Merge de3255d9eb into haskell-updates

2025-11-25 00:22:40 +00:00
parent 69543514c0 de3255d9eb
commit 464aa22fd7
426 changed files with 4242 additions and 7209 deletions
@@ -35,7 +35,8 @@ body:
        If you are using an older version, please update to the latest stable version and check if the issue persists before continuing this bug report.
      options:
        - "Please select a version."
-        - "- Unstable (25.11)"
+        - "- Unstable (26.05)"
+        - "- Beta (25.11)"
        - "- Stable (25.05)"
      default: 0
    validations:
@@ -35,7 +35,8 @@ body:
        If you are using an older version, please update to the latest stable version and check if the issue persists before continuing this bug report.
      options:
        - "Please select a version."
-        - "- Unstable (25.11)"
+        - "- Unstable (26.05)"
+        - "- Beta (25.11)"
        - "- Stable (25.05)"
      default: 0
    validations:
@@ -35,7 +35,8 @@ body:
        If you are using an older version, please update to the latest stable version and check if the issue persists before continuing this bug report.
      options:
        - "Please select a version."
-        - "- Unstable (25.11)"
+        - "- Unstable (26.05)"
+        - "- Beta (25.11)"
        - "- Stable (25.05)"
      default: 0
    validations:
@@ -37,7 +37,8 @@ body:
        If you are purposefully trying to build an ancient version of a package in an older Nixpkgs, please coordinate with the [NixOS Archivists](https://matrix.to/#/#archivists:nixos.org).
      options:
        - "Please select a version."
-        - "- Unstable (25.11)"
+        - "- Unstable (26.05)"
+        - "- Beta (25.11)"
        - "- Stable (25.05)"
      default: 0
    validations:
@@ -37,7 +37,8 @@ body:
        If the package has been updated in unstable, but you believe the update should be backported to the stable release of Nixpkgs, please file the '**Request: backport to stable**' form instead.
      options:
        - "Please select a version."
-        - "- Unstable (25.11)"
+        - "- Unstable (26.05)"
+        - "- Beta (25.11)"
        - "- Stable (25.05)"
      default: 0
    validations:
@@ -35,7 +35,8 @@ body:
        If you are using an older or stable version, please update to the latest **unstable** version and check if the module still does not exist before continuing this request.
      options:
        - "Please select a version."
-        - "- Unstable (25.11)"
+        - "- Unstable (26.05)"
+        - "- Beta (25.11)"
        - "- Stable (25.05)"
      default: 0
    validations:
@@ -27,7 +27,7 @@ jobs:
    steps:
      # Use a GitHub App to create the PR so that CI gets triggered
      # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs
-      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
+      - uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0
        id: app-token
        with:
          app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
@@ -36,7 +36,7 @@ jobs:
          permission-pull-requests: write
          permission-workflows: write

-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          ref: ${{ github.event.pull_request.head.sha }}
          token: ${{ steps.app-token.outputs.token }}
@@ -46,7 +46,7 @@ jobs:
      # https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout: |
@@ -56,7 +56,7 @@ jobs:
        run: npm install @actions/artifact bottleneck

      # Use a GitHub App, because it has much higher rate limits: 12,500 instead of 5,000 req / hour.
-      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
+      - uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0
        if: github.event_name != 'pull_request' && vars.NIXPKGS_CI_APP_ID
        id: app-token
        with:
@@ -52,7 +52,7 @@ jobs:
    runs-on: ${{ matrix.runner }}
    timeout-minutes: 60
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout: .github/actions
@@ -62,7 +62,7 @@ jobs:
          merged-as-untrusted-at: ${{ inputs.mergedSha }}
          target-as-trusted-at: ${{ inputs.targetSha }}

-      - uses: cachix/install-nix-action@7ec16f2c061ab07b235a7245e06ed46fe9a1cab6 # v31
+      - uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # v31
        with:
          # Sandbox is disabled on MacOS by default.
          extra_nix_config: sandbox = true
@@ -35,7 +35,7 @@ jobs:
    runs-on: ubuntu-24.04-arm
    timeout-minutes: 3
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          path: trusted
@@ -75,7 +75,7 @@ jobs:
    runs-on: ubuntu-24.04-arm
    timeout-minutes: 5
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout: .github/actions
@@ -85,7 +85,7 @@ jobs:
          merged-as-untrusted-at: ${{ inputs.mergedSha }}
          target-as-trusted-at: ${{ inputs.targetSha }}

-      - uses: cachix/install-nix-action@7ec16f2c061ab07b235a7245e06ed46fe9a1cab6 # v31
+      - uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # v31

      - uses: cachix/cachix-action@0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad # v16
        continue-on-error: true
@@ -23,14 +23,14 @@ jobs:
    timeout-minutes: 2
    if: contains(github.event.comment.body, '@NixOS/nixpkgs-merge-bot merge')
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout: |
            ci/github-script

      # Use the GitHub App to make sure the reaction happens with the same user who will later merge.
-      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
+      - uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0
        if: github.event_name != 'pull_request' && vars.NIXPKGS_CI_APP_ID
        id: app-token
        with:
@@ -36,7 +36,7 @@ jobs:
      # Use a GitHub App to create the PR so that CI gets triggered
      # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs
      # We only need Pull Requests: write here, but the app is also used for backports.
-      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
+      - uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0
        id: app-token
        with:
          app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
@@ -37,7 +37,7 @@ jobs:
    outputs:
      versions: ${{ steps.versions.outputs.versions }}
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          path: trusted
@@ -45,7 +45,7 @@ jobs:
            ci/supportedVersions.nix

      - name: Check out the PR at the test merge commit
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          ref: ${{ inputs.mergedSha }}
@@ -54,7 +54,7 @@ jobs:
            ci/pinned.json

      - name: Install Nix
-        uses: cachix/install-nix-action@7ec16f2c061ab07b235a7245e06ed46fe9a1cab6 # v31
+        uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # v31

      - name: Load supported versions
        id: versions
@@ -89,7 +89,7 @@ jobs:
          sudo mkswap /swap
          sudo swapon /swap

-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout: .github/actions
@@ -100,7 +100,7 @@ jobs:
          target-as-trusted-at: ${{ inputs.targetSha }}

      - name: Install Nix
-        uses: cachix/install-nix-action@7ec16f2c061ab07b235a7245e06ed46fe9a1cab6 # v31
+        uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # v31

      - uses: cachix/cachix-action@0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad # v16
        continue-on-error: true
@@ -171,7 +171,7 @@ jobs:
      statuses: write
    timeout-minutes: 5
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout: .github/actions
@@ -189,7 +189,7 @@ jobs:
          merge-multiple: true

      - name: Install Nix
-        uses: cachix/install-nix-action@7ec16f2c061ab07b235a7245e06ed46fe9a1cab6 # v31
+        uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # v31

      - name: Combine all output paths and eval stats
        run: |
@@ -342,7 +342,7 @@ jobs:
    runs-on: ubuntu-24.04-arm
    timeout-minutes: 10
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout: .github/actions
@@ -352,7 +352,7 @@ jobs:
          merged-as-untrusted-at: ${{ inputs.mergedSha }}

      - name: Install Nix
-        uses: cachix/install-nix-action@7ec16f2c061ab07b235a7245e06ed46fe9a1cab6 # v31
+        uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # v31

      - name: Run misc eval tasks in parallel
        run: |
@@ -26,7 +26,7 @@ jobs:
    runs-on: ubuntu-24.04-arm
    timeout-minutes: 10
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout: .github/actions
@@ -35,7 +35,7 @@ jobs:
        with:
          merged-as-untrusted-at: ${{ inputs.mergedSha }}

-      - uses: cachix/install-nix-action@7ec16f2c061ab07b235a7245e06ed46fe9a1cab6 # v31
+      - uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # v31

      # TODO: Figure out how to best enable caching for the treefmt job. Cachix won't work well,
      # because the cache would be invalidated on every commit - treefmt checks every file.
@@ -61,7 +61,7 @@ jobs:
    runs-on: ubuntu-24.04-arm
    timeout-minutes: 10
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout: .github/actions
@@ -70,7 +70,7 @@ jobs:
        with:
          merged-as-untrusted-at: ${{ inputs.mergedSha }}

-      - uses: cachix/install-nix-action@7ec16f2c061ab07b235a7245e06ed46fe9a1cab6 # v31
+      - uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # v31

      - uses: cachix/cachix-action@0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad # v16
        continue-on-error: true
@@ -90,7 +90,7 @@ jobs:
    runs-on: ubuntu-24.04-arm
    timeout-minutes: 10
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout: .github/actions
@@ -100,7 +100,7 @@ jobs:
          merged-as-untrusted-at: ${{ inputs.mergedSha }}
          target-as-trusted-at: ${{ inputs.targetSha }}

-      - uses: cachix/install-nix-action@7ec16f2c061ab07b235a7245e06ed46fe9a1cab6 # v31
+      - uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # v31

      - uses: cachix/cachix-action@0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad # v16
        continue-on-error: true
@@ -25,7 +25,7 @@ jobs:
      targetSha: ${{ steps.prepare.outputs.targetSha }}
      systems: ${{ steps.prepare.outputs.systems }}
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout: |
@@ -35,7 +35,7 @@ jobs:
            into: staging-next-25.05
          - from: staging-next-25.05
            into: staging-25.05
-          - from: master
+          - from: release-25.11
            into: staging-next-25.11
          - from: staging-next-25.11
            into: staging-25.11
@@ -26,7 +26,7 @@ jobs:
    steps:
      # Use a GitHub App to create the PR so that CI gets triggered
      # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs
-      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
+      - uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0
        id: app-token
        with:
          app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
@@ -34,7 +34,7 @@ jobs:
          permission-contents: write
          permission-pull-requests: write

-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false

@@ -31,7 +31,7 @@ jobs:
      systems: ${{ steps.prepare.outputs.systems }}
      touched: ${{ steps.prepare.outputs.touched }}
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout-cone-mode: true # default, for clarity
@@ -20,14 +20,14 @@ jobs:
    runs-on: ubuntu-24.04-arm
    timeout-minutes: 2
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout: |
            ci/github-script

      # Use the GitHub App to make sure the reaction happens with the same user who will later merge.
-      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
+      - uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0
        if: github.event_name != 'pull_request' && vars.NIXPKGS_CI_APP_ID
        id: app-token
        with:
@@ -19,7 +19,7 @@ jobs:
    steps:
      # Use a GitHub App to create the PR so that CI gets triggered and to
      # request team member lists.
-      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
+      - uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0
        id: app-token
        with:
          app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
@@ -30,7 +30,7 @@ jobs:
          permission-pull-requests: write

      - name: Fetch source
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout: |
@@ -64,7 +64,7 @@ jobs:
          echo "git-string=$name <$email>" >> "$GITHUB_OUTPUT"

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
+        uses: peter-evans/create-pull-request@84ae59a2cdc2258d6fa0732dd66352dddae2a412 # v7.0.9
        with:
          token: ${{ steps.app-token.outputs.token }}
          add-paths: maintainers/github-teams.json
@@ -19,7 +19,7 @@ jobs:
      push: ${{ steps.files.outputs.push }}
      targetSha: ${{ steps.prepare.outputs.targetSha }}
    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
        with:
          persist-credentials: false
          sparse-checkout-cone-mode: true # default, for clarity
@@ -139,7 +139,7 @@ nixos/modules/installer/tools/nix-fallback-paths.nix  @NixOS/nix-team @raitobeza
 /nixos/modules/system/boot/loader/systemd-boot      @JulienMalka

 # Limine
-/nixos/modules/system/boot/loader/limine        @lzcunt @phip1611 @programmerlexi @johnrtitor
+/nixos/modules/system/boot/loader/limine        @lzcunt @programmerlexi @johnrtitor
 /nixos/tests/limine                             @johnrtitor

 # Images and installer media
@@ -298,6 +298,30 @@
  "chap-overlays": [
    "index.html#chap-overlays"
  ],
+  "sec-nixpkgs-release-26.05": [
+    "release-notes.html#sec-nixpkgs-release-26.05"
+  ],
+  "sec-nixpkgs-release-26.05-highlights": [
+    "release-notes.html#sec-nixpkgs-release-26.05-highlights"
+  ],
+  "sec-nixpkgs-release-26.05-incompatibilities": [
+    "release-notes.html#sec-nixpkgs-release-26.05-incompatibilities"
+  ],
+  "sec-nixpkgs-release-26.05-lib": [
+    "release-notes.html#sec-nixpkgs-release-26.05-lib"
+  ],
+  "sec-nixpkgs-release-26.05-lib-breaking": [
+    "release-notes.html#sec-nixpkgs-release-26.05-lib-breaking"
+  ],
+  "sec-nixpkgs-release-26.05-lib-deprecations": [
+    "release-notes.html#sec-nixpkgs-release-26.05-lib-deprecations"
+  ],
+  "sec-nixpkgs-release-26.05-lib-additions-improvements": [
+    "release-notes.html#sec-nixpkgs-release-26.05-lib-additions-improvements"
+  ],
+  "sec-nixpkgs-release-26.05-notable-changes": [
+    "release-notes.html#sec-nixpkgs-release-26.05-notable-changes"
+  ],
  "sec-nixpkgs-release-25.11": [
    "release-notes.html#sec-nixpkgs-release-25.11"
  ],
@@ -3,6 +3,7 @@
 This section lists the release notes for each stable version of Nixpkgs and the current unstable revision.

 ```{=include=} sections
+rl-2605.section.md
 rl-2511.section.md
 rl-2505.section.md
 ```
@@ -1,4 +1,4 @@
-# Nixpkgs 26.05 (2026.05/??) {#sec-nixpkgs-release-26.05}
+# Nixpkgs 26.05 ("Yarara", 2026.05/??) {#sec-nixpkgs-release-26.05}

 ## Highlights {#sec-nixpkgs-release-26.05-highlights}
 <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->
@@ -1 +1 @@
-25.11
+26.05
@@ -459,7 +459,7 @@ in
    On each release the first letter is bumped and a new animal is chosen
    starting with that new letter.
  */
-  codeName = "Xantusia";
+  codeName = "Yarara";

  /**
    Returns the current nixpkgs version suffix as string.
@@ -631,8 +631,7 @@
    "description": "Marketing team [leader=@djacu]",
    "id": 7709512,
    "maintainers": {
-      "djacu": 7043297,
-      "tomberek": 178444
+      "djacu": 7043297
    },
    "members": {
      "flyfloh": 74379,
@@ -695,11 +694,12 @@
    "description": "",
    "id": 174820,
    "maintainers": {
+      "Ericson2314": 1055245,
      "tomberek": 178444
    },
    "members": {
-      "Ericson2314": 1055245,
      "Mic92": 96200,
+      "Radvendii": 1239929,
      "edolstra": 1148549,
      "xokdvium": 145775305
    },
@@ -3442,6 +3442,11 @@
    githubId = 10164833;
    name = "Birk Bohne";
  };
+  bitbloxhub = {
+    name = "bitbloxhub";
+    github = "bitbloxhub";
+    githubId = 45184892;
+  };
  bizmyth = {
    email = "andrew.p.council@gmail.com";
    github = "bizmythy";
@@ -23396,6 +23401,13 @@
    githubId = 72168352;
    matrix = "@schrobingus:matrix.org";
  };
+  schromp = {
+    email = "schromp@echsen.club";
+    github = "schromp";
+    githubId = 103186360;
+    matrix = "@schromp:echsen.club";
+    name = "schromp";
+  };
  Schweber = {
    github = "Schweber";
    githubId = 64630479;
@@ -2137,6 +2137,21 @@
  "ch-release-notes": [
    "release-notes.html#ch-release-notes"
  ],
+  "sec-release-26.05": [
+    "release-notes.html#sec-release-26.05"
+  ],
+  "sec-release-26.05-highlights": [
+    "release-notes.html#sec-release-26.05-highlights"
+  ],
+  "sec-release-26.05-new-modules": [
+    "release-notes.html#sec-release-26.05-new-modules"
+  ],
+  "sec-release-26.05-incompatibilities": [
+    "release-notes.html#sec-release-26.05-incompatibilities"
+  ],
+  "sec-release-26.05-notable-changes": [
+    "release-notes.html#sec-release-26.05-notable-changes"
+  ],
  "sec-release-25.11": [
    "release-notes.html#sec-release-25.11"
  ],
@@ -3,6 +3,7 @@
 This section lists the release notes for each stable version of NixOS and current unstable revision.

 ```{=include=} sections
+rl-2605.section.md
 rl-2511.section.md
 rl-2505.section.md
 rl-2411.section.md
@@ -1,4 +1,4 @@
-# Release 26.05 (2026.05/??) {#sec-release-26.05}
+# Release 26.05 ("Yarara", 2026.05/??) {#sec-release-26.05}

 ## Highlights {#sec-release-26.05-highlights}

@@ -6,7 +6,7 @@
 }:
 let
  cfg = config.programs.kclock;
-  kclockPkg = pkgs.libsForQt5.kclock;
+  kclockPkg = pkgs.kdePackages.kclock;
 in
 {
  options.programs.kclock = {
@@ -21,6 +21,8 @@ in

      enable = lib.mkEnableOption "Gonic music server";

+      package = lib.mkPackageOption pkgs "gonic" { };
+
      settings = lib.mkOption rec {
        type = settingsFormat.type;
        apply = lib.recursiveUpdate default;
@@ -62,8 +64,7 @@ in
              n: v: !((n == "tls-cert" || n == "tls-key") && v == null)
            ) cfg.settings;
          in
-          "${pkgs.gonic}/bin/gonic -config-path ${settingsFormat.generate "gonic" filteredSettings}";
-        DynamicUser = true;
+          "${lib.getExe cfg.package} -config-path ${settingsFormat.generate "gonic" filteredSettings}";
        StateDirectory = "gonic";
        CacheDirectory = "gonic";
        WorkingDirectory = "/var/lib/gonic";
@@ -123,9 +123,8 @@ in
        type = lib.types.package;
        default = cfg.package.override {
          withConfigValidation = false;
-          withWireguard = false;
        };
-        defaultText = lib.literalExpression "pkgs.ifstate.override { withConfigValidation = false; withWireguard = false; }";
+        defaultText = lib.literalExpression "pkgs.ifstate.override { withConfigValidation = false; }";
        description = "The initrd IfState package to use.";
      };

@@ -195,12 +194,6 @@ in
    })
    (lib.mkIf initrdCfg.enable {
      assertions = [
-        {
-          assertion =
-            initrdCfg.package.passthru.features.withWireguard
-            || !(builtins.elem "wireguard" initrdInterfaceTypes);
-          message = "IfState initrd package is configured without the `wireguard` feature, but wireguard interfaces are configured. Please see the `boot.initrd.network.ifstate.package` option.";
-        }
        {
          assertion = initrdCfg.allowIfstateToDrasticlyIncreaseInitrdSize;
          message = "IfState in initrd drastically increases the size of initrd, your boot partition may be too small and/or you may have significantly fewer generations. By setting boot.initrd.network.initrd.allowIfstateToDrasticlyIncreaseInitrdSize to true, you acknowledge this fact and keep it in mind when reporting issues.";
@@ -61,7 +61,15 @@ class ComposefsPath:
        self.path = path
        self.size = size
        self.filetype = filetype
-        self.mode = mode
+
+        match len(mode):
+            case 3 | 4:
+                # We need to pad the mode, because we will later use the concatentation
+                # filetype|mode, which assumes that the mode has a length of 4.
+                self.mode = f"{mode:0>4}"
+            case _:
+                raise ValueError(f"mode should be 3 or 4 octal digits, got: {mode}")
+
        self.uid = attrs["uid"]
        self.gid = attrs["gid"]
        self.payload = payload
@@ -11,6 +11,17 @@
      system.etc.overlay.enable = true;
      system.etc.overlay.mutable = false;

+      environment.etc = {
+        modetest = {
+          text = "foo";
+          mode = "300";
+        };
+        modetest2 = {
+          text = "foo";
+          mode = "0300";
+        };
+      };
+
      # Prerequisites
      systemd.sysusers.enable = true;
      users.mutableUsers = false;
@@ -49,6 +60,10 @@
      with subtest("/etc is mounted as an overlay"):
        machine.succeed("findmnt --kernel --type overlay /etc")

+      with subtest("modes work correctly"):
+        machine.succeed("stat --format '%F' /etc/modetest | tee /dev/stderr | grep -q 'regular file'")
+        machine.succeed("stat --format '%F' /etc/modetest2 | tee /dev/stderr | grep -q 'regular file'")
+
      with subtest("direct symlinks point to the target without indirection"):
        assert machine.succeed("readlink -n /etc/localtime") == "/etc/zoneinfo/Utc"

@@ -11,6 +11,17 @@
      system.etc.overlay.enable = true;
      system.etc.overlay.mutable = true;

+      environment.etc = {
+        modetest = {
+          text = "foo";
+          mode = "300";
+        };
+        modetest2 = {
+          text = "foo";
+          mode = "0300";
+        };
+      };
+
      # Prerequisites
      boot.initrd.systemd.enable = true;
      boot.kernelPackages = pkgs.linuxPackages_latest;
@@ -37,6 +48,12 @@
      with subtest("/etc is mounted as an overlay"):
        machine.succeed("findmnt --kernel --type overlay /etc")

+      with subtest("modes work correctly"):
+        machine.succeed("stat --format '%F' /etc/modetest | tee /dev/stderr | grep -Eq '^regular file$'")
+        machine.succeed("stat --format '%a' /etc/modetest | tee /dev/stderr | grep -Eq '^300$'")
+        machine.succeed("stat --format '%F' /etc/modetest2 | tee /dev/stderr | grep -Eq '^regular file$'")
+        machine.succeed("stat --format '%a' /etc/modetest2 | tee /dev/stderr | grep -Eq '^300$'")
+
      with subtest("switching to the same generation"):
        machine.succeed("/run/current-system/bin/switch-to-configuration test")

@@ -1,19 +1,34 @@
-{ pkgs, ... }:
+{ lib, pkgs, ... }:
 {
  name = "gonic";
+  meta.maintainers = pkgs.gonic.meta.maintainers;

-  nodes.machine =
-    { ... }:
+  nodes.default_cache_dir =
+    { config, ... }:
    {
      systemd.tmpfiles.settings = {
        "10-gonic" = {
          "/tmp/music"."d" = { };
          "/tmp/podcast"."d" = { };
          "/tmp/playlists"."d" = { };
+          "/tmp/secrets"."d" = { };
        };
      };
      services.gonic = {
        enable = true;
+        # Wrap gonic to check that the required paths are writable.
+        # This isn't necessarily checked by successful service startup.
+        package = pkgs.writeShellApplication {
+          name = "gonic-test-wrapper";
+          runtimeInputs = [ pkgs.gonic ];
+          text = ''
+            touch ${config.services.gonic.settings.cache-path}/foo && echo "cache dir writeable" >&2
+            touch /tmp/podcast/foo && echo "podcast dir writeable" >&2
+            touch /tmp/playlists/foo && echo "playlists dir writeable" >&2
+            touch /tmp/secrets/foo && echo "shouldn't be able to write /tmp/secrets" >&2 && exit 1
+            exec ${lib.getExe pkgs.gonic} "$@"
+          '';
+        };
        settings = {
          music-path = [ "/tmp/music" ];
          podcast-path = "/tmp/podcast";
@@ -22,8 +37,33 @@
      };
    };

+  nodes.custom_cache_dir =
+    { ... }:
+    {
+      systemd.tmpfiles.settings = {
+        "10-gonic" = {
+          "/tmp/music"."d" = { };
+          "/tmp/podcast"."d" = { };
+          "/tmp/playlists"."d" = { };
+          "/tmp/cache"."d" = { };
+        };
+      };
+      services.gonic = {
+        enable = true;
+        settings = {
+          music-path = [ "/tmp/music" ];
+          podcast-path = "/tmp/podcast";
+          playlists-path = "/tmp/playlists";
+          cache-path = "/tmp/cache";
+        };
+      };
+    };
+
  testScript = ''
-    machine.wait_for_unit("gonic")
-    machine.wait_for_open_port(4747)
+    default_cache_dir.wait_for_unit("gonic")
+    default_cache_dir.wait_for_open_port(4747)
+
+    custom_cache_dir.wait_for_unit("gonic")
+    custom_cache_dir.wait_for_open_port(4747)
  '';
 }
@@ -10,20 +10,19 @@ let
    {
      enable = true;
      settings = {
-        namespaces.outside.interfaces.eth1 = {
-          addresses = [ "2001:0db8:a::${builtins.toString id}/64" ];
-          link = {
-            state = "up";
-            kind = "physical";
-          };
-        };
        interfaces = {
+          eth1 = {
+            addresses = [ "2001:0db8:a::${builtins.toString id}/64" ];
+            link = {
+              state = "up";
+              kind = "physical";
+            };
+          };
          wg0 = {
            addresses = [ "2001:0db8:b::${builtins.toString id}/64" ];
            link = {
              state = "up";
              kind = "wireguard";
-              bind_netns = "outside";
            };
            wireguard = {
              private_key = "!include ${pkgs.writeText "wg_priv.key" wgPriv}";
@@ -3,7 +3,6 @@
  name = "bios";
  meta.maintainers = with lib.maintainers; [
    lzcunt
-    phip1611
    programmerlexi
  ];
  meta.platforms = [
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension (finalAttrs: {
  mktplcRef = {
    name = "amazon-q-vscode";
    publisher = "AmazonWebServices";
-    version = "1.104.0";
-    hash = "sha256-d97fT6dRiY9pAx7AbzaJ9qQv79b8oa1CJXqlaOycITU=";
+    version = "1.106.0";
+    hash = "sha256-ZSe9BTOVQClGPag2KUrmrUYpFeuj09uq+FnZqbEfJPs=";
  };

  meta = {
@@ -12,26 +12,26 @@ vscode-utils.buildVscodeMarketplaceExtension {
      sources = {
        "x86_64-linux" = {
          arch = "linux-x64";
-          hash = "sha256-Rf8cx11qoXxFdPoItXSsEFc/QvLxYnyEt46Fv9fZdWw=";
+          hash = "sha256-Ll+V+0SBAXIQBvfbGQ1lgU8KtAAQiHJjc6t0Nxh1LvY=";
        };
        "x86_64-darwin" = {
          arch = "darwin-x64";
-          hash = "sha256-t97dol5FTLl2gSi3HbI4S7YpHcRygfBNcpNhWnlO1Xc=";
+          hash = "sha256-NBHmOJT1n+Xc/8rS2gapPMRDsQXCsCbo9sK2tXRpyHA=";
        };
        "aarch64-linux" = {
          arch = "linux-arm64";
-          hash = "sha256-BRkebtBrOVD/usNbu1TOXxklrLyKIOxSgzZEeBlhRAo=";
+          hash = "sha256-vv5q6t4wh0K5Ll39/Fed0p9XPbm/YrkH3L7uVRB2Ndg=";
        };
        "aarch64-darwin" = {
          arch = "darwin-arm64";
-          hash = "sha256-us/4xn6IO09MZApja9KwdD+0HIKm5+cmG/kmggJ6mC8=";
+          hash = "sha256-V//GHbjbHos3u/DF4qPplufscJ0Yclg5HTII27U9SDw=";
        };
      };
    in
    {
      name = "ruff";
      publisher = "charliermarsh";
-      version = "2025.28.0";
+      version = "2025.30.0";
    }
    // sources.${stdenvNoCC.hostPlatform.system}
      or (throw "Unsupported system ${stdenvNoCC.hostPlatform.system}");
@@ -1900,8 +1900,8 @@ let
        mktplcRef = {
          publisher = "github";
          name = "codespaces";
-          version = "1.17.5";
-          hash = "sha256-xv7Yx2chKqKnC7tKcvXUKrL5DBW0eFT8hi0p9shwX04=";
+          version = "1.18.0";
+          hash = "sha256-D5Khohd1oV8c7uHT6zgiZsigtafAWdXinV2NTUF0EaM=";
        };

        meta = {
@@ -5498,8 +5498,8 @@ let
        mktplcRef = {
          name = "vscode-zig";
          publisher = "ziglang";
-          version = "0.6.15";
-          hash = "sha256-iSkB99l+C82eMaSPV9D2+EJthIC4qIIzB2+YAZM8Uaw=";
+          version = "0.6.17";
+          hash = "sha256-OIGe981dupmyyhjxq11/AYaV2cjvNEe4FvXBospNgu0=";
        };
        meta = {
          changelog = "https://marketplace.visualstudio.com/items/ziglang.vscode-zig/changelog";
@@ -36,20 +36,20 @@ let

  hash =
    {
-      x86_64-linux = "sha256-zQ6HHayJy48g/0viZRWm2Ea3Oy50LLkLhSjum68HETk=";
-      x86_64-darwin = "sha256-nl4Dn1xiXKZbbKfBHx92h4cxlNTQ7ManVg1LyYvd1xQ=";
-      aarch64-linux = "sha256-Yxr2JgpE6nW1B9iCpu8zDHpKHkDr0yy5gQRjNsq73tc=";
-      aarch64-darwin = "sha256-iElSgv6jjmKoVZqrZ1ET2EnwyZfiaXkfx9xlSgsUsTc=";
-      armv7l-linux = "sha256-M0ZkHHnJB/BtRagJjCi3yfhKz8B4v79IYuiaqdmPrkg=";
+      x86_64-linux = "sha256-Hi7ncbc1kjipFH5hY6w+3xl2k6h/jQ0d3oPWBTX71z0=";
+      x86_64-darwin = "sha256-h+1oHiaZikXgRFep+cy5wMAuTMHZzDnAJX2rrb4ZK5M=";
+      aarch64-linux = "sha256-1xZgmgnYkWoHd67xDRsoJLjRnlI2CLGeURS4kCYMAwI=";
+      aarch64-darwin = "sha256-5mqbY3WKJ7V2lLelCoSiD43vpP2YabmamayY3sX7cbw=";
+      armv7l-linux = "sha256-jmgObWbnQiAaimlKrlc2iaxwOimrkngp/75FcUtjXZ0=";
    }
    .${system} or throwSystem;

  # Please backport all compatible updates to the stable release.
  # This is important for the extension ecosystem.
-  version = "1.106.1";
+  version = "1.106.2";

  # This is used for VS Code - Remote SSH test
-  rev = "cb1933bbc38d329b3595673a600fab5c7368f0a7";
+  rev = "1e3c50d64110be466c0b4a45222e81d2c9352888";
 in
 callPackage ./generic.nix {
  pname = "vscode" + lib.optionalString isInsiders "-insiders";
@@ -82,7 +82,7 @@ callPackage ./generic.nix {
    src = fetchurl {
      name = "vscode-server-${rev}.tar.gz";
      url = "https://update.code.visualstudio.com/commit:${rev}/server-linux-x64/stable";
-      hash = "sha256-HYyzA5qfE7CHFqenBjPCe9QhANP0mOgUoORRm/QvxVk=";
+      hash = "sha256-MhLo3RdBHatsGwjdDxdYsD6NbblkiWTgd6UM8U3NSMI=";
    };
    stdenv = stdenvNoCC;
  };
@@ -8,13 +8,13 @@
 }:
 mkLibretroCore {
  core = "flycast";
-  version = "0-unstable-2025-11-15";
+  version = "0-unstable-2025-11-22";

  src = fetchFromGitHub {
    owner = "flyinghead";
    repo = "flycast";
-    rev = "4747e6190899949bafd3391b3ba33b8e4c37219c";
-    hash = "sha256-su1nWwLEUcJtf85U9ABXMHltWOBVqlrYsMLHqNebWUs=";
+    rev = "1666eb0875613ee16b04e08be8ed89c27dbd5c25";
+    hash = "sha256-uQvr4C8iO+3FXh6ki+Rgv7Y/+p1WHwXuqy9Xyq4gSeo=";
    fetchSubmodules = true;
  };

@@ -570,20 +570,20 @@
    "vendorHash": "sha256-bpyTtuK3kcntk9hzCU2d+RZ0K0jfFtUlEZezyZHvFW8="
  },
  "hashicorp_google-beta": {
-    "hash": "sha256-2R7zZRiAZaTABOyQyUwRRba6zhdFmIeCXbdPEnDDtcI=",
+    "hash": "sha256-ZcSd232jOol7fVsPFHaKq1+0Mzg/FwiTF1zoM5nJUxE=",
    "homepage": "https://registry.terraform.io/providers/hashicorp/google-beta",
    "owner": "hashicorp",
    "repo": "terraform-provider-google-beta",
-    "rev": "v7.11.0",
+    "rev": "v7.12.0",
    "spdx": "MPL-2.0",
    "vendorHash": "sha256-JDFKEn011onzch07tLu/kVbiCwXPqwomFA/X5fbQ3bc="
  },
  "hashicorp_helm": {
-    "hash": "sha256-XU5AxXYvZtHnxGotOvGOojybcusVX9DRK2sazfytkAw=",
+    "hash": "sha256-S4Fe65f+gEWWxRMC+/i93dwwe7QigPccx4wiqNBpcL8=",
    "homepage": "https://registry.terraform.io/providers/hashicorp/helm",
    "owner": "hashicorp",
    "repo": "terraform-provider-helm",
-    "rev": "v3.1.0",
+    "rev": "v3.1.1",
    "spdx": "MPL-2.0",
    "vendorHash": "sha256-qzwm0R51jvElo+T8ypkHrlQy/MH8c/o+NWIS+YrQ4uw="
  },
@@ -669,13 +669,13 @@
    "vendorHash": "sha256-tYvQURTrFtr+rgSMGq2zi/5p5jJVGIse7+hj95gz68U="
  },
  "hashicorp_vault": {
-    "hash": "sha256-xmi+79FoT8vXHJqMmIAIV+YcpZzAA40cNOxDOufJkro=",
+    "hash": "sha256-a3lCdcEO0i+xaWv/CsKcxOcGnVFWuCVWmuqHOR2tds8=",
    "homepage": "https://registry.terraform.io/providers/hashicorp/vault",
    "owner": "hashicorp",
    "repo": "terraform-provider-vault",
-    "rev": "v5.4.0",
+    "rev": "v5.5.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-zZUFUcgMQkbnh7It9k/7J/2KfiP1q3nlcC58xPb2bBo="
+    "vendorHash": "sha256-rpyfECDw9kXpm9CxFSrn9aVXxWMQXF5ZJdCLgAtXGlM="
  },
  "hashicorp_vsphere": {
    "hash": "sha256-vRO6vxzi4d0hNc0MmQLhN7roONnsjxPBtFt0fyvxWd8=",
@@ -1264,11 +1264,11 @@
    "vendorHash": "sha256-9M1DsE/FPQK8TG7xCJWbU3HAJCK3p/7lxdzjO1oAfWs="
  },
  "sumologic_sumologic": {
-    "hash": "sha256-6wKzxaF/cSfGPeRTmmSGAZeFmDlpaYimnbCQYdclkhc=",
+    "hash": "sha256-Ajc+3AiFZsC+32L9pWqZ9kqmmdJ5443khA8srC9khow=",
    "homepage": "https://registry.terraform.io/providers/SumoLogic/sumologic",
    "owner": "SumoLogic",
    "repo": "terraform-provider-sumologic",
-    "rev": "v3.1.8",
+    "rev": "v3.2.0",
    "spdx": "MPL-2.0",
    "vendorHash": "sha256-IR6KjFW5GbsOIm3EEFyx3ctwhbifZlcNaZeGhbeK/Wo="
  },
@@ -1,30 +0,0 @@
-From dd4a96073d4a60ca8fff55be6ea6b17018de96a8 Mon Sep 17 00:00:00 2001
-From: Varun Madiath <git@madiathv.com>
-Date: Wed, 19 Jul 2023 15:30:57 -0400
-Subject: [PATCH] utils: lockfile: avoid stack overflow for lockfile buffer
-
-Original patch by @cyphar was submitted to rakshasa/rtorrent at
-https://github.com/rakshasa/rtorrent/pull/1169.
-
-Observed the segfault on nixos-unstable.
---
- src/utils/lockfile.cc | 3 ++-
- 1 file changed, 2 insertions(+), 1 deletion(-)
-
-diff --git a/src/utils/lockfile.cc b/src/utils/lockfile.cc
-index 76e4b8f..441f5c8 100644
--- a/src/utils/lockfile.cc
-+++ b/src/utils/lockfile.cc
-@@ -75,7 +75,8 @@ Lockfile::try_lock() {
-   int  pos = ::gethostname(buf, 255);
- 
-   if (pos == 0) {
-    ::snprintf(buf + std::strlen(buf), 255, ":+%i\n", ::getpid());
-+    ssize_t len = std::strlen(buf);
-+    ::snprintf(buf + len, 255 - len, ":+%i\n", ::getpid());
-     ssize_t __attribute__((unused)) result = ::write(fd, buf, std::strlen(buf));
-   }
- 
-- 
-2.41.0
-
@@ -1,77 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchFromGitHub,
-  cmake,
-  curl,
-  gtest,
-  libtorrent,
-  ncurses,
-  jsonRpcSupport ? true,
-  nlohmann_json,
-  xmlRpcSupport ? true,
-  xmlrpc_c,
-}:
-
-stdenv.mkDerivation rec {
-  pname = "jesec-rtorrent";
-  version = "0.9.8-r16";
-
-  src = fetchFromGitHub {
-    owner = "jesec";
-    repo = "rtorrent";
-    rev = "v${version}";
-    hash = "sha256-i7c1jSawHshj1kaXl8tdpelIKU24okeg9K5/+ht6t2k=";
-  };
-
-  patches = [
-    ./avoid-stack-overflow-for-lockfile-buf.patch
-  ];
-
-  passthru = {
-    inherit libtorrent;
-  };
-
-  nativeBuildInputs = [
-    cmake
-  ];
-
-  buildInputs = [
-    curl
-    libtorrent
-    ncurses
-  ]
-  ++ lib.optional jsonRpcSupport nlohmann_json
-  ++ lib.optional xmlRpcSupport xmlrpc_c;
-
-  cmakeFlags = [
-    "-DUSE_RUNTIME_CA_DETECTION=NO"
-  ]
-  ++ lib.optional (!jsonRpcSupport) "-DUSE_JSONRPC=NO"
-  ++ lib.optional (!xmlRpcSupport) "-DUSE_XMLRPC=NO";
-
-  doCheck = true;
-
-  nativeCheckInputs = [
-    gtest
-  ];
-
-  prePatch = ''
-    substituteInPlace src/main.cc \
-      --replace "/etc/rtorrent/rtorrent.rc" "${placeholder "out"}/etc/rtorrent/rtorrent.rc"
-  '';
-
-  postFixup = ''
-    mkdir -p $out/etc/rtorrent
-    cp $src/doc/rtorrent.rc $out/etc/rtorrent/rtorrent.rc
-  '';
-
-  meta = with lib; {
-    description = "Ncurses client for libtorrent, ideal for use with screen, tmux, or dtach (jesec's fork)";
-    homepage = "https://github.com/jesec/rtorrent";
-    license = licenses.gpl2Plus;
-    maintainers = with maintainers; [ winter ];
-    platforms = platforms.linux;
-    mainProgram = "rtorrent";
-  };
-}
@@ -1,49 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchFromGitHub,
-  cmake,
-  gtest,
-  openssl,
-  zlib,
-}:
-
-stdenv.mkDerivation rec {
-  pname = "jesec-libtorrent";
-  version = "0.13.8-r4";
-
-  src = fetchFromGitHub {
-    owner = "jesec";
-    repo = "libtorrent";
-    rev = "v${version}";
-    hash = "sha256-jC/hgGSi2qy+ToZgdxl1PhASLYbUL0O8trX0th2v5H0=";
-  };
-
-  nativeBuildInputs = [
-    cmake
-  ];
-
-  buildInputs = [
-    openssl
-    zlib
-  ];
-
-  # Disabled because a test is flaky; see https://github.com/jesec/libtorrent/issues/4.
-  # doCheck = true;
-
-  preCheck = ''
-    export LD_LIBRARY_PATH=$LD_LIBRARY_PATH''${LD_LIBRARY_PATH:+:}$PWD
-  '';
-
-  nativeCheckInputs = [
-    gtest
-  ];
-
-  meta = with lib; {
-    homepage = "https://github.com/jesec/libtorrent";
-    description = "BitTorrent library written in C++ for *nix, with focus on high performance and good code (jesec's fork)";
-    license = licenses.gpl2Plus;
-    maintainers = with maintainers; [ winter ];
-    platforms = platforms.linux;
-  };
-}
@@ -55,8 +55,8 @@ let
      }
    else
      {
-        version = "2025.3";
-        hash = "sha256-i9/KAmjz8Qp8o8BuWbYvc+oCQgxnIRwP85EvMteDPGU=";
+        version = "2025.4";
+        hash = "sha256-yhdyC0omDrc2SSEen2qUDudUNFISmEQhPDrMsKknpcM=";
      };

 in
@@ -90,6 +90,7 @@
  waylandSupport ? !stdenv.hostPlatform.isDarwin,
  x11Support ? !stdenv.hostPlatform.isDarwin,
  zimgSupport ? true,
+  versionCheckHook,
 }:

 let
@@ -300,6 +301,11 @@ stdenv.mkDerivation (finalAttrs: {
    patchShebangs --update --host $out/bin/umpv $out/bin/mpv_identify.sh
  '';

+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  doInstallCheck = true;
+
  passthru = {
    inherit
      # The wrapper consults luaEnv and lua.version
@@ -319,7 +325,6 @@ stdenv.mkDerivation (finalAttrs: {
    tests = {
      inherit (nixosTests) mpv;

-      version = testers.testVersion { package = finalAttrs.finalPackage; };
      pkg-config = testers.hasPkgConfigModules {
        package = finalAttrs.finalPackage;
        moduleNames = [ "mpv" ];
@@ -335,7 +340,10 @@ stdenv.mkDerivation (finalAttrs: {
      MPlayer and mplayer2 projects, with great improvements above both.
    '';
    changelog = "https://github.com/mpv-player/mpv/releases/tag/v${finalAttrs.version}";
-    license = lib.licenses.gpl2Plus;
+    license = [
+      lib.licenses.gpl2Plus
+      lib.licenses.lgpl21Plus
+    ];
    mainProgram = "mpv";
    maintainers = with lib.maintainers; [
      fpletz
@@ -7,13 +7,13 @@

 mkHyprlandPlugin {
  pluginName = "hypr-dynamic-cursors";
-  version = "0-unstable-2025-10-23";
+  version = "0-unstable-2025-11-11";

  src = fetchFromGitHub {
    owner = "VirtCode";
    repo = "hypr-dynamic-cursors";
-    rev = "7336d7a7cf81422d0d8a574e9e9ba6fe8eab8dfc";
-    hash = "sha256-ZaiEZnsm7LlpDL/C/D4vO5QHgv9GdFrO9Fd2qlyvVRc=";
+    rev = "9a5b0af83dd1e9de614db56ff26fd6e62e915fd5";
+    hash = "sha256-pK8mWkUx8EIWNuCZvXA6bFPf61s+mvJ7rPqmq9oPVzk=";
  };

  dontUseCmakeConfigure = true;
@@ -8,13 +8,13 @@
 }:
 mkHyprlandPlugin (finalAttrs: {
  pluginName = "hyprsplit";
-  version = "0.52.0";
+  version = "0.52.1";

  src = fetchFromGitHub {
    owner = "shezdy";
    repo = "hyprsplit";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-XlOZr7BKii0ch24ZtOqjeVl1+uGewW5XQTSteKxXg9c=";
+    hash = "sha256-6s8nuPwLP5NKUevLeYYgHirk9RkZhaXtDRXBfrIAibs=";
  };

  nativeBuildInputs = [
@@ -195,5 +195,8 @@ in
    substitutions = {
      jq = lib.getExe jq;
    };
+    meta = {
+      description = "Prune yarn dependencies and install files for packages using Yarn 1";
+    };
  } ./yarn-install-hook.sh;
 }
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage rec {
  pname = "ab-av1";
-  version = "0.10.1";
+  version = "0.10.2";

  src = fetchFromGitHub {
    owner = "alexheretic";
    repo = "ab-av1";
    tag = "v${version}";
-    hash = "sha256-uW5BXUNzk94bqSWQSaCiuSO8Angwt0eo4ZmvGRr/4S8=";
+    hash = "sha256-bVsEsQMQhXyDES5mlBHRK1Uf7UwbX6iKhTF17peokAk=";
  };

-  cargoHash = "sha256-oLmE+xkatgIDIu6mUJ49O9s6ULp0bvpWdBP8rEGb5yc=";
+  cargoHash = "sha256-TDpNT62jkkP+g2w1HXmPJiblHXFOuAuzYRY5cpzRW/M=";

  nativeBuildInputs = [ installShellFiles ];

@@ -32,6 +32,16 @@ let
  yarn-berry = yarn-berry_4.override { inherit nodejs; };
  productName = if buildType != "stable" then "AFFiNE-${buildType}" else "AFFiNE";
  binName = lib.toLower productName;
+  electron-dist-zip = stdenvNoCC.mkDerivation {
+    pname = "electron-dist-zip";
+    version = electron.version;
+    src = electron.dist;
+    nativeBuildInputs = [ zip ];
+    buildPhase = ''
+      zip --recurse-paths - . > $out
+    '';
+    dontInstall = true;
+  };
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = binName;
@@ -48,6 +58,8 @@ stdenv.mkDerivation (finalAttrs: {
    inherit (finalAttrs) pname version src;
    hash = "sha256-tdg0Ti+QWsIx64+WV0fPoyE/t3GlsUxXzU9qFHYfpt0=";
  };
+
+  # keep yarnOfflineCache same output style with offlineCache = yarn-berry.fetchYarnBerryDeps { inherit (finalAttrs) src missingHashes; hash = "" };
  yarnOfflineCache = stdenvNoCC.mkDerivation {
    name = "yarn-offline-cache";
    inherit (finalAttrs) src;
@@ -79,19 +91,22 @@ stdenv.mkDerivation (finalAttrs: {
      ''
        runHook preBuild

-        mkdir -p $out
+        mkdir -p $out/cache
+
        yarn config set enableTelemetry false
-        yarn config set cacheFolder $out
+        yarn config set cacheFolder $out/cache
        yarn config set enableGlobalCache false
        yarn config set supportedArchitectures --json '${supportedArchitectures}'

        yarn install --immutable --mode=skip-build

+        cp yarn.lock $out/yarn.lock
+
        runHook postBuild
      '';
    dontInstall = true;
    outputHashMode = "recursive";
-    outputHash = "sha256-wMfjlxHs1pS8QEnIgn9IZTNShKkLeVVpGFkZ2ICtiNA=";
+    outputHash = "sha256-iULgio5zpmJhKofkUxA98Ze7Qy+kRfbbi5oEHYw5vzY=";
  };

  buildInputs = lib.optionals hostPlatform.isDarwin [
@@ -133,6 +148,7 @@ stdenv.mkDerivation (finalAttrs: {
    echo "$BACKEND_SERVER_PACKAGE_JSON" > packages/backend/server/package.json
  '';

+  # FIXME: use `yarn config set cacheFolder $offlineCache/cache`
  configurePhase = ''
    runHook preConfigure

@@ -144,14 +160,13 @@ stdenv.mkDerivation (finalAttrs: {
    # yarn config
    yarn config set enableTelemetry false
    yarn config set enableGlobalCache false
-    yarn config set cacheFolder $yarnOfflineCache
+    yarn config set cacheFolder $yarnOfflineCache/cache

    # electron config
    ELECTRON_VERSION_IN_LOCKFILE=$(yarn why electron --json | tail --lines 1 | jq --raw-output '.children | to_entries | first | .key ' | cut -d : -f 2)
-    rsync --archive --chmod=u+w "${electron.dist}/" $HOME/.electron-prebuilt-zip-tmp
    export ELECTRON_FORGE_ELECTRON_ZIP_DIR=$PWD/.electron_zip_dir
    mkdir -p $ELECTRON_FORGE_ELECTRON_ZIP_DIR
-    (cd $HOME/.electron-prebuilt-zip-tmp && zip --recurse-paths - .) > $ELECTRON_FORGE_ELECTRON_ZIP_DIR/electron-v$ELECTRON_VERSION_IN_LOCKFILE-${nodePlatform}-${nodeArch}.zip
+    cp ${electron-dist-zip} $ELECTRON_FORGE_ELECTRON_ZIP_DIR/electron-v$ELECTRON_VERSION_IN_LOCKFILE-${nodePlatform}-${nodeArch}.zip
    export ELECTRON_SKIP_BINARY_DOWNLOAD=1

    runHook postConfigure
@@ -7,13 +7,13 @@

 stdenvNoCC.mkDerivation (self: {
  pname = "alacritty-theme";
-  version = "0-unstable-2025-08-18";
+  version = "0-unstable-2025-11-16";

  src = fetchFromGitHub {
    owner = "alacritty";
    repo = "alacritty-theme";
-    rev = "40e0c6c8690d1c62f58718fcef8a48eb6077740b";
-    hash = "sha256-guNbnnSyENom6SkwN2Zjn3I1KnV5F3hbvYS1ns4q4uE=";
+    rev = "f82c742634b5e840731dd7c609e95231917681a5";
+    hash = "sha256-L5Sfex+9DGMLd4Be0w+BzNKdFCVXPBtnyBHQ6O0wPaU=";
    sparseCheckout = [ "themes" ];
  };

@@ -8,11 +8,11 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "aldente";
-  version = "1.35.1";
+  version = "1.36.1";

  src = fetchurl {
    url = "https://github.com/AppHouseKitchen/AlDente-Battery_Care_and_Monitoring/releases/download/${finalAttrs.version}/AlDente.dmg";
-    hash = "sha256-OjajT9goWbK3dKmkvt/qbcjlytg/xOPxNEZWE7h24Uc=";
+    hash = "sha256-iouXZv6dfLGawWtDH+/wGOogDjUoqp55BE2ADAAos0o=";
  };

  dontBuild = true;
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "alterware-launcher";
-  version = "0.11.3";
+  version = "0.11.4";

  src = fetchFromGitHub {
    owner = "alterware";
    repo = "alterware-launcher";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-qxAHnyjcb1ee6kZ4emBg7CN+z4UJXW5zjoY+TkXRwtc=";
+    hash = "sha256-TDdhPROyDUvTy7+h+P63xQ675SNhGBTU1mJTlNZyM5U=";
  };

-  cargoHash = "sha256-FZcfUBRzgyMwGKi/7d76UNNr6SwRogyJKy7P7HNMNz0=";
+  cargoHash = "sha256-R5DmSMiwR/b33iyhVa7zY4GiOzTKzKTyeAvsmIEcUqk=";

  buildInputs = [ openssl ];
  nativeBuildInputs = [ pkg-config ];
@@ -8,7 +8,7 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "amazon-q-cli";
-  version = "1.19.6";
+  version = "1.19.7";

  passthru.updateScript = nix-update-script { };

@@ -16,14 +16,14 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "aws";
    repo = "amazon-q-developer-cli";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-lJ1+EYlG+IzeUvbIGpeN+LisJQgFcYdXPN01cuB66Lw=";
+    hash = "sha256-KeYSZB3/eVKOVGYA92QwVweLPvamcizcSBtj08HtcCU=";
  };

  nativeBuildInputs = [
    rustPlatform.bindgenHook
  ];

-  cargoHash = "sha256-Y411prX2CH3nkZaVMgZuJChs2tjLJjDj2WPWm7b1cuo=";
+  cargoHash = "sha256-BlHdEMt3Z/dBnU8PevH9/g/64G1Vz5lwAps0gv60cmw=";

  cargoBuildFlags = [
    "-p"
@@ -5,7 +5,7 @@
  "packages": {
    "": {
      "dependencies": {
-        "@sourcegraph/amp": "^0.0.1763236881-g2ce1ea"
+        "@sourcegraph/amp": "^0.0.1763812881-gc5f191"
      }
    },
    "node_modules/@napi-rs/keyring": {
@@ -228,9 +228,9 @@
      }
    },
    "node_modules/@sourcegraph/amp": {
-      "version": "0.0.1763236881-g2ce1ea",
-      "resolved": "https://registry.npmjs.org/@sourcegraph/amp/-/amp-0.0.1763236881-g2ce1ea.tgz",
-      "integrity": "sha512-65ghGiRw2y2sjGK2zsh5WaYNYP4g/7Ad87CAHGV51UrVEFYRdB9Mje35foScL/nzWa30rUjRpPNP1pKw55GQxQ==",
+      "version": "0.0.1763812881-gc5f191",
+      "resolved": "https://registry.npmjs.org/@sourcegraph/amp/-/amp-0.0.1763812881-gc5f191.tgz",
+      "integrity": "sha512-lgiSK9liftvcT17BZFwSWOKHBsj9Bo9ZQZefIzB0jYpw6aOblDxFH5I7QdPQIyGS8bsJSUo8CA3so7Cb3sQJHw==",
      "license": "Sourcegraph Commercial License",
      "dependencies": {
        "@napi-rs/keyring": "1.1.9"
@@ -9,11 +9,11 @@

 buildNpmPackage (finalAttrs: {
  pname = "amp-cli";
-  version = "0.0.1763236881-g2ce1ea";
+  version = "0.0.1763812881-gc5f191";

  src = fetchzip {
    url = "https://registry.npmjs.org/@sourcegraph/amp/-/amp-${finalAttrs.version}.tgz";
-    hash = "sha256-2pkn3Anp5MB8D+leDU1GCsyd70N3b0S4FjhQYlyc7bs=";
+    hash = "sha256-lsRQZM5OdQUnGAEn70k/IRgu0BcyAppgDCFvYkfbsmw=";
  };

  postPatch = ''
@@ -45,7 +45,7 @@ buildNpmPackage (finalAttrs: {
    chmod +x bin/amp-wrapper.js
  '';

-  npmDepsHash = "sha256-ACMguY9qWJ+3YNYFfwLpv5jZt+kVRabms+YZjMzRhzE=";
+  npmDepsHash = "sha256-5FpZX1citPeT4nqORqxkPFWQUwtSwXBmrGXN8oyexy8=";

  propagatedBuildInputs = [
    ripgrep
@@ -7,13 +7,13 @@

 stdenvNoCC.mkDerivation {
  pname = "ananicy-rules-cachyos";
-  version = "0-unstable-2025-11-14";
+  version = "0-unstable-2025-11-23";

  src = fetchFromGitHub {
    owner = "CachyOS";
    repo = "ananicy-rules";
-    rev = "933c0777eb74723761a709e723af82ca40f99d42";
-    hash = "sha256-p+7fk8W+KdD4XYDDxKjkWDpzLlK+bB2+LvqE8nou2L4=";
+    rev = "f40a84ed2a104e46fc48ed9820f91b0542328732";
+    hash = "sha256-yU4rKkynKILsEgxJbNGAXIzp5U8J4WILQzJ3WJ2Q2dg=";
  };

  dontConfigure = true;
@@ -4,6 +4,7 @@
  callPackage,
  vscode-generic,
  fetchurl,
+  jq,
  buildFHSEnv,
  writeShellScript,
  coreutils,
@@ -21,7 +22,7 @@ let
  version = "1.11.3";
  vscodeVersion = "1.104.0";
 in
-callPackage vscode-generic {
+(callPackage vscode-generic {
  inherit
    commandLineArgs
    useVSCodeRipgrep
@@ -32,7 +33,7 @@ callPackage vscode-generic {
  pname = "antigravity";

  executableName = "antigravity";
-  longName = "Google Antigravity";
+  longName = "Antigravity";
  shortName = "Antigravity";
  libraryName = "antigravity";
  iconName = "antigravity";
@@ -90,4 +91,15 @@ callPackage vscode-generic {
      Zaczero
    ];
  };
-}
+}).overrideAttrs
+  (oldAttrs: {
+    # Disable update checks
+    nativeBuildInputs = (oldAttrs.nativeBuildInputs or [ ]) ++ [ jq ];
+    postPatch = (oldAttrs.postPatch or "") + ''
+      productJson="${
+        if stdenv.hostPlatform.isDarwin then "Contents/Resources" else "resources"
+      }/app/product.json"
+      data=$(jq 'del(.updateUrl)' "$productJson")
+      echo "$data" > "$productJson"
+    '';
+  })
@@ -11,13 +11,13 @@

 buildGoModule (finalAttrs: {
  pname = "apko";
-  version = "0.30.22";
+  version = "0.30.26";

  src = fetchFromGitHub {
    owner = "chainguard-dev";
    repo = "apko";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-wHspbxGnTOFF6zKWlW0OjgxmYPdoG2LWUTq2lH7i5Fk=";
+    hash = "sha256-lJV5WyhbMC0L0kNzo/Yv1yWLAFZ69QojRUpamJnbf3U=";
    # populate values that require us to use git. By doing this in postFetch we
    # can delete .git afterwards and maintain better reproducibility of the src.
    leaveDotGit = true;
@@ -29,7 +29,7 @@ buildGoModule (finalAttrs: {
      find "$out" -name .git -print0 | xargs -0 rm -rf
    '';
  };
-  vendorHash = "sha256-6AP2cf5URe2vVKVYl9O00CbGPXD8Zg1OE8V8rF9+/MI=";
+  vendorHash = "sha256-BXWaXdlqaw2SACFGAebnmeQSWdq/htvWVqXVYcUlLP8=";

  nativeBuildInputs = [ installShellFiles ];

@@ -1,29 +1,23 @@
 GEM
  remote: https://rubygems.org/
  specs:
-    Ascii85 (1.1.1)
+    Ascii85 (2.0.1)
    addressable (2.8.7)
      public_suffix (>= 2.0.2, < 7.0)
-    afm (0.2.2)
-    asciidoctor (2.0.23)
+    afm (1.0.0)
+    asciidoctor (2.0.26)
    asciidoctor-bibtex (0.9.0)
      asciidoctor (~> 2.0)
      bibtex-ruby (~> 6.1)
      citeproc-ruby (~> 1)
      csl-styles (~> 1)
      latex-decode (~> 0.2)
-    asciidoctor-diagram (2.3.1)
+    asciidoctor-diagram (3.1.0)
      asciidoctor (>= 1.5.7, < 3.x)
-      asciidoctor-diagram-ditaamini (~> 1.0)
-      asciidoctor-diagram-plantuml (~> 1.2021)
      rexml
-    asciidoctor-diagram-batik (1.17)
-    asciidoctor-diagram-ditaamini (1.0.3)
-    asciidoctor-diagram-plantuml (1.2024.6)
-      asciidoctor-diagram-batik (~> 1.17)
-    asciidoctor-epub3 (2.1.3)
+    asciidoctor-epub3 (2.3.0)
      asciidoctor (~> 2.0)
-      gepub (>= 1.0.0, <= 1.0.15)
+      gepub (~> 1.0.0)
      mime-types (~> 3.0)
      sass
    asciidoctor-html5s (0.5.1)
@@ -31,9 +25,9 @@ GEM
      thread_safe (~> 0.3.4)
    asciidoctor-multipage (0.0.19)
      asciidoctor (>= 2.0.11, < 2.1)
-    asciidoctor-pdf (2.3.19)
+    asciidoctor-pdf (2.3.24)
      asciidoctor (~> 2.0)
-      concurrent-ruby (~> 1.1)
+      concurrent-ruby (~> 1.3)
      matrix (~> 0.4)
      prawn (~> 2.4.0)
      prawn-icon (~> 3.0.0)
@@ -42,49 +36,63 @@ GEM
      prawn-templates (~> 0.1.0)
      treetop (~> 1.6.0)
      ttfunk (~> 1.7.0)
-    asciidoctor-reducer (1.0.6)
+    asciidoctor-reducer (1.1.2)
      asciidoctor (~> 2.0)
-    asciidoctor-revealjs (5.1.0)
+    asciidoctor-revealjs (5.2.0)
      asciidoctor (>= 2.0.0, < 3.0.0)
-    bibtex-ruby (6.1.0)
+    bibtex-ruby (6.2.0)
      latex-decode (~> 0.0)
+      logger (~> 1.7)
      racc (~> 1.7)
-    citeproc (1.0.10)
+    citeproc (1.1.0)
+      date
+      forwardable
+      json
      namae (~> 1.0)
+      observer (< 1.0)
+      open-uri (< 1.0)
    citeproc-ruby (1.1.14)
      citeproc (~> 1.0, >= 1.0.9)
      csl (~> 1.6)
    coderay (1.1.3)
-    concurrent-ruby (1.3.4)
+    concurrent-ruby (1.3.5)
    csl (1.6.0)
      namae (~> 1.0)
      rexml
    csl-styles (1.0.1.11)
      csl (~> 1.0)
-    css_parser (1.19.1)
+    css_parser (1.21.1)
      addressable
-    ffi (1.17.0)
-    gepub (1.0.15)
+    date (3.5.0)
+    ffi (1.17.2)
+    forwardable (1.3.3)
+    gepub (1.0.17)
      nokogiri (>= 1.8.2, < 2.0)
      rubyzip (> 1.1.1, < 2.4)
    hashery (2.1.2)
+    json (2.16.0)
    latex-decode (0.4.0)
-    logger (1.6.1)
-    matrix (0.4.2)
-    mime-types (3.6.0)
+    logger (1.7.0)
+    matrix (0.4.3)
+    mime-types (3.7.0)
      logger
-      mime-types-data (~> 3.2015)
-    mime-types-data (3.2024.1001)
-    mini_portile2 (2.8.7)
+      mime-types-data (~> 3.2025, >= 3.2025.0507)
+    mime-types-data (3.2025.0924)
+    mini_portile2 (2.8.9)
    namae (1.2.0)
      racc (~> 1.7)
-    nokogiri (1.16.7)
+    nokogiri (1.18.10)
      mini_portile2 (~> 2.8.2)
      racc (~> 1.4)
+    observer (0.1.2)
+    open-uri (0.5.0)
+      stringio
+      time
+      uri
    pdf-core (0.9.0)
-    pdf-reader (2.12.0)
-      Ascii85 (~> 1.0)
-      afm (~> 0.2.1)
+    pdf-reader (2.15.0)
+      Ascii85 (>= 1.0, < 3.0, != 2.0.0)
+      afm (>= 0.2.1, < 2)
      hashery (~> 2.0)
      ruby-rc4
      ttfunk
@@ -104,14 +112,14 @@ GEM
    prawn-templates (0.1.2)
      pdf-reader (~> 2.0)
      prawn (~> 2.2)
-    public_suffix (6.0.1)
-    pygments.rb (3.0.0)
+    public_suffix (6.0.2)
+    pygments.rb (4.0.0)
    racc (1.8.1)
    rb-fsevent (0.11.2)
    rb-inotify (0.11.1)
      ffi (~> 1.0)
-    rexml (3.3.9)
-    rouge (4.4.0)
+    rexml (3.4.4)
+    rouge (4.6.1)
    ruby-rc4 (0.1.5)
    rubyzip (2.3.2)
    sass (3.7.4)
@@ -119,10 +127,14 @@ GEM
    sass-listen (4.0.0)
      rb-fsevent (~> 0.9, >= 0.9.4)
      rb-inotify (~> 0.9, >= 0.9.7)
+    stringio (3.1.8)
    thread_safe (0.3.6)
-    treetop (1.6.12)
+    time (0.4.1)
+      date
+    treetop (1.6.18)
      polyglot (~> 0.3)
    ttfunk (1.7.0)
+    uri (1.1.1)

 PLATFORMS
  ruby
@@ -142,4 +154,4 @@ DEPENDENCIES
  rouge

 BUNDLED WITH
-   2.5.22
+   2.7.2
@@ -15,30 +15,30 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "06kj9hgd0z8pj27bxp2diwqh6fv7qhwwm17z64rhdc4sfn76jgn8";
+      sha256 = "0ia5iw9xvvy1igaxsa08vvv4b5ry9ipyr18917pi8w0y4kvddm2v";
      type = "gem";
    };
-    version = "0.2.2";
+    version = "1.0.0";
  };
  Ascii85 = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1c62cx96r0v265mywnlik43qx0wf6bjbzl54qa47x6dzjg861mvk";
+      sha256 = "0nmyxpngg5rycyryhq9l9hapz1y3iqyflskyksxkqm0832a5vjqm";
      type = "gem";
    };
-    version = "1.1.1";
+    version = "2.0.1";
  };
  asciidoctor = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1wyxgwmnz9bw377r3lba26b090hbsq9qnbw8575a1prpy83qh82j";
+      sha256 = "1hbin3j8wynl2fpqa3d6vb932pyngyfn8j2q6gbbn1n23z7srqqn";
      type = "gem";
    };
-    version = "2.0.23";
+    version = "2.0.26";
  };
  asciidoctor-bibtex = {
    dependencies = [
@@ -60,49 +60,16 @@
  asciidoctor-diagram = {
    dependencies = [
      "asciidoctor"
-      "asciidoctor-diagram-ditaamini"
-      "asciidoctor-diagram-plantuml"
      "rexml"
    ];
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1214scxm36k409gfy3wilfqx3akrm52r530zmra6cmmf6d22c5q4";
+      sha256 = "15sc6yb4qyxy4v3bki26xn0j4k8rgjjiz3nwrxsprn6f0y6ysbp3";
      type = "gem";
    };
-    version = "2.3.1";
-  };
-  asciidoctor-diagram-batik = {
-    groups = [ "default" ];
-    platforms = [ ];
-    source = {
-      remotes = [ "https://rubygems.org" ];
-      sha256 = "0220xqxmkmimxmhsqhlbr0hslijvnhzdds3s6h6fxbxqrrmm0jrl";
-      type = "gem";
-    };
-    version = "1.17";
-  };
-  asciidoctor-diagram-ditaamini = {
-    groups = [ "default" ];
-    platforms = [ ];
-    source = {
-      remotes = [ "https://rubygems.org" ];
-      sha256 = "13h65bfbq7hc7z3kqn0m28w9c6ap7fikpjcvsdga6jg01slb4c56";
-      type = "gem";
-    };
-    version = "1.0.3";
-  };
-  asciidoctor-diagram-plantuml = {
-    dependencies = [ "asciidoctor-diagram-batik" ];
-    groups = [ "default" ];
-    platforms = [ ];
-    source = {
-      remotes = [ "https://rubygems.org" ];
-      sha256 = "173mp5vnzvn3yv9fw0p66rsbxaip9lhphw22yn19l62d1drlmhia";
-      type = "gem";
-    };
-    version = "1.2024.6";
+    version = "3.1.0";
  };
  asciidoctor-epub3 = {
    dependencies = [
@@ -115,10 +82,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1yn2nhr7fr5rx7fn0nhw44gf7iampiy53bw59agpfl7h2dyazjll";
+      sha256 = "0n4c7silsc37gapsvkzm2l7fwa9gi28cif7mzd27lkzbkdsv4k0i";
      type = "gem";
    };
-    version = "2.1.3";
+    version = "2.3.0";
  };
  asciidoctor-html5s = {
    dependencies = [
@@ -162,10 +129,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1ybkw3xjv75xsc0wbwg76bk83sfspr50k2phshpvh9ynchli8jh3";
+      sha256 = "0ldh43ps15dpnrgqaybyq2py9cn1m14q2z6djgg22fyl698yaxih";
      type = "gem";
    };
-    version = "2.3.19";
+    version = "2.3.24";
  };
  asciidoctor-reducer = {
    dependencies = [ "asciidoctor" ];
@@ -173,10 +140,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1fbrk97mdn26zk118dav2ckyiw6kgrlbkkhdcasawsl42hj16slw";
+      sha256 = "0d0zz9qksbxfzc73jv20rzkhy5qkfkp4fr017k06r4al79y3lvcd";
      type = "gem";
    };
-    version = "1.0.6";
+    version = "1.1.2";
  };
  asciidoctor-revealjs = {
    dependencies = [ "asciidoctor" ];
@@ -184,35 +151,43 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0jgazcfzn577xlichfj0rvci0fayp63xcng11ss9mmwqgk48ri53";
+      sha256 = "1qkapy8nck52r7aldmnrvaabzrmizwa9664ngziivjgjxbksa11m";
      type = "gem";
    };
-    version = "5.1.0";
+    version = "5.2.0";
  };
  bibtex-ruby = {
    dependencies = [
      "latex-decode"
+      "logger"
      "racc"
    ];
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1ggx2j1gi46f1a6p45l1abk3nryfg1pj0cdlyrnilnqqpr1cfc96";
+      sha256 = "16n6szgybyk7mglpajizgi7b77s48i319brxhhx51pvainkyn46n";
      type = "gem";
    };
-    version = "6.1.0";
+    version = "6.2.0";
  };
  citeproc = {
-    dependencies = [ "namae" ];
+    dependencies = [
+      "date"
+      "forwardable"
+      "json"
+      "namae"
+      "observer"
+      "open-uri"
+    ];
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "13vl5sjmksk5a8kjcqnjxh7kn9gn1n4f9p1rvqfgsfhs54p0m6l2";
+      sha256 = "159vnp84r3rywwzji6jbfjldlynai0gll868y6z84ghk924np3i7";
      type = "gem";
    };
-    version = "1.0.10";
+    version = "1.1.0";
  };
  citeproc-ruby = {
    dependencies = [
@@ -243,10 +218,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0chwfdq2a6kbj6xz9l6zrdfnyghnh32si82la1dnpa5h75ir5anl";
+      sha256 = "1ipbrgvf0pp6zxdk5ascp6i29aybz2bx9wdrlchjmpx6mhvkwfw1";
      type = "gem";
    };
-    version = "1.3.4";
+    version = "1.3.5";
  };
  csl = {
    dependencies = [
@@ -279,20 +254,40 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "17i0fn99kswvfps8r698zw2cr16rc98xdrl0d26y36rv3vhdqh0r";
+      sha256 = "1izp5vna86s7xivqzml4nviy01bv76arrd5is8wkncwp1by3zzbc";
      type = "gem";
    };
-    version = "1.19.1";
+    version = "1.21.1";
+  };
+  date = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1rbfqkzr6i8b6538z16chvrkgywf5p5vafsgmnbmvrmh0ingsx2y";
+      type = "gem";
+    };
+    version = "3.5.0";
  };
  ffi = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "07139870npj59jnl8vmk39ja3gdk3fb5z9vc0lf32y2h891hwqsi";
+      sha256 = "19kdyjg3kv7x0ad4xsd4swy5izsbb1vl1rpb6qqcqisr5s23awi9";
      type = "gem";
    };
-    version = "1.17.0";
+    version = "1.17.2";
+  };
+  forwardable = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1b5g1i3xdvmxxpq4qp0z4v78ivqnazz26w110fh4cvzsdayz8zgi";
+      type = "gem";
+    };
+    version = "1.3.3";
  };
  gepub = {
    dependencies = [
@@ -303,10 +298,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "08fny807zd4700f263ckc76bladjipsniyk3clv8a7x76x3fqshx";
+      sha256 = "0fiwnfgvyrhgywnqvfvr3ird8p4xda6nvvqwvvfpnhvsyhrxswlc";
      type = "gem";
    };
-    version = "1.0.15";
+    version = "1.0.17";
  };
  hashery = {
    groups = [ "default" ];
@@ -318,6 +313,16 @@
    };
    version = "2.1.2";
  };
+  json = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "098m3q2jrx4xbf0knrbmflsynmmb5x9q9b0bzpmj7jmm1cr30mna";
+      type = "gem";
+    };
+    version = "2.16.0";
+  };
  latex-decode = {
    groups = [ "default" ];
    platforms = [ ];
@@ -333,20 +338,20 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0lwncq2rf8gm79g2rcnnyzs26ma1f4wnfjm6gs4zf2wlsdz5in9s";
+      sha256 = "00q2zznygpbls8asz5knjvvj2brr3ghmqxgr83xnrdj4rk3xwvhr";
      type = "gem";
    };
-    version = "1.6.1";
+    version = "1.7.0";
  };
  matrix = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1h2cgkpzkh3dd0flnnwfq6f3nl2b1zff9lvqz8xs853ssv5kq23i";
+      sha256 = "0nscas3a4mmrp1rc07cdjlbbpb2rydkindmbj3v3z5y1viyspmd0";
      type = "gem";
    };
-    version = "0.4.2";
+    version = "0.4.3";
  };
  mime-types = {
    dependencies = [
@@ -357,30 +362,30 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0r34mc3n7sxsbm9mzyzy8m3dvq7pwbryyc8m452axkj0g2axnwbg";
+      sha256 = "0mjyxl7c0xzyqdqa8r45hqg7jcw2prp3hkp39mdf223g4hfgdsyw";
      type = "gem";
    };
-    version = "3.6.0";
+    version = "3.7.0";
  };
  mime-types-data = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "06dbn0j13jwdrmlvrjd50mxqrjlkh3lvxp0afh4glyzbliqvqpsd";
+      sha256 = "0a27k4jcrx7pvb0p59fn1frh14iy087c2aygrdkmgwsrbshvqxpj";
      type = "gem";
    };
-    version = "3.2024.1001";
+    version = "3.2025.0924";
  };
  mini_portile2 = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1q1f2sdw3y3y9mnym9dhjgsjr72sq975cfg5c4yx7gwv8nmzbvhk";
+      sha256 = "12f2830x7pq3kj0v8nz0zjvaw02sv01bqs1zwdrc04704kwcgmqc";
      type = "gem";
    };
-    version = "2.8.7";
+    version = "2.8.9";
  };
  namae = {
    dependencies = [ "racc" ];
@@ -402,10 +407,35 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "15gysw8rassqgdq3kwgl4mhqmrgh7nk2qvrcqp4ijyqazgywn6gq";
+      sha256 = "1hcwwr2h8jnqqxmf8mfb52b0dchr7pm064ingflb78wa00qhgk6m";
      type = "gem";
    };
-    version = "1.16.7";
+    version = "1.18.10";
+  };
+  observer = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1b2h1642jy1xrgyakyzz6bkq43gwp8yvxrs8sww12rms65qi18yq";
+      type = "gem";
+    };
+    version = "0.1.2";
+  };
+  open-uri = {
+    dependencies = [
+      "stringio"
+      "time"
+      "uri"
+    ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1jl7i0w0vhxpvj54707cpcpqi00maf1dma0mxmm99rirmkyhckvv";
+      type = "gem";
+    };
+    version = "0.5.0";
  };
  pdf-core = {
    groups = [ "default" ];
@@ -429,10 +459,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0n0pp7blk3np3fqsb54l34fsamrww80cp3dhlhskfayg7542mrv1";
+      sha256 = "11h8dhhd2c8mxssibk9q6qn7ilj4p71crlfirw8pppn8pr85f0n5";
      type = "gem";
    };
-    version = "2.12.0";
+    version = "2.15.0";
  };
  polyglot = {
    groups = [ "default" ];
@@ -515,20 +545,20 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0vqcw3iwby3yc6avs1vb3gfd0vcp2v7q310665dvxfswmcf4xm31";
+      sha256 = "1543ap9w3ydhx39ljcd675cdz9cr948x9mp00ab8qvq6118wv9xz";
      type = "gem";
    };
-    version = "6.0.1";
+    version = "6.0.2";
  };
  "pygments.rb" = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "14xhvfnj188pypy6pxj29hrn60pznv6dc4ycdgyd6jv2d769wwj1";
+      sha256 = "0mzfxkzvgyrj9g6471mxa6d1jy59fsds9mfkx1balpng50xb12zl";
      type = "gem";
    };
-    version = "3.0.0";
+    version = "4.0.0";
  };
  racc = {
    groups = [ "default" ];
@@ -566,20 +596,20 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1j9p66pmfgxnzp76ksssyfyqqrg7281dyi3xyknl3wwraaw7a66p";
+      sha256 = "0hninnbvqd2pn40h863lbrn9p11gvdxp928izkag5ysx8b1s5q0r";
      type = "gem";
    };
-    version = "3.3.9";
+    version = "3.4.4";
  };
  rouge = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0r0b48945hakgy0y7lg6h1bb7pkfz8jqd0r6777f80ij3sansvbs";
+      sha256 = "1pkp5icgm7s10b2n6b2pzbdsfiv0l5sxqyizx55qdmlpaxnk8xah";
      type = "gem";
    };
-    version = "4.4.0";
+    version = "4.6.1";
  };
  ruby-rc4 = {
    groups = [ "default" ];
@@ -626,6 +656,16 @@
    };
    version = "4.0.0";
  };
+  stringio = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1v74k5yw7ndikr53wgbjn6j51p83qnzqbn9z4b53r102jcx3ri4r";
+      type = "gem";
+    };
+    version = "3.1.8";
+  };
  thread_safe = {
    groups = [ "default" ];
    platforms = [ ];
@@ -636,16 +676,27 @@
    };
    version = "0.3.6";
  };
+  time = {
+    dependencies = [ "date" ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "0qgarmdyqypzsaanf4w9vqrd9axrcrjqilxwrfmxp954102kcpq3";
+      type = "gem";
+    };
+    version = "0.4.1";
+  };
  treetop = {
    dependencies = [ "polyglot" ];
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0adc8qblz8ii668r3rksjx83p675iryh52rvdvysimx2hkbasj7d";
+      sha256 = "1nl3q5ai7ikaa5sjdbspfa4njbrdvf7898zkplmalln6y4r3y153";
      type = "gem";
    };
-    version = "1.6.12";
+    version = "1.6.18";
  };
  ttfunk = {
    groups = [ "default" ];
@@ -657,4 +708,14 @@
    };
    version = "1.7.0";
  };
+  uri = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1ijpbj7mdrq7rhpq2kb51yykhrs2s54wfs6sm9z3icgz4y6sb7rp";
+      type = "gem";
+    };
+    version = "1.1.1";
+  };
 }
@@ -1,14 +1,14 @@
 GEM
  remote: https://rubygems.org/
  specs:
-    Ascii85 (1.1.1)
+    Ascii85 (2.0.1)
    addressable (2.8.7)
      public_suffix (>= 2.0.2, < 7.0)
-    afm (0.2.2)
-    asciidoctor (2.0.23)
-    asciidoctor-pdf (2.3.19)
+    afm (1.0.0)
+    asciidoctor (2.0.26)
+    asciidoctor-pdf (2.3.24)
      asciidoctor (~> 2.0)
-      concurrent-ruby (~> 1.1)
+      concurrent-ruby (~> 1.3)
      matrix (~> 0.4)
      prawn (~> 2.4.0)
      prawn-icon (~> 3.0.0)
@@ -18,15 +18,15 @@ GEM
      treetop (~> 1.6.0)
      ttfunk (~> 1.7.0)
    coderay (1.1.3)
-    concurrent-ruby (1.3.4)
-    css_parser (1.19.1)
+    concurrent-ruby (1.3.5)
+    css_parser (1.21.1)
      addressable
    hashery (2.1.2)
-    matrix (0.4.2)
+    matrix (0.4.3)
    pdf-core (0.9.0)
-    pdf-reader (2.12.0)
-      Ascii85 (~> 1.0)
-      afm (~> 0.2.1)
+    pdf-reader (2.15.0)
+      Ascii85 (>= 1.0, < 3.0, != 2.0.0)
+      afm (>= 0.2.1, < 2)
      hashery (~> 2.0)
      ruby-rc4
      ttfunk
@@ -46,13 +46,13 @@ GEM
    prawn-templates (0.1.2)
      pdf-reader (~> 2.0)
      prawn (~> 2.2)
-    public_suffix (6.0.1)
-    pygments.rb (3.0.0)
-    rexml (3.3.9)
-    rouge (4.4.0)
+    public_suffix (6.0.2)
+    pygments.rb (4.0.0)
+    rexml (3.4.4)
+    rouge (4.6.1)
    ruby-rc4 (0.1.5)
-    tilt (2.4.0)
-    treetop (1.6.12)
+    tilt (2.6.1)
+    treetop (1.6.18)
      polyglot (~> 0.3)
    ttfunk (1.7.0)

@@ -68,4 +68,4 @@ DEPENDENCIES
  tilt

 BUNDLED WITH
-   2.5.16
+   2.7.2
@@ -15,30 +15,30 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "06kj9hgd0z8pj27bxp2diwqh6fv7qhwwm17z64rhdc4sfn76jgn8";
+      sha256 = "0ia5iw9xvvy1igaxsa08vvv4b5ry9ipyr18917pi8w0y4kvddm2v";
      type = "gem";
    };
-    version = "0.2.2";
+    version = "1.0.0";
  };
  Ascii85 = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1c62cx96r0v265mywnlik43qx0wf6bjbzl54qa47x6dzjg861mvk";
+      sha256 = "0nmyxpngg5rycyryhq9l9hapz1y3iqyflskyksxkqm0832a5vjqm";
      type = "gem";
    };
-    version = "1.1.1";
+    version = "2.0.1";
  };
  asciidoctor = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1wyxgwmnz9bw377r3lba26b090hbsq9qnbw8575a1prpy83qh82j";
+      sha256 = "1hbin3j8wynl2fpqa3d6vb932pyngyfn8j2q6gbbn1n23z7srqqn";
      type = "gem";
    };
-    version = "2.0.23";
+    version = "2.0.26";
  };
  asciidoctor-pdf = {
    dependencies = [
@@ -57,10 +57,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1ybkw3xjv75xsc0wbwg76bk83sfspr50k2phshpvh9ynchli8jh3";
+      sha256 = "0ldh43ps15dpnrgqaybyq2py9cn1m14q2z6djgg22fyl698yaxih";
      type = "gem";
    };
-    version = "2.3.19";
+    version = "2.3.24";
  };
  coderay = {
    groups = [ "default" ];
@@ -77,10 +77,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0chwfdq2a6kbj6xz9l6zrdfnyghnh32si82la1dnpa5h75ir5anl";
+      sha256 = "1ipbrgvf0pp6zxdk5ascp6i29aybz2bx9wdrlchjmpx6mhvkwfw1";
      type = "gem";
    };
-    version = "1.3.4";
+    version = "1.3.5";
  };
  css_parser = {
    dependencies = [ "addressable" ];
@@ -88,10 +88,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "17i0fn99kswvfps8r698zw2cr16rc98xdrl0d26y36rv3vhdqh0r";
+      sha256 = "1izp5vna86s7xivqzml4nviy01bv76arrd5is8wkncwp1by3zzbc";
      type = "gem";
    };
-    version = "1.19.1";
+    version = "1.21.1";
  };
  hashery = {
    groups = [ "default" ];
@@ -108,10 +108,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1h2cgkpzkh3dd0flnnwfq6f3nl2b1zff9lvqz8xs853ssv5kq23i";
+      sha256 = "0nscas3a4mmrp1rc07cdjlbbpb2rydkindmbj3v3z5y1viyspmd0";
      type = "gem";
    };
-    version = "0.4.2";
+    version = "0.4.3";
  };
  pdf-core = {
    groups = [ "default" ];
@@ -135,10 +135,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0n0pp7blk3np3fqsb54l34fsamrww80cp3dhlhskfayg7542mrv1";
+      sha256 = "11h8dhhd2c8mxssibk9q6qn7ilj4p71crlfirw8pppn8pr85f0n5";
      type = "gem";
    };
-    version = "2.12.0";
+    version = "2.15.0";
  };
  polyglot = {
    groups = [ "default" ];
@@ -221,40 +221,40 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0vqcw3iwby3yc6avs1vb3gfd0vcp2v7q310665dvxfswmcf4xm31";
+      sha256 = "1543ap9w3ydhx39ljcd675cdz9cr948x9mp00ab8qvq6118wv9xz";
      type = "gem";
    };
-    version = "6.0.1";
+    version = "6.0.2";
  };
  "pygments.rb" = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "14xhvfnj188pypy6pxj29hrn60pznv6dc4ycdgyd6jv2d769wwj1";
+      sha256 = "0mzfxkzvgyrj9g6471mxa6d1jy59fsds9mfkx1balpng50xb12zl";
      type = "gem";
    };
-    version = "3.0.0";
+    version = "4.0.0";
  };
  rexml = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1j9p66pmfgxnzp76ksssyfyqqrg7281dyi3xyknl3wwraaw7a66p";
+      sha256 = "0hninnbvqd2pn40h863lbrn9p11gvdxp928izkag5ysx8b1s5q0r";
      type = "gem";
    };
-    version = "3.3.9";
+    version = "3.4.4";
  };
  rouge = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0r0b48945hakgy0y7lg6h1bb7pkfz8jqd0r6777f80ij3sansvbs";
+      sha256 = "1pkp5icgm7s10b2n6b2pzbdsfiv0l5sxqyizx55qdmlpaxnk8xah";
      type = "gem";
    };
-    version = "4.4.0";
+    version = "4.6.1";
  };
  ruby-rc4 = {
    groups = [ "default" ];
@@ -271,10 +271,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0kds7wkxmb038cwp6ravnwn8k65ixc68wpm8j5jx5bhx8ndg4x6z";
+      sha256 = "0w27v04d7rnxjr3f65w1m7xyvr6ch6szjj2v5wv1wz6z5ax9pa9m";
      type = "gem";
    };
-    version = "2.4.0";
+    version = "2.6.1";
  };
  treetop = {
    dependencies = [ "polyglot" ];
@@ -282,10 +282,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0adc8qblz8ii668r3rksjx83p675iryh52rvdvysimx2hkbasj7d";
+      sha256 = "1nl3q5ai7ikaa5sjdbspfa4njbrdvf7898zkplmalln6y4r3y153";
      type = "gem";
    };
-    version = "1.6.12";
+    version = "1.6.18";
  };
  ttfunk = {
    groups = [ "default" ];
@@ -7,16 +7,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "automatic-timezoned";
-  version = "2.0.102";
+  version = "2.0.103";

  src = fetchFromGitHub {
    owner = "maxbrunet";
    repo = "automatic-timezoned";
    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-GErr38+e8HlpzHfI4pxLcDJJnpxKTlsMTFwIXXAL02c=";
+    sha256 = "sha256-VxD+aXGbJTdNAI9V3meQjF4CfhPr7lChhVAN4WnH6ac=";
  };

-  cargoHash = "sha256-Jex9im+vyLPjWtsuh0gpd6iILWICCE5jSzMXU/Oh3rw=";
+  cargoHash = "sha256-0AZNViP2jE6/FZdo0LaLjxBPkPqnd2kvZmVtbi5W5RI=";

  nativeInstallCheckInputs = [ versionCheckHook ];

@@ -8,13 +8,13 @@

 stdenv.mkDerivation rec {
  pname = "await";
-  version = "2.3.0";
+  version = "2.4.0";

  src = fetchFromGitHub {
    owner = "slavaGanzin";
    repo = "await";
    tag = version;
-    hash = "sha256-UfEjcf8NuLRzu/57aS738Do/lXzYX5lrus1xgZ7dask=";
+    hash = "sha256-MpdP4OJvxjF8zbKQ1YGVrtcC8RKxDNHDA90tWvLDQbU=";
  };

  nativeBuildInputs = [ installShellFiles ];
@@ -6,12 +6,12 @@

 python3Packages.buildPythonApplication rec {
  pname = "bikeshed";
-  version = "5.4.0";
+  version = "5.4.1";
  pyproject = true;

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-lI05x3IYiXyInjm/It8c3JwR1H1m6VVBuehjKiNEZzo=";
+    hash = "sha256-vgjS8jAtLA2OvJG/pJAJnvaaMPMLkbKHgzIMsdzXTBM=";
  };

  build-system = [ python3Packages.setuptools ];
@@ -1,46 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchFromGitLab,
-  meson,
-  ninja,
-  pkg-config,
-  vala,
-  gobject-introspection,
-  gtk4,
-  gtk3,
-  desktop-file-utils,
-}:
-
-stdenv.mkDerivation {
-  pname = "marble";
-  version = "unstable-2023-05-11";
-
-  src = fetchFromGitLab {
-    domain = "gitlab.gnome.org";
-    owner = "raggesilver";
-    repo = "marble";
-    # the same used on flatpak
-    rev = "f240b2ec7d5cdacb8fdcc553703420dc5101ffdb";
-    sha256 = "sha256-obtz7zOyEZPgi/NNjtLr6aFm/1UVTzjTdJpN3JQfpUs=";
-  };
-
-  nativeBuildInputs = [
-    meson
-    ninja
-    pkg-config
-    vala
-    gtk3 # For gtk-update-icon-cache
-    desktop-file-utils # For update-desktop-database
-    gobject-introspection # For g-ir-compiler
-  ];
-  buildInputs = [ gtk4 ];
-
-  meta = with lib; {
-    description = "Raggesilver's GTK library";
-    homepage = "https://gitlab.gnome.org/raggesilver/marble";
-    license = licenses.gpl3Plus;
-    maintainers = with maintainers; [ chuangzhu ];
-    platforms = platforms.linux;
-  };
-}
@@ -2,7 +2,6 @@
  lib,
  stdenv,
  fetchFromGitLab,
-  fetchpatch,
  meson,
  ninja,
  pkg-config,
@@ -13,48 +12,26 @@
  sassc,
  libadwaita,
  pcre2,
-  libsixel,
  libxml2,
  librsvg,
  libgee,
-  callPackage,
  python3,
  desktop-file-utils,
  wrapGAppsHook4,
-  sixelSupport ? false,
 }:

-let
-  marble = callPackage ./marble.nix { };
-in
-stdenv.mkDerivation rec {
-  pname = "blackbox";
-  version = "0.14.0";
+stdenv.mkDerivation {
+  pname = "blackbox-terminal";
+  version = "0.14.0-unstable-2025-08-29";

  src = fetchFromGitLab {
    domain = "gitlab.gnome.org";
    owner = "raggesilver";
    repo = "blackbox";
-    rev = "v${version}";
-    hash = "sha256-ebwh9WTooJuvYFIygDBn9lYC7+lx9P1HskvKU8EX9jw=";
+    rev = "9290c2feddc4415752afd1b03c82a1d82a6b3392";
+    hash = "sha256-s1e9zS4ijsa3+zxlsdxlqTzR1Rnb4hxjwlqYEhtvy5g=";
  };

-  patches = [
-    # Fix closing confirmation dialogs not showing
-    (fetchpatch {
-      url = "https://gitlab.gnome.org/raggesilver/blackbox/-/commit/3978c9b666d27adba835dd47cf55e21515b6d6d9.patch";
-      hash = "sha256-L/Ci4YqYNzb3F49bUwEWSjzr03MIPK9A5FEJCCct+7A=";
-    })
-
-    # Fix build with GCC 14
-    # https://gitlab.gnome.org/GNOME/vala/-/merge_requests/369#note_1986032
-    # https://gitlab.gnome.org/raggesilver/blackbox/-/merge_requests/143
-    (fetchpatch {
-      url = "https://gitlab.gnome.org/raggesilver/blackbox/-/commit/2f45717f1c18f710d9b9fbf21830027c8f0794e7.patch";
-      hash = "sha256-VlXttqOTbhD6Rp7ZODgsafOjeY+Lb5sZP277bC9ENXU=";
-    })
-  ];
-
  postPatch = ''
    substituteInPlace build-aux/meson/postinstall.py \
      --replace-fail 'gtk-update-icon-cache' 'gtk4-update-icon-cache'
@@ -73,28 +50,8 @@ stdenv.mkDerivation rec {
  ];
  buildInputs = [
    gtk4
-    (vte-gtk4.overrideAttrs (
-      old:
-      {
-        src = fetchFromGitLab {
-          domain = "gitlab.gnome.org";
-          owner = "GNOME";
-          repo = "vte";
-          rev = "3c8f66be867aca6656e4109ce880b6ea7431b895";
-          hash = "sha256-vz9ircmPy2Q4fxNnjurkgJtuTSS49rBq/m61p1B43eU=";
-        };
-        patches = lib.optional (old ? patches) (lib.head old.patches);
-        postPatch = (old.postPatch or "") + ''
-          patchShebangs src/box_drawing_generate.sh
-        '';
-      }
-      // lib.optionalAttrs sixelSupport {
-        buildInputs = old.buildInputs ++ [ libsixel ];
-        mesonFlags = old.mesonFlags ++ [ "-Dsixel=true" ];
-      }
-    ))
+    vte-gtk4
    json-glib
-    marble
    libadwaita
    pcre2
    libxml2
@@ -102,18 +59,18 @@ stdenv.mkDerivation rec {
    libgee
  ];

-  mesonFlags = [ "-Dblackbox_is_flatpak=false" ];
+  mesonFlags = [
+    (lib.mesonBool "blackbox_is_flatpak" false)
+  ];

  meta = {
-    description = "Beautiful GTK 4 terminal";
-    mainProgram = "blackbox";
+    description = "Elegant and customizable terminal for GNOME";
    homepage = "https://gitlab.gnome.org/raggesilver/blackbox";
-    changelog = "https://gitlab.gnome.org/raggesilver/blackbox/-/raw/v${version}/CHANGELOG.md";
    license = lib.licenses.gpl3Plus;
    maintainers = with lib.maintainers; [
      chuangzhu
-      linsui
    ];
+    mainProgram = "blackbox";
    platforms = lib.platforms.linux;
  };
 }
@@ -9,13 +9,13 @@
 buildGoModule rec {
  pname = "bosh-cli";

-  version = "7.9.13";
+  version = "7.9.14";

  src = fetchFromGitHub {
    owner = "cloudfoundry";
    repo = "bosh-cli";
    rev = "v${version}";
-    sha256 = "sha256-/9rtm1JdyfnCG60YeM9jJ0koeo0d1qfVJ8zHAHoBCGQ=";
+    sha256 = "sha256-Chsnok59Q0lmYa9J8XGX3SlDsUjRoUcPArLVHTGkt3k=";
  };
  vendorHash = null;

@@ -14,16 +14,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "browsers";
-  version = "0.7.2";
+  version = "0.7.3";

  src = fetchFromGitHub {
    owner = "Browsers-software";
    repo = "browsers";
    tag = finalAttrs.version;
-    hash = "sha256-1RWGAEiSJWDoScKuUB5LL1tQyTw5NRnld7Fi93vP0BA=";
+    hash = "sha256-QrIE9buG46JDxGFI6tjxzMizic82Az61MgMhKU854bY=";
  };

-  cargoHash = "sha256-M1KAZPjNu4j5b5Ml2J9OHpD+/jeF8WRP6EzfmLnb0hY=";
+  cargoHash = "sha256-JZoc5EwOXgv50LblYjEW8tsD4roJ6uZYuCbVzXdaKSY=";

  nativeBuildInputs = [
    pkg-config
@@ -13,13 +13,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "budgie-media-player-applet";
-  version = "1.2.0";
+  version = "1.3.0";

  src = fetchFromGitHub {
    owner = "zalesyc";
    repo = "budgie-media-player-applet";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-FTc/cl4qjVYx45SuZPizOGC09JERIuifCo86+Tqu5hk=";
+    hash = "sha256-Ekt6OXSjqKF4d6a9lmZyUa06pqz1uYkCHbzvLM7Z+W8=";
  };

  strictDeps = true;
@@ -44,17 +44,11 @@ stdenv.mkDerivation (finalAttrs: {
  ];

  mesonFlags = [
-    # The meson option actually enables libpeas2 support
-    # https://github.com/BuddiesOfBudgie/budgie-desktop/issues/749
-    "-Dfor-wayland=true"
+    "-Dbudgie-api-v2=true"
  ];

  postPatch = ''
    substituteInPlace meson.build --replace-fail "/usr" "$out"
-
-    # https://github.com/zalesyc/budgie-media-player-applet/issues/25
-    substituteInPlace src/{applet,testWin,Popover,BudgieMediaPlayer}.py \
-      --replace-fail "gi.require_version('Budgie', '1.0')" "gi.require_version('Budgie', '2.0')"
  '';

  postFixup = ''
@@ -10,16 +10,16 @@

 buildGoModule (finalAttrs: {
  pname = "buf";
-  version = "1.59.0";
+  version = "1.60.0";

  src = fetchFromGitHub {
    owner = "bufbuild";
    repo = "buf";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-2EFtRwLbwcgCLxEdZNYATlqFD3BJ+tRKscFAUBAzQOY=";
+    hash = "sha256-6hXDepvmSovTnrbtZqgU08qUBP6UCtmKeU68rYsIWKg=";
  };

-  vendorHash = "sha256-o6aE+qdsWGURJraebfhbVEwx6MJYs9Fw8B5FcoKHNgo=";
+  vendorHash = "sha256-7HdYKFMceaZkZYkxhpFrVQKsNCeXeUH1SPupkzAJpl0=";

  patches = [
    # Skip a test that requires networking to be available to work.
@@ -92,9 +92,6 @@ python3Packages.buildPythonApplication rec {
  ];

  disabledTests = [
-    # ValueError: Unexpected comparison between all and ''
-    "test_help"
-
    # Error loading project: project.conf [line 37 column 2]: Failed to load source-mirror plugin 'mirror': No package metadata was found for sample-plugins
    "test_source_mirror_plugin"

@@ -9,20 +9,20 @@
 }:

 let
-  version = "2025.11.1";
+  version = "2025.11.2";

  product =
    if proEdition then
      {
        productName = "pro";
        productDesktop = "Burp Suite Professional Edition";
-        hash = "sha256-vtei5zzfbsfO3W6IIs15y4Ef+mLK9BlaNl+4wT8wEmw=";
+        hash = "sha256-uI3xjh1z4g9+ZjjbXi4CLoKT+9y2rbu8u8rqD9+aOFA=";
      }
    else
      {
        productName = "community";
        productDesktop = "Burp Suite Community Edition";
-        hash = "sha256-WzURPRMr8EgBMqxp9w10gHDEyqAVcejUif0TKdxDZr4=";
+        hash = "sha256-XZgG6BfA2O4gZfy+dYuc5yzpe+sHPjthzvexBb4YWcQ=";
      };

  src = fetchurl {
@@ -18,6 +18,7 @@ stdenv.mkDerivation rec {
    hash =
      {
        "2.2.0" = "sha256-6O0lz0YJzk1eJblQ0/f9PnSYqD8WoendIZioQiGUpCg=";
+        "2.1.3" = "sha256-W3kO+6nVzkmJXyHJU+NZWP0oatK3gon4EWF1/03rgL4=";
        "2.0.0" = "sha256-qoeEM9SdpuFuBPeQlCzuhPLcJ+bMQkTUTGiT8QdU8rc=";
      }
      .${version};
@@ -15,6 +15,7 @@
  gtksourceview5,
  libadwaita,
  libhandy,
+  libxml2,
  webkitgtk_4_1,
  webkitgtk_6_0,
  nix-update-script,
@@ -23,7 +24,7 @@

 python3.pkgs.buildPythonApplication rec {
  pname = "cambalache";
-  version = "0.94.1";
+  version = "0.99.3";
  pyproject = false;

  # Did not fetch submodule since it is only for tests we don't run.
@@ -32,7 +33,7 @@ python3.pkgs.buildPythonApplication rec {
    owner = "jpu";
    repo = "cambalache";
    tag = version;
-    hash = "sha256-dX9YiBCBG/ALWX0W1CjvdUlOCQ6UulnQCiYUscRMKWk=";
+    hash = "sha256-1X7fXYSIXoj8qhQLIfz2gMrCnNBZ7OJCeMykBSpnYD4=";
  };

  nativeBuildInputs = [
@@ -60,6 +61,7 @@ python3.pkgs.buildPythonApplication rec {
    # For extra widgets support.
    libadwaita
    libhandy
+    libxml2
    casilda
  ];

@@ -88,6 +90,7 @@ python3.pkgs.buildPythonApplication rec {
    homepage = "https://gitlab.gnome.org/jpu/cambalache";
    description = "RAD tool for GTK 4 and 3 with data model first philosophy";
    mainProgram = "cambalache";
+    maintainers = with lib.maintainers; [ clerie ];
    teams = [ lib.teams.gnome ];
    license = with lib.licenses; [
      lgpl21Only # Cambalache
@@ -8,13 +8,13 @@

 rustPlatform.buildRustPackage rec {
  pname = "cargo-nextest";
-  version = "0.9.111";
+  version = "0.9.114";

  src = fetchFromGitHub {
    owner = "nextest-rs";
    repo = "nextest";
    rev = "cargo-nextest-${version}";
-    hash = "sha256-5ri4KI0dvWAkReUznRkibI45ZeZV5DMyq5VAr+az+b4=";
+    hash = "sha256-0l8+YKIdKhvwdEbvSgYcX1deq+aRZkxXUCw2zMSO4cU=";
  };

  # FIXME: we don't support dtrace probe generation on macOS until we have a dtrace build: https://github.com/NixOS/nixpkgs/pull/392918
@@ -22,7 +22,7 @@ rustPlatform.buildRustPackage rec {
    ./no-dtrace-macos.patch
  ];

-  cargoHash = "sha256-/YvzJO+GWo/B5AMXFYvFKfCS72QjOo8aZg+trKm+etI=";
+  cargoHash = "sha256-3KiPuDck8THwrOPRpIKhaRZIFO4EoppMDfsm1H4SBoI=";

  cargoBuildFlags = [
    "-p"
@@ -18,7 +18,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "casilda";
-  version = "0.9.1";
+  version = "1.0.0";

  outputs = [
    "out"
@@ -30,7 +30,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "jpu";
    repo = "casilda";
    tag = finalAttrs.version;
-    hash = "sha256-7A3XzfUALsmkykwOqF/8fg7T7LoVzwk1+7TmRkh1Wys=";
+    hash = "sha256-KXICqldEJC3xKc0bd1X4O2glLeipzqHE1cGle7TKvAw=";
  };

  depsBuildBuild = [ pkg-config ];
@@ -59,7 +59,7 @@ stdenv.mkDerivation (finalAttrs: {
  meta = {
    homepage = "https://gitlab.gnome.org/jpu/casilda";
    description = "Simple Wayland compositor widget for Gtk 4 which can be used to embed other processes windows in Gtk 4 application";
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ clerie ];
    license = lib.licenses.lgpl21Plus;
    platforms = lib.platforms.unix;
  };
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "cdncheck";
-  version = "1.2.10";
+  version = "1.2.11";

  src = fetchFromGitHub {
    owner = "projectdiscovery";
    repo = "cdncheck";
    tag = "v${version}";
-    hash = "sha256-KX+LEVRRPGtMEmYgrrSWBsvXyd7nvC5CHoRNI3kuVqI=";
+    hash = "sha256-8EBOvwYsanLkz1DbBwprrP8zZrMX1a/od517qubwzBk=";
  };

-  vendorHash = "sha256-XLfbuqyu+U11v8TZifPyltLQtx+zAFxlTh0rgpXOpYU=";
+  vendorHash = "sha256-tJXfJHEZ1KysnJIkVX+UxP3CnTCzlZtsTlVbCSCNeg8=";

  subPackages = [ "cmd/cdncheck/" ];

@@ -37,14 +37,14 @@ with py.pkgs;

 python3.pkgs.buildPythonApplication rec {
  pname = "checkov";
-  version = "3.2.494";
+  version = "3.2.495";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "bridgecrewio";
    repo = "checkov";
    tag = version;
-    hash = "sha256-CkEEWufVZpIrPYoxnc6fI1W2K7aOfOWjfnHDz/1X/Mk=";
+    hash = "sha256-jn1p9Rso0/OiV1mI3trC/ebJwzADrfs6wmqxtjsC1KE=";
  };

  pythonRelaxDeps = [
@@ -11,14 +11,14 @@

 python3Packages.buildPythonApplication {
  pname = "chirp";
-  version = "0.4.0-unstable-2025-11-12";
+  version = "0.4.0-unstable-2025-11-20";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "kk7ds";
    repo = "chirp";
-    rev = "7c1d614e74b590f84f1e01bf735143d1de017fcb";
-    hash = "sha256-o6bkA/Xjv0Q8oQE/aAUEYOqlZfEXn3rcDfFfhqm6TTE=";
+    rev = "eb01134af3704ee883124e4f0fb2f139abbe74f4";
+    hash = "sha256-Yi7MmHgp4UXLhp9e07SQn310uQJSyStL3WrvVDxgsZI=";
  };

  nativeBuildInputs = [
@@ -8,16 +8,16 @@

 buildGoModule rec {
  pname = "civo";
-  version = "1.4.4";
+  version = "1.4.6";

  src = fetchFromGitHub {
    owner = "civo";
    repo = "cli";
    rev = "v${version}";
-    hash = "sha256-OnbIZAFlYQ6ofpipVZ7Y9LmLI68JSWY44Sn0+/DDS14=";
+    hash = "sha256-QZZuRHcKNncQTRgizWAH723OskVMH92eQ72wHpEINEc=";
  };

-  vendorHash = "sha256-TsaGXDUTvTsfDIBhM9+JwL2swEw/qSivn3NTA0tWkZw=";
+  vendorHash = "sha256-ZoJdu8sA0r5kiADF+VB4BnOduWLbBAVGbMQs45HKDIU=";

  nativeBuildInputs = [ installShellFiles ];

@@ -7,11 +7,11 @@
 }:
 buildNpmPackage (finalAttrs: {
  pname = "claude-code";
-  version = "2.0.50";
+  version = "2.0.51";

  src = fetchzip {
    url = "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-${finalAttrs.version}.tgz";
-    hash = "sha256-mZQkqeL/F/9u5esy1j1pUjcyzeaShREx+vMuvZ5Zrz8=";
+    hash = "sha256-rfJZaACY+Kbm+0lWOPwAfl/x2yFxskLKZpJJhqlccSY=";
  };

  npmDepsHash = "sha256-/5Qh99vAcTiFz6FrzJgm26RserqxVjLYqOOx5q5hkgc=";
@@ -125,7 +125,7 @@ llvmStdenv.mkDerivation (finalAttrs: {
    lib.optional (lib.versions.majorMinor version == "25.8") (fetchpatch {
      # Disable building WASM lexer
      url = "https://github.com/ClickHouse/ClickHouse/commit/67a42b78cdf1c793e78c1adbcc34162f67044032.patch";
-      sha256 = "7VF+JSztqTWD+aunCS3UVNxlRdwHc2W5fNqzDyeo3Fc=";
+      hash = "sha256-7VF+JSztqTWD+aunCS3UVNxlRdwHc2W5fNqzDyeo3Fc=";
    })
    ++

@@ -133,8 +133,13 @@ llvmStdenv.mkDerivation (finalAttrs: {
        (fetchpatch {
          # Do not intercept memalign on darwin
          url = "https://github.com/ClickHouse/ClickHouse/commit/0cfd2dbe981727fb650f3b9935f5e7e7e843180f.patch";
-          sha256 = "1iNYZbugX2g2dxNR1ZiUthzPnhLUR8g118aG23yhgUo=";
-        });
+          hash = "sha256-1iNYZbugX2g2dxNR1ZiUthzPnhLUR8g118aG23yhgUo=";
+        })
+    ++ lib.optional (!lib.versionAtLeast version "25.11" && stdenv.hostPlatform.isDarwin) (fetchpatch {
+      # Remove flaky macOS SDK version detection
+      url = "https://github.com/ClickHouse/ClickHouse/commit/11e172a37bd0507d595d27007170090127273b33.patch";
+      hash = "sha256-oI7MrjMgJpIPTsci2IqEOs05dUGEMnjI/WqGp2N+rps=";
+    });

  postPatch = ''
    patchShebangs src/ utils/
@@ -2,6 +2,7 @@
  lib,
  stdenv,
  fetchFromGitHub,
+  fetchpatch,
  rustPlatform,
  pkg-config,
  dtc,
@@ -19,6 +20,19 @@ rustPlatform.buildRustPackage rec {
    hash = "sha256-bPPs/4XMcvOH4BGfQrjQdvgjGWae4UEZjzPKjalDN3w=";
  };

+  patches = [
+    (fetchpatch {
+      name = "vsock-seccomp-Rust-1.90.patch";
+      url = "https://github.com/cloud-hypervisor/cloud-hypervisor/commit/ec57aade1563075e37b8e9ccc0b85fe2c04a54b8.patch";
+      hash = "sha256-M+I+ZbiNDV1a8Y46+/mPTyDlQgQS7G6ytvPgli0NhJ0=";
+    })
+    (fetchpatch {
+      name = "vfio-user-seccomp-Rust-1.90.patch";
+      url = "https://github.com/cloud-hypervisor/cloud-hypervisor/commit/95b8c6afdd6eec9810243f92ec1956dccfe305da.patch";
+      hash = "sha256-kCP/Fu0Dg+GdnwyFQLqZWKlbqO9w4KRJcbV4sReSDYM=";
+    })
+  ];
+
  cargoHash = "sha256-5EK9V9yiF/UjmlYSKBIJgQOA1YU33ezicLikWYnKFAo=";

  separateDebugInfo = true;
@@ -11,16 +11,16 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "clouddrive2";
-  version = "0.9.15";
+  version = "0.9.16";

  src = fetchurl {
    url = "https://github.com/cloud-fs/cloud-fs.github.io/releases/download/v${finalAttrs.version}/clouddrive-2-${os}-${arch}-${finalAttrs.version}.tgz";
    hash =
      {
-        x86_64-linux = "sha256-/VmDByB4uAyx0R2F5EpI7Fve7LIxM2kBMpdAmjFZMLk=";
-        aarch64-linux = "sha256-P3+oaSACVfe48HeRu4hgGmOcpv7XTHSDOuGdGeBFgtU=";
-        x86_64-darwin = "sha256-BcPkuejJU6jYinvgP+UQtefMhhu7q6CSwMCSs9byN/4=";
-        aarch64-darwin = "sha256-r+lIHEEfgGi7RC+TXDg5pdl53ouDicyfJ/HkdCgjIMg=";
+        x86_64-linux = "sha256-CNB0nUMWpCFy/44meHZ9q4wqaQOK3KgV4cwlZeku+o4=";
+        aarch64-linux = "sha256-OOpLh0VPycfEcmaYLlayirgQohZQx1f6LBJgRZRaLTk=";
+        x86_64-darwin = "sha256-ijdUxs9cc9M4WRn0T8oWrThO/irD4ZT5d5TRlgrddzs=";
+        aarch64-darwin = "sha256-/xu6Q7TteqwEvMKc5VMYfz7wQAUjBc8qH3SCP+YbugY=";
      }
      .${stdenv.hostPlatform.system} or (throw "unsupported system ${stdenv.hostPlatform.system}");
  };
@@ -13,7 +13,7 @@
  aoSupport ? !stdenv.hostPlatform.isLinux,
  libao ? null,
  jackSupport ? false,
-  libjack ? null,
+  libjack2 ? null,
  samplerateSupport ? jackSupport,
  libsamplerate ? null,
  ossSupport ? false,
@@ -41,7 +41,7 @@
  discidSupport ? false,
  libdiscid ? null,
  ffmpegSupport ? true,
-  ffmpeg ? null,
+  ffmpeg_7 ? null,
  flacSupport ? true,
  flac ? null,
  madSupport ? true,
@@ -77,6 +77,8 @@ assert vorbisSupport -> !tremorSupport;
 assert tremorSupport -> !vorbisSupport;

 let
+  # https://github.com/cmus/cmus/issues/1459
+  ffmpeg = ffmpeg_7;

  mkFlag =
    b: f: dep:
@@ -95,17 +97,17 @@ let
    # Audio output
    (mkFlag alsaSupport "CONFIG_ALSA=y" alsa-lib)
    (mkFlag aoSupport "CONFIG_AO=y" libao)
-    (mkFlag jackSupport "CONFIG_JACK=y" libjack)
+    (mkFlag jackSupport "CONFIG_JACK=y" libjack2)
    (mkFlag samplerateSupport "CONFIG_SAMPLERATE=y" libsamplerate)
    (mkFlag ossSupport "CONFIG_OSS=y" alsa-oss)
    (mkFlag pulseaudioSupport "CONFIG_PULSE=y" libpulseaudio)
    (mkFlag sndioSupport "CONFIG_SNDIO=y" sndio)
    (mkFlag mprisSupport "CONFIG_MPRIS=y" systemd)

-    #(mkFlag artsSupport      "CONFIG_ARTS=y")
-    #(mkFlag roarSupport      "CONFIG_ROAR=y")
-    #(mkFlag sunSupport       "CONFIG_SUN=y")
-    #(mkFlag waveoutSupport   "CONFIG_WAVEOUT=y")
+    #(mkFlag artsSupport "CONFIG_ARTS=y")
+    #(mkFlag roarSupport "CONFIG_ROAR=y")
+    #(mkFlag sunSupport "CONFIG_SUN=y")
+    #(mkFlag waveoutSupport "CONFIG_WAVEOUT=y")

    # Input file formats
    (mkFlag cddbSupport "CONFIG_CDDB=y" libcddb)
@@ -129,7 +131,7 @@ let
    (mkFlag mp4Support "CONFIG_MP4=y" mp4v2)
    (mkFlag aacSupport "CONFIG_AAC=y" faad2)

-    #(mkFlag vtxSupport    "CONFIG_VTX=y"     libayemu)
+    #(mkFlag vtxSupport "CONFIG_VTX=y" libayemu)
  ];
 in

@@ -163,11 +165,11 @@ stdenv.mkDerivation rec {

  makeFlags = [ "LD=$(CC)" ];

-  meta = with lib; {
+  meta = {
    description = "Small, fast and powerful console music player for Linux and *BSD";
    homepage = "https://cmus.github.io/";
-    license = licenses.gpl2;
-    maintainers = [ maintainers.oxij ];
-    platforms = platforms.linux ++ platforms.darwin;
+    license = lib.licenses.gpl2Only;
+    maintainers = with lib.maintainers; [ oxij ];
+    platforms = with lib.platforms; linux ++ darwin;
  };
 }
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "cnquery";
-  version = "12.8.0";
+  version = "12.10.0";

  src = fetchFromGitHub {
    owner = "mondoohq";
    repo = "cnquery";
    tag = "v${version}";
-    hash = "sha256-tgussiogV9w7HR7QJ+XAq/kaMq0igFt+FhgfHLobG18=";
+    hash = "sha256-vzdh/cB78C2ug0QlpgpTyCYgiyF+tBIOQeJhjufg8Xs=";
  };

  subPackages = [ "apps/cnquery" ];
@@ -14,18 +14,18 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "codex";
-  version = "0.61.0";
+  version = "0.63.0";

  src = fetchFromGitHub {
    owner = "openai";
    repo = "codex";
    tag = "rust-v${finalAttrs.version}";
-    hash = "sha256-1DmnrRgwWNTkjG9DODUfLbz4ZYydhTapnv4yv9qOEmU=";
+    hash = "sha256-CWISGlSpS0A2yuXNC11L+5iT5Z9heHqkcIGQDJoUWFE=";
  };

  sourceRoot = "${finalAttrs.src.name}/codex-rs";

-  cargoHash = "sha256-9zZZG00TzovQBwhidWt2p84dkj8jU35+lSmNIPmDOZY=";
+  cargoHash = "sha256-S6KCJ/b2fY8ydCoR+BfhEV4bbcgwQ6V0xHA9Mbl87jo=";

  nativeBuildInputs = [
    installShellFiles
@@ -9,7 +9,7 @@
  libz,
 }:
 let
-  version = "1.1.7";
+  version = "1.1.8";
 in
 rustPlatform.buildRustPackage {
  pname = "committed";
@@ -19,10 +19,10 @@ rustPlatform.buildRustPackage {
    owner = "crate-ci";
    repo = "committed";
    tag = "v${version}";
-    hash = "sha256-8Np7kSLSoZCytQ9RN+kRzUlQa8Lj9F70hbbYNfdgQKI=";
+    hash = "sha256-JjVF2Qv3gcS1bNAlWLDHthOgtX3J36IDEb45hMFlPYw=";
  };

-  cargoHash = "sha256-gmB2NXxoD9xc24avjWyEFihVVZN1rPggOGwXz/gaZ1c=";
+  cargoHash = "sha256-W6znChJaDPKdqACDGrVRyEYWKGRinZKLb/21fze2t0c=";

  buildInputs = lib.optionals stdenv.hostPlatform.isDarwin [
    # Until upstream bumps the libz-sys dependency to >= 1.1.15 the build fails on unstable
@@ -11,13 +11,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "converseen";
-  version = "0.15.1.0";
+  version = "0.15.1.2";

  src = fetchFromGitHub {
    owner = "Faster3ck";
    repo = "Converseen";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-loWwwleiBgwV/6t33HgIqEHU9y/pqyocmwBn0Qg01RY=";
+    hash = "sha256-GHx3mMDhPT3RCcJxu+v63m7Orn6G01hENvWzP/Aqxho=";
  };

  strictDeps = true;
@@ -10,13 +10,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "cpuinfo";
-  version = "0-unstable-2025-11-06";
+  version = "0-unstable-2025-11-19";

  src = fetchFromGitHub {
    owner = "pytorch";
    repo = "cpuinfo";
-    rev = "f01ce870215f9e5d4c32006796994469c5334fd7";
-    hash = "sha256-v6U+Z5YHHSP0WUPxQ0G2zpP4a2D4I+BfhdY6q5BylBo=";
+    rev = "161a9ec374884f4b3e85725cb22e05f9458fdc93";
+    hash = "sha256-uzo6QpNfzTcqOpDse14e2OoxNyKDU8jSx+/wPLxmpJg=";
  };

  passthru.updateScript = nix-update-script { extraArgs = [ "--version=branch" ]; };
@@ -50,7 +50,7 @@ stdenv.mkDerivation (finalAttrs: {
    mainProgram = "cpu-info";
    maintainers = with lib.maintainers; [ pawelchcki ];
    pkgConfigModules = [ "libcpuinfo" ];
-    # https://github.com/pytorch/cpuinfo/blob/f01ce870215f9e5d4c32006796994469c5334fd7/CMakeLists.txt#L98
+    # https://github.com/pytorch/cpuinfo/blob/161a9ec374884f4b3e85725cb22e05f9458fdc93/CMakeLists.txt#L98
    platforms = lib.platforms.x86 ++ lib.platforms.aarch ++ lib.platforms.riscv;
  };
 })
--- a/Show More
+++ b/Show More
@@ -1 +1 @@
 .11
 .05