maintainers/github-teams.json: Automated sync

Diff: https://github.com/vaultwarden/vw_web_builds/compare/v2026.7.0+0...v2026.10.1+0

doc/languages-frameworks/cuda.section.md

@@ -165,6 +165,75 @@ To illustrate: support for Blackwell (e.g., `sm_100`) was added in CUDA 12.8. As
 
 The `pkgsForCudaArch` attribute set makes it possible to access packages built for a specific architecture without needing to manually call `pkgs.extend` and supply a new `config`. As an example, `pkgsForCudaArch.sm_89.python3Packages.torch` provides PyTorch built for Ada Lovelace GPUs.
 
+### Unlocking GeForce tensor core throughput {#cuda-gpu-unlock}
+
+[gpu-unlock](https://github.com/Zagitta/gpu-unlock) removes the tensor core
+throughput cap for FP16, BF16 and TF32 operations with FP32 accumulation on
+supported GeForce GPUs. Upstream considers Ampere (RTX 30) support stable and
+Turing (RTX 20) and Ada (RTX 40) support experimental; Blackwell (RTX 50) is
+unsupported. Check the upstream supported GPU list for your exact model.
+This does not improve gaming or ordinary FP32 CUDA performance.
+
+The kernel module is available as `config.boot.kernelPackages.gpu-unlock`, with
+its firmware in the package's `firmware` attribute. The firmware is unfree; allow
+`gpu-unlock-firmware` in your `nixpkgs.config.allowUnfreePredicate`, or enable
+`nixpkgs.config.allowUnfree`. The pinned firmware version is independent of your
+installed NVIDIA driver version.
+
+Add the following to a NixOS configuration that already enables the NVIDIA driver:
+
+```nix
+{ config, ... }:
+{
+  boot.extraModulePackages = [ config.boot.kernelPackages.gpu-unlock ];
+  hardware.firmware = [ config.boot.kernelPackages.gpu-unlock.firmware ];
+  boot.initrd.availableKernelModules = [ "gpu_unlock" ];
+  boot.kernelParams = [ "gpu_unlock.targets=all" ];
+
+  boot.initrd.systemd.services.gpu-unlock = {
+    description = "Unlock NVIDIA GPU tensor core throughput";
+    wantedBy = [ "sysinit.target" ];
+    before = [
+      "sysinit.target"
+      "systemd-modules-load.service"
+      "systemd-udevd.service"
+      "systemd-udev-trigger.service"
+    ];
+    unitConfig.DefaultDependencies = false;
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+      ExecStart = "/bin/modprobe gpu_unlock";
+    };
+  };
+}
+```
+
+The initrd service must finish before udev or the normal module loader can load
+NVIDIA or another GPU driver. Merely adding `gpu_unlock` to
+`boot.initrd.kernelModules` does not ensure this ordering. The module's firmware
+declarations cause NixOS to include the required assets in the initrd.
+
+To select individual GPUs, replace `all` with full PCI addresses from `lspci -D`,
+for example `gpu_unlock.targets=0000:01:00.0,0000:02:00.0`. Already bound or
+powered-down cards are skipped. Loading the module after the NVIDIA driver has
+bound the card is too late.
+
+Apply the configuration with `sudo nixos-rebuild boot`, then reboot. Check
+`journalctl -k -b --grep=gpu_unlock` for an `unlocked` message for each selected
+GPU. `journalctl -b -u gpu-unlock.service` shows initrd service failures; a
+successful service exit alone does not mean a GPU was unlocked.
+
+The unlock is lost when a GPU loses power. Upstream attempts to reapply it after
+suspend to RAM before NVIDIA resumes the GPU; hibernation is not covered.
+Laptop runtime power management can also reset the unlock. See upstream's
+power-management guidance and check the kernel log after resume.
+
+To disable unlocking, remove `gpu_unlock.targets=...` from `boot.kernelParams`,
+rebuild the boot configuration, and reboot. For a single boot, remove the
+parameter in the bootloader editor. To uninstall, also remove the module,
+firmware, and initrd service settings above, rebuild, and reboot.
+
 ### Running Docker or Podman containers with CUDA support {#cuda-docker-podman}
 
 It is possible to run Docker or Podman containers with CUDA support. The recommended mechanism to perform this task is to use the [NVIDIA Container Toolkit](https://docs.nvidia.com/datacenter/cloud-native/container-toolkit/latest/index.html).

doc/redirects.json

@@ -47,6 +47,9 @@
   "cuda-extending-cuda-package-sets": [
     "index.html#cuda-extending-cuda-package-sets"
   ],
+  "cuda-gpu-unlock": [
+    "index.html#cuda-gpu-unlock"
+  ],
   "cuda-modifying-cuda-package-sets": [
     "index.html#cuda-modifying-cuda-package-sets",
     "index.html#cuda-configuring-cuda-package-sets"

maintainers/github-teams.json

@@ -809,13 +809,15 @@
     "name": "nixpkgs-merge-bot"
   },
   "node": {
-    "description": "Maintains Node.js runtimes and build tooling.\r\n\r\n\"JS is hecked, thanks for coming to my TED Talk\" - @lilyinstarlight",
+    "description": "Maintains Node.js runtimes and build tooling.",
     "id": 7309872,
     "maintainers": {
-      "lilyinstarlight": 298109,
       "winterqt": 78392041
     },
-    "members": {},
+    "members": {
+      "Scrumplex": 11587657,
+      "aduh95": 14309773
+    },
     "name": "Node"
   },
   "ocaml": {

maintainers/team-list.nix

@@ -433,6 +433,7 @@ with lib.maintainers;
   libretro = {
     members = [
       aanderse
+      iedame
       igorcafe
       thiagokokada
     ];

nixos/modules/services/monitoring/kener.nix

@@ -115,6 +115,7 @@ in
         StateDirectoryMode = "750";
         DynamicUser = true;
         ExecStart = "${cfg.package}/bin/kener-server";
+        EnvironmentFile = cfg.environmentFile;
         Restart = "on-failure";
         AmbientCapabilities = "";
         CapabilityBoundingSet = "";

nixos/modules/services/web-apps/immich.nix

@@ -455,8 +455,7 @@ in
 
     systemd.services.immich-machine-learning = mkIf cfg.machine-learning.enable {
       description = "immich machine learning";
-      requires = lib.mkIf cfg.database.enable [ "postgresql.target" ];
-      after = [ "network.target" ] ++ lib.optionals cfg.database.enable [ "postgresql.target" ];
+      after = [ "network.target" ];
       wantedBy = [ "multi-user.target" ];
       inherit (cfg.machine-learning) environment;
       serviceConfig = commonServiceConfig // {

nixos/tests/e57inspector.nix

@@ -44,9 +44,9 @@ in
     name = "e57inspector-screenshot-analysis";
     screenshot = "${vmTest}/screen.png";
     question = ''
-      Look at this screenshot of a desktop application.
+      Look at this screenshot of the e57inspector application.
       Answer: Does the application show that a file was loaded into it successfully?
-      For this, only scans matter, as there are no images in the file.
+      For this, only scans matter, as there are no images in the file, so an image count of 0 is fine.
       The inspector on the left should show child elements below 'Data 3D'.
     '';
   };

nixos/tests/kanidm-provisioning.nix

@@ -18,7 +18,7 @@ in
   name = "kanidm-provisioning-${kanidmPackage.version}";
   meta.maintainers = with pkgs.lib.maintainers; [ oddlama ];
 
-  _module.args.kanidmPackage = pkgs.lib.mkDefault pkgs.kanidmWithSecretProvisioning_1_11;
+  _module.args.kanidmPackage = pkgs.lib.mkDefault pkgs.kanidmWithSecretProvisioning_1_12;
 
   nodes.provision =
     { pkgs, lib, ... }:

nixos/tests/kanidm.nix

@@ -22,7 +22,7 @@ in
     oddlama
   ];
 
-  _module.args.kanidmPackage = pkgs.lib.mkDefault pkgs.kanidm_1_11;
+  _module.args.kanidmPackage = pkgs.lib.mkDefault pkgs.kanidm_1_12;
 
   nodes.server =
     { pkgs, ... }:

nixos/tests/vaultwarden.nix

@@ -94,7 +94,7 @@ let
               # Skip the tour on first login
               click_when_unobstructed((By.XPATH, "//button[contains(., 'Skip')]"))
 
-              click_when_unobstructed((By.XPATH, "//button[contains(., 'New item')]"))
+              click_when_unobstructed((By.XPATH, "//button[contains(., 'Add item')]"))
 
               driver.find_element(By.XPATH, '//input[@formcontrolname="name"]').send_keys(
                   'secrets'

nixos/tests/vlm-screenshot-question.nix

@@ -3,7 +3,7 @@
 # Similar to `wait_for_text()` in NixOS VM tests.
 #
 # Runs a VLM (Vision Language Model) on a screenshot and asserts that the
-# model's answer to a yes/no question ends with "YES".
+# model's answer to a yes/no question contains a bool response in a JSON field.
 #
 # This is useful to automatically test software that is otherwise
 # hard to test, e.g. "does this 3D program render the bunny correctly?".
@@ -23,6 +23,7 @@
       hash = "sha256-nEwdSKRi9/iDsomErE9C02bJxXNDTqtoVT4POL9+tQw=";
     }
   ),
+  # mmproj = "multimodal projector"
   mmproj ? (
     fetchurl {
       url = "https://huggingface.co/unsloth/gemma-4-E2B-it-GGUF/resolve/90f9618340396838ee7ff5b0ba2da27da62953d3/mmproj-F16.gguf";
@@ -35,28 +36,30 @@
   question,
 }:
 let
-
   analysisScript =
     writers.writePython3 "${name}-script" { flakeIgnore = [ "E501" ]; } # allow long lines
       ''
+        import json
         import os
-        import re
         import subprocess
+        import sys
         import time
 
+        SYSTEM_PROMPT = (
+            'Answer the user question, outputting valid JSON only.'
+            ' Schema: { "bool_answer": true | false, "explanation": "..." }'
+        )
+
         out = os.environ["out"]
-        screenshot = "${screenshot}"
-        # Using JSON here even permits preserving multi-line ASCII art questions and so on.
+        # Using JSON here safely escapes arbitrary strings into Python literals
+        # (and even permits preserving multi-line ASCII art questions and so on).
+        screenshot = ${builtins.toJSON "${screenshot}"}
         question = ${builtins.toJSON question}
 
-        # Build the full prompt with output markers for reliable extraction.
-        prompt = (
-            "Start your output with [output-start]."
-            f" {question}"
-            " Explain what you see, and your judgment."
-            " On the final line, output exactly YES or NO."
-            " Then immediately output [output-end] with nothing else after it."
-        )
+
+        def fail(message):
+            sys.exit(message)
+
 
         vlm_start = time.time()
         result = subprocess.run(
@@ -66,52 +69,87 @@ let
                 "--simple-io",  # disables the spinner whose backspace chars would corrupt captured output
                 "--reasoning", "off", "--temp", "0",
                 "--threads", "1",  # for determinism
-                "--n-gpu-layers", "0",  # force CPU-only (results on GPUs might be different and nondeterministic, see https://github.com/ggml-org/llama.cpp/pull/16016#issuecomment-3293505238)
+
+                # Force CPU-only, for both the text model and the multimodal projector
+                # (results on GPUs might be different and nondeterministic, see
+                # https://github.com/ggml-org/llama.cpp/pull/16016#issuecomment-3293505238).
+                "--device", "none",
+                "--n-gpu-layers", "0",
+                "--no-mmproj-offload",
+
                 "--model", "${model}",
                 "--mmproj", "${mmproj}",
                 "--image", screenshot,
-                "-p", prompt,
+                "-sys", SYSTEM_PROMPT,
+                "-p", question,
             ],
             capture_output=True,
             text=True,
-            # `OMP_NUM_THREADS=1` prevents OpenMP from spawning extra threads in the BLAS backend
-            # (OpenBLAS), which causes nondeterminism with `--image`; without `--image`, `--threads 1`
-            # alone is already deterministic (BLAS is not used for short text prompts).
+            # Limiting the BLAS backend (OpenBLAS) to one thread prevents nondeterminism with `--image`;
+            # without `--image`, `--threads 1` alone is already deterministic (BLAS is not used for short text prompts).
+            # Depending on how OpenBLAS is built, it spawns threads via OpenMP (`OMP_NUM_THREADS`)
+            # or its own pthreads pool (`OPENBLAS_NUM_THREADS`, legacy `GOTO_NUM_THREADS`),
+            # so set all of them.
             # Relevant code: https://github.com/ggml-org/llama.cpp/blob/80afa33aadcc4f71212b17e5e52904491c76b63e/ggml/src/ggml-blas/ggml-blas.cpp#L30-L148
             # PR to fix it in OpenBLAS: https://github.com/OpenMathLib/OpenBLAS/pull/5808
-            env={**os.environ, "OMP_NUM_THREADS": "1"},
+            env={
+                **os.environ,
+                "OMP_NUM_THREADS": "1",
+                "OPENBLAS_NUM_THREADS": "1",
+                "GOTO_NUM_THREADS": "1",
+            },
         )
         vlm_elapsed = time.time() - vlm_start
         output = result.stdout
         print(f"VLM inference took {vlm_elapsed:.1f}s")
-        print(f"VLM raw output: {repr(output)}")
+        print(f"VLM raw output: {output!r}")
         if result.returncode != 0:
             print(f"VLM stderr: {result.stderr}")
-        assert result.returncode == 0, f"llama-cli failed with exit code {result.returncode}"
+            fail(f"llama-cli failed with exit code {result.returncode}")
 
         print()
 
-        # Post-process: extract the answer between `[output-start]` and `[output-end]` markers.
-        # This is needed because llama-cli prints UI noise (banner,
-        # spinner, stats) to stdout alongside the model's response.
-        # TODO: Replace with `--quiet` once https://github.com/ggml-org/llama.cpp/pull/22848 is merged;
-        #       then also remove the markers from the prompt and the extraction below.
-        matches = re.findall(r"\[output-start\](.*?)\[output-end\]", output, re.DOTALL)
-        assert matches, (
-            f"VLM output did not contain [output-start]...[output-end] markers."
-            f" Raw output: {repr(output)}"
-        )
-        answer = matches[-1].strip()  # use last match (first may be prompt echo)
-        print("VLM answer:")
-        print(answer)
-        assert answer.upper().endswith("YES"), (
-            f"VLM did not confirm expected answer. Answer: {answer}"
-        )
+        # Post-process: extract the first JSON object that has a `bool_answer` key.
+        # This is needed because llama-cli prints UI noise (banner, stats) to stdout
+        # around the model's response, and the model may output its own decorations
+        # such as putting JSON in a Markdown code fence.
+        # `raw_decode()` ignores any trailing text after the JSON object.
+        # TODO: Simplify with `--quiet` once https://github.com/ggml-org/llama.cpp/pull/22848 is merged.
+        decoder = json.JSONDecoder()
+        j = None
+        index = output.find("{")
+        while index != -1:
+            try:
+                candidate, _ = decoder.raw_decode(output, index)
+            except json.JSONDecodeError:
+                candidate = None
+            if isinstance(candidate, dict) and "bool_answer" in candidate:
+                j = candidate
+                break
+            index = output.find("{", index + 1)
+
+        # On unexpected outputs, include the raw output in the error message on stderr
+        # (it's already included on stdout above in all cases).
+        if j is None:
+            fail(f"VLM output did not contain a valid JSON object with key 'bool_answer'. Raw output: {output!r}")
+
+        bool_answer = j.get("bool_answer")
+        explanation = j.get("explanation")
+        if not (isinstance(bool_answer, bool) and isinstance(explanation, str)):
+            fail(f'VLM output JSON was not of schema {{ "bool_answer": true | false, "explanation": "..." }}. Raw output: {output!r}')
+
+        print(f"Answer: {bool_answer}")
+        print(f"Explanation: {explanation}")
+        if not bool_answer:
+            fail(f"VLM did not confirm expected answer. Answer: {bool_answer}\nExplanation: {explanation}")
 
         os.makedirs(out, exist_ok=True)
-        with open(os.path.join(out, "vlm-answer.txt"), "w") as f:
-            f.write(answer + "\n")
-        os.symlink(screenshot, os.path.join(out, "screen.png"))
+        with open(os.path.join(out, "vlm-answer.json"), "w") as f:
+            json.dump(j, f, indent=2)
+            f.write("\n")
+        # Keep the original file extension, as the screenshot is not necessarily a PNG.
+        _, screenshot_ext = os.path.splitext(screenshot)
+        os.symlink(screenshot, os.path.join(out, f"screen{screenshot_ext}"))
       '';
 in
 runCommand name { } ''

pkgs/applications/emulators/kega-fusion/default.nix

@@ -1,111 +0,0 @@
-{
-  stdenv,
-  lib,
-  writeText,
-  fetchurl,
-  upx,
-  libGL,
-  libGLU,
-  glib,
-  gtk2,
-  alsa-lib,
-  libsm,
-  libx11,
-  gdk-pixbuf,
-  pango,
-  libxinerama,
-  mpg123,
-  runtimeShell,
-}:
-
-let
-  libPath = lib.makeLibraryPath [
-    stdenv.cc.cc
-    libGL
-    libGLU
-    glib
-    gtk2
-    alsa-lib
-    libsm
-    libx11
-    gdk-pixbuf
-    pango
-    libxinerama
-  ];
-
-in
-stdenv.mkDerivation {
-  pname = "kega-fusion";
-  version = "3.63x";
-
-  src = fetchurl {
-    url = "https://www.carpeludum.com/download/Fusion363x.tar.gz";
-    sha256 = "14s6czy20h5khyy7q95hd7k77v17ssafv9l6lafkiysvj2nmw94g";
-  };
-
-  plugins = fetchurl {
-    url = "https://www.carpeludum.com/download/PluginsLinux.tar.gz";
-    sha256 = "0d623cvh6n5ijj3wb64g93mxx2xbichsn7hj7brbb0ndw5cs70qj";
-  };
-
-  runner = writeText "kega-fusion" ''
-    #!${runtimeShell} -ex
-
-    kega_libdir="@out@/lib/kega-fusion"
-    kega_localdir="$HOME/.Kega Fusion"
-
-    # create local plugins directory if not present
-    mkdir -p "$kega_localdir/Plugins"
-
-    # create links for every included plugin
-    if [ $(ls -1A $kega_libdir/plugins | wc -l) -gt 0 ]; then
-      for i in $kega_libdir/plugins/*; do
-        if [ ! -e "$kega_localdir/Plugins/$(basename "$i")" ]; then
-          ln -sf "$i" "$kega_localdir/Plugins/"
-        fi
-      done
-    fi
-
-    # copy configuration file if not present
-    if ! [ -f "$kega_localdir/Fusion.ini" ]; then
-      cat > "$kega_localdir/Fusion.ini" <<EOF
-    ALSADeviceName=default
-    libmpg123path=${lib.getLib mpg123}/lib/libmpg123.so.0
-    EOF
-    else
-      sed -i 's,^\(libmpg123path=\).*,\1${lib.getLib mpg123}/lib/libmpg123.so.0,' "$kega_localdir/Fusion.ini"
-    fi
-
-    # here we go!
-    exec "$kega_libdir/Fusion" "$@"
-  '';
-
-  dontStrip = true;
-  dontPatchELF = true;
-
-  nativeBuildInputs = [ upx ];
-
-  installPhase = ''
-    upx -d Fusion
-    install -Dm755 Fusion "$out/lib/kega-fusion/Fusion"
-    patchelf --set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)" --set-rpath "${libPath}" "$out/lib/kega-fusion/Fusion"
-
-    tar -xaf $plugins
-    mkdir -p "$out/lib/kega-fusion/plugins"
-    cp -r Plugins/*.rpi "$out/lib/kega-fusion/plugins"
-
-    mkdir -p "$out/bin"
-    substitute "$runner" "$out/bin/kega-fusion" --subst-var out
-    chmod +x "$out/bin/kega-fusion"
-  '';
-
-  meta = {
-    description = "Sega SG1000, SC3000, SF7000, Master System, Game Gear, Genesis/Megadrive, SVP, Pico, SegaCD/MegaCD and 32X emulator";
-    homepage = "https://www.carpeludum.com/kega-fusion/";
-    maintainers = [ ];
-    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
-    license = lib.licenses.unfreeRedistributable;
-    platforms = [ "i686-linux" ];
-    mainProgram = "kega-fusion";
-  };
-}

pkgs/applications/misc/zathura/cb/default.nix

@@ -1,18 +1,16 @@
 {
-  stdenv,
   lib,
+  stdenv,
   fetchFromGitHub,
   meson,
   ninja,
   pkg-config,
-  zathura_core,
-  girara,
-  gtk4,
-  gettext,
-  libarchive,
   desktop-file-utils,
   appstream,
-  appstream-glib,
+  zathura_core,
+  libarchive,
+  girara,
+  gtk4,
   gitUpdater,
 }:
 
@@ -20,6 +18,9 @@ stdenv.mkDerivation (finalAttrs: {
   pname = "zathura-cb";
   version = "2026.07.18";
 
+  strictDeps = true;
+  __structuredAttrs = true;
+
   src = fetchFromGitHub {
     owner = "pwmt";
     repo = "zathura-cb";
@@ -31,17 +32,15 @@ stdenv.mkDerivation (finalAttrs: {
     meson
     ninja
     pkg-config
-    gettext
     desktop-file-utils
     appstream
-    appstream-glib
   ];
 
   buildInputs = [
-    gtk4
-    libarchive
     zathura_core
+    libarchive
     girara
+    gtk4
   ];
 
   env.PKG_CONFIG_ZATHURA_PLUGINDIR = "lib/zathura";

pkgs/applications/misc/zathura/core/default.nix

@@ -4,34 +4,31 @@
   fetchFromGitHub,
   meson,
   ninja,
-  wrapGAppsHook4,
-  pkg-config,
-  gitUpdater,
-  appstream-glib,
-  json-glib,
-  desktop-file-utils,
-  python3,
-  gtk4,
-  girara,
   gettext,
+  pkg-config,
+  librsvg,
+  sphinx,
+  desktop-file-utils,
+  appstream,
+  gtk4,
+  glib,
+  girara,
+  file, # libmagic
+  json-glib,
+  sqlite,
+  xxhash,
+  texlive, # synctex
+  libseccomp,
+  xvfb-run,
+  weston,
+  wrapGAppsHook4,
+  versionCheckHook,
+  gitUpdater,
+  zathura,
   gnome,
   libheif,
   libjxl,
-  libxml2,
-  xxhash,
-  check,
-  sqlite,
-  glib,
-  texlive,
-  libintl,
-  libseccomp,
-  file,
-  librsvg,
-  gtk-mac-integration,
   webp-pixbuf-loader,
-  xvfb-run,
-  weston,
-  versionCheckHook,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
@@ -65,35 +62,33 @@ stdenv.mkDerivation (finalAttrs: {
     "-Dsysconfdir=/etc"
     (lib.mesonEnable "seccomp" stdenv.hostPlatform.isLinux)
     (lib.mesonEnable "landlock" stdenv.hostPlatform.isLinux)
+    (lib.mesonEnable "tests-x11" finalAttrs.doCheck)
+    (lib.mesonEnable "tests-wayland" finalAttrs.doCheck)
   ];
 
   nativeBuildInputs = [
     meson
     ninja
-    pkg-config
-    desktop-file-utils
-    python3.pythonOnBuildForHost.pkgs.sphinx
     gettext
+    pkg-config
+    librsvg
+    sphinx
+    desktop-file-utils
+    appstream
     wrapGAppsHook4
-    libxml2
-    appstream-glib
   ];
 
   buildInputs = [
     gtk4
-    girara
-    libintl
-    sqlite
     glib
-    file
-    librsvg
-    check
+    girara
+    file # libmagic
     json-glib
-    texlive.bin.core
+    sqlite
     xxhash
+    texlive.bin.core # synctex
   ]
-  ++ lib.optional stdenv.hostPlatform.isLinux libseccomp
-  ++ lib.optional stdenv.hostPlatform.isDarwin gtk-mac-integration;
+  ++ lib.optionals stdenv.hostPlatform.isLinux [ libseccomp ];
 
   # add support for more image formats
   env.GDK_PIXBUF_MODULE_FILE = gnome._gdkPixbufCacheBuilder_DO_NOT_USE {
@@ -115,11 +110,22 @@ stdenv.mkDerivation (finalAttrs: {
   nativeInstallCheckInputs = [ versionCheckHook ];
   doInstallCheck = true;
 
-  passthru.updateScript = gitUpdater { };
+  passthru = {
+    updateScript = gitUpdater { };
+    tests = {
+      inherit zathura;
+    };
+  };
 
   meta = {
     homepage = "https://pwmt.org/projects/zathura";
     description = "Core component for zathura PDF viewer";
+    longDescription = ''
+      Zathura is a highly customizable and functional PDF viewer based on the
+      poppler rendering library and the GTK toolkit. The idea behind zathura
+      is an application that provides a minimalistic and space saving interface
+      as well as an easy usage that mainly focuses on keyboard interaction.
+    '';
     license = lib.licenses.zlib;
     platforms = lib.platforms.unix;
     maintainers = with lib.maintainers; [ mithicspirit ];

pkgs/applications/misc/zathura/djvu/default.nix

@@ -5,14 +5,12 @@
   meson,
   ninja,
   pkg-config,
-  gtk3,
-  zathura_core,
-  girara,
-  djvulibre,
-  gettext,
   desktop-file-utils,
   appstream,
-  appstream-glib,
+  zathura_core,
+  girara,
+  cairo,
+  djvulibre, # ddjvuapi
   gitUpdater,
 }:
 
@@ -20,6 +18,9 @@ stdenv.mkDerivation (finalAttrs: {
   pname = "zathura-djvu";
   version = "2026.07.18";
 
+  strictDeps = true;
+  __structuredAttrs = true;
+
   src = fetchFromGitHub {
     owner = "pwmt";
     repo = "zathura-djvu";
@@ -33,15 +34,13 @@ stdenv.mkDerivation (finalAttrs: {
     pkg-config
     desktop-file-utils
     appstream
-    appstream-glib
   ];
 
   buildInputs = [
-    djvulibre
-    gettext
     zathura_core
-    gtk3
     girara
+    cairo
+    djvulibre
   ];
 
   env.PKG_CONFIG_ZATHURA_PLUGINDIR = "lib/zathura";

pkgs/applications/misc/zathura/pdf-mupdf/default.nix

@@ -1,25 +1,17 @@
 {
-  stdenv,
   lib,
+  stdenv,
+  fetchFromGitHub,
   meson,
   ninja,
-  fetchFromGitHub,
-  cairo,
-  girara,
-  gtk-mac-integration,
-  gumbo,
-  jbig2dec,
-  libjpeg,
-  mupdf,
-  openjpeg,
   pkg-config,
-  zathura_core,
-  tesseract,
-  leptonica,
-  mujs,
   desktop-file-utils,
   appstream,
-  appstream-glib,
+  zathura_core,
+  girara,
+  mupdf,
+  glib,
+  cairo,
   gitUpdater,
 }:
 
@@ -27,6 +19,9 @@ stdenv.mkDerivation (finalAttrs: {
   version = "2026.07.18";
   pname = "zathura-pdf-mupdf";
 
+  strictDeps = true;
+  __structuredAttrs = true;
+
   src = fetchFromGitHub {
     owner = "pwmt";
     repo = "zathura-pdf-mupdf";
@@ -40,30 +35,18 @@ stdenv.mkDerivation (finalAttrs: {
     pkg-config
     desktop-file-utils
     appstream
-    appstream-glib
   ];
 
   buildInputs = [
-    cairo
-    girara
-    gumbo
-    jbig2dec
-    libjpeg
-    mupdf
-    openjpeg
     zathura_core
-    tesseract
-    leptonica
-    mujs
-  ]
-  ++ lib.optional stdenv.hostPlatform.isDarwin gtk-mac-integration;
+    girara
+    mupdf
+    glib
+    cairo
+  ];
 
   env.PKG_CONFIG_ZATHURA_PLUGINDIR = "lib/zathura";
 
-  postPatch = ''
-    sed -i -e '/^mupdfthird =/d' -e 's/, mupdfthird//g' meson.build
-  '';
-
   passthru.updateScript = gitUpdater { };
 
   meta = {

pkgs/applications/misc/zathura/pdf-poppler/default.nix

@@ -1,16 +1,15 @@
 {
-  stdenv,
   lib,
+  stdenv,
   fetchFromGitHub,
   meson,
   ninja,
   pkg-config,
+  desktop-file-utils,
+  appstream,
   zathura_core,
   girara,
   poppler,
-  desktop-file-utils,
-  appstream,
-  appstream-glib,
   gitUpdater,
 }:
 
@@ -18,6 +17,9 @@ stdenv.mkDerivation (finalAttrs: {
   pname = "zathura-pdf-poppler";
   version = "2026.07.18";
 
+  strictDeps = true;
+  __structuredAttrs = true;
+
   src = fetchFromGitHub {
     owner = "pwmt";
     repo = "zathura-pdf-poppler";
@@ -31,13 +33,12 @@ stdenv.mkDerivation (finalAttrs: {
     pkg-config
     desktop-file-utils
     appstream
-    appstream-glib
-    zathura_core
   ];
 
   buildInputs = [
-    poppler
+    zathura_core
     girara
+    poppler
   ];
 
   env.PKG_CONFIG_ZATHURA_PLUGINDIR = "lib/zathura";

pkgs/applications/misc/zathura/ps/default.nix

@@ -1,17 +1,17 @@
 {
-  stdenv,
   lib,
+  stdenv,
   fetchFromGitHub,
   meson,
   ninja,
   pkg-config,
-  zathura_core,
-  girara,
-  libspectre,
-  gettext,
   desktop-file-utils,
   appstream,
-  appstream-glib,
+  zathura_core,
+  girara,
+  glib,
+  cairo,
+  libspectre,
   gitUpdater,
 }:
 
@@ -19,6 +19,9 @@ stdenv.mkDerivation (finalAttrs: {
   pname = "zathura-ps";
   version = "2026.07.18";
 
+  strictDeps = true;
+  __structuredAttrs = true;
+
   src = fetchFromGitHub {
     owner = "pwmt";
     repo = "zathura-ps";
@@ -30,16 +33,16 @@ stdenv.mkDerivation (finalAttrs: {
     meson
     ninja
     pkg-config
-    gettext
     desktop-file-utils
     appstream
-    appstream-glib
   ];
 
   buildInputs = [
-    libspectre
     zathura_core
     girara
+    glib
+    cairo
+    libspectre
   ];
 
   env.PKG_CONFIG_ZATHURA_PLUGINDIR = "lib/zathura";

pkgs/applications/misc/zathura/wrapper.nix

@@ -22,6 +22,9 @@ symlinkJoin {
   inherit (zathura_core) version;
   pname = "zathura-with-plugins";
 
+  strictDeps = true;
+  __structuredAttrs = true;
+
   paths =
     with zathura_core;
     [
@@ -56,20 +59,17 @@ symlinkJoin {
     '';
 
   meta = {
-    homepage = "https://pwmt.org/projects/zathura";
-    description = "Highly customizable and functional PDF viewer";
-    longDescription = ''
-      Zathura is a highly customizable and functional PDF viewer based on the
-      poppler rendering library and the GTK toolkit. The idea behind zathura
-      is an application that provides a minimalistic and space saving interface
-      as well as an easy usage that mainly focuses on keyboard interaction.
-    '';
-    license = lib.licenses.zlib;
-    platforms = lib.platforms.unix;
+    inherit (zathura_core.meta)
+      homepage
+      description
+      longDescription
+      license
+      platforms
+      mainProgram
+      ;
     maintainers = with lib.maintainers; [
       TethysSvensson
       mithicspirit
     ];
-    mainProgram = "zathura";
   };
 }

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -54,13 +54,13 @@
     "vendorHash": "sha256-/9AxZkWEXGtlEQ+p1utMhkC5z81XOkS1SCfp4ZgPT3g="
   },
   "aminueza_minio": {
-    "hash": "sha256-57IhDRu6YrJgXl2bkCeIeRIs4702wb0z/52eJoTAp70=",
+    "hash": "sha256-f8li8rvdRd6UDDqemerI0+nH+OtDCW3stT1H/fLDnDk=",
     "homepage": "https://registry.terraform.io/providers/aminueza/minio",
     "owner": "aminueza",
     "repo": "terraform-provider-minio",
-    "rev": "v3.45.0",
+    "rev": "v3.45.1",
     "spdx": "AGPL-3.0",
-    "vendorHash": "sha256-hKSqgc+Gf0vzQuXKlErWVC/EbHatu/9oTW25PnRMyxQ="
+    "vendorHash": "sha256-ov+YA8Y9bl8oaeobh5m4ISba624h2lzlb7BtzcALIyI="
   },
   "archessmn_powerdns": {
     "hash": "sha256-gQRB8tnFHhXNId9J8947ffizIWTKEetOnc+QMnjaB48=",
@@ -227,13 +227,13 @@
     "vendorHash": "sha256-KS76AlIyquah/b/uwM4qotBgEbpGwF54gx2u6mQpJ4E="
   },
   "cloudamqp_cloudamqp": {
-    "hash": "sha256-adpGr2j0jBFW+0QxtSgTiEyxlKoBp/fw6oINxefhCl4=",
+    "hash": "sha256-Ih26RaGdJKt9jeeCegcMZWnoxUv4vrzr1Pdx84BEcFA=",
     "homepage": "https://registry.terraform.io/providers/cloudamqp/cloudamqp",
     "owner": "cloudamqp",
     "repo": "terraform-provider-cloudamqp",
-    "rev": "v1.51.0",
+    "rev": "v1.52.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-scHNFyHn4VYm8wtuBdVCpgKCzwPhzrC3KBs1YHXPwos="
+    "vendorHash": "sha256-oXzgbhm+343BuItU9J/QvsMegncG3sjNXPZbdkt9SxQ="
   },
   "cloudflare_cloudflare": {
     "hash": "sha256-9uq4ebmGmwxOj5tTLgxapEbTvWjjByUNAIHLfcZfREA=",
@@ -310,11 +310,11 @@
     "vendorHash": "sha256-3o6YRDrq4rQhNAFyqiGJrAoxuAykWw85OExRGSE3kGI="
   },
   "datadog_datadog": {
-    "hash": "sha256-Sv/mzOMSerwMFiBFFcj+4bVaJvpAbHVj/MXXclhYpHA=",
+    "hash": "sha256-mWHyJtKODTnBcWCA0PKt6Dd7AJdyxONoVdA/ET63yrk=",
     "homepage": "https://registry.terraform.io/providers/DataDog/datadog",
     "owner": "DataDog",
     "repo": "terraform-provider-datadog",
-    "rev": "v4.26.0",
+    "rev": "v4.27.0",
     "spdx": "MPL-2.0",
     "vendorHash": "sha256-dTbDKR03Inol1G4okCNDso5tZ45BEiUmkXOAmIrRcX0="
   },
@@ -391,13 +391,13 @@
     "vendorHash": "sha256-B8mYLd4VdADWoQLWiCM85VQrBfDdlYQ0wkCp9eUBQ4U="
   },
   "drfaust92_bitbucket": {
-    "hash": "sha256-m5Ya99ulMesUwl54sbHuvOYumbPcAhWMESVGbXIOJpE=",
+    "hash": "sha256-5clib4KME7L/wk5ptrKLXiY1/NZ9/+cajrHwNMkD00I=",
     "homepage": "https://registry.terraform.io/providers/DrFaust92/bitbucket",
     "owner": "DrFaust92",
     "repo": "terraform-provider-bitbucket",
-    "rev": "v2.52.0",
+    "rev": "v2.54.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-uokHd4hDvWl6mrBa062F/uZmYPnW3TIZZKZwKBVq+Lo="
+    "vendorHash": "sha256-gUKREx3NORuYAFqR/hUCuU1OXQw5NYn2LzcpeunEagE="
   },
   "e-breuninger_netbox": {
     "hash": "sha256-tbBCGOcbDhiOjdgyS9lSw6IbMgzZwnbM40/InvhUKCA=",
@@ -706,13 +706,13 @@
     "vendorHash": "sha256-t20uPPaKr43Al7ExOPD+cw1hVwaVwxljHHR0tVPmrYw="
   },
   "hashicorp_tls": {
-    "hash": "sha256-4XHSPKszjMjt62fYDsgB+/43AY6Ixk8nTGUQBShcNgA=",
+    "hash": "sha256-PhRtfxTJ9pKfGilXlWkYi2rr9T5jTQySCT1l0ySAGhI=",
     "homepage": "https://registry.terraform.io/providers/hashicorp/tls",
     "owner": "hashicorp",
     "repo": "terraform-provider-tls",
-    "rev": "v4.4.1",
+    "rev": "v4.4.2",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-QuRWNrwfBOk9V5IrvSaT5Qtl98HjBJvSX/0BmZiYTh4="
+    "vendorHash": "sha256-4iv5WwD1qX7Hq/JLNkFrouAVC3dQ75glJhvVz74CN7E="
   },
   "hashicorp_vault": {
     "hash": "sha256-Bd9ZALCqHcM4cn1knLXLyD3fpnBlw992xFeZCCREqk8=",
@@ -733,22 +733,22 @@
     "vendorHash": "sha256-47xWjlzpQ/EYzjbuuMKQiu5cfYAXdYkXRl+AOEP+sA4="
   },
   "heroku_heroku": {
-    "hash": "sha256-FnJn/kFnTOOcnJtVdlSFpZh9S+BZodhk6IcvG0DFaLg=",
+    "hash": "sha256-KipVqV1OT5tINSuNbbGzt6JaKVsc9pSkQhUCo3KspCs=",
     "homepage": "https://registry.terraform.io/providers/heroku/heroku",
     "owner": "heroku",
     "repo": "terraform-provider-heroku",
-    "rev": "v5.4.1",
+    "rev": "v5.4.2",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },
   "hetznercloud_hcloud": {
-    "hash": "sha256-bK6oSiNa6W04IqsWYfgntpyTn1C/k1TpD+vmPWlsDFA=",
+    "hash": "sha256-aniX/TEZyZLE3F5hHWnlp2S+gbvVaNbf2QTcYgkutg8=",
     "homepage": "https://registry.terraform.io/providers/hetznercloud/hcloud",
     "owner": "hetznercloud",
     "repo": "terraform-provider-hcloud",
-    "rev": "v1.70.0",
+    "rev": "v1.70.2",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-PVoHdzP8gtGobxDyB9g5Zi7pNoATgeQFrPEWki2y8TE="
+    "vendorHash": "sha256-BpcXnBC8Li53taP3dt9AlwivQ5nMSaUSgzVj365Lzz8="
   },
   "huaweicloud_huaweicloud": {
     "hash": "sha256-e9osIGnur2QtVByW4X93X4pqPxhbqNUPn8CSIZAo6Vk=",
@@ -1445,11 +1445,11 @@
     "vendorHash": "sha256-6ivj3olSo9t75jVnow2GvzVGE5JeVtTjWxYDirvSyFc="
   },
   "trozz_pocketid": {
-    "hash": "sha256-jRjM8uMpa5FBRqAJY8eM+Sjo72E1et/HyIGEIoK/rXg=",
+    "hash": "sha256-JZAUncvrj42sArGYQP2CSGxU48IBIsrgbzTl8BbrqB4=",
     "homepage": "https://registry.terraform.io/providers/Trozz/pocketid",
     "owner": "Trozz",
     "repo": "terraform-provider-pocketid",
-    "rev": "v2.4.2",
+    "rev": "v2.5.0",
     "spdx": "MIT",
     "vendorHash": "sha256-Xro8lh5wNsAyYQrM8zIbzcPPTIGE1x99jA3ZMXZXwyk="
   },

pkgs/applications/virtualization/singularity/generic.nix

@@ -306,6 +306,10 @@ in
               hello
               cowsay
             ];
+            # mksquashfs scales its memory requirement with the number of
+            # processors (all host CPUs by default). Give the build VM enough
+            # memory to cope with high core-count builders.
+            memSize = 4096;
             singularity = finalAttrs.finalPackage;
           };
         };

pkgs/applications/virtualization/singularity/packages.nix

@@ -9,14 +9,14 @@ let
     callPackage
       (import ./generic.nix rec {
         pname = "apptainer";
-        version = "1.5.4";
+        version = "1.5.5";
         projectName = "apptainer";
 
         src = fetchFromGitHub {
           owner = "apptainer";
           repo = "apptainer";
           tag = "v${version}";
-          hash = "sha256-ru0dAuR6Q6NoYnLtEGm9/SiXPk6u1Lw3dcckkuqB7Cs=";
+          hash = "sha256-oV1LzCBYbMFbKGhli6eCbpMoyB1KeccnaEi+xHJ431g=";
         };
 
         # Override vendorHash with overrideAttrs.

pkgs/by-name/an/antares/package.nix

@@ -3,7 +3,7 @@
   lib,
   buildNpmPackage,
   electron,
-  nodejs_22,
+  nodejs_26,
   makeDesktopItem,
   copyDesktopItems,
   icoutils,
@@ -21,22 +21,22 @@ buildNpmPackage rec {
     hash = "sha256-A/ievIKXfFGu90aijxhmEWvfg2RqDtd7AtU+iyma3lU=";
   };
 
-  npmDepsHash = "sha256-X2dG75fpeXeU40wb22KAI7tDBybFwWUpKVj0Mlo3xhc=";
+  npmDepsHash = "sha256-fx/qwz3znXkLi81VLW2tB7TAZGO4M1dkzjzKcj3M4NA=";
 
   patches = [
     # Since version 0.7.28, package-lock is not updated properly so this patch update it to be able to build the package
     # This patch will probably be removed in the next version
     # If it does not build without it, you just need to do a npm update in the antares project and copy the patch
-    # https://github.com/antares-sql/antares/pull/1005
+    # https://github.com/antares-sql/antares/pull/1050
     (fetchpatch2 {
-      url = "https://github.com/antares-sql/antares/commit/6b2a45d93cf7fefdc92e0d87f390cd21a069b9a4.patch?full_index=1";
-      hash = "sha256-2dOGY0K6jMxSLNLDhwy/+ysTRB24XRXSoDu1AVxi4w4=";
+      url = "https://github.com/antares-sql/antares/commit/8fda56b28892dbaab2cbab0fee2db096bc4930c4.patch?full_index=1";
+      hash = "sha256-uDOEcakBuhbznb7eonJW2NC8QQX4HYR+6+Xa3TO6kFU=";
     })
   ];
 
-  nodejs = nodejs_22;
+  nodejs = nodejs_26;
 
-  buildInputs = [ nodejs_22 ];
+  buildInputs = [ nodejs_26 ];
 
   nativeBuildInputs = [
     copyDesktopItems
@@ -44,6 +44,7 @@ buildNpmPackage rec {
   ];
 
   npmBuildScript = "compile";
+  npmRebuildFlags = [ "--ignore-scripts" ];
 
   installPhase = ''
     runHook preInstall

pkgs/by-name/ap/apngopt/package.nix

@@ -32,9 +32,11 @@ stdenv.mkDerivation (finalAttrs: {
     zopfli
   ];
 
-  preBuild = ''
-    buildFlagsArray+=("LIBS=-lzopfli -lstdc++ -lpng -lz")
-  '';
+  strictDeps = true;
+
+  buildFlags = [
+    "LIBS=-lzopfli -lstdc++ -lpng -lz"
+  ];
 
   makeFlags = [ "CC=${stdenv.cc.targetPrefix}c++" ];
 
@@ -44,6 +46,8 @@ stdenv.mkDerivation (finalAttrs: {
     runHook postInstall
   '';
 
+  __structuredAttrs = true;
+
   meta = {
     homepage = "https://sourceforge.net/projects/apng/";
     description = "Optimizes APNG animations";

pkgs/by-name/bs/bs-manager/package.nix

@@ -8,7 +8,6 @@
   fetchNpmDeps,
   fetchFromGitHub,
   makeDesktopItem,
-  nodejs_22,
 
   autoPatchelfHook,
   copyDesktopItems,

pkgs/by-name/bt/btcpayserver/deps.json

@@ -61,13 +61,13 @@
   },
   {
     "pname": "BTCPayServer.Lightning.All",
-    "version": "1.7.13",
-    "hash": "sha256-038ETMvX3jSa6wea9tRuh6VNN2jGSx/JCWC1TXLWnk0="
+    "version": "1.7.14",
+    "hash": "sha256-dC4hz5tWCY1ilCxZBIZ8Lc3+JnD9fsV9/PJ9vxGONn4="
   },
   {
     "pname": "BTCPayServer.Lightning.CLightning",
-    "version": "1.7.9",
-    "hash": "sha256-QQjiWnNADGwsojtxFtgDUUJk71dSE6YzdS3z1d6qKZU="
+    "version": "1.7.10",
+    "hash": "sha256-KgQvei3S/xtLCQyEhLD3lQcg3d7gTrDcbutWT4oaTK0="
   },
   {
     "pname": "BTCPayServer.Lightning.Common",
@@ -76,28 +76,28 @@
   },
   {
     "pname": "BTCPayServer.Lightning.Common",
-    "version": "1.7.4",
-    "hash": "sha256-UMl/vAz6fYqZvXtwBdvkNPNZW0OrsU2XA1EXEaY/EFk="
+    "version": "1.7.5",
+    "hash": "sha256-qifQW9sAjNJNm44UBqNZydNLdZjUB5+dq/Eax75QVj8="
   },
   {
     "pname": "BTCPayServer.Lightning.Eclair",
-    "version": "1.7.4",
-    "hash": "sha256-D9ATUxibK+4YCw50+Pg+llkmddXAFuMhqGHNa7UvLI8="
+    "version": "1.7.5",
+    "hash": "sha256-XXXIElZQE25cx/R3Ah0HRidht+Xv2cXoXe1a0SUK79A="
   },
   {
     "pname": "BTCPayServer.Lightning.LND",
-    "version": "1.7.5",
-    "hash": "sha256-jTO2hjmUg6cBnCf6C9ESHyHXOMv7cHART9DtMpZ9oEw="
+    "version": "1.7.6",
+    "hash": "sha256-bD7IisjjoKp5SWlL34YxIIra0Oz/+7nBQxbjJ4ASW6w="
   },
   {
     "pname": "BTCPayServer.Lightning.LNDhub",
-    "version": "1.7.6",
-    "hash": "sha256-+am0ud+oezteBCAMHZq4slBpGze3OKbyO49a5t++IDk="
+    "version": "1.7.7",
+    "hash": "sha256-uh96Og/8kAhy1+PzIDLEnAUNuQjEK18aToF3U+cWbSE="
   },
   {
     "pname": "BTCPayServer.Lightning.Phoenixd",
-    "version": "1.7.5",
-    "hash": "sha256-Cy7H/CdatCnmN6HrOHR7cUy9zm2Jlunnn7TJewHaJxk="
+    "version": "1.7.6",
+    "hash": "sha256-xvCose2jPfb48Bw3JpUQY13sRNj+VFo7kFQb0pg+bzo="
   },
   {
     "pname": "BTCPayServer.NTag424",
@@ -516,13 +516,13 @@
   },
   {
     "pname": "NBitcoin",
-    "version": "10.0.11",
-    "hash": "sha256-LvZLfW3MMr/eq5uN4SSWHDVdSysVH3N8XAutZeDeeoo="
+    "version": "10.0.17",
+    "hash": "sha256-aUmn6R+diAhVFAA/cmuBIxI++tYPrsX7q4lEei6ikoI="
   },
   {
     "pname": "NBitcoin",
-    "version": "10.0.17",
-    "hash": "sha256-aUmn6R+diAhVFAA/cmuBIxI++tYPrsX7q4lEei6ikoI="
+    "version": "10.0.19",
+    "hash": "sha256-OlwtlVGwzmB5eU/VXfPBeYkg+a2KEvbd3ATTE3UUOls="
   },
   {
     "pname": "NBitcoin.Altcoins",

pkgs/by-name/bt/btcpayserver/package.nix

@@ -8,13 +8,13 @@
 
 buildDotnetModule rec {
   pname = "btcpayserver";
-  version = "2.4.6";
+  version = "2.4.7";
 
   src = fetchFromGitHub {
     owner = "btcpayserver";
     repo = "btcpayserver";
     tag = "v${version}";
-    hash = "sha256-bH6VPue4P+XUGFaaBBChdc8lSHFjsGBIfNw4fznE72A=";
+    hash = "sha256-8yVWNpxwXE4yDBX0aN2OgJkrJGBfKgj75pFletRtL7E=";
   };
 
   projectFile = "BTCPayServer/BTCPayServer.csproj";

pkgs/by-name/dr/drone-scp/package.nix

@@ -5,16 +5,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "drone-scp";
-  version = "1.8.1";
+  version = "1.8.2";
 
   src = fetchFromGitHub {
     owner = "appleboy";
     repo = "drone-scp";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-Wh2DCy0JIPjKahJpAXKGdhvNEtk24BNRTdza9etA888=";
+    hash = "sha256-wfpJXGF+bSXdQzRY13idWO8mU6SYYubtH7GtUKZzfME=";
   };
 
-  vendorHash = "sha256-GJwNG2vN/Vw0d3ecR8dMUdMp4P9Sh/WZ9C78AmJWezU=";
+  vendorHash = "sha256-BVY6USDRSrfvozW4qmbcVW/MZuUp7Xf0sI3K90v2bRw=";
 
   # Needs a specific user...
   doCheck = false;

pkgs/by-name/dw/dwarf-fortress/unfuck.nix

@@ -82,7 +82,8 @@ stdenv.mkDerivation {
     sed -i "1i #include <cstdint>" g_src/files.h
   '';
 
-  cmakeFlags = [
+  # Only needed to find GTK 2, see below.
+  cmakeFlags = lib.optionals (versionOlder release.unfuckRelease "0.47.05") [
     "-DGTK2_GLIBCONFIG_INCLUDE_DIR=${glib.out}/lib/glib-2.0/include"
     "-DGTK2_GDKCONFIG_INCLUDE_DIR=${gtk2.out}/lib/gtk-2.0/include"
   ];

pkgs/by-name/fi/fiddler-everywhere/package.nix

@@ -8,10 +8,10 @@
 
 appimageTools.wrapType2 (finalAttrs: {
   pname = "fiddler-everywhere";
-  version = "8.2.0";
+  version = "8.3.0";
   src = fetchurl {
     url = "https://downloads.getfiddler.com/linux/fiddler-everywhere-${finalAttrs.version}.AppImage";
-    hash = "sha256-cP9DEnDUj0m3DJ71ASe3b3AH7ljUHOdw4bkQrHkey6I=";
+    hash = "sha256-XDErnmHKpJjZCKffLRUhlJPg/4y+8b+BfmYySRFf6M8=";
   };
 
   extraPkgs = pkgs: [ pkgs.icu ];

pkgs/by-name/fl/flatpak-builder-tools/package.nix

@@ -7,12 +7,12 @@
   enableDeno ? false,
 }:
 let
-  version = "0-unstable-2026-09-30";
+  version = "0-unstable-2026-10-25";
   src = fetchFromGitHub {
     owner = "flatpak";
     repo = "flatpak-builder-tools";
-    rev = "74697c75b630d7330e77250fc13cb5ea688d9479";
-    hash = "sha256-yr6RTFN/ypqLPzagrjljnY9dhrin+bfbgzhsz3RY9ps=";
+    rev = "9d86d336a39b9af38b86f114b6ce5820fe260f91";
+    hash = "sha256-gKxnXQGICrWMkf3ZtiW694tMTichvdYx9x53P/wkZvE=";
   };
 in
 buildEnv {

pkgs/by-name/fl/flyspray/package.nix

@@ -56,7 +56,10 @@ stdenv.mkDerivation (finalAttrs: {
     mkdir -p "$DIR"
     cp -Tr "$src" "$DIR"
 
-    chmod u+w "$DIR/vendor/guzzle/guzzle/src/Guzzle/Http/Resources"
+    chmod -R u+w "$DIR"
+    # rm directories where content is generated at runtime
+    rm -rf "$DIR/cache" "$DIR/attachments" "$DIR/avatars"
+    # replace bundled cacerts
     rm "$DIR/vendor/guzzle/guzzle/src/Guzzle/Http/Resources/cacert.pem"
     ln -s ${cacert}/etc/ssl/certs/ca-bundle.crt \
       "$DIR/vendor/guzzle/guzzle/src/Guzzle/Http/Resources/cacert.pem"

pkgs/by-name/fr/frigate/package.nix

@@ -34,6 +34,13 @@ let
 
           # Account for divergences with the main `tokenizers` derivation:
           postPatch = "";
+          # datasets>=5 is incompatible with huggingface-hub_0
+          nativeCheckInputs = builtins.filter (p: (p.pname or "") != "datasets") oldAttrs.nativeCheckInputs;
+          disabledTestPaths = [
+            # ModuleNotFoundError: No module named 'datasets'
+            "benches/test_tiktoken.py"
+            "tests/documentation/test_tutorial_train_from_iterators.py"
+          ];
           disabledTests = [
             # PermissionError: [Errno 13] Permission denied: 'tests/data/small.txt'
             "TestUnigram"

pkgs/by-name/gi/gif2apng/package.nix

@@ -46,9 +46,9 @@ stdenv.mkDerivation (finalAttrs: {
     zopfli
   ];
 
-  preBuild = ''
-    buildFlagsArray+=("LIBS=-lzopfli -lstdc++ -lz")
-  '';
+  strictDeps = true;
+
+  buildFlags = [ "LIBS=-lzopfli -lstdc++ -lz" ];
 
   makeFlags = [ "CC=${stdenv.cc.targetPrefix}c++" ];
 
@@ -60,6 +60,8 @@ stdenv.mkDerivation (finalAttrs: {
     runHook postInstall
   '';
 
+  __structuredAttrs = true;
+
   meta = {
     homepage = "https://gif2apng.sourceforge.net/";
     description = "Simple program that converts animations from GIF to APNG format";

pkgs/by-name/gi/girara/package.nix

@@ -5,23 +5,18 @@
   meson,
   ninja,
   pkg-config,
-  check,
-  dbus,
-  xvfb-run,
   glib,
-  gtk3,
-  gettext,
-  libiconv,
-  json-glib,
-  libintl,
-  zathura,
   gitUpdater,
+  zathura,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "girara";
   version = "2026.07.18";
 
+  strictDeps = true;
+  __structuredAttrs = true;
+
   outputs = [
     "out"
     "dev"
@@ -38,25 +33,10 @@ stdenv.mkDerivation (finalAttrs: {
     meson
     ninja
     pkg-config
-    gettext
-    check
-    dbus
-    glib # for glib-compile-resources
   ];
 
   buildInputs = [
-    libintl
-    libiconv
-    json-glib
-  ];
-
-  propagatedBuildInputs = [
     glib
-    gtk3
-  ];
-
-  nativeCheckInputs = [
-    xvfb-run
   ];
 
   doCheck = !stdenv.hostPlatform.isDarwin;
@@ -65,13 +45,6 @@ stdenv.mkDerivation (finalAttrs: {
     "-Ddocs=disabled" # docs do not seem to be installed
   ];
 
-  checkPhase = ''
-    export NO_AT_BRIDGE=1
-    xvfb-run -s '-screen 0 800x600x24' dbus-run-session \
-      --config-file=${dbus}/share/dbus-1/session.conf \
-      meson test --print-errorlogs
-  '';
-
   passthru = {
     updateScript = gitUpdater { };
     tests = {
@@ -87,7 +60,7 @@ stdenv.mkDerivation (finalAttrs: {
       that focuses on simplicity and minimalism.
     '';
     license = lib.licenses.zlib;
-    platforms = lib.platforms.linux ++ lib.platforms.darwin;
-    maintainers = [ ];
+    platforms = lib.platforms.unix;
+    maintainers = with lib.maintainers; [ mithicspirit ];
   };
 })

pkgs/by-name/gi/gitea/package.nix

@@ -53,7 +53,7 @@ let
 in
 buildGo127Module (finalAttrs: {
   pname = "gitea";
-  version = "28.2.0";
+  version = "28.3.0";
 
   outputs = [
     "out"
@@ -64,12 +64,12 @@ buildGo127Module (finalAttrs: {
     owner = "go-gitea";
     repo = "gitea";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-gCS27gw/zNYVlcbwBiAtqM5JGVOTzbk3LoTd+p+EzKM=";
+    hash = "sha256-y+sawjuhvZn9HBnrfzXtdBwH3i3oXQBYNoRhpsmdURY=";
   };
 
   proxyVendor = true;
 
-  vendorHash = "sha256-AXEzpW4nPXu0D5exmUwBYoe5Fb1PHFWSSvnwz7VSQos=";
+  vendorHash = "sha256-H57+G/LeZobc6yzkeCdX4aPTc0mKdYUCTxOQFxzCeL4=";
 
   postPatch = ''
     substituteInPlace modules/setting/server.go \

pkgs/by-name/gp/gpu-screen-recorder/package.nix

@@ -30,12 +30,12 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gpu-screen-recorder";
-  version = "6.1.4";
+  version = "6.1.6";
 
   src = fetchgit {
     url = "https://repo.dec05eba.com/gpu-screen-recorder";
     tag = finalAttrs.version;
-    hash = "sha256-Xs+H/jb6ngeXwDD5eNkZLTmXqdo6R3ZAPz8Tliba8pA=";
+    hash = "sha256-Y2u+C0ioSORKkEiKRLAABGzTSAnoFU3J7OIlNOC4MAQ=";
   };
 
   postPatch = ''

pkgs/by-name/gp/gpu-viewer/package.nix

@@ -29,7 +29,7 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "gpu-viewer";
-  version = "4.02";
+  version = "4.04";
   pyproject = false;
   __structuredAttrs = true;
 
@@ -37,7 +37,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     owner = "arunsivaramanneo";
     repo = "gpu-viewer";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-B9pOpop47KQdTcsHvUIlAIwAthHs4toL/hL0uoKM/Xg=";
+    hash = "sha256-704G6vCYer+039R9+6vsHLjhsZo+JSKjiM3D66Vk74I=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/gr/graff/manifest.json

@@ -1,21 +1,21 @@
 {
-  "version": "0.302.46",
+  "version": "0.302.66",
   "assets": {
     "x86_64-linux": {
-      "url": "https://github.com/justrach/codegraff/releases/download/v0.302.46/graff-x86_64-linux.tar.gz",
-      "hash": "sha256-lSKHrf34hrrRefEHZGH2qhA/5/MqsqHPXe4DyXL3HHs="
+      "url": "https://github.com/justrach/codegraff/releases/download/v0.302.66/graff-x86_64-linux.tar.gz",
+      "hash": "sha256-ogMupabeenlA9p/0zfrvZwGqVraGXYSGXTdQwDNKLvY="
     },
     "aarch64-linux": {
-      "url": "https://github.com/justrach/codegraff/releases/download/v0.302.46/graff-aarch64-linux.tar.gz",
-      "hash": "sha256-aMunRNomOVp3lJEcVJBz+volgeA4cTwz5ia5rDbAVg8="
+      "url": "https://github.com/justrach/codegraff/releases/download/v0.302.66/graff-aarch64-linux.tar.gz",
+      "hash": "sha256-7tJKFxiez7JwnwJP6QzplimJyKK97PX+C8gtm2jNH18="
     },
     "aarch64-darwin": {
-      "url": "https://github.com/justrach/codegraff/releases/download/v0.302.46/graff-aarch64-macos.tar.gz",
-      "hash": "sha256-ymYwMBRWdXjnOnMJFJ5jX6o53n+FzXLgZe3hEkNFrIw="
+      "url": "https://github.com/justrach/codegraff/releases/download/v0.302.66/graff-aarch64-macos.tar.gz",
+      "hash": "sha256-v9z2L7lN4WjEiAN0Lf/Cqq/txwpeocsQ/Db6bI6gxk0="
     },
     "x86_64-darwin": {
-      "url": "https://github.com/justrach/codegraff/releases/download/v0.302.46/graff-x86_64-macos.tar.gz",
-      "hash": "sha256-eMQKtxvt6GJMrU+SLiZCt4zlPsRSeKbH8/IE8cQUqbQ="
+      "url": "https://github.com/justrach/codegraff/releases/download/v0.302.66/graff-x86_64-macos.tar.gz",
+      "hash": "sha256-rB2+ruws407j4aXguVgcaC7RQy5jvCleVtfQ42sKouM="
     }
   }
 }

pkgs/by-name/gr/grpc-health-probe/package.nix

@@ -7,13 +7,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "grpc-health-probe";
-  version = "0.4.59";
+  version = "0.4.61";
 
   src = fetchFromGitHub {
     owner = "grpc-ecosystem";
     repo = "grpc-health-probe";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-m/v8aYchGabl69+RJhpSNl5sJdvGqCrlLn6+/1fb7xA=";
+    hash = "sha256-wxa4iDbcg3TWcdBXg+UNkV+mBior41CslC/S88FskxA=";
   };
 
   tags = [
@@ -25,7 +25,7 @@ buildGoModule (finalAttrs: {
     "-X main.versionTag=${finalAttrs.version}"
   ];
 
-  vendorHash = "sha256-c46rSZDEv+uvaq2vaiyB3sfevyp3mDTQTEceFWcMeJI=";
+  vendorHash = "sha256-LyTtqMj96CJmfhUtCiQzMZ5M5R7BHPaVPL5R13Q3kVk=";
 
   nativeInstallCheckInputs = [
     versionCheckHook

pkgs/by-name/im/immich-machine-learning/package.nix

@@ -27,6 +27,7 @@ python.pkgs.buildPythonApplication (finalAttrs: {
   '';
 
   pythonRelaxDeps = [
+    "huggingface-hub"
     "onnx"
   ];
 

pkgs/by-name/iw/iwe/package.nix

@@ -3,21 +3,22 @@
   lib,
   fetchFromGitHub,
   rustPlatform,
+  gitMinimal,
   versionCheckHook,
   nix-update-script,
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "iwe";
-  version = "0.19.1";
+  version = "0.29.3";
 
   src = fetchFromGitHub {
     owner = "iwe-org";
     repo = "iwe";
     tag = "iwe-v${finalAttrs.version}";
-    hash = "sha256-rNhOwq9Hk+59MgS2lPL9UfsiJnaMJmDXZKAGZWpJhv4=";
+    hash = "sha256-M0V3oGe2btsA+CKCQFiVPOK/nt589TfHjqgm06Kr9m0=";
   };
 
-  cargoHash = "sha256-MGtm68g2msoCkceAn4ewp3x9hD8r9TEQAX/h1niQVb8=";
+  cargoHash = "sha256-XVemeR0tyDlzXYtjJzruH73XJnwRlR1AKeq8VD4yaOg=";
 
   cargoBuildFlags = [
     "--package=iwe"
@@ -25,6 +26,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "--package=iwes"
   ];
 
+  nativeCheckInputs = [ gitMinimal ];
+  __darwinAllowLocalNetworking = true;
+
   preCheck = ''
     substituteInPlace crates/iwe/tests/common.rs --replace-fail \
       'binary_path.push("target");' \

pkgs/by-name/je/jellyfin-mpv-shim/package.nix

@@ -1,74 +1,73 @@
 {
   lib,
   python3Packages,
-  copyDesktopItems,
   fetchPypi,
   gobject-introspection,
-  makeDesktopItem,
+  mpv,
   wrapGAppsHook3,
 }:
-
-python3Packages.buildPythonApplication rec {
+python3Packages.buildPythonApplication (finalAttrs: {
   pname = "jellyfin-mpv-shim";
-  version = "3.1.0";
+  version = "3.3.0";
   pyproject = true;
 
   # contains shaderpacks
   src = fetchPypi {
     pname = "jellyfin_mpv_shim";
-    inherit version;
-    hash = "sha256-ad6ZokTy8vxAVrgopK+DK9WQqOlEKssigA++68vuid4=";
+    inherit (finalAttrs) version;
+    hash = "sha256-GAdTaLM+Lb0RKcAzdlU3c9aEttv9533M7dyvQAbKezk=";
   };
 
   nativeBuildInputs = [
-    copyDesktopItems
     wrapGAppsHook3
     gobject-introspection
   ];
 
   build-system = with python3Packages; [ setuptools ];
 
+  # only pinned for its CA bundle
+  pythonRemoveDeps = [ "certifi" ];
+
   dependencies = with python3Packages; [
     jellyfin-apiclient-python
-    mpv
+    python3Packages.mpv
+    pillow
+    pygobject3
     python-mpv-jsonipc
     requests
 
-    # gui dependencies
-    pillow
+    # systray dependency
     pystray
 
     # discord rich presence dependency
     pypresence
   ];
 
-  preCheck = ''
-    export HOME=$TMPDIR
-
-    # remove jellyfin_mpv_shim/win_utils.py:
-    #   ModuleNotFoundError: No module named 'win32gui'
-    rm jellyfin_mpv_shim/win_utils.py
-  '';
-
   postPatch = ''
     substituteInPlace jellyfin_mpv_shim/conf.py \
       --replace-fail "check_updates: bool = True" "check_updates: bool = False" \
       --replace-fail 'notify_updates: str = "default"' 'notify_updates: str = "disabled"'
-    # python-mpv renamed to mpv with 1.0.4
+    # python-mpv renamed to mpv with 1.0.3
     substituteInPlace pyproject.toml \
-      --replace-fail "python-mpv" "mpv" \
-      --replace-fail "mpv-jsonipc" "python_mpv_jsonipc"
+      --replace-fail '"python-mpv>=' '"mpv>='
   '';
 
-  # Install all the icons for the desktop item
   postInstall = ''
+    install -Dm644 -t "$out"/share/applications jellyfin_mpv_shim/integration/com.github.iwalton3.jellyfin-mpv-shim.desktop
+    install -Dm644 -t "$out"/share/metainfo jellyfin_mpv_shim/integration/com.github.iwalton3.jellyfin-mpv-shim.appdata.xml
     for s in 16 32 48 64 128 256; do
-      mkdir -p $out/share/icons/hicolor/''${s}x''${s}/apps
-      ln -s $out/${python3Packages.python.sitePackages}/jellyfin_mpv_shim/integration/jellyfin-''${s}.png \
-        $out/share/icons/hicolor/''${s}x''${s}/apps/jellyfin-mpv-shim.png
+      install -Dm644 jellyfin_mpv_shim/integration/jellyfin-"$s".png \
+        "$out"/share/icons/hicolor/"$s"x"$s"/apps/com.github.iwalton3.jellyfin-mpv-shim.png
     done
   '';
 
+  makeWrapperArgs = [
+    "--suffix"
+    "PATH"
+    ":"
+    (lib.makeBinPath [ mpv ])
+  ];
+
   # needed for pystray to access appindicator using GI
   preFixup = ''
     makeWrapperArgs+=("''${gappsWrapperArgs[@]}")
@@ -77,21 +76,6 @@ python3Packages.buildPythonApplication rec {
 
   pythonImportsCheck = [ "jellyfin_mpv_shim" ];
 
-  desktopItems = [
-    (makeDesktopItem {
-      name = "jellyfin-mpv-shim";
-      exec = "jellyfin-mpv-shim";
-      icon = "jellyfin-mpv-shim";
-      desktopName = "Jellyfin MPV Shim";
-      categories = [
-        "Video"
-        "AudioVideo"
-        "TV"
-        "Player"
-      ];
-    })
-  ];
-
   meta = {
     homepage = "https://github.com/jellyfin/jellyfin-mpv-shim";
     description = "Allows casting of videos to MPV via the jellyfin mobile and web app";
@@ -102,22 +86,24 @@ python3Packages.buildPythonApplication rec {
       to prevent needless transcoding of your media files on the server. The player also has
       advanced features, such as bulk subtitle updates and launching commands on events.
     '';
-    changelog = "https://github.com/jellyfin/jellyfin-mpv-shim/releases/tag/v${version}";
-    license = with lib.licenses; [
-      # jellyfin-mpv-shim
-      gpl3Only
-      mit
-
-      # shader-pack licenses (github:iwalton3/default-shader-pack)
-      # KrigBilateral, SSimDownscaler, NNEDI3
-      gpl3Plus
-      # Anime4K, FSRCNNX
-      mit
-      # Static Grain
-      unlicense
+    changelog = "https://github.com/jellyfin/jellyfin-mpv-shim/releases/tag/v${finalAttrs.version}";
+    license =
+      with lib.licenses;
+      AND [
+        # jellyfin-mpv-shim
+        gpl3Plus
+        # jellyfin-mpv-shim, and the Anime4K, NVIDIA Image Scaling, AMD FSR, AMD CAS and ArtCNN shaders
+        mit
+        # KrigBilateral, SSimDownscaler, NNEDI3 and FSRCNNX shaders
+        lgpl3Plus
+        # Static Grain and Anime4K AutoDownscalePre shaders
+        unlicense
+      ];
+    maintainers = with lib.maintainers; [
+      connor-grady
+      jojosch
     ];
-    maintainers = with lib.maintainers; [ jojosch ];
     mainProgram = "jellyfin-mpv-shim";
     platforms = lib.platforms.linux;
   };
-}
+})

pkgs/by-name/jo/journalist/package.nix

@@ -1,34 +0,0 @@
-{
-  lib,
-  buildGoModule,
-  fetchFromGitHub,
-}:
-
-buildGoModule (finalAttrs: {
-  pname = "journalist";
-  version = "1.0.1";
-
-  src = fetchFromGitHub {
-    owner = "mrusme";
-    repo = "journalist";
-    tag = "v${finalAttrs.version}";
-    hash = "sha256-3MnkndG2c4P3oprIRbzj26oAutEmAgsUx8mjlaDLrkI=";
-  };
-
-  vendorHash = "sha256-2EJ96dhhU7FZxMkHOmQo79WCHu8U1AGgFf47FIuQdek=";
-
-  ldflags = [
-    "-s"
-    "-w"
-    "-X github.com/mrusme/journalist/journalistd.VERSION=${finalAttrs.version}"
-  ];
-
-  meta = {
-    description = "RSS aggregator";
-    homepage = "https://github.com/mrusme/journalist";
-    changelog = "https://github.com/mrusme/journalist/releases/tag/v${finalAttrs.version}";
-    license = lib.licenses.gpl3Only;
-    maintainers = with lib.maintainers; [ moraxyc ];
-    mainProgram = "journalist";
-  };
-})

pkgs/by-name/ki/kismet/package.nix

@@ -34,13 +34,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "kismet";
-  version = "2025-09-R1";
+  version = "2026-10-R1";
 
   src = fetchFromGitHub {
     owner = "kismetwireless";
     repo = "kismet";
     tag = "kismet-${finalAttrs.version}";
-    hash = "sha256-bwgeBIa5P1he0azWBu1YTXS9EGlHdJK8hS6A5Rj9XU4=";
+    hash = "sha256-thYxqddJuRUDRLx5lhuDEHOQIqYNuj/OHo/KJETXqnc=";
   };
 
   postPatch = ''

pkgs/by-name/ko/komga/package.nix

@@ -10,11 +10,11 @@
 
 stdenvNoCC.mkDerivation rec {
   pname = "komga";
-  version = "1.29.1";
+  version = "1.29.2";
 
   src = fetchurl {
     url = "https://github.com/gotson/${pname}/releases/download/${version}/${pname}-${version}.jar";
-    sha256 = "sha256-6cr64extDRF8I3X/+ey3N+04Tu3ir+qXFry1VdluqDQ=";
+    sha256 = "sha256-Qvyqwpy9ABmcXBbxsliCvVp868aV12HwT0Uy0IoiBj8=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/la/lasuite-docs/package.nix

@@ -52,6 +52,13 @@ let
         }
       );
       mcp = self.mcp_1;
+      # mistralai's MCP integration (unused here) requires mcp>=2
+      mistralai = super.mistralai.overridePythonAttrs (old: {
+        disabledTestPaths = old.disabledTestPaths or [ ] ++ [
+          "src/mistralai/extra/tests/test_connectors_gateway.py"
+          "src/mistralai/extra/tests/test_mcp_streamable_http.py"
+        ];
+      });
     }
   );
 in

pkgs/by-name/li/libation/deps.json

@@ -26,13 +26,13 @@
   },
   {
     "pname": "Avalonia",
-    "version": "12.1.1",
-    "hash": "sha256-GTv2rouQKTrLcryoodYujka0YKSFJ/Xx8Y9ikHPZ130="
+    "version": "12.1.3",
+    "hash": "sha256-3/tmBbAuFEhmyyN2XrWvclU3nrt+3nXPEQZvMkjYNzQ="
   },
   {
     "pname": "Avalonia",
-    "version": "12.1.2",
-    "hash": "sha256-mZh0FMY6w5kzRqhKhSAG35Y/+Dn5bRQFV+4x+IUNsI8="
+    "version": "12.1.4",
+    "hash": "sha256-kM+WOg5f7X/A5c2c7+PBWbeN4IYnLD3d6Ux1y4P5xKw="
   },
   {
     "pname": "Avalonia.Angle.Windows.Natives",
@@ -46,8 +46,8 @@
   },
   {
     "pname": "Avalonia.Controls.ColorPicker",
-    "version": "12.1.2",
-    "hash": "sha256-wK+8S+PYFJahG6gJDx0oKB4e+ltfsPEq11vWCv+XFIc="
+    "version": "12.1.4",
+    "hash": "sha256-Sx1gP65XY3Y92K8/84W+nFyky1wENMQ2D9Sa2QrlfgY="
   },
   {
     "pname": "Avalonia.Controls.DataGrid",
@@ -56,58 +56,58 @@
   },
   {
     "pname": "Avalonia.Controls.WebView",
-    "version": "12.1.0",
-    "hash": "sha256-EknNQBZZXhFop+BWK+EzDxF1kroJKPqb840RcrjnZJE="
+    "version": "12.1.1",
+    "hash": "sha256-rCCCbFZyT7DnSz6idl7BDnKkmN0i5N4WvFqGQHzKCIA="
   },
   {
     "pname": "Avalonia.Desktop",
-    "version": "12.1.2",
-    "hash": "sha256-wsNZFYW6jH9D8fx54xwAEsbpjqGsxzwbGlj+MVf2ZHo="
+    "version": "12.1.4",
+    "hash": "sha256-XaV99PVtMvOJRHXahp01ValoCF9dk7c7P1ron3ClzVg="
   },
   {
     "pname": "Avalonia.FreeDesktop",
-    "version": "12.1.2",
-    "hash": "sha256-Esxo2rYv/MSVmdWqY5nu1Vd4YcAr87mg4o56maQaaSs="
+    "version": "12.1.4",
+    "hash": "sha256-5ol5EzhTOUOiRtNSIFXttEIpqhnreoIzgB8Niftj2nI="
   },
   {
     "pname": "Avalonia.FreeDesktop.AtSpi",
-    "version": "12.1.2",
-    "hash": "sha256-XMWyVgn3S5x9Z0fzffD2lSQvhJKMCjLDUlFizUqp4aQ="
+    "version": "12.1.4",
+    "hash": "sha256-2NKWgMF65G6Id3XmhA+Ww35oAW+e2su7e2LUU+VoVkk="
   },
   {
     "pname": "Avalonia.HarfBuzz",
-    "version": "12.1.2",
-    "hash": "sha256-M2+qSEJk3MncUvFQmA5I5S+Vjf7o5aHnpgXqbbrVT2s="
+    "version": "12.1.4",
+    "hash": "sha256-9S5cG2oAiG70aBbtL8miwohEKJsa8wvX6iR+Ig0gwMs="
   },
   {
     "pname": "Avalonia.Native",
-    "version": "12.1.2",
-    "hash": "sha256-46paePGddiQlQqvy6fg/QLmlKaV6B1tDbckd/pRYWMk="
+    "version": "12.1.4",
+    "hash": "sha256-QY2/RSUnSMUpWpSENtZG7ZDVSlhy6DUkZ9GBWHvBtR0="
   },
   {
     "pname": "Avalonia.Remote.Protocol",
-    "version": "12.1.2",
-    "hash": "sha256-IPuepoUzVR+llgU9CInvkrTYW00CVHdzewzE6QYcZV0="
+    "version": "12.1.4",
+    "hash": "sha256-4RX1FD7w/HRc8XG7kmrRCD7UyDPKl3oOsRvbDEFgX1w="
   },
   {
     "pname": "Avalonia.Skia",
-    "version": "12.1.2",
-    "hash": "sha256-K4vnkvwFFGdbPKzpfD+MCKbY3fmmCMroSzJanPVlI0A="
+    "version": "12.1.4",
+    "hash": "sha256-9C4S0G35KuEW5bqqxeAxnOwJDZkKMD7cGv0OfCAqbmk="
   },
   {
     "pname": "Avalonia.Themes.Fluent",
-    "version": "12.1.2",
-    "hash": "sha256-wBngLXs5jn3Pk+UWz+uz9ftGPOStpt++NQTHswsvPr8="
+    "version": "12.1.4",
+    "hash": "sha256-CywxfuTbybEsnLVk1PmbEIcrZVpFDJGmasBj2QVqPDg="
   },
   {
     "pname": "Avalonia.Win32",
-    "version": "12.1.2",
-    "hash": "sha256-vcVvzUkvG7ByiuTKuN0ZhrRZYyW8ynNIdVkHkLUZYII="
+    "version": "12.1.4",
+    "hash": "sha256-dDq+riEPKHuEakLSkrLYzIWzRb743xOgHkgdJSCQuBs="
   },
   {
     "pname": "Avalonia.X11",
-    "version": "12.1.2",
-    "hash": "sha256-lu2v/wUT7MGeCood/qfjizTrf8Bq1Nd/wpjcrrdMWOw="
+    "version": "12.1.4",
+    "hash": "sha256-wQF50to9DX36dbppioBnSjvtm1Gk06ROyCmDLGjm1pY="
   },
   {
     "pname": "AvaloniaUI.DiagnosticsSupport",
@@ -166,8 +166,8 @@
   },
   {
     "pname": "Google.Protobuf",
-    "version": "3.36.1",
-    "hash": "sha256-5ZnaMCRL/KtObOunxlRmjjN7WGzQyhLLpIJscQNpUgE="
+    "version": "3.36.2",
+    "hash": "sha256-EYJZDbF1+QV3B4V6HfSLIXIm0HMnFs01P6SqRoPTjcs="
   },
   {
     "pname": "HarfBuzzSharp",
@@ -221,8 +221,8 @@
   },
   {
     "pname": "Microsoft.Build.Tasks.Git",
-    "version": "10.0.400",
-    "hash": "sha256-BTXWWyyP+6BdpOVMbaC5tgOpxncCdOHP1fCncahFHDk="
+    "version": "10.0.403",
+    "hash": "sha256-nSGnEen86Ws06MAvEAabxmo4HYSikS5loU3JxBETXik="
   },
   {
     "pname": "Microsoft.CodeAnalysis.Analyzers",
@@ -256,14 +256,19 @@
   },
   {
     "pname": "Microsoft.Data.Sqlite.Core",
-    "version": "10.0.11",
-    "hash": "sha256-zCXkQ7XmO+2ZyEb1hPwr6S8HfLBC6qN2w5wke+qGb5c="
+    "version": "10.0.14",
+    "hash": "sha256-3wgo44YaHgJAyaPsGJHNwZQs3Ee2HI0vs2ziVC8CsJI="
   },
   {
     "pname": "Microsoft.EntityFrameworkCore",
     "version": "10.0.11",
     "hash": "sha256-j+DNpi5fd077QGMKu09LKD3fV5qWmswsuypp+s5gH/0="
   },
+  {
+    "pname": "Microsoft.EntityFrameworkCore",
+    "version": "10.0.14",
+    "hash": "sha256-ISn7Cc7bF8HUlSniBR5cWsJe3nhS4WvSJlvk0WoVZuU="
+  },
   {
     "pname": "Microsoft.EntityFrameworkCore",
     "version": "10.0.4",
@@ -274,6 +279,11 @@
     "version": "10.0.11",
     "hash": "sha256-F4Cp4dWQx3MXPu2MKaWI8H7JIoTP8J8gTfgex3N6QTU="
   },
+  {
+    "pname": "Microsoft.EntityFrameworkCore.Abstractions",
+    "version": "10.0.14",
+    "hash": "sha256-MNijMSsCCksBDQPfMFvEVFZbmRJUoZy4l10V+82Ysmo="
+  },
   {
     "pname": "Microsoft.EntityFrameworkCore.Abstractions",
     "version": "10.0.4",
@@ -284,6 +294,11 @@
     "version": "10.0.11",
     "hash": "sha256-WX2Z7E3wYXDfQ032C33ebQpbfD8WbuFbL/yU8XBEw7c="
   },
+  {
+    "pname": "Microsoft.EntityFrameworkCore.Analyzers",
+    "version": "10.0.14",
+    "hash": "sha256-hJePLMTRCBELmZgMaiYK1GC8nJzpSDOLHLDrJIhltRk="
+  },
   {
     "pname": "Microsoft.EntityFrameworkCore.Analyzers",
     "version": "10.0.4",
@@ -291,14 +306,19 @@
   },
   {
     "pname": "Microsoft.EntityFrameworkCore.Design",
-    "version": "10.0.11",
-    "hash": "sha256-4U1Ovp1F2KvfDSjxdFgz6tSuLxXblZ0Glp8NzqVOnrg="
+    "version": "10.0.14",
+    "hash": "sha256-/PHTATJ/YavLh5SrhJ3nd7WScttUYsTU5wOVa2ibPeY="
   },
   {
     "pname": "Microsoft.EntityFrameworkCore.Relational",
     "version": "10.0.11",
     "hash": "sha256-aMfOqNSXcSk9yJnzWig0+Zk8pBl2/Z9Fw6GxmfTlsMM="
   },
+  {
+    "pname": "Microsoft.EntityFrameworkCore.Relational",
+    "version": "10.0.14",
+    "hash": "sha256-Ra56SY6M7ANJtS07ND72T4rQRWgEEkIJdD9Oow4YY70="
+  },
   {
     "pname": "Microsoft.EntityFrameworkCore.Relational",
     "version": "10.0.4",
@@ -306,29 +326,34 @@
   },
   {
     "pname": "Microsoft.EntityFrameworkCore.Sqlite",
-    "version": "10.0.11",
-    "hash": "sha256-R4xhxP4ZZuHJ4nCpt5GeflxxPCrwPtMHzWrr/kE+21M="
+    "version": "10.0.14",
+    "hash": "sha256-01KKAksBgR1BSEGgzR6a3WO1UGzGkcDqffaSxHAUMuo="
   },
   {
     "pname": "Microsoft.EntityFrameworkCore.Sqlite.Core",
-    "version": "10.0.11",
-    "hash": "sha256-V44eYx25lkySJsh3nOKYbdylei3UhJCX4d1bGf0IWRk="
+    "version": "10.0.14",
+    "hash": "sha256-rNY8ZHtcJjJSb5Vp1p7ijvwUI/YaJZESWyr/asI42Sg="
   },
   {
     "pname": "Microsoft.EntityFrameworkCore.Tools",
-    "version": "10.0.11",
-    "hash": "sha256-7guglXzm7jCf7UACzV4doF9IA6Ld/yrMkB7hCSnrv7g="
+    "version": "10.0.14",
+    "hash": "sha256-HqCW22b9WTsekql5Int3LOY2u7SsubRpdD+9c3/g75A="
   },
   {
     "pname": "Microsoft.Extensions.Caching.Abstractions",
-    "version": "10.0.11",
-    "hash": "sha256-hhLHPCS06OOGQMlQT3KXU7x5dSp6BN48njsGY/aOFqA="
+    "version": "10.0.14",
+    "hash": "sha256-K+XFw6cOVFHCsHc4r9/c6gKWgu90Zq+EHeZkFVOABEs="
   },
   {
     "pname": "Microsoft.Extensions.Caching.Memory",
     "version": "10.0.11",
     "hash": "sha256-1LXlZK3RnwIxdFqG+8BH0+lc7NhKjA99xN2fe/nIq2I="
   },
+  {
+    "pname": "Microsoft.Extensions.Caching.Memory",
+    "version": "10.0.14",
+    "hash": "sha256-MWPEjHpOVA+P4EiLnOBKaflAx9UY90XGVTMQozlO3m8="
+  },
   {
     "pname": "Microsoft.Extensions.Caching.Memory",
     "version": "10.0.4",
@@ -344,6 +369,11 @@
     "version": "10.0.11",
     "hash": "sha256-hhXsutV4pzMdy8CCG12Pqh4jV/emiQsuWUl1WpClZOs="
   },
+  {
+    "pname": "Microsoft.Extensions.Configuration",
+    "version": "10.0.14",
+    "hash": "sha256-sMoVuQeKRc/12LSIz9HHVzXMQCDRPDDbeXM+QkJu9a0="
+  },
   {
     "pname": "Microsoft.Extensions.Configuration.Abstractions",
     "version": "10.0.0",
@@ -354,6 +384,16 @@
     "version": "10.0.11",
     "hash": "sha256-gx/afsc4v9zRAUPsiySt6BcZVSMc9QJE4vqJMQpiOPk="
   },
+  {
+    "pname": "Microsoft.Extensions.Configuration.Abstractions",
+    "version": "10.0.14",
+    "hash": "sha256-lsCkICXAFxXnAqGv4i0L0UMEqO8vjmXIy6ZuhellwO0="
+  },
+  {
+    "pname": "Microsoft.Extensions.Configuration.Abstractions",
+    "version": "10.0.4",
+    "hash": "sha256-bvEQLGSOpJHKdPD6kd59IIi4x57lKapVMgOORtcjJPs="
+  },
   {
     "pname": "Microsoft.Extensions.Configuration.Binder",
     "version": "10.0.0",
@@ -364,15 +404,25 @@
     "version": "10.0.11",
     "hash": "sha256-U1Sfq/12RMtjKau0bwR8emdja0JfW+N+lgIi+du4yAo="
   },
+  {
+    "pname": "Microsoft.Extensions.Configuration.FileExtensions",
+    "version": "10.0.14",
+    "hash": "sha256-//+jjPt3w9x0RYZ340dfiwbroRMggqhUW4DEc2x5zcg="
+  },
   {
     "pname": "Microsoft.Extensions.Configuration.Json",
     "version": "10.0.11",
     "hash": "sha256-kd/4oufTKaitTqzHoZg8OQ0PZS9OOWI3tKFJiVW4KrY="
   },
+  {
+    "pname": "Microsoft.Extensions.Configuration.Json",
+    "version": "10.0.14",
+    "hash": "sha256-Hk4XSD1jsaU3GBrBNo/hH/wV7DfZaarRnmu6x6HN9QM="
+  },
   {
     "pname": "Microsoft.Extensions.DependencyInjection",
-    "version": "10.0.11",
-    "hash": "sha256-xuwGge8n7OjS+uS85QiR0LdDORIJ1gm6w3hMXtvuWj8="
+    "version": "10.0.14",
+    "hash": "sha256-EU4Bk0tjcAnVW009aOsGoi6xtv/75w2wlEJ2OP53LUk="
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection",
@@ -386,8 +436,8 @@
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
-    "version": "10.0.11",
-    "hash": "sha256-5PZeQgWmVo8K+7GgKEVAd6xcn+3XVNVzT4cg/DBtjqY="
+    "version": "10.0.14",
+    "hash": "sha256-eaweSAmGYrBSKR5eCCnTf476Zae1RCfsEFQWmVlcrd8="
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
@@ -406,29 +456,49 @@
   },
   {
     "pname": "Microsoft.Extensions.DependencyModel",
-    "version": "10.0.11",
-    "hash": "sha256-hWKqLT0Ix5FibpGrr4/crZpSfKHPCe+sfWzWWu3Ykgw="
+    "version": "10.0.14",
+    "hash": "sha256-2O39+CABDxPH3+nlb4+6eMuubsQabp/y1UV/Eia95iE="
   },
   {
     "pname": "Microsoft.Extensions.FileProviders.Abstractions",
     "version": "10.0.11",
     "hash": "sha256-4NmJ1/Fgbn45wcD8iy0wV0aU//mCsrcwmLmzHpwJGqU="
   },
+  {
+    "pname": "Microsoft.Extensions.FileProviders.Abstractions",
+    "version": "10.0.14",
+    "hash": "sha256-w8oXMVNZjf6c5z7emAR5GNXtmhGK9Wrr/xjuxSpgbVs="
+  },
   {
     "pname": "Microsoft.Extensions.FileProviders.Physical",
     "version": "10.0.11",
     "hash": "sha256-XKXZuA0PDC+bNOKU9PJXs7uazkSaw0GrMShVbk6VdWA="
   },
+  {
+    "pname": "Microsoft.Extensions.FileProviders.Physical",
+    "version": "10.0.14",
+    "hash": "sha256-LzM+T7HEd6yMTvEaW/dMyXN5+hg0w2ylhyMe0b4utFI="
+  },
   {
     "pname": "Microsoft.Extensions.FileSystemGlobbing",
     "version": "10.0.11",
     "hash": "sha256-PhOghJRLqX//zef4FTRk4uKIq0v2Kx04J2FusJgOw0o="
   },
+  {
+    "pname": "Microsoft.Extensions.FileSystemGlobbing",
+    "version": "10.0.14",
+    "hash": "sha256-POHDvJdb78bvhU/JWXLs/sdAQGUAClDNTPCxwqcKbYk="
+  },
   {
     "pname": "Microsoft.Extensions.Logging",
     "version": "10.0.11",
     "hash": "sha256-K8MjBeYsxUdOyY5+QryOojGfc4AkE/FHqrx5MxSuZhU="
   },
+  {
+    "pname": "Microsoft.Extensions.Logging",
+    "version": "10.0.14",
+    "hash": "sha256-/cSTTzhXSCwqHP/UnB0L9ALxCxGwCTOm/GIugbUlJHQ="
+  },
   {
     "pname": "Microsoft.Extensions.Logging",
     "version": "10.0.4",
@@ -446,8 +516,8 @@
   },
   {
     "pname": "Microsoft.Extensions.Logging.Abstractions",
-    "version": "10.0.11",
-    "hash": "sha256-HdUH2q55lbAwMswMdQjX01DrgaxegtbyMo4VYezhB1o="
+    "version": "10.0.14",
+    "hash": "sha256-pKLCc8ewhBGk6tCwvMXhrDwDEsobttL41pxWSNALF+A="
   },
   {
     "pname": "Microsoft.Extensions.Logging.Abstractions",
@@ -461,8 +531,8 @@
   },
   {
     "pname": "Microsoft.Extensions.Options",
-    "version": "10.0.11",
-    "hash": "sha256-djBqHYNsYC427UNbkyBo9x9lAtX2Ls460ixdRrSdMa8="
+    "version": "10.0.14",
+    "hash": "sha256-KpSvWLe9KPlz2mOI4KQoHWjUbvwZLy7ptm4pV2GY6Cs="
   },
   {
     "pname": "Microsoft.Extensions.Options",
@@ -479,6 +549,11 @@
     "version": "10.0.11",
     "hash": "sha256-4z+bHf8r4cFzX2VwW3HdZ44yBjZpfhYzlgzkdpbS7o0="
   },
+  {
+    "pname": "Microsoft.Extensions.Primitives",
+    "version": "10.0.14",
+    "hash": "sha256-8u1dXFbG/Uzw5CN9oSHnbz0Ukulj83eW1cXi3Gh+7iw="
+  },
   {
     "pname": "Microsoft.Extensions.Primitives",
     "version": "9.0.0",
@@ -491,13 +566,13 @@
   },
   {
     "pname": "Microsoft.SourceLink.Common",
-    "version": "10.0.400",
-    "hash": "sha256-QmeO7ZUX5i3PIcWkbDpm6rqZnDjNm65CQKCeKFEAeKM="
+    "version": "10.0.403",
+    "hash": "sha256-6Z166kAgQtBPqklxcJcY6/JWQGtMWfcAyxyKc5hZxqI="
   },
   {
     "pname": "Microsoft.SourceLink.GitHub",
-    "version": "10.0.400",
-    "hash": "sha256-ASTFjGeWHJ0i2d7gBgVi+xqWDFQz8wZr1TPdiq2byyc="
+    "version": "10.0.403",
+    "hash": "sha256-nDJS+MvhVHv4wSt8Zae8KJhbqy1Zj/l8E+AQTCLYDNU="
   },
   {
     "pname": "Microsoft.VisualStudio.SolutionPersistence",
@@ -546,13 +621,13 @@
   },
   {
     "pname": "Polly",
-    "version": "8.7.0",
-    "hash": "sha256-iMNusWW+4nuIvkNLUaoru23Roe9vpC140TOIHbLvewE="
+    "version": "8.8.0",
+    "hash": "sha256-ZV7xox4nUTjMLoHDWFJQuGs6pffDhsefkwHkmGSZwr4="
   },
   {
     "pname": "Polly.Core",
-    "version": "8.7.0",
-    "hash": "sha256-1AT4Xym9hn2Awgul9WErwXk2bBPN58P9XfRExrIPItg="
+    "version": "8.8.0",
+    "hash": "sha256-Qz675JdkvZJkcYFWRuwIzXGiiOUYUcXnDHvd3UmnlDg="
   },
   {
     "pname": "RBush.Signed",
@@ -561,43 +636,58 @@
   },
   {
     "pname": "ReactiveUI",
-    "version": "24.1.0",
-    "hash": "sha256-RViUnny6anqsSKiB4bT3O9DCryK6QElDd0fySu1tULQ="
+    "version": "26.0.1",
+    "hash": "sha256-i45O86UdB7FtbdKP9LqohDlqftkT+JPkiKoq+h8h4RA="
   },
   {
     "pname": "ReactiveUI.Avalonia",
-    "version": "12.1.1",
-    "hash": "sha256-+R+16JubbzVgEYF8X/FXsmU9gbi5N9359GiAEb+d9WU="
+    "version": "12.1.6",
+    "hash": "sha256-8eY1BTOelNenqRulDmpfHE/N9d6r/O+MRgIOiJydY7Q="
+  },
+  {
+    "pname": "ReactiveUI.Binding",
+    "version": "9.1.0",
+    "hash": "sha256-ufni/l0vzWOquBDVwsRajQlt/xYEwVmMErfbXyIxiKw="
+  },
+  {
+    "pname": "ReactiveUI.Binding.Avalonia",
+    "version": "9.1.0",
+    "hash": "sha256-acW6/7Kp7y8H7yL+yChpOvBxw6VBS8d5cRBCuO1jxKk="
   },
   {
     "pname": "ReactiveUI.Core",
-    "version": "24.1.0",
-    "hash": "sha256-YLsqJ1eIGszO6VDDKLydXXeU94aOU0o/QUBrnt+icPk="
-  },
-  {
-    "pname": "ReactiveUI.Disposables",
-    "version": "7.0.0",
-    "hash": "sha256-133L7v/HbSx11YGQ2IWxLXdpAr8qXLHJS1L2IgaLh+c="
+    "version": "26.0.1",
+    "hash": "sha256-aYaF+QKZiYbhnoaLZU6Oi45CjoNlLGx7x4y2mY0xzVU="
   },
   {
     "pname": "ReactiveUI.Disposables",
     "version": "7.1.0",
     "hash": "sha256-kJCbzrNwkrYHfVMMlDr0mnxlgs48JHnxKNtOzx583t8="
   },
+  {
+    "pname": "ReactiveUI.Disposables",
+    "version": "9.0.0",
+    "hash": "sha256-SliRkKtSAj6cn9uxuMEj3f+ZMBPiZgHnQUF37OHXHl8="
+  },
   {
     "pname": "ReactiveUI.Primitives",
-    "version": "7.1.0",
-    "hash": "sha256-rjPOOvzvP1j8v7UY4WEmMAhXU6+YnwTv5tOdreezauo="
+    "version": "9.0.0",
+    "hash": "sha256-9GoFS32WeS3xWJAUKPvJMPELzlIUce9aoUzBf6RPU1o="
   },
   {
     "pname": "ReactiveUI.Primitives.Avalonia",
-    "version": "7.1.0",
-    "hash": "sha256-JTKzqsX5LuY6hdbFqmnFfkorOkb7HDL/2PAZmbPPJyI="
+    "version": "9.0.0",
+    "hash": "sha256-j75oh3Qz6MRh78AxcVNh5i/2+DheWuCQ85oro4PmZCw="
   },
   {
     "pname": "ReactiveUI.Primitives.Core",
-    "version": "7.1.0",
-    "hash": "sha256-8AXUmTSzJSovVlOzAQIWM3R0Z0fUZboUma37twHYr7s="
+    "version": "9.0.0",
+    "hash": "sha256-gMne0jrJ2rvdSde3PUAJBvouN1Fxf4625wAmmI5nKX0="
+  },
+  {
+    "pname": "ReactiveUI.SourceGenerators",
+    "version": "4.2.0",
+    "hash": "sha256-n2Md+htrHusqS5AQpIq99o/DKwkWU4CtY8Ac0DVb4LQ="
   },
   {
     "pname": "Serilog",
@@ -671,43 +761,43 @@
   },
   {
     "pname": "Splat",
-    "version": "20.2.0",
-    "hash": "sha256-5YqpO+cKccNrjbHIUu8NgjD4KgLJGQAGh60hinNavHQ="
+    "version": "21.0.0",
+    "hash": "sha256-gTP/N1Hnvjyoah+z9CdOWpyZh4Dd2Knw/yEmVe8dhq8="
   },
   {
     "pname": "Splat.Builder",
-    "version": "20.2.0",
-    "hash": "sha256-nv0PNAOhS491HHqBLMJFzJe22FpRJASR6nNMB2WhSLk="
+    "version": "21.0.0",
+    "hash": "sha256-UC9spqAuxUQuTO9sZmVfidBxjcTvabz+UyNR5MrrtEg="
   },
   {
     "pname": "Splat.Core",
-    "version": "20.2.0",
-    "hash": "sha256-eQ9WYThFPgZwCiL0xalxpIJZuiTM1jHSLHdLyiMnYCA="
+    "version": "21.0.0",
+    "hash": "sha256-GqdOIOTTSUvM7Oo1tZoR0KNXj8tJc5q6LvMJZVY8jIM="
   },
   {
     "pname": "Splat.Logging",
-    "version": "20.2.0",
-    "hash": "sha256-A7GEFcpl8ruwCA5YOduO63Tavg5Ihplzin/kbcLD98o="
+    "version": "21.0.0",
+    "hash": "sha256-8MUjMugSQOZmZIwpHkd2MZy9zClpLRd3mSSiybiBGNw="
   },
   {
     "pname": "SQLitePCLRaw.bundle_e_sqlite3",
-    "version": "2.1.12",
-    "hash": "sha256-qaBua1oxP27zZ1+RmX0BKt7/6KqeH/1p7Uak5oWwVOE="
+    "version": "2.1.13",
+    "hash": "sha256-iaIW+AWdCcq8tFq3WsLxgLczMjwn1Bz5qYHcX1tcbA8="
   },
   {
     "pname": "SQLitePCLRaw.core",
-    "version": "2.1.12",
-    "hash": "sha256-rwaQQTj/ptyVpZkTPWTSVHFtb6zHVDprO5EHk9rp3KU="
+    "version": "2.1.13",
+    "hash": "sha256-2T1ferP4ZMR3IqLZAEjDGhqsdD4VPYe59KB1ie4vna8="
   },
   {
     "pname": "SQLitePCLRaw.lib.e_sqlite3",
-    "version": "2.1.12",
-    "hash": "sha256-SiLAL/z0iXkpA88mPe+fzidzlxaIP5ZfC17v8WN0MKw="
+    "version": "2.1.13",
+    "hash": "sha256-0H0TtHeRI8+lazNItQTVeiq2/BDHZPtuLJ14eYfjkgE="
   },
   {
     "pname": "SQLitePCLRaw.provider.e_sqlite3",
-    "version": "2.1.12",
-    "hash": "sha256-3ysycZkuXXGRhsRnHjz0+GWAl8FUy81BSUq1lMWZdZU="
+    "version": "2.1.13",
+    "hash": "sha256-UT7yul0BwU0egDLZ0sosiYXffsfTUfDkCRdHYRSsH5w="
   },
   {
     "pname": "System.CodeDom",
@@ -761,8 +851,8 @@
   },
   {
     "pname": "System.IO.Hashing",
-    "version": "10.0.11",
-    "hash": "sha256-/jfgyL1M+xs27yRJeg/RJimNSHuzuiqhV241pvfooac="
+    "version": "10.0.14",
+    "hash": "sha256-hpF7r7Y0xNBt1/B8X3RRQf6iIPZOE+dldoDoHaxo+UE="
   },
   {
     "pname": "System.IO.Packaging",

pkgs/by-name/li/libation/package.nix

@@ -17,13 +17,13 @@
 
 buildDotnetModule rec {
   pname = "libation";
-  version = "14.2.2";
+  version = "14.2.5";
 
   src = fetchFromGitHub {
     owner = "rmcrackan";
     repo = "Libation";
     tag = "v${version}";
-    hash = "sha256-IP3q8n5Bt3fjujkkFfUa3KhM8O5KA5AVAQJkPbwTHvg=";
+    hash = "sha256-UGm2pWWVOB3KxBOPTpD64S02BWcA6PZL87uQNHRcFVk=";
   };
 
   sourceRoot = "${src.name}/Source";

pkgs/by-name/li/liberasurecode/package.nix

@@ -11,7 +11,10 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "liberasurecode";
-  version = "1.6.5";
+  version = "1.8.0";
+
+  __structuredAttrs = true;
+  strictDeps = true;
 
   outputs = [
     "out"
@@ -23,7 +26,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "openstack";
     repo = "liberasurecode";
     tag = finalAttrs.version;
-    hash = "sha256-242p6lyLM+0UpuYvQqz87Z1S0oayxGXz7CZJW7fbgBk=";
+    hash = "sha256-y1xdirwu7vgIICnL30R3XJmCym4pjvVf0N9L4g6gyCg=";
   };
 
   postPatch = ''
@@ -47,15 +50,24 @@ stdenv.mkDerivation (finalAttrs: {
     "--enable-doxygen"
   ];
 
-  postInstall = ''
-    # remove useless man pages about directories
-    rm doc/man/man*/_*
-    # avoid installing doc/man/man3/noname
-    installManPage doc/man/man*/*.*
+  # Required to link the test programs
+  dontDisableStatic = true;
 
-    moveToOutput share/liberasurecode/ $doc
-  '';
+  postInstall =
+    lib.optionalString (!stdenv.hostPlatform.isStatic) ''
+      rm $out/lib/*.a
+    ''
+    + ''
+      # remove useless man pages about directories
+      rm doc/man/man*/_*
+      # avoid installing doc/man/man3/noname
+      installManPage doc/man/man*/*.*
 
+      moveToOutput share/liberasurecode/ $doc
+    '';
+
+  # Backends are loaded with dlopen
+  doCheck = !stdenv.hostPlatform.isStatic;
   checkTarget = "test";
 
   passthru.tests.pkg-config = testers.hasPkgConfigModules {

pkgs/by-name/li/libretroPackages/cores/beetle-saturn.nix

@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "mednafen-saturn";
-  version = "0-unstable-2026-09-26";
+  version = "0-unstable-2026-10-21";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "beetle-saturn-libretro";
-    rev = "65f05fa66f83e65e33be83aa433d883b4fd9509a";
-    hash = "sha256-dmS72Hu08NczPAmXOFtWmA5r9IDon+rCZ9gu0n3gsMI=";
+    rev = "d0d841784845da0278a9a49554cc4cc01597ee2c";
+    hash = "sha256-feWcdU2/OA7JORC22umj0c9Jw4AFswIoukEAPTIGe9Q=";
   };
 
   makefile = "Makefile";

pkgs/by-name/li/libretroPackages/cores/beetle-supergrafx.nix

@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "mednafen-supergrafx";
-  version = "0-unstable-2026-04-20";
+  version = "0-unstable-2026-10-06";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "beetle-supergrafx-libretro";
-    rev = "3c6fcd3deded54ebecd69408f108407ac03d11b5";
-    hash = "sha256-VO8Bn67n3D9fxbbTxwbf9iKLDueIi98zIso1qMQcrMI=";
+    rev = "9c11dcd213a79d57d2c86313971631af801f2cdc";
+    hash = "sha256-m4G8XAyae9kBz5Zf3NWhQBJy4n7nHdiEH0BjaqNt8pM=";
   };
 
   makefile = "Makefile";

pkgs/by-name/li/libretroPackages/cores/beetle-vb.nix

@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "mednafen-vb";
-  version = "0-unstable-2026-08-23";
+  version = "0-unstable-2026-10-12";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "beetle-vb-libretro";
-    rev = "83ed42608601fb7b01d41e4f8fb2007a37b8c84e";
-    hash = "sha256-ctjoQHdrZdb0QVxEpcsfhbqYrNp5R8oaC6xNrYxBG7g=";
+    rev = "d5ae54c8e23b573a3b34e888b2d48a588027e92c";
+    hash = "sha256-U8/pGAm4ChK24Fhe7hYJtyRkNQI6RHZU/0IAbd/ZoYQ=";
   };
 
   makefile = "Makefile";

pkgs/by-name/li/libretroPackages/cores/gambatte.nix

@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "gambatte";
-  version = "0-unstable-2026-08-21";
+  version = "0-unstable-2026-10-30";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "gambatte-libretro";
-    rev = "d9d6cd06382d1ced30de34d56d3609452323dab1";
-    hash = "sha256-9+llRkHhmaIeExUigY7/Ed+/hBshU+Qda5ykxoXLT+w=";
+    rev = "77f2567d718b8973d02caa2daa8dce4953faf811";
+    hash = "sha256-8iYMgRVI1sdU7GBK1lj27Ym5DY0AkUr4rpL+4i93Xm0=";
   };
 
   meta = {

pkgs/by-name/li/libretroPackages/cores/genesis-plus-gx.nix

@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "genesis-plus-gx";
-  version = "0-unstable-2026-10-16";
+  version = "0-unstable-2026-10-30";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "Genesis-Plus-GX";
-    rev = "aa74d79634cd230f65cce4180e92688e53883d2f";
-    hash = "sha256-elHKWGxIWq3TMpyugxlGttN9KQcmxpS4vY9IZ+4TdIg=";
+    rev = "f27655b592ef43f317272d79883bcaa10d3ac8ad";
+    hash = "sha256-IdQbyEOGz4QDUQNmkWpHWwiF8oBjA1FpMxPNnrmWhzA=";
   };
 
   meta = {

pkgs/by-name/li/libretroPackages/cores/swanstation.nix

@@ -6,13 +6,13 @@
 }:
 mkLibretroCore {
   core = "swanstation";
-  version = "0-unstable-2026-10-15";
+  version = "0-unstable-2026-10-24";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "swanstation";
-    rev = "e436e9b85374def58d211df7f78880f0f4a917b4";
-    hash = "sha256-4WeqOmsFC3kQYC+3L5aapj/79TRLWZYWmUyDxCfwZl4=";
+    rev = "631f0fb31b809e0f889d7c551fe695788e39c1d3";
+    hash = "sha256-m6ImnlrdWplX6aRektSve+vHkCJ1nY7bnqQPYSY0+c8=";
   };
 
   extraNativeBuildInputs = [ cmake ];

pkgs/by-name/ma/mago/package.nix

@@ -11,17 +11,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "mago";
-  version = "1.57.0";
+  version = "1.59.0";
 
   src = fetchFromGitHub {
     owner = "carthage-software";
     repo = "mago";
     tag = finalAttrs.version;
-    hash = "sha256-UCBM3c3/c0JrooHoHoQ4ZmA9Gpiaj/aPbph/gE77KHI=";
+    hash = "sha256-AuXjk3JYfKSAH0Uk+xXbfXdkavbWxngAMA6xNqXMBxY=";
     forceFetchGit = true; # Does not download all files otherwise
   };
 
-  cargoHash = "sha256-/MWFZjjyvNbtbxaOj6eKfOQpdfdS+0Ywb7gEM9KXNY8=";
+  cargoHash = "sha256-+5reFCiasGbfzXjgisVs20asK8VWNTVNJGBgp02FT/w=";
 
   env = {
     # Get openssl-sys to use pkg-config

pkgs/by-name/ma/mastodon/package.nix

@@ -1,7 +1,7 @@
 {
   lib,
   stdenv,
-  nodejs-slim_22,
+  nodejs-slim_24,
   bundlerEnv,
   nixosTests,
   yarn-berry_4,
@@ -22,7 +22,7 @@
   yarnMissingHashes ? srcOverride.yarnMissingHashes,
 }:
 let
-  nodejs-slim = nodejs-slim_22;
+  nodejs-slim = nodejs-slim_24;
   ruby = ruby_3_4;
   yarn-berry = yarn-berry_4.override { nodejs = nodejs-slim; };
 in

pkgs/by-name/md/md-tui/package.nix

@@ -8,7 +8,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "md-tui";
-  version = "0.11.1";
+  version = "0.11.2";
 
   __structuredAttrs = true;
 
@@ -16,10 +16,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "henriklovhaug";
     repo = "md-tui";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-r+JnNu2VaM906d+LefLrmYnIHkAOHnhDIX9mtMyXgts=";
+    hash = "sha256-e3uCPElgcBtlM0ZBynm38h1hlyCiunHKlvdBFxH3KF8=";
   };
 
-  cargoHash = "sha256-UTyEWGHS1OvXr8tSWggNY2zwBnFYS+gwAM4dHRQ7gQo=";
+  cargoHash = "sha256-zQm8B8HH+a87YsBd+aSlqX4G8VmwutxJDLj3em1poGI=";
 
   nativeBuildInputs = [ pkg-config ];
 

pkgs/by-name/mi/mistral-vibe/package.nix

@@ -13,18 +13,9 @@
   writableTmpDirAsHomeHook,
 }:
 
-let
-  pythonPackages = python3Packages.overrideScope (
-    final: prev: {
-      # Upstream pins mcp==1.28.1; v2's OAuthClientProvider subclasses httpx2.Auth,
-      # which httpx rejects as the auth of the MCP OAuth flow
-      mcp = final.mcp_1;
-    }
-  );
-in
-pythonPackages.buildPythonApplication (finalAttrs: {
+python3Packages.buildPythonApplication (finalAttrs: {
   pname = "mistral-vibe";
-  version = "3.0.2";
+  version = "3.0.4";
   pyproject = true;
   __structuredAttrs = true;
 
@@ -32,7 +23,7 @@ pythonPackages.buildPythonApplication (finalAttrs: {
     owner = "mistralai";
     repo = "mistral-vibe";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-LY9YJbJO8Id1AFGpJvyDSGB8vJtUPdQteLiYE1IWrwU=";
+    hash = "sha256-XWfJyl8QXLYKoDGkdqZyWYjxzAC6Gbmnx6AnJCsOfOQ=";
   };
 
   patches = [
@@ -81,13 +72,18 @@ pythonPackages.buildPythonApplication (finalAttrs: {
   '';
 
   pythonRelaxDeps = true;
+  pythonRemoveDeps = [
+    # Not packaged in nixpkgs, and not imported by vibe
+    "opentelemetry-exporter-otlp-common"
+  ];
   dependencies =
-    with pythonPackages;
+    with python3Packages;
     [
       agent-client-protocol
       annotated-types
       anyio
       attrs
+      authlib
       beautifulsoup4
       cachetools
       certifi
@@ -103,31 +99,28 @@ pythonPackages.buildPythonApplication (finalAttrs: {
       google-auth
       googleapis-common-protos
       h11
-      httpcore
-      httpx
-      httpx-sse
+      httpcore2
+      httpx2
       humanize
       idna
-      importlib-metadata
       jaraco-classes
       jaraco-context
       jaraco-functools
+      joserfc
       jsonpatch
       jsonpath-python
       jsonpointer
       jsonschema
       jsonschema-specifications
       keyring
-      linkify-it-py
-      markdown-it-py
       markdownify
       mcp
-      mdit-py-plugins
-      mdurl
+      mcp-types
       miniaudio
       mistralai
       more-itertools
       opentelemetry-api
+      opentelemetry-exporter-http-transport
       opentelemetry-exporter-otlp-proto-common
       opentelemetry-exporter-otlp-proto-http
       opentelemetry-proto
@@ -135,7 +128,6 @@ pythonPackages.buildPythonApplication (finalAttrs: {
       opentelemetry-semantic-conventions
       packaging
       pexpect
-      platformdirs
       protobuf
       ptyprocess
       pyasn1
@@ -144,9 +136,7 @@ pythonPackages.buildPythonApplication (finalAttrs: {
       pydantic
       pydantic-core
       pydantic-settings
-      pygments
       pyjwt
-      pyperclip
       python-dateutil
       python-dotenv
       python-multipart
@@ -154,29 +144,26 @@ pythonPackages.buildPythonApplication (finalAttrs: {
       referencing
       requests
       rfc8785
-      rich
       rpds-py
       sentry-sdk
       setproctitle
       six
       smmap
+      socksio
       soupsieve
       sse-starlette
       starlette
-      textual
-      textual-speedups
       tomli-w
       tree-sitter
       tree-sitter-bash
       truststore
       typing-extensions
       typing-inspection
-      uc-micro-py
       urllib3
+      uuid-utils
       uvicorn
       watchfiles
       websockets
-      zipp
       zstandard
     ]
     ++ lib.optionals stdenv.hostPlatform.isLinux [
@@ -189,13 +176,15 @@ pythonPackages.buildPythonApplication (finalAttrs: {
   nativeCheckInputs = [
     # vibe.core.agent_loop.TeleportError: Teleport requires git to be installed.
     gitMinimal
-    pythonPackages.pyte
-    pythonPackages.pytest-asyncio
-    pythonPackages.pytest-textual-snapshot
-    pythonPackages.pytest-xdist
-    pythonPackages.pytestCheckHook
-    pythonPackages.respx
-    pythonPackages.tomlkit
+    # respx models its routes on HTTPX
+    python3Packages.httpx
+    python3Packages.pyte
+    python3Packages.pytest-asyncio
+    python3Packages.pytest-xdist
+    python3Packages.pytestCheckHook
+    python3Packages.respx
+    python3Packages.rich
+    python3Packages.tomlkit
     uv
     versionCheckHook
     writableTmpDirAsHomeHook
@@ -210,6 +199,7 @@ pythonPackages.buildPythonApplication (finalAttrs: {
   disabledTests = [
     # AssertionError: assert <MCPSourceStatus.UNAVAILABLE: 'unavailable'> is <MCPSourceStatus.ENABLED: 'enabled'>
     "test_mcp_catalog_read_refresh_toggle_remove_and_compatibility_aliases"
+    "test_local_mcp_servers_stay_usable_when_connectors_reject_the_key"
 
     # vibe.core.llm.exceptions.BackendError: LLM backend error [mock-provider]
     # reason: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1032)
@@ -235,11 +225,9 @@ pythonPackages.buildPythonApplication (finalAttrs: {
     # (device, inode, mtime, size) fingerprint does not change
     "test_changes_when_file_changes"
 
-    # Upstream pins mistralai==2.6.0, whose `create_or_update_user_credentials_async`
-    # was replaced by `create_credentials_async` in later versions
-    "test_connect_http_failure_reads_as_a_sentence_without_the_body"
-    "test_connect_turns_a_no_auth_connector_into_a_connected_one"
-    "test_connect_without_credentials_creates_the_default_user_connection"
+    # TypeError: OTLPSpanExporter.__init__() got an unexpected keyword argument '_transport'
+    # (requires opentelemetry-exporter-otlp-proto-http>=1.45.0)
+    "test_trace_export_swaps_each_batch_and_keeps_tenant_headers"
   ]
   ++ lib.optionals stdenv.hostPlatform.isDarwin [
     # AssertionError: assert 'alive' == 'gone'
@@ -257,9 +245,6 @@ pythonPackages.buildPythonApplication (finalAttrs: {
   ];
 
   disabledTestPaths = [
-    # All snapshot tests use syrupy 4.8.0, which is not packaged here.
-    "tests/snapshots/"
-
     # These tests invoke uv run and fail to import the packaged pydantic extension.
     "tests/e2e/agent_loop_characterization/test_resume.py"
     "tests/e2e/agent_loop_characterization/test_subagents.py"
@@ -272,16 +257,15 @@ pythonPackages.buildPythonApplication (finalAttrs: {
     "tests/e2e/test_cli_tui_streaming.py"
     "tests/e2e/test_cli_tui_tool_approval.py"
 
+    # Flaky: telemetry events are not received in the expected order
+    "tests/app_server/test_setup_oidc_telemetry.py"
+
     # ACP tests require network access
     "tests/acp/test_acp_entrypoint_smoke.py"
 
     # The installer is run with a PATH restricted to /usr/bin:/bin, where the
     # sandbox provides no `bash`
     "tests/test_install_script.py"
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isDarwin [
-    # RuntimeError: Session lease file watcher did not start
-    "tests/app_server/test_session_lease_watch.py"
   ];
 
   __darwinAllowLocalNetworking = true;

pkgs/by-name/mi/mistral-vibe/vibe-rs.nix

@@ -20,7 +20,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   sourceRoot = "${finalAttrs.src.name}/vibe/cli-rust";
 
-  cargoHash = "sha256-BlLq0rCFmDTK11f9dam8Fc/kJVNqa82C/L6UKKG0+M0=";
+  cargoHash = "sha256-FHAB/HXKgLOPvziyeF8huVLfZ3Jze48+10RkqHt2c/o=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/ml/mlt/package.nix

@@ -138,6 +138,7 @@ stdenv.mkDerivation (finalAttrs: {
     (lib.cmakeBool "MOD_OPENCV" true)
     (lib.cmakeBool "MOD_QT6" (qtbase != null && lib.versions.major qtbase.version == "6"))
     (lib.cmakeBool "MOD_GLAXNIMATE_QT6" (qtbase != null && lib.versions.major qtbase.version == "6"))
+    (lib.cmakeBool "MOD_JACKRACK" enableJackrack)
     (lib.cmakeBool "RELOCATABLE" false)
   ]
   ++ lib.optionals enablePython [

pkgs/by-name/mo/mold-unwrapped/package.nix

@@ -4,9 +4,12 @@
   fetchFromGitHub,
   gccStdenv,
   hello,
+  installShellFiles,
   lib,
   mold,
+  mold-unwrapped,
   nix-update-script,
+  runCommand,
   runCommandCC,
   rustPlatform,
   stdenv,
@@ -27,12 +30,23 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   cargoHash = "sha256-DgCFmTz+qulwXu1Oax8gBnc/6HIT6TlY8+xzBRGFvu0=";
 
+  strictDeps = true;
+  nativeBuildInputs = [
+    installShellFiles
+  ];
+
   # Upstream integration tests are way to finicky to keep around. Our internal
   # linking tests should suffice.
   doCheck = false;
 
   postInstall = ''
-    cp $out/bin/{mold,ld.mold}
+    ln -s $out/bin/{,ld.}mold
+
+    mkdir -p $out/lib/mold
+    mv $out/lib/mold-wrapper.so $out/lib/mold
+
+    installManPage docs/mold.1
+    ln -s $out/share/man/man1/{,ld.}mold.1.gz
   '';
 
   doInstallCheck = true;
@@ -42,54 +56,66 @@ rustPlatform.buildRustPackage (finalAttrs: {
     updateScript = nix-update-script { };
     tests =
       let
-        helloTest =
-          name: helloMold:
-          let
-            command = "$READELF -p .comment ${lib.getExe helloMold}";
-            emulator = stdenv.hostPlatform.emulator buildPackages;
-          in
-          runCommandCC "mold-${name}-test" { passthru = { inherit helloMold; }; } ''
-            echo "Testing running the 'hello' binary which should be linked with 'mold'" >&2
-            ${emulator} ${lib.getExe helloMold}
+        emulator = stdenv.hostPlatform.emulator buildPackages;
+      in
+      {
+        run = runCommand "mold-run-test" { } ''
+          ${emulator} ${lib.getExe mold-unwrapped} -run true
+          if [[ "$?" == 0 ]]; then
+            touch $out
+          fi
+        '';
+      }
+      // lib.optionalAttrs stdenv.hostPlatform.isLinux (
+        let
+          helloTest =
+            name: helloMold:
+            let
+              command = "$READELF -p .comment ${lib.getExe helloMold}";
+            in
+            runCommandCC "mold-${name}-test" { passthru = { inherit helloMold; }; } ''
+              echo "Testing running the 'hello' binary which should be linked with 'mold'" >&2
+              ${emulator} ${lib.getExe helloMold}
 
-            echo "Checking for mold in the '.comment' section" >&2
-            if output=$(${command} 2>&1); then
-              if grep -Fw -- "mold" - <<< "$output"; then
-                touch $out
+              echo "Checking for mold in the '.comment' section" >&2
+              if output=$(${command} 2>&1); then
+                if grep -Fw -- "mold" - <<< "$output"; then
+                  touch $out
+                else
+                  echo "No mention of 'mold' detected in the '.comment' section" >&2
+                  echo "The command was:" >&2
+                  echo "${command}" >&2
+                  echo "The output was:" >&2
+                  echo "$output" >&2
+                  exit 1
+                fi
               else
-                echo "No mention of 'mold' detected in the '.comment' section" >&2
-                echo "The command was:" >&2
-                echo "${command}" >&2
-                echo "The output was:" >&2
+                echo -n "${command}" >&2
+                echo " returned a non-zero exit code." >&2
                 echo "$output" >&2
                 exit 1
               fi
-            else
-              echo -n "${command}" >&2
-              echo " returned a non-zero exit code." >&2
-              echo "$output" >&2
-              exit 1
-            fi
-          '';
-      in
-      lib.optionalAttrs stdenv.hostPlatform.isLinux {
-        adapter-gcc = helloTest "adapter-gcc" (
-          hello.override (old: {
-            stdenv = useMoldLinker gccStdenv;
-          })
-        );
-        adapter-llvm = helloTest "adapter-llvm" (
-          hello.override (old: {
-            stdenv = useMoldLinker clangStdenv;
-          })
-        );
-        wrapped = helloTest "wrapped" (
-          hello.overrideAttrs (previousAttrs: {
-            nativeBuildInputs = (previousAttrs.nativeBuildInputs or [ ]) ++ [ mold ];
-            env.NIX_CFLAGS_LINK = toString (previousAttrs.NIX_CFLAGS_LINK or "") + " -fuse-ld=mold";
-          })
-        );
-      };
+            '';
+        in
+        {
+          adapter-gcc = helloTest "adapter-gcc" (
+            hello.override (old: {
+              stdenv = useMoldLinker gccStdenv;
+            })
+          );
+          adapter-llvm = helloTest "adapter-llvm" (
+            hello.override (old: {
+              stdenv = useMoldLinker clangStdenv;
+            })
+          );
+          wrapped = helloTest "wrapped" (
+            hello.overrideAttrs (previousAttrs: {
+              nativeBuildInputs = (previousAttrs.nativeBuildInputs or [ ]) ++ [ mold ];
+              env.NIX_CFLAGS_LINK = toString (previousAttrs.NIX_CFLAGS_LINK or "") + " -fuse-ld=mold";
+            })
+          );
+        }
+      );
   };
 
   meta = {

pkgs/by-name/mo/mongosh/package.nix

@@ -6,16 +6,16 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "mongosh";
-  version = "2.13.0";
+  version = "2.14.1";
 
   src = fetchFromGitHub {
     owner = "mongodb-js";
     repo = "mongosh";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-G9oWU5+ldaub/+oXjmBJMivphP49oK1OsaUTX96ogEw=";
+    hash = "sha256-1e/AgyKLRKDKLA0ETHYEtrqOP4aVE13dY31NrXFTS54=";
   };
 
-  npmDepsHash = "sha256-qCfFyfX7crb/TToIP8a/Tt+18iZ1jgdwkWJSAMSknqw=";
+  npmDepsHash = "sha256-QF8nm8XwkYrFLSfLbz8hJRxPSJvMQUkpEv7AhYzgqjY=";
 
   postPatch = ''
     # Disable telemetry by default; users can still opt in via enableTelemetry().

pkgs/by-name/ne/neatvnc/package.nix

@@ -20,13 +20,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "neatvnc";
-  version = "1.0.3";
+  version = "1.0.4";
 
   src = fetchFromGitHub {
     owner = "any1";
     repo = "neatvnc";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-yL15sr/Oi0CgXDQl4qPUL7vya3HWL+chRiwHsIQ2ADI=";
+    hash = "sha256-705anCyw/hta7pLNPPCGj0D706OqkiebBU1i5oYMFjs=";
   };
 
   strictDeps = true;

pkgs/by-name/ne/nebula/package.nix

@@ -1,23 +1,23 @@
 {
   lib,
-  buildGoModule,
+  buildGo127Module,
   fetchFromGitHub,
   nixosTests,
   withPkcs11 ? true,
 }:
 
-buildGoModule (finalAttrs: {
+buildGo127Module (finalAttrs: {
   pname = "nebula";
-  version = "1.11.2";
+  version = "1.12.0";
 
   src = fetchFromGitHub {
     owner = "slackhq";
     repo = "nebula";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-jzXfKPefw+V2RQBUuxXWoKj1CsVrB4GHdzZJD0zZ0g8=";
+    hash = "sha256-N50vOtzp1ZikqCkVoS2MRMCY2otg8QHAvVJwfgCbyRI=";
   };
 
-  vendorHash = "sha256-5+DTf3muD82UKZ+toBh1Ypz/5pvIVZIaqA5j3DBhppU=";
+  vendorHash = "sha256-tmNpGNjMY5PtJO/DU+eoZy2Miqu2VzBTiHKThVCDVZs=";
 
   subPackages = [
     "cmd/nebula"

pkgs/by-name/np/nps/package.nix

@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "nps";
-  version = "0.2.12";
+  version = "0.2.14";
 
   src = fetchFromGitHub {
     owner = "OleMussmann";
     repo = "nps";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kOVpn13lJYeO/99e39c0wbe7qcKHyMj5v4prBtZ3N7s=";
+    hash = "sha256-aX0iAz5Q5b2wCnBStHafZHaN4jmf3026XH0sc8dviBQ=";
   };
 
-  cargoHash = "sha256-dJA9fOU06txPAx5kMl7aGoFeKo7UXqB7X+viUfJqG/M=";
+  cargoHash = "sha256-jNWTIS52Sdrg1bNP2icMjA3mqgTBjWvNU8ciILDZp2g=";
 
   nativeCheckInputs = [ nix ];
 

pkgs/by-name/op/open-terminal/package.nix

@@ -0,0 +1,65 @@
+{
+  lib,
+  python3Packages,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+
+python3Packages.buildPythonApplication (finalAttrs: {
+  pname = "open-terminal";
+  version = "0.14.8";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "open-webui";
+    repo = "open-terminal";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-6fnHCIdEJ3O7utV6limxAK5Dmsx0G/hjCyL2kCXz/jU=";
+  };
+
+  build-system = with python3Packages; [ hatchling ];
+
+  dependencies =
+    with python3Packages;
+    [
+      aiofiles
+      click
+      fastapi
+      httpx
+      ipykernel
+      nbclient
+      openpyxl
+      pypdf
+      python-docx
+      python-multipart
+      python-pptx
+      striprtf
+      uvicorn
+      xlrd
+    ]
+    ++ uvicorn.optional-dependencies.standard;
+
+  # No python tests nor --version flag
+  doCheck = false;
+
+  pythonImportsCheck = [
+    "open_terminal"
+    "open_terminal.cli"
+    "open_terminal.utils.notebooks"
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Self-hosted remote terminal API for AI agents, used by Open WebUI";
+    homepage = "https://github.com/open-webui/open-terminal";
+    changelog = "https://github.com/open-webui/open-terminal/blob/${finalAttrs.src.rev}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [
+      liberodark
+      julm
+    ];
+    mainProgram = "open-terminal";
+    platforms = lib.platforms.linux;
+  };
+})

pkgs/by-name/pd/pdfjs/package.nix

@@ -6,14 +6,14 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "pdfjs";
-  version = "6.4.299";
+  version = "6.5.438";
 
   strictDeps = true;
   __structuredAttrs = true;
 
   src = fetchzip {
     url = "https://github.com/mozilla/pdf.js/releases/download/v${finalAttrs.version}/pdfjs-${finalAttrs.version}-dist.zip";
-    hash = "sha256-UHMYW6fHRL7by4sP7NXE5NuTKtmUPfInK6KunbnP88w=";
+    hash = "sha256-KNYi+V7BD9yN6+YaJ8hvMncFMUBDEtRSQx7rVt2+TlI=";
     stripRoot = false;
   };
 

pkgs/by-name/po/powerstation/package.nix

@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "powerstation";
-  version = "0.8.4";
+  version = "0.9.0";
 
   src = fetchFromGitHub {
     owner = "ShadowBlip";
     repo = "PowerStation";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BrldZ2adw+tQKjm83E7PTFDMVwp7In0ggwOu+dAR+Hs=";
+    hash = "sha256-IRfSTlgmCekhbAL4lzE19fbbJ3sfCbx/JiYchp8WAj8=";
   };
 
-  cargoHash = "sha256-DFYgJMgpD9Y8f6FFxtugZC9pHyUIspHXGkr/WZ/R05k=";
+  cargoHash = "sha256-tPDGzkhkuWad7zylHxhB4yz/kWuMj7ZAFaZuOBZLTco=";
 
   nativeBuildInputs = [
     cmake

pkgs/by-name/pr/prometheus-knot-exporter/package.nix

@@ -7,13 +7,13 @@
 
 python3.pkgs.buildPythonApplication rec {
   pname = "knot-exporter";
-  version = "3.6.1";
+  version = "3.6.2";
   pyproject = true;
 
   src = fetchPypi {
     pname = "knot_exporter";
     inherit version;
-    hash = "sha256-zgct7LQeGpZBS3QZ2SouPVMcS061EZyuaHtuONMBuMY=";
+    hash = "sha256-DRCQ3x+UBLHZTFcrHGAIbcTULRp1Pvz15gbiWI7a+8Y=";
   };
 
   build-system = [

pkgs/by-name/rc/rclip/package.nix

@@ -27,6 +27,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
   ];
 
   pythonRelaxDeps = [
+    "huggingface-hub"
     "numpy"
     "pillow"
     "rawpy"
@@ -66,6 +67,12 @@ python3Packages.buildPythonApplication (finalAttrs: {
     # requires rclip to be built with uv before inspecting the artifacts
     "test_sdist_includes_compliance_inputs"
     "test_wheel_includes_clip_legal_files"
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    # NativeHeifDecodeError: macOS could not render the HEIF image (in the sandbox)
+    "test_decode_path_downscales_large_heic_to_min_side"
+    "test_decode_path_returns_the_full_frame_by_default"
+    "test_thumbnail_decode_matches_the_full_frame_decode"
   ];
 
   disabledTestPaths = [

pkgs/by-name/re/renderdoc/package.nix

@@ -36,13 +36,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "renderdoc";
-  version = "1.46";
+  version = "1.47";
 
   src = fetchFromGitHub {
     owner = "baldurk";
     repo = "renderdoc";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-NW0gqSTKL5X6PWda/l/+qjdENySwh9dmD4k5CBr2kG0=";
+    hash = "sha256-87ltsDdrZ0GDLmPgIDbfHBQCcWeQ6oS1sohgKcpRbvc=";
   };
 
   outputs = [
@@ -54,8 +54,7 @@ stdenv.mkDerivation (finalAttrs: {
   # https://github.com/baldurk/renderdoc/issues/2945
   # https://github.com/baldurk/renderdoc/issues/3902
   patches = [
-    # custom revert of
-    # https://github.com/baldurk/renderdoc/commit/adf8acbccd642c8bc62256fb5580795320364895
+    # trick the build to think PCRE is present, we use PCRE2 instead through fedora patches
     ./remove-pcre.patch
   ];
   swig_patches = [

pkgs/by-name/re/renderdoc/remove-pcre.patch

@@ -1,34 +1,13 @@
 diff --git a/qrenderdoc/CMakeLists.txt b/qrenderdoc/CMakeLists.txt
-index 218c1ab..039fe4e 100644
+index 47fa949..1858b13 100644
 --- a/qrenderdoc/CMakeLists.txt
 +++ b/qrenderdoc/CMakeLists.txt
-@@ -159,29 +159,9 @@ if(NOT ${CMAKE_VERSION} VERSION_LESS "3.24")
-     cmake_policy(SET CMP0135 NEW)
- endif()
+@@ -163,7 +163,7 @@ CHECK_INCLUDE_FILE(pcre.h PCRE_HEADER)
  
--CHECK_INCLUDE_FILE(pcre.h PCRE_HEADER)
--
  set(PCRE_PREFIX_PATH "")
  
 -if(PCRE_HEADER)
--    message(STATUS "pcre library is found, using it as-is")
--
-     add_custom_target(local_pcre)
--else()
--    message(STATUS "pcre header is not found! building pcre locally")
--    
--    # fetch pcre if missing
--    ExternalProject_Add(local_pcre
--        # using an URL to a zip directly so we don't clone the history etc
--        URL ${RENDERDOC_PCRE_PACKAGE}
--        BUILD_IN_SOURCE 1
--        CONFIGURE_COMMAND autoreconf -f -v > /dev/null 2>&1
--        COMMAND CC=${SWIG_CONFIGURE_CC} CXX=${SWIG_CONFIGURE_CXX} CFLAGS=-fPIC CXXFLAGS=-fPIC ${SET_SYSTEM_PATH_COMMAND} ./configure --prefix=${CMAKE_BINARY_DIR} --disable-shared > /dev/null
--        BUILD_COMMAND ${GENERATOR_MAKE} ${GENERATOR_MAKE_PARAMS} > /dev/null 2>&1
--        INSTALL_COMMAND ${GENERATOR_MAKE} install > /dev/null 2>&1)
--
--    set(PCRE_PREFIX_PATH "--with-pcre-prefix=${CMAKE_BINARY_DIR}")
--endif()
++if(true)
+     message(STATUS "pcre library is found, using it as-is")
  
- # Compile our custom SWIG that will do scoped/strong enum classes
- ExternalProject_Add(custom_swig
+     add_custom_target(local_pcre)

pkgs/by-name/re/retroarch-assets/package.nix

@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation {
   pname = "retroarch-assets";
-  version = "1.22.0-unstable-2026-08-13";
+  version = "1.22.0-unstable-2026-10-01";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "retroarch-assets";
-    rev = "73106363e14e34c08a5854b4cfbc29f184e3b783";
-    hash = "sha256-dakwryxDOhxV4jEsGTUU62nd8f/rL8Rl9p6kSY7M37s=";
+    rev = "d9f969054dc7fbb6fa89519036d2b971e0855b51";
+    hash = "sha256-y9jkM+Tn5mDzzkY4fvkNq5GKUt33o0nVF8SoLJCKIzY=";
   };
 
   makeFlags = [

pkgs/by-name/sc/schemat/package.nix

@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "schemat";
-  version = "0.5.12";
+  version = "0.5.13";
 
   src = fetchFromGitHub {
     owner = "raviqqe";
     repo = "schemat";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-/HDyO055Lt95tkxs3C7l8K8I/Qj+kdMppv9H2p4BTuY=";
+    hash = "sha256-kHKwxCJNemmSDB7pqg6J4/x6iWisKJB5xois4JlBBWo=";
   };
 
-  cargoHash = "sha256-8UY7mdtamayuKUca1LpA7xuwFy7OoAtxPBaV9oJAXoI=";
+  cargoHash = "sha256-KTp26PKEVu0yvclIytX8o4kIhFW4ZVm7Pqss/aWQMWw=";
 
   doInstallCheck = true;
   nativeInstallCheckInputs = [ versionCheckHook ];

pkgs/by-name/sn/snyk/package.nix

@@ -10,13 +10,13 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "snyk";
-  version = "1.1308.1";
+  version = "1.1308.3";
 
   src = fetchFromGitHub {
     owner = "snyk";
     repo = "cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-r01DanfKKVuzY1Wz9sd44aRimBhSgaoVPCSiwwbvRgw=";
+    hash = "sha256-Bj0WZEO5gIbIU/IQqaXO65p3hlQP4VHLK/FM0zAweMg=";
 
     # TODO: Remove once https://github.com/snyk/cli/pull/6924 is released.
     postFetch = ''
@@ -26,7 +26,7 @@ buildNpmPackage (finalAttrs: {
 
   npmDepsFetcherVersion = 2;
 
-  npmDepsHash = "sha256-yS1zSBRMamtFn1yMSIc5nmvIE+03dNc8UvLH7tDZL2Y=";
+  npmDepsHash = "sha256-B8Ae+WK59Ysw3uqhP7CcZpByQhMVRkF1rSoLwUzzcEg=";
 
   nodejs = nodejs_24;
 

pkgs/by-name/so/sonar-scanner-cli/package.nix

@@ -11,16 +11,16 @@
 
 maven.buildMavenPackage rec {
   pname = "sonar-scanner-cli";
-  version = "8.2.0.6438";
+  version = "8.3.0.16463";
 
   src = fetchFromGitHub {
     owner = "SonarSource";
     repo = "sonar-scanner-cli";
     tag = version;
-    hash = "sha256-la4I8YBKWXsiIXOUV0IIXBKeeeEEHNXe1RPap/wlZDA=";
+    hash = "sha256-JBG0BRWD+7JV2exufFfm6yoXIFWD6mv0/4YSz+swbmg=";
   };
 
-  mvnHash = "sha256-wGNpvYm4BV2Tv8yt+ssecS1CQnB7xqwjUrfOchg51Pk=";
+  mvnHash = "sha256-07eMgS63BiDv9lqFTnapweWz/t+UaiL61RHU2vEviRk=";
 
   mvnParameters = "-Dproject.build.outputTimestamp=1980-01-01T00:00:02Z";
 

pkgs/by-name/sp/spi-tools/package.nix

@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "spi-tools";
-  version = "1.1.0";
+  version = "1.2.0";
 
   src = fetchFromGitHub {
     owner = "cpb-";
     repo = "spi-tools";
     tag = finalAttrs.version;
-    hash = "sha256-mlOpgzJ8YFX+2y8+V3A2WjsnOzzj+fF8lJHqzoEP30s=";
+    hash = "sha256-fhY5uXH3u/mVK1fp/dukzwr3Msp/Prv7CD9SZBw+qrw=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/st/steelix/package.nix

@@ -41,13 +41,13 @@ let
   steelix-unwrapped = helix-unwrapped.overrideAttrs (
     finalAttrs: _: {
       pname = "steelix-unwrapped";
-      version = "0-unstable-2026-10-18";
+      version = "0-unstable-2026-10-22";
 
       src = fetchFromGitHub {
         owner = "mattwparas";
         repo = "helix";
-        rev = "16a26934f39152b5cd81bf2f6944e18e680314d0";
-        hash = "sha256-FU4WIMHhIyvEMxHeN8+Qgb3VHsU6DP74ylsyZACLzM8=";
+        rev = "424add100eac9ca258d969b985a8ac370469ec05";
+        hash = "sha256-wBjRHntxoxT+fo85i0rct/NWN/OG/Z6nVky/Efb2gjE=";
       };
 
       cargoDeps = rustPlatform.fetchCargoVendor {

pkgs/by-name/su/sunxi-tools/package.nix

@@ -45,7 +45,7 @@ stdenv.mkDerivation {
     description = "Tools for Allwinner SoC devices";
     homepage = "http://linux-sunxi.org/";
     license = lib.licenses.gpl2Plus;
-    platforms = lib.platforms.linux;
+    platforms = lib.platforms.linux ++ lib.platforms.darwin;
     maintainers = [ ];
   };
 }

pkgs/by-name/sy/sydbox/package.nix

@@ -7,12 +7,12 @@
   pkg-config,
   rustPlatform,
   scdoc,
-  testers,
+  versionCheckHook,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "sydbox";
-  version = "3.51.2";
+  version = "3.59.0";
 
   outputs = [
     "out"
@@ -24,10 +24,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "Sydbox";
     repo = "sydbox";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-tOHd+E68LXK5AZzcNcf2p/ONyO4EXjF+xYDWftLG/pU=";
+    hash = "sha256-2hpLvclVjl42TKN3rt5w9MgoQigOpluNQaYSjbVyujY=";
   };
 
-  cargoHash = "sha256-wkrbj553N5icVndoXwCvFGCWYnU+qg3gcADgoFHLeZc=";
+  cargoHash = "sha256-T0LiEiKIMVylTn6gDtd5zHVz9DLzqBBZ+wTo9bwLlt8=";
 
   nativeBuildInputs = [
     mandoc
@@ -40,23 +40,49 @@ rustPlatform.buildRustPackage (finalAttrs: {
   makeFlags = [ "PREFIX=${placeholder "out"}" ];
 
   checkFlags = [
-    # rm -rf tmpdir: Os { code: 2, kind: NotFound, message: "No such file or directory" }
-    "--skip=fs::tests::test_relative_symlink_resolution"
-    # Failed to write C source file!: Os { code: 13, kind: PermissionDenied, message: "Permission denied" }
-    "--skip=proc::tests::test_proc_set_at_secure_test_32bit_dynamic"
-    # Flakey. May only fail on OfBorg/Hydra
-    # Failed to write C source file!: Os { code: 13, kind: PermissionDenied, message: "Permission denied" }
-    "proc::tests::test_proc_set_at_secure_test_32bit_static"
-    # Failed to write C source file!: Os { code: 13, kind: PermissionDenied, message: "Permission denied" }
-    "--skip=proc::tests::test_proc_set_at_secure_test_32bit_static_pie"
+    "--exact"
+
     # /bin/false: Os { code: 2, kind: NotFound, message: "No such file or directory" }
     "--skip=syd_test"
 
-    # Endlessly stall or use "invalid arguments". Maybe a sandbox issue?
-    "--skip=caps"
-    "--skip=landlock"
-    "--skip=proc::proc_cmdline"
-    "--skip=proc::proc_comm"
+    # No block devices in /dev in the build sandbox
+    "--skip=fd::tests::test_fd_name_8"
+
+    # Fail without the build sandbox, e.g. with daemonless Nix in a container
+    # memfd_secret(2) may fail with EACCES depending on the host, only ENOSYS is expected
+    "--skip=fd::tests::test_fd_name_4"
+    "--skip=sealbox::tests::test_secret_box_1"
+    "--skip=sealbox::tests::test_secret_box_2"
+    "--skip=sealbox::tests::test_secret_box_3"
+    "--skip=sealbox::tests::test_secret_box_4"
+    "--skip=sealbox::tests::test_secret_box_6"
+    "--skip=sealbox::tests::test_secret_mem_box_5"
+    # The procfs of the host is rejected with EXDEV
+    "--skip=proc::util::tests::test_proc_overflowgid_1"
+    "--skip=proc::util::tests::test_proc_overflowuid_1"
+    # Toggling some sandbox flags fails with ENOSYS
+    "--skip=sandbox::tests::test_sandbox_config_lock_3"
+
+    # /usr does not exist in the build sandbox
+    "--skip=landlock::ruleset::ignore_abi_v2_with_abi_v1"
+    "--skip=landlock::ruleset::ruleset_compat_dummy"
+    "--skip=landlock::ruleset::ruleset_created_attr"
+    "--skip=lookup::tests::test_canonicalize_8"
+    "--skip=lookup::tests::test_canonicalize_75"
+    "--skip=lookup::tests::test_canonicalize_76"
+    "--skip=lookup::tests::test_canonicalize_77"
+    "--skip=lookup::tests::test_canonicalize_156"
+    "--skip=lookup::tests::test_canonicalize_157"
+    # Canonicalizing ".." in the build directory does not yield an owned fd
+    "--skip=lookup::tests::test_canonicalize_238"
+    # VFS device minor mismatch
+    "--skip=unix::tests::test_unix_get_vfs_id_1"
+    # assertion failed: has_vdso_symbol(c"__vdso_gettimeofday")
+    "--skip=dl::tests::test_has_vdso_symbol_1"
+  ];
+
+  cargoTestFlags = [
+    "--no-fail-fast"
   ];
 
   # TODO: Have these directories be created upstream similar to the vim files
@@ -66,20 +92,16 @@ rustPlatform.buildRustPackage (finalAttrs: {
     make $makeFlags install-{man,vim}
   '';
 
-  passthru = {
-    tests.version = testers.testVersion {
-      package = finalAttrs.finalPackage;
-      command = "syd -V";
-    };
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
 
-    updateScript = nix-update-script { };
-  };
+  passthru.updateScript = nix-update-script { };
 
   meta = {
     description = "Seccomp-based application sandbox";
     homepage = "https://gitlab.exherbo.org/sydbox/sydbox";
     changelog = "https://gitlab.exherbo.org/sydbox/sydbox/-/blob/${finalAttrs.src.tag}/ChangeLog.md";
-    license = lib.licenses.gpl3Plus;
+    license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [ getchoo ];
     mainProgram = "syd";
     platforms = lib.platforms.linux;

pkgs/by-name/va/vaultwarden/package.nix

@@ -20,16 +20,16 @@ in
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "vaultwarden";
-  version = "1.37.4";
+  version = "1.37.5";
 
   src = fetchFromGitHub {
     owner = "dani-garcia";
     repo = "vaultwarden";
     tag = finalAttrs.version;
-    hash = "sha256-zwcFtx08e5zl9TtHSPf5yyF83rRTbLF9TPfH+LU4+Ck=";
+    hash = "sha256-7r4vTThc98coMIOxPA61X/A8pLiAfPVJxJlWQY8yELw=";
   };
 
-  cargoHash = "sha256-xnqJwz0n/Ru+/lisbeUTeVXXT63E6c+91qSkAtl9tMw=";
+  cargoHash = "sha256-onyxPAt3bVsF9Zj0Z+rnXoUA0NQLabYxxGqzhnVHz/E=";
 
   # used for "Server Installed" version in admin panel
   env.VW_VERSION = finalAttrs.version;

pkgs/by-name/va/vaultwarden/webvault.nix

@@ -10,17 +10,17 @@
 
 buildNpmPackage rec {
   pname = "vaultwarden-webvault";
-  version = "2026.7.0+0";
+  version = "2026.10.1+0";
 
   src = fetchFromGitHub {
     owner = "vaultwarden";
     repo = "vw_web_builds";
     tag = "v${version}";
-    hash = "sha256-yX6Lf+7q9ptVAlx0q0Z55GnKhvAIjYvvvKR1ZZroWeo=";
+    hash = "sha256-xsWCHYCfzpSXs0QyiUl3BDoKXE/Wy1X+ed5jtmuVWlU=";
   };
 
   npmDepsFetcherVersion = 2;
-  npmDepsHash = "sha256-WRxlvkgWboO0ukUHgjC5CrfgfwnmUfDXI4r5dx9CKww=";
+  npmDepsHash = "sha256-6x1qc8cVuBdvZ2W133ajYOKpUz29qda5cECmNvlS9rg=";
 
   nativeBuildInputs = [
     python3
@@ -38,11 +38,6 @@ buildNpmPackage rec {
     echo "export const compilerCommand = ['dart-sass'];" > node_modules/sass-embedded/dist/lib/src/compiler-path.js
   '';
 
-  npmRebuildFlags = [
-    # FIXME one of the esbuild versions fails to download @esbuild/linux-x64
-    "--ignore-scripts"
-  ];
-
   npmBuildScript = "dist:oss:selfhost";
 
   npmBuildFlags = [

pkgs/by-name/we/webcord/package.nix

@@ -8,11 +8,10 @@
   xdg-utils,
   electron_43,
   makeDesktopItem,
-  nodejs_22,
   darwin,
 }:
 
-buildNpmPackage.override { nodejs = nodejs_22; } rec {
+buildNpmPackage rec {
   pname = "webcord";
   version = "4.14.0";
 

pkgs/development/cuda-modules/_cuda/manifests/cublas/redistrib_12.9.3.json

@@ -0,0 +1,30 @@
+{
+    "release_date": "2026-10-29",
+    "release_label": "12.9.3",
+    "release_product": "cublas",
+    "libcublas": {
+        "name": "CUDA cuBLAS",
+        "license": "cuBLAS library",
+        "license_path": "libcublas/LICENSE.txt",
+        "version": "12.9.3.13",
+        "linux-x86_64": {
+            "cuda12": {
+                "relative_path": "libcublas/linux-x86_64/libcublas-linux-x86_64-12.9.3.13_cuda12-archive.tar.xz",
+                "sha256": "4f36e3d1725e8d95a1e5dc2f52d311eecf32b33fb71ac1ec3bd895c4f7f5efe4",
+                "md5": "de11475821a309ebc1ce50540ae28dd5",
+                "size": "941492616"
+            }
+        },
+        "cuda_variant": [
+            "12"
+        ],
+        "linux-sbsa": {
+            "cuda12": {
+                "relative_path": "libcublas/linux-sbsa/libcublas-linux-sbsa-12.9.3.13_cuda12-archive.tar.xz",
+                "sha256": "b624095abf8d3e317682d2c190c62f65a866a56d0ae7446cd651475182233956",
+                "md5": "f5353b13834b1f7a815f66e0c3e03342",
+                "size": "942332760"
+            }
+        }
+    }
+}

pkgs/development/cuda-modules/_cuda/manifests/cublas/redistrib_13.1.2.json

@@ -0,0 +1,30 @@
+{
+    "release_date": "2026-10-29",
+    "release_label": "13.1.2",
+    "release_product": "cublas",
+    "libcublas": {
+        "name": "CUDA cuBLAS",
+        "license": "cuBLAS library",
+        "license_path": "libcublas/LICENSE.txt",
+        "version": "13.1.2.11",
+        "linux-x86_64": {
+            "cuda13": {
+                "relative_path": "libcublas/linux-x86_64/libcublas-linux-x86_64-13.1.2.11_cuda13-archive.tar.xz",
+                "sha256": "e6b5492382a6ceceb9f305791f60a5fb3b00d860574954375ecf228a04aa15e0",
+                "md5": "977959e44254cfb41a582badd35cfe83",
+                "size": "838913380"
+            }
+        },
+        "cuda_variant": [
+            "13"
+        ],
+        "linux-sbsa": {
+            "cuda13": {
+                "relative_path": "libcublas/linux-sbsa/libcublas-linux-sbsa-13.1.2.11_cuda13-archive.tar.xz",
+                "sha256": "5a6adaf7215e1d02f498cd358c082ed842841a2e041f049fbf5af7794a42fa97",
+                "md5": "d31010ed33b6137dabc6376347f27697",
+                "size": "1083886332"
+            }
+        }
+    }
+}

pkgs/development/cuda-modules/_cuda/manifests/cublas/redistrib_13.4.2.json

@@ -1,30 +0,0 @@
-{
-    "release_date": "2026-09-14",
-    "release_label": "13.4.2",
-    "release_product": "cublas",
-    "libcublas": {
-        "name": "CUDA cuBLAS",
-        "license": "cuBLAS library",
-        "license_path": "libcublas/LICENSE.txt",
-        "version": "13.4.2.4",
-        "linux-x86_64": {
-            "cuda13": {
-                "relative_path": "libcublas/linux-x86_64/libcublas-linux-x86_64-13.4.2.4_cuda13-archive.tar.xz",
-                "sha256": "3c5a8468991b97630fe29bd04f9a781f69aef4f376d4cbfe90217b0203edf287",
-                "md5": "e60a359a526db09e63e9ea6617093f47",
-                "size": "807967936"
-            }
-        },
-        "cuda_variant": [
-            "13"
-        ],
-        "linux-sbsa": {
-            "cuda13": {
-                "relative_path": "libcublas/linux-sbsa/libcublas-linux-sbsa-13.4.2.4_cuda13-archive.tar.xz",
-                "sha256": "1dba1433fc7a7aee714e0ebf4e1737a175a6341225b7352da07c15419ebefe8e",
-                "md5": "3229659314ae6d7b0c48cfd1d3f7015f",
-                "size": "1021627464"
-            }
-        }
-    }
-}

pkgs/development/cuda-modules/_cuda/manifests/cublas/redistrib_13.4.3.json

@@ -0,0 +1,30 @@
+{
+    "release_date": "2026-10-27",
+    "release_label": "13.4.3",
+    "release_product": "cublas",
+    "libcublas": {
+        "name": "CUDA cuBLAS",
+        "license": "cuBLAS library",
+        "license_path": "libcublas/LICENSE.txt",
+        "version": "13.4.3.11",
+        "linux-x86_64": {
+            "cuda13": {
+                "relative_path": "libcublas/linux-x86_64/libcublas-linux-x86_64-13.4.3.11_cuda13-archive.tar.xz",
+                "sha256": "89de8ba68badcb995cd18cb9247f3ed179a6f7f6739b7cdbd90ae4d7f7202c57",
+                "md5": "38d2e0d91eb51484813c26ba5aae6919",
+                "size": "807792224"
+            }
+        },
+        "cuda_variant": [
+            "13"
+        ],
+        "linux-sbsa": {
+            "cuda13": {
+                "relative_path": "libcublas/linux-sbsa/libcublas-linux-sbsa-13.4.3.11_cuda13-archive.tar.xz",
+                "sha256": "4715853897c98e5c0a1ecdeabaa6740258e1c32e6571542daf400ceeaf5f823e",
+                "md5": "7aab559b98ffe3103d09803239d51b87",
+                "size": "1021805964"
+            }
+        }
+    }
+}

pkgs/development/cuda-modules/_cuda/manifests/cublas/redistrib_13.6.2.json

@@ -1,30 +0,0 @@
-{
-    "release_date": "2026-09-08",
-    "release_label": "13.6.2",
-    "release_product": "cublas",
-    "libcublas": {
-        "name": "CUDA cuBLAS",
-        "license": "cuBLAS library",
-        "license_path": "libcublas/LICENSE.txt",
-        "version": "13.6.2.16",
-        "linux-x86_64": {
-            "cuda13": {
-                "relative_path": "libcublas/linux-x86_64/libcublas-linux-x86_64-13.6.2.16_cuda13-archive.tar.xz",
-                "sha256": "ba1b298674da2c1c850fcc0722108a100ad5f5dacfbcaf4b58d0633b5a4c66c6",
-                "md5": "9463efbb3fed6416fb77fa8a3f20834d",
-                "size": "817853184"
-            }
-        },
-        "cuda_variant": [
-            "13"
-        ],
-        "linux-sbsa": {
-            "cuda13": {
-                "relative_path": "libcublas/linux-sbsa/libcublas-linux-sbsa-13.6.2.16_cuda13-archive.tar.xz",
-                "sha256": "950f5d4ce75c26ff34b3c9d4157b30ab3fd4b06018d139c2868f8226b287dfdc",
-                "md5": "964a4400bd977017937409488e255b45",
-                "size": "1031550256"
-            }
-        }
-    }
-}

pkgs/development/cuda-modules/_cuda/manifests/cublas/redistrib_13.6.3.json

@@ -0,0 +1,30 @@
+{
+    "release_date": "2026-10-27",
+    "release_label": "13.6.3",
+    "release_product": "cublas",
+    "libcublas": {
+        "name": "CUDA cuBLAS",
+        "license": "cuBLAS library",
+        "license_path": "libcublas/LICENSE.txt",
+        "version": "13.6.3.23",
+        "linux-x86_64": {
+            "cuda13": {
+                "relative_path": "libcublas/linux-x86_64/libcublas-linux-x86_64-13.6.3.23_cuda13-archive.tar.xz",
+                "sha256": "b2310a211a8aed0a26155d4d80f73d6e400e0ab5239c23b475a002a0d7b28581",
+                "md5": "f6c5e3fea3471cf3f6984f5a2ff82a57",
+                "size": "817648972"
+            }
+        },
+        "cuda_variant": [
+            "13"
+        ],
+        "linux-sbsa": {
+            "cuda13": {
+                "relative_path": "libcublas/linux-sbsa/libcublas-linux-sbsa-13.6.3.23_cuda13-archive.tar.xz",
+                "sha256": "6500159d03fba57e5f8e0c2771fb613e7702f0f74583917f7eb4c50498a72ee6",
+                "md5": "a287494e1435e0b89e26b22daae40798",
+                "size": "1032025240"
+            }
+        }
+    }
+}

pkgs/development/cuda-modules/_cuda/manifests/cublasdx/README.md

@@ -9,10 +9,10 @@ directory, but without a redistributable manifest, so these manifests are made b
 CUDA major version with one archive for all platforms, which is listed under `linux-all`: 25.06.1 is the last release
 for CUDA 12 (12.6.3 and newer), and 26.x supports CUDA 13.0 and newer.
 
-Construct an entry from the archive's relative path, e.g. `cublasdx/cuda13/nvidia-mathdx-26.06.1-cuda13.tar.gz`:
+Construct an entry from the archive's relative path, e.g. `cublasdx/cuda13/nvidia-mathdx-26.10.0-cuda13.tar.gz`:
 
 ```console
-$ url=https://developer.download.nvidia.com/compute/cublasdx/redist/cublasdx/cuda13/nvidia-mathdx-26.06.1-cuda13.tar.gz
+$ url=https://developer.download.nvidia.com/compute/cublasdx/redist/cublasdx/cuda13/nvidia-mathdx-26.10.0-cuda13.tar.gz
 $ path="$(nix store prefetch-file --json "$url" | jq -r .storePath)"
 $ sha256sum "$path"; md5sum "$path"; stat -c %s "$path"
 ```

pkgs/development/cuda-modules/_cuda/manifests/cublasdx/redistrib_26.06.1.json

@@ -1,15 +0,0 @@
-{
-  "release_label": "26.06.1",
-  "release_product": "mathdx",
-  "mathdx": {
-    "name": "NVIDIA MathDx",
-    "license": "MathDx",
-    "version": "26.06.1",
-    "linux-all": {
-      "md5": "2ea075c221b979afdaa8b5fd6d1b6527",
-      "relative_path": "cublasdx/cuda13/nvidia-mathdx-26.06.1-cuda13.tar.gz",
-      "sha256": "59a9233db34b75568acbcc5284e6cefe6fad5577ee644f85044971d62eeea353",
-      "size": "37377287"
-    }
-  }
-}

pkgs/development/cuda-modules/_cuda/manifests/cublasdx/redistrib_26.10.0.json

@@ -0,0 +1,15 @@
+{
+  "release_label": "26.10.0",
+  "release_product": "mathdx",
+  "mathdx": {
+    "name": "NVIDIA MathDx",
+    "license": "MathDx",
+    "version": "26.10.0",
+    "linux-all": {
+      "md5": "1cca694b5afd75746c73052eaadd771c",
+      "relative_path": "cublasdx/cuda13/nvidia-mathdx-26.10.0-cuda13.tar.gz",
+      "sha256": "09c24eea52010b494ad786cfa2bdbbae24906aa75ca8e85dbb0730a5a647688a",
+      "size": "39289739"
+    }
+  }
+}

pkgs/development/cuda-modules/_cuda/manifests/cublasmp/redistrib_0.10.0.json

@@ -1,43 +0,0 @@
-{
-    "release_date": "2026-07-13",
-    "release_label": "0.10.0",
-    "release_product": "cublasmp",
-    "libcublasmp": {
-        "name": "NVIDIA cuBLASMp library",
-        "license": "cuBLASMp library",
-        "license_path": "libcublasmp/LICENSE.txt",
-        "version": "0.10.0.3695",
-        "linux-x86_64": {
-            "cuda12": {
-                "relative_path": "libcublasmp/linux-x86_64/libcublasmp-linux-x86_64-0.10.0.3695_cuda12-archive.tar.xz",
-                "sha256": "70489226490bae6a86a9d3fd0a9c68a79c5db0c1d8ea1e569b59fc4450c2a5e7",
-                "md5": "e63c1127b9574bde2d31583b338ad059",
-                "size": "17457588"
-            },
-            "cuda13": {
-                "relative_path": "libcublasmp/linux-x86_64/libcublasmp-linux-x86_64-0.10.0.3695_cuda13-archive.tar.xz",
-                "sha256": "0c5012ce562a495ce9c38c5eb72e77e49fce56303b8e844de1e137e143279760",
-                "md5": "bb8fea09ae7296c6cb8dc74e030bb69e",
-                "size": "9620452"
-            }
-        },
-        "cuda_variant": [
-            "12",
-            "13"
-        ],
-        "linux-sbsa": {
-            "cuda12": {
-                "relative_path": "libcublasmp/linux-sbsa/libcublasmp-linux-sbsa-0.10.0.3695_cuda12-archive.tar.xz",
-                "sha256": "b9450bc5c5991663c7babd6c4d4dac8d5e7036b65ec122cdd89e3c94dd3fe1bd",
-                "md5": "6460ca5f29cdd97fc29acaf33267b923",
-                "size": "17308836"
-            },
-            "cuda13": {
-                "relative_path": "libcublasmp/linux-sbsa/libcublasmp-linux-sbsa-0.10.0.3695_cuda13-archive.tar.xz",
-                "sha256": "795112489580b9f8cb615a67ed1d3d9248941910e06574898d5b15ff14d33167",
-                "md5": "270d7fe6e34b73bc6658ab6226951474",
-                "size": "9486832"
-            }
-        }
-    }
-}

pkgs/development/cuda-modules/_cuda/manifests/cublasmp/redistrib_0.11.0.json

@@ -0,0 +1,43 @@
+{
+    "release_date": "2026-10-28",
+    "release_label": "0.11.0",
+    "release_product": "cublasmp",
+    "libcublasmp": {
+        "name": "NVIDIA cuBLASMp library",
+        "license": "cuBLASMp library",
+        "license_path": "libcublasmp/LICENSE.txt",
+        "version": "0.11.0.4074",
+        "linux-x86_64": {
+            "cuda12": {
+                "relative_path": "libcublasmp/linux-x86_64/libcublasmp-linux-x86_64-0.11.0.4074_cuda12-archive.tar.xz",
+                "sha256": "1081732939c40e0b197e9cdb3bd34bbd02f7681a955b3950073b04811d1e5fb8",
+                "md5": "d3a85e0b7606185d0bd02e8c7389608f",
+                "size": "17576684"
+            },
+            "cuda13": {
+                "relative_path": "libcublasmp/linux-x86_64/libcublasmp-linux-x86_64-0.11.0.4074_cuda13-archive.tar.xz",
+                "sha256": "01cae55105049a6a449b6cf88c6b9f2228434b89afe20e7bed944a1955eeb89f",
+                "md5": "5488bc559cb503c365fb9012c84ea1a9",
+                "size": "11405776"
+            }
+        },
+        "cuda_variant": [
+            "12",
+            "13"
+        ],
+        "linux-sbsa": {
+            "cuda12": {
+                "relative_path": "libcublasmp/linux-sbsa/libcublasmp-linux-sbsa-0.11.0.4074_cuda12-archive.tar.xz",
+                "sha256": "87f4509f3b9b763b5343a20893807a048ea4342514ecea027b1d780809161658",
+                "md5": "f23cfd49d1f4a159ebcf869c1f9b4adc",
+                "size": "17340676"
+            },
+            "cuda13": {
+                "relative_path": "libcublasmp/linux-sbsa/libcublasmp-linux-sbsa-0.11.0.4074_cuda13-archive.tar.xz",
+                "sha256": "0f3024a03d01c5bb131043f6df1f9dd91d19d841cb7d0b2bb2e908e0c12c5e08",
+                "md5": "4d450282ef040e6bbab21c300169d916",
+                "size": "11265848"
+            }
+        }
+    }
+}

pkgs/development/cuda-modules/_cuda/manifests/cudss/redistrib_0.8.0.json

@@ -1,65 +0,0 @@
-{
-    "release_date": "2026-06-01",
-    "release_label": "0.8.0",
-    "release_product": "cudss",
-    "libcudss": {
-        "name": "NVIDIA cuDSS library",
-        "license": "cuDSS library",
-        "license_path": "libcudss/LICENSE.txt",
-        "version": "0.8.0.10",
-        "linux-x86_64": {
-            "cuda12": {
-                "relative_path": "libcudss/linux-x86_64/libcudss-linux-x86_64-0.8.0.10_cuda12-archive.tar.xz",
-                "sha256": "29716a05c64b28531309afcb7a9dd5044081a43197e72bdd0fbf29e9b4ee4707",
-                "md5": "ffd3f655065615015c22dd595b5fec0c",
-                "size": "174512356"
-            },
-            "cuda13": {
-                "relative_path": "libcudss/linux-x86_64/libcudss-linux-x86_64-0.8.0.10_cuda13-archive.tar.xz",
-                "sha256": "ba18f5fd80dcbbe905d158caac5b3061d848442bb5abd477b5f296b4257a4937",
-                "md5": "2df591d4e9a245bb38d11d211d0f9d90",
-                "size": "157058452"
-            }
-        },
-        "cuda_variant": [
-            "12",
-            "13"
-        ],
-        "linux-sbsa": {
-            "cuda12": {
-                "relative_path": "libcudss/linux-sbsa/libcudss-linux-sbsa-0.8.0.10_cuda12-archive.tar.xz",
-                "sha256": "949426015c986897df7677435b450d2740e8849d16b07cdc13db27ea32ebb18b",
-                "md5": "04295b740a8d64b0945860fb936cf645",
-                "size": "174240460"
-            },
-            "cuda13": {
-                "relative_path": "libcudss/linux-sbsa/libcudss-linux-sbsa-0.8.0.10_cuda13-archive.tar.xz",
-                "sha256": "c5fe7e5796792e10c3c5971bbb169ab3040ba61fe6fc99bdcbc02cf0f1ed9409",
-                "md5": "a700d4bc1317051bc8fdaea3f222e366",
-                "size": "156677968"
-            }
-        },
-        "windows-x86_64": {
-            "cuda12": {
-                "relative_path": "libcudss/windows-x86_64/libcudss-windows-x86_64-0.8.0.10_cuda12-archive.zip",
-                "sha256": "33815263ee6e75596ba65dc609d57c3140e9eeed67ac1673f3763ec9c00e3e8b",
-                "md5": "43acdecd1e82599310301dfd36fdab3b",
-                "size": "106404838"
-            },
-            "cuda13": {
-                "relative_path": "libcudss/windows-x86_64/libcudss-windows-x86_64-0.8.0.10_cuda13-archive.zip",
-                "sha256": "66d085917ba2aba0c61dd0cfde0ae284df9813709f60c4cd215c47f8929eb780",
-                "md5": "fb873f8ef1f0844cf3c4376bd8822c89",
-                "size": "79193209"
-            }
-        },
-        "linux-aarch64": {
-            "cuda12": {
-                "relative_path": "libcudss/linux-aarch64/libcudss-linux-aarch64-0.8.0.10_cuda12-archive.tar.xz",
-                "sha256": "11cf97c8cecf3a651bab1890894c8b8793666a17ad3002104e573efa564af231",
-                "md5": "8b71ec48327ca9ab0f68e21393f43f48",
-                "size": "73784000"
-            }
-        }
-    }
-}

pkgs/development/cuda-modules/_cuda/manifests/cudss/redistrib_1.0.0.json

@@ -0,0 +1,65 @@
+{
+    "release_date": "2026-10-21",
+    "release_label": "1.0.0",
+    "release_product": "cudss",
+    "libcudss": {
+        "name": "NVIDIA cuDSS library",
+        "license": "cuDSS library",
+        "license_path": "libcudss/LICENSE.txt",
+        "version": "1.0.0.35",
+        "linux-x86_64": {
+            "cuda12": {
+                "relative_path": "libcudss/linux-x86_64/libcudss-linux-x86_64-1.0.0.35_cuda12-archive.tar.xz",
+                "sha256": "b8c882c3ebc8b319886f5a06e74311c5eea09846925ba5a19892de4921201746",
+                "md5": "018d6723a244c971b6f269269118791d",
+                "size": "313582040"
+            },
+            "cuda13": {
+                "relative_path": "libcudss/linux-x86_64/libcudss-linux-x86_64-1.0.0.35_cuda13-archive.tar.xz",
+                "sha256": "0a155540d7b90d42105d38886fa630f1ec91d7b05580a28bd1fa04fa16e19ffe",
+                "md5": "b93960ba32e62def4cb4710161be1931",
+                "size": "290916608"
+            }
+        },
+        "cuda_variant": [
+            "12",
+            "13"
+        ],
+        "linux-sbsa": {
+            "cuda12": {
+                "relative_path": "libcudss/linux-sbsa/libcudss-linux-sbsa-1.0.0.35_cuda12-archive.tar.xz",
+                "sha256": "01e0008823e2980b197fed1102a1fe85b4bf0eef60bdf516c9052745804619e8",
+                "md5": "c6412fedb7962eba1a552265ae885d70",
+                "size": "315359780"
+            },
+            "cuda13": {
+                "relative_path": "libcudss/linux-sbsa/libcudss-linux-sbsa-1.0.0.35_cuda13-archive.tar.xz",
+                "sha256": "bd40403a984ab25ad7ac96d54d14863645256c7dca449fdf9836309d7b80e308",
+                "md5": "03ffdaddfd2a1dffd62e8ba6aa701cd4",
+                "size": "290154908"
+            }
+        },
+        "windows-x86_64": {
+            "cuda12": {
+                "relative_path": "libcudss/windows-x86_64/libcudss-windows-x86_64-1.0.0.35_cuda12-archive.zip",
+                "sha256": "7d3f5c0bbd80a2b425d5780fadd6002f9fa4207e99829565f458b90b897b01a6",
+                "md5": "e99eaf8392bfec8024fe320cbd4a1746",
+                "size": "215967410"
+            },
+            "cuda13": {
+                "relative_path": "libcudss/windows-x86_64/libcudss-windows-x86_64-1.0.0.35_cuda13-archive.zip",
+                "sha256": "be24e7cde2e061dd66fedddac244775b21d0739845b1b39135133bd519e9040f",
+                "md5": "5b5bcb808b670f2f2e0cae7a1270cf73",
+                "size": "159621307"
+            }
+        },
+        "linux-aarch64": {
+            "cuda12": {
+                "relative_path": "libcudss/linux-aarch64/libcudss-linux-aarch64-1.0.0.35_cuda12-archive.tar.xz",
+                "sha256": "f56b7bb57be9caf6e10f7d3ca2c31fb512f20810a57579237955cfd13be6deaa",
+                "md5": "12d716506f2253f43db1dfcce9c1bdf4",
+                "size": "135670240"
+            }
+        }
+    }
+}

pkgs/development/cuda-modules/_cuda/manifests/nvjpeg2000/redistrib_0.11.0.json

@@ -1,65 +0,0 @@
-{
-    "release_date": "2026-07-08",
-    "release_label": "0.11.0",
-    "release_product": "nvjpeg2000",
-    "libnvjpeg_2k": {
-        "name": "NVIDIA nvJPEG 2000",
-        "license": "nvJPEG 2K",
-        "license_path": "libnvjpeg_2k/LICENSE.txt",
-        "version": "0.11.0.51",
-        "linux-x86_64": {
-            "cuda12": {
-                "relative_path": "libnvjpeg_2k/linux-x86_64/libnvjpeg_2k-linux-x86_64-0.11.0.51_cuda12-archive.tar.xz",
-                "sha256": "08b544cf39e4693516b0fab23793cebcc6937e8dbc1816b75b8cd0267577b973",
-                "md5": "b88f48ca2483c3e5a23990d01e252fc7",
-                "size": "10978540"
-            },
-            "cuda13": {
-                "relative_path": "libnvjpeg_2k/linux-x86_64/libnvjpeg_2k-linux-x86_64-0.11.0.51_cuda13-archive.tar.xz",
-                "sha256": "23eba41f33fc35018dc48db31ef72e35d711bb1280cdde34e62bcaa555047348",
-                "md5": "ff12b3a101dcdef5f190a0f92e4eade5",
-                "size": "4174160"
-            }
-        },
-        "cuda_variant": [
-            "12",
-            "13"
-        ],
-        "linux-sbsa": {
-            "cuda12": {
-                "relative_path": "libnvjpeg_2k/linux-sbsa/libnvjpeg_2k-linux-sbsa-0.11.0.51_cuda12-archive.tar.xz",
-                "sha256": "df7e998965ea7ff0ec3b355f31db0fb7b18423cbc0c3e2cd25da9e8a0e5fea2a",
-                "md5": "21f3fe8f1dbc1353d6ede7875811557e",
-                "size": "10893076"
-            },
-            "cuda13": {
-                "relative_path": "libnvjpeg_2k/linux-sbsa/libnvjpeg_2k-linux-sbsa-0.11.0.51_cuda13-archive.tar.xz",
-                "sha256": "b448efabbc3605dedd5570e4335ead5d31d82e3ad6aad627364419c5626bd5e4",
-                "md5": "430d57e3703abc9959a41d21425bd4d6",
-                "size": "4567476"
-            }
-        },
-        "windows-x86_64": {
-            "cuda12": {
-                "relative_path": "libnvjpeg_2k/windows-x86_64/libnvjpeg_2k-windows-x86_64-0.11.0.51_cuda12-archive.zip",
-                "sha256": "b6602a4cd0097a91b4080b9716a46098b9bec4752440e15fd6012a194be42535",
-                "md5": "0e1d0e4856e6607163ed0014f79fc050",
-                "size": "8773117"
-            },
-            "cuda13": {
-                "relative_path": "libnvjpeg_2k/windows-x86_64/libnvjpeg_2k-windows-x86_64-0.11.0.51_cuda13-archive.zip",
-                "sha256": "4219478a67f1810bafeef86fc09345a2f6a64db477af5590c35530ba94fd6d47",
-                "md5": "1a242139b337757bcb27c4a9511d0747",
-                "size": "3733743"
-            }
-        },
-        "linux-aarch64": {
-            "cuda12": {
-                "relative_path": "libnvjpeg_2k/linux-aarch64/libnvjpeg_2k-linux-aarch64-0.11.0.51_cuda12-archive.tar.xz",
-                "sha256": "4a534fcb34e188a8f021219d8f3a89a5ed79ae970ec75288a0b5f43f778e99ce",
-                "md5": "ac7cdc0c0487dfc9c8c6a57336aa9b66",
-                "size": "3699848"
-            }
-        }
-    }
-}

pkgs/development/cuda-modules/_cuda/manifests/nvjpeg2000/redistrib_0.12.0.json

@@ -0,0 +1,65 @@
+{
+    "release_date": "2026-10-28",
+    "release_label": "0.12.0",
+    "release_product": "nvjpeg2000",
+    "libnvjpeg_2k": {
+        "name": "NVIDIA nvJPEG 2000",
+        "license": "nvJPEG 2K",
+        "license_path": "libnvjpeg_2k/LICENSE.txt",
+        "version": "0.12.0.58",
+        "linux-x86_64": {
+            "cuda12": {
+                "relative_path": "libnvjpeg_2k/linux-x86_64/libnvjpeg_2k-linux-x86_64-0.12.0.58_cuda12-archive.tar.xz",
+                "sha256": "4fa571310cfd3a53c38bfad00da983e495422fb15d8376445bc0a28d5283ddb3",
+                "md5": "236885f68c6dee8a7d51f324987e90c2",
+                "size": "11114136"
+            },
+            "cuda13": {
+                "relative_path": "libnvjpeg_2k/linux-x86_64/libnvjpeg_2k-linux-x86_64-0.12.0.58_cuda13-archive.tar.xz",
+                "sha256": "6536c8ad151394c3cdb4f35a24cc93d092934796c0900f848607d44432cc11de",
+                "md5": "d099cadd9d562ba977d16d074ba0b8d6",
+                "size": "4129852"
+            }
+        },
+        "cuda_variant": [
+            "12",
+            "13"
+        ],
+        "linux-sbsa": {
+            "cuda12": {
+                "relative_path": "libnvjpeg_2k/linux-sbsa/libnvjpeg_2k-linux-sbsa-0.12.0.58_cuda12-archive.tar.xz",
+                "sha256": "b779f804a51ba641c17d49bc4d1c0e7aa4da95d540ee45e034640b7b2b660f21",
+                "md5": "915114bb5aec738a6beeda147acec869",
+                "size": "11105464"
+            },
+            "cuda13": {
+                "relative_path": "libnvjpeg_2k/linux-sbsa/libnvjpeg_2k-linux-sbsa-0.12.0.58_cuda13-archive.tar.xz",
+                "sha256": "a95330b69ac66ffeee1dd2a209c12a37074152a81660b850fb8d5fe4abfc2e82",
+                "md5": "05cfb61deb8c1f0a32158f9095de07b2",
+                "size": "4480384"
+            }
+        },
+        "windows-x86_64": {
+            "cuda12": {
+                "relative_path": "libnvjpeg_2k/windows-x86_64/libnvjpeg_2k-windows-x86_64-0.12.0.58_cuda12-archive.zip",
+                "sha256": "8a4dc41d951f9d0503a97442d5ba661ca516668501349713e6c880a93a591b5f",
+                "md5": "7f18cc92a0bba2b8395cc88f28473e82",
+                "size": "9053012"
+            },
+            "cuda13": {
+                "relative_path": "libnvjpeg_2k/windows-x86_64/libnvjpeg_2k-windows-x86_64-0.12.0.58_cuda13-archive.zip",
+                "sha256": "5b997b560a03a176b4ac0c76a8f3debfc770e948abf9926ed9a30b845a7c5d50",
+                "md5": "f94f4c541e4ea9d6a8420d35cb3d22b9",
+                "size": "3699482"
+            }
+        },
+        "linux-aarch64": {
+            "cuda12": {
+                "relative_path": "libnvjpeg_2k/linux-aarch64/libnvjpeg_2k-linux-aarch64-0.12.0.58_cuda12-archive.tar.xz",
+                "sha256": "f80b4feef67d476f89d47bca69211d1862afb14ad2b73d29b980ae0edfa7a6d4",
+                "md5": "b6e6345993a929e7b02699c78f846e01",
+                "size": "3334380"
+            }
+        }
+    }
+}