From 4726e2698283c25bdd3d880f7f867384c985ec1c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 10 Jan 2026 13:31:15 +0000
Subject: [PATCH 01/52] networkmanager-l2tp: 1.20.22 -> 1.52.0

---
 pkgs/by-name/ne/networkmanager-l2tp/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ne/networkmanager-l2tp/package.nix b/pkgs/by-name/ne/networkmanager-l2tp/package.nix
index 51abfafae5ba..fdb581dcd5ef 100644
--- a/pkgs/by-name/ne/networkmanager-l2tp/package.nix
+++ b/pkgs/by-name/ne/networkmanager-l2tp/package.nix
@@ -23,13 +23,13 @@
 stdenv.mkDerivation rec {
   name = "${pname}${lib.optionalString withGnome "-gnome"}-${version}";
   pname = "NetworkManager-l2tp";
-  version = "1.20.22";
+  version = "1.52.0";
 
   src = fetchFromGitHub {
     owner = "nm-l2tp";
     repo = "network-manager-l2tp";
     rev = version;
-    hash = "sha256-TuYLNjogR3psb1B9zonHzRQext0ROS4ueD2WcWkseJk=";
+    hash = "sha256-5EIG/5fexhrcOOQE+31+TJKMtINGVL+EI32m9tEhYVo=";
   };
 
   patches = [

From 6503d8d6be6535367f764d7b86521a51dc03fb43 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 16 Jan 2026 14:33:24 +0000
Subject: [PATCH 02/52] openimagedenoise: 2.3.3 -> 2.4.1

---
 pkgs/by-name/op/openimagedenoise/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/op/openimagedenoise/package.nix b/pkgs/by-name/op/openimagedenoise/package.nix
index 193f518bf497..2982de88dea1 100644
--- a/pkgs/by-name/op/openimagedenoise/package.nix
+++ b/pkgs/by-name/op/openimagedenoise/package.nix
@@ -14,12 +14,12 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "openimagedenoise";
-  version = "2.3.3";
+  version = "2.4.1";
 
   # The release tarballs include pretrained weights, which would otherwise need to be fetched with git-lfs
   src = fetchzip {
     url = "https://github.com/RenderKit/oidn/releases/download/v${finalAttrs.version}/oidn-${finalAttrs.version}.src.tar.gz";
-    sha256 = "sha256-JzAd47fYGLT6DeOep8Wag29VY9HOTpqf0OSv1v0kGQU=";
+    sha256 = "sha256-SM0Bn4qgeqRJAXr2MMjNjfWJVTcciERZxMHiyx4Z1hA=";
   };
 
   patches = lib.optional cudaSupport ./cuda.patch;

From 81e2494e1873ce56d63c8649e22458e430f6ee46 Mon Sep 17 00:00:00 2001
From: Felix Singer <felixsinger@posteo.net>
Date: Thu, 18 Dec 2025 16:12:22 +0100
Subject: [PATCH 03/52] nixos/jenkins: Set ProtectSystem to strict

Protect most files and directories from being read or written by setting
ProtectSystem to strict. Exclude the Jenkins state directory from that
protection.

https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectSystem=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
---
 .../services/continuous-integration/jenkins/default.nix      | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/nixos/modules/services/continuous-integration/jenkins/default.nix b/nixos/modules/services/continuous-integration/jenkins/default.nix
index 12ba4e342985..d1639ea1c345 100644
--- a/nixos/modules/services/continuous-integration/jenkins/default.nix
+++ b/nixos/modules/services/continuous-integration/jenkins/default.nix
@@ -275,7 +275,10 @@ in
         ProtectKernelModules = true;
         ProtectKernelTunables = true;
         ProtectProc = "invisible";
-        ProtectSystem = "full";
+        ProtectSystem = "strict";
+        ReadWritePaths = [
+          cfg.home
+        ];
         RemoveIPC = true;
         RestrictAddressFamilies = [
           "AF_UNIX"

From c140de1c5b219402ee150ba3bbb5429f39e5a926 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Mar 2026 13:13:35 +0000
Subject: [PATCH 04/52] mochi: 1.20.10 -> 1.21.1

---
 pkgs/by-name/mo/mochi/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/mo/mochi/package.nix b/pkgs/by-name/mo/mochi/package.nix
index f8f85c6b3b67..69cee9f0cd2d 100644
--- a/pkgs/by-name/mo/mochi/package.nix
+++ b/pkgs/by-name/mo/mochi/package.nix
@@ -12,14 +12,14 @@
 
 let
   pname = "mochi";
-  version = "1.20.10";
+  version = "1.21.1";
 
   linux = appimageTools.wrapType2 rec {
     inherit pname version meta;
 
     src = fetchurl {
       url = "https://download.mochi.cards/releases/Mochi-${version}.AppImage";
-      hash = "sha256-oC53TXgK6UUgsHbLo0Ri/+2/UajYwpoXxHwqO1xY91U=";
+      hash = "sha256-JgKzq4iUqpFiB6TpC5Wv7vx+pjeqr9EzNwftiNjEl/I=";
     };
 
     appimageContents = appimageTools.extractType2 { inherit pname version src; };
@@ -44,9 +44,9 @@ let
       url = "https://download.mochi.cards/releases/Mochi-${version}${lib.optionalString stdenv.hostPlatform.isAarch64 "-arm64"}.dmg";
       hash =
         if stdenv.hostPlatform.isAarch64 then
-          "sha256-nLz73G6vthiXex7+y6bLVhe/RvK3fE3UHuzHf8lcilE="
+          "sha256-b6lANyQWbovy2XegEJ/cNFrhh3YA4G6jzl5rpexi0oQ="
         else
-          "sha256-MuvzijF2eDELcSfOyqffKk5tx2a51vU8cGV2/ShSfTg=";
+          "sha256-iHNBD8MDmH+OzM2xUVOErB3aPypFN0wCkLKgfSjzfSQ=";
     };
 
     sourceRoot = ".";

From 642f08557fdecbeccaa5172cfb2708d18c15be2a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 13 Mar 2026 09:43:40 +0000
Subject: [PATCH 05/52] dpkg: 1.23.5 -> 1.23.7

---
 pkgs/by-name/dp/dpkg/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/dp/dpkg/package.nix b/pkgs/by-name/dp/dpkg/package.nix
index b3f6354772d1..e6aecac386cd 100644
--- a/pkgs/by-name/dp/dpkg/package.nix
+++ b/pkgs/by-name/dp/dpkg/package.nix
@@ -20,7 +20,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "dpkg";
-  version = "1.23.5";
+  version = "1.23.7";
 
   src = fetchgit {
     url = "https://git.launchpad.net/ubuntu/+source/dpkg";
@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
       rm -rf .git
       popd
     '';
-    hash = "sha256-Ug82hdskTvWSzMZ8l+EdWhWAmt9OhS2pUpwOYa/9FLw=";
+    hash = "sha256-8Joo/pcizlbtuuiUL8ev6/00ru+lh8/hzEPsO7fm2R0=";
   };
 
   configureFlags = [

From db72158d858b9febccad541c1dda52fb4dbbd42c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 13 Mar 2026 12:34:35 +0000
Subject: [PATCH 06/52] crowdin-cli: 4.14.0 -> 4.14.1

---
 pkgs/by-name/cr/crowdin-cli/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/cr/crowdin-cli/package.nix b/pkgs/by-name/cr/crowdin-cli/package.nix
index e6c802714072..7012377ac761 100644
--- a/pkgs/by-name/cr/crowdin-cli/package.nix
+++ b/pkgs/by-name/cr/crowdin-cli/package.nix
@@ -14,11 +14,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "crowdin-cli";
-  version = "4.14.0";
+  version = "4.14.1";
 
   src = fetchurl {
     url = "https://github.com/crowdin/crowdin-cli/releases/download/${finalAttrs.version}/crowdin-cli.zip";
-    hash = "sha256-rNtCCnssMQgiTU4BrH8uUHjOuTyvrHqlKKFclhRrnZE=";
+    hash = "sha256-zlouZc7DtMYTHiDOLSCtawEKTMOKgqJe01gieRxeiFI=";
   };
 
   nativeBuildInputs = [

From c6973e02f9635f610cc23aa309fac857747a6146 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 13 Mar 2026 22:27:40 +0000
Subject: [PATCH 07/52] snakefmt: 0.11.4 -> 0.11.5

---
 pkgs/by-name/sn/snakefmt/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/sn/snakefmt/package.nix b/pkgs/by-name/sn/snakefmt/package.nix
index a27061d35b07..4cc485caf0d5 100644
--- a/pkgs/by-name/sn/snakefmt/package.nix
+++ b/pkgs/by-name/sn/snakefmt/package.nix
@@ -8,12 +8,12 @@
 
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "snakefmt";
-  version = "0.11.4";
+  version = "0.11.5";
   pyproject = true;
 
   src = fetchPypi {
     inherit (finalAttrs) pname version;
-    hash = "sha256-LfJVYdViI88L/DtfUD1znBHUiLQb7MKhyJ2jhFCW4+Y=";
+    hash = "sha256-27tt5KlTrpc463j5m6pUz89S6FqIKrtT9PA5EXeC1pM=";
   };
 
   build-system = with python3.pkgs; [ hatchling ];

From c02e7eb5bc751de8d20326b3cd835ee67064f016 Mon Sep 17 00:00:00 2001
From: magicquark <198001825+magicquark@users.noreply.github.com>
Date: Sat, 14 Mar 2026 01:23:58 +0000
Subject: [PATCH 08/52] pyradio: 0.9.3.11.27 -> 0.9.3.11.28

Changelog: https://github.com/coderholic/pyradio/releases/tag/0.9.3.11.28
---
 pkgs/by-name/py/pyradio/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/py/pyradio/package.nix b/pkgs/by-name/py/pyradio/package.nix
index efa30d77540e..ceef547ef68c 100644
--- a/pkgs/by-name/py/pyradio/package.nix
+++ b/pkgs/by-name/py/pyradio/package.nix
@@ -7,14 +7,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "pyradio";
-  version = "0.9.3.11.27";
+  version = "0.9.3.11.28";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "coderholic";
     repo = "pyradio";
     tag = finalAttrs.version;
-    hash = "sha256-0NcVjXkGhWYqgllEsbV+I8RzDgPn8CTPkRWRPUsmw0M=";
+    hash = "sha256-a5nRSpGEbRNCZY5q2/QdlksuIXv+31OpifXY1a449ls=";
   };
 
   nativeBuildInputs = [

From b96c7adc5c9c642921149f19a61364a20e6bbb12 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 14 Mar 2026 17:26:33 +0000
Subject: [PATCH 09/52] luau: 0.709 -> 0.712

---
 pkgs/by-name/lu/luau/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/lu/luau/package.nix b/pkgs/by-name/lu/luau/package.nix
index b163a64f69f6..442a822ebe41 100644
--- a/pkgs/by-name/lu/luau/package.nix
+++ b/pkgs/by-name/lu/luau/package.nix
@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "luau";
-  version = "0.709";
+  version = "0.712";
 
   src = fetchFromGitHub {
     owner = "luau-lang";
     repo = "luau";
     tag = finalAttrs.version;
-    hash = "sha256-qqexX0d/YFBbn/l59l3OI7KMpwScAtdmeJbGWk8ZEuE=";
+    hash = "sha256-pReKrGXO7cZrSCO9ZKv4ikzs45ApZlJ0mvZPUt6+TOU=";
   };
 
   nativeBuildInputs = [ cmake ];

From a3752b8c9e5ea32e01ddaa132fbf706113070276 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 14 Mar 2026 22:12:47 +0000
Subject: [PATCH 10/52] lazyworktree: 1.38.1 -> 1.43.0

---
 pkgs/by-name/la/lazyworktree/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/la/lazyworktree/package.nix b/pkgs/by-name/la/lazyworktree/package.nix
index f93b808a2fda..37c978317973 100644
--- a/pkgs/by-name/la/lazyworktree/package.nix
+++ b/pkgs/by-name/la/lazyworktree/package.nix
@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "lazyworktree";
-  version = "1.38.1";
+  version = "1.43.0";
 
   src = fetchFromGitHub {
     owner = "chmouel";
     repo = "lazyworktree";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-rNTzmvfVAToPzOvP+3wnL+zyQzL2mXQCnRY0cLKuQ6c=";
+    hash = "sha256-fzYUQY6MbKRM7lSjBlhWx3U2J53EkJqSBeC/+V1Xkmg=";
   };
 
-  vendorHash = "sha256-Y4TZZ7Fhn1YSxG6YH0l0y0iWxgml93gOwKyTXWkjpqg=";
+  vendorHash = "sha256-EZY4flrYM3JRY5i1qsjp5vvGW32IvDHeINdYuQJgUuQ=";
 
   nativeBuildInputs = [ installShellFiles ];
 

From befdd2a21e88e8551f0778009478716b9eeaa4c1 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 15 Mar 2026 01:55:32 +0000
Subject: [PATCH 11/52] postman: 11.87.4 -> 11.88.3

---
 pkgs/by-name/po/postman/package.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/po/postman/package.nix b/pkgs/by-name/po/postman/package.nix
index fd01abdc59c8..a014cbd87449 100644
--- a/pkgs/by-name/po/postman/package.nix
+++ b/pkgs/by-name/po/postman/package.nix
@@ -8,7 +8,7 @@
 
 let
   pname = "postman";
-  version = "11.87.4";
+  version = "11.88.3";
 
   src =
     let
@@ -27,10 +27,10 @@ let
       name = "postman-${version}.${if stdenvNoCC.hostPlatform.isLinux then "tar.gz" else "zip"}";
       url = "https://dl.pstmn.io/download/version/${version}/${system}";
       hash = selectSystem {
-        aarch64-darwin = "sha256-1ilYfvduHTh5tvIrIXmrwQgfiWnYhdXhNv/o19wUNrE=";
-        aarch64-linux = "sha256-JdO/gBT7B+FQ8mguyw7oD2hfQACfyDVxF714iVkTW2I=";
-        x86_64-darwin = "sha256-Sb66zJQJzixk032fsdAfU88Yw9t7xeFoPBlQ+pRcdmU=";
-        x86_64-linux = "sha256-a8jsIFlJD12tydTZM9Mibv+m7bcSqAN4JVQgQxB4WJo=";
+        aarch64-darwin = "sha256-BYdEwE96SdxPwn8bTcIZcHcClAjPgrFd2rSO1zs/X5Y=";
+        aarch64-linux = "sha256-nWS4cPV6m/h1+RLkl1i9FZxCol/GPxFb2S+GRoL87QM=";
+        x86_64-darwin = "sha256-8lDFOysRuJMEJ5Ff2mkTZx+Mu+duiDq8EAdibi7yYL8=";
+        x86_64-linux = "sha256-98NRSIOpgsDZ9tehbgQi1Ms5U04ylWIh4A2qY0yasPA=";
       };
     };
 

From f51cedc152650745f99344d162b8c1165d7e80e0 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:01:23 +0100
Subject: [PATCH 12/52] python3Packages.mypy-boto3-apigateway: 1.42.3 ->
 1.42.68

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 9824d92f0a0c..910068b3777d 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -75,8 +75,8 @@ in
       "sha256-Q8nkt2PJnip62r2lbCZcB9qGE6sSg28ZAycLI8gIQ7s=";
 
   mypy-boto3-apigateway =
-    buildMypyBoto3Package "apigateway" "1.42.3"
-      "sha256-JVGKx+VCoE4EvUrxsmFsdXwu6gaprva+q1xrsSl5EDA=";
+    buildMypyBoto3Package "apigateway" "1.42.68"
+      "sha256-cjHTz3Q9T7NBcr/p00heOzlBVlnVMfzWylivg37dtWk=";
 
   mypy-boto3-apigatewaymanagementapi =
     buildMypyBoto3Package "apigatewaymanagementapi" "1.42.3"

From 99de3f6aa4c98980362e2e1c910209575037b8ea Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:01:33 +0100
Subject: [PATCH 13/52] python3Packages.mypy-boto3-config: 1.42.32 -> 1.42.68

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 910068b3777d..e569d1235d61 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -331,8 +331,8 @@ in
       "sha256-M8vUOtM7Q5gnwi9ZPGu6n+I4Twl02Su4eRGqq2+Ow1o=";
 
   mypy-boto3-config =
-    buildMypyBoto3Package "config" "1.42.32"
-      "sha256-HQUL0R1NWP6DXQ26iS9k6lIAVdwK899fwLGH4/Z4U8Q=";
+    buildMypyBoto3Package "config" "1.42.68"
+      "sha256-UNxmIK9UD6AVmT4nyQzunNAKjp2YmV1wQ5oloHOwcXw=";
 
   mypy-boto3-connect =
     buildMypyBoto3Package "connect" "1.42.63"

From 12a6aaffe0fc5c6d5ad119834dd0bbd97480a2bf Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:01:34 +0100
Subject: [PATCH 14/52] python3Packages.mypy-boto3-connect: 1.42.63 -> 1.42.68

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index e569d1235d61..55eca45469de 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -335,8 +335,8 @@ in
       "sha256-UNxmIK9UD6AVmT4nyQzunNAKjp2YmV1wQ5oloHOwcXw=";
 
   mypy-boto3-connect =
-    buildMypyBoto3Package "connect" "1.42.63"
-      "sha256-dZUnInRs0ndWy4jNbZLmUUswZZPC4GwUeBlTqm6JxJI=";
+    buildMypyBoto3Package "connect" "1.42.68"
+      "sha256-jppL6jpw0/Wb+cOW3GQ62h65l+/ZX8c6OFvyJfzVLtA=";
 
   mypy-boto3-connect-contact-lens =
     buildMypyBoto3Package "connect-contact-lens" "1.42.3"

From 5ece87b0f22cd433317600d93a38d76766f2804a Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:01:43 +0100
Subject: [PATCH 15/52] python3Packages.mypy-boto3-glue: 1.42.43 -> 1.42.68

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 55eca45469de..b48dcb0984fe 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -571,8 +571,8 @@ in
       "sha256-N0kQ7Fc44SFKXhl4V+oAclPNlWhluOs53NDokiXcSNM=";
 
   mypy-boto3-glue =
-    buildMypyBoto3Package "glue" "1.42.43"
-      "sha256-PBFrSU7QbOuaU5kWjYe6eA8k9BHdAZUuD3jMYLlFwF0=";
+    buildMypyBoto3Package "glue" "1.42.68"
+      "sha256-HvL13TFg9jP3iSqyxDdsOaBv7shpkMqIQURe9e+ACVA=";
   mypy-boto3-grafana =
     buildMypyBoto3Package "grafana" "1.42.51"
       "sha256-QHAuRJrioMD7ASgV1Wobm81Gb+Z87c78yBs9X1+Kz+E=";

From 3b3f22de6aef761d97be14d10a5613c04461858b Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:01:48 +0100
Subject: [PATCH 16/52] python3Packages.mypy-boto3-ivs-realtime: 1.42.6 ->
 1.42.68

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index b48dcb0984fe..a543405efe5a 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -698,8 +698,8 @@ in
       "sha256-TzudGWLWWzTRWZb3585Tkar1iXmt5TtFNox+DJzvhS4=";
 
   mypy-boto3-ivs-realtime =
-    buildMypyBoto3Package "ivs-realtime" "1.42.6"
-      "sha256-MjfhT4KcLIDO4iQVo7eyq2K4lqM4anHaDJosPqZdaGw=";
+    buildMypyBoto3Package "ivs-realtime" "1.42.68"
+      "sha256-Q+++H+qR9OKMnbyZVL06+uDV9KuPuEabZDVXcrkAozM=";
 
   mypy-boto3-ivschat =
     buildMypyBoto3Package "ivschat" "1.42.3"

From 6d887b3b5dcc302a10cd09291d2753f9e62d9722 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:01:55 +0100
Subject: [PATCH 17/52] python3Packages.mypy-boto3-mediaconvert: 1.42.37 ->
 1.42.68

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index a543405efe5a..dda199aef5cd 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -858,8 +858,8 @@ in
       "sha256-NYn/N65sVAUxA4kTCi/IJNP/QQeutFjH8S7N2AeK3g8=";
 
   mypy-boto3-mediaconvert =
-    buildMypyBoto3Package "mediaconvert" "1.42.37"
-      "sha256-Z+TiVg/mjr0vTU+awHlS7GCynOeSl+IPl0n9GaLTsYE=";
+    buildMypyBoto3Package "mediaconvert" "1.42.68"
+      "sha256-aRJIk0hzRVvbGQHbXxCoLl/6xReo2f4CZHdRo2YN364=";
 
   mypy-boto3-medialive =
     buildMypyBoto3Package "medialive" "1.42.56"

From 8d2db57e3199ee6f5030544a20d2fff2f060c958 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:01:55 +0100
Subject: [PATCH 18/52] python3Packages.mypy-boto3-medialive: 1.42.56 ->
 1.42.68

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index dda199aef5cd..cd91aef1ac14 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -862,8 +862,8 @@ in
       "sha256-aRJIk0hzRVvbGQHbXxCoLl/6xReo2f4CZHdRo2YN364=";
 
   mypy-boto3-medialive =
-    buildMypyBoto3Package "medialive" "1.42.56"
-      "sha256-MshslPZEBNOuIPrs0w2No6g8UzXNouSdRgM7WAkXlbc=";
+    buildMypyBoto3Package "medialive" "1.42.68"
+      "sha256-J9NnMG0prpzU+1dNQcH396UcZ0tCoNCbRXqVI42Qfz0=";
 
   mypy-boto3-mediapackage =
     buildMypyBoto3Package "mediapackage" "1.42.3"

From 92b73c198f9f43a934dad9210fda851c3da35941 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:01:57 +0100
Subject: [PATCH 19/52] python3Packages.mypy-boto3-mgn: 1.42.64 -> 1.42.68

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index cd91aef1ac14..e61f181eb2c2 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -906,8 +906,8 @@ in
       "sha256-kFHGogiCfbftZr67o8zT7eb8na74J4AGneac03q+Pvc=";
 
   mypy-boto3-mgn =
-    buildMypyBoto3Package "mgn" "1.42.64"
-      "sha256-F12y2J72+c2VRP9sMdXVjeXZ7vlZqkEFpwm/dNWhkbU=";
+    buildMypyBoto3Package "mgn" "1.42.68"
+      "sha256-zrUwEeofbz+Tj7GgHzOzodYzsnPKqAISOuRGG6B7rpY=";
 
   mypy-boto3-migration-hub-refactor-spaces =
     buildMypyBoto3Package "migration-hub-refactor-spaces" "1.42.3"

From e46b725540a8a3fa3ff75bcb51eb1379997de06f Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:02:04 +0100
Subject: [PATCH 20/52] python3Packages.mypy-boto3-quicksight: 1.42.61 ->
 1.42.68

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index e61f181eb2c2..18f7b2661f22 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -1070,8 +1070,8 @@ in
       "sha256-YrrEKl3aGz//5Z5JGapHhWtk6hBXQ4cuRQmLqGYztzg=";
 
   mypy-boto3-quicksight =
-    buildMypyBoto3Package "quicksight" "1.42.61"
-      "sha256-3ZA5BRq6lgqNM8tt02E7fXSrwf0gfF4JE6lfaw6cYWo=";
+    buildMypyBoto3Package "quicksight" "1.42.68"
+      "sha256-TrlvFHHGdfpGIk7MV17EAeaJD+Sf0Tfys/J0o1THx/Y=";
 
   mypy-boto3-ram =
     buildMypyBoto3Package "ram" "1.42.59"

From 1780fb5d5e986b31f76e49f3eddd7bff4192f734 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:02:22 +0100
Subject: [PATCH 21/52] python314Packages.boto3-stubs: 1.42.67 -> 1.42.68

---
 pkgs/development/python-modules/boto3-stubs/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/boto3-stubs/default.nix b/pkgs/development/python-modules/boto3-stubs/default.nix
index 31fb11bb7007..ffb316f0f91e 100644
--- a/pkgs/development/python-modules/boto3-stubs/default.nix
+++ b/pkgs/development/python-modules/boto3-stubs/default.nix
@@ -358,13 +358,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "boto3-stubs";
-  version = "1.42.67";
+  version = "1.42.68";
   pyproject = true;
 
   src = fetchPypi {
     pname = "boto3_stubs";
     inherit (finalAttrs) version;
-    hash = "sha256-wN6+zsf6+sQbeXcGjSuw1uGdCEh7PScvzUrV1aSwRcQ=";
+    hash = "sha256-lq0QIHNWGUg/ubTael5pS0YL8uGPhKNNXRddD/6MRlM=";
   };
 
   build-system = [ setuptools ];

From 9eb49709e8665bcc7a39f3f858234d4b8116e18c Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:06:00 +0100
Subject: [PATCH 22/52] python3Packages.cyclopts: 4.8.0 -> 4.10.0

Diff: https://github.com/BrianPugh/cyclopts/compare/v4.8.0...v4.10.0

Changelog: https://github.com/BrianPugh/cyclopts/releases/tag/v4.10.0
---
 pkgs/development/python-modules/cyclopts/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/cyclopts/default.nix b/pkgs/development/python-modules/cyclopts/default.nix
index 09900c370bdc..5b481604f95a 100644
--- a/pkgs/development/python-modules/cyclopts/default.nix
+++ b/pkgs/development/python-modules/cyclopts/default.nix
@@ -22,14 +22,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "cyclopts";
-  version = "4.8.0";
+  version = "4.10.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "BrianPugh";
     repo = "cyclopts";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-pup2QOn9vqi5hIM+ei+TXQ5Bo/KMxZp+BXETqpguMBI=";
+    hash = "sha256-wUNqysXUP0vzQBgb6EOVBh/3/bJf2Tgf5lHeNXucyPk=";
   };
 
   build-system = [

From 0984e3184ad9ceedea09fdd2b1289d361b46caf5 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:09:13 +0100
Subject: [PATCH 23/52] python3Packages.pyworxcloud: 5.0.0 -> 6.0.5

Changelog: https://github.com/MTrab/pyworxcloud/releases/tag/v6.0.5
---
 pkgs/development/python-modules/pyworxcloud/default.nix | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/pyworxcloud/default.nix b/pkgs/development/python-modules/pyworxcloud/default.nix
index 42b886c2f639..466c2684f2ae 100644
--- a/pkgs/development/python-modules/pyworxcloud/default.nix
+++ b/pkgs/development/python-modules/pyworxcloud/default.nix
@@ -1,5 +1,6 @@
 {
   lib,
+  aiohttp,
   awsiotsdk,
   buildPythonPackage,
   fetchFromGitHub,
@@ -7,18 +8,19 @@
   paho-mqtt,
   requests,
   urllib3,
+  tzdata,
 }:
 
 buildPythonPackage rec {
   pname = "pyworxcloud";
-  version = "5.0.0";
+  version = "6.0.5";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "MTrab";
     repo = "pyworxcloud";
     tag = "v${version}";
-    hash = "sha256-eyMMtLgJuBIuPCyenYrHaRQIrb2tzPaIzM2UCAPPqDg=";
+    hash = "sha256-BqRdR202mF+aosAf1GRu8xcMSTkUrgxRVSgHyCg4wjA=";
   };
 
   pythonRelaxDeps = [ "awsiotsdk" ];
@@ -26,10 +28,12 @@ buildPythonPackage rec {
   build-system = [ poetry-core ];
 
   dependencies = [
+    aiohttp
     awsiotsdk
     paho-mqtt
     requests
     urllib3
+    tzdata
   ];
 
   pythonImportsCheck = [ "pyworxcloud" ];

From 8ae0882039eeb25e4062bcb3aede487eb22de4ee Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:15:34 +0100
Subject: [PATCH 24/52] python3Packages.kml2geojson: 5.1.0 -> 5.1.1

---
 .../python-modules/kml2geojson/default.nix         | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/pkgs/development/python-modules/kml2geojson/default.nix b/pkgs/development/python-modules/kml2geojson/default.nix
index 07f88a41176e..bc7f6882c264 100644
--- a/pkgs/development/python-modules/kml2geojson/default.nix
+++ b/pkgs/development/python-modules/kml2geojson/default.nix
@@ -1,7 +1,7 @@
 {
   lib,
   buildPythonPackage,
-  poetry-core,
+  hatchling,
   fetchFromGitHub,
   pytestCheckHook,
   click,
@@ -9,19 +9,19 @@
 
 buildPythonPackage rec {
   pname = "kml2geojson";
-  version = "5.1.0";
+  version = "5.1.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mrcagney";
     repo = "kml2geojson";
-    rev = version;
-    hash = "sha256-iJEcXpvy+Y3MkxAF2Q1Tkcx8GxUVjeVzv6gl134zdiI=";
+    tag = version;
+    hash = "sha256-50hKosd4tgTV5GUXHAdTsz4S5QFtM7FTqUHy5TGcq0c=";
   };
 
-  nativeBuildInputs = [ poetry-core ];
+  build-system = [ hatchling ];
 
-  propagatedBuildInputs = [ click ];
+  dependencies = [ click ];
 
   nativeCheckInputs = [ pytestCheckHook ];
 
@@ -29,9 +29,9 @@ buildPythonPackage rec {
 
   meta = {
     description = "Library to convert KML to GeoJSON";
-    mainProgram = "k2g";
     homepage = "https://github.com/mrcagney/kml2geojson";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "k2g";
   };
 }

From dd725542e3329f7c2d1eedd3562e70acf5d104d1 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 15:17:18 +0100
Subject: [PATCH 25/52] python3Packages.kml2geojson: migrate to finalAttrs

---
 .../python-modules/kml2geojson/default.nix           | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/pkgs/development/python-modules/kml2geojson/default.nix b/pkgs/development/python-modules/kml2geojson/default.nix
index bc7f6882c264..948c910b96fe 100644
--- a/pkgs/development/python-modules/kml2geojson/default.nix
+++ b/pkgs/development/python-modules/kml2geojson/default.nix
@@ -1,13 +1,13 @@
 {
   lib,
   buildPythonPackage,
-  hatchling,
-  fetchFromGitHub,
-  pytestCheckHook,
   click,
+  fetchFromGitHub,
+  hatchling,
+  pytestCheckHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "kml2geojson";
   version = "5.1.1";
   pyproject = true;
@@ -15,7 +15,7 @@ buildPythonPackage rec {
   src = fetchFromGitHub {
     owner = "mrcagney";
     repo = "kml2geojson";
-    tag = version;
+    tag = finalAttrs.version;
     hash = "sha256-50hKosd4tgTV5GUXHAdTsz4S5QFtM7FTqUHy5TGcq0c=";
   };
 
@@ -34,4 +34,4 @@ buildPythonPackage rec {
     maintainers = with lib.maintainers; [ fab ];
     mainProgram = "k2g";
   };
-}
+})

From 2f0c2c79ac30d5c5d3b53af4fedc40ccf1e8a876 Mon Sep 17 00:00:00 2001
From: Guilherme <guilherme.prokisch@gmail.com>
Date: Sun, 15 Mar 2026 15:39:52 +0100
Subject: [PATCH 26/52] see-cat: 0.9.0 -> 0.9.1

---
 pkgs/by-name/se/see-cat/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/se/see-cat/package.nix b/pkgs/by-name/se/see-cat/package.nix
index 313acfe71c04..624a9306914d 100644
--- a/pkgs/by-name/se/see-cat/package.nix
+++ b/pkgs/by-name/se/see-cat/package.nix
@@ -5,16 +5,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "see-cat";
-  version = "0.9.0";
+  version = "0.9.1";
 
   src = fetchFromGitHub {
     owner = "guilhermeprokisch";
     repo = "see";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-Ej8lk9btUcIhhgpSmnHo2n33wQtyEkmuWVFoahYgAaI=";
+    hash = "sha256-BlceC8XgKvSLOTKHlfQHxn0rhaFKL8rHqUcYBNntB5s=";
   };
 
-  cargoHash = "sha256-gADA6Ioxz8YM/SRYsT+43bKNS2Ov1XtTElDr7vx8T14=";
+  cargoHash = "sha256-ccSuJqENO8DElZM5Nz+/rt7yAIMipcVJ3qOi9JR0CQY=";
 
   meta = {
     description = "Cute cat(1) for the terminal";

From 0d47c576e2897cb37f8aa75d451357331dae4c04 Mon Sep 17 00:00:00 2001
From: Niklas Korz <niklas@niklaskorz.de>
Date: Sun, 15 Mar 2026 15:53:05 +0100
Subject: [PATCH 27/52] vulkan-caps-viewer: move to pkgs/by-name

---
 .../default.nix => by-name/vu/vulkan-caps-viewer/package.nix}   | 0
 pkgs/top-level/all-packages.nix                                 | 2 +-
 2 files changed, 1 insertion(+), 1 deletion(-)
 rename pkgs/{tools/graphics/vulkan-caps-viewer/default.nix => by-name/vu/vulkan-caps-viewer/package.nix} (100%)

diff --git a/pkgs/tools/graphics/vulkan-caps-viewer/default.nix b/pkgs/by-name/vu/vulkan-caps-viewer/package.nix
similarity index 100%
rename from pkgs/tools/graphics/vulkan-caps-viewer/default.nix
rename to pkgs/by-name/vu/vulkan-caps-viewer/package.nix
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 2809581a6165..f68219ba2428 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -7629,7 +7629,7 @@ with pkgs;
 
   vtkWithQt6 = vtk.override { withQt6 = true; };
 
-  vulkan-caps-viewer = libsForQt5.callPackage ../tools/graphics/vulkan-caps-viewer { };
+  vulkan-caps-viewer = libsForQt5.callPackage ../by-name/vu/vulkan-caps-viewer/package.nix { };
 
   wayland = callPackage ../development/libraries/wayland { };
   wayland-scanner = callPackage ../development/libraries/wayland/scanner.nix { };

From 1399075456c371ca3acf39b25a6c18f65d565f2e Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 16:13:55 +0100
Subject: [PATCH 28/52] sqlfluff: 4.0.0 -> 4.0.4

Diff: https://github.com/sqlfluff/sqlfluff/compare/4.0.0...4.0.4

Changelog: https://github.com/sqlfluff/sqlfluff/blob/4.0.4/CHANGELOG.md
---
 pkgs/by-name/sq/sqlfluff/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/sq/sqlfluff/package.nix b/pkgs/by-name/sq/sqlfluff/package.nix
index c0b18b15c760..55f86a00399c 100644
--- a/pkgs/by-name/sq/sqlfluff/package.nix
+++ b/pkgs/by-name/sq/sqlfluff/package.nix
@@ -7,14 +7,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "sqlfluff";
-  version = "4.0.0";
+  version = "4.0.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "sqlfluff";
     repo = "sqlfluff";
     tag = finalAttrs.version;
-    hash = "sha256-hXiy3PGoBe6O9FaACN31Tss3xMBfiw4YuVLxbGi+/tA=";
+    hash = "sha256-0Zu3hx35LPG6+v1D7fAenuh8tI6M4oJw6XxKU833cr8=";
   };
 
   pythonRelaxDeps = [ "click" ];

From aae42ce3c3f9c26bb6aa97342cff9876413fc0f6 Mon Sep 17 00:00:00 2001
From: Niklas Korz <niklas@niklaskorz.de>
Date: Sun, 15 Mar 2026 16:18:09 +0100
Subject: [PATCH 29/52] vulkan-caps-viewer: fix license

The package incorrectly stated GPLv2 as license.
The actual license is LGPLv3:
https://github.com/SaschaWillems/VulkanCapsViewer/commit/c41956d23f08bf29f122c1c194404d588bc1d8fc
---
 pkgs/by-name/vu/vulkan-caps-viewer/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/vu/vulkan-caps-viewer/package.nix b/pkgs/by-name/vu/vulkan-caps-viewer/package.nix
index bfaf01b1620e..9629882c0b16 100644
--- a/pkgs/by-name/vu/vulkan-caps-viewer/package.nix
+++ b/pkgs/by-name/vu/vulkan-caps-viewer/package.nix
@@ -62,7 +62,7 @@ stdenv.mkDerivation rec {
     '';
     homepage = "https://vulkan.gpuinfo.org/";
     platforms = lib.platforms.unix;
-    license = lib.licenses.gpl2Only;
+    license = lib.licenses.lgpl3Only;
     maintainers = with lib.maintainers; [ pedrohlc ];
     changelog = "https://github.com/SaschaWillems/VulkanCapsViewer/releases/tag/${version}";
   };

From d7917028d00b6bbcde0c60b8ba4a51b2b5f4a86c Mon Sep 17 00:00:00 2001
From: Guilherme <guilherme.prokisch@gmail.com>
Date: Sun, 15 Mar 2026 16:26:35 +0100
Subject: [PATCH 30/52] see-cat: use tag for fetchFromGitHub

---
 pkgs/by-name/se/see-cat/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/se/see-cat/package.nix b/pkgs/by-name/se/see-cat/package.nix
index 624a9306914d..1d53f5334791 100644
--- a/pkgs/by-name/se/see-cat/package.nix
+++ b/pkgs/by-name/se/see-cat/package.nix
@@ -10,7 +10,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   src = fetchFromGitHub {
     owner = "guilhermeprokisch";
     repo = "see";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-BlceC8XgKvSLOTKHlfQHxn0rhaFKL8rHqUcYBNntB5s=";
   };
 

From 6490fcbc8fa02998f1e8dc1cb004847a64275672 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 15 Mar 2026 16:34:09 +0100
Subject: [PATCH 31/52] theharvester: 4.10.0 -> 4.10.1

Changelog: https://github.com/laramies/theHarvester/releases/tag/4.10.1
---
 pkgs/by-name/th/theharvester/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/th/theharvester/package.nix b/pkgs/by-name/th/theharvester/package.nix
index 13b49f446d5e..c4809666f9c1 100644
--- a/pkgs/by-name/th/theharvester/package.nix
+++ b/pkgs/by-name/th/theharvester/package.nix
@@ -6,21 +6,21 @@
 
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "theharvester";
-  version = "4.10.0";
+  version = "4.10.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "laramies";
     repo = "theharvester";
     tag = finalAttrs.version;
-    hash = "sha256-PDFKDm1amqmdYo/avxudWZ9Xhp16Cw4ejmUAQ+BlvC0=";
+    hash = "sha256-ajXGf8wH8WoVGNHDAUJ+fC3FN2OtUuKaIrXJ4KuRif0=";
   };
 
   pythonRelaxDeps = true;
 
   pythonRemoveDeps = [ "winloop" ];
 
-  build-system = with python3.pkgs; [ setuptools ];
+  build-system = with python3.pkgs; [ flit-core ];
 
   dependencies = with python3.pkgs; [
     aiodns

From 4d46e81cfc84660b493254f2437075d8afbbd7e1 Mon Sep 17 00:00:00 2001
From: Niklas Korz <niklas@niklaskorz.de>
Date: Sun, 15 Mar 2026 15:54:11 +0100
Subject: [PATCH 32/52] vulkan-caps-viewer: 4.03 -> 4.11

Changelogs:

- https://github.com/SaschaWillems/VulkanCapsViewer/releases/tag/4.11
- https://github.com/SaschaWillems/VulkanCapsViewer/releases/tag/4.10
---
 .../Fix-darwin-metal-layer.patch              | 17 +++++
 .../by-name/vu/vulkan-caps-viewer/package.nix | 63 +++++++++++++------
 pkgs/top-level/all-packages.nix               |  2 -
 3 files changed, 61 insertions(+), 21 deletions(-)
 create mode 100644 pkgs/by-name/vu/vulkan-caps-viewer/Fix-darwin-metal-layer.patch

diff --git a/pkgs/by-name/vu/vulkan-caps-viewer/Fix-darwin-metal-layer.patch b/pkgs/by-name/vu/vulkan-caps-viewer/Fix-darwin-metal-layer.patch
new file mode 100644
index 000000000000..fd59563a9b08
--- /dev/null
+++ b/pkgs/by-name/vu/vulkan-caps-viewer/Fix-darwin-metal-layer.patch
@@ -0,0 +1,17 @@
+diff --git a/appleutils.mm b/appleutils.mm
+index 52058b5..afc568f 100644
+--- a/appleutils.mm
++++ b/appleutils.mm
+@@ -45,7 +45,11 @@ extern "C" void *makeViewMetalCompatible(void* handle)
+     NSView* view = (__bridge NSView*)handle;
+     assert([view isKindOfClass:[NSView class]]);
+ 
+-    void *pLayer = (__bridge void *)view.layer;
++    // In Qt 6.10+, the window has an intermediate QContainerLayer in which
++    // the actual Metal CALayer is nested.
++    // https://github.com/qt/qtbase/commit/0bdbf4688e4265a1ddf42efbe4c780770809d365
++    id containerLayer = view.layer;
++    void *pLayer = (__bridge void*)[containerLayer contentLayer];
+     return pLayer;
+ #endif
+ }
diff --git a/pkgs/by-name/vu/vulkan-caps-viewer/package.nix b/pkgs/by-name/vu/vulkan-caps-viewer/package.nix
index 9629882c0b16..343bac772af3 100644
--- a/pkgs/by-name/vu/vulkan-caps-viewer/package.nix
+++ b/pkgs/by-name/vu/vulkan-caps-viewer/package.nix
@@ -2,48 +2,73 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  qmake,
+  qt6,
   vulkan-loader,
   wayland,
-  wrapQtAppsHook,
+  xcbuild,
+
+  waylandSupport ? lib.meta.availableOn stdenv.hostPlatform wayland,
   x11Support ? !stdenv.hostPlatform.isDarwin,
-  qtx11extras,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "vulkan-caps-viewer";
-  version = "4.03";
+  version = "4.11";
 
   src = fetchFromGitHub {
     owner = "SaschaWillems";
     repo = "VulkanCapsViewer";
-    rev = version;
-    hash = "sha256-LaZdQ5w7QYaD3Nxl9ML30kGws8Yyr3c0jzO3ElUvJ/I=";
+    tag = finalAttrs.version;
+    hash = "sha256-Vc4zK1Kurirp+xK7A2D3CC4veJSghE9mS7YzRA3CnHM=";
     # Note: this derivation strictly requires vulkan-header to be the same it was developed against.
     # To help us, they've put it in a git-submodule.
     # The result will work with any vulkan-loader version.
     fetchSubmodules = true;
   };
 
+  patches = [
+    # In Qt 6.10+, the path of the Metal layer has changed.
+    # Without this patch, the application fails to launch on darwin.
+    # Upstream PR: https://github.com/SaschaWillems/VulkanCapsViewer/pull/270
+    ./Fix-darwin-metal-layer.patch
+  ];
+
+  postPatch = ''
+    # These paths are appended to the install target, so we strip the /usr/ prefix
+    substituteInPlace vulkanCapsViewer.pro \
+      --replace-fail '/usr/' '/' \
+      --replace-fail '$(VULKAN_SDK)/lib/libvulkan.dylib' '${lib.getLib vulkan-loader}/lib/libvulkan.dylib'
+  '';
+
   nativeBuildInputs = [
-    qmake
-    wrapQtAppsHook
+    qt6.qmake
+    qt6.wrapQtAppsHook
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    xcbuild
   ];
 
   buildInputs = [
     vulkan-loader
   ]
-  ++ lib.optionals (lib.meta.availableOn stdenv.hostPlatform wayland) [ wayland ]
-  ++ lib.lists.optionals x11Support [ qtx11extras ];
-
-  patchPhase = ''
-    substituteInPlace vulkanCapsViewer.pro \
-      --replace-fail '/usr/' "/" \
-      --replace-fail '$(VULKAN_SDK)/lib/libvulkan.dylib' '${lib.getLib vulkan-loader}/lib/libvulkan.dylib'
-  '';
+  ++ lib.optionals waylandSupport [
+    wayland
+  ];
 
   qmakeFlags = [
     "CONFIG+=release"
+  ]
+  # The README incorrectly states that these should not be defined simultaneously.
+  # Enabling both WAYLAND and X11 at the same time doesn't cause any issues
+  # and is actually required to automatically fallback to the X11 surface test
+  # when no Wayland display is available.
+  # These two variables only control the surface presentation tests for the
+  # queue families of a GPU and are not related to how the Qt application is rendered.
+  ++ lib.optionals waylandSupport [
+    "DEFINES+=WAYLAND"
+  ]
+  ++ lib.optionals x11Support [
+    "DEFINES+=X11"
   ];
 
   installFlags = [ "INSTALL_ROOT=$(out)" ];
@@ -64,6 +89,6 @@ stdenv.mkDerivation rec {
     platforms = lib.platforms.unix;
     license = lib.licenses.lgpl3Only;
     maintainers = with lib.maintainers; [ pedrohlc ];
-    changelog = "https://github.com/SaschaWillems/VulkanCapsViewer/releases/tag/${version}";
+    changelog = "https://github.com/SaschaWillems/VulkanCapsViewer/releases/tag/${finalAttrs.version}";
   };
-}
+})
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index f68219ba2428..b71a5d1000c0 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -7629,8 +7629,6 @@ with pkgs;
 
   vtkWithQt6 = vtk.override { withQt6 = true; };
 
-  vulkan-caps-viewer = libsForQt5.callPackage ../by-name/vu/vulkan-caps-viewer/package.nix { };
-
   wayland = callPackage ../development/libraries/wayland { };
   wayland-scanner = callPackage ../development/libraries/wayland/scanner.nix { };
 

From 6c4d5ec4b21750556b0adb2afbd4ef096e1c165e Mon Sep 17 00:00:00 2001
From: Piotr Kwiecinski <2151333+piotrkwiecinski@users.noreply.github.com>
Date: Sun, 15 Mar 2026 20:13:34 +0100
Subject: [PATCH 33/52] mochi: add piotrkwiecinski as maintainer

---
 pkgs/by-name/mo/mochi/package.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/mo/mochi/package.nix b/pkgs/by-name/mo/mochi/package.nix
index f8f85c6b3b67..76d0505321d1 100644
--- a/pkgs/by-name/mo/mochi/package.nix
+++ b/pkgs/by-name/mo/mochi/package.nix
@@ -74,7 +74,10 @@ let
     license = lib.licenses.unfree;
     mainProgram = "mochi";
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
-    maintainers = with lib.maintainers; [ poopsicles ];
+    maintainers = with lib.maintainers; [
+      piotrkwiecinski
+      poopsicles
+    ];
     platforms = lib.platforms.linux ++ lib.platforms.darwin;
   };
 in

From 9a2536dd31586998e788088b135fe08035cf58f3 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 15 Mar 2026 15:57:45 +0000
Subject: [PATCH 34/52] ferron: 2.5.5 -> 2.6.0

---
 pkgs/by-name/fe/ferron/package.nix | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/fe/ferron/package.nix b/pkgs/by-name/fe/ferron/package.nix
index 0199e9e7dde0..75eaeebe97aa 100644
--- a/pkgs/by-name/fe/ferron/package.nix
+++ b/pkgs/by-name/fe/ferron/package.nix
@@ -10,13 +10,13 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ferron";
-  version = "2.5.5";
+  version = "2.6.0";
 
   src = fetchFromGitHub {
     owner = "ferronweb";
     repo = "ferron";
     tag = finalAttrs.version;
-    hash = "sha256-ljAt3ntKY0OR56QVWb1UQ/Id1OJaoM7CwkkAdNVs2sI=";
+    hash = "sha256-pKZ/oWmPzVvnGXTyTQ3VcgISH3hSReR+RdIvD4tzPso=";
   };
 
   # ../../ is cargoDepsCopy, and obviously does not contain monoio's README.md
@@ -25,7 +25,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
       --replace-fail '#![doc = include_str!("../../README.md")]' ""
   '';
 
-  cargoHash = "sha256-/ffeFawpcHA/wfrKY+Ub0EHeMMJb8+W4lhlVMAgICNQ=";
+  strictDeps = true;
+
+  cargoHash = "sha256-FimBeq21JhCSSkkSmSO3i7UEqOzJY2r36GXJFcorRT0=";
 
   nativeBuildInputs = [
     pkg-config

From b605c4097e1e355d820e0670c511375dc1792721 Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Sat, 14 Mar 2026 12:09:56 +0000
Subject: [PATCH 35/52] python3Packages.pylance: 2.0.1 -> 3.0.0

Diff: https://github.com/lancedb/lance/compare/v2.0.1...v3.0.0

Changelog: https://github.com/lancedb/lance/releases/tag/v3.0.0
---
 pkgs/development/python-modules/pylance/default.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/pylance/default.nix b/pkgs/development/python-modules/pylance/default.nix
index a7a5bb873c82..d324aa4582a4 100644
--- a/pkgs/development/python-modules/pylance/default.nix
+++ b/pkgs/development/python-modules/pylance/default.nix
@@ -34,14 +34,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pylance";
-  version = "2.0.1";
+  version = "3.0.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "lancedb";
     repo = "lance";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-KuUXo7GyC78U5RG6orW0X7a/B/0e9TbLpbTc7KXpxF8=";
+    hash = "sha256-71PogI877/dLwwlvMBraaC0vQWKtAHI/bmGEIBZVui4=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/python";
@@ -53,7 +53,7 @@ buildPythonPackage (finalAttrs: {
       src
       sourceRoot
       ;
-    hash = "sha256-dq5HK0yS/nnI7cqpsS51KnQus8KJ2mHsxmlgi8601gk=";
+    hash = "sha256-scQDRyX3hweYZep+LVAsiVqOvDTEw/ss0/4M3R4ewDU=";
   };
 
   nativeBuildInputs = [

From 1a0cf97a2458826902c54be9c978cee36d79977f Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Sat, 14 Mar 2026 12:18:42 +0000
Subject: [PATCH 36/52] python3Packages.lancedb: 0.27.1 -> 0.29.2

Diff: https://github.com/lancedb/lancedb/compare/python-v0.27.1...python-v0.29.2

Changelog: https://github.com/lancedb/lancedb/releases/tag/python-v0.29.2
---
 .../python-modules/lancedb/default.nix          | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/lancedb/default.nix b/pkgs/development/python-modules/lancedb/default.nix
index b93c9c035f6d..afa7092d857d 100644
--- a/pkgs/development/python-modules/lancedb/default.nix
+++ b/pkgs/development/python-modules/lancedb/default.nix
@@ -42,21 +42,21 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "lancedb";
-  version = "0.27.1";
+  version = "0.29.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "lancedb";
     repo = "lancedb";
     tag = "python-v${finalAttrs.version}";
-    hash = "sha256-pWrwv3VtfkfOKnkiiu26yRDrDrsNxb+0r/kcNHwzmhU=";
+    hash = "sha256-sOgRGn0romt5xJ70c+GSqNoRAp0D9F9hEq6bm7JRK/Y=";
   };
 
   buildAndTestSubdir = "python";
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-U1Od4lhaaGdYF3TISfRWY7sRmyyniZqLofBCnYAo1ew=";
+    hash = "sha256-GQA5RuxpYmrNqNrpW4GLZlXrphflErmR5PeeVcs6ZJQ=";
   };
 
   build-system = [ rustPlatform.maturinBuildHook ];
@@ -110,6 +110,17 @@ buildPythonPackage (finalAttrs: {
     # Requires internet access
     # RuntimeError: lance error: LanceError(IO): Generic S3 error
     "test_bucket_without_dots_passes"
+
+    # lance_namespace.errors.UnsupportedOperationError: Not supported: create_empty_table
+    "TestAsyncNamespaceConnection"
+    "TestNamespaceConnection"
+
+    # Failed: DID NOT RAISE <class 'Exception'>
+    "test_merge_insert"
+
+    # TypeError: FFILanceTableProvider.__datafusion_table_provider__() missing 1 required positional
+    # argument: 'session'
+    "test_sql_query"
   ]
   ++ lib.optionals (pythonAtLeast "3.14") [
     # TypeError: Converting Pydantic type to Arrow Type: unsupported type

From 5e1fb5ed34873b9a955c519c3e455df071623152 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 15 Mar 2026 19:41:21 +0000
Subject: [PATCH 37/52] swaylock-plugin: 1.8.5 -> 1.8.6

---
 pkgs/by-name/sw/swaylock-plugin/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/sw/swaylock-plugin/package.nix b/pkgs/by-name/sw/swaylock-plugin/package.nix
index cb6197bf03e4..abc2506d0392 100644
--- a/pkgs/by-name/sw/swaylock-plugin/package.nix
+++ b/pkgs/by-name/sw/swaylock-plugin/package.nix
@@ -23,12 +23,12 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "swaylock-plugin";
-  version = "1.8.5";
+  version = "1.8.6";
   src = fetchFromGitHub {
     owner = "mstoeckl";
     repo = "swaylock-plugin";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-CdxOOfKqPm/rWuZjaLOGcFaJpvdjT7GIhx24etPHH5I=";
+    hash = "sha256-JSFxWpSUt6ekX/owk9I6CdGBTF6F1pOTtFAls7kZrsc=";
   };
 
   strictDeps = true;

From 6a6c56fd5a3127c13bcc4febb3b19de1cd6c9c65 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 15 Mar 2026 20:52:56 +0000
Subject: [PATCH 38/52] vscode-extensions.mongodb.mongodb-vscode: 1.14.6 ->
 1.15.1

---
 .../vscode/extensions/mongodb.mongodb-vscode/default.nix      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/editors/vscode/extensions/mongodb.mongodb-vscode/default.nix b/pkgs/applications/editors/vscode/extensions/mongodb.mongodb-vscode/default.nix
index 00a8af822126..3afa2eff65ed 100644
--- a/pkgs/applications/editors/vscode/extensions/mongodb.mongodb-vscode/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/mongodb.mongodb-vscode/default.nix
@@ -4,8 +4,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "mongodb-vscode";
     publisher = "mongodb";
-    version = "1.14.6";
-    hash = "sha256-MACP/IvSk4JwD9DUWRD6pGYbgVQVzuCz8FvXdfHcphs=";
+    version = "1.15.1";
+    hash = "sha256-wdZ4Ro+L6We9GScVIlOBghPFv41xJD7x11Ni3iPshOI=";
   };
 
   meta = {

From c8ad136970be4800b0281ef81117a12385575688 Mon Sep 17 00:00:00 2001
From: Jonathan Davies <jpds@protonmail.com>
Date: Thu, 12 Mar 2026 22:24:52 +0000
Subject: [PATCH 39/52] =?UTF-8?q?apacheKafka:=203=5F9:=203.9.1=20=E2=86=92?=
 =?UTF-8?q?=203.9.2?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 pkgs/servers/apache-kafka/3_9.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/apache-kafka/3_9.nix b/pkgs/servers/apache-kafka/3_9.nix
index ecd0ed75f784..e59ccd11df23 100644
--- a/pkgs/servers/apache-kafka/3_9.nix
+++ b/pkgs/servers/apache-kafka/3_9.nix
@@ -1,5 +1,5 @@
 import ./generic.nix {
-  kafkaVersion = "3.9.1";
+  kafkaVersion = "3.9.2";
   scalaVersion = "2.13";
-  hash = "sha256-3UOZgW5niUbKt2470WhhA1VeabyPKrhobNpxqhW8MaM=";
+  hash = "sha256-1dlRwiSE+aCQiwVWO8gKBC3pd53x4GqJ930nzrX2gyM=";
 }

From 843c0dc5c0ab7d74785a245cf3758191b72f464b Mon Sep 17 00:00:00 2001
From: azban <me@azban.net>
Date: Sun, 15 Mar 2026 15:44:05 -0600
Subject: [PATCH 40/52] easyaudiosync: add patch to stop using old ffmpeg
 functions This was already committed but did not get released
 https://github.com/complexlogic/EasyAudioSync/commit/5bf22927f9e83dc3043e09370bb54815085a00ba

---
 .../0005-fix-ffmpeg-dep-functions.patch       | 70 +++++++++++++++++++
 pkgs/by-name/ea/easyaudiosync/package.nix     |  3 +
 2 files changed, 73 insertions(+)
 create mode 100644 pkgs/by-name/ea/easyaudiosync/0005-fix-ffmpeg-dep-functions.patch

diff --git a/pkgs/by-name/ea/easyaudiosync/0005-fix-ffmpeg-dep-functions.patch b/pkgs/by-name/ea/easyaudiosync/0005-fix-ffmpeg-dep-functions.patch
new file mode 100644
index 000000000000..b7d1a1527ebf
--- /dev/null
+++ b/pkgs/by-name/ea/easyaudiosync/0005-fix-ffmpeg-dep-functions.patch
@@ -0,0 +1,70 @@
+commit 5bf22927f9e83dc3043e09370bb54815085a00ba
+Author: complexlogic <complexlogic@users.noreply.github.com>
+Date:   Tue Aug 12 07:19:29 2025 -0700
+
+    Replace deprecated FFmpeg functions
+
+diff --git a/src/config.hpp b/src/config.hpp
+index ea9723c..1f6cc30 100644
+--- a/src/config.hpp
++++ b/src/config.hpp
+@@ -133,7 +133,11 @@ struct Config {
+         };
+         FDK fdk;
+         LAVC lavc;
++#if LIBAVCODEC_VERSION_MAJOR >= 62
++        int profile = AV_PROFILE_AAC_LOW;
++#else
+         int profile = FF_PROFILE_AAC_LOW;
++#endif
+     };
+     struct OGG {
+         int quality = VORBIS_DEFAULT_QUALITY;
+diff --git a/src/transcode.cpp b/src/transcode.cpp
+index 1ea286c..a0d6292 100644
+--- a/src/transcode.cpp
++++ b/src/transcode.cpp
+@@ -171,7 +171,16 @@ bool Transcoder::OutputFile::open(Codec out_codec, const InputFile &in_file, con
+         const auto &preset = config.opus.get_preset();
+         codec_ctx->bit_rate = determine_bitrate(preset.bit_rate, codec_ctx->ch_layout.nb_channels);
+     }
++#if LIBAVCODEC_VERSION_MAJOR >= 62
++    AVSampleFormat *fmts = nullptr;
++    if ((avcodec_get_supported_config(codec_ctx, codec, AV_CODEC_CONFIG_SAMPLE_FORMAT, 0, const_cast<const void**>(reinterpret_cast<void**>(&fmts)), nullptr) < 0) || !fmts) {
++        transcoder->logger.error("Could not find a valid sample format for the encoder");
++        return false;
++    }
++    codec_ctx->sample_fmt = fmts[0];
++#else
+     codec_ctx->sample_fmt = codec->sample_fmts[0];
++#endif
+     stream->time_base.den = codec_ctx->sample_rate;
+     stream->time_base.num = 1;
+ 
+diff --git a/src/util.cpp b/src/util.cpp
+index 6a52903..fa69d3a 100644
+--- a/src/util.cpp
++++ b/src/util.cpp
+@@ -158,13 +158,19 @@ int determine_sample_rate(Codec codec, const AVCodec *avcodec, int in_rate)
+ {
+     if (codec == Codec::MP3)
+         return std::min(48000, in_rate);
+-    if (!avcodec->supported_samplerates)
++    int *supported_samplerates = nullptr;
++#if LIBAVCODEC_VERSION_MAJOR >= 62
++    if ((avcodec_get_supported_config(nullptr, avcodec, AV_CODEC_CONFIG_SAMPLE_RATE, 0, const_cast<const void**>(reinterpret_cast<void**>(&supported_samplerates)), nullptr) < 0) || !supported_samplerates)
++#else
++    supported_samplerates = avcodec->supported_samplerates;
++    if (!supported_samplerates)
++#endif
+         return in_rate;
+     
+-    const int *rate = avcodec->supported_samplerates;
++    const int *rate = supported_samplerates;
+     while (*(rate + 1))
+         rate++;
+-    while (rate > avcodec->supported_samplerates && (*rate - in_rate < 0))
++    while (rate > supported_samplerates && (*rate - in_rate < 0))
+         rate--;
+     return *rate;
+ }
diff --git a/pkgs/by-name/ea/easyaudiosync/package.nix b/pkgs/by-name/ea/easyaudiosync/package.nix
index d57c432005e4..27eccb8f6ae9 100644
--- a/pkgs/by-name/ea/easyaudiosync/package.nix
+++ b/pkgs/by-name/ea/easyaudiosync/package.nix
@@ -27,6 +27,9 @@ stdenv.mkDerivation (finalAttrs: {
     ./0001-fix-project-name.patch
     ./0003-fix-darwin-app.patch
     ./0004-force-qt6.patch
+    # This has been committed upstream, but hasn't been released
+    #  https://github.com/complexlogic/EasyAudioSync/commit/5bf22927f9e83dc3043e09370bb54815085a00ba
+    ./0005-fix-ffmpeg-dep-functions.patch
   ];
 
   nativeBuildInputs = [

From 336fd4210d57fd69e9e7f14af9f54849efde7fe7 Mon Sep 17 00:00:00 2001
From: Florian Brandes <florian.brandes@posteo.de>
Date: Sun, 15 Mar 2026 22:53:17 +0100
Subject: [PATCH 41/52] electron_39: fix patch_dir

Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
---
 .../development/tools/electron/39-angle-patchdir.patch | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/development/tools/electron/39-angle-patchdir.patch b/pkgs/development/tools/electron/39-angle-patchdir.patch
index e1ce962a8b5c..1b53bfb2aa85 100644
--- a/pkgs/development/tools/electron/39-angle-patchdir.patch
+++ b/pkgs/development/tools/electron/39-angle-patchdir.patch
@@ -3,9 +3,9 @@ index f5dbe8600f..9e1e5e0704 100644
 --- a/electron/patches/config.json
 +++ b/electron/patches/config.json
 @@ -14,5 +14,5 @@
-   { "patch_dir": "src/electron/electron/patches/reclient-configs", "repo": "src/third_party/engflow-reclient-configs" },
-   { "patch_dir": "src/electron/electron/patches/sqlite", "repo": "src/third_party/sqlite/src" },
-   { "patch_dir": "src/electron/electron/patches/skia", "repo": "src/third_party/skia" },
--  { "patch_dir": "src/electron/electron/patches/angle", "repo": "src/third_party/angle/src" }
-+  { "patch_dir": "src/electron/electron/patches/angle", "repo": "src/third_party/angle" }
+   { "patch_dir": "src/electron/patches/reclient-configs", "repo": "src/third_party/engflow-reclient-configs" },
+   { "patch_dir": "src/electron/patches/sqlite", "repo": "src/third_party/sqlite/src" },
+   { "patch_dir": "src/electron/patches/skia", "repo": "src/third_party/skia" },
+-  { "patch_dir": "src/electron/patches/angle", "repo": "src/third_party/angle/src" }
++  { "patch_dir": "src/electron/patches/angle", "repo": "src/third_party/angle" }
  ]

From e1e9f3332fc44e4ddd48c015ef9cb6d52f94c9b7 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 15 Mar 2026 23:48:56 +0000
Subject: [PATCH 42/52] shellhub-agent: 0.21.5 -> 0.22.0

---
 pkgs/by-name/sh/shellhub-agent/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/sh/shellhub-agent/package.nix b/pkgs/by-name/sh/shellhub-agent/package.nix
index 6af924ba4e74..d217cdb2461e 100644
--- a/pkgs/by-name/sh/shellhub-agent/package.nix
+++ b/pkgs/by-name/sh/shellhub-agent/package.nix
@@ -12,18 +12,18 @@
 
 buildGoModule (finalAttrs: {
   pname = "shellhub-agent";
-  version = "0.21.5";
+  version = "0.22.0";
 
   src = fetchFromGitHub {
     owner = "shellhub-io";
     repo = "shellhub";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-0adBDz9oHb+Wo1/BucMPavX/4xZidjQYNVA3O475JEo=";
+    hash = "sha256-Ngb6n1P5Bb11et5x1mTF4rQjx/TdfE93nLc2NRz4aSg=";
   };
 
   modRoot = "./agent";
 
-  vendorHash = "sha256-zBT3kQhn6RhgcP/5FBEhKo1oPl9GgFQqWGsBUgrDwW4=";
+  vendorHash = "sha256-FlbSHLkJlOdbgfS+B5f8GLihw2KNQCh3G8kt8E+eb3w=";
 
   ldflags = [
     "-s"

From be91ece632ac662fc8301ade399814c454eb07c0 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 16 Mar 2026 00:13:17 +0000
Subject: [PATCH 43/52] dprint: 0.52.0 -> 0.52.1

---
 pkgs/by-name/dp/dprint/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/dp/dprint/package.nix b/pkgs/by-name/dp/dprint/package.nix
index adc406274a78..639c2f854596 100644
--- a/pkgs/by-name/dp/dprint/package.nix
+++ b/pkgs/by-name/dp/dprint/package.nix
@@ -12,7 +12,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "dprint";
-  version = "0.52.0";
+  version = "0.52.1";
 
   # Prefer repository rather than crate here
   #   - They have Cargo.lock in the repository
@@ -21,10 +21,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "dprint";
     repo = "dprint";
     tag = finalAttrs.version;
-    hash = "sha256-IVqHaqpoMXM1xHFCyh1lbRjKQbt7ZuX4u9Q9AoWOyWU=";
+    hash = "sha256-CV0txMWYL9s11pA59D/RCt/s8GZ9LpUqOpEhK0yOhfA=";
   };
 
-  cargoHash = "sha256-eLIkzAWt/7G73Fr2EXdVTYFd2QXqaYJvMM8SrKowbmU=";
+  cargoHash = "sha256-ca5e5wWRfMz+qCMbAUlMls8u+txcHgZ0R9dzN+dm1L4=";
 
   nativeBuildInputs = [ installShellFiles ];
 

From 7b7474c1c283855e0fc5f65d5f1a9cfdc0bfd84a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 16 Mar 2026 06:16:10 +0000
Subject: [PATCH 44/52] s7: 11.7-unstable-2026-03-07 ->
 11.7-unstable-2026-03-14

---
 pkgs/by-name/s7/s7/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/s7/s7/package.nix b/pkgs/by-name/s7/s7/package.nix
index 3516898c3ea1..aa446dccc044 100644
--- a/pkgs/by-name/s7/s7/package.nix
+++ b/pkgs/by-name/s7/s7/package.nix
@@ -26,14 +26,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "s7";
-  version = "11.7-unstable-2026-03-07";
+  version = "11.7-unstable-2026-03-14";
 
   src = fetchFromGitLab {
     domain = "cm-gitlab.stanford.edu";
     owner = "bil";
     repo = "s7";
-    rev = "5dfb990344f8edb463591e2e444daa1e004eb25f";
-    hash = "sha256-XFzhMWfzQXrA87zioes+MzHjLnu+wseQTWJCPORkoU8=";
+    rev = "18e645b614e053482a8721a0c84c4621586a1676";
+    hash = "sha256-8FGb12BSKZkx9oKg2D2udP7j4V9ZLAhVtWICIDSp7v0=";
   };
 
   buildInputs =

From a9618c281f617bc58bce0007128e983b483b74e3 Mon Sep 17 00:00:00 2001
From: Sizhe Zhao <sizhez@nvidia.com>
Date: Mon, 16 Mar 2026 14:42:19 +0800
Subject: [PATCH 45/52] limine: 10.8.3 -> 10.8.5

---
 pkgs/by-name/li/limine/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/li/limine/package.nix b/pkgs/by-name/li/limine/package.nix
index 51215c80a32f..6ca86582dd98 100644
--- a/pkgs/by-name/li/limine/package.nix
+++ b/pkgs/by-name/li/limine/package.nix
@@ -47,14 +47,14 @@ in
 # as bootloader for various platforms and corresponding binary and helper files.
 stdenv.mkDerivation (finalAttrs: {
   pname = "limine";
-  version = "10.8.3";
+  version = "10.8.5";
 
   # We don't use the Git source but the release tarball, as the source has a
   # `./bootstrap` script performing network access to download resources.
   # Packaging that in Nix is very cumbersome.
   src = fetchurl {
     url = "https://codeberg.org/Limine/Limine/releases/download/v${finalAttrs.version}/limine-${finalAttrs.version}.tar.gz";
-    hash = "sha256-6MAlspPwPIdHbhAOPufUASckRFcuBA2c6HwyKw8DQpo=";
+    hash = "sha256-+56yc0JYpq/TXxKdrCnASHm5bSkwr5QPSWC+ILMDPs4=";
   };
 
   enableParallelBuilding = true;

From d6442891db30bfb1875550db08ff434129f3afc0 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 16 Mar 2026 06:52:26 +0000
Subject: [PATCH 46/52] all-the-package-names: 2.0.2379 -> 2.0.2387

---
 pkgs/by-name/al/all-the-package-names/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/al/all-the-package-names/package.nix b/pkgs/by-name/al/all-the-package-names/package.nix
index 245c9e1cf03b..8968c3d98c7f 100644
--- a/pkgs/by-name/al/all-the-package-names/package.nix
+++ b/pkgs/by-name/al/all-the-package-names/package.nix
@@ -7,16 +7,16 @@
 
 buildNpmPackage rec {
   pname = "all-the-package-names";
-  version = "2.0.2379";
+  version = "2.0.2387";
 
   src = fetchFromGitHub {
     owner = "nice-registry";
     repo = "all-the-package-names";
     tag = "v${version}";
-    hash = "sha256-W1c0xFm6ZIpykfMegmc3PAX8X1SNhSpsN37ZhXn4424=";
+    hash = "sha256-0DuHzZdPjzoUXGgn7Kt7CGjvNXuYYAZqpuuQS86ECXM=";
   };
 
-  npmDepsHash = "sha256-3sWgNa6ez5lZHQj6tThxXTYVpkDXHulb7mkiqVVyTlg=";
+  npmDepsHash = "sha256-CzWF/CbyVGGogeEFQOjldBWGP98q4q/x/KukAE4EJPo=";
 
   passthru.updateScript = nix-update-script { };
 

From 1fddf86f601f8771badcb347eee4d4962116a447 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 16 Mar 2026 06:55:28 +0000
Subject: [PATCH 47/52] python3Packages.llama-index-readers-json: 0.4.2 ->
 0.5.0

---
 .../python-modules/llama-index-readers-json/default.nix       | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/llama-index-readers-json/default.nix b/pkgs/development/python-modules/llama-index-readers-json/default.nix
index b24bfc9b9822..e0dc3078edc3 100644
--- a/pkgs/development/python-modules/llama-index-readers-json/default.nix
+++ b/pkgs/development/python-modules/llama-index-readers-json/default.nix
@@ -8,13 +8,13 @@
 
 buildPythonPackage rec {
   pname = "llama-index-readers-json";
-  version = "0.4.2";
+  version = "0.5.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "llama_index_readers_json";
     inherit version;
-    hash = "sha256-ggwpTUnfP1aZhAyZ1wTsoNpW52dt0y5/59JT6RSUMNQ=";
+    hash = "sha256-315Uzbm3CuRJQpAwnrLxQ6zr0e1pCmM3JKMV6KhrEs8=";
   };
 
   build-system = [ hatchling ];

From f956974d2fc94684bb3118e2e0b4b12a0d58aac3 Mon Sep 17 00:00:00 2001
From: superherointj <sergiomarcelo@ya.ru>
Date: Mon, 16 Mar 2026 04:17:37 -0300
Subject: [PATCH 48/52] opencode: 1.2.26 -> 1.2.27

Release: https://github.com/anomalyco/opencode/releases/tag/v1.2.27
---
 pkgs/by-name/op/opencode/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/op/opencode/package.nix b/pkgs/by-name/op/opencode/package.nix
index 167dbb8970c1..eeb9c0c9046b 100644
--- a/pkgs/by-name/op/opencode/package.nix
+++ b/pkgs/by-name/op/opencode/package.nix
@@ -14,12 +14,12 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "opencode";
-  version = "1.2.26";
+  version = "1.2.27";
   src = fetchFromGitHub {
     owner = "anomalyco";
     repo = "opencode";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-+bQEfrqv9tAmXUMcvyUM0hJGpXgt09IWoKYt8I/jBlU=";
+    hash = "sha256-JUlFfILzcUCME3mOxdxDbcCXphNVEfVGIKhwAwtJPl8=";
   };
 
   node_modules = stdenvNoCC.mkDerivation {

From 0a7e6486342d825a110e5da28f3f606fedca3eb0 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 16 Mar 2026 07:45:50 +0000
Subject: [PATCH 49/52] nuclei-templates: 10.3.9 -> 10.4.0

---
 pkgs/by-name/nu/nuclei-templates/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/nu/nuclei-templates/package.nix b/pkgs/by-name/nu/nuclei-templates/package.nix
index cd2c676bca30..3017c65cd548 100644
--- a/pkgs/by-name/nu/nuclei-templates/package.nix
+++ b/pkgs/by-name/nu/nuclei-templates/package.nix
@@ -6,13 +6,13 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "nuclei-templates";
-  version = "10.3.9";
+  version = "10.4.0";
 
   src = fetchFromGitHub {
     owner = "projectdiscovery";
     repo = "nuclei-templates";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ORKHxs2IdbQIc668A23BKkz3lPUodBEwI07dNfxLuDk=";
+    hash = "sha256-XhzaBVNIKJ5khNNER69tqBYCMzc7G+pDiibgyNRWwEA=";
   };
 
   installPhase = ''

From 8690f4bc167ee506ac1edbffe68f92a25e9e73c0 Mon Sep 17 00:00:00 2001
From: Philip Munksgaard <philip@munksgaard.me>
Date: Mon, 2 Feb 2026 11:32:44 +0100
Subject: [PATCH 50/52] pi-coding-agent: init at 0.58.3

Pi is a minimal terminal coding harness.

Read more [here](https://shittycodingagent.ai/) and
[here](https://github.com/badlogic/pi-mono/tree/main/packages/coding-agent).
---
 pkgs/by-name/pi/pi-coding-agent/package.nix | 93 +++++++++++++++++++++
 1 file changed, 93 insertions(+)
 create mode 100644 pkgs/by-name/pi/pi-coding-agent/package.nix

diff --git a/pkgs/by-name/pi/pi-coding-agent/package.nix b/pkgs/by-name/pi/pi-coding-agent/package.nix
new file mode 100644
index 000000000000..de44ccb6e0c7
--- /dev/null
+++ b/pkgs/by-name/pi/pi-coding-agent/package.nix
@@ -0,0 +1,93 @@
+{
+  lib,
+  buildNpmPackage,
+  fetchFromGitHub,
+  typescript-go,
+  nix-update-script,
+  versionCheckHook,
+  writableTmpDirAsHomeHook,
+  ripgrep,
+  makeBinaryWrapper,
+}:
+buildNpmPackage (finalAttrs: {
+  pname = "pi-coding-agent";
+  version = "0.58.3";
+
+  src = fetchFromGitHub {
+    owner = "badlogic";
+    repo = "pi-mono";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-3GrE60n+EY5G50iRrbH7R74e+LQIy1M9+huZTp0ZTns=";
+  };
+
+  npmDepsHash = "sha256-EC5fXZTtBTRkYXLg5p4xWE/ghi2iw30XwnSqJs/PT8I=";
+
+  npmWorkspace = "packages/coding-agent";
+
+  # Skip native module rebuild for unneeded workspaces (e.g. canvas from web-ui)
+  npmRebuildFlags = [ "--ignore-scripts" ];
+
+  nativeBuildInputs = [
+    typescript-go
+    makeBinaryWrapper
+  ];
+
+  # Build workspace dependencies in order, then the coding-agent.
+  # We invoke tsgo directly for workspace deps to skip pi-ai's
+  # generate-models script which requires network access
+  # (models.generated.ts is committed to the repo).
+  buildPhase = ''
+    runHook preBuild
+
+    tsgo -p packages/ai/tsconfig.build.json
+    tsgo -p packages/tui/tsconfig.build.json
+    tsgo -p packages/agent/tsconfig.build.json
+    npm run build --workspace=packages/coding-agent
+
+    runHook postBuild
+  '';
+
+  # npm workspace symlinks in the output point into packages/ which
+  # doesn't exist there. Replace runtime deps with built content and
+  # delete the rest.
+  postInstall = ''
+    local nm="$out/lib/node_modules/pi-monorepo/node_modules"
+
+    # Replace workspace deps needed at runtime with real copies
+    for ws in @mariozechner/pi-ai:packages/ai \
+              @mariozechner/pi-agent-core:packages/agent \
+              @mariozechner/pi-tui:packages/tui; do
+      IFS=: read -r pkg src <<< "$ws"
+      rm "$nm/$pkg"
+      cp -r "$src" "$nm/$pkg"
+    done
+
+    # Delete remaining workspace symlinks
+    find "$nm" -type l -lname '*/packages/*' -delete
+
+    # Clean up now-dangling .bin symlinks
+    find "$nm/.bin" -xtype l -delete
+  '';
+  postFixup = "wrapProgram $out/bin/pi --prefix PATH : ${lib.makeBinPath [ ripgrep ]}";
+
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [
+    writableTmpDirAsHomeHook
+    versionCheckHook
+  ];
+  versionCheckKeepEnvironment = [ "HOME" ];
+  versionCheckProgram = "${placeholder "out"}/bin/pi";
+  versionCheckProgramArg = "--version";
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Coding agent CLI with read, bash, edit, write tools and session management";
+    homepage = "https://shittycodingagent.ai/";
+    downloadPage = "https://www.npmjs.com/package/@mariozechner/pi-coding-agent";
+    changelog = "https://github.com/badlogic/pi-mono/blob/main/packages/coding-agent/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ munksgaard ];
+    mainProgram = "pi";
+  };
+})

From 5fa0701cd7e35713d3ce8022869544703256de18 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 16 Mar 2026 08:20:53 +0000
Subject: [PATCH 51/52] retool: 2.4.8 -> 2.4.9

---
 pkgs/by-name/re/retool/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/re/retool/package.nix b/pkgs/by-name/re/retool/package.nix
index 41fbdafbb80b..abd6a6b9fd37 100644
--- a/pkgs/by-name/re/retool/package.nix
+++ b/pkgs/by-name/re/retool/package.nix
@@ -8,14 +8,14 @@
 
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "retool";
-  version = "2.4.8";
+  version = "2.4.9";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "unexpectedpanda";
     repo = "retool";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-SSSHYwQtDtCONvM5Ze3G5JJ4TW5aCziS3EbxhliXx+g=";
+    hash = "sha256-FVBqmhU7nZpoFJSZBCtkmkcSLCAysNgwzOYyOwfOuGA=";
   };
 
   pythonRelaxDeps = true;

From 87f75aa5c77f7d417870f2c12258f026f3c179c7 Mon Sep 17 00:00:00 2001
From: Niklas Korz <niklas@niklaskorz.de>
Date: Mon, 16 Mar 2026 10:03:54 +0100
Subject: [PATCH 52/52] vulkan-caps-viewer: add maintainer niklaskorz

---
 pkgs/by-name/vu/vulkan-caps-viewer/package.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/vu/vulkan-caps-viewer/package.nix b/pkgs/by-name/vu/vulkan-caps-viewer/package.nix
index 343bac772af3..97aa395e7692 100644
--- a/pkgs/by-name/vu/vulkan-caps-viewer/package.nix
+++ b/pkgs/by-name/vu/vulkan-caps-viewer/package.nix
@@ -88,7 +88,10 @@ stdenv.mkDerivation (finalAttrs: {
     homepage = "https://vulkan.gpuinfo.org/";
     platforms = lib.platforms.unix;
     license = lib.licenses.lgpl3Only;
-    maintainers = with lib.maintainers; [ pedrohlc ];
+    maintainers = with lib.maintainers; [
+      pedrohlc
+      niklaskorz
+    ];
     changelog = "https://github.com/SaschaWillems/VulkanCapsViewer/releases/tag/${finalAttrs.version}";
   };
 })