Merge master into staging-next

2025-10-26 00:17:57 +00:00
parent 95edee5cb6 e32661f795
commit 42e6bbbca3
112 changed files with 1039 additions and 870 deletions
@@ -351,16 +351,32 @@

 ### Breaking changes {#sec-nixpkgs-release-25.11-lib-breaking}

+- `lib.literalExample` has been removed, use `lib.literalExpression` instead, or use `lib.literalMD` for a non-Nix description.
+
+- `lib.replaceChars` has been removed, it was a deprecated alias of `lib.replaceStrings`.
+
+- `lib.readPathsFromFile` has been removed, use a list instead
+
 - `lib.mapAttrsFlatten` has been removed, following its deprecation in NixOS 24.11. Use `lib.attrsets.mapAttrsToList` instead.

+- `lib.strings.isCoercibleToString` has been in favor of either `lib.strings.isStringLike` or `lib.strings.isConvertibleWithToString`. Only use the latter if it needs to return true for null, numbers, booleans, or a list of those.
+
+- `lib.types.string` has been removed. See [this pull request](https://github.com/NixOS/nixpkgs/pull/66346) for better alternative types like `lib.types.str`.
+
+- `lib.modules.defaultPriority` has been removed, please use `lib.modules.defaultOverridePriority` instead.
+
 - `lib.attrsets.cartesianProductOfSets` has been removed, following its deprecation in NixOS 24.11. Use `lib.attrsets.cartesianProduct` instead.

+- `lib.sources.pathType`, `lib.sources.pathIsDirectory` and `lib.sources.pathIsRegularFile` have been replaced by `lib.filesystem.pathType`, `lib.filesystem.pathIsDirectory` and `lib.filesystem.pathIsRegularFile` respectively.
+
 - `lib.attrsets.zip` has been removed, following its deprecation in 2013. Use `lib.attrsets.zipAttrsWith` instead.

 - `lib.attrsets.zipWithNames` has been removed, following its deprecation in 2009. Use `lib.attrsets.zipAttrsWithNames` instead.

 - `lib.options.mkPackageOptionMD` has been removed, following its deprecation in NixOS 24.11. Use `lib.options.mkPackageOption` instead.

+- `haskell.lib.addOptparseApplicativeCompletionScripts` has been removed, use `haskellPackages.generateOptparseApplicativeCompletions` instead.
+
 - The `buildPythonPackage` and `buildPythonApplication` functions now require
  an explicit `format` attribute. Previously the default format used setuptools
  and called `setup.py` from the source tree, which is deprecated.
@@ -22,7 +22,6 @@ let
    filterAttrs
    optionalString
    flip
-    pathIsDirectory
    head
    pipe
    isDerivation
@@ -344,7 +344,6 @@ let
        escapeRegex
        escapeURL
        escapeXML
-        replaceChars
        lowerChars
        upperChars
        toLower
@@ -377,7 +376,6 @@ let
        fixedWidthNumber
        toInt
        toIntBase10
-        readPathsFromFile
        fileContents
        ;
      inherit (self.stringsWithDeps)
@@ -495,7 +493,6 @@ let
        optionAttrSetToDocList'
        scrubOptionValue
        literalExpression
-        literalExample
        showOption
        showOptionWithDefLocs
        showFiles
@@ -1468,11 +1468,6 @@ let
  mkForce = mkOverride 50;
  mkVMOverride = mkOverride 10; # used by ‘nixos-rebuild build-vm’

-  defaultPriority =
-    warnIf (oldestSupportedReleaseIsAtLeast 2305)
-      "lib.modules.defaultPriority is deprecated, please use lib.modules.defaultOverridePriority instead."
-      defaultOverridePriority;
-
  mkFixStrictness = warn "lib.mkFixStrictness has no effect and will be removed. It returns its argument unmodified, so you can just remove any calls." id;

  mkOrder = priority: content: {
@@ -2162,7 +2157,6 @@ private
  inherit
    defaultOrderPriority
    defaultOverridePriority
-    defaultPriority
    doRename
    evalModules
    evalOptionValue # for use by lib.types
@@ -684,8 +684,6 @@ rec {
        inherit text;
      };

-  literalExample = lib.warn "lib.literalExample is deprecated, use lib.literalExpression instead, or use lib.literalMD for a non-Nix description." literalExpression;
-
  /**
    For use in the `defaultText` and `example` option attributes. Causes the
    given MD text to be inserted verbatim in the documentation, for when
@@ -509,22 +509,6 @@ let

 in
 {
-
-  pathType =
-    lib.warnIf (lib.oldestSupportedReleaseIsAtLeast 2305)
-      "lib.sources.pathType has been moved to lib.filesystem.pathType."
-      lib.filesystem.pathType;
-
-  pathIsDirectory =
-    lib.warnIf (lib.oldestSupportedReleaseIsAtLeast 2305)
-      "lib.sources.pathIsDirectory has been moved to lib.filesystem.pathIsDirectory."
-      lib.filesystem.pathIsDirectory;
-
-  pathIsRegularFile =
-    lib.warnIf (lib.oldestSupportedReleaseIsAtLeast 2305)
-      "lib.sources.pathIsRegularFile has been moved to lib.filesystem.pathIsRegularFile."
-      lib.filesystem.pathIsRegularFile;
-
  inherit
    pathIsGitRepo
    commitIdFromGitRepo
@@ -1467,9 +1467,6 @@ rec {
      [ "\"" "'" "<" ">" "&" ]
      [ "&quot;" "&apos;" "&lt;" "&gt;" "&amp;" ];

-  # warning added 12-12-2022
-  replaceChars = lib.warn "lib.replaceChars is a deprecated alias of lib.replaceStrings." builtins.replaceStrings;
-
  # Case conversion utilities.
  lowerChars = stringToCharacters "abcdefghijklmnopqrstuvwxyz";
  upperChars = stringToCharacters "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
@@ -2578,30 +2575,6 @@ rec {
    in
    lib.warnIf (!precise) "Imprecise conversion from float to string ${result}" result;

-  /**
-    Check whether a value `val` can be coerced to a string.
-
-    :::{.warning}
-    Soft-deprecated function. While the original implementation is available as
-    `isConvertibleWithToString`, consider using `isStringLike` instead, if suitable.
-    :::
-
-    # Inputs
-
-    `val`
-    : 1\. Function argument
-
-    # Type
-
-    ```
-    isCoercibleToString :: a -> bool
-    ```
-  */
-  isCoercibleToString =
-    lib.warnIf (lib.oldestSupportedReleaseIsAtLeast 2305)
-      "lib.strings.isCoercibleToString is deprecated in favor of either isStringLike or isConvertibleWithToString. Only use the latter if it needs to return true for null, numbers, booleans and list of similarly coercibles."
-      isConvertibleWithToString;
-
  /**
    Check whether a list or other value `x` can be passed to toString.

@@ -2842,60 +2815,6 @@ rec {
    else
      parsedInput;

-  /**
-    Read a list of paths from `file`, relative to the `rootPath`.
-    Lines beginning with `#` are treated as comments and ignored.
-    Whitespace is significant.
-
-    :::{.warning}
-    This function is deprecated and should be avoided.
-    :::
-
-    :::{.note}
-    This function is not performant and should be avoided.
-    :::
-
-    # Inputs
-
-    `rootPath`
-    : 1\. Function argument
-
-    `file`
-    : 2\. Function argument
-
-    # Type
-
-    ```
-    readPathsFromFile :: string -> string -> [string]
-    ```
-
-    # Examples
-    :::{.example}
-    ## `lib.strings.readPathsFromFile` usage example
-
-    ```nix
-    readPathsFromFile /prefix
-      ./pkgs/development/libraries/qt-5/5.4/qtbase/series
-    => [ "/prefix/dlopen-resolv.patch" "/prefix/tzdir.patch"
-         "/prefix/dlopen-libXcursor.patch" "/prefix/dlopen-openssl.patch"
-         "/prefix/dlopen-dbus.patch" "/prefix/xdg-config-dirs.patch"
-         "/prefix/nix-profiles-library-paths.patch"
-         "/prefix/compose-search-path.patch" ]
-    ```
-
-    :::
-  */
-  readPathsFromFile = lib.warn "lib.readPathsFromFile is deprecated, use a list instead." (
-    rootPath: file:
-    let
-      lines = lib.splitString "\n" (readFile file);
-      removeComments = lib.filter (line: line != "" && !(lib.hasPrefix "#" line));
-      relativePaths = removeComments lines;
-      absolutePaths = map (path: rootPath + "/${path}") relativePaths;
-    in
-    absolutePaths
-  );
-
  /**
    Read the contents of a file removing the trailing \n

@@ -380,7 +380,7 @@ in
      assert (pathWith { absolute = null; }).description == "path";
      assert (pathWith { inStore = false; }).description == "path not in the Nix store";
      assert (pathWith { inStore = null; }).description == "path";
-      assert (separatedString "").description == "Concatenated string";
+      assert (separatedString "").description == "strings concatenated with \"\"";
      assert (separatedString ",").description == "strings concatenated with \",\"";
      assert (separatedString "\n").description == ''strings concatenated with "\n"'';
      assert (separatedString ":").description == "strings concatenated with \":\"";
@@ -559,11 +559,7 @@ let
        sep:
        mkOptionType rec {
          name = "separatedString";
-          description =
-            if sep == "" then
-              "Concatenated string" # for types.string.
-            else
-              "strings concatenated with ${builtins.toJSON sep}";
+          description = "strings concatenated with ${builtins.toJSON sep}";
          descriptionClass = "noun";
          check = isString;
          merge = loc: defs: concatStringsSep sep (getValues defs);
@@ -578,19 +574,6 @@ let
      commas = separatedString ",";
      envVar = separatedString ":";

-      # Deprecated; should not be used because it quietly concatenates
-      # strings, which is usually not what you want.
-      # We use a lib.warn because `deprecationMessage` doesn't trigger in nested types such as `attrsOf string`
-      string =
-        lib.warn
-          "The type `types.string` is deprecated. See https://github.com/NixOS/nixpkgs/pull/66346 for better alternative types."
-          (
-            separatedString ""
-            // {
-              name = "string";
-            }
-          );
-
      passwdEntry =
        entryType:
        addCheck entryType (str: !(hasInfix ":" str || hasInfix "\n" str))
@@ -13,18 +13,16 @@ in
  options = {
    programs.coolercontrol = {
      enable = lib.mkEnableOption "CoolerControl GUI & its background services";
-
-      nvidiaSupport = lib.mkOption {
-        type = lib.types.bool;
-        default = lib.elem "nvidia" config.services.xserver.videoDrivers;
-        defaultText = lib.literalExpression "lib.elem \"nvidia\" config.services.xserver.videoDrivers";
-        description = ''
-          Enable support for Nvidia GPUs.
-        '';
-      };
    };
  };

+  imports = [
+    # Added 2025-10-25
+    (lib.mkRemovedOptionModule [ "programs" "coolercontrol" "nvidiaSupport" ] ''
+      This option is deprecated as Nvidia drivers are automatically loaded at runtime.
+    '')
+  ];
+
  ##### implementation
  config = lib.mkIf cfg.enable (
    lib.mkMerge [
@@ -47,18 +45,6 @@ in
          };
        };
      }
-
-      # Nvidia support
-      (lib.mkIf cfg.nvidiaSupport {
-        systemd.services.coolercontrold.path =
-          let
-            nvidiaPkg = config.hardware.nvidia.package;
-          in
-          [
-            nvidiaPkg # nvidia-smi
-            nvidiaPkg.settings # nvidia-settings
-          ];
-      })
    ]
  );

@@ -16,7 +16,7 @@ let
    mkOption
    mkPackageOption
    optionalString
-    replaceChars
+    replaceStrings
    substring
    toLower
    types
@@ -142,7 +142,7 @@ in
              description = "The model used by `pay-respects` to generate command corrections.";
            };
            locale = mkOption {
-              default = toLower (replaceChars [ "_" ] [ "-" ] (substring 0 5 config.i18n.defaultLocale));
+              default = toLower (replaceStrings [ "_" ] [ "-" ] (substring 0 5 config.i18n.defaultLocale));
              example = "nl-be";
              type = str;
              description = ''
@@ -13822,6 +13822,19 @@ final: prev: {
    meta.hydraPlatforms = [ ];
  };

+  showkeys = buildVimPlugin {
+    pname = "showkeys";
+    version = "2025-05-24";
+    src = fetchFromGitHub {
+      owner = "nvzone";
+      repo = "showkeys";
+      rev = "cb0a50296f11f1e585acffba8c253b9e8afc1f84";
+      sha256 = "1cvgfxvi5l753hn9ijzbb8x9bi2n12gd6n9j8lcvcq9xv43d4zws";
+    };
+    meta.homepage = "https://github.com/nvzone/showkeys/";
+    meta.hydraPlatforms = [ ];
+  };
+
  sidekick-nvim = buildVimPlugin {
    pname = "sidekick.nvim";
    version = "2025-10-20";
@@ -12,12 +12,12 @@
  pkgs,
 }:
 let
-  version = "0.0.27-unstable-2025-10-18";
+  version = "0.0.27-unstable-2025-10-22";
  src = fetchFromGitHub {
    owner = "yetone";
    repo = "avante.nvim";
-    rev = "cc7a41262e4dc38003b7578c3553a75c0ec4b8d2";
-    hash = "sha256-L6fOo3OPfMtClmyGW1Bn7YDJtuTKO6F66D1oYsii5so=";
+    rev = "164a86db6e5da78bc42310691a26b22d0763ceca";
+    hash = "sha256-hNKkb0PdKPC2m1a0stgCkAxk2P4uL8WiqiGpOY79Efo=";
  };
  avante-nvim-lib = rustPlatform.buildRustPackage {
    pname = "avante-nvim-lib";
@@ -1061,6 +1061,7 @@ https://github.com/jaxbot/semantic-highlight.vim/,,
 https://github.com/numirias/semshi/,,
 https://github.com/junegunn/seoul256.vim/,,
 https://github.com/osyo-manga/shabadou.vim/,,
+https://github.com/nvzone/showkeys/,HEAD,
 https://github.com/folke/sidekick.nvim/,HEAD,
 https://github.com/AndrewRadev/sideways.vim/,,
 https://github.com/skim-rs/skim.vim/,,
@@ -11,7 +11,6 @@
  udev,
  zlib,
 }:
-
 mkDerivation rec {
  pname = "openambit";
  version = "0.5";
@@ -33,6 +32,20 @@ mkDerivation rec {
    })
  ];

+  postPatch = ''
+    substituteInPlace CMakeLists.txt \
+      --replace-fail 'cmake_minimum_required(VERSION 3.0)' 'cmake_minimum_required(VERSION 3.10)'
+
+    substituteInPlace src/libambit/CMakeLists.txt \
+      --replace-fail 'cmake_minimum_required (VERSION 3.1.3)' 'cmake_minimum_required(VERSION 3.10)'
+
+    substituteInPlace src/movescount/CMakeLists.txt \
+      --replace-fail 'cmake_minimum_required(VERSION 2.8.5)' 'cmake_minimum_required(VERSION 3.10)'
+
+    substituteInPlace src/openambit/CMakeLists.txt \
+      --replace-fail 'cmake_minimum_required(VERSION 2.8.5)' 'cmake_minimum_required(VERSION 3.10)'
+  '';
+
  nativeBuildInputs = [
    cmake
    qttools
@@ -14,16 +14,16 @@ builtins.mapAttrs
    }:
    buildGoModule rec {
      inherit pname;
-      version = "3.30.3";
+      version = "3.30.4";

      src = fetchFromGitHub {
        owner = "projectcalico";
        repo = "calico";
        rev = "v${version}";
-        hash = "sha256-Z2kYUak/zzO0IsKQyQ6sb3UD4QUZ9+9vGGVfl4qdPF8=";
+        hash = "sha256-WhEdSmJxTLOYke7Jszca+P7dWCLs9tZF074Okl4vDpw=";
      };

-      vendorHash = "sha256-C9sge+xNTsW30PF2wJhRUNI1YEmXInD+xcboCtcC9kc=";
+      vendorHash = "sha256-W+rHPYCuP9rK/f8yYutP4Cac8cJ6XKtoVAxCeqPtpsM=";

      inherit doCheck subPackages;

@@ -21,13 +21,16 @@ stdenv.mkDerivation (finalAttrs: {
    "hadoop-${finalAttrs.version}-src/hadoop-yarn-project/hadoop-yarn/"
    + "hadoop-yarn-server/hadoop-yarn-server-nodemanager/src";

+  postPatch = ''
+    sed -i -r 's/(cmake_minimum_required\(VERSION) [0-9.]+/\1 3.10/' CMakeLists.txt
+  '';
  nativeBuildInputs = [ cmake ];
  buildInputs = [ openssl ];
  cmakeFlags = [ "-DHADOOP_CONF_DIR=/run/wrappers/yarn-nodemanager/etc/hadoop" ];

  installPhase = ''
    mkdir $out
-    mv target/var/empty/local/bin $out/
+    mv target/usr/local/bin $out/
  '';

  meta = with lib; {
@@ -4,6 +4,7 @@
  libdrm,
  coolercontrol,
  runtimeShell,
+  addDriverRunpath,
 }:

 {
@@ -20,6 +21,7 @@ rustPlatform.buildRustPackage {
  cargoHash = "sha256-ZyYyQcaYd3VZ7FL0Hki33JO3LscPfBT5gl+nw2cXvUs=";

  buildInputs = [ libdrm ];
+  nativeBuildInputs = [ addDriverRunpath ];

  postPatch = ''
    # copy the frontend static resources to a directory for embedding
@@ -37,6 +39,10 @@ rustPlatform.buildRustPackage {
      --replace-fail '/usr/bin' "$out/bin"
  '';

+  postFixup = ''
+    addDriverRunpath "$out/bin/coolercontrold"
+  '';
+
  passthru.tests.version = testers.testVersion {
    package = coolercontrol.coolercontrold;
    # coolercontrold prints its version with "v" prefix
@@ -10,13 +10,13 @@

 buildLua rec {
  pname = "mpvacious";
-  version = "0.40";
+  version = "0.41";

  src = fetchFromGitHub {
    owner = "Ajatt-Tools";
    repo = "mpvacious";
    rev = "v${version}";
-    sha256 = "sha256-PxLbv9aGVQV4Gea2H/GcWv/yuaRSqBRqbzRXu612kLE=";
+    sha256 = "sha256-bOW9hKDZ+S+/MJmZHN6N5rcZ9h6/s0bSPagYV7Zc2Yo=";
  };
  passthru.updateScript = gitUpdater { rev-prefix = "v"; };

@@ -9,12 +9,12 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "adminer";
-  version = "5.4.0";
+  version = "5.4.1";

  # not using fetchFromGitHub as the git repo relies on submodules that are included in the tar file
  src = fetchurl {
    url = "https://github.com/vrana/adminer/releases/download/v${finalAttrs.version}/adminer-${finalAttrs.version}.zip";
-    hash = "sha256-n6bmvUIrIiOaNCPEA5L+frbesnircbm0mTqmWxYRpwM=";
+    hash = "sha256-+Ki46mR+E82F/spU0DBM7kWelY3zA9bdFad44HeZ5Lo=";
  };

  nativeBuildInputs = [
@@ -108,10 +108,10 @@ in
    bazelVendorDepsFOD = {
      outputHash =
        {
-          aarch64-darwin = "sha256-D5bwW35QuLLhVE22FDyV9Nl8N7ULx71wCHbzB81+Xx0=";
-          aarch64-linux = "sha256-F5X/cwtHR6sVFe1DzNDaEnGMIPR0SnXq2iIxhQeqIV8=";
-          x86_64-darwin = "sha256-DXuPy68m3p6hlgEid7tpY8fGgvJWQTXth6h2kMSNFCc=";
-          x86_64-linux = "sha256-oNLDccQ/XPg1Nl/9V14NdgiQsRoTvpaA6hyynMb414A=";
+          aarch64-darwin = "sha256-0QtaPtcBljyhiJGwA8ctSpi+UQp/9q/ZoHUHORizmlY=";
+          aarch64-linux = "sha256-zpiwQ8OB8KhY+kxSXlSOd/zmoH1VGYDGgojf4Or04pQ=";
+          x86_64-darwin = "sha256-+tCDSuYkon1DEARwWTYABJbmysSNAK9vy0tCm8YsGjQ=";
+          x86_64-linux = "sha256-wCWSRc20Yr/hdXn8szbhLAX7Oy3G5keyHTTdO0msnks=";
        }
        .${stdenv.hostPlatform.system};
      outputHashAlgo = "sha256";
@@ -31,7 +31,7 @@
  cctools,
  # Allow to independently override the jdks used to build and run respectively
  jdk_headless,
-  version ? "8.4.1",
+  version ? "8.4.2",
 }:

 let
@@ -45,7 +45,7 @@ let

  src = fetchzip {
    url = "https://github.com/bazelbuild/bazel/releases/download/${version}/bazel-${version}-dist.zip";
-    hash = "sha256-DqJqW7C1QODOS+vJrs/+ixsP3coZh80VdpPM4g0vxFI=";
+    hash = "sha256-5oNYKHPaDkpunl6oC104Rh1wAEMWfLfvCFdGHlXZn4o=";
    stripRoot = false;
  };

@@ -144,9 +144,7 @@ stdenv.mkDerivation rec {
    # Nixpkgs toolcahins do not support that (yet?) and get confused.
    # Also add an explicit /usr/bin prefix that will be patched below.
    (replaceVars ./patches/xcode.patch {
-      usrBinEnv = "${coreutils}/bin/env";
      clangDarwin = "${stdenv.cc}/bin/clang";
-      codesign = "${darwin.sigtool}/bin/codesign";
    })

    # Revert preference for apple_support over rules_cc toolchain for now
@@ -8,11 +8,11 @@ index b3dde1c838..a54bf8141d 100644
 
 -# Depend on apple_support first and then rules_cc so that the Xcode toolchain
 -# from apple_support wins over the generic Unix toolchain from rules_cc.
-bazel_dep(name = "apple_support", version = "1.18.1")
+-bazel_dep(name = "apple_support", version = "1.23.1")
 +# Not Depend on apple_support first and then rules_cc so that the Xcode toolchain
 +# from apple_support not wins over the generic Unix toolchain from rules_cc.
 bazel_dep(name = "rules_cc", version = "0.1.1")
-+bazel_dep(name = "apple_support", version = "1.18.1")
+bazel_dep(name = "apple_support", version = "1.23.1")
 
 # repo_name needs to be used, until WORKSPACE mode is to be supported in bazel_tools
 bazel_dep(name = "protobuf", version = "29.0", repo_name = "com_google_protobuf")
@@ -12,20 +12,16 @@ index 1bad14cba7..d312fe08bb 100755
   cp tools/osx/xcode_locator_stub.sh ${ARCHIVE_DIR}/xcode-locator
 fi
 diff --git a/tools/osx/BUILD b/tools/osx/BUILD
-index 0358fb0ffe..1e6eae1f33 100644
+index 5b99589ad4..3d3269772b 100644
 --- a/tools/osx/BUILD
 +++ b/tools/osx/BUILD
-@@ -27,9 +27,9 @@ exports_files([
+@@ -27,7 +27,7 @@ exports_files([
 ])
 
 DARWIN_XCODE_LOCATOR_COMPILE_COMMAND = """
 -  /usr/bin/xcrun --sdk macosx clang -mmacosx-version-min=10.13 -fobjc-arc -framework CoreServices \
-      -framework Foundation -arch arm64 -arch x86_64 -Wl,-no_adhoc_codesign -Wl,-no_uuid -o $@ $< && \
-  env -i codesign --identifier $@ --force --sign - $@
 +  @clangDarwin@ -mmacosx-version-min=10.13 -fobjc-arc -framework CoreServices \
-+      -framework Foundation -Wl,-no_adhoc_codesign -Wl,-no_uuid -o $@ $< && \
-+  @usrBinEnv@ @codesign@ --identifier $@ --force --sign - $@
+       -framework Foundation -arch arm64 -arch x86_64 -o $@ $<
 """
 
- genrule(

@@ -1,46 +0,0 @@
-{
-  lib,
-  rustPlatform,
-  fetchFromGitHub,
-  pkg-config,
-  openssl,
-}:
-
-rustPlatform.buildRustPackage rec {
-  pname = "bindle";
-  version = "0.9.1";
-
-  src = fetchFromGitHub {
-    owner = "deislabs";
-    repo = "bindle";
-    rev = "v${version}";
-    sha256 = "sha256-xehn74fqP0tEtP4Qy9TRGv+P2QoHZLxRHzGoY5cQuv0=";
-  };
-
-  postPatch = ''
-    rm .cargo/config
-  '';
-
-  doCheck = false; # Tests require a network
-
-  nativeBuildInputs = [ pkg-config ];
-  buildInputs = [ openssl ];
-
-  cargoHash = "sha256-cTgR1yp6TFwotm5VEG5e0O7R1zCMbQmcH2zmRmF7cjI=";
-
-  cargoBuildFlags = [
-    "--bin"
-    "bindle"
-    "--bin"
-    "bindle-server"
-    "--all-features"
-  ];
-
-  meta = with lib; {
-    description = "Object Storage for Collections";
-    homepage = "https://github.com/deislabs/bindle";
-    license = licenses.asl20;
-    maintainers = [ ];
-    platforms = platforms.unix;
-  };
-}
@@ -16,52 +16,52 @@ let
  phpMajor = lib.versions.majorMinor php.version;
  inherit (stdenv.hostPlatform) system;

-  version = "1.92.42";
+  version = "1.92.48";

  hashes = {
    "x86_64-linux" = {
      system = "amd64";
      hash = {
-        "8.1" = "sha256-vj/Z7fGQqUfWOpCi2TV4tiu2LCdTPhUJXeinL09LgeM=";
-        "8.2" = "sha256-K1h0fH9PH/LT+8EecJ0GTJxpuc4hszG9mbcvNc/6bEs=";
-        "8.3" = "sha256-U0meas8ZMPnlDuMsMoGLYBZsRBrrSmTSuryhFRmzZ/4=";
-        "8.4" = "sha256-znvTd6QR+rfRQG1w0SEWgEDxzBWiVWOf7VH25b2Sryo=";
+        "8.1" = "sha256-QrZxLPpybFhx07zaorbziEumcTFhPvcr7Jp+YPev978=";
+        "8.2" = "sha256-tdKr+LWQVC1yFUpJeUMDXbADNf5YEDbtFQaKDDBPH5g=";
+        "8.3" = "sha256-1Bix9VvBj2fJxFrLe3oQgOoWUw56yBOBgHr5TFVy/kM=";
+        "8.4" = "sha256-WAPBF6WC2zjE8lcs+oYlDc4uw9AL3xh74BwthTGWRR0=";
      };
    };
    "i686-linux" = {
      system = "i386";
      hash = {
-        "8.1" = "sha256-B2FcYKVz4sDSUlI5QifUCbX7XZME2XqaAhUVnHH+C2s=";
-        "8.2" = "sha256-k6C7Wl9O0icBQjYOjO0Hy0NitKbM9TOxTV0F4OM04LQ=";
-        "8.3" = "sha256-4EaRYLJ1I7oH0Ux1/IrOD67iWVKx9GU1uMVUA0AwrRk=";
-        "8.4" = "sha256-aNcl27Do6NoCuUHiFeDwTSVU1m0imxrMR+yiyq7/owQ=";
+        "8.1" = "sha256-sVvlvZU1orXVcoL//6LREjKoolBMYCbp1kdLGmu2n5A=";
+        "8.2" = "sha256-+ki66xW3g/LB2gtkb2RR3NOQa53ni+ZwcyMMz9sAPlY=";
+        "8.3" = "sha256-OyljLCFUyrdKh11760t9KdqJ4PX2dVYNEL09xJZed3Q=";
+        "8.4" = "sha256-QH8vFkFDGyR+MaSX5cVfxPN8MOfyAuWhMKVfqPUhjnk=";
      };
    };
    "aarch64-linux" = {
      system = "arm64";
      hash = {
-        "8.1" = "sha256-5PcD4HnlZmgkP+fsZhBaDGbDQCoQ/Om3om3cpouTF8s=";
-        "8.2" = "sha256-wIa2Yv4q0d3jtNvMAFTq8d3Gznl88uhqyvCBtwJtMkY=";
-        "8.3" = "sha256-Fwhv7rVGsmXFcBR5E17S4tt1mEzYlxbzaz996sqbwxs=";
-        "8.4" = "sha256-ftsKeJ/TOJAavNt8VGSzJR+Bo/KcW+o5Dym2flbHxag=";
+        "8.1" = "sha256-1mgubWu32VjdoQSzHrdpGOBeh0cwPUwplMg4KlZZT0o=";
+        "8.2" = "sha256-7xc4lLE6ZHUstFxTWQ9ACdGuM+gk5oDGvKwFew65Mpk=";
+        "8.3" = "sha256-yBSSEb6clcn01Jl3rsVrak5xaOgYq8NuWE/m+hwtzxY=";
+        "8.4" = "sha256-+YdfU0t9r1rqK0FYKkZYvJXSFscmSZqn59mpEYBdgck=";
      };
    };
    "aarch64-darwin" = {
      system = "arm64";
      hash = {
-        "8.1" = "sha256-MR4Icjufw5dSxRKv1gJPP38Vow+PZp2/OofKOGkr/Nk=";
-        "8.2" = "sha256-RRwF0NKhGxZH0SNOGzr2eVg6ZDDThNgd9HBgv+Q9wCw=";
-        "8.3" = "sha256-91uv7sxf19+12/Rja1SehbIKBiE+teZv+F0lOi7KUEQ=";
-        "8.4" = "sha256-v4SnkF4DtPpB5TBiSnJYJs+KRI5IpIcKeQECVCrkdLw=";
+        "8.1" = "sha256-xadHLt5wwbjYVFPJ85Crim2jwpCFIB3u3UrKguo5dKs=";
+        "8.2" = "sha256-yypsjRm5wQFWpnxwki0ySmabhW4OnRuxghCgF3g/gC8=";
+        "8.3" = "sha256-xbZnN0FAMSb5PKU6UFjC60+d/Y9rINyFjrBsJpSKUhA=";
+        "8.4" = "sha256-7iX3Pa7+hxY4rKM9hfaoMJWwGC8MbYjOpSY+iP3vUhc=";
      };
    };
    "x86_64-darwin" = {
      system = "amd64";
      hash = {
-        "8.1" = "sha256-HzBzT8pTsc/iIMDcEQlb24f8EIYdhRqxKjb7FxB6OaY=";
-        "8.2" = "sha256-Tr9quIzQWmSMHpvZ18u2OoCP16CHpcbWxKyZeY4zJJM=";
-        "8.3" = "sha256-PmPxE29qwHJKSaTdoZQiJcwobkDMKMEcEB8ZZWFonb4=";
-        "8.4" = "sha256-f+Hn9yCtaDmWendB85ca4+6xd9eG3y+5tLTV7Qi9lPA=";
+        "8.1" = "sha256-CpbeEqyi/QyapWuZQI16E6cNalvRZVCmvHy2dv/RSQo=";
+        "8.2" = "sha256-v68HLqnFKm88LAMbC8VCJgdWSuW4fWCQyPm1kNgG/K4=";
+        "8.3" = "sha256-QLsyUKKbqi/1leNKqADbvsRmwe2f387tQ4NlKGiftOc=";
+        "8.4" = "sha256-hc+BxTod1UcMYIBsiC/MPE9IbNO1/q+MIU+xv6dF/YU=";
      };
    };
  };
@@ -0,0 +1,165 @@
+{
+  lib,
+  stdenv,
+  buildPackages,
+  fetchurl,
+  pkgsStatic,
+  python3,
+  docutils,
+  bzip2,
+  zlib,
+  jitterentropy,
+  darwin,
+  esdm,
+  tpm2-tss,
+  static ? stdenv.hostPlatform.isStatic, # generates static libraries *only*
+  windows,
+
+  # build ESDM RNG plugin
+  withEsdm ? false,
+  # useful, but have to disable tests for now, as /dev/tpmrm0 is not accessible
+  withTpm2 ? false,
+  policy ? null,
+}:
+
+assert lib.assertOneOf "policy" policy [
+  # no explicit policy is given. The defaults by the library are used
+  null
+  # only allow BSI approved algorithms, FFI and SHAKE for XMSS
+  "bsi"
+  # only allow NIST approved algorithms in FIPS 140
+  "fips140"
+  # only allow "modern" algorithms
+  "modern"
+];
+
+let
+  stdenv' = if static then buildPackages.libxccStdenv else stdenv;
+in
+stdenv'.mkDerivation (finalAttrs: {
+  version = "3.9.0";
+  pname = "botan";
+
+  __structuredAttrs = true;
+  enableParallelBuilding = true;
+  strictDeps = true;
+
+  outputs = [
+    "bin"
+    "out"
+    "dev"
+    "doc"
+    "man"
+  ];
+
+  src = fetchurl {
+    url = "http://botan.randombit.net/releases/Botan-${finalAttrs.version}.tar.xz";
+    hash = "sha256-jD8oS1jd1C6OQ+n6hqcSnYfqfD93aoDT2mPsIHIrCIM=";
+  };
+
+  nativeBuildInputs = [
+    python3
+    docutils
+  ];
+
+  buildInputs = [
+    bzip2
+    zlib
+  ]
+  ++ lib.optionals (stdenv.hostPlatform.isLinux && withTpm2) [
+    tpm2-tss
+  ]
+  ++ lib.optionals (lib.versionAtLeast finalAttrs.version "3.6.0" && !stdenv.hostPlatform.isMinGW) [
+    jitterentropy
+  ]
+  ++
+    lib.optionals
+      (lib.versionAtLeast finalAttrs.version "3.7.0" && withEsdm && !stdenv.hostPlatform.isMinGW)
+      [
+        esdm
+      ]
+  ++ lib.optionals (stdenv.hostPlatform.isMinGW) [
+    windows.pthreads
+  ];
+
+  buildTargets = [
+    "cli"
+  ]
+  ++ lib.optionals finalAttrs.finalPackage.doCheck [ "tests" ]
+  ++ lib.optionals static [ "static" ]
+  ++ lib.optionals (!static) [ "shared" ];
+
+  botanConfigureFlags = [
+    "--prefix=${placeholder "out"}"
+    "--bindir=${placeholder "bin"}/bin"
+    "--docdir=${placeholder "doc"}/share/doc"
+    "--mandir=${placeholder "man"}/share/man"
+    "--no-install-python-module"
+    "--build-targets=${lib.concatStringsSep "," finalAttrs.buildTargets}"
+    "--with-bzip2"
+    "--with-zlib"
+    "--with-rst2man"
+    "--cpu=${stdenv.hostPlatform.parsed.cpu.name}"
+  ]
+  ++ lib.optionals stdenv.cc.isClang [
+    "--cc=clang"
+  ]
+  ++ lib.optionals (stdenv.hostPlatform.isLinux && withTpm2) [
+    "--with-tpm2"
+  ]
+  ++ lib.optionals (lib.versionAtLeast finalAttrs.version "3.6.0" && !stdenv.hostPlatform.isMinGW) [
+    "--enable-modules=jitter_rng"
+  ]
+  ++
+    lib.optionals
+      (lib.versionAtLeast finalAttrs.version "3.7.0" && withEsdm && !stdenv.hostPlatform.isMinGW)
+      [
+        "--enable-modules=esdm_rng"
+      ]
+  ++ lib.optionals (lib.versionAtLeast finalAttrs.version "3.8.0" && policy != null) [
+    "--module-policy=${policy}"
+  ]
+  ++ lib.optionals (lib.versionAtLeast finalAttrs.version "3.8.0" && policy == "bsi") [
+    "--enable-module=ffi"
+    "--enable-module=shake"
+  ]
+  ++ lib.optionals (stdenv.hostPlatform.isMinGW) [
+    "--os=mingw"
+  ];
+
+  configurePhase = ''
+    runHook preConfigure
+    python configure.py ''${botanConfigureFlags[@]}
+    runHook postConfigure
+  '';
+
+  preInstall = ''
+    if [ -d src/scripts ]; then
+      patchShebangs src/scripts
+    fi
+  '';
+
+  postInstall = ''
+    cd "$out"/lib/pkgconfig
+    ln -s botan-*.pc botan.pc || true
+  '';
+
+  doCheck = true;
+
+  passthru.tests = {
+    static = pkgsStatic.botan3;
+  };
+
+  meta = with lib; {
+    description = "Cryptographic algorithms library";
+    homepage = "https://botan.randombit.net";
+    mainProgram = "botan";
+    maintainers = with maintainers; [
+      raskin
+      thillux
+      nikstur
+    ];
+    platforms = platforms.unix ++ platforms.windows;
+    license = licenses.bsd2;
+  };
+})
@@ -10,16 +10,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "c2patool";
-  version = "0.23.4";
+  version = "0.24.0";

  src = fetchFromGitHub {
    owner = "contentauth";
    repo = "c2pa-rs";
    tag = "c2patool-v${finalAttrs.version}";
-    hash = "sha256-6y7IKuYnwSSrfe44U+fNU8Q9YdHOq2Btvie6ZqTIBRw=";
+    hash = "sha256-rjw2gej36l5s4xvUp1XKxyzhWNff2wswOYrsIP78VZ0=";
  };

-  cargoHash = "sha256-JnbvX/EkvatP/xlY+cTtRjVV+Rz2jjFIsqIvOFXqB5Q=";
+  cargoHash = "sha256-ZRmlTys0lX5FkgYBD81bdeHbX6viZW4hfFqpcq+S4WY=";

  # use the non-vendored openssl
  env.OPENSSL_NO_VENDOR = 1;
@@ -13,11 +13,11 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "copybara";
-  version = "20250929";
+  version = "20251020";

  src = fetchurl {
    url = "https://github.com/google/copybara/releases/download/v${finalAttrs.version}/copybara_deploy.jar";
-    hash = "sha256-7fI7YeGFmOc/t4JPW8dszX0/MctIJdCfRuJVjEn+7vQ=";
+    hash = "sha256-Jpq35BtBpXKKQBFhP4qJFBpACiAJ+TZIv6R5pMKTIvQ=";
  };

  nativeBuildInputs = [
@@ -27,14 +27,14 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "eduke32";
-  version = "0-unstable-2025-09-13";
+  version = "0-unstable-2025-10-17";

  src = fetchFromGitLab {
    domain = "voidpoint.io";
    owner = "terminx";
    repo = "eduke32";
-    rev = "e5aad188685d005f8ad65478384693fc0dc0c83f";
-    hash = "sha256-0iICExzsw/l/QjGJDJ6X+08+dzwsA+6tjaOWKNrXsjs=";
+    rev = "227c11dee0abaa57bbc22b06f0002e064efa7191";
+    hash = "sha256-bWty/eOq5dWltNREo9ba68pWDpBxOIfjJK1EtZ27l1U=";
    deepClone = true;
    leaveDotGit = true;
    postFetch = ''
@@ -8,11 +8,11 @@

 let
  pname = "fiddler-everywhere";
-  version = "7.3.0";
+  version = "7.4.0";

  src = fetchurl {
    url = "https://downloads.getfiddler.com/linux/fiddler-everywhere-${version}.AppImage";
-    hash = "sha256-M1SMWtIdgYpC+cwrN8Z6T+7tj4y07hho3akuy9j/l98=";
+    hash = "sha256-9YkYy+vzW88rpcYTrCsfQXXJL8W8W4D84Cf8e9zEcJg=";
  };

  appimageContents = appimageTools.extract {
@@ -8,16 +8,15 @@
  openssl,
  irssi,
 }:
-
 stdenv.mkDerivation {
  pname = "fish-irssi";
-  version = "unstable-2021-04-16";
+  version = "unstable-2023-08-05";

  src = fetchFromGitHub {
    owner = "falsovsky";
    repo = "FiSH-irssi";
-    rev = "fcc484f09ce6941ba2e499605270593ddd13b81a";
-    hash = "sha256-KIPnz17a0CFfoPO2dZz90j+wG/dR4pv5d0iZMRf7Vkc=";
+    rev = "75f754fbcc3c68a078d23ae3e2baab71acc8ed9b";
+    hash = "sha256-fFu0E9uLQXPYrbBjEneXSEKm2uipwRE4A3D54XYLczE=";
  };

  patches = [ ./irssi-include-dir.patch ];
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "github-mcp-server";
-  version = "0.18.0";
+  version = "0.19.1";

  src = fetchFromGitHub {
    owner = "github";
    repo = "github-mcp-server";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-tVKzJlj3zemoKOr18r+1ElfbqBdJa4La1x0fFVxPO1U=";
+    hash = "sha256-/i/Gk47IZtTGHUJ3ok9Y2LDTRHqlz0N4IrNmyRqSTNk=";
  };

  vendorHash = "sha256-esd4Ly8cbN3z9fxC1j4wQqotV2ULqK3PDf1bEovewUY=";
@@ -18,13 +18,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "hyperrogue";
-  version = "13.1e";
+  version = "13.1f";

  src = fetchFromGitHub {
    owner = "zenorogue";
    repo = "hyperrogue";
    tag = "v${finalAttrs.version}";
-    sha256 = "sha256-teoSI6JrqDAkyNhVaIVZcfM93LxjQah0+eJFKfI5iP4=";
+    sha256 = "sha256-HJer4CUtpJDI0aRbays9vhNTnmOYHl3eODDaLdxwjyE=";
  };

  env = {
@@ -56,16 +56,16 @@ assert (extraParameters != null) -> set != null;

 buildNpmPackage rec {
  pname = "Iosevka${toString set}";
-  version = "33.3.2";
+  version = "33.3.3";

  src = fetchFromGitHub {
    owner = "be5invis";
    repo = "iosevka";
    rev = "v${version}";
-    hash = "sha256-qJfywH5rwfgTy8k7Db3vC09Lx+UP50iWSsXnTIQWJQo=";
+    hash = "sha256-/e65hFA8GabDrHjQ+9MthSTxUku9af0LT4W1ENI+LYc=";
  };

-  npmDepsHash = "sha256-MzeUHVJXmtLWNh2iNA0RiXw1fi5Cf/sWeCQG2YCMxvU=";
+  npmDepsHash = "sha256-QJ3h8NdhCG+lkZ5392akKk+pVHiqmnt+DsC3imixNnw=";

  nativeBuildInputs = [
    remarshal
@@ -1,12 +1,12 @@
 {
  "desktop_webview_window": "sha256-l5n57iKLgsH4TaBYRaTDEPznzljI0jfOGcvxyYcIW6M=",
-  "media_kit": "sha256-N6QoktM8u9NYF8MAXLsxM9RlV8nICM4NbnmABHTRkZg=",
-  "media_kit_libs_android_video": "sha256-N6QoktM8u9NYF8MAXLsxM9RlV8nICM4NbnmABHTRkZg=",
-  "media_kit_libs_ios_video": "sha256-N6QoktM8u9NYF8MAXLsxM9RlV8nICM4NbnmABHTRkZg=",
-  "media_kit_libs_linux": "sha256-N6QoktM8u9NYF8MAXLsxM9RlV8nICM4NbnmABHTRkZg=",
-  "media_kit_libs_macos_video": "sha256-N6QoktM8u9NYF8MAXLsxM9RlV8nICM4NbnmABHTRkZg=",
-  "media_kit_libs_video": "sha256-N6QoktM8u9NYF8MAXLsxM9RlV8nICM4NbnmABHTRkZg=",
-  "media_kit_libs_windows_video": "sha256-N6QoktM8u9NYF8MAXLsxM9RlV8nICM4NbnmABHTRkZg=",
-  "media_kit_video": "sha256-N6QoktM8u9NYF8MAXLsxM9RlV8nICM4NbnmABHTRkZg=",
-  "webview_windows": "sha256-9oWTvEoFeF7djEVA3PSM72rOmOMUhV8ZYuV6+RreNzE="
+  "media_kit": "sha256-nzbpzzc/39qvnjkX5d3tfOE/dG0C7Wgr93Ru3cA2CmY=",
+  "media_kit_libs_android_video": "sha256-nzbpzzc/39qvnjkX5d3tfOE/dG0C7Wgr93Ru3cA2CmY=",
+  "media_kit_libs_ios_video": "sha256-nzbpzzc/39qvnjkX5d3tfOE/dG0C7Wgr93Ru3cA2CmY=",
+  "media_kit_libs_linux": "sha256-nzbpzzc/39qvnjkX5d3tfOE/dG0C7Wgr93Ru3cA2CmY=",
+  "media_kit_libs_macos_video": "sha256-nzbpzzc/39qvnjkX5d3tfOE/dG0C7Wgr93Ru3cA2CmY=",
+  "media_kit_libs_video": "sha256-nzbpzzc/39qvnjkX5d3tfOE/dG0C7Wgr93Ru3cA2CmY=",
+  "media_kit_libs_windows_video": "sha256-nzbpzzc/39qvnjkX5d3tfOE/dG0C7Wgr93Ru3cA2CmY=",
+  "media_kit_video": "sha256-nzbpzzc/39qvnjkX5d3tfOE/dG0C7Wgr93Ru3cA2CmY=",
+  "webview_windows": "sha256-6Uk4H2SYhjrs1+/27FmlWopDyM09Mc7SqFJ4syg3dDU="
 }
@@ -17,13 +17,13 @@
 }:

 let
-  version = "1.7.8";
+  version = "1.8.6";

  src = fetchFromGitHub {
    owner = "Predidit";
    repo = "Kazumi";
    tag = version;
-    hash = "sha256-EHrTI+jy8ryvGwLUJNVbYlinKsBxh12zboHqpiGuRk0=";
+    hash = "sha256-/CtWN9E9O0PS9uzRfywO3QECkZvS8qy0CJfb3oellw4=";
  };
 in
 flutter335.buildFlutterApplication {
@@ -65,10 +65,11 @@ flutter335.buildFlutterApplication {
        inherit (src) passthru;

        postPatch = ''
-          sed -i '/set(LIBMPV_ZIP_URL/,/if(MEDIA_KIT_LIBS_AVAILABLE)/{//!d; /set(LIBMPV_ZIP_URL/d}' media_kit_video/linux/CMakeLists.txt
-          sed -i '/if(MEDIA_KIT_LIBS_AVAILABLE)/i set(LIBMPV_HEADER_UNZIP_DIR "${mpv-unwrapped.dev}/include/mpv")' media_kit_video/linux/CMakeLists.txt
-          sed -i '/if(MEDIA_KIT_LIBS_AVAILABLE)/i set(LIBMPV_PATH "${mpv-unwrapped}/lib")' media_kit_video/linux/CMakeLists.txt
-          sed -i '/if(MEDIA_KIT_LIBS_AVAILABLE)/i set(LIBMPV_UNZIP_DIR "${mpv-unwrapped}/lib")' media_kit_video/linux/CMakeLists.txt
+          sed -i '/if(ARCH_NAME STREQUAL "x86_64")/,/if(MEDIA_KIT_LIBS_AVAILABLE)/{ /if(MEDIA_KIT_LIBS_AVAILABLE)/!d; /set(LIBMPV_ZIP_URL/d }' media_kit_video/linux/CMakeLists.txt
+          sed -i '/if(MEDIA_KIT_LIBS_AVAILABLE)/i \
+            set(LIBMPV_UNZIP_DIR "${mpv-unwrapped}/lib")\n\
+            set(LIBMPV_PATH "${mpv-unwrapped}/lib")\n\
+            set(LIBMPV_HEADER_UNZIP_DIR "${mpv-unwrapped.dev}/include/mpv")' media_kit_video/linux/CMakeLists.txt
        '';

        installPhase = ''
@@ -127,7 +128,7 @@ flutter335.buildFlutterApplication {
    homepage = "https://github.com/Predidit/Kazumi";
    mainProgram = "kazumi";
    license = lib.licenses.gpl3Plus;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ lonerOrz ];
    platforms = lib.platforms.linux;
  };
 }
@@ -394,7 +394,7 @@
      "dependency": "direct main",
      "description": {
        "path": ".",
-        "ref": "main",
+        "ref": "f95c8d09e66a73dce5465770f6fb41e4a13fad44",
        "resolved-ref": "f95c8d09e66a73dce5465770f6fb41e4a13fad44",
        "url": "https://github.com/Predidit/linux_webview_window.git"
      },
@@ -969,8 +969,8 @@
      "dependency": "direct main",
      "description": {
        "path": "media_kit",
-        "ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
-        "resolved-ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
+        "ref": "8c4b795d373243d1d64fea932ba497696fd89925",
+        "resolved-ref": "8c4b795d373243d1d64fea932ba497696fd89925",
        "url": "https://github.com/Predidit/media-kit.git"
      },
      "source": "git",
@@ -980,8 +980,8 @@
      "dependency": "direct overridden",
      "description": {
        "path": "libs/android/media_kit_libs_android_video",
-        "ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
-        "resolved-ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
+        "ref": "8c4b795d373243d1d64fea932ba497696fd89925",
+        "resolved-ref": "8c4b795d373243d1d64fea932ba497696fd89925",
        "url": "https://github.com/Predidit/media-kit.git"
      },
      "source": "git",
@@ -991,8 +991,8 @@
      "dependency": "direct overridden",
      "description": {
        "path": "libs/ios/media_kit_libs_ios_video",
-        "ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
-        "resolved-ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
+        "ref": "8c4b795d373243d1d64fea932ba497696fd89925",
+        "resolved-ref": "8c4b795d373243d1d64fea932ba497696fd89925",
        "url": "https://github.com/Predidit/media-kit.git"
      },
      "source": "git",
@@ -1002,8 +1002,8 @@
      "dependency": "direct overridden",
      "description": {
        "path": "libs/linux/media_kit_libs_linux",
-        "ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
-        "resolved-ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
+        "ref": "8c4b795d373243d1d64fea932ba497696fd89925",
+        "resolved-ref": "8c4b795d373243d1d64fea932ba497696fd89925",
        "url": "https://github.com/Predidit/media-kit.git"
      },
      "source": "git",
@@ -1013,8 +1013,8 @@
      "dependency": "direct overridden",
      "description": {
        "path": "libs/macos/media_kit_libs_macos_video",
-        "ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
-        "resolved-ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
+        "ref": "8c4b795d373243d1d64fea932ba497696fd89925",
+        "resolved-ref": "8c4b795d373243d1d64fea932ba497696fd89925",
        "url": "https://github.com/Predidit/media-kit.git"
      },
      "source": "git",
@@ -1024,8 +1024,8 @@
      "dependency": "direct main",
      "description": {
        "path": "libs/universal/media_kit_libs_video",
-        "ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
-        "resolved-ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
+        "ref": "8c4b795d373243d1d64fea932ba497696fd89925",
+        "resolved-ref": "8c4b795d373243d1d64fea932ba497696fd89925",
        "url": "https://github.com/Predidit/media-kit.git"
      },
      "source": "git",
@@ -1035,8 +1035,8 @@
      "dependency": "direct overridden",
      "description": {
        "path": "libs/windows/media_kit_libs_windows_video",
-        "ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
-        "resolved-ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
+        "ref": "8c4b795d373243d1d64fea932ba497696fd89925",
+        "resolved-ref": "8c4b795d373243d1d64fea932ba497696fd89925",
        "url": "https://github.com/Predidit/media-kit.git"
      },
      "source": "git",
@@ -1046,8 +1046,8 @@
      "dependency": "direct main",
      "description": {
        "path": "media_kit_video",
-        "ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
-        "resolved-ref": "ad84c59faa2b871926cb31516bdeec65d7676884",
+        "ref": "8c4b795d373243d1d64fea932ba497696fd89925",
+        "resolved-ref": "8c4b795d373243d1d64fea932ba497696fd89925",
        "url": "https://github.com/Predidit/media-kit.git"
      },
      "source": "git",
@@ -1417,11 +1417,11 @@
      "dependency": "transitive",
      "description": {
        "name": "screen_brightness_android",
-        "sha256": "fb5fa43cb89d0c9b8534556c427db1e97e46594ac5d66ebdcf16063b773d54ed",
+        "sha256": "d34f5321abd03bc3474f4c381f53d189117eba0b039eac1916aa92cca5fd0a96",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.1.2"
+      "version": "2.1.3"
    },
    "screen_brightness_ios": {
      "dependency": "transitive",
@@ -2013,21 +2013,21 @@
      "dependency": "transitive",
      "description": {
        "name": "volume_controller",
-        "sha256": "c71d4c62631305df63b72da79089e078af2659649301807fa746088f365cb48e",
+        "sha256": "d75039e69c0d90e7810bfd47e3eedf29ff8543ea7a10392792e81f9bded7edf5",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.0.8"
+      "version": "3.4.0"
    },
    "wakelock_plus": {
      "dependency": "transitive",
      "description": {
        "name": "wakelock_plus",
-        "sha256": "a474e314c3e8fb5adef1f9ae2d247e57467ad557fa7483a2b895bc1b421c5678",
+        "sha256": "61713aa82b7f85c21c9f4cd0a148abd75f38a74ec645fcb1e446f882c82fd09b",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "1.3.2"
+      "version": "1.3.3"
    },
    "wakelock_plus_platform_interface": {
      "dependency": "transitive",
@@ -2133,8 +2133,8 @@
      "dependency": "direct main",
      "description": {
        "path": ".",
-        "ref": "main",
-        "resolved-ref": "a32d483f4416628f1f6630592c0633f1f7c1d625",
+        "ref": "4399f68beab25d51b277e37e3949f9fb2d6d8304",
+        "resolved-ref": "4399f68beab25d51b277e37e3949f9fb2d6d8304",
        "url": "https://github.com/Predidit/flutter-webview-windows.git"
      },
      "source": "git",
@@ -2164,11 +2164,11 @@
      "dependency": "direct main",
      "description": {
        "name": "window_manager",
-        "sha256": "732896e1416297c63c9e3fb95aea72d0355f61390263982a47fd519169dc5059",
+        "sha256": "7eb6d6c4164ec08e1bf978d6e733f3cebe792e2a23fb07cbca25c2872bfdbdcd",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.4.3"
+      "version": "0.5.1"
    },
    "xdg_directories": {
      "dependency": "transitive",
@@ -2223,6 +2223,6 @@
  },
  "sdks": {
    "dart": ">=3.8.0 <4.0.0",
-    "flutter": ">=3.35.3"
+    "flutter": ">=3.35.6"
  }
 }
@@ -15,7 +15,7 @@ in
  inherit useVSCodeRipgrep;
  commandLineArgs = extraCommandLineArgs;

-  version = "0.3.9";
+  version = "0.4.0";
  pname = "kiro";

  # You can find the current VSCode version in the About dialog:
@@ -1,14 +1,14 @@
 {
  "x86_64-linux": {
-    "url": "https://prod.download.desktop.kiro.dev/releases/202510022241--distro-linux-x64-tar-gz/202510022241-distro-linux-x64.tar.gz",
-    "hash": "sha256-1XdGN4Pp8EwDqQNQxfPT6mpV8uZLDqtCS/m3EUtGkeI="
+    "url": "https://prod.download.desktop.kiro.dev/releases/202510142329--distro-linux-x64-tar-gz/202510142329-distro-linux-x64.tar.gz",
+    "hash": "sha256-Pi96jAd2qZNCk/LSv9f5n08VzOS3WwaW+eI+8PIwM9I="
  },
  "x86_64-darwin": {
-    "url": "https://prod.download.desktop.kiro.dev/releases/202510022241-Kiro-dmg-darwin-x64.dmg",
-    "hash": "sha256-VsXbpChRMyJBb1JTJivY5Tr+bi2Aita97f3RduaU8xE="
+    "url": "https://prod.download.desktop.kiro.dev/releases/202510142329-Kiro-dmg-darwin-x64.dmg",
+    "hash": "sha256-wjUyT9KF3Tg5M6Ad01sxhZlin1WySF0Tci1dAPlvh04="
  },
  "aarch64-darwin": {
-    "url": "https://prod.download.desktop.kiro.dev/releases/202510022241-Kiro-dmg-darwin-arm64.dmg",
-    "hash": "sha256-nUXtIb3WxJrr1Q4XpGXbP9k9r4vBboZq5YWBUNFgIIk="
+    "url": "https://prod.download.desktop.kiro.dev/releases/202510142329-Kiro-dmg-darwin-arm64.dmg",
+    "hash": "sha256-Bsul3QLJ9qbDPBnhUu7Stk4wz1yJkYk9eMrtUyQ4rbU="
  }
 }
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "kubedb-cli";
-  version = "0.58.0";
+  version = "0.59.0";

  src = fetchFromGitHub {
    owner = "kubedb";
    repo = "cli";
    tag = "v${version}";
-    hash = "sha256-DfvYWA2D+TuIz5nQnzFHatR9yl8nos7byMz7uK+q7w0=";
+    hash = "sha256-gM61Om1qNbzeHWAzLbgUlHsZPzBNzyFN8r9PoS3Pf1c=";
  };

  vendorHash = null;
@@ -6,13 +6,13 @@

 buildGoModule (finalAttrs: {
  pname = "kubelogin";
-  version = "1.34.1";
+  version = "1.34.2";

  src = fetchFromGitHub {
    owner = "int128";
    repo = "kubelogin";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-zAIiNpzYr4aVR4O93y9S9aiGUgeg9xlj7wFn4vh43zY=";
+    hash = "sha256-Uk8zsOrX1mrOofl6pUCTPUye463fyCKDcK09IA6uwtw=";
  };

  subPackages = [ "." ];
@@ -22,7 +22,7 @@ buildGoModule (finalAttrs: {
    "-X main.version=v${finalAttrs.version}"
  ];

-  vendorHash = "sha256-LF6Esggl7ygC/t9lCZGzZIZtukCbMFCAo2RFLbvEnoU=";
+  vendorHash = "sha256-WZ7tJufvgclC6xKQNXmVcf0HAmqBH9bKSu3TFzWSYdI=";

  # test all packages
  preCheck = ''
@@ -16,11 +16,11 @@

 stdenv.mkDerivation rec {
  pname = "libdatovka";
-  version = "0.7.1";
+  version = "0.7.2";

  src = fetchurl {
    url = "https://gitlab.nic.cz/datovka/libdatovka/-/archive/v${version}/libdatovka-v${version}.tar.gz";
-    sha256 = "sha256-qVbSxPLYe+PjGwRH2U/V2Ku2X1fRPbDOUjFamCsYVgY=";
+    sha256 = "sha256-pct+COy7ibyNtwB8l/vDnEHBUEihlo5OaoXWXVRJBrQ=";
  };

  patches = [
@@ -11,11 +11,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "liblognorm";
-  version = "2.0.6";
+  version = "2.0.7";

  src = fetchurl {
    url = "http://www.liblognorm.com/files/download/liblognorm-${finalAttrs.version}.tar.gz";
-    hash = "sha256-z/BX6FwiA4mS+e0S641OY8Ra31OlpR+qoyefYFgJ9vI=";
+    hash = "sha256-vp2OekIHAu2NPFvK1zBsLZxs9UtZx3FcYbCIoGDgiUM=";
  };

  nativeBuildInputs = [ pkg-config ];
@@ -9,13 +9,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libremines";
-  version = "2.2.0";
+  version = "2.2.1";

  src = fetchFromGitHub {
    owner = "Bollos00";
    repo = "libremines";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-JLA+QpPhhEiv75jpzKncBHsC5WGK0dht5jVJx56pz88=";
+    hash = "sha256-DscpRqXho+bZnXDLyii/cZjuL4MRTAQOuX6PUfwXCx8=";
  };

  nativeBuildInputs = [
@@ -6,12 +6,12 @@
 }:

 let
-  version = "2.1.12";
+  version = "2.1.13";
  pname = "lunatask";

  src = fetchurl {
    url = "https://github.com/lunatask/lunatask/releases/download/v${version}/Lunatask-${version}.AppImage";
-    hash = "sha256-2wYUvAersPFNJILtNV5m7den1o6OOB2jxa0ZwqwQlx0=";
+    hash = "sha256-OxkhXBaoXaq7NvlZerQV9AwX85nMS/HBgH6KpugJeMU=";
  };

  appimageContents = appimageTools.extract {
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "micromdm";
-  version = "1.13.0";
+  version = "1.13.1";

  src = fetchFromGitHub {
    owner = "micromdm";
    repo = "micromdm";
    rev = "v${version}";
-    hash = "sha256-o/HK1bjaUwsSQG7QbYe0gFnD/OKV00cHXLXpftNa3iY=";
+    hash = "sha256-b0ST2krDY4avvcdcpUInTH1On0cGKTsdwPpL9HbSPig=";
  };

-  vendorHash = "sha256-aKm8a/PS+1ozImh1aL2EliALyUqjPMMBh4NTbL0H/ng=";
+  vendorHash = "sha256-NxjxHKEB1+d2BsVImL405anuMcKF+DlpnRPvKkGNMAQ=";

  meta = {
    description = "Mobile Device Management server for Apple Devices, focused on giving you all the power through an API";
@@ -10,16 +10,16 @@

 buildGoModule rec {
  pname = "minify";
-  version = "2.23.1";
+  version = "2.24.5";

  src = fetchFromGitHub {
    owner = "tdewolff";
    repo = "minify";
    rev = "v${version}";
-    hash = "sha256-v0KLQlf2WhI18uanVtvWfX6/7s9ZtfPM5AGyEIHZf54=";
+    hash = "sha256-0OmL/HG4pt2iDha6NcQoUKWz2u9vsLH6QzYhHb+mTL0=";
  };

-  vendorHash = "sha256-Btc5d/wwDmjhyDZwAIHDSbXuh8xqq/nIjTAkPsdeHU4=";
+  vendorHash = "sha256-QS0vffGJaaDhXvc7ylJmFJ1s83kaIqFWsBXNWVozt1k=";

  nativeBuildInputs = [ installShellFiles ];

@@ -8,12 +8,12 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "models-dev";
-  version = "0-unstable-2025-10-08";
+  version = "0-unstable-2025-10-24";
  src = fetchFromGitHub {
    owner = "sst";
    repo = "models.dev";
-    rev = "8d397086d8971c91b27919b8a3945f5ac21bc61f";
-    hash = "sha256-r0k6b9vaAeKZl1mknQc1wyRiJcPB3/OWlqspOgqw/Us=";
+    rev = "1548a725f07c2c6113379a8c5566c2e4c4dfc91f";
+    hash = "sha256-SgZFdjoSlmRS+eMbAIVPsDnwDEmzA/YFhgdHij3Qq38=";
  };

  node_modules = stdenvNoCC.mkDerivation {
@@ -37,9 +37,18 @@ stdenvNoCC.mkDerivation (finalAttrs: {

       export BUN_INSTALL_CACHE_DIR=$(mktemp -d)

+       # NOTE: Starting with Bun 1.3.0, isolated builds became the default
+       # behavior. In isolated builds, each package receives its own
+       # `.node_modules` subdirectory containing only the dependencies
+       # explicitly declared in that package's `package.json`. Since our build
+       # process copies only the root-level `.node_modules` directory, we must
+       # use `--linker=hoisted` to consolidate all dependencies there. Without
+       # this flag, we would need to copy every individual `.node_modules`
+       # subdirectory from each package.
       bun install \
         --force \
         --frozen-lockfile \
+         --linker=hoisted \
         --no-progress \
         --production

@@ -72,13 +81,6 @@ stdenvNoCC.mkDerivation (finalAttrs: {

  nativeBuildInputs = [ bun ];

-  patches = [
-    # In bun 1.2.13 (release-25.05) HTML entrypoints get content hashes
-    # appended → index.html becomes index-pq8vj7za.html in ./dist. So, we
-    # rename the index file back to index.html
-    ./post-build-rename-index-file.patch
-  ];
-
  configurePhase = ''
    runHook preConfigure

@@ -1,18 +0,0 @@
-diff --git i/packages/web/script/build.ts w/packages/web/script/build.ts
-index 9bdcdb3..e9ce1c9 100755
--- i/packages/web/script/build.ts
-+++ w/packages/web/script/build.ts
-@@ -14,6 +14,13 @@ for await (const file of new Bun.Glob("./public/*").scan()) {
-   await Bun.write(file.replace("./public/", "./dist/"), Bun.file(file));
- }
- 
-+const distFiles = await fs.readdir("./dist");
-+const htmlFile = distFiles.find(file => file.startsWith("index-") && file.endsWith(".html"));
-+
-+if (htmlFile) {
-+  await fs.rename(`./dist/${htmlFile}`, "./dist/index.html");
-+}
-+
- let html = await Bun.file("./dist/index.html").text();
- html = html.replace("<!--static-->", Rendered);
- await Bun.write("./dist/index.html", html);
@@ -17,7 +17,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "mongodb-ce";
-  version = "8.0.14";
+  version = "8.0.15";

  src =
    finalAttrs.passthru.sources.${stdenv.hostPlatform.system}
@@ -54,19 +54,19 @@ stdenv.mkDerivation (finalAttrs: {
    sources = {
      "x86_64-linux" = fetchurl {
        url = "https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-ubuntu2404-${finalAttrs.version}.tgz";
-        hash = "sha256-nmqDMu8O3bUveGnUNjISs8o3mVX9cNgIQNG3+m9ctUs=";
+        hash = "sha256-hHlTsXbzDBhesK6hrGV27zXBBd7uEFlt/5QDJFn5aFA=";
      };
      "aarch64-linux" = fetchurl {
        url = "https://fastdl.mongodb.org/linux/mongodb-linux-aarch64-ubuntu2404-${finalAttrs.version}.tgz";
-        hash = "sha256-Os4aK+r5SBzgtkRz81FcRywTgs5gKzGTOZfb/Z8H2ns=";
+        hash = "sha256-th67W8GA62AcKlASxafYBZLM2j+kZGuk4N706nXQKQ0=";
      };
      "x86_64-darwin" = fetchurl {
        url = "https://fastdl.mongodb.org/osx/mongodb-macos-x86_64-${finalAttrs.version}.tgz";
-        hash = "sha256-x4pFuAFgp+7n/knezCwjasXh4c338kXdjA7L259bRKw=";
+        hash = "sha256-MBNmctpSZjHZyYkUyt6q/uGmSGRdRD+7GHrh/Aj+bmA=";
      };
      "aarch64-darwin" = fetchurl {
        url = "https://fastdl.mongodb.org/osx/mongodb-macos-arm64-${finalAttrs.version}.tgz";
-        hash = "sha256-apcmzl8HIWaP8I3OjTX2Vzcwx5ruztqPFDzoLf8Fn14=";
+        hash = "sha256-3yXoOMD6S90XErUWCctCMV5aulljrvXsVGEUBvHmk5w=";
      };
    };
    updateScript =
@@ -8,13 +8,13 @@

 buildGoModule rec {
  pname = "node-problem-detector";
-  version = "0.8.21";
+  version = "1.34.0";

  src = fetchFromGitHub {
    owner = "kubernetes";
    repo = "node-problem-detector";
    rev = "v${version}";
-    sha256 = "sha256-byxj6EXKAmesFOBtBt0URcT0h1pYdrW8ewtITuEPFcs=";
+    sha256 = "sha256-titH2HHXxm8SpfisAWckwPSA11rsqssMCVmDbdPHDI8=";
  };

  vendorHash = null;
@@ -7,7 +7,7 @@

 let
  bits = if stdenv.hostPlatform.is64bit then "x64" else "ia32";
-  version = "0.103.1";
+  version = "0.104.1";
 in
 stdenv.mkDerivation {
  pname = "nwjs-ffmpeg-prebuilt";
@@ -16,8 +16,8 @@ stdenv.mkDerivation {
  src =
    let
      hashes = {
-        "x64" = "sha256-/PN83C3i2wzxl76YuMXfPK5jsS+D04qMTWTgXoplv+E=";
-        "ia32" = "sha256-/PN83C3i2wzxl76YuMXfPK5jsS+D04qMTWTgXoplv+E=";
+        "x64" = "sha256-01hdumuWRAi1KdvwBDQJqUSk+NV5gYnn6QWQYj2FDUE=";
+        "ia32" = "sha256-01hdumuWRAi1KdvwBDQJqUSk+NV5gYnn6QWQYj2FDUE=";
      };
    in
    fetchurl {
@@ -9,13 +9,13 @@

 stdenv.mkDerivation {
  pname = "ols";
-  version = "0-unstable-2025-09-19";
+  version = "0-unstable-2025-10-20";

  src = fetchFromGitHub {
    owner = "DanielGavin";
    repo = "ols";
-    rev = "7ff84eb0b24912db1b3f3b0cff323e1728f47b0b";
-    hash = "sha256-aKyVZARXFMBa0kbI4yeqPZIFHmPCKUy1WPr33aIHbQI=";
+    rev = "7d293c322ef85e4b60c943c220f1a6dd45895672";
+    hash = "sha256-6EzXMGn4c4i8bGdc35ennU4uiB3G4EYzRobrJbyiA9Q=";
  };

  postPatch = ''
@@ -24,6 +24,11 @@ stdenv.mkDerivation (finalAttrs: {
    eigen
  ];

+  postPatch = ''
+    substituteInPlace CMakeLists.txt \
+      --replace-fail "cmake_minimum_required(VERSION 3.1.3)" "cmake_minimum_required(VERSION 3.10)"
+  '';
+
  meta = {
    description = "Collection of computer vision methods for solving geometric vision problems";
    homepage = "https://github.com/laurentkneip/opengv";
@@ -58,12 +58,12 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "orca-slicer";
-  version = "v2.3.1";
+  version = "2.3.1";

  src = fetchFromGitHub {
    owner = "SoftFever";
    repo = "OrcaSlicer";
-    tag = finalAttrs.version;
+    tag = "v${finalAttrs.version}";
    hash = "sha256-RdMBx/onLq58oI1sL0cHmF2SGDfeI9KkPPCbjyMqECI=";
  };

@@ -24,6 +24,14 @@ stdenv.mkDerivation rec {
    sha256 = "19k6f6ivg4ab57m62g6fkg85q9sv049snmzq1fyqnqijggwshxfz";
  };

+  postPatch = ''
+    # CMake 2.8 is deprecated and is no longer supported by CMake > 4
+    # https://github.com/NixOS/nixpkgs/issues/445447
+    substituteInPlace CMakeLists.txt \
+      --replace-fail "cmake_minimum_required(VERSION 2.8)" \
+        "cmake_minimum_required(VERSION 3.10)"
+  '';
+
  nativeBuildInputs = [
    pkg-config
    wrapGAppsHook3
@@ -52,6 +52,11 @@ stdenv.mkDerivation {
    gst_all_1.gst-plugins-ugly
  ];

+  postPatch = ''
+    substituteInPlace {lib/playfair/,lib/llhttp/,lib/,renderers/,./}CMakeLists.txt \
+      --replace-fail "cmake_minimum_required(VERSION 3.4.1)" "cmake_minimum_required(VERSION 3.10)"
+  '';
+
  meta = with lib; {
    broken = stdenv.hostPlatform.isDarwin;
    homepage = "https://github.com/FD-/RPiPlay";
@@ -27,13 +27,13 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "ruffle";
-  version = "0.2.0-nightly-2025-10-18";
+  version = "0.2.0-nightly-2025-10-24";

  src = fetchFromGitHub {
    owner = "ruffle-rs";
    repo = "ruffle";
    tag = lib.strings.removePrefix "0.2.0-" finalAttrs.version;
-    hash = "sha256-rFgaquwcQK2U+1qSlxI+VT5OJPftbj4pcMJih71Gl2A=";
+    hash = "sha256-zp+2kILsWkRVDX5q7rCI294VCOz8C3PleDPgED3n+LM=";
  };

  postPatch =
@@ -49,7 +49,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
                       "OpenH264Version(${major}, ${minor}, ${patch})"
    '';

-  cargoHash = "sha256-6Q3KBrrfL50AkFkDuxXWKqPtc2ClI3j1WpE/x9ASOJk=";
+  cargoHash = "sha256-Eo9wLL/Xj/mWto3cRSxAv5dMf+jLOUUk5wCd8voQEeQ=";
  cargoBuildFlags = lib.optional withRuffleTools "--workspace";

  env =
@@ -43,9 +43,9 @@
  },
  {
    "pname": "Microsoft.CodeAnalysis.Analyzers",
-    "version": "5.0.0-2.25452.2",
-    "hash": "sha256-BsNPX6p08WG5unEZOq/m8c9iKQ2tcX8LiUj2Icf9Mm8=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.analyzers/5.0.0-2.25452.2/microsoft.codeanalysis.analyzers.5.0.0-2.25452.2.nupkg"
+    "version": "5.0.0-2.25461.22",
+    "hash": "sha256-ARzhiaKHCyl9IY39hWfzHiv5eDmmTBgnrhRaoYGSfTU=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.analyzers/5.0.0-2.25461.22/microsoft.codeanalysis.analyzers.5.0.0-2.25461.22.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.BannedApiAnalyzers",
@@ -55,27 +55,27 @@
  },
  {
    "pname": "Microsoft.CodeAnalysis.Common",
-    "version": "5.0.0-2.25452.2",
-    "hash": "sha256-C5ymxF29vgwu9Jwl7CwNEf4+zpb7fFLUdBGPVnf+Ixs=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.common/5.0.0-2.25452.2/microsoft.codeanalysis.common.5.0.0-2.25452.2.nupkg"
+    "version": "5.0.0-2.25461.22",
+    "hash": "sha256-GltCV7wW9rNxN2k6pS26lILDVDZcoyAZD1td4lmzKn4=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.common/5.0.0-2.25461.22/microsoft.codeanalysis.common.5.0.0-2.25461.22.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.CSharp",
-    "version": "5.0.0-2.25452.2",
-    "hash": "sha256-foZzAkEdfdtvF3WJwUhdC51KeBHnTdBoH+JGV5XD5A0=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.csharp/5.0.0-2.25452.2/microsoft.codeanalysis.csharp.5.0.0-2.25452.2.nupkg"
+    "version": "5.0.0-2.25461.22",
+    "hash": "sha256-+mf1IuoaRl5RPU6RjXrHkrdes8jE3z/JAPw+0ab4Fzk=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.csharp/5.0.0-2.25461.22/microsoft.codeanalysis.csharp.5.0.0-2.25461.22.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.CSharp.Features",
-    "version": "5.0.0-2.25452.2",
-    "hash": "sha256-3J+9YhYUePNRX8sWJQNbK3G/FjS+sh5ML1ix1zn5B5Q=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.csharp.features/5.0.0-2.25452.2/microsoft.codeanalysis.csharp.features.5.0.0-2.25452.2.nupkg"
+    "version": "5.0.0-2.25461.22",
+    "hash": "sha256-tPGG+CWkok0B9ggro1wU0g9iLaJ//oUtE/Z4EEqLdjk=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.csharp.features/5.0.0-2.25461.22/microsoft.codeanalysis.csharp.features.5.0.0-2.25461.22.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.CSharp.Workspaces",
-    "version": "5.0.0-2.25452.2",
-    "hash": "sha256-Wnqq7HFdRvwde+tx1fLufiVOeAZul5jDasswEKFLhdk=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.csharp.workspaces/5.0.0-2.25452.2/microsoft.codeanalysis.csharp.workspaces.5.0.0-2.25452.2.nupkg"
+    "version": "5.0.0-2.25461.22",
+    "hash": "sha256-9FTv+MloLtCBFmLN1eZ+7dLrHrMlFPA7na8gB2LwO0U=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.csharp.workspaces/5.0.0-2.25461.22/microsoft.codeanalysis.csharp.workspaces.5.0.0-2.25461.22.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.Elfie",
@@ -85,21 +85,21 @@
  },
  {
    "pname": "Microsoft.CodeAnalysis.ExternalAccess.Razor.Features",
-    "version": "5.0.0-2.25452.2",
-    "hash": "sha256-cfOyGxroU5SZAUar6YROo2o6lsr2lVAkYMQopIsIRnc=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.externalaccess.razor.features/5.0.0-2.25452.2/microsoft.codeanalysis.externalaccess.razor.features.5.0.0-2.25452.2.nupkg"
+    "version": "5.0.0-2.25461.22",
+    "hash": "sha256-LdE0uEZqa0NYG9n2MdVVw4gkj/5WlRjbdu0tL9u3Ir4=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.externalaccess.razor.features/5.0.0-2.25461.22/microsoft.codeanalysis.externalaccess.razor.features.5.0.0-2.25461.22.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.Features",
-    "version": "5.0.0-2.25452.2",
-    "hash": "sha256-3flzK3w1P+YEm93XeKyWKKu0de7uaSJhRR6CjDi2uAo=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.features/5.0.0-2.25452.2/microsoft.codeanalysis.features.5.0.0-2.25452.2.nupkg"
+    "version": "5.0.0-2.25461.22",
+    "hash": "sha256-vx5X2WC2Oc8sMmfOK09JOXMDtIdKeAXQJzD28DAeX0Q=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.features/5.0.0-2.25461.22/microsoft.codeanalysis.features.5.0.0-2.25461.22.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.LanguageServer.Protocol",
-    "version": "5.0.0-2.25452.2",
-    "hash": "sha256-VbfgcAULLmLjGHfqYD1ohJPLZn65b8JFaOnP0kucqJg=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.languageserver.protocol/5.0.0-2.25452.2/microsoft.codeanalysis.languageserver.protocol.5.0.0-2.25452.2.nupkg"
+    "version": "5.0.0-2.25461.22",
+    "hash": "sha256-c75mxIhdNy5MmCxFQBTkyiyOgIDcTcBn2q+za3sR+gE=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.languageserver.protocol/5.0.0-2.25461.22/microsoft.codeanalysis.languageserver.protocol.5.0.0-2.25461.22.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.PublicApiAnalyzers",
@@ -109,27 +109,27 @@
  },
  {
    "pname": "Microsoft.CodeAnalysis.Remote.Workspaces",
-    "version": "5.0.0-2.25452.2",
-    "hash": "sha256-jYHylTS3OO84UFz1vfB8ST/k5G/XI6Ks4lOE5DYlPcw=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.remote.workspaces/5.0.0-2.25452.2/microsoft.codeanalysis.remote.workspaces.5.0.0-2.25452.2.nupkg"
+    "version": "5.0.0-2.25461.22",
+    "hash": "sha256-kdk4Xb2DIK/ClG7sRFrP8KhmWjoi/t12zuEvt29D12I=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.remote.workspaces/5.0.0-2.25461.22/microsoft.codeanalysis.remote.workspaces.5.0.0-2.25461.22.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.Scripting.Common",
-    "version": "5.0.0-2.25452.2",
-    "hash": "sha256-dG632yqX95EwXqDfhnBwhbS1/fuex7fUjM/wUnPQaR0=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.scripting.common/5.0.0-2.25452.2/microsoft.codeanalysis.scripting.common.5.0.0-2.25452.2.nupkg"
+    "version": "5.0.0-2.25461.22",
+    "hash": "sha256-Y9D+zE9oiEceJ7eaD9jb0YWA/p7GG76m8TqL+bFex8U=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.scripting.common/5.0.0-2.25461.22/microsoft.codeanalysis.scripting.common.5.0.0-2.25461.22.nupkg"
  },
  {
    "pname": "Microsoft.CodeAnalysis.Workspaces.Common",
-    "version": "5.0.0-2.25452.2",
-    "hash": "sha256-JNadLPLKA2wuThQABqj3/PKPhMTrn72VjNumkGbkNm4=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.workspaces.common/5.0.0-2.25452.2/microsoft.codeanalysis.workspaces.common.5.0.0-2.25452.2.nupkg"
+    "version": "5.0.0-2.25461.22",
+    "hash": "sha256-EmmjTePJXCdGjqYSFXHrZ6twXaJ9WWvLTFKrQGjVmhw=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.codeanalysis.workspaces.common/5.0.0-2.25461.22/microsoft.codeanalysis.workspaces.common.5.0.0-2.25461.22.nupkg"
  },
  {
    "pname": "Microsoft.CommonLanguageServerProtocol.Framework",
-    "version": "5.0.0-2.25452.2",
-    "hash": "sha256-b/kxQt5KyluSGkkmFzy9+EGlTOW5gBv3bkM/t5PbB+8=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.commonlanguageserverprotocol.framework/5.0.0-2.25452.2/microsoft.commonlanguageserverprotocol.framework.5.0.0-2.25452.2.nupkg"
+    "version": "5.0.0-2.25461.22",
+    "hash": "sha256-1ek78xZapHDcYE6JEXhXjwuLDNZgr/jLckM7WEw8G0I=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.commonlanguageserverprotocol.framework/5.0.0-2.25461.22/microsoft.commonlanguageserverprotocol.framework.5.0.0-2.25461.22.nupkg"
  },
  {
    "pname": "Microsoft.CSharp",
@@ -145,15 +145,15 @@
  },
  {
    "pname": "Microsoft.DotNet.Arcade.Sdk",
-    "version": "9.0.0-beta.25428.3",
-    "hash": "sha256-imlZjZcVWjNXO0yZmSoXPOlxX/qaJ96LeN8Xb/ox+Vk=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/1a5f89f6-d8da-4080-b15f-242650c914a8/nuget/v3/flat2/microsoft.dotnet.arcade.sdk/9.0.0-beta.25428.3/microsoft.dotnet.arcade.sdk.9.0.0-beta.25428.3.nupkg"
+    "version": "9.0.0-beta.25462.4",
+    "hash": "sha256-UsK0l85wtrwYf7tmEELr3RfCf+Y3IKInI8IOziPfEE4=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/1a5f89f6-d8da-4080-b15f-242650c914a8/nuget/v3/flat2/microsoft.dotnet.arcade.sdk/9.0.0-beta.25462.4/microsoft.dotnet.arcade.sdk.9.0.0-beta.25462.4.nupkg"
  },
  {
    "pname": "Microsoft.DotNet.XliffTasks",
-    "version": "9.0.0-beta.25428.3",
-    "hash": "sha256-4Jgieh85GiTg8rmQb3esR0UZTuj+L2cLzwyC0ziOBDc=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/1a5f89f6-d8da-4080-b15f-242650c914a8/nuget/v3/flat2/microsoft.dotnet.xlifftasks/9.0.0-beta.25428.3/microsoft.dotnet.xlifftasks.9.0.0-beta.25428.3.nupkg"
+    "version": "9.0.0-beta.25462.4",
+    "hash": "sha256-Pd3JOHzGDL+gwNy+2wlvsoUFU8S0q71af6vmdApbHPA=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/1a5f89f6-d8da-4080-b15f-242650c914a8/nuget/v3/flat2/microsoft.dotnet.xlifftasks/9.0.0-beta.25462.4/microsoft.dotnet.xlifftasks.9.0.0-beta.25462.4.nupkg"
  },
  {
    "pname": "Microsoft.Extensions.DependencyInjection",
@@ -181,9 +181,9 @@
  },
  {
    "pname": "Microsoft.Net.Compilers.Toolset",
-    "version": "5.0.0-2.25452.2",
-    "hash": "sha256-lrjvenHm6/z8Fy37UaUdKjM36zlwe43revlQjg+aqV4=",
-    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.net.compilers.toolset/5.0.0-2.25452.2/microsoft.net.compilers.toolset.5.0.0-2.25452.2.nupkg"
+    "version": "5.0.0-2.25461.22",
+    "hash": "sha256-MNgU0lJksVPs7o1yMRWcpativck4As+cG4mOFbFPYLw=",
+    "url": "https://pkgs.dev.azure.com/dnceng/9ee6d478-d288-47f7-aacc-f6e6d082ae6d/_packaging/d1622942-d16f-48e5-bc83-96f4539e7601/nuget/v3/flat2/microsoft.net.compilers.toolset/5.0.0-2.25461.22/microsoft.net.compilers.toolset.5.0.0-2.25461.22.nupkg"
  },
  {
    "pname": "Microsoft.NET.StringTools",
@@ -29,11 +29,11 @@ buildDotnetModule {
  src = fetchFromGitHub {
    owner = "dotnet";
    repo = "razor";
-    rev = "bde4f70c9560811a7f25023b9d8ac42fd7d0e99f";
-    hash = "sha256-wS7JKHLpX9/JluID94HXUkepaX9eoceRzuIofBICiBk=";
+    rev = "73622b728a3015c601aeada75eb8425bde7ba439";
+    hash = "sha256-uy6e9J/mx05wlRILoetnSyRYXvaveGIVzdQKDHEfrVQ=";
  };

-  version = "10.0.0-preview.25464.2";
+  version = "10.0.0-preview.25517.9";
  projectFile = "src/Razor/src/rzls/rzls.csproj";
  useDotnetFromEnv = true;
  nugetDeps = ./deps.json;
@@ -0,0 +1,49 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  versionCheckHook,
+  nix-update-script,
+  pkg-config,
+  openssl,
+}:
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "sampo";
+  version = "0.12.0";
+
+  src = fetchFromGitHub {
+    owner = "bruits";
+    repo = "sampo";
+    tag = "sampo-v${finalAttrs.version}";
+    hash = "sha256-0E9dvyu6mGbuMH8Lf/rVTn3skVq9kaVjQG2eLH8a2IY=";
+  };
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [ openssl ];
+
+  cargoHash = "sha256-gooShQWJY9UKYq99o7qhyz6ROK+VXYG2PpygdVWG0iM=";
+
+  cargoBuildFlags = [
+    "-p"
+    "sampo"
+  ];
+  cargoTestFlags = finalAttrs.cargoBuildFlags;
+
+  env.OPENSSL_NO_VENDOR = true;
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+  versionCheckProgramArg = "--version";
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Automate changelogs, versioning, and publishing—even for monorepos across multiple package registries";
+    homepage = "https://github.com/bruits/sampo";
+    changelog = "https://github.com/bruits/sampo/blob/sampo-v${finalAttrs.version}/crates/sampo/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ nartsiss ];
+    mainProgram = "sampo";
+  };
+})
@@ -2,27 +2,37 @@
  lib,
  fetchFromGitHub,
  rustPlatform,
+  versionCheckHook,
+  nix-update-script,
 }:

-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
  pname = "slumber";
-  version = "4.1.0";
+  version = "4.2.0";

  src = fetchFromGitHub {
    owner = "LucasPickering";
    repo = "slumber";
-    tag = "v${version}";
-    hash = "sha256-JPKzubGwtXV7CmuPqEIvFKPoug17Z4Jeg+dgIBMTOU4=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-wEQPyp0J7p2TuJwH/fQv5fhenUY3MNIq0oazFJAj9lM=";
  };

-  cargoHash = "sha256-1ReNwfV1M8k5pGeXBvd28UEKfys0ylraP4Q0AoL/L5Y=";
+  cargoHash = "sha256-Nz/Z2KJ8jJAsTASwnvleRpJ88UHGe7dktO0FkCOPdu4=";
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };

  meta = {
    description = "Terminal-based HTTP/REST client";
    homepage = "https://slumber.lucaspickering.me";
-    changelog = "https://github.com/LucasPickering/slumber/blob/v${version}/CHANGELOG.md";
+    changelog = "https://github.com/LucasPickering/slumber/blob/v${finalAttrs.version}/CHANGELOG.md";
    license = lib.licenses.mit;
    mainProgram = "slumber";
    maintainers = with lib.maintainers; [ javaes ];
  };
-}
+})
@@ -1,5 +1,5 @@
 {
-  fetchhg,
+  fetchFromGitHub,
  lib,
  stdenv,
  cmake,
@@ -11,15 +11,16 @@
  libGL,
 }:

-stdenv.mkDerivation {
+stdenv.mkDerivation (finalAttrs: {
  pname = "soxt";
-  version = "unstable-2019-06-14";
+  version = "1.4.2";

-  src = fetchhg {
-    url = "https://bitbucket.org/Coin3D/soxt";
-    rev = "85e135bb266fbb17e47fc336b876a576a239c15c";
-    sha256 = "0vk5cgn53yqf7csqdnlnyyhi4mbgx4wlsq70613p5fgxlvxzhcym";
-    fetchSubrepos = true;
+  src = fetchFromGitHub {
+    owner = "coin3d";
+    repo = "soxt";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-ji3rukL8QOErsjx06A61d65O5wxhw4jkEEKIa4EDhUg=";
+    fetchSubmodules = true;
  };

  nativeBuildInputs = [ cmake ];
@@ -32,11 +33,14 @@ stdenv.mkDerivation {
    libXmu
  ];

-  meta = with lib; {
+  meta = {
    homepage = "https://bitbucket.org/Coin3D/coin/wiki/Home";
-    license = licenses.bsd3;
+    license = lib.licenses.bsd3;
    description = "GUI binding for using Open Inventor with Xt/Motif";
-    maintainers = with maintainers; [ tmplt ];
-    platforms = platforms.linux;
+    maintainers = with lib.maintainers; [
+      tmplt
+      skohtv
+    ];
+    platforms = lib.platforms.linux;
  };
-}
+})
@@ -12,16 +12,16 @@

 buildGoModule rec {
  pname = "stackit-cli";
-  version = "0.44.1";
+  version = "0.45.0";

  src = fetchFromGitHub {
    owner = "stackitcloud";
    repo = "stackit-cli";
    rev = "v${version}";
-    hash = "sha256-ppD7Jp04J5K99ND3BMGklyttg8SIH+zZBG1tEfHW990=";
+    hash = "sha256-fZ1SlWmPfxhUrLU7mzhM1IP93QgCg2EO3b1JjFDTkcY=";
  };

-  vendorHash = "sha256-2dhc4RpT5ceEBeS/VkuNR9ll7lZ9N/QlkvCCOtVO5XM=";
+  vendorHash = "sha256-pgO+KN6s9MNsOaTiiX4xxsVYPPE5KoTDvG9R8vlRiTw=";

  subPackages = [ "." ];

@@ -0,0 +1,67 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  versionCheckHook,
+  nix-update-script,
+  wayland-scanner,
+  wayland,
+  wayland-protocols,
+  dbus,
+  pkg-config,
+  libinput,
+  udev,
+}:
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "stasis";
+  version = "0.5.0";
+
+  src = fetchFromGitHub {
+    owner = "saltnpepper97";
+    repo = "stasis";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-gJB/y6jSBJZjBTQB9sxbVpllSfF6jwKOEeLqlgIStMA=";
+  };
+
+  cargoHash = "sha256-JX0imd+FuuBq8d3FAYEQ+LLZQV39f8Iu9ftLASs00Fc=";
+
+  nativeBuildInputs = [
+    pkg-config
+    wayland-scanner
+  ];
+
+  buildInputs = [
+    wayland
+    wayland-protocols
+    dbus
+    libinput
+    udev
+  ];
+
+  #There are no tests
+  doCheck = false;
+
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Modern idle manager for Wayland";
+    longDescription = ''
+      Stasis is a smart idle manager for Wayland that understands context.
+      It automatically prevents idle when watching videos, reading documents,
+      or playing music, while allowing idle when appropriate. Features include
+      media-aware idle handling, application-specific inhibitors, Wayland idle
+      inhibitor protocol support, and flexible configuration using the RUNE
+      configuration language.
+    '';
+    homepage = "https://github.com/saltnpepper97/stasis";
+    changelog = "https://github.com/saltnpepper97/stasis/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ nartsiss ];
+    platforms = lib.platforms.linux;
+    mainProgram = "stasis";
+  };
+})
@@ -14,13 +14,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "syshud";
-  version = "0-unstable-2025-10-06";
+  version = "0-unstable-2025-10-25";

  src = fetchFromGitHub {
    owner = "System64fumo";
    repo = "syshud";
-    rev = "60d3e362cf6983e7d7ebea7584a8bd84eb815f4c";
-    hash = "sha256-GxJWGRm7N/TgvAtuWXjusyUT7Pnuw0uIySp6i6Kn7Gs=";
+    rev = "57594787b68da8f221deb03295df21cc0b239b03";
+    hash = "sha256-8kXBcu2hUefV7ZEfqZdxg6Dz3vgxhekaZEhEqERP4ro=";
  };

  postPatch = ''
@@ -35,6 +35,11 @@ stdenv.mkDerivation rec {
      makeWrapper  $pkipath/$i $out/bin/taskd-pki-$i \
        --prefix PATH : ${lib.makeBinPath [ gnutls ]}
    done
+
+    substituteInPlace {doc/,src/,./}CMakeLists.txt \
+      --replace-fail "cmake_minimum_required (VERSION 2.8)" "cmake_minimum_required(VERSION 3.10)"
+    substituteInPlace CMakeLists.txt \
+      --replace-fail "cmake_policy(SET CMP0037 OLD)" ""
  '';

  buildInputs = [
@@ -17,13 +17,13 @@ in

 stdenv.mkDerivation rec {
  pname = "toybox";
-  version = "0.8.12";
+  version = "0.8.13";

  src = fetchFromGitHub {
    owner = "landley";
    repo = "toybox";
    rev = version;
-    sha256 = "sha256-D+tf2bJQlf2pLMNZdMUOoUdE3ea/KgkqoXGsnl1MVOE=";
+    sha256 = "sha256-b5sigIxyg4T4wVc5z8Das+RdEXmNBPFsXpWwXxU/ERE=";
  };

  depsBuildBuild = optionals (stdenv.hostPlatform != stdenv.buildPlatform) [
@@ -10,14 +10,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "trelby";
-  version = "2.4.15";
+  version = "2.4.16.2";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "trelby";
    repo = "trelby";
    tag = version;
-    hash = "sha256-CTasd+YlRHjYUVepZf2RDOuw1p0OdQfJENZamSmXXFw=";
+    hash = "sha256-YblilPQXjlSgkBstewfiuW0DZCnJw4dk6vZfEhdBGbk=";
  };

  build-system = [
@@ -63,11 +63,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "uclibc-ng";
-  version = "1.0.54";
+  version = "1.0.55";

  src = fetchurl {
    url = "https://downloads.uclibc-ng.org/releases/${finalAttrs.version}/uClibc-ng-${finalAttrs.version}.tar.xz";
-    hash = "sha256-0ez2XMIhfdQRik2vwavyfFhbXLV48715kfxkC3lkP/I=";
+    hash = "sha256-X386r92yygj7KVvkVWHAGIQHED10Rs/SZLm4Iv7T7S0=";
  };

  # 'ftw' needed to build acl, a coreutils dependency
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "url-parser";
-  version = "2.1.10";
+  version = "2.1.11";

  src = fetchFromGitHub {
    owner = "thegeeklab";
    repo = "url-parser";
    tag = "v${version}";
-    hash = "sha256-5QpcioReUAO11QOLbU+KtUd4Zs+hi/lvNvEzDpDQbhU=";
+    hash = "sha256-5llWyqIO5vsjvf8NChssgWaiJ9ENUN72sy4shjmA9co=";
  };

-  vendorHash = "sha256-3TOUdwBq6TgzZIDtaoIoi2ur83DmAjBfi1ILJIGpyJU=";
+  vendorHash = "sha256-SHW/l1TVq5zzYcjhkIMbF5yF5KKIbMfPgrASNQ9A3VU=";

  ldflags = [
    "-s"
@@ -52,8 +52,8 @@ buildGoModule (finalAttrs: {
    rm -f app/vmui/packages/vmui/web/{go.mod,main.go}

    # Allow older go versions
-    substituteInPlace go.mod \
-      --replace-fail "go 1.25.3" "go ${finalAttrs.passthru.go.version}"
+    sed -i go.mod -e 's/^go .*/go ${finalAttrs.passthru.go.version}/'
+    sed -i vendor/modules.txt -e 's/## explicit; go .*/## explicit; go ${finalAttrs.passthru.go.version}/'

    # Increase timeouts in tests to prevent failure on heavily loaded builders
    substituteInPlace lib/storage/storage_test.go \
@@ -13,20 +13,20 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "wasmtime";
-  version = "38.0.1";
+  version = "38.0.3";

  src = fetchFromGitHub {
    owner = "bytecodealliance";
    repo = "wasmtime";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Arb4wUIJx3OyE8wbshotpy5Br7ZHHA7zXP98uGm/gyo=";
+    hash = "sha256-eszpPYtueCuAMIVrWKagS1qFCWGd0rVFTsCqRYaSGu4=";
    fetchSubmodules = true;
  };

  # Disable cargo-auditable until https://github.com/rust-secure-code/cargo-auditable/issues/124 is solved.
  auditable = false;

-  cargoHash = "sha256-ZF+uaMjhBMdLPp8TP4DnPB23igOE92YuhQ1US65NNRk=";
+  cargoHash = "sha256-agTF0GszX1f6oqo9oIPMD/GSmwbL8Ovg52TmtPq/z78=";
  cargoBuildFlags = [
    "--package"
    "wasmtime-cli"
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "webdav";
-  version = "5.8.0";
+  version = "5.8.1";

  src = fetchFromGitHub {
    owner = "hacdias";
    repo = "webdav";
    tag = "v${version}";
-    hash = "sha256-6G9NlQVYFDLuIxKJXq0Rcixx1AiDhTHUekumMNqXi44=";
+    hash = "sha256-byAfcJTzbt2o0vwxKHks6FgrBBlIZY1iKeaWFir5hMU=";
  };

-  vendorHash = "sha256-B78O13FPpkcuE808c2hLiIDPQdS5qlaw1dWLc9T7hvM=";
+  vendorHash = "sha256-BHSkSGgL6Ns4kjQV5OaiViIVhnOg1qpdvv4LPhkeAnw=";

  __darwinAllowLocalNetworking = true;

@@ -16,13 +16,13 @@ let
 in
 stdenv.mkDerivation rec {
  pname = "webp-pixbuf-loader";
-  version = "0.2.6";
+  version = "0.2.7";

  src = fetchFromGitHub {
    owner = "aruiz";
    repo = "webp-pixbuf-loader";
    rev = version;
-    sha256 = "sha256-2GDH5+YCwb2mPdMfEscmWDOzdGnWRcppE+4rcDCZog4=";
+    sha256 = "sha256-IJEweV2ACFp+Ua2ESrRUNApXWBg3NED60FDKijYO5TI=";
  };

  nativeBuildInputs = [
@@ -5,7 +5,7 @@
 }:
 let
  pname = "winbox";
-  version = "4.0beta33";
+  version = "4.0beta35";

  metaCommon = {
    description = "Graphical configuration utility for RouterOS-based devices";
@@ -23,13 +23,13 @@ let
  x86_64-zip = callPackage ./build-from-zip.nix {
    inherit pname version metaCommon;

-    hash = "sha256-jGYqzmqH/0cbYoI5rGqSALzU8/dtDIKXCoFn9adDBZY=";
+    hash = "sha256-gmFAxa9ogFwbSZ9yOCkDzHDoRwc3FRx/HS9/yqdUpZc=";
  };

  x86_64-dmg = callPackage ./build-from-dmg.nix {
    inherit pname version metaCommon;

-    hash = "sha256-INMSKYGpXMBIF11Xaz+MLmCk78+rn7jf5BaFsErIG1E=";
+    hash = "sha256-FeUEr9Kpu92NDOyp8inpSvx42xRboHb/Ey3Bo4S91S0=";
  };
 in
 (if stdenvNoCC.hostPlatform.isDarwin then x86_64-dmg else x86_64-zip).overrideAttrs (oldAttrs: {
@@ -72,10 +72,6 @@ stdenv.mkDerivation (finalAttrs: {
    ./cargo_lock_deps_version.patch
  ];

-  passthru = {
-    updateScript = lib.updateScript { };
-  };
-
  meta = with lib; {
    description = "A backend implementation for xdg-desktop-portal that is using GTK/GNOME/Phosh to provide interfaces that aren't provided by the GTK portal";
    homepage = "https://gitlab.gnome.org/guidog/xdg-desktop-portal-phosh";
@@ -9,13 +9,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "zashboard";
-  version = "1.103.1";
+  version = "1.107.0";

  src = fetchFromGitHub {
    owner = "Zephyruso";
    repo = "zashboard";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-xZg0ca11TfiB2rRFONDTBv8kX25JR9kSelwPqS/HvhI=";
+    hash = "sha256-VcRMy05vgdJC1eCfHFyxlLB1yR/gRmZv7gvlhC62KjE=";
  };

  nativeBuildInputs = [
@@ -26,7 +26,7 @@ stdenv.mkDerivation (finalAttrs: {
  pnpmDeps = pnpm_9.fetchDeps {
    inherit (finalAttrs) pname version src;
    fetcherVersion = 1;
-    hash = "sha256-O4MayQ9r+++0XvRmXnuVnw4nHx66jVahs0sm221wfV0=";
+    hash = "sha256-0qoyN46DDdj9vy7qMRGtNrWKZVsBRv22NQBhB7sz1+U=";
  };

  buildPhase = ''
@@ -38,10 +38,16 @@ stdenv.mkDerivation {
    "-DBUILD_EXAMPLES=OFF"
  ];

-  meta = with lib; {
+  postPatch = ''
+    substituteInPlace CMakeLists.txt \
+      --replace-fail "cmake_minimum_required(VERSION 3.1)" "cmake_minimum_required(VERSION 3.10)"
+  '';
+
+  meta = {
    description = "Platform-agnostic camera and sensor capture API for the ZED 2, ZED 2i, and ZED Mini stereo cameras";
    homepage = "https://github.com/stereolabs/zed-open-capture";
-    license = licenses.mit;
-    maintainers = with maintainers; [ marius851000 ];
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ marius851000 ];
+    platforms = lib.platforms.linux;
  };
 }
@@ -31,7 +31,7 @@ in
  breadline = addToBuildInputs pkgs.readline;
  blas = addToBuildInputsWithPkgConfig pkgs.blas;
  blosc = addToBuildInputs pkgs.c-blosc;
-  botan = addToBuildInputsWithPkgConfig pkgs.botan2;
+  botan = broken;
  cairo =
    old:
    (addToBuildInputsWithPkgConfig pkgs.cairo old)
@@ -339,12 +339,6 @@ rec {
  # packagesFromDirectory : { directory : Directory, ... } -> HaskellPackageOverrideSet
  packagesFromDirectory = compose.packagesFromDirectory;

-  addOptparseApplicativeCompletionScripts =
-    exeName: pkg:
-    lib.warn "addOptparseApplicativeCompletionScripts is deprecated in favor of haskellPackages.generateOptparseApplicativeCompletions. Please change ${pkg.name} to use the latter and make sure it uses its matching haskell.packages set!" (
-      compose.__generateOptparseApplicativeCompletion exeName pkg
-    );
-
  /*
    Modify a Haskell package to add shell completion scripts for the
    given executable produced by it. These completion scripts will be
@@ -1,185 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchpatch,
-  fetchurl,
-  pkgsStatic,
-  python3,
-  docutils,
-  bzip2,
-  zlib,
-  jitterentropy,
-  darwin,
-  esdm,
-  tpm2-tss,
-  static ? stdenv.hostPlatform.isStatic, # generates static libraries *only*
-  windows,
-
-  # build ESDM RNG plugin
-  withEsdm ? false,
-  # useful, but have to disable tests for now, as /dev/tpmrm0 is not accessible
-  withTpm2 ? false,
-  policy ? null,
-}:
-
-assert lib.assertOneOf "policy" policy [
-  # no explicit policy is given. The defaults by the library are used
-  null
-  # only allow BSI approved algorithms, FFI and SHAKE for XMSS
-  "bsi"
-  # only allow NIST approved algorithms in FIPS 140
-  "fips140"
-  # only allow "modern" algorithms
-  "modern"
-];
-
-let
-  common =
-    {
-      version,
-      hash,
-      patches ? [ ],
-    }:
-    stdenv.mkDerivation (finalAttrs: {
-      pname = "botan";
-      inherit version;
-
-      __structuredAttrs = true;
-      enableParallelBuilding = true;
-      strictDeps = true;
-
-      outputs = [
-        "bin"
-        "out"
-        "dev"
-        "doc"
-        "man"
-      ];
-
-      src = fetchurl {
-        url = "http://botan.randombit.net/releases/Botan-${finalAttrs.version}.tar.xz";
-        inherit hash;
-      };
-
-      inherit patches;
-
-      nativeBuildInputs = [
-        python3
-        docutils
-      ];
-
-      buildInputs = [
-        bzip2
-        zlib
-      ]
-      ++ lib.optionals (stdenv.hostPlatform.isLinux && withTpm2) [
-        tpm2-tss
-      ]
-      ++ lib.optionals (lib.versionAtLeast version "3.6.0" && !stdenv.hostPlatform.isMinGW) [
-        jitterentropy
-      ]
-      ++ lib.optionals (lib.versionAtLeast version "3.7.0" && withEsdm && !stdenv.hostPlatform.isMinGW) [
-        esdm
-      ]
-      ++ lib.optionals (stdenv.hostPlatform.isMinGW) [
-        windows.pthreads
-      ];
-
-      buildTargets = [
-        "cli"
-      ]
-      ++ lib.optionals finalAttrs.finalPackage.doCheck [ "tests" ]
-      ++ lib.optionals static [ "static" ]
-      ++ lib.optionals (!static) [ "shared" ];
-
-      botanConfigureFlags = [
-        "--prefix=${placeholder "out"}"
-        "--bindir=${placeholder "bin"}/bin"
-        "--docdir=${placeholder "doc"}/share/doc"
-        "--mandir=${placeholder "man"}/share/man"
-        "--no-install-python-module"
-        "--build-targets=${lib.concatStringsSep "," finalAttrs.buildTargets}"
-        "--with-bzip2"
-        "--with-zlib"
-        "--with-rst2man"
-        "--cpu=${stdenv.hostPlatform.parsed.cpu.name}"
-      ]
-      ++ lib.optionals stdenv.cc.isClang [
-        "--cc=clang"
-      ]
-      ++ lib.optionals (stdenv.hostPlatform.isLinux && withTpm2) [
-        "--with-tpm2"
-      ]
-      ++ lib.optionals (lib.versionAtLeast version "3.6.0" && !stdenv.hostPlatform.isMinGW) [
-        "--enable-modules=jitter_rng"
-      ]
-      ++ lib.optionals (lib.versionAtLeast version "3.7.0" && withEsdm && !stdenv.hostPlatform.isMinGW) [
-        "--enable-modules=esdm_rng"
-      ]
-      ++ lib.optionals (lib.versionAtLeast version "3.8.0" && policy != null) [
-        "--module-policy=${policy}"
-      ]
-      ++ lib.optionals (lib.versionAtLeast version "3.8.0" && policy == "bsi") [
-        "--enable-module=ffi"
-        "--enable-module=shake"
-      ]
-      ++ lib.optionals (stdenv.hostPlatform.isMinGW) [
-        "--os=mingw"
-      ];
-
-      configurePhase = ''
-        runHook preConfigure
-        python configure.py ''${botanConfigureFlags[@]}
-        runHook postConfigure
-      '';
-
-      preInstall = ''
-        if [ -d src/scripts ]; then
-          patchShebangs src/scripts
-        fi
-      '';
-
-      postInstall = ''
-        cd "$out"/lib/pkgconfig
-        ln -s botan-*.pc botan.pc || true
-      '';
-
-      doCheck = true;
-
-      passthru.tests = lib.optionalAttrs (lib.versionAtLeast version "3") {
-        static = pkgsStatic.botan3;
-      };
-
-      meta = with lib; {
-        description = "Cryptographic algorithms library";
-        homepage = "https://botan.randombit.net";
-        mainProgram = "botan";
-        maintainers = with maintainers; [
-          raskin
-          thillux
-          nikstur
-        ];
-        platforms = platforms.unix ++ lib.optionals (lib.versionAtLeast version "3.0") platforms.windows;
-        license = licenses.bsd2;
-      };
-    });
-in
-{
-  botan3 = common {
-    version = "3.9.0";
-    hash = "sha256-jD8oS1jd1C6OQ+n6hqcSnYfqfD93aoDT2mPsIHIrCIM=";
-  };
-
-  botan2 = common {
-    version = "2.19.5";
-    hash = "sha256-3+6g4KbybWckxK8B2pp7iEh62y2Bunxy/K9S21IsmtQ=";
-    patches = [
-      # Fix build with gcc15
-      (fetchpatch {
-        name = "botan2-add-include-cstdint-gcc15.patch";
-        url = "https://src.fedoraproject.org/rpms/botan2/raw/c3fb7a3800df117e7ef8a7617ac8eacb31a4464a/f/f765f0b312f2998498f629d93369babfb2c975b4.patch";
-        hash = "sha256-8Yhxd5TCgxUMtRiv3iq5sQaVjDF+b9slppm38/6l6lw=";
-      })
-    ];
-  };
-}
@@ -92,14 +92,14 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "libcef";
-  version = "140.1.14";
-  gitRevision = "eb1c06e";
-  chromiumVersion = "140.0.7339.185";
+  version = "141.0.7";
+  gitRevision = "a5714cc";
+  chromiumVersion = "141.0.7390.108";
  buildType = "Release";

  srcHash = selectSystem {
-    aarch64-linux = "sha256-psgs+RcEYWKN4NneU4eVIaV2b7y+doxdPs9QWsN8dTA=";
-    x86_64-linux = "sha256-CDVzU+GIAU6hEutot90GMlAS8xEqD3uNLppgGq9d4mE=";
+    aarch64-linux = "sha256-2A0hVzUVMBemhjnFE/CrKs4CU96Qkxy8S/SieaEJjwE=";
+    x86_64-linux = "sha256-tZzUxeXxbYP8YfIQLbiSyihPcjZM9cd2Ad8gGCSvdGk=";
  };

  src = fetchurl {
@@ -11,14 +11,13 @@

 buildDunePackage rec {
  pname = "base64";
-  version = "3.5.1";
+  version = "3.5.2";

-  minimalOCamlVersion = "4.03";
-  duneVersion = "3";
+  minimalOCamlVersion = "4.07";

  src = fetchurl {
    url = "https://github.com/mirage/ocaml-base64/releases/download/v${version}/base64-${version}.tbz";
-    hash = "sha256-2P7apZvRL+rnrMCLWSjdR4qsUj9MqNJARw0lAGUcZe0=";
+    hash = "sha256-s/XOMBqnLHAy75C+IzLXL/OWKSLADuKuxryt4Yei9Zs=";
  };

  nativeBuildInputs = [ findlib ];
@@ -4,7 +4,7 @@
  fetchFromGitLab,
  afl-persistent,
  pprint,
-  version ? "20250314",
+  version ? "20250922",
 }:

 buildDunePackage {
@@ -18,7 +18,7 @@ buildDunePackage {
    owner = "fpottier";
    repo = "monolith";
    tag = version;
-    hash = "sha256-hIB3QSOLARumRgpUroTFUzSreHw7kMikGde+mB28sGM=";
+    hash = "sha256-uYUbrWSE99556jiCgDUc8xDaob3rFPXLBMPM3lN6Xh8=";
  };

  propagatedBuildInputs = [
@@ -7,11 +7,11 @@

 buildDunePackage rec {
  pname = "ocaml-version";
-  version = "4.0.1";
+  version = "4.0.3";

  src = fetchurl {
    url = "https://github.com/ocurrent/ocaml-version/releases/download/v${version}/ocaml-version-${version}.tbz";
-    hash = "sha256-uZ7c47uaHpTt1XyCcsxo/E7P2grk09UzRTEnUBKYKNA=";
+    hash = "sha256-GM5e7fTKWhx6tSJ9xfNdW2fy8wYWhmbf3uGvqGKQm7M=";
  };

  checkInputs = [ alcotest ];
@@ -7,13 +7,13 @@

 buildDunePackage rec {
  pname = "qcheck-multicoretests-util";
-  version = "0.9";
+  version = "0.11";

  src = fetchFromGitHub {
    owner = "ocaml-multicore";
    repo = "multicoretests";
    rev = version;
-    hash = "sha256-ekHit4MaDb6lUZzGGZ1bm7brUlUgpfIBSpsOvDSxNhw=";
+    hash = "sha256-QABh33C1k5AAYkOa5zDIExwwJFlhgdvSuxShJt4ESM8=";
  };

  propagatedBuildInputs = [ qcheck-core ];
@@ -12,13 +12,13 @@

 buildDunePackage rec {
  pname = "terminal";
-  version = "0.4.0";
+  version = "0.5.0";

  minimalOCamlVersion = "4.03";

  src = fetchurl {
    url = "https://github.com/CraigFe/progress/releases/download/${version}/progress-${version}.tbz";
-    hash = "sha256-i+RJVTN5uy3F6LeYBcgER2kKA9yj6a7pWf7PRtgnj7c=";
+    hash = "sha256-f4fwWXNjkoxFuoWa5aFDD2qjwp4lH/GlPPeG7Q4EWWE=";
  };

  propagatedBuildInputs = [
@@ -6,11 +6,11 @@

 buildDunePackage {
  pname = "unisim_archisec";
-  version = "0.0.12";
+  version = "0.0.13";

  src = fetchurl {
-    url = "https://github.com/binsec/unisim_archisec/releases/download/0.0.12/unisim_archisec-0.0.12.tbz";
-    sha256 = "sha256-RJKyyrQy4zrI3S9e7q3W5UbwsGnSlItXq6X0n69UsL8=";
+    url = "https://github.com/binsec/unisim_archisec/releases/download/0.0.13/unisim_archisec-0.0.13.tbz";
+    sha256 = "sha256-pDLbsF6n4HSGQyWWEb7/RWK+nCWfS+p6Dy/G5jlnlk0=";
  };

  duneVersion = "3";
@@ -1,21 +1,22 @@
 {
  buildPerlPackage,
-  exiftool,
-  fetchurl,
+  fetchFromGitHub,
  gitUpdater,
  lib,
  shortenPerlShebang,
  stdenv,
-  testers,
+  versionCheckHook,
 }:

 buildPerlPackage rec {
  pname = "Image-ExifTool";
-  version = "13.25";
+  version = "13.39";

-  src = fetchurl {
-    url = "https://exiftool.org/Image-ExifTool-${version}.tar.gz";
-    hash = "sha256-HNVVFEhGooKYeDvr86tFIjUnPHg1hBCBPj1Ok8ZTsfo=";
+  src = fetchFromGitHub {
+    owner = "exiftool";
+    repo = "exiftool";
+    tag = version;
+    hash = "sha256-GPm3HOt7fNMbXRrV5V+ykJAfhww1O6NrD0l/7hA2i28=";
  };

  nativeBuildInputs = lib.optional stdenv.hostPlatform.isDarwin shortenPerlShebang;
@@ -28,13 +29,12 @@ buildPerlPackage rec {
    shortenPerlShebang $out/bin/exiftool
  '';

+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "-ver";
+
  passthru = {
-    tests.version = testers.testVersion {
-      inherit version;
-      command = "${lib.getExe exiftool} -ver";
-      package = exiftool;
-    };
-    updateScript = gitUpdater { url = "https://github.com/exiftool/exiftool.git"; };
+    updateScript = gitUpdater { };
  };

  meta = {
@@ -1,45 +1,47 @@
 {
  lib,
  stdenv,
-  fetchurl,
  buildPythonPackage,
  fetchFromGitHub,
-  pythonOlder,
-  cmake,
-  sundials,
-  lapack,
-  attrs,
-  lark,
-  lxml,
-  rpclib,
-  msgpack,
-  numpy,
-  scipy,
-  pytz,
-  dask,
-  requests,
-  matplotlib,
-  pyqtgraph,
-  notebook,
-  plotly,
-  hatchling,
-  pyside6,
-  jinja2,
-  flask,
-  dash,
-  dash-bootstrap-components,
+
+  # patches
  qt6,
  fmpy,
-  runCommand,
-  enableRemoting ? true,
-  versionCheckHook,
-  fmi-reference-fmus,
  replaceVars,
+
+  # nativeBuildInputs
+  cmake,
+
+  # build-system
+  hatchling,
+
+  # dependencies
+  attrs,
+  jinja2,
+  lark,
+  lxml,
+  msgpack,
+  nbformat,
+  numpy,
+  pyside6,
+
+  # preBuild
+  rpclib,
+
+  # tests
+  versionCheckHook,
+
+  # passthru
+  sundials,
+  lapack,
+  runCommand,
+  fmi-reference-fmus,
+
+  enableRemoting ? true,
 }:
 buildPythonPackage rec {
  pname = "fmpy";
-  version = "0.3.23";
-  disabled = pythonOlder "3.10";
+  version = "0.3.26";
  pyproject = true;

  # Bumping version? Make sure to look through the commit history for
@@ -47,47 +49,11 @@ buildPythonPackage rec {
  src = fetchFromGitHub {
    owner = "CATIA-Systems";
    repo = "FMPy";
-    rev = "v${version}";
+    tag = "v${version}";
    fetchSubmodules = true;
-    hash = "sha256-4jBYOymurGCbjT0WQjIRNsztwOXBYVTGLdc4kNSTOZw=";
+    hash = "sha256-NAaROHrZ8OPmj/3lWFk9hNrrlqsDbscGdDn6G7xfFeQ=";
  };

-  nativeBuildInputs = [
-    cmake
-  ];
-
-  build-system = [
-    hatchling
-  ];
-
-  dependencies = [
-    pyqtgraph
-    pyside6
-    attrs
-    lark
-    lxml
-    msgpack
-    numpy
-    scipy
-    pytz
-    dask
-    requests
-    matplotlib
-    pyqtgraph
-    notebook
-    plotly
-    rpclib
-    fmpy.passthru.cvode
-    pyside6
-    jinja2
-    flask
-    dash
-    dash-bootstrap-components
-  ];
-
-  dontUseCmakeConfigure = true;
-  dontUseCmakeBuildDir = true;
-
  patches = [
    (replaceVars ./0001-gui-override-Qt6-libexec-path.patch {
      qt6libexec = "${qt6.qtbase}/libexec/";
@@ -106,9 +72,33 @@ buildPythonPackage rec {
  # Make forced includes of other systems' artifacts optional in order
  # to pass build (otherwise vendored upstream from CI)
  postPatch = ''
-    sed --in-place 's/force-include/source/g' pyproject.toml
+    substituteInPlace pyproject.toml \
+      --replace-fail "force-include" "source"
  '';

+  nativeBuildInputs = [
+    cmake
+  ];
+
+  build-system = [
+    hatchling
+  ];
+
+  dependencies = [
+    attrs
+    cmake
+    jinja2
+    lark
+    lxml
+    msgpack
+    nbformat
+    numpy
+    pyside6
+  ];
+
+  dontUseCmakeConfigure = true;
+  dontUseCmakeBuildDir = true;
+
  # Don't run upstream build scripts as they are too specialized.
  # cvode is already built, so we only need to build native binaries.
  # We run these cmake builds and then run the standard
@@ -118,9 +108,10 @@ buildPythonPackage rec {
    cmakeConfigurePhase
    cmake --build native/src/build --config Release
  ''
+  # reimplementation of native/build_remoting.py
+  # 2025-10-25: fix cmake 4 compatibility
  + lib.optionalString (enableRemoting && stdenv.hostPlatform.isLinux) ''
-    # reimplementation of native/build_remoting.py
-    cmakeFlags="-S native/remoting -B remoting/linux64 -D RPCLIB=${rpclib}"
+    cmakeFlags="-S native/remoting -B remoting/linux64 -D RPCLIB=${rpclib} -D CMAKE_POLICY_VERSION_MINIMUM=3.10"
    cmakeConfigurePhase
    cmake --build remoting/linux64 --config Release
  ''
@@ -147,22 +138,33 @@ buildPythonPackage rec {
    "fmpy.sundials"
  ];

-  nativeInstallCheckInputs = [
+  nativeCheckInputs = [
    versionCheckHook
  ];
+  versionCheckProgramArg = "--version";

  passthru = {
    # From sundials, build only the CVODE solver. C.f.
    # src/native/build_cvode.py
    cvode =
-      (sundials.overrideAttrs (prev: {
+      (sundials.overrideAttrs (prev: rec {
        # hash copied from native/build_cvode.py
        version = "5.3.0";
-        src = fetchurl {
-          url = "https://github.com/LLNL/sundials/releases/download/v5.3.0/sundials-5.3.0.tar.gz";
-          sha256 = "88dff7e11a366853d8afd5de05bf197a8129a804d9d4461fb64297f1ef89bca7";
+        src = fetchFromGitHub {
+          owner = "LLNL";
+          repo = "sundials";
+          tag = "v${version}";
+          hash = "sha256-8TvIGhrB9Rq9GgWqeyPTcYFrgn6Q79VkhkLuucNKlg0=";
        };

+        # Fix CMake 4 compatibility
+        postPatch = ''
+          substituteInPlace config/SundialsPOSIXTimers.cmake \
+            --replace-fail \
+              "CMAKE_MINIMUM_REQUIRED(VERSION 3.0.2)" \
+              "CMAKE_MINIMUM_REQUIRED(VERSION 3.10)"
+        '';
+
        cmakeFlags =
          prev.cmakeFlags
          ++ lib.mapAttrsToList (option: enable: lib.cmakeBool option enable) {
@@ -174,6 +176,8 @@ buildPythonPackage rec {
            BUILD_IDA = false;
            BUILD_IDAS = false;
            BUILD_KINSOL = false;
+
+            BUILD_SHARED_LIBS = true;
          };

        # FMPy searches for sundials without the "lib"-prefix; strip it
@@ -205,7 +209,7 @@ buildPythonPackage rec {
      for fmu in $(find ${fmi-reference-fmus}/*.fmu ! -name "Clocks.fmu"); do
        name=$(basename $fmu)
        echo "--- START $name ---"
-        ${fmpy}/bin/fmpy simulate $fmu \
+        ${lib.getExe fmpy} simulate $fmu \
          --fmi-logging \
          --output-file $out/$name.csv \
          | tee $out/$name.out
@@ -227,5 +231,6 @@ buildPythonPackage rec {
    # builds. C.f.
    # <https://github.com/CATIA-Systems/FMPy/blob/v0.3.23/pyproject.toml?plain=1#L71-L112>
    platforms = lib.platforms.x86_64 ++ [ "i686-windows" ];
+    mainProgram = "fmpy";
  };
 }
@@ -17,19 +17,19 @@

 buildPythonPackage rec {
  pname = "gilknocker";
-  version = "0.4.1.post6";
+  version = "0.4.2";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "milesgranger";
    repo = "gilknocker";
    tag = "v${version}";
-    hash = "sha256-jJOI7hlm6kcqfBbM56y5mKD+lJe0g+qAQpDF7ePM+GM=";
+    hash = "sha256-RFLThZRxAXqF/Yzjpmafn2dVavOGJrM9U258FfLej/I=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit pname version src;
-    hash = "sha256-cUv0CT8d6Nxjzh/S/hY9jcpeFX/5KvBxSkqOkt4htyU=";
+    hash = "sha256-C3rxqmZMSc6SC8bU5VB61x8Xk/crD3o7Nr1xvzv7uqI=";
  };

  nativeBuildInputs =
@@ -0,0 +1,49 @@
+{
+  aiohttp,
+  buildPythonPackage,
+  fetchFromGitHub,
+  hatchling,
+  lib,
+  pytest-asyncio,
+  pytest-mock,
+  pytestCheckHook,
+}:
+
+buildPythonPackage rec {
+  pname = "pycync";
+  version = "0.4.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "Kinachi249";
+    repo = "pycync";
+    tag = "v${version}";
+    hash = "sha256-PDCS+ucfO5RRvTshGGjxir3ez7L405k5tL5svMxZMsg=";
+  };
+
+  build-system = [ hatchling ];
+
+  dependencies = [
+    aiohttp
+  ];
+
+  pythonImportsCheck = [ "pycync" ];
+
+  nativeCheckInputs = [
+    pytest-asyncio
+    pytest-mock
+    pytestCheckHook
+  ];
+
+  preCheck = ''
+    cd tests
+  '';
+
+  meta = {
+    changelog = "https://github.com/Kinachi249/pycync/releases/tag/${src.tag}";
+    description = "Python API library for Cync smart devices";
+    homepage = "https://github.com/Kinachi249/pycync";
+    license = lib.licenses.gpl3Plus;
+    maintainers = [ lib.maintainers.dotlambda ];
+  };
+}
@@ -0,0 +1,43 @@
+{
+  aiohttp,
+  buildPythonPackage,
+  fetchFromGitHub,
+  lib,
+  pytest-asyncio,
+  pytestCheckHook,
+  setuptools,
+}:
+
+buildPythonPackage rec {
+  pname = "pydroplet";
+  version = "2.3.4";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "Hydrific";
+    repo = "pydroplet";
+    tag = "v${version}";
+    hash = "sha256-cVftXG7sKDpGRRb2jLlFxgCH2+rA6hLYTUqWL1kvh+E=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    aiohttp
+  ];
+
+  pythonImportsCheck = [ "pydroplet" ];
+
+  nativeCheckInputs = [
+    pytest-asyncio
+    pytestCheckHook
+  ];
+
+  meta = {
+    changelog = "https://github.com/Hydrific/pydroplet/releases/tag/${src.tag}";
+    description = "Package to connect to a Droplet device";
+    homepage = "https://github.com/Hydrific/pydroplet";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers.dotlambda ];
+  };
+}
@@ -38,7 +38,7 @@ in

 buildPythonPackage rec {
  pname = "scalene";
-  version = "1.5.52";
+  version = "1.5.55";
  pyproject = true;
  disabled = pythonOlder "3.9";

@@ -46,7 +46,7 @@ buildPythonPackage rec {
    owner = "plasma-umass";
    repo = "scalene";
    tag = "v${version}";
-    hash = "sha256-8WE/tR0tGwdNSPtieS90QAOFlS66h/JxaV2LvpZjx2E=";
+    hash = "sha256-aO7l/paYqbneDArAbXxptIlMGfvc1dAaFLucEj/7xbk=";
  };

  patches = [
@@ -95,6 +95,8 @@ buildPythonPackage rec {
  disabledTests = [
    # Flaky -- socket collision
    "test_show_browser"
+    # File not found
+    "test_nested_package_relative_import"
  ];

  # remove scalene directory to prevent pytest import confusion
@@ -1,10 +1,15 @@
 {
  lib,
+  stdenv,
  buildPythonPackage,
-  fetchPypi,
+  fetchFromGitHub,
+
+  # build-system
+  setuptools,
+
+  # tests
  nose2,
  pytestCheckHook,
-  setuptools,
 }:

 buildPythonPackage rec {
@@ -12,10 +17,11 @@ buildPythonPackage rec {
  version = "2.12.2";
  pyproject = true;

-  src = fetchPypi {
-    pname = "setuptools_dso";
-    inherit version;
-    hash = "sha256-evt2+T0Tzp2iRQJnbY8tTbw9o1xiRflfJ9+fp0RQeaQ=";
+  src = fetchFromGitHub {
+    owner = "epics-base";
+    repo = "setuptools_dso";
+    tag = version;
+    hash = "sha256-YYm3mTA443vcD/4vHa7EgPzvDDzBic64NWWJDQYQHKs=";
  };

  build-system = [ setuptools ];
@@ -25,10 +31,16 @@ buildPythonPackage rec {
    pytestCheckHook
  ];

-  meta = with lib; {
+  disabledTests = lib.optionals stdenv.hostPlatform.isDarwin [
+    # distutils.compilers.C.errors.CompileError: command '/nix/store/...-clang-wrapper-21.1.2/bin/clang' failed with exit code 1
+    # fatal error: 'string' file not found
+    "test_cxx"
+  ];
+
+  meta = {
    description = "Setuptools extension for building non-Python Dynamic Shared Objects";
    homepage = "https://github.com/mdavidsaver/setuptools_dso";
-    license = licenses.bsd3;
-    maintainers = with maintainers; [ marius851000 ];
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ marius851000 ];
  };
 }
@@ -1,13 +1,16 @@
 {
  lib,
  buildPythonPackage,
-  click,
-  fetchPypi,
-  ordered-set,
-  pillow,
-  pythonOlder,
+  fetchFromGitHub,
+
+  # build-system
  setuptools,
  setuptools-dso,
+
+  # dependencies
+  click,
+  ordered-set,
+  pillow,
  sortedcollections,
 }:

@@ -16,19 +19,23 @@ buildPythonPackage rec {
  version = "1.2.0";
  pyproject = true;

-  disabled = pythonOlder "3.9";
-
-  src = fetchPypi {
-    inherit pname version;
-    hash = "sha256-0i7brL/hn8SOj3q/rpOcOQ9QW/4Mew2fr0Y42k4K9UI=";
+  src = fetchFromGitHub {
+    owner = "SkyTemple";
+    repo = "tilequant";
+    tag = version;
+    # Fetch tilequant source files
+    fetchSubmodules = true;
+    hash = "sha256-MgyKLwVdL2DRR8J88q7Q57rQiX4FTOlQ5rTY3UuhaJM=";
  };

-  pythonRelaxDeps = [ "pillow" ];
-
  build-system = [
    setuptools
+    setuptools-dso
  ];

+  pythonRelaxDeps = [
+    "click"
+  ];
  dependencies = [
    click
    ordered-set
@@ -41,12 +48,12 @@ buildPythonPackage rec {

  pythonImportsCheck = [ "tilequant" ];

-  meta = with lib; {
+  meta = {
    description = "Tool for quantizing image colors using tile-based palette restrictions";
    homepage = "https://github.com/SkyTemple/tilequant";
    changelog = "https://github.com/SkyTemple/tilequant/releases/tag/${version}";
-    license = licenses.gpl3Plus;
-    maintainers = with maintainers; [ marius851000 ];
+    license = lib.licenses.gpl3Plus;
+    maintainers = with lib.maintainers; [ marius851000 ];
    mainProgram = "tilequant";
  };
 }
@@ -7,13 +7,13 @@

 buildPythonPackage rec {
  pname = "types-regex";
-  version = "2025.9.18.20250921";
+  version = "2025.10.23.20251023";
  pyproject = true;

  src = fetchPypi {
    pname = "types_regex";
    inherit version;
-    hash = "sha256-4XAMIbHDEpDkpt1iWE7R8dadcE7RZ2toqO2i0dJCDD8=";
+    hash = "sha256-dfAjvwrwV+AVennpnmZpBTe+uzXZA9uPKbTlwtO+54I=";
  };

  build-system = [
@@ -0,0 +1,50 @@
+{
+  aiohttp,
+  buildPythonPackage,
+  fetchFromGitHub,
+  hatchling,
+  lib,
+  pydantic,
+  pytest-asyncio,
+  pytestCheckHook,
+  pytz,
+}:
+
+buildPythonPackage rec {
+  pname = "victron-vrm";
+  version = "0.1.8";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "KSoft-Si";
+    repo = "vrm-client";
+    tag = "v${version}";
+    hash = "sha256-NxkMUwiFD8C7Nrtd7cjoFvdkbAOJkIIt+TPtkous8Nc=";
+  };
+
+  build-system = [ hatchling ];
+
+  dependencies = [
+    aiohttp
+    pydantic
+    pytz
+  ];
+
+  pythonImportsCheck = [ "victron_vrm" ];
+
+  nativeCheckInputs = [
+    pytest-asyncio
+    pytestCheckHook
+  ];
+
+  # tests connect to vrmapi.victronenergy.com
+  doCheck = false;
+
+  meta = {
+    changelog = "https://github.com/KSoft-Si/vrm-client/releases/tag/${src.tag}";
+    description = "Async Python client for the Victron Energy VRM API";
+    homepage = "https://github.com/KSoft-Si/vrm-client";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers.dotlambda ];
+  };
+}
--- a/Show More
+++ b/Show More