From 6ad26e39e09f5700805f9ad3cf71c2c83222d474 Mon Sep 17 00:00:00 2001
From: Samuel Ainsworth <skainsworth@gmail.com>
Date: Sun, 21 Dec 2025 15:03:02 -0500
Subject: [PATCH 01/48] mkchromecast-unstable: 2022-10-31 -> 2025-06-01

Updates mkchromecast to the latest commit and migrates from youtube-dl to
yt-dlp. Includes a patch from upstream PR #480 to update README
documentation to reflect the yt-dlp migration.
---
 .../networking/mkchromecast/default.nix       | 20 ++++++++++++++-----
 1 file changed, 15 insertions(+), 5 deletions(-)

diff --git a/pkgs/applications/networking/mkchromecast/default.nix b/pkgs/applications/networking/mkchromecast/default.nix
index 03b835b042c4..fe78d600b9ab 100644
--- a/pkgs/applications/networking/mkchromecast/default.nix
+++ b/pkgs/applications/networking/mkchromecast/default.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch2,
   python3Packages,
   sox,
   flac,
@@ -11,7 +12,7 @@
   vorbis-tools,
   pulseaudio,
   nodejs,
-  youtube-dl,
+  yt-dlp,
   opusTools,
   gst_all_1,
   enableSonos ? true,
@@ -27,23 +28,32 @@ let
     gst_all_1.gstreamer
     nodejs
     ffmpeg
-    youtube-dl
+    yt-dlp
   ]
   ++ lib.optionals stdenv.hostPlatform.isLinux [ pulseaudio ];
 
 in
 python3Packages.buildPythonApplication {
   pname = "mkchromecast-unstable";
-  version = "2022-10-31";
+  version = "2025-06-01";
   format = "setuptools";
 
   src = fetchFromGitHub {
     owner = "muammar";
     repo = "mkchromecast";
-    rev = "0de9fd78c4122dec4f184aeae2564790b45fe6dc";
-    sha256 = "sha256-dxsIcBPrZaXlsfzOEXhYj2qoK5LRducJG2ggMrMMl9Y=";
+    rev = "6e583366ae23b56a33c1ad4ca164e04d64174538";
+    hash = "sha256-CtmOkQAqUNn7+59mWEfAsgtWmGcXD3eE9j2t3sLnXms=";
   };
 
+  patches = [
+    # Update README to use yt-dlp instead of youtube-dl
+    # https://github.com/muammar/mkchromecast/pull/480
+    (fetchpatch2 {
+      url = "https://github.com/muammar/mkchromecast/commit/0a0eec9bf4a6c000c828b83a864cebe18ce64c2b.patch";
+      hash = "sha256-sLzL2/HDYfO0+N8v8aJX3dl7LBSE5yWa0zR89dZkg84=";
+    })
+  ];
+
   buildInputs = lib.optional stdenv.hostPlatform.isLinux qtwayland;
   propagatedBuildInputs =
     with python3Packages;

From 91114c6143e11cb6e98d55038ed4a0dbed26d4c5 Mon Sep 17 00:00:00 2001
From: Samuel Ainsworth <skainsworth@gmail.com>
Date: Mon, 22 Dec 2025 00:23:38 -0500
Subject: [PATCH 02/48] mkchromecast-unstable: 2022-10-31 -> 2025-12-21

---
 .../networking/mkchromecast/default.nix          | 16 +++-------------
 1 file changed, 3 insertions(+), 13 deletions(-)

diff --git a/pkgs/applications/networking/mkchromecast/default.nix b/pkgs/applications/networking/mkchromecast/default.nix
index fe78d600b9ab..4faad8ccaaec 100644
--- a/pkgs/applications/networking/mkchromecast/default.nix
+++ b/pkgs/applications/networking/mkchromecast/default.nix
@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  fetchpatch2,
   python3Packages,
   sox,
   flac,
@@ -35,25 +34,16 @@ let
 in
 python3Packages.buildPythonApplication {
   pname = "mkchromecast-unstable";
-  version = "2025-06-01";
+  version = "2025-12-21";
   format = "setuptools";
 
   src = fetchFromGitHub {
     owner = "muammar";
     repo = "mkchromecast";
-    rev = "6e583366ae23b56a33c1ad4ca164e04d64174538";
-    hash = "sha256-CtmOkQAqUNn7+59mWEfAsgtWmGcXD3eE9j2t3sLnXms=";
+    rev = "9cdc5f3f9060ef4078522366ce896356515d8e52";
+    hash = "sha256-UMzOIxgeTpAFQZtYirOYPoVcKgiKdGx2zwVyWmo32w4=";
   };
 
-  patches = [
-    # Update README to use yt-dlp instead of youtube-dl
-    # https://github.com/muammar/mkchromecast/pull/480
-    (fetchpatch2 {
-      url = "https://github.com/muammar/mkchromecast/commit/0a0eec9bf4a6c000c828b83a864cebe18ce64c2b.patch";
-      hash = "sha256-sLzL2/HDYfO0+N8v8aJX3dl7LBSE5yWa0zR89dZkg84=";
-    })
-  ];
-
   buildInputs = lib.optional stdenv.hostPlatform.isLinux qtwayland;
   propagatedBuildInputs =
     with python3Packages;

From 367d99d54c0432c0d182d4aa1c089f37f5acf198 Mon Sep 17 00:00:00 2001
From: Markus Kowalewski <markus.kowalewski@gmail.com>
Date: Fri, 26 Dec 2025 15:51:57 +0100
Subject: [PATCH 03/48] slurm: 25.05.3.1 -> 25.11.1.1

---
 pkgs/by-name/sl/slurm/package.nix | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/sl/slurm/package.nix b/pkgs/by-name/sl/slurm/package.nix
index 047c39b11bfc..9c775ad623fd 100644
--- a/pkgs/by-name/sl/slurm/package.nix
+++ b/pkgs/by-name/sl/slurm/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch,
   runCommand,
   config,
   pkg-config,
@@ -41,7 +42,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "slurm";
-  version = "25.05.3.1";
+  version = "25.11.1.1";
 
   # N.B. We use github release tags instead of https://www.schedmd.com/downloads.php
   # because the latter does not keep older releases.
@@ -50,7 +51,7 @@ stdenv.mkDerivation (finalAttrs: {
     repo = "slurm";
     # The release tags use - instead of .
     rev = "slurm-${builtins.replaceStrings [ "." ] [ "-" ] finalAttrs.version}";
-    hash = "sha256-W/q9eN4Ov3pxp2qyr3b7G4ayDaNtFUPQeAcOHCB23Q8=";
+    hash = "sha256-Hv0rqogwZH5GafwlELghAbKLwurd8x30u9DJZylBQP0=";
   };
 
   outputs = [
@@ -58,6 +59,15 @@ stdenv.mkDerivation (finalAttrs: {
     "dev"
   ];
 
+  patches = [
+    # upstream patch; remove with next upgrade.
+    (fetchpatch {
+      name = "pmix-509-compatability.patch";
+      url = "https://github.com/SchedMD/slurm/commit/be063f0c646d2bfe10d358fa7063f2b64e19e063.patch";
+      hash = "sha256-QbKMBMl+VTLrzdXhPtcqwC7OcAXcJBxDS8jRZ2EoJL4=";
+    })
+  ];
+
   prePatch = ''
     substituteInPlace src/common/env.c \
         --replace "/bin/echo" "${lib.getExe' coreutils "echo"}"

From e08163e0ceed488a60835741d59f5a586fdbb592 Mon Sep 17 00:00:00 2001
From: Moraxyc <i@qaq.li>
Date: Sun, 28 Dec 2025 00:48:20 +0800
Subject: [PATCH 04/48] afterstep: fix build with c23

---
 .../af/afterstep/fix-build-with-c23.patch     | 81 +++++++++++++++++++
 pkgs/by-name/af/afterstep/package.nix         |  6 ++
 2 files changed, 87 insertions(+)
 create mode 100644 pkgs/by-name/af/afterstep/fix-build-with-c23.patch

diff --git a/pkgs/by-name/af/afterstep/fix-build-with-c23.patch b/pkgs/by-name/af/afterstep/fix-build-with-c23.patch
new file mode 100644
index 000000000000..f68a636af50c
--- /dev/null
+++ b/pkgs/by-name/af/afterstep/fix-build-with-c23.patch
@@ -0,0 +1,81 @@
+From 081d9c3284075c65b70837079bd67621c3b64da7 Mon Sep 17 00:00:00 2001
+From: Moraxyc <i@qaq.li>
+Date: Sun, 28 Dec 2025 00:39:49 +0800
+Subject: [PATCH] fix build with c23
+
+---
+ libAfterBase/fs.c       | 2 +-
+ src/ASDocGen/ASDocGen.c | 2 +-
+ src/Ident/Ident.c       | 2 +-
+ src/afterstep/dirtree.c | 2 +-
+ src/afterstep/menus.h   | 2 +-
+ 5 files changed, 5 insertions(+), 5 deletions(-)
+
+diff --git a/libAfterBase/fs.c b/libAfterBase/fs.c
+index 731bfd3..954bfd6 100644
+--- a/libAfterBase/fs.c
++++ b/libAfterBase/fs.c
+@@ -818,7 +818,7 @@ my_scandir (char *dirname, struct direntry *(*namelist[]),
+ 	}
+ 	/* Optionally sort the list */
+ 	if (dcomp)
+-		qsort (*namelist, n, sizeof (struct direntry *), (int (*)())dcomp);
++		qsort (*namelist, n, sizeof (struct direntry *), (int (*)(const void *, const void *))dcomp);
+ 
+ 	/* Return the count of the entries */
+ 	return n;
+diff --git a/src/ASDocGen/ASDocGen.c b/src/ASDocGen/ASDocGen.c
+index 31d7a70..9a86219 100644
+--- a/src/ASDocGen/ASDocGen.c
++++ b/src/ASDocGen/ASDocGen.c
+@@ -667,7 +667,7 @@ write_options_keywords(const char *source_dir, const char *syntax_dir, SyntaxDef
+ 	sorted_list = safecalloc( max_i, sizeof(TermDef*));
+ 	for (i = 0; i < max_i; i++)
+ 		sorted_list[i] = &(syntax->terms[i]) ; 
+-	qsort(sorted_list, max_i, sizeof(TermDef*), (int (*)())sort_terms_by_alpha );
++	qsort(sorted_list, max_i, sizeof(TermDef*), (int (*)(const void *, const void *))sort_terms_by_alpha );
+ 	for (i = 0; i < max_i; i++)
+ 	{	
+ 		SyntaxDef *sub_syntax = sorted_list[i]->sub_syntax ; 
+diff --git a/src/Ident/Ident.c b/src/Ident/Ident.c
+index 1497d06..d6ddad6 100644
+--- a/src/Ident/Ident.c
++++ b/src/Ident/Ident.c
+@@ -89,7 +89,7 @@ void HandleEvents();
+ void DispatchEvent (ASEvent * event);
+ void process_message (send_data_type type, send_data_type *body);
+ 
+-Window make_ident_window();
++Window make_ident_window(int width, int height);
+ void fill_window_data();
+ void display_window_data();
+ void add_property( const char *name, const char *value, unsigned long value_encoding, Bool span_cols );
+diff --git a/src/afterstep/dirtree.c b/src/afterstep/dirtree.c
+index 46ce782..48f7e30 100644
+--- a/src/afterstep/dirtree.c
++++ b/src/afterstep/dirtree.c
+@@ -675,7 +675,7 @@ void dirtree_sort (dirtree_t * tree)
+ 	list = (dirtree_t **) safemalloc (n * sizeof (dirtree_t *));
+ 	for (n = 0, t = tree->child; t != NULL; t = t->next, n++)
+ 		list[n] = t;
+-	qsort (list, n, sizeof (dirtree_t *), (int (*)())dirtree_compar);
++	qsort (list, n, sizeof (dirtree_t *), (int (*)(const void *, const void *))dirtree_compar);
+ 	tree->child = list[0];
+ 	for (i = 1; i < n; i++)
+ 		list[i - 1]->next = list[i];
+diff --git a/src/afterstep/menus.h b/src/afterstep/menus.h
+index 98b2ad3..bb2a5b1 100644
+--- a/src/afterstep/menus.h
++++ b/src/afterstep/menus.h
+@@ -95,7 +95,7 @@ MenuData* FindPopup( const char* name, int quiet );
+ 
+ void DeleteMenuItem( MenuDataItem* item );
+ 
+-MenuData *CreateMenuData();
++MenuData *CreateMenuData(char *name);
+ MenuData *NewMenuData (char *name);
+ void DeleteMenuData (MenuData * menu);
+ 
+-- 
+2.51.2
+
diff --git a/pkgs/by-name/af/afterstep/package.nix b/pkgs/by-name/af/afterstep/package.nix
index 8cf78b248fa2..f7b4e1634e4e 100644
--- a/pkgs/by-name/af/afterstep/package.nix
+++ b/pkgs/by-name/af/afterstep/package.nix
@@ -36,6 +36,12 @@ stdenv.mkDerivation (finalAttrs: {
       url = "https://github.com/afterstep/afterstep/commit/5e9e897cf8c455390dd6f5b27fec49707f6b9088.patch";
       hash = "sha256-aGMTyojzXEHGjO9lMT6dwLl01Fd333BUuCIX0FU9ac4=";
     })
+
+    # fix build with c23
+    #   fs.c:821:66: error: passing argument 4 of 'qsort' from incompatible pointer type [-Wincompatible-pointer-types]
+    #   Ident.c:326:1: error: conflicting types for 'make_ident_window'; have 'Window(int,  int)' {aka 'long unsigned int(int,  int)'}
+    #   menuitem.c:85:11: error: conflicting types for 'CreateMenuData'; have 'MenuData *(char *)'
+    ./fix-build-with-c23.patch
   ];
 
   postPatch = ''

From 5710b82c565619b221d1fc45413721873544e245 Mon Sep 17 00:00:00 2001
From: sternenseemann <sternenseemann@systemli.org>
Date: Sun, 28 Dec 2025 12:44:21 +0100
Subject: [PATCH 05/48] haskell.compiler.ghcHEAD: 9.15.20250811 ->
 9.15.20251225

---
 pkgs/development/compilers/ghc/head.nix               |  6 +++---
 .../haskell-modules/configuration-ghc-9.16.x.nix      |  2 ++
 pkgs/top-level/haskell-packages.nix                   | 11 ++---------
 3 files changed, 7 insertions(+), 12 deletions(-)

diff --git a/pkgs/development/compilers/ghc/head.nix b/pkgs/development/compilers/ghc/head.nix
index 2ea294a8b129..e343cd33cef8 100644
--- a/pkgs/development/compilers/ghc/head.nix
+++ b/pkgs/development/compilers/ghc/head.nix
@@ -1,5 +1,5 @@
 import ./common-hadrian.nix {
-  version = "9.15.20250811";
-  rev = "c8d76a2994b8620c54adc2069f4728135d6b5059";
-  sha256 = "001rf9z5a1v2xpm9qjzz2p966m5bxmqcnykq0xgb3qf40vi9rnh4";
+  version = "9.15.20251225";
+  rev = "a3afae0c85fa57479378a5df5bbde2e3a8da8a06";
+  sha256 = "sha256-inZFFKnCb8C7RTlKP2bnHOLfc1GveGi6Wy0uAaLv1Kk=";
 }
diff --git a/pkgs/development/haskell-modules/configuration-ghc-9.16.x.nix b/pkgs/development/haskell-modules/configuration-ghc-9.16.x.nix
index 2a09d3f258c0..625165fd46a0 100644
--- a/pkgs/development/haskell-modules/configuration-ghc-9.16.x.nix
+++ b/pkgs/development/haskell-modules/configuration-ghc-9.16.x.nix
@@ -45,6 +45,8 @@ self: super: {
   stm = null;
   system-cxx-std-lib = null;
   template-haskell = null;
+  template-haskell-lift = null;
+  template-haskell-quasiquoter = null;
   terminfo = null;
   text = null;
   time = null;
diff --git a/pkgs/top-level/haskell-packages.nix b/pkgs/top-level/haskell-packages.nix
index bb2248b269bd..f715d27360e3 100644
--- a/pkgs/top-level/haskell-packages.nix
+++ b/pkgs/top-level/haskell-packages.nix
@@ -190,15 +190,8 @@ in
       ghc914 = compiler.ghc9141;
       ghcHEAD = callPackage ../development/compilers/ghc/head.nix {
         bootPkgs =
-          if
-            stdenv.buildPlatform.isPower64
-            && stdenv.buildPlatform.isBigEndian
-            && pkgs.stdenv.hostPlatform.isAbiElfv1
-          then
-            # No bindist, using older source-built GHC
-            bb.packages.ghc910
-          else
-            bb.packages.ghc984Binary;
+          # No suitable bindist packaged yet
+          bb.packages.ghc910;
         inherit (buildPackages.python3Packages) sphinx;
         inherit (buildPackages.darwin) xattr autoSignDarwinBinariesHook;
         inherit buildTargetLlvmPackages llvmPackages;

From 9add9fd23cd87cf3db3d188ceeab37953d555b91 Mon Sep 17 00:00:00 2001
From: Felix Buehler <account@buehler.rocks>
Date: Sat, 27 Dec 2025 17:35:22 +0100
Subject: [PATCH 06/48] freshrss-extensions.unsafe-auto-login: init

---
 .../web-apps/freshrss/extensions/default.nix  | 20 ++++++++++++++++---
 1 file changed, 17 insertions(+), 3 deletions(-)

diff --git a/pkgs/servers/web-apps/freshrss/extensions/default.nix b/pkgs/servers/web-apps/freshrss/extensions/default.nix
index fc8176049fb8..8b3d2831e471 100644
--- a/pkgs/servers/web-apps/freshrss/extensions/default.nix
+++ b/pkgs/servers/web-apps/freshrss/extensions/default.nix
@@ -9,12 +9,12 @@
 let
   buildFreshRssExtension = (callPackage ./freshrss-utils.nix { }).buildFreshRssExtension;
 
-  official_extensions_version = "unstable-2024-04-27";
+  official_extensions_version = "unstable-2025-12-26";
   official_extensions_src = fetchFromGitHub {
     owner = "FreshRSS";
     repo = "Extensions";
-    rev = "71de129744ba37fd4cf363b78445f5345bc6d0b7";
-    hash = "sha256-A+hOjbGNfhwTOAMeo08MUdqfWxxetzLz865oQQDsQlg=";
+    rev = "42c32bfd9af2d816933cf310e24d25888a8e167d";
+    hash = "sha256-El488QK3xWQM01GsuyBizud6VghXsRDqiOblnMfjVxE=";
   };
 
   baseExtensions =
@@ -107,6 +107,20 @@ let
         };
       };
 
+      unsafe-auto-login = buildFreshRssExtension {
+        FreshRssExtUniqueId = "UnsafeAutologin";
+        pname = "unsafe-auto-login";
+        version = official_extensions_version;
+        src = official_extensions_src;
+        sourceRoot = "${official_extensions_src.name}/xExtension-UnsafeAutologin";
+        meta = {
+          description = "FreshRSS extension to bring back unsafe autologin functionality.";
+          homepage = "https://github.com/FreshRSS/Extensions/tree/master/xExtension-UnsafeAutologin";
+          license = lib.licenses.agpl3Only;
+          maintainers = [ lib.maintainers.stunkymonkey ];
+        };
+      };
+
       youtube = buildFreshRssExtension {
         FreshRssExtUniqueId = "YouTube";
         pname = "youtube";

From 84e6934ef30ef34ac61a5731c4a0583032ae8516 Mon Sep 17 00:00:00 2001
From: Felix Buehler <account@buehler.rocks>
Date: Sun, 28 Dec 2025 18:26:14 +0100
Subject: [PATCH 07/48] nixosTests.freshrss: improve tests

---
 nixos/tests/freshrss/caddy-sqlite.nix | 2 +-
 nixos/tests/freshrss/extensions.nix   | 9 +++++----
 nixos/tests/freshrss/http-auth.nix    | 2 +-
 nixos/tests/freshrss/nginx-sqlite.nix | 2 +-
 nixos/tests/freshrss/none-auth.nix    | 2 +-
 nixos/tests/freshrss/pgsql.nix        | 2 +-
 6 files changed, 10 insertions(+), 9 deletions(-)

diff --git a/nixos/tests/freshrss/caddy-sqlite.nix b/nixos/tests/freshrss/caddy-sqlite.nix
index 3c2e60e5e3bb..ebee8a06446d 100644
--- a/nixos/tests/freshrss/caddy-sqlite.nix
+++ b/nixos/tests/freshrss/caddy-sqlite.nix
@@ -22,7 +22,7 @@
   testScript = ''
     machine.wait_for_unit("multi-user.target")
     machine.wait_for_open_port(80)
-    response = machine.succeed("curl -vvv -s -H 'Host: freshrss' http://localhost:80/i/")
+    response = machine.succeed("curl --fail-with-body --silent --header 'Host: freshrss' http://localhost:80/i/")
     assert '<title>Login · FreshRSS</title>' in response, "Login page didn't load successfully"
   '';
 }
diff --git a/nixos/tests/freshrss/extensions.nix b/nixos/tests/freshrss/extensions.nix
index bf624a6041b6..cbb033df4162 100644
--- a/nixos/tests/freshrss/extensions.nix
+++ b/nixos/tests/freshrss/extensions.nix
@@ -20,17 +20,18 @@
   ];
 
   testScript = ''
+    from lxml import etree
+
     machine.wait_for_unit("multi-user.target")
     machine.wait_for_open_port(80)
-    response = machine.succeed("curl -s http://localhost:80/i/?c=extension")
+    response = machine.succeed("curl --fail-with-body --silent http://localhost:80/i/?c=extension")
     assert '<span class="ext_name disabled">YouTube Video Feed</span>' in response, "Extension not present in extensions page."
 
     # enable Title-Wrap extension
-    from lxml import etree
     tree = etree.HTML(response)
     csrf = tree.xpath("/html/body/header/nav/form/input/@value")[0]
-    response = machine.succeed(f"curl --fail-with-body -s 'http://localhost:80/i/?c=extension&a=enable&e=Title-Wrap' -d '_csrf={csrf}'")
+    machine.succeed(f"curl --fail-with-body --silent 'http://localhost:80/i/?c=extension&a=enable&e=Title-Wrap' -d '_csrf={csrf}'")
     # verify that the Title-Wrap css is accessible.
-    machine.succeed("curl --fail-with-body -s 'http://localhost:80/ext.php?1=&f=xExtension-TitleWrap/static/title_wrap.css'")
+    machine.succeed("curl --fail-with-body --silent 'http://localhost:80/ext.php?1=&f=xExtension-TitleWrap/static/title_wrap.css'")
   '';
 }
diff --git a/nixos/tests/freshrss/http-auth.nix b/nixos/tests/freshrss/http-auth.nix
index 1f6fd1ad8e7d..c506e168bfd2 100644
--- a/nixos/tests/freshrss/http-auth.nix
+++ b/nixos/tests/freshrss/http-auth.nix
@@ -15,7 +15,7 @@
   testScript = ''
     machine.wait_for_unit("multi-user.target")
     machine.wait_for_open_port(80)
-    response = machine.succeed("curl -vvv -s -H 'Host: freshrss' -H 'Remote-User: testuser' http://localhost:80/i/")
+    response = machine.succeed("curl --fail-with-body --silent -H 'Remote-User: testuser' http://localhost:80/i/")
     assert 'Account: testuser' in response, "http_auth method didn't work."
   '';
 }
diff --git a/nixos/tests/freshrss/nginx-sqlite.nix b/nixos/tests/freshrss/nginx-sqlite.nix
index c8097465d8cd..9c025523ea6d 100644
--- a/nixos/tests/freshrss/nginx-sqlite.nix
+++ b/nixos/tests/freshrss/nginx-sqlite.nix
@@ -20,7 +20,7 @@
   testScript = ''
     machine.wait_for_unit("multi-user.target")
     machine.wait_for_open_port(80)
-    response = machine.succeed("curl -vvv -s -H 'Host: freshrss' http://localhost:80/i/")
+    response = machine.succeed("curl --fail-with-body --silent http://localhost:80/i/")
     assert '<title>Login · FreshRSS</title>' in response, "Login page didn't load successfully"
   '';
 }
diff --git a/nixos/tests/freshrss/none-auth.nix b/nixos/tests/freshrss/none-auth.nix
index 77d636f88071..b87da4522538 100644
--- a/nixos/tests/freshrss/none-auth.nix
+++ b/nixos/tests/freshrss/none-auth.nix
@@ -14,7 +14,7 @@
   testScript = ''
     machine.wait_for_unit("multi-user.target")
     machine.wait_for_open_port(80)
-    response = machine.succeed("curl -vvv -s http://localhost:80/i/")
+    response = machine.succeed("curl --fail-with-body --silent http://localhost:80/i/")
     assert '<title> · FreshRSS</title>' in response, "FreshRSS stream page didn't load successfully"
   '';
 }
diff --git a/nixos/tests/freshrss/pgsql.nix b/nixos/tests/freshrss/pgsql.nix
index 5fceb98b0efb..ec9864499fad 100644
--- a/nixos/tests/freshrss/pgsql.nix
+++ b/nixos/tests/freshrss/pgsql.nix
@@ -46,7 +46,7 @@
     machine.wait_for_unit("multi-user.target")
     machine.wait_for_open_port(5432)
     machine.wait_for_open_port(80)
-    response = machine.succeed("curl -vvv -s -H 'Host: freshrss' http://localhost:80/i/")
+    response = machine.succeed("curl --fail-with-body --silent http://localhost:80/i/")
     assert '<title>Login · FreshRSS</title>' in response, "Login page didn't load successfully"
   '';
 }

From aa6673bacf2f47b6ef4fe7ad6c66ab0edaf2082b Mon Sep 17 00:00:00 2001
From: Felix Buehler <account@buehler.rocks>
Date: Sun, 28 Dec 2025 20:39:50 +0100
Subject: [PATCH 08/48] nixos/freshrss: improve script generation

---
 nixos/modules/services/web-apps/freshrss.nix | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/nixos/modules/services/web-apps/freshrss.nix b/nixos/modules/services/web-apps/freshrss.nix
index 758807b3c9b8..2544bd846424 100644
--- a/nixos/modules/services/web-apps/freshrss.nix
+++ b/nixos/modules/services/web-apps/freshrss.nix
@@ -357,15 +357,15 @@ in
 
           script =
             let
+              isUserAuth = cfg.authType == "form" || cfg.authType == "none";
+
               userScriptArgs = ''--user ${cfg.defaultUser} ${
                 optionalString (cfg.authType == "form") ''--password "$(cat ${cfg.passwordFile})"''
               }'';
-              updateUserScript = optionalString (cfg.authType == "form" || cfg.authType == "none") ''
-                ./cli/update-user.php ${userScriptArgs}
-              '';
-              createUserScript = optionalString (cfg.authType == "form" || cfg.authType == "none") ''
-                ./cli/create-user.php ${userScriptArgs}
-              '';
+              mkUserScript = name: optionalString isUserAuth ''./cli/${name}.php ${userScriptArgs}'';
+
+              updateUserScript = mkUserScript "update-user";
+              createUserScript = mkUserScript "create-user";
             in
             ''
               # do installation or reconfigure

From a3606a188a945fbf931fb7385e407586a9387e6d Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Mon, 29 Dec 2025 11:22:25 +0100
Subject: [PATCH 09/48] python313Packages.publicsuffixlist: 1.0.2.20251223 ->
 1.0.2.20251229

Changelog: https://github.com/ko-zu/psl/blob/v1.0.2.20251229-gha/CHANGES.md
---
 pkgs/development/python-modules/publicsuffixlist/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/publicsuffixlist/default.nix b/pkgs/development/python-modules/publicsuffixlist/default.nix
index 3ca1f494841e..2a04d326b1d2 100644
--- a/pkgs/development/python-modules/publicsuffixlist/default.nix
+++ b/pkgs/development/python-modules/publicsuffixlist/default.nix
@@ -11,12 +11,12 @@
 
 buildPythonPackage rec {
   pname = "publicsuffixlist";
-  version = "1.0.2.20251223";
+  version = "1.0.2.20251229";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-ENje3AleagrKul/SGRvjUG04nBuucap675+HW2oXigo=";
+    hash = "sha256-v+BeApvsCqf4QNaN+b+6oYyKz7/KUSRf8fgIFcYIz/4=";
   };
 
   postPatch = ''

From ecadc75c209d18cf975a6a1bff94168a760a9205 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Mon, 29 Dec 2025 11:26:18 +0100
Subject: [PATCH 10/48] python313Packages.adax-local: 0.2.0 -> 0.3.0

Changelog: https://github.com/Danielhiversen/pyAdaxLocal/releases/tag/0.3.0
---
 pkgs/development/python-modules/adax-local/default.nix | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/adax-local/default.nix b/pkgs/development/python-modules/adax-local/default.nix
index 62f9a37d1072..0dea9d257e5f 100644
--- a/pkgs/development/python-modules/adax-local/default.nix
+++ b/pkgs/development/python-modules/adax-local/default.nix
@@ -2,6 +2,7 @@
   lib,
   aiohttp,
   bleak,
+  bleak-retry-connector,
   buildPythonPackage,
   fetchFromGitHub,
   async-timeout,
@@ -10,14 +11,14 @@
 
 buildPythonPackage rec {
   pname = "adax-local";
-  version = "0.2.0";
+  version = "0.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Danielhiversen";
     repo = "pyAdaxLocal";
     tag = version;
-    hash = "sha256-HdhatjlN4oUzBV1cf/PfgOJbEks4KBdw4vH8Y/z6efQ=";
+    hash = "sha256-8gVpUYQoE4V3ATR6zFAz/sARyEmHu9lYyGchTpS1eX8=";
   };
 
   build-system = [ setuptools ];
@@ -25,6 +26,7 @@ buildPythonPackage rec {
   dependencies = [
     aiohttp
     bleak
+    bleak-retry-connector
     async-timeout
   ];
 

From 37fc9cfae2d32520d11beb3ff2ac772657d8f17d Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Mon, 29 Dec 2025 13:59:58 +0100
Subject: [PATCH 11/48] python313Packages.numdifftools: 0.9.41 -> 0.9.42

Changelog: https://github.com/pbrod/numdifftools/blob/v0.9.42/CHANGELOG.md
---
 .../python-modules/numdifftools/default.nix   | 26 +++++++------------
 1 file changed, 9 insertions(+), 17 deletions(-)

diff --git a/pkgs/development/python-modules/numdifftools/default.nix b/pkgs/development/python-modules/numdifftools/default.nix
index 316a17e58caf..4bdc3bde6feb 100644
--- a/pkgs/development/python-modules/numdifftools/default.nix
+++ b/pkgs/development/python-modules/numdifftools/default.nix
@@ -3,25 +3,25 @@
   buildPythonPackage,
   fetchFromGitHub,
   numpy,
-  pythonOlder,
   scipy,
+  pdm-backend,
 }:
 
 buildPythonPackage rec {
   pname = "numdifftools";
-  version = "0.9.41";
-  format = "setuptools";
-
-  disabled = pythonOlder "3.7";
+  version = "0.9.42";
+  pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pbrod";
     repo = "numdifftools";
-    rev = "v${version}";
-    hash = "sha256-HYacLaowSDdrwkxL1h3h+lw/8ahzaecpXEnwrCqMCWk=";
+    tag = "v${version}";
+    hash = "sha256-tNPv+KJuSmMHItHfRUjMIFtAFB+vC530sp+Am0VRG44=";
   };
 
-  propagatedBuildInputs = [
+  build-system = [ pdm-backend ];
+
+  dependencies = [
     numpy
     scipy
   ];
@@ -29,20 +29,12 @@ buildPythonPackage rec {
   # Tests requires algopy and other modules which are optional and/or not available
   doCheck = false;
 
-  postPatch = ''
-    substituteInPlace setup.py \
-      --replace '"pytest-runner"' ""
-    # Remove optional dependencies
-    substituteInPlace requirements.txt \
-      --replace "algopy>=0.4" "" \
-      --replace "statsmodels>=0.6" ""
-  '';
-
   pythonImportsCheck = [ "numdifftools" ];
 
   meta = {
     description = "Library to solve automatic numerical differentiation problems in one or more variables";
     homepage = "https://github.com/pbrod/numdifftools";
+    changelog = "https://github.com/pbrod/numdifftools/blob/${src.tag}/CHANGELOG.md";
     license = lib.licenses.bsd3;
     maintainers = with lib.maintainers; [ fab ];
   };

From d533b92464709a1264d210e6b2432b768dbf12a9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Mon, 29 Dec 2025 05:09:45 -0800
Subject: [PATCH 12/48] python3Packages.coverage: 7.13.0 -> 7.13.1

Diff: https://github.com/coveragepy/coveragepy/compare/7.13.0...7.13.1

Changelog: https://github.com/coveragepy/coveragepy/blob/7.13.1/CHANGES.rst
---
 .../python-modules/coverage/default.nix       | 32 ++-----------------
 1 file changed, 2 insertions(+), 30 deletions(-)

diff --git a/pkgs/development/python-modules/coverage/default.nix b/pkgs/development/python-modules/coverage/default.nix
index 61ca6abc8c44..36d367e81759 100644
--- a/pkgs/development/python-modules/coverage/default.nix
+++ b/pkgs/development/python-modules/coverage/default.nix
@@ -4,7 +4,6 @@
   buildPythonPackage,
   isPy312,
   fetchFromGitHub,
-  fetchpatch,
   flaky,
   hypothesis,
   pytest-xdist,
@@ -16,27 +15,16 @@
 
 buildPythonPackage rec {
   pname = "coverage";
-  version = "7.13.0";
+  version = "7.13.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "coveragepy";
     repo = "coveragepy";
     tag = version;
-    hash = "sha256-2i01Jlk4oj/0WhoYE1BgeKKjZK3YpEOrGHEgNhTruR4=";
+    hash = "sha256-xdbgHUE+vbSiqLRDhd5G5u90VU5+TxLehAuwdhdGzBQ=";
   };
 
-  patches = [
-    # test: correctly default the core being tested
-    # This fixes test_coverage_stop_in_threads
-    # https://github.com/coveragepy/coveragepy/issues/2109
-    (fetchpatch {
-      url = "https://github.com/coveragepy/coveragepy/commit/2f2e540709371f6184c2731f6d076bc782d37a3d.patch";
-      hash = "sha256-lwQ8OM9OWZAwrjExuPeGKSLEF+pYhgDHyAlgXzHiQ0M=";
-      excludes = [ "CHANGES.rst" ];
-    })
-  ];
-
   build-system = [ setuptools ];
 
   optional-dependencies = {
@@ -59,27 +47,11 @@ buildPythonPackage rec {
   '';
 
   disabledTests = [
-    "test_doctest"
-    "test_files_up_one_level"
-    "test_get_encoded_zip_files"
-    "test_multi"
-    "test_no_duplicate_packages"
-    "test_zipfile"
     # tests expect coverage source to be there
     "test_all_our_source_files"
-    "test_metadata"
-    "test_more_metadata"
     "test_real_code_regions"
   ];
 
-  disabledTestPaths = [
-    "tests/test_debug.py"
-    "tests/test_plugins.py"
-    "tests/test_process.py"
-    "tests/test_report.py"
-    "tests/test_venv.py"
-  ];
-
   meta = {
     changelog = "https://github.com/coveragepy/coveragepy/blob/${src.tag}/CHANGES.rst";
     description = "Code coverage measurement for Python";

From 4202bcf580d0669b23b557d4017c4fe72ea77521 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Mon, 29 Dec 2025 05:53:49 -0800
Subject: [PATCH 13/48] qt6Packages.qgpgme: split outputs

---
 pkgs/development/libraries/qgpgme/default.nix       |  9 +++++++++
 .../libraries/qgpgme/includedir-absolute-path.patch | 13 +++++++++++++
 2 files changed, 22 insertions(+)
 create mode 100644 pkgs/development/libraries/qgpgme/includedir-absolute-path.patch

diff --git a/pkgs/development/libraries/qgpgme/default.nix b/pkgs/development/libraries/qgpgme/default.nix
index 0dccab277e1b..c3dbe6800552 100644
--- a/pkgs/development/libraries/qgpgme/default.nix
+++ b/pkgs/development/libraries/qgpgme/default.nix
@@ -17,6 +17,15 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-FWRbJHXMphGOsu0zGzqNlELJ1AGcOEa6P20lMhtKYa0=";
   };
 
+  patches = [
+    ./includedir-absolute-path.patch
+  ];
+
+  outputs = [
+    "out"
+    "dev"
+  ];
+
   nativeBuildInputs = [
     cmake
   ];
diff --git a/pkgs/development/libraries/qgpgme/includedir-absolute-path.patch b/pkgs/development/libraries/qgpgme/includedir-absolute-path.patch
new file mode 100644
index 000000000000..7b9543b6a9f6
--- /dev/null
+++ b/pkgs/development/libraries/qgpgme/includedir-absolute-path.patch
@@ -0,0 +1,13 @@
+diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
+index 0955b27..e648982 100644
+--- a/src/CMakeLists.txt
++++ b/src/CMakeLists.txt
+@@ -264,7 +264,7 @@ set_target_properties(${targetname} PROPERTIES
+     SOVERSION "${LIBQGPGME_SOVERSION}"
+ )
+ 
+-target_include_directories(${targetname} INTERFACE "$<INSTALL_INTERFACE:include/qgpgme-qt${QT_MAJOR_VERSION}>")
++target_include_directories(${targetname} INTERFACE "$<INSTALL_INTERFACE:${CMAKE_INSTALL_INCLUDEDIR}/qgpgme-qt${QT_MAJOR_VERSION}>")
+ 
+ if (${QT_MAJOR_VERSION} EQUAL 6)
+     set(config_suffix Qt6)

From f1a74a35acd6a5052a40e8ff80289e70113361ca Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 29 Dec 2025 17:18:15 +0000
Subject: [PATCH 14/48] python3Packages.llama-index-readers-file: 0.5.5 ->
 0.5.6

---
 .../python-modules/llama-index-readers-file/default.nix       | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/llama-index-readers-file/default.nix b/pkgs/development/python-modules/llama-index-readers-file/default.nix
index 54e32d8e5762..9738fd1c4fac 100644
--- a/pkgs/development/python-modules/llama-index-readers-file/default.nix
+++ b/pkgs/development/python-modules/llama-index-readers-file/default.nix
@@ -13,13 +13,13 @@
 
 buildPythonPackage rec {
   pname = "llama-index-readers-file";
-  version = "0.5.5";
+  version = "0.5.6";
   pyproject = true;
 
   src = fetchPypi {
     pname = "llama_index_readers_file";
     inherit version;
-    hash = "sha256-AkuEHP32035OJM6myJ7frF8Or/y8/EkE5LCxaYR8EOU=";
+    hash = "sha256-HAixT6zC3+kzYiqqJtx9KnpgI8QtPbiWoslIeJ7a8eo=";
   };
 
   pythonRelaxDeps = [

From 2652fae156a7d5e05aa1e71ccc0284a9ede49d41 Mon Sep 17 00:00:00 2001
From: Maximilian Bosch <maximilian@mbosch.me>
Date: Mon, 29 Dec 2025 19:15:56 +0100
Subject: [PATCH 15/48] php84: 8.4.15 -> 8.4.16, fixes CVE-2025-14177,
 CVE-2025-14178, CVE-2025-14180, GHSA-www2-q4fc-65wf

ChangeLog: https://www.php.net/ChangeLog-8.php#8.4.16
---
 pkgs/development/interpreters/php/8.4.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/interpreters/php/8.4.nix b/pkgs/development/interpreters/php/8.4.nix
index 4aaa4f3e02b4..6e5c02fcfceb 100644
--- a/pkgs/development/interpreters/php/8.4.nix
+++ b/pkgs/development/interpreters/php/8.4.nix
@@ -4,8 +4,8 @@ let
   base = callPackage ./generic.nix (
     _args
     // {
-      version = "8.4.15";
-      hash = "sha256-txVb3UmNYNY+S8Mg3CJIY5dtMbW9kzlplybJYSVaMZc=";
+      version = "8.4.16";
+      hash = "sha256-bEjGXrpqL3oQKSXQh3Ijmx9FEQrtIYf92BuTPtQ5xpI=";
     }
   );
 in

From 865f2e83588d9c455a4933b28067f507aacbbde4 Mon Sep 17 00:00:00 2001
From: Maximilian Bosch <maximilian@mbosch.me>
Date: Mon, 29 Dec 2025 19:24:16 +0100
Subject: [PATCH 16/48] php83: 8.3.28 -> 8.3.29, fixes CVE-2025-14177,
 CVE-2025-14178, CVE-2025-14180, GHSA-www2-q4fc-65wf

ChangeLog: https://www.php.net/ChangeLog-8.php#8.3.29
---
 pkgs/development/interpreters/php/8.3.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/interpreters/php/8.3.nix b/pkgs/development/interpreters/php/8.3.nix
index c1155c1eadef..1d72efb4be84 100644
--- a/pkgs/development/interpreters/php/8.3.nix
+++ b/pkgs/development/interpreters/php/8.3.nix
@@ -4,8 +4,8 @@ let
   base = callPackage ./generic.nix (
     _args
     // {
-      version = "8.3.28";
-      hash = "sha256-1bOF7jUexGPIXUfutTtRFW80g+rz/0OnrVCAwrbUxVc=";
+      version = "8.3.29";
+      hash = "sha256-xzNyEuZVMl1JnqgQj6dvad3eL/98sPrTaqY+7VQMuKU=";
     }
   );
 in

From 9960abcf8fa651a48a1d4f43fd2a5ea7a4dffa46 Mon Sep 17 00:00:00 2001
From: Maximilian Bosch <maximilian@mbosch.me>
Date: Mon, 29 Dec 2025 19:25:00 +0100
Subject: [PATCH 17/48] php82: 8.2.29 -> 8.2.30, fixes CVE-2025-14177,
 CVE-2025-14178, CVE-2025-14180, GHSA-www2-q4fc-65wf

ChangeLog: https://www.php.net/ChangeLog-8.php#8.2.30
---
 pkgs/development/interpreters/php/8.2.nix |  4 ++--
 pkgs/top-level/php-packages.nix           | 10 ----------
 2 files changed, 2 insertions(+), 12 deletions(-)

diff --git a/pkgs/development/interpreters/php/8.2.nix b/pkgs/development/interpreters/php/8.2.nix
index 6e33b3ba3c60..ecf54354a8b7 100644
--- a/pkgs/development/interpreters/php/8.2.nix
+++ b/pkgs/development/interpreters/php/8.2.nix
@@ -4,8 +4,8 @@ let
   base = callPackage ./generic.nix (
     _args
     // {
-      version = "8.2.29";
-      hash = "sha256-UZeejRmMut4qrU/+n1PdPwT5YC0wieWXmYXgWK3kJnw=";
+      version = "8.2.30";
+      hash = "sha256-EEggtsj8lZ3eSzNCE19CvavyRuhpGKFjgaF9hEfIZvo=";
     }
   );
 in
diff --git a/pkgs/top-level/php-packages.nix b/pkgs/top-level/php-packages.nix
index 5a2781659262..bd805eef0f1b 100644
--- a/pkgs/top-level/php-packages.nix
+++ b/pkgs/top-level/php-packages.nix
@@ -447,16 +447,6 @@ lib.makeScope pkgs.newScope (
               configureFlags = [
                 "--enable-dom"
               ];
-              patches = lib.optionals (lib.versionOlder php.version "8.3") [
-                # Fix gh10234 test with libxml 2.15.0
-                (fetchpatch {
-                  url = "https://github.com/php/php-src/commit/d6e70e705323a50b616ffee9402245ab97de3e4e.patch";
-                  hash = "sha256-Axu09l3uQ83qe30aDsR+Bt29cJiF4mLknwDyQf94vic=";
-                  includes = [
-                    "ext/dom/tests/gh10234.phpt"
-                  ];
-                })
-              ];
             }
             {
               name = "enchant";

From 99fb9ad51b928003bebf836e47ab63e1ad4b3183 Mon Sep 17 00:00:00 2001
From: OPNA2608 <opna2608@protonmail.com>
Date: Mon, 29 Dec 2025 18:02:34 +0100
Subject: [PATCH 18/48] libsidplayfp: 2.15.2 -> 2.16.0

---
 pkgs/by-name/li/libsidplayfp/package.nix | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/li/libsidplayfp/package.nix b/pkgs/by-name/li/libsidplayfp/package.nix
index e4d6d581d0b6..30088314bf95 100644
--- a/pkgs/by-name/li/libsidplayfp/package.nix
+++ b/pkgs/by-name/li/libsidplayfp/package.nix
@@ -11,6 +11,7 @@
   graphviz,
   libexsid,
   libgcrypt,
+  libusb1,
   perl,
   pkg-config,
   xa,
@@ -18,14 +19,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libsidplayfp";
-  version = "2.15.2";
+  version = "2.16.0";
 
   src = fetchFromGitHub {
     owner = "libsidplayfp";
     repo = "libsidplayfp";
     tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
-    hash = "sha256-/GXRqLt2wPCUiOKlaEq52APOOYWgbaejzJcppZgMgfA=";
+    hash = "sha256-0eupR9HNhF8TERCtNTH8qx7mohLI7im8btJtByWHoY8=";
   };
 
   outputs = [ "out" ] ++ lib.optionals docSupport [ "doc" ];
@@ -50,6 +51,7 @@ stdenv.mkDerivation (finalAttrs: {
   buildInputs = [
     libexsid
     libgcrypt
+    libusb1
   ];
 
   enableParallelBuilding = true;
@@ -58,6 +60,13 @@ stdenv.mkDerivation (finalAttrs: {
     (lib.strings.enableFeature true "hardsid")
     (lib.strings.withFeature true "gcrypt")
     (lib.strings.withFeature true "exsid")
+    (lib.strings.withFeature true "usbsid")
+    # Supposedly runtime detection only supported on GCC
+    # https://github.com/libsidplayfp/libsidplayfp/commit/65874166b14d44467782d2996f7b644fbde0ee87
+    # __builtin_cpu_supports on GCC's list of x86 built-in functions
+    (lib.strings.withFeatureAs true "simd" (
+      if (stdenv.cc.isGNU && stdenv.hostPlatform.isx86) then "runtime" else "none"
+    ))
     (lib.strings.enableFeature finalAttrs.finalPackage.doCheck "tests")
   ];
 

From 5ae0ee01fcd41c53678fc15d8720e40c02659b9d Mon Sep 17 00:00:00 2001
From: OPNA2608 <opna2608@protonmail.com>
Date: Mon, 29 Dec 2025 18:05:46 +0100
Subject: [PATCH 19/48] libsidplayfp: Ignore rc versions in
 passthru.updateScript

---
 pkgs/by-name/li/libsidplayfp/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/li/libsidplayfp/package.nix b/pkgs/by-name/li/libsidplayfp/package.nix
index 30088314bf95..b5baf81afc5e 100644
--- a/pkgs/by-name/li/libsidplayfp/package.nix
+++ b/pkgs/by-name/li/libsidplayfp/package.nix
@@ -93,6 +93,7 @@ stdenv.mkDerivation (finalAttrs: {
     tests.pkg-config = testers.testMetaPkgConfig finalAttrs.finalPackage;
     updateScript = gitUpdater {
       rev-prefix = "v";
+      ignoredVersions = "rc$";
     };
   };
 

From 0fe1ffe3fd789cd42307c4dd7f4acda02c03ecd0 Mon Sep 17 00:00:00 2001
From: SchweGELBin <abramjannikmichael06@gmail.com>
Date: Mon, 29 Dec 2025 16:35:21 +0100
Subject: [PATCH 20/48] hyprland: 0.52.2 -> 0.53.0

---
 pkgs/by-name/hy/hyprland/info.json   | 10 +++++-----
 pkgs/by-name/hy/hyprland/package.nix |  9 ++++++---
 2 files changed, 11 insertions(+), 8 deletions(-)

diff --git a/pkgs/by-name/hy/hyprland/info.json b/pkgs/by-name/hy/hyprland/info.json
index a58f9bf3c70f..88a308d2b0cc 100644
--- a/pkgs/by-name/hy/hyprland/info.json
+++ b/pkgs/by-name/hy/hyprland/info.json
@@ -1,7 +1,7 @@
 {
-  "branch": "v0.52.2-b",
-  "commit_hash": "386376400119dd46a767c9f8c8791fd22c7b6e61",
-  "commit_message": "[gha] Nix: update inputs",
-  "date": "2025-12-03",
-  "tag": "v0.52.2"
+  "branch": "main",
+  "commit_hash": "ea444c35bb23b6e34505ab6753e069de7801cc25",
+  "commit_message": "version: bump to 0.53.0",
+  "date": "2025-12-29",
+  "tag": "v0.53.0"
 }
diff --git a/pkgs/by-name/hy/hyprland/package.nix b/pkgs/by-name/hy/hyprland/package.nix
index 3e1cdc33a198..dfd0a3eae580 100644
--- a/pkgs/by-name/hy/hyprland/package.nix
+++ b/pkgs/by-name/hy/hyprland/package.nix
@@ -19,6 +19,7 @@
   hyprland-qtutils,
   hyprlang,
   hyprutils,
+  hyprwire,
   hyprwayland-scanner,
   libGL,
   libdrm,
@@ -91,14 +92,14 @@ assert assertMsg (
 
 customStdenv.mkDerivation (finalAttrs: {
   pname = "hyprland" + optionalString debug "-debug";
-  version = "0.52.2";
+  version = "0.53.0";
 
   src = fetchFromGitHub {
     owner = "hyprwm";
     repo = "hyprland";
     fetchSubmodules = true;
     tag = "v${finalAttrs.version}";
-    hash = "sha256-R2Hm7XbW8CTLEIeYCAlSQ3U5bFhn76FC17hEy/ws8EM=";
+    hash = "sha256-1jZK7hqNhQRqhj+2eb/JvnBoARxUgoVXKLSwp2RPmNQ=";
   };
 
   postPatch = ''
@@ -107,6 +108,7 @@ customStdenv.mkDerivation (finalAttrs: {
 
     # Remove extra @PREFIX@ to fix pkg-config paths
     sed -i "s#@PREFIX@/##g" hyprland.pc.in
+    sed -i "s#@PREFIX@/##g" example/hyprland.desktop.in
   '';
 
   # variables used by CMake, and shown in `hyprctl version`
@@ -127,6 +129,7 @@ customStdenv.mkDerivation (finalAttrs: {
 
   nativeBuildInputs = [
     hyprwayland-scanner
+    hyprwire
     makeWrapper
     cmake
     # meson + ninja are used to build the hyprland-protocols submodule
@@ -187,13 +190,13 @@ customStdenv.mkDerivation (finalAttrs: {
   strictDeps = true;
 
   cmakeFlags = mapAttrsToList cmakeBool {
+    "BUILT_WITH_NIX" = true;
     "NO_XWAYLAND" = !enableXWayland;
     "NO_SYSTEMD" = !withSystemd;
     "CMAKE_DISABLE_PRECOMPILE_HEADERS" = true;
     "NO_UWSM" = true;
     "NO_HYPRPM" = true;
     "TRACY_ENABLE" = false;
-    "BUILD_HYPRTESTER" = true;
   };
 
   postInstall = ''

From 874985cfccbb94ed17cc19d2ae1c8e9191b1f886 Mon Sep 17 00:00:00 2001
From: SchweGELBin <abramjannikmichael06@gmail.com>
Date: Mon, 29 Dec 2025 20:58:48 +0100
Subject: [PATCH 21/48] nixos/hyprland: prefer `start-hyprland` over `Hyprland`

---
 nixos/modules/programs/wayland/hyprland.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/nixos/modules/programs/wayland/hyprland.nix b/nixos/modules/programs/wayland/hyprland.nix
index 1c827fc6bf31..ae9d224778c2 100644
--- a/nixos/modules/programs/wayland/hyprland.nix
+++ b/nixos/modules/programs/wayland/hyprland.nix
@@ -14,7 +14,7 @@ in
   options.programs.hyprland = {
     enable = lib.mkEnableOption ''
       Hyprland, the dynamic tiling Wayland compositor that doesn't sacrifice on its looks.
-      You can manually launch Hyprland by executing {command}`Hyprland` on a TTY.
+      You can manually launch Hyprland by executing {command}`start-hyprland` on a TTY.
       A configuration file will be generated in {file}`~/.config/hypr/hyprland.conf`.
       See <https://wiki.hyprland.org> for more information'';
 
@@ -103,7 +103,7 @@ in
           hyprland = {
             prettyName = "Hyprland";
             comment = "Hyprland compositor managed by UWSM";
-            binPath = "/run/current-system/sw/bin/Hyprland";
+            binPath = "/run/current-system/sw/bin/start-hyprland";
           };
         };
       })

From 0b5c9a24e1ffadbe162c3d9e845e72ff645751e6 Mon Sep 17 00:00:00 2001
From: SchweGELBin <abramjannikmichael06@gmail.com>
Date: Mon, 29 Dec 2025 21:04:29 +0100
Subject: [PATCH 22/48] hyprlandPlugins/hyprland-plugins: 0.52.0 -> 0.53.0

---
 .../hyprwm/hyprland-plugins/hyprland-plugins.nix              | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/window-managers/hyprwm/hyprland-plugins/hyprland-plugins.nix b/pkgs/applications/window-managers/hyprwm/hyprland-plugins/hyprland-plugins.nix
index 3bc837a2319d..079508f4262f 100644
--- a/pkgs/applications/window-managers/hyprwm/hyprland-plugins/hyprland-plugins.nix
+++ b/pkgs/applications/window-managers/hyprwm/hyprland-plugins/hyprland-plugins.nix
@@ -13,13 +13,13 @@ let
             mkHyprlandPlugin,
           }:
           let
-            version = "0.52.0";
+            version = "0.53.0";
 
             hyprland-plugins-src = fetchFromGitHub {
               owner = "hyprwm";
               repo = "hyprland-plugins";
               tag = "v${version}";
-              hash = "sha256-hr53AWO96ooLCwS1a2v416eT1/aWQZmuQV0ULqhaBTY=";
+              hash = "sha256-BSRT1Uu1ot4WfMfZc6KW0nwpmt2xl9wpUqmH/JoMTfk=";
             };
           in
           mkHyprlandPlugin {

From 0aca382f821b2c5b354486ce827786a48530eb21 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Mon, 29 Dec 2025 14:30:44 -0800
Subject: [PATCH 23/48] python3Packages.insteon-frontend-home-assistant: 0.5.0
 -> 0.6.0

Changelog: https://github.com/pyinsteon/insteon-panel/releases/tag/0.6.0
---
 .../insteon-frontend-home-assistant/default.nix        | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/pkgs/development/python-modules/insteon-frontend-home-assistant/default.nix b/pkgs/development/python-modules/insteon-frontend-home-assistant/default.nix
index dae6d98f7650..061e669dafca 100644
--- a/pkgs/development/python-modules/insteon-frontend-home-assistant/default.nix
+++ b/pkgs/development/python-modules/insteon-frontend-home-assistant/default.nix
@@ -2,20 +2,18 @@
   lib,
   buildPythonPackage,
   fetchPypi,
-  pythonOlder,
   setuptools,
 }:
 
 buildPythonPackage rec {
   pname = "insteon-frontend-home-assistant";
-  version = "0.5.0";
+  version = "0.6.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.10";
-
   src = fetchPypi {
-    inherit pname version;
-    hash = "sha256-NZwnx8tlXnsVCk4nvNjOg3cjSr2CnjqWcZG7xFTC2wA=";
+    pname = "insteon_frontend_home_assistant";
+    inherit version;
+    hash = "sha256-oBTk7gblJA6/w0wSx+efdEmY5ioJiRMUfDqjyg0LkFg=";
   };
 
   nativeBuildInputs = [ setuptools ];

From 0d2ab9c4267c910132efebbc97d695ea3b93039c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Mon, 29 Dec 2025 14:33:41 -0800
Subject: [PATCH 24/48] python3Packages.py-melissa-climate: 3.0.2 -> 3.0.3

Diff: https://github.com/kennedyshead/py-melissa-climate/compare/v3.0.2...V3.0.3

Changelog: https://github.com/kennedyshead/py-melissa-climate/releases/tag/V3.0.3
---
 .../python-modules/py-melissa-climate/default.nix           | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/py-melissa-climate/default.nix b/pkgs/development/python-modules/py-melissa-climate/default.nix
index f1167d2b04a4..b59562421f63 100644
--- a/pkgs/development/python-modules/py-melissa-climate/default.nix
+++ b/pkgs/development/python-modules/py-melissa-climate/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage rec {
   pname = "py-melissa-climate";
-  version = "3.0.2";
+  version = "3.0.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "kennedyshead";
     repo = "py-melissa-climate";
-    tag = "v${version}";
-    hash = "sha256-VSKSa7K2fF6NMLN39HzkqK7/9vGHmmmPFw6mIiJNZ84=";
+    tag = "V${version}";
+    hash = "sha256-vKnIFrviCJLMqYUdKKJtqOmD1ZtgtMBMLApG+YiqZdY=";
   };
 
   build-system = [ setuptools ];

From 945c704aaf115625c7893bfed4349707ca2932bf Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 29 Dec 2025 22:49:36 +0000
Subject: [PATCH 25/48] emmylua-check: 0.18.0 -> 0.19.0

---
 pkgs/by-name/em/emmylua-check/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/em/emmylua-check/package.nix b/pkgs/by-name/em/emmylua-check/package.nix
index 88832c0372f6..42425039ba02 100644
--- a/pkgs/by-name/em/emmylua-check/package.nix
+++ b/pkgs/by-name/em/emmylua-check/package.nix
@@ -7,18 +7,18 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "emmylua_check";
-  version = "0.18.0";
+  version = "0.19.0";
 
   src = fetchFromGitHub {
     owner = "EmmyLuaLs";
     repo = "emmylua-analyzer-rust";
     tag = finalAttrs.version;
-    hash = "sha256-JXe+I0CViJAXOnWzilYpjWquYFzZGIP5y6HS6KosYPU=";
+    hash = "sha256-bdvJInMuWJq7MZa+4wrKBn0myLTHCayhDAhB8Stjp6A=";
   };
 
   buildAndTestSubdir = "crates/emmylua_check";
 
-  cargoHash = "sha256-UVuXeGmSvAwHs/U0s/mByiZCwa2refz1l8eJvcCoagk=";
+  cargoHash = "sha256-bF6bdTbcHDecj+wVoNsaKBzsz96d3vo6cqp5MjSbT4E=";
 
   nativeInstallCheckInputs = [
     versionCheckHook

From e62fb3c1a8813438395c2ac6e311c7c896c41a7d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Mon, 29 Dec 2025 14:42:53 -0800
Subject: [PATCH 26/48] python3Packages.pysenz: init at 1.0.2

---
 .../python-modules/pysenz/default.nix         | 41 +++++++++++++++++++
 pkgs/top-level/python-packages.nix            |  2 +
 2 files changed, 43 insertions(+)
 create mode 100644 pkgs/development/python-modules/pysenz/default.nix

diff --git a/pkgs/development/python-modules/pysenz/default.nix b/pkgs/development/python-modules/pysenz/default.nix
new file mode 100644
index 000000000000..7b6729592a3a
--- /dev/null
+++ b/pkgs/development/python-modules/pysenz/default.nix
@@ -0,0 +1,41 @@
+{
+  authlib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  httpx,
+  lib,
+  setuptools,
+}:
+
+buildPythonPackage rec {
+  pname = "pysenz";
+  version = "1.0.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "nordicopen";
+    repo = "pysenz";
+    tag = "v${version}";
+    hash = "sha256-gS9dsGQ8waOlUbHWHiJbQrvh4RdFb4SNEH4J4TbT2x8=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    authlib
+    httpx
+  ];
+
+  pythonImportsCheck = [ "pysenz" ];
+
+  # upstream has no tests
+  doCheck = false;
+
+  meta = {
+    changelog = "https://github.com/nordicopen/pysenz/releases/tag/${src.tag}";
+    description = "Async Typed Python package for the Chemelex (nVent) RAYCHEM SENZ RestAPI";
+    homepage = "https://github.com/nordicopen/pysenz";
+    license = lib.licenses.lgpl3Plus;
+    maintainers = [ lib.maintainers.dotlambda ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 6a68cb79f7af..647491c04be9 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -14544,6 +14544,8 @@ self: super: with self; {
 
   pysensors = callPackage ../development/python-modules/pysensors { };
 
+  pysenz = callPackage ../development/python-modules/pysenz { };
+
   pysequoia = callPackage ../development/python-modules/pysequoia { };
 
   pyserial = callPackage ../development/python-modules/pyserial { };

From 0a64f5d0a8ab6fc5ad765ae1781f08533b1c5902 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Mon, 29 Dec 2025 14:29:22 -0800
Subject: [PATCH 27/48] python3Packages.python-roborock: 3.19.0 -> 4.1.1

Diff: https://github.com/Python-roborock/python-roborock/compare/v3.19.0...v4.1.1

Changelog: https://github.com/Python-roborock/python-roborock/blob/v4.1.1/CHANGELOG.md
---
 pkgs/development/python-modules/python-roborock/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/python-roborock/default.nix b/pkgs/development/python-modules/python-roborock/default.nix
index 8747c3758aa9..f03b4ac35538 100644
--- a/pkgs/development/python-modules/python-roborock/default.nix
+++ b/pkgs/development/python-modules/python-roborock/default.nix
@@ -23,14 +23,14 @@
 
 buildPythonPackage rec {
   pname = "python-roborock";
-  version = "3.19.0";
+  version = "4.1.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Python-roborock";
     repo = "python-roborock";
     tag = "v${version}";
-    hash = "sha256-nCewSP0ZgQvjZ4Ie4/kTzxxmJ5Zsm5i3EuW4ZiDBPMg=";
+    hash = "sha256-Wf9nJDcNOLIuIskiDyGYo4TwekQprW4o99oJLkaV5X4=";
   };
 
   pythonRelaxDeps = [ "pycryptodome" ];

From be37f47e66cd35c05a0a194cb24886b4ff60c03a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Mon, 29 Dec 2025 12:41:29 -0800
Subject: [PATCH 28/48] home-assistant: 2025.12.4 -> 2025.12.5

Diff: https://github.com/home-assistant/core/compare/2025.12.4...2025.12.5

Changelog: https://github.com/home-assistant/core/releases/tag/2025.12.5
---
 pkgs/servers/home-assistant/component-packages.nix | 4 ++--
 pkgs/servers/home-assistant/default.nix            | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/servers/home-assistant/component-packages.nix b/pkgs/servers/home-assistant/component-packages.nix
index 94b03f739605..fa79a63a08a7 100644
--- a/pkgs/servers/home-assistant/component-packages.nix
+++ b/pkgs/servers/home-assistant/component-packages.nix
@@ -2,7 +2,7 @@
 # Do not edit!
 
 {
-  version = "2025.12.4";
+  version = "2025.12.5";
   components = {
     "3_day_blinds" =
       ps: with ps; [
@@ -5431,7 +5431,7 @@
       ];
     "senz" =
       ps: with ps; [
-        aiosenz
+        pysenz
       ];
     "serial" =
       ps: with ps; [
diff --git a/pkgs/servers/home-assistant/default.nix b/pkgs/servers/home-assistant/default.nix
index b45659b0a0d4..a7972e6e6d9a 100644
--- a/pkgs/servers/home-assistant/default.nix
+++ b/pkgs/servers/home-assistant/default.nix
@@ -291,7 +291,7 @@ let
   extraBuildInputs = extraPackages python.pkgs;
 
   # Don't forget to run update-component-packages.py after updating
-  hassVersion = "2025.12.4";
+  hassVersion = "2025.12.5";
 
 in
 python.pkgs.buildPythonApplication rec {
@@ -312,13 +312,13 @@ python.pkgs.buildPythonApplication rec {
     owner = "home-assistant";
     repo = "core";
     tag = version;
-    hash = "sha256-VT9JdpzPKdOJ8Q//SUDMUgTa46k6v7Mi74Yl9mEPF/I=";
+    hash = "sha256-RSrWk7SZIOvOhvVXBwc10w9Yyqd2rcxdUVuq2snMm9g=";
   };
 
   # Secondary source is pypi sdist for translations
   sdist = fetchPypi {
     inherit pname version;
-    hash = "sha256-wVe5/syj878B3o7QWgQ2wOEsbdyvFWD/VMgpok1SwOQ=";
+    hash = "sha256-cl5kTpYhsZnf7etPRSgVWd/fH9zTc1OnkRTjbUp/M3U=";
   };
 
   build-system = with python.pkgs; [

From aaa5d5a67357f9509f8ea72ae43eaf5f9d8765b8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Mon, 29 Dec 2025 14:45:29 -0800
Subject: [PATCH 29/48] python3Packages.aiosenz: drop

---
 .../python-modules/aiosenz/default.nix        | 43 -------------------
 pkgs/top-level/python-aliases.nix             |  1 +
 pkgs/top-level/python-packages.nix            |  2 -
 3 files changed, 1 insertion(+), 45 deletions(-)
 delete mode 100644 pkgs/development/python-modules/aiosenz/default.nix

diff --git a/pkgs/development/python-modules/aiosenz/default.nix b/pkgs/development/python-modules/aiosenz/default.nix
deleted file mode 100644
index c2870b79b0cc..000000000000
--- a/pkgs/development/python-modules/aiosenz/default.nix
+++ /dev/null
@@ -1,43 +0,0 @@
-{
-  lib,
-  authlib,
-  buildPythonPackage,
-  fetchFromGitHub,
-  httpx,
-  pythonOlder,
-  setuptools,
-}:
-
-buildPythonPackage rec {
-  pname = "aiosenz";
-  version = "1.0.0";
-  format = "pyproject";
-
-  disabled = pythonOlder "3.8";
-
-  src = fetchFromGitHub {
-    owner = "milanmeu";
-    repo = "aiosenz";
-    rev = version;
-    hash = "sha256-ODdWPS14zzptxuS6mff51f0s1SYnIqjF40DmvT0sL0w=";
-  };
-
-  nativeBuildInputs = [ setuptools ];
-
-  propagatedBuildInputs = [
-    httpx
-    authlib
-  ];
-
-  # Project has no tests
-  doCheck = false;
-
-  pythonImportsCheck = [ "aiosenz" ];
-
-  meta = {
-    description = "Python wrapper for the nVent Raychem SENZ RestAPI";
-    homepage = "https://github.com/milanmeu/aiosenz";
-    license = with lib.licenses; [ lgpl3Plus ];
-    maintainers = with lib.maintainers; [ fab ];
-  };
-}
diff --git a/pkgs/top-level/python-aliases.nix b/pkgs/top-level/python-aliases.nix
index 3db7d70f6b3a..6d7646476f0c 100644
--- a/pkgs/top-level/python-aliases.nix
+++ b/pkgs/top-level/python-aliases.nix
@@ -58,6 +58,7 @@ mapAliases {
 
   # keep-sorted start case=no numeric=yes
   abodepy = throw "'abodepy' has been renamed to/replaced by 'jaraco-abode'"; # Converted to throw 2025-10-29
+  aiosenz = throw "aiosenz was removed because Home Assistant switched to pysenz"; # added 2025-12-29
   amazon-kclpy = throw "amazon-kclpy has been removed because it has been marked as broken since at least November 2024."; # Added 2025-10-03
   amazon_kclpy = throw "'amazon_kclpy' has been renamed to/replaced by 'amazon-kclpy'"; # Converted to throw 2025-10-29
   amqplib = throw "amqplib has been removed as it was unmaintained upstream"; # Added 2025-11-22
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 647491c04be9..91ce80ca2b7e 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -482,8 +482,6 @@ self: super: with self; {
 
   aiosendspin = callPackage ../development/python-modules/aiosendspin { };
 
-  aiosenz = callPackage ../development/python-modules/aiosenz { };
-
   aioserial = callPackage ../development/python-modules/aioserial { };
 
   aioshelly = callPackage ../development/python-modules/aioshelly { };

From 4bbae29fe6b4ba4401d3583e7ba3a5729f45f929 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 29 Dec 2025 23:10:49 +0000
Subject: [PATCH 30/48] python3Packages.stringzilla: 4.5.1 -> 4.6.0

---
 pkgs/development/python-modules/stringzilla/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/stringzilla/default.nix b/pkgs/development/python-modules/stringzilla/default.nix
index beb78ac69520..3d7c74681fea 100644
--- a/pkgs/development/python-modules/stringzilla/default.nix
+++ b/pkgs/development/python-modules/stringzilla/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage rec {
   pname = "stringzilla";
-  version = "4.5.1";
+  version = "4.6.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ashvardanian";
     repo = "stringzilla";
     tag = "v${version}";
-    hash = "sha256-0T8hQ+P6gZnIX52jkRcpF1Ofxy45+B7K/feEQr5Phf0=";
+    hash = "sha256-5WAD5ZpzhdIDv1kUVinc5z91N/tQVScO75kOPC1WWlY=";
   };
 
   build-system = [

From c2c70fc7b6555fc0cfa7b40e98149090ad59489b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 29 Dec 2025 23:22:02 +0000
Subject: [PATCH 31/48] models-dev: 0-unstable-2025-12-23 ->
 0-unstable-2025-12-29

---
 pkgs/by-name/mo/models-dev/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/mo/models-dev/package.nix b/pkgs/by-name/mo/models-dev/package.nix
index 8ed8fee1bdbe..4a582a1a6055 100644
--- a/pkgs/by-name/mo/models-dev/package.nix
+++ b/pkgs/by-name/mo/models-dev/package.nix
@@ -9,12 +9,12 @@
 }:
 let
   pname = "models-dev";
-  version = "0-unstable-2025-12-23";
+  version = "0-unstable-2025-12-29";
   src = fetchFromGitHub {
     owner = "sst";
     repo = "models.dev";
-    rev = "d54bc052ebe97f8fc494e9fbb47a5d6266d20066";
-    hash = "sha256-HiIHiiP2AzMkUtshFBgZJ+wheOO0L+eOn44+C7xzYxA=";
+    rev = "53afc6aefb7b7f777c7b708098e7dbf83bd3797a";
+    hash = "sha256-I79MLfT9rCJK7LOfJNN23wM9/lJsVL+fw3hBUPykIxM=";
   };
 
   node_modules = stdenvNoCC.mkDerivation {

From 643dcf72d0f570ee37816413c80e57db6ad558fd Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 30 Dec 2025 00:26:19 +0000
Subject: [PATCH 32/48] ipxe: 1.21.1-unstable-2025-12-22 ->
 1.21.1-unstable-2025-12-29

---
 pkgs/by-name/ip/ipxe/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ip/ipxe/package.nix b/pkgs/by-name/ip/ipxe/package.nix
index 7ff095a8d759..b874257659d8 100644
--- a/pkgs/by-name/ip/ipxe/package.nix
+++ b/pkgs/by-name/ip/ipxe/package.nix
@@ -48,7 +48,7 @@ in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "ipxe";
-  version = "1.21.1-unstable-2025-12-22";
+  version = "1.21.1-unstable-2025-12-29";
 
   nativeBuildInputs = [
     mtools
@@ -66,8 +66,8 @@ stdenv.mkDerivation (finalAttrs: {
   src = fetchFromGitHub {
     owner = "ipxe";
     repo = "ipxe";
-    rev = "3832147944209ece35557234102548413ef1b460";
-    hash = "sha256-b65XWsWbMwROEYj3pVgCy6NNTreaQLkAtyCNQZ2xLPs=";
+    rev = "7c39c04a537ce29dccc6f2bae9749d1d371429c1";
+    hash = "sha256-tqOTv9f9teCQUgt52/cdAM9kE5678Bk9956cWDTDZAg=";
   };
 
   # Calling syslinux on a FAT image isn't going to work on Aarch64.

From 28cc0c3c4b8be8c0057372ac09a0f1a3c161db1d Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 30 Dec 2025 00:54:16 +0000
Subject: [PATCH 33/48] myks: 5.4.0 -> 5.5.0

---
 pkgs/by-name/my/myks/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/my/myks/package.nix b/pkgs/by-name/my/myks/package.nix
index 4e1ad54ad9ef..718fb15a7ca8 100644
--- a/pkgs/by-name/my/myks/package.nix
+++ b/pkgs/by-name/my/myks/package.nix
@@ -10,16 +10,16 @@
 
 buildGoModule rec {
   pname = "myks";
-  version = "5.4.0";
+  version = "5.5.0";
 
   src = fetchFromGitHub {
     owner = "mykso";
     repo = "myks";
     tag = "v${version}";
-    hash = "sha256-Q8Qtxb+eUaw0eX3F/jkgKKHmjApZ/UsTE+LeJ1FKoCg=";
+    hash = "sha256-swfzmuw7TtRvYeAlRTP1v3zvuSUsD/j1FddPfMDekbs=";
   };
 
-  vendorHash = "sha256-wHP/l8Evu6F9Kzm88EQv9JMONI3OlWB3jB+88RgzKmo=";
+  vendorHash = "sha256-Gi/y6fCrfphBrF4Zag1zkAXuRhvvl9sTm3Magm6k0Q0=";
 
   subPackages = ".";
 

From 76757222eb0973169304f6de30275802e60d5bce Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 30 Dec 2025 01:33:41 +0000
Subject: [PATCH 34/48] grpc-health-probe: 0.4.42 -> 0.4.43

---
 pkgs/by-name/gr/grpc-health-probe/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/gr/grpc-health-probe/package.nix b/pkgs/by-name/gr/grpc-health-probe/package.nix
index ea2037cadcde..98d4f51d48da 100644
--- a/pkgs/by-name/gr/grpc-health-probe/package.nix
+++ b/pkgs/by-name/gr/grpc-health-probe/package.nix
@@ -7,13 +7,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "grpc-health-probe";
-  version = "0.4.42";
+  version = "0.4.43";
 
   src = fetchFromGitHub {
     owner = "grpc-ecosystem";
     repo = "grpc-health-probe";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-/7Xxti2QOClWRo6EwHRb369+x/NeT6LHhDDyIJSHv00=";
+    hash = "sha256-xmNqo+Wa/58944v52MAtFCy9G0LJVIn/XGG7JYqcCvM=";
   };
 
   tags = [
@@ -25,7 +25,7 @@ buildGoModule (finalAttrs: {
     "-X main.versionTag=${finalAttrs.version}"
   ];
 
-  vendorHash = "sha256-9NDSkfHUa6xfLByjtuDMir2UM5flaKhD6jZDa71D+0w=";
+  vendorHash = "sha256-WGY4vj1a+sOKKmuY+1RD/GPOKIUunfdBor0xG64IJY8=";
 
   nativeInstallCheckInputs = [
     versionCheckHook

From 71296732394f14e859795fe7251ecc69c863e364 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 30 Dec 2025 01:53:53 +0000
Subject: [PATCH 35/48] nextvi: 3.0 -> 3.1

---
 pkgs/by-name/ne/nextvi/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ne/nextvi/package.nix b/pkgs/by-name/ne/nextvi/package.nix
index 761a78828170..d8a525841c6a 100644
--- a/pkgs/by-name/ne/nextvi/package.nix
+++ b/pkgs/by-name/ne/nextvi/package.nix
@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "nextvi";
-  version = "3.0";
+  version = "3.1";
 
   src = fetchFromGitHub {
     owner = "kyx0r";
     repo = "nextvi";
     tag = finalAttrs.version;
-    hash = "sha256-SMPPG/pDtuS87PLyeUvmEqyqD9+Pye9rPQW1TpDGNc4=";
+    hash = "sha256-joIb+kJd0Oe1Irpz5zo48G+27umrr3Q1kKoLwpRiD8w=";
   };
 
   nativeBuildInputs = [ installShellFiles ];

From de060aae7405ca7f8efbc5f62f55b4149576ff33 Mon Sep 17 00:00:00 2001
From: Manse <122305437+PedroManse@users.noreply.github.com>
Date: Mon, 29 Dec 2025 23:37:19 -0300
Subject: [PATCH 36/48] vimPlugins.alabaster-nvim: init at 2025-11-21

---
 pkgs/applications/editors/vim/plugins/generated.nix | 13 +++++++++++++
 .../editors/vim/plugins/vim-plugin-names            |  1 +
 2 files changed, 14 insertions(+)

diff --git a/pkgs/applications/editors/vim/plugins/generated.nix b/pkgs/applications/editors/vim/plugins/generated.nix
index b9dc25a9b3fd..265712cd3940 100644
--- a/pkgs/applications/editors/vim/plugins/generated.nix
+++ b/pkgs/applications/editors/vim/plugins/generated.nix
@@ -763,6 +763,19 @@ final: prev: {
     meta.hydraPlatforms = [ ];
   };
 
+  alabaster-nvim = buildVimPlugin {
+    pname = "alabaster.nvim";
+    version = "2025-11-21";
+    src = fetchFromGitHub {
+      owner = "p00f";
+      repo = "alabaster.nvim";
+      rev = "1fc9e29fbbce94f127cc8b21960b7e3c85187960";
+      sha256 = "0jm5rlc1j4gni8qgcba0ssdnakdpl0hrqlm61xmipv0k2sr3wy2y";
+    };
+    meta.homepage = "https://github.com/p00f/alabaster.nvim/";
+    meta.hydraPlatforms = [ ];
+  };
+
   alchemist-vim = buildVimPlugin {
     pname = "alchemist.vim";
     version = "3.5.0-unstable-2023-09-01";
diff --git a/pkgs/applications/editors/vim/plugins/vim-plugin-names b/pkgs/applications/editors/vim/plugins/vim-plugin-names
index 95693f04c679..522c06fd96f1 100644
--- a/pkgs/applications/editors/vim/plugins/vim-plugin-names
+++ b/pkgs/applications/editors/vim/plugins/vim-plugin-names
@@ -57,6 +57,7 @@ https://github.com/derekelkins/agda-vim/,,
 https://github.com/emmanueltouzery/agitator.nvim/,HEAD,
 https://github.com/aduros/ai.vim/,HEAD,
 https://github.com/joshuavial/aider.nvim/,HEAD,
+https://github.com/p00f/alabaster.nvim/,HEAD,
 https://github.com/slashmili/alchemist.vim/,,
 https://github.com/dense-analysis/ale/,,
 https://github.com/vim-scripts/align/,,

From f97462a2be07c077ff539f3753c70abdb3928c18 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 30 Dec 2025 07:02:17 +0000
Subject: [PATCH 37/48] python3Packages.fastcore: 1.9.8 -> 1.10.0

---
 pkgs/development/python-modules/fastcore/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/fastcore/default.nix b/pkgs/development/python-modules/fastcore/default.nix
index c5b254174737..df1014ec53a2 100644
--- a/pkgs/development/python-modules/fastcore/default.nix
+++ b/pkgs/development/python-modules/fastcore/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage rec {
   pname = "fastcore";
-  version = "1.9.8";
+  version = "1.10.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "fastai";
     repo = "fastcore";
     tag = version;
-    hash = "sha256-alw1QQJ0w9LEWztCvY0gCfQVPGVkyl+IPd8+YgDWyr8=";
+    hash = "sha256-hPcL1FB7O/+YCq+p32KWykfoDTs3g+sk1oBCtrZZERU=";
   };
 
   build-system = [ setuptools ];

From 0646a76144325d4aba2181edb6b510691c80a752 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 30 Dec 2025 07:05:18 +0000
Subject: [PATCH 38/48] ytdl-sub: 2025.12.26 -> 2025.12.30

---
 pkgs/by-name/yt/ytdl-sub/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/yt/ytdl-sub/package.nix b/pkgs/by-name/yt/ytdl-sub/package.nix
index 69da8b25b3e1..2f07f44e1c8c 100644
--- a/pkgs/by-name/yt/ytdl-sub/package.nix
+++ b/pkgs/by-name/yt/ytdl-sub/package.nix
@@ -9,14 +9,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "ytdl-sub";
-  version = "2025.12.26";
+  version = "2025.12.30";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jmbannon";
     repo = "ytdl-sub";
     tag = version;
-    hash = "sha256-NRIA8vbkRCkL43p5YkhQtPk58iW1rH0LqBbYAyfyv0I=";
+    hash = "sha256-MRDLtrfxGJIWz5yk4tW4MMSY9muhgZz0w8+1XWmSAks=";
   };
 
   postPatch = ''

From 1d755e27b1d82f48731c497acdd8329570aebce7 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 30 Dec 2025 07:28:19 +0000
Subject: [PATCH 39/48] inputplumber: 0.69.1 -> 0.70.1

---
 pkgs/by-name/in/inputplumber/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/in/inputplumber/package.nix b/pkgs/by-name/in/inputplumber/package.nix
index 146823380138..e187dbf6358f 100644
--- a/pkgs/by-name/in/inputplumber/package.nix
+++ b/pkgs/by-name/in/inputplumber/package.nix
@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "inputplumber";
-  version = "0.69.1";
+  version = "0.70.1";
 
   src = fetchFromGitHub {
     owner = "ShadowBlip";
     repo = "InputPlumber";
     tag = "v${version}";
-    hash = "sha256-TX2AGLomQvq3r23ihL4SyMB4TTIYaavuWTuwqZciW2U=";
+    hash = "sha256-Sk1z1bJlpHQrbm7rSiLHiwFXCwlZ/Qcr5vyY7ydLktw=";
   };
 
-  cargoHash = "sha256-HYVDign4Q6hNUPaTcjS7n00WHEVR8UtS26F+RV9KWFE=";
+  cargoHash = "sha256-Alnr8ppttft4GavoErFkZ7rqnAKaTDCyPhfqAcMX+R0=";
 
   nativeBuildInputs = [
     pkg-config

From bee70ffc6d68563c29a07834acd494a16ebac5c5 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 30 Dec 2025 07:43:35 +0000
Subject: [PATCH 40/48] quisk: 4.2.48 -> 4.2.50

---
 pkgs/by-name/qu/quisk/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/qu/quisk/package.nix b/pkgs/by-name/qu/quisk/package.nix
index 2b303b16c3b8..efdf6160d408 100644
--- a/pkgs/by-name/qu/quisk/package.nix
+++ b/pkgs/by-name/qu/quisk/package.nix
@@ -9,12 +9,12 @@
 
 python3.pkgs.buildPythonApplication rec {
   pname = "quisk";
-  version = "4.2.48";
+  version = "4.2.50";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-5N8uogS/V5nwYhHsdsc81GgjS9NblLx3KpdoEaXtpJI=";
+    hash = "sha256-HFZhVJxDUeFDFboWYGiuJYG8fb+xeWBKKi/6uBiDp84=";
   };
 
   buildInputs = [

From 8bf2b05023c173e821b5471df9da6bacf113dac3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vladim=C3=ADr=20=C4=8Cun=C3=A1t?= <v@cunat.cz>
Date: Tue, 30 Dec 2025 09:07:47 +0100
Subject: [PATCH 41/48] Revert "python3Packages.streamlit: allow to build
 against pyarrow 22+"

This reverts commit 2f57d5c636b4d470f1f8e18a6b13db763292a1d8.
After update in a394a723b95c we already have the patch in src:
https://hydra.nixos.org/build/317517572/nixlog/2/tail
---
 pkgs/development/python-modules/streamlit/default.nix | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/pkgs/development/python-modules/streamlit/default.nix b/pkgs/development/python-modules/streamlit/default.nix
index 75336df4a048..fc48e2563b12 100644
--- a/pkgs/development/python-modules/streamlit/default.nix
+++ b/pkgs/development/python-modules/streamlit/default.nix
@@ -7,7 +7,6 @@
   cachetools,
   click,
   fetchPypi,
-  fetchpatch2,
   gitpython,
   numpy,
   packaging,
@@ -39,16 +38,6 @@ buildPythonPackage rec {
     hash = "sha256-ZKTdqLxc3Te/1JDpO7U9o1qu+Ub8/Cg6eYDazfFlEIs=";
   };
 
-  patches = [
-    # Allow pyarrow 22
-    (fetchpatch2 {
-      url = "https://github.com/streamlit/streamlit/commit/b9e1b875a948a0aa6e972edc6e86a4f89706e08c.diff?full_index=1";
-      stripLen = 1;
-      excludes = [ "tests/streamlit/data_test_cases.py" ];
-      hash = "sha256-qZau1XlP8Kf2hPtyFphJN4UEjbp0ZZYngFdRwXTVt3g=";
-    })
-  ];
-
   build-system = [
     setuptools
   ];

From 113f85d1706e161c41c77572d38b04ba6459a07b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 30 Dec 2025 08:47:19 +0000
Subject: [PATCH 42/48] terraform-providers.selectel_selectel: 7.2.1 -> 7.3.0

---
 .../networking/cluster/terraform-providers/providers.json   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index d6a318fa7158..5273ba952ead 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -1193,13 +1193,13 @@
     "vendorHash": "sha256-MIO0VHofPtKPtynbvjvEukMNr5NXHgk7BqwIhbc9+u0="
   },
   "selectel_selectel": {
-    "hash": "sha256-/9PIbXyh+CklHQRWWoXxH42KUATi3uyPZRtWWfniB1Q=",
+    "hash": "sha256-2lo5CF+FmQW2JIHCoI5zGZBaquIo4RXzvD8MeNWTHhQ=",
     "homepage": "https://registry.terraform.io/providers/selectel/selectel",
     "owner": "selectel",
     "repo": "terraform-provider-selectel",
-    "rev": "v7.2.1",
+    "rev": "v7.3.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-Kvolsw4lgh4Q8Vtq4PFzatD0Up/qeyZYfb+UQfwct3o="
+    "vendorHash": "sha256-wAVTsN0ZizBU4dMLK2wxf3RSNE6GCbXL1jTIULpKfNU="
   },
   "siderolabs_talos": {
     "hash": "sha256-PPD4blyXt4/IalzwEn4+lvuD1Qx7VuUD/CUJILDRI5k=",

From 6f7c90a75700a11d1d5493b4cffb1a2b0b5306d2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 30 Dec 2025 08:57:49 +0000
Subject: [PATCH 43/48] python3Packages.asyncer: 0.0.11 -> 0.0.12

---
 pkgs/development/python-modules/asyncer/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/asyncer/default.nix b/pkgs/development/python-modules/asyncer/default.nix
index db2a6b3b3ddf..8f779c1f26b2 100644
--- a/pkgs/development/python-modules/asyncer/default.nix
+++ b/pkgs/development/python-modules/asyncer/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage rec {
   pname = "asyncer";
-  version = "0.0.11";
+  version = "0.0.12";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "fastapi";
     repo = "asyncer";
     tag = version;
-    hash = "sha256-Akp76yZKkI/LRJH/tdLMviIB1tcfsLay7l0pCbvZThk=";
+    hash = "sha256-ViPCy9N93qcpaAeawuUoSnLiW1jVGFM14K9LC/AQ+Fc=";
   };
 
   build-system = [ pdm-backend ];

From 06489209df7d60db669a2218695f1016ace88ee9 Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Fri, 26 Dec 2025 18:19:38 +0000
Subject: [PATCH 44/48] python3Packages.pytensor: 2.36.0 -> 2.36.1

Diff: https://github.com/pymc-devs/pytensor/compare/rel-2.36.0...rel-2.36.1

Changelog: https://github.com/pymc-devs/pytensor/releases/tag/rel-2.36.1
---
 .../python-modules/pytensor/default.nix           | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/pytensor/default.nix b/pkgs/development/python-modules/pytensor/default.nix
index 8c10e0ec811f..923b148212f9 100644
--- a/pkgs/development/python-modules/pytensor/default.nix
+++ b/pkgs/development/python-modules/pytensor/default.nix
@@ -3,6 +3,7 @@
   stdenv,
   buildPythonPackage,
   fetchFromGitHub,
+  fetchpatch,
 
   # build-system
   setuptools,
@@ -33,7 +34,7 @@
 
 buildPythonPackage rec {
   pname = "pytensor";
-  version = "2.36.0";
+  version = "2.36.1";
   pyproject = true;
 
   src = fetchFromGitHub {
@@ -43,9 +44,18 @@ buildPythonPackage rec {
     postFetch = ''
       sed -i 's/git_refnames = "[^"]*"/git_refnames = " (tag: ${src.tag})"/' $out/pytensor/_version.py
     '';
-    hash = "sha256-tzwiPp0+xNKmndTn9Y1AXiqscQWaCC8gKgQHEtkyGag=";
+    hash = "sha256-rXLtrkuwmEe5+64Aao490VqD96LJ37/mxekWOzWRMlw=";
   };
 
+  patches = [
+    # https://github.com/pymc-devs/pytensor/pull/1805
+    (fetchpatch {
+      name = "fix-test-tri-nonconcrete-jax-compatibility.patch";
+      url = "https://github.com/pymc-devs/pytensor/commit/86310f074267e24d1b3b99ecf3d9cc0b593b170d.patch";
+      hash = "sha256-KRywJLixmdDJ1GGYsd5Twjiwgce0ZFxUidhTgM6Obmg=";
+    })
+  ];
+
   build-system = [
     setuptools
     cython
@@ -160,7 +170,6 @@ buildPythonPackage rec {
     # Don't run the most compute-intense tests
     "tests/scan/"
     "tests/tensor/"
-    "tests/sparse/sandbox/"
   ];
 
   passthru.updateScript = nix-update-script {

From 862aa989eca9b4517f6a769b27c70a1975109f4e Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Fri, 26 Dec 2025 18:18:03 +0000
Subject: [PATCH 45/48] python3Packages.pymc: 5.26.1 -> 5.27.0

Diff: https://github.com/pymc-devs/pymc/compare/v5.26.1...v5.27.0

Changelog: https://github.com/pymc-devs/pymc/releases/tag/v5.27.0
---
 pkgs/development/python-modules/pymc/default.nix | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/pymc/default.nix b/pkgs/development/python-modules/pymc/default.nix
index a017f9320c59..feb82d14628f 100644
--- a/pkgs/development/python-modules/pymc/default.nix
+++ b/pkgs/development/python-modules/pymc/default.nix
@@ -18,18 +18,20 @@
   scipy,
   threadpoolctl,
   typing-extensions,
+
+  writableTmpDirAsHomeHook,
 }:
 
 buildPythonPackage rec {
   pname = "pymc";
-  version = "5.26.1";
+  version = "5.27.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pymc-devs";
     repo = "pymc";
     tag = "v${version}";
-    hash = "sha256-j1v8MzAFfOmkN7pDcF91dS5Xprls8qfTQHWdaFUO4GU=";
+    hash = "sha256-wBeWydrHrF+wNZnqWa2k8tCaUvjcoiSrmY85LUhrQds=";
   };
 
   build-system = [
@@ -50,6 +52,13 @@ buildPythonPackage rec {
     typing-extensions
   ];
 
+  nativeBuildInputs = [
+    # Arviz (imported by pymc) wants to write a stamp file to the homedir at import time.
+    # Without $HOME being writable, `pythonImportsCheck` fails.
+    # https://github.com/arviz-devs/arviz/commit/4db612908f588d89bb5bfb6b83a08ada3d54fd02
+    writableTmpDirAsHomeHook
+  ];
+
   # The test suite is computationally intensive and test failures are not
   # indicative for package usability hence tests are disabled by default.
   doCheck = false;

From 879a21921a10b7604c06265cd1440c9fc9bca13a Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Tue, 30 Dec 2025 10:03:55 +0000
Subject: [PATCH 46/48] python3Packages.bambi: adjust disabled tests to fix
 build

---
 pkgs/development/python-modules/bambi/default.nix | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/bambi/default.nix b/pkgs/development/python-modules/bambi/default.nix
index 905fc1d0b2cf..8a947ff6ce9d 100644
--- a/pkgs/development/python-modules/bambi/default.nix
+++ b/pkgs/development/python-modules/bambi/default.nix
@@ -91,9 +91,10 @@ buildPythonPackage rec {
     "test_model_without_intercept"
     "test_non_distributional_model"
     "test_normal_with_splines"
-    "test_predict_new_groups_fail"
     "test_predict_new_groups"
+    "test_predict_new_groups_fail"
     "test_predict_offset"
+    "test_same_variable_conditional_and_group"
     "test_set_alias_warnings"
     "test_subplot_kwargs"
     "test_transforms"
@@ -113,8 +114,6 @@ buildPythonPackage rec {
   ];
 
   disabledTestPaths = [
-    # bayeux-ml is not available
-    "tests/test_alternative_samplers.py"
     # Tests require network access
     "tests/test_interpret.py"
     "tests/test_interpret_messages.py"

From 6cc0233a0bd2a08f180ecb7e7626e08299e15eba Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Tue, 30 Dec 2025 02:45:30 -0800
Subject: [PATCH 47/48] python3Packages.homeassistant-stubs: 2025.12.4 ->
 2025.12.5

Diff: https://github.com/KapJI/homeassistant-stubs/compare/2025.12.4...2025.12.5

Changelog: https://github.com/KapJI/homeassistant-stubs/releases/tag/2025.12.5
---
 pkgs/servers/home-assistant/stubs.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/home-assistant/stubs.nix b/pkgs/servers/home-assistant/stubs.nix
index c295e971c0af..15be7a421cc9 100644
--- a/pkgs/servers/home-assistant/stubs.nix
+++ b/pkgs/servers/home-assistant/stubs.nix
@@ -10,7 +10,7 @@
 
 buildPythonPackage rec {
   pname = "homeassistant-stubs";
-  version = "2025.12.4";
+  version = "2025.12.5";
   pyproject = true;
 
   disabled = python.version != home-assistant.python.version;
@@ -19,7 +19,7 @@ buildPythonPackage rec {
     owner = "KapJI";
     repo = "homeassistant-stubs";
     tag = version;
-    hash = "sha256-0KJcrp0/PtOE73DeXr6XEm6oGkE2FamncR9o3Au1QUM=";
+    hash = "sha256-c2Vr5S7WxaT0q4/Zc3yJmSU4ErhogCBKOISj1WVXflY=";
   };
 
   build-system = [

From b5641028cfa0bc2d8293e641cf1b311a6a2d63c0 Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Tue, 30 Dec 2025 14:27:14 +0300
Subject: [PATCH 48/48] Revert "carapace: 1.5.5 -> 1.5.7"

---
 pkgs/by-name/ca/carapace/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ca/carapace/package.nix b/pkgs/by-name/ca/carapace/package.nix
index a1c8f6e1f9a5..f258f37fe9d3 100644
--- a/pkgs/by-name/ca/carapace/package.nix
+++ b/pkgs/by-name/ca/carapace/package.nix
@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "carapace";
-  version = "1.5.7";
+  version = "1.5.5";
 
   src = fetchFromGitHub {
     owner = "carapace-sh";
     repo = "carapace-bin";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-gYgROZAmhgU/H4XsFXdIHRrS72EVRHxAalx8K7hmnDE=";
+    hash = "sha256-q7G7odkRwh4/w8H09exXYSC7n4CUeoG2iKb/k2D/gek=";
   };
 
-  vendorHash = "sha256-4k9iX47PjEEsJO1lB7xOwCnakhkd+OelaAr/zv3A1l8=";
+  vendorHash = "sha256-eADiOSLqouH9saTgbbQY18wc3DxCBvqdVKI32I7sTWQ=";
 
   ldflags = [
     "-s"