Merge staging-next into staging

doc/release-notes/rl-2511.section.md

@@ -99,6 +99,8 @@
 
 <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->
 
+- `mealie` has been updated to 3.0.2: This update introduces breaking changes in some API endpoints (see the [release changelog](https://github.com/mealie-recipes/mealie/releases/tag/v3.0.0))
+
 ### Breaking changes {#sec-nixpkgs-release-25.11-lib-breaking}
 
 - `reaction` has been updated to version 2, which includes some breaking changes.

maintainers/maintainer-list.nix

@@ -2064,12 +2064,6 @@
     githubId = 10400299;
     name = "Arjan Schrijver";
   };
-  arjix = {
-    email = "arjix@protonmail.com";
-    github = "arjix";
-    githubId = 62168569;
-    name = "arjix";
-  };
   arkivm = {
     email = "vikram186@gmail.com";
     github = "arkivm";
@@ -5569,12 +5563,6 @@
     matrix = "@dan:matrix.org";
     name = "Daniel Theriault";
   };
-  dan4ik605743 = {
-    email = "6057430gu@gmail.com";
-    github = "dan4ik605743";
-    githubId = 86075850;
-    name = "Danil Danevich";
-  };
   danbst = {
     email = "abcz2.uprola@gmail.com";
     github = "danbst";
@@ -20986,6 +20974,11 @@
     githubId = 104558;
     name = "Benjamin Saunders";
   };
+  ralleka = {
+    name = "RalleKa";
+    github = "RalleKa";
+    githubId = 46349331;
+  };
   ramblurr = {
     name = "Casey Link";
     email = "nix@caseylink.com";
@@ -26858,6 +26851,12 @@
     githubId = 367185;
     name = "Jan Votava";
   };
+  voxi0 = {
+    name = "Wasiq Arbab";
+    email = "alif200099@gmail.com";
+    github = "Voxi0";
+    githubId = 113725768;
+  };
   vpetersson = {
     email = "vpetersson@screenly.io";
     github = "vpetersson";

nixos/modules/programs/vim.nix

@@ -17,10 +17,12 @@ in
     package = lib.mkPackageOption pkgs "vim" { example = [ "vim-full" ]; };
   };
 
-  # TODO: convert it into assert after 24.11 release
   config = lib.mkIf (cfg.enable || cfg.defaultEditor) {
-    warnings = lib.mkIf (cfg.defaultEditor && !cfg.enable) [
-      "programs.vim.defaultEditor will only work if programs.vim.enable is enabled, which will be enforced after the 24.11 release"
+    assertions = [
+      {
+        assertion = cfg.defaultEditor -> cfg.enable;
+        message = "{option}`programs.vim.defaultEditor` requires {option}`programs.vim.enable` to be set to true.";
+      }
     ];
     environment = {
       systemPackages = [ cfg.package ];

nixos/modules/services/misc/tandoor-recipes.nix

@@ -184,7 +184,7 @@ in
       };
     };
 
-    services.paperless.settings = lib.mkIf cfg.database.createLocally {
+    services.tandoor-recipes.extraConfig = lib.mkIf cfg.database.createLocally {
       DB_ENGINE = "django.db.backends.postgresql";
       POSTGRES_HOST = "/run/postgresql";
       POSTGRES_USER = "tandoor_recipes";

nixos/modules/services/networking/cgit.nix

@@ -256,9 +256,7 @@ in
             (genAttrs' [ "cgit.css" "cgit.png" "favicon.ico" "robots.txt" ] (
               fileName:
               lib.nameValuePair "= ${stripLocation cfg}/${fileName}" {
-                extraConfig = ''
-                  alias ${cfg.package}/cgit/${fileName};
-                '';
+                alias = lib.mkDefault "${cfg.package}/cgit/${fileName}";
               }
             ))
             // {

nixos/modules/system/boot/loader/limine/limine-install.py

@@ -145,8 +145,10 @@ def config_entry(levels: int, bootspec: BootSpec, label: str, time: str) -> str:
         entry += f'module_path: ' + get_kernel_uri(bootspec.initrd) + '\n'
 
     if bootspec.initrdSecrets:
-        initrd_secrets_path = str(limine_install_dir) + '/kernels/' + os.path.basename(bootspec.toplevel) + '-secrets'
-        os.makedirs(initrd_secrets_path)
+        base_path = str(limine_install_dir) + '/kernels/'
+        initrd_secrets_path = base_path + os.path.basename(bootspec.toplevel) + '-secrets'
+        if not os.path.exists(base_path):
+            os.makedirs(base_path)
 
         old_umask = os.umask(0o137)
         initrd_secrets_path_temp = tempfile.mktemp(os.path.basename(bootspec.toplevel) + '-secrets')

nixos/tests/mealie.nix

@@ -15,6 +15,7 @@
         services.mealie = {
           enable = true;
           port = 9001;
+          settings.ALLOW_SIGNUP = "true";
         };
       };
       postgres = {
@@ -27,16 +28,83 @@
     };
 
   testScript = ''
-    start_all()
+    import json
+    import urllib.parse
+
+    def api_get(node, path, qry={}, **headers):
+      url = f"http://localhost:9001/api{path}"
+      if len(qry) > 0:
+        url += "?" + "&".join([f"{k}={urllib.parse.quote(v)}" for k, v in qry.items()])
+
+      headers = " ".join([f"-H '{k}: {str(v)}'" for k, v in headers.items()])
+
+      got = node.succeed(f"curl -s -X GET {headers} --fail {url}")
+      print(f"* GET {path}\n{got}")
+      return json.loads(got)
+
+    def api_post(node, path, method="POST", urlencode=False, body={}, qry={}, **headers):
+      url = f"http://localhost:9001/api{path}"
+      if len(qry) > 0:
+        url += "?" + "&".join([f"{k}={urllib.parse.quote(v)}" for k, v in qry.items()])
+
+      if urlencode:
+        headers["Content-Type"] = "application/x-www-form-urlencoded"
+        print("BODY", body)
+        body = "&".join([f"{k}={urllib.parse.quote(str(v))}" for k, v in body.items()])
+      else:
+        headers["Content-Type"] = "application/json"
+        body = json.dumps(body)
+
+      headers["Accept"] = "application/json"
+      headers = " ".join([f"-H '{k}: {str(v)}'" for k, v in headers.items()])
+
+      got = node.succeed(f"curl -v --fail -X {method} {url} {headers} -d '{body}'")
+      print(f"* POST {path}\n{got}")
+      return json.loads(got)
 
     def test_mealie(node):
       node.wait_for_unit("mealie.service")
       node.wait_for_open_port(9001)
       node.succeed("curl --fail http://localhost:9001")
 
+      got = api_get(node, "/app/about")
+      assert got["version"] == "v${pkgs.mealie.version}"
+
+      new_user = dict(
+        email=node.name + ".nomail@no.mail",
+        username="noname-" + node.name,
+        fullName="No Name" + node.name,
+        password="SuperSecure" + node.name,
+        passwordConfirm="SuperSecure" + node.name,
+        group="mygroup" + node.name,
+      )
+      got = api_post(node, "/users/register", body=new_user)
+      got = api_post(node, "/auth/token", urlencode=True, body={
+        "username": new_user["username"],
+        "password": new_user["password"],
+        "remember_me": False,
+      })
+      assert "access_token" in got
+      token = "Bearer " + got["access_token"]
+
+      got = api_get(node, "/recipes", authorization=token)
+      assert got["total"] == 0
+
+      slug = api_post(node, "/recipes", body={"name": "TestRecipe"}, authorization=token)
+      recipe = { "description": "Test recipe" }
+      got = api_post(node, f"/recipes/{slug}", body=recipe, method="PATCH", authorization=token)
+      got = api_get(node, "/recipes", authorization=token)
+      assert got["total"] > 0
+      assert got["items"][0]["description"] == recipe["description"]
+
+    postgres.start()
+    test_mealie(postgres)
+    postgres.send_monitor_command("quit")
+    postgres.wait_for_shutdown()
+
+    sqlite.start()
     test_mealie(sqlite)
     sqlite.send_monitor_command("quit")
     sqlite.wait_for_shutdown()
-    test_mealie(postgres)
   '';
 }

pkgs/applications/editors/vim/plugins/generated.nix

@@ -1596,6 +1596,19 @@ final: prev: {
     meta.hydraPlatforms = [ ];
   };
 
+  blink-cmp-words = buildVimPlugin {
+    pname = "blink-cmp-words";
+    version = "2025-06-26";
+    src = fetchFromGitHub {
+      owner = "archie-judd";
+      repo = "blink-cmp-words";
+      rev = "81224ec2eb72115c84bb19ae566ef25083dbfed2";
+      sha256 = "1561sxrz3h10qdxn4a1aqlvbnih4v5g5kvs5mwipjnfh8n4wcnnb";
+    };
+    meta.homepage = "https://github.com/archie-judd/blink-cmp-words/";
+    meta.hydraPlatforms = [ ];
+  };
+
   blink-compat = buildVimPlugin {
     pname = "blink.compat";
     version = "2025-05-28";

pkgs/applications/editors/vim/plugins/overrides.nix

@@ -333,6 +333,10 @@ in
     dependencies = [ self.blink-cmp ];
   };
 
+  blink-cmp-words = super.blink-cmp-words.overrideAttrs {
+    dependencies = [ self.blink-cmp ];
+  };
+
   bluloco-nvim = super.bluloco-nvim.overrideAttrs {
     dependencies = [ self.lush-nvim ];
   };

pkgs/applications/editors/vim/plugins/vim-plugin-names

@@ -121,6 +121,7 @@ https://github.com/Kaiser-Yang/blink-cmp-dictionary/,HEAD,
 https://github.com/Kaiser-Yang/blink-cmp-git/,HEAD,
 https://github.com/alexandre-abrioux/blink-cmp-npm.nvim/,HEAD,
 https://github.com/ribru17/blink-cmp-spell/,HEAD,
+https://github.com/archie-judd/blink-cmp-words/,HEAD,
 https://github.com/fang2hou/blink-copilot/,HEAD,
 https://github.com/moyiz/blink-emoji.nvim/,HEAD,
 https://github.com/MahanRahmati/blink-nerdfont.nvim/,HEAD,

pkgs/applications/misc/cubocore-packages/coreaction/default.nix

@@ -38,7 +38,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coreaction";
     homepage = "https://gitlab.com/cubocore/coreapps/coreaction";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/corearchiver/default.nix

@@ -41,7 +41,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corearchiver";
     homepage = "https://gitlab.com/cubocore/coreapps/corearchiver";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/corefm/default.nix

@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corefm";
     homepage = "https://gitlab.com/cubocore/coreapps/corefm";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/coregarage/default.nix

@@ -41,7 +41,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coregarage";
     homepage = "https://gitlab.com/cubocore/coreapps/coregarage";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/corehunt/default.nix

@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corehunt";
     homepage = "https://gitlab.com/cubocore/coreapps/corehunt";
     license = lib.licenses.gpl3Only;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/coreimage/default.nix

@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coreimage";
     homepage = "https://gitlab.com/cubocore/coreapps/coreimage";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/coreinfo/default.nix

@@ -43,7 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coreinfo";
     homepage = "https://gitlab.com/cubocore/coreapps/coreinfo";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/corekeyboard/default.nix

@@ -40,7 +40,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corekeyboard";
     homepage = "https://gitlab.com/cubocore/coreapps/corekeyboard";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/corepad/default.nix

@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corepad";
     homepage = "https://gitlab.com/cubocore/coreapps/corepad";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/corepaint/default.nix

@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corepaint";
     homepage = "https://gitlab.com/cubocore/coreapps/corepaint";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/corepdf/default.nix

@@ -43,7 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corepdf";
     homepage = "https://gitlab.com/cubocore/coreapps/corepdf";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/corepins/default.nix

@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corepins";
     homepage = "https://gitlab.com/cubocore/coreapps/corepins";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/corerenamer/default.nix

@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corerenamer";
     homepage = "https://gitlab.com/cubocore/coreapps/corerenamer";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/coreshot/default.nix

@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coreshot";
     homepage = "https://gitlab.com/cubocore/coreapps/coreshot";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/corestats/default.nix

@@ -39,7 +39,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corestats";
     homepage = "https://gitlab.com/cubocore/coreapps/corestats";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/corestuff/default.nix

@@ -45,7 +45,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corestuff";
     homepage = "https://gitlab.com/cubocore/coreapps/corestuff";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
     # Address boundary error
     broken = true;

pkgs/applications/misc/cubocore-packages/coreterminal/default.nix

@@ -40,7 +40,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coreterminal";
     homepage = "https://gitlab.com/cubocore/coreapps/coreterminal";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/coretime/default.nix

@@ -38,7 +38,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coretime";
     homepage = "https://gitlab.com/cubocore/coreapps/coretime";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/coretoppings/default.nix

@@ -81,7 +81,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "shareIT";
     homepage = "https://gitlab.com/cubocore/coreapps/coretoppings";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/coreuniverse/default.nix

@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coreuniverse";
     homepage = "https://gitlab.com/cubocore/coreapps/coreuniverse";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/libcprime/default.nix

@@ -40,7 +40,7 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Library for bookmarking, saving recent activites, managing settings of C-Suite";
     homepage = "https://gitlab.com/cubocore/libcprime";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/misc/cubocore-packages/libcsys/default.nix

@@ -35,7 +35,7 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Library for managing drive and getting system resource information in real time";
     homepage = "https://gitlab.com/cubocore/libcsys";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -985,13 +985,13 @@
     "vendorHash": "sha256-AlB9tC3KejgUAjjT2pY7Q2mTS/AV4QRusSnyPiOheXE="
   },
   "opentelekomcloud": {
-    "hash": "sha256-HbtNk5UAr+q09mOICkKzh9wIP0HM9MFVVR6gEIBdnvs=",
+    "hash": "sha256-lBaer+ZI4kYHocgLlDDOVJnr3EwVhLEHO9JXqbLcH9E=",
     "homepage": "https://registry.terraform.io/providers/opentelekomcloud/opentelekomcloud",
     "owner": "opentelekomcloud",
     "repo": "terraform-provider-opentelekomcloud",
-    "rev": "v1.36.43",
+    "rev": "v1.36.44",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-9ese4fUPQifxbvcK6QiSIet++WFaK9XuyBv6oJiIOGA="
+    "vendorHash": "sha256-+OT7y7YN8xT9MJqzVGlGxR1cEK6PYSNZLeSVNp9yOvI="
   },
   "openwrt": {
     "hash": "sha256-z78IceF2VJtiQpVqC+rTUDsph73LZawIK+az3rEhljA=",
@@ -1138,13 +1138,13 @@
     "vendorHash": "sha256-75GQmp/ybD+VugrrB8qTbP3OPHy3eyBGe5u7CM7CRcc="
   },
   "routeros": {
-    "hash": "sha256-ciQsBvpX6gWnDPt9O1SGrVVgNCvAHBPCaLfVlPxrSAY=",
+    "hash": "sha256-1qdq09QFijxQDUaoPJwJB4F5aZ0AHXJSGndcdR9iqOs=",
     "homepage": "https://registry.terraform.io/providers/terraform-routeros/routeros",
     "owner": "terraform-routeros",
     "repo": "terraform-provider-routeros",
-    "rev": "v1.85.3",
+    "rev": "v1.86.1",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-lurBPksF2+SPraQ6KRr4EmI8rR7lY9BN+LZY8pKHjYU="
+    "vendorHash": "sha256-et1xqcaCKTRz9bJjTlRnxhXBoc6PaeSwJgBI4pAzcdg="
   },
   "rundeck": {
     "hash": "sha256-g8unbz8+UGLiAOJju6E2bLkygvZgHkv173PdMDefmrc=",

pkgs/applications/window-managers/i3/lock-blur.nix

@@ -34,7 +34,7 @@ i3lock-color.overrideAttrs (oldAttrs: rec {
     description = "Improved screenlocker based upon XCB and PAM with background blurring filter";
     homepage = "https://github.com/karulont/i3lock-blur/";
     license = licenses.bsd3;
-    maintainers = with maintainers; [ dan4ik605743 ];
+    maintainers = with maintainers; [ ];
     platforms = platforms.all;
     broken = stdenv.hostPlatform.isDarwin; # never built on Hydra https://hydra.nixos.org/job/nixpkgs/trunk/i3lock-blur.x86_64-darwin
   };

pkgs/by-name/af/afetch/package.nix

@@ -24,7 +24,6 @@ stdenv.mkDerivation rec {
     homepage = "https://github.com/13-CF/afetch";
     license = lib.licenses.gpl3Plus;
     maintainers = with lib.maintainers; [
-      dan4ik605743
       jk
     ];
     platforms = lib.platforms.linux;

pkgs/by-name/al/all-the-package-names/package.nix

@@ -7,16 +7,16 @@
 
 buildNpmPackage rec {
   pname = "all-the-package-names";
-  version = "2.0.2156";
+  version = "2.0.2159";
 
   src = fetchFromGitHub {
     owner = "nice-registry";
     repo = "all-the-package-names";
     tag = "v${version}";
-    hash = "sha256-XdMapdtcuZhrF/IacXahxCbpgu7f5mjtKxu5whebDvM=";
+    hash = "sha256-7c4cxGSBc60WTLjRptb8VbTf279BxDgVOiVaP4C7pKk=";
   };
 
-  npmDepsHash = "sha256-GUs0JyCYg5lIXZ9i9F+45myGtc6zYYmZ5YTxwcjOVUo=";
+  npmDepsHash = "sha256-fDQnEjPefRBbpCX21vZrJ3Y8y7d3PgM54IfPJbb44ao=";
 
   passthru.updateScript = nix-update-script { };
 

pkgs/by-name/ao/ao3downloader/package.nix

@@ -0,0 +1,56 @@
+{
+  lib,
+  python312Packages,
+  fetchFromGitHub,
+}:
+
+# ao3downloader explicitly does not support Python 3.13 yet
+# https://github.com/nianeyna/ao3downloader/blob/f8399bb8aca276ae7359157b90afd13925c90056/pyproject.toml#L8
+python312Packages.buildPythonApplication rec {
+  pname = "ao3downloader";
+  version = "2025.6.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "nianeyna";
+    repo = "ao3downloader";
+    tag = "v${version}";
+    hash = "sha256-ukS3uku8OW5nhM2Nr0IxAiG03XfqUn/Xyd0lZDGGkWw=";
+  };
+
+  build-system = with python312Packages; [
+    hatchling
+  ];
+
+  dependencies = with python312Packages; [
+    beautifulsoup4
+    mobi
+    pdfquery
+    requests
+    six
+    tqdm
+  ];
+
+  pythonRelaxDeps = [
+    "requests"
+  ];
+
+  pythonImportsCheck = [
+    "ao3downloader"
+  ];
+
+  nativeCheckInputs = with python312Packages; [
+    pytestCheckHook
+    syrupy
+    pythonImportsCheckHook
+  ];
+
+  meta = {
+    description = "Utility for downloading fanfiction in bulk from the Archive of Our Own";
+    changelog = "https://github.com/nianeyna/ao3downloader/releases/tag/v${version}";
+    mainProgram = "ao3downloader";
+    homepage = "https://nianeyna.dev/ao3downloader";
+    license = lib.licenses.gpl3;
+    maintainers = [ lib.maintainers.samasaur ];
+  };
+}

pkgs/by-name/as/asus-wmi-screenpad-ctl/package.nix

@@ -0,0 +1,33 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+let
+  version = "1.0.0";
+in
+rustPlatform.buildRustPackage {
+  pname = "asus-wmi-screenpad-ctl";
+  inherit version;
+
+  src = fetchFromGitHub {
+    repo = "asus-wmi-screenpad-ctl";
+    owner = "aldenparker";
+    tag = "v${version}";
+    hash = "sha256-TV61Kh8A7PFJPRONqeCK1xEK2AHfiV/eoZOCL0SZ+5M=";
+  };
+
+  cargoHash = "sha256-ZluFoV9TclY6NOB5sHBN+1ht3zovmb4H+q7qT/Ywwmc=";
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Brightness control program for the asus-wmi-screenpad kernel module";
+    mainProgram = "asus-wmi-screenpad-ctl";
+    homepage = "https://github.com/aldenparker/asus-wmi-screenpad-ctl";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ aldenparker ];
+    platforms = lib.platforms.linux;
+  };
+}

pkgs/by-name/au/automatic-timezoned/package.nix

@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "automatic-timezoned";
-  version = "2.0.83";
+  version = "2.0.84";
 
   src = fetchFromGitHub {
     owner = "maxbrunet";
     repo = "automatic-timezoned";
     rev = "v${version}";
-    sha256 = "sha256-jrRuQXzx1dBIjXswVFq5szydj2GNEBPgpGj7K1vvQkE=";
+    sha256 = "sha256-Ul9bzMC8MfbfE4PDi3O8mhsImbspOcBDqTZOoVVeP/0=";
   };
 
-  cargoHash = "sha256-itZPo0GuTdWr2NYBluvf5/jQlwGVDZsPurIfftL94gk=";
+  cargoHash = "sha256-GroKztTpPWTw/tyrPWfld1ix0BnkjphwHM3J/17byqM=";
 
   meta = {
     description = "Automatically update system timezone based on location";

pkgs/by-name/aw/aws-iam-authenticator/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "aws-iam-authenticator";
-  version = "0.7.4";
+  version = "0.7.5";
 
   src = fetchFromGitHub {
     owner = "kubernetes-sigs";
     repo = "aws-iam-authenticator";
     tag = "v${version}";
-    hash = "sha256-TC8FntHiOrYdaVajvkzOK5P13LyOrmaZNsBhqD7bDpw=";
+    hash = "sha256-FvXK4yrWPtM7uhXb0eJB2Hs1eE/+h3R79xVbHFSX2hQ=";
   };
 
-  vendorHash = "sha256-XmFskQF8YFL3Ol0mF2wBb0v+2+VrtwBKmfOH8j3IWOs=";
+  vendorHash = "sha256-fLA+dPAqvCPo8p+NUdmziAhUbi7wQVp2gnzv4493zr8=";
 
   ldflags =
     let

pkgs/by-name/ba/backblaze-b2/package.nix

@@ -52,6 +52,7 @@ python3Packages.buildPythonApplication rec {
     pexpect
     pytestCheckHook
     pytest-xdist
+    tenacity
   ];
 
   preCheck = ''

pkgs/by-name/bo/bosh-cli/package.nix

@@ -9,13 +9,13 @@
 buildGoModule rec {
   pname = "bosh-cli";
 
-  version = "7.9.7";
+  version = "7.9.8";
 
   src = fetchFromGitHub {
     owner = "cloudfoundry";
     repo = "bosh-cli";
     rev = "v${version}";
-    sha256 = "sha256-Y3wk05IeWoH5YCrA+CJEtqvwCUxAvYdoYD+qDwTJo5Q=";
+    sha256 = "sha256-PCkP+IUjVlgcNHmBtUO2kuML8+dk4VT2ybtqsKbCzZo=";
   };
   vendorHash = null;
 

pkgs/by-name/bu/bulky/package.nix

@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation rec {
   pname = "bulky";
-  version = "3.7";
+  version = "3.8";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "bulky";
     rev = version;
-    hash = "sha256-8sSn/EXLs7UC4M6cNKtVUNwrHeV4dt3mvUCxQQQRaj0=";
+    hash = "sha256-LVrVgfYCcfaIFDPQu8cFr2+KkzXboDSjPwM5UIP4G9c=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ca/cargo-dist/package.nix

@@ -13,16 +13,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "cargo-dist";
-  version = "0.28.2";
+  version = "0.29.0";
 
   src = fetchFromGitHub {
     owner = "axodotdev";
     repo = "cargo-dist";
     rev = "v${version}";
-    hash = "sha256-Nlix74IvhUuWKJTslPajGHkGKxGPo1ucTEkuuA//zn0=";
+    hash = "sha256-J4zAjbyHHLxdObos/drDH5sDVmQE8h1WFqmfG8ac3uQ=";
   };
 
-  cargoHash = "sha256-GmzMmErEshYECMr7APhJ6uWqflHbG73bw/utMgq3dk0=";
+  cargoHash = "sha256-aPI8NtcLnLrQ0AC2E09QtH5RfXJ8cBtBrVfB3AwbgKc=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/co/colloid-gtk-theme/package.nix

@@ -57,13 +57,13 @@ lib.checkListOfEnum "colloid-gtk-theme: theme variants"
   stdenvNoCC.mkDerivation
   rec {
     inherit pname;
-    version = "2024-11-16";
+    version = "2025-07-31";
 
     src = fetchFromGitHub {
       owner = "vinceliuice";
       repo = "colloid-gtk-theme";
       rev = version;
-      hash = "sha256-70HDn87acG0me+zbXk6AoGmakY6VLuawq1ubgGcRZVk=";
+      hash = "sha256-0pXbeeBAkk6v2DBWfUYhWWdyrQhgr/JfDbhyS33maMM=";
     };
 
     nativeBuildInputs = [

pkgs/by-name/co/compare50/package.nix

@@ -7,14 +7,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "compare50";
-  version = "1.2.7";
+  version = "1.2.13";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "cs50";
     repo = "compare50";
     tag = "v${version}";
-    hash = "sha256-T7ts/9Uux2gVhh5EGv8PRh9cbCQDbLBYD06sWqNSvLU=";
+    hash = "sha256-qRESVE9242Leo6js+YrRrLff7C3IjWFKSN2/GsC/8VA=";
   };
 
   postPatch = ''
@@ -65,7 +65,7 @@ python3Packages.buildPythonApplication rec {
     description = "Tool for detecting similarity in code supporting over 300 languages";
     homepage = "https://cs50.readthedocs.io/projects/compare50/en/latest/";
     downloadPage = "https://github.com/cs50/compare50";
-    changelog = "https://github.com/cs50/compare50/releases/tag/v${version}";
+    changelog = "https://github.com/cs50/compare50/releases/tag/${src.tag}";
     license = lib.licenses.gpl3Only;
     platforms = lib.platforms.unix;
     maintainers = with lib.maintainers; [ ethancedwards8 ];

pkgs/by-name/cr/crowdin-cli/package.nix

@@ -14,11 +14,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "crowdin-cli";
-  version = "4.9.0";
+  version = "4.9.1";
 
   src = fetchurl {
     url = "https://github.com/crowdin/crowdin-cli/releases/download/${finalAttrs.version}/crowdin-cli.zip";
-    hash = "sha256-fPgcr0Gg0uIgDhnfowFp6K+NhtKdjThLd4yzjcZ78K4=";
+    hash = "sha256-VU3kG8Y/p6bM/kkExmP6Mww46d1kxpljhNIRNhUY6kg=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/da/darkly/package.nix

@@ -13,13 +13,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "darkly-qt${qtMajorVersion}";
-  version = "0.5.21";
+  version = "0.5.22";
 
   src = fetchFromGitHub {
     owner = "Bali10050";
     repo = "Darkly";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-1WErpDYTlMW/889Efe3OUM3uwt5w+EttjOGoBolBZvE=";
+    hash = "sha256-m3UMp3dJfGptOR8WDGYgaHfax7Wpad0wKfOI8xZLC1s=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/dd/ddns-go/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule rec {
   pname = "ddns-go";
-  version = "6.12.0";
+  version = "6.12.1";
 
   src = fetchFromGitHub {
     owner = "jeessy2";
     repo = "ddns-go";
     rev = "v${version}";
-    hash = "sha256-6syI3XQNiERqxHUWmquNGHyKHymVkVgD8Yh2iZoek4g=";
+    hash = "sha256-7NDuC7MshPXEekEPo4DL2ww6HfWPdHhPa4a979a4NJY=";
   };
 
   vendorHash = "sha256-0HH5KkMVQzD/xyaue9Sh6CE5dI/aZJMwei7ynhzp9dc=";

pkgs/by-name/en/enry/package.nix

@@ -0,0 +1,57 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  versionCheckHook,
+  writeScript,
+}:
+
+let
+  commitHash = "f10711437bfbb25b15506eb69dde24bb7decd222"; # matches tag release
+in
+buildGoModule (finalAttrs: {
+  pname = "enry";
+  version = "1.3.0";
+
+  src = fetchFromGitHub {
+    owner = "go-enry";
+    repo = "enry";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-JSYOCdWZnCM4Kq3EFkS7XZ5n0ahkR+A8omI4z1S45z8=";
+  };
+
+  vendorHash = "sha256-tUDhpeXlKpo1jnNyk0U3CcXroOlv7lHVUxc1wAnysG4=";
+
+  ldflags = [
+    "-X main.version=${finalAttrs.version}"
+    "-X main.commit=${commitHash}"
+  ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
+  passthru.updateScript = writeScript "update-enry" ''
+    #!/usr/bin/env nix-shell
+    #!nix-shell -i bash -p curl jq nix-update
+
+    set -eu -o pipefail
+
+    gh_metadata="$(curl -sS https://api.github.com/repos/go-enry/enry/tags)"
+    version="$(echo "$gh_metadata" | jq -r '.[] | .name' | sort --version-sort | tail -1)"
+    commit_hash="$(echo "$gh_metadata" | jq -r --arg ver "$version" '.[] | select(.name == $ver).commit.sha')"
+
+    filename="$(nix-instantiate --eval -E "with import ./. {}; (builtins.unsafeGetAttrPos \"version\" enry).file" | tr -d '"')"
+    sed -i "s/commitHash = \"[^\"]*\"/commitHash = \"$commit_hash\"/" $filename
+
+    nix-update enry
+  '';
+
+  meta = {
+    description = "Programming language detector based on go-enry/go-enry/v2 library";
+    mainProgram = "enry";
+    homepage = "https://github.com/go-enry/enry";
+    changelog = "https://github.com/go-enry/enry/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ dvcorreia ];
+  };
+})

pkgs/by-name/fi/firefoxpwa/package.nix

@@ -1,5 +1,6 @@
 {
   extraLibs ? [ ],
+  firefoxRuntime ? firefox-unwrapped,
 
   lib,
   fetchFromGitHub,
@@ -84,9 +85,13 @@ rustPlatform.buildRustPackage rec {
   postInstall = ''
     # Runtime
     mkdir -p $out/share/firefoxpwa
-    cp -Lr ${firefox-unwrapped}/lib/firefox $out/share/firefoxpwa/runtime
+    cp -Lr ${firefoxRuntime}/lib/${firefoxRuntime.binaryName} $out/share/firefoxpwa/runtime
     chmod -R +w $out/share/firefoxpwa
 
+    if [ "${firefoxRuntime.binaryName}" != "firefox" ]; then
+      ln $out/share/firefoxpwa/runtime/${firefoxRuntime.binaryName} $out/share/firefoxpwa/runtime/firefox
+    fi
+
     # UserChrome
     cp -r userchrome $out/share/firefoxpwa
 

pkgs/by-name/fo/folder-color-switcher/package.nix

@@ -8,14 +8,14 @@
 
 stdenvNoCC.mkDerivation {
   pname = "folder-color-switcher";
-  version = "1.6.7";
+  version = "1.6.8";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "folder-color-switcher";
     # They don't really do tags, this is just a named commit.
-    rev = "5bd94d3ffdb9585c09832f0beabb14f0e67e8d58";
-    hash = "sha256-77+b7yVcTvBjtmXGOUIrh88IaxvCiBNM+hbZoN0+zoI=";
+    rev = "d135f29d688d89a0e7b48acec9e08738c7976ee1";
+    hash = "sha256-3EFnQxTYcJLGjfAzZNS7pgVDUwuU3juOAwUyaKOHemI=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/gi/github-desktop/package.nix

@@ -100,7 +100,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     homepage = "https://desktop.github.com/";
     license = lib.licenses.mit;
     mainProgram = "github-desktop";
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
   };

pkgs/by-name/gn/gnome-online-accounts-gtk/package.nix

@@ -15,13 +15,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-online-accounts-gtk";
-  version = "3.50.6";
+  version = "3.50.7";
 
   src = fetchFromGitHub {
     owner = "xapp-project";
     repo = "gnome-online-accounts-gtk";
     rev = finalAttrs.version;
-    hash = "sha256-/d6ezujW/yeZV95zv/12ttUEUliZARtEGFoCXe6Dp/I=";
+    hash = "sha256-CFPaCx3tfOIoovm9AXofBdZzl/Rxiz5RVOrVKCuxZbI=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/go/go-ios/package.nix

@@ -5,6 +5,8 @@
   nix-update-script,
   pkg-config,
   libusb1,
+  iproute2,
+  net-tools,
 }:
 
 buildGoModule rec {
@@ -25,6 +27,14 @@ buildGoModule rec {
     "restapi"
   ];
 
+  postPatch = ''
+    substituteInPlace ncm/linux_commands.go \
+      --replace-fail "ip " "${lib.getExe' iproute2 "ip"} "
+
+    substituteInPlace ios/tunnel/tunnel.go \
+      --replace-fail "ifconfig" "${lib.getExe' net-tools "ifconfig"}"
+  '';
+
   nativeBuildInputs = [
     pkg-config
   ];

pkgs/by-name/go/gotlsaflare/package.nix

@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "gotlsaflare";
-  version = "2.7.2";
+  version = "2.7.3";
 
   src = fetchFromGitHub {
     owner = "Stenstromen";
     repo = "gotlsaflare";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-MryKBTFTdjoi8Bn39kCcyCVsj/C/lPJUaEgliLkHXuQ=";
+    hash = "sha256-OmjbXek62i0CrbwIXR13tDrZlWPMwO10ciUQ5kTd3gU=";
   };
 
-  vendorHash = "sha256-ZC1OD7TYE0CL8Vsopgeh+K13Rcm0mI9I2BpdDNpDSWE=";
+  vendorHash = "sha256-BAN2KzzmAk8dYvD1Uw94junawlvmVbSx6AQ7flxn18g=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/ha/halloy/package.nix

@@ -18,16 +18,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "halloy";
-  version = "2025.2";
+  version = "2025.8";
 
   src = fetchFromGitHub {
     owner = "squidowl";
     repo = "halloy";
     tag = version;
-    hash = "sha256-ijSUGiAowxSqYwH3OxSWiGvm99n88ETJxAFn5x4m/BE=";
+    hash = "sha256-Jtr1/MDR6pAaagVdhR2HZM91PTEPaQkDYMmALIWkHFU=";
   };
 
-  cargoHash = "sha256-j4lx3sSQZ7BKl+d5nFJQkMhgQWjn0xkNNCWMlbKLwVQ=";
+  cargoHash = "sha256-HseKOow4BjiPsGmwslZqBlvCoreY2BcnBu3BHg5965c=";
 
   nativeBuildInputs = [
     copyDesktopItems

pkgs/by-name/hy/hypnotix/package.nix

@@ -15,13 +15,13 @@
 
 stdenv.mkDerivation rec {
   pname = "hypnotix";
-  version = "5.0";
+  version = "5.1";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "hypnotix";
     rev = version;
-    hash = "sha256-nBt+eGzUQaRO2IaEkvhdEZcVuKpZFEqIYSdVKSO1l4M=";
+    hash = "sha256-XXfZDFvHrGk+RFSQPldI/G4xhPm8lafZyBVCDtzvyoI=";
   };
 
   patches = [

pkgs/by-name/ie/ieda/package.nix

@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchgit,
-  fetchFromGitHub,
   fetchpatch,
   callPackages,
   cmake,
@@ -24,22 +23,13 @@
   onnxruntime,
 }:
 let
-  glog-lock = glog.overrideAttrs (oldAttrs: rec {
-    version = "0.6.0";
-    src = fetchFromGitHub {
-      owner = "google";
-      repo = "glog";
-      rev = "v${version}";
-      sha256 = "sha256-xqRp9vaauBkKz2CXbh/Z4TWqhaUtqfbsSlbYZR/kW9s=";
-    };
-  });
   rootSrc = stdenv.mkDerivation {
     pname = "iEDA-src";
-    version = "2025-05-30";
+    version = "2025-06-30";
     src = fetchgit {
       url = "https://gitee.com/oscc-project/iEDA";
-      rev = "3096147fcea491c381da2928be6fb5a12c2d97b7";
-      sha256 = "sha256-rPkcE+QFMlEuwwJ/QBgyLTXP5lWLQPj5SOlZysJ6WTI=";
+      rev = "689f172c726c3934d49577f09adb5b09804f11e5";
+      sha256 = "sha256-JJePIn+NUScb+3o67vT31BoKHcfBuE9osV4SrcicFds=";
     };
 
     patches = [
@@ -47,15 +37,15 @@ let
       # and remove some libs or path that they hard-coded in the source code.
       # Should be removed after we upstream these changes.
       (fetchpatch {
-        url = "https://github.com/Emin017/iEDA/commit/e899b432776010048b558a939ad9ba17452cb44f.patch";
-        hash = "sha256-fLKsb/dgbT1mFCWEldFwhyrA1HSkKGMAbAs/IxV9pwM=";
+        url = "https://github.com/Emin017/iEDA/commit/c17e42a3673afd9c7ace9374f85290a85354bb78.patch";
+        hash = "sha256-xa1oSy3OZ5r0TigGywzpVPvpPnA7L6RIcNktfFen4AA=";
       })
       # This patch is to fix the compile error on the newer version of gcc/g++
-      # which is caused by some incorrect declarations and usages of the Boost library.
+      # We remove some forward declarations which are not allowed in newer versions of gcc/g++
       # Should be removed after we upstream these changes.
       (fetchpatch {
-        url = "https://github.com/Emin017/iEDA/commit/3a2c7e27a5bd349d72b3a7198358cd640c678802.patch";
-        hash = "sha256-2YROkQ92jGOJZr+4+LrwRJKxhA39Bypb1xFdo6aftu8=";
+        url = "https://github.com/Emin017/iEDA/commit/f5464cc40a2c671c5d405f16b509e2fa8d54f7f1.patch";
+        hash = "sha256-uVMV/CjkX9oLexHJbQvnEDOET/ZqsEPreI6EQb3Z79s=";
       })
     ];
 
@@ -76,7 +66,7 @@ let
 in
 stdenv.mkDerivation {
   pname = "iEDA";
-  version = "0-unstable-2025-05-30";
+  version = "0-unstable-2025-06-30";
 
   src = rootSrc;
 
@@ -107,7 +97,7 @@ stdenv.mkDerivation {
     rustpkgs.verilog-parser
     rustpkgs.liberty-parser
     gtest
-    glog-lock
+    glog
     gflags
     boost
     onnxruntime

pkgs/by-name/ja/jailer/package.nix

@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "jailer";
-  version = "16.7";
+  version = "16.7.1";
 
   src = fetchFromGitHub {
     owner = "Wisser";
     repo = "Jailer";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-lHBthOZu4utJd2X8cTJ7HCp8zLs0su78RIdf/QBbSJk=";
+    hash = "sha256-76l8f8CKUxbpR3xeWtbcUt67c44W/2Kv9tKDfvHBCLo=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/js/json-schema-catalog-rs/package.nix

@@ -1,6 +1,7 @@
 {
   callPackage,
   fetchFromGitHub,
+  jsonSchemaCatalogs,
   lib,
   nix-update-script,
   rustPlatform,
@@ -28,6 +29,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
   passthru = {
     tests = {
       run = callPackage ./test-run.nix { json-schema-catalog-rs = finalAttrs.finalPackage; };
+      jsonSchemaCatalogs = jsonSchemaCatalogs.tests.override {
+        json-schema-catalog-rs = finalAttrs.finalPackage;
+      };
     };
 
     updateScript = nix-update-script { };

pkgs/by-name/ju/justbuild/package.nix

@@ -33,13 +33,13 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "justbuild";
-  version = "1.6.1";
+  version = "1.6.2";
 
   src = fetchFromGitHub {
     owner = "just-buildsystem";
     repo = "justbuild";
     rev = "refs/tags/v${version}";
-    hash = "sha256-WtdzrtTqeDN0N50KLry95ijYfCP8xIY+ZSRtVbWLw/g=";
+    hash = "sha256-C2Tv/R8bIKAG0E1vcZyS2fs2Pr26+luinPsjCqbboR0=";
   };
 
   bazelapi = fetchurl {

pkgs/by-name/ka/kardolus-chatgpt-cli/package.nix

@@ -0,0 +1,48 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  makeWrapper,
+}:
+
+buildGoModule (finalAttrs: {
+  # "chatgpt-cli" is taken by another package with the same upsteam name.
+  # To keep "pname" and "package attribute name" identical, the owners name (kardolus) gets prefixed as identifier.
+  pname = "kardolus-chatgpt-cli";
+  version = "1.8.4";
+
+  src = fetchFromGitHub {
+    owner = "kardolus";
+    repo = "chatgpt-cli";
+    rev = "v${finalAttrs.version}";
+    hash = "sha256-vr61SrIYun6KUB9u+ZtUmdGO/ks2aQnAMAQ0g6QPaho=";
+  };
+
+  vendorHash = null;
+  # The tests of kardolus/chatgpt-cli require an OpenAI API Key to be present in the environment,
+  # (e.g. https://github.com/kardolus/chatgpt-cli/blob/v1.8.4/test/contract/contract_test.go#L35)
+  # which will not be the case in the pipeline.
+  # Therefore, tests must be skipped.
+  doCheck = false;
+
+  nativeBuildInputs = [ makeWrapper ];
+  postFixup = ''
+    wrapProgram $out/bin/chatgpt \
+      --run "mkdir -p ~/.chatgpt-cli" \
+      --set-default CHATGPT_CLI_HISTORY_DIR ~/.chatgpt-cli
+  '';
+
+  meta = {
+    description = "Command-line interface for ChatGPT";
+    longDescription = ''
+      ChatGPT CLI is a versatile tool for interacting with LLMs through OpenAI, Azure, and other popular providers like Perplexity AI and Llama.
+      It supports prompt files, history tracking, and live data injection via MCP (Model Context Protocol),
+      making it ideal for both casual users and developers seeking a powerful, customizable GPT experience.
+    '';
+    homepage = "https://github.com/kardolus/chatgpt-cli";
+    platforms = lib.platforms.unix;
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ralleka ];
+    mainProgram = "chatgpt";
+  };
+})

pkgs/by-name/ky/kyverno/package.nix

@@ -9,13 +9,13 @@
 
 buildGoModule rec {
   pname = "kyverno";
-  version = "1.14.4";
+  version = "1.15.0";
 
   src = fetchFromGitHub {
     owner = "kyverno";
     repo = "kyverno";
     rev = "v${version}";
-    hash = "sha256-hOYNHJfK3EMe6oC3ucymcK8uyu07asRZjYJxm4fN6x8=";
+    hash = "sha256-NGyNB+N80oXxgL3bg/E1DmeRYYNxKsDLIjfUwtVGk7A=";
   };
 
   ldflags = [
@@ -26,7 +26,7 @@ buildGoModule rec {
     "-X github.com/kyverno/kyverno/pkg/version.BuildTime=1970-01-01_00:00:00"
   ];
 
-  vendorHash = "sha256-HdHK70AELKdeVSyP1S2yHZad3vooRDDdxAOnzN6s0nQ=";
+  vendorHash = "sha256-AaQ4/yrLNqLFBVRuDVjRHiNE4Bxb0kTUG7WeNw+gpZo=";
 
   subPackages = [ "cmd/cli/kubectl-kyverno" ];
 

pkgs/by-name/la/lazysql/package.nix

@@ -11,13 +11,13 @@
 
 buildGoModule rec {
   pname = "lazysql";
-  version = "0.3.8";
+  version = "0.4.0";
 
   src = fetchFromGitHub {
     owner = "jorgerojas26";
     repo = "lazysql";
     rev = "v${version}";
-    hash = "sha256-aRySSDNqxdu4kZRohvG/PmOK3Uipvnw9DctJ8h5vl2g=";
+    hash = "sha256-XQjdMmHVrNzfQN/uFQFxGK9LwnRh1IkAvRQSDcAYWXo=";
   };
 
   vendorHash = "sha256-LLOUTml/mz7edCUy82k+S5PfpFovgUTQr0BoQQXiVGs=";

pkgs/by-name/li/libarchive-qt/package.nix

@@ -45,7 +45,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "archiver";
     homepage = "https://gitlab.com/marcusbritanicus/libarchive-qt";
     license = lib.licenses.lgpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/by-name/li/lightdm-slick-greeter/package.nix

@@ -22,13 +22,13 @@
 
 stdenv.mkDerivation rec {
   pname = "lightdm-slick-greeter";
-  version = "2.2.0";
+  version = "2.2.1";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "slick-greeter";
     rev = version;
-    hash = "sha256-xuNUCS8v8XXidXNT/DP+sckdadUTeflFK34ZDpF1iyc=";
+    hash = "sha256-AErY8Gy1AkYY/vpXoSE8zhyJd/nboMw+9BO3j6N7CNc=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/lo/loco/package.nix

@@ -6,14 +6,14 @@
 }:
 rustPlatform.buildRustPackage rec {
   pname = "loco";
-  version = "0.16.1";
+  version = "0.16.2";
 
   src = fetchCrate {
     inherit pname version;
-    hash = "sha256-5mg2caScI1sxKtadw8IP/yxDOdPN+RRqHXdsWr2R0FY=";
+    hash = "sha256-yctOGUfKd1zaIArtHESYEr1q79ZrJqL7H6bvpAFrE+8=";
   };
 
-  cargoHash = "sha256-SFNaTo6fV7xhmkqK8SuFOjXeDDYN4+KTbF9DfpEX+dI=";
+  cargoHash = "sha256-IdYicJ7ZIoVOQU91S8yIPYGeY+DaeAMztGOmriTGW38=";
 
   #Skip trycmd integration tests
   checkFlags = [ "--skip=cli_tests" ];

pkgs/by-name/ls/lsd2dsl/package.nix

@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch,
   makeDesktopItem,
   copyDesktopItems,
   cmake,
@@ -15,17 +16,24 @@
   qt6,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "lsd2dsl";
   version = "0.6.0";
 
   src = fetchFromGitHub {
     owner = "nongeneric";
     repo = "lsd2dsl";
-    rev = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-0UsxDNpuWpBrfjh4q3JhZnOyXhHatSa3t/cApiG2JzM=";
   };
 
+  patches = [
+    (fetchpatch {
+      url = "https://github.com/nongeneric/lsd2dsl/commit/bbda5be1b76a4a44804483d00c07d79783eceb6b.patch";
+      hash = "sha256-7is83D1cMBArXVLe5TP7D7lUcwnTMeXjkJ+cbaH5JQk=";
+    })
+  ];
+
   postPatch = ''
     substituteInPlace CMakeLists.txt --replace "-Werror" ""
   '';
@@ -48,14 +56,14 @@ stdenv.mkDerivation rec {
     qt6.qtwebengine
   ];
 
-  env.NIX_CFLAGS_COMPILE = lib.optionalString stdenv.cc.isClang "-Wno-int-conversion";
+  env.NIX_CFLAGS_COMPILE = "-Wno-int-conversion";
 
   desktopItems = lib.singleton (makeDesktopItem {
     name = "lsd2dsl";
     exec = "lsd2dsl-qtgui";
     desktopName = "lsd2dsl";
     genericName = "lsd2dsl";
-    comment = meta.description;
+    comment = finalAttrs.meta.description;
     categories = [
       "Dictionary"
       "FileTools"
@@ -67,14 +75,14 @@ stdenv.mkDerivation rec {
     install -Dm755 console/lsd2dsl gui/lsd2dsl-qtgui -t $out/bin
   '';
 
-  meta = with lib; {
+  meta = {
     homepage = "https://rcebits.com/lsd2dsl/";
     description = "Lingvo dictionaries decompiler";
     longDescription = ''
       A decompiler for ABBYY Lingvo’s proprietary dictionaries.
     '';
-    license = licenses.mit;
-    maintainers = with maintainers; [ sikmir ];
-    platforms = platforms.unix;
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ sikmir ];
+    platforms = lib.platforms.unix;
   };
-}
+})

pkgs/by-name/ma/mangojuice/package.nix

@@ -25,13 +25,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "mangojuice";
-  version = "0.8.5";
+  version = "0.8.6";
 
   src = fetchFromGitHub {
     owner = "radiolamp";
     repo = "mangojuice";
     tag = finalAttrs.version;
-    hash = "sha256-pqtzNJBMoKbF48JoIrbcJX78S+e3tb+otiG85YbBKYk=";
+    hash = "sha256-EVjKO+03o8es2t2/K1QuUIhXey7+2VNF37yXiMrv4o4=";
   };
 
   patches = [

pkgs/by-name/me/mealie/mealie-frontend.nix

@@ -1,12 +1,17 @@
 src: version:
 {
   lib,
+  fetchFromGitHub,
   fetchYarnDeps,
-  nodejs_20,
+  dart-sass,
+  nodePackages_latest,
   fixup-yarn-lock,
   stdenv,
   yarn,
 }:
+let
+  nodejs = nodePackages_latest.nodejs;
+in
 stdenv.mkDerivation {
   name = "mealie-frontend";
   inherit version;
@@ -14,27 +19,29 @@ stdenv.mkDerivation {
 
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = "${src}/frontend/yarn.lock";
-    hash = "sha256-a2kIOQHaMzaMWId6+SSYN+SPQM2Ipa+F1ztFZgo3R6A=";
+    hash = "sha256-712mc/xksjXgnc0inthxE+ztSDl/4107oXw3vKcZD2g=";
   };
 
   nativeBuildInputs = [
     fixup-yarn-lock
-    nodejs_20
-    (yarn.override { nodejs = nodejs_20; })
+    nodejs
+    (yarn.override { inherit nodejs; })
   ];
 
   configurePhase = ''
     runHook preConfigure
 
+    sed -i 's+"@nuxt/fonts",+// NUXT FONTS DISABLED+g' nuxt.config.ts
+
     export HOME=$(mktemp -d)
     yarn config --offline set yarn-offline-mirror "$yarnOfflineCache"
     fixup-yarn-lock yarn.lock
-    # TODO: Remove --ignore-engines once upstream supports nodejs_20+
-    # https://github.com/mealie-recipes/mealie/issues/5400
-    # https://github.com/mealie-recipes/mealie/pull/5184
-    yarn install --frozen-lockfile --offline --no-progress --non-interactive --ignore-engines
+    yarn install --frozen-lockfile --offline --no-progress --non-interactive
     patchShebangs node_modules/
 
+    mkdir -p node_modules/sass-embedded/dist/lib/src/vendor/dart-sass
+    ln -s ${dart-sass}/bin/dart-sass node_modules/sass-embedded/dist/lib/src/vendor/dart-sass/sass
+
     runHook postConfigure
   '';
 
@@ -50,7 +57,7 @@ stdenv.mkDerivation {
 
   installPhase = ''
     runHook preInstall
-    mv dist $out
+    mv .output/public $out
     runHook postInstall
   '';
 

pkgs/by-name/me/mealie/package.nix

@@ -11,12 +11,12 @@
 }:
 
 let
-  version = "2.8.0";
+  version = "3.0.2";
   src = fetchFromGitHub {
     owner = "mealie-recipes";
     repo = "mealie";
     tag = "v${version}";
-    hash = "sha256-0LUT7OdYoOZTdR/UXJO2eL2Afo2Y7GjBPIrjWUt205E=";
+    hash = "sha256-0GlHfyoVEqmfTDSN9BGXrLRkStRjWjv2qzZac2oYu7Q=";
   };
 
   frontend = callPackage (import ./mealie-frontend.nix src version) { };
@@ -24,7 +24,6 @@ let
   pythonpkgs = python3Packages;
   python = pythonpkgs.python;
 in
-
 pythonpkgs.buildPythonApplication rec {
   pname = "mealie";
   inherit version src;
@@ -46,9 +45,7 @@ pythonpkgs.buildPythonApplication rec {
     apprise
     authlib
     bcrypt
-    extruct
     fastapi
-    gunicorn
     html2text
     httpx
     ingredient-parser-nlp
@@ -58,12 +55,12 @@ pythonpkgs.buildPythonApplication rec {
     openai
     orjson
     paho-mqtt
-    pillow
     pillow-heif
     psycopg2
     pydantic-settings
     pyhumps
     pyjwt
+    python-dateutil
     python-dotenv
     python-ldap
     python-multipart

pkgs/by-name/me/media-downloader/package.nix

@@ -16,13 +16,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "media-downloader";
-  version = "5.4.1";
+  version = "5.4.2";
 
   src = fetchFromGitHub {
     owner = "mhogomchungu";
     repo = "media-downloader";
     rev = finalAttrs.version;
-    hash = "sha256-J9TXjN/u/I8m5Boa8SE0uI5iExVEm3yCRQ6c0fzW+jM=";
+    hash = "sha256-QW6wPljY259baHHucJjIBihinocafNALfLVN4s/gN1Q=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/mi/mint-y-icons/package.nix

@@ -10,13 +10,13 @@
 
 stdenvNoCC.mkDerivation rec {
   pname = "mint-y-icons";
-  version = "1.8.4";
+  version = "1.8.5";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "mint-y-icons";
     rev = version;
-    hash = "sha256-ftiV9l7hTmWdtw36Z2GKpJZuRwQQ3MQWYIgb62VBde0=";
+    hash = "sha256-p+VnEsmFcPyyLLh2bC4zKPUaa/qQzZdx9DE9y+M3EMI=";
   };
 
   propagatedBuildInputs = [
@@ -31,12 +31,6 @@ stdenvNoCC.mkDerivation rec {
 
   dontDropIconThemeCache = true;
 
-  postPatch = ''
-    # Breaks gtk-update-icon-cache
-    # https://github.com/linuxmint/mint-y-icons/issues/494
-    find usr/share/icons/Mint-Y/apps/ -type l -name "1AC2_Battle.net Launcher.0.png" -delete
-  '';
-
   installPhase = ''
     runHook preInstall
 

pkgs/by-name/mo/moar/package.nix

@@ -7,16 +7,16 @@
 
 buildGoModule rec {
   pname = "moar";
-  version = "1.32.5";
+  version = "1.33.0";
 
   src = fetchFromGitHub {
     owner = "walles";
     repo = "moar";
     rev = "v${version}";
-    hash = "sha256-EuVEpCHfyvd6D/eb1NGFS1ENLyX8u/m2FHrgZcbI3So=";
+    hash = "sha256-+06cup9iG+iMyluQPzUQ7vrnFHoeU4KNHGra3AsRRw0=";
   };
 
-  vendorHash = "sha256-eKL6R2Xmj6JOwXGuJJdSGwobEzDzZ0FUD8deO2d1unc=";
+  vendorHash = "sha256-ComKeqnw1PvDaCRVXfInRjSzhyZWGkD/hp5piwhwxds=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/mo/models-dev/package.nix

@@ -9,20 +9,20 @@
 
 let
   models-dev-node-modules-hash = {
-    "aarch64-darwin" = "sha256-2EVW5zQTcqH9zBYAegWj/Wtb0lYHZwA7Bbqs3gRjcx0=";
-    "aarch64-linux" = "sha256-nJgFnszwvknqA21uaqlGQQ1x+4ztKx0/tEvcNrv1LJg=";
-    "x86_64-darwin" = "sha256-Un6UxmvsmBuDdUwcWnu4qb0nPN1V1PFJi4VGVkNh/YU=";
-    "x86_64-linux" = "sha256-nlL+Ayacxz4fm404cABORSVGQcNxb3cB4mOezkrI90U=";
+    "aarch64-darwin" = "sha256-099Y+7cLtSQ0s71vxUGEochQSpCv1hbkwYbWx/eOvhY=";
+    "aarch64-linux" = "sha256-fOmp7UyszqpR04f5TW0pU96IO7euaxX9fBMtwoqIMY4=";
+    "x86_64-darwin" = "sha256-OsJDPCsEAAcXzgI/QrtfXXb2jc82pp6ldHuA4Ps8OpM=";
+    "x86_64-linux" = "sha256-Enx27ag7D0Qeb/ss/7zTQ1XSukyPzOMMK7pTYHqQUMs=";
   };
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "models-dev";
-  version = "0-unstable-2025-07-31";
+  version = "0-unstable-2025-08-01";
   src = fetchFromGitHub {
     owner = "sst";
     repo = "models.dev";
-    rev = "60f2d80bc087ded768a8c6c36981f43822871c78";
-    hash = "sha256-mE+ptgTETbF/QIhMwOOVkbT9Jeus8ceGbninagPqgeU=";
+    rev = "2e3f718c40e8868c2487b7275131b2e054feb462";
+    hash = "sha256-P7Q03I68ih2eKNfPkpzkIuvKcHLsrk8yxWbFCw74Pjg=";
   };
 
   node_modules = stdenvNoCC.mkDerivation {

pkgs/by-name/ne/nengo-gui/package.nix

@@ -26,6 +26,6 @@ python3Packages.buildPythonPackage rec {
     description = "Nengo interactive visualizer";
     homepage = "https://nengo.ai/";
     license = licenses.unfreeRedistributable;
-    maintainers = with maintainers; [ arjix ];
+    maintainers = with maintainers; [ ];
   };
 }

pkgs/by-name/ne/nexusmods-app/deps.json

@@ -361,58 +361,58 @@
   },
   {
     "pname": "GameFinder",
-    "version": "4.7.3",
-    "hash": "sha256-tUUvWC8/HTFvESqSPN2HMnGkf6OroDBpHCbqo1ThD/8="
+    "version": "4.9.0",
+    "hash": "sha256-cuoMMfh5adQgVh9ZNqZ3mF9bLoArXRuzzZ6TIdFkh+M="
   },
   {
     "pname": "GameFinder.Common",
-    "version": "4.7.3",
-    "hash": "sha256-lPTPiywObx6SEaBKuL25+eLdfVHuWb1x14Q7aMpXLMQ="
+    "version": "4.9.0",
+    "hash": "sha256-1PXCCLN+TjDtnMZo8NnxE3MKJb1CUkRNYiD1SeWkdTE="
   },
   {
     "pname": "GameFinder.Launcher.Heroic",
-    "version": "4.7.3",
-    "hash": "sha256-Rp9I0XfW4KhyOSgyPzhR9aHYVcLDwUnpmvTjowviWC8="
+    "version": "4.9.0",
+    "hash": "sha256-g0suL5aVnDXFltlKzuds8PQxVCEtNsNdl52owlSg0jg="
   },
   {
     "pname": "GameFinder.RegistryUtils",
-    "version": "4.7.3",
-    "hash": "sha256-Z4IbxyMx6apZt9SYfDFvWD8I/qSP2S4kEz8hXym96KY="
+    "version": "4.9.0",
+    "hash": "sha256-mjGWEwpbxNdiljl7x+kWjnVysNBwcHC/zv9Z92HN5CM="
   },
   {
     "pname": "GameFinder.StoreHandlers.EADesktop",
-    "version": "4.7.3",
-    "hash": "sha256-RbPZayuG9OJXI1aSL2d5vfjfXlEAWFz9aZrXDXX6jhM="
+    "version": "4.9.0",
+    "hash": "sha256-HqkyZh+eys58KZOz8bik4CGtCui9V1aIyQQ6mLhsGgw="
   },
   {
     "pname": "GameFinder.StoreHandlers.EGS",
-    "version": "4.7.3",
-    "hash": "sha256-99DbRfzESJZAUDd3yREb8M6Mgn8dztNQqBPyR1bsST4="
+    "version": "4.9.0",
+    "hash": "sha256-Dp2EUsWbjXKOfZF8nzWWLESgt7VadvF65iqXE8LZ45g="
   },
   {
     "pname": "GameFinder.StoreHandlers.GOG",
-    "version": "4.7.3",
-    "hash": "sha256-u0Vm9k8XAkzOdW2U6nzuRPWgMxj3QwkvFc5S4c8A/u4="
+    "version": "4.9.0",
+    "hash": "sha256-F+sAOeSdIV/85mkhWfuszSPnNEOdJB+Wul601rAVaoQ="
   },
   {
     "pname": "GameFinder.StoreHandlers.Origin",
-    "version": "4.7.3",
-    "hash": "sha256-f/saANmx8zYrZ+G3xbsy2w7mQwC0Jmb5WpUSlZNyzJU="
+    "version": "4.9.0",
+    "hash": "sha256-l1WIlBYoA04eK0k1EU8C46MdEeNXix5MIWCo67Dzhlo="
   },
   {
     "pname": "GameFinder.StoreHandlers.Steam",
-    "version": "4.7.3",
-    "hash": "sha256-5WtdyR1/xX+Ra5ldlvM0leIgc8gTGaPKAFOC/KTHGk8="
+    "version": "4.9.0",
+    "hash": "sha256-Cw7eMevnbyJz3N4jUfWZ9SsQvMEbtFKHgc6HPnDD3+Y="
   },
   {
     "pname": "GameFinder.StoreHandlers.Xbox",
-    "version": "4.7.3",
-    "hash": "sha256-Z9RpXomR53mLhD0WH7pCYxmnQIAsGiBVqUgs4I0ZO4w="
+    "version": "4.9.0",
+    "hash": "sha256-/lkl+POQgiwlYxNJ4h4Dtp7w+hI5YUDv1sizAk8FCzc="
   },
   {
     "pname": "GameFinder.Wine",
-    "version": "4.7.3",
-    "hash": "sha256-PO8aXHEvCxBQq92GyPl3b//s4MTCU7T8mvryS4p0Hsg="
+    "version": "4.9.0",
+    "hash": "sha256-ER82DUiTnm85m65rIK7XbbIiiD2cvuu7cjF133g6yic="
   },
   {
     "pname": "Gee.External.Capstone",

pkgs/by-name/ne/nexusmods-app/package.nix

@@ -23,12 +23,12 @@ let
 in
 buildDotnetModule (finalAttrs: {
   inherit pname;
-  version = "0.13.4";
+  version = "0.14.3";
 
   src = fetchgit {
     url = "https://github.com/Nexus-Mods/NexusMods.App.git";
     rev = "refs/tags/v${finalAttrs.version}";
-    hash = "sha256-Ub6HjZChOhRUDYQ2TAnrwOtrW6ahP+k74vCAmLkYABA=";
+    hash = "sha256-B2gIRVeaTwYEnESMovwEJgdmLwRNA7/nJs7opNhiyyA=";
     fetchSubmodules = true;
   };
 
@@ -147,6 +147,9 @@ buildDotnetModule (finalAttrs: {
     # Fails attempting to fetch SMAPI version data from github:
     # https://github.com/erri120/smapi-versions/raw/main/data/game-smapi-versions.json
     "NexusMods.Games.StardewValley.Tests.SMAPIGameVersionDiagnosticEmitterTests.Test_TryGetLastSupportedSMAPIVersion"
+
+    # Fails attempting to fetch game info from NexusMods API
+    "NexusMods.Networking.NexusWebApi.Tests.LocalMappingCacheTests.Test_Parse"
   ]
   ++ lib.optionals (!_7zz.meta.unfree) [
     "NexusMods.Games.FOMOD.Tests.FomodXmlInstallerTests.InstallsFilesSimple_UsingRar"

pkgs/by-name/op/openapi-python-client/package.nix

@@ -11,7 +11,7 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "openapi-python-client";
-  version = "0.25.2";
+  version = "0.25.3";
   pyproject = true;
 
   src = fetchFromGitHub {
@@ -19,7 +19,7 @@ python3Packages.buildPythonApplication rec {
     owner = "openapi-generators";
     repo = "openapi-python-client";
     tag = "v${version}";
-    hash = "sha256-B+GVv1Q/OwbtHDMGNYkPkZgvHqncrAkdvZ6ECwhIbLE=";
+    hash = "sha256-6lGzAMt7c811u3Zooyn+HftoJNK3DHyjSO6lnOoDUus=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/op/openfreebuds/package.nix

@@ -0,0 +1,70 @@
+{
+  fetchFromGitHub,
+  lib,
+  nix-update-script,
+  python3Packages,
+  qt6,
+  qt6Packages,
+}:
+python3Packages.buildPythonApplication rec {
+  name = "openfreebuds";
+  version = "0.17.1";
+
+  src = fetchFromGitHub {
+    owner = "melianmiko";
+    repo = "OpenFreebuds";
+    tag = "v${version}";
+    hash = "sha256-y89BTKk14P/2kkYo63i9HgAdenzCVVnNArDsTmo4bPU=";
+  };
+
+  pyproject = true;
+
+  pythonRelaxDeps = [ "psutil" ];
+
+  build-system = with python3Packages; [
+    pdm-backend
+    pyqt6
+  ];
+
+  nativeBuildInputs = [
+    qt6Packages.wrapQtAppsHook
+    qt6Packages.qttools
+  ];
+
+  buildInputs = [ qt6.qtbase ];
+
+  dependencies = with python3Packages; [
+    aiocmd
+    aiohttp
+    dbus-next
+    pillow
+    psutil
+    pynput
+    pyqt6
+    qasync
+  ];
+
+  preBuild = ''
+    find openfreebuds_qt/designer -name "*.ui" | while read ui_file; do
+      py_file="''${ui_file%.ui}.py"
+      pyuic6 "$ui_file" -o "$py_file"
+    done
+
+    lrelease openfreebuds_qt/assets/i18n/*.ts
+  '';
+
+  preFixup = ''
+    makeWrapperArgs+=("''${qtWrapperArgs[@]}")
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    changelog = "https://github.com/melianmiko/OpenFreebuds/blob/${src.rev}/CHANGELOG.md";
+    description = "Open source app for HUAWEI FreeBuds (Linux + Windows)";
+    homepage = "https://github.com/melianmiko/OpenFreebuds";
+    license = lib.licenses.gpl3Only;
+    maintainers = [ lib.maintainers.znaniye ];
+    platforms = lib.platforms.linux;
+  };
+}

pkgs/by-name/pa/panoply/package.nix

@@ -8,11 +8,11 @@
 
 stdenvNoCC.mkDerivation rec {
   pname = "panoply";
-  version = "5.6.1";
+  version = "5.6.2";
 
   src = fetchurl {
     url = "https://www.giss.nasa.gov/tools/panoply/download/PanoplyJ-${version}.tgz";
-    hash = "sha256-r3hKlBRpZe9HJws24cqoiiQmFlH6Abn++w5yEudgKfI=";
+    hash = "sha256-DxQjIUv2Gkb3VnaorphMDTo+GlM/NoCZ6y/ogHSs07c=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

pkgs/by-name/ph/phraze/package.nix

@@ -10,18 +10,18 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "phraze";
-  version = "0.3.23";
+  version = "0.3.24";
 
   src = fetchFromGitHub {
     owner = "sts10";
     repo = "phraze";
     rev = "v${version}";
-    hash = "sha256-CQhzH6x8Fxx0ynHbLh8FTY7urbiXHrvTbMh+/TAwS2A=";
+    hash = "sha256-UURzpG5YZ7R/6vVOB/gtbFNNsVnOAsRwioKRLFxOH4c=";
   };
 
   doCheck = true;
 
-  cargoHash = "sha256-d4qj4rvH5CyHTH3RWDV6ADSGK/kz6yQLp3JjQdb6Wyo=";
+  cargoHash = "sha256-Uxbi/spmsPmxUNuLvEAWD1QLLBc/3zU/JoNyB7Dvlac=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/pi/pix/package.nix

@@ -34,13 +34,13 @@
 
 stdenv.mkDerivation rec {
   pname = "pix";
-  version = "3.4.5";
+  version = "3.4.6";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "pix";
     rev = version;
-    hash = "sha256-c/+NQHvscW/XE49Twmg1Rk1IfsjReCtRQWffobZtgTs=";
+    hash = "sha256-jlaqlA3akRNnBPTdtkWl+0NXqFbYw9uJKRfE/oTJMSg=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/pu/pureref/package.nix

@@ -1,6 +1,7 @@
 {
   lib,
   appimageTools,
+  makeWrapper,
   runCommand,
   curl,
   gnugrep,
@@ -32,11 +33,14 @@ appimageTools.wrapType1 {
   pname = "pureref";
   inherit version;
 
+  nativeBuildInputs = [ makeWrapper ];
+
   src = "${deb}/usr/bin/PureRef";
 
   extraInstallCommands = ''
     mv $out/bin/pureref $out/bin/PureRef
     cp -r ${deb}/usr/share $out
+    wrapProgram $out/bin/PureRef --set QT_QPA_PLATFORM xcb
   '';
 
   meta = with lib; {

pkgs/by-name/sa/sane-airscan/package.nix

@@ -15,7 +15,7 @@
 }:
 stdenv.mkDerivation rec {
   pname = "sane-airscan";
-  version = "0.99.35";
+  version = "0.99.36";
 
   nativeBuildInputs = [
     meson
@@ -36,7 +36,7 @@ stdenv.mkDerivation rec {
     owner = "alexpevzner";
     repo = "sane-airscan";
     rev = version;
-    sha256 = "sha256-sWBqYoeCEAIM5Gug+w4b4WZ8SwFrywqJVzo0nt69diA=";
+    sha256 = "sha256-vpTUZVD5ONcQeDnjPmQDY9Qf/bmDqZMnxA+I8ALOB7Y=";
   };
 
   meta = with lib; {

pkgs/by-name/sd/sdl_gamecontrollerdb/package.nix

@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "sdl_gamecontrollerdb";
-  version = "0-unstable-2025-07-18";
+  version = "0-unstable-2025-07-28";
 
   src = fetchFromGitHub {
     owner = "mdqinc";
     repo = "SDL_GameControllerDB";
-    rev = "dce2d3593c6a96a57716d13d58aa3b1d4965fe6f";
-    hash = "sha256-a1466lU8pCQJcJSIe3cEplUcbVnYoABvnm/QQhwsuDw=";
+    rev = "34765aa1de21323a873ab107a2a25e269e86b2e8";
+    hash = "sha256-K3XeSs6psR8RnDiYAKrVbx3KWQuJcD3RyZpOl+dn5Qw=";
   };
 
   dontBuild = true;

pkgs/by-name/sq/squid/package.nix

@@ -101,8 +101,10 @@ stdenv.mkDerivation (finalAttrs: {
     license = licenses.gpl2Plus;
     platforms = platforms.linux;
     maintainers = with maintainers; [ raskin ];
-    knownVulnerabilities = [
-      "Squid has multiple unresolved security vulnerabilities, for more information see https://megamansec.github.io/Squid-Security-Audit/"
-    ];
+    # In the past, it has been brought up that Squid had many security vulnerabilities
+    # (see https://megamansec.github.io/Squid-Security-Audit/). As of version 7.0,
+    # all of them have been solved, as tracked in their GitHub Security page:
+    # https://github.com/squid-cache/squid/security
+    knownVulnerabilities = [ ];
   };
 })

pkgs/by-name/st/sticky/package.nix

@@ -16,13 +16,13 @@
 
 stdenv.mkDerivation rec {
   pname = "sticky";
-  version = "1.25";
+  version = "1.26";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "sticky";
     rev = version;
-    hash = "sha256-lM9R89CNj8ZXeOciwn/ax9wcsf3J4yPmzrgAntp8Fsg=";
+    hash = "sha256-pwY5MO3xKgRQa1zYfcO02z6kOMofOFWqTUrwEYzkAEo=";
   };
 
   postPatch = ''

pkgs/by-name/st/stunner-webrtc/package.nix

@@ -0,0 +1,28 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "stunner";
+  version = "0.5.8";
+
+  src = fetchFromGitHub {
+    owner = "firefart";
+    repo = "stunner";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-A/k43ZOk/JIpCHBI1ygFBjmbDWWmLMIzuDbM6+8FKdw=";
+  };
+
+  vendorHash = "sha256-cXvHNn4BbVVUVgy5IwCe/K1ISV8CyDilJrNYEK2QFU8=";
+
+  meta = {
+    description = "Test and exploit STUN, TURN and TURN over TCP servers";
+    homepage = "https://github.com/firefart/stunner";
+    changelog = "https://github.com/firefart/stunner/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.cc-by-nc-sa-40;
+    maintainers = with lib.maintainers; [ hougo ];
+    mainProgram = "stunner";
+  };
+})

pkgs/by-name/sv/svix-server/package.nix

@@ -10,18 +10,18 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "svix-server";
-  version = "1.69.0";
+  version = "1.70.0";
 
   src = fetchFromGitHub {
     owner = "svix";
     repo = "svix-webhooks";
     rev = "v${version}";
-    hash = "sha256-1boqSBDm91cOeHvecYb21MHpzUkSWkG20lPr/HpQSxQ=";
+    hash = "sha256-82QB+EmZf1v3L5zTLydaa4WlIUK5IJT0ghOpmIC1nRE=";
   };
 
   sourceRoot = "${src.name}/server";
 
-  cargoHash = "sha256-IJvGDMEI4bmJGsX5mM3xJ5eg/jqCoR/13s6KBrkFH/E=";
+  cargoHash = "sha256-f6nU5i9Dhy9inqqpHlNjR1M2E781398xo/T7hVGuCvk=";
 
   nativeBuildInputs = [ pkg-config ];
 

pkgs/by-name/ta/tagutil/package.nix

@@ -46,7 +46,7 @@ stdenv.mkDerivation rec {
     description = "Scriptable music files tags tool and editor";
     homepage = "https://github.com/kaworu/tagutil";
     license = licenses.bsd2;
-    maintainers = with maintainers; [ dan4ik605743 ];
+    maintainers = with maintainers; [ ];
     platforms = platforms.linux;
     mainProgram = "tagutil";
   };

pkgs/by-name/ta/tailscale/package.nix

@@ -23,7 +23,7 @@
 }:
 
 let
-  version = "1.84.3";
+  version = "1.86.2";
 in
 buildGoModule {
   pname = "tailscale";
@@ -37,11 +37,11 @@ buildGoModule {
   src = fetchFromGitHub {
     owner = "tailscale";
     repo = "tailscale";
-    rev = "v${version}";
-    hash = "sha256-0HvUNpyi6xzS3PtbgMvh6bLRhV77CZRrVSKGMr7JtbE=";
+    tag = "v${version}";
+    hash = "sha256-hozfvKkvTeaabN1tYl0NlEpjfD4sZQe9Z+agdoXFHNE=";
   };
 
-  vendorHash = "sha256-QBYCMOWQOBCt+69NtJtluhTZIOiBWcQ78M9Gbki6bN0=";
+  vendorHash = "sha256-4QTSspHLYJfzlontQ7msXyOB5gzq7ZwSvWmKuYY5klA=";
 
   nativeBuildInputs = [
     makeWrapper
@@ -63,8 +63,7 @@ buildGoModule {
   ];
 
   excludedPackages = [
-    # exlude integration tests which fail to work
-    # and require additional tooling
+    # Exclude integration tests which fail to work and require additional tooling
     "tstest/integration"
   ];
 
@@ -79,8 +78,7 @@ buildGoModule {
     "ts_include_cli"
   ];
 
-  # remove vendored tooling to ensure it's not used
-  # also avoids some unnecessary tests
+  # Remove vendored tooling to ensure it's not used; also avoids some unnecessary tests
   preBuild = ''
     rm -rf ./tool
   '';
@@ -151,6 +149,12 @@ buildGoModule {
 
         # flaky: https://github.com/tailscale/tailscale/issues/15348
         "TestSafeFuncHappyPath"
+
+        # Requires `go` to be installed with the `go tool` system which we don't use
+        "TestGoVersion"
+
+        # Fails because we vendor dependencies
+        "TestLicenseHeaders"
       ]
       ++ lib.optionals stdenv.hostPlatform.isDarwin [
         # syscall default route interface en0 differs from netstat
@@ -165,6 +169,11 @@ buildGoModule {
 
         # Fails only on Darwin, succeeds on other tested platforms.
         "TestOnTailnetDefaultAutoUpdate"
+
+        # Fails due to UNIX domain socket path limits in the Nix build environment.
+        # Likely we could do something to make the paths shorter.
+        "TestProtocolQEMU"
+        "TestProtocolUnixDgram"
       ];
     in
     [ "-skip=^${builtins.concatStringsSep "$|^" skippedTests}$" ];

pkgs/by-name/to/tonelib-gfx/package.nix

@@ -69,7 +69,6 @@ stdenv.mkDerivation rec {
     sourceProvenance = with sourceTypes; [ binaryNativeCode ];
     license = licenses.unfree;
     maintainers = with maintainers; [
-      dan4ik605743
       husjon
       orivej
     ];

pkgs/by-name/to/tonelib-jam/package.nix

@@ -61,7 +61,7 @@ stdenv.mkDerivation rec {
     homepage = "https://tonelib.net/";
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
     license = lib.licenses.unfree;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = [ "x86_64-linux" ];
     mainProgram = "ToneLib-Jam";
   };

pkgs/by-name/to/tonelib-metal/package.nix

@@ -62,7 +62,7 @@ stdenv.mkDerivation rec {
     homepage = "https://tonelib.net";
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
     license = lib.licenses.unfree;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = [ "x86_64-linux" ];
     mainProgram = "ToneLib-Metal";
   };

pkgs/by-name/to/tonelib-zoom/package.nix

@@ -60,7 +60,7 @@ stdenv.mkDerivation rec {
     homepage = "https://tonelib.net/";
     sourceProvenance = with sourceTypes; [ binaryNativeCode ];
     license = licenses.unfree;
-    maintainers = with maintainers; [ dan4ik605743 ];
+    maintainers = with maintainers; [ ];
     platforms = [ "x86_64-linux" ];
     mainProgram = "ToneLib-Zoom";
   };