From 6d117b87ec29c079ba859ec59e8f402bfd63ce20 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <mail@dotlambda.de>
Date: Sun, 13 Oct 2024 20:34:19 -0700
Subject: [PATCH 01/20] python312Packages.mat2: disable failing test

---
 pkgs/development/python-modules/mat2/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mat2/default.nix b/pkgs/development/python-modules/mat2/default.nix
index 7dc7dcd2d431..f942fadb403f 100644
--- a/pkgs/development/python-modules/mat2/default.nix
+++ b/pkgs/development/python-modules/mat2/default.nix
@@ -96,8 +96,8 @@ buildPythonPackage rec {
   nativeCheckInputs = [ pytestCheckHook ];
 
   disabledTests = [
-    # Frequently fails when exiftool is updated and adds support for new metadata.
-    "test_all_parametred"
+    # libmat2.pdf.cairo.MemoryError: out of memory
+    "test_all"
   ];
 
   meta = with lib; {

From 4df521c75d951580a29adfdf686fefb912419260 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 15 Oct 2024 08:51:10 +0000
Subject: [PATCH 02/20] vpl-gpu-rt: 24.2.5 -> 24.3.3

---
 pkgs/by-name/vp/vpl-gpu-rt/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/vp/vpl-gpu-rt/package.nix b/pkgs/by-name/vp/vpl-gpu-rt/package.nix
index 9dac995970f4..c5a9df335d5e 100644
--- a/pkgs/by-name/vp/vpl-gpu-rt/package.nix
+++ b/pkgs/by-name/vp/vpl-gpu-rt/package.nix
@@ -9,7 +9,7 @@
 
 stdenv.mkDerivation rec {
   pname = "vpl-gpu-rt";
-  version = "24.2.5";
+  version = "24.3.3";
 
   outputs = [ "out" "dev" ];
 
@@ -17,7 +17,7 @@ stdenv.mkDerivation rec {
     owner = "intel";
     repo = "vpl-gpu-rt";
     rev = "intel-onevpl-${version}";
-    hash = "sha256-WYlA8+i8TTFHsU4+doLcv75F9MR2V/BEuNGGLgM4p1s=";
+    hash = "sha256-aTVSkkSQmcnRcx1J0zqdT6Z6f2GQVRTR8b2JFov6DFE=";
   };
 
   nativeBuildInputs = [ cmake pkg-config ];

From f84cb59662a51807ef44078e0d813fa2ce088ee9 Mon Sep 17 00:00:00 2001
From: hellodword <46193371+hellodword@users.noreply.github.com>
Date: Tue, 15 Oct 2024 12:57:37 +0000
Subject: [PATCH 03/20] sing-box: 1.9.7 -> 1.10.0

---
 pkgs/tools/networking/sing-box/default.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/tools/networking/sing-box/default.nix b/pkgs/tools/networking/sing-box/default.nix
index dbca74f408c8..de32e43f16a0 100644
--- a/pkgs/tools/networking/sing-box/default.nix
+++ b/pkgs/tools/networking/sing-box/default.nix
@@ -11,16 +11,16 @@
 
 buildGoModule rec {
   pname = "sing-box";
-  version = "1.9.7";
+  version = "1.10.0";
 
   src = fetchFromGitHub {
     owner = "SagerNet";
     repo = pname;
     rev = "v${version}";
-    hash = "sha256-ZqcQe2d4IoF7fA2rMASFvGCuiTL+lqQqCpCt/IviClU=";
+    hash = "sha256-VCx9fxtyCEwcwDCvbeOsW/oafHSSRwVrwX/aaKzgauQ=";
   };
 
-  vendorHash = "sha256-/lp+3mPkGMABpvnxqpuC/7NiKrmcEWYQ80Wb7Ng1eBI=";
+  vendorHash = "sha256-zRGawshd+t1eN5CBSmWnyFPKPa8ClZv5k7xFG1qKeU4=";
 
   tags = [
     "with_quic"

From 226f53dc45217e140ef5af778c2bb09113604e5b Mon Sep 17 00:00:00 2001
From: Nick Cao <nickcao@nichi.co>
Date: Tue, 15 Oct 2024 13:11:30 -0400
Subject: [PATCH 04/20] stratisd: 3.7.1 -> 3.7.2

Diff: https://github.com/stratis-storage/stratisd/compare/refs/tags/stratisd-v3.7.1...stratisd-v3.7.2
---
 pkgs/tools/filesystems/stratisd/default.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/tools/filesystems/stratisd/default.nix b/pkgs/tools/filesystems/stratisd/default.nix
index 3ae78968bfb8..89261aeac396 100644
--- a/pkgs/tools/filesystems/stratisd/default.nix
+++ b/pkgs/tools/filesystems/stratisd/default.nix
@@ -28,18 +28,18 @@
 
 stdenv.mkDerivation rec {
   pname = "stratisd";
-  version = "3.7.1";
+  version = "3.7.2";
 
   src = fetchFromGitHub {
     owner = "stratis-storage";
     repo = pname;
     rev = "refs/tags/stratisd-v${version}";
-    hash = "sha256-JevVIyNNkRuG1aH9yuBKwVlOgS67jJSoJDZQvpLsy/4=";
+    hash = "sha256-pxLf/YLd7vdAjGRQDvJvwhJXpMUiI3dge5Y5x895SPA=";
   };
 
   cargoDeps = rustPlatform.fetchCargoTarball {
     inherit src;
-    hash = "sha256-n8gF8WuHwwPxZAggkJckBxfvb0r+jJDuTcj7KXjg4/Y=";
+    hash = "sha256-btSj69yBbnbK+jdWdMi3rQGKMOLWcwY5Zn3hmEWk/Hs=";
   };
 
   postPatch = ''

From 2ef88076102f6c483f1d10e31831121c446f4905 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 15 Oct 2024 19:14:51 +0000
Subject: [PATCH 05/20] pinentry-rofi: 2.2.0 -> 3.0.0

---
 pkgs/tools/security/pinentry-rofi/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/tools/security/pinentry-rofi/default.nix b/pkgs/tools/security/pinentry-rofi/default.nix
index f59381cec6ed..3dd94b1e0fa1 100644
--- a/pkgs/tools/security/pinentry-rofi/default.nix
+++ b/pkgs/tools/security/pinentry-rofi/default.nix
@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation rec {
   pname = "pinentry-rofi";
-  version = "2.2.0";
+  version = "3.0.0";
 
   src = fetchFromGitHub {
     owner = "plattfot";
     repo = pname;
     rev = version;
-    sha256 = "sha256-E904PLYuIvlew2WHVEwU2bXp6Tc6+lTSVB/m9b9v+z8=";
+    sha256 = "sha256-GHpVO8FRphVW0+In7TtB39ewwVLU1EHOeVL05pnZdFQ=";
   };
 
   nativeBuildInputs = [

From 342af022a283f3c262b0fa2dce0ad78cff473c88 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <mail@dotlambda.de>
Date: Tue, 15 Oct 2024 14:36:10 -0700
Subject: [PATCH 06/20] python312Packages.sense-energy: 0.12.4 -> 0.13.2

Diff: https://github.com/scottbonline/sense/compare/refs/tags/0.12.4...0.13.2

Changelog: https://github.com/scottbonline/sense/releases/tag/0.13.0
           https://github.com/scottbonline/sense/releases/tag/0.13.1
           https://github.com/scottbonline/sense/releases/tag/0.13.2
---
 .../python-modules/sense-energy/default.nix            | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/development/python-modules/sense-energy/default.nix b/pkgs/development/python-modules/sense-energy/default.nix
index b3f99bf3ee38..54e7d1c2b368 100644
--- a/pkgs/development/python-modules/sense-energy/default.nix
+++ b/pkgs/development/python-modules/sense-energy/default.nix
@@ -16,16 +16,16 @@
 
 buildPythonPackage rec {
   pname = "sense-energy";
-  version = "0.12.4";
+  version = "0.13.2";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
+  disabled = pythonOlder "3.9";
 
   src = fetchFromGitHub {
     owner = "scottbonline";
     repo = "sense";
     rev = "refs/tags/${version}";
-    hash = "sha256-jHYXqlRV1JR95GtO9E6oYj69Jj8TsvLANcI1kl7/Gl4=";
+    hash = "sha256-HE0bMcxfzfaMLDepjwDwV8AXQ3Q/bQt6SqHt7m/UY9I=";
   };
 
   postPatch = ''
@@ -33,9 +33,9 @@ buildPythonPackage rec {
       --replace-fail "{{VERSION_PLACEHOLDER}}" "${version}"
   '';
 
-  nativeBuildInputs = [ setuptools ];
+  build-system = [ setuptools ];
 
-  propagatedBuildInputs = [
+  dependencies = [
     aiohttp
     async-timeout
     kasa-crypt

From c53d14793179d4ab7e73a22ad33928645a30d9fe Mon Sep 17 00:00:00 2001
From: Pyrox <pyrox@pyrox.dev>
Date: Tue, 15 Oct 2024 19:37:24 -0400
Subject: [PATCH 07/20] python312Packages.androguard: Remove unused
 dependencies

---
 pkgs/development/python-modules/androguard/default.nix | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/pkgs/development/python-modules/androguard/default.nix b/pkgs/development/python-modules/androguard/default.nix
index c5a4300736ee..567dce142208 100644
--- a/pkgs/development/python-modules/androguard/default.nix
+++ b/pkgs/development/python-modules/androguard/default.nix
@@ -18,8 +18,6 @@
   pytestCheckHook,
   mock,
   python-magic,
-  codecov,
-  coverage,
   qt5,
   # This is usually used as a library, and it'd be a shame to force the GUI
   # libraries to the closure if GUI is not desired.
@@ -73,8 +71,6 @@ buildPythonPackage rec {
 
   nativeCheckInputs = [
     pytestCheckHook
-    codecov
-    coverage
     mock
     pyperclip
     pyqt5

From 15ce3382c52ce32ad1c5909e0dd6df1be7a0e04f Mon Sep 17 00:00:00 2001
From: Pyrox <pyrox@pyrox.dev>
Date: Tue, 15 Oct 2024 19:37:38 -0400
Subject: [PATCH 08/20] python312Packages.androguard: Remove mock dependency

---
 .../python-modules/androguard/default.nix       |  2 --
 .../python-modules/androguard/fix-tests.patch   | 17 +++++++++++++++--
 2 files changed, 15 insertions(+), 4 deletions(-)

diff --git a/pkgs/development/python-modules/androguard/default.nix b/pkgs/development/python-modules/androguard/default.nix
index 567dce142208..2b465cfdbb0b 100644
--- a/pkgs/development/python-modules/androguard/default.nix
+++ b/pkgs/development/python-modules/androguard/default.nix
@@ -16,7 +16,6 @@
   pyqt5,
   pyperclip,
   pytestCheckHook,
-  mock,
   python-magic,
   qt5,
   # This is usually used as a library, and it'd be a shame to force the GUI
@@ -71,7 +70,6 @@ buildPythonPackage rec {
 
   nativeCheckInputs = [
     pytestCheckHook
-    mock
     pyperclip
     pyqt5
     python-magic
diff --git a/pkgs/development/python-modules/androguard/fix-tests.patch b/pkgs/development/python-modules/androguard/fix-tests.patch
index b971b46c6244..267f839eb91b 100644
--- a/pkgs/development/python-modules/androguard/fix-tests.patch
+++ b/pkgs/development/python-modules/androguard/fix-tests.patch
@@ -1,8 +1,21 @@
+diff --git a/tests/dataflow_test.py b/tests/dataflow_test.py
+index e9ac3cdb..edef8200 100644
+--- a/tests/dataflow_test.py
++++ b/tests/dataflow_test.py
+@@ -5,7 +5,7 @@ import sys
+ sys.path.append('.')
+ 
+ import collections
+-import mock
++from unittest import mock
+ import unittest
+ from androguard.decompiler.dad import dataflow
+ from androguard.decompiler.dad import graph
 diff --git a/tests/test_types.py b/tests/test_types.py
-index 127dfc20eb..f1c89f0712 100644
+index 127dfc20..f1c89f07 100644
 --- a/tests/test_types.py
 +++ b/tests/test_types.py
-@@ -182,7 +182,7 @@
+@@ -182,7 +182,7 @@ class TypesTest(unittest.TestCase):
              for i in filter(lambda x: 'const' in x.get_name(), method.get_instructions()):
                  i.show(0)
                  # ins should only have one literal

From 3bba38c34cb676d0e9b0e196b8c174316f7db0cd Mon Sep 17 00:00:00 2001
From: Pyrox <pyrox@pyrox.dev>
Date: Tue, 15 Oct 2024 19:38:07 -0400
Subject: [PATCH 09/20] python312Packages.androguard: Remove `with lib;`

---
 pkgs/development/python-modules/androguard/default.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/androguard/default.nix b/pkgs/development/python-modules/androguard/default.nix
index 2b465cfdbb0b..a688939a84f2 100644
--- a/pkgs/development/python-modules/androguard/default.nix
+++ b/pkgs/development/python-modules/androguard/default.nix
@@ -82,10 +82,10 @@ buildPythonPackage rec {
     makeWrapperArgs+=("''${qtWrapperArgs[@]}")
   '';
 
-  meta = with lib; {
+  meta = {
     description = "Tool and Python library to interact with Android Files";
     homepage = "https://github.com/androguard/androguard";
-    license = licenses.asl20;
-    maintainers = with maintainers; [ pmiddend ];
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ pmiddend ];
   };
 }

From d5ac04f76857eabb2995775256afb3930fe514b2 Mon Sep 17 00:00:00 2001
From: Morgan Jones <me@numin.it>
Date: Tue, 15 Oct 2024 00:11:06 -0700
Subject: [PATCH 10/20] mattermost: 9.5.10 -> 9.5.11

Fixes MMSA-2024-00370; see:
https://mattermost.com/security-updates/
---
 pkgs/servers/mattermost/default.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/servers/mattermost/default.nix b/pkgs/servers/mattermost/default.nix
index 4c35070ededc..d1d1a278ffdc 100644
--- a/pkgs/servers/mattermost/default.nix
+++ b/pkgs/servers/mattermost/default.nix
@@ -12,13 +12,13 @@ buildGoModule rec {
   # See https://docs.mattermost.com/upgrade/extended-support-release.html
   # When a new ESR version is available (e.g. 8.1.x -> 9.5.x), update
   # the version regex in passthru.updateScript as well.
-  version = "9.5.10";
+  version = "9.5.11";
 
   src = fetchFromGitHub {
     owner = "mattermost";
     repo = "mattermost";
     rev = "v${version}";
-    hash = "sha256-KUauFuRlOxBNNqE88pv5j0afEYQOZG6kWuyHnzg5qwQ=";
+    hash = "sha256-kPsBQjBMHxh5EGTFPNceE51nSEKSu6ieifIAV8PjpAc=";
   };
 
   # Needed because buildGoModule does not support go workspaces yet.
@@ -34,7 +34,7 @@ buildGoModule rec {
 
   webapp = fetchurl {
     url = "https://releases.mattermost.com/${version}/mattermost-${version}-linux-amd64.tar.gz";
-    hash = "sha256-psGNLmiT60HknrwESjztlr8NUPPnHsNmSTaRJ0RRqBE=";
+    hash = "sha256-dRB0CqUoEIkCDlH/vcn/S1TLlhz9iWp61WM2kk+ToZk=";
   };
 
   # Makes nix-update-script pick up the fetchurl for the webapp.

From 8b63f805d377aa0cd83c9295f3ab5165232b3bf1 Mon Sep 17 00:00:00 2001
From: Morgan Jones <me@numin.it>
Date: Tue, 15 Oct 2024 00:14:42 -0700
Subject: [PATCH 11/20] {mattermost,matterircd}: relocate to by-name

---
 .../matterircd.nix => by-name/ma/matterircd/package.nix}       | 2 +-
 .../default.nix => by-name/ma/mattermost/package.nix}          | 0
 pkgs/top-level/all-packages.nix                                | 3 ---
 3 files changed, 1 insertion(+), 4 deletions(-)
 rename pkgs/{servers/mattermost/matterircd.nix => by-name/ma/matterircd/package.nix} (91%)
 rename pkgs/{servers/mattermost/default.nix => by-name/ma/mattermost/package.nix} (100%)

diff --git a/pkgs/servers/mattermost/matterircd.nix b/pkgs/by-name/ma/matterircd/package.nix
similarity index 91%
rename from pkgs/servers/mattermost/matterircd.nix
rename to pkgs/by-name/ma/matterircd/package.nix
index 3aba439aff8b..11fc0080a9e0 100644
--- a/pkgs/servers/mattermost/matterircd.nix
+++ b/pkgs/by-name/ma/matterircd/package.nix
@@ -20,6 +20,6 @@ buildGoModule rec {
     mainProgram = "matterircd";
     homepage = "https://github.com/42wim/matterircd";
     license = licenses.mit;
-    maintainers = [ ];
+    maintainers = with maintainers; [ numinit ];
   };
 }
diff --git a/pkgs/servers/mattermost/default.nix b/pkgs/by-name/ma/mattermost/package.nix
similarity index 100%
rename from pkgs/servers/mattermost/default.nix
rename to pkgs/by-name/ma/mattermost/package.nix
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index a0b24c7f13ef..11fe4cb57648 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -24486,9 +24486,6 @@ with pkgs;
 
   matrix-alertmanager = callPackage ../servers/monitoring/matrix-alertmanager { };
 
-  mattermost = callPackage ../servers/mattermost { };
-  matterircd = callPackage ../servers/mattermost/matterircd.nix { };
-
   mattermost-desktop = callPackage ../applications/networking/instant-messengers/mattermost-desktop { };
 
   memcached = callPackage ../servers/memcached { };

From edd07654e4af33d83182abc05414fff774953aca Mon Sep 17 00:00:00 2001
From: hellodword <46193371+hellodword@users.noreply.github.com>
Date: Wed, 16 Oct 2024 13:28:06 +0000
Subject: [PATCH 12/20] nixos/sing-box: migration of deprecated fields

---
 nixos/tests/sing-box.nix | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/nixos/tests/sing-box.nix b/nixos/tests/sing-box.nix
index 2693d9275fc1..4a56d12f5289 100644
--- a/nixos/tests/sing-box.nix
+++ b/nixos/tests/sing-box.nix
@@ -44,13 +44,15 @@ import ./make-test-python.nix (
       type = "tun";
       tag = "inbound:tun";
       interface_name = "tun0";
-      inet4_address = "172.16.0.1/30";
-      inet6_address = "fd00::1/126";
+      address = [
+        "172.16.0.1/30"
+        "fd00::1/126"
+      ];
       auto_route = true;
-      inet4_route_address = [
+      route_address = [
         "${hosts."${target_host}"}/32"
       ];
-      inet4_route_exclude_address = [
+      route_exclude_address = [
         "${hosts."${server_host}"}/32"
       ];
       strict_route = false;

From a476fdb2466ea5ba1135588244286201fa5e3119 Mon Sep 17 00:00:00 2001
From: hellodword <46193371+hellodword@users.noreply.github.com>
Date: Wed, 16 Oct 2024 13:55:46 +0000
Subject: [PATCH 13/20] nixos/sing-box: test iproute2_table_index and
 iproute2_rule_index

---
 nixos/tests/sing-box.nix | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

diff --git a/nixos/tests/sing-box.nix b/nixos/tests/sing-box.nix
index 4a56d12f5289..a8a287586af2 100644
--- a/nixos/tests/sing-box.nix
+++ b/nixos/tests/sing-box.nix
@@ -49,6 +49,8 @@ import ./make-test-python.nix (
         "fd00::1/126"
       ];
       auto_route = true;
+      iproute2_table_index = 2024;
+      iproute2_rule_index = 9001;
       route_address = [
         "${hosts."${target_host}"}/32"
       ];
@@ -515,9 +517,14 @@ import ./make-test-python.nix (
 
       with subtest("tun"):
         tun.wait_for_unit("sing-box.service")
-        tun.wait_for_unit("sys-devices-virtual-net-tun0.device")
-        tun.wait_until_succeeds("ip route get ${hosts."${target_host}"} | grep 'dev tun0'")
-        tun.succeed("ip addr show tun0")
+        tun.wait_for_unit("sys-devices-virtual-net-${tunInbound.interface_name}.device")
+        tun.wait_until_succeeds("ip route get ${hosts."${target_host}"} | grep 'dev ${tunInbound.interface_name}'")
+        tun.succeed("ip addr show ${tunInbound.interface_name}")
+        tun.succeed("ip route show table ${toString tunInbound.iproute2_table_index} | grep ${tunInbound.interface_name}")
+        assert (
+          tun.succeed("ip rule list table ${toString tunInbound.iproute2_table_index} | sort | head -1 | awk -F: '{print $1}' | tr -d '\n'")
+          == "${toString tunInbound.iproute2_rule_index}"
+        )
         test_curl(tun)
 
       with subtest("wireguard"):
@@ -532,8 +539,8 @@ import ./make-test-python.nix (
 
       with subtest("fakeip"):
         fakeip.wait_for_unit("sing-box.service")
-        fakeip.wait_for_unit("sys-devices-virtual-net-tun0.device")
-        fakeip.wait_until_succeeds("ip route get ${hosts."${target_host}"} | grep 'dev tun0'")
+        fakeip.wait_for_unit("sys-devices-virtual-net-${tunInbound.interface_name}.device")
+        fakeip.wait_until_succeeds("ip route get ${hosts."${target_host}"} | grep 'dev ${tunInbound.interface_name}'")
         fakeip.succeed("dig +short A ${target_host} @${target_host} | grep '^198.18.'")
     '';
 

From d98a0de552113f2f8e35f48f7fac5d8c1e6286cf Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 16 Oct 2024 14:56:31 +0000
Subject: [PATCH 14/20] mlx42: 2.3.4 -> 2.4.0

---
 pkgs/by-name/ml/mlx42/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ml/mlx42/package.nix b/pkgs/by-name/ml/mlx42/package.nix
index c5537d5f2ca0..72b9f9cc3d23 100644
--- a/pkgs/by-name/ml/mlx42/package.nix
+++ b/pkgs/by-name/ml/mlx42/package.nix
@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "mlx42";
-  version = "2.3.4";
+  version = "2.4.0";
 
   src = fetchFromGitHub {
     owner = "codam-coding-college";
     repo = "MLX42";
     rev = "refs/tags/v${finalAttrs.version}";
-    hash = "sha256-c4LoTePHhQeZTx33V1K3ZyXmT7vjB6NdkGVAiSuJKfI=";
+    hash = "sha256-jYcBvvx0Xfc/wDWSUROfQeRvn+tWvSS0ymKO1iuzg8w=";
   };
 
   postPatch =

From 50d782b1ff07ed35270cbfd3b1d5995f897b9a18 Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Wed, 16 Oct 2024 10:43:42 +0300
Subject: [PATCH 15/20] buildFHSEnv: don't include /var

This mostly prevents random junk from leaking into fhsenvs,
but also fixes Steam not having a /var anymore.
---
 pkgs/build-support/build-fhsenv-bubblewrap/buildFHSEnv.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/build-support/build-fhsenv-bubblewrap/buildFHSEnv.nix b/pkgs/build-support/build-fhsenv-bubblewrap/buildFHSEnv.nix
index 25f8b8a39b6b..f80807cc1e41 100644
--- a/pkgs/build-support/build-fhsenv-bubblewrap/buildFHSEnv.nix
+++ b/pkgs/build-support/build-fhsenv-bubblewrap/buildFHSEnv.nix
@@ -245,7 +245,7 @@ let
     done
     cd ..
 
-    for i in var etc opt; do
+    for i in etc opt; do
       if [ -d "${staticUsrProfileTarget}/$i" ]; then
         cp -rsHf "${staticUsrProfileTarget}/$i" "$i"
       fi

From bece21421b6fa1271a64ee9d062f998fcf0a4346 Mon Sep 17 00:00:00 2001
From: Adam Stephens <adam@valkor.net>
Date: Wed, 16 Oct 2024 12:36:19 -0400
Subject: [PATCH 16/20] nixos/atticd: wants network-online.target

fixes:

trace: evaluation warning: atticd.service is ordered after 'network-online.target' but doesn't depend on it
---
 nixos/modules/services/networking/atticd.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/networking/atticd.nix b/nixos/modules/services/networking/atticd.nix
index 5397bda31a9f..3984c434c60e 100644
--- a/nixos/modules/services/networking/atticd.nix
+++ b/nixos/modules/services/networking/atticd.nix
@@ -171,6 +171,7 @@ in
       wantedBy = [ "multi-user.target" ];
       after = [ "network-online.target" ] ++ lib.optionals hasLocalPostgresDB [ "postgresql.service" ];
       requires = lib.optionals hasLocalPostgresDB [ "postgresql.service" ];
+      wants = [ "network-online.target" ];
 
       serviceConfig = {
         ExecStart = "${lib.getExe cfg.package} -f ${checkedConfigFile} --mode ${cfg.mode}";

From 9f9ef912d6362ddeee53e0b182bf2d68b88616e6 Mon Sep 17 00:00:00 2001
From: John Chadwick <john@jchw.io>
Date: Wed, 16 Oct 2024 00:07:09 -0400
Subject: [PATCH 17/20] linuxPackages.lttng-modules: reformat with RFC style

---
 .../os-specific/linux/lttng-modules/default.nix | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/pkgs/os-specific/linux/lttng-modules/default.nix b/pkgs/os-specific/linux/lttng-modules/default.nix
index cfb38f0983ce..7a25585ad606 100644
--- a/pkgs/os-specific/linux/lttng-modules/default.nix
+++ b/pkgs/os-specific/linux/lttng-modules/default.nix
@@ -1,4 +1,9 @@
-{ lib, stdenv, fetchFromGitHub, kernel }:
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  kernel,
+}:
 
 stdenv.mkDerivation rec {
   pname = "lttng-modules-${kernel.version}";
@@ -29,9 +34,15 @@ stdenv.mkDerivation rec {
   meta = with lib; {
     description = "Linux kernel modules for LTTng tracing";
     homepage = "https://lttng.org/";
-    license = with licenses; [ lgpl21Only gpl2Only mit ];
+    license = with licenses; [
+      lgpl21Only
+      gpl2Only
+      mit
+    ];
     platforms = platforms.linux;
     maintainers = [ maintainers.bjornfor ];
-    broken = (lib.versions.majorMinor kernel.modDirVersion) == "5.10" || (lib.versions.majorMinor kernel.modDirVersion) == "5.4";
+    broken =
+      (lib.versions.majorMinor kernel.modDirVersion) == "5.10"
+      || (lib.versions.majorMinor kernel.modDirVersion) == "5.4";
   };
 }

From be42da7a281bb704bb776536db34b2d19c50d74a Mon Sep 17 00:00:00 2001
From: John Chadwick <john@jchw.io>
Date: Wed, 16 Oct 2024 00:03:11 -0400
Subject: [PATCH 18/20] linuxPackages.lttng-modules: 2.13.13 -> 2.13.15

Fixes the build for linuxPackages_latest.lttng-modules.
---
 pkgs/os-specific/linux/lttng-modules/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/lttng-modules/default.nix b/pkgs/os-specific/linux/lttng-modules/default.nix
index 7a25585ad606..f37c15979f57 100644
--- a/pkgs/os-specific/linux/lttng-modules/default.nix
+++ b/pkgs/os-specific/linux/lttng-modules/default.nix
@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation rec {
   pname = "lttng-modules-${kernel.version}";
-  version = "2.13.13";
+  version = "2.13.15";
 
   src = fetchFromGitHub {
     owner = "lttng";
     repo = "lttng-modules";
     rev = "v${version}";
-    hash = "sha256-iA3B838EUU5rFWCL8BAubkTrTO1itDFp5d1653OPnS0=";
+    hash = "sha256-cEiv1EjsEvyreRERrCGKKpJdA1IKvuyVmgA7S3EkEnU=";
   };
 
   nativeBuildInputs = kernel.moduleBuildDependencies;

From 8c5a555e338b5a30704c45de55e016eabf9c55c7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bj=C3=B8rn=20Forsman?= <bjorn.forsman@gmail.com>
Date: Tue, 15 Oct 2024 19:26:27 +0200
Subject: [PATCH 19/20] maven: 3.9.8 -> 3.9.9

---
 pkgs/by-name/ma/maven/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ma/maven/package.nix b/pkgs/by-name/ma/maven/package.nix
index aa6ba479010c..d48e0448ea12 100644
--- a/pkgs/by-name/ma/maven/package.nix
+++ b/pkgs/by-name/ma/maven/package.nix
@@ -9,11 +9,11 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "maven";
-  version = "3.9.8";
+  version = "3.9.9";
 
   src = fetchurl {
     url = "mirror://apache/maven/maven-3/${finalAttrs.version}/binaries/apache-maven-${finalAttrs.version}-bin.tar.gz";
-    hash = "sha256-BnZyYpB1t0Dj0Kko4hAh3WFaUyh6821MzKROh+CB0QI=";
+    hash = "sha256-epzfZ0/BcD1jgvXzMLPREOobUStR8WUoRtnk6KWI12Y=";
   };
 
   sourceRoot = ".";

From 1df9f2a2ec16273d124a8b2287fa4bcaa2ea2af2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 16 Oct 2024 17:35:06 +0000
Subject: [PATCH 20/20] sqlitebrowser: 3.13.0 -> 3.13.1

---
 pkgs/development/tools/database/sqlitebrowser/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/tools/database/sqlitebrowser/default.nix b/pkgs/development/tools/database/sqlitebrowser/default.nix
index c90bfbd3b37d..ec73d534007a 100644
--- a/pkgs/development/tools/database/sqlitebrowser/default.nix
+++ b/pkgs/development/tools/database/sqlitebrowser/default.nix
@@ -4,13 +4,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "sqlitebrowser";
-  version = "3.13.0";
+  version = "3.13.1";
 
   src = fetchFromGitHub {
     owner = "sqlitebrowser";
     repo = "sqlitebrowser";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-2U0jnL2hmrxynMxEiObl10bKFAFlCrY2hulZ/Ggqimw=";
+    sha256 = "sha256-bpZnO8i8MDgOm0f93pBmpy1sZLJQ9R4o4ZLnGfT0JRg=";
   };
 
   patches = lib.optional stdenv.hostPlatform.isDarwin ./macos.patch;