From e854fff069646957bb5dd8483407407d633716ab Mon Sep 17 00:00:00 2001
From: Marcin Serwin <marcin@serwin.dev>
Date: Sun, 25 Jan 2026 12:23:15 +0100
Subject: [PATCH 001/132] rott{,-shareware}: drop

It fails to build with C23 because `true` and `false` are now keywords.
It's easy to fix but there is little reason to prefer this version over
the maintained fork 'taradino' which is already packaged.

Related to: https://github.com/NixOS/nixpkgs/issues/475479

Signed-off-by: Marcin Serwin <marcin@serwin.dev>
---
 pkgs/by-name/ro/rott/package.nix | 80 --------------------------------
 pkgs/top-level/aliases.nix       |  2 +
 pkgs/top-level/all-packages.nix  |  4 --
 3 files changed, 2 insertions(+), 84 deletions(-)
 delete mode 100644 pkgs/by-name/ro/rott/package.nix

diff --git a/pkgs/by-name/ro/rott/package.nix b/pkgs/by-name/ro/rott/package.nix
deleted file mode 100644
index 7eeef91b2f76..000000000000
--- a/pkgs/by-name/ro/rott/package.nix
+++ /dev/null
@@ -1,80 +0,0 @@
-{
-  stdenv,
-  lib,
-  fetchurl,
-  fetchzip,
-  SDL_compat,
-  SDL_mixer,
-  makeDesktopItem,
-  copyDesktopItems,
-  unzip,
-  buildShareware ? false,
-  withSharewareData ? buildShareware,
-}:
-assert withSharewareData -> buildShareware;
-
-let
-  datadir = "share/data/rott-shareware/";
-in
-stdenv.mkDerivation (finalAttrs: {
-  pname = "rott";
-  version = "1.1.2";
-
-  __structuredAttrs = true;
-  srcs = [
-    (fetchurl {
-      url = "https://icculus.org/rott/releases/${finalAttrs.pname}-${finalAttrs.version}.tar.gz";
-      hash = "sha256-ECUW6MMS9rC79sYj4fAcv7vDFKzorf4fIB1HsVvZJ/8=";
-    })
-  ]
-  ++ lib.optional withSharewareData (fetchzip {
-    url = "http://icculus.org/rott/share/1rott13.zip";
-    hash = "sha256-l0pP+mNPAabGh7LZrwcB6KOhPRSycrZpAlPVTyDXc6Y=";
-    stripRoot = false;
-  });
-
-  sourceRoot = "rott-${finalAttrs.version}/rott";
-
-  nativeBuildInputs = [ copyDesktopItems ] ++ lib.optional withSharewareData unzip;
-
-  buildInputs = [
-    SDL_compat
-    SDL_mixer
-  ];
-
-  enableParallelBuilding = true;
-
-  makeFlags = [
-    "SHAREWARE=${if buildShareware then "1" else "0"}"
-    ''EXTRACFLAGS=-DDATADIR=\"${if withSharewareData then "${placeholder "out"}/${datadir}" else ""}\"''
-  ];
-
-  installPhase = ''
-    runHook preInstall
-
-    ${lib.optionalString withSharewareData ''
-      mkdir -p "$out/${datadir}"
-      unzip -d "$out/${datadir}" ../../source/ROTTSW13.SHR
-    ''}
-    install -Dm755 -t $out/bin rott
-
-    runHook postInstall
-  '';
-
-  desktopItems = [
-    (makeDesktopItem {
-      name = "rott";
-      exec = "rott";
-      desktopName = "Rise of the Triad: ${if buildShareware then "The HUNT Begins" else "Dark War"}";
-      categories = [ "Game" ];
-    })
-  ];
-
-  meta = {
-    description = "SDL port of Rise of the Triad";
-    mainProgram = "rott";
-    homepage = "https://icculus.org/rott/";
-    license = with lib.licenses; [ gpl2Plus ] ++ lib.optional withSharewareData unfreeRedistributable;
-    platforms = lib.platforms.all;
-  };
-})
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index eb2f7f1580fa..22c6b50836f2 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -1718,6 +1718,8 @@ mapAliases {
   rofi-wayland-unwrapped = throw "'rofi-wayland-unwrapped' has been merged into 'rofi-unwrapped'"; # Added 2025-09-06
   root5 = throw "root5 has been removed from nixpkgs because it's a legacy version"; # Added 2025-07-17
   rote = throw "rote has been removed due to lack of upstream maintenance"; # Added 2025-09-10
+  rott = throw "'rott' has been dropped in favor of its maintained fork 'taradino'"; # Added 2026-01-25
+  rott-shareware = throw "'rott-shareware' has been dropped in favor of its maintained fork 'taradino-shareware'"; # Added 2026-01-25
   rpPPPoE = warnAlias "'rpPPPoE' has been renamed to 'rp-pppoe'" rp-pppoe; # Added 2026-02-12
   rquickshare-legacy = throw "The legacy version depends on insecure package libsoup2, please use the main version"; # Added 2025-10-09
   rr-unstable = throw "'rr-unstable' has been renamed to/replaced by 'rr'"; # Converted to throw 2025-10-27
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index a74ca9d7fd5c..e5a7b751f66e 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -11377,10 +11377,6 @@ with pkgs;
     quake3hires
     ;
 
-  rott-shareware = callPackage ../by-name/ro/rott/package.nix {
-    buildShareware = true;
-  };
-
   inherit (callPackage ../by-name/sc/scummvm/games.nix { })
     beneath-a-steel-sky
     broken-sword-25

From 75165c323040c8008ba9fe1eeae5f8e691953891 Mon Sep 17 00:00:00 2001
From: Xiangyan Sun <wishstudio@gmail.com>
Date: Tue, 31 Mar 2026 09:42:19 -0700
Subject: [PATCH 002/132] {python3Packages.,}catboost: 1.2.7 -> 1.2.10

---
 pkgs/by-name/ca/catboost/package.nix          | 27 ++++++-------
 pkgs/by-name/ca/catboost/remove-conan.patch   | 39 -------------------
 .../python-modules/catboost/default.nix       | 18 +++++++--
 3 files changed, 28 insertions(+), 56 deletions(-)
 delete mode 100644 pkgs/by-name/ca/catboost/remove-conan.patch

diff --git a/pkgs/by-name/ca/catboost/package.nix b/pkgs/by-name/ca/catboost/package.nix
index 76fc6f64def7..197137aa33d9 100644
--- a/pkgs/by-name/ca/catboost/package.nix
+++ b/pkgs/by-name/ca/catboost/package.nix
@@ -4,7 +4,6 @@
   fetchFromGitHub,
   cmake,
   cctools,
-  libiconv,
   llvmPackages,
   ninja,
   openssl,
@@ -19,23 +18,25 @@
 }:
 let
   stdenv = if cudaSupport then cudaPackages.backendStdenv else llvmPackages.stdenv;
+  buildPythonBindingsEnv = python3Packages.python.withPackages (
+    ps: with ps; [
+      cython
+      numpy
+    ]
+  );
 in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "catboost";
-  version = "1.2.7";
+  version = "1.2.10";
 
   src = fetchFromGitHub {
     owner = "catboost";
     repo = "catboost";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-I3geFdVQ1Pm61eRXi+ueaxel3QRb8EJV9f4zV2Q7kk4=";
+    hash = "sha256-z68vflYgO3cWeOkb417Gyco1Fqb98ulyRgI+OS+B4is=";
   };
 
-  patches = [
-    ./remove-conan.patch
-  ];
-
   postPatch = ''
     substituteInPlace cmake/common.cmake \
       --replace-fail  "\''${RAGEL_BIN}" "${ragel}/bin/ragel" \
@@ -43,7 +44,7 @@ stdenv.mkDerivation (finalAttrs: {
 
     shopt -s globstar
     for cmakelists in **/CMakeLists.*; do
-      sed -i "s/OpenSSL::OpenSSL/OpenSSL::SSL/g" $cmakelists
+      sed -i "s/openssl::openssl/OpenSSL::SSL/g" $cmakelists
     done
   '';
 
@@ -53,10 +54,10 @@ stdenv.mkDerivation (finalAttrs: {
   ];
 
   nativeBuildInputs = [
+    buildPythonBindingsEnv
     cmake
     llvmPackages.bintools
     ninja
-    (python3Packages.python.withPackages (ps: with ps; [ six ]))
     ragel
     yasm
   ]
@@ -71,9 +72,6 @@ stdenv.mkDerivation (finalAttrs: {
     openssl
     zlib
   ]
-  ++ lib.optionals stdenv.hostPlatform.isDarwin [
-    libiconv
-  ]
   ++ lib.optionals cudaSupport [
     cudaPackages.cuda_cudart
     cudaPackages.cuda_cccl
@@ -101,7 +99,10 @@ stdenv.mkDerivation (finalAttrs: {
     (lib.cmakeBool "CMAKE_POSITION_INDEPENDENT_CODE" true)
     (lib.cmakeFeature "CATBOOST_COMPONENTS" "app;libs${lib.optionalString pythonSupport ";python-package"}")
     (lib.cmakeBool "HAVE_CUDA" cudaSupport)
-  ];
+  ]
+  ++ lib.optional pythonSupport (
+    lib.cmakeFeature "Python_EXECUTABLE" "${buildPythonBindingsEnv.interpreter}"
+  );
 
   installPhase = ''
     runHook preInstall
diff --git a/pkgs/by-name/ca/catboost/remove-conan.patch b/pkgs/by-name/ca/catboost/remove-conan.patch
deleted file mode 100644
index 4e3ab6f436f9..000000000000
--- a/pkgs/by-name/ca/catboost/remove-conan.patch
+++ /dev/null
@@ -1,39 +0,0 @@
-diff --git a/CMakeLists.txt b/CMakeLists.txt
-index 24ffd1225a..700adcc246 100644
---- a/CMakeLists.txt
-+++ b/CMakeLists.txt
-@@ -39,7 +39,6 @@ include(cmake/global_flags.cmake)
- include(cmake/global_vars.cmake)
- include(cmake/archive.cmake)
- include(cmake/common.cmake)
--include(cmake/conan1_deprecated.cmake)
- include(cmake/cuda.cmake)
- include(cmake/cython.cmake)
- include(cmake/fbs.cmake)
-@@ -48,21 +47,6 @@ include(cmake/recursive_library.cmake)
- include(cmake/shared_libs.cmake)
- include(cmake/swig.cmake)
- 
--if (CMAKE_CROSSCOMPILING)
--  include(${PROJECT_BINARY_DIR}/conan_paths.cmake)
--else()
--  conan_cmake_autodetect(settings)
--  conan_cmake_install(
--    PATH_OR_REFERENCE ${PROJECT_SOURCE_DIR}
--    INSTALL_FOLDER ${PROJECT_BINARY_DIR}
--    BUILD missing
--    REMOTE conancenter
--    SETTINGS ${settings}
--    ENV "CONAN_CMAKE_GENERATOR=${CMAKE_GENERATOR}"
--    CONF "tools.cmake.cmaketoolchain:generator=${CMAKE_GENERATOR}"
--  )
--endif()
--
- 
- if (CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "x86_64" AND NOT HAVE_CUDA)
-   include(CMakeLists.linux-x86_64.txt)
-@@ -93,4 +77,3 @@ elseif (ANDROID AND CMAKE_ANDROID_ARCH STREQUAL "x86")
- elseif (ANDROID AND CMAKE_ANDROID_ARCH STREQUAL "x86_64")
-   include(CMakeLists.android-x86_64.txt)
- endif()
--
diff --git a/pkgs/development/python-modules/catboost/default.nix b/pkgs/development/python-modules/catboost/default.nix
index 5bb4e58d151e..4a751fbd639e 100644
--- a/pkgs/development/python-modules/catboost/default.nix
+++ b/pkgs/development/python-modules/catboost/default.nix
@@ -5,6 +5,8 @@
   python,
 
   # build-system
+  cmake,
+  cython,
   setuptools,
 
   # dependencies
@@ -28,6 +30,8 @@ buildPythonPackage rec {
   sourceRoot = "${src.name}/catboost/python-package";
 
   build-system = [
+    cmake
+    cython
     setuptools
   ];
 
@@ -41,6 +45,15 @@ buildPythonPackage rec {
     six
   ];
 
+  postPatch = ''
+    substituteInPlace setup.py \
+      --replace-fail "cmake (>=3.24, <4.0)" "cmake" \
+      --replace-fail "'conan (>=2.4.1, <3.0)', " "" \
+      --replace-fail "cython ~= 3.0.10" "cython"
+  '';
+
+  dontConfigure = true;
+
   buildPhase = ''
     runHook preBuild
 
@@ -55,8 +68,5 @@ buildPythonPackage rec {
 
   pythonImportsCheck = [ "catboost" ];
 
-  meta = catboost.meta // {
-    # https://github.com/catboost/catboost/issues/2671
-    broken = lib.versionAtLeast numpy.version "2";
-  };
+  meta = catboost.meta;
 }

From fd7d2abb2139638a72d999f05aff417d4faf579b Mon Sep 17 00:00:00 2001
From: Martin Knudsen <martin.knudsen@otto.de>
Date: Thu, 2 Apr 2026 11:41:31 +0200
Subject: [PATCH 003/132] aws-cdk-cli: 2.1104.0 -> 2.1116.0

---
 pkgs/by-name/aw/aws-cdk-cli/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/aw/aws-cdk-cli/package.nix b/pkgs/by-name/aw/aws-cdk-cli/package.nix
index 0fb88b914458..7124ccac6707 100644
--- a/pkgs/by-name/aw/aws-cdk-cli/package.nix
+++ b/pkgs/by-name/aw/aws-cdk-cli/package.nix
@@ -17,18 +17,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "aws-cdk-cli";
-  version = "2.1104.0";
+  version = "2.1116.0";
 
   src = fetchFromGitHub {
     owner = "aws";
     repo = "aws-cdk-cli";
     tag = "cdk@v${finalAttrs.version}";
-    hash = "sha256-bIrTc87gk14ckVhcoZKa1aOo0wpWZCceafpxzKLcDEY=";
+    hash = "sha256-mRr5G42RrO87AdJOTLaM+EPprTFCI7eVxzUhafrGOxA=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = "${finalAttrs.src}/yarn.lock";
-    hash = "sha256-JuklEESNm/eadB5iBvomfY87NRaPywEnwL2GtPUTQ2Y=";
+    hash = "sha256-cjJBaq65sNWOFMFB1HAgGScxJlBZKnwkGipDd4aXhDE=";
   };
 
   nativeBuildInputs = [

From 1be23a24b242c38fc03a78a6cc509f39d6239659 Mon Sep 17 00:00:00 2001
From: GraysonTinker <graysontinker@gmail.com>
Date: Sun, 5 Apr 2026 20:46:42 -0700
Subject: [PATCH 004/132] kbdd: unstable-2021-04-26 -> unstable-2025-08-10

---
 pkgs/by-name/kb/kbdd/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/kb/kbdd/package.nix b/pkgs/by-name/kb/kbdd/package.nix
index e83b8864ba0f..1142fe4d4376 100644
--- a/pkgs/by-name/kb/kbdd/package.nix
+++ b/pkgs/by-name/kb/kbdd/package.nix
@@ -10,13 +10,13 @@
 
 stdenv.mkDerivation {
   pname = "kbdd";
-  version = "unstable-2021-04-26";
+  version = "unstable-2025-08-10";
 
   src = fetchFromGitHub {
     owner = "qnikst";
     repo = "kbdd";
-    rev = "3145099e1fbbe65b27678be72465aaa5b5872874";
-    sha256 = "1gzcjnflgdqnjgphiqpzwbcx60hm0h2cprncm7i8xca3ln5q6ba1";
+    rev = "b87e44afd5859157245eee22b11827605bfa09b9";
+    hash = "sha256-cbMcB6jgssfMUjemBOiE06zJK2TbzOWt1Rvt41V33Mo=";
   };
 
   nativeBuildInputs = [

From 3e8e73b859a05ad8253a6ec48c06e1fa7da63782 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Alice=20=E2=9C=A8=F0=9F=8C=99=20Luna?= <alice@liquidnya.dev>
Date: Tue, 31 Mar 2026 00:14:00 +0200
Subject: [PATCH 005/132] noctalia-qs: 0.0.10 -> 0.0.12

This update removes the 0001-fix-unneccessary-reloads.patch, because it has been upstreamed to noctalia-qs, see https://github.com/noctalia-dev/noctalia-qs/pull/20.
Furthermore, the cmake build is now a release build to match the upstream flake.
---
 .../0001-fix-unneccessary-reloads.patch       | 23 -------------------
 pkgs/by-name/no/noctalia-qs/package.nix       | 14 ++++-------
 2 files changed, 5 insertions(+), 32 deletions(-)
 delete mode 100644 pkgs/by-name/no/noctalia-qs/0001-fix-unneccessary-reloads.patch

diff --git a/pkgs/by-name/no/noctalia-qs/0001-fix-unneccessary-reloads.patch b/pkgs/by-name/no/noctalia-qs/0001-fix-unneccessary-reloads.patch
deleted file mode 100644
index 85d4a74b9ad5..000000000000
--- a/pkgs/by-name/no/noctalia-qs/0001-fix-unneccessary-reloads.patch
+++ /dev/null
@@ -1,23 +0,0 @@
-diff --git a/src/core/generation.cpp b/src/core/generation.cpp
-index c68af71..4967562 100644
---- a/src/core/generation.cpp
-+++ b/src/core/generation.cpp
-@@ -172,12 +172,18 @@ void EngineGeneration::setWatchingFiles(bool watching) {
- 		if (this->watcher == nullptr) {
- 			this->watcher = new QFileSystemWatcher();
- 
-+			// note: not using canonicalFilePath() here on purpose,
-+			//       since the path could be a link to the nix store
-+			//       and the link might change
-+
- 			for (auto& file: this->scanner.scannedFiles) {
-+				if (file.startsWith("/nix/store/")) continue;
- 				this->watcher->addPath(file);
- 				this->watcher->addPath(QFileInfo(file).dir().absolutePath());
- 			}
- 
- 			for (auto& file: this->extraWatchedFiles) {
-+				if (file.startsWith("/nix/store/")) continue;
- 				this->watcher->addPath(file);
- 				this->watcher->addPath(QFileInfo(file).dir().absolutePath());
- 			}
diff --git a/pkgs/by-name/no/noctalia-qs/package.nix b/pkgs/by-name/no/noctalia-qs/package.nix
index 1546b1cd3411..f11d123ae1ba 100644
--- a/pkgs/by-name/no/noctalia-qs/package.nix
+++ b/pkgs/by-name/no/noctalia-qs/package.nix
@@ -26,19 +26,15 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "noctalia-qs";
-  version = "0.0.10";
+  version = "0.0.12";
 
   src = fetchFromGitHub {
     owner = "noctalia-dev";
     repo = "noctalia-qs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-tscUYNjBfi52Uwu40epdAhoFztsmroKBEBvr22oCnv4=";
+    hash = "sha256-79JP2QTdvp1jg7HGxAW+xzhzhLnlKUi8yGXq9nDCeH0=";
   };
 
-  patches = [
-    ./0001-fix-unneccessary-reloads.patch
-  ];
-
   nativeBuildInputs = [
     cmake
     ninja
@@ -74,11 +70,11 @@ stdenv.mkDerivation (finalAttrs: {
     (lib.cmakeBool "DISTRIBUTOR_DEBUGINFO_AVAILABLE" true)
     (lib.cmakeFeature "INSTALL_QML_PREFIX" qt6.qtbase.qtQmlPrefix)
     (lib.cmakeFeature "GIT_REVISION" "tag-v${finalAttrs.version}")
+    (lib.cmakeBool "NIX_STORE_DIR_SKIP_WATCH" true)
+    (lib.cmakeFeature "NIX_STORE_DIR" builtins.storeDir)
   ];
 
-  cmakeBuildType = "RelWithDebInfo";
-  separateDebugInfo = true;
-  dontStrip = false;
+  cmakeBuildType = "Release";
 
   passthru.updateScript = nix-update-script { };
 

From eaffed94dbc410ba6009a84003d283031a3a5496 Mon Sep 17 00:00:00 2001
From: Hythera <87016780+Hythera@users.noreply.github.com>
Date: Sun, 12 Apr 2026 20:14:54 +0200
Subject: [PATCH 006/132] krita-unwrapped: 6.0.0 -> 6.0.1

diff: https://invent.kde.org/graphics/krita/-/compare/v6.0.0...v6.0.1
---
 pkgs/by-name/kr/krita-unwrapped/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/kr/krita-unwrapped/package.nix b/pkgs/by-name/kr/krita-unwrapped/package.nix
index 8b5efa331ecd..b5c14dcb9ccd 100644
--- a/pkgs/by-name/kr/krita-unwrapped/package.nix
+++ b/pkgs/by-name/kr/krita-unwrapped/package.nix
@@ -37,10 +37,10 @@
 stdenv.mkDerivation (finalAttrs: {
   pname = "krita-unwrapped";
 
-  version = "6.0.0";
+  version = "6.0.1";
   src = fetchurl {
     url = "mirror://kde/stable/krita/${finalAttrs.version}/krita-${finalAttrs.version}.tar.gz";
-    hash = "sha256-kytodhJvfGKeQn7j0BIwDIKGsFoYQnc1S0FK9kGg8e0=";
+    hash = "sha256-COddFMgFJh/IIovsFt70cF9unPsBkecb0EzEwOGChIo=";
   };
 
   nativeBuildInputs = [

From 157e88467bf15c8d1ff9a02f7e0ece78b7685a7f Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Mon, 2 Mar 2026 13:10:50 -0800
Subject: [PATCH 007/132] insomnia: move icon to spec-compliant location

---
 pkgs/by-name/in/insomnia/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/in/insomnia/package.nix b/pkgs/by-name/in/insomnia/package.nix
index 3b2eea97dcf5..ae533545be65 100644
--- a/pkgs/by-name/in/insomnia/package.nix
+++ b/pkgs/by-name/in/insomnia/package.nix
@@ -82,7 +82,7 @@ else
       ''
         # Install XDG Desktop file and its icon
         install -Dm444 ${appimageContents}/insomnia.desktop -t $out/share/applications
-        install -Dm444 ${appimageContents}/insomnia.png -t $out/share/pixmaps
+        install -Dm444 ${appimageContents}/insomnia.png -t $out/share/icons/
         # Replace wrong exec statement in XDG Desktop file
         substituteInPlace $out/share/applications/insomnia.desktop \
             --replace-fail 'Exec=AppRun --no-sandbox %U' 'Exec=insomnia'

From 1707bbd6f3312d9c6271eb5ec0aad104c48c80dc Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Fri, 27 Feb 2026 00:32:18 -0800
Subject: [PATCH 008/132] firefly-desktop: move icon to spec-compliant location

---
 pkgs/by-name/fi/firefly-desktop/package.nix | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/fi/firefly-desktop/package.nix b/pkgs/by-name/fi/firefly-desktop/package.nix
index 1e0c4175d153..ac807486d695 100644
--- a/pkgs/by-name/fi/firefly-desktop/package.nix
+++ b/pkgs/by-name/fi/firefly-desktop/package.nix
@@ -20,12 +20,11 @@ appimageTools.wrapType2 {
   extraPkgs = pkgs: [ pkgs.libsecret ];
 
   extraInstallCommands = ''
-    mkdir -p $out/share/applications $out/share/pixmaps
-    cp ${appimageContents}/desktop.desktop $out/share/applications/firefly-desktop.desktop
+    install -D ${appimageContents}/desktop.desktop $out/share/applications/firefly-desktop.desktop
     substituteInPlace $out/share/applications/firefly-desktop.desktop \
       --replace 'Exec=AppRun' 'Exec=firefly-desktop' \
       --replace 'Icon=desktop' 'Icon=firefly-desktop'
-    cp ${appimageContents}/desktop.png $out/share/pixmaps/firefly-desktop.png
+    install -D ${appimageContents}/desktop.png $out/share/icons/firefly-desktop.png
   '';
 
   meta = {

From d8135805d7cf8da51f3009da4e0c010b1cf6e158 Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Thu, 16 Apr 2026 17:28:28 -0700
Subject: [PATCH 009/132] firefly-desktop: use replace-fail

---
 pkgs/by-name/fi/firefly-desktop/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/fi/firefly-desktop/package.nix b/pkgs/by-name/fi/firefly-desktop/package.nix
index ac807486d695..ccc35bad670d 100644
--- a/pkgs/by-name/fi/firefly-desktop/package.nix
+++ b/pkgs/by-name/fi/firefly-desktop/package.nix
@@ -22,8 +22,8 @@ appimageTools.wrapType2 {
   extraInstallCommands = ''
     install -D ${appimageContents}/desktop.desktop $out/share/applications/firefly-desktop.desktop
     substituteInPlace $out/share/applications/firefly-desktop.desktop \
-      --replace 'Exec=AppRun' 'Exec=firefly-desktop' \
-      --replace 'Icon=desktop' 'Icon=firefly-desktop'
+      --replace-fail 'Exec=AppRun' 'Exec=firefly-desktop' \
+      --replace-fail 'Icon=desktop' 'Icon=firefly-desktop'
     install -D ${appimageContents}/desktop.png $out/share/icons/firefly-desktop.png
   '';
 

From c87f0c9382972776d087866bef66df58a66f226d Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Wed, 11 Mar 2026 11:19:37 -0700
Subject: [PATCH 010/132] cubelify: move icon to spec-compliant location

---
 pkgs/by-name/cu/cubelify/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/cu/cubelify/package.nix b/pkgs/by-name/cu/cubelify/package.nix
index 168245ba8d9d..b779a2511f94 100644
--- a/pkgs/by-name/cu/cubelify/package.nix
+++ b/pkgs/by-name/cu/cubelify/package.nix
@@ -23,7 +23,7 @@ appimageTools.wrapType2 rec {
       wrapProgram $out/bin/cubelify \
         --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto --enable-features=WaylandWindowDecorations --enable-wayland-ime=true}}"
       install -Dm444 ${contents}/cubelify-overlay.desktop -t $out/share/applications/
-      install -Dm444 ${contents}/cubelify-overlay.png -t $out/share/pixmaps/
+      install -Dm444 ${contents}/cubelify-overlay.png -t $out/share/icons
       substituteInPlace $out/share/applications/cubelify-overlay.desktop \
         --replace-fail 'Exec=AppRun --no-sandbox %U' 'Exec=cubelify' \
     '';

From a81ac64b89a41901399518848b04f1edda19a3f1 Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Mon, 2 Mar 2026 02:11:08 -0800
Subject: [PATCH 011/132] lunar-client: move icon to spec-compliant location

---
 pkgs/by-name/lu/lunar-client/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/lu/lunar-client/package.nix b/pkgs/by-name/lu/lunar-client/package.nix
index 98e030dcdb48..fc39726244f6 100644
--- a/pkgs/by-name/lu/lunar-client/package.nix
+++ b/pkgs/by-name/lu/lunar-client/package.nix
@@ -24,7 +24,7 @@ appimageTools.wrapType2 rec {
       wrapProgram $out/bin/lunarclient \
         --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto --enable-features=WaylandWindowDecorations --enable-wayland-ime=true}}"
       install -Dm444 ${contents}/lunarclient.desktop -t $out/share/applications/
-      install -Dm444 ${contents}/lunarclient.png -t $out/share/pixmaps/
+      install -Dm444 ${contents}/lunarclient.png -t $out/share/icons
       substituteInPlace $out/share/applications/lunarclient.desktop \
         --replace-fail 'Exec=AppRun --no-sandbox %U' 'Exec=lunarclient' \
     '';

From 9a6f6afaefbe49507e61c305f367862a2f928f10 Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Fri, 27 Feb 2026 15:35:18 -0800
Subject: [PATCH 012/132] rare: move icon to spec-compliant location

---
 pkgs/by-name/ra/rare/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ra/rare/package.nix b/pkgs/by-name/ra/rare/package.nix
index da9065af5a47..d757d8813f02 100644
--- a/pkgs/by-name/ra/rare/package.nix
+++ b/pkgs/by-name/ra/rare/package.nix
@@ -43,7 +43,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
 
   postInstall = ''
     install -Dm644 misc/rare.desktop -t $out/share/applications/
-    install -Dm644 $out/${python3Packages.python.sitePackages}/rare/resources/images/Rare.png $out/share/pixmaps/rare.png
+    install -Dm644 $out/${python3Packages.python.sitePackages}/rare/resources/images/Rare.png $out/share/icons/rare.png
   '';
 
   preFixup = ''

From 6d328b2c60a3c9c2778a50e6a856fbdc7dc68012 Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Thu, 16 Apr 2026 17:57:25 -0700
Subject: [PATCH 013/132] caido-desktop: fix exec in desktop file

---
 pkgs/by-name/ca/caido-desktop/package.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/by-name/ca/caido-desktop/package.nix b/pkgs/by-name/ca/caido-desktop/package.nix
index e554e26f0fe9..2702da1b469c 100644
--- a/pkgs/by-name/ca/caido-desktop/package.nix
+++ b/pkgs/by-name/ca/caido-desktop/package.nix
@@ -71,6 +71,8 @@ let
     extraInstallCommands = ''
       install -m 444 -D ${appimageContents}/caido.desktop \
         -t $out/share/applications
+      substituteInPlace $out/share/applications/caido.desktop \
+        --replace-fail "Exec=AppRun --no-sandbox %U" "Exec=caido-desktop %U"
       install -m 444 -D ${appimageContents}/caido.png \
         $out/share/icons/hicolor/512x512/apps/caido.png
       wrapProgram $out/bin/${pname} \

From 14d96abb46f28c1ff91fd33b21438f358d9242d6 Mon Sep 17 00:00:00 2001
From: Xiangyan Sun <wishstudio@gmail.com>
Date: Fri, 17 Apr 2026 00:10:29 -0700
Subject: [PATCH 014/132] lely-core: fix build with gcc15

---
 pkgs/by-name/le/lely-core/package.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pkgs/by-name/le/lely-core/package.nix b/pkgs/by-name/le/lely-core/package.nix
index 5f2aa132a9dd..c972c9bdd9ef 100644
--- a/pkgs/by-name/le/lely-core/package.nix
+++ b/pkgs/by-name/le/lely-core/package.nix
@@ -1,6 +1,7 @@
 {
   autoreconfHook,
   fetchFromGitLab,
+  fetchpatch,
   lib,
   stdenv,
 }:
@@ -20,6 +21,13 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-PuNE/lKsNNd4KDEcSsaz+IfP2hgT5M5VgLY1kVy1KCc=";
   };
 
+  patches = [
+    (fetchpatch {
+      url = "https://gitlab.com/lely_industries/lely-core/-/commit/6ed995fa86d828957b636a11470f150830d877ec.patch";
+      hash = "sha256-Q4Sza0hs0EE4EZ0nbYAs+/qO2uWKGveZ0+Tgx8xvmEs=";
+    })
+  ];
+
   outputs = [
     "out"
     "dev"

From 53939f341f642c2100f9553781f04ec53934209e Mon Sep 17 00:00:00 2001
From: Firelight Flagboy <firelight.flagboy@gmail.com>
Date: Mon, 20 Apr 2026 08:25:58 +0200
Subject: [PATCH 015/132] joystickwake: change `src` origin to Codeberg

The maintainer of `joystickwake` indicated to have moved the repository to Codeberg:

https://github.com/foresto/joystickwake/commit/8a0cc3ed987e69adb83ad1576c96382efd70a58f

The new Codeberg repository is https://codeberg.org/forestix/joystickwake
---
 pkgs/by-name/jo/joystickwake/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/jo/joystickwake/package.nix b/pkgs/by-name/jo/joystickwake/package.nix
index db39b51d67c7..33736e905a1b 100644
--- a/pkgs/by-name/jo/joystickwake/package.nix
+++ b/pkgs/by-name/jo/joystickwake/package.nix
@@ -1,18 +1,18 @@
 {
   lib,
   python3,
-  fetchFromGitHub,
+  fetchFromCodeberg,
 }:
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "joystickwake";
   version = "0.4.2";
   pyproject = true;
 
-  src = fetchFromGitHub {
-    owner = "foresto";
+  src = fetchFromCodeberg {
+    owner = "forestix";
     repo = "joystickwake";
     tag = "v${finalAttrs.version}";
-    sha256 = "sha256-vSvIpbcDIbRyitVjx3wNSxt5vTIZ9/NPWokOJt0p6oQ=";
+    hash = "sha256-vSvIpbcDIbRyitVjx3wNSxt5vTIZ9/NPWokOJt0p6oQ=";
   };
 
   build-system = with python3.pkgs; [

From 171da0951473c9adbbe6b3d8266cceb9bd00e335 Mon Sep 17 00:00:00 2001
From: Jost Alemann <alemann@posteo.com>
Date: Tue, 21 Apr 2026 17:51:17 +0200
Subject: [PATCH 016/132] linuxwave: 0.3.0 -> 0.4.0

Changelog: https://github.com/orhun/linuxwave/releases/tag/v0.4.0
Diff: https://github.com/orhun/linuxwave/compare/v0.3.0...v0.4.0
---
 pkgs/by-name/li/linuxwave/deps.nix    |  6 +++---
 pkgs/by-name/li/linuxwave/package.nix | 16 ++++++++--------
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/pkgs/by-name/li/linuxwave/deps.nix b/pkgs/by-name/li/linuxwave/deps.nix
index 92f6d397ea1e..a378e6b035c4 100644
--- a/pkgs/by-name/li/linuxwave/deps.nix
+++ b/pkgs/by-name/li/linuxwave/deps.nix
@@ -4,10 +4,10 @@
 
 linkFarm "zig-packages" [
   {
-    name = "clap-0.10.0-oBajB434AQBDh-Ei3YtoKIRxZacVPF1iSwp3IX_ZB8f0";
+    name = "clap-0.12.0-oBajB7foAQDqlSwaSG5g0yq7xGbQARUsBk5T64gAOqP5";
     path = fetchzip {
-      url = "https://github.com/Hejsil/zig-clap/archive/refs/tags/0.10.0.tar.gz";
-      hash = "sha256-leXnA97ITdvmBhD2YESLBZAKjBg+G4R/+PPPRslz/ec=";
+      url = "https://github.com/Hejsil/zig-clap/archive/refs/tags/0.12.0.tar.gz";
+      hash = "sha256-HveL7aJBC+/8PNlGYxtNZBrk3ytkM8zuXENO9JpygC0=";
     };
   }
 ]
diff --git a/pkgs/by-name/li/linuxwave/package.nix b/pkgs/by-name/li/linuxwave/package.nix
index 973924615c96..6e2b1907c16c 100644
--- a/pkgs/by-name/li/linuxwave/package.nix
+++ b/pkgs/by-name/li/linuxwave/package.nix
@@ -3,28 +3,28 @@
   stdenv,
   fetchFromGitHub,
   installShellFiles,
-  zig_0_14,
+  zig_0_16,
   callPackage,
 }:
 
 let
-  zig = zig_0_14;
+  zig = zig_0_16;
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "linuxwave";
-  version = "0.3.0";
+  version = "0.4.0";
 
   src = fetchFromGitHub {
     owner = "orhun";
     repo = "linuxwave";
     tag = "v${finalAttrs.version}";
-    fetchSubmodules = true;
-    hash = "sha256-OuD5U/T3GuCQrzdhx01NXPSXD7pUAvLnNsznttJogz8=";
+    hash = "sha256-5LcAExNFCsQIeRqLHMCLO+MnK7p2q2qOA1SdMCR4nCw=";
   };
 
-  postConfigure = ''
-    ln -s ${callPackage ./deps.nix { }} $ZIG_GLOBAL_CACHE_DIR/p
-  '';
+  zigBuildFlags = [
+    "--system"
+    (callPackage ./deps.nix { })
+  ];
 
   nativeBuildInputs = [
     installShellFiles

From 5bf18b033f3b40052a2176dcb317ec944580ab12 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Wed, 22 Apr 2026 15:30:22 +0700
Subject: [PATCH 017/132] kubeshark: 52.10.3 -> 53.2.3

---
 pkgs/by-name/ku/kubeshark/package.nix | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ku/kubeshark/package.nix b/pkgs/by-name/ku/kubeshark/package.nix
index db7c9af140a8..b6d480e5ba97 100644
--- a/pkgs/by-name/ku/kubeshark/package.nix
+++ b/pkgs/by-name/ku/kubeshark/package.nix
@@ -11,13 +11,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "kubeshark";
-  version = "52.10.3";
+  version = "53.2.3";
 
   src = fetchFromGitHub {
     owner = "kubeshark";
     repo = "kubeshark";
-    rev = "v${finalAttrs.version}";
-    hash = "sha256-n7AYUms6fn25UinLd5xFG2DfcpJU0/pR4JF3i1VY1hM=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Ey40GmwM7UdMNZIYLF1AFeJAwnT2f2xqHB6lG/uM+ds=";
   };
 
   vendorHash = "sha256-4s1gxJo2w5BibZ9CJP7Jl9Z8Zzo8WpBokBnRN+zp8b4=";
@@ -29,7 +29,7 @@ buildGoModule (finalAttrs: {
     [
       "-s"
       "-w"
-      "-X ${t}/misc.GitCommitHash=${finalAttrs.src.rev}"
+      "-X ${t}/misc.GitCommitHash=${finalAttrs.src.tag}"
       "-X ${t}/misc.Branch=master"
       "-X ${t}/misc.BuildTimestamp=0"
       "-X ${t}/misc.Platform=unknown"
@@ -43,6 +43,9 @@ buildGoModule (finalAttrs: {
   '';
   doCheck = true;
 
+  # Tests bind loopback sockets via httptest.
+  __darwinAllowLocalNetworking = true;
+
   postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
     installShellCompletion --cmd kubeshark \
       --bash <($out/bin/kubeshark completion bash) \

From f6c950452318f8200ce047cfa53e968b4d081840 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Wed, 22 Apr 2026 15:30:38 +0700
Subject: [PATCH 018/132] kubeshark: add miniharinn to maintainers

---
 pkgs/by-name/ku/kubeshark/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/ku/kubeshark/package.nix b/pkgs/by-name/ku/kubeshark/package.nix
index b6d480e5ba97..9ccb2474030a 100644
--- a/pkgs/by-name/ku/kubeshark/package.nix
+++ b/pkgs/by-name/ku/kubeshark/package.nix
@@ -75,6 +75,7 @@ buildGoModule (finalAttrs: {
     '';
     maintainers = with lib.maintainers; [
       qjoly
+      miniharinn
     ];
   };
 })

From 05dfcf90621107bb5ec7e104becd8f2404a009c7 Mon Sep 17 00:00:00 2001
From: Xiangyan Sun <wishstudio@gmail.com>
Date: Thu, 23 Apr 2026 12:49:16 -0700
Subject: [PATCH 019/132] swagger-cli: drop

---
 pkgs/by-name/sw/swagger-cli/package.nix | 35 -------------------------
 pkgs/top-level/aliases.nix              |  1 +
 2 files changed, 1 insertion(+), 35 deletions(-)
 delete mode 100644 pkgs/by-name/sw/swagger-cli/package.nix

diff --git a/pkgs/by-name/sw/swagger-cli/package.nix b/pkgs/by-name/sw/swagger-cli/package.nix
deleted file mode 100644
index 6edc192d6741..000000000000
--- a/pkgs/by-name/sw/swagger-cli/package.nix
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  lib,
-  buildNpmPackage,
-  fetchFromGitHub,
-}:
-
-buildNpmPackage rec {
-  pname = "swagger-cli";
-  version = "4.0.4";
-
-  src = fetchFromGitHub {
-    owner = "APIDevTools";
-    repo = "swagger-cli";
-    rev = "v${version}";
-    sha256 = "sha256-WgzfSd57vRwa1HrSgNxD0F5ckczBkOaVmrEZ9tMAcRA=";
-  };
-
-  npmDepsHash = "sha256-go9eYGCZmbwRArHVTVa6mxL+kjvBcrLxKw2iVv0a5hY=";
-
-  buildPhase = ''
-    npm run bump
-  '';
-
-  postInstall = ''
-    find $out/lib/node_modules -xtype l -delete
-  '';
-
-  meta = {
-    description = "Swagger 2.0 and OpenAPI 3.0 command-line tool";
-    homepage = "https://apitools.dev/swagger-cli/";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ dit7ya ];
-    mainProgram = "swagger-cli";
-  };
-}
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 86ff9d86da7a..74a459a83f4b 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -1920,6 +1920,7 @@ mapAliases {
   superTuxKart = warnAlias "'superTuxKart' has been renamed to 'supertuxkart'" supertuxkart; # Added 2026-02-12
   surge-XT = warnAlias "'surge-XT' has been renamed to 'surge-xt'" surge-xt; # Added 2026-02-12
   svt-av1-psy = warnAlias "'svt-av1-psy' has been replaced by 'svt-av1-psyex'" svt-av1-psyex; # Added 2026-01-10
+  swagger-cli = throw "'swagger-cli' has been removed as it is broken and unmaintained. Upstream suggests using 'redocly' instead"; # Added 2026-04-23
   swig4 = throw "'swig4' has been renamed to/replaced by 'swig'"; # Converted to throw 2025-10-27
   swiProlog = throw "'swiProlog' has been renamed to/replaced by 'swi-prolog'"; # Converted to throw 2025-10-27
   swiPrologWithGui = throw "'swiPrologWithGui' has been renamed to/replaced by 'swi-prolog-gui'"; # Converted to throw 2025-10-27

From 2bf66db78be8a9dfd6f5e42b738a10bdcd240b36 Mon Sep 17 00:00:00 2001
From: Xiangyan Sun <wishstudio@gmail.com>
Date: Thu, 23 Apr 2026 13:01:54 -0700
Subject: [PATCH 020/132] vangers: pin to ffmpeg 7

---
 pkgs/by-name/va/vangers/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/va/vangers/package.nix b/pkgs/by-name/va/vangers/package.nix
index b4a06d427bca..78e60ba9bd30 100644
--- a/pkgs/by-name/va/vangers/package.nix
+++ b/pkgs/by-name/va/vangers/package.nix
@@ -9,7 +9,7 @@
   SDL2_net,
   libogg,
   libvorbis,
-  ffmpeg,
+  ffmpeg_7,
   zlib,
 }:
 
@@ -40,7 +40,7 @@ stdenv.mkDerivation {
     SDL2_net
     libogg
     libvorbis
-    ffmpeg
+    ffmpeg_7
     clunk
     zlib
   ];

From 00aaffcbf620148233c62c02454024091de20699 Mon Sep 17 00:00:00 2001
From: Firelight Flagboy <firelight.flagboy@gmail.com>
Date: Mon, 20 Apr 2026 08:58:19 +0200
Subject: [PATCH 021/132] joystickwake: 0.4.2 -> 0.5.2

Replace dependency `dbus-next` by `dbus-fast` as indicated by the release note for `v0.5`:

https://codeberg.org/forestix/joystickwake/releases/tag/v0.5
---
 pkgs/by-name/jo/joystickwake/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/jo/joystickwake/package.nix b/pkgs/by-name/jo/joystickwake/package.nix
index 33736e905a1b..f455d91fd88d 100644
--- a/pkgs/by-name/jo/joystickwake/package.nix
+++ b/pkgs/by-name/jo/joystickwake/package.nix
@@ -5,14 +5,14 @@
 }:
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "joystickwake";
-  version = "0.4.2";
+  version = "0.5.2";
   pyproject = true;
 
   src = fetchFromCodeberg {
     owner = "forestix";
     repo = "joystickwake";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-vSvIpbcDIbRyitVjx3wNSxt5vTIZ9/NPWokOJt0p6oQ=";
+    hash = "sha256-qIXXlwZec4CQk93gmY5O3mdGdlNCeXWTr/DDw4vwRUM=";
   };
 
   build-system = with python3.pkgs; [
@@ -20,7 +20,7 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
   ];
 
   dependencies = with python3.pkgs; [
-    dbus-next
+    dbus-fast
     pyudev
     xlib
   ];

From 01e4565a07d1c0165c6dfef506b8ce08b9cc2651 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Mon, 27 Apr 2026 14:31:13 +0200
Subject: [PATCH 022/132] python3Packages.policy-sentry: 0.15.1 -> 0.16.0

Diff: https://github.com/salesforce/policy_sentry/compare/0.15.1...0.16.0

Changelog: https://github.com/salesforce/policy_sentry/releases/tag/0.16.0
---
 pkgs/development/python-modules/policy-sentry/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/policy-sentry/default.nix b/pkgs/development/python-modules/policy-sentry/default.nix
index 69721d9f3480..359c350f0f91 100644
--- a/pkgs/development/python-modules/policy-sentry/default.nix
+++ b/pkgs/development/python-modules/policy-sentry/default.nix
@@ -14,14 +14,14 @@
 
 buildPythonPackage rec {
   pname = "policy-sentry";
-  version = "0.15.1";
+  version = "0.16.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "salesforce";
     repo = "policy_sentry";
     tag = version;
-    hash = "sha256-G7V3BqgJs9nyvhZ9xzNwP50yz+2SZfps/gsW6U8eisk=";
+    hash = "sha256-oR8/hrntE4XzZHdbde+NoKWdsLs9jJ3RLIv8YsoDFt4=";
   };
 
   pythonRelaxDeps = [ "beautifulsoup4" ];

From 33adf02e929dbbe0151253cc2b8601a0a99c4279 Mon Sep 17 00:00:00 2001
From: 2kybe3 <kybe@kybe.xyz>
Date: Tue, 28 Apr 2026 20:56:16 +0200
Subject: [PATCH 023/132] novnc: 1.6.0 -> 1.7.0

Diff: https://github.com/novnc/noVNC/compare/v1.6.0...v1.7.0
Changelog: https://github.com/novnc/noVNC/releases/tag/v1.7.0
---
 pkgs/by-name/no/novnc/fix-paths.patch  |  9 +++++----
 pkgs/by-name/no/novnc/package.nix      |  6 +++---
 pkgs/by-name/no/novnc/websockify.patch | 11 ++++++-----
 3 files changed, 14 insertions(+), 12 deletions(-)

diff --git a/pkgs/by-name/no/novnc/fix-paths.patch b/pkgs/by-name/no/novnc/fix-paths.patch
index cb160320dd53..04cc2052f422 100644
--- a/pkgs/by-name/no/novnc/fix-paths.patch
+++ b/pkgs/by-name/no/novnc/fix-paths.patch
@@ -1,5 +1,5 @@
 diff --git a/utils/novnc_proxy b/utils/novnc_proxy
-index 0900f7e..a931763 100755
+index e1efb9f..1540698 100755
 --- a/utils/novnc_proxy
 +++ b/utils/novnc_proxy
 @@ -22,7 +22,7 @@ usage() {
@@ -10,8 +10,8 @@ index 0900f7e..a931763 100755
 +    echo "                          Default: @out@/share/webapps/novnc"
      echo "    --ssl-only            Disable non-https connections."
      echo "                                    "
-     echo "    --record FILE         Record traffic to FILE.session.js"
-@@ -44,7 +44,7 @@ PORT="6080"
+     echo "    --file-only           Disable directory listing in web server."
+@@ -53,7 +53,7 @@ LISTEN="$PORT"
  VNC_DEST="localhost:5900"
  CERT=""
  KEY=""
@@ -19,4 +19,5 @@ index 0900f7e..a931763 100755
 +WEB="@out@/share/webapps/novnc"
  proxy_pid=""
  SSLONLY=""
- RECORD_ARG=""
+ RECORD=""
+
diff --git a/pkgs/by-name/no/novnc/package.nix b/pkgs/by-name/no/novnc/package.nix
index d39c6484f562..b77abcfecdce 100644
--- a/pkgs/by-name/no/novnc/package.nix
+++ b/pkgs/by-name/no/novnc/package.nix
@@ -8,13 +8,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "novnc";
-  version = "1.6.0";
+  version = "1.7.0";
 
   src = fetchFromGitHub {
     owner = "novnc";
     repo = "noVNC";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-VYG0p70ZvRzK9IeA+5J95FqF+zWgj/8EcxnVOk+YL9o=";
+    sha256 = "sha256-vObaEjP8ZgA4a4bEYbSBsSTl6CfYa/B7qmghM+iVDnQ=";
   };
 
   patches =
@@ -35,7 +35,7 @@ stdenv.mkDerivation (finalAttrs: {
 
     install -Dm755 utils/novnc_proxy "$out/bin/novnc"
     install -dm755 "$out/share/webapps/novnc/"
-    cp -a app core po vendor vnc.html karma.conf.js package.json vnc_lite.html "$out/share/webapps/novnc/"
+    cp -a app core po vendor vnc.html karma.conf.cjs package.json vnc_lite.html "$out/share/webapps/novnc/"
 
     runHook postInstall
   '';
diff --git a/pkgs/by-name/no/novnc/websockify.patch b/pkgs/by-name/no/novnc/websockify.patch
index dd335cdbfc6c..4d970d3ab7a3 100644
--- a/pkgs/by-name/no/novnc/websockify.patch
+++ b/pkgs/by-name/no/novnc/websockify.patch
@@ -1,13 +1,14 @@
 diff --git a/utils/novnc_proxy b/utils/novnc_proxy
-index 0365c1e..7eba2db 100755
+index e1efb9f..6d79999 100755
 --- a/utils/novnc_proxy
 +++ b/utils/novnc_proxy
-@@ -167,7 +167,7 @@ if [[ -d ${HERE}/websockify ]]; then
+@@ -181,7 +181,7 @@ if [[ -d ${HERE}/websockify ]]; then
  
      echo "Using local websockify at $WEBSOCKIFY"
  else
--    WEBSOCKIFY_FROMSYSTEM=$(which websockify 2>/dev/null)
+-    WEBSOCKIFY_FROMSYSTEM=$(type -P websockify 2>/dev/null)
 +    WEBSOCKIFY_FROMSYSTEM="@websockify@/bin/websockify"
-     WEBSOCKIFY_FROMSNAP=${HERE}/../usr/bin/python2-websockify
      [ -f $WEBSOCKIFY_FROMSYSTEM ] && WEBSOCKIFY=$WEBSOCKIFY_FROMSYSTEM
-     [ -f $WEBSOCKIFY_FROMSNAP ] && WEBSOCKIFY=$WEBSOCKIFY_FROMSNAP
+ 
+     if [ ! -f "$WEBSOCKIFY" ]; then
+

From 1eb691b7e7710fa33f00cdf4bf95b976c4fec16f Mon Sep 17 00:00:00 2001
From: Jan Roehrich <jan.roehrich@vcluster.com>
Date: Wed, 29 Apr 2026 08:36:45 +0200
Subject: [PATCH 024/132] maintainers: add roehrijn

---
 maintainers/maintainer-list.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index f57aa9fe72fa..63cbe6fd1bd6 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -23497,6 +23497,13 @@
     githubId = 53882428;
     name = "Erik Rodriguez";
   };
+  roehrijn = {
+    email = "jan.roehrich@loft.sh";
+    github = "roehrijn";
+    githubId = 2474078;
+    name = "Jan Roehrich";
+    keys = [ { fingerprint = "21C1 F506 455E 95B4 EB39  D566 BAE1 2FF6 0C8A 97F2"; } ];
+  };
   rogarb = {
     email = "rogarb@rgarbage.fr";
     github = "rogarb";

From 319ce849244eb95617cf8c10735398c6f28095d7 Mon Sep 17 00:00:00 2001
From: Jan Roehrich <jan.roehrich@vcluster.com>
Date: Wed, 29 Apr 2026 08:36:53 +0200
Subject: [PATCH 025/132] vcluster: 0.31.0 -> 0.33.2

---
 pkgs/by-name/vc/vcluster/package.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/vc/vcluster/package.nix b/pkgs/by-name/vc/vcluster/package.nix
index 41e39fe23ec1..f222fb9843db 100644
--- a/pkgs/by-name/vc/vcluster/package.nix
+++ b/pkgs/by-name/vc/vcluster/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "vcluster";
-  version = "0.31.0";
+  version = "0.33.2";
 
   src = fetchFromGitHub {
     owner = "loft-sh";
     repo = "vcluster";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-yGvKZ70+x+PQiTCB8MxUplymlQLm9iT+ryBHFF1a/Os=";
+    hash = "sha256-17nJa4xM4+D1v85x2rHFtGU0C+Gi8nph7Q8JRHYXBP4=";
   };
 
   vendorHash = null;
@@ -57,6 +57,7 @@ buildGoModule (finalAttrs: {
     mainProgram = "vcluster";
     maintainers = with lib.maintainers; [
       qjoly
+      roehrijn
     ];
   };
 })

From 42e88a3bb5c3f38126a4be45104444c2342a4f26 Mon Sep 17 00:00:00 2001
From: Perchun Pak <git@perchun.it>
Date: Mon, 27 Apr 2026 22:51:55 +0200
Subject: [PATCH 026/132] equibop: 2.1.9 -> 2.2.0

---
 pkgs/by-name/eq/equibop/node-modules.nix |  4 ++--
 pkgs/by-name/eq/equibop/package.nix      | 13 +++++++++----
 2 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/pkgs/by-name/eq/equibop/node-modules.nix b/pkgs/by-name/eq/equibop/node-modules.nix
index aa9b6902371d..df0876ff55f8 100644
--- a/pkgs/by-name/eq/equibop/node-modules.nix
+++ b/pkgs/by-name/eq/equibop/node-modules.nix
@@ -50,8 +50,8 @@ stdenvNoCC.mkDerivation {
 
   outputHash =
     {
-      x86_64-linux = "sha256-pJp4l0QJAg42gj/R4bq4P1iVtMehkvNs7hv9/3RmNsI=";
-      aarch64-linux = "sha256-POIXQZ3ZruzfwF/6Kg6zRXdSrKtm56cBCMAvB5JTuJM=";
+      x86_64-linux = "sha256-p8jx9HDYG2q2nhBiBK8XDTYm9O0ptTqv8L+PrQ8oiy8=";
+      aarch64-linux = "sha256-UsccQFaSSjhmv1+oF2FZcRG8xtWBCcPD+tizbdQ7SSI=";
     }
     .${stdenvNoCC.hostPlatform.system}
       or (throw "Unsupported system ${stdenvNoCC.hostPlatform.system}");
diff --git a/pkgs/by-name/eq/equibop/package.nix b/pkgs/by-name/eq/equibop/package.nix
index 3dab77796c0b..61881fe24170 100644
--- a/pkgs/by-name/eq/equibop/package.nix
+++ b/pkgs/by-name/eq/equibop/package.nix
@@ -6,7 +6,7 @@
   makeWrapper,
   makeDesktopItem,
   copyDesktopItems,
-  electron_40,
+  electron_41,
   python3Packages,
   pipewire,
   libpulseaudio,
@@ -18,17 +18,17 @@
   withMiddleClickScroll ? false,
 }:
 let
-  electron = electron_40;
+  electron = electron_41;
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "equibop";
-  version = "3.1.9";
+  version = "3.2.0";
 
   src = fetchFromGitHub {
     owner = "Equicord";
     repo = "Equibop";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-4v0NKGmdbEdHyjz35l+QUnXvnVfLzIe1vLxOSmdgbYQ=";
+    hash = "sha256-CPRn1F15N4Rjry91Gu+ZXWpKVTOEnHI3TmZn8502QB4=";
   };
 
   postPatch = ''
@@ -38,6 +38,10 @@ stdenv.mkDerivation (finalAttrs: {
     # disable auto updates
     substituteInPlace src/main/updater.ts \
       --replace-fail 'const isOutdated = autoUpdater.checkForUpdates().then(res => Boolean(res?.isUpdateAvailable));' 'const isOutdated = false;'
+
+    # disable auto update for bun
+    substituteInPlace scripts/build/compileArrpc.mts \
+      --replace-fail -baseline ""
   '';
 
   node-modules = callPackage ./node-modules.nix { };
@@ -177,6 +181,7 @@ stdenv.mkDerivation (finalAttrs: {
     maintainers = with lib.maintainers; [
       NotAShelf
       rexies
+      PerchunPak
     ];
     mainProgram = "equibop";
     # I am not confident in my ability to support Darwin, please PR if this is important to you

From f096459f72b61e9d81e7155b2267184af233b21c Mon Sep 17 00:00:00 2001
From: Thomas Butter <tbutter@gmail.com>
Date: Fri, 1 May 2026 05:38:13 +0000
Subject: [PATCH 027/132] lazytrivy: 1.2.0 -> 1.3.3

---
 pkgs/by-name/la/lazytrivy/package.nix | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/la/lazytrivy/package.nix b/pkgs/by-name/la/lazytrivy/package.nix
index 47e94b231f7f..02bdbc4ebe2a 100644
--- a/pkgs/by-name/la/lazytrivy/package.nix
+++ b/pkgs/by-name/la/lazytrivy/package.nix
@@ -9,16 +9,18 @@
 
 buildGoModule (finalAttrs: {
   pname = "lazytrivy";
-  version = "1.2.0";
+  version = "1.3.3";
+
+  env.GOEXPERIMENT = "jsonv2";
 
   src = fetchFromGitHub {
     owner = "owenrumney";
     repo = "lazytrivy";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-fhHy54pIbYdj+mWCIx7Wla6x+J/w2f8+J+WSbt+WNwA=";
+    hash = "sha256-M7qhkHuyI6cpmRzvn8AJun3tyzTbU8QtUlK7Qo0xxU4=";
   };
 
-  vendorHash = "sha256-dIe6zjWc8DVU9YQbYfmNUcfSh6MsdZZ8/A/EYLmPNkE=";
+  vendorHash = "sha256-vzdGWlyk4Eqhh+r4RH4eVVA4YPnADCGYnh0tmeD8S8M=";
 
   ldflags = [
     "-s"

From 6074eff3b9f376a93973c240a17e64a915fbe48c Mon Sep 17 00:00:00 2001
From: Thomas Butter <tbutter@gmail.com>
Date: Fri, 1 May 2026 07:50:10 +0000
Subject: [PATCH 028/132] tdl: 0.19.0 -> 0.20.2

---
 pkgs/by-name/td/tdl/package.nix | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/td/tdl/package.nix b/pkgs/by-name/td/tdl/package.nix
index 94b7a1e90bdf..1d836a91f6f1 100644
--- a/pkgs/by-name/td/tdl/package.nix
+++ b/pkgs/by-name/td/tdl/package.nix
@@ -5,16 +5,22 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "tdl";
-  version = "0.19.0";
+  version = "0.20.2";
 
   src = fetchFromGitHub {
     owner = "iyear";
     repo = "tdl";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-EYS4EK0NmNHnvjMkf5AHrYpZeGw+n2ovFDLanbqpF4Y=";
+    hash = "sha256-xDCvZ6a7xW5kJ+3nsCQGASypzrosjihI0hlSobBWwj0=";
   };
 
-  vendorHash = "sha256-GpqgH23eK0h2BYxjN5TNUWEOT72smYdUoD1Iy6L2jL4=";
+  vendorHash = "sha256-dMuDmW3WtXU1Awuw7KKSCk1o/GKpBfsrqfvb3wVNGWw=";
+
+  postPatch = ''
+    rm go.work go.work.sum
+    go mod edit -replace github.com/iyear/tdl/core=./core
+    go mod edit -replace github.com/iyear/tdl/extension=./extension
+  '';
 
   ldflags = [
     "-s"
@@ -22,6 +28,10 @@ buildGoModule (finalAttrs: {
     "-X=github.com/iyear/tdl/pkg/consts.Version=${finalAttrs.version}"
   ];
 
+  env.GOGC = "50";
+
+  buildFlags = [ "-p=1" ];
+
   # Filter out the main executable
   subPackages = [ "." ];
 

From ab8d1efd3c27f53f130e33bf1cd45de59660e1d5 Mon Sep 17 00:00:00 2001
From: albertonoys <albertonoys@gmail.com>
Date: Fri, 1 May 2026 14:29:38 +0200
Subject: [PATCH 029/132] ticktick: 8.0.0 -> 8.0.10

---
 pkgs/by-name/ti/ticktick/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ti/ticktick/package.nix b/pkgs/by-name/ti/ticktick/package.nix
index d35f12d58fcc..a76980ddd4c1 100644
--- a/pkgs/by-name/ti/ticktick/package.nix
+++ b/pkgs/by-name/ti/ticktick/package.nix
@@ -19,18 +19,18 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "ticktick";
-  version = "8.0.0";
+  version = "8.0.10";
 
   src =
     if stdenv.hostPlatform.system == "x86_64-linux" then
       fetchurl {
         url = "${baseUrl}/linux/linux_deb_x64/ticktick-${finalAttrs.version}-amd64.deb";
-        hash = "sha256-s8mE66Tv3TyL4rMvok6cM5VM6pzWxPkiviS30KWcN1o=";
+        hash = "sha256-5zIhLpoqZM8+RC4YBhdDyMq2aEg31O8U6Q5gD8Bo9es=";
       }
     else if stdenv.hostPlatform.system == "aarch64-linux" then
       fetchurl {
         url = "${baseUrl}/linux/linux_deb_arm64/ticktick-${finalAttrs.version}-arm64.deb";
-        hash = "sha256-Lgfa4+VZH1XIAMZr7+RiwxZ1smswQOisOhmFSg2pyTE=";
+        hash = "sha256-R9dMGUiSXX/CRfVXoW3w2Gk1UfknfmNWoIqkhL/FRJs=";
       }
     else
       throw "Unsupported system: ${stdenv.hostPlatform.system}";

From bb9a28b2ba9b251e333d4a5ebcaebcfbd99fc0b6 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 2 May 2026 03:09:43 +0000
Subject: [PATCH 030/132] nb: 7.25.3 -> 7.25.4

---
 pkgs/by-name/nb/nb/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/nb/nb/package.nix b/pkgs/by-name/nb/nb/package.nix
index 53ccac64c697..25170308304a 100644
--- a/pkgs/by-name/nb/nb/package.nix
+++ b/pkgs/by-name/nb/nb/package.nix
@@ -10,13 +10,13 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "nb";
-  version = "7.25.3";
+  version = "7.25.4";
 
   src = fetchFromGitHub {
     owner = "xwmx";
     repo = "nb";
     tag = finalAttrs.version;
-    hash = "sha256-liDNmc7pueIk0nFUkPjP8llXzV6dTpHMVkRSc0stEVk=";
+    hash = "sha256-zcNL1WI3UoYV5nXzU0yYh0GwTsUzkeclMcEjQlneSzw=";
   };
 
   nativeBuildInputs = [ installShellFiles ];

From 356c711b9a3eb986cdc5a081383995b608cf40e5 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 2 May 2026 11:56:19 +0000
Subject: [PATCH 031/132] ranger: 1.9.4-unstable-2026-04-14 ->
 1.9.4-unstable-2026-04-26

---
 pkgs/by-name/ra/ranger/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ra/ranger/package.nix b/pkgs/by-name/ra/ranger/package.nix
index 333aeb46c4ac..58f55f30a3a9 100644
--- a/pkgs/by-name/ra/ranger/package.nix
+++ b/pkgs/by-name/ra/ranger/package.nix
@@ -19,14 +19,14 @@
 
 python3Packages.buildPythonApplication {
   pname = "ranger";
-  version = "1.9.4-unstable-2026-04-14";
+  version = "1.9.4-unstable-2026-04-26";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ranger";
     repo = "ranger";
-    rev = "9f671c6a577d19520ee3afd6e1a93bb35c10582c";
-    hash = "sha256-lZqVi8NakD7a0xCXLNWrbU3Rt1sR6EsWULsBvFM5Klc=";
+    rev = "51e19b8c7f30c241bb7266deb86e05c5984d6ea9";
+    hash = "sha256-qWI/7F2zOUm7QuH4RtfFOXlB1OZ6NrGfWLt5FlW+gqA=";
   };
 
   build-system = with python3Packages; [

From f641f8c16dfc375efb4309614100c07d94859046 Mon Sep 17 00:00:00 2001
From: Makuru <Makuru@Makuru.org>
Date: Mon, 4 May 2026 00:03:07 +0200
Subject: [PATCH 032/132] tidb: removal

---
 pkgs/by-name/ti/tidb/package.nix | 34 --------------------------------
 pkgs/top-level/aliases.nix       |  1 +
 2 files changed, 1 insertion(+), 34 deletions(-)
 delete mode 100644 pkgs/by-name/ti/tidb/package.nix

diff --git a/pkgs/by-name/ti/tidb/package.nix b/pkgs/by-name/ti/tidb/package.nix
deleted file mode 100644
index db4bd01300e2..000000000000
--- a/pkgs/by-name/ti/tidb/package.nix
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  lib,
-  buildGo125Module,
-  fetchFromGitHub,
-}:
-
-buildGo125Module (finalAttrs: {
-  pname = "tidb";
-  version = "8.5.6";
-
-  src = fetchFromGitHub {
-    owner = "pingcap";
-    repo = "tidb";
-    tag = "v${finalAttrs.version}";
-    hash = "sha256-sQ5hialileLC/ZpXoy5zfSnLZAL1I4aiiQf+y5LPIK8=";
-  };
-
-  vendorHash = "sha256-YJ47tC1pp+hDMIiKyzROypk+zX76r+c5O9qD2OkVmgw=";
-
-  ldflags = [
-    "-X github.com/pingcap/tidb/pkg/parser/mysql.TiDBReleaseVersion=${finalAttrs.version}"
-    "-X github.com/pingcap/tidb/pkg/util/versioninfo.TiDBEdition=Community"
-  ];
-
-  subPackages = [ "cmd/tidb-server" ];
-
-  meta = {
-    description = "Open-source, cloud-native, distributed, MySQL-Compatible database for elastic scale and real-time analytics";
-    homepage = "https://pingcap.com";
-    license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [ Makuru ];
-    mainProgram = "tidb-server";
-  };
-})
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 2e8656dbd5d0..2592889f63ea 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -2036,6 +2036,7 @@ mapAliases {
   thunderbird-128 = throw "Thunderbird 128 support ended in August 2025"; # Added 2025-09-30
   thunderbird-128-unwrapped = throw "Thunderbird 128 support ended in August 2025"; # Added 2025-09-30
   ticpp = throw "'ticpp' has been removed due to being unmaintained"; # Added 2025-09-10
+  tidb = throw "TiDB has been removed because of hard dependency on TiKV which is challenging to package"; # Added 2026-05-03
   timescaledb = throw "'timescaledb' has been removed. Use 'postgresqlPackages.timescaledb' instead."; # Added 2025-07-19
   tinyxml2 = throw "The 'tinyxml2' alias has been removed, use 'tinyxml' for https://sourceforge.net/projects/tinyxml/ or 'tinyxml-2' for https://github.com/leethomason/tinyxml2"; # Added 2025-10-11
   tkcvs = throw "'tkcvs' has been renamed to/replaced by 'tkrev'"; # Converted to throw 2025-10-27

From 0c6a7eded1abcdd24f5f6a2b477889ce97ce984b Mon Sep 17 00:00:00 2001
From: Acid Bong <acidbong@tilde.club>
Date: Sun, 3 May 2026 23:28:51 +0300
Subject: [PATCH 033/132] qbittorrent: fix licenses

Both versions of GPL are applied in "-or-later" variants: https://github.com/qbittorrent/qBittorrent/commit/b3334e5fac5b004bd160c973d18b1745e9fd1265
---
 pkgs/by-name/qb/qbittorrent/package.nix | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/qb/qbittorrent/package.nix b/pkgs/by-name/qb/qbittorrent/package.nix
index f503ac66b406..b51bdd6315aa 100644
--- a/pkgs/by-name/qb/qbittorrent/package.nix
+++ b/pkgs/by-name/qb/qbittorrent/package.nix
@@ -84,10 +84,12 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Featureful free software BitTorrent client";
     homepage = "https://www.qbittorrent.org";
     changelog = "https://github.com/qbittorrent/qBittorrent/blob/release-${finalAttrs.version}/Changelog";
-    license = with lib.licenses; [
-      gpl2Only
-      gpl3Only
-    ];
+    license =
+      with lib.licenses;
+      AND [
+        gpl2Plus # code
+        gpl3Plus # assets
+      ];
     platforms = lib.platforms.unix;
     maintainers = with lib.maintainers; [
       Anton-Latukha

From 29581302780f3be8c705b2560046fbe095c131bd Mon Sep 17 00:00:00 2001
From: Jeremy Fleischman <jeremyfleischman@gmail.com>
Date: Sun, 3 May 2026 02:13:32 -0700
Subject: [PATCH 034/132] gscan2pdf: disable a failing test

This is due to a breaking change in ImageMagick. I reported the issue to
both gscan2pdf and ImageMagick:

- https://sourceforge.net/p/gscan2pdf/bugs/442/
- https://github.com/ImageMagick/ImageMagick/issues/8714
---
 pkgs/by-name/gs/gscan2pdf/package.nix | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/pkgs/by-name/gs/gscan2pdf/package.nix b/pkgs/by-name/gs/gscan2pdf/package.nix
index fc62127f647b..a2097549a08b 100644
--- a/pkgs/by-name/gs/gscan2pdf/package.nix
+++ b/pkgs/by-name/gs/gscan2pdf/package.nix
@@ -123,15 +123,15 @@ perlPackages.buildPerlPackage rec {
   ]);
 
   checkPhase = ''
-    # Temporarily disable a test failing because of a behavioural change in ImageMagick7
-    # t/04_Page.t ................................... 1/12
-    #   Failed test 'undefined'
-    #   at t/04_Page.t line 114.
-    #          got: '72'
-    #     expected: '300'
-    # Looks like you failed 1 test of 12.
+    # Skip a failing test, due to a change in ImageMagick:
+    # https://sourceforge.net/p/gscan2pdf/bugs/439/
     rm t/04_Page.t
 
+    # Skip a failing test, due to a breaking change in ImageMagick:
+    # https://sourceforge.net/p/gscan2pdf/bugs/442/
+    # https://github.com/ImageMagick/ImageMagick/issues/8714
+    rm t/113_save_pdf_with_downsample.t
+
     export XDG_CACHE_HOME="$(mktemp -d)"
     xvfb-run -s '-screen 0 800x600x24' \
       make test

From c51299c5132a5143017ce0f09d423bd053dee060 Mon Sep 17 00:00:00 2001
From: kashw2 <supra4keanu@hotmail.com>
Date: Tue, 5 May 2026 10:30:39 +1000
Subject: [PATCH 035/132] qmplay2-qt6: add rubberband build input

---
 pkgs/by-name/qm/qmplay2/package.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/by-name/qm/qmplay2/package.nix b/pkgs/by-name/qm/qmplay2/package.nix
index 1799ab01f934..1da91154fb60 100644
--- a/pkgs/by-name/qm/qmplay2/package.nix
+++ b/pkgs/by-name/qm/qmplay2/package.nix
@@ -23,6 +23,7 @@
   taglib,
   vulkan-headers,
   vulkan-tools,
+  rubberband,
   # Configurable options
   qtVersion ? "6", # Can be 5 or 6
 }:
@@ -75,6 +76,7 @@ stdenv.mkDerivation (finalAttrs: {
     vulkan-tools
   ]
   ++ lib.optionals (qtVersion == "6") [
+    rubberband
     qt6.qt5compat
     qt6.qtbase
     qt6.qtsvg

From 201ae320539573a8f159d09757b8027d1530daf5 Mon Sep 17 00:00:00 2001
From: Jack Rosenberg <mail@jackr.eu>
Date: Tue, 5 May 2026 12:09:44 +0200
Subject: [PATCH 036/132] clojure-lsp: 2025.11.28-12.47.43 ->
 2026.02.20-16.08.58

---
 pkgs/by-name/cl/clojure-lsp/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/cl/clojure-lsp/package.nix b/pkgs/by-name/cl/clojure-lsp/package.nix
index 3ae353c04a75..b805f418bb09 100644
--- a/pkgs/by-name/cl/clojure-lsp/package.nix
+++ b/pkgs/by-name/cl/clojure-lsp/package.nix
@@ -12,11 +12,11 @@
 
 buildGraalvmNativeImage (finalAttrs: {
   pname = "clojure-lsp";
-  version = "2025.11.28-12.47.43";
+  version = "2026.02.20-16.08.58";
 
   src = fetchurl {
     url = "https://github.com/clojure-lsp/clojure-lsp/releases/download/${finalAttrs.version}/clojure-lsp-standalone.jar";
-    hash = "sha256-An7sTudpP2Ct32sYShNhgRsHgJJIN9H+sR5MlQ8i+7o=";
+    hash = "sha256-sSE/BIRT5CNc2ZS3LwSMLvQDVKLMlM1BIhKq6joX3c8=";
   };
 
   extraNativeImageBuildArgs = [

From 15fe2c25461674086e63701278dcba9bb2a635a4 Mon Sep 17 00:00:00 2001
From: Jack Rosenberg <mail@jackr.eu>
Date: Tue, 5 May 2026 12:09:54 +0200
Subject: [PATCH 037/132] clojure-lsp: modernize

---
 pkgs/by-name/cl/clojure-lsp/package.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/cl/clojure-lsp/package.nix b/pkgs/by-name/cl/clojure-lsp/package.nix
index b805f418bb09..ac1d94cff029 100644
--- a/pkgs/by-name/cl/clojure-lsp/package.nix
+++ b/pkgs/by-name/cl/clojure-lsp/package.nix
@@ -3,11 +3,9 @@
   stdenvNoCC,
   buildGraalvmNativeImage,
   fetchurl,
-  fetchFromGitHub,
   writeScript,
   writableTmpDirAsHomeHook,
   versionCheckHook,
-  testers,
 }:
 
 buildGraalvmNativeImage (finalAttrs: {
@@ -19,6 +17,9 @@ buildGraalvmNativeImage (finalAttrs: {
     hash = "sha256-sSE/BIRT5CNc2ZS3LwSMLvQDVKLMlM1BIhKq6joX3c8=";
   };
 
+  strictDeps = true;
+  __structuredAttrs = true;
+
   extraNativeImageBuildArgs = [
     # These build args mirror the build.clj upstream
     # ref: https://github.com/clojure-lsp/clojure-lsp/blob/2024.08.05-18.16.00/cli/build.clj#L141-L144

From a3560b4a6f0b2f16e929483963ca17e3a9385bba Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Tue, 5 May 2026 22:18:44 +0700
Subject: [PATCH 038/132] mpage: drop

---
 pkgs/by-name/mp/mpage/package.nix | 37 -------------------------------
 pkgs/top-level/aliases.nix        |  1 +
 2 files changed, 1 insertion(+), 37 deletions(-)
 delete mode 100644 pkgs/by-name/mp/mpage/package.nix

diff --git a/pkgs/by-name/mp/mpage/package.nix b/pkgs/by-name/mp/mpage/package.nix
deleted file mode 100644
index f9eca32cb763..000000000000
--- a/pkgs/by-name/mp/mpage/package.nix
+++ /dev/null
@@ -1,37 +0,0 @@
-{
-  fetchurl,
-  lib,
-  stdenv,
-}:
-
-stdenv.mkDerivation (finalAttrs: {
-  pname = "mpage";
-  version = "2.5.8";
-
-  src = fetchurl {
-    url = "https://www.mesa.nl/pub/mpage/mpage-${finalAttrs.version}.tgz";
-    sha256 = "sha256-I1HpHSV5SzWN9mGPF6cBOijTUOwgQI/gb4Ej3EZz/pM=";
-  };
-
-  postPatch = ''
-    sed -i "Makefile" -e "s|^ *PREFIX *=.*$|PREFIX = $out|g"
-    substituteInPlace Makefile --replace 'gcc' '${stdenv.cc.targetPrefix}cc'
-  '';
-
-  meta = {
-    description = "Many-to-one page printing utility";
-    mainProgram = "mpage";
-
-    longDescription = ''
-      Mpage reads plain text files or PostScript documents and prints
-      them on a PostScript printer with the text reduced in size so
-      that several pages appear on one sheet of paper.  This is useful
-      for viewing large printouts on a small amount of paper.  It uses
-      ISO 8859.1 to print 8-bit characters.
-    '';
-
-    license = lib.licenses.gpl2Plus;
-    homepage = "http://www.mesa.nl/pub/mpage/";
-    platforms = lib.platforms.all;
-  };
-})
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index d04309901da9..f2e82724026e 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -1420,6 +1420,7 @@ mapAliases {
   morty = throw "morty has been removed, as searxng removed support for it and it was unmaintained."; # Added 2025-09-26
   moz-phab = throw "'moz-phab' has been renamed to/replaced by 'mozphab'"; # Converted to throw 2025-10-27
   mp3splt = throw "'mp3splt' has been removed due to lack of maintenance upstream."; # Added 2025-05-17
+  mpage = throw "'mpage' has been removed due to being unmaintained and broken"; # Added 2026-05-05
   mpc-cli = throw "'mpc-cli' has been renamed to/replaced by 'mpc'"; # Converted to throw 2025-10-27
   mpc_cli = throw "'mpc_cli' has been renamed to/replaced by 'mpc'"; # Converted to throw 2025-10-27
   mpdevil = throw "'mpdevil' has been renamed to/replaced by 'plattenalbum'"; # Converted to throw 2025-10-27

From d72ac80f18247f50c396e561fe1265580e7ceb9c Mon Sep 17 00:00:00 2001
From: twoneis <git@chpu.eu>
Date: Tue, 5 May 2026 17:21:55 +0200
Subject: [PATCH 039/132] osmium: add update script

---
 pkgs/by-name/os/osmium/package.nix | 23 +++++++++++++++++++++--
 1 file changed, 21 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/os/osmium/package.nix b/pkgs/by-name/os/osmium/package.nix
index 7eb3de6fd611..b36d9ad1aeff 100644
--- a/pkgs/by-name/os/osmium/package.nix
+++ b/pkgs/by-name/os/osmium/package.nix
@@ -24,14 +24,18 @@
   gtk3,
   libnotify,
   libpulseaudio,
+  writeShellApplication,
+  curl,
+  yq,
+  common-updater-scripts,
 }:
 
 stdenv.mkDerivation rec {
   pname = "osmium";
-  version = "0.0.19";
+  version = "0.0.19-alpha";
 
   src = fetchurl {
-    url = "https://updater.osmium.chat/Osmium-${version}-alpha-x64.tar.gz";
+    url = "https://updater.osmium.chat/Osmium-${version}-x64.tar.gz";
     hash = "sha256-Qwh6K2QlJJapqR0BkaA0LvwLEsqktnLzOnyJg+7sMFo=";
   };
 
@@ -98,6 +102,21 @@ stdenv.mkDerivation rec {
     startupWMClass = "Osmium";
   };
 
+  passthru = {
+    updateScript = lib.getExe (writeShellApplication {
+      name = "update-osmium";
+      runtimeInputs = [
+        curl
+        yq
+        common-updater-scripts
+      ];
+      text = ''
+        version="$(curl -s https://updater.osmium.chat/alpha-linux.yml | yq .version)"
+        update-source-version osmium "${version}"
+      '';
+    });
+  };
+
   meta = {
     description = "Globally distributed community messaging and voice/video platform";
     homepage = "https://osmium.chat/";

From 0e9c2b477fd6e3ebe359444c79503ece6e982773 Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Tue, 5 May 2026 21:39:50 +0200
Subject: [PATCH 040/132] xloadimage: drop

xloadimage is broken [1], upstream doesn't exist anymore, and the
current packaging is based on more than 30 patches.

[1] https://hydra.nixos.org/build/326930917
---
 pkgs/by-name/xl/xloadimage/package.nix | 109 -------------------------
 pkgs/top-level/aliases.nix             |   1 +
 2 files changed, 1 insertion(+), 109 deletions(-)
 delete mode 100644 pkgs/by-name/xl/xloadimage/package.nix

diff --git a/pkgs/by-name/xl/xloadimage/package.nix b/pkgs/by-name/xl/xloadimage/package.nix
deleted file mode 100644
index 945275de5126..000000000000
--- a/pkgs/by-name/xl/xloadimage/package.nix
+++ /dev/null
@@ -1,109 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchurl,
-  fetchzip,
-  libx11,
-  libxt,
-  autoreconfHook,
-  quilt,
-
-  libjpeg ? null,
-  libpng ? null,
-  libtiff ? null,
-
-  withJpegSupport ? true,
-  withPngSupport ? true,
-  withTiffSupport ? true,
-}:
-
-assert withJpegSupport -> libjpeg != null;
-assert withPngSupport -> libpng != null;
-assert withTiffSupport -> libtiff != null;
-
-let
-  version = "4.1";
-  deb_patch = "25";
-  debian_patches = fetchzip {
-    url = "mirror://debian/pool/main/x/xloadimage/xloadimage_${version}-${deb_patch}.debian.tar.xz";
-    hash = "sha256-5FbkiYjI8ASUyi1DTFiAcJ9y2z1sEKrNNyKoqnca30I=";
-  };
-in
-stdenv.mkDerivation rec {
-  pname = "xloadimage";
-  inherit version;
-
-  src = fetchurl {
-    url = "mirror://debian/pool/main/x/xloadimage/xloadimage_${version}.orig.tar.gz";
-    sha256 = "1i7miyvk5ydhi6yi8593vapavhwxcwciir8wg9d2dcyg9pccf2s0";
-  };
-
-  postPatch = ''
-    QUILT_PATCHES=${debian_patches}/patches quilt push -a
-  '';
-
-  nativeBuildInputs = [
-    autoreconfHook
-    quilt
-  ];
-
-  buildInputs = [
-    libx11
-    libxt
-  ]
-  ++ lib.optionals withJpegSupport [
-    libjpeg
-  ]
-  ++ lib.optionals withPngSupport [
-    libpng
-  ]
-  ++ lib.optionals withTiffSupport [
-    libtiff
-  ];
-
-  # NOTE: we patch the build-info script so that it never detects the utilities
-  # it's trying to find; one of the Debian patches adds support for
-  # $SOURCE_DATE_EPOCH, but we want to make sure we don't even call these.
-  preConfigure = ''
-    substituteInPlace build-info \
-      --replace-fail '[ -x /bin/date ]' 'false' \
-      --replace-fail '[ -x /bin/id ]' 'false' \
-      --replace-fail '[ -x /bin/uname ]' 'false' \
-      --replace-fail '[ -x /usr/bin/id ]' 'false'
-
-    chmod +x build-info configure
-  '';
-
-  enableParallelBuilding = true;
-
-  # creating patch would add more complexity
-  env.CFLAGS = "-Wno-implicit-int";
-
-  # NOTE: we're not installing the `uufilter` binary; if needed, the standard
-  # `uudecode` tool should work just fine.
-  installPhase = ''
-    install -Dm755 xloadimage $out/bin/xloadimage
-    ln -sv $out/bin/{xloadimage,xsetbg}
-
-    install -D -m644 xloadimagerc $out/etc/xloadimagerc.example
-    install -D -m644 xloadimage.man $out/share/man/man1/xloadimage.1x
-    ln -sv $out/share/man/man1/{xloadimage,xsetbg}.1x
-  '';
-
-  meta = {
-    description = "Graphics file viewer under X11";
-
-    longDescription = ''
-      Can view png, jpeg, gif, tiff, niff, sunraster, fbm, cmuraster, pbm,
-      faces, rle, xwd, vff, mcidas, vicar, pcx, gem, macpaint, xpm and xbm
-      files. Can view images, put them on the root window, or dump them. Does a
-      variety of processing, including: clipping, dithering, depth reduction,
-      zoom, brightening/darkening and merging.
-    '';
-
-    license = lib.licenses.gpl2Plus;
-
-    maintainers = [ ];
-    platforms = lib.platforms.linux; # arbitrary choice
-  };
-}
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index d04309901da9..6f3880f4dd01 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -2272,6 +2272,7 @@ mapAliases {
   xjump = throw "'xjump' has been removed as it is unmaintained"; # Added 2025-08-22
   xkeyboardconfig = xkeyboard-config; # Added 2026-02-04
   xkeyboardconfig_custom = xkeyboard-config_custom; # Added 2026-01-19
+  xloadimage = throw "'xloadimage' has been removed as it was unmaintained upstream"; # Added 2026-05-05
   xmlada = throw "'xmlada' has been renamed to/replaced by 'gnatPackages.xmlada'"; # Converted to throw 2025-10-27
   xmlroff = throw "'xmlroff' has been removed as it is unmaintained and broken"; # Added 2025-05-18
   xo = throw "Use 'dbtpl' instead of 'xo'"; # Added 2025-09-28

From b261cc609e258251c39b52e5b2f8159515c9d6ab Mon Sep 17 00:00:00 2001
From: Nathan Mills <38995150+Quipyowert2@users.noreply.github.com>
Date: Tue, 5 May 2026 12:01:21 -0700
Subject: [PATCH 041/132] torcs: 1.3.8 -> 1.3.9

https://sourceforge.net/p/torcs/code/ci/master/tree/torcs/torcs/doc/changelogs/1_3_9.txt
---
 pkgs/by-name/to/torcs/without-data.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/to/torcs/without-data.nix b/pkgs/by-name/to/torcs/without-data.nix
index fc33dbc6b556..07a10262b220 100644
--- a/pkgs/by-name/to/torcs/without-data.nix
+++ b/pkgs/by-name/to/torcs/without-data.nix
@@ -25,11 +25,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "torcs-without-data";
-  version = "1.3.8";
+  version = "1.3.9";
 
   src = fetchurl {
-    url = "mirror://sourceforge/torcs/torcs-${finalAttrs.version}.tar.bz2";
-    sha256 = "sha256-S5Z3NUX7NkEZgqbziXIF64/VciedTOVp8s4HsI6Jp68=";
+    url = "mirror://sourceforge/torcs/all-in-one/${finalAttrs.version}/torcs-${finalAttrs.version}.tar.bz2";
+    sha256 = "sha256-+caehtKQKVRnRRsB14ONhQBbphNkSm/oo/hafGoDzUw=";
   };
 
   patches = [

From 4b19a3a7c5b17fcd3b952f5a758d9f26ed710f16 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Wed, 6 May 2026 15:02:14 +0700
Subject: [PATCH 042/132] ownserver: fix build

---
 pkgs/by-name/ow/ownserver/bump-metrics.patch | 104 +++++++++++++++++++
 pkgs/by-name/ow/ownserver/package.nix        |   6 +-
 2 files changed, 109 insertions(+), 1 deletion(-)
 create mode 100644 pkgs/by-name/ow/ownserver/bump-metrics.patch

diff --git a/pkgs/by-name/ow/ownserver/bump-metrics.patch b/pkgs/by-name/ow/ownserver/bump-metrics.patch
new file mode 100644
index 000000000000..57a5f897315e
--- /dev/null
+++ b/pkgs/by-name/ow/ownserver/bump-metrics.patch
@@ -0,0 +1,104 @@
+--- a/Cargo.lock
++++ b/Cargo.lock
+@@ -18,18 +18,6 @@
+ checksum = "512761e0bb2578dd7380c6baaa0f4ce03e84f95e960231d1dec8bf4d7d6e2627"
+ 
+ [[package]]
+-name = "ahash"
+-version = "0.8.11"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "e89da841a80418a9b391ebaea17f5c112ffaaa96f621d2c285b5174da76b9011"
+-dependencies = [
+- "cfg-if",
+- "once_cell",
+- "version_check",
+- "zerocopy 0.7.35",
+-]
+-
+-[[package]]
+ name = "aho-corasick"
+ version = "1.1.3"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+@@ -1584,12 +1572,12 @@
+ 
+ [[package]]
+ name = "metrics"
+-version = "0.24.1"
++version = "0.24.5"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "7a7deb012b3b2767169ff203fadb4c6b0b82b947512e5eb9e0b78c2e186ad9e3"
++checksum = "ff56c2e7dce6bd462e3b8919986a617027481b1dcc703175b58cf9dd98a2f071"
+ dependencies = [
+- "ahash",
+  "portable-atomic",
++ "rapidhash",
+ ]
+ 
+ [[package]]
+@@ -2126,7 +2114,7 @@
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+ dependencies = [
+- "zerocopy 0.8.24",
++ "zerocopy",
+ ]
+ 
+ [[package]]
+@@ -2327,7 +2315,7 @@
+ dependencies = [
+  "rand_chacha 0.9.0",
+  "rand_core 0.9.3",
+- "zerocopy 0.8.24",
++ "zerocopy",
+ ]
+ 
+ [[package]]
+@@ -2378,6 +2366,15 @@
+ ]
+ 
+ [[package]]
++name = "rapidhash"
++version = "4.4.1"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "b5e48930979c155e2f33aa36ab3119b5ee81332beb6482199a8ecd6029b80b59"
++dependencies = [
++ "rustversion",
++]
++
++[[package]]
+ name = "raw-cpuid"
+ version = "11.5.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+@@ -4242,31 +4239,11 @@
+ 
+ [[package]]
+ name = "zerocopy"
+-version = "0.7.35"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "1b9b4fd18abc82b8136838da5d50bae7bdea537c574d8dc1a34ed098d6c166f0"
+-dependencies = [
+- "zerocopy-derive 0.7.35",
+-]
+-
+-[[package]]
+-name = "zerocopy"
+ version = "0.8.24"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "2586fea28e186957ef732a5f8b3be2da217d65c5969d4b1e17f973ebbe876879"
+ dependencies = [
+- "zerocopy-derive 0.8.24",
+-]
+-
+-[[package]]
+-name = "zerocopy-derive"
+-version = "0.7.35"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "fa4f8080344d4671fb4e831a13ad1e68092748387dfc4f55e356242fae12ce3e"
+-dependencies = [
+- "proc-macro2",
+- "quote",
+- "syn 2.0.100",
++ "zerocopy-derive",
+ ]
+ 
+ [[package]]
diff --git a/pkgs/by-name/ow/ownserver/package.nix b/pkgs/by-name/ow/ownserver/package.nix
index 712076924a4a..38a810e133bc 100644
--- a/pkgs/by-name/ow/ownserver/package.nix
+++ b/pkgs/by-name/ow/ownserver/package.nix
@@ -18,7 +18,11 @@ rustPlatform.buildRustPackage (finalAttrs: {
     hash = "sha256-bseDssSMerBlzlCvL3rD3X6ku5qDRYvI1wxq2W7As5k=";
   };
 
-  cargoHash = "sha256-SJm66CDrg6ZpIeKx27AnZAVs/Z25E/KmHYuZ9G4UwHQ=";
+  # Bump vendored `metrics` past 0.24.2 which fixes a borrow-checker error
+  # under newer rustc (https://github.com/rust-lang/rust/issues/141402).
+  cargoPatches = [ ./bump-metrics.patch ];
+
+  cargoHash = "sha256-EzuG3ev/6EqTGi0J0wppZz+cZJiH12WbBQLKOrTxTzs=";
 
   nativeBuildInputs = [
     pkg-config

From 2f5a2a048ef82de36e7cd7b44cc92fa31811dccb Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Wed, 6 May 2026 16:03:14 +0700
Subject: [PATCH 043/132] ownserver: enable darwinAllowLocalNetworking for
 tests

---
 pkgs/by-name/ow/ownserver/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ow/ownserver/package.nix b/pkgs/by-name/ow/ownserver/package.nix
index 38a810e133bc..4ee452b05dd2 100644
--- a/pkgs/by-name/ow/ownserver/package.nix
+++ b/pkgs/by-name/ow/ownserver/package.nix
@@ -33,6 +33,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
     openssl
   ];
 
+  # `proxy_client::fetch_token_test` spins up a warp server during `cargo test`.
+  __darwinAllowLocalNetworking = true;
+
   passthru.updateScript = nix-update-script { };
 
   meta = {

From 17964c96aa5e2685f07bd5f774bc849677012b57 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Wed, 6 May 2026 16:13:42 +0700
Subject: [PATCH 044/132] rumqttd: fix build

---
 pkgs/by-name/ru/rumqttd/bump-metrics.patch | 548 +++++++++++++++++++++
 pkgs/by-name/ru/rumqttd/package.nix        |   7 +-
 2 files changed, 554 insertions(+), 1 deletion(-)
 create mode 100644 pkgs/by-name/ru/rumqttd/bump-metrics.patch

diff --git a/pkgs/by-name/ru/rumqttd/bump-metrics.patch b/pkgs/by-name/ru/rumqttd/bump-metrics.patch
new file mode 100644
index 000000000000..5affdc273678
--- /dev/null
+++ b/pkgs/by-name/ru/rumqttd/bump-metrics.patch
@@ -0,0 +1,548 @@
+--- a/rumqttd/Cargo.toml
++++ b/rumqttd/Cargo.toml
+@@ -32,8 +32,8 @@
+ config = "0.14"
+ tracing = { version="0.1", features=["log"] }
+ tracing-subscriber = { version="0.3.18", features=["env-filter"] }
+-metrics = "0.22.1"
+-metrics-exporter-prometheus = { version = "0.13.1", default-features = false, features = ["http-listener"] }
++metrics = "0.24.5"
++metrics-exporter-prometheus = { version = "0.16", default-features = false, features = ["http-listener"] }
+ clap = { version = "4.4", features = ["derive"] }
+ axum = "0.7.4"
+ rand = "0.8.5"
+--- a/Cargo.lock
++++ b/Cargo.lock
+@@ -24,7 +24,7 @@
+ checksum = "77c3a9648d43b9cd48db467b3f87fdd6e146bcc88ab0180006cef2179fe11d01"
+ dependencies = [
+  "cfg-if",
+- "getrandom",
++ "getrandom 0.2.12",
+  "once_cell",
+  "version_check",
+  "zerocopy",
+@@ -256,10 +256,10 @@
+  "axum-core",
+  "bytes",
+  "futures-util",
+- "http 1.0.0",
+- "http-body 1.0.0",
++ "http",
++ "http-body",
+  "http-body-util",
+- "hyper 1.2.0",
++ "hyper",
+  "hyper-util",
+  "itoa",
+  "matchit",
+@@ -289,8 +289,8 @@
+  "async-trait",
+  "bytes",
+  "futures-util",
+- "http 1.0.0",
+- "http-body 1.0.0",
++ "http",
++ "http-body",
+  "http-body-util",
+  "mime",
+  "pin-project-lite",
+@@ -329,6 +329,12 @@
+ checksum = "9d297deb1925b89f2ccc13d7635fa0714f12c87adce1c75356b39ca9b7178567"
+ 
+ [[package]]
++name = "base64"
++version = "0.22.1"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
++
++[[package]]
+ name = "benchmarks"
+ version = "0.4.0"
+ dependencies = [
+@@ -564,7 +570,7 @@
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "f9d839f2a20b0aee515dc581a6172f2321f96cab76c1a38a4c584a194955390e"
+ dependencies = [
+- "getrandom",
++ "getrandom 0.2.12",
+  "once_cell",
+  "tiny-keccak",
+ ]
+@@ -836,6 +842,12 @@
+ checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+ 
+ [[package]]
++name = "foldhash"
++version = "0.1.5"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2"
++
++[[package]]
+ name = "foreign-types"
+ version = "0.3.2"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+@@ -983,6 +995,18 @@
+ ]
+ 
+ [[package]]
++name = "getrandom"
++version = "0.3.4"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
++dependencies = [
++ "cfg-if",
++ "libc",
++ "r-efi",
++ "wasip2",
++]
++
++[[package]]
+ name = "gimli"
+ version = "0.28.1"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+@@ -1005,7 +1029,7 @@
+  "futures-core",
+  "futures-sink",
+  "futures-util",
+- "http 1.0.0",
++ "http",
+  "indexmap",
+  "slab",
+  "tokio",
+@@ -1021,14 +1045,20 @@
+ 
+ [[package]]
+ name = "hashbrown"
+-version = "0.14.3"
++version = "0.15.5"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "290f1a1d9242c78d09ce40a5e87e7554ee637af1351968159f4952f028f75604"
++checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1"
+ dependencies = [
+- "ahash",
++ "foldhash",
+ ]
+ 
+ [[package]]
++name = "hashbrown"
++version = "0.17.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "4f467dd6dccf739c208452f8014c75c18bb8301b050ad1cfb27153803edb0f51"
++
++[[package]]
+ name = "heck"
+ version = "0.4.1"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+@@ -1051,17 +1081,6 @@
+ 
+ [[package]]
+ name = "http"
+-version = "0.2.11"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "8947b1a6fad4393052c7ba1f4cd97bed3e953a95c79c92ad9b051a04611d9fbb"
+-dependencies = [
+- "bytes",
+- "fnv",
+- "itoa",
+-]
+-
+-[[package]]
+-name = "http"
+ version = "1.0.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "b32afd38673a8016f7c9ae69e5af41a58f81b1d31689040f2f1959594ce194ea"
+@@ -1073,23 +1092,12 @@
+ 
+ [[package]]
+ name = "http-body"
+-version = "0.4.6"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "7ceab25649e9960c0311ea418d17bee82c0dcec1bd053b5f9a66e265a693bed2"
+-dependencies = [
+- "bytes",
+- "http 0.2.11",
+- "pin-project-lite",
+-]
+-
+-[[package]]
+-name = "http-body"
+ version = "1.0.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "1cac85db508abc24a2e48553ba12a996e87244a0395ce011e62b37158745d643"
+ dependencies = [
+  "bytes",
+- "http 1.0.0",
++ "http",
+ ]
+ 
+ [[package]]
+@@ -1100,8 +1108,8 @@
+ dependencies = [
+  "bytes",
+  "futures-util",
+- "http 1.0.0",
+- "http-body 1.0.0",
++ "http",
++ "http-body",
+  "pin-project-lite",
+ ]
+ 
+@@ -1125,29 +1133,6 @@
+ 
+ [[package]]
+ name = "hyper"
+-version = "0.14.28"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "bf96e135eb83a2a8ddf766e426a841d8ddd7449d5f00d34ea02b41d2f19eef80"
+-dependencies = [
+- "bytes",
+- "futures-channel",
+- "futures-core",
+- "futures-util",
+- "http 0.2.11",
+- "http-body 0.4.6",
+- "httparse",
+- "httpdate",
+- "itoa",
+- "pin-project-lite",
+- "socket2",
+- "tokio",
+- "tower-service",
+- "tracing",
+- "want",
+-]
+-
+-[[package]]
+-name = "hyper"
+ version = "1.2.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "186548d73ac615b32a73aafe38fb4f56c0d340e110e5a200bcadbaf2e199263a"
+@@ -1156,14 +1141,15 @@
+  "futures-channel",
+  "futures-util",
+  "h2",
+- "http 1.0.0",
+- "http-body 1.0.0",
++ "http",
++ "http-body",
+  "httparse",
+  "httpdate",
+  "itoa",
+  "pin-project-lite",
+  "smallvec",
+  "tokio",
++ "want",
+ ]
+ 
+ [[package]]
+@@ -1173,13 +1159,17 @@
+ checksum = "ca38ef113da30126bbff9cd1705f9273e15d45498615d138b0c20279ac7a76aa"
+ dependencies = [
+  "bytes",
++ "futures-channel",
+  "futures-util",
+- "http 1.0.0",
+- "http-body 1.0.0",
+- "hyper 1.2.0",
++ "http",
++ "http-body",
++ "hyper",
+  "pin-project-lite",
+  "socket2",
+  "tokio",
++ "tower",
++ "tower-service",
++ "tracing",
+ ]
+ 
+ [[package]]
+@@ -1194,12 +1184,12 @@
+ 
+ [[package]]
+ name = "indexmap"
+-version = "2.2.3"
++version = "2.14.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "233cf39063f058ea2caae4091bf4a3ef70a653afbc026f5c4a4135d114e3c177"
++checksum = "d466e9454f08e4a911e14806c24e16fba1b4c121d1ea474396f396069cf949d9"
+ dependencies = [
+  "equivalent",
+- "hashbrown 0.14.3",
++ "hashbrown 0.17.0",
+ ]
+ 
+ [[package]]
+@@ -1295,9 +1285,9 @@
+ 
+ [[package]]
+ name = "libc"
+-version = "0.2.153"
++version = "0.2.186"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "9c198f91728a82281a64e1f4f9eeb25d82cb32a5de251c6bd1b5154d63a8e7bd"
++checksum = "68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"
+ 
+ [[package]]
+ name = "libloading"
+@@ -1375,22 +1365,24 @@
+ 
+ [[package]]
+ name = "metrics"
+-version = "0.22.1"
++version = "0.24.5"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "cd71d9db2e4287c3407fa04378b8c2ee570aebe0854431562cdd89ca091854f4"
++checksum = "ff56c2e7dce6bd462e3b8919986a617027481b1dcc703175b58cf9dd98a2f071"
+ dependencies = [
+- "ahash",
+  "portable-atomic",
++ "rapidhash",
+ ]
+ 
+ [[package]]
+ name = "metrics-exporter-prometheus"
+-version = "0.13.1"
++version = "0.16.2"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "9bf4e7146e30ad172c42c39b3246864bd2d3c6396780711a1baf749cfe423e21"
++checksum = "dd7399781913e5393588a8d8c6a2867bf85fb38eaf2502fdce465aad2dc6f034"
+ dependencies = [
+- "base64 0.21.7",
+- "hyper 0.14.28",
++ "base64 0.22.1",
++ "http-body-util",
++ "hyper",
++ "hyper-util",
+  "indexmap",
+  "ipnet",
+  "metrics",
+@@ -1398,20 +1390,22 @@
+  "quanta",
+  "thiserror 1.0.57",
+  "tokio",
++ "tracing",
+ ]
+ 
+ [[package]]
+ name = "metrics-util"
+-version = "0.16.2"
++version = "0.19.1"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "ece71ab046dcf45604e573329966ec1db5ff4b81cfa170a924ff4c959ab5451a"
++checksum = "b8496cc523d1f94c1385dd8f0f0c2c480b2b8aeccb5b7e4485ad6365523ae376"
+ dependencies = [
+  "crossbeam-epoch",
+  "crossbeam-utils",
+- "hashbrown 0.14.3",
++ "hashbrown 0.15.5",
+  "metrics",
+- "num_cpus",
+  "quanta",
++ "rand 0.9.4",
++ "rand_xoshiro",
+  "sketches-ddsketch",
+ ]
+ 
+@@ -1961,14 +1955,30 @@
+ ]
+ 
+ [[package]]
++name = "r-efi"
++version = "5.3.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
++
++[[package]]
+ name = "rand"
+ version = "0.8.5"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+ dependencies = [
+  "libc",
+- "rand_chacha",
+- "rand_core",
++ "rand_chacha 0.3.1",
++ "rand_core 0.6.4",
++]
++
++[[package]]
++name = "rand"
++version = "0.9.4"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea"
++dependencies = [
++ "rand_chacha 0.9.0",
++ "rand_core 0.9.5",
+ ]
+ 
+ [[package]]
+@@ -1978,7 +1988,17 @@
+ checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
+ dependencies = [
+  "ppv-lite86",
+- "rand_core",
++ "rand_core 0.6.4",
++]
++
++[[package]]
++name = "rand_chacha"
++version = "0.9.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
++dependencies = [
++ "ppv-lite86",
++ "rand_core 0.9.5",
+ ]
+ 
+ [[package]]
+@@ -1987,7 +2007,34 @@
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
+ dependencies = [
+- "getrandom",
++ "getrandom 0.2.12",
++]
++
++[[package]]
++name = "rand_core"
++version = "0.9.5"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
++dependencies = [
++ "getrandom 0.3.4",
++]
++
++[[package]]
++name = "rand_xoshiro"
++version = "0.7.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "f703f4665700daf5512dcca5f43afa6af89f09db47fb56be587f80636bda2d41"
++dependencies = [
++ "rand_core 0.9.5",
++]
++
++[[package]]
++name = "rapidhash"
++version = "4.4.1"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "b5e48930979c155e2f33aa36ab3119b5ee81332beb6482199a8ecd6029b80b59"
++dependencies = [
++ "rustversion",
+ ]
+ 
+ [[package]]
+@@ -2069,7 +2116,7 @@
+ dependencies = [
+  "cc",
+  "cfg-if",
+- "getrandom",
++ "getrandom 0.2.12",
+  "libc",
+  "spin",
+  "untrusted",
+@@ -2100,7 +2147,7 @@
+  "fixedbitset 0.5.7",
+  "flume",
+  "futures-util",
+- "http 1.0.0",
++ "http",
+  "log",
+  "matches",
+  "native-tls",
+@@ -2122,7 +2169,7 @@
+ 
+ [[package]]
+ name = "rumqttd"
+-version = "0.19.0"
++version = "0.20.0"
+ dependencies = [
+  "async-tungstenite 0.25.0",
+  "axum",
+@@ -2136,7 +2183,7 @@
+  "parking_lot",
+  "pretty_assertions",
+  "pretty_env_logger",
+- "rand",
++ "rand 0.8.5",
+  "rustls-pemfile",
+  "rustls-webpki",
+  "serde",
+@@ -2466,9 +2513,9 @@
+ 
+ [[package]]
+ name = "sketches-ddsketch"
+-version = "0.2.2"
++version = "0.3.1"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "85636c14b73d81f541e525f585c0a2109e6744e1565b5c1668e31c70c10ed65c"
++checksum = "0c6f73aeb92d671e0cc4dca167e59b2deb6387c375391bc99ee743f326994a2b"
+ 
+ [[package]]
+ name = "slab"
+@@ -2943,10 +2990,10 @@
+  "byteorder",
+  "bytes",
+  "data-encoding",
+- "http 1.0.0",
++ "http",
+  "httparse",
+  "log",
+- "rand",
++ "rand 0.8.5",
+  "sha1",
+  "thiserror 1.0.57",
+  "url",
+@@ -2962,10 +3009,10 @@
+  "byteorder",
+  "bytes",
+  "data-encoding",
+- "http 1.0.0",
++ "http",
+  "httparse",
+  "log",
+- "rand",
++ "rand 0.8.5",
+  "rustls 0.23.17",
+  "rustls-pki-types",
+  "sha1",
+@@ -3053,8 +3100,8 @@
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "f00cc9702ca12d3c81455259621e676d0f7251cec66a21e98fe2e9a37db93b2a"
+ dependencies = [
+- "getrandom",
+- "rand",
++ "getrandom 0.2.12",
++ "rand 0.8.5",
+ ]
+ 
+ [[package]]
+@@ -3091,6 +3138,15 @@
+ checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423"
+ 
+ [[package]]
++name = "wasip2"
++version = "1.0.3+wasi-0.2.9"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "20064672db26d7cdc89c7798c48a0fdfac8213434a1186e5ef29fd560ae223d6"
++dependencies = [
++ "wit-bindgen",
++]
++
++[[package]]
+ name = "wasm-bindgen"
+ version = "0.2.91"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+@@ -3339,6 +3395,12 @@
+ ]
+ 
+ [[package]]
++name = "wit-bindgen"
++version = "0.57.1"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
++
++[[package]]
+ name = "ws_stream_tungstenite"
+ version = "0.13.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
diff --git a/pkgs/by-name/ru/rumqttd/package.nix b/pkgs/by-name/ru/rumqttd/package.nix
index e426d9139c0e..e22b81a2c7db 100644
--- a/pkgs/by-name/ru/rumqttd/package.nix
+++ b/pkgs/by-name/ru/rumqttd/package.nix
@@ -15,7 +15,12 @@ rustPlatform.buildRustPackage (finalAttrs: {
     tag = "rumqttd-${finalAttrs.version}";
     hash = "sha256-WFhVSFAp5ZIqranLpU86L7keQaReEUXxxGhvikF+TBw=";
   };
-  cargoHash = "sha256-UP1uhG+Ow/jN/B8i//vujP7vpoQ5PjYGCrXs0b1bym4=";
+
+  # Bump vendored `metrics` past 0.24.2 which fixes a borrow-checker error
+  # under newer rustc (https://github.com/rust-lang/rust/issues/141402).
+  cargoPatches = [ ./bump-metrics.patch ];
+
+  cargoHash = "sha256-rVJBYOleIHFNwWNrz0JU8rwiMv9E1QfPjDvtrfXvWlQ=";
 
   buildAndTestSubdir = "rumqttd";
 

From 6bb4c2a4d0727c80db48821f66738fb1ed43089c Mon Sep 17 00:00:00 2001
From: Tyce Herrman <Tyce.Herrman@pm.me>
Date: Tue, 5 May 2026 16:11:22 -0400
Subject: [PATCH 045/132] mise: add git to nativeCheckInputs

Co-authored-by: Codex <noreply@openai.com>
---
 pkgs/by-name/mi/mise/package.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/by-name/mi/mise/package.nix b/pkgs/by-name/mi/mise/package.nix
index 05c0129dd694..38549a1186a8 100644
--- a/pkgs/by-name/mi/mise/package.nix
+++ b/pkgs/by-name/mi/mise/package.nix
@@ -64,6 +64,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   nativeCheckInputs = [
     cacert
     cmake
+    # gix spawns git-upload-pack by name in file:// clone tests.
+    git
     rustPlatform.bindgenHook
   ];
 

From d43ff35013e056f6641d0ed46469e786fcf63d1f Mon Sep 17 00:00:00 2001
From: Jamie Magee <jamie.magee@gmail.com>
Date: Wed, 6 May 2026 21:33:24 -0700
Subject: [PATCH 046/132] buildFHSEnv: fix substring match incorrectly skipping
 host directories

The auto-mount loop used bash regex =~ which does substring matching, so
top-level directories whose names are prefixes of FHS paths (e.g. /sb
matches /sbin) were silently skipped instead of bind-mounted into the
chroot. Switch to associative array for exact-match lookup.

Fixes #241151
---
 .../build-fhsenv-bubblewrap/default.nix       | 21 ++++++++++++++++---
 1 file changed, 18 insertions(+), 3 deletions(-)

diff --git a/pkgs/build-support/build-fhsenv-bubblewrap/default.nix b/pkgs/build-support/build-fhsenv-bubblewrap/default.nix
index 214656bbb955..2c6a297cb7cb 100644
--- a/pkgs/build-support/build-fhsenv-bubblewrap/default.nix
+++ b/pkgs/build-support/build-fhsenv-bubblewrap/default.nix
@@ -222,9 +222,14 @@ let
         ro_mounts+=(--ro-bind /etc /.host-etc)
       fi
 
+      declare -A etc_ignored_set
+      for ign in "''${etc_ignored[@]}"; do
+        etc_ignored_set[$ign]=1
+      done
+
       # link selected etc entries from the actual root
       for i in ${escapeShellArgs etcBindEntries}; do
-        if [[ "''${etc_ignored[@]}" =~ "$i" ]]; then
+        if [[ -n "''${etc_ignored_set[$i]:-}" ]]; then
           continue
         fi
         if [[ -e $i ]]; then
@@ -232,11 +237,21 @@ let
         fi
       done
 
+      declare -A ignored_set
+      for ign in "''${ignored[@]}"; do
+        ignored_set[$ign]=1
+      done
+
       declare -a auto_mounts
       # loop through all directories in the root
       for dir in /*; do
-        # if it is a directory and it is not ignored
-        if [[ -d "$dir" ]] && [[ ! "''${ignored[@]}" =~ "$dir" ]]; then
+        # if it is a directory and not already provided by the FHS env or
+        # explicitly ignored, bind-mount it into the chroot. Use exact match
+        # via associative array because regex substring matching incorrectly
+        # skips prefixes (e.g. /sb would match /sbin and never get mounted,
+        # breaking --chdir when CWD is on a custom mount like /sb/project).
+        # https://github.com/NixOS/nixpkgs/issues/241151
+        if [[ -d "$dir" ]] && [[ -z "''${ignored_set[$dir]:-}" ]]; then
           # add it to the mount list
           auto_mounts+=(--bind "$dir" "$dir")
         fi

From 5902512fe65333938580cdf5490cac9dcda82230 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=A9clairevoyant?=
 <848000+eclairevoyant@users.noreply.github.com>
Date: Thu, 7 Aug 2025 21:56:57 -0400
Subject: [PATCH 047/132] cue: ensure passthru attrs use final overriden
 package

---
 pkgs/by-name/cu/cue/package.nix | 22 +++++++++++++---------
 1 file changed, 13 insertions(+), 9 deletions(-)

diff --git a/pkgs/by-name/cu/cue/package.nix b/pkgs/by-name/cu/cue/package.nix
index d81886fcebcf..934516635f78 100644
--- a/pkgs/by-name/cu/cue/package.nix
+++ b/pkgs/by-name/cu/cue/package.nix
@@ -38,17 +38,21 @@ buildGoModule (finalAttrs: {
       --zsh <($out/bin/cue completion zsh)
   '';
 
-  passthru = {
-    writeCueValidator = callPackage ./validator.nix { };
-    tests = {
-      test-001-all-good = callPackage ./tests/001-all-good.nix { };
-      version = testers.testVersion {
-        package = finalAttrs.finalPackage;
-        command = "cue version";
-        version = "v${finalAttrs.version}";
+  passthru =
+    let
+      cue = finalAttrs.finalPackage;
+    in
+    {
+      writeCueValidator = callPackage ./validator.nix { inherit cue; };
+      tests = {
+        test-001-all-good = callPackage ./tests/001-all-good.nix { inherit cue; };
+        version = testers.testVersion {
+          package = cue;
+          command = "cue version";
+          version = "v${finalAttrs.version}";
+        };
       };
     };
-  };
 
   meta = {
     description = "Data constraint language which aims to simplify tasks involving defining and using data";

From e5cea90ef00a8bf9d2a966b846da7b06229085b7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=A9clairevoyant?=
 <848000+eclairevoyant@users.noreply.github.com>
Date: Thu, 7 Aug 2025 21:58:43 -0400
Subject: [PATCH 048/132] cue: add tests.cue-validation to tests

---
 pkgs/by-name/cu/cue/package.nix | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/cu/cue/package.nix b/pkgs/by-name/cu/cue/package.nix
index 934516635f78..a7e5e3fa0d11 100644
--- a/pkgs/by-name/cu/cue/package.nix
+++ b/pkgs/by-name/cu/cue/package.nix
@@ -5,6 +5,7 @@
   stdenv,
   installShellFiles,
   testers,
+  tests,
   callPackage,
 }:
 
@@ -41,10 +42,16 @@ buildGoModule (finalAttrs: {
   passthru =
     let
       cue = finalAttrs.finalPackage;
+      writeCueValidator = callPackage ./validator.nix { inherit cue; };
     in
     {
-      writeCueValidator = callPackage ./validator.nix { inherit cue; };
+      inherit writeCueValidator;
+
       tests = {
+        validation = tests.cue-validation.override {
+          callPackage = (path: attrs: callPackage path (attrs // { inherit writeCueValidator; }));
+        };
+
         test-001-all-good = callPackage ./tests/001-all-good.nix { inherit cue; };
         version = testers.testVersion {
           package = cue;

From 877ddad0aea471a921196445b8d02c19b004e29b Mon Sep 17 00:00:00 2001
From: JacquesHumule <github@jakumule.cc>
Date: Thu, 7 May 2026 18:02:11 +0900
Subject: [PATCH 049/132] bitwig-studio6: 6.0 -> 6.0.6

---
 pkgs/by-name/bi/bitwig-studio6/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/bi/bitwig-studio6/package.nix b/pkgs/by-name/bi/bitwig-studio6/package.nix
index cbb6052144c6..63c482832462 100644
--- a/pkgs/by-name/bi/bitwig-studio6/package.nix
+++ b/pkgs/by-name/bi/bitwig-studio6/package.nix
@@ -38,12 +38,12 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bitwig-studio6";
-  version = "6.0";
+  version = "6.0.6";
 
   src = fetchurl {
     name = "bitwig-studio-${finalAttrs.version}.deb";
     url = "https://www.bitwig.com/dl/Bitwig%20Studio/${finalAttrs.version}/installer_linux";
-    hash = "sha256-jrCTgaxfeWhfKwLeKLmqTQWS7RVbVnHqJ0InCipmm8k=";
+    hash = "sha256-tczgtA4v3a5Qjxaa6ZvaiFDWD6dhRw19vj8IMxkyCNI=";
   };
 
   strictDeps = true;

From 0934c918d27d88fd67d92b8b8580745fbbbb7b41 Mon Sep 17 00:00:00 2001
From: Patrick <patrick@failmail.dev>
Date: Tue, 17 Feb 2026 11:33:59 +0100
Subject: [PATCH 050/132] firefly-iii: Download translations from release

---
 pkgs/by-name/fi/firefly-iii/package.nix | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/fi/firefly-iii/package.nix b/pkgs/by-name/fi/firefly-iii/package.nix
index d1f35cba4f03..4fb02d0e786b 100644
--- a/pkgs/by-name/fi/firefly-iii/package.nix
+++ b/pkgs/by-name/fi/firefly-iii/package.nix
@@ -1,6 +1,7 @@
 {
   lib,
   fetchFromGitHub,
+  fetchzip,
   stdenvNoCC,
   nodejs-slim,
   fetchNpmDeps,
@@ -10,13 +11,20 @@
   nix-update-script,
   dataDir ? "/var/lib/firefly-iii",
 }:
-
 let
   php = php85;
+  version = "6.6.2";
+
+  # Release tarball contains translations downloaded from crowdin
+  releaseTarball = fetchzip {
+    url = "https://github.com/firefly-iii/firefly-iii/releases/download/v${version}/FireflyIII-v${version}.tar.gz";
+    stripRoot = false;
+    hash = "sha256-vPuLCjU8MzV5odoDl9QQXj4kKnT6QBSAPwvekMxJtEM=";
+  };
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "firefly-iii";
-  version = "6.6.2";
+  inherit version;
 
   src = fetchFromGitHub {
     owner = "firefly-iii";
@@ -55,6 +63,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   '';
 
   passthru = {
+    inherit releaseTarball;
     phpPackage = php;
     tests = nixosTests.firefly-iii;
     updateScript = nix-update-script {
@@ -68,6 +77,10 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   postInstall = ''
     chmod -R u+w $out/share
     mv $out/share/php/firefly-iii/* $out/
+
+    # Copy language files from release tarball (contains all translations)
+    cp -r ${finalAttrs.passthru.releaseTarball}/resources/lang/* $out/resources/lang/
+
     rm -R $out/share $out/storage $out/bootstrap/cache $out/node_modules
     ln -s ${dataDir}/storage $out/storage
     ln -s ${dataDir}/cache $out/bootstrap/cache

From de27133cffb58d2a4db7e8c14ad11d17b796c883 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 7 May 2026 17:44:45 +0000
Subject: [PATCH 051/132] vscode-extensions.saoudrizwan.claude-dev: 3.81.0 ->
 3.82.0

---
 .../vscode/extensions/saoudrizwan.claude-dev/default.nix      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/editors/vscode/extensions/saoudrizwan.claude-dev/default.nix b/pkgs/applications/editors/vscode/extensions/saoudrizwan.claude-dev/default.nix
index 582e54e64b17..1c0fe0f5ed3a 100644
--- a/pkgs/applications/editors/vscode/extensions/saoudrizwan.claude-dev/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/saoudrizwan.claude-dev/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "claude-dev";
     publisher = "saoudrizwan";
-    version = "3.81.0";
-    hash = "sha256-gVQmKuyUH+bXpr7X2Z23U2oKFnAV2mxhckjef2uL8KQ=";
+    version = "3.82.0";
+    hash = "sha256-+CtWfRGumMTFckmU9Z8TAwrn35WiUrri1x6XL9khOnM=";
   };
 
   meta = {

From dbbe6d5a1b3e71ae6dd171cd86cf047e6c1990c0 Mon Sep 17 00:00:00 2001
From: phanirithvij <phanirithvij2000@gmail.com>
Date: Thu, 7 May 2026 21:48:11 +0530
Subject: [PATCH 052/132] asciinema: 2.4.0 -> 3.2.0; asciinema_3 -> asciinema

Signed-off-by: phanirithvij <phanirithvij2000@gmail.com>
---
 doc/release-notes/rl-2605.section.md    |  2 +
 pkgs/by-name/as/asciinema/package.nix   | 54 +++++++++++++++------
 pkgs/by-name/as/asciinema_3/package.nix | 62 -------------------------
 pkgs/top-level/aliases.nix              |  1 +
 4 files changed, 43 insertions(+), 76 deletions(-)
 delete mode 100644 pkgs/by-name/as/asciinema_3/package.nix

diff --git a/doc/release-notes/rl-2605.section.md b/doc/release-notes/rl-2605.section.md
index ab63631ace2b..5953d676210c 100644
--- a/doc/release-notes/rl-2605.section.md
+++ b/doc/release-notes/rl-2605.section.md
@@ -93,6 +93,8 @@
   This update introduces several breaking changes: the Python plugin interface is now v5.0, the `PATH` plugin has been renamed to `Commandline`, and the QStylesheets-based widgets box model frontend has been removed.
   For more information read the [changelog for 34.0.0](https://albertlauncher.github.io/2026/01/19/albert-v34.0.0-released/).
 
+- `asciinema_3` is now renamed to `asciinema` and the old `asciinema` version 2.x.x written in python was removed.
+
 - `sing-box` has been updated to 1.13.0, which has removed some deprecated options.  See [upstream documentation](https://sing-box.sagernet.org/configuration/) for details and migration options.
 
 - `cargo-codspeed` has been updated from `3.0.5` to `4.2.0`. Version `4.0.0` includes breaking changes. For more information read the [changelog for 4.0.0](https://github.com/CodSpeedHQ/codspeed-rust/releases/tag/v4.0.0).
diff --git a/pkgs/by-name/as/asciinema/package.nix b/pkgs/by-name/as/asciinema/package.nix
index 882ff4e271d1..5d93445c8101 100644
--- a/pkgs/by-name/as/asciinema/package.nix
+++ b/pkgs/by-name/as/asciinema/package.nix
@@ -1,36 +1,62 @@
 {
   lib,
-  python3Packages,
   fetchFromGitHub,
+  installShellFiles,
+  python3,
+  rustPlatform,
+  versionCheckHook,
 }:
 
-python3Packages.buildPythonApplication (finalAttrs: {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "asciinema";
-  version = "2.4.0";
-  pyproject = true;
+  version = "3.2.0";
 
   src = fetchFromGitHub {
     owner = "asciinema";
     repo = "asciinema";
-    rev = "v${finalAttrs.version}";
-    hash = "sha256-UegLwpJ+uc9cW3ozLQJsQBjIGD7+vzzwzQFRV5gmDmI=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-03olFWB/6O7V/B9gz6QACMxugrIx560fpp81IGVWv58=";
   };
 
-  build-system = [ python3Packages.setuptools ];
+  cargoHash = "sha256-B6s3uUPGL8m076dl3P26j+frHWLi+wzED41BQ/rQAM8=";
 
-  postPatch = ''
-    substituteInPlace tests/pty_test.py \
-      --replace-fail "python3" "${python3Packages.python.interpreter}"
+  env.ASCIINEMA_GEN_DIR = "gendir";
+
+  strictDeps = true;
+
+  nativeCheckInputs = [ python3 ];
+  nativeBuildInputs = [ installShellFiles ];
+
+  postInstall = ''
+    installManPage gendir/man/*
+    installShellCompletion --cmd asciinema \
+      --bash gendir/completion/asciinema.bash \
+      --fish gendir/completion/asciinema.fish \
+      --zsh gendir/completion/_asciinema
   '';
 
-  nativeCheckInputs = [ python3Packages.pytestCheckHook ];
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
 
   meta = {
-    description = "Terminal session recorder and the best companion of asciinema.org";
     homepage = "https://asciinema.org/";
+    description = "Terminal session recorder and the best companion of asciinema.org";
+    longDescription = ''
+      asciinema is a suite of tools for recording, replaying, and sharing
+      terminal sessions. It is free and open-source software (FOSS), created
+      by Marcin Kulik.
+
+      Its typical use cases include creating tutorials, demonstrating
+      command-line tools, and sharing reproducible bug reports. It focuses on
+      simplicity and interoperability, which makes it a popular choice among
+      computer users working with the command-line, such as developers or
+      system administrators.
+    '';
     license = with lib.licenses; [ gpl3Plus ];
-    maintainers = [ ];
-    platforms = lib.platforms.all;
     mainProgram = "asciinema";
+    maintainers = with lib.maintainers; [
+      jiriks74
+      llakala
+    ];
   };
 })
diff --git a/pkgs/by-name/as/asciinema_3/package.nix b/pkgs/by-name/as/asciinema_3/package.nix
deleted file mode 100644
index 5d93445c8101..000000000000
--- a/pkgs/by-name/as/asciinema_3/package.nix
+++ /dev/null
@@ -1,62 +0,0 @@
-{
-  lib,
-  fetchFromGitHub,
-  installShellFiles,
-  python3,
-  rustPlatform,
-  versionCheckHook,
-}:
-
-rustPlatform.buildRustPackage (finalAttrs: {
-  pname = "asciinema";
-  version = "3.2.0";
-
-  src = fetchFromGitHub {
-    owner = "asciinema";
-    repo = "asciinema";
-    tag = "v${finalAttrs.version}";
-    hash = "sha256-03olFWB/6O7V/B9gz6QACMxugrIx560fpp81IGVWv58=";
-  };
-
-  cargoHash = "sha256-B6s3uUPGL8m076dl3P26j+frHWLi+wzED41BQ/rQAM8=";
-
-  env.ASCIINEMA_GEN_DIR = "gendir";
-
-  strictDeps = true;
-
-  nativeCheckInputs = [ python3 ];
-  nativeBuildInputs = [ installShellFiles ];
-
-  postInstall = ''
-    installManPage gendir/man/*
-    installShellCompletion --cmd asciinema \
-      --bash gendir/completion/asciinema.bash \
-      --fish gendir/completion/asciinema.fish \
-      --zsh gendir/completion/_asciinema
-  '';
-
-  doInstallCheck = true;
-  nativeInstallCheckInputs = [ versionCheckHook ];
-
-  meta = {
-    homepage = "https://asciinema.org/";
-    description = "Terminal session recorder and the best companion of asciinema.org";
-    longDescription = ''
-      asciinema is a suite of tools for recording, replaying, and sharing
-      terminal sessions. It is free and open-source software (FOSS), created
-      by Marcin Kulik.
-
-      Its typical use cases include creating tutorials, demonstrating
-      command-line tools, and sharing reproducible bug reports. It focuses on
-      simplicity and interoperability, which makes it a popular choice among
-      computer users working with the command-line, such as developers or
-      system administrators.
-    '';
-    license = with lib.licenses; [ gpl3Plus ];
-    mainProgram = "asciinema";
-    maintainers = with lib.maintainers; [
-      jiriks74
-      llakala
-    ];
-  };
-})
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 92cd669ee0c1..32bbc8d64876 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -331,6 +331,7 @@ mapAliases {
   artichoke = throw "artichoke has been removed due to being archived upstream."; # Added 2025-11-04
   artim-dark = aritim-dark; # Added 2025-07-27
   artyFX = openav-artyfx; # Added 2026-02-08
+  asciinema_3 = warnAlias "'asciinema_3' has been renamed to 'asciinema'" asciinema; # Added 2026-05-07
   aseprite-unfree = throw "'aseprite-unfree' has been renamed to/replaced by 'aseprite'"; # Converted to throw 2025-10-27
   asio_1_10 = throw "'asio_1_10' has been removed as it is outdated and unused. Use 'asio' instead"; # Added 2025-12-03
   asitop = throw "'asitop' has been renamed to/replaced by 'macpm'"; # Converted to throw 2025-10-27

From ba21cfd1a766c8d0c482c33a07bd6dd119cfab94 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 7 May 2026 18:30:47 +0000
Subject: [PATCH 053/132] cpuinfo: 0-unstable-2026-04-28 ->
 0-unstable-2026-04-30

---
 pkgs/by-name/cp/cpuinfo/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/cp/cpuinfo/package.nix b/pkgs/by-name/cp/cpuinfo/package.nix
index 730292092ede..c1b4eda08e07 100644
--- a/pkgs/by-name/cp/cpuinfo/package.nix
+++ b/pkgs/by-name/cp/cpuinfo/package.nix
@@ -10,13 +10,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "cpuinfo";
-  version = "0-unstable-2026-04-28";
+  version = "0-unstable-2026-04-30";
 
   src = fetchFromGitHub {
     owner = "pytorch";
     repo = "cpuinfo";
-    rev = "e829e80faba35db623b5e272c867ad72146adcda";
-    hash = "sha256-0xLxkGiUVWY+8X8ahQC5hvAKjkEQ5Blv8kNqJHPwezg=";
+    rev = "3681f0ce1446167d01dfe125d6db96ba2ac31c3c";
+    hash = "sha256-PhWbzQgZSUb3eVyx+JTSnxVOAC2WzL2Dw1I9/6LEIsw=";
   };
 
   passthru.updateScript = nix-update-script { extraArgs = [ "--version=branch" ]; };
@@ -50,7 +50,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "cpu-info";
     maintainers = with lib.maintainers; [ pawelchcki ];
     pkgConfigModules = [ "libcpuinfo" ];
-    # https://github.com/pytorch/cpuinfo/blob/e829e80faba35db623b5e272c867ad72146adcda/CMakeLists.txt#L98
+    # https://github.com/pytorch/cpuinfo/blob/3681f0ce1446167d01dfe125d6db96ba2ac31c3c/CMakeLists.txt#L98
     platforms = lib.platforms.x86 ++ lib.platforms.aarch ++ lib.platforms.riscv;
   };
 })

From 6b2898fcd7e8956079a9a7663efa6516825cd627 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 7 May 2026 18:53:59 +0000
Subject: [PATCH 054/132] freelens-bin: 1.8.1 -> 1.9.0

---
 pkgs/by-name/fr/freelens-bin/package.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/fr/freelens-bin/package.nix b/pkgs/by-name/fr/freelens-bin/package.nix
index 400660be9e83..e35f6a48994a 100644
--- a/pkgs/by-name/fr/freelens-bin/package.nix
+++ b/pkgs/by-name/fr/freelens-bin/package.nix
@@ -16,24 +16,24 @@
 let
 
   pname = "freelens-bin";
-  version = "1.8.1";
+  version = "1.9.0";
 
   sources = {
     x86_64-linux = {
       url = "https://github.com/freelensapp/freelens/releases/download/v${version}/Freelens-${version}-linux-amd64.AppImage";
-      hash = "sha256-Goe/eAmefL+4itHrGmQjBGVWalk559kGg/OgA1yKKdk=";
+      hash = "sha256-aM3sS87kpb9UhVMdG7cPeCp4j9KBW71H+MJR+oN4908=";
     };
     aarch64-linux = {
       url = "https://github.com/freelensapp/freelens/releases/download/v${version}/Freelens-${version}-linux-arm64.AppImage";
-      hash = "sha256-Mcvjiv7tQU56uaVvtoK5mn6jpQsRnP1F2UeG8OHhywQ=";
+      hash = "sha256-/DUMuGAhVV0Ro4UbAF6lwjgB4/Wi1AY2UKn9ZuN7fDc=";
     };
     x86_64-darwin = {
       url = "https://github.com/freelensapp/freelens/releases/download/v${version}/Freelens-${version}-macos-amd64.dmg";
-      hash = "sha256-4b4xzr4shEBYhqQ+NZaew4ZSq3J5den5KPJ7X8UpTJ8=";
+      hash = "sha256-xKH/RBR2if37WiquCC+ZSxGyoFF32iIPvYdGNfDbDFw=";
     };
     aarch64-darwin = {
       url = "https://github.com/freelensapp/freelens/releases/download/v${version}/Freelens-${version}-macos-arm64.dmg";
-      hash = "sha256-jCR/ypqGTp8swi1b9hgm4iWjGoKA2pW0mqxF8QJzYVk=";
+      hash = "sha256-dp/kD6NHmK/CNZEF2BKh6NAChBTMgjZLY7eIwhyWgWk=";
     };
   };
 

From e6cf91b0dc8ddbd23f20f929b3fb4cbb9e011920 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 7 May 2026 19:22:21 +0000
Subject: [PATCH 055/132] grafana-kiosk: 1.0.11 -> 1.0.12

---
 pkgs/by-name/gr/grafana-kiosk/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/gr/grafana-kiosk/package.nix b/pkgs/by-name/gr/grafana-kiosk/package.nix
index 32f2a26e9ef0..eecb75819a60 100644
--- a/pkgs/by-name/gr/grafana-kiosk/package.nix
+++ b/pkgs/by-name/gr/grafana-kiosk/package.nix
@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "grafana-kiosk";
-  version = "1.0.11";
+  version = "1.0.12";
 
   src = fetchFromGitHub {
     owner = "grafana";
     repo = "grafana-kiosk";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-+LoUJiMqE/OO0J7zIy+8uvQUq1wFpGvNvxzhb4pj+r8=";
+    hash = "sha256-NfLS7N1J71HnDx3oTfWf3lsWp3XNx18Jk7qwNPMfOZA=";
   };
 
-  vendorHash = "sha256-+tslKo5onMgnEtitYi9uwO4m5MUGzctJ7Vt4C7hJ7Fc=";
+  vendorHash = "sha256-Czxxuy4ptsUx9cqog6wsHkUzS+j7WGj8PGsa4MDRJEE=";
 
   nativeBuildInputs = [ makeWrapper ];
   postFixup = ''

From 054392b92a85b63e7cbec87659e0df24ea2e21b7 Mon Sep 17 00:00:00 2001
From: Hythera <87016780+Hythera@users.noreply.github.com>
Date: Thu, 7 May 2026 23:33:36 +0200
Subject: [PATCH 056/132] librewolf-unwrapped: 150.0.1-1 -> 150.0.2-1

diff: https://codeberg.org/librewolf/source/compare/150.0.1-1...150.0.2-1

mfsa: https://www.mozilla.org/en-US/security/advisories/mfsa2026-40/
---
 pkgs/by-name/li/librewolf-unwrapped/src.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/li/librewolf-unwrapped/src.json b/pkgs/by-name/li/librewolf-unwrapped/src.json
index c4e33d934e6c..5016d5a46ca5 100644
--- a/pkgs/by-name/li/librewolf-unwrapped/src.json
+++ b/pkgs/by-name/li/librewolf-unwrapped/src.json
@@ -1,11 +1,11 @@
 {
-  "packageVersion": "150.0.1-1",
+  "packageVersion": "150.0.2-1",
   "source": {
-    "rev": "150.0.1-1",
-    "hash": "sha256-9+NiNv6uAxdj3zFurH3dBDWk4SJxdgJaHAm67aOmJAk="
+    "rev": "150.0.2-1",
+    "hash": "sha256-eEdLG9hBTRH8UIoclGJaJ4rNcTDrXbeUWZPM+Y6WXTw="
   },
   "firefox": {
-    "version": "150.0.1",
-    "hash": "sha512-s3EOGzUAIxK/JI6CJoEDm3XsEZb40BTIiwN3ybBvNHgEaRUqmK2WdEClGkoMpFQYumI5Q4+GmuVkzILAI2RReQ=="
+    "version": "150.0.2",
+    "hash": "sha512-4i/Gb3+uub70A20KkK9MJ9q8RaPcWccpBTa/5Gx2JNcziNKbNqiZnjZAZfoxpfoWdZZjIimwr5vBuvQTX6KaTQ=="
   }
 }

From ae5ad1599c2dfadef80b6ea898aeb104753e7c93 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 7 May 2026 22:16:06 +0000
Subject: [PATCH 057/132] coc-rust-analyzer: 0-unstable-2026-04-14 ->
 0-unstable-2026-05-01

---
 pkgs/by-name/co/coc-rust-analyzer/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/co/coc-rust-analyzer/package.nix b/pkgs/by-name/co/coc-rust-analyzer/package.nix
index 3f1a1d4e7c9c..f2f4987762b4 100644
--- a/pkgs/by-name/co/coc-rust-analyzer/package.nix
+++ b/pkgs/by-name/co/coc-rust-analyzer/package.nix
@@ -7,16 +7,16 @@
 
 buildNpmPackage {
   pname = "coc-rust-analyzer";
-  version = "0-unstable-2026-04-14";
+  version = "0-unstable-2026-05-01";
 
   src = fetchFromGitHub {
     owner = "fannheyward";
     repo = "coc-rust-analyzer";
-    rev = "3a82969c169b9d71b51e74fe8841d1f04326725d";
-    hash = "sha256-8/wgdlM4US5R6xOYFD4uP6gEeRfJsjDwwCz3BIUpoFI=";
+    rev = "9bfd30f3ab029c31f1c012b12156bdac9a0d0351";
+    hash = "sha256-JrR7nf6xQxzGHrOp1dof6GLOcH6BSiAd79RcgsUUU24=";
   };
 
-  npmDepsHash = "sha256-+3eXdiM0Nll7V6EnDXq88rBjRkPN6GLFASdJ3fMXbq4=";
+  npmDepsHash = "sha256-1+U4XG3zciSnVh8Syff/hZgSPBdwDfgf9KQFURJAddQ=";
 
   passthru.updateScript = nix-update-script { extraArgs = [ "--version=branch" ]; };
 

From 0794c7edb1d08696fe62d606dfaafa7568ead4cf Mon Sep 17 00:00:00 2001
From: Bart Oostveen <bart@bartoostveen.nl>
Date: Fri, 8 May 2026 00:18:24 +0200
Subject: [PATCH 058/132] matrix-continuwuity: 0.5.8 -> 0.5.9

This contains important security vulnerability mitigations. Backporting for this reason.

Changelog: https://forgejo.ellis.link/continuwuation/continuwuity/releases/tag/v0.5.9
Does not contain any breaking changes, is just a security hotpatch [consisting of cherry-picked commits](https://forgejo.ellis.link/continuwuation/continuwuity/compare/v0.5.8...v0.5.9)
---
 pkgs/by-name/ma/matrix-continuwuity/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ma/matrix-continuwuity/package.nix b/pkgs/by-name/ma/matrix-continuwuity/package.nix
index daca0e92df47..69fd23b0f903 100644
--- a/pkgs/by-name/ma/matrix-continuwuity/package.nix
+++ b/pkgs/by-name/ma/matrix-continuwuity/package.nix
@@ -38,17 +38,17 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "matrix-continuwuity";
-  version = "0.5.8";
+  version = "0.5.9";
 
   src = fetchFromGitea {
     domain = "forgejo.ellis.link";
     owner = "continuwuation";
     repo = "continuwuity";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-o7bZMSsdSt6VOrsuSMrS7fU9u/LrdD/579IMvsZH+ss=";
+    hash = "sha256-4zs26kTqwkJV7x+Sm12LnR02bbyH0f6Itbz7bDKUyts=";
   };
 
-  cargoHash = "sha256-QM4K5TmWWRTcrovAvvEbXEraI4C0vMSJ68Z/6kHhOr8=";
+  cargoHash = "sha256-T11ESuNg3BS54LtNJfhOoIgiyVL7VsdP4OeDI2nVBIk=";
 
   nativeBuildInputs = [
     pkg-config

From b38893acbbff7f361cbd35331758c8f94c905696 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 7 May 2026 22:28:42 +0000
Subject: [PATCH 059/132] coc-markdownlint: 0-unstable-2026-04-01 ->
 0-unstable-2026-05-01

---
 pkgs/by-name/co/coc-markdownlint/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/co/coc-markdownlint/package.nix b/pkgs/by-name/co/coc-markdownlint/package.nix
index d06840f9562c..0f19b4d98902 100644
--- a/pkgs/by-name/co/coc-markdownlint/package.nix
+++ b/pkgs/by-name/co/coc-markdownlint/package.nix
@@ -7,16 +7,16 @@
 
 buildNpmPackage {
   pname = "coc-markdownlint";
-  version = "0-unstable-2026-04-01";
+  version = "0-unstable-2026-05-01";
 
   src = fetchFromGitHub {
     owner = "fannheyward";
     repo = "coc-markdownlint";
-    rev = "9a92eef6adbd6ba7b1afe50bd9a3c82b94902c51";
-    hash = "sha256-5pfsaZFA1OYwREB3FqyUQY4D47dKH22pQV8dBgPiipo=";
+    rev = "91345f973c7fde3e72f95bc7648043c35e23e007";
+    hash = "sha256-Uj+PKaihRaWybWvt82Aenmt1/seTsJwgb4LSF+gIAc0=";
   };
 
-  npmDepsHash = "sha256-J6gYA3eP2PWK3kesJDL5tqHOY/j2PoC+uhVxpeYVnsk=";
+  npmDepsHash = "sha256-J5LHaKrtQeYiIU06rargZrQX5P4ABP0cP0wuPHIRzjw=";
 
   passthru.updateScript = nix-update-script { extraArgs = [ "--version=branch" ]; };
 

From e80b9300ce3cbfd5c6cd9671fc5696945b7cabb7 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 00:01:55 +0000
Subject: [PATCH 060/132] chezmoi: 2.70.2 -> 2.70.3

---
 pkgs/by-name/ch/chezmoi/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ch/chezmoi/package.nix b/pkgs/by-name/ch/chezmoi/package.nix
index 9cc7f08fce36..8ba61f5cbe4b 100644
--- a/pkgs/by-name/ch/chezmoi/package.nix
+++ b/pkgs/by-name/ch/chezmoi/package.nix
@@ -7,16 +7,16 @@
 
 buildGo125Module (finalAttrs: {
   pname = "chezmoi";
-  version = "2.70.2";
+  version = "2.70.3";
 
   src = fetchFromGitHub {
     owner = "twpayne";
     repo = "chezmoi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-47tc3L3iUVt+i13qyZMxRYb59Y/id/+EMQfbZGsMJzQ=";
+    hash = "sha256-1O2KXDOs9U079A12oJ5reIO5HXyrn4+hfKfQiadFEM4=";
   };
 
-  vendorHash = "sha256-uTbU8lrMTfyiljJ6flo88k3xJrhZJCzPuyu/hFrRTGo=";
+  vendorHash = "sha256-vejh1aeniksXJ7xda8fEYiqe4FEsYzJpGMtr59uHByY=";
 
   nativeBuildInputs = [
     installShellFiles

From 043f3fe16dc855bff908549b104514f287e600ac Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 00:03:45 +0000
Subject: [PATCH 061/132] gpupad: 3.4.0 -> 3.4.1

---
 pkgs/by-name/gp/gpupad/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gp/gpupad/package.nix b/pkgs/by-name/gp/gpupad/package.nix
index 91858873a9de..9efdcebf43c2 100644
--- a/pkgs/by-name/gp/gpupad/package.nix
+++ b/pkgs/by-name/gp/gpupad/package.nix
@@ -16,13 +16,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gpupad";
-  version = "3.4.0";
+  version = "3.4.1";
 
   src = fetchFromGitHub {
     owner = "houmain";
     repo = "gpupad";
     tag = finalAttrs.version;
-    hash = "sha256-7WdEdVe2lkCDHKkZpN3QTdQtsVWXdcQ3tdKd8vd1xAc=";
+    hash = "sha256-8kDJRZPDzZA6ofaXWQ55VZfuXdOHvTCssoe64qgNrbU=";
     fetchSubmodules = true;
   };
 

From 66aa2575cdd4e5a8ed8833b572956d65cd874b61 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 00:19:25 +0000
Subject: [PATCH 062/132] python3Packages.aioqsw: 0.4.2 -> 0.4.3

---
 pkgs/development/python-modules/aioqsw/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/aioqsw/default.nix b/pkgs/development/python-modules/aioqsw/default.nix
index aa97da656f53..0cbe83e415b0 100644
--- a/pkgs/development/python-modules/aioqsw/default.nix
+++ b/pkgs/development/python-modules/aioqsw/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage rec {
   pname = "aioqsw";
-  version = "0.4.2";
+  version = "0.4.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Noltari";
     repo = "aioqsw";
     tag = version;
-    hash = "sha256-SIdEM5YxPnCM6wEJTL19t07Xb89wDAwHzKnz0dKC0tw=";
+    hash = "sha256-2v3PhhlVeQs/jMnOzji/aKeWD7pWfqXVf4iBOgXD7kc=";
   };
 
   build-system = [ setuptools ];

From ff5488197f6b1a6bb1c01785778e1a81ccf13d82 Mon Sep 17 00:00:00 2001
From: Cathal Mullan <contact@cathal.dev>
Date: Thu, 7 May 2026 23:39:13 +0100
Subject: [PATCH 063/132] dioxus-cli: 0.7.7 -> 0.7.9

---
 pkgs/by-name/di/dioxus-cli/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/di/dioxus-cli/package.nix b/pkgs/by-name/di/dioxus-cli/package.nix
index 5bc41df8d7dc..cdafe17af58f 100644
--- a/pkgs/by-name/di/dioxus-cli/package.nix
+++ b/pkgs/by-name/di/dioxus-cli/package.nix
@@ -17,15 +17,15 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "dioxus-cli";
-  version = "0.7.7";
+  version = "0.7.9";
 
   src = fetchCrate {
     pname = "dioxus-cli";
     version = finalAttrs.version;
-    hash = "sha256-jMy2i19qyoMuIh/BJ1iJU78WNY+kWQC9xKTovLJvL2A=";
+    hash = "sha256-tLMtUlohSJt3okdJh+ARweQNGmzj/vYiNl8iZhDbSAc=";
   };
 
-  cargoHash = "sha256-qPxW3VzHUw+GBmHn9r77BcDw50AkCfAOa7JblpgYgls=";
+  cargoHash = "sha256-h5wkxHP8ehZLHqcUsro08/dpqSPnPuBbZuUGG8i4nBc=";
   buildFeatures = [
     "no-downloads"
   ]

From edaabc264494aa2e689a0349f009b21916b9b799 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 00:34:25 +0000
Subject: [PATCH 064/132] myks: 5.12.2 -> 5.13.0

---
 pkgs/by-name/my/myks/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/my/myks/package.nix b/pkgs/by-name/my/myks/package.nix
index c2c021fac4de..e6101292d8dc 100644
--- a/pkgs/by-name/my/myks/package.nix
+++ b/pkgs/by-name/my/myks/package.nix
@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "myks";
-  version = "5.12.2";
+  version = "5.13.0";
 
   src = fetchFromGitHub {
     owner = "mykso";
     repo = "myks";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-CQCxsuZhqRo5PMahc1UBy5T2SvwDs50JWHmhm4qU3FI=";
+    hash = "sha256-t2Q7nQVwPyxDxH/KvA9ys6uLJt8+kYaCvkTXrzdwlt4=";
   };
 
-  vendorHash = "sha256-BFuJBaOGzttc8Q1ZxMIx0SWnBWmHg7TwU5VG8Wgydb0=";
+  vendorHash = "sha256-PwqglEyo63QRHrmY/Yw64U9HkCBQK+DfM3R3WTgT2cQ=";
 
   subPackages = ".";
 

From da3d755d7cc3266948c63d1c4cad17e8463670a3 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 00:45:01 +0000
Subject: [PATCH 065/132] python3Packages.langgraph-cli: 0.4.24 -> 0.4.25

---
 pkgs/development/python-modules/langgraph-cli/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/langgraph-cli/default.nix b/pkgs/development/python-modules/langgraph-cli/default.nix
index b366fb7fcc32..093427f60364 100644
--- a/pkgs/development/python-modules/langgraph-cli/default.nix
+++ b/pkgs/development/python-modules/langgraph-cli/default.nix
@@ -26,14 +26,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "langgraph-cli";
-  version = "0.4.24";
+  version = "0.4.25";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "langchain-ai";
     repo = "langgraph";
     tag = "cli==${finalAttrs.version}";
-    hash = "sha256-gDN0qxh1cPaupIrNK+o/8ExWORnRY3k6C5Vgd3A1Rf0=";
+    hash = "sha256-ygmi2phKJd48FKpCM5noLR6r/0/oMpve9l6MKpNwz/g=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/libs/cli";

From 8aec86fc6154a867653f7686906f79a59a828cb9 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 01:54:15 +0000
Subject: [PATCH 066/132] python3Packages.netbox-dns: 1.5.7 -> 1.5.8

---
 pkgs/development/python-modules/netbox-dns/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/netbox-dns/default.nix b/pkgs/development/python-modules/netbox-dns/default.nix
index 9e944b00c189..9c9ed79f7e51 100644
--- a/pkgs/development/python-modules/netbox-dns/default.nix
+++ b/pkgs/development/python-modules/netbox-dns/default.nix
@@ -7,14 +7,14 @@
 }:
 buildPythonPackage rec {
   pname = "netbox-plugin-dns";
-  version = "1.5.7";
+  version = "1.5.8";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "peteeckel";
     repo = "netbox-plugin-dns";
     tag = version;
-    hash = "sha256-0H6ZFyPAoX7PuXQg95Y8uAVRnwZmLUVGe7W6ONVHJ/M=";
+    hash = "sha256-IV7/YQ/IhoKH9JJU4eZwmSrj3zB9nRcqko8HA1gtMgg=";
   };
 
   build-system = [ setuptools ];

From 36f1777bf8b5ce8dec485c99bf7b4080523c218c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 02:28:51 +0000
Subject: [PATCH 067/132] pyenv: 2.6.28 -> 2.6.29

---
 pkgs/by-name/py/pyenv/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/py/pyenv/package.nix b/pkgs/by-name/py/pyenv/package.nix
index a74729bebef3..34d8a37c009a 100644
--- a/pkgs/by-name/py/pyenv/package.nix
+++ b/pkgs/by-name/py/pyenv/package.nix
@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "pyenv";
-  version = "2.6.28";
+  version = "2.6.29";
 
   src = fetchFromGitHub {
     owner = "pyenv";
     repo = "pyenv";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-1jbpelEVcm+HqjsT8yaQPTaoOhEBCSq64LzTzr0X93I=";
+    hash = "sha256-RS/aqQWXqM2ByK4PZY8qN2I7KSsbzsGkkyqtnRUWfmE=";
   };
 
   nativeBuildInputs = [

From 6086d0a43e36055d7c482008a9a1655019478c0d Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 02:52:30 +0000
Subject: [PATCH 068/132] flyctl: 0.4.42 -> 0.4.49

---
 pkgs/by-name/fl/flyctl/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/fl/flyctl/package.nix b/pkgs/by-name/fl/flyctl/package.nix
index 8a35497c0404..2b6eae3dc87e 100644
--- a/pkgs/by-name/fl/flyctl/package.nix
+++ b/pkgs/by-name/fl/flyctl/package.nix
@@ -12,7 +12,7 @@
 
 buildGoModule rec {
   pname = "flyctl";
-  version = "0.4.42";
+  version = "0.4.49";
 
   src = fetchFromGitHub {
     owner = "superfly";
@@ -22,11 +22,11 @@ buildGoModule rec {
       cd "$out"
       git rev-parse HEAD > COMMIT
     '';
-    hash = "sha256-yAzd7bytBKxOBGs8ja48QPVdmJSvRfIzi8K2DoC0O+Y=";
+    hash = "sha256-WOk4zIWZbf3s4jPzeHANxHAOZvnnm3ENdGluSuM90WM=";
   };
 
   proxyVendor = true;
-  vendorHash = "sha256-TUlOdRfexuxC2Of6ZHPYChCr3i1IGapLZz1/lAhnUxk=";
+  vendorHash = "sha256-395vcBQYvc3LUQSPGtJ1x6RIhUmkR6Y/wGFCD3vrMcE=";
 
   subPackages = [ "." ];
 

From 1fbf99dd87e1b3736d11763f4b5e047d5e508be4 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 04:44:41 +0000
Subject: [PATCH 069/132] contact: 1.5.7 -> 1.5.8

---
 pkgs/by-name/co/contact/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/co/contact/package.nix b/pkgs/by-name/co/contact/package.nix
index 723110af352f..e6ad0ba8ade2 100644
--- a/pkgs/by-name/co/contact/package.nix
+++ b/pkgs/by-name/co/contact/package.nix
@@ -6,14 +6,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "contact";
-  version = "1.5.7";
+  version = "1.5.8";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pdxlocations";
     repo = "contact";
     tag = finalAttrs.version;
-    hash = "sha256-nuhlxKE6o2kNMz5VRV0SIY4Hee5thBbV71Ex6mM1AXo=";
+    hash = "sha256-YNDw/lAPuJIyK6abRnl5WOyv8+t/PTtmBvFWu7NTVwY=";
   };
 
   dependencies = [ python3Packages.meshtastic ];

From 3c356f3436b9a4b5438d2d926d39826c289c28bf Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 04:49:46 +0000
Subject: [PATCH 070/132] timescaledb-tune: 0.18.1 -> 0.19.0

---
 pkgs/by-name/ti/timescaledb-tune/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ti/timescaledb-tune/package.nix b/pkgs/by-name/ti/timescaledb-tune/package.nix
index cad42b092ff0..4ae2ba0ff2ba 100644
--- a/pkgs/by-name/ti/timescaledb-tune/package.nix
+++ b/pkgs/by-name/ti/timescaledb-tune/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "timescaledb-tune";
-  version = "0.18.1";
+  version = "0.19.0";
 
   src = fetchFromGitHub {
     owner = "timescale";
     repo = "timescaledb-tune";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-SC91yO3P2Q2QachSfAAzz7ldcnZedZfcnVXHcFXNrIk=";
+    sha256 = "sha256-3jsRI/ZuFNxjDfRzWQWclUiuC2qrxtUxJ0gcmXXQLUw=";
   };
 
   vendorHash = "sha256-7u3eceVDnzjhGguijJXbm40qyCPO/Q101Zr5vEcGEqs=";

From e7b5d84ef27f6c9413dfe6dd6fa46bdd87eb2891 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 05:27:18 +0000
Subject: [PATCH 071/132] circleci-cli: 0.1.35800 -> 0.1.36202

---
 pkgs/by-name/ci/circleci-cli/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ci/circleci-cli/package.nix b/pkgs/by-name/ci/circleci-cli/package.nix
index 3f4babaab654..5931e61f3b1d 100644
--- a/pkgs/by-name/ci/circleci-cli/package.nix
+++ b/pkgs/by-name/ci/circleci-cli/package.nix
@@ -7,13 +7,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "circleci-cli";
-  version = "0.1.35800";
+  version = "0.1.36202";
 
   src = fetchFromGitHub {
     owner = "CircleCI-Public";
     repo = "circleci-cli";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-Mxeyij1S0mrVTBNFDgnlIFCHYik47sHtrgbc1cjObbM=";
+    sha256 = "sha256-79B1zQ6n066onSf08vYRXNxoq+pvBRyHAXPiTkhqMm8=";
   };
 
   vendorHash = "sha256-vTYepN/srd5qb2o1O5KwcGBwvKmV1DLG3/4OdtKJpVk=";

From 97ccd3fff35cfdc951ea1679217c11c7b1a09855 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 05:59:50 +0000
Subject: [PATCH 072/132] python3Packages.caio: 0.10.0 -> 0.10.1

---
 pkgs/development/python-modules/caio/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/caio/default.nix b/pkgs/development/python-modules/caio/default.nix
index 6919cebdfac9..897dbf76fee8 100644
--- a/pkgs/development/python-modules/caio/default.nix
+++ b/pkgs/development/python-modules/caio/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "caio";
-  version = "0.10.0";
+  version = "0.10.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mosquito";
     repo = "caio";
     tag = finalAttrs.version;
-    hash = "sha256-F14uNUELzgAHbk0onY2MrXWRvifa3AeNkw2IFHcRDvo=";
+    hash = "sha256-IeyksrYpLMc9PJjpYeaOgLx26CeVMoR/3r2RX66ucDs=";
   };
 
   build-system = [ setuptools ];

From dc751669b160fdd0b7ed398cf058d3e60da16b53 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 06:21:29 +0000
Subject: [PATCH 073/132] python3Packages.aws-encryption-sdk: 4.0.4 -> 4.0.6

---
 .../development/python-modules/aws-encryption-sdk/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/aws-encryption-sdk/default.nix b/pkgs/development/python-modules/aws-encryption-sdk/default.nix
index 8259249666e6..441da9892d46 100644
--- a/pkgs/development/python-modules/aws-encryption-sdk/default.nix
+++ b/pkgs/development/python-modules/aws-encryption-sdk/default.nix
@@ -14,14 +14,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "aws-encryption-sdk";
-  version = "4.0.4";
+  version = "4.0.6";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "aws";
     repo = "aws-encryption-sdk-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-u0Fu6ikUJ70RQgptsAGbzmx3+FpXGTpN4Y2rKOSgO2o=";
+    hash = "sha256-E3Kc0GREozdXzM5LvH1iapYl9yr17TyxauCooeJeLxo=";
   };
 
   build-system = [ setuptools ];

From b91ebfdae6d0f9155fd7c3ffd46dcd3527f9d291 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 06:27:29 +0000
Subject: [PATCH 074/132] python3Packages.falconpy: 1.6.1 -> 1.6.2

---
 pkgs/development/python-modules/falconpy/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/falconpy/default.nix b/pkgs/development/python-modules/falconpy/default.nix
index bfee629c8e92..cfd159e882eb 100644
--- a/pkgs/development/python-modules/falconpy/default.nix
+++ b/pkgs/development/python-modules/falconpy/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage rec {
   pname = "falconpy";
-  version = "1.6.1";
+  version = "1.6.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "CrowdStrike";
     repo = "falconpy";
     tag = "v${version}";
-    hash = "sha256-2XS9OgUyKrk3B2f3QzrCOmtaZCLnDDmzMmpZgyzt5xA=";
+    hash = "sha256-Pih9gd20pAN7bDsvwOtpUdh12GRmTD043whQcubZthQ=";
   };
 
   build-system = [ hatchling ];

From 7c857cd6d1502431d7c24e59a3c2fe5c66cf3c36 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 06:52:34 +0000
Subject: [PATCH 075/132] python3Packages.clarifai-grpc: 12.3.2 -> 12.4.0

---
 pkgs/development/python-modules/clarifai-grpc/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/clarifai-grpc/default.nix b/pkgs/development/python-modules/clarifai-grpc/default.nix
index 536f6426df0b..cf1259dfd1f3 100644
--- a/pkgs/development/python-modules/clarifai-grpc/default.nix
+++ b/pkgs/development/python-modules/clarifai-grpc/default.nix
@@ -11,14 +11,14 @@
 
 buildPythonPackage rec {
   pname = "clarifai-grpc";
-  version = "12.3.2";
+  version = "12.4.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Clarifai";
     repo = "clarifai-python-grpc";
     tag = version;
-    hash = "sha256-tR6HvzesMp11e8h35UpaZxaMa5flN1B4Sil3sbEG0cw=";
+    hash = "sha256-IH09q15Oq6ow2fBehyikfaiAwv8L9aL6c61tUNjbYIc=";
   };
 
   build-system = [ setuptools ];

From 5a28a1f8c6c519dc99c5fa64326abdcc04bc6f48 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 07:15:46 +0000
Subject: [PATCH 076/132] python3Packages.afsapi: 1.0.0 -> 1.0.1

---
 pkgs/development/python-modules/afsapi/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/afsapi/default.nix b/pkgs/development/python-modules/afsapi/default.nix
index 685c161e80bf..aba9b655633a 100644
--- a/pkgs/development/python-modules/afsapi/default.nix
+++ b/pkgs/development/python-modules/afsapi/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "afsapi";
-  version = "1.0.0";
+  version = "1.0.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "wlcrs";
     repo = "python-afsapi";
     tag = finalAttrs.version;
-    hash = "sha256-5gvA3rFyAlTx7oKrUq9q0lBuwatzMPvRhjy7GYnwdik=";
+    hash = "sha256-OMz8zJrU1qymvhD9mnf248687wpqfgUnXna7Cbr83No=";
   };
 
   build-system = [

From 274a3826a4b46f17a0014f44488fb581fe640501 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 07:28:51 +0000
Subject: [PATCH 077/132] python3Packages.pyvicare: 2.60.1 -> 2.60.2

---
 pkgs/development/python-modules/pyvicare/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/pyvicare/default.nix b/pkgs/development/python-modules/pyvicare/default.nix
index c18f7ab8d4df..c0d3c4b189f6 100644
--- a/pkgs/development/python-modules/pyvicare/default.nix
+++ b/pkgs/development/python-modules/pyvicare/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pyvicare";
-  version = "2.60.1";
+  version = "2.60.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "openviess";
     repo = "PyViCare";
     tag = finalAttrs.version;
-    hash = "sha256-pLXSUEetkGBrdPZ5Lo0gFTIP6pkc9C2tcx6+3Khr7EY=";
+    hash = "sha256-hXmIPKa37kSEJT/4m41AtemjWf1oO0f1FtnFGzY6cQw=";
   };
 
   postPatch = ''

From 1d1034cadc4e25ed789e35784c0fed7f3cf38c6d Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 07:39:51 +0000
Subject: [PATCH 078/132] python3Packages.unstructured-client: 0.43.2 -> 0.44.0

---
 .../python-modules/unstructured-client/default.nix            | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/unstructured-client/default.nix b/pkgs/development/python-modules/unstructured-client/default.nix
index 5c6c951288a5..21ea73712f80 100644
--- a/pkgs/development/python-modules/unstructured-client/default.nix
+++ b/pkgs/development/python-modules/unstructured-client/default.nix
@@ -18,14 +18,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "unstructured-client";
-  version = "0.43.2";
+  version = "0.44.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Unstructured-IO";
     repo = "unstructured-python-client";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Y/qhgm+mmKNPZhx/km02i7sc31izQH72REXYrKY++OM=";
+    hash = "sha256-joQj2tMOD3bW/bU0ffZ7Usfh7hRWrVGKfGreC9ks18E=";
   };
 
   preBuild = ''

From 6402fc286fbc8b71ae067bb8b07cf1e8a94c7c22 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Fri, 8 May 2026 14:55:50 +0700
Subject: [PATCH 079/132] strobealign: fix build with gcc 15

---
 pkgs/by-name/st/strobealign/include-cstdint.patch | 12 ++++++++++++
 pkgs/by-name/st/strobealign/package.nix           |  4 ++++
 2 files changed, 16 insertions(+)
 create mode 100644 pkgs/by-name/st/strobealign/include-cstdint.patch

diff --git a/pkgs/by-name/st/strobealign/include-cstdint.patch b/pkgs/by-name/st/strobealign/include-cstdint.patch
new file mode 100644
index 000000000000..6b0536d588d4
--- /dev/null
+++ b/pkgs/by-name/st/strobealign/include-cstdint.patch
@@ -0,0 +1,12 @@
+diff --git a/ext/robin_hood.h b/ext/robin_hood.h
+index a8f3a78..1c1b1d8 100644
+--- a/ext/robin_hood.h
++++ b/ext/robin_hood.h
+@@ -41,6 +41,7 @@
+
+ #include <algorithm>
+ #include <cstdlib>
++#include <cstdint>
+ #include <cstring>
+ #include <functional>
+ #include <memory> // only to support hash of smart pointers
diff --git a/pkgs/by-name/st/strobealign/package.nix b/pkgs/by-name/st/strobealign/package.nix
index 54f6e6ab866b..891544b36c54 100644
--- a/pkgs/by-name/st/strobealign/package.nix
+++ b/pkgs/by-name/st/strobealign/package.nix
@@ -18,6 +18,10 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-ah21ptyfZbgdJrtCCftYhGh1hfcJ9JpXNsXUp8pZDJw=";
   };
 
+  patches = [
+    ./include-cstdint.patch
+  ];
+
   nativeBuildInputs = [
     cmake
     pkg-config

From 0a4b95522a86bc0cee9784528f356109e3bc6ab9 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 08:03:32 +0000
Subject: [PATCH 080/132] vscode-extensions.james-yu.latex-workshop: 10.14.1 ->
 10.15.2

---
 .../vscode/extensions/james-yu.latex-workshop/default.nix     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/editors/vscode/extensions/james-yu.latex-workshop/default.nix b/pkgs/applications/editors/vscode/extensions/james-yu.latex-workshop/default.nix
index 0fff354b20da..4e57a24ce0c3 100644
--- a/pkgs/applications/editors/vscode/extensions/james-yu.latex-workshop/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/james-yu.latex-workshop/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "latex-workshop";
     publisher = "James-Yu";
-    version = "10.14.1";
-    hash = "sha256-lsbiKzZTlkq/9K7ptLg0kHAd4i5OyNh2pLGGYUOJS9A=";
+    version = "10.15.2";
+    hash = "sha256-H/WJdkwfiNIFBc4dW6XqB6QopKZYjYN/zDVUpoY3erk=";
   };
   meta = {
     changelog = "https://marketplace.visualstudio.com/items/James-Yu.latex-workshop/changelog";

From 1a2db43049a88644c2c3f9530c50f61de8172bb8 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 08:32:13 +0000
Subject: [PATCH 081/132] python3Packages.kagglesdk: 0.1.22 -> 0.1.23

---
 pkgs/development/python-modules/kagglesdk/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/kagglesdk/default.nix b/pkgs/development/python-modules/kagglesdk/default.nix
index 49ccb2e72a76..097b96bd8e7d 100644
--- a/pkgs/development/python-modules/kagglesdk/default.nix
+++ b/pkgs/development/python-modules/kagglesdk/default.nix
@@ -16,14 +16,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "kagglesdk";
-  version = "0.1.22";
+  version = "0.1.23";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Kaggle";
     repo = "kagglesdk";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-tQWkISdaTn/gC5+qxI3rCMRo+4QYE7XPi9mcVgKz3qM=";
+    hash = "sha256-0KzZy7Hghkljdbbp4AnafBmZL+jw/3q44+caSZ1S1mU=";
   };
 
   build-system = [

From 25397f63ff8e5952ab26e6caf2f46c9f64ade657 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 08:42:41 +0000
Subject: [PATCH 082/132] bella: 0.1.8 -> 0.1.9

---
 pkgs/by-name/be/bella/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/be/bella/package.nix b/pkgs/by-name/be/bella/package.nix
index fb42d1448968..97d73641eb3c 100644
--- a/pkgs/by-name/be/bella/package.nix
+++ b/pkgs/by-name/be/bella/package.nix
@@ -19,13 +19,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bella";
-  version = "0.1.8";
+  version = "0.1.9";
 
   src = fetchFromGitHub {
     owner = "josephmawa";
     repo = "Bella";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-IjRjo5zKoXFK+4F7OtSYuk62Pif7HDAi0E/3+t9rjv4=";
+    hash = "sha256-gIz6Vjs4L7dSVyXTE//vmjIqisu5vBTUoE6cET52G4c=";
   };
 
   strictDeps = true;

From 7f172e35fd796451f621bc0a3824e6a12eb51016 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Fri, 8 May 2026 15:58:42 +0700
Subject: [PATCH 083/132] sortmerna: fix build with gcc 15

---
 pkgs/by-name/so/sortmerna/package.nix       |  4 ++++
 pkgs/by-name/so/sortmerna/ssw-stdbool.patch | 13 +++++++++++++
 2 files changed, 17 insertions(+)
 create mode 100644 pkgs/by-name/so/sortmerna/ssw-stdbool.patch

diff --git a/pkgs/by-name/so/sortmerna/package.nix b/pkgs/by-name/so/sortmerna/package.nix
index 18269b941cc4..9f229cf9958d 100644
--- a/pkgs/by-name/so/sortmerna/package.nix
+++ b/pkgs/by-name/so/sortmerna/package.nix
@@ -49,6 +49,10 @@ stdenv.mkDerivation (finalAttrs: {
     "-DZLIB_STATIC=off"
   ];
 
+  patches = [
+    ./ssw-stdbool.patch
+  ];
+
   postPatch = ''
     # Fix missing pthread dependency for the main binary.
     substituteInPlace src/sortmerna/CMakeLists.txt \
diff --git a/pkgs/by-name/so/sortmerna/ssw-stdbool.patch b/pkgs/by-name/so/sortmerna/ssw-stdbool.patch
new file mode 100644
index 000000000000..d2115cc9fec6
--- /dev/null
+++ b/pkgs/by-name/so/sortmerna/ssw-stdbool.patch
@@ -0,0 +1,13 @@
+diff --git a/include/ssw.h b/include/ssw.h
+index 5259c95..32bb146 100644
+--- a/include/ssw.h
++++ b/include/ssw.h
+@@ -35,7 +35,7 @@ struct _profile;
+ typedef struct _profile s_profile;
+ 
+ #ifndef __cplusplus
+-typedef unsigned char bool;
++#include <stdbool.h>
+ static const bool False = 0;
+ static const bool True = 1;
+ #endif

From d5d02a7b9bd8feb36c748c0f9ad921836e310c52 Mon Sep 17 00:00:00 2001
From: Jack Rosenberg <mail@jackr.eu>
Date: Fri, 8 May 2026 12:32:56 +0200
Subject: [PATCH 084/132] fosrl-newt: 1.12.3 -> 1.12.4

---
 pkgs/by-name/fo/fosrl-newt/package.nix | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/fo/fosrl-newt/package.nix b/pkgs/by-name/fo/fosrl-newt/package.nix
index 1d219e19537c..40e03e02cf70 100644
--- a/pkgs/by-name/fo/fosrl-newt/package.nix
+++ b/pkgs/by-name/fo/fosrl-newt/package.nix
@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "newt";
-  version = "1.12.3";
+  version = "1.12.4";
 
   src = fetchFromGitHub {
     owner = "fosrl";
     repo = "newt";
     tag = finalAttrs.version;
-    hash = "sha256-Maw0qELlnh0m+NsQGdDC3wGYK8zi8Lbt7zwJqieR4hg=";
+    hash = "sha256-wYLnuKIU+wcCxF57cdfepTVm52btfdrveQ8Y+R9flMo=";
   };
 
-  vendorHash = "sha256-+zMSzNbqmWm/DXL2xMUd5uPP5tSIybsRokwJ2zd0pf0=";
+  vendorHash = "sha256-WfIK+Q8WQ372NzLw6DRapv1nYPduShi4KnVJBPk0Oz0=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
 
@@ -30,8 +30,6 @@ buildGoModule (finalAttrs: {
 
   doInstallCheck = true;
 
-  versionCheckProgramArg = [ "-version" ];
-
   passthru.updateScript = nix-update-script { };
 
   __structuredAttrs = true;

From e40cbdf7b6526e66914c5ecc658ace565dd64de0 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Fri, 8 May 2026 18:36:28 +0700
Subject: [PATCH 085/132] odp-dpdk: fix build with intel-ipsec-mb and gcc 15

---
 pkgs/by-name/od/odp-dpdk/package.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pkgs/by-name/od/odp-dpdk/package.nix b/pkgs/by-name/od/odp-dpdk/package.nix
index dff8d5b18357..90b71a6e523b 100644
--- a/pkgs/by-name/od/odp-dpdk/package.nix
+++ b/pkgs/by-name/od/odp-dpdk/package.nix
@@ -2,9 +2,11 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch2,
   autoreconfHook,
   pkg-config,
   dpdk,
+  intel-ipsec-mb,
   libbpf,
   libconfig,
   libpcap,
@@ -31,6 +33,11 @@ stdenv.mkDerivation (finalAttrs: {
 
   patches = [
     ./odp-dpdk_25.03.patch
+    # Fix gcc 15 -Wunterminated-string-initialization errors in test code.
+    (fetchpatch2 {
+      url = "https://github.com/OpenDataPlane/odp-dpdk/commit/56c6bdbe8fe9db4c0441162ec269ef4e1ebd1a6a.patch";
+      hash = "sha256-aj4HuGb0BUxsKtFS3X3gXqBoRVRnKEBNxa/4heWhBlE=";
+    })
   ];
 
   nativeBuildInputs = [
@@ -44,6 +51,7 @@ stdenv.mkDerivation (finalAttrs: {
         ./dpdk_25.03.patch
       ];
     })
+    intel-ipsec-mb
     libconfig
     libpcap
     numactl

From 3f9c7922a5db6ae7857ef4822408f3213a2609d7 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 12:05:39 +0000
Subject: [PATCH 086/132] volatility3: 2.27.0 -> 2.28.0

---
 pkgs/by-name/vo/volatility3/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/vo/volatility3/package.nix b/pkgs/by-name/vo/volatility3/package.nix
index 3633117be4a0..f7062f825139 100644
--- a/pkgs/by-name/vo/volatility3/package.nix
+++ b/pkgs/by-name/vo/volatility3/package.nix
@@ -7,14 +7,14 @@
 
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "volatility3";
-  version = "2.27.0";
+  version = "2.28.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "volatilityfoundation";
     repo = "volatility3";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-TtkLxzZq7tmLDpCl1UpOqdCWM7t+dgiUmQMsIg3vUGs=";
+    hash = "sha256-QO3rwGlVRBWEjReIGRDTK0LPVFN+4omkvxITaFC+5e0=";
   };
 
   build-system = with python3.pkgs; [ setuptools ];

From 0d5165a32a2d0b972d85bcd70f5c6489e9ca117a Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Fri, 8 May 2026 19:57:03 +0700
Subject: [PATCH 087/132] mytetra: fix build with gcc 15

---
 pkgs/applications/office/mytetra/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/applications/office/mytetra/default.nix b/pkgs/applications/office/mytetra/default.nix
index 1a766edfb70c..0fae90828e9f 100644
--- a/pkgs/applications/office/mytetra/default.nix
+++ b/pkgs/applications/office/mytetra/default.nix
@@ -29,6 +29,9 @@ stdenv.mkDerivation rec {
 
   hardeningDisable = [ "format" ];
 
+  # K&R-style declarations in vendored mimetex break under gcc 15's C23 default.
+  env.NIX_CFLAGS_COMPILE = "-std=gnu17";
+
   preBuild = ''
     substituteInPlace app/app.pro \
       --replace /usr/local/bin $out/bin \

From 537bdf5826c6f87199a484a09ff012c3eea111dc Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 13:09:40 +0000
Subject: [PATCH 088/132] andcli: 2.6.1 -> 2.6.2

---
 pkgs/by-name/an/andcli/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/an/andcli/package.nix b/pkgs/by-name/an/andcli/package.nix
index 7dc634bb1dc4..591e168e1e1f 100644
--- a/pkgs/by-name/an/andcli/package.nix
+++ b/pkgs/by-name/an/andcli/package.nix
@@ -9,7 +9,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "andcli";
-  version = "2.6.1";
+  version = "2.6.2";
 
   subPackages = [ "cmd/andcli" ];
 
@@ -17,10 +17,10 @@ buildGoModule (finalAttrs: {
     owner = "tjblackheart";
     repo = "andcli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-iNquGZfnXIo/UcTcRYdw+reV5TEPymHsX3kZdT66IPw=";
+    hash = "sha256-EtfsSLyZs5hADJRE5xvn2mu6A04Sz9e21Y4+VkopCY0=";
   };
 
-  vendorHash = "sha256-ZfU8Sf9M2dz9aIhwiK58zGIrcpmaw8wMAdcpxxvkUsQ=";
+  vendorHash = "sha256-CHWypAA2BpHop5LGkjZVTBL4dGzWfrwDJcFrtGTBAb4=";
 
   ldflags = [
     "-s"

From 2b4ea720b28cb625d1a87f3c5e0821d0d1d6614a Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 8 May 2026 15:44:15 +0200
Subject: [PATCH 089/132] python3Packages.tencentcloud-sdk-python: 3.1.91 ->
 3.1.92

Diff: https://github.com/TencentCloud/tencentcloud-sdk-python/compare/3.1.91...3.1.92

Changelog: https://github.com/TencentCloud/tencentcloud-sdk-python/blob/3.1.92/CHANGELOG.md
---
 .../python-modules/tencentcloud-sdk-python/default.nix        | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix b/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
index 90f55288ecf4..ba978ea6f19a 100644
--- a/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
+++ b/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
@@ -9,14 +9,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "tencentcloud-sdk-python";
-  version = "3.1.91";
+  version = "3.1.92";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "TencentCloud";
     repo = "tencentcloud-sdk-python";
     tag = finalAttrs.version;
-    hash = "sha256-mUOt5bskFub+YbUpDuoWKCZRybEL561cspUDENV8h4U=";
+    hash = "sha256-uvBMYVnYx6fSDmRk4me2wjQHMNwILtE6ANpvtKWX/xg=";
   };
 
   build-system = [ setuptools ];

From 0db1aa04bd057018d7ff420398317aaeb4e4044f Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 8 May 2026 16:17:47 +0200
Subject: [PATCH 090/132] python3Packages.iamdata: 0.1.202605071 ->
 0.1.202605081

Diff: https://github.com/cloud-copilot/iam-data-python/compare/v0.1.202605071...v0.1.202605081

Changelog: https://github.com/cloud-copilot/iam-data-python/releases/tag/v0.1.202605081
---
 pkgs/development/python-modules/iamdata/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/iamdata/default.nix b/pkgs/development/python-modules/iamdata/default.nix
index 8a7269bd066b..fba59321eec6 100644
--- a/pkgs/development/python-modules/iamdata/default.nix
+++ b/pkgs/development/python-modules/iamdata/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "iamdata";
-  version = "0.1.202605071";
+  version = "0.1.202605081";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "cloud-copilot";
     repo = "iam-data-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-m9kL2uCCGSAGXtJCObHBlJigViaFd5+e4nyleGM6jpQ=";
+    hash = "sha256-Jz52ll17IhHlPsQqXcbRxbH9aqLeKaGLXPbVl1VKix8=";
   };
 
   __darwinAllowLocalNetworking = true;

From 65cd2010c5acde3a581e78f656196c0303de5d67 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 8 May 2026 16:19:18 +0200
Subject: [PATCH 091/132] checkov: 3.2.526 -> 3.2.527

Diff: https://github.com/bridgecrewio/checkov/compare/3.2.526...3.2.527

Changelog: https://github.com/bridgecrewio/checkov/releases/tag/3.2.527
---
 pkgs/by-name/ch/checkov/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ch/checkov/package.nix b/pkgs/by-name/ch/checkov/package.nix
index 8c987eae2d1d..c36da5daba50 100644
--- a/pkgs/by-name/ch/checkov/package.nix
+++ b/pkgs/by-name/ch/checkov/package.nix
@@ -35,14 +35,14 @@ let
 in
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "checkov";
-  version = "3.2.526";
+  version = "3.2.527";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "bridgecrewio";
     repo = "checkov";
     tag = finalAttrs.version;
-    hash = "sha256-AWr95ZU7B3N6KZpJvPM3w41qv0ejoDtlRIEdDSH50w0=";
+    hash = "sha256-PKG4WzXtocfE9rwg3E77BkWREs7RhAzmdv9mz5VsbLA=";
   };
 
   pythonRelaxDeps = [

From 833337b6b7b800ad37978c539417745e375299cd Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Thu, 7 May 2026 13:31:15 +0200
Subject: [PATCH 092/132] python3Packages.mypy-boto3-glue: 1.43.0 -> 1.43.5

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index fc909401f76e..a20d4dd41804 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -571,8 +571,8 @@ in
       "sha256-vMz4YKm78XMavlPUNiSVAYmAbyUBrJhUXbFrhxIvUJA=";
 
   mypy-boto3-glue =
-    buildMypyBoto3Package "glue" "1.43.0"
-      "sha256-37wgxUoswgRZGpTYplXtIjyBEwO57aEzlcTOwg8g/pg=";
+    buildMypyBoto3Package "glue" "1.43.5"
+      "sha256-oUIJxMN+MuPsZoXzU1unTvupMyddoWCu6l/w/zSLx7Y=";
   mypy-boto3-grafana =
     buildMypyBoto3Package "grafana" "1.43.0"
       "sha256-ciXs8g462XTc+GTyxuGDDEsoR9DMD+bOdSUFe0OLshM=";

From 2be00d01f3a21ace0128285dc59e5850375949ae Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Thu, 7 May 2026 13:31:18 +0200
Subject: [PATCH 093/132] python3Packages.mypy-boto3-imagebuilder: 1.43.0 ->
 1.43.5

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index a20d4dd41804..546d0cb0c76b 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -610,8 +610,8 @@ in
       "sha256-9lzXp7Ug90MSZ7WdMiXoMnUiaAA9zCk/oS6gc0ulEMo=";
 
   mypy-boto3-imagebuilder =
-    buildMypyBoto3Package "imagebuilder" "1.43.0"
-      "sha256-HHmkU/o6zilpJMmpvE6hWmHw9hf2dJFFctNUjsjbGcA=";
+    buildMypyBoto3Package "imagebuilder" "1.43.5"
+      "sha256-fUllCFmyql6wfc5TijqwDavHvL8BDxprU0Yq+MG2nmY=";
 
   mypy-boto3-importexport =
     buildMypyBoto3Package "importexport" "1.43.0"

From b666f6218d1df5e9289c0034252277be8e08c86c Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Thu, 7 May 2026 13:31:29 +0200
Subject: [PATCH 094/132] python3Packages.mypy-boto3-lexv2-models: 1.43.0 ->
 1.43.5

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 546d0cb0c76b..8945fc227604 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -778,8 +778,8 @@ in
       "sha256-1kE3yNQBw8a1bYq3xMfAEfqW2p4FduGQ/uAJjI81xds=";
 
   mypy-boto3-lexv2-models =
-    buildMypyBoto3Package "lexv2-models" "1.43.0"
-      "sha256-oCXwBVVHNBIlBTn99cxrpkj/nUWNk4NReXsLKRvlwRo=";
+    buildMypyBoto3Package "lexv2-models" "1.43.5"
+      "sha256-CMdW9o3nNWkgsvP0lB9cBlpx8li5Tl9pZv0grrMLPus=";
 
   mypy-boto3-lexv2-runtime =
     buildMypyBoto3Package "lexv2-runtime" "1.43.0"

From 01fc0abc1a598fea8afd42aaf19649ace5af82db Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Thu, 7 May 2026 13:31:39 +0200
Subject: [PATCH 095/132] python3Packages.mypy-boto3-mwaa: 1.43.0 -> 1.43.5

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 8945fc227604..abfa5ee8c2e2 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -934,8 +934,8 @@ in
       "sha256-Igsngmg9PeJcyqX/Ih+fgzUuBotaf+2UWHK9RKEePL4=";
 
   mypy-boto3-mwaa =
-    buildMypyBoto3Package "mwaa" "1.43.0"
-      "sha256-w9AGeJrbRrTD31ANqKy6+MIQKenn05akYLfsXfnOw+w=";
+    buildMypyBoto3Package "mwaa" "1.43.5"
+      "sha256-TKqSy42P9Pmd9jbfsUadZT2qn4SRE8PPbad4gbUHUo0=";
 
   mypy-boto3-neptune =
     buildMypyBoto3Package "neptune" "1.43.0"

From 7f2da5e77cf1941041ddf1cc3aed48be5b77188f Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Thu, 7 May 2026 13:31:53 +0200
Subject: [PATCH 096/132] python3Packages.mypy-boto3-s3: 1.43.0 -> 1.43.5

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index abfa5ee8c2e2..811164453016 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -1158,8 +1158,8 @@ in
       "sha256-8or7NMBfeq9jZRzAu0Q1ShoTXTm8GCXR4kov0kaJCcE=";
 
   mypy-boto3-s3 =
-    buildMypyBoto3Package "s3" "1.43.0"
-      "sha256-O/sCex89+TFv9y/yn0stwNfWXtUDLYvPSJIiKZQihYg=";
+    buildMypyBoto3Package "s3" "1.43.5"
+      "sha256-umfbw9qCW2gYg52zgjci87EjBN0RbpTtOY63rehrD2I=";
 
   mypy-boto3-s3control =
     buildMypyBoto3Package "s3control" "1.43.0"

From a1bc61ea69c3398a7c0c575348c54e0f112c2114 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Thu, 7 May 2026 13:31:55 +0200
Subject: [PATCH 097/132] python3Packages.mypy-boto3-sagemaker: 1.43.4 ->
 1.43.5

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 811164453016..8b93b138c5a5 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -1170,8 +1170,8 @@ in
       "sha256-T+JIJpHxD7IzAwq8yxgq6zbVMj/btpbhKnylMyfFvvU=";
 
   mypy-boto3-sagemaker =
-    buildMypyBoto3Package "sagemaker" "1.43.4"
-      "sha256-7ecv9s2OC88pdn9P4aPArynGQi3VG1CA6FhQcEXN3fo=";
+    buildMypyBoto3Package "sagemaker" "1.43.5"
+      "sha256-LQNQUR4kO95oyTH8xZDkZwj3gIaF+rHdR5VbtkXeaT4=";
 
   mypy-boto3-sagemaker-a2i-runtime =
     buildMypyBoto3Package "sagemaker-a2i-runtime" "1.43.0"

From f18afcebb6c3fac30f15c2f79afe03f1ec8fab2f Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Thu, 7 May 2026 13:31:58 +0200
Subject: [PATCH 098/132] python3Packages.mypy-boto3-securityhub: 1.43.0 ->
 1.43.5

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 8b93b138c5a5..6372b4b5c740 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -1218,8 +1218,8 @@ in
       "sha256-Jl7i/d+dPkKuOWhWJft4YaU5EQ2OMkNyhHwOHL1mayA=";
 
   mypy-boto3-securityhub =
-    buildMypyBoto3Package "securityhub" "1.43.0"
-      "sha256-puy9WXT8LIhXkXQVCabuo9luvtTw59Jj/yz3UmOGJZ0=";
+    buildMypyBoto3Package "securityhub" "1.43.5"
+      "sha256-EHkWYodnoUT01mfovLF/+wA4IFy1Sn+H1f4vAitEMJE=";
 
   mypy-boto3-securitylake =
     buildMypyBoto3Package "securitylake" "1.43.0"

From a8701175a36b4e3d1590f4da913a5f0c851c98a5 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Thu, 7 May 2026 13:32:20 +0200
Subject: [PATCH 099/132] python3Packages.boto3-stubs: 1.43.4 -> 1.43.5

---
 pkgs/development/python-modules/boto3-stubs/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/boto3-stubs/default.nix b/pkgs/development/python-modules/boto3-stubs/default.nix
index da2fa62b5a3b..f8bf04d7b691 100644
--- a/pkgs/development/python-modules/boto3-stubs/default.nix
+++ b/pkgs/development/python-modules/boto3-stubs/default.nix
@@ -358,13 +358,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "boto3-stubs";
-  version = "1.43.4";
+  version = "1.43.5";
   pyproject = true;
 
   src = fetchPypi {
     pname = "boto3_stubs";
     inherit (finalAttrs) version;
-    hash = "sha256-Cebf3Dt9sCt8m6strnSLAXmsrXztcu5it5pegP1YjKo=";
+    hash = "sha256-aEO+foNZY6y2+uuNcX7RGI1un2o5Wzvzz+cMZQUMND4=";
   };
 
   build-system = [ setuptools ];

From 6bf0ec87f33107ca05c67997725fae17d905a66c Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 8 May 2026 16:20:02 +0200
Subject: [PATCH 100/132] python3Packages.mypy-boto3-ec2: 1.43.3 -> 1.43.6

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 6372b4b5c740..69742efc545b 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -443,8 +443,8 @@ in
       "sha256-dXNkOcMonYrBh4yzeubd+v3mW42s9XpmpfvgbtgoJgY=";
 
   mypy-boto3-ec2 =
-    buildMypyBoto3Package "ec2" "1.43.3"
-      "sha256-GLcwrqtumSe73lggUbs4xR9Bmo9L2bscOsDtVT+2Jgg=";
+    buildMypyBoto3Package "ec2" "1.43.6"
+      "sha256-zYVu5tdGQ2oJjCZ//8x+DZowC/rdpvw7vpQiZixpevU=";
 
   mypy-boto3-ec2-instance-connect =
     buildMypyBoto3Package "ec2-instance-connect" "1.43.0"

From afd0d3d3fa3cca20090d969ce79fdd327763e917 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 8 May 2026 16:20:12 +0200
Subject: [PATCH 101/132] python3Packages.mypy-boto3-guardduty: 1.43.0 ->
 1.43.6

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 69742efc545b..ad8a68e49f7b 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -590,8 +590,8 @@ in
       "sha256-nTKK7qqa2apyNM4/U2AphLGvoSqemVKfpAciilJ0pRE=";
 
   mypy-boto3-guardduty =
-    buildMypyBoto3Package "guardduty" "1.43.0"
-      "sha256-xLN9980fWNie8P+lPG7rKbvIH3qsuioPnnwcB/HDnlc=";
+    buildMypyBoto3Package "guardduty" "1.43.6"
+      "sha256-G0b+n8/YssnJeC5vdQSf2wNYlYNXhZYWnNzDw6wjgc8=";
 
   mypy-boto3-health =
     buildMypyBoto3Package "health" "1.43.0"

From 953a3dac67e089c4916f16995696ff263fa480e5 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 8 May 2026 16:20:49 +0200
Subject: [PATCH 102/132] python3Packages.mypy-boto3-route53resolver: 1.43.0 ->
 1.43.6

---
 pkgs/development/python-modules/mypy-boto3/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index ad8a68e49f7b..9c9fcda393c0 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -1150,8 +1150,8 @@ in
       "sha256-F1xhitFa4Eac9VlCpfqjCObUH+YvLz7TYDYfI/bPYbc=";
 
   mypy-boto3-route53resolver =
-    buildMypyBoto3Package "route53resolver" "1.43.0"
-      "sha256-z7x9WVUzjzg5bSL7cizhgvMgnmQJ68Fhu+d46XIOpDI=";
+    buildMypyBoto3Package "route53resolver" "1.43.6"
+      "sha256-/KAlBKNGLO+PLapddz4kSW3ymsGc7Bf/tlhiIV/K9Bs=";
 
   mypy-boto3-rum =
     buildMypyBoto3Package "rum" "1.43.0"

From 17243abf43922c96af7f6a0360c555f53f61b9a8 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 8 May 2026 16:21:15 +0200
Subject: [PATCH 103/132] python3Packages.boto3-stubs: 1.43.5 -> 1.43.6

---
 pkgs/development/python-modules/boto3-stubs/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/boto3-stubs/default.nix b/pkgs/development/python-modules/boto3-stubs/default.nix
index f8bf04d7b691..3f66915ec330 100644
--- a/pkgs/development/python-modules/boto3-stubs/default.nix
+++ b/pkgs/development/python-modules/boto3-stubs/default.nix
@@ -358,13 +358,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "boto3-stubs";
-  version = "1.43.5";
+  version = "1.43.6";
   pyproject = true;
 
   src = fetchPypi {
     pname = "boto3_stubs";
     inherit (finalAttrs) version;
-    hash = "sha256-aEO+foNZY6y2+uuNcX7RGI1un2o5Wzvzz+cMZQUMND4=";
+    hash = "sha256-bIsuKXe1+FzayC8eNZDNfn5FLJI0FlTMZMk6Y9oPe+w=";
   };
 
   build-system = [ setuptools ];

From 02a1a07e54b2b137d40c59b5d8446a4146670596 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 8 May 2026 16:25:01 +0200
Subject: [PATCH 104/132] python3Packages.nomadnet: 0.9.11 -> 1.0.1

Diff: https://github.com/markqvist/NomadNet/compare/0.9.11...1.0.1

Changelog: https://github.com/markqvist/NomadNet/releases/tag/1.0.1
---
 pkgs/development/python-modules/nomadnet/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/nomadnet/default.nix b/pkgs/development/python-modules/nomadnet/default.nix
index a8a8fa50a527..ac0202f81146 100644
--- a/pkgs/development/python-modules/nomadnet/default.nix
+++ b/pkgs/development/python-modules/nomadnet/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "nomadnet";
-  version = "0.9.11";
+  version = "1.0.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "markqvist";
     repo = "NomadNet";
     tag = finalAttrs.version;
-    hash = "sha256-vIV3FEvwqd2je/DzGWeshEx5Tb+DhOQIg7l0LbffEwY=";
+    hash = "sha256-uNchcz9kiLX2nUNRC2rTMv7my+19ylZrHTGWbonziFc=";
   };
 
   build-system = [ setuptools ];

From ce8326d56341cf4f4d64aa2f8b576dd28c631c18 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 8 May 2026 16:25:23 +0200
Subject: [PATCH 105/132] python3Packages.rns: 1.2.3 -> 1.2.4

Diff: https://github.com/markqvist/Reticulum/compare/1.2.3...1.2.4

Changelog: https://github.com/markqvist/Reticulum/blob/1.2.4/Changelog.md
---
 pkgs/development/python-modules/rns/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/rns/default.nix b/pkgs/development/python-modules/rns/default.nix
index 1bcc2cfafef8..803e41dea896 100644
--- a/pkgs/development/python-modules/rns/default.nix
+++ b/pkgs/development/python-modules/rns/default.nix
@@ -14,14 +14,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "rns";
-  version = "1.2.3";
+  version = "1.2.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "markqvist";
     repo = "Reticulum";
     tag = finalAttrs.version;
-    hash = "sha256-4fb0oyS4LZvvMPKEKAE5lLI7ReCW2V6b5J/pQqMrcNM=";
+    hash = "sha256-HuHMRdwyA1A7JwhE7OcipZs3Ey952Y4TFa791AjdTD8=";
   };
 
   patches = [

From 45de457e570dad1f8e8e0dd3ae024751e5f57f81 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 8 May 2026 16:27:35 +0200
Subject: [PATCH 106/132] python3Packages.appimage: 1.0.0 -> 1.2.0

Diff: https://github.com/ssh-mitm/appimage/compare/1.0.0...1.2.0

Changelog: https://github.com/ssh-mitm/appimage/blob/refs/tags/1.2.0/CHANGELOG.md
---
 pkgs/development/python-modules/appimage/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/appimage/default.nix b/pkgs/development/python-modules/appimage/default.nix
index aad575380e85..9add94c48624 100644
--- a/pkgs/development/python-modules/appimage/default.nix
+++ b/pkgs/development/python-modules/appimage/default.nix
@@ -7,14 +7,14 @@
 
 buildPythonPackage rec {
   pname = "appimage";
-  version = "1.0.0";
+  version = "1.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ssh-mitm";
     repo = "appimage";
     tag = version;
-    hash = "sha256-d8LwZ4iZ+fwFaBP/IFoKImI/TsYtVD0rllbYN9XP/es=";
+    hash = "sha256-aL0JcA6R2FUMcXykbXaSaUEz1ERs3iKh4c0cbRAClSY=";
   };
 
   build-system = [ hatchling ];

From 1d87bca870d34b6852a36e5b00ee2553237e1dc9 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 8 May 2026 16:29:34 +0200
Subject: [PATCH 107/132] exploitdb: 2026-05-01 -> 2026-05-08

Diff: https://gitlab.com/exploit-database/exploitdb/-/compare/2026-05-01...2026-05-08
---
 pkgs/by-name/ex/exploitdb/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ex/exploitdb/package.nix b/pkgs/by-name/ex/exploitdb/package.nix
index eaeed731d09f..5a36a41abc88 100644
--- a/pkgs/by-name/ex/exploitdb/package.nix
+++ b/pkgs/by-name/ex/exploitdb/package.nix
@@ -6,13 +6,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "exploitdb";
-  version = "2026-05-01";
+  version = "2026-05-08";
 
   src = fetchFromGitLab {
     owner = "exploit-database";
     repo = "exploitdb";
     tag = finalAttrs.version;
-    hash = "sha256-BZ1X9SpXf+HSY/4xz9imnCwK3si7c130Havg/ATI/LQ=";
+    hash = "sha256-fTO/85TOpDeyJG8qaaM6YTBYel7Jpycphrs7hs8S7Hs=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

From ed1a7e92e2e403f24fdd69ece951072496e80865 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 14:33:20 +0000
Subject: [PATCH 108/132] ssh-vault: 1.2.7 -> 1.2.8

---
 pkgs/by-name/ss/ssh-vault/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ss/ssh-vault/package.nix b/pkgs/by-name/ss/ssh-vault/package.nix
index cb9d521feffa..08fa8d0ca4cc 100644
--- a/pkgs/by-name/ss/ssh-vault/package.nix
+++ b/pkgs/by-name/ss/ssh-vault/package.nix
@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ssh-vault";
-  version = "1.2.7";
+  version = "1.2.8";
 
   src = fetchFromGitHub {
     owner = "ssh-vault";
     repo = "ssh-vault";
     tag = finalAttrs.version;
-    hash = "sha256-BC10Nir/MUxhD6QSF8p7cDdlrscC72Eoot/u8RAwM8g=";
+    hash = "sha256-kJscLetdP4D6DzzERfohezdsJqGcm/dmYTC+ZxjvRvo=";
   };
 
-  cargoHash = "sha256-NRFmCeL8ZhJ1Y29VPWK3Yqg6losB/9+QE/8GqpUeJTs=";
+  cargoHash = "sha256-XFKqEwWDg8FUeObhI6oOIXNh8c7gsWgSWy3YThExuU4=";
 
   nativeBuildInputs = [ pkg-config ];
 

From 3d39855fb256af9202d99e1086d1f5c46ea021a6 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 8 May 2026 16:37:17 +0200
Subject: [PATCH 109/132] python3Packages.appimage: migrate to finalAttrs

---
 pkgs/development/python-modules/appimage/default.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/development/python-modules/appimage/default.nix b/pkgs/development/python-modules/appimage/default.nix
index 9add94c48624..51038e0652e2 100644
--- a/pkgs/development/python-modules/appimage/default.nix
+++ b/pkgs/development/python-modules/appimage/default.nix
@@ -5,7 +5,7 @@
   hatchling,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "appimage";
   version = "1.2.0";
   pyproject = true;
@@ -13,7 +13,7 @@ buildPythonPackage rec {
   src = fetchFromGitHub {
     owner = "ssh-mitm";
     repo = "appimage";
-    tag = version;
+    tag = finalAttrs.version;
     hash = "sha256-aL0JcA6R2FUMcXykbXaSaUEz1ERs3iKh4c0cbRAClSY=";
   };
 
@@ -27,8 +27,8 @@ buildPythonPackage rec {
   meta = {
     description = "AppImage start scripts";
     homepage = "https://github.com/ssh-mitm/appimage";
-    changelog = "https://github.com/ssh-mitm/appimage/blob/${src.rev}/CHANGELOG.md";
+    changelog = "https://github.com/ssh-mitm/appimage/blob/${finalAttrs.src.rev}/CHANGELOG.md";
     license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})

From ead7438e4d30862443891aaf441d5b5d631a2071 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 15:17:30 +0000
Subject: [PATCH 110/132] docker-credential-helpers: 0.9.6 -> 0.9.7

---
 pkgs/by-name/do/docker-credential-helpers/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/do/docker-credential-helpers/package.nix b/pkgs/by-name/do/docker-credential-helpers/package.nix
index cb4f7b70fbf0..a48170c3140d 100644
--- a/pkgs/by-name/do/docker-credential-helpers/package.nix
+++ b/pkgs/by-name/do/docker-credential-helpers/package.nix
@@ -11,13 +11,13 @@
 
 buildGoModule rec {
   pname = "docker-credential-helpers";
-  version = "0.9.6";
+  version = "0.9.7";
 
   src = fetchFromGitHub {
     owner = "docker";
     repo = "docker-credential-helpers";
     rev = "v${version}";
-    sha256 = "sha256-OM5NU0I3272KaCHv8ZtkbkB86d6mo/Ym1QXMGmCisVc=";
+    sha256 = "sha256-HgioRk6qz9H9KD0JWcYg2bIpqHZxnPHYc3idxMUKuD8=";
   };
 
   vendorHash = null;

From c4e48bc02f48dcffcb8cf6ff0b96e19541ba632f Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 15:40:23 +0000
Subject: [PATCH 111/132] attyx: 0.3.15 -> 0.4.0

---
 pkgs/by-name/at/attyx/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/at/attyx/package.nix b/pkgs/by-name/at/attyx/package.nix
index 0b4d816f3c32..9c631d791f17 100644
--- a/pkgs/by-name/at/attyx/package.nix
+++ b/pkgs/by-name/at/attyx/package.nix
@@ -18,13 +18,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "attyx";
-  version = "0.3.15";
+  version = "0.4.0";
 
   src = fetchFromGitHub {
     owner = "semos-labs";
     repo = "attyx";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-w71MyTlnuJBdC9HtXm9hdYNv+ONnh8Ii3i2BhmmcXz4=";
+    hash = "sha256-9OTvpkkIo6pb9G2mvlNeZrwyOwIhAM7f9zy1LJzxJG0=";
   };
 
   deps = callPackage ./build.zig.zon.nix { };

From f368e836d0aa5f063cf344e47e83617b6a493d69 Mon Sep 17 00:00:00 2001
From: Simon <175155691+Simon-Weij@users.noreply.github.com>
Date: Fri, 8 May 2026 17:05:04 +0200
Subject: [PATCH 112/132] lufus: repository moved

---
 pkgs/by-name/lu/lufus/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/lu/lufus/package.nix b/pkgs/by-name/lu/lufus/package.nix
index de064128430f..49bc9654bf62 100644
--- a/pkgs/by-name/lu/lufus/package.nix
+++ b/pkgs/by-name/lu/lufus/package.nix
@@ -11,7 +11,7 @@ python313Packages.buildPythonApplication (finalAttrs: {
   version = "1.0.0b1.1";
 
   src = fetchFromGitHub {
-    owner = "Hog185";
+    owner = "Hogjects";
     repo = "Lufus";
     tag = "v${finalAttrs.version}";
     sha256 = "sha256-3i0CnhGvLTXutz8CQoH5q4PwZ23lAwnUo8H5TRJx+KE=";
@@ -65,7 +65,7 @@ python313Packages.buildPythonApplication (finalAttrs: {
 
   meta = {
     description = "A rufus clone written in py and designed to work with linux";
-    homepage = "https://github.com/Hog185/Lufus";
+    homepage = "https://github.com/Hogjects/Lufus";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ Simon-Weij ];
     platforms = lib.platforms.linux;

From 5324b43c01f8ac931be8c9d30247b600faba1140 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 15:46:46 +0000
Subject: [PATCH 113/132] vscode-extensions.redhat.vscode-yaml: 1.22.0 ->
 1.23.0

---
 pkgs/applications/editors/vscode/extensions/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/editors/vscode/extensions/default.nix b/pkgs/applications/editors/vscode/extensions/default.nix
index d220972ac545..b0d6121ffbdc 100644
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -3898,8 +3898,8 @@ let
         mktplcRef = {
           publisher = "redhat";
           name = "vscode-yaml";
-          version = "1.22.0";
-          hash = "sha256-Xsy2350zAxSEhJgCl5/bVwWEwaXgmnN0Y/orDjwNuw4=";
+          version = "1.23.0";
+          hash = "sha256-GC7AIQIUw+F5rBscTe+ulKt/97s7p636TLRvmcT9b9c=";
         };
         meta = {
           description = "YAML Language Support by Red Hat, with built-in Kubernetes syntax support";

From d3dd6dd383aff20377d9ba344b6d9f795efde912 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 16:09:55 +0000
Subject: [PATCH 114/132] bcu: 1.1.119 -> 1.1.128

---
 pkgs/by-name/bc/bcu/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/bc/bcu/package.nix b/pkgs/by-name/bc/bcu/package.nix
index 5f6c6449c7cb..e96ab8cf142e 100644
--- a/pkgs/by-name/bc/bcu/package.nix
+++ b/pkgs/by-name/bc/bcu/package.nix
@@ -13,13 +13,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bcu";
-  version = "1.1.119";
+  version = "1.1.128";
 
   src = fetchFromGitHub {
     owner = "nxp-imx";
     repo = "bcu";
     tag = "bcu_${finalAttrs.version}";
-    hash = "sha256-GVnUkIoqHED/9c3Tr4M29DB+t6Q8OPDcxVWKNn/lU/8=";
+    hash = "sha256-8q9xJYEZfyC8ETNi3q8YQOtBGMmI4EQLp7LKxPaU65Q=";
   };
 
   patches = [ ./darwin-install.patch ];

From 1e686d38f31ec1b3a80c3d760e3d3f6e204ca9a0 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 16:11:18 +0000
Subject: [PATCH 115/132] narsil: 1.4.0-116-gab32c9f80 -> 1.4.0-140-g962201f6f

---
 pkgs/by-name/na/narsil/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/na/narsil/package.nix b/pkgs/by-name/na/narsil/package.nix
index 8e23a5b84fde..2ed0ed7d956d 100644
--- a/pkgs/by-name/na/narsil/package.nix
+++ b/pkgs/by-name/na/narsil/package.nix
@@ -13,13 +13,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "narsil";
-  version = "1.4.0-116-gab32c9f80";
+  version = "1.4.0-140-g962201f6f";
 
   src = fetchFromGitHub {
     owner = "NickMcConnell";
     repo = "NarSil";
     tag = finalAttrs.version;
-    hash = "sha256-Nw8NZyFQzTwcJhKB86LC0mqjLOmivSm7o9BSRsvQVP4=";
+    hash = "sha256-6vAVdogjun8Ali/Y71w0jlBU7mEXA0wy2yYCSXPSY3E=";
   };
 
   passthru.updateScript = nix-update-script { };

From f3ba454c8d6b45d3c130ca8edcd61603db7e3884 Mon Sep 17 00:00:00 2001
From: Marie Ramlow <me@nycode.dev>
Date: Fri, 8 May 2026 19:32:47 +0200
Subject: [PATCH 116/132] nixos/installation-cd-graphical-calamares-plasma6:
 disable qt5 integration

---
 .../cd-dvd/installation-cd-graphical-calamares-plasma6.nix   | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/nixos/modules/installer/cd-dvd/installation-cd-graphical-calamares-plasma6.nix b/nixos/modules/installer/cd-dvd/installation-cd-graphical-calamares-plasma6.nix
index 250c4ed73d87..6d2c7112bc08 100644
--- a/nixos/modules/installer/cd-dvd/installation-cd-graphical-calamares-plasma6.nix
+++ b/nixos/modules/installer/cd-dvd/installation-cd-graphical-calamares-plasma6.nix
@@ -7,7 +7,10 @@
 
   isoImage.edition = lib.mkDefault "plasma6";
 
-  services.desktopManager.plasma6.enable = true;
+  services.desktopManager.plasma6 = {
+    enable = true;
+    enableQt5Integration = false;
+  };
 
   # Automatically login as nixos.
   services.displayManager = {

From 019b49699fa9ff11eebd8767e0e23f0b948b139e Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 18:23:19 +0000
Subject: [PATCH 117/132] pomerium: 0.32.6 -> 0.32.7

---
 pkgs/by-name/po/pomerium/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/po/pomerium/package.nix b/pkgs/by-name/po/pomerium/package.nix
index a93e9924255a..194b1c65ef8b 100644
--- a/pkgs/by-name/po/pomerium/package.nix
+++ b/pkgs/by-name/po/pomerium/package.nix
@@ -16,14 +16,14 @@ let
     mapAttrsToList
     ;
 
-  version = "0.32.6";
+  version = "0.32.7";
   src = fetchFromGitHub {
     owner = "pomerium";
     repo = "pomerium";
     rev = "v${version}";
-    hash = "sha256-VwmjuXlYsh2dGKf7ux8DyLZec7xMISuQ7SSb9+LwzfU=";
+    hash = "sha256-JPRyLQzQmC3EiIp+rOMx24JVneFUN7ovC2eYrKxf3ik=";
   };
-  vendorHash = "sha256-b4H7gAMG7DXEbvkZFsoEZrKpuvPW0vkfv1qqBPBaGAM=";
+  vendorHash = "sha256-ST33a/YNJiE70ORWNxS9gFNfHcNGGiQhOpUwqgbEJiQ=";
 
   getEnvoy = buildGoModule {
     pname = "pomerium-get-envoy";

From e31eec3899553e5665979a4ca7ae0aeda5df8e89 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 18:24:07 +0000
Subject: [PATCH 118/132] bird-lg: 1.4.4 -> 1.4.5

---
 pkgs/by-name/bi/bird-lg/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/bi/bird-lg/package.nix b/pkgs/by-name/bi/bird-lg/package.nix
index 317b2f0651d5..5e3b73e76218 100644
--- a/pkgs/by-name/bi/bird-lg/package.nix
+++ b/pkgs/by-name/bi/bird-lg/package.nix
@@ -10,13 +10,13 @@ let
     { modRoot, vendorHash }:
     buildGoModule rec {
       pname = "bird-lg-${modRoot}";
-      version = "1.4.4";
+      version = "1.4.5";
 
       src = fetchFromGitHub {
         owner = "xddxdd";
         repo = "bird-lg-go";
         rev = "v${version}";
-        hash = "sha256-60QyqilUI0yNCTZrCyUZhQYFio0gP/Z5Lcb3btlQRaE=";
+        hash = "sha256-xKDpaGnMv8e2OKV3547d7Jsq3VFNwayhCL2dGKVYSZM=";
       };
 
       doDist = false;

From 26f9094d7ca7ee7acdee201a415465ed297869bb Mon Sep 17 00:00:00 2001
From: Michael Daniels <mdaniels5757@gmail.com>
Date: Fri, 8 May 2026 14:24:58 -0400
Subject: [PATCH 119/132] cargo-binstall: 1.18.1 -> 1.19.1

Diff: https://github.com/cargo-bins/cargo-binstall/compare/v1.18.1...v1.19.1

Changelog: https://github.com/cargo-bins/cargo-binstall/releases/tag/v1.19.1
---
 pkgs/by-name/ca/cargo-binstall/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-binstall/package.nix b/pkgs/by-name/ca/cargo-binstall/package.nix
index 2475d673e5b0..11b0186ba992 100644
--- a/pkgs/by-name/ca/cargo-binstall/package.nix
+++ b/pkgs/by-name/ca/cargo-binstall/package.nix
@@ -11,16 +11,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-binstall";
-  version = "1.18.1";
+  version = "1.19.1";
 
   src = fetchFromGitHub {
     owner = "cargo-bins";
     repo = "cargo-binstall";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-SOiwme6MIOzro5/85rgEP90odXUUqeTDzn1ZsKDS4Z4=";
+    hash = "sha256-b4S8oPK1U84Oy3hhJSxJxToaFF5l4V2Tea0kGn3hW0A=";
   };
 
-  cargoHash = "sha256-UW960ls3O+0CiQHoFvkhieL+t0dG9RJ3zi/Pu37kvbY=";
+  cargoHash = "sha256-E+exhtfJiOTQIZm44WyA0yptUn7wymXFRlDyAsshcKA=";
 
   nativeBuildInputs = [
     pkg-config

From 5b511c170c0d3680808b58ef351f569460f7dfbd Mon Sep 17 00:00:00 2001
From: ranidspace <dev@ranid.space>
Date: Fri, 8 May 2026 14:38:41 -0400
Subject: [PATCH 120/132] ryubing: migrate to forgejo

---
 pkgs/by-name/ry/ryubing/package.nix | 8 ++++----
 pkgs/by-name/ry/ryubing/updater.sh  | 4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/pkgs/by-name/ry/ryubing/package.nix b/pkgs/by-name/ry/ryubing/package.nix
index 5684f57ac98d..11c1b657625d 100644
--- a/pkgs/by-name/ry/ryubing/package.nix
+++ b/pkgs/by-name/ry/ryubing/package.nix
@@ -4,7 +4,7 @@
   cctools,
   darwin,
   dotnetCorePackages,
-  fetchFromGitLab,
+  fetchFromForgejo,
   libx11,
   libgdiplus,
   moltenvk,
@@ -34,10 +34,10 @@ buildDotnetModule rec {
   pname = "ryubing";
   version = "1.3.3";
 
-  src = fetchFromGitLab {
+  src = fetchFromForgejo {
     domain = "git.ryujinx.app";
-    owner = "Ryubing";
-    repo = "Ryujinx";
+    owner = "projects";
+    repo = "Ryubing";
     tag = version;
     hash = "sha256-LhQaXxmj5HIgfmrsDN8GhhVXlXHpDO2Q8JtNLaCq0mk=";
   };
diff --git a/pkgs/by-name/ry/ryubing/updater.sh b/pkgs/by-name/ry/ryubing/updater.sh
index a851801cccea..c89a86c3502e 100755
--- a/pkgs/by-name/ry/ryubing/updater.sh
+++ b/pkgs/by-name/ry/ryubing/updater.sh
@@ -6,7 +6,7 @@ cd "$(dirname "${BASH_SOURCE[0]}")"
 
 # If NEW_VERSION or COMMIT are not set, fetch the latest version
 if [ -z ${NEW_VERSION+x} ] && [ -z ${COMMIT+x} ]; then
-    RELEASE_DATA=$(curl -s "https://git.ryujinx.app/api/v4/projects/1/repository/tags?order_by=updated&sort=desc")
+    RELEASE_DATA=$(curl -s "https://git.ryujinx.app/api/v1/repos/projects/Ryubing/tags")
     if [ -z "$RELEASE_DATA" ] || [[ $RELEASE_DATA =~ "imposed ratelimits" ]]; then
         echo "failed to get release job data" >&2
         exit 1
@@ -27,7 +27,7 @@ fi
 cd ../../../..
 
 if [[ "${1-default}" != "--deps-only" ]]; then
-    SHA="$(nix-prefetch-git https://git.ryujinx.app/ryubing/ryujinx --rev "$NEW_VERSION" --quiet | jq -r '.sha256')"
+    SHA="$(nix-prefetch-git https://git.ryujinx.app/projects/Ryubing --rev "$NEW_VERSION" --quiet | jq -r '.sha256')"
     SRI=$(nix --experimental-features nix-command hash to-sri "sha256:$SHA")
     update-source-version ryubing "$NEW_VERSION" "$SRI"
 fi

From 3acc5a705d5d0584b7af3ca4947e5f0cf654538c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 18:41:22 +0000
Subject: [PATCH 121/132] python3Packages.pytest-md-report: 0.7.0 -> 0.8.0

---
 pkgs/development/python-modules/pytest-md-report/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/pytest-md-report/default.nix b/pkgs/development/python-modules/pytest-md-report/default.nix
index f4344244c7dd..676b41729691 100644
--- a/pkgs/development/python-modules/pytest-md-report/default.nix
+++ b/pkgs/development/python-modules/pytest-md-report/default.nix
@@ -13,13 +13,13 @@
 
 buildPythonPackage rec {
   pname = "pytest-md-report";
-  version = "0.7.0";
+  version = "0.8.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "pytest_md_report";
     inherit version;
-    hash = "sha256-O4Mur2YLRwtXQuWNnJpeMSsHEqcBLSUcwE6QioHOPJY=";
+    hash = "sha256-yOO38fkaDo59G5RuGyJPTzkYfaDfL4EnMTYaQ2oX9HI=";
   };
 
   build-system = [

From 2d41ad2cf461a8452cc95ad34b47cefaf20b553e Mon Sep 17 00:00:00 2001
From: phanirithvij <phanirithvij2000@gmail.com>
Date: Thu, 7 May 2026 22:21:32 +0530
Subject: [PATCH 122/132] asciinema-automation: drop

Co-authored-by: Peder Bergebakken Sundt <pbsds@hotmail.com>
Signed-off-by: phanirithvij <phanirithvij2000@gmail.com>
---
 .../as/asciinema-automation/package.nix       | 49 -------------------
 pkgs/top-level/aliases.nix                    |  1 +
 2 files changed, 1 insertion(+), 49 deletions(-)
 delete mode 100644 pkgs/by-name/as/asciinema-automation/package.nix

diff --git a/pkgs/by-name/as/asciinema-automation/package.nix b/pkgs/by-name/as/asciinema-automation/package.nix
deleted file mode 100644
index c8e5d8690ad4..000000000000
--- a/pkgs/by-name/as/asciinema-automation/package.nix
+++ /dev/null
@@ -1,49 +0,0 @@
-{
-  lib,
-  python3,
-  fetchFromGitHub,
-  asciinema,
-}:
-
-python3.pkgs.buildPythonApplication (finalAttrs: {
-  pname = "asciinema-automation";
-  version = "0.2.2";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "PierreMarchand20";
-    repo = "asciinema_automation";
-    rev = "v${finalAttrs.version}";
-    hash = "sha256-VfIr7w/5hQwr6XYuC3f8h71uScr0lBdx6PyO1hpiZhA=";
-  };
-
-  nativeBuildInputs = [
-    python3.pkgs.setuptools
-    python3.pkgs.wheel
-  ];
-
-  propagatedBuildInputs = with python3.pkgs; [
-    asciinema
-    pexpect
-  ];
-
-  optional-dependencies = with python3.pkgs; {
-    dev = [
-      mypy
-      pytest
-      ruff
-      types-pexpect
-    ];
-  };
-
-  pythonImportsCheck = [ "asciinema_automation" ];
-
-  meta = {
-    changelog = "https://github.com/PierreMarchand20/asciinema_automation/blob/${finalAttrs.src.rev}/CHANGELOG.md";
-    description = "CLI utility to automate asciinema recordings";
-    homepage = "https://github.com/PierreMarchand20/asciinema_automation";
-    license = lib.licenses.mit;
-    mainProgram = "asciinema-automation";
-    maintainers = [ ];
-  };
-})
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 32bbc8d64876..1e991abd5365 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -331,6 +331,7 @@ mapAliases {
   artichoke = throw "artichoke has been removed due to being archived upstream."; # Added 2025-11-04
   artim-dark = aritim-dark; # Added 2025-07-27
   artyFX = openav-artyfx; # Added 2026-02-08
+  asciinema-automation = throw "'asciinema-automation' has been removed as it doesn't work with asciinema version 3+"; # Added 2026-05-07
   asciinema_3 = warnAlias "'asciinema_3' has been renamed to 'asciinema'" asciinema; # Added 2026-05-07
   aseprite-unfree = throw "'aseprite-unfree' has been renamed to/replaced by 'aseprite'"; # Converted to throw 2025-10-27
   asio_1_10 = throw "'asio_1_10' has been removed as it is outdated and unused. Use 'asio' instead"; # Added 2025-12-03

From 16ccd7307bb82d3617ec2195805ce75fa2a7dcd5 Mon Sep 17 00:00:00 2001
From: 2kybe3 <kybe@kybe.xyz>
Date: Fri, 8 May 2026 21:04:14 +0200
Subject: [PATCH 123/132] sops: 3.12.2 -> 3.13.0

Diff: https://github.com/getsops/sops/compare/v3.12.2...v3.13.0
Changelog: https://github.com/getsops/sops/releases/tag/v3.13.0
---
 pkgs/by-name/so/sops/package.nix | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/so/sops/package.nix b/pkgs/by-name/so/sops/package.nix
index ef2b6bcb5509..5d60ac9bf611 100644
--- a/pkgs/by-name/so/sops/package.nix
+++ b/pkgs/by-name/so/sops/package.nix
@@ -12,16 +12,18 @@
 
 buildGoModule (finalAttrs: {
   pname = "sops";
-  version = "3.12.2";
+  version = "3.13.0";
+
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "getsops";
     repo = finalAttrs.pname;
     tag = "v${finalAttrs.version}";
-    hash = "sha256-1VGaS0uhacxjNOP/USmFHlrewkGzRzrV6xamDXY8hgc=";
+    hash = "sha256-sJAK7iCVmjGAjQ0CBVsJI7L/GwHB9bvm354Cq3WQI1M=";
   };
 
-  vendorHash = "sha256-HgfJMTTWzQ4+59nuy/et3KxQaZEcfrjcWSr/iOOdpb0=";
+  vendorHash = "sha256-aBHZPh5ib2BOxoHQH6q8GD/EJOb2x1OBBePicwoI6Gc=";
 
   subPackages = [ "cmd/sops" ];
 

From 228ad73002e357c932aa930dacde00d21a897bce Mon Sep 17 00:00:00 2001
From: sund3RRR <evenquantity@gmail.com>
Date: Thu, 7 May 2026 16:05:28 +0300
Subject: [PATCH 124/132] amnezia-vpn-bin: init at 4.8.15.4

---
 pkgs/by-name/am/amnezia-vpn-bin/package.nix | 140 ++++++++++++++++++++
 1 file changed, 140 insertions(+)
 create mode 100644 pkgs/by-name/am/amnezia-vpn-bin/package.nix

diff --git a/pkgs/by-name/am/amnezia-vpn-bin/package.nix b/pkgs/by-name/am/amnezia-vpn-bin/package.nix
new file mode 100644
index 000000000000..cf409a498912
--- /dev/null
+++ b/pkgs/by-name/am/amnezia-vpn-bin/package.nix
@@ -0,0 +1,140 @@
+{
+  stdenv,
+  fetchzip,
+  lib,
+  libarchive,
+  makeWrapper,
+  autoPatchelfHook,
+  libxkbcommon,
+  libxcb-cursor,
+  libxcb-wm,
+  libxcb-util,
+  libxcb-image,
+  libxcb-keysyms,
+  libxcb-render-util,
+  krb5,
+  brotli,
+  fontconfig,
+  freetype,
+  gtk3,
+  pango,
+  at-spi2-atk,
+  unixodbc,
+  firebird,
+  libdrm,
+  openldap,
+  bash,
+  kdePackages,
+  nix-update-script,
+}:
+stdenv.mkDerivation (finalAttrs: {
+  pname = "amnezia-vpn-bin";
+  version = "4.8.15.4";
+
+  __structuredAttrs = true;
+
+  src = fetchzip {
+    url = "https://github.com/amnezia-vpn/amnezia-client/releases/download/${finalAttrs.version}/AmneziaVPN_${finalAttrs.version}_linux_x64.tar";
+    hash = "sha256-Dr8zuzgwMAPXOTh69URFvA7EzGMnfBFO6kPhjhtjr6A=";
+  };
+
+  strictDeps = true;
+
+  nativeBuildInputs = [
+    autoPatchelfHook
+    libarchive
+    makeWrapper
+  ];
+
+  buildInputs = [
+    stdenv.cc.cc
+    bash
+    libxkbcommon
+    libxcb-cursor
+    libxcb-wm
+    libxcb-util
+    libxcb-image
+    libxcb-keysyms
+    libxcb-render-util
+    krb5.lib
+    brotli.lib
+    fontconfig.lib
+    freetype
+    gtk3
+    pango
+    at-spi2-atk
+    unixodbc
+    firebird
+    libdrm
+    openldap
+    kdePackages.wayland
+  ];
+
+  # These libraries are not available in nixpkgs. They are Oracle Instant Client
+  # (libclntsh.so.23.1) and UCanAccess/Mimer SQL (libmimerapi.so) drivers that
+  # are bundled with Qt's SQlite database plugins (libqsqlora, libqsqlmimer).
+  # The Amnezia VPN binary ships pre-linked against these Qt database drivers
+  # even though it does not use them. Without ignoring these missing deps,
+  # autoPatchelfHook would fail the build.
+  autoPatchelfIgnoreMissingDeps = [
+    "libclntsh.so.23.1"
+    "libmimerapi.so"
+  ];
+
+  dontBuild = true;
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/share/amnezia-vpn $out/bin $out/share/applications $out/lib/systemd/system $out/share/icons/hicolor/512x512/apps
+
+    bsdtar -xf AmneziaVPN_Linux_Installer.bin -C $out/share/amnezia-vpn
+
+    makeWrapper "$out/share/amnezia-vpn/client/bin/AmneziaVPN" "$out/bin/AmneziaVPN" \
+      --prefix LD_LIBRARY_PATH : "$out/share/amnezia-vpn/client/lib" \
+      --set QML_IMPORT_PATH "$out/share/amnezia-vpn/client/qml" \
+      --set QML2_IMPORT_PATH "$out/share/amnezia-vpn/client/qml" \
+      --set QT_PLUGIN_PATH "$out/share/amnezia-vpn/client/plugins" \
+      --set QT_QPA_PLATFORM_PLUGIN_PATH "$out/share/amnezia-vpn/client/plugins/platforms" \
+      --set QTDIR "$out/share/amnezia-vpn/client" \
+      --set CQT_PKG_ROOT "$out/share/amnezia-vpn/client"
+
+    makeWrapper "$out/share/amnezia-vpn/service/bin/AmneziaVPN-service" "$out/bin/AmneziaVPN-service" \
+      --prefix LD_LIBRARY_PATH : "$out/share/amnezia-vpn/client/lib" \
+      --prefix LD_LIBRARY_PATH : "$out/share/amnezia-vpn/service/lib" \
+      --set QML_IMPORT_PATH "$out/share/amnezia-vpn/service/qml" \
+      --set QML2_IMPORT_PATH "$out/share/amnezia-vpn/service/qml" \
+      --set QT_PLUGIN_PATH "$out/share/amnezia-vpn/service/plugins" \
+      --set QT_QPA_PLATFORM_PLUGIN_PATH "$out/share/amnezia-vpn/service/plugins/platforms" \
+      --set QTDIR "$out/share/amnezia-vpn/service" \
+      --set CQT_PKG_ROOT "$out/share/amnezia-vpn/service"
+
+    substituteInPlace $out/share/amnezia-vpn/AmneziaVPN.service \
+      --replace-fail "ExecStart=/opt/AmneziaVPN/service/AmneziaVPN-service.sh" "AmneziaVPN-service" \
+      --replace-fail "Environment=LD_LIBRARY_PATH=/opt/AmneziaVPN/client/lib" ""
+    ln -s $out/share/amnezia-vpn/AmneziaVPN.service $out/lib/systemd/system/AmneziaVPN.service
+
+    substituteInPlace $out/share/amnezia-vpn/AmneziaVPN.desktop \
+      --replace-fail "/usr/share/pixmaps/AmneziaVPN.png" "AmneziaVPN"
+    ln -s $out/share/amnezia-vpn/AmneziaVPN.desktop $out/share/applications/AmneziaVPN.desktop
+
+    ln -s $out/share/amnezia-vpn/AmneziaVPN.png $out/share/icons/hicolor/512x512/apps/AmneziaVPN.png
+
+    runHook postInstall
+  '';
+
+  passthru = {
+    updateScript = nix-update-script { };
+  };
+
+  meta = {
+    description = "Amnezia VPN Client (binary release)";
+    downloadPage = "https://amnezia.org/en/downloads";
+    homepage = "https://github.com/amnezia-vpn/amnezia-client";
+    license = lib.licenses.gpl3;
+    mainProgram = "AmneziaVPN";
+    maintainers = with lib.maintainers; [ sund3RRR ];
+    platforms = [ "x86_64-linux" ];
+    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
+  };
+})

From fd7c4558261d1ed2bf8426ff1f61427f3c500963 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 19:26:30 +0000
Subject: [PATCH 125/132] python3Packages.htmltools: 0.6.0 -> 0.6.1

---
 pkgs/development/python-modules/htmltools/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/htmltools/default.nix b/pkgs/development/python-modules/htmltools/default.nix
index 4f2d237d630b..dd8d04dbf724 100644
--- a/pkgs/development/python-modules/htmltools/default.nix
+++ b/pkgs/development/python-modules/htmltools/default.nix
@@ -11,14 +11,14 @@
 
 buildPythonPackage rec {
   pname = "htmltools";
-  version = "0.6.0";
+  version = "0.6.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "posit-dev";
     repo = "py-htmltools";
     tag = "v${version}";
-    hash = "sha256-ugtDYs5YaVo7Yy9EodyRrypHQUjmOIPpsyhwNnZkiko=";
+    hash = "sha256-psrTSy4NhhsZamB7lQDt+n6LUDiRcHD5+FFqTIIrnZc=";
   };
 
   build-system = [

From b8178f50daa0dcab133a89c7c1c5cb78bcccb719 Mon Sep 17 00:00:00 2001
From: ccicnce113424 <ccicnce113424@gmail.com>
Date: Fri, 1 May 2026 15:48:57 +0800
Subject: [PATCH 126/132] {libcss, libdom}: set propagatedBuildInputs

The generated *.pc files list these libs in Requires, so propagate them.
This avoids repeating the same dependencies in every consumer.
---
 pkgs/by-name/li/libcss/package.nix | 3 +++
 pkgs/by-name/li/libdom/package.nix | 5 ++++-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/li/libcss/package.nix b/pkgs/by-name/li/libcss/package.nix
index 75c1edbe4f5c..54c0ce25bb31 100644
--- a/pkgs/by-name/li/libcss/package.nix
+++ b/pkgs/by-name/li/libcss/package.nix
@@ -41,6 +41,9 @@ stdenv.mkDerivation (finalAttrs: {
   buildInputs = [
     perl
     netsurf-buildsystem
+  ];
+
+  propagatedBuildInputs = [
     libparserutils
     libwapcaplet
   ];
diff --git a/pkgs/by-name/li/libdom/package.nix b/pkgs/by-name/li/libdom/package.nix
index 7ac4118e676e..7022a9c21add 100644
--- a/pkgs/by-name/li/libdom/package.nix
+++ b/pkgs/by-name/li/libdom/package.nix
@@ -35,8 +35,11 @@ stdenv.mkDerivation (finalAttrs: {
   buildInputs = [
     expat
     netsurf-buildsystem
-    libhubbub
     libparserutils
+  ];
+
+  propagatedBuildInputs = [
+    libhubbub
     libwapcaplet
   ];
 

From 71e0b21b3a25e70a59988f196379a351a69cbfc7 Mon Sep 17 00:00:00 2001
From: ccicnce113424 <ccicnce113424@gmail.com>
Date: Fri, 1 May 2026 15:48:57 +0800
Subject: [PATCH 127/132] elinks: build with meson

Use upstream Meson build to restore buildability (Fixes #513546).
Add required build inputs for the Meson build
(e.g. curl/lua/libcss/libdom, xmlto for docs).
Set darwin linker flags for iconv (libiconv) to fix undefined symbol errors.
Keep feature toggles aligned with the previous configure flags.
---
 pkgs/by-name/el/elinks/package.nix | 103 +++++++++++++++++++++--------
 1 file changed, 75 insertions(+), 28 deletions(-)

diff --git a/pkgs/by-name/el/elinks/package.nix b/pkgs/by-name/el/elinks/package.nix
index 6ab33a4e7e7c..a338be83a9f6 100644
--- a/pkgs/by-name/el/elinks/package.nix
+++ b/pkgs/by-name/el/elinks/package.nix
@@ -3,21 +3,28 @@
   stdenv,
   fetchFromGitHub,
   ncurses,
-  libx11,
   bzip2,
   zlib,
   brotli,
   zstd,
   xz,
   openssl,
-  autoreconfHook,
+  meson,
+  ninja,
   gettext,
+  python3,
   pkg-config,
-  libev,
+  xmlto,
+  docbook_xml_dtd_42,
   gpm,
-  libidn,
+  libidn2,
   tre,
   expat,
+  lua,
+  curl,
+  libcss,
+  libdom,
+  nix-update-script,
   # Incompatible licenses, LGPLv3 - GPLv2
   enableGuile ? false,
   guile ? null,
@@ -42,55 +49,95 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-aQ+q2I6uTVv5kpKBaGJ1xiE/9vv9T7JI05VX/ROkAqA=";
   };
 
+  outputs = [
+    "out"
+    "man"
+    "doc"
+  ];
+
   buildInputs = [
     ncurses
-    libx11
     bzip2
     zlib
     brotli
     zstd
     xz
     openssl
-    libidn
+    libidn2
     tre
     expat
-    libev
+    lua
+    curl
+    libcss
+    libdom
   ]
-  ++ lib.optional stdenv.hostPlatform.isLinux gpm
+  ++ lib.optional stdenv.hostPlatform.isDarwin gettext
   ++ lib.optional enableGuile guile
   ++ lib.optional enablePython python
   ++ lib.optional enablePerl perl;
 
   nativeBuildInputs = [
-    autoreconfHook
+    meson
+    ninja
     gettext
+    perl
+    python3
     pkg-config
+    xmlto
   ];
 
-  configureFlags = [
-    "--enable-finger"
-    "--enable-html-highlight"
-    "--enable-gopher"
-    "--enable-gemini"
-    "--enable-cgi"
-    "--enable-bittorrent"
-    "--enable-nntp"
-    "--enable-256-colors"
-    "--enable-true-color"
-    "--with-brotli"
-    "--with-lzma"
-    "--with-libev"
-    "--with-terminfo"
-  ]
-  ++ lib.optional enableGuile "--with-guile"
-  ++ lib.optional enablePython "--with-python"
-  ++ lib.optional enablePerl "--with-perl";
+  env =
+    lib.optionalAttrs stdenv.hostPlatform.isLinux {
+      C_INCLUDE_PATH = "${lib.getInclude gpm}/include";
+      LIBRARY_PATH = "${lib.getLib gpm}/lib";
+    }
+    // lib.optionalAttrs stdenv.hostPlatform.isDarwin {
+      LDFLAGS = "-liconv";
+    };
+
+  strictDeps = true;
+  __structuredAttrs = true;
+
+  mesonFlags =
+    (map (f: lib.mesonBool f true) [
+      "finger"
+      "html-highlight"
+      "gopher"
+      "gemini"
+      "cgi"
+      "nntp"
+      "256-colors"
+      "true-color"
+      "brotli"
+      "lzma"
+      "terminfo"
+      "reproducible"
+    ])
+    ++ [
+      (lib.mesonOption "luapkg" "lua")
+      (lib.mesonBool "gpm" stdenv.hostPlatform.isLinux)
+      (lib.mesonBool "guile" enableGuile)
+      (lib.mesonBool "python" enablePython)
+      (lib.mesonBool "perl" enablePerl)
+    ];
+
+  postPatch = ''
+    patchShebangs doc/tools
+    substituteInPlace doc/tools/asciidoc/docbook.conf \
+      --replace-fail "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" "${docbook_xml_dtd_42}/xml/dtd/docbook/docbookx.dtd"
+  '';
+
+  preConfigure = ''
+    mesonFlags+=("-Dsource-date-epoch=$SOURCE_DATE_EPOCH")
+  '';
+
+  passthru.updateScript = nix-update-script { extraArgs = [ "--use-github-releases" ]; };
 
   meta = {
     description = "Full-featured text-mode web browser";
     mainProgram = "elinks";
     homepage = "https://github.com/rkd77/elinks";
-    license = lib.licenses.gpl2;
+    license = lib.licenses.gpl2Only;
     platforms = with lib.platforms; linux ++ darwin;
     maintainers = with lib.maintainers; [
       iblech

From 58cbdfee0c74194bf5cf57f25aadf9a913664f7e Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Fri, 8 May 2026 22:23:44 +0000
Subject: [PATCH 128/132] linux_6_1: 6.1.171 -> 6.1.172

---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 88de5df4ea3c..9d931df8b1a4 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -5,8 +5,8 @@
         "lts": false
     },
     "6.1": {
-        "version": "6.1.171",
-        "hash": "sha256:132i30w25p2zq30flnb1ahyrjfqcv5awn2ch6y33i06i32pszgk0",
+        "version": "6.1.172",
+        "hash": "sha256:16dlfdzjcsc21m5sfbhamg8y3ay54rz8a0qqvqrmxq691mhjwrzi",
         "lts": true
     },
     "5.15": {

From 370865adc5135438aa34d9f84ef20b8797451f83 Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Fri, 8 May 2026 22:23:46 +0000
Subject: [PATCH 129/132] linux_5_15: 5.15.205 -> 5.15.206

---
 pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json
index 9d931df8b1a4..7ede2b1b8db3 100644
--- a/pkgs/os-specific/linux/kernel/kernels-org.json
+++ b/pkgs/os-specific/linux/kernel/kernels-org.json
@@ -10,8 +10,8 @@
         "lts": true
     },
     "5.15": {
-        "version": "5.15.205",
-        "hash": "sha256:102ysmjpig3lkf0z864drra8bdyr43czbj1js32k64g32sbrw23f",
+        "version": "5.15.206",
+        "hash": "sha256:07z6lla7xpnn4sn3l4zw3x7m8ih8w6h54k71qrxrf5zv9i7wxijz",
         "lts": true
     },
     "5.10": {

From eb123b458b96dce745aea292be7d0deb3fc451f4 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 22:29:19 +0000
Subject: [PATCH 130/132] python3Packages.hcloud: 2.19.0 -> 2.20.0

---
 pkgs/development/python-modules/hcloud/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/hcloud/default.nix b/pkgs/development/python-modules/hcloud/default.nix
index c4bdd3aed5a2..5cbb6c791b4d 100644
--- a/pkgs/development/python-modules/hcloud/default.nix
+++ b/pkgs/development/python-modules/hcloud/default.nix
@@ -10,12 +10,12 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "hcloud";
-  version = "2.19.0";
+  version = "2.20.0";
   pyproject = true;
 
   src = fetchPypi {
     inherit (finalAttrs) pname version;
-    hash = "sha256-sXoudQNFbnpHDfuvayWLt9P17xojIn0CGZ2pHMh9wVY=";
+    hash = "sha256-JwUu/6saJbs8v8ji0kcuDoUDsgrsq1u61cSw6Gl2ltU=";
   };
 
   build-system = [ setuptools ];

From c7f1840da2bfc094d3fefb97ecc448517dc0c816 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 8 May 2026 15:51:51 +0000
Subject: [PATCH 131/132] python3Packages.disposable-email-domains: 0.0.177 ->
 0.0.181

---
 .../python-modules/disposable-email-domains/default.nix      | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/disposable-email-domains/default.nix b/pkgs/development/python-modules/disposable-email-domains/default.nix
index 871e6cae54a7..702461222ff4 100644
--- a/pkgs/development/python-modules/disposable-email-domains/default.nix
+++ b/pkgs/development/python-modules/disposable-email-domains/default.nix
@@ -8,14 +8,15 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "disposable-email-domains";
-  version = "0.0.177";
+  version = "0.0.181";
   pyproject = true;
+  __structuredAttrs = true;
 
   # No tags on GitHub
   src = fetchPypi {
     pname = "disposable_email_domains";
     inherit (finalAttrs) version;
-    hash = "sha256-HKm7QTtzxW8ZnuvAsE5JFr61nnr+qWjjeV/5VY1JFIc=";
+    hash = "sha256-BtW0MXgFTphae3O5XPDnix8RTKDx/tvzpTN4znZjFSI=";
   };
 
   build-system = [

From 2f715416cc4103a9921ef0ac000af4d627660a57 Mon Sep 17 00:00:00 2001
From: Aiden Schembri <aidsch0605@outlook.com>
Date: Sat, 9 May 2026 00:44:07 +0200
Subject: [PATCH 132/132] zed-editor: 1.1.6 -> 1.1.7

---
 pkgs/by-name/ze/zed-editor/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ze/zed-editor/package.nix b/pkgs/by-name/ze/zed-editor/package.nix
index cc1029bdf509..4d020513e380 100644
--- a/pkgs/by-name/ze/zed-editor/package.nix
+++ b/pkgs/by-name/ze/zed-editor/package.nix
@@ -97,7 +97,7 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "zed-editor";
-  version = "1.1.6";
+  version = "1.1.7";
 
   outputs = [
     "out"
@@ -110,7 +110,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "zed-industries";
     repo = "zed";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-2yuwjJhrK5tQkMmQnOaOYyQETB5mTKAIGMedw7kmXzg=";
+    hash = "sha256-S3LMLJhmLCA5FqjZFk+N2pCLGxDxIcwlSdKor/DQ5ps=";
   };
 
   postPatch = ''
@@ -139,7 +139,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     rm -r $out/git/*/candle-book/
   '';
 
-  cargoHash = "sha256-xTK+u0IQ/QlGQuROehudjDJ4ch9/pM3Z9DahrJ+c9mk=";
+  cargoHash = "sha256-pAoB4cvNsdx8oKq7J+YdFM3VaM+mwBQwUzFFxJGnGMw=";
 
   __structuredAttrs = true;