Merge staging-next into staging

maintainers/maintainer-list.nix

@@ -118,13 +118,6 @@
     github = "0xB10C";
     githubId = 19157360;
   };
-  _0xbe7a = {
-    email = "nix@be7a.de";
-    name = "Bela Stoyan";
-    github = "0xbe7a";
-    githubId = 6232980;
-    keys = [ { fingerprint = "2536 9E86 1AA5 9EB7 4C47  B138 6510 870A 77F4 9A99"; } ];
-  };
   _0xC45 = {
     email = "jason@0xc45.com";
     name = "Jason Vigil";
@@ -4377,12 +4370,6 @@
     githubId = 1516457;
     name = "Christian Albrecht";
   };
-  callahad = {
-    email = "dan.callahan@gmail.com";
-    github = "callahad";
-    githubId = 24193;
-    name = "Dan Callahan";
-  };
   callumio = {
     email = "git@cleslie.uk";
     github = "callumio";
@@ -9378,14 +9365,6 @@
     githubId = 1943632;
     name = "fro_ozen";
   };
-  frogamic = {
-    email = "frogamic@protonmail.com";
-    github = "frogamic";
-    githubId = 10263813;
-    name = "Dominic Shelton";
-    matrix = "@frogamic:beeper.com";
-    keys = [ { fingerprint = "779A 7CA8 D51C C53A 9C51  43F7 AAE0 70F0 67EC 00A5"; } ];
-  };
   frontear = {
     name = "Ali Rizvi";
     email = "perm-iterate-0b@icloud.com";

nixos/modules/tasks/network-interfaces-scripted.nix

@@ -430,8 +430,9 @@ let
                 rm -f /run/${n}.interfaces
               '';
               reload = ''
+                # shellcheck disable=SC2013
                 # Un-enslave child interfaces (old list of interfaces)
-                for interface in `cat /run/${n}.interfaces`; do
+                for interface in $(cat /run/${n}.interfaces); do
                   ip link set dev "$interface" nomaster up
                 done
 

pkgs/applications/editors/vim/plugins/overrides.nix

@@ -1418,6 +1418,13 @@ assertNoAdditions {
     dependencies = [ self.nui-nvim ];
   };
 
+  faster-nvim = super.faster-nvim.overrideAttrs {
+    nvimSkipModules = [
+      # attempt to index global 'FasterConfig' (a nil value)
+      "faster.commands"
+    ];
+  };
+
   fastfold = super.fastfold.overrideAttrs (old: {
     meta = old.meta // {
       # This plugin is under the license "Rien à Branler", which is a French translation of the WTFPL license.
@@ -1978,6 +1985,10 @@ assertNoAdditions {
       );
     in
     {
+      patches = (old.patches or [ ]) ++ [
+        ./patches/kulala-nvim/use-packaged-tree-sitter-parser.patch
+      ];
+
       dependencies = [ kulala-http-grammar ];
 
       postPatch = ''
@@ -1988,6 +1999,10 @@ assertNoAdditions {
       nvimSkipModules = [
         # Requires some extra work to get CLI working in nixpkgs
         "cli.kulala_cli"
+        # Upstream test harnesses are not require-safe modules
+        "minit"
+        "minitest"
+        "test"
         # Legacy parser module; active parsing is handled by kulala-core
         "kulala.parser.treesitter"
       ];
@@ -2048,6 +2063,7 @@ assertNoAdditions {
       "lazyvim.plugins.extras.coding.luasnip"
       "lazyvim.plugins.extras.coding.neogen"
       "lazyvim.plugins.extras.editor.fzf"
+      "lazyvim.plugins.extras.editor.refactoring"
       "lazyvim.plugins.extras.editor.snacks_picker"
       "lazyvim.plugins.extras.editor.telescope"
       "lazyvim.plugins.extras.formatting.prettier"

pkgs/applications/editors/vim/plugins/patches/kulala-nvim/use-packaged-tree-sitter-parser.patch

@@ -0,0 +1,29 @@
+diff --git a/lua/kulala/config/parser.lua b/lua/kulala/config/parser.lua
+index 5f37046..c60c474 100644
+--- a/lua/kulala/config/parser.lua
++++ b/lua/kulala/config/parser.lua
+@@ -37,7 +37,6 @@ local function sync_queries()
+ end
+ 
+ local function load_parser()
+-  if not Fs.file_exists(parser_target_path) then return false end
+   return vim.treesitter.language.add(parser_name) == true
+ end
+ 
+@@ -48,7 +47,6 @@ M.register_parser = function()
+   -- queries/kulala_http/*.scm live under lua/tree-sitter/queries/
+   vim.opt.rtp:prepend(parser_source_path)
+   ensure_site_rtp()
+-  sync_queries()
+   vim.treesitter.language.register(parser_name, filetypes)
+   vim.treesitter.language.register("markdown", "kulala_ui")
+   local backend = require("kulala.backend")
+@@ -94,7 +92,7 @@ local function has_kulala_parser()
+ end
+ 
+ M.is_up_to_date = function()
+-  return has_kulala_parser() and is_parser_ver_current()
++  return load_parser()
+ end
+ 
+ M.setup = function()

pkgs/applications/editors/vim/plugins/vim-plugin-names

@@ -371,8 +371,8 @@ https://github.com/nvim-lua/diagnostic-nvim/,,
 https://github.com/3rd/diagram.nvim/,,
 https://github.com/monaqa/dial.nvim/,,
 https://github.com/barrettruth/diffs.nvim/,,
-https://github.com/sindrets/diffview.nvim/,,
 https://github.com/dlyongemallo/diffview-plus.nvim/,,
+https://github.com/sindrets/diffview.nvim/,,
 https://github.com/elihunter173/dirbuf.nvim/,,
 https://github.com/direnv/direnv.vim/,,
 https://github.com/chipsenkbeil/distant.nvim/,,

pkgs/applications/editors/vscode/extensions/default.nix

@@ -262,8 +262,8 @@ let
         mktplcRef = {
           name = "ng-template";
           publisher = "Angular";
-          version = "21.2.4";
-          hash = "sha256-2oTZLOQfcbqrSpEhJ0p7et/8X2JkTi4Kf2jfqVS2DKo=";
+          version = "22.0.0";
+          hash = "sha256-3b77hepFW03I2hwsVvCA3f1Jqwnq5WfGAq2yqBDIt5Q=";
         };
         meta = {
           changelog = "https://marketplace.visualstudio.com/items/Angular.ng-template/changelog";
@@ -4962,7 +4962,7 @@ let
 
         meta = {
           license = lib.licenses.mpl20;
-          maintainers = [ lib.maintainers._0xbe7a ];
+          maintainers = [ ];
         };
       };
 
@@ -5200,8 +5200,8 @@ let
         mktplcRef = {
           name = "volar";
           publisher = "Vue";
-          version = "3.3.2";
-          hash = "sha256-aGjhpgBhXVl/0dpWtfn7Eps5r7PJr99Dyu4FlPYtCw0=";
+          version = "3.3.3";
+          hash = "sha256-Q2PnfjO7wzHrmWAeD4dOFT+GFe8qGG8wHU1FpwYeDnA=";
         };
         meta = {
           changelog = "https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md";

pkgs/applications/networking/browsers/chromium/info.json

@@ -823,44 +823,44 @@
     }
   },
   "ungoogled-chromium": {
-    "version": "148.0.7778.215",
+    "version": "149.0.7827.53",
     "deps": {
       "depot_tools": {
-        "rev": "41c40cfaec7ee3bf0423c59925d8b23982a601f1",
-        "hash": "sha256-s9uvmYHCJKWnNhztmOPb+OHj/HbGo30PupwT4mHWjnM="
+        "rev": "45dedc4c3b87c982fd846b3dc599b233ed3aff90",
+        "hash": "sha256-Ttklyw6IdNeMExlzeiQg/qsCkTmqVhUJ34MFgYmCWD4="
       },
       "gn": {
-        "version": "0-unstable-2026-04-01",
-        "rev": "6e8dcdebbadf4f8aa75e6a4b6e0bdf89dce1513a",
-        "hash": "sha256-BTPD8WM1pVAMkFDlHekMdWFGyf63KdhKkKwsqikqoBQ="
+        "version": "0-unstable-2026-05-01",
+        "rev": "1740f5c25bcac5a650ee3d1c1ec22bfa25fcd756",
+        "hash": "sha256-oFs7fZAZEs/gQ7X1A4uigo9+Y+iEN9sMMQYwAjEuD04="
       },
       "ungoogled-patches": {
-        "rev": "148.0.7778.215-1",
-        "hash": "sha256-Rp+PuyOQ26Cqiu+8sNlJkjp/3bO968NYNX1AgHOyYOA="
+        "rev": "149.0.7827.53-1",
+        "hash": "sha256-j4maEZiU38tqs57cTmg8OhIAAQcT+liWU0fDA7GMZHM="
       },
-      "npmHash": "sha256-JuVcY8iFRDWcPcP4Pg+qm5rnTXkiVfNsqSkXbDWqsE8="
+      "npmHash": "sha256-pF0JtwFpPC4/fodbhSJnQKkczA9WlDg4VqEAy9aDVLg="
     },
     "DEPS": {
       "src": {
         "url": "https://chromium.googlesource.com/chromium/src.git",
-        "rev": "7c855c70efe3f6ade6663c1520913fa7f63a0b2b",
-        "hash": "sha256-uDVYgSjxQ+xw8DHVd5UNkqnUrJ6P5ZWxL2tZToBhgQg=",
+        "rev": "9d2c8156a72129edca4785abb98866fad60ea338",
+        "hash": "sha256-RPFeHTWAeJUzbWU7QyRPmT3sqf3bAEuJ7/IJ3TP40pA=",
         "recompress": true
       },
       "src/third_party/clang-format/script": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/clang/tools/clang-format.git",
-        "rev": "c2725e0622e1a86d55f14514f2177a39efea4a0e",
-        "hash": "sha256-f+BbQ6xIubloSzx/MhPSZ8ymCskmS+9+epDGtPjZqXc="
+        "rev": "6eddfb5ec5f92127a531eda66c568d3a11e7ec11",
+        "hash": "sha256-Cm6BOOlEyD0kdYxMSmk6Fj1Dnfs3zCzXsm+BOXgBme0="
       },
       "src/third_party/compiler-rt/src": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/compiler-rt.git",
-        "rev": "76287b5da8e155135536c8e3a67432d97d74fe3a",
-        "hash": "sha256-q6syHriTR8TCQSqTWbbAkVVK0a/i4wojdEGN7sWGxUY="
+        "rev": "0408cce08083f3d81379ed7d9f5bd26c03e1495b",
+        "hash": "sha256-kR5osTmp2girvNRVHzEKMZDCelgux9RrRuMoXMCRSGM="
       },
       "src/third_party/libc++/src": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libcxx.git",
-        "rev": "7ab65651aed6802d2599dcb7a73b1f82d5179d05",
-        "hash": "sha256-7O/X2JW8ghkPTjmFZmT9cgG3Ui5zk3gUb436KlPww34="
+        "rev": "be1c391acca009d8d80535ce924e3d285451cdfa",
+        "hash": "sha256-zKb9PUiiBvhVhWnbQwR8uOFJ9gt3uYmfJ4M9ijpgKRc="
       },
       "src/third_party/libc++abi/src": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libcxxabi.git",
@@ -869,13 +869,13 @@
       },
       "src/third_party/libunwind/src": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libunwind.git",
-        "rev": "6ca46ff28e3578c57cbead6f233969eb3dabc176",
-        "hash": "sha256-JW4kqpVTCFDN4WZE2S5gEkX1O7eDycl+adm3KGlUoTU="
+        "rev": "71192be150bbe04d87bb5298512d464e38d2f654",
+        "hash": "sha256-PxXemxdWZoEavKDOovi67IVWEr2YW8YK2F0LXM3LZPw="
       },
       "src/third_party/llvm-libc/src": {
         "url": "https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libc.git",
-        "rev": "2a826f2fda3cf8d75b47cbc3bb1d9b244f13a6ab",
-        "hash": "sha256-OWe2lAT5XbADWuxHgg53lZiU0My/ys86FEXvn4zlVx0="
+        "rev": "deb95b5e48e875920a2eaae799c8dbcd76a6a4db",
+        "hash": "sha256-oAgIT3+vjBrX86jgi/Pb0SCyco0lozjBjXlrKm6i56M="
       },
       "src/chrome/test/data/perf/canvas_bench": {
         "url": "https://chromium.googlesource.com/chromium/canvas_bench.git",
@@ -894,8 +894,8 @@
       },
       "src/docs/website": {
         "url": "https://chromium.googlesource.com/website.git",
-        "rev": "44319eca109f9678595924a90547c1f6650d8664",
-        "hash": "sha256-Trkan7bzRaLFlTkRfNGh7ssoZ3QpMh+mxQacsSM+d2I="
+        "rev": "c9a9ad55e9ec9934244e58a5a8cab9a295526010",
+        "hash": "sha256-2GKWEnlExrTzoIYMxeP4n2klLLT/phB5ZVJ5Nj3/aoY="
       },
       "src/media/cdm/api": {
         "url": "https://chromium.googlesource.com/chromium/cdm.git",
@@ -904,8 +904,8 @@
       },
       "src/net/third_party/quiche/src": {
         "url": "https://quiche.googlesource.com/quiche.git",
-        "rev": "21ffbe4c7b717d00d2d768c259b5b330fd754ac3",
-        "hash": "sha256-yKMmfdSBvbB3T042TJbZ1Mw+y0kyfHP0knQVFWAFPTg="
+        "rev": "fafc2fe9efc9f2e28a0815229fc14ca30c266ba8",
+        "hash": "sha256-4UmjE41MOFCBa3APDMyyJwkeV6LhHl5UsMxZpPRDsRY="
       },
       "src/testing/libfuzzer/fuzzers/wasm_corpus": {
         "url": "https://chromium.googlesource.com/v8/fuzzer_wasm_corpus.git",
@@ -914,8 +914,8 @@
       },
       "src/third_party/angle": {
         "url": "https://chromium.googlesource.com/angle/angle.git",
-        "rev": "a101e2d1db6da927325273566fe8f5404fa3a9bd",
-        "hash": "sha256-uIqodvHxEY9xNse2IHNns2Mz9zLAUZSSIN7pAXB8cPs="
+        "rev": "ded782bca9d5f165d1c4a70124cdc5384043a8b3",
+        "hash": "sha256-7+Hhx/V554hO3zzGuIZswkaRVDElz7ost7vbnf2wyZc="
       },
       "src/third_party/angle/third_party/glmark2/src": {
         "url": "https://chromium.googlesource.com/external/github.com/glmark2/glmark2",
@@ -924,18 +924,18 @@
       },
       "src/third_party/angle/third_party/rapidjson/src": {
         "url": "https://chromium.googlesource.com/external/github.com/Tencent/rapidjson",
-        "rev": "781a4e667d84aeedbeb8184b7b62425ea66ec59f",
-        "hash": "sha256-btUl1a/B0sXwf/+hyvCvVJjWqIkXfVYCpHm3TeBuOxk="
+        "rev": "24b5e7a8b27f42fa16b96fc70aade9106cf7102f",
+        "hash": "sha256-oHHLYRDMb7Y/k0CwsdsxPC5lglr2IChQi0AiOMiFn78="
       },
       "src/third_party/angle/third_party/VK-GL-CTS/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/VK-GL-CTS",
-        "rev": "f52e89f885064b9109501bca16c813bb29389993",
-        "hash": "sha256-3jx4QVR9nB3WggfrORGJGifmJQhAYVSPusa7RlR16qg="
+        "rev": "3fe33a325af90c1c820b1e8109f11ea0f4b60c9b",
+        "hash": "sha256-JgOdlwtjC5HiCWBAaeM+Ffp9KlbI7+erT0ZRZBlWxXI="
       },
       "src/third_party/anonymous_tokens/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/anonymous-tokens.git",
-        "rev": "fdff40da0398d2c229308aed169345f6ff1a150f",
-        "hash": "sha256-eJP45x3vXOG1rWvRl/0H0c2IV7nQ/9dYjAzJGHHszdc="
+        "rev": "208ea23596884f6d86476ea88b64e7931cdec08a",
+        "hash": "sha256-HLUX0mUzA3xcXbw71sIxFBNEkL8x86urcdJH2Yuuy04="
       },
       "src/third_party/readability/src": {
         "url": "https://chromium.googlesource.com/external/github.com/mozilla/readability.git",
@@ -949,28 +949,23 @@
       },
       "src/third_party/dav1d/libdav1d": {
         "url": "https://chromium.googlesource.com/external/github.com/videolan/dav1d.git",
-        "rev": "d69235dd804b24c04ed05639cffcc912cd6cfd75",
-        "hash": "sha256-iKq6TYscIBK4ydv+0msNV3tcs82Ljk5ZNr954Qv2lII="
+        "rev": "5cfc3832687e3229117203905faf5425ac6bc0d7",
+        "hash": "sha256-MWDDrb8P5AIFszY0u5gCrK+kZlbYffIt9Y1b/thXL7I="
       },
       "src/third_party/dawn": {
         "url": "https://dawn.googlesource.com/dawn.git",
-        "rev": "78a9030d63048d832c4b822839bffe38ad4f20e5",
-        "hash": "sha256-ZknkLN64TYAN5j9WsgtKlRBrAc3iCM084zpc8Zui8Ts="
+        "rev": "1815a06195d9c74ac737a96f87c05111926e04f8",
+        "hash": "sha256-71KbW0w60VB67+HM48WpOo18hrVId4/4QBDl+xl5pgo="
       },
       "src/third_party/dawn/third_party/glfw3/src": {
         "url": "https://chromium.googlesource.com/external/github.com/glfw/glfw",
-        "rev": "043378876a67b092f5d0d3d9748660121a336dd3",
-        "hash": "sha256-4QSD1/uxWfYZPMjShB0h639eqAfuBRXAVfOm6BbZCBs="
+        "rev": "b00e6a8a88ad1b60c0a045e696301deb92c9a13e",
+        "hash": "sha256-uVJOf+D3bgS/CyEL1y52gvkml6VUTtNPMTU6X5/XyS4="
       },
-      "src/third_party/dawn/third_party/dxc": {
+      "src/third_party/dawn/third_party/directx-shader-compiler/src": {
         "url": "https://chromium.googlesource.com/external/github.com/microsoft/DirectXShaderCompiler",
-        "rev": "eb67a9085c758516d940e1ce3fed0acfb6518209",
-        "hash": "sha256-z+yIuVweIyLdOiZDRfSppjTRoYq8S93+JNUla4Umot8="
-      },
-      "src/third_party/dawn/third_party/dxheaders": {
-        "url": "https://chromium.googlesource.com/external/github.com/microsoft/DirectX-Headers",
-        "rev": "980971e835876dc0cde415e8f9bc646e64667bf7",
-        "hash": "sha256-0Miw1Cy/jmOo7bLFBOHuTRDV04cSeyvUEyPkpVsX9DA="
+        "rev": "d73829d4e677ef00931e8e57de6d544396ab46cb",
+        "hash": "sha256-BIXNgVeF5x3BZWFWZ1Gz+zpNSOEl+hZWB0GgMEaNS2w="
       },
       "src/third_party/dawn/third_party/directx-headers/src": {
         "url": "https://chromium.googlesource.com/external/github.com/microsoft/DirectX-Headers",
@@ -979,33 +974,33 @@
       },
       "src/third_party/dawn/third_party/OpenGL-Registry/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/OpenGL-Registry",
-        "rev": "5bae8738b23d06968e7c3a41308568120943ae77",
-        "hash": "sha256-K3PcRIiD3AmnbiSm5TwaLs4Gu9hxaN8Y91WMKK8pOXE="
+        "rev": "9cb90ca4902d588bef3c830fbb1da484893bd5fb",
+        "hash": "sha256-mWVORjrbNFINr5WKAIDVnPs2T+96vkxWqZdJwp8oT9I="
       },
       "src/third_party/dawn/third_party/EGL-Registry/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/EGL-Registry",
-        "rev": "7dea2ed79187cd13f76183c4b9100159b9e3e071",
-        "hash": "sha256-Z6DwLfgQ1wsJXz0KKJyVieOatnDmx3cs0qJ6IEgSq1A="
+        "rev": "3d7796b3721d93976b6bfe536aa97bbc4bce8667",
+        "hash": "sha256-csSV8Yp0p0UIrodbX5793uO5iZMjQfy+0D2wPif2+Fw="
       },
       "src/third_party/dawn/third_party/webgpu-cts": {
         "url": "https://chromium.googlesource.com/external/github.com/gpuweb/cts",
-        "rev": "09fdb847d90d0b5bfe57068ce2eb9283cb77fc7f",
-        "hash": "sha256-eTAwnTiAHq8rmbw7u9nAwSuAlS5adStUJKfITlYkcgU="
+        "rev": "5c6b119c4fa0d9059c45f7637df1fe26fc80a6e4",
+        "hash": "sha256-9DAdS2u2YtrCFJu0KTuwRJjTUNexFxdmnn7LkwQ+KiQ="
       },
       "src/third_party/dawn/third_party/webgpu-headers/src": {
         "url": "https://chromium.googlesource.com/external/github.com/webgpu-native/webgpu-headers",
-        "rev": "7d3186c3dd2c708703524027b46b8703534ab3cc",
-        "hash": "sha256-yE3/mfhqc7YtVNg4f/nrUpuRUGRjOzdwl++vPvd+mvc="
+        "rev": "dc16b3e531cf4f31be54236d1a3e988ba5f295a2",
+        "hash": "sha256-tFn3OChLKsYz52Vml7WVgqyrK7SI6WR1Z2C2vvFfakI="
       },
       "src/third_party/highway/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/highway.git",
-        "rev": "84379d1c73de9681b54fbe1c035a23c7bd5d272d",
-        "hash": "sha256-HNrlqtAs1vKCoSJ5TASs34XhzjEbLW+ISco1NQON+BI="
+        "rev": "2607d3b5b0113992fe84d3848859eae13b3b52c1",
+        "hash": "sha256-YUYZO9KLffczjwIz3mBBceD6oM1giLCFLDHgDCevdRA="
       },
       "src/third_party/google_benchmark/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/benchmark.git",
-        "rev": "188e8278990a9069ffc84441cb5a024fd0bede37",
-        "hash": "sha256-GfqY2d+Nd7ovNrXxzTRm/AYWj7GuxIO6FawzUEzwOVA="
+        "rev": "8abf1e701fbd88c8170f48fe0558247e2e5f8e7d",
+        "hash": "sha256-M8QkA8+bckoRjlcVneYXNetmPEWEvmWy/mca5JA40Ho="
       },
       "src/third_party/libpfm4/src": {
         "url": "https://chromium.googlesource.com/external/git.code.sf.net/p/perfmon2/libpfm4.git",
@@ -1014,13 +1009,13 @@
       },
       "src/third_party/boringssl/src": {
         "url": "https://boringssl.googlesource.com/boringssl.git",
-        "rev": "d8be2b4a71155bf82da092ef543176351eeb59ff",
-        "hash": "sha256-fZc95YrREDbf0YcO6zahIjdX6TcRJANcH9MrkLIIIHw="
+        "rev": "65818adf16411ca394625f5747a1af28faf95d2c",
+        "hash": "sha256-tcTTzQnBp8Od1jdDMrFoCr9bnW0OCjGqUjH3QMnusmo="
       },
       "src/third_party/breakpad/breakpad": {
         "url": "https://chromium.googlesource.com/breakpad/breakpad.git",
-        "rev": "8be0e3114685fcc1589561067282edf75ea1259a",
-        "hash": "sha256-igcX5XwacIwoGbqIcZKwlJYpRWl9Uc32WdpXyHO7UVA="
+        "rev": "afa2870e449ef33ad41545e7670c574cf70926a4",
+        "hash": "sha256-+N6FPtSiLQmNqf5+x5XDSksrRq/YDVSMVx5Rv1PGjfI="
       },
       "src/third_party/cast_core/public/src": {
         "url": "https://chromium.googlesource.com/cast_core/public",
@@ -1029,13 +1024,13 @@
       },
       "src/third_party/catapult": {
         "url": "https://chromium.googlesource.com/catapult.git",
-        "rev": "4f1d71f6841d210b3a06ab3ef2e2ed679af0ee56",
-        "hash": "sha256-aHlf8gw3KxbKoyyajP4w586iYybx7HSkcKtLcZIgiDE="
+        "rev": "6e4188cabb4f37314ea41e9adfcb2cf9b64e2641",
+        "hash": "sha256-/kleYYllR22KjxHT2gTMGf6LEUZ1Ud7j593fIIAgqAA="
       },
       "src/third_party/catapult/third_party/webpagereplay": {
         "url": "https://chromium.googlesource.com/webpagereplay.git",
-        "rev": "be48b5e3387780790ecc7723434b6ea6733bcc33",
-        "hash": "sha256-KcFUlQMltsMm4WlTVMLzZXfrvu67ffkKjmBcruwZye0="
+        "rev": "b7ac48f52cd298e966a76eb054412915c3e445d4",
+        "hash": "sha256-smtwB6vzLgCAePz0jNfrpm8TxrxBnBkigLxERhxUEvE="
       },
       "src/third_party/ced/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/compact_enc_det.git",
@@ -1054,13 +1049,13 @@
       },
       "src/third_party/cpu_features/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/cpu_features.git",
-        "rev": "936b9ab5515dead115606559502e3864958f7f6e",
-        "hash": "sha256-E8LoVzhe+TAmARWZTSuINlsVhzpUJMxPPCGe/dHZcyA="
+        "rev": "d3b2440fcfc25fe8e6d0d4a85f06d68e98312f5b",
+        "hash": "sha256-IBJc1sHHh4G3oTzQm1RAHHahsEECC+BDl14DHJ8M1Ys="
       },
       "src/third_party/cpuinfo/src": {
         "url": "https://chromium.googlesource.com/external/github.com/pytorch/cpuinfo.git",
-        "rev": "7607ca500436b37ad23fb8d18614bec7796b68a7",
-        "hash": "sha256-LnLtCMMRg+DwB7MijBdt/tmCKD/zN5y2oTgXlYw3hTg="
+        "rev": "3681f0ce1446167d01dfe125d6db96ba2ac31c3c",
+        "hash": "sha256-PhWbzQgZSUb3eVyx+JTSnxVOAC2WzL2Dw1I9/6LEIsw="
       },
       "src/third_party/crc32c/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/crc32c.git",
@@ -1069,28 +1064,28 @@
       },
       "src/third_party/cros_system_api": {
         "url": "https://chromium.googlesource.com/chromiumos/platform2/system_api.git",
-        "rev": "c27a09148de373889e5d2bf616c4e85a68050ae2",
-        "hash": "sha256-a/mAa1+if6B1FHe9crO8PDpc3o8M+CeIuXjXT0lwZOY="
+        "rev": "7ecd2b41460516ecd7b7d6e5c298db25e1436b6f",
+        "hash": "sha256-ehbAXv4DZStWDMC3iOjmWkAc4PhAamyI4C9bdXO7FfA="
       },
       "src/third_party/crossbench": {
         "url": "https://chromium.googlesource.com/crossbench.git",
-        "rev": "c179f7919aade97c5cff64d14b9171736e7aaef9",
-        "hash": "sha256-Hxazf58z9imnGO1aj2NRtsQ+BYrfAuIuZscADpr1NVI="
+        "rev": "cecd70a5f49f777f603d38d11ac1f66c03c3e8af",
+        "hash": "sha256-zLwIY8fQVebkfN4KFMbitZODhmiN65JK2s9IG/5Cd+o="
       },
       "src/third_party/crossbench-web-tests": {
         "url": "https://chromium.googlesource.com/chromium/web-tests.git",
-        "rev": "b19e4e52c33fb8a105c3fc99598b0b9b4bc59752",
-        "hash": "sha256-7vCQw91L2c97dnVdrJ53zL8hi0KZffDJJjk7GaG3b/U="
+        "rev": "baf176aadedccc44329231d5dd40346874c2a63e",
+        "hash": "sha256-oY1/uGB6ykePIklWe35rmJWsnpu/wjkER4TJeP4TTdw="
       },
       "src/third_party/depot_tools": {
         "url": "https://chromium.googlesource.com/chromium/tools/depot_tools.git",
-        "rev": "41c40cfaec7ee3bf0423c59925d8b23982a601f1",
-        "hash": "sha256-s9uvmYHCJKWnNhztmOPb+OHj/HbGo30PupwT4mHWjnM="
+        "rev": "45dedc4c3b87c982fd846b3dc599b233ed3aff90",
+        "hash": "sha256-Ttklyw6IdNeMExlzeiQg/qsCkTmqVhUJ34MFgYmCWD4="
       },
       "src/third_party/devtools-frontend/src": {
         "url": "https://chromium.googlesource.com/devtools/devtools-frontend",
-        "rev": "1fb83ff123c44ab59a480056c8c1ba3d33c2caf0",
-        "hash": "sha256-S6agM7HMZ2g2W6e9tYdLSXr0Lc6zeQF9hAYLIeImAYQ="
+        "rev": "33c2f401a9c8ddad2159eb0ab83aa244a5247361",
+        "hash": "sha256-M9aULI+HECgA0ptAG47OPK0QuB+xzmb29iOtJ3whpB0="
       },
       "src/third_party/dom_distiller_js/dist": {
         "url": "https://chromium.googlesource.com/chromium/dom-distiller/dist.git",
@@ -1104,8 +1099,8 @@
       },
       "src/third_party/eigen3/src": {
         "url": "https://chromium.googlesource.com/external/gitlab.com/libeigen/eigen.git",
-        "rev": "a3074053a614df7a3896cb4edbcba40222a5f549",
-        "hash": "sha256-9AHpSqemqdwXoMiP3hH1YuEd3+nrudeVGTpInw+8BU4="
+        "rev": "2cf9891537250255f50df5109ffe9e700e2a73de",
+        "hash": "sha256-1bu1Y9itHIKcwY5J0sF08DSyfElLHiZ6SRsNZkFjz8o="
       },
       "src/third_party/farmhash/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/farmhash.git",
@@ -1114,18 +1109,18 @@
       },
       "src/third_party/fast_float/src": {
         "url": "https://chromium.googlesource.com/external/github.com/fastfloat/fast_float.git",
-        "rev": "cb1d42aaa1e14b09e1452cfdef373d051b8c02a4",
-        "hash": "sha256-CG5je117WYyemTe5PTqznDP0bvY5TeXn8Vu1Xh5yUzQ="
+        "rev": "05087a303dad9c98768b33c829d398223a649bc6",
+        "hash": "sha256-ZQm8kDMYdwjKugc2vBG5mwTqXa01u6hODQc/Tai2I9A="
       },
       "src/third_party/federated_compute/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google-parfait/federated-compute.git",
-        "rev": "eb170f645b270c7979edb863fd2cf8edab2b2fd1",
-        "hash": "sha256-Cp0WQBbqWvPdrKCMQhH4Z6zl6YlIPLjafWZEwdkYWlc="
+        "rev": "3112513bf1a80872311e7718c5385f535a819b89",
+        "hash": "sha256-jnG3PCxjaYcClRgzOfIkHbbD3xU9TDLyQR3VZUwHIgU="
       },
       "src/third_party/ffmpeg": {
         "url": "https://chromium.googlesource.com/chromium/third_party/ffmpeg.git",
-        "rev": "b5e18fb9da84e26ceef30d4e4886696bf59337c0",
-        "hash": "sha256-JHAicFKBvtkwmZPRBKYPT6JVqYqF8hyXxU0H7kfgCBs="
+        "rev": "f45bab87ce4c5fafc67fd53fcde777578d01bfa0",
+        "hash": "sha256-fsZSqmG6vFOPJYuBgG6OSWkzRu27B3mv/PqAP8s4ARk="
       },
       "src/third_party/flac": {
         "url": "https://chromium.googlesource.com/chromium/deps/flac.git",
@@ -1154,8 +1149,8 @@
       },
       "src/third_party/freetype/src": {
         "url": "https://chromium.googlesource.com/chromium/src/third_party/freetype2.git",
-        "rev": "6d9fc45fc4bca8aef0b8f65592520673638c3334",
-        "hash": "sha256-A21ONLz8HxoBkOL/jHfs5YwePmOnFyNdlNYSJa9wers="
+        "rev": "b6bcd2177f72bb4842c7701d7b7f633bb3fc951a",
+        "hash": "sha256-TUz3yUD9HxqUMCOpLk74rEf8J0tMTh4ZCuD94AD4+q4="
       },
       "src/third_party/fxdiv/src": {
         "url": "https://chromium.googlesource.com/external/github.com/Maratyszcza/FXdiv.git",
@@ -1164,18 +1159,13 @@
       },
       "src/third_party/harfbuzz/src": {
         "url": "https://chromium.googlesource.com/external/github.com/harfbuzz/harfbuzz.git",
-        "rev": "67bb413f586f36ba44d740319cb7a28b3d283ea6",
-        "hash": "sha256-WCPEkbiiU8dENM+ik0KokW9Uxmz0xlsRFVVPPOEOZXw="
+        "rev": "e6741e2205309752839da60ff075b7fa2e7cddd3",
+        "hash": "sha256-XjUuY17fcZi+dIZFojq+eDsDVrBxtAWRydPdudt56+8="
       },
       "src/third_party/ink/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/ink.git",
-        "rev": "9d5367423281a8fcf5bc1c418e20477a992b270a",
-        "hash": "sha256-uDaK/cDA52Cn+ioPW2bXAJze1eW8TK3xF7+bl/Ylh6Y="
-      },
-      "src/third_party/ink_stroke_modeler/src": {
-        "url": "https://chromium.googlesource.com/external/github.com/google/ink-stroke-modeler.git",
-        "rev": "da42d439389c90ec7574f0381ec53e7f5be0c2eb",
-        "hash": "sha256-W5HgVe0v9O/EuhpKMHp83PLq4p6cuBul3QUGLYdF6rY="
+        "rev": "a988417b6d0b1ea03fb0b40269fbc42313acc6fd",
+        "hash": "sha256-6O+N/ULn8sqsdgFw7VZ7TMjWvCAZbYo398PruPScU/k="
       },
       "src/third_party/instrumented_libs": {
         "url": "https://chromium.googlesource.com/chromium/third_party/instrumented_libraries.git",
@@ -1239,8 +1229,8 @@
       },
       "src/third_party/fuzztest/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/fuzztest.git",
-        "rev": "800c545cf9d6e9c01328a1974f93a7e6564a74fd",
-        "hash": "sha256-Pvz+CWTBcWE0N0yfNGZhXDgUrGeIaCNfEjP1jYmF6G0="
+        "rev": "e24a91020ab19c3d6f590bd0911b7acb492f81be",
+        "hash": "sha256-wFjuvJzGEaal+pIo5UtkdLHYTpoWxRE6Vf5OGLObGQk="
       },
       "src/third_party/domato/src": {
         "url": "https://chromium.googlesource.com/external/github.com/googleprojectzero/domato.git",
@@ -1254,13 +1244,13 @@
       },
       "src/third_party/libaom/source/libaom": {
         "url": "https://aomedia.googlesource.com/aom.git",
-        "rev": "343cee0a952f8c7d329e59ff3ac2c8bdbe70ec6a",
-        "hash": "sha256-H8Eu3BiUIiZcyReGDyFq9UvjdMJOX00ERjru8+I0zL8="
+        "rev": "33dba9e12a9f12e737eaa7c2624e8c580950a89a",
+        "hash": "sha256-01DbV0kQFg1yyFpVeo82KBoZHhizA7xnZ1qOuu4HTcs="
       },
       "src/third_party/crabbyavif/src": {
         "url": "https://chromium.googlesource.com/external/github.com/webmproject/CrabbyAvif.git",
-        "rev": "7466a44ac80893803d4a7168b98dc6cd02d1fe2d",
-        "hash": "sha256-x1MRNtGLmwlRNenoQKz2Bgm3J5eHlNiJZtzhT9lttmk="
+        "rev": "c433c9a32320aed983e4106931596fbbae3f77ee",
+        "hash": "sha256-yw1cXB6s6biD2vj2K/3sVbKiaNK7bt+NkbQovbYlJ2Q="
       },
       "src/third_party/nearby/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/nearby-connections.git",
@@ -1314,8 +1304,8 @@
       },
       "src/third_party/cros-components/src": {
         "url": "https://chromium.googlesource.com/external/google3/cros_components.git",
-        "rev": "fb512780dcc5ba4b5be9e8a3118919002077c760",
-        "hash": "sha256-7wx73HZ6aqXQvLxwX6XnJAPefi/t47gIhvDH3FRT1j4="
+        "rev": "e580888fcc1c108e25c218ccf8b7a4372de18d57",
+        "hash": "sha256-p0Wfvhg/j8v9xL9Pueo7xPVHBKowOLI00AeIZXPQw4k="
       },
       "src/third_party/libdrm/src": {
         "url": "https://chromium.googlesource.com/chromiumos/third_party/libdrm.git",
@@ -1342,20 +1332,20 @@
         "rev": "9700847afb92cb35969bdfcbbfbbb74b9c7b3376",
         "hash": "sha256-EI/uaHXe0NlqdEw764q0SjerThYEVLRogUlmrsZwXnY="
       },
-      "src/third_party/libphonenumber/dist": {
+      "src/third_party/libphonenumber/src": {
         "url": "https://chromium.googlesource.com/external/libphonenumber.git",
-        "rev": "9d46308f313f2bf8dbce1dfd4f364633ca869ca7",
-        "hash": "sha256-ZbuDrZEUVp/ekjUP8WO/FsjAomRjeDBptT4nQZvTVi4="
+        "rev": "ade546d8856475d0493863ee270eb3be9628106b",
+        "hash": "sha256-cLtsM35Ir3iG3j8+Cy2McL1ysRB0Y1PXealAKl05Twg="
       },
       "src/third_party/libprotobuf-mutator/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/libprotobuf-mutator.git",
-        "rev": "7bf98f78a30b067e22420ff699348f084f802e12",
-        "hash": "sha256-EaEC6R7SzqLw4QjEcWXFXhZc84lNBp6RSa9izjGnWKE="
+        "rev": "c1c950eae0440c3808f2b8bd7c57d0c6a42c1a90",
+        "hash": "sha256-Su1SPr/GEFi7/N8/HrFkVbGfWH0vYdcJ5/on8zLMcyU="
       },
       "src/third_party/libsrtp": {
         "url": "https://chromium.googlesource.com/chromium/deps/libsrtp.git",
-        "rev": "e8383771af8aa4096f5bcfe3743a5ea128f88a9a",
-        "hash": "sha256-xC//VEFrI94nCkyLnRa6uQ+hJQqe41v0Qjm4LJ7K84I="
+        "rev": "cd5d177bf1fde755ddb4c7f0d9ff7693f8b49e5e",
+        "hash": "sha256-6tIbthIcUw58AgaNzvSenZPp/e5vHVTp5K2bpPF+Zg0="
       },
       "src/third_party/libsync/src": {
         "url": "https://chromium.googlesource.com/aosp/platform/system/core/libsync.git",
@@ -1369,13 +1359,13 @@
       },
       "src/third_party/libvpx/source/libvpx": {
         "url": "https://chromium.googlesource.com/webm/libvpx.git",
-        "rev": "47ac1ec7f3de7d7cb3d070844c427c8f1fa9d6fc",
-        "hash": "sha256-RyYnkLYafiS6kQKeOmzohtxFRXudDzgEmQkG+qKHozc="
+        "rev": "640d4ce27ba918783e28a0da46a8a37abe4a65b6",
+        "hash": "sha256-uCa/MEfw2s05kK91uubi/TqztHulwattzt1vfr0LR4E="
       },
       "src/third_party/libwebm/source": {
         "url": "https://chromium.googlesource.com/webm/libwebm.git",
-        "rev": "b7a1e4767fbb02ad467f45ba378e858e897028da",
-        "hash": "sha256-Lzfs15Us8MDDQYvLRVf6xKg9A76aXPnTukx/A8Mf7rw="
+        "rev": "6184f4484a826724b5293837134ab9492261b941",
+        "hash": "sha256-zXPuisCv2KkGQq23qTNhHeXpyCClUIeyjHra08DHJIw="
       },
       "src/third_party/libwebp/src": {
         "url": "https://chromium.googlesource.com/webm/libwebp.git",
@@ -1384,8 +1374,8 @@
       },
       "src/third_party/libyuv": {
         "url": "https://chromium.googlesource.com/libyuv/libyuv.git",
-        "rev": "30809ff64a9ca5e45f86439c0d474c2d3eef3d05",
-        "hash": "sha256-DW7PuRqA1x0K8/uJbxBJ4Cn9YEPFhZ9vhuGVVyGKK98="
+        "rev": "a7849e8a5e9c996bef2332efae897e7301055a20",
+        "hash": "sha256-ftOTwWULKNplqjQQ9oM9t+PU3S6/ySDOBoE5E/HWuHg="
       },
       "src/third_party/lss": {
         "url": "https://chromium.googlesource.com/linux-syscall-support.git",
@@ -1404,13 +1394,13 @@
       },
       "src/third_party/nasm": {
         "url": "https://chromium.googlesource.com/chromium/deps/nasm.git",
-        "rev": "45252858722aad12e545819b2d0f370eb865431b",
-        "hash": "sha256-0KsHYi76IaVNwk0dBhem2AnUXd9PpeS+jUsY+zPmeJ8="
+        "rev": "358842b6b7dd69b2ed635bef17f941e030a05e5f",
+        "hash": "sha256-YwjwubijMZ9OvYeMUVMSunWZ2VCuqUFEOyv/MK/oojc="
       },
       "src/third_party/neon_2_sse/src": {
         "url": "https://chromium.googlesource.com/external/github.com/intel/ARM_NEON_2_x86_SSE.git",
-        "rev": "662a85912e8f86ec808f9b15ce77f8715ba53316",
-        "hash": "sha256-4OzG4wIPwnKbFD9LG+stxHt5O4qB85ZIXVeSrNqDAyM="
+        "rev": "ed59be8546632d5126ff69c87122ae5de20ffe4f",
+        "hash": "sha256-ydHSMPJS+axvW7KIR/9SLWNFq/lP67dpg9Yt7shLCng="
       },
       "src/third_party/openh264/src": {
         "url": "https://chromium.googlesource.com/external/github.com/cisco/openh264",
@@ -1419,8 +1409,8 @@
       },
       "src/third_party/openscreen/src": {
         "url": "https://chromium.googlesource.com/openscreen",
-        "rev": "448a19d1f24e0f8ce85ad0c1c6a50cf370ae69d7",
-        "hash": "sha256-hRDFnoqAH4HoWZ3oTWlzNge2nwlxpUC/GEq0MQVzBw8="
+        "rev": "684bcd767271a21f3e5d475b17a0fd862f16c65e",
+        "hash": "sha256-Yjz2E1/h+zp7L2x0zE0l+ktQIiSrJ4ZknXOhaVPKQVE="
       },
       "src/third_party/openscreen/src/buildtools": {
         "url": "https://chromium.googlesource.com/chromium/src/buildtools",
@@ -1434,13 +1424,13 @@
       },
       "src/third_party/pdfium": {
         "url": "https://pdfium.googlesource.com/pdfium.git",
-        "rev": "72ea487e4399c44c3a53a48b104f9612ca772008",
-        "hash": "sha256-0VgmDPyF5k81nBXdo88CcIIbz6XRhaiADnG8gwDGZZk="
+        "rev": "74d747ce1d383caca3ec0e604d77bac35ccd1e58",
+        "hash": "sha256-qMY6L93hlnMgGZ5Blk5ldDnI/LUXYyuk+b7FXCiVV6s="
       },
       "src/third_party/perfetto": {
         "url": "https://chromium.googlesource.com/external/github.com/google/perfetto.git",
-        "rev": "46432bb2a7a60e10fcee516f1692e6846d098a8d",
-        "hash": "sha256-jVih4xWota4SZQi4yEtaIP+4qgD03OsELt2aaulIXik="
+        "rev": "846203c4b3b25f834a0bebc101fa8e1b8f9d0ca9",
+        "hash": "sha256-YOgOau9vNrOOqyUf6WylI/oQ2drCxoW7jnrHt7fAfQM="
       },
       "src/third_party/protobuf-javascript/src": {
         "url": "https://chromium.googlesource.com/external/github.com/protocolbuffers/protobuf-javascript",
@@ -1449,8 +1439,8 @@
       },
       "src/third_party/pthreadpool/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/pthreadpool.git",
-        "rev": "9003ee6c137cea3b94161bd5c614fb43be523ee1",
-        "hash": "sha256-Es9QNblzo5b+x4K7myQJwIiUKvqyP16QExWPhGqqDO8="
+        "rev": "a56dcd79c699366e7ac6466792c3025883ff7704",
+        "hash": "sha256-WfyuPfII4eSmLskZV0TAcu4K6OyW38TjkDHm+VUx5eY="
       },
       "src/third_party/pyelftools": {
         "url": "https://chromium.googlesource.com/chromiumos/third_party/pyelftools.git",
@@ -1479,13 +1469,13 @@
       },
       "src/third_party/search_engines_data/resources": {
         "url": "https://chromium.googlesource.com/external/search_engines_data.git",
-        "rev": "2ecec7b3a56bcb5d7a4a1fc9bc71d7e1cda2a8d1",
-        "hash": "sha256-UPP47dgdXxr+LPvTcEc6gi89OxmvdKD3CdwV4wKXvwQ="
+        "rev": "2345fee6ce4ae24d9c365d5c0884ece593c55c67",
+        "hash": "sha256-5qkra6FURaMvEOk+ZKMRH1hc8ixEnk3u4rxNm0G8tuQ="
       },
       "src/third_party/skia": {
         "url": "https://skia.googlesource.com/skia.git",
-        "rev": "03c3234e64f9fbbbcf6a7b9c79e94059df49dbfe",
-        "hash": "sha256-e0MSCbqv4u4995nowzipKorkn6mPpO7tf8+ygj3/nFY="
+        "rev": "53348aa333da02b77c4b5797e2de722f5abde7d0",
+        "hash": "sha256-Qh0ytA45zP67VQE417iUtjPcJmJmDzcu4BAatyh6p0w="
       },
       "src/third_party/smhasher/src": {
         "url": "https://chromium.googlesource.com/external/smhasher.git",
@@ -1504,8 +1494,8 @@
       },
       "src/third_party/swiftshader": {
         "url": "https://swiftshader.googlesource.com/SwiftShader.git",
-        "rev": "89556131bf9d48af3c5c9fbb9a3322e706da89a3",
-        "hash": "sha256-h0utcwCnzwhFufggkBNeA674x2Kqwu4sz3jQ/9eoQv0="
+        "rev": "f9d5d49a3c599a315e3493dc1e9b5309cffb3305",
+        "hash": "sha256-kBfqgXXJeEPT80mu6CJ2Bwmdv/y8jVzM6TedMXbzo4o="
       },
       "src/third_party/text-fragments-polyfill/src": {
         "url": "https://chromium.googlesource.com/external/github.com/GoogleChromeLabs/text-fragments-polyfill.git",
@@ -1514,23 +1504,23 @@
       },
       "src/third_party/tflite/src": {
         "url": "https://chromium.googlesource.com/external/github.com/tensorflow/tensorflow.git",
-        "rev": "de8d7f65b6eb670e4dad0225d0d6f99bebaab559",
-        "hash": "sha256-r2b+/VBffxsh1sRM2xcFiBx9K6GD6FsaQXpfFMBFUag="
+        "rev": "2216f531fb72119745382c62f232acf9790f4b6e",
+        "hash": "sha256-zySLNPmug5HS5pwJ/lEMAWjjZSOuxdTgup7Y90k7NZI="
       },
       "src/third_party/litert/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google-ai-edge/LiteRT.git",
-        "rev": "588075c77c6895cce6397d41d2890b1aa0a14372",
-        "hash": "sha256-rcEPZNSV0DiDrmoBCtJ07wFzzpmpM93jG4jYaEdNWvI="
+        "rev": "9b5418dd7a1a318eed20395743dcc868df17d8b0",
+        "hash": "sha256-80amwDPF3RrcoTaTQsunNmlvBGs6KCv369FW3J/Xcts="
       },
       "src/third_party/vulkan-deps": {
         "url": "https://chromium.googlesource.com/vulkan-deps",
-        "rev": "0ced1107c62836f439f684a5696c4bd69e09fce3",
-        "hash": "sha256-VOyN618wzyyO2Wh18gCnw+FCr/NbegX3A/54MClyhwc="
+        "rev": "d234b7b29748c07ef389279dd24f533ebd04cadc",
+        "hash": "sha256-w49HOjPixSI/C5IGlxQMj/Ol9f/Lr2zI2oMhQzzu1zk="
       },
       "src/third_party/glslang/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/glslang",
-        "rev": "715c8500e7cd67f2eba9e60e98852a1ed49d2f15",
-        "hash": "sha256-vSbMdTjlRVvYLi5ZvTVmfe76oAQ4AhqyD+ohvkvIYIs="
+        "rev": "458ff50a67cb69371850068a62b78f1990a1ff9a",
+        "hash": "sha256-2WauVjAEeZn16b4fE4ImKPX3wjDmeN92mqWi3NMiXSw="
       },
       "src/third_party/spirv-cross/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/SPIRV-Cross",
@@ -1539,38 +1529,38 @@
       },
       "src/third_party/spirv-headers/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/SPIRV-Headers",
-        "rev": "6dd7ba990830f7c15ac1345ff3b43ef6ffdad216",
-        "hash": "sha256-UKBVs2s05hP+paPq1dZFaUEQQ9Kx9acHxYUyJVx22eY="
+        "rev": "126038020c2bd47efaa942ccc364ca5353ffccde",
+        "hash": "sha256-QBX2M+ZSWgVvCx58NeDIdf6mIkdJbecDktBfUWGPvNc="
       },
       "src/third_party/spirv-tools/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/SPIRV-Tools",
-        "rev": "2d14d2e76aa7de72404b17078eda15c20a6a0389",
-        "hash": "sha256-8Xtzq8WOdFEw+uEJqMW39LLHt2m165K9OJsIFZuifoM="
+        "rev": "2ec8457ab33d539b6f1fecc998360c0b8b05ed4f",
+        "hash": "sha256-9TBb/gnDXgZRZXhF27KEQ0XQI5itRHKJQjLrkFDQq7Q="
       },
       "src/third_party/vulkan-headers/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/Vulkan-Headers",
-        "rev": "afe9eb980aa928a66d1c9c06f38c55dd59868720",
-        "hash": "sha256-/yolWlC7ruRiJ0gSdCoSlqL9+j2uJAh+o+H0OG37pq4="
+        "rev": "f6a6f7ab165cedbfa2a7d0c93fe27a2d01ce09c8",
+        "hash": "sha256-ZbjmxbRUiVJADNRWziCH0UIM09qKf+lm9PRnWOhZFhQ="
       },
       "src/third_party/vulkan-loader/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/Vulkan-Loader",
-        "rev": "df84d2be47457a8dfd7eb66f8c2b031683bd1ba5",
-        "hash": "sha256-8ParcURRRU3eS9Oej/vHTwOwvYy3HsVJsKh2wQLKUgM="
+        "rev": "15a84652b94e465e9a7b25eb507193929863bc2f",
+        "hash": "sha256-pdC3YCM0Nzeabi5TPD+qR5PVdsxmWMnf2L9HsOcbv84="
       },
       "src/third_party/vulkan-tools/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/Vulkan-Tools",
-        "rev": "90bf5bc4fd8bea0d300f6564af256a51a34124b8",
-        "hash": "sha256-tmTD/waVX/duaKXvj0FNUS+ncL1agM73kK7pEfHEsSA="
+        "rev": "7c46da2b39036a80ce088576d5794bf39e667f56",
+        "hash": "sha256-nAyNVveeGg9sA0E37YiEPm+UdKsy48nAOjnUYHQnuqw="
       },
       "src/third_party/vulkan-utility-libraries/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/Vulkan-Utility-Libraries",
-        "rev": "48b1fd1a65e436bae806cb6180c9338846b9de97",
-        "hash": "sha256-B3GXmwJEvnGcER5DJt0FGrwqNi3t8iV6VgX8uOrExlU="
+        "rev": "2c909c1ab6f9c6caba39a84a4887186b3fafdead",
+        "hash": "sha256-k3xeKHQbd2rTQJsOZKXEMPrYjcHwoCC1N12F6AIP6Ho="
       },
       "src/third_party/vulkan-validation-layers/src": {
         "url": "https://chromium.googlesource.com/external/github.com/KhronosGroup/Vulkan-ValidationLayers",
-        "rev": "ac146eef210b6f52b842111c5d3419ab32a7293f",
-        "hash": "sha256-GqjVHxtda1a47+9G+nqh4qNMJmQaUdZNMUGQ8kAIIkk="
+        "rev": "b105d8ea361af258abed65efb5a1565c031dcf1c",
+        "hash": "sha256-GgznBGYgnCFMNaqAOQ15dlw2dOFfSp3mAV2KokVLzgk="
       },
       "src/third_party/vulkan_memory_allocator": {
         "url": "https://chromium.googlesource.com/external/github.com/GPUOpen-LibrariesAndSDKs/VulkanMemoryAllocator.git",
@@ -1609,23 +1599,23 @@
       },
       "src/third_party/webgpu-cts/src": {
         "url": "https://chromium.googlesource.com/external/github.com/gpuweb/cts.git",
-        "rev": "09fdb847d90d0b5bfe57068ce2eb9283cb77fc7f",
-        "hash": "sha256-eTAwnTiAHq8rmbw7u9nAwSuAlS5adStUJKfITlYkcgU="
+        "rev": "3b327ebc44f11212fd3872972a6dd394634fb9e3",
+        "hash": "sha256-RSZVKv2Z0pg2cGa3Elr2r5VZqdxlRJ+6mzm1Au1qg1I="
       },
       "src/third_party/webpagereplay": {
         "url": "https://chromium.googlesource.com/webpagereplay.git",
-        "rev": "be48b5e3387780790ecc7723434b6ea6733bcc33",
-        "hash": "sha256-KcFUlQMltsMm4WlTVMLzZXfrvu67ffkKjmBcruwZye0="
+        "rev": "b7ac48f52cd298e966a76eb054412915c3e445d4",
+        "hash": "sha256-smtwB6vzLgCAePz0jNfrpm8TxrxBnBkigLxERhxUEvE="
       },
       "src/third_party/webrtc": {
         "url": "https://webrtc.googlesource.com/src.git",
-        "rev": "e3ee86921c57b9f8921045e77f098604803cb66c",
-        "hash": "sha256-n39HENOXmatsZLF6jdYRsb+wl2cM0i6ngT4Zbyu5ayE="
+        "rev": "5a7e0ff57a52e12f834d64c57d040d1105ea17f2",
+        "hash": "sha256-V1accCSU6LV5Ixhd+HBOvqZ7GxT57ALsvaF8ABLIXxM="
       },
       "src/third_party/wuffs/src": {
         "url": "https://skia.googlesource.com/external/github.com/google/wuffs-mirror-release-c.git",
-        "rev": "e3f919ccfe3ef542cfc983a82146070258fb57f8",
-        "hash": "sha256-373d2F/STcgCHEq+PO+SCHrKVOo6uO1rqqwRN5eeBCw="
+        "rev": "50869df0ea703b4f41b238bfe26aec6ec9c86889",
+        "hash": "sha256-V7inWJqH7Q4Ac/ZB//7XHrpgfAYUPBxWBerBem6Q/Kk="
       },
       "src/third_party/weston/src": {
         "url": "https://chromium.googlesource.com/external/anongit.freedesktop.org/git/wayland/weston.git",
@@ -1634,8 +1624,13 @@
       },
       "src/third_party/xnnpack/src": {
         "url": "https://chromium.googlesource.com/external/github.com/google/XNNPACK.git",
-        "rev": "1812bbe2928a32f26c5e48466712ba6460cf290c",
-        "hash": "sha256-xal21wjgeql3MjQXw6F1ezcRsnhVKod5jv0nYWroJ1o="
+        "rev": "2ad25fc09167df69c6c02eb8082a0b9658dd5e80",
+        "hash": "sha256-vBMGBXzJPCcsc2kMyGecjti68oZHWUwJKd7tkKub6kg="
+      },
+      "src/third_party/libei/src": {
+        "url": "https://chromium.googlesource.com/external/gitlab.freedesktop.org/libinput/libei.git",
+        "rev": "5d6d8e6590df210b75559a889baa9459c68d9366",
+        "hash": "sha256-lSrIC93Cke90/Xc8dqd3e/TU32tflYHYqc5fE8wglBI="
       },
       "src/third_party/zstd/src": {
         "url": "https://chromium.googlesource.com/external/github.com/facebook/zstd.git",
@@ -1644,8 +1639,8 @@
       },
       "src/v8": {
         "url": "https://chromium.googlesource.com/v8/v8.git",
-        "rev": "5e24a1fd6ffb840b93ee90a800897fcb4d60eeab",
-        "hash": "sha256-JcBGaXhqNRIA4NPPV4eANVM93wsQ9QxSLO/Ecz3wklU="
+        "rev": "5a39b146dd810a52812202fae891281d5dc4db7d",
+        "hash": "sha256-UbX88nE4VyWUm4PvFTOy3mC04MzSdgC006ZpQrEY8cQ="
       }
     }
   }

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -355,11 +355,11 @@
     "vendorHash": null
   },
   "dopplerhq_doppler": {
-    "hash": "sha256-43NFvuKJ2QlCLoEq9N1RSv4BtF4s/GFzzakeIxw6V4Q=",
+    "hash": "sha256-vYLNRSk8U9Ez5+LrC9cr6Ux32p7n93WOJaM4lY7ghE0=",
     "homepage": "https://registry.terraform.io/providers/DopplerHQ/doppler",
     "owner": "DopplerHQ",
     "repo": "terraform-provider-doppler",
-    "rev": "v1.21.2",
+    "rev": "v1.21.3",
     "spdx": "Apache-2.0",
     "vendorHash": "sha256-B8mYLd4VdADWoQLWiCM85VQrBfDdlYQ0wkCp9eUBQ4U="
   },
@@ -616,13 +616,13 @@
     "vendorHash": "sha256-hh0tOG9HY0cWTda5vjpGwCGntD7I/wCJf6B92EMKRrQ="
   },
   "hashicorp_kubernetes": {
-    "hash": "sha256-P9ChE8AZa6LqDMOyjAx2COMGmzhCpIsiUJ9uXbTUPwo=",
+    "hash": "sha256-P0V0bUkRDwo1EK9D5VE/F7BIz0uov3XsRr5tPbevAI8=",
     "homepage": "https://registry.terraform.io/providers/hashicorp/kubernetes",
     "owner": "hashicorp",
     "repo": "terraform-provider-kubernetes",
-    "rev": "v3.1.0",
+    "rev": "v3.2.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-TvtStKCI11frbi1C1d4/f60XXJPUQBzSJIAkjN6LfBQ="
+    "vendorHash": "sha256-TUs0DTfbNYOwKdUTJmiB1/ja97r+GsVH+k5VMp/wKrI="
   },
   "hashicorp_local": {
     "hash": "sha256-qntV0gfxEVV24gqiVOvUai+pai4vvU+KtLmLBqOBQbY=",
@@ -968,13 +968,13 @@
     "vendorHash": "sha256-OAd8SeTqTrH0kMoM2LsK3vM2PI23b3gl57FaJYM9hM0="
   },
   "newrelic_newrelic": {
-    "hash": "sha256-bYWqx0vZO16pKcLXYrWtbynToxpgHI8r4eZpX43kaPk=",
+    "hash": "sha256-eQpwxA51hmysBpvTVgcyTlBTpHqfeRy+tLl5HTxAPAk=",
     "homepage": "https://registry.terraform.io/providers/newrelic/newrelic",
     "owner": "newrelic",
     "repo": "terraform-provider-newrelic",
-    "rev": "v3.90.0",
+    "rev": "v3.91.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-ilEvo3HS48tP8DgBW4612eBifm9GN1uyrIsPbCjPW2o="
+    "vendorHash": "sha256-MP3CHOybrF3EoynQ5Wi6+J+5+N6pxxIvFZZD6dJ5WHI="
   },
   "ns1-terraform_ns1": {
     "hash": "sha256-MX/Wd9Lztjn7uwDzJjs4bsSSp0PFzUgsu4jXke9jHL8=",
@@ -1040,13 +1040,13 @@
     "vendorHash": "sha256-ofzbDmivXgH1i1Gjhpyp0bk3FDs5SnxwoRuNAWyMqyI="
   },
   "opentelekomcloud_opentelekomcloud": {
-    "hash": "sha256-P4G1VVlQO1wkl6+fAkVJXaRAkg/5nXpa8rP4zJmM+mg=",
+    "hash": "sha256-olgUy66gTSPGPvwMKaOeLhjmA3pS9LX/SPdaf8vNbhM=",
     "homepage": "https://registry.terraform.io/providers/opentelekomcloud/opentelekomcloud",
     "owner": "opentelekomcloud",
     "repo": "terraform-provider-opentelekomcloud",
-    "rev": "v1.36.66",
+    "rev": "v1.36.67",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-mMTZ+mAC7MoWCvOlGvT06bytYGRKX/yjRaPnXsmVtz8="
+    "vendorHash": "sha256-Y+U+8iR3iu62DN/KgYQj7XsSjD3T9GJjQM1Osq//03w="
   },
   "opsgenie_opsgenie": {
     "hash": "sha256-Y67kcg/ovvZc22l1CBz0Mqu7DAIit5F0jQNfQrl2EGI=",

pkgs/build-support/lake/default.nix

@@ -112,6 +112,7 @@ lib.extendMkDerivation {
     in
     {
       strictDeps = true;
+      __structuredAttrs = true;
 
       nativeBuildInputs = nativeBuildInputs ++ [
         lean4
@@ -190,6 +191,12 @@ lib.extendMkDerivation {
                 mv "$out/.lake/config/[anonymous]" "$out/.lake/config/${leanPackageName}"
               fi
 
+              if [ -d "$out/.lake/build/ir" ]; then
+                find "$out/.lake/build/ir" -name '*.setup.json' -delete
+              fi
+
+              rm -rf "$out/.lake/config"
+
               # Setup hook propagates LEAN_PATH to downstream packages.
               mkdir -p "$out/nix-support"
               cp ${./setup-hook.sh} "$out/nix-support/setup-hook"

pkgs/build-support/lake/test/weak-minimax/package.nix

@@ -1,4 +1,4 @@
-# Test that buildLakePackage works with nix-only deps (no lake-manifest.json).
+# Test that buildLakePackage works with nix-only deps (empty lake-manifest.json).
 # Builds a Lean proof of the weak minimax inequality using mathlib.
 {
   leanPackages,

pkgs/by-name/ap/apksigner/package.nix

@@ -23,7 +23,7 @@ let
     ];
   };
 in
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "apksigner";
   # Major version is derived from the API version of the corresponding Android release.
   # Patch version is derived from the release number.
@@ -32,14 +32,14 @@ stdenv.mkDerivation rec {
 
   src = fetchgit {
     # use pname here because the final jar uses this as the filename
-    name = pname;
+    name = "apksigner";
     url = "https://android.googlesource.com/platform/tools/apksig";
     tag = "android-15.0.0_r30";
     hash = "sha256-f/PggxvBv8nYUyL9Ukd4YVpunpRWbLL5UYsYhsiDWRE=";
   };
 
   mitmCache = gradle.fetchDeps {
-    inherit pname;
+    inherit (finalAttrs) pname;
     data = ./deps.json;
   };
 
@@ -83,4 +83,4 @@ stdenv.mkDerivation rec {
     teams = [ lib.teams.android ];
     platforms = lib.platforms.unix;
   };
-}
+})

pkgs/by-name/ar/ares-cli/package.nix

@@ -8,18 +8,18 @@
 
 buildNpmPackage rec {
   pname = "ares-cli";
-  version = "3.2.3";
+  version = "3.2.4";
   src = fetchFromGitHub {
     owner = "webos-tools";
     repo = "cli";
     rev = "v${version}";
-    hash = "sha256-oRnmqptDlx6ZxiPAvkiDIYMWhzFpx2vHQXkDlCPU2vQ=";
+    hash = "sha256-dM8o/mK8AbQNCE6UrSWyOkL5c3G25j3NfoDYJ6X7irg=";
   };
 
   nodejs = nodejs_22;
 
   dontNpmBuild = true;
-  npmDepsHash = "sha256-qgCAXpywRa+TirP92lCcML9vnXfzHLkn1S/qZcUxR8c=";
+  npmDepsHash = "sha256-18sZW5yBDkEUlDgAERAsUQCOUOaBao6+wHOM9TCAlms=";
 
   passthru.updateScript = nix-update-script { };
 

pkgs/by-name/aw/aws-nuke/package.nix

@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "aws-nuke";
-  version = "3.64.4";
+  version = "3.65.0";
 
   src = fetchFromGitHub {
     owner = "ekristen";
     repo = "aws-nuke";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-oUziuU2lhp1X/RTOYn4FtimmNZ4ZEjbihdfokoeLrmw=";
+    hash = "sha256-1C7vA/5fUw+RHK1m3MvxY6bTzG1m3PpsXTNow4mkWL4=";
   };
 
   vendorHash = "sha256-q1ASHG4KWlU8tLjHireMqmkW33Q2hy+ikOTWQPOYIXo=";

pkgs/by-name/b6/b612/package.nix

@@ -2,27 +2,21 @@
   lib,
   stdenvNoCC,
   fetchFromGitHub,
+  installFonts,
 }:
 
-stdenvNoCC.mkDerivation rec {
+stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "b612";
   version = "1.008";
 
   src = fetchFromGitHub {
     owner = "polarsys";
     repo = "b612";
-    tag = version;
+    tag = finalAttrs.version;
     hash = "sha256-uyBC8UNOwztCHXhR9XZuWDwrty0eClbo0E+gI1PmjEg=";
   };
 
-  installPhase = ''
-    runHook preInstall
-
-    mkdir -p $out/share/fonts/truetype
-    mv fonts/ttf/*.ttf $out/share/fonts/truetype
-
-    runHook postInstall
-  '';
+  nativeBuildInputs = [ installFonts ];
 
   meta = {
     homepage = "https://b612-font.com/";
@@ -49,4 +43,4 @@ stdenvNoCC.mkDerivation rec {
     maintainers = with lib.maintainers; [ sternenseemann ];
     platforms = lib.platforms.all;
   };
-}
+})

pkgs/by-name/bi/bitrise/package.nix

@@ -6,13 +6,13 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "bitrise";
-  version = "2.40.3";
+  version = "2.40.4";
 
   src = fetchFromGitHub {
     owner = "bitrise-io";
     repo = "bitrise";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-xPv14BBzGxLxnVpsdzqp0///BbbNUNs92x1jLbRGj94=";
+    hash = "sha256-8Ec6It0haw2PC0HZPxbu2H+J0ltJ3vzsBaWytDiJzx4=";
   };
 
   # many tests rely on writable $HOME/.bitrise and require network access

pkgs/by-name/bo/bolt/package.nix

@@ -100,7 +100,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "boltctl";
     homepage = "https://gitlab.freedesktop.org/bolt/bolt";
     license = lib.licenses.lgpl21Plus;
-    maintainers = with lib.maintainers; [ callahad ];
+    maintainers = [ ];
     platforms = lib.platforms.linux;
   };
 })

pkgs/by-name/bu/buffrs/package.nix

@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "buffrs";
-  version = "0.13.2";
+  version = "0.13.3";
 
   src = fetchFromGitHub {
     owner = "helsing-ai";
     repo = "buffrs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-IKL8zBDM83TgyYHcGOBn+6nzIo6ywvlZk+G5cBC4ijE=";
+    hash = "sha256-AWAqSl7K9B3XFt4+EeyE6PqY/Jt+A187zkdYv1JFlHw=";
   };
 
-  cargoHash = "sha256-Mku0H3fwyxtHgPuJndHA/lcd7/rGVw69+j1GdFt5JyQ=";
+  cargoHash = "sha256-+U15/T4yk5VK39UfoI9dIwlkxPNuCkwmAwRThTnUva0=";
 
   # Disabling tests meant to work over the network, as they will fail
   # inside the builder.

pkgs/by-name/ci/circleci-cli/package.nix

@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "circleci-cli";
-  version = "0.1.36202";
+  version = "0.1.38646";
 
   src = fetchFromGitHub {
     owner = "CircleCI-Public";
     repo = "circleci-cli";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-79B1zQ6n066onSf08vYRXNxoq+pvBRyHAXPiTkhqMm8=";
+    sha256 = "sha256-n+pt2pGKsRvR4fGDnXypfGB/Xm1euVWjH4fEJSHaHj4=";
   };
 
-  vendorHash = "sha256-vTYepN/srd5qb2o1O5KwcGBwvKmV1DLG3/4OdtKJpVk=";
+  vendorHash = "sha256-K8Nm6lEHergDFMINJuyJn8tw/4cd6gp30nJbddRJCIE=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/co/copybara/package.nix

@@ -13,11 +13,11 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "copybara";
-  version = "20260525";
+  version = "20260601";
 
   src = fetchurl {
     url = "https://github.com/google/copybara/releases/download/v${finalAttrs.version}/copybara_deploy.jar";
-    hash = "sha256-vldamyDTV1wccm01Jwiv0ftaIq0UGG91U0jZWuht+vs=";
+    hash = "sha256-IH3BaZJG0xF7hKBRUImEbIUV1PVwG6wnQZY8MCuhPX0=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/co/cornucopia/package.nix

@@ -7,19 +7,20 @@
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
-  pname = "clorinde";
-  version = "2.0.0";
+  pname = "cornucopia";
+  version = "1.0.0";
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
-    owner = "halcyonnouveau";
-    repo = "clorinde";
-    tag = "clorinde-v${finalAttrs.version}";
-    hash = "sha256-eWgFcyr9shcgUU4DlXl6SThbbRTMuvYOjY6hA4CCnQo=";
+    owner = "cornucopia-rs";
+    repo = "cornucopia";
+    tag = "cornucopia-v${finalAttrs.version}";
+    hash = "sha256-qlhdBI8XadU2dMbBEGRzWbZMdCkzt5u5ywfcvuIEYC8=";
   };
 
-  cargoHash = "sha256-p/ZqG1syI6ujgNbNnSSwUz7XpvHK7ua2zH0p3P3Ngec=";
+  cargoHash = "sha256-Tm951lRd53Mzw9UwpDHQ11KRhk0Mj/XaGXcKqSE43cM=";
 
-  cargoBuildFlags = [ "--package=clorinde" ];
+  cargoBuildFlags = [ "--package=cornucopia" ];
 
   cargoTestFlags = finalAttrs.cargoBuildFlags;
 
@@ -29,19 +30,19 @@ rustPlatform.buildRustPackage (finalAttrs: {
   passthru.updateScript = nix-update-script {
     extraArgs = [
       "--version-regex"
-      "clorinde-v(.*)"
+      "cornucopia-v(.*)"
     ];
   };
 
   meta = {
     description = "Generate type-checked Rust from your PostgreSQL";
-    homepage = "https://github.com/halcyonnouveau/clorinde";
-    changelog = "https://github.com/halcyonnouveau/clorinde/blob/clorinde-v${finalAttrs.version}/CHANGELOG.md";
+    homepage = "https://github.com/cornucopia-rs/cornucopia";
+    changelog = "https://github.com/cornucopia-rs/cornucopia/blob/cornucopia-v${finalAttrs.version}/CHANGELOG.md";
     license = with lib.licenses; [
       mit
       asl20
     ];
     maintainers = with lib.maintainers; [ defelo ];
-    mainProgram = "clorinde";
+    mainProgram = "cornucopia";
   };
 })

pkgs/by-name/de/dev86/package.nix

@@ -6,21 +6,15 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "dev86";
-  version = "1.0.1-unstable-2025-02-12";
+  version = "1.0.1-unstable-2026-05-15";
 
   src = fetchFromCodeberg {
     owner = "jbruchon";
     repo = "dev86";
-    rev = "0332db1ceb238fa7f98603cdf4223a1d839d4b31";
-    hash = "sha256-f6C7ykOmOHwxeMsF1Wm81FBBJNwTP0cF4+mFMzsc208=";
+    rev = "8cf785fc11516b31404ea6593d9fc5a411f59dad";
+    hash = "sha256-nY5awJzEO+xbJRAbeRJgKjJf30SNz2Bg346KMNDtmls=";
   };
 
-  patches = [
-    # Fix for GCC 15/C23 by de-K&R-ing function definitions and adding
-    # missing parameters to function declarations where necessary.
-    ./unproto-c23-compatibility.patch
-  ];
-
   makeFlags = [ "PREFIX=${placeholder "out"}" ];
 
   meta = {

pkgs/by-name/de/dev86/unproto-c23-compatibility.patch

@@ -1,245 +0,0 @@
-diff --git a/unproto/error.c b/unproto/error.c
-index 667d978cbb..2fbccacb4d 100644
---- a/unproto/error.c
-+++ b/unproto/error.c
-@@ -53,7 +53,7 @@
- 
- #include <stdio.h>
- 
--extern void exit();
-+extern void exit(int status);
- 
- /* Application-specific stuff */
- 
-diff --git a/unproto/error.h b/unproto/error.h
-index dfb27e9067..cb52ae646b 100644
---- a/unproto/error.h
-+++ b/unproto/error.h
-@@ -1,6 +1,6 @@
- /* @(#) error.h 1.2 92/01/15 21:53:14 */
- 
- extern int errcount;			/* error counter */
--extern void error();			/* default context */
--extern void error_where();		/* user-specified context */
--extern void fatal();			/* fatal error */
-+extern void error(char *text);			/* default context */
-+extern void error_where(char *path, int line, char *text);		/* user-specified context */
-+extern void fatal(char *text);			/* fatal error */
-diff --git a/unproto/strsave.c b/unproto/strsave.c
-index 2ee00b4172..faa4e18686 100644
---- a/unproto/strsave.c
-+++ b/unproto/strsave.c
-@@ -28,7 +28,7 @@
- #include <string.h>
- 
- extern int hash(register char *s, unsigned size);
--extern char *malloc();
-+extern char *malloc(long size);
- 
- /* Application-specific stuff */
- 
-diff --git a/unproto/symbol.c b/unproto/symbol.c
-index 67a4bf0bc6..a4beab5e92 100644
---- a/unproto/symbol.c
-+++ b/unproto/symbol.c
-@@ -45,7 +45,7 @@
- #include <string.h>
- 
- extern int hash(register char *s, unsigned size);
--extern char *malloc();
-+extern char *malloc(long size);
- 
- /* Application-specific stuff */
- 
-diff --git a/unproto/symbol.h b/unproto/symbol.h
-index 0711c1f4dc..0e2b1d88f8 100644
---- a/unproto/symbol.h
-+++ b/unproto/symbol.h
-@@ -6,6 +6,6 @@
-     struct symbol *next;
- };
- 
--extern void sym_enter();		/* add symbol to table */
--extern struct symbol *sym_find();	/* locate symbol */
-+extern void sym_enter(char *name, int type);		/* add symbol to table */
-+extern struct symbol *sym_find(register char *name);	/* locate symbol */
- extern void sym_init();			/* prime the table */
-diff --git a/unproto/tok_class.c b/unproto/tok_class.c
-index 04207a07f3..9af67188ca 100644
---- a/unproto/tok_class.c
-+++ b/unproto/tok_class.c
-@@ -51,8 +51,8 @@
- #include <stdio.h>
- #include <string.h>
- 
--extern long time();
--extern char* ctime();
-+extern long time(long *tloc);
-+extern char* ctime(long *clock);
- 
- /* Application-specific stuff */
- 
-@@ -61,13 +61,13 @@
- #include "token.h"
- #include "symbol.h"
- 
--static struct token *tok_list();
--static void tok_list_struct();
--static void tok_list_append();
--static void tok_strcat();
--static void tok_time();
--static void tok_date();
--static void tok_space_append();
-+static struct token *tok_list(struct token *t);
-+static void tok_list_struct(register struct token *list, register struct token *t);
-+static void tok_list_append(struct token *h, struct token *t);
-+static void tok_strcat(register struct token *t1);
-+static void tok_time(struct token *t);
-+static void tok_date(struct token *t);
-+static void tok_space_append(register struct token *list, register struct token *t);
- 
- #if defined(MAP_VOID_STAR) || defined(MAP_VOID)
- static void tok_void();			/* rewrite void keyword */
-diff --git a/unproto/tok_io.c b/unproto/tok_io.c
-index 288950b3ac..773ca5bf4d 100644
---- a/unproto/tok_io.c
-+++ b/unproto/tok_io.c
-@@ -89,7 +89,7 @@
- #include "vstring.h"
- #include "error.h"
- 
--extern char *strsave();			/* XXX need include file */
-+extern char *strsave(register char *str);			/* XXX need include file */
- 
- /* Stuff to keep track of original source file name and position */
- 
-@@ -104,12 +104,12 @@
- 
- /* Forward declarations */
- 
--static int read_quoted();
--static void read_comment();
-+static int read_quoted(register struct vstring *vs, int ch);
-+static void read_comment(register struct vstring *vs);
- static int backslash_newline();
--static char *read_hex();
--static char *read_octal();
--static void fix_line_control();
-+static char *read_hex(struct vstring *vs, register char *cp);
-+static char *read_octal(register struct vstring *vs, register char *cp, register int c);
-+static void fix_line_control(register char *path, register int line);
- 
-  /*
-   * Character input with one level of pushback. The INPUT() macro recursively
-diff --git a/unproto/tok_pool.c b/unproto/tok_pool.c
-index e2ed107ce7..bbe3d184c5 100644
---- a/unproto/tok_pool.c
-+++ b/unproto/tok_pool.c
-@@ -37,7 +37,7 @@
- 
- /* C library */
- 
--extern char *malloc();
-+extern char *malloc(long size);
- 
- /* Application-specific stuff */
- 
-diff --git a/unproto/token.h b/unproto/token.h
-index bb2f50a106..e3752a0eb3 100644
---- a/unproto/token.h
-+++ b/unproto/token.h
-@@ -27,11 +27,11 @@
- /* Input/output functions and macros */
- 
- extern struct token *tok_get();		/* read next single token */
--extern void tok_show();			/* display (composite) token */
-+extern void tok_show(register struct token *t);			/* display (composite) token */
- extern struct token *tok_class();	/* classify tokens */
--extern void tok_unget();		/* stuff token back into input */
-+extern void tok_unget(register struct token *t);		/* stuff token back into input */
- extern void put_nl();			/* print newline character */
--extern void tok_show_ch();		/* emit single-character token */
-+extern void tok_show_ch(register struct token *t);		/* emit single-character token */
- 
- #define	tok_flush(t)	(tok_show(t), tok_free(t))
- 
-@@ -46,7 +46,7 @@
- /* Memory management */
- 
- struct token *tok_alloc();		/* allocate token storage */
--extern void tok_free();			/* re-cycle storage */
-+extern void tok_free(register struct token *t);			/* re-cycle storage */
- 
- /* Context */
- 
-diff --git a/unproto/unproto.c b/unproto/unproto.c
-index 18fc2aaecf..802b91dd3e 100644
---- a/unproto/unproto.c
-+++ b/unproto/unproto.c
-@@ -140,7 +140,7 @@
- #include <errno.h>
- #include <string.h>
- 
--extern void exit();
-+extern void exit(int status);
- extern int optind;
- extern char *optarg;
- extern int getopt();
-@@ -159,16 +159,16 @@
- 
- /* Forward declarations. */
- 
--static struct token *dcl_flush();
--static void block_flush();
-+static struct token *dcl_flush(register struct token *t);
-+static void block_flush(register struct token *t);
- static void block_dcls();
--static struct token *show_func_ptr_type();
--static struct token *show_struct_type();
--static void show_arg_name();
--static void show_type();
--static void pair_flush();
--static void check_cast();
--static void show_empty_list();
-+static struct token *show_func_ptr_type(struct token *t1, struct token *t2);
-+static struct token *show_struct_type(register struct token *p);
-+static void show_arg_name(register struct token *s);
-+static void show_type(register struct token *s);
-+static void pair_flush(register struct token *t, register int start, register int stop);
-+static void check_cast(struct token *t);
-+static void show_empty_list(register struct token *t);
- 
- #define	check_cast_flush(t)	(check_cast(t), tok_free(t))
- 
-diff --git a/unproto/vstring.c b/unproto/vstring.c
-index 220bd530fe..ef9bcffa3c 100644
---- a/unproto/vstring.c
-+++ b/unproto/vstring.c
-@@ -67,8 +67,8 @@
- 
- /* C library */
- 
--extern char *malloc();
--extern char *realloc();
-+extern char *malloc(long size);
-+extern char *realloc(char *p, long size);
- 
- /* Application-specific stuff */
- 
-diff --git a/unproto/vstring.h b/unproto/vstring.h
-index c2e1f88a77..16a17aa815 100644
---- a/unproto/vstring.h
-+++ b/unproto/vstring.h
-@@ -5,9 +5,9 @@
-     char   *last;			/* last position */
- };
- 
--extern struct vstring *vs_alloc();	/* initial allocation */
--extern char *vs_realloc();		/* string extension */
--extern char *vs_strcpy();		/* copy string */
-+extern struct vstring *vs_alloc(int len);	/* initial allocation */
-+extern char *vs_realloc(register struct vstring *vp, char *cp);		/* string extension */
-+extern char *vs_strcpy(register struct vstring *vp, register char *dst, register char *src);		/* copy string */
- 
- /* macro to add one character to auto-resized string */
- 

pkgs/by-name/de/dexter/package.nix

@@ -8,13 +8,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "dexter";
-  version = "0.6.0";
+  version = "0.7.0";
 
   src = fetchFromGitHub {
     owner = "remoteoss";
     repo = "dexter";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BmWzrbC9ka8L1/mrPOXJqnoi1YVXxRcg6tSkb8tI88Q=";
+    hash = "sha256-MQ8LxSI2amecFUiNK6vED/nJKHgs5sRT7rJVi6cLdkc=";
   };
 
   vendorHash = "sha256-1mJ4HdDCsZl/g8F+L+NrW2ACuiHe2aSheJO/1XfKAb4=";

pkgs/by-name/di/dircolors-solarized/package.nix

@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation {
   pname = "dircolors-solarized";
-  version = "0-unstable-2025-09-22";
+  version = "0-unstable-2026-05-27";
 
   src = fetchFromGitHub {
     owner = "seebi";
     repo = "dircolors-solarized";
-    rev = "38971d217512a23391139fcee2a520eba7cddf37";
-    hash = "sha256-UlSbg3njsVV7+Dlu5CXAmz7BcyihDIVwiWFzV157RSw=";
+    rev = "bd9d473393a78366d5c3658d9cd2db7d8944b447";
+    hash = "sha256-2uZ2vpnMyoWk1TdHE6sbUGXhw1zTwfbk2KRIma6F5DA=";
   };
 
   dontBuild = true;

pkgs/by-name/ds/dsseries/package.nix

@@ -54,6 +54,6 @@ stdenv.mkDerivation rec {
     platforms = lib.platforms.linux;
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
     license = lib.licenses.unfree;
-    maintainers = with lib.maintainers; [ callahad ];
+    maintainers = [ ];
   };
 }

pkgs/by-name/em/emmylua-ls/package.nix

@@ -9,13 +9,13 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "emmylua_ls";
-  version = "0.23.1";
+  version = "0.23.2";
 
   src = fetchFromGitHub {
     owner = "EmmyLuaLs";
     repo = "emmylua-analyzer-rust";
     tag = finalAttrs.version;
-    hash = "sha256-aNY7XQSUlLh3+Gs/9uMNAaHpITPZI7W7vHiLn5Mdjuk=";
+    hash = "sha256-xjKTYzkfFWKyQzg6I2aafKBGn7XjkE8CCQ9AP8ebu/I=";
   };
 
   __structuredAttrs = true;
@@ -34,7 +34,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   buildAndTestSubdir = "crates/emmylua_ls";
 
-  cargoHash = "sha256-UIn0U9lW0EXbcGirIIWUzqtY1MgcXLQVHhFNTZRqw8g=";
+  cargoHash = "sha256-tVmATUh35h19AsmMCrijJ0rdBHYU6uMj2PE1iiiuDCE=";
 
   nativeInstallCheckInputs = [
     versionCheckHook

pkgs/by-name/ev/evcc/package.nix

@@ -17,16 +17,16 @@
 }:
 
 let
-  version = "0.307.2";
+  version = "0.308.0";
 
   src = fetchFromGitHub {
     owner = "evcc-io";
     repo = "evcc";
     tag = version;
-    hash = "sha256-c9SbPF3JCngd4/j8lVS6lGTonj2qdIrTy34+WBsAk0I=";
+    hash = "sha256-phrTg6P/sLb3lKTVF+PBH4EGfOQ57dpt3ZfLxZ6EOew=";
   };
 
-  vendorHash = "sha256-sOyx1Ev0UfoI6mOQAWide19Sg/MWJ8VUVftN9psNq5U=";
+  vendorHash = "sha256-UI1WyTDJA5GRgt8TmpMQi4DmYzfQFGhDd5WeitT8VnI=";
 
   commonMeta = {
     license = lib.licenses.mit;
@@ -40,7 +40,7 @@ buildGo126Module rec {
 
   npmDeps = fetchNpmDeps {
     inherit src;
-    hash = "sha256-U7gcAkfw7a0skM91mSAZJIPUPBRfSkyJYVjjVyEyZ4E=";
+    hash = "sha256-zMZAwO/2cch03myTGK+4sDwrEJhQzJJ8TwEg1lwxH0c=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/fe/fence/package.nix

@@ -14,16 +14,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "fence";
-  version = "0.1.58";
+  version = "0.1.60";
 
   src = fetchFromGitHub {
     owner = "fencesandbox";
     repo = "fence";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ACe3N4bXYJW6QDQHtRChFWOTXTZTbEUbZ4d8cuFRqMY=";
+    hash = "sha256-4yRfU6fCTGOcA9IeFs9Sk9n1PqXi7E++reVDPlCwS1k=";
   };
 
-  vendorHash = "sha256-sEGLnYC4gMo5jPCZxBXra3pmRigaq4bDcVFd52ru7rQ=";
+  vendorHash = "sha256-rZ+ArTdr5GbW+nRzglNgxzsXjuTlTA0uInNWXgAVurM=";
 
   __structuredAttrs = true;
 

pkgs/by-name/fl/fluent-bit/package.nix

@@ -29,13 +29,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "fluent-bit";
-  version = "5.0.5";
+  version = "5.0.6";
 
   src = fetchFromGitHub {
     owner = "fluent";
     repo = "fluent-bit";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-IPTM0jtlu3DZJRXCD0IE13ASGbJsDygPEuDXsiQP7Ts=";
+    hash = "sha256-VXf1F0TZFi8d7gil8yc3WWA/0X3QyYPnbA3luE1DE98=";
   };
 
   # The source build documentation covers some dependencies and CMake options.

pkgs/by-name/gh/gh-poi/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "gh-poi";
-  version = "0.17.1";
+  version = "0.17.2";
 
   src = fetchFromGitHub {
     owner = "seachicken";
     repo = "gh-poi";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-sDir+/b2NmHkROx4gf9OwKpLjZCgkUmaj7IdQDIllsk=";
+    hash = "sha256-tG6rC5htgC9RsHdExpMwb0CDLs7e8PLKEDLih4mGVu8=";
   };
 
   ldflags = [
@@ -23,7 +23,7 @@ buildGoModule (finalAttrs: {
   vendorHash = "sha256-o3ys+Em27sx3VS3AQIP7G/tWRiBlPnvBq37jLtj9QVQ=";
 
   # Skip checks because some of test suites require fixture.
-  # See: https://github.com/seachicken/gh-poi/blob/v0.17.1/.github/workflows/contract-test.yml#L28-L29
+  # See: https://github.com/seachicken/gh-poi/blob/v0.17.2/.github/workflows/contract-test.yml#L28-L29
   doCheck = false;
 
   meta = {

pkgs/by-name/gl/glance/package.nix

@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "glance";
-  version = "0.8.4";
+  version = "0.8.5";
 
   src = fetchFromGitHub {
     owner = "glanceapp";
     repo = "glance";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-4su8CGtS4wqWcQ3yTvZiUHOnTMLICS3XIG8kS+bJ3LQ=";
+    hash = "sha256-2WFX1Gca7ign9i1zOQ9lRdtOSGq9QG33vIA5QTnq9E8=";
   };
 
-  vendorHash = "sha256-Ek1LVCSEJzoI0nVu6zVsSbd/Jzv6/pyMIm991ebvkZY=";
+  vendorHash = "sha256-a92V/duqvrWEb8QSJLA5rHYYZCcJ4fBC962SEr4FJDA=";
 
   ldflags = [
     "-s"

pkgs/by-name/go/gocover-cobertura/package.nix

@@ -6,17 +6,17 @@
 
 buildGoModule (finalAttrs: {
   pname = "gocover-cobertura";
-  version = "1.4.0";
+  version = "1.5.0";
 
   src = fetchFromGitHub {
     owner = "boumenot";
     repo = "gocover-cobertura";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-9KYNK6YV+iYB5Mmporzzw0aYTPCanvX7JALoP72dMtU=";
+    sha256 = "sha256-7NrdoAUwbN6S19elYkYEiDbxIFVOaAnT7CbYZej/cfs=";
   };
 
   deleteVendor = true;
-  vendorHash = "sha256-tPCiU7UVltYaHM1JVRje6EeG6Thn+3qm5I3MjKvD1/o=";
+  vendorHash = null;
 
   ldflags = [
     "-s"

pkgs/by-name/gr/grpc-client-cli/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "grpc-client-cli";
-  version = "1.24.4";
+  version = "1.24.5";
 
   src = fetchFromGitHub {
     owner = "vadimi";
     repo = "grpc-client-cli";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-tyvs1rSVKt53I47Mrv66nBzG6X5HxCqQnxI+zqnfyj0=";
+    sha256 = "sha256-oN6+INV1psGa0nV5vPuNl9arnXaIU+pipwacHi7rHVY=";
   };
 
-  vendorHash = "sha256-MX6jEDf0Iy3WAa3TFIoHkBcn6Gpy6YEc8mGpR6+Md3U=";
+  vendorHash = "sha256-hE+iwPP9hlj/taVKKY+On8RCRIUynZnvVXnAn2y5sxA=";
 
   meta = {
     description = "Generic gRPC command line client";

pkgs/by-name/hl/hl-log-viewer/package.nix

@@ -9,16 +9,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "hl-log-viewer";
-  version = "0.36.1";
+  version = "0.36.2";
 
   src = fetchFromGitHub {
     owner = "pamburus";
     repo = "hl";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-28R9WcKcAzw966vYD32R9z7ZN/6WlzPjaCmuR3b7a90=";
+    hash = "sha256-r6p4gw1QzZPu1DWzbTNDnvKMi/pqZvViK4rAn4aov4A=";
   };
 
-  cargoHash = "sha256-dQTc8pwO49Meq3jkIvardEIDYZ3r4Z41uZiAymT6RWM=";
+  cargoHash = "sha256-8yb8elk8iG4snyExkQdJQn5eaKMNcPqYsAE/sIW6euk=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/ka/kando/package.nix

@@ -26,20 +26,20 @@ let
 in
 buildNpmPackage.override { inherit nodejs; } rec {
   pname = "kando";
-  version = "2.3.0";
+  version = "2.3.1";
 
   src = fetchFromGitHub {
     owner = "kando-menu";
     repo = "kando";
     tag = "v${version}";
-    hash = "sha256-eCR+CL3EMV3eLXzpzKFGuec3YBWDnFjNyTEHpG51PLQ=";
+    hash = "sha256-vmdDcXpSm2O9MkOGfM3+VUrRSvUot1GB0TkxjNSN4r8=";
   };
 
   patches = [
     ./add-deep-link-note.patch
   ];
 
-  npmDepsHash = "sha256-VsWmM+CSAv3yFVelFNb3kUAeh4t+k04NFXVRz4AwFkI=";
+  npmDepsHash = "sha256-2J74igNLl5CwXm9WtHzxqTVt7+S113qcioxJja6uUOE=";
 
   npmFlags = [ "--ignore-scripts" ];
 

pkgs/by-name/ke/keycloak/package.nix

@@ -24,11 +24,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "keycloak";
-  version = "26.6.2";
+  version = "26.6.3";
 
   src = fetchzip {
     url = "https://github.com/keycloak/keycloak/releases/download/${finalAttrs.version}/keycloak-${finalAttrs.version}.zip";
-    hash = "sha256-WhkSF/oqhBglKaw8/EwnEEjd+rX/da5LjP6mitecPLA=";
+    hash = "sha256-MlWWiTnQVB/JjBhEk3wUv/1WPWnEx9h2iULwzCxUKHU=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ki/kimai/package.nix

@@ -7,13 +7,13 @@
 
 php.buildComposerProject2 (finalAttrs: {
   pname = "kimai";
-  version = "2.57.0";
+  version = "2.58.0";
 
   src = fetchFromGitHub {
     owner = "kimai";
     repo = "kimai";
     tag = finalAttrs.version;
-    hash = "sha256-WbZivDI5xU/pM52yFvG6vMK3LaCjbLoJGNFP3Exb8qc=";
+    hash = "sha256-JS4Mjn8fUr9CCQiELnCVH1Arg7uk7KbRwYWF1ECuMRM=";
   };
 
   php = php.buildEnv {
@@ -38,7 +38,7 @@ php.buildComposerProject2 (finalAttrs: {
     '';
   };
 
-  vendorHash = "sha256-6WthU0w8V69sDlBjtz2MIavkmyYXWQ+5NflZLGQCLJs=";
+  vendorHash = "sha256-bPEc/uOPorBo2EXNVBvvuy7yV3Poif2GrjD5jhY974M=";
 
   composerNoPlugins = false;
   postInstall = ''

pkgs/by-name/le/leangz/package.nix

@@ -2,15 +2,17 @@
   lib,
   rustPlatform,
   fetchFromGitHub,
+  versionCheckHook,
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "leangz";
+  # nixpkgs-update: no auto update
   version = "0.1.19"; # Should match LEANTAR_VERSION in leanprover/lean4/CMakeLists.txt
 
   src = fetchFromGitHub {
     owner = "digama0";
     repo = "leangz";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-kDvaydStWiJYCmKjoU39tuOQHNw5Zo577GeAvlENO2o=";
   };
 
@@ -18,10 +20,14 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   __structuredAttrs = true;
 
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
   meta = {
     description = "Lean 4 .olean file (de)compressor";
     homepage = "https://github.com/digama0/leangz";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ niklashh ];
+    mainProgram = "leantar";
   };
 })

pkgs/by-name/li/libusbsio/package.nix

@@ -52,8 +52,7 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Library for communicating with devices connected via the USB bridge on LPC-Link2 and MCU-Link debug probes on supported NXP microcontroller evaluation boards";
     platforms = lib.platforms.all;
     license = lib.licenses.bsd3;
-    maintainers = with lib.maintainers; [
-      frogamic
+    maintainers = [
     ];
   };
 })

pkgs/by-name/ma/mailpit/source.nix

@@ -1,6 +1,6 @@
 {
-  version = "1.30.0";
-  hash = "sha256-lUynHDFfbX9BxwTdREbgAMil7S3+vwAl05myzMEWgGQ=";
-  npmDepsHash = "sha256-snWhjSy9au81bJZwjh/KVvchjEaJJ05HYhyh3V8/Y5g=";
-  vendorHash = "sha256-LMjS0YxRTvHZ8U10BOST/5Zthqhoi5OxngWWB+2CSeQ=";
+  version = "1.30.1";
+  hash = "sha256-Z/0Lh+2VLB3w4AHNf+imWRgHmarO1MMUmNqrcAVSQ2k=";
+  npmDepsHash = "sha256-eccYGPIbk98+BtNtBAq4G1z/ymj6HHwacuH6ZktuN0U=";
+  vendorHash = "sha256-FgwMdvND7DMrYWp9kB2IB+Gjyo1gm1LtLTeC9SfPw9U=";
 }

pkgs/by-name/ma/matrix-alertmanager-receiver/package.nix

@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "matrix-alertmanager-receiver";
-  version = "2026.5.20";
+  version = "2026.6.3";
 
   src = fetchFromGitHub {
     owner = "metio";
     repo = "matrix-alertmanager-receiver";
     tag = finalAttrs.version;
-    hash = "sha256-Eg7T4uLT7a+RgyAPXKVN4Xb1cvBK8M3amAEV1C2QGwI=";
+    hash = "sha256-uYNFk/jhL6J4PT4g2coztf3qo7QIgcmbdkub49O+PII=";
   };
 
-  vendorHash = "sha256-+kW84sOGArsbGgfgtNVP1BE/X10fn5rMB+Y/CsDiKu0=";
+  vendorHash = "sha256-TV7s0+Buh6ah5GsZdrvXH8WedVO5vY2zmhB6SVcGGtI=";
 
   env.CGO_ENABLED = "0";
 

pkgs/by-name/me/memtier-benchmark/package.nix

@@ -5,44 +5,42 @@
   autoreconfHook,
   pkg-config,
   libevent,
-  pcre,
   zlib,
   openssl,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "memtier-benchmark";
-  version = "2.2.2";
+  version = "2.4.1";
 
   src = fetchFromGitHub {
-    owner = "redislabs";
+    owner = "redis";
     repo = "memtier_benchmark";
     tag = finalAttrs.version;
-    hash = "sha256-/t7OY3N9VBa9o2amOFb2/MUr5Y4ep4HGUil8OtwKkng=";
+    hash = "sha256-pvi5p/0HZIiZYi5+eqcAu4MMrF0Hh42ByPEHuA9jcug=";
   };
 
-  patchPhase = ''
-    substituteInPlace ./configure.ac \
-      --replace '1.2.8' '${finalAttrs.version}'
-  '';
-
   nativeBuildInputs = [
     autoreconfHook
     pkg-config
   ];
+
   buildInputs = [
     libevent
-    pcre
     zlib
     openssl
   ];
 
   meta = {
+    changelog = "https://github.com/redis/memtier_benchmark/releases/tag/${finalAttrs.version}";
     description = "Redis and Memcached traffic generation and benchmarking tool";
-    homepage = "https://github.com/redislabs/memtier_benchmark";
+    homepage = "https://github.com/redis/memtier_benchmark";
     license = lib.licenses.gpl2Only;
-    platforms = lib.platforms.linux;
-    maintainers = with lib.maintainers; [ thoughtpolice ];
+    platforms = lib.platforms.unix;
+    maintainers = with lib.maintainers; [
+      thoughtpolice
+      hythera
+    ];
     mainProgram = "memtier_benchmark";
   };
 })

pkgs/by-name/mt/mtail/package.nix

@@ -8,17 +8,17 @@
 
 buildGoModule (finalAttrs: {
   pname = "mtail";
-  version = "3.2.53";
+  version = "3.3.0";
 
   src = fetchFromGitHub {
     owner = "jaqx0r";
     repo = "mtail";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-fyVUsIBQNhaNJoCrOzl8G0BHrScfw7nOt1zPWSbefsM=";
+    hash = "sha256-zJ30T9+Jy1RqUERlkHbY3w2Beuefwd/otwPXnS4oFrU=";
   };
 
   proxyVendor = true;
-  vendorHash = "sha256-QWIVIEhnDoU8omWEL2GJLUCr3U7fqJ5znTt7yehtq8g=";
+  vendorHash = "sha256-AXMqLwFcRoFRKrGH8srsH1GjeI25XgjgqrcOpQY3ZbY=";
 
   nativeBuildInputs = [
     gotools # goyacc

pkgs/by-name/ne/nextdns/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "nextdns";
-  version = "1.47.2";
+  version = "1.47.3";
 
   src = fetchFromGitHub {
     owner = "nextdns";
     repo = "nextdns";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-AlKuC5UXQ2fRgnFnIYoa0/D7ydZTaZFfenGxiZbA3io=";
+    sha256 = "sha256-oTxa/iZ13WSrHOxlmKL55veXhGq1m1Md9RZESdwsKJ0=";
   };
 
-  vendorHash = "sha256-ZGptjQg/LfvfAEKo1rqitNh2jME06JuryPIFuWdleZk=";
+  vendorHash = "sha256-Q6gh9E6FzvQn+Lyv3Tr3uLAO/r8zlF8im6xAG2YnuoU=";
 
   ldflags = [
     "-s"

pkgs/by-name/ni/nitrokey-udev-rules/package.nix

@@ -41,7 +41,6 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     homepage = "https://github.com/Nitrokey/nitrokey-udev-rules";
     license = [ lib.licenses.cc0 ];
     maintainers = with lib.maintainers; [
-      frogamic
       robinkrahl
     ];
   };

pkgs/by-name/no/noson/package.nix

@@ -51,6 +51,6 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "noson-app";
     platforms = with lib.platforms; linux ++ darwin;
     license = lib.licenses.gpl3Only;
-    maintainers = with lib.maintainers; [ callahad ];
+    maintainers = [ ];
   };
 })

pkgs/by-name/os/oscar64/package.nix

@@ -6,13 +6,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "oscar64";
-  version = "1.32.271";
+  version = "1.32.272";
 
   src = fetchFromGitHub {
     owner = "drmortalwombat";
     repo = "oscar64";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-dVLpzYiGZA2qP2jrSj9Ijc8lJP8kSyWO3pdpLJ2pHJg=";
+    hash = "sha256-u27aEnEKhzgVERqrnKrooqvSWdF1kS4GunEopUSv0NA=";
   };
 
   postPatch = ''

pkgs/by-name/pf/pferd/package.nix

@@ -31,7 +31,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     homepage = "https://github.com/Garmelon/PFERD";
     description = "Tool for downloading course-related files from ILIAS";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ _0xbe7a ];
+    maintainers = [ ];
     mainProgram = "pferd";
   };
 })

pkgs/by-name/ph/phrase-cli/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "phrase-cli";
-  version = "2.63.0";
+  version = "2.64.0";
 
   src = fetchFromGitHub {
     owner = "phrase";
     repo = "phrase-cli";
     rev = finalAttrs.version;
-    sha256 = "sha256-aeId1HglwjFu8yPTgXke+yeN2xcC/zMphvFdQcS0hHw=";
+    sha256 = "sha256-UTfVHUExjTsswhTaoDPIckkqRbVyo95AwBUOXEFQE/M=";
   };
 
-  vendorHash = "sha256-9YjCDWX1LmxwV8WFPM8LgpSoNv8zv78gz9LvtMIzxIU=";
+  vendorHash = "sha256-HbgLFtKpmacjArmV3t1AkPKQ+nY9OLLyivZNlxbuoNY=";
 
   ldflags = [ "-X=github.com/phrase/phrase-cli/cmd.PHRASE_CLIENT_VERSION=${finalAttrs.version}" ];
 

pkgs/by-name/ps/pscale/package.nix

@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "pscale";
-  version = "0.284.0";
+  version = "0.286.0";
 
   src = fetchFromGitHub {
     owner = "planetscale";
     repo = "cli";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-Zc9QPqina0GWPeS+mHe5lc9Flmo+xAyWPdLq+Znptmw=";
+    sha256 = "sha256-fYhw+zkbl/MKygF9flh3TIHG2FQXiIBVt6ubfudTetg=";
   };
 
-  vendorHash = "sha256-bI939rwDZMP0UJqKJ7UdQnd1FK1RkeyOToFTfDCmSVc=";
+  vendorHash = "sha256-dKL76vTkaniYBmHhozKRapJeyc0kY7GR+DBOXKUBtSE=";
 
   ldflags = [
     "-s"

pkgs/by-name/pu/pulsemeeter/package.nix

@@ -12,14 +12,14 @@
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "pulsemeeter";
-  version = "2.0.0";
+  version = "2.1.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "theRealCarneiro";
     repo = "pulsemeeter";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-hmQI+E6WmYOK7oN7zTmshFZgJ0UiN2KdZ6ZiXwxRpNs=";
+    hash = "sha256-m64frtEVqwJEc0rfKoPIbTJtASE+aPAdBBSrPNHIXRY=";
   };
 
   build-system = with python3Packages; [

pkgs/by-name/qu/quintom-cursor-theme/package.nix

@@ -30,6 +30,6 @@ stdenvNoCC.mkDerivation {
       cc-by-sa-40
       gpl3Only
     ];
-    maintainers = with lib.maintainers; [ frogamic ];
+    maintainers = [ ];
   };
 }

pkgs/by-name/re/regal/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "regal";
-  version = "0.40.0";
+  version = "0.41.1";
 
   src = fetchFromGitHub {
     owner = "open-policy-agent";
     repo = "regal";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-iPbAlX/Mug4BT/Yn2h2XSpdOkkr8Mu2Th+8V005jzKs=";
+    hash = "sha256-mrNdzzwgLmP3PNnoVI4vC05rq9vGCnlWHquwXh1HDX0=";
   };
 
-  vendorHash = "sha256-I+PmSyBe/j16yH1WaPFY/Ko6YRrwzpYeNKFesTp5t+Y=";
+  vendorHash = "sha256-kp0EkieTIzC+nO9fFnUQMP4COCY9wxe4Nb2kSUgnInA=";
 
   # Only build the main binary, exclude build/lsp/main.go
   subPackages = [ "." ];

pkgs/by-name/rk/rke/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "rke";
-  version = "1.8.13";
+  version = "1.8.14";
 
   src = fetchFromGitHub {
     owner = "rancher";
     repo = "rke";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-urDJEpj0B6hq3M24JvYi9DTdAgwlyb0hpElisPrxbdU=";
+    hash = "sha256-wprIpvNTPu4HD4+FaBZCUpZGdveytLgXOA72loYK+6I=";
   };
 
   vendorHash = "sha256-OWC8OZhORHwntAR2YHd4KfQgB2Wtma6ayBWfY94uOA4=";

pkgs/by-name/ro/routedns/package.nix

@@ -7,13 +7,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "routedns";
-  version = "0.1.188";
+  version = "0.1.191";
 
   src = fetchFromGitHub {
     owner = "folbricht";
     repo = "routedns";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-ZVlWN8UV/R0tZKp3w/2fAAiFKZXyiwh0RtyolNaf25k=";
+    hash = "sha256-Tr15MfF0GeaKUQRbkzqaWXJhTPVtZ/kpe5foq5MCemo=";
   };
 
   vendorHash = "sha256-a4KcKb75yWv7+1vIYCypS9nnrFJ3zogXIPzUVVA7AXs=";

pkgs/by-name/si/signalbackup-tools/package.nix

@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "signalbackup-tools";
-  version = "20260523-1";
+  version = "20260603-1";
 
   src = fetchFromGitHub {
     owner = "bepaald";
     repo = "signalbackup-tools";
     tag = finalAttrs.version;
-    hash = "sha256-8x5b+jDxEExoi5FvzXbE9KOfsTKEjXVMv4yYPU4aPbA=";
+    hash = "sha256-Y4RxuDVb9nkAMzTmasznCNsO31jxpDDd2eG9l04bGDg=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/sk/sketchybar/package.nix

@@ -19,13 +19,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "sketchybar";
-  version = "2.23.0";
+  version = "2.24.0";
 
   src = fetchFromGitHub {
     owner = "FelixKratz";
     repo = "SketchyBar";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-PvKvevsSyRb6OfPWc2+1Bcfj2ngmgeP1URBoBiVeEdk=";
+    hash = "sha256-5tyc/yYzdV/3JTtujuj7le/14XkC7TlN/nZg7tOZsNg=";
   };
 
   buildInputs = [

pkgs/by-name/st/stylance-cli/package.nix

@@ -7,16 +7,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "stylance-cli";
-  version = "0.8.2";
+  version = "0.8.3";
 
   src = fetchFromGitHub {
     owner = "basro";
     repo = "stylance-rs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-WqjT2mkVRQJ21fbv6GuFAuHfW6F24RPCcD1/IXxsE5A=";
+    hash = "sha256-UVRUPjDxfwnajkY3KUa/615pIo/uAyGu1ngQBSAnEBE=";
   };
 
-  cargoHash = "sha256-m1NFshjjaFR3Fre7bY2ZzFp9+uHq6T/tDSQmt/Cc6E8=";
+  cargoHash = "sha256-bNOOp/6myQX7z/O0gmW/2s9eEog5ZMlL5hD0GFgj7OY=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
   doInstallCheck = true;

pkgs/by-name/sw/swaylock-fancy/package.nix

@@ -62,7 +62,7 @@ stdenv.mkDerivation {
     homepage = "https://github.com/Big-B/swaylock-fancy";
     license = lib.licenses.mit;
     platforms = lib.platforms.linux;
-    maintainers = with lib.maintainers; [ frogamic ];
+    maintainers = [ ];
     inherit mainProgram;
   };
 }

pkgs/by-name/ti/tiddit/package.nix

@@ -8,14 +8,14 @@
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "tiddit";
-  version = "3.6.1";
+  version = "3.9.5";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "SciLifeLab";
     repo = "TIDDIT";
     tag = "TIDDIT-${finalAttrs.version}";
-    hash = "sha256-OeqVQJDw0fmSDWIGab2qtTJCzZxqLY2XzRqaTRuPIdI=";
+    hash = "sha256-6uJZzetqRS0czX4qjjPgiSaPun7BkrPYllDdFWNK84k=";
   };
 
   build-system = with python3Packages; [

pkgs/by-name/ti/tinfoil-cli/package.nix

@@ -7,13 +7,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "tinfoil-cli";
-  version = "0.14.1";
+  version = "0.14.2";
 
   src = fetchFromGitHub {
     owner = "tinfoilsh";
     repo = "tinfoil-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-GK+RZWwfsRaQU0x2ror9d7XBV1bq/FaXS6Ugbbr9eeg=";
+    hash = "sha256-ET6fPEE6LKbB3UmMgSGC9/EuzdmNRe4ELmJegrWJpZU=";
   };
 
   vendorHash = "sha256-b6UmayV913SVyV5+1BMZiRM7SV/Asau6xkx87DWTf9k=";

pkgs/by-name/tr/tranquil-pds-frontend/package.nix

@@ -10,12 +10,12 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "tranquil-frontend";
-  version = "0.6.4";
+  version = "0.6.5";
 
   src = fetchgit {
     url = "https://tangled.org/tranquil.farm/tranquil-pds";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kGB5jFwghMsjlAoS4mj94s9peo7PL54UKTH/3TS567w=";
+    hash = "sha256-kBy982B9ZY5W02hmdKqlR86ynJAUD98b4UgaYIPaFzM=";
   };
   sourceRoot = "${finalAttrs.src.name}/frontend";
 
@@ -28,7 +28,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
       ;
     inherit pnpm;
     fetcherVersion = 4;
-    hash = "sha256-9G74AVRXPgR+aj00ksCc1+dDqgE2GQR4cpjJsY6yjro=";
+    hash = "sha256-+P4UUkZKQJVfGbDFKR0gRMU+wYK9K7NBYo1s/ebRK9I=";
   };
 
   strictDeps = true;

pkgs/by-name/tr/tranquil-pds/package.nix

@@ -10,12 +10,12 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "tranquil-pds";
-  version = "0.6.4";
+  version = "0.6.5";
 
   src = fetchgit {
     url = "https://tangled.org/tranquil.farm/tranquil-pds";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kGB5jFwghMsjlAoS4mj94s9peo7PL54UKTH/3TS567w=";
+    hash = "sha256-kBy982B9ZY5W02hmdKqlR86ynJAUD98b4UgaYIPaFzM=";
   };
 
   cargoHash = "sha256-X2zoQSBQaq+W0rT/Y08EA1b81pbePUvH7q+Ccmtbf+Y=";

pkgs/by-name/ts/tsukimi/package.nix

@@ -22,18 +22,18 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "tsukimi";
-  version = "26.5.3";
+  version = "26.6.1";
 
   src = fetchFromGitHub {
     owner = "tsukinaha";
     repo = "tsukimi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-SKmt/dCMsK2dTzWU8Iq5YC75PJK3Q/fNK14MLX14+g8=";
+    hash = "sha256-fJT5o9GOQB5TIlbqTRcMCaf5OYYW+D19dNPbLFqViCg=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) src;
-    hash = "sha256-M8MbBcBeK0GBwRCo2WTHG4COsojGBKg8LotOo5A6dF4=";
+    hash = "sha256-Rdne9EQ9QSZ2RlYWEFEy9/OZEdIucQ/nB1Z8MJ0gAsU=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ya/yabai/package.nix

@@ -1,38 +1,39 @@
 {
   lib,
-  stdenv,
-  fetchFromGitHub,
-  fetchzip,
   apple-sdk_15,
-  common-updater-scripts,
-  curl,
+  bintools-unwrapped,
+  cups,
+  fetchFromGitHub,
   installShellFiles,
-  jq,
+  llvmPackages,
+  nix-update-script,
+  stdenv,
   versionCheckHook,
-  writeShellScript,
   xxd,
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "yabai";
   version = "7.1.25";
 
-  src =
-    finalAttrs.passthru.sources.${stdenv.hostPlatform.system}
-      or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
+  src = fetchFromGitHub {
+    owner = "asmvik";
+    repo = "yabai";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-61knfbahxxlJnVZy47347slsjUGiQUJyZh58G97SDkE=";
+  };
+
+  __structuredAttrs = true;
+  strictDeps = true;
 
   nativeBuildInputs = [
     installShellFiles
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isx86_64 [
     xxd
   ];
 
-  buildInputs = lib.optionals stdenv.hostPlatform.isx86_64 [
+  buildInputs = [
     apple-sdk_15
   ];
 
-  dontConfigure = true;
-  dontBuild = stdenv.hostPlatform.isAarch64;
   enableParallelBuilding = true;
 
   installPhase = ''
@@ -41,48 +42,47 @@ stdenv.mkDerivation (finalAttrs: {
     mkdir -p $out/{bin,share/icons/hicolor/scalable/apps}
 
     cp ./bin/yabai $out/bin/yabai
-    ${lib.optionalString stdenv.hostPlatform.isx86_64 "cp ./assets/icon/icon.svg $out/share/icons/hicolor/scalable/apps/yabai.svg"}
+    cp ./assets/icon/icon.svg $out/share/icons/hicolor/scalable/apps/yabai.svg
     installManPage ./doc/yabai.1
 
     runHook postInstall
   '';
 
+  # yabai's makefile builds universal (x86_64 + arm64/arm64e) binaries with
+  # `xcrun clang`. Collapse it to the host arch and use plain `clang`, since the
+  # scripting addition (arm64e) is compiled in preBuild with the unwrapped clang,
+  # which needs the SDK/clang/CUPS include paths passed explicitly.
   postPatch =
-    lib.optionalString stdenv.hostPlatform.isx86_64 # bash
-      ''
-        # aarch64 code is compiled on all targets, which causes our Apple SDK headers to error out.
-        # Since multilib doesn't work on darwin i dont know of a better way of handling this.
-        substituteInPlace makefile \
-        --replace-fail "-arch arm64e" "" \
-        --replace-fail "-arch arm64" ""
-      '';
+    let
+      arch = stdenv.hostPlatform.darwinArch;
+      # The scripting addition is injected into arm64e system processes, so on
+      # aarch64 it must be arm64e even though the main binary stays arm64.
+      archSA = "${arch}${lib.optionalString stdenv.hostPlatform.isAarch64 "e"}";
+      clangFlags = lib.concatStringsSep " " [
+        "-isystem $(SDKROOT)/usr/include"
+        "-isystem ${llvmPackages.libclang.lib}/lib/clang/*/include"
+        "-isystem ${lib.getDev cups}/include"
+        "-F$(SDKROOT)/System/Library/Frameworks"
+        "-L$(SDKROOT)/usr/lib"
+      ];
+    in
+    ''
+      substituteInPlace makefile \
+        --replace-fail "-arch x86_64 -arch arm64e" "-arch ${archSA}" \
+        --replace-fail "-arch x86_64 -arch arm64" "-arch ${arch}" \
+        --replace-fail 'xcrun clang' 'clang ${clangFlags}'
+    '';
+
+  # The cc-wrapper can't target arm64e, so build the scripting addition (the only
+  # arm64e part) with the unwrapped clang.
+  preBuild = lib.optionalString stdenv.hostPlatform.isAarch64 ''
+    make ./src/osax/payload_bin.c ./src/osax/loader_bin.c "PATH=${bintools-unwrapped}/bin:${llvmPackages.clang-unwrapped}/bin:$PATH"
+  '';
 
   nativeInstallCheckInputs = [ versionCheckHook ];
   doInstallCheck = true;
 
-  passthru = {
-    sources = {
-      # Unfortunately compiling yabai from source on aarch64-darwin is a bit complicated. We use the precompiled binary instead for now.
-      # See the comments on https://github.com/NixOS/nixpkgs/pull/188322 for more information.
-      "aarch64-darwin" = fetchzip {
-        url = "https://github.com/asmvik/yabai/releases/download/v${finalAttrs.version}/yabai-v${finalAttrs.version}.tar.gz";
-        hash = "sha256-hGZLoY5zZjtVtjMbYQ4VHqAuAD835Tdfq6YX122/9Ik=";
-      };
-      "x86_64-darwin" = fetchFromGitHub {
-        owner = "asmvik";
-        repo = "yabai";
-        rev = "v${finalAttrs.version}";
-        hash = "sha256-61knfbahxxlJnVZy47347slsjUGiQUJyZh58G97SDkE=";
-      };
-    };
-
-    updateScript = writeShellScript "update-yabai" ''
-      NEW_VERSION=$(${lib.getExe curl} --silent https://api.github.com/repos/asmvik/yabai/releases/latest | ${lib.getExe jq} '.tag_name | ltrimstr("v")' --raw-output)
-      for platform in ${lib.escapeShellArgs finalAttrs.meta.platforms}; do
-        ${lib.getExe' common-updater-scripts "update-source-version"} "yabai" "$NEW_VERSION" --ignore-same-version --source-key="sources.$platform"
-      done
-    '';
-  };
+  passthru.updateScript = nix-update-script { };
 
   meta = {
     description = "Tiling window manager for macOS based on binary space partitioning";
@@ -95,16 +95,13 @@ stdenv.mkDerivation (finalAttrs: {
     homepage = "https://github.com/asmvik/yabai";
     changelog = "https://github.com/asmvik/yabai/blob/v${finalAttrs.version}/CHANGELOG.md";
     license = lib.licenses.mit;
-    platforms = builtins.attrNames finalAttrs.passthru.sources;
+    platforms = lib.platforms.darwin;
     mainProgram = "yabai";
     maintainers = with lib.maintainers; [
       cmacrae
       shardy
       khaneliman
     ];
-    sourceProvenance =
-      with lib.sourceTypes;
-      lib.optionals stdenv.hostPlatform.isx86_64 [ fromSource ]
-      ++ lib.optionals stdenv.hostPlatform.isAarch64 [ binaryNativeCode ];
+    sourceProvenance = [ lib.sourceTypes.fromSource ];
   };
 })

pkgs/by-name/ya/yazi/plugins/easyjump/default.nix

@@ -0,0 +1,28 @@
+{
+  lib,
+  fetchFromGitHub,
+  mkYaziPlugin,
+}:
+
+mkYaziPlugin {
+  pname = "easyjump.yazi";
+  version = "2.0.0";
+
+  src = fetchFromGitHub {
+    owner = "mikavilpas";
+    repo = "easyjump.yazi";
+    rev = "7c4056ec691c4da9c16dc98802366782e5e012a5";
+    hash = "sha256-uJRxk7kF0qn6WSP/2WhNnQK3kvsaUJfAozOGweSXiDA=";
+  };
+
+  sourceRoot = "source/easyjump.yazi";
+
+  meta = {
+    description = "Yazi plugin for quickly jumping to the visible files";
+    homepage = "https://github.com/mikavilpas/easyjump.yazi";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [
+      philocalyst
+    ];
+  };
+}

pkgs/by-name/ye/yek/package.nix

@@ -8,7 +8,7 @@
   versionCheckHook,
 }:
 let
-  version = "0.25.2";
+  version = "0.25.3";
 in
 rustPlatform.buildRustPackage {
   pname = "yek";
@@ -18,10 +18,10 @@ rustPlatform.buildRustPackage {
     owner = "bodo-run";
     repo = "yek";
     tag = "v${version}";
-    hash = "sha256-2gt/leOEhdvj5IXp0Kl3ooUk8eclsMkt6JCIvPsKhMI=";
+    hash = "sha256-pRDcH+KqD1xl7PEH8FCEV9w51TLvWFYph5hu51SLaog=";
   };
 
-  cargoHash = "sha256-gjDcw8mMZgoy7kjXlBYHhOgYXOV+XoMgflkZoggz42Q=";
+  cargoHash = "sha256-Fb5/suTtR47KwUipKZoDU7cUo9xwwlJ/alNFm9fvFUQ=";
 
   nativeBuildInputs = [ pkg-config ];
   buildInputs = [ openssl ];

pkgs/by-name/zo/zoho-mail-desktop/package.nix

@@ -6,11 +6,11 @@
 
 let
   pname = "zoho-mail-desktop";
-  version = "1.7.4";
+  version = "1.9.2";
 
   src = fetchurl {
     url = "https://downloads.zohocdn.com/zmail-desktop/linux/zoho-mail-desktop-lite-x64-v${version}.AppImage";
-    hash = "sha256-uGz2sksBMbw/17ia/RU/9kJhf4EMeSFrMX27D9XplrI=";
+    hash = "sha256-bEvkDN6XST/ff4A0J1acPw6GawUpeHaty2+9f6tl+Ag=";
   };
 
   appimageContents = appimageTools.extract {

pkgs/development/interpreters/python/cpython/docs/3.10-html.nix

@@ -1,24 +0,0 @@
-# This file was generated and will be overwritten by ./generate.sh
-
-{
-  stdenv,
-  lib,
-  fetchurl,
-}:
-
-stdenv.mkDerivation {
-  pname = "python310-docs-html";
-  version = "3.10.7";
-
-  src = fetchurl {
-    url = "https://www.python.org/ftp/python/doc/3.10.7/python-3.10.7-docs-html.tar.bz2";
-    sha256 = "0j86z1vmaghzj5i4frvzyfb9qwsmm09g4f4ssx5w27cm30b8k0v1";
-  };
-  installPhase = ''
-    mkdir -p $out/share/doc/python310
-    cp -R ./ $out/share/doc/python310/html
-  '';
-  meta = {
-    maintainers = [ ];
-  };
-}

pkgs/development/interpreters/python/cpython/docs/3.10-pdf-a4.nix

@@ -1,24 +0,0 @@
-# This file was generated and will be overwritten by ./generate.sh
-
-{
-  stdenv,
-  lib,
-  fetchurl,
-}:
-
-stdenv.mkDerivation {
-  pname = "python310-docs-pdf-a4";
-  version = "3.10.7";
-
-  src = fetchurl {
-    url = "https://www.python.org/ftp/python/doc/3.10.7/python-3.10.7-docs-pdf-a4.tar.bz2";
-    sha256 = "1gvi457dsj3ywwvxysp7idkk9ndngnby1dnfh1q8f5gv3kg4093r";
-  };
-  installPhase = ''
-    mkdir -p $out/share/doc/python310
-    cp -R ./ $out/share/doc/python310/pdf-a4
-  '';
-  meta = {
-    maintainers = [ ];
-  };
-}

pkgs/development/interpreters/python/cpython/docs/3.10-pdf-letter.nix

@@ -1,24 +0,0 @@
-# This file was generated and will be overwritten by ./generate.sh
-
-{
-  stdenv,
-  lib,
-  fetchurl,
-}:
-
-stdenv.mkDerivation {
-  pname = "python310-docs-pdf-letter";
-  version = "3.10.7";
-
-  src = fetchurl {
-    url = "https://www.python.org/ftp/python/doc/3.10.7/python-3.10.7-docs-pdf-letter.tar.bz2";
-    sha256 = "0hzq5n6absqsh21jp6j5iaim9a1wq69d8lc2assldzb2zg4i75hr";
-  };
-  installPhase = ''
-    mkdir -p $out/share/doc/python310
-    cp -R ./ $out/share/doc/python310/pdf-letter
-  '';
-  meta = {
-    maintainers = [ ];
-  };
-}

pkgs/development/interpreters/python/cpython/docs/3.10-texinfo.nix

@@ -1,24 +0,0 @@
-# This file was generated and will be overwritten by ./generate.sh
-
-{
-  stdenv,
-  lib,
-  fetchurl,
-}:
-
-stdenv.mkDerivation {
-  pname = "python310-docs-texinfo";
-  version = "3.10.7";
-
-  src = fetchurl {
-    url = "https://www.python.org/ftp/python/doc/3.10.7/python-3.10.7-docs-texinfo.tar.bz2";
-    sha256 = "0p0fifi84ijz4ng6krw7c1x965jhgysprkijblmlnax7x9rmqrdf";
-  };
-  installPhase = ''
-    mkdir -p $out/share/info
-    cp ./python.info $out/share/info
-  '';
-  meta = {
-    maintainers = [ ];
-  };
-}

pkgs/development/interpreters/python/cpython/docs/3.10-text.nix

@@ -1,24 +0,0 @@
-# This file was generated and will be overwritten by ./generate.sh
-
-{
-  stdenv,
-  lib,
-  fetchurl,
-}:
-
-stdenv.mkDerivation {
-  pname = "python310-docs-text";
-  version = "3.10.7";
-
-  src = fetchurl {
-    url = "https://www.python.org/ftp/python/doc/3.10.7/python-3.10.7-docs-text.tar.bz2";
-    sha256 = "1zbmm2fvdjnl214y41yffyqw3ywfai5r5npc00n1wkfxsdp7gcc3";
-  };
-  installPhase = ''
-    mkdir -p $out/share/doc/python310
-    cp -R ./ $out/share/doc/python310/text
-  '';
-  meta = {
-    maintainers = [ ];
-  };
-}

pkgs/development/interpreters/python/cpython/docs/3.14-html.nix

@@ -0,0 +1,26 @@
+# This file was generated and will be overwritten by ./generate.sh
+
+{
+  stdenv,
+  fetchurl,
+  lib,
+}:
+
+stdenv.mkDerivation {
+  pname = "python314-docs-html";
+  version = "3.14";
+
+  src = fetchurl {
+    url = "https://docs.python.org/3.14/archives/python-3.14-docs-html.tar.bz2";
+    sha256 = "0igikxq71zqyps8swfib4rwfi81vgvi4fdc6j4sz3x1981nh4j3v";
+  };
+  installPhase = ''
+    mkdir -p $out/share/doc/python314
+    cp -R ./ $out/share/doc/python314/html
+  '';
+  meta = {
+    maintainers = with lib.maintainers; [
+      panicgh
+    ];
+  };
+}

pkgs/development/interpreters/python/cpython/docs/3.14-pdf-a4.nix

@@ -0,0 +1,26 @@
+# This file was generated and will be overwritten by ./generate.sh
+
+{
+  stdenv,
+  fetchurl,
+  lib,
+}:
+
+stdenv.mkDerivation {
+  pname = "python314-docs-pdf-a4";
+  version = "3.14";
+
+  src = fetchurl {
+    url = "https://docs.python.org/3.14/archives/python-3.14-docs-pdf-a4.tar.bz2";
+    sha256 = "0nb69h3wz2vixf80alh9x8fafz3ipq2hdrxccj8vp8vvrcqna75y";
+  };
+  installPhase = ''
+    mkdir -p $out/share/doc/python314
+    cp -R ./ $out/share/doc/python314/pdf-a4
+  '';
+  meta = {
+    maintainers = with lib.maintainers; [
+      panicgh
+    ];
+  };
+}

pkgs/development/interpreters/python/cpython/docs/3.14-texinfo.nix

@@ -0,0 +1,26 @@
+# This file was generated and will be overwritten by ./generate.sh
+
+{
+  stdenv,
+  fetchurl,
+  lib,
+}:
+
+stdenv.mkDerivation {
+  pname = "python314-docs-texinfo";
+  version = "3.14";
+
+  src = fetchurl {
+    url = "https://docs.python.org/3.14/archives/python-3.14-docs-texinfo.tar.bz2";
+    sha256 = "0r89zg2dzh90iv3qff9rx0ckfsds8hin5z53ai31cchxhglg4b8s";
+  };
+  installPhase = ''
+    mkdir -p $out/share/info
+    cp ./python.info $out/share/info
+  '';
+  meta = {
+    maintainers = with lib.maintainers; [
+      panicgh
+    ];
+  };
+}

pkgs/development/interpreters/python/cpython/docs/3.14-text.nix

@@ -0,0 +1,26 @@
+# This file was generated and will be overwritten by ./generate.sh
+
+{
+  stdenv,
+  fetchurl,
+  lib,
+}:
+
+stdenv.mkDerivation {
+  pname = "python314-docs-text";
+  version = "3.14";
+
+  src = fetchurl {
+    url = "https://docs.python.org/3.14/archives/python-3.14-docs-text.tar.bz2";
+    sha256 = "1w8zl9pymsfviiw7iqz86liwnvfh1093syk3vkpvsdmvsa9acwyf";
+  };
+  installPhase = ''
+    mkdir -p $out/share/doc/python314
+    cp -R ./ $out/share/doc/python314/text
+  '';
+  meta = {
+    maintainers = with lib.maintainers; [
+      panicgh
+    ];
+  };
+}

pkgs/development/interpreters/python/cpython/docs/default.nix

@@ -8,31 +8,25 @@ let
   pythonDocs = {
     html = {
       recurseForDerivations = true;
-      python310 = import ./3.10-html.nix {
+      python314 = import ./3.14-html.nix {
         inherit stdenv fetchurl lib;
       };
     };
     pdf_a4 = {
       recurseForDerivations = true;
-      python310 = import ./3.10-pdf-a4.nix {
-        inherit stdenv fetchurl lib;
-      };
-    };
-    pdf_letter = {
-      recurseForDerivations = true;
-      python310 = import ./3.10-pdf-letter.nix {
+      python314 = import ./3.14-pdf-a4.nix {
         inherit stdenv fetchurl lib;
       };
     };
     text = {
       recurseForDerivations = true;
-      python310 = import ./3.10-text.nix {
+      python314 = import ./3.14-text.nix {
         inherit stdenv fetchurl lib;
       };
     };
     texinfo = {
       recurseForDerivations = true;
-      python310 = import ./3.10-texinfo.nix {
+      python314 = import ./3.14-texinfo.nix {
         inherit stdenv fetchurl lib;
       };
     };

pkgs/development/interpreters/python/cpython/docs/generate.sh

@@ -2,25 +2,29 @@
 
 cd -- "$(dirname -- "${BASH_SOURCE[0]}")"
 
-TYPES="html pdf-a4 pdf-letter text texinfo"
-URL=http://www.python.org/ftp/python/doc/VERSION/python-VERSION-docs-TYPE.tar.bz2
-VERSIONS=$(for major in 2 3; do curl https://docs.python.org/$major/archives/ 2>/dev/null | perl -l -n -e'/<a href="python-([23].[0-9]+.[0-9]+)-docs-html.tar.bz2/ && print $1' | tail -n 1; done)
+TYPES="html pdf-a4 text texinfo"
+URL=https://docs.python.org/VERSION/archives/python-VERSION-docs-TYPE.tar.bz2
+VERSIONS=$(for major in 3; do curl https://docs.python.org/$major/archives/ 2>/dev/null | perl -l -n -e'/<a href="python-([23].[0-9]+(.[0-9]+)?)-docs-html.tar.bz2/ && print $1' | tail -n 1; done)
 echo "Generating expressions for:
 ${VERSIONS}
 "
 
 
 cat >default.nix <<EOF
-{ stdenv, fetchurl, lib }:
+{
+  stdenv,
+  fetchurl,
+  lib,
+}:
 
 let
-pythonDocs = {
+  pythonDocs = {
 EOF
 
 for type in $TYPES; do
     cat >>default.nix <<EOF
-  ${type/-/_} = {
-    recurseForDerivations = true;
+    ${type/-/_} = {
+      recurseForDerivations = true;
 EOF
 
     for version in $VERSIONS; do
@@ -39,7 +43,7 @@ EOF
         hash=
         if [ -e ${outfile} ]; then
             currentversion=$(grep "url =" ${outfile} |cut -d/ -f7)
-            if [ ${version} = ${currentversion} ]; then
+            if [ "${version}" = "${currentversion}" ]; then
                 hash=$(grep sha256 ${outfile} | cut -d'"' -f2)
             fi
         fi
@@ -57,15 +61,19 @@ EOF
 
         attrname=python${major}${minor}
         cat >>default.nix <<EOF
-    ${attrname} = import ./${major}.${minor}-${type}.nix {
-      inherit stdenv fetchurl lib;
-    };
+      ${attrname} = import ./${major}.${minor}-${type}.nix {
+        inherit stdenv fetchurl lib;
+      };
 EOF
 
         echo "done."
         echo
     done
-    echo "  };" >> default.nix
+    echo "    };" >> default.nix
 done
 
-echo "}; in pythonDocs" >> default.nix
+cat >>default.nix <<EOF
+  };
+in
+pythonDocs
+EOF

pkgs/development/interpreters/python/cpython/docs/template-info.nix

@@ -1,6 +1,10 @@
 # This file was generated and will be overwritten by ./generate.sh
 
-{ stdenv, fetchurl }:
+{
+  stdenv,
+  fetchurl,
+  lib,
+}:
 
 stdenv.mkDerivation {
   pname = "pythonMAJORMINOR-docs-TYPE";
@@ -15,6 +19,8 @@ stdenv.mkDerivation {
     cp ./python.info $out/share/info
   '';
   meta = {
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [
+      panicgh
+    ];
   };
 }

pkgs/development/interpreters/python/cpython/docs/template.nix

@@ -1,6 +1,10 @@
 # This file was generated and will be overwritten by ./generate.sh
 
-{ stdenv, fetchurl }:
+{
+  stdenv,
+  fetchurl,
+  lib,
+}:
 
 stdenv.mkDerivation {
   pname = "pythonMAJORMINOR-docs-TYPE";
@@ -15,6 +19,8 @@ stdenv.mkDerivation {
     cp -R ./ $out/share/doc/pythonMAJORMINOR/TYPE
   '';
   meta = {
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [
+      panicgh
+    ];
   };
 }

pkgs/development/lean-modules/Cli/default.nix

@@ -4,14 +4,15 @@
   fetchFromGitHub,
 }:
 
-buildLakePackage {
+buildLakePackage (finalAttrs: {
   pname = "lean4-cli";
+  # nixpkgs-update: no auto update
   version = "4.30.0";
 
   src = fetchFromGitHub {
     owner = "leanprover";
     repo = "lean4-cli";
-    tag = "v4.30.0";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-oMaqHvWlEfk1601JfNKPvkGIWgMW6tiF7Mej7g63vh0=";
   };
 
@@ -31,9 +32,6 @@ buildLakePackage {
     description = "Command-line argument parser for Lean 4";
     homepage = "https://github.com/leanprover/lean4-cli";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [
-      nadja-y
-      niklashh
-    ];
+    maintainers = with lib.maintainers; [ nadja-y ];
   };
-}
+})

pkgs/development/lean-modules/LeanSearchClient/default.nix

@@ -6,8 +6,8 @@
 
 buildLakePackage {
   pname = "lean4-LeanSearchClient";
-  # No lockstep tags; version pinned by mathlib's lake-manifest.json.
-  version = "0-unstable-2026-02-12";
+  # nixpkgs-update: no auto update
+  version = "4.12.0-unstable-2026-02-12";
 
   src = fetchFromGitHub {
     owner = "leanprover-community";
@@ -22,9 +22,6 @@ buildLakePackage {
     description = "Lean 4 client for LeanSearch and Moogle proof search";
     homepage = "https://github.com/leanprover-community/LeanSearchClient";
     license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [
-      nadja-y
-      niklashh
-    ];
+    maintainers = with lib.maintainers; [ nadja-y ];
   };
 }

pkgs/development/lean-modules/Qq/default.nix

@@ -6,6 +6,7 @@
 
 buildLakePackage {
   pname = "lean4-Qq";
+  # nixpkgs-update: no auto update
   version = "4.30.0";
 
   src = fetchFromGitHub {
@@ -21,9 +22,6 @@ buildLakePackage {
     description = "Lean 4 compile-time quote and antiquote macros for metaprogramming";
     homepage = "https://github.com/leanprover-community/quote4";
     license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [
-      nadja-y
-      niklashh
-    ];
+    maintainers = with lib.maintainers; [ nadja-y ];
   };
 }

pkgs/development/lean-modules/aesop/default.nix

@@ -7,6 +7,7 @@
 
 buildLakePackage {
   pname = "lean4-aesop";
+  # nixpkgs-update: no auto update
   version = "4.30.0";
 
   src = fetchFromGitHub {
@@ -23,9 +24,6 @@ buildLakePackage {
     description = "White-box automation for Lean 4";
     homepage = "https://github.com/leanprover-community/aesop";
     license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [
-      nadja-y
-      niklashh
-    ];
+    maintainers = with lib.maintainers; [ nadja-y ];
   };
 }

pkgs/development/lean-modules/batteries/default.nix

@@ -6,12 +6,13 @@
 
 buildLakePackage {
   pname = "lean4-batteries";
-  version = "4.30.0";
+  # nixpkgs-update: no auto update
+  version = "4.30.0-unstable-2026-05-26";
 
   src = fetchFromGitHub {
     owner = "leanprover-community";
     repo = "batteries";
-    tag = "v4.30.0";
+    rev = "32dc18cde3684679f3c003de608743b57498c56f";
     hash = "sha256-OOcKCQEgnn9zkkwjHOovMb/IprNomTDufLOfEXs7hFU=";
   };
 
@@ -31,9 +32,6 @@ buildLakePackage {
     description = "The batteries-included extended library for Lean 4";
     homepage = "https://github.com/leanprover-community/batteries";
     license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [
-      nadja-y
-      niklashh
-    ];
+    maintainers = with lib.maintainers; [ nadja-y ];
   };
 }

pkgs/development/lean-modules/importGraph/default.nix

@@ -7,12 +7,13 @@
 
 buildLakePackage {
   pname = "lean4-importGraph";
-  version = "4.30.0";
+  # nixpkgs-update: no auto update
+  version = "4.30.0-unstable-2026-05-26";
 
   src = fetchFromGitHub {
     owner = "leanprover-community";
     repo = "import-graph";
-    tag = "v4.30.0";
+    rev = "515cf9d0c00ece5e661f6de4326a53dedc1e8ea1";
     hash = "sha256-V3bGQxTNs2G4MqaVxRb6WED1a7VaHfEo1HgBNqPipz8=";
   };
 
@@ -23,9 +24,6 @@ buildLakePackage {
     description = "Tools to analyse and visualise Lean 4 import structures";
     homepage = "https://github.com/leanprover-community/import-graph";
     license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [
-      nadja-y
-      niklashh
-    ];
+    maintainers = with lib.maintainers; [ nadja-y ];
   };
 }

pkgs/development/lean-modules/lean4/default.nix

@@ -8,15 +8,17 @@
   git,
   gmp,
   cadical,
+  cadical' ? cadical.override { version = "2.1.3"; },
   leangz,
   pkg-config,
   libuv,
   perl,
+  runCommand,
+  writeText,
   testers,
 }:
-let
-  cadical' = cadical.override { version = "2.1.3"; };
 
+let
   lean4 = stdenv.mkDerivation (finalAttrs: {
     pname = "lean4";
     version = "4.30.0";
@@ -71,8 +73,8 @@ let
 
     nativeBuildInputs = [
       cmake
+      leangz
       pkg-config
-      leangz # Provides leantar
     ];
 
     buildInputs = [
@@ -90,6 +92,7 @@ let
       "-DUSE_GITHASH=OFF"
       "-DINSTALL_LICENSE=OFF"
       "-DINSTALL_CADICAL=OFF"
+      "-DINSTALL_LEANTAR=OFF"
       "-DUSE_MIMALLOC=ON"
     ];
 
@@ -106,40 +109,54 @@ let
       changelog = "https://github.com/leanprover/lean4/blob/${finalAttrs.src.tag}/RELEASES.md";
       license = lib.licenses.asl20;
       platforms = lib.platforms.all;
-      maintainers = with lib.maintainers; [
-        nadja-y
-        niklashh
-      ];
+      maintainers = with lib.maintainers; [ nadja-y ];
       mainProgram = "lean";
     };
   });
 
   oldStorePath = builtins.substring 0 43 (toString lean4);
-in
-# Binary-patched for correct runtime discovery in wrapped environments.
-symlinkJoin {
-  inherit (lean4) name pname;
-  paths = [ lean4 ];
-  nativeBuildInputs = [ perl ];
-  postBuild = ''
-    newStorePath=$(echo "$out" | head -c 43)
 
-    # Copy (not symlink) — IO.appPath resolves through symlinks.
-    rm $out/bin/lean $out/bin/lake
-    cp ${lean4}/bin/lean $out/bin/lean
-    cp ${lean4}/bin/lake $out/bin/lake
+  # Binary-patched for correct runtime discovery in wrapped environments.
+  wrapped = symlinkJoin {
+    inherit (lean4) name pname;
+    paths = [
+      lean4
+      cadical'
+      leangz
+    ];
+    nativeBuildInputs = [ perl ];
+    postBuild = ''
+      newStorePath=$(echo "$out" | head -c 43)
 
-    for bin in $out/bin/lean $out/bin/lake; do
-      cat "$bin" \
-        | perl -pe "s|\Q${oldStorePath}\E|$newStorePath|g" \
-        > "$bin.tmp"
-      chmod +x "$bin.tmp"
-      mv "$bin.tmp" "$bin"
-    done
-  '';
+      for bin in ${lean4}/bin/*; do
+        test -f "$bin" || continue
+        install -m755 "$bin" "$out/bin/"
+        perl -pi -e "s|\Q${oldStorePath}\E|$newStorePath|g" "$out/bin/$(basename "$bin")"
+      done
+    '';
 
-  inherit (lean4) version src meta;
-  passthru = {
-    inherit (lean4) version src;
+    inherit (lean4) version src meta;
+    passthru = {
+      inherit (lean4) version src;
+      tests =
+        let
+          src = writeText "smoke.lean" ''
+            import Std
+            example : 1 + 1 = 2 := by decide
+            example : ∀ (x y : BitVec 8), x &&& y = y &&& x := by bv_decide
+          '';
+        in
+        {
+          version = testers.testVersion {
+            package = wrapped;
+            version = "v${lean4.version}";
+          };
+          smoke = runCommand "lean4-test-smoke" { } ''
+            ${wrapped}/bin/lean ${src}
+            touch $out
+          '';
+        };
+    };
   };
-}
+in
+wrapped

pkgs/development/lean-modules/mathlib/default.nix

@@ -1,6 +1,8 @@
 {
   lib,
   buildLakePackage,
+  runCommand,
+  leangz,
   fetchFromGitHub,
   batteries,
   aesop,
@@ -12,41 +14,88 @@
   tests,
 }:
 
-buildLakePackage {
-  pname = "lean4-mathlib";
-  version = "4.30.0";
+let
+  # build leangz without zstd support, to improve Hydra's xz compression ratio
+  leangz-raw = leangz.overrideAttrs { cargoBuildNoDefaultFeatures = true; };
 
-  src = fetchFromGitHub {
-    owner = "leanprover-community";
-    repo = "mathlib4";
-    tag = "v4.30.0";
-    hash = "sha256-RxOxdUiVUAxUbfVhxlkjmPX1V64EtmIIn1eW75TiJWA=";
-  };
+  mathlib__archive = buildLakePackage (finalAttrs: {
+    pname = "lean4-mathlib";
+    # nixpkgs-update: no auto update
+    version = "4.30.0";
 
-  leanPackageName = "mathlib";
-  leanDeps = [
-    batteries
-    aesop
-    Qq
-    proofwidgets
-    plausible
-    LeanSearchClient
-    importGraph
-  ];
+    src = fetchFromGitHub {
+      owner = "leanprover-community";
+      repo = "mathlib4";
+      tag = "v${finalAttrs.version}";
+      hash = "sha256-RxOxdUiVUAxUbfVhxlkjmPX1V64EtmIIn1eW75TiJWA=";
+    };
 
-  requiredSystemFeatures = [ "big-parallel" ];
-
-  passthru.tests = {
-    inherit (tests.lake) weak-minimax;
-  };
-
-  meta = {
-    description = "Mathematical library for Lean 4";
-    homepage = "https://github.com/leanprover-community/mathlib4";
-    license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [
-      nadja-y
-      niklashh
+    leanPackageName = "mathlib";
+    leanDeps = [
+      batteries
+      aesop
+      Qq
+      proofwidgets
+      plausible
+      LeanSearchClient
+      importGraph
     ];
-  };
-}
+
+    nativeBuildInputs = [ leangz-raw ];
+
+    # Per-module lgz preprocessing strips olean structural overhead,
+    # providing significant compression benefit over a raw xz invocation.
+    # This also brings the output under Hydra's max_output_size. The
+    # user-facing mathlib derivation unpacks transparently.
+    postInstall = ''
+      local lib="$out/.lake/build/lib/lean"
+      local ir="$out/.lake/build/ir"
+      find "$lib" -name '*.trace' -print0 \
+        | xargs -0 -P"$NIX_BUILD_CORES" -I{} bash -c '
+            base="''${1%.trace}"; rel="''${base#'"$lib"'/}"
+            leantar -C "'"$lib"'" -C "'"$ir"'" "$base.ltar" \
+              "$rel.trace" "$rel.olean" "$rel.olean.server" "$rel.olean.private" \
+              "$rel.ilean" -i 1 "$rel.c"
+            rm "$base".{trace,olean,olean.server,olean.private,ilean} "'"$ir"'/$rel.c"
+          ' _ {}
+    '';
+
+    meta = {
+      description = "Mathematical library for Lean 4";
+      homepage = "https://github.com/leanprover-community/mathlib4";
+      license = lib.licenses.asl20;
+      maintainers = with lib.maintainers; [ nadja-y ];
+    };
+  });
+in
+
+runCommand mathlib__archive.name
+  {
+    nativeBuildInputs = [ leangz-raw ];
+    passthru = {
+      inherit mathlib__archive;
+      inherit (mathlib__archive)
+        src
+        version
+        lakePackageName
+        lean4
+        allLeanDeps
+        computedLakeDeps
+        overrideLakeDepsAttrs
+        ;
+      tests = {
+        inherit (tests.lake) weak-minimax;
+      };
+    };
+    meta = mathlib__archive.meta // {
+      hydraPlatforms = [ ];
+    };
+  }
+  ''
+    mkdir -p $out
+    cp -rT ${mathlib__archive} $out
+    chmod -R u+w $out
+    find $out/.lake/build/lib -name '*.ltar' \
+      -exec leantar -C $out/.lake/build/lib/lean -C $out/.lake/build/ir -x {} +
+    find $out/.lake/build/lib -name '*.ltar' -delete
+  ''

pkgs/development/lean-modules/plausible/default.nix

@@ -6,12 +6,13 @@
 
 buildLakePackage {
   pname = "lean4-plausible";
-  version = "4.30.0";
+  # nixpkgs-update: no auto update
+  version = "4.30.0-unstable-2026-05-26";
 
   src = fetchFromGitHub {
     owner = "leanprover-community";
     repo = "plausible";
-    tag = "v4.30.0";
+    rev = "a456461b368b71d2accd95234832cd9c174b5437";
     hash = "sha256-DSaS0W2cfCUh2N+7WyiM7aUv3trtRNON0PzCgCW2SKY=";
   };
 
@@ -21,9 +22,6 @@ buildLakePackage {
     description = "Property-based testing framework for Lean 4";
     homepage = "https://github.com/leanprover-community/plausible";
     license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [
-      nadja-y
-      niklashh
-    ];
+    maintainers = with lib.maintainers; [ nadja-y ];
   };
 }

pkgs/development/lean-modules/proofwidgets/default.nix

@@ -7,23 +7,20 @@
   nodejs,
 }:
 
-let
-  version = "0.0.95";
+buildLakePackage (finalAttrs: {
+  pname = "lean4-proofwidgets";
+  # nixpkgs-update: no auto update
+  version = "0.0.99";
+
   src = fetchFromGitHub {
     owner = "leanprover-community";
     repo = "ProofWidgets4";
-    tag = "v${version}";
-    hash = "sha256-LETljr+QEU6CxprR3pB4hUzhgCD8PrIuiPOgTIdhHVM=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-kGoEkKGrucNUWFYkHW2LsS1gI4C0J8bAHQL2MiE4Pzc=";
   };
-in
-
-buildLakePackage {
-  pname = "lean4-proofwidgets";
-  inherit version src;
 
   leanPackageName = "proofwidgets";
 
-  # ProofWidgets has no Lean dependencies (lake-manifest.json packages = []).
   lakeHash = null;
 
   nativeBuildInputs = [
@@ -31,20 +28,14 @@ buildLakePackage {
     npmHooks.npmConfigHook
   ];
 
-  # Pre-fetched npm dependencies for the TypeScript widget build
-  # (npm/rollup in widget/).  npmConfigHook installs these offline.
   npmDeps = fetchNpmDeps {
     name = "lean4-proofwidgets-npm-deps";
-    inherit src;
+    src = finalAttrs.src;
     sourceRoot = "source/widget";
-    hash = "sha256-ShH6MDr76wzWQrJvhMWCnklaox/uRsfoe+aYVSo/eNA=";
+    hash = "sha256-ssWSr2qfsIbX25DidiVPm0tsLGjrhQhQ6YKPL0rfc1k=";
   };
   npmRoot = "widget";
 
-  # Lake's widgetJsAll target runs `npm clean-install` which wipes
-  # node_modules and the patched shebangs that npmConfigHook applied.
-  # Wrap npm to skip ci/clean-install (deps already installed) while
-  # passing `npm run build` through — same pattern as llama-cpp/evcc.
   postConfigure = ''
     local realNpm
     realNpm="$(type -P npm)"
@@ -62,9 +53,6 @@ buildLakePackage {
     description = "Interactive UI framework for Lean 4 proof assistants";
     homepage = "https://github.com/leanprover-community/ProofWidgets4";
     license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [
-      nadja-y
-      niklashh
-    ];
+    maintainers = with lib.maintainers; [ nadja-y ];
   };
-}
+})

pkgs/development/lean-modules/update.sh

@@ -1,30 +1,15 @@
 #!/usr/bin/env nix-shell
-#!nix-shell -i bash -p nix-update common-updater-scripts curl jq
+#!nix-shell -i bash -p curl jq gh
 
-# Update the leanPackages set.
-#
-# Usage:
-#   ./pkgs/development/lean-modules/update.sh [version]
+# Updates the leanPackages dependency tree to match mathlib's
+# lake-manifest.json for the current lean4 version.
 
 set -euo pipefail
 
-lean4_version="${1:-$(curl -sL https://api.github.com/repos/leanprover/lean4/releases/latest | jq -r '.tag_name' | sed 's/^v//')}"
+lean4_version=$(nix eval --raw .#leanPackages.lean4.version 2>/dev/null)
 
-# Snapshot before any updates.
-old_lockstep=$(nix eval --raw .#leanPackages.mathlib.version 2>/dev/null || echo "")
-old_pw=$(nix eval --raw .#leanPackages.proofwidgets.version 2>/dev/null || echo "")
-old_lsc=$(nix eval --raw .#leanPackages.LeanSearchClient.version 2>/dev/null || echo "")
-
-run() { echo "  $*"; "$@"; }
-
-# --- lean4 toolchain ---
-
-run nix-update leanPackages.lean4 --version="$lean4_version"
-
-# --- mathlib dependency tree ---
-# Versions are derived from mathlib's lake-manifest.json at the
-# matching lean4 tag. Most packages release in lockstep with lean4;
-# ProofWidgets and LeanSearchClient have their own versioning.
+dir=$(dirname "$0")
+FAKE="sha256-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="
 
 manifest=$(curl -sL "https://raw.githubusercontent.com/leanprover-community/mathlib4/v${lean4_version}/lake-manifest.json")
 
@@ -37,47 +22,77 @@ if [ "$manifest_deps" != "$known_deps" ]; then
   exit 1
 fi
 
-pw_version=$(echo "$manifest" | jq -r '.packages[] | select(.name == "proofwidgets") | .inputRev' | sed 's/^v//')
+patch_pkg() {
+  local pkgname="$1" repo="$2"
+  local file="$dir/$pkgname/default.nix"
+  local inputRev rev version
+  inputRev=$(echo "$manifest" | jq -r ".packages[] | select(.name == \"$pkgname\") | .inputRev")
+  rev=$(echo "$manifest" | jq -r ".packages[] | select(.name == \"$pkgname\") | .rev")
 
-lsc_rev=$(echo "$manifest" | jq -r '.packages[] | select(.name == "LeanSearchClient") | .rev')
-lsc_date=$(curl -sL "https://api.github.com/repos/leanprover-community/LeanSearchClient/commits/$lsc_rev" | jq -r '.commit.committer.date[:10]')
-lsc_version="0-unstable-$lsc_date"
+  if [[ "$inputRev" =~ ^v[0-9] ]]; then
+    version="${inputRev#v}"
+    # tag = "v${...version}" auto-follows; convert rev → tag if needed.
+    if grep -q 'rev = "' "$file"; then
+      sed -i -E "s|rev = \"[^\"]*\";|tag = \"${inputRev}\";|" "$file"
+    fi
+  else
+    local tmp=$(mktemp -d)
+    git clone --bare --filter=tree:0 --depth=100 --single-branch "https://github.com/$repo" "$tmp" 2>/dev/null
+    local latest_tag=$(git -C "$tmp" describe --tags --abbrev=0 --match 'v[0-9]*' "$rev" 2>/dev/null | sed 's/^v//')
+    rm -rf "$tmp"
+    local date=$(gh api "repos/$repo/commits/$rev" --jq '.commit.committer.date[:10]')
+    version="${latest_tag:-0}-unstable-$date"
+    if grep -q 'rev = "' "$file"; then
+      sed -i -E "s|rev = \"[^\"]*\";|rev = \"${rev}\";|" "$file"
+    else
+      sed -i -E "s|tag = \"[^\"]*\";|rev = \"${rev}\";|" "$file"
+    fi
+  fi
+
+  sed -i -E "s|version = \"[^\"]*\";|version = \"${version}\";|" "$file"
+  sed -i "0,/hash = \"sha256-[^\"]*\"/{s||hash = \"$FAKE\"|}" "$file"
+}
 
 echo "--- mathlib tree ---"
 
-# Lockstep version synchronization.
-dir=pkgs/development/lean-modules
-for pkg in batteries aesop Qq plausible Cli importGraph mathlib; do
-  sed -i "s|tag = \"v${old_lockstep}\"|tag = \"v${lean4_version}\"|" "$dir/$pkg/default.nix"
-done
+patch_pkg batteries        leanprover-community/batteries
+patch_pkg Qq               leanprover-community/quote4
+patch_pkg aesop            leanprover-community/aesop
+patch_pkg Cli              leanprover/lean4-cli
+patch_pkg plausible        leanprover-community/plausible
+patch_pkg importGraph      leanprover-community/import-graph
+patch_pkg proofwidgets     leanprover-community/ProofWidgets4
+patch_pkg LeanSearchClient leanprover-community/LeanSearchClient
 
-run nix-update leanPackages.batteries    --version="$lean4_version"
-run nix-update leanPackages.Qq           --version="$lean4_version"
-run nix-update leanPackages.plausible    --version="$lean4_version"
-run nix-update leanPackages.Cli          --version="$lean4_version"
-run nix-update leanPackages.proofwidgets --version="$pw_version"
-run update-source-version leanPackages.LeanSearchClient "$lsc_version" --rev="$lsc_rev"
-run nix-update leanPackages.aesop        --version="$lean4_version"
-run nix-update leanPackages.importGraph  --version="$lean4_version"
-run nix-update leanPackages.mathlib      --version="$lean4_version"
-
-# --- summary ---
-
-changes=()
-[ "$old_lockstep" != "$lean4_version" ] && changes+=("mathlib tree: $old_lockstep -> $lean4_version")
-[ "$old_pw" != "$pw_version" ] && changes+=("proofwidgets: $old_pw -> $pw_version")
-[ "$old_lsc" != "$lsc_version" ] && changes+=("LeanSearchClient: $old_lsc -> $lsc_version")
-
-if [ ${#changes[@]} -eq 0 ]; then
-  echo "status: up-to-date"
-  exit 0
+sed -i -E "/lean4-mathlib/,/version/s|version = \"[^\"]*\";|version = \"${lean4_version}\";|" "$dir/mathlib/default.nix"
+if ! grep -q 'tag = "v\${finalAttrs.version}"' "$dir/mathlib/default.nix"; then
+  sed -i -E 's|tag = "v[^"]*";|tag = "v${finalAttrs.version}";|' "$dir/mathlib/default.nix"
 fi
+sed -i "0,/hash = \"sha256-[^\"]*\"/{s||hash = \"$FAKE\"|}" "$dir/mathlib/default.nix"
 
-echo "commit-title: leanPackages: lean4 $old_lockstep -> $lean4_version"
-echo "---"
-for c in "${changes[@]}"; do
-  echo "  - $c"
+prefetch() {
+  local out newhash
+  out=$(nix build ".#leanPackages.${1}.${2:-src}" 2>&1 || true)
+  newhash=$(echo "$out" | awk '/got:/ {print $2}' | head -1)
+  if [ -z "$newhash" ]; then
+    echo "ERROR: failed to prefetch $1.${2:-src}" >&2
+    echo "$out" >&2
+    return 1
+  fi
+  echo "$newhash"
+}
+
+for pkg in batteries Qq aesop Cli plausible importGraph proofwidgets LeanSearchClient mathlib; do
+  echo "  prefetching $pkg"
+  newhash=$(prefetch "$pkg")
+  sed -i "s|$FAKE|$newhash|" "$dir/$pkg/default.nix"
 done
-echo "---"
-echo "manifest-source: https://github.com/leanprover-community/mathlib4/blob/v${lean4_version}/lake-manifest.json"
-echo "lean4-release: https://github.com/leanprover/lean4/releases/tag/v${lean4_version}"
+
+echo "  prefetching proofwidgets npmDeps"
+# Replace the second hash (the one inside fetchNpmDeps) with fake.
+sed -i "0,/hash = \"sha256-[^\"]*\"/!{s|hash = \"sha256-[^\"]*\"|hash = \"$FAKE\"|}" "$dir/proofwidgets/default.nix"
+newhash=$(prefetch proofwidgets npmDeps)
+sed -i "s|$FAKE|$newhash|" "$dir/proofwidgets/default.nix"
+
+echo "leanPackages: updated dependency tree for lean4 $lean4_version"
+echo "https://github.com/leanprover-community/mathlib4/blob/v${lean4_version}/lake-manifest.json"

pkgs/development/python-modules/anyconfig/default.nix

@@ -10,7 +10,7 @@
 buildPythonPackage (finalAttrs: {
   pname = "anyconfig";
   version = "0.14.0";
-  format = "setuptools";
+  pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ssato";
@@ -23,7 +23,9 @@ buildPythonPackage (finalAttrs: {
     sed -i '/addopts =/d' setup.cfg
   '';
 
-  propagatedBuildInputs = [ setuptools ];
+  build-system = [ setuptools ];
+
+  dependencies = [ setuptools ];
 
   nativeCheckInputs = [ pytestCheckHook ];
 
@@ -40,7 +42,6 @@ buildPythonPackage (finalAttrs: {
   disabledTestPaths = [
     # NameError: name 'TT' is not defined
     "tests/schema/test_jsonschema.py"
-    "tests/backend/loaders/pickle/test_pickle_stdlib.py"
   ];
 
   pythonImportsCheck = [ "anyconfig" ];
@@ -49,6 +50,7 @@ buildPythonPackage (finalAttrs: {
     description = "Python library provides common APIs to load and dump configuration files in various formats";
     mainProgram = "anyconfig_cli";
     homepage = "https://github.com/ssato/python-anyconfig";
+    changelog = "https://github.com/ssato/python-anyconfig/releases/tag/RELEASE_${finalAttrs.version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ tboerger ];
   };

pkgs/development/python-modules/argparse-addons/default.nix

@@ -21,8 +21,7 @@ buildPythonPackage rec {
     description = "Additional Python argparse types and actions";
     homepage = "https://github.com/eerimoq/argparse_addons";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [
-      frogamic
+    maintainers = [
     ];
   };
 }

pkgs/development/python-modules/bincopy/default.nix

@@ -30,8 +30,7 @@ buildPythonPackage (finalAttrs: {
     mainProgram = "bincopy";
     homepage = "https://github.com/eerimoq/bincopy";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [
-      frogamic
+    maintainers = [
     ];
   };
 })

pkgs/development/python-modules/braintree/default.nix

@@ -9,7 +9,7 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "braintree";
-  version = "4.43.0";
+  version = "4.44.0";
   pyproject = true;
 
   __structuredAttrs = true;
@@ -18,7 +18,7 @@ buildPythonPackage (finalAttrs: {
     owner = "braintree";
     repo = "braintree_python";
     tag = finalAttrs.version;
-    hash = "sha256-4qLi6MplXaIT8+Us3Yb9fTph74XntagBNzyS//4K5Fk=";
+    hash = "sha256-Dsmfqy/thftJe3ovh/Y71gIz7w+mv/lDUhlsb1CsjtA=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/cmsis-pack-manager/default.nix

@@ -67,8 +67,7 @@ buildPythonPackage rec {
     description = "Rust and Python module for handling CMSIS Pack files";
     homepage = "https://github.com/pyocd/cmsis-pack-manager";
     license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [
-      frogamic
+    maintainers = [
     ];
   };
 }

pkgs/development/python-modules/daft/default.nix

@@ -0,0 +1,337 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  fetchgit,
+  pythonOlder,
+  rustPlatform,
+  stdenv,
+
+  cargo,
+  nasm,
+  pkg-config,
+  rustc,
+
+  # dependencies
+  fsspec,
+  packaging,
+  pyarrow,
+  tqdm,
+  typing-extensions,
+
+  # optional-dependencies
+  av,
+  boto3,
+  clickhouse-connect,
+  datasets,
+  deltalake,
+  google-genai,
+  httpx,
+  huggingface-hub,
+  librosa,
+  mypy-boto3-glue,
+  numpy,
+  openai,
+  pandas,
+  pgvector,
+  pillow,
+  psycopg,
+  pyiceberg,
+  ray,
+  requests,
+  sentence-transformers,
+  soundfile,
+  sqlalchemy,
+  sqlglot,
+  torch,
+  torchvision,
+  transformers,
+
+  # tests
+  adlfs,
+  cloudpickle,
+  dask,
+  databricks-sdk,
+  duckdb,
+  gcsfs,
+  google-cloud-bigtable,
+  hypothesis,
+  jax,
+  jaxtyping,
+  lxml,
+  memray,
+  moto,
+  opencv-python,
+  pydantic,
+  pymysql,
+  pyodbc,
+  pytest-timeout,
+  pytest-xdist,
+  pytestCheckHook,
+  reportlab,
+  s3fs,
+  tenacity,
+  tiktoken,
+  writableTmpDirAsHomeHook,
+  xxhash,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "daft";
+  version = "0.7.14";
+  pyproject = true;
+  __structuredAttrs = true;
+
+  disabled = pythonOlder "3.10";
+
+  src = fetchFromGitHub {
+    owner = "Eventual-Inc";
+    repo = "Daft";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-qw1NB+RvXOFMHZvqpD5CSLWSUUKmtfWr0EyBgRMv2lA=";
+  };
+
+  cargoDeps =
+    (rustPlatform.importCargoLock.override {
+      fetchgit =
+        args:
+        if (args.url or null) == "https://github.com/Eventual-Inc/azure-sdk-for-rust" then
+          fetchgit (
+            args
+            // {
+              postFetch = (args.postFetch or "") + ''
+                substituteInPlace $out/services/Cargo.toml \
+                  --replace-fail '"mgmt/batch",' '"mgmt/batch", "svc/blobstorage",'
+              '';
+            }
+          )
+        else
+          fetchgit args;
+    })
+      {
+        lockFile = ./Cargo.lock;
+        outputHashes = {
+          "azure_core-0.21.0" = "sha256-I8kzIkguRa3REwii0xsFFpNhE90/QX5msXwE6rrzDlY=";
+        };
+      };
+
+  postPatch = ''
+    substituteInPlace Cargo.toml \
+      --replace-fail 'version = "0.3.0-dev0"' 'version = "${finalAttrs.version}"'
+
+    # ArrayChunks::into_remainder() returns IntoIter<_, N> on current stable
+    # rustc but Option<IntoIter<_, N>> on the nightly upstream pins.
+    substituteInPlace src/daft-minhash/src/lib.rs \
+      --replace-fail 'chunks.into_remainder()' 'Some(chunks.into_remainder())'
+
+    # `hash_map_macro` was renamed/removed in newer rustc; the gate is declared
+    # but never used in the crate.
+    substituteInPlace src/daft-distributed/src/lib.rs \
+      --replace-fail '#![feature(hash_map_macro)]' ""
+  '';
+
+  nativeBuildInputs = [
+    cargo
+    pkg-config
+    rustc
+    rustPlatform.bindgenHook
+    rustPlatform.cargoSetupHook
+    rustPlatform.maturinBuildHook
+  ]
+  ++ lib.optional stdenv.hostPlatform.isx86_64 nasm;
+
+  dontUseCmakeConfigure = true;
+
+  env = {
+    DAFT_RUNNER = "native";
+    NIX_CFLAGS_COMPILE = "-Wno-error";
+
+    # avoid building frontend npm
+    CI = "1";
+    DAFT_DASHBOARD_SKIP_BUILD = "1";
+
+    # daft-minhash uses #![feature(portable_simd)] which requires nightly
+    RUSTC_BOOTSTRAP = "1";
+  };
+
+  pythonRelaxDeps = [ "fsspec" ];
+
+  dependencies = [
+    fsspec
+    packaging
+    pyarrow
+    tqdm
+
+    # daft/series.py imports `Self` from typing_extensions unconditionally,
+    # even though upstream pyproject.toml marks it python_version < '3.11'.
+    typing-extensions
+  ];
+
+  optional-dependencies = {
+    aws = [
+      boto3
+      mypy-boto3-glue
+    ];
+    azure = [ ];
+    clickhouse = [ clickhouse-connect ];
+    deltalake = [ deltalake ];
+    gcp = [ ];
+    google = [
+      google-genai
+      numpy
+      pillow
+    ];
+    gravitino = [ requests ];
+    hudi = [ pyarrow ];
+    huggingface = [
+      datasets
+      huggingface-hub
+    ];
+    iceberg = [ pyiceberg ];
+    numpy = [ numpy ];
+    openai = [
+      numpy
+      openai
+      pillow
+    ];
+    pandas = [ pandas ];
+    postgres = [
+      pgvector
+      psycopg
+      sqlglot
+    ];
+    ray = [ ray ];
+    transformers = [
+      pillow
+      sentence-transformers
+      torch
+      torchvision
+      transformers
+    ];
+    sql = [
+      sqlalchemy
+      sqlglot
+    ];
+    unity = [
+      deltalake
+      httpx
+    ];
+    video = [ av ];
+    audio = [
+      librosa
+      soundfile
+    ];
+    viz = [ ];
+  };
+
+  nativeCheckInputs = [
+    adlfs
+    av
+    boto3
+    clickhouse-connect
+    cloudpickle
+    dask
+    databricks-sdk
+    datasets
+    deltalake
+    duckdb
+    gcsfs
+    google-cloud-bigtable
+    google-genai
+    huggingface-hub
+    hypothesis
+    jax
+    jaxtyping
+    librosa
+    lxml
+    memray
+    moto
+    numpy
+    opencv-python
+    openai
+    pandas
+    pgvector
+    pillow
+    pydantic
+    pyiceberg
+    pymysql
+    pyodbc
+    pytest-timeout
+    pytest-xdist
+    pytestCheckHook
+    ray
+    reportlab
+    s3fs
+    sentence-transformers
+    soundfile
+    sqlalchemy
+    sqlglot
+    tenacity
+    tiktoken
+    torch
+    torchvision
+    transformers
+    writableTmpDirAsHomeHook
+    xxhash
+  ];
+
+  preCheck = ''
+    rm -rf daft
+  '';
+
+  disabledTestPaths = [
+    "tests/integration"
+    "tests/benchmarks"
+    "tests/microbenchmarks"
+
+    # require packages: daft-lance, mcap, turbopuffer, unitycatalog, connectorx
+    "tests/io/lancedb"
+    "tests/io/mcap"
+    "tests/io/test_turbopuffer_write.py"
+    "tests/io/test_roundtrip_embeddings.py"
+    "tests/io/test_sql.py"
+    "tests/checkpoint/test_native_runner_gate.py"
+    "tests/dataframe/test_explain.py"
+    "tests/dataframe/test_limit_offset.py"
+    "tests/catalog/test_catalog.py"
+    "tests/catalog/test_unity_auth.py"
+    "tests/catalog/test_unity_oauth2.py"
+
+    # broken upstream
+    "tests/io/test_s3_credentials_refresh.py"
+
+    # require network access
+    "tests/ai"
+    "tests/sql/test_uri_exprs.py"
+    "tests/recordbatch/test_tokenize.py"
+
+    # spawns subprocess Python without daft on path
+    "tests/test_context.py"
+
+    # ray runtime OOMs
+    "tests/ray"
+  ];
+
+  disabledTests = [
+    # writes via relative paths fail in the sandbox
+    "test_append_and_overwrite_local_relative_path"
+
+    # require network access
+    "test_to_tempfile_remote"
+
+    # broken upstream
+    "test_table_concat_schema_mismatch"
+  ];
+
+  pythonImportsCheck = [ "daft" ];
+
+  meta = {
+    description = "Distributed dataframes for multimodal data";
+    homepage = "https://github.com/Eventual-Inc/Daft";
+    changelog = "https://github.com/Eventual-Inc/Daft/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ derdennisop ];
+    mainProgram = "daft";
+    platforms = lib.platforms.unix;
+  };
+})