diff --git a/ci/github-script/merge.js b/ci/github-script/merge.js
index c229713b47c0..f0867ab3eae2 100644
--- a/ci/github-script/merge.js
+++ b/ci/github-script/merge.js
@@ -46,12 +46,15 @@ function runChecklist({
       classify(pull_request.base.ref).type.includes('development'),
     'PR touches only files of packages in `pkgs/by-name/`.': allByName,
     'PR is at least one of:': {
-      'Approved by a committer.': committers.intersection(approvals).size > 0,
+      'Approved by a [committer](https://github.com/orgs/NixOS/teams/nixpkgs-committers).':
+        committers.intersection(approvals).size > 0,
       'Backported via label.':
         pull_request.user.login === 'nixpkgs-ci[bot]' &&
         pull_request.head.ref.startsWith('backport-'),
-      'Opened by a committer.': committers.has(pull_request.user.id),
-      'Opened by r-ryantm.': pull_request.user.login === 'r-ryantm',
+      'Opened by a [committer](https://github.com/orgs/NixOS/teams/nixpkgs-committers).':
+        committers.has(pull_request.user.id),
+      'Opened by [@r-ryantm](https://nix-community.github.io/nixpkgs-update/r-ryantm/).':
+        pull_request.user.login === 'r-ryantm',
     },
   }
 
diff --git a/doc/release-notes/rl-2605.section.md b/doc/release-notes/rl-2605.section.md
index 65e3d7ae270b..cc4ec42afe15 100644
--- a/doc/release-notes/rl-2605.section.md
+++ b/doc/release-notes/rl-2605.section.md
@@ -154,6 +154,8 @@
 
 - Plugins for the JetBrains IDEs have been removed from Nixpkgs.
 
+- `spacetimedb` has been updated from 1.12.0 to [2.0.3](https://github.com/clockworklabs/SpacetimeDB/releases/tag/v2.0.3). Breaking changes and migration notes from 1.0 to 2.0 can be found [here](https://spacetimedb.com/docs/upgrade/).
+
 - `jetbrains.plugins.addPlugins` no longer supports plugin names or ID strings.
   You can still use `addPlugins` with plugin derivations, such as plugins packaged outside of Nixpkgs.
 
diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 583ade4b98f0..53f01c93aa9e 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -6107,6 +6107,12 @@
     githubId = 10701143;
     name = "David Crompton";
   };
+  davidkern = {
+    email = "nixpkgs-davidkern@proton.me";
+    github = "davidkern";
+    githubId = 1548554;
+    name = "David Kern";
+  };
   davidlghellin = {
     email = "hola@devel0pez.com";
     github = "davidlghellin";
@@ -10119,6 +10125,12 @@
     githubId = 28863828;
     name = "guserav";
   };
+  gustlik501 = {
+    email = "sevcnikar.gregor2@gmail.com";
+    github = "Gustlik501";
+    githubId = 36334538;
+    name = "Gustlik501";
+  };
   guttermonk = {
     github = "guttermonk";
     githubId = 4753752;
@@ -14279,6 +14291,13 @@
     githubId = 2037002;
     name = "Konstantinos";
   };
+  kosslan = {
+    email = "kosslan@kosslan.dev";
+    matrix = "@kosslan:kosslan.dev";
+    github = "kosslan";
+    githubId = 98048456;
+    name = "kosslan";
+  };
   kotatsuyaki = {
     email = "kotatsuyaki@mail.kotatsu.dev";
     github = "kotatsuyaki";
@@ -19922,6 +19941,11 @@
     githubId = 7397786;
     name = "Odysseas Georgoudis";
   };
+  oenu = {
+    github = "oenu";
+    githubId = 51684443;
+    name = "Adam Newton-Blows";
+  };
   ofalvai = {
     email = "ofalvai@gmail.com";
     github = "ofalvai";
@@ -25407,6 +25431,12 @@
     github = "spectre256";
     githubId = 72505298;
   };
+  Sped0n = {
+    name = "Ryan Wen";
+    email = "hi@sped0n.com";
+    github = "Sped0n";
+    githubId = 197479310;
+  };
   spencerjanssen = {
     email = "spencerjanssen@gmail.com";
     matrix = "@sjanssen:matrix.org";
diff --git a/nixos/doc/manual/contributing-to-this-manual.chapter.md b/nixos/doc/manual/contributing-to-this-manual.chapter.md
index bf8aea99efef..19549c32f277 100644
--- a/nixos/doc/manual/contributing-to-this-manual.chapter.md
+++ b/nixos/doc/manual/contributing-to-this-manual.chapter.md
@@ -7,7 +7,7 @@ You can quickly check your edits with the following:
 
 ```ShellSession
 $ cd /path/to/nixpkgs
-$ $EDITOR doc/nixos/manual/... # edit the manual
+$ $EDITOR nixos/doc/manual/... # edit the manual
 $ nix-build nixos/release.nix -A manual.x86_64-linux
 ```
 
diff --git a/nixos/doc/manual/release-notes/rl-2605.section.md b/nixos/doc/manual/release-notes/rl-2605.section.md
index cb427673bbd0..7e7274883e06 100644
--- a/nixos/doc/manual/release-notes/rl-2605.section.md
+++ b/nixos/doc/manual/release-notes/rl-2605.section.md
@@ -68,6 +68,8 @@
 
 - [udp-over-tcp](https://github.com/mullvad/udp-over-tcp), a tunnel for proxying UDP traffic over a TCP stream. Available as `services.udp-over-tcp`.
 
+- [turborepo-remote-cache](https://ducktors.github.io/turborepo-remote-cache/), an open-source implementation of the [Turborepo custom remote cache server](https://turbo.build/repo/docs/core-concepts/remote-caching#self-hosting). Available as [services.turborepo-remote-cache](options.html#opt-services.turborepo-remote-cache).
+
 - [Komodo Periphery](https://github.com/moghtech/komodo), a multi-server Docker and Git deployment agent by Komodo. Available as [services.komodo-periphery](#opt-services.komodo-periphery.enable).
 
 - [Shoko](https://shokoanime.com), an anime management system. Available as [services.shoko](#opt-services.shoko.enable).
diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix
index 532ce6340f05..9a474422d923 100644
--- a/nixos/modules/module-list.nix
+++ b/nixos/modules/module-list.nix
@@ -609,6 +609,7 @@
   ./services/development/lorri.nix
   ./services/development/nixseparatedebuginfod2.nix
   ./services/development/rstudio-server/default.nix
+  ./services/development/turborepo-remote-cache.nix
   ./services/development/vsmartcard-vpcd.nix
   ./services/development/zammad.nix
   ./services/display-managers/cosmic-greeter.nix
diff --git a/nixos/modules/services/desktop-managers/budgie.nix b/nixos/modules/services/desktop-managers/budgie.nix
index 160ac04ecd6d..5f7abf82e7b0 100644
--- a/nixos/modules/services/desktop-managers/budgie.nix
+++ b/nixos/modules/services/desktop-managers/budgie.nix
@@ -185,6 +185,7 @@ in
       ]
       ++ lib.optional config.networking.networkmanager.enable pkgs.networkmanagerapplet
       ++ (utils.removePackagesByName [
+        bluejay
         nemo
         eom
         pluma
@@ -199,6 +200,7 @@ in
         gammastep
         grim
         killall
+        mesa-demos # eglinfo
         slurp
         swaybg
         swayidle
@@ -247,7 +249,7 @@ in
     programs.nm-applet.enable = config.networking.networkmanager.enable; # Budgie has no Network applet.
     programs.nm-applet.indicator = true; # Budgie uses AppIndicators.
 
-    hardware.bluetooth.enable = mkDefault true; # for Budgie's Status Indicator and BCC's Bluetooth panel.
+    hardware.bluetooth.enable = mkDefault true; # for Budgie's Status Indicator and Bluejay.
 
     xdg.portal.enable = mkDefault true; # for BCC's Applications panel.
     xdg.portal.extraPortals = with pkgs; [
diff --git a/nixos/modules/services/development/turborepo-remote-cache.nix b/nixos/modules/services/development/turborepo-remote-cache.nix
new file mode 100644
index 000000000000..4b2ca2fdb13c
--- /dev/null
+++ b/nixos/modules/services/development/turborepo-remote-cache.nix
@@ -0,0 +1,131 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  cfg = config.services.turborepo-remote-cache;
+
+  inherit (lib)
+    boolToString
+    isBool
+    literalExpression
+    mapAttrs
+    mkEnableOption
+    mkIf
+    mkOption
+    mkPackageOption
+    types
+    ;
+in
+{
+  options.services.turborepo-remote-cache = {
+    enable = mkEnableOption "Turborepo Remote Cache" // {
+      description = ''
+        Enables the daemon for `turborepo-remote-cache`,
+        an open source implementation of the Turborepo custom remote cache server.
+      '';
+    };
+
+    package = mkPackageOption pkgs "turborepo-remote-cache" { };
+
+    environment = mkOption {
+      type = types.attrsOf (
+        types.nullOr (
+          types.oneOf [
+            types.bool
+            types.int
+            types.str
+          ]
+        )
+      );
+      default = { };
+      description = ''
+        Environment variables to set.
+
+        Turborepo-remote-cache is configured through the use of environment variables.
+        The available configuration options can be found in the [documentation][envvars].
+
+        [envvars]: https://ducktors.github.io/turborepo-remote-cache/environment-variables.html
+
+        Note that all environment variables set through this configuration
+        parameter will be readable by anyone with access to the host
+        machine. Therefore, sensitive information like {env}`TURBO_TOKEN`
+        should never be set using this configuration option, but should instead use
+        [](#opt-services.turborepo-remote-cache.environmentFile).
+        See the documentation for that option for more information.
+
+        Any environment variables specified in the
+        [](#opt-services.turborepo-remote-cache.environmentFile)
+        will supersede environment variables specified in this option.
+      '';
+
+      example = literalExpression ''
+        {
+          NODE_ENV = "production";
+          PORT = 8080;
+        }
+      '';
+    };
+
+    environmentFile = mkOption {
+      type = types.nullOr types.path;
+      default = null;
+      description = ''
+        Additional environment file as defined in {manpage}`systemd.exec(5)`.
+
+        Secrets like {env}`TURBO_TOKEN` may be passed to the
+        service without making them readable to everyone with access to
+        systemctl by using this configuration parameter.
+
+        Note that this file needs to be available on the host on which
+        `turborepo-remote-cache` is running.
+
+        See the [documentation][envvars]
+        and the [](#opt-services.turborepo-remote-cache.environment) configuration parameter
+        for further options.
+
+        [envvars]: https://ducktors.github.io/turborepo-remote-cache/environment-variables.html
+      '';
+      example = "/run/secrets/turborepo-remote-cache.env";
+    };
+
+    openFirewall = mkOption {
+      type = types.bool;
+      default = false;
+      description = ''
+        Open ports in the firewall for turborepo-remote-cache daemon.
+      '';
+    };
+  };
+
+  config = mkIf cfg.enable {
+    systemd.services.turborepo-remote-cache = {
+      serviceConfig = {
+        Restart = "always";
+        EnvironmentFile = cfg.environmentFile;
+        ExecStart = "${cfg.package}/bin/turborepo-remote-cache";
+
+        DynamicUser = true;
+        ProtectSystem = "strict";
+        ProtectHome = true;
+        NoNewPrivileges = true;
+        PrivateDevices = true;
+        PrivateTmp = true;
+      };
+      environment = mapAttrs (
+        name: value: if isBool value then boolToString value else toString value
+      ) cfg.environment;
+      wantedBy = [ "default.target" ];
+    };
+
+    networking.firewall.allowedTCPPorts =
+      let
+        # 3000 is the default port as specified in
+        # https://ducktors.github.io/turborepo-remote-cache/environment-variables.html
+        port = cfg.environment.PORT or 3000;
+      in
+      mkIf cfg.openFirewall [ port ];
+  };
+}
diff --git a/nixos/modules/services/web-apps/weblate.nix b/nixos/modules/services/web-apps/weblate.nix
index ff56b1927db6..9ab21a8b7e52 100644
--- a/nixos/modules/services/web-apps/weblate.nix
+++ b/nixos/modules/services/web-apps/weblate.nix
@@ -247,7 +247,6 @@ in
         locations = {
           "= /favicon.ico".alias = "${finalPackage}/${python.sitePackages}/weblate/static/favicon.ico";
           "/static/".alias = "${finalPackage.static}/";
-          "/media/".alias = "/var/lib/weblate/media/";
           "/".proxyPass = "http://unix:///run/weblate.socket";
         };
       };
diff --git a/nixos/modules/services/web-servers/nginx/default.nix b/nixos/modules/services/web-servers/nginx/default.nix
index e557ee92f7a7..6be3703d91da 100644
--- a/nixos/modules/services/web-servers/nginx/default.nix
+++ b/nixos/modules/services/web-servers/nginx/default.nix
@@ -202,7 +202,11 @@ let
 
             ssl_protocols ${cfg.sslProtocols};
             ${optionalString (cfg.sslCiphers != null) "ssl_ciphers ${cfg.sslCiphers};"}
-            ${optionalString (cfg.sslDhparam != null) "ssl_dhparam ${cfg.sslDhparam};"}
+            ${optionalString (cfg.sslDhparam != false)
+              "ssl_dhparam ${
+                if cfg.sslDhparam == true then config.security.dhparams.params.nginx.path else cfg.sslDhparam
+              };"
+            }
 
             ${optionalString cfg.recommendedTlsSettings ''
               # Consider https://ssl-config.mozilla.org/#server=nginx&config=intermediate as the lower bound
@@ -978,10 +982,10 @@ in
       };
 
       sslDhparam = mkOption {
-        type = types.nullOr types.path;
-        default = null;
+        type = types.either types.path types.bool;
+        default = false;
         example = "/path/to/dhparams.pem";
-        description = "Path to DH parameters file.";
+        description = "Path to DH parameters file, or `true` to generate with `security.dhparms.params.nginx`.";
       };
 
       proxyResolveWhileRunning = mkOption {
@@ -1653,6 +1657,8 @@ in
       in
       listToAttrs acmePairs;
 
+    security.dhparams.params.nginx = lib.mkIf (cfg.sslDhparam == true) { };
+
     users.users = optionalAttrs (cfg.user == "nginx") {
       nginx = {
         group = cfg.group;
diff --git a/nixos/tests/all-tests.nix b/nixos/tests/all-tests.nix
index c20e978ea124..9aed52bd56ca 100644
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@@ -1672,6 +1672,7 @@ in
   tuliprox = runTest ./tuliprox.nix;
   tuned = runTest ./tuned.nix;
   tuptime = runTest ./tuptime.nix;
+  turborepo-remote-cache = runTest ./turborepo-remote-cache.nix;
   turbovnc-headless-server = runTest ./turbovnc-headless-server.nix;
   turn-rs = runTest ./turn-rs.nix;
   tusd = runTest ./tusd/default.nix;
diff --git a/nixos/tests/turborepo-remote-cache.nix b/nixos/tests/turborepo-remote-cache.nix
new file mode 100644
index 000000000000..86cccd52c275
--- /dev/null
+++ b/nixos/tests/turborepo-remote-cache.nix
@@ -0,0 +1,65 @@
+{ lib, ... }:
+
+let
+  ports = {
+    turborepo-remote-cache = 8080;
+  };
+
+  token = "myrandomtoken";
+  team = "nixos-team";
+  # require('crypto').randomBytes(20).toString('hex');
+  artifactid = "82286e93a6f84e18a8fe4770c5a88b24653e7f59";
+in
+{
+  name = "turborepo-remote-cache";
+
+  nodes.machine = {
+    services.turborepo-remote-cache = {
+      enable = true;
+
+      environment = {
+        PORT = ports.turborepo-remote-cache;
+        TURBO_TEAM = team;
+        TURBO_TOKEN = token;
+      };
+    };
+  };
+
+  testScript = ''
+    import json
+
+    machine.wait_for_unit("turborepo-remote-cache.service")
+    machine.wait_for_open_port(${toString ports.turborepo-remote-cache})
+
+    def read_json(input):
+      try:
+        return json.loads(input)
+      except Exception as e:
+        print(input)
+        raise e
+
+    out = read_json(machine.succeed("""curl 127.0.0.1:${toString ports.turborepo-remote-cache}/v8/artifacts/status? \
+      -H 'Content-Type: application/json' \
+      -H "Authorization: Bearer ${token}"
+      """))
+
+    if out["status"] != "enabled":
+      raise Exception(f"status is not enabled in response: {out}")
+
+    out = read_json(machine.succeed("""curl -X PUT "127.0.0.1:${toString ports.turborepo-remote-cache}/v8/artifacts/${artifactid}?teamId=${team}" \
+      -H "Authorization: Bearer ${token}" \
+      -H "Content-Type: application/octet-stream" \
+      -d 'myartifact'"""))
+    if "urls" not in out:
+      raise Exception(f"'urls' not in response: {out}")
+
+    out = machine.succeed("""curl 127.0.0.1:${toString ports.turborepo-remote-cache}/v8/artifacts/${artifactid}?teamId=${team} \
+      -H 'Content-Type: application/json' \
+      -H "Authorization: Bearer ${token}"
+      """)
+    if out != "myartifact":
+      raise Exception(f"reponse in not 'myartifact': {out}")
+  '';
+
+  meta.maintainers = [ lib.maintainers.ibizaman ];
+}
diff --git a/nixos/tests/web-apps/weblate.nix b/nixos/tests/web-apps/weblate.nix
index 27df88621973..b73a7971353d 100644
--- a/nixos/tests/web-apps/weblate.nix
+++ b/nixos/tests/web-apps/weblate.nix
@@ -56,7 +56,8 @@ in
       environment.etc."xdg/weblate".text = ''
         [weblate]
         url = https://${serverDomain}/api/
-        key = ${apiToken}
+        [keys]
+        https://${serverDomain}/api/ = ${apiToken}
       '';
 
       networking.hosts."${nodes.server.networking.primaryIPAddress}" = [ "${serverDomain}" ];
diff --git a/pkgs/applications/editors/vscode/extensions/nomicfoundation.hardhat-solidity/default.nix b/pkgs/applications/editors/vscode/extensions/nomicfoundation.hardhat-solidity/default.nix
index 8437955ff8c8..f0b48aae3b8c 100644
--- a/pkgs/applications/editors/vscode/extensions/nomicfoundation.hardhat-solidity/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/nomicfoundation.hardhat-solidity/default.nix
@@ -4,8 +4,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "hardhat-solidity";
     publisher = "nomicfoundation";
-    version = "0.8.26";
-    hash = "sha256-AXiGdUjoFl0R41bRJeGc1Gqs/O6foDwqiH2MmkKxhdo=";
+    version = "0.8.28";
+    hash = "sha256-IKJ0d/Da0haRmtR5r/bKvDNkDV58cDdARuPGoJ2mUqI=";
   };
 
   meta = {
diff --git a/pkgs/applications/editors/vscode/extensions/saoudrizwan.claude-dev/default.nix b/pkgs/applications/editors/vscode/extensions/saoudrizwan.claude-dev/default.nix
index f1417bb85b39..97b30859d993 100644
--- a/pkgs/applications/editors/vscode/extensions/saoudrizwan.claude-dev/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/saoudrizwan.claude-dev/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "claude-dev";
     publisher = "saoudrizwan";
-    version = "3.66.0";
-    hash = "sha256-5aSmGAY6Myd5V4bciVo8FcxpBLKtQtddx8HvZdIMhsQ=";
+    version = "3.71.0";
+    hash = "sha256-TzEydphPZ/OmIRJYslFJuk26f97mcIukPDS0WUxMOt4=";
   };
 
   meta = {
diff --git a/pkgs/applications/editors/vscode/update-vscode.sh b/pkgs/applications/editors/vscode/update-vscode.sh
index c092ae92c86f..ea9ecc5d8359 100755
--- a/pkgs/applications/editors/vscode/update-vscode.sh
+++ b/pkgs/applications/editors/vscode/update-vscode.sh
@@ -13,7 +13,7 @@ if [[ -n "$version" ]]; then
   latestVersion="$version"
 else
   latestVersion=$(curl --fail --silent https://api.github.com/repos/Microsoft/vscode/releases | jq --raw-output 'map(select(.prerelease==false)) | .[].tag_name' | sort -V | tail -n1)
-  if ! [[ "$latestVersion" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+  if ! [[ "$latestVersion" =~ ^[0-9]+\.[0-9]+(\.[0-9]+)?$ ]]; then
     echo "Error: Invalid version from GitHub API: $latestVersion"
     exit 1
   fi
diff --git a/pkgs/applications/editors/vscode/vscode.nix b/pkgs/applications/editors/vscode/vscode.nix
index 02424724f631..ad8d71d371b6 100644
--- a/pkgs/applications/editors/vscode/vscode.nix
+++ b/pkgs/applications/editors/vscode/vscode.nix
@@ -17,7 +17,6 @@
   commandLineArgs ? "",
   useVSCodeRipgrep ? stdenv.hostPlatform.isDarwin,
 }:
-
 let
   inherit (stdenv.hostPlatform) system;
   throwSystem = throw "Unsupported system: ${system}";
@@ -36,20 +35,25 @@ let
 
   hash =
     {
-      x86_64-linux = "sha256-cBYBA8DdpQ9lGjfuJ6ZammSmk4c0zxoLzUnYNhK9sac=";
-      x86_64-darwin = "sha256-84PnRIUTfsf4T36GkgNaeaKAcz0Ul/BsP6Sd93G/F2g=";
-      aarch64-linux = "sha256-nncqNGnODOgu66jp7ok/spblLSl0iZ1lPJqrkSDncIA=";
-      aarch64-darwin = "sha256-ckwFJ4P2hCy7TTUS+peUNad00ydk4RnAthkggrbYzAQ=";
-      armv7l-linux = "sha256-I5Phy1eY+oYAVBklvtUldkYbmgJUYCBr7hAGIxnNTvA=";
+      x86_64-linux = "sha256-3s0UzfkufKXXm57JgKaMan/SRAlGTLmdIRXXpzxQvAo=";
+      x86_64-darwin = "sha256-1+1Lin4KH3BiriA6m0TJlVG4m9Xl+PyE5cJFborOATM=";
+      aarch64-linux = "sha256-p68lztb+e8OMXtyaqXDdElhuhmv4Og7R+tdRXG85DnU=";
+      aarch64-darwin = "sha256-DUjT+vqjct8WMiRecltPcL+Jn78DfnuyGTMWhaGVcRY=";
+      armv7l-linux = "sha256-70WqRdVnx4zTY5eUFrxz4MiREXNSvahuINcu/9VNkZU=";
     }
     .${system} or throwSystem;
 
   # Please backport all compatible updates to the stable release.
   # This is important for the extension ecosystem.
-  version = "1.109.5";
+  version = "1.111.0";
+
+  # The update server (update.code.visualstudio.com) expects the version path
+  # segment in X.Y.Z form, so we normalize X.Y to X.Y.0 (e.g. "1.110" → "1.110.0").
+  # Upstream GitHub release tags may use X.Y, which is why this normalization is needed.
+  downloadVersion = lib.versions.pad 3 version;
 
   # This is used for VS Code - Remote SSH test
-  rev = "072586267e68ece9a47aa43f8c108e0dcbf44622";
+  rev = "ce099c1ed25d9eb3076c11e4a280f3eb52b4fbeb";
 in
 buildVscode {
   pname = "vscode" + lib.optionalString isInsiders "-insiders";
@@ -66,8 +70,8 @@ buildVscode {
     ;
 
   src = fetchurl {
-    name = "VSCode_${version}_${plat}.${archive_fmt}";
-    url = "https://update.code.visualstudio.com/${version}/${plat}/stable";
+    name = "VSCode_${downloadVersion}_${plat}.${archive_fmt}";
+    url = "https://update.code.visualstudio.com/${downloadVersion}/${plat}/stable";
     inherit hash;
   };
 
@@ -82,7 +86,7 @@ buildVscode {
     src = fetchurl {
       name = "vscode-server-${rev}.tar.gz";
       url = "https://update.code.visualstudio.com/commit:${rev}/server-linux-x64/stable";
-      hash = "sha256-E9Oruk0rwp1TcJ0QXwBoNMStJYmhzvXXkY0SA8bQv3Y=";
+      hash = "sha256-0fEyS5/FtUBVE6J8NGghKITtIq6Yykyi5Vt8S20INP8=";
     };
     stdenv = stdenvNoCC;
   };
@@ -117,6 +121,7 @@ buildVscode {
       johnrtitor
       jefflabonte
       wetrustinprize
+      oenu
     ];
     platforms = [
       "x86_64-linux"
diff --git a/pkgs/applications/emulators/libretro/cores/np2kai.nix b/pkgs/applications/emulators/libretro/cores/np2kai.nix
index 4d37114b8c1b..0dfa1b3a0795 100644
--- a/pkgs/applications/emulators/libretro/cores/np2kai.nix
+++ b/pkgs/applications/emulators/libretro/cores/np2kai.nix
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore rec {
   core = "np2kai";
-  version = "0-unstable-2026-02-08";
+  version = "0-unstable-2026-03-08";
 
   src = fetchFromGitHub {
     owner = "AZO234";
     repo = "NP2kai";
-    rev = "44c8a8c61640f2d5476af5224dbd88a36079f45d";
-    hash = "sha256-aWiFCG47ckN+b+wdxsXQmnLwGYfkhxkjYv7EMQTFgkU=";
+    rev = "36df8cd8b1397ec372d9a6f2f30d892b6f30e2b8";
+    hash = "sha256-JHKZ/FwxF9CQ6piGpnAxLqISUC4lz89jRWDIjxtxBQs=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/applications/emulators/libretro/cores/pcsx-rearmed.nix b/pkgs/applications/emulators/libretro/cores/pcsx-rearmed.nix
index d384815bca0f..f2cb5e2556a4 100644
--- a/pkgs/applications/emulators/libretro/cores/pcsx-rearmed.nix
+++ b/pkgs/applications/emulators/libretro/cores/pcsx-rearmed.nix
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "pcsx-rearmed";
-  version = "0-unstable-2026-02-23";
+  version = "0-unstable-2026-03-08";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "pcsx_rearmed";
-    rev = "5a8cedf59569a9f99caf5fda3b6d0b46a5d376a4";
-    hash = "sha256-orGU73BWcLaT2CqbdWZAT+5YOYSIb+0b1L4zQVGFZs0=";
+    rev = "6eb679d064a1efe92af79fe9970c0591c8da02d4";
+    hash = "sha256-InGMQTGCnbRMLQE5GVDF3aqnH0NY9EjDgJHoh00KGDk=";
   };
 
   dontConfigure = true;
diff --git a/pkgs/applications/emulators/libretro/cores/stella.nix b/pkgs/applications/emulators/libretro/cores/stella.nix
index 79334d888b07..bc0bab396b0d 100644
--- a/pkgs/applications/emulators/libretro/cores/stella.nix
+++ b/pkgs/applications/emulators/libretro/cores/stella.nix
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "stella";
-  version = "0-unstable-2026-02-25";
+  version = "0-unstable-2026-03-02";
 
   src = fetchFromGitHub {
     owner = "stella-emu";
     repo = "stella";
-    rev = "e0e8857f986bce1200881928193629a2105ae65d";
-    hash = "sha256-Nw+G8VMS7YWfzgssvk5U2M506vVkgkA4Bnym0wpyfbw=";
+    rev = "b89c2fecb2a00449c484f47ff8437bce2db1b5b9";
+    hash = "sha256-/cWHUlr9msupT6acfUub1Jr7LCPlasFD7ZCrS9kvCnI=";
   };
 
   makefile = "Makefile";
diff --git a/pkgs/applications/misc/electrum/default.nix b/pkgs/applications/misc/electrum/default.nix
index 3bde96adaf13..805e4b5bb948 100644
--- a/pkgs/applications/misc/electrum/default.nix
+++ b/pkgs/applications/misc/electrum/default.nix
@@ -23,12 +23,12 @@ let
 in
 python3.pkgs.buildPythonApplication rec {
   pname = "electrum";
-  version = "4.7.0";
+  version = "4.7.1";
   pyproject = true;
 
   src = fetchurl {
     url = "https://download.electrum.org/${version}/Electrum-${version}.tar.gz";
-    hash = "sha256-1bC437EJWECmO+lmZVXbL2WQwxEIynlVmRJyEfsYLO8=";
+    hash = "sha256-kKxjMhfjF1wVYDiEZ6t9PgAyFQLuUeS+2lZulEv2BR8=";
   };
 
   build-system = with python3.pkgs; [
diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index d2cf65cc423e..7d23164cbc2b 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -128,13 +128,13 @@
     "vendorHash": "sha256-/dOiXO2aPkuZaFiwv/6AXJdIADgx8T7eOwvJfBBoqg8="
   },
   "buildkite_buildkite": {
-    "hash": "sha256-kQ0uFyRdhZYNVTd1YdzyZZVdQrZVpnZeYeThhiML5ng=",
+    "hash": "sha256-0FtTYHRWUJk2c/4f8bvF8mU1L7L8rFK6YyKqSX6EHFg=",
     "homepage": "https://registry.terraform.io/providers/buildkite/buildkite",
     "owner": "buildkite",
     "repo": "terraform-provider-buildkite",
-    "rev": "v1.31.1",
+    "rev": "v1.31.2",
     "spdx": "MIT",
-    "vendorHash": "sha256-XyM6C5OL/xRJ2oVhANQQBmm2eT0Pj5RrEqe7ld2un70="
+    "vendorHash": "sha256-fRDthgXec+AdKDx0n2/8msa78bd1cUSDPx7VJ+UP8oI="
   },
   "camptocamp_pass": {
     "hash": "sha256-GQ2g7VyK+eeBqW3LMR4U0gMYsvQnG3y+KEKKkvnmfsk=",
@@ -328,11 +328,11 @@
     "vendorHash": "sha256-fP6brpY/wRI1Yjgapzi+FfOci65gxWeOZulXbGdilrE="
   },
   "dnsimple_dnsimple": {
-    "hash": "sha256-zPvHTSmptdm5w28rpgmwrYBIo+0Y077wZ+FNKbKHaT4=",
+    "hash": "sha256-pbc7jLhIm+ogcpCBhi4CVsr2qM5vDzH0QuP3+cEVYLw=",
     "homepage": "https://registry.terraform.io/providers/dnsimple/dnsimple",
     "owner": "dnsimple",
     "repo": "terraform-provider-dnsimple",
-    "rev": "v2.0.0",
+    "rev": "v2.0.1",
     "spdx": "MPL-2.0",
     "vendorHash": "sha256-DRMbcAR+DDrxrg1jNgnoWUg+OjlKm7wkqgIN6Hhkp3U="
   },
@@ -526,11 +526,11 @@
     "vendorHash": null
   },
   "hashicorp_azurerm": {
-    "hash": "sha256-iaPwUzwoyxRrb8K6oqIlZxvJ0qiDmWvdh0pgQeDWn6I=",
+    "hash": "sha256-sg6CJVQJybbYghcp8dBhm2B7xvmsuUS7Je2jmGZHwZE=",
     "homepage": "https://registry.terraform.io/providers/hashicorp/azurerm",
     "owner": "hashicorp",
     "repo": "terraform-provider-azurerm",
-    "rev": "v4.62.0",
+    "rev": "v4.63.0",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },
@@ -1274,11 +1274,11 @@
     "vendorHash": "sha256-IR6KjFW5GbsOIm3EEFyx3ctwhbifZlcNaZeGhbeK/Wo="
   },
   "sysdiglabs_sysdig": {
-    "hash": "sha256-mzDVPOEu5nIOYykKvudGmByt0sY0Xl+FuSuQruQXTi0=",
+    "hash": "sha256-TKdZaE3FJ3vE+wxCrqaIuON1sKW/EJAZ1YE73v23K9I=",
     "homepage": "https://registry.terraform.io/providers/sysdiglabs/sysdig",
     "owner": "sysdiglabs",
     "repo": "terraform-provider-sysdig",
-    "rev": "v3.4.3",
+    "rev": "v3.5.0",
     "spdx": "MPL-2.0",
     "vendorHash": "sha256-rWiafaFE1RolO9JUN1WoW4EWJjR7kpfeVEOTLf21j50="
   },
diff --git a/pkgs/applications/networking/instant-messengers/discord/sources.json b/pkgs/applications/networking/instant-messengers/discord/sources.json
index fbe03bf9d6ae..dd5b04e04881 100644
--- a/pkgs/applications/networking/instant-messengers/discord/sources.json
+++ b/pkgs/applications/networking/instant-messengers/discord/sources.json
@@ -1,42 +1,42 @@
 {
   "linux-canary": {
-    "hash": "sha256-HL6QPiKDg8io8Uhb2u2wDi+5FvwkZzHh4cqBJ6t4qOg=",
-    "url": "https://canary.dl2.discordapp.net/apps/linux/0.0.873/discord-canary-0.0.873.tar.gz",
-    "version": "0.0.873"
+    "hash": "sha256-+OgSY9bh0hiO3z4RO5cePGnB92DO9tcjPiswt5fhQCM=",
+    "url": "https://canary.dl2.discordapp.net/apps/linux/0.0.889/discord-canary-0.0.889.tar.gz",
+    "version": "0.0.889"
   },
   "linux-development": {
-    "hash": "sha256-EVkjWoqWl9Z+iHCLPOLu4PIUb2wC3HVcPVjOVz++IVw=",
-    "url": "https://development.dl2.discordapp.net/apps/linux/0.0.94/discord-development-0.0.94.tar.gz",
-    "version": "0.0.94"
+    "hash": "sha256-wybYWGNo7FhKC7W3zPEKBc4VO5UulCaRacjjKqbleQE=",
+    "url": "https://development.dl2.discordapp.net/apps/linux/0.0.97/discord-development-0.0.97.tar.gz",
+    "version": "0.0.97"
   },
   "linux-ptb": {
-    "hash": "sha256-X8PZkMhFYmWjeKPAvxtyBgrQAofkEpD1ow9gzm7v0LQ=",
-    "url": "https://ptb.dl2.discordapp.net/apps/linux/0.0.178/discord-ptb-0.0.178.tar.gz",
-    "version": "0.0.178"
+    "hash": "sha256-47k+PQf1A79cSIBLktcB8olCoV5DnxTjPg+Dx5YSb8w=",
+    "url": "https://ptb.dl2.discordapp.net/apps/linux/0.0.181/discord-ptb-0.0.181.tar.gz",
+    "version": "0.0.181"
   },
   "linux-stable": {
-    "hash": "sha256-AyKUq2GJjMam2r7oQjdQBhBsTYbhVtnUaTeLP4emRIE=",
-    "url": "https://stable.dl2.discordapp.net/apps/linux/0.0.125/discord-0.0.125.tar.gz",
-    "version": "0.0.125"
+    "hash": "sha256-cef++sTEiqq1H+mHYyIw5Z/Tj1dAoLtKQRw7OSB/axY=",
+    "url": "https://stable.dl2.discordapp.net/apps/linux/0.0.127/discord-0.0.127.tar.gz",
+    "version": "0.0.127"
   },
   "osx-canary": {
-    "hash": "sha256-MPE+EQEvvodFJy0kLT2VQUpMJh3wuh15nhena1LeDuI=",
-    "url": "https://canary.dl2.discordapp.net/apps/osx/0.0.977/DiscordCanary.dmg",
-    "version": "0.0.977"
+    "hash": "sha256-VbyhJjp2EblclRnYfzuAVnOx1cdVtbcZYunJivNSA1I=",
+    "url": "https://canary.dl2.discordapp.net/apps/osx/0.0.994/DiscordCanary.dmg",
+    "version": "0.0.994"
   },
   "osx-development": {
-    "hash": "sha256-B1//zMlTv2+RWHfWZSaaU8ubVOwWob+EYjNdtFRwlgg=",
-    "url": "https://development.dl2.discordapp.net/apps/osx/0.0.107/DiscordDevelopment.dmg",
-    "version": "0.0.107"
+    "hash": "sha256-85i2vjOj4JhoKwcACyXzUKwonb5qndYoy+4AjrXtaLE=",
+    "url": "https://development.dl2.discordapp.net/apps/osx/0.0.111/DiscordDevelopment.dmg",
+    "version": "0.0.111"
   },
   "osx-ptb": {
-    "hash": "sha256-CbdKYcJE1Yn8s27f9QXHMVmF6U1URnUdmz5M8ilzZWU=",
-    "url": "https://ptb.dl2.discordapp.net/apps/osx/0.0.210/DiscordPTB.dmg",
-    "version": "0.0.210"
+    "hash": "sha256-oxj36f0N9hGcMSurQdgJfFHKgEdv9xL1+SSmszcct68=",
+    "url": "https://ptb.dl2.discordapp.net/apps/osx/0.0.213/DiscordPTB.dmg",
+    "version": "0.0.213"
   },
   "osx-stable": {
-    "hash": "sha256-AGFwdporeTx5D8zb7Gf5ECIM3jv4T6Z1W0BxHZ0NA8o=",
-    "url": "https://stable.dl2.discordapp.net/apps/osx/0.0.377/Discord.dmg",
-    "version": "0.0.377"
+    "hash": "sha256-3tNPV9Xk0yZQTV3yhHsYxEOJCFC1Kk2dzO2Wy7GNkCc=",
+    "url": "https://stable.dl2.discordapp.net/apps/osx/0.0.379/Discord.dmg",
+    "version": "0.0.379"
   }
 }
diff --git a/pkgs/applications/virtualization/docker/default.nix b/pkgs/applications/virtualization/docker/default.nix
index fa8e35be7153..6671d40e752b 100644
--- a/pkgs/applications/virtualization/docker/default.nix
+++ b/pkgs/applications/virtualization/docker/default.nix
@@ -438,14 +438,14 @@ in
 
   docker_29 =
     let
-      version = "29.2.1";
+      version = "29.3.0";
     in
     callPackage dockerGen {
       inherit version;
       cliRev = "v${version}";
-      cliHash = "sha256-9foA1MThtq1sQnwki+cxPuU1dZbukOgdMg99Z1EElxk=";
+      cliHash = "sha256-h4GyKwAbeF5y971iH4zRmfnvx/PxbttPBWc12u5IYvQ=";
       mobyRev = "docker-v${version}";
-      mobyHash = "sha256-LN/IVgKdBwpTR2fUq2Syi6zWP4YN7DQS4bfJVk8Agtg=";
+      mobyHash = "sha256-CYkZ9geZPQdWMqFc3MOT9aA0GVBtsoRVzxZU801DKlA=";
       runcRev = "v1.3.4";
       runcHash = "sha256-1IfY08sBoDpbLrwz1AKBRSTuCZyOgQzYPHTDUI6fOZ8=";
       containerdRev = "v2.2.1";
diff --git a/pkgs/build-support/teleport/default.nix b/pkgs/build-support/teleport/default.nix
index c1b180f13966..1dfeb063abe3 100644
--- a/pkgs/build-support/teleport/default.nix
+++ b/pkgs/build-support/teleport/default.nix
@@ -10,7 +10,7 @@
   nodejs,
   openssl,
   pkg-config,
-  pnpm_10,
+  pnpm_10_29_2,
   fetchPnpmDeps,
   pnpmConfigHook,
   rustc,
@@ -81,7 +81,7 @@ let
         pname
         version
         ;
-      pnpm = pnpm_10;
+      pnpm = pnpm_10_29_2;
       fetcherVersion = 2;
       hash = pnpmHash;
     };
@@ -91,7 +91,7 @@ let
       cargo
       nodejs
       pnpmConfigHook
-      pnpm_10
+      pnpm_10_29_2
       rustc
       rustc.llvmPackages.lld
       rustPlatform.cargoSetupHook
diff --git a/pkgs/by-name/ad/adrs/package.nix b/pkgs/by-name/ad/adrs/package.nix
index 4f60adf3a0c1..1e9b979e71d2 100644
--- a/pkgs/by-name/ad/adrs/package.nix
+++ b/pkgs/by-name/ad/adrs/package.nix
@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "adrs";
-  version = "0.7.2";
+  version = "0.7.3";
 
   src = fetchFromGitHub {
     owner = "joshrotenberg";
     repo = "adrs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-PXB87P5M/yxR9DQDnDQDL4oTnKBcgv7paPAEZWBluwg=";
+    hash = "sha256-42nuX04VUl/M9hjUr3LeAUeJRHfkGsC8kJJSy6eF6gI=";
   };
 
-  cargoHash = "sha256-/8fvCBanZOB3an57a1i9jM+/Xhd9K8xi/vosHklD8xU=";
+  cargoHash = "sha256-Cir+gGlsNDDkcPeRNYT57Fg31/vcNyJTL5UbPs16EpY=";
 
   meta = {
     description = "Command-line tool for managing Architectural Decision Records";
diff --git a/pkgs/by-name/ar/ardour/package.nix b/pkgs/by-name/ar/ardour/package.nix
index 1a2e14771506..22bd1873cdeb 100644
--- a/pkgs/by-name/ar/ardour/package.nix
+++ b/pkgs/by-name/ar/ardour/package.nix
@@ -72,14 +72,14 @@ stdenv.mkDerivation (
   in
   {
     pname = "ardour";
-    version = "9.0";
+    version = "9.2";
 
     # We can't use `fetchFromGitea` here, as attempting to fetch release archives from git.ardour.org
     # result in an empty archive. See https://tracker.ardour.org/view.php?id=7328 for more info.
     src = fetchgit {
       url = "git://git.ardour.org/ardour/ardour.git";
       rev = finalAttrs.version;
-      hash = "sha256-zgWNKYN45qa2xLWnL3W/UWfRVBJN3+hya9dpIZLLJvo=";
+      hash = "sha256-zbEfEuWdhlKtYE0gVB/N0dFrcmNoJqgEMuvQ0wdmRpM=";
     };
 
     bundledContent = fetchzip {
diff --git a/pkgs/by-name/au/automatic-timezoned/package.nix b/pkgs/by-name/au/automatic-timezoned/package.nix
index 3b3cc15e32b6..50d95ad67b82 100644
--- a/pkgs/by-name/au/automatic-timezoned/package.nix
+++ b/pkgs/by-name/au/automatic-timezoned/package.nix
@@ -7,16 +7,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "automatic-timezoned";
-  version = "2.0.120";
+  version = "2.0.122";
 
   src = fetchFromGitHub {
     owner = "maxbrunet";
     repo = "automatic-timezoned";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-L3+tDhobD1j3X63181mLEVSwDUmcwkPDnW1vZ8W6vTU=";
+    sha256 = "sha256-jUmcAAh4gp4uAtwle4GdnVvV82tCyOVLddDKB6IH+gA=";
   };
 
-  cargoHash = "sha256-vta5xn8x/TZopgVCvc/RzQhMzM9OnLd3HeTrRO8ePOI=";
+  cargoHash = "sha256-vbOlpFUYbHxG397wqiD9ZqmLshhX9lkkdIsFQ7hIX88=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
 
diff --git a/pkgs/by-name/az/azure-artifacts-credprovider/deps.json b/pkgs/by-name/az/azure-artifacts-credprovider/deps.json
index c9969113cf08..da0a1893774a 100644
--- a/pkgs/by-name/az/azure-artifacts-credprovider/deps.json
+++ b/pkgs/by-name/az/azure-artifacts-credprovider/deps.json
@@ -79,33 +79,33 @@
   },
   {
     "pname": "Microsoft.Identity.Client",
-    "version": "4.64.0",
-    "hash": "sha256-VsB72O+EJaxCrc5K2w2XdxThVhIDPVmZw3l86w6O1PU=",
-    "url": "https://pkgs.dev.azure.com/mseng/c86767d8-af79-4303-a7e6-21da0ba435e2/_packaging/a319f538-6c19-4e2e-9df3-0222939da271/nuget/v3/flat2/microsoft.identity.client/4.64.0/microsoft.identity.client.4.64.0.nupkg"
+    "version": "4.77.1",
+    "hash": "sha256-Kj+pzEEhnr+ulzETuvOKmxmRfdYv5ZfToHc3AvyQEr0=",
+    "url": "https://pkgs.dev.azure.com/mseng/c86767d8-af79-4303-a7e6-21da0ba435e2/_packaging/a319f538-6c19-4e2e-9df3-0222939da271/nuget/v3/flat2/microsoft.identity.client/4.77.1/microsoft.identity.client.4.77.1.nupkg"
   },
   {
     "pname": "Microsoft.Identity.Client.Broker",
-    "version": "4.64.0",
-    "hash": "sha256-FdShbdlstMuT3CPL4J2+1Qym1aPz+H86SHyS/hi5+iM=",
-    "url": "https://pkgs.dev.azure.com/mseng/c86767d8-af79-4303-a7e6-21da0ba435e2/_packaging/a319f538-6c19-4e2e-9df3-0222939da271/nuget/v3/flat2/microsoft.identity.client.broker/4.64.0/microsoft.identity.client.broker.4.64.0.nupkg"
+    "version": "4.77.1",
+    "hash": "sha256-ZttD8DujZB3HUx+oeADnkiMDLe8Wb2eFw03vlAtOLz4=",
+    "url": "https://pkgs.dev.azure.com/mseng/c86767d8-af79-4303-a7e6-21da0ba435e2/_packaging/a319f538-6c19-4e2e-9df3-0222939da271/nuget/v3/flat2/microsoft.identity.client.broker/4.77.1/microsoft.identity.client.broker.4.77.1.nupkg"
   },
   {
     "pname": "Microsoft.Identity.Client.Extensions.Msal",
-    "version": "4.64.0",
-    "hash": "sha256-dDYIEbSuV4ijb9fn3diOaz+TEs8cJMP1Tb5/mD+DAGg=",
-    "url": "https://pkgs.dev.azure.com/mseng/c86767d8-af79-4303-a7e6-21da0ba435e2/_packaging/a319f538-6c19-4e2e-9df3-0222939da271/nuget/v3/flat2/microsoft.identity.client.extensions.msal/4.64.0/microsoft.identity.client.extensions.msal.4.64.0.nupkg"
+    "version": "4.77.1",
+    "hash": "sha256-s1JeDN3H3auUz2Js+ladXfwz0Z0AKIWxLPTb5+zE1TM=",
+    "url": "https://pkgs.dev.azure.com/mseng/c86767d8-af79-4303-a7e6-21da0ba435e2/_packaging/a319f538-6c19-4e2e-9df3-0222939da271/nuget/v3/flat2/microsoft.identity.client.extensions.msal/4.77.1/microsoft.identity.client.extensions.msal.4.77.1.nupkg"
   },
   {
     "pname": "Microsoft.Identity.Client.NativeInterop",
-    "version": "0.16.2",
-    "hash": "sha256-hlLFLp6a+vnQT1urt3GlIo94G3AoawczYgooaCkvfNU=",
-    "url": "https://pkgs.dev.azure.com/mseng/c86767d8-af79-4303-a7e6-21da0ba435e2/_packaging/a319f538-6c19-4e2e-9df3-0222939da271/nuget/v3/flat2/microsoft.identity.client.nativeinterop/0.16.2/microsoft.identity.client.nativeinterop.0.16.2.nupkg"
+    "version": "0.19.4",
+    "hash": "sha256-f4FmUEUZ5O20itkik7noUzQdawKKVlmVsgebFE4PvWA=",
+    "url": "https://pkgs.dev.azure.com/mseng/c86767d8-af79-4303-a7e6-21da0ba435e2/_packaging/a319f538-6c19-4e2e-9df3-0222939da271/nuget/v3/flat2/microsoft.identity.client.nativeinterop/0.19.4/microsoft.identity.client.nativeinterop.0.19.4.nupkg"
   },
   {
     "pname": "Microsoft.IdentityModel.Abstractions",
-    "version": "6.35.0",
-    "hash": "sha256-bxyYu6/QgaA4TQYBr5d+bzICL+ktlkdy/tb/1fBu00Q=",
-    "url": "https://pkgs.dev.azure.com/mseng/c86767d8-af79-4303-a7e6-21da0ba435e2/_packaging/a319f538-6c19-4e2e-9df3-0222939da271/nuget/v3/flat2/microsoft.identitymodel.abstractions/6.35.0/microsoft.identitymodel.abstractions.6.35.0.nupkg"
+    "version": "8.14.0",
+    "hash": "sha256-bkCuz1Wj56N+LHWLvHKLcCtIRqBK+3k5vD2qfB7xXKk=",
+    "url": "https://pkgs.dev.azure.com/mseng/c86767d8-af79-4303-a7e6-21da0ba435e2/_packaging/a319f538-6c19-4e2e-9df3-0222939da271/nuget/v3/flat2/microsoft.identitymodel.abstractions/8.14.0/microsoft.identitymodel.abstractions.8.14.0.nupkg"
   },
   {
     "pname": "Microsoft.NET.Test.Sdk",
diff --git a/pkgs/by-name/az/azure-artifacts-credprovider/package.nix b/pkgs/by-name/az/azure-artifacts-credprovider/package.nix
index 4bf73d07de4b..1a94ebdf8c0f 100644
--- a/pkgs/by-name/az/azure-artifacts-credprovider/package.nix
+++ b/pkgs/by-name/az/azure-artifacts-credprovider/package.nix
@@ -8,12 +8,12 @@
 buildDotnetModule rec {
   dotnet-sdk = dotnetCorePackages.sdk_8_0;
   dotnet-runtime = dotnetCorePackages.runtime_8_0;
-  version = "1.4.1";
+  version = "2.0.0";
   src = fetchFromGitHub {
     owner = "microsoft";
     repo = "artifacts-credprovider";
     rev = "v${version}";
-    sha256 = "sha256-MYOl+UfRExeZsozcPJynWbx5JpYL0dxTADycAt6Wm7o=";
+    sha256 = "sha256-MYoeK+AYNCu/xNt6zwN8AE0UtotkAVAJeysGnywI8iI=";
   };
   pname = "azure-artifacts-credprovider";
   projectFile = "CredentialProvider.Microsoft/CredentialProvider.Microsoft.csproj";
diff --git a/pkgs/by-name/az/azure-cli/extensions-manual.nix b/pkgs/by-name/az/azure-cli/extensions-manual.nix
index 47271101f418..0d1a9ee009af 100644
--- a/pkgs/by-name/az/azure-cli/extensions-manual.nix
+++ b/pkgs/by-name/az/azure-cli/extensions-manual.nix
@@ -336,9 +336,9 @@
 
   vm-repair = mkAzExtension rec {
     pname = "vm-repair";
-    version = "2.1.3";
+    version = "2.2.0";
     url = "https://azcliprod.blob.core.windows.net/cli-extensions/vm_repair-${version}-py2.py3-none-any.whl";
-    hash = "sha256-atqfMIN0FjLZjSIRh+T9MBxt34y6VWpxexCEBFsPTaM=";
+    hash = "sha256-ppsK4rJa/nFFkO2XJvjnK0PIRp9/haVwWfqfF7oN5WQ=";
     description = "Support for repairing Azure Virtual Machines";
     propagatedBuildInputs = with python3Packages; [ opencensus ];
     meta.maintainers = [ ];
diff --git a/pkgs/by-name/ba/bangr/package.nix b/pkgs/by-name/ba/bangr/package.nix
index 1b04bfae18e5..82956583a917 100644
--- a/pkgs/by-name/ba/bangr/package.nix
+++ b/pkgs/by-name/ba/bangr/package.nix
@@ -4,6 +4,7 @@
   fetchFromGitHub,
   libx11,
   cairo,
+  cpio,
   lv2,
   libsndfile,
   pkg-config,
@@ -11,20 +12,21 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bangr";
-  version = "1.6.2";
+  version = "1.6.4";
 
   src = fetchFromGitHub {
     owner = "sjaehn";
     repo = "BAngr";
     tag = finalAttrs.version;
     fetchSubmodules = true;
-    sha256 = "sha256-tit0lF/LqHu3eAtkJj4lo3FfvArOy56JqjtxrzCLJdo=";
+    sha256 = "sha256-od1UPriojDQHrAWzCYjuNoz27MRGIe+NvntUEFgGGWE=";
   };
 
   nativeBuildInputs = [ pkg-config ];
   buildInputs = [
     libx11
     cairo
+    cpio
     lv2
     libsndfile
   ];
diff --git a/pkgs/by-name/bi/biome/package.nix b/pkgs/by-name/bi/biome/package.nix
index aa5d46f05cfd..b81165b46371 100644
--- a/pkgs/by-name/bi/biome/package.nix
+++ b/pkgs/by-name/bi/biome/package.nix
@@ -11,16 +11,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "biome";
-  version = "2.4.4";
+  version = "2.4.6";
 
   src = fetchFromGitHub {
     owner = "biomejs";
     repo = "biome";
     rev = "@biomejs/biome@${finalAttrs.version}";
-    hash = "sha256-d7FSqOOAcJ/llq+REPOCvJAbHFanLzgOuwcOURf+NPg=";
+    hash = "sha256-xwnNTefv3E6Y27G8cSRNs9adXwzP2w3XK6xX1QEs60g=";
   };
 
-  cargoHash = "sha256-g8ov3SrcpHuvdg7qbbDMbhYMSAGCxJgQyWY+W/Sh/pM=";
+  cargoHash = "sha256-Uf+W+f17DMKOYR/KYiyEd+RU/bPMq+itbpHfCAq+7R4=";
 
   nativeBuildInputs = [ pkg-config ];
 
diff --git a/pkgs/by-name/br/broot/package.nix b/pkgs/by-name/br/broot/package.nix
index d66c05d84b19..dc4e65e6d6fe 100644
--- a/pkgs/by-name/br/broot/package.nix
+++ b/pkgs/by-name/br/broot/package.nix
@@ -16,16 +16,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "broot";
-  version = "1.54.0";
+  version = "1.55.0";
 
   src = fetchFromGitHub {
     owner = "Canop";
     repo = "broot";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-c7q6VTXoToUSx8gsOLcsLUvriZYYyYwGAjO8VTF3JFk=";
+    hash = "sha256-5P/7AtiEBvogFvi/k3XylMy0T8Hy7RqQ7n9LCmeiUx8=";
   };
 
-  cargoHash = "sha256-jErnCexuu8PPUugsI+fRqWpqtpspDiVjnfn3it5jeK4=";
+  cargoHash = "sha256-J8MD77lsZKIA98R5SsIJVhOeCWyb6p8kazdVmv36YEo=";
 
   nativeBuildInputs = [
     installShellFiles
diff --git a/pkgs/by-name/br/browsr/package.nix b/pkgs/by-name/br/browsr/package.nix
index 6a1ab78df485..db45c39c6d68 100644
--- a/pkgs/by-name/br/browsr/package.nix
+++ b/pkgs/by-name/br/browsr/package.nix
@@ -6,7 +6,7 @@
   extras ? [ "all" ],
 }:
 
-python3Packages.buildPythonApplication rec {
+python3Packages.buildPythonApplication (finalAttrs: {
   pname = "browsr";
   version = "1.22.1";
   pyproject = true;
@@ -14,7 +14,7 @@ python3Packages.buildPythonApplication rec {
   src = fetchFromGitHub {
     owner = "juftin";
     repo = "browsr";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-eISOADs++ZF62qkWbhFZu6JkEVtTytg3q5nbwS2m+8g=";
   };
 
@@ -46,7 +46,7 @@ python3Packages.buildPythonApplication rec {
       textual
       textual-universal-directorytree
     ]
-    ++ lib.attrVals extras optional-dependencies;
+    ++ lib.attrVals extras finalAttrs.passthru.optional-dependencies;
 
   optional-dependencies = with python3Packages; {
     all = [
@@ -77,6 +77,7 @@ python3Packages.buildPythonApplication rec {
     "rich-pixels"
     "rich"
     "textual"
+    "universal-pathlib"
   ];
 
   pythonImportsCheck = [
@@ -95,8 +96,8 @@ python3Packages.buildPythonApplication rec {
     description = "File explorer in your terminal";
     mainProgram = "browsr";
     homepage = "https://juftin.com/browsr";
-    changelog = "https://github.com/juftin/browsr/releases/tag/v${version}";
+    changelog = "https://github.com/juftin/browsr/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = [ ];
   };
-}
+})
diff --git a/pkgs/by-name/bu/budgie-control-center/package.nix b/pkgs/by-name/bu/budgie-control-center/package.nix
index 341af1c971dc..fb265d926d59 100644
--- a/pkgs/by-name/bu/budgie-control-center/package.nix
+++ b/pkgs/by-name/bu/budgie-control-center/package.nix
@@ -5,7 +5,6 @@
   replaceVars,
   accountsservice,
   budgie-desktop,
-  cheese,
   colord,
   colord-gtk,
   cups,
@@ -19,8 +18,6 @@
   glibc,
   gnome,
   gst_all_1,
-  gnome-bluetooth_1_0,
-  gnome-color-manager,
   gnome-desktop,
   gnome-settings-daemon,
   gsettings-desktop-schemas,
@@ -72,20 +69,19 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "budgie-control-center";
-  version = "2.1.0";
+  version = "2.1.1";
 
   src = fetchFromGitHub {
     owner = "BuddiesOfBudgie";
     repo = "budgie-control-center";
     tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
-    hash = "sha256-sdAzReZVAZ5omLOhly/l3buiw01eem+k9+3RbVPzS2g=";
+    hash = "sha256-UiKMYLQ44U4w9MdSTp/AJg3scOoSCeG6gXUBCrM9pc8=";
   };
 
   patches = [
     (replaceVars ./paths.patch {
       budgie_desktop = budgie-desktop;
-      gcm = gnome-color-manager;
       inherit
         cups
         libgnomekbd
@@ -117,8 +113,6 @@ stdenv.mkDerivation (finalAttrs: {
     glib-networking
     gnome-desktop
     gst_all_1.gstreamer
-    cheese
-    gnome-bluetooth_1_0
     gnome-settings-daemon
     gsettings-desktop-schemas
     gsound
diff --git a/pkgs/by-name/bu/budgie-control-center/paths.patch b/pkgs/by-name/bu/budgie-control-center/paths.patch
index 584d12038285..3d744e3ce2e9 100644
--- a/pkgs/by-name/bu/budgie-control-center/paths.patch
+++ b/pkgs/by-name/bu/budgie-control-center/paths.patch
@@ -1,42 +1,3 @@
-diff --git a/panels/color/cc-color-panel.c b/panels/color/cc-color-panel.c
-index a2f90b093..7801b4a5e 100644
---- a/panels/color/cc-color-panel.c
-+++ b/panels/color/cc-color-panel.c
-@@ -587,7 +587,7 @@ gcm_prefs_calibrate_cb (CcColorPanel *prefs)
- 
-   /* run with modal set */
-   argv = g_ptr_array_new_with_free_func (g_free);
--  g_ptr_array_add (argv, g_strdup ("gcm-calibrate"));
-+  g_ptr_array_add (argv, g_build_filename ("@gcm@", "bin", "gcm-calibrate", NULL));
-   g_ptr_array_add (argv, g_strdup ("--device"));
-   g_ptr_array_add (argv, g_strdup (cd_device_get_id (prefs->current_device)));
-   g_ptr_array_add (argv, g_strdup ("--parent-window"));
-@@ -940,7 +940,7 @@ gcm_prefs_profile_view (CcColorPanel *prefs, CdProfile *profile)
- 
-   /* open up gcm-viewer as a info pane */
-   argv = g_ptr_array_new_with_free_func (g_free);
--  g_ptr_array_add (argv, g_strdup ("gcm-viewer"));
-+  g_ptr_array_add (argv, g_build_filename ("@gcm@", "bin", "gcm-viewer", NULL));
-   g_ptr_array_add (argv, g_strdup ("--profile"));
-   g_ptr_array_add (argv, g_strdup (cd_profile_get_id (profile)));
-   g_ptr_array_add (argv, g_strdup ("--parent-window"));
-@@ -1186,15 +1186,12 @@ gcm_prefs_device_clicked (CcColorPanel *prefs, CdDevice *device)
- static void
- gcm_prefs_profile_clicked (CcColorPanel *prefs, CdProfile *profile, CdDevice *device)
- {
--  g_autofree gchar *s = NULL;
--
-   /* get profile */
-   g_debug ("selected profile = %s",
-      cd_profile_get_filename (profile));
- 
-   /* allow getting profile info */
--  if (cd_profile_get_filename (profile) != NULL &&
--      (s = g_find_program_in_path ("gcm-viewer")) != NULL)
-+  if (cd_profile_get_filename (profile) != NULL)
-     gtk_widget_set_sensitive (prefs->toolbutton_profile_view, TRUE);
-   else
-     gtk_widget_set_sensitive (prefs->toolbutton_profile_view, FALSE);
 diff --git a/panels/datetime/tz.h b/panels/datetime/tz.h
 index b6b7ab9d0..31f268e91 100644
 --- a/panels/datetime/tz.h
diff --git a/pkgs/by-name/bu/budgie-desktop-view/package.nix b/pkgs/by-name/bu/budgie-desktop-view/package.nix
index 3256db4b1240..4b37d35ef2a2 100644
--- a/pkgs/by-name/bu/budgie-desktop-view/package.nix
+++ b/pkgs/by-name/bu/budgie-desktop-view/package.nix
@@ -18,13 +18,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "budgie-desktop-view";
-  version = "10.10.1";
+  version = "10.10.2";
 
   src = fetchFromGitHub {
     owner = "BuddiesOfBudgie";
     repo = "budgie-desktop-view";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-ro+/Aqsyr9py3SEdsRg+eiQLDkFI0wI4MMdCyH02E3U=";
+    hash = "sha256-XwfNbrK9+FCYtO2tiz5TfHsJmctFbcEaUORiVs/aynE=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/bu/budgie-desktop/package.nix b/pkgs/by-name/bu/budgie-desktop/package.nix
index 34b2115852a7..d7467b3da17b 100644
--- a/pkgs/by-name/bu/budgie-desktop/package.nix
+++ b/pkgs/by-name/bu/budgie-desktop/package.nix
@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  fetchpatch,
   accountsservice,
   alsa-lib,
   budgie-desktop-services,
@@ -39,11 +38,13 @@
   vala,
   validatePkgConfig,
   wrapGAppsHook3,
+  xdg-desktop-portal,
 }:
 
 let
   pythonEnv = python3.withPackages (
     pp: with pp; [
+      dbus-python
       psutil
       pygobject3
       systemd-python
@@ -52,14 +53,14 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "budgie-desktop";
-  version = "10.10.1";
+  version = "10.10.2";
 
   src = fetchFromGitHub {
     owner = "BuddiesOfBudgie";
     repo = "budgie-desktop";
     tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
-    hash = "sha256-6SRnub0FMRE9AcHwsnYH4WMdG2kqEpl5dfHy56FwrGU=";
+    hash = "sha256-Eaq7/LY65HpyPRfR57FWDPqkVqBbymlHHQHFUvxER20=";
   };
 
   outputs = [
@@ -70,13 +71,6 @@ stdenv.mkDerivation (finalAttrs: {
 
   patches = [
     ./plugins.patch
-
-    # Don't use scaling factors
-    # https://github.com/BuddiesOfBudgie/budgie-desktop/pull/864
-    (fetchpatch {
-      url = "https://github.com/BuddiesOfBudgie/budgie-desktop/commit/03d18336c3d50d14e3e81ef03ef8ebd548d8e00c.patch";
-      hash = "sha256-pO1t3nnyYX2XDqH6wr+00MHsM0fAT0MOSuk+lN+2CNY=";
-    })
   ];
 
   nativeBuildInputs = [
@@ -130,6 +124,7 @@ stdenv.mkDerivation (finalAttrs: {
   postPatch = ''
     substituteInPlace src/session/budgie-desktop.in \
       --replace-fail "@bindir@/org.buddiesofbudgie.Services" "${lib.getExe budgie-desktop-services}" \
+      --replace-fail "@libexecdirroot@/xdg-desktop-portal" "${xdg-desktop-portal}/libexec/xdg-desktop-portal" \
       --replace-fail "@gsd_libexecdir@/budgie-session-compositor-ready" "${budgie-session}/libexec/budgie-session-compositor-ready"
 
     chmod +x src/bridges/labwc/labwc_bridge.py
diff --git a/pkgs/by-name/ca/cameradar/package.nix b/pkgs/by-name/ca/cameradar/package.nix
index ac8437978a7a..12d7eada0d08 100644
--- a/pkgs/by-name/ca/cameradar/package.nix
+++ b/pkgs/by-name/ca/cameradar/package.nix
@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "cameradar";
-  version = "6.1.0";
+  version = "6.1.1";
 
   src = fetchFromGitHub {
     owner = "Ullaakut";
     repo = "cameradar";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-C1GScKbOgHAU57B3q7A8Rv37Ny+7p+/L3ZwyiDN0kA0=";
+    hash = "sha256-wJiHCJHG8S+iGFd9jFyavyxAtJ5FGlbvfFcGQfwpi9Y=";
   };
 
-  vendorHash = "sha256-jIOQwVnlXbvzqGLPv/zTuSg5GaEWpmTyXEZO73jFGxM=";
+  vendorHash = "sha256-1jqGRwgbfcOq6fE3h9RJSeLRlFkd4w4L/2RwscA0zZ0=";
 
   nativeBuildInputs = [ pkg-config ];
 
diff --git a/pkgs/by-name/ca/candy-icons/package.nix b/pkgs/by-name/ca/candy-icons/package.nix
index f387e168ecef..6b35620f5558 100644
--- a/pkgs/by-name/ca/candy-icons/package.nix
+++ b/pkgs/by-name/ca/candy-icons/package.nix
@@ -8,13 +8,13 @@
 
 stdenvNoCC.mkDerivation {
   pname = "candy-icons";
-  version = "0-unstable-2026-02-13";
+  version = "0-unstable-2026-03-06";
 
   src = fetchFromGitHub {
     owner = "EliverLara";
     repo = "candy-icons";
-    rev = "b0a85a7414504191342b0c6d073c6f9233cb923a";
-    hash = "sha256-SzZMCNNTIctzFqx2qHwE4y4lioctpum39AyRrylurZA=";
+    rev = "83512fbcadcb7e1015ebbe1729a1894946b021be";
+    hash = "sha256-TzovzmfrUuaSrtpKCQxyXcih7cKSBhBtMpZLVwY/ScA=";
   };
 
   nativeBuildInputs = [ gtk3 ];
diff --git a/pkgs/by-name/ch/chatgpt/source.nix b/pkgs/by-name/ch/chatgpt/source.nix
index ee7a715de7fc..30fe580a11f0 100644
--- a/pkgs/by-name/ch/chatgpt/source.nix
+++ b/pkgs/by-name/ch/chatgpt/source.nix
@@ -1,7 +1,7 @@
 {
-  version = "1.2025.203";
+  version = "1.2026.048";
   src = {
-    url = "https://persistent.oaistatic.com/sidekick/public/ChatGPT_Desktop_public_1.2025.203_1753492939.dmg";
-    hash = "sha256-m+KvDXcNz4M6MhgOGwsTGytXzAuC6WKd/Dr+3PESQtg=";
+    url = "https://persistent.oaistatic.com/sidekick/public/ChatGPT_Desktop_public_1.2026.048_1771630681.dmg";
+    hash = "sha256-6V3H0sA9dlLa/FygZrOO9FqjSVsVgkdH1ZAYLdbET9U=";
   };
 }
diff --git a/pkgs/by-name/ch/chisel/package.nix b/pkgs/by-name/ch/chisel/package.nix
index 09063825acfe..3d8fbd94275e 100644
--- a/pkgs/by-name/ch/chisel/package.nix
+++ b/pkgs/by-name/ch/chisel/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "chisel";
-  version = "1.11.4";
+  version = "1.11.5";
 
   src = fetchFromGitHub {
     owner = "jpillora";
     repo = "chisel";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-g0UjjzH22ri/tYMO8HDQ6zjis9z6ojRsQJIP5AGhjfM=";
+    hash = "sha256-9b4y09eStfVLGRGUHw1GicBWsWHy7j9nwhQ3kfmB8Wc=";
   };
 
   vendorHash = "sha256-hqHd+62csVjHY2oAvi5fwlI0LbjR/LSDg6b1SMwe8Fw=";
diff --git a/pkgs/by-name/cl/claude-code-bin/package.nix b/pkgs/by-name/cl/claude-code-bin/package.nix
index d8635c169508..a00308dc633f 100644
--- a/pkgs/by-name/cl/claude-code-bin/package.nix
+++ b/pkgs/by-name/cl/claude-code-bin/package.nix
@@ -49,6 +49,7 @@ stdenv.mkDerivation (finalAttrs: {
 
     wrapProgram $out/bin/claude \
       --set DISABLE_AUTOUPDATER 1 \
+      --set-default FORCE_AUTOUPDATE_PLUGINS 1 \
       --set USE_BUILTIN_RIPGREP 0 \
       --prefix PATH : ${
         lib.makeBinPath (
diff --git a/pkgs/by-name/cl/claude-code/package.nix b/pkgs/by-name/cl/claude-code/package.nix
index 6454a7d13c9b..9007cb9a3a95 100644
--- a/pkgs/by-name/cl/claude-code/package.nix
+++ b/pkgs/by-name/cl/claude-code/package.nix
@@ -44,6 +44,7 @@ buildNpmPackage (finalAttrs: {
   postInstall = ''
     wrapProgram $out/bin/claude \
       --set DISABLE_AUTOUPDATER 1 \
+      --set-default FORCE_AUTOUPDATE_PLUGINS 1 \
       --set DISABLE_INSTALLATION_CHECKS 1 \
       --unset DEV \
       --prefix PATH : ${
diff --git a/pkgs/by-name/cl/clickhouse/package.nix b/pkgs/by-name/cl/clickhouse/package.nix
index e842b99ebbe9..329db2bb4b2a 100644
--- a/pkgs/by-name/cl/clickhouse/package.nix
+++ b/pkgs/by-name/cl/clickhouse/package.nix
@@ -1,6 +1,6 @@
 import ./generic.nix {
-  version = "26.2.3.2-stable";
-  rev = "ba231782911b5f53713dc4a9ad6a7fcf5ac4bf89";
-  hash = "sha256-252cNixB1ca8m4AvtB2097+OhlSmG7Diz0MMyqxvExc=";
+  version = "26.2.4.23-stable";
+  rev = "94012846cb561e16e733935e23aceaea30f4b367";
+  hash = "sha256-Tkt8RcuXCYGy6wAbdlt2rI1eT1zMMtbposBv4T5efb4=";
   lts = false;
 }
diff --git a/pkgs/by-name/co/cocoon/package.nix b/pkgs/by-name/co/cocoon/package.nix
index f679c83c5e4b..34b58d9ad51a 100644
--- a/pkgs/by-name/co/cocoon/package.nix
+++ b/pkgs/by-name/co/cocoon/package.nix
@@ -8,13 +8,13 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "cocoon";
-  version = "0.8.5";
+  version = "0.9.0";
 
   src = fetchFromGitHub {
     owner = "haileyok";
     repo = "cocoon";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-2+K4KiF0N+Y+J5dS4xQZuYlxr6OYzNloVXjxyGnEHh4=";
+    hash = "sha256-MmDUTFcXonAwHzeeIBxTk4KOVuCNHmaBFHMqHkf4+Yc=";
   };
 
   ldflags = [
diff --git a/pkgs/by-name/co/commitizen/package.nix b/pkgs/by-name/co/commitizen/package.nix
index b910a8af7a29..9bbdda3ad1bd 100644
--- a/pkgs/by-name/co/commitizen/package.nix
+++ b/pkgs/by-name/co/commitizen/package.nix
@@ -12,14 +12,14 @@
 
 python3Packages.buildPythonPackage rec {
   pname = "commitizen";
-  version = "4.13.8";
+  version = "4.13.9";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "commitizen-tools";
     repo = "commitizen";
     tag = "v${version}";
-    hash = "sha256-xRje/iCXeUJSmt1qdQ8cOTC8vqJSW8XFIIkplgzMpCo=";
+    hash = "sha256-bT154qRnZCf3StYs+acv4Be/SUCA5ovGjY/j2EDmUEc=";
   };
 
   postPatch = ''
diff --git a/pkgs/by-name/co/conceal/package.nix b/pkgs/by-name/co/conceal/package.nix
index e5773aa6a643..1a069abf399d 100644
--- a/pkgs/by-name/co/conceal/package.nix
+++ b/pkgs/by-name/co/conceal/package.nix
@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "conceal";
-  version = "0.6.2";
+  version = "0.7.0";
 
   src = fetchFromGitHub {
     owner = "TD-Sky";
     repo = "conceal";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-B6vZ4Xl7H6KOlscys+FT8fMXb0Xrvosr2DXHzvRjLis=";
+    hash = "sha256-kPK00DjBHhyZVwCTuL3VSazS5pYY8lgLBn9bHTkaQ5s=";
   };
 
-  cargoHash = "sha256-aBc9ijRObFi9AyQxSoQZs/3exAzOlYq5uNqFfvjNhvw=";
+  cargoHash = "sha256-6MPYgReVYkEQhmifzT7sAMRuMIink8k9nWOnSUCOGG0=";
 
   env.CONCEAL_GEN_COMPLETIONS = "true";
 
diff --git a/pkgs/by-name/co/couchbase-shell/package.nix b/pkgs/by-name/co/couchbase-shell/package.nix
index 6c7aa05dcbe9..77b02de72628 100644
--- a/pkgs/by-name/co/couchbase-shell/package.nix
+++ b/pkgs/by-name/co/couchbase-shell/package.nix
@@ -12,16 +12,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "couchbase-shell";
-  version = "1.1.0";
+  version = "1.2.0";
 
   src = fetchFromGitHub {
     owner = "couchbaselabs";
     repo = "couchbase-shell";
     rev = "v${version}";
-    hash = "sha256-wqOU94rPqIO128uL9iyVzWcAgqnDUPUy1+Qq1hSkvHA=";
+    hash = "sha256-sxKf0AdUpV3SgGkXYQSJn5q+l2NrxvWxrFQvzAt1PVo=";
   };
 
-  cargoHash = "sha256-tlVOro9u4ypgJ5yqjEzjfvrGXVCYe6DN6bg/3NhipR4=";
+  cargoHash = "sha256-o9bfbmtPROU9XD1R6pLrH4UK5OE92RWu2fpekWcrexY=";
 
   nativeBuildInputs = [
     pkg-config
diff --git a/pkgs/by-name/cw/cwal/package.nix b/pkgs/by-name/cw/cwal/package.nix
new file mode 100644
index 000000000000..0536cb7fb978
--- /dev/null
+++ b/pkgs/by-name/cw/cwal/package.nix
@@ -0,0 +1,44 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  cmake,
+  pkg-config,
+  imagemagick,
+  libimagequant,
+  lua,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "cwal";
+  version = "0.4.1";
+
+  src = fetchFromGitHub {
+    owner = "nitinbhat972";
+    repo = "cwal";
+    rev = "v${finalAttrs.version}";
+    hash = "sha256-H7liUw/KUT8U0KxBbUFvfu+L1vD7CbGw0cjbwjwwKrY=";
+  };
+
+  strictDeps = true;
+
+  nativeBuildInputs = [
+    cmake
+    pkg-config
+  ];
+
+  buildInputs = [
+    imagemagick
+    libimagequant
+    lua
+  ];
+
+  meta = {
+    description = "Blazing-fast pywal-like color palette generator written in C";
+    homepage = "https://github.com/nitinbhat972/cwal";
+    license = lib.licenses.gpl3Only;
+    mainProgram = "cwal";
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ gustlik501 ];
+  };
+})
diff --git a/pkgs/by-name/da/davmail/package.nix b/pkgs/by-name/da/davmail/package.nix
index 4f84ba6f1ab6..45ab61b1649c 100644
--- a/pkgs/by-name/da/davmail/package.nix
+++ b/pkgs/by-name/da/davmail/package.nix
@@ -12,24 +12,22 @@
   libxtst,
   coreutils,
   gnugrep,
-  zulu,
   preferGtk3 ? true,
-  preferZulu ? true,
 }:
 
 let
-  jre' = (if preferZulu then zulu else jdk).override { enableJavaFX = true; };
+  jre' = jdk.override { enableJavaFX = true; };
   gtk' = if preferGtk3 then gtk3 else gtk2;
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "davmail";
-  version = "6.4.0";
+  version = "6.5.1";
 
   src = fetchFromGitHub {
     owner = "mguessan";
     repo = "davmail";
     tag = finalAttrs.version;
-    hash = "sha256-dj+7e0b8GcyoDzEWGG1SEMijqRBo1IJUFtgxkt9XNRU=";
+    hash = "sha256-D/MEWq696PFXlarQZdSrTS9VFODg7u7yhUsbCwHV9qs=";
   };
 
   buildPhase = ''
diff --git a/pkgs/by-name/di/diffnav/package.nix b/pkgs/by-name/di/diffnav/package.nix
index 7a05d4270241..a9f923f16b7e 100644
--- a/pkgs/by-name/di/diffnav/package.nix
+++ b/pkgs/by-name/di/diffnav/package.nix
@@ -1,33 +1,44 @@
 {
   lib,
+  stdenv,
   fetchFromGitHub,
   buildGoModule,
   makeBinaryWrapper,
+  installShellFiles,
   delta,
 }:
 
 buildGoModule (finalAttrs: {
   pname = "diffnav";
-  version = "0.9.0";
+  version = "0.10.0";
 
   src = fetchFromGitHub {
     owner = "dlvhdr";
     repo = "diffnav";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-EkJim0YCdImlf7cNELMwXMQEJPZxSBbmUH0rnNkCuOM=";
+    hash = "sha256-hoikRqhVjbd7hH4H+f5OGq0KdIX1etAJhrRL+QsAkx8=";
   };
 
-  vendorHash = "sha256-/GwIxSyH7maY2m9CcqUs3aeX/5OX0VsvUoOGWkBzJ9M=";
+  vendorHash = "sha256-VNpmcniSpeocl9B+aNwLh4XPyPnYC8SXowJPYWHyzWs=";
 
   ldflags = [
     "-s"
     "-w"
   ];
 
-  nativeBuildInputs = [ makeBinaryWrapper ];
+  nativeBuildInputs = [
+    makeBinaryWrapper
+    installShellFiles
+  ];
   postInstall = ''
     wrapProgram $out/bin/diffnav \
       --prefix PATH : ${lib.makeBinPath [ delta ]}
+  ''
+  + lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
+    installShellCompletion --cmd diffnav \
+     --bash <($out/bin/diffnav completion bash) \
+     --fish <($out/bin/diffnav completion fish) \
+     --zsh <($out/bin/diffnav completion zsh)
   '';
 
   meta = {
diff --git a/pkgs/by-name/di/diun/package.nix b/pkgs/by-name/di/diun/package.nix
new file mode 100644
index 000000000000..8a492b58ecbf
--- /dev/null
+++ b/pkgs/by-name/di/diun/package.nix
@@ -0,0 +1,67 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  nix-update-script,
+  versionCheckHook,
+}:
+buildGoModule (finalAttrs: {
+  pname = "diun";
+  version = "4.31.0";
+
+  src = fetchFromGitHub {
+    owner = "crazy-max";
+    repo = "diun";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-H05yZSH2rUrwM+ZR/PDCxXmrDkZ/Gd4RrpywGk5eW2A=";
+  };
+  vendorHash = null;
+
+  # upstream disable CGO in release build
+  # https://github.com/crazy-max/diun/blob/76c0fe99212adc58d6a3433bbcde1ffa9fb879c4/Dockerfile#L11
+  env.CGO_ENABLED = false;
+
+  ldflags = [
+    "-s"
+    "-w"
+    "-X"
+    "main.version=${finalAttrs.version}"
+  ];
+
+  checkFlags =
+    let
+      # these tests require a network connection
+      skippedTests = [
+        "TestTags"
+        "TestTagsWithDigest"
+        "TestCompareDigest"
+        "TestManifest"
+        "TestManifestMultiUpdatedPlatform"
+        "TestManifestMultiNotUpdatedPlatform"
+        "TestManifestVariant"
+        "TestManifestTaggedDigest"
+        "TestManifestTaggedDigestUnknownTag"
+      ];
+    in
+    [ "-skip=^${builtins.concatStringsSep "$|^" skippedTests}$" ];
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  doInstallCheck = true;
+
+  postInstall = ''
+    mv $out/bin/cmd $out/bin/diun
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "CLI application to receive notifications when a Docker image is updated on a Docker registry";
+    homepage = "https://crazymax.dev/diun";
+    changelog = "https://crazymax.dev/diun/changelog";
+    license = lib.licenses.mit;
+    mainProgram = "diun";
+    maintainers = with lib.maintainers; [ Sped0n ];
+    platforms = lib.platforms.unix;
+  };
+})
diff --git a/pkgs/by-name/do/dotnet-outdated/package.nix b/pkgs/by-name/do/dotnet-outdated/package.nix
index 738696dbaf2b..c3b5f6035d8a 100644
--- a/pkgs/by-name/do/dotnet-outdated/package.nix
+++ b/pkgs/by-name/do/dotnet-outdated/package.nix
@@ -6,11 +6,11 @@
 buildDotnetGlobalTool rec {
   pname = "dotnet-outdated";
   nugetName = "dotnet-outdated-tool";
-  version = "4.7.0";
+  version = "4.7.1";
 
   dotnet-sdk = dotnetCorePackages.sdk_10_0;
 
-  nugetHash = "sha256-96tYVEN6sWw2H5xB6UaDUO7EtOn839Nfagamxf8bLvA=";
+  nugetHash = "sha256-EoH9TFAtnex+9uYaKUZMqQDSofQaZJDe0Va37PiO4OU=";
 
   meta = {
     description = ".NET Core global tool to display and update outdated NuGet packages in a project";
diff --git a/pkgs/by-name/e-/e-search/package.nix b/pkgs/by-name/e-/e-search/package.nix
index 951cc856cb65..4973b63580db 100644
--- a/pkgs/by-name/e-/e-search/package.nix
+++ b/pkgs/by-name/e-/e-search/package.nix
@@ -9,7 +9,7 @@
   gobject-introspection,
   makeWrapper,
   nodejs_20,
-  pnpm_10,
+  pnpm_10_29_2,
   fetchPnpmDeps,
   pnpmConfigHook,
   electron,
@@ -37,7 +37,7 @@
 }:
 
 let
-  pnpm' = pnpm_10.override { nodejs = nodejs_20; };
+  pnpm' = pnpm_10_29_2.override { nodejs = nodejs_20; };
   eSearch-OCR-ch = fetchzip {
     url = "https://github.com/xushengfeng/eSearch-OCR/releases/download/4.0.0/ch.zip";
     hash = "sha256-0NCXuy8k9/AdpK4ie49S8032u37gNhX6Jc6bOGufrV4=";
diff --git a/pkgs/by-name/el/elephant/package.nix b/pkgs/by-name/el/elephant/package.nix
index f7a9d786ec08..e6368776df91 100644
--- a/pkgs/by-name/el/elephant/package.nix
+++ b/pkgs/by-name/el/elephant/package.nix
@@ -74,13 +74,13 @@ let
 in
 buildGoModule (finalAttrs: {
   pname = "elephant";
-  version = "2.19.3";
+  version = "2.20.0";
 
   src = fetchFromGitHub {
     owner = "abenz1267";
     repo = "elephant";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-IyHoHbhLFuIgFG+n7dqHwJaXuNnRaEsxCfAsfudV1KY=";
+    hash = "sha256-r2ucLztXQFRu70VrGtNcL3PONyazxDPwq/hSn7opD+I=";
   };
 
   vendorHash = "sha256-tO+5x2FIY1UBvWl9x3ZSpHwTWUlw1VNDTi9+2uY7xdU=";
diff --git a/pkgs/by-name/en/envoy-bin/package.nix b/pkgs/by-name/en/envoy-bin/package.nix
index 9cd4f036a6cc..3518a68cb700 100644
--- a/pkgs/by-name/en/envoy-bin/package.nix
+++ b/pkgs/by-name/en/envoy-bin/package.nix
@@ -66,7 +66,10 @@ stdenvNoCC.mkDerivation {
     description = "Cloud-native edge and service proxy";
     license = lib.licenses.asl20;
     sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
-    maintainers = with lib.maintainers; [ katexochen ];
+    maintainers = with lib.maintainers; [
+      katexochen
+      charludo
+    ];
     mainProgram = "envoy";
     platforms = [
       "x86_64-linux"
diff --git a/pkgs/by-name/er/errands/package.nix b/pkgs/by-name/er/errands/package.nix
index 2f7c2161415a..c6c68ff8c83a 100644
--- a/pkgs/by-name/er/errands/package.nix
+++ b/pkgs/by-name/er/errands/package.nix
@@ -52,6 +52,8 @@ python3Packages.buildPythonApplication (finalAttrs: {
     lxml
     caldav
     pycryptodomex
+    urllib3
+    requests
   ];
 
   dontWrapGApps = true;
diff --git a/pkgs/by-name/fa/fabric-ai/package.nix b/pkgs/by-name/fa/fabric-ai/package.nix
index eda54754aafa..4dd5f3bcf7da 100644
--- a/pkgs/by-name/fa/fabric-ai/package.nix
+++ b/pkgs/by-name/fa/fabric-ai/package.nix
@@ -8,13 +8,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "fabric-ai";
-  version = "1.4.425";
+  version = "1.4.433";
 
   src = fetchFromGitHub {
     owner = "danielmiessler";
     repo = "fabric";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-QYfRO0vjONZ1DqsW+Rnh0KycDTzSs5uetEFEaFY1i4M=";
+    hash = "sha256-PsAG5qmlviae+4xuHa1pOHYEIqYvNX3yY57bWcgjA2s=";
   };
 
   vendorHash = "sha256-aE2b6Pe3v+2kT7nSHrmW3Vd/0ky6SQMag6ndsWuYSqs=";
diff --git a/pkgs/by-name/fa/fairywren/package.nix b/pkgs/by-name/fa/fairywren/package.nix
index 4cdb65125686..784e24f91d0c 100644
--- a/pkgs/by-name/fa/fairywren/package.nix
+++ b/pkgs/by-name/fa/fairywren/package.nix
@@ -22,13 +22,13 @@ lib.checkListOfEnum "${pname}: colorVariants" colorVariantList colorVariants
   stdenvNoCC.mkDerivation
   {
     inherit pname;
-    version = "0-unstable-2026-02-26";
+    version = "0-unstable-2026-03-08";
 
     src = fetchFromGitLab {
       owner = "aiyahm";
       repo = "FairyWren-Icons";
-      rev = "fcffa4ea729bd046836d7b5430d112663eee36f5";
-      hash = "sha256-3hAd0Z4f9Gbo+dFv3Ci3j3RRAwVdNobFlD0WtD+Z8gw=";
+      rev = "07bcdd4e83c4d46a698a4af60b9b8acc422af39f";
+      hash = "sha256-Gzr3AiVD+IFnJa3X3wp8CAFl6SL/gD3dCrFGMDHDMos=";
     };
 
     propagatedBuildInputs = [
diff --git a/pkgs/by-name/fd/fd/package.nix b/pkgs/by-name/fd/fd/package.nix
index 1a36faa045d1..301657cbafe3 100644
--- a/pkgs/by-name/fd/fd/package.nix
+++ b/pkgs/by-name/fd/fd/package.nix
@@ -11,16 +11,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "fd";
-  version = "10.4.0";
+  version = "10.4.1";
 
   src = fetchFromGitHub {
     owner = "sharkdp";
     repo = "fd";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-EepsBVsu9a5Ax4BmpZwD22MJAPTFBMxlfuxFBCQ8vGU=";
+    hash = "sha256-wmlnQyRWo7qxtRQFZywsr0eX7kVmcjyqyV5NG9VtUP0=";
   };
 
-  cargoHash = "sha256-ejjuQydDbHqYBEnzoDE/WS+lac14eVxxurMMW2+xleA=";
+  cargoHash = "sha256-MhSc96zkkCb+TKYr0ixDSYq44qgxjkvnwEzSdIwZNBo=";
 
   nativeBuildInputs = [ installShellFiles ];
 
diff --git a/pkgs/by-name/fe/feishin/package.nix b/pkgs/by-name/fe/feishin/package.nix
index 4e82c1f72f48..1433abc515ea 100644
--- a/pkgs/by-name/fe/feishin/package.nix
+++ b/pkgs/by-name/fe/feishin/package.nix
@@ -8,7 +8,7 @@
   mpv-unwrapped,
   fetchPnpmDeps,
   pnpmConfigHook,
-  pnpm,
+  pnpm_10_29_2,
   darwin,
   copyDesktopItems,
   makeDesktopItem,
@@ -16,13 +16,13 @@
 }:
 let
   pname = "feishin";
-  version = "1.6.0";
+  version = "1.7.0";
 
   src = fetchFromGitHub {
     owner = "jeffvli";
     repo = "feishin";
     tag = "v${version}";
-    hash = "sha256-PICVNItpMALffpJvQQXLlHcYu1yDtEUclGYjO25f6ew=";
+    hash = "sha256-DVlZ1ucCr8nP/TMvS2GBxjimdm8cie155vWoYMx7gbM=";
   };
 
   electron = electron_39;
@@ -41,14 +41,15 @@ buildNpmPackage {
       version
       src
       ;
+    pnpm = pnpm_10_29_2;
     fetcherVersion = 3;
-    hash = "sha256-K9mwEJA0fZXI2OnVo5y4Zmox3mwO8qLvgLiBaoyYAkg=";
+    hash = "sha256-LeoOksMWZjhVkEjTn5sS2xuX3QxGX8O7iC/3suVwiug=";
   };
 
   env.ELECTRON_SKIP_BINARY_DOWNLOAD = "1";
 
   nativeBuildInputs = [
-    pnpm
+    pnpm_10_29_2
   ]
   ++ lib.optionals (stdenv.hostPlatform.isLinux) [ copyDesktopItems ]
   ++ lib.optionals stdenv.hostPlatform.isDarwin [ darwin.autoSignDarwinBinariesHook ];
@@ -120,6 +121,8 @@ buildNpmPackage {
       --set DISABLE_AUTO_UPDATES 1 \
       --inherit-argv0
 
+    install -Dm644 org.jeffvli.feishin.metainfo.xml $out/share/metainfo/org.jeffvli.feishin.metainfo.xml
+
     for size in 32 64 128 256 512 1024; do
       mkdir -p $out/share/icons/hicolor/"$size"x"$size"/apps
       ln -s \
diff --git a/pkgs/by-name/fe/feishu-cli/package.nix b/pkgs/by-name/fe/feishu-cli/package.nix
index 74029ceb7087..84de18f5ca5f 100644
--- a/pkgs/by-name/fe/feishu-cli/package.nix
+++ b/pkgs/by-name/fe/feishu-cli/package.nix
@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "feishu-cli";
-  version = "1.7.0";
+  version = "1.8.0";
 
   src = fetchFromGitHub {
     owner = "riba2534";
     repo = "feishu-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-MO9RpMEJcWIrOoJ+O4IpF7wmnhYNNYpLJC/2IhkrQeg=";
+    hash = "sha256-7o5WMUhmA9BEjmz55E90DS6BKHKZhNfo1WV0jdJVrkw=";
   };
 
-  vendorHash = "sha256-j2X9sPUYLqOdHzXJCXP2s4uL6rerjZboEwKHofIE1sE=";
+  vendorHash = "sha256-MZv772U+3+Fcanaiuhz+OCqfIsYyCG7B4iZOnEftbi8=";
 
   subPackages = [ "." ];
 
diff --git a/pkgs/by-name/fi/filebrowser/package.nix b/pkgs/by-name/fi/filebrowser/package.nix
index 78cee393db85..496adbf26209 100644
--- a/pkgs/by-name/fi/filebrowser/package.nix
+++ b/pkgs/by-name/fi/filebrowser/package.nix
@@ -12,13 +12,13 @@
 }:
 
 let
-  version = "2.57.1";
+  version = "2.61.2";
 
   src = fetchFromGitHub {
     owner = "filebrowser";
     repo = "filebrowser";
     rev = "v${version}";
-    hash = "sha256-rd/I5M1SoL6fUNkiv/KwWImbtWCoy0/DR993C714xU8=";
+    hash = "sha256-/8bBYRzWJ00FpcLMB8M6hkyMUEM/0PM8jsvR+m7jfpc=";
   };
 
   frontend = buildNpmPackage rec {
@@ -41,7 +41,7 @@ let
         ;
       fetcherVersion = 3;
       pnpm = pnpm_10;
-      hash = "sha256-AfQNSIiTRv+aEGsrRAymwpUO2IWDtvSruLuuTAjWy/0=";
+      hash = "sha256-2e3Gr5/pdOsT3cSTdOz5mAjZaWB1C3qGDikpoa5BoII=";
     };
 
     installPhase = ''
@@ -59,7 +59,7 @@ buildGoModule {
   pname = "filebrowser";
   inherit version src;
 
-  vendorHash = "sha256-P6R+lBmzYYMqC5D6VwLOE7UnKuYcLN7UDVkZHWLLjMk=";
+  vendorHash = "sha256-aY3OIr0Kbno38Y/PZ03JK5wCCD4HRdnznJ3OaaH/WVA=";
 
   excludedPackages = [ "tools" ];
 
diff --git a/pkgs/by-name/fl/fladder/git-hashes.json b/pkgs/by-name/fl/fladder/git-hashes.json
new file mode 100644
index 000000000000..dd101c41ff60
--- /dev/null
+++ b/pkgs/by-name/fl/fladder/git-hashes.json
@@ -0,0 +1,10 @@
+{
+  "media_kit": "sha256-wQ5HOztwfJRymo+GzgTgHcRS/rzJfZcvBul5teSf/h8=",
+  "media_kit_libs_android_video": "sha256-wQ5HOztwfJRymo+GzgTgHcRS/rzJfZcvBul5teSf/h8=",
+  "media_kit_libs_ios_video": "sha256-wQ5HOztwfJRymo+GzgTgHcRS/rzJfZcvBul5teSf/h8=",
+  "media_kit_libs_linux": "sha256-wQ5HOztwfJRymo+GzgTgHcRS/rzJfZcvBul5teSf/h8=",
+  "media_kit_libs_macos_video": "sha256-wQ5HOztwfJRymo+GzgTgHcRS/rzJfZcvBul5teSf/h8=",
+  "media_kit_libs_video": "sha256-wQ5HOztwfJRymo+GzgTgHcRS/rzJfZcvBul5teSf/h8=",
+  "media_kit_libs_windows_video": "sha256-wQ5HOztwfJRymo+GzgTgHcRS/rzJfZcvBul5teSf/h8=",
+  "media_kit_video": "sha256-wQ5HOztwfJRymo+GzgTgHcRS/rzJfZcvBul5teSf/h8="
+}
diff --git a/pkgs/by-name/fl/fladder/package.nix b/pkgs/by-name/fl/fladder/package.nix
index e987af6a1c47..6d0c5fb6aaf4 100644
--- a/pkgs/by-name/fl/fladder/package.nix
+++ b/pkgs/by-name/fl/fladder/package.nix
@@ -18,35 +18,24 @@
 
 let
   flutter = flutter335;
-
-  media_kit_hash = "sha256-oJQ9sRQI4HpAIzoS995yfnzvx5ZzIubVANzbmxTt6LE=";
 in
 
 flutter.buildFlutterApplication (finalAttrs: {
   pname = "fladder";
-  version = "0.10.1";
+  version = "0.10.2";
 
   src = fetchFromGitHub {
     owner = "DonutWare";
     repo = "Fladder";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-lmtEgBxCmEYcckhSAXhMPDzNQBluTyW0yjkt6Rr9byA=";
+    hash = "sha256-D2FFIBRWi66TRB4LkUWZu/jc+edVXo70FZDzGFh11Wk=";
   };
 
   inherit targetFlutterPlatform;
 
   pubspecLock = lib.importJSON ./pubspec.lock.json;
 
-  gitHashes = {
-    media_kit = media_kit_hash;
-    media_kit_video = media_kit_hash;
-    media_kit_libs_linux = media_kit_hash;
-    media_kit_libs_video = media_kit_hash;
-    media_kit_libs_android_video = media_kit_hash;
-    media_kit_libs_ios_video = media_kit_hash;
-    media_kit_libs_macos_video = media_kit_hash;
-    media_kit_libs_windows_video = media_kit_hash;
-  };
+  gitHashes = lib.importJSON ./git-hashes.json;
 
   nativeBuildInputs = lib.optionals (targetFlutterPlatform == "linux") [
     copyDesktopItems
diff --git a/pkgs/by-name/fl/fladder/pubspec.lock.json b/pkgs/by-name/fl/fladder/pubspec.lock.json
index cf883febfb8a..ccddce04be62 100644
--- a/pkgs/by-name/fl/fladder/pubspec.lock.json
+++ b/pkgs/by-name/fl/fladder/pubspec.lock.json
@@ -54,11 +54,11 @@
       "dependency": "direct main",
       "description": {
         "name": "archive",
-        "sha256": "a96e8b390886ee8abb49b7bd3ac8df6f451c621619f52a26e815fdcf568959ff",
+        "sha256": "2fde1607386ab523f7a36bb3e7edb43bd58e6edaf2ffb29d8a6d578b297fdbbd",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "4.0.9"
+      "version": "4.0.7"
     },
     "args": {
       "dependency": "transitive",
@@ -124,11 +124,11 @@
       "dependency": "direct main",
       "description": {
         "name": "auto_route",
-        "sha256": "6d3ccc11b520b6eff0ab5a2c3d1c43c46d1486249cc746c4bb14486d876e8b43",
+        "sha256": "4916e0fe1cb782e315d0e1ebdd34170f1836a8f6e24cb528083671302b486ace",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "10.3.0"
+      "version": "10.2.2"
     },
     "auto_route_generator": {
       "dependency": "direct dev",
@@ -154,11 +154,11 @@
       "dependency": "direct main",
       "description": {
         "name": "background_downloader",
-        "sha256": "2ea5322fe836c0aaf96aefd29ef1936771c71927f687cf18168dcc119666a45f",
+        "sha256": "a913b37cc47a656a225e9562b69576000d516f705482f392e2663500e6ff6032",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "9.5.2"
+      "version": "9.3.0"
     },
     "boolean_selector": {
       "dependency": "transitive",
@@ -254,11 +254,11 @@
       "dependency": "transitive",
       "description": {
         "name": "built_value",
-        "sha256": "6ae8a6435a8c6520c7077b107e77f1fb4ba7009633259a4d49a8afd8e7efc5e9",
+        "sha256": "a30f0a0e38671e89a492c44d005b5545b830a961575bbd8336d42869ff71066d",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "8.12.4"
+      "version": "8.12.0"
     },
     "cached_network_image": {
       "dependency": "direct main",
@@ -294,11 +294,11 @@
       "dependency": "transitive",
       "description": {
         "name": "characters",
-        "sha256": "faf38497bda5ead2a8c7615f4f7939df04333478bf32e4173fcb06d428b5716b",
+        "sha256": "f71061c654a3380576a52b451dd5532377954cf9dbd272a78fc8479606670803",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "1.4.1"
+      "version": "1.4.0"
     },
     "charcode": {
       "dependency": "transitive",
@@ -394,11 +394,11 @@
       "dependency": "transitive",
       "description": {
         "name": "code_builder",
-        "sha256": "6a6cab2ba4680d6423f34a9b972a4c9a94ebe1b62ecec4e1a1f2cba91fd1319d",
+        "sha256": "11654819532ba94c34de52ff5feb52bd81cba1de00ef2ed622fd50295f9d4243",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "4.11.1"
+      "version": "4.11.0"
     },
     "collection": {
       "dependency": "direct main",
@@ -444,11 +444,11 @@
       "dependency": "transitive",
       "description": {
         "name": "cross_file",
-        "sha256": "28bb3ae56f117b5aec029d702a90f57d285cd975c3c5c281eaca38dbc47c5937",
+        "sha256": "942a4791cd385a68ccb3b32c71c427aba508a1bb949b86dff2adbe4049f16239",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.3.5+2"
+      "version": "0.3.5"
     },
     "crypto": {
       "dependency": "transitive",
@@ -554,11 +554,11 @@
       "dependency": "transitive",
       "description": {
         "name": "dbus",
-        "sha256": "d0c98dcd4f5169878b6cf8f6e0a52403a9dff371a3e2f019697accbf6f44a270",
+        "sha256": "79e0c23480ff85dc68de79e2cd6334add97e48f7f4865d17686dd6ea81a47e8c",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.7.12"
+      "version": "0.7.11"
     },
     "decimal": {
       "dependency": "transitive",
@@ -644,11 +644,11 @@
       "dependency": "direct main",
       "description": {
         "name": "drift_sync",
-        "sha256": "2ddb41cfe92a0d644ec2cb9cd25a6273bf0940693dddb9411c2c350f5f1cdb3f",
+        "sha256": "f358c39bdfa474c020ddd6022ef91540d30b21ef0faab6be331f1e0349e585e5",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.14.1"
+      "version": "0.14.0"
     },
     "dynamic_color": {
       "dependency": "direct main",
@@ -664,11 +664,11 @@
       "dependency": "transitive",
       "description": {
         "name": "equatable",
-        "sha256": "3e0141505477fd8ad55d6eb4e7776d3fe8430be8e497ccb1521370c3f21a3e2b",
+        "sha256": "567c64b3cb4cf82397aac55f4f0cbd3ca20d77c6c03bedbc4ceaddc08904aef7",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.0.8"
+      "version": "2.0.7"
     },
     "extended_image": {
       "dependency": "direct main",
@@ -704,11 +704,11 @@
       "dependency": "transitive",
       "description": {
         "name": "ffi",
-        "sha256": "6d7fd89431262d8f3125e81b50d3847a091d846eafcd4fdb88dd06f36d705a45",
+        "sha256": "289279317b4b16eb2bb7e271abccd4bf84ec9bdcbe999e278a94b804f5630418",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.2.0"
+      "version": "2.1.4"
     },
     "file": {
       "dependency": "transitive",
@@ -724,11 +724,11 @@
       "dependency": "direct main",
       "description": {
         "name": "file_picker",
-        "sha256": "57d9a1dd5063f85fa3107fb42d1faffda52fdc948cefd5fe5ea85267a5fc7343",
+        "sha256": "f8f4ea435f791ab1f817b4e338ed958cb3d04ba43d6736ffc39958d950754967",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "10.3.10"
+      "version": "10.3.6"
     },
     "fixnum": {
       "dependency": "transitive",
@@ -780,51 +780,51 @@
       "dependency": "direct main",
       "description": {
         "name": "flutter_custom_tabs",
-        "sha256": "8c3d92b074a8109f1dc76333c5ff8f87ea5896c118264c4b6b6e7d880058e820",
+        "sha256": "ac3543d7b4e0ac6ecdf3744360039ebb573656c0ce759149d228e1934d4f7535",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.5.0"
+      "version": "2.4.0"
     },
     "flutter_custom_tabs_android": {
       "dependency": "transitive",
       "description": {
         "name": "flutter_custom_tabs_android",
-        "sha256": "84e6b856fae8ca347bf47156f2106aac5671441fd6b3c531d1b793d22d29dece",
+        "sha256": "925fc5e7d27372ee523962dcfcd4b77c0443549482c284dd7897b77815547621",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.4.0"
+      "version": "2.3.1"
     },
     "flutter_custom_tabs_ios": {
       "dependency": "transitive",
       "description": {
         "name": "flutter_custom_tabs_ios",
-        "sha256": "5f8bbfedad7ff60da4875d888085c05b1d0fd90acbfa4a624ae71b78c5cc6e37",
+        "sha256": "c61a58d30b29ccb09ea4da0daa335bbf8714bcf8798d0d9f4f58a0b83c6c421b",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.5.0"
+      "version": "2.4.0"
     },
     "flutter_custom_tabs_platform_interface": {
       "dependency": "transitive",
       "description": {
         "name": "flutter_custom_tabs_platform_interface",
-        "sha256": "2b66c541f3ca87fbf3e63808dbd41b28cb76f512acce5940f2468b33abe69031",
+        "sha256": "54a6ff5cc7571cb266a47ade9f6f89d1980b9ed2dba18162a6d5300afc408449",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.4.0"
+      "version": "2.3.0"
     },
     "flutter_custom_tabs_web": {
       "dependency": "transitive",
       "description": {
         "name": "flutter_custom_tabs_web",
-        "sha256": "d606b231859c79679c78dbf05293528a543e3e067c2893a3a5bed1ab9a8300bb",
+        "sha256": "236e035c73b6d3ef0a2f85cd8b6b815954e7559c9f9d50a15ed2e53a297b58b0",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.4.0"
+      "version": "2.3.0"
     },
     "flutter_highlight": {
       "dependency": "transitive",
@@ -966,11 +966,11 @@
       "dependency": "transitive",
       "description": {
         "name": "flutter_plugin_android_lifecycle",
-        "sha256": "ee8068e0e1cd16c4a82714119918efdeed33b3ba7772c54b5d094ab53f9b7fd1",
+        "sha256": "306f0596590e077338312f38837f595c04f28d6cdeeac392d3d74df2f0003687",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.0.33"
+      "version": "2.0.32"
     },
     "flutter_riverpod": {
       "dependency": "direct main",
@@ -1016,11 +1016,11 @@
       "dependency": "direct main",
       "description": {
         "name": "flutter_svg",
-        "sha256": "87fbd7c534435b6c5d9d98b01e1fd527812b82e68ddd8bd35fc45ed0fa8f0a95",
+        "sha256": "055de8921be7b8e8b98a233c7a5ef84b3a6fcc32f46f1ebf5b9bb3576d108355",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.2.3"
+      "version": "2.2.2"
     },
     "flutter_test": {
       "dependency": "direct dev",
@@ -1108,11 +1108,11 @@
       "dependency": "direct main",
       "description": {
         "name": "fvp",
-        "sha256": "e03c4ba02c367cde8610c09325d085c9b1efe4f7d98a563950993a1fee17a28b",
+        "sha256": "33e34a78d3e4bd3ab87af7279d7bc88ff6025291574edc7e8592abea91e04cb4",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.35.2"
+      "version": "0.35.0"
     },
     "fwfh_cached_network_image": {
       "dependency": "transitive",
@@ -1328,11 +1328,11 @@
       "dependency": "direct main",
       "description": {
         "name": "image",
-        "sha256": "f9881ff4998044947ec38d098bc7c8316ae1186fa786eddffdb867b9bc94dfce",
+        "sha256": "4e973fcf4caae1a4be2fa0a13157aa38a8f9cb049db6529aa00b4d71abc4d928",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "4.8.0"
+      "version": "4.5.4"
     },
     "intl": {
       "dependency": "direct main",
@@ -1358,11 +1358,11 @@
       "dependency": "transitive",
       "description": {
         "name": "js",
-        "sha256": "53385261521cc4a0c4658fd0ad07a7d14591cf8fc33abbceae306ddb974888dc",
+        "sha256": "f2c445dce49627136094980615a031419f7f3eb393237e4ecd97ac15dea343f3",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.7.2"
+      "version": "0.6.7"
     },
     "json_annotation": {
       "dependency": "direct main",
@@ -1458,11 +1458,11 @@
       "dependency": "transitive",
       "description": {
         "name": "lints",
-        "sha256": "12f842a479589fea194fe5c5a3095abc7be0c1f2ddfa9a0e76aed1dbd26a87df",
+        "sha256": "a5e2b223cb7c9c8efdc663ef484fdd95bb243bff242ef5b13e26883547fce9a0",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "6.1.0"
+      "version": "6.0.0"
     },
     "local_auth": {
       "dependency": "direct main",
@@ -1528,11 +1528,11 @@
       "dependency": "direct main",
       "description": {
         "name": "macos_window_utils",
-        "sha256": "cb918e1ff0b31fdaa5cd8631eded7c24bd72e1025cf1f95c819e483f0057c652",
+        "sha256": "d4df3501fd32ac0d2d7590cb6a8e4758337d061c8fa0db816fdd636be63a8438",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "1.9.1"
+      "version": "1.9.0"
     },
     "markdown": {
       "dependency": "transitive",
@@ -1558,21 +1558,21 @@
       "dependency": "transitive",
       "description": {
         "name": "matcher",
-        "sha256": "12956d0ad8390bbcc63ca2e1469c0619946ccb52809807067a7020d57e647aa6",
+        "sha256": "dc58c723c3c24bf8d3e2d3ad3f2f9d7bd9cf43ec6feaa64181775e60190153f2",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.12.18"
+      "version": "0.12.17"
     },
     "material_color_utilities": {
       "dependency": "transitive",
       "description": {
         "name": "material_color_utilities",
-        "sha256": "9c337007e82b1889149c82ed242ed1cb24a66044e30979c44912381e9be4c48b",
+        "sha256": "f7142bb1154231d7ea5f96bc7bde4bda2a0945d2806bb11670e30b850d56bdec",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.13.0"
+      "version": "0.11.1"
     },
     "media_kit": {
       "dependency": "direct main",
@@ -1666,11 +1666,11 @@
       "dependency": "transitive",
       "description": {
         "name": "meta",
-        "sha256": "23f08335362185a5ea2ad3a4e597f1375e78bce8a040df5c600c8d3552ef2394",
+        "sha256": "e3641ec5d63ebf0d9b41bd43201a66e3fc79a65db5f61fc181f04cd27aab950c",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "1.17.0"
+      "version": "1.16.0"
     },
     "mime": {
       "dependency": "transitive",
@@ -1806,21 +1806,21 @@
       "dependency": "transitive",
       "description": {
         "name": "path_provider_android",
-        "sha256": "f2c65e21139ce2c3dad46922be8272bb5963516045659e71bb16e151c93b580e",
+        "sha256": "95c68a74d3cab950fd0ed8073d9fab15c1c06eb1f3eec68676e87aabc9ecee5a",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.2.22"
+      "version": "2.2.21"
     },
     "path_provider_foundation": {
       "dependency": "transitive",
       "description": {
         "name": "path_provider_foundation",
-        "sha256": "6d13aece7b3f5c5a9731eaf553ff9dcbc2eff41087fd2df587fd0fed9a3eb0c4",
+        "sha256": "97390a0719146c7c3e71b6866c34f1cde92685933165c1c671984390d2aca776",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.5.1"
+      "version": "2.4.4"
     },
     "path_provider_linux": {
       "dependency": "transitive",
@@ -1916,11 +1916,11 @@
       "dependency": "transitive",
       "description": {
         "name": "petitparser",
-        "sha256": "91bd59303e9f769f108f8df05e371341b15d59e995e6806aefab827b58336675",
+        "sha256": "1a97266a94f7350d30ae522c0af07890c70b8e62c71e8e3920d1db4d23c057d1",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "7.0.2"
+      "version": "7.0.1"
     },
     "pigeon": {
       "dependency": "direct dev",
@@ -2012,6 +2012,16 @@
       "source": "hosted",
       "version": "6.0.3"
     },
+    "pretty_qr_code": {
+      "dependency": "direct main",
+      "description": {
+        "name": "pretty_qr_code",
+        "sha256": "474f8a4512113fba06f14a6ec9bbf42353b4e651d7a520e3096f2a9b6bbe7a8a",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "3.6.0"
+    },
     "protobuf": {
       "dependency": "transitive",
       "description": {
@@ -2062,15 +2072,25 @@
       "source": "hosted",
       "version": "0.2.2"
     },
+    "qr": {
+      "dependency": "transitive",
+      "description": {
+        "name": "qr",
+        "sha256": "5a1d2586170e172b8a8c8470bbbffd5eb0cd38a66c0d77155ea138d3af3a4445",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "3.0.2"
+    },
     "qs_dart": {
       "dependency": "transitive",
       "description": {
         "name": "qs_dart",
-        "sha256": "0e46bec269e1c32befc20c6e7b809186f7463c98b16e685b11dc5a98bc14b8c8",
+        "sha256": "27da57e8b394163f96b74bccb6eb6115bfd2585de4b9ad6241bdf1a9797ab54f",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "1.7.0"
+      "version": "1.6.0"
     },
     "rational": {
       "dependency": "transitive",
@@ -2096,11 +2116,11 @@
       "dependency": "direct main",
       "description": {
         "name": "reorderable_grid",
-        "sha256": "15873d8afa6c0a106f0e165f4fbb2bb92dbfe18837e0c9f5d62ac4e26448863d",
+        "sha256": "c7d2e1f2e032a8fffe121f9da828546ee58db35c9c7d19d7a2d189dea2f9939d",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "1.0.13"
+      "version": "1.0.12"
     },
     "riverpod": {
       "dependency": "transitive",
@@ -2156,11 +2176,11 @@
       "dependency": "transitive",
       "description": {
         "name": "safe_local_storage",
-        "sha256": "287ea1f667c0b93cdc127dccc707158e2d81ee59fba0459c31a0c7da4d09c755",
+        "sha256": "e9a21b6fec7a8aa62cc2585ff4c1b127df42f3185adbd2aca66b47abe2e80236",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.0.3"
+      "version": "2.0.1"
     },
     "screen_brightness": {
       "dependency": "direct main",
@@ -2316,21 +2336,21 @@
       "dependency": "direct main",
       "description": {
         "name": "shared_preferences",
-        "sha256": "2939ae520c9024cb197fc20dee269cd8cdbf564c8b5746374ec6cacdc5169e64",
+        "sha256": "6e8bf70b7fef813df4e9a36f658ac46d107db4b4cfe1048b477d4e453a8159f5",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.5.4"
+      "version": "2.5.3"
     },
     "shared_preferences_android": {
       "dependency": "transitive",
       "description": {
         "name": "shared_preferences_android",
-        "sha256": "cbc40be9be1c5af4dab4d6e0de4d5d3729e6f3d65b89d21e1815d57705644a6f",
+        "sha256": "07d552dbe8e71ed720e5205e760438ff4ecfb76ec3b32ea664350e2ca4b0c43b",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.4.20"
+      "version": "2.4.16"
     },
     "shared_preferences_foundation": {
       "dependency": "transitive",
@@ -2452,11 +2472,11 @@
       "dependency": "transitive",
       "description": {
         "name": "source_span",
-        "sha256": "56a02f1f4cd1a2d96303c0144c93bd6d909eea6bee6bf5a0e0b685edbd4c47ab",
+        "sha256": "254ee5351d6cb365c859e20ee823c3bb479bf4a293c22d17a9f1bf144ce86f7c",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "1.10.2"
+      "version": "1.10.1"
     },
     "sqflite": {
       "dependency": "transitive",
@@ -2522,11 +2542,11 @@
       "dependency": "transitive",
       "description": {
         "name": "sqlite3_flutter_libs",
-        "sha256": "1e800ebe7f85a80a66adacaa6febe4d5f4d8b75f244e9838a27cb2ffc7aec08d",
+        "sha256": "69c80d812ef2500202ebd22002cbfc1b6565e9ff56b2f971e757fac5d42294df",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.5.41"
+      "version": "0.5.40"
     },
     "sqlparser": {
       "dependency": "transitive",
@@ -2642,11 +2662,11 @@
       "dependency": "transitive",
       "description": {
         "name": "test_api",
-        "sha256": "93167629bfc610f71560ab9312acdda4959de4df6fac7492c89ff0d3886f6636",
+        "sha256": "522f00f556e73044315fa4585ec3270f1808a4b186c936e612cab0b565ff1e00",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.7.9"
+      "version": "0.7.6"
     },
     "timezone": {
       "dependency": "transitive",
@@ -2732,11 +2752,11 @@
       "dependency": "transitive",
       "description": {
         "name": "uri_parser",
-        "sha256": "051c62e5f693de98ca9f130ee707f8916e2266945565926be3ff20659f7853ce",
+        "sha256": "ff4d2c720aca3f4f7d5445e23b11b2d15ef8af5ddce5164643f38ff962dcb270",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "3.0.2"
+      "version": "3.0.0"
     },
     "url_launcher": {
       "dependency": "direct main",
@@ -2752,11 +2772,11 @@
       "dependency": "transitive",
       "description": {
         "name": "url_launcher_android",
-        "sha256": "767344bf3063897b5cf0db830e94f904528e6dd50a6dfaf839f0abf509009611",
+        "sha256": "dff5e50339bf30b06d7950b50fda58164d3d8c40042b104ed041ddc520fbff28",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "6.3.28"
+      "version": "6.3.25"
     },
     "url_launcher_ios": {
       "dependency": "transitive",
@@ -2822,11 +2842,11 @@
       "dependency": "transitive",
       "description": {
         "name": "uuid",
-        "sha256": "1fef9e8e11e2991bb773070d4656b7bd5d850967a2456cfc83cf47925ba79489",
+        "sha256": "a11b666489b1954e01d992f3d601b1804a33937b5a8fe677bd26b8a9f96f96e8",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "4.5.3"
+      "version": "4.5.2"
     },
     "value_layout_builder": {
       "dependency": "transitive",
@@ -2862,11 +2882,11 @@
       "dependency": "transitive",
       "description": {
         "name": "vector_graphics_compiler",
-        "sha256": "5a88dd14c0954a5398af544651c7fb51b457a2a556949bfb25369b210ef73a74",
+        "sha256": "d354a7ec6931e6047785f4db12a1f61ec3d43b207fc0790f863818543f8ff0dc",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "1.2.0"
+      "version": "1.1.19"
     },
     "vector_math": {
       "dependency": "transitive",
@@ -2892,21 +2912,21 @@
       "dependency": "transitive",
       "description": {
         "name": "video_player_android",
-        "sha256": "9862c67c4661c98f30fe707bc1a4f97d6a0faa76784f485d282668e4651a7ac3",
+        "sha256": "36913f94430b474c4a9033d59b7552b800e736a8521e7166e84895ddcedd0b03",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.9.4"
+      "version": "2.8.19"
     },
     "video_player_avfoundation": {
       "dependency": "transitive",
       "description": {
         "name": "video_player_avfoundation",
-        "sha256": "d1eb970495a76abb35e5fa93ee3c58bd76fb6839e2ddf2fbb636674f2b971dd4",
+        "sha256": "6bced1739cf1f96f03058118adb8ac0dd6f96aa1a1a6e526424ab92fd2a6a77d",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.8.9"
+      "version": "2.8.7"
     },
     "video_player_platform_interface": {
       "dependency": "transitive",
@@ -2972,11 +2992,11 @@
       "dependency": "transitive",
       "description": {
         "name": "watcher",
-        "sha256": "1398c9f081a753f9226febe8900fce8f7d0a67163334e1c94a2438339d79d635",
+        "sha256": "592ab6e2892f67760543fb712ff0177f4ec76c031f02f5b4ff8d3fc5eb9fb61a",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "1.2.1"
+      "version": "1.1.4"
     },
     "weak_map": {
       "dependency": "transitive",
@@ -3022,21 +3042,21 @@
       "dependency": "transitive",
       "description": {
         "name": "webview_flutter",
-        "sha256": "a3da219916aba44947d3a5478b1927876a09781174b5a2b67fa5be0555154bf9",
+        "sha256": "c3e4fe614b1c814950ad07186007eff2f2e5dd2935eba7b9a9a1af8e5885f1ba",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "4.13.1"
+      "version": "4.13.0"
     },
     "webview_flutter_android": {
       "dependency": "transitive",
       "description": {
         "name": "webview_flutter_android",
-        "sha256": "eeeb3fcd5f0ff9f8446c9f4bbc18a99b809e40297528a3395597d03aafb9f510",
+        "sha256": "f754fec262c5bf826615e8c7f035da1c536ba6ad9b1181936fad900d297cb687",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "4.10.11"
+      "version": "4.10.6"
     },
     "webview_flutter_platform_interface": {
       "dependency": "transitive",
@@ -3052,11 +3072,11 @@
       "dependency": "transitive",
       "description": {
         "name": "webview_flutter_wkwebview",
-        "sha256": "108bd85d0ff20bff1e8b52a040f5c19b6b9fc4a78fdf3160534ff5a11a82e267",
+        "sha256": "8f4fa32670375f4ce9bfe0f1c773e0857dd191f4e6b3518a1dcdeb7a880bae2e",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "3.23.7"
+      "version": "3.23.3"
     },
     "win32": {
       "dependency": "transitive",
diff --git a/pkgs/by-name/fl/fladder/update.sh b/pkgs/by-name/fl/fladder/update.sh
index 22d47fd969d0..99db6d75c69e 100755
--- a/pkgs/by-name/fl/fladder/update.sh
+++ b/pkgs/by-name/fl/fladder/update.sh
@@ -1,10 +1,10 @@
 #!/usr/bin/env nix-shell
-#!nix-shell -i bash -p yq nix bash coreutils nix-update common-updater-scripts ripgrep flutter
+#!nix-shell -i bash -p curl jq yq-go nix bash nix-update common-updater-scripts ripgrep
 
 set -eou pipefail
 
 PACKAGE_DIR="$(realpath "$(dirname "$0")")"
-cd "$PACKAGE_DIR"/..
+cd "$PACKAGE_DIR"
 while ! test -f flake.nix; do cd ..; done
 NIXPKGS_DIR="$PWD"
 
@@ -15,20 +15,15 @@ latestVersion=$(
     tail -n1
 )
 
-currentVersion=$(nix-instantiate --eval -E "with import ./. {}; fladder.version or (lib.getVersion fladder)" | tr -d '"')
+currentVersion=$(nix eval --raw --file . fladder.version)
 
 if [[ "$currentVersion" == "$latestVersion" ]]; then
     echo "package is up-to-date: $currentVersion"
     exit 0
 fi
 
-nix-update --version=$latestVersion fladder
+nix-update --version="$latestVersion" fladder
 
-export HOME="$(mktemp -d)"
-src="$(nix-build --no-link "$NIXPKGS_DIR" -A fladder.src)"
-TMPDIR="$(mktemp -d)"
-cp --recursive --no-preserve=mode "$src"/* $TMPDIR
-cd "$TMPDIR"
-flutter pub get
-yq . pubspec.lock >"$PACKAGE_DIR"/pubspec.lock.json
-rm -rf $TMPDIR
+curl --fail --silent "https://raw.githubusercontent.com/DonutWare/Fladder/v${latestVersion}/pubspec.lock" | yq eval --output-format=json --prettyPrint >"$PACKAGE_DIR"/pubspec.lock.json
+
+$(nix eval --file "$NIXPKGS_DIR" dart.fetchGitHashesScript) --input "$PACKAGE_DIR"/pubspec.lock.json --output "$PACKAGE_DIR"/git-hashes.json
diff --git a/pkgs/by-name/fl/flare-signal/package.nix b/pkgs/by-name/fl/flare-signal/package.nix
index cac5282272de..9eeb3c6ece0f 100644
--- a/pkgs/by-name/fl/flare-signal/package.nix
+++ b/pkgs/by-name/fl/flare-signal/package.nix
@@ -5,6 +5,7 @@
   cargo,
   meson,
   ninja,
+  perl,
   pkg-config,
   gst_all_1,
   openssl,
@@ -23,18 +24,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "flare";
-  version = "0.18.4";
+  version = "0.19.0";
 
   src = fetchFromGitLab {
     owner = "schmiddi-on-mobile";
     repo = "flare";
     tag = finalAttrs.version;
-    hash = "sha256-6a/up/UbaB9WQEiw8fmuh9Xjz73oBxO2k9jKhKwo0mc=";
+    hash = "sha256-6wZYwFdgWM4HGUKF4+nx6w2O64tqd0z/yWZk6qwepso=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-wjm3R43iMbXZeMe4dPyreXNqc+3FrDvaEeJJM+IYtz4=";
+    hash = "sha256-XSnWw+o/sNjAiIZmsSpiVPgpmYnm6MAuJyGN2LzAIjI=";
   };
 
   nativeBuildInputs = [
@@ -43,6 +44,7 @@ stdenv.mkDerivation (finalAttrs: {
     desktop-file-utils # for update-desktop-database
     meson
     ninja
+    perl
     pkg-config
     wrapGAppsHook4
     rustPlatform.cargoSetupHook
diff --git a/pkgs/by-name/fo/folo/package.nix b/pkgs/by-name/fo/folo/package.nix
index 56385c1c24be..c48cb706ac23 100644
--- a/pkgs/by-name/fo/folo/package.nix
+++ b/pkgs/by-name/fo/folo/package.nix
@@ -6,7 +6,7 @@
   makeDesktopItem,
   makeWrapper,
   nodejs,
-  pnpm_10,
+  pnpm_10_29_2,
   fetchPnpmDeps,
   pnpmConfigHook,
   stdenv,
@@ -26,7 +26,7 @@ stdenv.mkDerivation rec {
   nativeBuildInputs = [
     nodejs
     pnpmConfigHook
-    pnpm_10
+    pnpm_10_29_2
     makeWrapper
     imagemagick
   ];
@@ -37,7 +37,7 @@ stdenv.mkDerivation rec {
       version
       src
       ;
-    pnpm = pnpm_10;
+    pnpm = pnpm_10_29_2;
     fetcherVersion = 3;
     hash = "sha256-EP7bpbJUcKmHm7KMlKc0Fz2u0niQ3jC7YN/9pp7vucE=";
   };
diff --git a/pkgs/by-name/fo/forgejo/lts.nix b/pkgs/by-name/fo/forgejo/lts.nix
index 1e7ec7fdfe87..0e6526d51ddc 100644
--- a/pkgs/by-name/fo/forgejo/lts.nix
+++ b/pkgs/by-name/fo/forgejo/lts.nix
@@ -1,8 +1,8 @@
 import ./generic.nix {
-  version = "11.0.10";
-  hash = "sha256-vATc7pBOejBfZKNj3WsQeFWr1xKpIB4ODv4TPRrwdg0=";
-  npmDepsHash = "sha256-Qs1aZxgjlsjdxfBpa4pOrwEfDfb/96L49uJd29Ysn/I=";
-  vendorHash = "sha256-TVp4WxrGBlKVaPIbsj4EP/3pt5iseXLY7xIVum71ZXU=";
+  version = "11.0.11";
+  hash = "sha256-UZJW6C3Vn/e1KJEiyUI3o+/2xvKubjv+j1Lujmse//w=";
+  npmDepsHash = "sha256-kh7/xZPr5Y8CzGs8hop0a9JNPzmB3w2FPpCb+xOCz0c=";
+  vendorHash = "sha256-BL6wa+f+qFbDuHImMvAgwsqOTfV6Zt4oMBrOBI1sh1o=";
   lts = true;
   nixUpdateExtraArgs = [
     "--override-filename"
diff --git a/pkgs/by-name/fo/forgejo/package.nix b/pkgs/by-name/fo/forgejo/package.nix
index c3b6888f0a83..5e8c42f2777a 100644
--- a/pkgs/by-name/fo/forgejo/package.nix
+++ b/pkgs/by-name/fo/forgejo/package.nix
@@ -1,8 +1,8 @@
 import ./generic.nix {
-  version = "14.0.2";
-  hash = "sha256-jgRyFfbzJ0Camotkn7f/tvSi7jKIhqEpGVZV8xw5uDQ=";
-  npmDepsHash = "sha256-gyEr5uNZfBELxbvQeZ48xqtay7ObQL4dQaFO9yPC2Hg=";
-  vendorHash = "sha256-RusaQJXToLGL0pdJtCZBQvlTQfDXoaD6dhHNmHQ5Ozk=";
+  version = "14.0.3";
+  hash = "sha256-WE0CUwF5GBUr6+kUeHyPa0XPy5uigol/74eQhQQjBQA=";
+  npmDepsHash = "sha256-tJmX6VO7T6T4egy+Z2RZhe+/6ZfS6ZHFETfALmfAli4=";
+  vendorHash = "sha256-TpRVaXNlfnmFu8EdvKN8/mioLeQkghCy0nMWvRB6sYQ=";
   lts = false;
   nixUpdateExtraArgs = [
     "--override-filename"
diff --git a/pkgs/by-name/fr/framework-tool/package.nix b/pkgs/by-name/fr/framework-tool/package.nix
index 5cc03573b00f..25f8ea28ad6e 100644
--- a/pkgs/by-name/fr/framework-tool/package.nix
+++ b/pkgs/by-name/fr/framework-tool/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "framework-tool";
-  version = "0.5.0";
+  version = "0.6.1";
 
   src = fetchFromGitHub {
     owner = "FrameworkComputer";
     repo = "framework-system";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-wgleuZ0txkmv0+tyr31PiVTNyTSc+OPy/jJwL1Ryyu4=";
+    hash = "sha256-lpd6686qN06WgJbs1PuCIFMRGEqBFtQqyVauKGG9jH4=";
   };
 
-  cargoHash = "sha256-W+k/PAcdwl9mvajB9D4SUH4o5VqpeD/BnK6ZEJzPpmI=";
+  cargoHash = "sha256-y17Qlw8D7XWcStJ/54h1ARgODg1htzf9FVKjFZGERss=";
 
   nativeBuildInputs = [ pkg-config ];
   buildInputs = [ udev ];
diff --git a/pkgs/by-name/fr/frr/package.nix b/pkgs/by-name/fr/frr/package.nix
index ef3a202c00c6..57cf14a781b5 100644
--- a/pkgs/by-name/fr/frr/package.nix
+++ b/pkgs/by-name/fr/frr/package.nix
@@ -80,13 +80,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "frr";
-  version = "10.5.1";
+  version = "10.5.2";
 
   src = fetchFromGitHub {
     owner = "FRRouting";
     repo = "frr";
     rev = "frr-${finalAttrs.version}";
-    hash = "sha256-sTPYIaaF/OfmBMIRS4nRV2Pay03u8R1nUsqMjFH4cFo=";
+    hash = "sha256-/SO4KELX5NQzbkeoO6QIY6NMUI30ABTRqcAztIAv6/Y=";
   };
 
   # Without the std explicitly set, we may run into abseil-cpp
diff --git a/pkgs/by-name/ga/gamma-launcher/package.nix b/pkgs/by-name/ga/gamma-launcher/package.nix
index 871b52c1a3fb..03cba4cc5af9 100644
--- a/pkgs/by-name/ga/gamma-launcher/package.nix
+++ b/pkgs/by-name/ga/gamma-launcher/package.nix
@@ -16,14 +16,14 @@ let
 in
 python3Packages.buildPythonApplication rec {
   pname = "gamma-launcher";
-  version = "2.6";
+  version = "3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Mord3rca";
     repo = "gamma-launcher";
     tag = "v${version}";
-    hash = "sha256-QegptRWMUKpkzsHBdT6KlyyWpmrIuvcyCRvWT9Te3DQ=";
+    hash = "sha256-bvlNmpl2L9MAhZMyHwosXrypH1CQrSI1RQwo+sXO7/w=";
   };
 
   build-system = [ python3Packages.setuptools ];
diff --git a/pkgs/by-name/gd/gdu/package.nix b/pkgs/by-name/gd/gdu/package.nix
index 3be16791b295..761ac7cfd41e 100644
--- a/pkgs/by-name/gd/gdu/package.nix
+++ b/pkgs/by-name/gd/gdu/package.nix
@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "gdu";
-  version = "5.33.0";
+  version = "5.34.0";
 
   src = fetchFromGitHub {
     owner = "dundee";
     repo = "gdu";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-DotSJ7fz70lQH21evxA4Sy4Al7xcWpKtQJM7/Fp0fvY=";
+    hash = "sha256-y3a43CLn76Aq/jCPhrurbZk3wTQOg3t5FmObbTUOidQ=";
   };
 
-  vendorHash = "sha256-cusc2ckY3RJTFYY4swuHhJvl9L5uuWKOWokrk2ylSFo=";
+  vendorHash = "sha256-Dtjirx2sHbN4AWxED5weRGtCRNc2VIdaz7RHssGuJeQ=";
 
   nativeBuildInputs = [
     installShellFiles
diff --git a/pkgs/by-name/gi/gitify/package.nix b/pkgs/by-name/gi/gitify/package.nix
index 3aab70fbac23..b2ae1005fc07 100644
--- a/pkgs/by-name/gi/gitify/package.nix
+++ b/pkgs/by-name/gi/gitify/package.nix
@@ -2,7 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  pnpm_10,
+  pnpm_10_29_2,
   fetchPnpmDeps,
   pnpmConfigHook,
   nodejs,
@@ -27,7 +27,7 @@ stdenv.mkDerivation (finalAttrs: {
   nativeBuildInputs = [
     nodejs
     pnpmConfigHook
-    pnpm_10
+    pnpm_10_29_2
     copyDesktopItems
     imagemagick
     makeWrapper
@@ -35,7 +35,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
-    pnpm = pnpm_10;
+    pnpm = pnpm_10_29_2;
     fetcherVersion = 2;
     hash = "sha256-uK3CNyPewUVAmqBJq1WMCrNeMP5I18BEBkZIBP0qPsI=";
   };
diff --git a/pkgs/by-name/gl/glab/package.nix b/pkgs/by-name/gl/glab/package.nix
index 89583d0ae6da..fdff2d50f8ce 100644
--- a/pkgs/by-name/gl/glab/package.nix
+++ b/pkgs/by-name/gl/glab/package.nix
@@ -13,13 +13,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "glab";
-  version = "1.86.0";
+  version = "1.89.0";
 
   src = fetchFromGitLab {
     owner = "gitlab-org";
     repo = "cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-udb62BuKhOkI3Llkw9ZaF0Hysz0wYpn64sSXDenaYRY=";
+    hash = "sha256-kc3ievJASceFGwv/c84719FlIKFX90i2H8wG8Yr08io=";
     leaveDotGit = true;
     postFetch = ''
       cd "$out"
@@ -28,7 +28,7 @@ buildGoModule (finalAttrs: {
     '';
   };
 
-  vendorHash = "sha256-1sO7rTnu91KG8lm4dn8vzibdGiH4qrVR2Y5lOs06R98=";
+  vendorHash = "sha256-eKwYddkcFDmiZbGFJGx53FuyMHeeWYnMfX3WbDWb40w=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/go/goxlr-utility/package.nix b/pkgs/by-name/go/goxlr-utility/package.nix
index b02e9fe3aa07..978a0aaa43f0 100644
--- a/pkgs/by-name/go/goxlr-utility/package.nix
+++ b/pkgs/by-name/go/goxlr-utility/package.nix
@@ -46,7 +46,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     install -Dm644 "50-goxlr.rules" "$out/etc/udev/rules.d/50-goxlr.rules"
     install -Dm644 "daemon/resources/goxlr-utility.png" "$out/share/icons/hicolor/48x48/apps/goxlr-utility.png"
     install -Dm644 "daemon/resources/goxlr-utility.svg" "$out/share/icons/hicolor/scalable/apps/goxlr-utility.svg"
-    install -Dm644 "daemon/resources/goxlr-utility-large.png" "$out/share/pixmaps/goxlr-utility.png"
+    install -Dm644 "daemon/resources/goxlr-utility-large.png" "$out/share/icons/hicolor/128x128/apps/goxlr-utility.png"
     install -Dm644 "daemon/resources/goxlr-utility.desktop" "$out/share/applications/goxlr-utility.desktop"
     substituteInPlace $out/share/applications/goxlr-utility.desktop \
       --replace-fail /usr/bin $out/bin
diff --git a/pkgs/by-name/gq/gqlgen/package.nix b/pkgs/by-name/gq/gqlgen/package.nix
index 8c0cc9697bf4..bcde338d745c 100644
--- a/pkgs/by-name/gq/gqlgen/package.nix
+++ b/pkgs/by-name/gq/gqlgen/package.nix
@@ -6,7 +6,7 @@
 }:
 
 let
-  version = "0.17.87";
+  version = "0.17.88";
 in
 buildGoModule {
   pname = "gqlgen";
@@ -16,10 +16,10 @@ buildGoModule {
     owner = "99designs";
     repo = "gqlgen";
     tag = "v${version}";
-    hash = "sha256-e5YWX9+1b6bQtaeWcLMX5LxjbZrbGOcjoQTe5T8n1Kk=";
+    hash = "sha256-AUQUQfxLO595e2ySBMzCt13nD7eiP8Et6kRe+GmCWyU=";
   };
 
-  vendorHash = "sha256-vbOzKcrdjNsddvwN7PeyFixnQbdT2nGMZN5nFbwhcMI=";
+  vendorHash = "sha256-Wqk0QVsvr70deuBbwKA/9aYdL+DuWWZ9wqgz3MFvjXI=";
 
   subPackages = [ "." ];
 
diff --git a/pkgs/by-name/he/hermitcli/package.nix b/pkgs/by-name/he/hermitcli/package.nix
index ea482eea5f81..2f1afe7ff84a 100644
--- a/pkgs/by-name/he/hermitcli/package.nix
+++ b/pkgs/by-name/he/hermitcli/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "hermit";
-  version = "0.49.4";
+  version = "0.50.0";
 
   src = fetchFromGitHub {
     rev = "v${finalAttrs.version}";
     owner = "cashapp";
     repo = "hermit";
-    hash = "sha256-6HgynZmXdX0voB6dFkNshfRnjzrpJUJ518F4yBhExAQ=";
+    hash = "sha256-2deJGcMZgZIA55Da/7W4y9ib73elQs+2Df/jf62N0EE=";
   };
 
-  vendorHash = "sha256-KEwbADLm7oTChoLyx/0SykQX1Fy4bJxNbYcGmfEka7Q=";
+  vendorHash = "sha256-2sNtok5J1kBvJZ0I1FOq1ZP54TsZbzqu/M3v1nA12m8=";
 
   subPackages = [ "cmd/hermit" ];
 
diff --git a/pkgs/by-name/he/heroic-unwrapped/package.nix b/pkgs/by-name/he/heroic-unwrapped/package.nix
index 24bd10a53ad1..4e15de84522e 100644
--- a/pkgs/by-name/he/heroic-unwrapped/package.nix
+++ b/pkgs/by-name/he/heroic-unwrapped/package.nix
@@ -4,7 +4,7 @@
   stdenv,
   fetchFromGitHub,
   # Pinned, because our FODs are not guaranteed to be stable between major versions.
-  pnpm_10,
+  pnpm_10_29_2,
   fetchPnpmDeps,
   pnpmConfigHook,
   nodejs,
@@ -21,7 +21,7 @@
 }:
 
 let
-  pnpm = pnpm_10;
+  pnpm = pnpm_10_29_2;
   electron = electron_39;
 
   legendary = callPackage ./legendary.nix { };
diff --git a/pkgs/by-name/ho/hoppscotch/package.nix b/pkgs/by-name/ho/hoppscotch/package.nix
index bca07b4f7236..914348ae96ed 100644
--- a/pkgs/by-name/ho/hoppscotch/package.nix
+++ b/pkgs/by-name/ho/hoppscotch/package.nix
@@ -92,7 +92,7 @@ else
       ''
         # Install .desktop files
         install -Dm444 ${appimageContents}/Hoppscotch.desktop $out/share/applications/hoppscotch.desktop
-        install -Dm444 ${appimageContents}/Hoppscotch.png $out/share/pixmaps/hoppscotch.png
+        install -Dm444 ${appimageContents}/Hoppscotch.png $out/share/icons/hicolor/256x256/apps/hoppscotch.png
         substituteInPlace $out/share/applications/hoppscotch.desktop \
           --replace-fail "hoppscotch-desktop" "hoppscotch"
       '';
diff --git a/pkgs/by-name/hq/hqplayer-desktop/package.nix b/pkgs/by-name/hq/hqplayer-desktop/package.nix
index 3f7e5490183e..89555043e30d 100644
--- a/pkgs/by-name/hq/hqplayer-desktop/package.nix
+++ b/pkgs/by-name/hq/hqplayer-desktop/package.nix
@@ -14,6 +14,7 @@
   mpfr,
   wavpack,
   kdePackages,
+  imagemagick,
 }:
 
 let
@@ -40,6 +41,7 @@ stdenv.mkDerivation {
     autoPatchelfHook
     dpkg
     kdePackages.wrapQtAppsHook
+    imagemagick
   ];
 
   buildInputs = [
@@ -79,10 +81,11 @@ stdenv.mkDerivation {
     mkdir -p "$out/share/applications"
     mv ./usr/share/applications/* "$out/share/applications"
 
-    # pixmaps
-    mkdir -p "$out/share/pixmaps"
-    mv ./usr/share/pixmaps/* "$out/share/pixmaps"
-
+    # icons
+    mkdir -p $out/share/icons/hicolor/96x96/apps
+    install -D ./usr/share/pixmaps/hqplayer5client.png -t $out/share/icons/hicolor/128x128/apps
+    install -D ./usr/share/pixmaps/hqplayer5desktop.png -t $out/share/icons/hicolor/128x128/apps
+    magick ./usr/share/pixmaps/hqplayer5desktop-manual.png -resize 96x96 $out/share/icons/hicolor/96x96/apps/hqplayer5desktop-manual.png
     runHook postInstall
   '';
 
diff --git a/pkgs/by-name/hy/hyprviz/package.nix b/pkgs/by-name/hy/hyprviz/package.nix
index dd7848aecc93..a796cbfabea1 100644
--- a/pkgs/by-name/hy/hyprviz/package.nix
+++ b/pkgs/by-name/hy/hyprviz/package.nix
@@ -12,16 +12,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "hyprviz";
-  version = "0.8.1";
+  version = "0.8.3";
 
   src = fetchFromGitHub {
     owner = "timasoft";
     repo = "hyprviz";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-CzuCBeJWtfHvCcWtV7X6suTagx0Sw+OagleHwwlyEms=";
+    hash = "sha256-73KcrKlnmdFNllRe7V3MO2FEn95G/pKtFNwRuIjCkew=";
   };
 
-  cargoHash = "sha256-fg4bPn/18Pu7LUorF3egCeBd9di+3OmCQxTeWr1Pybw=";
+  cargoHash = "sha256-gkLWqvd/4xVFkluv0Q16PjHUckHmMH9eoNxPU8qN+WE=";
 
   nativeBuildInputs = [
     pkg-config
diff --git a/pkgs/by-name/id/ideamaker/package.nix b/pkgs/by-name/id/ideamaker/package.nix
index f99e76615b63..3cf22b635dc9 100644
--- a/pkgs/by-name/id/ideamaker/package.nix
+++ b/pkgs/by-name/id/ideamaker/package.nix
@@ -76,7 +76,7 @@ stdenv.mkDerivation {
       $out/share/mime/packages/ideamaker.xml
 
     install -D usr/share/ideamaker/icons/ideamaker-icon.png \
-      $out/share/pixmaps/ideamaker.png
+      $out/share/icons/hicolor/128x128/apps/ideamaker.png
 
     ln -sf $out/usr/lib/x86_64-linux-gnu/ideamaker/ideamaker $out/bin/ideamaker
 
diff --git a/pkgs/by-name/ip/ipscan/package.nix b/pkgs/by-name/ip/ipscan/package.nix
index 61704697e931..80e653ab3e63 100644
--- a/pkgs/by-name/ip/ipscan/package.nix
+++ b/pkgs/by-name/ip/ipscan/package.nix
@@ -43,12 +43,9 @@ stdenv.mkDerivation (finalAttrs: {
       }" \
       --add-flags "-Xmx256m -cp $out/share/${finalAttrs.pname}-${finalAttrs.version}.jar:${swt}/jars/swt.jar net.azib.ipscan.Main"
 
-    mkdir -p $out/share/applications
-    cp usr/share/applications/ipscan.desktop $out/share/applications/ipscan.desktop
-    substituteInPlace $out/share/applications/ipscan.desktop --replace "/usr/bin" "$out/bin"
-
-    mkdir -p $out/share/pixmaps
-    cp usr/share/pixmaps/ipscan.png $out/share/pixmaps/ipscan.png
+    install -D usr/share/applications/ipscan.desktop -t $out/share/applications/
+    substituteInPlace $out/share/applications/ipscan.desktop --replace-fail "Exec=sh /usr/bin/ipscan" "Exec=ipscan"
+    install -D usr/share/pixmaps/ipscan.png -t $out/share/icons/hicolor/128x128/apps
   '';
 
   meta = {
diff --git a/pkgs/by-name/ja/jabref/deps.json b/pkgs/by-name/ja/jabref/deps.json
index 806de87d2389..a2a97eb36cb5 100644
--- a/pkgs/by-name/ja/jabref/deps.json
+++ b/pkgs/by-name/ja/jabref/deps.json
@@ -868,9 +868,9 @@
    "jar": "sha256-MnesECrheq0QpVq+x1/1aWyNEJeQOWQ0tJbnUIeFQgM=",
    "pom": "sha256-V5BVJCdKAK4CiqzMJyg/a8WSWpNKBGwcxdBsjuTW1ak="
   },
-  "org/jetbrains/kotlin#kotlin-reflect/2.2.21": {
-   "jar": "sha256-RDgKvzfSRc5cDylPQ1EtHDmllkK/pGOSLHTpaHfPSfg=",
-   "pom": "sha256-5atrEFYKWlJWLDXNvnHdvkJ9Uetb/HAdzU9rlJvZ4D8="
+  "org/jetbrains/kotlin#kotlin-reflect/2.3.0": {
+   "jar": "sha256-cU30voGVRf9N4fNqohg+DeqUtMjN98op6ciZGbrzY2I=",
+   "pom": "sha256-89F2jvL7UxBIPb6R4w6fo2x7Pi/e5pRaCLujEBQtKcE="
   },
   "org/jetbrains/kotlin#kotlin-sam-with-receiver-compiler-plugin-embeddable/2.2.21": {
    "jar": "sha256-yweF5qeHDS9eqW9kcCDigS3snXAjAzMZu9sc5+XmVUg=",
@@ -924,6 +924,11 @@
    "module": "sha256-v7xlfd06jjfkyK1BeWjV6wsLFxyfzkj5YsKtMu5DTCE=",
    "pom": "sha256-zzH5IxlsY67ezQpXwkJpvTcCpOR8C/C9ZLWtpd5SInI="
   },
+  "org/jetbrains/kotlin#kotlin-stdlib/2.3.0": {
+   "jar": "sha256-iHWHyRcTJQrVL+FK2RZtBCwzg1BJiQ6UN/NV/8WhlbE=",
+   "module": "sha256-CRCoo7aWD8eSxFxWqR18Oj8mKG8DKVVUtRnP83h1baI=",
+   "pom": "sha256-TVJW0+SETmVrDKQF9jUNbyF5XCQ3WzRSUmxUZ92ZtaI="
+  },
   "org/jetbrains/kotlin#kotlin-tooling-core/2.2.21": {
    "jar": "sha256-dAFOxPPveM59p+Pmlk8sUmoxIdXFj++MopeeXzRFgvQ=",
    "pom": "sha256-3TPmGTLBut893oXyBPY0yABL6WQnw6HKiGbMAR1xHfo="
diff --git a/pkgs/by-name/ja/jameica/package.nix b/pkgs/by-name/ja/jameica/package.nix
index e41386949f13..556acfc74307 100644
--- a/pkgs/by-name/ja/jameica/package.nix
+++ b/pkgs/by-name/ja/jameica/package.nix
@@ -86,7 +86,7 @@ stdenv.mkDerivation rec {
 
     install -Dm644 releases/${version}/jameica/jameica.jar $out/share/java/
     install -Dm644 plugin.xml $out/share/java/
-    install -Dm644 build/jameica-icon.png $out/share/pixmaps/jameica.png
+    install -Dm644 build/jameica-icon.png $out/share/icons/hicolor/64x64/apps/jameica.png
     cp ${desktopItem}/share/applications/* $out/share/applications/
   ''
   + lib.optionalString stdenv.hostPlatform.isDarwin ''
diff --git a/pkgs/by-name/jd/jdt-language-server/package.nix b/pkgs/by-name/jd/jdt-language-server/package.nix
index 530ffdce3f21..3ea84f2b91a2 100644
--- a/pkgs/by-name/jd/jdt-language-server/package.nix
+++ b/pkgs/by-name/jd/jdt-language-server/package.nix
@@ -7,15 +7,15 @@
 }:
 
 let
-  timestamp = "202601291528";
+  timestamp = "202602261110";
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "jdt-language-server";
-  version = "1.56.0";
+  version = "1.57.0";
 
   src = fetchurl {
     url = "https://download.eclipse.org/jdtls/milestones/${finalAttrs.version}/jdt-language-server-${finalAttrs.version}-${timestamp}.tar.gz";
-    hash = "sha256-mISS8aQ1C+Uqr75TjcBPXE2uCK0OHyqjUxdiLtLb48Y=";
+    hash = "sha256-9/+pP+G7vqldrBPdl83NJcWC1uVttnJY2g3M6yMCYB4=";
   };
 
   sourceRoot = ".";
diff --git a/pkgs/by-name/jj/jjui/package.nix b/pkgs/by-name/jj/jjui/package.nix
index 6a16cc41066c..eec9d02b1841 100644
--- a/pkgs/by-name/jj/jjui/package.nix
+++ b/pkgs/by-name/jj/jjui/package.nix
@@ -8,16 +8,16 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "jjui";
-  version = "0.9.12";
+  version = "0.10.0";
 
   src = fetchFromGitHub {
     owner = "idursun";
     repo = "jjui";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-CBNMoVALCLWQ9bsrQilnx8djLufLNt8p9iK+HnpUPgc=";
+    hash = "sha256-wGal1aulnbacP6Ovms82XKPMbUvH/rs9Rg/B40E3uls=";
   };
 
-  vendorHash = "sha256-nXUaqkCz3QERqevwGk94sRrrPgJoJOPWXYc7iBOMAdY=";
+  vendorHash = "sha256-egPW+YgRkdOdnzei5J2JmSt/98fpoo1lphsoQIK41Lg=";
 
   ldflags = [ "-X main.Version=${finalAttrs.version}" ];
 
@@ -37,6 +37,7 @@ buildGoModule (finalAttrs: {
     changelog = "https://github.com/idursun/jjui/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [
+      adamcstephens
       adda
     ];
     mainProgram = "jjui";
diff --git a/pkgs/by-name/kb/kbld/package.nix b/pkgs/by-name/kb/kbld/package.nix
index 25e4a1422685..ca3e4e40eab0 100644
--- a/pkgs/by-name/kb/kbld/package.nix
+++ b/pkgs/by-name/kb/kbld/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "kbld";
-  version = "0.47.1";
+  version = "0.47.2";
 
   src = fetchFromGitHub {
     owner = "carvel-dev";
     repo = "kbld";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-kfUx17T2r6BDezH4Sz4wAny8A3aOQLyfsjivpXN7dRQ=";
+    hash = "sha256-RsGHwNvrRTddxLIrJekZg8SxYzf618H+ikLgDkk8nP4=";
   };
 
   vendorHash = null;
diff --git a/pkgs/by-name/ke/keto/package.nix b/pkgs/by-name/ke/keto/package.nix
index 4913a13a6d28..582bae643c67 100644
--- a/pkgs/by-name/ke/keto/package.nix
+++ b/pkgs/by-name/ke/keto/package.nix
@@ -5,8 +5,8 @@
 }:
 let
   pname = "keto";
-  version = "0.14.0";
-  commit = "613779b6dad89f6fb6b4fa6968f13ede11963c97";
+  version = "25.4.0";
+  commit = "f5635433a56324f266ea414727bf7395bb2da429";
 in
 buildGoModule {
   inherit pname version commit;
@@ -15,10 +15,10 @@ buildGoModule {
     owner = "ory";
     repo = "keto";
     rev = "v${version}";
-    hash = "sha256-DQiE7PvRnOzdRITRl7LgUDmCJO5/aUzbFdEIyiofZfU=";
+    hash = "sha256-2DktCLYOj2azYBAhMVuqfU7QQ+eC3qDLtcp+fPljFAg=";
   };
 
-  vendorHash = "sha256-deQxdG3HZiMzzwTr6moILBSNeNR/3noFlJlIx1eyBZs=";
+  vendorHash = "sha256-+zHvIf3CBMMqKVmQYzMRGQg9iGf9Khnhpgt95lA0BBA=";
 
   tags = [
     "sqlite"
@@ -40,6 +40,9 @@ buildGoModule {
     description = "ORY Keto, the open source access control server";
     homepage = "https://www.ory.sh/keto/";
     license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [ mrmebelman ];
+    maintainers = with lib.maintainers; [
+      mrmebelman
+      debtquity
+    ];
   };
 }
diff --git a/pkgs/by-name/ke/keyguard/deps.json b/pkgs/by-name/ke/keyguard/deps.json
index ceb18b185f2b..d3c379b962b0 100644
--- a/pkgs/by-name/ke/keyguard/deps.json
+++ b/pkgs/by-name/ke/keyguard/deps.json
@@ -1114,13 +1114,13 @@
   "nl/littlerobots/version-catalog-update#nl.littlerobots.version-catalog-update.gradle.plugin/1.0.1": {
    "pom": "sha256-BBNTyo5k8a+g5bFPXj+6PWRwIoFPPnomKwrgReqv2EA="
   },
-  "org/gradle/kotlin#gradle-kotlin-dsl-plugins/6.4.2": {
-   "jar": "sha256-MwhkX0Z7Jm5YhMJkUIIktnKejtwWbm1DX1tibBTg/Rk=",
-   "module": "sha256-kxqze7wDwJHt/8RtlqYLXk+isLTV2UWLkscm4FpR0NM=",
-   "pom": "sha256-VGkK7nfKVycLvqXnhrnTPiOvYIzuIVuIDvcq45v5aU8="
+  "org/gradle/kotlin#gradle-kotlin-dsl-plugins/6.5.2": {
+   "jar": "sha256-O/9KBwDhyBXRlEifB7ugbLGQ6PKbdz03z+43rI1cdkQ=",
+   "module": "sha256-MVnFQXhFqWmTx4nULexDVwf7uEiXnP0R0LgzBZ5RIKM=",
+   "pom": "sha256-ctVO1m6jP6+UKCNRwxAZ4S59fpIOpnpRbL4ODWdBA0M="
   },
-  "org/gradle/kotlin/kotlin-dsl#org.gradle.kotlin.kotlin-dsl.gradle.plugin/6.4.2": {
-   "pom": "sha256-Xi2xvrvUHGTWc1VEsphssmofxmiX0ZCXnJC1C4fIXfo="
+  "org/gradle/kotlin/kotlin-dsl#org.gradle.kotlin.kotlin-dsl.gradle.plugin/6.5.2": {
+   "pom": "sha256-5aavF7WFYNdGyrQseV/jpCoevkBQ5VpPANjPVM8x8eo="
   },
   "org/gradle/toolchains#foojay-resolver/1.0.0": {
    "jar": "sha256-eLhqR9/fdpfJvRXaeJg/2A2nJH1uAvwQa98H4DiLYKg=",
@@ -1137,112 +1137,106 @@
   "org/jetbrains/compose#org.jetbrains.compose.gradle.plugin/1.11.0-alpha02": {
    "pom": "sha256-MU2vfNXg5KBkAF+cfuVA2xRoE9ywWMiBM4tHjynNKLw="
   },
-  "org/jetbrains/kotlin#abi-tools-api/2.2.21": {
-   "jar": "sha256-I5kB8xfBibS0zIvF6WaUPcGeOSWVOeZouqXX7xjrkWo=",
-   "pom": "sha256-kkkKzKD0UFgdVs4FeWHY/6mDVYfmn2bpbQpxdbrOzYU="
+  "org/jetbrains/kotlin#abi-tools-api/2.3.0": {
+   "jar": "sha256-QBe8wfXTKFsX5rYiDRakaMhxWTDw35Y5bXZLV/Cm02U=",
+   "pom": "sha256-qJIhRAlxhudUjXFH3I3O1eYOMGnUY1ulUe8uV3WrmAk="
   },
-  "org/jetbrains/kotlin#fus-statistics-gradle-plugin/2.2.21": {
-   "module": "sha256-SVZZs54wVUHstxLmm2IuE+OK2SQPmoJ8oFhDS9mfIR0=",
-   "pom": "sha256-JQzsmn5XTCwRF+7PBCHjIAHqDzSwqQHH+k6tb+jd7aQ="
+  "org/jetbrains/kotlin#fus-statistics-gradle-plugin/2.3.0": {
+   "module": "sha256-d8IDSG/XkrWAVyBp5cRC0YDA7wVbpzRQXaKNGX7BL/c=",
+   "pom": "sha256-k8/rFUWRw3AengQ1C9AF0ZVqmuZHFH1vsqfFeD4fkJo="
   },
-  "org/jetbrains/kotlin#fus-statistics-gradle-plugin/2.2.21/gradle813": {
-   "jar": "sha256-J9z0rqpbu2TYYb0p7WDUgvD/2WJEyB4kJrnaxef9xj8="
+  "org/jetbrains/kotlin#fus-statistics-gradle-plugin/2.3.0/gradle813": {
+   "jar": "sha256-D+cv3G5RvisnSw5kuEQB9SUDavsgYWKkRYIU8R6614c="
   },
-  "org/jetbrains/kotlin#kotlin-assignment/2.2.21": {
-   "module": "sha256-GNfXYm3tHJiZC9JhNVjUmrJfY7eGx360iKmdirZaxhM=",
-   "pom": "sha256-rzH4fPfA2i55da7DPjYB0T/HeWaE0VVTaX3uJJtt7tQ="
+  "org/jetbrains/kotlin#kotlin-assignment/2.3.0": {
+   "module": "sha256-ljRPGdjxnqpbxEHjP2UB9+c9o8el1X1EvHwW6qRXVls=",
+   "pom": "sha256-GqwiGC0snJVP/8FrV2Xq0jjiAw9HhIctRrxfOcozll0="
   },
-  "org/jetbrains/kotlin#kotlin-assignment/2.2.21/gradle813": {
-   "jar": "sha256-hxwwVHmuFrFE1AwgTr3/AZEwBejpjasXs2XFRaJZ9R0="
+  "org/jetbrains/kotlin#kotlin-assignment/2.3.0/gradle813": {
+   "jar": "sha256-PKIayHkWchdbgnPemV8CTzWZLfAwCijCdUnPd3DMnOY="
   },
-  "org/jetbrains/kotlin#kotlin-build-statistics/2.2.21": {
-   "jar": "sha256-jf37K49n/NzEzuPvkKJa9GfKKVhTsOoBnQAQrOvW8Yo=",
-   "pom": "sha256-yL9i9tym159DbECxrwnbQvRuv0vNcrMHnfjHJbXAY1g="
+  "org/jetbrains/kotlin#kotlin-build-statistics/2.3.0": {
+   "jar": "sha256-Z3hVlwDnLXZOniTZWPFuwMx152t1s4FMK83hRKYnT04=",
+   "pom": "sha256-QTkKXrIxFJOxpFubOXLDoL8dqEfoRaNKtoQKr0EmTeI="
   },
-  "org/jetbrains/kotlin#kotlin-build-tools-api/2.2.21": {
-   "jar": "sha256-MWRcpSI5siHr0GCgD/+NhRb/3Ii72fTkzX3bQacGjHA=",
-   "pom": "sha256-Y/3PHe0qtFrXfASZefqkTxkPe7jurE+B+Yd+nfqf2fk="
+  "org/jetbrains/kotlin#kotlin-build-tools-api/2.3.0": {
+   "jar": "sha256-xsCc8oU0VySfcHyGOCESQJ1aVfULa4Vouk9TDdAD/tw=",
+   "pom": "sha256-FzTIvg4nFXJ3AkW01gbOW7iBbosNHA9+euEcEMLKF1s="
   },
-  "org/jetbrains/kotlin#kotlin-compiler-runner/2.2.21": {
-   "jar": "sha256-o6Qi4GvNNaMqeY0ZHvbrs16ms5w1U+lB05wB5jH8XHc=",
-   "pom": "sha256-HxA9i94I3dYUvZg6vfy3lJE5xgasYM2KaJQf0Pse4SQ="
+  "org/jetbrains/kotlin#kotlin-compiler-runner/2.3.0": {
+   "jar": "sha256-hwl38pYFQ2xesiV7nI5dZPMoLyqI7e5FRNNOxF8Wpqc=",
+   "pom": "sha256-ov8zZnin9TpEOSv8bFK2gS7dxz5AghyQfyomQWeeDrs="
   },
-  "org/jetbrains/kotlin#kotlin-daemon-client/2.2.21": {
-   "jar": "sha256-POLKPF17x8h8QUmsLFk9IaeR1ndiKa4SPbZFowF96BQ=",
-   "pom": "sha256-T2/dvBDZshZ4meNPoRP8mtdcxNbOWKuE+WFLY8BfjaM="
+  "org/jetbrains/kotlin#kotlin-daemon-client/2.3.0": {
+   "jar": "sha256-sr5naIyvEaE41a4M4SNTga2asN25OVqwb42EagtGYBc=",
+   "pom": "sha256-teLnTuXC+I/Qi/g+7GRx9rvKeqEhWYgCtsMsVuhwYCY="
   },
-  "org/jetbrains/kotlin#kotlin-gradle-plugin-annotations/2.2.21": {
-   "jar": "sha256-NZTEDHAF0ESVL4D3BBcrtv0YRCQQJRlPsWvubUXaLls=",
-   "pom": "sha256-VErpKrN3QI/B7TBOxBou7EKT4PLhObPS9v0nIF8UY38="
+  "org/jetbrains/kotlin#kotlin-gradle-plugin-annotations/2.3.0": {
+   "jar": "sha256-/HKYw2tF820WUscDuraT9f6bEVmOzZrH7J/f6IptsPA=",
+   "pom": "sha256-aQhDRFhvUkNNH7tRZmlgr/uHbGQ+gIYkXrgLpeREm7U="
   },
-  "org/jetbrains/kotlin#kotlin-gradle-plugin-api/2.2.21": {
-   "jar": "sha256-t7/Qf18eCkSvYS60hHTfYyjuD286anNkLORz8wZF4aU=",
-   "module": "sha256-HnS0hvlEq54Rb5pKriDFL8L5rFI6VS25fdZYFID+lAs=",
-   "pom": "sha256-m9RXg5guF17un6rUX1/3QVyWrrau8ufPjjUIr7Y51hc="
+  "org/jetbrains/kotlin#kotlin-gradle-plugin-api/2.3.0": {
+   "module": "sha256-BQ8eECIJAOR6MIkd1c/qg3pl27sNmjyxuFKRq6MmykE=",
+   "pom": "sha256-GeTwq/tcvwEdJZP1ZRV8jr9FkvMAhhS6LtsEinhRF10="
   },
-  "org/jetbrains/kotlin#kotlin-gradle-plugin-api/2.2.21/gradle813": {
-   "jar": "sha256-t7/Qf18eCkSvYS60hHTfYyjuD286anNkLORz8wZF4aU="
+  "org/jetbrains/kotlin#kotlin-gradle-plugin-api/2.3.0/gradle813": {
+   "jar": "sha256-yh6tFJqMj0G6YKg5qDsjw6BiJ8RsYhJMUb6ZkDXerDE="
   },
-  "org/jetbrains/kotlin#kotlin-gradle-plugin-idea-proto/2.2.21": {
-   "jar": "sha256-S0vndO+5WFrw/aGA0zkD2CcuSX33uBuwkfqTOezaRb0=",
-   "pom": "sha256-uhvOJI5HRY7tRmheuiEreT/7fTfkKd/2cKIT3dEC0MA="
+  "org/jetbrains/kotlin#kotlin-gradle-plugin-idea-proto/2.3.0": {
+   "jar": "sha256-epBQPJ14f5vNLBd25MxSfrneeRLvecbJWPEwWi0cQ7o=",
+   "pom": "sha256-2bCOHuM4pjRhSanQIY+FHuPUfYu3fWEDJg8qhyauUl4="
   },
-  "org/jetbrains/kotlin#kotlin-gradle-plugin-idea/2.2.21": {
-   "jar": "sha256-7JacXwsJn4I4RiMiOPm9ZPPTdB5i6pBQrS5DL6150KA=",
-   "module": "sha256-kVGuIjeH8cILcLJKEXeJtNFNDMSE5GJzLLIwp5f3W88=",
-   "pom": "sha256-KKWiq7pbWCk+JKngbmqskmJr4YLGXfyLLbaUlE5wraU="
+  "org/jetbrains/kotlin#kotlin-gradle-plugin-idea/2.3.0": {
+   "jar": "sha256-lS5zlI4qINOYwmuHprtwzPZkGPuvFSfDUVsYjqnUvWA=",
+   "module": "sha256-kRUvrqO8DJTbZtPLWKrh2+rXyGC1dk5nsgC01N9M6rk=",
+   "pom": "sha256-BLSVrgZj7a3aSEBkZKzTlDGjysez6OjAlLdplu1BSaA="
   },
-  "org/jetbrains/kotlin#kotlin-gradle-plugin-model/2.2.21": {
-   "jar": "sha256-kI5uXIkLtJ28kmbczyi9sMJYxIZHA5rtcC/p1YZkAYY=",
-   "module": "sha256-/kRucdWLn1verY7wW2i0mGFzF+G5LUe5qztnTWTydmQ=",
-   "pom": "sha256-IIRTo2pr5JsHGhwQ6bRAQQZjbJO65b8wxtrFdMQM9bE="
+  "org/jetbrains/kotlin#kotlin-gradle-plugin/2.3.0": {
+   "module": "sha256-vbMts6ongF80eewDPsY9PMq+sTuInYbavadCu+9TwJo=",
+   "pom": "sha256-h4cnvyGoOtrYnU5giEhN2/OfaoSpQoAiGm4cL4hBMD4="
   },
-  "org/jetbrains/kotlin#kotlin-gradle-plugin/2.2.21": {
-   "module": "sha256-TiOAKj1TACSsRlrNJkh9ajpwLugEzWEzScUQjeq/S6I=",
-   "pom": "sha256-5bWdPJpGu38Pe0nPyI1pjaVBpL0JClwX2aAKtHIQc4w="
+  "org/jetbrains/kotlin#kotlin-gradle-plugin/2.3.0/gradle813": {
+   "jar": "sha256-Os+X1zolgbAyhz+on1Z1DTazt21A1pLZg58kZ92uTWk="
   },
-  "org/jetbrains/kotlin#kotlin-gradle-plugin/2.2.21/gradle813": {
-   "jar": "sha256-t6UoZcal4WDSz2Hk1CPORKaiDeCmsj0DQEttAaKBFzc="
+  "org/jetbrains/kotlin#kotlin-gradle-plugins-bom/2.3.0": {
+   "module": "sha256-/9anNzSypS+3Yz8WOVRL43HgYpxR2X+h5fteqTQ6Fwk=",
+   "pom": "sha256-cYYJKmnzaIQyxcCsuQtKZx/Y7oANhP5YT66P1TO6v4o="
   },
-  "org/jetbrains/kotlin#kotlin-gradle-plugins-bom/2.2.21": {
-   "module": "sha256-3E/A81pVMqU6Qy7k/iJDEyVIVV8nX2PuaZDVAzP4zio=",
-   "pom": "sha256-JfRGZjOd7uAQanbqXvzPqzSvz9uWCnZy+4h/cboNqL0="
+  "org/jetbrains/kotlin#kotlin-klib-commonizer-api/2.3.0": {
+   "jar": "sha256-m6V9kaveq5rNWIoUtfQiCbmWRMU0Ft/56X7LS/l/Ukg=",
+   "pom": "sha256-zTHw7NqCplEi/8alXehxE5S2GEtRRAK34RkZGqgJGoI="
   },
-  "org/jetbrains/kotlin#kotlin-klib-commonizer-api/2.2.21": {
-   "jar": "sha256-WLxFHOYu1r79B3rBB+pfEzRD503XjPOkpI+GjmGDfos=",
-   "pom": "sha256-yJkqd6ltK5+NgTdMQL1x0y4h2f8c23mdFdSXGLEqEuE="
+  "org/jetbrains/kotlin#kotlin-native-utils/2.3.0": {
+   "jar": "sha256-7kvygz0Q5fN90haoMSn1nzx8vvXrrBMPcGZIOXCMgLc=",
+   "pom": "sha256-Rp6PYB/b34kP+ozXSOEQcCqkUxu7KbZOXnUD8O/lDZA="
   },
-  "org/jetbrains/kotlin#kotlin-native-utils/2.2.21": {
-   "jar": "sha256-50sUQG2uCgI4gYfGLBcxGDun0NjmBnVoLeURqQr6bFY=",
-   "pom": "sha256-1SJqfIYGn6mnIavJeuTaFaQO0WicirVQXhoa0tsg3F8="
+  "org/jetbrains/kotlin#kotlin-sam-with-receiver/2.3.0": {
+   "module": "sha256-DCD2gdNvSnmRYiFYCYkpF5TmVlgvlJwGed+kNKAm9so=",
+   "pom": "sha256-DILmEXpGNhvUzF5iZV8rgC8Q9LfZJWpjaD0DSv0MDUM="
   },
-  "org/jetbrains/kotlin#kotlin-sam-with-receiver/2.2.21": {
-   "module": "sha256-2iXbk8+OvwbGM1L4PnIK14e8cD/Q54DxGRjQii7JgE4=",
-   "pom": "sha256-IU7uupPxsDquZnoJfbq/6z2XRel5zU0LJGLzj+vHd2Q="
+  "org/jetbrains/kotlin#kotlin-sam-with-receiver/2.3.0/gradle813": {
+   "jar": "sha256-r8iTlKUrUu8Lp6gpakJi0NOoo850CRXYfXE7CgFhMpg="
   },
-  "org/jetbrains/kotlin#kotlin-sam-with-receiver/2.2.21/gradle813": {
-   "jar": "sha256-tHyUm4u4DOaAcj+Lw8hw8ifDZHel6wLCtz1hEY1GMKY="
+  "org/jetbrains/kotlin#kotlin-stdlib/2.3.0": {
+   "jar": "sha256-iHWHyRcTJQrVL+FK2RZtBCwzg1BJiQ6UN/NV/8WhlbE=",
+   "module": "sha256-CRCoo7aWD8eSxFxWqR18Oj8mKG8DKVVUtRnP83h1baI=",
+   "pom": "sha256-TVJW0+SETmVrDKQF9jUNbyF5XCQ3WzRSUmxUZ92ZtaI="
   },
-  "org/jetbrains/kotlin#kotlin-stdlib/2.2.21": {
-   "jar": "sha256-ZVij0jPaVqIJNLMhWfnbX4btWBbvCY94osIj3Gq7ed0=",
-   "module": "sha256-v7xlfd06jjfkyK1BeWjV6wsLFxyfzkj5YsKtMu5DTCE=",
-   "pom": "sha256-zzH5IxlsY67ezQpXwkJpvTcCpOR8C/C9ZLWtpd5SInI="
+  "org/jetbrains/kotlin#kotlin-tooling-core/2.3.0": {
+   "jar": "sha256-NnFCeBKZvA+RIMHe7A5ik0oa+ep/AaqpxaU1TcXY19k=",
+   "pom": "sha256-tQ6FtLEYwSIjge0c67K6lqfeLdrtti3aZ9SuBqGiXTc="
   },
-  "org/jetbrains/kotlin#kotlin-tooling-core/2.2.21": {
-   "jar": "sha256-dAFOxPPveM59p+Pmlk8sUmoxIdXFj++MopeeXzRFgvQ=",
-   "pom": "sha256-3TPmGTLBut893oXyBPY0yABL6WQnw6HKiGbMAR1xHfo="
+  "org/jetbrains/kotlin#kotlin-util-io/2.3.0": {
+   "jar": "sha256-HJEgPyfnO5aI3f4aiAIyjTXrcPpV9eE96ttyHnj5KqQ=",
+   "pom": "sha256-hvmuNH2YfMwY2aEJ7tLlVDvjj/SMgdUtKMf6HyBarK8="
   },
-  "org/jetbrains/kotlin#kotlin-util-io/2.2.21": {
-   "jar": "sha256-JmqkAmoQb1n878PxUXaIcK+RzvFeQBH6wKofH1Z9SfQ=",
-   "pom": "sha256-67UM9Bx0RJdvAsL5FbQXMlcsXzmUplgciOZN4LmY970="
+  "org/jetbrains/kotlin#kotlin-util-klib-metadata/2.3.0": {
+   "jar": "sha256-JZjCbDTMXGnrAEc0Y+lQrmfpuAln9DoBg8Vn7eZqlxc=",
+   "pom": "sha256-4EB9YmkdWjQWFh/YNztNt0o714bxtILghGGXUQL58+s="
   },
-  "org/jetbrains/kotlin#kotlin-util-klib-metadata/2.2.21": {
-   "jar": "sha256-AiuVo9/tlJ18LkeCC82YNu4Fe3IVE/dzNh5DM/bHb4w=",
-   "pom": "sha256-87Mj0f6eM9x+nF7XfzBSg//WN4FdiMUHlFQRvXqiow8="
-  },
-  "org/jetbrains/kotlin#kotlin-util-klib/2.2.21": {
-   "jar": "sha256-VUAKkX5rmEphl+rni1tS7b3yzW4KfDhD95VEgbr7JD8=",
-   "pom": "sha256-o1Lf02Uns67w98DsZJDeydX8m+xPM02ETK6U+BdD3zA="
+  "org/jetbrains/kotlin#kotlin-util-klib/2.3.0": {
+   "jar": "sha256-ZLugCZZqAoGG2e5waw3ID+phwK5usXJe0dfXDvIrUuE=",
+   "pom": "sha256-lzWjPLZJg7qg0S3AyOGTSw5VLmvMh2chrFWKmCKFC/4="
   },
   "org/jetbrains/kotlin/android#org.jetbrains.kotlin.android.gradle.plugin/2.3.10-RC": {
    "pom": "sha256-p0/yoS/KLjABAqN1+7/O9sT75OaoBfyxZCxyZiIt5gw="
@@ -3123,9 +3117,9 @@
   "org/jetbrains/kotlin#fus-statistics-gradle-plugin/2.3.10-RC/gradle813": {
    "jar": "sha256-lW/RrbQXK6I9hwM12BUayFL2/DmqyAMfRptDoBNoLBg="
   },
-  "org/jetbrains/kotlin#kotlin-assignment-compiler-plugin-embeddable/2.2.21": {
-   "jar": "sha256-JmFrjhshTWLwLRUzHK/3JcToI3ziCtFPXMznJKop588=",
-   "pom": "sha256-Bhpvb0xNvpCtDeOeUeeKuvtmf+jJsJXODA3qM1aPQh8="
+  "org/jetbrains/kotlin#kotlin-assignment-compiler-plugin-embeddable/2.3.0": {
+   "jar": "sha256-1D+qszfzaY6NrOZSXSzXwq66ewNZOEhYZBZP5wLnM70=",
+   "pom": "sha256-UttpIUdRA18/LYUvJDCC5x566wenFs2eCHskuYJ6Uio="
   },
   "org/jetbrains/kotlin#kotlin-bom/2.0.21": {
    "pom": "sha256-1Ufg3iVCLZY+IsepRPO13pQ8akmClbUtv/49KJXNm+g="
@@ -3134,37 +3128,41 @@
    "jar": "sha256-QcD+zb7B4vUdXG96lyzMaSIVNhpXSU5rI+4xOeKyIpQ=",
    "pom": "sha256-jbIqNqSFRiw9BdaOnnPwHqeDlovPlTeZWN8/zGeaSlQ="
   },
-  "org/jetbrains/kotlin#kotlin-build-tools-api/2.2.21": {
-   "jar": "sha256-MWRcpSI5siHr0GCgD/+NhRb/3Ii72fTkzX3bQacGjHA=",
-   "pom": "sha256-Y/3PHe0qtFrXfASZefqkTxkPe7jurE+B+Yd+nfqf2fk="
+  "org/jetbrains/kotlin#kotlin-build-tools-api/2.3.0": {
+   "jar": "sha256-xsCc8oU0VySfcHyGOCESQJ1aVfULa4Vouk9TDdAD/tw=",
+   "pom": "sha256-FzTIvg4nFXJ3AkW01gbOW7iBbosNHA9+euEcEMLKF1s="
   },
   "org/jetbrains/kotlin#kotlin-build-tools-api/2.3.10-RC": {
    "jar": "sha256-PaKI6nHlhcPNzNdz0cDdZ/+sGrxx77cWNp5+tma1pwM=",
    "pom": "sha256-ZOHGPrbAdBbxcC3/ltSXayhERBNbsEN9rM47bWrmAFY="
   },
+  "org/jetbrains/kotlin#kotlin-build-tools-compat/2.3.0": {
+   "jar": "sha256-AJST4crwTIKF8f7RV7uraINV2wTS3q7E9aD5tjX4ZuU=",
+   "pom": "sha256-ayMWTiKBY/1j+Bf7LF3ifW6cNAO3Y8y6BoBYTyF/jjI="
+  },
   "org/jetbrains/kotlin#kotlin-build-tools-compat/2.3.10-RC": {
    "jar": "sha256-Cy5M/Ny64fh/Or9QicVqgwpMF5cLKOgktamabo2JFFQ=",
    "pom": "sha256-wK1VOiQf6+HyYJcUPjMiRmO2REG6/XY/6Vm2Ae5mbwI="
   },
-  "org/jetbrains/kotlin#kotlin-build-tools-impl/2.2.21": {
-   "jar": "sha256-RYtj74/FCgoxgP5ojsG5lXRZkqBcSV2sYeWNEIiSeoA=",
-   "pom": "sha256-Ln/cogFlzxDnO2L4NfZ+7PQnyCPtYPGdXwButnQ0Wv4="
+  "org/jetbrains/kotlin#kotlin-build-tools-impl/2.3.0": {
+   "jar": "sha256-k6Xo/7EACAHIMqhisjvZdm9ETm9sGFwysftXh3+1zqM=",
+   "pom": "sha256-AKelPNgr5ws234oCI6Wrhhoqb/txnZt3M3XId8idugQ="
   },
   "org/jetbrains/kotlin#kotlin-build-tools-impl/2.3.10-RC": {
    "jar": "sha256-9n02tA24gnd7Bseg/hO/aGAnu6wlxfblGNJzZWwhZrY=",
    "pom": "sha256-CMsXeW8qAa5vfqppz/F7bVzsr/tHxKBSpQWdiCJDC8w="
   },
-  "org/jetbrains/kotlin#kotlin-compiler-embeddable/2.2.21": {
-   "jar": "sha256-lYj6aWrFUHr3ZP1WYN9olBheEnBOwbw/XLdyr0mH8pU=",
-   "pom": "sha256-CzPGTyYiujvIKDN4vbdQXyvjMKInWAcDitVDWbM935s="
+  "org/jetbrains/kotlin#kotlin-compiler-embeddable/2.3.0": {
+   "jar": "sha256-jb2IL6WMPRfmg6JzkCiDFfi0kPjj47G+TcPigNN+KFo=",
+   "pom": "sha256-zOmxEfIRZgxcRTk+dI30aVC2HAEUfgdzttxxnui7d6g="
   },
   "org/jetbrains/kotlin#kotlin-compiler-embeddable/2.3.10-RC": {
    "jar": "sha256-r6+klWvxvWJX9wLPm5oonqviny9TDCM7pPgZptfno6I=",
    "pom": "sha256-UyU8WscTHsSThFu1RsTY+79bu5WEF8KUBlFnLcmmKWA="
   },
-  "org/jetbrains/kotlin#kotlin-compiler-runner/2.2.21": {
-   "jar": "sha256-o6Qi4GvNNaMqeY0ZHvbrs16ms5w1U+lB05wB5jH8XHc=",
-   "pom": "sha256-HxA9i94I3dYUvZg6vfy3lJE5xgasYM2KaJQf0Pse4SQ="
+  "org/jetbrains/kotlin#kotlin-compiler-runner/2.3.0": {
+   "jar": "sha256-hwl38pYFQ2xesiV7nI5dZPMoLyqI7e5FRNNOxF8Wpqc=",
+   "pom": "sha256-ov8zZnin9TpEOSv8bFK2gS7dxz5AghyQfyomQWeeDrs="
   },
   "org/jetbrains/kotlin#kotlin-compiler-runner/2.3.10-RC": {
    "jar": "sha256-QqRjDDh2gXZkUOxQfriAelausTOw4G7RcDwEXorDfrM=",
@@ -3174,17 +3172,17 @@
    "jar": "sha256-zy8oVmxarKIn07MOOzTP9mjQh4IEYcA6nuhTJLrDDA8=",
    "pom": "sha256-REd2WqNlz5rxWBJ5kRx81qNxcwKp0fgVpeKVXZqQgS4="
   },
-  "org/jetbrains/kotlin#kotlin-daemon-client/2.2.21": {
-   "jar": "sha256-POLKPF17x8h8QUmsLFk9IaeR1ndiKa4SPbZFowF96BQ=",
-   "pom": "sha256-T2/dvBDZshZ4meNPoRP8mtdcxNbOWKuE+WFLY8BfjaM="
+  "org/jetbrains/kotlin#kotlin-daemon-client/2.3.0": {
+   "jar": "sha256-sr5naIyvEaE41a4M4SNTga2asN25OVqwb42EagtGYBc=",
+   "pom": "sha256-teLnTuXC+I/Qi/g+7GRx9rvKeqEhWYgCtsMsVuhwYCY="
   },
   "org/jetbrains/kotlin#kotlin-daemon-client/2.3.10-RC": {
    "jar": "sha256-C+suo6o9uyYgihTqpJs022QDETlZE6fOb5GDQQnGZsQ=",
    "pom": "sha256-qG6d+5GGaQ5j/Z5ROCL2pkRT/QDvLPgG0P6+PgSUzYA="
   },
-  "org/jetbrains/kotlin#kotlin-daemon-embeddable/2.2.21": {
-   "jar": "sha256-kcBnPCLkSwVK4DFNMjhg6+Hzr/Pw68dP/4LEcz3eCb4=",
-   "pom": "sha256-Fwvb7LpX/wCiuNF+8seeCLhfZ99p2FO6CiWaQYO/uSM="
+  "org/jetbrains/kotlin#kotlin-daemon-embeddable/2.3.0": {
+   "jar": "sha256-ObywLYwpOqZ4VUyLSdf/hGVwIXCSg8YYbjpAgGr5vRA=",
+   "pom": "sha256-TI3aucQLMNAbhc/qHxd31zUlybcWQ+YlDGV2/H0fwRI="
   },
   "org/jetbrains/kotlin#kotlin-daemon-embeddable/2.3.10-RC": {
    "jar": "sha256-QyoFSvwpRD1uVybcO3JKdrhDxR2yKEVbyogs3ANJhlk=",
@@ -3240,49 +3238,49 @@
    "jar": "sha256-vNdaNspK2OBhFyFO2Af43qL+YaceB/kcoU9DNQJLhGM=",
    "pom": "sha256-7XngK/COxxXsvNHi16RTYteqfDP5LvZ15t+kpJMbzF8="
   },
-  "org/jetbrains/kotlin#kotlin-reflect/2.2.21": {
-   "jar": "sha256-RDgKvzfSRc5cDylPQ1EtHDmllkK/pGOSLHTpaHfPSfg=",
-   "pom": "sha256-5atrEFYKWlJWLDXNvnHdvkJ9Uetb/HAdzU9rlJvZ4D8="
+  "org/jetbrains/kotlin#kotlin-reflect/2.3.0": {
+   "jar": "sha256-cU30voGVRf9N4fNqohg+DeqUtMjN98op6ciZGbrzY2I=",
+   "pom": "sha256-89F2jvL7UxBIPb6R4w6fo2x7Pi/e5pRaCLujEBQtKcE="
   },
-  "org/jetbrains/kotlin#kotlin-sam-with-receiver-compiler-plugin-embeddable/2.2.21": {
-   "jar": "sha256-yweF5qeHDS9eqW9kcCDigS3snXAjAzMZu9sc5+XmVUg=",
-   "pom": "sha256-CcOMhkgRKRfUMPoji0Nxz4DbE86Dgu6KK6g0EPmd0yY="
+  "org/jetbrains/kotlin#kotlin-sam-with-receiver-compiler-plugin-embeddable/2.3.0": {
+   "jar": "sha256-QOPhi7jFUjLuZSXOV9F7hl5WcosFK/DBDnvsHQhJmMo=",
+   "pom": "sha256-BnzIEOCaYeFufoe1Kk3WR+FfYLd+PaDRsVPz+A7r8wM="
   },
-  "org/jetbrains/kotlin#kotlin-script-runtime/2.2.21": {
-   "jar": "sha256-KxUZtCe1FNFTbBtCVnSwP+kUr2N5JAKOmVnGYlRC31E=",
-   "pom": "sha256-h2elQPxdviC34Sg6lfUQKX5sDJiy6sLtxNBhKi0PLq8="
+  "org/jetbrains/kotlin#kotlin-script-runtime/2.3.0": {
+   "jar": "sha256-24JpYTcdZgUxjZxOS/zb+slMOgiSzcq9VSJIcP6tV/E=",
+   "pom": "sha256-20CN5tumaQeVvFOkoPhbM8en1qzLZ94ZAmQPr1QfL1s="
   },
   "org/jetbrains/kotlin#kotlin-script-runtime/2.3.10-RC": {
    "jar": "sha256-vabutEYi4rlflkxb3MkPoWPNCgybtVabpd86MRwm8iA=",
    "pom": "sha256-JH2OT7fPc1Wnr/gMRAHp2wXubkb6xoZKp5ebl7ehR70="
   },
-  "org/jetbrains/kotlin#kotlin-scripting-common/2.2.21": {
-   "jar": "sha256-QU7ZHD9eRJKyPLlTeEK0ZRA44l2thBB5OfQ0wiA/KpI=",
-   "pom": "sha256-7CWpeZRRdbrSFlRqSEsLj0SoZwVZGV4kCzR/H9oXcN8="
+  "org/jetbrains/kotlin#kotlin-scripting-common/2.3.0": {
+   "jar": "sha256-QlK3gs2lP8v9lTuQrwMlDiGX/+9uVavZsKLkj5Pv8lM=",
+   "pom": "sha256-9AuKrV3x68riUJLMM7hpP6Qw5TRCC6Wup/AGsvMrQw4="
   },
   "org/jetbrains/kotlin#kotlin-scripting-common/2.3.10-RC": {
    "jar": "sha256-gbM3To+5LF1t82X13tIAW2Vb4rg3oNKjylND0/9tMCc=",
    "pom": "sha256-FA4i/htI2X7VHlRWnAUw9fNxhCQhGyEXMOwOrxbnLcQ="
   },
-  "org/jetbrains/kotlin#kotlin-scripting-compiler-embeddable/2.2.21": {
-   "jar": "sha256-2TS50MJGvAliS3Bor1itV87xHb4q3bx7GdJQzOQt4ck=",
-   "pom": "sha256-EUhmLJXzbgCYEXj7LYldBrLs59BX7YRTLdNTu9bDVlA="
+  "org/jetbrains/kotlin#kotlin-scripting-compiler-embeddable/2.3.0": {
+   "jar": "sha256-ZxRdvqkxlNuyJT4vNaCp/ngBfCy84+zbSx/0P/9HGNU=",
+   "pom": "sha256-FjR61xI8BuiaUu+twxjZaick9UqBx+xZTA1ALh8eZFk="
   },
   "org/jetbrains/kotlin#kotlin-scripting-compiler-embeddable/2.3.10-RC": {
    "jar": "sha256-WkVxf5DBowquk3ukcouU9cVjxp03s08671HP9OybPRg=",
    "pom": "sha256-z75mf7STjoyR9BDJWbjM+Xksc0bD8CjVmOotzRxYGX0="
   },
-  "org/jetbrains/kotlin#kotlin-scripting-compiler-impl-embeddable/2.2.21": {
-   "jar": "sha256-eIowYMjnmX+K4WulwCgNBQBa8KQgKfGMsQxWJbl5+sM=",
-   "pom": "sha256-DKT5XDLUrpVOF06kHlutYseNvJOmTEUHb96czISrNgk="
+  "org/jetbrains/kotlin#kotlin-scripting-compiler-impl-embeddable/2.3.0": {
+   "jar": "sha256-MsdCfxBeYtT07/MDXaHkKAsndxvkrWFDuoZV0Yh3IM0=",
+   "pom": "sha256-TPG5v5rmnHbz6nWnhW3GbeRGeKfHQXFa6cFdtA7Nfv0="
   },
   "org/jetbrains/kotlin#kotlin-scripting-compiler-impl-embeddable/2.3.10-RC": {
    "jar": "sha256-ua86tjyjMwHLUfkBJZk5Xtjy64jjyWNQHOLriCv/12I=",
    "pom": "sha256-gWW9J1eaLKO3r8ww5Swo6QfJECUg6yL+7QzS9rgtSuA="
   },
-  "org/jetbrains/kotlin#kotlin-scripting-jvm/2.2.21": {
-   "jar": "sha256-g4IMX8xdKPBF+RTs1ZALu8+BFbDXAHM03gaf5scGaeY=",
-   "pom": "sha256-nR1Dsi27irmp3yJ6bVRYNB2v/sFQ73WV12XMXsvxeQg="
+  "org/jetbrains/kotlin#kotlin-scripting-jvm/2.3.0": {
+   "jar": "sha256-NpM+uDYZqKZeBB36m2ktNOB9V8b9Yv43HIu/BYgL7Ec=",
+   "pom": "sha256-qemsNTtIBUA7A3spmZpUnxvESATniVnYT/sbwzBF8kc="
   },
   "org/jetbrains/kotlin#kotlin-scripting-jvm/2.3.10-RC": {
    "jar": "sha256-7N5Qd0P8WB5wabFLHhohHK7MQ9fns7uZTrqEWqzAiag=",
@@ -3303,9 +3301,9 @@
    "module": "sha256-b134r2M2AKa5z7D8x2SvPVEZ83Zndne5G2rugWsdMKs=",
    "pom": "sha256-X0As+413MZW5ZwUBJMnom1+EsXJGThiUkpeJv1xMLyk="
   },
-  "org/jetbrains/kotlin#kotlin-stdlib-common/2.2.21": {
-   "module": "sha256-P/20UaotMU/nJjeC036r3c+LlBvLlA/jGSrAGmK1f3s=",
-   "pom": "sha256-YY3DrMdzRaytwwwN7viloOYD+O7zr0LldvBYoXVMLHw="
+  "org/jetbrains/kotlin#kotlin-stdlib-common/2.3.0": {
+   "module": "sha256-/pAljbcTNVWBoBZDfQbAKdBpwgu93uE02R5LiHBz108=",
+   "pom": "sha256-J+2DQuBLgcqy0aP512D06/lQmG9n7Eme1y1cw4d+6NA="
   },
   "org/jetbrains/kotlin#kotlin-stdlib-common/2.3.10-RC": {
    "module": "sha256-T7RK7JIrF+ytx62EMPj7cc0Cs0ZPLzNoPUEnau3/vPw=",
@@ -3360,6 +3358,11 @@
    "module": "sha256-v7xlfd06jjfkyK1BeWjV6wsLFxyfzkj5YsKtMu5DTCE=",
    "pom": "sha256-zzH5IxlsY67ezQpXwkJpvTcCpOR8C/C9ZLWtpd5SInI="
   },
+  "org/jetbrains/kotlin#kotlin-stdlib/2.3.0": {
+   "jar": "sha256-iHWHyRcTJQrVL+FK2RZtBCwzg1BJiQ6UN/NV/8WhlbE=",
+   "module": "sha256-CRCoo7aWD8eSxFxWqR18Oj8mKG8DKVVUtRnP83h1baI=",
+   "pom": "sha256-TVJW0+SETmVrDKQF9jUNbyF5XCQ3WzRSUmxUZ92ZtaI="
+  },
   "org/jetbrains/kotlin#kotlin-stdlib/2.3.0-RC": {
    "jar": "sha256-zDONZbvslLcwNvfDw6X28JrocFuVwPkg7DKHtGtolNM=",
    "module": "sha256-j+uBo/Q5DDNtB8a3zz7kVQHpwF5zupBFU8UeJImo4VM=",
@@ -3373,6 +3376,10 @@
   "org/jetbrains/kotlin#kotlin-stdlib/2.3.10-RC/all": {
    "jar": "sha256-8tQNQce+hFtMQsSM0wFI9oNm6QnfgiBJo96d0VLUjAI="
   },
+  "org/jetbrains/kotlin#kotlin-tooling-core/2.3.0": {
+   "jar": "sha256-NnFCeBKZvA+RIMHe7A5ik0oa+ep/AaqpxaU1TcXY19k=",
+   "pom": "sha256-tQ6FtLEYwSIjge0c67K6lqfeLdrtti3aZ9SuBqGiXTc="
+  },
   "org/jetbrains/kotlin#kotlin-tooling-core/2.3.10-RC": {
    "jar": "sha256-NnFCeBKZvA+RIMHe7A5ik0oa+ep/AaqpxaU1TcXY19k=",
    "pom": "sha256-JP5o1+ZtHKA6rzslyx5nPzE0F54G3Q8K0rQyaxCREyo="
@@ -3821,13 +3828,6 @@
   "org/tensorflow#tensorflow-lite-metadata/0.2.0": {
    "jar": "sha256-6fGLikHwF+kDPLDthciiuiMHKSzf4l6uNlkj56MdKnA=",
    "pom": "sha256-D+MTJug7diLLzZx11GeykfAf/jzG4+dmUawFocHHo2A="
-  },
-  "org/jetbrains/compose/desktop#desktop-jvm-linux-arm64/1.11.0-alpha02": {
-   "pom": "sha256-INXuoJ8sUBzIGbUKGbGv2Bsa5pT5vadziMS7cd6ZOb4="
-  },
-  "org/jetbrains/skiko#skiko-awt-runtime-linux-arm64/0.9.40": {
-   "jar": "sha256-L9JHTj02sANpf1Kclv9nk4v3iDOu2twWDp68OYTyJx0=",
-   "pom": "sha256-c2q1pyWFqoRuQlR3eYBCexNZoVDXHiB7ti/i0IbSsQk="
   }
  }
 }
diff --git a/pkgs/by-name/ki/kirimoto/package.nix b/pkgs/by-name/ki/kirimoto/package.nix
new file mode 100644
index 000000000000..47f70c734141
--- /dev/null
+++ b/pkgs/by-name/ki/kirimoto/package.nix
@@ -0,0 +1,41 @@
+{
+  lib,
+  appimageTools,
+  fetchurl,
+}:
+
+let
+  version = "4.6.3";
+  pname = "kirimoto";
+
+  src = fetchurl {
+    url = "https://github.com/GridSpace/grid-apps/releases/download/${version}/KiriMoto-linux-x86_64.AppImage";
+    hash = "sha256-YCfDCR92xtwL3634iIMYf6IjkeqoWrF7/YNCwKSjnfs==";
+  };
+
+  appimageContents = appimageTools.extractType2 { inherit pname version src; };
+
+in
+appimageTools.wrapType2 rec {
+  inherit pname version src;
+
+  extraInstallCommands = ''
+    install -Dm444 ${appimageContents}/grid-apps.desktop -t $out/share/applications/
+    install -Dm444 ${appimageContents}/grid-apps.png -t $out/share/icons/hicolor/512x512/apps/
+
+    substituteInPlace $out/share/applications/grid-apps.desktop \
+      --replace-fail 'Exec=AppRun' 'Exec=${meta.mainProgram} --no-sandbox --ozone-platform=x11 --disable-gpu-sandbox --in-process-gpu'
+  '';
+
+  meta = {
+    description = "Open source Slicer for CAM, Laser and 3D-printer";
+    homepage = "https://grid.space/";
+    downloadPage = "https://grid.space/downloads.html";
+    changelog = "https://grid.space/news";
+    license = lib.licenses.mit;
+    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
+    maintainers = with lib.maintainers; [ FlorisMenninga ];
+    platforms = [ "x86_64-linux" ];
+    mainProgram = "kirimoto";
+  };
+}
diff --git a/pkgs/by-name/kn/knossosnet/deps.json b/pkgs/by-name/kn/knossosnet/deps.json
index 96f952f684f7..2d77d383209b 100644
--- a/pkgs/by-name/kn/knossosnet/deps.json
+++ b/pkgs/by-name/kn/knossosnet/deps.json
@@ -6,88 +6,88 @@
   },
   {
     "pname": "Avalonia",
-    "version": "11.2.3",
-    "hash": "sha256-NUoyXJkIsgbkcKFVb10VRafM4ViHs801c/7vhu3ssUY="
+    "version": "11.3.9",
+    "hash": "sha256-bjSH8REHeK19bh8IacmyllDPaWND+TJdkhKGc8LVvjE="
   },
   {
     "pname": "Avalonia.Angle.Windows.Natives",
-    "version": "2.1.22045.20230930",
-    "hash": "sha256-RxPcWUT3b/+R3Tu5E5ftpr5ppCLZrhm+OTsi0SwW3pc="
+    "version": "2.1.25547.20250602",
+    "hash": "sha256-LE/lENAHptmz6t3T/AoJwnhpda+xs7PqriNGzdcfg8M="
   },
   {
     "pname": "Avalonia.BuildServices",
-    "version": "0.0.29",
-    "hash": "sha256-WPHRMNowRnYSCh88DWNBCltWsLPyOfzXGzBqLYE7tRY="
+    "version": "11.3.2",
+    "hash": "sha256-6wx06tjSKWQOlX2czdp6Wh0nuwVapx5qf/s8Qj5we40="
   },
   {
     "pname": "Avalonia.Controls.ColorPicker",
-    "version": "11.2.3",
-    "hash": "sha256-z3ZHxVSOoOjqq+5G71jnGN1Y0i3YpAkox7cj3lNr6kg="
+    "version": "11.3.9",
+    "hash": "sha256-Kk3AmO7foyO5JdnGKfE9KwtVyGwe6SgUZnXCX/OuZjo="
   },
   {
     "pname": "Avalonia.Controls.DataGrid",
-    "version": "11.2.3",
-    "hash": "sha256-jIJvuYN0iym/WeOC0C7z5xj5kCZSXGoeLQ/q5qQfewM="
+    "version": "11.3.9",
+    "hash": "sha256-VpJNTCaug7rtEfO2z1fFkAPXW2Y/lQSUInt6cVZC6DA="
   },
   {
     "pname": "Avalonia.Desktop",
-    "version": "11.2.3",
-    "hash": "sha256-srtZi+kDbhRtMl33l91zssBWETU5oHodKbbWyfEsb/I="
+    "version": "11.3.9",
+    "hash": "sha256-ib4psuecjBXKow0UC6oXvcVNhizFKokadCVqmwyQtCc="
   },
   {
     "pname": "Avalonia.Diagnostics",
-    "version": "11.2.3",
-    "hash": "sha256-DIGkaBff+C3BLwedw5xteR5lfzb6ecxiLt12eJVgLQc="
+    "version": "11.3.9",
+    "hash": "sha256-psajJAfqzLpMVx3//nezH7TixDJepN3/y6GwNn8k+TM="
   },
   {
     "pname": "Avalonia.FreeDesktop",
-    "version": "11.2.3",
-    "hash": "sha256-3sNemBmZE06w2ul87T5HrEeHUxXMOa9MfQhpI4AoxDY="
+    "version": "11.3.9",
+    "hash": "sha256-+adR3ErHqoqTBAJ5hMiyP6efX/hCAcWWCowCqA0Bxrw="
   },
   {
     "pname": "Avalonia.HtmlRenderer",
-    "version": "11.0.0",
-    "hash": "sha256-DBD113eQJNHeEgFmx/tVRSnHxhGBQIKWVKxr1QRilr4="
+    "version": "11.2.0",
+    "hash": "sha256-cATaSdyVEI2f2dM4votgoHEVZaHVHEVXSmsd5BW9Xrw="
   },
   {
     "pname": "Avalonia.Markup.Xaml.Loader",
-    "version": "11.2.3",
-    "hash": "sha256-odkZZXqTbL+h9aPSQiO+haFF89xgFg4XKsvzVWxLjVE="
+    "version": "11.3.9",
+    "hash": "sha256-8qrDtgGhNEy5ClNo0+OyxYVRHIElUMlDVHla9RgsgCU="
   },
   {
     "pname": "Avalonia.Native",
-    "version": "11.2.3",
-    "hash": "sha256-2Gp98NGWcrILqF+P5PDMPRdsMby/lZiT3eWAUskFim8="
+    "version": "11.3.9",
+    "hash": "sha256-cQ9/MKZ03jaLqAGRDLCzws5OfP/mSOoPRr1OxXNGa3o="
   },
   {
     "pname": "Avalonia.Remote.Protocol",
-    "version": "11.2.3",
-    "hash": "sha256-dSeu7rnTD9rIvlyro2iFS52oi0vvfeaGV3kDm90BkKw="
+    "version": "11.3.9",
+    "hash": "sha256-HxHN91T0BbQMkcZwozuVOQwmywm1oayTLYvUozwt1J0="
   },
   {
     "pname": "Avalonia.Skia",
-    "version": "11.2.3",
-    "hash": "sha256-QBp8wTA92hGwbmNSVL4gsjrqA9CfwDPgdTiOEqcogGA="
+    "version": "11.3.9",
+    "hash": "sha256-KCL1LNUd2i+50vQpDgfI+aMkIBUWtxExyuc43QIK21o="
   },
   {
     "pname": "Avalonia.Themes.Fluent",
-    "version": "11.2.3",
-    "hash": "sha256-DRl+267mUtJDUJpreUj6BxDLGGYGkEEo5vDGtGguoC8="
+    "version": "11.3.9",
+    "hash": "sha256-4HuNP/nSB7T+n9KZQgXNvbgudG3eITnDACj8Y2NV6OU="
   },
   {
     "pname": "Avalonia.Themes.Simple",
-    "version": "11.2.3",
-    "hash": "sha256-UF15yTDzHmqd33siH3TJxmxaonA51dzga+hmCUahn1k="
+    "version": "11.3.9",
+    "hash": "sha256-0MyHPZbkp0DduFwoOMScAOKpqQ/Zs6DOUfexVLKzSco="
   },
   {
     "pname": "Avalonia.Win32",
-    "version": "11.2.3",
-    "hash": "sha256-xKFKObvqdJaQjphEktRJvzmAoDEsKg3WqlEG31V3qLE="
+    "version": "11.3.9",
+    "hash": "sha256-OwWQymPLmN362vMD6kZk8dBD/+lSpvGqIW0T/AquYig="
   },
   {
     "pname": "Avalonia.X11",
-    "version": "11.2.3",
-    "hash": "sha256-SD4dmpKx4l8YOyUnrA0fnf2Bb+tHSNyARh7GAtHyg60="
+    "version": "11.3.9",
+    "hash": "sha256-B8P+m2VyPwXCyVWGAKewZCqO8fycgYWjWx830VbR79A="
   },
   {
     "pname": "CommunityToolkit.Mvvm",
@@ -96,28 +96,28 @@
   },
   {
     "pname": "HarfBuzzSharp",
-    "version": "7.3.0.3",
-    "hash": "sha256-1vDIcG1aVwVABOfzV09eAAbZLFJqibip9LaIx5k+JxM="
+    "version": "8.3.1.1",
+    "hash": "sha256-614yv6bK9ynhdUnvW4wIkgpBe2sqTh28U9cDZzdhPc0="
   },
   {
     "pname": "HarfBuzzSharp.NativeAssets.Linux",
-    "version": "7.3.0.3",
-    "hash": "sha256-HW5r16wdlgDMbE/IfE5AQGDVFJ6TS6oipldfMztx+LM="
+    "version": "8.3.1.1",
+    "hash": "sha256-sBbez6fc9axVcsBbIHbpQh/MM5NHlMJgSu6FyuZzVyU="
   },
   {
     "pname": "HarfBuzzSharp.NativeAssets.macOS",
-    "version": "7.3.0.3",
-    "hash": "sha256-UpAVfRIYY8Wh8xD4wFjrXHiJcvlBLuc2Xdm15RwQ76w="
+    "version": "8.3.1.1",
+    "hash": "sha256-hK20KbX2OpewIO5qG5gWw5Ih6GoLcIDgFOqCJIjXR/Q="
   },
   {
     "pname": "HarfBuzzSharp.NativeAssets.WebAssembly",
-    "version": "7.3.0.3",
-    "hash": "sha256-jHrU70rOADAcsVfVfozU33t/5B5Tk0CurRTf4fVQe3I="
+    "version": "8.3.1.1",
+    "hash": "sha256-mLKoLqI47ZHXqTMLwP1UCm7faDptUfQukNvdq6w/xxw="
   },
   {
     "pname": "HarfBuzzSharp.NativeAssets.Win32",
-    "version": "7.3.0.3",
-    "hash": "sha256-v/PeEfleJcx9tsEQAo5+7Q0XPNgBqiSLNnB2nnAGp+I="
+    "version": "8.3.1.1",
+    "hash": "sha256-Um4iwLdz9XtaDSAsthNZdev6dMiy7OBoHOrorMrMYyo="
   },
   {
     "pname": "ini-parser-netstandard",
@@ -241,8 +241,8 @@
   },
   {
     "pname": "Tmds.DBus.Protocol",
-    "version": "0.20.0",
-    "hash": "sha256-CRW/tkgsuBiBJfRwou12ozRQsWhHDooeP88E5wWpWJw="
+    "version": "0.21.2",
+    "hash": "sha256-gaK/5aAummyin6ptnhaJbnA0ih4+2xADrtrLfFbHwYI="
   },
   {
     "pname": "WindowsShortcutFactory",
diff --git a/pkgs/by-name/kn/knossosnet/package.nix b/pkgs/by-name/kn/knossosnet/package.nix
index 55751fa082af..24f4255bb985 100644
--- a/pkgs/by-name/kn/knossosnet/package.nix
+++ b/pkgs/by-name/kn/knossosnet/package.nix
@@ -6,17 +6,18 @@
   dotnetCorePackages,
   copyDesktopItems,
   makeDesktopItem,
+  nix-update-script,
 }:
 
 buildDotnetModule rec {
   pname = "knossosnet";
-  version = "1.3.1";
+  version = "1.3.2";
 
   src = fetchFromGitHub {
     owner = "KnossosNET";
     repo = "Knossos.NET";
-    rev = "v${version}";
-    hash = "sha256-XaCBuZ4Hf2ISw3hVQ1s2Hp8PLxp2eFr+I7U5ttUDQvU=";
+    tag = "v${version}";
+    hash = "sha256-Ss9xk7HiWBy6Ku8cMvhsxxCCkE8PbWmpSv7Rqk/l3bI=";
   };
 
   patches = [ ./dotnet-8-upgrade.patch ];
@@ -30,6 +31,10 @@ buildDotnetModule rec {
 
   runtimeDeps = [ openal ];
 
+  env = {
+    AVALONIA_TELEMETRY_OPTOUT = "1";
+  };
+
   nativeBuildInputs = [ copyDesktopItems ];
 
   desktopItems = [
@@ -44,14 +49,18 @@ buildDotnetModule rec {
   ];
 
   postInstall = ''
-    install -Dm644 $src/packaging/linux/knossos-512.png $out/share/icons/hicolor/512x512/apps/knossos.png
+    install -Dm444 $src/packaging/linux/knossos-512.png $out/share/icons/hicolor/512x512/apps/knossos.png
   '';
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
-    homepage = "https://github.com/KnossosNET/Knossos.NET";
+    changelog = "https://github.com/KnossosNET/Knossos.NET/releases/tag/v${version}";
     description = "Multi-platform launcher for Freespace 2 Open";
+    homepage = "https://fsnebula.org/knossos/";
     license = lib.licenses.gpl3Only;
     mainProgram = "Knossos.NET";
     maintainers = with lib.maintainers; [ cdombroski ];
+    platforms = lib.platforms.unix;
   };
 }
diff --git a/pkgs/by-name/ku/kubecm/package.nix b/pkgs/by-name/ku/kubecm/package.nix
index 82d5c71a374e..ed55452cab15 100644
--- a/pkgs/by-name/ku/kubecm/package.nix
+++ b/pkgs/by-name/ku/kubecm/package.nix
@@ -8,13 +8,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "kubecm";
-  version = "0.35.0";
+  version = "0.35.1";
 
   src = fetchFromGitHub {
     owner = "sunny0826";
     repo = "kubecm";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-QShGRgszcsutSA9sOBXNvAwdTIqHOsMYQQPIXfA8z/M=";
+    hash = "sha256-5wTxVzpvwD6jx6Cfa0ChIi8wQCrnqzZM2jvwGpQdq50=";
   };
 
   vendorHash = "sha256-TyJpFN8JEWpzCHKUX3iYUHhTOOAp5I1YEzhUkWPXx8A=";
diff --git a/pkgs/by-name/la/lazygit/package.nix b/pkgs/by-name/la/lazygit/package.nix
index 7336a31fccf4..8274bb89d241 100644
--- a/pkgs/by-name/la/lazygit/package.nix
+++ b/pkgs/by-name/la/lazygit/package.nix
@@ -8,13 +8,13 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "lazygit";
-  version = "0.59.0";
+  version = "0.60.0";
 
   src = fetchFromGitHub {
     owner = "jesseduffield";
     repo = "lazygit";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-DVeWHkyZRzrp0Dl3xx5LMYdUhB94/Bp84mnquF6Fc3g=";
+    hash = "sha256-BTcm3wF0bXIGsheDUv437aGO2TgU+oKXYqfagW0N8DQ=";
   };
 
   vendorHash = null;
diff --git a/pkgs/by-name/le/legcord/package.nix b/pkgs/by-name/le/legcord/package.nix
index 7fe9bea8c55e..7f16dc953abd 100644
--- a/pkgs/by-name/le/legcord/package.nix
+++ b/pkgs/by-name/le/legcord/package.nix
@@ -4,7 +4,7 @@
   fetchFromGitHub,
   fetchPnpmDeps,
   pnpmConfigHook,
-  pnpm,
+  pnpm_10_29_2,
   nodejs,
   electron,
   makeWrapper,
@@ -28,7 +28,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   nativeBuildInputs = [
     pnpmConfigHook
-    pnpm
+    pnpm_10_29_2
     nodejs
     # we use a script wrapper here for environment variable expansion at runtime
     # https://github.com/NixOS/nixpkgs/issues/172583
@@ -47,6 +47,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
+    pnpm = pnpm_10_29_2;
     fetcherVersion = 3;
     hash = "sha256-MgUOOr188t+t/4sTXVpbr+xYT/1qf7/B0ZG0w+QkVxc=";
   };
diff --git a/pkgs/by-name/li/liberation-circuit/package.nix b/pkgs/by-name/li/liberation-circuit/package.nix
index 356fbb3c5d60..285cf2b2dd1c 100644
--- a/pkgs/by-name/li/liberation-circuit/package.nix
+++ b/pkgs/by-name/li/liberation-circuit/package.nix
@@ -39,7 +39,9 @@ stdenv.mkDerivation {
 
     install -D linux-packaging/liberation-circuit.desktop $out/share/applications/liberation-circuit.desktop
     install -D linux-packaging/liberation-circuit.appdata.xml $out/share/metainfo/liberation-circuit.appdata.xml
-    install -D linux-packaging/icon-256px.png $out/share/pixmaps/liberation-circuit.png
+    install -D linux-packaging/icon-16px.png $out/share/icons/hicolor/16x16/apps/liberation-circuit.png
+    install -D linux-packaging/icon-32px.png $out/share/icons/hicolor/32x32/apps/liberation-circuit.png
+    install -D linux-packaging/icon-256px.png $out/share/icons/hicolor/256x256/apps/liberation-circuit.png
 
     runHook postInstall
   '';
diff --git a/pkgs/by-name/li/libtraceevent/package.nix b/pkgs/by-name/li/libtraceevent/package.nix
index 38932b914532..0e4f075a3905 100644
--- a/pkgs/by-name/li/libtraceevent/package.nix
+++ b/pkgs/by-name/li/libtraceevent/package.nix
@@ -15,12 +15,12 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libtraceevent";
-  version = "1.8.7";
+  version = "1.9";
 
   src = fetchgit {
     url = "https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git";
     rev = "libtraceevent-${finalAttrs.version}";
-    hash = "sha256-9rDgAHK1m369CGKxC+NEkW7fzOJsgKTQtk9GLfVEoLg=";
+    hash = "sha256-4KuF+UNMWxfxXYVlS0cBY5/p242UQ/NoRRVK+wmn04E=";
   };
 
   postPatch = ''
diff --git a/pkgs/by-name/li/lightningcss/package.nix b/pkgs/by-name/li/lightningcss/package.nix
index 398bc7030a18..0710b97c23fe 100644
--- a/pkgs/by-name/li/lightningcss/package.nix
+++ b/pkgs/by-name/li/lightningcss/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "lightningcss";
-  version = "1.31.0";
+  version = "1.32.0";
 
   src = fetchFromGitHub {
     owner = "parcel-bundler";
     repo = "lightningcss";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-K5NgIUYKQVUTQUpoHIrLOobyBkAwNgd3ehzpOOoiFQQ=";
+    hash = "sha256-JqAzBPYbJq52exCpVTdhd90BQGsbfMOx68PD1xUripg=";
   };
 
-  cargoHash = "sha256-aL8qrv+ff2tGMLwq9dncTV74DiZLWChHaSS4WhWUj4Q=";
+  cargoHash = "sha256-zndBkOJ/U6lLaOJn273TabMAPbz96hQeWs4cPKFDGro=";
 
   patches = [
     # Backport fix for build error for lightningcss-napi
diff --git a/pkgs/by-name/li/lint-staged/package.nix b/pkgs/by-name/li/lint-staged/package.nix
index 69cc6598bdb9..f0d36c338df6 100644
--- a/pkgs/by-name/li/lint-staged/package.nix
+++ b/pkgs/by-name/li/lint-staged/package.nix
@@ -8,16 +8,16 @@
 
 buildNpmPackage rec {
   pname = "lint-staged";
-  version = "16.3.0";
+  version = "16.3.2";
 
   src = fetchFromGitHub {
     owner = "okonet";
     repo = "lint-staged";
     rev = "v${version}";
-    hash = "sha256-akE8lXnx6W31S+DmkMPRgyvmy6CMZ6y/+LAxSK5Glf4=";
+    hash = "sha256-k/6h3fcsdjpLwi6QoY/SD67ShGp6nB5OZf5mgoxUa0M=";
   };
 
-  npmDepsHash = "sha256-IU6QfnmQRVuTt9akIpBOwghzk6i7pGOFlnPlzMYxAqU=";
+  npmDepsHash = "sha256-amvXt6QNDhdknuj5y0M/m5VXucCDQHSjP65fsB7iY7o=";
 
   dontNpmBuild = true;
 
diff --git a/pkgs/by-name/li/linux-firmware/package.nix b/pkgs/by-name/li/linux-firmware/package.nix
index da540ba5d41d..ce6ee165a0d4 100644
--- a/pkgs/by-name/li/linux-firmware/package.nix
+++ b/pkgs/by-name/li/linux-firmware/package.nix
@@ -65,7 +65,7 @@ stdenvNoCC.mkDerivation rec {
     description = "Binary firmware collection packaged by kernel.org";
     homepage = "https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git";
     license = lib.licenses.unfreeRedistributableFirmware;
-    platforms = lib.platforms.linux;
+    platforms = lib.platforms.unix;
     maintainers = with lib.maintainers; [ fpletz ];
     priority = 6; # give precedence to kernel firmware
     sourceProvenance = with lib.sourceTypes; [ binaryFirmware ];
diff --git a/pkgs/by-name/lm/lmstudio/package.nix b/pkgs/by-name/lm/lmstudio/package.nix
index eeed9c1ac5fa..9cfc220a69e2 100644
--- a/pkgs/by-name/lm/lmstudio/package.nix
+++ b/pkgs/by-name/lm/lmstudio/package.nix
@@ -7,6 +7,8 @@
 let
   pname = "lmstudio";
 
+  version_aarch64-linux = "0.4.5-2";
+  hash_aarch64-linux = "sha256-BeF9FNMde9RW2icdq07zkWQafge7ViWKvR+xupRIdjE=";
   version_aarch64-darwin = "0.4.5-2";
   hash_aarch64-darwin = "sha256-mSszzDsoXv2D9Ky3K/P2Nn/mixq3HzGMonS1I4mz5+s=";
   version_x86_64-linux = "0.4.5-2";
@@ -20,12 +22,13 @@ let
     maintainers = with lib.maintainers; [ crertel ];
     platforms = [
       "x86_64-linux"
+      "aarch64-linux"
       "aarch64-darwin"
     ];
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
   };
 in
-if stdenv.hostPlatform.isDarwin then
+if stdenv.hostPlatform.system == "aarch64-darwin" then
   callPackage ./darwin.nix {
     inherit pname meta;
     passthru.updateScript = ./update.sh;
@@ -35,6 +38,16 @@ if stdenv.hostPlatform.isDarwin then
         or "https://installers.lmstudio.ai/darwin/arm64/${version_aarch64-darwin}/LM-Studio-${version_aarch64-darwin}-arm64.dmg";
     hash = args.hash or hash_aarch64-darwin;
   }
+else if stdenv.hostPlatform.system == "aarch64-linux" then
+  callPackage ./linux.nix {
+    inherit pname meta;
+    passthru.updateScript = ./update.sh;
+    version = version_aarch64-linux;
+    url =
+      args.url
+        or "https://installers.lmstudio.ai/linux/arm64/${version_aarch64-linux}/LM-Studio-${version_aarch64-linux}-arm64.AppImage";
+    hash = args.hash or hash_aarch64-linux;
+  }
 else
   callPackage ./linux.nix {
     inherit pname meta;
diff --git a/pkgs/by-name/lo/lorien/package.nix b/pkgs/by-name/lo/lorien/package.nix
index f7795d8020d2..0bebd281ef00 100644
--- a/pkgs/by-name/lo/lorien/package.nix
+++ b/pkgs/by-name/lo/lorien/package.nix
@@ -115,7 +115,7 @@ stdenv.mkDerivation rec {
       --set-rpath ${lib.makeLibraryPath buildInputs} \
       $out/share/lorien/lorien
 
-    install -Dm644 images/lorien.png $out/share/pixmaps/lorien.png
+    install -Dm644 images/lorien.png -t $out/share/icons/hicolor/64x64/apps
 
     runHook postInstall
   '';
diff --git a/pkgs/by-name/ma/matrix-authentication-service/package.nix b/pkgs/by-name/ma/matrix-authentication-service/package.nix
index 97fe5df6fdd6..e794f24eb58c 100644
--- a/pkgs/by-name/ma/matrix-authentication-service/package.nix
+++ b/pkgs/by-name/ma/matrix-authentication-service/package.nix
@@ -72,10 +72,26 @@ rustPlatform.buildRustPackage (finalAttrs: {
       --replace-fail ./share/policy.wasm "$out/share/$pname/policy.wasm"
   '';
 
-  preBuild = ''
-    make -C policies
-    (cd "$npmRoot" && npm run build)
-  '';
+  preBuild =
+    let
+      rustTarget = stdenv.hostPlatform.rust.rustcTarget;
+      rustTargetUnderscore = builtins.replaceStrings [ "-" ] [ "_" ] rustTarget;
+    in
+    ''
+      make -C policies
+      (cd "$npmRoot" && npm run build)
+
+      # Fix aws-lc-sys cross-compilation:
+      # The cc crate looks for "aarch64-linux-gnu-gcc")
+      # when CC is unset and TARGET != HOST, but Nix's cross-compiler is
+      # named "aarch64-unknown-linux-gnu-gcc" (with vendor).
+      # We set the target-specific CC_<target> variable so the cc crate
+      # and aws-lc-sys find the correct cross-compiler, then unset the
+      # generic CC so aws-lc-sys doesn't misassign it.
+      export CC_${rustTargetUnderscore}=$CC
+      export CXX_${rustTargetUnderscore}=$CXX
+      unset CC CXX
+    '';
 
   # Adapted from https://github.com/element-hq/matrix-authentication-service/blob/v0.20.0/.github/workflows/build.yaml#L75-L84
   postInstall = ''
diff --git a/pkgs/by-name/ma/matrix-tuwunel/package.nix b/pkgs/by-name/ma/matrix-tuwunel/package.nix
index 76b72138ce42..5973ee5f0a31 100644
--- a/pkgs/by-name/ma/matrix-tuwunel/package.nix
+++ b/pkgs/by-name/ma/matrix-tuwunel/package.nix
@@ -16,6 +16,7 @@
   enableJemalloc ? true,
   rust-jemalloc-sys,
   enableLiburing ? stdenv.hostPlatform.isLinux,
+  enableLdap ? true,
   liburing,
   nixosTests,
   writeTextFile,
@@ -144,7 +145,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "jemalloc"
     "jemalloc_conf"
   ]
-  ++ lib.optional enableLiburing "io_uring";
+  ++ lib.optional enableLiburing "io_uring"
+  ++ lib.optional enableLdap "ldap";
 
   nativeCheckInputs = [
     libredirect.hook
diff --git a/pkgs/by-name/ma/mattermostLatest/package.nix b/pkgs/by-name/ma/mattermostLatest/package.nix
index 477cc2a5286c..33facbda2518 100644
--- a/pkgs/by-name/ma/mattermostLatest/package.nix
+++ b/pkgs/by-name/ma/mattermostLatest/package.nix
@@ -11,10 +11,10 @@ mattermost.override {
     # and make sure the version regex is up to date here.
     # Ensure you also check ../mattermost/package.nix for ESR releases.
     regex = "^v(11\\.[0-9]+\\.[0-9]+)$";
-    version = "11.4.0";
-    srcHash = "sha256-w+/slirvft6OQHLmZHwy92GEy0SSJ+5uV/8e3xOB2CE=";
-    vendorHash = "sha256-8Q5jiEsLy3hZLL81tU3xG8zp65KpAYsjSE9jit77fEI=";
-    npmDepsHash = "sha256-MrFV87WslmFxil9zW5JmoT5psM0GAJvmDK3WfkxpoUo=";
+    version = "11.5.1";
+    srcHash = "sha256-3ij6JYGectkAYc2z6caD3L0NUP1UJJ6QaR2qLcTWXoI=";
+    vendorHash = "sha256-ao8jWfrzMTs9JJokaGH0kuoZ0d3VnIDGc5uDN2hCrhk=";
+    npmDepsHash = "sha256-r7iq1pCAJjFyspZBdeNWe00W7A3l73PGC6rrsZ7O6Uw=";
     lockfileOverlay = ''
       unlock(.; "@floating-ui/react"; "channels/node_modules/@floating-ui/react")
     '';
diff --git a/pkgs/by-name/md/mdserve/package.nix b/pkgs/by-name/md/mdserve/package.nix
index e791f1c27b8c..256111ad1962 100644
--- a/pkgs/by-name/md/mdserve/package.nix
+++ b/pkgs/by-name/md/mdserve/package.nix
@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "mdserve";
-  version = "1.0.0";
+  version = "1.1.0";
 
   src = fetchFromGitHub {
     owner = "jfernandez";
     repo = "mdserve";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-t8eQBzdR5+O5U85HSRj6P7PgE7ubZhY8IkNXsDEpy+w=";
+    hash = "sha256-f84Fkd3nONE+nJM27c+1kRztXEzsDye77heJDG8MUm0=";
   };
 
-  cargoHash = "sha256-jBTbScyflkvhwfOu4DHkcsfxogjgSGXBAF2euq3lZEo=";
+  cargoHash = "sha256-SuCLJE0uSUGCzF4OXL4I9go0rw5GMvCBHxnRpIKTqi0=";
 
   __darwinAllowLocalNetworking = true;
 
diff --git a/pkgs/by-name/mi/midisheetmusic/package.nix b/pkgs/by-name/mi/midisheetmusic/package.nix
index 4ce1d6558f35..5e89914676a0 100644
--- a/pkgs/by-name/mi/midisheetmusic/package.nix
+++ b/pkgs/by-name/mi/midisheetmusic/package.nix
@@ -77,10 +77,10 @@ stdenv.mkDerivation {
   env.FONTCONFIG_FILE = makeFontsConf { fontDirectories = [ ]; };
 
   installPhase = ''
-    mkdir -p $out/share/applications $out/share/pixmaps $out/bin
+    mkdir -p $out/share/applications $out/bin
 
     cp deb/midisheetmusic.desktop $out/share/applications
-    cp NotePair.png $out/share/pixmaps/midisheetmusic.png
+    install -D NotePair.png $out/share/icons/hicolor/256x256/apps/midisheetmusic.png
     cp bin/Debug/MidiSheetMusic.exe $out/bin/.MidiSheetMusic.exe
 
     makeWrapper ${mono}/bin/mono $out/bin/midisheetmusic.mono.exe \
diff --git a/pkgs/by-name/mi/mini-calc/package.nix b/pkgs/by-name/mi/mini-calc/package.nix
index 29bc92e473ca..630863d8bcea 100644
--- a/pkgs/by-name/mi/mini-calc/package.nix
+++ b/pkgs/by-name/mi/mini-calc/package.nix
@@ -9,16 +9,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "mini-calc";
-  version = "4.0.3";
+  version = "4.0.4";
 
   src = fetchFromGitHub {
     owner = "vanilla-extracts";
     repo = "calc";
     tag = finalAttrs.version;
-    hash = "sha256-NR5SJpJW7L6VGu6tCyzt0hhQ5Wnvx3TKlq3MAK4EcLM=";
+    hash = "sha256-GvWWFTJfgPn26BXVl4MV65pubpIg1y544oHvycTcrGo=";
   };
 
-  cargoHash = "sha256-LejKPnp4GvGykMTFZM9WVQIa0EMueeit5XfSuE1uiPQ=";
+  cargoHash = "sha256-tPrACzeUaBK/981ReGWwwfuhBki8Bfebmp7xCLPzXDo=";
 
   nativeBuildInputs = [ makeWrapper ];
   postFixup = ''
diff --git a/pkgs/by-name/mi/mistral-vibe/package.nix b/pkgs/by-name/mi/mistral-vibe/package.nix
index dcad705b4937..82d106e5cb0e 100644
--- a/pkgs/by-name/mi/mistral-vibe/package.nix
+++ b/pkgs/by-name/mi/mistral-vibe/package.nix
@@ -12,14 +12,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "mistral-vibe";
-  version = "2.3.0";
+  version = "2.4.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mistralai";
     repo = "mistral-vibe";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-aXRceZAW4XUAXfD8HzGnS6qkFAj6VoTwVepZJmvf48Q=";
+    hash = "sha256-e5F4NZUQCgEYonQqC62+kWkHRWCJmMv+F2WOu9BRIFk=";
   };
 
   build-system = with python3Packages; [
diff --git a/pkgs/by-name/mo/monkeys-audio/package.nix b/pkgs/by-name/mo/monkeys-audio/package.nix
index f62d0f13047b..ec41146ce0f3 100644
--- a/pkgs/by-name/mo/monkeys-audio/package.nix
+++ b/pkgs/by-name/mo/monkeys-audio/package.nix
@@ -6,12 +6,12 @@
 }:
 
 stdenv.mkDerivation (finalAttrs: {
-  version = "12.36";
+  version = "12.50";
   pname = "monkeys-audio";
 
   src = fetchzip {
     url = "https://monkeysaudio.com/files/MAC_${builtins.concatStringsSep "" (lib.strings.splitString "." finalAttrs.version)}_SDK.zip";
-    hash = "sha256-gat/VUvmfvYAux0cHN/I7LsLBrp1F04imNGMp0JzRto=";
+    hash = "sha256-ZQ2tZnJ1uTSughjLadNhhLCDT8B27UWulqd0hNY6aKw=";
     stripRoot = false;
   };
 
diff --git a/pkgs/by-name/mp/mpv/scripts/manga-reader.nix b/pkgs/by-name/mp/mpv/scripts/manga-reader.nix
index b3d262e78d62..7a892438aed6 100644
--- a/pkgs/by-name/mp/mpv/scripts/manga-reader.nix
+++ b/pkgs/by-name/mp/mpv/scripts/manga-reader.nix
@@ -8,12 +8,12 @@
 buildLua {
   pname = "manga-reader";
 
-  version = "0-unstable-2026-01-16";
+  version = "0-unstable-2026-03-03";
   src = fetchFromGitHub {
     owner = "Dudemanguy";
     repo = "mpv-manga-reader";
-    rev = "a93e03bc837d501760dd38155c8e945d66a3a3ed";
-    hash = "sha256-UG1MRtwljoKi6kct8mDZSHxz9mzQ1qHnqohX7e5nj40=";
+    rev = "2e8c21a82eb5fbe0b6feb64375e396d27bd8d5fa";
+    hash = "sha256-Q6ekBvGsHSiZtO9QYnv5zAoAdkqrcFvmSJQsjVTuwSg=";
   };
   passthru.updateScript = unstableGitUpdater { };
 
diff --git a/pkgs/by-name/mu/multiviewer-for-f1/package.nix b/pkgs/by-name/mu/multiviewer-for-f1/package.nix
index ffc05433cd5b..2b193ae0bc27 100644
--- a/pkgs/by-name/mu/multiviewer-for-f1/package.nix
+++ b/pkgs/by-name/mu/multiviewer-for-f1/package.nix
@@ -31,15 +31,15 @@
   writeScript,
 }:
 let
-  id = "305607196";
+  id = "354596705";
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "multiviewer-for-f1";
-  version = "2.3.0";
+  version = "2.5.1";
 
   src = fetchurl {
     url = "https://releases.multiviewer.dev/download/${id}/multiviewer_${finalAttrs.version}_amd64.deb";
-    hash = "sha256-Uc4db2o4XBV9eRNugxS6pA9Z5YhjY5QnEkwOICXmUwc=";
+    hash = "sha256-9ts5CZD14CzJHiC3YoKWIEKiFpOrcUX1tRUhE4it5Mo=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/mu/musescore-evolution/package.nix b/pkgs/by-name/mu/musescore-evolution/package.nix
index 2e8ca20d2d02..833ca12c694d 100644
--- a/pkgs/by-name/mu/musescore-evolution/package.nix
+++ b/pkgs/by-name/mu/musescore-evolution/package.nix
@@ -22,21 +22,26 @@
   libopus,
   tinyxml-2,
   qt5, # Needed for musescore 3.X
+  fetchpatch,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "musescore-evolution";
-  version = "3.7.0-unstable-2026-01-12";
+  version = "3.7.0-unstable-2026-03-03";
 
   src = fetchFromGitHub {
     owner = "Jojo-Schmitz";
     repo = "MuseScore";
-    rev = "0b4543baca9b1b70d54cecb33cbf846dabc073d1";
-    hash = "sha256-piOXHKlnfCO1n0kAgeszqa6JVoHgF8B2OF7agpadGKQ=";
+    rev = "67504236fa073783f6616545185ec8bde6c22647";
+    hash = "sha256-QUUvUkdrJ4iL6cgDob+PdVRZp44kzHeoOi2N0Xb51To=";
   };
 
   patches = [
     ./musescore-evolution-pch-fix.patch
+    (fetchpatch {
+      url = "https://github.com/Jojo-Schmitz/MuseScore/commit/bbaa38ba2babb339043f87d50cec3240ca49fe0b.patch";
+      hash = "sha256-TbbrBo4uWCHeAs0Er3eYL+i0JWafI0zhetLpFjN0xg8=";
+    })
   ];
 
   # From top-level CMakeLists.txt:
diff --git a/pkgs/by-name/mu/musescore-evolution/update.sh b/pkgs/by-name/mu/musescore-evolution/update.sh
index 129ae0ef87bb..3449d304edbf 100755
--- a/pkgs/by-name/mu/musescore-evolution/update.sh
+++ b/pkgs/by-name/mu/musescore-evolution/update.sh
@@ -3,24 +3,25 @@
 
 set -euo pipefail
 
+# Fallback to default attribute path if not set
+attr_path="${UPDATE_NIX_ATTR_PATH:-musescore-evolution}"
+
 # Run nix-update on the default branch (updates rev and sha256)
-nix-update musescore-evolution --version=branch
+nix-update $attr_path --version=branch
 
 # Now we need to update the version name
 
 # Find the new version generated from the nix-update command (e.g. "0-unstable-2026-01-12")
-generated_version=$(nix eval --raw -f . ${UPDATE_NIX_ATTR_PATH}.version)
+generated_version=$(nix eval --raw -f . ${attr_path}.version)
 
-# Extract only the date part (after the last dash) (e.g. 0-unstable-2026-01-12)
-parts=(${generated_version//-/ }) # Split up by dashes
-clean_date="${parts[2]}-${parts[3]}-${parts[4]}" # Get clean date in YYYY-MM-DD format (e.g. "2026-01-12")
+# Extract the last ISO date (YYYY-MM-DD) found in the generated version (e.g. 2026-01-12)
+clean_date=$(printf '%s\n' "$generated_version" | grep -oE '[0-9]{4}-[0-9]{2}-[0-9]{2}' | tail -n1 || true)
 
-# Compute version prefix based on previous version
-old_version="$UPDATE_NIX_OLD_VERSION"
-prefix="${old_version%-*}" # e.g. "3.7.0-unstable"
+# Version prefix remains unchanged
+prefix="3.7.0-unstable"
 
-new_version="${prefix}-${clean_date}"
+new_version="${prefix}-${clean_date}" # (e.g. "3.7.0-unstable-2026-01-12")
 
 # Patch version in nix file
 # Strip any existing version line and replace with new one
-sed -i "s/version = \".*\"/version = \"${new_version}\"/" $(nix eval --raw -f . ${UPDATE_NIX_ATTR_PATH}.meta.position | cut -d: -f1)
+sed -i "s/version = \".*\"/version = \"${new_version}\"/" $(nix eval --raw -f . ${attr_path}.meta.position | cut -d: -f1)
diff --git a/pkgs/by-name/my/mymake/package.nix b/pkgs/by-name/my/mymake/package.nix
index 0e0c05837fa6..d78ff685fa3e 100644
--- a/pkgs/by-name/my/mymake/package.nix
+++ b/pkgs/by-name/my/mymake/package.nix
@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "mymake";
-  version = "2.4.2";
+  version = "2.4.3";
 
   src = fetchFromGitHub {
     owner = "fstromback";
     repo = "mymake";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-JV9WGSCYWdqSD7jbGd4NlFVEZ8Rzh6l9h14O0qzzIw0=";
+    hash = "sha256-OjlcQ49jxMMmAhyl8c6lREOwBE63s+DIEf+rFElUsi0=";
   };
 
   buildPhase = ''
diff --git a/pkgs/by-name/na/nanosaur/package.nix b/pkgs/by-name/na/nanosaur/package.nix
index 35a1ab8778da..1c013e87d160 100644
--- a/pkgs/by-name/na/nanosaur/package.nix
+++ b/pkgs/by-name/na/nanosaur/package.nix
@@ -38,7 +38,7 @@ stdenv.mkDerivation {
     install -Dm755 {.,$out/bin}/Nanosaur
     wrapProgram $out/bin/Nanosaur --chdir "$out/share/Nanosaur"
     install -Dm644 $src/packaging/io.jor.nanosaur.desktop $out/share/applications/nanosaur.desktop
-    install -Dm644 $src/packaging/io.jor.nanosaur.png $out/share/pixmaps/nanosaur-desktopicon.png
+    install -Dm644 $src/packaging/io.jor.nanosaur.png -t $out/share/icons/hicolor/512x512/apps
     runHook postInstall
   '';
 
diff --git a/pkgs/by-name/na/nanosaur2/package.nix b/pkgs/by-name/na/nanosaur2/package.nix
index 139fa5730c3d..6f1bf35db77f 100644
--- a/pkgs/by-name/na/nanosaur2/package.nix
+++ b/pkgs/by-name/na/nanosaur2/package.nix
@@ -38,7 +38,7 @@ stdenv.mkDerivation {
     install -Dm755 {.,$out/bin}/Nanosaur2
     wrapProgram $out/bin/Nanosaur2 --chdir "$out/share/Nanosaur2"
     install -Dm644 $src/packaging/io.jor.nanosaur2.desktop $out/share/applications/nanosaur2.desktop
-    install -Dm644 $src/packaging/io.jor.nanosaur2.png $out/share/pixmaps/nanosaur2.png
+    install -Dm644 $src/packaging/io.jor.nanosaur2.png -t $out/share/icons/hicolor/256x256/apps
     runHook postInstall
   '';
 
diff --git a/pkgs/by-name/ne/neovim-qt/package.nix b/pkgs/by-name/ne/neovim-qt/package.nix
index 1af3a94b724f..4fd4d76470e9 100644
--- a/pkgs/by-name/ne/neovim-qt/package.nix
+++ b/pkgs/by-name/ne/neovim-qt/package.nix
@@ -27,7 +27,6 @@ stdenvNoCC.mkDerivation {
           --prefix PATH : ${neovim}/bin
 
         # link .desktop file
-        mkdir -p $out/share/pixmaps
         ln -s ${unwrapped}/share/applications $out/share/applications
         ln -s ${unwrapped}/share/icons $out/share/icons
       '';
diff --git a/pkgs/by-name/ne/netbird/package.nix b/pkgs/by-name/ne/netbird/package.nix
index d5225dba1fce..d0428a66e208 100644
--- a/pkgs/by-name/ne/netbird/package.nix
+++ b/pkgs/by-name/ne/netbird/package.nix
@@ -126,11 +126,11 @@ buildGoModule (finalAttrs: {
         ''
     # assemble & adjust netbird.desktop files for the GUI
     + lib.optionalString (stdenv.hostPlatform.isLinux && componentName == "ui") ''
-      install -Dm644 "$src/client/ui/assets/netbird-systemtray-connected.png" "$out/share/pixmaps/netbird.png"
+      install -Dm644 "$src/client/ui/assets/netbird-systemtray-connected.png" "$out/share/icons/hicolor/256x256/apps/netbird.png"
       install -Dm644 "$src/client/ui/build/netbird.desktop" "$out/share/applications/netbird.desktop"
 
       substituteInPlace $out/share/applications/netbird.desktop \
-        --replace-fail "Exec=/usr/bin/netbird-ui" "Exec=$out/bin/${component.binaryName}"
+        --replace-fail "Exec=/usr/bin/netbird-ui" "Exec=${component.binaryName}"
     '';
 
   nativeInstallCheckInputs = lib.lists.optionals (component ? versionCheckProgramArg) [
diff --git a/pkgs/by-name/ne/netlogo/package.nix b/pkgs/by-name/ne/netlogo/package.nix
index 168ad2a917af..1aae1f9b8288 100644
--- a/pkgs/by-name/ne/netlogo/package.nix
+++ b/pkgs/by-name/ne/netlogo/package.nix
@@ -49,7 +49,7 @@ stdenv.mkDerivation (finalAttrs: {
     makeWrapper ${jre}/bin/java $out/bin/netlogo \
       --chdir $out/opt/netlogo \
       --add-flags "-jar netlogo-${finalAttrs.version}.jar"
-    install -Dm644 ${desktopicon} $out/share/pixmaps/netlogo.png
+    install -Dm644 ${desktopicon} $out/share/icons/hicolor/256x256/apps/netlogo.png
 
     runHook postInstall
   '';
diff --git a/pkgs/by-name/ne/networkminer/package.nix b/pkgs/by-name/ne/networkminer/package.nix
index 72186710e76a..32f389a1a400 100644
--- a/pkgs/by-name/ne/networkminer/package.nix
+++ b/pkgs/by-name/ne/networkminer/package.nix
@@ -71,7 +71,7 @@ buildDotnetModule rec {
     install -D NetworkMiner/NetworkMiner.desktop $out/share/applications/NetworkMiner.desktop
     substituteInPlace $out/share/applications/NetworkMiner.desktop \
       --replace-fail "Icon=./Images/NetworkMiner_logo_313x313.png" "Icon=NetworkMiner"
-    install -D NetworkMiner/networkminericon-96x96.png $out/share/pixmaps/NetworkMiner.png
+    install -D NetworkMiner/networkminericon-96x96.png $out/share/icons/hicolor/96x96/apps/NetworkMiner.png
 
     runHook postInstall
   '';
diff --git a/pkgs/by-name/ne/nextvi/package.nix b/pkgs/by-name/ne/nextvi/package.nix
index 80db97f9d16c..e02da16e332b 100644
--- a/pkgs/by-name/ne/nextvi/package.nix
+++ b/pkgs/by-name/ne/nextvi/package.nix
@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "nextvi";
-  version = "3.2";
+  version = "4.0";
 
   src = fetchFromGitHub {
     owner = "kyx0r";
     repo = "nextvi";
     tag = finalAttrs.version;
-    hash = "sha256-tFV0VDMAiD099UBsdf1dC2KKFfUCFmJe4kEb/Z69U10=";
+    hash = "sha256-zX4m4y/y9kt/9dfEauLry+LdgcvSs+3s1OVPL52Ecok=";
   };
 
   nativeBuildInputs = [ installShellFiles ];
diff --git a/pkgs/by-name/ni/ni/package.nix b/pkgs/by-name/ni/ni/package.nix
index 63223326f773..709e0ed9124f 100644
--- a/pkgs/by-name/ni/ni/package.nix
+++ b/pkgs/by-name/ni/ni/package.nix
@@ -12,19 +12,19 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "ni";
-  version = "28.2.0";
+  version = "28.3.0";
 
   src = fetchFromGitHub {
     owner = "antfu-collective";
     repo = "ni";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-QRatGm8e12mYtCPpeZwz4adtl6PTPUXTRlge6UKqiqI=";
+    hash = "sha256-YLHtNJIGdprmqgBnKMREeHk6zZ43909JpmjJk/j0qyU=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     fetcherVersion = 2;
-    hash = "sha256-n/iqROsdVwLZEAHU3G6Hkl2wrwnwJv7BUMzJif9bYRM=";
+    hash = "sha256-cwVCGEhNmhMweJJJoPzqe8e2agHfIxIi6WmKiceCAns=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/ni/nixoscope/package.nix b/pkgs/by-name/ni/nixoscope/package.nix
new file mode 100644
index 000000000000..4280080b4540
--- /dev/null
+++ b/pkgs/by-name/ni/nixoscope/package.nix
@@ -0,0 +1,37 @@
+{
+  lib,
+  fetchFromGitHub,
+  python3Packages,
+}:
+python3Packages.buildPythonPackage {
+  pname = "nixoscope";
+  version = "0-unstable-2026-03-05";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "giomf";
+    repo = "nixoscope";
+    rev = "71de2ff0b4c9376db759a05ad58ace87d2b52ccb";
+    hash = "sha256-5yNGtEWlSAfJcy4X8C3dHQ+4Xaawi6aX20C82bfZxG4=";
+  };
+
+  build-system = with python3Packages; [
+    setuptools
+  ];
+
+  dependencies = with python3Packages; [
+    graphviz
+  ];
+
+  meta = {
+    description = "Visualize dependencies between NixOS modules";
+    homepage = "https://github.com/giomf/NixoScope";
+    license = with lib.licenses; [
+      mit
+    ];
+    maintainers = with lib.maintainers; [
+      giomf
+    ];
+    mainProgram = "nixoscope";
+  };
+}
diff --git a/pkgs/by-name/ni/nixtamal/package.nix b/pkgs/by-name/ni/nixtamal/package.nix
index 46fcd6d3def2..f60cf4b12bc4 100644
--- a/pkgs/by-name/ni/nixtamal/package.nix
+++ b/pkgs/by-name/ni/nixtamal/package.nix
@@ -17,7 +17,7 @@
 
 ocamlPackages.buildDunePackage (finalAttrs: {
   pname = "nixtamal";
-  version = "1.1.3";
+  version = "1.1.4";
   release_year = 2026;
 
   minimalOCamlVersion = "5.3";
@@ -26,7 +26,7 @@ ocamlPackages.buildDunePackage (finalAttrs: {
     url = "https://darcs.toastal.in.th/nixtamal/stable/";
     mirrors = [ "https://smeder.ee/~toastal/nixtamal.darcs" ];
     rev = finalAttrs.version;
-    hash = "sha256-jqPdtgdfQC28QgGPvLkjFMrC470vOAkLGo3EEKCs8hQ=";
+    hash = "sha256-iLjVuNS0pgoWoXp/Yr6ovEazXqhe5bflqtuzFupxmw0=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/nt/ntfy-sh/package.nix b/pkgs/by-name/nt/ntfy-sh/package.nix
index 4a9bacb82a19..ecc98205b095 100644
--- a/pkgs/by-name/nt/ntfy-sh/package.nix
+++ b/pkgs/by-name/nt/ntfy-sh/package.nix
@@ -17,7 +17,7 @@ buildGoModule (
     ui = buildNpmPackage {
       inherit (finalAttrs) src version;
       pname = "ntfy-sh-ui";
-      npmDepsHash = "sha256-d73rymqCKalsjAwHSJshEovmUHJStfGt8wcZYN49sHY=";
+      npmDepsHash = "sha256-eBGtw3R0mm26kQcxs7ODNpdAQGaBlRxn9ERn48zwuag=";
 
       prePatch = ''
         cd web/
@@ -37,16 +37,16 @@ buildGoModule (
   in
   {
     pname = "ntfy-sh";
-    version = "2.17.0";
+    version = "2.18.0";
 
     src = fetchFromGitHub {
       owner = "binwiederhier";
       repo = "ntfy";
       tag = "v${finalAttrs.version}";
-      hash = "sha256-/dxILAkye1HwYcybnx1WrMRK2jXZMrxal2ZKm6y2bWc=";
+      hash = "sha256-QyApZObrCVcTD2ZFKJdv7Ghr0lYote4L6VELnL13KAc=";
     };
 
-    vendorHash = "sha256-/mQ+UwBYz78mPVVwYgsSYatE00ce2AKXJdx+nl6oT8E=";
+    vendorHash = "sha256-mX7o1nXKhzzbSwJ4xmhg9ZQn4l5fIJDgIszxrgxPUKc=";
 
     doCheck = false;
 
@@ -56,6 +56,11 @@ buildGoModule (
       "-X main.version=${finalAttrs.version}"
     ];
 
+    excludedPackages = [
+      # main module (heckel.io/ntfy/v2) does not contain package heckel.io/ntfy/v2/tools/loadtest
+      "tools/loadtest"
+    ];
+
     nativeBuildInputs = [
       debianutils
       mkdocs
@@ -81,6 +86,7 @@ buildGoModule (
     meta = {
       description = "Send push notifications to your phone or desktop via PUT/POST";
       homepage = "https://ntfy.sh";
+      changelog = "https://github.com/binwiederhier/ntfy/releases/tag/v${finalAttrs.version}";
       license = lib.licenses.asl20;
       maintainers = with lib.maintainers; [
         arjan-s
diff --git a/pkgs/by-name/nu/nushell-plugin-skim/package.nix b/pkgs/by-name/nu/nushell-plugin-skim/package.nix
index e6a439920a06..65f638d99e88 100644
--- a/pkgs/by-name/nu/nushell-plugin-skim/package.nix
+++ b/pkgs/by-name/nu/nushell-plugin-skim/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "nu_plugin_skim";
-  version = "0.24.1";
+  version = "0.25.0";
 
   src = fetchFromGitHub {
     owner = "idanarye";
     repo = "nu_plugin_skim";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-a8wC5RowtLiVJXkDr2SDQaaLvK9jjW5x9z/cYCgJMRI=";
+    hash = "sha256-uS6xCefVPnYmNl1MLHOk6WDwHgoJFyRcsmbxoVHvwZg=";
   };
 
-  cargoHash = "sha256-/6dUbz2c0r6oV4NlmkOcu4Awky3fGkf2IkrwBpYg3ZM=";
+  cargoHash = "sha256-bT7RqN102o85Z+g/psz7KVq7ZCaE9Tk5huMxAMAO2J0=";
 
   nativeBuildInputs = lib.optionals stdenv.cc.isClang [ rustPlatform.bindgenHook ];
 
diff --git a/pkgs/by-name/nw/nwg-panel/package.nix b/pkgs/by-name/nw/nwg-panel/package.nix
index 85867c627666..a0b79ff060b5 100644
--- a/pkgs/by-name/nw/nwg-panel/package.nix
+++ b/pkgs/by-name/nw/nwg-panel/package.nix
@@ -66,9 +66,8 @@ python3Packages.buildPythonApplication (finalAttrs: {
     ++ [ libdbusmenu-gtk3 ];
 
   postInstall = ''
-    mkdir -p $out/share/{applications,pixmaps}
-    cp $src/nwg-panel-config.desktop nwg-processes.desktop $out/share/applications/
-    cp $src/nwg-shell.svg $src/nwg-panel.svg nwg-processes.svg $out/share/pixmaps/
+    install -D $src/nwg-panel-config.desktop nwg-processes.desktop -t $out/share/applications/
+    install -D $src/nwg-shell.svg $src/nwg-panel.svg nwg-processes.svg -t $out/share/icons/hicolor/scalable/apps/
   '';
 
   preFixup = ''
diff --git a/pkgs/by-name/oa/oathkeeper/package.nix b/pkgs/by-name/oa/oathkeeper/package.nix
index 2cba65f26625..65493b2c262e 100644
--- a/pkgs/by-name/oa/oathkeeper/package.nix
+++ b/pkgs/by-name/oa/oathkeeper/package.nix
@@ -5,8 +5,8 @@
 }:
 let
   pname = "oathkeeper";
-  version = "0.40.9";
-  commit = "c75695837f170334b526359f28967aa33d61bce6";
+  version = "25.4.0";
+  commit = "2020997ed914fbc8c4b048effbe28841c34ac23d";
 in
 buildGoModule {
   inherit pname version commit;
@@ -15,10 +15,10 @@ buildGoModule {
     owner = "ory";
     repo = "oathkeeper";
     rev = "v${version}";
-    hash = "sha256-R7xKhKF7mhS/vmSpOj+QDL0OBBWnh42X2Kr3TDQxVIo=";
+    hash = "sha256-J+76oQbm/CulzfJOhXVzlXWNtpl7PaEJPM96p1ko3Cg=";
   };
 
-  vendorHash = "sha256-qETVUpxckZGa41Ll+SZTGcDlImsCvbvGQBcIwuIzSY8=";
+  vendorHash = "sha256-YNpWjDOcjELCpNcxmd8eatMvPUTHos52yvDg4jsHAQk=";
 
   tags = [
     "sqlite"
diff --git a/pkgs/by-name/oc/ocm/package.nix b/pkgs/by-name/oc/ocm/package.nix
index 4222f65ad932..89171250eed4 100644
--- a/pkgs/by-name/oc/ocm/package.nix
+++ b/pkgs/by-name/oc/ocm/package.nix
@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "ocm";
-  version = "1.0.11";
+  version = "1.0.12";
 
   src = fetchFromGitHub {
     owner = "openshift-online";
     repo = "ocm-cli";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-nyfuXgpgQEpiXRIpAxFiNG+ANChwunl19qeibZIse10=";
+    sha256 = "sha256-f5y7debNrMVTjGXyFtCjGnTtV8LuPHnblQ9tmllfsRs=";
   };
 
-  vendorHash = "sha256-4GwmUURR0yUAbTJc6v66JiqmvcDEPs6pVgOzuho//Lk=";
+  vendorHash = "sha256-vlFMN0490J48+koPgB6ezVJyjda+kGWmU+d+rLgVSmg=";
 
   # Strip the final binary.
   ldflags = [
diff --git a/pkgs/by-name/oc/octodns/providers/desec/package.nix b/pkgs/by-name/oc/octodns/providers/desec/package.nix
new file mode 100644
index 000000000000..61c57b140ba9
--- /dev/null
+++ b/pkgs/by-name/oc/octodns/providers/desec/package.nix
@@ -0,0 +1,47 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  octodns,
+  pytestCheckHook,
+  requests,
+  setuptools,
+}:
+
+buildPythonPackage rec {
+  pname = "octodns-desec";
+  version = "1.3.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "rootshell-labs";
+    repo = "octodns-desec";
+    tag = version;
+    hash = "sha256-tRviqrNkKYWj4a3EWCJEco8AnzFuRkvSCzZ1HrSye/I=";
+  };
+
+  build-system = [
+    setuptools
+  ];
+
+  dependencies = [
+    octodns
+    requests
+  ];
+
+  env.OCTODNS_RELEASE = 1;
+
+  pythonImportsCheck = [ "octodns_desec" ];
+
+  nativeCheckInputs = [
+    pytestCheckHook
+  ];
+
+  meta = {
+    description = "deSEC DNS provider for octoDNS";
+    homepage = "https://github.com/rootshell-labs/octodns-desec";
+    changelog = "https://github.com/rootshell-labs/octodns-desec/blob/${src.tag}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    teams = [ lib.teams.octodns ];
+  };
+}
diff --git a/pkgs/by-name/op/openapi-python-client/package.nix b/pkgs/by-name/op/openapi-python-client/package.nix
index cd39d85e0efd..dfb8b25f3710 100644
--- a/pkgs/by-name/op/openapi-python-client/package.nix
+++ b/pkgs/by-name/op/openapi-python-client/package.nix
@@ -11,7 +11,7 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "openapi-python-client";
-  version = "0.28.2";
+  version = "0.28.3";
   pyproject = true;
 
   src = fetchFromGitHub {
@@ -19,7 +19,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     owner = "openapi-generators";
     repo = "openapi-python-client";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-egeT/XTUTq+HbwX7PpfygDNNKgBkExM0neMEu/mfErw=";
+    hash = "sha256-09XqMy++lczQrbQWkj13WM98VDIOMPSMXAkgJWMfcKM=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/op/openasar/package.nix b/pkgs/by-name/op/openasar/package.nix
index ab9fddf48cef..bd940595d8cf 100644
--- a/pkgs/by-name/op/openasar/package.nix
+++ b/pkgs/by-name/op/openasar/package.nix
@@ -14,13 +14,13 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "openasar";
-  version = "0-unstable-2026-02-23";
+  version = "0-unstable-2026-03-04";
 
   src = fetchFromGitHub {
     owner = "GooseMod";
     repo = "OpenAsar";
-    rev = "31dfb7bcc0dfecc9e4ef62b65fbc5dcbc34d04fc";
-    hash = "sha256-/Uc5u7YT2LxRkUtPyZ9Y9MQvKDmwQUSmexQFby9MWzI=";
+    rev = "a75870297df907d43ac6565385b0af4a781cf6fe";
+    hash = "sha256-tEKt2Qfk29HP448keMb7JR4+iTR3AXCho7PdkF0D1i0=";
   };
 
   postPatch = ''
diff --git a/pkgs/by-name/op/openvscode-server/package.nix b/pkgs/by-name/op/openvscode-server/package.nix
index 6a166a566048..55375fa981ab 100644
--- a/pkgs/by-name/op/openvscode-server/package.nix
+++ b/pkgs/by-name/op/openvscode-server/package.nix
@@ -39,13 +39,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "openvscode-server";
-  version = "1.106.3";
+  version = "1.109.5";
 
   src = fetchFromGitHub {
     owner = "gitpod-io";
     repo = "openvscode-server";
     rev = "openvscode-server-v${finalAttrs.version}";
-    hash = "sha256-wcmk35oqJ6d5MR9YnqC/pR0pC03/vCFCd9KLRByQWqk=";
+    hash = "sha256-FWexstn6pmKPkMuoXOWr4+levM+3FK74q1HLu4kFWTc=";
   };
 
   ## fetchNpmDeps doesn't correctly process git dependencies
@@ -58,7 +58,7 @@ stdenv.mkDerivation (finalAttrs: {
         inherit (finalAttrs) src nativeBuildInputs;
         outputHashMode = "recursive";
         outputHashAlgo = "sha256";
-        outputHash = "sha256-FnlzXlhu72G9dUnezzc62qH2TG5mU9EJNe9akWtR6zg=";
+        outputHash = "sha256-DMjqFMdp7ocGdvMEmrKqB8RhF+BTN/9ybOKQAeuSG/o=";
         env = {
           FORCE_EMPTY_CACHE = true;
           FORCE_GIT_DEPS = true;
diff --git a/pkgs/by-name/or/ory-hydra/package.nix b/pkgs/by-name/or/ory-hydra/package.nix
new file mode 100644
index 000000000000..97b54a394e3d
--- /dev/null
+++ b/pkgs/by-name/or/ory-hydra/package.nix
@@ -0,0 +1,50 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  versionCheckHook,
+}:
+buildGoModule (finalAttrs: {
+  pname = "hydra";
+  version = "25.4.0";
+
+  src = fetchFromGitHub {
+    owner = "ory";
+    repo = "hydra";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-vcbJiwWoq7WA7K5WpD68za1VecNwdzqfyXuPfUpa1QU=";
+  };
+
+  vendorHash = "sha256-ADS1kBqSJXDwmCS4CCfiMvmlzzL39E0G4J2UEKXy2Qs=";
+
+  # `json1` not needed (see: https://github.com/ory/hydra/commit/93edc9ad894771c67f46ae2c57ee7e50382d73cd)
+  # `sqlite_omit_load_extension` consistency with upstream (see: https://github.com/ory/hydra/blob/master/.docker/Dockerfile-local-build#L20C58-L20C84). Will disable sqlite runtime extension loading (see: https://sqlite.org/loadext.html)
+  tags = [
+    "hsm"
+    "sqlite"
+    "sqlite_omit_load_extension"
+  ];
+
+  subPackages = [ "." ];
+
+  ldflags = [
+    "-s"
+    "-X github.com/ory/hydra/v2/driver/config.Version=v${finalAttrs.version}"
+    "-X github.com/ory/hydra/v2/driver/config.Commit=${finalAttrs.src.rev}"
+  ];
+
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = [ "version" ];
+
+  meta = {
+    description = "OpenID Certified™ OAuth 2.0 Server and OpenID Connect Provider";
+    homepage = "https://www.ory.com/hydra";
+    changelog = "https://github.com/ory/hydra/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [
+      debtquity
+    ];
+    mainProgram = "hydra";
+  };
+})
diff --git a/pkgs/by-name/or/ory/package.nix b/pkgs/by-name/or/ory/package.nix
index 32b43bbc8c62..be07e3ec9d48 100644
--- a/pkgs/by-name/or/ory/package.nix
+++ b/pkgs/by-name/or/ory/package.nix
@@ -8,13 +8,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "ory";
-  version = "0.3.4";
+  version = "1.2.0";
 
   src = fetchFromGitHub {
     owner = "ory";
     repo = "cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-q7+Fpttgx62GbKxCCiEDlX//e/pNO24e7KhhBeGRDH0=";
+    hash = "sha256-WqVcVqdgzlI6OvgLA4OViBsU0DGaTnv5F+Ew58UzQlM=";
   };
 
   nativeBuildInputs = [
@@ -34,12 +34,12 @@ buildGoModule (finalAttrs: {
     "sqlite"
   ];
 
-  vendorHash = "sha256-B0y1JVjJmC5eitn7yIcDpl+9+xaBDJBMdvm+7N/ZxTk=";
-
+  vendorHash = "sha256-W7yi6CSioLnLmOsK7hdB3C96fV7METOe+wzKKMWpphw=";
   postInstall = ''
     mv $out/bin/cli $out/bin/ory
   ''
   + lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
+    export version=v${finalAttrs.version}
     installShellCompletion --cmd ory \
       --bash <($out/bin/ory completion bash) \
       --fish <($out/bin/ory completion fish) \
diff --git a/pkgs/by-name/ot/otto-matic/package.nix b/pkgs/by-name/ot/otto-matic/package.nix
index 87714af175f8..c2b01940cf4b 100644
--- a/pkgs/by-name/ot/otto-matic/package.nix
+++ b/pkgs/by-name/ot/otto-matic/package.nix
@@ -40,7 +40,7 @@ stdenv.mkDerivation {
     install -Dm755 {.,$out/bin}/OttoMatic
     wrapProgram $out/bin/OttoMatic --chdir "$out/share/OttoMatic"
     install -Dm644 $src/packaging/io.jor.ottomatic.desktop $out/share/applications/io.jor.ottomatic.desktop
-    install -Dm644 $src/packaging/io.jor.ottomatic.png $out/share/pixmaps/io.jor.ottomatic.png
+    install -Dm644 $src/packaging/io.jor.ottomatic.png $out/share/icons/hicolor/512x512/apps/io.jor.ottomatic.png
 
     runHook postInstall
   '';
diff --git a/pkgs/by-name/pa/padthv1/package.nix b/pkgs/by-name/pa/padthv1/package.nix
index 754bb91b39ec..89cfc6b0c971 100644
--- a/pkgs/by-name/pa/padthv1/package.nix
+++ b/pkgs/by-name/pa/padthv1/package.nix
@@ -15,11 +15,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "padthv1";
-  version = "1.3.2";
+  version = "1.4.0";
 
   src = fetchurl {
     url = "mirror://sourceforge/padthv1/padthv1-${finalAttrs.version}.tar.gz";
-    hash = "sha256-sXpJjD79+rLrWHwpAxACjR+8KVGbQss8qKGMTN7nb9M=";
+    hash = "sha256-Rru6nIPTdXmBD5sXHQXaB4gjWrlB6F6CYHPTjY7ekuo=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/pa/par-lang/package.nix b/pkgs/by-name/pa/par-lang/package.nix
index 7ff1baac0ceb..8f3c6498c2dd 100644
--- a/pkgs/by-name/pa/par-lang/package.nix
+++ b/pkgs/by-name/pa/par-lang/package.nix
@@ -19,16 +19,16 @@
 
 rustPlatform.buildRustPackage {
   pname = "par-lang";
-  version = "0-unstable-2026-02-27";
+  version = "0-unstable-2026-03-03";
 
   src = fetchFromGitHub {
     owner = "faiface";
     repo = "par-lang";
-    rev = "7c93277a1595bfb6bc6845377a1c6b53b85eeee1";
-    hash = "sha256-zDivcXpCJaXL/7LuiSUOhi8fMXqdhp5gBMjI6nTgik8=";
+    rev = "a5777923d4c94480b614c3e8cfceffe6923d1a1a";
+    hash = "sha256-QGqwgSIcYc7PI/e7dZ+bWo7lrGEzvKEO2FCwtpwbFVI=";
   };
 
-  cargoHash = "sha256-Z0aTVloZY3UQWkL3+cMqxfzACLwD7OayjBPZbQ0bk1c=";
+  cargoHash = "sha256-taLTRYB1Crvx0wz3IRvkPRImaRIs0mGscOjLFBkhkgE=";
 
   nativeBuildInputs = [
     pkg-config
diff --git a/pkgs/by-name/pa/pattypan/package.nix b/pkgs/by-name/pa/pattypan/package.nix
index 62c2fba5494c..65aa30eff298 100644
--- a/pkgs/by-name/pa/pattypan/package.nix
+++ b/pkgs/by-name/pa/pattypan/package.nix
@@ -4,6 +4,7 @@
   fetchFromGitHub,
   ant,
   jdk,
+  imagemagick,
   makeWrapper,
   wrapGAppsHook3,
   makeDesktopItem,
@@ -31,6 +32,7 @@ stdenv.mkDerivation (finalAttrs: {
     wrapGAppsHook3
     copyDesktopItems
     stripJavaArchivesHook
+    imagemagick
   ];
 
   dontWrapGApps = true;
@@ -45,8 +47,9 @@ stdenv.mkDerivation (finalAttrs: {
 
   installPhase = ''
     runHook preInstall
+    mkdir -p $out/share/icons/hicolor/96x96/apps
     install -Dm644 pattypan.jar -t $out/share/pattypan
-    install -Dm644 src/pattypan/resources/logo.png $out/share/pixmaps/pattypan.png
+    magick src/pattypan/resources/logo.png -resize 96x96 $out/share/icons/hicolor/96x96/apps/pattypan.png
     runHook postInstall
   '';
 
diff --git a/pkgs/by-name/pe/pear-desktop/package.nix b/pkgs/by-name/pe/pear-desktop/package.nix
index 347ac7a1b02d..6be7ed05d005 100644
--- a/pkgs/by-name/pe/pear-desktop/package.nix
+++ b/pkgs/by-name/pe/pear-desktop/package.nix
@@ -7,7 +7,7 @@
   python3,
   copyDesktopItems,
   nodejs,
-  pnpm_10,
+  pnpm_10_29_2,
   fetchPnpmDeps,
   pnpmConfigHook,
   makeDesktopItem,
@@ -31,7 +31,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
-    pnpm = pnpm_10;
+    pnpm = pnpm_10_29_2;
     fetcherVersion = 2;
     hash = "sha256-xZQ8rnLGD0ZxxUUPLHmNJ6mA+lnUHCTBvtJTiIPxaZU=";
   };
@@ -41,7 +41,7 @@ stdenv.mkDerivation (finalAttrs: {
     python3
     nodejs
     pnpmConfigHook
-    pnpm_10
+    pnpm_10_29_2
   ]
   ++ lib.optionals (!stdenv.hostPlatform.isDarwin) [ copyDesktopItems ];
 
diff --git a/pkgs/by-name/pg/pgpdump/package.nix b/pkgs/by-name/pg/pgpdump/package.nix
index 8af5a40262ea..d1f7391b0fc8 100644
--- a/pkgs/by-name/pg/pgpdump/package.nix
+++ b/pkgs/by-name/pg/pgpdump/package.nix
@@ -2,31 +2,25 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  fetchpatch2,
   supportCompressedPackets ? true,
   zlib,
   bzip2,
+  autoreconfHook,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "pgpdump";
-  version = "0.36";
+  version = "0.37";
 
   src = fetchFromGitHub {
     owner = "kazu-yamamoto";
     repo = "pgpdump";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-JKedgHCTDnvLyLR3nGl4XFAaxXDU1TgHrxPMlRFwtBo=";
+    sha256 = "sha256-nB7f6VTxRidymi9RV7W1x9JbWi9Eoa/CYzYmekYDVOo=";
   };
 
-  patches = [
-    # Fix for GCC 15. Remove on next package update.
-    # https://github.com/kazu-yamamoto/pgpdump/pull/45
-    (fetchpatch2 {
-      name = "fix-c23-compatibility.patch";
-      url = "https://github.com/kazu-yamamoto/pgpdump/commit/541442dc04259bde680b46742522177be40cc065.patch?full_index=1";
-      hash = "sha256-ye+B8hy0etGcwCG9pD0jCnrg+U5VpFkERad61CexW9Y=";
-    })
+  nativeBuildInputs = [
+    autoreconfHook
   ];
 
   buildInputs = lib.optionals supportCompressedPackets [
diff --git a/pkgs/by-name/pi/picoclaw/package.nix b/pkgs/by-name/pi/picoclaw/package.nix
index e67e36479e08..18575c949f6f 100644
--- a/pkgs/by-name/pi/picoclaw/package.nix
+++ b/pkgs/by-name/pi/picoclaw/package.nix
@@ -7,17 +7,17 @@
 
 buildGoModule (finalAttrs: {
   pname = "picoclaw";
-  version = "0.2.0";
+  version = "0.2.1";
 
   src = fetchFromGitHub {
     owner = "sipeed";
     repo = "picoclaw";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-zCeURNN152yL3Qi1UFDvSB85xflbLAMzQUTwGThALss=";
+    hash = "sha256-JvcvpaGPPBiABK28rQhe63chYm7MRdfU6uflZosNRKg=";
   };
 
   proxyVendor = true;
-  vendorHash = "sha256-CsTGC5Ajo9RV6rJPQgnFqA+bQ2TEafI4tt3iXpVwaeY=";
+  vendorHash = "sha256-K9LssS1Hff19dv6oa8EaFOUZIRnOtAqC5jgnY5HuWTk=";
 
   preBuild = ''
     go generate ./...
diff --git a/pkgs/by-name/pl/plantuml/package.nix b/pkgs/by-name/pl/plantuml/package.nix
index 2f11e053304b..e2612cb367c7 100644
--- a/pkgs/by-name/pl/plantuml/package.nix
+++ b/pkgs/by-name/pl/plantuml/package.nix
@@ -11,11 +11,11 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "plantuml";
-  version = "1.2026.1";
+  version = "1.2026.2";
 
   src = fetchurl {
     url = "https://github.com/plantuml/plantuml/releases/download/v${finalAttrs.version}/plantuml-pdf-${finalAttrs.version}.jar";
-    hash = "sha256-QzZ4N2bSZNPaBzt8pG1q3wM/E/XC3bTAOrmeRHHA2uA=";
+    hash = "sha256-jbQjZrcUh9PTeizylcqb3Q7A4kKZH9ZcaEReymc3lo8=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/pl/plater/package.nix b/pkgs/by-name/pl/plater/package.nix
index 800c9299d8ca..8443f4755b4a 100644
--- a/pkgs/by-name/pl/plater/package.nix
+++ b/pkgs/by-name/pl/plater/package.nix
@@ -5,6 +5,7 @@
   lib,
   libGLU,
   makeDesktopItem,
+  copyDesktopItems,
   qt5,
 }:
 
@@ -22,28 +23,29 @@ stdenv.mkDerivation rec {
   nativeBuildInputs = [
     cmake
     qt5.wrapQtAppsHook
+    copyDesktopItems
   ];
   buildInputs = [
     libGLU
     qt5.qtbase
   ];
 
-  desktopItem = makeDesktopItem {
-    name = "plater";
-    exec = "plater";
-    icon = "plater";
-    desktopName = "Ideamaker";
-    genericName = meta.description;
-    categories = [
-      "Utility"
-      "Engineering"
-    ];
-  };
+  desktopItems = [
+    (makeDesktopItem {
+      name = "plater";
+      exec = "plater";
+      icon = "plater";
+      desktopName = "Ideamaker";
+      genericName = meta.description;
+      categories = [
+        "Utility"
+        "Engineering"
+      ];
+    })
+  ];
 
   postInstall = ''
-    mkdir -p $out/share/pixmaps
-    ln -s ${desktopItem}/share/applications $out/share/
-    cp $src/gui/img/plater.png $out/share/pixmaps/${pname}.png
+    install -D $src/gui/img/plater.png -t $out/share/icons/hicolor/128x128/apps
   '';
 
   meta = {
diff --git a/pkgs/by-name/po/podman-desktop/package.nix b/pkgs/by-name/po/podman-desktop/package.nix
index 3ff7d7425ec6..07c668f7b55c 100644
--- a/pkgs/by-name/po/podman-desktop/package.nix
+++ b/pkgs/by-name/po/podman-desktop/package.nix
@@ -6,7 +6,7 @@
   copyDesktopItems,
   electron_39,
   nodejs,
-  pnpm_10,
+  pnpm_10_29_2,
   fetchPnpmDeps,
   pnpmConfigHook,
   makeDesktopItem,
@@ -64,7 +64,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
-    pnpm = pnpm_10;
+    pnpm = pnpm_10_29_2;
     fetcherVersion = 2;
     hash = "sha256-nBjAmXzjR0qGCM91UAonQKP0NG7+DXImueSbhbnMK/k=";
   };
@@ -81,7 +81,7 @@ stdenv.mkDerivation (finalAttrs: {
     makeBinaryWrapper
     nodejs
     pnpmConfigHook
-    pnpm_10
+    pnpm_10_29_2
   ]
   ++ lib.optionals (!stdenv.hostPlatform.isDarwin) [
     copyDesktopItems
diff --git a/pkgs/by-name/po/polarity/package.nix b/pkgs/by-name/po/polarity/package.nix
index 06877d5335e7..bc4ac72b559b 100644
--- a/pkgs/by-name/po/polarity/package.nix
+++ b/pkgs/by-name/po/polarity/package.nix
@@ -7,13 +7,13 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "polarity";
-  version = "latest-unstable-2026-02-20";
+  version = "latest-unstable-2026-03-07";
 
   src = fetchFromGitHub {
     owner = "polarity-lang";
     repo = "polarity";
-    rev = "630a1bb3b97c7c1a13087407a50cc78316a2526e";
-    hash = "sha256-IuT1LJiMEOS+c4dUamCpboDNqHGDVxsjYBJ4NEmLZa4=";
+    rev = "589d3efe086b78cc095af4b745cf61e61f93fb2a";
+    hash = "sha256-dssf0sTRQYRfggftd3eSlkEu2ZwFglk8thmDFnL6odA=";
   };
 
   cargoHash = "sha256-FrCOsgbb0xQH3cKnWqa2n17uDpppnSd0PyVrrCPXCYw=";
diff --git a/pkgs/by-name/po/pony-corral/package.nix b/pkgs/by-name/po/pony-corral/package.nix
index d0ce1734d188..32647363b155 100644
--- a/pkgs/by-name/po/pony-corral/package.nix
+++ b/pkgs/by-name/po/pony-corral/package.nix
@@ -8,13 +8,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "corral";
-  version = "0.9.1";
+  version = "0.9.2";
 
   src = fetchFromGitHub {
     owner = "ponylang";
     repo = "corral";
     rev = finalAttrs.version;
-    hash = "sha256-pJ6/+PYxMpJcj1e9v2Al8vIWFizJnLMIw7LlVU9ogS0=";
+    hash = "sha256-WblwyUm7mTdh3GvuSvO9bW6txbJeSS4qrvP4TeYk1uw=";
   };
 
   env.arch =
diff --git a/pkgs/by-name/po/postfix/package.nix b/pkgs/by-name/po/postfix/package.nix
index 2414dc2e0fe1..bbda13acbcf9 100644
--- a/pkgs/by-name/po/postfix/package.nix
+++ b/pkgs/by-name/po/postfix/package.nix
@@ -74,11 +74,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "postfix";
-  version = "3.10.8";
+  version = "3.11.0";
 
   src = fetchurl {
     url = "http://ftp.porcupine.org/mirrors/postfix-release/official/postfix-${finalAttrs.version}.tar.gz";
-    hash = "sha256-MdSz64CT2CO1oVH1cXGf98BGJXG8leZEDYfKUlv7CWw=";
+    hash = "sha256-Y2fcxrnWtETEodCen9o6vxR52IycQ0oxzVz+BvnDZic=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/pr/projectlibre/package.nix b/pkgs/by-name/pr/projectlibre/package.nix
index 960bf5faab2c..607e27248e85 100644
--- a/pkgs/by-name/pr/projectlibre/package.nix
+++ b/pkgs/by-name/pr/projectlibre/package.nix
@@ -52,7 +52,7 @@ stdenv.mkDerivation (finalAttrs: {
     cp -R license $out/share/doc/projectlibre
     cp -R resources/samples/* $out/share/projectlibre/samples
     install -Dm644 resources/projectlibre.desktop -t $out/share/applications
-    install -Dm644 resources/projectlibre.png -t $out/share/pixmaps
+    install -Dm644 resources/projectlibre.png -t $out/share/icons/hicolor/128x128/apps
     install -Dm755 resources/projectlibre -t $out/bin
     popd
 
diff --git a/pkgs/by-name/pr/prometheus-tailscale-exporter/package.nix b/pkgs/by-name/pr/prometheus-tailscale-exporter/package.nix
index a82c2cba2509..23684a49b1c4 100644
--- a/pkgs/by-name/pr/prometheus-tailscale-exporter/package.nix
+++ b/pkgs/by-name/pr/prometheus-tailscale-exporter/package.nix
@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "tailscale-exporter";
-  version = "0.3.0";
+  version = "0.4.0";
 
   src = fetchFromGitHub {
     owner = "adinhodovic";
     repo = "tailscale-exporter";
     tag = finalAttrs.version;
-    hash = "sha256-zZxKTEm23iXv4qYwx6gBtBuz5pduuIXLwMX0ZrrYxZs=";
+    hash = "sha256-1q4csOORVFc1tYoPv6Ll11+xgkPhzUQ/UAJrfLpD87k=";
   };
 
-  vendorHash = "sha256-WHtmis8r62th90BrM+f63yuyRkW4bVT/vPDfcIJ3Fg8=";
+  vendorHash = "sha256-GMaMNEJbSA39DTAXPh5jEy3LC0VzH3UInjnkZIFxT7I=";
 
   subPackages = [
     "cmd/tailscale-exporter"
diff --git a/pkgs/by-name/pr/protonvpn-gui/package.nix b/pkgs/by-name/pr/protonvpn-gui/package.nix
index e3443bf9d661..a08bcb6a5fc5 100644
--- a/pkgs/by-name/pr/protonvpn-gui/package.nix
+++ b/pkgs/by-name/pr/protonvpn-gui/package.nix
@@ -12,14 +12,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "protonvpn-gui";
-  version = "4.14.2";
+  version = "4.15.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ProtonVPN";
     repo = "proton-vpn-gtk-app";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-np6uFQn7tlxL8JwUBvBCZIWMRFwvymv88c0+gueqxjk=";
+    hash = "sha256-bKUhrbfOLVjknljwW9UPo3Ros1Ayzb+be5KTUjPnIW0=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/pv/pv/package.nix b/pkgs/by-name/pv/pv/package.nix
index 736e62f53b8d..260c3902fae5 100644
--- a/pkgs/by-name/pv/pv/package.nix
+++ b/pkgs/by-name/pv/pv/package.nix
@@ -6,11 +6,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "pv";
-  version = "1.10.3";
+  version = "1.10.4";
 
   src = fetchurl {
     url = "https://www.ivarch.com/programs/sources/pv-${finalAttrs.version}.tar.gz";
-    hash = "sha256-qhYwx5r2lgqJIv+mTSw+f4dIbaIfy1fid4JClP0mZ0I=";
+    hash = "sha256-fplPm4ZFggookohGgFFXWt8JoeaI2OTY+j7MSHeL98k=";
   };
 
   meta = {
diff --git a/pkgs/by-name/qd/qdelay/package.nix b/pkgs/by-name/qd/qdelay/package.nix
index 8eda65088db0..4453316263c7 100644
--- a/pkgs/by-name/qd/qdelay/package.nix
+++ b/pkgs/by-name/qd/qdelay/package.nix
@@ -23,14 +23,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "qdelay";
-  version = "1.1.0";
+  version = "1.1.1";
 
   src = fetchFromGitHub {
     owner = "tiagolr";
     repo = "qdelay";
     tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
-    hash = "sha256-hGUZhnA+aix17hTJZ9hE+W+5HEhI9IMYk05avzFaKAg=";
+    hash = "sha256-RKTfKKsPSnraLS6SFKWB/wRPSFqeRpl/DYVKF4BKAYU=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/qg/qgroundcontrol/package.nix b/pkgs/by-name/qg/qgroundcontrol/package.nix
index 0f5f53c0a054..f226de0c703c 100644
--- a/pkgs/by-name/qg/qgroundcontrol/package.nix
+++ b/pkgs/by-name/qg/qgroundcontrol/package.nix
@@ -74,8 +74,7 @@ stdenv.mkDerivation rec {
     mkdir -p $out/share/qgroundcontrol
     cp -rv resources/ $out/share/qgroundcontrol
 
-    mkdir -p $out/share/pixmaps
-    cp -v resources/icons/qgroundcontrol.png $out/share/pixmaps
+    install -D resources/icons/qgroundcontrol.png -t $out/share/icons/hicolor/128x128/apps
 
     runHook postInstall
   '';
diff --git a/pkgs/by-name/qo/qobuz-player/package.nix b/pkgs/by-name/qo/qobuz-player/package.nix
index c193aaac2216..433d03d51450 100644
--- a/pkgs/by-name/qo/qobuz-player/package.nix
+++ b/pkgs/by-name/qo/qobuz-player/package.nix
@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "qobuz-player";
-  version = "0.7.1";
+  version = "0.7.2";
 
   src = fetchFromGitHub {
     owner = "SofusA";
     repo = "qobuz-player";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-LStCoBr3BblXRpuno+QKxyJstvrNmP+wub61491NkPY=";
+    hash = "sha256-PQhuMGUKKquxZn/Tru8rYapzcoWiZR2Q7q6R+XT2z1s=";
   };
 
-  cargoHash = "sha256-6fUwZkXurjV9yM2Mur0lAkgFxTAEmt92DFKzbPj3Vo4=";
+  cargoHash = "sha256-H2dZJgNTMqLvQ4PMF0JRngTBK4hFF8a/Z/8jAhL7NDM=";
 
   nativeBuildInputs = [
     pkg-config
diff --git a/pkgs/by-name/qt/qtengine/package.nix b/pkgs/by-name/qt/qtengine/package.nix
new file mode 100644
index 000000000000..70ee18462c95
--- /dev/null
+++ b/pkgs/by-name/qt/qtengine/package.nix
@@ -0,0 +1,77 @@
+{
+  lib,
+  stdenv,
+  cmake,
+  ninja,
+  kdePackages,
+  libsForQt5,
+  fetchFromGitHub,
+}:
+stdenv.mkDerivation (finalAttrs: {
+  pname = "qtengine";
+  version = "0.2.1";
+
+  src = fetchFromGitHub {
+    owner = "kossLAN";
+    repo = "qtengine";
+    tag = finalAttrs.version;
+    hash = "sha256-aJ5ZdIX10nmhzMLjP6QMuFJHvljJD+xcojuKZjPkr70=";
+  };
+
+  outputs = [
+    "out"
+    "qt5"
+  ];
+
+  nativeBuildInputs = [
+    cmake
+    ninja
+  ];
+
+  buildInputs = [
+    kdePackages.qtbase
+    kdePackages.kconfig
+    kdePackages.kcolorscheme
+    kdePackages.kiconthemes
+  ];
+
+  # Workaround for Qt5/Qt6 dual support, similar to breeze (pkgs/kde/plasma/breeze)
+  cmakeFlags = [
+    "-DQT6_PLUGINDIR=${placeholder "out"}/${kdePackages.qtbase.qtPluginPrefix}"
+    "-DQT5_PLUGINDIR=${placeholder "qt5"}/${libsForQt5.qtbase.qtPluginPrefix}"
+    "-DQT5_LIBDIR=${placeholder "qt5"}/lib"
+    "-DQt5_DIR=${libsForQt5.qtbase.dev}/lib/cmake/Qt5"
+    "-DQt5Core_DIR=${libsForQt5.qtbase.dev}/lib/cmake/Qt5Core"
+    "-DQt5DBus_DIR=${libsForQt5.qtbase.dev}/lib/cmake/Qt5DBus"
+    "-DQt5Gui_DIR=${libsForQt5.qtbase.dev}/lib/cmake/Qt5Gui"
+    "-DQt5Widgets_DIR=${libsForQt5.qtbase.dev}/lib/cmake/Qt5Widgets"
+    "-DQt5Xml_DIR=${libsForQt5.qtbase.dev}/lib/cmake/Qt5Xml"
+    "-DQt5ThemeSupport_DIR=${libsForQt5.qtbase.dev}/lib/cmake/Qt5ThemeSupport"
+    "-DQt5ThemeSupport_LIBRARY=${libsForQt5.qtbase.out}/lib/libQt5ThemeSupport.a"
+    "-DQt5ThemeSupport_INCLUDE_DIR=${libsForQt5.qtbase.dev}/include/QtThemeSupport/${libsForQt5.qtbase.version}"
+    "-DQt5Network_DIR=${libsForQt5.qtbase.dev}/lib/cmake/Qt5Network"
+    "-DQt5Qml_DIR=${libsForQt5.qtdeclarative.dev}/lib/cmake/Qt5Qml"
+    "-DQt5Quick_DIR=${libsForQt5.qtdeclarative.dev}/lib/cmake/Qt5Quick"
+    "-DQt5QmlModels_DIR=${libsForQt5.qtdeclarative.dev}/lib/cmake/Qt5QmlModels"
+    "-DQt5QuickControls2_DIR=${libsForQt5.qtquickcontrols2.dev}/lib/cmake/Qt5QuickControls2"
+
+    "-DKF5Auth_DIR=${libsForQt5.kauth.dev}/lib/cmake/KF5Auth"
+    "-DKF5Codecs_DIR=${libsForQt5.kcodecs.dev}/lib/cmake/KF5Codecs"
+    "-DKF5Config_DIR=${libsForQt5.kconfig.dev}/lib/cmake/KF5Config"
+    "-DKF5ConfigWidgets_DIR=${libsForQt5.kconfigwidgets.dev}/lib/cmake/KF5ConfigWidgets"
+    "-DKF5CoreAddons_DIR=${libsForQt5.kcoreaddons.dev}/lib/cmake/KF5CoreAddons"
+    "-DKF5GuiAddons_DIR=${libsForQt5.kguiaddons.dev}/lib/cmake/KF5GuiAddons"
+    "-DKF5IconThemes_DIR=${libsForQt5.kiconthemes.dev}/lib/cmake/KF5IconThemes"
+    "-DKF5WidgetsAddons_DIR=${libsForQt5.kwidgetsaddons.dev}/lib/cmake/KF5WidgetsAddons"
+  ];
+
+  dontWrapQtApps = true;
+
+  meta = {
+    description = "Minimal Qt platform theme";
+    homepage = "https://github.com/kossLAN/qtengine";
+    license = lib.licenses.bsd2;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ kosslan ];
+  };
+})
diff --git a/pkgs/by-name/rc/rclone/package.nix b/pkgs/by-name/rc/rclone/package.nix
index 0d8f664268e7..c7e7b05ba69b 100644
--- a/pkgs/by-name/rc/rclone/package.nix
+++ b/pkgs/by-name/rc/rclone/package.nix
@@ -17,7 +17,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "rclone";
-  version = "1.73.1";
+  version = "1.73.2";
 
   outputs = [
     "out"
@@ -28,10 +28,10 @@ buildGoModule (finalAttrs: {
     owner = "rclone";
     repo = "rclone";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-DzyfG14c2ca/Nw8rVL1SJ0fp9CWvus/9jDtwSqYN6F8=";
+    hash = "sha256-ICq0VEy0i5Q/9Fd9rsZmMZGMnAW2tGsIhluHFGlmI/Q=";
   };
 
-  vendorHash = "sha256-mMkntyRAYFrzp0HqlD0FBmzztCMc9gL/Cs/drq8U4K0=";
+  vendorHash = "sha256-4WLtVzlboBRO5HVYUVfwt6xGaaG2mt8GVHcS4K+fgvA=";
 
   subPackages = [ "." ];
 
diff --git a/pkgs/by-name/re/release-plz/package.nix b/pkgs/by-name/re/release-plz/package.nix
index 5dd0f206c18c..f57c83ecffa6 100644
--- a/pkgs/by-name/re/release-plz/package.nix
+++ b/pkgs/by-name/re/release-plz/package.nix
@@ -11,16 +11,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "release-plz";
-  version = "0.3.156";
+  version = "0.3.157";
 
   src = fetchFromGitHub {
     owner = "MarcoIeni";
     repo = "release-plz";
     rev = "release-plz-v${finalAttrs.version}";
-    hash = "sha256-XJACR1/wpN4NhV/zEgYwA1f+3AHTwJeoQ2dgGlJqpBo=";
+    hash = "sha256-ATPf1ObepPT2Ndd72hXpqEHMGpaZz12Ee8wwCPCQrlQ=";
   };
 
-  cargoHash = "sha256-OlBhTlfM5LV1mRRYjnQFioap/lMCrav9ggj5wiI1Qqo=";
+  cargoHash = "sha256-q1iSB+Qi8UAXajlVD6AvMrFJFliywQQauTZ+TInbvd4=";
 
   nativeBuildInputs = [
     installShellFiles
diff --git a/pkgs/by-name/re/renode-dts2repl/package.nix b/pkgs/by-name/re/renode-dts2repl/package.nix
index ec7ea1289a99..e232ff7226b5 100644
--- a/pkgs/by-name/re/renode-dts2repl/package.nix
+++ b/pkgs/by-name/re/renode-dts2repl/package.nix
@@ -7,14 +7,14 @@
 
 python3.pkgs.buildPythonApplication {
   pname = "renode-dts2repl";
-  version = "0-unstable-2026-02-03";
+  version = "0-unstable-2026-03-04";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "antmicro";
     repo = "dts2repl";
-    rev = "9a95defc04faac0c3787082245656771a3de69e6";
-    hash = "sha256-0zYTU3FVV8Inmu0Y1ZNm8RqMQBjJ4xpGKX99Tp3m0xs=";
+    rev = "c0417ea78616572c543b3a6e4d2d1b5f03b7d9a9";
+    hash = "sha256-gblaFhFI5N/95FW/cqUng4j6Lmlc/TVTejvwOlkIoXU=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/ro/roon-server/package.nix b/pkgs/by-name/ro/roon-server/package.nix
index 106eb6c1f555..dbc8b2dd81b9 100644
--- a/pkgs/by-name/ro/roon-server/package.nix
+++ b/pkgs/by-name/ro/roon-server/package.nix
@@ -16,7 +16,7 @@
   stdenv,
 }:
 let
-  version = "2.60.1629";
+  version = "2.62.1641";
   urlVersion = builtins.replaceStrings [ "." ] [ "0" ] version;
 in
 stdenv.mkDerivation {
@@ -25,7 +25,7 @@ stdenv.mkDerivation {
 
   src = fetchurl {
     url = "https://download.roonlabs.com/updates/production/RoonServer_linuxx64_${urlVersion}.tar.bz2";
-    hash = "sha256-s+rM9jzkL+m1GW2+seI/OnBHMbfeijNJ4CoXOaWJmi8=";
+    hash = "sha256-DX05i4bgTar2d2xHyEqFXNlQ86FladX/xoEC4YLIxnI=";
   };
 
   dontConfigure = true;
diff --git a/pkgs/by-name/ro/rosa/package.nix b/pkgs/by-name/ro/rosa/package.nix
index f5a972992c26..cf3659abc31f 100644
--- a/pkgs/by-name/ro/rosa/package.nix
+++ b/pkgs/by-name/ro/rosa/package.nix
@@ -11,13 +11,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "rosa";
-  version = "1.2.60";
+  version = "1.2.61";
 
   src = fetchFromGitHub {
     owner = "openshift";
     repo = "rosa";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-VKaoN91kxfGp9rFmO6VyD4WwmppITirenF1qpASDbDI=";
+    hash = "sha256-tcvNtFM8e2U9C5Nis3RzVJvBh+wvPlLID2MyYjHRdVs=";
   };
   vendorHash = null;
 
diff --git a/pkgs/by-name/ru/rust-analyzer-unwrapped/package.nix b/pkgs/by-name/ru/rust-analyzer-unwrapped/package.nix
index ee0b1a1ebb23..6a0ae9532eca 100644
--- a/pkgs/by-name/ru/rust-analyzer-unwrapped/package.nix
+++ b/pkgs/by-name/ru/rust-analyzer-unwrapped/package.nix
@@ -13,7 +13,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rust-analyzer-unwrapped";
-  version = "2026-02-16";
+  version = "2026-03-02";
 
   cargoHash = "sha256-1Brx4mvT8683zhrFkfL15/ynfgewyd7WcFFdKvDL3+Q=";
 
@@ -21,7 +21,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "rust-lang";
     repo = "rust-analyzer";
     rev = finalAttrs.version;
-    hash = "sha256-1TZROjtryMzOJHgHhAUQUoAMnnWal231G7gM1pfNlK4=";
+    hash = "sha256-UfVF6W3LKSl+KMM510AXrGOdOdkU0PTZd3xyee14iRc=";
   };
 
   cargoBuildFlags = [
diff --git a/pkgs/by-name/sd/sdl3-shadercross/package.nix b/pkgs/by-name/sd/sdl3-shadercross/package.nix
index 03cf32663093..72f8134ca376 100644
--- a/pkgs/by-name/sd/sdl3-shadercross/package.nix
+++ b/pkgs/by-name/sd/sdl3-shadercross/package.nix
@@ -13,7 +13,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "sdl3-shadercross";
-  version = "0-unstable-2025-12-30";
+  version = "0-unstable-2026-03-01";
 
   outputs = [
     "out"
@@ -24,8 +24,8 @@ stdenv.mkDerivation (finalAttrs: {
   src = fetchFromGitHub {
     owner = "libsdl-org";
     repo = "SDL_shadercross";
-    rev = "7b7365a86611b2a7b6462e521cf1c43a037d0970";
-    hash = "sha256-4HAdX2+yqk5a+UfpCdAaF0o0Dxv2PTtxPU7I205KfXk=";
+    rev = "3a314481ede01f5d966f0e834019942e34c02b82";
+    hash = "sha256-ngJymfBU9YzVEHmNpAlkHQ3Q3UDN6OCq/2kuZIHQjcw=";
   };
 
   strictDeps = true;
diff --git a/pkgs/by-name/sh/sharkey/package.nix b/pkgs/by-name/sh/sharkey/package.nix
index 5ed574bb3e29..899c6dc7224e 100644
--- a/pkgs/by-name/sh/sharkey/package.nix
+++ b/pkgs/by-name/sh/sharkey/package.nix
@@ -28,14 +28,14 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "sharkey";
-  version = "2025.4.4";
+  version = "2025.4.6";
 
   src = fetchFromGitLab {
     domain = "activitypub.software";
     owner = "TransFem-org";
     repo = "Sharkey";
     tag = finalAttrs.version;
-    hash = "sha256-h6FkjwJ+TI5NZmGYOl/+yNP7gyc7FKmpdkfXmgqxh/s=";
+    hash = "sha256-TtwlveTIjzDYpFR+F5c0If6E1D2E5MI9I2IoDIV0u7E=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/by-name/si/signal-desktop/package.nix b/pkgs/by-name/si/signal-desktop/package.nix
index c31fc54d4929..20b8145c2c6e 100644
--- a/pkgs/by-name/si/signal-desktop/package.nix
+++ b/pkgs/by-name/si/signal-desktop/package.nix
@@ -2,7 +2,7 @@
   stdenv,
   lib,
   nodejs_24,
-  pnpm_10,
+  pnpm_10_29_2,
   fetchPnpmDeps,
   pnpmConfigHook,
   electron_40,
@@ -25,7 +25,7 @@
 }:
 let
   nodejs = nodejs_24;
-  pnpm = pnpm_10;
+  pnpm = pnpm_10_29_2;
   electron = electron_40;
 
   libsignal-node = callPackage ./libsignal-node.nix { inherit nodejs; };
diff --git a/pkgs/by-name/si/siyuan/package.nix b/pkgs/by-name/si/siyuan/package.nix
index 14fb57b7cc59..cd4544ae741c 100644
--- a/pkgs/by-name/si/siyuan/package.nix
+++ b/pkgs/by-name/si/siyuan/package.nix
@@ -36,20 +36,20 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "siyuan";
-  version = "3.5.8";
+  version = "3.5.9";
 
   src = fetchFromGitHub {
     owner = "siyuan-note";
     repo = "siyuan";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-mXDro4m2QZEUcljpQNC5JqhVbRZgBVU1Wfiq1JtS0B0=";
+    hash = "sha256-lQtgVYYinkgxgwnxyhsebt8CpdCDClcS+qo0tQaTD94=";
   };
 
   kernel = buildGoModule {
     name = "${finalAttrs.pname}-${finalAttrs.version}-kernel";
     inherit (finalAttrs) src;
     sourceRoot = "${finalAttrs.src.name}/kernel";
-    vendorHash = "sha256-i7eq8RDbuv+FzreClW8JFocUs7R8A02cOZ8NaAGBMfA=";
+    vendorHash = "sha256-Qz2LAtznJ8MxPQ6bSuMuvCDWt+8JSe0MawNWH70X/5k=";
 
     patches = [
       (replaceVars ./set-pandoc-path.patch {
@@ -100,7 +100,7 @@ stdenv.mkDerivation (finalAttrs: {
       ;
     pnpm = pnpm_9;
     fetcherVersion = 3;
-    hash = "sha256-Dp684KKAb8Ge2PyPhBFgIB17Fs6swAF/Fw2z9SN4Aio=";
+    hash = "sha256-KXSR2QCcYdUCaQhDZAF/4rwlAmn7GtUHVbP8xYKcxVI=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/app";
diff --git a/pkgs/by-name/sl/slepc/package.nix b/pkgs/by-name/sl/slepc/package.nix
index cd43ee1b9d9c..90a5bfabc95f 100644
--- a/pkgs/by-name/sl/slepc/package.nix
+++ b/pkgs/by-name/sl/slepc/package.nix
@@ -21,13 +21,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "slepc";
-  version = "3.24.2";
+  version = "3.24.3";
 
   src = fetchFromGitLab {
     owner = "slepc";
     repo = "slepc";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-P6UjCvlXelEGp+ReNGbolcVIV9eQTmcOJDLjmJOZJeQ=";
+    hash = "sha256-eCCdADdhatarzordwPKpJPIQbFWYngMlJvMBoVcTOWk=";
   };
 
   postPatch = ''
diff --git a/pkgs/by-name/sn/snpguest/package.nix b/pkgs/by-name/sn/snpguest/package.nix
index 6f4f62cd6ea2..d72b79737924 100644
--- a/pkgs/by-name/sn/snpguest/package.nix
+++ b/pkgs/by-name/sn/snpguest/package.nix
@@ -33,7 +33,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     homepage = "https://github.com/virtee/snpguest";
     changelog = "https://github.com/virtee/snpguest/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [ katexochen ];
+    maintainers = with lib.maintainers; [
+      katexochen
+      charludo
+    ];
     mainProgram = "snpguest";
     platforms = [ "x86_64-linux" ];
   };
diff --git a/pkgs/by-name/sn/snphost/package.nix b/pkgs/by-name/sn/snphost/package.nix
index 76500b902195..8d6566fdffad 100644
--- a/pkgs/by-name/sn/snphost/package.nix
+++ b/pkgs/by-name/sn/snphost/package.nix
@@ -57,7 +57,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     homepage = "https://github.com/virtee/snphost/";
     changelog = "https://github.com/virtee/snphost/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [ katexochen ];
+    maintainers = with lib.maintainers; [
+      katexochen
+      charludo
+    ];
     mainProgram = "snphost";
     platforms = [ "x86_64-linux" ];
   };
diff --git a/pkgs/by-name/sp/spacetimedb/package.nix b/pkgs/by-name/sp/spacetimedb/package.nix
index d229cb16ac21..954f9681374c 100644
--- a/pkgs/by-name/sp/spacetimedb/package.nix
+++ b/pkgs/by-name/sp/spacetimedb/package.nix
@@ -15,16 +15,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "spacetimedb";
-  version = "1.12.0";
+  version = "2.0.3";
 
   src = fetchFromGitHub {
     owner = "clockworklabs";
     repo = "spacetimedb";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-JuZ9odvMTIOIG4G0M4IBS9I9mWV+dk6qltIgn2a/W9I=";
+    hash = "sha256-QmzuXuFru/yt/32PXVydmLWpH9JnYD+sInorz9AqIMI=";
   };
 
-  cargoHash = "sha256-yAXcTNBITuBm7NPCTiS/RDaxMYgH6mq+ud3VsOELEqE=";
+  cargoHash = "sha256-mUmFkMpJq25lao2B7Ggigx6vd3hg534XTpPJw48Jw5s=";
 
   nativeBuildInputs = [
     pkg-config
diff --git a/pkgs/by-name/sp/splayer/package.nix b/pkgs/by-name/sp/splayer/package.nix
index 200b68c320ff..233952567431 100644
--- a/pkgs/by-name/sp/splayer/package.nix
+++ b/pkgs/by-name/sp/splayer/package.nix
@@ -2,7 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  pnpm_10,
+  pnpm_10_29_2,
   fetchPnpmDeps,
   pnpmConfigHook,
   nodejs,
@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
       version
       src
       ;
-    pnpm = pnpm_10;
+    pnpm = pnpm_10_29_2;
     fetcherVersion = 2;
     hash = "sha256-PTfZopse+9RS7qh0miLu3duYlWDfifZS254tZKqgxKk=";
   };
@@ -53,7 +53,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   nativeBuildInputs = [
     pnpmConfigHook
-    pnpm_10
+    pnpm_10_29_2
     nodejs
     rustPlatform.cargoSetupHook
     cargo
diff --git a/pkgs/by-name/sp/spotatui/package.nix b/pkgs/by-name/sp/spotatui/package.nix
index 10774bcd2542..3db3fcf443cf 100644
--- a/pkgs/by-name/sp/spotatui/package.nix
+++ b/pkgs/by-name/sp/spotatui/package.nix
@@ -12,16 +12,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "spotatui";
-  version = "0.37.0";
+  version = "0.37.3";
 
   src = fetchFromGitHub {
     owner = "LargeModGames";
     repo = "spotatui";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-XAL9MkDtH0wbLV+XMskC5z5DsH9f1xgwQUNXReTHKw8=";
+    hash = "sha256-FRmKkrxMyLmSb1rq7+lFxJ1TqvV5CuI7ZX2PQChWESI=";
   };
 
-  cargoHash = "sha256-7AwvlyAAwCr20hD7h8g0/zh1bxU2hple+nABJZZyGA0=";
+  cargoHash = "sha256-3yxf0othDv5tp85PpLjJBglATbDGgzsMKyOqWjJLuMg=";
 
   nativeBuildInputs = [ pkg-config ] ++ lib.optional withPipewireVisualizer rustPlatform.bindgenHook;
 
diff --git a/pkgs/by-name/sq/sql-studio/package.nix b/pkgs/by-name/sq/sql-studio/package.nix
index b08a46bfcba6..6b6a2dc5a31a 100644
--- a/pkgs/by-name/sq/sql-studio/package.nix
+++ b/pkgs/by-name/sq/sql-studio/package.nix
@@ -9,13 +9,13 @@
 }:
 let
   pname = "sql-studio";
-  version = "0.1.48";
+  version = "0.1.50";
 
   src = fetchFromGitHub {
     owner = "frectonz";
     repo = "sql-studio";
     tag = version;
-    hash = "sha256-D/yLALIvzus9u8qUw5oLX+mEVzKgGfdZPEWkMEfM5tg=";
+    hash = "sha256-sXlOnqzi3N+56sdJdkpcVq1mKgdhhu0KdU1Xdoyr10w=";
   };
 
   ui = buildNpmPackage {
@@ -35,7 +35,7 @@ in
 rustPlatform.buildRustPackage {
   inherit pname version src;
 
-  cargoHash = "sha256-CfyR1MNKgQlj0bii6U+En15sVnUpHluHXZn77P3KYgU=";
+  cargoHash = "sha256-+hf0GtD5lfa//JYFQZFvO+2m9FgOn9jV6NQ0rQejRXg=";
 
   nativeBuildInputs = [ pkg-config ];
 
diff --git a/pkgs/by-name/sq/sqlitebrowser/macos.patch b/pkgs/by-name/sq/sqlitebrowser/macos.patch
index 6da7d67a0326..e4016f9d8502 100644
--- a/pkgs/by-name/sq/sqlitebrowser/macos.patch
+++ b/pkgs/by-name/sq/sqlitebrowser/macos.patch
@@ -1,17 +1,6 @@
 diff -ru source/CMakeLists.txt source-patched/CMakeLists.txt
 --- source/CMakeLists.txt	1970-01-01 01:00:01.000000000 +0100
 +++ source-patched/CMakeLists.txt	2024-09-03 11:09:48.289053141 +0200
-@@ -39,9 +39,7 @@
- set(CMAKE_AUTOMOC ON)
- set(CMAKE_INCLUDE_CURRENT_DIR ON)
- 
--if(APPLE)
--    add_executable(${PROJECT_NAME} MACOSX_BUNDLE)
--elseif(WIN32)
-+if(WIN32)
-     add_executable(${PROJECT_NAME} WIN32)
- else()
-     add_executable(${PROJECT_NAME})
 @@ -106,33 +104,6 @@
      list(PREPEND CMAKE_PREFIX_PATH ${QT5_PATH} ${SQLITE3_PATH})
  endif()
@@ -60,27 +49,3 @@ diff -ru source/CMakeLists.txt source-patched/CMakeLists.txt
  find_package(${LIBSQLITE_NAME})
  if (sqlcipher)
      target_link_libraries(${PROJECT_NAME} SQLCipher::SQLCipher)
-@@ -510,7 +474,7 @@
-     endif()
- endif()
- 
--if((NOT WIN32 AND NOT APPLE) OR MINGW)
-+if(NOT WIN32 OR MINGW)
-     install(TARGETS ${PROJECT_NAME}
-         RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR}
-         LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR}
-@@ -630,14 +594,6 @@
-     )
- endif()
- 
--if(APPLE)
--    set_target_properties(${PROJECT_NAME} PROPERTIES
--        BUNDLE True
--        OUTPUT_NAME "DB Browser for SQLite"
--        MACOSX_BUNDLE_INFO_PLIST ${CMAKE_SOURCE_DIR}/src/app.plist
--    )
--endif()
--
- # CPack configuration
- set(CPACK_STRIP_FILES ON)
- set(CPACK_DEBIAN_PACKAGE_PRIORITY optional)
diff --git a/pkgs/by-name/sq/sqlitebrowser/package.nix b/pkgs/by-name/sq/sqlitebrowser/package.nix
index d11c3b469bd2..b4f18bf67981 100644
--- a/pkgs/by-name/sq/sqlitebrowser/package.nix
+++ b/pkgs/by-name/sq/sqlitebrowser/package.nix
@@ -6,6 +6,7 @@
   pkg-config,
   libsForQt5,
   sqlcipher,
+  nix-update-script,
 }:
 
 let
@@ -28,6 +29,9 @@ stdenv.mkDerivation (finalAttrs: {
   postPatch = ''
     substituteInPlace CMakeLists.txt \
       --replace-fail '"Unknown"' '"${finalAttrs.src.rev}"'
+
+    substituteInPlace src/app.plist \
+      --replace-fail '@ICON@' 'icon.icns'
   ''
   # Fix build with CMake 4
   # Will be part of the Qt6 port
@@ -62,10 +66,22 @@ stdenv.mkDerivation (finalAttrs: {
     (lib.cmakeFeature "QSCINTILLA_INCLUDE_DIR" "${lib.getDev qt'.qscintilla}/include")
   ];
 
+  postInstall = lib.optional stdenv.hostPlatform.isDarwin ''
+    # Copy the icon file to the app bundle
+    target="$(find . -name "*.app")"
+    mkdir -p "$target/Contents/Resources/"
+    cp $src/installer/macos/macapp.icns "$target/Contents/Resources/icon.icns"
+
+    mkdir -p $out/Applications
+    cp -r *.app $out/Applications
+  '';
+
   env.LANG = "C.UTF-8";
 
   doCheck = true;
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "DB Browser for SQLite";
     mainProgram = "sqlitebrowser";
diff --git a/pkgs/by-name/sr/srb2/package.nix b/pkgs/by-name/sr/srb2/package.nix
index 0a9567759ff9..7a716d2e6140 100644
--- a/pkgs/by-name/sr/srb2/package.nix
+++ b/pkgs/by-name/sr/srb2/package.nix
@@ -99,12 +99,10 @@ stdenv.mkDerivation (finalAttrs: {
   installPhase = ''
     runHook preInstall
 
-    mkdir -p $out/bin $out/share/applications $out/share/pixmaps $out/share/icons
-
+    mkdir -p $out/bin $out/share/applications
     copyDesktopItems
 
-    cp ../srb2.png $out/share/pixmaps/.
-    cp ../srb2.png $out/share/icons/.
+    install -D ../srb2.png -t $out/share/icons/hicolor/256x256/apps
 
     cp bin/lsdlsrb2 $out/bin/srb2
     wrapProgram $out/bin/srb2 --set SRB2WADDIR "${finalAttrs.assets}/share/srb2"
diff --git a/pkgs/by-name/st/stasis/package.nix b/pkgs/by-name/st/stasis/package.nix
index 97815d6a4791..f64903294899 100644
--- a/pkgs/by-name/st/stasis/package.nix
+++ b/pkgs/by-name/st/stasis/package.nix
@@ -14,16 +14,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "stasis";
-  version = "0.9.0";
+  version = "1.0.0";
 
   src = fetchFromGitHub {
     owner = "saltnpepper97";
     repo = "stasis";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ILv0TY1x7DdZw+AqTSs1+TW8bdxlCIN0/tiLsAuIpXc=";
+    hash = "sha256-Rq3JnZAYzysIPdcVVM/ctKBARPGxKzzae2owVwqNPt8=";
   };
 
-  cargoHash = "sha256-reu0SJt5gQ/+XOx508PXzg9VL1+iBFwvUiyJyQC+oR0=";
+  cargoHash = "sha256-wAuiD66MFoQoAxsDL2bGV1GIUn7mw2TVespuD1gJcuQ=";
 
   nativeBuildInputs = [
     pkg-config
diff --git a/pkgs/by-name/ta/taze/package.nix b/pkgs/by-name/ta/taze/package.nix
index b1b6d10b9998..a0b65fa40b3d 100644
--- a/pkgs/by-name/ta/taze/package.nix
+++ b/pkgs/by-name/ta/taze/package.nix
@@ -12,20 +12,20 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "taze";
-  version = "19.9.2";
+  version = "19.10.0";
 
   src = fetchFromGitHub {
     owner = "antfu-collective";
     repo = "taze";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-6VH1j2v9gySalq6OXL1WzEApcaoE1VxHdrZtYv2xKZk=";
+    hash = "sha256-jkVbPEHSO2ZZwxfxzq6GUsAi0O/BJYv2YLghpiLM66g=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_9;
     fetcherVersion = 1;
-    hash = "sha256-SV8dHPydTOz/cbOY3p4npp0uMjh3hSXH9ZNk4BtHb4w=";
+    hash = "sha256-+kORi1CwLD567b2L0PRs+t16Qi7HegpYoc8W127rp9k=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/te/telegraf/package.nix b/pkgs/by-name/te/telegraf/package.nix
index 3a678b42cec4..96851b60b614 100644
--- a/pkgs/by-name/te/telegraf/package.nix
+++ b/pkgs/by-name/te/telegraf/package.nix
@@ -10,7 +10,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "telegraf";
-  version = "1.37.3";
+  version = "1.38.0";
 
   subPackages = [ "cmd/telegraf" ];
 
@@ -18,10 +18,10 @@ buildGoModule (finalAttrs: {
     owner = "influxdata";
     repo = "telegraf";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-HMmniDwEyM5jciHVGsR4VT1oPlv9ZvxoVZcdQQr99b8=";
+    hash = "sha256-y5SmQ6e0pySB8w34w82jy2bFkXfHsFEJTW2WAoIbPuA=";
   };
 
-  vendorHash = "sha256-kSCJI2tUdwG5JuP+P785zpMnLbkU91GhZ0i9YZNTFxo=";
+  vendorHash = "sha256-2R7hxIprCzpB6iAnZzF7SBiqnGXR9Gy9KmrCkQ3kvso=";
   proxyVendor = true;
 
   ldflags = [
diff --git a/pkgs/by-name/ti/tideways-daemon/package.nix b/pkgs/by-name/ti/tideways-daemon/package.nix
index 758ba6ca8f4a..7469e3231fb4 100644
--- a/pkgs/by-name/ti/tideways-daemon/package.nix
+++ b/pkgs/by-name/ti/tideways-daemon/package.nix
@@ -10,7 +10,7 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "tideways-daemon";
-  version = "1.14.0";
+  version = "1.15.0";
 
   src =
     finalAttrs.passthru.sources.${stdenvNoCC.hostPlatform.system}
@@ -28,15 +28,15 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     sources = {
       "x86_64-linux" = fetchurl {
         url = "https://tideways.s3.amazonaws.com/daemon/${finalAttrs.version}/tideways-daemon_linux_amd64-${finalAttrs.version}.tar.gz";
-        hash = "sha256-T32SqZfpZBraQ/KaO1RhOBh7HjesK6KHopiWsw/lDjE=";
+        hash = "sha256-eylOdAhPnB2x6h9k8lcErXuM8IRHME4zSrR6rwwVwgk=";
       };
       "aarch64-linux" = fetchurl {
         url = "https://tideways.s3.amazonaws.com/daemon/${finalAttrs.version}/tideways-daemon_linux_aarch64-${finalAttrs.version}.tar.gz";
-        hash = "sha256-wzchxvmRWp8HF7MEoUbY/7nNAtR7nmhWamfxg1YiHv4=";
+        hash = "sha256-Ymz7KyB1M0nhAbxvK5iWzRz0w+p9F3/UqkyKAyQazeg=";
       };
       "aarch64-darwin" = fetchurl {
         url = "https://tideways.s3.amazonaws.com/daemon/${finalAttrs.version}/tideways-daemon_macos_arm64-${finalAttrs.version}.tar.gz";
-        hash = "sha256-W9Eyd7U01kghw7Zy6H9WUxtaEkEgbpDqdmI0RA0sOn8=";
+        hash = "sha256-rKLNzmHP4K1JseV8FUYsmj48c7d2h2RikmWt3IFTAHY=";
       };
     };
     updateScript = "${
diff --git a/pkgs/by-name/ti/timetrap/package.nix b/pkgs/by-name/ti/timetrap/package.nix
index 683a156579e6..08f983baa1d7 100644
--- a/pkgs/by-name/ti/timetrap/package.nix
+++ b/pkgs/by-name/ti/timetrap/package.nix
@@ -9,8 +9,10 @@
 }:
 
 let
+  pname = "timetrap";
+
   ttBundlerApp = (bundlerApp.override { ruby = ruby_3_4; }) {
-    pname = "timetrap";
+    inherit pname;
     gemdir = ./.;
     exes = [
       "t"
@@ -21,14 +23,15 @@ let
   };
 
   ttGem = (bundlerEnv.override { ruby = ruby_3_4; }) {
-    pname = "timetrap";
+    inherit pname;
     gemdir = ./.;
   };
 
 in
 
 stdenv.mkDerivation {
-  name = "timetrap";
+  inherit pname;
+  inherit (ttBundlerApp) version;
 
   dontUnpack = true;
 
diff --git a/pkgs/by-name/to/tonearm/package.nix b/pkgs/by-name/to/tonearm/package.nix
index 98d0a99ba9e2..d63aa6788920 100644
--- a/pkgs/by-name/to/tonearm/package.nix
+++ b/pkgs/by-name/to/tonearm/package.nix
@@ -1,5 +1,5 @@
 {
-  buildGoModule,
+  buildGo126Module,
   cairo,
   copyDesktopItems,
   fetchFromGitea,
@@ -38,17 +38,17 @@ let
     ];
   };
 in
-buildGoModule (finalAttrs: {
+buildGo126Module (finalAttrs: {
   pname = "tonearm";
-  version = "1.2.0";
+  version = "1.4.0";
   src = fetchFromGitea {
     domain = "codeberg.org";
     owner = "dergs";
     repo = "Tonearm";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-2on27z3BRf63gjs3NKmF9H0Le7hBdaHRUp8WQgFs3QU=";
+    hash = "sha256-tfnJiEJD0SWKxi5MjGbDLVe80niMcMHpzNaOM1SNEQo=";
   };
-  vendorHash = "sha256-j+7cobxVGNuZFYeRn5ad7XT4um8WNWE1byFo7qo9zK0=";
+  vendorHash = "sha256-/pUSUfOt5heiObZNQRlZjN1a+j9JocB43F9072pyLjw=";
 
   ldflags = [
     "-X \"codeberg.org/dergs/tonearm/internal/ui.Version=${finalAttrs.version}\""
diff --git a/pkgs/by-name/tr/tracy/README.md b/pkgs/by-name/tr/tracy/README.md
new file mode 100644
index 000000000000..8f92d5a64da4
--- /dev/null
+++ b/pkgs/by-name/tr/tracy/README.md
@@ -0,0 +1,137 @@
+# Tracy Profiler
+
+Upstream: [wolfpld/tracy](https://github.com/wolfpld/tracy)
+
+The Tracy profiler guarantees neither forward nor backward compatibility of its
+tracing protocol between releases of the Tracy UI, requiring the UI version to match
+the SDK version of the compiled target. Providing a single version of Tracy suffices
+for in-tree packages, however developers working on out-of-tree projects need a Tracy
+compatible with their build.
+
+To support both scenarios, this provides several versions of Tracy (`tracy_x_xx`)
+with the most recent available "by name" as `tracy`.
+
+## Version Retention Guidelines
+
+Older releases of Tracy are provided as a convenience, not a guarantee. Maintainers
+should balance relevance to nixpkgs, maintainance burden, and user need.
+
+- Dependants in nixpkgs use `tracy` rather than a pinned version;
+- No more than three pinned versions of Tracy are maintained, assuming annual release
+  cadence of upstream;
+- Older versions which block or inconvenience an upgrade to nixpkgs as a whole will be
+  dropped;
+- Exceptions or changes to guidelines are documented here.
+
+As with all packages, maintainers should use their best judgement on what to drop and
+what to retain.
+
+## Tracy Dependencies
+
+Tracy uses [CPM.cmake](https://github.com/cpm-cmake/CPM.cmake) to manage its dependencies.
+CPM normally downloads dependencies during cmake configure, but that is incompatible with a
+nixpkg build. This package uses several [Devendoring Strategies](#devendoring-strategies)
+to provide dependencies to upstream's cmake build environment.
+
+| Strategy                      | When to Use                                          |
+|-------------------------------|------------------------------------------------------|
+| nixpkgs                       | CPM NAME matches cmake package name                  |
+| nixpkgs FindPackage           | CPM NAME or target name differs from nixpkgs         |
+| nixpkgs src                   | Need different build options than nixpkgs default    |
+| vendored                      | Package not in nixpkgs or incompatible               |
+
+### Tracy 0.11.x
+
+| Dependency        | Tracy Ver | nixpkgs Ver | Strategy        | Notes                     |
+|-------------------|-----------|-------------|-----------------|---------------------------|
+| capstone          | 5.0.1     | 5.0.6       | nixpkgs         |                           |
+| glfw              | 3.3.8     | 3.4         | nixpkgs         |                           |
+| wayland-protocols | 1.32      | 1.46        | nixpkgs         | XML protocol files only   |
+
+### Tracy 0.12.x
+
+| Dependency           | Tracy Ver        | nixpkgs Ver | Strategy            | Notes                          |
+|----------------------|------------------|-------------|---------------------|--------------------------------|
+| capstone             | 6.0.0-Alpha1     | 5.0.6       | vendored            | Needs v6 alpha                 |
+| ImGui                | 1.91.9b-docking  | 1.91.4      | vendored            | Needs docking branch           |
+| nfd                  | 1.2.1            | 1.2.1       | nixpkgs src         | ABI mismatch (NFD_PORTAL)      |
+| PackageProject.cmake | 1.11.1           | -           | vendored            | Transitive dep of PPQSort      |
+| PPQSort              | 1.0.5            | -           | vendored            | Not in nixpkgs                 |
+| zstd                 | 1.5.6            | 1.5.7       | nixpkgs FindPackage | `Findzstd.cmake` alias         |
+| wayland-protocols    | 1.37             | 1.46        | nixpkgs             | XML protocol files only        |
+
+### Tracy 0.13.x
+
+| Dependency           | Tracy Ver        | nixpkgs Ver | Strategy              | Notes                          |
+|----------------------|------------------|-------------|-----------------------|--------------------------------|
+| base64               | 0.5.2            | -           | vendored              | Not in nixpkgs                 |
+| capstone             | 6.0.0-Alpha5     | 5.0.6       | vendored              | Needs v6 alpha                 |
+| curl                 | 8.17.0           | 8.17.0      | nixpkgs               |                                |
+| ImGui                | 1.92.5-docking   | 1.91.4      | vendored              | Needs docking branch           |
+| html-tidy            | 5.8.0            | 5.8.0       | nixpkgs FindPackage   | `Findtidy.cmake` shim          |
+| md4c                 | 0.5.2            | 0.5.2       | nixpkgs               |                                |
+| nfd                  | 1.2.1            | 1.2.1       | nixpkgs src           | ABI mismatch (NFD_PORTAL)      |
+| nlohmann_json        | 3.12.0           | 3.12.0      | nixpkgs FindPackage   | `Findjson.cmake` shim          |
+| PackageProject.cmake | 1.11.1           | -           | vendored              | Transitive dep of PPQSort      |
+| PPQSort              | 1.0.6            | -           | vendored              | Not in nixpkgs                 |
+| pugixml              | 1.15             | 1.15        | nixpkgs               |                                |
+| usearch              | 2.21.3           | -           | vendored              | Not in nixpkgs                 |
+| wayland-protocols    | 1.37             | 1.46        | nixpkgs               | XML protocol files only        |
+| zstd                 | 1.5.6            | 1.5.7       | nixpkgs FindPackage   | `Findzstd.cmake` alias         |
+
+## Devendoring Strategies
+
+## Strategy: nixpkgs
+
+The CPM `NAME` matches the cmake package name and the package provides cmake config or pkg-config.
+
+### Mechanism
+
+With `CPM_LOCAL_PACKAGES_ONLY=TRUE`, CPM calls `find_package()` before attempting download. If the
+nixpkgs package is found, CPM uses it.
+
+### Implementation
+
+Add the nixpkgs dependency to `extrabuildInputs`.
+
+## Strategy: nixpkgs FindPackage
+
+A compatible nixpkgs package exists but either:
+- CPM uses a different `NAME` than the cmake package name
+- cmake target names differ from what tracy expects
+
+### Mechanism
+
+Find modules in `CMAKE_MODULE_PATH` are tried before config files. When `find_package(foo)` is called, cmake finds our `Findfoo.cmake` which can delegate to the real package and create any necessary aliases.
+
+### Implementation
+
+- Add the nixpkgs dependency to `extrabuildInputs`.
+- Create a `Find<dep>.cmake` module in the `cmake` directory and adjust package and target names.
+
+## Strategy: nixpkgs src
+
+Package exists in nixpkgs with compatible source but upstream needs different build options.
+
+### Mechanism
+
+With a `CPM_<dep>_SOURCE` cmake option set, CPM finds the dependency sources in the provided directory.
+
+### Implementation
+
+Add the nixpkgs package `.src` attribute to the `cpmSrcs` list with a `name` attribute matching the
+CPM `NAME`.
+
+## Strategy: Vendored Source
+
+Package is not available in nixpkgs or is incompatible.
+
+### Mechansim
+
+Uses the same mechanism as a nixpkg src, except the source is downloaded with a fetcher such as
+`fetchFromGithub`.
+
+### Implementation
+
+Add an appropriate fetcher to the `cpmSrcs` list, ensuring that the name matches what CPM expects (case-sensitive).
+
diff --git a/pkgs/by-name/tr/tracy/cmake/Findjson.cmake b/pkgs/by-name/tr/tracy/cmake/Findjson.cmake
new file mode 100644
index 000000000000..3c21cd935c0c
--- /dev/null
+++ b/pkgs/by-name/tr/tracy/cmake/Findjson.cmake
@@ -0,0 +1,5 @@
+# tracy CPM uses NAME `json` but nixpkgs provides `nlohmann_json`.
+find_package(nlohmann_json REQUIRED)
+
+set(json_FOUND TRUE)
+set(json_VERSION "${nlohmann_json_VERSION}")
diff --git a/pkgs/by-name/tr/tracy/cmake/Findtidy.cmake b/pkgs/by-name/tr/tracy/cmake/Findtidy.cmake
new file mode 100644
index 000000000000..78b2930c4600
--- /dev/null
+++ b/pkgs/by-name/tr/tracy/cmake/Findtidy.cmake
@@ -0,0 +1,13 @@
+# tracy CPM uses NAME `tidy` and links against `tidy-static`.
+# tracy also uses ${tidy_SOURCE_DIR}/include for headers.
+# nixpkgs `html-tidy` provides `tidy` via pkg-config.
+include(FindPkgConfig)
+pkg_check_modules(TIDY REQUIRED IMPORTED_TARGET tidy)
+
+add_library(tidy-static ALIAS PkgConfig::TIDY)
+
+# TIDY_INCLUDE_DIRS is e.g. /nix/store/.../include, we need the parent
+list(GET TIDY_INCLUDE_DIRS 0 _tidy_inc)
+get_filename_component(tidy_SOURCE_DIR "${_tidy_inc}" DIRECTORY)
+
+set(tidy_FOUND TRUE)
diff --git a/pkgs/by-name/tr/tracy/cmake/Findzstd.cmake b/pkgs/by-name/tr/tracy/cmake/Findzstd.cmake
new file mode 100644
index 000000000000..b6630f565151
--- /dev/null
+++ b/pkgs/by-name/tr/tracy/cmake/Findzstd.cmake
@@ -0,0 +1,7 @@
+# nixpkgs `zstd` provides `zstd::libzstd` but tracy links against `libzstd`.
+#
+# Using CONFIG mode bypasses FindPackage modules, so this won't recurse.
+find_package(zstd CONFIG REQUIRED)
+
+add_library(libzstd INTERFACE IMPORTED GLOBAL)
+target_link_libraries(libzstd INTERFACE zstd::libzstd)
diff --git a/pkgs/by-name/tr/tracy/package-versions.nix b/pkgs/by-name/tr/tracy/package-versions.nix
new file mode 100644
index 000000000000..908f5dbd7281
--- /dev/null
+++ b/pkgs/by-name/tr/tracy/package-versions.nix
@@ -0,0 +1,226 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  fetchFromGitLab,
+  fetchurl,
+  callPackage,
+
+  coreutils,
+  cmake,
+  ninja,
+  pkg-config,
+  wayland-scanner,
+
+  capstone,
+  dbus,
+  freetype,
+  glfw,
+  onetbb,
+
+  withGtkFileSelector ? false,
+  gtk3,
+
+  withWayland ? stdenv.hostPlatform.isLinux,
+  libglvnd,
+  libxkbcommon,
+  wayland,
+  wayland-protocols,
+  libffi,
+
+  md4c,
+  pugixml,
+  curl,
+  zstd,
+  nlohmann_json,
+  nativefiledialog-extended,
+  html-tidy,
+}:
+
+assert withGtkFileSelector -> stdenv.hostPlatform.isLinux;
+
+let
+  mkTracyPackage =
+    {
+      version,
+      srcHash,
+      cpmSrcs ? [ ],
+      patches ? [ ],
+      extraBuildInputs ? [ ],
+    }:
+    stdenv.mkDerivation {
+      inherit patches;
+
+      pname = "tracy";
+      inherit version;
+
+      src = fetchFromGitHub {
+        name = "tracy";
+        owner = "wolfpld";
+        repo = "tracy";
+        rev = "v${version}";
+        hash = "${srcHash}";
+      };
+
+      postUnpack = (
+        lib.strings.concatLines (
+          lib.lists.forEach cpmSrcs (
+            s:
+            # Make CPM sources writable for patches and set CPM_<package>_SOURCE flags
+            ''
+              cp -R ${s.out} ${s.name}
+              chmod -R u+w ${s.name}
+              appendToVar cmakeFlags -DCPM_${s.name}_SOURCE=$(pwd)/${s.name}
+            ''
+
+            # PPQSort tries to download CPM.cmake
+            # Provide it the newer version from tracy instead
+            + lib.optionalString (s.name == "PPQSort") ''
+              cp ./tracy/cmake/CPM.cmake PPQSort/cmake/CPM.cmake
+            ''
+          )
+        )
+      );
+
+      nativeBuildInputs = [
+        cmake
+        ninja
+        pkg-config
+      ]
+      ++ lib.optionals stdenv.hostPlatform.isLinux [ wayland-scanner ]
+      ++ lib.optionals stdenv.cc.isClang [ stdenv.cc.cc.libllvm ];
+
+      buildInputs = [
+        freetype
+        onetbb
+      ]
+      ++ extraBuildInputs
+      ++ lib.optionals (stdenv.hostPlatform.isLinux && withGtkFileSelector) [ gtk3 ]
+      ++ lib.optionals (stdenv.hostPlatform.isLinux && !withGtkFileSelector) [ dbus ]
+      ++ lib.optionals (stdenv.hostPlatform.isLinux && withWayland) [
+        libglvnd
+        libxkbcommon
+        wayland
+        wayland-protocols
+        libffi
+      ]
+      ++ lib.optionals (stdenv.hostPlatform.isDarwin || (stdenv.hostPlatform.isLinux && !withWayland)) [
+        glfw
+      ];
+
+      cmakeFlags = [
+        (lib.cmakeBool "DOWNLOAD_CAPSTONE" false)
+        (lib.cmakeBool "TRACY_STATIC" false)
+        (lib.cmakeBool "CPM_LOCAL_PACKAGES_ONLY" true)
+        (lib.cmakeBool "CPM_FIND_DEBUG_MODE" true)
+        (lib.cmakeFeature "CMAKE_MODULE_PATH" "${./cmake}")
+      ]
+      ++ lib.optional (stdenv.hostPlatform.isLinux && withGtkFileSelector) (
+        lib.cmakeBool "GTK_FILESELECTOR" true
+      )
+      ++ lib.optional (stdenv.hostPlatform.isLinux && !withWayland) (lib.cmakeBool "LEGACY" true)
+      ++ lib.optional (stdenv.hostPlatform.isLinux && withWayland) (
+        lib.cmakeFeature "CPM_wayland-protocols_SOURCE" "${wayland-protocols}/share/wayland-protocols"
+      );
+
+      env.NIX_CFLAGS_COMPILE = lib.optionalString stdenv.hostPlatform.isLinux "-ltbb";
+
+      dontUseCmakeBuildDir = true;
+
+      postConfigure =
+        # CPM_<package>_SOURCE flags prevent downloads but cause each of the sub-projects
+        # to apply the same patches to the same source. The patch tool will return a
+        # non-zero status, failing the build, even if configured to ignore patch re-application.
+        #
+        # The workaround is to first configure the profiler since it includes all of the
+        # dependencies and then short-circuit the patch command for the remaining projects.
+        ''
+          cmake -B profiler/build -S profiler $cmakeFlags
+
+          appendToVar cmakeFlags -DPATCH_EXECUTABLE=${coreutils}/bin/true
+
+          cmake -B capture/build -S capture $cmakeFlags
+          cmake -B csvexport/build -S csvexport $cmakeFlags
+          cmake -B import/build -S import $cmakeFlags
+          cmake -B update/build -S update $cmakeFlags
+        '';
+
+      postBuild = ''
+        ninja -C capture/build
+        ninja -C csvexport/build
+        ninja -C import/build
+        ninja -C profiler/build
+        ninja -C update/build
+      '';
+
+      postInstall = ''
+        install -D -m 0555 capture/build/tracy-capture -t $out/bin
+        install -D -m 0555 csvexport/build/tracy-csvexport $out/bin
+        install -D -m 0555 import/build/{tracy-import-chrome,tracy-import-fuchsia} -t $out/bin
+        install -D -m 0555 profiler/build/tracy-profiler $out/bin/tracy
+        install -D -m 0555 update/build/tracy-update -t $out/bin
+      ''
+      + lib.optionalString stdenv.hostPlatform.isLinux ''
+        substituteInPlace extra/desktop/tracy.desktop \
+          --replace-fail Exec=/usr/bin/tracy Exec=tracy
+
+        install -D -m 0444 extra/desktop/application-tracy.xml $out/share/mime/packages/application-tracy.xml
+        install -D -m 0444 extra/desktop/tracy.desktop $out/share/applications/tracy.desktop
+        install -D -m 0444 icon/application-tracy.svg $out/share/icons/hicolor/scalable/apps/application-tracy.svg
+        install -D -m 0444 icon/icon.png $out/share/icons/hicolor/256x256/apps/tracy.png
+        install -D -m 0444 icon/icon.svg $out/share/icons/hicolor/scalable/apps/tracy.svg
+      '';
+
+      meta = {
+        description = "Real time, nanosecond resolution, remote telemetry frame profiler for games and other applications";
+        homepage = "https://github.com/wolfpld/tracy";
+        license = lib.licenses.bsd3;
+        mainProgram = "tracy";
+        maintainers = with lib.maintainers; [
+          mpickering
+          nagisa
+        ];
+        platforms = lib.platforms.linux ++ lib.optionals (!withWayland) lib.platforms.darwin;
+      };
+    };
+in
+rec {
+  tracy_0_11 = mkTracyPackage (
+    import ./tracy-0.11.nix {
+      inherit
+        lib
+        stdenv
+        capstone
+        ;
+    }
+  );
+
+  tracy_0_12 = mkTracyPackage (
+    import ./tracy-0.12.nix {
+      inherit
+        fetchFromGitHub
+        fetchFromGitLab
+        zstd
+        nativefiledialog-extended
+        ;
+    }
+  );
+
+  tracy_0_13 = mkTracyPackage (
+    import ./tracy-0.13.nix {
+      inherit
+        fetchFromGitHub
+
+        md4c
+        pugixml
+        curl
+        zstd
+        nlohmann_json
+        nativefiledialog-extended
+        html-tidy
+        ;
+    }
+  );
+
+  tracy_latest = tracy_0_13;
+}
diff --git a/pkgs/by-name/tr/tracy/package.nix b/pkgs/by-name/tr/tracy/package.nix
index 5f078ddda337..f73ef36c7c82 100644
--- a/pkgs/by-name/tr/tracy/package.nix
+++ b/pkgs/by-name/tr/tracy/package.nix
@@ -2,7 +2,11 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchFromGitLab,
+  fetchurl,
+  callPackage,
 
+  coreutils,
   cmake,
   ninja,
   pkg-config,
@@ -22,109 +26,54 @@
   libxkbcommon,
   wayland,
   wayland-protocols,
+  libffi,
+
+  md4c,
+  pugixml,
+  curl,
+  zstd,
+  nlohmann_json,
+  nativefiledialog-extended,
+  html-tidy,
 }:
 
-assert withGtkFileSelector -> stdenv.hostPlatform.isLinux;
+(import ./package-versions.nix {
+  inherit
+    lib
+    stdenv
+    fetchFromGitHub
+    fetchFromGitLab
+    fetchurl
+    callPackage
 
-stdenv.mkDerivation (finalAttrs: {
-  pname = if withWayland then "tracy-wayland" else "tracy-glfw";
-  version = "0.11.1";
-
-  src = fetchFromGitHub {
-    owner = "wolfpld";
-    repo = "tracy";
-    rev = "v${finalAttrs.version}";
-    hash = "sha256-HofqYJT1srDJ6Y1f18h7xtAbI/Gvvz0t9f0wBNnOZK8=";
-  };
-
-  patches = lib.optional (
-    stdenv.hostPlatform.isDarwin && lib.versionOlder stdenv.hostPlatform.darwinMinVersion "11"
-  ) ./dont-use-the-uniformtypeidentifiers-framework.patch;
-
-  nativeBuildInputs = [
+    coreutils
     cmake
     ninja
     pkg-config
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isLinux [ wayland-scanner ]
-  ++ lib.optionals stdenv.cc.isClang [ stdenv.cc.cc.libllvm ];
+    wayland-scanner
 
-  buildInputs = [
     capstone
+    dbus
     freetype
+    glfw
     onetbb
-  ]
-  ++ lib.optionals (stdenv.hostPlatform.isLinux && withGtkFileSelector) [ gtk3 ]
-  ++ lib.optionals (stdenv.hostPlatform.isLinux && !withGtkFileSelector) [ dbus ]
-  ++ lib.optionals (stdenv.hostPlatform.isLinux && withWayland) [
+
+    withGtkFileSelector
+    gtk3
+
+    withWayland
     libglvnd
     libxkbcommon
     wayland
     wayland-protocols
-  ]
-  ++ lib.optionals (stdenv.hostPlatform.isDarwin || (stdenv.hostPlatform.isLinux && !withWayland)) [
-    glfw
-  ];
+    libffi
 
-  cmakeFlags = [
-    "-DDOWNLOAD_CAPSTONE=off"
-    "-DTRACY_STATIC=off"
-  ]
-  ++ lib.optional (stdenv.hostPlatform.isLinux && withGtkFileSelector) "-DGTK_FILESELECTOR=ON"
-  ++ lib.optional (stdenv.hostPlatform.isLinux && !withWayland) "-DLEGACY=on";
-
-  env.NIX_CFLAGS_COMPILE = toString (
-    [ ]
-    ++ lib.optional stdenv.hostPlatform.isLinux "-ltbb"
-    # Workaround for https://github.com/NixOS/nixpkgs/issues/19098
-    ++ lib.optional (stdenv.cc.isClang && stdenv.hostPlatform.isDarwin) "-fno-lto"
-  );
-
-  dontUseCmakeBuildDir = true;
-
-  postConfigure = ''
-    cmake -B capture/build -S capture $cmakeFlags
-    cmake -B csvexport/build -S csvexport $cmakeFlags
-    cmake -B import/build -S import $cmakeFlags
-    cmake -B profiler/build -S profiler $cmakeFlags
-    cmake -B update/build -S update $cmakeFlags
-  '';
-
-  postBuild = ''
-    ninja -C capture/build
-    ninja -C csvexport/build
-    ninja -C import/build
-    ninja -C profiler/build
-    ninja -C update/build
-  '';
-
-  postInstall = ''
-    install -D -m 0555 capture/build/tracy-capture -t $out/bin
-    install -D -m 0555 csvexport/build/tracy-csvexport $out/bin
-    install -D -m 0555 import/build/{tracy-import-chrome,tracy-import-fuchsia} -t $out/bin
-    install -D -m 0555 profiler/build/tracy-profiler $out/bin/tracy
-    install -D -m 0555 update/build/tracy-update -t $out/bin
-  ''
-  + lib.optionalString stdenv.hostPlatform.isLinux ''
-    substituteInPlace extra/desktop/tracy.desktop \
-      --replace-fail Exec=/usr/bin/tracy Exec=tracy
-
-    install -D -m 0444 extra/desktop/application-tracy.xml $out/share/mime/packages/application-tracy.xml
-    install -D -m 0444 extra/desktop/tracy.desktop $out/share/applications/tracy.desktop
-    install -D -m 0444 icon/application-tracy.svg $out/share/icons/hicolor/scalable/apps/application-tracy.svg
-    install -D -m 0444 icon/icon.png $out/share/icons/hicolor/256x256/apps/tracy.png
-    install -D -m 0444 icon/icon.svg $out/share/icons/hicolor/scalable/apps/tracy.svg
-  '';
-
-  meta = {
-    description = "Real time, nanosecond resolution, remote telemetry frame profiler for games and other applications";
-    homepage = "https://github.com/wolfpld/tracy";
-    license = lib.licenses.bsd3;
-    mainProgram = "tracy";
-    maintainers = with lib.maintainers; [
-      mpickering
-      nagisa
-    ];
-    platforms = lib.platforms.linux ++ lib.optionals (!withWayland) lib.platforms.darwin;
-  };
-})
+    md4c
+    pugixml
+    curl
+    zstd
+    nlohmann_json
+    nativefiledialog-extended
+    html-tidy
+    ;
+}).tracy_latest
diff --git a/pkgs/by-name/tr/tracy/tracy-0.11.nix b/pkgs/by-name/tr/tracy/tracy-0.11.nix
new file mode 100644
index 000000000000..66af63dee7bb
--- /dev/null
+++ b/pkgs/by-name/tr/tracy/tracy-0.11.nix
@@ -0,0 +1,17 @@
+{
+  lib,
+  stdenv,
+
+  capstone,
+}:
+
+{
+  version = "0.11.1";
+  srcHash = "sha256-HofqYJT1srDJ6Y1f18h7xtAbI/Gvvz0t9f0wBNnOZK8=";
+  patches = lib.optional (
+    stdenv.hostPlatform.isDarwin && lib.versionOlder stdenv.hostPlatform.darwinMinVersion "11"
+  ) ./dont-use-the-uniformtypeidentifiers-framework.patch;
+  extraBuildInputs = [
+    capstone
+  ];
+}
diff --git a/pkgs/by-name/tr/tracy/tracy-0.12.nix b/pkgs/by-name/tr/tracy/tracy-0.12.nix
new file mode 100644
index 000000000000..b6204f9f833a
--- /dev/null
+++ b/pkgs/by-name/tr/tracy/tracy-0.12.nix
@@ -0,0 +1,45 @@
+{
+  fetchFromGitHub,
+  fetchFromGitLab,
+
+  zstd,
+  nativefiledialog-extended,
+}:
+{
+  version = "0.12.2";
+  srcHash = "sha256-voHql8ETnrUMef14LYduKI+0LpdnCFsvpt8B6M/ZNmc=";
+  extraBuildInputs = [ zstd ];
+  cpmSrcs = [
+    (fetchFromGitHub {
+      name = "ImGui";
+      owner = "ocornut";
+      repo = "imgui";
+      rev = "v1.91.9b-docking";
+      hash = "sha256-mQOJ6jCN+7VopgZ61yzaCnt4R1QLrW7+47xxMhFRHLQ=";
+    })
+    # Use nixpkgs source but let CPM build with tracy's options (NFD_PORTAL)
+    (nativefiledialog-extended.src // { name = "nfd"; })
+    (fetchFromGitHub {
+      name = "PPQSort";
+      owner = "GabTux";
+      repo = "PPQSort";
+      rev = "v1.0.5";
+      hash = "sha256-EMZVI/uyzwX5637/rdZuMZoql5FTrsx0ESJMdLVDmfk=";
+    })
+    # Transitive from PPQSort
+    (fetchFromGitHub {
+      name = "PackageProject.cmake";
+      owner = "TheLartians";
+      repo = "PackageProject.cmake";
+      rev = "v1.11.1";
+      hash = "sha256-E7WZSYDlss5bidbiWL1uX41Oh6JxBRtfhYsFU19kzIw=";
+    })
+    (fetchFromGitHub {
+      name = "capstone";
+      owner = "capstone-engine";
+      repo = "capstone";
+      rev = "6.0.0-Alpha1";
+      hash = "sha256-oKRu3P1inWueEMIpL0uI2ayCMHZ9FIVotil4sqwLqH4=";
+    })
+  ];
+}
diff --git a/pkgs/by-name/tr/tracy/tracy-0.13.nix b/pkgs/by-name/tr/tracy/tracy-0.13.nix
new file mode 100644
index 000000000000..0a82e2898d40
--- /dev/null
+++ b/pkgs/by-name/tr/tracy/tracy-0.13.nix
@@ -0,0 +1,71 @@
+{
+  fetchFromGitHub,
+
+  md4c,
+  pugixml,
+  curl,
+  zstd,
+  nlohmann_json,
+  nativefiledialog-extended,
+  html-tidy,
+}:
+{
+  version = "0.13.1";
+  srcHash = "sha256-D4aQ5kSfWH9qEUaithR0W/E5pN5on0n9YoBHeMggMSE=";
+  extraBuildInputs = [
+    md4c
+    pugixml
+    curl
+    zstd
+    nlohmann_json
+    html-tidy
+  ];
+  cpmSrcs = [
+    (fetchFromGitHub {
+      name = "ImGui";
+      owner = "ocornut";
+      repo = "imgui";
+      rev = "v1.92.5-docking";
+      hash = "sha256-/jVT7+874LCeSF/pdNVTFoSOfRisSqxCJnt5/SGCXPQ=";
+    })
+    # Use nixpkgs source but let CPM build with tracy's options (NFD_PORTAL)
+    (nativefiledialog-extended.src // { name = "nfd"; })
+    (fetchFromGitHub {
+      name = "PPQSort";
+      owner = "GabTux";
+      repo = "PPQSort";
+      rev = "v1.0.6";
+      hash = "sha256-HgM+p2QGd9C8A8l/VaEB+cLFDrY2HU6mmXyTNh7xd0A=";
+    })
+    # Transitive from PPQSort
+    (fetchFromGitHub {
+      name = "PackageProject.cmake";
+      owner = "TheLartians";
+      repo = "PackageProject.cmake";
+      rev = "v1.11.1";
+      hash = "sha256-E7WZSYDlss5bidbiWL1uX41Oh6JxBRtfhYsFU19kzIw=";
+    })
+    (fetchFromGitHub {
+      name = "capstone";
+      owner = "capstone-engine";
+      repo = "capstone";
+      rev = "6.0.0-Alpha5";
+      hash = "sha256-18PTj4hvBw8RTgzaFGeaDbBfkxmotxSoGtprIjcEuVg=";
+    })
+    (fetchFromGitHub {
+      name = "base64";
+      owner = "aklomp";
+      repo = "base64";
+      rev = "v0.5.2";
+      hash = "sha256-dIaNfQ/znpAdg0/vhVNTfoaG7c8eFrdDTI0QDHcghXU=";
+    })
+    (fetchFromGitHub {
+      name = "usearch";
+      owner = "unum-cloud";
+      repo = "usearch";
+      rev = "v2.21.3";
+      fetchSubmodules = true;
+      hash = "sha256-7IylunAkVNceKSXzCkcpp/kAsI3XoqniHe10u3teUVA=";
+    })
+  ];
+}
diff --git a/pkgs/by-name/tr/tremc/package.nix b/pkgs/by-name/tr/tremc/package.nix
index 213185c421d2..59220f0bf27a 100644
--- a/pkgs/by-name/tr/tremc/package.nix
+++ b/pkgs/by-name/tr/tremc/package.nix
@@ -9,7 +9,7 @@
   useGeoIP ? false, # Require /var/lib/geoip-databases/GeoIP.dat
 }:
 let
-  version = "0.9.5";
+  version = "0.9.6";
 in
 python3Packages.buildPythonApplication {
   pname = "tremc";
@@ -20,7 +20,7 @@ python3Packages.buildPythonApplication {
     owner = "tremc";
     repo = "tremc";
     tag = version;
-    hash = "sha256-t7GH3flTLN8O+nnv/kwwzu5x3VoCyF11bqb1EJ8LQs8=";
+    hash = "sha256-GbQ1x973M9sP9360gEzCypU7JlxwH/Uo/tUUQRlNfC8=";
   };
 
   pythonPath =
diff --git a/pkgs/by-name/tr/trilium-desktop/package.nix b/pkgs/by-name/tr/trilium-desktop/package.nix
index e846362e50e6..be13017ad1bb 100644
--- a/pkgs/by-name/tr/trilium-desktop/package.nix
+++ b/pkgs/by-name/tr/trilium-desktop/package.nix
@@ -15,7 +15,7 @@
 
 let
   pname = "trilium-desktop";
-  version = "0.102.0";
+  version = "0.102.1";
 
   triliumSource = os: arch: hash: {
     url = "https://github.com/TriliumNext/Trilium/releases/download/v${version}/TriliumNotes-v${version}-${os}-${arch}.zip";
@@ -26,10 +26,10 @@ let
   darwinSource = triliumSource "macos";
 
   # exposed like this for update.sh
-  x86_64-linux.hash = "sha256-/M7Quq7tgnrp/x7845fA041snC4ybIxculA3IXah5zs=";
-  aarch64-linux.hash = "sha256-9ONccvxAhPrO3Sj1wSlb93G0zrtEiD4jD0vyr3W11X0=";
-  x86_64-darwin.hash = "sha256-yaxv5LynfCOdNMHjmV3uFDBzlxtSZCDOFnUV577z8N8=";
-  aarch64-darwin.hash = "sha256-Rr3da4R/7rT5ippGE38RWOGT+W0yXp5S43Mo1nFdzMw=";
+  x86_64-linux.hash = "sha256-whGKMEruDqQjXEwYa3xlaoZPERWMmI541X4HZSzLla0=";
+  aarch64-linux.hash = "sha256-mTs+5j2jYKRW1cMQgs9SLp4UxpaE0lT41HG4AhIb+xE=";
+  x86_64-darwin.hash = "sha256-lkebqEMY37A6y3W2KjENIPys0cH+fGPFYeK/n4nPd1Y=";
+  aarch64-darwin.hash = "sha256-nIodFvyPI7LJUE4PI1BMwI3Xnz/OfzMrgaHHkltUgKw=";
 
   sources = {
     x86_64-linux = linuxSource "x64" x86_64-linux.hash;
diff --git a/pkgs/by-name/tr/trilium-server/package.nix b/pkgs/by-name/tr/trilium-server/package.nix
index 2ea9e4847a1e..d117c280891f 100644
--- a/pkgs/by-name/tr/trilium-server/package.nix
+++ b/pkgs/by-name/tr/trilium-server/package.nix
@@ -7,12 +7,12 @@
 }:
 
 let
-  version = "0.102.0";
+  version = "0.102.1";
 
   serverSource_x64.url = "https://github.com/TriliumNext/Trilium/releases/download/v${version}/TriliumNotes-Server-v${version}-linux-x64.tar.xz";
-  serverSource_x64.hash = "sha256-EC4Ige8ox2+twzpsQcT0DDjZlP74zpHSk2IAK6txcJs=";
+  serverSource_x64.hash = "sha256-5UW+3VrexXbtfVEcoPGEl1cu44nX89a88ny5o2pSv1I=";
   serverSource_arm64.url = "https://github.com/TriliumNext/Trilium/releases/download/v${version}/TriliumNotes-Server-v${version}-linux-arm64.tar.xz";
-  serverSource_arm64.hash = "sha256-uXFm5mzkYeupSTUnBgnyBa9oEP6px0ATINEN0imQbdw=";
+  serverSource_arm64.hash = "sha256-uwOYXCoWmpRK2XQfSYervEzdbwHy0qQ+OkRh6izvDNM=";
 
   serverSource =
     if stdenv.hostPlatform.isx86_64 then
diff --git a/pkgs/by-name/tr/trivy/package.nix b/pkgs/by-name/tr/trivy/package.nix
index 2a61ab21df21..c93a71bf04fa 100644
--- a/pkgs/by-name/tr/trivy/package.nix
+++ b/pkgs/by-name/tr/trivy/package.nix
@@ -10,19 +10,19 @@
 
 buildGoModule (finalAttrs: {
   pname = "trivy";
-  version = "0.69.1";
+  version = "0.69.3";
 
   src = fetchFromGitHub {
     owner = "aquasecurity";
     repo = "trivy";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-0BzqkLT4puBfBweu+3WIEepkpzr0LyHXL7/DrhjyxNs=";
+    hash = "sha256-lzFcLyrORA+1LxS4nzJVvilg29GTNiGRmnjJ47ev/yU=";
   };
 
   # Hash mismatch on across Linux and Darwin
   proxyVendor = true;
 
-  vendorHash = "sha256-GLHr2bLAt3jIOz+E38fryca3r9QqC31sjSOXXk3UP0w=";
+  vendorHash = "sha256-aqSB2pakYH713GSbIAHwAL9Gio17MzZtwqfh9sbzDBs=";
 
   subPackages = [ "cmd/trivy" ];
 
diff --git a/pkgs/by-name/tr/troubadix/package.nix b/pkgs/by-name/tr/troubadix/package.nix
index 305a4879c24e..9fc1e7d8ee20 100644
--- a/pkgs/by-name/tr/troubadix/package.nix
+++ b/pkgs/by-name/tr/troubadix/package.nix
@@ -7,14 +7,14 @@
 
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "troubadix";
-  version = "26.2.2";
+  version = "26.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "greenbone";
     repo = "troubadix";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-N287cfQcqnlB9c4VM80XU2I2o2+buspkkL8w4zob8Js=";
+    hash = "sha256-E4pgTZErn9Mdrz66Wz7sf7zEDIN6WbVvHlToj8ozIr0=";
   };
 
   pythonRelaxDeps = [
diff --git a/pkgs/by-name/tu/turborepo-remote-cache/package.nix b/pkgs/by-name/tu/turborepo-remote-cache/package.nix
index 9479a3b82fe6..0a151a358720 100644
--- a/pkgs/by-name/tu/turborepo-remote-cache/package.nix
+++ b/pkgs/by-name/tu/turborepo-remote-cache/package.nix
@@ -9,6 +9,7 @@
   fetchPnpmDeps,
   makeWrapper,
   nix-update-script,
+  nixosTests,
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "turborepo-remote-cache";
@@ -73,7 +74,10 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     runHook postInstall
   '';
 
-  passthru.updateScript = nix-update-script { };
+  passthru = {
+    tests = { inherit (nixosTests) turborepo-remote-cache; };
+    updateScript = nix-update-script { };
+  };
 
   meta = {
     homepage = "https://github.com/ducktors/turborepo-remote-cache";
diff --git a/pkgs/by-name/uh/uhttpd/package.nix b/pkgs/by-name/uh/uhttpd/package.nix
index 1326eb93aabf..c5293b422df7 100644
--- a/pkgs/by-name/uh/uhttpd/package.nix
+++ b/pkgs/by-name/uh/uhttpd/package.nix
@@ -43,7 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
     "-DLUA_SUPPORT=on"
   ];
 
-  NIX_LDFLAGS = "-lcrypt";
+  env.NIX_LDFLAGS = "-lcrypt";
 
   postInstall = ''
     wrapProgram $out/bin/uhttpd \
diff --git a/pkgs/by-name/up/uplosi/package.nix b/pkgs/by-name/up/uplosi/package.nix
index daa4743654e2..9e8bf5ae129b 100644
--- a/pkgs/by-name/up/uplosi/package.nix
+++ b/pkgs/by-name/up/uplosi/package.nix
@@ -46,6 +46,7 @@ buildGoModule (finalAttrs: {
     maintainers = with lib.maintainers; [
       katexochen
       malt3
+      charludo
     ];
     platforms = lib.platforms.unix;
   };
diff --git a/pkgs/by-name/uv/uv/package.nix b/pkgs/by-name/uv/uv/package.nix
index e2369f7fc84d..00c00908f43d 100644
--- a/pkgs/by-name/uv/uv/package.nix
+++ b/pkgs/by-name/uv/uv/package.nix
@@ -18,16 +18,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "uv";
-  version = "0.10.8";
+  version = "0.10.9";
 
   src = fetchFromGitHub {
     owner = "astral-sh";
     repo = "uv";
     tag = finalAttrs.version;
-    hash = "sha256-kdIzLKdpqEnIo4ca7fAaerF8IRw1UTpn3deMZ/HCbAk=";
+    hash = "sha256-IAbewFab4X21SYqhjfxfWI9LsNSNVMIChbNc3j3EJQA=";
   };
 
-  cargoHash = "sha256-ZIgDdP3O9MI5k6hePo2yMcrVoGVRm9Fno5NVqUbOSWw=";
+  cargoHash = "sha256-LqrHze1MVaWq31Td/EGDeJCG+hRmPOSV1t7+ayQorlA=";
 
   buildInputs = [
     rust-jemalloc-sys
diff --git a/pkgs/by-name/ve/vesktop/package.nix b/pkgs/by-name/ve/vesktop/package.nix
index 02c902c4a8b5..bed9156bf587 100644
--- a/pkgs/by-name/ve/vesktop/package.nix
+++ b/pkgs/by-name/ve/vesktop/package.nix
@@ -13,7 +13,7 @@
   pipewire,
   libpulseaudio,
   autoPatchelfHook,
-  pnpm_10,
+  pnpm_10_29_2,
   fetchPnpmDeps,
   pnpmConfigHook,
   nodejs,
@@ -46,7 +46,7 @@ stdenv.mkDerivation (finalAttrs: {
       src
       patches
       ;
-    pnpm = pnpm_10;
+    pnpm = pnpm_10_29_2;
     fetcherVersion = 2;
     hash = "sha256-o9dxtqXfCKTQpvNrbD/h0F3Hh39TEEA1qqYA9tN3j5I=";
   };
@@ -54,7 +54,7 @@ stdenv.mkDerivation (finalAttrs: {
   nativeBuildInputs = [
     nodejs
     pnpmConfigHook
-    pnpm_10
+    pnpm_10_29_2
     jq
   ]
   ++ lib.optionals stdenv.hostPlatform.isLinux [
diff --git a/pkgs/by-name/vi/vikunja-desktop/package.nix b/pkgs/by-name/vi/vikunja-desktop/package.nix
index e7a0985d9496..658e44a14d11 100644
--- a/pkgs/by-name/vi/vikunja-desktop/package.nix
+++ b/pkgs/by-name/vi/vikunja-desktop/package.nix
@@ -3,7 +3,7 @@
   stdenv,
   makeWrapper,
   makeDesktopItem,
-  pnpm,
+  pnpm_10_29_2,
   pnpmConfigHook,
   nodejs,
   electron,
@@ -39,6 +39,7 @@ stdenv.mkDerivation (finalAttrs: {
       sourceRoot
       pnpmInstallFlags
       ;
+    pnpm = pnpm_10_29_2;
     fetcherVersion = 1;
     hash = "sha256-yiVlEr1gi2g3m+hkYfDv6qd/wRlwwknM6lAaIeR58Ok=";
   };
@@ -50,7 +51,7 @@ stdenv.mkDerivation (finalAttrs: {
   nativeBuildInputs = [
     makeWrapper
     nodejs
-    pnpm
+    pnpm_10_29_2
     pnpmConfigHook
     vikunja.passthru.frontend
   ];
diff --git a/pkgs/by-name/vi/vikunja/package.nix b/pkgs/by-name/vi/vikunja/package.nix
index 07e9c5424849..d66f71f8c894 100644
--- a/pkgs/by-name/vi/vikunja/package.nix
+++ b/pkgs/by-name/vi/vikunja/package.nix
@@ -3,7 +3,7 @@
   fetchFromGitHub,
   stdenv,
   nodejs_24,
-  pnpm_10,
+  pnpm_10_29_2,
   fetchPnpmDeps,
   pnpmConfigHook,
   buildGoModule,
@@ -35,7 +35,7 @@ let
         src
         sourceRoot
         ;
-      pnpm = pnpm_10;
+      pnpm = pnpm_10_29_2;
       fetcherVersion = 1;
       hash = "sha256-oY8DXJFFwLBjUno3EithLhmnA8hTksq4xgMSSOGtwuo=";
     };
@@ -44,7 +44,7 @@ let
       nodejs_24
       dart-sass
       pnpmConfigHook
-      pnpm_10
+      pnpm_10_29_2
     ];
 
     doCheck = true;
diff --git a/pkgs/by-name/vo/voicevox/package.nix b/pkgs/by-name/vo/voicevox/package.nix
index be05fd058311..eec83720f5bd 100644
--- a/pkgs/by-name/vo/voicevox/package.nix
+++ b/pkgs/by-name/vo/voicevox/package.nix
@@ -13,7 +13,7 @@
   nodejs,
   fetchPnpmDeps,
   pnpmConfigHook,
-  pnpm,
+  pnpm_10_29_2,
 
   _7zz,
   electron,
@@ -58,6 +58,8 @@ stdenv.mkDerivation (finalAttrs: {
       postPatch
       ;
 
+    pnpm = pnpm_10_29_2;
+
     # let's just be safe and add these explicitly to nativeBuildInputs
     # even though the fetcher already uses them in its implementation
     nativeBuildInputs = [
@@ -76,7 +78,7 @@ stdenv.mkDerivation (finalAttrs: {
     moreutils
     nodejs
     pnpmConfigHook
-    pnpm
+    pnpm_10_29_2
   ]
   ++ lib.optionals stdenv.hostPlatform.isLinux [
     copyDesktopItems
diff --git a/pkgs/by-name/wa/walker/package.nix b/pkgs/by-name/wa/walker/package.nix
index 70e52b8f14cd..2c2238b520f4 100644
--- a/pkgs/by-name/wa/walker/package.nix
+++ b/pkgs/by-name/wa/walker/package.nix
@@ -20,16 +20,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "walker";
-  version = "2.14.2";
+  version = "2.15.1";
 
   src = fetchFromGitHub {
     owner = "abenz1267";
     repo = "walker";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-y1jBFFO0u+V21y3YldHZozrDwVJVrdC+o3c4M8/rasU=";
+    hash = "sha256-8ybD6u78Em3Vbm+yFNa4mCxSDjr047Twcwo4jEz+3Uo=";
   };
 
-  cargoHash = "sha256-7QQdHbkwjVcZCd2FaBxLL5BUSoWjTsH1GuDhzh7DuRY=";
+  cargoHash = "sha256-UrZw/FXBWIl2fQbGrTnT0ae7XEKdvuJXZuUeYFFgzrs=";
 
   nativeBuildInputs = [
     gobject-introspection
@@ -60,9 +60,11 @@ rustPlatform.buildRustPackage (finalAttrs: {
   meta = {
     description = "Wayland-native application runner";
     homepage = "https://github.com/abenz1267/walker";
+    changelog = "https://github.com/abenz1267/walker/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
     platforms = lib.platforms.linux;
     maintainers = with lib.maintainers; [
+      adamcstephens
       donovanglover
       saadndm
     ];
diff --git a/pkgs/by-name/we/weblate/package.nix b/pkgs/by-name/we/weblate/package.nix
index ec57bb40499e..352bf4872b0e 100644
--- a/pkgs/by-name/we/weblate/package.nix
+++ b/pkgs/by-name/we/weblate/package.nix
@@ -94,7 +94,6 @@ python3Packages.buildPythonApplication (finalAttrs: {
   pythonRelaxDeps = [
     "certifi"
     "crispy-bootstrap5"
-    "urllib3"
   ];
 
   dependencies =
@@ -123,9 +122,9 @@ python3Packages.buildPythonApplication (finalAttrs: {
       django-cors-headers
       django-crispy-forms
       django-filter
-      django-redis
-      django-otp
       django-otp-webauthn
+      django-otp
+      django-redis
       django
       djangorestframework-csv
       djangorestframework
@@ -157,6 +156,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
       qrcode
       rapidfuzz
       redis
+      regex
       requests
       ruamel-yaml
       sentry-sdk
@@ -188,7 +188,6 @@ python3Packages.buildPythonApplication (finalAttrs: {
       aliyun-python-sdk-core
     ];
     amazon = [ boto3 ];
-    # antispam = [ python-akismet ];
     # gelf = [ logging-gelf ];
     # gerrit = [ git-review ];
     google = [
diff --git a/pkgs/by-name/wh/wheelwizard/package.nix b/pkgs/by-name/wh/wheelwizard/package.nix
index ee98afc7ead3..c1663a9e5fc5 100644
--- a/pkgs/by-name/wh/wheelwizard/package.nix
+++ b/pkgs/by-name/wh/wheelwizard/package.nix
@@ -14,13 +14,13 @@
 }:
 buildDotnetModule rec {
   pname = "wheelwizard";
-  version = "2.4.0";
+  version = "2.4.1";
 
   src = fetchFromGitHub {
     owner = "TeamWheelWizard";
     repo = "WheelWizard";
     tag = version;
-    hash = "sha256-3qFJ08v9JI7VDSG9Nm0EuWJG8WHVLfpkk8TLYezWV5Y=";
+    hash = "sha256-pxz4aZozpQQB8GgL/D2AgbtCy+cTbd5DNsODoDd2Xa0=";
   };
   postPatch = ''
     rm .config/dotnet-tools.json
diff --git a/pkgs/by-name/wh/whitesur-icon-theme/package.nix b/pkgs/by-name/wh/whitesur-icon-theme/package.nix
index e3d56ce1e413..786068701a74 100644
--- a/pkgs/by-name/wh/whitesur-icon-theme/package.nix
+++ b/pkgs/by-name/wh/whitesur-icon-theme/package.nix
@@ -31,13 +31,13 @@ lib.checkListOfEnum "${pname}: theme variants"
   stdenvNoCC.mkDerivation
   rec {
     inherit pname;
-    version = "2025-08-02";
+    version = "2025-12-27";
 
     src = fetchFromGitHub {
       owner = "vinceliuice";
       repo = "WhiteSur-icon-theme";
       tag = version;
-      hash = "sha256-oBKDvCVHEjN6JT0r0G+VndzijEWU9L8AvDhHQTmw2E4=";
+      hash = "sha256-5AWyuqREKpgBCXPplpkdrcInDTZfjVIm/JtTleOmaNY=";
     };
 
     nativeBuildInputs = [
@@ -70,6 +70,11 @@ lib.checkListOfEnum "${pname}: theme variants"
       runHook postInstall
     '';
 
+    # Drop dangling symlinks from the upstream icon set.
+    postFixup = ''
+      find $out/share/icons -xtype l -delete
+    '';
+
     meta = {
       description = "MacOS Big Sur style icon theme for Linux desktops";
       homepage = "https://github.com/vinceliuice/WhiteSur-icon-theme";
diff --git a/pkgs/by-name/xn/xnldorker/package.nix b/pkgs/by-name/xn/xnldorker/package.nix
index 44666da707b1..bc10bac29b5c 100644
--- a/pkgs/by-name/xn/xnldorker/package.nix
+++ b/pkgs/by-name/xn/xnldorker/package.nix
@@ -7,14 +7,14 @@
 
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "xnldorker";
-  version = "4.1";
+  version = "4.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "xnl-h4ck3r";
     repo = "xnldorker";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-k0nTY3n5g7cNsVVWDcdFpCjQVJCErPp/21iz2R/TTGs=";
+    hash = "sha256-g5o2H5FqP+ytu5eqmGUyn0lD9NQcCJ4+xQCmTk0Qxrg=";
   };
 
   pythonRemoveDeps = [
diff --git a/pkgs/by-name/yu/yubihsm-connector/package.nix b/pkgs/by-name/yu/yubihsm-connector/package.nix
index a84d124bbfeb..751e37287642 100644
--- a/pkgs/by-name/yu/yubihsm-connector/package.nix
+++ b/pkgs/by-name/yu/yubihsm-connector/package.nix
@@ -4,20 +4,26 @@
   buildGoModule,
   fetchFromGitHub,
   pkg-config,
+  versionCheckHook,
 }:
 
 buildGoModule (finalAttrs: {
   pname = "yubihsm-connector";
-  version = "3.0.5";
+  version = "3.0.7";
 
   src = fetchFromGitHub {
     owner = "Yubico";
     repo = "yubihsm-connector";
     rev = finalAttrs.version;
-    hash = "sha256-hiCh/TG1epSmJtaptfVzcPklDTaBh0biKqfM01YoWo0=";
+    hash = "sha256-ddf8IamX8wC8IG9puFDoSKsVqc9KE/LtsJ0Wk0FFquw=";
   };
 
-  vendorHash = "sha256-XW7rEHY3S+M3b6QjmINgrCak+BqCEV3PJP90jz7J47A=";
+  # Don't run go generate in the module fetching
+  overrideModAttrs = _: {
+    preBuild = null;
+  };
+
+  vendorHash = "sha256-vtIXFOptDbBKjnDUSD9ng5tnfYQ3lklwgcEUvKMdCOM=";
 
   nativeBuildInputs = [
     pkg-config
@@ -36,10 +42,17 @@ buildGoModule (finalAttrs: {
     GOOS= GOARCH= go generate
   '';
 
+  doInstallCheck = true;
+  installCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "version";
+
   meta = {
     description = "Performs the communication between the YubiHSM 2 and applications that use it";
     homepage = "https://developers.yubico.com/yubihsm-connector/";
-    maintainers = with lib.maintainers; [ matthewcroughan ];
+    maintainers = with lib.maintainers; [
+      matthewcroughan
+      numinit
+    ];
     license = lib.licenses.asl20;
     mainProgram = "yubihsm-connector";
   };
diff --git a/pkgs/by-name/yu/yubihsm-shell/package.nix b/pkgs/by-name/yu/yubihsm-shell/package.nix
index cbc4571fe2f3..3cec92b5d7b7 100644
--- a/pkgs/by-name/yu/yubihsm-shell/package.nix
+++ b/pkgs/by-name/yu/yubihsm-shell/package.nix
@@ -2,53 +2,53 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  fetchpatch,
   cmake,
   openssl,
   libusb1,
   libedit,
+  makeWrapper,
   curl,
   gengetopt,
+  patchelf,
   pkg-config,
   pcsclite,
   help2man,
   libiconv,
+
+  # for installCheckPhase
+  versionCheckHook,
+  jq,
+  yubihsm-connector,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "yubihsm-shell";
-  version = "2.7.0";
+  version = "2.7.1";
 
   src = fetchFromGitHub {
     owner = "Yubico";
     repo = "yubihsm-shell";
     rev = finalAttrs.version;
-    hash = "sha256-ymGS35kjhNlFee3FEXF8n6Jm7NVaynjv+lpix6F75BQ=";
+    hash = "sha256-/hmG7yVxCVTrpmm/S7oDKQQyXIEO+S5D9wMTc7oW9Io=";
   };
 
-  patches = [
-    (fetchpatch {
-      url = "https://github.com/Yubico/yubihsm-shell/pull/493.patch";
-      hash = "sha256-mM4ef1GV7BJT+EZ8B7+ejleTocglhxCWO/RKHZN69GE=";
-    })
-  ];
-
   postPatch = ''
-    # Can't find libyubihsm at runtime because of dlopen() in C code
-    substituteInPlace lib/yubihsm.c \
-      --replace "libyubihsm_usb.so" "$out/lib/libyubihsm_usb.so" \
-      --replace "libyubihsm_http.so" "$out/lib/libyubihsm_http.so"
     # ld: unknown option: -z
     substituteInPlace CMakeLists.txt cmake/SecurityFlags.cmake \
-      --replace "AppleClang" "Clang"
+      --replace-fail "AppleClang" "Clang"
   '';
 
-  nativeBuildInputs = [
-    pkg-config
-    cmake
-    help2man
-    gengetopt
-  ];
+  nativeBuildInputs =
+    lib.optionals stdenv.hostPlatform.isLinux [
+      patchelf
+    ]
+    ++ [
+      pkg-config
+      cmake
+      help2man
+      gengetopt
+      makeWrapper
+    ];
 
   buildInputs = [
     libusb1
@@ -63,14 +63,47 @@ stdenv.mkDerivation (finalAttrs: {
     libiconv
   ];
 
-  preBuild = lib.optionalString stdenv.hostPlatform.isLinux ''
-    NIX_CFLAGS_COMPILE="$(pkg-config --cflags libpcsclite) $NIX_CFLAGS_COMPILE"
-  '';
-
   # causes redefinition of _FORTIFY_SOURCE
   hardeningDisable = [ "fortify3" ];
 
+  # libyubihsm.so performs a dlopen() to connectors in $out/lib,
+  # this will solve search path issues for both the command line tools
+  # and the PKCS#11 library without patching
+  postFixup =
+    lib.optionalString stdenv.hostPlatform.isLinux ''
+      patchelf --force-rpath --add-rpath "$out/lib" "$out/lib/libyubihsm.so"
+    ''
+    + lib.optionalString stdenv.hostPlatform.isDarwin ''
+      install_name_tool -add_rpath "$out/lib" "$out/lib/libyubihsm.dylib"
+    '';
+
+  doInstallCheck = true;
+
+  __darwinAllowLocalNetworking = true;
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+    yubihsm-connector
+  ];
+
+  installCheckPhase = ''
+    runHook preInstallCheck
+
+    # yubihsm-shell should be able to connect to yubihsm-connector over http if postFixup worked
+    # note that checkPhase is more extensive and seems to require a YubiHSM plugged in,
+    # so we expect a failure here, but it should at least try to connect
+    yubihsm-connector -d </dev/null 1>&2 2>connector.log &
+    yubihsm_pid=$!
+    $out/bin/yubihsm-shell -Pv1 </dev/null || true
+    kill -INT "$yubihsm_pid" && { wait "$yubihsm_pid" || true; }
+    cat connector.log >&2
+    grep -E 'GET.+/connector/status' connector.log >/dev/null
+
+    runHook postInstallCheck
+  '';
+
   meta = {
+    mainProgram = "yubihsm-shell";
     description = "Thin wrapper around libyubihsm providing both an interactive and command-line interface to a YubiHSM";
     homepage = "https://github.com/Yubico/yubihsm-shell";
     maintainers = with lib.maintainers; [
diff --git a/pkgs/by-name/zu/zulip/package.nix b/pkgs/by-name/zu/zulip/package.nix
index b52ae9fb3910..34657eefa06b 100644
--- a/pkgs/by-name/zu/zulip/package.nix
+++ b/pkgs/by-name/zu/zulip/package.nix
@@ -4,7 +4,7 @@
   fetchFromGitHub,
   fetchPnpmDeps,
   nodejs,
-  pnpm_10,
+  pnpm_10_29_2,
   pnpmConfigHook,
   python3,
   electron_39,
@@ -26,14 +26,14 @@ stdenv.mkDerivation (finalAttrs: {
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
-    pnpm = pnpm_10;
+    pnpm = pnpm_10_29_2;
     fetcherVersion = 3;
     hash = "sha256-s/KllzT46L2o4SWS3z3Z7FDQD6FEEEAnPdM6tsfGRUo=";
   };
 
   nativeBuildInputs = [
     nodejs
-    pnpm_10
+    pnpm_10_29_2
     pnpmConfigHook
     makeBinaryWrapper
     copyDesktopItems
diff --git a/pkgs/development/compilers/go/bootstrap124.nix b/pkgs/development/compilers/go/bootstrap124.nix
index e69287fa7693..6a04688f64e6 100644
--- a/pkgs/development/compilers/go/bootstrap124.nix
+++ b/pkgs/development/compilers/go/bootstrap124.nix
@@ -1,27 +1,27 @@
 { callPackage }:
 callPackage ./binary.nix {
-  version = "1.24.11";
+  version = "1.24.13";
   hashes = {
     # Use `print-hashes.sh ${version}` to generate the list below
-    darwin-amd64 = "c45566cf265e2083cd0324e88648a9c28d0edede7b5fd12f8dc6932155a344c5";
-    darwin-arm64 = "a9c90c786e75d5d1da0547de2d1199034df6a4b163af2fa91b9168c65f229c12";
-    freebsd-386 = "99229da13fd74d5cdcb81fae844bf48574c64eae0d2821137f45c848f1453771";
-    freebsd-amd64 = "de6fdd4eefa06dbb2531ed601ef5f2b88e73f49f89c10bc1078f51a96a7ae88f";
-    freebsd-arm = "fd7a01515c09ad190c969bd9cd277803c05acfaa7b03c496d3a9d1b8cad72d03";
-    freebsd-arm64 = "eead4408b88557228fe4b30ee90aa33062d338fa5647c046a5aaca4237839f5a";
-    freebsd-riscv64 = "3c192d96d57c6330e6a92d70235a4e938345c9b3a50d37cfce60c92dd7240d04";
-    linux-386 = "bb702d0b67759724dccee1825828e8bae0b5199e3295cac5a98a81f3098fa64a";
-    linux-amd64 = "bceca00afaac856bc48b4cc33db7cd9eb383c81811379faed3bdbc80edb0af65";
-    linux-arm64 = "beaf0f51cbe0bd71b8289b2b6fa96c0b11cd86aa58672691ef2f1de88eb621de";
-    linux-armv6l = "24d712a7e8ea2f429c05bc67287249e0291f2fe0ea6d6ff268f11b7343ad0f47";
-    linux-loong64 = "45c3cbec9e30071ea1f3323fc30fb1b8497007c992f00ba48fcdcb729f06467c";
-    linux-mips = "c006942d74a348af080aac3930c3772148761cf1de5d97c3879c30d17b72ccf5";
-    linux-mips64 = "d054e2fb0873ac1d5502c4a860090bfff130b8fabdeeea311adda658fbc45ac5";
-    linux-mips64le = "c0274255613b85e2ba45e210e8f07995d51a048f11c7f0b9128dc177472692b3";
-    linux-mipsle = "5c787fc3ac04c4ebeaa0a6602c8a69eae557fe15d033a07cf22ac44e2489285f";
-    linux-ppc64 = "3fceb9492469f2155134a834c12b4bf9c1126fbb3cbf5a5ae660648897b8076d";
-    linux-ppc64le = "f770d0c5d7e7e2edb030133ac7854d9204f4e954e79a176e81362ffedf6ea34c";
-    linux-riscv64 = "9db9ba8e6b60f3662f55ed78b128175edbe8b9480e657126a5b8f5043ee1e38c";
-    linux-s390x = "5955ddda3445b2cbfd81b8772044084911f55d0baeb32414da0411f6a377a2d4";
+    darwin-amd64 = "6cc6549b06725220b342b740497ffd24e0ebdcef75781a77931ca199f46ad781";
+    darwin-arm64 = "f282d882c3353485e2fc6c634606d85caf36e855167d59b996dbeae19fa7629a";
+    freebsd-386 = "1e3bd90c1d138a3d4bbc39f3990f59faab5e9d83006b51c5dec17538716d2651";
+    freebsd-amd64 = "96e3c439befbb365ecde3ae475f9319ef7693d5d66a05992e8f8d29c60a63761";
+    freebsd-arm = "3d8005886f2dff23357d5d36e7759fdadc642d5207c01bd9e761d5d9e27f3257";
+    freebsd-arm64 = "67efe294235fd85fc0fb810275dfd402a459c8522f7bf075f63c7047db474f1b";
+    freebsd-riscv64 = "4973d786b9bc4291063ecc69546e662f18d5fa564745673c7ea39c3febc11cc3";
+    linux-386 = "a55cb4587b1face90dc9334d8ad44ccd41fade77dcff645a74927eb0adc52272";
+    linux-amd64 = "1fc94b57134d51669c72173ad5d49fd62afb0f1db9bf3f798fd98ee423f8d730";
+    linux-arm64 = "74d97be1cc3a474129590c67ebf748a96e72d9f3a2b6fef3ed3275de591d49b3";
+    linux-armv6l = "a26b1e54c0fe7b0babc79716a89b830f1cde54f6c6f914a9995d3f0d0bdd0242";
+    linux-loong64 = "8fd090f77b88b9e6f3807a24fce5187163f0036a30d47abab97a1861321f62ca";
+    linux-mips = "b879aea34facab984856575ddc3416cfeaa4e3b87a5b23e23ad7acb850bed605";
+    linux-mips64 = "b652f8f1199fab0e139bd1e41596470cb104b404e829e658d571ad7566148ada";
+    linux-mips64le = "d1c233a227fd4c5be04d4e8929b4b75e7237556916b8295c0436a1301af8ea12";
+    linux-mipsle = "4685999157eafa2b731d58e93b50693c34b6efdb2a63755591e785886ca8aaf0";
+    linux-ppc64 = "0ff9907f079e4f2c4d1c4a30a0acc4bb8b627a7043f49b19dc97eb4491b78fdc";
+    linux-ppc64le = "5f0dfab58ce15a84d824363c041246c76847a69d14f9ffac16bd5342299ecc14";
+    linux-riscv64 = "9a8166261489d3f38c7a568785b7012c123e3561779d282d568a72d58506754f";
+    linux-s390x = "a3e3e2012f9b4d392fab85fd4596bbd798ea8e0ceba259f47023b8cb5ebfffc1";
   };
 }
diff --git a/pkgs/development/coq-modules/mathcomp-word/default.nix b/pkgs/development/coq-modules/mathcomp-word/default.nix
index 674891119188..2d69086f1d03 100644
--- a/pkgs/development/coq-modules/mathcomp-word/default.nix
+++ b/pkgs/development/coq-modules/mathcomp-word/default.nix
@@ -21,20 +21,28 @@ let
       repo,
       rev,
       sha256 ? null,
+      hash ? null,
       ...
     }:
     let
       prefix = "https://${domain}/${owner}/${repo}/";
     in
-    if sha256 == null then
-      fetchTarball { url = "${prefix}archive/refs/heads/${rev}.tar.gz"; }
-    else
+    if sha256 != null then
       fetchurl {
         url = "${prefix}releases/download/${rev}/${
           lib.concatStringsSep "-" (namePrefix ++ [ pname ])
         }-${rev}.tbz";
         inherit sha256;
-      };
+      }
+    else if hash != null then
+      fetchurl {
+        url = "${prefix}releases/download/v${rev}/${
+          lib.concatStringsSep "-" (namePrefix ++ [ pname ])
+        }-${rev}.tbz";
+        inherit hash;
+      }
+    else
+      fetchTarball { url = "${prefix}archive/refs/heads/${rev}.tar.gz"; };
 in
 
 mkCoqDerivation {
@@ -43,8 +51,9 @@ mkCoqDerivation {
   repo = "coqword";
   useDune = true;
 
-  releaseRev = v: "v${v}";
+  releaseRev = v: if lib.versionAtLeast v "3.3" then v else "v${v}";
 
+  release."3.3".hash = "sha256-z+2eerYZbaEytg3A00GQ12wpj4IjKLJYf6Ny5cARwog=";
   release."3.2".sha256 = "sha256-4HOFFQzKbHIq+ktjJaS5b2Qr8WL1eQ26YxF4vt1FdWM=";
   release."3.1".sha256 = "sha256-qQHis6554sG7NpCpWhT2wvelnxsrbEPVNv3fpxwxHMU=";
   release."3.0".sha256 = "sha256-xEgx5HHDOimOJbNMtIVf/KG3XBemOS9XwoCoW6btyJ4=";
@@ -69,7 +78,7 @@ mkCoqDerivation {
     lib.switch
       [ coq.coq-version mathcomp.version ]
       [
-        (case (range "8.16" "9.1") (isGe "2.0") "3.2")
+        (case (range "8.16" "9.1") (isGe "2.0") "3.3")
         (case (range "8.12" "8.20") (range "1.12" "1.19") "2.4")
       ]
       null;
diff --git a/pkgs/development/libraries/libquotient/default.nix b/pkgs/development/libraries/libquotient/default.nix
index 73e254eb8b07..bc65f028b749 100644
--- a/pkgs/development/libraries/libquotient/default.nix
+++ b/pkgs/development/libraries/libquotient/default.nix
@@ -13,7 +13,7 @@
 
 stdenv.mkDerivation rec {
   pname = "libquotient";
-  version = "0.9.5";
+  version = "0.9.6.1";
 
   outputs = [
     "out"
@@ -24,18 +24,9 @@ stdenv.mkDerivation rec {
     owner = "quotient-im";
     repo = "libQuotient";
     rev = version;
-    hash = "sha256-wdIE5LI4l3WUvpGfoJBL8sjBl2k8NfZTh9CjfJc9FIA=";
+    hash = "sha256-ea7vOxmc4S7KizbwYp21NryW3BGh+Jn0HOR4qsA1roE=";
   };
 
-  patches = [
-    # Qt 6.10 compat
-    # FIXME: remove in next update
-    (fetchpatch {
-      url = "https://github.com/quotient-im/libQuotient/commit/ea83157eed37ff97ab275a5d14c971f0a5a70595.diff";
-      hash = "sha256-JMdcywGgZ0Gev/Nce4oPiMJQxTBJYPoq+WoT3WLWWNQ=";
-    })
-  ];
-
   nativeBuildInputs = [ cmake ];
 
   propagatedBuildInputs = [
diff --git a/pkgs/development/ocaml-modules/htmlit/default.nix b/pkgs/development/ocaml-modules/htmlit/default.nix
new file mode 100644
index 000000000000..92b11fb7ff6e
--- /dev/null
+++ b/pkgs/development/ocaml-modules/htmlit/default.nix
@@ -0,0 +1,24 @@
+{
+  lib,
+  fetchurl,
+  buildTopkgPackage,
+}:
+
+buildTopkgPackage rec {
+  pname = "htmlit";
+  version = "0.2.0";
+
+  minimalOCamlVersion = "4.14.0";
+
+  src = fetchurl {
+    url = "https://erratique.ch/software/htmlit/releases/htmlit-${version}.tbz";
+    hash = "sha256-i+7gYle8G2y78GeoAnlNY5dpdONLhltuswusCbMmB/c=";
+  };
+
+  meta = {
+    description = "HTML generation combinators for OCaml";
+    homepage = "https://erratique.ch/software/htmlit";
+    license = lib.licenses.isc;
+    maintainers = with lib.maintainers; [ redianthus ];
+  };
+}
diff --git a/pkgs/development/octave-modules/gsl/default.nix b/pkgs/development/octave-modules/gsl/default.nix
index 41aee3c2eb58..c7bbf114606f 100644
--- a/pkgs/development/octave-modules/gsl/default.nix
+++ b/pkgs/development/octave-modules/gsl/default.nix
@@ -1,5 +1,6 @@
 {
   buildOctavePackage,
+  stdenv,
   lib,
   fetchurl,
   gsl,
@@ -14,7 +15,7 @@ buildOctavePackage rec {
     sha256 = "1lvfxbqmw8h1nlrxmvrl6j4xffmbzxfhdpxz3vrc6lg2g4jwaa6h";
   };
 
-  buildInputs = [
+  propagatedBuildInputs = [
     gsl
   ];
 
@@ -23,8 +24,9 @@ buildOctavePackage rec {
     license = lib.licenses.gpl2Plus;
     maintainers = with lib.maintainers; [ KarlJoad ];
     description = "Octave bindings to the GNU Scientific Library";
-    # When used in an `octave.withPackages` environment, octave fails to find
-    # libgsl.so from some reason.
-    broken = true;
+    # gsl_sf.cc:1782:11: error: no member named 'is_real_type' in 'octave_value'
+    #  1782 |     if (! ISREAL(args(i)))
+    #       |           ^~~~~~~~~~~~~~~
+    broken = stdenv.hostPlatform.isDarwin;
   };
 }
diff --git a/pkgs/development/python-modules/aiohomeconnect/default.nix b/pkgs/development/python-modules/aiohomeconnect/default.nix
index 646f6dadc37b..db8d20c3810b 100644
--- a/pkgs/development/python-modules/aiohomeconnect/default.nix
+++ b/pkgs/development/python-modules/aiohomeconnect/default.nix
@@ -18,14 +18,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "aiohomeconnect";
-  version = "0.30.0";
+  version = "0.31.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "MartinHjelmare";
     repo = "aiohomeconnect";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-GzVfSNHvJ5qJTnn4GtetIirLT3LApZN0QB5eg/DPyGg=";
+    hash = "sha256-93IyTpetxFSD1fcX2sWBfvoYzm3xRiczsONoFxKJRts=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/amd-quark/default.nix b/pkgs/development/python-modules/amd-quark/default.nix
new file mode 100644
index 000000000000..c8ee39f170e3
--- /dev/null
+++ b/pkgs/development/python-modules/amd-quark/default.nix
@@ -0,0 +1,87 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+
+  # build-system
+  setuptools,
+  mypy-protobuf,
+
+  # dependencies
+  evaluate,
+  joblib,
+  ninja,
+  numpy,
+  onnx,
+  onnxscript,
+  onnxslim,
+  pandas,
+  plotly,
+  protobuf,
+  pydantic,
+  rich,
+  scipy,
+  sentencepiece,
+  tqdm,
+  zstandard,
+}:
+buildPythonPackage (finalAttrs: {
+  pname = "amd-quark";
+  version = "0.11.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "amd";
+    repo = "Quark";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-x0y3NFbXAF1SnlzQSkWKEWiz0qRPYHWvQ6oTizKpyQw=";
+  };
+
+  postPatch = ''
+    substituteInPlace pyproject.toml \
+      --replace-fail '"protobuf-protoc-bin==31.1",' ""
+    substituteInPlace setup.py \
+      --replace-fail 'subprocess.check_output(["git", "rev-parse", "--short", "HEAD"])' 'b"nix"'
+  '';
+
+  env.QUARK_RELEASE = "1";
+
+  build-system = [
+    setuptools
+    mypy-protobuf
+  ];
+
+  dependencies = [
+    evaluate
+    joblib
+    ninja
+    numpy
+    onnx
+    onnxscript
+    onnxslim
+    pandas
+    plotly
+    protobuf
+    pydantic
+    rich
+    scipy
+    sentencepiece
+    tqdm
+    zstandard
+  ];
+
+  pythonRelaxDeps = true;
+
+  pythonImportsCheck = [ "quark" ];
+
+  # Most of the tests require gpu and some other unspecified dependencies
+  doCheck = false;
+
+  meta = {
+    description = "AMD Quark Model Optimizer";
+    homepage = "https://github.com/amd/Quark";
+    changelog = "https://github.com/amd/Quark/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ lach ];
+  };
+})
diff --git a/pkgs/development/python-modules/atopile/default.nix b/pkgs/development/python-modules/atopile/default.nix
index 50bdeb18a84a..44509b3b0c0b 100644
--- a/pkgs/development/python-modules/atopile/default.nix
+++ b/pkgs/development/python-modules/atopile/default.nix
@@ -130,6 +130,7 @@ buildPythonPackage (finalAttrs: {
   ];
 
   pythonRelaxDeps = [
+    "deprecated"
     "posthog"
     "prompt-toolkit"
   ];
diff --git a/pkgs/development/python-modules/compliance-trestle/default.nix b/pkgs/development/python-modules/compliance-trestle/default.nix
index 78c794c90583..48c80b490f20 100644
--- a/pkgs/development/python-modules/compliance-trestle/default.nix
+++ b/pkgs/development/python-modules/compliance-trestle/default.nix
@@ -71,6 +71,10 @@ buildPythonPackage (finalAttrs: {
     hatchling
   ];
 
+  pythonRelaxDeps = [
+    "cryptography"
+  ];
+
   dependencies = [
     attrs
     cmarkgfm
diff --git a/pkgs/development/python-modules/databricks-sdk/default.nix b/pkgs/development/python-modules/databricks-sdk/default.nix
index 7063c31cfd88..81e9acb837a2 100644
--- a/pkgs/development/python-modules/databricks-sdk/default.nix
+++ b/pkgs/development/python-modules/databricks-sdk/default.nix
@@ -22,14 +22,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "databricks-sdk";
-  version = "0.94.0";
+  version = "0.96.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "databricks";
     repo = "databricks-sdk-py";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-hRQmx33RxN099OXzllgkeC0bvFFbxbPd35GokCO7ZMw=";
+    hash = "sha256-cwZrewypNltMyr2RPMeyAKJYzy+iwdnfoW/M7uecPaA=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/datamodel-code-generator/default.nix b/pkgs/development/python-modules/datamodel-code-generator/default.nix
index 6c78f81659c8..1db26a8fd023 100644
--- a/pkgs/development/python-modules/datamodel-code-generator/default.nix
+++ b/pkgs/development/python-modules/datamodel-code-generator/default.nix
@@ -4,13 +4,13 @@
   black,
   buildPythonPackage,
   fetchFromGitHub,
-  freezegun,
   genson,
   graphql-core,
   hatch-vcs,
   hatchling,
   httpx,
   inflect,
+  inline-snapshot,
   isort,
   jinja2,
   openapi-spec-validator,
@@ -18,11 +18,12 @@
   prance,
   ruff,
   pydantic,
-  pytest-benchmark,
+  pysnooper,
   pytest-mock,
   pytestCheckHook,
   pyyaml,
-  toml,
+  time-machine,
+  watchfiles,
 }:
 
 buildPythonPackage rec {
@@ -57,10 +58,11 @@ buildPythonPackage rec {
     packaging
     pydantic
     pyyaml
-    toml
   ];
 
   optional-dependencies = {
+    all = lib.concatAttrValues (lib.removeAttrs optional-dependencies [ "all" ]);
+    debug = [ pysnooper ];
     graphql = [ graphql-core ];
     http = [ httpx ];
     ruff = [ ruff ];
@@ -68,15 +70,18 @@ buildPythonPackage rec {
       openapi-spec-validator
       prance
     ];
+    watch = [
+      watchfiles
+    ];
   };
 
   nativeCheckInputs = [
-    freezegun
-    pytest-benchmark
+    inline-snapshot
     pytest-mock
     pytestCheckHook
+    time-machine
   ]
-  ++ lib.concatAttrValues optional-dependencies;
+  ++ optional-dependencies.all;
 
   pythonImportsCheck = [ "datamodel_code_generator" ];
 
diff --git a/pkgs/development/python-modules/django-crispy-forms/default.nix b/pkgs/development/python-modules/django-crispy-forms/default.nix
index f46a74e348f6..ad544f5eff1e 100644
--- a/pkgs/development/python-modules/django-crispy-forms/default.nix
+++ b/pkgs/development/python-modules/django-crispy-forms/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "django-crispy-forms";
-  version = "2.5";
+  version = "2.6";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "django-crispy-forms";
     repo = "django-crispy-forms";
     tag = finalAttrs.version;
-    hash = "sha256-UZw860dOmQOAHcOPn5JO5OPe0kei4Mivy5FTh25Zo1s=";
+    hash = "sha256-yU5xNlV3OFZUdO6zK1sG7mHGkNXLwZocEH8JhvAwyAc=";
   };
 
   propagatedBuildInputs = [
diff --git a/pkgs/development/python-modules/django-organizations/default.nix b/pkgs/development/python-modules/django-organizations/default.nix
index 54835ce3d366..e02591bd3f60 100644
--- a/pkgs/development/python-modules/django-organizations/default.nix
+++ b/pkgs/development/python-modules/django-organizations/default.nix
@@ -14,14 +14,14 @@
 
 buildPythonPackage rec {
   pname = "django-organizations";
-  version = "2.5.0";
+  version = "2.6.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "bennylope";
     repo = "django-organizations";
     tag = version;
-    hash = "sha256-lgri6CCITp1oYCwpH8vrUglphXOmwZ3KX5G/L29akrs=";
+    hash = "sha256-MgXB2gr7tWBXpgVfxLMI0RQWwAbhXlxdzyqk7XdEsWE=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/elevenlabs/default.nix b/pkgs/development/python-modules/elevenlabs/default.nix
index ead9e554e3d7..cdb37cdaec43 100644
--- a/pkgs/development/python-modules/elevenlabs/default.nix
+++ b/pkgs/development/python-modules/elevenlabs/default.nix
@@ -14,14 +14,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "elevenlabs";
-  version = "2.37.0";
+  version = "2.38.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "elevenlabs";
     repo = "elevenlabs-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Du3En4aID1uXJs8DPweUnxNzrM5tnIkXrnzZhuizy6U=";
+    hash = "sha256-NBznP5XWIPTYmHkzEx6yfQk6n/P6SGS7YMcJnrnOHMU=";
   };
 
   build-system = [ poetry-core ];
diff --git a/pkgs/development/python-modules/exllamav3/default.nix b/pkgs/development/python-modules/exllamav3/default.nix
index d11a44c9f0a3..fdc8468d82b8 100644
--- a/pkgs/development/python-modules/exllamav3/default.nix
+++ b/pkgs/development/python-modules/exllamav3/default.nix
@@ -27,14 +27,14 @@ let
 in
 buildPythonPackage (finalAttrs: {
   pname = "exllamav3";
-  version = "0.0.23";
+  version = "0.0.24";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "turboderp-org";
     repo = "exllamav3";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-wAT+zntPxjIjrXaa2ZJpjImRt1V8vFqWfSNjgZYGGJk=";
+    hash = "sha256-cNYQuGfUpbqSvYD8335zdZbHIqBH0QK1aK+j0WCY+LE=";
   };
 
   pythonRelaxDeps = [
diff --git a/pkgs/development/python-modules/google-genai/default.nix b/pkgs/development/python-modules/google-genai/default.nix
index bb94b5c09360..22dfe4b5b2b1 100644
--- a/pkgs/development/python-modules/google-genai/default.nix
+++ b/pkgs/development/python-modules/google-genai/default.nix
@@ -22,14 +22,14 @@
 
 buildPythonPackage rec {
   pname = "google-genai";
-  version = "1.65.0";
+  version = "1.66.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "googleapis";
     repo = "python-genai";
     tag = "v${version}";
-    hash = "sha256-hLUERiWSYiESM8DoNQEAUZxS6zcsdxv6ykAEcgDIXn8=";
+    hash = "sha256-UNaJzxTFzMEa43oRYr1QqtktpggdXYSPFdkhd3qRLlw=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/hf-xet/default.nix b/pkgs/development/python-modules/hf-xet/default.nix
index c45fea1311de..d25cf2928dae 100644
--- a/pkgs/development/python-modules/hf-xet/default.nix
+++ b/pkgs/development/python-modules/hf-xet/default.nix
@@ -7,28 +7,28 @@
   openssl,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "hf-xet";
-  version = "1.2.0";
+  version = "1.3.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "huggingface";
     repo = "xet-core";
-    tag = "v${version}";
-    hash = "sha256-nRxLVCJF3meoVa1mc3jt0hJUFDwfSFl7U/fFLDQL44M=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-IiV+qsUiahJr/MA9oTULSUvFBEw/sw9DyzuGxXHHnoM=";
   };
 
-  sourceRoot = "${src.name}/hf_xet";
+  sourceRoot = "${finalAttrs.src.name}/hf_xet";
 
   cargoDeps = rustPlatform.fetchCargoVendor {
-    inherit
+    inherit (finalAttrs)
       pname
       version
       src
       sourceRoot
       ;
-    hash = "sha256-xMfsd7xOghktQu/do7TMmkUx4uTBHPK44XODePluUgc=";
+    hash = "sha256-+uz6bKAV99JmTIWVDXPEq0kPWQGIYL8dV17XN0TP6hY=";
   };
 
   nativeBuildInputs = [
@@ -51,8 +51,8 @@ buildPythonPackage rec {
   meta = {
     description = "Xet client tech, used in huggingface_hub";
     homepage = "https://github.com/huggingface/xet-core/tree/main/hf_xet";
-    changelog = "https://github.com/huggingface/xet-core/releases/tag/v${version}";
+    changelog = "https://github.com/huggingface/xet-core/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ GaetanLepage ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/identify/default.nix b/pkgs/development/python-modules/identify/default.nix
index 183a6a1bcc18..095c740c5dd1 100644
--- a/pkgs/development/python-modules/identify/default.nix
+++ b/pkgs/development/python-modules/identify/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "identify";
-  version = "2.6.16";
+  version = "2.6.17";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pre-commit";
     repo = "identify";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-+iLIU2NfKogFAdbAXXER3G7cDyvcey9pR+0HifQZoh8=";
+    hash = "sha256-hnVG1TRkq605uFk3PmzqFwnzcYru/4OYbrJYAtDuo0g=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/ignite/default.nix b/pkgs/development/python-modules/ignite/default.nix
index 3cbfff2c1d21..2ed3b6d2bc5b 100644
--- a/pkgs/development/python-modules/ignite/default.nix
+++ b/pkgs/development/python-modules/ignite/default.nix
@@ -2,7 +2,7 @@
   lib,
   buildPythonPackage,
   fetchFromGitHub,
-  setuptools,
+  hatchling,
   pytestCheckHook,
   pytest-xdist,
   torchvision,
@@ -24,7 +24,7 @@ buildPythonPackage rec {
     hash = "sha256-0lQe5fWR4t3uAJVfGVebkxiWHx8TvgNQzJylKNmjjo0=";
   };
 
-  build-system = [ setuptools ];
+  build-system = [ hatchling ];
 
   dependencies = [
     packaging
diff --git a/pkgs/development/python-modules/kagglesdk/default.nix b/pkgs/development/python-modules/kagglesdk/default.nix
index 195e211d7275..25a5ff60464e 100644
--- a/pkgs/development/python-modules/kagglesdk/default.nix
+++ b/pkgs/development/python-modules/kagglesdk/default.nix
@@ -16,14 +16,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "kagglesdk";
-  version = "0.1.15";
+  version = "0.1.16";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Kaggle";
     repo = "kagglesdk";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-u945sytmPUEYRNvT8v/O3HBhJoLnECPAT3GdvtBkBV4=";
+    hash = "sha256-MmgX9gQ8fQU8yE/2qpw1Kz/VslVix3qUhaGkRahSxns=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/kicad-python/default.nix b/pkgs/development/python-modules/kicad-python/default.nix
index ad36f17fbe15..7ff7938917c2 100644
--- a/pkgs/development/python-modules/kicad-python/default.nix
+++ b/pkgs/development/python-modules/kicad-python/default.nix
@@ -4,7 +4,7 @@
   fetchFromGitLab,
   poetry-core,
   protoletariat,
-  mypy-protobuf,
+  mypy-protobuf_3_6,
   pkgs,
   protobuf,
   pynng,
@@ -34,13 +34,12 @@ buildPythonPackage (finalAttrs: {
   dependencies = [
     protobuf
     pynng
-    mypy-protobuf
   ]
   ++ (lib.optional (pythonOlder "3.13") typing-extensions);
 
   nativeBuildInputs = [
     pkgs.protobuf
-    mypy-protobuf
+    mypy-protobuf_3_6
     gitMinimal
   ];
 
diff --git a/pkgs/development/python-modules/mdx-wikilink-plus/default.nix b/pkgs/development/python-modules/mdx-wikilink-plus/default.nix
new file mode 100644
index 000000000000..0eaf114866c7
--- /dev/null
+++ b/pkgs/development/python-modules/mdx-wikilink-plus/default.nix
@@ -0,0 +1,44 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  markdown,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "mdx-wikilink-plus";
+  version = "1.4.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "neurobin";
+    repo = "mdx_wikilink_plus";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-d0F0blSYYRNbkwnbL9kzkNbfNVG2NZV74WapP5ubkoo=";
+  };
+
+  build-system = [
+    setuptools
+  ];
+
+  dependencies = [
+    markdown
+  ];
+
+  pythonImportsCheck = [
+    "mdx_wikilink_plus"
+  ];
+
+  # No tests available.
+  doCheck = false;
+
+  meta = {
+    description = "A wikilink extension for Python Markdown";
+    homepage = "https://github.com/neurobin/mdx_wikilink_plus";
+    changelog = "https://github.com/neurobin/mdx_wikilink_plus/blob/${finalAttrs.src.rev}/CHANGELOG.md";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ drupol ];
+    mainProgram = "mdx-wikilink-plus";
+  };
+})
diff --git a/pkgs/development/python-modules/mkdocs-callouts/default.nix b/pkgs/development/python-modules/mkdocs-callouts/default.nix
new file mode 100644
index 000000000000..6222a80f13d6
--- /dev/null
+++ b/pkgs/development/python-modules/mkdocs-callouts/default.nix
@@ -0,0 +1,42 @@
+{
+  lib,
+  fetchFromGitHub,
+  buildPythonPackage,
+  setuptools,
+  mkdocs,
+  pytestCheckHook,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "mkdocs-callouts";
+  version = "1.16.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "sondregronas";
+    repo = "mkdocs-callouts";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-CffhtU5ur/QleVOk2twh+7kbHUB6HWEXt+E1YbI5I94=";
+  };
+
+  build-system = [
+    setuptools
+  ];
+
+  dependencies = [
+    mkdocs
+  ];
+
+  pythonImportsCheck = [
+    "mkdocs_callouts"
+  ];
+
+  nativeCheckInputs = [ pytestCheckHook ];
+
+  meta = {
+    description = "A simple MkDocs plugin that converts Obsidian callout blocks to mkdocs supported Admonitions";
+    homepage = "https://github.com/sondregronas/mkdocs-callouts";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ drupol ];
+  };
+})
diff --git a/pkgs/development/python-modules/mkdocs-custom-tags-attributes/default.nix b/pkgs/development/python-modules/mkdocs-custom-tags-attributes/default.nix
new file mode 100644
index 000000000000..e9872366cbc1
--- /dev/null
+++ b/pkgs/development/python-modules/mkdocs-custom-tags-attributes/default.nix
@@ -0,0 +1,43 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  mkdocs,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "mkdocs-custom-tags-attributes";
+  version = "0.3.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "Mara-Li";
+    repo = "mkdocs-custom-tags-attributes";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-oP2yfq16gc+0aA7GOcXKZ2x4n5AakWMHy3RO3o0MaqI=";
+  };
+
+  build-system = [
+    setuptools
+  ];
+
+  dependencies = [
+    mkdocs
+  ];
+
+  pythonImportsCheck = [
+    "custom_attributes"
+  ];
+
+  doCheck = false;
+
+  meta = {
+    description = "A mkdocs plugin to create custom attributes using hashtags";
+    homepage = "https://github.com/Mara-Li/mkdocs-custom-tags-attributes";
+    changelog = "https://github.com/Mara-Li/mkdocs-custom-tags-attributes/blob/${finalAttrs.src.rev}/CHANGELOG.md";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ drupol ];
+    mainProgram = "mkdocs-custom-tags-attributes";
+  };
+})
diff --git a/pkgs/development/python-modules/mkdocs-embed-file-plugin/default.nix b/pkgs/development/python-modules/mkdocs-embed-file-plugin/default.nix
new file mode 100644
index 000000000000..7384e05e23b2
--- /dev/null
+++ b/pkgs/development/python-modules/mkdocs-embed-file-plugin/default.nix
@@ -0,0 +1,65 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  hatchling,
+  beautifulsoup4,
+  markdown,
+  mdx-wikilink-plus,
+  mkdocs,
+  mkdocs-callouts,
+  mkdocs-custom-tags-attributes,
+  pymdown-extensions,
+  python-frontmatter,
+  ruamel-yaml,
+  setuptools,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "mkdocs-embed-file-plugin";
+  version = "2.1.5";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "ObsidianPublisher";
+    repo = "mkdocs-embed_file-plugin";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-6FmMMaR+gyp5Gx0oXiDYvsr6uA8hwrV93YYrYkJsMNY=";
+  };
+
+  build-system = [
+    hatchling
+  ];
+
+  dependencies = [
+    beautifulsoup4
+    markdown
+    mdx-wikilink-plus
+    mkdocs
+    mkdocs-callouts
+    mkdocs-custom-tags-attributes
+    pymdown-extensions
+    python-frontmatter
+    ruamel-yaml
+    setuptools
+  ];
+
+  pythonImportsCheck = [
+    "mkdocs_embed_file_plugins"
+  ];
+
+  # No tests available.
+  doCheck = false;
+
+  meta = {
+    description = "A way to embed a file present in your docs";
+    homepage = "https://github.com/ObsidianPublisher/mkdocs-embed_file-plugin";
+    changelog = "https://github.com/ObsidianPublisher/mkdocs-embed_file-plugin/blob/${finalAttrs.src.rev}/CHANGELOG.md";
+    license = with lib.licenses; [
+      agpl3Only
+      agpl3Plus
+    ];
+    maintainers = with lib.maintainers; [ drupol ];
+    mainProgram = "mkdocs-embed-file-plugin";
+  };
+})
diff --git a/pkgs/development/python-modules/mkdocs-obsidian-bridge/default.nix b/pkgs/development/python-modules/mkdocs-obsidian-bridge/default.nix
new file mode 100644
index 000000000000..903726a267d7
--- /dev/null
+++ b/pkgs/development/python-modules/mkdocs-obsidian-bridge/default.nix
@@ -0,0 +1,55 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  hatchling,
+  markdown,
+  mkdocs,
+  obsidian-callouts,
+  obsidian-media,
+  pytestCheckHook,
+  mkdocs-test,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "mkdocs-obsidian-bridge";
+  version = "1.3.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "GooRoo";
+    repo = "mkdocs-obsidian-bridge";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-362hEIu84dpfo7L+VsK9/AordnByWZUcakO2mByhZaw=";
+  };
+
+  build-system = [
+    hatchling
+  ];
+
+  dependencies = [
+    markdown
+    mkdocs
+    obsidian-callouts
+    obsidian-media
+  ];
+
+  pythonImportsCheck = [
+    "mkdocs_obsidian_bridge"
+  ];
+
+  nativeCheckInputs = [
+    pytestCheckHook
+    mkdocs-test
+  ];
+
+  meta = {
+    description = "Use Obsidian’s syntax for your website with this MkDocs plugin";
+    homepage = "https://github.com/GooRoo/mkdocs-obsidian-bridge";
+    license = with lib.licenses; [
+      bsd3
+      cc0
+    ];
+    maintainers = with lib.maintainers; [ drupol ];
+  };
+})
diff --git a/pkgs/development/python-modules/mypy-protobuf_3_6/default.nix b/pkgs/development/python-modules/mypy-protobuf_3_6/default.nix
new file mode 100644
index 000000000000..d51ab7a1a898
--- /dev/null
+++ b/pkgs/development/python-modules/mypy-protobuf_3_6/default.nix
@@ -0,0 +1,51 @@
+{
+  buildPythonPackage,
+  fetchFromGitHub,
+  grpcio-tools,
+  lib,
+  protobuf,
+  pytestCheckHook,
+  setuptools,
+  types-protobuf,
+  versionCheckHook,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "mypy-protobuf";
+  version = "3.6.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "nipunn1313";
+    repo = "mypy-protobuf";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-YBm/qfmas0kPmzhlgAwCdT8nsnC45fj2bhK3cXpvANo=";
+  };
+
+  pythonRelaxDeps = [ "protobuf" ];
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    grpcio-tools
+    protobuf
+    types-protobuf
+  ];
+
+  doCheck = false; # ModuleNotFoundError: No module named 'testproto'
+
+  nativeCheckInputs = [ pytestCheckHook ];
+
+  pythonImportsCheck = [ "mypy_protobuf" ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  meta = {
+    changelog = "https://github.com/nipunn1313/mypy-protobuf/blob/${finalAttrs.src.tag}/CHANGELOG.md";
+    description = "Generate mypy stub files from protobuf specs";
+    homepage = "https://github.com/nipunn1313/mypy-protobuf";
+    license = lib.licenses.asl20;
+    mainProgram = "protoc-gen-mypy";
+    maintainers = with lib.maintainers; [ sigmanificient ];
+  };
+})
diff --git a/pkgs/development/python-modules/netbox-attachments/default.nix b/pkgs/development/python-modules/netbox-attachments/default.nix
index 85b34faedfba..b36c70ad8dfe 100644
--- a/pkgs/development/python-modules/netbox-attachments/default.nix
+++ b/pkgs/development/python-modules/netbox-attachments/default.nix
@@ -10,7 +10,7 @@
 }:
 buildPythonPackage rec {
   pname = "netbox-attachments";
-  version = "10.0.1";
+  version = "11.0.0b2";
   pyproject = true;
 
   disabled = python.pythonVersion != netbox.python.pythonVersion;
@@ -19,7 +19,7 @@ buildPythonPackage rec {
     owner = "Kani999";
     repo = "netbox-attachments";
     tag = "v${version}";
-    hash = "sha256-ZsK6RKYkfzn6YSS9ern9QxLsRdcwzt8BmMdYGJTMOKM=";
+    hash = "sha256-TaEzYUhuBBXYoCmB6bY/1n8KzyaXNbOMRGiDbMDroLw=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/obsidian-callouts/default.nix b/pkgs/development/python-modules/obsidian-callouts/default.nix
new file mode 100644
index 000000000000..8010eb3d6772
--- /dev/null
+++ b/pkgs/development/python-modules/obsidian-callouts/default.nix
@@ -0,0 +1,46 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  hatchling,
+  markdown,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "obsidian-callouts";
+  version = "1.0.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "GooRoo";
+    repo = "obsidian-callouts";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-inq/c5rJ8YirwfFrlfhFVe9FqOt/o2Nkv7+EFUoYBXA=";
+  };
+
+  build-system = [
+    hatchling
+  ];
+
+  dependencies = [
+    markdown
+  ];
+
+  pythonImportsCheck = [
+    "obsidian_callouts"
+  ];
+
+  # No tests are available
+  doCheck = false;
+
+  meta = {
+    description = "A plugin for Python-Markdown that allows you to use callouts as in Obsidian";
+    homepage = "https://github.com/GooRoo/obsidian-callouts";
+    license = with lib.licenses; [
+      bsd3
+      cc0
+    ];
+    maintainers = with lib.maintainers; [ drupol ];
+    mainProgram = "obsidian-callouts";
+  };
+})
diff --git a/pkgs/development/python-modules/obsidian-media/default.nix b/pkgs/development/python-modules/obsidian-media/default.nix
new file mode 100644
index 000000000000..1168aee8b5fa
--- /dev/null
+++ b/pkgs/development/python-modules/obsidian-media/default.nix
@@ -0,0 +1,46 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  hatchling,
+  markdown,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "obsidian-media";
+  version = "2.0.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "GooRoo";
+    repo = "obsidian-media";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-+JerHkpQExP2ytYFFxNbsvAJInUqVg/483KtywP38/g=";
+  };
+
+  build-system = [
+    hatchling
+  ];
+
+  dependencies = [
+    markdown
+  ];
+
+  pythonImportsCheck = [
+    "obsidian_media"
+  ];
+
+  # No tests are available
+  doCheck = false;
+
+  meta = {
+    description = "";
+    homepage = "https://github.com/GooRoo/obsidian-media";
+    license = with lib.licenses; [
+      bsd3
+      cc0
+    ];
+    maintainers = with lib.maintainers; [ drupol ];
+    mainProgram = "obsidian-media";
+  };
+})
diff --git a/pkgs/development/python-modules/obstore/default.nix b/pkgs/development/python-modules/obstore/default.nix
index b917d4f98996..49e3c08a48f2 100644
--- a/pkgs/development/python-modules/obstore/default.nix
+++ b/pkgs/development/python-modules/obstore/default.nix
@@ -29,15 +29,9 @@ buildPythonPackage (finalAttrs: {
     hash = "sha256-1zMIcr36VrNX3GT4k7w4sIhAwQSWUuuomf73fnCwueY=";
   };
 
-  postPatch = ''
-    ln -sf ${./Cargo.lock} Cargo.lock
-  '';
-
-  cargoDeps = rustPlatform.importCargoLock {
-    lockFile = ./Cargo.lock;
-    outputHashes = {
-      "pyo3-file-0.15.0" = "sha256-8OVShM+jWHOZ/bOXJI2PEDzmOAFY1MBwbkg5ita25cg=";
-    };
+  cargoDeps = rustPlatform.fetchCargoVendor {
+    inherit (finalAttrs) pname version src;
+    hash = "sha256-6kKTLU1YazLpE5V/LqCLC1m8futx8C/X3gkeg8yV3ac=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/obstore/update-object_store-dep.patch b/pkgs/development/python-modules/obstore/update-object_store-dep.patch
deleted file mode 100644
index 27dd25176803..000000000000
--- a/pkgs/development/python-modules/obstore/update-object_store-dep.patch
+++ /dev/null
@@ -1,1753 +0,0 @@
-diff --git a/Cargo.lock b/Cargo.lock
-index a368d06..49cd8ad 100644
---- a/Cargo.lock
-+++ b/Cargo.lock
-@@ -4,9 +4,9 @@ version = 3
- 
- [[package]]
- name = "addr2line"
--version = "0.24.2"
-+version = "0.25.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "dfbe277e56a376000877090da837660b4427aad530e3028d44e0bffe4f89a1c1"
-+checksum = "1b5d307320b3181d6d7954e663bd7c774a838b8220fe0593c86d9fb09f498b4b"
- dependencies = [
-  "gimli",
- ]
-@@ -40,12 +40,6 @@ dependencies = [
-  "memchr",
- ]
- 
--[[package]]
--name = "android-tzdata"
--version = "0.1.1"
--source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "e999941b234f3131b00bc13c22d06e8c5ff726d1b6318ac7eb276997bbb4fef0"
--
- [[package]]
- name = "android_system_properties"
- version = "0.1.5"
-@@ -57,9 +51,9 @@ dependencies = [
- 
- [[package]]
- name = "arrow"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "fd798aea3553913a5986813e9c6ad31a2d2b04e931fe8ea4a37155eb541cebb5"
-+checksum = "6e833808ff2d94ed40d9379848a950d995043c7fb3e81a30b383f4c6033821cc"
- dependencies = [
-  "arrow-arith",
-  "arrow-array",
-@@ -78,9 +72,9 @@ dependencies = [
- 
- [[package]]
- name = "arrow-arith"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "508dafb53e5804a238cab7fd97a59ddcbfab20cc4d9814b1ab5465b9fa147f2e"
-+checksum = "ad08897b81588f60ba983e3ca39bda2b179bdd84dced378e7df81a5313802ef8"
- dependencies = [
-  "arrow-array",
-  "arrow-buffer",
-@@ -92,9 +86,9 @@ dependencies = [
- 
- [[package]]
- name = "arrow-array"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "e2730bc045d62bb2e53ef8395b7d4242f5c8102f41ceac15e8395b9ac3d08461"
-+checksum = "8548ca7c070d8db9ce7aa43f37393e4bfcf3f2d3681df278490772fd1673d08d"
- dependencies = [
-  "ahash",
-  "arrow-buffer",
-@@ -109,9 +103,9 @@ dependencies = [
- 
- [[package]]
- name = "arrow-buffer"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "54295b93beb702ee9a6f6fbced08ad7f4d76ec1c297952d4b83cf68755421d1d"
-+checksum = "e003216336f70446457e280807a73899dd822feaf02087d31febca1363e2fccc"
- dependencies = [
-  "bytes",
-  "half",
-@@ -120,9 +114,9 @@ dependencies = [
- 
- [[package]]
- name = "arrow-cast"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "67e8bcb7dc971d779a7280593a1bf0c2743533b8028909073e804552e85e75b5"
-+checksum = "919418a0681298d3a77d1a315f625916cb5678ad0d74b9c60108eb15fd083023"
- dependencies = [
-  "arrow-array",
-  "arrow-buffer",
-@@ -141,9 +135,9 @@ dependencies = [
- 
- [[package]]
- name = "arrow-csv"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "673fd2b5fb57a1754fdbfac425efd7cf54c947ac9950c1cce86b14e248f1c458"
-+checksum = "bfa9bf02705b5cf762b6f764c65f04ae9082c7cfc4e96e0c33548ee3f67012eb"
- dependencies = [
-  "arrow-array",
-  "arrow-cast",
-@@ -156,9 +150,9 @@ dependencies = [
- 
- [[package]]
- name = "arrow-data"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "97c22fe3da840039c69e9f61f81e78092ea36d57037b4900151f063615a2f6b4"
-+checksum = "a5c64fff1d142f833d78897a772f2e5b55b36cb3e6320376f0961ab0db7bd6d0"
- dependencies = [
-  "arrow-buffer",
-  "arrow-schema",
-@@ -168,22 +162,23 @@ dependencies = [
- 
- [[package]]
- name = "arrow-ipc"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "778de14c5a69aedb27359e3dd06dd5f9c481d5f6ee9fbae912dba332fd64636b"
-+checksum = "1d3594dcddccc7f20fd069bc8e9828ce37220372680ff638c5e00dea427d88f5"
- dependencies = [
-  "arrow-array",
-  "arrow-buffer",
-  "arrow-data",
-  "arrow-schema",
-+ "arrow-select",
-  "flatbuffers",
- ]
- 
- [[package]]
- name = "arrow-json"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "3860db334fe7b19fcf81f6b56f8d9d95053f3839ffe443d56b5436f7a29a1794"
-+checksum = "88cf36502b64a127dc659e3b305f1d993a544eab0d48cce704424e62074dc04b"
- dependencies = [
-  "arrow-array",
-  "arrow-buffer",
-@@ -203,9 +198,9 @@ dependencies = [
- 
- [[package]]
- name = "arrow-ord"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "425fa0b42a39d3ff55160832e7c25553e7f012c3f187def3d70313e7a29ba5d9"
-+checksum = "3c8f82583eb4f8d84d4ee55fd1cb306720cddead7596edce95b50ee418edf66f"
- dependencies = [
-  "arrow-array",
-  "arrow-buffer",
-@@ -216,9 +211,9 @@ dependencies = [
- 
- [[package]]
- name = "arrow-row"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "df9c9423c9e71abd1b08a7f788fcd203ba2698ac8e72a1f236f1faa1a06a7414"
-+checksum = "9d07ba24522229d9085031df6b94605e0f4b26e099fb7cdeec37abd941a73753"
- dependencies = [
-  "arrow-array",
-  "arrow-buffer",
-@@ -229,18 +224,18 @@ dependencies = [
- 
- [[package]]
- name = "arrow-schema"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "85fa1babc4a45fdc64a92175ef51ff00eba5ebbc0007962fecf8022ac1c6ce28"
-+checksum = "b3aa9e59c611ebc291c28582077ef25c97f1975383f1479b12f3b9ffee2ffabe"
- dependencies = [
-  "bitflags",
- ]
- 
- [[package]]
- name = "arrow-select"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "d8854d15f1cf5005b4b358abeb60adea17091ff5bdd094dca5d3f73787d81170"
-+checksum = "8c41dbbd1e97bfcaee4fcb30e29105fb2c75e4d82ae4de70b792a5d3f66b2e7a"
- dependencies = [
-  "ahash",
-  "arrow-array",
-@@ -252,9 +247,9 @@ dependencies = [
- 
- [[package]]
- name = "arrow-string"
--version = "56.0.0"
-+version = "56.2.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "2c477e8b89e1213d5927a2a84a72c384a9bf4dd0dbf15f9fd66d821aafd9e95e"
-+checksum = "53f5183c150fbc619eede22b861ea7c0eebed8eaac0333eaa7f6da5205fd504d"
- dependencies = [
-  "arrow-array",
-  "arrow-buffer",
-@@ -269,9 +264,9 @@ dependencies = [
- 
- [[package]]
- name = "async-trait"
--version = "0.1.88"
-+version = "0.1.89"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "e539d3fca749fcee5236ab05e93a52867dd549cc157c8cb7f99595f3cedffdb5"
-+checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
- dependencies = [
-  "proc-macro2",
-  "quote",
-@@ -301,9 +296,9 @@ checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
- 
- [[package]]
- name = "backtrace"
--version = "0.3.75"
-+version = "0.3.76"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "6806a6321ec58106fea15becdad98371e28d92ccbc7c8f1b3b6dd724fe8f1002"
-+checksum = "bb531853791a215d7c62a30daf0dde835f381ab5de4589cfe7c649d2cbe92bd6"
- dependencies = [
-  "addr2line",
-  "cfg-if",
-@@ -311,7 +306,7 @@ dependencies = [
-  "miniz_oxide",
-  "object",
-  "rustc-demangle",
-- "windows-targets 0.52.6",
-+ "windows-link",
- ]
- 
- [[package]]
-@@ -322,9 +317,9 @@ checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
- 
- [[package]]
- name = "bitflags"
--version = "2.9.1"
-+version = "2.9.4"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "1b8e56985ec62d17e9c1001dc89c88ecd7dc08e47eba5ec7c29c7b5eeecde967"
-+checksum = "2261d10cca569e4643e526d8dc2e62e433cc8aba21ab764233731f8d369bf394"
- 
- [[package]]
- name = "block-buffer"
-@@ -355,11 +350,11 @@ checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"
- 
- [[package]]
- name = "camino"
--version = "1.1.10"
-+version = "1.2.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "0da45bc31171d8d6960122e222a67740df867c1dd53b4d51caa297084c185cab"
-+checksum = "276a59bf2b2c967788139340c9f0c5b12d7fd6630315c15c217e559de85d2609"
- dependencies = [
-- "serde",
-+ "serde_core",
- ]
- 
- [[package]]
-@@ -398,18 +393,19 @@ dependencies = [
- 
- [[package]]
- name = "cc"
--version = "1.2.29"
-+version = "1.2.41"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "5c1599538de2394445747c8cf7935946e3cc27e9625f889d979bfb2aaf569362"
-+checksum = "ac9fe6cdbb24b6ade63616c0a0688e45bb56732262c158df3c0c4bea4ca47cb7"
- dependencies = [
-+ "find-msvc-tools",
-  "shlex",
- ]
- 
- [[package]]
- name = "cfg-if"
--version = "1.0.1"
-+version = "1.0.3"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "9555578bc9e57714c812a1f84e4fc5b4d21fcb063490c624de019f7464c91268"
-+checksum = "2fd1289c04a9ea8cb22300a459a72a385d7c73d3259e2ed7dcb2af674838cfa9"
- 
- [[package]]
- name = "cfg_aliases"
-@@ -419,11 +415,10 @@ checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
- 
- [[package]]
- name = "chrono"
--version = "0.4.41"
-+version = "0.4.42"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "c469d952047f47f91b68d1cba3f10d63c11d73e4636f24f08daf0278abf01c4d"
-+checksum = "145052bdd345b87320e369255277e3fb5152762ad123a901ef5c262dd38fe8d2"
- dependencies = [
-- "android-tzdata",
-  "iana-time-zone",
-  "js-sys",
-  "num-traits",
-@@ -444,11 +439,12 @@ dependencies = [
- 
- [[package]]
- name = "comfy-table"
--version = "7.1.4"
-+version = "7.1.2"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "4a65ebfec4fb190b6f90e944a817d60499ee0744e582530e2c9900a22e591d9a"
-+checksum = "e0d05af1e006a2407bedef5af410552494ce5be9090444dbbcb57258c1af3d56"
- dependencies = [
-- "unicode-segmentation",
-+ "strum",
-+ "strum_macros",
-  "unicode-width",
- ]
- 
-@@ -560,12 +556,12 @@ checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
- 
- [[package]]
- name = "errno"
--version = "0.3.13"
-+version = "0.3.14"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "778e2ac28f6c47af28e4907f13ffd1e1ddbd400980a9abd7c8df189bf578a5ad"
-+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
- dependencies = [
-  "libc",
-- "windows-sys 0.60.2",
-+ "windows-sys 0.61.2",
- ]
- 
- [[package]]
-@@ -583,11 +579,17 @@ version = "2.3.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
- checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be"
- 
-+[[package]]
-+name = "find-msvc-tools"
-+version = "0.1.4"
-+source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "52051878f80a721bb68ebfbc930e07b65ba72f2da88968ea5c06fd6ca3d3a127"
-+
- [[package]]
- name = "flatbuffers"
--version = "25.2.10"
-+version = "25.9.23"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "1045398c1bfd89168b5fd3f1fc11f6e70b34f6f66300c87d44d3de849463abf1"
-+checksum = "09b6620799e7340ebd9968d2e0708eb82cf1971e9a16821e2091b6d6e475eed5"
- dependencies = [
-  "bitflags",
-  "rustc_version",
-@@ -601,9 +603,9 @@ checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
- 
- [[package]]
- name = "form_urlencoded"
--version = "1.2.1"
-+version = "1.2.2"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "e13624c2627564efccf4934284bdd98cbaa14e79b0b5a141218e507b3a823456"
-+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
- dependencies = [
-  "percent-encoding",
- ]
-@@ -730,27 +732,27 @@ dependencies = [
-  "js-sys",
-  "libc",
-  "r-efi",
-- "wasi 0.14.2+wasi-0.2.4",
-+ "wasi 0.14.7+wasi-0.2.4",
-  "wasm-bindgen",
- ]
- 
- [[package]]
- name = "gimli"
--version = "0.31.1"
-+version = "0.32.3"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f"
-+checksum = "e629b9b98ef3dd8afe6ca2bd0f89306cec16d43d907889945bc5d6687f2f13c7"
- 
- [[package]]
- name = "glob"
--version = "0.3.2"
-+version = "0.3.3"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "a8d1add55171497b4705a648c6b583acafb01d58050a51727785f0b2c8e0a2b2"
-+checksum = "0cc23270f6e1808e30a928bdc84dea0b9b4136a8bc82338574f23baf47bbd280"
- 
- [[package]]
- name = "h2"
--version = "0.4.11"
-+version = "0.4.12"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "17da50a276f1e01e0ba6c029e47b7100754904ee8a278f886546e98575380785"
-+checksum = "f3c0b69cfcb4e1b9f1bf2f53f95f766e4661169728ec61cd3fe5a0166f2d1386"
- dependencies = [
-  "atomic-waker",
-  "bytes",
-@@ -767,20 +769,21 @@ dependencies = [
- 
- [[package]]
- name = "half"
--version = "2.6.0"
-+version = "2.7.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "459196ed295495a68f7d7fe1d84f6c4b7ff0e21fe3017b2f283c6fac3ad803c9"
-+checksum = "e54c115d4f30f52c67202f079c5f9d8b49db4691f460fdb0b4c2e838261b2ba5"
- dependencies = [
-  "cfg-if",
-  "crunchy",
-  "num-traits",
-+ "zerocopy",
- ]
- 
- [[package]]
- name = "hashbrown"
--version = "0.15.4"
-+version = "0.16.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "5971ac85611da7067dbfcabef3c70ebb5606018acd9e2a3903a0da507521e0d5"
-+checksum = "5419bdc4f6a9207fbeba6d11b604d481addf78ecd10c11ad51e76c2f6482748d"
- 
- [[package]]
- name = "heck"
-@@ -830,25 +833,27 @@ checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
- 
- [[package]]
- name = "humantime"
--version = "2.2.0"
-+version = "2.3.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "9b112acc8b3adf4b107a8ec20977da0273a8c386765a3ec0229bd500a1443f9f"
-+checksum = "135b12329e5e3ce057a9f972339ea52bc954fe1e9358ef27f95e89716fbc5424"
- 
- [[package]]
- name = "hyper"
--version = "1.6.0"
-+version = "1.7.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "cc2b571658e38e0c01b1fdca3bbbe93c00d3d71693ff2770043f8c29bc7d6f80"
-+checksum = "eb3aa54a13a0dfe7fbe3a59e0c76093041720fdc77b110cc0fc260fafb4dc51e"
- dependencies = [
-+ "atomic-waker",
-  "bytes",
-  "futures-channel",
-- "futures-util",
-+ "futures-core",
-  "h2",
-  "http",
-  "http-body",
-  "httparse",
-  "itoa",
-  "pin-project-lite",
-+ "pin-utils",
-  "smallvec",
-  "tokio",
-  "want",
-@@ -873,9 +878,9 @@ dependencies = [
- 
- [[package]]
- name = "hyper-util"
--version = "0.1.15"
-+version = "0.1.17"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "7f66d5bd4c6f02bf0542fad85d626775bab9258cf795a4256dcaf3161114d1df"
-+checksum = "3c6995591a8f1380fcb4ba966a252a4b29188d51d2b89e3a252f5305be65aea8"
- dependencies = [
-  "base64",
-  "bytes",
-@@ -897,9 +902,9 @@ dependencies = [
- 
- [[package]]
- name = "iana-time-zone"
--version = "0.1.63"
-+version = "0.1.64"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "b0c919e5debc312ad217002b8048a17b7d83f80703865bbfcfebb0458b0b27d8"
-+checksum = "33e57f83510bb73707521ebaffa789ec8caf86f9657cad665b092b581d40e9fb"
- dependencies = [
-  "android_system_properties",
-  "core-foundation-sys",
-@@ -1007,9 +1012,9 @@ dependencies = [
- 
- [[package]]
- name = "idna"
--version = "1.0.3"
-+version = "1.1.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "686f825264d630750a544639377bae737628043f20d38bbc029e8f29ea968a7e"
-+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
- dependencies = [
-  "idna_adapter",
-  "smallvec",
-@@ -1028,9 +1033,9 @@ dependencies = [
- 
- [[package]]
- name = "indexmap"
--version = "2.10.0"
-+version = "2.11.4"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "fe4cd85333e22411419a0bcae1297d25e58c9443848b11dc6a86fefe8c78a661"
-+checksum = "4b0f83760fb341a774ed326568e19f5a863af4a952def8c39f9ab92fd95b88e5"
- dependencies = [
-  "equivalent",
-  "hashbrown",
-@@ -1044,9 +1049,9 @@ checksum = "f4c7245a08504955605670dbf141fceab975f15ca21570696aebe9d2e71576bd"
- 
- [[package]]
- name = "io-uring"
--version = "0.7.8"
-+version = "0.7.10"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "b86e202f00093dcba4275d4636b93ef9dd75d025ae560d2521b45ea28ab49013"
-+checksum = "046fa2d4d00aea763528b4950358d0ead425372445dc8ff86312b3c69ff7727b"
- dependencies = [
-  "bitflags",
-  "cfg-if",
-@@ -1086,9 +1091,9 @@ checksum = "4a5f13b858c8d314ee3e8f639011f7ccefe71f97f96e50151fb991f267928e2c"
- 
- [[package]]
- name = "js-sys"
--version = "0.3.77"
-+version = "0.3.81"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "1cfaf33c695fc6e08064efbc1f72ec937429614f25eef83af942d0e227c3a28f"
-+checksum = "ec48937a97411dcb524a265206ccd4c90bb711fca92b2792c407f268825b9305"
- dependencies = [
-  "once_cell",
-  "wasm-bindgen",
-@@ -1096,9 +1101,9 @@ dependencies = [
- 
- [[package]]
- name = "lexical-core"
--version = "1.0.5"
-+version = "1.0.6"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "b765c31809609075565a70b4b71402281283aeda7ecaf4818ac14a7b2ade8958"
-+checksum = "7d8d125a277f807e55a77304455eb7b1cb52f2b18c143b60e766c120bd64a594"
- dependencies = [
-  "lexical-parse-float",
-  "lexical-parse-integer",
-@@ -1109,60 +1114,53 @@ dependencies = [
- 
- [[package]]
- name = "lexical-parse-float"
--version = "1.0.5"
-+version = "1.0.6"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "de6f9cb01fb0b08060209a057c048fcbab8717b4c1ecd2eac66ebfe39a65b0f2"
-+checksum = "52a9f232fbd6f550bc0137dcb5f99ab674071ac2d690ac69704593cb4abbea56"
- dependencies = [
-  "lexical-parse-integer",
-  "lexical-util",
-- "static_assertions",
- ]
- 
- [[package]]
- name = "lexical-parse-integer"
--version = "1.0.5"
-+version = "1.0.6"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "72207aae22fc0a121ba7b6d479e42cbfea549af1479c3f3a4f12c70dd66df12e"
-+checksum = "9a7a039f8fb9c19c996cd7b2fcce303c1b2874fe1aca544edc85c4a5f8489b34"
- dependencies = [
-  "lexical-util",
-- "static_assertions",
- ]
- 
- [[package]]
- name = "lexical-util"
--version = "1.0.6"
-+version = "1.0.7"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "5a82e24bf537fd24c177ffbbdc6ebcc8d54732c35b50a3f28cc3f4e4c949a0b3"
--dependencies = [
-- "static_assertions",
--]
-+checksum = "2604dd126bb14f13fb5d1bd6a66155079cb9fa655b37f875b3a742c705dbed17"
- 
- [[package]]
- name = "lexical-write-float"
--version = "1.0.5"
-+version = "1.0.6"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "c5afc668a27f460fb45a81a757b6bf2f43c2d7e30cb5a2dcd3abf294c78d62bd"
-+checksum = "50c438c87c013188d415fbabbb1dceb44249ab81664efbd31b14ae55dabb6361"
- dependencies = [
-  "lexical-util",
-  "lexical-write-integer",
-- "static_assertions",
- ]
- 
- [[package]]
- name = "lexical-write-integer"
--version = "1.0.5"
-+version = "1.0.6"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "629ddff1a914a836fb245616a7888b62903aae58fa771e1d83943035efa0f978"
-+checksum = "409851a618475d2d5796377cad353802345cba92c867d9fbcde9cf4eac4e14df"
- dependencies = [
-  "lexical-util",
-- "static_assertions",
- ]
- 
- [[package]]
- name = "libc"
--version = "0.2.174"
-+version = "0.2.177"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "1171693293099992e19cddea4e8b849964e9846f4acee11b3948bcc337be8776"
-+checksum = "2874a2af47a2325c2001a6e6fad9b16a53b802102b528163885171cf92b15976"
- 
- [[package]]
- name = "libm"
-@@ -1172,9 +1170,9 @@ checksum = "f9fbbcab51052fe104eb5e5d351cf728d30a5be1fe14d9be8a3b097481fb97de"
- 
- [[package]]
- name = "linux-raw-sys"
--version = "0.9.4"
-+version = "0.11.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "cd945864f07fe9f5371a27ad7b52a172b4b499999f1d97574c9fa68373937e12"
-+checksum = "df1d3c3b53da64cf5760482273a98e575c651a67eec7f77df96b5b642de8f039"
- 
- [[package]]
- name = "litemap"
-@@ -1184,19 +1182,18 @@ checksum = "241eaef5fd12c88705a01fc1066c48c4b36e0dd4377dcdc7ec3942cea7a69956"
- 
- [[package]]
- name = "lock_api"
--version = "0.4.13"
-+version = "0.4.14"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "96936507f153605bddfcda068dd804796c84324ed2510809e5b2a624c81da765"
-+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
- dependencies = [
-- "autocfg",
-  "scopeguard",
- ]
- 
- [[package]]
- name = "log"
--version = "0.4.27"
-+version = "0.4.28"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "13dc2df351e3202783a1fe0d44375f7295ffb4049267b0f3018346dc122a1d94"
-+checksum = "34080505efa8e45a4b816c349525ebe327ceaa8559756f0356cba97ef3bf7432"
- 
- [[package]]
- name = "lru-slab"
-@@ -1226,9 +1223,9 @@ dependencies = [
- 
- [[package]]
- name = "memchr"
--version = "2.7.5"
-+version = "2.7.6"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "32a282da65faaf38286cf3be983213fcf1d2e2a58700e808f83f4ea9a4804bc0"
-+checksum = "f52b00d39961fc5b2736ea853c9cc86238e165017a493d1d5c8eac6bdc4cc273"
- 
- [[package]]
- name = "memoffset"
-@@ -1367,18 +1364,18 @@ dependencies = [
- 
- [[package]]
- name = "object"
--version = "0.36.7"
-+version = "0.37.3"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "62948e14d923ea95ea2c7c86c71013138b66525b86bdc08d2dcc262bdb497b87"
-+checksum = "ff76201f031d8863c38aa7f905eca4f53abbfa15f609db4277d44cd8938f33fe"
- dependencies = [
-  "memchr",
- ]
- 
- [[package]]
- name = "object_store"
--version = "0.12.3"
-+version = "0.12.4"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "efc4f07659e11cd45a341cd24d71e683e3be65d9ff1f8150061678fe60437496"
-+checksum = "4c1be0c6c22ec0817cdc77d3842f721a17fd30ab6965001415b5402a74e6b740"
- dependencies = [
-  "async-trait",
-  "base64",
-@@ -1403,7 +1400,7 @@ dependencies = [
-  "serde",
-  "serde_json",
-  "serde_urlencoded",
-- "thiserror 2.0.12",
-+ "thiserror 2.0.17",
-  "tokio",
-  "tracing",
-  "url",
-@@ -1449,9 +1446,9 @@ checksum = "d05e27ee213611ffe7d6348b942e8f942b37114c00cc03cec254295a4a17852e"
- 
- [[package]]
- name = "parking_lot"
--version = "0.12.4"
-+version = "0.12.5"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "70d58bf43669b5795d1576d0641cfb6fbb2057bf629506267a92807158584a13"
-+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
- dependencies = [
-  "lock_api",
-  "parking_lot_core",
-@@ -1459,22 +1456,22 @@ dependencies = [
- 
- [[package]]
- name = "parking_lot_core"
--version = "0.9.11"
-+version = "0.9.12"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "bc838d2a56b5b1a6c25f55575dfc605fabb63bb2365f6c2353ef9159aa69e4a5"
-+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
- dependencies = [
-  "cfg-if",
-  "libc",
-  "redox_syscall",
-  "smallvec",
-- "windows-targets 0.52.6",
-+ "windows-link",
- ]
- 
- [[package]]
- name = "percent-encoding"
--version = "2.3.1"
-+version = "2.3.2"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "e3148f5046208a5d56bcfc03053e3ca6334e51da8dfb19b6cdc8b306fae3283e"
-+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
- 
- [[package]]
- name = "phf"
-@@ -1523,9 +1520,9 @@ dependencies = [
- 
- [[package]]
- name = "potential_utf"
--version = "0.1.2"
-+version = "0.1.3"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "e5a7c30837279ca13e7c867e9e40053bc68740f988cb07f7ca6df43cc734b585"
-+checksum = "84df19adbe5b5a0782edcab45899906947ab039ccf4573713735ee7de1e6b08a"
- dependencies = [
-  "zerovec",
- ]
-@@ -1541,9 +1538,9 @@ dependencies = [
- 
- [[package]]
- name = "proc-macro2"
--version = "1.0.95"
-+version = "1.0.101"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "02b3e5e68a3a1a02aad3ec490a98007cbc13c37cbe84a3cd7b8e406d76e7f778"
-+checksum = "89ae43fd86e4158d6db51ad8e2b80f313af9cc74f5c0e03ccb87de09998732de"
- dependencies = [
-  "unicode-ident",
- ]
-@@ -1697,9 +1694,9 @@ dependencies = [
- 
- [[package]]
- name = "quick-xml"
--version = "0.38.0"
-+version = "0.38.3"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "8927b0664f5c5a98265138b7e3f90aa19a6b21353182469ace36d4ac527b7b1b"
-+checksum = "42a232e7487fc2ef313d96dde7948e7a3c05101870d8985e4fd8d26aedd27b89"
- dependencies = [
-  "memchr",
-  "serde",
-@@ -1707,9 +1704,9 @@ dependencies = [
- 
- [[package]]
- name = "quinn"
--version = "0.11.8"
-+version = "0.11.9"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "626214629cda6781b6dc1d316ba307189c85ba657213ce642d9c77670f8202c8"
-+checksum = "b9e20a958963c291dc322d98411f541009df2ced7b5a4f2bd52337638cfccf20"
- dependencies = [
-  "bytes",
-  "cfg_aliases",
-@@ -1719,7 +1716,7 @@ dependencies = [
-  "rustc-hash",
-  "rustls",
-  "socket2",
-- "thiserror 2.0.12",
-+ "thiserror 2.0.17",
-  "tokio",
-  "tracing",
-  "web-time",
-@@ -1727,9 +1724,9 @@ dependencies = [
- 
- [[package]]
- name = "quinn-proto"
--version = "0.11.12"
-+version = "0.11.13"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "49df843a9161c85bb8aae55f101bc0bac8bcafd637a620d9122fd7e0b2f7422e"
-+checksum = "f1906b49b0c3bc04b5fe5d86a77925ae6524a19b816ae38ce1e426255f1d8a31"
- dependencies = [
-  "bytes",
-  "getrandom 0.3.3",
-@@ -1740,7 +1737,7 @@ dependencies = [
-  "rustls",
-  "rustls-pki-types",
-  "slab",
-- "thiserror 2.0.12",
-+ "thiserror 2.0.17",
-  "tinyvec",
-  "tracing",
-  "web-time",
-@@ -1748,23 +1745,23 @@ dependencies = [
- 
- [[package]]
- name = "quinn-udp"
--version = "0.5.13"
-+version = "0.5.14"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "fcebb1209ee276352ef14ff8732e24cc2b02bbac986cd74a4c81bcb2f9881970"
-+checksum = "addec6a0dcad8a8d96a771f815f0eaf55f9d1805756410b39f5fa81332574cbd"
- dependencies = [
-  "cfg_aliases",
-  "libc",
-  "once_cell",
-  "socket2",
-  "tracing",
-- "windows-sys 0.59.0",
-+ "windows-sys 0.60.2",
- ]
- 
- [[package]]
- name = "quote"
--version = "1.0.40"
-+version = "1.0.41"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "1885c039570dc00dcb4ff087a89e185fd56bae234ddc7f056a945bf36467248d"
-+checksum = "ce25767e7b499d1b604768e7cde645d14cc8584231ea6b295e9c9eb22c02e1d1"
- dependencies = [
-  "proc-macro2",
- ]
-@@ -1777,9 +1774,9 @@ checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
- 
- [[package]]
- name = "rand"
--version = "0.9.1"
-+version = "0.9.2"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "9fbfd9d094a40bf3ae768db9361049ace4c0e04a4fd6b359518bd7b73a73dd97"
-+checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
- dependencies = [
-  "rand_chacha",
-  "rand_core",
-@@ -1812,18 +1809,18 @@ checksum = "60a357793950651c4ed0f3f52338f53b2f809f32d83a07f72909fa13e4c6c1e3"
- 
- [[package]]
- name = "redox_syscall"
--version = "0.5.13"
-+version = "0.5.18"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "0d04b7d0ee6b4a0207a0a7adb104d23ecb0b47d6beae7152d0fa34b692b29fd6"
-+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
- dependencies = [
-  "bitflags",
- ]
- 
- [[package]]
- name = "regex"
--version = "1.11.1"
-+version = "1.11.3"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "b544ef1b4eac5dc2db33ea63606ae9ffcfac26c1416a2806ae0bf5f56b201191"
-+checksum = "8b5288124840bee7b386bc413c487869b360b2b4ec421ea56425128692f2a82c"
- dependencies = [
-  "aho-corasick",
-  "memchr",
-@@ -1833,9 +1830,9 @@ dependencies = [
- 
- [[package]]
- name = "regex-automata"
--version = "0.4.9"
-+version = "0.4.11"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "809e8dc61f6de73b46c85f4c96486310fe304c434cfa43669d7b40f711150908"
-+checksum = "833eb9ce86d40ef33cb1306d8accf7bc8ec2bfea4355cbdebb3df68b40925cad"
- dependencies = [
-  "aho-corasick",
-  "memchr",
-@@ -1844,15 +1841,15 @@ dependencies = [
- 
- [[package]]
- name = "regex-syntax"
--version = "0.8.5"
-+version = "0.8.6"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c"
-+checksum = "caf4aa5b0f434c91fe5c7f1ecb6a5ece2130b02ad2a590589dda5146df959001"
- 
- [[package]]
- name = "reqwest"
--version = "0.12.22"
-+version = "0.12.23"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "cbc931937e6ca3a06e3b6c0aa7841849b160a90351d6ab467a8b9b9959767531"
-+checksum = "d429f34c8092b2d42c7c93cec323bb4adeb7c67698f70839adec842ec10c7ceb"
- dependencies = [
-  "base64",
-  "bytes",
-@@ -1906,9 +1903,9 @@ dependencies = [
- 
- [[package]]
- name = "rustc-demangle"
--version = "0.1.25"
-+version = "0.1.26"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "989e6739f80c4ad5b13e0fd7fe89531180375b18520cc8c82080e4dc4035b84f"
-+checksum = "56f7d92ca342cea22a06f2121d944b4fd82af56988c270852495420f961d4ace"
- 
- [[package]]
- name = "rustc-hash"
-@@ -1927,22 +1924,22 @@ dependencies = [
- 
- [[package]]
- name = "rustix"
--version = "1.0.8"
-+version = "1.1.2"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "11181fbabf243db407ef8df94a6ce0b2f9a733bd8be4ad02b4eda9602296cac8"
-+checksum = "cd15f8a2c5551a84d56efdc1cd049089e409ac19a3072d5037a17fd70719ff3e"
- dependencies = [
-  "bitflags",
-  "errno",
-  "libc",
-  "linux-raw-sys",
-- "windows-sys 0.60.2",
-+ "windows-sys 0.61.2",
- ]
- 
- [[package]]
- name = "rustls"
--version = "0.23.29"
-+version = "0.23.32"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "2491382039b29b9b11ff08b76ff6c97cf287671dbb74f0be44bda389fffe9bd1"
-+checksum = "cd3c25631629d034ce7cd9940adc9d45762d46de2b0f57193c4443b92c6d4d40"
- dependencies = [
-  "once_cell",
-  "ring",
-@@ -1985,9 +1982,9 @@ dependencies = [
- 
- [[package]]
- name = "rustls-webpki"
--version = "0.103.4"
-+version = "0.103.7"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "0a17884ae0c1b773f1ccd2bd4a8c72f16da897310a98b0e84bf349ad5ead92fc"
-+checksum = "e10b3f4191e8a80e6b43eebabfac91e5dcecebb27a71f04e820c47ec41d314bf"
- dependencies = [
-  "ring",
-  "rustls-pki-types",
-@@ -1996,9 +1993,9 @@ dependencies = [
- 
- [[package]]
- name = "rustversion"
--version = "1.0.21"
-+version = "1.0.22"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "8a0d197bd2c9dc6e53b84da9556a69ba4cdfab8619eb41a8bd1cc2027a0f6b1d"
-+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
- 
- [[package]]
- name = "ryu"
-@@ -2017,11 +2014,11 @@ dependencies = [
- 
- [[package]]
- name = "schannel"
--version = "0.1.27"
-+version = "0.1.28"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "1f29ebaa345f945cec9fbbc532eb307f0fdad8161f281b6369539c8d84876b3d"
-+checksum = "891d81b926048e76efe18581bf793546b4c0eaf8448d72be8de2bbee5fd166e1"
- dependencies = [
-- "windows-sys 0.59.0",
-+ "windows-sys 0.61.2",
- ]
- 
- [[package]]
-@@ -2032,9 +2029,9 @@ checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
- 
- [[package]]
- name = "security-framework"
--version = "3.2.0"
-+version = "3.5.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "271720403f46ca04f7ba6f55d438f8bd878d6b8ca0a1046e8228c4145bcbb316"
-+checksum = "b3297343eaf830f66ede390ea39da1d462b6b0c1b000f420d0a83f898bbbe6ef"
- dependencies = [
-  "bitflags",
-  "core-foundation",
-@@ -2045,9 +2042,9 @@ dependencies = [
- 
- [[package]]
- name = "security-framework-sys"
--version = "2.14.0"
-+version = "2.15.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "49db231d56a190491cb4aeda9527f1ad45345af50b0851622a7adb8c03b01c32"
-+checksum = "cc1f0cbffaac4852523ce30d8bd3c5cdc873501d96ff467ca09b6767bb8cd5c0"
- dependencies = [
-  "core-foundation-sys",
-  "libc",
-@@ -2055,27 +2052,38 @@ dependencies = [
- 
- [[package]]
- name = "semver"
--version = "1.0.26"
-+version = "1.0.27"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "56e6fa9c48d24d85fb3de5ad847117517440f6beceb7798af16b4a87d616b8d0"
-+checksum = "d767eb0aabc880b29956c35734170f26ed551a859dbd361d140cdbeca61ab1e2"
- dependencies = [
-  "serde",
-+ "serde_core",
- ]
- 
- [[package]]
- name = "serde"
--version = "1.0.219"
-+version = "1.0.228"
-+source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
-+dependencies = [
-+ "serde_core",
-+ "serde_derive",
-+]
-+
-+[[package]]
-+name = "serde_core"
-+version = "1.0.228"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "5f0e2c6ed6606019b4e29e69dbaba95b11854410e5347d525002456dbbb786b6"
-+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
- dependencies = [
-  "serde_derive",
- ]
- 
- [[package]]
- name = "serde_derive"
--version = "1.0.219"
-+version = "1.0.228"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "5b0276cf7f2c73365f7157c8123c21cd9a50fbbd844757af28ca1f5925fc2a00"
-+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
- dependencies = [
-  "proc-macro2",
-  "quote",
-@@ -2084,14 +2092,15 @@ dependencies = [
- 
- [[package]]
- name = "serde_json"
--version = "1.0.140"
-+version = "1.0.145"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "20068b6e96dc6c9bd23e01df8827e6c7e1f2fddd43c21810382803c136b99373"
-+checksum = "402a6f66d8c709116cf22f558eab210f5a50187f702eb4d7e5ef38d9a7f1c79c"
- dependencies = [
-  "itoa",
-  "memchr",
-  "ryu",
-  "serde",
-+ "serde_core",
- ]
- 
- [[package]]
-@@ -2150,9 +2159,9 @@ dependencies = [
- 
- [[package]]
- name = "slab"
--version = "0.4.10"
-+version = "0.4.11"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "04dc19736151f35336d325007ac991178d504a119863a2fcb3758cdb5e52c50d"
-+checksum = "7a2ae44ef20feb57a68b23d846850f861394c2e02dc425a50098ae8c90267589"
- 
- [[package]]
- name = "smallvec"
-@@ -2162,25 +2171,38 @@ checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
- 
- [[package]]
- name = "socket2"
--version = "0.5.10"
-+version = "0.6.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "e22376abed350d73dd1cd119b57ffccad95b4e585a7cda43e286245ce23c0678"
-+checksum = "233504af464074f9d066d7b5416c5f9b894a5862a6506e306f7b816cdd6f1807"
- dependencies = [
-  "libc",
-- "windows-sys 0.52.0",
-+ "windows-sys 0.59.0",
- ]
- 
- [[package]]
- name = "stable_deref_trait"
--version = "1.2.0"
-+version = "1.2.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "a8f112729512f8e442d81f95a8a7ddf2b7c6b8a1a6f509a95864142b30cab2d3"
-+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
- 
- [[package]]
--name = "static_assertions"
--version = "1.1.0"
-+name = "strum"
-+version = "0.26.3"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
-+checksum = "8fec0f0aef304996cf250b31b5a10dee7980c85da9d759361292b8bca5a18f06"
-+
-+[[package]]
-+name = "strum_macros"
-+version = "0.26.4"
-+source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "4c6bee85a5a24955dc440386795aa378cd9cf82acd5f764469152d2270e581be"
-+dependencies = [
-+ "heck",
-+ "proc-macro2",
-+ "quote",
-+ "rustversion",
-+ "syn",
-+]
- 
- [[package]]
- name = "subtle"
-@@ -2190,9 +2212,9 @@ checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
- 
- [[package]]
- name = "syn"
--version = "2.0.104"
-+version = "2.0.106"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "17b6f705963418cdb9927482fa304bc562ece2fdd4f616084c50b7023b435a40"
-+checksum = "ede7c438028d4436d71104916910f5bb611972c5cfd7f89b8300a8186e6fada6"
- dependencies = [
-  "proc-macro2",
-  "quote",
-@@ -2221,21 +2243,21 @@ dependencies = [
- 
- [[package]]
- name = "target-lexicon"
--version = "0.13.2"
-+version = "0.13.3"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "e502f78cdbb8ba4718f566c418c52bc729126ffd16baee5baa718cf25dd5a69a"
-+checksum = "df7f62577c25e07834649fc3b39fafdc597c0a3527dc1c60129201ccfcbaa50c"
- 
- [[package]]
- name = "tempfile"
--version = "3.20.0"
-+version = "3.23.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "e8a64e3985349f2441a1a9ef0b853f869006c3855f2cda6862a94d26ebb9d6a1"
-+checksum = "2d31c77bdf42a745371d260a26ca7163f1e0924b64afa0b688e61b5a9fa02f16"
- dependencies = [
-  "fastrand",
-  "getrandom 0.3.3",
-  "once_cell",
-  "rustix",
-- "windows-sys 0.59.0",
-+ "windows-sys 0.61.2",
- ]
- 
- [[package]]
-@@ -2249,11 +2271,11 @@ dependencies = [
- 
- [[package]]
- name = "thiserror"
--version = "2.0.12"
-+version = "2.0.17"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "567b8a2dae586314f7be2a752ec7474332959c6460e02bde30d702a66d488708"
-+checksum = "f63587ca0f12b72a0600bcba1d40081f830876000bb46dd2337a3051618f4fc8"
- dependencies = [
-- "thiserror-impl 2.0.12",
-+ "thiserror-impl 2.0.17",
- ]
- 
- [[package]]
-@@ -2269,9 +2291,9 @@ dependencies = [
- 
- [[package]]
- name = "thiserror-impl"
--version = "2.0.12"
-+version = "2.0.17"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "7f7cf42b4507d8ea322120659672cf1b9dbb93f8f2d4ecfd6e51350ff5b17a1d"
-+checksum = "3ff15c8ecd7de3849db632e14d18d2571fa09dfc5ed93479bc4485c7a517c913"
- dependencies = [
-  "proc-macro2",
-  "quote",
-@@ -2299,9 +2321,9 @@ dependencies = [
- 
- [[package]]
- name = "tinyvec"
--version = "1.9.0"
-+version = "1.10.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "09b3661f17e86524eccd4371ab0429194e0d7c008abb45f7a7495b1719463c71"
-+checksum = "bfa5fdc3bce6191a1dbc8c02d5c8bffcf557bafa17c124c5264a458f1b0613fa"
- dependencies = [
-  "tinyvec_macros",
- ]
-@@ -2314,9 +2336,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
- 
- [[package]]
- name = "tokio"
--version = "1.46.1"
-+version = "1.47.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "0cc3a2344dafbe23a245241fe8b09735b521110d30fcefbbd5feb1797ca35d17"
-+checksum = "89e49afdadebb872d3145a5638b59eb0691ea23e46ca484037cfab3b76b95038"
- dependencies = [
-  "backtrace",
-  "bytes",
-@@ -2327,7 +2349,7 @@ dependencies = [
-  "slab",
-  "socket2",
-  "tokio-macros",
-- "windows-sys 0.52.0",
-+ "windows-sys 0.59.0",
- ]
- 
- [[package]]
-@@ -2343,9 +2365,9 @@ dependencies = [
- 
- [[package]]
- name = "tokio-rustls"
--version = "0.26.2"
-+version = "0.26.4"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "8e727b36a1a0e8b74c376ac2211e40c2c8af09fb4013c60d910495810f008e9b"
-+checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
- dependencies = [
-  "rustls",
-  "tokio",
-@@ -2353,9 +2375,9 @@ dependencies = [
- 
- [[package]]
- name = "tokio-util"
--version = "0.7.15"
-+version = "0.7.16"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "66a539a9ad6d5d281510d5bd368c973d636c02dbf8a67300bfb6b950696ad7df"
-+checksum = "14307c986784f72ef81c89db7d9e28d6ac26d16213b109ea501696195e6e3ce5"
- dependencies = [
-  "bytes",
-  "futures-core",
-@@ -2489,9 +2511,9 @@ checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
- 
- [[package]]
- name = "typenum"
--version = "1.18.0"
-+version = "1.19.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "1dccffe3ce07af9386bfd29e80c0ab1a8205a2fc34e4bcd40364df902cfa8f3f"
-+checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb"
- 
- [[package]]
- name = "unicase"
-@@ -2501,21 +2523,15 @@ checksum = "75b844d17643ee918803943289730bec8aac480150456169e647ed0b576ba539"
- 
- [[package]]
- name = "unicode-ident"
--version = "1.0.18"
-+version = "1.0.19"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "5a5f39404a5da50712a4c1eecf25e90dd62b613502b7e925fd4e4d19b5c96512"
--
--[[package]]
--name = "unicode-segmentation"
--version = "1.12.0"
--source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "f6ccf251212114b54433ec949fd6a7841275f9ada20dddd2f29e9ceea4501493"
-+checksum = "f63a545481291138910575129486daeaf8ac54aee4387fe7906919f7830c7d9d"
- 
- [[package]]
- name = "unicode-width"
--version = "0.2.1"
-+version = "0.2.2"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "4a1a07cc7db3810833284e8d372ccdc6da29741639ecc70c9ec107df0fa6154c"
-+checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254"
- 
- [[package]]
- name = "unindent"
-@@ -2531,13 +2547,14 @@ checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
- 
- [[package]]
- name = "url"
--version = "2.5.4"
-+version = "2.5.7"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "32f8b686cadd1473f4bd0117a5d28d36b1ade384ea9b5069a1c40aefed7fda60"
-+checksum = "08bc136a29a3d1758e07a9cca267be308aeebf5cfd5a10f3f67ab2097683ef5b"
- dependencies = [
-  "form_urlencoded",
-  "idna",
-  "percent-encoding",
-+ "serde",
- ]
- 
- [[package]]
-@@ -2579,30 +2596,40 @@ checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
- 
- [[package]]
- name = "wasi"
--version = "0.14.2+wasi-0.2.4"
-+version = "0.14.7+wasi-0.2.4"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "9683f9a5a998d873c0d21fcbe3c083009670149a8fab228644b8bd36b2c48cb3"
-+checksum = "883478de20367e224c0090af9cf5f9fa85bed63a95c1abf3afc5c083ebc06e8c"
- dependencies = [
-- "wit-bindgen-rt",
-+ "wasip2",
-+]
-+
-+[[package]]
-+name = "wasip2"
-+version = "1.0.1+wasi-0.2.4"
-+source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "0562428422c63773dad2c345a1882263bbf4d65cf3f42e90921f787ef5ad58e7"
-+dependencies = [
-+ "wit-bindgen",
- ]
- 
- [[package]]
- name = "wasm-bindgen"
--version = "0.2.100"
-+version = "0.2.104"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "1edc8929d7499fc4e8f0be2262a241556cfc54a0bea223790e71446f2aab1ef5"
-+checksum = "c1da10c01ae9f1ae40cbfac0bac3b1e724b320abfcf52229f80b547c0d250e2d"
- dependencies = [
-  "cfg-if",
-  "once_cell",
-  "rustversion",
-  "wasm-bindgen-macro",
-+ "wasm-bindgen-shared",
- ]
- 
- [[package]]
- name = "wasm-bindgen-backend"
--version = "0.2.100"
-+version = "0.2.104"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "2f0a0651a5c2bc21487bde11ee802ccaf4c51935d0d3d42a6101f98161700bc6"
-+checksum = "671c9a5a66f49d8a47345ab942e2cb93c7d1d0339065d4f8139c486121b43b19"
- dependencies = [
-  "bumpalo",
-  "log",
-@@ -2614,9 +2641,9 @@ dependencies = [
- 
- [[package]]
- name = "wasm-bindgen-futures"
--version = "0.4.50"
-+version = "0.4.54"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "555d470ec0bc3bb57890405e5d4322cc9ea83cebb085523ced7be4144dac1e61"
-+checksum = "7e038d41e478cc73bae0ff9b36c60cff1c98b8f38f8d7e8061e79ee63608ac5c"
- dependencies = [
-  "cfg-if",
-  "js-sys",
-@@ -2627,9 +2654,9 @@ dependencies = [
- 
- [[package]]
- name = "wasm-bindgen-macro"
--version = "0.2.100"
-+version = "0.2.104"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "7fe63fc6d09ed3792bd0897b314f53de8e16568c2b3f7982f468c0bf9bd0b407"
-+checksum = "7ca60477e4c59f5f2986c50191cd972e3a50d8a95603bc9434501cf156a9a119"
- dependencies = [
-  "quote",
-  "wasm-bindgen-macro-support",
-@@ -2637,9 +2664,9 @@ dependencies = [
- 
- [[package]]
- name = "wasm-bindgen-macro-support"
--version = "0.2.100"
-+version = "0.2.104"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "8ae87ea40c9f689fc23f209965b6fb8a99ad69aeeb0231408be24920604395de"
-+checksum = "9f07d2f20d4da7b26400c9f4a0511e6e0345b040694e8a75bd41d578fa4421d7"
- dependencies = [
-  "proc-macro2",
-  "quote",
-@@ -2650,9 +2677,9 @@ dependencies = [
- 
- [[package]]
- name = "wasm-bindgen-shared"
--version = "0.2.100"
-+version = "0.2.104"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "1a05d73b933a847d6cccdda8f838a22ff101ad9bf93e33684f39c1f5f0eece3d"
-+checksum = "bad67dc8b2a1a6e5448428adec4c3e84c43e561d8c9ee8a9e5aabeb193ec41d1"
- dependencies = [
-  "unicode-ident",
- ]
-@@ -2672,9 +2699,9 @@ dependencies = [
- 
- [[package]]
- name = "web-sys"
--version = "0.3.77"
-+version = "0.3.81"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "33b6dd2ef9186f1f2072e409e99cd22a975331a6b3591b12c764e0e55c60d5d2"
-+checksum = "9367c417a924a74cae129e6a2ae3b47fabb1f8995595ab474029da749a8be120"
- dependencies = [
-  "js-sys",
-  "wasm-bindgen",
-@@ -2692,18 +2719,18 @@ dependencies = [
- 
- [[package]]
- name = "winapi-util"
--version = "0.1.9"
-+version = "0.1.11"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "cf221c93e13a30d793f7645a0e7762c55d169dbb0a49671918a2319d289b10bb"
-+checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
- dependencies = [
-- "windows-sys 0.59.0",
-+ "windows-sys 0.61.2",
- ]
- 
- [[package]]
- name = "windows-core"
--version = "0.61.2"
-+version = "0.62.2"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "c0fdd3ddb90610c7638aa2b3a3ab2904fb9e5cdbecc643ddb3647212781c4ae3"
-+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
- dependencies = [
-  "windows-implement",
-  "windows-interface",
-@@ -2714,9 +2741,9 @@ dependencies = [
- 
- [[package]]
- name = "windows-implement"
--version = "0.60.0"
-+version = "0.60.2"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "a47fddd13af08290e67f4acabf4b459f647552718f683a7b415d290ac744a836"
-+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
- dependencies = [
-  "proc-macro2",
-  "quote",
-@@ -2725,9 +2752,9 @@ dependencies = [
- 
- [[package]]
- name = "windows-interface"
--version = "0.59.1"
-+version = "0.59.3"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "bd9211b69f8dcdfa817bfd14bf1c97c9188afa36f4750130fcdf3f400eca9fa8"
-+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
- dependencies = [
-  "proc-macro2",
-  "quote",
-@@ -2736,24 +2763,24 @@ dependencies = [
- 
- [[package]]
- name = "windows-link"
--version = "0.1.3"
-+version = "0.2.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "5e6ad25900d524eaabdbbb96d20b4311e1e7ae1699af4fb28c17ae66c80d798a"
-+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
- 
- [[package]]
- name = "windows-result"
--version = "0.3.4"
-+version = "0.4.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "56f42bd332cc6c8eac5af113fc0c1fd6a8fd2aa08a0119358686e5160d0586c6"
-+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
- dependencies = [
-  "windows-link",
- ]
- 
- [[package]]
- name = "windows-strings"
--version = "0.4.2"
-+version = "0.5.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "56e6c93f3a0c3b36176cb1327a4958a0353d5d166c2a35cb268ace15e91d3b57"
-+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
- dependencies = [
-  "windows-link",
- ]
-@@ -2782,7 +2809,16 @@ version = "0.60.2"
- source = "registry+https://github.com/rust-lang/crates.io-index"
- checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
- dependencies = [
-- "windows-targets 0.53.2",
-+ "windows-targets 0.53.5",
-+]
-+
-+[[package]]
-+name = "windows-sys"
-+version = "0.61.2"
-+source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
-+dependencies = [
-+ "windows-link",
- ]
- 
- [[package]]
-@@ -2803,18 +2839,19 @@ dependencies = [
- 
- [[package]]
- name = "windows-targets"
--version = "0.53.2"
-+version = "0.53.5"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "c66f69fcc9ce11da9966ddb31a40968cad001c5bedeb5c2b82ede4253ab48aef"
-+checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
- dependencies = [
-- "windows_aarch64_gnullvm 0.53.0",
-- "windows_aarch64_msvc 0.53.0",
-- "windows_i686_gnu 0.53.0",
-- "windows_i686_gnullvm 0.53.0",
-- "windows_i686_msvc 0.53.0",
-- "windows_x86_64_gnu 0.53.0",
-- "windows_x86_64_gnullvm 0.53.0",
-- "windows_x86_64_msvc 0.53.0",
-+ "windows-link",
-+ "windows_aarch64_gnullvm 0.53.1",
-+ "windows_aarch64_msvc 0.53.1",
-+ "windows_i686_gnu 0.53.1",
-+ "windows_i686_gnullvm 0.53.1",
-+ "windows_i686_msvc 0.53.1",
-+ "windows_x86_64_gnu 0.53.1",
-+ "windows_x86_64_gnullvm 0.53.1",
-+ "windows_x86_64_msvc 0.53.1",
- ]
- 
- [[package]]
-@@ -2825,9 +2862,9 @@ checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
- 
- [[package]]
- name = "windows_aarch64_gnullvm"
--version = "0.53.0"
-+version = "0.53.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "86b8d5f90ddd19cb4a147a5fa63ca848db3df085e25fee3cc10b39b6eebae764"
-+checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
- 
- [[package]]
- name = "windows_aarch64_msvc"
-@@ -2837,9 +2874,9 @@ checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
- 
- [[package]]
- name = "windows_aarch64_msvc"
--version = "0.53.0"
-+version = "0.53.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "c7651a1f62a11b8cbd5e0d42526e55f2c99886c77e007179efff86c2b137e66c"
-+checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
- 
- [[package]]
- name = "windows_i686_gnu"
-@@ -2849,9 +2886,9 @@ checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
- 
- [[package]]
- name = "windows_i686_gnu"
--version = "0.53.0"
-+version = "0.53.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "c1dc67659d35f387f5f6c479dc4e28f1d4bb90ddd1a5d3da2e5d97b42d6272c3"
-+checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
- 
- [[package]]
- name = "windows_i686_gnullvm"
-@@ -2861,9 +2898,9 @@ checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
- 
- [[package]]
- name = "windows_i686_gnullvm"
--version = "0.53.0"
-+version = "0.53.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "9ce6ccbdedbf6d6354471319e781c0dfef054c81fbc7cf83f338a4296c0cae11"
-+checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
- 
- [[package]]
- name = "windows_i686_msvc"
-@@ -2873,9 +2910,9 @@ checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
- 
- [[package]]
- name = "windows_i686_msvc"
--version = "0.53.0"
-+version = "0.53.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "581fee95406bb13382d2f65cd4a908ca7b1e4c2f1917f143ba16efe98a589b5d"
-+checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
- 
- [[package]]
- name = "windows_x86_64_gnu"
-@@ -2885,9 +2922,9 @@ checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
- 
- [[package]]
- name = "windows_x86_64_gnu"
--version = "0.53.0"
-+version = "0.53.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "2e55b5ac9ea33f2fc1716d1742db15574fd6fc8dadc51caab1c16a3d3b4190ba"
-+checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
- 
- [[package]]
- name = "windows_x86_64_gnullvm"
-@@ -2897,9 +2934,9 @@ checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
- 
- [[package]]
- name = "windows_x86_64_gnullvm"
--version = "0.53.0"
-+version = "0.53.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "0a6e035dd0599267ce1ee132e51c27dd29437f63325753051e71dd9e42406c57"
-+checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
- 
- [[package]]
- name = "windows_x86_64_msvc"
-@@ -2909,27 +2946,24 @@ checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
- 
- [[package]]
- name = "windows_x86_64_msvc"
--version = "0.53.0"
-+version = "0.53.1"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "271414315aff87387382ec3d271b52d7ae78726f5d44ac98b4f4030c91880486"
-+checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
- 
- [[package]]
- name = "winnow"
--version = "0.7.12"
-+version = "0.7.13"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "f3edebf492c8125044983378ecb5766203ad3b4c2f7a922bd7dd207f6d443e95"
-+checksum = "21a0236b59786fed61e2a80582dd500fe61f18b5dca67a4a067d0bc9039339cf"
- dependencies = [
-  "memchr",
- ]
- 
- [[package]]
--name = "wit-bindgen-rt"
--version = "0.39.0"
-+name = "wit-bindgen"
-+version = "0.46.0"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "6f42320e61fe2cfd34354ecb597f86f413484a798ba44a8ca1165c58d42da6c1"
--dependencies = [
-- "bitflags",
--]
-+checksum = "f17a85883d4e6d00e8a97c586de764dabcc06133f7f1d55dce5cdc070ad7fe59"
- 
- [[package]]
- name = "writeable"
-@@ -2963,18 +2997,18 @@ dependencies = [
- 
- [[package]]
- name = "zerocopy"
--version = "0.8.26"
-+version = "0.8.27"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "1039dd0d3c310cf05de012d8a39ff557cb0d23087fd44cad61df08fc31907a2f"
-+checksum = "0894878a5fa3edfd6da3f88c4805f4c8558e2b996227a3d864f47fe11e38282c"
- dependencies = [
-  "zerocopy-derive",
- ]
- 
- [[package]]
- name = "zerocopy-derive"
--version = "0.8.26"
-+version = "0.8.27"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "9ecf5b4cc5364572d7f4c329661bcc82724222973f2cab6f050a4e5c22f75181"
-+checksum = "88d2b8d9c68ad2b9e4340d7832716a4d21a22a1154777ad56ea55c51a9cf3831"
- dependencies = [
-  "proc-macro2",
-  "quote",
-@@ -3004,9 +3038,9 @@ dependencies = [
- 
- [[package]]
- name = "zeroize"
--version = "1.8.1"
-+version = "1.8.2"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "ced3678a2879b30306d323f4542626697a464a97c0a07c9aebf7ebca65cd4dde"
-+checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
- 
- [[package]]
- name = "zerotrie"
-@@ -3021,9 +3055,9 @@ dependencies = [
- 
- [[package]]
- name = "zerovec"
--version = "0.11.2"
-+version = "0.11.4"
- source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "4a05eb080e015ba39cc9e23bbe5e7fb04d5fb040350f99f34e338d5fdd294428"
-+checksum = "e7aa2bd55086f1ab526693ecbe444205da57e25f4489879da80635a46d90e73b"
- dependencies = [
-  "yoke",
-  "zerofrom",
-@@ -3040,8 +3074,3 @@ dependencies = [
-  "quote",
-  "syn",
- ]
--
--[[patch.unused]]
--name = "object_store"
--version = "0.12.2"
--source = "git+https://github.com/apache/arrow-rs-object-store?rev=f422dce1528ee2a089d8061af639c3f2a9cd43af#f422dce1528ee2a089d8061af639c3f2a9cd43af"
-diff --git a/Cargo.toml b/Cargo.toml
-index 649ed6e..5d5d455 100644
---- a/Cargo.toml
-+++ b/Cargo.toml
-@@ -26,7 +26,7 @@ chrono = "0.4.38"
- futures = "0.3.31"
- http = "1.2"
- indexmap = "2"
--object_store = "0.12.3"
-+object_store = "0.12.4"
- pyo3 = { version = "0.26", features = ["macros", "indexmap"] }
- pyo3-async-runtimes = { version = "0.26", features = ["tokio-runtime"] }
- pyo3-file = { git = "https://github.com/alex/pyo3-file", rev = "82b96dc188a48b88421f41b24cb13da114fd2fe8" }
-@@ -37,6 +37,3 @@ url = "2"
- [profile.release]
- lto = true
- codegen-units = 1
--
--[patch.crates-io]
--object_store = { git = "https://github.com/apache/arrow-rs-object-store", rev = "f422dce1528ee2a089d8061af639c3f2a9cd43af" }
-diff --git a/pyo3-object_store/Cargo.toml b/pyo3-object_store/Cargo.toml
-index f497345..f32f71b 100644
---- a/pyo3-object_store/Cargo.toml
-+++ b/pyo3-object_store/Cargo.toml
-@@ -28,7 +28,7 @@ humantime = "2.1"
- http = "1"
- # This is already an object_store dependency
- itertools = "0.14.0"
--object_store = { version = "0.12", features = ["aws", "azure", "gcp", "http"] }
-+object_store = { version = "0.12.4", features = ["aws", "azure", "gcp", "http"] }
- # This is already an object_store dependency
- percent-encoding = "2.1"
- pyo3 = { version = "0.26", features = ["chrono", "indexmap"] }
diff --git a/pkgs/development/python-modules/oelint-data/default.nix b/pkgs/development/python-modules/oelint-data/default.nix
index 7e9b34daec37..7150513cbb98 100644
--- a/pkgs/development/python-modules/oelint-data/default.nix
+++ b/pkgs/development/python-modules/oelint-data/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "oelint-data";
-  version = "1.4.4";
+  version = "1.4.5";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "priv-kweihmann";
     repo = "oelint-data";
     tag = finalAttrs.version;
-    hash = "sha256-gbTbGrTwdHnC0Ydqta0SJP7tujqyz5TCeLJ4tSbkAkU=";
+    hash = "sha256-QEzpNnDcubQnZbGOgJlSZQfQg8rZH0A2SFm3qViFL5c=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/oelint-parser/default.nix b/pkgs/development/python-modules/oelint-parser/default.nix
index 4125fe410959..d2a2800cc0ea 100644
--- a/pkgs/development/python-modules/oelint-parser/default.nix
+++ b/pkgs/development/python-modules/oelint-parser/default.nix
@@ -13,14 +13,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "oelint-parser";
-  version = "8.9.0";
+  version = "8.9.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "priv-kweihmann";
     repo = "oelint-parser";
     tag = finalAttrs.version;
-    hash = "sha256-STWfz2qdQPOFWmNZJkgGNBDFAeQwEj+g6pZgLJf++ps=";
+    hash = "sha256-k/8NESePMe70PbqZNaMJu3aPSDMfT1JkixWYBvnmR9I=";
   };
 
   pythonRelaxDeps = [ "regex" ];
diff --git a/pkgs/development/python-modules/posthog/default.nix b/pkgs/development/python-modules/posthog/default.nix
index 593ab78fd07d..50d0c294bf44 100644
--- a/pkgs/development/python-modules/posthog/default.nix
+++ b/pkgs/development/python-modules/posthog/default.nix
@@ -22,14 +22,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "posthog";
-  version = "7.9.4";
+  version = "7.9.8";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "PostHog";
     repo = "posthog-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-E6cO6v79Sk0ItR3Je+pw+V4i4gJyRzeQnxIFgRIK1Xs=";
+    hash = "sha256-iVtAQHhl48cR+Rh3voNBDzpalvqL11R9H4uYmw+0Zgc=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/protoletariat/default.nix b/pkgs/development/python-modules/protoletariat/default.nix
index 2187bdbece57..92f5a09ed77c 100644
--- a/pkgs/development/python-modules/protoletariat/default.nix
+++ b/pkgs/development/python-modules/protoletariat/default.nix
@@ -8,7 +8,7 @@
   click,
   pkgs,
   protobuf,
-  mypy-protobuf,
+  mypy-protobuf_3_6,
   pytestCheckHook,
   writableTmpDirAsHomeHook,
 }:
@@ -47,11 +47,10 @@ buildPythonPackage (finalAttrs: {
   nativeCheckInputs = [
     pytestCheckHook
     writableTmpDirAsHomeHook
-    mypy-protobuf
+    mypy-protobuf_3_6
   ];
 
   meta = {
-    broken = true;
     description = "Python protocol buffers for the rest of us";
     changelog = "https://github.com/cpcloud/protoletariat/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     license = with lib.licenses; [ asl20 ];
diff --git a/pkgs/development/python-modules/proton-vpn-api-core/default.nix b/pkgs/development/python-modules/proton-vpn-api-core/default.nix
index 2b6aec691cde..2a723c203c99 100644
--- a/pkgs/development/python-modules/proton-vpn-api-core/default.nix
+++ b/pkgs/development/python-modules/proton-vpn-api-core/default.nix
@@ -27,14 +27,14 @@
 
 buildPythonPackage rec {
   pname = "proton-vpn-api-core";
-  version = "4.14.3";
+  version = "4.16.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ProtonVPN";
     repo = "python-proton-vpn-api-core";
     rev = "v${version}";
-    hash = "sha256-yWiUiR0us+ISa9cdjfN4IzlbiZEzUlndNFy/BpfHYqk=";
+    hash = "sha256-XYyDEAUQ0fzg2J8NJbYlGqd2vG1cUTyfo9YzPisbWSY=";
   };
 
   postPatch = ''
diff --git a/pkgs/development/python-modules/pyeconet/default.nix b/pkgs/development/python-modules/pyeconet/default.nix
index 9cfd661f6f0f..12bbc1e6f7a5 100644
--- a/pkgs/development/python-modules/pyeconet/default.nix
+++ b/pkgs/development/python-modules/pyeconet/default.nix
@@ -7,16 +7,16 @@
   setuptools,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "pyeconet";
-  version = "0.2.1";
+  version = "0.2.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "w1ll1am23";
     repo = "pyeconet";
-    tag = "v${version}";
-    hash = "sha256-Gep2XGWiaO7IRJ1BouwQ2VrbDPNPZVhiqlGTVWOsQgM=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-sQXIMm5ddkqkFgTYOsy9srKxLUy505iFhrtGAbOLzc0=";
   };
 
   build-system = [ setuptools ];
@@ -36,8 +36,8 @@ buildPythonPackage rec {
   meta = {
     description = "Python interface to the EcoNet API";
     homepage = "https://github.com/w1ll1am23/pyeconet";
-    changelog = "https://github.com/w1ll1am23/pyeconet/releases/tag/${src.tag}";
+    changelog = "https://github.com/w1ll1am23/pyeconet/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/pymupdf/default.nix b/pkgs/development/python-modules/pymupdf/default.nix
index 589b57f819a3..29ae26cd4837 100644
--- a/pkgs/development/python-modules/pymupdf/default.nix
+++ b/pkgs/development/python-modules/pymupdf/default.nix
@@ -42,16 +42,16 @@ let
   mupdf-cxx-lib = toPythonModule (lib.getLib mupdf-cxx);
   mupdf-cxx-dev = lib.getDev mupdf-cxx;
 in
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "pymupdf";
-  version = "1.26.7";
+  version = "1.27.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pymupdf";
     repo = "PyMuPDF";
-    tag = version;
-    hash = "sha256-7OidTOG3KAx7EaQ3Bu4i1Fw007oXVAipBHeYNkmbIcA=";
+    tag = finalAttrs.version;
+    hash = "sha256-Ebvdkvp0y7seG0sciMMnztflIBVRHh/Cowpw/lSLYLE=";
   };
 
   patches = [
@@ -122,6 +122,7 @@ buildPythonPackage rec {
     "test_codespell"
     "test_pylint"
     "test_flake8"
+    "test_4751"
     # Upstream recommends disabling these when not using bundled MuPDF build
     "test_color_count"
     "test_3050"
@@ -140,6 +141,9 @@ buildPythonPackage rec {
   disabledTestPaths = [
     # mad about markdown table formatting
     "tests/test_tables.py::test_markdown"
+
+    # Do not lint code
+    "tests/test_typing.py"
   ]
   ++ lib.optional stdenv.hostPlatform.isDarwin [
     # Trace/BPT trap: 5 when getting widget options
@@ -164,9 +168,9 @@ buildPythonPackage rec {
   meta = {
     description = "Python bindings for MuPDF's rendering library";
     homepage = "https://github.com/pymupdf/PyMuPDF";
-    changelog = "https://github.com/pymupdf/PyMuPDF/releases/tag/${src.tag}";
+    changelog = "https://github.com/pymupdf/PyMuPDF/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.agpl3Only;
     maintainers = with lib.maintainers; [ sarahec ];
     platforms = lib.platforms.unix;
   };
-}
+})
diff --git a/pkgs/development/python-modules/pymupdf4llm/default.nix b/pkgs/development/python-modules/pymupdf4llm/default.nix
index 695dc03b962e..b93929758c47 100644
--- a/pkgs/development/python-modules/pymupdf4llm/default.nix
+++ b/pkgs/development/python-modules/pymupdf4llm/default.nix
@@ -4,25 +4,29 @@
   fetchFromGitHub,
   setuptools,
   pymupdf,
+  tabulate,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "pymupdf4llm";
-  version = "0.2.9";
+  version = "0.3.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pymupdf";
     repo = "RAG";
-    tag = version;
-    hash = "sha256-iuffv49voZLiuabwhag+YC3j3Oa2IAevZtcJtMVzX/4=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-SgJ47jkE6GcSXVsOMOx8Hm+Ce6pCAjLEhdxGeJEu6DQ=";
   };
 
-  sourceRoot = "${src.name}/pymupdf4llm";
+  sourceRoot = "${finalAttrs.src.name}/pymupdf4llm";
 
   build-system = [ setuptools ];
 
-  dependencies = [ pymupdf ];
+  dependencies = [
+    pymupdf
+    tabulate
+  ];
 
   checkPhase = ''
     runHook preCheck
@@ -49,8 +53,8 @@ buildPythonPackage rec {
   meta = {
     description = "PyMuPDF Utilities for LLM/RAG - converts PDF pages to Markdown format for Retrieval-Augmented Generation";
     homepage = "https://github.com/pymupdf/RAG";
-    changelog = "https://github.com/pymupdf/RAG/blob/${src.tag}/CHANGES.md";
+    changelog = "https://github.com/pymupdf/RAG/blob/${finalAttrs.src.tag}/CHANGES.md";
     license = lib.licenses.agpl3Only;
     maintainers = with lib.maintainers; [ ryota2357 ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/pysequoia/default.nix b/pkgs/development/python-modules/pysequoia/default.nix
index 6c9a5f421a9b..a5eda7ad0688 100644
--- a/pkgs/development/python-modules/pysequoia/default.nix
+++ b/pkgs/development/python-modules/pysequoia/default.nix
@@ -8,17 +8,17 @@
 
 buildPythonPackage rec {
   pname = "pysequoia";
-  version = "0.1.29";
+  version = "0.1.31";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-PWzXXBAKrVZaFtZCYOyMHX5DIickqN9eR6DYhDNBoJo=";
+    hash = "sha256-1qvMoytvivcVkiBFB6wzt4ejxAbxCAOg+ENRtT8LtdE=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname version src;
-    hash = "sha256-sZTbPlfkZLWcRmdOWLBw8k0pIukAjQ53C8Zs9gLEW+I=";
+    hash = "sha256-kr7Gqj4qQ6x/AOXaMoY4kBqP0q3iXLfpzyLQQDb0b8k=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/python-modules/python-keystoneclient/default.nix b/pkgs/development/python-modules/python-keystoneclient/default.nix
index e39f57f5c41c..1e0fc4b24283 100644
--- a/pkgs/development/python-modules/python-keystoneclient/default.nix
+++ b/pkgs/development/python-modules/python-keystoneclient/default.nix
@@ -16,13 +16,13 @@
 
 buildPythonPackage rec {
   pname = "python-keystoneclient";
-  version = "5.7.0";
+  version = "5.8.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "python_keystoneclient";
     inherit version;
-    hash = "sha256-jOe/HIzdym1xQPx2kYtE7d8dZAQKYMuP9wWRNhBNTOs=";
+    hash = "sha256-PKh8Z8QEKYzoYjELVp9UWlis91zVaFCUyC81Mgs6NV0=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/python-otcextensions/default.nix b/pkgs/development/python-modules/python-otcextensions/default.nix
new file mode 100644
index 000000000000..56b435ffc307
--- /dev/null
+++ b/pkgs/development/python-modules/python-otcextensions/default.nix
@@ -0,0 +1,81 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  mock,
+  openstacksdk,
+  osc-lib,
+  oslo-config,
+  oslo-i18n,
+  oslotest,
+  pbr,
+  prometheus-client,
+  python-novaclient,
+  python-openstackclient,
+  requests-mock,
+  setuptools,
+  stestrCheckHook,
+}:
+
+buildPythonPackage rec {
+  pname = "python-otcextensions";
+  version = "0.32.29";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "opentelekomcloud";
+    repo = "python-otcextensions";
+    tag = version;
+    hash = "sha256-hqxCnIfVJPnlwree0+kY9iXXjPMoGd06tVT+yT6rex8=";
+  };
+
+  env.PBR_VERSION = version;
+
+  build-system = [
+    pbr
+    setuptools
+  ];
+
+  dependencies = [
+    openstacksdk
+    osc-lib
+    oslo-config
+    oslo-i18n
+    python-novaclient
+    python-openstackclient
+  ];
+
+  nativeCheckInputs = [
+    mock
+    oslotest
+    prometheus-client
+    requests-mock
+    stestrCheckHook
+  ];
+
+  disabledTests = [
+    # Requires networking
+    "otcextensions.tests.unit.test_stats.TestNoStats.test_no_stats"
+    "otcextensions.tests.unit.test_stats.TestStats.test_list_projects"
+    "otcextensions.tests.unit.test_stats.TestStats.test_projects"
+    "otcextensions.tests.unit.test_stats.TestStats.test_servers_error"
+    "otcextensions.tests.unit.test_stats.TestStats.test_servers_no_detail"
+    "otcextensions.tests.unit.test_stats.TestStats.test_sfsturbo_share"
+    "otcextensions.tests.unit.test_stats.TestStats.test_timeout"
+  ];
+
+  pythonImportsCheck = [
+    "otcextensions"
+    "otcextensions.common"
+    "otcextensions.osclient"
+    "otcextensions.sdk"
+  ];
+
+  meta = {
+    description = "OpenStack SDK and client extensions for Open Telekom Cloud services";
+    homepage = "https://github.com/opentelekomcloud/python-otcextensions";
+    changelog = "https://github.com/opentelekomcloud/python-otcextensions/releases/tag/${version}";
+    license = lib.licenses.asl20;
+    teams = [ lib.teams.openstack ];
+  };
+}
diff --git a/pkgs/development/python-modules/pyturbojpeg/default.nix b/pkgs/development/python-modules/pyturbojpeg/default.nix
index 98c085edba15..05d24e31f8d4 100644
--- a/pkgs/development/python-modules/pyturbojpeg/default.nix
+++ b/pkgs/development/python-modules/pyturbojpeg/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage rec {
   pname = "pyturbojpeg";
-  version = "2.0.0";
+  version = "2.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "lilohuang";
     repo = "PyTurboJPEG";
     tag = "v${version}";
-    hash = "sha256-yITX+6mP8AihaTFjZG9A5U6pAUTdPy6UDbbjnznwuqI=";
+    hash = "sha256-Sue8S/2/dY3aF7fihHuqpHXotcXcijcqAXGCJn8Z5VE=";
   };
 
   patches = [
diff --git a/pkgs/development/python-modules/pywerview/default.nix b/pkgs/development/python-modules/pywerview/default.nix
index c6ea7e7b7d20..35b6d10f9939 100644
--- a/pkgs/development/python-modules/pywerview/default.nix
+++ b/pkgs/development/python-modules/pywerview/default.nix
@@ -11,16 +11,16 @@
   setuptools,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "pywerview";
-  version = "0.7.5";
+  version = "0.7.6";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "the-useless-one";
     repo = "pywerview";
-    tag = "v${version}";
-    hash = "sha256-wl7/u9Uja/FflO3tN3UyanX2LIRG417RfWdyZCtUtGs=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-i4YV6PfcazoW8z2Awbn8ake4qhA/m43UzECqiEO4QLg=";
   };
 
   build-system = [ setuptools ];
@@ -46,9 +46,9 @@ buildPythonPackage rec {
   meta = {
     description = "Module for PowerSploit's PowerView support";
     homepage = "https://github.com/the-useless-one/pywerview";
-    changelog = "https://github.com/the-useless-one/pywerview/releases/tag/${src.tag}";
+    changelog = "https://github.com/the-useless-one/pywerview/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.gpl3Plus;
     maintainers = with lib.maintainers; [ fab ];
     mainProgram = "pywerview";
   };
-}
+})
diff --git a/pkgs/development/python-modules/rio-tiler/default.nix b/pkgs/development/python-modules/rio-tiler/default.nix
index c475020c3168..91dc919876ca 100644
--- a/pkgs/development/python-modules/rio-tiler/default.nix
+++ b/pkgs/development/python-modules/rio-tiler/default.nix
@@ -14,13 +14,15 @@
   morecantile,
   numexpr,
   numpy,
+  obstore,
   pydantic,
   pystac,
   rasterio,
   rioxarray,
+  zarr,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "rio-tiler";
   version = "8.0.5";
   pyproject = true;
@@ -28,7 +30,7 @@ buildPythonPackage rec {
   src = fetchFromGitHub {
     owner = "cogeotiff";
     repo = "rio-tiler";
-    tag = version;
+    tag = finalAttrs.version;
     hash = "sha256-FOTwP4iTLfWl81KKarLOQQyp4gpi6Q+pjUXfZrXXsfo=";
   };
 
@@ -47,19 +49,26 @@ buildPythonPackage rec {
     rasterio
   ];
 
+  optional-dependencies = {
+    s3 = [ boto3 ];
+    xarray = [ rioxarray ];
+    zarr = [
+      obstore
+      zarr
+    ];
+  };
+
   nativeCheckInputs = [
-    boto3
     h5netcdf
     pytestCheckHook
-    rioxarray
-  ];
+  ]
+  ++ lib.flatten (builtins.attrValues finalAttrs.passthru.optional-dependencies);
 
   pythonImportsCheck = [ "rio_tiler" ];
 
   disabledTests = [
-    # Requires obstore
+    # Requires network access
     "test_dataset_reader"
-    "test_dataset_reader_variable"
   ];
 
   meta = {
@@ -68,4 +77,4 @@ buildPythonPackage rec {
     license = lib.licenses.bsd3;
     teams = [ lib.teams.geospatial ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/sphinx-markdown-builder/default.nix b/pkgs/development/python-modules/sphinx-markdown-builder/default.nix
index ca5ea53928cd..900dd28ac63b 100644
--- a/pkgs/development/python-modules/sphinx-markdown-builder/default.nix
+++ b/pkgs/development/python-modules/sphinx-markdown-builder/default.nix
@@ -3,7 +3,6 @@
   buildPythonPackage,
   fetchFromGitHub,
   nix-update-script,
-  fetchpatch2,
 
   # build system
   setuptools,
@@ -43,15 +42,6 @@ buildPythonPackage rec {
     hash = "sha256-DTc+yVFOGLXFyrgkwfgY3X60chyU3UDs0GwuPCzff28=";
   };
 
-  patches = [
-    # FIX: tests (remove with the next release)
-    # https://github.com/liran-funaro/sphinx-markdown-builder/issues/32
-    (fetchpatch2 {
-      url = "https://github.com/liran-funaro/sphinx-markdown-builder/commit/967edca036a73f7644251abd52a5da8451a10dd4.patch";
-      hash = "sha256-FGMYzd5k3Q0UvOccCvUSW3y6gor+AUncj2qv38xyOp4=";
-    })
-  ];
-
   build-system = [
     setuptools
     wheel
diff --git a/pkgs/development/python-modules/trimesh/default.nix b/pkgs/development/python-modules/trimesh/default.nix
index b8ecab21278a..f08f1363d7f1 100644
--- a/pkgs/development/python-modules/trimesh/default.nix
+++ b/pkgs/development/python-modules/trimesh/default.nix
@@ -27,14 +27,14 @@
 
 buildPythonPackage rec {
   pname = "trimesh";
-  version = "4.11.2";
+  version = "4.11.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mikedh";
     repo = "trimesh";
     tag = version;
-    hash = "sha256-E78gIZ+lzobEt5xckiCZoA6+FomhSxFjnbjchPLYNio=";
+    hash = "sha256-0GIeCNqNjV7BlhjHxEpdwgdiX+diq4keM2PvjSI1FdM=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/txtai/default.nix b/pkgs/development/python-modules/txtai/default.nix
index bb0dc8982c58..2a2dfe4db5f3 100644
--- a/pkgs/development/python-modules/txtai/default.nix
+++ b/pkgs/development/python-modules/txtai/default.nix
@@ -93,7 +93,7 @@
   pytestCheckHook,
 }:
 let
-  version = "9.5.0";
+  version = "9.6.0";
   agent = [
     mcpadapt
     smolagents
@@ -241,7 +241,7 @@ let
     owner = "neuml";
     repo = "txtai";
     tag = "v${version}";
-    hash = "sha256-V/XgFQjw/GLmFx5wseMnYwT5gbUVYIQwek9eVOVqafg=";
+    hash = "sha256-CNq49tZDyD9OY2MPv0Xeg15hdERv83Juq6I7CA1z19o=";
   };
 in
 buildPythonPackage {
diff --git a/pkgs/development/python-modules/wfuzz/default.nix b/pkgs/development/python-modules/wfuzz/default.nix
index 2fdce5236819..058836e43726 100644
--- a/pkgs/development/python-modules/wfuzz/default.nix
+++ b/pkgs/development/python-modules/wfuzz/default.nix
@@ -16,7 +16,7 @@
   legacy-cgi,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "wfuzz";
   version = "3.1.1";
   pyproject = true;
@@ -24,7 +24,7 @@ buildPythonPackage rec {
   src = fetchFromGitHub {
     owner = "xmendez";
     repo = "wfuzz";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-OYMZHo0ujRzwOcE+EKRNPxffxVbbiMHe+AqBz7q/u2A=";
   };
 
@@ -37,11 +37,6 @@ buildPythonPackage rec {
     })
   ];
 
-  postPatch = ''
-    substituteInPlace setup.py \
-      --replace-fail "pyparsing>=2.4*" "pyparsing>=2.4"
-  '';
-
   build-system = [ setuptools ];
 
   dependencies = [
@@ -80,7 +75,7 @@ buildPythonPackage rec {
   '';
 
   meta = {
-    changelog = "https://github.com/xmendez/wfuzz/releases/tag/${src.tag}";
+    changelog = "https://github.com/xmendez/wfuzz/releases/tag/${finalAttrs.src.tag}";
     description = "Web content fuzzer to facilitate web applications assessments";
     longDescription = ''
       Wfuzz provides a framework to automate web applications security assessments
@@ -91,4 +86,4 @@ buildPythonPackage rec {
     license = with lib.licenses; [ gpl2Only ];
     maintainers = with lib.maintainers; [ pamplemousse ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/wgpu-py/default.nix b/pkgs/development/python-modules/wgpu-py/default.nix
index 72d937d01fc3..2592f6a765bb 100644
--- a/pkgs/development/python-modules/wgpu-py/default.nix
+++ b/pkgs/development/python-modules/wgpu-py/default.nix
@@ -37,16 +37,16 @@
   testers,
   wgpu-py,
 }:
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "wgpu-py";
-  version = "0.29.0";
+  version = "0.31.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pygfx";
     repo = "wgpu-py";
-    tag = "v${version}";
-    hash = "sha256-drXO3NHIuK34tbOZjxOCz1lnlcrfx6mADZ2WlEc9vDU=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-qy5tBlmA9mwEkk87WhIa5UxbXYNVFct6CrUWKm3Fy5s=";
   };
 
   postPatch =
@@ -142,10 +142,10 @@ buildPythonPackage rec {
   meta = {
     description = "WebGPU for Python";
     homepage = "https://github.com/pygfx/wgpu-py";
-    changelog = "https://github.com/pygfx/wgpu-py/blob/${src.tag}/CHANGELOG.md";
+    changelog = "https://github.com/pygfx/wgpu-py/blob/${finalAttrs.src.tag}/CHANGELOG.md";
 
     platforms = lib.platforms.all;
     license = lib.licenses.bsd2;
     maintainers = [ lib.maintainers.bengsparks ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/yara-x/default.nix b/pkgs/development/python-modules/yara-x/default.nix
index af1ecfcaacc1..8444ddd1f908 100644
--- a/pkgs/development/python-modules/yara-x/default.nix
+++ b/pkgs/development/python-modules/yara-x/default.nix
@@ -9,21 +9,21 @@
 
 buildPythonPackage rec {
   pname = "yara-x";
-  version = "1.13.0";
+  version = "1.14.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "VirusTotal";
     repo = "yara-x";
     tag = "v${version}";
-    hash = "sha256-EEvy0UtmBlgC3b57SOwr7dI49R7PYeFqsZKyzo0zx9w=";
+    hash = "sha256-gGkBmJoUa9WiIozSwhe18N8i5uSiKsSQ3J1NAT41ro4=";
   };
 
   buildAndTestSubdir = "py";
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname src version;
-    hash = "sha256-ihNFGlPhPLCIDvFnMqKA+flD/mv9wcKgQ1txO71xOp4=";
+    hash = "sha256-j+sIxYPvkI1EnAN7LcBoS4m04rYdKlK48tGO0uFa7KU=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/default.nix b/pkgs/development/rocm-modules/default.nix
index 9c8832fcf3b0..c89340f298ba 100644
--- a/pkgs/development/rocm-modules/default.nix
+++ b/pkgs/development/rocm-modules/default.nix
@@ -175,20 +175,9 @@ let
 
       rpp = self.callPackage ./rpp { };
 
-      rpp-hip = self.rpp.override {
-        useOpenCL = false;
-        useCPU = false;
-      };
+      rpp-hip = self.rpp.override { useCPU = false; };
 
-      rpp-opencl = self.rpp.override {
-        useOpenCL = true;
-        useCPU = false;
-      };
-
-      rpp-cpu = self.rpp.override {
-        useOpenCL = false;
-        useCPU = true;
-      };
+      rpp-cpu = self.rpp.override { useCPU = true; };
 
       mivisionx = self.callPackage ./mivisionx {
         stdenv = origStdenv;
@@ -256,6 +245,11 @@ let
       };
     }
     // lib.optionalAttrs config.allowAliases {
+      rpp-opencl = throw ''
+        'rpp-opencl' has been removed as it has been broken for a year and has no consuming packages.
+        Use 'rpp' or 'rpp-cpu' instead.
+      ''; # Added 2026-03-08
+
       rocmPath = throw ''
         'rocm-path' has been removed. If a ROCM_PATH value is required in nixpkgs please
         construct one with the minimal set of required deps.
diff --git a/pkgs/development/rocm-modules/llvm/default.nix b/pkgs/development/rocm-modules/llvm/default.nix
index 161f30355735..8403c2259fa4 100644
--- a/pkgs/development/rocm-modules/llvm/default.nix
+++ b/pkgs/development/rocm-modules/llvm/default.nix
@@ -306,6 +306,29 @@ overrideLlvmPackagesRocm (s: {
         stripLen = 1;
       })
       ./perf-increase-namestring-size.patch
+      # v64i8 shuffle lowering inf loop on VBMI targets, hangs whisper-cpp etc
+      # https://github.com/NixOS/nixpkgs/issues/497745
+      (fetchpatch {
+        # https://github.com/llvm/llvm-project/pull/182832
+        name = "llvm-x86-v64i8-add-test-coverage.patch";
+        url = "https://github.com/llvm/llvm-project/commit/0e3a96d0ec01e3575674d72c4e23bf98affdca28.patch";
+        relative = "llvm";
+        hash = "sha256-qhRkB8Fjz/fNacuGv1OFkiTNOQ0/QQ9p4pLFudwrTzM=";
+      })
+      (fetchpatch {
+        # https://github.com/llvm/llvm-project/pull/182852
+        name = "llvm-x86-v64i8-prefer-vpermv3-on-vbmi.patch";
+        url = "https://github.com/llvm/llvm-project/commit/8f5880d3ae4e5dfc748985d90e5413671028aa3e.patch";
+        relative = "llvm";
+        hash = "sha256-4DU6gu/1+iQpzvVYBlTTUKtw77QSRyTja4hdel4D5Cw=";
+      })
+      (fetchpatch {
+        # https://github.com/llvm/llvm-project/pull/183109
+        name = "llvm-x86-v64i8-skip-repeated-mask-lane-permute-on-vbmi.patch";
+        url = "https://github.com/llvm/llvm-project/commit/1b9fea021840f17c41ea980300d0fc45e7285909.patch";
+        relative = "llvm";
+        hash = "sha256-9Akm78QQr8BIMrVWwDG3poWS1HuQ0hpIQWfke3oADgg=";
+      })
       # TODO: consider reapplying "Don't include aliases in RegisterClassInfo::IgnoreCSRForAllocOrder"
       # it was reverted as it's a pessimization for non-GPU archs, but this compiler
       # is used mostly for amdgpu
diff --git a/pkgs/development/rocm-modules/release-attrPaths.json b/pkgs/development/rocm-modules/release-attrPaths.json
index 71ed86fa6c90..dfa15e06096a 100644
--- a/pkgs/development/rocm-modules/release-attrPaths.json
+++ b/pkgs/development/rocm-modules/release-attrPaths.json
@@ -30,6 +30,7 @@
     "chatd",
     "cloudcompare",
     "contact",
+    "convertx",
     "costa",
     "cp2k",
     "crewai",
@@ -40,6 +41,7 @@
     "dl-poly-classic-mpi",
     "dolfinx",
     "dtcmp",
+    "dyndnsc",
     "easyocr",
     "elastix",
     "elmerfem",
@@ -63,6 +65,7 @@
     "firefox-mobile",
     "firefox-unwrapped",
     "firefoxpwa",
+    "fotema",
     "freecad",
     "frigate",
     "gdcm",
@@ -79,13 +82,17 @@
     "haskellPackages.mpi-hs-store",
     "hdf5-fortran-mpi",
     "hdf5-mpi",
+    "heretic",
     "hieroglyphic",
     "highfive-mpi",
+    "hns",
+    "howdy",
     "hp2p",
     "hpcg",
     "hpl",
     "hypre",
     "hyprpanel",
+    "hyprwhspr-rs",
     "ieda",
     "imagination",
     "immich-machine-learning",
@@ -100,6 +107,8 @@
     "kikoplay",
     "lacus",
     "lammps-mpi",
+    "lasuite-docs",
+    "lasuite-meet",
     "libcircle",
     "libmbd",
     "libretranslate",
@@ -107,6 +116,7 @@
     "librewolf-unwrapped",
     "libsupermesh",
     "libvdwxc",
+    "linux-enable-ir-emitter",
     "livecaptions",
     "llama-cpp",
     "llama-cpp-vulkan",
@@ -117,6 +127,7 @@
     "magika-cli",
     "manim",
     "manim-slides",
+    "markitdown-mcp",
     "meshtastic",
     "midivisualizer",
     "migrate",
@@ -132,6 +143,8 @@
     "mumps-mpi",
     "mvapich",
     "nest-mpi",
+    "netbox",
+    "netbox_4_4",
     "netcdf-mpi",
     "netgen",
     "neuron-mpi",
@@ -149,8 +162,8 @@
     "openseeface",
     "opensplat",
     "opentrack",
+    "osu-micro-benchmarks",
     "otb",
-    "owncast",
     "owocr",
     "p4est",
     "p4est-dbg",
@@ -204,15 +217,16 @@
     "python3Packages.cleanvision",
     "python3Packages.clip",
     "python3Packages.clip-anytorch",
+    "python3Packages.cloudevents",
     "python3Packages.cltk",
     "python3Packages.clu",
-    "python3Packages.cnvkit",
     "python3Packages.colbert-ai",
     "python3Packages.compressai",
     "python3Packages.compressed-tensors",
     "python3Packages.conduit-mpi",
     "python3Packages.corner",
     "python3Packages.crewai",
+    "python3Packages.cross-web",
     "python3Packages.ctranslate2",
     "python3Packages.curated-transformers",
     "python3Packages.cut-cross-entropy",
@@ -228,13 +242,17 @@
     "python3Packages.diffusers",
     "python3Packages.distrax",
     "python3Packages.dm-sonnet",
+    "python3Packages.dockerflow",
     "python3Packages.docling-core",
     "python3Packages.docling-ibm-models",
     "python3Packages.easyocr",
     "python3Packages.edward",
     "python3Packages.effdet",
     "python3Packages.einops",
+    "python3Packages.elastic-apm",
     "python3Packages.encodec",
+    "python3Packages.entrance",
+    "python3Packages.entrance-with-router-features",
     "python3Packages.envisage",
     "python3Packages.evosax",
     "python3Packages.executorch",
@@ -255,6 +273,7 @@
     "python3Packages.flax",
     "python3Packages.flowjax",
     "python3Packages.flyingsquid",
+    "python3Packages.functions-framework",
     "python3Packages.funsor",
     "python3Packages.fvcore",
     "python3Packages.gdcm",
@@ -276,7 +295,8 @@
     "python3Packages.gymnasium",
     "python3Packages.h5io",
     "python3Packages.h5py-mpi",
-    "python3Packages.holistic-trace-analysis",
+    "python3Packages.helium",
+    "python3Packages.heretic-llm",
     "python3Packages.hoomd-blue",
     "python3Packages.hyper-connections",
     "python3Packages.ignite",
@@ -287,6 +307,7 @@
     "python3Packages.iopath",
     "python3Packages.itk",
     "python3Packages.jaxopt",
+    "python3Packages.json-logging",
     "python3Packages.julius",
     "python3Packages.k-diffusion",
     "python3Packages.kahip",
@@ -342,9 +363,11 @@
     "python3Packages.llm-sentence-transformers",
     "python3Packages.lm-eval",
     "python3Packages.local-attention",
+    "python3Packages.lpips",
     "python3Packages.magika",
     "python3Packages.manga-ocr",
     "python3Packages.manifest-ml",
+    "python3Packages.manim",
     "python3Packages.manimgl",
     "python3Packages.markitdown",
     "python3Packages.mayavi",
@@ -353,9 +376,11 @@
     "python3Packages.medvol",
     "python3Packages.meep",
     "python3Packages.meshtastic",
+    "python3Packages.mflux",
     "python3Packages.mhcflurry",
     "python3Packages.mim-solvers",
     "python3Packages.minari",
+    "python3Packages.minisbd",
     "python3Packages.mlcroissant",
     "python3Packages.mlflow",
     "python3Packages.mlx-lm",
@@ -371,6 +396,18 @@
     "python3Packages.mtcnn",
     "python3Packages.napari-nifti",
     "python3Packages.nest",
+    "python3Packages.netbox-attachments",
+    "python3Packages.netbox-bgp",
+    "python3Packages.netbox-contract",
+    "python3Packages.netbox-documents",
+    "python3Packages.netbox-floorplan-plugin",
+    "python3Packages.netbox-interface-synchronization",
+    "python3Packages.netbox-napalm-plugin",
+    "python3Packages.netbox-plugin-prometheus-sd",
+    "python3Packages.netbox-qrcode",
+    "python3Packages.netbox-reorder-rack",
+    "python3Packages.netbox-routing",
+    "python3Packages.netbox-topology-views",
     "python3Packages.netgen-mesher",
     "python3Packages.nianet",
     "python3Packages.nifty8",
@@ -378,7 +415,10 @@
     "python3Packages.numpyro",
     "python3Packages.nutpie",
     "python3Packages.nvdlfw-inspect",
+    "python3Packages.onnx-asr",
+    "python3Packages.onnx-ir",
     "python3Packages.onnxruntime",
+    "python3Packages.onnxscript",
     "python3Packages.open-clip-torch",
     "python3Packages.openai-whisper",
     "python3Packages.opencv4Full",
@@ -406,7 +446,6 @@
     "python3Packages.piper-phonemize",
     "python3Packages.pocket-tts",
     "python3Packages.pomegranate",
-    "python3Packages.pyannote-audio",
     "python3Packages.pyannote-pipeline",
     "python3Packages.pydub",
     "python3Packages.pyglet",
@@ -452,15 +491,21 @@
     "python3Packages.safetensors",
     "python3Packages.sagemaker-mlflow",
     "python3Packages.sam2",
+    "python3Packages.sanic",
+    "python3Packages.sanic-auth",
+    "python3Packages.sanic-ext",
+    "python3Packages.sanic-testing",
     "python3Packages.scanpy",
     "python3Packages.scikit-bio",
     "python3Packages.scikit-survival",
     "python3Packages.sentence-transformers",
     "python3Packages.shap",
+    "python3Packages.sherpa-onnx",
     "python3Packages.shimmy",
     "python3Packages.simpleitk",
     "python3Packages.sirius",
     "python3Packages.skrl",
+    "python3Packages.slack-bolt",
     "python3Packages.slepc4py",
     "python3Packages.slicer",
     "python3Packages.smolagents",
@@ -470,11 +515,12 @@
     "python3Packages.spacy-loggers",
     "python3Packages.spacy-lookups-data",
     "python3Packages.spacy-transformers",
-    "python3Packages.speechbrain",
     "python3Packages.speechrecognition",
     "python3Packages.stable-baselines3",
     "python3Packages.stanza",
     "python3Packages.staticvectors",
+    "python3Packages.strawberry-django",
+    "python3Packages.strawberry-graphql",
     "python3Packages.stytra",
     "python3Packages.syne-tune",
     "python3Packages.tables",
@@ -513,9 +559,11 @@
     "python3Packages.torchsde",
     "python3Packages.torchsnapshot",
     "python3Packages.torchsummary",
+    "python3Packages.torchtitan",
     "python3Packages.torchtnt",
     "python3Packages.torchtune",
     "python3Packages.torchvision",
+    "python3Packages.tracerite",
     "python3Packages.trainer",
     "python3Packages.transformers",
     "python3Packages.translatehtml",
@@ -535,13 +583,13 @@
     "python3Packages.wandb",
     "python3Packages.waymax",
     "python3Packages.webdataset",
-    "python3Packages.whisperx",
     "python3Packages.x-transformers",
     "python3Packages.xarray-einstats",
     "python3Packages.xformers",
     "python3Packages.xgrammar",
     "qcsxcad",
     "quantum-espresso",
+    "rabbit-ng",
     "ramalama",
     "rapidraw",
     "raxml-mpi",
@@ -555,6 +603,7 @@
     "scalapack-ilp64",
     "scipopt-ug",
     "seagoat",
+    "sherpa-onnx",
     "siesta",
     "siesta-mpi",
     "simpleitk",
@@ -592,6 +641,7 @@
     "tts",
     "ucc",
     "ucx",
+    "ultralytics",
     "unbook",
     "unstructured-api",
     "vcmi",
@@ -600,6 +650,7 @@
     "vimPlugins.vectorcode-nvim",
     "viskores",
     "vllm",
+    "voxtype-onnx",
     "vtk",
     "vtk-dicom",
     "vtk-full",
@@ -607,11 +658,8 @@
     "vtk_9_5",
     "whisper-cpp",
     "whisper-cpp-vulkan",
-    "whisper-ctranslate2",
-    "whisperx",
     "wifite2",
     "witnessme",
-    "wivrn",
     "wlr-layout-ui",
     "wyoming-faster-whisper",
     "wyoming-piper",
diff --git a/pkgs/development/rocm-modules/rocm-comgr/default.nix b/pkgs/development/rocm-modules/rocm-comgr/default.nix
index 4e1d5432a178..0a49cb0a24fa 100644
--- a/pkgs/development/rocm-modules/rocm-comgr/default.nix
+++ b/pkgs/development/rocm-modules/rocm-comgr/default.nix
@@ -40,6 +40,9 @@ stdenv.mkDerivation (finalAttrs: {
       url = "https://github.com/GZGavinZhao/rocm-llvm-project/commit/2c1e44fc3eacadcafdd4ada3e3184a092b6f26c5.patch";
       relative = "amd/comgr";
     })
+    # Fix: CCOB compat patch used coerced (featureless) name for output filename,
+    # causing CLR's code_obj_map key to miss when looking up device ISA with features
+    ./fix-ccob-compat-output-filename.patch
   ];
 
   postPatch = ''
diff --git a/pkgs/development/rocm-modules/rocm-comgr/fix-ccob-compat-output-filename.patch b/pkgs/development/rocm-modules/rocm-comgr/fix-ccob-compat-output-filename.patch
new file mode 100644
index 000000000000..813f419ef3a9
--- /dev/null
+++ b/pkgs/development/rocm-modules/rocm-comgr/fix-ccob-compat-output-filename.patch
@@ -0,0 +1,11 @@
+--- a/src/comgr-compiler.cpp
++++ b/src/comgr-compiler.cpp
+@@ -1425,7 +1425,7 @@
+       // Add an output file for each target
+       SmallString<128> OutputFilePath = OutputDir;
+       sys::path::append(OutputFilePath,
+-                        OutputPrefix + "-" + CompatEntry + "." + FileExtension);
++                        OutputPrefix + "-" + Entry + "." + FileExtension);
+
+       BundlerConfig.TargetNames.emplace_back(CompatEntry);
+       BundlerConfig.OutputFileNames.emplace_back(OutputFilePath);
diff --git a/pkgs/development/rocm-modules/rpp/default.nix b/pkgs/development/rocm-modules/rpp/default.nix
index 8a2f54277b38..b587e3d27283 100644
--- a/pkgs/development/rocm-modules/rpp/default.nix
+++ b/pkgs/development/rocm-modules/rpp/default.nix
@@ -12,22 +12,12 @@
   boost,
   python3Packages,
   buildDocs ? false, # Needs internet
-  useOpenCL ? false,
   useCPU ? false,
   gpuTargets ? clr.localGpuTargets or [ ],
 }:
 
 stdenv.mkDerivation (finalAttrs: {
-  pname =
-    "rpp-"
-    + (
-      if (!useOpenCL && !useCPU) then
-        "hip"
-      else if (!useOpenCL && !useCPU) then
-        "opencl"
-      else
-        "cpu"
-    );
+  pname = "rpp-${if useCPU then "cpu" else "hip"}";
 
   version = "7.2.0";
 
@@ -59,21 +49,13 @@ stdenv.mkDerivation (finalAttrs: {
     "-DCMAKE_INSTALL_BINDIR=bin"
     "-DCMAKE_INSTALL_LIBDIR=lib"
     "-DCMAKE_INSTALL_INCLUDEDIR=include"
+    "-DBACKEND=${if useCPU then "CPU" else "HIP"}"
   ]
   ++ lib.optionals (gpuTargets != [ ]) [
     "-DAMDGPU_TARGETS=${lib.concatStringsSep ";" gpuTargets}"
-  ]
-  ++ lib.optionals (!useOpenCL && !useCPU) [
-    "-DBACKEND=HIP"
-  ]
-  ++ lib.optionals (useOpenCL && !useCPU) [
-    "-DBACKEND=OCL"
-  ]
-  ++ lib.optionals useCPU [
-    "-DBACKEND=CPU"
   ];
 
-  postPatch = lib.optionalString (!useOpenCL && !useCPU) ''
+  postPatch = lib.optionalString (!useCPU) ''
     # Bad path
     substituteInPlace CMakeLists.txt \
       --replace "COMPILER_FOR_HIP \''${ROCM_PATH}/llvm/bin/clang++" "COMPILER_FOR_HIP ${clr}/bin/hipcc"
@@ -95,6 +77,5 @@ stdenv.mkDerivation (finalAttrs: {
     license = with lib.licenses; [ mit ];
     teams = [ lib.teams.rocm ];
     platforms = lib.platforms.linux;
-    broken = useOpenCL;
   };
 })
diff --git a/pkgs/development/tools/build-managers/gradle/default.nix b/pkgs/development/tools/build-managers/gradle/default.nix
index 7d8c31368ab7..1d6b9f25ddac 100644
--- a/pkgs/development/tools/build-managers/gradle/default.nix
+++ b/pkgs/development/tools/build-managers/gradle/default.nix
@@ -364,8 +364,8 @@ rec {
   # https://docs.gradle.org/current/userguide/compatibility.html
 
   gradle_9 = mkGradle {
-    version = "9.3.1";
-    hash = "sha256-smbV/2uQ6tptw7IMsJDjcxMC5VOifF0+TfHw12vq/wY=";
+    version = "9.4.0";
+    hash = "sha256-YOpyM1bYEmPoAC/sD8+eKw7uDAhQx6PXqwpj8szGAfM=";
     defaultJava = jdk21;
   };
   gradle_8 = mkGradle {
diff --git a/pkgs/development/tools/build-managers/gradle/fetch-deps.nix b/pkgs/development/tools/build-managers/gradle/fetch-deps.nix
index 9bb4686072fa..36c5124f3a8a 100644
--- a/pkgs/development/tools/build-managers/gradle/fetch-deps.nix
+++ b/pkgs/development/tools/build-managers/gradle/fetch-deps.nix
@@ -176,14 +176,14 @@ let
                   uniqueVersions' = map (x: x.version) uniqueVersionFiles;
                   releaseVersions = map (x: x.version) (builtins.filter (x: !x.isSnapshot) uniqueVersionFiles);
                   latestVer = v.latest or v.release or (lib.last uniqueVersions');
-                  releaseVer = v.release or (lib.last releaseVersions);
+                  releaseVer = v.release or (if releaseVersions != [ ] then lib.last releaseVersions else null);
 
                   # The very latest version isn't necessarily used by Gradle, so it may not be present in the MITM data.
                   # In order to generate better metadata xml, if the latest version is known but wasn't fetched by Gradle,
                   # add it anyway.
                   uniqueVersions =
                     uniqueVersions'
-                    ++ lib.optional (!builtins.elem releaseVer uniqueVersions') releaseVer
+                    ++ lib.optional (releaseVer != null && !builtins.elem releaseVer uniqueVersions') releaseVer
                     ++ lib.optional (!builtins.elem latestVer uniqueVersions' && releaseVer != latestVer) latestVer;
 
                   lastUpdated =
@@ -235,7 +235,7 @@ let
                   ''
                 else
                   assert !containsSpecialXmlChars latestVer;
-                  assert !containsSpecialXmlChars releaseVer;
+                  assert releaseVer == null || !containsSpecialXmlChars releaseVer;
                   ''
                     <?xml version="1.0" encoding="UTF-8"?>
                     <metadata modelVersion="1.1.0">
@@ -243,7 +243,7 @@ let
                       <artifactId>${artifactId}</artifactId>
                       <versioning>
                         <latest>${latestVer}</latest>
-                        <release>${releaseVer}</release>
+                    ${lib.optionalString (releaseVer != null) "    <release>${releaseVer}</release>"}
                         <versions>
                     ${builtins.concatStringsSep "\n" (map (x: "      <version>${x}</version>") uniqueVersions)}
                         </versions>
diff --git a/pkgs/development/tools/pnpm/default.nix b/pkgs/development/tools/pnpm/default.nix
index 448f57e30562..de952551a1a1 100644
--- a/pkgs/development/tools/pnpm/default.nix
+++ b/pkgs/development/tools/pnpm/default.nix
@@ -14,10 +14,17 @@ let
       version = "9.15.9";
       hash = "sha256-z4anrXZEBjldQoam0J1zBxFyCsxtk+nc6ax6xNxKKKc=";
     };
-    "10" = {
+    # 10.29.3 made a breaking change: https://github.com/pnpm/pnpm/issues/10601.
+    # Pnpm packages that depend on electron builder must be upgraded to 26.8.2 or newer
+    # otherwise a runtime error will occur when launching the application.
+    "10_29_2" = {
       version = "10.29.2";
       hash = "sha256-hAL2daH0zJ1PJ7v6s1wtSi4dfrATHfA9rQlhnoZnTQw=";
     };
+    "10" = {
+      version = "10.30.3";
+      hash = "sha256-/wpyFA9qbWbAsoT2yVYK/2BVGOKMKa6sJfsmK3QzFYg=";
+    };
   };
 
   callPnpm = variant: callPackage ./generic.nix { inherit (variant) version hash; };
diff --git a/pkgs/games/dwarf-fortress/df.lock.json b/pkgs/games/dwarf-fortress/df.lock.json
index f9731927c865..534cc66f4a90 100644
--- a/pkgs/games/dwarf-fortress/df.lock.json
+++ b/pkgs/games/dwarf-fortress/df.lock.json
@@ -1,28 +1,28 @@
 {
   "game": {
     "latest": {
-      "linux": "53.10",
+      "linux": "53.11",
       "darwin": "0.47.05"
     },
     "versions": {
-      "53.10": {
+      "53.11": {
         "df": {
-          "version": "53.10",
+          "version": "53.11",
           "urls": {
             "linux": {
-              "url": "https://www.bay12games.com/dwarves/df_53_10_linux.tar.bz2",
-              "outputHash": "sha256-JdG48F1EJ1lvnJQUq7fMCgBKWXX2nyJj8odkOtDi/fY="
+              "url": "https://www.bay12games.com/dwarves/df_53_11_linux.tar.bz2",
+              "outputHash": "sha256-Ss1SHsLr3V9aMWptIpd6PTO9ZmqPZiR8P97vNRBuLZs="
             }
           }
         },
         "hack": {
-          "version": "53.10-r1",
+          "version": "53.11-r1",
           "git": {
             "url": "https://github.com/DFHack/dfhack.git",
-            "revision": "53.10-r1",
-            "outputHash": "sha256-PSmZY8QK9hHgxh+VHYn1bFN9LScpBjpVzFaGHTEGCaY="
+            "revision": "53.11-r1",
+            "outputHash": "sha256-w2yfR9kOw13Ag3wxEHMXI9tVZMUwfgUWmrSVD1ViU4U="
           },
-          "xmlRev": "3826f45ef0fad7bd3357a6d55d5c9d28b56614c2"
+          "xmlRev": "d79288374802cc63b1507900030b32231ffd244b"
         }
       },
       "52.05": {
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/iwlwifi-firmware/package.nix b/pkgs/os-specific/bsd/freebsd/pkgs/iwlwifi-firmware/package.nix
new file mode 100644
index 000000000000..fc357098f95a
--- /dev/null
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/iwlwifi-firmware/package.nix
@@ -0,0 +1,55 @@
+{
+  lib,
+  mkDerivation,
+  sys,
+  buildFreebsd,
+  linux-firmware,
+}:
+mkDerivation rec {
+  # out-of-tree, but we still want to use freebsd.mkDerivation, which wants an in-tree path
+  path = "...";
+
+  pname = "iwlwifi-firmware";
+  version = linux-firmware.version;
+
+  # Upstream FreeBSD doesn't wrap wifi firmware, only gpu firmware.
+  # We have to write our own build scripts for this.
+  src = ./src;
+
+  outputs = [
+    "out"
+    "debug"
+  ];
+
+  extraNativeBuildInputs = [ buildFreebsd.xargs-j ];
+
+  env = sys.passthru.env;
+  SYSDIR = "${sys.src}/sys";
+  KERN_DEBUGDIR = "${builtins.placeholder "debug"}/lib/debug";
+  KERN_DEBUGDIR_KODIR = "${KERN_DEBUGDIR}/kernel";
+  KERN_DEBUGDIR_KMODDIR = "${KERN_DEBUGDIR}/kernel";
+  KMODDIR = "${placeholder "out"}/kernel";
+
+  LINUX_FIRMWARE = "${linux-firmware}/lib/firmware";
+
+  # generates relocations the linker can't handle
+  hardeningDisable = [
+    "pic"
+  ];
+
+  makeFlags = [
+    "DEBUG_FLAGS=-g"
+    "XARGS_J=xargs-j"
+    "NO_XREF=1"
+  ];
+
+  preConfigure = ''
+    bash gen-makefiles
+  '';
+
+  meta = {
+    description = "Intel Wifi Firmware for FreeBSD";
+    platforms = lib.platforms.freebsd;
+    license = linux-firmware.meta.license;
+  };
+}
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/iwlwifi-firmware/src/Makefile.inc b/pkgs/os-specific/bsd/freebsd/pkgs/iwlwifi-firmware/src/Makefile.inc
new file mode 100644
index 000000000000..810faf24a206
--- /dev/null
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/iwlwifi-firmware/src/Makefile.inc
@@ -0,0 +1,8 @@
+KMOD=	${NAME}
+
+FIRMWS=	${NAME}:${NAME}
+
+CLEANFILES+=	${NAME} ${NAME}.fwo ${NAME}.ko.debug ${NAME}.ko.full
+
+${NAME}: ${LINUX_FIRMWARE}/intel/iwlwifi/${NAME}
+	cp $? ${.TARGET}
diff --git a/pkgs/os-specific/bsd/freebsd/pkgs/iwlwifi-firmware/src/gen-makefiles b/pkgs/os-specific/bsd/freebsd/pkgs/iwlwifi-firmware/src/gen-makefiles
new file mode 100644
index 000000000000..e9250b7e6e3c
--- /dev/null
+++ b/pkgs/os-specific/bsd/freebsd/pkgs/iwlwifi-firmware/src/gen-makefiles
@@ -0,0 +1,26 @@
+set -e
+
+scriptdir=$(cd $(dirname $0) && pwd)
+fwdir=$LINUX_FIRMWARE/intel/iwlwifi
+
+for dir in $scriptdir/*; do
+	if [ ! -d "$dir" ]; then
+		continue
+	fi
+	rm -rf "$dir"
+done
+
+for file in $fwdir/*.*; do
+	base=$(basename $file)
+
+	echo "SUBDIR += $base" >> Makefile
+
+	mkdir -p "$scriptdir/$base"
+	cat > "$scriptdir/$base/Makefile" <<EOF
+NAME=		$base
+
+.include <bsd.kmod.mk>
+EOF
+done
+
+echo ".include <bsd.subdir.mk>" >> Makefile
diff --git a/pkgs/servers/home-assistant/custom-components/powercalc/package.nix b/pkgs/servers/home-assistant/custom-components/powercalc/package.nix
index a343146adc2a..ef61e89e392e 100644
--- a/pkgs/servers/home-assistant/custom-components/powercalc/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/powercalc/package.nix
@@ -17,13 +17,13 @@
 buildHomeAssistantComponent rec {
   owner = "bramstroker";
   domain = "powercalc";
-  version = "1.20.6";
+  version = "1.20.8";
 
   src = fetchFromGitHub {
     inherit owner;
     repo = "homeassistant-powercalc";
     tag = "v${version}";
-    hash = "sha256-OOTqek+0CoAPHJugrzhpvOAvNNxZxG/KUjNxfsq71qQ=";
+    hash = "sha256-E23GJOnc54iefgf5Y+purEPH4OrtlNiIs1EkcR2TjHM=";
   };
 
   dependencies = [ numpy ];
diff --git a/pkgs/tools/misc/steampipe-packages/steampipe-plugin-aws/default.nix b/pkgs/tools/misc/steampipe-packages/steampipe-plugin-aws/default.nix
index 80adc8fcc790..8afea81ef3ba 100644
--- a/pkgs/tools/misc/steampipe-packages/steampipe-plugin-aws/default.nix
+++ b/pkgs/tools/misc/steampipe-packages/steampipe-plugin-aws/default.nix
@@ -8,16 +8,16 @@
 
 buildGoModule rec {
   pname = "steampipe-plugin-aws";
-  version = "1.29.0";
+  version = "1.30.0";
 
   src = fetchFromGitHub {
     owner = "turbot";
     repo = "steampipe-plugin-aws";
     tag = "v${version}";
-    hash = "sha256-tpRiQUdZro0wkGn/XJDlMtOsFNicmgLqb+fI1ozrOf0=";
+    hash = "sha256-SiiiWPSNLp5pVVokrKUvHFFm1qiU4zU/pKfUZyRB8xI=";
   };
 
-  vendorHash = "sha256-ZN1OordavH5BCarEpUxjgsIUvM4PruAeIaNRMYXrmRM=";
+  vendorHash = "sha256-4xHWVbqdEfnB6GIqqeyMg/xc42a1WKbhTgdo0GhA+NU=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 801652b02a16..c85ac4ed6fb3 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -2238,8 +2238,11 @@ with pkgs;
 
   tsm-client-withGui = callPackage ../by-name/ts/tsm-client/package.nix { enableGui = true; };
 
-  tracy-glfw = callPackage ../by-name/tr/tracy/package.nix { withWayland = false; };
-  tracy-wayland = callPackage ../by-name/tr/tracy/package.nix { withWayland = true; };
+  inherit (callPackages ../by-name/tr/tracy/package-versions.nix { })
+    tracy_0_11
+    tracy_0_12
+    tracy_0_13
+    ;
 
   uusi = haskell.lib.compose.justStaticExecutables haskellPackages.uusi;
 
@@ -3255,6 +3258,7 @@ with pkgs;
   inherit (callPackage ../development/tools/pnpm { })
     pnpm_8
     pnpm_9
+    pnpm_10_29_2
     pnpm_10
     ;
   pnpm = pnpm_10;
diff --git a/pkgs/top-level/coq-packages.nix b/pkgs/top-level/coq-packages.nix
index 18f608a57c20..f9464c39fae8 100644
--- a/pkgs/top-level/coq-packages.nix
+++ b/pkgs/top-level/coq-packages.nix
@@ -214,7 +214,9 @@ let
       simple-io = callPackage ../development/coq-modules/simple-io { };
       smpl = callPackage ../development/coq-modules/smpl { };
       smtcoq = callPackage ../development/coq-modules/smtcoq { };
-      ssprove = callPackage ../development/coq-modules/ssprove { };
+      ssprove = callPackage ../development/coq-modules/ssprove {
+        mathcomp-word = self.mathcomp-word.override { version = "3.2"; };
+      };
       stalmarck-tactic = callPackage ../development/coq-modules/stalmarck { };
       stalmarck = self.stalmarck-tactic.stalmarck;
       stdlib = callPackage ../development/coq-modules/stdlib { };
diff --git a/pkgs/top-level/ocaml-packages.nix b/pkgs/top-level/ocaml-packages.nix
index 6c97be3b4d06..46c6dffbfee5 100644
--- a/pkgs/top-level/ocaml-packages.nix
+++ b/pkgs/top-level/ocaml-packages.nix
@@ -817,6 +817,8 @@ let
 
         hpack = callPackage ../development/ocaml-modules/hpack { };
 
+        htmlit = callPackage ../development/ocaml-modules/htmlit { };
+
         http = callPackage ../development/ocaml-modules/cohttp/http.nix { };
 
         http-mirage-client = callPackage ../development/ocaml-modules/http-mirage-client { };
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index cab24d00c822..eff1c6141994 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -714,6 +714,8 @@ self: super: with self; {
 
   amcrest = callPackage ../development/python-modules/amcrest { };
 
+  amd-quark = callPackage ../development/python-modules/amd-quark { };
+
   amdsmi = toPythonModule (
     pkgs.rocmPackages.amdsmi.override {
       inherit python;
@@ -9628,6 +9630,8 @@ self: super: with self; {
 
   mdx-truly-sane-lists = callPackage ../development/python-modules/mdx-truly-sane-lists { };
 
+  mdx-wikilink-plus = callPackage ../development/python-modules/mdx-wikilink-plus { };
+
   mean-average-precision = callPackage ../development/python-modules/mean-average-precision { };
 
   measurement = callPackage ../development/python-modules/measurement { };
@@ -9911,10 +9915,18 @@ self: super: with self; {
 
   mkdocs-build-plantuml = callPackage ../development/python-modules/mkdocs-build-plantuml { };
 
+  mkdocs-callouts = callPackage ../development/python-modules/mkdocs-callouts { };
+
+  mkdocs-custom-tags-attributes =
+    callPackage ../development/python-modules/mkdocs-custom-tags-attributes
+      { };
+
   mkdocs-drawio-exporter = callPackage ../development/python-modules/mkdocs-drawio-exporter { };
 
   mkdocs-drawio-file = callPackage ../development/python-modules/mkdocs-drawio-file { };
 
+  mkdocs-embed-file-plugin = callPackage ../development/python-modules/mkdocs-embed-file-plugin { };
+
   mkdocs-exclude = callPackage ../development/python-modules/mkdocs-exclude { };
 
   mkdocs-gen-files = callPackage ../development/python-modules/mkdocs-gen-files { };
@@ -9963,6 +9975,8 @@ self: super: with self; {
 
   mkdocs-minify-plugin = callPackage ../development/python-modules/mkdocs-minify-plugin { };
 
+  mkdocs-obsidian-bridge = callPackage ../development/python-modules/mkdocs-obsidian-bridge { };
+
   mkdocs-puml = callPackage ../development/python-modules/mkdocs-puml { };
 
   mkdocs-redirects = callPackage ../development/python-modules/mkdocs-redirects { };
@@ -10721,6 +10735,8 @@ self: super: with self; {
 
   mypy-protobuf = callPackage ../development/python-modules/mypy-protobuf { };
 
+  mypy-protobuf_3_6 = callPackage ../development/python-modules/mypy-protobuf_3_6 { };
+
   mypyllant = callPackage ../development/python-modules/mypyllant { };
 
   mysql-connector = callPackage ../development/python-modules/mysql-connector { };
@@ -11275,6 +11291,10 @@ self: super: with self; {
 
   objsize = callPackage ../development/python-modules/objsize { };
 
+  obsidian-callouts = callPackage ../development/python-modules/obsidian-callouts { };
+
+  obsidian-media = callPackage ../development/python-modules/obsidian-media { };
+
   obspy = callPackage ../development/python-modules/obspy { };
 
   obstore = callPackage ../development/python-modules/obstore { };
@@ -15743,6 +15763,8 @@ self: super: with self; {
 
   python-otbr-api = callPackage ../development/python-modules/python-otbr-api { };
 
+  python-otcextensions = callPackage ../development/python-modules/python-otcextensions { };
+
   python-overseerr = callPackage ../development/python-modules/python-overseerr { };
 
   python-owasp-zap-v2-4 = callPackage ../development/python-modules/python-owasp-zap-v2-4 { };