Merge staging-next into staging

doc/languages-frameworks/factor.section.md

@@ -65,7 +65,7 @@ It also understands the following special attributes:
 - `vocabRoot` is the vocabulary root to install the vocabulary under.
   Defaults to `extra`.
   Unless you know what you are doing, do not change it.
-  Other readily understood vocabulary roots are `core` and `base`, which allow you to modify the default Factor runtime environment with an external package.
+  Other readily understood vocabulary roots are `core` and `basis`, which allow you to modify the default Factor runtime environment with an external package.
 - `extraLibs`, `extraVocabs`, `extraPaths` have the same meaning as for [applications](#ssec-factor-applications).
   They have no immediate effect and are just passed through.
   When building factor-lang packages and Factor applications that use this respective vocabulary, these variables are evaluated and their paths added to the runtime environment.

lib/trivial.nix

@@ -409,7 +409,7 @@ in
   */
   oldestSupportedRelease =
     # Update on master only. Do not backport.
-    2411;
+    2505;
 
   /**
     Whether a feature is supported in all supported releases (at the time of

nixos/modules/installer/cd-dvd/installation-cd-base.nix

@@ -34,6 +34,7 @@
   # system layout on a fresh machine, before it has been formatted.
   swapDevices = lib.mkImageMediaOverride [ ];
   fileSystems = lib.mkImageMediaOverride config.lib.isoFileSystems;
+  boot.initrd.luks.devices = lib.mkImageMediaOverride { };
 
   boot.postBootCommands = ''
     for o in $(</proc/cmdline); do

pkgs/applications/networking/instant-messengers/discord/default.nix

@@ -9,16 +9,16 @@ let
   versions =
     if stdenv.hostPlatform.isLinux then
       {
-        stable = "0.0.102";
+        stable = "0.0.103";
-        ptb = "0.0.152";
+        ptb = "0.0.154";
-        canary = "0.0.723";
+        canary = "0.0.730";
         development = "0.0.84";
       }
     else
       {
-        stable = "0.0.354";
+        stable = "0.0.355";
-        ptb = "0.0.182";
+        ptb = "0.0.184";
-        canary = "0.0.829";
+        canary = "0.0.836";
         development = "0.0.97";
       };
   version = versions.${branch};
@@ -26,15 +26,15 @@ let
     x86_64-linux = {
       stable = fetchurl {
         url = "https://stable.dl2.discordapp.net/apps/linux/${version}/discord-${version}.tar.gz";
-        hash = "sha256-xnl67Ty9uuAjOV5eWnR7xG+PR5J4M7nYc1hjRBjbaOI=";
+        hash = "sha256-WNLyBBQFqAEiPpv1JpoFrgKgCH3PBOTxFWxdHcqNAl8=";
       };
       ptb = fetchurl {
         url = "https://ptb.dl2.discordapp.net/apps/linux/${version}/discord-ptb-${version}.tar.gz";
-        hash = "sha256-GbLEAu6gchwkkupU6k6i7bpdMVnCqB74HDYxyTt3J/w=";
+        hash = "sha256-ZAjewH/lOby3O7dQXy4igKd0DiZuwuhBitSlbr3hyjs=";
       };
       canary = fetchurl {
         url = "https://canary.dl2.discordapp.net/apps/linux/${version}/discord-canary-${version}.tar.gz";
-        hash = "sha256-k1ClTRaYsb5rPV8AFtVg3iEZ44z5gmcBnOJgsQq9O1Y=";
+        hash = "sha256-lDmhJhhI9oD89fIGctcalO0pf2SjikRdsIWVIpkfGpk=";
       };
       development = fetchurl {
         url = "https://development.dl2.discordapp.net/apps/linux/${version}/discord-development-${version}.tar.gz";
@@ -44,15 +44,15 @@ let
     x86_64-darwin = {
       stable = fetchurl {
         url = "https://stable.dl2.discordapp.net/apps/osx/${version}/Discord.dmg";
-        hash = "sha256-JucQ4EPWSMKAKvZhovij8YGWLhZ3IhnXoskce3RG0Do=";
+        hash = "sha256-RV/qyguxpdgL0T6AJHvP40LzFxSLI57bCGEpgZxLZmI=";
       };
       ptb = fetchurl {
         url = "https://ptb.dl2.discordapp.net/apps/osx/${version}/DiscordPTB.dmg";
-        hash = "sha256-yL3NSjY3W1w1gfw7w7zdCgVcov18PtrT8RmcwgQLA6U=";
+        hash = "sha256-BWsnv22blA+1oAWGbYxXgwo0i9LvaAAqjUuwSRlfkTw=";
       };
       canary = fetchurl {
         url = "https://canary.dl2.discordapp.net/apps/osx/${version}/DiscordCanary.dmg";
-        hash = "sha256-pa7nJMJU6jPNcusIJ93aAH8AFQl93z1FX/sv6+M4WME=";
+        hash = "sha256-XVznNMnhEgX2YXUj0+5cQNxB2RR2ybUS3UcHqlSiHOk=";
       };
       development = fetchurl {
         url = "https://development.dl2.discordapp.net/apps/osx/${version}/DiscordDevelopment.dmg";

pkgs/by-name/au/autosuspend/package.nix

@@ -7,7 +7,7 @@
 
 python3.pkgs.buildPythonApplication rec {
   pname = "autosuspend";
-  version = "7.2.0";
+  version = "8.0.0";
   pyproject = true;
 
   disabled = python3.pythonOlder "3.10";
@@ -16,7 +16,7 @@ python3.pkgs.buildPythonApplication rec {
     owner = "languitar";
     repo = "autosuspend";
     tag = "v${version}";
-    hash = "sha256-of2b5K4ccONPGZfUwEIoFs86xLM2aLCV8tVGxVqykiQ=";
+    hash = "sha256-ikFZTSYWjl0QGvVAlcMVANCTwcxWN5fkrcK4iQ/QFok=";
   };
 
   build-system = with python3.pkgs; [
@@ -32,9 +32,9 @@ python3.pkgs.buildPythonApplication rec {
     portalocker
     psutil
     python-dateutil
-    pytz
     requests
     requests-file
+    tzdata
     tzlocal
   ];
 
@@ -55,18 +55,16 @@ python3.pkgs.buildPythonApplication rec {
     "test_multiple_sessions"
   ];
 
-  doCheck = true;
+  meta = {
-
-  meta = with lib; {
     description = "Daemon to automatically suspend and wake up a system";
     homepage = "https://autosuspend.readthedocs.io";
     changelog = "https://github.com/languitar/autosuspend/releases/tag/${src.tag}";
-    license = licenses.gpl2Only;
+    license = lib.licenses.gpl2Only;
-    maintainers = with maintainers; [
+    maintainers = with lib.maintainers; [
       bzizou
       anthonyroussel
     ];
     mainProgram = "autosuspend";
-    platforms = platforms.linux;
+    platforms = lib.platforms.linux;
   };
 }

pkgs/by-name/bi/bitbox/package.nix

@@ -21,14 +21,14 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "bitbox";
-  version = "4.47.3";
+  version = "4.48.1";
 
   src = fetchFromGitHub {
     owner = "BitBoxSwiss";
     repo = "bitbox-wallet-app";
     rev = "v${version}";
     fetchSubmodules = true;
-    hash = "sha256-Rxlj9Xm78xI61ynOonokxii2jnemumWy6fX+82bDp+w=";
+    hash = "sha256-zpkjYnGsmPKjxUpp2H1qSzqthOO1mTmki3bPqo35sBo=";
   };
 
   postPatch = ''
@@ -43,7 +43,7 @@ stdenv.mkDerivation rec {
     inherit version;
     inherit src;
     sourceRoot = "${src.name}/frontends/web";
-    npmDepsHash = "sha256-eazc3OIusY8cbaF8RJOrVcyWPQexcz6lZYLLCpB1mHc=";
+    npmDepsHash = "sha256-9NS85U4L5sLX3n/uN4p4CB5vfpWMMcnf6wESlFdQPlI=";
     installPhase = "cp -r build $out";
   };
 

pkgs/by-name/ch/chawan/package.nix

@@ -12,6 +12,7 @@
   brotli,
   zlib,
   gitUpdater,
+  versionCheckHook,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
@@ -73,13 +74,19 @@ stdenv.mkDerivation (finalAttrs: {
       wrapProgram $out/bin/mancha ${makeWrapperArgs}
     '';
 
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  doInstallCheck = true;
+  versionCheckProgramArg = "--version";
+
   passthru.updateScript = gitUpdater { rev-prefix = "v"; };
 
   meta = {
     description = "Lightweight and featureful terminal web browser";
     homepage = "https://sr.ht/~bptato/chawan/";
     changelog = "https://git.sr.ht/~bptato/chawan/refs/v${finalAttrs.version}";
-    license = lib.licenses.publicDomain;
+    license = lib.licenses.unlicense;
     platforms = lib.platforms.unix;
     maintainers = with lib.maintainers; [ ];
     mainProgram = "cha";

pkgs/by-name/cl/claude-code/package-lock.json

@@ -6,13 +6,13 @@
   "packages": {
     "": {
       "dependencies": {
-        "@anthropic-ai/claude-code": "^1.0.64"
+        "@anthropic-ai/claude-code": "^1.0.65"
       }
     },
     "node_modules/@anthropic-ai/claude-code": {
-      "version": "1.0.64",
+      "version": "1.0.65",
-      "resolved": "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-1.0.64.tgz",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-1.0.65.tgz",
-      "integrity": "sha512-AI3Q/50+znj80gV1Aua4MOGLuOxS4G6m11CmYYyDCFuoVMzskG1aSI5fxAyGol3N5GI4Tuw0YPmANJdZ/MNvhQ==",
+      "integrity": "sha512-MUpHFOzdx8EKw3DogQObsL5nseXbMInGHInqRyMVBf2/aLnD4IHEFOuyR5SfnINI9E8lEiqIOy0p3muu60j3uA==",
       "license": "SEE LICENSE IN README.md",
       "bin": {
         "claude": "cli.js"

pkgs/by-name/cl/claude-code/package.nix

@@ -7,16 +7,16 @@
 
 buildNpmPackage rec {
   pname = "claude-code";
-  version = "1.0.64";
+  version = "1.0.65";
 
   nodejs = nodejs_20; # required for sandboxed Nix builds on Darwin
 
   src = fetchzip {
     url = "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-${version}.tgz";
-    hash = "sha256-do/RbjQu+E4hfw1/iNrAt+Jm1OROwooSxJCLDNd4LZw=";
+    hash = "sha256-Ch55xuJZJ0LXDTIlC7Ya381jqeGJzYC5IDEY0hS76/M=";
   };
 
-  npmDepsHash = "sha256-v0k5KNlGu/jsHd2AVzW9IeLFlIOr+85YXiHbe4pA/bM=";
+  npmDepsHash = "sha256-iekpD6RTMRHaV2ifogoestwpq3W+JkesjGVlhtGwHQQ=";
 
   postPatch = ''
     cp ${./package-lock.json} package-lock.json

pkgs/by-name/cr/crosvm/package.nix

@@ -21,12 +21,12 @@
 
 rustPlatform.buildRustPackage {
   pname = "crosvm";
-  version = "0-unstable-2025-07-24";
+  version = "0-unstable-2025-08-01";
 
   src = fetchgit {
     url = "https://chromium.googlesource.com/chromiumos/platform/crosvm";
-    rev = "0865699a3bc381c058fabfed655ac54c9e4c58ec";
+    rev = "1543b3e004a8d4b45c37d45a06e7221effd22a1d";
-    hash = "sha256-5diQzbo7mcUQmzjUOFNib2Vgqv/FehFL85ru0/AOe+Y=";
+    hash = "sha256-jIFjn9/WniMTvTibkdqra/mPOf7E+OFHj2xiUMyD6lY=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/ea/easytier/package.nix

@@ -11,16 +11,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "easytier";
-  version = "2.3.2";
+  version = "2.4.0";
 
   src = fetchFromGitHub {
     owner = "EasyTier";
     repo = "EasyTier";
     tag = "v${version}";
-    hash = "sha256-PacIaE1oxnMAh3aS6k4ciuE/85G+JIbFDcge64fyjiE=";
+    hash = "sha256-GNHF15FJDLZKYrNuvaTQfsPGS6BabEhk5BZm7OzFbvU=";
   };
 
-  cargoHash = "sha256-Q2qxCINePGCbvlLMxg9oVFtBoJtbG+pgpRdoLkvZb+w=";
+  cargoHash = "sha256-rwwrCiTiLn1DM3LaTNKzQi0tUWGzAYMXku9LHjq2K7g=";
 
   nativeBuildInputs = [
     protobuf

pkgs/by-name/ed/eddie/package.nix

@@ -22,6 +22,8 @@
 
   mono,
 
+  versionCheckHook,
+
   eddie,
   testers,
 }:
@@ -124,6 +126,13 @@ buildDotnetModule (finalAttrs: {
       ''${makeWrapperArgs[@]}
   '';
 
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  versionCheckProgram = "${placeholder "out"}/bin/eddie-cli";
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
   passthru = {
     tests.version = testers.testVersion {
       package = eddie;

pkgs/by-name/gr/groovy/package.nix

@@ -15,11 +15,11 @@
 
 stdenv.mkDerivation rec {
   pname = "groovy";
-  version = "4.0.27";
+  version = "4.0.28";
 
   src = fetchurl {
     url = "mirror://apache/groovy/${version}/distribution/apache-groovy-binary-${version}.zip";
-    sha256 = "sha256-vJF8i7AbKDLxJKe9Y6PHK6XoPvfwVmUN/ZoveUSWBoU=";
+    sha256 = "sha256-agUr/SynfVfg2zBKMT3ZpymUXFoxQg5tSFBb5IQL/FQ=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ha/halo/package.nix

@@ -8,10 +8,10 @@
 }:
 stdenv.mkDerivation rec {
   pname = "halo";
-  version = "2.21.3";
+  version = "2.21.4";
   src = fetchurl {
     url = "https://github.com/halo-dev/halo/releases/download/v${version}/halo-${version}.jar";
-    hash = "sha256-l5tD9QIQfuRXG6hxP2ensb3SeX/A7F/xx694rQKUUrI=";
+    hash = "sha256-RoisTthVRq6UGTE5jRdo6tL/3UVaOu1/3XPpwyLQV4g=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ho/home-manager/package.nix

@@ -19,14 +19,14 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "home-manager";
-  version = "0-unstable-2025-07-18";
+  version = "0-unstable-2025-07-28";
 
   src = fetchFromGitHub {
     name = "home-manager-source";
     owner = "nix-community";
     repo = "home-manager";
-    rev = "d0300c8808e41da81d6edfc202f3d3833c157daf";
+    rev = "f49e872f55e36e67ebcb906ff65f86c7a1538f7c";
-    hash = "sha256-irfg7lnfEpJY+3Cffkluzp2MTVw1Uq9QGxFp6qadcXI=";
+    hash = "sha256-vojVM0SgFP8crFh1LDDXkzaI9/er/1cuRfbNPhfBHyc=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ka/kardolus-chatgpt-cli/package.nix

@@ -9,18 +9,18 @@ buildGoModule (finalAttrs: {
   # "chatgpt-cli" is taken by another package with the same upsteam name.
   # To keep "pname" and "package attribute name" identical, the owners name (kardolus) gets prefixed as identifier.
   pname = "kardolus-chatgpt-cli";
-  version = "1.8.4";
+  version = "1.8.5";
 
   src = fetchFromGitHub {
     owner = "kardolus";
     repo = "chatgpt-cli";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-vr61SrIYun6KUB9u+ZtUmdGO/ks2aQnAMAQ0g6QPaho=";
+    hash = "sha256-TXdxqPoyt3VUeHVkbB0UjNcCqaf+5Xve95RMQOEagTM=";
   };
 
   vendorHash = null;
   # The tests of kardolus/chatgpt-cli require an OpenAI API Key to be present in the environment,
-  # (e.g. https://github.com/kardolus/chatgpt-cli/blob/v1.8.4/test/contract/contract_test.go#L35)
+  # (e.g. https://github.com/kardolus/chatgpt-cli/blob/v1.8.5/test/contract/contract_test.go#L35)
   # which will not be the case in the pipeline.
   # Therefore, tests must be skipped.
   doCheck = false;

pkgs/by-name/ke/keycloak/keycloak-restrict-client-auth/default.nix

@@ -6,16 +6,16 @@
 
 maven.buildMavenPackage rec {
   pname = "keycloak-restrict-client-auth";
-  version = "24.0.0";
+  version = "26.1.0";
 
   src = fetchFromGitHub {
     owner = "sventorben";
     repo = "keycloak-restrict-client-auth";
     rev = "v${version}";
-    hash = "sha256-Pk0tj8cTHSBwVIzINE7GLA5b/eI97wuOTvO7UoXBStM=";
+    hash = "sha256-nQ2AwXhSUu5RY/BbxXE2OXgEb7Zf6FfrGP5tfbgAXk8=";
   };
 
-  mvnHash = "sha256-Pk2yYuBqGs4k1KwaU06RQe1LpohZu0VI1pHEUBU3EUE=";
+  mvnHash = "sha256-32un0gcpFI5wU9eShASzVnXmdhu3e+55iC3GBX/2yko=";
 
   installPhase = ''
     runHook preInstall

pkgs/by-name/lu/lutgen-studio/package.nix

@@ -0,0 +1,72 @@
+{
+  lib,
+  fetchFromGitHub,
+  rustPlatform,
+  makeWrapper,
+
+  fontconfig,
+  libGL,
+  libxkbcommon,
+  openssl,
+  wayland,
+  xorg,
+
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage rec {
+  pname = "lutgen-studio";
+  version = "0.3.0";
+
+  src = fetchFromGitHub {
+    owner = "ozwaldorf";
+    repo = "lutgen-rs";
+    tag = "lutgen-studio-v${version}";
+    hash = "sha256-ENhaJTbaAv52YFNjce9Ln/LQvP/Nw2Tk5eMmr8mKwQ0=";
+  };
+
+  cargoHash = "sha256-PEso+fTH1DndRUPULYIDMAqnrfz8W9iVVxZ7W2N/I5U=";
+
+  cargoBuildFlags = [
+    "--bin"
+    "lutgen-studio"
+  ];
+  cargoTestFlags = [
+    "-p"
+    "lutgen-studio"
+  ];
+
+  nativeBuildInputs = [ makeWrapper ];
+
+  postInstall =
+    let
+      # Include dynamically loaded libraries
+      LD_LIBRARY_PATH = lib.makeLibraryPath [
+        fontconfig
+        libGL
+        libxkbcommon
+        openssl
+        wayland
+        xorg.libXcursor
+        xorg.libXrandr
+        xorg.libXi
+        xorg.libX11
+      ];
+    in
+    ''
+      wrapProgram "$out/bin/lutgen-studio" \
+        --set LD_LIBRARY_PATH "${LD_LIBRARY_PATH}"
+    '';
+
+  passthru.updateScript = nix-update-script {
+    extraArgs = [ "--version-regex=^lutgen-studio-v([0-9.]+)$" ];
+  };
+
+  meta = {
+    description = "Official GUI for Lutgen, the best way to apply popular colorschemes to any image or wallpaper";
+    homepage = "https://github.com/ozwaldorf/lutgen-rs";
+    maintainers = with lib.maintainers; [ ozwaldorf ];
+    mainProgram = "lutgen-studio";
+    license = lib.licenses.mit;
+  };
+}

pkgs/by-name/lu/lutgen/package.nix

@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "lutgen";
-  version = "1.0.0";
+  version = "1.0.1";
 
   src = fetchFromGitHub {
     owner = "ozwaldorf";
     repo = "lutgen-rs";
     tag = "lutgen-v${version}";
-    hash = "sha256-hJ5yD8Yu08kcr2rWY59iVEFJH+chroEWSsP2g5agFuo=";
+    hash = "sha256-ENhaJTbaAv52YFNjce9Ln/LQvP/Nw2Tk5eMmr8mKwQ0=";
   };
 
-  cargoHash = "sha256-VsKRLxh6uRG2A5AvJBMdD+bXg/X9mp5o1iPR9MZhrbQ=";
+  cargoHash = "sha256-PEso+fTH1DndRUPULYIDMAqnrfz8W9iVVxZ7W2N/I5U=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/op/opencode/package.nix

@@ -7,15 +7,16 @@
   models-dev,
   nix-update-script,
   testers,
+  tree-sitter,
   writableTmpDirAsHomeHook,
 }:
 
 let
   opencode-node-modules-hash = {
-    "aarch64-darwin" = "sha256-U/pDT9bxwsMf7E/LywxVasqNC46cF+GCqbrUmcVtzTE=";
+    "aarch64-darwin" = "sha256-QfsPK6iPuXXKpT3z1SUDdvCx3uT+U2IZy4msH8UiFg8=";
-    "aarch64-linux" = "sha256-LOy/k8yeUEDe3FFDAgXGJ2BVIxMFy/Js0cgFbtThiDo=";
+    "aarch64-linux" = "sha256-/BpbECRBxLOz+YEQrEHNrtHSr/BaLOrAkJXH0TBHjFE=";
-    "x86_64-darwin" = "sha256-lZRV/CqGXgvAtzFZS4w9ry5yqHT4EYuQ4exuDdXCxBY=";
+    "x86_64-darwin" = "sha256-KA3jaU7BD7lueKBuM9cTJuEby6AC0E03JYZMKRxceqY=";
-    "x86_64-linux" = "sha256-qW/5VKxGuIARVOMPflET74mvIMootj4QHBt2X9sH094=";
+    "x86_64-linux" = "sha256-us6m4Iwaf+zS3NBSoOEAVBpHoyXPDnt+P9/D/Qbui+Y=";
   };
   bun-target = {
     "aarch64-darwin" = "bun-darwin-arm64";
@@ -26,12 +27,12 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "opencode";
-  version = "0.3.110";
+  version = "0.3.112";
   src = fetchFromGitHub {
     owner = "sst";
     repo = "opencode";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-2fvUSbQWBxjXLRfVFwJ6VNO2tx+qGa+IDRCSwFPqw+o=";
+    hash = "sha256-BeUgZUzuphQ1gqPnDnKP2HMy5nyoD5au4AekGT2deIc=";
   };
 
   tui = buildGoModule {
@@ -107,6 +108,8 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     outputHashMode = "recursive";
   };
 
+  buildInputs = [ tree-sitter ];
+
   nativeBuildInputs = [
     bun
     models-dev

pkgs/by-name/ov/overcommit/Gemfile.lock

@@ -4,12 +4,12 @@ GEM
     childprocess (5.1.0)
       logger (~> 1.5)
     iniparse (1.5.0)
-    logger (1.6.1)
+    logger (1.7.0)
-    overcommit (0.64.0)
+    overcommit (0.67.1)
       childprocess (>= 0.6.3, < 6)
       iniparse (~> 1.4)
-      rexml (~> 3.2)
+      rexml (>= 3.3.9)
-    rexml (3.3.7)
+    rexml (3.4.1)
 
 PLATFORMS
   ruby
@@ -18,4 +18,4 @@ DEPENDENCIES
   overcommit
 
 BUNDLED WITH
-   2.5.16
+   2.6.6

pkgs/by-name/ov/overcommit/gemset.nix

@@ -25,10 +25,10 @@
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0lwncq2rf8gm79g2rcnnyzs26ma1f4wnfjm6gs4zf2wlsdz5in9s";
+      sha256 = "00q2zznygpbls8asz5knjvvj2brr3ghmqxgr83xnrdj4rk3xwvhr";
       type = "gem";
     };
-    version = "1.6.1";
+    version = "1.7.0";
   };
   overcommit = {
     dependencies = [
@@ -40,19 +40,19 @@
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "0lpl1ppjrqwsmywsb4srfjfm31dna30jrjyx2lkmws7s2jchy94v";
+      sha256 = "1i81n0h8h2mb81kjfvqj493flx7rb809z5w8sbjfd7szsqnq86n7";
       type = "gem";
     };
-    version = "0.64.0";
+    version = "0.67.1";
   };
   rexml = {
     groups = [ "default" ];
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "09shc1dvg88c4yx83d4c9wf26z838nlapa3cmlq8iqdci39a98v2";
+      sha256 = "1jmbf6lf7pcyacpb939xjjpn1f84c3nw83dy3p1lwjx0l2ljfif7";
       type = "gem";
     };
-    version = "3.3.7";
+    version = "3.4.1";
   };
 }

pkgs/by-name/ov/overcommit/package.nix

@@ -8,7 +8,7 @@
   testers,
 }:
 
-bundlerApp {
+bundlerApp rec {
   pname = "overcommit";
   gemdir = ./.;
   exes = [ "overcommit" ];
@@ -24,7 +24,7 @@ bundlerApp {
       package = overcommit;
       version = (import ./gemset.nix).overcommit.version;
     };
-    updateScript = bundlerUpdateScript "overcommit";
+    updateScript = bundlerUpdateScript pname;
   };
 
   meta = with lib; {
@@ -32,7 +32,7 @@ bundlerApp {
     homepage = "https://github.com/sds/overcommit";
     changelog = "https://github.com/sds/overcommit/blob/main/CHANGELOG.md";
     license = licenses.mit;
-    mainProgram = "overcommit";
+    mainProgram = pname;
     maintainers = with maintainers; [
       Br1ght0ne
       anthonyroussel

pkgs/by-name/pi/pinta/package.nix

@@ -12,13 +12,13 @@
 
 buildDotnetModule rec {
   pname = "Pinta";
-  version = "3.0.2";
+  version = "3.0.3";
 
   src = fetchFromGitHub {
     owner = "PintaProject";
     repo = "Pinta";
     rev = version;
-    hash = "sha256-DFlk3znvK3DAN9dHeTB+X2PdC1STK/i3DOom8Ol2D00=";
+    hash = "sha256-oqhRRfZXBbxQ3ojvam4Q/iuHqGQeqd27hYF9SFKc774=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/po/polarity/package.nix

@@ -7,13 +7,13 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "polarity";
-  version = "latest-unstable-2025-07-15";
+  version = "latest-unstable-2025-07-30";
 
   src = fetchFromGitHub {
     owner = "polarity-lang";
     repo = "polarity";
-    rev = "83bd1bd5bc461421115333e423f45a7735782638";
+    rev = "2f7056d3c201680c9a7f267b4f39e82518bc5660";
-    hash = "sha256-+l3pS8IpPvebpX++ezcC05X06f+NnBZBsNVXEHTYh6A=";
+    hash = "sha256-9H6ICxrZICjfR+URnVVFGdk4lVUp89EIbaHrToDRUNQ=";
   };
 
   cargoHash = "sha256-SXGuf/JaBfPZgbCAfRmC2Gd82kOn54VQrc7FdmVJRuA=";

pkgs/by-name/po/postman/darwin.nix

@@ -1,58 +1,40 @@
 {
   stdenvNoCC,
-  fetchurl,
   unzip,
   pname,
   version,
+  src,
   meta,
 }:
 
-let
-  appName = "Postman.app";
-  dist =
-    {
-      aarch64-darwin = {
-        arch = "arm64";
-        sha256 = "sha256-KOvYt3VL1hZAyf6T+3whMTyhHgndnlZO0e3L1KtDxqE=";
-      };
-
-      x86_64-darwin = {
-        arch = "64";
-        sha256 = "sha256-LCpxbDgcIbVmA7RYykli7gLGb0FWQ4LigxghZYEv1Bk=";
-      };
-    }
-    .${stdenvNoCC.hostPlatform.system}
-      or (throw "Unsupported system: ${stdenvNoCC.hostPlatform.system}");
-
-in
-
 stdenvNoCC.mkDerivation {
-  inherit pname version meta;
+  inherit
+    pname
+    version
+    src
+    meta
+    ;
 
-  src = fetchurl {
+  sourceRoot = "Postman.app";
-    url = "https://dl.pstmn.io/download/version/${version}/osx_${dist.arch}";
-    inherit (dist) sha256;
-    name = "${pname}-${version}.zip";
-  };
 
   nativeBuildInputs = [ unzip ];
 
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/Applications $out/bin
+    cp --recursive . $out/Applications/Postman.app
+    cat > $out/bin/postman << EOF
+    #!${stdenvNoCC.shell}
+    open -na $out/Applications/Postman.app --args "\$@"
+    EOF
+    chmod +x $out/bin/postman
+
+    runHook postInstall
+  '';
+
   # Postman is notarized on macOS. Running the fixup phase will change the shell scripts embedded
   # in the bundle, which causes the notarization check to fail on macOS 13+.
   # See https://eclecticlight.co/2022/06/17/app-security-changes-coming-in-ventura/ for more information.
   dontFixup = true;
-
-  sourceRoot = appName;
-
-  installPhase = ''
-    runHook preInstall
-    mkdir -p $out/{Applications/${appName},bin}
-    cp -R . $out/Applications/${appName}
-    cat > $out/bin/${pname} << EOF
-    #!${stdenvNoCC.shell}
-    open -na $out/Applications/${appName} --args "\$@"
-    EOF
-    chmod +x $out/bin/${pname}
-    runHook postInstall
-  '';
 }

pkgs/by-name/po/postman/linux.nix

@@ -1,82 +1,69 @@
 {
   lib,
   stdenv,
-  fetchurl,
+  copyDesktopItems,
-  makeDesktopItem,
+  makeWrapper,
-  wrapGAppsHook3,
+  alsa-lib,
-  atk,
   at-spi2-atk,
   at-spi2-core,
-  alsa-lib,
+  atk,
   cairo,
   cups,
+  curlWithGnuTls,
   dbus,
   expat,
+  fontconfig,
+  freetype,
   gdk-pixbuf,
   glib,
   gtk3,
-  freetype,
-  fontconfig,
-  nss,
-  nspr,
-  pango,
-  udev,
-  libsecret,
-  libuuid,
   libX11,
-  libxcb,
+  libXcomposite,
-  libXi,
   libXcursor,
   libXdamage,
-  libXrandr,
-  libXcomposite,
   libXext,
   libXfixes,
+  libXi,
+  libXrandr,
   libXrender,
-  libXtst,
   libXScrnSaver,
-  libxkbcommon,
+  libXtst,
   libdrm,
   libgbm,
+  libGL,
+  libsecret,
+  libuuid,
+  libxkbcommon,
+  nspr,
+  nss,
+  pango,
+  udev,
+  xorg,
+  bintools,
+  makeDesktopItem,
   # It's unknown which version of openssl that postman expects but it seems that
   # OpenSSL 3+ seems to work fine (cf.
   # https://github.com/NixOS/nixpkgs/issues/254325). If postman breaks apparently
   # around OpenSSL stuff then try changing this dependency version.
   openssl,
-  xorg,
   pname,
   version,
+  src,
   meta,
-  copyDesktopItems,
-  makeWrapper,
 }:
 
-let
+stdenv.mkDerivation {
-  dist =
+  inherit
-    {
+    pname
-      aarch64-linux = {
+    version
-        arch = "arm64";
+    src
-        sha256 = "sha256-XOQam1W7YT0YDesDR51G/cH318DcxpnAEiJg2JZU3Q4=";
+    meta
-      };
+    ;
 
-      x86_64-linux = {
+  nativeBuildInputs = [
-        arch = "64";
+    copyDesktopItems
-        sha256 = "sha256-TE/AMWkj80+22WaOG2BK6vt4NnMSpBq9hQMwSPiQ12A=";
+    makeWrapper
-      };
+  ];
-    }
-    .${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
-
-in
-stdenv.mkDerivation rec {
-  inherit pname version meta;
-
-  src = fetchurl {
-    url = "https://dl.pstmn.io/download/version/${version}/linux${dist.arch}";
-    inherit (dist) sha256;
-    name = "${pname}-${version}.tar.gz";
-  };
-
-  dontConfigure = true;
 
   desktopItems = [
     (makeDesktopItem {
@@ -90,78 +77,68 @@ stdenv.mkDerivation rec {
     })
   ];
 
-  buildInputs = [
-    (lib.getLib stdenv.cc.cc)
-    atk
-    at-spi2-atk
-    at-spi2-core
-    alsa-lib
-    cairo
-    cups
-    dbus
-    expat
-    gdk-pixbuf
-    glib
-    gtk3
-    freetype
-    fontconfig
-    libgbm
-    nss
-    nspr
-    pango
-    udev
-    libdrm
-    libsecret
-    libuuid
-    libX11
-    libxcb
-    libXi
-    libXcursor
-    libXdamage
-    libXrandr
-    libXcomposite
-    libXext
-    libXfixes
-    libXrender
-    libXtst
-    libXScrnSaver
-    libxkbcommon
-    xorg.libxshmfence
-  ];
-
-  nativeBuildInputs = [
-    wrapGAppsHook3
-    copyDesktopItems
-  ];
-
   installPhase = ''
     runHook preInstall
-    mkdir -p $out/share/postman
+
-    cp -R app/* $out/share/postman
+    mkdir -p $out/share $out/bin
+    cp --recursive app $out/share/postman
     rm $out/share/postman/Postman
-
+    makeWrapper $out/share/postman/postman $out/bin/postman \
-    mkdir -p $out/bin
+      --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto --enable-features=WaylandWindowDecorations --enable-wayland-ime=true}}" \
-    ln -s $out/share/postman/postman $out/bin/postman
+      --prefix PATH : ${lib.makeBinPath [ openssl ]}
-
-    source "${makeWrapper}/nix-support/setup-hook"
-    wrapProgram $out/bin/${pname} \
-        --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--enable-features=UseOzonePlatform --ozone-platform=wayland --enable-wayland-ime=true}}"
-
     mkdir -p $out/share/icons/hicolor/128x128/apps
     ln -s $out/share/postman/resources/app/assets/icon.png $out/share/icons/postman.png
     ln -s $out/share/postman/resources/app/assets/icon.png $out/share/icons/hicolor/128x128/apps/postman.png
+
     runHook postInstall
   '';
 
   postFixup = ''
-    pushd $out/share/postman
+    patchelf --set-interpreter ${bintools.dynamicLinker} --add-needed libGL.so.1 $out/share/postman/postman
-    patchelf --set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)" postman
+    patchelf --set-interpreter ${bintools.dynamicLinker} $out/share/postman/chrome_crashpad_handler
-    patchelf --set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)" chrome_crashpad_handler
+    for file in $(find $out/share/postman -type f \( -name \*.node -o -name postman -o -name \*.so\* \) ); do
-    for file in $(find . -type f \( -name \*.node -o -name postman -o -name \*.so\* \) ); do
+      patchelf --add-rpath "${
-      ORIGIN=$(patchelf --print-rpath $file); \
+        lib.makeLibraryPath [
-      patchelf --set-rpath "${lib.makeLibraryPath buildInputs}:$ORIGIN" $file
+          (lib.getLib stdenv.cc.cc)
+          alsa-lib
+          atk
+          at-spi2-atk
+          at-spi2-core
+          cairo
+          cups
+          curlWithGnuTls
+          dbus
+          expat
+          fontconfig
+          freetype
+          gdk-pixbuf
+          glib
+          gtk3
+          libdrm
+          libgbm
+          libGL
+          libsecret
+          libuuid
+          libX11
+          libXcomposite
+          libXcursor
+          libXdamage
+          libXext
+          libXfixes
+          libXi
+          libXrandr
+          libXrender
+          libXScrnSaver
+          libxkbcommon
+          libXtst
+          nspr
+          nss
+          pango
+          udev
+          xorg.libxcb
+          xorg.libxshmfence
+        ]
+      }" $file
     done
-    popd
-    wrapProgram $out/bin/postman --set PATH ${lib.makeBinPath [ openssl ]}
   '';
 }

pkgs/by-name/po/postman/package.nix

@@ -1,37 +1,76 @@
 {
-  stdenvNoCC,
-  callPackage,
   lib,
+  stdenvNoCC,
+  fetchurl,
+  callPackage,
 }:
 
 let
   pname = "postman";
-  version = "11.50.5";
+  version = "11.56.4";
-  meta = with lib; {
+
-    homepage = "https://www.getpostman.com";
+  src =
+    let
+      selectSystem =
+        attrs:
+        attrs.${stdenvNoCC.hostPlatform.system}
+          or (throw "Unsupported system: ${stdenvNoCC.hostPlatform.system}");
+      system = selectSystem {
+        aarch64-darwin = "osx_arm64";
+        aarch64-linux = "linuxarm64";
+        x86_64-darwin = "osx_64";
+        x86_64-linux = "linux64";
+      };
+    in
+    fetchurl {
+      name = "postman-${version}.${if stdenvNoCC.hostPlatform.isLinux then "tar.gz" else "zip"}";
+      url = "https://dl.pstmn.io/download/version/${version}/${system}";
+      hash = selectSystem {
+        aarch64-darwin = "sha256-DNhTzTul3SZSsqc3g1oOSSl1sGQ3t6FD5bbL4dMHzEk=";
+        aarch64-linux = "sha256-8CaqyMuZEcdgKfE2OxHCEAVsTFBtFDOfdHfTWASJAU4=";
+        x86_64-darwin = "sha256-cRHyqNBW/1l2VsK89ue2K+X/Uszpzu9wXg4O91Adfy4=";
+        x86_64-linux = "sha256-bwvNmcSBbwLt3kNbd05Yy2IgNHUJx7qTvDMKrGmOOi0=";
+      };
+    };
+
+  meta = {
     changelog = "https://www.postman.com/release-notes/postman-app/#${
-      replaceStrings [ "." ] [ "-" ] version
+      lib.replaceStrings [ "." ] [ "-" ] version
     }";
     description = "API Development Environment";
-    sourceProvenance = with sourceTypes; [ binaryNativeCode ];
+    homepage = "https://www.getpostman.com";
-    license = licenses.postman;
+    license = lib.licenses.postman;
-    platforms = [
+    maintainers = with lib.maintainers; [
-      "x86_64-linux"
-      "aarch64-linux"
-      "aarch64-darwin"
-      "x86_64-darwin"
-    ];
-    maintainers = with maintainers; [
-      johnrichardrinehart
-      evanjs
-      tricktron
       Crafter
+      evanjs
+      johnrichardrinehart
+      tricktron
     ];
+    platforms = [
+      "aarch64-darwin"
+      "aarch64-linux"
+      "x86_64-darwin"
+      "x86_64-linux"
+    ];
+    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
   };
-
 in
 
 if stdenvNoCC.hostPlatform.isDarwin then
-  callPackage ./darwin.nix { inherit pname version meta; }
+  callPackage ./darwin.nix {
+    inherit
+      pname
+      version
+      src
+      meta
+      ;
+  }
 else
-  callPackage ./linux.nix { inherit pname version meta; }
+  callPackage ./linux.nix {
+    inherit
+      pname
+      version
+      src
+      meta
+      ;
+  }

pkgs/by-name/py/pympress/issue-330-gprops-iter-actually-iterable.patch

@@ -0,0 +1,11 @@
+--- i/pympress/builder.py
++++ w/pympress/builder.py
+@@ -76,7 +76,7 @@ class Builder(Gtk.Builder):
+         Args:
+             a_widget (:class:`~GObject.Object`): an object built by the builder, usually a widget
+         """
+-        for str_prop in (prop.name for prop in a_widget.props if prop.value_type == GObject.TYPE_STRING):
++        for str_prop in (prop.name for prop in list(a_widget.props) if prop.value_type == GObject.TYPE_STRING):
+             try:
+                 str_val = getattr(a_widget.props, str_prop)
+                 if str_val:

pkgs/by-name/py/pympress/package.nix

@@ -30,6 +30,13 @@ python3Packages.buildPythonApplication rec {
     babel
   ];
 
+  patches = [
+    # Workaround for a bug on Python >= 3.13+ and pygobject < 3.51.
+    # This can go away once nixpkgs is using pygobject >= 3.51.
+    # See <https://github.com/Cimbali/pympress/issues/330> for details.
+    ./issue-330-gprops-iter-actually-iterable.patch
+  ];
+
   dependencies =
     with python3Packages;
     [

pkgs/by-name/ro/rosa/package.nix

@@ -11,13 +11,13 @@
 
 buildGoModule rec {
   pname = "rosa";
-  version = "1.2.54";
+  version = "1.2.55";
 
   src = fetchFromGitHub {
     owner = "openshift";
     repo = "rosa";
     rev = "v${version}";
-    hash = "sha256-mW4uwviyzGI8mMaQsnedV1vTm26ae6VSoihMzvSCAjc=";
+    hash = "sha256-IarqpS3KY6cL5Njkd14APfPcUqicNzODIZz6CiuCzIk=";
   };
   vendorHash = null;
 

pkgs/by-name/sy/sydbox/package.nix

@@ -12,7 +12,7 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "sydbox";
-  version = "3.36.0";
+  version = "3.37.2";
 
   outputs = [
     "out"
@@ -24,10 +24,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     owner = "Sydbox";
     repo = "sydbox";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-XGZHUMVTJLlWIwgEqVCMoHDoDkzkFAdTvOOtMtCAw98=";
+    hash = "sha256-XV3eB6XGDwoJK+wpfuARV7F4OqZJfoAqDmsYS8D2AK4=";
   };
 
-  cargoHash = "sha256-+NI1poeMXMlR9rafmGKu6i6iFORe2IGVVPj08MP8g3o=";
+  cargoHash = "sha256-uIcF4mzIYOgSfQVFl6kh3337AmdVFDDXIMXtVCqcoXg=";
 
   nativeBuildInputs = [
     mandoc

pkgs/by-name/un/unifi/package.nix

@@ -10,12 +10,12 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "unifi-controller";
-  version = "9.3.43";
+  version = "9.3.45";
 
   # see https://community.ui.com/releases / https://www.ui.com/download/unifi
   src = fetchurl {
     url = "https://dl.ui.com/unifi/${finalAttrs.version}/unifi_sysvinit_all.deb";
-    hash = "sha256-KpjPLiN8HJT3jXaQgybn6y8NCGwTR7jm0oOsudbphSM=";
+    hash = "sha256-9gpXY9+XiUnpyRuMdvXGkbiqJ3SlJ6PZ7k1Rj5pbFqs=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/wa/wayland-bongocat/package.nix

@@ -9,12 +9,12 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "wayland-bongocat";
-  version = "1.2.1";
+  version = "1.2.2";
   src = fetchFromGitHub {
     owner = "saatvik333";
     repo = "wayland-bongocat";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-mtbw4UW5I2et2cVWrkCKWbG0p3tDGhgmHfH60OHvPkI=";
+    hash = "sha256-7IsWg0VE6Sqo0elOAUicmWGasXrvBeGeBRP/mDVgfzI=";
   };
 
   # Package dependencies

pkgs/development/interpreters/emilua/default.nix

@@ -29,13 +29,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "emilua";
-  version = "0.11.6";
+  version = "0.11.7";
 
   src = fetchFromGitLab {
     owner = "emilua";
     repo = "emilua";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-r/WfRAr8AgnZGHxzcZVLg5MHDwcOTMWqOv/Qu/75Y1c=";
+    hash = "sha256-c+X8HD/G75XD54Fs89DSkebLDd7h12Bk45+w7VBUXPY=";
   };
 
   propagatedBuildInputs = [

pkgs/development/python-modules/langsmith/default.nix

@@ -21,6 +21,7 @@
   fastapi,
   freezegun,
   instructor,
+  opentelemetry-sdk,
   pytest-asyncio,
   pytest-vcr,
   pytestCheckHook,
@@ -30,14 +31,14 @@
 
 buildPythonPackage rec {
   pname = "langsmith";
-  version = "0.3.45";
+  version = "0.4.9";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "langchain-ai";
     repo = "langsmith-sdk";
     tag = "v${version}";
-    hash = "sha256-uR3Uukt8LwoBKBcgyX2srK0C6O04IEECe/cFhBQFO2s=";
+    hash = "sha256-7XV85/IN1hG9hYBSg73pymIwIWYAay/18NAsV6Jz4Ik=";
   };
 
   sourceRoot = "${src.name}/python";
@@ -61,6 +62,7 @@ buildPythonPackage rec {
     fastapi
     freezegun
     instructor
+    opentelemetry-sdk
     pytest-asyncio
     pytest-vcr
     pytestCheckHook

pkgs/kde/third-party/krohnkite/default.nix

@@ -10,13 +10,13 @@
 }:
 buildNpmPackage (finalAttrs: {
   pname = "krohnkite";
-  version = "0.9.9.1";
+  version = "0.9.9.2";
 
   src = fetchFromGitHub {
     owner = "anametologin";
     repo = "krohnkite";
     tag = finalAttrs.version;
-    hash = "sha256-Famg/g+Qwux4dZa6+CMKP6dDHNHNvJDKTsWQDukHHGk=";
+    hash = "sha256-gulKg23BeWL270B2omRYJIuAHIsKu1cBVpimgButM9I=";
   };
 
   npmDepsHash = "sha256-Q/D6s0wOPSEziE1dBXgTakjhXCGvzhvLVS7zXcZlPCI=";

pkgs/tools/misc/steampipe-packages/steampipe-plugin-aws/default.nix

@@ -8,16 +8,16 @@
 
 buildGoModule rec {
   pname = "steampipe-plugin-aws";
-  version = "1.19.0";
+  version = "1.21.0";
 
   src = fetchFromGitHub {
     owner = "turbot";
     repo = "steampipe-plugin-aws";
     tag = "v${version}";
-    hash = "sha256-LbaW6a2eR1U8y82CCm0pXbzl0YyqIAqdrjraFgiNsW8=";
+    hash = "sha256-RgdQZ3ifJamHVA/+ZZw7FpXZ1x5DejLnE4Edc00cUyQ=";
   };
 
-  vendorHash = "sha256-qRTcntW+CaDlBjcBWCocey8bAgCrar6ityuaK2AgTbY=";
+  vendorHash = "sha256-3v8gSA0QXT3FmQSRcL8KV53ieNymCgtcxoeNlkP/FLM=";
 
   ldflags = [
     "-s"