Merge 482eaefbd4 into haskell-updates

2025-11-20 00:23:41 +00:00
parent 65344d2cc4 482eaefbd4
commit 19681a9e91
236 changed files with 3750 additions and 2206 deletions
@@ -505,8 +505,8 @@ fetchurl {

  downloadToTemp = true;
  postFetch = ''
-    ${lib.getExe hello} >> $downloadedFile
-    mv $downloadedFile $out
+    hello >> "$downloadedFile"
+    mv "$downloadedFile" "$out"
  '';

  hash = "sha256-ceooQQYmDx5+0nfg40uU3NNI2yKrixP7HZ/xLZUNv+w=";
@@ -157,8 +157,6 @@

 - Zig 0.12 has been removed.

- `services.forgejo.dump.age` now defaults to `4w`, which deletes dumps older than 4 weeks. This new behaviour could result in older backups being deleted.
-
 - `ansible-later` has been removed because it was discontinued by the author.

 - `k3s` airgap images passthru attributes have changed:
@@ -3054,6 +3054,12 @@
    githubId = 5409401;
    name = "Bradley Cooley";
  };
+  bct = {
+    email = "bct@diffeq.com";
+    github = "bct";
+    githubId = 548;
+    name = "Brendan Taylor";
+  };
  bcyran = {
    email = "bazyli@cyran.dev";
    github = "bcyran";
@@ -21361,6 +21367,12 @@
    matrix = "@zitrone:utwente.io";
    name = "quantenzitrone";
  };
+  quarterstar = {
+    email = "quarterstar+nix@proton.me";
+    github = "quarterstar";
+    githubId = 201157222;
+    name = "Quarterstar";
+  };
  qubasa = {
    email = "consulting@qube.email";
    github = "Qubasa";
@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 set -e

-: ${NIXOS_CHANNELS:=https://nixos.org/channels/}
+: ${NIXOS_CHANNELS:=https://channels.nixos.org/}
 : ${CHANNELS_NAMESPACE:=refs/heads/channels/}

 # List all channels which are currently in the repository which we would
@@ -37,7 +37,7 @@ nixos-unstable unless explicitly configured to do so.

  imports = [
    # Use postgresql service from nixos-unstable channel.
-    # sudo nix-channel --add https://nixos.org/channels/nixos-unstable nixos-unstable
+    # sudo nix-channel --add https://channels.nixos.org/nixos-unstable nixos-unstable
    <nixos-unstable/nixos/modules/services/databases/postgresql.nix>
  ];

@@ -35,14 +35,14 @@ The first steps to all these are the same:

    ```ShellSession
    $ nix-channel --list
-    nixpkgs https://nixos.org/channels/nixpkgs-unstable
+    nixpkgs https://channels.nixos.org/nixpkgs-unstable
    ```

    As that channel gets released without running the NixOS tests, it
    will be safer to use the `nixos-*` channels instead:

    ```ShellSession
-    $ nix-channel --add https://nixos.org/channels/nixos-<version> nixpkgs
+    $ nix-channel --add https://channels.nixos.org/nixos-<version> nixpkgs
    ```

    Where `<version>` corresponds to the latest version available on [channels.nixos.org](https://channels.nixos.org/).
@@ -39,7 +39,7 @@ Notable changes and additions for 18.09 include:
  For example

  ```ShellSession
-  $ nix-channel --add https://nixos.org/channels/nixpkgs-unstable nixpkgsunstable
+  $ nix-channel --add https://channels.nixos.org/nixpkgs-unstable nixpkgsunstable
  $ nix-channel --update
  $ nix-build '<nixpkgsunstable>' -A gitFull
  $ nix run -f '<nixpkgsunstable>' gitFull
@@ -124,6 +124,9 @@

 - [Szurubooru](https://github.com/rr-/szurubooru), an image board engine inspired by services such as Danbooru, dedicated for small and medium communities. Available as [services.szurubooru](#opt-services.szurubooru.enable).

+- [LubeLogger](https://lubelogger.com/), a vehicle maintenance and fuel mileage tracker.
+  Available as [services.lubelogger](#opt-services.lubelogger.enable).
+
 - The [Neat IP Address Planner](https://spritelink.github.io/NIPAP/) (NIPAP) can now be enabled through [services.nipap.enable](#opt-services.nipap.enable).

 - [tpm2-totp](https://github.com/tpm2-software/tpm2-totp) can now be used to show a TOTP during boot using Plymouth. Available as [boot.plymouth.tpm2-totp](#opt-boot.plymouth.tpm2-totp.enable).
@@ -242,6 +245,8 @@
 - The non-LTS Forgejo package (`forgejo`) has been updated to 12.0.0. This release contains breaking changes, see the [release blog post](https://forgejo.org/2025-07-release-v12-0/)
  for all the details and how to ensure smooth upgrades.

+- `services.forgejo.dump.age` now defaults to `4w`, which deletes dumps older than 4 weeks. This new behaviour could result in older backups being deleted.
+
 - `sing-box` has been updated to 1.12.3, which includes a number of breaking changes, old configurations may need updating or they will cause the tool to fail to run.
  See the [change log](https://sing-box.sagernet.org/changelog/#1123) for details and [migration](https://sing-box.sagernet.org/migration/#1120) for how to update old configurations.

@@ -1646,6 +1646,7 @@
  ./services/web-apps/libretranslate.nix
  ./services/web-apps/limesurvey.nix
  ./services/web-apps/linkwarden.nix
+  ./services/web-apps/lubelogger.nix
  ./services/web-apps/mainsail.nix
  ./services/web-apps/mastodon.nix
  ./services/web-apps/matomo.nix
@@ -73,6 +73,9 @@ in
    ];

    systemd.services.polkit.restartTriggers = [ config.system.path ];
+    systemd.services.polkit.reloadTriggers = [
+      config.environment.etc."polkit-1/rules.d/10-nixos.rules".source
+    ];
    systemd.services.polkit.stopIfChanged = false;

    # The polkit daemon reads action/rule files
@@ -318,7 +318,7 @@ in

              ''${pkgs.nix}/bin/nix-env -i ''${concatStringsSep " " (with pkgs; [ nix cacert git openssh ])}

-              ''${pkgs.nix}/bin/nix-channel --add https://nixos.org/channels/nixpkgs-unstable
+              ''${pkgs.nix}/bin/nix-channel --add https://channels.nixos.org/nixpkgs-unstable
              ''${pkgs.nix}/bin/nix-channel --update nixpkgs
            ''';
            environmentVariables = {
@@ -232,6 +232,9 @@ in
        + lib.optionalString (cfg.socket != null) ''
          --socket=${cfg.socket} \
        ''
+        + lib.optionalString (cfg.socketMode != null) ''
+          --socket-mode=${cfg.socketMode} \
+        ''
        + lib.optionalString (cfg.userDataDir != null) ''
          --user-data-dir=${cfg.userDataDir} \
        ''
@@ -0,0 +1,134 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+let
+  cfg = config.services.lubelogger;
+in
+{
+  meta.maintainers = with lib.maintainers; [
+    bct
+    lyndeno
+  ];
+
+  options = {
+    services.lubelogger = {
+      enable = lib.mkEnableOption "LubeLogger, a self-hosted, open-source, web-based vehicle maintenance and fuel milage tracker";
+
+      package = lib.mkPackageOption pkgs "lubelogger" { };
+
+      dataDir = lib.mkOption {
+        description = "Path to LubeLogger config and metadata inside of `/var/lib/`.";
+        default = "lubelogger";
+        type = lib.types.str;
+      };
+
+      port = lib.mkOption {
+        description = "The TCP port LubeLogger will listen on.";
+        default = 5000;
+        type = lib.types.port;
+      };
+
+      user = lib.mkOption {
+        description = "User account under which LubeLogger runs.";
+        default = "lubelogger";
+        type = lib.types.str;
+      };
+
+      group = lib.mkOption {
+        description = "Group under which LubeLogger runs.";
+        default = "lubelogger";
+        type = lib.types.str;
+      };
+
+      openFirewall = lib.mkOption {
+        description = "Open ports in the firewall for the LubeLogger web interface.";
+        default = false;
+        type = lib.types.bool;
+      };
+
+      settings = lib.mkOption {
+        type = with lib.types; attrsOf str;
+        default = { };
+        example = {
+          LUBELOGGER_ALLOWED_FILE_EXTENSIONS = "";
+          LUBELOGGER_LOGO_URL = "";
+        };
+        description = ''
+          Additional configuration for LubeLogger, see <https://docs.lubelogger.com/Environment%20Variables> for supported values.
+        '';
+      };
+
+      environmentFile = lib.mkOption {
+        type = lib.types.nullOr lib.types.path;
+        default = null;
+        example = "/run/secrets/lubelogger";
+        description = ''
+          Path to a file containing extra LubeLogger config options in the systemd `EnvironmentFile` format.
+          Refer to the [documentation] for supported options.
+
+          [documentation]: https://docs.lubelogger.com/Advanced/Environment%20Variables
+
+          This can be used to pass secrets to LubeLogger without putting them in the Nix store.
+
+          For example, to set an SMTP password, point `environmentFile` at a file containing:
+          ```
+          MailConfig__Password=<pass>
+          ```
+        '';
+      };
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    systemd.services.lubelogger = {
+      description = "LubeLogger";
+
+      after = [ "network.target" ];
+      wantedBy = [ "multi-user.target" ];
+
+      environment = {
+        Kestrel__Endpoints__Http__Url = "http://localhost:${toString cfg.port}";
+      }
+      // cfg.settings;
+
+      serviceConfig = {
+        Type = "simple";
+        User = cfg.user;
+        Group = cfg.group;
+        StateDirectory = cfg.dataDir;
+        WorkingDirectory = "/var/lib/${cfg.dataDir}";
+        ExecStart = lib.getExe cfg.package;
+        EnvironmentFile = lib.mkIf (cfg.environmentFile != null) cfg.environmentFile;
+        Restart = "on-failure";
+
+        CapabilityBoundingSet = [ "" ];
+        DeviceAllow = [ "" ];
+        PrivateDevices = true;
+        PrivateTmp = true;
+        ProtectHome = true;
+        RestrictAddressFamilies = [
+          "AF_UNIX"
+          "AF_INET"
+          "AF_INET6"
+        ];
+        RestrictNamespaces = true;
+      };
+    };
+
+    users.users = lib.mkIf (cfg.user == "lubelogger") {
+      lubelogger = {
+        isSystemUser = true;
+        group = cfg.group;
+        home = "/var/lib/${cfg.dataDir}";
+      };
+    };
+
+    users.groups = lib.mkIf (cfg.group == "lubelogger") { lubelogger = { }; };
+
+    networking.firewall = lib.mkIf cfg.openFirewall { allowedTCPPorts = [ cfg.port ]; };
+  };
+}
@@ -156,7 +156,7 @@ in
      };

      background = mkOption {
-        type = types.either types.path (types.strMatching "^#[0-9]{6}$");
+        type = types.either types.path (types.strMatching "^#[0-9A-Fa-f]{6}$");
        # Manual cannot depend on packages, we are actually setting the default in config below.
        defaultText = literalExpression "pkgs.nixos-artwork.wallpapers.simple-dark-gray-bottom.gnomeFilePath";
        description = ''
@@ -52,7 +52,7 @@ in
      channel = lib.mkOption {
        type = lib.types.nullOr lib.types.str;
        default = null;
-        example = "https://nixos.org/channels/nixos-14.12-small";
+        example = "https://channels.nixos.org/nixos-14.12-small";
        description = ''
          The URI of the NixOS channel to use for automatic
          upgrades. By default, this is the channel set using
@@ -17,7 +17,7 @@

      assert machine.succeed("cat /root/.nix-channels") == "${nodes.machine.system.defaultChannel} nixos\n"

-      nixpkgs_unstable_channel = "https://nixos.org/channels/nixpkgs-unstable nixpkgs"
+      nixpkgs_unstable_channel = "https://channels.nixos.org/nixpkgs-unstable nixpkgs"
      machine.succeed(f"echo '{nixpkgs_unstable_channel}' > /root/.nix-channels")

      machine.reboot()
@@ -242,7 +242,6 @@ in
  apparmor = runTest ./apparmor;
  appliance-repart-image = runTest ./appliance-repart-image.nix;
  appliance-repart-image-verity-store = runTest ./appliance-repart-image-verity-store.nix;
-  archi = runTest ./archi.nix;
  aria2 = runTest ./aria2.nix;
  armagetronad = runTest ./armagetronad.nix;
  artalk = runTest ./artalk.nix;
@@ -1,36 +0,0 @@
-{ lib, ... }:
-{
-  name = "archi";
-  meta.maintainers = with lib.maintainers; [ paumr ];
-
-  nodes.machine =
-    { pkgs, ... }:
-    {
-      imports = [
-        ./common/x11.nix
-      ];
-
-      environment.systemPackages = with pkgs; [ archi ];
-    };
-
-  enableOCR = true;
-
-  testScript = ''
-    machine.wait_for_x()
-
-    with subtest("createEmptyModel via CLI"):
-         machine.succeed("Archi -application com.archimatetool.commandline.app -consoleLog -nosplash --createEmptyModel --saveModel smoke.archimate")
-         machine.copy_from_vm("smoke.archimate", "")
-
-    with subtest("UI smoketest"):
-         machine.succeed("DISPLAY=:0 Archi --createEmptyModel >&2 &")
-         machine.wait_for_window("Archi")
-
-         # wait till main UI is open
-         # since OCR seems to be buggy wait_for_text was replaced by sleep, issue: #302965
-         # machine.wait_for_text("Welcome to Archi")
-         machine.sleep(20)
-
-         machine.screenshot("welcome-screen")
-  '';
-}
@@ -123,7 +123,7 @@ in
    inherit image;
    sshPublicKey = snakeOilPublicKey;

-    # ### https://nixos.org/channels/nixos-unstable nixos
+    # ### https://channels.nixos.org/nixos-unstable nixos
    userData = ''
      { pkgs, ... }:

@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "claude-code";
    publisher = "anthropic";
-    version = "2.0.44";
-    hash = "sha256-XsmHGsAlUWuLd9WqeWA4bW40gy62h7TCffiG9zOndPA=";
+    version = "2.0.46";
+    hash = "sha256-fa6/yU2JZChTzOc0oFfjb61fTvbJBAtvea1XWL2dqrM=";
  };

  meta = {
@@ -3852,8 +3852,8 @@ let
        mktplcRef = {
          publisher = "redhat";
          name = "java";
-          version = "1.47.0";
-          hash = "sha256-zxhNZJWi4mjENzHsO74FjOrztl5uZbVU3aMPO5DwGRo=";
+          version = "1.48.0";
+          hash = "sha256-/JW5PVM4USBflC5eloi8u9AgpdIzkpEmoHKYr1yVkgI=";
        };
        buildInputs = [ jdk ];
        meta = {
@@ -5318,8 +5318,8 @@ let
        mktplcRef = {
          name = "php-debug";
          publisher = "xdebug";
-          version = "1.37.0";
-          hash = "sha256-7Dz8i66tWPStk2fgFdZPY2Jz3j4IquJVyQbSnV+SVpk=";
+          version = "1.38.0";
+          hash = "sha256-QOA8At2akj9zLYxIuQJLkDL2Zg/isPIssFG/UipRBbU=";
        };
        meta = {
          description = "PHP Debug Adapter";
@@ -30,6 +30,8 @@ let

    postPatch = ''
      substituteInPlace scripts/generateLicenses.mjs --replace-fail 'https://raw.githubusercontent.com/microsoft/vscode/refs/heads/main/LICENSE.txt' '${pkgs.vscode-json-languageserver.src}/LICENSE.txt'
+      substituteInPlace webpack.config.mjs --replace-fail 'minify: TerserPlugin.swcMinify' 'minify: TerserPlugin.terserMinify'
+      substituteInPlace webpack.config.mjs --replace-fail 'env.skipLint' 'true'
    '';

    nativeBuildInputs = [
@@ -36,20 +36,20 @@ let

  hash =
    {
-      x86_64-linux = "sha256-C+VAuyK2/4unyQm6h0lJJnAMFpGZYC3v8qPaeHkL8gE=";
-      x86_64-darwin = "sha256-DpBTTIrKZdItpBgDp3SA9fL9eVvvp/O1FDsVK93nTPw=";
-      aarch64-linux = "sha256-o1YyBeQ/ydcd06vxf8sndik4DTqmcgqBSDAuOsMr3WM=";
-      aarch64-darwin = "sha256-7XO+Y8T85EeGOUy8traWt+MOFhtCmPQp0benY6ZJCS4=";
-      armv7l-linux = "sha256-FAjeY+D4sRpt4/7U+k5c+JZMRMT6vvkYdUTahiQt/mM=";
+      x86_64-linux = "sha256-zQ6HHayJy48g/0viZRWm2Ea3Oy50LLkLhSjum68HETk=";
+      x86_64-darwin = "sha256-nl4Dn1xiXKZbbKfBHx92h4cxlNTQ7ManVg1LyYvd1xQ=";
+      aarch64-linux = "sha256-Yxr2JgpE6nW1B9iCpu8zDHpKHkDr0yy5gQRjNsq73tc=";
+      aarch64-darwin = "sha256-iElSgv6jjmKoVZqrZ1ET2EnwyZfiaXkfx9xlSgsUsTc=";
+      armv7l-linux = "sha256-M0ZkHHnJB/BtRagJjCi3yfhKz8B4v79IYuiaqdmPrkg=";
    }
    .${system} or throwSystem;

  # Please backport all compatible updates to the stable release.
  # This is important for the extension ecosystem.
-  version = "1.106.0";
+  version = "1.106.1";

  # This is used for VS Code - Remote SSH test
-  rev = "ac4cbdf48759c7d8c3eb91ffe6bb04316e263c57";
+  rev = "cb1933bbc38d329b3595673a600fab5c7368f0a7";
 in
 callPackage ./generic.nix {
  pname = "vscode" + lib.optionalString isInsiders "-insiders";
@@ -82,7 +82,7 @@ callPackage ./generic.nix {
    src = fetchurl {
      name = "vscode-server-${rev}.tar.gz";
      url = "https://update.code.visualstudio.com/commit:${rev}/server-linux-x64/stable";
-      hash = "sha256-/ZBBSQTj0gr6H4wRLH9r2Qhukua8qeOq1MVlaScy+IE=";
+      hash = "sha256-HYyzA5qfE7CHFqenBjPCe9QhANP0mOgUoORRm/QvxVk=";
    };
    stdenv = stdenvNoCC;
  };
@@ -12,13 +12,13 @@
 }:
 mkLibretroCore {
  core = "mupen64plus-next";
-  version = "0-unstable-2025-08-20";
+  version = "0-unstable-2025-11-14";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "mupen64plus-libretro-nx";
-    rev = "222acbd3f98391458a047874d0372fe78e14fe94";
-    hash = "sha256-esssh/0nxNUDW/eMDQbWEdcSPuqLjnKLkK4mKN17HjQ=";
+    rev = "680e033fc8ed1a49df7b156d97164e0050ee13bc";
+    hash = "sha256-oBsOC1YtHx+mTgi9rwucU7rVeFt6RbxKrxHyPDx0eXg=";
  };

  # Fix for GCC 14
@@ -64,6 +64,7 @@ stdenv.mkDerivation (finalAttrs: {
  outputs = [
    "out"
    "dev"
+    "man"
  ];

  src = fetchurl {
@@ -85,6 +85,7 @@ stdenv.mkDerivation (finalAttrs: {
    "out"
    "dev"
    "devdoc"
+    "man"
  ];

  src = fetchurl {
@@ -25,6 +25,10 @@ let
 in
 symlinkJoin {
  name = "gimp-with-plugins-${gimp.version}";
+  outputs = [
+    "out"
+    "man"
+  ];

  paths = [ gimp ] ++ selectedPlugins;

@@ -41,6 +45,8 @@ symlinkJoin {
    for each in gimp gimp-console; do
      ln -sf "$each-${exeVersion}" $out/bin/$each
    done
+
+    ln -s ${gimp.man} $man
  '';

  inherit (gimp) meta;
@@ -75,6 +75,10 @@ in
 stdenv.mkDerivation (finalAttrs: {
  pname = "inkscape";
  version = "1.4.2";
+  outputs = [
+    "out"
+    "man"
+  ];

  src = fetchurl {
    url = "https://inkscape.org/release/inkscape-${finalAttrs.version}/source/archive/xz/dl/inkscape-${finalAttrs.version}.tar.xz";
@@ -17,6 +17,11 @@ in
 symlinkJoin {
  name = "inkscape-with-extensions-${lib.getVersion inkscape}";

+  outputs = [
+    "out"
+    "man"
+  ];
+
  paths = [ inkscape ] ++ selectedExtensions;

  nativeBuildInputs = [ makeWrapper ];
@@ -24,6 +29,8 @@ symlinkJoin {
  postBuild = ''
    rm -f $out/bin/inkscape
    makeWrapper "${inkscape}/bin/inkscape" "$out/bin/inkscape" --set INKSCAPE_DATADIR "$out/share"
+
+    ln -s ${inkscape.man} $man
  '';

  inherit (inkscape) meta;
@@ -1,41 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchFromGitHub,
-  cmake,
-  qtbase,
-  qtcharts,
-  wrapQtAppsHook,
-}:
-
-stdenv.mkDerivation rec {
-  pname = "clight-gui";
-  version = "unstable-2023-02-21";
-
-  src = fetchFromGitHub {
-    owner = "nullobsi";
-    repo = "clight-gui";
-    rev = "29e7216bfcc68135350a695ce446134bcb0463a6";
-    hash = "sha256-U4vaMwnVDZnYLc+K3/yD81Q1vyBL8uSrrhOHbjbox5U=";
-  };
-
-  buildInputs = [
-    qtbase
-    qtcharts
-  ];
-  nativeBuildInputs = [
-    cmake
-    wrapQtAppsHook
-  ];
-
-  sourceRoot = "${src.name}/src";
-
-  meta = with lib; {
-    description = "Qt GUI for clight";
-    homepage = "https://github.com/nullobsi/clight-gui";
-    license = licenses.gpl3Only;
-    maintainers = with maintainers; [ nickhu ];
-    mainProgram = "clight-gui";
-    platforms = platforms.linux;
-  };
-}
@@ -9,10 +9,10 @@

 buildMozillaMach rec {
  pname = "firefox";
-  version = "145.0";
+  version = "145.0.1";
  src = fetchurl {
    url = "mirror://mozilla/firefox/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "7ba40d7de95d7b93278f1823ce460b45c6bfac01eda52bc5c28f23a6bc858bdcbf8b4b4dc359b853372fffbcff4e7f0b276fefe22c2d4a0fa303e8ce1d2629be";
+    sha512 = "6e052fee46c31b2696ba5403f905e0b94b08ce354588cd6315d54ee1dcff9b82835d64ea5a57596dfb1866dd1518a29966fdaabdb4c3838103344bd2dc18c72d";
  };

  meta = {
@@ -886,13 +886,13 @@
    "vendorHash": "sha256-I8yMdS+yOk5doWGU9VPdl5ITGNrPhs5tGwluwXSrnI0="
  },
  "metio_migadu": {
-    "hash": "sha256-Itfy/EZiBI6j4GU9I3pQGpsMkykN8FVZ4FPhcUre8a0=",
+    "hash": "sha256-ZTaibLqcmbKYFbk497Z/fwYhx7LKH2LHkmQYvY+Lkm0=",
    "homepage": "https://registry.terraform.io/providers/metio/migadu",
    "owner": "metio",
    "repo": "terraform-provider-migadu",
-    "rev": "2025.10.30",
+    "rev": "2025.11.13",
    "spdx": "0BSD",
-    "vendorHash": "sha256-LMCFXZYZ9qwuu0/hA8mRNktCwwC4DRaqveW2dAJWQTQ="
+    "vendorHash": "sha256-chCFJXf0M2w9oxan9Jj/gwphnN3T/5v7PZKv5H0bcLI="
  },
  "mongey_kafka": {
    "hash": "sha256-rTa6c7jAMH027V7h/yUGVGz6TS0PDdObilxU0Vpr6FI=",
@@ -1003,13 +1003,13 @@
    "vendorHash": "sha256-0UM4I/oxIsWIP1G93KJsJxYofXrO4Yy86PEk0FnB1DE="
  },
  "okta_okta": {
-    "hash": "sha256-7vjNorBNdfF3cTu1ANx+5Uh5chAL54lWZ7R9cMI/gpA=",
+    "hash": "sha256-CZSh4NEFC3cT9/WoOrIFHx3RAt3q70Fmd0/bEU1aJTU=",
    "homepage": "https://registry.terraform.io/providers/okta/okta",
    "owner": "okta",
    "repo": "terraform-provider-okta",
-    "rev": "v6.4.0",
+    "rev": "v6.5.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-gLFMFVw44jJcuVzY6OcUHJ74rRCIQuon4p9RNoQPLPs="
+    "vendorHash": "sha256-YFxDfmWjB8QWBqX0KHlsr6DyzAEhkSFm/VaEmH1+VYg="
  },
  "oktadeveloper_oktaasa": {
    "hash": "sha256-2LhxgowqKvDDDOwdznusL52p2DKP+UiXALHcs9ZQd0U=",
@@ -1129,11 +1129,11 @@
    "vendorHash": "sha256-M2lJKmIR66lQKFkInjizn68ax2Gq4sim5Y3vZKyDhZ8="
  },
  "rootlyhq_rootly": {
-    "hash": "sha256-8UlBt9gmQflO5sB++U4Ih40+6p+U6N8PE1npQYg9D8U=",
+    "hash": "sha256-RlEQd09iCT3XAuDKCvDAe7iVgx8cDkEqogK/xpVCPrA=",
    "homepage": "https://registry.terraform.io/providers/rootlyhq/rootly",
    "owner": "rootlyhq",
    "repo": "terraform-provider-rootly",
-    "rev": "v4.3.7",
+    "rev": "v4.3.8",
    "spdx": "MPL-2.0",
    "vendorHash": "sha256-IpWN8hCZlXm9hbPr2VcjzU7wtqivUk2h+LOaaz4KyP4="
  },
@@ -1354,13 +1354,13 @@
    "vendorHash": "sha256-CcbNooB1AjLbyMkTNmAklqNm6o6FVCBEBiEnD/U5yGU="
  },
  "terraform-routeros_routeros": {
-    "hash": "sha256-Cg91s+EfooVymFNI4bTXqIAYHYjFVSMwMHagCa8VoJ0=",
+    "hash": "sha256-e9PJPjNyb9K5CpOsySnxIm209mnnL6bwzANQPClZLaE=",
    "homepage": "https://registry.terraform.io/providers/terraform-routeros/routeros",
    "owner": "terraform-routeros",
    "repo": "terraform-provider-routeros",
-    "rev": "v1.91.0",
+    "rev": "v1.92.1",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-AHl0rUuAASk+3qH0C1bRl8IgKWKY+g5rMhzf5/IHQIA="
+    "vendorHash": "sha256-3I8nOAJTrcP7nN36Emw1ztWHBOdHHfxgo2c63o45hQ8="
  },
  "timohirt_hetznerdns": {
    "hash": "sha256-wmXZ6+5Ex3G2JUdw2is2VIo/X1X0V1Auw5KmYpGllug=",
@@ -194,9 +194,9 @@ rec {
  mkTerraform = attrs: pluggable (generic attrs);

  terraform_1 = mkTerraform {
-    version = "1.13.5";
-    hash = "sha256-F8fpTI6kPrjOM+4N67uBCpsxMLQUR6sXzTr1SYFI9Ww=";
-    vendorHash = "sha256-3skDvOcDlTOv8okiGmaB0bvkoMrQjutGdvpxcradqUk=";
+    version = "1.14.0";
+    hash = "sha256-G9GyrwELOuzQqTMimC+z2GJUjq+c5YJDoE313JSsX5w=";
+    vendorHash = "sha256-T6baxFk5lrmhyeJgcn7s5cF+utaogSQOD9S5omEKTZg=";
    patches = [ ./provider-path-0_15.patch ];
    passthru = {
      inherit plugins;
@@ -1,18 +1,19 @@
-diff -Naur terraform.old/internal/command/init.go terraform.new/internal/command/init.go
--- terraform.old/internal/command/init.go
-+++ terraform.new/internal/command/init.go
-@@ -7,6 +7,7 @@
- 	"context"
+diff -Naur terraform.old/internal/command/init_run.go terraform.new/internal/command/init_run.go
+--- terraform.old/internal/command/init_run.go
+++ terraform.new/internal/command/init_run.go
+@@ -6,6 +6,7 @@
+ import (
 	"errors"
 	"fmt"
 +	"os"
- 	"log"
- 	"reflect"
- 	"sort"
-@@ -79,6 +80,11 @@
+ 	"strings"
+ 
+ 	"github.com/hashicorp/hcl/v2"
+@@ -76,6 +77,11 @@
+ 	if c.forceInitCopy {
 		c.migrateState = true
 	}
-
+ 
 +	val, ok := os.LookupEnv("NIX_TERRAFORM_PLUGIN_DIR")
 +	if ok {
 +		initArgs.PluginPath = append(initArgs.PluginPath, val)
@@ -42,14 +42,14 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "telegram-desktop-unwrapped";
-  version = "6.3.0";
+  version = "6.3.1";

  src = fetchFromGitHub {
    owner = "telegramdesktop";
    repo = "tdesktop";
    rev = "v${finalAttrs.version}";
    fetchSubmodules = true;
-    hash = "sha256-YExl9mn2aEL1WOqT2fuX/KxKAV28q0WKVG1AMvPANwA=";
+    hash = "sha256-kIiOHXFOjHCE3GaizNvpu8rUCuJKBN5Oi7p0NvHYy04=";
  };

  nativeBuildInputs = [
@@ -48,6 +48,11 @@ stdenv.mkDerivation rec {
  pname = "evolution";
  version = "3.58.1";

+  outputs = [
+    "out"
+    "man"
+  ];
+
  src = fetchurl {
    url = "mirror://gnome/sources/evolution/${lib.versions.majorMinor version}/${pname}-${version}.tar.xz";
    hash = "sha256-A9jQzM0QKqGnPDHZ4vN0yz24Os3fwRJskYavY9psvsw=";
@@ -35,6 +35,11 @@ stdenv.mkDerivation (finalAttrs: {
  pname = "wayfire";
  version = "0.10.0";

+  outputs = [
+    "out"
+    "man"
+  ];
+
  src = fetchFromGitHub {
    owner = "WayfireWM";
    repo = "wayfire";
@@ -17,6 +17,10 @@
 stdenv.mkDerivation (finalAttrs: {
  pname = "wf-shell";
  version = "0.10.0";
+  outputs = [
+    "out"
+    "man"
+  ];

  src = fetchFromGitHub {
    owner = "WayfireWM";
@@ -1,10 +1,10 @@
 # This file is automatically @generated by Cargo.
 # It is not intended for manual editing.
-version = 3
+version = 4

 [[package]]
 name = "add-determinism"
-version = "0.7.0"
+version = "0.7.2"
 dependencies = [
 "anyhow",
 "chrono",
@@ -14,12 +14,12 @@ dependencies = [
 "indoc",
 "itertools",
 "log",
- "nix",
 "num-bigint-dig",
 "num-integer",
 "num-traits",
 "regex",
 "rlimit",
+ "selinux",
 "tempfile",
 "thiserror",
 "time",
@@ -35,9 +35,9 @@ checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"

 [[package]]
 name = "aho-corasick"
-version = "1.1.3"
+version = "1.1.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e60d3430d3a69478ad0993f19238d2df97c507009a52b3c10addcd7f6bcb916"
+checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
 dependencies = [
 "memchr",
 ]
@@ -53,9 +53,9 @@ dependencies = [

 [[package]]
 name = "anstream"
-version = "0.6.20"
+version = "0.6.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3ae563653d1938f79b1ab1b5e668c87c76a9930414574a6583a7b7e11a8e6192"
+checksum = "43d5b281e737544384e969a5ccad3f1cdd24b48086a0fc1b2a5262a26b8f4f4a"
 dependencies = [
 "anstyle",
 "anstyle-parse",
@@ -68,9 +68,9 @@ dependencies = [

 [[package]]
 name = "anstyle"
-version = "1.0.11"
+version = "1.0.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "862ed96ca487e809f1c8e5a8447f6ee2cf102f846893800b20cebdf541fc6bbd"
+checksum = "5192cca8006f1fd4f7237516f40fa183bb07f8fbdfedaa0036de5ea9b0b45e78"

 [[package]]
 name = "anstyle-parse"
@@ -83,29 +83,29 @@ dependencies = [

 [[package]]
 name = "anstyle-query"
-version = "1.1.4"
+version = "1.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9e231f6134f61b71076a3eab506c379d4f36122f2af15a9ff04415ea4c3339e2"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
 dependencies = [
- "windows-sys 0.60.2",
+ "windows-sys",
 ]

 [[package]]
 name = "anstyle-wincon"
-version = "3.0.10"
+version = "3.0.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3e0633414522a32ffaac8ac6cc8f748e090c5717661fddeea04219e2344f5f2a"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
 dependencies = [
 "anstyle",
 "once_cell_polyfill",
- "windows-sys 0.60.2",
+ "windows-sys",
 ]

 [[package]]
 name = "anyhow"
-version = "1.0.99"
+version = "1.0.100"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b0674a1ddeecb70197781e945de4b3b8ffb61fa939a5597bcf48503737663100"
+checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61"

 [[package]]
 name = "autocfg"
@@ -114,10 +114,30 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"

 [[package]]
-name = "bitflags"
-version = "2.9.4"
+name = "bindgen"
+version = "0.72.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2261d10cca569e4643e526d8dc2e62e433cc8aba21ab764233731f8d369bf394"
+checksum = "993776b509cfb49c750f11b8f07a46fa23e0a1386ffc01fb1e7d343efc387895"
+dependencies = [
+ "bitflags",
+ "cexpr",
+ "clang-sys",
+ "itertools",
+ "log",
+ "prettyplease",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "rustc-hash",
+ "shlex",
+ "syn",
+]
+
+[[package]]
+name = "bitflags"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "812e12b5285cc515a9c72a5c1d3b6d46a19dac5acfef5265968c166106e31dd3"

 [[package]]
 name = "bumpalo"
@@ -133,25 +153,28 @@ checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"

 [[package]]
 name = "cc"
-version = "1.2.36"
+version = "1.2.46"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5252b3d2648e5eedbc1a6f501e3c795e07025c1e93bbf8bbdd6eef7f447a6d54"
+checksum = "b97463e1064cb1b1c1384ad0a0b9c8abd0988e2a91f52606c80ef14aadb63e36"
 dependencies = [
 "find-msvc-tools",
 "shlex",
 ]

 [[package]]
-name = "cfg-if"
-version = "1.0.3"
+name = "cexpr"
+version = "0.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2fd1289c04a9ea8cb22300a459a72a385d7c73d3259e2ed7dcb2af674838cfa9"
+checksum = "6fac387a98bb7c37292057cffc56d62ecb629900026402633ae9160df93a8766"
+dependencies = [
+ "nom",
+]

 [[package]]
-name = "cfg_aliases"
-version = "0.1.1"
+name = "cfg-if"
+version = "1.0.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fd16c4719339c4530435d38e511904438d07cce7950afa3718a84ac36c10e89e"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"

 [[package]]
 name = "chrono"
@@ -163,14 +186,25 @@ dependencies = [
 "js-sys",
 "num-traits",
 "wasm-bindgen",
- "windows-link 0.2.0",
+ "windows-link",
+]
+
+[[package]]
+name = "clang-sys"
+version = "1.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b023947811758c97c59bf9d1c188fd619ad4718dcaa767947df1cadb14f39f4"
+dependencies = [
+ "glob",
+ "libc",
+ "libloading",
 ]

 [[package]]
 name = "clap"
-version = "4.5.47"
+version = "4.5.52"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7eac00902d9d136acd712710d71823fb8ac8004ca445a89e73a41d45aa712931"
+checksum = "aa8120877db0e5c011242f96806ce3c94e0737ab8108532a76a3300a01db2ab8"
 dependencies = [
 "clap_builder",
 "clap_derive",
@@ -178,9 +212,9 @@ dependencies = [

 [[package]]
 name = "clap_builder"
-version = "4.5.47"
+version = "4.5.52"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2ad9bbf750e73b5884fb8a211a9424a1906c1e156724260fdae972f31d70e1d6"
+checksum = "02576b399397b659c26064fbc92a75fede9d18ffd5f80ca1cd74ddab167016e1"
 dependencies = [
 "anstream",
 "anstyle",
@@ -190,9 +224,9 @@ dependencies = [

 [[package]]
 name = "clap_derive"
-version = "4.5.47"
+version = "4.5.49"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bbfd7eae0b0f1a6e63d4b13c9c478de77c2eb546fba158ad50b4203dc24b9f9c"
+checksum = "2a0b5487afeab2deb2ff4e03a807ad1a03ac532ff5a2cee5d86884440c7f7671"
 dependencies = [
 "heck",
 "proc-macro2",
@@ -202,9 +236,9 @@ dependencies = [

 [[package]]
 name = "clap_lex"
-version = "0.7.5"
+version = "0.7.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b94f61472cee1439c0b966b47e3aca9ae07e45d070759512cd390ea2bebc6675"
+checksum = "a1d728cc89cf3aee9ff92b05e62b19ee65a02b5702cff7d5a377e32c6ae29d8d"

 [[package]]
 name = "colorchoice"
@@ -244,13 +278,19 @@ checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"

 [[package]]
 name = "deranged"
-version = "0.5.3"
+version = "0.5.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d630bccd429a5bb5a64b5e94f693bfc48c9f8566418fda4c494cc94f911f87cc"
+checksum = "ececcb659e7ba858fb4f10388c250a7252eb0a27373f1a72b8748afdd248e587"
 dependencies = [
 "powerfmt",
 ]

+[[package]]
+name = "dunce"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
+
 [[package]]
 name = "either"
 version = "1.15.0"
@@ -264,7 +304,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
 "libc",
- "windows-sys 0.61.0",
+ "windows-sys",
 ]

 [[package]]
@@ -275,15 +315,15 @@ checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be"

 [[package]]
 name = "find-msvc-tools"
-version = "0.1.1"
+version = "0.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7fd99930f64d146689264c637b5af2f0233a933bef0d8570e2526bf9e083192d"
+checksum = "3a3076410a55c90011c298b04d0cfa770b00fa04e1e3c97d3f6c9de105a03844"

 [[package]]
 name = "flate2"
-version = "1.1.2"
+version = "1.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4a3d7db9596fecd151c5f638c0ee5d5bd487b6e0ea232e5dc96d5250f6f94b1d"
+checksum = "bfe33edd8e85a12a67454e37f8c75e730830d83e313556ab9ebf9ee7fbeb3bfb"
 dependencies = [
 "crc32fast",
 "libz-sys",
@@ -298,19 +338,19 @@ checksum = "335ff9f135e4384c8150d6f27c6daed433577f86b4750418338c01a1a2528592"
 dependencies = [
 "cfg-if",
 "libc",
- "wasi 0.11.1+wasi-snapshot-preview1",
+ "wasi",
 ]

 [[package]]
 name = "getrandom"
-version = "0.3.3"
+version = "0.3.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "26145e563e54f2cadc477553f1ec5ee650b00862f0a58bcd12cbdc5f0ea2d2f4"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
 dependencies = [
 "cfg-if",
 "libc",
 "r-efi",
- "wasi 0.14.5+wasi-0.2.4",
+ "wasip2",
 ]

 [[package]]
@@ -327,9 +367,9 @@ checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"

 [[package]]
 name = "iana-time-zone"
-version = "0.1.63"
+version = "0.1.64"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b0c919e5debc312ad217002b8048a17b7d83f80703865bbfcfebb0458b0b27d8"
+checksum = "33e57f83510bb73707521ebaffa789ec8caf86f9657cad665b092b581d40e9fb"
 dependencies = [
 "android_system_properties",
 "core-foundation-sys",
@@ -351,15 +391,18 @@ dependencies = [

 [[package]]
 name = "indoc"
-version = "2.0.6"
+version = "2.0.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f4c7245a08504955605670dbf141fceab975f15ca21570696aebe9d2e71576bd"
+checksum = "79cf5c93f93228cf8efb3ba362535fb11199ac548a09ce117c9b1adc3030d706"
+dependencies = [
+ "rustversion",
+]

 [[package]]
 name = "is_terminal_polyfill"
-version = "1.70.1"
+version = "1.70.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7943c866cc5cd64cbc25b2e01621d07fa8eb2a1a23160ee81ce38704e97b8ecf"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"

 [[package]]
 name = "itertools"
@@ -372,9 +415,9 @@ dependencies = [

 [[package]]
 name = "js-sys"
-version = "0.3.78"
+version = "0.3.82"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0c0b063578492ceec17683ef2f8c5e89121fbd0b172cbc280635ab7567db2738"
+checksum = "b011eec8cc36da2aab2d5cff675ec18454fad408585853910a202391cf9f8e65"
 dependencies = [
 "once_cell",
 "wasm-bindgen",
@@ -391,9 +434,19 @@ dependencies = [

 [[package]]
 name = "libc"
-version = "0.2.175"
+version = "0.2.177"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6a82ae493e598baaea5209805c49bbf2ea7de956d50d7da0da1164f9c6d28543"
+checksum = "2874a2af47a2325c2001a6e6fad9b16a53b802102b528163885171cf92b15976"
+
+[[package]]
+name = "libloading"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7c4b02199fee7c5d21a5ae7d8cfa79a6ef5bb2fc834d6e9058e89c825efdc55"
+dependencies = [
+ "cfg-if",
+ "windows-link",
+]

 [[package]]
 name = "libm"
@@ -403,9 +456,9 @@ checksum = "f9fbbcab51052fe104eb5e5d351cf728d30a5be1fe14d9be8a3b097481fb97de"

 [[package]]
 name = "libz-sys"
-version = "1.1.22"
+version = "1.1.23"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b70e7a7df205e92a1a4cd9aaae7898dac0aa555503cc0a649494d0d60e7651d"
+checksum = "15d118bbf3771060e7311cc7bb0545b01d08a8b4a7de949198dec1fa0ca1c0f7"
 dependencies = [
 "cc",
 "pkg-config",
@@ -426,18 +479,15 @@ checksum = "34080505efa8e45a4b816c349525ebe327ceaa8559756f0356cba97ef3bf7432"

 [[package]]
 name = "memchr"
-version = "2.7.5"
+version = "2.7.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32a282da65faaf38286cf3be983213fcf1d2e2a58700e808f83f4ea9a4804bc0"
+checksum = "f52b00d39961fc5b2736ea853c9cc86238e165017a493d1d5c8eac6bdc4cc273"

 [[package]]
-name = "memoffset"
-version = "0.9.1"
+name = "minimal-lexical"
+version = "0.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a"
-dependencies = [
- "autocfg",
-]
+checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"

 [[package]]
 name = "miniz_oxide"
@@ -446,28 +496,25 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
 dependencies = [
 "adler2",
+ "simd-adler32",
 ]

 [[package]]
-name = "nix"
-version = "0.28.0"
+name = "nom"
+version = "7.1.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ab2156c4fce2f8df6c499cc1c763e4394b7482525bf2a9701c9d79d215f519e4"
+checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
 dependencies = [
- "bitflags",
- "cfg-if",
- "cfg_aliases",
- "libc",
- "memoffset",
+ "memchr",
+ "minimal-lexical",
 ]

 [[package]]
 name = "num-bigint-dig"
-version = "0.8.4"
+version = "0.8.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc84195820f291c7697304f3cbdadd1cb7199c0efc917ff5eafd71225c136151"
+checksum = "e661dda6640fad38e827a6d4a310ff4763082116fe217f279885c97f511bb0b7"
 dependencies = [
- "byteorder",
 "lazy_static",
 "libm",
 "num-integer",
@@ -521,9 +568,9 @@ checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"

 [[package]]
 name = "once_cell_polyfill"
-version = "1.70.1"
+version = "1.70.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a4895175b425cb1f87721b59f0f286c2092bd4af812243672510e1ac53e2e0ad"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"

 [[package]]
 name = "pkg-config"
@@ -547,19 +594,29 @@ dependencies = [
 ]

 [[package]]
-name = "proc-macro2"
-version = "1.0.101"
+name = "prettyplease"
+version = "0.2.37"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "89ae43fd86e4158d6db51ad8e2b80f313af9cc74f5c0e03ccb87de09998732de"
+checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
+dependencies = [
+ "proc-macro2",
+ "syn",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.103"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5ee95bc4ef87b8d5ba32e8b7714ccc834865276eab0aed5c9958d00ec45f49e8"
 dependencies = [
 "unicode-ident",
 ]

 [[package]]
 name = "quote"
-version = "1.0.40"
+version = "1.0.42"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1885c039570dc00dcb4ff087a89e185fd56bae234ddc7f056a945bf36467248d"
+checksum = "a338cc41d27e6cc6dce6cefc13a0729dfbb81c262b1f519331575dd80ef3067f"
 dependencies = [
 "proc-macro2",
 ]
@@ -601,10 +658,16 @@ dependencies = [
 ]

 [[package]]
-name = "regex"
-version = "1.11.2"
+name = "reference-counted-singleton"
+version = "0.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "23d7fd106d8c02486a8d64e778353d1cffe08ce79ac2e82f540c86d0facf6912"
+checksum = "5daffa8f5ca827e146485577fa9dba9bd9c6921e06e954ab8f6408c10f753086"
+
+[[package]]
+name = "regex"
+version = "1.12.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "843bc0191f75f3e22651ae5f1e72939ab2f72a4bc30fa80a066bd66edefc24d4"
 dependencies = [
 "aho-corasick",
 "memchr",
@@ -614,9 +677,9 @@ dependencies = [

 [[package]]
 name = "regex-automata"
-version = "0.4.10"
+version = "0.4.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6b9458fa0bfeeac22b5ca447c63aaf45f28439a709ccd244698632f9aa6394d6"
+checksum = "5276caf25ac86c8d810222b3dbb938e512c55c6831a10f3e6ed1c93b84041f1c"
 dependencies = [
 "aho-corasick",
 "memchr",
@@ -625,9 +688,9 @@ dependencies = [

 [[package]]
 name = "regex-syntax"
-version = "0.8.6"
+version = "0.8.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "caf4aa5b0f434c91fe5c7f1ecb6a5ece2130b02ad2a590589dda5146df959001"
+checksum = "7a2d987857b319362043e95f5353c0535c1f58eec5336fdfcf626430af7def58"

 [[package]]
 name = "rlimit"
@@ -638,6 +701,12 @@ dependencies = [
 "libc",
 ]

+[[package]]
+name = "rustc-hash"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d"
+
 [[package]]
 name = "rustix"
 version = "1.1.2"
@@ -648,7 +717,7 @@ dependencies = [
 "errno",
 "libc",
 "linux-raw-sys",
- "windows-sys 0.61.0",
+ "windows-sys",
 ]

 [[package]]
@@ -667,19 +736,54 @@ dependencies = [
 ]

 [[package]]
-name = "serde"
-version = "1.0.219"
+name = "selinux"
+version = "0.4.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f0e2c6ed6606019b4e29e69dbaba95b11854410e5347d525002456dbbb786b6"
+checksum = "0139b2436c81305eb6bda33af151851f75bd62783817b25f44daa371119c30b5"
+dependencies = [
+ "bitflags",
+ "libc",
+ "once_cell",
+ "reference-counted-singleton",
+ "selinux-sys",
+ "thiserror",
+]
+
+[[package]]
+name = "selinux-sys"
+version = "0.6.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "debaba5832b4831ffe0ba9118b526c752c960f41c46c4ef197d9a15f5179d6fd"
+dependencies = [
+ "bindgen",
+ "cc",
+ "dunce",
+ "walkdir",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
 dependencies = [
 "serde_derive",
 ]

 [[package]]
 name = "serde_derive"
-version = "1.0.219"
+version = "1.0.228"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b0276cf7f2c73365f7157c8123c21cd9a50fbbd844757af28ca1f5925fc2a00"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
 dependencies = [
 "proc-macro2",
 "quote",
@@ -692,6 +796,12 @@ version = "1.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"

+[[package]]
+name = "simd-adler32"
+version = "0.3.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d66dc143e6b11c1eddc06d5c423cfc97062865baf299914ab64caa38182078fe"
+
 [[package]]
 name = "smallvec"
 version = "1.15.1"
@@ -712,9 +822,9 @@ checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"

 [[package]]
 name = "syn"
-version = "2.0.106"
+version = "2.0.110"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ede7c438028d4436d71104916910f5bb611972c5cfd7f89b8300a8186e6fada6"
+checksum = "a99801b5bd34ede4cf3fc688c5919368fea4e4814a4664359503e6015b280aea"
 dependencies = [
 "proc-macro2",
 "quote",
@@ -723,15 +833,15 @@ dependencies = [

 [[package]]
 name = "tempfile"
-version = "3.22.0"
+version = "3.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "84fa4d11fadde498443cca10fd3ac23c951f0dc59e080e9f4b93d4df4e4eea53"
+checksum = "2d31c77bdf42a745371d260a26ca7163f1e0924b64afa0b688e61b5a9fa02f16"
 dependencies = [
 "fastrand",
- "getrandom 0.3.3",
+ "getrandom 0.3.4",
 "once_cell",
 "rustix",
- "windows-sys 0.61.0",
+ "windows-sys",
 ]

 [[package]]
@@ -756,9 +866,9 @@ dependencies = [

 [[package]]
 name = "time"
-version = "0.3.43"
+version = "0.3.44"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "83bde6f1ec10e72d583d91623c939f623002284ef622b87de38cfd546cbf2031"
+checksum = "91e7d9e3bb61134e77bde20dd4825b97c010155709965fedf0f49bb138e52a9d"
 dependencies = [
 "deranged",
 "num-conv",
@@ -775,9 +885,9 @@ checksum = "40868e7c1d2f0b8d73e4a8c7f0ff63af4f6d19be117e90bd73eb1d62cf831c6b"

 [[package]]
 name = "unicode-ident"
-version = "1.0.18"
+version = "1.0.22"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a5f39404a5da50712a4c1eecf25e90dd62b613502b7e925fd4e4d19b5c96512"
+checksum = "9312f7c4f6ff9069b165498234ce8be658059c6728633667c526e27dc2cf1df5"

 [[package]]
 name = "utf8parse"
@@ -807,29 +917,20 @@ version = "0.11.1+wasi-snapshot-preview1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"

-[[package]]
-name = "wasi"
-version = "0.14.5+wasi-0.2.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a4494f6290a82f5fe584817a676a34b9d6763e8d9d18204009fb31dceca98fd4"
-dependencies = [
- "wasip2",
-]
-
 [[package]]
 name = "wasip2"
-version = "1.0.0+wasi-0.2.4"
+version = "1.0.1+wasi-0.2.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "03fa2761397e5bd52002cd7e73110c71af2109aca4e521a9f40473fe685b0a24"
+checksum = "0562428422c63773dad2c345a1882263bbf4d65cf3f42e90921f787ef5ad58e7"
 dependencies = [
 "wit-bindgen",
 ]

 [[package]]
 name = "wasm-bindgen"
-version = "0.2.101"
+version = "0.2.105"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e14915cadd45b529bb8d1f343c4ed0ac1de926144b746e2710f9cd05df6603b"
+checksum = "da95793dfc411fbbd93f5be7715b0578ec61fe87cb1a42b12eb625caa5c5ea60"
 dependencies = [
 "cfg-if",
 "once_cell",
@@ -838,25 +939,11 @@ dependencies = [
 "wasm-bindgen-shared",
 ]

-[[package]]
-name = "wasm-bindgen-backend"
-version = "0.2.101"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e28d1ba982ca7923fd01448d5c30c6864d0a14109560296a162f80f305fb93bb"
-dependencies = [
- "bumpalo",
- "log",
- "proc-macro2",
- "quote",
- "syn",
- "wasm-bindgen-shared",
-]
-
 [[package]]
 name = "wasm-bindgen-macro"
-version = "0.2.101"
+version = "0.2.105"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c3d463ae3eff775b0c45df9da45d68837702ac35af998361e2c84e7c5ec1b0d"
+checksum = "04264334509e04a7bf8690f2384ef5265f05143a4bff3889ab7a3269adab59c2"
 dependencies = [
 "quote",
 "wasm-bindgen-macro-support",
@@ -864,22 +951,22 @@ dependencies = [

 [[package]]
 name = "wasm-bindgen-macro-support"
-version = "0.2.101"
+version = "0.2.105"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7bb4ce89b08211f923caf51d527662b75bdc9c9c7aab40f86dcb9fb85ac552aa"
+checksum = "420bc339d9f322e562942d52e115d57e950d12d88983a14c79b86859ee6c7ebc"
 dependencies = [
+ "bumpalo",
 "proc-macro2",
 "quote",
 "syn",
- "wasm-bindgen-backend",
 "wasm-bindgen-shared",
 ]

 [[package]]
 name = "wasm-bindgen-shared"
-version = "0.2.101"
+version = "0.2.105"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f143854a3b13752c6950862c906306adb27c7e839f7414cec8fea35beab624c1"
+checksum = "76f218a38c84bcb33c25ec7059b07847d465ce0e0a76b995e134a45adcb6af76"
 dependencies = [
 "unicode-ident",
 ]
@@ -890,27 +977,27 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.61.0",
+ "windows-sys",
 ]

 [[package]]
 name = "windows-core"
-version = "0.61.2"
+version = "0.62.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c0fdd3ddb90610c7638aa2b3a3ab2904fb9e5cdbecc643ddb3647212781c4ae3"
+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
 dependencies = [
 "windows-implement",
 "windows-interface",
- "windows-link 0.1.3",
+ "windows-link",
 "windows-result",
 "windows-strings",
 ]

 [[package]]
 name = "windows-implement"
-version = "0.60.0"
+version = "0.60.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a47fddd13af08290e67f4acabf4b459f647552718f683a7b415d290ac744a836"
+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
 dependencies = [
 "proc-macro2",
 "quote",
@@ -919,9 +1006,9 @@ dependencies = [

 [[package]]
 name = "windows-interface"
-version = "0.59.1"
+version = "0.59.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bd9211b69f8dcdfa817bfd14bf1c97c9188afa36f4750130fcdf3f400eca9fa8"
+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
 dependencies = [
 "proc-macro2",
 "quote",
@@ -930,122 +1017,42 @@ dependencies = [

 [[package]]
 name = "windows-link"
-version = "0.1.3"
+version = "0.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e6ad25900d524eaabdbbb96d20b4311e1e7ae1699af4fb28c17ae66c80d798a"
-
-[[package]]
-name = "windows-link"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "45e46c0661abb7180e7b9c281db115305d49ca1709ab8242adf09666d2173c65"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"

 [[package]]
 name = "windows-result"
-version = "0.3.4"
+version = "0.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "56f42bd332cc6c8eac5af113fc0c1fd6a8fd2aa08a0119358686e5160d0586c6"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
 dependencies = [
- "windows-link 0.1.3",
+ "windows-link",
 ]

 [[package]]
 name = "windows-strings"
-version = "0.4.2"
+version = "0.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "56e6c93f3a0c3b36176cb1327a4958a0353d5d166c2a35cb268ace15e91d3b57"
+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
 dependencies = [
- "windows-link 0.1.3",
+ "windows-link",
 ]

 [[package]]
 name = "windows-sys"
-version = "0.60.2"
+version = "0.61.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
 dependencies = [
- "windows-targets",
+ "windows-link",
 ]

-[[package]]
-name = "windows-sys"
-version = "0.61.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e201184e40b2ede64bc2ea34968b28e33622acdbbf37104f0e4a33f7abe657aa"
-dependencies = [
- "windows-link 0.2.0",
-]
-
-[[package]]
-name = "windows-targets"
-version = "0.53.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d5fe6031c4041849d7c496a8ded650796e7b6ecc19df1a431c1a363342e5dc91"
-dependencies = [
- "windows-link 0.1.3",
- "windows_aarch64_gnullvm",
- "windows_aarch64_msvc",
- "windows_i686_gnu",
- "windows_i686_gnullvm",
- "windows_i686_msvc",
- "windows_x86_64_gnu",
- "windows_x86_64_gnullvm",
- "windows_x86_64_msvc",
-]
-
-[[package]]
-name = "windows_aarch64_gnullvm"
-version = "0.53.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "86b8d5f90ddd19cb4a147a5fa63ca848db3df085e25fee3cc10b39b6eebae764"
-
-[[package]]
-name = "windows_aarch64_msvc"
-version = "0.53.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c7651a1f62a11b8cbd5e0d42526e55f2c99886c77e007179efff86c2b137e66c"
-
-[[package]]
-name = "windows_i686_gnu"
-version = "0.53.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c1dc67659d35f387f5f6c479dc4e28f1d4bb90ddd1a5d3da2e5d97b42d6272c3"
-
-[[package]]
-name = "windows_i686_gnullvm"
-version = "0.53.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9ce6ccbdedbf6d6354471319e781c0dfef054c81fbc7cf83f338a4296c0cae11"
-
-[[package]]
-name = "windows_i686_msvc"
-version = "0.53.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "581fee95406bb13382d2f65cd4a908ca7b1e4c2f1917f143ba16efe98a589b5d"
-
-[[package]]
-name = "windows_x86_64_gnu"
-version = "0.53.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2e55b5ac9ea33f2fc1716d1742db15574fd6fc8dadc51caab1c16a3d3b4190ba"
-
-[[package]]
-name = "windows_x86_64_gnullvm"
-version = "0.53.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0a6e035dd0599267ce1ee132e51c27dd29437f63325753051e71dd9e42406c57"
-
-[[package]]
-name = "windows_x86_64_msvc"
-version = "0.53.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "271414315aff87387382ec3d271b52d7ae78726f5d44ac98b4f4030c91880486"
-
 [[package]]
 name = "wit-bindgen"
-version = "0.45.1"
+version = "0.46.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c573471f125075647d03df72e026074b7203790d41351cd6edc96f46bcccd36"
+checksum = "f17a85883d4e6d00e8a97c586de764dabcc06133f7f1d55dce5cdc070ad7fe59"

 [[package]]
 name = "zerocopy"
@@ -2,7 +2,6 @@
  lib,
  rustPlatform,
  fetchFromGitHub,
-  fetchpatch,
  pkg-config,
  zlib,
  stdenv,
@@ -10,13 +9,13 @@

 rustPlatform.buildRustPackage rec {
  pname = "add-determinism";
-  version = "0.7.0";
+  version = "0.7.2";

  src = fetchFromGitHub {
    owner = "keszybz";
    repo = "add-determinism";
    tag = "v${version}";
-    hash = "sha256-jUBHIdqPuK95jNNMFeSgj0xd3WSneqRa0kcVDhFC3aw=";
+    hash = "sha256-wy0jle1Fhq4wpxMY1IeS3FGHOOaH0Bu8qhvmaIRAJyI=";
  };

  # this project has no Cargo.lock now
@@ -112,8 +112,11 @@ rustPlatform.buildRustPackage {
      ];
    in
    ''
-      patchelf --set-rpath "${libPath}" "$out/bin/airshipper"
-      wrapProgram "$out/bin/airshipper" --set VELOREN_PATCHER "${patch}"
+      # We set LD_LIBRARY_PATH instead of using patchelf in order to propagate the libs
+      # to both Airshipper itself as well as the binaries downloaded by Airshipper.
+      wrapProgram "$out/bin/airshipper" \
+        --set VELOREN_PATCHER "${patch}" \
+        --prefix LD_LIBRARY_PATH : "${libPath}"
    '';

  doCheck = false;
@@ -7,16 +7,16 @@

 buildNpmPackage rec {
  pname = "all-the-package-names";
-  version = "2.0.2263";
+  version = "2.0.2270";

  src = fetchFromGitHub {
    owner = "nice-registry";
    repo = "all-the-package-names";
    tag = "v${version}";
-    hash = "sha256-LLNsUe5Dx2mhEjP5LGssPIDDouGGlHN+wl/tVEJySi8=";
+    hash = "sha256-r8FzTw86jB999wfBPWNbyBKqfFQxGpQqu/leeP517/k=";
  };

-  npmDepsHash = "sha256-eLrghoMLPEKs3f0CCmtlO/KUHgpIHnNulIAmRNc4maw=";
+  npmDepsHash = "sha256-gL8gqEmobDAHQWxgAf7q+0VFpcGImXiAdZMSVhkZY4A=";

  passthru.updateScript = nix-update-script { };

@@ -0,0 +1,62 @@
+{
+  lib,
+  stdenv,
+  callPackage,
+  vscode-generic,
+  fetchurl,
+  commandLineArgs ? "",
+  useVSCodeRipgrep ? stdenv.hostPlatform.isDarwin,
+}:
+
+let
+  inherit (stdenv) hostPlatform;
+
+  sources =
+    (lib.importJSON ./sources.json)."${hostPlatform.system}"
+      or (throw "antigravity: unsupported system ${hostPlatform.system}");
+
+  version = "1.11.2-6251250307170304";
+  vscodeVersion = "1.104.0";
+in
+callPackage vscode-generic {
+  inherit
+    commandLineArgs
+    useVSCodeRipgrep
+    version
+    vscodeVersion
+    ;
+
+  pname = "antigravity";
+
+  executableName = "antigravity";
+  longName = "Google Antigravity";
+  shortName = "Antigravity";
+  libraryName = "antigravity";
+  iconName = "antigravity";
+
+  src = fetchurl {
+    inherit (sources) url hash;
+  };
+
+  sourceRoot = if hostPlatform.isDarwin then "Antigravity.app" else "Antigravity";
+
+  tests = { };
+  updateScript = ./update.sh;
+
+  meta = {
+    mainProgram = "antigravity";
+    description = "Agentic development platform, evolving the IDE into the agent-first era";
+    homepage = "https://antigravity.google";
+    downloadPage = "https://antigravity.google/download";
+    changelog = "https://antigravity.google/changelog";
+    license = lib.licenses.unfree;
+    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
+    platforms = [
+      "x86_64-linux"
+      "aarch64-linux"
+      "x86_64-darwin"
+      "aarch64-darwin"
+    ];
+    maintainers = with lib.maintainers; [ Zaczero ];
+  };
+}
@@ -0,0 +1,18 @@
+{
+  "x86_64-linux": {
+    "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.11.2-6251250307170304/linux-x64/Antigravity.tar.gz",
+    "hash": "sha256-0bERWudsJ1w3bqZg4eTS3CDrPnLWogawllBblEpfZLc="
+  },
+  "aarch64-linux": {
+    "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.11.2-6251250307170304/linux-arm/Antigravity.tar.gz",
+    "hash": "sha256-UBVxx05mKcqdAy0Usc4heGCJ/UtK86+RSsQzgkngpx4="
+  },
+  "x86_64-darwin": {
+    "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.11.2-6251250307170304/darwin-x64/Antigravity.zip",
+    "hash": "sha256-jrAUYtxPJqukW+SZK9oLFF0ewhDGOmJyV4ryflnyO+8="
+  },
+  "aarch64-darwin": {
+    "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.11.2-6251250307170304/darwin-arm/Antigravity.zip",
+    "hash": "sha256-ZYlO1lZGQgTvbXgLTbEmh4A3HuCFgKTgWJfkMNyh4hw="
+  }
+}
@@ -0,0 +1,88 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p curl gnugrep gnused gnutar jq
+# shellcheck shell=bash
+
+set -euo pipefail
+
+SCRIPT_DIR="$(dirname "$(readlink -f "$0")")"
+PACKAGE_NIX="${SCRIPT_DIR}/package.nix"
+SOURCES_JSON="${SCRIPT_DIR}/sources.json"
+
+echo "Fetching latest release information..."
+page=$(curl -fsSL --compressed "https://antigravity.google/download/linux")
+script_name=$(printf '%s\n' "$page" | grep -o 'main-[a-zA-Z0-9]*\.js' | head -n1)
+js_content=$(curl -fsSL --compressed "https://antigravity.google/$script_name")
+
+# Extract Linux x86_64 URL
+linux_x86_64_url=$(
+  printf '%s\n' "$js_content" \
+    | grep -o 'https://[^"]*/linux-x64/Antigravity.tar.gz' \
+    | head -n1
+)
+
+# Extract version and check for update
+version=$(
+  printf '%s\n' "$linux_x86_64_url" \
+    | sed -n 's#.*/stable/\([^/]*\)/linux-x64/Antigravity.tar.gz#\1#p'
+)
+echo "Version: $version"
+
+current_version=$(grep -oP '^\s*version = "\K[^"]+' "$PACKAGE_NIX" | head -n1)
+if [[ "$version" == "$current_version" ]]; then
+  echo "Antigravity is already up-to-date"
+  exit 0
+fi
+
+# Derive URLs
+linux_aarch64_url="${linux_x86_64_url/linux-x64\/Antigravity.tar.gz/linux-arm\/Antigravity.tar.gz}"
+darwin_x86_64_url="${linux_x86_64_url/linux-x64\/Antigravity.tar.gz/darwin-x64\/Antigravity.zip}"
+darwin_aarch64_url="${linux_x86_64_url/linux-x64\/Antigravity.tar.gz/darwin-arm\/Antigravity.zip}"
+
+echo "Prefetching x86_64-linux from $linux_x86_64_url..."
+prefetch_output=$(nix-prefetch-url --print-path "$linux_x86_64_url")
+linux_x86_64_hash_base32=$(echo "$prefetch_output" | head -n1)
+archive_path=$(echo "$prefetch_output" | tail -n1)
+echo "path is '$archive_path'" >&2
+linux_x86_64_hash=$(nix-hash --type sha256 --to-sri "$linux_x86_64_hash_base32")
+
+echo "Prefetching aarch64-linux from $linux_aarch64_url..."
+linux_aarch64_hash_base32=$(nix-prefetch-url "$linux_aarch64_url")
+linux_aarch64_hash=$(nix-hash --type sha256 --to-sri "$linux_aarch64_hash_base32")
+
+echo "Prefetching x86_64-darwin from $darwin_x86_64_url..."
+darwin_x86_64_hash_base32=$(nix-prefetch-url "$darwin_x86_64_url")
+darwin_x86_64_hash=$(nix-hash --type sha256 --to-sri "$darwin_x86_64_hash_base32")
+
+echo "Prefetching aarch64-darwin from $darwin_aarch64_url..."
+darwin_aarch64_hash_base32=$(nix-prefetch-url "$darwin_aarch64_url")
+darwin_aarch64_hash=$(nix-hash --type sha256 --to-sri "$darwin_aarch64_hash_base32")
+
+# Extract VS Code version from metadata
+vscodeVersion=$(
+  tar -Oxzf "$archive_path" "Antigravity/resources/app/product.json" \
+    | jq -r '.version'
+)
+echo "VS Code version: $vscodeVersion"
+
+echo "Updating package.nix"
+sed -i "s/version = \".*\"/version = \"$version\"/" "$PACKAGE_NIX"
+sed -i "s/vscodeVersion = \".*\"/vscodeVersion = \"$vscodeVersion\"/" "$PACKAGE_NIX"
+
+echo "Updating sources.json"
+jq -n \
+  --arg linux_x86_64_url "$linux_x86_64_url" \
+  --arg linux_x86_64_hash "$linux_x86_64_hash" \
+  --arg linux_aarch64_url "$linux_aarch64_url" \
+  --arg linux_aarch64_hash "$linux_aarch64_hash" \
+  --arg darwin_x86_64_url "$darwin_x86_64_url" \
+  --arg darwin_x86_64_hash "$darwin_x86_64_hash" \
+  --arg darwin_aarch64_url "$darwin_aarch64_url" \
+  --arg darwin_aarch64_hash "$darwin_aarch64_hash" \
+  '{
+    "x86_64-linux": { url: $linux_x86_64_url, hash: $linux_x86_64_hash },
+    "aarch64-linux": { url: $linux_aarch64_url, hash: $linux_aarch64_hash },
+    "x86_64-darwin": { url: $darwin_x86_64_url, hash: $darwin_x86_64_hash },
+    "aarch64-darwin": { url: $darwin_aarch64_url, hash: $darwin_aarch64_hash }
+  }' > "$SOURCES_JSON"
+
+echo "Update complete"
@@ -1,126 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchurl,
-  autoPatchelfHook,
-  makeWrapper,
-  jdk,
-  libsecret,
-  glib,
-  webkitgtk_4_1,
-  wrapGAppsHook3,
-  _7zz,
-  nixosTests,
-  copyDesktopItems,
-  makeDesktopItem,
-}:
-
-stdenv.mkDerivation (finalAttrs: {
-  pname = "Archi";
-  version = "5.7.0";
-
-  src =
-    {
-      "x86_64-linux" = fetchurl {
-        url = "https://github.com/archimatetool/archi.io/releases/download/57/Archi-Linux64-${finalAttrs.version}.tgz";
-        hash = "sha256-MIUlWt3GP/1oQAeq4W2xnhG63a2zhGldgyoyZ9lNOiI=";
-      };
-      "x86_64-darwin" = fetchurl {
-        url = "https://github.com/archimatetool/archi.io/releases/download/57/Archi-Mac-${finalAttrs.version}.dmg";
-        hash = "sha256-wIlhJ6XmhL5rMb5zwHJYwamCwV13PK53wi9uEXIga5I=";
-      };
-      "aarch64-darwin" = fetchurl {
-        url = "https://github.com/archimatetool/archi.io/releases/download/57/Archi-Mac-Silicon-${finalAttrs.version}.dmg";
-        hash = "sha256-2/w4+aKfjfTGLjjl/nOouFtnv7/kjmfezkrmSa4ablc=";
-      };
-    }
-    .${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
-
-  buildInputs = [
-    libsecret
-  ];
-
-  nativeBuildInputs = [
-    makeWrapper
-    wrapGAppsHook3
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isDarwin [
-    _7zz
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isLinux [
-    autoPatchelfHook
-    copyDesktopItems
-  ];
-
-  sourceRoot = if stdenv.hostPlatform.isDarwin then "." else null;
-
-  installPhase =
-    if stdenv.hostPlatform.system == "x86_64-linux" then
-      ''
-        runHook preInstall
-
-        mkdir -p $out/bin $out/libexec
-        for f in configuration features p2 plugins Archi.ini; do
-          cp -r $f $out/libexec
-        done
-
-        install -D -m755 Archi $out/libexec/Archi
-        makeWrapper $out/libexec/Archi $out/bin/Archi \
-          --prefix LD_LIBRARY_PATH : ${
-            lib.makeLibraryPath [
-              glib
-              webkitgtk_4_1
-            ]
-          } \
-          --set WEBKIT_DISABLE_DMABUF_RENDERER 1 \
-          --prefix PATH : ${jdk}/bin
-
-        install -Dm444 icon.xpm $out/share/icons/hicolor/256x256/apps/archi.xpm
-
-        runHook postInstall
-      ''
-    else
-      ''
-        runHook preInstall
-
-        mkdir -p "$out/Applications"
-        mv Archi.app "$out/Applications/"
-
-        runHook postInstall
-      '';
-
-  desktopItems = [
-    (makeDesktopItem {
-      name = "archi";
-      desktopName = "Archi";
-      exec = "Archi";
-      type = "Application";
-      comment = finalAttrs.meta.description;
-      icon = "archi";
-      categories = [
-        "Development"
-      ];
-    })
-  ];
-
-  passthru.updateScript = ./update.sh;
-
-  passthru.tests = { inherit (nixosTests) archi; };
-
-  meta = {
-    description = "ArchiMate modelling toolkit";
-    longDescription = ''
-      Archi is an open source modelling toolkit to create ArchiMate
-      models and sketches.
-    '';
-    homepage = "https://www.archimatetool.com/";
-    sourceProvenance = [ lib.sourceTypes.binaryBytecode ];
-    license = lib.licenses.mit;
-    platforms = lib.platforms.linux ++ lib.platforms.darwin;
-    maintainers = with lib.maintainers; [
-      earldouglas
-      paumr
-    ];
-    mainProgram = "Archi";
-  };
-})
@@ -1,25 +0,0 @@
-#!/usr/bin/env nix-shell
-#!nix-shell -i bash -p curl jq coreutils common-updater-scripts
-
-latestVersion=$(curl "https://api.github.com/repos/archimatetool/archi/tags" | jq -r '.[0].name' | tail -c +9)
-currentVersion=$(nix-instantiate --eval -E "with import ./. {}; archi.version or (lib.getVersion archi)" | tr -d '"')
-
-echo "latest  version: $latestVersion"
-echo "current version: $currentVersion"
-
-if [[ "$latestVersion" == "$currentVersion" ]]; then
-    echo "package is up-to-date"
-    exit 0
-fi
-
-for i in \
-    "aarch64-darwin Archi-Mac-Silicon-$latestVersion.dmg" \
-    "x86_64-darwin Archi-Mac-$latestVersion.dmg" \
-    "x86_64-linux Archi-Linux64-$latestVersion.tgz"
-do
-    set -- $i
-    prefetch=$(nix-prefetch-url https://www.archimatetool.com/downloads/archi/$latestVersion/$2)
-    hash=$(nix-hash --type sha256 --to-sri $prefetch)
-
-    update-source-version archi $latestVersion $hash --system=$1 --ignore-same-version
-done
@@ -20,7 +20,7 @@ let
  src = fetchFromGitHub {
    owner = "goauthentik";
    repo = "authentik";
-    rev = "version/${version}";
+    tag = "version/${version}";
    hash = "sha256-HowB6DTGCqz770fKYbnE+rQ11XRV0WSNkLD+HSWZwz8=";
  };

@@ -13,12 +13,12 @@

 let
  pname = "autobrr";
-  version = "1.68.0";
+  version = "1.69.0";
  src = fetchFromGitHub {
    owner = "autobrr";
    repo = "autobrr";
    tag = "v${version}";
-    hash = "sha256-BURejp9ncaSfUw7dq80rFECjWwNSGcRxOTHRBXon67k=";
+    hash = "sha256-16C160Wg7pm3BoJyyC5tuHdp4H1BDO7GfnA5u0HJ8YM=";
  };

  autobrr-web = stdenvNoCC.mkDerivation {
@@ -41,7 +41,7 @@ let
        sourceRoot
        ;
      fetcherVersion = 1;
-      hash = "sha256-59CNJq0D5TJBL9zccBOjZif+xbNibWDiAQq51BqqQhg=";
+      hash = "sha256-LOY8fLGsX966MyH4w+pa9tm/5HS6LnGwd51cj8TG6Mk=";
    };

    postBuild = ''
@@ -61,7 +61,7 @@ buildGoModule rec {
    src
    ;

-  vendorHash = "sha256-6K//pt5xg1wEHAVe+vP7wicWQ8L/ty3f1PkZhBm8mCE=";
+  vendorHash = "sha256-7gmF3yQFRqN7Oro/f+jhmxCUU9CltobY6EAoskCZISQ=";

  preBuild = ''
    cp -r ${autobrr-web}/* web/dist
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "aws-iam-authenticator";
-  version = "0.7.8";
+  version = "0.7.9";

  src = fetchFromGitHub {
    owner = "kubernetes-sigs";
    repo = "aws-iam-authenticator";
    tag = "v${version}";
-    hash = "sha256-ahqHn9Pi07rpq8h476rTABkB5nHbnWLIhtQUH89YJ5Q=";
+    hash = "sha256-+c9LjWXNK2XtvhpQK3hzuVQVHQxSEDgh994Iys69x9U=";
  };

-  vendorHash = "sha256-mNTyT1uAPZskZIyLxePPjj4bsxYwu+nDreeWCrZyJF8=";
+  vendorHash = "sha256-gTNrHvilSYqKAO164VgbIzwVdZt2nS7Xmh6DOU7QEZc=";

  ldflags =
    let
@@ -10,17 +10,17 @@
 }:
 buildGoModule rec {
  pname = "aws-vault";
-  version = "7.7.9";
+  version = "7.7.10";

  src = fetchFromGitHub {
    owner = "ByteNess";
    repo = "aws-vault";
    rev = "v${version}";
-    hash = "sha256-+3hd3nSEm11GrxI0d7ie7q3aaXi/omkQrbClHUdi3Ws=";
+    hash = "sha256-PB1mKed1OD6VXzPRTtLIrgsSgGl+OTqfll6FvT1k7rI=";
  };

  proxyVendor = true;
-  vendorHash = "sha256-300nYa+aatG1p0AxaopbAGyzzmlpNVZmY3JPcYnMKRo=";
+  vendorHash = "sha256-Dp77XCq+D83sRN4l17X7aQRlNgAw4PXe45dj9dbozds=";

  nativeBuildInputs = [
    installShellFiles
@@ -4,7 +4,7 @@
  writeShellApplication,
  buildFHSEnv,
  webkitgtk_4_1,
-  ffmpeg,
+  ffmpeg-full,
  gtk3,
  pango,
  atk,
@@ -49,7 +49,7 @@ buildFHSEnv {
    custom_lsb_release
    webkitgtk_4_1
    gtk3
-    ffmpeg
+    ffmpeg-full
    pango
    atk
    cairo
@@ -14,6 +14,59 @@
 }:

 {
+  acrcssc = mkAzExtension {
+    pname = "acrcssc";
+    version = "1.0.0b5";
+    url = "https://azcliprod.blob.core.windows.net/cli-extensions/acrcssc-1.0.0b5-py3-none-any.whl";
+    hash = "sha256-Z3wi+/3UK+TUKHE7MCSP/Es8ViGVTrlcafojw2YFRBs=";
+    description = "Microsoft Azure Container Registry Container Secure Supply Chain (CSSC) Extension";
+    propagatedBuildInputs = with python3Packages; [
+      croniter
+      oras
+    ];
+    meta.maintainers = with lib.maintainers; [ techknowlogick ];
+  };
+
+  aksarc = mkAzExtension {
+    pname = "aksarc";
+    version = "1.5.62";
+    url = "https://hybridaksstorage.z13.web.core.windows.net/HybridAKS/CLI/aksarc-1.5.62-py3-none-any.whl";
+    hash = "sha256-PCy4SUbB4Vlj+fIwhufGwMJrrRehQr/W+QxAphTPnEk=";
+    description = "Microsoft Azure Command-Line Tools HybridContainerService Extension";
+    propagatedBuildInputs = with python3Packages; [
+      kubernetes
+      paramiko
+    ];
+    meta.maintainers = with lib.maintainers; [ techknowlogick ];
+  };
+
+  alias = mkAzExtension rec {
+    pname = "alias";
+    version = "0.5.2";
+    url = "https://azcliprod.blob.core.windows.net/cli-extensions/alias-${version}-py2.py3-none-any.whl";
+    hash = "sha256-BfgtdQJueA0nvTShvlf07A9CVQDYq07n6S/uB7lE2jM=";
+    description = "Support for command aliases";
+    propagatedBuildInputs = with python3Packages; [
+      jinja2
+    ];
+    meta.maintainers = with lib.maintainers; [ techknowlogick ];
+  };
+
+  aosm = mkAzExtension rec {
+    pname = "aosm";
+    version = "2.0.0b2";
+    url = "https://azcliprod.blob.core.windows.net/cli-extensions/aosm-${version}-py2.py3-none-any.whl";
+    hash = "sha256-nK752/alBu0JYax8B+sp6oByPISqYGIgL6KFX5AIJmk=";
+    description = "Microsoft Azure Command-Line Tools Aosm Extension";
+    propagatedBuildInputs = with python3Packages; [
+      genson
+      jinja2
+      oras
+      ruamel-yaml
+    ];
+    meta.maintainers = with lib.maintainers; [ techknowlogick ];
+  };
+
  application-insights = mkAzExtension rec {
    pname = "application-insights";
    version = "2.0.0b1";
@@ -24,6 +77,51 @@
    meta.maintainers = with lib.maintainers; [ andreasvoss ];
  };

+  arcappliance = mkAzExtension {
+    pname = "arcappliance";
+    version = "1.6.0";
+    url = "https://arcplatformcliextprod.z13.web.core.windows.net/arcappliance-1.6.0-py2.py3-none-any.whl";
+    hash = "sha256-1VTKp4R6ohI4C9QsZgAabJJMnkTycEQF7DDshw/7Qkw=";
+    description = "Microsoft Azure Command-Line Tools Arcappliance Extension";
+    propagatedBuildInputs = with python3Packages; [
+      jsonschema
+      kubernetes
+    ];
+    meta.maintainers = with lib.maintainers; [ techknowlogick ];
+  };
+
+  arcdata = mkAzExtension {
+    pname = "arcdata";
+    version = "1.5.25";
+    url = "https://azurearcdatacli.z13.web.core.windows.net/arcdata-1.5.25-py2.py3-none-any.whl";
+    hash = "sha256-/ejgjd/O37GtS6/+gzsscImoLllaDYCl2LS8m+pulTw=";
+    description = "Tools for managing ArcData";
+    propagatedBuildInputs = with python3Packages; [
+      jinja2
+      jsonpatch
+      jsonpath-ng
+      jsonschema
+      kubernetes
+      ndjson
+      pem
+      pydash
+      regex
+    ];
+    meta.maintainers = with lib.maintainers; [ techknowlogick ];
+  };
+
+  attestation = mkAzExtension {
+    pname = "attestation";
+    version = "1.0.0";
+    url = "https://azcliprod.blob.core.windows.net/cli-extensions/attestation-1.0.0-py3-none-any.whl";
+    hash = "sha256-5YJ3wpIhTjsKHmbeXFI0De3yX1x8NWRgsgJZ1frO70Y=";
+    description = "Microsoft Azure Command-Line Tools AttestationManagementClient Extension";
+    propagatedBuildInputs = with python3Packages; [
+      pyjwt
+    ];
+    meta.maintainers = with lib.maintainers; [ techknowlogick ];
+  };
+
  azure-devops = mkAzExtension rec {
    pname = "azure-devops";
    version = "1.0.2";
@@ -61,6 +159,18 @@
    meta.maintainers = with lib.maintainers; [ mikut ];
  };

+  cloud-service = mkAzExtension {
+    pname = "cloud-service";
+    version = "1.0.1";
+    url = "https://azcliprod.blob.core.windows.net/cli-extensions/cloud_service-1.0.1-py3-none-any.whl";
+    hash = "sha256-9rLYCn6rO6vTGFdBtGfgHQwceKbtf/t48DG4dQBzc+Q=";
+    description = "Microsoft Azure Command-Line Tools ComputeManagementClient Extension";
+    propagatedBuildInputs = with python3Packages; [
+      azure-mgmt-compute
+    ];
+    meta.maintainers = with lib.maintainers; [ techknowlogick ];
+  };
+
  confcom = mkAzExtension rec {
    pname = "confcom";
    version = "1.2.6";
@@ -78,7 +188,26 @@
    postInstall = ''
      chmod +x $out/${python3.sitePackages}/azext_confcom/bin/genpolicy-linux
    '';
-    meta.maintainers = with lib.maintainers; [ miampf ];
+    meta = {
+      maintainers = with lib.maintainers; [ miampf ];
+      platforms = lib.platforms.linux; # confcom is linux only
+    };
+  };
+
+  connectedk8s = mkAzExtension rec {
+    pname = "connectedk8s";
+    version = "1.9.3";
+    url = "https://azcliprod.blob.core.windows.net/cli-extensions/connectedk8s-${version}-py2.py3-none-any.whl";
+    hash = "sha256-4OuN92PXzIWgOWhWu/S4ofQ4AbITH6XSG1soUOljY+8=";
+    description = "Microsoft Azure Command-Line Tools Connectedk8s Extension";
+    propagatedBuildInputs = with python3Packages; [
+      azure-graphrbac
+      azure-mgmt-hybridcompute
+      kubernetes
+      pycryptodome
+      pyyaml
+    ];
+    meta.maintainers = with lib.maintainers; [ techknowlogick ];
  };

  containerapp = mkAzExtension rec {
@@ -108,6 +237,31 @@
    meta.maintainers = [ ];
  };

+  interactive = mkAzExtension {
+    pname = "interactive";
+    version = "1.0.0b1";
+    url = "https://azcliprod.blob.core.windows.net/cli-extensions/interactive-1.0.0b1-py2.py3-none-any.whl";
+    hash = "sha256-COvHDhvsigEEMYlMQ2hHFKzjX7WwdkwfT9id6z+Sj7w=";
+    description = "Microsoft Azure Command-Line Interactive Shell";
+    propagatedBuildInputs = with python3Packages; [
+      prompt-toolkit
+    ];
+    meta.maintainers = with lib.maintainers; [ techknowlogick ];
+  };
+
+  k8s-configuration = mkAzExtension rec {
+    pname = "k8s-configuration";
+    version = "2.2.0";
+    url = "https://azcliprod.blob.core.windows.net/cli-extensions/k8s_configuration-${version}-py3-none-any.whl";
+    hash = "sha256-aRdNy3aH+xfLNK7asYqok9aw6RedEcAQqOUKxtIwRwg=";
+    description = "Microsoft Azure Command-Line Tools K8s-configuration Extension";
+    propagatedBuildInputs = with python3Packages; [
+      pycryptodome
+      pyyaml
+    ];
+    meta.maintainers = with lib.maintainers; [ techknowlogick ];
+  };
+
  rdbms-connect = mkAzExtension rec {
    pname = "rdbms-connect";
    version = "1.0.7";
@@ -125,6 +279,18 @@
    meta.maintainers = with lib.maintainers; [ obreitwi ];
  };

+  serial-console = mkAzExtension {
+    pname = "serial-console";
+    version = "1.0.0b2";
+    url = "https://azcliprod.blob.core.windows.net/cli-extensions/serial_console-1.0.0b2-py3-none-any.whl";
+    hash = "sha256-Weu4BEdq/0dvi07682UfYL8FzAd3cKZUGVJLTzJ27JM=";
+    description = "Microsoft Azure Command-Line Tools for Serial Console Extension";
+    propagatedBuildInputs = with python3Packages; [
+      websocket-client
+    ];
+    meta.maintainers = with lib.maintainers; [ techknowlogick ];
+  };
+
  ssh = mkAzExtension rec {
    pname = "ssh";
    version = "2.0.6";
@@ -160,6 +326,18 @@
    propagatedBuildInputs = with python3Packages; [ opencensus ];
    meta.maintainers = [ ];
  };
+
+  webpubsub = mkAzExtension {
+    pname = "webpubsub";
+    version = "1.7.2";
+    url = "https://azcliprod.blob.core.windows.net/cli-extensions/webpubsub-1.7.2-py3-none-any.whl";
+    hash = "sha256-axtA9vXM1WmzXTj7rbA6Tlrx7kpx2Z6c3NYtwUiv2UI=";
+    description = "Microsoft Azure Command-Line Tools Webpubsub Extension";
+    propagatedBuildInputs = with python3Packages; [
+      websockets
+    ];
+    meta.maintainers = with lib.maintainers; [ techknowlogick ];
+  };
 }
 // lib.optionalAttrs config.allowAliases {
  # Removed extensions
@@ -8,13 +8,13 @@
 }:
 buildGoModule rec {
  pname = "beszel";
-  version = "0.14.1";
+  version = "0.15.4";

  src = fetchFromGitHub {
    owner = "henrygd";
    repo = "beszel";
    tag = "v${version}";
-    hash = "sha256-IQ39OtYG2VDyHIPFRR0VNK56czGlJly66Bwb/NYIBxY=";
+    hash = "sha256-sIABMb8geSaVYdpaWmtlDgfEVPtX9wb5gZOK6+apGAU=";
  };

  webui = buildNpmPackage {
@@ -48,10 +48,10 @@ buildGoModule rec {

    sourceRoot = "${src.name}/internal/site";

-    npmDepsHash = "sha256-Wtq/pesnovOyAnFta/wI+j8rml8XWORvOLz/Q82sy8g=";
+    npmDepsHash = "sha256-87Kf0i1idmg4jK31SZBoz/p4/oxqB0aGhEvYzA9GRnQ=";
  };

-  vendorHash = "sha256-IfwgL4Ms5Uho1l0yGCyumbr1N/SN+j5HaFl4hACkTsQ=";
+  vendorHash = "sha256-MP06kn8iFpz9AOv3LQqSGGSe4c7JvP/Kp4Nmsuga99o=";

  preBuild = ''
    mkdir -p internal/site/dist
@@ -10,16 +10,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "biome";
-  version = "2.3.5";
+  version = "2.3.6";

  src = fetchFromGitHub {
    owner = "biomejs";
    repo = "biome";
    rev = "@biomejs/biome@${finalAttrs.version}";
-    hash = "sha256-5zOWYDhabTlhYn+hwFFH1JCMpcFbIFwBMMpnjDT6nls=";
+    hash = "sha256-wi0dkD9AlMYyGS/y96FMCOJKjRuo0b4pHpva+R1W3Yg=";
  };

-  cargoHash = "sha256-TXqV3gcQ294VGpJl61qeEzqCOwqwiRHL9VdwjM+Sreo=";
+  cargoHash = "sha256-GCwJdO43Q5cRw3w1omuIpSxvINN51dJez7Jq4/FQF+A=";

  nativeBuildInputs = [ pkg-config ];

@@ -3,24 +3,24 @@

 let
  pname = "brave";
-  version = "1.84.139";
+  version = "1.84.141";

  allArchives = {
    aarch64-linux = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_arm64.deb";
-      hash = "sha256-/RChQFWZu3K43IIUfxtBVGy+bap+CCpUzHx7wuO+ae4=";
+      hash = "sha256-hB+sy+jeI+c2EE6nty2awmKmNRCldQ98JtjNh9eXVxQ=";
    };
    x86_64-linux = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_amd64.deb";
-      hash = "sha256-1DwoQ+ttN0Yd65cqVb0xdSQ2Qx/RS788xaB7RWBM7PY=";
+      hash = "sha256-Pp/jZmu6vTMJctVYGUeRZYhzWc2LS9jC4Niz9cPvkoE=";
    };
    aarch64-darwin = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-v${version}-darwin-arm64.zip";
-      hash = "sha256-Ygf7SnK0sFAOZ6KruV0JPJ+62PbYHWB/E7g1f5+wd1I=";
+      hash = "sha256-Y/r8rFog2lyqBSBgqI1dIOsHZHTF2W8YckCJPFJ5mzc=";
    };
    x86_64-darwin = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-v${version}-darwin-x64.zip";
-      hash = "sha256-t94eOizpltZAjLdHaushZzNIWRqyO58ne1qXr3p2wes=";
+      hash = "sha256-GDr1U40jT5nJscmqotluA/Wln/v9UnPVJoy2ViWAy+A=";
    };
  };

@@ -18,6 +18,7 @@
  libuuid,
  tomlplusplus,
  fuse3,
+  nix-update-script,
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "buildbox";
@@ -56,6 +57,8 @@ stdenv.mkDerivation (finalAttrs: {
    wrapProgram $out/bin/buildbox-run --prefix PATH : ${lib.makeBinPath [ bubblewrap ]}
  '';

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "Set of tools for remote worker build execution";
    homepage = "https://gitlab.com/BuildGrid/buildbox/";
@@ -9,20 +9,20 @@
 }:

 let
-  version = "2025.11";
+  version = "2025.11.1";

  product =
    if proEdition then
      {
        productName = "pro";
        productDesktop = "Burp Suite Professional Edition";
-        hash = "sha256-/LudYYETnUT7Ynqw3HO822hdMUoz3mrTPae7ZO8SMyE=";
+        hash = "sha256-vtei5zzfbsfO3W6IIs15y4Ef+mLK9BlaNl+4wT8wEmw=";
      }
    else
      {
        productName = "community";
        productDesktop = "Burp Suite Community Edition";
-        hash = "sha256-x4q5QkBIBFqG8Bjx5NuschNB4dX/8t2vCHNVRDa0kQQ=";
+        hash = "sha256-WzURPRMr8EgBMqxp9w10gHDEyqAVcejUif0TKdxDZr4=";
      };

  src = fetchurl {
@@ -21,6 +21,10 @@ rustPlatform.buildRustPackage rec {

  cargoHash = "sha256-deczbMPeJsnmXbVB60stKhJJZRIIwjY5vExS3x3b6aU=";

+  # Test suite is broken since rustc 1.90, see:
+  # https://github.com/CycloneDX/cyclonedx-rust-cargo/issues/807
+  doCheck = false;
+
  nativeBuildInputs = [
    pkg-config
  ];
@@ -33,13 +33,13 @@ lib.checkListOfEnum "${pname}: theme accent"
  stdenvNoCC.mkDerivation
  {
    inherit pname;
-    version = "0-unstable-2025-08-18";
+    version = "0-unstable-2025-11-15";

    src = fetchFromGitHub {
      owner = "catppuccin";
      repo = "Kvantum";
-      rev = "c7cb144b041395e83e4f510a62526b7adfb79911";
-      hash = "sha256-YNUkri+no+rNLTJHf6cPdy4AmQLzPiRK1Jbp2o8e1LE=";
+      rev = "1156e5437435282b47ac6856acd9d0feef1ed929";
+      hash = "sha256-V5Upqkil9Q2MeEPtEAemirbJxnEyYcM3Z8jiyz//ccw=";
    };

    installPhase = ''
@@ -10,7 +10,7 @@
  libepoxy,
  libadwaita,
  meson,
-  mpv,
+  mpv-unwrapped,
  ninja,
  nix-update-script,
  pkg-config,
@@ -47,7 +47,7 @@ stdenv.mkDerivation (finalAttrs: {
    libGL
    libadwaita
    libepoxy
-    mpv
+    mpv-unwrapped
  ];

  postPatch = ''
@@ -37,14 +37,14 @@ with py.pkgs;

 python3.pkgs.buildPythonApplication rec {
  pname = "checkov";
-  version = "3.2.493";
+  version = "3.2.494";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "bridgecrewio";
    repo = "checkov";
    tag = version;
-    hash = "sha256-T32VQp6aEWyqAzA4RelHQg1Su/05gAtMZfaidvLNqos=";
+    hash = "sha256-CkEEWufVZpIrPYoxnc6fI1W2K7aOfOWjfnHDz/1X/Mk=";
  };

  pythonRelaxDeps = [
@@ -1,12 +1,12 @@
 {
  "name": "@anthropic-ai/claude-code",
-  "version": "2.0.44",
+  "version": "2.0.46",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@anthropic-ai/claude-code",
-      "version": "2.0.44",
+      "version": "2.0.46",
      "license": "SEE LICENSE IN README.md",
      "bin": {
        "claude": "cli.js"
@@ -7,14 +7,14 @@
 }:
 buildNpmPackage (finalAttrs: {
  pname = "claude-code";
-  version = "2.0.44";
+  version = "2.0.46";

  src = fetchzip {
    url = "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-${finalAttrs.version}.tgz";
-    hash = "sha256-4MRaH/Dbm9z0xvnfRMdi8u39eeHaTMh6y7h5AtLYNXs=";
+    hash = "sha256-VwnR+bGSjuACdb+lTWbPnfG7HBagbWJ0Fe0pjPaQ/cM=";
  };

-  npmDepsHash = "sha256-nI5xv1VJKcssGHO5IrFBHELREePiYFWAuE/mebIgp0Q=";
+  npmDepsHash = "sha256-VT6dta8IrsqrvKWlOcNamxuZaBj+TSJpzlSqw8S81iA=";

  postPatch = ''
    cp ${./package-lock.json} package-lock.json
@@ -0,0 +1,45 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  cmake,
+  libsForQt5,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "clight-gui";
+  version = "0-unstable-2023-02-21";
+
+  src = fetchFromGitHub {
+    owner = "nullobsi";
+    repo = "clight-gui";
+    rev = "29e7216bfcc68135350a695ce446134bcb0463a6";
+    hash = "sha256-U4vaMwnVDZnYLc+K3/yD81Q1vyBL8uSrrhOHbjbox5U=";
+  };
+
+  postPatch = ''
+    substituteInPlace CMakeLists.txt \
+      --replace-fail "cmake_minimum_required(VERSION 3.0)" \
+                     "cmake_minimum_required(VERSION 3.10)"
+  '';
+
+  buildInputs = with libsForQt5; [
+    qtbase
+    qtcharts
+  ];
+  nativeBuildInputs = [
+    cmake
+    libsForQt5.wrapQtAppsHook
+  ];
+
+  sourceRoot = "${finalAttrs.src.name}/src";
+
+  meta = {
+    description = "Qt GUI for clight";
+    homepage = "https://github.com/nullobsi/clight-gui";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ nickhu ];
+    mainProgram = "clight-gui";
+    platforms = lib.platforms.linux;
+  };
+})
@@ -18,15 +18,15 @@
  upower,
 }:

-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
  pname = "clight";
  version = "4.11";

  src = fetchFromGitHub {
    owner = "FedeDP";
    repo = "Clight";
-    rev = version;
-    sha256 = "sha256-Fu38HRP83Yn2jsq9xnCWOXNlV/0hJKD1/cOOp3EV45Q=";
+    tag = finalAttrs.version;
+    hash = "sha256-Fu38HRP83Yn2jsq9xnCWOXNlV/0hJKD1/cOOp3EV45Q=";
  };

  nativeBuildInputs = [
@@ -55,14 +55,14 @@ stdenv.mkDerivation rec {
    "-DZSH_COMPLETIONS_DIR=${placeholder "out"}/share/zsh/site-functions"
  ];

-  meta = with lib; {
+  meta = {
    description = "C daemon that turns your webcam into a light sensor";
    homepage = "https://github.com/FedeDP/Clight";
-    platforms = platforms.linux;
-    license = licenses.gpl3;
-    maintainers = with maintainers; [
+    platforms = lib.platforms.linux;
+    license = lib.licenses.gpl3;
+    maintainers = with lib.maintainers; [
      eadwu
    ];
    mainProgram = "clight";
  };
-}
+})
@@ -28,14 +28,14 @@
  enableYoctolight ? true,
 }:

-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
  pname = "clightd";
  version = "5.9";

  src = fetchFromGitHub {
    owner = "FedeDP";
    repo = "Clightd";
-    rev = version;
+    tag = finalAttrs.version;
    hash = "sha256-LOhBBd7QL5kH4TzMFgrh70C37WsFdsiKArP+tIEiPWo=";
  };

@@ -98,14 +98,14 @@ stdenv.mkDerivation rec {
    ln -svT $out/libexec/clightd $out/bin/clightd
  '';

-  meta = with lib; {
+  meta = {
    description = "Linux bus interface that changes screen brightness/temperature";
    mainProgram = "clightd";
    homepage = "https://github.com/FedeDP/Clightd";
-    platforms = platforms.linux;
-    license = licenses.gpl3;
-    maintainers = with maintainers; [
+    platforms = lib.platforms.linux;
+    license = lib.licenses.gpl3;
+    maintainers = with lib.maintainers; [
      eadwu
    ];
  };
-}
+})
@@ -44,13 +44,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "cockpit";
-  version = "350";
+  version = "351";

  src = fetchFromGitHub {
    owner = "cockpit-project";
    repo = "cockpit";
    tag = finalAttrs.version;
-    hash = "sha256-DOMX3msM5Ko7TDMRS+GcAf+gmyogjSExNEM9sjK0cCY=";
+    hash = "sha256-8f/mm53eE0L5fxNwgBkKeNvlBV2gPPvLI+U8c7QkKAI=";
    fetchSubmodules = true;
  };

@@ -3,6 +3,7 @@
  fetchFromGitHub,
  nix-update-script,
  rustPlatform,
+  versionCheckHook,
 }:

 rustPlatform.buildRustPackage (finalAttrs: {
@@ -19,11 +20,20 @@ rustPlatform.buildRustPackage (finalAttrs: {
  buildAndTestSubdir = "crates/codebook-lsp";
  cargoHash = "sha256-HAJglGtOy+OMZoB50Uz5vrf8IXqBKMMO/Hr9Lcry2+Q=";

+  CARGO_PROFILE_RELEASE_LTO = "fat";
+  CARGO_PROFILE_RELEASE_CODEGEN_UNITS = "1";
+
  # Integration tests require internet access for dictionaries
  doCheck = false;

  passthru.updateScript = nix-update-script { };

+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  doInstallCheck = true;
+  versionCheckProgramArg = "--version";
+
  meta = {
    description = "Unholy spellchecker for code";
    homepage = "https://github.com/blopker/codebook";
@@ -4,6 +4,8 @@
  fetchFromGitHub,
  nodejs,
  pnpm,
+  makeBinaryWrapper,
+  versionCheckHook,
  nix-update-script,
 }:

@@ -27,6 +29,7 @@ stdenv.mkDerivation (finalAttrs: {
  nativeBuildInputs = [
    nodejs
    pnpm.configHook
+    makeBinaryWrapper
  ];

  buildPhase = ''
@@ -43,9 +46,10 @@ stdenv.mkDerivation (finalAttrs: {
    mkdir -p $out/lib/node_modules/conventional-changelog/
    mkdir $out/bin
    mv * $out/lib/node_modules/conventional-changelog/
-    chmod +x $out/lib/node_modules/conventional-changelog/packages/conventional-changelog/dist/cli/index.js
-    ln -s $out/lib/node_modules/conventional-changelog/packages/conventional-changelog/dist/cli/index.js $out/bin/conventional-changelog
-    patchShebangs $out/bin/conventional-changelog
+
+    makeBinaryWrapper ${lib.getExe nodejs} $out/bin/conventional-changelog \
+      --add-flags "$out/lib/node_modules/conventional-changelog/packages/conventional-changelog/dist/cli/index.js" \
+      --set NODE_PATH "$out/lib/node_modules/conventional-changelog/node_modules"

    runHook postInstall
  '';
@@ -55,6 +59,12 @@ stdenv.mkDerivation (finalAttrs: {
      --replace-warn '"exports": "./src/index.ts"' '"exports": "./dist/index.js"'
  '';

+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
  passthru.updateScript = nix-update-script {
    extraArgs = [
      "--use-github-releases"
@@ -64,7 +74,7 @@ stdenv.mkDerivation (finalAttrs: {
  };

  meta = {
-    changelog = "https://github.com/conventional-changelog/conventional-changelog/releases/tag/conventional-changelog-v${finalAttrs.version}";
+    changelog = "https://github.com/conventional-changelog/conventional-changelog/releases/tag/${finalAttrs.src.tag}";
    description = "Generate a CHANGELOG from git metadata";
    homepage = "https://github.com/conventional-changelog/conventional-changelog";
    license = lib.licenses.isc;
@@ -10,11 +10,11 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "copilot-language-server";
-  version = "1.394.0";
+  version = "1.397.0";

  src = fetchzip {
    url = "https://github.com/github/copilot-language-server-release/releases/download/${finalAttrs.version}/copilot-language-server-js-${finalAttrs.version}.zip";
-    hash = "sha256-HHm+J+XFmOkDJOffzpRhyPREGBusjgtcUt/E29roSNE=";
+    hash = "sha256-LeQP2Ula7gPqis7DeaQGDAN2wtQT9ryZhIDYUBEPreo=";
    stripRoot = false;
  };

@@ -33,6 +33,17 @@ stdenv.mkDerivation (finalAttrs: {
  postInstall = ''
    wrapProgram $out/bin/cowsay \
      --suffix COWPATH : $out/share/cowsay/cows
+
+    # Replace the cowthink symlink with a Perl wrapper that sets $0 correctly
+    # This is necessary because exec -a doesn't work for Perl scripts
+    rm $out/bin/cowthink
+    cat > $out/bin/cowthink << EOF
+    #!/usr/bin/env perl
+    \$0 = "cowthink";
+    \$ENV{COWPATH} = "\$ENV{COWPATH}" . (\$ENV{COWPATH} ? ":" : "") . "$out/share/cowsay/cows";
+    do "$out/bin/.cowsay-wrapped";
+    EOF
+    chmod +x $out/bin/cowthink
  '';

  passthru = {
@@ -9,16 +9,16 @@

 buildGoModule (finalAttrs: {
  pname = "crush";
-  version = "0.13.5";
+  version = "0.18.3";

  src = fetchFromGitHub {
    owner = "charmbracelet";
    repo = "crush";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-MKX26HptDwlwWvmP+9FDlFJzly5xKA0mNVsbeHi1zhg=";
+    hash = "sha256-BTD+03LG+Y7pMw9P2nB52qtLK0QSQEurbTr+2vT0QmM=";
  };

-  vendorHash = "sha256-OiNmZKg+NN7Aoeao8L72Dvgz0moeaZGQ7KVJdvuWagY=";
+  vendorHash = "sha256-6/DvpfhW1Lk3SP7umOxeWBJhUtX1ay7pkG5Ys8M9xM4=";

  ldflags = [
    "-s"
@@ -10,13 +10,13 @@

 buildGoModule (finalAttrs: {
  pname = "databricks-cli";
-  version = "0.276.0";
+  version = "0.278.0";

  src = fetchFromGitHub {
    owner = "databricks";
    repo = "cli";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-iD8fB/sMHBGSL6pCEN3TPxlgcBd7+ckPXd7Gq3CLPEM=";
+    hash = "sha256-b7aO0fgSjbQLDt2YeXnZy0xq/2T6CGmsiXxE5CgnvfI=";
  };

  # Otherwise these tests fail asserting that the version is 0.0.0-dev
@@ -25,7 +25,7 @@ buildGoModule (finalAttrs: {
      --replace-fail "cli/0.0.0-dev" "cli/${finalAttrs.version}"
  '';

-  vendorHash = "sha256-mFM5i1ec+eB4IhxoZipMgXK3IZm9KcSmifE2kJRV9BY=";
+  vendorHash = "sha256-qLIJP2YYCckxzCAYNiBcXNpfKVFQQTwy9ysKrsYKGvI=";

  excludedPackages = [
    "bundle/internal"
@@ -18,7 +18,7 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "dbeaver-bin";
-  version = "25.2.4";
+  version = "25.2.5";

  src =
    let
@@ -31,10 +31,10 @@ stdenvNoCC.mkDerivation (finalAttrs: {
        aarch64-darwin = "macos-aarch64.dmg";
      };
      hash = selectSystem {
-        x86_64-linux = "sha256-5mBk3HO5BqcydxDhancQ8YzfNjZ0bMAuNM9lf8fm4ks=";
-        aarch64-linux = "sha256-i9hQJ01G+Jy18bkYD9e6wAhufH87r/9qwxzzVd0K8LU=";
-        x86_64-darwin = "sha256-zSLLNOP+miG71/LCjNHanDbeRr986wwdb7x5q3gDUZs=";
-        aarch64-darwin = "sha256-njKjBXxv5tpaStiLHfL3Cs4FwtKBsLOCA4ASPggVhnY=";
+        x86_64-linux = "sha256-ADF7uFUZjzKaTQFAtqG0O81Yk8SvBh86SsyIOiSp1fY=";
+        aarch64-linux = "sha256-VNip5eplQ2vxi+eKHKGaBbMZ5QPS7GaoGdcZWr+abDM=";
+        x86_64-darwin = "sha256-Wu5rFiQBDR2AcJyj8ySWXR9P3GaClWzkqGRc3ZfOgIU=";
+        aarch64-darwin = "sha256-YhV70euhBuzpwPyb1CEtDsaAZqBDN1J/rw5oTOW4+ss=";
      };
    in
    fetchurl {
@@ -15,11 +15,11 @@

 stdenv.mkDerivation rec {
  pname = "ddcutil";
-  version = "2.2.2";
+  version = "2.2.3";

  src = fetchurl {
    url = "https://www.ddcutil.com/tarballs/ddcutil-${version}.tar.gz";
-    hash = "sha256-KTChTw80jARrghtbJAcksC5H0ElOTrkICBkexVW+K3M=";
+    hash = "sha256-4XvAUqYvnqhS2eOLpPHtfnNmVnoOGdvhpDnuca2+BqA=";
  };

  nativeBuildInputs = [
@@ -4,6 +4,9 @@
  fetchFromGitHub,
  makeWrapper,
  wget,
+  gnugrep,
+  nix-update-script,
+  testers,
 }:

 stdenvNoCC.mkDerivation (finalAttrs: {
@@ -13,7 +16,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
  src = fetchFromGitHub {
    owner = "89luca89";
    repo = "distrobox";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
    hash = "sha256-uwJD7HsWoQ/LxYL0mSSxMni676qqEnMHndpL01M5ySE=";
  };

@@ -40,11 +43,21 @@ stdenvNoCC.mkDerivation (finalAttrs: {
    wrapProgram "$out/bin/distrobox-generate-entry" \
      --prefix PATH ":" ${lib.makeBinPath [ wget ]}

+    wrapProgram "$out/bin/${finalAttrs.meta.mainProgram}" \
+      --prefix PATH ":" ${lib.makeBinPath [ gnugrep ]}
+
    mkdir -p $out/share/distrobox
    echo 'container_additional_volumes="/nix:/nix"' > $out/share/distrobox/distrobox.conf
  '';

-  meta = with lib; {
+  passthru = {
+    updateScript = nix-update-script { };
+    tests.version = testers.testVersion {
+      package = finalAttrs.finalPackage;
+    };
+  };
+
+  meta = {
    description = "Wrapper around podman or docker to create and start containers";
    longDescription = ''
      Use any linux distribution inside your terminal. Enable both backward and
@@ -52,8 +65,9 @@ stdenvNoCC.mkDerivation (finalAttrs: {
      you’re more comfortable with
    '';
    homepage = "https://distrobox.it/";
-    license = licenses.gpl3Only;
-    platforms = platforms.linux;
-    maintainers = with maintainers; [ atila ];
+    license = lib.licenses.gpl3Only;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ atila ];
+    mainProgram = "distrobox";
  };
 })
@@ -0,0 +1,62 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  cmake,
+  qt6,
+  nix-update-script,
+}:
+
+stdenv.mkDerivation {
+  pname = "drawy";
+  version = "1.0.0-alpha-unstable-2025-11-17";
+
+  src = fetchFromGitHub {
+    owner = "Prayag2";
+    repo = "drawy";
+    rev = "ca02b66a9615c45c78f2e29839a40c1e5bf8f71c";
+    hash = "sha256-PzIeyhF/1wKD6JyybNRzruuxzSKJZvIq+L7X0rrcQUY=";
+  };
+
+  strictDeps = true;
+
+  nativeBuildInputs = [
+    cmake
+    qt6.wrapQtAppsHook
+  ];
+
+  buildInputs = with qt6; [
+    qtbase
+    qttools
+  ];
+
+  postInstall = ''
+    for size in 16 32 256 512; do
+      install -D --mode=644 \
+        "$src"/assets/logo-$size.png \
+        "$out/share/icons/hicolor/''${size}x''${size}/apps/drawy.png"
+    done
+
+    install -D --mode=644 \
+      "$src"/assets/logo.svg \
+      "$out"/share/icons/hicolor/scalable/apps/drawy.svg
+
+    install -D --mode=644 \
+      "$src"/deploy/appimage/AppDir/usr/share/applications/drawy.desktop \
+      --target-directory="$out"/share/applications
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Handy and infinite brainstorming tool";
+    homepage = "https://github.com/Prayag2/drawy";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [
+      yiyu
+      quarterstar
+    ];
+    mainProgram = "drawy";
+    platforms = lib.platforms.all;
+  };
+}
@@ -1,20 +1,20 @@
 {
  "duckstation": {
-    "version": "0.1-9903",
-    "hash_linux": "sha256-CzHWdY0RaGBB6CY3PzHHHbq3/Mbf6WtUm6Dizr0IW6I=",
-    "hash_darwin": "sha256-7gVpINajfRRDLYBQMQBQtBELosvROiQzTEa2zZbtK44="
+    "version": "0.1-10091",
+    "hash_linux": "sha256-mgrln6Z0kshFy/8QberfeXHWoSxxojvn53B/WYkobpQ=",
+    "hash_darwin": "sha256-6bp3ksI3a3FYuGhP6y77AxTR1XOXyjmBuQNnWwU9Zoo="
  },
  "discord_rpc": {
    "rev": "cc59d26d1d628fbd6527aac0ac1d6301f4978b92",
    "hash": "sha256-8xXcx5w36eiJqtWm6qQfhEHgchVJbhP/jR94eMNNjHU="
  },
  "shaderc": {
-    "rev": "4daf9d466ad00897f755163dd26f528d14e1db44",
-    "hash": "sha256-/o3LPYvMTlKhuvLQITnADmz8BTGXVaVR0aciOWVyFS8="
+    "rev": "85cd26cc38e3e8b5e3c649f4551900ee330d6552",
+    "hash": "sha256-7PVrpS69pI5mi4aM1eNTAzZCMq6vuVl3mhTrc4U942w="
  },
  "chtdb": {
-    "date": "2025-10-16",
-    "rev": "aff6149c29beae9c52aa35ea5cb53986c8916546",
-    "hash": "sha256-gpJ6Wlo7PGMPraK8Bppb+3qDWZ6Oxd4kvLJEFtGF50U="
+    "date": "2025-11-16",
+    "rev": "0d672a05a4c7d778204a95f702dbb7dbeff2f95c",
+    "hash": "sha256-eRBy8snaL6MB82TUbXDUdSbV54kCw467U9lxSFbU/nQ="
  }
 }
@@ -12,11 +12,11 @@

 stdenv.mkDerivation (finalAttrs: {
  name = "eigenwallet";
-  version = "3.1.3";
+  version = "3.3.6";

  src = fetchurl {
    url = "https://github.com/eigenwallet/core/releases/download/${finalAttrs.version}/eigenwallet_${finalAttrs.version}_amd64.deb";
-    hash = "sha256-HQqkoyzKqy4eaCfEwwkRUjgex834kkt2OR3Ib16bE0Y=";
+    hash = "sha256-4Z7tfhpX6E7i1dov8j0czG+aDDrhUN1EtxOq2SOqILQ=";
  };

  nativeBuildInputs = [
@@ -13,16 +13,16 @@

 buildNpmPackage (finalAttrs: {
  pname = "gemini-cli";
-  version = "0.15.3";
+  version = "0.16.0";

  src = fetchFromGitHub {
    owner = "google-gemini";
    repo = "gemini-cli";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-a3zigpALuuqD42n2X+5G+ol1XdSbHwLalS3ArA/cQH8=";
+    hash = "sha256-EOiG7Ov+tY6UPci4A67kKcCItkTrrENOm1mSaWxKE94=";
  };

-  npmDepsHash = "sha256-KkMnxZ0G8PzIdksChVZoH5jMz8qeyGirN7URq08sz48=";
+  npmDepsHash = "sha256-JvzrbyiJHbKNRHoGll7eSH4dD6Hj5qnrh4F/upHPntI=";

  nativeBuildInputs = [
    jq
@@ -10,14 +10,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "github-backup";
-  version = "0.51.0";
+  version = "0.51.3";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "josegonzalez";
    repo = "python-github-backup";
    tag = version;
-    hash = "sha256-XqQw2Qu5b5Gdna8krwvkYsTPbM5p1gUBV2P7JLypqVU=";
+    hash = "sha256-iaonBBOHu/12vzVhFnGznTKhMUy9JJc/+dTJhsSjvMo=";
  };

  build-system = with python3Packages; [
@@ -3,7 +3,7 @@
  fetchFromGitLab,
  lib,
  nix-update-script,
-  testers,
+  versionCheckHook,
 }:

 buildGoModule (finalAttrs: {
@@ -21,15 +21,19 @@ buildGoModule (finalAttrs: {
  vendorHash = "sha256-fnaOgc8RPDQnxTWOLQx1kw0+qj1iaff+UkjnoJYdEG4=";

  passthru = {
-    tests.version = testers.testVersion {
-      package = finalAttrs.finalPackage;
-    };
    updateScript = nix-update-script { };
  };

+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  doInstallCheck = true;
+  versionCheckProgramArg = "--version";
+
  meta = {
    description = "Tool to send messages or files to an XMPP contact or MUC";
    homepage = "https://salsa.debian.org/mdosch/go-sendxmpp";
+    changelog = "https://salsa.debian.org/mdosch/go-sendxmpp/-/releases/v${finalAttrs.version}";
    license = lib.licenses.bsd2;
    maintainers = with lib.maintainers; [
      jpds
@@ -0,0 +1,12 @@
+diff --git a/src/device/cart.rs b/src/device/cart.rs
+index 97bf09f..4406fec 100644
+--- a/src/device/cart.rs
+++ b/src/device/cart.rs
+@@ -21,6 +21,7 @@ const JDT_EEPROM_16K: u16 = 0xc000; /* 16k EEPROM */
+ const EEPROM_BLOCK_SIZE: usize = 8;
+ pub const EEPROM_MAX_SIZE: usize = 0x800;
+ 
+#[allow(warnings)]
+ #[derive(serde::Serialize, serde::Deserialize)]
+ pub enum CicType {
+     CicNus6101,
@@ -42,6 +42,9 @@ rustPlatform.buildRustPackage (finalAttrs: {

    # make the build script use the @GIT_REV@ string that will be substituted in the logic below
    ./set-git-rev.patch
+
+    # enum CicType is not used, but dead code is treated as an error
+    ./allow-unused-type.patch
  ];

  postPatch = ''
@@ -8,13 +8,13 @@

 buildGoModule rec {
  pname = "gosmee";
-  version = "0.28.1";
+  version = "0.28.2";

  src = fetchFromGitHub {
    owner = "chmouel";
    repo = "gosmee";
    rev = "v${version}";
-    hash = "sha256-zP4ES+ZUQ2IyxvnsSBTZsrpqHDnJiYUJ3hDfKUdqQsY=";
+    hash = "sha256-xkdJCmgBJh5oDELvm7qP/pC0FxqmVsXPGBhN7twp3Ug=";
  };
  vendorHash = null;

@@ -28,12 +28,12 @@

 stdenv.mkDerivation rec {
  pname = "gpu-screen-recorder";
-  version = "5.8.1";
+  version = "5.9.0";

  src = fetchgit {
    url = "https://repo.dec05eba.com/${pname}";
    tag = version;
-    hash = "sha256-VAb7YAPZVe23qqoGgY8wPR+PwPHuWUmlcixoLOW/H5A=";
+    hash = "sha256-VftfK6emngCl64Gom/+nwu3gVL3ptzR/J0E0RjW9L9M=";
  };

  nativeBuildInputs = [
@@ -6,7 +6,7 @@
 }:

 let
-  version = "0.17.81";
+  version = "0.17.83";
 in
 buildGoModule {
  pname = "gqlgen";
@@ -16,10 +16,10 @@ buildGoModule {
    owner = "99designs";
    repo = "gqlgen";
    tag = "v${version}";
-    hash = "sha256-JYxI3f+IFWeNkltInV7Slf4AjYCw8gsC1PxsdZ9cukw=";
+    hash = "sha256-mQT0hfM1UypHIzNktc1muN4bsIAKYNCXZ5D6YPpY72w=";
  };

-  vendorHash = "sha256-MFQwLWpjgsCkS1GFRbO/egDIWbh3HDAYuqekjGOC+ug=";
+  vendorHash = "sha256-zDV4CqS4UzVo6eHrO9l0144KzYFj6whflTF/oVkdVH4=";

  subPackages = [ "." ];

@@ -6,14 +6,14 @@

 python3.pkgs.buildPythonApplication rec {
  pname = "ha-mqtt-discoverable-cli";
-  version = "0.22.1";
+  version = "0.23.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "unixorn";
    repo = "ha-mqtt-discoverable-cli";
    tag = "v${version}";
-    hash = "sha256-AUY7tIGYVH0wDywzkndRxFLQQfle816DGwMXkcvC/cs=";
+    hash = "sha256-QxqhLtB3FC8zFUa67surP+P5RK9sb57OmdlnSWd9Kew=";
  };

  pythonRelaxDeps = [ "ha-mqtt-discoverable" ];
@@ -13,24 +13,26 @@
  glib,
  gtk4,
  libadwaita,
+  openssl,
  appstream,
+  onnxruntime,
  nix-update-script,
 }:

 stdenv.mkDerivation (finalAttrs: {
  pname = "hieroglyphic";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "FineFindus";
    repo = "Hieroglyphic";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-021qmXZDgeGLpsrhlqMlXiVONltuKFCra0/mTT/Bul0=";
+    hash = "sha256-mqoYdHpVnivDTblvoaACyCE7Y25cfLj1m0Q5D33zEfk=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) pname version src;
-    hash = "sha256-PMHDHRkCMlcv3LrCYH3eU3YgmWR4KFNsIRqiXq9oIcA=";
+    hash = "sha256-kArrsHW+cFZQQgIEL+7Os8ixKtuIZAByEr6D4XDmfRE=";
  };

  nativeBuildInputs = [
@@ -49,8 +51,14 @@ stdenv.mkDerivation (finalAttrs: {
    glib
    gtk4
    libadwaita
+    openssl
  ];

+  env = {
+    ORT_STRATEGY = "system";
+    ORT_LIB_LOCATION = "${lib.getLib onnxruntime}/lib";
+  };
+
  passthru = {
    updateScript = nix-update-script { };
  };
@@ -64,6 +72,7 @@ stdenv.mkDerivation (finalAttrs: {
    maintainers = with lib.maintainers; [ tomasajt ];
    teams = [ lib.teams.gnome-circle ];
    # Note: upstream currently has case-insensititvity issues on darwin
+    # https://github.com/FineFindus/Hieroglyphic/issues/40
    platforms = lib.platforms.linux;
  };
 })
@@ -19,13 +19,13 @@

 gcc15Stdenv.mkDerivation (finalAttrs: {
  pname = "hyprlauncher";
-  version = "0.1.0";
+  version = "0.1.3";

  src = fetchFromGitHub {
    owner = "hyprwm";
    repo = "hyprlauncher";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-6JVor77g1LR/22lZYCArUm/geIXE0aGJZ4DHIlgSOj4=";
+    hash = "sha256-KMqHEAuRfO4ep40jxsGW6mnJSeWM41qv63KbWcLBfuw=";
  };

  nativeBuildInputs = [
@@ -16,13 +16,13 @@

 gcc15Stdenv.mkDerivation (finalAttrs: {
  pname = "hyprpwcenter";
-  version = "0.1.0";
+  version = "0.1.1";

  src = fetchFromGitHub {
    owner = "hyprwm";
    repo = "hyprpwcenter";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-/kE3VlkJjpFxjbgdKCFumg/Oxn4n7Z//5atAObpPiRY=";
+    hash = "sha256-Hxv5Xjlnv70Q/MGLZ4eTlhW8jYhx4gzhn3YL4oc4hN0=";
  };

  nativeBuildInputs = [
@@ -8,6 +8,7 @@
  wayland-scanner,
  aquamarine,
  cairo,
+  gtest,
  hyprgraphics,
  hyprlang,
  hyprutils,
@@ -24,13 +25,13 @@

 gcc15Stdenv.mkDerivation (finalAttrs: {
  pname = "hyprtoolkit";
-  version = "0.1.1";
+  version = "0.3.0";

  src = fetchFromGitHub {
    owner = "hyprwm";
    repo = "hyprtoolkit";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-SjZAlFpZ/ZpYXj59toamF4qx5rC8RP0U/yEsPVniyI8=";
+    hash = "sha256-M+mlYKvzqW+TSoJ4MH9U+HcFoUmWc1etiXehyLEVB2M=";
  };

  nativeBuildInputs = [
@@ -43,6 +44,7 @@ gcc15Stdenv.mkDerivation (finalAttrs: {
  buildInputs = [
    aquamarine
    cairo
+    gtest
    hyprgraphics
    hyprlang
    hyprutils
@@ -11,13 +11,13 @@

 gcc15Stdenv.mkDerivation (finalAttrs: {
  pname = "hyprwire";
-  version = "0.1.0";
+  version = "0.1.1";

  src = fetchFromGitHub {
    owner = "hyprwm";
    repo = "hyprwire";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-84KqFPakU1Pv7axkwbSi1D5XssSHIW8B2xduOUq5Mw4=";
+    hash = "sha256-EoLyrxFJVr7igDhhVNRk2rRpEEOJllRWvYg5XZ3J5y0=";
  };

  nativeBuildInputs = [
@@ -26,9 +26,9 @@ gcc15Stdenv.mkDerivation (finalAttrs: {
  ];

  buildInputs = [
-    pugixml
    hyprutils
    libffi
+    pugixml
  ];

  meta = {
@@ -9,13 +9,13 @@
 }:
 buildGoModule rec {
  pname = "immich-go";
-  version = "0.28.0";
+  version = "0.30.0";

  src = fetchFromGitHub {
    owner = "simulot";
    repo = "immich-go";
    tag = "v${version}";
-    hash = "sha256-H/ch6W9PrVg7MnQ6/QcMhadihjWx5oHlC7z4oZmjyvQ=";
+    hash = "sha256-OqnTh1lZ0/L1DM1SUznDm/UZXUMZtGKIx+T96EboVyk=";

    # Inspired by: https://github.com/NixOS/nixpkgs/blob/f2d7a289c5a5ece8521dd082b81ac7e4a57c2c5c/pkgs/applications/graphics/pdfcpu/default.nix#L20-L32
    # The intention here is to write the information into files in the `src`'s
@@ -32,7 +32,7 @@ buildGoModule rec {
    '';
  };

-  vendorHash = "sha256-EAlslQsLuOp1yrSi0wsNoSqyHnGvLHrf8np4rKrn9yY=";
+  vendorHash = "sha256-sBS0U6izjrpNCo9toDoH9ceIaSlr9+Y+2l00CjMwcjc=";

  # options used by upstream:
  # https://github.com/simulot/immich-go/blob/v0.25.0/.goreleaser.yaml
@@ -72,7 +72,10 @@ buildGoModule rec {
    homepage = "https://github.com/simulot/immich-go";
    mainProgram = "immich-go";
    license = lib.licenses.agpl3Only;
-    maintainers = with lib.maintainers; [ kai-tub ];
+    maintainers = with lib.maintainers; [
+      diogotcorreia
+      kai-tub
+    ];
    changelog = "https://github.com/simulot/immich-go/releases/tag/${src.tag}";
  };
 }
@@ -45,7 +45,7 @@ stdenv.mkDerivation (finalAttrs: {

  meta = {
    broken = stdenv.hostPlatform.isDarwin;
-    homepage = "https://csl.name/jp2a/";
+    homepage = "https://github.com/Talinx/jp2a";
    description = "Small utility that converts JPG images to ASCII";
    license = lib.licenses.gpl2Only;
    maintainers = [ lib.maintainers.FlorianFranzen ];
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "jq-lsp";
-  version = "0.1.13";
+  version = "0.1.14";

  src = fetchFromGitHub {
    owner = "wader";
    repo = "jq-lsp";
    tag = "v${version}";
-    hash = "sha256-Oa9MuE6nUaxAlKeFnx4qjPldDfmLrbBraFkUsp5K5gY=";
+    hash = "sha256-VWZZFa+mMFAbfHTrFqf5vEEqA20DiCz4VjX50mgTuzw=";
  };

-  vendorHash = "sha256-8sZGnoP7l09ZzLJqq8TUCquTOPF0qiwZcFhojUnnEIY=";
+  vendorHash = "sha256-oiy80U6WmpG0lHl5yTF017gZbiB2cWuM+cQJB0bs+RU=";

  # based on https://github.com/wader/jq-lsp/blob/master/.goreleaser.yml
  env.CGO_ENABLED = 0;
@@ -2,6 +2,8 @@
  lib,
  buildGoModule,
  fetchFromGitHub,
+  installShellFiles,
+  stdenv,
 }:

 buildGoModule rec {
@@ -17,9 +19,18 @@ buildGoModule rec {

  vendorHash = "sha256-1QcQeeYQFsStK27NVdyCAb1Y40lyifBf0dlSgzocG3Y=";

+  nativeBuildInputs = [ installShellFiles ];
+
  # Many tests require a running Kafka instance
  doCheck = false;

+  postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
+    installShellCompletion --cmd kaf \
+      --bash <($out/bin/kaf completion bash) \
+      --zsh <($out/bin/kaf completion zsh) \
+      --fish <($out/bin/kaf completion fish)
+  '';
+
  meta = with lib; {
    description = "Modern CLI for Apache Kafka, written in Go";
    mainProgram = "kaf";
--- a/Show More
+++ b/Show More