Merge 4d835ee4d1 into haskell-updates

2026-03-15 00:32:44 +00:00
parent 0a878049e5 4d835ee4d1
commit 01835d849d
178 changed files with 3606 additions and 2090 deletions
@@ -96,6 +96,8 @@ let
    (lib.filter (path: lib.length path > 3))
    (map (path: lib.elemAt path 3))
    (map lib.singleton)
+    # Filter out new packages
+    (lib.filter (attrPath: lib.hasAttrByPath attrPath pkgs))
  ];

  # An attribute can appear in affected *and* touched
@@ -138,6 +138,21 @@ let
        ];
      };
    };
+    testByNameNonExistentChanged = {
+      expr = fun {
+        pkgs = mockPkgs {
+          packages = [ ];
+        };
+        # Happens when a new package was added to pkgs/by-name
+        changedFiles = [ "pkgs/by-name/he/hello/sources.json" ];
+        affectedAttrPaths = [ ];
+      };
+      expected = {
+        packages = [ ];
+        teams = { };
+        users = { };
+      };
+    };
    testByNameReadmeChanged = {
      expr = fun {
        pkgs = mockPkgs {
@@ -56,6 +56,7 @@ function runChecklist({
      'Opened by [@r-ryantm](https://nix-community.github.io/nixpkgs-update/r-ryantm/).':
        pull_request.user.login === 'r-ryantm',
    },
+    'PR is not a draft': !pull_request.draft,
  }

  if (user) {
@@ -2021,6 +2021,12 @@
    name = "Austin Lund";
    keys = [ { fingerprint = "7083 E268 4BFD 845F 2B84  9E74 B695 8918 ED23 32CE"; } ];
  };
+  aporro = {
+    email = "git@aporro.dev";
+    github = "aporro1";
+    githubId = 124402746;
+    name = "Apollon Tsikas";
+  };
  appleboblin = {
    email = "github@appleboblin.com";
    github = "appleboblin";
@@ -718,12 +718,6 @@
  "module-services-suwayomi-server-extra-config": [
    "index.html#module-services-suwayomi-server-extra-config"
  ],
-  "module-services-immich": [
-    "index.html#module-services-immich"
-  ],
-  "module-services-immich-vectorchord-migration": [
-    "index.html#module-services-immich-vectorchord-migration"
-  ],
  "module-services-paisa": [
    "index.html#module-services-paisa"
  ],
@@ -382,7 +382,7 @@

 - `linux_libre` & `linux_latest_libre` have been removed due to a lack of maintenance.

- Immich now has support for [VectorChord](https://github.com/tensorchord/VectorChord) when using the PostgreSQL configuration provided by `services.immich.database.enable`, which replaces `pgvecto-rs`. VectorChord support can be toggled with the option `services.immich.database.enableVectorChord`. Additionally, `pgvecto-rs` support is now disabled from NixOS 25.11 onwards using the option `services.immich.database.enableVectors`. This option will be removed fully in the future once Immich drops support for `pgvecto-rs` fully. See [Immich migration instructions](#module-services-immich-vectorchord-migration).
+- Immich now has support for [VectorChord](https://github.com/tensorchord/VectorChord) when using the PostgreSQL configuration provided by `services.immich.database.enable`, which replaces `pgvecto-rs`. VectorChord support can be toggled with the option `services.immich.database.enableVectorChord`. Additionally, `pgvecto-rs` support is now disabled from NixOS 25.11 onwards using the option `services.immich.database.enableVectors`. This option will be removed fully in the future once Immich drops support for `pgvecto-rs` fully. See [Immich migration instructions](https://github.com/NixOS/nixpkgs/blob/nixos-25.11/nixos/modules/services/web-apps/immich.md#migrating-from-pgvecto-rs-to-vectorchord-pre-2511-installations-module-services-immich-vectorchord-migration).

 - It is now possible to configure the default source address using the new options [networking.defaultGateway.source](#opt-networking.defaultGateway.source),
  [networking.defaultGateway6.source](#opt-networking.defaultGateway6.source).
@@ -78,6 +78,8 @@

 - [Drasl](https://github.com/unmojang/drasl), an alternative authentication server for Minecraft. Available as [services.drasl](#opt-services.drasl.enable).

+- [tabbyAPI](https://github.com/theroyallab/tabbyAPI), the official OpenAI compatible API server for Exllama. Available as [services.tabbyapi](#opt-services.tabbyapi.enable).
+
 ## Backward Incompatibilities {#sec-release-26.05-incompatibilities}

 <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->
@@ -136,6 +138,10 @@ of pulling the upstream container image from Docker Hub. If you want the old beh

 - Ethercalc and its associated module have been removed, as the package is unmaintained and cannot be installed from source with npm now.

+- `services.immich` no longer supports pgvecto.rs since the package has been removed from nixpkgs.
+  As a result, options `services.immich.database.enableVectors` and `services.immich.database.enableVectorchord` have been removed, and VectorChord is now always used.
+  If you have not completed the migration yet, ensure you completely remove the extension from your database before upgrading by following the [migration guide](https://github.com/NixOS/nixpkgs/blob/nixos-25.11/nixos/modules/services/web-apps/immich.md#migrating-from-pgvecto-rs-to-vectorchord-pre-2511-installations-module-services-immich-vectorchord-migration).
+
 - `services.cgit` before always had the git-http-backend and its "export all" setting enabled, which sidestepped any access control configured in cgit's settings. Now you have to make a decision and either enable or disable `services.cgit.gitHttpBackend.checkExportOkFiles` (or disable the git-http-backend).

 - `rocmPackages_6` has been removed. `rocmPackages` has been updated to ROCm 7.x. Out of tree packages may rely on obsolete hipblas APIs or compile time constant warp size and need to be updated.
@@ -365,6 +365,8 @@
  ./programs/xfs_quota.nix
  ./programs/xonsh.nix
  ./programs/xppen.nix
+  ./programs/xscreensaver/sonar.nix
+  ./programs/xscreensaver/xscreensaver.nix
  ./programs/xss-lock.nix
  ./programs/xwayland.nix
  ./programs/yazi.nix
@@ -1771,6 +1773,7 @@
  ./services/web-apps/strfry.nix
  ./services/web-apps/suwayomi-server.nix
  ./services/web-apps/szurubooru.nix
+  ./services/web-apps/tabbyapi.nix
  ./services/web-apps/trilium.nix
  ./services/web-apps/tt-rss.nix
  ./services/web-apps/tuliprox.nix
@@ -75,13 +75,16 @@ in
  };

  config = lib.mkIf cfg.enable {
-    environment = {
-      systemPackages = [ cfg.package ];
-      etc."xdg/foot/foot.ini".source = settingsFormat.generate "foot.ini" cfg.settings;
-
-      etc."xdg/autostart/foot-server.desktop".source =
-        lib.mkIf cfg.xdg.serverAutostart "${cfg.package}/share/applications/foot-server.desktop";
-    };
+    environment = lib.mkMerge [
+      {
+        systemPackages = [ cfg.package ];
+        etc."xdg/foot/foot.ini".source = settingsFormat.generate "foot.ini" cfg.settings;
+      }
+      (lib.mkIf cfg.xdg.serverAutostart {
+        etc."xdg/autostart/foot-server.desktop".source =
+          "${cfg.package}/share/applications/foot-server.desktop";
+      })
+    ];

    programs = {
      foot.settings.main.include = lib.optionals (cfg.theme != null) [
@@ -0,0 +1,26 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+
+let
+  cfg = config.programs.xscreensaver.sonar;
+  globalCfg = config.programs.xscreensaver;
+in
+{
+  options.programs.xscreensaver.sonar = {
+    enable = lib.mkEnableOption "xscreensaver";
+  };
+  config = lib.mkIf cfg.enable {
+    security.wrappers.sonar = {
+      capabilities = "cap_net_raw+ep";
+      owner = "root";
+      group = "root";
+      source = pkgs.writeShellScript "sonar-fakeroot" ''
+        exec ${lib.getExe pkgs.fakeroot} ${globalCfg.package}/libexec/xscreensaver/sonar "$@"
+      '';
+    };
+  };
+}
@@ -0,0 +1,20 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+
+let
+  cfg = config.programs.xscreensaver;
+in
+{
+  options.programs.xscreensaver = {
+    enable = lib.mkEnableOption "all of the xscreensaver programs";
+    package = lib.mkPackageOption pkgs "xscreensaver" { };
+  };
+  config = lib.mkIf cfg.enable {
+    environment.systemPackages = [ cfg.package ];
+    programs.xscreensaver.sonar.enable = true;
+  };
+}
@@ -1,32 +0,0 @@
-# Immich {#module-services-immich}
-
-[Immich](https://immich.app/) is a self-hosted photo and video management
-solution, similar to SaaS offerings like Google Photos.
-
-## Migrating from `pgvecto-rs` to VectorChord (pre-25.11 installations) {#module-services-immich-vectorchord-migration}
-
-Immich instances that were setup before 25.11 (as in
-`system.stateVersion = 25.11;`) will be automatically migrated to VectorChord.
-Note that this migration is not reversible, so database dumps should be created
-if desired.
-
-See [Immich documentation][vectorchord-migration-docs] for more details about
-the automatic migration.
-
-After a successful migration, `pgvecto-rs` should be removed from the database
-installation, unless other applications depend on it.
-
-1. Make sure VectorChord is enabled ([](#opt-services.immich.database.enableVectorChord)) and Immich has completed the migration. Refer to the [Immich documentation][vectorchord-migration-docs] for details.
-2. Run the following two statements in the PostgreSQL database using a superuser role in Immich's database.
-
-    ```sql
-    DROP EXTENSION vectors;
-    DROP SCHEMA vectors;
-    ```
-
-    - You may use the following command to run these statements against the database: `sudo -u postgres psql immich` (Replace `immich` with the value of [](#opt-services.immich.database.name))
-
-3. Disable `pgvecto-rs` by setting [](#opt-services.immich.database.enableVectors) to `false`.
-4. Rebuild and switch.
-
-[vectorchord-migration-docs]: https://immich.app/docs/administration/postgres-standalone/#migrating-to-vectorchord
@@ -69,6 +69,30 @@ in
          `services.immich.settings.oauth.clientSecret._secret = "/path/to/secret/file";`
      ''
    )
+    (lib.mkRemovedOptionModule
+      [
+        "services"
+        "immich"
+        "database"
+        "enableVectorChord"
+      ]
+      ''
+        `database.enableVectorChord` has been deprecated as the pgvecto.rs alternative
+        is no longer available. From now on, vectorchord is always enabled.
+      ''
+    )
+    (lib.mkRemovedOptionModule
+      [
+        "services"
+        "immich"
+        "database"
+        "enableVectors"
+      ]
+      ''
+        `database.enableVectors` has been deprecated as pgvecto.rs is no longer available.
+        From now on, vectorchord is used instead.
+      ''
+    )
  ];

  options.services.immich = {
@@ -203,17 +227,6 @@ in
        // {
          default = true;
        };
-      enableVectorChord =
-        mkEnableOption "the new VectorChord extension for full-text search in Postgres"
-        // {
-          default = true;
-        };
-      enableVectors =
-        mkEnableOption "pgvecto.rs in the database. You may disable this, if you have migrated to VectorChord and deleted the `vectors` schema."
-        // {
-          default = lib.versionOlder config.system.stateVersion "25.11";
-          defaultText = lib.literalExpression "lib.versionOlder config.system.stateVersion \"25.11\"";
-        };
      createDB = mkEnableOption "the automatic creation of the database for immich." // {
        default = true;
      };
@@ -263,17 +276,6 @@ in
        assertion = !isPostgresUnixSocket -> cfg.secretsFile != null;
        message = "A secrets file containing at least the database password must be provided when unix sockets are not used.";
      }
-      {
-        # When removing this assertion, please adjust the nixosTests accordingly.
-        assertion =
-          (cfg.database.enable && cfg.database.enableVectors)
-          -> lib.versionOlder config.services.postgresql.package.version "17";
-        message = "Immich doesn't support PostgreSQL 17+ when using pgvecto.rs. Consider disabling it using services.immich.database.enableVectors if it is not needed anymore.";
-      }
-      {
-        assertion = cfg.database.enable -> (cfg.database.enableVectorChord || cfg.database.enableVectors);
-        message = "At least one of services.immich.database.enableVectorChord and services.immich.database.enableVectors has to be enabled.";
-      }
    ];

    services.postgresql = mkIf cfg.database.enable {
@@ -286,19 +288,12 @@ in
          ensureClauses.login = true;
        }
      ];
-      extensions =
-        ps:
-        lib.optionals cfg.database.enableVectors [ ps.pgvecto-rs ]
-        ++ lib.optionals cfg.database.enableVectorChord [
-          ps.pgvector
-          ps.vectorchord
-        ];
+      extensions = ps: [
+        ps.pgvector
+        ps.vectorchord
+      ];
      settings = {
-        shared_preload_libraries =
-          lib.optionals cfg.database.enableVectors [
-            "vectors.so"
-          ]
-          ++ lib.optionals cfg.database.enableVectorChord [ "vchord.so" ];
+        shared_preload_libraries = [ "vchord.so" ];
        search_path = "\"$user\", public, vectors";
      };
    };
@@ -310,40 +305,27 @@ in
          "cube"
          "earthdistance"
          "pg_trgm"
-        ]
-        ++ lib.optionals cfg.database.enableVectors [
-          "vectors"
-        ]
-        ++ lib.optionals cfg.database.enableVectorChord [
          "vector"
          "vchord"
        ];
-        sqlFile = pkgs.writeText "immich-pgvectors-setup.sql" (
-          # save previous version of vectorchord to trigger reindex on update
-          lib.optionalString cfg.database.enableVectorChord ''
-            SELECT COALESCE(installed_version, ''') AS vchord_version_before FROM pg_available_extensions WHERE name = 'vchord' \gset
-          ''
-          + ''
-            ${lib.concatMapStringsSep "\n" (ext: "CREATE EXTENSION IF NOT EXISTS \"${ext}\";") extensions}
-            ${lib.concatMapStringsSep "\n" (ext: "ALTER EXTENSION \"${ext}\" UPDATE;") extensions}
-            ALTER SCHEMA public OWNER TO ${cfg.database.user};
-          ''
-          + lib.optionalString cfg.database.enableVectors ''
-            ALTER SCHEMA vectors OWNER TO ${cfg.database.user};
-            GRANT SELECT ON TABLE pg_vector_index_stat TO ${cfg.database.user};
-          ''
-          # trigger reindex if vectorchord updates
-          # https://docs.immich.app/administration/postgres-standalone/#updating-vectorchord
-          + lib.optionalString cfg.database.enableVectorChord ''
-            SELECT COALESCE(installed_version, ''') AS vchord_version_after FROM pg_available_extensions WHERE name = 'vchord' \gset
+        sqlFile = pkgs.writeText "immich-pgvectors-setup.sql" ''
+          -- save previous version of vectorchord to trigger reindex on update
+          SELECT COALESCE(installed_version, ''') AS vchord_version_before FROM pg_available_extensions WHERE name = 'vchord' \gset

-            SELECT (:'vchord_version_before' != ''' AND :'vchord_version_before' != :'vchord_version_after') AS has_vchord_updated \gset
-            \if :has_vchord_updated
-              REINDEX INDEX face_index;
-              REINDEX INDEX clip_index;
-            \endif
-          ''
-        );
+          ${lib.concatMapStringsSep "\n" (ext: "CREATE EXTENSION IF NOT EXISTS \"${ext}\";") extensions}
+          ${lib.concatMapStringsSep "\n" (ext: "ALTER EXTENSION \"${ext}\" UPDATE;") extensions}
+          ALTER SCHEMA public OWNER TO ${cfg.database.user};
+
+          -- trigger reindex if vectorchord updates
+          -- https://docs.immich.app/administration/postgres-standalone/#updating-vectorchord
+          SELECT COALESCE(installed_version, ''') AS vchord_version_after FROM pg_available_extensions WHERE name = 'vchord' \gset
+
+          SELECT (:'vchord_version_before' != ''' AND :'vchord_version_before' != :'vchord_version_after') AS has_vchord_updated \gset
+          \if :has_vchord_updated
+            REINDEX INDEX face_index;
+            REINDEX INDEX clip_index;
+          \endif
+        '';
      in
      [
        ''
@@ -480,6 +462,5 @@ in
  };
  meta = {
    maintainers = with lib.maintainers; [ jvanbruegge ];
-    doc = ./immich.md;
  };
 }
@@ -0,0 +1,199 @@
+{
+  pkgs,
+  config,
+  lib,
+  ...
+}:
+
+let
+  cfg = config.services.tabbyapi;
+  yamlFormat = pkgs.formats.yaml { };
+  configFile = yamlFormat.generate "config.yml" cfg.settings;
+in
+{
+  options.services.tabbyapi = {
+    enable = lib.mkEnableOption "tabbyapi";
+
+    package = lib.mkPackageOption pkgs "tabbyapi" { };
+
+    openFirewall = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      description = "Whether to open the firewall for the TabbyAPI port.";
+    };
+
+    settings = lib.mkOption {
+      description = ''
+        Configuration for TabbyAPI. https://github.com/theroyallab/tabbyAPI/wiki/02.-Server-options
+      '';
+      type = lib.types.submodule {
+        freeformType = yamlFormat.type;
+
+        options = {
+          network = {
+            host = lib.mkOption {
+              type = lib.types.str;
+              default = "127.0.0.1";
+              description = "The IP to host on. Use 0.0.0.0 to expose on all adapters.";
+            };
+
+            port = lib.mkOption {
+              type = lib.types.port;
+              default = 5000;
+              description = "The port to host on.";
+            };
+
+            disable_auth = lib.mkOption {
+              type = lib.types.bool;
+              default = false;
+              description = "Disable HTTP token authentication. WARNING: Vulnerable if exposed.";
+            };
+
+            api_servers = lib.mkOption {
+              type = lib.types.listOf lib.types.str;
+              default = [ "OAI" ];
+              description = "Select API servers to enable. Options: OAI, Kobold.";
+            };
+          };
+
+          logging = {
+            log_prompt = lib.mkOption {
+              type = lib.types.bool;
+              default = false;
+              description = "Enable prompt logging.";
+            };
+
+            log_requests = lib.mkOption {
+              type = lib.types.bool;
+              default = false;
+              description = "Enable request logging. Only use for debug.";
+            };
+          };
+
+          model = {
+            model_dir = lib.mkOption {
+              type = lib.types.str;
+              default = "models";
+              description = "Directory to look for models. Relative to the state directory.";
+              example = lib.literalExpression ''
+                (pkgs.linkFarm "models" {
+                  qwen-8b = pkgs.fetchgit {
+                    url = "https://huggingface.co/turboderp/Qwen3-VL-8B-Instruct-exl3";
+                    rev = "652ab6be95b3e2880e78d87269013d98ca9c392d"; # 4bpw
+                    fetchLFS = true;
+                    hash = "sha256-n+9Mt7EZ3XHM0w8oGUZr4EBz91EFyp1VBpvl9Php/QM=";
+                  };
+
+                  # Example for patching Qwen 3.5's template to work with OpenWebUI's thinking feature
+                  Qwen3_5-9B = pkgs.applyPatches {
+                    src = pkgs.fetchgit {
+                      url = "https://huggingface.co/turboderp/Qwen3.5-9B-exl3";
+                      rev = "6f8763307a3130ae989269fbc79a8c8e9db5ee42"; # 5.0bpw
+                      fetchLFS = true;
+                      hash = "sha256-Y7Uw/MChXU0Iu9hb3dv+cTtNBwhPbd/I/gYDUjM1j8g=";
+                    };
+                    patches = [ ./qwen-thinking.patch ];
+                  };
+                  # diff --git a/chat_template.jinja b/chat_template.jinja
+                  # index a585dec..68f1b6f 100644
+                  # --- a/chat_template.jinja
+                  # +++ b/chat_template.jinja
+                  # @@ -148,7 +148,5 @@
+                  #     {{- '<|im_start|>assistant\n' }}
+                  #     {%- if enable_thinking is defined and enable_thinking is false %}
+                  #         {{- '<think>\n\n</think>\n\n' }}
+                  # -    {%- else %}
+                  # -        {{- '<think>\n' }}
+                  #     {%- endif %}
+                  # {%- endif %}
+                  # \ No newline at end of file
+                }).outPath;
+              '';
+            };
+
+            model_name = lib.mkOption {
+              type = lib.types.nullOr lib.types.str;
+              default = null;
+              description = "The initial model to load on startup. Must exist in model_dir.";
+              example = "Qwen3_5-9B";
+            };
+
+            max_seq_len = lib.mkOption {
+              type = lib.types.nullOr lib.types.int;
+              default = null;
+              description = "Max sequence length. Set null to use model defaults.";
+            };
+
+            cache_mode = lib.mkOption {
+              type = lib.types.str;
+              default = "FP16";
+              description = "Cache mode for VRAM savings. ExLlamaV2: FP16, Q8, Q6, Q4. ExLlamaV3: specific pair string (e.g., '8,8').";
+            };
+
+            gpu_split_auto = lib.mkOption {
+              type = lib.types.bool;
+              default = true;
+              description = "Automatically allocate resources to GPUs.";
+            };
+
+            dummy_model_names = lib.mkOption {
+              type = lib.types.listOf lib.types.str;
+              default = [ "gpt-3.5-turbo" ];
+              description = "List of fake model names sent via the /v1/models endpoint.";
+            };
+          };
+        };
+      };
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    assertions = [
+      {
+        assertion = cfg.package.passthru.cudaSupport;
+        message = ''
+          TabbyAPI requires CUDA support to function. The configured package does not have CUDA enabled.
+          Consider setting:
+            services.tabbyapi.package = pkgs.pkgsCuda.tabbyapi;
+        '';
+      }
+    ];
+    networking.firewall.allowedTCPPorts = lib.mkIf cfg.openFirewall [
+      cfg.settings.network.port
+    ];
+
+    systemd.services.tabbyapi = {
+      enable = true;
+      wantedBy = [ "multi-user.target" ];
+      description = "TabbyAPI - OAI compatible server for Exllama";
+
+      serviceConfig = {
+        ExecStart = "${lib.getExe cfg.package} --config=${configFile}";
+        Restart = "on-failure";
+        StateDirectory = "tabbyapi";
+        WorkingDirectory = "/var/lib/tabbyapi";
+        User = "tabbyapi";
+        Group = "tabbyapi";
+        DynamicUser = true;
+
+        # Hardening
+        ProtectSystem = "strict";
+        ProtectHome = "yes";
+        LockPersonality = true;
+        ProtectClock = true;
+        ProtectControlGroups = true;
+        ProtectHostname = true;
+        ProtectKernelLogs = true;
+        ProtectKernelModules = true;
+        ProtectKernelTunables = true;
+        ProtectProc = "invisible";
+        RestrictNamespaces = true;
+        RestrictRealtime = true;
+        RestrictSUIDSGID = true;
+        SystemCallArchitectures = "native";
+      };
+    };
+  };
+
+  meta.maintainers = with lib.maintainers; [ BatteredBunny ];
+}
@@ -584,6 +584,7 @@ in
    _module.args.firefoxPackage = pkgs.firefox-esr-140;
  };
  firefox-syncserver = runTest ./firefox-syncserver.nix;
+  firefox_decrypt = runTest ./firefox_decrypt.nix;
  firefoxpwa = runTest ./firefoxpwa.nix;
  firejail = runTest ./firejail.nix;
  firewall = runTest {
@@ -771,7 +772,6 @@ in
  immich = runTest ./web-apps/immich.nix;
  immich-kiosk = runTest ./web-apps/immich-kiosk.nix;
  immich-public-proxy = runTest ./web-apps/immich-public-proxy.nix;
-  immich-vectorchord-migration = runTest ./web-apps/immich-vectorchord-migration.nix;
  immich-vectorchord-reindex = runTest ./web-apps/immich-vectorchord-reindex.nix;
  immichframe = runTest ./web-apps/immichframe.nix;
  incron = runTest ./incron.nix;
@@ -0,0 +1,73 @@
+{ lib, ... }:
+{
+  name = "firefox_decrypt";
+
+  meta = {
+    maintainers = with lib.maintainers; [ schnusch ];
+  };
+
+  nodes.machine =
+    { pkgs, ... }:
+    {
+      imports = [ ./common/x11.nix ];
+      programs.firefox.enable = true;
+      environment.systemPackages = [ pkgs.firefox_decrypt ];
+    };
+
+  enableOCR = true;
+
+  testScript = ''
+    import csv
+    import io
+    import random
+    import string
+
+    machine.wait_for_x()
+
+    expected: dict[str, str] = {
+        "url": "http://localhost",
+        "user": "user",
+        "password": "".join(random.choices(string.ascii_letters + string.digits, k=32)),
+    }
+
+    machine.execute("firefox about:logins >&2 &")
+
+    # press "Add password" button
+    # "Search Passwords" is not found by OCR, probably due to too low contrast.
+    machine.wait_for_text("No passwords saved")
+    for c in ("tab", "\n"):
+        machine.send_key(c)
+
+    # add a new password entry
+    machine.wait_for_text("Add password")
+    for text, control in [
+        (expected["url"], "tab"),
+        (expected["user"], "tab"),
+        (expected["password"], "\n"),
+    ]:
+        with machine.nested(f"typing {repr(text)}"):
+            for c in text:
+                machine.send_key(c, log=False)
+        machine.send_key(control)
+
+    # "Remove" button for our new entry appeared
+    machine.wait_for_text("Remove")
+
+    # close Firefox
+    machine.send_key("ctrl-q")
+    machine.wait_for_text(r"Quit Firefox or close current tab\?")
+    machine.send_key("\n")
+
+    # extract Firefox logins
+    credentials = list(
+        csv.DictReader(
+            io.StringIO(
+                machine.succeed("firefox-decrypt -f csv ~/.config/mozilla/firefox"),
+                newline="",
+            ),
+            delimiter=";",
+        )
+    )
+    assert expected in credentials, f"expected {expected!r} in {credentials!r}"
+  '';
+}
@@ -1,71 +0,0 @@
-{ ... }:
-{
-  name = "immich-vectorchord-migration";
-
-  nodes.machine =
-    { lib, pkgs, ... }:
-    {
-      # These tests need a little more juice
-      virtualisation = {
-        cores = 2;
-        memorySize = 2048;
-        diskSize = 4096;
-      };
-
-      environment.systemPackages = with pkgs; [ immich-cli ];
-
-      services.immich = {
-        enable = true;
-        environment.IMMICH_LOG_LEVEL = "verbose";
-        # Simulate an existing setup
-        database.enableVectorChord = lib.mkDefault false;
-        database.enableVectors = lib.mkDefault true;
-      };
-
-      # TODO: Remove when PostgreSQL 17 is supported.
-      services.postgresql.package = pkgs.postgresql_16;
-
-      specialisation."immich-vectorchord-enabled".configuration = {
-        services.immich.database.enableVectorChord = true;
-      };
-
-      specialisation."immich-vectorchord-only".configuration = {
-        services.immich.database = {
-          enableVectorChord = true;
-          enableVectors = false;
-        };
-      };
-    };
-
-  testScript =
-    { nodes, ... }:
-    let
-      specBase = "${nodes.machine.system.build.toplevel}/specialisation";
-      vectorchordEnabled = "${specBase}/immich-vectorchord-enabled";
-      vectorchordOnly = "${specBase}/immich-vectorchord-only";
-    in
-    ''
-      def psql(command: str):
-        machine.succeed(f"sudo -u postgres psql -d ${nodes.machine.services.immich.database.name} -c '{command}'")
-
-      def immich_works():
-        machine.wait_for_unit("immich-server.service")
-
-        machine.wait_for_open_port(2283) # Server
-        machine.wait_for_open_port(3003) # Machine learning
-        machine.succeed("curl --fail http://localhost:2283/")
-
-      immich_works()
-
-      machine.succeed("${vectorchordEnabled}/bin/switch-to-configuration test")
-
-      immich_works()
-
-      psql("DROP EXTENSION vectors;")
-      psql("DROP SCHEMA vectors;")
-
-      machine.succeed("${vectorchordOnly}/bin/switch-to-configuration test")
-
-      immich_works()
-    '';
-}
@@ -1,4 +1,100 @@
 {
+    "BufOnly": {
+        "date": "2026-02-04",
+        "new": "BufOnly-vim"
+    },
+    "CSApprox": {
+        "date": "2026-02-04",
+        "new": "csapprox"
+    },
+    "Colour_Sampler_Pack": {
+        "date": "2026-02-04",
+        "new": "Colour-Sampler-Pack"
+    },
+    "Cosco": {
+        "date": "2026-02-04",
+        "new": "cosco-vim"
+    },
+    "Gist": {
+        "date": "2026-02-04",
+        "new": "vim-gist"
+    },
+    "Gundo": {
+        "date": "2026-02-04",
+        "new": "gundo-vim"
+    },
+    "Hoogle": {
+        "date": "2026-02-04",
+        "new": "vim-hoogle"
+    },
+    "Solarized": {
+        "date": "2026-02-04",
+        "new": "vim-colors-solarized"
+    },
+    "Supertab": {
+        "date": "2026-02-04",
+        "new": "supertab"
+    },
+    "Syntastic": {
+        "date": "2026-02-04",
+        "new": "syntastic"
+    },
+    "SyntaxRange": {
+        "date": "2026-02-04",
+        "new": "vim-SyntaxRange"
+    },
+    "Tabular": {
+        "date": "2026-02-04",
+        "new": "tabular"
+    },
+    "Tagbar": {
+        "date": "2026-02-04",
+        "new": "tagbar"
+    },
+    "The_NERD_Commenter": {
+        "date": "2026-02-04",
+        "new": "nerdcommenter"
+    },
+    "The_NERD_tree": {
+        "date": "2026-02-04",
+        "new": "nerdtree"
+    },
+    "UltiSnips": {
+        "date": "2026-02-04",
+        "new": "ultisnips"
+    },
+    "WebAPI": {
+        "date": "2026-02-04",
+        "new": "webapi-vim"
+    },
+    "Yankring": {
+        "date": "2026-02-04",
+        "new": "YankRing-vim"
+    },
+    "airline": {
+        "date": "2026-02-04",
+        "new": "vim-airline"
+    },
+    "alternative": {
+        "date": "2026-02-04",
+        "new": "a-vim"
+    },
+    "bats": {
+        "date": "2026-02-04",
+        "new": "bats-vim"
+    },
+    "calendar": {
+        "date": "2026-02-04",
+        "new": "calendar-vim"
+    },
+    "caw": {
+        "date": "2026-02-04",
+        "new": "caw-vim"
+    },
+    "chad": {
+        "date": "2026-02-04",
+        "new": "chadtree"
+    },
    "codeium-nvim": {
        "date": "2025-04-09",
        "new": "windsurf-nvim"
@@ -187,6 +283,34 @@
        "date": "2024-10-28",
        "new": "magma-nvim"
    },
+    "maktaba": {
+        "date": "2026-02-04",
+        "new": "vim-maktaba"
+    },
+    "multiple-cursors": {
+        "date": "2026-02-04",
+        "new": "vim-multiple-cursors"
+    },
+    "necoGhc": {
+        "date": "2026-02-04",
+        "new": "neco-ghc"
+    },
+    "neocomplete": {
+        "date": "2026-02-04",
+        "new": "neocomplete-vim"
+    },
+    "neoinclude": {
+        "date": "2026-02-04",
+        "new": "neoinclude-vim"
+    },
+    "neomru": {
+        "date": "2026-02-04",
+        "new": "neomru-vim"
+    },
+    "neosnippet": {
+        "date": "2026-02-04",
+        "new": "neosnippet-vim"
+    },
    "nvim-base16": {
        "date": "2024-02-15",
        "new": "base16-nvim"
@@ -195,6 +319,30 @@
        "date": "2024-11-19",
        "new": "nvim-cmp"
    },
+    "open-browser": {
+        "date": "2026-02-04",
+        "new": "open-browser-vim"
+    },
+    "pathogen": {
+        "date": "2026-02-04",
+        "new": "vim-pathogen"
+    },
+    "polyglot": {
+        "date": "2026-02-04",
+        "new": "vim-polyglot"
+    },
+    "prettyprint": {
+        "date": "2026-02-04",
+        "new": "vim-prettyprint"
+    },
+    "quickrun": {
+        "date": "2026-02-04",
+        "new": "vim-quickrun"
+    },
+    "rainbow_parentheses": {
+        "date": "2026-02-04",
+        "new": "rainbow_parentheses-vim"
+    },
    "render-markdown": {
        "date": "2024-09-16",
        "new": "render-markdown-nvim"
@@ -315,158 +463,6 @@
        "date": "2024-03-16",
        "new": "zarchive-vim-fsharp"
    },
-    "vscode-diff-nvim": {
-        "date": "2026-01-10",
-        "new": "codediff-nvim"
-    },
-    "BufOnly": {
-        "date": "2026-02-04",
-        "new": "BufOnly-vim"
-    },
-    "CSApprox": {
-        "date": "2026-02-04",
-        "new": "csapprox"
-    },
-    "Colour_Sampler_Pack": {
-        "date": "2026-02-04",
-        "new": "Colour-Sampler-Pack"
-    },
-    "Cosco": {
-        "date": "2026-02-04",
-        "new": "cosco-vim"
-    },
-    "Gist": {
-        "date": "2026-02-04",
-        "new": "vim-gist"
-    },
-    "Gundo": {
-        "date": "2026-02-04",
-        "new": "gundo-vim"
-    },
-    "Hoogle": {
-        "date": "2026-02-04",
-        "new": "vim-hoogle"
-    },
-    "Solarized": {
-        "date": "2026-02-04",
-        "new": "vim-colors-solarized"
-    },
-    "Supertab": {
-        "date": "2026-02-04",
-        "new": "supertab"
-    },
-    "Syntastic": {
-        "date": "2026-02-04",
-        "new": "syntastic"
-    },
-    "SyntaxRange": {
-        "date": "2026-02-04",
-        "new": "vim-SyntaxRange"
-    },
-    "Tabular": {
-        "date": "2026-02-04",
-        "new": "tabular"
-    },
-    "Tagbar": {
-        "date": "2026-02-04",
-        "new": "tagbar"
-    },
-    "The_NERD_Commenter": {
-        "date": "2026-02-04",
-        "new": "nerdcommenter"
-    },
-    "The_NERD_tree": {
-        "date": "2026-02-04",
-        "new": "nerdtree"
-    },
-    "UltiSnips": {
-        "date": "2026-02-04",
-        "new": "ultisnips"
-    },
-    "WebAPI": {
-        "date": "2026-02-04",
-        "new": "webapi-vim"
-    },
-    "Yankring": {
-        "date": "2026-02-04",
-        "new": "YankRing-vim"
-    },
-    "airline": {
-        "date": "2026-02-04",
-        "new": "vim-airline"
-    },
-    "alternative": {
-        "date": "2026-02-04",
-        "new": "a-vim"
-    },
-    "bats": {
-        "date": "2026-02-04",
-        "new": "bats-vim"
-    },
-    "calendar": {
-        "date": "2026-02-04",
-        "new": "calendar-vim"
-    },
-    "caw": {
-        "date": "2026-02-04",
-        "new": "caw-vim"
-    },
-    "chad": {
-        "date": "2026-02-04",
-        "new": "chadtree"
-    },
-    "maktaba": {
-        "date": "2026-02-04",
-        "new": "vim-maktaba"
-    },
-    "multiple-cursors": {
-        "date": "2026-02-04",
-        "new": "vim-multiple-cursors"
-    },
-    "necoGhc": {
-        "date": "2026-02-04",
-        "new": "neco-ghc"
-    },
-    "neocomplete": {
-        "date": "2026-02-04",
-        "new": "neocomplete-vim"
-    },
-    "neoinclude": {
-        "date": "2026-02-04",
-        "new": "neoinclude-vim"
-    },
-    "neomru": {
-        "date": "2026-02-04",
-        "new": "neomru-vim"
-    },
-    "neosnippet": {
-        "date": "2026-02-04",
-        "new": "neosnippet-vim"
-    },
-    "open-browser": {
-        "date": "2026-02-04",
-        "new": "open-browser-vim"
-    },
-    "pathogen": {
-        "date": "2026-02-04",
-        "new": "vim-pathogen"
-    },
-    "polyglot": {
-        "date": "2026-02-04",
-        "new": "vim-polyglot"
-    },
-    "prettyprint": {
-        "date": "2026-02-04",
-        "new": "vim-prettyprint"
-    },
-    "quickrun": {
-        "date": "2026-02-04",
-        "new": "vim-quickrun"
-    },
-    "rainbow_parentheses": {
-        "date": "2026-02-04",
-        "new": "rainbow_parentheses-vim"
-    },
    "vimproc": {
        "date": "2026-02-04",
        "new": "vimproc-vim"
@@ -479,6 +475,10 @@
        "date": "2026-02-04",
        "new": "vim-vinegar"
    },
+    "vscode-diff-nvim": {
+        "date": "2026-01-10",
+        "new": "codediff-nvim"
+    },
    "watchdogs": {
        "date": "2026-02-04",
        "new": "vim-watchdogs"
@@ -12,12 +12,12 @@
  pkgs,
 }:
 let
-  version = "0.0.27-unstable-2026-03-04";
+  version = "0.0.27-unstable-2026-03-11";
  src = fetchFromGitHub {
    owner = "yetone";
    repo = "avante.nvim";
-    rev = "865cee5f80db8b7959592f23f174acac36f8be8d";
-    hash = "sha256-5Od/GWzqKpxqprAtmCGSRpJ0E9v6lbVUFK1TzN7G8wo=";
+    rev = "9a7793461549939f1d52b2b309a1aa44680170c8";
+    hash = "sha256-EEkAoufj29P46RIUrRNG0xJL9Wu4X7LZCS1fer4/nZQ=";
  };
  avante-nvim-lib = rustPlatform.buildRustPackage {
    pname = "avante-nvim-lib";
@@ -202,12 +202,12 @@
    };
    blade = buildGrammar {
      language = "blade";
-      version = "0.0.0+rev=42b3c5a";
+      version = "0.0.0+rev=b9436b7";
      src = fetchFromGitHub {
        owner = "EmranMR";
        repo = "tree-sitter-blade";
-        rev = "42b3c5a06bc29fbd2c2cbd52b96113365fbed646";
-        hash = "sha256-zWAu5FZzfYYy4Zw8e1W5zujto/pDqGqGXKfWDYiH3NY=";
+        rev = "b9436b7b936907aff730de0dac1b99d7c632cc86";
+        hash = "sha256-QBsgHV/7zBF2OJfCVB3B27WVCCoMMzc5bTaubBvn2QI=";
      };
      meta.homepage = "https://github.com/EmranMR/tree-sitter-blade";
    };
@@ -257,12 +257,12 @@
    };
    c3 = buildGrammar {
      language = "c3";
-      version = "0.0.0+rev=302fab4";
+      version = "0.0.0+rev=24dc1da";
      src = fetchFromGitHub {
        owner = "c3lang";
        repo = "tree-sitter-c3";
-        rev = "302fab443c2237e3b8fb3e991454db0e442af130";
-        hash = "sha256-HAHjYLvI9Hrhl+u21WYn+elSoXGH4BVuKhRKOX0f0us=";
+        rev = "24dc1da56e412a59c9d3ee4ffaf55dac58cc1dd4";
+        hash = "sha256-w2fhyBKWKTxCiCTCN7KbgT3auaWtnb+tKLkKAf2EWk0=";
      };
      meta.homepage = "https://github.com/c3lang/tree-sitter-c3";
    };
@@ -676,12 +676,12 @@
    };
    elixir = buildGrammar {
      language = "elixir";
-      version = "0.0.0+rev=d24cece";
+      version = "0.0.0+rev=7937d3b";
      src = fetchFromGitHub {
        owner = "elixir-lang";
        repo = "tree-sitter-elixir";
-        rev = "d24cecee673c4c770f797bac6f87ae4b6d7ddec5";
-        hash = "sha256-nSXXMPneL/sTdkpcsxUz73DiXVuNxVHnf8b2LTbAUs8=";
+        rev = "7937d3b4d65fa574163cfa59394515d3c1cf16f4";
+        hash = "sha256-6V1W/MOx03dPvL8adgE16du7eGemPwwdiZ3NL8FNBkg=";
      };
      meta.homepage = "https://github.com/elixir-lang/tree-sitter-elixir";
    };
@@ -742,12 +742,12 @@
    };
    erlang = buildGrammar {
      language = "erlang";
-      version = "0.0.0+rev=f21023b";
+      version = "0.0.0+rev=1d78195";
      src = fetchFromGitHub {
        owner = "WhatsApp";
        repo = "tree-sitter-erlang";
-        rev = "f21023bbd6cd30cadbc793d80ae4d990d9be86fc";
-        hash = "sha256-tDWLmveL+7s9vFVKtmSzGbx4A3X6rkaW1MR/9VOKLCg=";
+        rev = "1d78195c4fbb1fc027eb3e4220427f1eb8bfc89e";
+        hash = "sha256-v/yG3J+f62W3f7jS5/TslepZGHUbFIH8duA+hFVLblU=";
      };
      meta.homepage = "https://github.com/WhatsApp/tree-sitter-erlang";
    };
@@ -863,12 +863,12 @@
    };
    fsharp = buildGrammar {
      language = "fsharp";
-      version = "0.0.0+rev=5141851";
+      version = "0.0.0+rev=2b3c4fa";
      src = fetchFromGitHub {
        owner = "ionide";
        repo = "tree-sitter-fsharp";
-        rev = "5141851c278a99958469eb1736c7afc4ec738e47";
-        hash = "sha256-cJpbO9PjGtJu4RCDsmQ0qjys765/z397y/wbfGxTY9Y=";
+        rev = "2b3c4fae185d5185b5fa1a3d3117cad35f669352";
+        hash = "sha256-tntrmAqY0E+8cdB/CLem54n3WIhsjljFOFeWb+2p0X8=";
      };
      location = "fsharp";
      meta.homepage = "https://github.com/ionide/tree-sitter-fsharp";
@@ -966,12 +966,12 @@
    };
    gitcommit = buildGrammar {
      language = "gitcommit";
-      version = "0.0.0+rev=a716678";
+      version = "0.0.0+rev=33fe854";
      src = fetchFromGitHub {
        owner = "gbprod";
        repo = "tree-sitter-gitcommit";
-        rev = "a716678c0f00645fed1e6f1d0eb221481dbd6f6d";
-        hash = "sha256-KYfcs99p03b0RiPYnZeKJf677fmVf658FLZcFk2v2Ws=";
+        rev = "33fe8548abcc6e374feaac5724b5a2364bf23090";
+        hash = "sha256-ttULjFU9slnPcT4bCjOozGkaKAOxMW5Oa2/caVNeEsA=";
      };
      meta.homepage = "https://github.com/gbprod/tree-sitter-gitcommit";
    };
@@ -1181,12 +1181,12 @@
    };
    groovy = buildGrammar {
      language = "groovy";
-      version = "0.0.0+rev=a88865a";
+      version = "0.0.0+rev=781d9cd";
      src = fetchFromGitHub {
        owner = "murtaza64";
        repo = "tree-sitter-groovy";
-        rev = "a88865a3301a538e2060af5b401f4f431f71406e";
-        hash = "sha256-v2z9BNIKIsJKf1JSmh6EQ+HxotI5wqTpVUIai+mLybc=";
+        rev = "781d9cd1b482a70a6b27091e5c9e14bbcab3b768";
+        hash = "sha256-KvgVjFLzT1jJ9PieVslJLKXrijYzI/ttny+536famw0=";
      };
      meta.homepage = "https://github.com/murtaza64/tree-sitter-groovy";
    };
@@ -1397,23 +1397,23 @@
    };
    hyprlang = buildGrammar {
      language = "hyprlang";
-      version = "0.0.0+rev=22723f2";
+      version = "0.0.0+rev=cecd6b7";
      src = fetchFromGitHub {
        owner = "tree-sitter-grammars";
        repo = "tree-sitter-hyprlang";
-        rev = "22723f25f3faf329863d952c9601b492afd971c9";
-        hash = "sha256-KU+vrokH8/E5Wg3BLuG3IZyw/9rJr0TJQxXB2IDULsE=";
+        rev = "cecd6b748107d9da1f7b4ca03ef95f1f71d93b8f";
+        hash = "sha256-0zvb1XwqKuf8E5wLHOXBf/WwqNZeRhiyOh8bH+dxP4s=";
      };
      meta.homepage = "https://github.com/tree-sitter-grammars/tree-sitter-hyprlang";
    };
    idl = buildGrammar {
      language = "idl";
-      version = "0.0.0+rev=e6b8b4d";
+      version = "0.0.0+rev=e07d329";
      src = fetchFromGitHub {
        owner = "cathaysia";
        repo = "tree-sitter-idl";
-        rev = "e6b8b4d2ba285caacf6f9e931f1f637f5bc02b03";
-        hash = "sha256-p1dDO1FryUNWwmIYRZBD19dIbEIFxihifnwJrVFuhpk=";
+        rev = "e07d32972b41cc4c02cfd49f9df2abaa3ae54303";
+        hash = "sha256-W7f+laRqXmbYk0qExCXodDeOklLJNgWcE1H0MiFU8Oc=";
      };
      meta.homepage = "https://github.com/cathaysia/tree-sitter-idl";
    };
@@ -1488,12 +1488,12 @@
    };
    javadoc = buildGrammar {
      language = "javadoc";
-      version = "0.0.0+rev=d1a2efc";
+      version = "0.0.0+rev=42c9bc3";
      src = fetchFromGitHub {
        owner = "rmuir";
        repo = "tree-sitter-javadoc";
-        rev = "d1a2efc871825ff29a1d241cdcac5713c99cfd54";
-        hash = "sha256-E/84o/2FO3TAbQhk0CMvdEPG9i5W1BwvQGUhg60lBv4=";
+        rev = "42c9bc340c90ec15ed96eb4314269e8249376be9";
+        hash = "sha256-ww8U9Ro8lbwojxzWgW4C4ggQW9B0NaYIctNFmXN5r5Q=";
      };
      meta.homepage = "https://github.com/rmuir/tree-sitter-javadoc";
    };
@@ -1669,12 +1669,12 @@
    };
    kotlin = buildGrammar {
      language = "kotlin";
-      version = "0.0.0+rev=cbed96a";
+      version = "0.0.0+rev=a1760ba";
      src = fetchFromGitHub {
        owner = "fwcd";
        repo = "tree-sitter-kotlin";
-        rev = "cbed96ab13dbc082eeeb2e8333c342a62829c29d";
-        hash = "sha256-BEjXsVUfEJJVTaW9ZpTAuAUOtWxRfToywfDH4TssaeM=";
+        rev = "a1760ba7178fe76515e7cfe7577deae2335fa57d";
+        hash = "sha256-WYFTrgTB/WvTeRpL3hfU3oLYLMTXpXcX3DfZcp6FElo=";
      };
      meta.homepage = "https://github.com/fwcd/tree-sitter-kotlin";
    };
@@ -1725,12 +1725,12 @@
    };
    ledger = buildGrammar {
      language = "ledger";
-      version = "0.0.0+rev=96c92d4";
+      version = "0.0.0+rev=2edce03";
      src = fetchFromGitHub {
        owner = "cbarrete";
        repo = "tree-sitter-ledger";
-        rev = "96c92d4908a836bf8f661166721c98439f8afb80";
-        hash = "sha256-L2xUTItnQ/bcieasItrozjAEJLm/fsUUyMex2juCnjw=";
+        rev = "2edce0372079896c810c7b218587f2b3fbb7a086";
+        hash = "sha256-1uu+Kcu1M4Z+/7LXZaoxQzo67vJJDzSDo5c8aloqcBA=";
      };
      meta.homepage = "https://github.com/cbarrete/tree-sitter-ledger";
    };
@@ -1769,12 +1769,12 @@
    };
    liquidsoap = buildGrammar {
      language = "liquidsoap";
-      version = "0.0.0+rev=abd0ecc";
+      version = "0.0.0+rev=0169d92";
      src = fetchFromGitHub {
        owner = "savonet";
        repo = "tree-sitter-liquidsoap";
-        rev = "abd0eccddd680102064e0eca82ef954bd8d1a301";
-        hash = "sha256-1PSVm2FD17TxWwZwS2m0TK6ACS6NzVQUQChu8bg01Lc=";
+        rev = "0169d92b0a93e9f32289533ef23abdafca579e56";
+        hash = "sha256-eFdZxTIHijT6IuOjyIlElfr2HBU+BdOKJsIA1COmW9g=";
      };
      meta.homepage = "https://github.com/savonet/tree-sitter-liquidsoap";
    };
@@ -1887,12 +1887,12 @@
    };
    matlab = buildGrammar {
      language = "matlab";
-      version = "0.0.0+rev=574dde5";
+      version = "0.0.0+rev=c2390a5";
      src = fetchFromGitHub {
        owner = "acristoffers";
        repo = "tree-sitter-matlab";
-        rev = "574dde565caddf8cf44eec7df3cb89eb96053ed7";
-        hash = "sha256-gDecX1QrM6VhR/bIcHMtm7qBcmKq9KPu1OPbo0zCO1A=";
+        rev = "c2390a59016f74e7d5f75ef09510768b4f30217e";
+        hash = "sha256-WgyWvItbysSqeD/LdBr233NYlKF1HaxIDtHIr6BQOjw=";
      };
      meta.homepage = "https://github.com/acristoffers/tree-sitter-matlab";
    };
@@ -2045,12 +2045,12 @@
    };
    nu = buildGrammar {
      language = "nu";
-      version = "0.0.0+rev=bb3f533";
+      version = "0.0.0+rev=f4793e3";
      src = fetchFromGitHub {
        owner = "nushell";
        repo = "tree-sitter-nu";
-        rev = "bb3f533e5792260291945e1f329e1f0a779def6e";
-        hash = "sha256-0ebKHKexu1TROwfxokwwpPhCO+Nn7HmmX40jRu19xNo=";
+        rev = "f4793e3809bb84e78dee260b47085d8203a58d88";
+        hash = "sha256-0tQOALi8079pqy12mGG3eqsqv2FsqVvRnetp4xXKH9s=";
      };
      meta.homepage = "https://github.com/nushell/tree-sitter-nu";
    };
@@ -2224,12 +2224,12 @@
    };
    pkl = buildGrammar {
      language = "pkl";
-      version = "0.0.0+rev=a02fc36";
+      version = "0.0.0+rev=7c8a0d1";
      src = fetchFromGitHub {
        owner = "apple";
        repo = "tree-sitter-pkl";
-        rev = "a02fc36f6001a22e7fdf35eaabbadb7b39c74ba5";
-        hash = "sha256-t+N4oxqZpzm3qHkbjUVyGzeVS56u1oFVx0MtgTBe0bk=";
+        rev = "7c8a0d15d83c1a436e91277d5023340f1ae5726b";
+        hash = "sha256-C4ArUeydTyd1eyC2auVAW7k0mqHM6tIxkjjjvPHb3eA=";
      };
      meta.homepage = "https://github.com/apple/tree-sitter-pkl";
    };
@@ -2279,12 +2279,12 @@
    };
    powershell = buildGrammar {
      language = "powershell";
-      version = "0.0.0+rev=da65ba3";
+      version = "0.0.0+rev=b881dfb";
      src = fetchFromGitHub {
        owner = "airbus-cert";
        repo = "tree-sitter-powershell";
-        rev = "da65ba3acc93777255781b447f5e7448245df4bf";
-        hash = "sha256-ETuZcVSvHF5ILN6+xjWlQM5IiT/+dtxdSckrHJSJSWk=";
+        rev = "b881dfbe71a770ea37d434c80d3523091b81f6db";
+        hash = "sha256-UiMEB5yosBTP1amx5F0KAwlnnmsN5iGWng9gC4NjuoA=";
      };
      meta.homepage = "https://github.com/airbus-cert/tree-sitter-powershell";
    };
@@ -2361,12 +2361,12 @@
    };
    proto = buildGrammar {
      language = "proto";
-      version = "0.0.0+rev=f0e7676";
+      version = "0.0.0+rev=eacb7f1";
      src = fetchFromGitHub {
        owner = "coder3101";
        repo = "tree-sitter-proto";
-        rev = "f0e767689c6e9efe7ff2e4b8680db71411915588";
-        hash = "sha256-JE8SRs39GWjEH9dnIbugv7UJXDh/aI+dwLfSqJiwbD8=";
+        rev = "eacb7f162e35a18a0dd8ce734f7e7baf2a8398ca";
+        hash = "sha256-er7YHlLWVkp56LLcMS4Sdo5zB4JokBdv14mCRl2KzhI=";
      };
      meta.homepage = "https://github.com/coder3101/tree-sitter-proto";
    };
@@ -2651,12 +2651,12 @@
    };
    robot = buildGrammar {
      language = "robot";
-      version = "0.0.0+rev=v1.2.0";
+      version = "0.0.0+rev=v1.3.0";
      src = fetchFromGitHub {
        owner = "Hubro";
        repo = "tree-sitter-robot";
-        tag = "v1.2.0";
-        hash = "sha256-YvhRF2G8qNCkCp/XMuwV8qDGBYq+3d/XF0nCJdEGoXM=";
+        tag = "v1.3.0";
+        hash = "sha256-GJTZMIOrEXsfVzVigF2XKKDxchkOGv0zEya5o9k5ZnY=";
      };
      meta.homepage = "https://github.com/Hubro/tree-sitter-robot";
    };
@@ -2706,12 +2706,12 @@
    };
    ruby = buildGrammar {
      language = "ruby";
-      version = "0.0.0+rev=ab6dca7";
+      version = "0.0.0+rev=ad907a6";
      src = fetchFromGitHub {
        owner = "tree-sitter";
        repo = "tree-sitter-ruby";
-        rev = "ab6dca77a8184abc94af6e3e82538741b5078d63";
-        hash = "sha256-qAO2qRvaYlyCdSuiYBoQG/jAWiZEA5p67BTPdoK0dnU=";
+        rev = "ad907a69da0c8a4f7a943a7fe012712208da6dee";
+        hash = "sha256-JcAgEKmn1cvuBmicnzwkQiVG0GNJCNp5C2pVSxz699g=";
      };
      meta.homepage = "https://github.com/tree-sitter/tree-sitter-ruby";
    };
@@ -2739,12 +2739,12 @@
    };
    scala = buildGrammar {
      language = "scala";
-      version = "0.0.0+rev=97aead1";
+      version = "0.0.0+rev=14c5cfd";
      src = fetchFromGitHub {
        owner = "tree-sitter";
        repo = "tree-sitter-scala";
-        rev = "97aead18d97708190a51d4f551ea9b05b60641c9";
-        hash = "sha256-INJKij5XzeIkmdemTbrkucdUo9PJOrHKf4rcf6s9OSw=";
+        rev = "14c5cfd2b8e0f057ba0f4f72ee4812b0ae6cdce3";
+        hash = "sha256-xDp1+i0QLnY18EtiwurW1B4bbeS1qZKNJRxS6Qeb3pw=";
      };
      meta.homepage = "https://github.com/tree-sitter/tree-sitter-scala";
    };
@@ -2761,12 +2761,12 @@
    };
    scheme = buildGrammar {
      language = "scheme";
-      version = "0.0.0+rev=b5c7011";
+      version = "0.0.0+rev=8004e59";
      src = fetchFromGitHub {
        owner = "6cdh";
        repo = "tree-sitter-scheme";
-        rev = "b5c701148501fa056302827442b5b4956f1edc03";
-        hash = "sha256-SLuK8S03pKVVhxJTkE3ZJvNaNnmXD323YwE7ah2VxyQ=";
+        rev = "8004e59a1d17ca670aa34d09021c8499fdefaf61";
+        hash = "sha256-Y0aac+N3qD46zc+QnbCeUYKz4TUePZYqhH/NQI63OsQ=";
      };
      meta.homepage = "https://github.com/6cdh/tree-sitter-scheme";
    };
@@ -3009,12 +3009,12 @@
    };
    supercollider = buildGrammar {
      language = "supercollider";
-      version = "0.0.0+rev=76b3cab";
+      version = "0.0.0+rev=e2d1480";
      src = fetchFromGitHub {
        owner = "madskjeldgaard";
        repo = "tree-sitter-supercollider";
-        rev = "76b3cab1773f08bb7d3a185420b0a44c6da8c294";
-        hash = "sha256-drn1S4gNm6fOSUTCa/CrAqCWoUn16y1hpaZBCPpyaNE=";
+        rev = "e2d1480de0a62cd53f81645cb39bc1f3fa2dce5a";
+        hash = "sha256-7vmL+o/WdvDntwOHg+ETdsRn77BegSqG0s84yLTNRx8=";
      };
      meta.homepage = "https://github.com/madskjeldgaard/tree-sitter-supercollider";
    };
@@ -3110,12 +3110,12 @@
    };
    t32 = buildGrammar {
      language = "t32";
-      version = "0.0.0+rev=c4c5fa3";
+      version = "0.0.0+rev=3bce397";
      src = fetchFromGitHub {
        owner = "xasc";
        repo = "tree-sitter-t32";
-        rev = "c4c5fa31666c66036ad3ace8179a408b8478395f";
-        hash = "sha256-BUao6oveuWWPn2jDUWAjzoi9YMsDEA5B+hKJHvCUtD0=";
+        rev = "3bce3977303c3f88bfa9fcdfcfd1a4f8f6ffa0b0";
+        hash = "sha256-ysdKgzF5VFV0BeeXlV8gZ5pW7WzYJtYnyBE+MaxG3Jo=";
      };
      meta.homepage = "https://github.com/xasc/tree-sitter-t32";
    };
@@ -3430,12 +3430,12 @@
    };
    v = buildGrammar {
      language = "v";
-      version = "0.0.0+rev=9cf6a37";
+      version = "0.0.0+rev=095865d";
      src = fetchFromGitHub {
        owner = "vlang";
        repo = "v-analyzer";
-        rev = "9cf6a37689f06b17d170dec644ace81eb8eab280";
-        hash = "sha256-rHqWpUgWgfHXGJzTfXcftbol7IU0RPVaFSsne+qcUa4=";
+        rev = "095865df4b9ddd21e376d635586c663d5a736f71";
+        hash = "sha256-ypdtFzQwd5t7/iFthX4hb4zNeFQZKaatF8JA4XutOt4=";
      };
      location = "tree_sitter_v";
      meta.homepage = "https://github.com/vlang/v-analyzer";
@@ -3464,12 +3464,12 @@
    };
    vhdl = buildGrammar {
      language = "vhdl";
-      version = "0.0.0+rev=7e0d014";
+      version = "0.0.0+rev=58114f3";
      src = fetchFromGitHub {
        owner = "jpt13653903";
        repo = "tree-sitter-vhdl";
-        rev = "7e0d014691c1b8c25e8fe8f30cc3ac4649df3f57";
-        hash = "sha256-r3fMnexbbIniZA75ZIJ+ay39/JCCb3b3J5F6bYMK4YY=";
+        rev = "58114f35d0865e348692256bfc5ae661fc1efb0c";
+        hash = "sha256-VnnBDxxirwGtPWI0YqRsC5CBEkfjP+DC+oUg97vkdos=";
      };
      meta.homepage = "https://github.com/jpt13653903/tree-sitter-vhdl";
    };
@@ -3563,12 +3563,12 @@
    };
    wit = buildGrammar {
      language = "wit";
-      version = "0.0.0+rev=v1.2.0";
+      version = "0.0.0+rev=v1.3.0";
      src = fetchFromGitHub {
        owner = "bytecodealliance";
        repo = "tree-sitter-wit";
-        tag = "v1.2.0";
-        hash = "sha256-scye60ETUak1mXJXC+UY5sqbuqAcjxCsm4+AVJHhGws=";
+        tag = "v1.3.0";
+        hash = "sha256-FG73R38Bw60+aT5YB/xpENCnQwoGMVjXRLjP1GdJEn4=";
      };
      meta.homepage = "https://github.com/bytecodealliance/tree-sitter-wit";
    };
@@ -3701,12 +3701,12 @@
    };
    zsh = buildGrammar {
      language = "zsh";
-      version = "0.0.0+rev=v0.56.0";
+      version = "0.0.0+rev=v0.57.0";
      src = fetchFromGitHub {
        owner = "georgeharker";
        repo = "tree-sitter-zsh";
-        tag = "v0.56.0";
-        hash = "sha256-fU2cU0fuIxlJpvep7y+aSIPSMJE5lEWi1M+bb9/fOfk=";
+        tag = "v0.57.0";
+        hash = "sha256-LqUB72t6ZFejIrWFfOcQTSjOZQtnXprIhnoomrkoDTo=";
      };
      meta.homepage = "https://github.com/georgeharker/tree-sitter-zsh";
    };
@@ -1127,6 +1127,12 @@ assertNoAdditions {
    dependencies = [ self.image-nvim ];
  };

+  diffs-nvim = super.diffs-nvim.overrideAttrs {
+    nvimSkipModules = [
+      "minimal_init"
+    ];
+  };
+
  diffview-nvim = super.diffview-nvim.overrideAttrs {
    dependencies = [ self.plenary-nvim ];

@@ -57,7 +57,7 @@ https://github.com/derekelkins/agda-vim/,,
 https://github.com/emmanueltouzery/agitator.nvim/,HEAD,
 https://github.com/aduros/ai.vim/,HEAD,
 https://github.com/joshuavial/aider.nvim/,HEAD,
-https://github.com/p00f/alabaster.nvim/,HEAD,
+https://github.com/dchinmay2/alabaster.nvim/,HEAD,
 https://github.com/slashmili/alchemist.vim/,,
 https://github.com/dense-analysis/ale/,,
 https://github.com/vim-scripts/align/,,
@@ -462,7 +462,7 @@ https://github.com/gregsexton/gitv/,,
 https://github.com/DNLHC/glance.nvim/,HEAD,
 https://github.com/ellisonleao/glow.nvim/,,
 https://github.com/ray-x/go.nvim/,HEAD,
-https://github.com/p00f/godbolt.nvim/,HEAD,
+https://github.com/dchinmay2/godbolt.nvim/,HEAD,
 https://github.com/roman/golden-ratio/,,
 https://github.com/buoto/gotests-vim/,,
 https://github.com/rmagatti/goto-preview/,,
@@ -262,8 +262,8 @@ let
        mktplcRef = {
          name = "ng-template";
          publisher = "Angular";
-          version = "20.3.0";
-          hash = "sha256-o3e2qVKw/sfnFHbHHdRlB9UjEx1KLD1KVoaAsnlYjmY=";
+          version = "21.2.2";
+          hash = "sha256-rpll3EsTGEuynrw7EsP3GeltG/vtYqgO8mvTCVyU1ao=";
        };
        meta = {
          changelog = "https://marketplace.visualstudio.com/items/Angular.ng-template/changelog";
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
  core = "gambatte";
-  version = "0-unstable-2026-01-16";
+  version = "0-unstable-2026-03-13";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "gambatte-libretro";
-    rev = "9fe223d9c4b615c55840170c6e85e6e9fa4bd1d2";
-    hash = "sha256-BBFT8+TLf5qbwo36BudPjeMRPLdSj2+0m4RnfeFrlOc=";
+    rev = "d3c39fa18476ddce05027db3d29abba813fa74e2";
+    hash = "sha256-FkvO03x6oRqdeaot8vq5C15VjQXJ7tUoJtal7/z09rU=";
  };

  meta = {
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
  core = "genesis-plus-gx";
-  version = "0-unstable-2026-01-23";
+  version = "0-unstable-2026-03-06";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "Genesis-Plus-GX";
-    rev = "c858c9c5eebef46ea1a69427091853f9f1edbd23";
-    hash = "sha256-3Rzoy2G517Pc3mAQY+b2dvAMDxUoUmyR8FCyg4BR5bc=";
+    rev = "d446078a385a5acae701f4b3b6b3fd58476d73d3";
+    hash = "sha256-jw8vj3fTHwBH6h+OelVJHNqy86DKFlohhIeQ9TLkGjc=";
  };

  meta = {
@@ -14,13 +14,13 @@
 }:
 mkLibretroCore {
  core = "play";
-  version = "0-unstable-2026-03-02";
+  version = "0-unstable-2026-03-13";

  src = fetchFromGitHub {
    owner = "jpd002";
    repo = "Play-";
-    rev = "7586f3a064b20f0b23325e460ab2122fb56aac80";
-    hash = "sha256-MLpMkUHSIo+X7OWxjwGgs/xHsOBodmfwcF6PjAMzbRo=";
+    rev = "560781c201f8877d39a084d7e6ab583ffa25aa09";
+    hash = "sha256-Piwe54A1PNPfwy86bNMNhLsEYwwVqygysAvK6Iqt0mo=";
    fetchSubmodules = true;
  };

@@ -1,10 +1,10 @@
 {
  "chromium": {
-    "version": "146.0.7680.75",
+    "version": "146.0.7680.80",
    "chromedriver": {
-      "version": "146.0.7680.76",
-      "hash_darwin": "sha256-zCICFkv0dXZYIIp8xnqEbxBR4Q9+GlCEY6yoJHsqcVg=",
-      "hash_darwin_aarch64": "sha256-UzawlFfX/lIATPL8j6XMkurE1SzhNwyB/jn4v6tWY/g="
+      "version": "146.0.7680.80",
+      "hash_darwin": "sha256-sjCEvFWV07GNhXJ9CfGVtZ6nCeqsqtNtY4sPj/gq13w=",
+      "hash_darwin_aarch64": "sha256-kTxZJiF7mJlVbkDDFP4ZUB2htBn45se1Wuz28RP8pr8="
    },
    "deps": {
      "depot_tools": {
@@ -21,8 +21,8 @@
    "DEPS": {
      "src": {
        "url": "https://chromium.googlesource.com/chromium/src.git",
-        "rev": "d865c3fe495882da3a7c6575337a02867c4536b1",
-        "hash": "sha256-/hjpcI4GTw0bGqZ5/9gzM4Pc6/5fhk5dmdtw5EfidiY=",
+        "rev": "f08938029c887ea624da7a1717059788ed95034d",
+        "hash": "sha256-PCQeTdc6Fl74TLyvxjli4scIUIm0GgZ3e9wbC18Tclw=",
        "recompress": true
      },
      "src/third_party/clang-format/script": {
@@ -652,8 +652,8 @@
      },
      "src/third_party/skia": {
        "url": "https://skia.googlesource.com/skia.git",
-        "rev": "50841da4a7b7064b3cea8a851e60ef921c87a103",
-        "hash": "sha256-RoLgaE5mj9UqePhnfH+BOTit04TyiAvgF7/2PLuBG4Y="
+        "rev": "248acd90d9a35ac46b2ec30201ae50f301b8a173",
+        "hash": "sha256-zOL5j9X72ZvYmS8MzQ+pqSkT8AWBz2IwmaH7I3LN1IE="
      },
      "src/third_party/smhasher/src": {
        "url": "https://chromium.googlesource.com/external/smhasher.git",
@@ -823,7 +823,7 @@
    }
  },
  "ungoogled-chromium": {
-    "version": "146.0.7680.75",
+    "version": "146.0.7680.80",
    "deps": {
      "depot_tools": {
        "rev": "42786f6e46c25c30dd58f69283ab6fcd0c959f58",
@@ -835,16 +835,16 @@
        "hash": "sha256-wFCuu4GR0N7QZCwT8UAhqH5moicYQjZ4ZLI58AM4pJ0="
      },
      "ungoogled-patches": {
-        "rev": "146.0.7680.75-1",
-        "hash": "sha256-wZxGOs7cwM+ORAq4waOOpa771AYCNZvtm2ZCeh+3Wy8="
+        "rev": "146.0.7680.80-1",
+        "hash": "sha256-/vM1Rw5YgGxTu+/y4bK15bzW6deeREPL/m+1kx+O5Do="
      },
      "npmHash": "sha256-ByB1Ea5tduIJZXyydeBWsoS8OPABOgwHe+dNXRssdvc="
    },
    "DEPS": {
      "src": {
        "url": "https://chromium.googlesource.com/chromium/src.git",
-        "rev": "d865c3fe495882da3a7c6575337a02867c4536b1",
-        "hash": "sha256-/hjpcI4GTw0bGqZ5/9gzM4Pc6/5fhk5dmdtw5EfidiY=",
+        "rev": "f08938029c887ea624da7a1717059788ed95034d",
+        "hash": "sha256-PCQeTdc6Fl74TLyvxjli4scIUIm0GgZ3e9wbC18Tclw=",
        "recompress": true
      },
      "src/third_party/clang-format/script": {
@@ -1474,8 +1474,8 @@
      },
      "src/third_party/skia": {
        "url": "https://skia.googlesource.com/skia.git",
-        "rev": "50841da4a7b7064b3cea8a851e60ef921c87a103",
-        "hash": "sha256-RoLgaE5mj9UqePhnfH+BOTit04TyiAvgF7/2PLuBG4Y="
+        "rev": "248acd90d9a35ac46b2ec30201ae50f301b8a173",
+        "hash": "sha256-zOL5j9X72ZvYmS8MzQ+pqSkT8AWBz2IwmaH7I3LN1IE="
      },
      "src/third_party/smhasher/src": {
        "url": "https://chromium.googlesource.com/external/smhasher.git",
@@ -1400,13 +1400,13 @@
    "vendorHash": null
  },
  "ubiquiti-community_unifi": {
-    "hash": "sha256-2IYiy/DLCj+bcEkU+nwLg7Wt2j7bh29cScPcSTGsU5A=",
+    "hash": "sha256-Y3MgMRhWmXYp0aYLIkV2Ug5bZb8LsPYr3oJkXhPtQoo=",
    "homepage": "https://registry.terraform.io/providers/ubiquiti-community/unifi",
    "owner": "ubiquiti-community",
    "repo": "terraform-provider-unifi",
-    "rev": "v0.41.17",
+    "rev": "v0.41.25",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-rixXMK+M6/8g4cw/f+zNzY9x3GkA3nqmkQTPrONoueY="
+    "vendorHash": "sha256-OVdhM8Zqnm1J8KducnkNkroBoSLER3fHfZBjyp7kBu8="
  },
  "ucloud_ucloud": {
    "hash": "sha256-UOVnfWYhntmRHMApQgemjUBsyUIz0bexsc1gwDGGee4=",
@@ -65,8 +65,8 @@ rec {
  thunderbird = thunderbird-latest;

  thunderbird-latest = common {
-    version = "148.0";
-    sha512 = "ec5e586206ef217f37eb6985356994e7e7c9db6090f57d5b4c43a3a5dc0e1f5a56c0e7080d86fb895446845f9c9b948284f7417afebcf6e6120eca0e1ed238f3";
+    version = "148.0.1";
+    sha512 = "4f6e721b0858bece740f04744d10d8bb0b0673d2ebfe5624d3797e28e394510a8518dc31fc6a121ba7ed8a5a44953efefe3a74071e9f967c22be17cee45b3faf";

    updateScript = callPackage ./update.nix {
      attrPath = "thunderbirdPackages.thunderbird-latest";
@@ -15,13 +15,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "abracadabra";
-  version = "3.3.2";
+  version = "4.0.0";

  src = fetchFromGitHub {
    owner = "KejPi";
    repo = "AbracaDABra";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-QR3wc+eltIpmdNpyzQqJd4Zo40JVlTzRBNSr11tE0X8=";
+    hash = "sha256-v8s3s2qWkE10zIsFL6aO9mESR4t6Yf941QETh2m+cHI=";
  };

  nativeBuildInputs = [
@@ -15,11 +15,11 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "angular-language-server";
-  version = "21.2.0";
+  version = "21.2.2";
  src = fetchurl {
    name = "angular-language-server-${finalAttrs.version}.zip";
    url = "https://github.com/angular/angular/releases/download/vsix-${finalAttrs.version}/ng-template-${finalAttrs.version}.vsix";
-    hash = "sha256-q9ywNxdKLz431nCEzPs2sB8IDPveoUWAthmDKkBAkHI=";
+    hash = "sha256-rpll3EsTGEuynrw7EsP3GeltG/vtYqgO8mvTCVyU1ao=";
  };

  nativeBuildInputs = [
@@ -7,11 +7,11 @@

 let
  pname = "apidog";
-  version = "2.8.11";
+  version = "2.8.12";

  src = fetchurl {
    url = "https://file-assets.apidog.com/download/${version}/Apidog-${version}.AppImage";
-    hash = "sha256-+nilQYbkfS8z3J4CbD9jC1nm/zY3fX+bl8eNsaLOHVA=";
+    hash = "sha256-bCh3GW+K++3eI3SdcD5t7Vk1jYPl4KFWr1dwqXL7fOQ=";
  };

  appimageContents = appimageTools.extract {
@@ -153,6 +153,10 @@ stdenv.mkDerivation (finalAttrs: {
              "TestMinioServer.Connect"
              "TestS3FS.*"
              "TestS3FSGeneric.*"
+            ]
+            ++ lib.optionals (stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isx86_64) [
+              # https://github.com/apache/arrow/issues/41505
+              "TestAzuriteGeneric.Empty"
            ];
        in
        "-${lib.concatStringsSep ":" filteredTests}";
@@ -306,10 +310,6 @@ stdenv.mkDerivation (finalAttrs: {
        # Failing with "run-test.sh: line 88: 63682 Abort trap: 6"
        "arrow-flight-internals-test"
        "arrow-flight-sql-test"
-      ]
-      ++ lib.optionals (stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isx86_64) [
-        # https://github.com/apache/arrow/issues/41505
-        "TestAzuriteGeneric.Empty"
      ];
    in
    ''
@@ -40,13 +40,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "art";
-  version = "1.26.2";
+  version = "1.26.3";

  src = fetchFromGitHub {
    owner = "artpixls";
    repo = "ART";
    tag = finalAttrs.version;
-    hash = "sha256-zjGb5XiXry16xHlrlDw1b3ROYgHuJe3srRFWY/AIBRE=";
+    hash = "sha256-cBhM8vYQoEGntM4GjFaNNC5fuBQxcX343qEcrdMxuSE=";
  };

  # Fix the build with CMake 4.
@@ -7,13 +7,13 @@

 buildGoModule (finalAttrs: {
  pname = "atproto-goat";
-  version = "0.2.2";
+  version = "0.2.3";

  src = fetchFromGitHub {
    owner = "bluesky-social";
    repo = "goat";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-jSwlKKMrUsb0stcPvC9i7dgH4DrlnUTwp+HYTwendB0=";
+    hash = "sha256-mI7GC0ElE+FxT7v29V/a+UZBI1d6os+HpEO5WYWxm6A=";
  };

  postPatch = ''
@@ -22,7 +22,7 @@ buildGoModule (finalAttrs: {
      --replace-fail '"github.com/earthboundkid/versioninfo/v2"' ""
  '';

-  vendorHash = "sha256-rqnCFBSmHaZWWc1MrK8udQLkK5MP4Yv2TTlozQqW0fc=";
+  vendorHash = "sha256-QVnpISwYri8aL4umZWi2LJ0X13CXXK7JygaBh1Sq5PA=";

  passthru.updateScript = nix-update-script { };

@@ -11,16 +11,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "biome";
-  version = "2.4.6";
+  version = "2.4.7";

  src = fetchFromGitHub {
    owner = "biomejs";
    repo = "biome";
    rev = "@biomejs/biome@${finalAttrs.version}";
-    hash = "sha256-xwnNTefv3E6Y27G8cSRNs9adXwzP2w3XK6xX1QEs60g=";
+    hash = "sha256-Ca1a8Q6YJpGUMZ3cbQkIndmeE10V7myB/3EQ4r3fa1o=";
  };

-  cargoHash = "sha256-Uf+W+f17DMKOYR/KYiyEd+RU/bPMq+itbpHfCAq+7R4=";
+  cargoHash = "sha256-z2JtrZkvlvfQGhhY3T3PIiXUq53bSb7Z8rgvGZPzPag=";

  nativeBuildInputs = [ pkg-config ];

@@ -8,13 +8,13 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "bqn";
-  version = "0-unstable-2024-05-13";
+  version = "0-unstable-2026-03-01";

  src = fetchFromGitHub {
    owner = "mlochbaum";
    repo = "BQN";
-    rev = "c971a177421d532a13c4b7515535552df19681e1";
-    hash = "sha256-Fru1IIb4IxBQxrEEBoRYStxBqYJJqd+Q+Hwyk++QA68=";
+    rev = "df1d848328194249e68635f8b8c04641d9fa6bdc";
+    hash = "sha256-2S675ru67bcSSXGLEWfPkyW+U+cHzKs/HbM8ZSWMcEs=";
  };

  nativeBuildInputs = [ makeWrapper ];
@@ -10,16 +10,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "c2patool";
-  version = "0.26.33";
+  version = "0.26.37";

  src = fetchFromGitHub {
    owner = "contentauth";
    repo = "c2pa-rs";
    tag = "c2patool-v${finalAttrs.version}";
-    hash = "sha256-e016wNfAVhDFwCYvBb/I+nci1FVSG/knsPZFhsR4074=";
+    hash = "sha256-bxiYY55r1Vg8ljoGlUBi5WgAU8GtcEsX030uzfMsals=";
  };

-  cargoHash = "sha256-KCL3GhNb1ilKXXjj6DSnLTbSNfevAYDUuJt01y4bDVE=";
+  cargoHash = "sha256-AJr4auizFqumMaQzFd5G1keSIRJ3fWX7ftGHDTkPmX0=";

  # use the non-vendored openssl
  env.OPENSSL_NO_VENDOR = 1;
@@ -9,16 +9,16 @@

 buildGoModule (finalAttrs: {
  pname = "carapace";
-  version = "1.6.0";
+  version = "1.6.3";

  src = fetchFromGitHub {
    owner = "carapace-sh";
    repo = "carapace-bin";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-btExAFj3nnq5vv3LJgUA7pdmQhd6ANUexC/AQcIg0Ms=";
+    hash = "sha256-k6fWtwDTNc2qcr9ryL7wMVy744fiP8NrLqm4crVr+EI=";
  };

-  vendorHash = "sha256-7Gmt4ZHmYK5IukQYuY0felhW+ul23wSDX9PJyI6rDWQ=";
+  vendorHash = "sha256-5AqoM16M5pPfRYxqa72LrHJRRatK2qnZK3pQIoFXG9g=";

  proxyVendor = true;

@@ -22,7 +22,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "ccache";
-  version = "4.12.3";
+  version = "4.13.1";

  src = fetchFromGitHub {
    owner = "ccache";
@@ -41,7 +41,7 @@ stdenv.mkDerivation (finalAttrs: {
        exit 1
      fi
    '';
-    hash = "sha256-oX7qG3jjrLm4gKZd8w7Bc7uE5U5sIa35//PDRJ/XHcM=";
+    hash = "sha256-8Qw5nkY86wGJ7B2hrNk9jIoz18nJ2FK+EbPH5fS5aEc=";
  };

  outputs = [
@@ -62,6 +62,7 @@ stdenv.mkDerivation (finalAttrs: {
  ];

  postPatch = ''
+    patchShebangs --build doc/scripts
    patchShebangs --build test/fake-compilers
  '';

@@ -98,8 +99,9 @@ stdenv.mkDerivation (finalAttrs: {
  ];

  disabledTests = [
-    "test.trim_dir" # flaky on hydra (possibly filesystem-specific?)
+    "test.direct" # https://github.com/ccache/ccache/issues/1699
    "test.fileclone" # flaky on hydra, also seems to fail on zfs
+    "test.trim_dir" # flaky on hydra (possibly filesystem-specific?)
  ]
  ++ lib.optionals stdenv.hostPlatform.isDarwin [
    "test.basedir"
@@ -6,14 +6,14 @@

 python3.pkgs.buildPythonApplication (finalAttrs: {
  pname = "cfripper";
-  version = "1.19.1";
+  version = "1.20.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Skyscanner";
    repo = "cfripper";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-7lFHtdicpoZ3ZhwKeRhjex3tK+0aOzKD44Q7njOR2l4=";
+    hash = "sha256-uJy1n+bZgmKZpyu1MmbHgKeEOl5onUuQI3ZAlLgY+v4=";
  };

  pythonRelaxDeps = [
@@ -12,18 +12,15 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "coeurl";
-  version = "0.3.1";
+  version = "0.3.2";

  src = fetchFromGitLab {
    domain = "nheko.im";
    owner = "nheko-reborn";
    repo = "coeurl";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-NGplM5c/dMGSQbhKeuPOTWL8KsqvMd/76YuwCxnqNNE=";
+    hash = "sha256-8BwyPfLgkJG1CHnRAKxgn8ObEGSK+lKKUhQibs1dCg4=";
  };
-  postPatch = ''
-    substituteInPlace subprojects/curl.wrap --replace '[provides]' '[provide]'
-  '';

  nativeBuildInputs = [
    ninja
@@ -21,13 +21,13 @@

 crystal.buildCrystalPackage rec {
  pname = "Collision";
-  version = "3.11.0";
+  version = "3.14.0";

  src = fetchFromGitHub {
    owner = "GeopJr";
    repo = "Collision";
-    rev = "v${version}";
-    hash = "sha256-OCFy7DFSRsqiw+b6zlJy9Us44zQXf150zVDu3GmclOk=";
+    tag = "v${version}";
+    hash = "sha256-GcCqItSHUhhS0yrOM8bMzkVsVHyC97c+yccw5ZP61IU=";
  };

  postPatch = ''
@@ -100,9 +100,6 @@ crystal.buildCrystalPackage rec {
        supportedFeatures = [ "silent" ];
      }
    ];
-    shardLock = runCommand "shard.lock" { inherit src; } ''
-      cp $src/shard.lock $out
-    '';
  };

  meta = {
@@ -11,13 +11,13 @@
  };
  "gi-crystal" = {
    url = "https://github.com/hugopl/gi-crystal.git";
-    rev = "v0.25.0";
-    sha256 = "0lgs85khg6yzmw7vnkjxygrga1618440hayjc51jmjcfh2lff1k2";
+    rev = "v0.25.1";
+    sha256 = "0283isgrann4r3ily8c7fip0x6h947g9s3hgmrja0m6si3lkgizs";
  };
  "gtk4" = {
    url = "https://github.com/hugopl/gtk4.cr.git";
-    rev = "v0.17.0";
-    sha256 = "0lv3nvsanxi4g2322zvkf1jxx5zgzaapk228vcw2cl0ja1drm06d";
+    rev = "v0.18.0";
+    sha256 = "03kab6nbkgxnnrp7g0gr4cv7rjsp7y8m7kz2rzb1ci63qzkzqlqi";
  };
  "harfbuzz" = {
    url = "https://github.com/hugopl/harfbuzz.cr.git";
@@ -22,14 +22,14 @@

 python3.pkgs.buildPythonApplication (finalAttrs: {
  pname = "curtail";
-  version = "1.14.0";
+  version = "1.15.0";
  pyproject = false;

  src = fetchFromGitHub {
    owner = "Huluti";
    repo = "Curtail";
    tag = finalAttrs.version;
-    sha256 = "sha256-AxQe7abHZp4SRp90fkFbmXf3ZQH3VmxQVkpxRcit+54=";
+    hash = "sha256-1X3isnhl5Lw+iVLM2WdZEaKphLiikBtg5QlSxgQHqy8=";
  };

  nativeBuildInputs = [
@@ -9,16 +9,16 @@

 buildGoModule (finalAttrs: {
  pname = "dnscontrol";
-  version = "4.36.0";
+  version = "4.36.1";

  src = fetchFromGitHub {
    owner = "StackExchange";
    repo = "dnscontrol";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-mKeJTSNBZlEY0A4CcpROxKAI83MMcMB7HHZF567Z7U8=";
+    hash = "sha256-9mOhiQBL3rFXSi5WpCKr3YXMAaK25Hsk1ln475cY1H4=";
  };

-  vendorHash = "sha256-PxDWodLz4/TpbfGFJkTJ0MLwdM2ECSzDCHZ5g+p1cAU=";
+  vendorHash = "sha256-ao8IVxtCURrbyeC+mLgM1e88KRNwzCY1s6ixF//jHhE=";

  nativeBuildInputs = [ installShellFiles ];

@@ -55,13 +55,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "dolphin-emu";
-  version = "2512";
+  version = "2603";

  src = fetchFromGitHub {
    owner = "dolphin-emu";
    repo = "dolphin";
    tag = finalAttrs.version;
-    hash = "sha256-VmDhYZfYyzf08FXZTeBYmdEp9P8AugUpiOxNj8aEJqw=";
+    hash = "sha256-9kB5hFAJwLkFi2y5c5ZavwcnXRDE5bxerg5E1hPAutY=";
    fetchSubmodules = true;
    leaveDotGit = true;
    postFetch = ''
@@ -68,8 +68,6 @@ stdenv.mkDerivation (finalAttrs: {
    hash = "sha256-Tz14pjI5pNJOQH0KFaf9mJkFdup1GVxlkMnzVQusx/M=";
  };

-  patches = [ ./qmlmodule-fix.patch ];
-
  nativeBuildInputs = [
    cmake
    extra-cmake-modules
@@ -1,12 +0,0 @@
-diff --git a/CMakeLists.txt b/CMakeLists.txt
-index 2736ac18b..85be09a90 100644
--- a/CMakeLists.txt
-+++ b/CMakeLists.txt
-@@ -65,7 +65,7 @@ find_package(KF${QT_MAJOR_VERSION} REQUIRED COMPONENTS
-     QQC2DesktopStyle
- )
- 
-ecm_find_qmlmodule(org.kde.kirigami REQUIRED)
-+ecm_find_qmlmodule(org.kde.kirigami)
- 
- qt_policy(SET QTP0001 NEW)
@@ -18,20 +18,22 @@

 stdenv.mkDerivation rec {
  pname = "emblem";
-  version = "1.5.0";
+  version = "1.6.0";

  src = fetchFromGitLab {
    domain = "gitlab.gnome.org";
    group = "World";
    owner = "design";
    repo = "emblem";
-    rev = version;
-    sha256 = "sha256-knq8OKoc8Xv7lOr0ub9+2JfeQE84UlTHR1q4SFFF8Ug=";
+    tag = version;
+    hash = "sha256-OqP6KLaDix4hR/AA+lfaMu4nZPqpAKfYzZu7tr+RUJI=";
+    # Temporary workaround for https://github.com/NixOS/nixpkgs/issues/485701
+    forceFetchGit = true;
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit pname version src;
-    hash = "sha256-CsISaVlRGtVVEna1jyGZo/IdWcJdwHJv6LXcXYha2UE=";
+    hash = "sha256-J00zw8jOeMLjGyn2Gj4TA5vHjIWOw+x/XEIXMyBFMdw=";
  };

  nativeBuildInputs = [
@@ -8,15 +8,15 @@

 let
  pname = "everest";
-  version = "6170";
+  version = "6194";
  phome = "$out/lib/Celeste";
 in
 stdenvNoCC.mkDerivation {
  inherit pname version;
  src = fetchzip {
-    url = "https://github.com/EverestAPI/Everest/releases/download/stable-1.6170.0/main.zip";
+    url = "https://github.com/EverestAPI/Everest/releases/download/stable-1.6194.0/main.zip";
    extension = "zip";
-    hash = "sha256-tMovLxTHbBvqQ+e8GLaLIel2hSchuFXnOfnytgSKfsY=";
+    hash = "sha256-Ja/b/5kKekBZZbqp0o2I8dvtiQ/rRa2kS6Q+08yBX7I=";
  };
  buildInputs = [
    icu
@@ -11,8 +11,8 @@

 let
  pname = "everest";
-  version = "6170";
-  rev = "62ef4d0c36f433fa3a26502eabe6cda5ff205fbc";
+  version = "6194";
+  rev = "5adc0e7ae6087ba90f9dd1cad487cf4dde1d493b";
  phome = "$out/lib/Celeste";
 in
 buildDotnetModule {
@@ -25,7 +25,7 @@ buildDotnetModule {
    fetchSubmodules = true;
    # TODO: use leaveDotGit = true and modify external/MonoMod in postFetch to please SourceLink
    # Microsoft.SourceLink.Common.targets(53,5): warning : Source control information is not available - the generated source link is empty.
-    hash = "sha256-OumeSvcWX3/zot7akcQea7jUQH0rL5/E0HzhITGPedA=";
+    hash = "sha256-GG3cxrMZRSHoUzewHEQvljXSgHWcF9GNunlyWbiKrQo=";
  };

  nativeBuildInputs = [ autoPatchelfHook ];
@@ -1,19 +1,19 @@
 # Generated by ./update.sh - do not update manually!
-# Last updated: 2026-02-06
+# Last updated: 2026-02-26
 { fetchurl, fetchzip }:
 {
  aarch64-darwin = {
-    version = "1.0.9";
+    version = "1.1.0";
    src = fetchurl {
-      url = "https://dl.fastmailcdn.com/desktop/production/mac/arm64/Fastmail-1.0.9-arm64-mac.zip";
-      hash = "sha512-f0nwcqCWhLheYhHKnhXaTkYqXAOTJIGvrvFsavzoxBWg5C8k/+d74uMh3hSTcvCsR40FN67PYxJhu8Qtt69LVw==";
+      url = "https://dl.fastmailcdn.com/desktop/production/mac/arm64/Fastmail-1.1.0-arm64-mac.zip";
+      hash = "sha512-z1iW4DnPKY3b1SnIvmgsA62unqMR8nLJpql0jbMuHxyAxWntAZZjpxY0GhmwmZl/WjaCn2SeXj0iYlTJTecZjQ==";
    };
  };
  x86_64-linux = {
-    version = "1.0.9";
+    version = "1.1.0";
    src = fetchurl {
-      url = "https://dl.fastmailcdn.com/desktop/production/linux/x64/Fastmail-1.0.9.AppImage";
-      hash = "sha512-/UqSi8tl9qLInzSCP3nkbPbUBX5J1tXg7hH7AbnI+I8h+3sxDsU7+I5UwiuSmWQ66P5vRQ8XHf9xKyi01JDKkQ==";
+      url = "https://dl.fastmailcdn.com/desktop/production/linux/x64/Fastmail-1.1.0.AppImage";
+      hash = "sha512-lXvgZ61M1Ex7jJzFjfC9rYLodGojrbca/t4IOaQ7k/CDI4DyFRDkAGqkGioq7EwzbooS9zTO3fbdYmbOyODFTQ==";
    };
  };
 }
@@ -8,11 +8,11 @@

 let
  pname = "fiddler-everywhere";
-  version = "7.6.0";
+  version = "7.7.0";

  src = fetchurl {
    url = "https://downloads.getfiddler.com/linux/fiddler-everywhere-${version}.AppImage";
-    hash = "sha256-wBFLfZ/z4NH0YswQcwAYbvSLZkW1kZ0pBxhVCREV0qk=";
+    hash = "sha256-klHlC0WrqUdPbaI5oHSOcfEVFaPZNPSYtRK5fmkvsl4=";
  };

  appimageContents = appimageTools.extract {
@@ -2,6 +2,7 @@
  lib,
  fetchFromGitHub,
  nss,
+  nixosTests,
  nix-update-script,
  stdenv,
  python3Packages,
@@ -9,14 +10,14 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "firefox_decrypt";
-  version = "1.1.1";
+  version = "1.1.3";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "unode";
    repo = "firefox_decrypt";
    tag = finalAttrs.version;
-    hash = "sha256-HPjOUWusPXoSwwDvW32Uad4gFERvn79ee/WxeX6h3jY=";
+    hash = "sha256-Y958qXGpkNgMBYiM80OKQYkO7EdqH7T5FfINELAB9CY=";
  };

  build-system = with python3Packages; [
@@ -32,12 +33,28 @@ python3Packages.buildPythonApplication (finalAttrs: {
    (lib.makeLibraryPath [ nss ])
  ];

-  passthru.updateScript = nix-update-script { };
+  checkPhase = ''
+    runHook preCheck
+
+    patchShebangs tests
+    (cd tests && ${
+      if stdenv.hostPlatform.isDarwin then "DYLD_LIBRARY_PATH" else "LD_LIBRARY_PATH"
+    }=${lib.makeLibraryPath [ nss ]} ./run_all)
+
+    runHook postCheck
+  '';
+
+  passthru = {
+    tests = {
+      inherit (nixosTests) firefox_decrypt;
+    };
+    updateScript = nix-update-script { };
+  };

  meta = {
    homepage = "https://github.com/unode/firefox_decrypt";
    description = "Tool to extract passwords from profiles of Mozilla Firefox and derivates";
-    mainProgram = "firefox_decrypt";
+    mainProgram = "firefox-decrypt";
    license = lib.licenses.gpl3Plus;
    maintainers = with lib.maintainers; [
      schnusch
@@ -8,11 +8,11 @@

 stdenvNoCC.mkDerivation rec {
  pname = "flix";
-  version = "0.67.2";
+  version = "0.69.1";

  src = fetchurl {
    url = "https://github.com/flix/flix/releases/download/v${version}/flix.jar";
-    sha256 = "sha256-MWK6Az135IHIzXMUQeHyeb2PROXyeLKyFjIUnDD47T8=";
+    sha256 = "sha256-UgYMaZ/v99dmfSUekU2xSOoJecrmvUoVfO5eYm9prZw=";
  };

  dontUnpack = true;
@@ -0,0 +1,72 @@
+{
+  lib,
+  fetchFromGitHub,
+  rustPlatform,
+  perl,
+  kubernetes-helm,
+  gitMinimal,
+  installShellFiles,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "fluvio-cli";
+  version = "0.18.1";
+
+  src = fetchFromGitHub {
+    owner = "fluvio-community";
+    repo = "fluvio";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-7kGMOAzBGrMOMj4Fyvy9xVwTGEkee5W7JAldbyTV298=";
+  };
+
+  cargoHash = "sha256-OAw/nftF63WyE3E+zaVCYYXh37p6HB0ib7WModfXKBA=";
+
+  nativeBuildInputs = [
+    # Necessary because of a hard dependency to the openssl-src rust crate
+    perl
+    kubernetes-helm
+    installShellFiles
+    # Needed by build.rs scripts
+    gitMinimal
+  ];
+
+  cargoBuildFlags = [
+    "-p"
+    "fluvio-cli"
+    "-p"
+    "fluvio-run"
+  ];
+  cargoTestFlags = [
+    "-p"
+    "fluvio-cli"
+    "-p"
+    "fluvio-run"
+  ];
+
+  # Patch to make cargoAuditable work
+  postPatch = ''
+    substituteInPlace crates/fluvio-cli-common/Cargo.toml \
+      --replace-fail '"dep:fluvio-sc-schema"' '"fluvio-sc-schema"'
+  '';
+
+  # asset generation
+  preBuild = ''
+    make -C k8-util/helm package
+  '';
+
+  postInstall = ''
+    installShellCompletion --cmd fluvio \
+      --bash <($out/bin/fluvio completions bash) \
+      --fish <($out/bin/fluvio completions fish) \
+      --zsh <($out/bin/fluvio completions zsh)
+  '';
+
+  meta = {
+    description = "Event stream processing for developers";
+    homepage = "https://fluvio.io/";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ aporro ];
+    mainProgram = "fluvio";
+    platforms = lib.platforms.unix;
+  };
+})
@@ -27,7 +27,7 @@
 }:

 let
-  version = "1.26.0";
+  version = "1.26.1";

  # build stimuli file for PGO build and the script to generate it
  # independently of the foot's build, so we can cache the result
@@ -103,7 +103,7 @@ stdenv.mkDerivation {
    owner = "dnkl";
    repo = "foot";
    tag = version;
-    hash = "sha256-XnGNrQVdSyg5CVBZBwrqDPbf4/+9yyerGBrZArbh6xI=";
+    hash = "sha256-N9/lxbz9nLIGC7VyuRbNbuX0K0XAxhytLzsU16BMCWY=";
  };

  separateDebugInfo = true;
@@ -0,0 +1,61 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  pkg-config,
+  freetype,
+  libpng,
+  libjpeg,
+  libGL,
+  libGLU,
+  freeglut,
+}:
+
+stdenv.mkDerivation rec {
+  pname = "fsnav";
+  version = "0.1";
+
+  src = fetchFromGitHub {
+    owner = "jtsiomb";
+    repo = "fsnav";
+    tag = "v${version}";
+    hash = "sha256-Bt1QRqtJkVFR1uMzmB3OUyqyzUyJdQyQdbMOfMyWJOc=";
+  };
+
+  nativeBuildInputs = [
+    pkg-config
+  ];
+
+  buildInputs = [
+    freetype
+    libpng
+    libjpeg
+    libGL
+    libGLU
+    freeglut
+  ];
+
+  preBuild = ''
+    makeFlagsArray+=(
+      "PREFIX=$out"
+      "CC=$CC"
+      "CXX=$CXX"
+    )
+  '';
+
+  preInstall = ''
+    mkdir -p $out/bin
+    mkdir -p $out/share/fsnav
+  '';
+
+  meta = {
+    description = "3D filesystem navigator inspired by SGI FSN";
+    homepage = "https://github.com/jtsiomb/fsnav";
+    license = lib.licenses.gpl3Plus;
+    maintainers = with lib.maintainers; [ aaravrav ];
+    mainProgram = "fsnav";
+    platforms = with lib.platforms; linux;
+    broken = !stdenv.buildPlatform.canExecute stdenv.hostPlatform;
+  };
+
+}
@@ -11,13 +11,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "ft2-clone";
-  version = "2.07";
+  version = "2.11";

  src = fetchFromGitHub {
    owner = "8bitbubsy";
    repo = "ft2-clone";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-g32teMDOv+lYmZNJNCnjlHszFb7cjKLWMHVuxHZvAHo=";
+    hash = "sha256-thOQcsnFkDJh0P2Yu/1rCmt/M3Ikr88ffFHUDrgFNyk=";
  };

  nativeBuildInputs = [ cmake ];
@@ -1,25 +1,25 @@
 {
  lib,
  fetchFromGitHub,
-  buildGoModule,
+  buildGo126Module,
  installShellFiles,
  stdenv,
  testers,
  gh,
 }:

-buildGoModule (finalAttrs: {
+buildGo126Module (finalAttrs: {
  pname = "gh";
-  version = "2.87.3";
+  version = "2.88.1";

  src = fetchFromGitHub {
    owner = "cli";
    repo = "cli";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-F4xUwj/krB5vjIfnvmwySlztBrcxJ+k1GvXb2gs7eXY=";
+    hash = "sha256-aM5hpkI4MTQ6eNUB4FVNQRSNUmwI84dTdVMUANtrnJk=";
  };

-  vendorHash = "sha256-POrm4lHEO2Eti7dbohKBwXW+DTs22EUZX+tMNUCL3lg=";
+  vendorHash = "sha256-RD40Lqg6EF0T12JJ7Y4B5L2KIvwRHcgGRU1UMiU3qTo=";

  nativeBuildInputs = [ installShellFiles ];

@@ -26,8 +26,8 @@ let

    pnpmDeps = fetchPnpmDeps {
      inherit (finalAttrs) pname version src;
-      fetcherVersion = 2;
-      hash = "sha256-0p7P68BvO3hv0utUbnPpHSpGLlV7F9HHmOITvJAb/ww=";
+      fetcherVersion = 3;
+      hash = "sha256-Atb6m5ZD9NKjYezFnYLnQqnlr72g5dz7ROfOF9fsqto=";
    };

    nativeBuildInputs = [
@@ -48,18 +48,18 @@ let
 in
 buildGoModule rec {
  pname = "gitea";
-  version = "1.25.4";
+  version = "1.25.5";

  src = fetchFromGitHub {
    owner = "go-gitea";
    repo = "gitea";
    tag = "v${gitea.version}";
-    hash = "sha256-sVpCdDJWzHtRKiqTeRuvrHf/cmeLbLs4THAqkH8hqMY=";
+    hash = "sha256-EDj/n4dOZsdJx4zdP8GwUavZNK145Q8ENXmIL+81MY4=";
  };

  proxyVendor = true;

-  vendorHash = "sha256-y7HurJg+/V1cn8iKDXepk/ie/iNgiJXsQbDi1dhgark=";
+  vendorHash = "sha256-o7OIVo0/gunGMIDd0r6c9KDtku6pWwzmgm1X9qVbx4w=";

  outputs = [
    "out"
@@ -184,11 +184,11 @@ let

  linux = stdenvNoCC.mkDerivation (finalAttrs: {
    inherit pname meta passthru;
-    version = "146.0.7680.75";
+    version = "146.0.7680.80";

    src = fetchurl {
      url = "https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_${finalAttrs.version}-1_amd64.deb";
-      hash = "sha256-QlL1mH6RdWUacU/xnxwy8u1lPKXe8mneJSS4jqFQudw=";
+      hash = "sha256-Lam/V3YtHyph4RDlz+vGbXESQuRNg+53wqgZoYFcwxU=";
    };

    # With strictDeps on, some shebangs were not being patched correctly
@@ -302,11 +302,11 @@ let

  darwin = stdenvNoCC.mkDerivation (finalAttrs: {
    inherit pname meta passthru;
-    version = "146.0.7680.76";
+    version = "146.0.7680.80";

    src = fetchurl {
-      url = "http://dl.google.com/release2/chrome/adgzhtm53eqdw4h4wn64ebox7o6q_146.0.7680.76/GoogleChrome-146.0.7680.76.dmg";
-      hash = "sha256-nC8y6992wlx6DcN48glkeoZFSze1vNkbsqENmqC5nrQ=";
+      url = "http://dl.google.com/release2/chrome/dzyizse52hr7lfzvs5c2ypryzq_146.0.7680.80/GoogleChrome-146.0.7680.80.dmg";
+      hash = "sha256-vKt8bQLAsiwjX2tdrkPjq6uC5wXSk8Jb3dr43ofbEt4=";
    };

    dontPatch = true;
@@ -9,15 +9,15 @@

 buildGoModule (finalAttrs: {
  pname = "goperf";
-  version = "0-unstable-2026-02-09";
+  version = "0-unstable-2026-03-11";

  src = fetchgit {
    url = "https://go.googlesource.com/perf";
-    rev = "b57e4e371b65454dd44026af9d45c69605bc0c3c";
-    hash = "sha256-Sz7Fq0H+ikccAfaJirKHLIA+P4ZqMPS3S/Vj7WrGFy4=";
+    rev = "16a31bc5fbd0f58f2e8e2a496d8e035bdc4a2e06";
+    hash = "sha256-be0vWFJUXTPWKapd+rX3Stnzra9LUGNEw+4P+fWzjyk=";
  };

-  vendorHash = "sha256-kGF184E+rOWncQsvjk1iCpF26/3Ll/IY9CPEh6vhRBQ=";
+  vendorHash = "sha256-oBSd0D66BGfanCADtrpyIoUit8c+yHk8Nm6o2GmKoZg=";

  passthru.updateScript = writeShellScript "update-goperf" ''
    export UPDATE_NIX_ATTR_PATH=goperf
@@ -25,11 +25,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "got";
-  version = "0.121";
+  version = "0.123";

  src = fetchurl {
    url = "https://gameoftrees.org/releases/portable/got-portable-${finalAttrs.version}.tar.gz";
-    hash = "sha256-1A6+69IkCAzalhEVcuhj6KO/IjXIqVOifiRRGomIIJo=";
+    hash = "sha256-U655XwPi7k9Glr+FdoqafWSkc/IGIvzIUI+iRswohSY=";
  };

  nativeBuildInputs = [
@@ -6,19 +6,19 @@

 buildGoModule (finalAttrs: {
  pname = "grafana-image-renderer";
-  version = "5.6.2";
+  version = "5.7.1";

  src = fetchFromGitHub {
    owner = "grafana";
    repo = "grafana-image-renderer";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-rbR+TGkTWIpHeGxOQtVQFIeTv1/p8rGfbFp6hSSXQco=";
+    hash = "sha256-0n9esm8j3zRMUzFPrXrcllEen+F6XpL3yPY5KBY8H9g=";
  };

  vendorHash = "sha256-nRwd1luj8AFjDM67KtinVxRd31lUO+Vv3PDnsv2BMZU=";

  postPatch = ''
-    substituteInPlace go.mod --replace-fail 'go 1.25.6' 'go 1.25.5'
+    substituteInPlace go.mod --replace-fail 'go 1.26.1' 'go 1.25.7'
  '';

  subPackages = [ "." ];
@@ -7,13 +7,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "gsl-lite";
-  version = "1.0.1";
+  version = "1.1.0";

  src = fetchFromGitHub {
    owner = "gsl-lite";
    repo = "gsl-lite";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-QlAeXUKVzH0QYxbKgWPS64h1iL4nnsmJ10h/wzoxq78=";
+    hash = "sha256-lX4s/HyDIEhn7PNyCocFYhizTx6CSkSfmGCSU+eqOYw=";
  };

  nativeBuildInputs = [
@@ -49,11 +49,11 @@
 assert googleSupport -> gnomeSupport;
 stdenv.mkDerivation (finalAttrs: {
  pname = "gvfs";
-  version = "1.58.2";
+  version = "1.58.4";

  src = fetchurl {
    url = "mirror://gnome/sources/gvfs/${lib.versions.majorMinor finalAttrs.version}/gvfs-${finalAttrs.version}.tar.xz";
-    hash = "sha256-rZ1b8LRcryMlIN8K3uUetlAgCwNwaA+Ao1Dq2dHWHd8=";
+    hash = "sha256-5xJL7HJOJlrQ7gC6on2NUVzx3dzxAmOL5nueJZybBA0=";
  };

  patches = [
@@ -143,7 +143,7 @@ stdenv.mkDerivation (finalAttrs: {
      --prefix LD_LIBRARY_PATH : ${lib.makeLibraryPath finalAttrs.runtimeLibs}

      substituteInPlace $out/lib/systemd/system/hardinfo2.service \
-        --replace-fail "ExecStart=/usr/bin/hwinfo2_fetch_sysdata" "ExecStart=$out/hwinfo2_fetch_sysdata"
+        --replace-fail "ExecStart=/usr/bin/hwinfo2_fetch_sysdata" "ExecStart=$out/bin/hwinfo2_fetch_sysdata"
  '';

  # account for tags having a release- prefix
@@ -224,7 +224,7 @@ stdenv.mkDerivation (finalAttrs: {

  passthru = {
    tests = {
-      inherit (nixosTests) immich immich-vectorchord-migration immich-vectorchord-reindex;
+      inherit (nixosTests) immich immich-vectorchord-reindex;
    };

    machine-learning = immich-machine-learning.override {
@@ -13,8 +13,31 @@
  # compatibility.
  stripPrefix ? stdenv.hostPlatform.isDarwin,
  disableInitExecTls ? false,
+  # Page size in KiB to configure jemalloc for.
+  # Defaults to 64 on architectures where 64KB pages are common, 4 otherwise.
+  # Note that a higher value is compatible with lower page sizes but may waste memory.
+  pageSizeKiB ?
+    if
+      (
+        stdenv.hostPlatform.isAarch64 || stdenv.hostPlatform.isLoongArch64 || stdenv.hostPlatform.isPower64
+      )
+    then
+      64
+    else
+      4,
 }:

+let
+  pageSizeMap = {
+    "4" = 12;
+    "16" = 14;
+    "64" = 16;
+  };
+in
+assert lib.asserts.assertOneOf "pageSizeKiB" (toString pageSizeKiB) (
+  builtins.attrNames pageSizeMap
+);
+
 stdenv.mkDerivation (finalAttrs: {
  pname = "jemalloc";
  version = "5.3.0-unstable-2025-09-12";
@@ -54,12 +77,7 @@ stdenv.mkDerivation (finalAttrs: {
  # https://github.com/jemalloc/jemalloc/issues/467
  # https://sources.debian.org/src/jemalloc/5.3.0-3/debian/rules/
  ++ [
-    (
-      if (stdenv.hostPlatform.isAarch64 || stdenv.hostPlatform.isLoongArch64) then
-        "--with-lg-page=16"
-      else
-        "--with-lg-page=12"
-    )
+    "--with-lg-page=${toString pageSizeMap."${toString pageSizeKiB}"}"
  ]
  # See https://github.com/jemalloc/jemalloc/issues/1997
  # Using a value of 48 should work on both emulated and native x86_64-darwin.
@@ -11,16 +11,16 @@

 buildGoModule (finalAttrs: {
  pname = "kargo";
-  version = "1.8.6";
+  version = "1.9.5";

  src = fetchFromGitHub {
    owner = "akuity";
    repo = "kargo";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-sBUgoR3Eqv2OQRnXR9IaB4QcZ+awJb3ah7ySZ0XsaYA=";
+    hash = "sha256-jdRba3n9jGpZIp8E7Fz4DC3eDV4GK+MpuxBpYhpR60o=";
  };

-  vendorHash = "sha256-ZB1Eq8xQ/oF5sm750K9yJyBpwCIcCqmFL8FWpNsiXfo=";
+  vendorHash = "sha256-ir73yLXLOs6/6YX72EeyMcGLsImRkGmH4vppwKeOD+A=";

  subPackages = [ "cmd/cli" ];

@@ -22,11 +22,6 @@ stdenv.mkDerivation (finalAttrs: {
    hash = "sha256-15H4fTZ4Tja+nt0iKtFuULj/4g/0UK+W79R4kH7BFcs=";
  };

-  postPatch = ''
-    substituteInPlace CMakeLists.txt \
-      --replace-fail "ecm_find_qmlmodule(org.kde.kirigami REQUIRED)" "ecm_find_qmlmodule(org.kde.kirigami)"
-  '';
-
  nativeBuildInputs = [
    cmake
    ninja
@@ -10,13 +10,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "ladybugdb";
-  version = "0.14.2";
+  version = "0.15.1";

  src = fetchFromGitHub {
    owner = "LadybugDB";
    repo = "ladybug";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-hc0SltZYreENpa3PyCSgj72tSVVIiIJRQSN0f33iPr8=";
+    hash = "sha256-wqvX6yPhh1CbviPgcRW4XOmNjLe5s9FaqHYDFs7GQOg=";
  };

  outputs = [
@@ -20,13 +20,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libdeltachat";
-  version = "2.44.0";
+  version = "2.45.0";

  src = fetchFromGitHub {
    owner = "chatmail";
    repo = "core";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-GSmAU3xDwLvuy/A84/EBcHNLRAUz0f8s3pzjt81rkmQ=";
+    hash = "sha256-Q3nFTofALHtBgbZiuRfri6LlSlQimQZcj9JCfCv4JeQ=";
  };

  patches = [
@@ -36,7 +36,7 @@ stdenv.mkDerivation (finalAttrs: {
  cargoDeps = rustPlatform.fetchCargoVendor {
    pname = "chatmail-core";
    inherit (finalAttrs) version src;
-    hash = "sha256-AThOXZNy8nw6txTw0lsL85tScBzGa0r+IfThKp5ng40=";
+    hash = "sha256-8l+tZt+IlrI2NkW0o1ecC71L0yKMUzTqpPWM0lpkNbM=";
  };

  nativeBuildInputs = [
@@ -17,7 +17,7 @@

 rustPlatform.buildRustPackage rec {
  pname = "lighthouse";
-  version = "8.1.0";
+  version = "8.1.2";

  # lighthouse/common/deposit_contract/build.rs, `TAG`
  depositContractSpecVersion = "0.12.1";
@@ -28,14 +28,14 @@ rustPlatform.buildRustPackage rec {
    owner = "sigp";
    repo = "lighthouse";
    tag = "v${version}";
-    hash = "sha256-+MF3KbyKbaEBsrNHQOOolfhl4uJ1laOL1eGtcWEoaLE=";
+    hash = "sha256-Gtx5wowQM9jycy2Bl0FFGkgOZtyRvK3lMuc3K9v9sW4=";
  };

  patches = [
    ./use-system-sqlite.patch
  ];

-  cargoHash = "sha256-6C0rDVsF0wIcApc2YL3qC/Xa9qby9GDbQYGiaaJuH0k=";
+  cargoHash = "sha256-tmOEcxcMbGtOypNcxIbqfdlvFmNix21iIsRWVcFxJC4=";

  buildFeatures = [
    "gnosis"
@@ -39,13 +39,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "linyaps";
-  version = "1.11.2";
+  version = "1.12.0";

  src = fetchFromGitHub {
    owner = "OpenAtom-Linyaps";
    repo = finalAttrs.pname;
    tag = finalAttrs.version;
-    hash = "sha256-FpmsrH4Xphf4QKtAJEaoVdE9S7hWlCayDbEnYZ9o4iI=";
+    hash = "sha256-5vbCic+kAa1c5Io92LyJ20y+/v3M3fKh+AHKaf7kP14=";
  };

  patches = [
@@ -19,13 +19,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "lock";
-  version = "1.8.2";
+  version = "1.9.3";

  src = fetchFromGitHub {
    owner = "konstantintutsch";
    repo = "Lock";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-8vJK9uvmm3GtQcJ/6L0R8Y9gAv1W07asfKmDYZyeEOQ=";
+    hash = "sha256-UXTkrH+b4HIi+QC85gjASAFHgf0BQEZ6RkC99FksqsU=";
  };

  strictDeps = true;
@@ -1,7 +1,10 @@
 {
  lib,
  stdenv,
-  fetchurl,
+  fetchFromGitHub,
+  autoconf-archive,
+  autoreconfHook,
+  mate-common,
  pkg-config,
  gettext,
  itstool,
@@ -11,27 +14,35 @@
  vte,
  pcre2,
  wrapGAppsHook3,
+  yelp-tools,
  gitUpdater,
  nixosTests,
 }:

 stdenv.mkDerivation (finalAttrs: {
  pname = "mate-terminal";
-  version = "1.28.1";
+  version = "1.28.2";

-  src = fetchurl {
-    url = "https://pub.mate-desktop.org/releases/${lib.versions.majorMinor finalAttrs.version}/mate-terminal-${finalAttrs.version}.tar.xz";
-    sha256 = "8TXrGp4q4ieY7LLcGRT9tM/XdOa7ZcAVK+N8xslGnpI=";
+  src = fetchFromGitHub {
+    owner = "mate-desktop";
+    repo = "mate-terminal";
+    tag = "v${finalAttrs.version}";
+    fetchSubmodules = true;
+    hash = "sha256-tyYHMn+qwytpSNUZg4xfwnuVClxj2IcyB4C4Dsn+1Nc=";
  };

  strictDeps = true;

  nativeBuildInputs = [
+    autoconf-archive
+    autoreconfHook
    gettext
    itstool
+    mate-common # mate-common.m4 macros
    pkg-config
    libxml2 # xmllint
    wrapGAppsHook3
+    yelp-tools
  ];

  buildInputs = [
@@ -44,7 +55,6 @@ stdenv.mkDerivation (finalAttrs: {
  enableParallelBuilding = true;

  passthru.updateScript = gitUpdater {
-    url = "https://git.mate-desktop.org/mate-terminal";
    odd-unstable = true;
    rev-prefix = "v";
  };
@@ -12,11 +12,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "metabase";
-  version = "0.59.1";
+  version = "0.59.2";

  src = fetchurl {
    url = "https://downloads.metabase.com/v${finalAttrs.version}/metabase.jar";
-    hash = "sha256-pPJdFljzzNuhRvH6ofPkNGq0Ly/RpHcqeQQh3JTG08I=";
+    hash = "sha256-k1UfpSHOBsFZF85q0LhuiC9L5R8fbSnZBRB5MjBUh+M=";
  };

  nativeBuildInputs = [ makeWrapper ];
@@ -7,16 +7,16 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "mpls";
-  version = "0.17.1";
+  version = "0.20.0";

  src = fetchFromGitHub {
    owner = "mhersson";
    repo = "mpls";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-RJadJEIwBdDtZZxPSm12WYVKrIAOc1EvSxLrkhs4sx4=";
+    hash = "sha256-a33XbUw6H2EKfGZnpV6L00iab6AoXqPiNTMw/OaouHs=";
  };

-  vendorHash = "sha256-QtNQnJtYLmSTTLwKKQ8P6O6wyctgwN8OcGZkMXa+Ark=";
+  vendorHash = "sha256-pi7KBA/313cG0AYWM/mUDng2M9L2tMLkonY4LI5XiW0=";

  ldflags = [
    "-s"
@@ -6,16 +6,16 @@

 buildGoModule (finalAttrs: {
  pname = "nerva";
-  version = "1.0.0";
+  version = "1.1.0";

  src = fetchFromGitHub {
    owner = "praetorian-inc";
    repo = "nerva";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-EZQQLXN9eixL3BUSn6VAaKPe9uA3uW1l6zfzq3bG+vk=";
+    hash = "sha256-X39P/4OrRDwZieCDVaMj0YJhotZ0PHMGVgN5ky5+pDk=";
  };

-  vendorHash = "sha256-h3pxl84P7dUmXJJ9t/Rnzx0oJcGnA+7ytGWhk401ecY=";
+  vendorHash = "sha256-c8dkMsuzBuHBPBTHAhwMgpGLUVLkzBmItnp1QAUBQSI=";

  ldflags = [
    "-s"
@@ -38,6 +38,7 @@ stdenv.mkDerivation (finalAttrs: {

  meta = {
    description = "Mini PXE server";
+    homepage = "https://netboot.sourceforge.net";
    maintainers = with lib.maintainers; [ raskin ];
    platforms = [
      "x86_64-linux"
@@ -48,13 +48,13 @@ let
 in
 buildGo126Module (finalAttrs: {
  pname = "nezha";
-  version = "2.0.4";
+  version = "2.0.5";

  src = fetchFromGitHub {
    owner = "nezhahq";
    repo = "nezha";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-JzdjIAeWswW/6ZnwfRZAexzl/ehvzKmyiNyzCHBDqgA=";
+    hash = "sha256-g5mXt0NfRFezLmQ27FAE+wU+a+sSHlCzx2oh/z1Xz+I=";
  };

  proxyVendor = true;
@@ -9,16 +9,16 @@

 buildGoModule (finalAttrs: {
  pname = "nfpm";
-  version = "2.45.0";
+  version = "2.45.1";

  src = fetchFromGitHub {
    owner = "goreleaser";
    repo = "nfpm";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-sz6+oUvEi3iYKLRxHaeP2T+9m5CavgIzZIz8wuSfM+M=";
+    hash = "sha256-ThoCDsuz52odVLVJuT4F96sjtqOOzjqq7JIE5Idzl1k=";
  };

-  vendorHash = "sha256-tEuNOBBUnJNjk1Mao8A7KtuPIdkxsmj+yp8fuovOK0s=";
+  vendorHash = "sha256-cq0pcbC0T3klh3D9l0e0u5JPYv1kWYlpeNYyGczGX+A=";

  ldflags = [
    "-s"
@@ -40,11 +40,11 @@ in

 stdenv.mkDerivation (finalAttrs: {
  pname = "nfs-utils";
-  version = "2.8.6";
+  version = "2.8.7";

  src = fetchurl {
    url = "mirror://kernel/linux/utils/nfs-utils/${finalAttrs.version}/nfs-utils-${finalAttrs.version}.tar.xz";
-    hash = "sha256-K9ezToCafv8vS8X8X9luvNZqVFi0caJwy9LcFpsBFVA=";
+    hash = "sha256-WdDx4XsY76pg6jzPianK0yF/jTsjwY0v40slyJadYK4=";
  };

  # libnfsidmap is built together with nfs-utils from the same source,
@@ -137,13 +137,13 @@ let
 in
 goBuild (finalAttrs: {
  pname = "ollama";
-  version = "0.17.7";
+  version = "0.18.0";

  src = fetchFromGitHub {
    owner = "ollama";
    repo = "ollama";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-cAqc38NHvUo5gphq1csTyosTcpUjFcs0dzB0wreEGjs=";
+    hash = "sha256-nnVuWjx3ZmAjHRPmsh+ut4UzzZxq6b7kXf0jq2ZsbXU=";
  };

  vendorHash = "sha256-Lc1Ktdqtv2VhJQssk8K1UOimeEjVNvDWePE9WkamCos=";
@@ -10,7 +10,7 @@
  versionCheckHook,
  nix-update-script,
  rolldown,
-  version ? "2026.2.26",
+  version ? "2026.3.12",
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "openclaw";
@@ -20,10 +20,10 @@ stdenvNoCC.mkDerivation (finalAttrs: {
    owner = "openclaw";
    repo = "openclaw";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-9kej1aK7j3/FU2X/bN983YqQClfnWfFPvByEkQKlQ4E=";
+    hash = "sha256-dGKfXkC7vHflGbg+SkgSMfM5LW8w1YQIWicgp3BKDQ8=";
  };

-  pnpmDepsHash = "sha256-Jcj0i/2Mh8Z5lp909Fkotw/isfLTIVMxtJgWwAtctEw=";
+  pnpmDepsHash = "sha256-GHTkpwOj2Y29YUcS/kbZlCdo9DL8C3WW3WHe0PMIN/M=";

  pnpmDeps = fetchPnpmDeps {
    inherit (finalAttrs) pname version src;
@@ -10,14 +10,14 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "oxker";
-  version = "0.12.0";
+  version = "0.13.0";

  src = fetchCrate {
    inherit (finalAttrs) pname version;
-    hash = "sha256-cTusvvxr2ec2Qy6iWwGRmPcvGpRMOKxzrAx/qRvj+BE=";
+    hash = "sha256-4rIqZOWYqd7zUrDmEIZTH7iDRzed8on6UeP871M/KAI=";
  };

-  cargoHash = "sha256-X5iNAwp0DcXoT82ZLq37geifztvJ/zZgOgM3SycAazA=";
+  cargoHash = "sha256-/Uw8IDVHmWpClAwWol2t10biDD3AGkZQDz5fmRSLlRI=";

  checkFlags = lib.optionals stdenv.hostPlatform.isDarwin [
    "--skip=ui::draw_blocks::help::tests::test_draw_blocks_help_custom_keymap_one_definition"
@@ -12,16 +12,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "oxlint";
-  version = "1.51.0";
+  version = "1.55.0";

  src = fetchFromGitHub {
    owner = "oxc-project";
    repo = "oxc";
    tag = "oxlint_v${finalAttrs.version}";
-    hash = "sha256-J5EChGADug+SEvhjStyS1s5kek5QNc2VrjEa5MEWTpA=";
+    hash = "sha256-A2cq1WgZg8csNGB3yFNo21450f46n4ZVblke1yqlBCc=";
  };

-  cargoHash = "sha256-chNxYraN9upILXCqDQ/TrN3xiKhxKhZlN2HGrPF4qT8=";
+  cargoHash = "sha256-Oz9u2+5lq+z9A81BEn2T4jvVMqf1uNXip+OH4AxiTG0=";

  nativeBuildInputs = [
    cmake
@@ -6,7 +6,7 @@
  pnpm,
  fetchPnpmDeps,
  pnpmConfigHook,
-  electron_38,
+  electron_40,
  makeWrapper,
  copyDesktopItems,
  makeDesktopItem,
@@ -16,19 +16,19 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "picgo";
-  version = "2.5.2";
+  version = "2.5.3";

  src = fetchFromGitHub {
    owner = "Molunerfinn";
    repo = "PicGo";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-fEj5ymnDBxeJ33GeIrcciQW3Wg7jMQaitwhUHne9a14=";
+    hash = "sha256-4Ih7PPBo6scJoUS8yTAR0iyG5vxNc/c0CCw5FGaIbHM=";
  };

  pnpmDeps = fetchPnpmDeps {
    inherit (finalAttrs) version src;
    pname = "picgo";
-    hash = "sha256-hYQM1KiKfsQL0AbYpHtmpDHbG3HsdXFbpgGzcZVW7R0=";
+    hash = "sha256-tILvWDoHAN5XT1F/cJYgfeMzowuO/fhiughI+0FvHzc=";
    fetcherVersion = 3; # lockfileVersion 9.0 corresponds to fetcherVersion 3
  };

@@ -70,7 +70,7 @@ stdenv.mkDerivation (finalAttrs: {

    # Create startup script
    mkdir -p $out/bin
-    makeWrapper ${lib.getExe electron_38} $out/bin/picgo \
+    makeWrapper ${lib.getExe electron_40} $out/bin/picgo \
      --add-flags "$out/lib/picgo/.launcher.cjs" \
      --add-flags "--name picgo" \
      --set NODE_ENV production \
@@ -8,7 +8,7 @@

 let
  pname = "postman";
-  version = "11.82.1";
+  version = "11.87.4";

  src =
    let
@@ -27,10 +27,10 @@ let
      name = "postman-${version}.${if stdenvNoCC.hostPlatform.isLinux then "tar.gz" else "zip"}";
      url = "https://dl.pstmn.io/download/version/${version}/${system}";
      hash = selectSystem {
-        aarch64-darwin = "sha256-7n/9ezPgpon3AEQXmoK/iazOPvRh/pDVy/YBVUwjbkI=";
-        aarch64-linux = "sha256-nn6Krn3/z7FkPRJDO7wNhny50YvuWwWWQ9lf9mk8ZGo=";
-        x86_64-darwin = "sha256-jN6TbPRkEFH9KyU3owcsrWbJvyIqMT0f8zV9OymiNzY=";
-        x86_64-linux = "sha256-PEPMrWrm57SAdaHL6ZWES0Ao7J7vn0TAX9WZ/WCFq6U=";
+        aarch64-darwin = "sha256-1ilYfvduHTh5tvIrIXmrwQgfiWnYhdXhNv/o19wUNrE=";
+        aarch64-linux = "sha256-JdO/gBT7B+FQ8mguyw7oD2hfQACfyDVxF714iVkTW2I=";
+        x86_64-darwin = "sha256-Sb66zJQJzixk032fsdAfU88Yw9t7xeFoPBlQ+pRcdmU=";
+        x86_64-linux = "sha256-a8jsIFlJD12tydTZM9Mibv+m7bcSqAN4JVQgQxB4WJo=";
      };
    };

@@ -7,13 +7,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "quill-log";
-  version = "11.0.2";
+  version = "11.1.0";

  src = fetchFromGitHub {
    owner = "odygrd";
    repo = "quill";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-b5kHxvjmTea5HU9gTvizFwhG2zwOJSPlf30XKEhxe8w=";
+    hash = "sha256-OBvKOJt/GPwrFk9JHaJ658CWAkhyVQNprbwsKJb8aHs=";
  };

  nativeBuildInputs = [ cmake ];
@@ -49,13 +49,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "remmina";
-  version = "1.4.41";
+  version = "1.4.43";

  src = fetchFromGitLab {
    owner = "Remmina";
    repo = "Remmina";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-0KUwZ81CyuLa05Cwe7wJrTbM1Dp9mAzNBI5pR7FKTOU=";
+    hash = "sha256-7nY2NhlWp+4FTTmeam1B+sotqis0lSwhozSC8I14aMI=";
  };

  nativeBuildInputs = [
@@ -19,16 +19,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "rusty-path-of-building";
-  version = "0.2.13";
+  version = "0.2.14";

  src = fetchFromGitHub {
    owner = "meehl";
    repo = "rusty-path-of-building";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-4lxMQfENucDaDZov82iZD5DMgksLuJ/2nXUKYYf/m/w=";
+    hash = "sha256-rgXxy1r4ZyFFG5BiodogeHnCcppw79xzb0MsQDZxL4E=";
  };

-  cargoHash = "sha256-PeVVDOWFYoDKkCy+UV5ikFwrHTK93zt2WZ3Oxp0ez1Y=";
+  cargoHash = "sha256-IZ5+Dvr1u/X278U6WCD6CNu4HBh5uLRWFbPeZ6EXryo=";

  nativeBuildInputs = [
    pkg-config
@@ -121,7 +121,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
    homepage = "https://github.com/meehl/rusty-path-of-building";
    changelog = "https://github.com/meehl/rusty-path-of-building/blob/${finalAttrs.src.rev}/CHANGELOG.md";
    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ k900 ];
+    maintainers = with lib.maintainers; [
+      k900
+      cholli
+    ];
    mainProgram = "rusty-path-of-building";
  };
 })
@@ -2,24 +2,24 @@
  stdenv,
  lib,
  fetchFromGitHub,
-  buildGoModule,
+  buildGo126Module,
  installShellFiles,
  versionCheckHook,
  writableTmpDirAsHomeHook,
 }:

-buildGoModule (finalAttrs: {
+buildGo126Module (finalAttrs: {
  pname = "scaleway-cli";
-  version = "2.52.0";
+  version = "2.53.0";

  src = fetchFromGitHub {
    owner = "scaleway";
    repo = "scaleway-cli";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-92OSk0oJQrLAllbfsJB9FUC8C+0jLQLjw9wYHG+Lc98=";
+    hash = "sha256-IxnDmmvWH17xd2djroikwrQq0bLexWeN8VHMPiNEBhU=";
  };

-  vendorHash = "sha256-1pi9WQZ6dwCVsJbpA+seIzRn5lFFOjYUvt8MKUHKcVg=";
+  vendorHash = "sha256-/UEE3XSbpwlywF8TMmp90bS537RRZG0yN0oq1sbrcPQ=";

  env.CGO_ENABLED = 0;

@@ -6,14 +6,14 @@

 python3.pkgs.buildPythonApplication (finalAttrs: {
  pname = "search-vulns";
-  version = "1.0.5";
+  version = "1.0.6";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "ra1nb0rn";
    repo = "search_vulns";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Or0B6ENoSpaoYwUsd2jrDKr5gHjORMxvTQzlkoNkPdw=";
+    hash = "sha256-0aqAjDJy+ShybYawUFyqKzz3yDut5n3t47lCEksykEU=";
    fetchSubmodules = true;
  };

@@ -11,13 +11,13 @@

 buildGoModule (finalAttrs: {
  pname = "seaweedfs";
-  version = "4.16";
+  version = "4.17";

  src = fetchFromGitHub {
    owner = "seaweedfs";
    repo = "seaweedfs";
    tag = finalAttrs.version;
-    hash = "sha256-BRdI/50YxwdCdBj91w6OPgTcOb7JkshkVSD8b8bHcYA=";
+    hash = "sha256-xy3gXw3cbFO3OkzgEmIecvxPJT15tn58FI4ppibckzE=";
  };

  vendorHash = "sha256-XbfKYftKfbJDkbp9DwVAs56w5lMvqdlW5cwhhivniBM=";
@@ -15,13 +15,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "sioyek";
-  version = "2.0.0-unstable-2026-02-21";
+  version = "2.0.0-unstable-2026-03-13";

  src = fetchFromGitHub {
    owner = "ahrm";
    repo = "sioyek";
-    rev = "b526a54a98e16275b118dfba73171177008d6970";
-    hash = "sha256-/ZYSiSuEGrbaWU7ZYXQl5ztL5AMGhOkDFyR2ftfEuVw=";
+    rev = "13a37e0e0ab77a76f8dbe3adf599ee916615b3db";
+    hash = "sha256-3bMVoF4f1+pZV3tdti8KNS17wWK1tmIgjKQUQS+Rzt8=";
  };

  buildInputs = [
--- a/Show More
+++ b/Show More