openvino: forbid compiler references (#568213)

This is a dependency of firefox, which forbids compiler references, so
we hoist the same disallowedRequisites requirement here to catch
regressions earlier.

Thanks to K900 for the CMake option that avoids embedding build options,
as was happening in the previous SCons build. Now that SCons is no
longer needed, we can remove it entirely from the build.

Co-authored-by: K900 <me@0upti.me>

maintainers/maintainer-list.nix

@@ -18773,6 +18773,13 @@
     github = "mfairley";
     githubId = 4374785;
   };
+  mfocko = {
+    name = "Matej Focko";
+    github = "mfocko";
+    githubId = 8149784;
+    email = "me@mfocko.xyz";
+    matrix = "@mfocko:fedora.im";
+  };
   mfossen = {
     email = "msfossen@gmail.com";
     github = "mfossen";
@@ -26017,6 +26024,12 @@
     githubId = 11632726;
     name = "Arijit Basu";
   };
+  saylesss88 = {
+    email = "saylesss87@proton.me";
+    github = "saylesss88";
+    githubId = 209646716;
+    name = "T. Sawyer";
+  };
   sb0 = {
     email = "sb@m-labs.hk";
     github = "sbourdeauducq";

nixos/modules/services/monitoring/telegraf.nix

@@ -11,6 +11,10 @@ let
   configFile = settingsFormat.generate "config.toml" cfg.extraConfig;
 in
 {
+  meta = {
+    inherit (pkgs.telegraf.meta) maintainers;
+  };
+
   ###### interface
   options = {
     services.telegraf = {

nixos/tests/linux-builder-vz-store-gc.nix

@@ -1,12 +1,15 @@
-{ lib, ... }:
+{ hostPkgs, lib, ... }:
 
 {
   # Strictly speaking, this is not a precise test for VZ builder, but we don't
   # have vzvm backend for nixos tests, so we use qemu here, with config that
   # matches linux-builder-vz disk layout.
   name = "linux-builder-vz-store-gc";
+  meta.maintainers = hostPkgs.darwin.linux-builder-vz.meta.maintainers;
 
   nodes.machine = {
+    nix.enable = true;
+
     virtualisation = {
       # Match the vz-vm drive order: the read-only store image is /dev/vda,
       # followed by the writable data disk at /dev/vdb.

nixos/tests/telegraf.nix

@@ -1,8 +1,8 @@
 { pkgs, ... }:
 {
   name = "telegraf";
-  meta = with pkgs.lib.maintainers; {
-    maintainers = [ mic92 ];
+  meta = {
+    inherit (pkgs.telegraf.meta) maintainers;
   };
 
   containers.machine =

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -218,13 +218,13 @@
     "vendorHash": "sha256-scHNFyHn4VYm8wtuBdVCpgKCzwPhzrC3KBs1YHXPwos="
   },
   "cloudflare_cloudflare": {
-    "hash": "sha256-F/Qkcu9XHxWrVbGVqWw2/AB1CDcY4hKm5cGDDtnsxP8=",
+    "hash": "sha256-cazO/sszoutiwMYjM709aHNzKIpOzZbB/5nHDEgbm08=",
     "homepage": "https://registry.terraform.io/providers/cloudflare/cloudflare",
     "owner": "cloudflare",
     "repo": "terraform-provider-cloudflare",
-    "rev": "v5.25.0",
+    "rev": "v5.26.0",
     "spdx": "Apache-2.0",
-    "vendorHash": "sha256-FGt4e+WyF5Wx3jw+U+L2kdybOnnAW/AA+mBeVbRQI0Y="
+    "vendorHash": "sha256-9blJRFzwwOcdFAB93C109qqXsh2tYft1bTOldvW0a/Y="
   },
   "cloudfoundry-community_cloudfoundry": {
     "hash": "sha256-1nYncJLVU/f9WD6Quh9IieIXgixPzbPk4zbtI1zmf9g=",

pkgs/by-name/ag/agentaps/package.nix

@@ -0,0 +1,89 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  fetchpatch,
+  git,
+  pkg-config,
+  makeWrapper,
+  versionCheckHook,
+  fontconfig,
+  freetype,
+  libGL,
+  libxcb,
+  libxkbcommon,
+  vulkan-loader,
+  wayland,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "agentaps";
+  version = "0.3.1";
+
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "domenkozar";
+    repo = "agentaps";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-pHESE5ML5zeDylz07t8k1jJop/IGyIhTTffPN4dWrY0=";
+  };
+
+  cargoHash = "sha256-ko+ytnpQGLIA41+aurIcY5Rp0Aemf7Z4PFC5GdLFLvw=";
+
+  patches = [
+    # Add --version support until the next release.
+    (fetchpatch {
+      url = "https://github.com/domenkozar/agentaps/commit/1665c2792929226d675d427e0eef42cd3ede7a71.patch";
+      hash = "sha256-+wL5G6Ln9uuWxt2fRW2QPbD54Zif51hGxcNAC3Q3f84=";
+      includes = [ "src/main.rs" ];
+    })
+  ];
+
+  nativeBuildInputs = [
+    makeWrapper
+    pkg-config
+  ];
+
+  buildInputs = [
+    fontconfig
+    freetype
+    libGL
+    libxcb
+    libxkbcommon
+    vulkan-loader
+    wayland
+  ];
+
+  nativeCheckInputs = [ git ];
+
+  # The login shell test requires /bin/sh and /usr/bin/env, which are absent in the sandbox.
+  checkFlags = [ "--skip=shell_env::tests::reads_path_from_a_login_shell" ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
+  postFixup = ''
+    wrapProgram "$out/bin/agentaps" \
+      --suffix LD_LIBRARY_PATH : "${
+        lib.makeLibraryPath [
+          libGL
+          libxcb
+          libxkbcommon
+          vulkan-loader
+          wayland
+        ]
+      }"
+  '';
+
+  meta = {
+    description = "Desktop client for Agent Client Protocol agents";
+    homepage = "https://github.com/domenkozar/agentaps";
+    changelog = "https://github.com/domenkozar/agentaps/blob/v${finalAttrs.version}/CHANGELOG.md";
+    license = lib.licenses.asl20;
+    mainProgram = "agentaps";
+    maintainers = with lib.maintainers; [ domenkozar ];
+    platforms = lib.platforms.linux;
+  };
+})

pkgs/by-name/ag/agentsploit/package.nix

@@ -63,6 +63,8 @@ python3Packages.buildPythonApplication (finalAttrs: {
 
   passthru.updateScript = nix-update-script { };
 
+  __darwinAllowLocalNetworking = true;
+
   meta = {
     description = "Offensive security framework for AI agents and MCP servers";
     homepage = "https://github.com/agentsploit/agentsploit";

pkgs/by-name/ca/capa/package.nix

@@ -1 +1 @@
-{ python3Packages }: with python3Packages; toPythonApplication capa
+{ python3Packages }: with python3Packages; toPythonApplication flare-capa

pkgs/by-name/ce/certigo/package.nix

@@ -6,20 +6,21 @@
 
 buildGoModule (finalAttrs: {
   pname = "certigo";
-  version = "1.18.0";
+  version = "1.18.1";
 
   src = fetchFromGitHub {
     owner = "square";
     repo = "certigo";
-    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-U+VbtY34lxLBHWI1BjkPxzSS6q41R9DQkGvDvSDX9WY=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Y2m+uO/jxwWdutry859Y6IdNJpXjjkrlJ+LJrjS616Y=";
   };
 
-  vendorHash = "sha256-5DpgOb0YxZ/os23y+siCB73dUwutxXIW5RlCZqdbxao=";
+  vendorHash = "sha256-u10YSa2xFswJk/2iC7eyfQ51oTaa30/6JA5aLk5021k=";
 
   meta = {
     description = "Utility to examine and validate certificates in a variety of formats";
     homepage = "https://github.com/square/certigo";
+    changelog = "https://github.com/square/certigo/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.asl20;
     maintainers = [ ];
     mainProgram = "certigo";

pkgs/by-name/co/compress-pptx/package.nix

@@ -11,14 +11,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "compress-pptx";
-  version = "1.3.1";
+  version = "1.3.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "slhck";
     repo = "compress-pptx";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-+67EdAEWsRY11Pkie6AOz7Sl7MSTMGxZoQYS+M2x07Y=";
+    hash = "sha256-DTN/R8ioSp63txLB4ac8P0k3CXQN1ikr9qgYeP2dQSM=";
   };
 
   patches = [

pkgs/by-name/co/cook-cli/package.nix

@@ -11,16 +11,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cook-cli";
-  version = "0.36.0";
+  version = "0.37.0";
 
   src = fetchFromGitHub {
     owner = "cooklang";
     repo = "cookcli";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-ihsVvlyp//A4pNlt1+DlYWyz52enHVeU6uST7bxcwqw=";
+    hash = "sha256-tHPVKigUqHZo84E+2wnky21UQfE7bQ1ZB1vZZNPlm7E=";
   };
 
-  cargoHash = "sha256-e47x9XzABpXO+qvTydrBOPU9KTZTYJkbJvWvpUUh7Bo=";
+  cargoHash = "sha256-DOXHQMYWyuArVwS+odyjImGCfzS4flNZM7NRSnLkLfc=";
 
   # Build without the self-updating feature
   buildNoDefaultFeatures = true;

pkgs/by-name/co/copilot-language-server/package.nix

@@ -13,14 +13,14 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "copilot-language-server";
-  version = "1.547.0";
+  version = "1.551.2";
 
   strictDeps = true;
   __structuredAttrs = true;
 
   src = fetchzip {
     url = "https://github.com/github/copilot-language-server-release/releases/download/${finalAttrs.version}/copilot-language-server-js-${finalAttrs.version}.zip";
-    hash = "sha256-JFAv+Trz8XUuk9x9ZXWINdfrZ8Mglwjy8ay/EX0gOPo=";
+    hash = "sha256-wDV1F8rzO49sp2XxcZdvwyWKSzu+2CWahZ2kLoVoGRE=";
     stripRoot = false;
   };
 

pkgs/by-name/db/dbcsr/package.nix

@@ -1,41 +1,69 @@
 {
-  stdenv,
   lib,
+  stdenv,
   fetchFromGitHub,
+  fetchpatch,
+
+  # nativeBuildInputs
   cmake,
-  mpiCheckPhaseHook,
-  pkg-config,
   fypp,
   gfortran,
+  mpi,
+  pkg-config,
+  python3,
+
+  # buildInputs
   blas,
   lapack,
-  python3,
   libxsmm,
-  mpi,
+
+  # nativeCheckInputs
+  mpiCheckPhaseHook,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "dbcsr";
   version = "2.10.0";
 
+  __structuredAttrs = true;
+  strictDeps = true;
+
   src = fetchFromGitHub {
     owner = "cp2k";
     repo = "dbcsr";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-BgZmc81TzgU3ifv4RHh2pfjbkUyxMIIpBrHCtnLF3p0=";
   };
 
+  patches = [
+    # Explicitly export the C API symbols, otherwise hidden with GCC 16
+    # https://github.com/cp2k/dbcsr/pull/1027
+    (fetchpatch {
+      name = "expose-c-api-procedures.patch";
+      url = "https://github.com/cp2k/dbcsr/commit/a5d9bcfcd487e3181b981687334da1b89bc61dce.patch";
+      hash = "sha256-a4glOtMx1EUzYdoQb66bZaRnCgatVFWTqvcQlvU3oIc=";
+    })
+  ];
+
   postPatch = ''
     patchShebangs .
-
-    # Force build of shared library, otherwise just static.
+  ''
+  # Force build of shared library, otherwise just static.
+  + ''
     substituteInPlace src/CMakeLists.txt \
-      --replace 'add_library(dbcsr ''${DBCSR_SRCS})' 'add_library(dbcsr SHARED ''${DBCSR_SRCS})' \
-      --replace 'add_library(dbcsr_c ''${DBCSR_C_SRCS})' 'add_library(dbcsr_c SHARED ''${DBCSR_C_SRCS})'
-
-    # Avoid calling the fypp wrapper script with python again. The nix wrapper took care of that.
+      --replace-fail \
+        'add_library(dbcsr ''${DBCSR_SRCS})' \
+        'add_library(dbcsr SHARED ''${DBCSR_SRCS})' \
+      --replace-fail \
+        'add_library(dbcsr_c ''${DBCSR_C_SRCS})' \
+        'add_library(dbcsr_c SHARED ''${DBCSR_C_SRCS})'
+  ''
+  # Avoid calling the fypp wrapper script with python again. The nix wrapper took care of that.
+  + ''
     substituteInPlace cmake/fypp-sources.cmake \
-      --replace 'COMMAND ''${Python_EXECUTABLE} ''${FYPP_EXECUTABLE}' 'COMMAND ''${FYPP_EXECUTABLE}'
+      --replace-fail \
+        'COMMAND ''${Python_EXECUTABLE} ''${FYPP_EXECUTABLE}' \
+        'COMMAND ''${FYPP_EXECUTABLE}'
   '';
 
   outputs = [
@@ -44,11 +72,12 @@ stdenv.mkDerivation (finalAttrs: {
   ];
 
   nativeBuildInputs = [
-    gfortran
-    python3
     cmake
-    pkg-config
     fypp
+    gfortran
+    mpi
+    pkg-config
+    python3
   ];
 
   buildInputs = [
@@ -60,17 +89,17 @@ stdenv.mkDerivation (finalAttrs: {
   propagatedBuildInputs = [ mpi ];
 
   cmakeFlags = [
-    "-DUSE_OPENMP=ON"
-    "-DUSE_SMM=libxsmm"
-    "-DWITH_C_API=ON"
-    "-DBUILD_TESTING=ON"
-    "-DTEST_OMP_THREADS=2"
-    "-DTEST_MPI_RANKS=2"
-    "-DENABLE_SHARED=ON"
-    "-DUSE_MPI=ON"
+    (lib.cmakeBool "USE_OPENMP" true)
+    (lib.cmakeFeature "USE_SMM" "libxsmm")
+    (lib.cmakeBool "WITH_C_API" true)
+    (lib.cmakeBool "BUILD_TESTING" true)
+    (lib.cmakeFeature "TEST_OMP_THREADS" "2")
+    (lib.cmakeFeature "TEST_MPI_RANKS" "2")
+    (lib.cmakeBool "ENABLE_SHARED" true)
+    (lib.cmakeBool "USE_MPI" true)
   ];
 
-  checkInputs = [
+  nativeCheckInputs = [
     mpiCheckPhaseHook
   ];
 
@@ -80,6 +109,7 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Distributed Block Compressed Sparse Row matrix library";
     license = lib.licenses.gpl2Only;
     homepage = "https://github.com/cp2k/dbcsr";
+    changelog = "https://github.com/cp2k/dbcsr/releases/tag/${finalAttrs.src.tag}";
     maintainers = [ lib.maintainers.sheepforce ];
   };
 })

pkgs/by-name/fl/fluere/package.nix

@@ -0,0 +1,58 @@
+{
+  lib,
+  fetchFromGitHub,
+  libgit2,
+  libpcap,
+  nix-update-script,
+  openssl,
+  pkg-config,
+  rustPlatform,
+  versionCheckHook,
+  zlib,
+  zstd,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "fluere";
+  version = "0.8.1";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "SkuldNorniern";
+    repo = "fluere";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-311VCO+8xoWblt6zBOLd+7xmmBO7sE0KeUKO1Qwg9SI=";
+  };
+
+  cargoHash = "sha256-nMh4hO9kHCpE/+K1DNZT3UYe0iGUU6HRZUg00T6f+CM=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [
+    libgit2
+    libpcap
+    openssl
+    zlib
+    zstd
+  ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  doInstallCheck = true;
+
+  env = {
+    LIBGIT2_NO_VENDOR = true;
+    ZSTD_SYS_USE_PKG_CONFIG = true;
+  };
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Tool designed for network monitoring and analysis";
+    homepage = "https://github.com/SkuldNorniern/fluere";
+    changelog = "https://github.com/SkuldNorniern/fluere/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "fluere";
+  };
+})

pkgs/by-name/gh/gh-dash/package.nix

@@ -1,23 +1,23 @@
 {
   lib,
   fetchFromGitHub,
-  buildGoModule,
+  buildGo127Module,
   versionCheckHook,
   writableTmpDirAsHomeHook,
 }:
 
-buildGoModule (finalAttrs: {
+buildGo127Module (finalAttrs: {
   pname = "gh-dash";
-  version = "4.25.2";
+  version = "4.26.0";
 
   src = fetchFromGitHub {
     owner = "dlvhdr";
     repo = "gh-dash";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-3iUBuMvA2Xh7UjTiFNEs3tuZMCnSt/bIhTSEDD92yCU=";
+    hash = "sha256-NWJEe6ocC1FdXNLLGgVAcWlzjWqtgrMLnpnJrgbR7U4=";
   };
 
-  vendorHash = "sha256-Teu+8jiZE2gZ+0ErKsunhotY9W4Hjg6PAeFkFLgESIk=";
+  vendorHash = "sha256-edFzZpM1DIwFnMLQlOuh5c8CFzYm3X2YheGFDgOLZ0I=";
 
   ldflags = [
     "-s"

pkgs/by-name/gi/git-privacy/package.nix

@@ -1,6 +1,7 @@
 {
   lib,
   fetchFromGitHub,
+  fetchpatch,
   git,
   python3,
 }:
@@ -17,6 +18,16 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
     hash = "sha256-b2RkRL8/mZwqc3xCs+oltzualhQtp/7F9POlLlT3UUU=";
   };
 
+  patches = [
+    # Fix: pkg_resources is deprecated
+    (fetchpatch {
+      name = "fix-pkg_resources-is-deprecated.patch";
+      url = "https://github.com/EMPRI-DEVOPS/git-privacy/commit/a54d7a8b9ce6a48db5383e09711059b5025bcb18.patch";
+      excludes = [ ".github/workflows/pytest.yml" ];
+      hash = "sha256-uorH+EomVS6wMoykwazSIstz43CCjU8tJLgxyINqxU4=";
+    })
+  ];
+
   build-system = with python3.pkgs; [
     setuptools
   ];

pkgs/by-name/go/golines/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "golines";
-  version = "0.15.0";
+  version = "0.16.0";
 
   src = fetchFromGitHub {
     owner = "golangci";
     repo = "golines";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-gjm76dGbFTisQdiM0GAQJRcAreQUWIBuqYbLU2ruCNk=";
+    sha256 = "sha256-NveivuTEy+lvgsu32YuBE9lHhV4aTcI04BkMlZiIEGw=";
   };
 
-  vendorHash = "sha256-cLzCpjifb0lc6UaDW2JZBQABixz98EJ4syLapX7I8y8=";
+  vendorHash = "sha256-bn4C1d7EdAfBJZkWJByOQns+ng7F15eUs8BgYExB/g8=";
 
   subPackages = [
     "."

pkgs/by-name/gr/greenmask/package.nix

@@ -7,13 +7,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "greenmask";
-  version = "0.2.23";
+  version = "0.2.24";
 
   src = fetchFromGitHub {
     owner = "GreenmaskIO";
     repo = "greenmask";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-3ZY0Bj8Lest1CuyElR+Vh4+OVolcfXgvw0Xq/Wdjemg=";
+    hash = "sha256-nzhsbMQUSNW7iYsPYmhjELmjgq+2Vaa9vDmiMp2iEXg=";
   };
 
   vendorHash = "sha256-OelcviMjEEJAIYzCgGFj6uJB+GTnkf1rxqjtz8ppHjs=";

pkgs/by-name/he/hexora/package.nix

@@ -0,0 +1,62 @@
+{
+  lib,
+  cargo,
+  fetchFromGitHub,
+  nix-update-script,
+  pkg-config,
+  python3Packages,
+  rustc,
+  rustPlatform,
+  zstd,
+}:
+
+python3Packages.buildPythonApplication (finalAttrs: {
+  pname = "hexora";
+  version = "0.3.1";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "rushter";
+    repo = "hexora";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-xBg8Rrtwgg8Obi7JOPwdRXwoQKL8skCY72vLJA/VPRk=";
+  };
+
+  cargoDeps = rustPlatform.fetchCargoVendor {
+    inherit (finalAttrs) pname version src;
+    hash = "sha256-Xc6CcJ6s8X7T04W2SP7XT2rKGh2TatkaCxP2sSUC+2Y=";
+  };
+
+  build-system = [
+    cargo
+    pkg-config
+    python3Packages.setuptools
+    python3Packages.setuptools-rust
+    python3Packages.wheel
+    rustPlatform.cargoSetupHook
+    rustc
+  ];
+
+  buildInputs = [ zstd ];
+
+  # Project has no tests
+  doCheck = false;
+
+  pythonImportsCheck = [ "hexora" ];
+
+  env = {
+    ZSTD_SYS_USE_PKG_CONFIG = true;
+  };
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Static analysis of malicious Python code";
+    homepage = "https://github.com/rushter/hexora";
+    changelog = "https://github.com/rushter/hexora/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "hexora";
+  };
+})

pkgs/by-name/ku/kubescape/package.nix

@@ -9,18 +9,18 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "kubescape";
-  version = "4.0.14";
+  version = "4.0.15";
 
   src = fetchFromGitHub {
     owner = "kubescape";
     repo = "kubescape";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-QdWnwjvXsABcTsf+xzIYZ7GgwukzvyPQOppm7SDCK64=";
+    hash = "sha256-4WQvIdUPkiN4buqFDJRzY2CHe6EfJcOv1tT2/IETilE=";
     fetchSubmodules = true;
   };
 
   proxyVendor = true;
-  vendorHash = "sha256-y0iwBSUVh2pBEaiS1cGmW7F0/geGDuSdSHMmvhW5c9o=";
+  vendorHash = "sha256-dpci0KYQBuUTgGdQ95rQqahX4TtkycJ3ZcEmQXrCLu0=";
 
   subPackages = [ "." ];
 

pkgs/by-name/le/ledger-live-desktop/package.nix

@@ -8,11 +8,11 @@
 
 let
   pname = "ledger-live-desktop";
-  version = "4.19.1";
+  version = "4.21.1";
 
   src = fetchurl {
     url = "https://download.live.ledger.com/${pname}-${version}-linux-x86_64.AppImage";
-    hash = "sha256-zPaMkbU36HwcMUHy9nrocCOJfZ4k/CXj/3gd4BZUV0M=";
+    hash = "sha256-Em+VT8sDCyKgrJxrdrAIVpbdLdSPwqoBgIRXeEj1TXY=";
   };
 
   appimageContents = appimageTools.extract {

pkgs/by-name/li/libsecretspec-resolver/package.nix

@@ -11,7 +11,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libsecretspec-resolver";
-  version = "0.21.0";
+  version = "0.21.1";
   strictDeps = true;
   __structuredAttrs = true;
 
@@ -19,7 +19,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "cachix";
     repo = "secretspec";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-12jIhLZhtyQwkt2vKHqjGOuKSwwevcxzp8Ii02RTMLY=";
+    hash = "sha256-8OC1WS8VWTSwUJlT/qWx9CCPmO90G2OWJxEKZGUgXqM=";
   };
 
   cmakeDir = "../libsecretspec-resolver";

pkgs/by-name/li/libsecretspec/package.nix

@@ -13,17 +13,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "libsecretspec";
-  version = "0.21.0";
+  version = "0.21.1";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "cachix";
     repo = "secretspec";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-12jIhLZhtyQwkt2vKHqjGOuKSwwevcxzp8Ii02RTMLY=";
+    hash = "sha256-8OC1WS8VWTSwUJlT/qWx9CCPmO90G2OWJxEKZGUgXqM=";
   };
 
-  cargoHash = "sha256-yqBAhnHBwKbSyH8sEDo6y0xGUdKJgHd3Gsr1sTS/bRc=";
+  cargoHash = "sha256-48k3UKeT8qjRRLrf5yqmxULIynD6FgXiW063VEoTqmU=";
 
   nativeBuildInputs = [ cargo-c ];
 

pkgs/by-name/li/lint-staged/package.nix

@@ -8,16 +8,16 @@
 
 buildNpmPackage rec {
   pname = "lint-staged";
-  version = "17.5.1";
+  version = "17.6.0";
 
   src = fetchFromGitHub {
     owner = "lint-staged";
     repo = "lint-staged";
     rev = "v${version}";
-    hash = "sha256-9fx514c0ZblPZaJmAGdmb2QbIodsaDS9MOoveUXwA2Q=";
+    hash = "sha256-dUZMViPdT0mjqAs5boofuJs8qSH0QPZVts7PRJrIa6k=";
   };
 
-  npmDepsHash = "sha256-y8PSiJm3U9i5XaIkC06N/vjm/+OnqAHASRAMHlOVsGU=";
+  npmDepsHash = "sha256-Utc/SknTuV706dNjVUwE6ad85O3Ud4HRVDBiKblgdw0=";
 
   dontNpmBuild = true;
 

pkgs/by-name/md/mdbook-rss-feed/package.nix

@@ -38,6 +38,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [
       matthiasbeyer
+      saylesss88
       pinage404
     ];
     mainProgram = "mdbook-rss-feed";

pkgs/by-name/mi/microsoft-edge/update.sh

@@ -215,10 +215,11 @@ update_msedgedriver() {
     # msedgedriver/package.nix
     declare -A hashes=(
         [mac64_m1]=""
+        [mac64]=""
         [linux64]=""
     )
 
-    for driver_arch in mac64_m1 linux64; do
+    for driver_arch in mac64_m1 mac64 linux64; do
         url="https://msedgedriver.microsoft.com/${version}/edgedriver_${driver_arch}.zip"
 
         new_hash="$(
@@ -238,7 +239,7 @@ update_msedgedriver() {
         "/pname = \"msedgedriver\";/,/^  meta = {/s/version = \".*\"/version = \"$version\"/" \
         "$DRIVER_NIX"
 
-    for driver_arch in mac64_m1 linux64; do
+    for driver_arch in mac64_m1 mac64 linux64; do
         sed -i \
             "/pname = \"msedgedriver\";/,/^  meta = {/s|${driver_arch} = \".*\"|${driver_arch} = \"${hashes[$driver_arch]}\"|" \
             "$DRIVER_NIX"

pkgs/by-name/ms/msedgedriver/package.nix

@@ -19,6 +19,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
       driverArch =
         {
           aarch64-darwin = "mac64_m1";
+          x86_64-darwin = "mac64";
           x86_64-linux = "linux64";
         }
         .${stdenvNoCC.hostPlatform.system};
@@ -28,6 +29,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
       hash =
         {
           mac64_m1 = "sha256-6nwe/vRPh5MkQLTiZNXepfFsLtILwoK925mgLCUUVNg=";
+          mac64 = "sha256-p/cnNKQub6sSEWPz2fJ+FoU7rgzeoZQMkv3PphvvHLw=";
           linux64 = "sha256-XbOQl9FyckF3Qybb+40474ImJDKahBkekPoydf/TxV0=";
         }
         .${driverArch};

pkgs/by-name/ne/neovim-node-client/package.nix

@@ -23,6 +23,10 @@ buildNpmPackage rec {
     hash = "sha256-Vl6VPcwDrYAC4HWeY+6eWPl/2+Mw6fkScS5fsrLlWxw=";
   };
 
+  # Prevent unrs-resolver's postinstall script from running,
+  # which tries to download binaries on exotic platforms and fails
+  npmRebuildFlags = [ "--ignore-scripts" ];
+
   buildPhase = ''
     runHook preBuild
     npm run build

pkgs/by-name/ni/nixos-option/nixos-option.nix

@@ -125,7 +125,7 @@ let
     in
     lib.concatStringsSep "\n\n" (
       lib.concatLists [
-        (entry true "Value" (toPretty value))
+        (entry true "Value" (safeToPretty value))
         (entry (option ? default) "Default" (toPretty option.default))
         (entry (option ? type) "Type" (option.type.description))
         (entry (option ? description) "Description" (lib.removeSuffix "\n" option.description))

pkgs/by-name/op/openvino/package.nix

@@ -5,7 +5,6 @@
   cudaSupport ? opencv.cudaSupport or false,
 
   # build
-  scons,
   addDriverRunpath,
   autoPatchelfHook,
   cmake,
@@ -37,9 +36,6 @@ let
     getLib
     ;
 
-  # prevent scons from leaking in the default python version
-  scons' = scons.override { inherit python3Packages; };
-
   python = python3Packages.python.withPackages (
     ps: with ps; [
       cython
@@ -83,7 +79,6 @@ stdenv.mkDerivation (finalAttrs: {
     patchelf
     pkg-config
     python
-    scons'
   ]
   ++ lib.optionals cudaSupport [
     cudaPackages.cuda_nvcc
@@ -98,21 +93,6 @@ stdenv.mkDerivation (finalAttrs: {
     ./gcc-16-fix.patch
   ];
 
-  # Fix arm computelib ar/ranlib toolchain paths for LTO awareness
-  postPatch = ''
-    substituteInPlace src/plugins/intel_cpu/thirdparty/ComputeLibrary/SConstruct \
-      --replace-fail \
-        "env['AR'] = toolchain_prefix + \"ar\"" \
-        "env['AR'] = \"${lib.getExe' stdenv.cc.cc "gcc-ar"}\"" \
-      --replace-fail \
-        "env['RANLIB'] = toolchain_prefix + \"ranlib\"" \
-        "env['RANLIB'] = \"${lib.getExe' stdenv.cc.cc "gcc-ranlib"}\""
-  '';
-
-  dontUseSconsCheck = true;
-  dontUseSconsBuild = true;
-  dontUseSconsInstall = true;
-
   cmakeFlags = [
     "-Wno-dev"
     "-DCMAKE_MODULE_PATH:PATH=${placeholder "out"}/lib/cmake"
@@ -159,6 +139,7 @@ stdenv.mkDerivation (finalAttrs: {
     (cmakeBool "ENABLE_SYSTEM_PUGIXML" true)
     (cmakeBool "ENABLE_SYSTEM_SNAPPY" true)
     (cmakeBool "ENABLE_SYSTEM_TBB" true)
+    (cmakeBool "ENABLE_ARM_COMPUTE_CMAKE" true)
   ];
 
   # src/graph/src/plugins/intel_gpu/src/graph/include/reorder_inst.h:24:8: error: type 'struct typed_program_node' violates the C++ One Definition Rule [-Werror=odr]
@@ -193,6 +174,10 @@ stdenv.mkDerivation (finalAttrs: {
       --replace-fail "exec_prefix=\''${prefix}/" "exec_prefix="
   '';
 
+  disallowedRequisites = [
+    stdenv.cc.cc
+  ];
+
   meta = {
     changelog = "https://github.com/openvinotoolkit/openvino/releases/tag/${finalAttrs.src.tag}";
     description = "Open-source toolkit for optimizing and deploying AI inference";

pkgs/by-name/pe/peertube/package.nix

@@ -22,7 +22,7 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "peertube";
-  version = "8.3.0";
+  version = "8.3.1";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -31,7 +31,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "Chocobozzz";
     repo = "PeerTube";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-gHWtQRpbYV1oW7/V2dpAsiTZhV/vtCkuBF23T1Or3Qc=";
+    hash = "sha256-9Arq6gvMZV+0WcHWGwFnMjtnZzW+hWPPsHkJDwMFZCM=";
   };
 
   outputs = [
@@ -44,7 +44,7 @@ stdenv.mkDerivation (finalAttrs: {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_10;
     fetcherVersion = 3;
-    hash = "sha256-fadktAeQEjjGm06Re0gQuXUxsqEF7tWBf4KNrsF5pfI=";
+    hash = "sha256-HbscF8sjgFCICJnpWopW5VWcD67XdzKOONWn+RHZThI=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ph/phoenixd/package.nix

@@ -11,7 +11,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "phoenixd";
-  version = "0.9.0";
+  version = "0.9.1";
 
   src =
     let
@@ -27,9 +27,9 @@ stdenv.mkDerivation (finalAttrs: {
     fetchurl {
       url = "https://github.com/ACINQ/phoenixd/releases/download/v${finalAttrs.version}/phoenixd-${finalAttrs.version}-${suffix}.zip";
       hash = selectSystem {
-        aarch64-darwin = "sha256-NQyHyQzfkdLPpQnuSP09cSZwITA9Q1ml7q2haU3qm5o=";
-        x86_64-linux = "sha256-2eVLk4E/F3GwcslsWulo/7WwUvLKHEJ2K2biy4A2Kg8=";
-        aarch64-linux = "sha256-yAbw2AWKSHKEFzU2rMupBBF2+CF/jITOWbbpfQSoizE=";
+        aarch64-darwin = "sha256-LSPejXZgqXy7W2TXizv6B2FJOAY9vB5u4/pMbYqzwlc=";
+        x86_64-linux = "sha256-zLT8+0X4OUgdEtn5zfPbHU9pZV+O9vVpy0OzRe1VIc4=";
+        aarch64-linux = "sha256-T+W/SA+/sQbA57JcrW42nEjwfBKfwRHBL2U1fjULxLw=";
       };
     };
 

pkgs/by-name/po/polysh/package.nix

@@ -5,7 +5,7 @@
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "polysh";
-  version = "1.0.4";
+  version = "1.0.6";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -13,7 +13,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     owner = "innogames";
     repo = "polysh";
     tag = "polysh-${finalAttrs.version}";
-    hash = "sha256-fmcu3lWSV5aft+gX5QjypdK5pyfdVd0HDNekiFVdlBI=";
+    hash = "sha256-t24Z5ftfQwkw9iB6T63kM/Mc9w66Szezig1e5PAlqiQ=";
   };
 
   build-system = with python3Packages; [

pkgs/by-name/re/redis-plus-plus/package.nix

@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch2,
   cmake,
   hiredis,
   enableShared ? !stdenv.hostPlatform.isStatic,
@@ -24,6 +25,13 @@ stdenv.mkDerivation (finalAttrs: {
 
   patches = [
     ./0001-Fix-pkg-config-paths.patch
+
+    # https://github.com/sewenew/redis-plus-plus/issues/678
+    (fetchpatch2 {
+      name = "walk-around-gcc-16-bug.patch";
+      url = "https://github.com/sewenew/redis-plus-plus/commit/4b4cd0dc2931e96842ef05e165673b8679e32f48.patch?full_index=1";
+      hash = "sha256-neZj/J9nRg3Ft/+wQcRzvTjwm41odNnEfHnrs8/KiL4=";
+    })
   ];
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/rg/rgrc/package.nix

@@ -10,7 +10,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rgrc";
-  version = "0.6.34";
+  version = "0.6.35";
 
   __structuredAttrs = true;
 
@@ -18,10 +18,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "lazywalker";
     repo = "rgrc";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-awjRCCuO+3vK4CjeU8ZNJAkmfwidxpPO9MCbdowz7Hg=";
+    hash = "sha256-xoA4mtVhSPUfKEsU9bo5hFD7qPgL8LP1CggMpK+K7xI=";
   };
 
-  cargoHash = "sha256-v3PHi6qts5+VQmfEOkB/bls/Qrd/hXsW39N/H2SEyOo=";
+  cargoHash = "sha256-LpjmD+qfyNnehdBNLtSEvI41HSezA+Ht8B1UB07WSM8=";
 
   buildFeatures = [ "embed-configs" ];
   nativeBuildInputs = [ installShellFiles ];

pkgs/by-name/se/seaweedfs/package.nix

@@ -9,7 +9,7 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "seaweedfs";
-  version = "4.47";
+  version = "4.48";
 
   src = fetchFromGitHub {
     owner = "seaweedfs";
@@ -22,10 +22,10 @@ buildGoModule (finalAttrs: {
       find "$out" -name .git -print0 | xargs -0 rm -rf
       popd
     '';
-    hash = "sha256-NEDQos7TF2RsbBLdg6bf1FumIa3KxqrpDFLB0avJpC8=";
+    hash = "sha256-c+VIgtFZTYn0aeBtx6mc9HAyQhJD/ZzQCpvDYUiFjsI=";
   };
 
-  vendorHash = "sha256-xDTcGTiGQdpOdLKvLmMrkiKlkcGdEtE52jWpcC+sOm4=";
+  vendorHash = "sha256-h+M0+RBqYTOUj4ALBxQyAEJkgFnaZrBbptCYqaUJYic=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/sp/spruce/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "spruce";
-  version = "1.35.19";
+  version = "1.35.20";
 
   src = fetchFromGitHub {
     owner = "geofffranks";
     repo = "spruce";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-wlquuVTVXnlo3fWLVxUn6jkxNoiKskY/Nt2/0aBE68s=";
+    hash = "sha256-kuJE25P0Jz2dL13V/1ohKIWrUB3meO/lv/llQR499Eg=";
   };
 
   vendorHash = null;

pkgs/by-name/su/surge-downloader/package.nix

@@ -8,16 +8,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "surge-downloader";
-  version = "0.12.1";
+  version = "0.12.2";
 
   src = fetchFromGitHub {
     owner = "SurgeDM";
     repo = "Surge";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-cUJwt4gRdlQvMnrEvYG7JZe/2oz4cN9k35TEur13Sks=";
+    hash = "sha256-LojzHquVeXAI8/k5qYSdGExWw/Y6sgVRNjNagRot5gY=";
   };
 
-  vendorHash = "sha256-Ei2i7dQ9s42Gg6f2iLABbTG7OQspjHoRnqIhkfcNvFo=";
+  vendorHash = "sha256-Z1eNKci0MzXvKs49kOEYXr/JEO7AJB9kHdFTyNbxkw4=";
 
   subPackages = [ "." ];
 

pkgs/by-name/ta/tail-tray/package.nix

@@ -10,13 +10,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "tail-tray";
-  version = "0.2.34";
+  version = "0.2.35";
 
   src = fetchFromGitHub {
     owner = "SneWs";
     repo = "tail-tray";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-dKDEi5tGbhreCu1KdVxZB5ZdGX94+b8J0QgpbSpyixY=";
+    hash = "sha256-iv4uWeF3fHnuaqt1TWOT8rPeO5jG2a22ZzK+X+KJF90=";
   };
 
   nativeBuildInputs = with kdePackages; [

pkgs/by-name/tb/tbls/package.nix

@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "tbls";
-  version = "1.96.0";
+  version = "1.96.1";
 
   src = fetchFromGitHub {
     owner = "k1LoW";
     repo = "tbls";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-API/Zz1PQRpKs7pU244VEZ2PlRcNR6EGI1LXSAcNDac=";
+    hash = "sha256-FOjl35IBnklln9BYpoLUnq/uRYnAXZ9CH0aLnFtdb78=";
   };
 
-  vendorHash = "sha256-v+0xdoIdBSW9Nn5CL/tmQkJsMcdINFvisO6siKgmIWk=";
+  vendorHash = "sha256-4cQYUwxwgj0iDUFfNdT6P2E63Jfsxeg2BZCdo8cJnng=";
 
   excludedPackages = [ "scripts/jsonschema" ];
 

pkgs/by-name/te/terminal-space-program/package.nix

@@ -7,14 +7,14 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "terminal-space-program";
-  version = "0.43.0";
+  version = "0.44.3";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "jasonfen";
     repo = "terminal-space-program";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-XlPwwQheWkLANeB0cY4giEaxSVoxvkbEntNb69AZha8=";
+    hash = "sha256-GhmPYIdCHuHm9nC7ZZyHYiYIGU2tJOPTY3N9zlr85os=";
   };
 
   vendorHash = "sha256-5bhIP7It6rqOFvXRBUIP6/nGz4X+dzm3/BjVeo3nw4I=";

pkgs/by-name/tf/tfswitch/package.nix

@@ -5,16 +5,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "tfswitch";
-  version = "1.19.0";
+  version = "1.20.0";
 
   src = fetchFromGitHub {
     owner = "warrensbox";
     repo = "terraform-switcher";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-4a7noh05dA0alPnOtkDTFHynfwtf0MR74NNptgLGdKI=";
+    sha256 = "sha256-L6k3Hf9A9hL6+rlAvqCEIypSNSkAFUcDUlzvUKsby84=";
   };
 
-  vendorHash = "sha256-wUWEGRyF6gyitTBfEcEsylczI/uTMfgI4gx/N91n08w=";
+  vendorHash = "sha256-KEFg4sncUvNBhjEnuj/FG3jyGQvEZq4eucl5aGuwYOk=";
 
   # Disable tests since it requires network access and relies on the
   # presence of release.hashicorp.com

pkgs/by-name/tf/tft-cli/package.nix

@@ -0,0 +1,61 @@
+{
+  lib,
+  fetchFromGitLab,
+  python3Packages,
+  versionCheckHook,
+}:
+
+python3Packages.buildPythonApplication (finalAttrs: {
+  pname = "tft-cli";
+  version = "0.0.38";
+  pyproject = true;
+
+  __structuredAttrs = true;
+
+  src = fetchFromGitLab {
+    owner = "testing-farm";
+    repo = "cli";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-guoZfFkx9VNXiJy61Cg08G/H4HIcSZ66J+US69SsioM=";
+  };
+
+  build-system = with python3Packages; [
+    poetry-core
+    poetry-dynamic-versioning
+  ];
+
+  dependencies = with python3Packages; [
+    click
+    typer
+    dynaconf
+    colorama
+    requests
+    rich
+    ruamel-yaml
+    shellingham
+    pendulum
+    python-dotenv
+    keyring
+    cryptography
+  ];
+
+  pythonImportsCheck = [ "tft" ];
+
+  nativeCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "version";
+  doInstallCheck = true;
+
+  meta = {
+    homepage = "https://testing-farm.io/";
+    changelog = "https://gitlab.com/testing-farm/cli/-/releases/${finalAttrs.src.tag}";
+    description = "Command-line interface for Testing Farm";
+
+    license = lib.licenses.asl20;
+    platforms = lib.platforms.unix;
+    maintainers = with lib.maintainers; [
+      mfocko
+      thrix
+    ];
+    mainProgram = "testing-farm";
+  };
+})

pkgs/by-name/tg/tgrep/package.nix

@@ -10,7 +10,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "tgrep";
-  version = "1.0.10";
+  version = "1.0.11";
   __structuredAttrs = true;
   __darwinAllowLocalNetworking = true;
 
@@ -18,10 +18,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "microsoft";
     repo = "tgrep";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-/IprzLxZR/DL9ny+wPyh/iJoxvjC+50U5w3EP560KL4=";
+    hash = "sha256-TkllXBOyxEl1NVXIRmRYOVlUqm65GRCNnoetGcR7kyE=";
   };
 
-  cargoHash = "sha256-tJ3+aWOsRS3WD9VUYGQ/emOsLPAURVg7/WnUxdTRz50=";
+  cargoHash = "sha256-xPXLkW/YeCBbRCGf4+VYLQqm4D5WkKo2yIJhkLOxO+s=";
 
   doInstallCheck = true;
   nativeInstallCheckInputs = [ versionCheckHook ];
@@ -44,6 +44,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "--skip=watcher_indexes_files_in_directories_created_after_startup"
     "--skip=watcher_reconciles_forced_add_and_rm_cached_inside_an_ignored_tree"
     "--skip=native_watcher_tracks_hidden_updates_ignore_transitions_and_restart"
+    "--skip=git_metadata_stays_out_of_native_and_persisted_indexes"
   ];
 
   passthru.updateScript = nix-update-script { };

pkgs/by-name/tr/tree-sitter/package.nix

@@ -193,6 +193,13 @@ rustPlatform.buildRustPackage (finalAttrs: {
       substituteInPlace ./Makefile \
           --replace-fail 'all: libtree-sitter.a libtree-sitter.$(SOEXT) tree-sitter.pc' 'all: libtree-sitter.a tree-sitter.pc'
       sed -i '/^install:/,/^[^[:space:]]/ { /$(SOEXT/d; }' ./Makefile
+    ''
+    # rquickjs-sys passes the raw rust target to clang, which does not know riscv64gc
+    + lib.optionalString stdenv.hostPlatform.isRiscV64 ''
+      substituteInPlace $cargoDepsCopy/source-*/rquickjs-sys-*/build.rs \
+        --replace-fail \
+          'let mut cflags = vec![format!("--target={}", target)];' \
+          'let mut cflags = vec![format!("--target={}", target.replace("riscv64gc", "riscv64"))];'
     '';
 
   # The Makefile install can't enable the wasm feature.

pkgs/by-name/tu/turso-cli/package.nix

@@ -4,13 +4,14 @@
   buildGoModule,
   fetchFromGitHub,
   installShellFiles,
-  writableTmpDirAsHomeHook,
-  versionCheckHook,
   nix-update-script,
+  versionCheckHook,
+  writableTmpDirAsHomeHook,
 }:
+
 buildGoModule (finalAttrs: {
   pname = "turso-cli";
-  version = "1.0.31";
+  version = "1.0.32";
 
   __structuredAttrs = true;
 
@@ -18,16 +19,16 @@ buildGoModule (finalAttrs: {
     owner = "tursodatabase";
     repo = "turso-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-B1sm1RBJneSoNYUrXTXMzB7n+UAmn6RlFtV1BZpOdZM=";
+    hash = "sha256-hRmDoyj6rdqB+P0nAS+Xxg/6gUjxJm3qetiSGn+Nuaw=";
   };
 
-  vendorHash = "sha256-4OIJVL3N2mWOw7ZDP4xFCxa9zmUTPCA8N79TVoi1lys=";
+  vendorHash = "sha256-wutbVEWWoTdgwtG6IXgCYEGn/rdmaPbLGcFeCTS2VNE=";
 
   nativeBuildInputs = [ installShellFiles ];
 
   ldflags = [
     "-s"
-    "-X github.com/tursodatabase/turso-cli/internal/cmd.version=v${finalAttrs.version}"
+    "-X=github.com/tursodatabase/turso-cli/internal/cmd.version=v${finalAttrs.version}"
   ];
 
   nativeCheckInputs = [ writableTmpDirAsHomeHook ];
@@ -40,13 +41,15 @@ buildGoModule (finalAttrs: {
   '';
 
   nativeInstallCheckInputs = [ versionCheckHook ];
+
   doInstallCheck = true;
 
   passthru.updateScript = nix-update-script { };
 
   meta = {
     description = "CLI for Turso";
-    homepage = "https://turso.tech";
+    homepage = "https://github.com/tursodatabase/turso-cli";
+    changelog = "https://github.com/tursodatabase/turso-cli/releases/tag/${finalAttrs.src.tag}";
     mainProgram = "turso";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [

pkgs/by-name/va/vacask/package.nix

@@ -16,6 +16,35 @@
   boost188,
   suitesparse,
   tomlplusplus,
+
+  # VACASK's device models are compiled by OpenVAF, a Verilog-A compiler.
+  #
+  # By default, OpenVAF's `--target_cpu native` tells it to use every CPU
+  # instruction available on the machine doing the build (e.g. AVX-512, if the
+  # builder happens to have it). If the resulting binary is then run on a
+  # different, older CPU that doesn't support those instructions, it crashes
+  # with "illegal instruction" (SIGILL).
+  #
+  # To avoid this, we detect which instruction set the CPU we're building for
+  # actually supports and tell OpenVAF to target that instead, which keeps the
+  # compiled models runnable on other x86_64 machines as well.
+  #
+  # See:
+  #   - https://codeberg.org/arpadbuermen/VACASK/src/commit/bf59752fbfdfed18dc7fe2e3e11a9c02f8de28a0/README.md#installation-from-pre-built-packages
+  #   - https://github.com/NixOS/nixpkgs/blob/dc36b3c506df17272cdca29e85d0d0190b068981/lib/systems/architectures.nix
+  openvafTargetCpu ?
+    with stdenv.hostPlatform;
+    if isx86_64 then
+      if avx512Support then
+        "x86-64-v4"
+      else if avx2Support then
+        "x86-64-v3"
+      else if sse4_2Support then
+        "x86-64-v2"
+      else
+        "x86-64"
+    else
+      "generic",
 }:
 
 let
@@ -69,6 +98,7 @@ stdenv.mkDerivation (finalAttrs: {
   cmakeFlags = [
     (lib.cmakeFeature "FLEX_INCLUDE_DIR" "${flex}/include")
     (lib.cmakeFeature "TOMLPP_DIR" "${tomlplusplus}")
+    (lib.cmakeFeature "OPENVAF_OPTIONS" "--target_cpu ${openvafTargetCpu}")
   ];
 
   doCheck = true;

pkgs/by-name/xp/xprin/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "xprin";
-  version = "0.2.0";
+  version = "0.3.0";
 
   src = fetchFromGitHub {
     owner = "crossplane-contrib";
     repo = "xprin";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-5qRPzrMAW7gw5fv5rgR9hOrZreeWXj/UFyMQAzpCA0s=";
+    hash = "sha256-VGeX1tKERq9sTv36UeYhxqf8hG+nUczVDseT6iDnRJM=";
   };
 
-  vendorHash = "sha256-mFICxQ0WHPFxHJ5wmElqcRMOvExKWmX2XXCRQCWbXoI=";
+  vendorHash = "sha256-8trj5T6ShvHXFB3W8F++ton71F8XDn2kyoZPIdPmEyo=";
 
   subPackages = [
     "cmd/xprin"

pkgs/by-name/ya/yara-x/package.nix

@@ -11,16 +11,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "yara-x";
-  version = "1.20.0";
+  version = "1.21.0";
 
   src = fetchFromGitHub {
     owner = "VirusTotal";
     repo = "yara-x";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-TR9P4QYDxHSpAmPShiRNdNK1c4v3hGAx8mNOEhAo/HQ=";
+    hash = "sha256-OFDNOskhhX0ch0QmIV/2SHrTJUt5pEoJBin8Lu68f+w=";
   };
 
-  cargoHash = "sha256-/D4/H/+O1bCHecEO92aq05U3lPG2P/CFTWVlHekuH98=";
+  cargoHash = "sha256-mvMhxRXSq6IFZaGXn7mwe2XlkyZhgJffUoWruWC6Yj0=";
 
   env = {
     CARGO_PROFILE_RELEASE_LTO = "fat";

pkgs/by-name/zo/zond/package.nix

@@ -0,0 +1,49 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  nix-update-script,
+  libpcap,
+  pkg-config,
+  rustPlatform,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "zond";
+  version = "0.18.0";
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "zond-rs";
+    repo = "zond";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-onWvfTPc7GBH/mN5HPz5mIAOJFUi2l45Z2dXD0ea1xg=";
+  };
+
+  cargoHash = "sha256-V2+7//z64mKODelryd2SEWJLrQoxPsNOT6vFBV1Yl7c=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [ libpcap ];
+
+  checkFlagsArray = [
+    # Test requires raw socket/packet capture
+    "--skip=the_reason_flag_shows_the_packet_behind_a_verdict"
+  ];
+
+  __darwinAllowLocalNetworking = true;
+
+  # Some tests fail in strict sandbox on darwin
+  doCheck = !stdenv.hostPlatform.isDarwin;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "CLI for Zond Engine";
+    homepage = "https://github.com/zond-rs/zond";
+    changelog = "https://github.com/zond-rs/zond/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.agpl3Only;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "zond";
+  };
+})

pkgs/development/compilers/gcc/patches/13/gnat13-aarch64-darwin-trampoline.patch

@@ -1,4 +1,4 @@
-From a41f0707bdcc9fb6dab39eb8ce7e392138d16dc0 Mon Sep 17 00:00:00 2001
+From 0089a264f255fbbb5476df2b65a783d595cc9dde Mon Sep 17 00:00:00 2001
 From: zinzilulo <214774502+zinzilulo@users.noreply.github.com>
 Date: Wed, 27 May 2026 18:25:14 +0100
 Subject: [PATCH] Allow GNAT 13 bootstrap on aarch64-darwin with nested
@@ -19,14 +19,13 @@ between the Alire/GNAT-FSF-build GNAT 13.2.0-2 compiler and the
 IainS/gcc-13-branch 13.4-darwin-r0 source tree.
 ---
  gcc/builtins.def                        | 4 ++--
- gcc/config/darwin.h                     | 8 ++++----
  gcc/doc/invoke.texi                     | 4 ++--
  gcc/tree.cc                             | 8 ++++----
  libgcc/config/aarch64/heap-trampoline.c | 8 ++++----
  libgcc/config/i386/heap-trampoline.c    | 8 ++++----
  libgcc/libgcc-std.ver.in                | 4 ++--
  libgcc/libgcc2.h                        | 4 ++--
- 8 files changed, 24 insertions(+), 24 deletions(-)
+ 7 files changed, 20 insertions(+), 20 deletions(-)
 
 diff --git a/gcc/builtins.def b/gcc/builtins.def
 index 448cf837ec8..5bf4769ae47 100644
@@ -43,30 +42,11 @@ index 448cf837ec8..5bf4769ae47 100644
  
  /* Implementing __builtin_setjmp.  */
  DEF_BUILTIN_STUB (BUILT_IN_SETJMP_SETUP, "__builtin_setjmp_setup")
-diff --git a/gcc/config/darwin.h b/gcc/config/darwin.h
-index 0cc6f021365..47bca6f1db1 100644
---- a/gcc/config/darwin.h
-+++ b/gcc/config/darwin.h
-@@ -433,10 +433,10 @@ extern GTY(()) int darwin_ms_struct;
- 	   ___emutls_get_address -exported_symbol ___emutls_get_address \
- 	  -U ___emutls_register_common \
- 	  -exported_symbol ___emutls_register_common \
--	  -U ___gcc_nested_func_ptr_created \
--	  -exported_symbol ___gcc_nested_func_ptr_created \
--	  -U ___gcc_nested_func_ptr_deleted \
--	  -exported_symbol ___gcc_nested_func_ptr_deleted \
-+	  -U ___builtin_nested_func_ptr_created \
-+	  -exported_symbol ___builtin_nested_func_ptr_created \
-+	  -U ___builtin_nested_func_ptr_deleted \
-+	  -exported_symbol ___builtin_nested_func_ptr_deleted \
-       }} \
-     }}}\
-     %{!r:%{!nostdlib:%{!nostartfiles:%E}}} %{T*} %{F*} "\
 diff --git a/gcc/doc/invoke.texi b/gcc/doc/invoke.texi
-index 8f82ba0ecfa..4d5bba42fcd 100644
+index 5607481acb9..b36e95efa2b 100644
 --- a/gcc/doc/invoke.texi
 +++ b/gcc/doc/invoke.texi
-@@ -18718,8 +18718,8 @@ for nested functions.
+@@ -18722,8 +18722,8 @@ for nested functions.
  By default, trampolines are generated on stack.  However, certain platforms
  (such as the Apple M1) do not permit an executable stack.  Compiling with
  @option{-ftrampoline-impl=heap} generate calls to
@@ -78,10 +58,10 @@ index 8f82ba0ecfa..4d5bba42fcd 100644
  implemented in libgcc, and will only be provided on specific targets:
  x86_64 Darwin, x86_64 and aarch64 Linux.  @emph{PLEASE NOTE}: Heap
 diff --git a/gcc/tree.cc b/gcc/tree.cc
-index 032b87ee1c8..54abc791c88 100644
+index 806dd0ef8ae..701a6fbb39f 100644
 --- a/gcc/tree.cc
 +++ b/gcc/tree.cc
-@@ -9874,17 +9874,17 @@ build_common_builtin_nodes (void)
+@@ -9888,17 +9888,17 @@ build_common_builtin_nodes (void)
  					ptr_type_node, // void *func
  					ptr_ptr_type_node, // void **dst
  					NULL_TREE);
@@ -198,5 +178,5 @@ index a7a5dff0184..ac7eaab4f01 100644
  extern int __gcc_bcmp (const unsigned char *, const unsigned char *, size_t);
  extern void __clear_cache (void *, void *);
 -- 
-2.50.1 (Apple Git-155)
+2.55.0
 

pkgs/development/libraries/mpich/default.nix

@@ -46,11 +46,11 @@ assert (ch4backend.pname == "ucx" || ch4backend.pname == "libfabric");
 
 stdenv.mkDerivation rec {
   pname = "mpich";
-  version = "5.0.1";
+  version = "5.0.2";
 
   src = fetchurl {
     url = "https://www.mpich.org/static/downloads/${version}/mpich-${version}.tar.gz";
-    hash = "sha256-jBgyoT3azwcWhQafX639Hyh3op4aYoZSiSxlIRsfMyc=";
+    hash = "sha256-kowvGNNQqRRD/oAkrQHOLGAJ6cVR4Kc+eX/FZ/EZE30=";
   };
 
   patches = [

pkgs/development/python-modules/boto3-stubs/default.nix

@@ -358,13 +358,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "boto3-stubs";
-  version = "1.43.103";
+  version = "1.43.104";
   pyproject = true;
 
   src = fetchPypi {
     pname = "boto3_stubs";
     inherit (finalAttrs) version;
-    hash = "sha256-dvmbE8or8t09z8a0b78FGp2g7D+gzOrfwygjN1DioeA=";
+    hash = "sha256-0Yg+1KeCgrBy43vwjEz7qLIgyP6xNxaB6zU5mxiREaM=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/flare-capa/default.nix

@@ -1,5 +1,6 @@
 {
   lib,
+  stdenv,
   buildPythonPackage,
   colorama,
   deptry,
@@ -45,7 +46,7 @@
 }:
 
 buildPythonPackage (finalAttrs: {
-  pname = "capa";
+  pname = "flare-capa";
   version = "9.4.0";
   pyproject = true;
 
@@ -127,5 +128,8 @@ buildPythonPackage (finalAttrs: {
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ fab ];
     mainProgram = "capa";
+    # Never built on darwin since first introduction in nixpkgs
+    # see https://hydra.nixos.org/build/345235630
+    broken = stdenv.hostPlatform.isDarwin;
   };
 })

pkgs/development/python-modules/homematicip/default.nix

@@ -15,14 +15,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "homematicip";
-  version = "2.17.0";
+  version = "2.18.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "hahn-th";
     repo = "homematicip-rest-api";
     tag = finalAttrs.version;
-    hash = "sha256-PtqSwHEwFeryYM3e455PKsLAYqs7TVVi0N/Pbq1SHp8=";
+    hash = "sha256-I3D83Pdsdz0eWrebFgRtq/ejfJh8kN8w7Z82HJcjsjQ=";
   };
 
   build-system = [

pkgs/development/python-modules/jupyter-book/default.nix

@@ -26,19 +26,20 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "jupyter-book";
-  version = "2.1.6";
+  version = "2.1.7";
   pyproject = true;
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "jupyter-book";
     repo = "jupyter-book";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-J0WzzKg46+0mvZ4goUPfkjO70HsAXQGv1JaoFs8JZ18=";
+    hash = "sha256-8jOPjF9tFwXmq5iWGW3V8qif7UdPPrDZW4cVjtSdbYY=";
   };
 
   npmDeps = fetchNpmDeps {
     inherit (finalAttrs) src;
-    hash = "sha256-y0QCZhsgcdFlgsjsCZFvLOQP27e5JD0QL0uP2XmpQEs=";
+    hash = "sha256-xbDn7jDDd/nWKVvx2R6uJIaWQMSOktCeKv2EBkkzhTY=";
   };
 
   build-system = [

pkgs/development/python-modules/jupyter-server-ydoc/default.nix

@@ -19,14 +19,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "jupyter-server-ydoc";
-  version = "3.0.3";
+  version = "3.0.4";
   pyproject = true;
   __structuredAttrs = true;
 
   src = fetchPypi {
     pname = "jupyter_server_ydoc";
     inherit (finalAttrs) version;
-    hash = "sha256-ndjyC6jrkZu0wPWIMkPb4iCXJqtLfMgpM1xQWv6/nFw=";
+    hash = "sha256-8ATHnGxKzgPt/5F2u4aV+WmWYJzToCxNAZeQWikyM4c=";
   };
 
   build-system = [ hatchling ];

pkgs/development/python-modules/mypy-boto3/default.nix

@@ -335,8 +335,8 @@ in
       "sha256-3JYcWKFk0dKJg/qn+EBvxeAO5xh5PXCU3dTEWDr1oXI=";
 
   mypy-boto3-connect =
-    buildMypyBoto3Package "connect" "1.43.103"
-      "sha256-YTuqPk2igTabqCfBYBY9HEVXDwTk4V2I/rZftoacGEA=";
+    buildMypyBoto3Package "connect" "1.43.104"
+      "sha256-R/TX5Uy1ovNtkmBVX+qXAfjeYB/z/f5YMQ+gIlqujC8=";
 
   mypy-boto3-connect-contact-lens =
     buildMypyBoto3Package "connect-contact-lens" "1.43.79"
@@ -443,8 +443,8 @@ in
       "sha256-dXNkOcMonYrBh4yzeubd+v3mW42s9XpmpfvgbtgoJgY=";
 
   mypy-boto3-ec2 =
-    buildMypyBoto3Package "ec2" "1.43.100"
-      "sha256-DABqoQz7/al+1GnoP8EjE3Gv2DhKIc2/jYFpBhnA8Ac=";
+    buildMypyBoto3Package "ec2" "1.43.104"
+      "sha256-UnX0kzhTGa7YoOBfAfQDPGUz5A68QcIvN8we3dwpaHo=";
 
   mypy-boto3-ec2-instance-connect =
     buildMypyBoto3Package "ec2-instance-connect" "1.43.0"
@@ -467,8 +467,8 @@ in
       "sha256-11KpPRxGId76g/I4jXwMQ55kwGEQVsasgvMUXsiLbM4=";
 
   mypy-boto3-eks =
-    buildMypyBoto3Package "eks" "1.43.88"
-      "sha256-SqRuidD6RQLjGow/AXhpvYiM5+tkBBDBT6F9nAhHs6I=";
+    buildMypyBoto3Package "eks" "1.43.104"
+      "sha256-4gkAjSwpfK+HNPfUOxPS2wQIXtHhi2fmIuWQL+ndPBM=";
 
   mypy-boto3-elastic-inference =
     buildMypyBoto3Package "elastic-inference" "1.36.0"
@@ -555,8 +555,8 @@ in
       "sha256-C7V/8x9FgRwUaudSDWK9+VdHoR0Xcc8l4W5KzFTKzDk=";
 
   mypy-boto3-fsx =
-    buildMypyBoto3Package "fsx" "1.43.0"
-      "sha256-4roB3AEdN4zXGceUNkrmarmTThmPbS9SltvHG6kF+84=";
+    buildMypyBoto3Package "fsx" "1.43.104"
+      "sha256-FSdU6KXKHsoHGiMWHkf5PhuYMOyzZ2ldWfQkFr1rOr4=";
 
   mypy-boto3-gamelift =
     buildMypyBoto3Package "gamelift" "1.43.66"
@@ -571,8 +571,8 @@ in
       "sha256-vMz4YKm78XMavlPUNiSVAYmAbyUBrJhUXbFrhxIvUJA=";
 
   mypy-boto3-glue =
-    buildMypyBoto3Package "glue" "1.43.103"
-      "sha256-W7dNtzxPbQ0MGXAnnO0U92YNokwfveIAYm27ftgpH/Y=";
+    buildMypyBoto3Package "glue" "1.43.104"
+      "sha256-hcNGgpHqSt3oStW1K3q4blmrMUWJirbXuBgvcAao9yQ=";
   mypy-boto3-grafana =
     buildMypyBoto3Package "grafana" "1.43.11"
       "sha256-XJOSLyL1+uEweZ9zER7IhH3DFLaLtpJKvuRIn8Ri+P4=";
@@ -590,8 +590,8 @@ in
       "sha256-+DDeD9YWo98meLZU2Mzu5AE0S7HFg6kfxeUWUh9XcQA=";
 
   mypy-boto3-guardduty =
-    buildMypyBoto3Package "guardduty" "1.43.97"
-      "sha256-USNbCGnD5BF9gsG6vqytRxO+kR6kEI+yIX569syS6Yw=";
+    buildMypyBoto3Package "guardduty" "1.43.104"
+      "sha256-TDkTHKBpQKWaoh7hUH/e+j2ti7SUPcIbDWrM5DKhBv4=";
 
   mypy-boto3-health =
     buildMypyBoto3Package "health" "1.43.0"
@@ -1290,8 +1290,8 @@ in
       "sha256-Psjh5lHoMK/89/4VGy4wkLjqmNc8sGkFOwnKTH9MhjY=";
 
   mypy-boto3-ssm =
-    buildMypyBoto3Package "ssm" "1.43.53"
-      "sha256-8govEDWg1YthZHxvXIg+BYFSrNzNipfn0ZFkdtyOfHs=";
+    buildMypyBoto3Package "ssm" "1.43.104"
+      "sha256-Gx4Ydi5rnOr3NegWWm29eJsQ2U9W9wTvAQ0Mi77wWcw=";
 
   mypy-boto3-ssm-contacts =
     buildMypyBoto3Package "ssm-contacts" "1.43.0"

pkgs/development/python-modules/otcextensions/default.nix

@@ -19,14 +19,14 @@
 
 buildPythonPackage rec {
   pname = "otcextensions";
-  version = "0.34.7";
+  version = "0.34.8";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "opentelekomcloud";
     repo = "python-otcextensions";
     tag = version;
-    hash = "sha256-VOBeSAoHTqKjoWno16+aHOOfbst2wUjtAqz7MvGRT6U=";
+    hash = "sha256-dkAF0UXD0cpktSqDsYbpHO8IzKRdHx85MOp4aelbbgo=";
   };
 
   env.PBR_VERSION = version;

pkgs/development/python-modules/sigima/default.nix

@@ -47,15 +47,16 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "sigima";
-  version = "1.1.6";
+  version = "1.2.0";
   pyproject = true;
+  __darwinAllowLocalNetworking = true;
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "DataLab-Platform";
     repo = "Sigima";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Z4U+l2SUqGvKV8+I1/j+OfymmyFKTiBy5Rr6iiz31xY=";
+    hash = "sha256-pKI1xODYR0ZanXEI3r3UhKj2FvrBA8MWVwSpcg+GBls=";
   };
 
   build-system = [

pkgs/development/python-modules/tencentcloud-sdk-python/default.nix

@@ -9,14 +9,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "tencentcloud-sdk-python";
-  version = "3.1.182";
+  version = "3.1.183";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "TencentCloud";
     repo = "tencentcloud-sdk-python";
     tag = finalAttrs.version;
-    hash = "sha256-eLB77nZKECb4nDLQHYu0JtFjE15I6pPp8k4Ois7UN50=";
+    hash = "sha256-peCCsqmUG+mYes18wpzLB0DhTVqtG3t6S+W6sMkkYeM=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/twilio/default.nix

@@ -18,14 +18,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "twilio";
-  version = "9.11.1";
+  version = "9.11.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "twilio";
     repo = "twilio-python";
     tag = finalAttrs.version;
-    hash = "sha256-GS8Okhxd2T9BG9bFh6uZY4zPmHDYT++wpYq4A2sy1ek=";
+    hash = "sha256-RbamHPCGYGZgkipYf8Wz0D7cOB7AsGhxPRJC/BXR1qE=";
   };
 
   # https://github.com/twilio/twilio-python/pull/919

pkgs/development/rocq-modules/jasmin/default.nix

@@ -20,12 +20,13 @@
     in
     with lib.versions;
     lib.switch coq.coq-version [
-      (case (range "8.20" "9.1") "2026.03.1")
+      (case (range "8.20" "9.1") "2026.03.3")
       (case (isEq "8.19") "2025.02.2")
       (case (isEq "8.18") "2024.07.4")
     ] null;
   releaseRev = v: "v${v}";
 
+  release."2026.03.3".hash = "sha256-LY3683WHT0A3pXpszGAl8tkc7fCy5RufuPBVedBk298=";
   release."2026.03.1".hash = "sha256-CE+WbcG0lgKvaV/OSMlTp3fG+v82X41z/w7ynsM/LLg=";
   release."2026.03.0".hash = "sha256-MzdVbZhXlb9JFLsf+23yJNFiGJDBJZGbX6Ox3/U1EzA=";
   release."2025.06.1".hash = "sha256-wEL1tN0HUa1Eb7FiQOBA6sAkuonrAMdkqq8gu9/CED0=";

pkgs/kde/misc/kirigami-addons/default.nix

@@ -10,11 +10,11 @@
 }:
 mkKdeDerivation rec {
   pname = "kirigami-addons";
-  version = "1.14.0";
+  version = "1.14.2";
 
   src = fetchurl {
     url = "mirror://kde/stable/kirigami-addons/kirigami-addons-${version}.tar.xz";
-    hash = "sha256-SunvnPH8Vf71kyjSWnCyhXK29qeHOUw9KS9e03jxmEA=";
+    hash = "sha256-Hks0Atf4dEyQOwwLkH+jeTebhI3tpBO1qUDbr0cUyzI=";
   };
 
   extraNativeBuildInputs = [ qttools ];

pkgs/misc/uboot/default.nix

@@ -82,6 +82,13 @@ let
           '') (builtins.attrNames pythonScriptsToInstall)}
           patchShebangs tools
           patchShebangs scripts
+        ''
+        # This warning got removed in
+        # https://git.kernel.org/pub/scm/utils/dtc/dtc.git/commit/?id=cba90ce82064ad1e6d25f20d8eaa940bd2fc97ed
+        + ''
+          for f in scripts/Makefile.lib dts/upstream/Makefile; do
+            substituteInPlace "$f" --replace-fail -Wno-graph_child_address ""
+          done
         '';
 
         nativeBuildInputs = [

pkgs/servers/klipper/default.nix

@@ -14,13 +14,13 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "klipper";
-  version = "0.13.0-unstable-2026-08-18";
+  version = "0.13.0-unstable-2026-09-28";
 
   src = fetchFromGitHub {
     owner = "Klipper3d";
     repo = "klipper";
-    rev = "60fc7aa67a8da9abb43a2bad825d4992294ebf3f";
-    sha256 = "sha256-qs60qBwlD7A0xneNzeNcKfWc8II5rG2oj+tvuhn/aWw=";
+    rev = "7bc4d09465d31cd30fc0822e8d0abe02cc8c547f";
+    sha256 = "sha256-DcRYuS2pxM3clbmk93GZhWAFjwoDVF7ZqNBTq2fm8x0=";
   };
 
   sourceRoot = "${src.name}/klippy";

pkgs/top-level/python-aliases.nix

@@ -156,6 +156,7 @@ mapAliases {
   bz2file = throw "'bz2file' has beem removed, as it was not longed maintained upstream since 2020"; # added 2025-08-26
   calysto-scheme = throw "'calysto-scheme' has been removed as it is no longer maintained upstream"; # Added 2026-01-31
   can = throw "'can' has been renamed to/replaced by 'python-can'"; # Converted to throw 2025-10-29
+  capa = flare-capa; # added 2026-09-29
   casbin = pycasbin; # added 2025-06-12
   cchardet = throw "'cchardet' has been renamed to/replaced by 'faust-cchardet'"; # Converted to throw 2025-10-29
   chai = throw "'chai' has been removed as it is no longer maintained upstream and the repository was archived"; # Added 2026-06-08

pkgs/top-level/python-packages.nix

@@ -2877,8 +2877,6 @@ self: super: with self; {
 
   cantools = callPackage ../development/python-modules/cantools { };
 
-  capa = callPackage ../development/python-modules/capa { };
-
   capstone = callPackage ../development/python-modules/capstone { inherit (pkgs) capstone; };
 
   capstone_4 = callPackage ../development/python-modules/capstone/4.nix {
@@ -6201,6 +6199,8 @@ self: super: with self; {
 
   flammkuchen = callPackage ../development/python-modules/flammkuchen { };
 
+  flare-capa = callPackage ../development/python-modules/flare-capa { };
+
   flasgger = callPackage ../development/python-modules/flasgger { };
 
   flash-attn = callPackage ../development/python-modules/flash-attn { };