Merge master into staging-next

maintainers/maintainer-list.nix

@@ -9251,14 +9251,6 @@
     github = "gaelj";
     githubId = 8884632;
   };
-  gaelreyrol = {
-    email = "me@gaelreyrol.dev";
-    matrix = "@Zevran:matrix.org";
-    name = "Gaël Reyrol";
-    github = "gaelreyrol";
-    githubId = 498465;
-    keys = [ { fingerprint = "3492 D8FA ACFF 4C5F A56E  50B7 DFB9 B69A 2C42 7F61"; } ];
-  };
   GaetanLepage = {
     email = "gaetan@glepage.com";
     github = "GaetanLepage";

nixos/modules/services/misc/calibre-server.nix

@@ -176,5 +176,5 @@ in
 
   };
 
-  meta.maintainers = with lib.maintainers; [ gaelreyrol ];
+  meta.maintainers = [ ];
 }

nixos/modules/services/network-filesystems/openafs/client.nix

@@ -21,19 +21,28 @@ let
 
   cfg = config.services.openafsClient;
 
-  cellServDB = pkgs.fetchurl {
-    url = "http://dl.central.org/dl/cellservdb/CellServDB.2018-05-14";
-    sha256 = "1wmjn6mmyy2r8p10nlbdzs4nrqxy8a9pjyrdciy5nmppg4053rk2";
-  };
+  clientServDB = pkgs.writeText "client-cellServDB-${cfg.cellName}" (mkCellServDB cfg.cellServDB);
 
-  clientServDB = pkgs.writeText "client-cellServDB-${cfg.cellName}" (
-    mkCellServDB cfg.cellName cfg.cellServDB
-  );
+  cellServDB =
+    let
+      localCells = builtins.attrNames cfg.cellServDB;
+      localCellsRegex = lib.concatMapStringsSep "\\|" (lib.replaceStrings [ "." ] [ "\\." ]) localCells;
+      sedExpr = '':x /^>\(${localCellsRegex}\) / { n; :y /^>/! { n; by }; bx }; p'';
+      globalCommand =
+        if cfg.cellServDB != { } then
+          ''sed -n -e ${lib.escapeShellArg sedExpr} ${cfg.globalCellServDBFile}''
+        else
+          ''cat ${cfg.globalCellServDBFile}'';
+    in
+    pkgs.runCommand "CellServDB" { preferLocalBuild = true; } ''
+      ${lib.optionalString (cfg.globalCellServDBFile != null) ''${globalCommand} > $out''}
+      cat ${clientServDB} >> $out
+    '';
 
   afsConfig = pkgs.runCommand "afsconfig" { preferLocalBuild = true; } ''
     mkdir -p $out
     echo ${cfg.cellName} > $out/ThisCell
-    cat ${cellServDB} ${clientServDB} > $out/CellServDB
+    cp ${cellServDB} $out/CellServDB
     echo "${cfg.mountPoint}:${cfg.cache.directory}:${toString cfg.cache.blocks}" > $out/cacheinfo
   '';
 
@@ -64,28 +73,38 @@ in
         example = "grand.central.org";
       };
 
+      globalCellServDBFile = mkOption {
+        default = pkgs.openafs.cellservdb;
+        defaultText = literalExpression "pkgs.openafs.cellservdb";
+        type = types.nullOr types.pathInStore;
+        description = ''
+          Global CellServDB file to be deployed. Set to `null` to only deploy the
+          cells in `cellServDB`. Any cells defined in `cellServDB` will override
+          cells in the global file.
+        '';
+        example = lib.literalExpression "./CellServDB";
+      };
+
       cellServDB = mkOption {
-        default = [ ];
-        type =
-          with types;
-          listOf (submodule {
-            options = cellServDBConfig;
-          });
+        default = { };
+        type = cellServDBType cfg.cellName;
         description = ''
           This cell's database server records, added to the global
           CellServDB. See {manpage}`CellServDB(5)` man page for syntax. Ignored when
           `afsdb` is set to `true`.
         '';
-        example = [
-          {
-            ip = "1.2.3.4";
-            dnsname = "first.afsdb.server.dns.fqdn.org";
-          }
-          {
-            ip = "2.3.4.5";
-            dnsname = "second.afsdb.server.dns.fqdn.org";
-          }
-        ];
+        example = {
+          "dns.fqdn.org" = [
+            {
+              ip = "1.2.3.4";
+              dnsname = "first.afsdb.server.dns.fqdn.org";
+            }
+            {
+              ip = "2.3.4.5";
+              dnsname = "second.afsdb.server.dns.fqdn.org";
+            }
+          ];
+        };
       };
 
       cache = {
@@ -223,9 +242,7 @@ in
 
     environment.etc = {
       clientCellServDB = {
-        source = pkgs.runCommand "CellServDB" { preferLocalBuild = true; } ''
-          cat ${cellServDB} ${clientServDB} > $out
-        '';
+        source = cellServDB;
         target = "openafs/CellServDB";
         mode = "0644";
       };

nixos/modules/services/network-filesystems/openafs/lib.nix

@@ -3,15 +3,32 @@
 let
   inherit (lib)
     concatStringsSep
+    concatMapAttrsStringSep
     mkOption
     types
     optionalString
     ;
-
+  cellServDBMemberType = types.submodule {
+    options = {
+      ip = mkOption {
+        type = types.str;
+        default = "";
+        example = "1.2.3.4";
+        description = "IP Address of a database server";
+      };
+      dnsname = mkOption {
+        type = types.str;
+        default = "";
+        example = "afs.example.org";
+        description = "DNS full-qualified domain name of a database server";
+      };
+    };
+  };
+  cellServDBCellType = types.listOf cellServDBMemberType;
 in
 {
 
-  mkCellServDB =
+  mkCellServDB = concatMapAttrsStringSep "" (
     cellName: db:
     ''
       >${cellName}
@@ -19,23 +36,15 @@ in
     + (concatStringsSep "\n" (
       map (dbm: optionalString (dbm.ip != "" && dbm.dnsname != "") "${dbm.ip} #${dbm.dnsname}") db
     ))
-    + "\n";
+    + "\n"
+  );
 
   # CellServDB configuration type
-  cellServDBConfig = {
-    ip = mkOption {
-      type = types.str;
-      default = "";
-      example = "1.2.3.4";
-      description = "IP Address of a database server";
-    };
-    dnsname = mkOption {
-      type = types.str;
-      default = "";
-      example = "afs.example.org";
-      description = "DNS full-qualified domain name of a database server";
-    };
-  };
+  cellServDBType =
+    thisCell:
+    types.coercedTo (types.listOf types.anything) (m: { "${thisCell}" = m; }) (
+      types.attrsOf cellServDBCellType
+    );
 
   openafsMod = config.services.openafsClient.packages.module;
   openafsBin = config.services.openafsClient.packages.programs;

nixos/modules/services/network-filesystems/openafs/server.nix

@@ -67,10 +67,10 @@ let
       null;
 
   buCellServDB = pkgs.writeText "backup-cellServDB-${cfg.cellName}" (
-    mkCellServDB cfg.cellName cfg.roles.backup.cellServDB
+    mkCellServDB cfg.roles.backup.cellServDB
   );
 
-  useBuCellServDB = (cfg.roles.backup.cellServDB != [ ]) && (!cfg.roles.backup.enableFabs);
+  useBuCellServDB = (cfg.roles.backup.cellServDB != { }) && (!cfg.roles.backup.enableFabs);
 
   cfg = config.services.openafsServer;
 
@@ -128,9 +128,22 @@ in
       };
 
       cellServDB = mkOption {
-        default = [ ];
-        type = with types; listOf (submodule [ { options = cellServDBConfig; } ]);
-        description = "Definition of all cell-local database server machines.";
+        default = { };
+        type = cellServDBType cfg.cellName;
+        description = ''
+          Definition of all cell-local database server machines. If a single
+          list is provided, it will be used as the servers for `cellName`.
+        '';
+        example = [
+          {
+            ip = "1.2.3.4";
+            dnsname = "first.afsdb.server.dns.fqdn.org";
+          }
+          {
+            ip = "2.3.4.5";
+            dnsname = "second.afsdb.server.dns.fqdn.org";
+          }
+        ];
       };
 
       package = mkPackageOption pkgs "openafs" { };
@@ -226,8 +239,8 @@ in
           };
 
           cellServDB = mkOption {
-            default = [ ];
-            type = with types; listOf (submodule [ { options = cellServDBConfig; } ]);
+            default = { };
+            type = cellServDBType cfg.cellName;
             description = ''
               Definition of all cell-local backup database server machines.
               Use this when your cell uses less backup database servers than
@@ -288,9 +301,19 @@ in
 
   config = mkIf cfg.enable {
 
+    warnings =
+      lib.optional ((builtins.attrNames cfg.cellServDB) != [ cfg.cellName ]) ''
+        config.services.openafsServer.cellServDB should normally only contain servers for one cell. It currently contains servers for ${builtins.toString (builtins.attrNames cfg.cellServDB)}.
+      ''
+      ++
+        lib.optional (useBuCellServDB && (builtins.attrNames cfg.backup.cellServDB) != [ cfg.cellName ])
+          ''
+            config.services.openafsServer.backup.cellServDB should normally only contain servers for one cell. It currently contains servers for ${builtins.toString (builtins.attrNames cfg.cellServDB)}.
+          '';
+
     assertions = [
       {
-        assertion = cfg.cellServDB != [ ];
+        assertion = cfg.cellServDB != { } && (cfg.cellServDB."${cfg.cellName}" or [ ]) != [ ];
         message = "You must specify all cell-local database servers in config.services.openafsServer.cellServDB.";
       }
       {
@@ -308,7 +331,7 @@ in
         mode = "0644";
       };
       cellServDB = {
-        text = mkCellServDB cfg.cellName cfg.cellServDB;
+        text = mkCellServDB cfg.cellServDB;
         target = "openafs/server/CellServDB";
         mode = "0644";
       };
@@ -319,8 +342,9 @@ in
       };
       buCellServDB = {
         enable = useBuCellServDB;
-        text = mkCellServDB cfg.cellName cfg.roles.backup.cellServDB;
+        text = mkCellServDB cfg.roles.backup.cellServDB;
         target = "openafs/backup/CellServDB";
+        mode = "0644";
       };
     };
 
@@ -336,7 +360,6 @@ in
         preStart = ''
           mkdir -m 0755 -p /var/openafs
           ${optionalString (netInfo != null) "cp ${netInfo} /var/openafs/netInfo"}
-          ${optionalString useBuCellServDB "cp ${buCellServDB}"}
         '';
         serviceConfig = {
           ExecStart = "${openafsBin}/bin/bosserver -nofork";

nixos/modules/services/web-apps/actual.nix

@@ -17,7 +17,6 @@ let
     ;
 
   cfg = config.services.actual;
-  dataDir = "/var/lib/actual";
 
   formatType = pkgs.formats.json { };
 in
@@ -32,6 +31,26 @@ in
       description = "Whether to open the firewall for the specified port.";
     };
 
+    user = lib.mkOption {
+      type = lib.types.nullOr lib.types.str;
+      default = null;
+      description = ''
+        User account under which Actual runs.
+
+        If null is specified (default), a temporary user will be created by systemd. Otherwise won't be automatically created by the service.
+      '';
+    };
+
+    group = lib.mkOption {
+      type = lib.types.nullOr lib.types.str;
+      default = null;
+      description = ''
+        Group account under which Actual runs.
+
+        If null is specified (default), a temporary user will be created by systemd. Otherwise won't be automatically created by the service.
+      '';
+    };
+
     settings = mkOption {
       default = { };
       description = ''
@@ -53,12 +72,34 @@ in
             description = "The port to listen on";
             default = 3000;
           };
-        };
 
-        config = {
-          serverFiles = mkDefault "${dataDir}/server-files";
-          userFiles = mkDefault "${dataDir}/user-files";
-          dataDir = mkDefault dataDir;
+          dataDir = lib.mkOption {
+            type = lib.types.str;
+            default = "/var/lib/actual";
+            description = ''
+              Directory under which Actual runs and saves its data.
+
+              Changing this after you already have a working instance may make Actual fail to start, even if you move all files in the data dir. If migration is needed, refer to [this comment](https://github.com/actualbudget/actual/issues/3957#issuecomment-2567076794) for a fix.
+            '';
+          };
+
+          serverFiles = lib.mkOption {
+            type = lib.types.str;
+            default = "${cfg.settings.dataDir}/server-files";
+            defaultText = "\${cfg.settings.dataDir}/server-files";
+            description = ''
+              The server will put an account.sqlite file in this directory, which will contain the (hashed) server password, a list of all the budget files the server knows about, and the active session token (along with anything else the server may want to store in the future).
+            '';
+          };
+
+          userFiles = lib.mkOption {
+            type = lib.types.str;
+            default = "${cfg.settings.dataDir}/user-files";
+            defaultText = "\${cfg.settings.dataDir}/user-files";
+            description = ''
+              The server will put all the budget files in this directory as binary blobs.
+            '';
+          };
         };
       };
     };
@@ -80,12 +121,9 @@ in
 
       serviceConfig = {
         ExecStart = getExe cfg.package;
-        DynamicUser = true;
-        User = "actual";
-        Group = "actual";
         StateDirectory = "actual";
         RuntimeDirectory = "actual";
-        WorkingDirectory = dataDir;
+        WorkingDirectory = cfg.settings.dataDir;
         LimitNOFILE = "1048576";
         PrivateTmp = true;
         PrivateDevices = true;
@@ -107,6 +145,11 @@ in
         ProtectProc = "invisible";
         ProcSubset = "pid";
         ProtectSystem = "strict";
+        ReadWritePaths = [
+          cfg.settings.dataDir
+          cfg.settings.serverFiles
+          cfg.settings.userFiles
+        ];
         RestrictAddressFamilies = [
           "AF_INET"
           "AF_INET6"
@@ -120,7 +163,21 @@ in
           "@pkey"
         ];
         UMask = "0077";
-      };
+      }
+      // (
+        if cfg.user != null then
+          {
+            DynamicUser = false;
+            Group = cfg.group;
+            User = cfg.user;
+          }
+        else
+          {
+            DynamicUser = true;
+            User = "actual";
+            Group = "actual";
+          }
+      );
     };
   };
 

nixos/modules/system/activation/switchable-system.nix

@@ -78,67 +78,69 @@
           sha256sum = lib.getExe' pkgs.coreutils "sha256sum";
           diff = lib.getExe' pkgs.diffutils "diff";
         in
-        # bash
-        ''
-          incoming="''${1-}"
-          action="''${2-}"
+        lib.mkIf (lib.length config.system.switch.inhibitors > 0)
+          # bash
+          ''
+            incoming="''${1-}"
+            action="''${2-}"
 
-          if [ "$action" == "boot" ]; then
-            echo "Not checking switch inhibitors (action = $action)"
-            exit
-          fi
-
-          echo -n "Checking switch inhibitors..."
-
-          booted_inhibitors="$(${realpath} /run/booted-system)/switch-inhibitors"
-          booted_inhibitors_sha="$(
-            if [ -f "$booted_inhibitors" ]; then
-              ${sha256sum} - < "$booted_inhibitors"
-            else
-              echo 'none'
+            if [ "$action" == "boot" ]; then
+              echo "Not checking switch inhibitors (action = $action)"
+              exit
             fi
-          )"
 
-          if [ "$booted_inhibitors_sha" == "none" ]; then
-            echo
-            echo "The previous configuration did not specify switch inhibitors, nothing to check."
-            exit
-          fi
+            echo -n "Checking switch inhibitors..."
 
-          new_inhibitors="$(${realpath} "$incoming")/switch-inhibitors"
-          new_inhibitors_sha="$(
-            if [ -f "$new_inhibitors" ]; then
-              ${sha256sum} - < "$new_inhibitors"
-            else
-              echo 'none'
+            booted_inhibitors="$(${realpath} /run/booted-system)/switch-inhibitors"
+            booted_inhibitors_sha="$(
+              if [ -f "$booted_inhibitors" ]; then
+                ${sha256sum} - < "$booted_inhibitors"
+              else
+                echo 'none'
+              fi
+            )"
+
+            if [ "$booted_inhibitors_sha" == "none" ]; then
+              echo
+              echo "The previous configuration did not specify switch inhibitors, nothing to check."
+              exit
             fi
-          )"
 
-          if [ "$new_inhibitors_sha" == "none" ]; then
-            echo
-            echo "The new configuration does not specify switch inhibitors, nothing to check."
-            exit
-          fi
+            new_inhibitors="$(${realpath} "$incoming")/switch-inhibitors"
+            new_inhibitors_sha="$(
+              if [ -f "$new_inhibitors" ]; then
+                ${sha256sum} - < "$new_inhibitors"
+              else
+                echo 'none'
+              fi
+            )"
 
-          if [ "$new_inhibitors_sha" != "$booted_inhibitors_sha" ]; then
-            echo
-            echo "Found diff in switch inhibitors:"
-            echo
-            ${diff} --color "$booted_inhibitors" "$new_inhibitors"
-            echo
-            echo "The new configuration contains changes to packages that were"
-            echo "listed as switch inhibitors."
-            echo
-            echo "If you really want to switch into this configuration directly, then"
-            echo "you can set NIXOS_NO_CHECK=1 to ignore these pre-switch checks."
-            echo
-            echo "WARNING: doing so might cause the switch to fail or your system to become unstable."
-            echo
-            exit 1
-          else
-            echo " done"
-          fi
-        '';
+            if [ "$new_inhibitors_sha" == "none" ]; then
+              echo
+              echo "The new configuration does not specify switch inhibitors, nothing to check."
+              exit
+            fi
+
+            if [ "$new_inhibitors_sha" != "$booted_inhibitors_sha" ]; then
+              echo
+              echo "Found diff in switch inhibitors:"
+              echo
+              ${diff} --color "$booted_inhibitors" "$new_inhibitors"
+              echo
+              echo "The new configuration contains changes to packages that were"
+              echo "listed as switch inhibitors."
+              echo "You probably want to run 'nixos-rebuild boot' and reboot your system."
+              echo
+              echo "If you really want to switch into this configuration directly, then"
+              echo "you can set NIXOS_NO_CHECK=1 to ignore pre-switch checks."
+              echo
+              echo "WARNING: doing so might cause the switch to fail or your system to become unstable."
+              echo
+              exit 1
+            else
+              echo " done"
+            fi
+          '';
     };
   };
 }

nixos/tests/actual.nix

@@ -9,8 +9,47 @@
       services.actual.enable = true;
     };
 
+  nodes.machine2 =
+    { ... }:
+    {
+      services.actual = {
+        enable = true;
+        user = "actual";
+        group = "actual";
+        settings = {
+          port = 7000;
+          dataDir = "/var/lib/actual-test";
+        };
+      };
+
+      users.users.actual = {
+        group = "actual";
+        home = "/var/lib/actual-test";
+        isSystemUser = true;
+      };
+
+      users.groups.actual = { };
+
+      systemd.tmpfiles.settings = {
+        "10-actualdir" = {
+          "/var/lib/actual-test" = {
+            d = {
+              group = "actual";
+              mode = "0755";
+              user = "actual";
+            };
+          };
+        };
+      };
+    };
+
   testScript = ''
+    start_all()
+
     machine.wait_for_open_port(3000)
     machine.succeed("curl -fvvv -Ls http://localhost:3000/ | grep 'Actual'")
+
+    machine2.wait_for_open_port(7000)
+    machine2.succeed("curl -fvvv -Ls http://localhost:7000/ | grep 'Actual'")
   '';
 }

nixos/tests/all-tests.nix

@@ -1155,6 +1155,7 @@ in
   onlyoffice = runTest ./onlyoffice.nix;
   open-web-calendar = runTest ./web-apps/open-web-calendar.nix;
   open-webui = runTest ./open-webui.nix;
+  openafs = runTest ./openafs.nix;
   openarena = runTest ./openarena.nix;
   openbao = runTest ./openbao.nix;
   opencloud = runTest ./opencloud.nix;

nixos/tests/calibre-server.nix

@@ -7,7 +7,6 @@
 let
   inherit (pkgs.lib)
     concatStringsSep
-    maintainers
     mapAttrs
     mkMerge
     removeSuffix
@@ -114,8 +113,8 @@ mapAttrs (
         ${nodeName}.shutdown()
       '';
 
-      meta = with maintainers; {
-        maintainers = [ gaelreyrol ];
+      meta = {
+        maintainers = [ ];
       };
     }
   ))

nixos/tests/openafs.nix

@@ -0,0 +1,139 @@
+{ lib, ... }:
+let
+  cellName = "cell.com";
+  realmName = lib.toUpper cellName;
+in
+{
+  name = "openafs";
+  defaults =
+    { config, nodes, ... }:
+    let
+      cellServDB = {
+        ${cellName} = lib.mapAttrsToList (_: config: {
+          ip = config.networking.primaryIPAddress;
+          dnsname = "${config.networking.hostName}.${config.networking.domain}";
+        }) nodes;
+      };
+    in
+    {
+      config = {
+        virtualisation.vlans = [ 1 ];
+        networking.useDHCP = false; # Disable external connectivity
+        networking.domain = cellName;
+        networking.firewall.enable = false;
+
+        security.krb5 = {
+          enable = true;
+          settings.libdefaults.default_realm = realmName;
+        };
+        services.openafsClient = {
+          enable = true;
+          inherit cellName;
+          cellServDB = cellServDB // {
+            "grand.central.org" = [
+              {
+                ip = "1.1.1.1";
+                dnsname = "one.grand.central.org";
+              }
+            ];
+          };
+        };
+        services.openafsServer = {
+          enable = true;
+          inherit cellName cellServDB;
+        };
+        security.krb5.settings.realms.${realmName} = {
+          admin_server = nodes.a.networking.primaryIPAddress;
+          kdc = [ nodes.a.networking.primaryIPAddress ];
+        };
+      };
+    };
+  nodes.a = {
+    services.kerberos_server = {
+      enable = true;
+      settings.realms."CELL.COM".acl = [
+        {
+          principal = "admin";
+          access = [
+            "add"
+            "cpw"
+          ];
+        }
+      ];
+    };
+  };
+  nodes.b = { };
+
+  testScript = ''
+    import re
+
+    def setup_kdc(machine):
+      # Set up realm
+      machine.succeed(
+        "kdb5_util create -s -r CELL.COM -P master_key",
+        "systemctl restart kadmind.service kdc.service",
+      )
+      for unit in ["kadmind", "kdc"]:
+        machine.wait_for_unit(f"{unit}.service")
+      # Create admin and afs/ principals
+      machine.succeed(
+        "kadmin.local add_principal -randkey admin",
+        "rm -f /tmp/shared/admin.keytab",
+        "kadmin.local ktadd -k /tmp/shared/admin.keytab admin",
+        "kadmin.local add_principal -randkey -e aes256-cts-hmac-sha1-96:normal,aes128-cts-hmac-sha1-96:normal afs/${cellName}",
+      )
+      # Generate a keytab for afs/
+      out = machine.succeed(
+        "rm -f /tmp/shared/rxkad.keytab",
+        "kadmin.local ktadd -k /tmp/shared/rxkad.keytab -e aes256-cts-hmac-sha1-96:normal,aes128-cts-hmac-sha1-96:normal afs/${cellName}",
+      )
+      m = re.search(r"kvno (\d+)", out)
+      assert m
+      kvno = m.group(1)
+      return kvno
+
+    def setup_afs_daemons(machine, kvno):
+      machine.succeed(
+        "mkdir -p /vicepa",
+        "touch /vicepa/AlwaysAttach",
+      )
+      machine.succeed(*(
+        f"asetkey add rxkad_krb5 {kvno} {enctype} /tmp/shared/rxkad.keytab afs/${cellName}"
+        for enctype in (18, 17)
+      ))
+      machine.start_job("openafs-server")
+      machine.wait_until_succeeds("bos adduser localhost admin -localauth")
+
+    start_all()
+    kvno = setup_kdc(a)
+    setup_afs_daemons(a, kvno)
+    setup_afs_daemons(b, kvno)
+    # Create initial 'admin' user
+    # N.B. It can take 60+ seconds before the ptserver has quorum and accepts writes, so try a few times until it succeeds
+    a.wait_until_succeeds("pts createuser -name admin -localauth")
+    a.succeed(
+      "pts adduser admin system:administrators -localauth",
+    )
+    # Create initial volumes
+    a.wait_until_succeeds("vos listvol localhost -localauth")
+    a.succeed(
+      "vos create localhost vicepa root.afs -localauth",
+      "vos create localhost vicepa root.cell -localauth",
+    )
+    # Authenticate and add a file
+    a.succeed(
+      "kinit -k -t /tmp/shared/admin.keytab admin",
+      "aklog",
+      "echo pass > /afs/${cellName}/test.txt",
+    )
+    # Authenticate and read a file
+    b.succeed(
+      "kinit -k -t /tmp/shared/admin.keytab admin",
+      "aklog",
+    )
+    assert b.succeed("cat /afs/${cellName}/test.txt").strip() == "pass"
+
+    # Ensure the global CellServDB can be overridden.
+    assert a.succeed("fs listcells -n | grep grand.central.org").strip() == "Cell grand.central.org on hosts 1.1.1.1."
+  '';
+}

pkgs/applications/editors/vscode/extensions/default.nix

@@ -2656,8 +2656,8 @@ let
         mktplcRef = {
           name = "magit";
           publisher = "kahole";
-          version = "0.6.67";
-          hash = "sha256-cevda4fpNcZqnkN80Cjw4mDAzCvG2yWp95cr4i9zNKU=";
+          version = "0.6.68";
+          hash = "sha256-yLeCyq3aZI/WbwJpGxqy5fEY5s8kZETKYzusss5iYAY=";
         };
         meta = {
           changelog = "https://marketplace.visualstudio.com/items/kahole.magit/changelog";
@@ -4626,8 +4626,8 @@ let
         mktplcRef = {
           name = "ayu";
           publisher = "teabyii";
-          version = "1.1.6";
-          sha256 = "sha256-jC9y/a3kYbBlYYOUIuRIb7g9FQ2j4Z4X+hqmU0TA3kY=";
+          version = "1.1.7";
+          sha256 = "sha256-b83c4/63XHNmjUMrPCgpBhn2XA2tBcfPh5izfNS45gI=";
         };
         meta = {
           description = "Simple theme with bright colors and comes in three versions — dark, light and mirage for all day long comfortable work";
@@ -5212,8 +5212,8 @@ let
         mktplcRef = {
           name = "csharp-ls";
           publisher = "vytautassurvila";
-          version = "0.0.27";
-          hash = "sha256-kl6W1UQ36cNQNj3cOsMyZbxD6glaRm3W0Z1W+xuEcjs=";
+          version = "0.0.28";
+          hash = "sha256-gbYaZWPMmfCltPSr30aLglWMiYaRHZuDWp6CIW6caMI=";
         };
         meta = {
           changelog = "https://github.com/vytautassurvila/vscode-csharp-ls/blob/master/CHANGELOG.md";

pkgs/applications/editors/vscode/extensions/sourcegraph.amp/default.nix

@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     publisher = "sourcegraph";
     name = "amp";
-    version = "0.0.1767211791";
-    hash = "sha256-r8CjaSOXgnFkzcnyospFI3IwVpvc18KmYzwBpuv1Ab0=";
+    version = "0.0.1767715893";
+    hash = "sha256-/r+OMv0Ilyk6Ep1nF0LMFy9e0We3XfhpQhSt+L/UoOg=";
   };
 
   meta = {

pkgs/applications/emulators/libretro/cores/mame.nix

@@ -9,13 +9,13 @@
 }:
 mkLibretroCore {
   core = "mame";
-  version = "0-unstable-2025-12-21";
+  version = "0-unstable-2026-01-01";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "mame";
-    rev = "00cd2b406b2498139980a20145691d6769f83dae";
-    hash = "sha256-CraC2iwAkqRcu5EJQuUckg4Xo+lPTNvhuDgbUDRfKeU=";
+    rev = "b207f9c6fc93b9d21417a9e4424607840c71db6b";
+    hash = "sha256-n9vDYSzij01rRgUc8l763FCLXsFGHIsZxAIZ+N8IBGo=";
     fetchSubmodules = true;
   };
 

pkgs/applications/networking/browsers/chromium/info.json

@@ -1,10 +1,10 @@
 {
   "chromium": {
-    "version": "143.0.7499.169",
+    "version": "143.0.7499.192",
     "chromedriver": {
-      "version": "143.0.7499.170",
-      "hash_darwin": "sha256-1/wdCF7ADdn3JL2ZIxdpjxMqCdLB00vXjXI9vSrPk2I=",
-      "hash_darwin_aarch64": "sha256-aKOt2lgQ3133kDFDfHnvUhEycw8aYMgg/uJQHtiud7c="
+      "version": "143.0.7499.193",
+      "hash_darwin": "sha256-ZLNIyAmQS4dMcd+sz3Mz/m5HdhkJA/PIFnfr0GCXGBA=",
+      "hash_darwin_aarch64": "sha256-A5qycNQNb+Tw+YIx+RfndcG4vJ82EU/xlj9pW+AyeEY="
     },
     "deps": {
       "depot_tools": {
@@ -21,8 +21,8 @@
     "DEPS": {
       "src": {
         "url": "https://chromium.googlesource.com/chromium/src.git",
-        "rev": "164b20aab62509dad21fd46383951aeec084ad1e",
-        "hash": "sha256-WqpZXjcklOyPIvEmWi23bC8D/vVXMLkAmFrQQ13Iy6o=",
+        "rev": "be2c1f4fd451578a9ada68a0ac12d659362b44bf",
+        "hash": "sha256-YbYtW4UmlFoqXUSvPc7H+Fe0hUM+t9JwpBHKC98pY98=",
         "recompress": true
       },
       "src/third_party/clang-format/script": {

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -1283,13 +1283,13 @@
     "vendorHash": "sha256-rWiafaFE1RolO9JUN1WoW4EWJjR7kpfeVEOTLf21j50="
   },
   "tailscale_tailscale": {
-    "hash": "sha256-EiaQKO4Pg+89Mc8nwSarKhHBtr+yEKWEyZ4i0LeOfu4=",
+    "hash": "sha256-G8vSPFGtx9klRCW8Rab8UHR1AK1Kt421WMsCE0pohR0=",
     "homepage": "https://registry.terraform.io/providers/tailscale/tailscale",
     "owner": "tailscale",
     "repo": "terraform-provider-tailscale",
-    "rev": "v0.24.0",
+    "rev": "v0.25.0",
     "spdx": "MIT",
-    "vendorHash": "sha256-GhXplzkv0ouWSo4fNs7C0h87sFguhre6ez4d0Pgd/5w="
+    "vendorHash": "sha256-UWdPgXvJ68xRUNbAhBQ2SjGkerRlwNUjMA8Yu9EAowo="
   },
   "telmate_proxmox": {
     "hash": "sha256-1aKKlOIk1mH4yx66eD635d1IaUWXIiBGHEt4A2F2mGM=",
@@ -1382,13 +1382,13 @@
     "vendorHash": "sha256-6QgkZp3Ay5bRLwy8dxT5904KW2rBcz5yrYqIlvQToJk="
   },
   "trozz_pocketid": {
-    "hash": "sha256-rUCjvJKLZE+cSsHZdntBF9WpZDtIkVkukmLGEvGVC8s=",
+    "hash": "sha256-+YR1m81CoOj1uS7nQvrsYHfYyOovD+X/XlItaqXdVeE=",
     "homepage": "https://registry.terraform.io/providers/Trozz/pocketid",
     "owner": "Trozz",
     "repo": "terraform-provider-pocketid",
-    "rev": "v0.1.5",
+    "rev": "v0.1.6",
     "spdx": "MIT",
-    "vendorHash": "sha256-0oX7f4L5eljmOL8+g6KYdBcoIwng87+pi3XCXKDEb3w="
+    "vendorHash": "sha256-ozAYLFkilSK0Nygdglhz3VNtRVKoLDGRnrVvg4nWyH4="
   },
   "turbot_turbot": {
     "hash": "sha256-hUiILS5OVpa5MurChW2U9DQElQxzXo8yQfHRjWcd8cc=",

pkgs/by-name/ac/act/package.nix

@@ -8,7 +8,7 @@
 }:
 
 let
-  version = "0.2.83";
+  version = "0.2.84";
 in
 buildGoModule {
   pname = "act";
@@ -18,10 +18,10 @@ buildGoModule {
     owner = "nektos";
     repo = "act";
     tag = "v${version}";
-    hash = "sha256-3z6+WcfxHyPTgsOHs2NPd4x7buMBr3jCA2zqd6kBb6k=";
+    hash = "sha256-LV6xJI2V68Uwy61mih/siw1vc90EB9maomxeKwgaB68=";
   };
 
-  vendorHash = "sha256-EQgW+I0HjJhKioN0Moke9i+OggyJOSOHyatYnED4NX4=";
+  vendorHash = "sha256-H7MVh/VbkYvivM/4zATfczib3fgk5vYHeQkHsG+cboY=";
 
   doCheck = false;
 

pkgs/by-name/ap/apko/package.nix

@@ -11,13 +11,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "apko";
-  version = "0.30.31";
+  version = "0.30.34";
 
   src = fetchFromGitHub {
     owner = "chainguard-dev";
     repo = "apko";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-/XxG6UadYaeeusgH53NVFjuEriUxkf5A9h2wGdps0NQ=";
+    hash = "sha256-kKYjy3Z5Irel+P2B2Ri6hyPJZ+UuWg7vJypOSN0Rdqw=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.
     leaveDotGit = true;
@@ -61,7 +61,7 @@ buildGoModule (finalAttrs: {
 
   checkFlags = [
     # requires networking (apk.chainreg.biz and dl-cdn.alpinelinux.org)
-    "-skip=TestInitDB_ChainguardDiscovery|TestFetchPackage"
+    "-skip=TestInitDB_ChainguardDiscovery|TestFetchPackage|TestLock/apko-discover"
   ];
 
   postInstall =

pkgs/by-name/as/asciidoctor-with-extensions/Gemfile

@@ -11,3 +11,5 @@ gem 'asciidoctor-revealjs'
 gem 'coderay'
 gem 'pygments.rb'
 gem 'rouge'
+gem 'text-hyphen'
+gem 'tilt'

pkgs/by-name/as/asciidoctor-with-extensions/Gemfile.lock

@@ -128,7 +128,9 @@ GEM
       rb-fsevent (~> 0.9, >= 0.9.4)
       rb-inotify (~> 0.9, >= 0.9.7)
     stringio (3.1.8)
+    text-hyphen (1.5.0)
     thread_safe (0.3.6)
+    tilt (2.6.1)
     time (0.4.1)
       date
     treetop (1.6.18)
@@ -152,6 +154,8 @@ DEPENDENCIES
   coderay
   pygments.rb
   rouge
+  text-hyphen
+  tilt
 
 BUNDLED WITH
    2.7.2

pkgs/by-name/as/asciidoctor-with-extensions/gemset.nix

@@ -666,6 +666,16 @@
     };
     version = "3.1.8";
   };
+  text-hyphen = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "01js0wxz84cc5hzxgqbcqnsa0y6crhdi6plmgkzyfm55p0rlajn4";
+      type = "gem";
+    };
+    version = "1.5.0";
+  };
   thread_safe = {
     groups = [ "default" ];
     platforms = [ ];
@@ -676,6 +686,16 @@
     };
     version = "0.3.6";
   };
+  tilt = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "0w27v04d7rnxjr3f65w1m7xyvr6ch6szjj2v5wv1wz6z5ax9pa9m";
+      type = "gem";
+    };
+    version = "2.6.1";
+  };
   time = {
     dependencies = [ "date" ];
     groups = [ "default" ];

pkgs/by-name/as/asmjit/package.nix

@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation {
   pname = "asmjit";
-  version = "0-unstable-2025-12-13";
+  version = "0-unstable-2026-01-03";
 
   src = fetchFromGitHub {
     owner = "asmjit";
     repo = "asmjit";
-    rev = "c87860217e43e2a06060fcaae5b468f6a55b9963";
-    hash = "sha256-9JSAONQe5cS/dP5GLd5TJroOPPeI7IEmt/8WDq6MP2k=";
+    rev = "f64c90818ff2ef87ec4f73f44d0a7e73fbff3229";
+    hash = "sha256-+tDWV25KxC+0hhnyC/9b7ixpP7PZsUHzTZB8KmpWtO8=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/as/ast-grep/package.nix

@@ -11,13 +11,13 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ast-grep";
-  version = "0.40.3";
+  version = "0.40.4";
 
   src = fetchFromGitHub {
     owner = "ast-grep";
     repo = "ast-grep";
     tag = finalAttrs.version;
-    hash = "sha256-kSaDSXhE5PDQj2taQnYUttEbc3dm9VlqwIelApPlpsI=";
+    hash = "sha256-RPL7EpI4c0CA40s2MfkpmgQODqHtuCVx0dGnIYbZY5Y=";
   };
 
   # error: linker `aarch64-linux-gnu-gcc` not found
@@ -25,7 +25,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     rm .cargo/config.toml
   '';
 
-  cargoHash = "sha256-mz3+483vEL31kQ2oyM0GrwkFVxvPnORalQEaEBQ6/Js=";
+  cargoHash = "sha256-sFRSoJRlJRPv7NYIVivDGhG78oPpXHgBU6TdG8+7X/Y=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/aw/aw-watcher-window-wayland/package.nix

@@ -9,13 +9,13 @@
 }:
 rustPlatform.buildRustPackage {
   pname = "aw-watcher-window-wayland";
-  version = "0-unstable-2024-10-08";
+  version = "0-unstable-2025-12-31";
 
   src = fetchFromGitHub {
     owner = "ActivityWatch";
     repo = "aw-watcher-window-wayland";
-    rev = "58bf86a6984cb01fa750c84ce468c7ccb167f796";
-    hash = "sha256-SnlShM44jnQiZGg5mjreZg1bsjFLNYMjC/krR1TXTE4=";
+    rev = "aea9aca029bd33d373bf53946a16dc05ef81e0b3";
+    hash = "sha256-3o3IVf2YeZ1qGokezPvuLnUaqiA/uzm4wCXvgNHIMW4=";
   };
 
   cargoHash = "sha256-WWT8tOrHPf5x3bXsVPt32VKut4qK+K8gickBfEc0zmk=";

pkgs/by-name/ba/badkeys/package.nix

@@ -8,14 +8,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "badkeys";
-  version = "0.0.15";
+  version = "0.0.16";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "badkeys";
     repo = "badkeys";
     tag = "v${version}";
-    hash = "sha256-unBPdNrXwWh1EkbTZKAy4E0aASpeyT+mz3liASTzj4o=";
+    hash = "sha256-pWbrp+2CBU+dxyXUXT+oSS2fvPjO7qSVHEcoHpXR4JM=";
   };
 
   build-system = with python3Packages; [

pkgs/by-name/ba/bazel_8/package.nix

@@ -31,7 +31,7 @@
   cctools,
   # Allow to independently override the jdks used to build and run respectively
   jdk_headless,
-  version ? "8.4.2",
+  version ? "8.5.0",
 }:
 
 let
@@ -45,7 +45,7 @@ let
 
   src = fetchzip {
     url = "https://github.com/bazelbuild/bazel/releases/download/${version}/bazel-${version}-dist.zip";
-    hash = "sha256-5oNYKHPaDkpunl6oC104Rh1wAEMWfLfvCFdGHlXZn4o=";
+    hash = "sha256-L8gnWpQAeHMUbydrrEtZ6WGIzhunDBWCNWMA+3dAKT0=";
     stripRoot = false;
   };
 

pkgs/by-name/bi/biscuit-cli/package.nix

@@ -32,10 +32,7 @@ rustPlatform.buildRustPackage rec {
   meta = {
     description = "CLI to generate and inspect biscuit tokens";
     homepage = "https://www.biscuitsec.org/";
-    maintainers = with lib.maintainers; [
-      shlevy
-      gaelreyrol
-    ];
+    maintainers = with lib.maintainers; [ shlevy ];
     license = lib.licenses.bsd3;
     mainProgram = "biscuit";
   };

pkgs/by-name/bl/blink1-tool/package.nix

@@ -8,14 +8,14 @@
 
 stdenv.mkDerivation rec {
   pname = "blink1";
-  version = "2.2.0";
+  version = "2.4.0";
 
   src = fetchFromGitHub {
     owner = "todbot";
     repo = "blink1-tool";
     tag = "v${version}";
     fetchSubmodules = true;
-    hash = "sha256-xuCjPSQUQ/KOcdsie/ndecUiEt+t46m4eI33PXJoAAY=";
+    hash = "sha256-9kbWZ0vq+A3y8IeqvK1HnWWgxXaieu1eU8l+om5F2/w=";
   };
 
   postPatch = ''

pkgs/by-name/bl/bluefish/package.nix

@@ -14,11 +14,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bluefish";
-  version = "2.2.17";
+  version = "2.2.19";
 
   src = fetchurl {
     url = "mirror://sourceforge/bluefish/bluefish-${finalAttrs.version}.tar.bz2";
-    hash = "sha256-Onn2Ql4Uk56hNPlsFCTjqsBb7pWQS+Q0WBiDB4p7clM=";
+    hash = "sha256-tXTHwSiX3c73Pxmfr6H5i/w2asdvCr5/l6emLIB/kq4=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/br/brev-cli/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule rec {
   pname = "brev-cli";
-  version = "0.6.315";
+  version = "0.6.316";
 
   src = fetchFromGitHub {
     owner = "brevdev";
     repo = "brev-cli";
     rev = "v${version}";
-    sha256 = "sha256-yh2swlPjBCwLKeND4bfCCNHWJSBQvjhIT16fHWVpDE4=";
+    sha256 = "sha256-L1NpFbZXHxQQJzcLHkOIcCnHu9HRybM0R+Iz1qOheGs=";
   };
 
   vendorHash = "sha256-CzGuEbq4I1ygYQsoyyXC6gDBMLg21dKQTKkrbwpAR2U=";

pkgs/by-name/br/brotato/package.nix

@@ -0,0 +1,76 @@
+{
+  lib,
+  stdenv,
+  fetchurl,
+  makeWrapper,
+  godot3,
+  libicns,
+  copyDesktopItems,
+  makeDesktopItem,
+  requireFile,
+}:
+stdenv.mkDerivation (finalAttrs: {
+  pname = "brotato";
+  version = "1.1.13.2";
+
+  src = requireFile {
+    name = "Brotato.pck";
+    url = "https://store.epicgames.com/en-US/p/brotato-ed4097";
+    hash = "sha256-/k/rnypHS3Gtj5nHb1cnx1JvCiJAKe+1JxlXolWksS0=";
+  };
+
+  srcIcon = fetchurl {
+    name = "brotato.icns";
+    url = "https://shared.fastly.steamstatic.com/community_assets/images/apps/1942280/c096e6b30bcb9749183fe5d1b78f77de7ae89383.icns";
+    hash = "sha256-6ZZ1kqdOjqwIByrX1Bqrhy2yMaShlsbsEhuDBTK77gw=";
+  };
+
+  dontUnpack = true;
+
+  nativeBuildInputs = [
+    makeWrapper
+    godot3
+    libicns
+    copyDesktopItems
+  ];
+
+  installPhase = ''
+    runHook preInstall
+    mkdir -p $out/bin
+
+    makeWrapper ${lib.getExe godot3} $out/bin/brotato \
+      --add-flags "--main-pack $src"
+
+    cp $srcIcon brotato.icns
+    icns2png -x brotato.icns
+    mkdir -p $out/share/icons/hicolor/512x512/apps
+    install -Dm644 brotato_512x512x32.png $out/share/icons/hicolor/512x512/apps/brotato.png
+
+    runHook postInstall
+  '';
+
+  desktopItems = [
+    (makeDesktopItem {
+      name = "brotato";
+      desktopName = "Brotato";
+      exec = "brotato";
+      icon = "brotato";
+      comment = finalAttrs.meta.description;
+      categories = [
+        "Game"
+        "ActionGame"
+        "Shooter"
+      ];
+      terminal = false;
+    })
+  ];
+
+  meta = {
+    description = "Only potato capable of handling 6 weapons at the same time";
+    homepage = "https://www.blobfishgames.com/";
+    license = lib.licenses.unfree;
+    maintainers = with lib.maintainers; [ appsforartists ];
+    platforms = lib.platforms.linux;
+    mainProgram = "brotato";
+  };
+})

pkgs/by-name/c2/c2patool/package.nix

@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "c2patool";
-  version = "0.26.8";
+  version = "0.26.9";
 
   src = fetchFromGitHub {
     owner = "contentauth";
     repo = "c2pa-rs";
     tag = "c2patool-v${finalAttrs.version}";
-    hash = "sha256-2LZeXy/uuWH2BW9bmpRs+a2G7BOFOTPGS03Efn96Dp8=";
+    hash = "sha256-hSt+BfcFtV0ooWk9z9mw2m9Lw9vvi9r6XNkbEskL8yU=";
   };
 
-  cargoHash = "sha256-Qdl7uIfS993a3FPwAXbQVLwsEgFHLaYN48Elw4JMYpQ=";
+  cargoHash = "sha256-hlFthmanwTYOmw8Vu7eS7xQdvyKDEyT4joQYJNEnmK8=";
 
   # use the non-vendored openssl
   env.OPENSSL_NO_VENDOR = 1;

pkgs/by-name/ca/calibre/package.nix

@@ -38,11 +38,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "calibre";
-  version = "8.14.0";
+  version = "8.15.0";
 
   src = fetchurl {
     url = "https://download.calibre-ebook.com/${finalAttrs.version}/calibre-${finalAttrs.version}.tar.xz";
-    hash = "sha256-97kkjzjbrdmiWpNaz9nSt6BbgVvczsxunLrKVJvqxVQ=";
+    hash = "sha256-Wnv+S/4ajebu87+R+pft9Ka//sD12SsH6+1nXVx/XrQ=";
   };
 
   patches =

pkgs/by-name/ci/ciel/package.nix

@@ -16,16 +16,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "ciel";
-  version = "3.9.10";
+  version = "3.9.11";
 
   src = fetchFromGitHub {
     owner = "AOSC-Dev";
     repo = "ciel-rs";
     tag = "v${version}";
-    hash = "sha256-WpP3rwiGXA5oeBZ3wQwSXPmRT5+zUOm2d1HTEdvnHFc=";
+    hash = "sha256-x26qy9dtycu8aRwMi3BNo15jthde2OVnwumSCwVt32c=";
   };
 
-  cargoHash = "sha256-zby+QrzX7M714y50j2ZyfXYRhWeAwZbbHZF8KsjS/Hc=";
+  cargoHash = "sha256-gspNRky0cYBWPnev0RJoMwqE2aRXHRqGSM/MDEY1Pp4=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/cn/cnquery/package.nix

@@ -6,18 +6,18 @@
 
 buildGoModule rec {
   pname = "cnquery";
-  version = "12.16.0";
+  version = "12.17.0";
 
   src = fetchFromGitHub {
     owner = "mondoohq";
     repo = "cnquery";
     tag = "v${version}";
-    hash = "sha256-dArqHTlygqlSl3+yPoG94InGfIJsw26yh2VWoaibI58=";
+    hash = "sha256-CtvISe/9AkPCMMpclIAPP9rw9OAzjbwLXpAQaOPaG1s=";
   };
 
   subPackages = [ "apps/cnquery" ];
 
-  vendorHash = "sha256-AldUs9cWsNZ5zgeBwe40b1f4NlOReY54V6O+0gkbY7Y=";
+  vendorHash = "sha256-/6r+1ZCSaVJkNxG/vrF+rvSggEsYSA2GzNFaCfweiJM=";
 
   ldflags = [
     "-w"

pkgs/by-name/co/codebuff/package-lock.json

@@ -5,7 +5,7 @@
   "packages": {
     "": {
       "dependencies": {
-        "codebuff": "^1.0.552"
+        "codebuff": "^1.0.565"
       }
     },
     "node_modules/chownr": {
@@ -18,9 +18,9 @@
       }
     },
     "node_modules/codebuff": {
-      "version": "1.0.552",
-      "resolved": "https://registry.npmjs.org/codebuff/-/codebuff-1.0.552.tgz",
-      "integrity": "sha512-1n+APBj0Ui0L/yzaLFLctkmz7ApEaMiGYvBwhe+m6nEn4AysBAavJakC80hhMLVJOJ1iBPo6GVNeUbtPx2AULw==",
+      "version": "1.0.565",
+      "resolved": "https://registry.npmjs.org/codebuff/-/codebuff-1.0.565.tgz",
+      "integrity": "sha512-tYuW8FZ+vxsZOo4ZE1p87p6z0dDGqshCV0H3nE2WU8uv1DESb4HdhVQOioiFLOhyCM4iRx06gQwphUHxKyLZ6Q==",
       "cpu": [
         "x64",
         "arm64"

pkgs/by-name/co/codebuff/package.nix

@@ -6,14 +6,14 @@
 
 buildNpmPackage rec {
   pname = "codebuff";
-  version = "1.0.552";
+  version = "1.0.565";
 
   src = fetchzip {
     url = "https://registry.npmjs.org/codebuff/-/codebuff-${version}.tgz";
-    hash = "sha256-ATk5X+HdxTu4Pxq+gyUlpj9GNl7q9GK0jbhv9io7obQ=";
+    hash = "sha256-d27TTkr5pgo0m4CeLtOlcO5FimlJwp0D9TXQHXW7vYc=";
   };
 
-  npmDepsHash = "sha256-DibaJSJyq6vMH4Vpu0oqQskJzVeikQuf5mVo9Xc3Pww=";
+  npmDepsHash = "sha256-TJd+0gXQIrXuqFaYO4OAHtZc2Cm6cOt9DtO/QAH3ZYc=";
 
   postPatch = ''
     cp ${./package-lock.json} package-lock.json

pkgs/by-name/co/codecrafters-cli/package.nix

@@ -7,13 +7,13 @@
 
 buildGoModule rec {
   pname = "codecrafters-cli";
-  version = "44";
+  version = "45";
 
   src = fetchFromGitHub {
     owner = "codecrafters-io";
     repo = "cli";
     tag = "v${version}";
-    hash = "sha256-eyKQMMF9EEF55r+Q1QcqiswctXCqetgnAKQJTwaC60s=";
+    hash = "sha256-Frr9kk0Si2W2UqMibg8caH+eYSPKOgyMN1YqOpPCTDg=";
     # A shortened git commit hash is part of the version output, and is
     # needed at build time. Use the `.git` directory to retrieve the
     # commit SHA, and remove the directory afterwards since it is not needed

pkgs/by-name/co/comet-gog/package.nix

@@ -15,9 +15,9 @@
 let
   versionInfoTable = {
     "latest" = {
-      version = "0.3.1";
-      srcHash = "sha256-asg2xp9A5abmsF+CgOa+ScK2sQwSNFQXD5Qnm76Iyhg=";
-      cargoHash = "sha256-K0lQuk2PBwnVlkRpYNo4Z7to/Lx2fY6RIlkgmMjvEtc=";
+      version = "0.3.2";
+      srcHash = "sha256-DUkeOkUf9roZGKqdjoy/DfUL1OrVfSVjMhEvfACLEoo=";
+      cargoHash = "sha256-AiBoM7rywsuokz/fmLmye630N+t1GtwZsxkmtlH5MI8=";
     };
     # version pin that is compatible with heroic
     "heroic" = {

pkgs/by-name/co/copybara/package.nix

@@ -13,11 +13,11 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "copybara";
-  version = "20251229";
+  version = "20260105";
 
   src = fetchurl {
     url = "https://github.com/google/copybara/releases/download/v${finalAttrs.version}/copybara_deploy.jar";
-    hash = "sha256-H+3VHZ/RCM2rZPSwIpi8shFrtNJ5f+/HPLPnhadDttg=";
+    hash = "sha256-CpDon4iSop8xXoon09M4v0xVPsITXBhKsh06ositBQk=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/co/coroot-node-agent/package.nix

@@ -7,13 +7,13 @@
 
 buildGoModule rec {
   pname = "coroot-node-agent";
-  version = "1.27.1";
+  version = "1.27.2";
 
   src = fetchFromGitHub {
     owner = "coroot";
     repo = "coroot-node-agent";
     rev = "v${version}";
-    hash = "sha256-pBSKnQcNBj5gRVpcEKw7CylU9jj4tBeIs0u3F4AmM1o=";
+    hash = "sha256-bA23qnC94hrmyQWR5kAKR27wzs55AJPC3Ix/l/9YCEY=";
   };
 
   vendorHash = "sha256-jMR/ylMEgNDOn5mDkJU38h9h2rinCX7/jtOyjDos5Qc=";

pkgs/by-name/co/corsix-th/package.nix

@@ -18,13 +18,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "corsix-th";
-  version = "0.69.1";
+  version = "0.69.2";
 
   src = fetchFromGitHub {
     owner = "CorsixTH";
     repo = "CorsixTH";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-Jrf3PhgnJUBGy+ZcSPjU5tQFyuTmnn5+8P6LujsoSAg=";
+    hash = "sha256-Dohql0AJspcnGhoDKvszw84/YKGy7IlIfk4pWvjG+8o=";
   };
 
   patches = [

pkgs/by-name/do/dosage/package.nix

@@ -2,15 +2,16 @@
   lib,
   python3Packages,
   fetchPypi,
+  nix-update-script,
 }:
 
 python3Packages.buildPythonApplication rec {
   pname = "dosage";
-  version = "3.0";
+  version = "3.2";
 
   src = fetchPypi {
     inherit pname version;
-    sha256 = "sha256-mHV/U9Vqv7fSsLYNrCXckkJ1YpsccLd8HsJ78IwLX0Y=";
+    sha256 = "sha256-MHikoqbsQ2WkDi+S+1fhHuJy/cwzHu6PVy/JfALNJUI=";
   };
 
   pyproject = true;
@@ -24,21 +25,16 @@ python3Packages.buildPythonApplication rec {
   build-system = [ python3Packages.setuptools-scm ];
 
   dependencies = with python3Packages; [
-    colorama
+    brotli
     imagesize
     lxml
-    requests
-    six
     platformdirs
+    requests
+    rich
+    zstandard
   ];
 
-  disabledTests = [
-    # need network connect to api.github.com
-    "test_update_available"
-    "test_no_update_available"
-    "test_update_broken"
-    "test_current"
-  ];
+  passthru.updateScript = nix-update-script { };
 
   meta = {
     description = "Comic strip downloader and archiver";

pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix

@@ -1,7 +1,7 @@
 { mkDprintPlugin }:
 mkDprintPlugin {
   description = "Biome (JS/TS) wrapper plugin";
-  hash = "sha256-HYbQ0lyOe91AI2In9YZ6SXNzgEmgYHBvgtU/iVq+Gvc=";
+  hash = "sha256-P5mAFdr+vw6ogju0Qg6E9sbuTASaZD1Wr4BHt70lCy8=";
   initConfig = {
     configExcludes = [ "**/node_modules" ];
     configKey = "biome";
@@ -16,6 +16,6 @@ mkDprintPlugin {
   };
   pname = "dprint-plugin-biome";
   updateUrl = "https://plugins.dprint.dev/dprint/biome/latest.json";
-  url = "https://plugins.dprint.dev/biome-0.11.7.wasm";
-  version = "0.11.7";
+  url = "https://plugins.dprint.dev/biome-0.11.10.wasm";
+  version = "0.11.10";
 }

pkgs/by-name/fa/fasmg/package.nix

@@ -14,11 +14,11 @@
 
 stdenv.mkDerivation rec {
   pname = "fasmg";
-  version = "ktge";
+  version = "l04h";
 
   src = fetchzip {
     url = "https://flatassembler.net/fasmg.${version}.zip";
-    sha256 = "sha256-z/2SeN6FgRvLg8hA+lle/f2qEkce1GF1cC0uSnXExhg=";
+    sha256 = "sha256-LPRDNtkNVlA2RFvIncFWaCtJ/gH7uApqJPizeO7BmrM=";
     stripRoot = false;
   };
 

pkgs/by-name/fl/flow/gcc-15-compat.patch

@@ -0,0 +1,12 @@
+diff --git a/src/third-party/fuzzy-path/vendor/MatcherBase.h b/src/third-party/fuzzy-path/vendor/MatcherBase.h
+index fbaabc3d92..57c0c58fb2 100644
+--- a/src/third-party/fuzzy-path/vendor/MatcherBase.h
++++ b/src/third-party/fuzzy-path/vendor/MatcherBase.h
+@@ -1,6 +1,7 @@
+ #pragma once
+ 
+ #include <memory>
++#include <cstdint>
+ #include <string>
+ #include <unordered_map>
+ #include <vector>

pkgs/by-name/fl/flow/package.nix

@@ -2,27 +2,35 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  ocamlPackages,
+  ocaml-ng,
   dune,
+  versionCheckHook,
 }:
 
-stdenv.mkDerivation rec {
+let
+  ocamlPackages = ocaml-ng.ocamlPackages.overrideScope (
+    self: super: {
+      ppxlib = super.ppxlib.override { version = "0.33.0"; };
+    }
+  );
+in
+stdenv.mkDerivation (finalAttrs: {
   pname = "flow";
-  version = "0.288.0";
+  version = "0.295.0";
 
   src = fetchFromGitHub {
     owner = "facebook";
     repo = "flow";
-    tag = "v${version}";
-    hash = "sha256-9KApZvjOSwR9wcO7nRmpPf2M5SzmV0Z0bM7O8StqZK0=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Mqx07dJAYIesp09RmKr74rLKRkG46nHQERhuQ7AyAiM=";
   };
 
-  makeFlags = [ "FLOW_RELEASE=1" ];
+  patches = [
+    # error: 'uint64_t' does not name a type
+    ./gcc-15-compat.patch
+  ];
 
-  installPhase = ''
-    install -Dm755 bin/flow $out/bin/flow
-    install -Dm644 resources/shell/bash-completion $out/share/bash-completion/completions/flow
-  '';
+  makeFlags = [ "FLOW_RELEASE=1" ];
 
   strictDeps = true;
 
@@ -52,13 +60,28 @@ stdenv.mkDerivation rec {
     ++ lib.optionals stdenv.hostPlatform.isLinux [ inotify ]
   );
 
+  installPhase = ''
+    runHook preInstall
+
+    install -Dm755 bin/flow $out/bin/flow
+    install -Dm644 resources/shell/bash-completion $out/share/bash-completion/completions/flow
+
+    runHook postInstall
+  '';
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
   meta = {
     description = "Static type checker for JavaScript";
     mainProgram = "flow";
     homepage = "https://flow.org/";
-    changelog = "https://github.com/facebook/flow/blob/v${version}/Changelog.md";
+    changelog = "https://github.com/facebook/flow/blob/${finalAttrs.src.tag}/Changelog.md";
     license = lib.licenses.mit;
     platforms = ocamlPackages.ocaml.meta.platforms;
     maintainers = with lib.maintainers; [ puffnfresh ];
   };
-}
+})

pkgs/by-name/fr/frankenphp/package.nix

@@ -131,9 +131,7 @@ buildGoModule rec {
     homepage = "https://github.com/dunglas/frankenphp";
     license = lib.licenses.mit;
     mainProgram = "frankenphp";
-    maintainers = with lib.maintainers; [
-      gaelreyrol
-    ];
+    maintainers = [ ];
     platforms = lib.platforms.linux ++ lib.platforms.darwin;
   };
 }

pkgs/by-name/fr/frp/package.nix

@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "frp";
-  version = "0.65.0";
+  version = "0.66.0";
 
   src = fetchFromGitHub {
     owner = "fatedier";
     repo = "frp";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-H7iFrp+XevT4+3b72EkBTJKMGSPGCmRbi56RQIOXaMg=";
+    hash = "sha256-GFvXdhX7kA43kppWWdL7KhummUCqpa1cQ7V2d9ISGfo=";
   };
 
-  vendorHash = "sha256-lwLBGVN9wQLT8J5EyGVf1gsC89GQms2NXh9YTfjYKhY=";
+  vendorHash = "sha256-m5ECF0cgp2LfsTKey02MHz5TfqfzOCT5cU5trUfrOjY=";
 
   doCheck = false;
 

pkgs/by-name/ga/gate/package.nix

@@ -6,7 +6,7 @@
 
 let
   pname = "gate";
-  version = "0.62.0";
+  version = "0.62.1";
 in
 buildGoModule {
   inherit pname version;
@@ -15,7 +15,7 @@ buildGoModule {
     owner = "minekube";
     repo = "gate";
     tag = "v${version}";
-    hash = "sha256-8zvHC6Ghf2IziCLYTxGe/z3u6li37EBOb5AK2gGhoUQ=";
+    hash = "sha256-CHRTSesJRj+gDLP01Jd/UmF8nPhJlipXDfGIL6qD0Hw=";
   };
 
   vendorHash = "sha256-f7SkECS80Lwkd0xSzHq+x05ZBjBYKXsA4rPidyIAYak=";

pkgs/by-name/gi/github-mcp-server/package.nix

@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "github-mcp-server";
-  version = "0.25.0";
+  version = "0.27.0";
 
   src = fetchFromGitHub {
     owner = "github";
     repo = "github-mcp-server";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-sl/IEydxi64Z+ArqcApEELfi3lyxJY4MhR2X9g1fUbY=";
+    hash = "sha256-4HH6NujcVt9tAUn7jLB1Qcn2ADhszVZtDUt9IWl7j3U=";
   };
 
-  vendorHash = "sha256-90hWzVIjDzP7DBVSIYIwJtG5I89saQTQCU50n4HVylY=";
+  vendorHash = "sha256-LlNL8/+B1QDe+/AbonNPxAvR2I+92+V2sKSBIghfRJU=";
 
   ldflags = [
     "-s"

pkgs/by-name/go/google-java-format/package.nix

@@ -8,11 +8,11 @@
 
 stdenv.mkDerivation rec {
   pname = "google-java-format";
-  version = "1.32.0";
+  version = "1.33.0";
 
   src = fetchurl {
     url = "https://github.com/google/google-java-format/releases/download/v${version}/google-java-format-${version}-all-deps.jar";
-    sha256 = "sha256-uO/EpRIkI5Kq7Y+21bqlNz5wUBkPY90FxnuOwlXAF/8=";
+    sha256 = "sha256-aXcHrwfHdT8py6QVxqdreIJwL/Rk+AfamLKAabh1GRA=";
   };
 
   dontUnpack = true;

pkgs/by-name/ha/harsh/package.nix

@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "harsh";
-  version = "0.12.3";
+  version = "0.13.0";
 
   src = fetchFromGitHub {
     owner = "wakatara";
     repo = "harsh";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-/NgYjw/euTD55Ao91JL9og2FvHEYhDyT7mmPnJzoH4o=";
+    hash = "sha256-HTrlVs5hVNfoqyXs/l8Ed3wUEciY9C4RDkhKsHMjNBI=";
   };
 
-  vendorHash = "sha256-dGHEP5OYr/t2JNhfIHKGXJMl8OJS5FJPXsDQXa1AiEA=";
+  vendorHash = "sha256-ACWxBdSezlvvHDYllm7B2pg8Jb38WihC1s9FOvHGK10=";
 
   nativeCheckInputs = [ writableTmpDirAsHomeHook ];
 

pkgs/by-name/hc/hcloud/package.nix

@@ -7,16 +7,16 @@
 
 buildGoModule rec {
   pname = "hcloud";
-  version = "1.58.0";
+  version = "1.59.0";
 
   src = fetchFromGitHub {
     owner = "hetznercloud";
     repo = "cli";
     tag = "v${version}";
-    hash = "sha256-jK5672g27qI4qHHhejrBP0W2YTo8vnUwnS9f50Yq4BI=";
+    hash = "sha256-E4GPWQSrEMsLQwgwb7gCIYsOUH5uRnxgeq3UzQ02ql0=";
   };
 
-  vendorHash = "sha256-xAXL3ADmH20vH/nnFJdjWlc2WkiC92+SSRP4UKrWoGo=";
+  vendorHash = "sha256-BB3TArAATTVZ1lzJqbY7GQVS2/2ERWHMrTSbWfJSU60=";
 
   ldflags = [
     "-s"

pkgs/by-name/ho/hoppscotch/package.nix

@@ -8,22 +8,22 @@
 
 let
   pname = "hoppscotch";
-  version = "25.12.0-0";
+  version = "25.12.1-0";
 
   src =
     fetchurl
       {
         aarch64-darwin = {
           url = "https://github.com/hoppscotch/releases/releases/download/v${version}/Hoppscotch_mac_aarch64.dmg";
-          hash = "sha256-IdCwbekURJ0N5taw7NyINL8Rlb1i/jEfwQ0Sv6Kz2FM=";
+          hash = "sha256-wz2CpBfLuma4CoPbBC7dROxaXZSvivdHn/TX40FakOU=";
         };
         x86_64-darwin = {
           url = "https://github.com/hoppscotch/releases/releases/download/v${version}/Hoppscotch_mac_x64.dmg";
-          hash = "sha256-QJvbpgQFYA1O4xdF/whYllfBOxOjfZxkRghcEWAXcII=";
+          hash = "sha256-Bsn0PmmpiDbwtPq1WUsrbkn+MQ3BFZTnorukO0RpnzQ=";
         };
         x86_64-linux = {
           url = "https://github.com/hoppscotch/releases/releases/download/v${version}/Hoppscotch_linux_x64.AppImage";
-          hash = "sha256-BVYuFHHrJHp5AX6ASG8QLBzEoynq2ugA0aWJp5bVpmc=";
+          hash = "sha256-kCwlQdVpCRFPp1kcVaLLa6WHrrbuMo0JcqoCMBgtUGo=";
         };
       }
       .${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}");

pkgs/by-name/im/imake/package.nix

@@ -12,11 +12,11 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "imake";
-  version = "1.0.10";
+  version = "1.0.11";
 
   src = fetchurl {
     url = "mirror://xorg/individual/util/imake-${finalAttrs.version}.tar.xz";
-    hash = "sha256-dd7LzqjXs1TPNq3JZ15TxHkO495WoUvYe0LI6KrS7PU=";
+    hash = "sha256-VZVVJ+rr6UYz5Ag9T+XyFgpl/kxtr97ki4n+pfHKing=";
   };
 
   patches = [
@@ -39,16 +39,6 @@ stdenv.mkDerivation (finalAttrs: {
     # ELF interpreter path. (Which arguably, is a bug in its own.)
     # (copied from the commit message on 0100b270694ecab8aaa13fa5f3d30639b50d7777)
     ./cc-wrapper-uberhack.patch
-    # Add support for RISC-V
-    (fetchpatch {
-      url = "https://gitlab.freedesktop.org/xorg/util/imake/-/commit/a37ee515742f58359b4248742fa06d504f2dce1b.patch";
-      hash = "sha256-2aoXBm1JmNjS5vqGKEyX/qYUVJ8kYIzh/eq3WKU3uQ4=";
-    })
-    # Add support for LoongArch
-    (fetchpatch {
-      url = "https://gitlab.freedesktop.org/xorg/util/imake/-/commit/b4d568b7aa2db5525f63b1bc9486dc5e2ed36bd0.patch";
-      hash = "sha256-m35H3v5IFslqx5QaszPFAJ+g2HfDYyxbX+h+7/8/59M=";
-    })
   ];
 
   strictDeps = true;

pkgs/by-name/in/inputplumber/package.nix

@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "inputplumber";
-  version = "0.70.1";
+  version = "0.70.2";
 
   src = fetchFromGitHub {
     owner = "ShadowBlip";
     repo = "InputPlumber";
     tag = "v${version}";
-    hash = "sha256-Sk1z1bJlpHQrbm7rSiLHiwFXCwlZ/Qcr5vyY7ydLktw=";
+    hash = "sha256-D79muCj4L4bhnDwTDkD5Ovr8AWpdcAGznBtvtFX/ktA=";
   };
 
-  cargoHash = "sha256-Alnr8ppttft4GavoErFkZ7rqnAKaTDCyPhfqAcMX+R0=";
+  cargoHash = "sha256-1ej1CNvlB6WtRB5BYaaSMSHWKJ3anvJVpJqEL2feQuA=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/ip/ipatool/package.nix

@@ -47,7 +47,7 @@ buildGoModule rec {
     homepage = "https://github.com/majd/ipatool";
     changelog = "https://github.com/majd/ipatool/blob/${src.rev}/CHANGELOG.md";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ gaelreyrol ];
+    maintainers = [ ];
     mainProgram = "ipatool";
   };
 }

pkgs/by-name/ja/jawiki-all-titles-in-ns0/package.nix

@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation {
   pname = "jawiki-all-titles-in-ns0";
-  version = "0-unstable-2025-12-01";
+  version = "0-unstable-2026-01-01";
 
   src = fetchFromGitHub {
     owner = "musjj";
     repo = "jawiki-archive";
-    rev = "4ef9c544eef62ad882f66594ffec625073212735";
-    hash = "sha256-Sw4yR8KIQnYdc7anh544QX3s5+5Pk1LlXjcvUICe378=";
+    rev = "0e0aeca3c6980fabe2b8d2eec934517bfcc1acc7";
+    hash = "sha256-9FQjQ/0ee/dBKGsh/DYizkZZSy1/MwkVJ3ZqLK53x9g=";
   };
 
   installPhase = ''

pkgs/by-name/js/json-fortran/package.nix

@@ -8,13 +8,13 @@
 
 stdenv.mkDerivation rec {
   pname = "json-fortran";
-  version = "9.0.5";
+  version = "9.1.0";
 
   src = fetchFromGitHub {
     owner = "jacobwilliams";
     repo = "json-fortran";
     rev = version;
-    hash = "sha256-4IyysBcGKJKET8A5Bbbd5WJtlNh/7EdHuXsR6B/VDh0=";
+    hash = "sha256-MumYG9kfbtIMT0BQzHF2jZRT1yAUkfbQ/I0/LqRKnKk=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ka/katana/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "katana";
-  version = "1.3.0";
+  version = "1.4.0";
 
   src = fetchFromGitHub {
     owner = "projectdiscovery";
     repo = "katana";
     tag = "v${version}";
-    hash = "sha256-zqcQBRF03TOldfMw/Yw6fdryfW2N5SHOikuliSL0v+A=";
+    hash = "sha256-hVT1RGS4h3vKcSxIT1nSRN+MC7k1KlGHhotByq+UUY4=";
   };
 
-  vendorHash = "sha256-ZcukX+x0csNUxdIERS3ACw728+TsVicsbOqdL6DxgkA=";
+  vendorHash = "sha256-Cl3aUC4MJC/tUo/yuCdGspMShUMo65fNUHXHy8+/m+o=";
 
   subPackages = [ "cmd/katana" ];
 

pkgs/by-name/ki/kickstart/package.nix

@@ -42,7 +42,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     homepage = "https://github.com/Keats/kickstart";
     changelog = "https://github.com/Keats/kickstart/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ gaelreyrol ];
+    maintainers = [ ];
     mainProgram = "kickstart";
   };
 })

pkgs/by-name/ku/kubernetes-polaris/package.nix

@@ -8,16 +8,16 @@
 
 buildGoModule rec {
   pname = "kubernetes-polaris";
-  version = "10.1.2";
+  version = "10.1.3";
 
   src = fetchFromGitHub {
     owner = "FairwindsOps";
     repo = "polaris";
     rev = version;
-    sha256 = "sha256-wu/Ouozi89y1abFgDk16uqBHoYDQDIzoqPgwA0BofLo=";
+    sha256 = "sha256-TGdfyjAARYBf2JVQuq+6J1b7W2QSbnl1USSbGdGs59k=";
   };
 
-  vendorHash = "sha256-ihA9RJDFHePox1G47Jr4Q1NSVJ9k5KDXgm8KTe2wYBQ=";
+  vendorHash = "sha256-3crserX1lwgEsz1a/MeyYMbb6Sf3JoFRBaEu9pEHX1I=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/li/libtorrent-rakshasa/package.nix

@@ -15,13 +15,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libtorrent-rakshasa";
-  version = "0.16.5";
+  version = "0.16.6";
 
   src = fetchFromGitHub {
     owner = "rakshasa";
     repo = "libtorrent";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-zBMenewDtUyhOAQrIKejiShGWDeIA+7U1heyOKfAjio=";
+    hash = "sha256-pabtM8nf/x/kn661R9STeX3yaSGAP/JbJQkLffUi+CU=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/li/libvgm/package.nix

@@ -38,13 +38,13 @@ assert enableTools -> enableAudio && enableEmulation && enableLibplayer;
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libvgm";
-  version = "0-unstable-2025-12-15";
+  version = "0-unstable-2025-12-26";
 
   src = fetchFromGitHub {
     owner = "ValleyBell";
     repo = "libvgm";
-    rev = "455a0898761269d8e158c5e1c799976940f01dd4";
-    hash = "sha256-9gqIjBzqUZIse0O+u/mZAmkx6Cb7AtEGYo3M1z53gYo=";
+    rev = "df8bccbc3d2be3a6d805ede58a8054176ca84728";
+    hash = "sha256-Ub3gGFLHt31a9WDQN4CIfJ1+s8hfZCXsA3RADOX/tBA=";
   };
 
   outputs = [

pkgs/by-name/lx/lxgw-neoxihei/package.nix

@@ -6,11 +6,11 @@
 
 stdenvNoCC.mkDerivation rec {
   pname = "lxgw-neoxihei";
-  version = "1.236";
+  version = "1.237";
 
   src = fetchurl {
     url = "https://github.com/lxgw/LxgwNeoXiHei/releases/download/v${version}/LXGWNeoXiHei.ttf";
-    hash = "sha256-cH6i4Jp0fhgpkv6yrs3EkiSN7jAHFOPJC8+Kbk4tKIs=";
+    hash = "sha256-yeHBsWn9XyZOaRaHxb1n6Q1dPt5O35hp7Tzu7M6JeJQ=";
   };
 
   dontUnpack = true;

pkgs/by-name/ma/mago/package.nix

@@ -37,7 +37,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     description = "Toolchain for PHP that aims to provide a set of tools to help developers write better code";
     homepage = "https://github.com/carthage-software/mago";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ gaelreyrol ];
+    maintainers = [ ];
     mainProgram = "mago";
   };
 })

pkgs/by-name/ma/mailpit/source.nix

@@ -1,6 +1,6 @@
 {
-  version = "1.28.0";
-  hash = "sha256-9kvJr6haMe86pMakLkj3aKmA8IgYnJ+mV9Jtp4LsiSs=";
-  npmDepsHash = "sha256-ip+HMjAIGD47dzs9rrpMi8ZVyHlUpnf1KmjPgTILzYM=";
-  vendorHash = "sha256-n5/elG98ALYSXlW7TS+S8JI2Wpikk6X9Sl1J9FhbizY=";
+  version = "1.28.1";
+  hash = "sha256-Uu84G9DzlNT/ePiYMuZLlXKiyaiqjf79DJzKsM5WtEU=";
+  npmDepsHash = "sha256-17cX1tGjHade5sxNqlZGITBKleZR2IwTujVqecsb9Po=";
+  vendorHash = "sha256-pzzzji+MflKwFzAMkWQrGt99M9yanVsguHrHKB6VXSc=";
 }

pkgs/by-name/me/mercure/package.nix

@@ -47,7 +47,7 @@ buildGoModule rec {
     homepage = "https://github.com/dunglas/mercure";
     changelog = "https://github.com/dunglas/mercure/releases/tag/v${version}";
     license = lib.licenses.agpl3Only;
-    maintainers = with lib.maintainers; [ gaelreyrol ];
+    maintainers = [ ];
     platforms = lib.platforms.unix;
     mainProgram = "mercure";
   };

pkgs/by-name/mi/minify/package.nix

@@ -50,7 +50,7 @@ buildGoModule rec {
     downloadPage = "https://github.com/tdewolff/minify";
     changelog = "https://github.com/tdewolff/minify/releases/tag/v${version}";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ gaelreyrol ];
+    maintainers = [ ];
     mainProgram = "minify";
   };
 }

pkgs/by-name/mo/moonfire-nvr/package.nix

@@ -87,7 +87,7 @@ rustPlatform.buildRustPackage {
     homepage = "https://github.com/scottlamb/moonfire-nvr";
     changelog = "https://github.com/scottlamb/moonfire-nvr/releases/tag/v${version}";
     license = lib.licenses.gpl3Only;
-    maintainers = with lib.maintainers; [ gaelreyrol ];
+    maintainers = [ ];
     mainProgram = "moonfire-nvr";
   };
 }

pkgs/by-name/mq/mqttx/package.nix

@@ -54,7 +54,7 @@ appimageTools.wrapType2 {
     changelog = "https://github.com/emqx/MQTTX/releases/tag/v${version}";
     license = lib.licenses.asl20;
     platforms = lib.platforms.linux;
-    maintainers = with lib.maintainers; [ gaelreyrol ];
+    maintainers = [ ];
     mainProgram = "mqttx";
   };
 }

pkgs/by-name/nc/ncgopher/package.nix

@@ -11,16 +11,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ncgopher";
-  version = "0.7.0";
+  version = "0.8.0";
 
   src = fetchFromGitHub {
     owner = "jansc";
     repo = "ncgopher";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-9bwQgFZkwOV28qflWL7ZyUE3SLvPhf77sjomurqMK6E=";
+    hash = "sha256-O5lC1eeiwXeX3aF8kLl65jl0Jq0dIswQiFuROWVFeYc=";
   };
 
-  cargoHash = "sha256-wfodxA1fvdsvWvmnzYmL4GzgdIiQbXuhGq/U9spM+0s=";
+  cargoHash = "sha256-qCYx3RPp22YBFRwEoTttppDmyeg9J0I1QD5aK/OY7l8=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/nn/nnd/package.nix

@@ -8,16 +8,16 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "nnd";
-  version = "0.66";
+  version = "0.67";
 
   src = fetchFromGitHub {
     owner = "al13n321";
     repo = "nnd";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-92M5HSkXxlup+4vuQlf2AYIhYfIpRc5yGFgRcpLnHQY=";
+    hash = "sha256-qiWzTZlv01IjNUwjzcNRfQrmVyUMTsKtfhXuZydg/Pc=";
   };
 
-  cargoHash = "sha256-lS/nfRuf5u6+0ZBbuBfeQNU6G4jDWj02OBie7LxpYsc=";
+  cargoHash = "sha256-cx4V/DNafoqjfbtPl43Y09eF4fJ89x/ldx6qe70Qn/g=";
 
   meta = {
     description = "Debugger for Linux";

pkgs/by-name/no/node-core-utils/package.nix

@@ -9,16 +9,16 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "node-core-utils";
-  version = "6.0.0";
+  version = "6.1.1";
 
   src = fetchFromGitHub {
     owner = "nodejs";
     repo = "node-core-utils";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-uMfkZsFQ9LcbPtmqHoNouZlVfeMd47EYHWdHoOX6pNg=";
+    hash = "sha256-wDsDWiPCFJMbPj1VNelcSptVnmmxf7L6cqDVt4XD77g=";
   };
 
-  npmDepsHash = "sha256-7AJacu5CSfn78MjhiXqrsUObJHxycHnWQqxV3Feu6Zc=";
+  npmDepsHash = "sha256-TMIdWHYrt+SvjVvamJqShmX9XbIWsi72uToz1vSf+q8=";
 
   dontNpmBuild = true;
   dontNpmPrune = true;

pkgs/by-name/no/normalize/package.nix

@@ -5,15 +5,24 @@
   libmad,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "normalize";
   version = "0.7.7";
 
   src = fetchurl {
-    url = "mirror://savannah/normalize/${pname}-${version}.tar.gz";
-    sha256 = "1n5khss10vjjp6w69q9qcl4kqfkd0pr555lgqghrchn6rjms4mb0";
+    url = "mirror://savannah/normalize/normalize-${finalAttrs.version}.tar.gz";
+    hash = "sha256-YFWiq8zGQpbhw4+WUvIFbTo8CWU44WS4uVJuELSGs9g=";
   };
 
+  postPatch = ''
+    sed -e '1i #include <string.h>' -i nid3lib/frame_desc.c
+    substituteInPlace nid3lib/frame_desc.c \
+      --replace-fail "int strcmp();" ""
+    sed -e '1i #include <unistd.h>' -i nid3lib/write.c
+    substituteInPlace nid3lib/write.c \
+      --replace-fail "int ftruncate();" ""
+  '';
+
   buildInputs = [ libmad ];
 
   meta = {
@@ -22,4 +31,4 @@ stdenv.mkDerivation rec {
     license = lib.licenses.gpl2;
     platforms = lib.platforms.unix;
   };
-}
+})

pkgs/by-name/no/nova/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "nova";
-  version = "3.11.9";
+  version = "3.11.10";
 
   src = fetchFromGitHub {
     owner = "FairwindsOps";
     repo = "nova";
     rev = "v${version}";
-    hash = "sha256-5ZZbuWHvPgdpJstYXbDWo3KQkbzMd+a7ttzCg2bJ67o=";
+    hash = "sha256-64IDZMdEkSxbFr0HvDHTNz5j3IFEvmEICCUZ7ldX3TE=";
   };
 
-  vendorHash = "sha256-Q8mYIX5lIFtEOQPaUL0zCEzKAHoCiyt1bRaSb2o+vpI=";
+  vendorHash = "sha256-HzVYJeDYSfUZmnq8iJeMeydkFGlRv+aylpEmbu3okfI=";
 
   ldflags = [
     "-X main.version=${version}"

pkgs/by-name/no/noxdir/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "noxdir";
-  version = "0.11.0";
+  version = "1.0.0";
 
   src = fetchFromGitHub {
     owner = "crumbyte";
     repo = "noxdir";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-V6tQ9ZERsbc4Hg/Yo5tkLPUu353m2Mu+kBYDuZ2fWCA=";
+    hash = "sha256-+Q4G2Hx/l04RWji0LUM2irs2YjHwHPogeKDbpxkIVjE=";
   };
 
   vendorHash = "sha256-uRJP21bJ8NlJ0qOG81Gax9LJ+HdPfxLKj1Jjzbweync=";

pkgs/by-name/oc/octoprint/package.nix

@@ -92,14 +92,14 @@ let
       (self: super: {
         octoprint = self.buildPythonPackage rec {
           pname = "OctoPrint";
-          version = "1.11.4";
+          version = "1.11.5";
           format = "setuptools";
 
           src = fetchFromGitHub {
             owner = "OctoPrint";
             repo = "OctoPrint";
             rev = version;
-            hash = "sha256-2C/f8SQbr1HS4XSm8iQ43xtax441/RrkEeq3youo8Q8=";
+            hash = "sha256-mGEKmmtLOYwqx8ezienZz6aaEmYGJkKKuyenq4rqarg=";
           };
 
           propagatedBuildInputs =

pkgs/by-name/om/omnictl/package.nix

@@ -8,13 +8,13 @@
 
 buildGoModule rec {
   pname = "omnictl";
-  version = "1.4.6";
+  version = "1.4.7";
 
   src = fetchFromGitHub {
     owner = "siderolabs";
     repo = "omni";
     rev = "v${version}";
-    hash = "sha256-p2DKfDf76xr42LLvtVFrSfxJkrpOeFUhtrViI/cD66Y=";
+    hash = "sha256-+lfA8IGMLGdLAHkrBWCwTuZ1PFcYE3jmr9PJQveEoPQ=";
   };
 
   vendorHash = "sha256-lVUe1XQr46uzx3kfj7KmoiGFUGEb7UT16IQSI8In8RU=";

pkgs/by-name/op/open-policy-agent/package.nix

@@ -14,13 +14,13 @@ assert
 
 buildGoModule (finalAttrs: {
   pname = "open-policy-agent";
-  version = "1.12.1";
+  version = "1.12.2";
 
   src = fetchFromGitHub {
     owner = "open-policy-agent";
     repo = "opa";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-W3iNyqMiUBz8xRq0kuYAMRW/eRKp1u+FVrHo1fN718E=";
+    hash = "sha256-ZysAtmGhoSAsU/w81UvA/tpamFrYRv5E09DnvPSbuRE=";
   };
 
   vendorHash = "sha256-vlF4TBjfinaY48UNefXFWbrWenD7eYYYMkByI2M32X8=";

pkgs/by-name/op/openxr-loader/package.nix

@@ -16,13 +16,13 @@
 
 stdenv.mkDerivation rec {
   pname = "openxr-loader";
-  version = "1.1.51";
+  version = "1.1.54";
 
   src = fetchFromGitHub {
     owner = "KhronosGroup";
     repo = "OpenXR-SDK-Source";
     tag = "release-${version}";
-    hash = "sha256-NEArzegPZNL0zRbnUHrNbNhBtj0IJP+uha1ehzwB7wA=";
+    hash = "sha256-7aip1ymZqQ7XQottD9jVb7SBPAlGaj6e27tH6aXYc2I=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/os/osv-scanner/package.nix

@@ -8,16 +8,16 @@
 
 buildGoModule rec {
   pname = "osv-scanner";
-  version = "2.3.0";
+  version = "2.3.1";
 
   src = fetchFromGitHub {
     owner = "google";
     repo = "osv-scanner";
     tag = "v${version}";
-    hash = "sha256-V+GQIEgNgQsOtQ+agalG0oH0Zc8R87swtYsmvyHmNNY=";
+    hash = "sha256-qpfpFjMMRWzzP1Q/28Bzp+hQ5TDi3ffwJ20PwXKgJjs=";
   };
 
-  vendorHash = "sha256-28+iPNCihWcc6gDSsNUSXsQAJeeevNOY1/jeq73T41I=";
+  vendorHash = "sha256-0htgQgpZwtHHnGWi7pnvmA9eKsu15Kd6u7VH2s/PhSs=";
 
   subPackages = [
     "cmd/osv-scanner"

pkgs/by-name/ot/otel-desktop-viewer/package.nix

@@ -49,7 +49,6 @@ buildGoModule (finalAttrs: {
     homepage = "https://github.com/CtrlSpice/otel-desktop-viewer";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [
-      gaelreyrol
       jkachmar
       lf-
     ];

pkgs/by-name/ow/owntracks-recorder/package.nix

@@ -80,7 +80,7 @@ stdenv.mkDerivation (finalAttrs: {
     changelog = "https://github.com/owntracks/recorder/blob/master/Changelog";
     license = lib.licenses.gpl2Plus;
     platforms = lib.platforms.linux;
-    maintainers = with lib.maintainers; [ gaelreyrol ];
+    maintainers = [ ];
     mainProgram = "ot-recorder";
   };
 })

pkgs/by-name/pi/piliplus/git-hashes.json

@@ -1,12 +1,12 @@
 {
   "auto_orientation": "sha256-0QOEW8+0PpBIELmzilZ8+z7ozNRxKgI0BzuBS8c1Fng=",
-  "canvas_danmaku": "sha256-RYzzXg+nV9jT+OrPnR/popIkvbyDQRj7FLM6hOdxcJY=",
+  "canvas_danmaku": "sha256-sDPx6esfeiS7xp7brwcJaKuTnIpxqZdPAqV4o9i6fLc=",
   "chat_bottom_container": "sha256-um9KwZUDxWBhFsGHfv00TjPzxDHmp43TLRF0GwuV1xs=",
   "extended_nested_scroll_view": "sha256-Vjv5zp5c0Xob1H8/U0+lUueLqOKo7qwusOCchdt3Z7M=",
-  "file_picker": "sha256-V2tLEkvwVa8BfcdnVBJkwVbcrTs6Rd5XAEw04eJOM1E=",
+  "file_picker": "sha256-yOZwX6GrA+91WtpXuVf7eM5gdI6mxmdxkSe+dgnHvj4=",
   "floating": "sha256-0Xd9dsXJCQ/r/8Nb16oM+M8Jdw+r4QzGmU++HpqF/v0=",
   "flutter_sortable_wrap": "sha256-Qj9Lzh+pJy+vHznGt5M3xwoJtaVtt00fxm4JJXL4bFI=",
-  "get": "sha256-aJJyQAFWFLS2dIUTITkRHOeW9IFQOcEsMuQOkBDhGu8=",
+  "get": "sha256-xaq4u761yVgfNvU8Ei3JhJPQLoGTIMOiOD0JiBb3ykg=",
   "material_design_icons_flutter": "sha256-KMwjnzJJj8nemCqUCSwYafPOwTYbtoHNenxstocJtz4=",
   "media_kit": "sha256-M8z6KGoKrhYFpnXnP+5sHjHMGJe04djKTxnkvLVtBtU=",
   "media_kit_libs_android_video": "sha256-M8z6KGoKrhYFpnXnP+5sHjHMGJe04djKTxnkvLVtBtU=",

pkgs/by-name/pi/piliplus/package.nix

@@ -13,7 +13,7 @@
 let
   srcInfo = lib.importJSON ./src-info.json;
   description = "Third-party Bilibili client developed in Flutter";
-  version = "1.1.5.1";
+  version = "1.1.5.2";
 in
 flutter338.buildFlutterApplication {
   pname = "piliplus";

pkgs/by-name/pi/piliplus/pubspec.lock.json

@@ -296,7 +296,7 @@
       "description": {
         "path": ".",
         "ref": "main",
-        "resolved-ref": "e13ec72d2406b1ede94bbeec64dd0941a7dd9ac2",
+        "resolved-ref": "16ee8cec19a324653f0a3b54897134c5e77ae613",
         "url": "https://github.com/bggRGjQaUbCoE/canvas_danmaku.git"
       },
       "source": "git",
@@ -423,16 +423,6 @@
       "source": "hosted",
       "version": "4.0.8"
     },
-    "crclib": {
-      "dependency": "direct main",
-      "description": {
-        "name": "crclib",
-        "sha256": "800f2226cd90c900ddcaaccb79449eabe690627ee8c7046737458f1a2509043d",
-        "url": "https://pub.dev"
-      },
-      "source": "hosted",
-      "version": "3.0.0"
-    },
     "cross_file": {
       "dependency": "transitive",
       "description": {
@@ -659,11 +649,11 @@
       "description": {
         "path": ".",
         "ref": "mod",
-        "resolved-ref": "4c03c3413a915fa82f58d4591bfe3b62709a6edf",
+        "resolved-ref": "e9f51575d0103880f4d0ad64f314bc57d0b49cf1",
         "url": "https://github.com/bggRGjQaUbCoE/flutter_file_picker.git"
       },
       "source": "git",
-      "version": "10.3.7"
+      "version": "10.3.8"
     },
     "file_selector_linux": {
       "dependency": "transitive",
@@ -996,7 +986,7 @@
       "description": {
         "path": ".",
         "ref": "version_4.7.2",
-        "resolved-ref": "579a8978a922e6c57cebd001320f78674e040418",
+        "resolved-ref": "4f5c47f38bde5df0abd6481702b2d8ec199a0e49",
         "url": "https://github.com/bggRGjQaUbCoE/getx.git"
       },
       "source": "git",
@@ -1113,14 +1103,14 @@
       "version": "4.1.2"
     },
     "image": {
-      "dependency": "direct main",
+      "dependency": "transitive",
       "description": {
         "name": "image",
-        "sha256": "4e973fcf4caae1a4be2fa0a13157aa38a8f9cb049db6529aa00b4d71abc4d928",
+        "sha256": "492bd52f6c4fbb6ee41f781ff27765ce5f627910e1e0cbecfa3d9add5562604c",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "4.5.4"
+      "version": "4.7.2"
     },
     "image_cropper": {
       "dependency": "direct main",
@@ -1913,11 +1903,11 @@
       "dependency": "transitive",
       "description": {
         "name": "sentry",
-        "sha256": "10a0bc25f5f21468e3beeae44e561825aaa02cdc6829438e73b9b64658ff88d9",
+        "sha256": "9b2fe138df1a104f6e41d8ebf2b1e4fe39d4370d2200eb4eea29913d38b8b33b",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "9.8.0"
+      "version": "9.9.1"
     },
     "share_plus": {
       "dependency": "direct main",
@@ -2196,16 +2186,6 @@
       "source": "hosted",
       "version": "0.5.2"
     },
-    "tuple": {
-      "dependency": "transitive",
-      "description": {
-        "name": "tuple",
-        "sha256": "a97ce2013f240b2f3807bcbaf218765b6f301c3eff91092bcfa23a039e7dd151",
-        "url": "https://pub.dev"
-      },
-      "source": "hosted",
-      "version": "2.0.2"
-    },
     "typed_data": {
       "dependency": "transitive",
       "description": {
@@ -2240,11 +2220,11 @@
       "dependency": "transitive",
       "description": {
         "name": "uri_parser",
-        "sha256": "ff4d2c720aca3f4f7d5445e23b11b2d15ef8af5ddce5164643f38ff962dcb270",
+        "sha256": "051c62e5f693de98ca9f130ee707f8916e2266945565926be3ff20659f7853ce",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "3.0.0"
+      "version": "3.0.2"
     },
     "url_launcher": {
       "dependency": "direct main",
@@ -2420,11 +2400,11 @@
       "dependency": "transitive",
       "description": {
         "name": "watcher",
-        "sha256": "592ab6e2892f67760543fb712ff0177f4ec76c031f02f5b4ff8d3fc5eb9fb61a",
+        "sha256": "f52385d4f73589977c80797e60fe51014f7f2b957b5e9a62c3f6ada439889249",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "1.1.4"
+      "version": "1.2.0"
     },
     "waterfall_flow": {
       "dependency": "direct main",

pkgs/by-name/pi/piliplus/src-info.json

@@ -1,6 +1,6 @@
 {
-  "rev": "3741fe54ff386f50c91e17b16046cb429648bb6a",
-  "revCount": 4442,
-  "commitDate": 1765360801,
-  "hash": "sha256-Y+/ukiy4DE6ofcE+PDvRdmSpAOKG4pfg7QOPyyzLvFU="
+  "rev": "3d95165d468062e04e1efe62eddb01aa98044351",
+  "revCount": 4519,
+  "commitDate": 1767413769,
+  "hash": "sha256-fTTaimA+cT60XTgTdjrljWvDJwLfRO/bxJ2KcVGFIa0="
 }

pkgs/by-name/pl/plasma-plugin-blurredwallpaper/package.nix

@@ -6,13 +6,13 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "plasma-plugin-blurredwallpaper";
-  version = "3.4.0";
+  version = "3.5.0";
 
   src = fetchFromGitHub {
     owner = "bouteillerAlan";
     repo = "blurredwallpaper";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-pklqYT8o1AfOAjQTl3rVm+XWXoL+pGChpjx40ywr8Xs=";
+    hash = "sha256-xnO1C3jPkrooD7WUcclDrQp+iRXgOS4BRLB1tAdJRYk=";
   };
 
   installPhase = ''

pkgs/by-name/pr/protonplus/package.nix

@@ -20,13 +20,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "protonplus";
-  version = "0.5.13";
+  version = "0.5.14";
 
   src = fetchFromGitHub {
     owner = "Vysp3r";
     repo = "protonplus";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-fTYBLHdYaJ9Sea2m7qAAdLmXWz8suokeIwCHBKIDVrQ=";
+    hash = "sha256-/J+qZKFYWECHGkhpHqzH+ZRpgJYoWRNs0GSc9wyLk54=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ps/pscale/package.nix

@@ -10,16 +10,16 @@
 
 buildGoModule rec {
   pname = "pscale";
-  version = "0.266.0";
+  version = "0.268.0";
 
   src = fetchFromGitHub {
     owner = "planetscale";
     repo = "cli";
     rev = "v${version}";
-    sha256 = "sha256-9ctonJGiXRJtOzW28ZPfS2kj83fk29cWjOdLveciiXg=";
+    sha256 = "sha256-z6hvjwrIscZHC/3pZkknyAMWpXEAItEhioRK37o82aw=";
   };
 
-  vendorHash = "sha256-i0yiDekaiIrbdGn2yzmbechOY9WPPU5FvZbw3WL/4KI=";
+  vendorHash = "sha256-0Db91ESDf+5j4+da4F44uxycGDBV4A5Wkwz8Uvjo9ec=";
 
   ldflags = [
     "-s"

pkgs/by-name/pu/pulsarctl/package.nix

@@ -72,7 +72,7 @@ buildGoModule rec {
     homepage = "https://github.com/streamnative/pulsarctl";
     license = with lib.licenses; [ asl20 ];
     platforms = lib.platforms.unix;
-    maintainers = with lib.maintainers; [ gaelreyrol ];
+    maintainers = [ ];
     mainProgram = "pulsarctl";
   };
 }

pkgs/by-name/qd/qdelay/package.nix

@@ -0,0 +1,110 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  cmake,
+  pkg-config,
+  alsa-lib,
+  fontconfig,
+  freetype,
+  libX11,
+  libXcomposite,
+  libXcursor,
+  libXdmcp,
+  libXext,
+  libXinerama,
+  libXrandr,
+  libXtst,
+  writableTmpDirAsHomeHook,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "qdelay";
+  version = "1.0.4";
+
+  src = fetchFromGitHub {
+    owner = "tiagolr";
+    repo = "qdelay";
+    tag = "v${finalAttrs.version}";
+    fetchSubmodules = true;
+    hash = "sha256-6V9L8GTAHN3bzVZ00XlSwh71ZQrx4o37J8kOZtRzjC8=";
+  };
+
+  nativeBuildInputs = [
+    cmake
+    pkg-config
+    writableTmpDirAsHomeHook # fontconfig cache
+  ];
+
+  buildInputs = [
+    fontconfig
+    freetype
+  ]
+  ++ lib.optionals stdenv.isLinux [
+    alsa-lib
+    libX11
+    libXcomposite
+    libXcursor
+    libXdmcp
+    libXext
+    libXinerama
+    libXrandr
+    libXtst
+  ];
+
+  enableParallelBuilding = true;
+
+  cmakeFlags = [
+    "-DCOPY_PLUGIN_AFTER_BUILD=FALSE"
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    "-DCMAKE_OSX_ARCHITECTURES=${stdenv.hostPlatform.darwinArch}"
+  ];
+
+  postPatch = ''
+    substituteInPlace CMakeLists.txt \
+      --replace-fail 'juce::juce_recommended_lto_flags' '# Not forcing LTO'
+  '';
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/bin $out/lib/vst3
+
+  ''
+  + (
+    if stdenv.hostPlatform.isDarwin then
+      ''
+        mkdir -p $out/Applications
+        cp -R QDelay_artefacts/Release/Standalone/QDelay.app \
+          $out/Applications/QDelay.app
+        ln -s \
+          $out/Applications/QDelay.app/Contents/MacOS/QDelay \
+          $out/bin/QDelay
+      ''
+    else
+      ''
+        install -Dm755 \
+          QDelay_artefacts/Release/Standalone/QDelay \
+          $out/bin/QDelay
+
+        mkdir -p $out/bin $out/lib/lv2
+        cp -r "QDelay_artefacts/Release/LV2/QDelay.lv2" $out/lib/lv2
+      ''
+  )
+  + ''
+    cp -r "QDelay_artefacts/Release/VST3/QDelay.vst3" $out/lib/vst3
+
+    runHook postInstall
+  '';
+
+  meta = {
+    description = "Dual delay with more features than it should";
+    homepage = "https://github.com/tiagolr/qdelay";
+    changelog = "https://github.com/tiagolr/qdelay/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.gpl3Plus;
+    maintainers = with lib.maintainers; [ magnetophon ];
+    mainProgram = "QDelay";
+    platforms = lib.platforms.all;
+  };
+})

pkgs/by-name/ra/rasm/package.nix

@@ -6,13 +6,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rasm";
-  version = "3.0.3";
+  version = "3.0.4";
 
   src = fetchFromGitHub {
     owner = "EdouardBERGE";
     repo = "rasm";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-URCig2+Fxf0/skHsLb83Tv8JEjfIK5NNB1ZTrM9GqEI=";
+    hash = "sha256-EnSfPMD399Tw1K/zRpxCJ/yqPeGmkCrtfW/PYz5DOUc=";
   };
 
   # by default the EXEC variable contains `rasm.exe`

pkgs/by-name/re/reindeer/package.nix

@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "reindeer";
-  version = "2025.12.22.00";
+  version = "2025.12.29.00";
 
   src = fetchFromGitHub {
     owner = "facebookincubator";
     repo = "reindeer";
     tag = "v${version}";
-    hash = "sha256-9e3QWszac5P1OhhM2VOFYPPMJmzv5MdWHwL0O8Dq+v0=";
+    hash = "sha256-BBiVJx6LyR6LcIqla7PVnoiBIbwmEZONS/FP3a5OseU=";
   };
 
-  cargoHash = "sha256-G8Q7mhWRLWx91bRb8apcMFy1s+nxtsXMhDwZVoZTRfA=";
+  cargoHash = "sha256-GeRXwE6QqWaPxRTMIIvcIGE1NdWVSSjfxy6wq3pKieM=";
 
   nativeBuildInputs = [ pkg-config ];
 

pkgs/by-name/ri/ricochet-refresh/package.nix

@@ -11,14 +11,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "ricochet-refresh";
-  version = "3.0.34";
+  version = "3.0.39";
 
   src = fetchFromGitHub {
     owner = "blueprint-freespeech";
     repo = "ricochet-refresh";
     tag = "v${finalAttrs.version}-release";
     fetchSubmodules = true;
-    hash = "sha256-/IT3K3PL2fNl4P7xzItVnI8xJx5MmKxhw3ZEX9rN7j4=";
+    hash = "sha256-bKleUuR3dnvZETnMx7FSpVflPB8rcijMhJbuH/MuTWE=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/src";

pkgs/by-name/ro/rops/package.nix

@@ -7,16 +7,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "rops";
-  version = "0.1.5";
+  version = "0.1.6";
 
   src = fetchFromGitHub {
     owner = "gibbz00";
     repo = "rops";
     tag = version;
-    hash = "sha256-wwZ/4yOB4pE6lZgX8ytCC3plMYt6kxOakQoLy8SWN+k=";
+    hash = "sha256-Nqtwc9QSafvr0N8G6LKZBG4pZHzut3t85qwgVAw59iU=";
   };
 
-  cargoHash = "sha256-sKPVdvMoQ2nV29rjau/6YpO1zpAQOuZhouPCvDf2goc=";
+  cargoHash = "sha256-EaelxmE53oKsWts9oK3LsK3uA8Vy3XbGUC1vKKBe37I=";
 
   # will true when tests is fixed from source.
   doCheck = false;

pkgs/by-name/rq/rqlite/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "rqlite";
-  version = "9.3.5";
+  version = "9.3.9";
 
   src = fetchFromGitHub {
     owner = "rqlite";
     repo = "rqlite";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-JYFTFIPtLNbYhv+ITWEm7ZBJrOBHc/wynxy74uouA2c=";
+    hash = "sha256-4SotO+tOa9V2CRKDBFA+KRpd2jgYwdALJzX5Oy4cA8M=";
   };
 
-  vendorHash = "sha256-9KaBRiuNQGTcx8Gc8wPy6bj5d6pFKsLS87nsDwWet0o=";
+  vendorHash = "sha256-4HHUtmF4Q9QzVCqHYCkIG8lHlQ7soBXsGFuGl4uL8PQ=";
 
   subPackages = [
     "cmd/rqlite"

pkgs/by-name/rt/rtags/package.nix

@@ -12,7 +12,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rtags";
-  version = "2.41-unstable-2025-12-06";
+  version = "2.41-unstable-2025-12-29";
   nativeBuildInputs = [
     cmake
     pkg-config
@@ -29,8 +29,8 @@ stdenv.mkDerivation (finalAttrs: {
   src = fetchFromGitHub {
     owner = "andersbakken";
     repo = "rtags";
-    rev = "b0a71e03a5f94571b18eb95c38a8c6216393a902";
-    hash = "sha256-St+JoGObQAC4iYbvKiBy14D/wf6ktT1WTrWwTzNniq0=";
+    rev = "b518bf30878d0804e95f60eb509c0bab9678eb68";
+    hash = "sha256-Y5oZwVyZcIBZKv4Fwpr8jIpzVZ1Wc2SEbZoe1xw6xe8=";
     fetchSubmodules = true;
     # unicode file names lead to different checksums on HFS+ vs. other
     # filesystems because of unicode normalisation