Merge 225a465eed into haskell-updates

This is similar to the patch for yesod, and for the same reason. This will
become unnecessary once cachix and hnix-store-core are updated upstream.

doc/release-notes/rl-2611.section.md

@@ -52,8 +52,6 @@
 
 - `moon` has been updated to `2.x` and needs manual migration. See the [migration guide](https://moonrepo.dev/docs/migrate/2.0) for instructions.
 
-- `paperless-manage` now uses `runuser` instead of automatically calling `sudo` to set user/group before running. Invoke the script with `sudo paperless-manage` or an equivalent elevation tool of your choice
-
 - `hyperfine` has been updated from 1.21.0 to 2.0.0, which contains several breaking changes:
   - Benchmarked commands are now executed directly instead of through an intermediate shell. Pass `-S`/`--shell=default` to restore the previous behavior.
   - The `--export-json` format has changed (schema version 2); tools consuming the exported JSON must be updated.

maintainers/maintainer-list.nix

@@ -3468,6 +3468,12 @@
     githubId = 157330;
     name = "Ben Burdette";
   };
+  bcarrell = {
+    email = "brandoncarrell@gmail.com";
+    github = "bcarrell";
+    githubId = 1015044;
+    name = "Brandon Carrell";
+  };
   bcc32 = {
     email = "me@bcc32.com";
     github = "bcc32";
@@ -6780,7 +6786,7 @@
     name = "Dawid Sowa";
   };
   dawoox = {
-    email = "me@dawoox.dev";
+    email = "contact@antoinebellanger.fr";
     github = "Dawoox";
     githubId = 48325941;
     name = "Dawoox";
@@ -8061,6 +8067,12 @@
     githubId = 399312;
     name = "Vladyslav M.";
   };
+  dzabraev = {
+    email = "dzabraew@gmail.com";
+    github = "dzabraev";
+    githubId = 15128988;
+    name = "Maksim Dzabraev";
+  };
   dzervas = {
     name = "Dimitris Zervas";
     email = "dzervas@dzervas.gr";
@@ -10055,6 +10067,12 @@
     github = "ftsimas";
     githubId = 47324723;
   };
+  fuerbringer = {
+    email = "severin@fuerbringer.info";
+    github = "fuerbringer";
+    githubId = 10528737;
+    name = "Severin Fürbringer";
+  };
   fufexan = {
     email = "fufexan@protonmail.com";
     github = "fufexan";
@@ -13447,6 +13465,12 @@
     name = "Jere Vuola";
     keys = [ { fingerprint = "56C2 5B5B 2075 6352 B4B0  E17E F188 3717 47DA 5895"; } ];
   };
+  jeschli = {
+    email = "jeschli@gmail.com";
+    github = "0mbi";
+    githubId = 10786794;
+    name = "Markus Hihn";
+  };
   jess = {
     name = "Jessica";
     email = "jess+nix@jessie.cafe";
@@ -18720,6 +18744,12 @@
     githubId = 14008591;
     name = "Mack Binns";
   };
+  mbode = {
+    email = "maxbode@gmail.com";
+    github = "mbode";
+    githubId = 9051309;
+    name = "Maximilian Bode";
+  };
   mBornand = {
     email = "dev.mbornand@systemb.ch";
     github = "mBornand";
@@ -19832,11 +19862,11 @@
     githubId = 46468162;
   };
   moni = {
-    email = "nix@4rsxyzt.fyi";
+    email = "lythe1107@gmail.com";
     matrix = "@fortuneteller2k:matrix.org";
     github = "moni-dz";
     githubId = 20619776;
-    name = "Lythe Marvin L. Lacre";
+    name = "moni";
   };
   monkieeboi = {
     name = "MonkieeBoi";
@@ -22440,6 +22470,12 @@
     github = "ottoblep";
     githubId = 57066925;
   };
+  otwieracz = {
+    email = "slawek@otwiera.cz";
+    github = "otwieracz";
+    githubId = 108072;
+    name = "Slawomir Gonet";
+  };
   oughie = {
     name = "Oughie";
     email = "oughery@gmail.com";
@@ -24673,6 +24709,12 @@
     githubId = 7775707;
     name = "RB";
   };
+  rbasso = {
+    email = "rbasso@sharpgeeks.net";
+    github = "rbasso";
+    githubId = 16487165;
+    name = "Rafael Basso";
+  };
   rbreslow = {
     name = "Rocky Breslow";
     github = "rbreslow";
@@ -24837,6 +24879,12 @@
       { fingerprint = "66A8 1706 2227 9BD9 586A  CEDD 5B29 A881 3F47 65C4"; }
     ];
   };
+  relrod = {
+    email = "ricky@elrod.me";
+    github = "relrod";
+    githubId = 43930;
+    name = "Ricky Elrod";
+  };
   rembo10 = {
     github = "rembo10";
     githubId = 801525;
@@ -25622,6 +25670,12 @@
     githubId = 1728853;
     name = "Adam Washington";
   };
+  rps = {
+    email = "robbpseaton@gmail.com";
+    github = "robertseaton";
+    githubId = 221121;
+    name = "Robert P. Seaton";
+  };
   rraval = {
     email = "ronuk.raval@gmail.com";
     github = "rraval";
@@ -27352,11 +27406,6 @@
     github = "sinavir";
     githubId = 36380103;
   };
-  sinelaw = {
-    name = "Noam Lewis";
-    github = "sinelaw";
-    githubId = 84020;
-  };
   sinics = {
     name = "Zhifan";
     email = "nonno.felice69uwu@gmail.com";
@@ -27563,6 +27612,12 @@
     github = "sledgehammervampire";
     githubId = 47207223;
   };
+  sleexyz = {
+    email = "freshdried@gmail.com";
+    github = "sleexyz";
+    githubId = 1505617;
+    name = "Sean Lee";
+  };
   sleroq = {
     name = "Sleroq";
     email = "sleroq@cum.army";
@@ -28231,6 +28286,12 @@
     github = "stephsi";
     githubId = 3120909;
   };
+  sterfield = {
+    email = "sterfield@gmail.com";
+    github = "sterfield";
+    githubId = 5747061;
+    name = "Guillaume Loetscher";
+  };
   sternenseemann = {
     email = "sternenseemann@systemli.org";
     github = "sternenseemann";
@@ -29416,6 +29477,12 @@
     github = "TheOnlyMrCat";
     githubId = 23222857;
   };
+  theoparis = {
+    email = "theo@tinted.dev";
+    github = "theoparis";
+    githubId = 11761863;
+    name = "Theo Paris";
+  };
   therealansh = {
     email = "tyagiansh23@gmail.com";
     github = "therealansh";
@@ -30177,6 +30244,12 @@
     githubId = 144389458;
     name = "sapii";
   };
+  treemo = {
+    email = "matthieu.chevrier@treemo.fr";
+    github = "treemo";
+    githubId = 207457;
+    name = "Matthieu Chevrier";
+  };
   trespaul = {
     email = "paul@trespaul.com";
     github = "trespaul";
@@ -31168,6 +31241,12 @@
     githubId = 849772;
     name = "Venkateswara Rao Mandela";
   };
+  vmchale = {
+    email = "tmchale@wisc.edu";
+    github = "vmchale";
+    githubId = 13259982;
+    name = "Vanessa McHale";
+  };
   vmfunc = {
     github = "vmfunc";
     githubId = 59031302;

maintainers/scripts/haskell/eval-pkg-sets.sh

@@ -0,0 +1,39 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash
+#!nix-shell -p jq git
+# shellcheck shell=bash
+#
+# Usage: eval-pkg-sets.sh [extra flags for nix-* commands ...]
+#
+# Must be executed in a git checkout of Nixpkgs.
+
+set -euo pipefail
+
+NIXPKGS="$(git rev-parse --show-toplevel)"
+PKGSETS="$(nix-env --readonly-mode --json --drv-path -f "$NIXPKGS" -qaP -A haskell.compiler "$@" \
+  | jq -r 'to_entries | unique_by(.value.drvPath) .[] .key | sub("^haskell.compiler";"haskell.packages")')"
+
+trap 'exit 1' SIGINT SIGTERM
+
+set +e
+
+badsets=""
+for set in $PKGSETS; do
+  # Confirm an equivalent package set to haskell.compiler.$entry exists and is usable
+  if ! nix-instantiate --readonly-mode -A "$set.ghc" "$@" > /dev/null 2>&1; then
+    echo "Skipping $set... ($set.ghc does not evaluate)"
+  else
+    echo "Evaluating $set..."
+
+    if ! nix-env --readonly-mode -f "$NIXPKGS" -qaP --drv-path -A "$set" "$@" > /dev/null; then
+      badsets+="$set "
+    fi
+  fi
+done
+
+if [ -n "$badsets" ]; then
+  echo "Found potential eval issues in the following sets:" >&2
+  # shellcheck disable=SC2086
+  printf '%s\n' $badsets
+  exit 1
+fi

maintainers/scripts/haskell/unbreak.nu

@@ -6,7 +6,7 @@
 
 # Attention: For unknown reasons, the script can't be easily cancelled and needs to be killed manually if it shouldn't run to completion.
 
-use std log
+use std/log
 
 let broken_config = "pkgs/development/haskell-modules/configuration-hackage2nix/broken.yaml"
 

maintainers/scripts/haskell/update-stackage.sh

@@ -33,7 +33,7 @@ fi
 
 # Stackage solver to use, LTS or Nightly
 # (should be capitalized like the display name)
-SOLVER=LTS
+SOLVER=Nightly
 # Stackage solver version, if any. Use latest if empty
 VERSION=
 TMP_TEMPLATE=update-stackage.XXXXXXX
@@ -105,6 +105,7 @@ sed -r \
     -e '/ hledger-ui /d' \
     -e '/ hledger-web /d' \
     -e '/ spacecookie /d' \
+    -e '/ hnix-store-core /d' \
     < "${tmpfile_new}" >> $stackage_config
 # Explanations:
 # cabal2nix, distribution-nixpkgs, jailbreak-cabal, language-nix: These are our packages and we know what we are doing.

nixos/doc/manual/release-notes/rl-2611.section.md

@@ -296,9 +296,6 @@
   Deployments running the server and worker in the same network namespace must also set at least the worker
   `AUTHENTIK_LISTEN__HTTP` address so that the server and worker do not bind to the same address.
 
-- `nfs-ganesha` has been updated to 15.9.
-  Support for the 9P file system has been removed in 15.9.
-
 - `podman` has been updated to Podman 6.
   - BoltDB support was dropped. Podman has been automatically migrating to SQLite since 5.8.0 on system reboots.
   - `iptables` support was dropped, Podman now unconditionally uses its `nftables` backend.

nixos/modules/services/games/archisteamfarm.nix

@@ -257,40 +257,52 @@ in
           }
         ];
 
-        preStart = ''
-          mkdir -p config
+        preStart =
+          let
+            createBotsScript =
+              pkgs.runCommand "ASF-bots"
+                {
+                  preferLocalBuild = true;
+                }
+                ''
+                  mkdir -p $out
+                  # clean potential removed bots
+                  rm -rf $out/*.json
+                  for i in ${
+                    lib.concatStringsSep " " (map (x: "${lib.getName x},${x}") (lib.mapAttrsToList mkBot cfg.bots))
+                  }; do IFS=",";
+                    set -- $i
+                    ln -fs $2 $out/$1
+                  done
+                '';
+            replaceSecretBin = "${pkgs.replace-secret}/bin/replace-secret";
+          in
+          ''
+            mkdir -p config
 
-          cp --no-preserve=mode '${configFile}' config/ASF.json
+            cp --no-preserve=mode ${configFile} config/ASF.json
 
-          ${lib.optionalString (cfg.licenseFile != null) ''
-            ${lib.getExe pkgs.replace-secret} '#licenseID#' '${cfg.licenseFile}' config/ASF.json
-          ''}
+            ${lib.optionalString (cfg.licenseFile != null) ''
+              ${replaceSecretBin} '#licenseID#' '${cfg.licenseFile}' config/ASF.json
+            ''}
 
-          ${lib.optionalString (cfg.ipcPasswordFile != null) ''
-            ${lib.getExe pkgs.replace-secret} '#ipcPassword#' '${cfg.ipcPasswordFile}' config/ASF.json
-          ''}
+            ${lib.optionalString (cfg.ipcPasswordFile != null) ''
+              ${replaceSecretBin} '#ipcPassword#' '${cfg.ipcPasswordFile}' config/ASF.json
+            ''}
 
-          ${lib.optionalString (cfg.ipcSettings != { }) ''
-            ln -fs ${ipc-config} config/IPC.config
-          ''}
+            ${lib.optionalString (cfg.ipcSettings != { }) ''
+              ln -fs ${ipc-config} config/IPC.config
+            ''}
 
-          for f in config/*.nixbot; do
-            [[ -f "$f" ]] || continue
-            rm "$f"
-            [[ -f "''${f%.nixbot}" ]] || continue
-            rm "''${f%.nixbot}"
-          done
+            ${lib.optionalString (cfg.bots != { }) ''
+              ln -fs ${createBotsScript}/* config/
+            ''}
 
-          ${lib.concatMapStrings (x: ''
-            cp --no-preserve=mode '${x}' 'config/${lib.getName x}'
-            touch 'config/${lib.getName x}.nixbot'
-          '') (lib.mapAttrsToList mkBot cfg.bots)}
-
-          rm -f www
-          ${lib.optionalString cfg.web-ui.enable ''
-            ln -s '${cfg.web-ui.package}/' www
-          ''}
-        '';
+            rm -f www
+            ${lib.optionalString cfg.web-ui.enable ''
+              ln -s ${cfg.web-ui.package}/ www
+            ''}
+          '';
       };
     };
   };

nixos/modules/services/misc/paperless.nix

@@ -9,7 +9,7 @@ let
   cfg = config.services.paperless;
   opt = options.services.paperless;
   pythonPkgs = cfg.package.python.pkgs;
-  defaultUsername = "paperless";
+  defaultUser = "paperless";
   defaultFont = "${pkgs.liberation_ttf}/share/fonts/truetype/LiberationSerif-Regular.ttf";
 
   # Don't start a redis instance if the user sets a custom redis connection
@@ -58,39 +58,26 @@ let
       toString s
   ) cfg.settings);
 
-  loadEnv = pkgs.writeShellScriptBin "paperless-manage-load-env" ''
+  manage = pkgs.writeShellScriptBin "paperless-manage" ''
     set -o allexport # Export the following env vars
     ${lib.toShellVars env}
     ${lib.optionalString (cfg.environmentFile != null) "source ${cfg.environmentFile}"}
     if [[ -z "''${PAPERLESS_SECRET_KEY:-}" && -e '${secretKeyFile}' ]]; then
       source '${secretKeyFile}'
     fi
-    set +o allexport
+
     cd '${cfg.dataDir}'
-    ${lib.getExe cfg.package} "$@"
+    sudo=exec
+    if [[ "$USER" != ${cfg.user} ]]; then
+      ${
+        if config.security.sudo.enable then
+          "sudo='exec ${config.security.wrapperDir}/sudo -u ${cfg.user} -E'"
+        else
+          ">&2 echo 'Aborting, paperless-manage must be run as user `${cfg.user}`!'; exit 2"
+      }
+    fi
+    $sudo ${lib.getExe cfg.package} "$@"
   '';
-  paperlessManageScript = (
-    pkgs.writeShellScriptBin "paperless-manage" ''
-      # Switch user and run script
-      case "$(whoami)" in
-        "root")
-          ${lib.getExe' pkgs.util-linux "runuser"} ${
-            lib.cli.toCommandLineShellGNU { } {
-              preserve-environment = true;
-              user = cfg.user;
-              group = cfg.group;
-              supp-group = if enableRedis then redisServer.group else null;
-            }
-          } -- ${lib.getExe loadEnv} "$@";;
-        "${cfg.user}")
-          ${lib.getExe loadEnv} "$@"  ;;
-        *)
-          echo "Aborting, paperless-manage must be run as 'root' or user '${cfg.user}'!" >&2
-          echo "You may wish to rerun this with 'sudo'  " >&2
-          exit 2
-      esac
-    ''
-  );
 
   defaultServiceConfig = {
     Slice = "system-paperless.slice";
@@ -135,10 +122,6 @@ let
     RestrictNamespaces = true;
     RestrictRealtime = true;
     RestrictSUIDSGID = true;
-    User = cfg.user;
-    Group = cfg.group;
-    # Fallback for when `cfg.user != defaultUsername`
-    SupplementaryGroups = lib.optional enableRedis redisServer.group;
     SystemCallArchitectures = "native";
     SystemCallFilter = [
       "@system-service"
@@ -286,7 +269,7 @@ in
 
     user = lib.mkOption {
       type = lib.types.str;
-      default = defaultUsername;
+      default = defaultUser;
       description = ''
         User under which Paperless runs
 
@@ -300,7 +283,7 @@ in
 
     group = lib.mkOption {
       type = lib.types.str;
-      default = defaultUsername;
+      default = defaultUser;
       description = ''
         Primary group under which Paperless runs
 
@@ -485,8 +468,8 @@ in
           }
         ];
 
-        services.paperless.manage = paperlessManageScript;
-        environment.systemPackages = [ paperlessManageScript ];
+        services.paperless.manage = manage;
+        environment.systemPackages = [ manage ];
 
         services.nginx = lib.mkIf cfg.configureNginx {
           enable = true;
@@ -548,7 +531,8 @@ in
         systemd.tmpfiles.settings."10-paperless" =
           let
             defaultRule = {
-              inherit (cfg) user group;
+              inherit (cfg) user;
+              inherit (config.users.users.${cfg.user}) group;
             };
           in
           {
@@ -582,7 +566,7 @@ in
             Type = "oneshot";
             RemainAfterExit = true;
             User = cfg.user;
-            Group = cfg.group;
+            Group = config.users.users.${cfg.user}.group;
             UMask = "0077";
             Slice = "system-paperless.slice";
             EnvironmentFile = lib.optional (cfg.environmentFile != null) cfg.environmentFile;
@@ -616,6 +600,7 @@ in
             "paperless-task-queue.service"
           ];
           serviceConfig = defaultServiceConfig // {
+            User = cfg.user;
             ExecStart = "${cfg.package}/bin/celery --app paperless beat --loglevel INFO";
             Restart = "on-failure";
             LoadCredential = lib.optionalString (
@@ -674,6 +659,7 @@ in
           ]
           ++ lib.optional cfg.database.createLocally "postgresql.target";
           serviceConfig = defaultServiceConfig // {
+            User = cfg.user;
             ExecStart = "${cfg.package}/bin/celery --app paperless worker --loglevel INFO";
             Restart = "on-failure";
             # The `mbind` syscall is needed for running the classifier.
@@ -695,6 +681,7 @@ in
           ]
           ++ lib.optional cfg.database.createLocally "postgresql.target";
           serviceConfig = defaultServiceConfig // {
+            User = cfg.user;
             ExecStart = "${lib.getExe cfg.package} document_consumer";
             Restart = "on-failure";
             PrivateNetwork = cfg.database.createLocally; # defaultServiceConfig enables this by default, needs to be disabled for remote DBs
@@ -716,7 +703,8 @@ in
           ]
           ++ lib.optional cfg.database.createLocally "postgresql.target";
           serviceConfig = defaultServiceConfig // {
-            ExecStart = "${lib.getExe cfg.package.python.pkgs.granian} --interface asginl --ws paperless.asgi:application";
+            User = cfg.user;
+            ExecStart = "${lib.getExe pythonPkgs.granian} --interface asginl --ws paperless.asgi:application";
             Restart = "on-failure";
 
             LimitNOFILE = 65536;
@@ -738,18 +726,16 @@ in
           unitConfig.JoinsNamespaceOf = "paperless-task-queue.service";
         };
 
-        users = lib.optionalAttrs (cfg.user == defaultUsername) {
-          users.${cfg.user} = {
-            extraGroups = lib.optional enableRedis redisServer.group;
-            group = cfg.group;
+        users = lib.optionalAttrs (cfg.user == defaultUser) {
+          users.${defaultUser} = {
+            extraGroups = [ config.services.redis.servers.paperless.group ];
+            group = defaultUser;
             home = cfg.dataDir;
             uid = config.ids.uids.paperless;
           };
 
-          groups = lib.optionalAttrs (cfg.group == defaultUsername) {
-            ${cfg.group} = {
-              gid = config.ids.gids.paperless;
-            };
+          groups.${defaultUser} = {
+            gid = config.ids.gids.paperless;
           };
         };
 
@@ -768,7 +754,7 @@ in
 
       (lib.mkIf cfg.exporter.enable {
         systemd.tmpfiles.rules = [
-          "d '${cfg.exporter.directory}' - ${cfg.user} ${cfg.group} - -"
+          "d '${cfg.exporter.directory}' - ${cfg.user} ${config.users.users.${cfg.user}.group} - -"
         ];
 
         services.paperless.exporter.settings = lib.mapAttrs (
@@ -779,7 +765,6 @@ in
           startAt = lib.defaultTo [ ] cfg.exporter.onCalendar;
           serviceConfig = {
             User = cfg.user;
-            Group = cfg.group;
             WorkingDirectory = cfg.dataDir;
           };
           unitConfig =
@@ -800,7 +785,7 @@ in
               OnSuccess = services;
             };
           enableStrictShellChecks = true;
-          path = [ paperlessManageScript ];
+          path = [ manage ];
           script = ''
             paperless-manage document_exporter ${cfg.exporter.directory} ${
               lib.cli.toCommandLineShellGNU { } cfg.exporter.settings

nixos/tests/keepassxc.nix

@@ -43,7 +43,7 @@
   testScript =
     { nodes, ... }:
     let
-      aliceDo = cmd: ''machine.succeed("su - alice -c '${cmd}' >&2");'';
+      aliceDo = cmd: ''machine.succeed("su - alice -c '${cmd}' >&2 &");'';
     in
     ''
       with subtest("Ensure X starts"):
@@ -53,7 +53,6 @@
       with subtest("Can create database and entry with CLI"):
           ${aliceDo "keepassxc-cli db-create --set-key-file foo.keyfile foo.kdbx"}
           ${aliceDo "keepassxc-cli add --no-password -k foo.keyfile foo.kdbx bar"}
-          ${aliceDo "keepassxc-cli ls --no-password -k foo.keyfile foo.kdbx | grep bar"}
 
       with subtest("Ensure KeePassXC starts"):
           # start KeePassXC window

nixos/tests/librenms.nix

@@ -55,7 +55,7 @@ in
         ${pkgs.librenms}/artisan user:add $API_USER_NAME -r admin -p $API_USER_PASS
         API_USER_ID=$(${pkgs.mariadb}/bin/mysql -D librenms -N -B -e "SELECT user_id FROM users WHERE username = '$API_USER_NAME';")
 
-        ${pkgs.mariadb}/bin/mysql -D librenms -e "INSERT INTO personal_access_tokens (tokenable_type, tokenable_id, name, token, abilities) VALUES (CONCAT('App', CHAR(92), 'Models', CHAR(92), 'User'), $API_USER_ID, 'API User', SHA2('$API_TOKEN', 256), '[\"*\"]')"
+        ${pkgs.mariadb}/bin/mysql -D librenms -e "INSERT INTO api_tokens (user_id, token_hash, description) VALUES ($API_USER_ID, '$API_TOKEN', 'API User')"
       '';
     };
   };
@@ -96,6 +96,6 @@ in
     librenms.succeed("curl --fail -X POST -d '{\"hostname\":\"snmphost\",\"version\":\"v2c\",\"community\":\"public\"}' -H 'X-Auth-Token: ${api_token}' http://localhost/api/v0/devices")
 
     # wait until snmphost gets polled
-    librenms.wait_until_succeeds("curl -fsS -H 'X-Auth-Token: ${api_token}' http://localhost/api/v0/devices/snmphost | jq -e '.devices[0].last_polled != null'")
+    librenms.wait_until_succeeds("test $(curl -H 'X-Auth-Token: ${api_token}' http://localhost/api/v0/devices/snmphost | jq -Mr .devices[0].last_polled) != 'null'")
   '';
 }

nixos/tests/lomiri-gallery-app.nix

@@ -19,14 +19,6 @@ let
 
       let
         format = lib.lists.last (lib.strings.splitString "." file);
-        burgerMenuCategory = lib.lists.head (lib.strings.splitString "/" file);
-        burgerMenuYCoord =
-          {
-            "Pictures" = "180";
-            "Videos" = "220";
-          }
-          .${burgerMenuCategory}
-            or (throw "nixosTests.lomiri-gallery-app.format-${format}: don't know at what Y coordinate the '${burgerMenuCategory} category is");
       in
 
       {
@@ -107,8 +99,6 @@ let
         enableOCR = true;
 
         testScript = ''
-          import datetime
-
           machine.wait_for_x()
 
           machine.succeed("mkdir /root/${dirOf file}")
@@ -144,22 +134,22 @@ let
 
           with subtest("lomiri gallery finds files"):
               machine.succeed("lomiri-gallery-app >&2 &")
-              machine.wait_for_console_text("media files loaded")
-              machine.sleep(datetime.timedelta(seconds=10))
+              machine.wait_for_console_text("qq= AlbumsOverview") # logged when album page actually gets loaded
+              machine.sleep(10)
               machine.send_key("alt-f10")
-              machine.sleep(datetime.timedelta(seconds=5))
+              machine.sleep(5)
               machine.wait_for_text(r"(Albums|Events|Photos|${imageLabel})")
 
               machine.succeed("xdotool mousemove 30 40 click 1") # burger menu for categories
-              machine.sleep(datetime.timedelta(seconds=2))
-              machine.succeed("xdotool mousemove 30 ${burgerMenuYCoord} click 1") # category for file
-              machine.sleep(datetime.timedelta(seconds=2))
+              machine.sleep(2)
+              machine.succeed("xdotool mousemove 30 180 click 1") # photos
+              machine.sleep(2)
               machine.screenshot("lomiri-gallery_photos")
 
           machine.succeed("xdotool mousemove 80 140 click 1") # select first one
-          machine.sleep(datetime.timedelta(seconds=2))
+          machine.sleep(2)
           machine.succeed("xdotool mousemove 80 140 click 1") # enable top-bar
-          machine.sleep(datetime.timedelta(seconds=2))
+          machine.sleep(2)
 
         ''
         + (
@@ -171,10 +161,10 @@ let
                   machine.succeed("xdotool mousemove ${
                     if buttonIsOffset then "900" else "940"
                   } 50 click 1") # open media information
-                  machine.sleep(datetime.timedelta(seconds=2))
+                  machine.sleep(2)
                   machine.screenshot("lomiri-gallery_${format}_info")
                   machine.send_key("esc")
-                  machine.sleep(datetime.timedelta(seconds=2))
+                  machine.sleep(2)
                   machine.wait_for_text("${imageLabel}") # make sure media shows fine
             ''
         );
@@ -246,16 +236,14 @@ in
       enableOCR = true;
 
       testScript = ''
-        import datetime
-
         machine.wait_for_x()
 
         with subtest("lomiri gallery launches"):
             machine.succeed("lomiri-gallery-app >&2 &")
-            machine.wait_for_console_text("media files loaded")
-            machine.sleep(datetime.timedelta(seconds=10))
+            machine.wait_for_console_text("qq= AlbumsOverview") # logged when album page actually gets loaded
+            machine.sleep(10)
             machine.send_key("alt-f10")
-            machine.sleep(datetime.timedelta(seconds=5))
+            machine.sleep(5)
             machine.wait_for_text(r"(Albums|Events|Photos)")
             machine.screenshot("lomiri-gallery_open")
 
@@ -266,10 +254,10 @@ in
 
         with subtest("lomiri gallery localisation works"):
             machine.succeed("env LANG=de_DE.UTF-8 lomiri-gallery-app >&2 &")
-            machine.wait_for_console_text("media files loaded")
-            machine.sleep(datetime.timedelta(seconds=10))
+            machine.wait_for_console_text("qq= AlbumsOverview") # logged when album page actually gets loaded
+            machine.sleep(10)
             machine.send_key("alt-f10")
-            machine.sleep(datetime.timedelta(seconds=5))
+            machine.sleep(5)
             machine.wait_for_text(r"(Alben|Ereignisse|Fotos)")
             machine.screenshot("lomiri-gallery_localised")
       '';
@@ -284,17 +272,17 @@ in
     customTest = ''
       with subtest("lomiri gallery handles mp4"):
           machine.succeed("xdotool mousemove 935 40 click 1") # open media information
-          machine.sleep(datetime.timedelta(seconds=2))
+          machine.sleep(2)
           machine.screenshot("lomiri-gallery_mp4_info")
           machine.send_key("esc")
-          machine.sleep(datetime.timedelta(seconds=2))
+          machine.sleep(2)
 
           machine.wait_for_text("${imageLabel}") # make sure thumbnail processing worked
           machine.screenshot("lomiri-gallery_mp4_thumbnail")
 
           machine.succeed("xdotool mousemove 510 380 click 1") # dispatch to system's video handler
           machine.wait_until_succeeds("pgrep -u root -f mpv") # wait for video to start
-          machine.sleep(datetime.timedelta(seconds=10))
+          machine.sleep(10)
           machine.succeed("pgrep -u root -f mpv") # should still be playing
           machine.screenshot("lomiri-gallery_mp4_dispatch")
     '';

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -27,13 +27,13 @@
     "vendorHash": null
   },
   "aiven_aiven": {
-    "hash": "sha256-caVs5o3eji314tCNqRw9Fac7ljlAPDibsIkWJPt91hU=",
+    "hash": "sha256-wH0SiHB+IxOM3hajrkZzF0T7aBDd8IiY6fGSgOkUhMA=",
     "homepage": "https://registry.terraform.io/providers/aiven/aiven",
     "owner": "aiven",
     "repo": "terraform-provider-aiven",
-    "rev": "v4.65.1",
+    "rev": "v4.64.0",
     "spdx": "MIT",
-    "vendorHash": "sha256-rpsVkSX4GvCSNuT8cea1IPce+NIUGZqkQmB3ZxhKjrM="
+    "vendorHash": "sha256-htYhRdpwqZIUaWV8weyvgAGJlFTxbpVjPHXWYOAprag="
   },
   "akamai_akamai": {
     "hash": "sha256-6nKfNzNsqp5x6/C5hr1UNC2gz5eTV2DonNQ3olvGxIA=",
@@ -616,13 +616,13 @@
     "vendorHash": "sha256-ZkQt1RTq+6R2U7blmkr8PIRHtGFE6MllcLVlcfPlFB4="
   },
   "hashicorp_google-beta": {
-    "hash": "sha256-7YW5NiP8+Q86+o1R2XtkZhpJJpsH5gQnPHXE6qbibA0=",
+    "hash": "sha256-GcW7F/xNValvQXtUhBxOPjfRa6891INVXNRxoSnnCy0=",
     "homepage": "https://registry.terraform.io/providers/hashicorp/google-beta",
     "owner": "hashicorp",
     "repo": "terraform-provider-google-beta",
-    "rev": "v8.9.0",
+    "rev": "v8.7.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-IBx6MOR8WLV205wbAAyhWLzWDuqGQkMM4htCeWqh9zs="
+    "vendorHash": "sha256-KI1hUXlJVoKGRyDODIfHJCBmN08Hml5JK+BSYiWGeXQ="
   },
   "hashicorp_helm": {
     "hash": "sha256-O3QcQf+TBmSB/mY5wybk/8BUG5RTjLhJYU+9jOOUqBI=",
@@ -887,13 +887,13 @@
     "vendorHash": "sha256-BFhxDYfbHNY4omovikg01UDqt2oxCtg9Q85DPuHSUeE="
   },
   "launchdarkly_launchdarkly": {
-    "hash": "sha256-u8Qy8wnMv08/3ZKOiR7Lq3Nv54pjtPRBf2lbenuLXaA=",
+    "hash": "sha256-BUYjmfbWGzzIK3jJyt0VxuMpA+q7gIY+Mk3yFx4xeC4=",
     "homepage": "https://registry.terraform.io/providers/launchdarkly/launchdarkly",
     "owner": "launchdarkly",
     "repo": "terraform-provider-launchdarkly",
-    "rev": "v3.3.0",
+    "rev": "v3.1.7",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-m/Yd5rPIFgkY/E3rXWbjcdocMjyex+NWulM/WiXEbIs="
+    "vendorHash": "sha256-d8RQfuLRNGTUzA2Ygy3QEis5j5Ape5kmcnZSs77c84M="
   },
   "linode_linode": {
     "hash": "sha256-jOcGJq3X7TCuXk9GDgHZAj9SAbq/msJdjpEukOz7bFY=",
@@ -1463,11 +1463,11 @@
     "vendorHash": null
   },
   "ubiquiti-community_unifi": {
-    "hash": "sha256-j7xlpU194z8f/W7SxcdhDdywWEO9y4TAdeSeQKw0JkM=",
+    "hash": "sha256-GQFSi57+oebB9OiySbDD6gu8YDqKWCkIx31yORJIpVk=",
     "homepage": "https://registry.terraform.io/providers/ubiquiti-community/unifi",
     "owner": "ubiquiti-community",
     "repo": "terraform-provider-unifi",
-    "rev": "v0.60.0",
+    "rev": "v0.59.0",
     "spdx": "MPL-2.0",
     "vendorHash": "sha256-XH3Z47i7WTiZ+WrUadoRABcXD8ZkeXnJHINKkAHseE8="
   },

pkgs/by-name/ap/apl387/package.nix

@@ -9,13 +9,13 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "apl387";
-  version = "2026-10-30";
+  version = "2026-08-17";
 
   src = fetchFromGitHub {
     owner = "dyalog";
     repo = "APL387";
     tag = finalAttrs.version;
-    hash = "sha256-UdKSmbZoGAy8g9FfVGz8/n+2BY9tBSulcpkWRqLZ+eg=";
+    hash = "sha256-KeXZOX5ZSZjhrgN54w2yHpiOhTnk9NU3F8jh/AR1l44=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/at/atari800/package.nix

@@ -1,7 +1,7 @@
 {
   lib,
   stdenv,
-  SDL2,
+  SDL,
   autoreconfHook,
   fetchFromGitHub,
   libGL,
@@ -13,13 +13,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "atari800";
-  version = "7.2.1";
+  version = "5.2.0";
 
   src = fetchFromGitHub {
     owner = "atari800";
     repo = "atari800";
     rev = "ATARI800_${lib.replaceStrings [ "." ] [ "_" ] finalAttrs.version}";
-    hash = "sha256-cDiEFPE9JPonLdlBcKWZ1FGDMAQwuVihYtshcd8bcyM=";
+    hash = "sha256-D66YRRTqdoV9TqDFonJ9XNpfP52AicuYgdiW27RCIuQ=";
   };
 
   nativeBuildInputs = [
@@ -27,7 +27,7 @@ stdenv.mkDerivation (finalAttrs: {
   ];
 
   buildInputs = [
-    SDL2
+    SDL
     libGL
     libGLU
     libx11
@@ -41,13 +41,12 @@ stdenv.mkDerivation (finalAttrs: {
     (lib.withFeature true "opengl")
     (lib.withFeature true "readline")
     (lib.withFeature true "x")
-    (lib.withFeatureAs true "sound" "sdl2")
-    (lib.withFeatureAs true "video" "sdl2")
+    (lib.withFeatureAs true "sound" "sdl")
+    (lib.withFeatureAs true "video" "sdl")
   ];
 
   meta = {
     homepage = "https://atari800.github.io/";
-    changelog = "https://github.com/atari800/atari800/releases/tag/${finalAttrs.src.rev}";
     description = "Atari 8-bit emulator";
     longDescription = ''
       Atari800 is the emulator of Atari 8-bit computer systems and 5200 game

pkgs/by-name/aw/aws-lc/package.nix

@@ -99,6 +99,7 @@ stdenv.mkDerivation (finalAttrs: {
       ];
     mainProgram = "bssl";
     maintainers = with lib.maintainers; [
+      theoparis
       whispersofthedawn
     ];
     pkgConfigModules = [

pkgs/by-name/aw/aws-rotate-key/package.nix

@@ -33,7 +33,7 @@ buildGoModule (finalAttrs: {
     description = "Easily rotate your AWS key";
     homepage = "https://github.com/stefansundin/aws-rotate-key";
     license = lib.licenses.mit;
-    maintainers = [ ];
+    maintainers = [ lib.maintainers.mbode ];
     mainProgram = "aws-rotate-key";
   };
 })

pkgs/by-name/bl/blazesym-c/package.nix

@@ -9,16 +9,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "blazesym-c";
-  version = "0.1.11";
+  version = "0.1.10";
 
   src = fetchFromGitHub {
     owner = "libbpf";
     repo = "blazesym";
     tag = "capi-v${finalAttrs.version}";
-    hash = "sha256-WwL/IbR7y916yvFZGdyHlrexqoyr2wDTNalaKMCdnRs=";
+    hash = "sha256-0ceEzlimp6UfrkoEYhwH6RWCrvkCpHF13G9vmM1HbQM=";
   };
 
-  cargoHash = "sha256-uMb45eScPjJV3NXcqr6TMJQZI/IHYY9cXgprG2j4UJA=";
+  cargoHash = "sha256-uQ7buVP0I+RgWHYFZxQP0hwJFMoB7Fz5D7S2dL1d/CM=";
 
   cargoBuildFlags = [
     "--package"

pkgs/by-name/bo/boringssl/package.nix

@@ -58,6 +58,8 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "bssl";
     homepage = "https://boringssl.googlesource.com";
     maintainers = with lib.maintainers; [
+      thoughtpolice
+      theoparis
       niklaskorz
     ];
     license = with lib.licenses; [

pkgs/by-name/ch/chezmoi/package.nix

@@ -8,13 +8,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "chezmoi";
-  version = "2.73.3";
+  version = "2.73.2";
 
   src = fetchFromGitHub {
     owner = "twpayne";
     repo = "chezmoi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Y6jXngROGFU6cH4V5wmLAHFFNVIf++joHIqsKhXYC0g=";
+    hash = "sha256-YkDiUkezNOULeqi/Nk6K/05Es3kkFA/atSr2JfQ69p0=";
   };
 
   vendorHash = "sha256-ukLTgpSIRZQWZriZFCfqh6Z4+48e710BpJvgXfS3dOM=";

pkgs/by-name/ci/ciel/package.nix

@@ -16,16 +16,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ciel";
-  version = "3.11.5";
+  version = "3.11.4";
 
   src = fetchFromGitHub {
     owner = "AOSC-Dev";
     repo = "ciel-rs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-eN9ajkRIWvReT1yDyqzQpge9xDHI3nZ+CtRQd8L2+FI=";
+    hash = "sha256-NdCAshfqGmpGvZsbDb20URSZfzIhp1f+XtVPVVBtiJ4=";
   };
 
-  cargoHash = "sha256-O2VWIP4ro249vTUWi1nlftRUTPJ2Ze8M1kmGyWaFfAI=";
+  cargoHash = "sha256-c0HjQ3uc5HDh4AKgBKh8OO7fPNflcBPJxXMtqaNUmn0=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/cl/claude-agent-acp/package.nix

@@ -8,16 +8,16 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "claude-agent-acp";
-  version = "0.99.1";
+  version = "0.93.0";
 
   src = fetchFromGitHub {
     owner = "agentclientprotocol";
     repo = "claude-agent-acp";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Xj9QXZrqWe5njHlnoudfW0areQDfzk0VXx3psGukrxY=";
+    hash = "sha256-PWGJYiThOQGqsjm2Sp22wBmIdKcZP16/2fSzifBlb0U=";
   };
 
-  npmDepsHash = "sha256-g5M1nFzdDdHhv0cTN6YtCMGB05WagnwTv52hD9f6TH4=";
+  npmDepsHash = "sha256-VwSBDFgejcGT0NmnmPwnvA2HgYxsp4suZ7a5FY8niPw=";
 
   nativeBuildInputs = [ makeWrapper ];
 

pkgs/by-name/cl/click/package.nix

@@ -34,7 +34,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     description = "Command Line Interactive Controller for Kubernetes";
     homepage = "https://github.com/databricks/click";
     license = lib.licenses.asl20;
-    maintainers = [ ];
+    maintainers = [ lib.maintainers.mbode ];
     mainProgram = "click";
   };
 })

pkgs/by-name/cl/clickhouse/lts.nix

@@ -1,6 +1,6 @@
 import ./generic.nix {
-  version = "26.8.34.13-lts";
-  rev = "e0cfed8d5e66d0e226afa2258a5956e3e22abff9";
-  hash = "sha256-hmO2a6AIc0wfmIu0g/f3O6GnR6W8KcEfco6tZtug5b0=";
+  version = "26.8.30.8-lts";
+  rev = "da45179b6c6761981c969859d168dd93b2bfd550";
+  hash = "sha256-lCbe14CA5426EszHVFO7O7LAnXYwD9YOwcWYiLUuUu4=";
   lts = true;
 }

pkgs/by-name/co/coroot/package.nix

@@ -11,13 +11,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "coroot";
-  version = "1.29.0";
+  version = "1.27.4";
 
   src = fetchFromGitHub {
     owner = "coroot";
     repo = "coroot";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-1UT1s/Kt8fnuLc99Wy/xoubfS5zHyjnOTwJOD4yA2WM=";
+    hash = "sha256-HBni2LGrEDIhavbAvCtZotDi54+YgpFfbOuW8UR8eyA=";
   };
 
   vendorHash = "sha256-QB5jz+ks9naRM7KvlxXUkMcTTtmy0SQXkfxGx/vh3W4=";

pkgs/by-name/cr/cryptomator/downgrade-fuse.patch

@@ -0,0 +1,13 @@
+diff --git a/pom.xml b/pom.xml
+index fdaf9b328..2dbc69fb8 100644
+--- a/pom.xml
++++ b/pom.xml
+@@ -39,7 +39,7 @@
+ 		<cryptomator.integrations.win.version>1.6.0</cryptomator.integrations.win.version>
+ 		<cryptomator.integrations.mac.version>1.5.0</cryptomator.integrations.mac.version>
+ 		<cryptomator.integrations.linux.version>1.7.0</cryptomator.integrations.linux.version>
+-		<cryptomator.fuse.version>6.0.1</cryptomator.fuse.version>
++		<cryptomator.fuse.version>5.1.0</cryptomator.fuse.version>
+ 		<cryptomator.webdav.version>3.0.1</cryptomator.webdav.version>
+ 		<cryptomator.webdav-servlet.version>1.2.12</cryptomator.webdav-servlet.version>
+ 

pkgs/by-name/cr/cryptomator/package.nix

@@ -3,7 +3,7 @@
   fetchFromGitHub,
   fuse3,
   glib,
-  zulu27,
+  zulu25,
   lib,
   libayatana-appindicator,
   makeShellWrapper,
@@ -14,22 +14,27 @@
 }:
 
 let
-  jdk = zulu27.override { enableJavaFX = true; };
+  jdk = zulu25.override { enableJavaFX = true; };
 in
 maven.buildMavenPackage rec {
   pname = "cryptomator";
-  version = "1.19.6";
+  version = "1.19.2";
 
   src = fetchFromGitHub {
     owner = "cryptomator";
     repo = "cryptomator";
     tag = version;
-    hash = "sha256-g9DWxQYyfZ9Tk44jIrbFh0ee4/CXUEFVC+1AZr66QSo=";
+    hash = "sha256-9JWZaTsL2sfnGQAZI56T2iQnTNhERsFNFFCeLMB7WC0=";
   };
 
+  patches = [
+    # fix for "java.lang.IllegalStateException: No fuse library found at expected path"
+    ./downgrade-fuse.patch
+  ];
+
   mvnJdk = jdk;
   mvnParameters = "-Dmaven.test.skip=true -Plinux";
-  mvnHash = "sha256-Q+ZAQnIMcp5RAIhQqJGnFLluoe5B3RZbT4YLIuzqOe8=";
+  mvnHash = "sha256-CXFVs+QWi8ivZaEhJLGywzomcbsV+TviVxVWvvLR5Z4=";
   mvnFetchExtraArgs.env = {
     inherit (env) SOURCE_DATE_EPOCH;
   };

pkgs/by-name/cy/cyclonedx-python/package.nix

@@ -6,14 +6,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "cyclonedx-python";
-  version = "7.6.0";
+  version = "7.5.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "CycloneDX";
     repo = "cyclonedx-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-pncpP2TYRBuP41YieoVhP30dyNcotQPNJrTuFKNVP/0=";
+    hash = "sha256-OF3ALdzTIjha+TmU92BRpKclJ4Iaeg1A3lAUD4Ss8fg=";
   };
 
   build-system = with python3Packages; [ poetry-core ];

pkgs/by-name/da/dashy-ui/package.nix

@@ -17,16 +17,16 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "dashy-ui";
-  version = "4.9.8";
+  version = "4.8.3";
   src = fetchFromGitHub {
     owner = "lissy93";
     repo = "dashy";
     tag = finalAttrs.version;
-    hash = "sha256-Gvb53iEplqiixa1Cf/F1d12YzUa7PTWzNRxbR84ulaA=";
+    hash = "sha256-jHO//Ptk2TlaVKSy7D9ibhMpIZHaTcRTGB+aTtH3Pvo=";
   };
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = finalAttrs.src + "/yarn.lock";
-    hash = "sha256-2iW6+OsE6lN/d9fNbaCqxvfpSpn7V8BWmCr9x/GVrpE=";
+    hash = "sha256-yte5IoUhxNX9AamqS1AKCrSGA3Y3Jy0hqDppsuXHpDA=";
   };
 
   passthru = {

pkgs/by-name/di/discord/linux.nix

@@ -225,11 +225,6 @@ stdenv.mkDerivation (finalAttrs: {
 
     mkdir -p $out/opt/${binaryName}/modules/discord_krisp/KMS/logs
 
-    # The web client only keeps OpenH264 2.7.0; names must stay the same length
-    grep -qF libopenh264-2.5.1-linux64.7.so $out/opt/${binaryName}/modules/discord_desktop_core/core.asar
-    sed -i 's/libopenh264-2\.5\.1-linux64\.7\.so/libopenh264-2.7.0-linux64.8.so/g' \
-      $out/opt/${binaryName}/modules/discord_desktop_core/core.asar
-
     # Chromium 148 multiplies Plasma's GTK DPI scale by the native Wayland surface
     # scale, which makes the UI too large. See #551645
     wrapProgramShell $out/opt/${binaryName}/${binaryName} \

pkgs/by-name/di/diskus/package.nix

@@ -24,7 +24,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
       asl20 # or
       mit
     ];
-    maintainers = [ ];
+    maintainers = [ lib.maintainers.fuerbringer ];
     platforms = lib.platforms.unix;
     longDescription = ''
       diskus is a very simple program that computes the total size of the

pkgs/by-name/do/doitlive/package.nix

@@ -30,7 +30,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     homepage = "https://github.com/sloria/doitlive";
     changelog = "https://github.com/sloria/doitlive/blob/${finalAttrs.version}/CHANGELOG.rst";
     license = lib.licenses.mit;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ mbode ];
     mainProgram = "doitlive";
   };
 })

pkgs/by-name/dt/dtui/package.nix

@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "dtui";
-  version = "3.1.1";
+  version = "3.0.1";
 
   src = fetchFromGitHub {
     owner = "Troels51";
     repo = "dtui";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-vt9PVJtzRFBBlZ0tggs4Q0pBiojr5V1wABS7sfAAw90=";
+    hash = "sha256-bAg9FFoKXb6YClNQRhR7Z/MhnPkJ8r7/xM6SghaH2hU=";
   };
 
-  cargoHash = "sha256-QKnupGJWYq7Q77sP7HVMBmQihaSouNJFGOkDXhH5rL4=";
+  cargoHash = "sha256-qiFxN0bG3pUWOKKM0gHMmxjZZvqZXYYDeUuRI/V9YbM=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/eb/eb-garamond/package.nix

@@ -51,6 +51,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     description = "Digitization of the Garamond shown on the Egenolff-Berner specimen";
     maintainers = with lib.maintainers; [
       bengsparks
+      relrod
       rycee
     ];
     license = lib.licenses.ofl;

pkgs/by-name/ex/exercism/package.nix

@@ -38,7 +38,10 @@ buildGoModule (finalAttrs: {
     inherit (finalAttrs.src.meta) homepage;
     description = "Go based command line tool for exercism.io";
     license = lib.licenses.mit;
-    maintainers = [ lib.maintainers.nobbz ];
+    maintainers = [
+      lib.maintainers.rbasso
+      lib.maintainers.nobbz
+    ];
     mainProgram = "exercism";
   };
 })

pkgs/by-name/fc/fcitx5-pinyin-moegirl/package.nix

@@ -6,11 +6,11 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "fcitx5-pinyin-moegirl";
-  version = "20261024";
+  version = "20260911";
 
   src = fetchurl {
     url = "https://github.com/outloudvi/mw2fcitx/releases/download/${finalAttrs.version}/moegirl.dict";
-    hash = "sha256-eqSevanmzjfZNLtH0zOX7jWNtaH4wNFBwTrXZSZpmrs=";
+    hash = "sha256-FZGi1+t6RLQ7B068IFLsSkkvyyfrYy8hXBmP7MuYFtA=";
   };
 
   dontUnpack = true;

pkgs/by-name/fl/fldigi/package.nix

@@ -60,7 +60,9 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Digital modem program";
     homepage = "https://sourceforge.net/projects/fldigi/";
     license = lib.licenses.gpl3Plus;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [
+      relrod
+    ];
     platforms = lib.platforms.unix;
   };
 })

pkgs/by-name/fl/flink/package.nix

@@ -41,6 +41,9 @@ stdenv.mkDerivation rec {
     license = lib.licenses.asl20;
     sourceProvenance = with lib.sourceTypes; [ binaryBytecode ];
     platforms = lib.platforms.all;
-    maintainers = with lib.maintainers; [ autophagy ];
+    maintainers = with lib.maintainers; [
+      mbode
+      autophagy
+    ];
   };
 }

pkgs/by-name/fo/forgejo-runner/package.nix

@@ -29,17 +29,17 @@ let
 in
 buildGoModule (finalAttrs: {
   pname = "forgejo-runner";
-  version = "13.2.1";
+  version = "13.2.0";
 
   src = fetchFromGitea {
     domain = "code.forgejo.org";
     owner = "forgejo";
     repo = "runner";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-/Cu4Zc00OdvwojfTah6NIH/S0sowGyyh0RXcBmfvi9M=";
+    hash = "sha256-2P3lWzC3yxcyiBltFDC1dwwv8Xx2XxEGSa16MdjnV38=";
   };
 
-  vendorHash = "sha256-6ao0x5rPZmyrvvGVLTSTjtrV3UbTqeUeV0OpHDqriHc=";
+  vendorHash = "sha256-iyXO3LYTr4v1OoD9PS5ksEDIkCIq8hgwgtkLR0bzUZg=";
 
   nativeBuildInputs = [ makeWrapper ];
 

pkgs/by-name/fr/fresh-editor/package.nix

@@ -13,16 +13,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "fresh";
-  version = "0.5.4";
+  version = "0.5.3";
 
   src = fetchFromGitHub {
     owner = "sinelaw";
     repo = "fresh";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-za4G56fIJac8bJ22NsWYnVEChmE/JXmHLG0w8O1jeXg=";
+    hash = "sha256-BherBpkukiGikcvCo/ursft2T7WEljXHFjM9xTrm8pA=";
   };
 
-  cargoHash = "sha256-J2FA74Ry2oRrd/GA5yA0a7k/DzIQoRkg9kMWQEE9ZTo=";
+  cargoHash = "sha256-81wwGMtF2Phj+t4xUKBiBfN9DdSyL5gQVg8iC2RY1Gc=";
 
   __structuredAttrs = true;
 
@@ -83,7 +83,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
       chillcicada
       dwt
       randoneering
-      sinelaw
     ];
     mainProgram = "fresh";
     platforms = lib.platforms.linux ++ lib.platforms.darwin;

pkgs/by-name/gh/gh-eco/package.nix

@@ -4,7 +4,7 @@
   buildGoModule,
 }:
 let
-  version = "0.1.8";
+  version = "0.1.6";
 in
 buildGoModule {
   pname = "gh-eco";
@@ -14,10 +14,10 @@ buildGoModule {
     owner = "jrnxf";
     repo = "gh-eco";
     tag = "v${version}";
-    hash = "sha256-DFidh2IWT5pvrsxp1sm59KB+Xunm6KhdYoMGJsM0gQw=";
+    hash = "sha256-PkZ/5mYAbPAELxW4l4BIck4qedOJ7htWqrH0KEKrF9o=";
   };
 
-  vendorHash = "sha256-WuAV6g/UVaCexRzWxNuJwFntQA0Vexp8D/Z+DcNLbZE=";
+  vendorHash = "sha256-LrD6mfzilN+5nHBY/j2Jn+poc8ZXpr5rAs2oOkhDZNs=";
 
   ldflags = [
     "-s"

pkgs/by-name/go/gomplate/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "gomplate";
-  version = "5.3.1";
+  version = "5.3.0";
 
   src = fetchFromGitHub {
     owner = "hairyhenderson";
     repo = "gomplate";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-A42ibBugkSFaaihFjio5tXFDKhNNRlC15+Ze+JHpamk=";
+    hash = "sha256-rc+r+aBvFThwn+ltNLf1pXQvo1d8bGcWRDSMYAkdvw8=";
   };
 
-  vendorHash = "sha256-9PfAmh2+gGBGThY+KuECEJv7FAPVZ4GwuS14mz5s0es=";
+  vendorHash = "sha256-eppN5+hakevqvY47JR4OEeGJzf5FTEoC813ixJV+KEg=";
 
   ldflags = [
     "-s"

pkgs/by-name/gp/gpauth/package.nix

@@ -1,7 +1,7 @@
 {
   rustPlatform,
   lib,
-  gpclient,
+  fetchFromGitHub,
   glib-networking,
   openssl,
   pkg-config,
@@ -10,21 +10,25 @@
   wrapGAppsHook3,
   stdenv,
   nixosTests,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "gpauth";
+  version = "2.6.5";
 
-  # Anchor automatic updates on gpclient so the bot builds both packages.
-  # nixpkgs-update: no auto update
-  inherit (gpclient)
-    cargoHash
-    src
-    version
-    ;
+  src = fetchFromGitHub {
+    owner = "yuezk";
+    repo = "GlobalProtect-openconnect";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-WCCSd20qkDtJ88ru+ufFZrNQZSKkCzYo5fZpbB7Sn7o=";
+    fetchSubmodules = true;
+  };
 
   buildAndTestSubdir = "apps/gpauth";
 
+  cargoHash = "sha256-6+x5SRQHIchtkdYZAZl+b28hMCaiQHrp9i3tMsN3DhE=";
+
   nativeBuildInputs = [
     perl
     pkg-config
@@ -47,6 +51,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   ];
 
   passthru = {
+    updateScript = nix-update-script { };
     tests.runtime-tls = nixosTests.gpauth-tls;
   };
 

pkgs/by-name/gp/gpclient/diagnostics-runtime.patch

@@ -1,43 +0,0 @@
-Use Nix's shell and provide the diagnostic collector's runtime tools.
-Prefer packaged tools while preserving the caller's PATH for host probes.
-
-diff --git a/apps/gpclient/src/diagnostics.rs b/apps/gpclient/src/diagnostics.rs
---- a/apps/gpclient/src/diagnostics.rs
-+++ b/apps/gpclient/src/diagnostics.rs
-@@ -164,7 +164,7 @@
- 
- impl DiagnosticsArgs {
-   pub(crate) async fn run(&self, version: &str) -> anyhow::Result<()> {
--    let mut child = Command::new("/bin/sh")
-+    let mut child = Command::new("@runtimeShell@")
-       .args(["-s", "--", "--client-version", version, "--client-path"])
-       .arg(std::env::current_exe().context("Cannot locate gpclient")?)
-       .arg("--auth-path")
-diff --git a/scripts/collect-diagnostics.sh b/scripts/collect-diagnostics.sh
---- a/scripts/collect-diagnostics.sh
-+++ b/scripts/collect-diagnostics.sh
-@@ -4,6 +4,7 @@
- umask 077
- LC_ALL=C
- export LC_ALL
-+export PATH="@runtimePath@:$PATH"
- GP_DIAGNOSTICS_HOME=$(printf '%s' "${HOME:-}" | tr '\000-\037\177' ' ')
- export GP_DIAGNOSTICS_HOME
- client_version= client_path= auth_path= gui_path= output=
-diff --git a/apps/gpclient/tests/diagnostics.rs b/apps/gpclient/tests/diagnostics.rs
---- a/apps/gpclient/tests/diagnostics.rs
-+++ b/apps/gpclient/tests/diagnostics.rs
-@@ -51,7 +51,12 @@
-   assert!(!String::from_utf8_lossy(&output.stderr).contains("unexpected-recursion"));
-   let report: serde_json::Value = serde_json::from_str(&text).unwrap();
-   assert_eq!(report["schema_version"], 1);
--  assert_eq!(report["fields"]["os"]["value"], "Linux");
-+  let os = if cfg!(target_os = "macos") {
-+    "Darwin"
-+  } else {
-+    "Linux"
-+  };
-+  assert_eq!(report["fields"]["os"]["value"], os);
-   assert_eq!(report["fields"]["gpclient_path"]["status"], "ok");
-   for field in ["gpauth_path", "gpauth_version", "gpgui_path", "gpgui_version"] {
-     assert_eq!(report["fields"][field]["status"], "unavailable");

pkgs/by-name/gp/gpclient/package.nix

@@ -2,13 +2,11 @@
   lib,
   rustPlatform,
   stdenv,
-  fetchFromGitHub,
   atk,
   autoconf,
   automake,
   cairo,
   coreutils,
-  darwin,
   gawk,
   glib,
   glib-networking,
@@ -25,61 +23,32 @@
   makeBinaryWrapper,
   net-tools,
   nettle,
-  nix-update-script,
   openresolv,
   openssl,
   p11-kit,
   pango,
-  pciutils,
   perl,
   pkg-config,
-  replaceVars,
-  runtimeShell,
   systemd,
   unixtools,
   zlib,
   withSystemd ? lib.meta.availableOn stdenv.hostPlatform systemd,
 }:
 
-let
-  runtimePath = lib.makeBinPath (
-    [
-      coreutils
-      gawk
-      unixtools.ps
-    ]
-    ++ lib.optionals stdenv.hostPlatform.isLinux [
-      iproute2
-      pciutils # lspci
-    ]
-    ++ lib.optionals stdenv.hostPlatform.isDarwin [
-      darwin.DarwinTools # sw_vers
-    ]
-    ++ lib.optionals withSystemd [
-      systemd # resolvectl, systemctl, systemd-detect-virt
-    ]
-  );
-in
-rustPlatform.buildRustPackage (finalAttrs: {
+rustPlatform.buildRustPackage {
   pname = "gpclient";
-  version = "3.0.5";
 
-  src = fetchFromGitHub {
-    owner = "yuezk";
-    repo = "GlobalProtect-openconnect";
-    tag = "v${finalAttrs.version}";
-    hash = "sha256-QQPi7ex/VwVhyBrgRaJugJog7x3WbatDgD7gdNkmxr0=";
-    fetchSubmodules = true;
-  };
-
-  cargoHash = "sha256-bMLbvofHnGOcydcLJVZJt54sAXLPayNu8hl2zETx8uI=";
-
-  passthru.updateScript = nix-update-script {
-    extraArgs = [ "--use-github-releases" ];
-  };
+  # Keep automatic updates anchored on gpauth so the bot updates both
+  # package outputs in one PR.
+  # nixpkgs-update: no auto update
+  inherit (gpauth)
+    cargoHash
+    src
+    version
+    ;
 
   meta = gpauth.meta // {
-    # Anchor meta.position here so nixpkgs-update targets gpclient.
+    # Re-anchor meta.position here so nixpkgs-update sees the opt-out above.
     inherit (gpauth.meta) description;
   };
 
@@ -94,9 +63,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
     autoconf
     automake
     libtool
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isDarwin [
-    darwin.sigtool
   ];
   buildInputs = [
     glib
@@ -124,17 +90,24 @@ rustPlatform.buildRustPackage (finalAttrs: {
     # Fail in sandbox because netdev tries to read SystemConfiguration
     "--skip=connect::args::tests::deprecated_profile_override_flags_do_not_affect_os_profile"
     "--skip=connect::args::tests::stdin_host_id_sets_profile_runtime_identity_seed"
-    "--skip=connect::flow_tests::"
+    "--skip=hip::tests::host_info_os_vendor_is_linux_for_linux_profile"
+    "--skip=hip::tests::host_info_os_vendor_is_apple_for_mac_profile"
+    "--skip=hip::tests::host_info_os_vendor_is_microsoft_for_windows_profile"
+    "--skip=hip::tests::host_info_host_id_comes_from_os_profile"
+    "--skip=hip::tests::host_info_host_id_independent_of_runtime_for_each_os"
+    "--skip=hip::tests::hip_os_version_argument_is_ignored"
+    "--skip=hip::tests::host_id_argument_sets_profile_runtime_identity"
+    "--skip=hip::tests::host_info_uses_host_id_argument_for_native_profile"
     "--skip=session::tests::builds_session_context_from_os_profile"
   ];
 
-  patches = [
-    (replaceVars ./diagnostics-runtime.patch {
-      inherit runtimeShell runtimePath;
-    })
-  ];
-
   postPatch = ''
+    substituteInPlace crates/openconnect/src/vpn_utils.rs \
+      --replace-fail /usr/local/libexec/gpclient/vpnc-script $out/libexec/gpclient/vpnc-script \
+      --replace-fail /usr/libexec/gpclient/vpnc-script $out/libexec/gpclient/vpnc-script \
+      --replace-fail /usr/local/libexec/gpclient/hipreport.sh $out/libexec/gpclient/hipreport.sh \
+      --replace-fail /usr/libexec/gpclient/hipreport.sh $out/libexec/gpclient/hipreport.sh
+
     substituteInPlace crates/common/src/constants.rs \
       --replace-fail /usr/bin/gpauth ${gpauth}/bin/gpauth \
       --replace-fail /opt/homebrew/bin/gpauth ${gpauth}/bin/gpauth \
@@ -146,8 +119,12 @@ rustPlatform.buildRustPackage (finalAttrs: {
   '';
 
   postInstall = ''
-    # Install the supporting files, including the relocatable Darwin OpenConnect library.
-    make install-gpclient PREFIX="$out" CARGO_RELEASE_DIR="$releaseDir"
+    cp -r packaging/files/usr/libexec $out/libexec
+
+    substituteInPlace $out/libexec/gpclient/hipreport.sh \
+      --replace-fail /usr/bin/gpclient $out/bin/gpclient \
+      --replace-fail /opt/homebrew/bin/gpclient $out/bin/gpclient \
+      --replace-fail /usr/local/bin/gpclient $out/bin/gpclient
   ''
   + lib.optionalString stdenv.hostPlatform.isLinux ''
     substituteInPlace $out/libexec/gpclient/vpnc-script \
@@ -200,10 +177,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   '';
 
   postFixup = ''
-    # Collectors use GP_COMMAND_PATH instead of PATH.
     wrapProgram "$out/bin/gpclient" \
-      --prefix PATH : "${runtimePath}" \
-      --prefix GP_COMMAND_PATH : "${runtimePath}" \
       --prefix GIO_EXTRA_MODULES : ${glib-networking}/lib/gio/modules
   '';
-})
+}

pkgs/by-name/ha/hail/package.nix

@@ -5,12 +5,7 @@
   pkg-config,
   fontconfig,
   freetype,
-  libGL,
-  libx11,
-  libxcb,
-  libxi,
   libxkbcommon,
-  vulkan-loader,
   wayland,
   SDL2,
   SDL2_image,
@@ -20,23 +15,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "hail";
-  version = "0.5.0";
+  version = "0.4.0";
 
   src = fetchFromCodeberg {
     owner = "periwinkle";
     repo = "hail";
     tag = finalAttrs.version;
-    hash = "sha256-yfPw98Bj108BNhR7ObrlAKsh2v+mViojuEuDLlyBDUE=";
+    hash = "sha256-pPhbeZKNH5iKv4y34zKRmDIwLhmogaHIJJ00sZvHzHs=";
   };
 
-  cargoHash = "sha256-4nHOyQ2hEhwf4iSDuHjRawYDfv3b0a508IFcq6JUN8M=";
-
-  # Configurator and split editor, which hail starts from its keybinds
-  cargoBuildFlags = [
-    "--package=hail"
-    "--package=hail_config"
-    "--package=hail_editor"
-  ];
+  cargoHash = "sha256-TlxNHIpweWqRtoCblwUBS3RJM7vItORV8uYr4T3U37k=";
 
   nativeBuildInputs = [ pkg-config ];
 
@@ -50,21 +38,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
     SDL2_gfx
   ];
 
-  # Windowing and graphics libraries the configurator and split editor load at runtime
-  postFixup = ''
-    patchelf --add-rpath ${
-      lib.makeLibraryPath [
-        libGL
-        libx11
-        libxcb
-        libxi
-        libxkbcommon
-        vulkan-loader
-        wayland
-      ]
-    } $out/bin/hail_config $out/bin/hail_editor
-  '';
-
   passthru.updateScript = nix-update-script { };
 
   meta = {

pkgs/by-name/ha/hamlib_3/package.nix

@@ -78,7 +78,7 @@ stdenv.mkDerivation (finalAttrs: {
       lgpl2Plus
     ];
     homepage = "https://hamlib.sourceforge.net";
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ relrod ];
     platforms = with lib.platforms; unix;
   };
 })

pkgs/by-name/ha/hamlib_4/package.nix

@@ -82,7 +82,10 @@ stdenv.mkDerivation (finalAttrs: {
       lgpl2Plus
     ];
     homepage = "https://hamlib.sourceforge.net";
-    maintainers = with lib.maintainers; [ fstracke ];
+    maintainers = with lib.maintainers; [
+      relrod
+      fstracke
+    ];
     platforms = with lib.platforms; unix;
   };
 })

pkgs/by-name/ha/haruna/package.nix

@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "haruna";
-  version = "1.9.0";
+  version = "1.8.1";
 
   src = fetchFromGitLab {
     owner = "multimedia";
     repo = "haruna";
     rev = "v${finalAttrs.finalPackage.version}";
-    hash = "sha256-Nnrb9rEh+lAlfws8rNw0MOU6v3STDAG4Nv59WTyz4ZE=";
+    hash = "sha256-JIpaP9Tfw1+RhTqHmNoP7tsSHfELxw7bJBk8oLq6iYQ=";
     domain = "invent.kde.org";
   };
 

pkgs/by-name/ht/htop/package.nix

@@ -93,6 +93,7 @@ stdenv.mkDerivation (finalAttrs: {
     platforms = lib.platforms.all;
     maintainers = with lib.maintainers; [
       rob
+      relrod
       SuperSandro2000
       thiagokokada
     ];

pkgs/by-name/ht/httptoolkit/package.nix

@@ -10,12 +10,12 @@
   makeWrapper,
   xcbuild,
 
-  electron_43,
+  electron_42,
   httptoolkit-server,
 }:
 
 let
-  electron = electron_43;
+  electron = electron_42;
 in
 buildNpmPackage (finalAttrs: {
   pname = "httptoolkit";

pkgs/by-name/hy/hyperledger-fabric/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "hyperledger-fabric";
-  version = "3.1.5";
+  version = "2.5.13";
 
   src = fetchFromGitHub {
     owner = "hyperledger";
     repo = "fabric";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-UKkGt+FzEgTitCHeaRRigc33oe9qe9zoQNt9QZQEA88=";
+    hash = "sha256-HLDafeDe7eXuVZ8JqGYIr5Y5YicsR3PaDX/UeSqg8Vw=";
   };
 
   vendorHash = null;
@@ -53,6 +53,6 @@ buildGoModule (finalAttrs: {
     '';
     homepage = "https://wiki.hyperledger.org/display/fabric";
     license = lib.licenses.asl20;
-    maintainers = [ lib.maintainers.johnrtitor ];
+    maintainers = [ ];
   };
 })

pkgs/by-name/hy/hyprlax/package.nix

@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "hyprlax";
-  version = "2.2.8";
+  version = "2.2.7";
 
   src = fetchFromGitHub {
     owner = "sandwichfarm";
     repo = "hyprlax";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-FsWi+0rvGY/FASPD1MIEQXJbHGma0LoqKyWZsIvafbM=";
+    hash = "sha256-CkhHGPfYqGTPSFFzhOoIQCGi31wK7u+MYpWqeq55RJQ=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/il/iloader/package.nix

@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  nix-update-script,
 
   rustPlatform,
   nodejs,
@@ -113,13 +112,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
     makeWrapper $out/Applications/iloader.app/Contents/MacOS/iloader $out/bin/iloader
   '';
 
-  passthru.updateScript = nix-update-script {
-    extraArgs = [
-      "--subpackage"
-      "nodeModules"
-    ];
-  };
-
   meta = {
     changelog = "https://github.com/nab138/iloader/releases/tag/v${finalAttrs.version}";
     description = "User friendly sideloader";

pkgs/by-name/ja/jactionlint/package.nix

@@ -11,17 +11,17 @@
 
 buildGoModule (finalAttrs: {
   pname = "jactionlint";
-  version = "2.4.0";
+  version = "2.3.0";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "jdx";
     repo = "jactionlint";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-biLyemR356UmjpE8ckN922WgF7WxByrfVs79Y8KQTTw=";
+    hash = "sha256-/gCh+9NmRDsoqrcLl287qxmpiLnb2hF3vb2KTNP+BXM=";
   };
 
-  vendorHash = "sha256-jf7hKPnaSl4iTYT0mtRRAEmgLKAA/lj0vSVoO9+iOvw=";
+  vendorHash = "sha256-SnP9Siop3zgGrVMuHU2IOqDkPKnfyJZVxUB/iBV8hIA=";
 
   ldflags = [
     "-s"

pkgs/by-name/ke/keepassxc/darwin-remove-macdeployqt.patch

@@ -1,23 +1,27 @@
 diff --git a/CMakeLists.txt b/CMakeLists.txt
-index 24213ced0d..691b2c24ca 100644
+index 74b1a7ff..0a713a32 100644
 --- a/CMakeLists.txt
 +++ b/CMakeLists.txt
-@@ -395,6 +395,7 @@
+@@ -307,6 +307,7 @@ if(MINGW)
+     set(PLUGIN_INSTALL_DIR ".")
      set(DATA_INSTALL_DIR "share")
  elseif(APPLE AND WITH_APP_BUNDLE)
-     set(PROGNAME KeePassXC)
 +    set(CMAKE_INSTALL_PREFIX "${CMAKE_INSTALL_PREFIX}/Applications")
      set(BUNDLE_INSTALL_DIR "${PROGNAME}.app/Contents")
      set(CMAKE_INSTALL_MANDIR "${BUNDLE_INSTALL_DIR}/Resources/man")
      set(CLI_INSTALL_DIR "${BUNDLE_INSTALL_DIR}/MacOS")
-@@ -473,7 +474,6 @@
- endif()
+@@ -470,11 +470,6 @@ set(CMAKE_AUTORCC ON)
  
  if(APPLE)
--    set(_deployqt_exe_name macdeployqt)
      set(CMAKE_MACOSX_RPATH TRUE)
-     list(APPEND CMAKE_INSTALL_RPATH "${VCPKG_INSTALLED_DIR}/${VCPKG_TARGET_TRIPLET}/lib")
+-    find_program(MACDEPLOYQT_EXE macdeployqt HINTS ${Qt5_PREFIX}/bin ${Qt5_PREFIX}/tools/qt5/bin ENV PATH)
+-    if(NOT MACDEPLOYQT_EXE)
+-        message(FATAL_ERROR "macdeployqt is required to build on macOS")
+-    endif()
+-    message(STATUS "Using macdeployqt: ${MACDEPLOYQT_EXE}")
+     set(MACDEPLOYQT_EXTRA_BINARIES "")
  elseif(WIN32)
+     find_program(WINDEPLOYQT_EXE windeployqt HINTS ${Qt5_PREFIX}/bin ${Qt5_PREFIX}/tools/qt5/bin ENV PATH)
 diff --git a/src/post_install/CMakeLists.txt b/src/post_install/CMakeLists.txt
 index 359c891f..a6a061a3 100644
 --- a/src/post_install/CMakeLists.txt

pkgs/by-name/ke/keepassxc/package.nix

@@ -2,16 +2,18 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch2,
   cmake,
-  qt6,
+  libsForQt5,
 
   apple-sdk_15,
   asciidoctor,
   botan3,
+  curl,
   darwinMinVersionHook,
-  keyutils,
   libxi,
   libxtst,
+  libargon2,
   libusb1,
   minizip,
   nix-update-script,
@@ -22,40 +24,53 @@
   wrapGAppsHook3,
   zlib,
 
-  withKeePassMinimal ? false,
-  withKeePassBrowser ? !withKeePassMinimal,
-  withKeePassDocs ? true,
-  withKeePassFDOSecrets ? !withKeePassMinimal && stdenv.hostPlatform.isLinux,
+  withKeePassBrowser ? true,
+  withKeePassBrowserPasskeys ? true,
+  withKeePassFDOSecrets ? stdenv.hostPlatform.isLinux,
+  withKeePassKeeShare ? true,
   withKeePassNetworking ? true,
-  withKeePassSSHAgent ? !withKeePassMinimal,
+  withKeePassSSHAgent ? true,
   withKeePassX11 ? true,
+  withKeePassYubiKey ? true,
 
   nixosTests,
 }:
 
-assert
-  !withKeePassMinimal || (!withKeePassBrowser && !withKeePassSSHAgent && !withKeePassFDOSecrets);
-
 stdenv.mkDerivation (finalAttrs: {
   pname = "keepassxc";
-  version = "2.8.0";
+  version = "2.7.12";
 
   src = fetchFromGitHub {
     owner = "keepassxreboot";
     repo = "keepassxc";
     tag = finalAttrs.version;
-    hash = "sha256-821zL+xnCsHU8VvxsJh2a2LRGstSIq3tWQbWBk8g4hc=";
+    hash = "sha256-eg8jRaSJdRBpEOHQ8E3jXcdwRzsnyq6r4RLyltdpIB8=";
   };
 
-  env = lib.optionalAttrs stdenv.cc.isClang {
-    NIX_CFLAGS_COMPILE = toString [
-      "-Wno-old-style-cast"
-      "-Wno-error"
-      "-D__BIG_ENDIAN__=${if stdenv.hostPlatform.isBigEndian then "1" else "0"}"
-    ];
-  };
+  env =
+    lib.optionalAttrs stdenv.cc.isClang {
+      NIX_CFLAGS_COMPILE = toString [
+        "-Wno-old-style-cast"
+        "-Wno-error"
+        "-D__BIG_ENDIAN__=${if stdenv.hostPlatform.isBigEndian then "1" else "0"}"
+      ];
+    }
+    // lib.optionalAttrs stdenv.hostPlatform.isDarwin {
+      NIX_LDFLAGS = toString [
+        "-rpath"
+        "${libargon2}/lib"
+      ];
+    };
 
-  patches = [ ./darwin-remove-macdeployqt.patch ];
+  patches = [
+    ./darwin-remove-macdeployqt.patch
+
+    (fetchpatch2 {
+      name = "CVE-2026-69150.patch";
+      url = "https://github.com/keepassxreboot/keepassxc/commit/6a534f38c61295d60b0e937739a12511e76dbfeb.patch?full_index=1";
+      hash = "sha256-izHjFIqtBcMXK3XMPvSKv1d/1I5It59ClGrrcCz6lL4=";
+    })
+  ];
 
   # Upstream develops against a build of PCSC from Xcode.
   # The types are incompatible with nixpkgs pcsclite.
@@ -68,14 +83,15 @@ stdenv.mkDerivation (finalAttrs: {
   cmakeFlags = [
     (lib.cmakeFeature "KEEPASSXC_BUILD_TYPE" "Release")
     (lib.cmakeBool "WITH_GUI_TESTS" true)
-    (lib.cmakeBool "KPXC_FEATURE_UPDATES" false)
-    (lib.cmakeBool "WITH_X11" withKeePassX11)
-    (lib.cmakeBool "KPXC_MINIMAL" withKeePassMinimal)
-    (lib.cmakeBool "KPXC_FEATURE_DOCS" withKeePassDocs)
-    (lib.cmakeBool "KPXC_FEATURE_BROWSER" withKeePassBrowser)
-    (lib.cmakeBool "KPXC_FEATURE_NETWORK" withKeePassNetworking)
-    (lib.cmakeBool "KPXC_FEATURE_SSHAGENT" withKeePassSSHAgent)
-    (lib.cmakeBool "KPXC_FEATURE_FDOSECRETS" withKeePassFDOSecrets)
+    (lib.cmakeBool "WITH_XC_UPDATECHECK" false)
+    (lib.cmakeBool "WITH_XC_X11" withKeePassX11)
+    (lib.cmakeBool "WITH_XC_BROWSER" withKeePassBrowser)
+    (lib.cmakeBool "WITH_XC_BROWSER_PASSKEYS" withKeePassBrowserPasskeys)
+    (lib.cmakeBool "WITH_XC_KEESHARE" withKeePassKeeShare)
+    (lib.cmakeBool "WITH_XC_NETWORKING" withKeePassNetworking)
+    (lib.cmakeBool "WITH_XC_SSHAGENT" withKeePassSSHAgent)
+    (lib.cmakeBool "WITH_XC_FDOSECRETS" withKeePassFDOSecrets)
+    (lib.cmakeBool "WITH_XC_YUBIKEY" withKeePassYubiKey)
   ];
 
   doCheck = true;
@@ -104,6 +120,7 @@ stdenv.mkDerivation (finalAttrs: {
 
       export LC_ALL="en_US.UTF-8"
       export QT_QPA_PLATFORM=offscreen
+      export QT_PLUGIN_PATH="${libsForQt5.qtbase.bin}/${libsForQt5.qtbase.qtPluginPrefix}"
 
       make test ARGS+="-E '${disabledTests}' --output-on-failure"
 
@@ -111,12 +128,12 @@ stdenv.mkDerivation (finalAttrs: {
     '';
 
   nativeBuildInputs = [
+    asciidoctor
     cmake
-    qt6.wrapQtAppsHook
-    qt6.qttools
+    libsForQt5.wrapQtAppsHook
+    libsForQt5.qttools
     pkg-config
   ]
-  ++ lib.optional withKeePassDocs asciidoctor
   ++ lib.optional (!stdenv.hostPlatform.isDarwin) wrapGAppsHook3;
 
   dontWrapGApps = true;
@@ -148,10 +165,12 @@ stdenv.mkDerivation (finalAttrs: {
 
   buildInputs = [
     botan3
+    curl
     libxi
     libxtst
-    qt6.qtbase
-    qt6.qtsvg
+    libargon2
+    libsForQt5.qtbase
+    libsForQt5.qtsvg
     minizip
     pcsclite
     qrencode
@@ -159,14 +178,18 @@ stdenv.mkDerivation (finalAttrs: {
     zlib
   ]
   ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    libsForQt5.qtmacextras
+
     apple-sdk_15
     # ScreenCaptureKit, required by livekit, is only available on 12.3 and up:
     # https://developer.apple.com/documentation/screencapturekit
     (darwinMinVersionHook "12.3")
   ]
   ++ lib.optionals stdenv.hostPlatform.isLinux [
-    keyutils
     libusb1
+  ]
+  ++ lib.optionals withKeePassX11 [
+    libsForQt5.qtx11extras
   ];
 
   passthru = {

pkgs/by-name/ke/kener/package.nix

@@ -11,16 +11,16 @@ buildNpmPackage (finalAttrs: {
   __structuredAttrs = true;
 
   pname = "kener";
-  version = "4.1.10";
+  version = "4.1.7";
 
   src = fetchFromGitHub {
     owner = "rajnandan1";
     repo = "kener";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-93g27YDXaMD9typWyJzPSP9QbH00OH/jrbU0cAdPELw=";
+    hash = "sha256-/S7foXt5MjyO8NMlUul2SxF1VaVUUjTV5dRJKOE2bUI=";
   };
 
-  npmDepsHash = "sha256-ihUpG+AGR8PVnqv8ao0VAn3j78W6eUxY8Zxca5Xnp+s=";
+  npmDepsHash = "sha256-frv6Opzvh7LXCz0aslKh03zpeztRcsM0lkrVd1a0JvI=";
   postFixup = ''
     makeWrapper ${nodejs}/bin/node $out/bin/kener-server \
       --add-flags $out/lib/node_modules/kener/build/main.js \

pkgs/by-name/ko/koka/package.nix

@@ -68,7 +68,7 @@ haskellPackages.mkDerivation {
     hashable
     isocline
     lens
-    lsp_2_8_0_0
+    lsp
     mtl
     network
     network-simple

pkgs/by-name/ko/kontemplate/package.nix

@@ -22,7 +22,10 @@ buildGoModule {
     mainProgram = "kontemplate";
     homepage = "https://code.tvl.fyi/about/ops/kontemplate";
     license = lib.licenses.gpl3;
-    maintainers = with lib.maintainers; [ tazjin ];
+    maintainers = with lib.maintainers; [
+      mbode
+      tazjin
+    ];
     platforms = lib.platforms.unix;
 
     longDescription = ''

pkgs/by-name/ku/kustomize/package.nix

@@ -1,16 +1,16 @@
 {
   lib,
   stdenv,
-  buildGo127Module,
+  buildGoModule,
   fetchFromGitHub,
   installShellFiles,
   kustomize,
   testers,
 }:
 
-buildGo127Module (finalAttrs: {
+buildGoModule (finalAttrs: {
   pname = "kustomize";
-  version = "5.8.3";
+  version = "5.8.2";
 
   ldflags =
     let
@@ -26,13 +26,13 @@ buildGo127Module (finalAttrs: {
     owner = "kubernetes-sigs";
     repo = "kustomize";
     rev = "kustomize/v${finalAttrs.version}";
-    hash = "sha256-eSb1XL8qdSfOKU3IO4epstT/Q1c5X9YQMbJFyd/3xzI=";
+    hash = "sha256-5+vLnlzGLsiyw221qltrGL562AKeCO8iA9Z7aNyzkCs=";
   };
 
   # avoid finding test and development commands
   modRoot = "kustomize";
   proxyVendor = true;
-  vendorHash = "sha256-NkW0o++io+RevB7G3mjmtRzF98J5E4Bc3ftlUIEZiH0=";
+  vendorHash = "sha256-EFNdc2f47Yga9/BSkSE/AraB05mTRgjtwPQ0iP2Nzzs=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/la/labwc-menu-generator/package.nix

@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "labwc-menu-generator";
-  version = "0.2.0-unstable-2026-10-29";
+  version = "0.2.0-unstable-2026-08-21";
 
   src = fetchFromGitHub {
     owner = "labwc";
     repo = "labwc-menu-generator";
-    rev = "b0a574016b7dd07bb9f07f9e94d20859bd472418";
-    hash = "sha256-bYAjYUAujyCjHhcczd7dE+Xfdrnw14Vh/ekgQ8PTs78=";
+    rev = "b31ae37532d77e638e27e8a3f3a4865ca5ccab71";
+    hash = "sha256-iKaHQdpYGG0gk9uWh2NPFhn/LEw6Bu1tgbvVqGZdWNA=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/li/libkrun/package.nix

@@ -35,13 +35,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "libkrun" + lib.optionalString (variant != null) "-${variant}";
-  version = "1.19.7";
+  version = "1.19.5";
 
   src = fetchFromGitHub {
     owner = "libkrun";
     repo = "libkrun";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-VtepY0sAqP18OIhIPwESoGi7E2Ahs4ihJjLyLH78JAM=";
+    hash = "sha256-VUV9zlegS4IIJI0fbzkxc6Lz5jvr3S3n4nEnVgF3YMQ=";
   };
 
   outputs = [
@@ -51,7 +51,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) src;
-    hash = "sha256-Ab7b37Npf0vNg7rF8KfPdLYCBuBCyRAYhR13RLecV04=";
+    hash = "sha256-lLdeTZbDQEp+e2urEmsVOzQG0KTNicv/31DFhYeFxFo=";
   };
 
   # Make sure libkrunfw can be found by dlopen()

pkgs/by-name/li/libmysofa/package.nix

@@ -36,7 +36,7 @@ stdenv.mkDerivation (finalAttrs: {
     (lib.cmakeBool "BUILD_TESTS" finalAttrs.finalPackage.doCheck)
   ];
 
-  doCheck = lib.meta.availableOn stdenv.buildPlatform nodejs;
+  doCheck = true;
 
   __structuredAttrs = true;
   strictDeps = true;

pkgs/by-name/li/libnxml/package.nix

@@ -8,13 +8,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libnxml";
-  version = "0.18.6";
+  version = "0.18.5";
 
   src = fetchFromGitHub {
     owner = "bakulf";
     repo = "libnxml";
     tag = finalAttrs.version;
-    hash = "sha256-PbTTnCS4QnBBVmdri3cIxYl0CVdXM7hImA14P6r5a1k=";
+    hash = "sha256-6KI1bsfDgGJ4x8Wv7fcwCKm5AILa3jLnV53JY1g9B+M=";
   };
 
   nativeBuildInputs = [ autoreconfHook ];

pkgs/by-name/li/librenms/package.nix

@@ -24,16 +24,16 @@ let
 in
 phpPackage.buildComposerProject2 rec {
   pname = "librenms";
-  version = "26.10.2";
+  version = "26.9.1.1";
 
   src = fetchFromGitHub {
     owner = "librenms";
     repo = "librenms";
     tag = version;
-    hash = "sha256-BoeNACFMgGWA3U92/JYh6Ni8RTe5M0Hz8ar7ui8R+x4=";
+    hash = "sha256-If82E9XkjtC4v5hixf8JMxV3mp7wdgKF8B13IrxgZrE=";
   };
 
-  vendorHash = "sha256-7OfUySl2nOyKo5gEcMiLXXIiny7qs4wA4VhxWBwj0qM=";
+  vendorHash = "sha256-9qCNFPUZOAm7qVOd6ajDNOCIs02n6L6VMrT9DDnnVKc=";
 
   php = phpPackage;
 
@@ -102,6 +102,8 @@ phpPackage.buildComposerProject2 rec {
 
     wrapProgram $out/daily.sh --prefix PATH : ${phpPackage}/bin
 
+    php $out/artisan vue-i18n:generate --multi-locales --format=umd
+
     rm -rf $out/logs $out/rrd $out/bootstrap/cache $out/storage $out/.env
     ln -s ${logDir} $out/logs
     ln -s ${dataDir}/config.php $out/config.php

pkgs/by-name/md/mdns-scanner/package.nix

@@ -7,7 +7,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "mdns-scanner";
-  version = "1.0.2";
+  version = "1.0.1";
 
   __structuredAttrs = true;
 
@@ -15,10 +15,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "CramBL";
     repo = "mdns-scanner";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-c0drOHnwkCPeThmmJZuR+gMpcYnjNAduhT6h5SAmTdE=";
+    hash = "sha256-qPeqNM02m18Z8eI/Y3pqHGomWZhFUmOetWmpEXaIjpk=";
   };
 
-  cargoHash = "sha256-KhoUU79X/qNNlqw2RsjqJBdvqRAVv+XL13b8Bd2OQgE=";
+  cargoHash = "sha256-I+6ivhTfVR8xSCFVndsylk/LxTuCNeBfILvyo+6pk70=";
 
   passthru.updateScript = nix-update-script { };
 

pkgs/by-name/me/merkaartor/package.nix

@@ -40,13 +40,6 @@ stdenv.mkDerivation (finalAttrs: {
     })
   ];
 
-  # protobuf's headers pull in abseil, and the abseil in nixpkgs is built as
-  # C++20: its installed headers use std::partial_ordering and friends, which
-  # fails to compile when the consumer uses C++17.
-  postPatch = ''
-    substituteInPlace CMakeLists.txt --replace-fail "set(CMAKE_CXX_STANDARD 17)" "set(CMAKE_CXX_STANDARD 20)"
-  '';
-
   nativeBuildInputs = [
     cmake
     pkg-config

pkgs/by-name/mi/minimodem/package.nix

@@ -57,7 +57,7 @@ stdenv.mkDerivation rec {
     homepage = "http://www.whence.com/minimodem/";
     license = lib.licenses.gpl3Plus;
     platforms = with lib.platforms; linux;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ relrod ];
     mainProgram = "minimodem";
   };
 }

pkgs/by-name/mk/mkjson/generated.nix

@@ -1,7 +1,7 @@
 {
   mkDerivation,
   lib,
-  fetchFromGitHub,
+  fetchFromCodeberg,
   aeson,
   base,
   bytestring,
@@ -26,7 +26,7 @@
 mkDerivation rec {
   pname = "mkjson";
   version = "0.4.0";
-  src = fetchFromGitHub {
+  src = fetchFromCodeberg {
     owner = "mfussenegger";
     repo = "mkjson";
     rev = "${version}";

pkgs/by-name/mk/mkjson/package.nix

@@ -1,2 +1,19 @@
-{ haskell, haskellPackages }:
-haskell.lib.justStaticExecutables (haskellPackages.callPackage ./generated.nix { })
+{
+  haskell,
+  haskellPackages,
+  lib,
+}:
+let
+  inherit (haskell.lib.compose) justStaticExecutables overrideCabal;
+
+  # The mkjson-doctest suite depends on specific RNG results not provided by the
+  # GHC in Nixpkgs as of this writing.
+  overrides = {
+    testTargets = [ "mkjson-test" ];
+  };
+  raw-pkg = haskellPackages.callPackage ./generated.nix { };
+in
+lib.pipe raw-pkg [
+  (overrideCabal overrides)
+  justStaticExecutables
+]

pkgs/by-name/mo/monitoring-plugins/package.nix

@@ -97,7 +97,10 @@ stdenv.mkDerivation rec {
     description = "Official monitoring plugins for Nagios/Icinga/Sensu and others";
     homepage = "https://www.monitoring-plugins.org";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ thoughtpolice ];
+    maintainers = with lib.maintainers; [
+      thoughtpolice
+      relrod
+    ];
     platforms = lib.platforms.linux;
   };
 }

pkgs/by-name/na/nagios/package.nix

@@ -84,6 +84,7 @@ stdenv.mkDerivation (finalAttrs: {
     maintainers = with lib.maintainers; [
       immae
       thoughtpolice
+      relrod
       anthonyroussel
     ];
   };

pkgs/by-name/na/namespace-cli/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "namespace-cli";
-  version = "0.0.588";
+  version = "0.0.587";
 
   src = fetchFromGitHub {
     owner = "namespacelabs";
     repo = "foundation";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-0rz+Nn+v6+1BSDoujmIvat9rQPfANyLyFJGV+otELdg=";
+    hash = "sha256-G4nBB/PE6o8lNnLkGLObectld83QAl7/VsL68B1/Qew=";
   };
 
-  vendorHash = "sha256-13NNfukXwjB59LCYhtBCsPOgyk+m4VzDVE4saR0rshg=";
+  vendorHash = "sha256-w6azJkr7mZAGQzcjbhLNJPKswqFPVWm9/4nDZavvH6U=";
 
   subPackages = [
     "cmd/nsc"

pkgs/by-name/ne/networkmanager/package.nix

@@ -109,7 +109,6 @@ stdenv.mkDerivation (finalAttrs: {
     # System paths
     "--sysconfdir=/etc"
     "--localstatedir=/var"
-    (mesonOption "system_ca_path" "/etc/ssl/certs/ca-certificates.crt")
     (mesonOption "systemdsystemunitdir" (
       if withSystemd then "${placeholder "out"}/etc/systemd/system" else "no"
     ))

pkgs/by-name/ne/nezha-theme-admin/package-lock.json

@@ -8,7 +8,7 @@
             "name": "admin-frontend",
             "version": "0.0.0",
             "dependencies": {
-                "@hookform/resolvers": "^6.0.0",
+                "@hookform/resolvers": "^5.9.1",
                 "@radix-ui/react-alert-dialog": "^1.2.1",
                 "@radix-ui/react-avatar": "^1.3.1",
                 "@radix-ui/react-checkbox": "^1.4.1",
@@ -34,19 +34,19 @@
                 "cmdk": "^1.1.1",
                 "copy-to-clipboard": "^4.0.2",
                 "date-fns": "^4.4.0",
-                "framer-motion": "^14.4.0",
-                "i18next": "^26.5.3",
+                "framer-motion": "^14.2.0",
+                "i18next": "^26.4.4",
                 "i18next-browser-languagedetector": "^8.2.1",
                 "jotai-zustand": "^0.6.0",
-                "lucide-react": "^1.60.0",
+                "lucide-react": "^1.56.0",
                 "luxon": "^3.7.2",
                 "next-themes": "^0.4.6",
                 "prettier-plugin-tailwindcss": "^0.8.1",
-                "react": "^19.3.1",
+                "react": "^19.3.0",
                 "react-day-picker": "^10.0.2",
-                "react-dom": "^19.3.1",
+                "react-dom": "^19.3.0",
                 "react-hook-form": "^7.90.0",
-                "react-i18next": "^17.1.0",
+                "react-i18next": "^17.0.16",
                 "react-router-dom": "^7.18.4",
                 "react-virtuoso": "^4.18.19",
                 "simple-icons": "^16.35.0",
@@ -59,7 +59,7 @@
                 "zustand": "^5.0.15"
             },
             "devDependencies": {
-                "@playwright/test": "^1.64.1",
+                "@playwright/test": "^1.64.0",
                 "@testing-library/dom": "^10.4.2",
                 "@testing-library/react": "^16.3.3",
                 "@types/node": "^26.6.5",
@@ -67,14 +67,14 @@
                 "@types/react-dom": "^19.3.0",
                 "@vitejs/plugin-react": "^6.1.2",
                 "autoprefixer": "^10.6.1",
-                "jsdom": "^30.1.3",
-                "oxlint": "1.89.0",
-                "postcss": "8.5.31",
+                "jsdom": "^30.1.2",
+                "oxlint": "1.88.0",
+                "postcss": "8.5.30",
                 "swagger-typescript-api": "^13.13.0",
                 "tailwindcss": "4.3.3",
                 "typescript": "~7.0.2",
                 "vite": "^8.3.4",
-                "vitest": "^5.0.5"
+                "vitest": "^5.0.4"
             }
         },
         "node_modules/@alloc/quick-lru": {
@@ -142,9 +142,9 @@
             }
         },
         "node_modules/@asamuzakjp/css-color": {
-            "version": "7.1.9",
-            "resolved": "https://registry.npmjs.org/@asamuzakjp/css-color/-/css-color-7.1.9.tgz",
-            "integrity": "sha512-vZ6JQVq8Ivgz6b/IBlAf90wZviXdluY13cQOPO+nJHbmXwGrPl2GcpqUY7a55/8ZVdfONXpCFMpRijOBCHNlcQ==",
+            "version": "7.1.7",
+            "resolved": "https://registry.npmjs.org/@asamuzakjp/css-color/-/css-color-7.1.7.tgz",
+            "integrity": "sha512-Q7ioeear07HwixdIitIn9KS1LZi97CEDFCSjPNm9v+y8KNbsu9q4Lrd4zUQW4faED+E7qxvfeVnbNRW46wFKuw==",
             "dev": true,
             "license": "MIT",
             "dependencies": {
@@ -159,9 +159,9 @@
             }
         },
         "node_modules/@asamuzakjp/dom-selector": {
-            "version": "10.0.5",
-            "resolved": "https://registry.npmjs.org/@asamuzakjp/dom-selector/-/dom-selector-10.0.5.tgz",
-            "integrity": "sha512-EgmJ7oEaGQECTn3H3wmnQpEy4hKY66VvM7VQndwPIQob3p877BgbyOUE3EX0LgXQCciF2H8KMdR+RznqjMNOLw==",
+            "version": "10.0.4",
+            "resolved": "https://registry.npmjs.org/@asamuzakjp/dom-selector/-/dom-selector-10.0.4.tgz",
+            "integrity": "sha512-A6f1nKy99I6tyoK82U6kBHvQQZmdHmTmPzJYPY/0eaOW0r8/qPmEOwjGHs+hL/vCgOwQTupu4LT1XtXNUuDruA==",
             "dev": true,
             "license": "MIT",
             "dependencies": {
@@ -214,9 +214,9 @@
             }
         },
         "node_modules/@babel/helper-string-parser": {
-            "version": "7.29.11",
-            "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.11.tgz",
-            "integrity": "sha512-snZbO7MEDOof+hvNa97EjEY7qD7h2kwvQr5AJC3ZhQudKW5dnej6k3kP9NQV88hJwaS8vDqRLFo9rivLEhle2g==",
+            "version": "7.29.7",
+            "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz",
+            "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==",
             "license": "MIT",
             "engines": {
                 "node": ">=6.9.0"
@@ -232,12 +232,12 @@
             }
         },
         "node_modules/@babel/parser": {
-            "version": "7.29.11",
-            "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.11.tgz",
-            "integrity": "sha512-OZ6+oaK7GMyg3IfCpj8JOmn8n+w2rJbDT0LLfVDTLb1ZFeKDh3AiNELgCMUw175IJHSkLl74hG0M0VLsvx+gag==",
+            "version": "7.29.9",
+            "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.9.tgz",
+            "integrity": "sha512-CjXrNHTnvqBVqHgdBysY3vk2T8tpJHb5/RMeHJBTyVa9xgugCB0CJTx/3oO8RV2QRQP391RWpB7D6hLjm8V9uA==",
             "license": "MIT",
             "dependencies": {
-                "@babel/types": "^7.29.11"
+                "@babel/types": "^7.29.8"
             },
             "bin": {
                 "parser": "bin/babel-parser.js"
@@ -288,12 +288,12 @@
             }
         },
         "node_modules/@babel/types": {
-            "version": "7.29.11",
-            "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.11.tgz",
-            "integrity": "sha512-WCsemW40Cpc6gouC1SrY6PBaZ+oLRlEVY9XBvZBI7il/HyUrb2nJ505wE1MHEFyDZNnrWDEuy4jL50WVHfTTSQ==",
+            "version": "7.29.8",
+            "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz",
+            "integrity": "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==",
             "license": "MIT",
             "dependencies": {
-                "@babel/helper-string-parser": "^7.29.11",
+                "@babel/helper-string-parser": "^7.29.7",
                 "@babel/helper-validator-identifier": "^7.29.7"
             },
             "engines": {
@@ -553,9 +553,9 @@
             "license": "MIT"
         },
         "node_modules/@hookform/resolvers": {
-            "version": "6.0.0",
-            "resolved": "https://registry.npmjs.org/@hookform/resolvers/-/resolvers-6.0.0.tgz",
-            "integrity": "sha512-6iBzQnB+YwAveVc8HUi6QYLITn5X+xNKRMFIcNXHZlvp2aTI7yWbj4n/JodXxirMCcBc4VCjb2aYAJh4x07mVw==",
+            "version": "5.9.2",
+            "resolved": "https://registry.npmjs.org/@hookform/resolvers/-/resolvers-5.9.2.tgz",
+            "integrity": "sha512-RtjTnZqsC38s4NKp2XO3fD8IA5uyN4tB7McQ5C6uiMPcV+WWO8F+wVa3e+BXUpH2ScgxghAlwFRMVqjT9WChAQ==",
             "license": "MIT",
             "dependencies": {
                 "@standard-schema/utils": "^0.3.0"
@@ -573,7 +573,7 @@
                 "class-transformer": ">=0.4.0",
                 "class-validator": ">=0.12.0",
                 "computed-types": "^1.0.0",
-                "effect": "^4.0.0",
+                "effect": "^3.10.3",
                 "fluentvalidation-ts": "^3.0.0",
                 "fp-ts": "^2.7.0",
                 "io-ts": "^2.0.0",
@@ -718,9 +718,9 @@
             }
         },
         "node_modules/@oxlint/binding-android-arm-eabi": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-android-arm-eabi/-/binding-android-arm-eabi-1.89.0.tgz",
-            "integrity": "sha512-Pflpba5F3gRAQ12sWglRxvWTHEdAusNDvmi4Y5N1T5SY1AGkM7AixOnET8qkrnLJ/F32qAlNokO6eCknT8tmnw==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-android-arm-eabi/-/binding-android-arm-eabi-1.88.0.tgz",
+            "integrity": "sha512-k6Fgkf86ubfeH4GvqYsRolfuVAp0pfYVZvifSlXNHPdMaWUOfxUrmLEeDD7hF6U2oJuhsVxhSWq86/xCJ+9MmA==",
             "cpu": [
                 "arm"
             ],
@@ -735,9 +735,9 @@
             }
         },
         "node_modules/@oxlint/binding-android-arm64": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-android-arm64/-/binding-android-arm64-1.89.0.tgz",
-            "integrity": "sha512-dYmyD1x7LaPlb79vZWUcpTShk8dI9z1I+IubtqrBxWNJaDhQdPHwcsvg7q5StTU4xWyd9AwPfLaTYFZY8NZgtQ==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-android-arm64/-/binding-android-arm64-1.88.0.tgz",
+            "integrity": "sha512-AsIyhl9o1ejwtac7NMbhKpMdSml6NWR0ljKjZERxC8OHYDAW8o/Om9n1QHVLi4VCEUo42Zte2/Op9kyoGpJZMg==",
             "cpu": [
                 "arm64"
             ],
@@ -752,9 +752,9 @@
             }
         },
         "node_modules/@oxlint/binding-darwin-arm64": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-darwin-arm64/-/binding-darwin-arm64-1.89.0.tgz",
-            "integrity": "sha512-Z/oxOPiIqiS7fItRdxaaOEC+6GD3OpGi0IxoR0dMefzQHolsKLzScw2DNcu/5gUPok3tv+G9mslvYB5bo3i0qg==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-darwin-arm64/-/binding-darwin-arm64-1.88.0.tgz",
+            "integrity": "sha512-qgBjB7eEKcCB4RqjXGuoSZq74g0wD09fWFJ+HWcCJcKaga8TeUHtb+BY0SsxdleSLBgx4RZ7qmgo0EzqEq7JoQ==",
             "cpu": [
                 "arm64"
             ],
@@ -769,9 +769,9 @@
             }
         },
         "node_modules/@oxlint/binding-darwin-x64": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-darwin-x64/-/binding-darwin-x64-1.89.0.tgz",
-            "integrity": "sha512-eAjTkHSjAxrdCPJxO6y5sPQL5pYLKb2kvxZz9UU7tXnOZk9I/HLtkvx9S7GHY883k+AmL/eC7mqFt+w7WCwk0w==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-darwin-x64/-/binding-darwin-x64-1.88.0.tgz",
+            "integrity": "sha512-sCz3X5Mw/xdzEzn4fsCt1Iq8NKJnGNfhR+b9B5k+4DysYAHsmIhYoocnBPiQ9kvY3+pUun2A0Z8Vtun/Nv6YoQ==",
             "cpu": [
                 "x64"
             ],
@@ -786,9 +786,9 @@
             }
         },
         "node_modules/@oxlint/binding-freebsd-x64": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-freebsd-x64/-/binding-freebsd-x64-1.89.0.tgz",
-            "integrity": "sha512-0lNCA9Tl1n1FKpqy2/9ckp0kIuSrtJ/l9bMRgaEhOtM7TsOHshFuwOcvW8oA9teXLMOJT61LjEKWiaHDFGxF/w==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-freebsd-x64/-/binding-freebsd-x64-1.88.0.tgz",
+            "integrity": "sha512-xTOdYOIqCufgIj0knvxu86FBfovP6QBiD7ngNva01gb8xPQCD5gXkE5APGczH35zStim1O3zqvFbLQmY85xXRg==",
             "cpu": [
                 "x64"
             ],
@@ -803,9 +803,9 @@
             }
         },
         "node_modules/@oxlint/binding-linux-arm-gnueabihf": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.89.0.tgz",
-            "integrity": "sha512-OTFEvi9W+JczaZD1Caj17SGCoW8H7TE+fvx0D7ATEWa1Lohn91UMxFQ6r145SiGy/yCxeIwptMys/RAM7gSVSQ==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.88.0.tgz",
+            "integrity": "sha512-BLadtw88NdYJBrAtC1dYzrPfSP2d5zgx6iuZycdD0YmZBJ2Nqbit9Z4PSaIb6gxK25dweArGMPbOmq/0ugwUPg==",
             "cpu": [
                 "arm"
             ],
@@ -820,9 +820,9 @@
             }
         },
         "node_modules/@oxlint/binding-linux-arm-musleabihf": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-1.89.0.tgz",
-            "integrity": "sha512-fRxgNHvBLswj6MrhW2uBq5UDhPRQlCbHeq/Nf8yuG9zOxhDsXqX/mi2PX1axgsQxMm88el7HLiJAzglAnflYxw==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-1.88.0.tgz",
+            "integrity": "sha512-wILSczl/DaZsCcf7j7tvNbssp8hxEHIJxrv4j7+JjI3TAL1U/JTWbeUtoJJC/vo8+2hkTmHLYoKJjmiNbijdXw==",
             "cpu": [
                 "arm"
             ],
@@ -837,9 +837,9 @@
             }
         },
         "node_modules/@oxlint/binding-linux-arm64-gnu": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.89.0.tgz",
-            "integrity": "sha512-v9ENzHvwrQoYSWTtviH1pOYc7R9UovDxVofnck50cNmPihRRTcrg5X0UlRbLOZ7IVtxPOlh2hb7kDO+FpE8SfQ==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.88.0.tgz",
+            "integrity": "sha512-jutT2Hy8JCuZuMwIFHo2HtyxfOfBJHyQxlBHBK1SL9W2f8n/WhjAP0FnDMz9d/mjhv9+QA0mx5AdQ9fDjsrFFg==",
             "cpu": [
                 "arm64"
             ],
@@ -857,9 +857,9 @@
             }
         },
         "node_modules/@oxlint/binding-linux-arm64-musl": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.89.0.tgz",
-            "integrity": "sha512-vfffe8mQ484AzVadlUOFpgL+JDwhvs9hrzxTgQP1FVfi4ZEUUYeffXlzC9dFV7Dgnu5s/KrNKvfmG6HxBd/ISQ==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.88.0.tgz",
+            "integrity": "sha512-8N8iGV9hh4Lkeuq7QsEkjoXNRRflqR1G2qyoGYXcA0k5qllrdqmfylKEXyHIVERxqNDyMO4StqDQ0uLxXcBQAg==",
             "cpu": [
                 "arm64"
             ],
@@ -877,9 +877,9 @@
             }
         },
         "node_modules/@oxlint/binding-linux-ppc64-gnu": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.89.0.tgz",
-            "integrity": "sha512-Buonlp4hVS7RGNP5M7bPpGNQrenyzA2C64JcO/oz9C1c6dGOXJ7VEAnaiAMY7voou0JYyCJdvDVlFQc5DZX3DQ==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.88.0.tgz",
+            "integrity": "sha512-5ydcQt3znNQ/rGEWYRvpS2cK9+T18P2VYgnyJ+eloEAwi9YUmsXy5VGrRqNWIK6qzWwHGnEE3ojVqqQNo+f0hA==",
             "cpu": [
                 "ppc64"
             ],
@@ -897,9 +897,9 @@
             }
         },
         "node_modules/@oxlint/binding-linux-riscv64-gnu": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-1.89.0.tgz",
-            "integrity": "sha512-1eVwJJrJ3lYIPT+cm7BcBBZZXY6IQZP/oyonaruTor/MrVyWOpvnwt1oD5CLdsHg5aVBIxXodQSvt+1gK6ck5w==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-1.88.0.tgz",
+            "integrity": "sha512-iGx0uvFT54b/5DPJdEBCxYIrVB3v0uTy+JhRh3CyEp8/22BXDkG8rffkFwREdLsdj9mOrPbJYVOZw8ipcBuzjw==",
             "cpu": [
                 "riscv64"
             ],
@@ -917,9 +917,9 @@
             }
         },
         "node_modules/@oxlint/binding-linux-riscv64-musl": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-1.89.0.tgz",
-            "integrity": "sha512-fRQQsKUGShdEL5Fl9o9uhj3grkZbeXKLv0icQ5tspUCNYSDy8wzzEcP1WC2bKdTQ0rSszbKlO3iiHORxV22DLg==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-1.88.0.tgz",
+            "integrity": "sha512-Wt47mKMWelVjRjuR7BCFxXkB0m79K1sTEbqMHRWciKUgo5iv7sWsF4RXSOyFYHD9zerNrkRZblnN273rhwOA1Q==",
             "cpu": [
                 "riscv64"
             ],
@@ -937,9 +937,9 @@
             }
         },
         "node_modules/@oxlint/binding-linux-s390x-gnu": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.89.0.tgz",
-            "integrity": "sha512-dEtYjIy6+fHcjKklsmtmMkZRhwHr2UbzjmpvuPtQYSeN9awQ2hx5JLms5Wvri+8P/NZtD8v5hfgHALUql+/Ycg==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.88.0.tgz",
+            "integrity": "sha512-g3L12KCS4+1gtUt3RbJ4F+Yxx4LNmmZLEPfhd8rAHEJjJk2lAgNfnjGoP/phJyhG5WS6VbNYbJtadJelNfvTMA==",
             "cpu": [
                 "s390x"
             ],
@@ -957,9 +957,9 @@
             }
         },
         "node_modules/@oxlint/binding-linux-x64-gnu": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.89.0.tgz",
-            "integrity": "sha512-hqjwIj5KOYM8Wjef/p7IruNi1iByLhSzbMBk62y22P/E8q7Jj0Pp+DeUTKTRYyZYCDtU1wEGlnWOnttHbyNIww==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.88.0.tgz",
+            "integrity": "sha512-og/XHVDOD9ZJgRiZkT9DgzQd4sr+JZW7e4l17Q/jVMZiIbeEd4uIu9iAoUbTF1gIvVZoRc4QDOxyVUvQGp4WHg==",
             "cpu": [
                 "x64"
             ],
@@ -977,9 +977,9 @@
             }
         },
         "node_modules/@oxlint/binding-linux-x64-musl": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-x64-musl/-/binding-linux-x64-musl-1.89.0.tgz",
-            "integrity": "sha512-iAQN3e6o9UgUCcdGwqRx/jYcKbG3HK7ur3rH6lTqVcQeNGZ85AeWIg6cgn/edwFQ0ofEZZItMwkzyCVTahnvEA==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-x64-musl/-/binding-linux-x64-musl-1.88.0.tgz",
+            "integrity": "sha512-EmhBsp+xuKb6YbZNEMLBo80Xw71AZOIm18do8ni/GLX/Lw1XzNhVYpbxO1KasYtoAvrGtCOdCPULRlIE0bPbTQ==",
             "cpu": [
                 "x64"
             ],
@@ -997,9 +997,9 @@
             }
         },
         "node_modules/@oxlint/binding-openharmony-arm64": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-openharmony-arm64/-/binding-openharmony-arm64-1.89.0.tgz",
-            "integrity": "sha512-MNxjEByz3N/7Q4qFQuPWvc14TpN9LoD3pECEDsJTZbP/wyB7U+hduUXEl7QAbbgVezFwsb9sWtNUO6XVBndOhg==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-openharmony-arm64/-/binding-openharmony-arm64-1.88.0.tgz",
+            "integrity": "sha512-DBUcx/KwYdg1DAz+G01P/GFv512J04EsZadbHptx2FTpWT/MWRg21ZToNHt9pnsfQRBQ3et/g+vqzbvrdAVbuA==",
             "cpu": [
                 "arm64"
             ],
@@ -1014,9 +1014,9 @@
             }
         },
         "node_modules/@oxlint/binding-win32-arm64-msvc": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.89.0.tgz",
-            "integrity": "sha512-xxe+i9wfuFso/VnoL4mfj0UlzE+cfCFiUB06vkXCMyQdgVVmItF5FfAF4tATAktSU6uHruWR+FjqvAT9cHZZzg==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.88.0.tgz",
+            "integrity": "sha512-xeVd0n4XG5HvynxfYvXi6uB+JvZbVZataowPS8cYpMbYg9mwE4sSyElFQd4LVJFifq8bRLDSR18XgEildmcXAg==",
             "cpu": [
                 "arm64"
             ],
@@ -1031,9 +1031,9 @@
             }
         },
         "node_modules/@oxlint/binding-win32-ia32-msvc": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-win32-ia32-msvc/-/binding-win32-ia32-msvc-1.89.0.tgz",
-            "integrity": "sha512-saFy07cO94E664glwgLmKLI40HgTL1PY86y4T6+ud4niX4H0Kdqjcmqmjps7mQNdBytV5guGbXDdyQtRfeLbLA==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-win32-ia32-msvc/-/binding-win32-ia32-msvc-1.88.0.tgz",
+            "integrity": "sha512-MA6iOw//amleaz2mVMsZrA7NHlEexjTrhIxSMFCXQi6IUuQO+3Od00GZhr2iCYw6RFzMW36jkKK/WHBXMsoQAw==",
             "cpu": [
                 "ia32"
             ],
@@ -1048,9 +1048,9 @@
             }
         },
         "node_modules/@oxlint/binding-win32-x64-msvc": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/@oxlint/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.89.0.tgz",
-            "integrity": "sha512-hLFJ/o0f/dTJh/EW0vmcbREYSQO9tYgfiAAlsOkiLFiJuRRWvYtFELUXN5o2ijpSo/tlO1n+YlWN58tZwPG18A==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/@oxlint/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.88.0.tgz",
+            "integrity": "sha512-3Sz6rVWe8Dy+ufsXurFN1GX2dX43F/lQMSLelK9gFjiba7nHvLlqlhR5cHlWVnCpSqUY1hN9pyCX9XToe6ve6g==",
             "cpu": [
                 "x64"
             ],
@@ -2860,7 +2860,7 @@
             "version": "19.3.0",
             "resolved": "https://registry.npmjs.org/@types/react/-/react-19.3.0.tgz",
             "integrity": "sha512-N0rFCuH9YoxG9/m61l9MfpJKfmLOVU0em7ipIz6TRgSSkvReLB9vL85GB+yr8Bs5leqpvg96JSwF4ZS1s4viQg==",
-            "dev": true,
+            "devOptional": true,
             "license": "MIT",
             "dependencies": {
                 "csstype": "^3.2.2"
@@ -2870,7 +2870,7 @@
             "version": "19.3.0",
             "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-19.3.0.tgz",
             "integrity": "sha512-ZI7bU42mZXXKHn/qNLEw2IrbiINU7X5+vfgdixBHkCNpYWXjKgfQ/P+uyGb5CjOLB9UcnTeg3rylQtV2hym44Q==",
-            "dev": true,
+            "devOptional": true,
             "license": "MIT",
             "peerDependencies": {
                 "@types/react": "^19.3.0"
@@ -2898,7 +2898,6 @@
             "cpu": [
                 "ppc64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -2915,7 +2914,6 @@
             "cpu": [
                 "arm64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -2932,7 +2930,6 @@
             "cpu": [
                 "x64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -2949,7 +2946,6 @@
             "cpu": [
                 "arm64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -2966,7 +2962,6 @@
             "cpu": [
                 "x64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -2983,7 +2978,6 @@
             "cpu": [
                 "arm"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3000,7 +2994,6 @@
             "cpu": [
                 "arm64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3017,7 +3010,6 @@
             "cpu": [
                 "loong64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3034,7 +3026,6 @@
             "cpu": [
                 "mips64el"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3051,7 +3042,6 @@
             "cpu": [
                 "ppc64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3068,7 +3058,6 @@
             "cpu": [
                 "riscv64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3085,7 +3074,6 @@
             "cpu": [
                 "s390x"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3102,7 +3090,6 @@
             "cpu": [
                 "x64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3119,7 +3106,6 @@
             "cpu": [
                 "arm64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3136,7 +3122,6 @@
             "cpu": [
                 "x64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3153,7 +3138,6 @@
             "cpu": [
                 "arm64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3170,7 +3154,6 @@
             "cpu": [
                 "x64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3187,7 +3170,6 @@
             "cpu": [
                 "x64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3204,7 +3186,6 @@
             "cpu": [
                 "arm64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3221,7 +3202,6 @@
             "cpu": [
                 "x64"
             ],
-            "dev": true,
             "license": "Apache-2.0",
             "optional": true,
             "os": [
@@ -3290,9 +3270,9 @@
             }
         },
         "node_modules/@vitest/mocker/node_modules/magic-string": {
-            "version": "1.4.4",
-            "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-1.4.4.tgz",
-            "integrity": "sha512-jQz9sVhrZuphH4NrAIHSgkDJCluQO7Ioi4KGRLa7aTUjAODQ13hENX0YIytqYE/rIkO485gQG2LeBxJaW53kkQ==",
+            "version": "1.4.3",
+            "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-1.4.3.tgz",
+            "integrity": "sha512-z12OxmaPGE0F4xlpGdjuAUckipLpQlTAuAmyGhNoD7ODpYUzvDfvtxUbjM/jwznyP178oju/KDdyi220wNJ0RQ==",
             "dev": true,
             "license": "MIT",
             "dependencies": {
@@ -3328,7 +3308,7 @@
             "version": "8.20.0",
             "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz",
             "integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
-            "dev": true,
+            "devOptional": true,
             "license": "MIT",
             "dependencies": {
                 "fast-deep-equal": "^3.1.3",
@@ -3419,9 +3399,9 @@
             }
         },
         "node_modules/autoprefixer": {
-            "version": "10.6.2",
-            "resolved": "https://registry.npmjs.org/autoprefixer/-/autoprefixer-10.6.2.tgz",
-            "integrity": "sha512-VOw9/yGTGwPPgzFcODtcv6zhEPIeIWkRSe10L2ri2f5vZ7ID7lCt6jZzRF5/ubgOZ+szYydmEF5AYsA5jxX1tA==",
+            "version": "10.6.1",
+            "resolved": "https://registry.npmjs.org/autoprefixer/-/autoprefixer-10.6.1.tgz",
+            "integrity": "sha512-cL1Qz6ADZhcEbny/8HPfe99J6HhNoYtpX2LFLIbhgGE7Q1hlQVkYFdetDN7Id3KiQxhDrHwzlHr/YQCnZ8+xSA==",
             "dev": true,
             "funding": [
                 {
@@ -3462,9 +3442,9 @@
             "license": "MIT"
         },
         "node_modules/baseline-browser-mapping": {
-            "version": "2.11.33",
-            "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.11.33.tgz",
-            "integrity": "sha512-yiVKDX+qCMRKBE084lXvq9EcwFUhKZ2nU8TK1EQQuOgPNR/lmbGxXOeDdlGUqC2Zz11Cs9rk1d/8NfgBmlkt0w==",
+            "version": "2.11.30",
+            "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.11.30.tgz",
+            "integrity": "sha512-YJs6Pz17RMNv8HoyKREtCY38E3BV1nPkWVmIb+XN1uHC1Vqt3KZCH/uJH9ZKRoiKb/icZ6tvehyee6RZNbFfRA==",
             "dev": true,
             "license": "Apache-2.0",
             "bin": {
@@ -3494,9 +3474,9 @@
             }
         },
         "node_modules/browserslist": {
-            "version": "4.29.5",
-            "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.29.5.tgz",
-            "integrity": "sha512-khTmKu5NGYTotqcYo8Bew2k4RAE9PuXRSFRXG2lQBrCEQHyeQ/vX6gKMxfokwywBsLiXZMnHsmWMG1pnO8J7uQ==",
+            "version": "4.29.4",
+            "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.29.4.tgz",
+            "integrity": "sha512-2TcbbiwXEq+N0kD36tykpCfyyQigUXmuwNQbnPp4Xk4PX9JOqVIKjJlIDjpH7uY6tmRGoAd+apeT1p60T8wsdA==",
             "dev": true,
             "funding": [
                 {
@@ -3514,10 +3494,10 @@
             ],
             "license": "MIT",
             "dependencies": {
-                "baseline-browser-mapping": "^2.11.33",
-                "caniuse-lite": "^1.0.30001819",
-                "electron-to-chromium": "^1.5.464",
-                "node-releases": "^2.0.60",
+                "baseline-browser-mapping": "^2.11.29",
+                "caniuse-lite": "^1.0.30001816",
+                "electron-to-chromium": "^1.5.459",
+                "node-releases": "^2.0.59",
                 "update-browserslist-db": "^1.3.4"
             },
             "bin": {
@@ -3743,7 +3723,7 @@
             "version": "3.2.3",
             "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz",
             "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==",
-            "dev": true,
+            "devOptional": true,
             "license": "MIT"
         },
         "node_modules/data-urls": {
@@ -3870,9 +3850,9 @@
             }
         },
         "node_modules/electron-to-chromium": {
-            "version": "1.5.465",
-            "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.465.tgz",
-            "integrity": "sha512-zg4iUpbeGw7YNZsswc2xKr2uiBex2d8dELAXo92Icw3but1ULbrvK8USe6wVLaWjgJnKBARv0pchx9Owktx6wQ==",
+            "version": "1.5.463",
+            "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.463.tgz",
+            "integrity": "sha512-nVWNU6ltFjopvOdD44J4zoBkgO0M+WZiFKKFV7EjebOH9z0KNphk6bCEjplXtJofL21ARIuuwWOCsFkBVklm6w==",
             "dev": true,
             "license": "ISC"
         },
@@ -3917,9 +3897,9 @@
             "license": "MIT"
         },
         "node_modules/es-toolkit": {
-            "version": "1.53.0",
-            "resolved": "https://registry.npmjs.org/es-toolkit/-/es-toolkit-1.53.0.tgz",
-            "integrity": "sha512-3+AYXp9fmJ/UhHBMYj2/U+RaUouMD90SzoItyDOB2Za7W6dB7fQApFGnZPl2MF6K8/Tv1koh1JyirSx/kju6Pw==",
+            "version": "1.52.0",
+            "resolved": "https://registry.npmjs.org/es-toolkit/-/es-toolkit-1.52.0.tgz",
+            "integrity": "sha512-XTNEJQh1tY1ZJVcf6ayP/2n4ZPyaHlW2FWs7xvw5ddPuhUVjLD3olQVQS7kf58JbAB48iL0uL/jerTrjtV3lDA==",
             "dev": true,
             "license": "MIT",
             "workspaces": [
@@ -3990,7 +3970,7 @@
             "version": "3.1.3",
             "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
             "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
-            "dev": true,
+            "devOptional": true,
             "license": "MIT"
         },
         "node_modules/fast-safe-stringify": {
@@ -4004,7 +3984,7 @@
             "version": "3.1.9",
             "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.9.tgz",
             "integrity": "sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==",
-            "dev": true,
+            "devOptional": true,
             "funding": [
                 {
                     "type": "github",
@@ -4152,9 +4132,9 @@
             "license": "MIT"
         },
         "node_modules/i18next": {
-            "version": "26.5.11",
-            "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.5.11.tgz",
-            "integrity": "sha512-Wc0klBPKxqZ2tL2qdAnF8xvvnWgr1IMGSY2ikTiAvaFVbz7xiFARtkoU4RidBDw1SyziGROp0qxu6qnJ7l2Wug==",
+            "version": "26.5.5",
+            "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.5.5.tgz",
+            "integrity": "sha512-txdaNOlnZCdiTMSlEzl5hUJU8TC9R4J/RCR1G7XrDPbWT2t3mR142QPz84ZuZeXDt3yq+9zmsdPiakxYtmp3fw==",
             "funding": [
                 {
                     "type": "individual",
@@ -4180,12 +4160,12 @@
             }
         },
         "node_modules/i18next-browser-languagedetector": {
-            "version": "8.2.3",
-            "resolved": "https://registry.npmjs.org/i18next-browser-languagedetector/-/i18next-browser-languagedetector-8.2.3.tgz",
-            "integrity": "sha512-0jSTK3ncpXj9MFdxRz+TVTKDkSvYH8ifB/OCmUdEMprvXC3vy7kEvdKpj0yYB72B0UKEHJLPMEeRVC/UXroWnw==",
+            "version": "8.2.1",
+            "resolved": "https://registry.npmjs.org/i18next-browser-languagedetector/-/i18next-browser-languagedetector-8.2.1.tgz",
+            "integrity": "sha512-bZg8+4bdmaOiApD7N7BPT9W8MLZG+nPTOFlLiJiT8uzKXFjhxw4v2ierCXOwB5sFDMtuA5G4kgYZ0AznZxQ/cw==",
             "license": "MIT",
             "dependencies": {
-                "@babel/runtime": "^7.29.2"
+                "@babel/runtime": "^7.23.2"
             }
         },
         "node_modules/is-fullwidth-code-point": {
@@ -4220,6 +4200,28 @@
                 "jiti": "lib/jiti-cli.mjs"
             }
         },
+        "node_modules/jotai": {
+            "version": "3.0.1",
+            "resolved": "https://registry.npmjs.org/jotai/-/jotai-3.0.1.tgz",
+            "integrity": "sha512-6tS7wY9otdiNp26Wqb/1ds3OuVJVoV+tJlN4hpLrYmfFf/t9bauVt+zKBNSpS5qSl5h6GieVQ+OknVraZX+udQ==",
+            "license": "MIT",
+            "peer": true,
+            "engines": {
+                "node": ">=22.12.0"
+            },
+            "peerDependencies": {
+                "@types/react": ">=18.0.0",
+                "react": ">=18.0.0"
+            },
+            "peerDependenciesMeta": {
+                "@types/react": {
+                    "optional": true
+                },
+                "react": {
+                    "optional": true
+                }
+            }
+        },
         "node_modules/jotai-zustand": {
             "version": "0.6.0",
             "resolved": "https://registry.npmjs.org/jotai-zustand/-/jotai-zustand-0.6.0.tgz",
@@ -4314,7 +4316,7 @@
             "version": "1.0.0",
             "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
             "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
-            "dev": true,
+            "devOptional": true,
             "license": "MIT"
         },
         "node_modules/lightningcss": {
@@ -4921,9 +4923,9 @@
             "license": "MIT"
         },
         "node_modules/oxlint": {
-            "version": "1.89.0",
-            "resolved": "https://registry.npmjs.org/oxlint/-/oxlint-1.89.0.tgz",
-            "integrity": "sha512-a25hkfo61okGPvJz432fRIPoxlKtNnOVy9w4rzrmGgNm4iVTPwpSQlmdqNWnp6p9QyyPVfAZRgnf5XvSBZFk/A==",
+            "version": "1.88.0",
+            "resolved": "https://registry.npmjs.org/oxlint/-/oxlint-1.88.0.tgz",
+            "integrity": "sha512-uIcFgw8BmqvFRGzH5+r7d2zJMEexwNSrEmM6WQNnGh3VkO0XYTEFoyxyNE6tjKMUib9Cue4XJA2DoWruO5D6aw==",
             "dev": true,
             "license": "MIT",
             "bin": {
@@ -4936,25 +4938,25 @@
                 "url": "https://github.com/sponsors/oxc-project"
             },
             "optionalDependencies": {
-                "@oxlint/binding-android-arm-eabi": "1.89.0",
-                "@oxlint/binding-android-arm64": "1.89.0",
-                "@oxlint/binding-darwin-arm64": "1.89.0",
-                "@oxlint/binding-darwin-x64": "1.89.0",
-                "@oxlint/binding-freebsd-x64": "1.89.0",
-                "@oxlint/binding-linux-arm-gnueabihf": "1.89.0",
-                "@oxlint/binding-linux-arm-musleabihf": "1.89.0",
-                "@oxlint/binding-linux-arm64-gnu": "1.89.0",
-                "@oxlint/binding-linux-arm64-musl": "1.89.0",
-                "@oxlint/binding-linux-ppc64-gnu": "1.89.0",
-                "@oxlint/binding-linux-riscv64-gnu": "1.89.0",
-                "@oxlint/binding-linux-riscv64-musl": "1.89.0",
-                "@oxlint/binding-linux-s390x-gnu": "1.89.0",
-                "@oxlint/binding-linux-x64-gnu": "1.89.0",
-                "@oxlint/binding-linux-x64-musl": "1.89.0",
-                "@oxlint/binding-openharmony-arm64": "1.89.0",
-                "@oxlint/binding-win32-arm64-msvc": "1.89.0",
-                "@oxlint/binding-win32-ia32-msvc": "1.89.0",
-                "@oxlint/binding-win32-x64-msvc": "1.89.0"
+                "@oxlint/binding-android-arm-eabi": "1.88.0",
+                "@oxlint/binding-android-arm64": "1.88.0",
+                "@oxlint/binding-darwin-arm64": "1.88.0",
+                "@oxlint/binding-darwin-x64": "1.88.0",
+                "@oxlint/binding-freebsd-x64": "1.88.0",
+                "@oxlint/binding-linux-arm-gnueabihf": "1.88.0",
+                "@oxlint/binding-linux-arm-musleabihf": "1.88.0",
+                "@oxlint/binding-linux-arm64-gnu": "1.88.0",
+                "@oxlint/binding-linux-arm64-musl": "1.88.0",
+                "@oxlint/binding-linux-ppc64-gnu": "1.88.0",
+                "@oxlint/binding-linux-riscv64-gnu": "1.88.0",
+                "@oxlint/binding-linux-riscv64-musl": "1.88.0",
+                "@oxlint/binding-linux-s390x-gnu": "1.88.0",
+                "@oxlint/binding-linux-x64-gnu": "1.88.0",
+                "@oxlint/binding-linux-x64-musl": "1.88.0",
+                "@oxlint/binding-openharmony-arm64": "1.88.0",
+                "@oxlint/binding-win32-arm64-msvc": "1.88.0",
+                "@oxlint/binding-win32-ia32-msvc": "1.88.0",
+                "@oxlint/binding-win32-x64-msvc": "1.88.0"
             },
             "peerDependencies": {
                 "oxlint-tsgolint": ">=7.0.2003",
@@ -5079,9 +5081,9 @@
             }
         },
         "node_modules/postcss": {
-            "version": "8.5.31",
-            "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.31.tgz",
-            "integrity": "sha512-YUbWYCgErwnMAVkjUnYa+KlMBzGpHwiIt/DE7f0G33AuX2LH9UcTk6KgWxd3zRU+pN3u/C+Xl3EnMLM4Hea7Sg==",
+            "version": "8.5.30",
+            "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.30.tgz",
+            "integrity": "sha512-zkd+e9S1AQHhmaBKye9zlFHWjOwVgqXl1q3ECYy8561K7qxR2cREf/STLskulBFd78k6AOFeA+ff1TtEzk9bAA==",
             "funding": [
                 {
                     "type": "opencollective",
@@ -5113,6 +5115,22 @@
             "dev": true,
             "license": "MIT"
         },
+        "node_modules/prettier": {
+            "version": "3.9.10",
+            "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.9.10.tgz",
+            "integrity": "sha512-skGHTH1Yb9QvaTC4hWnRTzEYtCpApF0UMBPz+t/0ZPzP8ihefo/btKd+QA7pUE0fEwA1SbS/NmhyEcstdXOIdA==",
+            "license": "MIT",
+            "peer": true,
+            "bin": {
+                "prettier": "bin/prettier.cjs"
+            },
+            "engines": {
+                "node": ">=14"
+            },
+            "funding": {
+                "url": "https://github.com/prettier/prettier?sponsor=1"
+            }
+        },
         "node_modules/prettier-plugin-tailwindcss": {
             "version": "0.8.1",
             "resolved": "https://registry.npmjs.org/prettier-plugin-tailwindcss/-/prettier-plugin-tailwindcss-0.8.1.tgz",
@@ -5275,9 +5293,9 @@
             }
         },
         "node_modules/react-hook-form": {
-            "version": "7.91.0",
-            "resolved": "https://registry.npmjs.org/react-hook-form/-/react-hook-form-7.91.0.tgz",
-            "integrity": "sha512-5BEBUnCBwa28AFXYTYmOaB/+CSpJ/+CWVASHEvIGUzFdHyUiPHeRhG7r5hOZ8nZi0yP7pbHdFNXO/p31EKTJFQ==",
+            "version": "7.90.0",
+            "resolved": "https://registry.npmjs.org/react-hook-form/-/react-hook-form-7.90.0.tgz",
+            "integrity": "sha512-+NdG0FLzCPhFOp2NNxaUYLF9fyZhNjx9FTBBSYWF71/l6BBlmIc/j6xlp3DbaHWLJbIG7Zd8oznA19xJClU97w==",
             "license": "MIT",
             "engines": {
                 "node": ">=18.0.0"
@@ -5297,9 +5315,9 @@
             }
         },
         "node_modules/react-i18next": {
-            "version": "17.1.9",
-            "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-17.1.9.tgz",
-            "integrity": "sha512-OgYqIH13XHPlWTaaI795Dz+k2AdKnXcOxNQVnf750T8Ij0TYWp1nYvXRpoJBulPqlyk2OAbn1PM4tFKiIj/byA==",
+            "version": "17.1.2",
+            "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-17.1.2.tgz",
+            "integrity": "sha512-v/dCmObvAI/4yj1rlcsiKn08BDfaJ/MZxQAkbILssfm3K0zglRAj+DQ5uJjhKyLrxDiCfw9Ay5PXAeiE7Y6LCQ==",
             "license": "MIT",
             "dependencies": {
                 "@babel/runtime": "^7.29.7",
@@ -5485,7 +5503,7 @@
             "version": "2.0.2",
             "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
             "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==",
-            "dev": true,
+            "devOptional": true,
             "license": "MIT",
             "engines": {
                 "node": ">=0.10.0"
@@ -5545,9 +5563,9 @@
             "license": "MIT"
         },
         "node_modules/set-cookie-parser": {
-            "version": "2.7.3",
-            "resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-2.7.3.tgz",
-            "integrity": "sha512-irZHtTqurLna57KQG/s+fzOwv/J6XSH4cs8M/vsrY3uCaQ3S6+QJguAH0WdN47SXlk82voMZ4naWMQf8fdEoIg==",
+            "version": "2.7.2",
+            "resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-2.7.2.tgz",
+            "integrity": "sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==",
             "license": "MIT"
         },
         "node_modules/should": {
@@ -5611,9 +5629,9 @@
             "license": "MIT"
         },
         "node_modules/simple-icons": {
-            "version": "16.36.0",
-            "resolved": "https://registry.npmjs.org/simple-icons/-/simple-icons-16.36.0.tgz",
-            "integrity": "sha512-+VNPPkqSOLidFeSgBKUWX4n50WPpDC09hav+BgS26anIF1oQOlGBb8LvwGR+6fYRjo+B6CiKzNBceMPkSVXANQ==",
+            "version": "16.35.0",
+            "resolved": "https://registry.npmjs.org/simple-icons/-/simple-icons-16.35.0.tgz",
+            "integrity": "sha512-TCfl/2+GTrx0nCo4pEWGvxhOb8c6NsqOU1OpwjtF4lwJAthB8IYVD0fuIMjLMg6JFuG1YBO0t1iETQqJLqkoJA==",
             "funding": [
                 {
                     "type": "opencollective",
@@ -5972,7 +5990,7 @@
             "version": "7.0.2",
             "resolved": "https://registry.npmjs.org/typescript/-/typescript-7.0.2.tgz",
             "integrity": "sha512-8FYau96o3NKOhbjKi/qNvG/W5jhzxkbdm5sj9AbZ/5T5sWqn3hJgLfGx27sRKZWTvyzCP8dLRBTf5tBTSRVUNA==",
-            "dev": true,
+            "devOptional": true,
             "license": "Apache-2.0",
             "bin": {
                 "tsc": "bin/tsc"
@@ -6551,9 +6569,9 @@
             }
         },
         "node_modules/vitest/node_modules/magic-string": {
-            "version": "1.4.4",
-            "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-1.4.4.tgz",
-            "integrity": "sha512-jQz9sVhrZuphH4NrAIHSgkDJCluQO7Ioi4KGRLa7aTUjAODQ13hENX0YIytqYE/rIkO485gQG2LeBxJaW53kkQ==",
+            "version": "1.4.3",
+            "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-1.4.3.tgz",
+            "integrity": "sha512-z12OxmaPGE0F4xlpGdjuAUckipLpQlTAuAmyGhNoD7ODpYUzvDfvtxUbjM/jwznyP178oju/KDdyi220wNJ0RQ==",
             "dev": true,
             "license": "MIT",
             "dependencies": {

pkgs/by-name/ne/nezha-theme-admin/package.nix

@@ -6,13 +6,13 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "nezha-theme-admin";
-  version = "2.6.1";
+  version = "2.4.0";
 
   src = fetchFromGitHub {
     owner = "nezhahq";
     repo = "admin-frontend";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-rLavWiGNyBjpbaFAsetmWAJvYXdzHLYawlHOUzhQ4/U=";
+    hash = "sha256-0clBCOV5T734rmU3erZ7DHZpILP9I/zlMnEQdQ9jDA4=";
   };
 
   # TODO: Remove after upstream fixes resolved missing.
@@ -20,8 +20,7 @@ buildNpmPackage (finalAttrs: {
     cp ${./package-lock.json} package-lock.json
   '';
 
-  npmDepsHash = "sha256-6qQcsiIglaUcvdqcU6lm5MXNvfL0CvzZmC2TETWUXPI=";
-  npmFlags = [ "--legacy-peer-deps" ];
+  npmDepsHash = "sha256-pVTIKEhCgAa6UZKt0dJ1VlTKUvNMUjx4mqoeFZqJ1io=";
   npmPackFlags = [ "--ignore-scripts" ];
   npmBuildScript = "build-ignore-error";
 
@@ -40,7 +39,7 @@ buildNpmPackage (finalAttrs: {
     description = "Nezha monitoring admin frontend";
     homepage = "https://github.com/nezhahq/admin-frontend";
     changelog = "https://github.com/nezhahq/admin-frontend/releases/tag/v${finalAttrs.version}";
-    license = lib.licenses.wtfpl;
+    license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ moraxyc ];
   };
 })

pkgs/by-name/ne/nezha-theme-admin/update.sh

@@ -17,7 +17,7 @@ trap 'rm -rf -- "${TMPDIR}"' EXIT
 git clone "https://github.com/nezhahq/admin-frontend" -b "v$version" "$TMPDIR/src"
 pushd "$TMPDIR/src"
 rm package-lock.json
-npm install --package-lock-only --ignore-scripts --legacy-peer-deps
+npm install --package-lock-only --ignore-scripts
 popd
 
 cp "$TMPDIR/src/package-lock.json" pkgs/by-name/ne/nezha-theme-admin/

pkgs/by-name/ne/nezha/package.nix

@@ -49,13 +49,13 @@ let
 in
 buildGoModule (finalAttrs: {
   pname = "nezha";
-  version = "2.6.1";
+  version = "2.4.1";
 
   src = fetchFromGitHub {
     owner = "nezhahq";
     repo = "nezha";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-NBGr4gQI0BzGBMU0mwukUtgaqmcMP04iGqGmNWPvp/A=";
+    hash = "sha256-lgt1FJ4JAOzLju46zisup3fI2V0sSWAK0LtSLyssGtY=";
   };
 
   proxyVendor = true;
@@ -124,7 +124,7 @@ buildGoModule (finalAttrs: {
     description = "Self-hosted, lightweight server and website monitoring and O&M tool";
     homepage = "https://github.com/nezhahq/nezha";
     changelog = "https://github.com/nezhahq/nezha/releases/tag/v${finalAttrs.version}";
-    license = lib.licenses.wtfpl;
+    license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ moraxyc ];
     mainProgram = "nezha";
   };

pkgs/by-name/nf/nfs-ganesha/package.nix

@@ -27,18 +27,19 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "nfs-ganesha";
-  version = "15.9"; # nixpkgs-update: no auto update
+  version = "15.7"; # nixpkgs-update: no auto update
 
   outputs = [
     "out"
     "man"
+    "tools"
   ];
 
   src = fetchFromGitHub {
     owner = "nfs-ganesha";
     repo = "nfs-ganesha";
     tag = "V${finalAttrs.version}";
-    hash = "sha256-vyRKYsTidvn/ONwfIg5X1cAwOG76OozUSn4ouiGYGR4=";
+    hash = "sha256-HN6As5qWzDhMLWgGpNR9pOVYKTlDa3wTv6rLAuTqApU=";
     fetchSubmodules = true;
   };
 
@@ -100,6 +101,10 @@ stdenv.mkDerivation (finalAttrs: {
   ]
   ++ lib.optional useCeph ceph;
 
+  postPatch = ''
+    substituteInPlace src/tools/mount.9P --replace-fail "/bin/mount" "/usr/bin/env mount"
+  '';
+
   postFixup = ''
     patchelf --add-rpath $out/lib $out/bin/ganesha.nfsd
     patchelf --add-rpath $out/lib $out/lib/libganesha_nfsd.so
@@ -110,7 +115,10 @@ stdenv.mkDerivation (finalAttrs: {
     patchelf --add-rpath $out/lib $out/lib/libganesha_rados_urls.so
   '';
 
-  postInstall = lib.optionalString useDbus ''
+  postInstall = ''
+    install -Dm755 ../tools/mount.9P $tools/bin/mount.9P
+  ''
+  + lib.optionalString useDbus ''
     # Policy for D-Bus statistics interface
     install -Dm644 $src/src/scripts/ganeshactl/org.ganesha.nfsd.conf $out/etc/dbus-1/system.d/org.ganesha.nfsd.conf
   '';
@@ -122,5 +130,10 @@ stdenv.mkDerivation (finalAttrs: {
     platforms = lib.platforms.linux;
     license = lib.licenses.lgpl3Plus;
     mainProgram = "ganesha.nfsd";
+    outputsToInstall = [
+      "out"
+      "man"
+      "tools"
+    ];
   };
 })

pkgs/by-name/ni/nixtamal/package.nix

@@ -22,7 +22,7 @@
 
 ocamlPackages.buildDunePackage (finalAttrs: {
   pname = "nixtamal";
-  version = "2.4.0";
+  version = "2.3.0";
   release_year = 2026;
 
   minimalOCamlVersion = "5.3";
@@ -31,7 +31,7 @@ ocamlPackages.buildDunePackage (finalAttrs: {
     url = "https://darcs.toastal.in.th/nixtamal/stable/";
     mirrors = [ "https://smeder.ee/~toastal/nixtamal.darcs" ];
     rev = finalAttrs.version;
-    hash = "sha256-XHIs3CW94++3p2tQlDGYYG9eCmqIyV5ofNuPWEAsElI=";
+    hash = "sha256-BYkSrBIN1Pz1gHPPuy/Ay7aXitlZ7ABNGkSl0tqIAVk=";
   };
 
   outputs = [

pkgs/by-name/om/omp/package.nix

@@ -32,7 +32,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "omp";
-  version = "18.14.0";
+  version = "18.13.3";
 
   strictDeps = true;
   __structuredAttrs = true;
@@ -41,12 +41,12 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "can1357";
     repo = "oh-my-pi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Sr8yXXGXOtiNZBLd+fYjEiydEK6L4rhY77M+Yc2URlw=";
+    hash = "sha256-eznAcRki+lfN0LPMclr8woZHin4/7DtXzgUzYjHQ93s=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) src;
-    hash = "sha256-gSbZ2OfUnluswvHcKm37inmfeM1qLmaEw7ksNXsNWas=";
+    hash = "sha256-aX5X8156Sh5hUqtitUjyVidB/FLACLWQWDlDeIax8LE=";
   };
 
   postPatch = ''
@@ -227,7 +227,11 @@ stdenv.mkDerivation (finalAttrs: {
     changelog = "https://github.com/can1357/oh-my-pi/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
     mainProgram = "omp";
-    maintainers = with lib.maintainers; [ adamcstephens ];
+    maintainers = with lib.maintainers; [
+      malix
+      naxdy
+      adamcstephens
+    ];
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"

pkgs/by-name/on/onedpl/package.nix

@@ -8,7 +8,7 @@
 }:
 intelLlvmStdenv.mkDerivation (finalAttrs: {
   pname = "onedpl";
-  version = "2022.14.0";
+  version = "2022.11.1";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -16,8 +16,8 @@ intelLlvmStdenv.mkDerivation (finalAttrs: {
   src = fetchFromGitHub {
     owner = "uxlfoundation";
     repo = "oneDPL";
-    tag = "oneDPL-release-${finalAttrs.version}";
-    hash = "sha256-0MvUSxT1DYXAGJ5JzdYLPm9B8vg3DKTY50bpMp4ysaU=";
+    tag = "oneDPL-${finalAttrs.version}-release";
+    hash = "sha256-NfyV34mdKfCxlU+l6ETKWcC9MwvVEgwcBedtLe6WCV4=";
   };
 
   nativeBuildInputs = [
@@ -39,7 +39,7 @@ intelLlvmStdenv.mkDerivation (finalAttrs: {
   passthru.updateScript = nix-update-script {
     extraArgs = [
       "--version-regex"
-      "oneDPL-release-(\\d+\\.\\d+\\.\\d+)"
+      "'oneDPL-(.*)-release'"
     ];
   };
 

pkgs/by-name/op/open62541/package.nix

@@ -33,19 +33,16 @@ in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "open62541";
-  version = "1.4.22";
+  version = "1.4.20";
 
   src = fetchFromGitHub {
     owner = "open62541";
     repo = "open62541";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-iOrLLCWpXbUfixxAPMm+J3Nu5Crgy4XAB27Izkhj+tI=";
+    hash = "sha256-61NhpyI03gtNh0U/RbZvm9jYA79b20+2NLt1E9oU4fc=";
     fetchSubmodules = true;
   };
 
-  strictDeps = true;
-  __structuredAttrs = true;
-
   cmakeFlags = [
     (lib.cmakeFeature "OPEN62541_VERSION" finalAttrs.src.rev)
     (lib.cmakeFeature "UA_NAMESPACE_ZERO" "FULL")
@@ -153,12 +150,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   __darwinAllowLocalNetworking = true;
 
-  passthru.updateScript = nix-update-script {
-    extraArgs = [
-      "--version-regex"
-      "^v(1[.]4[.][0-9]+)$"
-    ];
-  };
+  passthru.updateScript = nix-update-script { };
 
   passthru.tests =
     let

pkgs/by-name/pa/paratest/composer.lock

@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "74567fa286c2dc837691ef10a6f1037e",
+    "content-hash": "35ad0c8a116635a4ff4b8cdde08d37f9",
     "packages": [
         {
             "name": "fidry/cpu-core-counter",
@@ -365,16 +365,16 @@
         },
         {
             "name": "phpunit/php-code-coverage",
-            "version": "14.5.0",
+            "version": "14.4.1",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/php-code-coverage.git",
-                "reference": "1db2f40af7a6538742e4a634b71ee556d6219be7"
+                "reference": "f1e54f06b6b4cea73cd6104ba3c0cfa0efa6d73f"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/php-code-coverage/zipball/1db2f40af7a6538742e4a634b71ee556d6219be7",
-                "reference": "1db2f40af7a6538742e4a634b71ee556d6219be7",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-code-coverage/zipball/f1e54f06b6b4cea73cd6104ba3c0cfa0efa6d73f",
+                "reference": "f1e54f06b6b4cea73cd6104ba3c0cfa0efa6d73f",
                 "shasum": ""
             },
             "require": {
@@ -387,12 +387,13 @@
                 "phpunit/php-text-template": "^6.0.1",
                 "sebastian/complexity": "^6.0",
                 "sebastian/environment": "^9.3.3",
-                "sebastian/git-state": "^1.1.0",
+                "sebastian/git-state": "^1.0",
                 "sebastian/lines-of-code": "^5.0.2",
-                "sebastian/version": "^7.0.1"
+                "sebastian/version": "^7.0",
+                "theseer/tokenizer": "^2.0.1"
             },
             "require-dev": {
-                "phpunit/phpunit": "^13.4.5"
+                "phpunit/phpunit": "^13.3.6"
             },
             "suggest": {
                 "ext-pcov": "PHP extension that provides line coverage",
@@ -401,7 +402,7 @@
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-main": "14.5.x-dev"
+                    "dev-main": "14.4.x-dev"
                 }
             },
             "autoload": {
@@ -430,7 +431,7 @@
             "support": {
                 "issues": "https://github.com/sebastianbergmann/php-code-coverage/issues",
                 "security": "https://github.com/sebastianbergmann/php-code-coverage/security/policy",
-                "source": "https://github.com/sebastianbergmann/php-code-coverage/tree/14.5.0"
+                "source": "https://github.com/sebastianbergmann/php-code-coverage/tree/14.4.1"
             },
             "funding": [
                 {
@@ -450,7 +451,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-10-30T08:11:15+00:00"
+            "time": "2026-10-03T14:05:38+00:00"
         },
         {
             "name": "phpunit/php-file-iterator",
@@ -747,16 +748,16 @@
         },
         {
             "name": "phpunit/phpunit",
-            "version": "13.4.5",
+            "version": "13.4.3",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/phpunit.git",
-                "reference": "941457a4f147a60fe2074d40e1fce0d08ea8d930"
+                "reference": "2180c47c4229e5da117ff248753370443c074f10"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/phpunit/zipball/941457a4f147a60fe2074d40e1fce0d08ea8d930",
-                "reference": "941457a4f147a60fe2074d40e1fce0d08ea8d930",
+                "url": "https://api.github.com/repos/sebastianbergmann/phpunit/zipball/2180c47c4229e5da117ff248753370443c074f10",
+                "reference": "2180c47c4229e5da117ff248753370443c074f10",
                 "shasum": ""
             },
             "require": {
@@ -781,7 +782,7 @@
                 "sebastian/environment": "^9.3.3",
                 "sebastian/exporter": "^8.2.1",
                 "sebastian/file-filter": "^1.0",
-                "sebastian/git-state": "^1.1",
+                "sebastian/git-state": "^1.0",
                 "sebastian/global-state": "^9.0.1",
                 "sebastian/object-enumerator": "^8.1.0",
                 "sebastian/recursion-context": "^8.0.1",
@@ -827,7 +828,7 @@
             "support": {
                 "issues": "https://github.com/sebastianbergmann/phpunit/issues",
                 "security": "https://github.com/sebastianbergmann/phpunit/security/policy",
-                "source": "https://github.com/sebastianbergmann/phpunit/tree/13.4.5"
+                "source": "https://github.com/sebastianbergmann/phpunit/tree/13.4.3"
             },
             "funding": [
                 {
@@ -835,7 +836,7 @@
                     "type": "other"
                 }
             ],
-            "time": "2026-10-27T04:16:22+00:00"
+            "time": "2026-10-16T05:56:47+00:00"
         },
         {
             "name": "psr/container",
@@ -1437,28 +1438,28 @@
         },
         {
             "name": "sebastian/git-state",
-            "version": "1.1.0",
+            "version": "1.0.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/sebastianbergmann/git-state.git",
-                "reference": "31a565f463686f0eefa85f899549256bf5805985"
+                "reference": "792a952e0eba55b6960a48aeceb9f371aad1f76b"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/sebastianbergmann/git-state/zipball/31a565f463686f0eefa85f899549256bf5805985",
-                "reference": "31a565f463686f0eefa85f899549256bf5805985",
+                "url": "https://api.github.com/repos/sebastianbergmann/git-state/zipball/792a952e0eba55b6960a48aeceb9f371aad1f76b",
+                "reference": "792a952e0eba55b6960a48aeceb9f371aad1f76b",
                 "shasum": ""
             },
             "require": {
                 "php": ">=8.4"
             },
             "require-dev": {
-                "phpunit/phpunit": "^13.4.3"
+                "phpunit/phpunit": "^13.0"
             },
             "type": "library",
             "extra": {
                 "branch-alias": {
-                    "dev-main": "1.1-dev"
+                    "dev-main": "1.0-dev"
                 }
             },
             "autoload": {
@@ -1482,7 +1483,7 @@
             "support": {
                 "issues": "https://github.com/sebastianbergmann/git-state/issues",
                 "security": "https://github.com/sebastianbergmann/git-state/security/policy",
-                "source": "https://github.com/sebastianbergmann/git-state/tree/1.1.0"
+                "source": "https://github.com/sebastianbergmann/git-state/tree/1.0.0"
             },
             "funding": [
                 {
@@ -1502,7 +1503,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-10-21T05:59:52+00:00"
+            "time": "2026-03-21T12:54:28+00:00"
         },
         {
             "name": "sebastian/global-state",
@@ -2050,16 +2051,16 @@
         },
         {
             "name": "symfony/console",
-            "version": "v8.1.10",
+            "version": "v8.1.9",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/console.git",
-                "reference": "5b6d9b127ec27bc6db59bf65e2e37b6fe5b00083"
+                "reference": "630e74196a2635ec0f06c12bd3fb47cfedf85157"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/console/zipball/5b6d9b127ec27bc6db59bf65e2e37b6fe5b00083",
-                "reference": "5b6d9b127ec27bc6db59bf65e2e37b6fe5b00083",
+                "url": "https://api.github.com/repos/symfony/console/zipball/630e74196a2635ec0f06c12bd3fb47cfedf85157",
+                "reference": "630e74196a2635ec0f06c12bd3fb47cfedf85157",
                 "shasum": ""
             },
             "require": {
@@ -2126,7 +2127,7 @@
                 "terminal"
             ],
             "support": {
-                "source": "https://github.com/symfony/console/tree/v8.1.10"
+                "source": "https://github.com/symfony/console/tree/v8.1.9"
             },
             "funding": [
                 {
@@ -2146,7 +2147,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-10-28T11:16:19+00:00"
+            "time": "2026-10-12T19:11:16+00:00"
         },
         {
             "name": "symfony/deprecation-contracts",
@@ -2304,16 +2305,16 @@
         },
         {
             "name": "symfony/polyfill-intl-grapheme",
-            "version": "v1.43.3",
+            "version": "v1.43.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/polyfill-intl-grapheme.git",
-                "reference": "5a8f33c87aeecffce24e721b5064fab05f4becf8"
+                "reference": "5cac8f4db97208823aa353f59a01faad2da52c75"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/polyfill-intl-grapheme/zipball/5a8f33c87aeecffce24e721b5064fab05f4becf8",
-                "reference": "5a8f33c87aeecffce24e721b5064fab05f4becf8",
+                "url": "https://api.github.com/repos/symfony/polyfill-intl-grapheme/zipball/5cac8f4db97208823aa353f59a01faad2da52c75",
+                "reference": "5cac8f4db97208823aa353f59a01faad2da52c75",
                 "shasum": ""
             },
             "require": {
@@ -2362,7 +2363,7 @@
                 "shim"
             ],
             "support": {
-                "source": "https://github.com/symfony/polyfill-intl-grapheme/tree/v1.43.3"
+                "source": "https://github.com/symfony/polyfill-intl-grapheme/tree/v1.43.0"
             },
             "funding": [
                 {
@@ -2382,7 +2383,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-10-15T09:18:53+00:00"
+            "time": "2026-09-25T15:46:47+00:00"
         },
         {
             "name": "symfony/polyfill-intl-normalizer",
@@ -2471,16 +2472,16 @@
         },
         {
             "name": "symfony/polyfill-mbstring",
-            "version": "v1.43.3",
+            "version": "v1.43.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/polyfill-mbstring.git",
-                "reference": "122889ed24dc000165bcbfd77ec412f15cbdfc6a"
+                "reference": "4d5d331bf731e0aedbc6b2f5e61135b7b7996a72"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/polyfill-mbstring/zipball/122889ed24dc000165bcbfd77ec412f15cbdfc6a",
-                "reference": "122889ed24dc000165bcbfd77ec412f15cbdfc6a",
+                "url": "https://api.github.com/repos/symfony/polyfill-mbstring/zipball/4d5d331bf731e0aedbc6b2f5e61135b7b7996a72",
+                "reference": "4d5d331bf731e0aedbc6b2f5e61135b7b7996a72",
                 "shasum": ""
             },
             "require": {
@@ -2532,7 +2533,7 @@
                 "shim"
             ],
             "support": {
-                "source": "https://github.com/symfony/polyfill-mbstring/tree/v1.43.3"
+                "source": "https://github.com/symfony/polyfill-mbstring/tree/v1.43.0"
             },
             "funding": [
                 {
@@ -2552,7 +2553,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-10-28T09:35:49+00:00"
+            "time": "2026-09-24T15:19:04+00:00"
         },
         {
             "name": "symfony/polyfill-php85",
@@ -2636,16 +2637,16 @@
         },
         {
             "name": "symfony/process",
-            "version": "v8.1.10",
+            "version": "v8.1.9",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/process.git",
-                "reference": "08aa69fa0998bb65a089f9e148a2c0f8b391398e"
+                "reference": "59a682fd049b2d4d37c444f5ac21b7d01b8c7189"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/process/zipball/08aa69fa0998bb65a089f9e148a2c0f8b391398e",
-                "reference": "08aa69fa0998bb65a089f9e148a2c0f8b391398e",
+                "url": "https://api.github.com/repos/symfony/process/zipball/59a682fd049b2d4d37c444f5ac21b7d01b8c7189",
+                "reference": "59a682fd049b2d4d37c444f5ac21b7d01b8c7189",
                 "shasum": ""
             },
             "require": {
@@ -2677,7 +2678,7 @@
             "description": "Executes commands in sub-processes",
             "homepage": "https://symfony.com",
             "support": {
-                "source": "https://github.com/symfony/process/tree/v8.1.10"
+                "source": "https://github.com/symfony/process/tree/v8.1.9"
             },
             "funding": [
                 {
@@ -2697,7 +2698,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-10-25T14:40:25+00:00"
+            "time": "2026-10-08T16:57:43+00:00"
         },
         {
             "name": "symfony/service-contracts",
@@ -2788,16 +2789,16 @@
         },
         {
             "name": "symfony/string",
-            "version": "v8.1.10",
+            "version": "v8.1.9",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/string.git",
-                "reference": "6c6110979c0150393bbb336170e286d51ab4d76c"
+                "reference": "07fb208558f941eab50ec49c89c2a6a93fb11f01"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/string/zipball/6c6110979c0150393bbb336170e286d51ab4d76c",
-                "reference": "6c6110979c0150393bbb336170e286d51ab4d76c",
+                "url": "https://api.github.com/repos/symfony/string/zipball/07fb208558f941eab50ec49c89c2a6a93fb11f01",
+                "reference": "07fb208558f941eab50ec49c89c2a6a93fb11f01",
                 "shasum": ""
             },
             "require": {
@@ -2854,7 +2855,7 @@
                 "utf8"
             ],
             "support": {
-                "source": "https://github.com/symfony/string/tree/v8.1.10"
+                "source": "https://github.com/symfony/string/tree/v8.1.9"
             },
             "funding": [
                 {
@@ -2874,7 +2875,57 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-10-23T17:06:53+00:00"
+            "time": "2026-10-03T15:16:03+00:00"
+        },
+        {
+            "name": "theseer/tokenizer",
+            "version": "2.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/theseer/tokenizer.git",
+                "reference": "7989e43bf381af0eac72e4f0ca5bcbfa81658be4"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/theseer/tokenizer/zipball/7989e43bf381af0eac72e4f0ca5bcbfa81658be4",
+                "reference": "7989e43bf381af0eac72e4f0ca5bcbfa81658be4",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "ext-tokenizer": "*",
+                "ext-xmlwriter": "*",
+                "php": "^8.1"
+            },
+            "type": "library",
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Arne Blankerts",
+                    "email": "arne@blankerts.de",
+                    "role": "Developer"
+                }
+            ],
+            "description": "A small library for converting tokenized PHP source code into XML and potentially other formats",
+            "support": {
+                "issues": "https://github.com/theseer/tokenizer/issues",
+                "source": "https://github.com/theseer/tokenizer/tree/2.0.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/theseer",
+                    "type": "github"
+                }
+            ],
+            "time": "2025-12-08T11:19:18+00:00"
         }
     ],
     "packages-dev": [
@@ -3032,16 +3083,16 @@
         },
         {
             "name": "phpstan/phpdoc-parser",
-            "version": "2.4.1",
+            "version": "2.3.6",
             "source": {
                 "type": "git",
                 "url": "https://github.com/phpstan/phpdoc-parser.git",
-                "reference": "af8e840551031d254cfdb3a18a62c3470a309c10"
+                "reference": "1427af4647235b4a73b13940b1f1258d3584f36e"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpdoc-parser/zipball/af8e840551031d254cfdb3a18a62c3470a309c10",
-                "reference": "af8e840551031d254cfdb3a18a62c3470a309c10",
+                "url": "https://api.github.com/repos/phpstan/phpdoc-parser/zipball/1427af4647235b4a73b13940b1f1258d3584f36e",
+                "reference": "1427af4647235b4a73b13940b1f1258d3584f36e",
                 "shasum": ""
             },
             "require": {
@@ -3073,17 +3124,17 @@
             "description": "PHPDoc parser with support for nullable, intersection and generic types",
             "support": {
                 "issues": "https://github.com/phpstan/phpdoc-parser/issues",
-                "source": "https://github.com/phpstan/phpdoc-parser/tree/2.4.1"
+                "source": "https://github.com/phpstan/phpdoc-parser/tree/2.3.6"
             },
-            "time": "2026-10-30T19:36:28+00:00"
+            "time": "2026-09-27T20:07:45+00:00"
         },
         {
             "name": "phpstan/phpstan",
-            "version": "2.3.4",
+            "version": "2.3.1",
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/f20ce6f3c82556cfcfc086b152445a12d1d64fff",
-                "reference": "f20ce6f3c82556cfcfc086b152445a12d1d64fff",
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/6155239b488e95d26d1ebd95c6b4bb294d7f09db",
+                "reference": "6155239b488e95d26d1ebd95c6b4bb294d7f09db",
                 "shasum": ""
             },
             "require": {
@@ -3139,7 +3190,7 @@
                     "type": "github"
                 }
             ],
-            "time": "2026-10-28T22:38:53+00:00"
+            "time": "2026-10-08T21:09:11+00:00"
         },
         {
             "name": "phpstan/phpstan-deprecation-rules",
@@ -3304,32 +3355,32 @@
         },
         {
             "name": "slevomat/coding-standard",
-            "version": "8.31.3",
+            "version": "8.31.1",
             "source": {
                 "type": "git",
                 "url": "https://github.com/slevomat/coding-standard.git",
-                "reference": "b5c34b28811ee2ed323c52c7dabe2f2802dd2f8a"
+                "reference": "0a40807a48873948bfa7ffce2a4e69ba40cf5e76"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/slevomat/coding-standard/zipball/b5c34b28811ee2ed323c52c7dabe2f2802dd2f8a",
-                "reference": "b5c34b28811ee2ed323c52c7dabe2f2802dd2f8a",
+                "url": "https://api.github.com/repos/slevomat/coding-standard/zipball/0a40807a48873948bfa7ffce2a4e69ba40cf5e76",
+                "reference": "0a40807a48873948bfa7ffce2a4e69ba40cf5e76",
                 "shasum": ""
             },
             "require": {
                 "dealerdirect/phpcodesniffer-composer-installer": "^0.7 || ^1.2.1",
                 "php": "^7.4 || ^8.0",
-                "phpstan/phpdoc-parser": "^2.3.6",
-                "squizlabs/php_codesniffer": "^4.0.4"
+                "phpstan/phpdoc-parser": "^2.3.3",
+                "squizlabs/php_codesniffer": "^4.0.1"
             },
             "require-dev": {
                 "phing/phing": "3.0.1|3.1.2",
                 "php-parallel-lint/php-parallel-lint": "1.4.0",
-                "phpstan/phpstan": "2.3.2",
+                "phpstan/phpstan": "2.2.7",
                 "phpstan/phpstan-deprecation-rules": "2.0.5",
-                "phpstan/phpstan-phpunit": "2.1.1",
-                "phpstan/phpstan-strict-rules": "2.1.0",
-                "phpunit/phpunit": "9.6.38|10.5.66|11.4.4|11.5.57|12.5.40"
+                "phpstan/phpstan-phpunit": "2.0.18",
+                "phpstan/phpstan-strict-rules": "2.0.12",
+                "phpunit/phpunit": "9.6.34|10.5.63|11.4.4|11.5.56|12.5.33"
             },
             "type": "phpcodesniffer-standard",
             "extra": {
@@ -3353,7 +3404,7 @@
             ],
             "support": {
                 "issues": "https://github.com/slevomat/coding-standard/issues",
-                "source": "https://github.com/slevomat/coding-standard/tree/8.31.3"
+                "source": "https://github.com/slevomat/coding-standard/tree/8.31.1"
             },
             "funding": [
                 {
@@ -3365,7 +3416,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-10-28T16:34:46+00:00"
+            "time": "2026-07-31T10:42:43+00:00"
         },
         {
             "name": "squizlabs/php_codesniffer",

pkgs/by-name/pa/paratest/package.nix

@@ -8,17 +8,17 @@
 (php.withExtensions ({ enabled, all }: enabled ++ [ all.pcov ])).buildComposerProject2
   (finalAttrs: {
     pname = "paratest";
-    version = "7.27.5";
+    version = "7.27.2";
 
     src = fetchFromGitHub {
       owner = "paratestphp";
       repo = "paratest";
       tag = "v${finalAttrs.version}";
-      hash = "sha256-jbVCd0fJra0fgTSNnir5BhjWQWxNK47UvGJ6NZdeKQo=";
+      hash = "sha256-I5V6Fhqf6zJsFCh7yrfYR/LXttEdoCl1AsDOlcJgGmU=";
     };
 
     composerLock = ./composer.lock;
-    vendorHash = "sha256-ufWRDX7+bLDbXB8EGopQu5WxS6SnHJpzLgs9Ff7dugk=";
+    vendorHash = "sha256-XBVrcebnGtc1wJtLTvBHitj/JR6LqP7a9kzGluZeEGk=";
 
     passthru.updateScript = ./update.sh;
 

pkgs/by-name/pd/pdfsandwich/package.nix

@@ -50,7 +50,7 @@ stdenv.mkDerivation {
     description = "OCR tool for scanned PDFs";
     homepage = "http://www.tobias-elze.de/pdfsandwich/";
     license = lib.licenses.gpl2Plus;
-    maintainers = [ ];
+    maintainers = [ lib.maintainers.rps ];
     platforms = lib.platforms.linux;
     mainProgram = "pdfsandwich";
   };

pkgs/by-name/pe/pev/package.nix

@@ -29,7 +29,7 @@ stdenv.mkDerivation {
     description = "Full-featured, open source, multiplatform command line toolkit to work with PE (Portable Executables) binaries";
     homepage = "https://pev.sourceforge.net/";
     license = lib.licenses.gpl2;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ jeschli ];
     platforms = lib.platforms.linux;
   };
 }

pkgs/by-name/pg/pgsql-tools/package.nix

@@ -3,7 +3,6 @@
   lib,
   fetchurl,
   autoPatchelfHook,
-  cacert,
   libxcrypt-legacy,
   makeBinaryWrapper,
   openssl,
@@ -93,11 +92,6 @@ stdenv.mkDerivation (finalAttrs: {
     popd
   '';
 
-  preFixup = ''
-    rm $out/lib/pgsql-tools/_internal/certifi/cacert.pem
-    ln -s ${cacert}/etc/ssl/certs/ca-bundle.crt $out/lib/pgsql-tools/_internal/certifi/cacert.pem
-  '';
-
   dontAutoPatchelf = true;
 
   postFixup = lib.optionalString stdenv.hostPlatform.isLinux ''

pkgs/by-name/pi/pipewire-control-center/package.nix

@@ -13,7 +13,7 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "pipewire-control-center";
-  version = "0.6.3";
+  version = "0.6.1";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -21,7 +21,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     owner = "knightinfected";
     repo = "PipeWireController";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-1r3aHVhirJW8HJZ/Y25sNT/v/sFt0Nr0o8149FPntWo=";
+    hash = "sha256-FAb7Ys4G61Qvc0aNPTCMlhOLPxuQmdZy8LU2azZ+vbc=";
   };
 
   build-system = [

pkgs/by-name/pl/pleroma/mix.nix

@@ -46,12 +46,12 @@ let
 
       bandit = buildMix rec {
         name = "bandit";
-        version = "1.14.0";
+        version = "1.13.1";
 
         src = fetchHex {
           pkg = "bandit";
           version = "${version}";
-          sha256 = "2d07630e4bf77b55240881386f7629bcc2f87426a299860b2d31c4ad77a48746";
+          sha256 = "39028f0b5a21404661410a6c19275060a9822c9dcca70b7c3e4e4fa50b11da58";
         };
 
         beamDeps = [
@@ -854,12 +854,12 @@ let
 
       h2 = buildRebar3 rec {
         name = "h2";
-        version = "0.12.5";
+        version = "0.11.0";
 
         src = fetchHex {
           pkg = "h2";
           version = "${version}";
-          sha256 = "a4524bf80cafb86e599710c1d5c9f63aca0284607cb4d99fb53ae63fd55aa03f";
+          sha256 = "c61f24361d0dc76375eaf35c2bf0e01235d81b7685538df571db036467fac358";
         };
 
         beamDeps = [ ];
@@ -867,12 +867,12 @@ let
 
       hackney = buildRebar3 rec {
         name = "hackney";
-        version = "4.9.1";
+        version = "4.7.3";
 
         src = fetchHex {
           pkg = "hackney";
           version = "${version}";
-          sha256 = "093e1830e523c2b1972d570dcee83d000d41f7b39e7eb3c6b5240cf0f64a1973";
+          sha256 = "3f460e01d5a1abba39c32d06e9a733bb76e35d1ab87a83868b6bb29d646fe25f";
         };
 
         beamDeps = [
@@ -881,7 +881,6 @@ let
           idna
           mimerl
           parse_trans
-          quic
           ssl_verify_fun
           webtransport
         ];
@@ -1858,12 +1857,12 @@ let
 
       quic = buildRebar3 rec {
         name = "quic";
-        version = "2.1.3";
+        version = "1.8.0";
 
         src = fetchHex {
           pkg = "quic";
           version = "${version}";
-          sha256 = "1520df50fc63093c0a4d209cb97056e132d06f0b8fd54c5cf933ddc0c0ea6fe2";
+          sha256 = "6b1f8f08a45412ac503bc6771efb8edc696bb14079bc48d2ca960b92933da8a4";
         };
 
         beamDeps = [ ];
@@ -2257,12 +2256,12 @@ let
 
       webtransport = buildRebar3 rec {
         name = "webtransport";
-        version = "0.4.8";
+        version = "0.4.4";
 
         src = fetchHex {
           pkg = "webtransport";
           version = "${version}";
-          sha256 = "08477a2195ccbf944da0b78f85dc4e6ee4498790e3dd7fe84ee7a245938e1b26";
+          sha256 = "80a6641e0f6628938ceee4c9d7a4f6d48a6089890da1ae3288ca8dab13a6005e";
         };
 
         beamDeps = [

pkgs/by-name/pl/pleroma/package.nix

@@ -19,14 +19,14 @@ let
 in
 beamPackages.mixRelease rec {
   pname = "pleroma";
-  version = "2.11.1";
+  version = "2.11.0";
 
   src = fetchFromForgejo {
     domain = "git.pleroma.social";
     owner = "pleroma";
     repo = "pleroma";
     rev = "v${version}";
-    hash = "sha256-oXMg6NJZZW8aQu8AONaqgty6JYp2C9uB6NK7LaM0Zpc=";
+    hash = "sha256-yQcvmoqKepL5l1YbWsgTBN0XGKSBLF4Rz9n+SJTcfo0=";
   };
 
   patches = [ ./Revert-Config-Restrict-permissions-of-OTP-config.patch ];

pkgs/by-name/po/podman-desktop/package.nix

@@ -3,9 +3,9 @@
   stdenv,
   fetchFromGitHub,
   makeBinaryWrapper,
-  electron_44,
+  electron_43,
   nodejs-slim_26,
-  pnpm_12,
+  pnpm_11,
   fetchPnpmDeps,
   pnpmConfigHook,
   darwin,
@@ -22,13 +22,13 @@
 
 let
   nodejs-slim = nodejs-slim_26;
-  pnpm = pnpm_12.override { inherit nodejs-slim; };
-  electron = electron_44;
+  pnpm = pnpm_11.override { inherit nodejs-slim; };
+  electron = electron_43;
   appName = "Podman Desktop";
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "podman-desktop";
-  version = "1.30.5";
+  version = "1.29.3";
 
   passthru.updateScript = _experimental-update-script-combinators.sequence [
     (nix-update-script { extraArgs = [ "--use-github-releases" ]; })
@@ -68,14 +68,14 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "podman-desktop";
     repo = "podman-desktop";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-iQe3HU31iEDwbZbnhQypvvqiGXnF4yFG+4NWlVZVlkE=";
+    hash = "sha256-7fyRrO4qd4sxsVtVuACZUgOzDVC5vGYQi39a+gTCPsM=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     inherit pnpm;
     fetcherVersion = 4;
-    hash = "sha256-uMT0tfsUXJm/QylNJ4I/5nzyEBNs6R6YqvrbdV33tcs=";
+    hash = "sha256-W5Hl/6sMfpHsf6OZ+u9nP0FN1U0Mv3c30j5cABWBS9A=";
   };
 
   patches = [

pkgs/by-name/po/poly/package.nix

@@ -50,6 +50,6 @@ stdenv.mkDerivation rec {
     '';
     homepage = "http://www.fontsquirrel.com/fonts/poly";
     license = lib.licenses.ofl;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ relrod ];
   };
 }

pkgs/by-name/pr/proto/package.nix

@@ -11,16 +11,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "proto";
-  version = "0.63.2";
+  version = "0.63.1";
 
   src = fetchFromGitHub {
     owner = "moonrepo";
     repo = "proto";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-tH+lgtFXHswFBxbzX61EOseYNBMB4TM3jJeacaZzYCM=";
+    hash = "sha256-Ou5v9gyrtUm/Xrt3scm8GC6AxjfZMCJHT0MdP7vL9sM=";
   };
 
-  cargoHash = "sha256-01FRY1sNxEgajZPvFk9WIywvJwlKb5pTPQALhSZtZ0s=";
+  cargoHash = "sha256-N1YKoU7A9M4EQB29nccXU4Gbt4c/Cnyjvhj0wFcTnoY=";
 
   buildInputs = lib.optionals stdenv.hostPlatform.isDarwin [
     libiconv

pkgs/by-name/q2/q2repro/package.nix

@@ -9,7 +9,7 @@
   libpng,
   libjpeg,
   curl,
-  sdl3,
+  SDL2,
   openal-soft,
   libGL,
   fmt,
@@ -32,7 +32,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "q2repro";
-  version = "0-unstable-2026-10-07";
+  version = "0-unstable-2026-09-27";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -40,14 +40,14 @@ stdenv.mkDerivation (finalAttrs: {
   src = fetchFromGitHub {
     owner = "Paril";
     repo = "q2repro";
-    rev = "2f77156bc0a98e62a866043af7a3ee01a75b48af";
+    rev = "e6b9273672a1d6ea65038ce9033979b25f1b94be";
     fetchSubmodules = true;
-    hash = "sha256-x4q5c2BJaY9+2ujEdQwpWe6KmdOk6fEt4Bm7Y0l+teg=";
+    hash = "sha256-PeA2EuA7XBH9fhorkPtMD6UvHgajYwMtf8MRBXnCr28=";
   };
 
   # build date and rev number is displayed in the game's console
-  revCount = "4621"; # git rev-list --count ${src.rev}
-  env.SOURCE_DATE_EPOCH = "1791403645"; # git show -s --format=%ct ${src.rev}
+  revCount = "4613"; # git rev-list --count ${src.rev}
+  env.SOURCE_DATE_EPOCH = "1790475158"; # git show -s --format=%ct ${src.rev}
 
   nativeBuildInputs = [
     meson
@@ -64,7 +64,7 @@ stdenv.mkDerivation (finalAttrs: {
     libpng
     libjpeg
     curl
-    sdl3
+    SDL2
     libGL
     ffmpeg
     openal-soft

pkgs/by-name/s9/s9fes/package.nix

@@ -12,11 +12,11 @@ in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "s9fes";
-  version = "20250812";
+  version = "20181205";
 
   src = fetchurl {
     url = "https://www.t3x.org/s9fes/s9fes-${finalAttrs.version}.tgz";
-    sha256 = "sha256-M9jaOeH9Sjy06pGMV7COaSY9oMQC+8GmlGpVnY0JAa0=";
+    sha256 = "sha256-Lp/akaDy3q4FmIE6x0fj9ae/SOD7tdsmzy2xdcCh13o=";
   };
 
   # Fix cross-compilation
@@ -37,14 +37,14 @@ stdenv.mkDerivation (finalAttrs: {
   ];
 
   enableParallelBuilding = true;
-  # ...-bash-5.2-p15/bin/bash: line 1: ...-s9fes-20250812/bin/s9help: No such file or directory
+  # ...-bash-5.2-p15/bin/bash: line 1: ...-s9fes-20181205/bin/s9help: No such file or directory
   # make: *** [Makefile:157: install-util] Error 1
   enableParallelInstalling = false;
 
   meta = {
     description = "Scheme 9 From Empty Space, an interpreter for R4RS Scheme";
     homepage = "http://www.t3x.org/s9fes/index.html";
-    license = lib.licenses.bsd0;
+    license = lib.licenses.publicDomain;
     maintainers = with lib.maintainers; [ siraben ];
     platforms = lib.platforms.unix;
   };

pkgs/by-name/sc/scraper/package.nix

@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "scraper";
-  version = "0.29.0";
+  version = "0.27.0";
 
   src = fetchFromGitHub {
     owner = "rust-scraper";
     repo = "scraper";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-LEmoVYk93J309d0ThBvycSbzhIX25YVAY/HMoC09qM4=";
+    hash = "sha256-6gCoF+Uafw0WISuksBh4kwF7TL6N73Y8CpkcKe8Nyqw=";
   };
 
-  cargoHash = "sha256-DXKXAvtjILlk5C14EjSZpgGPV0Hltg+KE1GAb1OYgao=";
+  cargoHash = "sha256-Mse6pO9VXturMxMpPe3zaNTsvRpADdns1zu/pX4mfgE=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/sc/screenfetch/package.nix

@@ -94,7 +94,7 @@ stdenv.mkDerivation (finalAttrs: {
     '';
     license = lib.licenses.gpl3;
     homepage = "https://github.com/KittyKatt/screenFetch";
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ relrod ];
     platforms = lib.platforms.all;
     mainProgram = "screenfetch";
   };

pkgs/by-name/sc/sculpin/package.nix

@@ -8,16 +8,16 @@ php.buildComposerProject2 rec {
   __structuredAttrs = true;
 
   pname = "sculpin";
-  version = "3.3.2";
+  version = "3.3.1";
 
   src = fetchFromGitHub {
     owner = "sculpin";
     repo = "sculpin";
     tag = version;
-    hash = "sha256-r7dCw8C5ia5TzMajfdBQ15yBXh+jbBPViSQQknuH+Qs=";
+    hash = "sha256-WoLqLe6UGzlDTRNpB75O2CT31EZkpHQZ6vPQIK/K/8Q=";
   };
 
-  vendorHash = "sha256-mUtZbSwqywbdIe2J3VksqV3az8WJSMDv2nMNZQL+y08=";
+  vendorHash = "sha256-y2W4GZNC7atxHkboNVWd2CWPDqWU2XIyWGC5Q47QqQs=";
 
   meta = {
     description = "PHP static site generator";

pkgs/by-name/se/september/package.nix

@@ -9,17 +9,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "september";
-  version = "0.5.4";
+  version = "0.5.3";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "gemrest";
     repo = "september";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ea/gvHtjUGTIrSP949Woi0gRWR5RXibHlCcRJAK3pIk=";
+    hash = "sha256-Y9dn8ix/cZ+WD81/zIeeWk2ggPHXPP9D5gT9xEuc7+k=";
   };
 
-  cargoHash = "sha256-5CjaVOMk++47ekTzvZWFQU4WHcCOcUgpS6zOqBNwW34=";
+  cargoHash = "sha256-iSrqiCIALvhl2mYmJydExsbAORTXen1j5UG5Mc45As0=";
 
   nativeBuildInputs = [
     pkg-config