Merge 62c6ee843f into haskell-updates

2026-04-01 00:35:30 +00:00
parent 887ea1604a 62c6ee843f
commit 4dcdbe4a6f
225 changed files with 4462 additions and 1947 deletions
@@ -60,10 +60,10 @@ jobs:
          github_token: ${{ steps.app-token.outputs.token }}

      - name: Comment on failure
-        uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
        if: ${{ failure() }}
-        with:
-          issue-number: 105153
-          body: |
+        env:
+          BODY_TEXT: |
            Periodic merge from `${{ inputs.from }}` into [`${{ inputs.into }}`](https://github.com/NixOS/nixpkgs/tree/${{ inputs.into }}) has [failed](https://github.com/NixOS/nixpkgs/actions/runs/${{ github.run_id }}).
-          token: ${{ steps.app-token.outputs.token }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+        run: |
+          gh pr comment 105153 --body "$BODY_TEXT"
@@ -9981,6 +9981,12 @@
    githubId = 66037909;
    name = "Graham J. Norris";
  };
+  granddave = {
+    email = "davidisaksson93@gmail.com";
+    github = "Granddave";
+    githubId = 13297896;
+    name = "David Isaksson";
+  };
  gravndal = {
    email = "gaute.ravndal+nixos@gmail.com";
    github = "gravndal";
@@ -13968,6 +13974,12 @@
    githubId = 1778670;
    name = "Austin Horstman";
  };
+  Kharacternyk = {
+    email = "nazar@vinnich.uk";
+    github = "Kharacternyk";
+    githubId = 43315801;
+    name = "Nazar Vinnichuk";
+  };
  khaser = {
    email = "a-horohorin@mail.ru";
    github = "khaser";
@@ -19479,6 +19491,12 @@
    github = "Nishimara";
    githubId = 59232119;
  };
+  nitinbhat972 = {
+    email = "nitinbhat972@gmail.com";
+    github = "nitinbhat972";
+    githubId = 80189191;
+    name = "Nitin Bhat";
+  };
  nitsky = {
    name = "nitsky";
    github = "nitsky";
@@ -45,7 +45,7 @@ for line in "${autoLines[@]}"; do
    #   commit is unchanged. This is why the following is also necessary:
    # - The tree filter runs the command on each of our own commits,
    #   effectively reapplying it.
-    FILTER_BRANCH_SQUELCH_WARNING=1 git filter-branch \
+    FILTER_BRANCH_SQUELCH_WARNING=1 git filter-branch -f \
        --parent-filter "sed 's/$parent/$autoCommit/'" \
        --tree-filter "$autoCmd" \
        "$autoCommit"..HEAD
@@ -65,7 +65,6 @@ lua-resty-jwt,,,,,,
 lua-resty-openidc,,,,,,
 lua-resty-openssl,,,,,,
 lua-resty-session,,,,,,
-# we have to set url because luarocks.org lua-rtoml is squatted by another package
 lua-rtoml,https://raw.githubusercontent.com/lblasc/lua-rtoml/eb89439070c72ccf05efb8576abae7643abab354/lua-rtoml-0.3-0.rockspec,,,,,lblasc
 lua-subprocess,https://raw.githubusercontent.com/0x0ade/lua-subprocess/master/subprocess-scm-1.rockspec,,,,5.1,scoder12
 lua-term,,,,,,
@@ -108,6 +108,8 @@ Available extra Fcitx5 addons are:

  - Anthy (`fcitx5-anthy`): Anthy is a system for
    Japanese input method. It converts Hiragana text to Kana Kanji mixed text.
+  - Array (`fcitx5-array`): Array is a Chinese shape-based input method that
+    uses a grid of 30 keys.
  - Chewing (`fcitx5-chewing`): Chewing is an
    intelligent Zhuyin input method. It is one of the most popular input
    methods among Traditional Chinese Unix users.
@@ -99,6 +99,10 @@ in
            libayatana-common
            ubports-click
          ])
+          # Qt5 qtwebengine is not secure: https://github.com/NixOS/nixpkgs/pull/435067
+          ++ (with pkgs.lomiri-qt6; [
+            morph-browser
+          ])
          ++ (with pkgs.lomiri; [
            hfd-service
            libusermetrics
@@ -125,10 +129,6 @@ in
            lomiri-thumbnailer
            lomiri-url-dispatcher
            mediascanner2 # TODO possibly needs to be kicked off by graphical-session.target
-            # Qt5 qtwebengine is not secure: https://github.com/NixOS/nixpkgs/pull/435067
-            # morph-browser
-            # Adding another browser that is known-working until Morph Browser can migrate to Qt6
-            pkgs.epiphany
            qtmir # not having its desktop file for Xwayland available causes any X11 application to crash the session
            teleports
          ]);
@@ -378,11 +378,22 @@ let
    ++ userAsserts prefix listener.users
    ++ lib.imap0 (i: v: authAsserts "${prefix}.authPlugins.${toString i}" v) listener.authPlugins;

+  makeACLFile =
+    idx: listener:
+    pkgs.writeText "mosquitto-acl-${toString idx}.conf" (
+      lib.concatStringsSep "\n" (
+        lib.flatten [
+          listener.acl
+          (lib.mapAttrsToList (n: u: [ "user ${n}" ] ++ map (t: "topic ${t}") u.acl) listener.users)
+        ]
+      )
+    );
+
  formatListener =
    idx: listener:
    [
      "listener ${toString listener.port} ${toString listener.address}"
-      "acl_file /etc/mosquitto/acl-${toString idx}.conf"
+      "acl_file ${cfg.dataDir}/acl-${toString idx}.conf"
    ]
    ++ lib.optional (!listener.omitPasswordAuth) "password_file ${cfg.dataDir}/passwd-${toString idx}"
    ++ formatFreeform { } listener.settings
@@ -762,32 +773,13 @@ in
        UMask = "0077";
      };
      preStart = lib.concatStringsSep "\n" (
-        lib.imap0 (
-          idx: listener:
-          makePasswordFile (listenerScope idx) listener.users "${cfg.dataDir}/passwd-${toString idx}"
-        ) cfg.listeners
+        lib.imap0 (idx: listener: ''
+          ${makePasswordFile (listenerScope idx) listener.users "${cfg.dataDir}/passwd-${toString idx}"}
+          install -m 0700 ${makeACLFile idx listener} ${cfg.dataDir}/acl-${toString idx}.conf
+        '') cfg.listeners
      );
    };

-    environment.etc = lib.listToAttrs (
-      lib.imap0 (idx: listener: {
-        name = "mosquitto/acl-${toString idx}.conf";
-        value = {
-          user = config.users.users.mosquitto.name;
-          group = config.users.users.mosquitto.group;
-          mode = "0400";
-          text = (
-            lib.concatStringsSep "\n" (
-              lib.flatten [
-                listener.acl
-                (lib.mapAttrsToList (n: u: [ "user ${n}" ] ++ map (t: "topic ${t}") u.acl) listener.users)
-              ]
-            )
-          );
-        };
-      }) cfg.listeners
-    );
-
    users.users.mosquitto = {
      description = "Mosquitto MQTT Broker Daemon owner";
      group = "mosquitto";
@@ -236,6 +236,7 @@ in
  atuin = runTest ./atuin.nix;
  audiobookshelf = runTest ./audiobookshelf.nix;
  audit = runTest ./audit.nix;
+  audit-testsuite = runTest ./audit-testsuite.nix;
  auth-mysql = runTest ./auth-mysql.nix;
  authelia = runTest ./authelia.nix;
  auto-cpufreq = runTest ./auto-cpufreq.nix;
@@ -991,7 +992,7 @@ in
  moonraker = runTest ./moonraker.nix;
  moosefs = runTest ./moosefs.nix;
  mopidy = runTest ./mopidy.nix;
-  morph-browser = runTest ./morph-browser.nix;
+  morph-browser = discoverTests (import ./morph-browser.nix);
  mosquitto = runTest ./mosquitto.nix;
  movim = import ./web-apps/movim {
    inherit runTest;
@@ -0,0 +1,45 @@
+{ lib, ... }:
+{
+  # https://github.com/linux-audit/audit-testsuite
+  # This test is meant to *only* run the audit regression testsuite.
+  # The test mutates the audit rules on the system it runs on, and can not run in the nix build sandbox.
+  # Thus a dedicated VM test makes sense.
+
+  name = "audit-testsuite";
+
+  meta = {
+    maintainers = with lib.maintainers; [ grimmauld ];
+  };
+
+  nodes.machine =
+    { pkgs, ... }:
+    {
+      # https://github.com/linux-audit/audit-testsuite/blob/5a10451642ac1ba2fa4b31c06a21cf9aa2d38b66/tests/amcast_joinpart/test#L86
+      # tests use LC_TIME=en_DK.utf8 to force ISO 8601 date format
+      i18n.extraLocales = [ "en_DK.UTF-8/UTF-8" ];
+
+      security.polkit.enable = true; # needed for run0
+
+      security.audit.backlogLimit = 8192;
+
+      security.auditd = {
+        enable = true;
+        plugins.af_unix.active = true;
+        settings = {
+          num_logs = 4;
+          disk_full_action = "rotate";
+        };
+      };
+
+      environment.systemPackages = [ pkgs.audit.testsuite.runner ];
+    };
+
+  testScript = ''
+    start_all()
+    machine.wait_for_unit("auditd.service")
+    machine.wait_for_unit("network.target") # netfilter test requires network to be up
+
+    # we need a valid session to which we can send commands, so we use run0
+    machine.succeed("run0 --pty audit-testsuite-runner")
+  '';
+}
@@ -18,6 +18,12 @@
        variables = {
          UITK_ICON_THEME = "suru";
        };
+
+        # App has a somewhat small horizontal max size and a white background, while we configure IceWM to have a black background.
+        # Makes OCR less reliable, often completely fails to find the localised text. Force background to be white instead.
+        etc."icewm/prefoverride".text = ''
+          DesktopBackgroundColor=#FFFFFF
+        '';
      };

      i18n.supportedLocales = [ "all" ];
@@ -507,16 +507,15 @@ in
              machine.send_key("alt-f4")

          # Morph is how we go online
-          # Qt5 qtwebengine is not secure: https://github.com/NixOS/nixpkgs/pull/435067
-          # with subtest("morph browser works"):
-          #     open_starter()
-          #     machine.send_chars("Morph\n")
-          #     wait_for_text(r"(Bookmarks|address|site|visited any)")
-          #     machine.screenshot("morph_open")
-          #
-          #     # morph-browser has a separate VM test to test its basic functionalities
-          #
-          #     machine.send_key("alt-f4")
+          with subtest("morph browser works"):
+              open_starter()
+              machine.send_chars("Morph\n")
+              wait_for_text(r"(Bookmarks|address|site|visited any)")
+              machine.screenshot("morph_open")
+
+              # morph-browser has a separate VM test to test its basic functionalities
+
+              machine.send_key("alt-f4")

          # LSS provides DE settings
          with subtest("system settings open"):
@@ -689,7 +688,7 @@ in
              machine.screenshot("settings_lomiri-content-hub_peers")

              # Select Gallery as content source
-              mouse_click(460, 80)
+              mouse_click(540, 80)

              # Expect Gallery to be brought into the foreground, with its sharing page open
              wait_for_text("Photos")
@@ -1,64 +1,81 @@
-{ pkgs, lib, ... }:
-{
-  name = "morph-browser-standalone";
-  meta.maintainers = lib.teams.lomiri.members;
-
-  nodes.machine =
-    { config, pkgs, ... }:
+let
+  makeTest = import ./make-test-python.nix;
+  generic =
    {
-      imports = [
-        ./common/x11.nix
-      ];
+      withQt6,
+    }:
+    makeTest (
+      { pkgs, lib, ... }:
+      {
+        name = "morph-browser-${if withQt6 then "qt6" else "qt5"}-standalone";
+        meta.maintainers = lib.teams.lomiri.members;

-      services.xserver.enable = true;
+        nodes.machine =
+          {
+            config,
+            pkgs,
+            ...
+          }:
+          {
+            imports = [
+              ./common/x11.nix
+            ];

-      environment = {
-        systemPackages = with pkgs.lomiri; [
-          suru-icon-theme
-          morph-browser
-        ];
-        variables = {
-          UITK_ICON_THEME = "suru";
-        };
-      };
+            services.xserver.enable = true;

-      i18n.supportedLocales = [ "all" ];
+            environment = {
+              systemPackages = with (if withQt6 then pkgs.lomiri-qt6 else pkgs.lomiri); [
+                suru-icon-theme
+                morph-browser
+              ];
+              variables = {
+                UITK_ICON_THEME = "suru";
+              };
+            };

-      fonts.packages = with pkgs; [
-        # Intended font & helps with OCR
-        ubuntu-classic
-      ];
-    };
+            i18n.supportedLocales = [ "all" ];

-  enableOCR = true;
+            fonts.packages = with pkgs; [
+              # Intended font & helps with OCR
+              ubuntu-classic
+            ];
+          };

-  testScript = ''
-    machine.wait_for_x()
+        enableOCR = true;

-    with subtest("morph browser launches"):
-        machine.succeed("morph-browser >&2 &")
-        machine.sleep(10)
-        machine.send_key("alt-f10")
-        machine.sleep(5)
-        machine.wait_for_text(r"Web Browser|New|sites|Bookmarks")
-        machine.screenshot("morph_open")
+        testScript = ''
+          machine.wait_for_x()

-    with subtest("morph browser displays HTML"):
-        machine.send_chars("file://${pkgs.valgrind.doc}/share/doc/valgrind/html/index.html\n")
-        machine.wait_for_text("Valgrind Documentation")
-        machine.screenshot("morph_htmlcontent")
+          with subtest("morph browser launches"):
+              machine.succeed("morph-browser >&2 &")
+              machine.sleep(10)
+              machine.send_key("alt-f10")
+              machine.sleep(5)
+              machine.wait_for_text(r"Web Browser|New|sites|Bookmarks")
+              machine.screenshot("morph_open")

-    machine.succeed("pkill -f morph-browser")
+          with subtest("morph browser displays HTML"):
+              machine.send_chars("file://${pkgs.valgrind.doc}/share/doc/valgrind/html/index.html\n")
+              machine.wait_for_text("Valgrind Documentation")
+              machine.screenshot("morph_htmlcontent")

-    # Get rid of saved tabs, to show localised start page
-    machine.succeed("rm -r /root/.local/share/morph-browser")
+          machine.succeed("pkill -f morph-browser")

-    with subtest("morph browser localisation works"):
-        machine.succeed("env LANG=de_DE.UTF-8 morph-browser >&2 &")
-        machine.sleep(10)
-        machine.send_key("alt-f10")
-        machine.sleep(5)
-        machine.wait_for_text(r"Web-Browser|Neuer|Seiten|Lesezeichen")
-        machine.screenshot("morph_localised")
-  '';
+          # Get rid of saved tabs, to show localised start page
+          machine.succeed("rm -r /root/.local/share/morph-browser")
+
+          with subtest("morph browser localisation works"):
+              machine.succeed("env LANG=de_DE.UTF-8 morph-browser >&2 &")
+              machine.sleep(10)
+              machine.send_key("alt-f10")
+              machine.sleep(5)
+              machine.wait_for_text(r"Web-Browser|Neuer|Seiten|Lesezeichen")
+              machine.screenshot("morph_localised")
+        '';
+      }
+    );
+in
+{
+  qt5 = generic { withQt6 = false; };
+  qt6 = generic { withQt6 = true; };
 }
@@ -12,20 +12,20 @@ let
  # update-script-start: urls
  urls = {
    x86_64-linux = {
-      url = "https://download.jetbrains.com/datagrip/datagrip-2025.3.5.tar.gz";
-      hash = "sha256-s9Zw7SUhmAzjhTf52nEerXNaP0l7kO/6J35xFtKf6TQ=";
+      url = "https://download.jetbrains.com/datagrip/datagrip-2026.1.tar.gz";
+      hash = "sha256-iO08H4cMYVKx2p1iJsKqooC5YNGIjTbdqwnM98JC2W8=";
    };
    aarch64-linux = {
-      url = "https://download.jetbrains.com/datagrip/datagrip-2025.3.5-aarch64.tar.gz";
-      hash = "sha256-75OME+CICrLNkUT0tFqzUe/qAGtCGNKC6kAGeTuSK6w=";
+      url = "https://download.jetbrains.com/datagrip/datagrip-2026.1-aarch64.tar.gz";
+      hash = "sha256-8omllZC5WbYOsXsZ6JTVaDNh/QIyUVgmw3zBwY2nfkY=";
    };
    x86_64-darwin = {
-      url = "https://download.jetbrains.com/datagrip/datagrip-2025.3.5.dmg";
-      hash = "sha256-FkTK5hu3GloxzzlAuXJUI3G5w84YvzIYtfa0h6hDZ5w=";
+      url = "https://download.jetbrains.com/datagrip/datagrip-2026.1.dmg";
+      hash = "sha256-UBKNSUVhzJ932Ja7rrugKzqlzxiE5Ynv91yDT6onCNM=";
    };
    aarch64-darwin = {
-      url = "https://download.jetbrains.com/datagrip/datagrip-2025.3.5-aarch64.dmg";
-      hash = "sha256-lE0b8s37mBHJ7e0iHfKSW/9vpE95d/+wpjIgkcGDcr8=";
+      url = "https://download.jetbrains.com/datagrip/datagrip-2026.1-aarch64.dmg";
+      hash = "sha256-V7ip2Er8bQL0feLvovF/rpJpCTYM/MhEywNax91F8Gk=";
    };
  };
  # update-script-end: urls
@@ -39,8 +39,8 @@ mkJetBrainsProduct {
  product = "DataGrip";

  # update-script-start: version
-  version = "2025.3.5";
-  buildNumber = "253.31033.21";
+  version = "2026.1";
+  buildNumber = "261.22158.299";
  # update-script-end: version

  src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));
@@ -12,20 +12,20 @@ let
  # update-script-start: urls
  urls = {
    x86_64-linux = {
-      url = "https://download.jetbrains.com/go/goland-2025.3.4.tar.gz";
-      hash = "sha256-S8IRWe+viRxtLrnCgQPR0J8QrOSr5yvtcOpwsjkq9DY=";
+      url = "https://download.jetbrains.com/go/goland-2026.1.tar.gz";
+      hash = "sha256-+TORnDso307j+WwFspoQRZ8IN2TFyy5uUvLyjiNhHiY=";
    };
    aarch64-linux = {
-      url = "https://download.jetbrains.com/go/goland-2025.3.4-aarch64.tar.gz";
-      hash = "sha256-yUI3hURv5jdQ2CrALp7wLShL7pGFa2d7BUSstwFd2mo=";
+      url = "https://download.jetbrains.com/go/goland-2026.1-aarch64.tar.gz";
+      hash = "sha256-inAjJw9xzpGjdo4pgoqQwM+ZyEnvLQZggPt4S/LGFxg=";
    };
    x86_64-darwin = {
-      url = "https://download.jetbrains.com/go/goland-2025.3.4.dmg";
-      hash = "sha256-e9CC9bZ02mxHr788w9SKB6VvhMJ02UbZn0K4IDLTgjw=";
+      url = "https://download.jetbrains.com/go/goland-2026.1.dmg";
+      hash = "sha256-zFAjXSdOaf3C2zQDDriOK9F2xOxGTrAyacVHUh0Sqck=";
    };
    aarch64-darwin = {
-      url = "https://download.jetbrains.com/go/goland-2025.3.4-aarch64.dmg";
-      hash = "sha256-9XW909OrBLhWuMX/doFFxychU97vP5uAC3bgTs2FaLg=";
+      url = "https://download.jetbrains.com/go/goland-2026.1-aarch64.dmg";
+      hash = "sha256-Zo48RMtVUweV541ImYxtQTBp4L4ZhyTDxFFwK+YyrZk=";
    };
  };
  # update-script-end: urls
@@ -39,8 +39,8 @@ in
  product = "Goland";

  # update-script-start: version
-  version = "2025.3.4";
-  buildNumber = "253.32098.60";
+  version = "2026.1";
+  buildNumber = "261.22158.291";
  # update-script-end: version

  src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));
@@ -12,20 +12,20 @@ let
  # update-script-start: urls
  urls = {
    x86_64-linux = {
-      url = "https://download.jetbrains.com/webide/PhpStorm-2025.3.4.tar.gz";
-      hash = "sha256-rUFOzut21nrAoKq88W8naa61Y/ncA7pn0MO3rGmuBIY=";
+      url = "https://download.jetbrains.com/webide/PhpStorm-2026.1.tar.gz";
+      hash = "sha256-OpSc/Xg4nWh9XRpVN8FLaV1Gwz8kbM+S9WVk27jJ7gY=";
    };
    aarch64-linux = {
-      url = "https://download.jetbrains.com/webide/PhpStorm-2025.3.4-aarch64.tar.gz";
-      hash = "sha256-wjBhibJGItzDKkRtx4tXqM0Kqn4K8HNGdAVMGalm7Fw=";
+      url = "https://download.jetbrains.com/webide/PhpStorm-2026.1-aarch64.tar.gz";
+      hash = "sha256-StoSzSx4fxeeB+PnZB5PCEzPJuWCa+HeY9u6hGGlUHg=";
    };
    x86_64-darwin = {
-      url = "https://download.jetbrains.com/webide/PhpStorm-2025.3.4.dmg";
-      hash = "sha256-emlgbnHw1yaRHaiFjCL9EBYFffdWWNF7AFWyIERj0QA=";
+      url = "https://download.jetbrains.com/webide/PhpStorm-2026.1.dmg";
+      hash = "sha256-KN4OVeR7TCA+PigHemh0eIT+y3hRKAGFJlEFmRc45Xg=";
    };
    aarch64-darwin = {
-      url = "https://download.jetbrains.com/webide/PhpStorm-2025.3.4-aarch64.dmg";
-      hash = "sha256-mxrTc5v4IIDgZzwMtbvdifmetoDacGNEhyVzPiVMSSw=";
+      url = "https://download.jetbrains.com/webide/PhpStorm-2026.1-aarch64.dmg";
+      hash = "sha256-V3TQIvaYH3+NmWIDJFyTcO7Zwdd+TPP0TSFmX5pjEhM=";
    };
  };
  # update-script-end: urls
@@ -39,8 +39,8 @@ mkJetBrainsProduct {
  product = "PhpStorm";

  # update-script-start: version
-  version = "2025.3.4";
-  buildNumber = "253.32098.40";
+  version = "2026.1";
+  buildNumber = "261.22158.283";
  # update-script-end: version

  src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));
@@ -58,6 +58,9 @@ vimUtils.buildVimPlugin {
  nvimSkipModules = [
    # Dependent on active fuzzy search state
    "sg.cody.fuzzy"
+    # Invokes a request that fails in the check hook
+    # https://github.com/sourcegraph/sg.nvim/blob/775f22b75a9826eabf69b0094dd1d51d619fe552/lua/sg/health.lua#L2
+    "sg.health"
  ];

  passthru = {
@@ -871,6 +871,7 @@ assertNoAdditions {
      "conjure-spec.client.fennel.nfnl_spec"
      "conjure-spec.client.guile.socket_spec"
      "conjure-spec.client.scheme.stdio_spec"
+      "conjure-spec.process_spec"
      # No parser for fennel
      "conjure.client.fennel.def-str-util"
    ];
@@ -8,8 +8,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "claude-code";
    publisher = "anthropic";
-    version = "2.1.87";
-    hash = "sha256-0brafiNuo6wRGWlGAOax3My9CrGKiGpDjFswuHFWt4M=";
+    version = "2.1.88";
+    hash = "sha256-iFH8siufDTje1zihRMqb/5CCYo5YHHdCZcuk8Hrj4Uk=";
  };

  postInstall = ''
@@ -396,8 +396,8 @@ let
        mktplcRef = {
          name = "astro-vscode";
          publisher = "astro-build";
-          version = "2.16.13";
-          hash = "sha256-lSYNRq7D/ggdNKO0ccqbIz5gAhsr/LdX2U8S6FsTktY=";
+          version = "2.16.14";
+          hash = "sha256-WuDsYSQ5B2xA3LnU1fiXBx8yqOplGstZO0qYaLtPF0A=";
        };
        meta = {
          changelog = "https://marketplace.visualstudio.com/items/astro-build.astro-vscode/changelog";
@@ -1188,8 +1188,8 @@ let
        mktplcRef = {
          name = "dart-code";
          publisher = "dart-code";
-          version = "3.130.1";
-          hash = "sha256-qBCE1ior+xNKSAVWGbPGKK6pul22DUZ/movaHx0s/8c=";
+          version = "3.132.0";
+          hash = "sha256-AWzHCg6N//+RmQ1I3Qq4c8Kk+e3gZpeqK9yWB8kfl6w=";
        };

        meta.license = lib.licenses.mit;
@@ -4324,8 +4324,8 @@ let
        mktplcRef = {
          publisher = "sonarsource";
          name = "sonarlint-vscode";
-          version = "4.45.0";
-          hash = "sha256-itrjHAA3gseflNzOd8UKB8DbhwJ/cWkGuuopLOD83GM=";
+          version = "5.0.0";
+          hash = "sha256-K8EZF7h86ErbIHW05LQSpReXSKa8FTMH6uOD+IczoR4=";
        };
        meta.license = lib.licenses.lgpl3Only;
      };
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "lean4";
    publisher = "leanprover";
-    version = "0.0.225";
-    hash = "sha256-JVsOHO2r7YHC4QxvpjoIgT5rZhW2SS24xu3TMnoRQi8=";
+    version = "0.0.226";
+    hash = "sha256-K5zqYX1I3yHLgXzDCPGCnQzChQ4pPCHGriRKSP7ZbGE=";
  };

  meta = {
@@ -6,8 +6,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "material-icon-theme";
    publisher = "PKief";
-    version = "5.32.0";
-    hash = "sha256-0YR3IeVxD7OuYfybDHBdgjQXH0bxz3U9Q8/gQZZB7sM=";
+    version = "5.33.1";
+    hash = "sha256-GWHWEdi2kPkxS0RGAxFcy+njFCl1iiEBu41V/5sHqvc=";
  };
  meta = {
    description = "Material Design Icons for Visual Studio Code";
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
  core = "gambatte";
-  version = "0-unstable-2026-03-13";
+  version = "0-unstable-2026-03-31";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "gambatte-libretro";
-    rev = "d3c39fa18476ddce05027db3d29abba813fa74e2";
-    hash = "sha256-FkvO03x6oRqdeaot8vq5C15VjQXJ7tUoJtal7/z09rU=";
+    rev = "9669d1f9266684e60ac1c5ed9b438bd2a02a3b4d";
+    hash = "sha256-/mxkjVG7fkjUZ1LHNtFYA0/7ZTyvAYtcF5xO8cxWkzc=";
  };

  meta = {
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
  core = "o2em";
-  version = "0-unstable-2024-10-21";
+  version = "0-unstable-2026-03-31";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "libretro-o2em";
-    rev = "3ba4231c1dc8dcdf487428712856b790d2e4b8f3";
-    hash = "sha256-HhTkFm9Jte4wDPxTcXRgCg2tCfdQvo0M3nHRhlPmz/w=";
+    rev = "dee1076eb70c728d4ff47186aea9cd1c11ce7638";
+    hash = "sha256-djj7sEkUIoze1sZaZciIw7PdYDb1wETuZd4CFdZTiUM=";
  };

  makefile = "Makefile";
@@ -12,13 +12,13 @@
 }:
 mkLibretroCore {
  core = "same_cdi";
-  version = "0-unstable-2025-01-31";
+  version = "0-unstable-2026-03-31";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "same_cdi";
-    rev = "7ee1d8e9cb4307b7cd44ee1dd757e9b3f48f41d5";
-    hash = "sha256-EGE3NuO0gpZ8MKPypH8rFwJiv4QsdKuIyLKVuKTcvws=";
+    rev = "2184aa6d87a31fb6c64534b9b7b2d26e36bae757";
+    hash = "sha256-8QJtAyVF6KQmWSzQ6t5s4qmSVT8CmRx5uulq4c3LDRo=";
  };

  patches = [
@@ -6,13 +6,13 @@
 }:
 mkLibretroCore {
  core = "swanstation";
-  version = "0-unstable-2025-08-02";
+  version = "0-unstable-2026-03-28";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "swanstation";
-    rev = "4d309c05fd7bdc503d91d267bd542edb8d192b09";
-    hash = "sha256-v51xgsyVtyipss0VWqMTI69MLTJ4Eb37hJfbQfid/0Q=";
+    rev = "9498be27f8cdde1244045ee7bd6f11922a8f7916";
+    hash = "sha256-+8CcxNl6s7/St4aRf3a1LTsl8wRTIhAYIaAGCt/HbtU=";
  };

  extraNativeBuildInputs = [ cmake ];
@@ -1,10 +1,10 @@
 {
  "chromium": {
-    "version": "146.0.7680.164",
+    "version": "146.0.7680.177",
    "chromedriver": {
-      "version": "146.0.7680.165",
-      "hash_darwin": "sha256-qqzgaahlWqaIN2bYxzCQREUrBEpyE4HSG5QT29xJ26E=",
-      "hash_darwin_aarch64": "sha256-XAEirnBWR5/v/uk5pDTKMcnfPZVBrsfSqckGSmbpTMs="
+      "version": "146.0.7680.178",
+      "hash_darwin": "sha256-5AAo1FK6pXDSehPxhlmtt4XssfZLeE/cKhTkUlkUDhg=",
+      "hash_darwin_aarch64": "sha256-6u3EDl9LHsymh2TDmi4CdhsS0T9yJtUQl/Zuor8LOh4="
    },
    "deps": {
      "depot_tools": {
@@ -21,8 +21,8 @@
    "DEPS": {
      "src": {
        "url": "https://chromium.googlesource.com/chromium/src.git",
-        "rev": "bbd8c5dd25fb2f569d98e626a9517cf2171abdff",
-        "hash": "sha256-hwZehtGUyuMdHisIaztsYlu0MEftbmmAqN/X+ias4nI=",
+        "rev": "ae03f7fb2cf1215853896d6a4c15fdceee2badb7",
+        "hash": "sha256-WVJ6dtDpXnp+Q8N/KEFJZWU9/4xEmpEYcu53MA94PZ8=",
        "recompress": true
      },
      "src/third_party/clang-format/script": {
@@ -92,8 +92,8 @@
      },
      "src/third_party/angle": {
        "url": "https://chromium.googlesource.com/angle/angle.git",
-        "rev": "e05753c6d05b17b23d514038957469c70b75475c",
-        "hash": "sha256-SMym7PN2acfw84Z95xWSbN/QV5UIDIOztWxFeTCfBsk="
+        "rev": "1c0f91aaa60a1f87725840495cbfd9717e7c77c8",
+        "hash": "sha256-9Me/9kdDgcDLGP/0lLWpj294IoUp0hDD5hfFjSZbTOc="
      },
      "src/third_party/angle/third_party/glmark2/src": {
        "url": "https://chromium.googlesource.com/external/github.com/glmark2/glmark2",
@@ -132,8 +132,8 @@
      },
      "src/third_party/dawn": {
        "url": "https://dawn.googlesource.com/dawn.git",
-        "rev": "a655251a59c4af3fbf8058bb2572d6a457f896d2",
-        "hash": "sha256-UKoDytne6QD2d6ojy4mYPjLbo9GB4xy1fUf9C1pLKaE="
+        "rev": "10fb89e3179bb7443e66911eb3c795c7aaf022e5",
+        "hash": "sha256-ATTNb61RG7hS1mapDw0o4ZyBeny4ONI8ZjJLpmbQaKU="
      },
      "src/third_party/dawn/third_party/glfw": {
        "url": "https://chromium.googlesource.com/external/github.com/glfw/glfw",
@@ -652,8 +652,8 @@
      },
      "src/third_party/skia": {
        "url": "https://skia.googlesource.com/skia.git",
-        "rev": "6a75afe9792764f6faa76ad50125781899ca05e8",
-        "hash": "sha256-S4AAmNw50ToTZIuHl41Pc+Z1MZfUVf0/ZGGIiEr5cXo="
+        "rev": "30d129c8800b5626c46fb83fa62db10b9b22b319",
+        "hash": "sha256-2/Deen9OwDgDRrm5j7Rw27Z2JUX1thX7mnKWRLJbEvM="
      },
      "src/third_party/smhasher/src": {
        "url": "https://chromium.googlesource.com/external/smhasher.git",
@@ -787,8 +787,8 @@
      },
      "src/third_party/webrtc": {
        "url": "https://webrtc.googlesource.com/src.git",
-        "rev": "b2a90ac0037ee7187102ce2c40e5007216ca9a58",
-        "hash": "sha256-rX6NEN0RbfHPRqJqkGhypwWt/NcREvPaanL+CDxwhA8="
+        "rev": "6733aa5ba16e1e1087f339d1151c80c924a6fbf8",
+        "hash": "sha256-g2GYFVTK8f296v7lUcYPqkI4qDoladsTpnKWb6SGRmw="
      },
      "src/third_party/wuffs/src": {
        "url": "https://skia.googlesource.com/external/github.com/google/wuffs-mirror-release-c.git",
@@ -817,8 +817,8 @@
      },
      "src/v8": {
        "url": "https://chromium.googlesource.com/v8/v8.git",
-        "rev": "0e999a528db40a3ef6fa917adf96370a18b87d70",
-        "hash": "sha256-rkSuZBdFUHJyYmqp2oN3mLjNtKjk569MocyvnICo+uw="
+        "rev": "0ad812d268a7820dba9bf848b416aeda4dd1b2e5",
+        "hash": "sha256-nG4goqqVAAWPMkq8296wCYhnwL93oAL+pF1oaMXyqZI="
      }
    }
  },
@@ -391,11 +391,11 @@
    "vendorHash": null
  },
  "f5networks_bigip": {
-    "hash": "sha256-L/qV8Ff5UhRs6r+jadBUkofLcxggBq96gCpkk0Tv3k8=",
+    "hash": "sha256-+/YCeCJKeETCewktWc749/GILooNsxyGz3bXOeIDga8=",
    "homepage": "https://registry.terraform.io/providers/F5Networks/bigip",
    "owner": "F5Networks",
    "repo": "terraform-provider-bigip",
-    "rev": "v1.25.1",
+    "rev": "v1.26.0",
    "spdx": "MPL-2.0",
    "vendorHash": null
  },
@@ -580,13 +580,13 @@
    "vendorHash": "sha256-znm43JcwFf/NpGIaayyiOazAa7yCStrbuSNnGkyxzFA="
  },
  "hashicorp_google-beta": {
-    "hash": "sha256-WOeYK5uti8NYhR3j8BgxwnlybEGOJryIPPTEgM23Fp0=",
+    "hash": "sha256-tEkGG/4KR7tuIJCKpQpW3FGcGyDgalJdw5wFPEkQBhw=",
    "homepage": "https://registry.terraform.io/providers/hashicorp/google-beta",
    "owner": "hashicorp",
    "repo": "terraform-provider-google-beta",
-    "rev": "v7.24.0",
+    "rev": "v7.25.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-YZQMUGScsYjBkhAQ4DXYlBpAw805iKgX/iXDMTpRr6c="
+    "vendorHash": "sha256-udSeBMl8hkYTOjcMC0w8j7scyWyRmQ4gTD9jV1yqWYw="
  },
  "hashicorp_helm": {
    "hash": "sha256-S4Fe65f+gEWWxRMC+/i93dwwe7QigPccx4wiqNBpcL8=",
@@ -652,13 +652,13 @@
    "vendorHash": "sha256-GlkqFg9Bgs+Hi59PYAxqq3YW9ji1qeuX4vz59wQ4pRw="
  },
  "hashicorp_tfe": {
-    "hash": "sha256-dak9/lYjL+2gbXyjxRqS61wr4YJRHFzHNJdCPJqiaW4=",
+    "hash": "sha256-6Qzchshn6T9gHdk6nd2wzDesFTUsGUViwTrBmMue3yI=",
    "homepage": "https://registry.terraform.io/providers/hashicorp/tfe",
    "owner": "hashicorp",
    "repo": "terraform-provider-tfe",
-    "rev": "v0.74.1",
+    "rev": "v0.76.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-GAwAGw8N4B/jCtcR2ok3g/0j//CHK9yPaBj+otJLjKc="
+    "vendorHash": "sha256-JNTe1RI2aDw86jNzYJqmiBr5BBnr824/DhkJeaMpbKI="
  },
  "hashicorp_time": {
    "hash": "sha256-ZArYfbzbrkxGlL1BRFM7PN3hLzdssIL4COsUBdLVMYY=",
@@ -1265,11 +1265,11 @@
    "vendorHash": "sha256-9M1DsE/FPQK8TG7xCJWbU3HAJCK3p/7lxdzjO1oAfWs="
  },
  "sumologic_sumologic": {
-    "hash": "sha256-lW2XWDc95Sfnb3VNtsw5mZ8uGgInCkaWRCaUS9c7d2s=",
+    "hash": "sha256-cxMx9SCsRbBVG1ixuzB4DqoI6mG2UdyuNYWATbHuRiQ=",
    "homepage": "https://registry.terraform.io/providers/SumoLogic/sumologic",
    "owner": "SumoLogic",
    "repo": "terraform-provider-sumologic",
-    "rev": "v3.2.4",
+    "rev": "v3.2.5",
    "spdx": "MPL-2.0",
    "vendorHash": "sha256-IR6KjFW5GbsOIm3EEFyx3ctwhbifZlcNaZeGhbeK/Wo="
  },
@@ -11,7 +11,7 @@

 buildGoModule (finalAttrs: {
  pname = "actionlint";
-  version = "1.7.11";
+  version = "1.7.12";

  subPackages = [ "cmd/actionlint" ];

@@ -19,10 +19,10 @@ buildGoModule (finalAttrs: {
    owner = "rhysd";
    repo = "actionlint";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-oBl+9vHynm6I3I4sF2ZyszogOxKh5kiDsdHwgWjVhVI=";
+    hash = "sha256-mACSb3sYQtkijzk10mPi2ndy3zakonW1jlU7D/DV+SM=";
  };

-  vendorHash = "sha256-cUeGRwPiqeO3BGjWbbD5YtGC/B4v00/hKu09uDETMm8=";
+  vendorHash = "sha256-bPhjeC6xcemV4KZx+Kc/Wbdz6Be6WsiolFTrJ7TURA0=";

  nativeBuildInputs = [
    makeWrapper
@@ -0,0 +1,34 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  nix-update-script,
+  versionCheckHook,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "aegis-rs";
+  version = "0.5.0";
+
+  src = fetchFromGitHub {
+    owner = "Granddave";
+    repo = "aegis-rs";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-V6b9CDLjpyRb/MlbAswQ2kJFGeYDu9r2Y/8lBB+kLGc=";
+  };
+  cargoHash = "sha256-QYTmTJiwqslFM1VT+B+HtA8idvhKOPY4+ip/FqQGZ34=";
+
+  passthru.updateScript = nix-update-script { };
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
+  meta = {
+    description = "Aegis compatible OTP generator for the CLI";
+    homepage = "https://github.com/Granddave/aegis-rs";
+    changelog = "https://github.com/Granddave/aegis-rs/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.gpl3Plus;
+    maintainers = with lib.maintainers; [ granddave ];
+    mainProgram = "aegis-rs";
+  };
+})
@@ -0,0 +1,45 @@
+{
+  lib,
+  fetchFromGitHub,
+  rustPlatform,
+  nix-update-script,
+  writableTmpDirAsHomeHook,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "agent-browser";
+  version = "0.23.3";
+
+  src = fetchFromGitHub {
+    owner = "vercel-labs";
+    repo = "agent-browser";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Q02sJr14zRrVrRJ0M30AD0EG7DGkYtafCH6/kI15/xk=";
+  };
+
+  sourceRoot = "${finalAttrs.src.name}/cli";
+
+  cargoHash = "sha256-smJ+ODr88moz+16G9fXSz/NNiGngWeoTuQtBn21qu1s=";
+
+  nativeCheckInputs = [ writableTmpDirAsHomeHook ];
+
+  __darwinAllowLocalNetworking = true;
+
+  # skills/ contains SKILL.md for tools like Claude Code
+  postInstall = ''
+    mkdir -p $out/share/agent-browser
+    cp -r ../skills $out/share/agent-browser/
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Headless browser automation CLI for AI agents";
+    homepage = "https://github.com/vercel-labs/agent-browser";
+    license = lib.licenses.asl20;
+    sourceProvenance = with lib.sourceTypes; [ fromSource ];
+    platforms = lib.platforms.linux ++ lib.platforms.darwin;
+    maintainers = with lib.maintainers; [ codgician ];
+    mainProgram = "agent-browser";
+  };
+})
@@ -33,7 +33,6 @@
  exiftool,
  mimalloc,
  openexr,
-  ilmbase,
  opencolorio,
  color-transformation-language,
 }:
@@ -92,7 +91,6 @@ stdenv.mkDerivation (finalAttrs: {
    libcanberra-gtk3
    mimalloc
    openexr
-    ilmbase
    opencolorio
    color-transformation-language
  ];
@@ -26,6 +26,7 @@
  nixosTests,
  pkgsStatic ? { }, # CI has allowVariants = false, in which case pkgsMusl would not be passed. So, instead add a default here.
  pkgsMusl ? { },
+  callPackage,
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "audit";
@@ -151,11 +152,12 @@ stdenv.mkDerivation (finalAttrs: {

  passthru = {
    updateScript = nix-update-script { };
+    testsuite = callPackage ./testsuite.nix { };
    tests = {
      musl = pkgsMusl.audit or null;
      static = pkgsStatic.audit or null;
      pkg-config = testers.testMetaPkgConfig finalAttrs.finalPackage;
-      audit = nixosTests.audit;
+      inherit (nixosTests) audit audit-testsuite;
      # Broken on a hardened kernel
      package = finalAttrs.finalPackage.overrideAttrs (previousAttrs: {
        pname = previousAttrs.pname + "-test";
@@ -0,0 +1,150 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  fetchpatch,
+  unstableGitUpdater,
+  audit,
+  liburing,
+  nmap,
+  psmisc,
+  glibc,
+  perlPackages,
+  makeWrapper,
+  iptables,
+  coreutils,
+  writeShellApplication,
+  systemd,
+  iproute2,
+  inetutils,
+}:
+let
+  perlEnv =
+    with perlPackages;
+    makeFullPerlPath [
+      FileWhich
+      TestMockTimeHiRes
+      SocketNetlink
+    ];
+  testEnv = lib.makeBinPath [
+    iptables
+    iproute2 # ip
+    inetutils # ping6
+  ];
+
+  # syscall_socketcall: 32-bit tests are pain to build
+  # filter_exclude: relies on SELinux being enabled (`id -Z`)
+  # field_compare: weirdly flaky
+  disabledTests = [
+    "syscall_socketcall"
+    "filter_exclude"
+    "field_compare"
+  ];
+in
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "audit-testsuite";
+  version = "0-unstable-2025-08-30";
+
+  src = fetchFromGitHub {
+    owner = "linux-audit";
+    repo = "audit-testsuite";
+    rev = "25296c6623e95312437a58f76bb771ba31187bed";
+    hash = "sha256-DeKcNOJVGhLSm7ZHYa6bOG2oSsbs3SH5UCLrbqzy+m4=";
+  };
+
+  patches = [
+    # https://github.com/linux-audit/audit-testsuite/pull/125
+    (fetchpatch {
+      url = "https://github.com/tweag/audit-testsuite/commit/bd3f8b612ce3290d86a82170e69ac510818d52e3.patch";
+      hash = "sha256-rsSQ9uTjTEnDnB1Wlt2/Of2HmS+ajCIX7Iw/FRA4Fng=";
+    })
+  ];
+
+  postPatch = ''
+    substituteInPlace tests/Makefile ${
+      lib.concatMapStringsSep " " (t: "--replace-fail '${t}' ''") disabledTests
+    }
+  '';
+
+  passthru.updateScript = unstableGitUpdater { };
+
+  buildInputs = [
+    perlPackages.perl
+    liburing
+    audit
+    nmap
+    psmisc
+    glibc
+  ];
+
+  nativeBuildInputs = [
+    makeWrapper
+  ];
+
+  doCheck = false; # Can't run checks in the build sandbox, these checks are meant to run in a full VM
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out
+    pushd tests
+    find . -type f -executable -exec install -Dm755 "{}" $out/"{}" \;
+    popd
+
+    rm -rf $out/{${lib.concatMapStringsSep "," lib.escapeShellArg disabledTests}}
+
+    runHook postInstall
+  '';
+
+  # adapted from tests/Makefile
+  fixupPhase = ''
+    patchShebangs $out/runtests.pl
+    wrapProgram $out/runtests.pl \
+      --set PERL5LIB ${perlEnv} \
+      --set MODE ${toString stdenv.hostPlatform.parsed.cpu.bits} \
+      --set ATS_DEBUG 1 \
+      --set DISTRO nixos \
+      --set TESTS "$(find $out -maxdepth 1 -mindepth 1 -type d -printf '%f\n' | sort | paste -sd' ')" \
+      --prefix PATH : ${testEnv}
+  '';
+
+  passthru.runner = writeShellApplication {
+    name = "audit-testsuite-runner";
+    runtimeInputs = [
+      coreutils
+      systemd
+    ];
+    text = ''
+      # log to journal for easier introspection in a VM test
+      exec &> >(tee >(systemd-cat -t audit-testsuite))
+      testdir=$(mktemp -d)
+      export testdir
+      # test directory needs to be writable
+      cp -r ${finalAttrs.finalPackage}/* "$testdir"
+      cd "$testdir"
+      chmod +w -R .
+
+      # exec_name test expects coreutils to be actual binaries in an absolute real path,
+      # no symlinks to /nix/store/<hash>-coreutils/bin/coreutils
+      # fix: copy coreutils to a temporary path where the actual binary can exist under that name
+      # https://github.com/linux-audit/audit-testsuite/blob/5a10451642ac1ba2fa4b31c06a21cf9aa2d38b66/tests/exec_name/test#L28-L47
+      mkdir coreutils
+      for util in id echo ls ; do
+        cp "$(realpath "$(which "$util")")" coreutils/"$util"
+      done
+      sed -iE "s@/usr/bin/@$(pwd)/coreutils/@g" exec_name/test
+
+      exec ./runtests.pl
+    '';
+  };
+
+  meta = {
+    description = "A simple, self-contained regression test suite for the Linux Kernel's audit subsystem";
+    homepage = "https://github.com/linux-audit/audit-testsuite";
+    license = lib.licenses.gpl2Only;
+    maintainers = with lib.maintainers; [ grimmauld ];
+    mainProgram = "audit-testsuite";
+    platforms = lib.platforms.all;
+  };
+})
@@ -15,8 +15,6 @@
  intltool,
  libayatana-common,
  libgudev,
-  libqtdbusmock,
-  libqtdbustest,
  librda,
  libsForQt5,
  lomiri,
@@ -91,8 +89,8 @@ stdenv.mkDerivation (finalAttrs: {

  checkInputs = [
    gtest
-    libqtdbusmock
-    libqtdbustest
+    libsForQt5.libqtdbusmock
+    libsForQt5.libqtdbustest
    properties-cpp
  ];

@@ -16,8 +16,6 @@
  libgee,
  libnotify,
  libpulseaudio,
-  libqtdbusmock,
-  libqtdbustest,
  libsForQt5,
  libxml2,
  lomiri,
@@ -99,8 +97,8 @@ stdenv.mkDerivation (finalAttrs: {
    dbus-test-runner
    gtest
    libsForQt5.qtbase
-    libqtdbusmock
-    libqtdbustest
+    libsForQt5.libqtdbusmock
+    libsForQt5.libqtdbustest
    lomiri.gmenuharness
  ];

@@ -7,14 +7,14 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "b3sum";
-  version = "1.8.3";
+  version = "1.8.4";

  src = fetchCrate {
    inherit (finalAttrs) version pname;
-    hash = "sha256-mU2r5xbYf6A1RibWqhow/637YxybCFMT3UzYcUMjhdg=";
+    hash = "sha256-xqR2BPtuAhsVvLY2DXfmgRF3tLix+H8lcD9GSZh9pUg=";
  };

-  cargoHash = "sha256-w9l8dn4Ahck3NXuN4Ph9qmGoS767/mQRBgO9AT0CH3Y=";
+  cargoHash = "sha256-h/M9SOyl9Dj9QNvKyxtg0L0mNYBhH7Q4Yke5n20SSSs=";

  nativeInstallCheckInputs = [
    versionCheckHook
@@ -3,7 +3,7 @@
  stdenv,
  buildNpmPackage,
  fetchFromGitHub,
-  nodejs_latest,
+  nodejs_24,
  versionCheckHook,
  node-gyp,
  python3,
@@ -13,10 +13,10 @@

 let
  buildNpmPackage' = buildNpmPackage.override {
-    nodejs = nodejs_latest;
+    nodejs = nodejs_24;
  };
  node-gyp' = node-gyp.override {
-    nodejs = nodejs_latest;
+    nodejs = nodejs_24;
  };
 in
 buildNpmPackage' rec {
@@ -25,12 +25,12 @@
  gtest,
  gtk3,
  hicolor-icon-theme,
-  ilmbase,
  libpng,
  mpfr,
  nlopt,
  opencascade-occt_7_6,
  openvdb,
+  openexr,
  opencv,
  pcre,
  systemd,
@@ -94,11 +94,11 @@ stdenv.mkDerivation (finalAttrs: {
    gst_all_1.gst-plugins-good
    gtk3
    hicolor-icon-theme
-    ilmbase
    libpng
    mpfr
    nlopt
    opencascade-occt_7_6
+    openexr
    openvdb
    pcre
    onetbb
@@ -6,7 +6,7 @@
  nix-update-script,
  versionCheckHook,
  writeShellScript,
-  xcbuild,
+  re-plistbuddy,
 }:

 stdenvNoCC.mkDerivation (finalAttrs: {
@@ -37,7 +37,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {

  nativeInstallCheckInputs = [ versionCheckHook ];
  versionCheckProgram = writeShellScript "version-check" ''
-    ${xcbuild}/bin/PlistBuddy -c "Print :CFBundleShortVersionString" "$1"
+    ${lib.getExe' re-plistbuddy "PlistBuddy"} -c "Print :CFBundleShortVersionString" "$1"
  '';
  versionCheckProgramArg = [
    "${placeholder "out"}/Applications/BetterDisplay.app/Contents/Info.plist"
@@ -0,0 +1,54 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  pkg-config,
+  openssl,
+  zlib,
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "burn-central-cli";
+  version = "0.4.1";
+
+  src = fetchFromGitHub {
+    owner = "tracel-ai";
+    repo = "burn-central-cli";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-wXLfmCV6aElnYnhOCScr/3+4I6oOfNPrZ8+0t4TPDOA=";
+  };
+
+  buildAndTestSubdir = "crates/burn-central-cli";
+
+  cargoHash = "sha256-MeDIYFXkyJdxierq9iVIAvEIc8JU13szrbSTfKyUkJk=";
+
+  nativeBuildInputs = [
+    pkg-config
+  ];
+
+  buildInputs = [
+    openssl
+    # Pulled in by flate2
+    zlib
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Command-line tool for interacting with Burn Central";
+    longDescription = ''
+      The Burn Central CLI (burn) is the command-line tool for interacting
+      with Burn Central, the centralized platform for experiment tracking,
+      model sharing, and deployment for Burn users.
+    '';
+    homepage = "https://github.com/tracel-ai/burn-central-cli";
+    changelog = "https://github.com/tracel-ai/burn-central-cli/releases/tag/v${finalAttrs.version}";
+    license = with lib.licenses; [
+      mit
+      asl20
+    ];
+    maintainers = with lib.maintainers; [ kilyanni ];
+    mainProgram = "burn";
+  };
+})
@@ -7,16 +7,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "cargo-insta";
-  version = "1.47.1";
+  version = "1.47.2";

  src = fetchFromGitHub {
    owner = "mitsuhiko";
    repo = "insta";
    tag = finalAttrs.version;
-    hash = "sha256-h13EY3wqx+UgD5HGh2exR7xaQPK7rDanvMklgic4Kco=";
+    hash = "sha256-BQuc/YCUM61Lq0hPF4foETUCC/oTSVwTY4RK+WuRnac=";
  };

-  cargoHash = "sha256-6VVcpuTENE+YFn5MoRePseAfWSOKmdiMtanB1h2Swjw=";
+  cargoHash = "sha256-5YnsLfCM64gPlQu9qr7daCdFSZA80PpQVfYE9h237h4=";

  postPatch = ''
    substituteInPlace cargo-insta/tests/functional/test_runner_fallback.rs \
@@ -8,13 +8,13 @@
 (callPackage ./common.nix { }).overrideAttrs (
  finalAttrs: _: {
    pname = "chatterino2";
-    version = "2.5.4";
+    version = "2.5.5";

    src = fetchFromGitHub {
      owner = "Chatterino";
      repo = "chatterino2";
      tag = "v${finalAttrs.version}";
-      hash = "sha256-eozT3Lfra4i+q3pCxH0Z1v/3Y/FB5yJc/88tA90hTzI=";
+      hash = "sha256-bTf3UECylAdb0l0+tItbhmiyNDSkxY8hgNPJHuOmwtE=";
      fetchSubmodules = true;
      leaveDotGit = true;
      postFetch = ''
@@ -35,14 +35,14 @@ let
 in
 python3.pkgs.buildPythonApplication (finalAttrs: {
  pname = "checkov";
-  version = "3.2.511";
+  version = "3.2.513";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "bridgecrewio";
    repo = "checkov";
    tag = finalAttrs.version;
-    hash = "sha256-biTISn9XhwL1RhlztmydBXwyYruNhc0GoZ1PyIg0IUg=";
+    hash = "sha256-diPsVe8fhWKHMn02qKK91MwPqXNVFpmE8n5e9JJsDCM=";
  };

  pythonRelaxDeps = [
@@ -7,13 +7,13 @@

 buildGoModule (finalAttrs: {
  pname = "circleci-cli";
-  version = "0.1.34770";
+  version = "0.1.34950";

  src = fetchFromGitHub {
    owner = "CircleCI-Public";
    repo = "circleci-cli";
    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-UTlwpAraM7Q4pEtB3i8h0uDpGG64wYm+2a+47q7R7UA=";
+    sha256 = "sha256-WUfmOTVuSh/y+Tg36eJWo0AAZwpudIqte3LUZlczkVQ=";
  };

  vendorHash = "sha256-GRWo9oq8M7zJoWCg6iNLbR+DPXvMXF3v+YRU2BBH5+8=";
@@ -1,46 +1,46 @@
 {
-  "version": "2.1.87",
-  "buildDate": "2026-03-29T01:45:06Z",
+  "version": "2.1.88",
+  "buildDate": "2026-03-30T22:06:06Z",
  "platforms": {
    "darwin-arm64": {
      "binary": "claude",
-      "checksum": "80b51562db1a51bfb654aec1fea6a04106daa0bc1525d88c9c74741ff5d9469a",
-      "size": 196638704
+      "checksum": "fe0d191adb7b0d26badd1e303e95a63d62d526ca1fb5882f53644754e1e9fe95",
+      "size": 196192880
    },
    "darwin-x64": {
      "binary": "claude",
-      "checksum": "c1a4cde29e74e4c3952ead69f90a37a2388aa097d7c567a81ca3669a309e9226",
-      "size": 198132816
+      "checksum": "4036c17c5ebdeaf024f198b041e012e494b8cab8c7dec1bdde567ebbbfc5124d",
+      "size": 197703504
    },
    "linux-arm64": {
      "binary": "claude",
-      "checksum": "193c5e9c091eadde302fa23af46c8d646b7263f74fa06ed32746e504bd09df18",
-      "size": 228461120
+      "checksum": "2ba4ac149b2198c15e45837fc504146c735fc1e82b9fdf717c2a6b9e0f70c02c",
+      "size": 228330048
    },
    "linux-x64": {
      "binary": "claude",
-      "checksum": "b1a5b89469862adee0e4dc28cab5a8314bc4d0117e19ab26a7b7ff7ce9b59bd5",
-      "size": 228280960
+      "checksum": "ced6cac958fa4425b90e6c9341a26731715fcb1a253d5bc0f51c8d5a3a6ab66e",
+      "size": 228121216
    },
    "linux-arm64-musl": {
      "binary": "claude",
-      "checksum": "38e56d4a62778f429b1caa875a4a6e53db8eda256091f58afb5cf2043e492131",
-      "size": 221579712
+      "checksum": "39fc36357d927750f6b2ef85afd30a50549e4ca7e3cd0887e6e7e76b2db8c56f",
+      "size": 221448640
    },
    "linux-x64-musl": {
      "binary": "claude",
-      "checksum": "aba2c3a8927c53f981a4ad2b18915b2a1a1511b3b4e3b5e8797d23dbb0bf5eea",
-      "size": 222906816
+      "checksum": "658327a04523e7e9a9578bc061c7c82804846d9fbff04c88177002f2f93cff5f",
+      "size": 222747072
    },
    "win32-x64": {
      "binary": "claude.exe",
-      "checksum": "c722ff8836e7a90b5c62fd5cb6549887dc314e7e8d9551c01df1718d9198ecdf",
-      "size": 238222496
+      "checksum": "34a248b3f381f27e4adde1f4dc745f6b63aa28ff0c6eee550d47746a4d197ec0",
+      "size": 238212768
    },
    "win32-arm64": {
      "binary": "claude.exe",
-      "checksum": "5c3e5f706685963c83cdc5dd2ec86a89e5a897bd6ec82298311abb43280ffa30",
-      "size": 234785440
+      "checksum": "eee6beba9efb300d097a6fe4151c1d83cb84ea1598555fe358b07d33a434decc",
+      "size": 234668704
    }
  }
 }
@@ -1,12 +1,12 @@
 {
  "name": "@anthropic-ai/claude-code",
-  "version": "2.1.87",
+  "version": "2.1.88",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@anthropic-ai/claude-code",
-      "version": "2.1.87",
+      "version": "2.1.88",
      "license": "SEE LICENSE IN README.md",
      "bin": {
        "claude": "cli.js"
@@ -15,14 +15,14 @@
 }:
 buildNpmPackage (finalAttrs: {
  pname = "claude-code";
-  version = "2.1.87";
+  version = "2.1.88";

  src = fetchzip {
    url = "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-${finalAttrs.version}.tgz";
-    hash = "sha256-jorpY6ao1YgkoTgIk1Ae2BQCbqOuEtwzoIG36BP5nG4=";
+    hash = "sha256-LwTZaxp1Wq6BYQ/Los5aMHufGKb3NM7BuuW0Kaxo2QA=";
  };

-  npmDepsHash = "sha256-Pr/KFS8RH03CvHvN6EdZf9R4dcAK/EbGd6UAm2s2Saw=";
+  npmDepsHash = "sha256-izy3dQProZIdUF5Z11fvGQOm/TBcWGhDK8GvNs8gG5E=";

  strictDeps = true;

@@ -11,13 +11,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "cockpit-files";
-  version = "37";
+  version = "39";

  src = fetchFromGitHub {
    owner = "cockpit-project";
    repo = "cockpit-files";
    tag = finalAttrs.version;
-    hash = "sha256-C3NKdMqy9sL0nSZ+XNODYrNS0KrQsfPG85ZqaEto0Rc=";
+    hash = "sha256-RoAlZ3PIJHdF2kBnrBnbJqnwl7/C7po7pvI3xmsRFQc=";

    fetchSubmodules = true;
    postFetch = "cp $out/node_modules/.package-lock.json $out/package-lock.json";
@@ -13,13 +13,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "cockpit-machines";
-  version = "349.1";
+  version = "351";

  src = fetchFromGitHub {
    owner = "cockpit-project";
    repo = "cockpit-machines";
    tag = finalAttrs.version;
-    hash = "sha256-SJ8osQKbzK/4mioqYbBf2t/2Me1an2Ex1SaGiVilNng=";
+    hash = "sha256-zZ1R6DE7Y+kKnYQFIDGLdwn7ELq4kIvGvtQXaSxxdKI=";

    fetchSubmodules = true;
    postFetch = "cp $out/node_modules/.package-lock.json $out/package-lock.json";
@@ -12,13 +12,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "cockpit-podman";
-  version = "122";
+  version = "124";

  src = fetchFromGitHub {
    owner = "cockpit-project";
    repo = "cockpit-podman";
    tag = finalAttrs.version;
-    hash = "sha256-NQFWlapbHOrzr5U6KDUIUPJPcCxfEk1VGVm4ChCHcpI=";
+    hash = "sha256-20dGvEJraTxJlj5Z9HbPWtWN96XPVwbCkHGzX4uiDmk=";

    fetchSubmodules = true;
    postFetch = "cp $out/node_modules/.package-lock.json $out/package-lock.json";
@@ -53,13 +53,13 @@ in

 stdenv.mkDerivation (finalAttrs: {
  pname = "cockpit";
-  version = "357";
+  version = "359";

  src = fetchFromGitHub {
    owner = "cockpit-project";
    repo = "cockpit";
    tag = finalAttrs.version;
-    hash = "sha256-4KckFQmFin0dkq9ouHRXSrkmlmsTRtAcW8Ln/Vjhylc=";
+    hash = "sha256-iYPBGd2G+IH0z8zNoUh4Aw7uMqKOTWa+ozl/SEtsZUY=";
    fetchSubmodules = true;
  };

@@ -5,7 +5,7 @@
  "packages": {
    "": {
      "dependencies": {
-        "codebuff": "^1.0.633"
+        "codebuff": "^1.0.635"
      }
    },
    "node_modules/@isaacs/fs-minipass": {
@@ -30,9 +30,9 @@
      }
    },
    "node_modules/codebuff": {
-      "version": "1.0.633",
-      "resolved": "https://registry.npmjs.org/codebuff/-/codebuff-1.0.633.tgz",
-      "integrity": "sha512-eReGZRg8zr2vABWfoGz1J5l8YKa7M21mP3b0sDlx0wh3aNcCfmHcUZuHTrhRAjw+MsfHWqBHB49vp4qno4oNtg==",
+      "version": "1.0.635",
+      "resolved": "https://registry.npmjs.org/codebuff/-/codebuff-1.0.635.tgz",
+      "integrity": "sha512-WjryNPaDPLKZ22vspoib6B5q9S9AIIxqJjbrB3kBj5e7vLx+BDlxMqwbvw4ywzzO/7+P62vOyJ99WFA7l86SNw==",
      "cpu": [
        "x64",
        "arm64"
@@ -6,14 +6,14 @@

 buildNpmPackage rec {
  pname = "codebuff";
-  version = "1.0.633";
+  version = "1.0.635";

  src = fetchzip {
    url = "https://registry.npmjs.org/codebuff/-/codebuff-${version}.tgz";
-    hash = "sha256-IsIPBXC3DabO6yKV+0u0Gplr6uQ7Ye3XLVlPOab1M7w=";
+    hash = "sha256-IKo/00XmqRvKq3OHc3Fu0/r3fvecKB+E2syuA5jw3Cc=";
  };

-  npmDepsHash = "sha256-zORSb24tzUpsqwe4QBtCSkOGTI/Ley849+YyZss1oLY=";
+  npmDepsHash = "sha256-u1xkAQjSeVg6M/1hyDAl0LGjUdu91O9gk95svipy7pw=";

  postPatch = ''
    cp ${./package-lock.json} package-lock.json
@@ -9,16 +9,16 @@

 buildGoModule (finalAttrs: {
  pname = "cog";
-  version = "0.1.4";
+  version = "0.1.5";

  src = fetchFromGitHub {
    owner = "grafana";
    repo = "cog";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-cx9ztZufX199jiVT4ZB5qNUR5W2bfN3jzYhUmdAi+80=";
+    hash = "sha256-QMYqrPmJjDmB7Kc9HZN9ypqtiwF9Cah3fnj4iMM8W4Y=";
  };

-  vendorHash = "sha256-rz/qL5kEryIV2SMQKoVav4C6scIKaxIFuwtTjqBaF4g=";
+  vendorHash = "sha256-KOk8SvajH98jjvoPZPC4UAsF5tXKjn1xcVq5juQXQVA=";

  subPackages = [ "cmd/cli" ];

@@ -3,7 +3,6 @@
  stdenv,
  fetchFromGitHub,
  cmake,
-  ilmbase,
  openexr,
  libtiff,
  aces-container,
@@ -22,7 +21,6 @@ stdenv.mkDerivation (finalAttrs: {

  nativeBuildInputs = [
    cmake
-    ilmbase
    openexr
    libtiff
    aces-container
@@ -7,16 +7,16 @@

 buildGoModule (finalAttrs: {
  pname = "crowdsec";
-  version = "1.7.6";
+  version = "1.7.7";

  src = fetchFromGitHub {
    owner = "crowdsecurity";
    repo = "crowdsec";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Qd5EHn7G7bTV+S4bVXfHytoCI5L/gHxAKB9emeKoSLc=";
+    hash = "sha256-TG9YRKzht9OAnlDNxLNP8060v0klee6GY7vJCu6MugM=";
  };

-  vendorHash = "sha256-txiZmUd/GQQu7XiI4iE25aCmOLe2sC0uQ8Gne76cw+Q=";
+  vendorHash = "sha256-BjkTMBrQPv8uZzme02WFdobuYdbe1RvRkZ8RjHGubo8=";

  nativeBuildInputs = [ installShellFiles ];

@@ -7,17 +7,18 @@
  imagemagick,
  libimagequant,
  lua,
+  makeBinaryWrapper,
 }:

 stdenv.mkDerivation (finalAttrs: {
  pname = "cwal";
-  version = "0.7.0";
+  version = "0.8.2";

  src = fetchFromGitHub {
    owner = "nitinbhat972";
    repo = "cwal";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-2COw5YBa16XzB4h5dfTLDF6LYjb10UC3+hCgTavnnVo=";
+    hash = "sha256-CvC7I0/Obn/IEXmbr8Hs7YqUk6NPgduJpDCNCHwU8lA=";
  };

  strictDeps = true;
@@ -25,6 +26,7 @@ stdenv.mkDerivation (finalAttrs: {
  nativeBuildInputs = [
    cmake
    pkg-config
+    makeBinaryWrapper
  ];

  buildInputs = [
@@ -33,12 +35,20 @@ stdenv.mkDerivation (finalAttrs: {
    lua
  ];

+  postFixup = ''
+    wrapProgram $out/bin/cwal \
+      --prefix XDG_DATA_DIRS : $out/share
+  '';
+
  meta = {
    description = "Blazing-fast pywal-like color palette generator written in C";
    homepage = "https://github.com/nitinbhat972/cwal";
    license = lib.licenses.gpl3Only;
    mainProgram = "cwal";
-    platforms = lib.platforms.linux;
-    maintainers = with lib.maintainers; [ gustlik501 ];
+    platforms = lib.platforms.unix;
+    maintainers = with lib.maintainers; [
+      gustlik501
+      nitinbhat972
+    ];
  };
 })
@@ -6,8 +6,7 @@
  makeBinaryWrapper,
  versionCheckHook,
  writeShellScript,
-  coreutils,
-  xcbuild,
+  re-plistbuddy,
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "cyberduck";
@@ -36,8 +35,8 @@ stdenvNoCC.mkDerivation (finalAttrs: {

  nativeInstallCheckInputs = [ versionCheckHook ];
  versionCheckProgram = writeShellScript "version-check" ''
-    marketing_version=$(${xcbuild}/bin/PlistBuddy -c "Print :CFBundleShortVersionString" "$1" | ${coreutils}/bin/tr -d '"')
-    build_version=$(${xcbuild}/bin/PlistBuddy -c "Print :CFBundleVersion" "$1")
+    marketing_version=$(${lib.getExe' re-plistbuddy "PlistBuddy"} -c "Print :CFBundleShortVersionString" "$1")
+    build_version=$(${lib.getExe' re-plistbuddy "PlistBuddy"} -c "Print :CFBundleVersion" "$1")

    echo $marketing_version.$build_version
  '';
@@ -27,7 +27,6 @@
  graphicsmagick,
  gtk3,
  icu,
-  ilmbase,
  isocodes,
  jasper,
  json-glib,
@@ -114,7 +113,6 @@ stdenv.mkDerivation rec {
    graphicsmagick
    gtk3
    icu
-    ilmbase
    isocodes
    jasper
    json-glib
@@ -122,7 +120,7 @@ stdenv.mkDerivation rec {
    lensfun
    lerc
    libaom
-    #libavif # TODO re-enable once cmake files are fixed (#425306)
+    libavif
    libdatrie
    libepoxy
    libexif
@@ -16,16 +16,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "deadbranch";
-  version = "0.3.0";
+  version = "0.4.0";

  src = fetchFromGitHub {
    owner = "armgabrielyan";
    repo = "deadbranch";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-8KNo/6hdeBY8RbLlXt2gpLCk2DfvSuoeXJ0oh2NDX2s=";
+    hash = "sha256-ub06sn3CUlbU9LkDCbZJmoZ7CQef97HeXhRdW6ESw1U=";
  };

-  cargoHash = "sha256-iY39RBA0fl/BpX6mlCH2bHuN+XsLdq4f7CTzjHz9Ots=";
+  cargoHash = "sha256-9AhTTvSv0HGQxglifmcEU0ApZuCIng7gFgfCMQLXpLo=";

  nativeBuildInputs = [ installShellFiles ];

@@ -53,6 +53,11 @@ rustPlatform.buildRustPackage {

  cargoHash = "sha256-p5kI7HlG6RVxCCEb/J0L2gh36jkm/atAV98ny3h4vqo=";

+  # Upstream tagged v2.0.6 with Cargo.toml already bumped to 2.0.7
+  postPatch = ''
+    substituteInPlace Cargo.toml --replace-fail 'version = "2.0.7"' 'version = "${version}"'
+  '';
+
  env = {
    RUSTFLAGS = "--cfg tracing_unstable";
    LIBSQLITE3_SYS_USE_PKG_CONFIG = "1";
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "eksctl";
-  version = "0.224.0";
+  version = "0.225.0";

  src = fetchFromGitHub {
    owner = "weaveworks";
    repo = "eksctl";
    rev = finalAttrs.version;
-    hash = "sha256-VjrR5jm4tpUz5mrW4dyTqkzPvJ0Z+zTuwSofddN3aD0=";
+    hash = "sha256-aGIn6/CHC/0RGgVQJbye09V5cT2gXYhvihUv4J/1l6g=";
  };

-  vendorHash = "sha256-y23zOfe8Y+ysFP/zRS6T6+BwafdLUv0mSlpp50U8WUc=";
+  vendorHash = "sha256-6f/w++wQdedkzvwkktDvpmpkR5eCJvG2twCSKxY49ZQ=";

  doCheck = false;

@@ -74,16 +74,16 @@ let
 in
 buildGoModule (finalAttrs: {
  pname = "elephant";
-  version = "2.20.2";
+  version = "2.20.3";

  src = fetchFromGitHub {
    owner = "abenz1267";
    repo = "elephant";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-RvCzINnVISBT3d0F1DoIcQFbQsbRJISW9qZeKTzmNaA=";
+    hash = "sha256-5PLTPbnbtK0iDbsB9yFeHr5y/pv6/XzoVm/CDeXXt/c=";
  };

-  vendorHash = "sha256-tO+5x2FIY1UBvWl9x3ZSpHwTWUlw1VNDTi9+2uY7xdU=";
+  vendorHash = "sha256-EWXZ+9/QDRpidpVHBcfJgp0xoc3YtRsiC/UTk1R+FSY=";

  buildInputs = [ protobuf ];
  nativeBuildInputs = [
@@ -12,8 +12,7 @@
  common-updater-scripts,
  versionCheckHook,
  writeShellScript,
-  coreutils,
-  xcbuild,
+  re-plistbuddy,
 }:

 stdenvNoCC.mkDerivation (finalAttrs: {
@@ -71,8 +70,8 @@ stdenvNoCC.mkDerivation (finalAttrs: {

  nativeInstallCheckInputs = [ versionCheckHook ];
  versionCheckProgram = writeShellScript "version-check" ''
-    marketing_version=$(${xcbuild}/bin/PlistBuddy -c "Print :CFBundleShortVersionString" "$1" | ${coreutils}/bin/tr -d '"')
-    build_version=$(${xcbuild}/bin/PlistBuddy -c "Print :CFBundleVersion" "$1")
+    marketing_version=$(${lib.getExe' re-plistbuddy "PlistBuddy"} -c "Print :CFBundleShortVersionString" "$1")
+    build_version=$(${lib.getExe' re-plistbuddy "PlistBuddy"} -c "Print :CFBundleVersion" "$1")

    echo $marketing_version.$build_version
  '';
@@ -6,13 +6,13 @@
 }:
 buildNpmPackage rec {
  pname = "eslint";
-  version = "10.0.3";
+  version = "10.1.0";

  src = fetchFromGitHub {
    owner = "eslint";
    repo = "eslint";
    tag = "v${version}";
-    hash = "sha256-f9RgM+N6wAM3asLBAl7B0MaggX19PEoTWa6db6ToizM=";
+    hash = "sha256-VO7Q+3utTp9+Z/EcN4jwNafbOwdeeCCJb8dtPMcvyjE=";
  };

  # NOTE: Generating lock-file
@@ -24,7 +24,7 @@ buildNpmPackage rec {
    cp ${./package-lock.json} package-lock.json
  '';

-  npmDepsHash = "sha256-/dOfQbP9c+gdec/TUTuxrma0nOWdRFoBLDL3tNAQZ5k=";
+  npmDepsHash = "sha256-AXUh8KPqsv4tHGCHvdxjqVV+PRCtkyOuGtWSpoBwKX0=";
  npmInstallFlags = [ "--omit=dev" ];

  dontNpmBuild = true;
@@ -27,13 +27,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "euphonica";
-  version = "0.99.1-beta";
+  version = "0.99.2-beta";

  src = fetchFromGitHub {
    owner = "htkhiem";
    repo = "euphonica";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-7CD7OqQ5/znVSEXVibjoNfi6bTwoUdbsLHlKCAB284Y=";
+    hash = "sha256-AlS3bxoF64AsYwFkMSFR5/LXjTMXww+DNmx9KXJr3FE=";
    fetchSubmodules = true;
  };

@@ -46,7 +46,7 @@ stdenv.mkDerivation (finalAttrs: {

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) pname version src;
-    hash = "sha256-PaeVFxFzb0qyqMPw2KwhyT2rpJhdotC2ptd5oDNb6xk=";
+    hash = "sha256-f/9C0RDrRLI0E/1ffajT9YxAyh0ZMCqjWni1cQFNxBc=";
  };

  mesonBuildType = "release";
@@ -0,0 +1,48 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  fmt,
+  cmake,
+  extra-cmake-modules,
+  gettext,
+  fcitx5,
+  sqlite,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "fcitx5-array";
+  version = "0.9.6";
+
+  src = fetchFromGitHub {
+    owner = "ray2501";
+    repo = "fcitx5-array";
+    tag = finalAttrs.version;
+    hash = "sha256-YDFT/CawFiPN3kXzHMpenCzWMJSA1dFUhVe22EDfnU8=";
+  };
+
+  nativeBuildInputs = [
+    cmake
+    extra-cmake-modules
+    gettext
+  ];
+
+  buildInputs = [
+    fmt
+    fcitx5
+    sqlite
+  ];
+
+  strictDeps = true;
+
+  meta = {
+    description = "Array wrapper for Fcitx5";
+    homepage = "https://github.com/ray2501/fcitx5-array";
+    license = with lib.licenses; [
+      gpl2Plus
+      lgpl21Plus
+    ];
+    maintainers = with lib.maintainers; [ yanganto ];
+    platforms = lib.platforms.linux;
+  };
+})
@@ -0,0 +1,27 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+}:
+
+rustPlatform.buildRustPackage {
+  pname = "ffmpreg";
+  version = "0.1.2-unstable-2026-03-25";
+
+  src = fetchFromGitHub {
+    owner = "yazaldefilimone";
+    repo = "ffmpreg";
+    rev = "a6fca970b98357ccd275acd797673ef7cf4ca02f";
+    hash = "sha256-p2dtNmJ7fXFzgsfg32Tmr6xr1wuZAHziNgMeUOfyjgw=";
+  };
+
+  cargoHash = "sha256-GxUBhFWoAq6zCDHWTiZ/pC6BWu4JcW71Sh9Du2H36wg=";
+
+  meta = {
+    description = "Experimental safe Rust-native multimedia toolkit for decoding, transforming, and encoding audio and video";
+    homepage = "https://github.com/yazaldefilimone/ffmpreg";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ aprl ];
+    mainProgram = "ffmpreg";
+  };
+}
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "newt";
-  version = "1.10.3";
+  version = "1.10.4";

  src = fetchFromGitHub {
    owner = "fosrl";
    repo = "newt";
    tag = finalAttrs.version;
-    hash = "sha256-b/ZcU4N13+91tVhKMDPBaCGmBW11m5yQNgd1FaTxbsE=";
+    hash = "sha256-Dtzx/Rs7aa2GkG7Qq4pvGN4ghfS7EyVhx7rQh8sRlQU=";
  };

  vendorHash = "sha256-vy6Dqjek7pLdASbCrM9snq5Dt9lbwNJ0AuQboy1JWNQ=";
@@ -29,7 +29,7 @@
  gexiv2,
  libwebp,
  luajit,
-  openexr_2,
+  openexr,
  suitesparse,
  withLuaJIT ? lib.meta.availableOn stdenv.hostPlatform luajit,
  gimp,
@@ -77,7 +77,7 @@ stdenv.mkDerivation (finalAttrs: {
    libraw
    libwebp
    gexiv2
-    openexr_2
+    openexr
    suitesparse
  ]
  ++ lib.optionals stdenv.cc.isClang [
@@ -18,16 +18,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "gelly";
-  version = "0.19.0";
+  version = "1.0.0";

  src = fetchFromGitHub {
    owner = "Fingel";
    repo = "gelly";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-pxyO5CVNfLHMrTKamyEBUj8QTg2bPTfS5FZ3YTmkkQk=";
+    hash = "sha256-ZmtofGQYC32pz9WWTvENTU1qSVOXDu+CneyX/YelvZU=";
  };

-  cargoHash = "sha256-ZKeVAgQsBOhhNbqdHYRTtpq6+z+xa1Be4eFnrY71f+s=";
+  cargoHash = "sha256-dlMC+nUStrrjYlwxG+NVoqFOuTMcdaUL5a20dN3G5HQ=";

  nativeBuildInputs = [
    pkg-config
@@ -8,17 +8,17 @@

 buildGoModule (finalAttrs: {
  pname = "gitea-actions-runner";
-  version = "0.3.0";
+  version = "0.3.1";

  src = fetchFromGitea {
    domain = "gitea.com";
    owner = "gitea";
    repo = "act_runner";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-D2b0m3XEEEugjnrEzpYGxwD8hzpoPzIW9lNrCbgmKVc=";
+    hash = "sha256-D3/vJUQuNAgUWNyfL9QWmByZ9A/F4+pfA6GR0SDcMpQ=";
  };

-  vendorHash = "sha256-EqU+YJrwKtA9LHa7DkRJ6er5GNocR8Gbhjjx72mPhqE=";
+  vendorHash = "sha256-XRXoChH2ApQS65xnzeGP4NIUL0RKovLWvVIAnBncT7Y=";

  ldflags = [
    "-s"
@@ -5,16 +5,16 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "gokey";
-  version = "0.2.0";
+  version = "0.2.1";

  src = fetchFromGitHub {
    owner = "cloudflare";
    repo = "gokey";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-tJ9nCHhKPrw7SRGsqAlo/tf3tBLF63+CevEXggZADlE=";
+    hash = "sha256-G8cZ5x2XiXdwR0qNCR3KZVGQvu/tOw4vQV26XOZXmKs=";
  };

-  vendorHash = "sha256-Btac9Oi8efqRy+OH49Na3Y6RGehHEmGfvDo2/7EWPL4=";
+  vendorHash = "sha256-ntDQi2+7TGVdfgyOhKgaNCfCBK1o5sRC9gVVxonNU6c=";

  meta = {
    homepage = "https://github.com/cloudflare/gokey";
@@ -184,11 +184,11 @@ let

  linux = stdenvNoCC.mkDerivation (finalAttrs: {
    inherit pname meta passthru;
-    version = "146.0.7680.164";
+    version = "146.0.7680.177";

    src = fetchurl {
      url = "https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_${finalAttrs.version}-1_amd64.deb";
-      hash = "sha256-9t2HFaPxDwzTey57iDGpY1nqhWx0faIi07JiOuZRs3Q=";
+      hash = "sha256-Tb142IoeaaYDa6jorbmfyoCHkOI7LqkthhBJStf1cyg=";
    };

    # With strictDeps on, some shebangs were not being patched correctly
@@ -302,11 +302,11 @@ let

  darwin = stdenvNoCC.mkDerivation (finalAttrs: {
    inherit pname meta passthru;
-    version = "146.0.7680.165";
+    version = "146.0.7680.178";

    src = fetchurl {
-      url = "http://dl.google.com/release2/chrome/acieaz5gurxr6um2wu2e5hogjueq_146.0.7680.165/GoogleChrome-146.0.7680.165.dmg";
-      hash = "sha256-g9smFwpu8F3WrYX+eUkYuEdhzR2rSAzt8/nVPG8xaEg=";
+      url = "http://dl.google.com/release2/chrome/aco4gwkxcefkxklazdyhgwkrndkq_146.0.7680.178/GoogleChrome-146.0.7680.178.dmg";
+      hash = "sha256-aGqEFAzQZLy85hbsjhgYr5eFYgCaMhOiUG00wSlANHk=";
    };

    dontPatch = true;
@@ -10,16 +10,16 @@
 }:
 buildGo126Module (finalAttrs: {
  pname = "goreleaser";
-  version = "2.14.3";
+  version = "2.15.0";

  src = fetchFromGitHub {
    owner = "goreleaser";
    repo = "goreleaser";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-2zG7B6d+NZ1XJrObCfgBZyin5JDv6hKlvZ8C4ckAJ8Q=";
+    hash = "sha256-IoNa4D3OM0B+/6KNS/n0T1uQwDK34aFE/I6tsavKhVQ=";
  };

-  vendorHash = "sha256-ImjoPvxkg35Fn4XdhTFLT2o4cDCjuyEOn1mDkMTjksk=";
+  vendorHash = "sha256-Yx0K3/6WuWRpP3sLoo+xnMDoJN+OtVZGtBbNaroMRy8=";

  ldflags = [
    "-s"
@@ -7,16 +7,16 @@

 buildGoModule (finalAttrs: {
  pname = "greenmask";
-  version = "0.2.17";
+  version = "0.2.18";

  src = fetchFromGitHub {
    owner = "GreenmaskIO";
    repo = "greenmask";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-pH+e+CXC18jpAq/xLV5CE0BicxgPtLF7kBgUusebWDg=";
+    hash = "sha256-ZFlfX6JgJOaq+8OxSzhulRTkKabGoNsnBxFVpg81RDs=";
  };

-  vendorHash = "sha256-t2U65GAGBGdMRXPTkCQCuXfLuqohA6erTlvAN/xx/ek=";
+  vendorHash = "sha256-SB71/Tf9Bw8AlTYGXOaRR8sdiwx8l9wQba93p6vAbAk=";

  subPackages = [ "cmd/greenmask/" ];

@@ -1,36 +1,44 @@
 diff --git a/helix-cli/src/main.rs b/helix-cli/src/main.rs
-index 18e279fd..a3ec271c 100644
 --- a/helix-cli/src/main.rs
 +++ b/helix-cli/src/main.rs
-@@ -121,13 +121,6 @@ enum Commands {
-         action: MetricsAction,
+@@ -185,13 +185,6 @@
+         action: DashboardAction,
     },
 
 -    /// Update to the latest version
 -    Update {
 -        /// Force update even if already on latest version
-        #[clap(long)]
+-        #[arg(long)]
 -        force: bool,
 -    },
 -
     /// Migrate v1 project to v2 format
     Migrate {
         /// Project directory to migrate (defaults to current directory)
-@@ -253,9 +246,6 @@ async fn main() -> Result<()> {
+@@ -384,9 +377,6 @@
     // Send CLI install event (only first time)
     metrics_sender.send_cli_install_event_if_first_time();
 
 -    // Check for updates before processing commands
-    update::check_for_updates().await?;
+-    let update_available = update::check_for_updates().await?;
 -
     let cli = Cli::parse();
 
+     // Set verbosity level from flags
+@@ -394,7 +384,7 @@
+ 
     let result = match cli.command {
-@@ -280,7 +270,6 @@ async fn main() -> Result<()> {
-         Commands::Prune { instance, all } => commands::prune::run(instance, all).await,
-         Commands::Delete { instance } => commands::delete::run(instance).await,
-         Commands::Metrics { action } => commands::metrics::run(action).await,
-        Commands::Update { force } => commands::update::run(force).await,
-         Commands::Migrate {
-             path,
-             queries_dir,
+         None => {
+-            display_welcome(update_available);
+            display_welcome(None);
+             Ok(())
+         }
+         Some(cmd) => match cmd {
+@@ -432,7 +422,6 @@
+             Commands::Delete { instance } => commands::delete::run(instance).await,
+             Commands::Metrics { action } => commands::metrics::run(action).await,
+             Commands::Dashboard { action } => commands::dashboard::run(action).await,
+-            Commands::Update { force } => commands::update::run(force).await,
+             Commands::Migrate {
+                 path,
+                 queries_dir,
@@ -10,16 +10,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "helix-db";
-  version = "2.1.3";
+  version = "2.3.3";

  src = fetchFromGitHub {
    repo = "helix-db";
    owner = "HelixDB";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-oy17xutabfTmdkyi3Ak61f4fhd65m+Cwk+1a156K2hQ=";
+    hash = "sha256-Qr6rrZx9wXQm4l7HqmGz3PXRJHuV3lUZMcGMH+sOPDY=";
  };

-  cargoHash = "sha256-KrrbQwxhqtO8ISq7WWSo67t58dOuI3gS/9nesVCIq+0=";
+  cargoHash = "sha256-nx4jq+2EChhtUEwCgZeqPIDidfRFZ0i0DZhkLVKapDo=";

  patches = [
    #There are no feature yet
@@ -9,11 +9,11 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "hentai-at-home";
-  version = "1.6.4";
+  version = "1.6.5";

  src = fetchzip {
    url = "https://repo.e-hentai.org/hath/HentaiAtHome_${finalAttrs.version}_src.zip";
-    hash = "sha512-dcHWZiU0ySLlEhZeK1n2T/dyO6Wk9eS7CpZRSfzY3KvHrPBthQnaFrarSopPXJan1+zWROu1pEff1WSr5+HO4Q==";
+    hash = "sha512-oKyvzHZTPwSTcjsNOQ0LIl6rV+b7JDnuWbYKFogWWkyKcR/xDcNPNhUrKv8QLH6a1AQ2T8DYkxcJYnjhgsaovA==";
    stripRoot = false;
  };

@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "honeycomb-refinery";
-  version = "3.1.1";
+  version = "3.1.2";

  src = fetchFromGitHub {
    owner = "honeycombio";
    repo = "refinery";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-xO+8eiIoFw9CMjtjs9jjfQ8ENrhHVlkv3VVd/kXBwFs=";
+    hash = "sha256-6MrV/MOsMH1PHQkuQg4OgRqhG23xN+If172wUDu1Fek=";
  };

  env.NO_REDIS_TEST = true;
@@ -37,7 +37,7 @@ buildGoModule (finalAttrs: {
    "-X main.BuildID=${finalAttrs.version}"
  ];

-  vendorHash = "sha256-eyq4pDZKE6Wmkuo/2PtiQJoYumbLelvcL4Dyb18OnaY=";
+  vendorHash = "sha256-oA9upZD0F7J2AYylohsixy9Wdof2ww2RPDoq3f+HTmc=";

  doCheck = true;

@@ -26,12 +26,13 @@ let
      "java.security.jgss"
      "java.sql"
      "java.xml"
+      "jdk.zipfs"
    ];
  };
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "i2p";
-  version = "2.10.0";
+  version = "2.11.0";

  src = fetchzip {
    urls = [
@@ -42,7 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
      "https://files.i2p-projekt.de/"
      "https://download.i2p2.no/releases/"
    ]);
-    hash = "sha256-Ogok7s5sawG27ucstG+NYiIAF66Pb3ExOYsL8mfNav8=";
+    hash = "sha256-NDiE3HhY18zZKLu1zkp3omwf8zmTJ9JPRIq34rDdpGc=";
  };

  strictDeps = true;
@@ -38,6 +38,6 @@ stdenv.mkDerivation {
    homepage = "https://www.openexr.com/";
    license = lib.licenses.bsd3;
    platforms = lib.platforms.all;
-    insecure = true;
+    inherit (openexr_2.meta) knownVulnerabilities;
  };
 }
@@ -17,7 +17,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "${name}-bin";
-  version = "34.1.0";
+  version = "34.3.0";

  src = fetchurl {
    url = "https://github.com/be5invis/Iosevka/releases/download/v${finalAttrs.version}/PkgTTC-${name}-${finalAttrs.version}.zip";
@@ -1,93 +1,93 @@
 # This file was autogenerated. DO NOT EDIT!
 {
-  Iosevka = "1ks27r2aq6039qm6ds846ff0naazpn2f73qr2acy0d58g92mh1yn";
-  IosevkaAile = "04y1c94ndhl7ffav80fk2pllxi4w8lp9gh78a2g8fkfsp032b834";
-  IosevkaCurly = "0f70jjfagcv2xv7ni6p9ja7sfzfm7vjmkbmb7mrw1pabbxv1qv70";
-  IosevkaCurlySlab = "1bhns6wfhpklir350xyvbqli11gv6ngv1hnqindfskvbjdgvksya";
-  IosevkaEtoile = "1rj08pv191p5zh6x4lzb5wri39759jwif3vk6lbpdavjmh7n6ifb";
-  IosevkaSlab = "1nwpgvmhfsrz9sarmjm4bv3fjw8v9xdnhgsk1qmail1ikd0r558b";
-  IosevkaSS01 = "0rr9dpyjdf0zl6dnsd3ywx5bgsmxrmmdcvklr02xypbh0r48yk41";
-  IosevkaSS02 = "0fms0w7k41g511haqc7g6a4y2mv053rrvlyymrldxpczavfmb452";
-  IosevkaSS03 = "1mrk1shgz4b8gh71bz44mq7fc2rqj2dlqwzil3zhfmipp35khr8p";
-  IosevkaSS04 = "0bfqg20pgyxxw9yxn1fn633w5rx87rij0scz37rrwx2ax21b9714";
-  IosevkaSS05 = "1i4s47gwbhpipbcybwh7dj8zqhj3dibcxkm68zz7cqj7d0a3pgz1";
-  IosevkaSS06 = "0b100pni0hfp9cwijasvhwv387zd0ss9ii4hrll6wwxdvl85kygp";
-  IosevkaSS07 = "1138pcqknbs9qd08930q5ymgspvqfqmbvkmzza148q55pypakmhj";
-  IosevkaSS08 = "170sfv87mi6n7mp60dfpkkqg2dckc4537vg1pa7kjqsdlz68w8cj";
-  IosevkaSS09 = "0ggw8pw6rp3bzai453k0cxldjm5aah04h770k76izh8qcmdfn9cx";
-  IosevkaSS10 = "07gpishi3kdvrj4rhiyzbh8689lq4idfwn9qwz8v2177k5hrc3xj";
-  IosevkaSS11 = "0vgnmr4qqhxxqxfcn1i6fb81129gbcyyfx6s2hhsd0412m82za1m";
-  IosevkaSS12 = "1am7l8kbjgzcdrh3rs4lll8rsdbl6nkfigj05ijxj99vy709b3ay";
-  IosevkaSS13 = "0c4mljjijw5jdlcazz88fwaax1mlmslpvqjx04j4fa6y01b5lbwi";
-  IosevkaSS14 = "00hc45hk39fnr1q1nfycyybipv8p7svnpd0v5a8gs2yziwp4lgmy";
-  IosevkaSS15 = "0xklpd7hzbwr0hin7j2rmql5brsp9pnczkwmkv02dkz8wpaplsnh";
-  IosevkaSS16 = "149vn4df6hqhhg4azvbg6ydrddfa2s9w6jl53y4jzh16k1qg299j";
-  IosevkaSS17 = "0rhfkl90balv9q4kvlj7kqnpsq65v695y2420lgm0795jpzjjjqj";
-  IosevkaSS18 = "0jlri23v1skwczqh5jlfgn48h9ax2l3c43ylr5j85ilnj141v83l";
-  SGr-Iosevka = "13wh9xpd9snskargz50g6r12p7c605c9d021cidmrd17gv7xc9gy";
-  SGr-IosevkaCurly = "02v5n4llvsfn5bz5f5bzwjg9sjddyy9g2by5x6vys28lrj1kjdpx";
-  SGr-IosevkaCurlySlab = "1kcahdm2qh65979kjwma64kpqy07rx0vsbbm4nfq97dp89sf1r1v";
-  SGr-IosevkaFixed = "1aqmz56378nsmk714y9zz5zpzn1y7qxir25fswb1q9i1d2a6jrjp";
-  SGr-IosevkaFixedCurly = "08hz11jrg9d3kymfsdvv0pg3l15pfm58ywwwrz7x2s293v7dinij";
-  SGr-IosevkaFixedCurlySlab = "1z7qzlam1611yfaa1x63qii40kv6ammiiq45z8h9ip1y1g89psfk";
-  SGr-IosevkaFixedSlab = "1dh26p28jpcsvfw4rp9r59dzizg2b85a7sx49lzx420nq329nps1";
-  SGr-IosevkaFixedSS01 = "0vba40a2yfxf30q8zskjw4xbyjynm4ddydgydclkbw4xk3lpv81c";
-  SGr-IosevkaFixedSS02 = "06flqwi0xj6fcrf1kba4wmrixx8jp0ki5bl40jlk4b73y77pjdzl";
-  SGr-IosevkaFixedSS03 = "1na81p6944raqfncwlamb6qq8iq3asy6pf3djbqb27q620vs1h2g";
-  SGr-IosevkaFixedSS04 = "14mrnnxadlmkj289n89c0wjhpq9vsqp69jf4iknr0aw0zbxdzygg";
-  SGr-IosevkaFixedSS05 = "096dxrl43955x1jxxmqrgblwcp09rm0bibwvlfzrhd858836ykgb";
-  SGr-IosevkaFixedSS06 = "0g7iws86053z6cz9ccawfakbf5kc5hnv4pvkgw82nvczhswzj9w4";
-  SGr-IosevkaFixedSS07 = "0zrsndf0kgzyar2ciskgnnq69761fz577w5x05cn8fi1j3bk8jw0";
-  SGr-IosevkaFixedSS08 = "0i0b168zs4ivmphb6iv2pk738paqn9kqpxyy8p1hbnpxmhh6567k";
-  SGr-IosevkaFixedSS09 = "1lqj8hac38g4apfy6mdhhvvghvfsicyw0mnihb1dhxfjrfglbgwv";
-  SGr-IosevkaFixedSS10 = "1csr7pl77qcx89669215s52lk1xjk886xdhrxla8a14770vyqhc6";
-  SGr-IosevkaFixedSS11 = "1r6hizv0bfk97sm98yr7frkrni6j3rdfrzkx8dg4k4kdawzgwl52";
-  SGr-IosevkaFixedSS12 = "1g9azwdq9bymj77fvf4qkf19f0bc65z94xj1a47cc2m90q6lh64m";
-  SGr-IosevkaFixedSS13 = "1f550yn0f8yi0wpmakvqxn841b40y3d2g2mkb0y6msh6lbknsyzv";
-  SGr-IosevkaFixedSS14 = "059blzwwhc0vq2k4icxxv446srp3yx001r2pwb4yx9wvxz3s41iv";
-  SGr-IosevkaFixedSS15 = "1f7cbs0zl3bz0bhm41c7155kdiqhz6csmkj9m56imdb9i43bc8dy";
-  SGr-IosevkaFixedSS16 = "14f3ddmdhb3b97dv6hlp1h69xmxbyhya10nm97nhxx978wfb03wi";
-  SGr-IosevkaFixedSS17 = "04ksk0479a6argapgw7cz948g18ji2lz6bgs9y6wgs2j23bdd202";
-  SGr-IosevkaFixedSS18 = "0rrrb9qmr8mcs2w9j8ydgbi9mzh5qixc9wvvq243wf21f2ryyiv7";
-  SGr-IosevkaSlab = "0104yjl6a90cfs1c0c7sv3w2bzxidrl3zwifi1cl7a9knmzf6q8c";
-  SGr-IosevkaSS01 = "0w00c66pxah6cnh8i6da2k6rlj5wl5bjj1w78pc874y7l04bi5sh";
-  SGr-IosevkaSS02 = "02gr60dcvlz961f99xcs3p76g8bdwbavm4qmgyadr9hla97bag5h";
-  SGr-IosevkaSS03 = "01gsp69k7i3188z0gcrfbyl5ik5nhrpqm8qc5iafgdflw1cq3nbj";
-  SGr-IosevkaSS04 = "11yj0r0fpxxbqz9wka4sl2b2yjy6ckk1srg0xf0zjj92ch5snp0c";
-  SGr-IosevkaSS05 = "071y7zs923ngmiaiwfh87pirg5c65029wmbpk7ld3flqfclhcq52";
-  SGr-IosevkaSS06 = "1p3fcwpf67v2br0c6q7ippx5blvj9qybx0kk3q823832i1ncrpxl";
-  SGr-IosevkaSS07 = "15f2i563ii226gi9ysprw2gk9w5p71i8a7yqnx80m4ifhvvgchlc";
-  SGr-IosevkaSS08 = "0jx9igvs79qskcdrjcj7cbkkdyj63m19smhv8dc34p189yf1ik3i";
-  SGr-IosevkaSS09 = "108b1qnpm838sp82car9gg2y407r0nwdh4abaqlrgyr8dzk5f58n";
-  SGr-IosevkaSS10 = "10g4bzfdk199qaplr4w3np6nkgh4mf1v7d9qsbvc3nrj8ll2aq5n";
-  SGr-IosevkaSS11 = "0gxz2w0p0f0363c58nqfhks43r8wqq6pjy0v09yfdmnhqj6z7j9x";
-  SGr-IosevkaSS12 = "1z9qzsmdgw34vcpzi3nbh5yj8hmxw6sxjgw4ixyhz43c4swf4cbn";
-  SGr-IosevkaSS13 = "06lbzy7m3kdqk0f0hssbxidyqhzzgl2n2mpsg4yyxbyvbgdbhj8f";
-  SGr-IosevkaSS14 = "0s8afcg7bcsc8s7rakg8bb561q4mfnf0wz1f5jxs19k1050zs0yd";
-  SGr-IosevkaSS15 = "1q257hagk63bazl0prml0a1d47qyaq1v11f3j5aksdqw8pyd11g2";
-  SGr-IosevkaSS16 = "1kwyrf0q077rn7x2qs454xbyr569a133c0k9a0al8jwjbpg7hsxw";
-  SGr-IosevkaSS17 = "1l1mm2yz6dxzw73myd6spcbzdp2sy7zkg6j7mg06vlbnydk5xnz8";
-  SGr-IosevkaSS18 = "04ppzgbb00anc4x6x6s82aih82pqz8n0isqnm65y4k1hddrm4h3i";
-  SGr-IosevkaTerm = "0v21aqnfrnpkfkfzh6il344nfb3icmd9r5kiamigscc4vwqz6pn3";
-  SGr-IosevkaTermCurly = "1955wg65w556blq2hi6ghgbayb53xq9lq5ajmk13x5hkp5fwbwpw";
-  SGr-IosevkaTermCurlySlab = "0zh61dgfv4plwha45cz5ly3xgb1zk2c9wr0zlfjj30b1nqfffv4l";
-  SGr-IosevkaTermSlab = "0wgq8d8cim0c2kw2qcp7pp65kpbkxkn7z9qsg5qmyv420p5fbckf";
-  SGr-IosevkaTermSS01 = "1mfvqqa98wgsxfb17z3bcrgzblj9kqsah0jpmnblhvn6hrfcssyh";
-  SGr-IosevkaTermSS02 = "1dklck1121y0i32c1vp5qnw8qy7fynn1858wmjq2rj0lzxbxv16s";
-  SGr-IosevkaTermSS03 = "10nrg9bfzn6b7m0fnmy05dj6ma738bmxfcsd4cc2dnwcwj7ijckh";
-  SGr-IosevkaTermSS04 = "0laxpzz7aayv8k8awdqaamaic7cvhnvbcpdgs6qm184vbxgkh25m";
-  SGr-IosevkaTermSS05 = "0cppv8pywxi64mfd6r55l3pqwkdnkgiv3jxws8bx1sddy62vgwgm";
-  SGr-IosevkaTermSS06 = "02mklk15iims5pqamlnmahwmsm1svsdc8066xrf3hncgavd493xg";
-  SGr-IosevkaTermSS07 = "0xph1nanliln6vbd4n1yiz7rm0z5xniszlp9mhahqdpz0fd2rbfr";
-  SGr-IosevkaTermSS08 = "15arp1z8yzhfmmf2z4xm7lwdyblr6xv1gqqrzw524xk24654hnq8";
-  SGr-IosevkaTermSS09 = "01psmw8vbw1vbxmm70dq5cqgyh6fhpz26v9aics3dw1fdlpzk723";
-  SGr-IosevkaTermSS10 = "01d7qnx3247cbcfq35q9dj937jwjlmb6k0c68bayc8ipnh6g6nmz";
-  SGr-IosevkaTermSS11 = "019hg1vkj1smy20gkv277a59nr6bahprc38cql2pf3543cijwgzq";
-  SGr-IosevkaTermSS12 = "14dnnxar7iig9iw8q45hsrilmjx7ygi4b8hm1x3hh1jcri3bywnb";
-  SGr-IosevkaTermSS13 = "03ijmmhhah6994bllnfhjw2kf6llhawbslwrk0p2z92l8xia4cwn";
-  SGr-IosevkaTermSS14 = "0znfgrcyrif6kdhywzzrv7dsq7k473kkm84rmk43crp3459jh7h1";
-  SGr-IosevkaTermSS15 = "0d417ccl9q4zffq3c178g99wqranzqgaf07sna98x645anhyqqyg";
-  SGr-IosevkaTermSS16 = "0fz2zn4gz6vyi4jw7jb8h2k99ll61sxzpfnw1x2gcbxap9qa7bgh";
-  SGr-IosevkaTermSS17 = "0v92f25nqqd6hy84hy1522qspcbcrw5whz8r0vzvhf6k9bz2wma9";
-  SGr-IosevkaTermSS18 = "0pijgwmf6ri92fjz0yv7z72bc4fqs1xwva0r55iibbmmk4n0lwch";
+  Iosevka = "1hi3lj7lhxi9mc9qx5wx6pf2gp4n92nr3w077g8125d0qj1lynmz";
+  IosevkaAile = "0jm03g4z0x2vf27dabcpdhj7y6kmm8c81z3avxa4s5rhw86di3wl";
+  IosevkaCurly = "0sr322g251lsw1bvfcfg5pim8r5lrjh56xyrn0ghd4961cccymvq";
+  IosevkaCurlySlab = "1pjnk9pzn2xknikg7md94cf3m62jjzbkbsp631fkda84vxpla72y";
+  IosevkaEtoile = "1k1ds0bb02rqz9p3bc85512xiihkkljal5p82bappkhha1xqr19v";
+  IosevkaSlab = "132xdhggnq06w062vsm8gq1a9phid7ajwyki7kk76d0xpvh4g91d";
+  IosevkaSS01 = "1r2g1wq2yvzkiywd22x8cji4lg242fvqh2wa80fyj8cb0kza9675";
+  IosevkaSS02 = "0bcjln3aif8vx1l8yfl39yaf2y29rbab21v771y0nh4zq19b3j2h";
+  IosevkaSS03 = "12pps3qhrfg5i7zw2f64ajw3bkgwsa9br857981iv5p9d8fsqaa4";
+  IosevkaSS04 = "0a4x2zhab01abn12r2vq7skjsycij2xkg2hk2zpaa5nzc81vwx7r";
+  IosevkaSS05 = "1g0bvg7ms1smxz1x4p3vbvdmv0ywk9xn88p1lda6glcjjdjvvrj0";
+  IosevkaSS06 = "01kb9mqmkgrrwza5vhdcc4rrwdpq18bmsmk2sdglykxxb4wxdypv";
+  IosevkaSS07 = "0lgx2lshr1z568999c0gj1ym4pjb6y9z9h0sb8wjhjbg2myfzmmv";
+  IosevkaSS08 = "0wxzraih01xxi8sj9y7l5xbplszq4mzimw6zn9asq5lzq0rzyrjy";
+  IosevkaSS09 = "1065na837i39jgy7iml6y2aylsbiipj1kpzrqv370xg70nv4jpvb";
+  IosevkaSS10 = "01n8kxlj6k5674j6yavyl5vcslis6zpmfc26d3yhr13b2lmk8jnx";
+  IosevkaSS11 = "1ds9q64s3vh8s5jzf8hsh37i2dzp98g11by31gip5f3ki0ygiq0s";
+  IosevkaSS12 = "17dw6zsk1y6nh9gdf1wbry792c43rr5qxy2h6jn761g7p5k2yqr4";
+  IosevkaSS13 = "0jyhc22ylhsx5krm7m5fqkpvl6d5qvmwrvizrz1aj6cj9qg7gmk9";
+  IosevkaSS14 = "0n9cibyf9dbhpjv65r0vcz540g878p66nf233y5a9783ilqnaf6g";
+  IosevkaSS15 = "082dj9l6np0jv9l6py0n94dp12z4j21nh4c5rnnd70gwm62a8bs4";
+  IosevkaSS16 = "1d799ggds6yrv7iwif8m9bw5b7wbzzish9yj77k8w2f0m3kkd2bm";
+  IosevkaSS17 = "0fx25bnb3yr9krj3px8zs6s3nbzk75d5dx3g4wy2p103l2dw6kbr";
+  IosevkaSS18 = "1a1f6k45pslin4f07phd4lqcdmqsdwmdn2cyd53zw8hbwc123hy3";
+  SGr-Iosevka = "1p1wrxnlwlwv84ml3y6pd76ipkivk7vg4d4lriv1jf9bc5cf92jq";
+  SGr-IosevkaCurly = "0rzmixda0chbhzmacpqaln5rw83wk5i3aa2ahjh2pyw1mg5aj7ki";
+  SGr-IosevkaCurlySlab = "1byvpqnjb9ima7aw1758x29nrgmsq1hwpxryh0hlyww6yr6iwdc2";
+  SGr-IosevkaFixed = "1a5c67ssj83mzzs7aghmfffchlqajjk4rg5vqlrs2mzm2j03xdkf";
+  SGr-IosevkaFixedCurly = "05b8msl7hxh96djrai6g1s107h3lqzrc2x9qz6qrwni90w5cyv60";
+  SGr-IosevkaFixedCurlySlab = "1nbn1qp977mqg4jlzz6ba4v07f9v7xal7acpfqfw66xjjbbyys36";
+  SGr-IosevkaFixedSlab = "1rs3w2qb9bq8pjvz4lsx3gbiz40jdhjqd7m12mzfwbhmnhxk2pam";
+  SGr-IosevkaFixedSS01 = "1bn3y6k6bg6kibqd9ai6imz8fanz2b8ryj74dva2vcjjhbzw8gfv";
+  SGr-IosevkaFixedSS02 = "01qdpf0zj529s9yp87z54cz9gg4fmpfgrlln1iw19nzj37h2y8kw";
+  SGr-IosevkaFixedSS03 = "0dyj1n82l8zmjrl9061029pjy35vmr4i46bic98m0n23xz10glb7";
+  SGr-IosevkaFixedSS04 = "1kgy80bv21z57lxcc7v22961i2qfczqbvw236f5dsqnjgcx9bf5i";
+  SGr-IosevkaFixedSS05 = "0ac7qnmmnw69gnzm6c0y90mclp0sbqmnyhcaqril2h5nba2s582k";
+  SGr-IosevkaFixedSS06 = "1d5wvzyd7h5n6wg6c8qflmw8a4hc3h4mccf8vam7fglhwbbfswlv";
+  SGr-IosevkaFixedSS07 = "0wjbsdkqr1y10vnmwra16a13yxnvd9gqd030265w6gwnhs0p7r4j";
+  SGr-IosevkaFixedSS08 = "0pypcjicqnm6h133j8m4q5gc1vdk2j2vkl70m81zxlhs9xxf5nlh";
+  SGr-IosevkaFixedSS09 = "0cba4zvq7rgb17bx4z91mbynadgns9szd4wpj5skmg80abkj2wh3";
+  SGr-IosevkaFixedSS10 = "19q3ixasmz0py5h52jx4ic819lv0p2hkipj3gwszhv35cafwi2mc";
+  SGr-IosevkaFixedSS11 = "1zkmhr756k1l5mr51phrc3wkkyc6xpimhz7szxa6r2rq2l0dw5yb";
+  SGr-IosevkaFixedSS12 = "02xxzbnq15dibn3s4b117qafz72a89y1hbznbkds7w1lgrcd3n42";
+  SGr-IosevkaFixedSS13 = "17flb0hw6mddgy39qgi9k18sa4f2mb62qng023zbw2labn1cfk5p";
+  SGr-IosevkaFixedSS14 = "13wqkn6jxajwg0w3rs0m93wzm95i7dsbs4ilni2ab8n4jvx5crhb";
+  SGr-IosevkaFixedSS15 = "04mqjii28fzs6380aqsswcqi8kxd5qykqqw6225z12hb01gz17zz";
+  SGr-IosevkaFixedSS16 = "1i0ngdm70m2fzi7ns5j61rbv9nn3czb0spc7zwj6hg3ric2zddx7";
+  SGr-IosevkaFixedSS17 = "0lsgkvfpj5j4yv5a38afllbhj4py8p2ggx3lfdhd6r8bhqkbn0xi";
+  SGr-IosevkaFixedSS18 = "0yqkjckn5bycp0ckgpf8v9f6w26rpwc27zckbjab29q0l8mv6mz8";
+  SGr-IosevkaSlab = "0ph358rgb0frc4gvar432gsxh7byai9gsrv8awgp089ydjsmwzhj";
+  SGr-IosevkaSS01 = "0kfbh35ibfcj4k38dl3mcs2caplc7s0fagqfjflhz2vwdjwdg1pj";
+  SGr-IosevkaSS02 = "1y3w272bhdyk8vgahr7gayd8q1587wfgfllcr3hj0clgr2k4i64w";
+  SGr-IosevkaSS03 = "1jari56mqa6r7vqqcdcpyidbsv0xl6vps3kpn4p3l02whq1d9wkl";
+  SGr-IosevkaSS04 = "1icn0hj8vwmzk6axfmyqmp6vsm756gwn4l7fhsh0izrrqa5fisz1";
+  SGr-IosevkaSS05 = "12gd65kz1f0i2mrxvmd7vc02r4qrmns7wkzij6klz4fnhfxr7fkz";
+  SGr-IosevkaSS06 = "0vgjdgfm3a396lgz719ykhccx22a35861ckqna1z4k02kqzxps5b";
+  SGr-IosevkaSS07 = "1w8z9ps08yxa8hgqyp31r8yph2n3x3wdhn8dra35xpqrhbf9r6xz";
+  SGr-IosevkaSS08 = "087nyj5pcadz8gg005m4hk6y9hsmvywxnv8bpbz1kw0xlhas23bn";
+  SGr-IosevkaSS09 = "1489nmb0b26any5arppcaxj55an5dsbcr5dz5gpz1mkskl33nqdd";
+  SGr-IosevkaSS10 = "03z56s9zqs7zpdxnq5xpfqz2iddbnj6n3ii5djdg08pms78p5a0z";
+  SGr-IosevkaSS11 = "10byk5zk8x8gkg584cdmjnwx4k7j797blw5mj9rr89v3qz6xd30d";
+  SGr-IosevkaSS12 = "1q40rwqfsk1k51mmkjc89l17cz4r2q69mg9n95nfdgklw96s2pw1";
+  SGr-IosevkaSS13 = "04zmlsz1n40j2yda368dn1918m7zazd4zbmqwjsxiifhqpnl2y2v";
+  SGr-IosevkaSS14 = "05ip3xflipjgp9qbna44fa1gzd5nfc6xs3v4z6xli7c4aiqv96vi";
+  SGr-IosevkaSS15 = "1hhkwk6g041i0zywbh4yn88x9frrghsk77h06k3vayxavg2ygqm3";
+  SGr-IosevkaSS16 = "1mz9811kbgc27sn0njin82v2bphk6gn02gmz3mvl2hgxic97hmaz";
+  SGr-IosevkaSS17 = "112hqzmfcfjj3h0yg9595k9ml0v6cwmkab9yxfjccqyzwmk12s3w";
+  SGr-IosevkaSS18 = "0w0q4znxh2pv4nrdbvgwvfyk8vrm871kps2z7m20pwjl67w6rwj7";
+  SGr-IosevkaTerm = "041arqjjd6nir7swbnl88fshif4aj5fmn77vqi9qswmc5lz4r18z";
+  SGr-IosevkaTermCurly = "1y8s9rarqcdw13lk19dz9k8dvnqcl8nbpbcah8jm313xgxs4cypx";
+  SGr-IosevkaTermCurlySlab = "1dkpv5612zgxijdq5k1v5xdy9l0b2j3pj2phaxdk4px5ayk92i7k";
+  SGr-IosevkaTermSlab = "0f6i383pclkf8n89ra00qs88468vikrwbqmhan5cx5ll5s3j0p7v";
+  SGr-IosevkaTermSS01 = "06snskzqlyjji01n146yp5r49xx6j7kal1rm8qplbibznrb6l7lh";
+  SGr-IosevkaTermSS02 = "04s0y369xsrbsq0kl51jf6mzizc7v1y68wqpvnpxr0qnzsfrfksm";
+  SGr-IosevkaTermSS03 = "1a1dsbbjsmc8bq4hxnwd1ngdd50y936c1ab9j8lj60q7xbifimka";
+  SGr-IosevkaTermSS04 = "0zc39zsysxhcbvndb9j6z46kxsjcj6afcvw7wl5kyrf5l515n3la";
+  SGr-IosevkaTermSS05 = "1nsd9g1rfyxxa2l6b4sf59k2339js5yy3hcrx3k8albyq1v3pm9g";
+  SGr-IosevkaTermSS06 = "1cxnqmxs44savsx04bphh1pnqdcsbbcz7q7fzbgkfzw6pxv0cd29";
+  SGr-IosevkaTermSS07 = "0a2fa875i8597n0q0f0lhxhg05f76nf8cdpvnn3ihhqc98wk4xds";
+  SGr-IosevkaTermSS08 = "13024qddvy4yys9jr4nfqq6y33vqdpaswc5hbjbywzda6ljb7sxq";
+  SGr-IosevkaTermSS09 = "06bz9i4m4rsw3whbgqj8c14y016j316zzi7cc753xnk8ss4ynfq2";
+  SGr-IosevkaTermSS10 = "1lhssdc0dvnqbmy6qmfcpn2psxqvyflqhvvjkrzjwy6gwiqn4bnh";
+  SGr-IosevkaTermSS11 = "11nbhfjzai80i7gw0ig1md5xcabskahqx0qfawhapfrpfil6wwdl";
+  SGr-IosevkaTermSS12 = "07362a24f67qhxmf6lm07zbi2w5rmissnbyig2fc3mpz1f853478";
+  SGr-IosevkaTermSS13 = "1cw5ayfl33hyi26j4vnhm3ymidkhrvcmn7v2f3zcg38ki1d27m84";
+  SGr-IosevkaTermSS14 = "1ksb378jpx1ja5n9nnd27qhnbnlbq7r99yn06lchpdbfxwrk4gqd";
+  SGr-IosevkaTermSS15 = "0jj2cj634ml1cgzqwgr9ivyi7222hmvnl7wm3xhc2ckir1p4jpfa";
+  SGr-IosevkaTermSS16 = "0mf3slw6xrwblv3b4afznv3aizqagj60rdcya7n1bjfdci1jzmjq";
+  SGr-IosevkaTermSS17 = "0xzd8sr07a1cxknb9w8j0yskm3x9zyj5dggdsjdx4dnn5g2rxwnn";
+  SGr-IosevkaTermSS18 = "0rdvxf1kbp44zh7bgp6cpm8kzwp7fr3dch5zn61rzpwrpn1brrdf";
 }
@@ -5,8 +5,8 @@
 }:
 let
  pname = "keto";
-  version = "25.4.0";
-  commit = "f5635433a56324f266ea414727bf7395bb2da429";
+  version = "26.2.0";
+  commit = "e4393662cd2e744deeb79de77669e07b6ccf51f3";
 in
 buildGoModule {
  inherit pname version commit;
@@ -15,10 +15,10 @@ buildGoModule {
    owner = "ory";
    repo = "keto";
    rev = "v${version}";
-    hash = "sha256-2DktCLYOj2azYBAhMVuqfU7QQ+eC3qDLtcp+fPljFAg=";
+    hash = "sha256-wRtz4RvJ7LxVnSLmXVZFGa9QXjcPnDNJxHKosbyTed0=";
  };

-  vendorHash = "sha256-+zHvIf3CBMMqKVmQYzMRGQg9iGf9Khnhpgt95lA0BBA=";
+  vendorHash = "sha256-B27aC4yXS36eOoq53+RWp0vq1Oqw2aR+gOjv0m+b/I4=";

  tags = [
    "sqlite"
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "kratos";
-  version = "25.4.0";
+  version = "26.2.0";

  src = fetchFromGitHub {
    owner = "ory";
    repo = "kratos";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-f/K86B5h7xM7Zsbr5w2rZgsyNlCSemrBkqtMRQq/Xws=";
+    hash = "sha256-u298vFFD/zc7ScdQ5rmvcHqkMMenMVIRC9GChfukml8=";
  };

-  vendorHash = "sha256-ayL3V8TQ+9Tk2Wkhvn+Tft9AqxiFegznKXD0eBkFbhs=";
+  vendorHash = "sha256-qnG8hdWazKlIFfNPz2z5F7hhgZaTTttUBbg59T+N5OI=";

  subPackages = [ "." ];

@@ -56,6 +56,9 @@ buildGoModule (finalAttrs: {
    description = "API-first Identity and User Management system that is built according to cloud architecture best practices";
    homepage = "https://www.ory.sh/kratos/";
    license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [ mrmebelman ];
+    maintainers = with lib.maintainers; [
+      mrmebelman
+      debtquity
+    ];
  };
 })
@@ -11,7 +11,6 @@
  fribidi,
  giflib,
  gsl,
-  ilmbase,
  immer,
  kseexpr,
  lager,
@@ -72,7 +71,6 @@ stdenv.mkDerivation (finalAttrs: {
    opencolorio
    xsimd
    curl
-    ilmbase
    immer
    kseexpr
    libmypaint
@@ -20,13 +20,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libdeltachat";
-  version = "2.47.0";
+  version = "2.48.0";

  src = fetchFromGitHub {
    owner = "chatmail";
    repo = "core";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-EF86Jl6rP46UMlWCPJ607akWZYDictH6vGptAuSc6NQ=";
+    hash = "sha256-9qrxzAoBdCzDaMWZnCPxKy9bISd19aI4U1kRcK85Mzg=";
  };

  patches = [
@@ -36,7 +36,7 @@ stdenv.mkDerivation (finalAttrs: {
  cargoDeps = rustPlatform.fetchCargoVendor {
    pname = "chatmail-core";
    inherit (finalAttrs) version src;
-    hash = "sha256-slzAUiOmCsUv9yGhFMeEyZ6+kmPNUOsiwZXiF0j+Roc=";
+    hash = "sha256-UcQoY2NvnvWmGjHn1xwi0deyPZjtnbfQJJo32K7TX38=";
  };

  nativeBuildInputs = [
@@ -9,13 +9,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libremines";
-  version = "2.2.1";
+  version = "2.3.0";

  src = fetchFromGitHub {
    owner = "Bollos00";
    repo = "libremines";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-DscpRqXho+bZnXDLyii/cZjuL4MRTAQOuX6PUfwXCx8=";
+    hash = "sha256-bV7k0RhOLqyX7kKbISTo8gRiMVGx3Y2EdmihpdtIWz4=";
  };

  nativeBuildInputs = [
@@ -6,7 +6,6 @@
  curl,
  fetchFromGitHub,
  lib,
-  nix-update-script,
  openssl,
  pkg-config,
  stdenv,
@@ -38,8 +37,6 @@ stdenv.mkDerivation (finalAttrs: {

  configureFlags = [ "--enable-aligned=yes" ];

-  passthru.updateScript = nix-update-script { };
-
  enableParallelBuilding = true;

  meta = {
@@ -11,14 +11,14 @@

 python3Packages.buildPythonApplication {
  pname = "lichess-bot";
-  version = "2026.3.18.1";
+  version = "2026.3.29.1";
  pyproject = false;

  src = fetchFromGitHub {
    owner = "lichess-bot-devs";
    repo = "lichess-bot";
-    rev = "a36742d99d27a6e942ded48d58716623d3ae71f5";
-    hash = "sha256-FtmBzfpMOUPioGXe0JqzpJi2/hL/EAI2tNU6X3xGSvk=";
+    rev = "bfd5e5e1005be7c5c4a7c880b6981c7e265fc066";
+    hash = "sha256-ZsrepZLbIJEqbxyads+nFeO+FPFQ7H56wE6eaT79Fys=";
  };

  propagatedBuildInputs = with python3Packages; [
@@ -8,16 +8,16 @@

 buildGoModule rec {
  pname = "lightwalletd";
-  version = "0.4.18";
+  version = "0.4.19";

  src = fetchFromGitHub {
    owner = "zcash";
    repo = "lightwalletd";
    rev = "v${version}";
-    hash = "sha256-YmSQjfqwTZC3NkPH6k7gwHcaYRURive5rc0MVOKWCi8=";
+    hash = "sha256-93zR2rVRrV09rflfJbT3JMYmqyx0Lp0Acbs2ohhUL8Y=";
  };

-  vendorHash = "sha256-jAsX+BhVYbD/joCMT2vdDdRLqZOG9AfXmbRPJcJcQEw=";
+  vendorHash = "sha256-bV1nJ1HUpYdziV42/ug3X+/jAdw3Wq7MdcnX327MD/w=";

  ldflags = [
    "-s"
@@ -9,20 +9,21 @@
  sqlite,
  installShellFiles,
  asciidoctor,
+  nix-update-script,
 }:

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "listenbrainz-mpd";
-  version = "2.3.9";
+  version = "2.5.1";

  src = fetchFromCodeberg {
    owner = "elomatreb";
    repo = "listenbrainz-mpd";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-j9MlvE2upocwC5xxroms3am6tqJX30sSw7PFNw8Ofog=";
+    hash = "sha256-087+l3calge6hKu3h84C98mIpW6qFAZwRMe4lkQCU4o=";
  };

-  cargoHash = "sha256-1x3F2TqNlqwfPUvLwU8ac4aEeEwpIy5gEyxRBC0Q5YM=";
+  cargoHash = "sha256-SxXEathWAGqdgeJmIn5h9Zvv7Z3DGXa4htkODf/ANRQ=";

  nativeBuildInputs = [
    pkg-config
@@ -61,12 +62,17 @@ rustPlatform.buildRustPackage (finalAttrs: {
    installManPage listenbrainz-mpd.1
  '';

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    homepage = "https://codeberg.org/elomatreb/listenbrainz-mpd";
    changelog = "https://codeberg.org/elomatreb/listenbrainz-mpd/src/tag/v${finalAttrs.version}/CHANGELOG.md";
    description = "ListenBrainz submission client for MPD";
    license = lib.licenses.agpl3Only;
-    maintainers = with lib.maintainers; [ DeeUnderscore ];
+    maintainers = with lib.maintainers; [
+      DeeUnderscore
+      Kladki
+    ];
    mainProgram = "listenbrainz-mpd";
  };
 })
@@ -10,16 +10,16 @@

 buildGoModule rec {
  pname = "mautrix-discord";
-  version = "0.7.5";
+  version = "0.7.6";

  src = fetchFromGitHub {
    owner = "mautrix";
    repo = "discord";
    rev = "v${version}";
-    hash = "sha256-puYPsHahXdKYR16hPnvYCrSGqnWc7sZ8HmmPlkysvs0=";
+    hash = "sha256-qpyySoYX+JMEKDf7Iv5WSZFOxkrmd3ihAaAXAKcZs9Q=";
  };

-  vendorHash = "sha256-ffdR5OymFO7di4eOmL3zn6BvHgaLFBsmBkC4LKnw8Qg=";
+  vendorHash = "sha256-ZjY2+1M1LP/zBVG5+zfX4T8Lyjx/tpDwSxLlpsBG3iA=";

  ldflags = [
    "-s"
@@ -6,13 +6,13 @@

 buildGoModule (finalAttrs: {
  pname = "mieru";
-  version = "3.29.0";
+  version = "3.30.0";

  src = fetchFromGitHub {
    owner = "enfein";
    repo = "mieru";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-v08yA01I4W3SVkkRmm38nwTYzfTcESXgW98TrbaeaHA=";
+    hash = "sha256-frSW7qLKhRTJLE2rAaZekoaJUmQWqVECQhCSCsmub/U=";
  };

  vendorHash = "sha256-pKcdvP38fZ2KFYNDx6I4TfmnnvWKzFDvz80xMkUojqM=";
@@ -10,7 +10,7 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "mycelium";
-  version = "0.7.3";
+  version = "0.7.5";

  sourceRoot = "${finalAttrs.src.name}/myceliumd";

@@ -18,10 +18,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "threefoldtech";
    repo = "mycelium";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-WB08dcQiz9byHNKu3ObyiQ99h18osOMeKe5hdvVaeqw=";
+    hash = "sha256-9PjYvzCHSOPlULbElJPVMnLFGTEy/FX56ZaRHUozqvE=";
  };

-  cargoHash = "sha256-Wo+J0aVGiS4d1oipvrvV0abdWtHQj8iJozFM7Fj/jNs=";
+  cargoHash = "sha256-LSCa8euuOX4BgEDkNQlOdgiL0QzRRMlCoA9opSnPQbI=";

  nativeBuildInputs = [ versionCheckHook ];

@@ -9,16 +9,16 @@

 buildNpmPackage (finalAttrs: {
  pname = "nest-cli";
-  version = "11.0.16";
+  version = "11.0.17";

  src = fetchFromGitHub {
    owner = "nestjs";
    repo = "nest-cli";
    tag = finalAttrs.version;
-    hash = "sha256-naVDl3fjjPdrZhUynoy98ggVIDlmIVgvrEYxdNvwD1Y=";
+    hash = "sha256-TolI/HpC5kEvXrqkIcjcVny2yY96Jz37f5+mw4fHt1M=";
  };

-  npmDepsHash = "sha256-eLytaWABoJTFBnkdqt/rIrgeI4Z2gPpUBL/bt6UIduQ=";
+  npmDepsHash = "sha256-y9yjZT7AhXPrKEQo81k5KjX9voIWY7VcuUGY6QuiLcw=";
  npmFlags = [ "--legacy-peer-deps" ];

  env = {
@@ -1,8 +1,9 @@
 {
  fetchFromGitHub,
+  fetchFromCodeberg,
  stdenv,
  lib,
-  nix,
+  nixVersions,
  meson,
  cmake,
  ninja,
@@ -29,16 +30,17 @@ let
      slurm.dev
    ];
  };
+  nix = nixVersions.nix_2_34;
 in
 stdenv.mkDerivation rec {
  pname = "nix-scheduler-hook";
-  version = "0.7.2";
+  version = "0.7.3";

-  src = fetchFromGitHub {
-    owner = "lisanna-dettwyler";
+  src = fetchFromCodeberg {
+    owner = "lisanna";
    repo = "nix-scheduler-hook";
    tag = "v${version}";
-    hash = "sha256-tgZ2BZuKmaoPh4h4r/nej98tvl4PvwZfA6xbTLgNZMA=";
+    hash = "sha256-r8ybbPxQK+ohsaz4+brrsivj77fCqrrHPskfyrp6R2A=";
  };

  sourceRoot = "source/src";
@@ -163,7 +163,7 @@ let
 in

 buildFHSEnv {
-  name = "nordpass";
+  inherit (thisPackage) pname version;
  targetPkgs = _: deps ++ [ thisPackage ];
  runScript = "nordpass";

--- a/Show More
+++ b/Show More