From 56048f7262fc4213b9bfc5bdff369f0eebf1039d Mon Sep 17 00:00:00 2001 From: r-vdp Date: Tue, 30 Dec 2025 18:02:11 +0200 Subject: [PATCH 01/75] nixos/test/prometheus-node-cert-exporter: replace activation script by ExecStartPre See https://github.com/NixOS/nixpkgs/issues/475305 --- nixos/tests/prometheus-exporters.nix | 74 +++++++++++++++++++--------- 1 file changed, 50 insertions(+), 24 deletions(-) diff --git a/nixos/tests/prometheus-exporters.nix b/nixos/tests/prometheus-exporters.nix index 7d917e3bbc32..e5d94741edb1 100644 --- a/nixos/tests/prometheus-exporters.nix +++ b/nixos/tests/prometheus-exporters.nix @@ -1171,38 +1171,64 @@ let exporterTest = '' wait_for_unit("prometheus-node-cert-exporter.service") wait_for_open_port(9141) + succeed("test -f /run/certs/node-cert.cert") wait_until_succeeds( "curl -sSf http://localhost:9141/metrics | grep 'ssl_certificate_expiry_seconds{.\\+path=\"/run/certs/node-cert\\.cert\".\\+}'" ) ''; - metricProvider = { - system.activationScripts.cert.text = '' - mkdir -p /run/certs - cd /run/certs + metricProvider = + { config, ... }: + { + systemd.services.prometheus-node-cert-exporter = { + serviceConfig.ExecStartPre = + let + createDir = pkgs.writeShellApplication { + name = "create-dir"; + text = + let + inherit (config.services.prometheus.exporters.node-cert) user; + in + '' + mkdir -p /run/certs + chown ${user}:${user} /run/certs + chmod ug+rwx /run/certs + ''; + }; + createCerts = pkgs.writeShellApplication { + name = "create-certs"; + text = '' + cd /run/certs - cat >ca.template <ca.template < Date: Sun, 6 Apr 2025 18:36:51 +0200 Subject: [PATCH 02/75] nixos/misc/nixpkgs: add setting nixpkgs.config.allowUnfreePackages = ["list" "of "packages"] Inspired by https://github.com/NixOS/nixpkgs/issues/197325 this adds a new option nixpkgs.allowUnfreePackages, which merges additively and can thus be defined in multiple modules close to where the unfree package is installed. I would have liked ot name this option nixpkgs.config.allowUnfreePackages, to define it closer to where the allowUnfree and allowUnfreePredicate are defined, but I didn't see how this could be achived. I would welcome some guidance on how to do this. --- nixos/modules/misc/nixpkgs.nix | 3 +++ pkgs/stdenv/generic/check-meta.nix | 5 ++++- pkgs/top-level/config.nix | 17 +++++++++++++++++ 3 files changed, 24 insertions(+), 1 deletion(-) diff --git a/nixos/modules/misc/nixpkgs.nix b/nixos/modules/misc/nixpkgs.nix index 449a08a97b61..e832cfd2ebdd 100644 --- a/nixos/modules/misc/nixpkgs.nix +++ b/nixos/modules/misc/nixpkgs.nix @@ -20,6 +20,9 @@ let rhs = optCall rhs_ { inherit pkgs; }; in lib.recursiveUpdate lhs rhs + // lib.optionalAttrs (lhs ? allowUnfreePackages) { + allowUnfreePackages = lhs.allowUnfreePackages ++ (lib.attrByPath [ "allowUnfreePackages" ] [ ] rhs); + } // lib.optionalAttrs (lhs ? packageOverrides) { packageOverrides = pkgs: diff --git a/pkgs/stdenv/generic/check-meta.nix b/pkgs/stdenv/generic/check-meta.nix index 28de9c68110e..688429685863 100644 --- a/pkgs/stdenv/generic/check-meta.nix +++ b/pkgs/stdenv/generic/check-meta.nix @@ -158,7 +158,10 @@ let # allowUnfree = false; # allowUnfreePredicate = (x: pkgs.lib.hasPrefix "vscode" x.name); # } - allowUnfreePredicate = config.allowUnfreePredicate or (x: false); + # Defaults to allow all names defined in config.allowUnfreePackages + allowUnfreePredicate = + config.allowUnfreePredicate + or (pkg: builtins.elem (lib.getName pkg) config.allowUnfreePackages or [ ]); # Check whether unfree packages are allowed and if not, whether the # package has an unfree license and is not explicitly allowed by the diff --git a/pkgs/top-level/config.nix b/pkgs/top-level/config.nix index c8e8a3f58590..9d8f1e442c5a 100644 --- a/pkgs/top-level/config.nix +++ b/pkgs/top-level/config.nix @@ -226,6 +226,23 @@ let ''; }; + allowUnfreePackages = mkOption { + type = with lib.types; listOf str; + default = [ ]; + example = [ "ut1999" ]; + description = '' + Allows specific unfree packages to be used. + + This option composes with `nixpkgs.config.allowUnfreePredicate` by also allowing the listed package names. + + Unlike `nixpkgs.config.allowUnfreePredicate`, this option merges additively, similar to `environment.systemPackages`. + This enables defining allowed unfree packages in multiple modules, close to where they are used. + + This avoids the need to centralize all unfree package declarations or globally enable unfree packages via + `nixpkgs.config.allowUnfree = true`. + ''; + }; + allowBroken = mkOption { type = types.bool; default = false; From b9cccbb973f274a8f920c71a6fbf6bc3e5b961b0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Martin=20Ha=CC=88cker?= Date: Sat, 20 Sep 2025 21:26:21 +0200 Subject: [PATCH 03/75] nixos/misc/nixpkgs: add tests for nixpkgs.config.allowUnfreePackages --- .../test-nixpkgs-config-allow-unfree.nix | 124 +++++++++++++++++ nixos/tests/all-tests.nix | 7 + pkgs/stdenv/generic/check-meta-test.nix | 128 ++++++++++++++++++ pkgs/stdenv/generic/check-meta.nix | 13 +- 4 files changed, 270 insertions(+), 2 deletions(-) create mode 100644 nixos/modules/misc/nixpkgs/test-nixpkgs-config-allow-unfree.nix create mode 100644 pkgs/stdenv/generic/check-meta-test.nix diff --git a/nixos/modules/misc/nixpkgs/test-nixpkgs-config-allow-unfree.nix b/nixos/modules/misc/nixpkgs/test-nixpkgs-config-allow-unfree.nix new file mode 100644 index 000000000000..201a43314fbf --- /dev/null +++ b/nixos/modules/misc/nixpkgs/test-nixpkgs-config-allow-unfree.nix @@ -0,0 +1,124 @@ +# Test for allowUnfreePackages merging across multiple modules +# Run with: nix-build -A nixosTests.nixpkgs-config-allow-unfree --show-trace + +{ + evalMinimalConfig, + lib, +}: +let + eval = + modules: + evalMinimalConfig { + imports = [ + ../nixpkgs.nix + ] + ++ modules; + }; + + getConfig = evalResult: evalResult.config.nixpkgs.config; + + sortList = list: builtins.sort builtins.lessThan list; + + assertEquals = + expected: actual: + let + prettyExpected = lib.generators.toPretty { } expected; + prettyActual = lib.generators.toPretty { } actual; + in + lib.assertMsg (expected == actual) "Expected ${prettyExpected} but got ${prettyActual}"; + + assertUnfreePackages = + listOfModules: expectedPackages: + let + config = getConfig (eval listOfModules); + actualAllowedUnfreePackages = sortList config.allowUnfreePackages; + in + assertEquals expectedPackages actualAllowedUnfreePackages; +in +lib.recurseIntoAttrs { + + singleModuleTest = + assertUnfreePackages + [ + { + nixpkgs.config.allowUnfreePackages = [ + "package1" + "package2" + ]; + } + ] + [ + "package1" + "package2" + ]; + + multipleModulesMerging = + assertUnfreePackages + [ + { + _file = "module1.nix"; + nixpkgs.config.allowUnfreePackages = [ + "package1" + "package2" + ]; + } + { + _file = "module2.nix"; + nixpkgs.config.allowUnfreePackages = [ + "package3" + "package4" + ]; + } + { + _file = "module3.nix"; + nixpkgs.config.allowUnfreePackages = [ "package5" ]; + } + ] + [ + "package1" + "package2" + "package3" + "package4" + "package5" + ]; + + overlappingPackagesMerging = + assertUnfreePackages + [ + { + _file = "moduleA.nix"; + nixpkgs.config.allowUnfreePackages = [ + "shared-package" + "unique-a" + ]; + } + { + _file = "moduleB.nix"; + nixpkgs.config.allowUnfreePackages = [ + "shared-package" + "unique-b" + ]; + } + ] + [ + "shared-package" + "shared-package" + "unique-a" + "unique-b" + ]; + + emptyListMerging = + assertUnfreePackages + [ + { + _file = "empty.nix"; + nixpkgs.config.allowUnfreePackages = [ ]; + } + { + _file = "non-empty.nix"; + nixpkgs.config.allowUnfreePackages = [ "some-package" ]; + } + ] + [ "some-package" ]; + +} diff --git a/nixos/tests/all-tests.nix b/nixos/tests/all-tests.nix index bbb72047c109..42582b9ed737 100644 --- a/nixos/tests/all-tests.nix +++ b/nixos/tests/all-tests.nix @@ -1103,6 +1103,13 @@ in imports = [ ./nixos-rebuild-target-host.nix ]; }; nixpkgs = pkgs.callPackage ../modules/misc/nixpkgs/test.nix { inherit evalMinimalConfig; }; + nixpkgs-config-allow-unfree = + pkgs.callPackage ../modules/misc/nixpkgs/test-nixpkgs-config-allow-unfree.nix + { inherit evalMinimalConfig; }; + nixpkgs-config-allow-unfree-packages-and-predicate = + pkgs.callPackage ../../pkgs/stdenv/generic/check-meta-test.nix + { }; + nixseparatedebuginfod = runTest ./nixseparatedebuginfod.nix; nixseparatedebuginfod2 = runTest ./nixseparatedebuginfod2.nix; node-red = runTest ./node-red.nix; nomad = runTest ./nomad.nix; diff --git a/pkgs/stdenv/generic/check-meta-test.nix b/pkgs/stdenv/generic/check-meta-test.nix new file mode 100644 index 000000000000..0dedb25afbd2 --- /dev/null +++ b/pkgs/stdenv/generic/check-meta-test.nix @@ -0,0 +1,128 @@ +# Execute with +# nix-build -A nixosTests.nixpkgs-config-allow-unfree-packages-and-predicate --show-trace +# +# This test exercises the interaction between: +# +# - nixos/modules/misc/nixpkgs.nix (config merging, esp. allowUnfreePackages) +# - pkgs/stdenv/generic/check-meta.nix (allowUnfreePredicate logic) +# +# It checks how: +# +# * config.allowUnfreePackages +# * config.allowUnfreePredicate +# +# interact to determine whether unfree packages are allowed. +{ + lib, + pkgs, +}: + +let + inherit (lib) + assertMsg + generators + licenses + recurseIntoAttrs + ; + + mkUnfreePkg = name: { + pname = name; + version = "1.0"; + meta.license = licenses.unfree; + }; + assertValidity = + { + nixpkgsConfig, + pkg, + expected ? true, + }: + let + testPkgs = import ../../.. { + system = pkgs.stdenv.hostPlatform.system; + config = nixpkgsConfig; + }; + checkMeta = testPkgs.callPackage ./check-meta.nix { }; + tryEval = expression: builtins.tryEval (builtins.deepSeq expression expression); + actual = tryEval ( + checkMeta.assertValidity { + meta = pkg.meta; + attrs = pkg; + } + ); + toPretty = generators.toPretty { }; + in + assertMsg (actual.success == expected) '' + Expected validity of package ${lib.getName pkg} to be ${toPretty expected}, + but got ${toPretty actual} with config: + ${toPretty nixpkgsConfig} + ''; + + runAssertions = assertions: lib.deepSeq assertions ""; + +in +recurseIntoAttrs { + + allowOnlyFreePackagesByDefault = assertValidity { + nixpkgsConfig = { }; + pkg = mkUnfreePkg "forbidden"; + expected = false; + }; + + allowAllUnfreePackages = assertValidity { + nixpkgsConfig = { + allowUnfree = true; + }; + pkg = mkUnfreePkg "allowed"; + }; + + allowUnfreePackagesWithPredicate = + let + nixpkgsConfig = { + allowUnfreePredicate = pkg: lib.getName pkg == "allowed-by-predicate"; + }; + in + [ + (assertValidity { + inherit nixpkgsConfig; + pkg = mkUnfreePkg "allowed-by-predicate"; + }) + (assertValidity { + inherit nixpkgsConfig; + pkg = mkUnfreePkg "allowed-by-nothing"; + expected = false; + }) + ]; + + allowUnfreeWithPackages = runAssertions [ + (assertValidity { + nixpkgsConfig = { + allowUnfreePackages = [ "unfree" ]; + }; + pkg = mkUnfreePkg "unfree"; + expected = true; + }) + ]; + + allowUnfreePackagesOrPredicate = + let + nixpkgsConfig = { + allowUnfreePackages = [ "allowed-by-packages" ]; + allowUnfreePredicate = pkg: lib.getName pkg == "allowed-by-predicate"; + }; + in + runAssertions [ + (assertValidity { + inherit nixpkgsConfig; + pkg = mkUnfreePkg "allowed-by-packages"; + }) + (assertValidity { + inherit nixpkgsConfig; + pkg = mkUnfreePkg "allowed-by-predicate"; + }) + (assertValidity { + inherit nixpkgsConfig; + pkg = mkUnfreePkg "forbidden"; + expected = false; + }) + ]; +} diff --git a/pkgs/stdenv/generic/check-meta.nix b/pkgs/stdenv/generic/check-meta.nix index 688429685863..ae868ab14ac1 100644 --- a/pkgs/stdenv/generic/check-meta.nix +++ b/pkgs/stdenv/generic/check-meta.nix @@ -160,8 +160,17 @@ let # } # Defaults to allow all names defined in config.allowUnfreePackages allowUnfreePredicate = - config.allowUnfreePredicate - or (pkg: builtins.elem (lib.getName pkg) config.allowUnfreePackages or [ ]); + let + listPredicate = pkg: builtins.elem (lib.getName pkg) (config.allowUnfreePackages or [ ]); + + # Be robust against misconfigured allowUnfreePredicate values such as null + explicitPredicate = + let + raw = config.allowUnfreePredicate or null; + in + if builtins.isFunction raw then raw else (_: false); + in + pkg: (listPredicate pkg) || (explicitPredicate pkg); # Check whether unfree packages are allowed and if not, whether the # package has an unfree license and is not explicitly allowed by the From 4eb3d1b4eefb931565ee13374c10f29a49ae4b3a Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 11 Jan 2026 00:30:16 +0000 Subject: [PATCH 04/75] xf86-video-ast: 1.2.0 -> 1.2.1 --- pkgs/by-name/xf/xf86-video-ast/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/xf/xf86-video-ast/package.nix b/pkgs/by-name/xf/xf86-video-ast/package.nix index c8283bafd934..541cc6da00bd 100644 --- a/pkgs/by-name/xf/xf86-video-ast/package.nix +++ b/pkgs/by-name/xf/xf86-video-ast/package.nix @@ -12,7 +12,7 @@ }: stdenv.mkDerivation (finalAttrs: { pname = "xf86-video-ast"; - version = "1.2.0"; + version = "1.2.1"; src = fetchFromGitLab { domain = "gitlab.freedesktop.org"; @@ -20,7 +20,7 @@ stdenv.mkDerivation (finalAttrs: { owner = "driver"; repo = "xf86-video-ast"; tag = "xf86-video-ast-${finalAttrs.version}"; - hash = "sha256-5fZ0+6Jf/QBuR9l2lOsh4RQEGKrR9XttEvwOVO8w3t4="; + hash = "sha256-Xz9ZvngAsEb/9+YOGOkJQIbFzofKw+2V6sST8Ry2tvo="; }; strictDeps = true; From f646a49efa477fc2dd76f1ca638e0d670bed6706 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 11 Jan 2026 00:40:41 +0000 Subject: [PATCH 05/75] xf86-video-geode: 2.18.1 -> 2.18.2 --- pkgs/by-name/xf/xf86-video-geode/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/xf/xf86-video-geode/package.nix b/pkgs/by-name/xf/xf86-video-geode/package.nix index dba6eaf99ee3..12e7a188392b 100644 --- a/pkgs/by-name/xf/xf86-video-geode/package.nix +++ b/pkgs/by-name/xf/xf86-video-geode/package.nix @@ -12,7 +12,7 @@ }: stdenv.mkDerivation (finalAttrs: { pname = "xf86-video-geode"; - version = "2.18.1"; + version = "2.18.2"; src = fetchFromGitLab { domain = "gitlab.freedesktop.org"; @@ -20,7 +20,7 @@ stdenv.mkDerivation (finalAttrs: { owner = "driver"; repo = "xf86-video-geode"; tag = "xf86-video-geode-${finalAttrs.version}"; - hash = "sha256-y9fQpMg6qKjaQvDfqYbWscFomtzmHQ1cvzMaa4anhOE="; + hash = "sha256-G0w6Ft172ar5dwR3NAu+8vuvJqWKaknmpbdThpPR+kY="; }; strictDeps = true; From 79d77cf667d3a9b89c1d4df41111d7b649106aab Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Sun, 18 Jan 2026 16:14:09 +0100 Subject: [PATCH 06/75] python3Packages.distributed: 2025.12.0 -> 2026.1.1 Fixes CVE-2026-23528 / https://github.com/dask/distributed/security/advisories/GHSA-c336-7962-wfj2 Fixes #481316 Changes: https://docs.dask.org/en/stable/changelog.html#v2026-1-1 --- pkgs/development/python-modules/distributed/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/distributed/default.nix b/pkgs/development/python-modules/distributed/default.nix index 1e6a92692117..101649f5c17e 100644 --- a/pkgs/development/python-modules/distributed/default.nix +++ b/pkgs/development/python-modules/distributed/default.nix @@ -27,14 +27,14 @@ buildPythonPackage rec { pname = "distributed"; - version = "2025.12.0"; + version = "2026.1.1"; pyproject = true; src = fetchFromGitHub { owner = "dask"; repo = "distributed"; tag = version; - hash = "sha256-srFYbAdlnxpxhSVFqd1geOBoD7bbpLNSlAUWNtefokM="; + hash = "sha256-xriIsrdFNSHAO9SmdowXK9uPW06ziz9uGie3PkYncqo="; }; build-system = [ From 48fe28e5bfc31be818e0f2e2c4d57adb57497694 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 18 Jan 2026 19:22:01 +0000 Subject: [PATCH 07/75] ocamlPackages.multicore-magic: 2.3.1 -> 2.3.2 --- pkgs/development/ocaml-modules/multicore-magic/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/ocaml-modules/multicore-magic/default.nix b/pkgs/development/ocaml-modules/multicore-magic/default.nix index 358e3aed57ea..c8bd30b95544 100644 --- a/pkgs/development/ocaml-modules/multicore-magic/default.nix +++ b/pkgs/development/ocaml-modules/multicore-magic/default.nix @@ -10,11 +10,11 @@ buildDunePackage rec { pname = "multicore-magic"; - version = "2.3.1"; + version = "2.3.2"; src = fetchurl { url = "https://github.com/ocaml-multicore/multicore-magic/releases/download/${version}/multicore-magic-${version}.tbz"; - hash = "sha256-Adcgi9yfEhhygbBK04H6N9ozg3O6JJWrXrD1MxUcGV8="; + hash = "sha256-jY1wqCOq4c4EMDgIQqqIHErIONJFyvJ+0P8ld1CHF18="; }; doCheck = true; From d787d7318022667152ebaa0b3636831b9a016f00 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 19 Jan 2026 21:27:06 +0000 Subject: [PATCH 08/75] python3Packages.reportlab: 4.4.7 -> 4.4.9 --- pkgs/development/python-modules/reportlab/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/reportlab/default.nix b/pkgs/development/python-modules/reportlab/default.nix index 40782b57d4a3..6cf36fd5e46f 100644 --- a/pkgs/development/python-modules/reportlab/default.nix +++ b/pkgs/development/python-modules/reportlab/default.nix @@ -17,7 +17,7 @@ let in buildPythonPackage rec { pname = "reportlab"; - version = "4.4.7"; + version = "4.4.9"; pyproject = true; # See https://bitbucket.org/pypy/compatibility/wiki/reportlab%20toolkit @@ -25,7 +25,7 @@ buildPythonPackage rec { src = fetchPypi { inherit pname version; - hash = "sha256-Qegoevll5ZlnZJM/PnXn82PDtvJSuhcvlCnoFljXsXA="; + hash = "sha256-fPSHdkKU7nkaR4H1oVe+vOJipmauS7uHeGdgqWdsk3g="; }; postPatch = '' From a5811daab7707ac5d4134f989514c2139a68ba9a Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Tue, 20 Jan 2026 03:03:20 +0000 Subject: [PATCH 09/75] dialog: 1.3-20231002 -> 1.3-20260107 --- pkgs/by-name/di/dialog/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/di/dialog/package.nix b/pkgs/by-name/di/dialog/package.nix index 04c7f1936a41..c7568e76d06d 100644 --- a/pkgs/by-name/di/dialog/package.nix +++ b/pkgs/by-name/di/dialog/package.nix @@ -12,11 +12,11 @@ assert unicodeSupport -> ncurses.unicodeSupport; stdenv.mkDerivation (finalAttrs: { pname = "dialog"; - version = "1.3-20231002"; + version = "1.3-20260107"; src = fetchurl { url = "https://invisible-island.net/archives/dialog/dialog-${finalAttrs.version}.tgz"; - hash = "sha256-MVZAqwcZIl1cvKsTBYXAXweR/PBzBypf6UeZaaorgzs="; + hash = "sha256-eLPdGNleUPC+j5ucHnz/4oyb8c3yDVs+8XJ5xNo1xbU="; }; nativeBuildInputs = lib.optionals withLibrary [ From 54e98b9f486d049b4a894b0522220da296ee077e Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Tue, 20 Jan 2026 05:29:23 +0000 Subject: [PATCH 10/75] mediainfo: 25.09 -> 25.10 --- pkgs/by-name/me/mediainfo/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/me/mediainfo/package.nix b/pkgs/by-name/me/mediainfo/package.nix index 41e801aaa920..f3ace7125452 100644 --- a/pkgs/by-name/me/mediainfo/package.nix +++ b/pkgs/by-name/me/mediainfo/package.nix @@ -11,11 +11,11 @@ stdenv.mkDerivation rec { pname = "mediainfo"; - version = "25.09"; + version = "25.10"; src = fetchurl { url = "https://mediaarea.net/download/source/mediainfo/${version}/mediainfo_${version}.tar.xz"; - hash = "sha256-jUug2L19QJf9CjiNQTHeQMNaxdvlKkdgt52PHSnvLmM="; + hash = "sha256-NmsyUQGrGppO55+9uOPdnni8wKIcD5sZZjE6rtPTNQI="; }; nativeBuildInputs = [ From 0668d1b79a8b6ab4cf7473eac9494d77af2f0aad Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Tue, 20 Jan 2026 19:03:03 +0000 Subject: [PATCH 11/75] sqlcipher: 4.12.0 -> 4.13.0 --- pkgs/by-name/sq/sqlcipher/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/sq/sqlcipher/package.nix b/pkgs/by-name/sq/sqlcipher/package.nix index 732ffb6ff6e1..aa7141f7e5dc 100644 --- a/pkgs/by-name/sq/sqlcipher/package.nix +++ b/pkgs/by-name/sq/sqlcipher/package.nix @@ -14,13 +14,13 @@ stdenv.mkDerivation (finalAttrs: { pname = "sqlcipher"; - version = "4.12.0"; + version = "4.13.0"; src = fetchFromGitHub { owner = "sqlcipher"; repo = "sqlcipher"; tag = "v${finalAttrs.version}"; - hash = "sha256-dJBZw8SzcNS0GGt9el4tiR7gc2DOajuUVfDukwrVPeQ="; + hash = "sha256-3Qt7nOB0iMyNXfENC3gv3F6sENU7OUTZ3n2mo0M2CSA="; }; nativeBuildInputs = [ From de296e04ed2d8ff199eab84e228b08e6b6ad0a10 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Wed, 21 Jan 2026 00:46:45 +0000 Subject: [PATCH 12/75] tdb: 1.4.14 -> 1.4.15 --- pkgs/by-name/td/tdb/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/td/tdb/package.nix b/pkgs/by-name/td/tdb/package.nix index 81b296c62786..a114456ba970 100644 --- a/pkgs/by-name/td/tdb/package.nix +++ b/pkgs/by-name/td/tdb/package.nix @@ -28,11 +28,11 @@ in stdenv.mkDerivation rec { pname = "tdb"; - version = "1.4.14"; + version = "1.4.15"; src = fetchurl { url = "mirror://samba/tdb/${pname}-${version}.tar.gz"; - hash = "sha256-FE9AfULteg7BRwpA7xetQRM/6RC86GXdn+CE1JyQdSY="; + hash = "sha256-+6CdjfHxuQcq6ujniyvUPFr+8gsvbe76YzqhSjd6jdI="; }; nativeBuildInputs = [ From 1d67774edbf8104013973fb0bd207c4879c6cea0 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Wed, 21 Jan 2026 17:11:57 +0000 Subject: [PATCH 13/75] firefox-devedition-unwrapped: 148.0b3 -> 148.0b4 --- .../browsers/firefox/packages/firefox-devedition.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix b/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix index d7df8b9e428d..44f0afe16557 100644 --- a/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix +++ b/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix @@ -10,13 +10,13 @@ buildMozillaMach rec { pname = "firefox-devedition"; binaryName = "firefox-devedition"; - version = "148.0b3"; + version = "148.0b4"; applicationName = "Firefox Developer Edition"; requireSigning = false; branding = "browser/branding/aurora"; src = fetchurl { url = "mirror://mozilla/devedition/releases/${version}/source/firefox-${version}.source.tar.xz"; - sha512 = "e9853be515265b7738d87b4aa030a54758b5d3357c2204ab6a883d0bcdaf71b887bb03c79f5746866f1edd79de2cec5d7edc9898f48e49dae7c50e2934bff530"; + sha512 = "951da65733ab4226839cf23fa0f667d8bcdeeb8c2e729b6395d7ee39b10263a4409380eebde132156f8acc56ab5b4bf96eed1991a31820037b57214a1d22e520"; }; # buildMozillaMach sets MOZ_APP_REMOTINGNAME during configuration, but From 4ea3b04643fc790b56af31e531cbc3dc9696ce60 Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Wed, 21 Jan 2026 21:47:17 +0100 Subject: [PATCH 14/75] mysql80: 8.0.44 -> 8.0.45 Fixes: * CVE-2026-21968 * CVE-2026-21936 * CVE-2026-21937 * CVE-2026-21941 * CVE-2026-21948 * CVE-2026-21964 Changes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-45.html --- pkgs/servers/sql/mysql/8.0.x.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/servers/sql/mysql/8.0.x.nix b/pkgs/servers/sql/mysql/8.0.x.nix index 3119c7b68ec5..868d9b2b9ca3 100644 --- a/pkgs/servers/sql/mysql/8.0.x.nix +++ b/pkgs/servers/sql/mysql/8.0.x.nix @@ -30,11 +30,11 @@ stdenv.mkDerivation (finalAttrs: { pname = "mysql"; - version = "8.0.44"; + version = "8.0.45"; src = fetchurl { url = "https://dev.mysql.com/get/Downloads/MySQL-${lib.versions.majorMinor finalAttrs.version}/mysql-${finalAttrs.version}.tar.gz"; - hash = "sha256-YJUi7R/vzlqziN7CXg0bzhMjgtom4rd7aPB0HApkE1Y="; + hash = "sha256-tDXyLmWMj8k7gWmPo0uaVjJaMEs/Pf+H8n+2dMkKu8s="; }; nativeBuildInputs = [ From 3da0a2663c07be0ade71e54782f3b5ef063fd6ba Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Wed, 21 Jan 2026 22:08:34 +0100 Subject: [PATCH 15/75] mysql84: 8.4.7 -> 8.4.8 Fixes: * CVE-2026-21968 * CVE-2026-21936 * CVE-2026-21937 * CVE-2026-21941 * CVE-2026-21948 * CVE-2026-21964 Changes: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-8.html --- pkgs/by-name/my/mysql84/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/my/mysql84/package.nix b/pkgs/by-name/my/mysql84/package.nix index fffba61effcb..bd874c58f6e6 100644 --- a/pkgs/by-name/my/mysql84/package.nix +++ b/pkgs/by-name/my/mysql84/package.nix @@ -27,11 +27,11 @@ stdenv.mkDerivation (finalAttrs: { pname = "mysql"; - version = "8.4.7"; + version = "8.4.8"; src = fetchurl { url = "https://dev.mysql.com/get/Downloads/MySQL-${lib.versions.majorMinor finalAttrs.version}/mysql-${finalAttrs.version}.tar.gz"; - hash = "sha256-wL8zqUzbkI8UmuoHl6/7GxOSYszw4Ll4ehckYgdULmk="; + hash = "sha256-vp2Wzfh/J2lSos3ZYPEGuWCohg5GwRXtOcG18uA4eiA="; }; nativeBuildInputs = [ From 9a345c40118f7d4974a75afdf516cddb5eb2ee7e Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 24 Jan 2026 13:28:53 +0000 Subject: [PATCH 16/75] vvenc: 1.13.1 -> 1.14.0 --- pkgs/by-name/vv/vvenc/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/vv/vvenc/package.nix b/pkgs/by-name/vv/vvenc/package.nix index f28ab0e0d436..25d08a97f4f2 100644 --- a/pkgs/by-name/vv/vvenc/package.nix +++ b/pkgs/by-name/vv/vvenc/package.nix @@ -10,7 +10,7 @@ stdenv.mkDerivation (finalAttrs: { pname = "vvenc"; - version = "1.13.1"; + version = "1.14.0"; outputs = [ "out" @@ -22,7 +22,7 @@ stdenv.mkDerivation (finalAttrs: { owner = "fraunhoferhhi"; repo = "vvenc"; tag = "v${finalAttrs.version}"; - hash = "sha256-DPR1HmUYTjhKI+gTHERtxqThZ5oKKMoqYsfE709IrhA="; + hash = "sha256-MZVXxUXpcZ16de3CZDscLOlnqjHkGZ98muhYCDCcgvs="; }; patches = [ ./unset-darwin-cmake-flags.patch ]; From eef3559312e6c32a8db8374f71a5b122d8178929 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 25 Jan 2026 10:37:58 +0000 Subject: [PATCH 17/75] firefox-beta-unwrapped: 148.0b3 -> 148.0b6 --- .../networking/browsers/firefox/packages/firefox-beta.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix b/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix index d72793a21015..7e0984150dc0 100644 --- a/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix +++ b/pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix @@ -10,11 +10,11 @@ buildMozillaMach rec { pname = "firefox-beta"; binaryName = "firefox-beta"; - version = "148.0b3"; + version = "148.0b6"; applicationName = "Firefox Beta"; src = fetchurl { url = "mirror://mozilla/firefox/releases/${version}/source/firefox-${version}.source.tar.xz"; - sha512 = "4a005fa884dd7728016c92ad2f7019bbbb5abcedfcedd916c9e0b8e9bae5566f855e79a5c9bf533b0f7c324b6a298113a20afdb65b19ccbf323c9bcce01266c7"; + sha512 = "a8dfcff028d28d63dc635f9cda8e2dcf2f6b55363ac4e1686561c77aff56216d3f897b1d3686bf32f388eed4e1df146d3795a55eb2a696523dc7c176bb63cd07"; }; meta = { From 014b85596801eeea8bf07dd9e727902eb52b3ff9 Mon Sep 17 00:00:00 2001 From: Weijia Wang <9713184+wegank@users.noreply.github.com> Date: Sun, 25 Jan 2026 19:12:18 +0100 Subject: [PATCH 18/75] python3Packages.bidsschematools: 1.1.5 -> 1.1.6 --- pkgs/development/python-modules/bidsschematools/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/bidsschematools/default.nix b/pkgs/development/python-modules/bidsschematools/default.nix index 09b68c112f6d..2f4d7e2facf7 100644 --- a/pkgs/development/python-modules/bidsschematools/default.nix +++ b/pkgs/development/python-modules/bidsschematools/default.nix @@ -10,14 +10,14 @@ buildPythonPackage rec { pname = "bidsschematools"; - version = "1.1.5"; + version = "1.1.6"; pyproject = true; src = fetchFromGitHub { owner = "bids-standard"; repo = "bids-specification"; tag = "schema-${version}"; - hash = "sha256-LAcrmnfksisLQb1JE82p/tm5HhHAfezCApz8CeUciZQ="; + hash = "sha256-HMGhEEnmr0BwkcRcysmu9SgTME4BhrwcAAnRt4qF7eI="; }; sourceRoot = "${src.name}/tools/schemacode"; From 7cf79f586f8c4a518428687527e606669e036776 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 26 Jan 2026 01:58:32 +0000 Subject: [PATCH 19/75] brainflow: 5.20.0 -> 5.20.1 --- pkgs/by-name/br/brainflow/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/br/brainflow/package.nix b/pkgs/by-name/br/brainflow/package.nix index 85e799bb6d0a..811748e10e8f 100644 --- a/pkgs/by-name/br/brainflow/package.nix +++ b/pkgs/by-name/br/brainflow/package.nix @@ -17,13 +17,13 @@ stdenv.mkDerivation (finalAttrs: { pname = "brainflow"; - version = "5.20.0"; + version = "5.20.1"; src = fetchFromGitHub { owner = "brainflow-dev"; repo = "brainflow"; tag = finalAttrs.version; - hash = "sha256-qxITJjO6Rf9cx4XWRguOlohud8gnMSQDb/qgwv3wA+8="; + hash = "sha256-eQgjEFYEuJXLNB+qeWLeN3ZRmq1lR5qpcFcPgHn8Az8="; }; patches = [ ]; From 4cf29404142fece676ee9b25c9da394ff823702c Mon Sep 17 00:00:00 2001 From: Aliaksandr Date: Fri, 26 Dec 2025 23:46:57 +0200 Subject: [PATCH 20/75] darktable: remove top-level override --- pkgs/by-name/da/darktable/package.nix | 10 ++++++---- pkgs/top-level/all-packages.nix | 5 ----- 2 files changed, 6 insertions(+), 9 deletions(-) diff --git a/pkgs/by-name/da/darktable/package.nix b/pkgs/by-name/da/darktable/package.nix index ec270b04428b..ce87ec77391a 100644 --- a/pkgs/by-name/da/darktable/package.nix +++ b/pkgs/by-name/da/darktable/package.nix @@ -53,7 +53,7 @@ libtiff, libwebp, libxml2, - lua, + lua5_4, util-linux, openexr, openjpeg, @@ -78,7 +78,9 @@ versionCheckHook, gitUpdater, }: - +let + pugixml-shared = pugixml.override { shared = true; }; +in stdenv.mkDerivation rec { version = "5.4.0"; pname = "darktable"; @@ -138,13 +140,13 @@ stdenv.mkDerivation rec { libtiff libwebp libxml2 - lua + lua5_4 openexr openjpeg osm-gps-map pcre2 portmidi - pugixml + pugixml-shared sqlite ] ++ lib.optionals stdenv.hostPlatform.isLinux [ diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix index 01921036db84..d7c4f6d95475 100644 --- a/pkgs/top-level/all-packages.nix +++ b/pkgs/top-level/all-packages.nix @@ -10059,11 +10059,6 @@ with pkgs; haskell.lib.compose.justStaticExecutables haskellPackages.darcs ); - darktable = callPackage ../by-name/da/darktable/package.nix { - lua = lua5_4; - pugixml = pugixml.override { shared = true; }; - }; - datadog-agent = callPackage ../tools/networking/dd-agent/datadog-agent.nix { pythonPackages = datadog-integrations-core { }; }; From 7a9d2219bb3ef2d5c98b9727201b447a088115e4 Mon Sep 17 00:00:00 2001 From: Aliaksandr Date: Sat, 27 Dec 2025 00:24:23 +0200 Subject: [PATCH 21/75] odin: remove top-level override --- pkgs/by-name/od/odin/package.nix | 3 ++- pkgs/top-level/all-packages.nix | 4 ---- 2 files changed, 2 insertions(+), 5 deletions(-) diff --git a/pkgs/by-name/od/odin/package.nix b/pkgs/by-name/od/odin/package.nix index 92885da46bb2..062bf82a0b5c 100644 --- a/pkgs/by-name/od/odin/package.nix +++ b/pkgs/by-name/od/odin/package.nix @@ -1,6 +1,6 @@ { lib, - llvmPackages, + llvmPackages_18, fetchFromGitHub, makeBinaryWrapper, which, @@ -8,6 +8,7 @@ }: let + llvmPackages = llvmPackages_18; inherit (llvmPackages) stdenv; in stdenv.mkDerivation (finalAttrs: { diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix index d7c4f6d95475..f126d97613f4 100644 --- a/pkgs/top-level/all-packages.nix +++ b/pkgs/top-level/all-packages.nix @@ -9457,10 +9457,6 @@ with pkgs; open-vm-tools-headless = open-vm-tools.override { withX = false; }; - odin = callPackage ../by-name/od/odin/package.nix { - llvmPackages = llvmPackages_18; - }; - pam = if stdenv.hostPlatform.isLinux then linux-pam From 0849763b7784aba00ba7bf7bec79c49acc857b53 Mon Sep 17 00:00:00 2001 From: Aliaksandr Date: Sat, 27 Dec 2025 00:28:59 +0200 Subject: [PATCH 22/75] renovate: remove top-level override --- pkgs/by-name/re/renovate/package.nix | 5 ++++- pkgs/top-level/all-packages.nix | 4 ---- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/pkgs/by-name/re/renovate/package.nix b/pkgs/by-name/re/renovate/package.nix index 5975d14d314f..aa6d3cdbc192 100644 --- a/pkgs/by-name/re/renovate/package.nix +++ b/pkgs/by-name/re/renovate/package.nix @@ -3,7 +3,7 @@ stdenv, fetchFromGitHub, makeWrapper, - nodejs, + nodejs_22, pnpm_10, fetchPnpmDeps, pnpmConfigHook, @@ -14,6 +14,9 @@ nix-update-script, yq-go, }: +let + nodejs = nodejs_22; +in stdenv.mkDerivation (finalAttrs: { pname = "renovate"; version = "42.83.1"; diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix index f126d97613f4..1630324bfd23 100644 --- a/pkgs/top-level/all-packages.nix +++ b/pkgs/top-level/all-packages.nix @@ -7788,10 +7788,6 @@ with pkgs; librdf_redland = callPackage ../development/libraries/librdf/redland.nix { }; redland = librdf_redland; # added 2018-04-25 - renovate = callPackage ../by-name/re/renovate/package.nix { - nodejs = nodejs_22; - }; - qadwaitadecorations-qt6 = callPackage ../by-name/qa/qadwaitadecorations/package.nix { useQt6 = true; }; From 65bafefd5c14ba2206cf0fcf154e248fa2b576fe Mon Sep 17 00:00:00 2001 From: Wolfgang Walther Date: Mon, 20 Oct 2025 15:41:25 +0200 Subject: [PATCH 23/75] aegisub: remove overrides from all-package.nix The config option was introduced in 9361acfff13586840a41e16496c28dc27848671d, this should just be done via overlays today. --- pkgs/by-name/ae/aegisub/package.nix | 6 +++++- pkgs/top-level/all-packages.nix | 7 ------- 2 files changed, 5 insertions(+), 8 deletions(-) diff --git a/pkgs/by-name/ae/aegisub/package.nix b/pkgs/by-name/ae/aegisub/package.nix index 5571e8051691..2f6110a33b19 100644 --- a/pkgs/by-name/ae/aegisub/package.nix +++ b/pkgs/by-name/ae/aegisub/package.nix @@ -39,6 +39,10 @@ useBundledLuaJIT ? false, }: +let + luajit' = luajit.override { enable52Compat = true; }; +in + stdenv.mkDerivation (finalAttrs: { pname = "aegisub"; version = "3.4.2"; @@ -82,7 +86,7 @@ stdenv.mkDerivation (finalAttrs: { ++ lib.optionals portaudioSupport [ portaudio ] ++ lib.optionals pulseaudioSupport [ libpulseaudio ] ++ lib.optionals spellcheckSupport [ hunspell ] - ++ lib.optionals (!useBundledLuaJIT) [ luajit ]; + ++ lib.optionals (!useBundledLuaJIT) [ luajit' ]; mesonFlags = [ (lib.mesonEnable "alsa" alsaSupport) diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix index 1630324bfd23..39c828445c6d 100644 --- a/pkgs/top-level/all-packages.nix +++ b/pkgs/top-level/all-packages.nix @@ -956,13 +956,6 @@ with pkgs; opnplug = adlplug.override { type = "OPN"; }; - aegisub = callPackage ../by-name/ae/aegisub/package.nix ( - { - luajit = luajit.override { enable52Compat = true; }; - } - // (config.aegisub or { }) - ); - acme-client = callPackage ../tools/networking/acme-client { stdenv = gccStdenv; }; From c0dc960a4956998a3710e272ed3434ca2f0f4e4f Mon Sep 17 00:00:00 2001 From: kilianar Date: Mon, 26 Jan 2026 10:03:34 +0100 Subject: [PATCH 24/75] oxipng: 10.0.0 -> 10.1.0 https://github.com/oxipng/oxipng/releases/tag/v10.1.0 --- pkgs/by-name/ox/oxipng/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/ox/oxipng/package.nix b/pkgs/by-name/ox/oxipng/package.nix index b8a682040b5f..81f4a09c0ddb 100644 --- a/pkgs/by-name/ox/oxipng/package.nix +++ b/pkgs/by-name/ox/oxipng/package.nix @@ -5,7 +5,7 @@ }: rustPlatform.buildRustPackage rec { - version = "10.0.0"; + version = "10.1.0"; pname = "oxipng"; # do not use fetchCrate (only repository includes tests) @@ -13,10 +13,10 @@ rustPlatform.buildRustPackage rec { owner = "shssoichiro"; repo = "oxipng"; tag = "v${version}"; - hash = "sha256-c8NNTO+6GuFb5BBPpdyDSHbtmojq+9ceOic54Zq3nwE="; + hash = "sha256-fPzdko8qcg9zcr79SrEakLqTFj9hDCakl6hTVpW9al8="; }; - cargoHash = "sha256-YStZ2j2gjC5uVUnHaQIk6xtSbnPm0IoNONRr/nFOOUg="; + cargoHash = "sha256-P8PT75TwdYeS9xJ7EEdIhlgHfd0VlIPUaLkM0SfRPq0="; # don't require qemu for aarch64-linux tests # error: linker `aarch64-linux-gnu-gcc` not found From df7dfabe76edb3b9138494050c26cbfa6b35c407 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 26 Jan 2026 12:40:54 +0000 Subject: [PATCH 25/75] xorg.libXvMC: 1.0.14 -> 1.0.15 --- pkgs/by-name/li/libxvmc/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/li/libxvmc/package.nix b/pkgs/by-name/li/libxvmc/package.nix index 59ab561a47df..7ce4d196f44b 100644 --- a/pkgs/by-name/li/libxvmc/package.nix +++ b/pkgs/by-name/li/libxvmc/package.nix @@ -12,7 +12,7 @@ }: stdenv.mkDerivation (finalAttrs: { pname = "libxvmc"; - version = "1.0.14"; + version = "1.0.15"; outputs = [ "out" @@ -22,7 +22,7 @@ stdenv.mkDerivation (finalAttrs: { src = fetchurl { url = "mirror://xorg/individual/lib/libXvMC-${finalAttrs.version}.tar.xz"; - hash = "sha256-5L6etra6/bv4H0f3FjBHIVN25F4tx4bQ6mGByTByXtk="; + hash = "sha256-T1GK/ePX/UNTRq97No0vc1F/PV+CZHyWLK8/e7j/cHg="; }; strictDeps = true; From f8e2a6a77008739407f8d134788fbd02900994a8 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 26 Jan 2026 12:57:03 +0000 Subject: [PATCH 26/75] yara-x: 1.11.0 -> 1.12.0 --- pkgs/by-name/ya/yara-x/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/ya/yara-x/package.nix b/pkgs/by-name/ya/yara-x/package.nix index fe69c9dcdc5e..8d7057b212e2 100644 --- a/pkgs/by-name/ya/yara-x/package.nix +++ b/pkgs/by-name/ya/yara-x/package.nix @@ -11,16 +11,16 @@ rustPlatform.buildRustPackage (finalAttrs: { pname = "yara-x"; - version = "1.11.0"; + version = "1.12.0"; src = fetchFromGitHub { owner = "VirusTotal"; repo = "yara-x"; tag = "v${finalAttrs.version}"; - hash = "sha256-UE5x9w9I4l9OqRVv6klveEvIap+El6vea6OsnnOJHus="; + hash = "sha256-od7RWHhyFQ7l3HZaqpOkUVtiWKDQj/tUsd5lGi6m34I="; }; - cargoHash = "sha256-rQ8uBgsJ86K0Qc3uTiFDPmcRU+dF5gu0b5pzMcGAAVU="; + cargoHash = "sha256-YW4Yi1gvMjTNAgsAlyX1KMlyQPHCXh/jAoO/Nkrn2Sc="; CARGO_PROFILE_RELEASE_LTO = "fat"; CARGO_PROFILE_RELEASE_CODEGEN_UNITS = "1"; From e20cc3fc81904973330e79f8f8b22ed365d875f0 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 26 Jan 2026 13:35:18 +0000 Subject: [PATCH 27/75] nuclei-templates: 10.3.7 -> 10.3.8 --- pkgs/by-name/nu/nuclei-templates/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/nu/nuclei-templates/package.nix b/pkgs/by-name/nu/nuclei-templates/package.nix index 0f7a97f99074..8e6430bfa6cd 100644 --- a/pkgs/by-name/nu/nuclei-templates/package.nix +++ b/pkgs/by-name/nu/nuclei-templates/package.nix @@ -6,13 +6,13 @@ stdenvNoCC.mkDerivation (finalAttrs: { pname = "nuclei-templates"; - version = "10.3.7"; + version = "10.3.8"; src = fetchFromGitHub { owner = "projectdiscovery"; repo = "nuclei-templates"; tag = "v${finalAttrs.version}"; - hash = "sha256-kiafZbt19UInpSGq9I3QkXM3ZA4Hzp2OEW9morLm/yQ="; + hash = "sha256-LLJrG2bmb1eDDvcLBK35GSn6EvDJslXeu/R57wKjzX8="; }; installPhase = '' From c6cf147bce04bae4950cafd10bcd0ab190fb710b Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 26 Jan 2026 13:50:37 +0000 Subject: [PATCH 28/75] xkill: 1.0.6 -> 1.0.7 --- pkgs/by-name/xk/xkill/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/xk/xkill/package.nix b/pkgs/by-name/xk/xkill/package.nix index 9577eb13c53b..ed7cca269274 100644 --- a/pkgs/by-name/xk/xkill/package.nix +++ b/pkgs/by-name/xk/xkill/package.nix @@ -10,11 +10,11 @@ }: stdenv.mkDerivation (finalAttrs: { pname = "xkill"; - version = "1.0.6"; + version = "1.0.7"; src = fetchurl { url = "mirror://xorg/individual/app/xkill-${finalAttrs.version}.tar.xz"; - hash = "sha256-5aiqeMR1Z3sRUEZG2o2T2swwdEJYB2ospBiiRDiuuQc="; + hash = "sha256-X/JkvE7rwEWSVakgNtyNyEttSMrvhQn4ing76q3qdQs="; }; strictDeps = true; From 191cda2cb7560c17c507291bb9c5b3ab769eff27 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 26 Jan 2026 13:57:47 +0000 Subject: [PATCH 29/75] powersupply: 0.10.1 -> 0.10.2 --- pkgs/by-name/po/powersupply/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/po/powersupply/package.nix b/pkgs/by-name/po/powersupply/package.nix index c908ae909e43..88fc8d9c17d4 100644 --- a/pkgs/by-name/po/powersupply/package.nix +++ b/pkgs/by-name/po/powersupply/package.nix @@ -14,7 +14,7 @@ python3.pkgs.buildPythonApplication rec { pname = "powersupply"; - version = "0.10.1"; + version = "0.10.2"; pyproject = false; @@ -23,7 +23,7 @@ python3.pkgs.buildPythonApplication rec { owner = "postmarketOS"; repo = "powersupply"; rev = version; - hash = "sha256-sPdtrm2WQYjPu+1bb0ltBiqS9t8FFvbgRdGe1PEthy0="; + hash = "sha256-i0AZfxYWj8ct2jiXl2GnCGMU3xBSRRny4H0G/5Qs14Y="; }; postPatch = '' From 8ac62afc580e31c04c562a677af30a7cf084979b Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 26 Jan 2026 14:55:34 +0000 Subject: [PATCH 30/75] cgal: 6.1 -> 6.1.1 --- pkgs/by-name/cg/cgal/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/cg/cgal/package.nix b/pkgs/by-name/cg/cgal/package.nix index f25ddd927790..9c7be9d86df0 100644 --- a/pkgs/by-name/cg/cgal/package.nix +++ b/pkgs/by-name/cg/cgal/package.nix @@ -11,11 +11,11 @@ stdenv.mkDerivation (finalAttrs: { pname = "cgal"; - version = "6.1"; + version = "6.1.1"; src = fetchurl { url = "https://github.com/CGAL/cgal/releases/download/v${finalAttrs.version}/CGAL-${finalAttrs.version}.tar.xz"; - sha256 = "sha256-YY2oqLP1vka08KR6Hvs8nmwD1qqw9VMdVtNV0ycB158="; + sha256 = "sha256-UlBpNfcOJH7Sd348ZfIOhveSCMKi0OGArnR12vEclu8="; }; patches = [ ./cgal_path.patch ]; From 0d74a37c1186fbfb26cc3aaf4d4fcf8ce0a202df Mon Sep 17 00:00:00 2001 From: quantenzitrone Date: Tue, 13 Jan 2026 14:04:07 +0100 Subject: [PATCH 31/75] xf86-video-nested: unstable-2017-06-12 -> 0-unstable-2024-10-26, refactor, rename from xf86_video_nested refactor: - switch to gitlab source - remove the hardeningDisable - extend platforms to unix - builds fine for x86_64-freebsd --- nixos/modules/services/x11/xserver.nix | 2 +- pkgs/by-name/xf/xf86-video-nested/package.nix | 49 ++++++++++++++++++ pkgs/by-name/xf/xf86_video_nested/package.nix | 50 ------------------- pkgs/top-level/aliases.nix | 1 + 4 files changed, 51 insertions(+), 51 deletions(-) create mode 100644 pkgs/by-name/xf/xf86-video-nested/package.nix delete mode 100644 pkgs/by-name/xf/xf86_video_nested/package.nix diff --git a/nixos/modules/services/x11/xserver.nix b/nixos/modules/services/x11/xserver.nix index 7c16d2ea8900..deac2c252a68 100644 --- a/nixos/modules/services/x11/xserver.nix +++ b/nixos/modules/services/x11/xserver.nix @@ -30,7 +30,7 @@ let xf86-video-intel xf86-video-mga xf86-video-neomagic - xf86_video_nested + xf86-video-nested xf86-video-nouveau xf86-video-nv xf86-video-omap diff --git a/pkgs/by-name/xf/xf86-video-nested/package.nix b/pkgs/by-name/xf/xf86-video-nested/package.nix new file mode 100644 index 000000000000..59e712a32050 --- /dev/null +++ b/pkgs/by-name/xf/xf86-video-nested/package.nix @@ -0,0 +1,49 @@ +{ + lib, + stdenv, + fetchFromGitLab, + autoreconfHook, + pkg-config, + util-macros, + xorgproto, + libx11, + libxext, + xorg-server, +}: + +stdenv.mkDerivation { + pname = "xf86-video-nested"; + version = "0-unstable-2024-10-26"; + + src = fetchFromGitLab { + domain = "gitlab.freedesktop.org"; + group = "xorg"; + owner = "driver"; + repo = "xf86-video-nested"; + rev = "03dab66493622835a29b873cd63df489f1a96ed9"; + hash = "sha256-EPQOcE23m6RSG05txjBjREBz9JlwZrmK4Rn6Fg2IyT4="; + }; + + strictDeps = true; + + nativeBuildInputs = [ + autoreconfHook + pkg-config + util-macros + ]; + + buildInputs = [ + xorg-server + xorgproto + libx11 + libxext + ]; + + meta = { + homepage = "https://gitlab.freedesktop.org/xorg/driver/xf86-video-nested"; + description = "Video ddriver to run Xorg on top of another X server"; + maintainers = [ ]; + platforms = lib.platforms.unix; + license = lib.licenses.mit; + }; +} diff --git a/pkgs/by-name/xf/xf86_video_nested/package.nix b/pkgs/by-name/xf/xf86_video_nested/package.nix deleted file mode 100644 index 99c486d13c15..000000000000 --- a/pkgs/by-name/xf/xf86_video_nested/package.nix +++ /dev/null @@ -1,50 +0,0 @@ -{ - lib, - stdenv, - fetchgit, - autoreconfHook, - xorgproto, - libX11, - libXext, - pixman, - pkg-config, - utilmacros, - xorgserver, -}: - -stdenv.mkDerivation { - pname = "xf86-video-nested"; - version = "unstable-2017-06-12"; - - src = fetchgit { - url = "git://anongit.freedesktop.org/xorg/driver/xf86-video-nested"; - rev = "6a48b385c41ea89354d0b2ee7f4649a1d1d9ec70"; - sha256 = "133rd2kvr2q2wmwpx82bb93qbi8wm8qp1vlmbhgc7aslz0j4cqqv"; - }; - - nativeBuildInputs = [ - pkg-config - autoreconfHook - ]; - - buildInputs = [ - xorgproto - libX11 - libXext - pixman - utilmacros - xorgserver - ]; - - hardeningDisable = [ "fortify" ]; - - CFLAGS = "-I${pixman}/include/pixman-1"; - - meta = { - homepage = "https://cgit.freedesktop.org/xorg/driver/xf86-video-nested"; - description = "Driver to run Xorg on top of Xorg or something else"; - maintainers = [ ]; - platforms = lib.platforms.linux; - license = lib.licenses.mit; - }; -} diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix index 01a74ac3e45a..18118c0e3080 100644 --- a/pkgs/top-level/aliases.nix +++ b/pkgs/top-level/aliases.nix @@ -1872,6 +1872,7 @@ mapAliases { xdragon = throw "'xdragon' has been renamed to/replaced by 'dragon-drop'"; # Converted to throw 2025-10-27 xf86_input_cmt = xf86-input-cmt; # Added 2025-12-12 xf86_input_wacom = xf86-input-wacom; # Added 2025-12-12 + xf86_video_nested = xf86-video-nested; # added 2026-01-13 xf86inputjoystick = xf86-input-joystick; # Added 2026-01-19 xf86inputkeyboard = xf86-input-keyboard; # Added 2026-01-19 xf86inputmouse = xf86-input-mouse; # Added 2026-01-19 From bf6e1ce21b0436784dc6427d17187d6745c10d51 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Martin=20Ha=CC=88cker?= Date: Mon, 26 Jan 2026 20:18:35 +0100 Subject: [PATCH 32/75] fresh-editor: 0.1.88 -> 0.1.90 --- pkgs/by-name/fr/fresh-editor/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/fr/fresh-editor/package.nix b/pkgs/by-name/fr/fresh-editor/package.nix index 641a86727d6f..7edfe42ae493 100644 --- a/pkgs/by-name/fr/fresh-editor/package.nix +++ b/pkgs/by-name/fr/fresh-editor/package.nix @@ -11,16 +11,16 @@ }: rustPlatform.buildRustPackage (finalAttrs: { pname = "fresh"; - version = "0.1.88"; + version = "0.1.90"; src = fetchFromGitHub { owner = "sinelaw"; repo = "fresh"; tag = "v${finalAttrs.version}"; - hash = "sha256-aGGLqtvJ/kaGZtbpzLUQ40wPMp+g8+WCxXk9t+fQR7M="; + hash = "sha256-ZJ6T1LUeuuaGu4l5mVUNcmtId3qleP5PE4lY+fGGnaE="; }; - cargoHash = "sha256-67XM9j3dZ+4TKVYsM4mTuKHZcxc4EcvlHjxSNRIz9y0="; + cargoHash = "sha256-tHuesoVUZ5OC9R662T4q0W8deXM/Gzvl0WEpHIltBOM="; nativeBuildInputs = [ pkg-config From fd3e4dd1877605f5a668051e3036687c4ac22020 Mon Sep 17 00:00:00 2001 From: Dmytro Kostiuchenko Date: Mon, 26 Jan 2026 22:42:15 +0100 Subject: [PATCH 33/75] perlPackages.TestStrict: init at 0.54 --- pkgs/top-level/perl-packages.nix | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/pkgs/top-level/perl-packages.nix b/pkgs/top-level/perl-packages.nix index 29e619bb19de..c8b4a2eee9b7 100644 --- a/pkgs/top-level/perl-packages.nix +++ b/pkgs/top-level/perl-packages.nix @@ -35269,6 +35269,23 @@ with self; }; }; + TestStrict = buildPerlPackage { + pname = "Test-Strict"; + version = "0.54"; + src = fetchurl { + url = "mirror://cpan/authors/id/M/MA/MANWAR/Test-Strict-0.54.tar.gz"; + hash = "sha256-9oB1F4I6kKlrQN7q7ZqggAgt7UtQpRIE9b4efOd0yFw="; + }; + buildInputs = [ IOStringy ]; + meta = { + description = "Check syntax, presence of use strict; and test coverage"; + license = with lib.licenses; [ + artistic1 + gpl1Plus + ]; + }; + }; + TestSubCalls = buildPerlPackage { pname = "Test-SubCalls"; version = "1.10"; From 36e558470e1f9a1bacb21b7aee010c9f0c8190fb Mon Sep 17 00:00:00 2001 From: Pol Dellaiera Date: Mon, 26 Jan 2026 23:05:00 +0100 Subject: [PATCH 34/75] meshtasticd: 2.7.16.a597230 -> 2.7.18.fb3bf78 --- pkgs/by-name/me/meshtasticd/package.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/by-name/me/meshtasticd/package.nix b/pkgs/by-name/me/meshtasticd/package.nix index 0c72b014b9d0..7a9ec6d4a12a 100644 --- a/pkgs/by-name/me/meshtasticd/package.nix +++ b/pkgs/by-name/me/meshtasticd/package.nix @@ -36,11 +36,11 @@ assert builtins.isBool enableDefaultConfig; let - version = "2.7.16.a597230"; + version = "2.7.18.fb3bf78"; platformio-deps-native = fetchzip { url = "https://github.com/meshtastic/firmware/releases/download/v${version}/platformio-deps-native-tft-${version}.zip"; - hash = "sha256-Jo7e6zsCaiJs6NyIRmD6BWJFwbs0xVlUih206ePUpwk="; + hash = "sha256-rud8F+aYVljNw2rpApIkjuN8ob/ZxvcXNJ+oAVSeMpE="; }; in stdenv.mkDerivation (finalAttrs: { @@ -50,7 +50,7 @@ stdenv.mkDerivation (finalAttrs: { src = fetchFromGitHub { owner = "meshtastic"; repo = "firmware"; - hash = "sha256-oU3Z8qjBNeNGPGT74VStAPHgsGqsQJKngHJR6m2CBa0="; + hash = "sha256-RI1U0xZDy22C+YO5gKbxo5YWDzVeRWJ8u6tTyDdwqGU="; tag = "v${finalAttrs.version}"; fetchSubmodules = true; }; @@ -118,7 +118,7 @@ stdenv.mkDerivation (finalAttrs: { install -Dm644 bin/org.meshtastic.meshtasticd.svg -t $out/share/icons/hicolor/scalable/apps/ install -Dm644 bin/org.meshtastic.meshtasticd.desktop -t $out/share/applications/ - install -Dm755 .pio/build/native-tft/program $out/bin/meshtasticd + install -Dm755 .pio/build/native-tft/meshtasticd -t $out/bin install -Dm644 bin/99-meshtasticd-udev.rules -t $out/etc/udev/rules.d '' From 0f5fdafe459d3baa5a84b35f42cda9e39d8737df Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Mon, 26 Jan 2026 22:57:03 +0000 Subject: [PATCH 35/75] release-plz: 0.3.151 -> 0.3.153 --- pkgs/by-name/re/release-plz/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/re/release-plz/package.nix b/pkgs/by-name/re/release-plz/package.nix index fa6cdaece5d1..9407f5967143 100644 --- a/pkgs/by-name/re/release-plz/package.nix +++ b/pkgs/by-name/re/release-plz/package.nix @@ -11,16 +11,16 @@ rustPlatform.buildRustPackage rec { pname = "release-plz"; - version = "0.3.151"; + version = "0.3.153"; src = fetchFromGitHub { owner = "MarcoIeni"; repo = "release-plz"; rev = "release-plz-v${version}"; - hash = "sha256-yH+ggH5bJNvdD+iv3gk6PZ/EXHoQhdl7ur9Sj6/GE/Q="; + hash = "sha256-/1Fuu1v8kNu0BUFNqhzy7Nexob29NDo/vEOWfQSPF88="; }; - cargoHash = "sha256-hi0TghUBEXBMSXq+gjxeGZWzpqzQTBg8WGOdkzP1Q70="; + cargoHash = "sha256-cosUcBEb/hRcQ0s/1f30917gDQzGmRKmPNJ4/ASAl+4="; nativeBuildInputs = [ installShellFiles From 568648a3dee53e43952f9a5f8ac69347fb9ceb39 Mon Sep 17 00:00:00 2001 From: Jan Tojnar Date: Tue, 27 Jan 2026 00:03:36 +0100 Subject: [PATCH 36/75] inkscape-extensions.inkstitch: Avoid overriding inkex Apply patch to be able to use stable version of inkex. --- .../inkscape/extensions/inkstitch/default.nix | 31 ++++++------------- 1 file changed, 9 insertions(+), 22 deletions(-) diff --git a/pkgs/applications/graphics/inkscape/extensions/inkstitch/default.nix b/pkgs/applications/graphics/inkscape/extensions/inkstitch/default.nix index be267ad83b7c..7ad563339584 100644 --- a/pkgs/applications/graphics/inkscape/extensions/inkstitch/default.nix +++ b/pkgs/applications/graphics/inkscape/extensions/inkstitch/default.nix @@ -2,37 +2,17 @@ lib, python3, fetchFromGitHub, - fetchFromGitLab, + fetchpatch, gettext, }: let - # on update check compatibility to nixpkgs inkex version = "3.2.2"; - # remove and use nixpkgs version is recent enough - inkex' = python3.pkgs.inkex.overrideAttrs (old: rec { - # this is no special commit, just the most recent as of writing - version = "3150a5b3b06f7e4c2104d9e8eb6dc448982bb2b0"; - src = fetchFromGitLab { - owner = "inkscape"; - repo = "extensions"; - rev = "${version}"; - hash = "sha256-FYBZ66ERC3nVYCaAmFPqKnBxDOKAoQwT14C0fKLn10c="; - }; - - postPatch = '' - substituteInPlace pyproject.toml \ - --replace-fail 'scour = "^0.37"' 'scour = ">=0.37"' - ''; - }); - dependencies = with python3.pkgs; [ pyembroidery - # inkex upstream release & nixpkgs is too old - # use nixpkgs inkex once up to date - inkex' + inkex wxpython networkx platformdirs @@ -94,6 +74,13 @@ python3.pkgs.buildPythonApplication { ./0002-plugin-invocation-use-python-script-as-entrypoint.patch ./0003-lazy-load-module-to-access-global_settings.patch ./0004-enable-force-insertion-of-python-path.patch + + # Fix compatibility with inkex 1.4 + # https://github.com/inkstitch/inkstitch/pull/3825 + (fetchpatch { + url = "https://github.com/inkstitch/inkstitch/commit/454b5ee1a00e9d4b96f5f057a8611da68a6cc796.patch"; + hash = "sha256-nAs1rAr3lvN5Qwhj0I+7puM3R2X1NoHpB0ltvlwHDXA="; + }) ]; doCheck = false; From 21c4a8b1db68021bca41c2b9ff488e5fa30c5b98 Mon Sep 17 00:00:00 2001 From: Jan Tojnar Date: Fri, 23 Jan 2026 18:12:04 +0100 Subject: [PATCH 37/75] python3.pkgs.inkex: Fix schematron tests libxml2 2.15 disables schematron support by default, using upstream patch that switches to lxml-specific implementation. --- pkgs/development/python-modules/inkex/default.nix | 15 ++++++++++++--- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/pkgs/development/python-modules/inkex/default.nix b/pkgs/development/python-modules/inkex/default.nix index 2a77286bd94d..0ea95ed65750 100644 --- a/pkgs/development/python-modules/inkex/default.nix +++ b/pkgs/development/python-modules/inkex/default.nix @@ -2,6 +2,7 @@ lib, stdenv, buildPythonPackage, + fetchpatch, inkscape, poetry-core, cssselect, @@ -25,6 +26,17 @@ buildPythonPackage { inherit (inkscape) src; + patches = [ + # Fix tests with newer libxml2 + # https://gitlab.com/inkscape/extensions/-/merge_requests/712 + (fetchpatch { + url = "https://gitlab.com/inkscape/extensions/-/commit/b04ab718b400778a264f2085bbc779faebc08368.patch"; + hash = "sha256-BXRcfoeX7X8+x6CuKKBhrnzUHIwgnPay22Z8+rPZS54="; + stripLen = 1; + extraPrefix = "share/extensions/"; + }) + ]; + build-system = [ poetry-core ]; pythonRelaxDeps = [ @@ -72,9 +84,6 @@ buildPythonPackage { "tests/test_inkex_gui_window.py" # Failed to find pixmap 'image-missing' in /build/source/tests/data/ "tests/test_inkex_gui_pixmaps.py" - # Fails with libxml2 >= 2.15 with "lxml.etree was compiled without Schematron support" - "inkex/tester/test_inx_file.py" - "tests/test_inkex_inx.py" ]; postPatch = '' From c54890feeecb307819c0bbe63ec330a30cc62a20 Mon Sep 17 00:00:00 2001 From: Weijia Wang <9713184+wegank@users.noreply.github.com> Date: Tue, 27 Jan 2026 01:30:56 +0100 Subject: [PATCH 38/75] liboprf: fix aarch64-linux build --- pkgs/by-name/li/liboprf/package.nix | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pkgs/by-name/li/liboprf/package.nix b/pkgs/by-name/li/liboprf/package.nix index 30e0c77c65c6..77a71b083359 100644 --- a/pkgs/by-name/li/liboprf/package.nix +++ b/pkgs/by-name/li/liboprf/package.nix @@ -32,6 +32,8 @@ stdenv.mkDerivation (finalAttrs: { makeFlags = [ "PREFIX=$(out)" ]; + env.NIX_CFLAGS_COMPILE = "-Wno-error=maybe-uninitialized"; + passthru.updateScript = nix-update-script { }; meta = { From 5bb6317349abfe7569cc5a3831e63a5f6c054787 Mon Sep 17 00:00:00 2001 From: Samuel Dionne-Riel Date: Mon, 26 Jan 2026 16:23:39 -0500 Subject: [PATCH 39/75] =?UTF-8?q?nixos/modules:=20Fix=20=E2=80=9Cdanklinux?= =?UTF-8?q?=E2=80=9D=20team=20members=20reference?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit These evaluation errors were introduced in #470576: - e60e3f9ded96318fdf6a1c079541b1013536e7f4 - 0de2873a44048f045695efb58ec198c74f7d1bf6 --- nixos/modules/programs/dsearch.nix | 2 +- nixos/modules/programs/wayland/dms-shell.nix | 2 +- nixos/modules/services/display-managers/dms-greeter.nix | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/nixos/modules/programs/dsearch.nix b/nixos/modules/programs/dsearch.nix index a719631312be..f1597189fa38 100644 --- a/nixos/modules/programs/dsearch.nix +++ b/nixos/modules/programs/dsearch.nix @@ -49,5 +49,5 @@ in systemd.user.services.dsearch.wantedBy = mkIf cfg.systemd.enable [ cfg.systemd.target ]; }; - meta.maintainers = lib.teams.danklinux.maintainers; + meta.maintainers = lib.teams.danklinux.members; } diff --git a/nixos/modules/programs/wayland/dms-shell.nix b/nixos/modules/programs/wayland/dms-shell.nix index 233590bcf3ec..53f84c1a41b1 100644 --- a/nixos/modules/programs/wayland/dms-shell.nix +++ b/nixos/modules/programs/wayland/dms-shell.nix @@ -226,5 +226,5 @@ in hardware.graphics.enable = lib.mkDefault true; }; - meta.maintainers = lib.teams.danklinux.maintainers; + meta.maintainers = lib.teams.danklinux.members; } diff --git a/nixos/modules/services/display-managers/dms-greeter.nix b/nixos/modules/services/display-managers/dms-greeter.nix index 246a02ea414f..94b79bd19a5f 100644 --- a/nixos/modules/services/display-managers/dms-greeter.nix +++ b/nixos/modules/services/display-managers/dms-greeter.nix @@ -294,5 +294,5 @@ in services.libinput.enable = mkDefault true; }; - meta.maintainers = lib.teams.danklinux.maintainers; + meta.maintainers = lib.teams.danklinux.members; } From 43eca5c08d72437a4caf90fdc89dc509f6621981 Mon Sep 17 00:00:00 2001 From: Samuel Dionne-Riel Date: Mon, 26 Jan 2026 19:55:35 -0500 Subject: [PATCH 40/75] maintainer-list: Fix M0ustach3 maintainer entry MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Two different PRs, two different issues. The first PR, chronologically-merged-in, #426687 introduced a new module, and while reviewers “reviewed” the `meta.maintainers` entry, they did not notice the maintainer was not in the maintainers list file. - https://github.com/NixOS/nixpkgs/pull/426687#discussion_r2311053832 Then, in #437310, merged a few days later, another new module was added with M0ustach3 as a maintainer. At the very least, an attempt was made in de66c73a1938d53625e552ab8e1cdfa62ae4fb1f to add the maintainer to the list, but an unfortunate typo (or two?) in the maintainers list entry means the two intended usage of the new entry still don't work. The issue here is not from the contributors. The reviewers and committers could have done better, but it's not even truly their fault. The issue is the meta information in NixOS modules was never checked. In any way AFAICT. Otherwise this would have been caught immediately, and not four months later. Anyway, the intent clearly is that the entry should matche the GitHub username. --- maintainers/maintainer-list.nix | 2 +- nixos/modules/services/misc/memos.nix | 2 +- nixos/modules/services/security/crowdsec.nix | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix index a12f4cc9b4f1..5f12252b83c5 100644 --- a/maintainers/maintainer-list.nix +++ b/maintainers/maintainer-list.nix @@ -15729,7 +15729,7 @@ github = "M0streng0"; githubId = 85799811; }; - m0ustache3 = { + M0ustach3 = { name = "M0ustach3"; github = "M0ustach3"; githubId = 37956764; diff --git a/nixos/modules/services/misc/memos.nix b/nixos/modules/services/misc/memos.nix index 5847e90c9c06..5e74931c579f 100644 --- a/nixos/modules/services/misc/memos.nix +++ b/nixos/modules/services/misc/memos.nix @@ -195,5 +195,5 @@ in }; }; - meta.maintainers = [ lib.maintainers.m0ustach3 ]; + meta.maintainers = [ lib.maintainers.M0ustach3 ]; } diff --git a/nixos/modules/services/security/crowdsec.nix b/nixos/modules/services/security/crowdsec.nix index 9a1e255441c7..5fe3b495bc50 100644 --- a/nixos/modules/services/security/crowdsec.nix +++ b/nixos/modules/services/security/crowdsec.nix @@ -984,7 +984,7 @@ in meta = { maintainers = with lib.maintainers; [ - m0ustach3 + M0ustach3 tornax jk ]; From 9e19b97b5c8d36cfcb7c857bf21c50e801c188ae Mon Sep 17 00:00:00 2001 From: Amaan Qureshi Date: Mon, 26 Jan 2026 21:28:35 -0500 Subject: [PATCH 41/75] reindeer: add amaanq to maintainers --- pkgs/by-name/re/reindeer/package.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/by-name/re/reindeer/package.nix b/pkgs/by-name/re/reindeer/package.nix index 227d8dc57305..fca7d602a190 100644 --- a/pkgs/by-name/re/reindeer/package.nix +++ b/pkgs/by-name/re/reindeer/package.nix @@ -31,6 +31,6 @@ rustPlatform.buildRustPackage rec { mainProgram = "reindeer"; homepage = "https://github.com/facebookincubator/reindeer"; license = with lib.licenses; [ mit ]; - maintainers = [ ]; + maintainers = with lib.maintainers; [ amaanq ]; }; } From 326c2c76b8dbe07ad277e5c2b0bad95acfe92bd4 Mon Sep 17 00:00:00 2001 From: Morgan Jones Date: Sat, 13 Dec 2025 17:54:31 -0800 Subject: [PATCH 42/75] kryoptic: 1.3.1 -> 1.4.0 --- ...o-lock.patch => 0001-Add-Cargo.lock.patch} | 228 ++++++++---------- pkgs/by-name/kr/kryoptic/package.nix | 43 ++-- 2 files changed, 117 insertions(+), 154 deletions(-) rename pkgs/by-name/kr/kryoptic/{cargo-lock.patch => 0001-Add-Cargo.lock.patch} (82%) diff --git a/pkgs/by-name/kr/kryoptic/cargo-lock.patch b/pkgs/by-name/kr/kryoptic/0001-Add-Cargo.lock.patch similarity index 82% rename from pkgs/by-name/kr/kryoptic/cargo-lock.patch rename to pkgs/by-name/kr/kryoptic/0001-Add-Cargo.lock.patch index 54265aa2955d..4cfd9a099ca2 100644 --- a/pkgs/by-name/kr/kryoptic/cargo-lock.patch +++ b/pkgs/by-name/kr/kryoptic/0001-Add-Cargo.lock.patch @@ -1,19 +1,19 @@ -From 5386104b9b4bffa044587a9ab573c8ed24a0bab2 Mon Sep 17 00:00:00 2001 +From 9c18bc06ee221eaf53d6cf9ffc58a8dacb001e47 Mon Sep 17 00:00:00 2001 From: Morgan Jones -Date: Mon, 10 Nov 2025 23:25:00 -0800 +Date: Sun, 25 Jan 2026 16:48:38 -0800 Subject: [PATCH] Add Cargo.lock --- - Cargo.lock | 1089 ++++++++++++++++++++++++++++++++++++++++++++++++++++ - 1 file changed, 1089 insertions(+) + Cargo.lock | 1049 ++++++++++++++++++++++++++++++++++++++++++++++++++++ + 1 file changed, 1049 insertions(+) create mode 100644 Cargo.lock diff --git a/Cargo.lock b/Cargo.lock new file mode 100644 -index 0000000..a4a3c6e +index 0000000..d137ab5 --- /dev/null +++ b/Cargo.lock -@@ -0,0 +1,1089 @@ +@@ -0,0 +1,1049 @@ +# This file is automatically @generated by Cargo. +# It is not intended for manual editing. +version = 4 @@ -112,15 +112,15 @@ index 0000000..a4a3c6e + +[[package]] +name = "bumpalo" -+version = "3.19.0" ++version = "3.19.1" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "46c5e41b57b8bba42a04676d81cb89e9ee8e859a1a66f80a5a72e1cb76b34d43" ++checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510" + +[[package]] +name = "cc" -+version = "1.2.45" ++version = "1.2.54" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "35900b6c8d709fb1d854671ae27aeaa9eec2f8b01b364e1619a40da3e6fe2afe" ++checksum = "6354c81bbfd62d9cfa9cb3c773c2b7b2a3a482d569de977fd0e961f6e7c00583" +dependencies = [ + "find-msvc-tools", + "shlex", @@ -154,9 +154,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "clap" -+version = "4.5.51" ++version = "4.5.54" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "4c26d721170e0295f191a69bd9a1f93efcdb0aff38684b61ab5750468972e5f5" ++checksum = "c6e6ff9dcd79cff5cd969a17a545d79e84ab086e444102a591e288a8aa3ce394" +dependencies = [ + "clap_builder", + "clap_derive", @@ -164,9 +164,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "clap_builder" -+version = "4.5.51" ++version = "4.5.54" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "75835f0c7bf681bfd05abe44e965760fea999a5286c6eb2d59883634fd02011a" ++checksum = "fa42cf4d2b7a41bc8f663a7cab4031ebafa1bf3875705bfaf8466dc60ab52c00" +dependencies = [ + "anstyle", + "clap_lex", @@ -186,9 +186,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "clap_lex" -+version = "0.7.6" ++version = "0.7.7" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "a1d728cc89cf3aee9ff92b05e62b19ee65a02b5702cff7d5a377e32c6ae29d8d" ++checksum = "c3e64b0cc0439b12df2fa678eae89a1c56a529fd067a9115f7827f1fffd22b32" + +[[package]] +name = "constant_time_eq" @@ -221,9 +221,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "data-encoding" -+version = "2.9.0" ++version = "2.10.0" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "2a2330da5de22e8a3cb63252ce2abb30116bf5265e89c0e01bc17015ce30a476" ++checksum = "d7a1e2f27636f116493b8b860f5546edb47c8d8f8ea73e1d2a20be88e28d1fea" + +[[package]] +name = "deranged" @@ -254,34 +254,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "find-msvc-tools" -+version = "0.1.4" ++version = "0.1.8" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "52051878f80a721bb68ebfbc930e07b65ba72f2da88968ea5c06fd6ca3d3a127" -+ -+[[package]] -+name = "futures" -+version = "0.3.31" -+source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "65bc07b1a8bc7c85c5f2e110c476c7389b4554ba72af57d8445ea63a576b0876" -+dependencies = [ -+ "futures-channel", -+ "futures-core", -+ "futures-executor", -+ "futures-io", -+ "futures-sink", -+ "futures-task", -+ "futures-util", -+] -+ -+[[package]] -+name = "futures-channel" -+version = "0.3.31" -+source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10" -+dependencies = [ -+ "futures-core", -+ "futures-sink", -+] ++checksum = "8591b0bcc8a98a64310a2fae1bb3e9b8564dd10e381e6e28010fde8e8e8568db" + +[[package]] +name = "futures-core" @@ -301,18 +276,6 @@ index 0000000..a4a3c6e +] + +[[package]] -+name = "futures-io" -+version = "0.3.31" -+source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6" -+ -+[[package]] -+name = "futures-sink" -+version = "0.3.31" -+source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7" -+ -+[[package]] +name = "futures-task" +version = "0.3.31" +source = "registry+https://github.com/rust-lang/crates.io-index" @@ -324,12 +287,8 @@ index 0000000..a4a3c6e +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81" +dependencies = [ -+ "futures-channel", + "futures-core", -+ "futures-io", -+ "futures-sink", + "futures-task", -+ "memchr", + "pin-project-lite", + "pin-utils", + "slab", @@ -403,15 +362,15 @@ index 0000000..a4a3c6e + +[[package]] +name = "itoa" -+version = "1.0.15" ++version = "1.0.17" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "4a5f13b858c8d314ee3e8f639011f7ccefe71f97f96e50151fb991f267928e2c" ++checksum = "92ecc6618181def0457392ccd0ee51198e065e016d1d527a7ac1b6dc7c1f09d2" + +[[package]] +name = "js-sys" -+version = "0.3.82" ++version = "0.3.85" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "b011eec8cc36da2aab2d5cff675ec18454fad408585853910a202391cf9f8e65" ++checksum = "8c942ebf8e95485ca0d52d97da7c5a2c387d0e7f0ba4c35e93bfcaee045955b3" +dependencies = [ + "once_cell", + "wasm-bindgen", @@ -419,7 +378,7 @@ index 0000000..a4a3c6e + +[[package]] +name = "kryoptic" -+version = "1.3.1" ++version = "1.4.0" +dependencies = [ + "kryoptic-lib", + "ossl", @@ -427,7 +386,7 @@ index 0000000..a4a3c6e + +[[package]] +name = "kryoptic-lib" -+version = "1.3.1" ++version = "1.4.0" +dependencies = [ + "asn1", + "bimap", @@ -454,7 +413,7 @@ index 0000000..a4a3c6e + +[[package]] +name = "kryoptic-tools" -+version = "1.3.1" ++version = "1.4.0" +dependencies = [ + "clap", + "cryptoki", @@ -468,9 +427,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "libc" -+version = "0.2.177" ++version = "0.2.180" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "2874a2af47a2325c2001a6e6fad9b16a53b802102b528163885171cf92b15976" ++checksum = "bcc35a38544a891a5f7c865aca548a982ccb3b8650a5b06d0fd33a10283c56fc" + +[[package]] +name = "libloading" @@ -504,9 +463,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "log" -+version = "0.4.28" ++version = "0.4.29" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "34080505efa8e45a4b816c349525ebe327ceaa8559756f0356cba97ef3bf7432" ++checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897" + +[[package]] +name = "memchr" @@ -542,9 +501,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "num-conv" -+version = "0.1.0" ++version = "0.2.0" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "51d515d32fb182ee37cda2ccdcb92950d6a3c2893aa280e540671c2cd0f3b1d9" ++checksum = "cf97ec579c3c42f953ef76dbf8d55ac91fb219dde70e49aa4a6b7d74e9919050" + +[[package]] +name = "num-integer" @@ -572,7 +531,7 @@ index 0000000..a4a3c6e + +[[package]] +name = "ossl" -+version = "1.3.1" ++version = "1.4.0" +dependencies = [ + "bindgen", + "cfg-if", @@ -650,18 +609,18 @@ index 0000000..a4a3c6e + +[[package]] +name = "proc-macro2" -+version = "1.0.103" ++version = "1.0.106" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "5ee95bc4ef87b8d5ba32e8b7714ccc834865276eab0aed5c9958d00ec45f49e8" ++checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934" +dependencies = [ + "unicode-ident", +] + +[[package]] +name = "quick-xml" -+version = "0.38.3" ++version = "0.38.4" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "42a232e7487fc2ef313d96dde7948e7a3c05101870d8985e4fd8d26aedd27b89" ++checksum = "b66c2058c55a409d601666cffe35f04333cf1013010882cec174a7467cd4e21c" +dependencies = [ + "memchr", + "serde", @@ -669,9 +628,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "quote" -+version = "1.0.42" ++version = "1.0.44" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "a338cc41d27e6cc6dce6cefc13a0729dfbb81c262b1f519331575dd80ef3067f" ++checksum = "21b2ebcf727b7760c461f091f9f0f539b77b8e87f2fd88131e7f1b433b3cece4" +dependencies = [ + "proc-macro2", +] @@ -747,12 +706,6 @@ index 0000000..a4a3c6e +checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d" + +[[package]] -+name = "ryu" -+version = "1.0.20" -+source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "28d3b2b1366ec20994f1fd18c3c594f05c5dd4bc44d8bb0c1c632c8d6829481f" -+ -+[[package]] +name = "scc" +version = "2.4.0" +source = "registry+https://github.com/rust-lang/crates.io-index" @@ -814,33 +767,34 @@ index 0000000..a4a3c6e + +[[package]] +name = "serde_json" -+version = "1.0.145" ++version = "1.0.149" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "402a6f66d8c709116cf22f558eab210f5a50187f702eb4d7e5ef38d9a7f1c79c" ++checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86" +dependencies = [ + "itoa", + "memchr", -+ "ryu", + "serde", + "serde_core", ++ "zmij", +] + +[[package]] +name = "serde_spanned" -+version = "1.0.3" ++version = "1.0.4" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "e24345aa0fe688594e73770a5f6d1b216508b4f93484c0026d521acd30134392" ++checksum = "f8bbf91e5a4d6315eee45e704372590b30e260ee83af6639d64557f51b067776" +dependencies = [ + "serde_core", +] + +[[package]] +name = "serial_test" -+version = "3.2.0" ++version = "3.3.1" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "1b258109f244e1d6891bf1053a55d63a5cd4f8f4c30cf9a1280989f80e7a1fa9" ++checksum = "0d0b343e184fc3b7bb44dff0705fffcf4b3756ba6aff420dddd8b24ca145e555" +dependencies = [ -+ "futures", ++ "futures-executor", ++ "futures-util", + "log", + "once_cell", + "parking_lot", @@ -850,9 +804,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "serial_test_derive" -+version = "3.2.0" ++version = "3.3.1" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "5d69265a08751de7844521fd15003ae0a888e035773ba05695c5c759a6f89eef" ++checksum = "6f50427f258fb77356e4cd4aa0e87e2bd2c66dbcee41dc405282cae2bfc26c83" +dependencies = [ + "proc-macro2", + "quote", @@ -889,9 +843,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "syn" -+version = "2.0.110" ++version = "2.0.114" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "a99801b5bd34ede4cf3fc688c5919368fea4e4814a4664359503e6015b280aea" ++checksum = "d4d107df263a3013ef9b1879b0df87d706ff80f65a86ea879bd9c31f9b307c2a" +dependencies = [ + "proc-macro2", + "quote", @@ -900,30 +854,30 @@ index 0000000..a4a3c6e + +[[package]] +name = "time" -+version = "0.3.44" ++version = "0.3.46" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "91e7d9e3bb61134e77bde20dd4825b97c010155709965fedf0f49bb138e52a9d" ++checksum = "9da98b7d9b7dad93488a84b8248efc35352b0b2657397d4167e7ad67e5d535e5" +dependencies = [ + "deranged", + "itoa", + "num-conv", + "powerfmt", -+ "serde", ++ "serde_core", + "time-core", + "time-macros", +] + +[[package]] +name = "time-core" -+version = "0.1.6" ++version = "0.1.8" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "40868e7c1d2f0b8d73e4a8c7f0ff63af4f6d19be117e90bd73eb1d62cf831c6b" ++checksum = "7694e1cfe791f8d31026952abf09c69ca6f6fa4e1a1229e18988f06a04a12dca" + +[[package]] +name = "time-macros" -+version = "0.2.24" ++version = "0.2.26" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "30cfb0125f12d9c277f35663a0a33f8c30190f4e4574868a330595412d34ebf3" ++checksum = "78cc610bac2dcee56805c99642447d4c5dbde4d01f752ffea0199aee1f601dc4" +dependencies = [ + "num-conv", + "time-core", @@ -931,9 +885,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "toml" -+version = "0.9.8" ++version = "0.9.11+spec-1.1.0" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "f0dc8b1fb61449e27716ec0e1bdf0f6b8f3e8f6b05391e8497b8b6d7804ea6d8" ++checksum = "f3afc9a848309fe1aaffaed6e1546a7a14de1f935dc9d89d32afd9a44bab7c46" +dependencies = [ + "serde_core", + "serde_spanned", @@ -945,27 +899,27 @@ index 0000000..a4a3c6e + +[[package]] +name = "toml_datetime" -+version = "0.7.3" ++version = "0.7.5+spec-1.1.0" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "f2cdb639ebbc97961c51720f858597f7f24c4fc295327923af55b74c3c724533" ++checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347" +dependencies = [ + "serde_core", +] + +[[package]] +name = "toml_parser" -+version = "1.0.4" ++version = "1.0.6+spec-1.1.0" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "c0cbe268d35bdb4bb5a56a2de88d0ad0eb70af5384a99d648cd4b3d04039800e" ++checksum = "a3198b4b0a8e11f09dd03e133c0280504d0801269e9afa46362ffde1cbeebf44" +dependencies = [ + "winnow", +] + +[[package]] +name = "toml_writer" -+version = "1.0.4" ++version = "1.0.6+spec-1.1.0" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "df8b2b54733674ad286d16267dcfc7a71ed5c776e4ac7aa3c3e2561f7c637bf2" ++checksum = "ab16f14aed21ee8bfd8ec22513f7287cd4a91aa92e44edfe2c17ddd004e92607" + +[[package]] +name = "unicode-ident" @@ -975,9 +929,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "uuid" -+version = "1.18.1" ++version = "1.20.0" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "2f87b8aa10b915a06587d0dec516c282ff295b475d94abf425d62b57710070a2" ++checksum = "ee48d38b119b0cd71fe4141b30f5ba9c7c5d9f4e7a3a8b4a674e4b6ef789976f" +dependencies = [ + "getrandom", + "js-sys", @@ -1008,18 +962,18 @@ index 0000000..a4a3c6e + +[[package]] +name = "wasip2" -+version = "1.0.1+wasi-0.2.4" ++version = "1.0.2+wasi-0.2.9" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "0562428422c63773dad2c345a1882263bbf4d65cf3f42e90921f787ef5ad58e7" ++checksum = "9517f9239f02c069db75e65f174b3da828fe5f5b945c4dd26bd25d89c03ebcf5" +dependencies = [ + "wit-bindgen", +] + +[[package]] +name = "wasm-bindgen" -+version = "0.2.105" ++version = "0.2.108" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "da95793dfc411fbbd93f5be7715b0578ec61fe87cb1a42b12eb625caa5c5ea60" ++checksum = "64024a30ec1e37399cf85a7ffefebdb72205ca1c972291c51512360d90bd8566" +dependencies = [ + "cfg-if", + "once_cell", @@ -1030,9 +984,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "wasm-bindgen-macro" -+version = "0.2.105" ++version = "0.2.108" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "04264334509e04a7bf8690f2384ef5265f05143a4bff3889ab7a3269adab59c2" ++checksum = "008b239d9c740232e71bd39e8ef6429d27097518b6b30bdf9086833bd5b6d608" +dependencies = [ + "quote", + "wasm-bindgen-macro-support", @@ -1040,9 +994,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "wasm-bindgen-macro-support" -+version = "0.2.105" ++version = "0.2.108" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "420bc339d9f322e562942d52e115d57e950d12d88983a14c79b86859ee6c7ebc" ++checksum = "5256bae2d58f54820e6490f9839c49780dff84c65aeab9e772f15d5f0e913a55" +dependencies = [ + "bumpalo", + "proc-macro2", @@ -1053,9 +1007,9 @@ index 0000000..a4a3c6e + +[[package]] +name = "wasm-bindgen-shared" -+version = "0.2.105" ++version = "0.2.108" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "76f218a38c84bcb33c25ec7059b07847d465ce0e0a76b995e134a45adcb6af76" ++checksum = "1f01b580c9ac74c8d8f0c0e4afb04eeef2acf145458e52c03845ee9cd23e3d12" +dependencies = [ + "unicode-ident", +] @@ -1068,30 +1022,30 @@ index 0000000..a4a3c6e + +[[package]] +name = "winnow" -+version = "0.7.13" ++version = "0.7.14" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "21a0236b59786fed61e2a80582dd500fe61f18b5dca67a4a067d0bc9039339cf" ++checksum = "5a5364e9d77fcdeeaa6062ced926ee3381faa2ee02d3eb83a5c27a8825540829" + +[[package]] +name = "wit-bindgen" -+version = "0.46.0" ++version = "0.51.0" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "f17a85883d4e6d00e8a97c586de764dabcc06133f7f1d55dce5cdc070ad7fe59" ++checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5" + +[[package]] +name = "zerocopy" -+version = "0.8.27" ++version = "0.8.33" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "0894878a5fa3edfd6da3f88c4805f4c8558e2b996227a3d864f47fe11e38282c" ++checksum = "668f5168d10b9ee831de31933dc111a459c97ec93225beb307aed970d1372dfd" +dependencies = [ + "zerocopy-derive", +] + +[[package]] +name = "zerocopy-derive" -+version = "0.8.27" ++version = "0.8.33" +source = "registry+https://github.com/rust-lang/crates.io-index" -+checksum = "88d2b8d9c68ad2b9e4340d7832716a4d21a22a1154777ad56ea55c51a9cf3831" ++checksum = "2c7962b26b0a8685668b671ee4b54d007a67d4eaf05fda79ac0ecf41e32270f1" +dependencies = [ + "proc-macro2", + "quote", @@ -1103,6 +1057,12 @@ index 0000000..a4a3c6e +version = "1.8.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0" ++ ++[[package]] ++name = "zmij" ++version = "1.0.17" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "02aae0f83f69aafc94776e879363e9771d7ecbffe2c7fbb6c14c5e00dfe88439" -- 2.50.1 diff --git a/pkgs/by-name/kr/kryoptic/package.nix b/pkgs/by-name/kr/kryoptic/package.nix index b18fc723e570..c3d23ad99f7e 100644 --- a/pkgs/by-name/kr/kryoptic/package.nix +++ b/pkgs/by-name/kr/kryoptic/package.nix @@ -1,5 +1,7 @@ { lib, + stdenv, + fetchpatch, rustPlatform, fetchFromGitHub, nix-update-script, @@ -8,35 +10,32 @@ openssl, pkg-config, sqlite, - fips ? false, + withPostQuantum ? true, }: rustPlatform.buildRustPackage (finalPackage: { pname = "kryoptic"; - version = "1.3.1"; + version = "1.4.0"; src = fetchFromGitHub { owner = "latchset"; repo = "kryoptic"; tag = "v${finalPackage.version}"; - hash = "sha256-EzWZQLAtO7ZR28aOSfwXQOyHbL8Ss75dCxVnPkJIEbw="; + hash = "sha256-tP2BZkGCZqfLNLZ/mYAVkICWKTM1EbL7lbw+Mnx4VTk="; }; - postPatch = - let - # Creates an -I command line for overriding an include. - inc = name: ''format!("-I{}", env!("${name}_INCLUDE")).as_str()''; - fipsArgs = lib.optionalString fips ''"-D_KRYOPTIC_FIPS"''; - in - '' - substituteInPlace ossl/build.rs \ - --replace-fail 'ossl_bindings(&["-std=c90"], out_file)' 'ossl_bindings(&["-std=c90", ${inc "OPENSSL"}, ${inc "LIBC"}, ${fipsArgs}], out_file)' - ''; + patches = [ + # Support additional arguments for bindgen so it can find our glibc. + # https://github.com/latchset/kryoptic/pull/386 + (fetchpatch { + url = "https://github.com/latchset/kryoptic/commit/54b3deeb4eb84ebd7c5b52ccb9401e319fb00294.patch"; + hash = "sha256-QChVS/MnsGp6To4OWYA8Se6kgRCGABchLLnSHfrEj1E="; + }) + ]; env = { # Pass these include paths for bindgen in via the environment. - OPENSSL_INCLUDE = "${lib.getInclude openssl}/include"; - LIBC_INCLUDE = "${lib.getInclude glibc}/include"; + OSSL_BINDGEN_CLANG_ARGS = "-I${lib.getInclude glibc}/include"; LIBCLANG_PATH = "${lib.getLib clang.cc}/lib"; }; @@ -47,24 +46,28 @@ rustPlatform.buildRustPackage (finalPackage: { sqlite ]; - cargoPatches = [ ./cargo-lock.patch ]; + cargoPatches = [ + ./0001-Add-Cargo.lock.patch + ]; - cargoHash = "sha256-NWtL1ZzxGqTn8SS4XitOYJvGRYA/j52f14oul4ZPoyw="; + cargoHash = "sha256-eekiW9HCKwx7/y2WSqQH6adgAeAnQojM3QcNTc3kx2I="; cargoBuildFlags = [ "--no-default-features" "--features=${ lib.concatStringsSep "," ( [ - (if fips then "fips" else "standard") - "dynamic" # dynamic linking + "standard" "sqlitedb" "nssdb" "log" ] - ++ lib.optionals (!fips) [ + ++ lib.optionals withPostQuantum [ "pqc" # post-quantum ] + ++ lib.optionals (!stdenv.hostPlatform.isStatic) [ + "dynamic" + ] ) }" ]; From c4f80ff160aadce7f740bbf96d0686c18d933b5b Mon Sep 17 00:00:00 2001 From: Graham Bennett Date: Tue, 27 Jan 2026 02:51:12 +0000 Subject: [PATCH 43/75] opencode: 1.1.30 -> 1.1.36 --- pkgs/by-name/op/opencode/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/op/opencode/package.nix b/pkgs/by-name/op/opencode/package.nix index cf24dc98c613..75b0f26c0230 100644 --- a/pkgs/by-name/op/opencode/package.nix +++ b/pkgs/by-name/op/opencode/package.nix @@ -14,12 +14,12 @@ }: stdenvNoCC.mkDerivation (finalAttrs: { pname = "opencode"; - version = "1.1.30"; + version = "1.1.36"; src = fetchFromGitHub { owner = "anomalyco"; repo = "opencode"; tag = "v${finalAttrs.version}"; - hash = "sha256-RTj64yrVLTFNpVc8MvPAJISOlBo/j2MnuL5jo4VtKWM="; + hash = "sha256-ovFGFI2dSZLKSeuanRZg9cNvMCxYnS3UbtaCKls5BYQ="; }; node_modules = stdenvNoCC.mkDerivation { @@ -68,7 +68,7 @@ stdenvNoCC.mkDerivation (finalAttrs: { # NOTE: Required else we get errors that our fixed-output derivation references store paths dontFixup = true; - outputHash = "sha256-37pmIiJzPEWeA7+5u5lz39vlFPI+N13Qw9weHrAaGW4="; + outputHash = "sha256-MPzEzyx+Av0sa6EU3ewjUSwAOyA+GJGfvEoROYqZjkM="; outputHashAlgo = "sha256"; outputHashMode = "recursive"; }; From 61cc80c863a19713e07d7041878e573d3c5b72a7 Mon Sep 17 00:00:00 2001 From: Samuel Dionne-Riel Date: Mon, 26 Jan 2026 19:38:06 -0500 Subject: [PATCH 44/75] flake.nix: exclude armv7l-linux and powerpc64le-linux from checks, devShells and formatter Otherwise, like with db1b484d986440256b32c898dd44985bf98401c0, the `nix flake check` checks fail. Same story as in ccb779782ccb471954971697fcdf1c2331cd906b for devShells. Though here `nix flake check` is how I noticed the issue. --- flake.nix | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/flake.nix b/flake.nix index 1bac7569d3ea..beced0fef048 100644 --- a/flake.nix +++ b/flake.nix @@ -116,6 +116,10 @@ && !self.legacyPackages.${system}.stdenv.targetPlatform.isPower64 # Exclude armv6l-linux because "cannot bootstrap GHC on this platform ('armv6l-linux' with libc 'defaultLibc')" && system != "armv6l-linux" + # Exclude armv7l-linux because "cannot bootstrap GHC on this platform ('armv7l-linux' with libc 'defaultLibc')" + && system != "armv7l-linux" + # Exclude powerpc64le-linux because "cannot bootstrap GHC on this platform ('powerpc64le-linux' with libc 'defaultLibc')" + && system != "powerpc64le-linux" # Exclude riscv64-linux because "cannot bootstrap GHC on this platform ('riscv64-linux' with libc 'defaultLibc')" && system != "riscv64-linux" ) @@ -165,6 +169,10 @@ ( # Exclude armv6l-linux because "Package ‘ghc-9.6.6’ in .../pkgs/development/compilers/ghc/common-hadrian.nix:579 is not available on the requested hostPlatform" system != "armv6l-linux" + # Exclude armv7l-linux because "cannot bootstrap GHC on this platform ('armv7l-linux' with libc 'defaultLibc')" + && system != "armv7l-linux" + # Exclude powerpc64le-linux because "cannot bootstrap GHC on this platform ('powerpc64le-linux' with libc 'defaultLibc')" + && system != "powerpc64le-linux" # Exclude riscv64-linux because "Package ‘ghc-9.6.6’ in .../pkgs/development/compilers/ghc/common-hadrian.nix:579 is not available on the requested hostPlatform" && system != "riscv64-linux" # Exclude x86_64-freebsd because "Package ‘ghc-9.6.6’ in .../pkgs/development/compilers/ghc/common-hadrian.nix:579 is not available on the requested hostPlatform" @@ -182,6 +190,10 @@ system: _: # Exclude armv6l-linux because "cannot bootstrap GHC on this platform ('armv6l-linux' with libc 'defaultLibc')" system != "armv6l-linux" + # Exclude armv7l-linux because "cannot bootstrap GHC on this platform ('armv7l-linux' with libc 'defaultLibc')" + && system != "armv7l-linux" + # Exclude powerpc64le-linux because "cannot bootstrap GHC on this platform ('powerpc64le-linux' with libc 'defaultLibc')" + && system != "powerpc64le-linux" # Exclude riscv64-linux because "cannot bootstrap GHC on this platform ('riscv64-linux' with libc 'defaultLibc')" && system != "riscv64-linux" # Exclude x86_64-freebsd because "Package ‘go-1.22.12-freebsd-amd64-bootstrap’ in /nix/store/0yw40qnrar3lvc5hax5n49abl57apjbn-source/pkgs/development/compilers/go/binary.nix:50 is not available on the requested hostPlatform" From 8eb630b8f489dcad30afeb0a3ae089056e50572c Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Tue, 27 Jan 2026 04:21:35 +0000 Subject: [PATCH 45/75] home-assistant-custom-lovelace-modules.universal-remote-card: 4.9.5 -> 4.9.7 --- .../universal-remote-card/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/servers/home-assistant/custom-lovelace-modules/universal-remote-card/package.nix b/pkgs/servers/home-assistant/custom-lovelace-modules/universal-remote-card/package.nix index de22d3c86057..5be97d77376e 100644 --- a/pkgs/servers/home-assistant/custom-lovelace-modules/universal-remote-card/package.nix +++ b/pkgs/servers/home-assistant/custom-lovelace-modules/universal-remote-card/package.nix @@ -6,16 +6,16 @@ buildNpmPackage rec { pname = "universal-remote-card"; - version = "4.9.5"; + version = "4.9.7"; src = fetchFromGitHub { owner = "Nerwyn"; repo = "android-tv-card"; rev = version; - hash = "sha256-0odR9ZCXS8vovQTX81U2PL1i45ftijJ/WRWk00DBWXc="; + hash = "sha256-vEQtpoafjMCkpeOnfPa1u5pDo34LapLkRFUoblZ5ntg="; }; - npmDepsHash = "sha256-Z9u7fNd9XB41HiD0MuMy9xjq3mROSYp1sTRyJ0Rf9xw="; + npmDepsHash = "sha256-iTyiPtzKld8Lx1k2GtZ4rwPl79OgHf4bMbAkAeD/8uY="; installPhase = '' runHook preInstall From bf10bcd3d27274185776e4b55abc29faa03bec78 Mon Sep 17 00:00:00 2001 From: Colin Date: Tue, 27 Jan 2026 06:10:49 +0000 Subject: [PATCH 46/75] xfsprogs: remove `broken = stdenv.hostPlatform.isMusl` `nix-build -A pkgsMusl.xfsprogs` succeeds on x86_64-linux build machine. --- pkgs/by-name/xf/xfsprogs/package.nix | 3 --- 1 file changed, 3 deletions(-) diff --git a/pkgs/by-name/xf/xfsprogs/package.nix b/pkgs/by-name/xf/xfsprogs/package.nix index 5215bb23ba86..d05b83e9280c 100644 --- a/pkgs/by-name/xf/xfsprogs/package.nix +++ b/pkgs/by-name/xf/xfsprogs/package.nix @@ -106,8 +106,5 @@ stdenv.mkDerivation rec { dezgeg ajs124 ]; - # error: ‘struct statx’ has no member named ‘stx_atomic_write_unit_min’ ‘stx_atomic_write_unit_max’ ‘stx_atomic_write_segments_max’ - # remove if https://www.openwall.com/lists/musl/2024/10/23/6 gets merged - broken = stdenv.hostPlatform.isMusl; }; } From 941b9da928eb333e8063b772a6906841edb62459 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Tue, 27 Jan 2026 08:07:09 +0000 Subject: [PATCH 47/75] otree: 0.6.3 -> 0.6.4 --- pkgs/by-name/ot/otree/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/ot/otree/package.nix b/pkgs/by-name/ot/otree/package.nix index 50731694d28a..4741ac51f266 100644 --- a/pkgs/by-name/ot/otree/package.nix +++ b/pkgs/by-name/ot/otree/package.nix @@ -6,16 +6,16 @@ rustPlatform.buildRustPackage rec { pname = "otree"; - version = "0.6.3"; + version = "0.6.4"; src = fetchFromGitHub { owner = "fioncat"; repo = "otree"; tag = "v${version}"; - hash = "sha256-l2hU1a2yfXo8u8wjSmvzL+nzniMQFKvdBhQ0eqqG3tg="; + hash = "sha256-7Yv8krhtA+YAbJmF/bxgWb6NZBzg/fubxkzDEeOw4xU="; }; - cargoHash = "sha256-UyomqesHDaGDEBHVcQMwUI7kH8akOOuyXOL/r4gfiAo="; + cargoHash = "sha256-Op0IIH1whnBWP5Z5LLygdiWpysC/JZJEKX6OLHQAsWo="; meta = { description = "Command line tool to view objects (JSON/YAML/TOML/XML) in TUI tree widget"; From be660652758d4fed9607dd3cc5520ad9a8ffb626 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 11:40:18 +0100 Subject: [PATCH 48/75] python313Packages.iamdata: 0.1.202601261 -> 0.1.202601271 Diff: https://github.com/cloud-copilot/iam-data-python/compare/v0.1.202601261...v0.1.202601271 Changelog: https://github.com/cloud-copilot/iam-data-python/releases/tag/v0.1.202601271 --- pkgs/development/python-modules/iamdata/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/iamdata/default.nix b/pkgs/development/python-modules/iamdata/default.nix index da49be1fef1d..8eef3ec95d97 100644 --- a/pkgs/development/python-modules/iamdata/default.nix +++ b/pkgs/development/python-modules/iamdata/default.nix @@ -8,14 +8,14 @@ buildPythonPackage (finalAttrs: { pname = "iamdata"; - version = "0.1.202601261"; + version = "0.1.202601271"; pyproject = true; src = fetchFromGitHub { owner = "cloud-copilot"; repo = "iam-data-python"; tag = "v${finalAttrs.version}"; - hash = "sha256-vjCyMNTaXALc5wecg6YO3kg5fdYfZ8tAWa0LrmoiOTE="; + hash = "sha256-bOnbWxSV3Aoukh403YS61SCkIsjp20cVpSOXcsQQj6U="; }; __darwinAllowLocalNetworking = true; From ea4da8501fa81a3b9c86acf8ad138ed1e2d8177b Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 11:42:27 +0100 Subject: [PATCH 49/75] python313Packages.tencentcloud-sdk-python: 3.1.37 -> 3.1.38 Diff: https://github.com/TencentCloud/tencentcloud-sdk-python/compare/3.1.37...3.1.38 Changelog: https://github.com/TencentCloud/tencentcloud-sdk-python/blob/3.1.38/CHANGELOG.md --- .../python-modules/tencentcloud-sdk-python/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix b/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix index 3fae6f8903a9..a83ed24524df 100644 --- a/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix +++ b/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix @@ -9,14 +9,14 @@ buildPythonPackage (finalAttrs: { pname = "tencentcloud-sdk-python"; - version = "3.1.37"; + version = "3.1.38"; pyproject = true; src = fetchFromGitHub { owner = "TencentCloud"; repo = "tencentcloud-sdk-python"; tag = finalAttrs.version; - hash = "sha256-gtvmqQzKXwChwTyh0iOnZwVArNOHUuzAlT6hKRPfckU="; + hash = "sha256-YwCouaDX41sKJ45O5a1gGuXBKdEpZ+UVOVn1F2VtKd8="; }; build-system = [ setuptools ]; From d1691b3815e75487cba1da598a367765aca97697 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 11:43:05 +0100 Subject: [PATCH 50/75] python313Packages.model-bakery: 1.23.0 -> 1.23.2 Diff: https://github.com/model-bakers/model_bakery/compare/1.23.0...1.23.2 Changelog: https://github.com/model-bakers/model_bakery/blob/1.23.2/CHANGELOG.md --- pkgs/development/python-modules/model-bakery/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/model-bakery/default.nix b/pkgs/development/python-modules/model-bakery/default.nix index f0a231d9bb41..254d91613461 100644 --- a/pkgs/development/python-modules/model-bakery/default.nix +++ b/pkgs/development/python-modules/model-bakery/default.nix @@ -10,14 +10,14 @@ buildPythonPackage (finalAttrs: { pname = "model-bakery"; - version = "1.23.0"; + version = "1.23.2"; pyproject = true; src = fetchFromGitHub { owner = "model-bakers"; repo = "model_bakery"; tag = finalAttrs.version; - hash = "sha256-AwdHsysCaxSS6+dH1gO7dyV2Q4PIA84Mc810KNrqP/g="; + hash = "sha256-7RMFbUFYUJI8gI5GVQ6kivjb6oeHGKzYbyTukMjK+8Q="; }; postPatch = '' From 82fe97d3af050cbf891b75c1cba3108d0f386cc5 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 11:44:38 +0100 Subject: [PATCH 51/75] python314Packages.ukkonen: 1.0.1 -> 1.1.0 Diff: https://github.com/asottile/ukkonen/compare/v1.0.1...v1.1.0 --- pkgs/development/python-modules/ukkonen/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/ukkonen/default.nix b/pkgs/development/python-modules/ukkonen/default.nix index 4de244797b59..a4b88fd70cf9 100644 --- a/pkgs/development/python-modules/ukkonen/default.nix +++ b/pkgs/development/python-modules/ukkonen/default.nix @@ -8,14 +8,14 @@ buildPythonPackage rec { pname = "ukkonen"; - version = "1.0.1"; + version = "1.1.0"; format = "setuptools"; src = fetchFromGitHub { owner = "asottile"; repo = "ukkonen"; rev = "v${version}"; - sha256 = "jG6VP/P5sadrdrmneH36/ExSld9blyMAAG963QS9+p0="; + sha256 = "sha256-vXyOLAiY92Df7g57quiSnOz8yhaIsm8MTB6Fbiv6axQ="; }; nativeBuildInputs = [ cffi ]; From 254b59858b2982e512b4978cdef4f1b1585608b4 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 11:49:07 +0100 Subject: [PATCH 52/75] python314Packages.alibabacloud-credentials: 1.0.4 -> 1.0.7 --- .../python-modules/alibabacloud-credentials/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/alibabacloud-credentials/default.nix b/pkgs/development/python-modules/alibabacloud-credentials/default.nix index c4ae9ef1490f..11410f42a8f3 100644 --- a/pkgs/development/python-modules/alibabacloud-credentials/default.nix +++ b/pkgs/development/python-modules/alibabacloud-credentials/default.nix @@ -11,13 +11,13 @@ buildPythonPackage rec { pname = "alibabacloud-credentials"; - version = "1.0.4"; + version = "1.0.7"; pyproject = true; src = fetchPypi { pname = "alibabacloud_credentials"; inherit version; - hash = "sha256-K3GrMHRSZ6vVJNZPvgY/fgJknaKrbarx7sBXM7f5yPE="; + hash = "sha256-gEKCgLS8+VRh1B0UkKIjYLi2fRgpvx6zj3T6vMaT8bM="; }; build-system = [ setuptools ]; From 0629d6711cae742e12c64fddb749d790233d4e37 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 11:51:03 +0100 Subject: [PATCH 53/75] python314Packages.aiovodafone: 3.0.0 -> 3.1.1 Changelog: https://github.com/chemelli74/aiovodafone/blob/v3.1.1/CHANGELOG.md --- .../python-modules/aiovodafone/default.nix | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/pkgs/development/python-modules/aiovodafone/default.nix b/pkgs/development/python-modules/aiovodafone/default.nix index 1d804579bae1..140587f11e46 100644 --- a/pkgs/development/python-modules/aiovodafone/default.nix +++ b/pkgs/development/python-modules/aiovodafone/default.nix @@ -8,23 +8,22 @@ fetchFromGitHub, orjson, poetry-core, + pycryptodome, pytest-cov-stub, pytestCheckHook, - pythonOlder, + segno, }: buildPythonPackage rec { pname = "aiovodafone"; - version = "3.0.0"; + version = "3.1.1"; pyproject = true; - disabled = pythonOlder "3.12"; - src = fetchFromGitHub { owner = "chemelli74"; repo = "aiovodafone"; tag = "v${version}"; - hash = "sha256-JeMB7K2NURvMPgCZRNAFt9ThIu4LDq3WlmAXsgm1CKs="; + hash = "sha256-NhtclSuwiEuGAA/zhKEL/5S/WTFTjo87BTQPuSVX0sE="; }; build-system = [ poetry-core ]; @@ -32,9 +31,11 @@ buildPythonPackage rec { dependencies = [ aiohttp beautifulsoup4 - cryptography colorlog + cryptography orjson + pycryptodome + segno ]; nativeCheckInputs = [ From f7709810bf556d8e9d793e93c49e6219501d8fd1 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 20 Jan 2026 12:12:47 +0100 Subject: [PATCH 54/75] python313Packages.cpe-search: 0.1.7 -> 0.1.9 Changelog: https://github.com/ra1nb0rn/cpe_search/blob/v0.1.9/CHANGELOG.md --- pkgs/development/python-modules/cpe-search/default.nix | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/cpe-search/default.nix b/pkgs/development/python-modules/cpe-search/default.nix index d514f42e084c..68e4de6a14f8 100644 --- a/pkgs/development/python-modules/cpe-search/default.nix +++ b/pkgs/development/python-modules/cpe-search/default.nix @@ -7,19 +7,20 @@ hatchling, mariadb, requests, + tqdm, ujson, }: buildPythonPackage rec { pname = "cpe-search"; - version = "0.1.7"; + version = "0.1.9"; pyproject = true; src = fetchFromGitHub { owner = "ra1nb0rn"; repo = "cpe_search"; tag = "v${version}"; - hash = "sha256-gCWKVSVDJNspRwDzHi7+vUETGErWYs3jlpsqkOqSY4I="; + hash = "sha256-Joo95w5fql9dkBe+tz6MfOWEp1dbJEv6gBdv4HgGq/w="; }; build-system = [ hatchling ]; @@ -28,6 +29,7 @@ buildPythonPackage rec { aiohttp aiolimiter requests + tqdm ujson ]; @@ -37,6 +39,7 @@ buildPythonPackage rec { aiolimiter mariadb requests + tqdm ujson ]; mariadb = [ From b4a328118e752e10291d7c94522b8a868c8f18cd Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 20 Jan 2026 12:15:01 +0100 Subject: [PATCH 55/75] python313Packages.cpe-search: migrate to finalAttrs --- pkgs/development/python-modules/cpe-search/default.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/development/python-modules/cpe-search/default.nix b/pkgs/development/python-modules/cpe-search/default.nix index 68e4de6a14f8..df10e7699d35 100644 --- a/pkgs/development/python-modules/cpe-search/default.nix +++ b/pkgs/development/python-modules/cpe-search/default.nix @@ -11,7 +11,7 @@ ujson, }: -buildPythonPackage rec { +buildPythonPackage (finalAttrs: { pname = "cpe-search"; version = "0.1.9"; pyproject = true; @@ -19,7 +19,7 @@ buildPythonPackage rec { src = fetchFromGitHub { owner = "ra1nb0rn"; repo = "cpe_search"; - tag = "v${version}"; + tag = "v${finalAttrs.version}"; hash = "sha256-Joo95w5fql9dkBe+tz6MfOWEp1dbJEv6gBdv4HgGq/w="; }; @@ -55,8 +55,8 @@ buildPythonPackage rec { meta = { description = "Search for Common Platform Enumeration (CPE) strings using software names and titles"; homepage = "https://github.com/ra1nb0rn/cpe_search"; - changelog = "https://github.com/ra1nb0rn/cpe_search/blob/${src.tag}/CHANGELOG.md"; + changelog = "https://github.com/ra1nb0rn/cpe_search/blob/${finalAttrs.src.tag}/CHANGELOG.md"; license = lib.licenses.mit; maintainers = with lib.maintainers; [ fab ]; }; -} +}) From a377849c20adca9a377d50ac5de2f736a59a3ccb Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 11:52:16 +0100 Subject: [PATCH 56/75] python314Packages.cpe-search: 0.1.9 -> 0.2.4 Diff: https://github.com/ra1nb0rn/cpe_search/compare/v0.1.9...v0.2.4 Changelog: https://github.com/ra1nb0rn/cpe_search/blob/v0.2.4/CHANGELOG.md --- pkgs/development/python-modules/cpe-search/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/cpe-search/default.nix b/pkgs/development/python-modules/cpe-search/default.nix index df10e7699d35..030cd7613c0d 100644 --- a/pkgs/development/python-modules/cpe-search/default.nix +++ b/pkgs/development/python-modules/cpe-search/default.nix @@ -13,14 +13,14 @@ buildPythonPackage (finalAttrs: { pname = "cpe-search"; - version = "0.1.9"; + version = "0.2.4"; pyproject = true; src = fetchFromGitHub { owner = "ra1nb0rn"; repo = "cpe_search"; tag = "v${finalAttrs.version}"; - hash = "sha256-Joo95w5fql9dkBe+tz6MfOWEp1dbJEv6gBdv4HgGq/w="; + hash = "sha256-wnUKLJUUj3idQLv3FSpcUZksa0FvwMxKDId6/hjpEZw="; }; build-system = [ hatchling ]; From a41d52a8d41b43ce9f463e547a7a575f21c685e9 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 11:52:59 +0100 Subject: [PATCH 57/75] python314Packages.pydexcom: 0.5.0 -> 0.5.1 Diff: https://github.com/gagebenne/pydexcom/compare/0.5.0...0.5.1 Changelog: https://github.com/gagebenne/pydexcom/releases/tag/0.5.1 --- pkgs/development/python-modules/pydexcom/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/pydexcom/default.nix b/pkgs/development/python-modules/pydexcom/default.nix index da88fad14d0e..26ca55ddf32c 100644 --- a/pkgs/development/python-modules/pydexcom/default.nix +++ b/pkgs/development/python-modules/pydexcom/default.nix @@ -9,14 +9,14 @@ buildPythonPackage rec { pname = "pydexcom"; - version = "0.5.0"; + version = "0.5.1"; pyproject = true; src = fetchFromGitHub { owner = "gagebenne"; repo = "pydexcom"; tag = version; - hash = "sha256-IqSZZHe5epcgO2uoIsGkNaac3+UplHzqEcFWTzwAqPg="; + hash = "sha256-u94OI45PmofPLpuJUpjbvGLla+mJEHy1t6/4fiI6+zc="; }; build-system = [ From 53e484348ccfa9db86226cc871ff9595c62ebc1d Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 11:56:17 +0100 Subject: [PATCH 58/75] python314Packages.pykoplenti: 1.4.0 -> 1.5.0 Changelog: https://github.com/stegm/pykoplenti/releases/tag/v1.5.0 --- .../python-modules/pykoplenti/default.nix | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/pkgs/development/python-modules/pykoplenti/default.nix b/pkgs/development/python-modules/pykoplenti/default.nix index 80d6c0069c76..0555af5ec433 100644 --- a/pkgs/development/python-modules/pykoplenti/default.nix +++ b/pkgs/development/python-modules/pykoplenti/default.nix @@ -7,28 +7,26 @@ prompt-toolkit, pycryptodome, pydantic, - setuptools, + hatchling, }: buildPythonPackage rec { pname = "pykoplenti"; - version = "1.4.0"; + version = "1.5.0"; pyproject = true; src = fetchFromGitHub { owner = "stegm"; repo = "pykoplenti"; tag = "v${version}"; - hash = "sha256-vsqbjNj5x7X0VGbTq+CdZ9rPXVDypBkgaCI6MImloLo="; + hash = "sha256-Mwh6QOdsvf32U09ebleEKL7vt3xz8tjiftVVxKL/lO4="; }; pythonRelaxDeps = [ "pydantic" ]; - nativeBuildInputs = [ - setuptools - ]; + build-system = [ hatchling ]; - propagatedBuildInputs = [ + dependencies = [ aiohttp pycryptodome pydantic @@ -48,10 +46,10 @@ buildPythonPackage rec { meta = { description = "Python REST client API for Kostal Plenticore Inverters"; - mainProgram = "pykoplenti"; homepage = "https://github.com/stegm/pykoplenti/"; changelog = "https://github.com/stegm/pykoplenti/releases/tag/v${version}"; - license = with lib.licenses; [ asl20 ]; + license = lib.licenses.asl20; maintainers = with lib.maintainers; [ fab ]; + mainProgram = "pykoplenti"; }; } From b48142c7f377aad38d9e9470bd66992542ed4062 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 11:57:12 +0100 Subject: [PATCH 59/75] python314Packages.pyvlx: 0.2.27 -> 0.2.28 Diff: https://github.com/Julius2342/pyvlx/compare/0.2.27...0.2.28 Changelog: https://github.com/Julius2342/pyvlx/releases/tag/0.2.28 --- pkgs/development/python-modules/pyvlx/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/pyvlx/default.nix b/pkgs/development/python-modules/pyvlx/default.nix index 1dcc98be36bc..f5592765f4f4 100644 --- a/pkgs/development/python-modules/pyvlx/default.nix +++ b/pkgs/development/python-modules/pyvlx/default.nix @@ -11,14 +11,14 @@ buildPythonPackage rec { pname = "pyvlx"; - version = "0.2.27"; + version = "0.2.28"; pyproject = true; src = fetchFromGitHub { owner = "Julius2342"; repo = "pyvlx"; tag = version; - hash = "sha256-FOchtl3HDByHIBRh0MXYnQYh6opzkcHOOYaINmMPu7w="; + hash = "sha256-l+Yfp8s6x+l/1ssL0wgyzd8QbA4ikr+ZUVMdTEaIjYE="; }; build-system = [ setuptools ]; From 570b1f281073c377e69af0b97d75aa59249837e1 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 11:58:58 +0100 Subject: [PATCH 60/75] python314Packages.pykoplenti: migrate to finalAttrs --- pkgs/development/python-modules/pykoplenti/default.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/development/python-modules/pykoplenti/default.nix b/pkgs/development/python-modules/pykoplenti/default.nix index 0555af5ec433..bfb63d93e269 100644 --- a/pkgs/development/python-modules/pykoplenti/default.nix +++ b/pkgs/development/python-modules/pykoplenti/default.nix @@ -10,7 +10,7 @@ hatchling, }: -buildPythonPackage rec { +buildPythonPackage (finalAttrs: { pname = "pykoplenti"; version = "1.5.0"; pyproject = true; @@ -18,7 +18,7 @@ buildPythonPackage rec { src = fetchFromGitHub { owner = "stegm"; repo = "pykoplenti"; - tag = "v${version}"; + tag = "v${finalAttrs.version}"; hash = "sha256-Mwh6QOdsvf32U09ebleEKL7vt3xz8tjiftVVxKL/lO4="; }; @@ -47,9 +47,9 @@ buildPythonPackage rec { meta = { description = "Python REST client API for Kostal Plenticore Inverters"; homepage = "https://github.com/stegm/pykoplenti/"; - changelog = "https://github.com/stegm/pykoplenti/releases/tag/v${version}"; + changelog = "https://github.com/stegm/pykoplenti/releases/tag/${finalAttrs.src.tag}"; license = lib.licenses.asl20; maintainers = with lib.maintainers; [ fab ]; mainProgram = "pykoplenti"; }; -} +}) From 540a4518f365f9448622d7c02a377231dbb76876 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:09:01 +0100 Subject: [PATCH 61/75] checkov: 3.2.497 -> 3.2.499 Diff: https://github.com/bridgecrewio/checkov/compare/3.2.497...3.2.499 Changelog: https://github.com/bridgecrewio/checkov/releases/tag/3.2.499 --- pkgs/by-name/ch/checkov/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/ch/checkov/package.nix b/pkgs/by-name/ch/checkov/package.nix index 1165899352d9..5feee2664fa6 100644 --- a/pkgs/by-name/ch/checkov/package.nix +++ b/pkgs/by-name/ch/checkov/package.nix @@ -37,14 +37,14 @@ with py.pkgs; python3.pkgs.buildPythonApplication rec { pname = "checkov"; - version = "3.2.497"; + version = "3.2.499"; pyproject = true; src = fetchFromGitHub { owner = "bridgecrewio"; repo = "checkov"; tag = version; - hash = "sha256-aovAkxEqNYkYczbUvf/Ei2FJVSstk8XdHWnzAq2ydUw="; + hash = "sha256-1jb+ot8m7MS+BvXL7QakBHoViEmk+eORVmlmBJDfAtM="; }; pythonRelaxDeps = [ From 5dc3e871298560be9c1c84ab01fd7ae708ca6392 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:14:57 +0100 Subject: [PATCH 62/75] python314Packages.appthreat-vulnerability-db: 6.5.1 -> 6.6.0 Changelog: https://github.com/AppThreat/vulnerability-db/releases/tag/v6.6.0 --- .../appthreat-vulnerability-db/default.nix | 23 +++++++++++++++---- 1 file changed, 18 insertions(+), 5 deletions(-) diff --git a/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix b/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix index 04ed03667916..44b3486595fc 100644 --- a/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix +++ b/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix @@ -7,11 +7,13 @@ fetchFromGitHub, httpx, msgpack, + oras, orjson, packageurl-python, pydantic, - pytestCheckHook, pytest-cov-stub, + pytestCheckHook, + pyyaml, rich, semver, setuptools, @@ -21,14 +23,14 @@ buildPythonPackage rec { pname = "appthreat-vulnerability-db"; - version = "6.5.1"; + version = "6.6.0"; pyproject = true; src = fetchFromGitHub { owner = "AppThreat"; repo = "vulnerability-db"; tag = "v${version}"; - hash = "sha256-SyUTDWi9t37Gw8qn7vCpW+l5jBAXFH5b/VACrFhgsRU="; + hash = "sha256-/tcfHEvTdk0B/vfcqqkTn9kGT3QIPLWW4l01fjnrhqE="; }; pythonRelaxDeps = [ @@ -51,13 +53,24 @@ buildPythonPackage rec { semver tabulate ] - ++ httpx.optional-dependencies.http2; + ++ httpx.optional-dependencies.http2 + ++ pydantic.optional-dependencies.email; + + optional-dependencies = { + all = [ + oras + pyyaml + ]; + custom = [ pyyaml ]; + oras = [ oras ]; + }; nativeCheckInputs = [ pytest-cov-stub pytestCheckHook writableTmpDirAsHomeHook - ]; + ] + ++ lib.flatten (builtins.attrValues optional-dependencies); disabledTests = [ # Tests require network access From 1e962f742d463a4389f471d8526fc2736b0d9a13 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:17:15 +0100 Subject: [PATCH 63/75] python314Packages.appthreat-vulnerability-db: migrate to finalAttrs --- .../appthreat-vulnerability-db/default.nix | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix b/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix index 44b3486595fc..d2b16878798a 100644 --- a/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix +++ b/pkgs/development/python-modules/appthreat-vulnerability-db/default.nix @@ -21,7 +21,7 @@ writableTmpDirAsHomeHook, }: -buildPythonPackage rec { +buildPythonPackage (finalAttrs: { pname = "appthreat-vulnerability-db"; version = "6.6.0"; pyproject = true; @@ -29,7 +29,7 @@ buildPythonPackage rec { src = fetchFromGitHub { owner = "AppThreat"; repo = "vulnerability-db"; - tag = "v${version}"; + tag = "v${finalAttrs.version}"; hash = "sha256-/tcfHEvTdk0B/vfcqqkTn9kGT3QIPLWW4l01fjnrhqE="; }; @@ -70,7 +70,7 @@ buildPythonPackage rec { pytestCheckHook writableTmpDirAsHomeHook ] - ++ lib.flatten (builtins.attrValues optional-dependencies); + ++ lib.flatten (builtins.attrValues finalAttrs.passthru.optional-dependencies); disabledTests = [ # Tests require network access @@ -84,9 +84,9 @@ buildPythonPackage rec { meta = { description = "Vulnerability database and package search for sources such as OSV, NVD, GitHub and npm"; homepage = "https://github.com/appthreat/vulnerability-db"; - changelog = "https://github.com/AppThreat/vulnerability-db/releases/tag/${src.tag}"; + changelog = "https://github.com/AppThreat/vulnerability-db/releases/tag/${finalAttrs.src.tag}"; license = lib.licenses.mit; maintainers = with lib.maintainers; [ fab ]; mainProgram = "vdb"; }; -} +}) From b0052e6f53103a3273add89dd7cc3bc1f4f273b0 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:21:37 +0100 Subject: [PATCH 64/75] python314Packages.ukkonen: modernize --- .../python-modules/ukkonen/default.nix | 18 ++++++++++++------ 1 file changed, 12 insertions(+), 6 deletions(-) diff --git a/pkgs/development/python-modules/ukkonen/default.nix b/pkgs/development/python-modules/ukkonen/default.nix index a4b88fd70cf9..e3364ea5752d 100644 --- a/pkgs/development/python-modules/ukkonen/default.nix +++ b/pkgs/development/python-modules/ukkonen/default.nix @@ -4,21 +4,27 @@ fetchFromGitHub, cffi, pytestCheckHook, + setuptools, }: -buildPythonPackage rec { +buildPythonPackage (finalAttrs: { pname = "ukkonen"; version = "1.1.0"; - format = "setuptools"; + pyproject = true; src = fetchFromGitHub { owner = "asottile"; repo = "ukkonen"; - rev = "v${version}"; - sha256 = "sha256-vXyOLAiY92Df7g57quiSnOz8yhaIsm8MTB6Fbiv6axQ="; + tag = "v${finalAttrs.version}"; + hash = "sha256-vXyOLAiY92Df7g57quiSnOz8yhaIsm8MTB6Fbiv6axQ="; }; - nativeBuildInputs = [ cffi ]; + build-system = [ + cffi + setuptools + ]; + + dependencies = [ cffi ]; nativeCheckInputs = [ pytestCheckHook ]; @@ -30,4 +36,4 @@ buildPythonPackage rec { license = lib.licenses.mit; maintainers = with lib.maintainers; [ fab ]; }; -} +}) From bd32c1eb05256f05b109b98be6c6b41d951ee945 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:23:13 +0100 Subject: [PATCH 65/75] python314Packages.pyvlx: migrate to finalAttrs --- pkgs/development/python-modules/pyvlx/default.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/development/python-modules/pyvlx/default.nix b/pkgs/development/python-modules/pyvlx/default.nix index f5592765f4f4..5ab2052c9b97 100644 --- a/pkgs/development/python-modules/pyvlx/default.nix +++ b/pkgs/development/python-modules/pyvlx/default.nix @@ -9,7 +9,7 @@ zeroconf, }: -buildPythonPackage rec { +buildPythonPackage (finalAttrs: { pname = "pyvlx"; version = "0.2.28"; pyproject = true; @@ -17,7 +17,7 @@ buildPythonPackage rec { src = fetchFromGitHub { owner = "Julius2342"; repo = "pyvlx"; - tag = version; + tag = finalAttrs.version; hash = "sha256-l+Yfp8s6x+l/1ssL0wgyzd8QbA4ikr+ZUVMdTEaIjYE="; }; @@ -40,8 +40,8 @@ buildPythonPackage rec { devices, e.g. Velux Windows. ''; homepage = "https://github.com/Julius2342/pyvlx"; - changelog = "https://github.com/Julius2342/pyvlx/releases/tag/${src.tag}"; + changelog = "https://github.com/Julius2342/pyvlx/releases/tag/${finalAttrs.src.tag}"; license = lib.licenses.lgpl2Only; maintainers = with lib.maintainers; [ fab ]; }; -} +}) From 71095e4f9db346ea9954855b710cab723c42eb5d Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 11:48:22 +0100 Subject: [PATCH 66/75] python314Packages.pyexploitdb: 0.3.10 -> 0.3.11 Changelog: https://github.com/Hackman238/pyExploitDb/blob/master/ChangeLog.md --- pkgs/development/python-modules/pyexploitdb/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/pyexploitdb/default.nix b/pkgs/development/python-modules/pyexploitdb/default.nix index e640a29a0713..0a883e2cf968 100644 --- a/pkgs/development/python-modules/pyexploitdb/default.nix +++ b/pkgs/development/python-modules/pyexploitdb/default.nix @@ -9,12 +9,12 @@ buildPythonPackage (finalAttrs: { pname = "pyexploitdb"; - version = "0.3.10"; + version = "0.3.11"; pyproject = true; src = fetchPypi { inherit (finalAttrs) pname version; - hash = "sha256-EZX2eCNc46UuqbBEypjp6NcHOAI6C7SiFu+AZPXcSg8="; + hash = "sha256-SKIGVjgNhM22Ia/ZxZD5uwFiE4XcYmnKMvNG/KGltYw="; }; build-system = [ setuptools ]; From 0f66bfaab66c4264ce5e8ed055e26208219de6b7 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:25:39 +0100 Subject: [PATCH 67/75] python314Packages.alibabacloud-credentials: migrate to finalAttrs --- .../python-modules/alibabacloud-credentials/default.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/development/python-modules/alibabacloud-credentials/default.nix b/pkgs/development/python-modules/alibabacloud-credentials/default.nix index 11410f42a8f3..b02b012391f8 100644 --- a/pkgs/development/python-modules/alibabacloud-credentials/default.nix +++ b/pkgs/development/python-modules/alibabacloud-credentials/default.nix @@ -9,14 +9,14 @@ setuptools, }: -buildPythonPackage rec { +buildPythonPackage (finalAttrs: { pname = "alibabacloud-credentials"; version = "1.0.7"; pyproject = true; src = fetchPypi { pname = "alibabacloud_credentials"; - inherit version; + inherit (finalAttrs) version; hash = "sha256-gEKCgLS8+VRh1B0UkKIjYLi2fRgpvx6zj3T6vMaT8bM="; }; @@ -40,4 +40,4 @@ buildPythonPackage rec { license = lib.licenses.asl20; maintainers = with lib.maintainers; [ fab ]; }; -} +}) From e90562a354c3b60c4cbdb5470259c75bb506b8bf Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:32:30 +0100 Subject: [PATCH 68/75] python314Packages.aiovodafone: migrate to finalAttrs --- pkgs/development/python-modules/aiovodafone/default.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/development/python-modules/aiovodafone/default.nix b/pkgs/development/python-modules/aiovodafone/default.nix index 140587f11e46..5de8b2940662 100644 --- a/pkgs/development/python-modules/aiovodafone/default.nix +++ b/pkgs/development/python-modules/aiovodafone/default.nix @@ -14,7 +14,7 @@ segno, }: -buildPythonPackage rec { +buildPythonPackage (finalAttrs: { pname = "aiovodafone"; version = "3.1.1"; pyproject = true; @@ -22,7 +22,7 @@ buildPythonPackage rec { src = fetchFromGitHub { owner = "chemelli74"; repo = "aiovodafone"; - tag = "v${version}"; + tag = "v${finalAttrs.version}"; hash = "sha256-NhtclSuwiEuGAA/zhKEL/5S/WTFTjo87BTQPuSVX0sE="; }; @@ -48,8 +48,8 @@ buildPythonPackage rec { meta = { description = "Library to control Vodafon Station"; homepage = "https://github.com/chemelli74/aiovodafone"; - changelog = "https://github.com/chemelli74/aiovodafone/blob/${src.tag}/CHANGELOG.md"; + changelog = "https://github.com/chemelli74/aiovodafone/blob/${finalAttrs.src.tag}/CHANGELOG.md"; license = lib.licenses.asl20; maintainers = with lib.maintainers; [ fab ]; }; -} +}) From 1ff4adb3444d14f2d1843a4cf9941596aac9ded3 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:37:50 +0100 Subject: [PATCH 69/75] python312Packages.mypy-boto3-connectcases: 1.42.3 -> 1.42.35 --- pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix index 3be034c68ec9..cec34f4d9a18 100644 --- a/pkgs/development/python-modules/mypy-boto3/default.nix +++ b/pkgs/development/python-modules/mypy-boto3/default.nix @@ -347,8 +347,8 @@ in "sha256-omWYUcr7Aj6r1F1kKAmM32fn9577UeUgqesnIiBIpPQ="; mypy-boto3-connectcases = - buildMypyBoto3Package "connectcases" "1.42.3" - "sha256-OpFwfLIgldcA31CkZfgcD8H9vOPNVNSxmr0J3taPKV8="; + buildMypyBoto3Package "connectcases" "1.42.35" + "sha256-y/EYsonfz1GwySCHmcVK5i3gVGarbM3bLvDIj/nFh9o="; mypy-boto3-connectparticipant = buildMypyBoto3Package "connectparticipant" "1.42.3" From b23fe7ef1c2ef2019d1ab83b66c0102bad017d62 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:37:58 +0100 Subject: [PATCH 70/75] python312Packages.mypy-boto3-ec2: 1.42.33 -> 1.42.35 --- pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix index cec34f4d9a18..6d585ec94db9 100644 --- a/pkgs/development/python-modules/mypy-boto3/default.nix +++ b/pkgs/development/python-modules/mypy-boto3/default.nix @@ -443,8 +443,8 @@ in "sha256-92qhSUqTiLgbtvCdi/Mmgve18mcYR00ABL+bNy7/OnY="; mypy-boto3-ec2 = - buildMypyBoto3Package "ec2" "1.42.33" - "sha256-6FgPHidDOccO4DvmCnE+1tDvZU+V/2I1aJ563D8/rDs="; + buildMypyBoto3Package "ec2" "1.42.35" + "sha256-uiUIfubdYTR0JL4fLLArnL9fHMc35JtpBwud2pW3HEw="; mypy-boto3-ec2-instance-connect = buildMypyBoto3Package "ec2-instance-connect" "1.42.3" From a8b8ed628e86ab3c719e22d53cf71dfa22a0c7dd Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:38:05 +0100 Subject: [PATCH 71/75] python312Packages.mypy-boto3-evidently: 1.42.3 -> 1.42.35 --- pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix index 6d585ec94db9..2f550ce76d56 100644 --- a/pkgs/development/python-modules/mypy-boto3/default.nix +++ b/pkgs/development/python-modules/mypy-boto3/default.nix @@ -519,8 +519,8 @@ in "sha256-zoJFU3RC1bgWvK/rTsAKRoWDbl1+VehjlGM9s18h7Fg="; mypy-boto3-evidently = - buildMypyBoto3Package "evidently" "1.42.3" - "sha256-t+mFGfaY21XDIDWgKthnXeg+couyjop0grL6QjHpi9g="; + buildMypyBoto3Package "evidently" "1.42.35" + "sha256-kdSGsikyLazIdSKidTt6bk5i+syJgx/GE0y+KRpC1rw="; mypy-boto3-finspace = buildMypyBoto3Package "finspace" "1.42.3" From fdf6995405fb4c2f56f9ad01a0d28100568ab026 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:38:11 +0100 Subject: [PATCH 72/75] python312Packages.mypy-boto3-groundstation: 1.42.3 -> 1.42.35 --- pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix index 2f550ce76d56..5d53d8d63497 100644 --- a/pkgs/development/python-modules/mypy-boto3/default.nix +++ b/pkgs/development/python-modules/mypy-boto3/default.nix @@ -586,8 +586,8 @@ in "sha256-w3vOm8K/2rToF1CFWtAobCzswkv2d/gm1bzy6XiOFVA="; mypy-boto3-groundstation = - buildMypyBoto3Package "groundstation" "1.42.3" - "sha256-BrtHCaCwsfpaB5GA9kEhCFapQceZsjpyv3HVgpXUOFA="; + buildMypyBoto3Package "groundstation" "1.42.35" + "sha256-UIxD9R+oQjVmR90OfD8Dp7GW3E73zny6LFTkxrSdmNU="; mypy-boto3-guardduty = buildMypyBoto3Package "guardduty" "1.42.33" From bd8ed7be1b1390534531187364bb3e870ac3dad3 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:38:33 +0100 Subject: [PATCH 73/75] python314Packages.pydexcom: migrate to finalAttrs --- pkgs/development/python-modules/pydexcom/default.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/development/python-modules/pydexcom/default.nix b/pkgs/development/python-modules/pydexcom/default.nix index 26ca55ddf32c..b1ecf3b6282f 100644 --- a/pkgs/development/python-modules/pydexcom/default.nix +++ b/pkgs/development/python-modules/pydexcom/default.nix @@ -7,7 +7,7 @@ requests, }: -buildPythonPackage rec { +buildPythonPackage (finalAttrs: { pname = "pydexcom"; version = "0.5.1"; pyproject = true; @@ -15,7 +15,7 @@ buildPythonPackage rec { src = fetchFromGitHub { owner = "gagebenne"; repo = "pydexcom"; - tag = version; + tag = finalAttrs.version; hash = "sha256-u94OI45PmofPLpuJUpjbvGLla+mJEHy1t6/4fiI6+zc="; }; @@ -34,8 +34,8 @@ buildPythonPackage rec { meta = { description = "Python API to interact with Dexcom Share service"; homepage = "https://github.com/gagebenne/pydexcom"; - changelog = "https://github.com/gagebenne/pydexcom/releases/tag/${src.tag}"; + changelog = "https://github.com/gagebenne/pydexcom/releases/tag/${finalAttrs.src.tag}"; license = lib.licenses.mit; maintainers = with lib.maintainers; [ fab ]; }; -} +}) From 08b9219ae8cc4fbcf9e074a423715a0a0bdca513 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:39:31 +0100 Subject: [PATCH 74/75] python313Packages.botocore-stubs: 1.42.34 -> 1.42.35 --- pkgs/development/python-modules/botocore-stubs/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/botocore-stubs/default.nix b/pkgs/development/python-modules/botocore-stubs/default.nix index 1408b6d412e5..686d13255e45 100644 --- a/pkgs/development/python-modules/botocore-stubs/default.nix +++ b/pkgs/development/python-modules/botocore-stubs/default.nix @@ -9,13 +9,13 @@ buildPythonPackage (finalAttrs: { pname = "botocore-stubs"; - version = "1.42.34"; + version = "1.42.35"; pyproject = true; src = fetchPypi { pname = "botocore_stubs"; inherit (finalAttrs) version; - hash = "sha256-89HFtFwsvhb2Nxmr5jmyOh7rP+ycPqCnJohYW0YujOM="; + hash = "sha256-N1z5U09vKjW9LJ5wduiPtJ+31YnFqsEp22qf/BNWHK0="; }; build-system = [ setuptools ]; From efefb06e6db4f2b1cb147d2269059f0a20752a85 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Tue, 27 Jan 2026 12:39:37 +0100 Subject: [PATCH 75/75] python313Packages.boto3-stubs: 1.42.34 -> 1.42.35 --- pkgs/development/python-modules/boto3-stubs/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/boto3-stubs/default.nix b/pkgs/development/python-modules/boto3-stubs/default.nix index 1ebea8fa33c9..3201bf0ab679 100644 --- a/pkgs/development/python-modules/boto3-stubs/default.nix +++ b/pkgs/development/python-modules/boto3-stubs/default.nix @@ -358,13 +358,13 @@ buildPythonPackage (finalAttrs: { pname = "boto3-stubs"; - version = "1.42.34"; + version = "1.42.35"; pyproject = true; src = fetchPypi { pname = "boto3_stubs"; inherit (finalAttrs) version; - hash = "sha256-+vzDcTwzG6wRv1X+kT5aOgGCDwzeZAz8RpTfWpSqlVc="; + hash = "sha256-IKq13uWdTQqVFSvXvlhPqvufa88Ub//zzWBV9x0AbWo="; }; build-system = [ setuptools ];