/u0shTLRQMfgoyPw="
@@ -34574,6 +35834,36 @@ license = [
 ]
 homepage = "https://github.com/miawinter98/hdm-thesis"
 
+[primaviz."0.10.0"]
+url = "https://packages.typst.org/preview/primaviz-0.10.0.tar.gz"
+hash = "sha256-vaOFqXinnvPbiYtFC6tw1pwlTUzgTqub4YXXTIO4IlE="
+typstDeps = []
+description = "A charting library with 50+ chart types, 7 themes, and zero dependencies — built entirely with native primitives"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/phiat/primaviz"
+
+[primaviz."0.9.1"]
+url = "https://packages.typst.org/preview/primaviz-0.9.1.tar.gz"
+hash = "sha256-hP8rq/GVMXjgcgChvHdU7pcV2koE3RfnHjpQV28xgjU="
+typstDeps = []
+description = "A charting library with 50+ chart types, 7 themes, and zero dependencies — built entirely with native primitives"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/phiat/primaviz"
+
+[primaviz."0.9.0"]
+url = "https://packages.typst.org/preview/primaviz-0.9.0.tar.gz"
+hash = "sha256-g1Vq3IEHkRdaLiN76f9UH6en45S/P5/zwQ9Uguz0XP8="
+typstDeps = []
+description = "A charting library with 50+ chart types, 7 themes, and zero dependencies — built entirely with native primitives"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/phiat/primaviz"
+
 [primaviz."0.8.0"]
 url = "https://packages.typst.org/preview/primaviz-0.8.0.tar.gz"
 hash = "sha256-W4EDa/SL/UB/fGYhfWSpzwGzwZ6T8kLhyyN9xNJqghE="
@@ -34656,6 +35946,16 @@ license = [
 ]
 homepage = "https://github.com/Entze/prinzipien"
 
+[prismath."0.2.0"]
+url = "https://packages.typst.org/preview/prismath-0.2.0.tar.gz"
+hash = "sha256-N9Hwyu9WSFrfPCCaHYCVUdTtnvkZEb7JaE3Pv21w8fM="
+typstDeps = []
+description = "A mathematical brackets colorizer"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/3w36zj6/typst-prismath"
+
 [prismath."0.1.0"]
 url = "https://packages.typst.org/preview/prismath-0.1.0.tar.gz"
 hash = "sha256-O7PaP1OUcba6j5MBMOmggdPAQDsQkJT5O8RgjP6qfjs="
@@ -34698,6 +35998,18 @@ license = [
 ]
 homepage = "https://github.com/swaits/typst-collection"
 
+[probabilitree."0.1.3"]
+url = "https://packages.typst.org/preview/probabilitree-0.1.3.tar.gz"
+hash = "sha256-s4ULzdJBoSeEUh9hun4q4+peY7w9sEwDk6f3Yn1/3BU="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Draw n-ary probability trees on top of cetz"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/mmaunier/probabilitree"
+
 [problemst."0.1.2"]
 url = "https://packages.typst.org/preview/problemst-0.1.2.tar.gz"
 hash = "sha256-fWEd1e0+03XhbR/KSnCVpHfdzXE3MCNxQBThbijLbY0="
@@ -35888,6 +37200,26 @@ license = [
 ]
 homepage = "https://github.com/yusancky/railynx"
 
+[ratchet."0.0.4"]
+url = "https://packages.typst.org/preview/ratchet-0.0.4.tar.gz"
+hash = "sha256-68bRAbr+4vKS12zVEfnXRMtTswhP2an+uAuDRX8Ql5A="
+typstDeps = []
+description = "Improved numbering for figures, tables, equations, and custom figure kinds"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/An-314/ratchet"
+
+[ratchet."0.0.3"]
+url = "https://packages.typst.org/preview/ratchet-0.0.3.tar.gz"
+hash = "sha256-hPpT3IY4LbK3CUz2CZM6T0ae57dsemjq38+qPmXFMrQ="
+typstDeps = []
+description = "ratchet is a package for improved figure/table/equation/math.equation/custom-kind numbering"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/An-314/ratchet"
+
 [ratchet."0.0.1"]
 url = "https://packages.typst.org/preview/ratchet-0.0.1.tar.gz"
 hash = "sha256-c94QjS+FsGIFDtoBX1ov08S6uKj03W6YbxkzpMSAgBA="
@@ -36046,6 +37378,26 @@ license = [
 ]
 homepage = "https://github.com/sjfhsjfh/typst-relescope"
 
+[remetente."0.2.0"]
+url = "https://packages.typst.org/preview/remetente-0.2.0.tar.gz"
+hash = "sha256-jf+FCH2o7qb8sb9njUkIeh8TOX1fs+A6mCaAq0I8hCg="
+typstDeps = []
+description = "A professional letter template with a colored header band"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/apcamargo/remetente"
+
+[remetente."0.1.0"]
+url = "https://packages.typst.org/preview/remetente-0.1.0.tar.gz"
+hash = "sha256-t+RqK5PXQj6iUTVcYKEIyheTEvJ5h9wdz+IuHNYqKvk="
+typstDeps = []
+description = "A professional letter template with a colored header band"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/apcamargo/remetente"
+
 [rendercv."0.3.0"]
 url = "https://packages.typst.org/preview/rendercv-0.3.0.tar.gz"
 hash = "sha256-t9dhxjsBEZ5tZLwbvel4NNzZSE4MRAraZ/xjc5ZzO+s="
@@ -36154,6 +37506,16 @@ license = [
 ]
 homepage = "https://github.com/fky2015/resume-ng-typst"
 
+[resume-ofa."0.1.0"]
+url = "https://packages.typst.org/preview/resume-ofa-0.1.0.tar.gz"
+hash = "sha256-tw+esguYtapUGWxcW+ql0tLjbT8gCsvbyT8xfH0UhGw="
+typstDeps = []
+description = "Create concise, configurable curriculum vitae"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/aldrick-t/typst-resume-ofa"
+
 [retrofit."0.2.0"]
 url = "https://packages.typst.org/preview/retrofit-0.2.0.tar.gz"
 hash = "sha256-CFJM0ijykzXE5tYv1KYMhJHmkkzVLv/ubXepqqBSxCU="
@@ -36400,6 +37762,19 @@ license = [
 ]
 homepage = "https://github.com/solstice23/typst-ribbony"
 
+[ribon."0.1.0"]
+url = "https://packages.typst.org/preview/ribon-0.1.0.tar.gz"
+hash = "sha256-cqQP1lwB8r13fY+bZQsDpZ+gs+kQUSY/6SJ94BiP198="
+typstDeps = [
+    "codly_1_3_0",
+    "mantys_1_0_2",
+]
+description = "RNA secondary-structure visualization and analysis"
+license = [
+    "GPL-2.0-only",
+]
+homepage = "https://github.com/rice8y/ribon"
+
 [rich-counters."0.2.2"]
 url = "https://packages.typst.org/preview/rich-counters-0.2.2.tar.gz"
 hash = "sha256-anNF+VisQ0RKJn1M1/5wP/AlgQsmw2ifJk9jQ5Tj1MY="
@@ -36496,6 +37871,16 @@ license = [
 ]
 homepage = "https://github.com/hemisemidemipresent/riichinator"
 
+[rirekisho-ofa."0.1.0"]
+url = "https://packages.typst.org/preview/rirekisho-ofa-0.1.0.tar.gz"
+hash = "sha256-rsioOysrRzmgIcXHGc+cVi8RmvdXnY6MFmepm3pyKMA="
+typstDeps = []
+description = "Japanese rirekisho for role-focused job applications"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/aldrick-t/typst-rirekisho-ofa"
+
 [rivet."0.3.1"]
 url = "https://packages.typst.org/preview/rivet-0.3.1.tar.gz"
 hash = "sha256-T6vtAJ0SJnUQRikncfLW1tc2X0tHVRjFp+YFmLNym+E="
@@ -37005,6 +38390,16 @@ license = [
     "MIT",
 ]
 
+[sanity."0.1.0"]
+url = "https://packages.typst.org/preview/sanity-0.1.0.tar.gz"
+hash = "sha256-DZN7nuBbDkOV3CGuqN/7CVmMU/obTIroaEMcFGI+77Q="
+typstDeps = []
+description = "Find unreferenced figures, uncited sources and lost labels"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/techgustavo/sanity"
+
 [sano-presentation-template."1.0.0"]
 url = "https://packages.typst.org/preview/sano-presentation-template-1.0.0.tar.gz"
 hash = "sha256-RJGql4AhJal3CzuJi1Jgh19+wIIy2WM98xZjkAE2TKA="
@@ -37542,6 +38937,30 @@ license = [
 ]
 homepage = "https://github.com/bernsteining/scoryst"
 
+[scrawl."0.1.0"]
+url = "https://packages.typst.org/preview/scrawl-0.1.0.tar.gz"
+hash = "sha256-lVXueXXD7Pc4uBJX9GA3E2YTdccNFPtWlHLByDFx6Mg="
+typstDeps = []
+description = "Draw hand-sketched shapes with no plugin and no dependency"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/fergousA/scrawl"
+
+[scribbling-hm."0.1.10"]
+url = "https://packages.typst.org/preview/scribbling-hm-0.1.10.tar.gz"
+hash = "sha256-6LqRFWQfec0/WpxCAeYICi+aGB+6ljQT6lvxrYfoWZs="
+typstDeps = [
+    "datify_1_3_0",
+    "glossarium_0_5_10",
+    "zebraw_0_6_3",
+]
+description = "Unofficial thesis template for Munich University of Applied Sciences (Hochschule München"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/fine-seat/hm-typst-template"
+
 [scribbling-hm."0.1.9"]
 url = "https://packages.typst.org/preview/scribbling-hm-0.1.9.tar.gz"
 hash = "sha256-sp6RZGCZZ8i/qZJgLl/j+Q069yZPZ9UD60jfyJ75/cQ="
@@ -37699,6 +39118,20 @@ license = [
 ]
 homepage = "https://github.com/lentilus/typst-scribe"
 
+[scripst."1.1.2"]
+url = "https://packages.typst.org/preview/scripst-1.1.2.tar.gz"
+hash = "sha256-U/55C3aYfPbrnxNC3c4sYf2bk8jk8yFqaVXc7hZBc4U="
+typstDeps = [
+    "physica_0_9_8",
+    "ratchet_0_0_4",
+    "tablem_0_3_0",
+]
+description = "Scripst - A versatile scripting template for polished articles, reports, and books. 🚀"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/An-314/scripst"
+
 [scripst."1.1.1"]
 url = "https://packages.typst.org/preview/scripst-1.1.1.tar.gz"
 hash = "sha256-N9u+c35SB4NJjczmPQ1OZuCiBXkpXuDuDj/FyS0+WiU="
@@ -38503,6 +39936,16 @@ license = [
 ]
 homepage = "https://github.com/QzxTaqtaq/shit-typst-template"
 
+[shokumu-keirekisho-ofa."0.1.0"]
+url = "https://packages.typst.org/preview/shokumu-keirekisho-ofa-0.1.0.tar.gz"
+hash = "sha256-Zqt8aK3D9AIH2n5nsr5m5UGlCV28/d14BD5guPMdFtg="
+typstDeps = []
+description = "Japanese career history for role-focused applications"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/aldrick-t/typst-shokumu-keirekisho-ofa"
+
 [showman."0.1.2"]
 url = "https://packages.typst.org/preview/showman-0.1.2.tar.gz"
 hash = "sha256-3Ueq4axPi/YUoqI9yUUfiz7MXBQhxr1Vm+h6s7v0UoM="
@@ -39385,6 +40828,18 @@ license = [
 ]
 homepage = "https://github.com/Easecond/nwu-academic-year-paper"
 
+[simple-plot."1.1.0"]
+url = "https://packages.typst.org/preview/simple-plot-1.1.0.tar.gz"
+hash = "sha256-N+JCurbL2LU9p7FzmEVPoxvQkSp/WvGBBsUQVPfo660="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Simple, pgfplots-like function plotting for math and science"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-simple-plot"
+
 [simple-plot."1.0.0"]
 url = "https://packages.typst.org/preview/simple-plot-1.0.0.tar.gz"
 hash = "sha256-NixWVWCwUxjlTkZZISogVeKuPqOTLqV1AgY2EIajwbs="
@@ -39864,6 +41319,48 @@ license = [
 ]
 homepage = "https://github.com/Lukinhasram/slr8"
 
+[slydekit."0.3.0"]
+url = "https://packages.typst.org/preview/slydekit-0.3.0.tar.gz"
+hash = "sha256-jfr/wkT4G2AxYepBvx8s+kprIxs4jswhPhkVeR0v7ME="
+typstDeps = [
+    "cetz_0_5_2",
+    "fletcher_0_5_8",
+    "showybox_2_0_4",
+]
+description = "A package to easily create presentation slides"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/maucejo/slydekit"
+
+[slydekit."0.2.0"]
+url = "https://packages.typst.org/preview/slydekit-0.2.0.tar.gz"
+hash = "sha256-OtlULiYYN7VpS4SeMZVt5k9MkU1oOCvrQELJ7ZDzsEg="
+typstDeps = [
+    "cetz_0_5_2",
+    "fletcher_0_5_8",
+    "showybox_2_0_4",
+]
+description = "A package to easily create presentation slides"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/maucejo/slydekit"
+
+[slydekit."0.1.0"]
+url = "https://packages.typst.org/preview/slydekit-0.1.0.tar.gz"
+hash = "sha256-vWwgg+3KYApZl6Sj9xbTUQjyfvovub1i56dI2AwZWtc="
+typstDeps = [
+    "cetz_0_5_2",
+    "fletcher_0_5_8",
+    "showybox_2_0_4",
+]
+description = "A package to easily create presentation slides"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/maucejo/slydekit"
+
 [slydst."0.1.5"]
 url = "https://packages.typst.org/preview/slydst-0.1.5.tar.gz"
 hash = "sha256-koBCXklTJgihnbiIquI0/Gy4qK2oOFHT/bA8vMNnLj0="
@@ -40273,6 +41770,18 @@ license = [
 ]
 homepage = "https://codeberg.org/th1j5/typst-sos-ugent-style"
 
+[sourcecraft."0.1.0"]
+url = "https://packages.typst.org/preview/sourcecraft-0.1.0.tar.gz"
+hash = "sha256-4eJU0JGif9o6vjS8HBJidFVdnuj0QgT9DUY38tFDj+c="
+typstDeps = [
+    "cetz_0_5_0",
+]
+description = "UML Class Diagrams for Typst, built on CeTZ. Supports Java and Csharp syntax with pluggable grammars"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/typst-things/sourcecraft"
+
 [sourcerer."0.2.1"]
 url = "https://packages.typst.org/preview/sourcerer-0.2.1.tar.gz"
 hash = "sha256-WrNizB+4ZYOoIOlJxiuzaWqaI7htDzuGjJ5ZsmfxiAA="
@@ -40592,6 +42101,20 @@ license = [
 ]
 homepage = "https://github.com/SillyFreak/typst-stack-pointer"
 
+[stacked."0.1.0"]
+url = "https://packages.typst.org/preview/stacked-0.1.0.tar.gz"
+hash = "sha256-ZuDpFBxVGt7khgWVogMJiWYe4z8oiR/2mQFkwf8mDIs="
+typstDeps = [
+    "cetz_0_5_2",
+    "codly_1_3_0",
+    "tidy_0_4_3",
+]
+description = "Stacked cubes and dices"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Akilon27/stacked"
+
 [stagehand."0.1.0"]
 url = "https://packages.typst.org/preview/stagehand-0.1.0.tar.gz"
 hash = "sha256-gKT0JP+yAYFaBmt8b5wfAjQ0gyQB0NbCmXAcz3Yn+UQ="
@@ -41117,6 +42640,17 @@ license = [
 ]
 homepage = "https://github.com/loicfontaine/mse-master-thesis-typst"
 
+[structured-uib."0.2.0"]
+url = "https://packages.typst.org/preview/structured-uib-0.2.0.tar.gz"
+hash = "sha256-D/yaCizJHiBXpG4OQZe6qxcVZPCGi4/Lo9GLu/oCaYg="
+typstDeps = []
+description = "Lab report template for the course PHYS114 at the University of Bergen"
+license = [
+    "MIT",
+    "MIT-0",
+]
+homepage = "https://github.com/AugustinWinther/structured-uib"
+
 [structured-uib."0.1.0"]
 url = "https://packages.typst.org/preview/structured-uib-0.1.0.tar.gz"
 hash = "sha256-7grAe2JRSNF4FWqhvGcJ8eFEbIO8TYO+cqCEYncLl2E="
@@ -41174,6 +42708,16 @@ license = [
 ]
 homepage = "https://github.com/WannesMalfait/vub-huisstijl-typst/"
 
+[suboutline."0.3.1"]
+url = "https://packages.typst.org/preview/suboutline-0.3.1.tar.gz"
+hash = "sha256-tgTsYnlTTFyjiWIlgYy8XiDGal4bpjQE/lERkwf1a34="
+typstDeps = []
+description = "An outline function just for one section and nothing else"
+license = [
+    "GPL-3.0-only",
+]
+homepage = "https://github.com/sdiebolt/suboutline"
+
 [suboutline."0.3.0"]
 url = "https://packages.typst.org/preview/suboutline-0.3.0.tar.gz"
 hash = "sha256-k3sheGkdYqFHM5MPuZ4mo8DxDBKyCpafrTfvPZRz44M="
@@ -41261,6 +42805,16 @@ license = [
 ]
 homepage = "https://github.com/tingerrr/subpar"
 
+[sudo-docs."0.1.0"]
+url = "https://packages.typst.org/preview/sudo-docs-0.1.0.tar.gz"
+hash = "sha256-DQeW78JH01ERod+QZqNpEMol+EEXlrcSTCQnyR50G2c="
+typstDeps = []
+description = "A minimalist, code-centric template for Computer Science students"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/G0ldenPin/sudodocs"
+
 [sudokyst."0.1.0"]
 url = "https://packages.typst.org/preview/sudokyst-0.1.0.tar.gz"
 hash = "sha256-e1rVVTC+k+Jat14oJdCEVSIgtkInU5RWU/198Bnmr3s="
@@ -41447,6 +43001,18 @@ license = [
 ]
 homepage = "https://codeberg.org/alxsim/superb-pci"
 
+[supercharged-dhbw."3.5.0"]
+url = "https://packages.typst.org/preview/supercharged-dhbw-3.5.0.tar.gz"
+hash = "sha256-klBFbRB5lP3srVwSZmdFLZ8awLcp3/nbN6wkL7x1Gpc="
+typstDeps = [
+    "codelst_2_0_2",
+]
+description = "Unofficial Template for DHBW"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/DannySeidel/typst-dhbw-template"
+
 [supercharged-dhbw."3.4.1"]
 url = "https://packages.typst.org/preview/supercharged-dhbw-3.4.1.tar.gz"
 hash = "sha256-Ft8gaJeJrRRmycdAB5S6a7M5/G1mU0E7Zq7zZgGMpAo="
@@ -42450,6 +44016,16 @@ license = [
     "MIT-0",
 ]
 
+[taskize."0.2.9"]
+url = "https://packages.typst.org/preview/taskize-0.2.9.tar.gz"
+hash = "sha256-iBwYxBsiiOG8rPKUco6aJTbLI9yNvKgGaeyAAbTSnCA="
+typstDeps = []
+description = "Horizontal and vertical columned lists for exercises and tasks, similar to LaTeX's tasks package"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/nathan-ed/typst-package-taskize"
+
 [taskize."0.2.8"]
 url = "https://packages.typst.org/preview/taskize-0.2.8.tar.gz"
 hash = "sha256-yM/CiMokvSNTMtTNZVy1BQVIdj8sq1og36k4gX7SBRQ="
@@ -42702,6 +44278,18 @@ license = [
 ]
 homepage = "https://github.com/tshort/tblr"
 
+[tcdm."0.0.4"]
+url = "https://packages.typst.org/preview/tcdm-0.0.4.tar.gz"
+hash = "sha256-5Jo/j+q4J/Sv/G+xkWMOcPbiWgDtCoR/SmrhVW+H9gM="
+typstDeps = [
+    "cmarker_0_1_10",
+]
+description = "HTML generator for best-of lists, especially Best of Typst (TCDM"
+license = [
+    "GPL-3.0-or-later",
+]
+homepage = "https://github.com/YDX-2147483647/best-of-typst"
+
 [tcdm."0.0.3"]
 url = "https://packages.typst.org/preview/tcdm-0.0.3.tar.gz"
 hash = "sha256-s0um1oXydl9zKaJKOEqvNiDYQ/rliHG00sqK93Dnr4g="
@@ -42940,6 +44528,18 @@ license = [
 ]
 homepage = "https://gitlab.com/SolidTux/teig"
 
+[telepresentation."0.1.0"]
+url = "https://packages.typst.org/preview/telepresentation-0.1.0.tar.gz"
+hash = "sha256-pnVnmlzEd6h1eWa45AIBgxfBYl+siirkdZ12e5CG6LE="
+typstDeps = [
+    "touying_0_7_3",
+]
+description = "Télécom Paris themed Touying presentation template"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/ameneceur/tp_slides_template"
+
 [telereport."0.1.0"]
 url = "https://packages.typst.org/preview/telereport-0.1.0.tar.gz"
 hash = "sha256-dVi4ByiMQ2CKIugdYB1jrtaTxOI2cf9l7VuCb7yAqi0="
@@ -43379,6 +44979,46 @@ license = [
 ]
 homepage = "https://github.com/Danila-Bain/typst-theorems"
 
+[theoframe."0.3.7"]
+url = "https://packages.typst.org/preview/theoframe-0.3.7.tar.gz"
+hash = "sha256-eVeUcv0f3zBXs17RIV2GSrAIGfIWCUkVvm7/v00+MGs="
+typstDeps = []
+description = "A theorem environment package developed by an amateur, use with caution"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hexiongwu1995/typst-theoframe"
+
+[theoframe."0.3.6"]
+url = "https://packages.typst.org/preview/theoframe-0.3.6.tar.gz"
+hash = "sha256-SlTJvilrE34vqGBqK9TRt+RMNmh+gGgocWyk+0qNQLI="
+typstDeps = []
+description = "A theorem environment package developed by an amateur, use with caution"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hexiongwu1995/typst-theoframe"
+
+[theoframe."0.3.5"]
+url = "https://packages.typst.org/preview/theoframe-0.3.5.tar.gz"
+hash = "sha256-igOv6tjVOOAFLzxjbepV5Gdfj8T9ZazKb1HwHQpqaz0="
+typstDeps = []
+description = "A theorem environment package developed by an amateur, use with caution"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hexiongwu1995/typst-theoframe"
+
+[theoframe."0.3.0"]
+url = "https://packages.typst.org/preview/theoframe-0.3.0.tar.gz"
+hash = "sha256-/RYmcePFoDcV/k8f8p0E42BjMWQXnFzTFvOUb6D+BM8="
+typstDeps = []
+description = "A theorem environment package developed by an amateur, use with caution"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hexiongwu1995/typst-theoframe"
+
 [theoframe."0.2.0"]
 url = "https://packages.typst.org/preview/theoframe-0.2.0.tar.gz"
 hash = "sha256-/RXGTDLtwFS+/kMoUUNIAWkkz8b+7/UByhhnd7jPvNk="
@@ -44115,6 +45755,16 @@ license = [
 ]
 homepage = "https://github.com/bastienvoirin/tierpist"
 
+[timble."1.3.0"]
+url = "https://packages.typst.org/preview/timble-1.3.0.tar.gz"
+hash = "sha256-TFouSrj/zdmpIO/MVStBks9qQRPirmkrO/AigAqsn6s="
+typstDeps = []
+description = "Draw and style precise time tables with ease"
+license = [
+    "MPL-2.0",
+]
+homepage = "https://github.com/Mambouna/timble"
+
 [timble."1.2.1"]
 url = "https://packages.typst.org/preview/timble-1.2.1.tar.gz"
 hash = "sha256-JtupUQnvkwJ8ls6xWHCE7EjnPtscsW2WT+aA4ppH85E="
@@ -46051,6 +47701,19 @@ license = [
 ]
 homepage = "https://github.com/leichaol/touying-simpl-swufe"
 
+[touying-simpres."0.2.0"]
+url = "https://packages.typst.org/preview/touying-simpres-0.2.0.tar.gz"
+hash = "sha256-BxnpSmto5fK7q6Z9QBxajbMq+dVS+UQFC8KcUXlVcds="
+typstDeps = [
+    "cetz_0_5_2",
+    "touying_0_7_4",
+]
+description = "Presentation template for education and business"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/thy0s/touying-simpres"
+
 [touying-simpres."0.1.0"]
 url = "https://packages.typst.org/preview/touying-simpres-0.1.0.tar.gz"
 hash = "sha256-7qM/g5d1/4i3gJ8oU8A5PMyu4+e5Nsk+DgyaA5y6xOM="
@@ -46337,6 +48000,16 @@ license = [
 ]
 homepage = "https://github.com/coli-saar/tracl"
 
+[transl."0.2.1"]
+url = "https://packages.typst.org/preview/transl-0.2.1.tar.gz"
+hash = "sha256-7zMY3A8QncLVyinMvPO+uk5j0rw1t7NU6mKBQpMpBuA="
+typstDeps = []
+description = "Easy and simple translations for words and expressions, with support for localization"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/mayconfmelo/transl"
+
 [transl."0.2.0"]
 url = "https://packages.typst.org/preview/transl-0.2.0.tar.gz"
 hash = "sha256-kvRaIz+ZQnpoEOd5lKuvmgoACTiHY1eOHtSkrLQfWDA="
@@ -47332,6 +49005,56 @@ license = [
 ]
 homepage = "https://github.com/GeronimoCastano/typed-dsa"
 
+[typed-physics."0.1.1"]
+url = "https://packages.typst.org/preview/typed-physics-0.1.1.tar.gz"
+hash = "sha256-UmOKpRLrRd5KnaflE2c0YNJNpFCTP6LF4naKAJ54AtE="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Declare mechanics and DC circuit systems and derive consistent physics diagrams and mechanics solutions"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/GeronimoCastano/typed-physics"
+
+[typed-physics."0.1.0"]
+url = "https://packages.typst.org/preview/typed-physics-0.1.0.tar.gz"
+hash = "sha256-ReLYl549BMpoTvMSezAUczSI63qHvEX5mKS+m/ZyF7g="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Declare mechanics and DC circuit systems and derive consistent physics diagrams and mechanics solutions"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/GeronimoCastano/typed-physics"
+
+[typed-scores."0.5.0"]
+url = "https://packages.typst.org/preview/typed-scores-0.5.0.tar.gz"
+hash = "sha256-1kwqFCXEspJKs1+GNocTopijy7Q8zB0bu/mciNGgd2o="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Engrave western music notation from compact note text, powered by a Rust parser and Bravura glyphs"
+license = [
+    "MIT",
+    "OFL-1.1",
+]
+homepage = "https://github.com/GeronimoCastano/typed-scores"
+
+[typed-scores."0.4.0"]
+url = "https://packages.typst.org/preview/typed-scores-0.4.0.tar.gz"
+hash = "sha256-XWmkswIIRUvn5uLea7xRCwQQFuUoO65wL4YOMXilD+0="
+typstDeps = [
+    "cetz_0_5_2",
+]
+description = "Engrave western music notation from compact note text, powered by a Rust parser and Bravura glyphs"
+license = [
+    "MIT",
+    "OFL-1.1",
+]
+homepage = "https://github.com/GeronimoCastano/typed-scores"
+
 [typed-scores."0.3.0"]
 url = "https://packages.typst.org/preview/typed-scores-0.3.0.tar.gz"
 hash = "sha256-6QADL3Cdt+5P1dFQzzaGVaiYn99mjZ0bDXFXXa7ziPs="
@@ -47371,6 +49094,19 @@ license = [
 ]
 homepage = "https://github.com/GeronimoCastano/typed-scores"
 
+[typed-smiles."0.11.0"]
+url = "https://packages.typst.org/preview/typed-smiles-0.11.0.tar.gz"
+hash = "sha256-XfDl/AwLhyw0iWG5MntzPpUql/Kir0HGXqOI/BXZlos="
+typstDeps = [
+    "cetz_0_5_2",
+    "chemformula_0_1_3",
+]
+description = "Render SMILES strings as molecular diagrams"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/GeronimoCastano/typed-smiles"
+
 [typed-smiles."0.10.0"]
 url = "https://packages.typst.org/preview/typed-smiles-0.10.0.tar.gz"
 hash = "sha256-0Md6sYgKjNgORhrbelYoEAOZWwDvi2eIl8L9Q35PO8g="
@@ -47586,6 +49322,16 @@ license = [
 ]
 homepage = "https://github.com/C4illin/typewind"
 
+[typhoon."0.2.0"]
+url = "https://packages.typst.org/preview/typhoon-0.2.0.tar.gz"
+hash = "sha256-1k/7jBEAjKJK1EAU4ZTY8nhzQHaIoQtDah1Vyxhji+o="
+typstDeps = []
+description = "TailwindCSS for HTML exports"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/wensimehrp/tailwindcss-typst"
+
 [typhoon."0.1.2"]
 url = "https://packages.typst.org/preview/typhoon-0.1.2.tar.gz"
 hash = "sha256-rahgNOjqKXdDHJKuuLfBoIET7QiF9aK0pU6MzIQAu4Y="
@@ -47636,6 +49382,48 @@ license = [
 ]
 homepage = "https://github.com/rice8y/typixel"
 
+[typograph."0.2.1"]
+url = "https://packages.typst.org/preview/typograph-0.2.1.tar.gz"
+hash = "sha256-uCFF36F8hOBciTs4Sns+RTLywBPibulHP7vmCEVDxeU="
+typstDeps = []
+description = "Draw unopinionated diagrams: nodes, edges, curves, ports"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/BenCichos/typograph"
+
+[typograph."0.2.0"]
+url = "https://packages.typst.org/preview/typograph-0.2.0.tar.gz"
+hash = "sha256-J7FmZozfCnIibqZV4YlYY2Q/3fiVj62IPYcUo//ziBw="
+typstDeps = []
+description = "Draw unopinionated diagrams: nodes, edges, curves, ports"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/BenCichos/typograph"
+
+[typograph."0.1.0"]
+url = "https://packages.typst.org/preview/typograph-0.1.0.tar.gz"
+hash = "sha256-RJv4IYYeEvco3e7JmvgK7HbZ5vdvV9kBhK6JxNsHf+o="
+typstDeps = []
+description = "Draw unopinionated diagrams: nodes, edges, curves, ports"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/BenCichos/typograph"
+
+[typograph-zx."0.1.0"]
+url = "https://packages.typst.org/preview/typograph-zx-0.1.0.tar.gz"
+hash = "sha256-Jin53BG8ytq4IHWnsUlOslHauDxfUffOCgaaUxjgUEk="
+typstDeps = [
+    "typograph_0_1_0",
+]
+description = "Add ZX-calculus and continuous-variable ZX-calculus notation to typograph"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/BenCichos/typograph-zx"
+
 [typographic-resume."0.2.0"]
 url = "https://packages.typst.org/preview/typographic-resume-0.2.0.tar.gz"
 hash = "sha256-T7ihhyNdlyXEDeihjugz+q7R2JVCEe0BxqISImDSMrY="
@@ -47947,6 +49735,16 @@ license = [
 ]
 homepage = "https://github.com/Typsium/typsium-atomic"
 
+[typsium-ghs."0.1.2"]
+url = "https://packages.typst.org/preview/typsium-ghs-0.1.2.tar.gz"
+hash = "sha256-ch2gEIXtOtR63y2NFKnAx8qEYO5ZSz0v/dl8eiSbQ7w="
+typstDeps = []
+description = "Display and format Hazard & Precautionary statements and GHS pictograms"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Typsium/typsium-ghs"
+
 [typsium-ghs."0.1.1"]
 url = "https://packages.typst.org/preview/typsium-ghs-0.1.1.tar.gz"
 hash = "sha256-P87Rqy0yj7+QIisDxWqY7PagKC8/stWfspl7IOe4xZg="
@@ -47967,6 +49765,16 @@ license = [
 ]
 homepage = "https://github.com/Typsium/typsium-ghs"
 
+[typsium-iso-7010."0.1.2"]
+url = "https://packages.typst.org/preview/typsium-iso-7010-0.1.2.tar.gz"
+hash = "sha256-8sDI0hqS0idNiWJTsSzS1Ukqo2uH1bPdyY3dO7sjRiA="
+typstDeps = []
+description = "Display Warning signs, Fire signs, Emergency signs, Mandatory signs, Prohibited signs following the ISO 7010 standard"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Typsium/typsium-iso-7010"
+
 [typsium-iso-7010."0.1.1"]
 url = "https://packages.typst.org/preview/typsium-iso-7010-0.1.1.tar.gz"
 hash = "sha256-YOsEuq72TmziEZ+cPrnZsh6XN42dyy/KuTELy7gITWU="
@@ -48117,6 +49925,16 @@ license = [
 ]
 homepage = "https://github.com/jrossi/typst-wasm-sqlite"
 
+[typsy."0.2.5"]
+url = "https://packages.typst.org/preview/typsy-0.2.5.tar.gz"
+hash = "sha256-tFglzByBAmS1HmQ56Nfy/Pw7kU37XCpw8zcMQoAAICU="
+typstDeps = []
+description = "Classes/structs, pattern matching, safe counters... and more! Your one-stop library for programming tools not already in core Typst"
+license = [
+    "Apache-2.0",
+]
+homepage = "https://github.com/patrick-kidger/typsy"
+
 [typsy."0.2.4"]
 url = "https://packages.typst.org/preview/typsy-0.2.4.tar.gz"
 hash = "sha256-FDaS0m0h6BpArRr3EM5WSz+Ixfkjru83k/deKxha8mg="
@@ -48303,6 +50121,26 @@ license = [
 ]
 homepage = "https://github.com/angelonazzaro/typxidian"
 
+[u3tudo."0.2.0"]
+url = "https://packages.typst.org/preview/u3tudo-0.2.0.tar.gz"
+hash = "sha256-zsxM9Z2i7TJSGYylBIEB0c8EFqLQ0P63zL7FWgbvYvE="
+typstDeps = []
+description = "PhD theses at TU Dortmund University"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/jannisspeer/u3tudo"
+
+[u3tudo."0.1.0"]
+url = "https://packages.typst.org/preview/u3tudo-0.1.0.tar.gz"
+hash = "sha256-HbzSUGDdiRaKztFnorl13NfsPIV2Efl8mN3ckRQqNtA="
+typstDeps = []
+description = "PhD theses at TU Dortmund University"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/jannisspeer/u3tudo"
+
 [uastw-thesis."0.1.0"]
 url = "https://packages.typst.org/preview/uastw-thesis-0.1.0.tar.gz"
 hash = "sha256-OSB1L2Y2+f1qFKig4HdRJhfBWQHbZVF5dHrG9j1f9R4="
@@ -48445,6 +50283,16 @@ license = [
 ]
 homepage = "https://github.com/fepfitra/ugm-presentation-unofficial"
 
+[ukw-bipg-unofficial-thesis."0.1.0"]
+url = "https://packages.typst.org/preview/ukw-bipg-unofficial-thesis-0.1.0.tar.gz"
+hash = "sha256-lUf7mKxc5vDe8KXUQ8trR/7EECz1dAQSk7XkZY/7t6k="
+typstDeps = []
+description = "Template for Bachelor’s and Master’s Theses in accordance with the Graduation Regulations for the Game Research and Design program (Kazimierz Wielki University in Bydgoszcz"
+license = [
+    "MIT-0",
+]
+homepage = "https://github.com/ironupiwada/unofficial-ukw-thesis"
+
 [umbra."0.1.1"]
 url = "https://packages.typst.org/preview/umbra-0.1.1.tar.gz"
 hash = "sha256-jWwsmOcVIPdlYkTHHCkViz4NqPM8KjqfHnQUQZxgiPQ="
@@ -48868,6 +50716,33 @@ license = [
 ]
 homepage = "https://github.com/islatri/universal-jlu-thesis"
 
+[universal-tongji-thesis."0.1.0"]
+url = "https://packages.typst.org/preview/universal-tongji-thesis-0.1.0.tar.gz"
+hash = "sha256-olkLU/OfIx/8Rn65Nnf6rk+k8VbsifJSnLunMw35KVc="
+typstDeps = [
+    "a2c-nums_0_0_1",
+    "cetz_0_3_4",
+    "cheq_0_4_0",
+    "cuti_0_2_1",
+    "cuti_0_4_0",
+    "hydra_0_6_2",
+    "i-figured_0_1_0",
+    "i-figured_0_2_4",
+    "numbly_0_1_0",
+    "outrageous_0_3_0",
+    "pinit_0_1_3",
+    "pointless-size_0_1_2",
+    "tablex_0_0_8",
+    "wordometer_0_1_4",
+    "zh-format_0_1_0",
+    "zh-kit_0_1_0",
+]
+description = "同济大学学位论文模板。Tongji University Thesis Template"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/xialugui/universal-tongji-thesis"
+
 [uniwarn."0.1.1"]
 url = "https://packages.typst.org/preview/uniwarn-0.1.1.tar.gz"
 hash = "sha256-sTGerNf9eBuuvl20yytfvQulfWiU5gtPZOB6GK0M0ho="
@@ -51144,6 +53019,16 @@ license = [
 ]
 homepage = "https://github.com/ZaninDavide/wicked"
 
+[wired-ieee."1.0.1"]
+url = "https://packages.typst.org/preview/wired-ieee-1.0.1.tar.gz"
+hash = "sha256-EDsDt0QRCen/PRHuUvAkBxEfxDVy1JVm9osLsLFqloQ="
+typstDeps = []
+description = "A multilanguage template for writing academic papers in the IEEE style"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/hugoocoto/wired-ieee"
+
 [wired-ieee."1.0.0"]
 url = "https://packages.typst.org/preview/wired-ieee-1.0.0.tar.gz"
 hash = "sha256-teY5aErfmWd6qQBR4QXf/5ZJthBARQkHnhnXPOCYRFs="
@@ -51560,6 +53445,16 @@ license = [
 ]
 homepage = "https://github.com/wardenxyz/xyznote"
 
+[xyzrender-rustyp."0.1.0"]
+url = "https://packages.typst.org/preview/xyzrender-rustyp-0.1.0.tar.gz"
+hash = "sha256-Bt7S/MeSwg+2AzOr/mlw88eRTRabFCp+S59WqK5+SQ4="
+typstDeps = []
+description = "Render XYZ molecular structures as publication-quality SVG graphics"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Typsium/xyzrender-rustyp"
+
 [yagenda."0.1.0"]
 url = "https://packages.typst.org/preview/yagenda-0.1.0.tar.gz"
 hash = "sha256-DqfJMlm2fX+mObaf5e+MSPj6xj70yhNLK3X3S/T7inI="
@@ -52107,6 +54002,16 @@ license = [
 ]
 homepage = "https://github.com/tomeichlersmith/zen-zine"
 
+[zero."0.7.0"]
+url = "https://packages.typst.org/preview/zero-0.7.0.tar.gz"
+hash = "sha256-3OztpnZLSobcF9DgTDr68nbFg3l0wrv5ADJo5WP2GOo="
+typstDeps = []
+description = "Precise scientific number and unit formatting"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Mc-Zen/zero"
+
 [zero."0.6.1"]
 url = "https://packages.typst.org/preview/zero-0.6.1.tar.gz"
 hash = "sha256-pwSOcua6iqs2tAiFn2kvYDCLhWdJWwj+p+8HR2MY6D8="
@@ -52207,6 +54112,19 @@ license = [
 ]
 homepage = "https://github.com/Mc-Zen/zero"
 
+[zero-calc."0.7.0"]
+url = "https://packages.typst.org/preview/zero-calc-0.7.0.tar.gz"
+hash = "sha256-jS28wS4n1/SdN5Nvh0SkSGaNohviy+mN2q08wdJhA+Q="
+typstDeps = [
+    "parsely_0_1_1",
+    "zero_0_7_0",
+]
+description = "Calculate and display operations with _Zero_ quantities and numbers"
+license = [
+    "MIT",
+]
+homepage = "https://github.com/Ants-Aare/zero-calc"
+
 [zh-format."0.1.0"]
 url = "https://packages.typst.org/preview/zh-format-0.1.0.tar.gz"
 hash = "sha256-OydCb8cQsUjj1GBpbB57pmNnkCWusm0JbJL9Ifl4kws="
diff --git a/pkgs/by-name/ve/verible/package.nix b/pkgs/by-name/ve/verible/package.nix
index d4a04d6ab80d..4914649da996 100644
--- a/pkgs/by-name/ve/verible/package.nix
+++ b/pkgs/by-name/ve/verible/package.nix
@@ -16,11 +16,11 @@ let
   registry = fetchFromGitHub {
     owner = "bazelbuild";
     repo = "bazel-central-registry";
-    rev = "3f863a3f35f31b61982d813835d8637b3d93d87a";
-    hash = "sha256-BsxP3GrS98ubIAkFx/c4pB1i97ZZL2TijS+2ORnooww=";
+    rev = "6d7a78e3bb927a52e3e2a5087729f9136d35c084";
+    hash = "sha256-qH4MYS12oKni1JMtZEm7KEpK68CSr3/45aWGmxaydEE=";
   };
-  GIT_DATE = "2025-08-29";
-  GIT_VERSION = "v0.0-4023-gc1271a00";
+  GIT_DATE = "2026-08-16";
+  GIT_VERSION = "v0.0-4148-g1ea007ec";
 in
 buildBazelPackage {
   pname = "verible";
@@ -46,7 +46,7 @@ buildBazelPackage {
     owner = "chipsalliance";
     repo = "verible";
     tag = GIT_VERSION;
-    hash = "sha256-N+yjRcVxFI56kP3zq+qFHNXZLTtVnQaVnseZS13YN0s=";
+    hash = "sha256-6mKnmIIGu7PX6dOelPW6/9dacpqFOtPEC/0wCraoEAQ=";
   };
 
   bazel = bazel_7;
@@ -65,9 +65,9 @@ buildBazelPackage {
     '';
     hash =
       {
-        aarch64-linux = "sha256-KsXrwRIiCft/WaT0uj28gOj5ahhTKxcaiosbY7Mo3JY=";
-        x86_64-linux = "sha256-X7/W2iOTXruRO2wx9J5tGYvy2IuZ6mXiRAmUI5Eq9Vc=";
-        aarch64-darwin = "sha256-XGDsePwK70cdF9tgtykezlJdbGnnwNSbeZlpM67PhPc=";
+        aarch64-linux = "sha256-1jEiJJycHZ2LybV13AUCXjUbUTY1ZhH09aG9oVzOEto=";
+        x86_64-linux = "sha256-RXji3oV9ccUfje8+i73w7dox9e4wZH3KADJ+YecFgL4=";
+        aarch64-darwin = "sha256-mQM82RlRIyLRZeo5vQh+Bm7W+1eCmwj9yEYRe9blJFg=";
       }
       .${system} or (throw "No hash for system: ${system}");
   };
diff --git a/pkgs/by-name/vu/vue-language-server/package.nix b/pkgs/by-name/vu/vue-language-server/package.nix
index 2b1abbe37723..b3dff276c236 100644
--- a/pkgs/by-name/vu/vue-language-server/package.nix
+++ b/pkgs/by-name/vu/vue-language-server/package.nix
@@ -18,13 +18,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "vue-language-server";
-  version = "3.3.10";
+  version = "3.3.11";
 
   src = fetchFromGitHub {
     owner = "vuejs";
     repo = "language-tools";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-3x3idLqfh3SiyyMWaCUencgvY82yjP2nTeOFASEBFbM=";
+    hash = "sha256-a8gs53zcq5qssqnxlMGjxfZaBICisdjqkLfzqZStPfQ=";
   };
 
   pnpmDeps = fetchPnpmDeps {
diff --git a/pkgs/by-name/wa/wakatime-cli/package.nix b/pkgs/by-name/wa/wakatime-cli/package.nix
index c7254b576b93..b5317d2821e2 100644
--- a/pkgs/by-name/wa/wakatime-cli/package.nix
+++ b/pkgs/by-name/wa/wakatime-cli/package.nix
@@ -9,13 +9,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "wakatime-cli";
-  version = "2.25.0";
+  version = "2.26.0";
 
   src = fetchFromGitHub {
     owner = "wakatime";
     repo = "wakatime-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-gbGI8mxB68O4s5q6c0wFQFKlwYOca/HkXzPX5sZPy5g=";
+    hash = "sha256-iZ5VzEncryr7rcPA9ly8Q4zlIvV78ytsTKXbIeYqTj4=";
   };
 
   vendorHash = "sha256-QSvd688wjKKnSSnHjlmXxgbT7xXl1hf/juhOLK1qWDw=";
diff --git a/pkgs/by-name/wa/wasmi/package.nix b/pkgs/by-name/wa/wasmi/package.nix
index 65e9e01b0aa7..953ed0e1bfca 100644
--- a/pkgs/by-name/wa/wasmi/package.nix
+++ b/pkgs/by-name/wa/wasmi/package.nix
@@ -3,21 +3,27 @@
   rustPlatform,
   fetchFromGitHub,
   nix-update-script,
+  testers,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "wasmi";
-  version = "1.1.0";
+  version = "2.0.0";
 
   src = fetchFromGitHub {
     owner = "wasmi-labs";
     repo = "wasmi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-54mZxX7ygmX93V3l1ZRqDdbGe5uk772GSaNmXnV3iEQ=";
+    hash = "sha256-oGuw8//jsmeTxwHli7EAy4+W/iB/kSW40DFLjObA4hg=";
     fetchSubmodules = true;
   };
 
-  cargoHash = "sha256-v38ThWgelSmxWLhOHqmJIbh1sisB1K56825ut/mZoMs=";
+  cargoHash = "sha256-QhSY6VGtpy2s7Dmp+cm65PCkM4zoeJ/ZrjjEGVWLgm4=";
+
+  passthru.tests.version = testers.testVersion {
+    package = finalAttrs.finalPackage;
+  };
+
   passthru.updateScript = nix-update-script { };
 
   meta = {
@@ -29,6 +35,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
       mit
     ];
     maintainers = with lib.maintainers; [ iamanaws ];
-    mainProgram = "wasmi_cli";
+    mainProgram = "wasmi";
   };
 })
diff --git a/pkgs/by-name/wa/wasmtime/package.nix b/pkgs/by-name/wa/wasmtime/package.nix
index b6a58c3bc924..e0283b048cb0 100644
--- a/pkgs/by-name/wa/wasmtime/package.nix
+++ b/pkgs/by-name/wa/wasmtime/package.nix
@@ -7,7 +7,9 @@
   cmake,
   installShellFiles,
   versionCheckHook,
+  _experimental-update-script-combinators,
   nix-update-script,
+  python3,
   enableShared ? !stdenv.hostPlatform.isStatic,
   enableStatic ? stdenv.hostPlatform.isStatic,
   variant ? "main",
@@ -20,12 +22,14 @@ let
       cargoHash = "sha256-2Nwcw3Z4/cbkRcG2hJ2/1PcXZf3vYB9NGUlr7pxdqzU=";
     };
     main = {
-      version = "48.0.0";
-      hash = "sha256-WGnDC7iTEK2eLD1rPIy2jgbrsamWT7fElRwoy+EZ0dg=";
-      cargoHash = "sha256-cYv+Ml8xgukxwnHVge6swtC0Ul5Vt2+diUini4C61eo=";
+      version = "48.0.1";
+      hash = "sha256-nvDiKIyo0/BmwjPTfNGIX1kSVVJQbmjjT4qed0dr8cc=";
+      cargoHash = "sha256-NVea5PiuFTr1NrIcyEJSq0gFf2XkDZj/VKubHwO34U4=";
     };
   };
   source = sources.${variant};
+  # there is no LTS version of python3Packages.wasmtime yet
+  hasPythonBinding = variant == "main";
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "wasmtime";
@@ -112,12 +116,24 @@ rustPlatform.buildRustPackage (finalAttrs: {
   doInstallCheck = true;
 
   passthru = {
-    updateScript = nix-update-script {
-      extraArgs = [
-        "--version-regex"
-        "^v(\\d+\\.\\d+\\.\\d+)$"
-      ];
+    tests = lib.optionalAttrs hasPythonBinding {
+      python3-wasmtime = python3.pkgs.wasmtime;
     };
+    updateScript = _experimental-update-script-combinators.sequence (
+      [
+        (nix-update-script {
+          extraArgs = [
+            "--version-regex"
+            "^v(\\d+\\.\\d+\\.\\d+)$"
+          ];
+        })
+      ]
+      ++ lib.optionals hasPythonBinding [
+        (nix-update-script {
+          attrPath = "python3.pkgs.wasmtime";
+        })
+      ]
+    );
   };
 
   meta = {
diff --git a/pkgs/by-name/we/webdav/package.nix b/pkgs/by-name/we/webdav/package.nix
index e00e1b7acaeb..4e2657c1f399 100644
--- a/pkgs/by-name/we/webdav/package.nix
+++ b/pkgs/by-name/we/webdav/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "webdav";
-  version = "5.15.0";
+  version = "5.15.1";
 
   src = fetchFromGitHub {
     owner = "hacdias";
     repo = "webdav";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-W3zvXL90I271FdapZggA6YMsqjbc6Umbqh/u5ly9FdQ=";
+    hash = "sha256-XN4GTerwdjJNmAf1gLjl/q+rmT2nBeQk3c6kX25Ij3Q=";
   };
 
   vendorHash = "sha256-k3616W8xjTCNZLCL38J4CcX272BhgpC59mUAWderIFM=";
diff --git a/pkgs/by-name/we/webdump/package.nix b/pkgs/by-name/we/webdump/package.nix
index 49b5aa52c996..1b7f442fdd14 100644
--- a/pkgs/by-name/we/webdump/package.nix
+++ b/pkgs/by-name/we/webdump/package.nix
@@ -5,12 +5,12 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "webdump";
-  version = "0.2";
+  version = "0.3";
 
   src = fetchgit {
     url = "git://git.codemadness.org/webdump";
     tag = finalAttrs.version;
-    hash = "sha256-YtgZkAnbQkIr2fhUYpSp/PaduuBFjxIkrkaROxrmT/0=";
+    hash = "sha256-XaqnFaCfTlzTkuMXrt1sQRCnO29yD1aCj/owmVAqDXU=";
   };
 
   makeFlags = [ "PREFIX=${placeholder "out"}" ];
diff --git a/pkgs/by-name/wh/wheelwizard/deps.json b/pkgs/by-name/wh/wheelwizard/deps.json
index 7bf77ef57451..c05736190f8e 100644
--- a/pkgs/by-name/wh/wheelwizard/deps.json
+++ b/pkgs/by-name/wh/wheelwizard/deps.json
@@ -1,13 +1,83 @@
 [
+  {
+    "pname": "Avalonia",
+    "version": "11.3.19",
+    "hash": "sha256-EGway3F6Tl0lzSkwSxs1M51+So2FLYATzmFpbKMfTo8="
+  },
   {
     "pname": "Avalonia.Angle.Windows.Natives",
     "version": "2.1.25547.20250602",
     "hash": "sha256-LE/lENAHptmz6t3T/AoJwnhpda+xs7PqriNGzdcfg8M="
   },
+  {
+    "pname": "Avalonia.BuildServices",
+    "version": "11.3.2",
+    "hash": "sha256-6wx06tjSKWQOlX2czdp6Wh0nuwVapx5qf/s8Qj5we40="
+  },
+  {
+    "pname": "Avalonia.Controls.ColorPicker",
+    "version": "11.3.19",
+    "hash": "sha256-QnfA//jQYgbBDXs2jJrN9YJiWpsO4tQE4XjGDr+fp9k="
+  },
+  {
+    "pname": "Avalonia.Desktop",
+    "version": "11.3.19",
+    "hash": "sha256-7g+zN4tNmPzTBNkn0hbZsVmdm1HwDOzueh1I2R5Ukzk="
+  },
+  {
+    "pname": "Avalonia.Diagnostics",
+    "version": "11.3.19",
+    "hash": "sha256-vfqHbr3lY0N3JtNzsSDocTweUZCDMC3GdephD+auAVM="
+  },
+  {
+    "pname": "Avalonia.Fonts.Inter",
+    "version": "11.3.19",
+    "hash": "sha256-I8XSj5FD2xKqvHGBtH94iIu8Ss9Z8rPTUxzUvH1o/GM="
+  },
+  {
+    "pname": "Avalonia.FreeDesktop",
+    "version": "11.3.19",
+    "hash": "sha256-RW6/OttET9amgIPWtdRYTzmP9kqYjjaAuoJu06Kqr4c="
+  },
   {
     "pname": "Avalonia.HtmlRenderer",
-    "version": "11.0.0",
-    "hash": "sha256-DBD113eQJNHeEgFmx/tVRSnHxhGBQIKWVKxr1QRilr4="
+    "version": "11.3.0",
+    "hash": "sha256-XkehE/clhBFmCiXUTs+yfIV88WetyU7c2VG8Dja/qT8="
+  },
+  {
+    "pname": "Avalonia.Native",
+    "version": "11.3.19",
+    "hash": "sha256-bhqN2D8jsCzHHO6yUIuiNSd+nkEizMbm2xHEP68+7xc="
+  },
+  {
+    "pname": "Avalonia.Remote.Protocol",
+    "version": "11.3.19",
+    "hash": "sha256-hNx/XxrjVKRTPHvv8cT+LjbKBqo5DpcFWJuZTZEES8k="
+  },
+  {
+    "pname": "Avalonia.Skia",
+    "version": "11.3.19",
+    "hash": "sha256-ry4KKgtAKsrhucNHjYSj7PF0qxBHCLHHAvD6UWFo1IQ="
+  },
+  {
+    "pname": "Avalonia.Themes.Fluent",
+    "version": "11.3.19",
+    "hash": "sha256-hJfWVexlTvDn1Y7aCnoOwZxZ9rP+H+DoOFZyCEcrn+s="
+  },
+  {
+    "pname": "Avalonia.Themes.Simple",
+    "version": "11.3.19",
+    "hash": "sha256-f+K768e6kjVUNkm3C0L8WEXAFMyilKUNA23aYfOQgnw="
+  },
+  {
+    "pname": "Avalonia.Win32",
+    "version": "11.3.19",
+    "hash": "sha256-PmKkRz0ddCQu/hSdPO5RccLndfkbYRj827Rx2vE+OK4="
+  },
+  {
+    "pname": "Avalonia.X11",
+    "version": "11.3.19",
+    "hash": "sha256-Cx2c35BZRgEJieDNQVdyJFxfaaj/cNBTqS30kJzhMQw="
   },
   {
     "pname": "CSharpier.MsBuild",
@@ -56,28 +126,33 @@
   },
   {
     "pname": "Microsoft.Extensions.AmbientMetadata.Application",
-    "version": "9.3.0",
-    "hash": "sha256-aTR4eSGHPWdbmVsmUYJ+qKEG1ah+zubpZyrM6jEqOEQ="
+    "version": "10.0.0",
+    "hash": "sha256-pznnQSjqLCDNeokCe1uY+ba96FmQOMCpxKOyy4RV4Pk="
   },
   {
     "pname": "Microsoft.Extensions.Caching.Abstractions",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-yc4xSH5JuFXsCka5A5FGuUtvgEIjyj1VDav8pZ52s3U="
+    "version": "10.0.0",
+    "hash": "sha256-IciARPnXx/S6HZc4t2ED06UyUwfZI9LKSzwKSGdpsfI="
   },
   {
     "pname": "Microsoft.Extensions.Caching.Memory",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-jLC6jhzDJTNcOMuwdaGEMaAKuftIMFnO+oPwjTcLNh0="
+    "version": "10.0.0",
+    "hash": "sha256-AMgDSm1k6q0s17spGtyR5q8nAqUFDOxl/Fe38f9M+d4="
   },
   {
     "pname": "Microsoft.Extensions.Compliance.Abstractions",
-    "version": "9.3.0",
-    "hash": "sha256-kTZy+spk9bbXIWXcL9PS42v8NkJc7XHVtRF+B10JOkA="
+    "version": "10.0.0",
+    "hash": "sha256-hs8iZwPXm/theHwy1wK0vhbSZ9sWx5D0BU+yMruAOTw="
   },
   {
     "pname": "Microsoft.Extensions.Configuration",
-    "version": "8.0.0",
-    "hash": "sha256-9BPsASlxrV8ilmMCjdb3TiUcm5vFZxkBnAI/fNBSEyA="
+    "version": "10.0.0",
+    "hash": "sha256-MsLskVPpkCvov5+DWIaALCt1qfRRX4u228eHxvpE0dg="
+  },
+  {
+    "pname": "Microsoft.Extensions.Configuration.Abstractions",
+    "version": "10.0.0",
+    "hash": "sha256-GcgrnTAieCV7AVT13zyOjfwwL86e99iiO/MiMOxPGG0="
   },
   {
     "pname": "Microsoft.Extensions.Configuration.Abstractions",
@@ -86,28 +161,18 @@
   },
   {
     "pname": "Microsoft.Extensions.Configuration.Binder",
-    "version": "8.0.0",
-    "hash": "sha256-GanfInGzzoN2bKeNwON8/Hnamr6l7RTpYLA49CNXD9Q="
-  },
-  {
-    "pname": "Microsoft.Extensions.Configuration.Binder",
-    "version": "8.0.2",
-    "hash": "sha256-aGB0VuoC34YadAEqrwoaXLc5qla55pswDV2xLSmR7SE="
+    "version": "10.0.0",
+    "hash": "sha256-YSiWoA3VQR22k6+bSEAUqeG7UDzZlJfHWDTubUO5V8U="
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection",
-    "version": "9.0.3",
-    "hash": "sha256-/gAk+YbJT1/XjMfPBrEg9wUbljA0g1vFJuE+mFOPwV0="
+    "version": "10.0.0",
+    "hash": "sha256-LYm9hVlo/R9c2aAKHsDYJ5vY9U0+3Jvclme3ou3BtvQ="
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-kcXuldbnR8++yNGQj9/rVJOyFaJPKPxecWU9b0KX7AY="
-  },
-  {
-    "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
-    "version": "8.0.0",
-    "hash": "sha256-75KzEGWjbRELczJpCiJub+ltNUMMbz5A/1KQU+5dgP8="
+    "version": "10.0.0",
+    "hash": "sha256-9iodXP39YqgxomnOPOxd/mzbG0JfOSXzFoNU3omT2Ps="
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
@@ -115,14 +180,14 @@
     "hash": "sha256-UfLfEQAkXxDaVPC7foE/J3FVEXd31Pu6uQIhTic3JgY="
   },
   {
-    "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
-    "version": "9.0.3",
-    "hash": "sha256-90HSc8MgyemdtRTBN7Indq62DRaqI2mjai9iV/pi/o4="
+    "pname": "Microsoft.Extensions.DependencyInjection.AutoActivation",
+    "version": "10.0.0",
+    "hash": "sha256-cVRZwchZofxVsHEH4VIssGFGJ6pPjzmjW2afbNtr9/Q="
   },
   {
-    "pname": "Microsoft.Extensions.DependencyInjection.AutoActivation",
-    "version": "9.3.0",
-    "hash": "sha256-Y5C0GmvBqaH7LbDpnNUgGLSEUkhLTdbio40wjqRcSiE="
+    "pname": "Microsoft.Extensions.Diagnostics",
+    "version": "10.0.0",
+    "hash": "sha256-o7QkCisEcFIh227qBUfWFci2ns4cgEpLqpX7YvHGToQ="
   },
   {
     "pname": "Microsoft.Extensions.Diagnostics",
@@ -131,23 +196,28 @@
   },
   {
     "pname": "Microsoft.Extensions.Diagnostics.Abstractions",
-    "version": "8.0.1",
-    "hash": "sha256-d5DVXhA8qJFY9YbhZjsTqs5w5kDuxF5v+GD/WZR1QL0="
+    "version": "10.0.0",
+    "hash": "sha256-cix7QxQ/g3sj6reXu3jn0cRv2RijzceaLLkchEGTt5E="
   },
   {
     "pname": "Microsoft.Extensions.Diagnostics.ExceptionSummarization",
-    "version": "9.3.0",
-    "hash": "sha256-r1HuCwGdX90bU3FzBvq8sxmA/gw3MVCjuG6hqowdoqs="
+    "version": "10.0.0",
+    "hash": "sha256-srsioq6Gh4Tdf8UNH4xn6y4PvVPEhnhq8gRxnhh8T58="
   },
   {
     "pname": "Microsoft.Extensions.FileProviders.Abstractions",
-    "version": "8.0.0",
-    "hash": "sha256-uQSXmt47X2HGoVniavjLICbPtD2ReQOYQMgy3l0xuMU="
+    "version": "10.0.0",
+    "hash": "sha256-CHDs2HCN8QcfuYQpgNVszZ5dfXFe4yS9K2GoQXecc20="
   },
   {
     "pname": "Microsoft.Extensions.Hosting.Abstractions",
-    "version": "8.0.1",
-    "hash": "sha256-/bIVL9uvBQhV/KQmjA1ZjR74sMfaAlBb15sVXsGDEVA="
+    "version": "10.0.0",
+    "hash": "sha256-Sub3Thay/+eR84cEODk/nPh1oYIYtawvDX6r0duReqo="
+  },
+  {
+    "pname": "Microsoft.Extensions.Http",
+    "version": "10.0.0",
+    "hash": "sha256-gnsO9erEi7xLS3QwYukcrzPDpcUgRkNFnGzPARHVjrs="
   },
   {
     "pname": "Microsoft.Extensions.Http",
@@ -156,23 +226,23 @@
   },
   {
     "pname": "Microsoft.Extensions.Http.Diagnostics",
-    "version": "9.3.0",
-    "hash": "sha256-e1Sq+sEtZA5oVoB7WjICrFg9SZ1IiOp+CUpk5rJCSRU="
+    "version": "10.0.0",
+    "hash": "sha256-iSHUpSaOkxtup7x8mZIU2Zbq1udTM6SMfU9UUacCzbQ="
   },
   {
     "pname": "Microsoft.Extensions.Http.Resilience",
-    "version": "9.3.0",
-    "hash": "sha256-X5MIsQsvIGJ8DmsUZHyY9ZOSeKKI7LZ+WoHYDgaFERc="
+    "version": "10.0.0",
+    "hash": "sha256-U3q7JTZHEStIurWSa7LXDTY0udNKCt1Z6bHsYeZ+wl0="
   },
   {
     "pname": "Microsoft.Extensions.Logging",
-    "version": "9.0.3",
-    "hash": "sha256-w1cKHraJW+i7avhTseoJ+u0parEAJ7r51E2qvsuXZDA="
+    "version": "10.0.0",
+    "hash": "sha256-P+zPAadLL63k/GqK34/qChqQjY9aIRxZfxlB9lqsSrs="
   },
   {
     "pname": "Microsoft.Extensions.Logging.Abstractions",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-8ls/8wAEqMI5HEAeHz82tjmM9Xel/m3JymxEdUni6ig="
+    "version": "10.0.0",
+    "hash": "sha256-BnhgGZc01HwTSxogavq7Ueq4V7iMA3wPnbfRwQ4RhGk="
   },
   {
     "pname": "Microsoft.Extensions.Logging.Abstractions",
@@ -184,30 +254,20 @@
     "version": "8.0.2",
     "hash": "sha256-cHpe8X2BgYa5DzulZfq24rg8O2K5Lmq2OiLhoyAVgJc="
   },
-  {
-    "pname": "Microsoft.Extensions.Logging.Abstractions",
-    "version": "8.0.3",
-    "hash": "sha256-5MSY1aEwUbRXehSPHYw0cBZyFcUH4jkgabddxhMiu3Q="
-  },
-  {
-    "pname": "Microsoft.Extensions.Logging.Abstractions",
-    "version": "9.0.3",
-    "hash": "sha256-f/K3A9NPpCOTGlyha5DJf+OIjfAVWu+dJ4rAqQ+3sso="
-  },
   {
     "pname": "Microsoft.Extensions.Logging.Configuration",
-    "version": "8.0.1",
-    "hash": "sha256-E2JbJG2EXlv2HUWLi17kIkAL6RC9rC2E18C3gAyOuaE="
+    "version": "10.0.0",
+    "hash": "sha256-7/TWO1aq8hdgbcTEKDBWIjgSC9KpFN3kRnMX+12bOkU="
   },
   {
     "pname": "Microsoft.Extensions.ObjectPool",
-    "version": "8.0.14",
-    "hash": "sha256-qd+fKVbI6xjy8pm2JIPWljFjdphHQhxHv5sOLzsW1B8="
+    "version": "10.0.0",
+    "hash": "sha256-/9kfhdfvtM5YxRXIQ35NrUJfslXYqSRl83xgwi5tCWA="
   },
   {
     "pname": "Microsoft.Extensions.Options",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-TqviXNJUy9wTWwSLP6/QdfN6+VUg2HHR7skVrotPHGU="
+    "version": "10.0.0",
+    "hash": "sha256-j5MOqZSKeUtxxzmZjzZMGy0vELHdvPraqwTQQQNVsYA="
   },
   {
     "pname": "Microsoft.Extensions.Options",
@@ -219,50 +279,35 @@
     "version": "8.0.2",
     "hash": "sha256-AjcldddddtN/9aH9pg7ClEZycWtFHLi9IPe1GGhNQys="
   },
-  {
-    "pname": "Microsoft.Extensions.Options",
-    "version": "9.0.3",
-    "hash": "sha256-h4CLVA1cZdte8hd/bcb5dsi61MhAAScHRZU4LR2W5Z8="
-  },
   {
     "pname": "Microsoft.Extensions.Options.ConfigurationExtensions",
-    "version": "8.0.0",
-    "hash": "sha256-A5Bbzw1kiNkgirk5x8kyxwg9lLTcSngojeD+ocpG1RI="
+    "version": "10.0.0",
+    "hash": "sha256-XGAs5DxMvWnmjX8dqRwKY0vsuS40SHvsfJqB1rO4L7k="
   },
   {
     "pname": "Microsoft.Extensions.Primitives",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-E1rTPmEYK/ssqHS1CF7xUTRbFWuYxbelV9w2VRST01E="
+    "version": "10.0.0",
+    "hash": "sha256-Dup08KcptLjlnpN5t5//+p4n8FUTgRAq4n/w1s6us+I="
   },
   {
     "pname": "Microsoft.Extensions.Primitives",
     "version": "5.0.1",
     "hash": "sha256-e4uoLnUSmON4If9qJh78+4z14IzW9qCu5YkqLdQqWQU="
   },
-  {
-    "pname": "Microsoft.Extensions.Primitives",
-    "version": "8.0.0",
-    "hash": "sha256-FU8qj3DR8bDdc1c+WeGZx/PCZeqqndweZM9epcpXjSo="
-  },
-  {
-    "pname": "Microsoft.Extensions.Primitives",
-    "version": "9.0.3",
-    "hash": "sha256-iBwolNt6Lb2OqjDWBVnUj8vZDSID9EQw/JPI1xcuFus="
-  },
   {
     "pname": "Microsoft.Extensions.Resilience",
-    "version": "9.3.0",
-    "hash": "sha256-GegeV0A5RNlSJuA5Pq78hIE5tZJxQWXQZ3fVtQZRZr8="
+    "version": "10.0.0",
+    "hash": "sha256-QoyRVcgAIgnGVsCHcrIFyC7FQ5/6FF02i4gbfjT6LDg="
   },
   {
     "pname": "Microsoft.Extensions.Telemetry",
-    "version": "9.3.0",
-    "hash": "sha256-DCwTXtK81v+rDeRrRQQCdiiwCzZpQEEwwU1wVJgbEbs="
+    "version": "10.0.0",
+    "hash": "sha256-E3kFWu4wsXQEV5vzdjyN2OHJKxJVgub+6l+PKi5vltc="
   },
   {
     "pname": "Microsoft.Extensions.Telemetry.Abstractions",
-    "version": "9.3.0",
-    "hash": "sha256-X9hooaCbC2G5PT022Yj7iJgEzS/bFyBxJbh6QQJTOQU="
+    "version": "10.0.0",
+    "hash": "sha256-s8NcIOR2PKP0vlkWyKFMNZycwYLwgCkIU8DAcFLTge8="
   },
   {
     "pname": "Polly.Core",
@@ -349,21 +394,6 @@
     "version": "2.88.9",
     "hash": "sha256-kP5XM5GgwHGfNJfe4T2yO5NIZtiF71Ddp0pd1vG5V/4="
   },
-  {
-    "pname": "System.Diagnostics.DiagnosticSource",
-    "version": "10.0.0-preview.3.25171.5",
-    "hash": "sha256-iI1z0kg5z1aTg3fTm/tMCXGQe7JqgOxaCf6Ac85G9+Y="
-  },
-  {
-    "pname": "System.Diagnostics.DiagnosticSource",
-    "version": "9.0.3",
-    "hash": "sha256-zgZF8BTksBk5oucX0j0Ju8qNG8oKJbIGio0GM+egT9M="
-  },
-  {
-    "pname": "System.IO.Pipelines",
-    "version": "8.0.0",
-    "hash": "sha256-LdpB1s4vQzsOODaxiKstLks57X9DTD5D6cPx8DE1wwE="
-  },
   {
     "pname": "System.Threading.RateLimiting",
     "version": "8.0.0",
diff --git a/pkgs/by-name/wh/wheelwizard/package.nix b/pkgs/by-name/wh/wheelwizard/package.nix
index a2717a9130b4..42da863a65f0 100644
--- a/pkgs/by-name/wh/wheelwizard/package.nix
+++ b/pkgs/by-name/wh/wheelwizard/package.nix
@@ -5,7 +5,6 @@
   dotnetCorePackages,
   fetchFromGitHub,
   makeWrapper,
-  avalonia,
   # Runtime dependencies
   libglvnd,
   # passthru
@@ -13,13 +12,13 @@
 }:
 buildDotnetModule (finalAttrs: {
   pname = "wheelwizard";
-  version = "2.4.11";
+  version = "2.5.1";
 
   src = fetchFromGitHub {
     owner = "TeamWheelWizard";
     repo = "WheelWizard";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-8Dex2PDgwnxKguf0jtC1T0+jm7bA7jDfvspwkiqJgUg";
+    hash = "sha256-lLGtzdE5MFfwwlGm5eA+MKYiY9oQhohtiVTqtmglols=";
   };
   postPatch = ''
     rm .config/dotnet-tools.json
@@ -27,20 +26,15 @@ buildDotnetModule (finalAttrs: {
 
   projectFile = "WheelWizard";
   buildType = "Release";
-  dotnet-sdk = dotnetCorePackages.sdk_8_0-bin;
-  dotnet-runtime = dotnetCorePackages.runtime_8_0-bin;
+  dotnet-sdk = dotnetCorePackages.sdk_10_0-bin;
+  dotnet-runtime = dotnetCorePackages.runtime_10_0-bin;
   nugetDeps = ./deps.json;
-  mapNuGetDependencies = true;
 
   nativeBuildInputs = [
     makeWrapper
     desktop-file-utils
   ];
 
-  buildInputs = [
-    avalonia
-  ];
-
   runtimeDeps = [
     libglvnd
   ];
@@ -49,7 +43,7 @@ buildDotnetModule (finalAttrs: {
     runHook preInstall
 
     mkdir -p $out/lib/wheelwizard $out/bin
-    cp -r WheelWizard/bin/Release/net8.0/*/* $out/lib/wheelwizard/
+    cp -r WheelWizard/bin/Release/net10.0/*/* $out/lib/wheelwizard/
 
     makeWrapper $out/lib/wheelwizard/WheelWizard $out/bin/WheelWizard \
       --prefix PATH : ${lib.makeBinPath [ finalAttrs.dotnet-runtime ]}
diff --git a/pkgs/by-name/xc/xclip/package.nix b/pkgs/by-name/xc/xclip/package.nix
index 058e28e314b6..f4a029bdb750 100644
--- a/pkgs/by-name/xc/xclip/package.nix
+++ b/pkgs/by-name/xc/xclip/package.nix
@@ -3,6 +3,7 @@
   stdenv,
   fetchFromGitHub,
   autoreconfHook,
+  pkg-config,
   libxmu,
 }:
 
@@ -17,10 +18,18 @@ stdenv.mkDerivation (finalAttrs: {
     sha256 = "0q0hmvcjlv8arhh1pzhja2wglyj6n7z209jnpnzd281kqqv4czcs";
   };
 
-  nativeBuildInputs = [ autoreconfHook ];
+  nativeBuildInputs = [
+    autoreconfHook
+    pkg-config
+  ];
 
   buildInputs = [ libxmu ];
 
+  # Make AC_CHECK_LIB(Xmu, XmuClientWindow) work.
+  preConfigure = lib.optionalString stdenv.hostPlatform.isStatic ''
+    configureFlagsArray+=("LIBS=$("$PKG_CONFIG" --libs xmu)")
+  '';
+
   meta = {
     description = "Tool to access the X clipboard from a console application";
     homepage = "https://github.com/astrand/xclip";
diff --git a/pkgs/desktops/lomiri/applications/lomiri-system-settings/2000-Support-wrapping-for-Nixpkgs.patch b/pkgs/desktops/lomiri/applications/lomiri-system-settings/2000-Support-wrapping-for-Nixpkgs.patch
index 8e39ea5fdfc0..e3cd50afb13a 100644
--- a/pkgs/desktops/lomiri/applications/lomiri-system-settings/2000-Support-wrapping-for-Nixpkgs.patch
+++ b/pkgs/desktops/lomiri/applications/lomiri-system-settings/2000-Support-wrapping-for-Nixpkgs.patch
@@ -1,15 +1,3 @@
-From 8e21cf46551091c884014985d3e0dd9704d6dc04 Mon Sep 17 00:00:00 2001
-From: OPNA2608 <opna2608@protonmail.com>
-Date: Wed, 14 Feb 2024 16:00:24 +0100
-Subject: [PATCH] Support wrapping for Nixpkgs
-
----
- src/CMakeLists.txt   | 24 +++++++++++++++++++-----
- src/main.cpp         |  8 +++++---
- src/plugin.cpp       | 19 +++++++++++++++++--
- tests/CMakeLists.txt | 18 ++++++++++++++----
- 4 files changed, 55 insertions(+), 14 deletions(-)
-
 diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
 index cd3131d0..fcd78bdf 100644
 --- a/src/CMakeLists.txt
@@ -48,7 +36,7 @@ index cd3131d0..fcd78bdf 100644
  add_subdirectory(SystemSettings)
  
 diff --git a/src/main.cpp b/src/main.cpp
-index 64441da3..cfcabe42 100644
+index d0897fa9..d244fead 100644
 --- a/src/main.cpp
 +++ b/src/main.cpp
 @@ -42,6 +42,8 @@ int main(int argc, char **argv)
@@ -60,7 +48,7 @@ index 64441da3..cfcabe42 100644
      // Ensure printing environment is correct.
      qputenv("QT_PRINTER_MODULE", "cupsprintersupport");
  
-@@ -78,12 +80,12 @@ int main(int argc, char **argv)
+@@ -79,12 +81,12 @@ int main(int argc, char **argv)
      qmlRegisterType<LomiriSystemSettings::PluginManager>("SystemSettings", 1, 0, "PluginManager");
      view.engine()->rootContext()->setContextProperty("Utilities", &utils);
      view.setResizeMode(QQuickView::SizeRootObjectToView);
@@ -76,6 +64,28 @@ index 64441da3..cfcabe42 100644
      view.rootContext()->setContextProperty("pluginOptions", pluginOptions);
      view.rootContext()->setContextProperty("view", &view);
      view.setSource(QUrl("qrc:/qml/MainWindow.qml"));
+diff --git a/src/plugin-manager.cpp b/src/plugin-manager.cpp
+index 0f5133ce..e2f0bf84 100644
+--- a/src/plugin-manager.cpp
++++ b/src/plugin-manager.cpp
+@@ -87,8 +87,16 @@ void PluginManagerPrivate::reload()
+      * does not seem to work with a dir and file pattern, which means it will
+      * look for all .settings files, not just those in well-known locations. */
+     QStandardPaths::StandardLocation loc = QStandardPaths::GenericDataLocation;
++    QStringList searchPathBases;
++    QString nixDefinedPrefix = qgetenv("NIX_LSS_PREFIX");
++    if (!nixDefinedPrefix.isEmpty()) {
++        searchPathBases.append(nixDefinedPrefix + "/share");
++    } else {
++        searchPathBases = QStandardPaths::standardLocations(loc);
++    }
++
+     QFileInfoList searchPaths;
+-    Q_FOREACH(const QString &path, QStandardPaths::standardLocations(loc)) {
++    Q_FOREACH(const QString &path, searchPathBases) {
+         QDir dir(QStringLiteral("%1/%2").arg(path, baseDir), "*.settings");
+         searchPaths.append(dir.entryInfoList());
+     }
 diff --git a/src/plugin.cpp b/src/plugin.cpp
 index 133821af..6a1a152c 100644
 --- a/src/plugin.cpp
@@ -155,6 +165,3 @@ index c10b2e2d..a998b641 100644
  add_definitions(-DSYSTEM_IMAGE_DBUS_TEMPLATE="${CMAKE_SOURCE_DIR}/tests/autopilot/lomiri_system_settings/tests/systemimage.py")
  
  add_library(test-plugin SHARED test-plugin.cpp test-plugin.h)
--- 
-2.42.0
-
diff --git a/pkgs/desktops/lomiri/applications/lomiri-system-settings/default.nix b/pkgs/desktops/lomiri/applications/lomiri-system-settings/default.nix
index ccd744d9a239..b258d7cf2ba3 100644
--- a/pkgs/desktops/lomiri/applications/lomiri-system-settings/default.nix
+++ b/pkgs/desktops/lomiri/applications/lomiri-system-settings/default.nix
@@ -2,6 +2,7 @@
   stdenv,
   lib,
   fetchFromGitLab,
+  fetchpatch,
   gitUpdater,
   testers,
   accountsservice,
@@ -27,6 +28,7 @@
   lomiri-indicator-network,
   lomiri-schemas,
   lomiri-settings-components,
+  lomiri-ui-extras,
   lomiri-ui-toolkit,
   maliit-keyboard,
   mesa,
@@ -48,13 +50,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "lomiri-system-settings-unwrapped";
-  version = "1.3.2";
+  version = "1.4.0";
 
   src = fetchFromGitLab {
     owner = "ubports";
     repo = "development/core/lomiri-system-settings";
     tag = finalAttrs.version;
-    hash = "sha256-bVBxJgOy1eXqwzcgBRUTlFoJxxw9I1Qc+Wn92U0QzA4=";
+    hash = "sha256-tFdAWPoMJlkKXaWg4H/pv2VJGCutprcjL4CyBSRPXeI=";
   };
 
   outputs = [
@@ -63,37 +65,47 @@ stdenv.mkDerivation (finalAttrs: {
   ];
 
   patches = [
+    # Remove when version > 1.4.0
+    (fetchpatch {
+      name = "0001-lomiri-system-settings-Avoid-UB-when-VARIANT_ID-is-not-set.patch";
+      url = "https://gitlab.com/ubports/development/core/lomiri-system-settings/-/commit/78b462aed589213e7a26064ec1bd27d201bb8f04.patch";
+      hash = "sha256-Xb6x/AlL+m8qD29bHeiU20Je2GeHzybcUprPLQuh8fk=";
+    })
+
     ./2000-Support-wrapping-for-Nixpkgs.patch
   ];
 
   postPatch = ''
     substituteInPlace CMakeLists.txt \
-      --replace-fail "\''${CMAKE_INSTALL_LIBDIR}/qt5/qml" "\''${CMAKE_INSTALL_PREFIX}/${qtbase.qtQmlPrefix}" \
-
-    # Port from lomiri-keyboard to maliit-keyboard
+      --replace-fail "\''${CMAKE_INSTALL_LIBDIR}/qt5/qml" "\''${CMAKE_INSTALL_PREFIX}/${qtbase.qtQmlPrefix}"
+  ''
+  # Port from lomiri-keyboard to maliit-keyboard
+  + ''
     substituteInPlace plugins/language/{PageComponent,SpellChecking,ThemeValues}.qml plugins/language/onscreenkeyboard-plugin.cpp plugins/sound/PageComponent.qml \
       --replace-fail 'com.lomiri.keyboard.maliit' 'org.maliit.keyboard.maliit'
-
-    # Gets list of available localisations from current system, but later drops any language that doesn't cover LSS
-    # So just give it its own prefix
+  ''
+  # Gets list of available localisations from current system, but later drops any language that doesn't cover LSS
+  # So just give it its own prefix
+  + ''
     substituteInPlace plugins/language/language-plugin.cpp \
       --replace-fail '/usr/share/locale' '${placeholder "out"}/share/locale'
-
-    # Decide which entries should be visible based on the current system
+  ''
+  # Decide which entries should be visible based on the current system
+  + ''
     substituteInPlace plugins/*/*.settings \
       --replace-warn '/etc' '/run/current-system/sw/etc'
-
-    # Don't use absolute paths in desktop file
+  ''
+  # Don't use absolute paths in desktop file
+  + ''
     substituteInPlace lomiri-system-settings.desktop.in.in \
       --replace-fail 'Icon=@SETTINGS_SHARE_DIR@/system-settings.svg' 'Icon=lomiri-system-settings' \
-      --replace-fail 'X-Lomiri-Splash-Image=@SETTINGS_SHARE_DIR@/system-settings-app-splash.svg' 'X-Lomiri-Splash-Image=lomiri-app-launch/splash/lomiri-system-settings.svg' \
-      --replace-fail 'X-Screenshot=@SETTINGS_SHARE_DIR@/screenshot.png' 'X-Screenshot=lomiri-app-launch/screenshot/lomiri-system-settings.png'
-
-    # https://gitlab.com/ubports/development/core/lomiri-system-settings/-/merge_requests/525
-    substituteInPlace \
-      plugins/notifications/click_applications_model.h \
-      plugins/notifications/general_notification_settings.h \
-      --replace-fail '<QGSettings/QGSettings>' '<QGSettings>'
+      --replace-fail 'X-Lomiri-Splash-Image=@SETTINGS_SHARE_DIR@/system-settings-app-splash.svg' 'X-Lomiri-Splash-Image=lomiri-app-launch/splash/lomiri-system-settings.svg'
+  ''
+  # https://gitlab.com/ubports/development/core/lomiri-system-settings/-/merge_requests/547
+  # Remove when version > 1.4.0
+  + ''
+    substituteInPlace plugins/printing/CMakeLists.txt \
+      --replace-fail 'GLIB_LD_FLAGS' 'GLIB_LDFLAGS'
   '';
 
   strictDeps = true;
@@ -134,6 +146,7 @@ stdenv.mkDerivation (finalAttrs: {
     lomiri-indicator-network
     lomiri-schemas
     lomiri-settings-components
+    lomiri-ui-extras
     lomiri-ui-toolkit
     maliit-keyboard
     qmenumodel
@@ -188,11 +201,10 @@ stdenv.mkDerivation (finalAttrs: {
   postInstall = ''
     glib-compile-schemas $out/share/glib-2.0/schemas
 
-    mkdir -p $out/share/{icons/hicolor/scalable/apps,lomiri-app-launch/{splash,screenshot}}
+    mkdir -p $out/share/{icons/hicolor/scalable/apps,lomiri-app-launch/splash}
 
     ln -s $out/share/lomiri-system-settings/system-settings.svg $out/share/icons/hicolor/scalable/apps/lomiri-system-settings.svg
     ln -s $out/share/lomiri-system-settings/system-settings-app-splash.svg $out/share/lomiri-app-launch/splash/lomiri-system-settings.svg
-    ln -s $out/share/lomiri-system-settings/screenshot.png $out/share/lomiri-app-launch/screenshot/lomiri-system-settings.png
   '';
 
   passthru = {
diff --git a/pkgs/desktops/lomiri/applications/lomiri-system-settings/wrapper.nix b/pkgs/desktops/lomiri/applications/lomiri-system-settings/wrapper.nix
index 2a2112f5de3b..1d7358d967ea 100644
--- a/pkgs/desktops/lomiri/applications/lomiri-system-settings/wrapper.nix
+++ b/pkgs/desktops/lomiri/applications/lomiri-system-settings/wrapper.nix
@@ -62,7 +62,10 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     )
   '';
 
-  passthru.tests.standalone = nixosTests.lomiri-system-settings;
+  passthru.tests = {
+    inherit (lomiri-system-settings-unwrapped.passthru.tests) pkg-config;
+    standalone = nixosTests.lomiri-system-settings;
+  };
 
   meta = lomiri-system-settings-unwrapped.meta // {
     description = "System Settings application for Lomiri (wrapped)";
diff --git a/pkgs/development/python-modules/dash-core-components/default.nix b/pkgs/development/python-modules/dash-core-components/default.nix
index 47d593f502c2..575b4e569e01 100644
--- a/pkgs/development/python-modules/dash-core-components/default.nix
+++ b/pkgs/development/python-modules/dash-core-components/default.nix
@@ -2,12 +2,15 @@
   lib,
   buildPythonPackage,
   fetchPypi,
+  setuptools,
 }:
 
 buildPythonPackage (finalAttrs: {
   pname = "dash-core-components";
   version = "2.0.0";
-  format = "setuptools";
+  pyproject = true;
+
+  __structuredAttrs = true;
 
   src = fetchPypi {
     pname = "dash_core_components";
@@ -15,6 +18,8 @@ buildPythonPackage (finalAttrs: {
     hash = "sha256-xnM4dK+XXlUvlaE5ihbC7n3xTOQ/pguzcYo8bgtj/+4=";
   };
 
+  build-system = [ setuptools ];
+
   # No tests in archive
   doCheck = false;
 
diff --git a/pkgs/development/python-modules/google-cloud-pubsub/default.nix b/pkgs/development/python-modules/google-cloud-pubsub/default.nix
index 1098fe1b78e1..250981eee590 100644
--- a/pkgs/development/python-modules/google-cloud-pubsub/default.nix
+++ b/pkgs/development/python-modules/google-cloud-pubsub/default.nix
@@ -20,13 +20,13 @@
 
 buildPythonPackage rec {
   pname = "google-cloud-pubsub";
-  version = "2.39.2";
+  version = "2.40.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "google_cloud_pubsub";
     inherit version;
-    hash = "sha256-k0o6t0lqbaCc2X2Ga+8+RwkukEaIpm9gdQiVp0hL1YU=";
+    hash = "sha256-/n1+t291P2rrzdovTf9TZ0jRmZFH9k2VWlVPVyq7FYU=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/google-maps-routing/default.nix b/pkgs/development/python-modules/google-maps-routing/default.nix
index b035d6f99a74..ef6257b4cf7f 100644
--- a/pkgs/development/python-modules/google-maps-routing/default.nix
+++ b/pkgs/development/python-modules/google-maps-routing/default.nix
@@ -15,14 +15,14 @@
 
 buildPythonPackage rec {
   pname = "google-maps-routing";
-  version = "0.11.0";
+  version = "0.11.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "googleapis";
     repo = "google-cloud-python";
     tag = "google-maps-routing-v${version}";
-    hash = "sha256-M/7uDWWz4YCfxa4gyM9BaAo10iyTMvtR2MhNpdFYnis=";
+    hash = "sha256-vsJuqmG2/H5Lf/uGnEnkmBDBL2Mkxzk1z8gbGEpR0Eg=";
   };
 
   sourceRoot = "${src.name}/packages/google-maps-routing";
diff --git a/pkgs/development/python-modules/homevolt/default.nix b/pkgs/development/python-modules/homevolt/default.nix
index ca108dc42400..f11a3412fd49 100644
--- a/pkgs/development/python-modules/homevolt/default.nix
+++ b/pkgs/development/python-modules/homevolt/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "homevolt";
-  version = "0.5.0";
+  version = "0.7.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Danielhiversen";
     repo = "pyHomevolt";
     tag = finalAttrs.version;
-    hash = "sha256-Z+3JwACbdFVivWbhlxO73m1rjyGS+Vc/Y3QICqEY9O0=";
+    hash = "sha256-70as5Hi5/AR5o43/oRVIlW1f8P2pW6KpMSOlfGdWpfw=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/mizani/default.nix b/pkgs/development/python-modules/mizani/default.nix
index 797697dbd2f4..f577be157085 100644
--- a/pkgs/development/python-modules/mizani/default.nix
+++ b/pkgs/development/python-modules/mizani/default.nix
@@ -19,7 +19,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "mizani";
-  version = "0.14.5";
+  version = "0.14.6";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -27,7 +27,7 @@ buildPythonPackage (finalAttrs: {
     owner = "has2k1";
     repo = "mizani";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-dKBj8hAYg+2CKYa2f0YRbbllrSacwFcejwnxvcw7F2k=";
+    hash = "sha256-YbBHgfcyyK5hCjeILgvl03+uWsOJwLF55UKecd8g4Y0=";
   };
 
   build-system = [ setuptools-scm ];
diff --git a/pkgs/development/python-modules/nameparser/default.nix b/pkgs/development/python-modules/nameparser/default.nix
index 35e71ad779ff..51a2795bae8d 100644
--- a/pkgs/development/python-modules/nameparser/default.nix
+++ b/pkgs/development/python-modules/nameparser/default.nix
@@ -1,29 +1,48 @@
 {
   lib,
   buildPythonPackage,
-  fetchPypi,
-  unittestCheckHook,
+  fetchFromGitHub,
+  pytestCheckHook,
+  setuptools,
+  hypothesis,
+  pytest-timeout,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "nameparser";
-  version = "1.1.3";
-  format = "setuptools";
+  version = "2.1.0";
+  pyproject = true;
 
-  src = fetchPypi {
-    inherit pname version;
-    hash = "sha256-qiQArXHM+AcGdbQDEaJXyTRln5GFSxVOG6bCZHYcBJ0=";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "derek73";
+    repo = "python-nameparser";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-MDzw2F9oH6cvvIYxYRv85+e61uGYFDWubfJ+WP8h7mQ=";
   };
 
-  nativeCheckInputs = [ unittestCheckHook ];
+  build-system = [ setuptools ];
+
+  nativeCheckInputs = [
+    pytestCheckHook
+    hypothesis
+    pytest-timeout
+  ];
+
+  disabledTests = [
+    # Flaky when build system is under dynamic load
+    "test_parse_cost_grows_no_worse_than_linearly"
+    "test_policy_gated_cost_grows_no_worse_than_linearly"
+  ];
 
   pythonImportsCheck = [ "nameparser" ];
 
   meta = {
     description = "Module for parsing human names into their individual components";
     homepage = "https://github.com/derek73/python-nameparser";
-    changelog = "https://github.com/derek73/python-nameparser/releases/tag/v${version}";
+    changelog = "https://github.com/derek73/python-nameparser/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.lgpl21Plus;
     maintainers = [ ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/pyhik/default.nix b/pkgs/development/python-modules/pyhik/default.nix
index 0395a626535b..18ba93e0830a 100644
--- a/pkgs/development/python-modules/pyhik/default.nix
+++ b/pkgs/development/python-modules/pyhik/default.nix
@@ -9,14 +9,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pyhik";
-  version = "0.4.5";
+  version = "0.4.6";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mezz64";
     repo = "pyHik";
     tag = finalAttrs.version;
-    hash = "sha256-3OiPU94Z9CBmxJPhmPRLLMpykW+USpckPwqPPeCAPng=";
+    hash = "sha256-UlKQxbTnqxdyRYbpecP5OEnCILnAhifIsjEixxvVBjc=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/pystrich/default.nix b/pkgs/development/python-modules/pystrich/default.nix
new file mode 100644
index 000000000000..5f8b74cd16db
--- /dev/null
+++ b/pkgs/development/python-modules/pystrich/default.nix
@@ -0,0 +1,65 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  hatchling,
+  pillow,
+  typing-extensions,
+  pytestCheckHook,
+  ezdxf,
+  fonttools,
+  hypothesis,
+  zxing-cpp,
+  dmtx-utils,
+  librsvg,
+  ghostscript,
+  nix-update-script,
+}:
+
+buildPythonPackage rec {
+  pname = "pystrich";
+  version = "0.20";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "mmulqueen";
+    repo = "pyStrich";
+    tag = version;
+    hash = "sha256-08IKFJfcK0I+phUejUY7FHh2a7efR+UKrj+tsKEwSJ4=";
+  };
+
+  build-system = [ hatchling ];
+
+  dependencies = [
+    pillow
+    typing-extensions
+  ];
+
+  optional-dependencies = {
+    png = [ pillow ];
+  };
+
+  nativeCheckInputs = [
+    pytestCheckHook
+    ezdxf
+    fonttools
+    hypothesis
+    zxing-cpp
+    dmtx-utils
+    librsvg
+    ghostscript
+  ];
+
+  pythonImportsCheck = [ "pystrich" ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Pure-Python module to generate 1D and 2D barcodes";
+    homepage = "https://github.com/mmulqueen/pyStrich";
+    changelog = "https://github.com/mmulqueen/pyStrich/releases/tag/${version}";
+    license = lib.licenses.asl20;
+    mainProgram = "pystrich";
+    maintainers = with lib.maintainers; [ mmulqueen ];
+  };
+}
diff --git a/pkgs/development/python-modules/raylib-python-cffi/default.nix b/pkgs/development/python-modules/raylib/default.nix
similarity index 92%
rename from pkgs/development/python-modules/raylib-python-cffi/default.nix
rename to pkgs/development/python-modules/raylib/default.nix
index 659109475bec..8ff9fd08e3d4 100644
--- a/pkgs/development/python-modules/raylib-python-cffi/default.nix
+++ b/pkgs/development/python-modules/raylib/default.nix
@@ -15,7 +15,7 @@
 }:
 
 buildPythonPackage (finalAttrs: {
-  pname = "raylib-python-cffi";
+  pname = "raylib";
   version = "6.0.1.0";
   pyproject = true;
 
@@ -51,7 +51,7 @@ buildPythonPackage (finalAttrs: {
 
   passthru.tests = import ./passthru-tests.nix {
     inherit writers;
-    raylib-python-cffi = finalAttrs.finalPackage;
+    raylib = finalAttrs.finalPackage;
   };
 
   meta = {
diff --git a/pkgs/development/python-modules/raylib-python-cffi/passthru-tests.nix b/pkgs/development/python-modules/raylib/passthru-tests.nix
similarity index 86%
rename from pkgs/development/python-modules/raylib-python-cffi/passthru-tests.nix
rename to pkgs/development/python-modules/raylib/passthru-tests.nix
index 20934ec45ad4..01a859e2f070 100644
--- a/pkgs/development/python-modules/raylib-python-cffi/passthru-tests.nix
+++ b/pkgs/development/python-modules/raylib/passthru-tests.nix
@@ -1,13 +1,13 @@
 {
-  raylib-python-cffi,
+  raylib,
   writers,
 }:
 let
-  src = raylib-python-cffi.src;
+  src = raylib.src;
   writeTest =
     name: path:
     writers.writePython3Bin name {
-      libraries = [ raylib-python-cffi ];
+      libraries = [ raylib ];
       doCheck = false;
     } (builtins.readFile (src + path));
 
diff --git a/pkgs/development/python-modules/raylib-python-cffi/use-direct-pkg-config-name.patch b/pkgs/development/python-modules/raylib/use-direct-pkg-config-name.patch
similarity index 100%
rename from pkgs/development/python-modules/raylib-python-cffi/use-direct-pkg-config-name.patch
rename to pkgs/development/python-modules/raylib/use-direct-pkg-config-name.patch
diff --git a/pkgs/development/python-modules/strictyaml/default.nix b/pkgs/development/python-modules/strictyaml/default.nix
index 01caa3307884..8abbc899bd1e 100644
--- a/pkgs/development/python-modules/strictyaml/default.nix
+++ b/pkgs/development/python-modules/strictyaml/default.nix
@@ -2,17 +2,20 @@
   lib,
   buildPythonPackage,
   fetchPypi,
+  setuptools,
   ruamel-yaml,
   python-dateutil,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "strictyaml";
   version = "1.7.3";
-  format = "setuptools";
+  pyproject = true;
+
+  __structuredAttrs = true;
 
   src = fetchPypi {
-    inherit pname version;
+    inherit (finalAttrs) pname version;
     hash = "sha256-IvhUpfyrQrXduoAwoOS+UcqJrwJnlhyNbPqGOVWGxAc=";
   };
 
@@ -21,7 +24,9 @@ buildPythonPackage rec {
       --replace "ruamel.yaml==0.17.4" "ruamel.yaml"
   '';
 
-  propagatedBuildInputs = [
+  build-system = [ setuptools ];
+
+  dependencies = [
     ruamel-yaml
     python-dateutil
   ];
@@ -39,4 +44,4 @@ buildPythonPackage rec {
     license = lib.licenses.mit;
     maintainers = [ ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/tomlrt/default.nix b/pkgs/development/python-modules/tomlrt/default.nix
index da071596d7d7..336324a556b0 100644
--- a/pkgs/development/python-modules/tomlrt/default.nix
+++ b/pkgs/development/python-modules/tomlrt/default.nix
@@ -9,12 +9,12 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "tomlrt";
-  version = "2.2.5";
+  version = "2.2.7";
   pyproject = true;
 
   src = fetchPypi {
     inherit (finalAttrs) pname version;
-    hash = "sha256-8c3MzVL5SCHUZJM6hsYfGt/pkG/iH/Xxz+Ar3e59HCU=";
+    hash = "sha256-tfZZ0Jq/YNIAONrLNH5yC85PmX8iiteruoCMUvBriBU=";
   };
 
   build-system = [ hatchling ];
@@ -28,6 +28,7 @@ buildPythonPackage (finalAttrs: {
   meta = {
     description = "A format-preserving TOML reader and writer for Python";
     homepage = "https://github.com/dimbleby/tomlrt";
+    changelog = "https://github.com/dimbleby/tomlrt/blob/v${finalAttrs.version}/CHANGELOG.md";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ aaronjheng ];
   };
diff --git a/pkgs/development/python-modules/translationstring/default.nix b/pkgs/development/python-modules/translationstring/default.nix
index f4f90cce84e6..af6e252f0018 100644
--- a/pkgs/development/python-modules/translationstring/default.nix
+++ b/pkgs/development/python-modules/translationstring/default.nix
@@ -2,22 +2,32 @@
   lib,
   buildPythonPackage,
   fetchPypi,
+  setuptools,
+  pytestCheckHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "translationstring";
   version = "1.4";
-  format = "setuptools";
+  pyproject = true;
+
+  __structuredAttrs = true;
 
   src = fetchPypi {
-    inherit pname version;
-    sha256 = "bf947538d76e69ba12ab17283b10355a9ecfbc078e6123443f43f2107f6376f3";
+    inherit (finalAttrs) pname version;
+    hash = "sha256-v5R1ONduaboSqxcoOxA1Wp7PvAeOYSNEP0PyEH9jdvM=";
   };
 
+  build-system = [ setuptools ];
+
+  nativeCheckInputs = [ pytestCheckHook ];
+
+  pythonImportsCheck = [ "translationstring" ];
+
   meta = {
     homepage = "https://pylonsproject.org/";
     description = "Utility library for i18n relied on by various Repoze and Pyramid packages";
     license = lib.licenses.bsd0;
     maintainers = [ ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/vodozemac/default.nix b/pkgs/development/python-modules/vodozemac/default.nix
index c66213e8e731..d50225b6f73b 100644
--- a/pkgs/development/python-modules/vodozemac/default.nix
+++ b/pkgs/development/python-modules/vodozemac/default.nix
@@ -1,7 +1,9 @@
 {
   buildPythonPackage,
   fetchFromGitHub,
+  hypothesis,
   lib,
+  pytestCheckHook,
   rustPlatform,
 }:
 
@@ -27,6 +29,16 @@ buildPythonPackage (finalAttrs: {
     rustPlatform.cargoSetupHook
   ];
 
+  preCheck = ''
+    # do not shadow imports
+    rm -r vodozemac
+  '';
+
+  nativeCheckInputs = [
+    hypothesis
+    pytestCheckHook
+  ];
+
   meta = {
     description = "Python bindings for vodozemac";
     homepage = "https://github.com/matrix-nio/vodozemac-python";
diff --git a/pkgs/os-specific/linux/evdi/default.nix b/pkgs/os-specific/linux/evdi/default.nix
index b6c5b6fdd2fb..38ea0890f98f 100644
--- a/pkgs/os-specific/linux/evdi/default.nix
+++ b/pkgs/os-specific/linux/evdi/default.nix
@@ -7,7 +7,6 @@
   libdrm,
   python3,
 }:
-
 let
   python3WithLibs = python3.withPackages (
     ps: with ps; [
@@ -17,19 +16,20 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "evdi";
-  version = "1.14.15";
+  version = "1.15.0";
 
   src = fetchFromGitHub {
     owner = "DisplayLink";
     repo = "evdi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-tms+UNws+oBmwLvDFaDSIa/bUdSpK+CADodbsip3tRg=";
+    hash = "sha256-CXF7PvmrPjjNoWXbWxEkFE/Sw4bO6YqDplPwF/OxhB0=";
   };
 
-  prePatch = ''
-    substituteInPlace module/Makefile \
-      --replace-fail '/etc/os-release' '/dev/null'
-  '';
+  patches = [
+    # Fix feature probes on kernels with allocation profiling enabled.
+    # Upstream: https://github.com/DisplayLink/evdi/pull/592
+    ./fix-conftest-probes.patch
+  ];
 
   env.CFLAGS = toString [
     "-Wno-error"
diff --git a/pkgs/os-specific/linux/evdi/fix-conftest-probes.patch b/pkgs/os-specific/linux/evdi/fix-conftest-probes.patch
new file mode 100644
index 000000000000..8022eaf08181
--- /dev/null
+++ b/pkgs/os-specific/linux/evdi/fix-conftest-probes.patch
@@ -0,0 +1,10 @@
+--- a/module/conftest.sh
++++ b/module/conftest.sh
+@@ -32,6 +32,7 @@
+ 	done
+ }
+ CFLAGS=$(requote "$@")
++CFLAGS="$CFLAGS '-DKBUILD_MODNAME=\"conftest\"' '-DKBUILD_BASENAME=\"conftest\"'"
+ 
+ WORKDIR="$(mktemp -d)"
+ trap 'rm -rf "$WORKDIR"' EXIT
diff --git a/pkgs/os-specific/windows/msvcSdk/fetchWinSdk.nix b/pkgs/os-specific/windows/msvcSdk/fetchWinSdk.nix
index 3c498df81b74..597fb7f595e2 100644
--- a/pkgs/os-specific/windows/msvcSdk/fetchWinSdk.nix
+++ b/pkgs/os-specific/windows/msvcSdk/fetchWinSdk.nix
@@ -3,6 +3,7 @@
   config,
   stdenvNoCC,
   xwin,
+  cacert,
 }:
 let
   host = stdenvNoCC.hostPlatform;
@@ -45,7 +46,10 @@ lib.extendMkDerivation {
 
       strictDeps = true;
 
-      nativeBuildInputs = [ xwin ];
+      nativeBuildInputs = [
+        xwin
+        cacert
+      ];
 
       outputHashAlgo = "sha256";
       outputHashMode = "recursive";
diff --git a/pkgs/servers/home-assistant/custom-lovelace-modules/swipe-navigation/package.nix b/pkgs/servers/home-assistant/custom-lovelace-modules/swipe-navigation/package.nix
index 7a823ec9bf6f..6d6892f6f639 100644
--- a/pkgs/servers/home-assistant/custom-lovelace-modules/swipe-navigation/package.nix
+++ b/pkgs/servers/home-assistant/custom-lovelace-modules/swipe-navigation/package.nix
@@ -6,16 +6,16 @@
 
 buildNpmPackage rec {
   pname = "swipe-navigation";
-  version = "1.16.0";
+  version = "1.16.1";
 
   src = fetchFromGitHub {
     owner = "zanna-37";
     repo = "hass-swipe-navigation";
     tag = "v${version}";
-    hash = "sha256-a2ZbMQgFi4bJPnZeSB60THFd46O/K4QERCmZQMjC0ZI=";
+    hash = "sha256-6EMpxiug6YNDjekqyXMIv12Eg4iW42rOR2InNGzGmQU=";
   };
 
-  npmDepsHash = "sha256-vQnYQ7iKSotbdresqXMNUJALMVPYxk0FtZxAhJTQ8pc=";
+  npmDepsHash = "sha256-cySnkW+UOFSbQtsvx4av7UqVxHH0AEb0LzbFQOIvBME=";
 
   buildPhase = ''
     runHook preBuild
diff --git a/pkgs/servers/roundcube/default.nix b/pkgs/servers/roundcube/default.nix
index 8ca94ed55d71..fbb272d1e38e 100644
--- a/pkgs/servers/roundcube/default.nix
+++ b/pkgs/servers/roundcube/default.nix
@@ -11,11 +11,11 @@
 
 stdenv.mkDerivation rec {
   pname = "roundcube";
-  version = "1.7.3";
+  version = "1.7.4";
 
   src = fetchurl {
     url = "https://github.com/roundcube/roundcubemail/releases/download/${version}/roundcubemail-${version}-complete.tar.gz";
-    sha256 = "sha256-RDzeLqA7hAzkcB/iPCc/AeaHAvF20oLmAkgja7tfX4U=";
+    sha256 = "sha256-LGyHjwCT8b9/tghngdLdkmnWUsAWuGk5wVfF8XKROaI=";
   };
 
   patches = [ ./0001-Don-t-resolve-symlinks-when-trying-to-find-INSTALL_P.patch ];
diff --git a/pkgs/servers/sql/postgresql/ext/pg_background.nix b/pkgs/servers/sql/postgresql/ext/pg_background.nix
index 5fb41ae83b87..22d020e5031e 100644
--- a/pkgs/servers/sql/postgresql/ext/pg_background.nix
+++ b/pkgs/servers/sql/postgresql/ext/pg_background.nix
@@ -8,13 +8,13 @@
 
 postgresqlBuildExtension (finalAttrs: {
   pname = "pg_background";
-  version = "2.0.2";
+  version = "2.0.3";
 
   src = fetchFromGitHub {
     owner = "vibhorkum";
     repo = "pg_background";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-7lQrNrWpgvW98MomZ0xu3PYf0dnMlvLP3W1e9l49cBI=";
+    hash = "sha256-ZYBHUN+/fYSiozuZNVMFUZiAZl3qP4LOEdxeGVA+rmg=";
   };
 
   buildInputs = postgresql.buildInputs;
diff --git a/pkgs/tools/system/nvtop/build-nvtop.nix b/pkgs/tools/system/nvtop/build-nvtop.nix
index 86f194d97c55..3fadea5767ca 100644
--- a/pkgs/tools/system/nvtop/build-nvtop.nix
+++ b/pkgs/tools/system/nvtop/build-nvtop.nix
@@ -4,7 +4,9 @@
   fetchFromGitHub,
   cmake,
   gtest,
+  config,
   cudaPackages,
+  cudaSupport ? config.cudaSupport,
   libdrm,
   ncurses,
   versionCheckHook,
@@ -85,7 +87,7 @@ stdenv.mkDerivation (finalAttrs: {
     ncurses
   ]
   ++ lib.optional stdenv.hostPlatform.isLinux udev
-  ++ lib.optional nvidia cudaPackages.cuda_nvml_dev
+  ++ lib.optional (nvidia && cudaSupport) cudaPackages.cuda_nvml_dev
   ++ lib.optional needDrm libdrm;
 
   # this helps cmake to find <drm.h>
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 779a47b910db..13df53b5d0ee 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -360,6 +360,7 @@ mapAliases {
   astronomer = throw "'astronomer' has been removed, as it has been unmaintained upstream since August 2020"; # Added 2026-01-01
   atlassian-cli = appfire-cli; # Added 2025-09-29
   ats = throw "'ats' has been removed as it is unmaintained for 10 years and broken"; # Added 2025-05-17
+  audacity_4 = audacity; # Added 2026-09-05
   audio-recorder = throw "'audio-recorder' has been removed, as it is unmaintained upstream and broken. Consider using 'gnome-sound-recorder' or 'reco' instead"; # Added 2026-01-02
   august = throw "'august' has been removed, as it has been unmaintained since august 2023"; # Added 2025-12-25
   AusweisApp2 = throw "'AusweisApp2' has been renamed to/replaced by 'ausweisapp'"; # Converted to throw 2025-10-27
@@ -925,6 +926,7 @@ mapAliases {
   freerdpUnstable = throw "'freerdpUnstable' has been renamed to/replaced by 'freerdp'"; # Converted to throw 2025-10-27
   frozen-bubble = throw "'frozen-bubble' has been removed because it is broken and unmaintained"; # Added 2026-05-17
   frugal = throw "'frugal' was removed because upstream has been pulled"; # Added 2025-12-20
+  fscrypt-experimental = warnAlias "'fscrypt-experimental' has been renamed to/replaced by 'fscrypt'" fscrypt; # Added 2026-01-19
   fuse-7z-ng = throw "'fuse-7z-ng' was removed as it is unmaintained, and depends on fuse2"; # Added 2026-05-05
   fuse-ext2 = throw "'fuse-ext2' was removed as it is unmaintained, and depends on fuse2"; # Added 2026-08-05
   fusee-launcher = throw "'fusee-launcher' was removed as upstream removed the original source repository fearing legal repercussions"; # Added 2025-07-05
@@ -2400,6 +2402,7 @@ mapAliases {
   stract = throw "'stract' has been removed because the upstream project was archived on 2026-04-02"; # Added 2026-07-28
   strawberry-qt5 = throw "strawberry-qt5 has been replaced by strawberry"; # Converted to throw 2025-07-19
   strawberry-qt6 = throw "strawberry-qt6 has been replaced by strawberry"; # Added 2025-07-19
+  streamlink-twitch-gui-bin = throw "'streamlink-twitch-gui-bin' has be removed due to lack on maintence and insecure electron"; # Added 2026-09-02
   stremio = throw "'stremio' has been removed as it depended on the vulnerable and outdated qt5 webengine. On Linux, consider using 'stremio-linux-shell' instead."; # Added 2026-02-11
   stringsWithDeps = warnAlias "'stringsWithDeps' has been removed from pkgs, use `lib.stringsWithDeps` instead" lib.stringsWithDeps; # Added 2025-10-30
   subberthehut = throw "'subberthehut' has been removed as it was unmaintained upstream"; # Added 2025-05-17
@@ -2554,7 +2557,7 @@ mapAliases {
   trust-dns = throw "'trust-dns' has been renamed to/replaced by 'hickory-dns'"; # Converted to throw 2025-10-27
   tvbrowser-bin = throw "'tvbrowser-bin' has been renamed to/replaced by 'tvbrowser'"; # Converted to throw 2025-10-27
   twitterBootstrap = warnAlias "'twitterBootstrap' has been renamed to 'twitter-bootstrap'"; # Added 2026-02-12
-  typescript-go = lib.warnOnInstantiate "'typescript-go' has been renamed to 'typescript'" typescript; # Added 2026-09-02
+  typescript-go = throw "'typescript-go' has been renamed to/replaced by 'typescript'"; # Added 2026-09-08
   typodermic-free-fonts = throw "'typodermic-free-fonts' has been removed as it is unmaintained in nixpkgs, and the src is prone to breakage."; # Added 2026-05-07
   typodermic-public-domain = throw "'typodermic-public-domain' has been removed as it is unmaintained in nixpkgs, and the src is prone to breakage."; # Added 2026-05-07
   typst-fmt = throw "'typst-fmt' has been renamed to/replaced by 'typstfmt'"; # Converted to throw 2025-10-27
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index f73380742e87..20b23db3339a 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -6215,8 +6215,6 @@ with pkgs;
 
   mygpoclient = with python3.pkgs; toPythonApplication mygpoclient;
 
-  nemo-qml-plugin-dbus = libsForQt5.callPackage ../development/libraries/nemo-qml-plugin-dbus { };
-
   ncurses5 = ncurses.override {
     abiVersion = "5";
   };
@@ -6655,8 +6653,6 @@ with pkgs;
 
   stlink-gui = callPackage ../by-name/st/stlink/package.nix { withGUI = true; };
 
-  streamlink-twitch-gui-bin = callPackage ../applications/video/streamlink-twitch-gui/bin.nix { };
-
   szurubooru = callPackage ../servers/web-apps/szurubooru { };
 
   tclap = tclap_1_2;
diff --git a/pkgs/top-level/python-aliases.nix b/pkgs/top-level/python-aliases.nix
index 5afbf7876efd..d50b7912c90e 100644
--- a/pkgs/top-level/python-aliases.nix
+++ b/pkgs/top-level/python-aliases.nix
@@ -651,6 +651,7 @@ mapAliases {
   radicale_infcloud = throw "'radicale_infcloud' has been renamed to/replaced by 'radicale-infcloud'"; # Converted to throw 2025-10-29
   radio_beam = throw "'radio_beam' has been renamed to/replaced by 'radio-beam'"; # Converted to throw 2025-10-29
   random-user-agent = throw "random-user-agent has been removed as it was abandoned upstream in 2018; use fake-useragent instead"; # Added 2025-10-17
+  raylib-python-cffi = raylib; # added 2026-09-07
   readme_renderer = throw "'readme_renderer' has been renamed to/replaced by 'readme-renderer'"; # Converted to throw 2025-10-29
   readthedocs-sphinx-ext = throw "'readthedocs-sphinx-ext' has been removed because it was archived upstream."; # added 2025-12-03
   recursivePthLoader = throw "'recursivePthLoader' has been renamed to/replaced by 'recursive-pth-loader'"; # Converted to throw 2025-10-29
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 571ac8bf8356..cfcfd748d914 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -16288,6 +16288,10 @@ self: super: with self; {
 
   pystray = callPackage ../development/python-modules/pystray { };
 
+  pystrich = callPackage ../development/python-modules/pystrich {
+    inherit (pkgs) ghostscript;
+  };
+
   pysubs2 = callPackage ../development/python-modules/pysubs2 { };
 
   pysuezv2 = callPackage ../development/python-modules/pysuezv2 { };
@@ -17740,7 +17744,7 @@ self: super: with self; {
 
   ray = callPackage ../development/python-modules/ray { };
 
-  raylib-python-cffi = callPackage ../development/python-modules/raylib-python-cffi { };
+  raylib = callPackage ../development/python-modules/raylib { inherit (pkgs) raylib; };
 
   razdel = callPackage ../development/python-modules/razdel { };