diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 30d0d618f687..c304ebff9c23 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -23797,6 +23797,12 @@
     github = "saulecabrera";
     githubId = 1423601;
   };
+  sauricat = {
+    email = "linshu1729@protonmail.com";
+    github = "sauricat";
+    githubId = 3533655;
+    name = "Shu";
+  };
   sauyon = {
     email = "s@uyon.co";
     github = "sauyon";
diff --git a/nixos/tests/lomiri-music-app.nix b/nixos/tests/lomiri-music-app.nix
index 49872b9938c5..a87cc0aa2248 100644
--- a/nixos/tests/lomiri-music-app.nix
+++ b/nixos/tests/lomiri-music-app.nix
@@ -133,6 +133,11 @@ in
     # mediascanner2 needs to have run, is only started automatically by Lomiri
     machine.systemctl("start mediascanner-2.0.service", "root")
 
+    # Need to wait abit to make sure our test file gets scanned & added to the database.
+    # No good feedback on when this is done... Prolly some time after extractor sub-service is started.
+    machine.wait_for_console_text("Successfully activated service 'com.lomiri.MediaScanner2.Extractor'")
+    machine.sleep(10)
+
     with subtest("lomiri music launches"):
         machine.succeed("lomiri-music-app >&2 &")
         machine.wait_for_console_text("Queue is empty")
diff --git a/pkgs/applications/editors/vim/plugins/non-generated/avante-nvim/default.nix b/pkgs/applications/editors/vim/plugins/non-generated/avante-nvim/default.nix
index 870e06dc0c52..b2d916acc053 100644
--- a/pkgs/applications/editors/vim/plugins/non-generated/avante-nvim/default.nix
+++ b/pkgs/applications/editors/vim/plugins/non-generated/avante-nvim/default.nix
@@ -71,6 +71,10 @@ vimUtils.buildVimPlugin {
       ln -s ${avante-nvim-lib}/lib/libavante_templates${ext} $out/build/avante_templates${ext}
       ln -s ${avante-nvim-lib}/lib/libavante_tokenizers${ext} $out/build/avante_tokenizers${ext}
       ln -s ${avante-nvim-lib}/lib/libavante_html2md${ext} $out/build/avante_html2md${ext}
+
+      # Fixes PKCE auth flows not finding libcrypto
+      substituteInPlace "$out/lua/avante/auth/pkce.lua" \
+        --replace-fail 'pcall(ffi.load, "crypto")' 'pcall(ffi.load, "${lib.getLib openssl}/lib/libcrypto${ext}")'
     '';
 
   passthru = {
diff --git a/pkgs/applications/misc/electrum/default.nix b/pkgs/applications/misc/electrum/default.nix
index 1b3233a766dc..3bde96adaf13 100644
--- a/pkgs/applications/misc/electrum/default.nix
+++ b/pkgs/applications/misc/electrum/default.nix
@@ -23,12 +23,12 @@ let
 in
 python3.pkgs.buildPythonApplication rec {
   pname = "electrum";
-  version = "4.6.2";
+  version = "4.7.0";
   pyproject = true;
 
   src = fetchurl {
     url = "https://download.electrum.org/${version}/Electrum-${version}.tar.gz";
-    hash = "sha256-ZrwzAeeMNrs6KzLGDg5oBF7E+GGLYCVczO6R18TKRuE=";
+    hash = "sha256-1bC437EJWECmO+lmZVXbL2WQwxEIynlVmRJyEfsYLO8=";
   };
 
   build-system = with python3.pkgs; [
@@ -171,6 +171,7 @@ python3.pkgs.buildPythonApplication rec {
     maintainers = with lib.maintainers; [
       np
       prusnak
+      ryand56
     ];
     mainProgram = "electrum";
   };
diff --git a/pkgs/applications/virtualization/singularity/packages.nix b/pkgs/applications/virtualization/singularity/packages.nix
index 10c91253bd81..5640ebcb7d7e 100644
--- a/pkgs/applications/virtualization/singularity/packages.nix
+++ b/pkgs/applications/virtualization/singularity/packages.nix
@@ -46,19 +46,19 @@ let
     callPackage
       (import ./generic.nix rec {
         pname = "singularity-ce";
-        version = "4.3.7";
+        version = "4.4.0";
         projectName = "singularity";
 
         src = fetchFromGitHub {
           owner = "sylabs";
           repo = "singularity";
           tag = "v${version}";
-          hash = "sha256-0MTvOdSCTO6aElUYgj1YGECJDNRiz0Y/jpSIwQdaXJU=";
+          hash = "sha256-RYUsGAPDSbH3eYiCF25PEr1sI43y+MlXDq/ze2VICu4=";
         };
 
         # Override vendorHash with overrideAttrs.
         # See https://nixos.org/manual/nixpkgs/unstable/#buildGoModule-vendorHash
-        vendorHash = "sha256-Zu+TOQdT11AnB7Hjts24YOcS4IL73I7k/VJNDO8esa4=";
+        vendorHash = "sha256-Hs5t1N9oYodwLI6lrE+FMXRIQ3tpQCdZdUwO6FbxVH8=";
 
         extraConfigureFlags = [
           # Do not build squashfuse from the Git submodule sources, use Nixpkgs provided version
diff --git a/pkgs/by-name/ai/air-formatter/package.nix b/pkgs/by-name/ai/air-formatter/package.nix
index 6cccc54235af..9394712f43e6 100644
--- a/pkgs/by-name/ai/air-formatter/package.nix
+++ b/pkgs/by-name/ai/air-formatter/package.nix
@@ -7,16 +7,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "air-formatter";
-  version = "0.8.1";
+  version = "0.8.2";
 
   src = fetchFromGitHub {
     owner = "posit-dev";
     repo = "air";
     tag = finalAttrs.version;
-    hash = "sha256-+AsKwigWikAv8NOaIYVvrH3Pub7Q9qV5YOp2jYU2GkE=";
+    hash = "sha256-wxHq1/8gd0T9Q8mAtkCGbFb3EiyeMBqg1anafuTfchM=";
   };
 
-  cargoHash = "sha256-ndd4ps2X/+a62p3dlv8jxhr2bbBG88rytI1XBVntk+g=";
+  cargoHash = "sha256-7wq5Qal2/6yZ3TFH/Nw4jKbGS1MqGbNMGB6v7qdLPOQ=";
 
   useNextest = true;
 
diff --git a/pkgs/by-name/ba/bark-server/package.nix b/pkgs/by-name/ba/bark-server/package.nix
index cf66e86c1526..7fb34848a4f4 100644
--- a/pkgs/by-name/ba/bark-server/package.nix
+++ b/pkgs/by-name/ba/bark-server/package.nix
@@ -8,13 +8,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "bark-server";
-  version = "2.3.3";
+  version = "2.3.4";
 
   src = fetchFromGitHub {
     owner = "Finb";
     repo = "bark-server";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-yL/5qXvCzcVG0p2VIx6yTu9rudNxk9rSJTN9PRJ6zSs=";
+    hash = "sha256-ANOGAzm+25WUoRMGE5b70uKE4EhlGkuC4QWvpa2K7Uo=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.
     leaveDotGit = true;
@@ -27,7 +27,7 @@ buildGoModule (finalAttrs: {
     '';
   };
 
-  vendorHash = "sha256-7C+xYleje6/WcRl/GylE+xvS7QFvJXaCLkCeRW8wwIY=";
+  vendorHash = "sha256-yStMk1U6FmF2Ldqnm5HKsu6Pn3xjm5pGLMWAGyYxb2c=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/be/better-commits/package.nix b/pkgs/by-name/be/better-commits/package.nix
index b9556df7552a..00428bcb4cad 100644
--- a/pkgs/by-name/be/better-commits/package.nix
+++ b/pkgs/by-name/be/better-commits/package.nix
@@ -8,13 +8,13 @@
 
 buildNpmPackage rec {
   pname = "better-commits";
-  version = "1.18.3";
+  version = "1.19.1";
 
   src = fetchFromGitHub {
     owner = "Everduin94";
     repo = "better-commits";
     tag = "v${version}";
-    hash = "sha256-2g9sYTy34estLBLAaHNbjNzv6+rzyocgqMBlVlJUyT4=";
+    hash = "sha256-4akYngeDf7EqLxCzObjb5MUA8Cb3X3jlrvLEM71OcCA=";
   };
 
   npmDepsHash = "sha256-vtUtdgOJEQk9PzxOz7AlwOxWS6PTjAtrjAugXRXo89c=";
diff --git a/pkgs/by-name/bi/biome/package.nix b/pkgs/by-name/bi/biome/package.nix
index c82848591b6b..aa5d46f05cfd 100644
--- a/pkgs/by-name/bi/biome/package.nix
+++ b/pkgs/by-name/bi/biome/package.nix
@@ -11,16 +11,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "biome";
-  version = "2.3.15";
+  version = "2.4.4";
 
   src = fetchFromGitHub {
     owner = "biomejs";
     repo = "biome";
     rev = "@biomejs/biome@${finalAttrs.version}";
-    hash = "sha256-HRiQohI6bnV+U9c+XILOWmjGb1tQDJd3CBFNGzJuJ/4=";
+    hash = "sha256-d7FSqOOAcJ/llq+REPOCvJAbHFanLzgOuwcOURf+NPg=";
   };
 
-  cargoHash = "sha256-l1eew5KmT0tpVSLmWquodoYlMavQYbyxmZxl6IRnC48=";
+  cargoHash = "sha256-g8ov3SrcpHuvdg7qbbDMbhYMSAGCxJgQyWY+W/Sh/pM=";
 
   nativeBuildInputs = [ pkg-config ];
 
@@ -43,6 +43,14 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "--skip=commands::format::print_json_pretty"
     "--skip=commands::format::should_format_files_in_folders_ignored_by_linter"
     "--skip=cases::migrate_v2::should_successfully_migrate_sentry"
+    "--skip=cases::help::check_help"
+    "--skip=cases::help::ci_help"
+    "--skip=cases::help::format_help"
+    "--skip=cases::help::lint_help"
+    "--skip=cases::help::lsp_proxy_help"
+    "--skip=cases::help::migrate_help"
+    "--skip=cases::help::rage_help"
+    "--skip=cases::help::start_help"
   ];
 
   env = {
@@ -75,6 +83,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
       isabelroses
       wrbbz
       eveeifyeve # Schema
+      SchahinRohani
     ];
     mainProgram = "biome";
   };
diff --git a/pkgs/by-name/ch/checkov/package.nix b/pkgs/by-name/ch/checkov/package.nix
index 45ecb9a2fb3f..57dfe82d415b 100644
--- a/pkgs/by-name/ch/checkov/package.nix
+++ b/pkgs/by-name/ch/checkov/package.nix
@@ -33,21 +33,20 @@ let
     };
   };
 in
-with py.pkgs;
-
-python3.pkgs.buildPythonApplication rec {
+python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "checkov";
-  version = "3.2.504";
+  version = "3.2.506";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "bridgecrewio";
     repo = "checkov";
-    tag = version;
-    hash = "sha256-w6U8XW/hSPy/WJy4a6N41Hu+i9OVqiwI5buAE2uFjoI=";
+    tag = finalAttrs.version;
+    hash = "sha256-E2WkVgFx7qAzmpaUOamYcBc5uAlvlnkc/NyhT569vgc=";
   };
 
   pythonRelaxDeps = [
+    "aiodns" # breaking change is that it requires pycares >= 5.0.0, which is fine.
     "asteval"
     "bc-detect-secrets"
     "bc-python-hcl2"
@@ -194,7 +193,7 @@ python3.pkgs.buildPythonApplication rec {
   meta = {
     description = "Static code analysis tool for infrastructure-as-code";
     homepage = "https://github.com/bridgecrewio/checkov";
-    changelog = "https://github.com/bridgecrewio/checkov/releases/tag/${version}";
+    changelog = "https://github.com/bridgecrewio/checkov/releases/tag/${finalAttrs.version}";
     longDescription = ''
       Prevent cloud misconfigurations during build-time for Terraform, Cloudformation,
       Kubernetes, Serverless framework and other infrastructure-as-code-languages.
@@ -206,4 +205,4 @@ python3.pkgs.buildPythonApplication rec {
       fab
     ];
   };
-}
+})
diff --git a/pkgs/by-name/cl/cloudfox/package.nix b/pkgs/by-name/cl/cloudfox/package.nix
index f174767223e6..de1e0420b627 100644
--- a/pkgs/by-name/cl/cloudfox/package.nix
+++ b/pkgs/by-name/cl/cloudfox/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "cloudfox";
-  version = "1.17.0";
+  version = "2.0.0";
 
   src = fetchFromGitHub {
     owner = "BishopFox";
     repo = "cloudfox";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-AdfG0Vb4wUV8iShdaXSTwrKb8pa39ovwmvGTyfz1YDw=";
+    hash = "sha256-IyuR8NA4y1psBRseLPFiXtXZ7zkKhOxxI+QjeitDaIE=";
   };
 
-  vendorHash = "sha256-mAYuquSkfYSUcTBPFJp+zwv5xCT5eqBmR7DDZjXx9YY=";
+  vendorHash = "sha256-oohACm7oQhRYF6XzYLku20yIKH9DamAL+S8gXrvF/RY=";
 
   ldflags = [
     "-w"
diff --git a/pkgs/by-name/cs/cspell/package.nix b/pkgs/by-name/cs/cspell/package.nix
index eef3622ff733..a3d3372787f6 100644
--- a/pkgs/by-name/cs/cspell/package.nix
+++ b/pkgs/by-name/cs/cspell/package.nix
@@ -11,13 +11,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "cspell";
-  version = "9.6.4";
+  version = "9.7.0";
 
   src = fetchFromGitHub {
     owner = "streetsidesoftware";
     repo = "cspell";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-OeS3wBOnvhxQtAAra40wb1FMYIb2mpKrqf72AFuU944=";
+    hash = "sha256-WT2MlBtFazi7vC7+2Dx1Y0Z5B3j0tFT6jUajyqhxlDw=";
   };
 
   pnpmWorkspaces = [ "cspell..." ];
@@ -31,7 +31,7 @@ stdenv.mkDerivation (finalAttrs: {
       ;
     pnpm = pnpm_10;
     fetcherVersion = 2;
-    hash = "sha256-ufHALS8FL2VjNnYHUBZh99IpivZDtaYaVjTmEoY6Sqc=";
+    hash = "sha256-EKnczZ/7O2ZMaSlIFfLk9WXyf/ubynhmecs+IyIoTHw=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/fr/freecad/package.nix b/pkgs/by-name/fr/freecad/package.nix
index 8004f87368ae..6acc386738f0 100644
--- a/pkgs/by-name/fr/freecad/package.nix
+++ b/pkgs/by-name/fr/freecad/package.nix
@@ -128,12 +128,12 @@ freecad-utils.makeCustomizable (
 
     cmakeFlags = [
       "-Wno-dev" # turns off warnings which otherwise makes it hard to see what is going on
-      "-DBUILD_DRAWING=ON"
-      "-DBUILD_FLAT_MESH:BOOL=ON"
-      "-DINSTALL_TO_SITEPACKAGES=OFF"
-      "-DFREECAD_USE_PYBIND11=ON"
-      "-DBUILD_QT5=OFF"
-      "-DBUILD_QT6=ON"
+      (lib.cmakeBool "BUILD_DRAWING" true)
+      (lib.cmakeBool "BUILD_FLAT_MESH" true)
+      (lib.cmakeBool "INSTALL_TO_SITEPACKAGES" false)
+      (lib.cmakeBool "FREECAD_USE_PYBIND11" true)
+      (lib.cmakeBool "BUILD_QT5" false)
+      (lib.cmakeBool "BUILD_QT6" true)
     ];
 
     qtWrapperArgs =
diff --git a/pkgs/by-name/fr/freedroid/package.nix b/pkgs/by-name/fr/freedroid/package.nix
index 14b1da25bcba..e07476a0d96c 100644
--- a/pkgs/by-name/fr/freedroid/package.nix
+++ b/pkgs/by-name/fr/freedroid/package.nix
@@ -47,6 +47,9 @@ stdenv.mkDerivation rec {
     touch NEWS
   '';
 
+  # DOes not build on -std=c23 due to `bool` collision.
+  env.NIX_CFLAGS_COMPILE = "-std=gnu17";
+
   postInstall = ''
     mkdir -p $out/share/icons/hicolor/32x32/apps
     convert graphics/paraicon.bmp $out/share/icons/hicolor/32x32/apps/freedroid.png
diff --git a/pkgs/by-name/gn/gnu-smalltalk/package.nix b/pkgs/by-name/gn/gnu-smalltalk/package.nix
index 069c0a4b1682..87811a8543a0 100644
--- a/pkgs/by-name/gn/gnu-smalltalk/package.nix
+++ b/pkgs/by-name/gn/gnu-smalltalk/package.nix
@@ -94,6 +94,6 @@ stdenv.mkDerivation (finalAttrs: {
       lgpl2
     ];
     platforms = lib.platforms.linux;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ sauricat ];
   };
 })
diff --git a/pkgs/by-name/lm/lmstudio/darwin.nix b/pkgs/by-name/lm/lmstudio/darwin.nix
index f18a880feabe..2c8b21418e68 100644
--- a/pkgs/by-name/lm/lmstudio/darwin.nix
+++ b/pkgs/by-name/lm/lmstudio/darwin.nix
@@ -2,6 +2,7 @@
   stdenv,
   fetchurl,
   undmg,
+  darwin,
   meta,
   pname,
   version,
@@ -16,7 +17,10 @@ stdenv.mkDerivation {
     inherit url hash;
   };
 
-  nativeBuildInputs = [ undmg ];
+  nativeBuildInputs = [
+    undmg
+    darwin.sigtool
+  ];
 
   sourceRoot = ".";
 
@@ -24,6 +28,19 @@ stdenv.mkDerivation {
     runHook preInstall
     mkdir -p $out/Applications
     cp -r *.app $out/Applications
+
+    # Bypass the /Applications path check in the main index.js
+    # LM Studio verifies the app is running from /Applications and shows an
+    # error dialog + refuses to auto-update if not. Replace the '/Applications'
+    # string literal with '/' so that any absolute path (e.g. /nix/store/...)
+    # passes the startsWith check. This works across obfuscated versions because
+    # the literal string '/Applications' is stable even when variable names change.
+    local indexJs="$out/Applications/LM Studio.app/Contents/Resources/app/.webpack/main/index.js"
+    substituteInPlace "$indexJs" --replace-quiet "'/Applications'" "'/'"
+
+    # Re-sign the app bundle after patching, otherwise macOS reports it as damaged
+    codesign --force --deep --sign - "$out/Applications/LM Studio.app"
+
     runHook postInstall
   '';
 
diff --git a/pkgs/by-name/lm/lmstudio/package.nix b/pkgs/by-name/lm/lmstudio/package.nix
index 5ece8f0b4355..eeed9c1ac5fa 100644
--- a/pkgs/by-name/lm/lmstudio/package.nix
+++ b/pkgs/by-name/lm/lmstudio/package.nix
@@ -23,7 +23,6 @@ let
       "aarch64-darwin"
     ];
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
-    broken = stdenv.hostPlatform.isDarwin; # Upstream issue: https://github.com/lmstudio-ai/lmstudio-bug-tracker/issues/347
   };
 in
 if stdenv.hostPlatform.isDarwin then
diff --git a/pkgs/by-name/ma/mailpit/source.nix b/pkgs/by-name/ma/mailpit/source.nix
index a564becc52c2..61fbe3252bf2 100644
--- a/pkgs/by-name/ma/mailpit/source.nix
+++ b/pkgs/by-name/ma/mailpit/source.nix
@@ -1,6 +1,6 @@
 {
-  version = "1.28.3";
-  hash = "sha256-5QfGfEevV/8Epmh7cSHwB11J6wmpXzXHsPCrDms1bAo=";
-  npmDepsHash = "sha256-zyEk7OcaN8ikJFvSzIIVvTKICi8GtekT4FB2YDHzo3o=";
-  vendorHash = "sha256-yx7L7evEt0p/U8H+gNGl1sx/JZ5qg+0fInFjZK8xdp4=";
+  version = "1.29.2";
+  hash = "sha256-6kmxf57GOtXNPYNyvTTsklfwbjmIDmKapcOXJc6eLRk=";
+  npmDepsHash = "sha256-DVNQe1o2yOUkZ7789nW2cV/YCpUT6ibhWK7hZlWp6tw=";
+  vendorHash = "sha256-oHAB4V/6i+Pez7Qe9fzRKvIXqEMIsOfeFpnBRQwYv0U=";
 }
diff --git a/pkgs/by-name/mi/mirrord/manifest.json b/pkgs/by-name/mi/mirrord/manifest.json
index 0a4a371900a6..9ee0b1e7d2c6 100644
--- a/pkgs/by-name/mi/mirrord/manifest.json
+++ b/pkgs/by-name/mi/mirrord/manifest.json
@@ -1,21 +1,21 @@
 {
-  "version": "3.189.0",
+  "version": "3.191.0",
   "assets": {
     "x86_64-linux": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.189.0/mirrord_linux_x86_64",
-      "hash": "sha256-tZHYPPCOFbWuohpTloc9ugUytal3KJDYXvu1CnXxTxI="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.191.0/mirrord_linux_x86_64",
+      "hash": "sha256-2v3H+Hkf47k6b8I2YCtuhIhX06MtmjoG9DfaHtmYLV0="
     },
     "aarch64-linux": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.189.0/mirrord_linux_aarch64",
-      "hash": "sha256-4WQTq5Jnmi8T7EbPFNvkirGQgcDmB6P9pT/3oXBC87k="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.191.0/mirrord_linux_aarch64",
+      "hash": "sha256-3HT3SYpEsdgDSdoIlKcOWb31scMpsAl0oosHMQgIfGU="
     },
     "aarch64-darwin": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.189.0/mirrord_mac_universal",
-      "hash": "sha256-oEAfW/4Dlbv6pc8W8sRaBqS2g144W3DsNN+AJpu+eP0="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.191.0/mirrord_mac_universal",
+      "hash": "sha256-SQrzND8ZRytbs4Nw87YEXTQfDOIWZFlvJw8SWdGXk5o="
     },
     "x86_64-darwin": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.189.0/mirrord_mac_universal",
-      "hash": "sha256-oEAfW/4Dlbv6pc8W8sRaBqS2g144W3DsNN+AJpu+eP0="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.191.0/mirrord_mac_universal",
+      "hash": "sha256-SQrzND8ZRytbs4Nw87YEXTQfDOIWZFlvJw8SWdGXk5o="
     }
   }
 }
diff --git a/pkgs/by-name/oh/oha/package.nix b/pkgs/by-name/oh/oha/package.nix
index ec3a8d043e2e..d6e0270e8b5b 100644
--- a/pkgs/by-name/oh/oha/package.nix
+++ b/pkgs/by-name/oh/oha/package.nix
@@ -13,16 +13,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "oha";
-  version = "1.13.0";
+  version = "1.14.0";
 
   src = fetchFromGitHub {
     owner = "hatoo";
     repo = "oha";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-fjWfv/RuEqU0krVfHNxByzHdREVL7dD/tSEw7X1gaGk=";
+    hash = "sha256-N6XHnglCn7MwSaMLy8qNUBXf23EJEuh6xn92SgNJgQs=";
   };
 
-  cargoHash = "sha256-v+OfQEfAwHxX+FfC0UK2F8/e2tJKaI3zQpg+3hk2hV4=";
+  cargoHash = "sha256-Tg30RKcaLDWvSW0Ny34kPEZpIWnjILO+yO6kqz2wyQk=";
 
   env = {
     CARGO_PROFILE_RELEASE_LTO = "fat";
diff --git a/pkgs/by-name/ol/ollama/package.nix b/pkgs/by-name/ol/ollama/package.nix
index a2d338cbcd97..b73a869bd087 100644
--- a/pkgs/by-name/ol/ollama/package.nix
+++ b/pkgs/by-name/ol/ollama/package.nix
@@ -137,13 +137,13 @@ let
 in
 goBuild (finalAttrs: {
   pname = "ollama";
-  version = "0.17.0";
+  version = "0.17.4";
 
   src = fetchFromGitHub {
     owner = "ollama";
     repo = "ollama";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-bBoLUcWVsYxtwjJaa1hYTzodRSIT0yoF0raGItPLjR4=";
+    hash = "sha256-9yJ8Jbgrgiz/Pr6Se398DLkk1U2Lf5DDUi+tpEIjAaI=";
   };
 
   vendorHash = "sha256-Lc1Ktdqtv2VhJQssk8K1UOimeEjVNvDWePE9WkamCos=";
diff --git a/pkgs/by-name/pi/pizauth/package.nix b/pkgs/by-name/pi/pizauth/package.nix
index 5c6172c8c302..ca462bb26a71 100644
--- a/pkgs/by-name/pi/pizauth/package.nix
+++ b/pkgs/by-name/pi/pizauth/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "pizauth";
-  version = "1.0.9";
+  version = "1.0.10";
 
   src = fetchFromGitHub {
     owner = "ltratt";
     repo = "pizauth";
     tag = "pizauth-${finalAttrs.version}";
-    hash = "sha256-RrmRdJOYvQ9/DaNXH8fQ3BCNdYba/6HcsT3EAV1qoNA=";
+    hash = "sha256-wdR/7gV/2U+MsncbQ6Gy2na5YuBp4F2H8ohij+Dfvcs=";
   };
 
-  cargoHash = "sha256-ZY1BcunsR4i8QomRrh9yKdH7CP84Wl7UGUZQ8LUCd68=";
+  cargoHash = "sha256-AvUaeevnV5fIeEKXQAY1IGHcV3l3lTwFmFKsaEPbr+4=";
 
   nativeBuildInputs = [ installShellFiles ];
 
diff --git a/pkgs/by-name/po/postgres-language-server/package.nix b/pkgs/by-name/po/postgres-language-server/package.nix
index 5b6034f8a8c0..f314395e7782 100644
--- a/pkgs/by-name/po/postgres-language-server/package.nix
+++ b/pkgs/by-name/po/postgres-language-server/package.nix
@@ -1,19 +1,21 @@
 {
   lib,
   rustPlatform,
-  fetchgit,
+  fetchFromGitHub,
   rust-jemalloc-sys,
   tree-sitter,
   nodejs,
+  versionCheckHook,
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "postgres-language-server";
-  version = "0.20.0";
+  version = "0.21.0";
 
-  src = fetchgit {
-    url = "https://github.com/supabase-community/postgres-language-server";
+  src = fetchFromGitHub {
+    owner = "supabase-community";
+    repo = "postgres-language-server";
     tag = finalAttrs.version;
-    hash = "sha256-d6h/Igh5DtpMHRFSCVbEooY/mqltXhT91iP4DrOH5SE=";
+    hash = "sha256-E5HRNT4q0RJRJ5PW7uvvrni6jdBZYQCeEWgo0i/fmBQ=";
     fetchSubmodules = true;
   };
 
@@ -41,15 +43,13 @@ rustPlatform.buildRustPackage (finalAttrs: {
   };
 
   cargoBuildFlags = [ "-p=pgls_cli" ];
-  cargoTestFlags = finalAttrs.cargoBuildFlags;
-  checkFlags = [
-    # Tries to write to the file system relatively to the current path
-    "--skip=syntax_error"
-    # Requires a database connection
-    "--skip=test_cli_check_command"
-    "--skip=dblint_detects_issues_snapshot"
-    "--skip=dblint_empty_database_snapshot"
+  # Many tests are integration tests requiring a running Postgres instance
+  doCheck = false;
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
   ];
+  doInstallCheck = true;
 
   meta = {
     description = "Tools and language server for Postgres";
diff --git a/pkgs/by-name/qd/qdl/package.nix b/pkgs/by-name/qd/qdl/package.nix
index 81b455613c75..5e51f74c185b 100644
--- a/pkgs/by-name/qd/qdl/package.nix
+++ b/pkgs/by-name/qd/qdl/package.nix
@@ -1,5 +1,4 @@
 {
-
   lib,
   stdenv,
   fetchFromGitHub,
@@ -11,19 +10,15 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "qdl";
-  version = "2.4";
+  version = "2.5";
 
   src = fetchFromGitHub {
     owner = "linux-msm";
     repo = "qdl";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-8jkuSNK7xTBUkBWzh766zKOlh+7pTr+e0xT1w3xifsw=";
+    hash = "sha256-k6PMiKPwdV3eOFm9FEQPMbyN73DypAZ/UgwOR6aigHA=";
   };
 
-  postPatch = ''
-    substituteInPlace Makefile --replace-fail 'pkg-config' '${stdenv.cc.targetPrefix}pkg-config'
-  '';
-
   nativeBuildInputs = [ pkg-config ];
   buildInputs = [
     libxml2
diff --git a/pkgs/by-name/qo/qoi/package.nix b/pkgs/by-name/qo/qoi/package.nix
index 2bbce98bac03..a0714cfdbb91 100644
--- a/pkgs/by-name/qo/qoi/package.nix
+++ b/pkgs/by-name/qo/qoi/package.nix
@@ -10,13 +10,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "qoi";
-  version = "0-unstable-2026-02-04"; # no upstream version yet.
+  version = "0-unstable-2026-02-14"; # no upstream version yet.
 
   src = fetchFromGitHub {
     owner = "phoboslab";
     repo = "qoi";
-    rev = "a2f3ab61bc1f3271aad699abc47653df36162bbc";
-    hash = "sha256-NLvePFZGTWlY+fDInLqnLriUTyBfh0koHQwik917vQY=";
+    rev = "6fff9b70dd79b12f808b0acc5cb44fde9998725e";
+    hash = "sha256-pw/lflPXLVdM/Qg685/nAlGt5bQC5WU6t496z6xWHx0=";
   };
 
   patches = [
diff --git a/pkgs/by-name/re/renovate/package.nix b/pkgs/by-name/re/renovate/package.nix
index a10a023eb446..16b0d3cc8835 100644
--- a/pkgs/by-name/re/renovate/package.nix
+++ b/pkgs/by-name/re/renovate/package.nix
@@ -13,6 +13,7 @@
   nixosTests,
   nix-update-script,
   yq-go,
+  cctools,
 }:
 let
   nodejs = nodejs_24;
@@ -41,7 +42,10 @@ stdenv.mkDerivation (finalAttrs: {
     python3
     yq-go
   ]
-  ++ lib.optional stdenv.hostPlatform.isDarwin xcbuild;
+  ++ lib.optional stdenv.hostPlatform.isDarwin [
+    xcbuild
+    cctools # contains libtool, required by better-sqlite3
+  ];
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
diff --git a/pkgs/by-name/si/sing-box/package.nix b/pkgs/by-name/si/sing-box/package.nix
index 70aab3e45a18..6e6abaf07cb6 100644
--- a/pkgs/by-name/si/sing-box/package.nix
+++ b/pkgs/by-name/si/sing-box/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "sing-box";
-  version = "1.12.22";
+  version = "1.12.23";
 
   src = fetchFromGitHub {
     owner = "SagerNet";
     repo = "sing-box";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-dLgvI3E5zQWNHxIIUi1WLs62rc3A3lwDpHjq1n09KXM=";
+    hash = "sha256-GzZgsRvbSpppTFY7Jm+56nCi5auDzV34i0K7fKOMafk=";
   };
 
   vendorHash = "sha256-CSAXPvXMUwD08fsp66vr1pA4Wxy0rY2cEJU1Pl0mdUA=";
diff --git a/pkgs/by-name/su/super/package.nix b/pkgs/by-name/su/super/package.nix
index 24888acb0dc5..3d6a5d7b48cd 100644
--- a/pkgs/by-name/su/super/package.nix
+++ b/pkgs/by-name/su/super/package.nix
@@ -7,16 +7,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "super";
-  version = "0.1.0";
+  version = "0.2.0";
 
   src = fetchFromGitHub {
     owner = "brimdata";
     repo = "super";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-wgduBXtLnvCTV/8JgCOeD8QutIqW5m9vCJZEbsxKxwY=";
+    hash = "sha256-MAlBVY2O9T1j+N/kSgEw3onnIicrhOoa2vqnGEiXCdg=";
   };
 
-  vendorHash = "sha256-yGmQmxr2RzpOOwS7qpdBJysJpsgeWDNFBOws1FQQoM8=";
+  vendorHash = "sha256-EkQatync50uz4dSVrX0lIAh4FaEMRR6UTsYZATi+kNw=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/ty/typesetter/package.nix b/pkgs/by-name/ty/typesetter/package.nix
index 02aca9cf31ba..89a0607f62d2 100644
--- a/pkgs/by-name/ty/typesetter/package.nix
+++ b/pkgs/by-name/ty/typesetter/package.nix
@@ -30,18 +30,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "typesetter";
-  version = "0.10.1";
+  version = "0.11.1";
 
   src = fetchFromCodeberg {
     owner = "haydn";
     repo = "typesetter";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-YrncwcyknOCukfmQmyFzEAy/bWct6K67CThi8Rzy4rE=";
+    hash = "sha256-sBcCO/OTM7/0gFcWsC0cO4dwVdHT5kxAHGWYANdF5IA=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-kV4KDiNHKCnzQtJVDhMEHEqwPuR5CV3LRcCDVUb5nKo=";
+    hash = "sha256-BzVlJ2T4XilUyOHtaE1jiGoqnbOc8uCwIR0UqSVzo1Q=";
   };
 
   strictDeps = true;
diff --git a/pkgs/by-name/vu/vultisig-cli/missing-hashes.json b/pkgs/by-name/vu/vultisig-cli/missing-hashes.json
new file mode 100644
index 000000000000..c28e4d7e3cbb
--- /dev/null
+++ b/pkgs/by-name/vu/vultisig-cli/missing-hashes.json
@@ -0,0 +1,102 @@
+{
+  "@cbor-extract/cbor-extract-darwin-arm64@npm:2.2.0": "2afcf196ab307e62aa2b9f04aed2c9e0b43273026570b58b939de87260d9d103b7ea84f5e286156a9221a7a0f15f3af0e526fb63d6870da673f82d112f34f1fd",
+  "@cbor-extract/cbor-extract-darwin-x64@npm:2.2.0": "c29b029f193e991a3818ed91a2c64ef75d5b15c233cbe49786c26cd4e2be14bee233bc28c7011b701b948eaa6b660067efb2d9beb2093f156c168a411e3e3d8c",
+  "@cbor-extract/cbor-extract-linux-arm64@npm:2.2.0": "f765393fe73a17fb408ea30e4ad9741d95bd618beead9f29bfc33ec5e3a3aedcd9a6ddef554a2653a6b78e6df23227274a38ff07e71a902099e79f244059d40a",
+  "@cbor-extract/cbor-extract-linux-arm@npm:2.2.0": "3fe99173edf6eee34db1ae08811223ef04c4d886ac22af229f2d7ffe2b6551fabd08415575b6dd3562a10457634b6d94d0616570bd193a571cb63e329563740e",
+  "@cbor-extract/cbor-extract-linux-x64@npm:2.2.0": "7473f817acf0452cbd219fc862daac4b6dc28a3b3e593dedc71690203b2f2300fca9fef3a7a50f6dc4fc143c97f2cf76a44d3ab8bdd9d4a0257c7984351650f0",
+  "@cbor-extract/cbor-extract-win32-x64@npm:2.2.0": "903080fb6a7c5d50de0448ae63d486719161859a38701b5f9ef4e542757b090ac83745ce74369ef35ffdf493fad830ed76b93f8318b610dc121bd444e5fc3efd",
+  "@esbuild/aix-ppc64@npm:0.24.2": "ca6158daab73d9effd7d769bd5a43e276dc40f63ccceafd6684dc0c819b8fc21b958e129a50646d09a0cd9bc727b768e4b107d5296c5927695b2d4632a027ee0",
+  "@esbuild/aix-ppc64@npm:0.25.10": "e1a113d75c27f15756d18dc2a9257f07068c7b37a00ed3848c0d903f3e66f2df23156993fca7523422cf5be10417747a1e4faa2e93196f011faab606938174e5",
+  "@esbuild/android-arm64@npm:0.24.2": "87719c3dbbc471d33b17d20caf266fb0ceea6d015ae4b6fcef19a47a92db3a221ffdec2275ade3b286d02a5daa26264535e67581f450a45d517fb045aeee96c3",
+  "@esbuild/android-arm64@npm:0.25.10": "a2dd6b7ba7d3ab2b669bdc45dc7e306671ecbd89b251d3ad73191fc18fe07080525beadf0a9ead65f96d623d4e37172b2516dc1ce7ddc3c3224299926615b2a1",
+  "@esbuild/android-arm@npm:0.24.2": "7cf85e172a3b798918c8b1c235c4c7a05c39e6319e6f957c29b8525a757cda90571a6d7e4a89ae423ac8ac9198b630b54ee467aa2faf96d0ecbacef1eb45e7d6",
+  "@esbuild/android-arm@npm:0.25.10": "0d7b4d970f4793252396ca9b737a2c5b485a5f051827ba1cbcce23a76e9bb7bc6f73be3b5ebed73a15aca915534917d13aeef0ce14d214026a36f0f334eadb14",
+  "@esbuild/android-x64@npm:0.24.2": "51c53be0f70d1a26c5487e8b1791ed9a004b05f64b63dc206a86aa3b0cfd5840f8a066601405c473138ee8d622ff08169e4de64ea92d2faabcfe74bb93349c91",
+  "@esbuild/android-x64@npm:0.25.10": "a2e49c045ea189ca6020a8c1baced2db4cf105848c1cc922931c8e3a11b26f1143078d3ee5c088bfbccab8e564039a5b6962513e45b41572614607dced92b03f",
+  "@esbuild/darwin-arm64@npm:0.24.2": "1c7ecf78a19fa1a604aa02f22080254f77a3d6bd361f1118363797e3a7bd501e0aecdc64e0a6ec81243ca7b3192e7e13ce8592810270b9b1d8bfeb236ee603ef",
+  "@esbuild/darwin-arm64@npm:0.25.10": "a96d0821aa97cd0ce2fa35b525896fc9d878b492832be8a0cd22bdbb081d11209574e48ef8ce29f51a88a9cea33c5f6a8b4409bd0801eddeac5ef4ad4db2d88a",
+  "@esbuild/darwin-x64@npm:0.24.2": "d85383245dac9cac3fe001b76aac184fc685beacbcfad3cde892544ff0b6d03d4ae8a2794c88998fa738baf8b282c82a58999db1a732f9df93571548d39d88c0",
+  "@esbuild/darwin-x64@npm:0.25.10": "0f358404778b8f36a2676181f8840139d7e5723a76e54683f0ada3d72572d8c864bc76084e1d23dd5605896329857ad15b598dedd141d160b64669253bfaee82",
+  "@esbuild/freebsd-arm64@npm:0.24.2": "e25cec613b1c84fe418c1c2583713eb7d08df3e6fa9f516d02b26fb5b22ae1a41fd5ac6b8932dd94dcf0cf393f98f3226033c3f81903f71209d7117791d7cd79",
+  "@esbuild/freebsd-arm64@npm:0.25.10": "f82928e4a4beb95da3379b98c5088d017113c02e3f2ab54867e4f6974b21b25c68ed793cbb3e9a99a510fd58ad3c5dbc1f7ca5bd4ce6adc99627a25fc722178b",
+  "@esbuild/freebsd-x64@npm:0.24.2": "41a7349e01cf6e79a6e46a79acf3e5610082dc944c851320138bf0b3df4415c9b2c01c6f7f7df906f9a8b6e964325fa2e2cb96f57ea18d29d01d8851fcd6c4d6",
+  "@esbuild/freebsd-x64@npm:0.25.10": "08c9d830e43a3be5fdb4525d940b0cd069bd7e7e1f4d53a5475411351c07891343b3c009f37d47e10ae3bafcb9ed52b4b5bd5e7dbd0505723add21a09c08dae6",
+  "@esbuild/linux-arm64@npm:0.24.2": "d67ef17ef8bdd1957b517702a40aad4065531e4584a87d001e47b653761fe5fbbb768936e1862ee4ab19f3ec91477e41e0de43d6edadb4b40a7197202fb94838",
+  "@esbuild/linux-arm64@npm:0.25.10": "1b6f5a1ef9aef52210832f5dd4d55ddd0a880dfc0f832106374b56c5cd8fbb865d7d711bdd6ff7c94a0cc42a7c3e6cf91118bf5c4187cfbbe1eb4d1807afca37",
+  "@esbuild/linux-arm@npm:0.24.2": "481f1d0d7d2240fdf3fcd8fce78e456421602013d5614d5b53e94e0dc2071132c96b20382178a458bdc43e6555c2aae19b7e6c0d1abe756724448825de983aaa",
+  "@esbuild/linux-arm@npm:0.25.10": "023383ebb145fa2f93de674713c7e4725df2b3c910f43bc1b5488a3b1169005d46fcbcf84234aace04c799ee569ea7671f92205e42dda52bc9954e48b47d7a1d",
+  "@esbuild/linux-ia32@npm:0.24.2": "e9df249f3aa60d9ebee8f8b3c128451275872f67305c4c6557e9eb20c200db12b2818cbc351d21b75291a7a6802f3741365a0e1ec07d69a2ca68bf38d6838cb7",
+  "@esbuild/linux-ia32@npm:0.25.10": "130136f141d0388ec249fa314848906fb8b45e554324b8a07c13b5bc2e7da94c6fc7ebd037af6b69655a542ec52515ea8f8bc3bfe6dfc0dab8bdf9954debfb0d",
+  "@esbuild/linux-loong64@npm:0.24.2": "16607333cb6f9cdfb2b3a51fa24626335bd5586932a00f57149204cf2507af10d54c19f50eeb9c918ad58533e11ca88a025abd565af7e11c0788057bbb7342f1",
+  "@esbuild/linux-loong64@npm:0.25.10": "0e076ba5ea9b2e6ad00c27b8ee530621ef4c356aba6d8c873f9f7c50fa2f54bd75f4bef57d209fc0af011c9748c64e9d5e281f13456fa9c8b71f79467bfc71ad",
+  "@esbuild/linux-mips64el@npm:0.24.2": "63d5e5deb24da70b9801b902b2b8a8c4fb6ab347812366936fb3990b8bb1f449a6d99772799d53eae5db631a025a1e0b468b6aabd559a5abb01b39bb0d1fb1c7",
+  "@esbuild/linux-mips64el@npm:0.25.10": "dc3ef7a524ef0d78030f088263735026c97e7be45f56a610c8849fca8c36b10969558bffb6c21b6d8a5819a33450e529e44c1a71a6fccb0ce69f23b01273bbc3",
+  "@esbuild/linux-ppc64@npm:0.24.2": "52b4a0d90b477f546948c17f56a4e93b165bb26ddd9ae675dc65f10e3c46d63d73f46718ecb21ff36064f41dfdf33c38318720bc5649d8be25a59cc239a94648",
+  "@esbuild/linux-ppc64@npm:0.25.10": "60088ee09f940e169e2073ee77972f22af78c9c1df9a8e7db45e3c3f9176d5ffd8006a4102f34783c7f3629e9c153797d9f493063e9bdedf6f676018cbe6445e",
+  "@esbuild/linux-riscv64@npm:0.24.2": "9fd54cb6aa458cb49d35aebcbe11c689935207530036ec9465f381e5a27e06220b39633c3f2fd7ba110274f529593c0f4dcd1e644f14913009ba8c13a0c13904",
+  "@esbuild/linux-riscv64@npm:0.25.10": "3f194dfe0f2725d9a41b0ab127238ef271d0689f31a05ecae25d6df3aa8275261d6ba073373236fac3c6c8af2a4556736a8025e80d8a719a049d22b23c99464c",
+  "@esbuild/linux-s390x@npm:0.24.2": "c20ffbd6abe60c9c1a96c3542ce62d3e5d764af976a865451824db4714318328c6222502d49c7892a72b0a5c1bab68c876bda31a0e61f9656a5953e1b31da594",
+  "@esbuild/linux-s390x@npm:0.25.10": "926a04be26ebf794dae6a6185e04f39d246b04f1b5cb40b41f5228228a87e3a785cfb6493f405a0dc7d9b6a96d9417453fdc291b7fb4bc4aaf785eaa44cf1806",
+  "@esbuild/linux-x64@npm:0.24.2": "7ec13e71530f3369442b9c05c823bdfca6bf5f030b130f633bee5d14cd13d8c1b910a8dcfb6d38c4702a4e599d6097fc37cc2901710dfb2bd67f19aa7c918b75",
+  "@esbuild/linux-x64@npm:0.25.10": "ebe641e7b96af7dcefe629b4f34a4da9cd0b282e42e8efd0311c2ed631a40a143bb96eda5592b209c4eab295f45b2e3395c69412edb40d5689ffaa01aa276409",
+  "@esbuild/netbsd-arm64@npm:0.24.2": "8a8f7db39d45dda39086bd475cd7d115ea0aee441b27536ba7bc8cb11c6725a426a36d7bf6ee996c66a0022a7bde4f599ab38f70689718a93cb6759f1cbedee1",
+  "@esbuild/netbsd-arm64@npm:0.25.10": "11f85ed4ade5c38fe8f2f3e78ee5c302a4f90d48a6bf93cf8917b13d52b03671c7742294785165cc70611eb0b085a4e9aa5a0f487f8e15f80200ff450549e19e",
+  "@esbuild/netbsd-x64@npm:0.24.2": "e62792054a12e9e8866dcf8410b37f84e133e7d1e63fb4b0944e1733692a37d373f1afc0a3472b49ee8a3e349ec43c2e212918d091879585c676ae12da8c4386",
+  "@esbuild/netbsd-x64@npm:0.25.10": "322482debb21160769f7ee293c3e84e44293bb7c734082fac2857277038ab1087763a553697b8f20dc3a03b7a397936396cde8150c1cc6a0ad62941e7ee86845",
+  "@esbuild/openbsd-arm64@npm:0.24.2": "cd53a64693906fd586882b42f3c763598f13ed3c87e483cbdf1ed64f2b3431e6bafb1a65e9fed84e28f06a11289acfc6f23a345af88bbbb3ed04f93aa263bb8c",
+  "@esbuild/openbsd-arm64@npm:0.25.10": "4c68206360952d04fbafe32d3f4cf420f15c0a150f914d398746f1cf8241073fe9422cc0cc0de8b0b98b8158879dc5fd322eb8454d936457eab3dc9ba131584d",
+  "@esbuild/openbsd-x64@npm:0.24.2": "8c3d2639c11a1c63b1e2d8d946463108ffbe282f719d7db6a68f72b2437a46138b13612f95c836e51b835f48c473f312883e75eadbce393006bc16a9d7be344d",
+  "@esbuild/openbsd-x64@npm:0.25.10": "70328d84e7954932d0fcd282bc2a16fdd31a899ef23f5214221e64bfebd80222b03a7629d9af55fea220df6a41cd51d0c068618f443dc37ad717dc6601a9445b",
+  "@esbuild/openharmony-arm64@npm:0.25.10": "ca11e8c30cddd7603235cf05185678f6aad7c40eccd8ef57a207325b8553e5481503cda7ae35d777eb5020b9426f2d13332aba147732a9abe0f5b3964a6c0d17",
+  "@esbuild/sunos-x64@npm:0.24.2": "c6bac82fd781898c24518e262aa366562a0291ed7d4d206c4d58c68763b13e817c7caba2b8fdf643c2cf35b84fdfc7810a6d5a74ecdaa3d6b1834a920ccc7eec",
+  "@esbuild/sunos-x64@npm:0.25.10": "46c205aa7a15d7b5d13553300f3d36593e7119a320672ac3c092f5a67db6cb91f9c59a235dfbe2947bd99f7653bb3be325a33c3474a00b90d39856ef9b05af48",
+  "@esbuild/win32-arm64@npm:0.24.2": "543bafd1eb7bf526647b9a242bfd766d1ea240a822516dce45c45c23cb9dfa37e56f3bafe9b505328ac7ffc30593356aeb43aeb78eb8180290cd6d630e561bb2",
+  "@esbuild/win32-arm64@npm:0.25.10": "ca2d057a874607013788fd3a161e8e25fcfb777a7aa6edd68662cff3869d1566541d61caab9b11e16515e2192673bf70c00f5efc38f67d1305f76b55bbe8febd",
+  "@esbuild/win32-ia32@npm:0.24.2": "78ae4f6ab854533866ebef7b3b280ea4d4c8e5c01bab93e9c1e27b34761835d592cf9120a26aab88919f05a14f10d5507d43303f61d5a63281f15c955e6d75e6",
+  "@esbuild/win32-ia32@npm:0.25.10": "fa5efade9e9a1a01e65223f22304dd71a3d005a2b394309a652bb231bdbc14fe937ec7bf0ce1e117fed182731430e055828616d1c10abee2dfc80aee50fee13e",
+  "@esbuild/win32-x64@npm:0.24.2": "832ec82bb96896ef19e4de1c155ece318182844c6ad3a4506e470165035bb940c380aa5fab5febd68e3a8321e29e7e61382b5b61d25962ef7bd864d1a00b966a",
+  "@esbuild/win32-x64@npm:0.25.10": "0f2cb29b001bf4a71035b37d42bcaeb48baef5a6b07be2c024593a18dcec87cd5829a0cc17acc7128cd251bd6232bdbd04d967d9c2bd7db9c1978effffe31671",
+  "@oxc-resolver/binding-android-arm-eabi@npm:11.9.0": "a8b497d32c3b910ce4dbb6c1fc41a9f2e206e3678f43ad7a3225faf397040fe9c8e145482dbf9b3cc153d552848ffa36ef4a77923d7aeb543f02fd86aeab2395",
+  "@oxc-resolver/binding-android-arm64@npm:11.9.0": "a8e0875a84ebd3080aeba57e292ca4fd6a6cf5248dfe4faad20f809dfc2e6aacf83fb492dc89f70ba1988d91813e70486b1e8f41f552e9099038ca2cf8648d53",
+  "@oxc-resolver/binding-darwin-arm64@npm:11.9.0": "46e2298cbedf98d7e060866c86fe995e281448d9413eb14870007c2c92037ea3ce12462ab33c5c357ef68b9a794a60e385cc275486bcb5204d263d88d6273239",
+  "@oxc-resolver/binding-darwin-x64@npm:11.9.0": "1f111c317f87e76b42d2e958a9381d9dbe9d4a776fd12f90e50849ad7e67649f0a5460d117fbc942fa5d77d20c90e255cc4eb55412474a616e4b8284ee2bcce4",
+  "@oxc-resolver/binding-freebsd-x64@npm:11.9.0": "1ddb4e027eaa9d8eed578c1601f27c849542fbac51d8c83d2bd8b551bec70cc42035587ccda83d66f8a5dcb8c9190335327a013fef2c4c5b2076fee9f3a34310",
+  "@oxc-resolver/binding-linux-arm-gnueabihf@npm:11.9.0": "744ee80d3e16b7b04b409ab4f068f5c1759e62f139efe3b58d8c3e866c2951b0aeed0dbc445a3cfc8a41f238178b07ed1f3043c2d637a99e2a0d36fefe2133c2",
+  "@oxc-resolver/binding-linux-arm-musleabihf@npm:11.9.0": "ea3a3eb9686a1f273940a9fe2b4c03fe38e6ed2820c8b31a2c7567c4698a46048098584188697674df5b41f17fee938b9c5316cee04381ba04c20c6f79de1cc4",
+  "@oxc-resolver/binding-linux-arm64-gnu@npm:11.9.0": "55a5b39380e6de59a7c3783dd9a6c92e23c6fc92304d358f3257ca86e4ef33fa6f616e028a769c460e325943edb01bcc105639b6743cbe73f343f8af32a4561d",
+  "@oxc-resolver/binding-linux-arm64-musl@npm:11.9.0": "cc30df5ea8769a3a09fd38608f575d158b9eba6a0d78b1be8b6965ed48f41860d4eb08ce037560c431e8fa94142715cfd32974bb3829c110b8243c5a864c5999",
+  "@oxc-resolver/binding-linux-ppc64-gnu@npm:11.9.0": "f135db606c4111069530170e141cf9404bf3d2bcdc4f990ff5fec49a776a23379a3f5c7ef17a8569e531d7fd10edd87e0b17fd00764add13fcb8da50e5befc64",
+  "@oxc-resolver/binding-linux-riscv64-gnu@npm:11.9.0": "77e6f46548ac1a28ba467c297a6995f4f9dcf2b0ceee189ec9495ec5d2139860946a8f6ca366d02675c2522fdcf8d4daadaa649238f8c60d7d95ccc884ab39e3",
+  "@oxc-resolver/binding-linux-riscv64-musl@npm:11.9.0": "32b934585f116d713fd88adc40b261ef3cfb935dc977ed9a41ebb7268fc6e658827e0ceb604118619766620945c17ad61ca32e723df00d11aaf138649a563e51",
+  "@oxc-resolver/binding-linux-s390x-gnu@npm:11.9.0": "9a38b80189f41c54814df8df225c98dc248ec8f545b5dc9688d4b4d019d9a36f49c332084714a42c258a7d0b46a55912cffbade9ced927bd73ad03773cd6dbb0",
+  "@oxc-resolver/binding-linux-x64-gnu@npm:11.9.0": "bc8396a899fbbd93be90274ab54e6f04f0316af044b4c8da4013bd521aed1a08fa14fd4fb9a794db67bca4a9c5c7f549960c73e337cd90503359fac430d0c058",
+  "@oxc-resolver/binding-linux-x64-musl@npm:11.9.0": "50204fe87a9c431ba20ba68851f9f2bec2518a69c7bd16b64ce1187233684e9d90731b122d5529de9bdb2789557589d88de8c19e8fe777afa1f0ee4e5055f2a2",
+  "@oxc-resolver/binding-wasm32-wasi@npm:11.9.0": "db5ffa78a885f13c56992925d585dab662391410e68777fb93af3c9e575474458c2fae019f69400a81b0cef2379b591df2971f8ffe08a54b6856a3e07787eec2",
+  "@oxc-resolver/binding-win32-arm64-msvc@npm:11.9.0": "2530c6d12e5355ecf1fe91b4a3408b29da189099048bf37c89a63bbf8c70a87b8a3a861b8a72c68a47f18a1f51f6f30710e30913daa32d8ed974a7b803702247",
+  "@oxc-resolver/binding-win32-ia32-msvc@npm:11.9.0": "752a4c5df465f413194bf827b156712ae97fba7573181a2039ffc4bb3a8b652bd51ef6c0ee2553e664e63e6142375ca983fec10380f0cf5f4e464f71f99642f6",
+  "@oxc-resolver/binding-win32-x64-msvc@npm:11.9.0": "b37816aa7f7dbbc6125e9432cc214be5132ae9bf97adac2759700ad15ca23cbf91d7f53fa4e894084db49204c1c071e1e6cc2a976c8881cbcdceb21b0dfddc0c",
+  "@rollup/rollup-android-arm-eabi@npm:4.52.4": "f05e8f49b55b9ef8ffbb825ec7521aedc307f30efe46c16479aa1afd572f238d4fa9d8546b80223cd87195df04c409ab947e2740528b4e7622a75834f038508c",
+  "@rollup/rollup-android-arm64@npm:4.52.4": "b71706dfe398a58aa2b0d0051c713f1c52e1b368a3e17efa2356cf0b32573aec9a846303803a9de45ff07e3d6e0473f8a3050f3aee820d58b8c34abee393c4e7",
+  "@rollup/rollup-darwin-arm64@npm:4.52.4": "5dbd1250d61fceabf48ea2ab10976a6f4c3268c5d479af38bf0544d1d9e8638bf60dfd82254b67005ee7a1912d6f589491d34ed6a7e676f2bd2cb1a946560c6a",
+  "@rollup/rollup-darwin-x64@npm:4.52.4": "8f380b5379bee854c9b00906ac6a65cc7623b52063ae221d23e767117ec46c505f11a7089c09946fa7d0773d9728c754c82aec74f75770591745d8eac0bf0167",
+  "@rollup/rollup-freebsd-arm64@npm:4.52.4": "e187e6e1e1db3367c72772224ed5f5de48bfc6e106140b4b20ee737928b97494dfa4a254deb12fc61982bc29b40a27cb813289fa2a4197a0fcfada0d763a72de",
+  "@rollup/rollup-freebsd-x64@npm:4.52.4": "6436f07da6faba1d70d82b7d9abc2c92a10a4db465d153da092bcf1440fe7fd07d8575db555d51a8cbc4d36b21cb48f9a321b5aa56febbdbf70137dbbe883e75",
+  "@rollup/rollup-linux-arm-gnueabihf@npm:4.52.4": "432fa13b7925ca3327ed5ed6622f1025aa2515fea6f8b3ed60ad4fe4926ea65b9edac57fc602d96561e50a141a55fef1f21f7be1f8be31f0fd6ace3a81e861b3",
+  "@rollup/rollup-linux-arm-musleabihf@npm:4.52.4": "05dd27127ad1cfecb99a7dcbe75285ba0839d59499cc383fa1f83e2f7141f470c04997c9493dfe5233fde6a77dfb64d35ec142068958992db400fefc3f5b11db",
+  "@rollup/rollup-linux-arm64-gnu@npm:4.52.4": "dfbb12c24e47f16a0fee518f83b3bdf076c939094b9fbc0cc53003c8e4f13427404e0c5d400929d689e50396c55cc138259ac245f22fefcf6a59511c3d82398f",
+  "@rollup/rollup-linux-arm64-musl@npm:4.52.4": "567e31b91ba937e1f4edbaacd4fcd3a6b3eaa04eac9a9c0a1b523b6b62854f6fb664cc03b858c96d3454445dd3b0d9f7fc812c92b6f2ff5af957d3dec102f6dd",
+  "@rollup/rollup-linux-loong64-gnu@npm:4.52.4": "4a136776a875255cee922299a2b12f4695e3ae20ec06fd3b787f61f846a1b8726588ab5f378e1605b37b5f7d48c2ca062a23348194e3588ed961b10a170e0b0c",
+  "@rollup/rollup-linux-ppc64-gnu@npm:4.52.4": "e933600fb4cf9964cb18741aac508761d8c23209b4236cceb4d944c2dcf8df8f3d7b9041eb6a2c7c96112b601aeb41d51cc84ff96e79035b6a9361954cb0cc65",
+  "@rollup/rollup-linux-riscv64-gnu@npm:4.52.4": "282d676206f8d64728b170d55959a9c67ec43161d7545802052a40b01b1a75a13547307f4940e9b0ea31d2c4ce7893427d1157a7b970a599b56e59d2d2d58dc0",
+  "@rollup/rollup-linux-riscv64-musl@npm:4.52.4": "ec926b01e338d632be3be5636c873f799491f428ee5bb890bec539ac1f25dcc82b3772882b9f4df4c7fe01112e840adbf2ac7bceb8f202828de9141d9f81697d",
+  "@rollup/rollup-linux-s390x-gnu@npm:4.52.4": "4f7ab450a19d40f9830312324b5a154252dccdd23b84b36bdd6aad2f85c3080694eb6d1220e345dc95f8e598f0808c56ad90b71be593fe801b23b75c4317f86a",
+  "@rollup/rollup-linux-x64-gnu@npm:4.52.4": "4fe512b8683e6f24951121a5402beddf7918a6598e710a258775da78cc203e80c0dc266833c41fdb56654e5c8b9837a3ab5ed0851f090049c253c4c4c3a9a8e3",
+  "@rollup/rollup-linux-x64-musl@npm:4.52.4": "8725b1059c94451da32b40c226e1dcd344b2b05870fe6ff9cd248783f2aa47544312fe763a8469d1068c88146b483a36c7d8fa52482d060c4719ee8abae2396b",
+  "@rollup/rollup-openharmony-arm64@npm:4.52.4": "d1bdc31c89f66a5200623752c520fc2f1288580130a314d3b5e7f612ad339b510fa51bdd9e3915649681cc49f1904b792dd24fe3c719332741e7f74d559e6db3",
+  "@rollup/rollup-win32-arm64-msvc@npm:4.52.4": "5e3c4087ef03f4d21beea081b422f939ef5aef91e9fd7312f76ca2a6a3867fb7499e3b648b20fd1a3e84afbe501a27adfa6cc6bce6795274b8d361833be87958",
+  "@rollup/rollup-win32-ia32-msvc@npm:4.52.4": "5e049bc12b1ad44643f273069fb13e1f56fce6ce88b1185a26a96c7b6e6e298f45045e99fd1e8057b0542d940f36c9b176b6ab30a370a04df308e227611233db",
+  "@rollup/rollup-win32-x64-gnu@npm:4.52.4": "795de059e4cdcc94bfae05803df783035faae42c9350c9f040a53306615fbec41a5fb5e9db3572fad67c80c9f805059be6cee53e9f904f4ef24f241be0dace7a",
+  "@rollup/rollup-win32-x64-msvc@npm:4.52.4": "8bdaab594db83cd530c73c57e922e13ab6dad661c9f36e821d5b30f2c1ed5bbb394ee931400b969da3af20d1e99b45bc1a5c30953235ed93df37cf3a48dad47c",
+  "dmg-license@npm:1.0.11": "feef35cfb45270a72daadcca9584be5cb840f924448b9d4e543fcd61f1b6d471151049f277c91de1d8b003fad6203d0176066a5f427a01df5fb073402cb8c8b7",
+  "iconv-corefoundation@npm:1.1.7": "bc6f08ac421e5e92ed20f3825f123fd705e036612b2b6aa687958de753c06f32e54f0203ef55540869e3ee189eaea15e43a2757f3a90e555c4dd512c9422da43"
+}
diff --git a/pkgs/by-name/vu/vultisig-cli/package.nix b/pkgs/by-name/vu/vultisig-cli/package.nix
new file mode 100644
index 000000000000..725b2390e027
--- /dev/null
+++ b/pkgs/by-name/vu/vultisig-cli/package.nix
@@ -0,0 +1,82 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  nodejs,
+  yarn-berry,
+  makeWrapper,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "vultisig-cli";
+  version = "0.5.0";
+
+  src = fetchFromGitHub {
+    owner = "vultisig";
+    repo = "vultisig-sdk";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-vpWoKxdiUSSI8xGYXmnduJnB3zB3jpBMxz+9eGXJgvM=";
+  };
+
+  missingHashes = ./missing-hashes.json;
+
+  offlineCache = yarn-berry.fetchYarnBerryDeps {
+    inherit (finalAttrs) src missingHashes;
+    hash = "sha256-ZJfLfaTvJKyCh4FtOs7IyZskBBjrJLjI0/9hphclFvU=";
+  };
+
+  nativeBuildInputs = [
+    nodejs
+    yarn-berry
+    yarn-berry.yarnBerryConfigHook
+    makeWrapper
+  ];
+
+  # Skip electron binary download; not needed for the CLI
+  env.ELECTRON_SKIP_BINARY_DOWNLOAD = "1";
+
+  buildPhase = ''
+    runHook preBuild
+
+    # Build workspace dependencies needed by the CLI at runtime (SDK must come first)
+    YARN_IGNORE_PATH=1 yarn workspace @vultisig/sdk build:platform:node
+    YARN_IGNORE_PATH=1 yarn workspace @vultisig/sdk build:types
+    YARN_IGNORE_PATH=1 yarn workspace @vultisig/rujira build
+    YARN_IGNORE_PATH=1 yarn workspace @vultisig/cli build
+
+    runHook postBuild
+  '';
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/lib/vultisig-cli
+
+    cp -r node_modules $out/lib/vultisig-cli/
+    cp -r clients/cli/dist $out/lib/vultisig-cli/
+    cp clients/cli/package.json $out/lib/vultisig-cli/
+
+    # Remove broken symlinks (workspace packages that point into the monorepo)
+    find $out/lib/vultisig-cli/node_modules -type l ! -exec test -e {} \; -delete
+
+    # Copy built workspace packages that the CLI needs at runtime
+    mkdir -p $out/lib/vultisig-cli/node_modules/@vultisig
+    cp -rL packages/sdk $out/lib/vultisig-cli/node_modules/@vultisig/sdk
+    cp -rL packages/rujira $out/lib/vultisig-cli/node_modules/@vultisig/rujira
+
+    mkdir -p $out/bin
+    makeWrapper ${lib.getExe nodejs} $out/bin/vultisig \
+      --add-flags "$out/lib/vultisig-cli/dist/index.js"
+
+    runHook postInstall
+  '';
+
+  meta = {
+    description = "Command-line wallet for Vultisig - multi-chain MPC wallet management";
+    homepage = "https://vultisig.com";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ RaghavSood ];
+    mainProgram = "vultisig";
+    platforms = lib.platforms.all;
+  };
+})
diff --git a/pkgs/by-name/vu/vunnel/package.nix b/pkgs/by-name/vu/vunnel/package.nix
index e3efa1b482ef..4d1fea61386c 100644
--- a/pkgs/by-name/vu/vunnel/package.nix
+++ b/pkgs/by-name/vu/vunnel/package.nix
@@ -7,14 +7,14 @@
 
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "vunnel";
-  version = "0.48.0";
+  version = "0.55.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "anchore";
     repo = "vunnel";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-D0/DoYmmLeAvGnr6ljE8p0B6dmFi4UHwcWCQRb85OkM=";
+    hash = "sha256-D3f+r+FGcdetE8kwSddVRE9qQ+LiwUHaJaUqUS086cs=";
     leaveDotGit = true;
   };
 
@@ -55,6 +55,7 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
       sqlalchemy
       xsdata
       xxhash
+      yardstick
       zstandard
     ]
     ++ xsdata.optional-dependencies.cli
diff --git a/pkgs/development/perl-modules/ImageExifTool/default.nix b/pkgs/development/perl-modules/ImageExifTool/default.nix
index b2c9435cf7d2..938de51ee095 100644
--- a/pkgs/development/perl-modules/ImageExifTool/default.nix
+++ b/pkgs/development/perl-modules/ImageExifTool/default.nix
@@ -12,13 +12,13 @@
 
 buildPerlPackage rec {
   pname = "Image-ExifTool";
-  version = "13.39";
+  version = "13.52";
 
   src = fetchFromGitHub {
     owner = "exiftool";
     repo = "exiftool";
     tag = version;
-    hash = "sha256-GPm3HOt7fNMbXRrV5V+ykJAfhww1O6NrD0l/7hA2i28=";
+    hash = "sha256-vsIktUk93fA8lqmphl2xk0Hqgh7VJ08LCP98NnD2o/Q=";
   };
 
   postPatch = ''
diff --git a/pkgs/development/python-modules/boto3-stubs/default.nix b/pkgs/development/python-modules/boto3-stubs/default.nix
index badb39a19970..eaf3691b90a2 100644
--- a/pkgs/development/python-modules/boto3-stubs/default.nix
+++ b/pkgs/development/python-modules/boto3-stubs/default.nix
@@ -358,13 +358,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "boto3-stubs";
-  version = "1.42.57";
+  version = "1.42.59";
   pyproject = true;
 
   src = fetchPypi {
     pname = "boto3_stubs";
     inherit (finalAttrs) version;
-    hash = "sha256-i+hnFoIEBs4JlvcqpY40uhoeu0OGfYpCPGCsj+lE8wM=";
+    hash = "sha256-Sm/FIFYO5qLLngW9/NRdTgfZ+5HPSD3706Wrh+/muGA=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/gvm-tools/default.nix b/pkgs/development/python-modules/gvm-tools/default.nix
index 9fc6cdff22d8..948958291798 100644
--- a/pkgs/development/python-modules/gvm-tools/default.nix
+++ b/pkgs/development/python-modules/gvm-tools/default.nix
@@ -9,14 +9,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "gvm-tools";
-  version = "25.4.6";
+  version = "25.4.7";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "greenbone";
     repo = "gvm-tools";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-cx2eGE+oEZXLi9Zw769jzQAUwEUOavh4lSfYNn7aBsM=";
+    hash = "sha256-4RcpnQpWTwOXzaUYLToR2S3KVJ9q7Pdecge3s6L8sd8=";
   };
 
   __darwinAllowLocalNetworking = true;
diff --git a/pkgs/development/python-modules/hyperpyyaml/default.nix b/pkgs/development/python-modules/hyperpyyaml/default.nix
index 68c77bf378d7..0c9ebca66166 100644
--- a/pkgs/development/python-modules/hyperpyyaml/default.nix
+++ b/pkgs/development/python-modules/hyperpyyaml/default.nix
@@ -40,6 +40,8 @@ buildPythonPackage rec {
   pythonImportsCheck = [ "hyperpyyaml" ];
 
   meta = {
+    # https://github.com/speechbrain/HyperPyYAML/pull/32
+    broken = lib.versionAtLeast ruamel-yaml.version "0.19";
     description = "Extensions to YAML syntax for better python interaction";
     homepage = "https://github.com/speechbrain/HyperPyYAML";
     changelog = "https://github.com/speechbrain/HyperPyYAML/releases/tag/${src.tag}";
diff --git a/pkgs/development/python-modules/llama-index-vector-stores-milvus/default.nix b/pkgs/development/python-modules/llama-index-vector-stores-milvus/default.nix
index 4f6a0b167520..774c551d7eba 100644
--- a/pkgs/development/python-modules/llama-index-vector-stores-milvus/default.nix
+++ b/pkgs/development/python-modules/llama-index-vector-stores-milvus/default.nix
@@ -9,13 +9,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "llama-index-vector-stores-milvus";
-  version = "0.9.6";
+  version = "1.0.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "llama_index_vector_stores_milvus";
     inherit (finalAttrs) version;
-    hash = "sha256-bTisWTmlcOAkBof1T77k4f9sX6otKNJTd6PzjSygfis=";
+    hash = "sha256-u3IqnwF1fe4gkdbsO9n9+wNp/nMdUnTguVeXqaUymUM=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/manim/default.nix b/pkgs/development/python-modules/manim/default.nix
index be20a1abbe51..c30af66c430e 100644
--- a/pkgs/development/python-modules/manim/default.nix
+++ b/pkgs/development/python-modules/manim/default.nix
@@ -188,13 +188,13 @@ in
 buildPythonPackage (finalAttrs: {
   pname = "manim";
   pyproject = true;
-  version = "0.20.0";
+  version = "0.20.1";
 
   src = fetchFromGitHub {
     owner = "ManimCommunity";
     repo = "manim";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-sn33kI0AswuvE653hWmke+7+qdJo5COzPaL8Y2aGbsU=";
+    hash = "sha256-rfPqKPbxT8UsxSin4DquDjPMAUEYmKixx2fBlr5mz8U=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/mathutils/default.nix b/pkgs/development/python-modules/mathutils/default.nix
index 8703e0104cd8..d1dfe06b8fcd 100644
--- a/pkgs/development/python-modules/mathutils/default.nix
+++ b/pkgs/development/python-modules/mathutils/default.nix
@@ -1,42 +1,50 @@
 {
   lib,
   buildPythonPackage,
-  fetchFromGitLab,
-  pythonAtLeast,
+  fetchPypi,
 
   # build-system
   setuptools,
+
+  # nativeBuildInputs
+  pkg-config,
+
+  # buildInputs
+  eigen,
 }:
 
-buildPythonPackage {
+buildPythonPackage (finalAttrs: {
   pname = "mathutils";
-  version = "3.3.0";
+  version = "5.1.0";
   pyproject = true;
 
-  src = fetchFromGitLab {
-    owner = "ideasman42";
-    repo = "blender-mathutils";
-    rev = "d63d623a9e580a567eb6acb7dbed7cad0e4f8c28";
-    hash = "sha256-c28kt2ADw4wHNLN0CBPcJU/kqm6g679QRaICk4WwaBc=";
+  # No tags on GitLab
+  src = fetchPypi {
+    inherit (finalAttrs) pname version;
+    hash = "sha256-sXGvnWtUoSE4yd6tT1kwo/qvkjh8xf+qgvGPvuFVQWg=";
   };
 
-  # error: implicit declaration of function ‘_PyLong_AsInt’; did you mean ‘PyLong_AsInt’? [-Wimplicit-function-declaration]
-  # https://github.com/python/cpython/issues/108444
-  postPatch = lib.optionalString (pythonAtLeast "3.13") ''
-    substituteInPlace src/generic/py_capi_utils.{c,h} \
-      --replace-fail "_PyLong_AsInt" "PyLong_AsInt"
-  '';
-
   build-system = [
     setuptools
   ];
 
+  nativeBuildInputs = [
+    pkg-config
+  ];
+
+  buildInputs = [
+    eigen
+  ];
+
   pythonImportsCheck = [ "mathutils" ];
 
+  # no tests
+  doCheck = false;
+
   meta = {
     description = "General math utilities library providing Matrix, Vector, Quaternion, Euler and Color classes, written in C for speed";
     homepage = "https://gitlab.com/ideasman42/blender-mathutils";
     license = lib.licenses.gpl2Plus;
     maintainers = with lib.maintainers; [ autra ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 73859f9eee01..95ac1a6a3eaf 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -159,12 +159,12 @@ in
       "sha256-ESsxNpqqY56rqbweQLpcLDA25i6+A59hiOB9AUk+W8k=";
 
   mypy-boto3-backup-gateway =
-    buildMypyBoto3Package "backup-gateway" "1.42.3"
-      "sha256-uKbD5VkYnYO2PKd1Lp9PAg9+5p8X+LisT+N6TsqhZRY=";
+    buildMypyBoto3Package "backup-gateway" "1.42.58"
+      "sha256-G3kwLm2IEgXNFrs8V2uCj0su2S3P72FzmWSOEYjlV4c=";
 
   mypy-boto3-batch =
-    buildMypyBoto3Package "batch" "1.42.57"
-      "sha256-aP8CxnYZiQs/5mWsCfWSz4RSsRkqSDNXVGuesSw0xdg=";
+    buildMypyBoto3Package "batch" "1.42.59"
+      "sha256-RYL6s/uF5iFEIEFewaq2gXX7YeKgC1EWomCRyerJZS4=";
 
   mypy-boto3-billingconductor =
     buildMypyBoto3Package "billingconductor" "1.42.7"
@@ -311,8 +311,8 @@ in
       "sha256-N9PEmvqI7Yc7AAuDdOj1iePSq7hJTgOmS+4z7GzYd98=";
 
   mypy-boto3-cognito-idp =
-    buildMypyBoto3Package "cognito-idp" "1.42.37"
-      "sha256-Njxu5vNc9GPHqBTIvUMQGYxjVSYJrqQMbgd0B2e98pQ=";
+    buildMypyBoto3Package "cognito-idp" "1.42.59"
+      "sha256-TE+BT1wJvhWsNq1nnyiX6QbT0oHVCvMa/YzChpI3gls=";
 
   mypy-boto3-cognito-sync =
     buildMypyBoto3Package "cognito-sync" "1.42.3"
@@ -335,8 +335,8 @@ in
       "sha256-HQUL0R1NWP6DXQ26iS9k6lIAVdwK899fwLGH4/Z4U8Q=";
 
   mypy-boto3-connect =
-    buildMypyBoto3Package "connect" "1.42.52"
-      "sha256-eAdZIurbLHgxl+gsbD86zRSlFc18RcjDhdnTg3stJfo=";
+    buildMypyBoto3Package "connect" "1.42.59"
+      "sha256-Emsl+UKfvHGf0KKvTdTIZ5gw+NJMEom5zz+AfcJZWD8=";
 
   mypy-boto3-connect-contact-lens =
     buildMypyBoto3Package "connect-contact-lens" "1.42.3"
@@ -363,8 +363,8 @@ in
       "sha256-SAgpP1O6oGP8QIp6qoG4bu/axKZyVWgbdt8ZmZkrezY=";
 
   mypy-boto3-customer-profiles =
-    buildMypyBoto3Package "customer-profiles" "1.42.3"
-      "sha256-6LDJSwFvf72wMcyzeRH7wsfjaDjfYFDe4yXpl+r1Db4=";
+    buildMypyBoto3Package "customer-profiles" "1.42.59"
+      "sha256-NHIaeJHrZ8mLDNY98rGrWbBILWtol3yuRDkKT9nlvEE=";
 
   mypy-boto3-databrew =
     buildMypyBoto3Package "databrew" "1.42.3"
@@ -443,8 +443,8 @@ in
       "sha256-92qhSUqTiLgbtvCdi/Mmgve18mcYR00ABL+bNy7/OnY=";
 
   mypy-boto3-ec2 =
-    buildMypyBoto3Package "ec2" "1.42.57"
-      "sha256-P/cfTjEunqaGhsGudBoYpn0hhYrFcutfxzfsvYtUpQg=";
+    buildMypyBoto3Package "ec2" "1.42.58"
+      "sha256-6UyKkBJa2ZnDaWK7u3KFrDX5hntWPlR7+L6LqZbmA7I=";
 
   mypy-boto3-ec2-instance-connect =
     buildMypyBoto3Package "ec2-instance-connect" "1.42.3"
@@ -459,8 +459,8 @@ in
       "sha256-syjw4M02YXRXsJpM3e7OikE3sSTl/hIIJ3857PP2BII=";
 
   mypy-boto3-ecs =
-    buildMypyBoto3Package "ecs" "1.42.54"
-      "sha256-r6CsGi1xMbNm+GHE4omqt48Pc+ZD7G8xtax0k7ncjl4=";
+    buildMypyBoto3Package "ecs" "1.42.58"
+      "sha256-dgAvcfFtb7TSr7aZofmV2SRNMWCBViZ5XcI5z2f8wmQ=";
 
   mypy-boto3-efs =
     buildMypyBoto3Package "efs" "1.42.3"
@@ -594,8 +594,8 @@ in
       "sha256-Xo4t/M+9Kly33WHxtXSgww0cbNyF59k4LBeyyFSbSMw=";
 
   mypy-boto3-health =
-    buildMypyBoto3Package "health" "1.42.33"
-      "sha256-YXXZ8ceqMcyq93rfUOr7XCB2XbpMsU3/AFk9gycUEow=";
+    buildMypyBoto3Package "health" "1.42.59"
+      "sha256-ryg+TwVNMUGrKcvt565Y4BTylGnucbPVUsi/modP8mM=";
 
   mypy-boto3-healthlake =
     buildMypyBoto3Package "healthlake" "1.42.3"
@@ -846,8 +846,8 @@ in
       "sha256-lyq6RaR12pc3LKJokhd+S5wSppt4hWdsHoVsQe34GMY=";
 
   mypy-boto3-marketplace-entitlement =
-    buildMypyBoto3Package "marketplace-entitlement" "1.42.3"
-      "sha256-tgsuuoZK5+zG3awUOa+7t9sOPM8xLBvHf69AGONd9MU=";
+    buildMypyBoto3Package "marketplace-entitlement" "1.42.58"
+      "sha256-vD0N5KMd6GE/UyMuhaULwwKNDy8ndKPSbW0bLo3eW5g=";
 
   mypy-boto3-marketplacecommerceanalytics =
     buildMypyBoto3Package "marketplacecommerceanalytics" "1.42.3"
@@ -898,8 +898,8 @@ in
       "sha256-7e9/QHJJbdGyNnpxVZZCdbxdc0ncJ7a2UsBiVF629VA=";
 
   mypy-boto3-meteringmarketplace =
-    buildMypyBoto3Package "meteringmarketplace" "1.42.33"
-      "sha256-xI5F9ZZDoE7QgeXzSDoJmagTwnOtMr2jWHE6iH/7XkA=";
+    buildMypyBoto3Package "meteringmarketplace" "1.42.58"
+      "sha256-2mZV1S76X3SaxuZ8OdSpUD3wjGjY+wv0mSJgGBG/d4Q=";
 
   mypy-boto3-mgh =
     buildMypyBoto3Package "mgh" "1.42.3"
@@ -1074,8 +1074,8 @@ in
       "sha256-N+w9coq6u6F/B69obbL/N/xL/qsEuSJJVd5WYrnD48Q=";
 
   mypy-boto3-ram =
-    buildMypyBoto3Package "ram" "1.42.43"
-      "sha256-FpciTe6Hh8CMVneGk5dBHYHsUsOU8rikKReiH90BMaY=";
+    buildMypyBoto3Package "ram" "1.42.59"
+      "sha256-jBfqP9lFktW0qJfalR0wGCuHvZv4u6XMoQR466hXLV0=";
 
   mypy-boto3-rbin =
     buildMypyBoto3Package "rbin" "1.42.3"
@@ -1218,8 +1218,8 @@ in
       "sha256-WrQvNc6TJ2XrsWhBRvR4qHzEuDvvlQ/Rqg4mi4jVnIE=";
 
   mypy-boto3-securityhub =
-    buildMypyBoto3Package "securityhub" "1.42.3"
-      "sha256-4V6ZGMFF6aoKehs7dCwziC3o1J9S/yGjmdfuLMRNirc=";
+    buildMypyBoto3Package "securityhub" "1.42.58"
+      "sha256-svAuxOrTZz/fludiFZFolRVMQmS2qdaJBrfTlynb8oA=";
 
   mypy-boto3-securitylake =
     buildMypyBoto3Package "securitylake" "1.42.3"
diff --git a/pkgs/development/python-modules/omitempty/default.nix b/pkgs/development/python-modules/omitempty/default.nix
new file mode 100644
index 000000000000..e5f2dbcb4168
--- /dev/null
+++ b/pkgs/development/python-modules/omitempty/default.nix
@@ -0,0 +1,34 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "omitempty";
+  version = "0.1.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "bfontaine";
+    repo = "omitempty";
+    tag = finalAttrs.version;
+    hash = "sha256-XQ887ArfxXnPJcCksgS5Zkg9VAfGRxu0wapewsnqdpY=";
+  };
+
+  build-system = [ setuptools ];
+
+  pythonImportsCheck = [ "omitempty" ];
+
+  # Tests are outdated
+  doCheck = false;
+
+  meta = {
+    description = "Go's omitempty for Python";
+    homepage = "https://github.com/bfontaine/omitempty";
+    changelog = "https://github.com/bfontaine/omitempty/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+  };
+})
diff --git a/pkgs/development/python-modules/osc/default.nix b/pkgs/development/python-modules/osc/default.nix
index 20a28afd26a2..66107e0999f3 100644
--- a/pkgs/development/python-modules/osc/default.nix
+++ b/pkgs/development/python-modules/osc/default.nix
@@ -13,14 +13,14 @@
 
 buildPythonPackage rec {
   pname = "osc";
-  version = "1.23.0";
+  version = "1.24.0";
   format = "setuptools";
 
   src = fetchFromGitHub {
     owner = "openSUSE";
     repo = "osc";
     rev = version;
-    hash = "sha256-FcoFWNiuSdU5qGNGJACxD9RpDDw1D9yRzVGVaXy39GY=";
+    hash = "sha256-EPt+HTvDhBEs1sf1yrG+aawRcP1yd/+kY4OTeVHHFt4=";
   };
 
   buildInputs = [ bashInteractive ]; # needed for bash-completion helper
diff --git a/pkgs/development/python-modules/ppdeep/default.nix b/pkgs/development/python-modules/ppdeep/default.nix
index c93a619a9a9a..f7bfb8ebce90 100644
--- a/pkgs/development/python-modules/ppdeep/default.nix
+++ b/pkgs/development/python-modules/ppdeep/default.nix
@@ -7,12 +7,12 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "ppdeep";
-  version = "20260218";
+  version = "20260221";
   pyproject = true;
 
   src = fetchPypi {
     inherit (finalAttrs) pname version;
-    hash = "sha256-Jp9jwVhfWA6AFsMef3N/FDot34RA5bDK88oZLONTKis=";
+    hash = "sha256-i+H0Fkt60vfEClGmZNMXZwHkCy+cG5bRju/68G3+/5Q=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/pymicro-vad/default.nix b/pkgs/development/python-modules/pymicro-vad/default.nix
index 6d625c26185f..8c796390bf15 100644
--- a/pkgs/development/python-modules/pymicro-vad/default.nix
+++ b/pkgs/development/python-modules/pymicro-vad/default.nix
@@ -13,14 +13,14 @@
 
 buildPythonPackage rec {
   pname = "pymicro-vad";
-  version = "2.0.1";
+  version = "1.0.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "rhasspy";
     repo = "pymicro-vad";
-    tag = "v${version}";
-    hash = "sha256-76/n9p+zulq8Uvqurbi9tNFkBXGchEftwqeFycY3NO0=";
+    tag = version;
+    hash = "sha256-yKy/oD6nl2qZW64+aAHZRAEFextCXT6RpMfPThB8DXE=";
   };
 
   build-system = [
@@ -33,7 +33,7 @@ buildPythonPackage rec {
   pythonImportsCheck = [ "pymicro_vad" ];
 
   meta = {
-    changelog = "https://github.com/rhasspy/pymicro-vad/releases/tag/${src.tag}";
+    changelog = "https://github.com/rhasspy/pymicro-vad/releases/tag/${version}";
     description = "Self-contained voice activity detector";
     homepage = "https://github.com/rhasspy/pymicro-vad";
     license = lib.licenses.asl20;
diff --git a/pkgs/development/python-modules/python-roborock/default.nix b/pkgs/development/python-modules/python-roborock/default.nix
index 7da9b053ce2b..a3df0fcee1b8 100644
--- a/pkgs/development/python-modules/python-roborock/default.nix
+++ b/pkgs/development/python-modules/python-roborock/default.nix
@@ -23,14 +23,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "python-roborock";
-  version = "4.14.0";
+  version = "4.17.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Python-roborock";
     repo = "python-roborock";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-SpOHJ62IZOZx9gMUuj500LNF4bDfU3XS36oKpeUupUM=";
+    hash = "sha256-xNQJ08ENiSXLsFBofILzwzRIgDbGH6yX+CBWPEIz2qQ=";
   };
 
   pythonRelaxDeps = [ "pycryptodome" ];
diff --git a/pkgs/development/python-modules/tinygrad/default.nix b/pkgs/development/python-modules/tinygrad/default.nix
index 6a9b7bfffb5b..556db2a11b83 100644
--- a/pkgs/development/python-modules/tinygrad/default.nix
+++ b/pkgs/development/python-modules/tinygrad/default.nix
@@ -254,6 +254,10 @@ buildPythonPackage (finalAttrs: {
     "test_gen_from_header"
     "test_struct_ordering"
   ]
+  ++ lib.optionals (stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isAarch64) [
+    # Exception: forward pass failed shape (2, 3, 64, 64)
+    "test_cast"
+  ]
   ++ lib.optionals (stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isx86_64) [
     # AssertionError: Expected 1 operations, got 3
     # assert 3 == 1
diff --git a/pkgs/development/python-modules/xiaomi-ble/default.nix b/pkgs/development/python-modules/xiaomi-ble/default.nix
index 530e58584f15..a88898dd4200 100644
--- a/pkgs/development/python-modules/xiaomi-ble/default.nix
+++ b/pkgs/development/python-modules/xiaomi-ble/default.nix
@@ -18,14 +18,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "xiaomi-ble";
-  version = "1.6.0";
+  version = "1.7.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Bluetooth-Devices";
     repo = "xiaomi-ble";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BSWZCugyBnyan4Hl5RxY9IhyGwELl47EQiMrHjjUTKk=";
+    hash = "sha256-r56WZs6GIFEbklcG4fEuOdbNzFntSy4JzKsRzANvf2g=";
   };
 
   build-system = [ poetry-core ];
diff --git a/pkgs/development/python-modules/yardstick/default.nix b/pkgs/development/python-modules/yardstick/default.nix
new file mode 100644
index 000000000000..315df02cd4e4
--- /dev/null
+++ b/pkgs/development/python-modules/yardstick/default.nix
@@ -0,0 +1,77 @@
+{
+  lib,
+  buildPythonPackage,
+  click,
+  dataclass-wizard,
+  dataclasses-json,
+  fetchFromGitHub,
+  gitpython,
+  hatchling,
+  importlib-metadata,
+  mergedeep,
+  omitempty,
+  prompt-toolkit,
+  pygments,
+  pytest-asyncio,
+  pytest-cov-stub,
+  pytest-mock,
+  pytestCheckHook,
+  pyyaml,
+  requests,
+  tabulate,
+  uv-dynamic-versioning,
+  xxhash,
+  zstandard,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "yardstick";
+  version = "0.16.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "anchore";
+    repo = "yardstick";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-4Kwgm2gmgOam7AVzlGYT3QhAyJf14h3pZohrhbzprpg=";
+  };
+
+  build-system = [
+    hatchling
+    uv-dynamic-versioning
+  ];
+
+  dependencies = [
+    click
+    dataclass-wizard
+    dataclasses-json
+    gitpython
+    importlib-metadata
+    mergedeep
+    omitempty
+    prompt-toolkit
+    pygments
+    pyyaml
+    requests
+    tabulate
+    xxhash
+    zstandard
+  ];
+
+  nativeCheckInputs = [
+    pytest-asyncio
+    pytest-cov-stub
+    pytest-mock
+    pytestCheckHook
+  ];
+
+  pythonImportsCheck = [ "yardstick" ];
+
+  meta = {
+    description = "Module to compare vulnerability scanners results";
+    homepage = "https://github.com/anchore/yardstick";
+    changelog = "https://github.com/anchore/yardstick/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ fab ];
+  };
+})
diff --git a/pkgs/development/tools/misc/premake/5.nix b/pkgs/development/tools/misc/premake/5.nix
index 440833f67896..efa213aa0fde 100644
--- a/pkgs/development/tools/misc/premake/5.nix
+++ b/pkgs/development/tools/misc/premake/5.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch,
 
   # build inputs
   cacert,
@@ -29,7 +30,16 @@ stdenv.mkDerivation (finalAttrs: {
     readline
   ];
 
-  patches = [ ./no-curl-ca.patch ];
+  patches = [
+    # https://github.com/premake/premake-core/issues/2614
+    (fetchpatch {
+      name = "0001-premake5-Fix-filters-using-alias-value.patch";
+      url = "https://github.com/premake/premake-core/commit/d01097bb38da6855beeef7158b8b04ab1e63249b.patch";
+      hash = "sha256-ZGhNUoXZbbW9ioFnAgPwypYhepoChtWF1SOCxs1WLj8=";
+    })
+
+    ./no-curl-ca.patch
+  ];
   postPatch = ''
     substituteInPlace contrib/curl/premake5.lua \
       --replace-fail "ca = nil" "ca = '${cacert}/etc/ssl/certs/ca-bundle.crt'"
diff --git a/pkgs/kde/misc/kirigami-addons/default.nix b/pkgs/kde/misc/kirigami-addons/default.nix
index ac0709aaedd5..71c86f5c888a 100644
--- a/pkgs/kde/misc/kirigami-addons/default.nix
+++ b/pkgs/kde/misc/kirigami-addons/default.nix
@@ -10,11 +10,11 @@
 }:
 mkKdeDerivation rec {
   pname = "kirigami-addons";
-  version = "1.11.0";
+  version = "1.12.0";
 
   src = fetchurl {
     url = "mirror://kde/stable/kirigami-addons/kirigami-addons-${version}.tar.xz";
-    hash = "sha256-bc36Mk9xDwCIfmMhIS/IWCo8RxJFDRKdkUNbse3Y1SM=";
+    hash = "sha256-UTBR3/hBfaGBnWronWwhoDZUyaYIkd9g32q6E98Z0hs=";
   };
 
   extraNativeBuildInputs = [ qttools ];
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 26793ca13ccb..ad7e88d903ee 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -11309,6 +11309,8 @@ self: super: with self; {
 
   omemo-dr = callPackage ../development/python-modules/omemo-dr { };
 
+  omitempty = callPackage ../development/python-modules/omitempty { };
+
   omnikinverter = callPackage ../development/python-modules/omnikinverter { };
 
   omnilogic = callPackage ../development/python-modules/omnilogic { };
@@ -21194,6 +21196,8 @@ self: super: with self; {
 
   yaramod = callPackage ../development/python-modules/yaramod { };
 
+  yardstick = callPackage ../development/python-modules/yardstick { };
+
   yarg = callPackage ../development/python-modules/yarg { };
 
   yargy = callPackage ../development/python-modules/yargy { };