Merge 90445a1e69 into haskell-updates

2026-09-30 20:00:10 +00:00 · 2026-09-24 00:29:58 +00:00
parent 2bdacfaa4c 90445a1e69
commit f7adf5c0d4
321 changed files with 2358 additions and 1910 deletions
--- a/ci/github-script/bot.js
+++ b/ci/github-script/bot.js
@@ -465,9 +465,10 @@ export default async ({ github, context, core, dry }) => {
        let owners = []
        try {
          // TODO: Create owner map similar to maintainer map.
-          owners = (await readFile(`${pull_number}/owners.txt`, 'utf-8')).split(
-            '\n',
-          )
+          owners =
+            (await readFile(`${pull_number}/owners.txt`, 'utf-8')).match(
+              /[^\n]+/g,
+            ) || []
        } catch (e) {
          // Older artifacts don't have the owners.txt, yet.
          if (e.code !== 'ENOENT') throw e
@@ -483,6 +484,18 @@ export default async ({ github, context, core, dry }) => {
          if (e.code !== 'ENOENT') throw e
        }

+        // TODO: Use maintainer map instead of the artifact.
+        const user_maintainers = Object.keys(
+          JSON.parse(
+            await readFile(`${pull_number}/maintainers.json`, 'utf-8'),
+          ),
+        ).map((id) => parseInt(id))
+
+        prLabels['7.unmaintained'] =
+          user_maintainers.length === 0 &&
+          team_maintainers.length === 0 &&
+          owners.length === 0
+
        // We set this label earlier already, but the current PR state can be very different
        // after handleReviewers has requested reviews, so update it in this case to prevent
        // this label from flip-flopping.
@@ -494,12 +507,7 @@ export default async ({ github, context, core, dry }) => {
          dry,
          pull_request,
          reviews,
-          // TODO: Use maintainer map instead of the artifact.
-          user_maintainers: Object.keys(
-            JSON.parse(
-              await readFile(`${pull_number}/maintainers.json`, 'utf-8'),
-            ),
-          ).map((id) => parseInt(id)),
+          user_maintainers,
          team_maintainers,
          owners,
          getUser,
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -11265,6 +11265,17 @@
    githubId = 386666;
    keys = [ { fingerprint = "A25F 6321 AAB4 4151 4085  9924 952E ACB7 6703 BA63"; } ];
  };
+  headblockhead = {
+    email = "nixpkgs@edwardh.dev";
+    github = "headblockhead";
+    githubId = 26520767;
+    name = "Edward Hesketh";
+    keys = [
+      { fingerprint = "B02A E7D7 F9C1 5C02 0643 C349 8E97 2E26 D6D4 8C46"; }
+      { fingerprint = "8D13 B80A A22C C7B2 3FCA 1D49 672F FB8B 28B1 7E09"; }
+      { fingerprint = "76C6 E96B 6A56 1DBE 8F92 B2E1 AE25 B4F5 B634 6CCF"; }
+    ];
+  };
  hectorj = {
    email = "hector.jusforgues+nixos@gmail.com";
    github = "hectorj";
--- a/nixos/modules/programs/wayland/mango.nix
+++ b/nixos/modules/programs/wayland/mango.nix
@@ -48,6 +48,8 @@ in
      };
    };

+    meta.maintainers = with lib.maintainers; [ yvnth ];
+
    # Set up the session for Display Managers (GDM, SDDM, etc.)
    services.displayManager.sessionPackages = [ cfg.package ];
  };
--- a/nixos/modules/services/matrix/synapse.nix
+++ b/nixos/modules/services/matrix/synapse.nix
@@ -1494,7 +1494,7 @@ in
            PrivateDevices = true;
            PrivateTmp = true;
            PrivateUsers = true;
-            ProcSubset = "pid";
+            ProcSubset = "all"; # pid breaks most process metrics
            ProtectClock = true;
            ProtectControlGroups = true;
            ProtectHome = true;
--- a/nixos/modules/services/networking/netbird.nix
+++ b/nixos/modules/services/networking/netbird.nix
@@ -501,6 +501,13 @@ in
      };
    })
    {
+      assertions = lib.optionals (cfg.clients != { }) [
+        {
+          assertion = !(config.networking.nftables.enable && config.networking.nftables.flushRuleset);
+          message = "networking.nftables.flushRuleset is enabled, which will flush the nftables tables installed by services.netbird.clients. Flushing these tables will break netbird functionality including DNS resolution and network routing.";
+        }
+      ];
+
      boot.extraModulePackages = optional (
        cfg.clients != { } && (versionOlder kernel.version "5.6")
      ) kernelPackages.wireguard;
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@@ -2066,6 +2066,7 @@ in
  xautolock = runTest ./xautolock.nix;
  xfce = runTest ./xfce.nix;
  xfce-wayland = runTest ./xfce-wayland.nix;
+  xinetd = runTest ./xinetd.nix;
  xmonad = runTest ./xmonad.nix;
  xmonad-xdg-autostart = runTest ./xmonad-xdg-autostart.nix;
  xpadneo = runTest ./xpadneo.nix;
--- a/nixos/tests/xinetd.nix
+++ b/nixos/tests/xinetd.nix
@@ -0,0 +1,65 @@
+{ lib, pkgs, ... }:
+{
+  name = "xinetd";
+  meta.maintainers = [ lib.maintainers.h7x4 ];
+
+  containers.machine = {
+    environment.systemPackages = [ pkgs.netcat ];
+
+    services.xinetd = {
+      enable = true;
+      services = [
+        {
+          name = "ping-pong-tcp";
+          protocol = "tcp";
+          port = 8765;
+          unlisted = true;
+          server =
+            let
+              pingPongTcp = pkgs.writeShellScript "ping-pong-tcp" ''
+                read -r line
+                if [ "$line" = "ping" ]; then
+                  echo "pong"
+                fi
+              '';
+            in
+            "${pingPongTcp}";
+        }
+        {
+          name = "ping-pong-udp";
+          protocol = "udp";
+          port = 8766;
+          unlisted = true;
+          server =
+            let
+              pingPongUdp = pkgs.writers.writePython3 "ping-pong-udp" { } ''
+                import socket
+
+                sock = socket.socket(fileno=0)
+                data, peer = sock.recvfrom(1024)
+                sock.connect(peer)
+                if data.strip() == b"ping":
+                    sock.send(b"pong\n")
+              '';
+            in
+            "${pingPongUdp}";
+        }
+      ];
+    };
+  };
+
+  testScript = ''
+    start_all()
+
+    machine.wait_for_unit("xinetd.service")
+    machine.wait_for_open_port(8765)
+
+    with subtest("Query TCP"):
+        output = machine.succeed("nc -w5 localhost 8765 <<<ping")
+        assert "pong" in output, f"Unexpected output: {output}"
+
+    with subtest("Query UDP"):
+        output = machine.succeed("nc -u -w5 localhost 8766 <<<ping")
+        assert "pong" in output, f"Unexpected output: {output}"
+  '';
+}
--- a/pkgs/applications/audio/magnetophonDSP/CharacterCompressor/default.nix
+++ b/pkgs/applications/audio/magnetophonDSP/CharacterCompressor/default.nix
@@ -43,7 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
  meta = {
    description = "Compressor with character. For jack and lv2";
    homepage = "https://github.com/magnetophon/CharacterCompressor";
-    license = lib.licenses.gpl3;
+    license = lib.licenses.gpl2Plus;
    maintainers = [ lib.maintainers.magnetophon ];
  };
 })
--- a/pkgs/applications/editors/emacs/elisp-packages/manual-packages/ghostel/package.nix
+++ b/pkgs/applications/editors/emacs/elisp-packages/manual-packages/ghostel/package.nix
@@ -58,13 +58,13 @@ in
 melpaBuild (finalAttrs: {
  pname = "ghostel";

-  version = "0.53.0";
+  version = "0.56.0";

  src = fetchFromGitHub {
    owner = "dakra";
    repo = "ghostel";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-ZzRf/3QoG499S2bJhA+wnphqX0KDiY+Pe7yENKh8AV4=";
+    hash = "sha256-NpfnlggAcThNw9uY7Uq4qFPEJ+md8aZ8i32CQSUKz+w=";
  };

  # these can be put into mkModule, but we put them here to ease user overrideAttrs
@@ -72,7 +72,7 @@ melpaBuild (finalAttrs: {
  zigDeps = finalAttrs.zig.fetchDeps {
    inherit (finalAttrs) src pname version;
    fetchAll = true;
-    hash = "sha256-NcNp0FnMy6FfZ63+pwiTRCmJ8FIovJEOhNvxVr1+uSQ=";
+    hash = "sha256-87q0nSOkZaIHW8Ztgf5pR13sHNw7eQKJhu12QjRMTvA=";
  };

  files = ''
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -1473,8 +1473,8 @@ let
        mktplcRef = {
          name = "protobuf-vsc";
          publisher = "DrBlury";
-          version = "1.6.14";
-          hash = "sha256-wup+gWozELTO6jcNF5HZR1oRRwnGMor/PuEtdpRGz8g=";
+          version = "1.6.15";
+          hash = "sha256-KWWjDiINAJljQnKzwqyJMZc6ZCOx4/Wq+4fNAn0v2CI=";
        };
        meta = {
          description = "Comprehensive Protocol Buffers support with syntax highlighting, IntelliSense, diagnostics and formatting";
@@ -1742,8 +1742,8 @@ let
        mktplcRef = {
          name = "dependi";
          publisher = "fill-labs";
-          version = "1.5.0";
-          hash = "sha256-LN1rW0IyC5BAdM6OynoHldm+adTYG8He6SaDh20fNbs=";
+          version = "1.20.0";
+          hash = "sha256-XVB6wsjvQvYNz8fymmUIZKQmprwqDf9aQskjjFe2qAk=";
        };
        meta = {
          changelog = "https://marketplace.visualstudio.com/items/fill-labs.dependi/changelog";
--- a/pkgs/applications/editors/vscode/extensions/james-yu.latex-workshop/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/james-yu.latex-workshop/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "latex-workshop";
    publisher = "James-Yu";
-    version = "10.18.0";
-    hash = "sha256-nuBx5ujJPbKvXRvIbUaPaIgoUeeYp4XwHwOdAjCVqUY=";
+    version = "10.19.0";
+    hash = "sha256-V1IA5FVYwWKRl8lRo0F1/6Y1l3aTRruLNuPA1XbD/Xc=";
  };
  meta = {
    changelog = "https://marketplace.visualstudio.com/items/James-Yu.latex-workshop/changelog";
--- a/pkgs/applications/editors/vscode/extensions/saoudrizwan.claude-dev/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/saoudrizwan.claude-dev/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "claude-dev";
    publisher = "saoudrizwan";
-    version = "4.1.17";
-    hash = "sha256-godUcnRN7Uo2DiLHJrthAZYuzwoXiqjv6Epcfqco0vU=";
+    version = "4.1.19";
+    hash = "sha256-Qo02ve7dIzkaotwqy5L1104v5EQpAj/JQUXya0Mm0c4=";
  };

  meta = {
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -9,11 +9,11 @@
    "vendorHash": "sha256-RTfj2Omiqe92Ad0swEY/aGIMvcXb39bdQoObYKiekiw="
  },
  "a10networks_thunder": {
-    "hash": "sha256-jwk2DKNYlYB6VJ9Y73SbLOcRzELqJTKbD0KOsrTqT3I=",
+    "hash": "sha256-wqTaX8tJvQa4P2VyirjyaPiWtvLMqrAhmi0oeKJPYD4=",
    "homepage": "https://registry.terraform.io/providers/a10networks/thunder",
    "owner": "a10networks",
    "repo": "terraform-provider-thunder",
-    "rev": "v1.6.1",
+    "rev": "v1.6.2",
    "spdx": "BSD-2-Clause",
    "vendorHash": null
  },
@@ -82,13 +82,13 @@
    "vendorHash": "sha256-LvTVRhhgzePYRR98t9pqvRRHcLrZ2lPHbtdzqoxtFYo="
  },
  "auth0_auth0": {
-    "hash": "sha256-FKDe46eyXenUHFbTSrJg28fEQfARRgVu0pNMybCC93g=",
+    "hash": "sha256-+uK3GiQmt918kK0FxdHbeGfgCO/BtFyjCX3LdSF3Dtg=",
    "homepage": "https://registry.terraform.io/providers/auth0/auth0",
    "owner": "auth0",
    "repo": "terraform-provider-auth0",
-    "rev": "v1.57.0",
+    "rev": "v1.58.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-q+s83I2N4+llosb3XnGoTB2tpBLWES4tzsV86wmWbpI="
+    "vendorHash": "sha256-Exa05oF9tplBq/m7rfLPOJQkoarw8MW7GcvHe6SSE24="
  },
  "aviatrixsystems_aviatrix": {
    "hash": "sha256-46djOfAj/5kfeoKLQHbeKefzdGbmlBATR+uN/IaAn8I=",
@@ -328,11 +328,11 @@
    "vendorHash": null
  },
  "digitalocean_digitalocean": {
-    "hash": "sha256-pv2Suo2PpX0+D5rYno6sprrirt70mwx+lBjGPW8UTmA=",
+    "hash": "sha256-fmSMSvmJKFVeZwXUoy+hLjC3rk1mRenhx9206FdIe2E=",
    "homepage": "https://registry.terraform.io/providers/digitalocean/digitalocean",
    "owner": "digitalocean",
    "repo": "terraform-provider-digitalocean",
-    "rev": "v2.100.0",
+    "rev": "v2.102.0",
    "spdx": "MPL-2.0",
    "vendorHash": null
  },
@@ -400,11 +400,11 @@
    "vendorHash": "sha256-JnbQPQi/dy3pEwurlzIcfBdbAfvYJVsoLYnvJPX3sjc="
  },
  "exoscale_exoscale": {
-    "hash": "sha256-VFKkCBuBRW6oAL1q9buZcv7EHIDAqFKW5neVH78jRZc=",
+    "hash": "sha256-k8Ydo4Ey9EkU2Y4E85ECwY0Iz4Tv3Vdj7K1ryfpn7eI=",
    "homepage": "https://registry.terraform.io/providers/exoscale/exoscale",
    "owner": "exoscale",
    "repo": "terraform-provider-exoscale",
-    "rev": "v0.71.0",
+    "rev": "v0.72.0",
    "spdx": "MPL-2.0",
    "vendorHash": null
  },
@@ -481,13 +481,13 @@
    "vendorHash": "sha256-xl92EeXmhKNEbdCmzfd0p8EVkCjLi2gM47A69IXXAyE="
  },
  "goharbor_harbor": {
-    "hash": "sha256-daV5W/fLW4+5XG0Lh8rcF7A9CKHq232/9kiMT5OzI1s=",
+    "hash": "sha256-j1NJzxglO0C8JFp6mx3ZOYiASGFI+wzMXJ0FFzCl1Ho=",
    "homepage": "https://registry.terraform.io/providers/goharbor/harbor",
    "owner": "goharbor",
    "repo": "terraform-provider-harbor",
-    "rev": "v3.12.4",
+    "rev": "v3.12.5",
    "spdx": "MIT",
-    "vendorHash": "sha256-vEQ++yk7BYUsgejppHiRJeMGzG4QOLfdPixCTLz9sbI="
+    "vendorHash": "sha256-1fT8kvMvcufCSpXVi/lEygvwPiQK8CMtcODMPMPC+EA="
  },
  "grafana_grafana": {
    "hash": "sha256-rOIaQICjrMHGU4jjN46R2ZK+mnxx+DNHZgVCsi99ESA=",
@@ -526,13 +526,13 @@
    "vendorHash": "sha256-qRX2liR1MQy8JuOuUknV70dibU4mgih3nJOy7/raBug="
  },
  "hashicorp_awscc": {
-    "hash": "sha256-juctslCHuUr3pL9VTOET/s3P0SGbtlInZESmvgNL+7M=",
+    "hash": "sha256-K2F3+jf1kTbduP87bxsy00Z1bJSMsNENTjCLMCYGtiA=",
    "homepage": "https://registry.terraform.io/providers/hashicorp/awscc",
    "owner": "hashicorp",
    "repo": "terraform-provider-awscc",
-    "rev": "v1.101.0",
+    "rev": "v1.102.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-YTTTjXGnWNBD4oA1mLdumXd8ZGZ03M5tXrW9OFao1pM="
+    "vendorHash": "sha256-JEPUJRuVkvZe6XEQWAe++4eUGE8/q3kMzr85LLR9qsE="
  },
  "hashicorp_azuread": {
    "hash": "sha256-mEYEZIztDjyqWSJFoJPXtV0E9YikumtwGVtZA4Jfw3U=",
@@ -941,13 +941,13 @@
    "vendorHash": "sha256-ulhKT0DaS6gg9Ucz9pqqIg4mxRpGDGz2rN1R0RNuumg="
  },
  "mongodb_mongodbatlas": {
-    "hash": "sha256-bSZBt8kPo4rhkgCYIBJvU8EEN5rPrG6EcjMUbdzE6gw=",
+    "hash": "sha256-F0SKTzkM/I4LT2e9kbfmRRBLWp2EI1vKX5Ypu145KA0=",
    "homepage": "https://registry.terraform.io/providers/mongodb/mongodbatlas",
    "owner": "mongodb",
    "repo": "terraform-provider-mongodbatlas",
-    "rev": "v2.17.0",
+    "rev": "v2.18.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-6R9s/9SnkTqk9sYZhW/O5U/opqnTTMqx4SRnMF+vpHE="
+    "vendorHash": "sha256-wmA9pSlOnkQ3qvmFkIPS5PPXcLrFrud9bD30vq76ZYg="
  },
  "namecheap_namecheap": {
    "hash": "sha256-eV2K3KHTEXEEt1WXwfYfNMK+gLUY0EoHFQg9kLdAI3s=",
--- a/pkgs/applications/video/kodi/addons/arteplussept/default.nix
+++ b/pkgs/applications/video/kodi/addons/arteplussept/default.nix
@@ -12,11 +12,11 @@
 buildKodiAddon rec {
  pname = "arteplussept";
  namespace = "plugin.video.arteplussept";
-  version = "1.6.2";
+  version = "2.0.0";

  src = fetchzip {
    url = "https://mirrors.kodi.tv/addons/${lib.toLower rel}/${namespace}/${namespace}-${version}.zip";
-    hash = "sha256-de33QOa6vDpZdTHDE1o/9L+ihPHZ6xg870CpUcYr3dU=";
+    hash = "sha256-Ir4O2Tr77k8jB+OQVi65soJGLJQRKAHsLtQICj5pQtU=";
  };

  propagatedBuildInputs = [
--- a/pkgs/applications/virtualization/docker/default.nix
+++ b/pkgs/applications/virtualization/docker/default.nix
@@ -424,18 +424,18 @@ in

  docker_29 =
    let
-      version = "29.8.0";
+      version = "29.8.1";
    in
    callPackage dockerGen {
      inherit version;
      cliRev = "v${version}";
-      cliHash = "sha256-HV4rdWGDtPoYIaGBnHZbYNKr2D6zk6sb9sA0tNbQce4=";
+      cliHash = "sha256-xJ0UATkStx31/DHzmmXE0Srm9BYMY1RZ5rIz36kHesw=";
      mobyRev = "docker-v${version}";
-      mobyHash = "sha256-V8p+MDEEMERGqQ9sWKPE/jkUw43UcO0x3Z1XZ8DWM2E=";
+      mobyHash = "sha256-tyn738es5SBqVAVKv2tgj88c6WJbS13MDLVgi2eWsSc=";
      runcRev = "v1.5.1";
      runcHash = "sha256-N059CtWkenSXYksVu5Uh+sGodC+JHc91R56b+VoC96k=";
-      containerdRev = "v2.3.4";
-      containerdHash = "sha256-IGgToUpkbqtjGJD+GtCPSeHW9ZRnSS8NMfECok9HgjU=";
+      containerdRev = "v2.3.5";
+      containerdHash = "sha256-RIZxlXwgOizLVKr4XRIKAlUP19URolGp4J849hoQMSM=";
      tiniRev = "369448a167e8b3da4ca5bca0b3307500c3371828";
      tiniHash = "sha256-jCBNfoJAjmcTJBx08kHs+FmbaU82CbQcf0IVjd56Nuw=";
    };
--- a/pkgs/applications/window-managers/hyprwm/hyprland-plugins/default.nix
+++ b/pkgs/applications/window-managers/hyprwm/hyprland-plugins/default.nix
@@ -43,6 +43,7 @@ let
    { hyprgrass = import ./hyprgrass.nix; }
    { hyprspace = import ./hyprspace.nix; }
    { hyprsplit = import ./hyprsplit.nix; }
+    { hyprtasking = import ./hyprtasking.nix; }
    (import ./hyprland-plugins.nix)
    { imgborders = import ./imgborders.nix; }
    (lib.optionalAttrs config.allowAliases {
--- a/pkgs/applications/window-managers/hyprwm/hyprland-plugins/hyprtasking.nix
+++ b/pkgs/applications/window-managers/hyprwm/hyprland-plugins/hyprtasking.nix
@@ -0,0 +1,33 @@
+{
+  lib,
+  meson,
+  fetchFromGitHub,
+  ninja,
+  mkHyprlandPlugin,
+  nix-update-script,
+}:
+mkHyprlandPlugin (finalAttrs: {
+  pluginName = "hyprtasking";
+  version = "0-unstable-2026-09-20";
+
+  src = fetchFromGitHub {
+    owner = "raybbian";
+    repo = "hyprtasking";
+    rev = "12d1c68c5b9cc6ca169403cf4fde067fd78bbf62";
+    hash = "sha256-2K6YGGahYJVepvoUkKjHHW1Yr0izKwyoN30CDwoZYNw=";
+  };
+
+  nativeBuildInputs = [
+    meson
+    ninja
+  ];
+
+  passthru.updateScript = nix-update-script { extraArgs = [ "--version=branch" ]; };
+
+  meta = {
+    homepage = "https://github.com/raybbian/hyprtasking";
+    description = "Powerful workspace management plugin for Hyprland";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ rachalaraj ];
+  };
+})
--- a/pkgs/build-support/dotnet/fetch-nupkg/overrides.nix
+++ b/pkgs/build-support/dotnet/fetch-nupkg/overrides.nix
@@ -79,7 +79,10 @@
      lib.optionalAttrs stdenv.hostPlatform.isLinux {
        nativeBuildInputs = old.nativeBuildInputs or [ ] ++ [ autoPatchelfHook ];

-        buildInputs = old.buildInputs or [ ] ++ [ fontconfig ];
+        buildInputs =
+          old.buildInputs or [ ]
+          ++ [ fontconfig ]
+          ++ lib.optional (lib.versionAtLeast old.version "4") (lib.getLib stdenv.cc.cc);

        preInstall = old.preInstall or "" + ''
          cd runtimes
--- a/pkgs/by-name/an/antigravity-cli/package.nix
+++ b/pkgs/by-name/an/antigravity-cli/package.nix
@@ -6,8 +6,8 @@
  versionCheckHook,
 }:
 let
-  version = "1.2.3";
-  buildId = "6402006605234176";
+  version = "1.2.9";
+  buildId = "6237955799515136";
  wholeVersion = "${version}-${buildId}";

  throwSystem = throw "Unsupported system: ${stdenvNoCC.hostPlatform.system}";
@@ -15,15 +15,15 @@ let
  sourceData = {
    x86_64-linux = fetchurl {
      url = "https://storage.googleapis.com/antigravity-public/antigravity-cli/${wholeVersion}/linux-x64/cli_linux_x64.tar.gz";
-      hash = "sha256-lsZgrjuF/+/avYqMqxHsILXvAbGkF7nXO6BCWJ79LPQ=";
+      hash = "sha256-TleXrQChVKEkYr0V7a6mMFRAE8q5fj/6kjUz7qCj284=";
    };
    aarch64-linux = fetchurl {
      url = "https://storage.googleapis.com/antigravity-public/antigravity-cli/${wholeVersion}/linux-arm/cli_linux_arm64.tar.gz";
-      hash = "sha256-Fic4n3O1BfgBSFpz4cPsd+jZvocMMsjaA1pJNpW2lPk=";
+      hash = "sha256-bq1XoRRtIy6SYTl82dfHpfwgiFlGcuMJbPyezyS8F2c=";
    };
    aarch64-darwin = fetchurl {
      url = "https://storage.googleapis.com/antigravity-public/antigravity-cli/${wholeVersion}/darwin-arm/cli_mac_arm64.tar.gz";
-      hash = "sha256-YSMl+5ZkEC22pvw/0HfrMW1pQlkxK7OZsgaZwPJb82E=";
+      hash = "sha256-7kPA1JzN4giRClGq9AObYIM+KkYdq0U5F+mK2PF70U4=";
    };
  };
 in
--- a/pkgs/by-name/an/anytype-cli/package.nix
+++ b/pkgs/by-name/an/anytype-cli/package.nix
@@ -2,23 +2,24 @@
  lib,
  buildGoModule,
  fetchFromGitHub,
-  nix-update-script,
  tantivy-go,
+  versionCheckHook,
+  nix-update-script,
 }:
 buildGoModule (finalAttrs: {
  __structuredAttrs = true;

  pname = "anytype-cli";
-  version = "0.3.6";
+  version = "0.3.7";

  src = fetchFromGitHub {
    owner = "anyproto";
    repo = "anytype-cli";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-T/mdF+pzApm15Cg2g1ybgU7pEHLsTC4jD7WuXzNqM2M=";
+    hash = "sha256-79YLYbS0pj3n6t+gIvyb7qBmeARJNTuxll4BWt1WMRs=";
  };

-  vendorHash = "sha256-S6Xb2XYAn/cTC++1WK5cmXcC6QCZpPoYMRrjk/IPKas=";
+  vendorHash = "sha256-XgZD2klVYwa78AMSs2nPptgzo9xM+Ishs/rUvjVFZks=";
  proxyVendor = true;

  env.CGO_ENABLED = 1;
@@ -26,10 +27,12 @@ buildGoModule (finalAttrs: {

  ldflags = [
    "-s"
-    "-w"
    "-X github.com/anyproto/anytype-cli/core.Version=v${finalAttrs.version}"
  ];

+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
  passthru.updateScript = nix-update-script { };

  meta = {
--- a/pkgs/by-name/an/anytype-heart/package.nix
+++ b/pkgs/by-name/an/anytype-heart/package.nix
@@ -25,7 +25,7 @@ buildGoModule (finalAttrs: {

  # Use only versions specified in anytype-ts middleware.version file:
  #  https://github.com/anyproto/anytype-ts/blob/v<anytype-ts-version>/middleware.version
-  version = "0.51.0-rc1";
+  version = "0.51.3";

  # Update only together with 'anytype' package.
  # nixpkgs-update: no auto update
@@ -33,10 +33,10 @@ buildGoModule (finalAttrs: {
    owner = "anyproto";
    repo = "anytype-heart";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Hxch8p+fIUOyhePZPmb9i1O7IyPMlwZP8ElRu42DEzk=";
+    hash = "sha256-w7v5V+jC/L4C8Vvv/CNAwX68rRyupjxYSJIZcXboRb0=";
  };

-  vendorHash = "sha256-6LLIs4iT3qwV6luZ08RS05CmUFnNFYLazHeKNG76gV4=";
+  vendorHash = "sha256-2QJ4NK+hpQ5gS65lk8KPti1AsxfPj86skZAU6XytfgA=";

  subPackages = [ "cmd/grpcserver" ];
  tags = [
--- a/pkgs/by-name/an/anytype/package.nix
+++ b/pkgs/by-name/an/anytype/package.nix
@@ -24,7 +24,7 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "anytype";
-  version = "0.56.5";
+  version = "0.57.0";

  strictDeps = true;

@@ -32,14 +32,14 @@ stdenvNoCC.mkDerivation (finalAttrs: {
    owner = "anyproto";
    repo = "anytype-ts";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-X1z2lQtmMuyJKLL43hBYQCj976rCmha43gffZeLrnMY=";
+    hash = "sha256-4b9pjdGe8Jv1xxUzNuXDrOKQzEDlCOdIgM8OXwe2vk8=";
  };

  locales = fetchFromGitHub {
    owner = "anyproto";
    repo = "l10n-anytype-ts";
-    rev = "2bb4678cebd453559dc17e7bab204f237fa17553";
-    hash = "sha256-e3DfvUlfRJhwp6lLqPEkm4bD1bl+KLP6laVnRaHOYsU=";
+    rev = "0cf0fdff858c4eda3004f8245051e1b952664eb6";
+    hash = "sha256-AD0Ikz5koNljrQJqwH/W8sZrba42GXGGSyNIYajouIs=";
  };

  node_modules = stdenvNoCC.mkDerivation {
@@ -87,7 +87,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {

    dontFixup = true;

-    outputHash = "sha256-MaqiNcD2unlMDPtt2vuNDa+kGXY61Hv93SuyW/+s4XM=";
+    outputHash = "sha256-TPahhFcPMTynVR8tU6YcxOBnxwUrj2EVzrAc+uuihFk=";
    outputHashMode = "recursive";
  };

--- a/pkgs/by-name/ap/apidog/package.nix
+++ b/pkgs/by-name/ap/apidog/package.nix
@@ -7,11 +7,11 @@

 let
  pname = "apidog";
-  version = "2.8.45";
+  version = "2.8.48";

  src = fetchurl {
    url = "https://file-assets.apidog.com/download/${version}/Apidog-${version}.AppImage";
-    hash = "sha256-F7NWXmr5PzzUBWBBHBBWwdzxMdlDNLMiLTeMippnJzU=";
+    hash = "sha256-wBpJ8GuJg0sOjrbf/dRyOes/6SUJig9JA7YU5spHoP4=";
  };

  appimageContents = appimageTools.extract {
--- a/pkgs/by-name/ap/appium-inspector/package.nix
+++ b/pkgs/by-name/ap/appium-inspector/package.nix
@@ -91,9 +91,13 @@ buildNpmPackage (finalAttrs: {
        PKG_FILE = toString ./package.nix;
      };
      text = ''
+        current_electron_version="$(grep -oP -m 1 "(?<=electron_)(\d+)" "$PKG_FILE")"
        new_src="$(nix-build --attr "pkgs.$PNAME.src" --no-out-link)"
        new_electron_major="$(jq -r '.devDependencies.electron | split(".")[0] | tonumber' "$new_src/package.json")"
-        sed -i -E "s/electron_[0-9]+/electron_$new_electron_major/g" "$PKG_FILE"
+        if (( current_electron_version >= new_electron_major )); then
+          exit 0
+        fi
+        sed -i -E "s/electron_$current_electron_version/electron_$new_electron_major/g" "$PKG_FILE"
      '';
    }))
  ];
--- a/pkgs/by-name/at/atlantis/package.nix
+++ b/pkgs/by-name/at/atlantis/package.nix
@@ -1,19 +1,19 @@
 {
  lib,
-  buildGoModule,
+  buildGo127Module,
  fetchFromGitHub,
  versionCheckHook,
 }:

-buildGoModule (finalAttrs: {
+buildGo127Module (finalAttrs: {
  pname = "atlantis";
-  version = "0.47.1";
+  version = "0.48.0";

  src = fetchFromGitHub {
    owner = "runatlantis";
    repo = "atlantis";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-GNHu6nZijSd+kluqWTYrmUZubGmicXQdzChXnJbXCyw=";
+    hash = "sha256-/Ix/1WYhaNQdCIXhUvuEOsDZMrIwSdO2fr0TSUVZjOE=";
  };

  ldflags = [
@@ -21,7 +21,7 @@ buildGoModule (finalAttrs: {
    "-X=main.date=1970-01-01T00:00:00Z"
  ];

-  vendorHash = "sha256-TmKoUcX4nbrJtSpuzI7uTEzcpRo3K3xM8QjyjogklO0=";
+  vendorHash = "sha256-EfxLEqjYtLl4a2PYJxh7+kWyLf39KvtZugLBdAMOJPs=";

  subPackages = [ "." ];

--- a/pkgs/by-name/aw/aws-nuke/package.nix
+++ b/pkgs/by-name/aw/aws-nuke/package.nix
@@ -10,16 +10,16 @@

 buildGoModule (finalAttrs: {
  pname = "aws-nuke";
-  version = "3.66.0";
+  version = "3.68.2";

  src = fetchFromGitHub {
    owner = "ekristen";
    repo = "aws-nuke";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-usVPWopc+sNu1YcalVfHzJ+sN13yuOXbS+KAEISgaiU=";
+    hash = "sha256-i2tT/f3ugXLdn7tSWRbXwyEAqNFWMlPRxbc7iZMwgDc=";
  };

-  vendorHash = "sha256-Cm6cevKjg7nsWKtZKSMDZGrjRE7VimBVoX8gfBWf1cM=";
+  vendorHash = "sha256-DpgtvgU6IIWQKc6BWmJ7uAoNumuaqPqRLZG3tetl1qk=";

  subPackages = [ "." ];

--- a/pkgs/by-name/az/azure-cli/extensions-manual.nix
+++ b/pkgs/by-name/az/azure-cli/extensions-manual.nix
@@ -174,9 +174,9 @@

  confcom = mkAzExtension rec {
    pname = "confcom";
-    version = "2.1.0";
+    version = "2.1.1";
    url = "https://azcliprod.blob.core.windows.net/cli-extensions/confcom-${version}-py3-none-any.whl";
-    hash = "sha256-mcUYTxpjounvP2500nFgXF+WKERJdLuYXb6zt31v4NA=";
+    hash = "sha256-e8nZmjSoEuU3mjQdFfQlHjHuglNk/YTgVmj40+A40E8=";
    description = "Microsoft Azure Command-Line Tools Confidential Container Security Policy Generator Extension";
    nativeBuildInputs = [ autoPatchelfHook ];
    buildInputs = [ openssl ];
--- a/pkgs/by-name/ba/bazarr/package.nix
+++ b/pkgs/by-name/ba/bazarr/package.nix
@@ -6,19 +6,19 @@
  lib,
  nix-update-script,
  nixosTests,
-  nodejs_22,
+  nodejs_24,
  python313Packages,
  unar,
 }:
 python313Packages.buildPythonApplication (finalAttrs: {
  pname = "bazarr";
-  version = "1.6.0";
+  version = "1.6.1";

  src = fetchFromGitHub {
    owner = "morpheus65535";
    repo = "bazarr";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-r3H0JEcGYzQOTHVR/zONmtOIF+LnJd+qn2pcAj8vdOA=";
+    hash = "sha256-m9429gSt9xrA3N9w6eIBtHmQWOZDiRKIsu52fusQutU=";
  };

  dependencies = with python313Packages; [
@@ -74,9 +74,9 @@ python313Packages.buildPythonApplication (finalAttrs: {

      sourceRoot = "${finalAttrs.src.name}/frontend";

-      nodejs = nodejs_22;
+      nodejs = nodejs_24;

-      npmDepsHash = "sha256-cb++eqVtKZer9B1rwJ9WR4mZImnASeFU2MojgXAPWf4=";
+      npmDepsHash = "sha256-82hLGQBuymU7DhDn+aYQIay1cVR+d4E3nU+ZNhJ8xJ0=";

      nativeBuildInputs = [ dart-sass ];

--- a/pkgs/by-name/bo/boat-cli/package.nix
+++ b/pkgs/by-name/bo/boat-cli/package.nix
@@ -9,16 +9,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "boat-cli";
-  version = "0.9.2";
+  version = "1.0.1";

  src = fetchFromGitHub {
    owner = "coko7";
    repo = "boat-cli";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-oS+NfEQKAcfZwYQkftMJAUz7fG1nleruAROMUUbBP3Y=";
+    hash = "sha256-6VrjJYrP/EDK0e303lJT045Ox4Kebn9yr4dbrd8V3F8=";
  };

-  cargoHash = "sha256-mHqXIFI2KJOMnxdG3X4DHDozFDPmqw4f//ori3Dc7us=";
+  cargoHash = "sha256-XbwkN4oHWsaEYkCwf/LtnGJKJFdKdNGjFqUbONBkE68=";

  nativeBuildInputs = [
    writableTmpDirAsHomeHook
--- a/pkgs/by-name/bo/bom/package.nix
+++ b/pkgs/by-name/bo/bom/package.nix
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "bom";
-  version = "0.7.1";
+  version = "0.8.0";

  src = fetchFromGitHub {
    owner = "kubernetes-sigs";
    repo = "bom";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-OLbzk1Ix8N2R+od3NQg0JviEcnw6Sw1+wrak26ZWYFw=";
+    hash = "sha256-iZ5GnAgBKESiR3ywSpGfjcuO51tsQiF+cEt4O9bnBrs=";
    # populate values that require us to use git. By doing this in postFetch we
    # can delete .git afterwards and maintain better reproducibility of the src.
    leaveDotGit = true;
@@ -27,7 +27,7 @@ buildGoModule (finalAttrs: {
    '';
  };

-  vendorHash = "sha256-gHlrpseovxAv+YdHipUwuIhUDoK05oizMfUpQTHqi6M=";
+  vendorHash = "sha256-YslhQjHBpFDfNyI5TW8XmxPwK3HhwSmsvNtGzqVFDOw=";

  nativeBuildInputs = [ installShellFiles ];

--- a/pkgs/by-name/bu/buildbox/package.nix
+++ b/pkgs/by-name/bu/buildbox/package.nix
@@ -23,13 +23,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "buildbox";
-  version = "1.4.21";
+  version = "1.4.26";

  src = fetchFromGitLab {
    owner = "BuildGrid";
    repo = "buildbox/buildbox";
    tag = finalAttrs.version;
-    hash = "sha256-Kg7aiVeOMA+hke481r0btUpzk/K0h7qA9l6DuLR+OAM=";
+    hash = "sha256-MqJSGyLq6M8cQT3bCPH+piJPbz6cU/CXWneWzBSSgnY=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/bu/buildstream/package.nix
+++ b/pkgs/by-name/bu/buildstream/package.nix
@@ -25,14 +25,14 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "buildstream";
-  version = "2.8.0";
+  version = "2.8.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "apache";
    repo = "buildstream";
    tag = finalAttrs.version;
-    hash = "sha256-TS1er7lWoaMaVnfT1GAApt2qxxyTrl0o354v6rIpgCA=";
+    hash = "sha256-i46AdbGk/xGZeyh6bxQd1J3L3EH/oIcjX9cJSDscfH0=";
  };

  build-system = with python3Packages; [
--- a/pkgs/by-name/bu/bulwark/package.nix
+++ b/pkgs/by-name/bu/bulwark/package.nix
@@ -10,13 +10,13 @@
 }:
 buildNpmPackage (finalAttrs: {
  pname = "bulwark";
-  version = "1.9.2";
+  version = "1.10.0";

  src = fetchFromGitHub {
    owner = "bulwarkmail";
    repo = "webmail";
    tag = finalAttrs.version;
-    hash = "sha256-HWDBwOZ84wbT+tUBTeSyD/4y8RJUbdL15BofXPdIT1Q=";
+    hash = "sha256-ppTn1VKIzMgqaozMmoc/33EKpbJu/LCk1mp5qCjr40E=";
    leaveDotGit = true;
    postFetch = ''
      cd "$out"
@@ -24,7 +24,7 @@ buildNpmPackage (finalAttrs: {
      find "$out" -name .git -print0 | xargs -0 rm -rf
    '';
  };
-  npmDepsHash = "sha256-pNA8Kl1ZsblsMRZyqiLx07MPec4fPnJJqJs0gbLfNaA=";
+  npmDepsHash = "sha256-AFT6y6LVRhsezmEbjw095nrF8dkuRuf93IjBGyQjNtM=";

  strictDeps = true;

--- a/pkgs/by-name/bu/bup/package.nix
+++ b/pkgs/by-name/bu/bup/package.nix
@@ -15,7 +15,7 @@
 assert par2Support -> par2cmdline != null;

 let
-  version = "0.33.10";
+  version = "0.34";

  pythonDeps =
    with python3.pkgs;
@@ -38,7 +38,7 @@ stdenv.mkDerivation {
    repo = "bup";
    owner = "bup";
    tag = version;
-    hash = "sha256-uqXlfTFRgCN9c00iQik+IMN6k81fpeY6gNscP54Xzgs=";
+    hash = "sha256-5JCYhYIUMSho+nWKUbf5v/jxgbtOYa5IQXJvDToScdY=";
  };

  buildInputs = [
@@ -54,7 +54,7 @@ stdenv.mkDerivation {

  postPatch = ''
    patchShebangs --build .
-    substituteInPlace ./config/configure \
+    substituteInPlace configure \
      --replace-fail 'bup_git=' 'bup_git="${lib.getExe git}" #'
  '';

--- a/pkgs/by-name/ca/caido-desktop/package.nix
+++ b/pkgs/by-name/ca/caido-desktop/package.nix
@@ -68,8 +68,7 @@ let
        -t $out/share/applications
      substituteInPlace $out/share/applications/caido.desktop \
        --replace-fail "Exec=AppRun --no-sandbox %U" "Exec=caido-desktop %U"
-      install -m 444 -D ${appimageContents}/caido.png \
-        $out/share/icons/hicolor/512x512/apps/caido.png
+      cp -r ${appimageContents}/usr/share/icons $out/share
      wrapProgram $out/bin/${pname} \
        --set WEBKIT_DISABLE_COMPOSITING_MODE 1 \
        --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto --enable-features=WaylandWindowDecorations --enable-wayland-ime=true}}"
--- a/pkgs/by-name/ca/calceph/package.nix
+++ b/pkgs/by-name/ca/calceph/package.nix
@@ -7,13 +7,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "calceph";
-  version = "5.0.0";
+  version = "5.0.1";
  src = fetchFromGitLab {
    domain = "gitlab.obspm.fr";
    owner = "imcce_calceph";
    repo = "calceph";
    tag = "calceph_${builtins.replaceStrings [ "." ] [ "_" ] finalAttrs.version}";
-    hash = "sha256-bSgHRVPo0M8SIlw5uqZ0nyt5cVyg3WmxcHistV1FugY=";
+    hash = "sha256-UZ7u+T00b3CcmLPmOqqHMm4jJ2Ik6lM13fNIBJpdYXY=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ca/canon-cups-ufr2/package.nix
+++ b/pkgs/by-name/ca/canon-cups-ufr2/package.nix
@@ -7,7 +7,7 @@
  unzip,
  autoconf,
  automake,
-  libtool_1_5,
+  libtool,
  makeWrapper,
  cups,
  jbigkit,
@@ -141,7 +141,7 @@ stdenv.mkDerivation rec {
    unzip
    autoconf
    automake
-    libtool_1_5
+    libtool
    pkg-config
  ];

--- a/pkgs/by-name/ce/certspotter/package.nix
+++ b/pkgs/by-name/ce/certspotter/package.nix
@@ -7,13 +7,13 @@

 buildGoModule (finalAttrs: {
  pname = "certspotter";
-  version = "0.24.2";
+  version = "0.25.0";

  src = fetchFromGitHub {
    owner = "SSLMate";
    repo = "certspotter";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-0GwESNuwvwC3HgNy+1dXxgGshlj5sFCnPj25TnDXbFw=";
+    hash = "sha256-2U+Gjulre6pYNlVGLB4OpUmTTWlGUNAN/JnMVTCkZ78=";
  };

  vendorHash = "sha256-JA/HZrbeauCD0TA2Egy49nYWXHqVRkOs9OmgaAR1z/c=";
--- a/pkgs/by-name/cl/claude-powerline/package.nix
+++ b/pkgs/by-name/cl/claude-powerline/package.nix
@@ -7,13 +7,13 @@

 buildNpmPackage (finalAttrs: {
  pname = "claude-powerline";
-  version = "1.30.3";
+  version = "1.31.0";

  src = fetchFromGitHub {
    owner = "Owloops";
    repo = "claude-powerline";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-MBCISwf1xfiBD172IIl51t3Pun5gkjRnwhpWF0Y9Riw=";
+    hash = "sha256-W1DoOJ6w/9bU3nnrQBwGWeQbVjvuB38kEd67R4Kvufg=";
  };

  npmDepsHash = "sha256-D3Z5tb4phZUMPQaXvfYiIWuwaX5YGI8ubgyV7sSJqQk=";
--- a/pkgs/by-name/co/coc-rust-analyzer/package.nix
+++ b/pkgs/by-name/co/coc-rust-analyzer/package.nix
@@ -7,16 +7,16 @@

 buildNpmPackage {
  pname = "coc-rust-analyzer";
-  version = "0-unstable-2026-09-01";
+  version = "0-unstable-2026-09-19";

  src = fetchFromGitHub {
    owner = "fannheyward";
    repo = "coc-rust-analyzer";
-    rev = "674637e97ff14073b09350b41f8737bb95400cf1";
-    hash = "sha256-FrrsBvkfyrZZCfTMNxht4+ub9r3gy+zdWXNLGuCWlJA=";
+    rev = "6536aae37263c43d1736f622d371124b7a9fe86d";
+    hash = "sha256-iY1bvS8mCrldkms0wRvXAcFzzJwGomKqtUBpqV7KJl4=";
  };

-  npmDepsHash = "sha256-h4vCJEZxI7M7xD9e5VdI2JDgRLcGdEO0SNXLrv3E5A8=";
+  npmDepsHash = "sha256-9xJuiu/LnMIbPRgDog2Xl0DD6Y9O39AzhinrCYguToc=";

  passthru.updateScript = nix-update-script { extraArgs = [ "--version=branch" ]; };

--- a/pkgs/by-name/co/codeql/package.nix
+++ b/pkgs/by-name/co/codeql/package.nix
@@ -15,7 +15,7 @@

 stdenv.mkDerivation rec {
  pname = "codeql";
-  version = "2.27.0";
+  version = "2.27.1";

  dontConfigure = true;
  dontBuild = true;
@@ -23,7 +23,7 @@ stdenv.mkDerivation rec {

  src = fetchzip {
    url = "https://github.com/github/codeql-cli-binaries/releases/download/v${version}/codeql.zip";
-    hash = "sha256-8WhsburnhVWvVLTNOmAwmkjwN45exmKmw7Q5elTjYiI=";
+    hash = "sha256-JUqJ9nsCYa8UIeuj+cPw2vAep0lJry6QcaSn20cokDU=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/co/codex/package.nix
+++ b/pkgs/by-name/co/codex/package.nix
@@ -29,18 +29,18 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "codex";
-  version = "0.155.1";
+  version = "0.156.1";

  src = fetchFromGitHub {
    owner = "openai";
    repo = "codex";
    tag = "rust-v${finalAttrs.version}";
-    hash = "sha256-iFW66odceRNBsVG5bD9SdcQGxhpm/QIZwYjGCrfMXiI=";
+    hash = "sha256-H53f57hmnyCtn5yPxtBe/A92qyQyzQBeU/vK2qSBrvI=";
  };

  sourceRoot = "${finalAttrs.src.name}/codex-rs";

-  cargoHash = "sha256-6IAX/SFSSgSKKFxKsUXoZ9nNQaHJ+EjZ5a4bJwyDdF0=";
+  cargoHash = "sha256-W87rX/W2J1pwqNrihX+Rj6DfagoZYuB6C+l/S4BhyJM=";

  __structuredAttrs = true;

@@ -63,6 +63,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
    substituteInPlace Cargo.toml \
      --replace-fail 'lto = "thin"' "" \
      --replace-fail 'codegen-units = 4' ""
+
+    sed -i '1i#![recursion_limit = "256"]' chatgpt/src/lib.rs
  '';

  nativeBuildInputs = [
--- a/pkgs/by-name/co/confluent-cli/package.nix
+++ b/pkgs/by-name/co/confluent-cli/package.nix
@@ -7,7 +7,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "confluent-cli";
-  version = "4.74.0";
+  version = "4.76.0";

  # To get the latest version:
  # curl -L https://cnfl.io/cli | sh -s -- -l | grep -v latest | sort -V | tail -n1
@@ -25,9 +25,9 @@ stdenv.mkDerivation (finalAttrs: {
    fetchurl {
      url = "https://s3-us-west-2.amazonaws.com/confluent.cloud/confluent-cli/archives/${finalAttrs.version}/confluent_${finalAttrs.version}_${system}.tar.gz";
      hash = selectSystem {
-        x86_64-linux = "sha256-rrJdOBjX+zIdZg9WM9W8x84NS5zbPaGcf5XzzPJi0gU=";
-        aarch64-linux = "sha256-9CkTXdW72KeZFXj8D2Jxth/x912g7jtGCltvPGW3ShU=";
-        aarch64-darwin = "sha256-rIv8QyNdRNtYXIv2GNxICFxUPXsTYLx86M1PC78ca0c=";
+        x86_64-linux = "sha256-dAwJE1gVgrq5ECfoy4Zq/WtkUduTLNyhbhQkqrPPaTo=";
+        aarch64-linux = "sha256-INt9fNKXOvGy7CKtUlZwPdoJd2Ga5r0qOmteTGOeWm8=";
+        aarch64-darwin = "sha256-voNxQesd3csngA3OBdc7NynfLIfAhtx5vasTaU1MUDc=";
      };
    };

--- a/pkgs/by-name/co/context-mode/package.nix
+++ b/pkgs/by-name/co/context-mode/package.nix
@@ -4,6 +4,7 @@
  fetchurl,
  bun,
  makeWrapper,
+  installAgentSkills,
  nix-update-script,
 }:

@@ -23,6 +24,7 @@ stdenv.mkDerivation (finalAttrs: {

  nativeBuildInputs = [
    makeWrapper
+    installAgentSkills
  ];

  dontBuild = true;
--- a/pkgs/by-name/co/cosmic-ext-applett-workspace-icons/package.nix
+++ b/pkgs/by-name/co/cosmic-ext-applett-workspace-icons/package.nix
--- a/pkgs/by-name/cp/cpx/package.nix
+++ b/pkgs/by-name/cp/cpx/package.nix
@@ -7,16 +7,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "cpx";
-  version = "0.1.4";
+  version = "0.2.1";

  src = fetchFromGitHub {
    owner = "11happy";
    repo = "cpx";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-1TjUlV0l4JnSSmmCprEy6wT1v7RPdsuhrnuKbkHiMkw=";
+    hash = "sha256-pQ8Z/0zlxuWiGfWBE5hA1mj/G7Zc2WSK41uu5PN1bfs=";
  };

-  cargoHash = "sha256-zc2R9cm/dDJqDVp2osLXxY0O0MK6gLVG0bxt40bl9wY=";
+  cargoHash = "sha256-vf4uOZBfV6aUIC07pmk+D2izqKIw9AvCrHYCU+Dyysc=";

  doInstallCheck = true;

--- a/pkgs/by-name/cr/croaring/package.nix
+++ b/pkgs/by-name/cr/croaring/package.nix
@@ -8,13 +8,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "croaring";
-  version = "5.2.0";
+  version = "5.2.2";

  src = fetchFromGitHub {
    owner = "RoaringBitmap";
    repo = "CRoaring";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-BDQpqRlle9mjlybOjxctwxkP5rQl2y673EnpthjFbBA=";
+    hash = "sha256-ZipK1pNdxNaEAVkFygH6pwOHXvQWfGKVk1S6onKpvPE=";
  };

  # roaring.pc.in cannot handle absolute CMAKE_INSTALL_*DIRs, nor
--- a/pkgs/by-name/cr/croc/package.nix
+++ b/pkgs/by-name/cr/croc/package.nix
@@ -11,13 +11,13 @@

 buildGo127Module (finalAttrs: {
  pname = "croc";
-  version = "11.5.2";
+  version = "11.5.3";

  src = fetchFromGitHub {
    owner = "schollz";
    repo = "croc";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-1qUwvMazz3bvkaIEDuI/SeDazINsh1EQgg+vfj/R5kU=";
+    hash = "sha256-Q+1KK+HA3SC9Kl7YV+ZfIMLUJMu+wjnIknRqn+l6cdM=";
  };

  vendorHash = "sha256-6B7KZd0Y/RvV9q9U8kHFnKqkDX7uA1tCW2vaFnfeQZ0=";
--- a/pkgs/by-name/cu/cursor-cli/package.nix
+++ b/pkgs/by-name/cu/cursor-cli/package.nix
@@ -10,22 +10,22 @@ let
  inherit (stdenv) hostPlatform;
  sources = {
    x86_64-linux = fetchurl {
-      url = "https://downloads.cursor.com/lab/2026.09.10-fd3934a/linux/x64/agent-cli-package.tar.gz";
-      hash = "sha256-J5l8g5GthTpacysYRduO+CqLpq+w94KcxzlGT4lm6W4=";
+      url = "https://downloads.cursor.com/lab/2026.09.18-9a7762b/linux/x64/agent-cli-package.tar.gz";
+      hash = "sha256-sTCPWi/AVFi52JZnUphrsjqXG7zGfIQsHflMS4Eyutk=";
    };
    aarch64-linux = fetchurl {
-      url = "https://downloads.cursor.com/lab/2026.09.10-fd3934a/linux/arm64/agent-cli-package.tar.gz";
-      hash = "sha256-4ElEOLAcN7w0hISR0fNHjvRpSUxWyvAg3hF5bRRttko=";
+      url = "https://downloads.cursor.com/lab/2026.09.18-9a7762b/linux/arm64/agent-cli-package.tar.gz";
+      hash = "sha256-IQ1Y+FD0YW5PJl/3AGxVjVoqAI/OPiv4oBBcJa40VqA=";
    };
    aarch64-darwin = fetchurl {
-      url = "https://downloads.cursor.com/lab/2026.09.10-fd3934a/darwin/arm64/agent-cli-package.tar.gz";
-      hash = "sha256-rsCwGuBW3kigL+MV+/BYDrkTd3UtmTMHSZmIy+AoVCM=";
+      url = "https://downloads.cursor.com/lab/2026.09.18-9a7762b/darwin/arm64/agent-cli-package.tar.gz";
+      hash = "sha256-Tme5rIDMSlbgqRs7Q3iU4LpInvfsN/Eg2AhNK/0CCV0=";
    };
  };
 in
 stdenv.mkDerivation {
  pname = "cursor-cli";
-  version = "0-unstable-2026-09-10";
+  version = "0-unstable-2026-09-18";

  src = sources.${hostPlatform.system};

--- a/pkgs/by-name/da/davmail/package.nix
+++ b/pkgs/by-name/da/davmail/package.nix
@@ -20,13 +20,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "davmail";
-  version = "6.8.1";
+  version = "7.0.0";

  src = fetchFromGitHub {
    owner = "mguessan";
    repo = "davmail";
    tag = finalAttrs.version;
-    hash = "sha256-kIDAMVenUzc7tIC49yzc1MzqNa9B7nNlX1bzwpG8Vp0=";
+    hash = "sha256-N1+jj+iXRIQ0zxZcZgXPRY+u35ucLXXvh7ofPdrYrVE=";
  };

  buildPhase = ''
--- a/pkgs/by-name/da/dawarich/gemset.nix
+++ b/pkgs/by-name/da/dawarich/gemset.nix
@@ -361,10 +361,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1ppin425pfd6agxbyqmav7vb60yl0k94f6h4laqc4zpbcp5sjnqj";
+      sha256 = "1jl9v6vrqgqvic7928z92sq8nwr41zpvpdaxdib56ib524qcgx3n";
      type = "gem";
    };
-    version = "1.1283.0";
+    version = "1.1287.0";
  };
  aws-sdk-core = {
    dependencies = [
@@ -375,15 +375,16 @@
      "bigdecimal"
      "jmespath"
      "logger"
+      "rexml"
    ];
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "16yjk5b6vw9c1pwgbjz4x52nlm36p5zx0qzcsj64ghrl47iqk02i";
+      sha256 = "1iljck5b1s02vagyvgivg9j81nk2wl721qwfd33cws7ngyfd2am9";
      type = "gem";
    };
-    version = "3.254.1";
+    version = "3.257.0";
  };
  aws-sdk-kms = {
    dependencies = [
@@ -394,10 +395,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0jfpgjyhq3f7w67p3361f1racrc1m502zan934m7mdrir9i3ds52";
+      sha256 = "1756vjcbz034aw7mzyqxh13bgsssgz573sc7mk0xbs9vpfbh0jq9";
      type = "gem";
    };
-    version = "1.130.0";
+    version = "1.132.0";
  };
  aws-sdk-s3 = {
    dependencies = [
@@ -409,10 +410,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "15pma52a4n5rzgkr8kixvfxc3dmals1s78605rfm1cvm308imlbx";
+      sha256 = "0w28cmiam6x121800wipqfzkd8m2xsp6xv1d7b62ig2glkrl0i0j";
      type = "gem";
    };
-    version = "1.229.0";
+    version = "1.232.1";
  };
  aws-sigv4 = {
    dependencies = [ "aws-eventstream" ];
@@ -459,10 +460,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1g9zi8c4i7g8zz0c3hxrw6mblrjvgn7akys60clb9si7c1k1gljk";
+      sha256 = "0rng45p4vc3f6nac44cnylwch7rj4zsff3icdz6c7garwpjy3sv1";
      type = "gem";
    };
-    version = "4.1.2";
+    version = "4.1.3";
  };
  bindata = {
    groups = [ "default" ];
@@ -805,19 +806,6 @@
    };
    version = "1.6.2";
  };
-  docile = {
-    groups = [
-      "default"
-      "test"
-    ];
-    platforms = [ ];
-    source = {
-      remotes = [ "https://rubygems.org" ];
-      sha256 = "07pj4z3h8wk4fgdn6s62vw1lwvhj0ac0x10vfbdkr9xzk7krn5cn";
-      type = "gem";
-    };
-    version = "1.4.1";
-  };
  dotenv = {
    groups = [
      "default"
@@ -994,10 +982,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0y7j6yzv07zggic6g0p2v1ivnvkzsbqjnfdl4215qqb6cxz290hq";
+      sha256 = "0vmb5wpiz7mf2r6vjvhvfp38rrfvqjzmv7m3max0s6v28j641d4v";
      type = "gem";
    };
-    version = "2.14.3";
+    version = "2.14.4";
  };
  faraday-follow_redirects = {
    dependencies = [ "faraday" ];
@@ -1177,6 +1165,16 @@
    };
    version = "3.7.4";
  };
+  hana = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "03cvrv2wl25j9n4n509hjvqnmwa60k92j741b64a1zjisr1dn9al";
+      type = "gem";
+    };
+    version = "1.3.7";
+  };
  hashdiff = {
    groups = [
      "default"
@@ -1281,10 +1279,10 @@
    ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "026v93kja19bfslnwi9xfq2dj4r89kkwdprim4whjg6h3n4lz9zg";
+      sha256 = "1p8000b68iw14byanj6d8w9kfj3vgj7bxda8aj5bgbxhc6a08mgm";
      type = "gem";
    };
-    version = "0.9.2";
+    version = "0.9.3";
  };
  irb = {
    dependencies = [
@@ -1340,10 +1338,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0shwgjqbj856mb6m9kgkpy08nhym2gdvc2yaprlimfmky9y3n78z";
+      sha256 = "1pqrpn0wkxvhcrwm4i0z9ailjj7if45zkkih0hij2k1q25xpwvcf";
      type = "gem";
    };
-    version = "2.21.2";
+    version = "3.0.2";
  };
  json-jwt = {
    dependencies = [
@@ -1378,16 +1376,32 @@
    };
    version = "5.0.1";
  };
+  json_schemer = {
+    dependencies = [
+      "bigdecimal"
+      "hana"
+      "regexp_parser"
+      "simpleidn"
+    ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "15p31bq932bfpsi1wgrkgwm71l7z1h1w53q6vl44w6kjrr6gn09g";
+      type = "gem";
+    };
+    version = "2.5.0";
+  };
  jwt = {
    dependencies = [ "base64" ];
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1mqps8z4ly74hpksfajcfamqk1wb79biy187pn10knmi6zzb26al";
+      sha256 = "0ip59r7z8mjwy1rq0pp53kxhvkjb5d942rpn7hiliha1qgxk9k24";
      type = "gem";
    };
-    version = "3.2.0";
+    version = "3.3.0";
  };
  kaminari = {
    dependencies = [
@@ -1558,6 +1572,17 @@
    };
    version = "0.4.2";
  };
+  mcp = {
+    dependencies = [ "json_schemer" ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1gppwqmc5smzcjw8dxdgrpmab84225x2x19wwzbgz37n7plkpzkk";
+      type = "gem";
+    };
+    version = "1.6.0";
+  };
  method_source = {
    groups = [
      "default"
@@ -1669,10 +1694,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1px886qvws5zvqphy5cysj8vg01lym0w7vs9wq1h41pk1pjlxaln";
+      sha256 = "0q1nq8mx22v9sn1296s45nm6dni42y3m3s1f4pg5dn3mx4xmgjdm";
      type = "gem";
    };
-    version = "0.6.6";
+    version = "0.6.7";
  };
  net-pop = {
    dependencies = [ "net-protocol" ];
@@ -1924,10 +1949,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0mlkn1vhh9lr7vljibpgspwsswk7mzm8nw6bbr616c9fbj35hlmk";
+      sha256 = "1n0w07z55hsrb803sl20vcmr8hkay1lsff7c1a55ajdnsxgrq1g1";
      type = "gem";
    };
-    version = "2.1.0";
+    version = "2.2.0";
  };
  parser = {
    dependencies = [
@@ -1979,10 +2004,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0d5c1fak0n73a6w5nwh11znczq3zimsvnk9rlgs5ndqd3vzfx283";
+      sha256 = "0pfz79a0b3s9xb98h3nvk4qbgahzbqdbsmkzhwvjsbjq10v76wsd";
      type = "gem";
    };
-    version = "3.18.4";
+    version = "3.18.6";
  };
  posthog-ruby = {
    dependencies = [ "concurrent-ruby" ];
@@ -1990,10 +2015,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1r3vdgy5p8gw0943xpp04yzjl34ic1ljhngz3vfmpjndx69400a2";
+      sha256 = "0rngrx228ribk9gnwhhjy2wlc829i2gp47irpw48bj4gzwrl6dhp";
      type = "gem";
    };
-    version = "3.23.5";
+    version = "3.23.7";
  };
  pp = {
    dependencies = [ "prettyprint" ];
@@ -2982,10 +3007,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "153s0z9dwgmkf3imvlhwc546g9yfrpnfcvzy8f9qg950r3mpd0qc";
+      sha256 = "12fwks0kf5byamizamckh4bv11gkwkh34qbgdcsvpfnalf8z0c5l";
      type = "gem";
    };
-    version = "4.48.0";
+    version = "4.49.0";
  };
  sentry-rails = {
    dependencies = [
@@ -2996,10 +3021,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1vdiia361bzmkajb8nfz6y87yjyj7wdnfp1n5lb5s8zbwr1sljfb";
+      sha256 = "0nk0h3nw532n23pfyix5a9mila55bavjvr0cf532wqw8w08a1ika";
      type = "gem";
    };
-    version = "6.6.2";
+    version = "7.0.0";
  };
  sentry-ruby = {
    dependencies = [
@@ -3011,10 +3036,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1mkcrjn47y7z4g59psrz4xw3sniabf9dwwaqzsc8a18hgmssyjm6";
+      sha256 = "06nvpib23l1xi5x2mi6am14ij7xvv1ssak20mlzrhnim47snyqg9";
      type = "gem";
    };
-    version = "6.6.2";
+    version = "7.0.0";
  };
  shoulda-matchers = {
    dependencies = [ "activesupport" ];
@@ -3072,45 +3097,24 @@
    version = "4.4.1";
  };
  simplecov = {
-    dependencies = [
-      "docile"
-      "simplecov-html"
-      "simplecov_json_formatter"
-    ];
    groups = [ "test" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "198kcbrjxhhzca19yrdcd6jjj9sb51aaic3b0sc3pwjghg3j49py";
+      sha256 = "14klzvf7gzzhv0a91c08i0qq5zgzkf3fvjvxcm3ss7iwhq3n726r";
      type = "gem";
    };
-    version = "0.22.0";
+    version = "1.3.0";
  };
-  simplecov-html = {
-    groups = [
-      "default"
-      "test"
-    ];
+  simpleidn = {
+    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "02zi3rwihp7rlnp9x18c9idnkx7x68w6jmxdhyc0xrhjwrz0pasx";
+      sha256 = "00sdym5q3d9zg7lv47mjamzv67z1lfyd3gz9256v0g9gxl5p7jhj";
      type = "gem";
    };
-    version = "0.13.1";
-  };
-  simplecov_json_formatter = {
-    groups = [
-      "default"
-      "test"
-    ];
-    platforms = [ ];
-    source = {
-      remotes = [ "https://rubygems.org" ];
-      sha256 = "0a5l0733hj7sk51j81ykfmlk2vd5vaijlq9d5fn165yyx3xii52j";
-      type = "gem";
-    };
-    version = "0.1.4";
+    version = "0.3.0";
  };
  snaky_hash = {
    dependencies = [
--- a/pkgs/by-name/da/dawarich/sources.json
+++ b/pkgs/by-name/da/dawarich/sources.json
@@ -1,5 +1,5 @@
 {
-  "version": "1.14.5",
-  "hash": "sha256-2YiIR38Myqp4Wtyw+/z+8QzxZv0zk9qMm4kumsd16fs=",
-  "npmHash": "sha256-WXwDi3K9s77+d/1lEOmUKeOZkcvUEsh8YnPztaqKHjk="
+  "version": "1.15.2",
+  "hash": "sha256-HEEg0kcs5CTcplUn30kbo8JShqThKKuzBhvR+Cl7SCs=",
+  "npmHash": "sha256-Xe9FDNDJxx2Vt+ByXz8JX2cAPg+Y/sUeHeWePHEp0/0="
 }
--- a/pkgs/by-name/dg/dgop/package.nix
+++ b/pkgs/by-name/dg/dgop/package.nix
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "dgop";
-  version = "1.6.0";
+  version = "1.6.2";

  src = fetchFromGitHub {
    owner = "AvengeMedia";
    repo = "dgop";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-5oGojLTg8DjsKn97EurssiZJlpdUD9AvhaM/jXjK3+o=";
+    hash = "sha256-0zWMFcxLZEVPzCRe5yDgPlPHBNgw3MMq78MAUvGNu/4=";
  };

  vendorHash = "sha256-agVGh6togqHNCU7/3xDnmfF6bNlm2TAnXw5JhhUivgs=";
--- a/pkgs/by-name/di/dirsearch/package.nix
+++ b/pkgs/by-name/di/dirsearch/package.nix
@@ -0,0 +1,16 @@
+{
+  lib,
+  python3Packages,
+  # flags for optional dependencies
+  withRustBackend ? true,
+  withDbDeps ? true,
+}:
+
+python3Packages.toPythonApplication (
+  python3Packages.dirsearch.overridePythonAttrs (prevAttrs: {
+    dependencies =
+      prevAttrs.dependencies or [ ]
+      ++ lib.optionals withRustBackend prevAttrs.optional-dependencies.rustbackend
+      ++ lib.optionals withDbDeps prevAttrs.optional-dependencies.db;
+  })
+)
--- a/pkgs/by-name/dn/dnscontrol/package.nix
+++ b/pkgs/by-name/dn/dnscontrol/package.nix
@@ -9,16 +9,16 @@

 buildGo127Module (finalAttrs: {
  pname = "dnscontrol";
-  version = "5.1.0";
+  version = "5.2.0";

  src = fetchFromGitHub {
    owner = "DNSControl";
    repo = "dnscontrol";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-StdVGROKsXJa5F7CEno3T516lVJbXToBxLx6AqKz9+I=";
+    hash = "sha256-LG6VBzmABJUTpYZQ5L4vI5LXMu4o2Pg90gRdq9s+65c=";
  };

-  vendorHash = "sha256-qIb/hUn/ROWBaSAnEleeLDWQlCvFapBwKcZjdHlNpF8=";
+  vendorHash = "sha256-YIO5aNmrFL4agsey6TZpkeP3jmFIbqQW6Du7ps0QjEo=";

  nativeBuildInputs = [ installShellFiles ];

--- a/pkgs/by-name/dn/dnsdist/package.nix
+++ b/pkgs/by-name/dn/dnsdist/package.nix
@@ -26,11 +26,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "dnsdist";
-  version = "2.0.7";
+  version = "2.0.10";

  src = fetchurl {
    url = "https://downloads.powerdns.com/releases/dnsdist-${finalAttrs.version}.tar.xz";
-    hash = "sha256-WGgPeAUXt4fmT+5M1NzFf0Ob5gcIT4nuRpl4nX1iaHU=";
+    hash = "sha256-YKCU155Ci4bl7KGITWi0lb1NA3rw9u/BRI4WvMDTIrw=";
  };

  nativeBuildInputs = [
@@ -80,7 +80,7 @@ stdenv.mkDerivation (finalAttrs: {

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) cargoRoot src;
-    hash = "sha256-xFh+cywfNWalzRfCtM2pPtPfq8/RAlTC1EdZYYEiwxA=";
+    hash = "sha256-O9FKlT8bqDz+rQBocZ5ZWMimYyRTfPrKBxp+hDs10c4=";
  };

  cargoRoot = "dnsdist-rust-lib/rust";
--- a/pkgs/by-name/do/docfx/package.nix
+++ b/pkgs/by-name/do/docfx/package.nix
@@ -6,12 +6,12 @@

 buildDotnetGlobalTool {
  pname = "docfx";
-  version = "2.78.5";
+  version = "2.80.1";

  dotnet-sdk = dotnetCorePackages.sdk_8_0;
  dotnet-runtime = dotnetCorePackages.runtime_8_0;

-  nugetHash = "sha256-kkoQQHXkv36ulSAUfsEKgJ6CqEOOwzAQRYHSGUNZaMU=";
+  nugetHash = "sha256-v9cfkqa+GNiLyBVK+asQSHpbju5TzkcE35xZ3/QkFig=";

  meta = {
    description = "Build your technical documentation site with docfx, with landing pages, markdown, API reference docs for .NET, REST API and more";
--- a/pkgs/by-name/el/element-desktop/package.nix
+++ b/pkgs/by-name/el/element-desktop/package.nix
@@ -30,13 +30,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "element-desktop";
-  version = "1.12.26";
+  version = "1.12.28";

  src = fetchFromGitHub {
    owner = "element-hq";
    repo = "element-web";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-q9AV/jthbHnbESU/wvjdaCiMnIN6KQgAQ3cvEBvduTw=";
+    hash = "sha256-goP/f1Go7227R2euXu8aJrwHeUp84DQ+18ztyf4uXhM=";
  };

  pnpmDeps = fetchPnpmDeps {
@@ -47,7 +47,7 @@ stdenv.mkDerivation (finalAttrs: {
      ;
    inherit pnpm;
    fetcherVersion = 4;
-    hash = "sha256-R9YuNvrMurRaBxZqUPsUtZSFlSZ8nA7Bd/hlAMfAH+M=";
+    hash = "sha256-eLTMKzVgP1oSiat80ygWUH2zGF7ukKSLvOEGay/pr9Y=";
  };

  env.ELECTRON_SKIP_BINARY_DOWNLOAD = "1";
@@ -94,6 +94,9 @@ stdenv.mkDerivation (finalAttrs: {

    export VERSION=${finalAttrs.version}

+    # Not used here because we link element-web in installPhase, but electron-builder throws an error if it is not present
+    asar p ${element-web} apps/desktop/webapp.asar
+
    faketty pnpm -C apps/desktop exec nx build:ts
    faketty pnpm -C apps/desktop exec nx build:res
    pnpm -C apps/desktop exec electron-builder --dir -c.electronDist=electron-dist -c.electronVersion=${electron.version} -c.mac.identity=null
--- a/pkgs/by-name/el/element-web-unwrapped/package.nix
+++ b/pkgs/by-name/el/element-web-unwrapped/package.nix
@@ -25,13 +25,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "element-web";
-  version = "1.12.26";
+  version = "1.12.28";

  src = fetchFromGitHub {
    owner = "element-hq";
    repo = "element-web";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-q9AV/jthbHnbESU/wvjdaCiMnIN6KQgAQ3cvEBvduTw=";
+    hash = "sha256-goP/f1Go7227R2euXu8aJrwHeUp84DQ+18ztyf4uXhM=";
  };

  pnpmDeps = fetchPnpmDeps {
@@ -39,7 +39,7 @@ stdenv.mkDerivation (finalAttrs: {
    inherit (finalAttrs) version src;
    inherit pnpm;
    fetcherVersion = 4;
-    hash = "sha256-R9YuNvrMurRaBxZqUPsUtZSFlSZ8nA7Bd/hlAMfAH+M=";
+    hash = "sha256-eLTMKzVgP1oSiat80ygWUH2zGF7ukKSLvOEGay/pr9Y=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/en/envoy/package.nix
+++ b/pkgs/by-name/en/envoy/package.nix
@@ -38,9 +38,9 @@ let
    # However, the version string is more useful for end-users.
    # These are contained in a attrset of their own to make it obvious that
    # people should update both.
-    version = "1.36.5";
-    rev = "41749943780b54b70b510b1b1a4805ae529e174a";
-    hash = "sha256-dT6ehfmW/huuyitqIlYAlEzUE6WrVA39sDKxatkZGaY=";
+    version = "1.36.10";
+    rev = "053a8989382dd91542ecf0cef8f379b9cb761cdd";
+    hash = "sha256-6bGXZfU2JutiriefwBudt46BrJRnwEqQCjYVRjUgyaY=";
  };

  # When GO_VERSION changes upstream, update the four sha256 hex strings in the
@@ -54,8 +54,8 @@ let
      depsHash
    else
      {
-        x86_64-linux = "sha256-+oEQV3VfZu+p/f6Sif9pj2AkaA9+u0M8k+czdlcDLXI=";
-        aarch64-linux = "sha256-FcZfRinOd5KO6VnO9cx6ZQxJJ+KCFfB3Nk2k7zMuVU4";
+        x86_64-linux = "sha256-EUPWZ8N8wXtnOle8WMLfdxQEdCnTv1JJSbgG39UOoMc=";
+        aarch64-linux = "sha256-WltewtSjwvmYfZQwYAslCCoBdLY1MyO9jnMC/bCzVeg=";
      }
      .${stdenv.system} or (throw "unsupported system ${stdenv.system}");

--- a/pkgs/by-name/ev/evcc/package.nix
+++ b/pkgs/by-name/ev/evcc/package.nix
@@ -17,13 +17,13 @@
 }:

 let
-  version = "0.315.0";
+  version = "0.315.2";

  src = fetchFromGitHub {
    owner = "evcc-io";
    repo = "evcc";
    tag = version;
-    hash = "sha256-lnFsLTEz5tC07fyx95zYnvBfx3FGKKlGLbi0RsTpDBY=";
+    hash = "sha256-PMPj3N1BkVSBqm/rULQhpJvOn2eFcb+WUXDqQgDvyTA=";
  };

  vendorHash = "sha256-JUJFOQQpbPkb4aI2SjRaTbZzTxWpV1wbWJH7EgGqmHY=";
--- a/pkgs/by-name/fa/fable/package.nix
+++ b/pkgs/by-name/fa/fable/package.nix
@@ -7,9 +7,9 @@

 buildDotnetGlobalTool (finalAttrs: {
  pname = "fable";
-  version = "5.17.0";
+  version = "5.17.2";

-  nugetHash = "sha256-4PQsqgQmgLmKCNCoI6I/mLqviHQG5Ob1QWlR35jRx1o=";
+  nugetHash = "sha256-XJB59cqLDsEtcyAvbbuhSkjkooFKiHiwp9jrKouPPtk=";

  dotnet-sdk = dotnetCorePackages.sdk_10_0;
  dotnet-runtime = dotnetCorePackages.runtime_10_0;
--- a/pkgs/by-name/fa/factorio/package.nix
+++ b/pkgs/by-name/fa/factorio/package.nix
@@ -241,7 +241,10 @@ let
        priegger
        lukegb
      ];
-      platforms = [ "x86_64-linux" ];
+      platforms = [
+        "x86_64-linux"
+        "aarch64-linux"
+      ];
      mainProgram = "factorio";
    };
  };
--- a/pkgs/by-name/fa/factorio/update.py
+++ b/pkgs/by-name/fa/factorio/update.py
@@ -1,18 +1,16 @@
 #!/usr/bin/env nix-shell
 #! nix-shell -i python -p "python3.withPackages (ps: with ps; [ ps.absl-py ps.requests ])"

-from collections import defaultdict
 import copy
-from dataclasses import dataclass
 import json
 import os.path
-from typing import Callable, Dict
+from collections import defaultdict
+from collections.abc import Callable
+from dataclasses import dataclass
+from functools import total_ordering

-from absl import app
-from absl import flags
-from absl import logging
 import requests
-
+from absl import app, flags, logging

 FACTORIO_RELEASES = "https://factorio.com/api/latest-releases"
 FACTORIO_HASHES = "https://factorio.com/download/sha256sums/"
@@ -33,11 +31,26 @@ flags.DEFINE_list(
 )


+@dataclass
+@total_ordering
+class Version:
+    version: str
+    @property
+    def ver(self):
+        return [int(v) for v in self.version.split(".")]
+    def __eq__(self, other):
+        return self.ver == other.ver
+    def __lt__(self, other):
+        return self.ver < other.ver
+
+
@dataclass
 class System:
    nix_name: str
    url_name: str
    tar_name: str
+    file_name: str
+    min_ver: Version


@dataclass
@@ -52,34 +65,60 @@ class ReleaseChannel:
    name: str


-FactorioVersionsJSON = Dict[str, Dict[str, str]]
-OurVersionJSON = Dict[str, Dict[str, Dict[str, Dict[str, str]]]]
+FactorioVersionsJSON = dict[str, dict[str, str]]
+OurVersionJSON = dict[str, dict[str, dict[str, dict[str, str]]]]

-FactorioHashes = Dict[str, str]
+FactorioHashes = dict[str, str]


 SYSTEMS = [
-    System(nix_name="x86_64-linux", url_name="linux64", tar_name="x64"),
+    System(
+        nix_name="x86_64-linux",
+        url_name="linux64",
+        tar_name="x64",
+        file_name="linux",
+        min_ver=Version("1.1.86"),
+   ),
+    System(
+        nix_name="aarch64-linux",
+        url_name="linux-arm64",
+        tar_name="arm64",
+        file_name="linux-arm64",
+        min_ver=Version("2.1.18"),
+    ),
 ]

 RELEASE_TYPES = [
    ReleaseType(
        "alpha",
        needs_auth=True,
-        hash_filename_format=["factorio_linux_{version}.tar.xz"],
+        hash_filename_format=[
+            "factorio_{system.url_name}_{version}.tar.xz",
+            "factorio_{system.file_name}_{version}.tar.xz",
+        ],
+    ),
+    ReleaseType(
+        "demo",
+        hash_filename_format=[
+            "factorio-demo_{system.url_name}_{version}.tar.xz",
+            "factorio-demo_{system.file_name}_{version}.tar.xz",
+        ],
    ),
-    ReleaseType("demo", hash_filename_format=["factorio-demo_linux_{version}.tar.xz"]),
    ReleaseType(
        "headless",
        hash_filename_format=[
-            "factorio-headless_linux_{version}.tar.xz",
-            "factorio_headless_x64_{version}.tar.xz",
+            "factorio-headless_{system.url_name}_{version}.tar.xz",
+            "factorio-headless_{system.file_name}_{version}.tar.xz",
+            "factorio_headless_{system.tar_name}_{version}.tar.xz",
        ],
    ),
    ReleaseType(
        "expansion",
        needs_auth=True,
-        hash_filename_format=["factorio-space-age_linux_{version}.tar.xz"],
+        hash_filename_format=[
+            "factorio-space-age_{system.url_name}_{version}.tar.xz",
+            "factorio-space-age_{system.file_name}_{version}.tar.xz",
+        ],
    ),
 ]

@@ -141,7 +180,7 @@ def generate_our_versions(factorio_versions: FactorioVersionsJSON) -> OurVersion
        for release_type in RELEASE_TYPES:
            for release_channel in RELEASE_CHANNELS:
                version = factorio_versions[release_channel.name].get(release_type.name)
-                if version is None:
+                if version is None or Version(version) < system.min_ver:
                    continue
                this_release = {
                    "name": f"factorio_{release_type.name}_{system.tar_name}-{version}.tar.xz",
@@ -149,7 +188,7 @@ def generate_our_versions(factorio_versions: FactorioVersionsJSON) -> OurVersion
                    "version": version,
                    "needsAuth": release_type.needs_auth,
                    "candidateHashFilenames": [
-                        fmt.format(version=version)
+                        fmt.format(version=version, system=system)
                        for fmt in release_type.hash_filename_format
                    ],
                    "tarDirectory": system.tar_name,
@@ -162,7 +201,7 @@ def generate_our_versions(factorio_versions: FactorioVersionsJSON) -> OurVersion

 def iter_version(
    versions: OurVersionJSON,
-    it: Callable[[str, str, str, Dict[str, str]], Dict[str, str]],
+    it: Callable[[str, str, str, dict[str, str]], dict[str, str]],
 ) -> OurVersionJSON:
    versions = copy.deepcopy(versions)
    for system_name, system in versions.items():
@@ -181,8 +220,8 @@ def merge_versions(old: OurVersionJSON, new: OurVersionJSON) -> OurVersionJSON:
        system_name: str,
        release_type_name: str,
        release_channel_name: str,
-        release: Dict[str, str],
-    ) -> Dict[str, str]:
+        release: dict[str, str],
+    ) -> dict[str, str]:
        old_system = old.get(system_name, {})
        old_release_type = old_system.get(release_type_name, {})
        old_release = old_release_type.get(release_channel_name, {})
@@ -235,8 +274,8 @@ def fill_in_hash(
        system_name: str,
        release_type_name: str,
        release_channel_name: str,
-        release: Dict[str, str],
-    ) -> Dict[str, str]:
+        release: dict[str, str],
+    ) -> dict[str, str]:
        for candidate_filename in release["candidateHashFilenames"]:
            if candidate_filename in factorio_hashes:
                release["sha256"] = factorio_hashes[candidate_filename]
--- a/pkgs/by-name/fa/factorio/versions.json
+++ b/pkgs/by-name/fa/factorio/versions.json
@@ -1,19 +1,66 @@
 {
+  "aarch64-linux": {
+    "alpha": {
+      "experimental": {
+        "candidateHashFilenames": [
+          "factorio_linux-arm64_2.1.20.tar.xz",
+          "factorio_linux-arm64_2.1.20.tar.xz"
+        ],
+        "name": "factorio_alpha_arm64-2.1.20.tar.xz",
+        "needsAuth": true,
+        "sha256": "78420b2a8347ab1d9840c63d8dea439d191617d7748bb5562323faef484715fc",
+        "tarDirectory": "arm64",
+        "url": "https://factorio.com/get-download/2.1.20/alpha/linux-arm64",
+        "version": "2.1.20"
+      }
+    },
+    "expansion": {
+      "experimental": {
+        "candidateHashFilenames": [
+          "factorio-space-age_linux-arm64_2.1.20.tar.xz",
+          "factorio-space-age_linux-arm64_2.1.20.tar.xz"
+        ],
+        "name": "factorio_expansion_arm64-2.1.20.tar.xz",
+        "needsAuth": true,
+        "sha256": "373417bab9ac51cdedfc88307ae9562ae0d27a3cb29bb5aa748945169e5a8a76",
+        "tarDirectory": "arm64",
+        "url": "https://factorio.com/get-download/2.1.20/expansion/linux-arm64",
+        "version": "2.1.20"
+      }
+    },
+    "headless": {
+      "experimental": {
+        "candidateHashFilenames": [
+          "factorio-headless_linux-arm64_2.1.20.tar.xz",
+          "factorio-headless_linux-arm64_2.1.20.tar.xz",
+          "factorio_headless_arm64_2.1.20.tar.xz"
+        ],
+        "name": "factorio_headless_arm64-2.1.20.tar.xz",
+        "needsAuth": false,
+        "sha256": "6543968b416129f7ce905714e649bf7ae7b63e9eb2a01de53687ce1adf58d517",
+        "tarDirectory": "arm64",
+        "url": "https://factorio.com/get-download/2.1.20/headless/linux-arm64",
+        "version": "2.1.20"
+      }
+    }
+  },
  "x86_64-linux": {
    "alpha": {
      "experimental": {
        "candidateHashFilenames": [
-          "factorio_linux_2.1.12.tar.xz"
+          "factorio_linux64_2.1.20.tar.xz",
+          "factorio_linux_2.1.20.tar.xz"
        ],
-        "name": "factorio_alpha_x64-2.1.12.tar.xz",
+        "name": "factorio_alpha_x64-2.1.20.tar.xz",
        "needsAuth": true,
-        "sha256": "551765f1c0b3d7500cdfd86f6ee9811d081341f23326ee07d6cb8b649d890b0e",
+        "sha256": "cb50311886b4e4218d1bdf9afe18b2b0298696f2a2b3711494676ac1fc77242a",
        "tarDirectory": "x64",
-        "url": "https://factorio.com/get-download/2.1.12/alpha/linux64",
-        "version": "2.1.12"
+        "url": "https://factorio.com/get-download/2.1.20/alpha/linux64",
+        "version": "2.1.20"
      },
      "stable": {
        "candidateHashFilenames": [
+          "factorio_linux64_2.0.77.tar.xz",
          "factorio_linux_2.0.77.tar.xz"
        ],
        "name": "factorio_alpha_x64-2.0.77.tar.xz",
@@ -27,6 +74,7 @@
    "demo": {
      "experimental": {
        "candidateHashFilenames": [
+          "factorio-demo_linux64_2.0.77.tar.xz",
          "factorio-demo_linux_2.0.77.tar.xz"
        ],
        "name": "factorio_demo_x64-2.0.77.tar.xz",
@@ -38,6 +86,7 @@
      },
      "stable": {
        "candidateHashFilenames": [
+          "factorio-demo_linux64_2.0.77.tar.xz",
          "factorio-demo_linux_2.0.77.tar.xz"
        ],
        "name": "factorio_demo_x64-2.0.77.tar.xz",
@@ -51,17 +100,19 @@
    "expansion": {
      "experimental": {
        "candidateHashFilenames": [
-          "factorio-space-age_linux_2.1.12.tar.xz"
+          "factorio-space-age_linux64_2.1.20.tar.xz",
+          "factorio-space-age_linux_2.1.20.tar.xz"
        ],
-        "name": "factorio_expansion_x64-2.1.12.tar.xz",
+        "name": "factorio_expansion_x64-2.1.20.tar.xz",
        "needsAuth": true,
-        "sha256": "abffbe356b15081017e0d319e4498210d162557cfc61aea0c425c892ffad3214",
+        "sha256": "eaf3cd9a3274a6e6ea0d44840f02403440ab039b70dd37d5717e6a988ce0a08d",
        "tarDirectory": "x64",
-        "url": "https://factorio.com/get-download/2.1.12/expansion/linux64",
-        "version": "2.1.12"
+        "url": "https://factorio.com/get-download/2.1.20/expansion/linux64",
+        "version": "2.1.20"
      },
      "stable": {
        "candidateHashFilenames": [
+          "factorio-space-age_linux64_2.0.77.tar.xz",
          "factorio-space-age_linux_2.0.77.tar.xz"
        ],
        "name": "factorio_expansion_x64-2.0.77.tar.xz",
@@ -75,18 +126,20 @@
    "headless": {
      "experimental": {
        "candidateHashFilenames": [
-          "factorio-headless_linux_2.1.12.tar.xz",
-          "factorio_headless_x64_2.1.12.tar.xz"
+          "factorio-headless_linux64_2.1.20.tar.xz",
+          "factorio-headless_linux_2.1.20.tar.xz",
+          "factorio_headless_x64_2.1.20.tar.xz"
        ],
-        "name": "factorio_headless_x64-2.1.12.tar.xz",
+        "name": "factorio_headless_x64-2.1.20.tar.xz",
        "needsAuth": false,
-        "sha256": "885ff029a40b0edd815cfe1fc13845f232723da1ea8fe9a83eae114d1eccd3fe",
+        "sha256": "421a483dbcf69b76d854b7fdb86a800c94da04e414c20803c9fce82fc191bbb5",
        "tarDirectory": "x64",
-        "url": "https://factorio.com/get-download/2.1.12/headless/linux64",
-        "version": "2.1.12"
+        "url": "https://factorio.com/get-download/2.1.20/headless/linux64",
+        "version": "2.1.20"
      },
      "stable": {
        "candidateHashFilenames": [
+          "factorio-headless_linux64_2.0.77.tar.xz",
          "factorio-headless_linux_2.0.77.tar.xz",
          "factorio_headless_x64_2.0.77.tar.xz"
        ],
--- a/pkgs/by-name/fe/feather/package.nix
+++ b/pkgs/by-name/fe/feather/package.nix
@@ -24,24 +24,16 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "feather";
-  version = "2.8.1";
+  version = "2.9.1";

  src = fetchFromGitHub {
    owner = "feather-wallet";
    repo = "feather";
    tag = finalAttrs.version;
-    hash = "sha256-DZBRZBcoba32Z/bFThn/9siC8VESg5gdfoFO4Nw8JqM=";
+    hash = "sha256-/rnQw+SNMpFROJln/Sv2RgJlRxa8PnZMs4HfIAxP9VY=";
    fetchSubmodules = true;
  };

-  patches = [
-    (fetchpatch2 {
-      name = "0001-zxing-3-compat.patch";
-      url = "https://github.com/feather-wallet/feather/commit/9b17ffd1f783689c835da3ce22996a25d8221806.patch?full_index=1";
-      hash = "sha256-o4Tq6Dg5xrkF1eoGw0uuN9GiW4+FCnswx6//PYYA34w=";
-    })
-  ];
-
  nativeBuildInputs = [
    cmake
    pkg-config
--- a/pkgs/by-name/fi/firebase-tools/package.nix
+++ b/pkgs/by-name/fi/firebase-tools/package.nix
@@ -11,17 +11,17 @@

 buildNpmPackage rec {
  pname = "firebase-tools";
-  version = "15.30.0";
+  version = "15.30.2";
  nodejs = nodejs_22;

  src = fetchFromGitHub {
    owner = "firebase";
    repo = "firebase-tools";
    tag = "v${version}";
-    hash = "sha256-pnEdnZWI9osazHlEBCnbqisvxHq3RbfKtJl7u6RxNdQ=";
+    hash = "sha256-/dsxYIFFN8LSZ3+P+S4vSQ9YhMiGIEoRV7+MWTbP6Js=";
  };

-  npmDepsHash = "sha256-bHXyMeyzatoW+BHRWNNXYi/aeCdVWbGozHhDfPhNTd4=";
+  npmDepsHash = "sha256-hQMfsMKzwrXCQHbAmFi12X1EAMFa/xphyJqqp2J5MKc=";

  # No more package-lock.json in upstream src
  postPatch = ''
--- a/pkgs/by-name/fi/firefly-iii-data-importer/package.nix
+++ b/pkgs/by-name/fi/firefly-iii-data-importer/package.nix
@@ -16,13 +16,14 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "firefly-iii-data-importer";
-  version = "2.3.4";
+  version = "2.3.5";
+  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "firefly-iii";
    repo = "data-importer";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-869oPalwVdc7Ge8zcG6OniTZ6zhLOknlvFQkEHzLg0M=";
+    hash = "sha256-lXPuVuYxIIoDM1gcfdRcCvwUmD3+uArgan3wY4q1cMw=";
  };

  buildInputs = [ php ];
@@ -42,12 +43,12 @@ stdenvNoCC.mkDerivation (finalAttrs: {
  composerStrictValidation = true;
  strictDeps = true;

-  vendorHash = "sha256-GEioAwqo9BHzoP4/uetqiQgv+O9Qzqyo/AcW9VP23n0=";
+  vendorHash = "sha256-X440UAEKEGQUeywMr4zE1bW1Sdx9DAECyvUXDjJeljs=";

  npmDeps = fetchNpmDeps {
    inherit (finalAttrs) src;
    name = "${finalAttrs.pname}-npm-deps";
-    hash = "sha256-FEEC89/7cEuKU4mY27Pm5nr5EkOoL7BWZRAOpCZK61I=";
+    hash = "sha256-45SItCuL1RO8kIZtYI/vt0wQyfQRBcb7nY5ECYEeybQ=";
  };

  composerRepository = php.mkComposerRepository {
--- a/pkgs/by-name/fl/flexoptix-app/package.nix
+++ b/pkgs/by-name/fl/flexoptix-app/package.nix
@@ -53,7 +53,7 @@ appimageTools.wrapAppImage {
  extraInstallCommands = ''
    # Add desktop convencience stuff
    install -Dm444 ${appimageContents}/flexoptix-app.desktop -t $out/share/applications
-    install -Dm444 ${appimageContents}/flexoptix-app.png -t $out/share/pixmaps
+    install -Dm444 ${appimageContents}/flexoptix-app.png -t $out/share/icons/
    substituteInPlace $out/share/applications/flexoptix-app.desktop \
      --replace-fail 'Exec=AppRun' "Exec=$out/bin/${pname} --"

--- a/pkgs/by-name/fl/flix/package.nix
+++ b/pkgs/by-name/fl/flix/package.nix
@@ -8,11 +8,11 @@

 stdenvNoCC.mkDerivation rec {
  pname = "flix";
-  version = "0.76.0";
+  version = "0.76.2";

  src = fetchurl {
    url = "https://github.com/flix/flix/releases/download/v${version}/flix.jar";
-    sha256 = "sha256-2Nmjhw4ZnAPtY2TqlDD1b2e/04wzLEEWKKany4iysLQ=";
+    sha256 = "sha256-vgbYwMw6/fZ2mB9I10M1QVHHBg9v6OaJcgImaCqAyK4=";
  };

  dontUnpack = true;
--- a/pkgs/by-name/fo/fokus/package.nix
+++ b/pkgs/by-name/fo/fokus/package.nix
@@ -3,27 +3,30 @@
  stdenv,
  fetchFromGitLab,
  kdePackages,
-  nix-update-script,
+  gitUpdater,
 }:

 stdenv.mkDerivation (finalAttrs: {
  pname = "fokus";
-  version = "2.3.3";
+  version = "3.1.3";

  src = fetchFromGitLab {
    owner = "divinae";
    repo = "focus-plasmoid";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-S/0hAAt9zzj8pP5juFDvT0Z2B+GKpFnBsIVdJjSEakI=";
+    hash = "sha256-FQH2d1w0QjCkneLN8ZRTUfLb//+tbRo21U8379kxgoI=";
  };

  dontWrapQtApps = true;

+  # No build is needed, as this is a plasmoid with QML files only.
+  dontBuild = true;
+
  postPatch = ''
    substituteInPlace package/contents/config/main.xml package/contents/ui/configNotifications.qml \
         --replace-fail "/usr/share/sounds" "${kdePackages.ocean-sound-theme}/share/sounds"

-    substituteInPlace package/contents/ui/configNotifications.qml package/contents/ui/configScripts.qml package/contents/ui/main.qml package/contents/ui/NotificationManager.qml \
+    substituteInPlace package/contents/ui/Sfx.qml \
         --replace-fail 'import QtMultimedia' 'import "file://${kdePackages.qtmultimedia}/lib/qt-6/qml/QtMultimedia"'
  '';

@@ -36,11 +39,16 @@ stdenv.mkDerivation (finalAttrs: {
    runHook postInstall
  '';

-  passthru.updateScript = nix-update-script { };
+  # nix-update-script would stick on v2.3.3 as this is the only Gitlab Release upstream. Releases are marked with Git tags.
+  passthru.updateScript = gitUpdater {
+    url = "https://gitlab.com/divinae/focus-plasmoid.git";
+    rev-prefix = "v";
+  };

  meta = {
    description = "Simple pomodoro KDE Plasma plasmoid";
    homepage = "https://gitlab.com/divinae/focus-plasmoid";
+    changelog = "https://gitlab.com/divinae/focus-plasmoid/-/blob/v${finalAttrs.version}/CHANGELOG.md";
    license = lib.licenses.gpl3Only;
    maintainers = with lib.maintainers; [ structix ];
    platforms = lib.platforms.linux;
--- a/pkgs/by-name/fr/framework-tool/package.nix
+++ b/pkgs/by-name/fr/framework-tool/package.nix
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "framework-tool";
-  version = "0.6.5";
+  version = "0.6.6";

  src = fetchFromGitHub {
    owner = "FrameworkComputer";
    repo = "framework-system";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-criNeQcbMAWA8q27GClzCncbcj/zhD7yJylQnnFKMS4=";
+    hash = "sha256-AcATahEiCiXUNC4k9dCW6doGchjdvg6Kc7VjaOYyFGk=";
  };

-  cargoHash = "sha256-sMhH/Qzc2Pf+hnKcCEmw37s8rLniqFnfZ72ptG8APOk=";
+  cargoHash = "sha256-gc/diU6reAaFnar1HZ4tMzYsGo8k3LH35g9Er5T8xas=";

  nativeBuildInputs = [ pkg-config ];
  buildInputs = [ udev ];
--- a/pkgs/by-name/ga/gagit/package.nix
+++ b/pkgs/by-name/ga/gagit/package.nix
@@ -0,0 +1,73 @@
+{
+  lib,
+  resholve,
+  fetchzip,
+  bash,
+  coreutils,
+  git,
+  meson,
+  ninja,
+}:
+
+resholve.mkDerivation (finalAttrs: {
+  pname = "gagit";
+  version = "4";
+
+  src = fetchzip {
+    url = "https://gitweb.gentoo.org/proj/gagit.git/snapshot/gagit-${finalAttrs.version}.tar.gz";
+    hash = "sha256-V8qLZu2dpbUbpHZ5AH7Zr6HcgujjnWw9DFLF4K57RCc=";
+  };
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  solutions = {
+    default = {
+      scripts = [ "bin/gagit" ];
+      interpreter = lib.getExe bash;
+      inputs = [
+        coreutils
+        git
+      ];
+      keep = {
+        # Based on $EDITOR and --editor, defaulting to vim.
+        # Providing it is up to the user.
+        "$editor" = true;
+      };
+      execer = [
+        # Resholve can't handle git yet. I don't see any subexec in the script.
+        "cannot:${lib.getExe git}"
+      ];
+    };
+  };
+
+  nativeBuildInputs = [
+    meson
+    ninja
+  ];
+
+  nativeCheckInputs = [
+    git
+  ];
+
+  doCheck = true;
+
+  meta = {
+    description = "Gentoo AGit workflow tool";
+    homepage = "https://gitweb.gentoo.org/proj/gagit.git/";
+    license = lib.licenses.gpl2Plus;
+    longDescription = ''
+      GAGit is yet another AGit workflow tool, dedicated to pushing to the
+      Gentoo Codeberg mirrors. The goal is to:
+
+        1. Automatically figure out the correct remote and target branch,
+           accounting for different setups (such as GURU using dev).
+        2. Use the editor to provide the initial pull request description,
+        respecting the pull request template.
+        3. Set upstream for the branch to make PR updates easy.
+    '';
+    maintainers = with lib.maintainers; [ fgaz ];
+    mainProgram = "gagit";
+    platforms = lib.platforms.all;
+  };
+})
--- a/pkgs/by-name/ga/gammaray/package.nix
+++ b/pkgs/by-name/ga/gammaray/package.nix
@@ -13,13 +13,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "gammaray";
-  version = "3.4.0";
+  version = "3.4.1";

  src = fetchFromGitHub {
    owner = "KDAB";
    repo = finalAttrs.pname;
    tag = "v${finalAttrs.version}";
-    hash = "sha256-sxzYp6+x06cb67f+Mi2hc4kGhYGvIctLGJdjjyGTrjs=";
+    hash = "sha256-JgAzrYjLLa8R2SRBLfWYhizNUoF/tb9TbBdzzLNOqtE=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/gf/gftp/package.nix
+++ b/pkgs/by-name/gf/gftp/package.nix
@@ -42,7 +42,7 @@ stdenv.mkDerivation (finalAttrs: {
  meta = {
    homepage = "https://github.com/masneyb/gftp";
    description = "GTK-based multithreaded FTP client for *nix-based machines";
-    license = lib.licenses.gpl2Plus;
+    license = lib.licenses.mit;
    maintainers = [ lib.maintainers.haylin ];
    platforms = lib.platforms.unix;
    mainProgram = "gftp";
--- a/pkgs/by-name/gi/gildas/package.nix
+++ b/pkgs/by-name/gi/gildas/package.nix
@@ -81,7 +81,7 @@ stdenv.mkDerivation rec {
    runHook postConfigure
  '';

-  userExec = "astro class greg mapping sic";
+  userExec = "astro class cube greg mapping sic";

  postInstall = ''
    mkdir -p $out/bin
--- a/pkgs/by-name/gi/git-mit/package.nix
+++ b/pkgs/by-name/gi/git-mit/package.nix
@@ -9,7 +9,7 @@
 }:

 let
-  version = "6.5.3";
+  version = "6.5.4";
 in
 rustPlatform.buildRustPackage {
  pname = "git-mit";
@@ -19,10 +19,10 @@ rustPlatform.buildRustPackage {
    owner = "PurpleBooth";
    repo = "git-mit";
    tag = "v${version}";
-    hash = "sha256-vk0TxbvjjFqyisyeet2s3mp7+aPb99Lp0iLU59+pNG0=";
+    hash = "sha256-X8PNsYhhFgcBZQojOTBh0SN+trO6lstwWzLbo0a1Do4=";
  };

-  cargoHash = "sha256-54s4Jnc6C6ysQnQ4AyxxghbTVVkud4KrZ9wLZ83OZmQ=";
+  cargoHash = "sha256-6lKCtNPEKanVxweY8WcyOXnyLOdDMfRPoN/b6bxmKdA=";

  nativeBuildInputs = [ pkg-config ];

--- a/pkgs/by-name/gi/gitaly/package.nix
+++ b/pkgs/by-name/gi/gitaly/package.nix
@@ -7,7 +7,7 @@
 }:

 let
-  version = "19.3.2";
+  version = "19.3.3";
  package_version = "v${lib.versions.major version}";
  gitaly_package = "gitlab.com/gitlab-org/gitaly/${package_version}";

@@ -21,7 +21,7 @@ let
      owner = "gitlab-org";
      repo = "gitaly";
      rev = "v${version}";
-      hash = "sha256-bfRCH++tvhrGg+GGnPYFu4EF7IdAHAEu+XI0yPMWryQ=";
+      hash = "sha256-hiNNt7KLZ3x8RjZnDGwXtJbu29gNPrnj+Mdi5jYqe4k=";
    };

    vendorHash = "sha256-r9sPLLC8d29ny/07zqJkYQiSVF3MSAHAbnYK0T5xHWU=";
--- a/pkgs/by-name/gi/github-copilot-app/package.nix
+++ b/pkgs/by-name/gi/github-copilot-app/package.nix
@@ -23,20 +23,20 @@

 let
  pname = "github-copilot-app";
-  version = "1.1.20";
+  version = "1.1.23";

  sources = {
    x86_64-linux = fetchurl {
      url = "https://github.com/github/app/releases/download/v${version}/GitHub-Copilot-linux-x64.deb";
-      hash = "sha256-rdPNf0n8vilzakQPObp0l24iaj3alEjLVnKDvF9Xbv8=";
+      hash = "sha256-HWNnLEliPzGzq8YySicZHNJqzoUr+9PxsRWdCw3pBmM=";
    };
    aarch64-linux = fetchurl {
      url = "https://github.com/github/app/releases/download/v${version}/GitHub-Copilot-linux-arm64.deb";
-      hash = "sha256-an6DWY97e2JUIIoEURy1kdXEwERpyUrf380k9RQEc14=";
+      hash = "sha256-ah2XDAM4HE/myCdVoJ8ErCIAmpw2F8yvO87P5El9RLY=";
    };
    aarch64-darwin = fetchurl {
      url = "https://github.com/github/app/releases/download/v${version}/GitHub-Copilot-darwin-arm64.dmg";
-      hash = "sha256-CrH3jpKpZ7vizDAwlZlQa5XyOZ2C0+cFwN5zymwjFKM=";
+      hash = "sha256-f7QvkGpuDMixBZF4DJKyK9zmaig5LgGOqcNyucqZALw=";
    };
  };

--- a/pkgs/by-name/gi/gitlab-pages/package.nix
+++ b/pkgs/by-name/gi/gitlab-pages/package.nix
@@ -6,14 +6,14 @@

 buildGoModule (finalAttrs: {
  pname = "gitlab-pages";
-  version = "19.3.2";
+  version = "19.3.3";

  # nixpkgs-update: no auto update
  src = fetchFromGitLab {
    owner = "gitlab-org";
    repo = "gitlab-pages";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-aLcgYvtb4wk21oXGVmiPcb6vG6+//mL+3N0Q/ha1ap0=";
+    hash = "sha256-uoy3TyoTL15VBJLaIW7qQGMvidPCcPBCWCg/NQNjAxU=";
  };

  vendorHash = "sha256-81Q5xtkQhJS9TQYTgXA4yi7zny6yFPTVAOHETOCyHNE=";
--- a/pkgs/by-name/gi/gitlab/data.json
+++ b/pkgs/by-name/gi/gitlab/data.json
@@ -1,17 +1,17 @@
 {
-  "version": "19.3.2",
-  "repo_hash": "sha256-z+Sd3YiRSrZuiKQmc24hgM1CPxZsKmkAYuSYSNCXrkY=",
+  "version": "19.3.3",
+  "repo_hash": "sha256-6TD94MgXHbqEFBVfyERQsqne/1Toaxz2qJEJmXl9GaA=",
  "yarn_hash": "sha256-o4HYadByTvPYoBVeJh5Gqeiuin+FpJcqvnXASga0bxk=",
  "frontend_islands_yarn_hash": "sha256-EvGQin+5DqqIgM36jlVkVI49WcJzVvceYnkSS9ybfcY=",
  "owner": "gitlab-org",
  "repo": "gitlab",
-  "rev": "v19.3.2-ee",
+  "rev": "v19.3.3-ee",
  "passthru": {
-    "GITALY_SERVER_VERSION": "19.3.2",
-    "GITLAB_KAS_VERSION": "19.3.2",
-    "GITLAB_PAGES_VERSION": "19.3.2",
+    "GITALY_SERVER_VERSION": "19.3.3",
+    "GITLAB_KAS_VERSION": "19.3.3",
+    "GITLAB_PAGES_VERSION": "19.3.3",
    "GITLAB_SHELL_VERSION": "14.56.1",
    "GITLAB_ELASTICSEARCH_INDEXER_VERSION": "5.14.13",
-    "GITLAB_WORKHORSE_VERSION": "19.3.2"
+    "GITLAB_WORKHORSE_VERSION": "19.3.3"
  }
 }
--- a/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix
+++ b/pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix
@@ -10,7 +10,7 @@ in
 buildGoModule (finalAttrs: {
  pname = "gitlab-workhorse";

-  version = "19.3.2";
+  version = "19.3.3";

  # nixpkgs-update: no auto update
  src = fetchFromGitLab {
--- a/pkgs/by-name/gn/gnome-online-accounts-gtk/package.nix
+++ b/pkgs/by-name/gn/gnome-online-accounts-gtk/package.nix
@@ -16,13 +16,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "gnome-online-accounts-gtk";
-  version = "3.50.10";
+  version = "3.50.11";

  src = fetchFromGitHub {
    owner = "xapp-project";
    repo = "gnome-online-accounts-gtk";
    rev = finalAttrs.version;
-    hash = "sha256-tBBCnB3JhGaaN/uv6BqyJDSvSyV1mPA4WvsvNS8cbOA=";
+    hash = "sha256-cPZJgXhWQ5pdKB3hHG7x3vYon3J8HzHDVicP6CODUQ4=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/go/gobby/package.nix
+++ b/pkgs/by-name/go/gobby/package.nix
@@ -54,10 +54,10 @@ stdenv.mkDerivation (finalAttrs: {
  preConfigure = "./autogen.sh";

  meta = {
-    homepage = "http://gobby.0x539.de/";
+    homepage = "https://github.com/gobby/gobby";
    description = "GTK-based collaborative editor supporting multiple documents in one session and a multi-user chat";
    mainProgram = "gobby-0.5";
-    license = lib.licenses.gpl2Plus;
+    license = lib.licenses.isc;
    maintainers = [ ];
    platforms = lib.platforms.all;
  };
--- a/pkgs/by-name/go/gopass-hibp/package.nix
+++ b/pkgs/by-name/go/gopass-hibp/package.nix
@@ -10,16 +10,16 @@

 buildGoModule (finalAttrs: {
  pname = "gopass-hibp";
-  version = "1.17.2";
+  version = "1.17.3";

  src = fetchFromGitHub {
    owner = "gopasspw";
    repo = "gopass-hibp";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-3zC39DE5jl5d3nUjzzSmFPI4K5Uez4tYwmb+lWmwvmM=";
+    hash = "sha256-Dc+lZrOP8XbHlJJqET1i9/KeSZUeHOV3huGPt9ieRZY=";
  };

-  vendorHash = "sha256-bdUg4uX3hsbxc3xmKX9bqhJVnB1KEJTnnQySQnHe5Q8=";
+  vendorHash = "sha256-9BNnieu+IbZxYfWtwaWgdk86yv0gdK2z8fMbebkO5L8=";

  subPackages = [ "." ];

--- a/pkgs/by-name/go/gopass-jsonapi/package.nix
+++ b/pkgs/by-name/go/gopass-jsonapi/package.nix
@@ -25,16 +25,16 @@ let
 in
 buildGoModule (finalAttrs: {
  pname = "gopass-jsonapi";
-  version = "1.17.2";
+  version = "1.17.3";

  src = fetchFromGitHub {
    owner = "gopasspw";
    repo = "gopass-jsonapi";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-rSRFw8Rco82Rg01MSq2Ds+RxbnaBbmQiBdBCFtHrA6k=";
+    hash = "sha256-eVvZvicLoS/3Y1Fcl9HgAUhyYFKnqvFQ3BDukGtr1ho=";
  };

-  vendorHash = "sha256-yuZ6N26b/SaBxIX0apXndUK8XvtSt2SqVqfTqGZp+eY=";
+  vendorHash = "sha256-aFJ7VPpD5A7bvwESFj9m2VZ7KsCAKl3La4iQzRhbuHc=";

  subPackages = [ "." ];

--- a/pkgs/by-name/go/gopass-summon-provider/package.nix
+++ b/pkgs/by-name/go/gopass-summon-provider/package.nix
@@ -10,16 +10,16 @@

 buildGoModule (finalAttrs: {
  pname = "gopass-summon-provider";
-  version = "1.17.2";
+  version = "1.17.3";

  src = fetchFromGitHub {
    owner = "gopasspw";
    repo = "gopass-summon-provider";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-OWQQXMUKz8EmyowTVRaO8FhskXEGO0asWP7J/Xqd90k=";
+    hash = "sha256-bb9kxaDosx3xrjPcu+n2ROdFdyETTePvObWIGkKOcrM=";
  };

-  vendorHash = "sha256-7wwjPcnAJ/9l8ff2qqqU/Z8l223g0GDogJbf3TwcOaw=";
+  vendorHash = "sha256-9BNnieu+IbZxYfWtwaWgdk86yv0gdK2z8fMbebkO5L8=";

  subPackages = [ "." ];

--- a/pkgs/by-name/go/gopass/package.nix
+++ b/pkgs/by-name/go/gopass/package.nix
@@ -28,7 +28,7 @@ let
 in
 buildGoModule (finalAttrs: {
  pname = "gopass";
-  version = "1.16.1";
+  version = "1.17.3";

  nativeBuildInputs = [
    installShellFiles
@@ -39,10 +39,10 @@ buildGoModule (finalAttrs: {
    owner = "gopasspw";
    repo = "gopass";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Yr66+LUEoONNkSQUQhIWtLvxN0a5YtRVbn/nJRLqn+E=";
+    hash = "sha256-UlnibTEge5eCW7PZqQBWlZUaaYtNLKywbyacTs/Af/M=";
  };

-  vendorHash = "sha256-ebnnnAD7SQJrSVOPborHUWd8ThOstIgihEIUjrnCztQ=";
+  vendorHash = "sha256-2J0/eyEhMsDCXmRCeQx3vMZZc+1T2oz8p0y2Csv7VU4=";

  subPackages = [ "." ];

--- a/pkgs/by-name/go/got/package.nix
+++ b/pkgs/by-name/go/got/package.nix
@@ -25,11 +25,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "got";
-  version = "0.127";
+  version = "0.128";

  src = fetchurl {
    url = "https://gameoftrees.org/releases/portable/got-portable-${finalAttrs.version}.tar.gz";
-    hash = "sha256-H7Bh1hvZpRQJdY0oEVWLHQpX3x0Fx7vy3qSKHi9Vyj4=";
+    hash = "sha256-XX62sp6hUd2htvTh4aap75z9FDNsyfMjbt/DDahhWHI=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/go/gotmplfmt-hugo/package.nix
+++ b/pkgs/by-name/go/gotmplfmt-hugo/package.nix
@@ -9,14 +9,14 @@

 buildGoModule (finalAttrs: {
  pname = "gotmplfmt-hugo";
-  version = "0.4.1";
+  version = "0.5.0";
  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "gohugoio";
    repo = "gotmplfmt";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-z+Qsg0QWWU4+QZrMg61W5bLRm8Ps5b6IsJdUNoYqJFA=";
+    hash = "sha256-1DZ25DEdpdfHgkTixtldiiTGFhO5wik6YTsRHstEje8=";
    # populate values that require us to use git. By doing this in postFetch we
    # can delete .git afterwards and maintain better reproducibility of the src.
    leaveDotGit = true;
@@ -29,7 +29,7 @@ buildGoModule (finalAttrs: {
    '';
  };

-  vendorHash = "sha256-OEXvKQ/dBxhz6/pbQNDYIjBf3O0x36ZE3Se/FqEgYRg=";
+  vendorHash = "sha256-swFaZPk1WqSDXPnBz8atMT3YTucGRsQ9XX5iXOPiPS0=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/gp/gpscorrelate/package.nix
+++ b/pkgs/by-name/gp/gpscorrelate/package.nix
@@ -16,13 +16,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "gpscorrelate";
-  version = "2.3";
+  version = "2.4";

  src = fetchFromGitHub {
    owner = "dfandrich";
    repo = "gpscorrelate";
    tag = finalAttrs.version;
-    hash = "sha256-7uNYwnMkW9jlt3kBrNqkhJsDoVkUFbCmqt0lQv8bRE0=";
+    hash = "sha256-BwBKCX4fvSb8jOgU8RoCidP/BFCcoGAX4jSifKYu96E=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/gr/grafana-loki/package.nix
+++ b/pkgs/by-name/gr/grafana-loki/package.nix
@@ -9,14 +9,14 @@
 }:

 buildGoModule (finalAttrs: {
-  version = "3.7.7";
+  version = "3.7.8";
  pname = "grafana-loki";

  src = fetchFromGitHub {
    owner = "grafana";
    repo = "loki";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-D9uN3lVJvV7c0G4gT4lA+JEedA21YHZDLnMUSKNiEFE=";
+    hash = "sha256-H+4qSXf0gZL2RCf5o4v4V3/ozLVESdhy0QDEpXbAGuc=";
  };

  vendorHash = null;
--- a/pkgs/by-name/ha/hayabusa-sec/package.nix
+++ b/pkgs/by-name/ha/hayabusa-sec/package.nix
@@ -11,18 +11,18 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "hayabusa-sec";
-  version = "4.0.0";
+  version = "4.1.0";

  src = fetchFromGitHub {
    owner = "Yamato-Security";
    repo = "hayabusa";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-MabwaHKbbC8fbnICkVMA+bu7zBasIztMR4m0ro8vhYA=";
+    hash = "sha256-k4t0DY0EkSU8jTzUwkBynopLcI/ZxaShrLVg7x1pN+U=";
    # Include the hayabusa-rules
    fetchSubmodules = true;
  };

-  cargoHash = "sha256-PbzMVJPyBOfpS9j3d0RHOlFNJLApU1Gc5O1ro2LROYY=";
+  cargoHash = "sha256-fADma0ssh5t6A1gKd5yyy6DTqjYUvqQNaHT+McKRShU=";

  nativeBuildInputs = [
    makeWrapper
--- a/pkgs/by-name/he/headscale/package.nix
+++ b/pkgs/by-name/he/headscale/package.nix
@@ -11,13 +11,13 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "headscale";
-  version = "0.29.3";
+  version = "0.29.4";

  src = fetchFromGitHub {
    owner = "juanfont";
    repo = "headscale";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-ddJHSEqZd++JeG3UjUwzw7i45FlZYggUwhEG/tDkq0s=";
+    hash = "sha256-oBl8oQuZ8LUhK6FsGZkTXCJtwqmegmUDreeIILH4wRg=";
  };

  postPatch = ''
--- a/pkgs/by-name/he/heroic-unwrapped/fix-non-steam-shortcuts.patch
+++ b/pkgs/by-name/he/heroic-unwrapped/fix-non-steam-shortcuts.patch
@@ -1,13 +0,0 @@
-diff --git a/src/backend/shortcuts/nonesteamgame/nonesteamgame.ts b/src/backend/shortcuts/nonesteamgame/nonesteamgame.ts
-index 28c917ce..f3b09c55 100644
--- a/src/backend/shortcuts/nonesteamgame/nonesteamgame.ts
-+++ b/src/backend/shortcuts/nonesteamgame/nonesteamgame.ts
-@@ -255,7 +255,7 @@ async function addNonSteamGame(game: Game): Promise<boolean> {
-     // add new Entry
-     const newEntry = {} as ShortcutEntry
-     newEntry.AppName = gameInfo.title
-    newEntry.Exe = `"${app.getPath('exe')}"`
-+    newEntry.Exe = `"heroic"`
-     newEntry.StartDir = `"${process.cwd()}"`
- 
-     if (isFlatpak) {
--- a/pkgs/by-name/he/heroic-unwrapped/package.nix
+++ b/pkgs/by-name/he/heroic-unwrapped/package.nix
@@ -3,6 +3,7 @@
  callPackage,
  stdenv,
  fetchFromGitHub,
+  nix-update-script,
  # Pinned, because our FODs are not guaranteed to be stable between major versions.
  pnpm_10,
  fetchPnpmDeps,
@@ -30,13 +31,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "heroic-unwrapped";
-  version = "2.22.1";
+  version = "2.22.3";

  src = fetchFromGitHub {
    owner = "Heroic-Games-Launcher";
    repo = "HeroicGamesLauncher";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-CpbCXmvfwXT16ZG/6fwPWSjBwK02ykJ/GuZk1VcW+tU=";
+    hash = "sha256-gXG0ojLIT28aAYXhpMmR9Oksmdfidr4m6M7PDJWwa1c=";
  };

  pnpmDeps = fetchPnpmDeps {
@@ -44,11 +45,10 @@ stdenv.mkDerivation (finalAttrs: {
      pname
      version
      src
-      patches
      ;
    inherit pnpm;
    fetcherVersion = 3;
-    hash = "sha256-NrglT9vtDMAYXmZ4G3vifvLXu1yS6xbp+cqE6B6vQFc=";
+    hash = "sha256-oY59X+Ma23fmw6K6/PuHCn5Jj4xFPLq5vJRVIzrpUrM=";
  };

  nativeBuildInputs = [
@@ -59,11 +59,6 @@ stdenv.mkDerivation (finalAttrs: {
    makeWrapper
  ];

-  patches = [
-    # Make Heroic create Steam shortcuts (to non-steam games) with the correct path to heroic.
-    ./fix-non-steam-shortcuts.patch
-  ];
-
  env.ELECTRON_SKIP_BINARY_DOWNLOAD = "1";

  buildPhase = ''
@@ -133,6 +128,7 @@ stdenv.mkDerivation (finalAttrs: {

  passthru = {
    inherit epic-integration;
+    updateScript = nix-update-script { };
  };

  meta = {
--- a/pkgs/by-name/hi/hidapitester/package.nix
+++ b/pkgs/by-name/hi/hidapitester/package.nix
@@ -28,8 +28,10 @@ stdenv.mkDerivation (finalAttrs: {
  env.HIDAPITESTER_VERSION = finalAttrs.version;

  buildInputs = [
-    udev
    hidapi
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
+    udev
  ];

  nativeBuildInputs = [
--- a/pkgs/by-name/ho/hologram/package.nix
+++ b/pkgs/by-name/ho/hologram/package.nix
@@ -6,13 +6,13 @@

 buildGoModule (finalAttrs: {
  pname = "hologram";
-  version = "1.3";
+  version = "1.4";

  src = fetchFromGitHub {
    owner = "AdRoll";
    repo = "hologram";
    rev = finalAttrs.version;
-    hash = "sha256-b65mplfDuwk8lEfJLKBY7BF0yGRksxHjwbEW6A7moo4=";
+    hash = "sha256-YnGOlLL6+W0AmaPgu2l5ghGqQ2ow/9hbWRAhpxFkeNk=";
  };

  postPatch = ''
--- a/pkgs/by-name/ho/hooky/package.nix
+++ b/pkgs/by-name/ho/hooky/package.nix
@@ -11,13 +11,13 @@ in

 haskellPackages.mkDerivation {
  pname = "hooky";
-  version = "1.0.4";
+  version = "1.0.6";

  src = fetchFromGitHub {
    owner = "brandonchinn178";
    repo = "hooky";
-    rev = "281ec8b52f92bdbdad567d673cd5bb581dc6991b";
-    hash = "sha256-Salq9DuFc+V88tRhLN62GGKIhCCSznUsnr3TD5ivN/I=";
+    rev = "463904d439f7aa10c8f9a8aad1719df412166007";
+    hash = "sha256-g+33B9KPKQDSoBvMpRfL1MoiE1kMml2dw/Z1GwPfyd0=";
  };

  isLibrary = true;
@@ -28,9 +28,13 @@ haskellPackages.mkDerivation {
    bytestring
    concurrent-output
    containers
+    deepseq
    directory
+    file-io
    filepath
+    Glob
    kdl-hs
+    os-string
    process
    scientific
    text
@@ -41,6 +45,7 @@ haskellPackages.mkDerivation {
    base
    containers
    directory
+    file-io
    filepath
    optparse-applicative
    process
--- a/pkgs/by-name/hy/hydra-ant-logger/package.nix
+++ b/pkgs/by-name/hy/hydra-ant-logger/package.nix
@@ -40,5 +40,6 @@ stdenv.mkDerivation {
  meta = {
    homepage = "https://github.com/NixOS/hydra-ant-logger";
    platforms = lib.platforms.unix;
+    license = lib.licenses.unfree;
  };
 }
--- a/Show More
+++ b/Show More