Merge master into staging-nixos

nixos/modules/services/misc/ersatztv.nix

@@ -20,12 +20,14 @@ let
     bool
     float
     int
+    package
     ;
   cfg = config.services.ersatztv;
   defaultEnv = {
     ETV_UI_PORT = 8409;
     ETV_BASE_URL = "/";
   };
+
 in
 {
   options = {
@@ -54,6 +56,8 @@ in
             int
             float
             bool
+            path
+            package
           ]);
         default = defaultEnv;
         example = {
@@ -108,7 +112,7 @@ in
           ETV_CONFIG_FOLDER = "/var/lib/ersatztv/config";
           ETV_TRANSCODE_FOLDER = "/var/lib/ersatztv/transcode";
         }
-        // cfg.environment;
+        // (lib.mapAttrs (_: s: if lib.isBool s then lib.boolToString s else toString s) cfg.environment);
       };
     };
 

nixos/tests/all-tests.nix

@@ -522,7 +522,7 @@ in
   };
   ergo = runTest ./ergo.nix;
   ergochat = runTest ./ergochat.nix;
-  ersatztv = handleTest ./ersatztv.nix { };
+  ersatztv = runTest ./ersatztv.nix;
   espanso = import ./espanso.nix {
     inherit (pkgs) lib;
     inherit runTest;

nixos/tests/ersatztv.nix

@@ -1,21 +1,41 @@
-import ./make-test-python.nix (
-  { lib, ... }:
+{ lib, ... }:
 
-  {
-    name = "ersatztv";
-    meta.maintainers = with lib.maintainers; [ allout58 ];
+{
+  name = "ersatztv";
+  meta.maintainers = with lib.maintainers; [ allout58 ];
 
-    nodes.machine =
-      { ... }:
-      {
-        services.ersatztv.enable = true;
-      };
+  nodes.basic =
+    { ... }:
+    {
+      services.ersatztv.enable = true;
+    };
+  nodes.reconfigured =
+    { ... }:
+    {
+      services.ersatztv.enable = true;
+      services.ersatztv.environment.ETV_UI_PORT = 8123;
+      services.ersatztv.openFirewall = true;
+    };
 
-    # ErsatzTV doesn't really have an API to speak of currently, so just check if it responds at all
-    testScript = ''
-      machine.wait_for_unit("ersatztv.service")
-      machine.wait_for_open_port(8409)
-      machine.succeed("curl --fail http://localhost:8409/")
+  # ErsatzTV doesn't really have an API to speak of currently, so just check if it responds at all
+  testScript =
+    { nodes, ... }:
+    let
+      basicIp = (lib.head nodes.basic.networking.interfaces.eth1.ipv4.addresses).address;
+      reconfiguredIp = (lib.head nodes.reconfigured.networking.interfaces.eth1.ipv4.addresses).address;
+    in
+    ''
+      start_all()
+      basic.wait_for_unit("ersatztv.service")
+      basic.wait_for_open_port(8409)
+      basic.succeed("curl --fail http://localhost:8409/api/sessions")
+
+      reconfigured.wait_for_unit("ersatztv.service")
+      reconfigured.wait_for_open_port(8123)
+      reconfigured.succeed("curl --fail http://localhost:8123/api/sessions")
+
+      # Test that the firewall is open
+      reconfigured.fail("curl --fail --connect-timeout 5 http://${basicIp}:8409/api/sessions")
+      basic.succeed("curl --fail http://${reconfiguredIp}:8123/api/sessions")
     '';
-  }
-)
+}

pkgs/applications/blockchains/optimism/geth.nix

@@ -39,6 +39,8 @@ buildGoModule rec {
   ];
 
   meta = with lib; {
+    # Marked broken 2025-11-28 because it has failed on Hydra for at least one year.
+    broken = true;
     description = "";
     homepage = "https://github.com/ethereum-optimism/op-geth";
     license = licenses.gpl3Only;

pkgs/applications/editors/vscode/extensions/anthropic.claude-code/default.nix

@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "claude-code";
     publisher = "anthropic";
-    version = "2.0.56";
-    hash = "sha256-HWl7I+KXpvPzL6Fyk2lQdZoeYXPgipIABwJBArETylc=";
+    version = "2.0.57";
+    hash = "sha256-vqlW54Ck9Q2N0gUsfCEEt4dTqiaQOi3eAAK43umcEK4=";
   };
 
   meta = {

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -45,11 +45,11 @@
     "vendorHash": "sha256-weHY7ZV3HaFBYlDNhwAYN9vDItkI+wtk9UNlM0uuwfY="
   },
   "aliyun_alicloud": {
-    "hash": "sha256-XljWNpFQr9SghmRkUTsW/0g7oqU8JMmxJxuLWYuorAQ=",
+    "hash": "sha256-np2BlBqLTmn9UEatFhj3rn8/CQSyPfszL8cY6mDaGFU=",
     "homepage": "https://registry.terraform.io/providers/aliyun/alicloud",
     "owner": "aliyun",
     "repo": "terraform-provider-alicloud",
-    "rev": "v1.263.0",
+    "rev": "v1.264.0",
     "spdx": "MPL-2.0",
     "vendorHash": "sha256-LSvX63g4GWcr2Uo6H50dOWG0XWUhmbhUw9EYsQqs+HU="
   },

pkgs/by-name/an/animeko/package.nix

@@ -0,0 +1,242 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  gradle,
+  autoPatchelfHook,
+  jetbrains, # Requird by upstream due to JCEF dependency
+  fontconfig,
+  libXinerama,
+  libXrandr,
+  file,
+  gtk3,
+  glib,
+  cups,
+  lcms2,
+  alsa-lib,
+  libvlc,
+  libidn,
+  pulseaudio,
+  ffmpeg,
+  libva,
+  libdvbpsi,
+  libogg,
+  chromaprint,
+  protobuf_21,
+  libgcrypt,
+  libdvdnav,
+  libsecret,
+  aribb24,
+  libavc1394,
+  libmpcdec,
+  libvorbis,
+  libebml,
+  faad2,
+  libjpeg8,
+  libkate,
+  librsvg,
+  xorg,
+  libsForQt5,
+  libupnp,
+  aalib,
+  libcaca,
+  libmatroska,
+  libopenmpt-modplug,
+  libsidplayfp,
+  shine,
+  libarchive,
+  gnupg,
+  srt,
+  libshout,
+  ffmpeg_6,
+  libmpeg2,
+  xcbutilkeysyms,
+  lirc,
+  lua5_2,
+  taglib,
+  libspatialaudio,
+  libmtp,
+  speexdsp,
+  libsamplerate,
+  sox,
+  libmad,
+  libnotify,
+  taglib_1,
+  zvbi,
+  libdc1394,
+  libcddb,
+  libbluray,
+  libdvdread,
+  libvncserver,
+  twolame,
+  samba,
+  libnfs,
+  flac,
+  writeShellScript,
+  nix-update,
+  libxml2,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "animeko";
+  version = "5.2.0";
+
+  src = fetchFromGitHub {
+    owner = "open-ani";
+    repo = "animeko";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-eP1v/o9qUk8qG+n1cJRmlgu2l06hFZLeUN/X06qAVpY=";
+    fetchSubmodules = true;
+  };
+
+  # CefLog.init(jcefConfig.cefSettings) is being comment out due to compile error
+  postPatch = ''
+    echo "kotlin.native.ignoreDisabledTargets=true" >> local.properties
+    sed -i "s/^version.name=.*/version.name=${finalAttrs.version}/" gradle.properties
+    sed -i "s/^package.version=.*/package.version=${finalAttrs.version}/" gradle.properties
+    substituteInPlace app/shared/app-platform/src/desktopMain/kotlin/platform/AniCefApp.kt \
+      --replace-fail 'CefLog.init(jcefConfig.cefSettings)' '//CefLog.init(jcefConfig.cefSettings)'
+  '';
+
+  gradleBuildTask = "createReleaseDistributable";
+
+  gradleUpdateTask = finalAttrs.gradleBuildTask;
+
+  mitmCache = gradle.fetchDeps {
+    inherit (finalAttrs) pname;
+    pkg = finalAttrs.finalPackage;
+    data = ./deps.json;
+    silent = false;
+    useBwrap = false;
+  };
+
+  env.JAVA_HOME = jetbrains.jdk;
+
+  gradleFlags = [
+    "-Dorg.gradle.java.home=${jetbrains.jdk}"
+  ];
+
+  nativeBuildInputs = [
+    gradle
+    autoPatchelfHook
+  ];
+
+  buildInputs = [
+    fontconfig
+    libXinerama
+    libXrandr
+    file
+    shine
+    libmpeg2
+    gtk3
+    glib
+    cups
+    lcms2
+    alsa-lib
+    libidn
+    pulseaudio
+    ffmpeg
+    faad2
+    libjpeg8
+    libkate
+    librsvg
+    xorg.libXpm
+    libsForQt5.qt5.qtsvg
+    libsForQt5.qt5.qtbase
+    libsForQt5.qt5.qtx11extras
+    libupnp
+    aalib
+    libcaca
+    libva
+    libdvbpsi
+    libogg
+    chromaprint
+    protobuf_21
+    libgcrypt
+    libsecret
+    aribb24
+    twolame
+    libmpcdec
+    libvorbis
+    libebml
+    libmatroska
+    libopenmpt-modplug
+    libavc1394
+    libmtp
+    libsidplayfp
+    libarchive
+    gnupg
+    srt
+    libshout
+    ffmpeg_6
+    xcbutilkeysyms
+    lirc
+    lua5_2
+    taglib
+    libspatialaudio
+    speexdsp
+    libsamplerate
+    sox
+    libmad
+    libnotify
+    zvbi
+    libdc1394
+    libcddb
+    libbluray
+    libdvdread
+    libvncserver
+    samba
+    libnfs
+    taglib_1
+    libdvdnav
+    flac
+    libxml2
+  ];
+
+  dontWrapQtApps = true;
+
+  doCheck = false;
+
+  installPhase = ''
+    runHook preInstall
+
+    cp -r app/desktop/build/compose/binaries/main-release/app/Ani $out
+    chmod +x $out/lib/runtime/lib/jcef_helper
+    substituteInPlace app/desktop/appResources/linux-x64/animeko.desktop \
+      --replace-fail "icon" "animeko"
+    install -Dm644 app/desktop/appResources/linux-x64/animeko.desktop $out/share/applications/animeko.desktop
+    install -Dm644 app/desktop/appResources/linux-x64/icon.png $out/share/icons/hicolor/512x512/apps/animeko.png
+
+    runHook postInstall
+  '';
+
+  preFixup = ''
+    # Remove prebuilt vlc and use NixOS version
+    rm -r $out/lib/app/resources/lib
+    ln -sf ${libvlc}/lib $out/lib/app/resources/
+  '';
+
+  ANDROID_SDK_HOME = "$(pwd)";
+
+  passthru.updateScript = writeShellScript "update-animeko" ''
+    ${lib.getExe nix-update} animeko
+    $(nix-build -A animeko.mitmCache.updateScript)
+  '';
+
+  meta = {
+    description = "One-stop platform for finding, following and watching anime";
+    homepage = "https://github.com/open-ani/animeko";
+    mainProgram = "Ani";
+    license = lib.licenses.agpl3Plus;
+    maintainers = with lib.maintainers; [
+      pokon548
+    ];
+    sourceProvenance = with lib.sourceTypes; [
+      fromSource
+      binaryBytecode
+    ];
+    platforms = [
+      "x86_64-linux"
+    ];
+  };
+})

pkgs/by-name/ar/arkade/package.nix

@@ -8,13 +8,13 @@
 
 buildGoModule rec {
   pname = "arkade";
-  version = "0.11.59";
+  version = "0.11.60";
 
   src = fetchFromGitHub {
     owner = "alexellis";
     repo = "arkade";
     tag = version;
-    hash = "sha256-tmn75g4hfayU7zDaP7QPIv46tHHxFgB0ebATS+fYHgI=";
+    hash = "sha256-2VabFPcvTgkjoGXQDUdDh1BdUB+tS3QsfGDSGerd95Q=";
   };
 
   env.CGO_ENABLED = 0;

pkgs/by-name/as/async-profiler/package.nix

@@ -8,13 +8,13 @@
 }:
 stdenv.mkDerivation rec {
   pname = "async-profiler";
-  version = "4.2";
+  version = "4.2.1";
 
   src = fetchFromGitHub {
     owner = "jvm-profiling-tools";
     repo = "async-profiler";
     rev = "v${version}";
-    hash = "sha256-y/MQgXoaJSwc6QjTPGQRFNyVoR1ENQ7rDmtCwR5F/oM=";
+    hash = "sha256-ggqfBndcwHUerWjsvDqmRQ5uEyL6zhNgwVl18R18k0Q=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

pkgs/by-name/cd/cdncheck/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "cdncheck";
-  version = "1.2.11";
+  version = "1.2.12";
 
   src = fetchFromGitHub {
     owner = "projectdiscovery";
     repo = "cdncheck";
     tag = "v${version}";
-    hash = "sha256-8EBOvwYsanLkz1DbBwprrP8zZrMX1a/od517qubwzBk=";
+    hash = "sha256-SFtUfYZqD3QULEAKVOuMLKiwALtE2K8RJFbPlBM4tyw=";
   };
 
-  vendorHash = "sha256-tJXfJHEZ1KysnJIkVX+UxP3CnTCzlZtsTlVbCSCNeg8=";
+  vendorHash = "sha256-Mmc2yFgtvpLsPAud3X/7R/2wKkmsucKbkRqHsSg9Qt4=";
 
   subPackages = [ "cmd/cdncheck/" ];
 

pkgs/by-name/ch/chhoto-url/package.nix

@@ -8,13 +8,13 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "chhoto-url";
-  version = "6.5.1";
+  version = "6.5.2";
 
   src = fetchFromGitHub {
     owner = "SinTan1729";
     repo = "chhoto-url";
     tag = finalAttrs.version;
-    hash = "sha256-gDD/1NKqPH84nr+EjTFfMGZkZfskQujn+uRGrnGs/fg=";
+    hash = "sha256-OO/foBlo6O4sXT6iP85L3liMHFZkCOTcP6Nx9UxyLJg=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/actix";
@@ -24,7 +24,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
       --replace-fail "./resources/" "${placeholder "out"}/share/chhoto-url/resources/"
   '';
 
-  cargoHash = "sha256-jSdUKkZBgpMN05FmZUXHqBszuDAByf6bzIaaRNfymGY=";
+  cargoHash = "sha256-WVSS2041oaxvISmZ9YoLUipSXAcikfeHlvbuN6ZjMb8=";
 
   postInstall = ''
     mkdir -p $out/share/chhoto-url

pkgs/by-name/cl/claude-code/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@anthropic-ai/claude-code",
-  "version": "2.0.56",
+  "version": "2.0.57",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@anthropic-ai/claude-code",
-      "version": "2.0.56",
+      "version": "2.0.57",
       "license": "SEE LICENSE IN README.md",
       "bin": {
         "claude": "cli.js"

pkgs/by-name/cl/claude-code/package.nix

@@ -11,14 +11,14 @@ buildNpmPackage (finalAttrs: {
   # ```sh
   # nix-shell maintainers/scripts/update.nix --argstr commit true --argstr package vscode-extensions.anthropic.claude-code && nix-shell maintainers/scripts/update.nix --argstr commit true --argstr package claude-code
   # ```
-  version = "2.0.56";
+  version = "2.0.57";
 
   src = fetchzip {
     url = "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-${finalAttrs.version}.tgz";
-    hash = "sha256-HuT2y0pyVc9wFrWBLffqCrrpN60YN1cl5NPwzOK0q98=";
+    hash = "sha256-mnSM1FFLrVQwmS3MgRoLg3lIDPJ7ERiWHLDsQoxRIxA=";
   };
 
-  npmDepsHash = "sha256-yoVNRg7XdVBHGJPlmZ3g/vQ/0qSroKUVaN91N2XWtEs=";
+  npmDepsHash = "sha256-wVhKqeyFSIvPSb9jx+qUKWAfp7ZX8nvzvyv0A/XxnR8=";
 
   postPatch = ''
     cp ${./package-lock.json} package-lock.json

pkgs/by-name/cl/cloudfoundry-cli/package.nix

@@ -8,15 +8,15 @@
 
 buildGoModule rec {
   pname = "cloudfoundry-cli";
-  version = "8.16.0";
+  version = "8.17.0";
 
   src = fetchFromGitHub {
     owner = "cloudfoundry";
     repo = "cli";
     rev = "v${version}";
-    sha256 = "sha256-7ROrXGGzHTI83/SgBqcNJdlZlWzt8rAYdsNM2vgyDKA=";
+    sha256 = "sha256-OnUqREa2rYx/3yW+yZC69GTx/i7wtK4pLubAlGyYNSI=";
   };
-  vendorHash = "sha256-vWy93zOHh4kCQ/D4rKlbL0mcDbOStYOvC8G4bc6KRgg=";
+  vendorHash = "sha256-FcymGl2dzCaZGEDpXyebffE3NbIgold8nKaZ+CW1p2o=";
 
   subPackages = [ "." ];
 

pkgs/by-name/co/cockpit/package.nix

@@ -44,13 +44,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "cockpit";
-  version = "351";
+  version = "352";
 
   src = fetchFromGitHub {
     owner = "cockpit-project";
     repo = "cockpit";
     tag = finalAttrs.version;
-    hash = "sha256-8f/mm53eE0L5fxNwgBkKeNvlBV2gPPvLI+U8c7QkKAI=";
+    hash = "sha256-8FtC5fr/FPjHnb7RpVi4kz0RS6nvp7aD++ILo0LRZxo=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/co/codex/package.nix

@@ -14,18 +14,18 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "codex";
-  version = "0.63.0";
+  version = "0.64.0";
 
   src = fetchFromGitHub {
     owner = "openai";
     repo = "codex";
     tag = "rust-v${finalAttrs.version}";
-    hash = "sha256-CWISGlSpS0A2yuXNC11L+5iT5Z9heHqkcIGQDJoUWFE=";
+    hash = "sha256-1nUawra7VChAcLAwWgcasy22q37DQxq6q8qAx55gHMc=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/codex-rs";
 
-  cargoHash = "sha256-S6KCJ/b2fY8ydCoR+BfhEV4bbcgwQ6V0xHA9Mbl87jo=";
+  cargoHash = "sha256-cIiHB8THztG/TqPMjFekkQl8wEvALIf5Bg/fqXJ/hKs=";
 
   nativeBuildInputs = [
     installShellFiles

pkgs/by-name/co/copybara/package.nix

@@ -13,11 +13,11 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "copybara";
-  version = "20251117";
+  version = "20251124";
 
   src = fetchurl {
     url = "https://github.com/google/copybara/releases/download/v${finalAttrs.version}/copybara_deploy.jar";
-    hash = "sha256-QbmBrkkqLtB/5ZS9o+Z4KKbogFv5lccEGgLZsuVuPrg=";
+    hash = "sha256-4MWmzeLpuDlz/Y8N0WmzASADtFCuWNMPT8QnCTrPRrQ=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/cp/cpp-utilities/package.nix

@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "cpp-utilities";
-  version = "5.31.1";
+  version = "5.32.0";
 
   src = fetchFromGitHub {
     owner = "Martchus";
     repo = "cpp-utilities";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-HpzcGHDudVFmkVfkn5YpAATKfZ3FpIKXfqhpjpehK1M=";
+    sha256 = "sha256-NiCUbo00o4rYY0cKwWGz0e2LfJPcRSs1PY6NBlnj9G8=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/cr/crowdin-cli/package.nix

@@ -14,11 +14,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "crowdin-cli";
-  version = "4.11.0";
+  version = "4.12.0";
 
   src = fetchurl {
     url = "https://github.com/crowdin/crowdin-cli/releases/download/${finalAttrs.version}/crowdin-cli.zip";
-    hash = "sha256-5nQq/p6Zd/CC9Qqwwxk3Cu3CoCL2eNgNGHVC3pRGnVI=";
+    hash = "sha256-y6JBlZ1h/1iWr8r+323sYpQNpzM3pHtC/CzQt4HL7MQ=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/dd/ddns-go/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "ddns-go";
-  version = "6.13.2";
+  version = "6.13.3";
 
   src = fetchFromGitHub {
     owner = "jeessy2";
     repo = "ddns-go";
     rev = "v${version}";
-    hash = "sha256-Jko5cVcCMrBsfcOOSh6ETlk1jdTCbSj1zOgTwhXnxzQ=";
+    hash = "sha256-kB13TjZpeLnrbLc4dhA7lJY4I24wjTGfeqFtt97pyQE=";
   };
 
-  vendorHash = "sha256-URPCqItQ/xg8p0EdkMS6z8vuSJ1YaCicsvyb+Jvj2CU=";
+  vendorHash = "sha256-CtbbyI7sL1Ej4WDWkEZoRFngiwWpzSwvAKAWQwiMD1E=";
 
   ldflags = [
     "-X main.version=${version}"

pkgs/by-name/do/docuum/package.nix

@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "docuum";
-  version = "0.25.1";
+  version = "0.26.0";
 
   src = fetchFromGitHub {
     owner = "stepchowfun";
     repo = "docuum";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-fc+qEDYQGRxOSfFng3/K3xYWb8mKTuuKWanQS+/UIMo=";
+    hash = "sha256-ZfC0z/oaf+HQR33DDtixp9LwLD3v+eZ1tP3WvXqNnFY=";
   };
 
-  cargoHash = "sha256-IryniHpSJDxjW6FRqTILKzp6XrTHxJ19BiYqRYIHnGo=";
+  cargoHash = "sha256-0vNhZTIRpZ72hiU6GvlbWlo2U//AdJmowXVuaI/5wB8=";
 
   checkFlags = [
     # fails, no idea why

pkgs/by-name/dy/dysk/package.nix

@@ -7,16 +7,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "dysk";
-  version = "3.4.0";
+  version = "3.5.0";
 
   src = fetchFromGitHub {
     owner = "Canop";
     repo = "dysk";
     tag = "v${version}";
-    hash = "sha256-0P7JySrgIui6sWh/JSqGqAMbI9cqeAkSdPuRtJB/Hec=";
+    hash = "sha256-FI7npNGK7Y2dteQsBXWRz504tEqXSGLSp7QmmDUMJsI=";
   };
 
-  cargoHash = "sha256-UuJ7ya/qLU2kmAhP8aucDREXKjdTaiKlzbSgDZXj54o=";
+  cargoHash = "sha256-bsBIbYYl4mXW7KHya+JEfrCjh7tc3TvKHjcXwt0rQ3k=";
 
   nativeBuildInputs = [
     installShellFiles

pkgs/by-name/e1/e1s/package.nix

@@ -5,7 +5,7 @@
 }:
 let
   pname = "e1s";
-  version = "1.0.51";
+  version = "1.0.52";
 in
 buildGoModule {
   inherit pname version;
@@ -14,10 +14,10 @@ buildGoModule {
     owner = "keidarcy";
     repo = "e1s";
     tag = "v${version}";
-    hash = "sha256-9O6VRsO80d+ZvUbqt+AUqph9FXOWlwOdgJcqqiGBNC0=";
+    hash = "sha256-ObqCd27gMG1WWqAObZZP1rGLJuh8weCdC0zrLfoPwMo=";
   };
 
-  vendorHash = "sha256-1lise/u40Q8W9STsuyrWIbhf2HY+SFCytUL1PTSWvfY=";
+  vendorHash = "sha256-8z2RVT2W8TLXdZBAmi/2fu63pijVgzqSvF9xpGexlQ0=";
 
   meta = {
     description = "Easily Manage AWS ECS Resources in Terminal";

pkgs/by-name/fl/fleet/package.nix

@@ -7,15 +7,15 @@
 
 buildGoModule (finalAttrs: {
   pname = "fleet";
-  version = "4.76.1";
+  version = "4.77.0";
 
   src = fetchFromGitHub {
     owner = "fleetdm";
     repo = "fleet";
     tag = "fleet-v${finalAttrs.version}";
-    hash = "sha256-DWrErGFKhhAP+qePYz5VJ26dySMOicGkHEN16J9qOx4=";
+    hash = "sha256-3GrEjXNHts4qEjv8GhQSwAtcC6/I94SWbr6D4aPXW5c=";
   };
-  vendorHash = "sha256-VLxhlzuQqt/jtUwllCutj2CO2tXWFgLRpU2mGtZM6RE=";
+  vendorHash = "sha256-DXCfuEGMmcbVcV2LBa6oPMPDtkbkomdgbV4LlMV9qe8=";
 
   subPackages = [
     "cmd/fleet"

pkgs/by-name/ge/gersemi/package.nix

@@ -6,14 +6,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "gersemi";
-  version = "0.23.1";
+  version = "0.23.2";
   format = "pyproject";
 
   src = fetchFromGitHub {
     owner = "BlankSpruce";
     repo = "gersemi";
     tag = version;
-    hash = "sha256-mAScW+OLHSN5idHk/Kd909sOJDBUAe2Vi55kdhTtlzQ=";
+    hash = "sha256-sXgu3KscRi/3Myg/4jarMZ4W7/CaQTmyxxbcu8/0o6Y=";
   };
 
   build-system = with python3Packages; [

pkgs/by-name/go/gobgp/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "gobgp";
-  version = "3.37.0";
+  version = "4.0.0";
 
   src = fetchFromGitHub {
     owner = "osrg";
     repo = "gobgp";
     rev = "v${version}";
-    sha256 = "sha256-Nh4JmyZHrT7uPi9+CbmS3h6ezKoicCvEByUJVULMac4=";
+    sha256 = "sha256-hXpNNDGiiJ0m8TjZe4ZOFhwma7KG7bm5iud1F0lcRzg=";
   };
 
-  vendorHash = "sha256-HpATJztX31mNWkpeDqOE4rTzhCk3c7E1PtZnKW8Axyo=";
+  vendorHash = "sha256-y8nhrKQnTXfnDDyr/xZd5b9ccXaM85rd8RKHtoDBuwI=";
 
   postConfigure = ''
     export CGO_ENABLED=0

pkgs/by-name/go/gogh/package.nix

@@ -25,13 +25,13 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "gogh";
-  version = "361";
+  version = "362";
 
   src = fetchFromGitHub {
     owner = "Gogh-Co";
     repo = "Gogh";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kzJiI1w8CYVYMcHo8mMqLseyFsU/PekjMkkk0gG+RH4=";
+    hash = "sha256-FlMf7CzdGcGor+wi293CW2PT14O1VRzQbbxnNMmwFqk=";
   };
 
   postPatch = ''

pkgs/by-name/go/google-chrome/package.nix

@@ -170,11 +170,11 @@ let
 
   linux = stdenvNoCC.mkDerivation (finalAttrs: {
     inherit pname meta passthru;
-    version = "142.0.7444.175";
+    version = "143.0.7499.40";
 
     src = fetchurl {
       url = "https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_${finalAttrs.version}-1_amd64.deb";
-      hash = "sha256-jh1xtWvntfqM894lG8nW9OS2UAaXFC8PGpTFpexuLoU=";
+      hash = "sha256-rx5yfN8fD4bs2SRASJ65YFijfq9xknUDwZiXdgAagIU=";
     };
 
     # With strictDeps on, some shebangs were not being patched correctly
@@ -272,11 +272,11 @@ let
 
   darwin = stdenvNoCC.mkDerivation (finalAttrs: {
     inherit pname meta passthru;
-    version = "142.0.7444.176";
+    version = "143.0.7499.41";
 
     src = fetchurl {
-      url = "http://dl.google.com/release2/chrome/adwwopanah7ruvzdwqiygodsggsq_142.0.7444.176/GoogleChrome-142.0.7444.176.dmg";
-      hash = "sha256-sH/oPMJOxJNKw+znU2lX7BYtSN6vfcs0CyvxOXlPoFs=";
+      url = "http://dl.google.com/release2/chrome/mn7icxthshss2p6fseuwaupjs4_143.0.7499.41/GoogleChrome-143.0.7499.41.dmg";
+      hash = "sha256-L8Zl/hGDqWPQQ+dnaZw7QVifo+N81BCYNzawW+kcyDg=";
     };
 
     dontPatch = true;

pkgs/by-name/im/immich-kiosk/package.nix

@@ -8,25 +8,25 @@
 
 buildGoModule rec {
   pname = "immich-kiosk";
-  version = "0.26.1";
+  version = "0.28.1";
 
   src = fetchFromGitHub {
     owner = "damongolding";
     repo = "immich-kiosk";
     tag = "v${version}";
-    hash = "sha256-NsnJa5+P0xm12o7HAmfD8+w3H46f5WR2GO78My+YAi0=";
+    hash = "sha256-9ZKjhCmOL2fjGOjdzgVG7/aq6SdBJCG/+bFrlHdkll4=";
   };
 
   # Delete vendor directory to regenerate it consistently across platforms
   postPatch = ''
     rm -rf vendor
   '';
-  vendorHash = "sha256-Mx6dCC8xRTfE/7j4chLtdKzQLHQE9y+xtEasWPtn94k=";
+  vendorHash = "sha256-5y//CdHgQjNJayNI/jzdD5WPa4XlIxMonqkPc/kJp8c=";
 
   pnpmDeps = pnpm_9.fetchDeps {
     inherit pname version src;
     sourceRoot = "${src.name}/frontend";
-    hash = "sha256-En3y1fQRtwJm8fwxZ/VWuRfm1zPcnlDBuMNcY5WtxqM=";
+    hash = "sha256-FThVaNUUE3QCbq0iPRCet4SnlHCCQaw3N5PThKSM1ek=";
     fetcherVersion = 2;
   };
 

pkgs/by-name/jj/jjui/package.nix

@@ -7,16 +7,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "jjui";
-  version = "0.9.6";
+  version = "0.9.7";
 
   src = fetchFromGitHub {
     owner = "idursun";
     repo = "jjui";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-sLOQa9IoRcYEXcShiE/vdjJknQcDwefVwHii63MPXpw=";
+    hash = "sha256-WkJofvalxjcehlVZiPB51jw7exQ2rU8CiRq3gxMKzEQ=";
   };
 
-  vendorHash = "sha256-SMeS1FHc8UdXaxF9A8eYFkWQIM0hgWfBpuX+DsBglcw=";
+  vendorHash = "sha256-dSODeMvlPWrOS97sw1qbf3vrmv8Bs+Z3rmN0ZRV/KjU=";
 
   ldflags = [ "-X main.Version=${finalAttrs.version}" ];
 

pkgs/by-name/jw/jwasm/package.nix

@@ -6,13 +6,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "jwasm";
-  version = "2.19";
+  version = "2.20";
 
   src = fetchFromGitHub {
     owner = "Baron-von-Riedesel";
     repo = "JWasm";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-rWn/PhdOkA8aKDPx5GlfM6RuHcy1Hhudh1auVfaNtdI=";
+    hash = "sha256-ZwSXX/vlAlbRFpWtCmSCGoMT5lu8qz870PZPVktHGRo=";
   };
 
   outputs = [

pkgs/by-name/ku/kubeshark/package.nix

@@ -11,13 +11,13 @@
 
 buildGoModule rec {
   pname = "kubeshark";
-  version = "52.9.0";
+  version = "52.10.0";
 
   src = fetchFromGitHub {
     owner = "kubeshark";
     repo = "kubeshark";
     rev = "v${version}";
-    hash = "sha256-avXEBOjxTfrWxyq3PQVs7DD+1Wo6fRPboUrpt/4Ud/U=";
+    hash = "sha256-7T23cdPIE7X5Hx03sY93z/qrqRMGUTMObWvwdH6Hj5U=";
   };
 
   vendorHash = "sha256-4s1gxJo2w5BibZ9CJP7Jl9Z8Zzo8WpBokBnRN+zp8b4=";

pkgs/by-name/ku/kubetui/package.nix

@@ -6,20 +6,20 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "kubetui";
-  version = "1.10.1";
+  version = "1.10.2";
 
   src = fetchFromGitHub {
     owner = "sarub0b0";
     repo = "kubetui";
     tag = "v${version}";
-    hash = "sha256-Fa/1A37uP8dYYP5S7qzxKJv7GXVWsRvdzVTmRfQ2n/c=";
+    hash = "sha256-zc2oOwsWjPstEXrSDvuWyYL8RnsIxSaKO0RcwcgacoI=";
   };
 
   checkFlags = [
     "--skip=workers::kube::store::tests::kubeconfigからstateを生成"
   ];
 
-  cargoHash = "sha256-CzkXA+e0bcTU8u8Nj1OBj8Ovgzr8aDiW92AVzaYwqpA=";
+  cargoHash = "sha256-KnBQOpxubHXrN5w6mdO+ZWfpXezJH9PkxaYaSi0AI2k=";
 
   meta = {
     homepage = "https://github.com/sarub0b0/kubetui";

pkgs/by-name/li/libcoap/package.nix

@@ -15,13 +15,13 @@
 }:
 stdenv.mkDerivation rec {
   pname = "libcoap";
-  version = "4.3.5";
+  version = "4.3.5a";
   src = fetchFromGitHub {
     repo = "libcoap";
     owner = "obgm";
     rev = "v${version}";
     fetchSubmodules = true;
-    hash = "sha256-QNrsR6VarZ2favvTZ9pMhVafwF2fOjYLKcyNqZyUl6s=";
+    hash = "sha256-mLVGIG2JkWMlnZOlLxFTZVGM0nF6q2PKJoEo0s4Vq54=";
   };
   nativeBuildInputs = [
     automake

pkgs/by-name/li/libprojectm/package.nix

@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libprojectm";
-  version = "4.1.5";
+  version = "4.1.6";
 
   src = fetchFromGitHub {
     owner = "projectM-visualizer";
     repo = "projectm";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-QkA0PprGWaHgN+BfOjEtfCeeQAdzZczjdzzIdSD4CKI=";
+    hash = "sha256-IUVll+nRvIAOxrb16gWb9OpKzMRRuj28j/v+LvaLY5Y=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/li/libwebsockets/package.nix

@@ -13,13 +13,13 @@
 
 stdenv.mkDerivation rec {
   pname = "libwebsockets";
-  version = "4.3.5";
+  version = "4.4.1";
 
   src = fetchFromGitHub {
     owner = "warmcat";
     repo = "libwebsockets";
     rev = "v${version}";
-    hash = "sha256-KOAhIVn4G5u0A1TE75Xv7iYO3/i8foqWYecH0kJHdBM=";
+    hash = "sha256-Xvcnfvm9UCNXm3G3tVe7jExE3fwpzYuz8wllvINymeI=";
   };
 
   patches = [
@@ -35,14 +35,6 @@ stdenv.mkDerivation rec {
     })
   ];
 
-  # Updating to 4.4.1 would bring some errors, and the patch doesn't apply cleanly
-  # https://github.com/warmcat/libwebsockets/commit/47efb8c1c2371fa309f85a32984e99b2cc1d614a
-  postPatch = ''
-    for f in $(find . -name CMakeLists.txt); do
-      sed '/^cmake_minimum_required/Is/VERSION [0-9]\.[0-9]/VERSION 3.5/' -i "$f"
-    done
-  '';
-
   outputs = [
     "out"
     "dev"
@@ -62,6 +54,8 @@ stdenv.mkDerivation rec {
     "-DLWS_WITH_SOCKS5=ON"
     "-DDISABLE_WERROR=ON"
     "-DLWS_BUILD_HASH=no_hash"
+    # TODO(Mindavi): figure out why linking has broken for test apps between 4.3.5 and 4.4.1.
+    "-DLWS_WITHOUT_TESTAPPS=ON"
   ]
   ++ lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) "-DLWS_WITHOUT_TESTAPPS=ON"
   ++ lib.optional withExternalPoll "-DLWS_WITH_EXTERNAL_POLL=ON"

pkgs/by-name/ma/martin/package.nix

@@ -54,6 +54,8 @@ rustPlatform.buildRustPackage rec {
   ];
 
   meta = with lib; {
+    # Marked broken 2025-11-28 because it has failed on Hydra for at least one year.
+    broken = true;
     description = "Blazing fast and lightweight PostGIS vector tiles server";
     homepage = "https://martin.maplibre.org/";
     license = with licenses; [

pkgs/by-name/ma/matugen/package.nix

@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "matugen";
-  version = "3.0.0";
+  version = "3.1.0";
 
   src = fetchFromGitHub {
     owner = "InioX";
     repo = "matugen";
     tag = "v${version}";
-    hash = "sha256-2VcdnUjIOEMQ87K5wv+Pbgko94PLygp1nrEYcVHk1v4=";
+    hash = "sha256-TD9XyqFdLIOLRZM7ozQ8gz4PyEQbLGLxB4MbzjLccg4=";
   };
 
-  cargoHash = "sha256-HBAsCrD/njZUYkjcaUaTS7xMwfUWLpDXkpIPWSdCvqo=";
+  cargoHash = "sha256-OdJxr01wHqPHgEGIVrLcUv5h1JaYrY1zW9NrYO114OM=";
 
   meta = {
     description = "Material you color generation tool";

pkgs/by-name/ma/maven/build-maven-package.nix

@@ -4,7 +4,6 @@
   jdk,
   jre-generate-cacerts,
   maven,
-  perl,
   writers,
 }:
 
@@ -13,7 +12,9 @@
   sourceRoot ? null,
   buildOffline ? false,
   doCheck ? true,
+  prePatch ? null,
   patches ? [ ],
+  postPatch ? null,
   pname,
   version,
   mvnJdk ? jdk,
@@ -40,7 +41,9 @@ let
       inherit
         src
         sourceRoot
+        prePatch
         patches
+        postPatch
         version
         ;
 

pkgs/by-name/mc/mcomix/package.nix

@@ -5,7 +5,7 @@
   gobject-introspection,
   gtk3,
   mcomix,
-  python312, # TODO: Revert to python3 when upgrading past 3.1.0
+  python3,
   testers,
   wrapGAppsHook3,
 
@@ -17,14 +17,14 @@
   unrarSupport ? false, # unfree software
 }:
 
-python312.pkgs.buildPythonApplication rec {
+python3.pkgs.buildPythonApplication rec {
   pname = "mcomix";
-  version = "3.1.0";
+  version = "3.1.1";
   pyproject = true;
 
   src = fetchurl {
     url = "mirror://sourceforge/mcomix/mcomix-${version}.tar.gz";
-    hash = "sha256-+Shuun/7w86VKBNamTmCPEJfO76fdKY5+HBvzCi0xCc=";
+    hash = "sha256-oQqq7XvAfet0796Tv5qKJ+G8vxgkoFGbJkz+5YK+zvg=";
   };
 
   buildInputs = [
@@ -34,12 +34,12 @@ python312.pkgs.buildPythonApplication rec {
 
   nativeBuildInputs = [
     gobject-introspection
-    python312.pkgs.setuptools
+    python3.pkgs.setuptools
     wrapGAppsHook3
   ];
 
   propagatedBuildInputs =
-    with python312.pkgs;
+    with python3.pkgs;
     [
       pillow
       pycairo
@@ -79,6 +79,9 @@ python312.pkgs.buildPythonApplication rec {
     '';
     homepage = "https://sourceforge.net/projects/mcomix/";
     license = licenses.gpl2Plus;
-    maintainers = with maintainers; [ thiagokokada ];
+    maintainers = with maintainers; [
+      confus
+      thiagokokada
+    ];
   };
 }

pkgs/by-name/mo/moc/fix_gettext_0_25.patch

@@ -0,0 +1,17 @@
+diff --git a/configure.in b/configure.in
+index eb71bdf..ba056df 100644
+--- a/configure.in
++++ b/configure.in
+@@ -1,9 +1,12 @@
+ AC_INIT([Music On Console],[2.6-alpha3],[mocmaint@daper.net],[moc],
+                            [http://moc.daper.net/])
++AC_CONFIG_MACRO_DIRS([m4])
+ AC_CONFIG_SRCDIR([main.c])
+ AC_CONFIG_HEADERS([config.h])
+ 
+ AM_INIT_AUTOMAKE([dist-xz no-dist-gzip])
++AM_GNU_GETTEXT_VERSION([0.20])
++AM_GNU_GETTEXT([external])
+ 
+ AC_PREREQ([2.64])
+ 

pkgs/by-name/mo/moc/package.nix

@@ -6,6 +6,7 @@
   pkg-config,
   autoreconfHook,
   autoconf-archive,
+  gettext,
   ncurses,
   db,
   popt,
@@ -79,6 +80,7 @@ stdenv.mkDerivation {
     })
 
     ./use-ax-check-compile-flag.patch
+    ./fix_gettext_0_25.patch
   ]
   ++ lib.optional pulseSupport ./pulseaudio.patch;
 
@@ -90,6 +92,7 @@ stdenv.mkDerivation {
     pkg-config
     autoreconfHook
     autoconf-archive
+    gettext
   ];
 
   buildInputs = [

pkgs/by-name/ne/nearcore/package.nix

@@ -54,6 +54,8 @@ rustPlatform.buildRustPackage rec {
   requiredSystemFeatures = [ "big-parallel" ];
 
   meta = with lib; {
+    # Marked broken 2025-11-28 because it has failed on Hydra for at least one year.
+    broken = true;
     description = "Reference client for NEAR Protocol";
     homepage = "https://github.com/near/nearcore";
     license = licenses.gpl3;

pkgs/by-name/ne/nelm/package.nix

@@ -9,16 +9,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "nelm";
-  version = "1.17.1";
+  version = "1.17.2";
 
   src = fetchFromGitHub {
     owner = "werf";
     repo = "nelm";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-pQfyAJGGCshGOVi4EYHUiAkZW9OlasHZUcWOVs/Qm78=";
+    hash = "sha256-dF/sgQ7ihOYrIGS1yw9qLtafKg4g5HrFkM9L4RMwuN4=";
   };
 
-  vendorHash = "sha256-M3MotC8R8Rf6n2s2zb/f/3fRzCmBizEfI/b2zTc2qSg=";
+  vendorHash = "sha256-6cv4ArX+KekO2s/4oSZ1NTEiHHVu+TDMJsYvusyc4+I=";
 
   subPackages = [ "cmd/nelm" ];
 

pkgs/by-name/no/nomad-pack/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "nomad-pack";
-  version = "0.4.0";
+  version = "0.4.1";
 
   src = fetchFromGitHub {
     owner = "hashicorp";
     repo = "nomad-pack";
     rev = "v${version}";
-    sha256 = "sha256-9lkRDRXY27KzVAClDfqtD95OMsMPgTqvDesr6qHsNkM=";
+    sha256 = "sha256-nKhiI7VizNTqB5r+Ayp7tDNd2eWtsFvnoB798W0cRi4=";
   };
 
-  vendorHash = "sha256-laCCm+WluxfsYtpTu5RvKy40UBZkkvLgVbWbdRjfAhU=";
+  vendorHash = "sha256-iVmJf2nxpj5oF00lFTzVSjMooFipo0IGqvVVGI1Mfwc=";
 
   # skip running go tests as they require network access
   doCheck = false;

pkgs/by-name/nu/nu_scripts/package.nix

@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation {
   pname = "nu_scripts";
-  version = "0-unstable-2025-11-11";
+  version = "0-unstable-2025-11-26";
 
   src = fetchFromGitHub {
     owner = "nushell";
     repo = "nu_scripts";
-    rev = "ff8092707054ad091d67bd408374a39977e33c1b";
-    hash = "sha256-oxnXzxQkNccCs36j+aMzg4QGHDcX7niJruqxCkeg0LM=";
+    rev = "248f65e7ba5661cc9f88b37e1a2f30f62f345657";
+    hash = "sha256-w8jCv6QCdxuSyHjp4z7wYMCYUrvw+otppqfWPL9jGkQ=";
   };
 
   installPhase = ''

pkgs/by-name/ol/olaris-server/package.nix

@@ -58,6 +58,8 @@ buildGoModule rec {
   '';
 
   meta = {
+    # Marked broken 2025-11-28 because it has failed on Hydra for at least one year.
+    broken = true;
     description = "Media manager and transcoding server";
     homepage = "https://gitlab.com/olaris/olaris-server";
     changelog = "https://gitlab.com/olaris/olaris-server/-/releases/v${version}";

pkgs/by-name/ov/oven-media-engine/package.nix

@@ -84,6 +84,8 @@ stdenv.mkDerivation rec {
   '';
 
   meta = with lib; {
+    # Marked broken 2025-11-28 because it has failed on Hydra for at least one year.
+    broken = true;
     description = "Open-source streaming video service with sub-second latency";
     mainProgram = "OvenMediaEngine";
     homepage = "https://ovenmediaengine.com";

pkgs/by-name/pe/peergos/package.nix

@@ -41,12 +41,12 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "peergos";
-  version = "1.16.0";
+  version = "1.17.0";
   src = fetchFromGitHub {
     owner = "Peergos";
     repo = "web-ui";
     rev = "v${version}";
-    hash = "sha256-v8Pw9AlxFDu4DqYeJlx+xF2PJe1xnQxHUVccXCn/jIs=";
+    hash = "sha256-9dBTa/qrrEb5eMIXK0kt7x8zTbwCeRDXpTS58EezS0A=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/pe/peering-manager/package.nix

@@ -7,21 +7,28 @@
   plugins ? ps: [ ],
 }:
 
-python3.pkgs.buildPythonApplication rec {
+let
+  python = python3.override {
+    packageOverrides = final: prev: {
+      django = prev.django_5_2;
+    };
+  };
+in
+python.pkgs.buildPythonApplication rec {
   pname = "peering-manager";
-  version = "1.9.7";
+  version = "1.10.1";
 
   src = fetchFromGitHub {
     owner = "peering-manager";
     repo = "peering-manager";
     tag = "v${version}";
-    sha256 = "sha256-lxelWtiMO6w8Tt7zK/NDdmc3PaKlGibKjSfhD+tGrCU=";
+    sha256 = "sha256-ByECaQ6NW1Su+k/j/bcKJqFf7bStdWZxOZn95GJEqBg=";
   };
 
   format = "other";
 
   propagatedBuildInputs =
-    with python3.pkgs;
+    with python.pkgs;
     [
       django
       django-debug-toolbar
@@ -46,9 +53,10 @@ python3.pkgs.buildPythonApplication rec {
       pyyaml
       requests
       social-auth-app-django
+      pytz
       tzdata
     ]
-    ++ plugins python3.pkgs;
+    ++ plugins python.pkgs;
 
   buildPhase = ''
     runHook preBuild
@@ -70,8 +78,8 @@ python3.pkgs.buildPythonApplication rec {
 
   passthru = {
     # PYTHONPATH of all dependencies used by the package
-    python = python3;
-    pythonPath = python3.pkgs.makePythonPath propagatedBuildInputs;
+    inherit python;
+    pythonPath = python.pkgs.makePythonPath propagatedBuildInputs;
 
     tests = {
       inherit (nixosTests) peering-manager;

pkgs/by-name/pi/pipe-rename/package.nix

@@ -7,14 +7,14 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "pipe-rename";
-  version = "1.6.5";
+  version = "1.6.6";
 
   src = fetchCrate {
     inherit pname version;
-    hash = "sha256-av/ig76O7t3dB4Irfi3yqyL30nkJJCzs5EayWRbpOI0=";
+    hash = "sha256-eZldAhqmoIkNZaI6r31hI43KCPDDeWk3fKpY3/BaUQE=";
   };
 
-  cargoHash = "sha256-0+m11mPR/s45MeY90WM3vmnGk6Xb0j2DJnZrEZ/EX1g=";
+  cargoHash = "sha256-9xOL8qtUha4dL7V+GC8TnPGjBprKADqzIwOqqMyPB5A=";
 
   nativeCheckInputs = [ python3 ];
 

pkgs/by-name/pi/pixinsight/package.nix

@@ -22,6 +22,11 @@
   libdrm,
   cups,
   avahi-compat,
+  libidn2,
+  libdeflate,
+  brotli,
+  libxkbcommon,
+  libxcb,
   xorg,
   wayland,
   libudev0-shim,
@@ -30,141 +35,10 @@
   gdk-pixbuf,
   gtk3,
   pango,
-  qt6Packages,
+  buildFHSEnv,
 }:
 
-stdenv.mkDerivation (finalAttrs: {
-  pname = "pixinsight";
-  version = "1.8.9-3-20240625";
-
-  src = requireFile rec {
-    name = "PI-linux-x64-${finalAttrs.version}-c.tar.xz";
-    url = "https://pixinsight.com/";
-    hash = "sha256-jqp5pt+fC7QvENCwRjr7ENQiCZpwNhC5q76YdzRBJis=";
-    message = ''
-      PixInsight is available from ${url} and requires a commercial (or trial) license.
-      After a license has been obtained, PixInsight can be downloaded from the software distribution
-      (choose Linux 64bit).
-      The PixInsight tarball must be added to the nix-store, i.e. via
-        nix-prefetch-url --type sha256 file:///path/to/${name}
-    '';
-  };
-  sourceRoot = ".";
-
-  nativeBuildInputs = [
-    unixtools.script
-    fakeroot
-    qt6Packages.wrapQtAppsHook
-    autoPatchelfHook
-    mailcap
-    libudev0-shim
-    bubblewrap
-  ];
-
-  buildInputs = [
-    (lib.getLib stdenv.cc.cc)
-    stdenv.cc
-    libGL
-    libpulseaudio
-    alsa-lib
-    nss
-    gd
-    gst_all_1.gstreamer
-    gst_all_1.gst-plugins-base
-    nspr
-    expat
-    fontconfig
-    dbus
-    glib
-    zlib
-    openssl
-    libdrm
-    wayland
-    cups
-    avahi-compat
-    libjpeg8
-    gdk-pixbuf
-    gtk3
-    pango
-    # Qt stuff
-    qt6Packages.qt3d
-    qt6Packages.mlt
-    qt6Packages.qtbase
-    #qtgamepad
-    qt6Packages.qtserialport
-    qt6Packages.qtserialbus
-    qt6Packages.qtvirtualkeyboard
-    qt6Packages.qtmultimedia
-    qt6Packages.qtlocation
-    qt6Packages.qtwebengine
-    qt6Packages.qtquick3d
-    qt6Packages.qtwayland
-    qt6Packages.qtwebview
-    qt6Packages.qtscxml
-  ]
-  ++ (with xorg; [
-    libX11
-    libXdamage
-    xrandr
-    libXtst
-    libXcomposite
-    libXext
-    libXfixes
-    libXrandr
-    libxkbfile
-  ]);
-
-  postPatch = ''
-    patchelf ./installer \
-      --set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)" \
-      --set-rpath ${lib.getLib stdenv.cc.cc}/lib
-  '';
-
-  dontConfigure = true;
-  dontBuild = true;
-
-  installPhase = ''
-    mkdir -p $out/bin $out/opt/PixInsight $out/share/{applications,mime/packages,icons/hicolor}
-
-    bwrap --bind /build /build --bind $out/opt /opt --bind /nix /nix --dev /dev fakeroot script -ec "./installer \
-      --yes \
-      --install-desktop-dir=$out/share/applications \
-      --install-mime-dir=$out/share/mime \
-      --install-icons-dir=$out/share/icons/hicolor \
-      --no-bin-launcher \
-      --no-remove"
-
-    rm -rf $out/opt/PixInsight-old-0
-    ln -s $out/opt/PixInsight/bin/PixInsight $out/bin/.
-    ln -s $out/opt/PixInsight/bin/lib $out/lib
-
-    # Remove signatures of plugins, as they are only working if actually installed
-    # under /opt. In the Nix setup, they are causing trouble.
-    find $out/opt/PixInsight/ -name "*.xsgn" -exec rm {} \;
-  '';
-
-  # Some very exotic Qt libraries are not available in nixpkgs
-  autoPatchelfIgnoreMissingDeps = true;
-
-  # This mimics what is happening in PixInsight.sh and adds on top the libudev0-shim, which
-  # without PixInsight crashes at startup.
-  qtWrapperArgs = [
-    "--prefix LD_LIBRARY_PATH : ${libudev0-shim}/lib"
-    "--set LC_ALL en_US.utf8"
-    "--set AVAHI_COMPAT_NOWARN 1"
-    "--set QT_PLUGIN_PATH $out/opt/PixInsight/bin/lib/qt-plugins"
-    "--set QT_QPA_PLATFORM_PLUGIN_PATH $out/opt/PixInsight/bin/lib/qt-plugins/platforms"
-    "--set QT_AUTO_SCREEN_SCALE_FACTOR 0"
-    "--set QT_ENABLE_HIGHDPI_SCALING 0"
-    "--set QT_SCALE_FACTOR 1"
-    "--set QT_LOGGING_RULES '*=false'"
-    "--set QTWEBENGINEPROCESS_PATH $out/opt/PixInsight/bin/libexec/QtWebEngineProcess"
-  ];
-  dontWrapQtApps = true;
-  postFixup = ''
-    wrapProgram $out/opt/PixInsight/bin/PixInsight ${toString finalAttrs.qtWrapperArgs}
-  '';
-
+let
   meta = with lib; {
     description = "Scientific image processing program for astrophotography";
     homepage = "https://pixinsight.com/";
@@ -175,4 +49,128 @@ stdenv.mkDerivation (finalAttrs: {
     hydraPlatforms = [ ];
     mainProgram = "PixInsight";
   };
-})
+
+  pname = "pixinsight";
+  version = "1.9.3-20250402";
+
+  installPkg = stdenv.mkDerivation (finalAttrs: {
+    inherit meta pname version;
+
+    src = requireFile rec {
+      name = "PI-linux-x64-${finalAttrs.version}-c.tar.xz";
+      url = "https://pixinsight.com/";
+      hash = "sha256-MOAWH64A13vVLeNiBC9nO78P0ELmXXHR5ilh5uUhWhs=";
+      message = ''
+        PixInsight is available from ${url} and requires a commercial (or trial) license.
+        After a license has been obtained, PixInsight can be downloaded from the software distribution
+        (choose Linux 64bit).
+        The PixInsight tarball must be added to the nix-store, i.e. via
+          nix-prefetch-url --type sha256 file:///path/to/${name}
+      '';
+    };
+    sourceRoot = ".";
+
+    nativeBuildInputs = [
+      unixtools.script
+      fakeroot
+      mailcap
+      libudev0-shim
+      bubblewrap
+    ];
+
+    postPatch = ''
+      patchelf ./installer \
+        --set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)" \
+        --set-rpath ${lib.getLib stdenv.cc.cc}/lib
+    '';
+
+    dontConfigure = true;
+    dontBuild = true;
+
+    installPhase = ''
+      runHook preInstall
+
+      mkdir -p $out/bin $out/opt/PixInsight $out/share/{applications,mime/packages,icons/hicolor}
+
+      bwrap --bind /build /build --bind $out/opt /opt --bind /nix /nix --dev /dev fakeroot script -ec "./installer \
+        --yes \
+        --install-desktop-dir=$out/share/applications \
+        --install-mime-dir=$out/share/mime \
+        --install-icons-dir=$out/share/icons/hicolor \
+        --no-bin-launcher \
+        --no-remove"
+
+      rm -rf $out/opt/PixInsight-old-0
+      ln -s $out/opt/PixInsight/bin/PixInsight $out/bin/.
+      ln -s $out/opt/PixInsight/bin/lib $out/lib
+
+      runHook postInstall
+    '';
+
+  });
+
+  runPkg = buildFHSEnv {
+    inherit meta pname version;
+
+    targetPkgs =
+      pkgs:
+      with pkgs;
+      [
+        # PI itself
+        installPkg
+        # runtime deps
+        mailcap
+        libudev0-shim
+        (lib.getLib stdenv.cc.cc)
+        stdenv.cc
+        libGL
+        libpulseaudio
+        alsa-lib
+        nss
+        gd
+        gst_all_1.gstreamer
+        gst_all_1.gst-plugins-base
+        nspr
+        expat
+        fontconfig
+        dbus
+        glib
+        zlib
+        openssl
+        libdrm
+        wayland
+        cups
+        avahi-compat
+        libjpeg8
+        gdk-pixbuf
+        gtk3
+        pango
+        libidn2
+        libdeflate
+        brotli
+        libxkbcommon
+        libxcb
+      ]
+      ++ (with pkgs.xorg; [
+        libX11
+        libXdamage
+        xrandr
+        libXtst
+        libXcomposite
+        libXext
+        libXfixes
+        libXrandr
+        libxkbfile
+      ]);
+
+    profile = ''
+      export QT_QPA_PLATFORM_PLUGIN_PATH=/opt/PixInsight/bin/lib/qt-plugins/platforms
+      export QT_PLUGIN_PATH=/opt/PixInsight/bin/lib/qt-plugins
+      export LD_LIBRARY_PATH=${libudev0-shim}/lib
+    '';
+
+    runScript = "${installPkg}/bin/PixInsight";
+  };
+
+in
+runPkg

pkgs/by-name/pr/progress-tracker/package.nix

@@ -14,13 +14,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "progress-tracker";
-  version = "1.7.1";
+  version = "1.7.2";
 
   src = fetchFromGitHub {
     owner = "smolBlackCat";
     repo = "progress-tracker";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-ejXN10OyzvHi7n0ph7pnAxgonqexv1d3Yxi3s7ej2i4=";
+    hash = "sha256-RIguUto0ADAT9OJ+gBf/JBpAiDn1DX9NBuGmDJYJn+Q=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/pr/protoc-gen-dart/package.nix

@@ -11,13 +11,13 @@
 
 buildDartApplication rec {
   pname = "protoc-gen-dart";
-  version = "24.0.0";
+  version = "25.0.0";
 
   src = fetchFromGitHub {
     owner = "google";
     repo = "protobuf.dart";
     tag = "protoc_plugin-v${version}";
-    hash = "sha256-DEuvwBJhSo4o5ydnutxv2PCIRgS+2dE7u3RleidhAUM=";
+    hash = "sha256-/JkXGaropyDt7mofYP5sZwTKy9syAA8PgzbNOhLtApY=";
   };
 
   pubspecLock = lib.importJSON ./pubspec.lock.json;

pkgs/by-name/pr/protoc-gen-dart/pubspec.lock.json

@@ -4,21 +4,21 @@
       "dependency": "transitive",
       "description": {
         "name": "_fe_analyzer_shared",
-        "sha256": "c209688d9f5a5f26b2fb47a188131a6fb9e876ae9e47af3737c0b4f58a93470d",
+        "sha256": "5b7468c326d2f8a4f630056404ca0d291ade42918f4a3c6233618e724f39da8e",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "91.0.0"
+      "version": "92.0.0"
     },
     "analyzer": {
       "dependency": "transitive",
       "description": {
         "name": "analyzer",
-        "sha256": "f51c8499b35f9b26820cfe914828a6a98a94efd5cc78b37bb7d03debae3a1d08",
+        "sha256": "70e4b1ef8003c64793a9e268a551a82869a8a96f39deb73dea28084b0e8bf75e",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "8.4.1"
+      "version": "9.0.0"
     },
     "args": {
       "dependency": "transitive",
@@ -114,11 +114,11 @@
       "dependency": "transitive",
       "description": {
         "name": "dart_style",
-        "sha256": "c87dfe3d56f183ffe9106a18aebc6db431fc7c98c31a54b952a77f3d54a85697",
+        "sha256": "a9c30492da18ff84efe2422ba2d319a89942d93e58eb0b73d32abe822ef54b7b",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "3.1.2"
+      "version": "3.1.3"
     },
     "file": {
       "dependency": "transitive",
@@ -224,11 +224,11 @@
       "dependency": "transitive",
       "description": {
         "name": "matcher",
-        "sha256": "dc58c723c3c24bf8d3e2d3ad3f2f9d7bd9cf43ec6feaa64181775e60190153f2",
+        "sha256": "12956d0ad8390bbcc63ca2e1469c0619946ccb52809807067a7020d57e647aa6",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.12.17"
+      "version": "0.12.18"
     },
     "meta": {
       "dependency": "transitive",
@@ -414,31 +414,31 @@
       "dependency": "transitive",
       "description": {
         "name": "test",
-        "sha256": "75906bf273541b676716d1ca7627a17e4c4070a3a16272b7a3dc7da3b9f3f6b7",
+        "sha256": "77cc98ea27006c84e71a7356cf3daf9ddbde2d91d84f77dbfe64cf0e4d9611ae",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "1.26.3"
+      "version": "1.28.0"
     },
     "test_api": {
       "dependency": "transitive",
       "description": {
         "name": "test_api",
-        "sha256": "ab2726c1a94d3176a45960b6234466ec367179b87dd74f1611adb1f3b5fb9d55",
+        "sha256": "19a78f63e83d3a61f00826d09bc2f60e191bf3504183c001262be6ac75589fb8",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.7.7"
+      "version": "0.7.8"
     },
     "test_core": {
       "dependency": "transitive",
       "description": {
         "name": "test_core",
-        "sha256": "0cc24b5ff94b38d2ae73e1eb43cc302b77964fbf67abad1e296025b78deb53d0",
+        "sha256": "f1072617a6657e5fc09662e721307f7fb009b4ed89b19f47175d11d5254a62d4",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.6.12"
+      "version": "0.6.14"
     },
     "typed_data": {
       "dependency": "transitive",

pkgs/by-name/pr/protoc-gen-twirp/package.nix

@@ -26,6 +26,8 @@ buildGoModule rec {
   ];
 
   meta = with lib; {
+    # Marked broken 2025-11-28 because it has failed on Hydra for at least one year.
+    broken = true;
     description = "Simple RPC framework with protobuf service definitions";
     mainProgram = "protoc-gen-twirp";
     homepage = "https://github.com/twitchtv/twirp";

pkgs/by-name/ps/pscale/package.nix

@@ -10,16 +10,16 @@
 
 buildGoModule rec {
   pname = "pscale";
-  version = "0.262.0";
+  version = "0.264.0";
 
   src = fetchFromGitHub {
     owner = "planetscale";
     repo = "cli";
     rev = "v${version}";
-    sha256 = "sha256-+wII4UO+JRY2s48gpztwU3R/jimfvkiW+xUeJJRIBqE=";
+    sha256 = "sha256-qpnBC8bjF59RMXXpfTWfihiwXnGIxsx2aiQZarU9VxE=";
   };
 
-  vendorHash = "sha256-OaPPG2zF48jbZ+WsNmOw0mhucx7cVFbrPFfFolN6s1w=";
+  vendorHash = "sha256-L4hFH5w8e7c+4LK3LFE3CeMDbuljhew7XhYJ4NkQCs0=";
 
   ldflags = [
     "-s"

pkgs/by-name/qu/quickwit/package.nix

@@ -140,6 +140,8 @@ rustPlatform.buildRustPackage rec {
   ];
 
   meta = with lib; {
+    # Marked broken 2025-11-28 because it has failed on Hydra for at least one year.
+    broken = true;
     description = "Sub-second search & analytics engine on cloud storage";
     homepage = "https://quickwit.io/";
     license = licenses.agpl3Only;

pkgs/by-name/rk/rkik/package.nix

@@ -7,16 +7,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rkik";
-  version = "1.2.0";
+  version = "1.2.1";
 
   src = fetchFromGitHub {
     owner = "aguacero7";
     repo = "rkik";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-bT1WTs/gei8CGundLynVgekNFlyY8p/mK73Utrw8N9I=";
+    hash = "sha256-LOUEP9wMbc6i3qw9Vv798SUuc3/JwFbRiRns5TZT6b0=";
   };
 
-  cargoHash = "sha256-iu9vADHhems0pzQ0Hs+Zp0dZ4K185M5L4fftBaAZdvE=";
+  cargoHash = "sha256-mfnn+BQ2/k1e2YSZ2eebzbF6Ptz05GSrx83Aa+iaoj4=";
 
   passthru.updateScript = nix-update-script { };
 

pkgs/by-name/ro/roadrunner/package.nix

@@ -8,13 +8,13 @@
 
 buildGoModule rec {
   pname = "roadrunner";
-  version = "2025.1.4";
+  version = "2025.1.5";
 
   src = fetchFromGitHub {
     repo = "roadrunner";
     owner = "roadrunner-server";
     tag = "v${version}";
-    hash = "sha256-OlwMlGe2EEXTWbp5fMhZkUX00l15vvtJ6fc3tSkmlVc=";
+    hash = "sha256-/rCbDZ2Re+tLvpUKEFunCATBX5/tXlKjimWSWZm4ZJ4=";
   };
 
   nativeBuildInputs = [
@@ -49,7 +49,7 @@ buildGoModule rec {
 
   __darwinAllowLocalNetworking = true;
 
-  vendorHash = "sha256-7C5B8ChIxaqCJhywITV7v3o/49fFp8eaVeZ6ZJNxi20=";
+  vendorHash = "sha256-HPHkABSdfi9QIgLxW5GBalEGnM1sAd9/aESKWxkI8Yg=";
 
   meta = {
     changelog = "https://github.com/roadrunner-server/roadrunner/blob/v${version}/CHANGELOG.md";

pkgs/by-name/s7/s7/package.nix

@@ -26,14 +26,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "s7";
-  version = "11.7-unstable-2025-11-25";
+  version = "11.7-unstable-2025-12-02";
 
   src = fetchFromGitLab {
     domain = "cm-gitlab.stanford.edu";
     owner = "bil";
     repo = "s7";
-    rev = "eb523a95c050ccabb912dc1e5fad1ba32ea4c9d8";
-    hash = "sha256-Gkn+kUiwq3yn7qJwFAiJKl/u/4gGTMuDo7tQEXSY+Lo=";
+    rev = "d039a7b54db491a701c0a737269ed944eb0e90d2";
+    hash = "sha256-gV1hnZe4E8pTxn3w7c/m1aHF3Cwuod0wJED4MPvFxkI=";
   };
 
   buildInputs =

pkgs/by-name/sa/saucectl/package.nix

@@ -5,7 +5,7 @@
 }:
 let
   pname = "saucectl";
-  version = "0.197.2";
+  version = "0.197.3";
 in
 buildGoModule {
   inherit pname version;
@@ -14,7 +14,7 @@ buildGoModule {
     owner = "saucelabs";
     repo = "saucectl";
     tag = "v${version}";
-    hash = "sha256-aAEqYfCBsXMxjkJHUrKBh2y3ma6r2rVaQfY2PqsLVDA=";
+    hash = "sha256-VVsQfDv8JNXpagXA6JhO47A14AS5pesZqDmitv0WDzE=";
   };
 
   ldflags = [

pkgs/by-name/sc/screen-pipe/package.nix

@@ -61,6 +61,8 @@ rustPlatform.buildRustPackage rec {
   doCheck = false; # Tests fail to build
 
   meta = with lib; {
+    # Marked broken 2025-11-28 because it has failed on Hydra for at least one year.
+    broken = true;
     description = "Personalized AI powered by what you've seen, said, or heard";
     homepage = "https://github.com/louis030195/screen-pipe";
     license = licenses.mit;

pkgs/by-name/sn/snarkos/package.nix

@@ -53,6 +53,8 @@ rustPlatform.buildRustPackage rec {
   # ];
 
   meta = with lib; {
+    # Marked broken 2025-11-28 because it has failed on Hydra for at least one year.
+    broken = true;
     description = "Decentralized Operating System for Zero-Knowledge Applications";
     homepage = "https://snarkos.org";
     license = licenses.asl20;

pkgs/by-name/so/sommelier/package.nix

@@ -57,6 +57,8 @@ stdenv.mkDerivation {
   passthru.updateScript = ./update.py;
 
   meta = with lib; {
+    # Marked broken 2025-11-28 because it has failed on Hydra for at least one year.
+    broken = true;
     homepage = "https://chromium.googlesource.com/chromiumos/platform2/+/refs/heads/main/vm_tools/sommelier/";
     description = "Nested Wayland compositor with support for X11 forwarding";
     maintainers = with maintainers; [ qyliss ];

pkgs/by-name/so/sonata/package.nix

@@ -23,14 +23,14 @@ let
 in
 buildPythonApplication rec {
   pname = "sonata";
-  version = "1.7.1";
+  version = "1.7.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "multani";
     repo = "sonata";
     tag = "v${version}";
-    hash = "sha256-80F2dVaRawnI0E+GzaxRUudaLWWHGUjICCEbXHVGy+E=";
+    hash = "sha256-B/2wLNbeVJJA/rMc6ZcLqH4SqyW5NzomrVPctIWGaIY=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/st/storj-uplink/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "storj-uplink";
-  version = "1.142.4";
+  version = "1.142.7";
 
   src = fetchFromGitHub {
     owner = "storj";
     repo = "storj";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-TMHIbzcUNwzKIz9wN27sbf/XFvL+VYF9dLEpRc0cZYA=";
+    hash = "sha256-Y0pnketYzKC7xzndIceFk7dwyUwSjMzvvJF1EqSSD7s=";
   };
 
   subPackages = [ "cmd/uplink" ];

pkgs/by-name/st/stretchly/package.nix

@@ -10,11 +10,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "stretchly";
-  version = "1.18.1";
+  version = "1.19.0";
 
   src = fetchurl {
     url = "https://github.com/hovancik/stretchly/releases/download/v${finalAttrs.version}/stretchly-${finalAttrs.version}.tar.xz";
-    hash = "sha256-eHhOxocAQAiuvfJsD4ifFw09B7bry4DWIOA9S6pP+jw=";
+    hash = "sha256-llcKbzlqGMxwrqH1qvQo4fHxO0C1itVZ5wlkwL1IOOU=";
   };
 
   icon = fetchurl {

pkgs/by-name/su/summon/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule rec {
   pname = "summon";
-  version = "0.10.8";
+  version = "0.10.9";
 
   src = fetchFromGitHub {
     owner = "cyberark";
     repo = "summon";
     rev = "v${version}";
-    hash = "sha256-QzG8if3AkBei9uYbri7JS58iKmshyibRO12ye9RX8kk=";
+    hash = "sha256-E9mrniOOP8ZGPZfwV0BEY3sD25XUvaAVTd1lPs6/jO8=";
   };
 
   vendorHash = "sha256-ZT3lVL8qoonmeWsmCzjMbOsAf2NvpheC6ThDzn4izkU=";

pkgs/by-name/sy/sydbox/package.nix

@@ -12,7 +12,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "sydbox";
-  version = "3.45.0";
+  version = "3.45.1";
 
   outputs = [
     "out"
@@ -24,10 +24,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "Sydbox";
     repo = "sydbox";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ubEhCUhat8Bkv54RzRmd9QuK90WpA1/b50CrYzxATUs=";
+    hash = "sha256-CqtcHwWxEJqFcM0F2959gBEJG1mRMR80mRGj2ENFjFM=";
   };
 
-  cargoHash = "sha256-ajaXFrqkgQ9MR11LL1waGmUQrm+h2UeIjOJoZB4+pUE=";
+  cargoHash = "sha256-Xy1cg6i8ulSAyEw6YNz2kBcObYN0PgnaHKwRzTLNrgU=";
 
   nativeBuildInputs = [
     mandoc

pkgs/by-name/ta/tageditor/package.nix

@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation rec {
   pname = "tageditor";
-  version = "3.9.8";
+  version = "3.9.9";
 
   src = fetchFromGitHub {
     owner = "martchus";
     repo = "tageditor";
     tag = "v${version}";
-    hash = "sha256-D4O02QQNoyY61w/9OB4lY3QkiwJ6q1KdX9GNKgW5ZY0=";
+    hash = "sha256-xBb2VXDXScSUoMU2qTD2Q18WvjZZadWa7wtOXnQbLTU=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ui/uiua/unstable.nix

@@ -1,7 +1,7 @@
 rec {
-  version = "0.18.0-dev.2";
+  version = "0.18.0-dev.3";
   tag = version;
-  hash = "sha256-coa+jE83EAIJDHrSdLMG/zDXxRYx6/uivTbNNufz17Q=";
-  cargoHash = "sha256-i8YFLkV2T9Cx/shRTbeYrNlccCzCO8w2zoa5ZuEuLSM=";
+  hash = "sha256-0xQIbKLvdoFfh0Kxgopb4z0K2HCueEGm0Mq1erpcITc=";
+  cargoHash = "sha256-34FaXwBUtbF4V9hJjud3gQKpqOZm3FG2fEF/QLYUqXY=";
   updateScript = ./update-unstable.sh;
 }

pkgs/by-name/va/vatprism/package.nix

@@ -31,17 +31,27 @@ let
     libXtst
     fontconfig
   ];
+  jdkWithFX = jdk.override { enableJavaFX = true; };
 in
 maven.buildMavenPackage rec {
   pname = "vatprism";
-  version = "0.3.5";
+  version = "0.3.6";
   src = fetchFromGitHub {
     owner = "marvk";
     repo = "vatprism";
     tag = "v${version}";
-    hash = "sha256-ofEwHUCm79roHe2bawmKFw2QHhIonnlkFG5nhE6uN+g=";
+    hash = "sha256-A9HvO+tUrb/h9YZAKfTlgr+qxX7ucN/VJt4lRL94Ygg=";
   };
 
+  postPatch =
+    # mvvmFX 1.9.0-SNAPSHOT is no longer available in the repository
+    ''
+      substituteInPlace pom.xml \
+        --replace-fail \
+          '<mvvmfx.version>1.9.0-SNAPSHOT</mvvmfx.version>' \
+          '<mvvmfx.version>1.8.0</mvvmfx.version>'
+    '';
+
   nativeBuildInputs = [
     makeWrapper
     copyDesktopItems
@@ -59,11 +69,11 @@ maven.buildMavenPackage rec {
     })
   ];
 
-  mvnHash =
+  mvnHash = # OpenJFX artifacts are platform dependent
     if (stdenv.hostPlatform.isLinux && stdenv.hostPlatform.isAarch64) then
-      "sha256-x0nFt2C7dZqMdllI1+Io9SPBY2J/dVgBTVb9T24vFFI="
+      "sha256-gerjxTj8UQEVthMO3unWPEG7SPseMt5JPPureC/wUsw="
     else
-      "sha256-9uyNCUqnMgpiwm2kz544pWNB/SkRpASm2Dln0e4yZos=";
+      "sha256-QH14GJ8JUYuu5XWnSKPYsamFeP0o+5Sobl+a0FUOIzs=";
 
   installPhase = ''
     runHook preInstall
@@ -78,14 +88,21 @@ maven.buildMavenPackage rec {
 
     # create a wrapper that will automatically set the classpath
     # this should be the paths from the dependency derivation
-    makeWrapper ${jdk}/bin/java $out/bin/vatprism \
+    makeWrapper ${lib.getExe jdkWithFX} $out/bin/vatprism \
+        --add-flags --add-exports=javafx.controls/com.sun.javafx.scene.control=ALL-UNNAMED \
+        --add-flags --add-exports=javafx.graphics/com.sun.javafx.css=ALL-UNNAMED \
+        --add-flags --add-exports=javafx.graphics/com.sun.javafx.scene.traversal=ALL-UNNAMED \
+        --add-flags --add-exports=javafx.graphics/com.sun.javafx.scene=ALL-UNNAMED \
+        --add-flags --add-exports=javafx.graphics/com.sun.javafx.tk=ALL-UNNAMED \
+        --add-flags --add-opens=javafx.controls/javafx.scene.control.skin=ALL-UNNAMED \
         --add-flags "-jar $out/vatsim-map-${version}-fat.jar" \
-        --set JAVA_HOME ${jdk.home} \
+        --set JAVA_HOME ${jdkWithFX.home} \
         --suffix LD_LIBRARY_PATH : ${libPath}
     runHook postInstall
   '';
 
   meta = {
+    changelog = "https://github.com/marvk/vatprism/raw/${src.rev}/CHANGELOG.md";
     description = "VATSIM map and data explorer";
     longDescription = ''
       VATprism is a VATSIM Map and VATSIM Data Explorer, VATSIM being the

pkgs/by-name/vs/vsce/package.nix

@@ -13,16 +13,16 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "vsce";
-  version = "3.7.0";
+  version = "3.7.1";
 
   src = fetchFromGitHub {
     owner = "microsoft";
     repo = "vscode-vsce";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-dNSO+PoUNQUtvS6NZJ/InOYqI4vav+WNg6kCA+CaWL8=";
+    hash = "sha256-7Urn3MlcvJragFvbPYOurUCIOyqYQsEqg5IKbFwcHBo=";
   };
 
-  npmDepsHash = "sha256-rqwb1bz/OFHzL8GgqMZtuqYkeST5qlFybDRSFOx7LtU=";
+  npmDepsHash = "sha256-lJDCeOqSYZCI9o9RsFSviQKkxgcv8XGps3ecy55r7E4=";
 
   postPatch = ''
     substituteInPlace package.json --replace-fail '"version": "0.0.0"' '"version": "${finalAttrs.version}"'

pkgs/by-name/wa/watchdogd/package.nix

@@ -11,13 +11,13 @@
 }:
 stdenv.mkDerivation rec {
   pname = "watchdogd";
-  version = "4.0";
+  version = "4.1";
 
   src = fetchFromGitHub {
     owner = "troglobit";
     repo = "watchdogd";
     rev = version;
-    hash = "sha256-JNJj0CJGJXuIRpob2RXYqDRrU4Cn20PRxOjQ6TFsVYQ=";
+    hash = "sha256-Q3j16hxDwusZdmIjHm/CVi7VrwRziPGERAvJ3F/Bvdg=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/wi/winbox4/package.nix

@@ -5,7 +5,7 @@
 }:
 let
   pname = "winbox";
-  version = "4.0beta41";
+  version = "4.0beta42";
 
   metaCommon = {
     description = "Graphical configuration utility for RouterOS-based devices";
@@ -23,13 +23,13 @@ let
   x86_64-zip = callPackage ./build-from-zip.nix {
     inherit pname version metaCommon;
 
-    hash = "sha256-oKDLNHQLMdZb18pPTpoSc5gwljHkSMmyITZ0ATBdR08=";
+    hash = "sha256-c+aewjTl+W/ahTdp9CIYT+MD4Nf+L58QONFCRifaOHI=";
   };
 
   x86_64-dmg = callPackage ./build-from-dmg.nix {
     inherit pname version metaCommon;
 
-    hash = "sha256-9jG+xlmRy011DA4BwOGRMpzU0qy0qbjiN3nR3xMJpbo=";
+    hash = "sha256-3/sdKhMw2vx3IQE5IucllXzJyBs1snxXjAXNqumPQk0=";
   };
 in
 (if stdenvNoCC.hostPlatform.isDarwin then x86_64-dmg else x86_64-zip).overrideAttrs (oldAttrs: {

pkgs/by-name/xd/xdp-tools/package.nix

@@ -17,13 +17,13 @@
 }:
 stdenv.mkDerivation rec {
   pname = "xdp-tools";
-  version = "1.5.7";
+  version = "1.5.8";
 
   src = fetchFromGitHub {
     owner = "xdp-project";
     repo = "xdp-tools";
     rev = "v${version}";
-    hash = "sha256-dJMGBFFfEpKO+5ku5Xsc95hGSmTenHGRjBTL7s1cv0c=";
+    hash = "sha256-fW0If34PTGE36KoZYPeKOMuNjaFz1JmSCaWIaSjB0gk=";
   };
 
   outputs = [

pkgs/by-name/yo/your_spotify/package.nix

@@ -14,18 +14,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "your_spotify_server";
-  version = "1.14.0";
+  version = "1.15.0";
 
   src = fetchFromGitHub {
     owner = "Yooooomi";
     repo = "your_spotify";
     tag = finalAttrs.version;
-    hash = "sha256-yz+IVrvnNt67TQCNNqpS+jSAEevsi+0cVGBTZNMcZbk=";
+    hash = "sha256-i/R5tvt+9DD/ZUPLBq6EOJjuyHSv5zljTWuLwo+JBYA=";
   };
 
   offlineCache = fetchYarnDeps {
     yarnLock = finalAttrs.src + "/yarn.lock";
-    hash = "sha256-N70gsVnlzRQMRK16aeqHQeBAg9A2Fvh9CuivyBNPPDA=";
+    hash = "sha256-2Z5bOiPenlDTzOAMrIt73k4pi0v3SAN7HXXJDoOo8Qc=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/yt/ytui-music/fix-implicit-autoref-errors-in-ui-mod-rs-for-rust-1-80-plus.patch

@@ -0,0 +1,26 @@
+From 474521f42376b8a374382994313484aa4bba9c85 Mon Sep 17 00:00:00 2001
+From: LATex <leandro.recebe@gmail.com>
+Date: Sat, 11 Oct 2025 20:34:31 -0300
+Subject: [PATCH] Fix implicit autoref errors in ui/mod.rs for Rust 1.80+
+
+---
+ front-end/src/ui/mod.rs | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/front-end/src/ui/mod.rs b/front-end/src/ui/mod.rs
+index 81a56e001a7b892d24eeb0404d2bc069fe9c07a3..296fd4711db0d9380b74e07ae933df161b437b36 100644
+--- a/front-end/src/ui/mod.rs
++++ b/front-end/src/ui/mod.rs
+@@ -215,9 +215,9 @@ pub fn draw_ui(state: &mut Arc<Mutex<State>>, cvar: &mut Arc<Condvar>) {
+                 let state_ptr = &mut state_unlocked as *mut std::sync::MutexGuard<'_, State<'_>>;
+                 let (mut music_state, mut playlist_state, mut artist_state);
+                 unsafe {
+-                    music_state = &mut (*state_ptr).musicbar.1;
+-                    playlist_state = &mut (*state_ptr).playlistbar.1;
+-                    artist_state = &mut (*state_ptr).artistbar.1;
++                    music_state = &mut (&mut (*state_ptr)).musicbar.1;
++                    playlist_state = &mut (&mut (*state_ptr)).playlistbar.1;
++                    artist_state = &mut (&mut (*state_ptr)).artistbar.1;
+                 }
+ 
+                 let music_table = MiddleLayout::get_music_container(&mut state_unlocked);

pkgs/by-name/yt/ytui-music/package.nix

@@ -8,26 +8,34 @@
   mpv,
   yt-dlp,
   makeBinaryWrapper,
+  _experimental-update-script-combinators,
+  unstableGitUpdater,
+  nix-update-script,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage {
   pname = "ytui-music";
-  version = "2.0.0-rc1";
+  version = "2.0.0-rc1-unstable-2025-03-03";
 
   src = fetchFromGitHub {
     owner = "sudipghimire533";
     repo = "ytui-music";
-    rev = "v${version}";
-    hash = "sha256-f/23PVk4bpUCvcQ25iNI/UVXqiPBzPKWq6OohVF41p8=";
+    rev = "b90293d226f6fc27835372f145e55d385112768b";
+    hash = "sha256-pRD8ySpkJz8o7DURXG8DmBsbZV9MqVlMN63gAjYl4vc=";
   };
 
-  cargoHash = "sha256-I+ciLSMvV9EqlfA1+/IC1w7pWpj9HHF/DTfAbKw2CVM=";
+  cargoHash = "sha256-zwlg4BDHCM+KALjP929upaDpgy1mXEz5PYaVw+BhRp0=";
 
   checkFlags = [
     "--skip=tests::display_config_path"
     "--skip=tests::inspect_server_list"
   ];
 
+  patches = [
+    # This patch comes from https://github.com/sudipghimire533/ytui-music/pull/57, which was unmerged.
+    ./fix-implicit-autoref-errors-in-ui-mod-rs-for-rust-1-80-plus.patch
+  ];
+
   nativeBuildInputs = [
     pkg-config
     makeBinaryWrapper
@@ -54,11 +62,34 @@ rustPlatform.buildRustPackage rec {
     runHook postInstallCheck
   '';
 
-  meta = with lib; {
+  passthru = {
+    updateScript = _experimental-update-script-combinators.sequence [
+      (unstableGitUpdater {
+        tagFormat = "v[0-9]*";
+        tagPrefix = "v";
+
+        # * "main" branch is newer than "latest" branch
+        # * "main" branch is newer than "main" tag
+        # * The "main" tag doesn't seem to be associated with commits on branches like "main" or "latest".
+        branch = "main";
+      })
+      (nix-update-script {
+        # Updating `cargoHash`
+        extraArgs = [ "--version=skip" ];
+      })
+    ];
+  };
+
+  meta = {
     description = "Youtube client in terminal for music";
     homepage = "https://github.com/sudipghimire533/ytui-music";
-    license = licenses.gpl2Only;
-    maintainers = with maintainers; [ kashw2 ];
+    license = lib.licenses.gpl2Only;
+    maintainers = with lib.maintainers; [ kashw2 ];
     mainProgram = "ytui_music";
+
+    # On Darwin, this package requires sandbox-relaxed to build.
+    # If the sandbox is enabled, `fetch-cargo-vendor-util` causes errors.
+    # This issue may be related to: https://github.com/NixOS/nixpkgs/issues/394972
+    # broken = stdenv.hostPlatform.isDarwin;
   };
 }

pkgs/by-name/ze/zerofs/package.nix

@@ -10,18 +10,18 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "zerofs";
-  version = "0.18.0";
+  version = "0.19.1";
 
   src = fetchFromGitHub {
     owner = "Barre";
     repo = "ZeroFS";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-G+kXAlPfo3YhAGy9nkKCL7384dWUvPr4cZ+WIX99OSc=";
+    hash = "sha256-FUy6S9IM+ge+7+MRdS/6hgiuQnHk9A4e/P06FXFXQ5k=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/zerofs";
 
-  cargoHash = "sha256-XbjtlWQkXanOo7SbbgsZNXj5SKy0PQAd2eRM/9f9gLs=";
+  cargoHash = "sha256-OlcXUf0r79TBwkIwMiYt/uDlO1mjBHWipgQeMt+jhwM=";
 
   buildInputs = [ rust-jemalloc-sys ];
 

pkgs/development/libraries/qtutilities/default.nix

@@ -10,13 +10,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "qtutilities";
-  version = "6.18.3";
+  version = "6.18.4";
 
   src = fetchFromGitHub {
     owner = "Martchus";
     repo = "qtutilities";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-x9el1oUyl2xrpehhR9uuexVBErSWudPB56ZpU91zZew=";
+    hash = "sha256-IZDEtytcH+edJNoMaSWKQDMmPpiQH5QNJWLKaRKCWhU=";
   };
 
   nativeBuildInputs = [

pkgs/development/python-modules/boto3-stubs/default.nix

@@ -358,13 +358,13 @@
 
 buildPythonPackage rec {
   pname = "boto3-stubs";
-  version = "1.41.4";
+  version = "1.41.5";
   pyproject = true;
 
   src = fetchPypi {
     pname = "boto3_stubs";
     inherit version;
-    hash = "sha256-3hzThIpkfZpuj18QAKxWnncGZLAy2aplrY7Q5fKsfyI=";
+    hash = "sha256-UUokKCFHdgrx7G+QNcLEUckceIF9GEV8UNhB7lLaoIg=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/botocore-stubs/default.nix

@@ -9,13 +9,13 @@
 
 buildPythonPackage rec {
   pname = "botocore-stubs";
-  version = "1.41.4";
+  version = "1.41.6";
   pyproject = true;
 
   src = fetchPypi {
     pname = "botocore_stubs";
     inherit version;
-    hash = "sha256-aZyBYWUOu4C0wDxIgvQUHj5ir7wK0njrOzOJwDtwVCY=";
+    hash = "sha256-K1NXTE6k+NWIflFu8iCLmW/ZiPwqYT9nbqkURZfyDNI=";
   };
 
   nativeBuildInputs = [ setuptools ];

pkgs/development/python-modules/django-admin-sortable2/default.nix

@@ -9,13 +9,13 @@
 }:
 let
   pname = "django-admin-sortable2";
-  version = "2.2.8";
+  version = "2.3";
 
   src = fetchFromGitHub {
     owner = "jrief";
     repo = "django-admin-sortable2";
     tag = version;
-    hash = "sha256-T5dppM/o305GCg5uU7re/FdjhXFUyiH/DO2JTVf6Xgg=";
+    hash = "sha256-BhAhql4Ou+CyIo90eKDfm3GSD8DO6uT67/VgcPz13JQ=";
   };
 
   assets = buildNpmPackage {

pkgs/development/python-modules/mecab-python3/default.nix

@@ -10,7 +10,7 @@
 
 buildPythonPackage rec {
   pname = "mecab-python3";
-  version = "1.0.10";
+  version = "1.0.12";
   format = "setuptools";
 
   disabled = pythonOlder "3.7";
@@ -18,7 +18,7 @@ buildPythonPackage rec {
   src = fetchPypi {
     pname = "mecab_python3";
     inherit version;
-    hash = "sha256-Ic1EFgQ+mpk/z7mG3ek+Q2agdUPdlYSbXvLlDJqa/M4=";
+    hash = "sha256-mroeVu+A3ZcUfcv441CBR68Sn7Rs7A5DK4X5apvapLk=";
   };
 
   nativeBuildInputs = [

pkgs/development/python-modules/molecule/default.nix

@@ -23,14 +23,14 @@
 
 buildPythonPackage rec {
   pname = "molecule";
-  version = "25.11.1";
+  version = "25.12.0";
   pyproject = true;
 
   disabled = pythonOlder "3.10";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-xliI4yg8JncEj5RdGXKWBk/87orqW7fo//ObHBmc47o=";
+    hash = "sha256-sia/G+Z84PowxyaqsiYGP5RD5WHX49BI9V37LuUa29Y=";
   };
 
   nativeBuildInputs = [

pkgs/development/python-modules/mypy-boto3/default.nix

@@ -330,8 +330,8 @@ in
       "sha256-9Y9OF18s2axyp0PTKD7azjTTq0PK34OkYeXPlWSYdxg=";
 
   mypy-boto3-compute-optimizer =
-    buildMypyBoto3Package "compute-optimizer" "1.41.0"
-      "sha256-S50+Wjro9Wzcq4PvaUbVfwxj0CLLqJ/Z+4D/qr6ojq4=";
+    buildMypyBoto3Package "compute-optimizer" "1.41.5"
+      "sha256-rspxHjYg99vV9GACUhQFZybbTzuLYza/EziWElWJn9c=";
 
   mypy-boto3-config =
     buildMypyBoto3Package "config" "1.41.0"

pkgs/development/python-modules/neoteroi-mkdocs/default.nix

@@ -16,14 +16,14 @@
 }:
 buildPythonPackage rec {
   pname = "neoteroi-mkdocs";
-  version = "1.1.3";
+  version = "1.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Neoteroi";
     repo = "mkdocs-plugins";
     tag = "v${version}";
-    hash = "sha256-4Rd4VhgaMzoSZ87FMQsUxadGG1ucQgGY0Y4uZoZl380=";
+    hash = "sha256-l5jJCmsBns1bGv+yBA0R6TDlfQuweFr92kNnQalWB7k=";
   };
 
   buildInputs = [ hatchling ];

pkgs/development/python-modules/nuclear/default.nix

@@ -13,14 +13,14 @@
 
 buildPythonPackage rec {
   pname = "nuclear";
-  version = "2.5.0";
+  version = "2.6.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "igrek51";
     repo = "nuclear";
     rev = version;
-    hash = "sha256-6ZuRFZLhOqS9whkD0WtWD1/xSLhE8czDA3Za7Vcn1Mc=";
+    hash = "sha256-63BYwfLWUDN18AOAUjDPG/QLM1RBqsBs54oTDq1lKrk=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/oelint-data/default.nix

@@ -8,14 +8,14 @@
 
 buildPythonPackage rec {
   pname = "oelint-data";
-  version = "1.2.6";
+  version = "1.2.7";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "priv-kweihmann";
     repo = "oelint-data";
     tag = version;
-    hash = "sha256-V72XANJnBX0Pcn8fyF7hrI9O117VmOhxVCBt9F1ZJoA=";
+    hash = "sha256-zyZwbyHjZzHGMgnZYMnUiaNd1hEFKQo4jM92C1/3Tvg=";
   };
 
   build-system = [

pkgs/development/python-modules/pathy/default.nix

@@ -48,8 +48,9 @@ buildPythonPackage rec {
   pythonImportsCheck = [ "pathy" ];
 
   meta = with lib; {
+    # Marked broken 2025-11-28 because it has failed on Hydra for at least one year.
+    broken = true;
     # https://github.com/justindujardin/pathy/issues/113
-    broken = pathlib-abc.version != "0.1.1";
     description = "Path interface for local and cloud bucket storage";
     mainProgram = "pathy";
     homepage = "https://github.com/justindujardin/pathy";

pkgs/development/python-modules/polyfactory/default.nix

@@ -18,14 +18,14 @@
 
 buildPythonPackage rec {
   pname = "polyfactory";
-  version = "3.0.0";
+  version = "3.1.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "litestar-org";
     repo = "polyfactory";
     tag = "v${version}";
-    hash = "sha256-ljHJQY4GpkRpa0+VerS/KwSCXNAlPLj0urNd0F7xx+4=";
+    hash = "sha256-WlWz9aZEOiHosZ6rYhnUwyyCf2uXHqPiU1kVk30DOBU=";
   };
 
   build-system = [ hatchling ];

pkgs/development/python-modules/pyspelling/default.nix

@@ -14,12 +14,12 @@
 
 buildPythonPackage rec {
   pname = "pyspelling";
-  version = "2.12";
+  version = "2.12.1";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-ezl5EeRrf6fBBWsoZ8AugVR/yNALvNhEZWVd8j5J26o=";
+    hash = "sha256-kQiYHcF01kAKftSRfPSvkdrz64NXjUVwwHJrksKjLno=";
   };
 
   build-system = [
@@ -41,9 +41,11 @@ buildPythonPackage rec {
   ];
 
   meta = {
+    changelog = "https://github.com/facelessuser/pyspelling/blob/${version}/docs/src/markdown/about/changelog.md";
     description = "Spell checker";
     homepage = "https://pypi.org/project/pyspelling";
     license = lib.licenses.mit;
+    mainProgram = "pyspelling";
     maintainers = [ ];
   };
 }

pkgs/development/python-modules/scikit-learn-extra/default.nix

@@ -65,6 +65,8 @@ buildPythonPackage rec {
   ];
 
   meta = {
+    # Marked broken 2025-11-28 because it has failed on Hydra for at least one year.
+    broken = true;
     description = "Set of tools for scikit-learn";
     homepage = "https://github.com/scikit-learn-contrib/scikit-learn-extra";
     license = lib.licenses.bsd3;

pkgs/development/python-modules/sqlmap/default.nix

@@ -9,12 +9,12 @@
 
 buildPythonPackage rec {
   pname = "sqlmap";
-  version = "1.9.11";
+  version = "1.9.12";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-On76bRCiC7GEh5sdtTQnmohzkn7lvr4f1o9C25y/VJM=";
+    hash = "sha256-Cz83zLjGqvDjwVFmMi4AHB8JYbxgHkQnKHXVwyxEp1c=";
   };
 
   postPatch = ''

pkgs/development/python-modules/tencentcloud-sdk-python/default.nix

@@ -9,14 +9,14 @@
 
 buildPythonPackage rec {
   pname = "tencentcloud-sdk-python";
-  version = "3.1.5";
+  version = "3.1.6";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "TencentCloud";
     repo = "tencentcloud-sdk-python";
     tag = version;
-    hash = "sha256-aURTLS9c05YWo8GNcssDtNUUcoNjct/MXJF557QRedQ=";
+    hash = "sha256-ZBufZVFriwe1upgzu5Eg1cq0hkVvdWeCZ7HYNaVBFes=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/weconnect/default.nix

@@ -14,14 +14,14 @@
 
 buildPythonPackage rec {
   pname = "weconnect";
-  version = "0.60.10";
+  version = "0.60.11";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "tillsteinbach";
     repo = "WeConnect-python";
     tag = "v${version}";
-    hash = "sha256-ZvJoZ4mUNkUJ5sOxOHDsuxGZO2s3PSEfidt3aDfmBeg=";
+    hash = "sha256-llAWCjhP/fwI+H8BRpMYxba8jC+WDc66xkUDwT3NHcA=";
   };
 
   postPatch = ''

pkgs/development/tools/database/indradb/default.nix

@@ -15,6 +15,9 @@ let
   };
 
   meta = with lib; {
+    # Marked broken 2025-11-28 because both indradb-server and indradb-client
+    # have failed on Hydra for nearly a year.
+    broken = true;
     description = "Graph database written in rust";
     homepage = "https://github.com/indradb/indradb";
     license = licenses.mpl20;