From 78eb85149587862f27cdb57da6085c33b98dae7f Mon Sep 17 00:00:00 2001
From: Henner Zeller <h.zeller@acm.org>
Date: Sat, 10 Jan 2026 10:06:41 +0100
Subject: [PATCH 001/106] linenoise: 1.0-34-g93b2db9 -> 2.0

---
 pkgs/by-name/li/linenoise/package.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/li/linenoise/package.nix b/pkgs/by-name/li/linenoise/package.nix
index ed7560ca8fae..8192e1af23a1 100644
--- a/pkgs/by-name/li/linenoise/package.nix
+++ b/pkgs/by-name/li/linenoise/package.nix
@@ -6,15 +6,15 @@
   fixDarwinDylibNames,
 }:
 
-stdenv.mkDerivation {
+stdenv.mkDerivation (finalAttrs: {
   pname = "linenoise";
-  version = "1.0-34-g93b2db9";
+  version = "2.0";
 
   src = fetchFromGitHub {
     owner = "antirez";
     repo = "linenoise";
-    rev = "1.0-34-g93b2db9";
-    hash = "sha256-GsrYg16gpjHkkmpCU3yGzqNS/buZl+JoWALLvwzmT4A=";
+    tag = finalAttrs.version;
+    hash = "sha256-lqJ/ecw7Q4QyDVXVFrxHL5EbNZOHpy5WruQn4VNibNA=";
   };
 
   nativeBuildInputs = [
@@ -54,4 +54,4 @@ stdenv.mkDerivation {
     platforms = lib.platforms.unix;
     license = lib.licenses.bsd2;
   };
-}
+})

From a41a15d79198109a8bc6f8cad2452dd8d1ec341f Mon Sep 17 00:00:00 2001
From: FliegendeWurst <arne.keller@posteo.de>
Date: Thu, 4 Dec 2025 16:34:29 +0100
Subject: [PATCH 002/106] wireworld: fix .desktop exec value

Co-authored-by: 19784049+rcmlz@users.noreply.github.com
---
 pkgs/by-name/wi/wireworld/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/wi/wireworld/package.nix b/pkgs/by-name/wi/wireworld/package.nix
index a9018ee75544..300be9ac7548 100644
--- a/pkgs/by-name/wi/wireworld/package.nix
+++ b/pkgs/by-name/wi/wireworld/package.nix
@@ -31,7 +31,7 @@ stdenv.mkDerivation {
   desktopItems = [
     (makeDesktopItem {
       name = "Wireworld";
-      exec = "wireworld";
+      exec = "Wireworld";
       comment = "";
       desktopName = "Wireworld";
       genericName = "Wireworld";

From 1c3ca1bc5525574af375ef1b2e50ae331d3418b5 Mon Sep 17 00:00:00 2001
From: Sergei Trofimovich <slyich@gmail.com>
Date: Tue, 20 Jan 2026 21:45:14 +0000
Subject: [PATCH 003/106] alttab: fix `gcc-15` build

Without the change the build fails on `master` as
https://hydra.nixos.org/build/317969520:

    alttab.c:536:25: error: too many arguments to function 'getOffendingModifiersMask'; expected 0, have 1
      536 |     g.ignored_modmask = getOffendingModifiersMask(dpy); // or 0 for g.debug
          |                         ^~~~~~~~~~~~~~~~~~~~~~~~~ ~~~
---
 pkgs/by-name/al/alttab/package.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/pkgs/by-name/al/alttab/package.nix b/pkgs/by-name/al/alttab/package.nix
index 0695c17551de..dfd726ddfc70 100644
--- a/pkgs/by-name/al/alttab/package.nix
+++ b/pkgs/by-name/al/alttab/package.nix
@@ -3,6 +3,7 @@
   stdenv,
   coreutils,
   fetchFromGitHub,
+  fetchpatch,
   autoconf,
   automake,
   pkg-config,
@@ -28,6 +29,15 @@ stdenv.mkDerivation rec {
     sha256 = "sha256-1+hk0OeSriXPyefv3wOgeiW781PL4VP5Luvt+RS5jmg=";
   };
 
+  patches = [
+    # Fix gcc-15 build failure: https://github.com/sagb/alttab/pull/178
+    (fetchpatch {
+      name = "gcc-15.patch";
+      url = "https://github.com/sagb/alttab/commit/665e3e369f74ab0075c22a46a3cb3a9f76bdd762.patch";
+      hash = "sha256-7l74kXs0bAyozBbgOEzDSY+4NE2pjdVfWda0XiPvCz4=";
+    })
+  ];
+
   nativeBuildInputs = [
     autoconf
     automake

From a97d0c5988e38abd1edad9900dee4d08c6f5b081 Mon Sep 17 00:00:00 2001
From: Sigmanificient <edhyjox@gmail.com>
Date: Sat, 24 Jan 2026 01:23:34 +0100
Subject: [PATCH 004/106] nixosTests.kmscon: init

---
 nixos/tests/all-tests.nix |  1 +
 nixos/tests/kmscon.nix    | 43 +++++++++++++++++++++++++++++++++++++++
 2 files changed, 44 insertions(+)
 create mode 100644 nixos/tests/kmscon.nix

diff --git a/nixos/tests/all-tests.nix b/nixos/tests/all-tests.nix
index 512082e29494..2298d708f46f 100644
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@@ -834,6 +834,7 @@ in
   kimai = runTest ./kimai.nix;
   kismet = runTest ./kismet.nix;
   kmonad = runTest ./kmonad.nix;
+  kmscon = runTest ./kmscon.nix;
   knot = runTest ./knot.nix;
   komga = runTest ./komga.nix;
   komodo-periphery = runTest ./komodo-periphery.nix;
diff --git a/nixos/tests/kmscon.nix b/nixos/tests/kmscon.nix
new file mode 100644
index 000000000000..0eb7e941bd84
--- /dev/null
+++ b/nixos/tests/kmscon.nix
@@ -0,0 +1,43 @@
+{ ... }:
+{
+  name = "kmscon";
+
+  nodes.machine =
+    {
+      pkgs,
+      lib,
+      ...
+    }:
+    {
+      imports = [
+        ./common/user-account.nix
+      ];
+
+      services.kmscon = {
+        enable = true;
+        hwRender = true;
+        fonts = [
+          {
+            name = "JetBrainsMono Nerd Font";
+            package = pkgs.nerd-fonts.jetbrains-mono;
+          }
+        ];
+        package = pkgs.kmscon;
+      };
+    };
+
+  enableOCR = true;
+
+  testScript = ''
+    machine.succeed(":")
+    # ^ this create a screen
+
+    with subtest("ensure we can open a tty"):
+      machine.wait_for_text("machine login:")
+      machine.send_chars("alice\n")
+      machine.wait_for_text("Password:")
+      machine.send_chars("foobar\n")
+      machine.wait_for_text("alice@machine")
+      machine.screenshot("tty.png")
+  '';
+}

From 47674555a168edbf2d43d506c007119f62d6b8e9 Mon Sep 17 00:00:00 2001
From: Sigmanificient <edhyjox@gmail.com>
Date: Sat, 24 Jan 2026 01:36:17 +0100
Subject: [PATCH 005/106] kmscon: add nixosTests.kmscon to passthru.tests

---
 pkgs/by-name/km/kmscon/package.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/km/kmscon/package.nix b/pkgs/by-name/km/kmscon/package.nix
index d5cf8dd13ee0..61a5d5e7ae97 100644
--- a/pkgs/by-name/km/kmscon/package.nix
+++ b/pkgs/by-name/km/kmscon/package.nix
@@ -19,6 +19,7 @@
   bash,
   buildPackages,
   nix-update-script,
+  nixosTests,
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "kmscon";
@@ -63,7 +64,10 @@ stdenv.mkDerivation (finalAttrs: {
     ./sandbox.patch # Generate system units where they should be (nix store) instead of /etc/systemd/system
   ];
 
-  passthru.updateScript = nix-update-script { extraArgs = [ "--use-github-releases" ]; };
+  passthru = {
+    tests.kmscon = nixosTests.kmscon;
+    updateScript = nix-update-script { extraArgs = [ "--use-github-releases" ]; };
+  };
 
   meta = {
     description = "KMS/DRM based System Console";

From 88e1287a99501087d17e041c65a996f5f93d00c0 Mon Sep 17 00:00:00 2001
From: hideyosh1 <penelope.zhong@proton.me>
Date: Mon, 26 Jan 2026 15:30:53 -0600
Subject: [PATCH 006/106] winetricks: 20250102 -> 20260125

---
 pkgs/applications/emulators/wine/sources.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/emulators/wine/sources.nix b/pkgs/applications/emulators/wine/sources.nix
index fdb6fffad5be..223fdba8014c 100644
--- a/pkgs/applications/emulators/wine/sources.nix
+++ b/pkgs/applications/emulators/wine/sources.nix
@@ -254,8 +254,8 @@ rec {
 
   winetricks = fetchFromGitHub rec {
     # https://github.com/Winetricks/winetricks/releases
-    version = "20250102";
-    hash = "sha256-Km2vVTYsLs091cjmNTW8Kqku3vdsEA0imTtZfqZWDQo=";
+    version = "20260125";
+    hash = "sha256-uIBVESebsH7rXnxWd/qlrZxcG7Y486PctHzcLz29HDk=";
     owner = "Winetricks";
     repo = "winetricks";
     rev = version;

From 079d6b841e6a3f2c05848ff15a6e2025b857261d Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 29 Jan 2026 00:29:21 +0000
Subject: [PATCH 007/106] bup: 0.33.9 -> 0.33.10

---
 pkgs/by-name/bu/bup/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/bu/bup/package.nix b/pkgs/by-name/bu/bup/package.nix
index 8373c3b527d1..379531d3ccd0 100644
--- a/pkgs/by-name/bu/bup/package.nix
+++ b/pkgs/by-name/bu/bup/package.nix
@@ -15,7 +15,7 @@
 assert par2Support -> par2cmdline != null;
 
 let
-  version = "0.33.9";
+  version = "0.33.10";
 
   pythonDeps =
     with python3.pkgs;
@@ -38,7 +38,7 @@ stdenv.mkDerivation {
     repo = "bup";
     owner = "bup";
     tag = version;
-    hash = "sha256-MW4kScu81XW89W7WpvOj40+S8bG5QozN30Hfj4TsnX4=";
+    hash = "sha256-uqXlfTFRgCN9c00iQik+IMN6k81fpeY6gNscP54Xzgs=";
   };
 
   buildInputs = [

From d1fd2eb69d699d6828674f31bfef3486c3bbf569 Mon Sep 17 00:00:00 2001
From: liberodark <liberodark@gmail.com>
Date: Thu, 29 Jan 2026 14:51:30 +0100
Subject: [PATCH 008/106] sssd: 2.11.1 -> 2.12.0

---
 pkgs/os-specific/linux/sssd/default.nix         | 17 +++++------------
 .../linux/sssd/fix-ldb-modules-path.patch       | 13 -------------
 2 files changed, 5 insertions(+), 25 deletions(-)
 delete mode 100644 pkgs/os-specific/linux/sssd/fix-ldb-modules-path.patch

diff --git a/pkgs/os-specific/linux/sssd/default.nix b/pkgs/os-specific/linux/sssd/default.nix
index e90a485c6e79..0eba0aae426d 100644
--- a/pkgs/os-specific/linux/sssd/default.nix
+++ b/pkgs/os-specific/linux/sssd/default.nix
@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  replaceVars,
   autoreconfHook,
   makeWrapper,
   glibc,
@@ -64,30 +63,23 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "sssd";
-  version = "2.11.1";
+  version = "2.12.0";
 
   src = fetchFromGitHub {
     owner = "SSSD";
     repo = "sssd";
     tag = finalAttrs.version;
-    hash = "sha256-JN4GVx5rBfNBLaMpLcKgyd+CyNDafz85BXUcfg5kDXQ=";
+    hash = "sha256-9F+D7qZKwnP1U0zJbvzy0f7dQSKkfgJrewDJ4p+Svgk=";
   };
 
   patches = [
+    # Keep in mind to check /src/external/pac_responder.m4 for Kerberos compatibility before update Kerberos !!!
     # Fix Kerberos Support version for PAC responder
-    ./fix-kerberos-version.patch
-
-    (replaceVars ./fix-ldb-modules-path.patch {
-      inherit ldb;
-      out = null; # will be replaced in postPatch https://github.com/NixOS/nixpkgs/pull/446589#discussion_r2384899857
-    })
+    #./fix-kerberos-version.patch
   ];
 
   postPatch = ''
     patchShebangs ./sbus_generate.sh.in
-
-    substituteInPlace src/confdb/confdb.c \
-      --replace-fail "@out@" "${placeholder "out"}"
   '';
 
   # Something is looking for <libxml/foo.h> instead of <libxml2/libxml/foo.h>
@@ -116,6 +108,7 @@ stdenv.mkDerivation (finalAttrs: {
       --with-ldb-lib-dir=$out/modules/ldb
       --with-nscd=${glibc.bin}/sbin/nscd
       --with-sssd-user=root
+      --with-ldb-modules-path="${placeholder "out"}/modules/ldb:${ldb}/modules/ldb"
     )
   ''
   + lib.optionalString withSudo ''
diff --git a/pkgs/os-specific/linux/sssd/fix-ldb-modules-path.patch b/pkgs/os-specific/linux/sssd/fix-ldb-modules-path.patch
deleted file mode 100644
index 8324804a53e6..000000000000
--- a/pkgs/os-specific/linux/sssd/fix-ldb-modules-path.patch
+++ /dev/null
@@ -1,13 +0,0 @@
-diff --git a/src/confdb/confdb.c b/src/confdb/confdb.c
-index 8c19142..7865684 100644
---- a/src/confdb/confdb.c
-+++ b/src/confdb/confdb.c
-@@ -775,6 +775,8 @@ int confdb_init(TALLOC_CTX *mem_ctx,
-     int ret = EOK;
-     mode_t old_umask;
- 
-+    setenv("LDB_MODULES_PATH", "@out@/modules/ldb:@ldb@/modules/ldb", 1);
-+
-     if (cdb_ctx == NULL) {
-         DEBUG(SSSDBG_FATAL_FAILURE, "Bad argument\n");
-         return EFAULT;

From 7ae6c9bf88b31513484241cebcd1ae9f7b38c6c0 Mon Sep 17 00:00:00 2001
From: rkuklik <rkuklik@expect-it.cz>
Date: Thu, 29 Jan 2026 16:44:17 +0100
Subject: [PATCH 009/106] kanidm: refactor option organization and integrate
 ssh

Change option names to be consistent with other NixOS modules and
option to integrate with Kanidm SSH keys when using the unix module.
---
 .../manual/release-notes/rl-2205.section.md   |   2 +-
 .../manual/release-notes/rl-2605.section.md   |   5 +
 nixos/modules/security/pam.nix                |  10 +-
 nixos/modules/services/security/kanidm.nix    | 179 +++++++++++-------
 nixos/tests/kanidm-provisioning.nix           |  32 ++--
 nixos/tests/kanidm.nix                        |  40 ++--
 6 files changed, 166 insertions(+), 102 deletions(-)

diff --git a/nixos/doc/manual/release-notes/rl-2205.section.md b/nixos/doc/manual/release-notes/rl-2205.section.md
index ad464dfa198d..f45258d0038b 100644
--- a/nixos/doc/manual/release-notes/rl-2205.section.md
+++ b/nixos/doc/manual/release-notes/rl-2205.section.md
@@ -105,7 +105,7 @@ In addition to numerous new and upgraded packages, this release has the followin
 
 - [K40-Whisperer](https://www.scorchworks.com/K40whisperer/k40whisperer.html), a program to control cheap Chinese laser cutters. Available as [programs.k40-whisperer.enable](#opt-programs.k40-whisperer.enable). Users must add themselves to the `k40` group to be able to access the device.
 
-- [kanidm](https://kanidm.github.io/kanidm/stable/), an identity management server written in Rust. Available as [services.kanidm](#opt-services.kanidm.enableServer)
+- [kanidm](https://kanidm.github.io/kanidm/stable/), an identity management server written in Rust. Available as [services.kanidm](#opt-services.kanidm.server.enable) (renamed to `services.kanidm.server.enable` in 26.05).
 
 - [Maddy](https://maddy.email/), a free an open source mail server. Available as [services.maddy](#opt-services.maddy.enable).
 
diff --git a/nixos/doc/manual/release-notes/rl-2605.section.md b/nixos/doc/manual/release-notes/rl-2605.section.md
index dea390ae8dfc..d1e577e470d6 100644
--- a/nixos/doc/manual/release-notes/rl-2605.section.md
+++ b/nixos/doc/manual/release-notes/rl-2605.section.md
@@ -140,6 +140,11 @@ See <https://github.com/NixOS/nixpkgs/issues/481673>.
 
 - `services.slurm` now supports slurmrestd usage through the `services.slurm.rest` NixOS options.
 
+- `services.kanidm` options for server, client and unix were moved under dedicated namespaces.
+  For each component `enableComponent` and `componentSettings` are now `component.enable` and
+  `component.settings`. The unix module now supports using SSH keys from Kanidm via
+  `services.kanidm.unix.sshIntegration = true`.
+
 - `glibc` has been updated to version 2.42.
 
   This version no longer makes the stack executable when a shared library requires this. A symptom
diff --git a/nixos/modules/security/pam.nix b/nixos/modules/security/pam.nix
index def4227d34ce..53c951c918e6 100644
--- a/nixos/modules/security/pam.nix
+++ b/nixos/modules/security/pam.nix
@@ -772,7 +772,7 @@ let
               }
               {
                 name = "kanidm";
-                enable = config.services.kanidm.enablePam;
+                enable = config.services.kanidm.unix.enable;
                 control = "sufficient";
                 modulePath = "${config.services.kanidm.package}/lib/pam_kanidm.so";
                 settings = {
@@ -1139,7 +1139,7 @@ let
                 }
                 {
                   name = "kanidm";
-                  enable = config.services.kanidm.enablePam;
+                  enable = config.services.kanidm.unix.enable;
                   control = "sufficient";
                   modulePath = "${config.services.kanidm.package}/lib/pam_kanidm.so";
                   settings = {
@@ -1248,7 +1248,7 @@ let
               }
               {
                 name = "kanidm";
-                enable = config.services.kanidm.enablePam;
+                enable = config.services.kanidm.unix.enable;
                 control = "sufficient";
                 modulePath = "${config.services.kanidm.package}/lib/pam_kanidm.so";
               }
@@ -1412,7 +1412,7 @@ let
               }
               {
                 name = "kanidm";
-                enable = config.services.kanidm.enablePam;
+                enable = config.services.kanidm.unix.enable;
                 control = "optional";
                 modulePath = "${config.services.kanidm.package}/lib/pam_kanidm.so";
               }
@@ -2339,7 +2339,7 @@ in
       # Include the PAM modules in the system path mostly for the manpages.
       [ package ]
       ++ lib.optional config.users.ldap.enable pam_ldap
-      ++ lib.optional config.services.kanidm.enablePam config.services.kanidm.package
+      ++ lib.optional config.services.kanidm.unix.enable config.services.kanidm.package
       ++ lib.optional config.services.sssd.enable pkgs.sssd
       ++ lib.optionals config.security.pam.krb5.enable [
         pam_krb5
diff --git a/nixos/modules/services/security/kanidm.nix b/nixos/modules/services/security/kanidm.nix
index 924b3f60f647..7018c2de8889 100644
--- a/nixos/modules/services/security/kanidm.nix
+++ b/nixos/modules/services/security/kanidm.nix
@@ -31,6 +31,7 @@ let
     mkOption
     mkOrder
     mkPackageOption
+    mkRenamedOptionModule
     optional
     optionals
     optionalString
@@ -44,9 +45,9 @@ let
   settingsFormat = pkgs.formats.toml { };
   # Remove null values, so we can document optional values that don't end up in the generated TOML file.
   filterConfig = converge (filterAttrsRecursive (_: v: v != null));
-  serverConfigFile = settingsFormat.generate "server.toml" (filterConfig cfg.serverSettings);
-  clientConfigFile = settingsFormat.generate "kanidm-config.toml" (filterConfig cfg.clientSettings);
-  unixConfigFile = settingsFormat.generate "kanidm-unixd.toml" (filterConfig cfg.unixSettings);
+  serverConfigFile = settingsFormat.generate "server.toml" (filterConfig cfg.server.settings);
+  clientConfigFile = settingsFormat.generate "kanidm-config.toml" (filterConfig cfg.client.settings);
+  unixConfigFile = settingsFormat.generate "kanidm-unixd.toml" (filterConfig cfg.unix.settings);
   provisionSecretFiles = filter (x: x != null) (
     [
       cfg.provision.idmAdminPasswordFile
@@ -56,11 +57,11 @@ let
     ++ mapAttrsToList (_: x: x.basicSecretFile) cfg.provision.systems.oauth2
   );
   secretPaths = [
-    cfg.serverSettings.tls_chain
-    cfg.serverSettings.tls_key
+    cfg.server.settings.tls_chain
+    cfg.server.settings.tls_key
   ]
   ++ optionals cfg.provision.enable provisionSecretFiles;
-  enableServerBackup = cfg.enableServer && (cfg.serverSettings.online_backup.versions != 0);
+  enableServerBackup = cfg.server.enable && (cfg.server.settings.online_backup.versions != 0);
 
   # Merge bind mount paths and remove paths where a prefix is already mounted.
   # This makes sure that if e.g. the tls_chain is in the nix store and /nix/store is already in the mount
@@ -218,7 +219,7 @@ let
 
   serverPort =
     let
-      address = cfg.serverSettings.bindaddress;
+      address = cfg.server.settings.bindaddress;
     in
     # ipv6:
     if hasInfix "]:" address then
@@ -230,19 +231,42 @@ let
     # default is 8443
     else
       throw "Address not parseable as IPv4 nor IPv6.";
+
+  addKaniSshKeys = cfg.unix.enable && cfg.unix.sshIntegration;
 in
 {
-  options.services.kanidm = {
-    enableClient = mkEnableOption "the Kanidm client";
-    enableServer = mkEnableOption "the Kanidm server";
-    enablePam = mkEnableOption "the Kanidm PAM and NSS integration";
+  imports = [
+    (mkRenamedOptionModule
+      [ "services" "kanidm" "enableServer" ]
+      [ "services" "kanidm" "server" "enable" ]
+    )
+    (mkRenamedOptionModule
+      [ "services" "kanidm" "serverSettings" ]
+      [ "services" "kanidm" "server" "settings" ]
+    )
+    (mkRenamedOptionModule
+      [ "services" "kanidm" "enableClient" ]
+      [ "services" "kanidm" "client" "enable" ]
+    )
+    (mkRenamedOptionModule
+      [ "services" "kanidm" "clientSettings" ]
+      [ "services" "kanidm" "client" "settings" ]
+    )
+    (mkRenamedOptionModule [ "services" "kanidm" "enablePam" ] [ "services" "kanidm" "unix" "enable" ])
+    (mkRenamedOptionModule
+      [ "services" "kanidm" "unixSettings" ]
+      [ "services" "kanidm" "unix" "settings" ]
+    )
+  ];
 
+  options.services.kanidm = {
     package = mkPackageOption pkgs "kanidm" {
       example = "kanidm_1_8";
       extraDescription = "Must be set to an explicit version.";
     };
 
-    serverSettings = mkOption {
+    server.enable = mkEnableOption "the Kanidm server";
+    server.settings = mkOption {
       type = types.submodule {
         freeformType = settingsFormat.type;
 
@@ -270,7 +294,7 @@ in
           domain = mkOption {
             description = ''
               The `domain` that Kanidm manages. Must be below or equal to the domain
-              specified in `serverSettings.origin`.
+              specified in `server.settings.origin`.
               This can be left at `null`, only if your instance has the role `ReadOnlyReplica`.
               While it is possible to change the domain later on, it requires extra steps!
               Please consider the warnings and execute the steps described
@@ -345,7 +369,8 @@ in
       '';
     };
 
-    clientSettings = mkOption {
+    client.enable = mkEnableOption "the Kanidm client";
+    client.settings = mkOption {
       type = types.submodule {
         freeformType = settingsFormat.type;
 
@@ -363,7 +388,11 @@ in
       '';
     };
 
-    unixSettings = mkOption {
+    unix = {
+      enable = mkEnableOption "the Kanidm PAM and NSS integration";
+      sshIntegration = mkEnableOption "Kanidm SSH keys login";
+    };
+    unix.settings = mkOption {
       type = types.submodule {
         freeformType = settingsFormat.type;
 
@@ -394,7 +423,7 @@ in
       instanceUrl = mkOption {
         description = "The instance url to which the provisioning tool should connect.";
         default = "https://localhost:${serverPort}";
-        defaultText = "https://localhost:<port from serverSettings.bindaddress>";
+        defaultText = "https://localhost:<port from server.settings.bindaddress>";
         type = types.str;
       };
 
@@ -671,11 +700,11 @@ in
     };
   };
 
-  config = mkIf (cfg.enableClient || cfg.enableServer || cfg.enablePam) {
+  config = mkIf (cfg.client.enable || cfg.server.enable || cfg.unix.enable) {
     warnings = lib.optionals (cfg.package.eolMessage != "") [ cfg.package.eolMessage ];
     services.kanidm = {
-      unixSettings.version = "2";
-      serverSettings.version = "2";
+      unix.settings.version = "2";
+      server.settings.version = "2";
     };
 
     assertions =
@@ -699,7 +728,7 @@ in
             unknownGroups = subtractLists knownGroups groups;
           in
           {
-            assertion = (cfg.enableServer && cfg.provision.enable) -> unknownGroups == [ ];
+            assertion = (cfg.server.enable && cfg.provision.enable) -> unknownGroups == [ ];
             message = "${opt} refers to unknown groups: ${toString unknownGroups}";
           };
 
@@ -709,71 +738,71 @@ in
             unknownEntities = subtractLists (attrNames entitiesByName) entities;
           in
           {
-            assertion = (cfg.enableServer && cfg.provision.enable) -> unknownEntities == [ ];
+            assertion = (cfg.server.enable && cfg.provision.enable) -> unknownEntities == [ ];
             message = "${opt} refers to unknown entities: ${toString unknownEntities}";
           };
       in
       [
         {
-          assertion = cfg.enablePam -> !(cfg.unixSettings ? pam_allowed_login_groups);
+          assertion = cfg.unix.enable -> !(cfg.unix.settings ? pam_allowed_login_groups);
           message = ''
-            <option>services.kanidm.unixSettings.pam_allowed_login_groups</option> has been renamed
-            to <option>services.kanidm.unixSettings.kanidm.pam_allowed_login_groups</option>.
+            <option>services.kanidm.unix.settings.pam_allowed_login_groups</option> has been renamed
+            to <option>services.kanidm.unix.settings.kanidm.pam_allowed_login_groups</option>.
             Please change your usage.
           '';
         }
         {
           assertion =
-            !cfg.enableServer
-            || ((cfg.serverSettings.tls_chain or null) == null)
-            || (!isStorePath cfg.serverSettings.tls_chain);
+            !cfg.server.enable
+            || ((cfg.server.settings.tls_chain or null) == null)
+            || (!isStorePath cfg.server.settings.tls_chain);
           message = ''
-            <option>services.kanidm.serverSettings.tls_chain</option> points to
+            <option>services.kanidm.server.settings.tls_chain</option> points to
             a file in the Nix store. You should use a quoted absolute path to
             prevent this.
           '';
         }
         {
           assertion =
-            !cfg.enableServer
-            || ((cfg.serverSettings.tls_key or null) == null)
-            || (!isStorePath cfg.serverSettings.tls_key);
+            !cfg.server.enable
+            || ((cfg.server.settings.tls_key or null) == null)
+            || (!isStorePath cfg.server.settings.tls_key);
           message = ''
-            <option>services.kanidm.serverSettings.tls_key</option> points to
+            <option>services.kanidm.server.settings.tls_key</option> points to
             a file in the Nix store. You should use a quoted absolute path to
             prevent this.
           '';
         }
         {
-          assertion = !cfg.enableClient || options.services.kanidm.clientSettings.isDefined;
+          assertion = !cfg.client.enable || options.services.kanidm.client.settings.isDefined;
           message = ''
-            <option>services.kanidm.clientSettings</option> needs to be configured
+            <option>services.kanidm.client.settings</option> needs to be configured
             if the client is enabled.
           '';
         }
         {
-          assertion = !cfg.enablePam || options.services.kanidm.clientSettings.isDefined;
+          assertion = !cfg.unix.enable || options.services.kanidm.client.settings.isDefined;
           message = ''
-            <option>services.kanidm.clientSettings</option> needs to be configured
+            <option>services.kanidm.client.settings</option> needs to be configured
             for the PAM daemon to connect to the Kanidm server.
           '';
         }
         {
           assertion =
-            !cfg.enableServer
+            !cfg.server.enable
             || (
-              cfg.serverSettings.domain == null
-              -> cfg.serverSettings.role == "WriteReplica" || cfg.serverSettings.role == "WriteReplicaNoUI"
+              cfg.server.settings.domain == null
+              -> cfg.server.settings.role == "WriteReplica" || cfg.server.settings.role == "WriteReplicaNoUI"
             );
           message = ''
-            <option>services.kanidm.serverSettings.domain</option> can only be set if this instance
+            <option>services.kanidm.server.settings.domain</option> can only be set if this instance
             is not a ReadOnlyReplica. Otherwise the db would inherit it from
             the instance it follows.
           '';
         }
         {
-          assertion = cfg.provision.enable -> cfg.enableServer;
-          message = "<option>services.kanidm.provision</option> requires <option>services.kanidm.enableServer</option> to be true";
+          assertion = cfg.provision.enable -> cfg.server.enable;
+          message = "<option>services.kanidm.provision</option> requires <option>services.kanidm.server.enable</option> to be true";
         }
         # If any secret is provisioned, the kanidm package must have some required patches applied to it
         {
@@ -844,27 +873,28 @@ in
                 # At least one group must map to a value in each claim map
                 (mkIf (cfg.provision.extraJsonFile == null) {
                   assertion =
-                    (cfg.provision.enable && cfg.enableServer)
+                    (cfg.provision.enable && cfg.server.enable)
                     -> any (xs: xs != [ ]) (attrValues claimCfg.valuesByGroup);
                   message = "services.kanidm.provision.systems.oauth2.${oauth2}.claimMaps.${claim} does not specify any values for any group";
                 })
                 # Public clients cannot define a basic secret
                 {
                   assertion =
-                    (cfg.provision.enable && cfg.enableServer && oauth2Cfg.public) -> oauth2Cfg.basicSecretFile == null;
+                    (cfg.provision.enable && cfg.server.enable && oauth2Cfg.public)
+                    -> oauth2Cfg.basicSecretFile == null;
                   message = "services.kanidm.provision.systems.oauth2.${oauth2} is a public client and thus cannot specify a basic secret";
                 }
                 # Public clients cannot disable PKCE
                 {
                   assertion =
-                    (cfg.provision.enable && cfg.enableServer && oauth2Cfg.public)
+                    (cfg.provision.enable && cfg.server.enable && oauth2Cfg.public)
                     -> !oauth2Cfg.allowInsecureClientDisablePkce;
                   message = "services.kanidm.provision.systems.oauth2.${oauth2} is a public client and thus cannot disable PKCE";
                 }
                 # Non-public clients cannot enable localhost redirects
                 {
                   assertion =
-                    (cfg.provision.enable && cfg.enableServer && !oauth2Cfg.public)
+                    (cfg.provision.enable && cfg.server.enable && !oauth2Cfg.public)
                     -> !oauth2Cfg.enableLocalhostRedirects;
                   message = "services.kanidm.provision.systems.oauth2.${oauth2} is a non-public client and thus cannot enable localhost redirects";
                 }
@@ -874,17 +904,17 @@ in
         )
       );
 
-    environment.systemPackages = mkIf cfg.enableClient [ cfg.package ];
+    environment.systemPackages = mkIf cfg.client.enable [ cfg.package ];
 
     systemd.tmpfiles.settings."10-kanidm" = mkIf enableServerBackup {
-      ${cfg.serverSettings.online_backup.path}.d = {
+      ${cfg.server.settings.online_backup.path}.d = {
         mode = "0700";
         user = "kanidm";
         group = "kanidm";
       };
     };
 
-    systemd.services.kanidm = mkIf cfg.enableServer {
+    systemd.services.kanidm = mkIf cfg.server.enable {
       description = "kanidm identity management daemon";
       wantedBy = [ "multi-user.target" ];
       after = [ "network.target" ];
@@ -915,10 +945,10 @@ in
           BindPaths =
             [ ]
             # To store backups
-            ++ optional enableServerBackup cfg.serverSettings.online_backup.path
+            ++ optional enableServerBackup cfg.server.settings.online_backup.path
             ++ optional (
-              cfg.enablePam && cfg.unixSettings ? home_mount_prefix
-            ) cfg.unixSettings.home_mount_prefix;
+              cfg.unix.enable && cfg.unix.settings ? home_mount_prefix
+            ) cfg.unix.settings.home_mount_prefix;
 
           AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
           CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ];
@@ -936,7 +966,7 @@ in
       ];
     };
 
-    systemd.services.kanidm-unixd = mkIf cfg.enablePam {
+    systemd.services.kanidm-unixd = mkIf cfg.unix.enable {
       description = "Kanidm PAM daemon";
       wantedBy = [ "multi-user.target" ];
       after = [ "network.target" ];
@@ -979,7 +1009,7 @@ in
       environment.RUST_LOG = "info";
     };
 
-    systemd.services.kanidm-unixd-tasks = mkIf cfg.enablePam {
+    systemd.services.kanidm-unixd-tasks = mkIf cfg.unix.enable {
       description = "Kanidm PAM home management daemon";
       wantedBy = [ "multi-user.target" ];
       after = [
@@ -1033,25 +1063,26 @@ in
 
     # These paths are hardcoded
     environment.etc = mkMerge [
-      (mkIf cfg.enableServer { "kanidm/server.toml".source = serverConfigFile; })
-      (mkIf options.services.kanidm.clientSettings.isDefined {
+      (mkIf cfg.server.enable { "kanidm/server.toml".source = serverConfigFile; })
+      (mkIf options.services.kanidm.client.settings.isDefined {
         "kanidm/config".source = clientConfigFile;
       })
-      (mkIf cfg.enablePam { "kanidm/unixd".source = unixConfigFile; })
+      (mkIf cfg.unix.enable { "kanidm/unixd".source = unixConfigFile; })
     ];
 
-    system.nssModules = mkIf cfg.enablePam [ cfg.package ];
+    system.nssModules = mkIf cfg.unix.enable [ cfg.package ];
 
     # Needs to be before "files" which is `mkBefore`
-    system.nssDatabases.group = mkOrder 490 (optional cfg.enablePam "kanidm");
-    system.nssDatabases.passwd = mkOrder 490 (optional cfg.enablePam "kanidm");
+    system.nssDatabases.group = mkOrder 490 (optional cfg.unix.enable "kanidm");
+    system.nssDatabases.passwd = mkOrder 490 (optional cfg.unix.enable "kanidm");
 
     users.groups = mkMerge [
-      (mkIf cfg.enableServer { kanidm = { }; })
-      (mkIf cfg.enablePam { kanidm-unixd = { }; })
+      (mkIf cfg.server.enable { kanidm = { }; })
+      (mkIf cfg.unix.enable { kanidm-unixd = { }; })
+      (mkIf addKaniSshKeys { kanidm-authorized-keys = { }; })
     ];
     users.users = mkMerge [
-      (mkIf cfg.enableServer {
+      (mkIf cfg.server.enable {
         kanidm = {
           description = "Kanidm server";
           isSystemUser = true;
@@ -1059,14 +1090,34 @@ in
           packages = [ cfg.package ];
         };
       })
-      (mkIf cfg.enablePam {
+      (mkIf cfg.unix.enable {
         kanidm-unixd = {
           description = "Kanidm PAM daemon";
           isSystemUser = true;
           group = "kanidm-unixd";
         };
       })
+      (mkIf addKaniSshKeys {
+        kanidm-authorized-keys = {
+          description = "Kanidm authorized keys delegate";
+          isSystemUser = true;
+          group = "kanidm-authorized-keys";
+        };
+      })
     ];
+
+    # AuthorizedKeysCommand is displeased with `/nix/store` permissions
+    services.openssh.settings = mkIf addKaniSshKeys {
+      AuthorizedKeysCommand = "${config.security.wrapperDir}/kanidm_ssh_authorizedkeys %u";
+      AuthorizedKeysCommandUser = "kanidm-authorized-keys";
+    };
+
+    security.wrappers.kanidm_ssh_authorizedkeys = mkIf addKaniSshKeys {
+      owner = "root";
+      group = "root";
+      permissions = "a+rx";
+      source = "${cfg.package}/bin/kanidm_ssh_authorizedkeys";
+    };
   };
 
   meta.maintainers = with lib.maintainers; [
diff --git a/nixos/tests/kanidm-provisioning.nix b/nixos/tests/kanidm-provisioning.nix
index 5e5a6f0db606..8813be497abe 100644
--- a/nixos/tests/kanidm-provisioning.nix
+++ b/nixos/tests/kanidm-provisioning.nix
@@ -25,21 +25,25 @@ in
     {
       services.kanidm = {
         package = kanidmPackage;
-        enableServer = true;
-        serverSettings = {
-          origin = "https://${serverDomain}";
-          domain = serverDomain;
-          bindaddress = "[::]:443";
-          ldapbindaddress = "[::1]:636";
-          tls_chain = "${certsPath}/snakeoil.crt";
-          tls_key = "${certsPath}/snakeoil.key";
+        server = {
+          enable = true;
+          settings = {
+            origin = "https://${serverDomain}";
+            domain = serverDomain;
+            bindaddress = "[::]:443";
+            ldapbindaddress = "[::1]:636";
+            tls_chain = "${certsPath}/snakeoil.crt";
+            tls_key = "${certsPath}/snakeoil.key";
+          };
         };
         # So we can check whether provisioning did what we wanted
-        enableClient = true;
-        clientSettings = {
-          uri = "https://${serverDomain}";
-          verify_ca = true;
-          verify_hostnames = true;
+        client = {
+          enable = true;
+          settings = {
+            uri = "https://${serverDomain}";
+            verify_ca = true;
+            verify_hostnames = true;
+          };
         };
       };
 
@@ -289,7 +293,7 @@ in
       # We need access to the config file in the test script.
       filteredConfig = pkgs.lib.converge (pkgs.lib.filterAttrsRecursive (
         _: v: v != null
-      )) nodes.provision.services.kanidm.serverSettings;
+      )) nodes.provision.services.kanidm.server.settings;
       serverConfigFile = (pkgs.formats.toml { }).generate "server.toml" filteredConfig;
 
       specialisations = "${nodes.provision.system.build.toplevel}/specialisation";
diff --git a/nixos/tests/kanidm.nix b/nixos/tests/kanidm.nix
index 7a0fe66ae968..4ee6ce4cd1da 100644
--- a/nixos/tests/kanidm.nix
+++ b/nixos/tests/kanidm.nix
@@ -29,14 +29,16 @@ in
     {
       services.kanidm = {
         package = kanidmPackage;
-        enableServer = true;
-        serverSettings = {
-          origin = "https://${serverDomain}";
-          domain = serverDomain;
-          bindaddress = "[::]:443";
-          ldapbindaddress = "[::1]:636";
-          tls_chain = "${certsPath}/snakeoil.crt";
-          tls_key = "${certsPath}/snakeoil.key";
+        server = {
+          enable = true;
+          settings = {
+            origin = "https://${serverDomain}";
+            domain = serverDomain;
+            bindaddress = "[::]:443";
+            ldapbindaddress = "[::1]:636";
+            tls_chain = "${certsPath}/snakeoil.crt";
+            tls_key = "${certsPath}/snakeoil.key";
+          };
         };
       };
 
@@ -59,15 +61,17 @@ in
     {
       services.kanidm = {
         package = kanidmPackage;
-        enableClient = true;
-        clientSettings = {
-          uri = "https://${serverDomain}";
-          verify_ca = true;
-          verify_hostnames = true;
-        };
-        enablePam = true;
-        unixSettings = {
-          kanidm.pam_allowed_login_groups = [ "shell" ];
+        client = {
+          enable = true;
+          settings = {
+            uri = "https://${serverDomain}";
+            verify_ca = true;
+            verify_hostnames = true;
+          };
+          unix = {
+            enable = true;
+            kanidm.pam_allowed_login_groups = [ "shell" ];
+          };
         };
       };
 
@@ -86,7 +90,7 @@ in
       # We need access to the config file in the test script.
       filteredConfig = pkgs.lib.converge (pkgs.lib.filterAttrsRecursive (
         _: v: v != null
-      )) nodes.server.services.kanidm.serverSettings;
+      )) nodes.server.services.kanidm.server.settings;
       serverConfigFile = (pkgs.formats.toml { }).generate "server.toml" filteredConfig;
     in
     ''

From 7fdbf426c3a7e6789b7f91ca72b9f9d3f478685d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Maximilian=20G=C3=BCntner?= <code@mguentner.de>
Date: Wed, 28 Jan 2026 15:03:00 +0100
Subject: [PATCH 010/106] nixos/tests/networking: add eap tests

---
 nixos/tests/networking/networkmanager.nix | 120 +++++++++++++++++-
 nixos/tests/networking/router-eap.nix     | 146 ++++++++++++++++++++++
 2 files changed, 265 insertions(+), 1 deletion(-)
 create mode 100644 nixos/tests/networking/router-eap.nix

diff --git a/nixos/tests/networking/networkmanager.nix b/nixos/tests/networking/networkmanager.nix
index 320aa86cd04d..55f65897e3cc 100644
--- a/nixos/tests/networking/networkmanager.nix
+++ b/nixos/tests/networking/networkmanager.nix
@@ -8,10 +8,34 @@ with import ../../lib/testing-python.nix { inherit system pkgs; };
 
 let
   lib = pkgs.lib;
+
+  # Generate EAP certificates on the fly (CA, server, and client certs)
+  eapCerts = pkgs.runCommand "eap-certs" { buildInputs = [ pkgs.openssl ]; } ''
+    mkdir -p $out
+
+    # Create CA certificate
+    openssl req -x509 -newkey rsa:2048 -days 365000 -nodes \
+      -keyout $out/ca.key -out $out/ca.cert \
+      -subj "/CN=ExampleCA"
+
+    # Create server certificate
+    openssl req -newkey rsa:2048 -nodes \
+      -keyout $out/server.key -out server.csr \
+      -subj "/CN=server.example.com"
+    openssl x509 -req -in server.csr -CA $out/ca.cert -CAkey $out/ca.key \
+      -days 365000 -set_serial 100 -out $out/server.cert
+
+    # Create client certificate
+    openssl req -newkey rsa:2048 -nodes \
+      -keyout $out/client1.key -out client1.csr \
+      -subj "/CN=client1.example.com"
+    openssl x509 -req -in client1.csr -CA $out/ca.cert -CAkey $out/ca.key \
+      -days 365000 -set_serial 101 -out $out/client1.cert
+  '';
+
   # this is intended as a client test since you shouldn't use NetworkManager for a router or server
   # so using systemd-networkd for the router vm is fine in these tests.
   router = import ./router.nix { networkd = true; };
-  qemu-common = import ../../lib/qemu-common.nix { inherit (pkgs) lib pkgs; };
   clientConfig =
     extraConfig:
     lib.recursiveUpdate {
@@ -180,6 +204,100 @@ let
         client.wait_until_succeeds("ping -c 1 fd00:1234:5678:1::23")
       '';
     };
+    eap =
+      let
+        toBase64Blob =
+          file:
+          "data:;base64,"
+          + builtins.readFile (
+            pkgs.runCommand "base64" { } ''
+              ${pkgs.coreutils}/bin/base64 -w0 ${file} > $out
+            ''
+          );
+      in
+      {
+        name = "eap / 802.1x with secrets in blob encoding";
+        nodes = {
+          router = import ./router-eap.nix { inherit eapCerts; };
+          client = clientConfig {
+            networking.networkmanager.ensureProfiles.profiles.default = {
+              ipv4.method = "auto";
+              "802-1x" = {
+                eap = "tls";
+                identity = "client1.example.com";
+                ca-cert = toBase64Blob "${eapCerts}/ca.cert";
+                client-cert = toBase64Blob "${eapCerts}/client1.cert";
+                private-key = toBase64Blob "${eapCerts}/client1.key";
+                private-key-password-flags = "4";
+              };
+            };
+            networking.wireless = {
+              # it is a bit unfortunate that wpa-supplicant is equated with
+              # `wireless` when it also works for wired connections
+              enable = lib.mkOverride 9 true;
+              driver = "wired";
+            };
+          };
+        };
+
+        testScript = ''
+          start_all()
+          client.wait_for_unit("NetworkManager.service")
+          router.wait_for_unit("freeradius.service")
+          router.wait_for_unit("hostapd.service")
+          router.wait_until_succeeds("journalctl -b --unit freeradius.service | grep \"Sent Access-Accept\"")
+          router.wait_until_succeeds("journalctl -b --unit freeradius.service | grep \"TLS-Client-Cert-Common-Name := \\\"client1.example.com\\\"\"")
+        '';
+      };
+    eapFiles = {
+      name = "eap / 802.1x with secrets in stored in files";
+      nodes = {
+        router = import ./router-eap.nix { inherit eapCerts; };
+        client = clientConfig {
+          environment.etc = {
+            "wpa_supplicant/ca.cert" = {
+              source = "${eapCerts}/ca.cert";
+              user = "wpa_supplicant";
+              mode = "0400";
+            };
+            "wpa_supplicant/client1.cert" = {
+              source = "${eapCerts}/client1.cert";
+              user = "wpa_supplicant";
+              mode = "0400";
+            };
+            "wpa_supplicant/client1.key" = {
+              source = "${eapCerts}/client1.key";
+              user = "wpa_supplicant";
+              mode = "0400";
+            };
+          };
+          networking.networkmanager.ensureProfiles.profiles.default = {
+            ipv4.method = "auto";
+            "802-1x" = {
+              eap = "tls";
+              identity = "client1.example.com";
+              ca-cert = "/etc/wpa_supplicant/ca.cert";
+              client-cert = "/etc/wpa_supplicant/client1.cert";
+              private-key = "/etc/wpa_supplicant/client1.key";
+              private-key-password-flags = "4";
+            };
+          };
+          networking.wireless = {
+            enable = lib.mkOverride 9 true;
+            driver = "wired";
+          };
+        };
+      };
+
+      testScript = ''
+        start_all()
+        client.wait_for_unit("NetworkManager.service")
+        router.wait_for_unit("freeradius.service")
+        router.wait_for_unit("hostapd.service")
+        router.wait_until_succeeds("journalctl -b --unit freeradius.service | grep \"Sent Access-Accept\"")
+        router.wait_until_succeeds("journalctl -b --unit freeradius.service | grep \"TLS-Client-Cert-Common-Name := \\\"client1.example.com\\\"\"")
+      '';
+    };
   };
 in
 lib.mapAttrs (lib.const (
diff --git a/nixos/tests/networking/router-eap.nix b/nixos/tests/networking/router-eap.nix
new file mode 100644
index 000000000000..fac1e5b700f2
--- /dev/null
+++ b/nixos/tests/networking/router-eap.nix
@@ -0,0 +1,146 @@
+{ eapCerts }:
+{ config, pkgs, ... }:
+let
+  radiusDir =
+    let
+      eapConfig = builtins.toFile "eap.conf" ''
+        eap {
+            default_eap_type = tls
+            timer_expire = 60
+            ignore_unknown_eap_types = no
+
+            tls {
+                # Path to CA certificate
+                ca_file = ''${certdir}/ca.cert
+
+                # Path to server certificate and private key
+                certificate_file = ''${certdir}/server.cert
+                private_key_file = ''${certdir}/server.key
+
+                # Enable mutual authentication
+                require_client_cert = yes
+
+                # Cipher suite (example)
+                ciphers = "DEFAULT"
+            }
+        }
+      '';
+      clientsConfig = builtins.toFile "client.conf" ''
+        client localhost {
+          ipaddr = 127.0.0.1
+          secret = insecure
+          require_message_authenticator = no
+        }
+      '';
+
+      # sample users file, not used for eap-tls, only for e.g. eap-ttls
+      usersConfig = builtins.toFile "users.conf" ''
+        testuser	Cleartext-Password := "supersecret"
+      '';
+
+      # this constructs the freeradius config directory
+      # it starts with the upstream config, then overwrites certain files
+      # and uses the generated certs from eapCerts
+      buildScript = pkgs.writeShellApplication {
+        name = "builder";
+
+        runtimeInputs = [ pkgs.coreutils ];
+
+        # https://www.shellcheck.net/wiki/SC2154 -- out is referenced but not assigned.
+        excludeShellChecks = [ "SC2154" ];
+
+        text = ''
+          cp --recursive  ${pkgs.freeradius}/etc/* "$out"
+          chmod +w -R "$out"
+          cp --force ${eapCerts}/ca.cert "$out/certs/ca.cert"
+          cp --force ${eapCerts}/ca.key "$out/certs/ca.key"
+          cp --force ${eapCerts}/server.cert "$out/certs/server.cert"
+          cp --force ${eapCerts}/server.key "$out/certs/server.key"
+          cp --force ${eapConfig} "$out/mods-enabled/eap"
+          cp --force ${usersConfig} "$out/users"
+          cp --force ${clientsConfig} "$out/clients.conf"
+        '';
+      };
+    in
+    derivation {
+      name = "radius_dir";
+      builder = "${pkgs.bash}/bin/bash";
+      args = [ "${buildScript}/bin/builder" ];
+      inherit (pkgs) system;
+    };
+  inherit (pkgs) lib;
+  vlanIfs = lib.range 1 (lib.length config.virtualisation.vlans);
+in
+{
+  virtualisation.vlans = [
+    1
+    2
+    3
+  ];
+  boot.kernel.sysctl."net.ipv6.conf.all.forwarding" = true;
+  networking = {
+    useDHCP = false;
+    useNetworkd = true;
+    firewall.checkReversePath = true;
+    firewall.allowedUDPPorts = [ 547 ];
+    interfaces = lib.mkOverride 0 (
+      lib.listToAttrs (
+        lib.forEach vlanIfs (
+          n:
+          lib.nameValuePair "eth${toString n}" {
+            ipv4.addresses = [
+              {
+                address = "192.168.${toString n}.1";
+                prefixLength = 24;
+              }
+            ];
+            ipv6.addresses = [
+              {
+                address = "fd00:1234:5678:${toString n}::1";
+                prefixLength = 64;
+              }
+            ];
+          }
+        )
+      )
+    );
+  };
+
+  services.freeradius = {
+    enable = true;
+    configDir = radiusDir;
+    debug = true;
+  };
+
+  # upstream nixpkgs hostapd is focused on Wifi
+  systemd.services.hostapd =
+    let
+      hostapdConfig = builtins.toFile "hostapd.conf" ''
+        interface=eth1
+        driver=wired
+        logger_stdout=-1
+        logger_stdout_level=1
+        debug=2
+        dump_file=/tmp/hostapd.dump
+        ieee8021x=1
+        eap_reauth_period=3600
+        use_pae_group_addr=1
+        ##### RADIUS configuration ####################################################
+        own_ip_addr=127.0.0.1
+        nas_identifier=ap.example.com
+        auth_server_addr=127.0.0.1
+        auth_server_port=1812
+        auth_server_shared_secret=insecure
+      '';
+    in
+    {
+      description = "IEEE 802.11 Host Access-Point Daemon";
+      wantedBy = [ "multi-user.target" ];
+      serviceConfig = {
+        ExecStart = "${pkgs.hostapd}/bin/hostapd ${hostapdConfig}";
+        Restart = "always";
+        ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";
+        RuntimeDirectory = "hostapd";
+      };
+    };
+}

From f4f1893c01d6f6f65a1d5a83448eb810b6250113 Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Sat, 31 Jan 2026 19:38:56 +0200
Subject: [PATCH 011/106] plausible: move overrides to package.nix

---
 pkgs/by-name/pl/plausible/package.nix | 5 ++++-
 pkgs/top-level/all-packages.nix       | 4 ----
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/pl/plausible/package.nix b/pkgs/by-name/pl/plausible/package.nix
index 75fdf91ad317..ed170e31d665 100644
--- a/pkgs/by-name/pl/plausible/package.nix
+++ b/pkgs/by-name/pl/plausible/package.nix
@@ -1,6 +1,7 @@
 {
   lib,
-  beamPackages,
+  beam27Packages,
+  elixir_1_18,
   buildNpmPackage,
   rustPlatform,
   fetchFromGitHub,
@@ -111,6 +112,8 @@ let
         done
       '';
 
+  beamPackages = beam27Packages.extend (self: super: { elixir = elixir_1_18; });
+
 in
 beamPackages.mixRelease rec {
   inherit
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index fa357ead5f9b..74ed8ac859ab 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -1559,10 +1559,6 @@ with pkgs;
     stdenv = clangStdenv;
   };
 
-  plausible = callPackage ../by-name/pl/plausible/package.nix {
-    beamPackages = beam27Packages.extend (self: super: { elixir = elixir_1_18; });
-  };
-
   reattach-to-user-namespace = callPackage ../os-specific/darwin/reattach-to-user-namespace { };
 
   xcodeenv = callPackage ../development/mobile/xcodeenv { };

From a2b61e7e03c185be48823c2844b64b5116357f03 Mon Sep 17 00:00:00 2001
From: hideyosh1 <penelope.zhong@proton.me>
Date: Mon, 26 Jan 2026 17:11:50 -0600
Subject: [PATCH 012/106] winetricks: add unrar-free dependency

winetricks: add unrar-free dependency
---
 .../emulators/wine/winetricks.nix             | 60 ++++++++++++++-----
 1 file changed, 46 insertions(+), 14 deletions(-)

diff --git a/pkgs/applications/emulators/wine/winetricks.nix b/pkgs/applications/emulators/wine/winetricks.nix
index 76e9ee4b621f..609aadfb0fc5 100644
--- a/pkgs/applications/emulators/wine/winetricks.nix
+++ b/pkgs/applications/emulators/wine/winetricks.nix
@@ -2,20 +2,23 @@
   lib,
   stdenv,
   callPackage,
-  perl,
-  which,
-  coreutils,
-  zenity,
-  curl,
-  cabextract,
-  unzip,
-  p7zip,
-  gnused,
-  gnugrep,
+  makeWrapper,
   bash,
+  cabextract,
+  coreutils,
+  curl,
   gawk,
+  gnugrep,
+  gnused,
   gnutar,
+  unrar-free,
   gzip,
+  p7zip,
+  perl,
+  unzip,
+  which,
+  zenity,
+  versionCheckHook,
 }:
 
 stdenv.mkDerivation rec {
@@ -27,6 +30,7 @@ stdenv.mkDerivation rec {
   buildInputs = [
     perl
     which
+    makeWrapper
   ];
 
   # coreutils is for sha1sum
@@ -45,18 +49,46 @@ stdenv.mkDerivation rec {
     gawk
     gnutar
     gzip
+    unrar-free
   ];
 
   makeFlags = [ "PREFIX=$(out)" ];
 
   doCheck = false; # requires "bashate"
 
-  postInstall = ''
-    sed -i \
-      -e '2i PATH="${pathAdd}:$PATH"' \
-      "$out/bin/winetricks"
+  postPatch = ''
+    patchShebangs src/winetricks
+    substituteInPlace src/winetricks \
+      --replace-fail 'command -v unrar' 'command -v unrar-free' \
+      --replace-fail 'w_try unrar' 'w_try unrar-free'
   '';
 
+  postInstall =
+    let
+      runtimeDependencies = [
+        bash
+        cabextract
+        coreutils
+        curl
+        gawk
+        gnugrep
+        gnused
+        gnutar
+        gzip
+        p7zip
+        perl
+        unrar-free
+        unzip
+        which
+        zenity
+      ];
+    in
+    ''
+      wrapProgram $out/bin/winetricks \
+        --prefix PATH : "${lib.makeBinPath runtimeDependencies}" \
+        --set WINETRICKS_LATEST_VERSION_CHECK "disabled"
+    '';
+
   passthru = {
     inherit (src) updateScript;
   };

From cfcd72b91e43d6012cafa6d161a8bb3a75030dd7 Mon Sep 17 00:00:00 2001
From: hideyosh1 <penelope.zhong@proton.me>
Date: Sun, 1 Feb 2026 13:12:42 -0600
Subject: [PATCH 013/106] winetricks: add versionCheckHook

also add postInstall to replace PATH hacks
---
 .../emulators/wine/winetricks.nix             | 24 ++++---------------
 1 file changed, 4 insertions(+), 20 deletions(-)

diff --git a/pkgs/applications/emulators/wine/winetricks.nix b/pkgs/applications/emulators/wine/winetricks.nix
index 609aadfb0fc5..76a3eef7a497 100644
--- a/pkgs/applications/emulators/wine/winetricks.nix
+++ b/pkgs/applications/emulators/wine/winetricks.nix
@@ -11,13 +11,13 @@
   gnugrep,
   gnused,
   gnutar,
-  unrar-free,
   gzip,
   p7zip,
   perl,
   unzip,
   which,
   zenity,
+  unrar-free,
   versionCheckHook,
 }:
 
@@ -33,29 +33,13 @@ stdenv.mkDerivation rec {
     makeWrapper
   ];
 
-  # coreutils is for sha1sum
-  pathAdd = lib.makeBinPath [
-    perl
-    which
-    coreutils
-    zenity
-    curl
-    cabextract
-    unzip
-    p7zip
-    gnused
-    gnugrep
-    bash
-    gawk
-    gnutar
-    gzip
-    unrar-free
-  ];
-
   makeFlags = [ "PREFIX=$(out)" ];
 
   doCheck = false; # requires "bashate"
 
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
   postPatch = ''
     patchShebangs src/winetricks
     substituteInPlace src/winetricks \

From 34a348a0590f88fece4c5a1773fbbc7b94c70445 Mon Sep 17 00:00:00 2001
From: Alexander Bantyev <balsoft@balsoft.ru>
Date: Mon, 2 Feb 2026 14:14:04 +0100
Subject: [PATCH 014/106] python3Packages.polars: fix the mimalloc flag

Since https://github.com/pola-rs/polars/pull/16365, the proper way to
use the mimalloc allocator is the allocator=mimalloc config options,
instead of use_mimalloc.

Update our packaging accordingly
---
 pkgs/development/python-modules/polars/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/development/python-modules/polars/default.nix b/pkgs/development/python-modules/polars/default.nix
index bdd9e72e8290..b4bb2b5ab9cb 100644
--- a/pkgs/development/python-modules/polars/default.nix
+++ b/pkgs/development/python-modules/polars/default.nix
@@ -97,7 +97,7 @@ buildPythonPackage rec {
 
     RUSTFLAGS = lib.concatStringsSep " " (
       lib.optionals (polarsMemoryAllocator.pname == "mimalloc") [
-        "--cfg use_mimalloc"
+        "--cfg allocator=\"mimalloc\""
       ]
     );
     RUST_BACKTRACE = true;

From 3fa42150db78e2108f9d61ae6d69ecfa84ba415e Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 3 Feb 2026 22:55:17 +0000
Subject: [PATCH 015/106] aws-sam-cli: 1.152.0 -> 1.153.1

---
 pkgs/by-name/aw/aws-sam-cli/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/aw/aws-sam-cli/package.nix b/pkgs/by-name/aw/aws-sam-cli/package.nix
index 0b11c1ee9196..07d1aa433ffa 100644
--- a/pkgs/by-name/aw/aws-sam-cli/package.nix
+++ b/pkgs/by-name/aw/aws-sam-cli/package.nix
@@ -11,14 +11,14 @@
 
 python3.pkgs.buildPythonApplication rec {
   pname = "aws-sam-cli";
-  version = "1.152.0";
+  version = "1.153.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "aws";
     repo = "aws-sam-cli";
     tag = "v${version}";
-    hash = "sha256-N+x9ZNd6WvDJTFERhWJD5HsDE7dFyH+jOnEMzJ3IHSk=";
+    hash = "sha256-502Ca/oHAIG/9G25G8xEJEJPWwDKeGrpRN1ZcEY+1LE=";
   };
 
   build-system = with python3.pkgs; [ setuptools ];

From c88a7f61576136f6f7fc746beb766f0cbeb3fb3a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 4 Feb 2026 00:27:21 +0000
Subject: [PATCH 016/106] vscode-extensions.ms-ceintl.vscode-language-pack-fr:
 1.105.2025100809 -> 1.108.2026012809

---
 .../vscode/extensions/language-packs.nix      | 30 +++++++++----------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/pkgs/applications/editors/vscode/extensions/language-packs.nix b/pkgs/applications/editors/vscode/extensions/language-packs.nix
index 050d388b5c6f..b0d8acc2c338 100644
--- a/pkgs/applications/editors/vscode/extensions/language-packs.nix
+++ b/pkgs/applications/editors/vscode/extensions/language-packs.nix
@@ -13,7 +13,7 @@ let
   buildVscodeLanguagePack =
     {
       language,
-      version ? "1.105.2025100809",
+      version ? "1.108.2026012809",
       hash,
     }:
     buildVscodeMarketplaceExtension {
@@ -41,71 +41,71 @@ in
   # French
   vscode-language-pack-fr = buildVscodeLanguagePack {
     language = "fr";
-    hash = "sha256-HFpkXUYz7//5KlKe1NjiT/KBFBar9H5ivpltqGOTHJo=";
+    hash = "sha256-1+aWgvoXR/FqhnIn3OrLOC11jLXVWlO2yecpzr2Waww=";
   };
   # Italian
   vscode-language-pack-it = buildVscodeLanguagePack {
     language = "it";
-    hash = "sha256-YD1jTB9VzWF51QaFPRsEBC1pMkgrs2cl0HFA/PFz3ro=";
+    hash = "sha256-t6jN3qok7B4/G/IjEXD6THO6c+8X+1gxny6W7qdh5mI=";
   };
   # German
   vscode-language-pack-de = buildVscodeLanguagePack {
     language = "de";
-    hash = "sha256-hIw0nFdYgcyOuJW8k7HRS0sKc0Gsuh7YWyLwQ3Z1FkU=";
+    hash = "sha256-rZM/T1gbYrtcHNLW0itNdhKcRR938PwK5VBN0xLDIWg=";
   };
   # Spanish
   vscode-language-pack-es = buildVscodeLanguagePack {
     language = "es";
-    hash = "sha256-iO+1Lq/vXkMCGNnj9CovBhLPtbuJtGHSfQnjXypRBcw=";
+    hash = "sha256-PG3oOCjWRgh1ox6GAPRdZdf8QNP1JsJZznJnM+2Ihl0=";
   };
   # Russian
   vscode-language-pack-ru = buildVscodeLanguagePack {
     language = "ru";
-    hash = "sha256-HxTStM+g/XKJH1twNYMu/V7IM7vBlYF4mfcemV+oOQI=";
+    hash = "sha256-RPpNet015xGnOszcKfehP9VxnfDAnQJ2A62rVtNBDew=";
   };
   # Chinese (Simplified)
   vscode-language-pack-zh-hans = buildVscodeLanguagePack {
     language = "zh-hans";
-    hash = "sha256-nCPu7pEXpM22M+2IMtuPgxzyEF3R6MPm2CVZAccPdAU=";
+    hash = "sha256-pm1dCoK4YM8XBM/O6p42R4PYy5f95sLcECHJMAKFt9Q=";
   };
   # Chinese (Traditional)
   vscode-language-pack-zh-hant = buildVscodeLanguagePack {
     language = "zh-hant";
-    hash = "sha256-JKKqrwGn/EMDMot1cIgLpekUVQf4IY+snENeKoE5jYU=";
+    hash = "sha256-cSM+2W5aCUA77kxgV7vyk7KAoSlkeT+y56ziIPjP9II=";
   };
   # Japanese
   vscode-language-pack-ja = buildVscodeLanguagePack {
     language = "ja";
-    hash = "sha256-6OWcr/XnJsOvRFho+P5Z+ppuAC8d08I3s0YWnLhH874=";
+    hash = "sha256-UfMMLKHi48Qhgm8PXFAfGFQFX6e8vQsl/RYqha42TOc=";
   };
   # Korean
   vscode-language-pack-ko = buildVscodeLanguagePack {
     language = "ko";
-    hash = "sha256-VqlAaS679KF0ZKlzDT55FIu5GKyzU41y1ptX7t88UHc=";
+    hash = "sha256-gneZF4CIEDy88juFZBiB9/o/rzTnu2du4aiZ+NH+XlE=";
   };
   # Czech
   vscode-language-pack-cs = buildVscodeLanguagePack {
     language = "cs";
-    hash = "sha256-yFtp+XK7Y2Fi/uYqsh88d3hCRcQJhJOLWvs2pQ05ddo=";
+    hash = "sha256-ojh2KBEpTTJsAgM2RilGO58kkcWgaFf5nkiiZ4gYNtg=";
   };
   # Portuguese (Brazil)
   vscode-language-pack-pt-br = buildVscodeLanguagePack {
     language = "pt-BR";
-    hash = "sha256-2zM8E832ioa6fqnWzPq+PA/eiEAo8FDNNH/4HJPZIcI=";
+    hash = "sha256-n55nI9gCxNpr6Pq70qJnmgp2rs0Gcblirg4SaeXAXtE=";
   };
   # Turkish
   vscode-language-pack-tr = buildVscodeLanguagePack {
     language = "tr";
-    hash = "sha256-7ghSb/sQM64wfsRRtS+quAqJEvUdIXAcPCQKJbsDXKc=";
+    hash = "sha256-S6orhrfCaA4aeLhW3+rdaJb4X8h7IUjfBC9A+QgiQgk=";
   };
   # Polish
   vscode-language-pack-pl = buildVscodeLanguagePack {
     language = "pl";
-    hash = "sha256-/joZpsIAY9Ut67wAbzNTraBgBgtjDAeRoq8PUbP3rSc=";
+    hash = "sha256-YoNl44f2jEYXIhDKz+xU5fzt/JD6l86dtbqXFKOzHrk=";
   };
   # Pseudo Language
   vscode-language-pack-qps-ploc = buildVscodeLanguagePack {
     language = "qps-ploc";
-    hash = "sha256-xERSh5N5Mbyc977ji0n91ra0RV9ZldJKBzc3IWYWYyo=";
+    hash = "sha256-onc+lk6itrWP5J17eVLIMcpG1gDM/rpTzKci8m2uBcY=";
   };
 }

From 4f6899674cd3623e9c8eb219ed90f499ab8895b8 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 4 Feb 2026 00:35:45 +0000
Subject: [PATCH 017/106] fast-float: 8.2.2 -> 8.2.3

---
 pkgs/by-name/fa/fast-float/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/fa/fast-float/package.nix b/pkgs/by-name/fa/fast-float/package.nix
index 6558a2dae15a..bf40ea6afe81 100644
--- a/pkgs/by-name/fa/fast-float/package.nix
+++ b/pkgs/by-name/fa/fast-float/package.nix
@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "fast-float";
-  version = "8.2.2";
+  version = "8.2.3";
 
   src = fetchFromGitHub {
     owner = "fastfloat";
     repo = "fast_float";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-IZCZZayK3INU5P8HwZvWfOJuRfBrbPYuMQCjgCjHCWE=";
+    hash = "sha256-cQxIzfVNMG0UPEUw/4GYcRzmfAcBJLcswO+gqQ8t6lw=";
   };
 
   nativeBuildInputs = [ cmake ];

From 2dbe4ef0e6826ad7eec520019b7680f102c99be7 Mon Sep 17 00:00:00 2001
From: LRFLEW <LRFLEW@aol.com>
Date: Sat, 31 Jan 2026 22:11:24 -0600
Subject: [PATCH 018/106] sdl3: add option for disabling more dependencies

---
 pkgs/by-name/sd/sdl3/package.nix | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/sd/sdl3/package.nix b/pkgs/by-name/sd/sdl3/package.nix
index 607380908ffd..68507330296a 100644
--- a/pkgs/by-name/sd/sdl3/package.nix
+++ b/pkgs/by-name/sd/sdl3/package.nix
@@ -50,13 +50,15 @@
   ibusSupport ? stdenv.hostPlatform.isUnix && !stdenv.hostPlatform.isDarwin,
   jackSupport ? stdenv.hostPlatform.isLinux && !stdenv.hostPlatform.isAndroid,
   libdecorSupport ? stdenv.hostPlatform.isLinux && !stdenv.hostPlatform.isAndroid,
+  libudevSupport ? stdenv.hostPlatform.isLinux && !stdenv.hostPlatform.isAndroid,
+  libusbSupport ? stdenv.hostPlatform.isLinux,
   openglSupport ? lib.meta.availableOn stdenv.hostPlatform libGL,
   pipewireSupport ? stdenv.hostPlatform.isLinux && !stdenv.hostPlatform.isAndroid,
   pulseaudioSupport ?
     config.pulseaudio or stdenv.hostPlatform.isLinux && !stdenv.hostPlatform.isAndroid,
-  libudevSupport ? stdenv.hostPlatform.isLinux && !stdenv.hostPlatform.isAndroid,
   sndioSupport ? false,
   traySupport ? true,
+  vulkanSupport ? true,
   waylandSupport ? stdenv.hostPlatform.isLinux && !stdenv.hostPlatform.isAndroid,
   x11Support ? !stdenv.hostPlatform.isAndroid && !stdenv.hostPlatform.isWindows,
 }:
@@ -97,7 +99,7 @@ stdenv.mkDerivation (finalAttrs: {
         --replace-fail '"zenity"' '"${lib.getExe zenity}"'
     ''
     # https://github.com/libsdl-org/SDL/issues/14805
-    + ''
+    + lib.optionalString vulkanSupport ''
       substituteInPlace src/video/x11/SDL_x11vulkan.c \
                         src/video/wayland/SDL_waylandvulkan.c \
                         src/video/offscreen/SDL_offscreenvulkan.c \
@@ -121,7 +123,7 @@ stdenv.mkDerivation (finalAttrs: {
   ++ lib.optional waylandSupport wayland-scanner;
 
   buildInputs =
-    lib.optionals stdenv.hostPlatform.isLinux [
+    lib.optionals libusbSupport [
       libusb1
     ]
     ++ lib.optional (
@@ -155,7 +157,7 @@ stdenv.mkDerivation (finalAttrs: {
       libXrandr
       libxtst
     ]
-    ++ [
+    ++ lib.optionals vulkanSupport [
       vulkan-headers
       vulkan-loader
     ]
@@ -196,7 +198,11 @@ stdenv.mkDerivation (finalAttrs: {
       && !(stdenv.hostPlatform.isDarwin || stdenv.hostPlatform.isAndroid)
       && !(x11Support || waylandSupport)
     ))
-  ];
+  ]
+  ++ lib.optional (libusbSupport != stdenv.hostPlatform.isLinux) (
+    lib.cmakeBool "SDL_HIDAPI_LIBUSB" libusbSupport
+  )
+  ++ lib.optional (!vulkanSupport) (lib.cmakeBool "SDL_VULKAN" vulkanSupport);
 
   doCheck = true;
 

From b7786d98437402888599667bdba0876cc6f39500 Mon Sep 17 00:00:00 2001
From: Petr Krutov <kjubybot@proton.me>
Date: Sun, 18 Jan 2026 20:32:47 +0100
Subject: [PATCH 019/106] vikunja: add address option

---
 nixos/modules/services/web-apps/vikunja.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/nixos/modules/services/web-apps/vikunja.nix b/nixos/modules/services/web-apps/vikunja.nix
index c273cccff1e5..f4fd912aed2a 100644
--- a/nixos/modules/services/web-apps/vikunja.nix
+++ b/nixos/modules/services/web-apps/vikunja.nix
@@ -45,6 +45,11 @@ in
       type = types.str;
       description = "The Hostname under which the frontend is running.";
     };
+    address = mkOption {
+      type = types.str;
+      default = "";
+      description = "The IP address to bind to.";
+    };
     port = mkOption {
       type = types.port;
       default = 3456;
@@ -105,7 +110,7 @@ in
           ;
       };
       service = {
-        interface = ":${toString cfg.port}";
+        interface = "${cfg.address}:${toString cfg.port}";
         frontendurl = "${cfg.frontendScheme}://${cfg.frontendHostname}/";
       };
       files = {

From 6d47adb8cf6a6ae5e1a721c94850403952e49b7d Mon Sep 17 00:00:00 2001
From: Sean Buckley <sean.bck@gmail.com>
Date: Thu, 5 Feb 2026 00:53:07 -0500
Subject: [PATCH 020/106] brave: 1.86.146 -> 1.86.148

https://community.brave.app/t/release-channel-1-86-148/649020
---
 pkgs/by-name/br/brave/package.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/br/brave/package.nix b/pkgs/by-name/br/brave/package.nix
index dd8051878de0..c13c17f3dce9 100644
--- a/pkgs/by-name/br/brave/package.nix
+++ b/pkgs/by-name/br/brave/package.nix
@@ -3,24 +3,24 @@
 
 let
   pname = "brave";
-  version = "1.86.146";
+  version = "1.86.148";
 
   allArchives = {
     aarch64-linux = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_arm64.deb";
-      hash = "sha256-/Z2KLxURCgBfqunQUrspn9wS2QAjlWQBd3K7uXwk+fk=";
+      hash = "sha256-86VeBM2kKbuQ+/FAq24X4DdkAUOFzlGg52cAosMExzo=";
     };
     x86_64-linux = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_amd64.deb";
-      hash = "sha256-T8/Yv5jn4Fa79eDj0IFE9P9FbCSf7H2V/UY9S/i3C3c=";
+      hash = "sha256-VLJLU9hgKX7MwhxdFLyaPTmOb6+AEsJze40EePVd+Ug=";
     };
     aarch64-darwin = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-v${version}-darwin-arm64.zip";
-      hash = "sha256-BD4M16DVvcy0HGPrRc6l0T/so0mGicgaa7QvdGqfqKs=";
+      hash = "sha256-fYHd1TMN8kWzhchcCLxgU1M3frxCkvE7uITIdiopSU4=";
     };
     x86_64-darwin = {
       url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-v${version}-darwin-x64.zip";
-      hash = "sha256-tbotgvXI706iM+VrXW6QA2ewxqQHqaFvV30cb7PwSrY=";
+      hash = "sha256-a37FTE/qi37d+pGrtkZWVqKaMXzLyIO/ppV4k9hz0uE=";
     };
   };
 

From 72484a627d4049c1eb5e8baa53da8f144b20f155 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Thu, 5 Feb 2026 13:49:37 +0100
Subject: [PATCH 021/106] paperless-ngx: 2.20.5 -> 2.20.6

Diff: https://github.com/paperless-ngx/paperless-ngx/compare/v2.20.5...v2.20.6

Changelog: https://github.com/paperless-ngx/paperless-ngx/releases/tag/v2.20.6
---
 pkgs/by-name/pa/paperless-ngx/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/pa/paperless-ngx/package.nix b/pkgs/by-name/pa/paperless-ngx/package.nix
index 24690fe25769..252e7a0bc612 100644
--- a/pkgs/by-name/pa/paperless-ngx/package.nix
+++ b/pkgs/by-name/pa/paperless-ngx/package.nix
@@ -30,13 +30,13 @@
   lndir,
 }:
 let
-  version = "2.20.5";
+  version = "2.20.6";
 
   src = fetchFromGitHub {
     owner = "paperless-ngx";
     repo = "paperless-ngx";
     tag = "v${version}";
-    hash = "sha256-EZaAn55gilvTitAo0p7U3BeqNI9iYIWg147BbO2fp9M=";
+    hash = "sha256-rTkkvSkgYQtT9KglXsyf4SWwjoJWtX5YwcVUbEbLac0=";
   };
 
   python = python3.override {

From 6598329e7da0d7d33657be20d261893218fb2cae Mon Sep 17 00:00:00 2001
From: Andreas Wendleder <andreas.wendleder@gmail.com>
Date: Thu, 5 Feb 2026 18:12:21 +0100
Subject: [PATCH 022/106] yosys: 0.61 -> 0.62

Diff: https://github.com/YosysHQ/yosys/compare/v0.61...v0.62

Changelog: https://github.com/YosysHQ/yosys/releases/tag/v0.62
---
 pkgs/by-name/yo/yosys/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/yo/yosys/package.nix b/pkgs/by-name/yo/yosys/package.nix
index ee43be1a537a..915812d9f7d0 100644
--- a/pkgs/by-name/yo/yosys/package.nix
+++ b/pkgs/by-name/yo/yosys/package.nix
@@ -64,13 +64,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "yosys";
-  version = "0.61";
+  version = "0.62";
 
   src = fetchFromGitHub {
     owner = "YosysHQ";
     repo = "yosys";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-p7QewbeJtJRRkqYqWW1QzIe71OR5LD+0qsHHgl/cq2w=";
+    hash = "sha256-FzvdjdAURB5iCkGwsYY6A2wP/Je/IW4AOd4kVOEOeVc=";
     fetchSubmodules = true;
   };
 

From b68822f9ddc03fa2153a9082cc2fbbafbb4f0c88 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 17:15:58 +0000
Subject: [PATCH 023/106] kubectl-gadget: 0.48.1 -> 0.49.0

---
 pkgs/by-name/ku/kubectl-gadget/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ku/kubectl-gadget/package.nix b/pkgs/by-name/ku/kubectl-gadget/package.nix
index 1a21bfa44748..e5711ccce6a8 100644
--- a/pkgs/by-name/ku/kubectl-gadget/package.nix
+++ b/pkgs/by-name/ku/kubectl-gadget/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "kubectl-gadget";
-  version = "0.48.1";
+  version = "0.49.0";
 
   src = fetchFromGitHub {
     owner = "inspektor-gadget";
     repo = "inspektor-gadget";
     tag = "v${version}";
-    hash = "sha256-brYWsPd8RDBiFoXhbnNf8R0cgnHws1Wh5bc8y0s2U3k=";
+    hash = "sha256-BXkBxfe9/UgqllaF2canR/mkSPeLUERhF33KIilXQHw=";
   };
 
-  vendorHash = "sha256-FLWpvCHeZUnlGZM1lxNoArqfSP2iQuYnhBRtD2ymclI=";
+  vendorHash = "sha256-IIRSEqE+cXpQGt3Z9U7fhSuspj5y2l4aRdjY5HnQCbU=";
 
   env.CGO_ENABLED = 0;
 

From 8e39a441391777a138e2478efe2955f755a964d5 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 17:59:59 +0000
Subject: [PATCH 024/106] sqldef: 3.9.4 -> 3.9.6

---
 pkgs/by-name/sq/sqldef/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/sq/sqldef/package.nix b/pkgs/by-name/sq/sqldef/package.nix
index 2ff582d9d2bb..c10a5adeea5c 100644
--- a/pkgs/by-name/sq/sqldef/package.nix
+++ b/pkgs/by-name/sq/sqldef/package.nix
@@ -6,18 +6,18 @@
 
 buildGoModule rec {
   pname = "sqldef";
-  version = "3.9.4";
+  version = "3.9.6";
 
   src = fetchFromGitHub {
     owner = "sqldef";
     repo = "sqldef";
     rev = "v${version}";
-    hash = "sha256-yPDff1ZDytXtXrCGaf0oCEeYo69MbMMkMbV4ryAlNXA=";
+    hash = "sha256-vC8aFIvhGSqeGQTwhPmQx9bXgoyDm3c3eLO025ZkudQ=";
   };
 
   proxyVendor = true;
 
-  vendorHash = "sha256-Djltq/oWMyutNGI42EuOijoUBuhMSdoO/xL3yQQVSgg=";
+  vendorHash = "sha256-VlycZ2UyZJgotHUAj1nb77Svan8hyKJBNYX2ygQ2JIU=";
 
   ldflags = [
     "-s"

From 06a6acbb1469108808133afe320816f815f38526 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 18:15:00 +0000
Subject: [PATCH 025/106] vscode-extensions.gitlab.gitlab-workflow: 6.67.5 ->
 6.68.1

---
 pkgs/applications/editors/vscode/extensions/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/editors/vscode/extensions/default.nix b/pkgs/applications/editors/vscode/extensions/default.nix
index f0d581203676..f139fc9cac06 100644
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -1965,8 +1965,8 @@ let
         mktplcRef = {
           name = "gitlab-workflow";
           publisher = "gitlab";
-          version = "6.67.5";
-          hash = "sha256-xttk9mP5XIeeymE0l0TI+JsC862yOaEuwb6HscDyRMU=";
+          version = "6.68.1";
+          hash = "sha256-ZNdtaVo3KFGhGX99fGv/aSUcjy636W5e4DctPCMrRtY=";
         };
         meta = {
           description = "GitLab extension for Visual Studio Code";

From ea79ae79cc554d2f48abcb1d6a380d1732fa4cdf Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 18:20:20 +0000
Subject: [PATCH 026/106] sdl_gamecontrollerdb: 0-unstable-2026-01-28 ->
 0-unstable-2026-02-02

---
 pkgs/by-name/sd/sdl_gamecontrollerdb/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/sd/sdl_gamecontrollerdb/package.nix b/pkgs/by-name/sd/sdl_gamecontrollerdb/package.nix
index 1ea626fb90d9..ab7cf2ea2731 100644
--- a/pkgs/by-name/sd/sdl_gamecontrollerdb/package.nix
+++ b/pkgs/by-name/sd/sdl_gamecontrollerdb/package.nix
@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "sdl_gamecontrollerdb";
-  version = "0-unstable-2026-01-28";
+  version = "0-unstable-2026-02-02";
 
   src = fetchFromGitHub {
     owner = "mdqinc";
     repo = "SDL_GameControllerDB";
-    rev = "fc25a0299e8dcb7a8fc072864297c71f71d6f3d7";
-    hash = "sha256-lR/SBVLjb9KvXogd46hSEuKY5Z0NmhDdnLwhf1IWhQ0=";
+    rev = "95a35c7e65f7d71a3cc7d8e4d2dd9ffdac2bee28";
+    hash = "sha256-CdSAJ0QlJekOZDI4ZgRUBM9p0VDcGm7M+MAoBv9L3c4=";
   };
 
   dontBuild = true;

From 9def15e3098e94874bf578430fbcdf2010970ad5 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 18:37:35 +0000
Subject: [PATCH 027/106] python3Packages.bibtexparser_2: 2.0.0b8 -> 2.0.0b9

---
 pkgs/development/python-modules/bibtexparser/2.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/bibtexparser/2.nix b/pkgs/development/python-modules/bibtexparser/2.nix
index 8b776e551c13..4625c0f0246b 100644
--- a/pkgs/development/python-modules/bibtexparser/2.nix
+++ b/pkgs/development/python-modules/bibtexparser/2.nix
@@ -9,14 +9,14 @@
 
 buildPythonPackage rec {
   pname = "bibtexparser";
-  version = "2.0.0b8";
+  version = "2.0.0b9";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "sciunto-org";
     repo = "python-bibtexparser";
     tag = "v${version}";
-    hash = "sha256-531Mh/5DUYayXm1H0v4dPX0P9mRcqcQcU/A+f4wwqxg=";
+    hash = "sha256-viBY2hZXsXsfjpi7zMFh3CwQFOKL41F3x0IKULelo/o=";
   };
 
   build-system = [ setuptools ];

From 75d587b5f673261b6ad34a6b44a9c095bb21c4e8 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 18:47:10 +0000
Subject: [PATCH 028/106] pocketbase: 0.36.1 -> 0.36.2

---
 pkgs/by-name/po/pocketbase/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/po/pocketbase/package.nix b/pkgs/by-name/po/pocketbase/package.nix
index f09dbe0f1410..5cc0d0a26afb 100644
--- a/pkgs/by-name/po/pocketbase/package.nix
+++ b/pkgs/by-name/po/pocketbase/package.nix
@@ -7,16 +7,16 @@
 
 buildGoModule rec {
   pname = "pocketbase";
-  version = "0.36.1";
+  version = "0.36.2";
 
   src = fetchFromGitHub {
     owner = "pocketbase";
     repo = "pocketbase";
     rev = "v${version}";
-    hash = "sha256-mDQhsVvO6rj5zkbFOKdM/d0+BWa0Flfdx2kEGqjFeWg=";
+    hash = "sha256-+gayRZ9iwKSb4xW3LVvd6CFms0koHrv7DF1J5O8FvGY=";
   };
 
-  vendorHash = "sha256-8Y5nYDR2RKd2S41yelvz0EooPJkZGv+xp7JA4QQGDA8=";
+  vendorHash = "sha256-OZ2jAOdi/g7yVAPfXTPRxsjBtUi43i8B1k2ANet1SO8=";
 
   # This is the released subpackage from upstream repo
   subPackages = [ "examples/base" ];

From 38be298d89ec7ac7d15225affdc1bb6c7b9f3d9c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 19:01:44 +0000
Subject: [PATCH 029/106] runn: 1.2.0 -> 1.3.0

---
 pkgs/by-name/ru/runn/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ru/runn/package.nix b/pkgs/by-name/ru/runn/package.nix
index bb8bab72812c..ddba8128ee62 100644
--- a/pkgs/by-name/ru/runn/package.nix
+++ b/pkgs/by-name/ru/runn/package.nix
@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "runn";
-  version = "1.2.0";
+  version = "1.3.0";
 
   src = fetchFromGitHub {
     owner = "k1LoW";
     repo = "runn";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-rwKz/jFkmB7F4CoeRPgCBCvls3ovEdp907G3NzcY9tY=";
+    hash = "sha256-hDPXYGKDTvVFyMU08OeIxp70w9gimgY9qp9j38Ea5bc=";
   };
 
-  vendorHash = "sha256-XFPiTyOoFfbfkhE/UekulsUc2lwoVJskO8ZxcBmiOU0=";
+  vendorHash = "sha256-gLemeaNAmFVm9Ld2b3QTjdlKMye0TpKVSuQHj0ToMN4=";
 
   subPackages = [ "cmd/runn" ];
 

From 9de7022f9aa8b83fc0e5706662a6c25487c73757 Mon Sep 17 00:00:00 2001
From: Jakob Wenzel <git@jakobwenzel.de>
Date: Thu, 5 Feb 2026 20:05:44 +0100
Subject: [PATCH 030/106] roomarranger: 10.3.1 -> 10.3.4

---
 pkgs/by-name/ro/roomarranger/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ro/roomarranger/package.nix b/pkgs/by-name/ro/roomarranger/package.nix
index f785bdacd41d..e4663f40f232 100644
--- a/pkgs/by-name/ro/roomarranger/package.nix
+++ b/pkgs/by-name/ro/roomarranger/package.nix
@@ -10,7 +10,7 @@
 }:
 
 let
-  version = "10.3.1";
+  version = "10.3.4";
 
   desktopItem = makeDesktopItem {
     type = "Application";
@@ -34,7 +34,7 @@ stdenv.mkDerivation {
 
   src = fetchurl {
     url = "https://f000.backblazeb2.com/file/rooarr/rooarr${lib.versions.major version}${lib.versions.minor version}${lib.versions.patch version}-linux64.tar.gz";
-    hash = "sha256-J4/IsOH12CutjorGtZzKbL4uFYWd9SXmjNx32Vi5dr0=";
+    hash = "sha256-ck3te+arllKJW8j6ymgvckAtCPiQMkXNBoNkKspVwak=";
   };
 
   nativeBuildInputs = [

From 9d1b537291a08372aea2173bb514d7c990bddb24 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 19:26:15 +0000
Subject: [PATCH 031/106] opengrok: 1.14.10 -> 1.14.11

---
 pkgs/by-name/op/opengrok/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/op/opengrok/package.nix b/pkgs/by-name/op/opengrok/package.nix
index 7d0ed3c8949c..d586801f8ba6 100644
--- a/pkgs/by-name/op/opengrok/package.nix
+++ b/pkgs/by-name/op/opengrok/package.nix
@@ -8,12 +8,12 @@
 
 stdenv.mkDerivation rec {
   pname = "opengrok";
-  version = "1.14.10";
+  version = "1.14.11";
 
   # binary distribution
   src = fetchurl {
     url = "https://github.com/oracle/opengrok/releases/download/${version}/${pname}-${version}.tar.gz";
-    hash = "sha256-3ZxbbTSrXzUNHQp5cC81zznucpJ2nHp+0U01tJ+/Cu0=";
+    hash = "sha256-05Aw44JmTHyy6JRWPk5+gv5BDN/W1ci0ddjPfvww0zI=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

From 9a6919bf1ba55d3cf7ad7e9f98c229ef4e8d4e5d Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 19:54:42 +0000
Subject: [PATCH 032/106] kubectl-cnpg: 1.28.0 -> 1.28.1

---
 pkgs/by-name/ku/kubectl-cnpg/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ku/kubectl-cnpg/package.nix b/pkgs/by-name/ku/kubectl-cnpg/package.nix
index 4382a9bbc792..811fae0ec5be 100644
--- a/pkgs/by-name/ku/kubectl-cnpg/package.nix
+++ b/pkgs/by-name/ku/kubectl-cnpg/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "kubectl-cnpg";
-  version = "1.28.0";
+  version = "1.28.1";
 
   src = fetchFromGitHub {
     owner = "cloudnative-pg";
     repo = "cloudnative-pg";
     rev = "v${version}";
-    hash = "sha256-uIIy4zSf6ply859aHVvlujqBWpN18FLZh+Vye3fbSoY=";
+    hash = "sha256-9NfjrVF0OtDLaGD5PPFSZcI8V3Vy/yOTm/JwnE3kMZE=";
   };
 
-  vendorHash = "sha256-Hl7cYZbs+rDS2+1ojgCUhLfBVGQ+ZhAApRczkUYOwVY=";
+  vendorHash = "sha256-QNtKtHTxOgm6EbOSvA2iUE0hjltwTBNkA1mIC3N+AbM=";
 
   subPackages = [ "cmd/kubectl-cnpg" ];
 

From 70f5f73734da7a0f253ca37057d8d2b68aad34f5 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 20:08:15 +0000
Subject: [PATCH 033/106] netavark: 1.17.1 -> 1.17.2

---
 pkgs/by-name/ne/netavark/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ne/netavark/package.nix b/pkgs/by-name/ne/netavark/package.nix
index 2e3851939770..ed954974e1af 100644
--- a/pkgs/by-name/ne/netavark/package.nix
+++ b/pkgs/by-name/ne/netavark/package.nix
@@ -11,16 +11,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "netavark";
-  version = "1.17.1";
+  version = "1.17.2";
 
   src = fetchFromGitHub {
     owner = "containers";
     repo = "netavark";
     rev = "v${version}";
-    hash = "sha256-KLN1Y2C43dTZlm1VNZq49/zQY55iAPf5V7KK5zjC2dw=";
+    hash = "sha256-FdJNcHYK6Jc1dNqcUr5Ne8dv1dzlHRhcjoldiihrov8=";
   };
 
-  cargoHash = "sha256-Ac8/0MgvDZ3djUlKOv3yT3aCPkxbNPnFM8ZId6yN354=";
+  cargoHash = "sha256-wp/1lWc3OfNQt74m8DtpuFO/Mf07+M7numq2FMEkeGo=";
 
   nativeBuildInputs = [
     installShellFiles

From 149da5e5e9d84501e0b5a67a19bc8a59b7f93179 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 20:22:38 +0000
Subject: [PATCH 034/106] fishPlugins.exercism-cli-fish-wrapper:
 0-unstable-2025-09-28 -> 0-unstable-2026-01-06

---
 pkgs/shells/fish/plugins/exercism-cli-fish-wrapper.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/shells/fish/plugins/exercism-cli-fish-wrapper.nix b/pkgs/shells/fish/plugins/exercism-cli-fish-wrapper.nix
index 1c1c68379677..78bad9ad165f 100644
--- a/pkgs/shells/fish/plugins/exercism-cli-fish-wrapper.nix
+++ b/pkgs/shells/fish/plugins/exercism-cli-fish-wrapper.nix
@@ -6,13 +6,13 @@
 }:
 buildFishPlugin {
   pname = "exercism-cli-fish-wrapper";
-  version = "0-unstable-2025-09-28";
+  version = "0-unstable-2026-01-06";
 
   src = fetchFromGitHub {
     owner = "glennj";
     repo = "exercism-cli-fish-wrapper";
-    rev = "f6627c00324b2599239e3835af39adce04e1091c";
-    hash = "sha256-bS1NN6oWi5j9uPwhuMApDRZlVYwOwlIC9NcdBZ9noL8=";
+    rev = "2b154d6363e16b60a3132ef93d5e1a2311209fa5";
+    hash = "sha256-k0escPVR+5FqnxYzZPSsY7y927GhtWAEEOdURqN8aSk=";
   };
 
   passthru.updateScript = unstableGitUpdater { };

From 8a4495546d7ae17a2c2bd4a499f5b6ec087810ad Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 20:50:51 +0000
Subject: [PATCH 035/106] wkg: 0.13.0 -> 0.14.0

---
 pkgs/by-name/wk/wkg/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/wk/wkg/package.nix b/pkgs/by-name/wk/wkg/package.nix
index 7c9dccb8dd73..1b677d44571b 100644
--- a/pkgs/by-name/wk/wkg/package.nix
+++ b/pkgs/by-name/wk/wkg/package.nix
@@ -8,15 +8,15 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "wkg";
-  version = "0.13.0";
+  version = "0.14.0";
   src = fetchFromGitHub {
     owner = "bytecodealliance";
     repo = "wasm-pkg-tools";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-6adUBw3jtmEq1y+hdnE7EBMgF5KChXr2MtOiSEPi1Ao=";
+    hash = "sha256-nFPfDVs/C7GtmLKy4V+ECsZvsABNfaxR3iDbDrnlMek=";
   };
 
-  cargoHash = "sha256-BAHdOrLrSspSN1WsCtglCOQebI39zw6Byj9EgvU3onA=";
+  cargoHash = "sha256-KfF9VePqkWVdDU5C8b7x9u+uXPnrO5wVxQQZz8eJ4vM=";
 
   # A large number of tests require Internet access in order to function.
   doCheck = false;

From fda4cc34729389e2561b185ea250848d601572a2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 20:52:13 +0000
Subject: [PATCH 036/106] python3Packages.pytaglib: 3.1.0 -> 3.2.0

---
 pkgs/development/python-modules/pytaglib/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/pytaglib/default.nix b/pkgs/development/python-modules/pytaglib/default.nix
index cc684505ac49..24417ab9ef8c 100644
--- a/pkgs/development/python-modules/pytaglib/default.nix
+++ b/pkgs/development/python-modules/pytaglib/default.nix
@@ -9,14 +9,14 @@
 
 buildPythonPackage rec {
   pname = "pytaglib";
-  version = "3.1.0";
+  version = "3.2.0";
   format = "setuptools";
 
   src = fetchFromGitHub {
     owner = "supermihi";
     repo = "pytaglib";
     tag = "v${version}";
-    hash = "sha256-A+RH9mWwtvhBDqTfvOK1RbsPP+0srF9h4mIknAHbG50=";
+    hash = "sha256-529U71Lvs6QufcG3yBeywyGc2ukYYfFHIf6TFjt+k3U=";
   };
 
   buildInputs = [

From 68d633af7636dafa507541408ecfe882f1769df0 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 21:07:02 +0000
Subject: [PATCH 037/106] cargo-swift: 0.10.0 -> 0.11.0

---
 pkgs/by-name/ca/cargo-swift/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-swift/package.nix b/pkgs/by-name/ca/cargo-swift/package.nix
index 0bdc41fd09a3..6b187dc1db35 100644
--- a/pkgs/by-name/ca/cargo-swift/package.nix
+++ b/pkgs/by-name/ca/cargo-swift/package.nix
@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "cargo-swift";
-  version = "0.10.0";
+  version = "0.11.0";
 
   src = fetchFromGitHub {
     owner = "antoniusnaumann";
     repo = "cargo-swift";
     rev = "v${version}";
-    hash = "sha256-koHQaYfMDc8GxQ+K7C1YluMY5u4cUGV8/Ehjt/KWl/g=";
+    hash = "sha256-abLXt9wIw/qhSkusRSmHJHU8feojaLVQeFP8DAkE1Gc=";
   };
 
-  cargoHash = "sha256-8aFISZ2nzCmxxKkX77jEOE/MWcKwyTw8IGTEbJ0mKWg=";
+  cargoHash = "sha256-u4lzPbXyBCcZk5kzxuYHjtJQTTxjRYeDeMpIcK+Dr8Q=";
 
   meta = {
     description = "Cargo plugin to easily build Swift packages from Rust code";

From 65ef7e9ce7122e2246027d74d06629892f202769 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 22:09:41 +0000
Subject: [PATCH 038/106] claude-code-acp: 0.13.2 -> 0.15.0

---
 pkgs/by-name/cl/claude-code-acp/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/cl/claude-code-acp/package.nix b/pkgs/by-name/cl/claude-code-acp/package.nix
index 68116b9f6e08..eb30cea5c1b6 100644
--- a/pkgs/by-name/cl/claude-code-acp/package.nix
+++ b/pkgs/by-name/cl/claude-code-acp/package.nix
@@ -6,16 +6,16 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "claude-code-acp";
-  version = "0.13.2";
+  version = "0.15.0";
 
   src = fetchFromGitHub {
     owner = "zed-industries";
     repo = "claude-code-acp";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-hHq7U7PRqMln9jgdnYdVeWmagMQOiKSMI2VIcyGNgVk=";
+    hash = "sha256-vmsPHfE5wAfGARLPlcbQxXuHKMEKUAVC66zlhE0Fdo0=";
   };
 
-  npmDepsHash = "sha256-tsB5OrdbcmVr+zsrrJAjdOhtKoYzyecaZcyrwJU7zjg=";
+  npmDepsHash = "sha256-lVxvoTxaLdRQ61rtYKgE9ETaGP3fOovtzYKs5lxMAC8=";
 
   meta = {
     description = "ACP-compatible coding agent powered by the Claude Code SDK";

From ca1cd7b216b453fd69dc71121fbd9eaa588a801e Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Thu, 5 Feb 2026 22:12:12 +0000
Subject: [PATCH 039/106] python3Packages.pylance: 1.0.4 -> 2.0.0

Diff: https://github.com/lancedb/lance/compare/v1.0.4...v2.0.0

Changelog: https://github.com/lancedb/lance/releases/tag/v2.0.0
---
 pkgs/development/python-modules/pylance/default.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/pylance/default.nix b/pkgs/development/python-modules/pylance/default.nix
index 18740fd5cb22..94a0efcc46ff 100644
--- a/pkgs/development/python-modules/pylance/default.nix
+++ b/pkgs/development/python-modules/pylance/default.nix
@@ -34,14 +34,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pylance";
-  version = "1.0.4";
+  version = "2.0.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "lancedb";
     repo = "lance";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-SAV4mowG8wcK22ZXJUT9UffKz8lcICipSDC5FR0Z2lY=";
+    hash = "sha256-VxhRdyPhVVRRiYu2h7ospxLSpXCz0a6LgjJCGcqJVcU=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/python";
@@ -53,7 +53,7 @@ buildPythonPackage (finalAttrs: {
       src
       sourceRoot
       ;
-    hash = "sha256-qDfN4iH/FSqklUC58O4ot7SxBRSKWebYkh1X1T5JXUs=";
+    hash = "sha256-toIyApf/v0h45rZjfJRAStU9TZGmB+cCChObzjVr1Hs=";
   };
 
   nativeBuildInputs = [

From da81d8c95b2aca289ba3fde0d8172eee59fcefce Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 22:21:29 +0000
Subject: [PATCH 040/106] jetty: 12.1.5 -> 12.1.6

---
 pkgs/servers/http/jetty/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/http/jetty/default.nix b/pkgs/servers/http/jetty/default.nix
index cd7ae4697d43..4fa7ad34af49 100644
--- a/pkgs/servers/http/jetty/default.nix
+++ b/pkgs/servers/http/jetty/default.nix
@@ -57,7 +57,7 @@ in
   };
 
   jetty_12 = common {
-    version = "12.1.5";
-    hash = "sha256-tjZO7OtQ7FZQAGA9lI4YIKwm+ZW0eJgGTaNd+ZasDY4=";
+    version = "12.1.6";
+    hash = "sha256-a23PR+6Qy32/evrEO7Nur8Y8KQnrfVyTV/qFi4ttG+Q=";
   };
 }

From 4e4753a18a894446e4f36e904e6da4b02315c5c1 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 23:03:23 +0000
Subject: [PATCH 041/106] ao3downloader: 2025.11.0 -> 2026.2.0

---
 pkgs/by-name/ao/ao3downloader/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ao/ao3downloader/package.nix b/pkgs/by-name/ao/ao3downloader/package.nix
index b32ab0553bc6..edcd616a13bc 100644
--- a/pkgs/by-name/ao/ao3downloader/package.nix
+++ b/pkgs/by-name/ao/ao3downloader/package.nix
@@ -8,14 +8,14 @@
 # https://github.com/nianeyna/ao3downloader/blob/f8399bb8aca276ae7359157b90afd13925c90056/pyproject.toml#L8
 python312Packages.buildPythonApplication rec {
   pname = "ao3downloader";
-  version = "2025.11.0";
+  version = "2026.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "nianeyna";
     repo = "ao3downloader";
     tag = "v${version}";
-    hash = "sha256-EXoDUeadR25XpUNkXIALbZOqUJIdTNdbfYZoVwgZq7U=";
+    hash = "sha256-NrVzRYNxvy8LOvXy0/1go0wEQyLt56inu+f93UFX1CM=";
   };
 
   build-system = with python312Packages; [

From b03d1e3cfbca080be94bc2462dc8f29b0c96f137 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 00:02:15 +0000
Subject: [PATCH 042/106] python3Packages.gbinder-python: 1.3.0 -> 1.3.1

---
 pkgs/development/python-modules/gbinder-python/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/gbinder-python/default.nix b/pkgs/development/python-modules/gbinder-python/default.nix
index 9ede6d2c28fa..6bbc44067e27 100644
--- a/pkgs/development/python-modules/gbinder-python/default.nix
+++ b/pkgs/development/python-modules/gbinder-python/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage rec {
   pname = "gbinder-python";
-  version = "1.3.0";
+  version = "1.3.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "waydroid";
     repo = "gbinder-python";
     tag = version;
-    hash = "sha256-z0hMAvwB+uttPcP+in+C3o1ujhFSiDXKktOajnsXhPI=";
+    hash = "sha256-bXuvGTzYifiCPDkcNvkgh+RAZfckcyR8weaRkgbfCyA=";
   };
 
   build-system = [

From 5e84df445c48aee4a8c0cba51ce21dcb379724d7 Mon Sep 17 00:00:00 2001
From: Benjamin Sparks <b.sparks@alugha.com>
Date: Fri, 6 Feb 2026 00:02:18 +0000
Subject: [PATCH 043/106] uv: 0.9.30 -> 0.10.0

Changelog: https://github.com/astral-sh/uv/releases/tag/0.10.0
---
 pkgs/by-name/uv/uv/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/uv/uv/package.nix b/pkgs/by-name/uv/uv/package.nix
index cfe54f6d559f..2b92f3957bc1 100644
--- a/pkgs/by-name/uv/uv/package.nix
+++ b/pkgs/by-name/uv/uv/package.nix
@@ -18,16 +18,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "uv";
-  version = "0.9.30";
+  version = "0.10.0";
 
   src = fetchFromGitHub {
     owner = "astral-sh";
     repo = "uv";
     tag = finalAttrs.version;
-    hash = "sha256-PDp7yktF2ek6KVlJvYsLn7VgV1ulgWnjAXKozJW3JKU=";
+    hash = "sha256-nD26zqKMK5LNkeYdqVYteeYL4mYaQQ/QlyjbMDDhLAY=";
   };
 
-  cargoHash = "sha256-KoVAUbVheq/x5e7scqf8ZSyC0ZAXlcZJ7svuiuT7NzQ=";
+  cargoHash = "sha256-lEynVemQHCI7ZKD2+1n4K/AtEYRld2+aRLkDMSX8ejM=";
 
   buildInputs = [
     rust-jemalloc-sys

From ccf1967be1174b3831f550e6b9448096ec49d5c6 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 6 Feb 2026 01:33:20 +0100
Subject: [PATCH 044/106] python313Packages.pytaglib: modernize

---
 .../python-modules/pytaglib/default.nix       | 20 +++++++++++++------
 1 file changed, 14 insertions(+), 6 deletions(-)

diff --git a/pkgs/development/python-modules/pytaglib/default.nix b/pkgs/development/python-modules/pytaglib/default.nix
index 24417ab9ef8c..d4d198b2d1d0 100644
--- a/pkgs/development/python-modules/pytaglib/default.nix
+++ b/pkgs/development/python-modules/pytaglib/default.nix
@@ -5,20 +5,28 @@
   taglib,
   cython,
   pytestCheckHook,
+  setuptools,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "pytaglib";
   version = "3.2.0";
-  format = "setuptools";
+  pyproject = true;
 
   src = fetchFromGitHub {
     owner = "supermihi";
     repo = "pytaglib";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-529U71Lvs6QufcG3yBeywyGc2ukYYfFHIf6TFjt+k3U=";
   };
 
+  postPatch = ''
+    substituteInPlace pyproject.toml \
+      --replace-fail "cython==3.2.4" "cython"
+  '';
+
+  build-system = [ setuptools ];
+
   buildInputs = [
     cython
     taglib
@@ -30,10 +38,10 @@ buildPythonPackage rec {
 
   meta = {
     description = "Python bindings for the Taglib audio metadata library";
-    mainProgram = "pyprinttags";
     homepage = "https://github.com/supermihi/pytaglib";
-    changelog = "https://github.com/supermihi/pytaglib/blob/${src.tag}/CHANGELOG.md";
+    changelog = "https://github.com/supermihi/pytaglib/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     license = lib.licenses.gpl3Plus;
     maintainers = with lib.maintainers; [ mrkkrp ];
+    mainProgram = "pyprinttags";
   };
-}
+})

From 87318313c19c515b12d85f9f9ee23116b9a0545b Mon Sep 17 00:00:00 2001
From: Nick Blumenauer <nicknb@posteo.com>
Date: Fri, 6 Feb 2026 02:51:10 +0100
Subject: [PATCH 045/106] glab: 1.81.0 -> 1.82.0

---
 pkgs/by-name/gl/glab/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/gl/glab/package.nix b/pkgs/by-name/gl/glab/package.nix
index ed0cc426b952..17740012dc8a 100644
--- a/pkgs/by-name/gl/glab/package.nix
+++ b/pkgs/by-name/gl/glab/package.nix
@@ -13,13 +13,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "glab";
-  version = "1.81.0";
+  version = "1.82.0";
 
   src = fetchFromGitLab {
     owner = "gitlab-org";
     repo = "cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-L6KFxxg9zW1EZZ0nDd9ft3TsXV4M1P1AhK1/Gg5+4Xk=";
+    hash = "sha256-fn0aBYO60oQp3fAskGRNsMuB3kWuKrZ7h/WSji4LwQs=";
     leaveDotGit = true;
     postFetch = ''
       cd "$out"
@@ -28,7 +28,7 @@ buildGoModule (finalAttrs: {
     '';
   };
 
-  vendorHash = "sha256-Vn3PE28+OlXoB/5UNXIe/BVfhxY1YiOuJEiPSkoyZ30=";
+  vendorHash = "sha256-um/TyXu5O3qF/DludixdZJM3ZQDjchOk3AfopOfF2vA=";
 
   ldflags = [
     "-s"

From 43c9f8a30f11a02096653c655652055387293744 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 01:53:35 +0000
Subject: [PATCH 046/106] hasura-cli: 2.48.10 -> 2.48.11

---
 pkgs/by-name/ha/hasura-cli/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ha/hasura-cli/package.nix b/pkgs/by-name/ha/hasura-cli/package.nix
index 6c872dbb534a..b574b334b612 100644
--- a/pkgs/by-name/ha/hasura-cli/package.nix
+++ b/pkgs/by-name/ha/hasura-cli/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule rec {
   pname = "hasura";
-  version = "2.48.10";
+  version = "2.48.11";
 
   src = fetchFromGitHub {
     owner = "hasura";
     repo = "graphql-engine";
     rev = "v${version}";
-    sha256 = "sha256-L4H9Jbddyp/p4y7aUXhwzGxiroRHNLmHRu5fBlvNrqI=";
+    sha256 = "sha256-ySZ2dbu3W7JfsE20r9AUG4/JbI5DN9MS7lPe8NXjpQ0=";
   };
   modRoot = "./cli";
 

From 08c4591f50b8a50b023c33f97cf3bf6fcc280805 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 02:45:01 +0000
Subject: [PATCH 047/106] pyenv: 2.6.20 -> 2.6.22

---
 pkgs/by-name/py/pyenv/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/py/pyenv/package.nix b/pkgs/by-name/py/pyenv/package.nix
index efd57643936a..f9e346a7c6e7 100644
--- a/pkgs/by-name/py/pyenv/package.nix
+++ b/pkgs/by-name/py/pyenv/package.nix
@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "pyenv";
-  version = "2.6.20";
+  version = "2.6.22";
 
   src = fetchFromGitHub {
     owner = "pyenv";
     repo = "pyenv";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-gbj7WI1OVfqDre5PdqEI3yVo/J5YyCexhL/bCa8aEK4=";
+    hash = "sha256-F4SZeF9YriAog88hRH/3GWajPtpBTBjEiVgqpxoFS/I=";
   };
 
   nativeBuildInputs = [

From 66f60c982c1f4803ea1e0f6e4c8d5e898e01f379 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 04:40:20 +0000
Subject: [PATCH 048/106] reindeer: 2026.01.26.00 -> 2026.02.02.00

---
 pkgs/by-name/re/reindeer/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/re/reindeer/package.nix b/pkgs/by-name/re/reindeer/package.nix
index a3724181fe3e..d6cad0aa9cc8 100644
--- a/pkgs/by-name/re/reindeer/package.nix
+++ b/pkgs/by-name/re/reindeer/package.nix
@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "reindeer";
-  version = "2026.01.26.00";
+  version = "2026.02.02.00";
 
   src = fetchFromGitHub {
     owner = "facebookincubator";
     repo = "reindeer";
     tag = "v${version}";
-    hash = "sha256-jUyb8fzzk1TzTe4pBXlZTByesdlDGJc2Q5L5pmHn9bw=";
+    hash = "sha256-NiS3TETnyGMGU+AxTNQIem3Cj2/c/VKSXSrcTX/5oME=";
   };
 
-  cargoHash = "sha256-CZcbEFZpZonp8iGI/DklPpAvaCoaS+LGMO8F/6NryBY=";
+  cargoHash = "sha256-aHAgb3IJVRaVBGd2voUoUblRGoepTjUFIR3WOmTEEVY=";
 
   nativeBuildInputs = [ pkg-config ];
 

From cb6187f03a249cee8666922f7e60d309410a1150 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 04:48:29 +0000
Subject: [PATCH 049/106] c2fmzq: 0.5.3 -> 0.5.5

---
 pkgs/by-name/c2/c2fmzq/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/c2/c2fmzq/package.nix b/pkgs/by-name/c2/c2fmzq/package.nix
index 9f116ed1d97d..30e30e9293f2 100644
--- a/pkgs/by-name/c2/c2fmzq/package.nix
+++ b/pkgs/by-name/c2/c2fmzq/package.nix
@@ -7,13 +7,13 @@
 
 buildGoModule rec {
   pname = "c2FmZQ";
-  version = "0.5.3";
+  version = "0.5.5";
 
   src = fetchFromGitHub {
     owner = "c2FmZQ";
     repo = "c2FmZQ";
     rev = "v${version}";
-    hash = "sha256-SBCUOQpV03kZu6nHuwTUd8gyKeK+XAthZ+H7IRYFjdM=";
+    hash = "sha256-O4/V8fFiTfqTiJWPwEsdigdeKBmwGGo43ZvJXPcVRlE=";
   };
 
   ldflags = [
@@ -23,7 +23,7 @@ buildGoModule rec {
 
   sourceRoot = "${src.name}/c2FmZQ";
 
-  vendorHash = "sha256-jyos/CNQyuatq4KL2nqCPtRuMQLZMB35VECiKQhq4go=";
+  vendorHash = "sha256-B1kHtDHnviU60WEfmASMX69nyEepeeBdMZVtbcmZ9z4=";
 
   subPackages = [
     "c2FmZQ-client"

From a6ebca4125f23a3634058747707be8c7a446d7f7 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 05:30:35 +0000
Subject: [PATCH 050/106] python3Packages.flask-marshmallow: 1.3.0 -> 1.4.0

---
 pkgs/development/python-modules/flask-marshmallow/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/flask-marshmallow/default.nix b/pkgs/development/python-modules/flask-marshmallow/default.nix
index 0c3b4b83ed51..8c6360c50eac 100644
--- a/pkgs/development/python-modules/flask-marshmallow/default.nix
+++ b/pkgs/development/python-modules/flask-marshmallow/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage rec {
   pname = "flask-marshmallow";
-  version = "1.3.0";
+  version = "1.4.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "marshmallow-code";
     repo = "flask-marshmallow";
     tag = version;
-    hash = "sha256-dK2bE5mZiFh0nAN2yRpABT+SGG/UGWJ1oDtnD6bgyXk=";
+    hash = "sha256-YyXsCyIJmXb1p1J5wvGg57bGbsAbz83vW6hxpnbpOSw=";
   };
 
   build-system = [ flit-core ];

From 1f5238a8fcc022a97cd2f859069cec524c4fe0c9 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 05:44:03 +0000
Subject: [PATCH 051/106] python3Packages.pykalman: 0.11.1 -> 0.11.2

---
 pkgs/development/python-modules/pykalman/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/pykalman/default.nix b/pkgs/development/python-modules/pykalman/default.nix
index 54da3ba315de..30c15c89f973 100644
--- a/pkgs/development/python-modules/pykalman/default.nix
+++ b/pkgs/development/python-modules/pykalman/default.nix
@@ -11,14 +11,14 @@
 
 buildPythonPackage rec {
   pname = "pykalman";
-  version = "0.11.1";
+  version = "0.11.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pykalman";
     repo = "pykalman";
     tag = "v${version}";
-    hash = "sha256-8VPSz2pdK5jrVAYgZv64nCKC0E7JtQ1iKFEN0ko4fQE=";
+    hash = "sha256-F5p0li1ZKDd9gDwkL318hlL3QzD2MA3SyEtIB68UOFg=";
   };
 
   build-system = [ setuptools ];

From 856085dc180112c809204ec506d15df94fe12f3a Mon Sep 17 00:00:00 2001
From: Hythera <87016780+Hythera@users.noreply.github.com>
Date: Fri, 6 Feb 2026 07:08:48 +0100
Subject: [PATCH 052/106] ibrewolf-unwrapped: 147.0.1-3 -> 147.0.3-2

---
 pkgs/by-name/li/librewolf-unwrapped/src.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/li/librewolf-unwrapped/src.json b/pkgs/by-name/li/librewolf-unwrapped/src.json
index 4be25a0c8d30..4d1c9d1380f4 100644
--- a/pkgs/by-name/li/librewolf-unwrapped/src.json
+++ b/pkgs/by-name/li/librewolf-unwrapped/src.json
@@ -1,11 +1,11 @@
 {
-  "packageVersion": "147.0.1-3",
+  "packageVersion": "147.0.3-2",
   "source": {
-    "rev": "147.0.1-3",
-    "hash": "sha256-0BeC3zlL5cvnpTaPnKn26lT1XlvqBQuMc4rauNbeIIk="
+    "rev": "147.0.3-2",
+    "hash": "sha256-Gnsk+dY0B0j/0npy//y/UItKvPrI9HELrH86x0QklBk="
   },
   "firefox": {
-    "version": "147.0.1",
-    "hash": "sha512-8eG8SGRRJU8zsAD7RRP9lIpaboSEGYDudnxC0ybhhW9EqEN8j9v/LLNNF3/qKxkH/Nct0zvOw/Bt242IFRhTqA=="
+    "version": "147.0.3",
+    "hash": "sha512-N+OcR9aU7M3Ku32KCkz+GwKGCpf2BGU/Nkxg9OmHlv/H8carUSJrLlA0pLSAXMxuw5g/DYMMnzZpLfLsJhJz2Q=="
   }
 }

From 0ec98621af835335420c3ec3d61b75f7577fe990 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 06:45:53 +0000
Subject: [PATCH 053/106] vscode-extensions.vytautassurvila.csharp-ls: 0.0.29
 -> 0.0.30

---
 pkgs/applications/editors/vscode/extensions/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/editors/vscode/extensions/default.nix b/pkgs/applications/editors/vscode/extensions/default.nix
index ddb6425a6ec1..ae7aa8649041 100644
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -5215,8 +5215,8 @@ let
         mktplcRef = {
           name = "csharp-ls";
           publisher = "vytautassurvila";
-          version = "0.0.29";
-          hash = "sha256-0gh7q/F69OD/soRuZHHxC9PRtOXJmjZjei6IbV82Rgs=";
+          version = "0.0.30";
+          hash = "sha256-BVSazrQxVm4yYBVdtFP3Aojl06xI2msFXIGw64LeePY=";
         };
         meta = {
           changelog = "https://github.com/vytautassurvila/vscode-csharp-ls/blob/master/CHANGELOG.md";

From da773925f581d632203e0427a4d8c19ad733c085 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 07:13:08 +0000
Subject: [PATCH 054/106] highscore-mednafen: 0-unstable-2026-01-28 ->
 0-unstable-2026-01-31

---
 pkgs/by-name/hi/highscore-mednafen/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/hi/highscore-mednafen/package.nix b/pkgs/by-name/hi/highscore-mednafen/package.nix
index af5b3a86db61..29deded80c82 100644
--- a/pkgs/by-name/hi/highscore-mednafen/package.nix
+++ b/pkgs/by-name/hi/highscore-mednafen/package.nix
@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "highscore-mednafen";
-  version = "0-unstable-2026-01-28";
+  version = "0-unstable-2026-01-31";
 
   src = fetchFromGitHub {
     owner = "highscore-emu";
     repo = "mednafen-highscore";
-    rev = "2e8e49ee3155b2497b6a79f815f097e46e23ac0e";
-    hash = "sha256-XGJpKQIBJ0Xu7w9FPc8xw8EKRLb5Y+0bhy8z8OuPOIg=";
+    rev = "f1646bbc664837f5b2ecbfb32cc5c42101466bfd";
+    hash = "sha256-YHVV6/8JTESLtGA5jFozE5IhXHB4RaUaT2yvFd7wGo8=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/highscore";

From 53f59dbd41a5b56baa87be81d2604971e3fdd381 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 07:24:39 +0000
Subject: [PATCH 055/106] htmlhint: 1.8.0 -> 1.8.1

---
 pkgs/by-name/ht/htmlhint/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ht/htmlhint/package.nix b/pkgs/by-name/ht/htmlhint/package.nix
index ed973a24d631..c9e4a5d9ca8a 100644
--- a/pkgs/by-name/ht/htmlhint/package.nix
+++ b/pkgs/by-name/ht/htmlhint/package.nix
@@ -6,16 +6,16 @@
 
 buildNpmPackage rec {
   pname = "htmlhint";
-  version = "1.8.0";
+  version = "1.8.1";
 
   src = fetchFromGitHub {
     owner = "htmlhint";
     repo = "HTMLHint";
     rev = "v${version}";
-    hash = "sha256-zRn6fqziqgp3cOPZfkmN+KP84bgjdPmaHD7n6rtiHVA=";
+    hash = "sha256-uzOdp9SkYQ1SKQqM3DrvKsMAyMw+7s74lNR2jOgLAIM=";
   };
 
-  npmDepsHash = "sha256-L/yVM/HoBewzoADn9M+c2Er5LFEiZXajYIK8fvsDdio=";
+  npmDepsHash = "sha256-Ii73v3Yt10GBwvdxNTy4bmU0RxRGfMaEewP8gdC2OEc=";
 
   meta = {
     changelog = "https://github.com/htmlhint/HTMLHint/blob/${src.rev}/CHANGELOG.md";

From 73934960a4a35fcea6a7faa17d7fe41c662f5c21 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 07:44:05 +0000
Subject: [PATCH 056/106] python3Packages.entsoe-apy: 0.8.1 -> 0.9.1

---
 pkgs/development/python-modules/entsoe-apy/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/entsoe-apy/default.nix b/pkgs/development/python-modules/entsoe-apy/default.nix
index 45db4bdf9b17..1dda8e12c8e7 100644
--- a/pkgs/development/python-modules/entsoe-apy/default.nix
+++ b/pkgs/development/python-modules/entsoe-apy/default.nix
@@ -12,13 +12,13 @@
 
 buildPythonPackage rec {
   pname = "entsoe-apy";
-  version = "0.8.1";
+  version = "0.9.1";
 
   src = fetchFromGitHub {
     owner = "berrij";
     repo = "entsoe-apy";
     tag = "v${version}";
-    hash = "sha256-9bfGEBOXILO+bwkyFgnVFSY1k9gA6RmzWv9mEmJGOeM=";
+    hash = "sha256-tHduOA3huBuCm/ygFcgmtYQ2AZkco9oy7yVRnYpB/K0=";
   };
 
   pyproject = true;

From 1eeeb921f4a6ab65127166aee3dfd4b20911f1e1 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 07:45:26 +0000
Subject: [PATCH 057/106] ghq: 1.8.0 -> 1.8.1

---
 pkgs/by-name/gh/ghq/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/gh/ghq/package.nix b/pkgs/by-name/gh/ghq/package.nix
index 92079c5c0fed..cc11c8228832 100644
--- a/pkgs/by-name/gh/ghq/package.nix
+++ b/pkgs/by-name/gh/ghq/package.nix
@@ -11,16 +11,16 @@
 
 buildGoModule rec {
   pname = "ghq";
-  version = "1.8.0";
+  version = "1.8.1";
 
   src = fetchFromGitHub {
     owner = "x-motemen";
     repo = "ghq";
     tag = "v${version}";
-    sha256 = "sha256-5BN96/RShfJpkfpJe0qrZVDuyFoAV9kgCiBv4REY/5Y=";
+    sha256 = "sha256-Iw8hu2QtnRgRbSTqtIPDmKbx5FcE2j68VfzP4egbZgY=";
   };
 
-  vendorHash = "sha256-jP2Ne/EhmE3tACY1+lHucgBt3VnT4gaQisE3/gVM5Ec=";
+  vendorHash = "sha256-RRxRwYTkveOZvvxAwpG9ie4+ZdUDDkZZfX5cNn0DAhA=";
 
   doCheck = false;
 

From 5241280ffb90f232d08afc734fe9ea0da1c01cb1 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 08:41:43 +0000
Subject: [PATCH 058/106] ttdl: 4.21.0 -> 4.22.0

---
 pkgs/by-name/tt/ttdl/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/tt/ttdl/package.nix b/pkgs/by-name/tt/ttdl/package.nix
index 9018722956c7..e022f493705d 100644
--- a/pkgs/by-name/tt/ttdl/package.nix
+++ b/pkgs/by-name/tt/ttdl/package.nix
@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "ttdl";
-  version = "4.21.0";
+  version = "4.22.0";
 
   src = fetchFromGitHub {
     owner = "VladimirMarkelov";
     repo = "ttdl";
     rev = "v${version}";
-    sha256 = "sha256-nRb3GHE+PTEkJ9WaMC6oCHlfLwLPzwfmOC3cEy2gCJY=";
+    sha256 = "sha256-7JOeLv4iswVZe0FYpIjMO8p+a4EIoA6n+anT8Imfg1w=";
   };
 
-  cargoHash = "sha256-fN396X7RVgmO/akzDCOkylnFvzfabR+gHBUAggo4IwY=";
+  cargoHash = "sha256-x235LDtqy8stKYYaPOcpgo7YDTOh2drIp91m8q4PFI8=";
 
   meta = {
     description = "CLI tool to manage todo lists in todo.txt format";

From 7ef04d56709e0b55a6b0d2675535650722952c05 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 08:50:36 +0000
Subject: [PATCH 059/106] grafanaPlugins.grafana-lokiexplore-app: 1.0.34 ->
 1.0.35

---
 .../grafana/plugins/grafana-lokiexplore-app/default.nix       | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/monitoring/grafana/plugins/grafana-lokiexplore-app/default.nix b/pkgs/servers/monitoring/grafana/plugins/grafana-lokiexplore-app/default.nix
index f83a5c99949e..107395d20df1 100644
--- a/pkgs/servers/monitoring/grafana/plugins/grafana-lokiexplore-app/default.nix
+++ b/pkgs/servers/monitoring/grafana/plugins/grafana-lokiexplore-app/default.nix
@@ -2,8 +2,8 @@
 
 grafanaPlugin {
   pname = "grafana-lokiexplore-app";
-  version = "1.0.34";
-  zipHash = "sha256-koWDaYT9LLBSTieRl1ODdGQrU6n+72diWQRfiGFmPvQ=";
+  version = "1.0.35";
+  zipHash = "sha256-9iK0h1LRl3PNvu70Aa0cQb8nhqezOKu3PAE2GsRR11s=";
   meta = {
     description = "Browse Loki logs without the need for writing complex queries";
     license = lib.licenses.agpl3Only;

From 0d8410b9ce1c7b9c2091469f5a6a9bcc9a36fba5 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 09:13:59 +0000
Subject: [PATCH 060/106] python3Packages.fastapi-sso: 0.19.0 -> 0.20.0

---
 pkgs/development/python-modules/fastapi-sso/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/fastapi-sso/default.nix b/pkgs/development/python-modules/fastapi-sso/default.nix
index d0abe2265f7c..1f4d62b30151 100644
--- a/pkgs/development/python-modules/fastapi-sso/default.nix
+++ b/pkgs/development/python-modules/fastapi-sso/default.nix
@@ -18,7 +18,7 @@
 
 buildPythonPackage rec {
   pname = "fastapi-sso";
-  version = "0.19.0";
+  version = "0.20.0";
   pyproject = true;
 
   disabled = pythonOlder "3.11";
@@ -27,7 +27,7 @@ buildPythonPackage rec {
     owner = "tomasvotava";
     repo = "fastapi-sso";
     tag = version;
-    hash = "sha256-ve1xeJjAfE6b5NBJJZuDUdE58RjDmIq3KI3xC5ScCco=";
+    hash = "sha256-bj6csovJSVhzVaPfktJ68cOgULVifT1Ql14SL+paVG0=";
   };
 
   build-system = [ poetry-core ];

From 4736c05586ef1e8c709f1afffa9329004d22b3a1 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 09:15:01 +0000
Subject: [PATCH 061/106] cobalt: 0.20.2 -> 0.20.3

---
 pkgs/by-name/co/cobalt/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/co/cobalt/package.nix b/pkgs/by-name/co/cobalt/package.nix
index ccb3e73b713a..65e1d5d54f57 100644
--- a/pkgs/by-name/co/cobalt/package.nix
+++ b/pkgs/by-name/co/cobalt/package.nix
@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cobalt";
-  version = "0.20.2";
+  version = "0.20.3";
 
   src = fetchFromGitHub {
     owner = "cobalt-org";
     repo = "cobalt.rs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-XtytPFg8N4ilFte8s5DoMrQHjAkJ7RkJcMbGXcxmaa4=";
+    hash = "sha256-ec6S6PQzDc8t8MuZLyVStxi7tQB6rMu+Fz8Tw1qpTGc=";
   };
 
-  cargoHash = "sha256-x4cnwCpbDYvUhlp8Fw2//NC9Z/kbv/hGF7MqKAft8bU=";
+  cargoHash = "sha256-xwpEdhV9YDfNIbjocz5N0E4BO8FW7Af2kW4QndqZhPo=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
   doInstallCheck = true;

From 6d611d7706fe444b74545ad63fa2f4cb9d9f9f15 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 09:29:12 +0000
Subject: [PATCH 062/106] psitransfer: 2.3.2 -> 2.4.0

---
 pkgs/by-name/ps/psitransfer/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ps/psitransfer/package.nix b/pkgs/by-name/ps/psitransfer/package.nix
index 2bb2ea0e3398..43a3c95ab235 100644
--- a/pkgs/by-name/ps/psitransfer/package.nix
+++ b/pkgs/by-name/ps/psitransfer/package.nix
@@ -8,22 +8,22 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "psitransfer";
-  version = "2.3.2";
+  version = "2.4.0";
 
   src = fetchFromGitHub {
     owner = "psi-4ward";
     repo = "psitransfer";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-i2W3sOOxXM5UHxB20EjpOhmu08PQvaflIC4+Qk+ZnIQ=";
+    hash = "sha256-ikpdqcubqVFbjjQUlrL5Cn3MTsOhkw48dtgLowGv0ho=";
   };
 
-  npmDepsHash = "sha256-cd9Qkw3uOvpQVoLRPphjKjPsBomxaBwdM+ZlhLwJqYM=";
+  npmDepsHash = "sha256-4jKbDzjwWMJAGEjb2FwGv0wZw6SS0ZnlLWrTDX88zv0=";
 
   app = buildNpmPackage {
     pname = "psitransfer-app";
     inherit (finalAttrs) version src;
 
-    npmDepsHash = "sha256-j8eUi3HP6gfjIDD5lli5ypHcpWaOaFLKENe5IYQzchk=";
+    npmDepsHash = "sha256-PpUO1u7TcH8ZcTekLcGOn07EnCHqUlbEMS/YzMLSMAs=";
 
     postPatch = ''
       # https://github.com/psi-4ward/psitransfer/pull/284

From 41c368d9041029564f00f4f29b3b0592d19da3b3 Mon Sep 17 00:00:00 2001
From: ollybeck <14896256+ollybeck@users.noreply.github.com>
Date: Fri, 6 Feb 2026 10:49:04 +0100
Subject: [PATCH 063/106] opencode: 1.1.47 -> 1.1.53

https://github.com/anomalyco/opencode/releases/tag/v1.1.53
---
 pkgs/by-name/op/opencode/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/op/opencode/package.nix b/pkgs/by-name/op/opencode/package.nix
index a5ff12e39de5..5061a54891f0 100644
--- a/pkgs/by-name/op/opencode/package.nix
+++ b/pkgs/by-name/op/opencode/package.nix
@@ -14,12 +14,12 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "opencode";
-  version = "1.1.47";
+  version = "1.1.53";
   src = fetchFromGitHub {
     owner = "anomalyco";
     repo = "opencode";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-f6TVxKV9q2yEQ9r9VCTttXLqpOrYdTEKDUJs+MuQJCQ=";
+    hash = "sha256-VddWpvtoDJlbbesJL6VlP99/NJqkHbN8Rdv1XccNRZM=";
   };
 
   node_modules = stdenvNoCC.mkDerivation {
@@ -70,9 +70,9 @@ stdenvNoCC.mkDerivation (finalAttrs: {
 
     outputHash =
       if stdenvNoCC.hostPlatform.isDarwin then
-        "sha256-BJmyALnZEiAnC8+bsri5Me1Z0Vtf6A/27e7Eve4IvDo="
+        "sha256-m0vAVv8zS8RgU6YpEVbf6l6vilkU+CP/PtAD6U5g/F8="
       else
-        "sha256-zkinMkPR1hCBbB5BIuqozQZDpjX4eiFXjM6lpwUx1fM=";
+        "sha256-S69x2yRym+h0hbc6wHFOeTxYi9nbBgEJGaZKhUbmdxI=";
     outputHashAlgo = "sha256";
     outputHashMode = "recursive";
   };

From 445b6dccbb686a9dfc01be0a886303c70237e6bb Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 10:00:53 +0000
Subject: [PATCH 064/106] opengist: 1.12.0 -> 1.12.1

---
 pkgs/by-name/op/opengist/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/op/opengist/package.nix b/pkgs/by-name/op/opengist/package.nix
index 619f32ddba22..d96f4f34f286 100644
--- a/pkgs/by-name/op/opengist/package.nix
+++ b/pkgs/by-name/op/opengist/package.nix
@@ -13,13 +13,13 @@
 buildGoModule (finalAttrs: {
   pname = "opengist";
 
-  version = "1.12.0";
+  version = "1.12.1";
 
   src = fetchFromGitHub {
     owner = "thomiceli";
     repo = "opengist";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-18anU/D8EvwA8Ind+GGhw9nSdcbo1l5K98cFie8hBCk=";
+    hash = "sha256-vjNrcT4IaCB+QRvvPo0oeLtFgmYXk5DDs5gYvzk4ddo=";
   };
 
   frontend = buildNpmPackage {

From 594e4b9171fe3bd858a5520be5a3ed13bd140fd3 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 10:10:54 +0000
Subject: [PATCH 065/106] targetcli-fb: 3.0.1 -> 3.0.2

---
 pkgs/by-name/ta/targetcli-fb/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ta/targetcli-fb/package.nix b/pkgs/by-name/ta/targetcli-fb/package.nix
index a8db141a5e64..c5769c06843a 100644
--- a/pkgs/by-name/ta/targetcli-fb/package.nix
+++ b/pkgs/by-name/ta/targetcli-fb/package.nix
@@ -10,14 +10,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "targetcli-fb";
-  version = "3.0.1";
+  version = "3.0.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "open-iscsi";
     repo = "targetcli-fb";
     tag = "v${version}";
-    hash = "sha256-jRujBgUdeJY8ekVBDscitajDhYohlx/BS4wn+jFkZSg=";
+    hash = "sha256-ajBKlgnXeksvEkewo93PIeqwI9X90NvLNf6YxzC0824=";
   };
 
   build-system = with python3Packages; [

From 0541e260a4c59cf26f337242759259001a417864 Mon Sep 17 00:00:00 2001
From: Anton Mosich <anton@mosich.at>
Date: Fri, 6 Feb 2026 11:25:48 +0100
Subject: [PATCH 066/106] todoman: disable failing test

The update to urwid 3.0.4 breaks this test but I could not find any
breakage when testing the build result. Furthermore the test runs again
with urwid 3.0.5, which needs to go via staging.
---
 pkgs/by-name/to/todoman/package.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/by-name/to/todoman/package.nix b/pkgs/by-name/to/todoman/package.nix
index f6cad8f38a0c..a2e5ae15c3f2 100644
--- a/pkgs/by-name/to/todoman/package.nix
+++ b/pkgs/by-name/to/todoman/package.nix
@@ -90,6 +90,8 @@ python3.pkgs.buildPythonApplication rec {
     "test_xdg_existant"
     # Tests are sensitive to performance
     "test_sorting_fields"
+    # Test fails with urwid 3.0.4, but should work with 3.0.5 again
+    "test_todo_editor_list"
   ];
 
   pythonImportsCheck = [

From bb4b9f651b6e3d21ca35b08786e860ff2f9f1998 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 10:42:45 +0000
Subject: [PATCH 067/106] home-assistant-custom-components.scene_presets: 2.3.1
 -> 2.3.2

---
 .../custom-components/scene_presets/package.nix               | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/home-assistant/custom-components/scene_presets/package.nix b/pkgs/servers/home-assistant/custom-components/scene_presets/package.nix
index 96a63b8ddb50..cfe76b89fa11 100644
--- a/pkgs/servers/home-assistant/custom-components/scene_presets/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/scene_presets/package.nix
@@ -11,13 +11,13 @@
 buildHomeAssistantComponent rec {
   owner = "Hypfer";
   domain = "scene_presets";
-  version = "2.3.1";
+  version = "2.3.2";
 
   src = fetchFromGitHub {
     owner = "Hypfer";
     repo = "hass-scene_presets";
     tag = version;
-    hash = "sha256-ESu7+65IeXYZLLqlkRlJA7+Ggo+X+YoWcpmMQiNzOTM=";
+    hash = "sha256-Vhowtosxgx7yDprm2ziBe3fSUqNxfP3ULmhP7ETsbzY=";
   };
 
   npmDeps = fetchNpmDeps {

From e7416f62a14846809ef14088acc67b99ba9aa2f2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 10:49:05 +0000
Subject: [PATCH 068/106] home-assistant-custom-components.mitsubishi: 0.5.4 ->
 0.5.5

---
 .../home-assistant/custom-components/mitsubishi/package.nix   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/home-assistant/custom-components/mitsubishi/package.nix b/pkgs/servers/home-assistant/custom-components/mitsubishi/package.nix
index 089af51745a0..b29bab484b8f 100644
--- a/pkgs/servers/home-assistant/custom-components/mitsubishi/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/mitsubishi/package.nix
@@ -11,13 +11,13 @@
 buildHomeAssistantComponent rec {
   owner = "pymitsubishi";
   domain = "mitsubishi";
-  version = "0.5.4";
+  version = "0.5.5";
 
   src = fetchFromGitHub {
     owner = "pymitsubishi";
     repo = "homeassistant-mitsubishi";
     tag = "v${version}";
-    hash = "sha256-IGzOoayqJIURQ2f5h5jNiV7C6Xna0JwWJyxHmO2qu9s=";
+    hash = "sha256-qP2jLkDeiNMdTlHg0G8AryRb2v0ohGnkIoQWIWvbTbs=";
   };
 
   dependencies = [

From b924ca100f451c2ce358558ea762e4eddf28701b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 11:17:11 +0000
Subject: [PATCH 069/106] automatic-timezoned: 2.0.113 -> 2.0.115

---
 pkgs/by-name/au/automatic-timezoned/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/au/automatic-timezoned/package.nix b/pkgs/by-name/au/automatic-timezoned/package.nix
index d293b11a44f2..6090eb54feb2 100644
--- a/pkgs/by-name/au/automatic-timezoned/package.nix
+++ b/pkgs/by-name/au/automatic-timezoned/package.nix
@@ -7,16 +7,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "automatic-timezoned";
-  version = "2.0.113";
+  version = "2.0.115";
 
   src = fetchFromGitHub {
     owner = "maxbrunet";
     repo = "automatic-timezoned";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-R7JJNPwhWOJB+19RC38ICy/ViOQRYnoPU7Fghi5bC40=";
+    sha256 = "sha256-xv+C6ML4JrwsEvvg1V/9WlE/FZh5ANB+rvYDTFsM9fQ=";
   };
 
-  cargoHash = "sha256-TMuQdYNCJf/krUXLf7vPdUidzLMsUiF1jWvTBqmNEBQ=";
+  cargoHash = "sha256-zXsUvORQl04X1dliQmpksBnzYlYO0MkDGgmQt5F3XdQ=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
 

From bc80a4862151fcae0261cab5d9cefa45674ee331 Mon Sep 17 00:00:00 2001
From: Sigmanificient <edhyjox@gmail.com>
Date: Fri, 6 Feb 2026 12:40:15 +0100
Subject: [PATCH 070/106] python3Packages.webcolors: 24.11.1 -> 25.10.0

---
 .../python-modules/webcolors/default.nix            | 13 ++++---------
 1 file changed, 4 insertions(+), 9 deletions(-)

diff --git a/pkgs/development/python-modules/webcolors/default.nix b/pkgs/development/python-modules/webcolors/default.nix
index 54c745dfb0e1..4dfd7e801d15 100644
--- a/pkgs/development/python-modules/webcolors/default.nix
+++ b/pkgs/development/python-modules/webcolors/default.nix
@@ -2,28 +2,23 @@
   lib,
   buildPythonPackage,
   fetchPypi,
-  unittestCheckHook,
+  pytestCheckHook,
   pdm-backend,
 }:
 
 buildPythonPackage rec {
   pname = "webcolors";
-  version = "24.11.1";
+  version = "25.10.0";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-7LPXaPMiAq93BHe4tl8xj6T1ZsIpSGc6l3sA1YndgPY=";
+    hash = "sha256-YquuhlBPZtD2NkwqhSDeSgxHuAwD/DpfGBX+2+98Gb8=";
   };
 
   build-system = [ pdm-backend ];
 
-  nativeCheckInputs = [ unittestCheckHook ];
-
-  unittestFlagsArray = [
-    "-s"
-    "tests"
-  ];
+  nativeCheckInputs = [ pytestCheckHook ];
 
   pythonImportsCheck = [ "webcolors" ];
 

From 81da1c0fd046e9a68e197600885ab366d1378932 Mon Sep 17 00:00:00 2001
From: Sigmanificient <edhyjox@gmail.com>
Date: Fri, 6 Feb 2026 12:41:14 +0100
Subject: [PATCH 071/106] python3Packages.webcolors: adopt

---
 pkgs/development/python-modules/webcolors/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/development/python-modules/webcolors/default.nix b/pkgs/development/python-modules/webcolors/default.nix
index 4dfd7e801d15..c02701b7a528 100644
--- a/pkgs/development/python-modules/webcolors/default.nix
+++ b/pkgs/development/python-modules/webcolors/default.nix
@@ -26,6 +26,6 @@ buildPythonPackage rec {
     description = "Library for working with color names/values defined by the HTML and CSS specifications";
     homepage = "https://github.com/ubernostrum/webcolors";
     license = lib.licenses.bsd3;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ sigmanificient ];
   };
 }

From 60a1856424b0069738d36a8e640dbefc39f92539 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 11:47:07 +0000
Subject: [PATCH 072/106] exoscale-cli: 1.91.0 -> 1.92.0

---
 pkgs/by-name/ex/exoscale-cli/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ex/exoscale-cli/package.nix b/pkgs/by-name/ex/exoscale-cli/package.nix
index 5fa9084f862d..75dd0eb45920 100644
--- a/pkgs/by-name/ex/exoscale-cli/package.nix
+++ b/pkgs/by-name/ex/exoscale-cli/package.nix
@@ -7,13 +7,13 @@
 
 buildGoModule rec {
   pname = "exoscale-cli";
-  version = "1.91.0";
+  version = "1.92.0";
 
   src = fetchFromGitHub {
     owner = "exoscale";
     repo = "cli";
     rev = "v${version}";
-    sha256 = "sha256-I8MzW81ai6qKN0Xk+/jHK7TcicUJdPwNE09McuxHwy4=";
+    sha256 = "sha256-EJtJOEAKlyUkLZqmmRDuZE9Sg2ANKH1NmikT9v6L+hY=";
   };
 
   vendorHash = null;

From 1dcbc9cbdb16414f7214e688afd7ae1c4bf55814 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 12:41:53 +0000
Subject: [PATCH 073/106] gitea-mcp-server: 0.7.0 -> 0.8.0

---
 pkgs/by-name/gi/gitea-mcp-server/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gi/gitea-mcp-server/package.nix b/pkgs/by-name/gi/gitea-mcp-server/package.nix
index c6303db442ee..ba5a46826e9e 100644
--- a/pkgs/by-name/gi/gitea-mcp-server/package.nix
+++ b/pkgs/by-name/gi/gitea-mcp-server/package.nix
@@ -5,14 +5,14 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "gitea-mcp-server";
-  version = "0.7.0";
+  version = "0.8.0";
 
   src = fetchFromGitea {
     domain = "gitea.com";
     owner = "gitea";
     repo = "gitea-mcp";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Qh+UD4V511y1PvM6TQ3dwDXx01FAR80b9wnhxXC/7X4=";
+    hash = "sha256-hnwzDyH+H86xzlaMwpVAltKiPJnkM38qNnM6mM5r/Yc=";
   };
 
   vendorHash = "sha256-N1Ct479Q5RH4TCxcSbIBoGDP/atBlWkxwBLJLk82juM=";

From 59dab276d1cd413ab654fb2acecfe47ec89249f1 Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Thu, 5 Feb 2026 22:36:01 +0000
Subject: [PATCH 074/106] python3Packages.lancedb: 0.26.1 -> 0.27.1

Diff: https://github.com/lancedb/lancedb/compare/python-v0.26.1...python-v0.27.1

Changelog: https://github.com/lancedb/lancedb/releases/tag/python-v0.27.1
---
 .../python-modules/lancedb/default.nix        | 38 +++++++++++--------
 1 file changed, 23 insertions(+), 15 deletions(-)

diff --git a/pkgs/development/python-modules/lancedb/default.nix b/pkgs/development/python-modules/lancedb/default.nix
index 0726bc273cb7..b93c9c035f6d 100644
--- a/pkgs/development/python-modules/lancedb/default.nix
+++ b/pkgs/development/python-modules/lancedb/default.nix
@@ -42,21 +42,21 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "lancedb";
-  version = "0.26.1";
+  version = "0.27.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "lancedb";
     repo = "lancedb";
     tag = "python-v${finalAttrs.version}";
-    hash = "sha256-yx4cwO7qRH9/1rW0UFz17HkvJ8utJynYoAHnN+wPpKw=";
+    hash = "sha256-pWrwv3VtfkfOKnkiiu26yRDrDrsNxb+0r/kcNHwzmhU=";
   };
 
   buildAndTestSubdir = "python";
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-ymoA/KKL7oLgp5u/NcXxbYfOueiKH+bpLxLcO+mn0Eo=";
+    hash = "sha256-U1Od4lhaaGdYF3TISfRWY7sRmyyniZqLofBCnYAo1ew=";
   };
 
   build-system = [ rustPlatform.maturinBuildHook ];
@@ -106,18 +106,26 @@ buildPythonPackage (finalAttrs: {
 
   disabledTestMarks = [ "slow" ];
 
-  disabledTests =
-    lib.optionals (pythonAtLeast "3.14") [
-      # TypeError: Converting Pydantic type to Arrow Type: unsupported type
-      # <class 'test_pydantic.test_optional_nested_model.<locals>.WALocation'>.
-      "test_optional_nested_model"
-    ]
-    ++ lib.optionals stdenv.hostPlatform.isDarwin [
-      # Flaky (even when the sandbox is disabled):
-      # FileNotFoundError: [Errno 2] Cannot delete directory '/nix/var/nix/builds/nix-41395-654732360/.../test.lance/_indices/fts':
-      # Cannot get information for path '/nix/var/nix/builds/nix-41395-654732360/.../test.lance/_indices/fts/.tmppyKXfw'
-      "test_create_index_from_table"
-    ];
+  disabledTests = [
+    # Requires internet access
+    # RuntimeError: lance error: LanceError(IO): Generic S3 error
+    "test_bucket_without_dots_passes"
+  ]
+  ++ lib.optionals (pythonAtLeast "3.14") [
+    # TypeError: Converting Pydantic type to Arrow Type: unsupported type
+    # <class 'test_pydantic.test_optional_nested_model.<locals>.WALocation'>.
+    "test_optional_nested_model"
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    # Flaky (even when the sandbox is disabled):
+    # FileNotFoundError: [Errno 2] Cannot delete directory '/nix/var/nix/builds/nix-41395-654732360/.../test.lance/_indices/fts':
+    # Cannot get information for path '/nix/var/nix/builds/nix-41395-654732360/.../test.lance/_indices/fts/.tmppyKXfw'
+    "test_create_index_from_table"
+  ]
+  ++ lib.optionals ((pythonAtLeast "3.14") && stdenv.hostPlatform.isDarwin) [
+    # Failed: DID NOT RAISE <class 'Exception'>
+    "test_merge_insert"
+  ];
 
   disabledTestPaths = [
     # touch the network

From b80c1c0bee8ee06fd80bf387087eddf817c882c9 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 13:13:52 +0000
Subject: [PATCH 075/106] phrase-cli: 2.55.1 -> 2.55.2

---
 pkgs/by-name/ph/phrase-cli/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ph/phrase-cli/package.nix b/pkgs/by-name/ph/phrase-cli/package.nix
index a0bfc27d0188..8db018f829c4 100644
--- a/pkgs/by-name/ph/phrase-cli/package.nix
+++ b/pkgs/by-name/ph/phrase-cli/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule rec {
   pname = "phrase-cli";
-  version = "2.55.1";
+  version = "2.55.2";
 
   src = fetchFromGitHub {
     owner = "phrase";
     repo = "phrase-cli";
     rev = version;
-    sha256 = "sha256-hcq6ZCWeKRmjshLYXNDOULWXyPc/N6vNf9at7A1b7h0=";
+    sha256 = "sha256-8Gn9B+A5w80T3Yw+mg0tAI1IsdeCRe4ToNU168nP/yQ=";
   };
 
   vendorHash = "sha256-dpB8m02juic883lCwLwIL9356AHpzNy9td0s/e4UeDA=";

From 7f68bc725717c49e7131f4db42dec729adaa2581 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 6 Feb 2026 14:39:27 +0100
Subject: [PATCH 076/106] python313Packages.iamdata: 0.1.202602051 ->
 0.1.202602061

Diff: https://github.com/cloud-copilot/iam-data-python/compare/v0.1.202602051...v0.1.202602061

Changelog: https://github.com/cloud-copilot/iam-data-python/releases/tag/v0.1.202602061
---
 pkgs/development/python-modules/iamdata/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/iamdata/default.nix b/pkgs/development/python-modules/iamdata/default.nix
index 624269e4e172..6b21040c306e 100644
--- a/pkgs/development/python-modules/iamdata/default.nix
+++ b/pkgs/development/python-modules/iamdata/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "iamdata";
-  version = "0.1.202602051";
+  version = "0.1.202602061";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "cloud-copilot";
     repo = "iam-data-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-XdgvVaxUuHjWALQZ60dPCZJZhifCUcqnWVCt7LdLxe0=";
+    hash = "sha256-bsfzOI2CUzmYJF2jbgTmEd6TktbkXbkezqWgmBNu8So=";
   };
 
   __darwinAllowLocalNetworking = true;

From d01e3c1a02004b0077f48bd6fa51b89da9e3e36e Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 6 Feb 2026 14:41:23 +0100
Subject: [PATCH 077/106] python313Packages.tencentcloud-sdk-python: 3.1.44 ->
 3.1.45

Diff: https://github.com/TencentCloud/tencentcloud-sdk-python/compare/3.1.44...3.1.45

Changelog: https://github.com/TencentCloud/tencentcloud-sdk-python/blob/3.1.45/CHANGELOG.md
---
 .../python-modules/tencentcloud-sdk-python/default.nix        | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix b/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
index 150643725f7a..793c81f65451 100644
--- a/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
+++ b/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
@@ -9,14 +9,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "tencentcloud-sdk-python";
-  version = "3.1.44";
+  version = "3.1.45";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "TencentCloud";
     repo = "tencentcloud-sdk-python";
     tag = finalAttrs.version;
-    hash = "sha256-Vr91io2yHJrfYGu6rZypI7IeNSVZb+iwLtfbVADLdxQ=";
+    hash = "sha256-sfvRrI8MFvX56qBjp7f8hmQQDg/3weGwL+6Kx5rcRao=";
   };
 
   build-system = [ setuptools ];

From 3740b00e9475abbb1069ffc2d954a76eab25592b Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 6 Feb 2026 14:58:54 +0100
Subject: [PATCH 078/106] python3Packages.fastapi-sso: migrate to finalAttrs

---
 .../python-modules/fastapi-sso/default.nix            | 11 ++++-------
 1 file changed, 4 insertions(+), 7 deletions(-)

diff --git a/pkgs/development/python-modules/fastapi-sso/default.nix b/pkgs/development/python-modules/fastapi-sso/default.nix
index 1f4d62b30151..73598fa3fc10 100644
--- a/pkgs/development/python-modules/fastapi-sso/default.nix
+++ b/pkgs/development/python-modules/fastapi-sso/default.nix
@@ -13,20 +13,17 @@
   pytest-asyncio,
   pytest-xdist,
   pytestCheckHook,
-  pythonOlder,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "fastapi-sso";
   version = "0.20.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.11";
-
   src = fetchFromGitHub {
     owner = "tomasvotava";
     repo = "fastapi-sso";
-    tag = version;
+    tag = finalAttrs.version;
     hash = "sha256-bj6csovJSVhzVaPfktJ68cOgULVifT1Ql14SL+paVG0=";
   };
 
@@ -54,8 +51,8 @@ buildPythonPackage rec {
   meta = {
     description = "FastAPI plugin to enable SSO to most common providers (such as Facebook login, Google login and login via Microsoft Office 365 Account";
     homepage = "https://github.com/tomasvotava/fastapi-sso";
-    changelog = "https://github.com/tomasvotava/fastapi-sso/releases/tag/${version}";
+    changelog = "https://github.com/tomasvotava/fastapi-sso/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})

From cc1a74db6881595d3fdd8ccdf63ae17851dc49d6 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 14:19:06 +0000
Subject: [PATCH 079/106] terraform-providers.ucloud_ucloud: 1.39.1 -> 1.39.2

---
 .../networking/cluster/terraform-providers/providers.json     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index ce7935fd16be..17654bae04c7 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -1409,11 +1409,11 @@
     "vendorHash": "sha256-l6EzevVL6YxLLq9QWcGZv9Go+0sUToLubHbMeNL1vJg="
   },
   "ucloud_ucloud": {
-    "hash": "sha256-mPTejWXREIBjEZVb660bUUnyj3z7hgfKPrUsSVvMx7A=",
+    "hash": "sha256-UOVnfWYhntmRHMApQgemjUBsyUIz0bexsc1gwDGGee4=",
     "homepage": "https://registry.terraform.io/providers/ucloud/ucloud",
     "owner": "ucloud",
     "repo": "terraform-provider-ucloud",
-    "rev": "v1.39.1",
+    "rev": "v1.39.2",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },

From e8834e08afaae31b6dc2ef3f7b29c81d4484a35f Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 15:11:15 +0000
Subject: [PATCH 080/106] vale: 3.13.0 -> 3.13.1

---
 pkgs/by-name/va/vale/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/va/vale/package.nix b/pkgs/by-name/va/vale/package.nix
index f0f37dac49c9..eba0922d3bd1 100644
--- a/pkgs/by-name/va/vale/package.nix
+++ b/pkgs/by-name/va/vale/package.nix
@@ -11,7 +11,7 @@
 
 buildGoModule rec {
   pname = "vale";
-  version = "3.13.0";
+  version = "3.13.1";
 
   subPackages = [ "cmd/vale" ];
 
@@ -19,10 +19,10 @@ buildGoModule rec {
     owner = "errata-ai";
     repo = "vale";
     tag = "v${version}";
-    hash = "sha256-eaJSQMDHtX997pPCTCF+1s653ojm+SBj+cZ9sZWqQWE=";
+    hash = "sha256-fU36Rc1GL5eWYqeTP53PYXNZPji+ILAwueuJRuRcIoo=";
   };
 
-  vendorHash = "sha256-kGKrOmE3Qjh8JFWFJjAAH2Qc1e03p7x6/Bdf4+ItwOg=";
+  vendorHash = "sha256-7m67FpaGs4fQcwDxEq7XC83td5sazDnUAcBhg3Zkf0Q=";
 
   ldflags = [
     "-s"

From 64acf1a48510e6e39225b20ea84ccccc57c6923a Mon Sep 17 00:00:00 2001
From: Guy Chronister <guychronister@outlook.com>
Date: Fri, 6 Feb 2026 09:14:42 -0600
Subject: [PATCH 081/106] qmake2cmake: migrate to by-name

---
 .../qm}/qmake2cmake/fix-locations.patch       |  0
 .../qm/qmake2cmake/package.nix}               | 25 +++++++------------
 pkgs/top-level/all-packages.nix               |  2 --
 3 files changed, 9 insertions(+), 18 deletions(-)
 rename pkgs/{tools/misc => by-name/qm}/qmake2cmake/fix-locations.patch (100%)
 rename pkgs/{tools/misc/qmake2cmake/default.nix => by-name/qm/qmake2cmake/package.nix} (70%)

diff --git a/pkgs/tools/misc/qmake2cmake/fix-locations.patch b/pkgs/by-name/qm/qmake2cmake/fix-locations.patch
similarity index 100%
rename from pkgs/tools/misc/qmake2cmake/fix-locations.patch
rename to pkgs/by-name/qm/qmake2cmake/fix-locations.patch
diff --git a/pkgs/tools/misc/qmake2cmake/default.nix b/pkgs/by-name/qm/qmake2cmake/package.nix
similarity index 70%
rename from pkgs/tools/misc/qmake2cmake/default.nix
rename to pkgs/by-name/qm/qmake2cmake/package.nix
index f81f93f11d5c..139e55abb42c 100644
--- a/pkgs/tools/misc/qmake2cmake/default.nix
+++ b/pkgs/by-name/qm/qmake2cmake/package.nix
@@ -1,18 +1,11 @@
 {
   lib,
-  buildPythonPackage,
+  python3Packages,
   fetchgit,
-  packaging,
-  platformdirs,
-  portalocker,
-  pyparsing,
-  setuptools,
-  sympy,
-  pytestCheckHook,
   writableTmpDirAsHomeHook,
 }:
 
-buildPythonPackage {
+python3Packages.buildPythonPackage {
   pname = "qmake2cmake";
   version = "1.0.8";
   pyproject = true;
@@ -28,18 +21,18 @@ buildPythonPackage {
     ./fix-locations.patch
   ];
 
-  build-system = [ setuptools ];
+  build-system = [ python3Packages.setuptools ];
 
   dependencies = [
-    packaging
-    platformdirs
-    portalocker
-    pyparsing
-    sympy
+    python3Packages.packaging
+    python3Packages.platformdirs
+    python3Packages.portalocker
+    python3Packages.pyparsing
+    python3Packages.sympy
   ];
 
   nativeCheckInputs = [
-    pytestCheckHook
+    python3Packages.pytestCheckHook
     writableTmpDirAsHomeHook
   ];
 
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index c516d2d0e4a2..e1504c640c65 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -12779,8 +12779,6 @@ with pkgs;
     waylandSupport = true;
   };
 
-  qmake2cmake = python3Packages.callPackage ../tools/misc/qmake2cmake { };
-
   sail-riscv = callPackage ../applications/virtualization/sail-riscv {
     inherit (ocamlPackages) sail;
   };

From e39fb4f9797915c600d718fd33ce3003a188f5b6 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 15:18:27 +0000
Subject: [PATCH 082/106] vscode-extensions.bierner.markdown-mermaid: 1.31.0 ->
 1.31.1

---
 pkgs/applications/editors/vscode/extensions/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/editors/vscode/extensions/default.nix b/pkgs/applications/editors/vscode/extensions/default.nix
index ddb6425a6ec1..fadbb428e44e 100644
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -675,8 +675,8 @@ let
         mktplcRef = {
           name = "markdown-mermaid";
           publisher = "bierner";
-          version = "1.31.0";
-          hash = "sha256-7KpyUXR3a7ZD9bcdJ4t5HRjSAlUww8q6XSOcxHCN4Cw=";
+          version = "1.31.1";
+          hash = "sha256-K3UXNT3MpGlhyHcx0AYAkCPEJIbYIu3e/ucIAQLwoEQ=";
         };
         meta = {
           changelog = "https://marketplace.visualstudio.com/items/bierner.markdown-mermaid/changelog";

From 3acc29333ca71ef9013f41dd44bcb29fdbc0a6e5 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 15:33:25 +0000
Subject: [PATCH 083/106] satty: 0.20.0 -> 0.20.1

---
 pkgs/by-name/sa/satty/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/sa/satty/package.nix b/pkgs/by-name/sa/satty/package.nix
index 8d9a955064b7..6b2f51144e0c 100644
--- a/pkgs/by-name/sa/satty/package.nix
+++ b/pkgs/by-name/sa/satty/package.nix
@@ -17,16 +17,16 @@
 rustPlatform.buildRustPackage rec {
 
   pname = "satty";
-  version = "0.20.0";
+  version = "0.20.1";
 
   src = fetchFromGitHub {
     owner = "gabm";
     repo = "Satty";
     rev = "v${version}";
-    hash = "sha256-4RVah6yo4cJyE6qUbDJbcmFpi7xsKNpHJFrzSs1yJcg=";
+    hash = "sha256-pR3Mc5Eue4YcIMcrzkyDhZPpovRFa8TW1PjL/ysH/7s=";
   };
 
-  cargoHash = "sha256-RPj6ZVtDWPMt4jrmU750b7zLVHwqk+SWr2OskDAQFYI=";
+  cargoHash = "sha256-/WewpLpBmD4XnjwY7NmzbglYGNKmgMLjg1pvUdqEIwo=";
 
   nativeBuildInputs = [
     copyDesktopItems

From 97b7c72b99f0ce7bb3de6ce6d7a5e33d5bec8fa3 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 16:07:35 +0000
Subject: [PATCH 084/106] vscode-extensions.foam.foam-vscode: 0.29.1 -> 0.29.2

---
 pkgs/applications/editors/vscode/extensions/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/editors/vscode/extensions/default.nix b/pkgs/applications/editors/vscode/extensions/default.nix
index ddb6425a6ec1..f8bc5c218026 100644
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -1727,8 +1727,8 @@ let
         mktplcRef = {
           name = "foam-vscode";
           publisher = "foam";
-          version = "0.29.1";
-          hash = "sha256-U5DkTMNLoE9TDCa+Womml9ilv162FqVsnkyGsJ80+Ag=";
+          version = "0.29.2";
+          hash = "sha256-6Bga51DCHaVn+UV5RPCE7uFsAei/F0xN4Mk4dm52FWs=";
         };
         meta = {
           changelog = "https://marketplace.visualstudio.com/items/foam.foam-vscode/changelog";

From bfb88ad9719d82f49b46e5f15b8a9ba3db654423 Mon Sep 17 00:00:00 2001
From: ollybeck <14896256+ollybeck@users.noreply.github.com>
Date: Fri, 6 Feb 2026 16:16:38 +0100
Subject: [PATCH 085/106] opencode-desktop: 1.1.47 -> 1.1.53

---
 pkgs/by-name/op/opencode-desktop/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/op/opencode-desktop/package.nix b/pkgs/by-name/op/opencode-desktop/package.nix
index 4e49e03d8919..83127971a25e 100644
--- a/pkgs/by-name/op/opencode-desktop/package.nix
+++ b/pkgs/by-name/op/opencode-desktop/package.nix
@@ -32,7 +32,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     ;
 
   cargoRoot = "packages/desktop/src-tauri";
-  cargoHash = "sha256-bLM/ZcUaaswFrg+WogY81HnTn5do/7tu+JA/+tJNmMw=";
+  cargoHash = "sha256-zdqquibtTpMAoY9qjzjGNnq3+GFXKYGj9K3+hKpcsag=";
   buildAndTestSubdir = finalAttrs.cargoRoot;
 
   nativeBuildInputs = [

From 2b0a06393f703765e67c386ff8dbaa0467ca2b33 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 16:17:21 +0000
Subject: [PATCH 086/106] circleci-cli: 0.1.34038 -> 0.1.34283

---
 pkgs/by-name/ci/circleci-cli/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ci/circleci-cli/package.nix b/pkgs/by-name/ci/circleci-cli/package.nix
index 4bc18bea9b40..56d6579a7cc2 100644
--- a/pkgs/by-name/ci/circleci-cli/package.nix
+++ b/pkgs/by-name/ci/circleci-cli/package.nix
@@ -7,13 +7,13 @@
 
 buildGoModule rec {
   pname = "circleci-cli";
-  version = "0.1.34038";
+  version = "0.1.34283";
 
   src = fetchFromGitHub {
     owner = "CircleCI-Public";
     repo = "circleci-cli";
     rev = "v${version}";
-    sha256 = "sha256-kEhAiTcWY+xXX5jFgJZtle0CEwqRT2BHDEM8iSUFRh4=";
+    sha256 = "sha256-LcZAdYADw8pQQIpnAhP1Yoo4E5pC+/9+rNEthntZ1vU=";
   };
 
   vendorHash = "sha256-QMSciB81khHhjd/4Km1YYyTiEFDF75AcNGsmZTLLO5Q=";

From 75e6c45f30672866b26065d731b883877b697281 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 16:45:33 +0000
Subject: [PATCH 087/106] troubadix: 26.1.0 -> 26.2.0

---
 pkgs/by-name/tr/troubadix/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/tr/troubadix/package.nix b/pkgs/by-name/tr/troubadix/package.nix
index 1515f9a33a35..22b58f463213 100644
--- a/pkgs/by-name/tr/troubadix/package.nix
+++ b/pkgs/by-name/tr/troubadix/package.nix
@@ -7,14 +7,14 @@
 
 python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "troubadix";
-  version = "26.1.0";
+  version = "26.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "greenbone";
     repo = "troubadix";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-FWauAvySks536KFdU/4X6ru2zr2nwIWzlfOG9OpZ9m4=";
+    hash = "sha256-FtpgilCPVnT3rswv2yHE9TGhC1ZC8YOjvwNmPM2MXlI=";
   };
 
   pythonRelaxDeps = [

From 348965f29096b8be76eb4dd40b8dfe45989650c7 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 16:47:26 +0000
Subject: [PATCH 088/106] python3Packages.aioslimproto: 3.1.4 -> 3.1.5

---
 pkgs/development/python-modules/aioslimproto/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/aioslimproto/default.nix b/pkgs/development/python-modules/aioslimproto/default.nix
index 9c91609aeacd..5ca2a02a6435 100644
--- a/pkgs/development/python-modules/aioslimproto/default.nix
+++ b/pkgs/development/python-modules/aioslimproto/default.nix
@@ -11,7 +11,7 @@
 
 buildPythonPackage rec {
   pname = "aioslimproto";
-  version = "3.1.4";
+  version = "3.1.5";
   pyproject = true;
 
   disabled = pythonOlder "3.11";
@@ -20,7 +20,7 @@ buildPythonPackage rec {
     owner = "home-assistant-libs";
     repo = "aioslimproto";
     tag = version;
-    hash = "sha256-9WPlVAj/Bo7k/oWHI3xDkn07OrQdvNruou2s/zxB61Q=";
+    hash = "sha256-A5BAMEtyyDoQzl+eRt4XMo1vOyyNZ2D+YLQ64xHfYkk=";
   };
 
   postPatch = ''

From 2315aa79c9d59f23c3f9bc6c8520d564e4ebf478 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 16:55:38 +0000
Subject: [PATCH 089/106] zed-discord-presence: 0.9.2 -> 0.10.0

---
 pkgs/by-name/ze/zed-discord-presence/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ze/zed-discord-presence/package.nix b/pkgs/by-name/ze/zed-discord-presence/package.nix
index b35a35688760..ec11acb63b1c 100644
--- a/pkgs/by-name/ze/zed-discord-presence/package.nix
+++ b/pkgs/by-name/ze/zed-discord-presence/package.nix
@@ -7,17 +7,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "zed-discord-presence";
-  version = "0.9.2";
+  version = "0.10.0";
 
   src = fetchFromGitHub {
     owner = "xhyrom";
     repo = "zed-discord-presence";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BvhAt4tA3efu2XHQLEA0eTNInol0fWRiCtzBplLDzMo=";
+    hash = "sha256-lrOKX9KZFipbc6ubJr7TC+aIhpl7LQWTGS/KwPJy70g=";
   };
 
   cargoBuildFlags = [ "--package discord-presence-lsp" ];
-  cargoHash = "sha256-/25WO/zTgQPuctXowRtVF1GxXdmJzsL5HjhLaxcj0Ao=";
+  cargoHash = "sha256-61B1sk7D17eKkvmRr73tOKLRGqL4az/GE8wp8IViw84=";
 
   passthru.updateScript = nix-update-script { };
 

From a7064061cff837223affc8a287399a9e049e85dd Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 17:31:04 +0000
Subject: [PATCH 090/106] arkade: 0.11.69 -> 0.11.70

---
 pkgs/by-name/ar/arkade/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ar/arkade/package.nix b/pkgs/by-name/ar/arkade/package.nix
index f67aefdc28ac..613c0a41351e 100644
--- a/pkgs/by-name/ar/arkade/package.nix
+++ b/pkgs/by-name/ar/arkade/package.nix
@@ -8,13 +8,13 @@
 
 buildGoModule rec {
   pname = "arkade";
-  version = "0.11.69";
+  version = "0.11.70";
 
   src = fetchFromGitHub {
     owner = "alexellis";
     repo = "arkade";
     tag = version;
-    hash = "sha256-aTgW7zYaY8R4fgfQEg2IKC0+199ZLyLPFEQhKmRqFys=";
+    hash = "sha256-M4W1vcAgIE8XzpyBjW2EuqTySNyDRQuQ8rpCpn4TiFY=";
   };
 
   env.CGO_ENABLED = 0;

From 109926247902061818e6d3ee6103fb2edd3f70ec Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Sat, 7 Feb 2026 00:55:00 +0700
Subject: [PATCH 091/106] platformio: 6.1.18 -> 6.1.19

---
 pkgs/by-name/pl/platformio-core/package.nix            | 10 ++++++++--
 .../platformio-core/use-local-spdx-license-list.patch  |  2 +-
 2 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/pl/platformio-core/package.nix b/pkgs/by-name/pl/platformio-core/package.nix
index f14cbc5fa303..8f2c6cee1962 100644
--- a/pkgs/by-name/pl/platformio-core/package.nix
+++ b/pkgs/by-name/pl/platformio-core/package.nix
@@ -31,7 +31,7 @@ in
 with python3Packages;
 buildPythonApplication rec {
   pname = "platformio";
-  version = "6.1.18";
+  version = "6.1.19";
   pyproject = true;
 
   # pypi tarballs don't contain tests - https://github.com/platformio/platformio-core/issues/1964
@@ -39,7 +39,7 @@ buildPythonApplication rec {
     owner = "platformio";
     repo = "platformio-core";
     tag = "v${version}";
-    hash = "sha256-h9/xDWXCoGHQ9r2f/ZzAtwTAs4qzDrvVAQ2kuLS9Lk8=";
+    hash = "sha256-9pv2fbShddfYqBFxsQEj7nU1e772gUQEQINXRO/RMcQ=";
   };
 
   outputs = [
@@ -94,6 +94,7 @@ buildPythonApplication rec {
     intelhex
     lockfile
     marshmallow
+    packaging
     pip
     pyelftools
     pyparsing
@@ -131,6 +132,11 @@ buildPythonApplication rec {
     mkdir -p $udev/lib/udev/rules.d
     cp platformio/assets/system/99-platformio-udev.rules $udev/lib/udev/rules.d/99-platformio-udev.rules
 
+    # Avoid platformio writing state into /build/.home when generating completions.
+    export HOME=$TMPDIR
+    export PLATFORMIO_CORE_DIR=$TMPDIR/platformio-core
+    mkdir -p "$PLATFORMIO_CORE_DIR"
+
     installShellCompletion --cmd platformio \
       --bash <(_PLATFORMIO_COMPLETE=bash_source $out/bin/platformio) \
       --zsh <(_PLATFORMIO_COMPLETE=zsh_source $out/bin/platformio) \
diff --git a/pkgs/by-name/pl/platformio-core/use-local-spdx-license-list.patch b/pkgs/by-name/pl/platformio-core/use-local-spdx-license-list.patch
index 6496699a799c..8ae00149ecfb 100644
--- a/pkgs/by-name/pl/platformio-core/use-local-spdx-license-list.patch
+++ b/pkgs/by-name/pl/platformio-core/use-local-spdx-license-list.patch
@@ -6,7 +6,7 @@ index 47efae59..6c2cfaed 100644
      @staticmethod
      @memoized(expire="1h")
      def load_spdx_licenses():
--        version = "3.26.0"
+-        version = "3.27.0"
 -        spdx_data_url = (
 -            "https://raw.githubusercontent.com/spdx/license-list-data/"
 -            f"v{version}/json/licenses.json"

From faa98eb283cf2b8c96b3d30db792ff5b6692eb64 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 18:02:49 +0000
Subject: [PATCH 092/106] terraform-providers.hashicorp_azurerm: 4.58.0 ->
 4.59.0

---
 .../networking/cluster/terraform-providers/providers.json     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index ce7935fd16be..c0231196ee7f 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -526,11 +526,11 @@
     "vendorHash": null
   },
   "hashicorp_azurerm": {
-    "hash": "sha256-uAaWBctVH61wMz12hX3DnayVn6LK1e3aUM2SQBNx3QQ=",
+    "hash": "sha256-ZqR6UjG+3KUuqnru5CycUcjWxLwCiQdpsIPR2UiY3g8=",
     "homepage": "https://registry.terraform.io/providers/hashicorp/azurerm",
     "owner": "hashicorp",
     "repo": "terraform-provider-azurerm",
-    "rev": "v4.58.0",
+    "rev": "v4.59.0",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },

From ad35e2f3d9fdaf4db6b7d40eb8d5aa837e6345c5 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Sat, 7 Feb 2026 01:06:28 +0700
Subject: [PATCH 093/106] meshtasticd: avoid platformio auto-upgrade in build

---
 pkgs/by-name/me/meshtasticd/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/me/meshtasticd/package.nix b/pkgs/by-name/me/meshtasticd/package.nix
index 39dd4b912cb7..1dfadd574f69 100644
--- a/pkgs/by-name/me/meshtasticd/package.nix
+++ b/pkgs/by-name/me/meshtasticd/package.nix
@@ -81,6 +81,7 @@ stdenv.mkDerivation (finalAttrs: {
     mkdir -p platformio-deps-native
     cp -ar ${platformio-deps-native}/. platformio-deps-native
     chmod +w -R platformio-deps-native
+    rm -f platformio-deps-native/core/appstate.json
 
     export PLATFORMIO_CORE_DIR=platformio-deps-native/core
     export PLATFORMIO_LIBDEPS_DIR=platformio-deps-native/libdeps

From ec649870da944f9208a131974d5e730017f8eafc Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 18:10:50 +0000
Subject: [PATCH 094/106] libretro.snes9x: 0-unstable-2026-01-26 ->
 0-unstable-2026-02-03

---
 pkgs/applications/emulators/libretro/cores/snes9x.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/emulators/libretro/cores/snes9x.nix b/pkgs/applications/emulators/libretro/cores/snes9x.nix
index e6b78a5635e5..da8a3a0d8ef3 100644
--- a/pkgs/applications/emulators/libretro/cores/snes9x.nix
+++ b/pkgs/applications/emulators/libretro/cores/snes9x.nix
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "snes9x";
-  version = "0-unstable-2026-01-26";
+  version = "0-unstable-2026-02-03";
 
   src = fetchFromGitHub {
     owner = "snes9xgit";
     repo = "snes9x";
-    rev = "830d8552551d7a71e9d084f727dc15cf15d9796c";
-    hash = "sha256-Xu3s1z4Pab71D2orv7HyL8b3E59AnQEAil0XeWKfKdw=";
+    rev = "02f642cdadfaa8f9fa7ec674382d6c70a8b534d6";
+    hash = "sha256-4BqWxchxdq8pbWw3Iql786Iu/OY5VMT1pF8wowI26h0=";
   };
 
   makefile = "Makefile";

From 4eac28cecc87b48064235b6ad2c209d017be919c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 18:12:20 +0000
Subject: [PATCH 095/106] libretro-shaders-slang: 0-unstable-2026-01-29 ->
 0-unstable-2026-02-06

---
 pkgs/by-name/li/libretro-shaders-slang/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/li/libretro-shaders-slang/package.nix b/pkgs/by-name/li/libretro-shaders-slang/package.nix
index 2a912b700e6d..e061889648c8 100644
--- a/pkgs/by-name/li/libretro-shaders-slang/package.nix
+++ b/pkgs/by-name/li/libretro-shaders-slang/package.nix
@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation {
   pname = "libretro-shaders-slang";
-  version = "0-unstable-2026-01-29";
+  version = "0-unstable-2026-02-06";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "slang-shaders";
-    rev = "bbdb6153e5832d419702dfbee9e1e621f99aee32";
-    hash = "sha256-V07LnMa7LTLBaSUUhyIuNgrJU2nQa08Yonq5O7vTvyU=";
+    rev = "476a4c7226f87dca4ed67635746ebfaa91851a82";
+    hash = "sha256-zO9/9OEU5TMokjPdvkKtB4LI/Bf+mDQOtsg0k9dZ99c=";
   };
 
   dontConfigure = true;

From a5fb08e41f470d1bd9620894f3e1a05fec3c845f Mon Sep 17 00:00:00 2001
From: Defelo <mail@defelo.de>
Date: Fri, 6 Feb 2026 18:01:04 +0000
Subject: [PATCH 096/106] uiua: 0.17.3 -> 0.18.0

Changelog: https://github.com/uiua-lang/uiua/blob/refs/tags/0.18.0/changelog.md
Diff: https://github.com/uiua-lang/uiua/compare/0.17.3...0.18.0
---
 pkgs/by-name/ui/uiua/stable.nix     | 6 +++---
 pkgs/by-name/ui/uiua386/package.nix | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ui/uiua/stable.nix b/pkgs/by-name/ui/uiua/stable.nix
index 19917703bed0..4d20fce4691d 100644
--- a/pkgs/by-name/ui/uiua/stable.nix
+++ b/pkgs/by-name/ui/uiua/stable.nix
@@ -1,7 +1,7 @@
 rec {
-  version = "0.17.3";
+  version = "0.18.0";
   tag = version;
-  hash = "sha256-TiJAj+wBVb8Z9pnoscF65tB7flbk/XWW+7XrHlvIHeo=";
-  cargoHash = "sha256-smonKftOpGXy0WxI8Qqr0rTeI/pW6f+G4TxzoaEMsuc=";
+  hash = "sha256-049fEvLiRK2QfX6W0zCuL2QNACkBn0HmuGYjUGAWR1M=";
+  cargoHash = "sha256-rGWMhghlYaUupn2vqDxBEezgENH4GCXlf2RU3iRrmxo=";
   updateScript = ./update-stable.sh;
 }
diff --git a/pkgs/by-name/ui/uiua386/package.nix b/pkgs/by-name/ui/uiua386/package.nix
index f06d10f15635..56194ea1f892 100644
--- a/pkgs/by-name/ui/uiua386/package.nix
+++ b/pkgs/by-name/ui/uiua386/package.nix
@@ -12,7 +12,7 @@ stdenvNoCC.mkDerivation {
   installPhase = ''
     runHook preInstall
 
-    install -Dm444 -t $out/share/fonts/truetype ./src/algorithm/Uiua386.ttf
+    install -Dm444 -t $out/share/fonts/truetype ./src/assets/Uiua386.ttf
 
     runHook postInstall
   '';

From 353ed1e9405c2b6d2890ff2f8a5989e0241cd7a5 Mon Sep 17 00:00:00 2001
From: Defelo <mail@defelo.de>
Date: Fri, 6 Feb 2026 18:00:38 +0000
Subject: [PATCH 097/106] uiua-unstable: 0.18.0-dev.4 -> 0.18.0

Changelog: https://github.com/uiua-lang/uiua/blob/refs/tags/0.18.0/changelog.md
Diff: https://github.com/uiua-lang/uiua/compare/0.18.0-dev.4...0.18.0
---
 pkgs/by-name/ui/uiua/unstable.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ui/uiua/unstable.nix b/pkgs/by-name/ui/uiua/unstable.nix
index 531b52fbd5d7..ce655cd5b93f 100644
--- a/pkgs/by-name/ui/uiua/unstable.nix
+++ b/pkgs/by-name/ui/uiua/unstable.nix
@@ -1,7 +1,7 @@
 rec {
-  version = "0.18.0-dev.4";
+  version = "0.18.0";
   tag = version;
-  hash = "sha256-/uM92x0jBgfbkBY5/NFPBDHgH+caISEtJiiXAFQj61A=";
-  cargoHash = "sha256-MsoLvwFlVBJnbWMA8Z7wCjQKJ9VHYhAV1HpNVmM+MEo=";
+  hash = "sha256-049fEvLiRK2QfX6W0zCuL2QNACkBn0HmuGYjUGAWR1M=";
+  cargoHash = "sha256-rGWMhghlYaUupn2vqDxBEezgENH4GCXlf2RU3iRrmxo=";
   updateScript = ./update-unstable.sh;
 }

From 9e845edf5f7e4eacb6c124b865d6870da5559271 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 18:26:59 +0000
Subject: [PATCH 098/106] zlcompressor: 0.3.1 -> 0.4.0

---
 pkgs/by-name/zl/zlcompressor/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/zl/zlcompressor/package.nix b/pkgs/by-name/zl/zlcompressor/package.nix
index 2d9852abe9d7..9b8ce4235eb3 100644
--- a/pkgs/by-name/zl/zlcompressor/package.nix
+++ b/pkgs/by-name/zl/zlcompressor/package.nix
@@ -29,13 +29,13 @@
 
 clangStdenv.mkDerivation (finalAttrs: {
   pname = "zlcompressor";
-  version = "0.3.1";
+  version = "0.4.0";
 
   src = fetchFromGitHub {
     owner = "ZL-Audio";
     repo = "ZLCompressor";
     tag = finalAttrs.version;
-    hash = "sha256-G7tgRenRB6aYpi+BSiQzwSsekvCw4JPUuy1iXVj7HN0=";
+    hash = "sha256-u+2cfCNjMUXo+7/qBUU4BdDQcUyeQfd9kvARi3AAK48=";
     fetchSubmodules = true;
   };
 

From 8bb4c5e78ae4f10476919dbb8a25d0740a248ade Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 18:42:58 +0000
Subject: [PATCH 099/106] kubefirst: 2.10.4 -> 2.10.5

---
 pkgs/by-name/ku/kubefirst/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ku/kubefirst/package.nix b/pkgs/by-name/ku/kubefirst/package.nix
index cd5c1958eb7d..1df53e05977f 100644
--- a/pkgs/by-name/ku/kubefirst/package.nix
+++ b/pkgs/by-name/ku/kubefirst/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "kubefirst";
-  version = "2.10.4";
+  version = "2.10.5";
 
   src = fetchFromGitHub {
     owner = "konstructio";
     repo = "kubefirst";
     tag = "v${version}";
-    hash = "sha256-9uecbFdixMRAqFJyyDFwtGBylYXSxiqs+Suj/W2gEHA=";
+    hash = "sha256-2rxvUbf94cG/56ri3GXKpHSoqSXg2cfu5wpm4UUjpVE=";
   };
 
-  vendorHash = "sha256-1u34cuPUY/5fYd073UhRUu/5/1nhPadTI06+3o+uE7w=";
+  vendorHash = "sha256-/su9f8JVXaJrC7/rcX1LK/amolVmkRAtPF1bqzxcKh8=";
 
   ldflags = [
     "-s"

From 96ad322d3ceb19a1b54a5f1b64f4d1412e50ab29 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 19:12:22 +0000
Subject: [PATCH 100/106] amdgpu_top: 0.11.0 -> 0.11.2

---
 pkgs/by-name/am/amdgpu_top/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/am/amdgpu_top/package.nix b/pkgs/by-name/am/amdgpu_top/package.nix
index 2c406b571010..d7d2b29079bf 100644
--- a/pkgs/by-name/am/amdgpu_top/package.nix
+++ b/pkgs/by-name/am/amdgpu_top/package.nix
@@ -16,16 +16,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "amdgpu_top";
-  version = "0.11.0";
+  version = "0.11.2";
 
   src = fetchFromGitHub {
     owner = "Umio-Yasuno";
     repo = "amdgpu_top";
     tag = "v${version}";
-    hash = "sha256-ZXvTLzEjH+R59GqRzDcdtNI7MD7SpG89Wm32KdgEAgg=";
+    hash = "sha256-yw73bKO91O05WBQNwjcQ+AqxYgGXXC7XJzUnMx5/IWc=";
   };
 
-  cargoHash = "sha256-L9vQHht7sZCosKTiMS77IG2WOOTmnMbLQqN8SInU6zM=";
+  cargoHash = "sha256-hQrgAyi7740bY5knICWACZhDYoZwPs/dO/PgVC4Krx0=";
 
   buildInputs = [
     libdrm

From 33691122e703d6a1eb4dd0cc2dd63dbe8414b98b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 19:57:18 +0000
Subject: [PATCH 101/106] kool: 3.5.3 -> 3.6.0

---
 pkgs/by-name/ko/kool/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ko/kool/package.nix b/pkgs/by-name/ko/kool/package.nix
index a0d8ceefeb91..39ba2a3fe4f0 100644
--- a/pkgs/by-name/ko/kool/package.nix
+++ b/pkgs/by-name/ko/kool/package.nix
@@ -8,13 +8,13 @@
 
 buildGoModule rec {
   pname = "kool";
-  version = "3.5.3";
+  version = "3.6.0";
 
   src = fetchFromGitHub {
     owner = "kool-dev";
     repo = "kool";
     rev = version;
-    hash = "sha256-pZ667bDyRWIrImBNHyhkOGl/22gjHKX6KsVSTckS1U4=";
+    hash = "sha256-81UhlEAk8ZNC/G6tV2g8+VZVVrLJVV6Dji2pjmWIYb8=";
   };
 
   vendorHash = "sha256-IqUkIf0uk4iUTedTO5xRzjmJwHS+p6apo4E0WEEU6cc=";

From bd5d5758ada78479c1bf8c66a186f631807e1995 Mon Sep 17 00:00:00 2001
From: "Adam C. Stephens" <adam@valkor.net>
Date: Fri, 6 Feb 2026 16:28:54 -0500
Subject: [PATCH 102/106] inlyne: fix build on darwin

---
 pkgs/by-name/in/inlyne/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/in/inlyne/package.nix b/pkgs/by-name/in/inlyne/package.nix
index bbfe5db25c18..19606d2a8267 100644
--- a/pkgs/by-name/in/inlyne/package.nix
+++ b/pkgs/by-name/in/inlyne/package.nix
@@ -33,12 +33,13 @@ rustPlatform.buildRustPackage rec {
 
   nativeBuildInputs = [
     installShellFiles
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isLinux [
     pkg-config
   ];
 
-  buildInputs = lib.optionals stdenv.hostPlatform.isLinux [
+  buildInputs = [
+    oniguruma
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
     fontconfig
     libxcursor
     libxi
@@ -47,7 +48,6 @@ rustPlatform.buildRustPackage rec {
     wayland
     libxkbcommon
     openssl
-    oniguruma
   ];
 
   # use system oniguruma since the bundled one fails to build with gcc15

From 44560ee9f79afe60ad12f18e75fa7e6bb61cfca9 Mon Sep 17 00:00:00 2001
From: quantenzitrone <general@dev.quantenzitrone.eu>
Date: Fri, 6 Feb 2026 23:14:16 +0100
Subject: [PATCH 103/106] various: make all uses of fixed point builders use
 `finalAttrs` as argument

some of these were just typos like `finalAttr`, `finalAtts` or `finaAttrs`
some of these were using `self`, `final`, `finalPackage`, `attrs` or `_`
some of these were wrong by using `oldAttrs` or `finalPackages`

other than the nixos manual this shouldn't create any rebuilds
---
 doc/languages-frameworks/ocaml.section.md     |  4 +-
 .../misc/qtbitcointrader/default.nix          |  6 +--
 pkgs/by-name/ag/age/package.nix               | 14 ++---
 pkgs/by-name/al/alacritty-theme/package.nix   |  4 +-
 pkgs/by-name/al/alice/package.nix             |  4 +-
 pkgs/by-name/ba/bark/package.nix              |  4 +-
 pkgs/by-name/bo/boxed-cpp/package.nix         |  4 +-
 pkgs/by-name/cl/clprover/package.nix          |  6 +--
 pkgs/by-name/da/dark-mode-notify/package.nix  |  2 +-
 pkgs/by-name/ds/dssat/package.nix             |  4 +-
 .../em/emmy-lua-code-style/package.nix        |  6 +--
 pkgs/by-name/ev/evil-helix/package.nix        |  4 +-
 pkgs/by-name/gl/glaze/package.nix             |  4 +-
 pkgs/by-name/he/helix/package.nix             |  6 +--
 pkgs/by-name/ia/iat/package.nix               |  4 +-
 pkgs/by-name/iv/ivm/package.nix               |  4 +-
 .../by-name/ja/jack-example-tools/package.nix |  4 +-
 pkgs/by-name/ki/kismet/package.nix            |  4 +-
 pkgs/by-name/kr/kryoptic/package.nix          |  4 +-
 pkgs/by-name/li/libsbml/package.nix           |  4 +-
 pkgs/by-name/li/libunicode/package.nix        |  4 +-
 pkgs/by-name/lo/logiops/package.nix           |  6 +--
 .../ma/maa-assistant-arknights/package.nix    | 10 ++--
 pkgs/by-name/nu/nuget/package.nix             | 10 ++--
 .../op/open-english-wordnet/package.nix       |  8 +--
 pkgs/by-name/op/openterface-qt/package.nix    |  8 +--
 pkgs/by-name/ov/ovftool/package.nix           |  4 +-
 pkgs/by-name/pa/pacman/package.nix            |  6 +--
 pkgs/by-name/pa/patcher9x/package.nix         |  4 +-
 pkgs/by-name/pi/pipeworld/package.nix         |  2 +-
 pkgs/by-name/po/poselib/package.nix           |  6 +--
 pkgs/by-name/pt/ptcpdump/package.nix          |  6 +--
 pkgs/by-name/re/retdec/package.nix            |  8 +--
 pkgs/by-name/ro/rofi-emoji/package.nix        |  4 +-
 pkgs/by-name/rs/rsstail/package.nix           |  4 +-
 pkgs/by-name/sc/scom/package.nix              |  4 +-
 pkgs/by-name/so/sops/package.nix              | 14 ++---
 pkgs/by-name/sr/srm-cuarzo/package.nix        |  6 +--
 pkgs/by-name/st/strobealign/package.nix       |  4 +-
 pkgs/by-name/ta/tattoy/package.nix            |  4 +-
 pkgs/by-name/te/termpaint/package.nix         |  4 +-
 pkgs/by-name/ti/tidal-hifi/package.nix        |  8 +--
 pkgs/by-name/tm/tm/package.nix                |  4 +-
 pkgs/by-name/tz/tzpfms/package.nix            |  6 +--
 pkgs/by-name/wi/wifi-qr/package.nix           |  4 +-
 pkgs/by-name/wi/winboat/package.nix           | 10 ++--
 pkgs/by-name/wl/wlopm/package.nix             |  4 +-
 pkgs/by-name/xd/xdg-utils/package.nix         |  6 +--
 pkgs/by-name/yk/ykush/package.nix             |  8 +--
 pkgs/by-name/yu/yubihsm-setup/package.nix     |  4 +-
 pkgs/development/compilers/sbcl/default.nix   | 52 ++++++++++---------
 .../emilua-plugins/beast/default.nix          |  4 +-
 pkgs/development/libraries/quarto/default.nix |  6 +--
 .../python-modules/outspin/default.nix        |  6 +--
 pkgs/development/tools/godot/3/default.nix    | 37 ++++++-------
 .../tools/parsing/tree-sitter/default.nix     |  6 +--
 .../tools/selenium/chromedriver/source.nix    |  2 +-
 pkgs/os-specific/linux/xpad-noone/default.nix |  4 +-
 58 files changed, 198 insertions(+), 195 deletions(-)

diff --git a/doc/languages-frameworks/ocaml.section.md b/doc/languages-frameworks/ocaml.section.md
index d84b5fd80a1c..06c2fb197105 100644
--- a/doc/languages-frameworks/ocaml.section.md
+++ b/doc/languages-frameworks/ocaml.section.md
@@ -116,14 +116,14 @@ Here is a second example, this time using a source archive generated with `dune-
   buildDunePackage,
 }:
 
-buildDunePackage (finalAtts: {
+buildDunePackage (finalAttrs: {
   pname = "wtf8";
   version = "1.0.2";
 
   minimalOCamlVersion = "4.02";
 
   src = fetchurl {
-    url = "https://github.com/flowtype/ocaml-wtf8/releases/download/v${finalAtts.version}/wtf8-v${finalAtts.version}.tbz";
+    url = "https://github.com/flowtype/ocaml-wtf8/releases/download/v${finalAttrs.version}/wtf8-v${finalAttrs.version}.tbz";
     hash = "sha256-d5/3KUBAWRj8tntr4RkJ74KWW7wvn/B/m1nx0npnzyc=";
   };
 
diff --git a/pkgs/applications/misc/qtbitcointrader/default.nix b/pkgs/applications/misc/qtbitcointrader/default.nix
index 7130e5e34e93..cb6def2c2074 100644
--- a/pkgs/applications/misc/qtbitcointrader/default.nix
+++ b/pkgs/applications/misc/qtbitcointrader/default.nix
@@ -5,14 +5,14 @@
   libsForQt5,
 }:
 
-stdenv.mkDerivation (finalAttr: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "qtbitcointrader";
   version = "1.42.21";
 
   src = fetchFromGitHub {
     owner = "JulyIGHOR";
     repo = "QtBitcoinTrader";
-    tag = "v${finalAttr.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-u3+Kwn8KunYUpWCd55TQuVVfoSp8hdti93d6hk7Uqx8=";
   };
 
@@ -24,7 +24,7 @@ stdenv.mkDerivation (finalAttr: {
     libsForQt5.qtscript
   ];
 
-  sourceRoot = "${finalAttr.src.name}/src";
+  sourceRoot = "${finalAttrs.src.name}/src";
 
   configurePhase = ''
     runHook preConfigure
diff --git a/pkgs/by-name/ag/age/package.nix b/pkgs/by-name/ag/age/package.nix
index 9ac09fee82be..ecbb1d9d5309 100644
--- a/pkgs/by-name/ag/age/package.nix
+++ b/pkgs/by-name/ag/age/package.nix
@@ -16,14 +16,14 @@
   nix-update-script,
 }:
 
-buildGoModule (final: {
+buildGoModule (finalAttrs: {
   pname = "age";
   version = "1.3.1";
 
   src = fetchFromGitHub {
     owner = "FiloSottile";
     repo = "age";
-    tag = "v${final.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-Qs/q3zQYV0PukABBPf/aU5V1oOhw95NG6K301VYJk8A=";
   };
 
@@ -32,7 +32,7 @@ buildGoModule (final: {
   ldflags = [
     "-s"
     "-w"
-    "-X main.Version=v${final.version}"
+    "-X main.Version=v${finalAttrs.version}"
   ];
 
   nativeBuildInputs = [ installShellFiles ];
@@ -67,15 +67,15 @@ buildGoModule (final: {
   # convenience function for wrapping sops with plugins
   passthru.withPlugins =
     filter:
-    runCommand "age-${final.version}-with-plugins" { nativeBuildInputs = [ makeWrapper ]; } ''
-      makeWrapper ${lib.getBin final.finalPackage}/bin/age $out/bin/age \
-        --prefix PATH : "${lib.makeBinPath (filter final.passthru.plugins)}"
+    runCommand "age-${finalAttrs.version}-with-plugins" { nativeBuildInputs = [ makeWrapper ]; } ''
+      makeWrapper ${lib.getBin finalAttrs.finalPackage}/bin/age $out/bin/age \
+        --prefix PATH : "${lib.makeBinPath (filter finalAttrs.passthru.plugins)}"
     '';
 
   passthru.updateScript = nix-update-script { };
 
   meta = {
-    changelog = "https://github.com/FiloSottile/age/releases/tag/v${final.version}";
+    changelog = "https://github.com/FiloSottile/age/releases/tag/v${finalAttrs.version}";
     homepage = "https://age-encryption.org/";
     description = "Modern encryption tool with small explicit keys";
     license = lib.licenses.bsd3;
diff --git a/pkgs/by-name/al/alacritty-theme/package.nix b/pkgs/by-name/al/alacritty-theme/package.nix
index 0e0ce734fb3c..0f11fbed594c 100644
--- a/pkgs/by-name/al/alacritty-theme/package.nix
+++ b/pkgs/by-name/al/alacritty-theme/package.nix
@@ -5,7 +5,7 @@
   stdenvNoCC,
 }:
 
-stdenvNoCC.mkDerivation (self: {
+stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "alacritty-theme";
   version = "0-unstable-2025-11-16";
 
@@ -21,7 +21,7 @@ stdenvNoCC.mkDerivation (self: {
   dontBuild = true;
   preferLocalBuild = true;
 
-  sourceRoot = "${self.src.name}/themes";
+  sourceRoot = "${finalAttrs.src.name}/themes";
   installPhase = ''
     runHook preInstall
     install -Dt $out/share/alacritty-theme *.toml
diff --git a/pkgs/by-name/al/alice/package.nix b/pkgs/by-name/al/alice/package.nix
index 88ef1554dd51..daf66b775658 100644
--- a/pkgs/by-name/al/alice/package.nix
+++ b/pkgs/by-name/al/alice/package.nix
@@ -4,7 +4,7 @@
   fetchzip,
 }:
 
-stdenv.mkDerivation (attrs: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "Alice";
   version = "2.003";
 
@@ -15,7 +15,7 @@ stdenv.mkDerivation (attrs: {
 
   src = fetchzip {
     url =
-      with attrs;
+      with finalAttrs;
       "https://github.com/cyrealtype/${pname}/releases/download/v${version}/${pname}-v${version}.zip";
     stripRoot = false;
     hash = "sha256-p+tE3DECfJyBIPyafGZ8jDYQ1lPb+iAnEwLyaUy7DW0=";
diff --git a/pkgs/by-name/ba/bark/package.nix b/pkgs/by-name/ba/bark/package.nix
index ae9588cf4b46..f6abecc0de47 100644
--- a/pkgs/by-name/ba/bark/package.nix
+++ b/pkgs/by-name/ba/bark/package.nix
@@ -11,13 +11,13 @@
   versionCheckHook,
   nix-update-script,
 }:
-rustPlatform.buildRustPackage (final: {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "bark";
   version = "0.6.0";
   src = fetchFromGitHub {
     owner = "haileys";
     repo = "bark";
-    tag = "v${final.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-JaUIWGCYhasM0DgqL+DiG2rE1OWVg/N66my/4RWDN1E=";
   };
 
diff --git a/pkgs/by-name/bo/boxed-cpp/package.nix b/pkgs/by-name/bo/boxed-cpp/package.nix
index 6977c595aca2..1645b5aa5121 100644
--- a/pkgs/by-name/bo/boxed-cpp/package.nix
+++ b/pkgs/by-name/bo/boxed-cpp/package.nix
@@ -6,14 +6,14 @@
   catch2,
 }:
 
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "boxed-cpp";
   version = "1.4.3";
 
   src = fetchFromGitHub {
     owner = "contour-terminal";
     repo = "boxed-cpp";
-    rev = "v${final.version}";
+    rev = "v${finalAttrs.version}";
     hash = "sha256-uZ/wT159UuEcTUtoQyt0D59z2wnLT5KpeeCpjyij198=";
   };
 
diff --git a/pkgs/by-name/cl/clprover/package.nix b/pkgs/by-name/cl/clprover/package.nix
index ec18eb101cb4..af561cfb1c71 100644
--- a/pkgs/by-name/cl/clprover/package.nix
+++ b/pkgs/by-name/cl/clprover/package.nix
@@ -4,7 +4,7 @@
   fetchFromGitHub,
 }:
 
-stdenv.mkDerivation (self: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "CLProver++";
   version = "1.0.3";
 
@@ -43,8 +43,8 @@ stdenv.mkDerivation (self: {
     mkdir -p $out/bin
     cp -r bin $out/
 
-    mkdir -p $out/share/${self.pname}
-    cp -r examples $out/share/${self.pname}/examples
+    mkdir -p $out/share/${finalAttrs.pname}
+    cp -r examples $out/share/${finalAttrs.pname}/examples
 
     runHook postInstall
   '';
diff --git a/pkgs/by-name/da/dark-mode-notify/package.nix b/pkgs/by-name/da/dark-mode-notify/package.nix
index e1abe256505d..2b941f11b0ed 100644
--- a/pkgs/by-name/da/dark-mode-notify/package.nix
+++ b/pkgs/by-name/da/dark-mode-notify/package.nix
@@ -9,7 +9,7 @@
 
 # Use the same stdenv, including clang, as Swift itself
 # Fixes build issues, see https://github.com/NixOS/nixpkgs/pull/296082 and https://github.com/NixOS/nixpkgs/issues/295322
-swiftPackages.stdenv.mkDerivation (final: {
+swiftPackages.stdenv.mkDerivation (finalAttrs: {
   pname = "dark-mode-notify";
   version = "0-unstable-2022-07-18";
 
diff --git a/pkgs/by-name/ds/dssat/package.nix b/pkgs/by-name/ds/dssat/package.nix
index c04c35f6f012..2f3b6543c426 100644
--- a/pkgs/by-name/ds/dssat/package.nix
+++ b/pkgs/by-name/ds/dssat/package.nix
@@ -23,14 +23,14 @@ let
     hash = "sha256-WwJR5lnWtR3aYWZmk8pBC0/qaRqY0UrWHIaYp2ajImE=";
   };
 in
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "dssat";
   version = "4.8.2.12";
 
   src = fetchFromGitHub {
     owner = "DSSAT";
     repo = "dssat-csm-os";
-    tag = "v${final.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-8OaTM7IXFZjlelx5O4O+bVNQj4dIhGzIk2iCfpqI8uA=";
   };
 
diff --git a/pkgs/by-name/em/emmy-lua-code-style/package.nix b/pkgs/by-name/em/emmy-lua-code-style/package.nix
index 465ce8d01e37..0df147419dc4 100644
--- a/pkgs/by-name/em/emmy-lua-code-style/package.nix
+++ b/pkgs/by-name/em/emmy-lua-code-style/package.nix
@@ -6,14 +6,14 @@
   nix-update-script,
 }:
 
-stdenv.mkDerivation (self: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "emmy-lua-code-style";
   version = "1.6.0";
 
   src = fetchFromGitHub {
     owner = "CppCXY";
     repo = "EmmyLuaCodeStyle";
-    tag = self.version;
+    tag = finalAttrs.version;
     hash = "sha256-FYtDO9ZL7MjC+vHzrylyYBQHTtef/GM9ipt//EcLr4w=";
   };
 
@@ -23,7 +23,7 @@ stdenv.mkDerivation (self: {
 
   meta = {
     homepage = "https://github.com/CppCXY/EmmyLuaCodeStyle";
-    changelog = "https://github.com/CppCXY/EmmyLuaCodeStyle/releases/tag/${self.version}";
+    changelog = "https://github.com/CppCXY/EmmyLuaCodeStyle/releases/tag/${finalAttrs.version}";
     description = "Fast, powerful, and feature-rich Lua formatting and checking tool";
     mainProgram = "CodeFormat";
     platforms = lib.platforms.unix;
diff --git a/pkgs/by-name/ev/evil-helix/package.nix b/pkgs/by-name/ev/evil-helix/package.nix
index e0fa61b724d6..692fe89ddeda 100644
--- a/pkgs/by-name/ev/evil-helix/package.nix
+++ b/pkgs/by-name/ev/evil-helix/package.nix
@@ -7,14 +7,14 @@
   rustPlatform,
 }:
 
-rustPlatform.buildRustPackage (final: {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "evil-helix";
   version = "20250915";
 
   src = fetchFromGitHub {
     owner = "usagi-flow";
     repo = "evil-helix";
-    tag = "release-${final.version}";
+    tag = "release-${finalAttrs.version}";
     hash = "sha256-6kqKTZNS1RZwfxcFoa2uC7fUKcQ+KhT5KXusyCt59YQ=";
   };
 
diff --git a/pkgs/by-name/gl/glaze/package.nix b/pkgs/by-name/gl/glaze/package.nix
index f2e519bf5364..f1d7fd657272 100644
--- a/pkgs/by-name/gl/glaze/package.nix
+++ b/pkgs/by-name/gl/glaze/package.nix
@@ -9,14 +9,14 @@
   enableInterop ? true,
 }:
 
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "glaze";
   version = "7.0.0";
 
   src = fetchFromGitHub {
     owner = "stephenberry";
     repo = "glaze";
-    tag = "v${final.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-bYXXQmrVnrBTW/r+fgRBPYfKGPtHvEDw0Sk6BYTMm/4=";
   };
 
diff --git a/pkgs/by-name/he/helix/package.nix b/pkgs/by-name/he/helix/package.nix
index b71f940fe492..4221b653127c 100644
--- a/pkgs/by-name/he/helix/package.nix
+++ b/pkgs/by-name/he/helix/package.nix
@@ -10,7 +10,7 @@
   nix-update-script,
 }:
 
-rustPlatform.buildRustPackage (final: {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "helix";
   version = "25.07.1";
   outputs = [
@@ -21,7 +21,7 @@ rustPlatform.buildRustPackage (final: {
   # This release tarball includes source code for the tree-sitter grammars,
   # which is not ordinarily part of the repository.
   src = fetchzip {
-    url = "https://github.com/helix-editor/helix/releases/download/${final.version}/helix-${final.version}-source.tar.xz";
+    url = "https://github.com/helix-editor/helix/releases/download/${finalAttrs.version}/helix-${finalAttrs.version}-source.tar.xz";
     hash = "sha256-Pj/lfcQXRWqBOTTWt6+Gk61F9F1UmeCYr+26hGdG974=";
     stripRoot = false;
   };
@@ -77,7 +77,7 @@ rustPlatform.buildRustPackage (final: {
   meta = {
     description = "Post-modern modal text editor";
     homepage = "https://helix-editor.com";
-    changelog = "https://github.com/helix-editor/helix/blob/${final.version}/CHANGELOG.md";
+    changelog = "https://github.com/helix-editor/helix/blob/${finalAttrs.version}/CHANGELOG.md";
     license = lib.licenses.mpl20;
     mainProgram = "hx";
     maintainers = with lib.maintainers; [
diff --git a/pkgs/by-name/ia/iat/package.nix b/pkgs/by-name/ia/iat/package.nix
index 1443a257b941..7818ff845001 100644
--- a/pkgs/by-name/ia/iat/package.nix
+++ b/pkgs/by-name/ia/iat/package.nix
@@ -4,12 +4,12 @@
   fetchurl,
 }:
 
-stdenv.mkDerivation (finalAttr: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "iat";
   version = "0.1.7";
 
   src = fetchurl {
-    url = "mirror://sourceforge/iat.berlios/iat-${finalAttr.version}.tar.gz";
+    url = "mirror://sourceforge/iat.berlios/iat-${finalAttrs.version}.tar.gz";
     hash = "sha256-sl1X/eKKArLYfNSf0UeLA5rb2DY1GHmmVP6hTCd2SyE=";
   };
 
diff --git a/pkgs/by-name/iv/ivm/package.nix b/pkgs/by-name/iv/ivm/package.nix
index d27d928130dd..5291768b236a 100644
--- a/pkgs/by-name/iv/ivm/package.nix
+++ b/pkgs/by-name/iv/ivm/package.nix
@@ -13,14 +13,14 @@
   nix-update-script,
 }:
 
-rustPlatform.buildRustPackage (finalAttr: {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ivm";
   version = "0.6.0";
 
   src = fetchFromGitHub {
     owner = "inko-lang";
     repo = "ivm";
-    tag = "v${finalAttr.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-pqqUvHK6mPrK1Mir2ILANxtih9OrAKDJPE0nRWc5JOY=";
   };
 
diff --git a/pkgs/by-name/ja/jack-example-tools/package.nix b/pkgs/by-name/ja/jack-example-tools/package.nix
index 19fddc33c8ef..6bbce59554ce 100644
--- a/pkgs/by-name/ja/jack-example-tools/package.nix
+++ b/pkgs/by-name/ja/jack-example-tools/package.nix
@@ -20,14 +20,14 @@
   enableAlsa ? stdenv.hostPlatform.isLinux,
 }:
 
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "jack-example-tools";
   version = "4";
 
   src = fetchFromGitHub {
     owner = "jackaudio";
     repo = "jack-example-tools";
-    rev = "tags/${final.version}";
+    rev = "tags/${finalAttrs.version}";
     hash = "sha256-5jmynNxwNVLxEZ1MaqQUG6kRwipDkjhrdDCbZHtmAHk=";
   };
 
diff --git a/pkgs/by-name/ki/kismet/package.nix b/pkgs/by-name/ki/kismet/package.nix
index 43677310ba31..4f992ffb2e60 100644
--- a/pkgs/by-name/ki/kismet/package.nix
+++ b/pkgs/by-name/ki/kismet/package.nix
@@ -32,14 +32,14 @@
   zlib,
 }:
 
-stdenv.mkDerivation (finalPackage: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "kismet";
   version = "2025-09-R1";
 
   src = fetchFromGitHub {
     owner = "kismetwireless";
     repo = "kismet";
-    tag = "kismet-${finalPackage.version}";
+    tag = "kismet-${finalAttrs.version}";
     hash = "sha256-bwgeBIa5P1he0azWBu1YTXS9EGlHdJK8hS6A5Rj9XU4=";
   };
 
diff --git a/pkgs/by-name/kr/kryoptic/package.nix b/pkgs/by-name/kr/kryoptic/package.nix
index c3d23ad99f7e..c48f562a4a55 100644
--- a/pkgs/by-name/kr/kryoptic/package.nix
+++ b/pkgs/by-name/kr/kryoptic/package.nix
@@ -13,14 +13,14 @@
   withPostQuantum ? true,
 }:
 
-rustPlatform.buildRustPackage (finalPackage: {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "kryoptic";
   version = "1.4.0";
 
   src = fetchFromGitHub {
     owner = "latchset";
     repo = "kryoptic";
-    tag = "v${finalPackage.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-tP2BZkGCZqfLNLZ/mYAVkICWKTM1EbL7lbw+Mnx4VTk=";
   };
 
diff --git a/pkgs/by-name/li/libsbml/package.nix b/pkgs/by-name/li/libsbml/package.nix
index 95486537dec2..9f491de86d62 100644
--- a/pkgs/by-name/li/libsbml/package.nix
+++ b/pkgs/by-name/li/libsbml/package.nix
@@ -10,14 +10,14 @@
   python ? null,
   withPython ? false,
 }:
-stdenv.mkDerivation (attrs: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "libsbml";
   version = "5.20.4";
 
   src = fetchFromGitHub {
     owner = "sbmlteam";
     repo = "libsbml";
-    rev = "v${attrs.version}";
+    rev = "v${finalAttrs.version}";
     hash = "sha256-qWTN033YU4iWzt+mXQaP5W/6IF5nebF4PwNVkyL8wTg=";
   };
 
diff --git a/pkgs/by-name/li/libunicode/package.nix b/pkgs/by-name/li/libunicode/package.nix
index c1cfd06efdf6..4d3713ef1d4f 100644
--- a/pkgs/by-name/li/libunicode/package.nix
+++ b/pkgs/by-name/li/libunicode/package.nix
@@ -19,14 +19,14 @@ let
     stripRoot = false;
   };
 in
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "libunicode";
   version = "0.7.0";
 
   src = fetchFromGitHub {
     owner = "contour-terminal";
     repo = "libunicode";
-    tag = "v${final.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-J8qawT1oiUO9xTVEMQvsY0K2NtIfkUq9PoCbFt6wqek=";
   };
 
diff --git a/pkgs/by-name/lo/logiops/package.nix b/pkgs/by-name/lo/logiops/package.nix
index 369cd824a4d3..3378b7812278 100644
--- a/pkgs/by-name/lo/logiops/package.nix
+++ b/pkgs/by-name/lo/logiops/package.nix
@@ -10,14 +10,14 @@
   libconfig,
 }:
 
-stdenv.mkDerivation (oldAttrs: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "logiops";
   version = "0.3.5";
 
   src = fetchFromGitHub {
     owner = "PixlOne";
     repo = "logiops";
-    tag = "v${oldAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-GAnlPqjIFGyOWwYFs7gth2m9ITc1jyiaW0sWwQ2zFOs=";
     # In v0.3.0, the `ipcgull` submodule was added as a dependency
     # https://github.com/PixlOne/logiops/releases/tag/v0.3.0
@@ -40,7 +40,7 @@ stdenv.mkDerivation (oldAttrs: {
   ];
 
   cmakeFlags = [
-    "-DLOGIOPS_VERSION=${oldAttrs.version}"
+    "-DLOGIOPS_VERSION=${finalAttrs.version}"
     "-DDBUS_SYSTEM_POLICY_INSTALL_DIR=${placeholder "out"}/share/dbus-1/system.d"
   ];
 
diff --git a/pkgs/by-name/ma/maa-assistant-arknights/package.nix b/pkgs/by-name/ma/maa-assistant-arknights/package.nix
index 40ceab5fdd91..6692daa5419d 100644
--- a/pkgs/by-name/ma/maa-assistant-arknights/package.nix
+++ b/pkgs/by-name/ma/maa-assistant-arknights/package.nix
@@ -18,14 +18,14 @@ let
   fastdeploy = callPackage ./fastdeploy-ppocr.nix { };
   sources = lib.importJSON ./pin.json;
 in
-stdenv.mkDerivation (finalAttr: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "maa-assistant-arknights" + lib.optionalString isBeta "-beta";
   version = if isBeta then sources.beta.version else sources.stable.version;
 
   src = fetchFromGitHub {
     owner = "MaaAssistantArknights";
     repo = "MaaAssistantArknights";
-    rev = "v${finalAttr.version}";
+    rev = "v${finalAttrs.version}";
     hash = if isBeta then sources.beta.hash else sources.stable.hash;
   };
 
@@ -63,7 +63,7 @@ stdenv.mkDerivation (finalAttr: {
     (lib.cmakeBool "INSTALL_PYTHON" true)
     (lib.cmakeBool "INSTALL_RESOURCE" true)
     (lib.cmakeBool "USE_MAADEPS" false)
-    (lib.cmakeFeature "MAA_VERSION" "v${finalAttr.version}")
+    (lib.cmakeFeature "MAA_VERSION" "v${finalAttrs.version}")
   ];
 
   passthru.updateScript = ./update.sh;
@@ -73,8 +73,8 @@ stdenv.mkDerivation (finalAttr: {
   '';
 
   postInstall = ''
-    mkdir -p $out/share/${finalAttr.pname}
-    mv $out/{Python,resource} $out/share/${finalAttr.pname}
+    mkdir -p $out/share/${finalAttrs.pname}
+    mv $out/{Python,resource} $out/share/${finalAttrs.pname}
   '';
 
   meta = {
diff --git a/pkgs/by-name/nu/nuget/package.nix b/pkgs/by-name/nu/nuget/package.nix
index fd28bbc90ba1..800e37bd700b 100644
--- a/pkgs/by-name/nu/nuget/package.nix
+++ b/pkgs/by-name/nu/nuget/package.nix
@@ -6,14 +6,14 @@
   lib,
 }:
 
-stdenv.mkDerivation (attrs: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "Nuget";
   version = "6.6.1.2";
 
   src = fetchFromGitHub {
     owner = "mono";
     repo = "linux-packaging-nuget";
-    rev = "upstream/${attrs.version}.bin";
+    rev = "upstream/${finalAttrs.version}.bin";
     hash = "sha256-9/dSeVshHbpYIgGE/8OzrB4towrWVB3UxDi8Esmbu7Y=";
   };
 
@@ -24,14 +24,14 @@ stdenv.mkDerivation (attrs: {
   installPhase = ''
     runHook preInstall
 
-    mkdir -p $out/lib/${attrs.pname}
-    cp -r . $out/lib/${attrs.pname}/
+    mkdir -p $out/lib/${finalAttrs.pname}
+    cp -r . $out/lib/${finalAttrs.pname}/
 
     mkdir -p $out/bin
     makeWrapper \
       "${mono}/bin/mono" \
       "$out/bin/nuget" \
-      --add-flags "$out/lib/${attrs.pname}/nuget.exe"
+      --add-flags "$out/lib/${finalAttrs.pname}/nuget.exe"
 
     runHook postInstall
   '';
diff --git a/pkgs/by-name/op/open-english-wordnet/package.nix b/pkgs/by-name/op/open-english-wordnet/package.nix
index e4e753d59169..9caa355a0b27 100644
--- a/pkgs/by-name/op/open-english-wordnet/package.nix
+++ b/pkgs/by-name/op/open-english-wordnet/package.nix
@@ -7,14 +7,14 @@
   stdenvNoCC,
 }:
 
-stdenvNoCC.mkDerivation (self: {
+stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "open-english-wordnet";
   version = "2022";
 
   src = fetchFromGitHub {
     owner = "globalwordnet";
     repo = "english-wordnet";
-    rev = "${self.version}-edition";
+    rev = "${finalAttrs.version}-edition";
     hash = "sha256-a1fWIp39uuJZL1aFX/r+ttLB1+kwh/XPHwphgENTQ5M=";
   };
 
@@ -49,14 +49,14 @@ stdenvNoCC.mkDerivation (self: {
     python scripts/merge.py
 
     echo Compressing
-    gzip --best --no-name --stdout ./wn.xml > 'oewn:${self.version}.xml.gz'
+    gzip --best --no-name --stdout ./wn.xml > 'oewn:${finalAttrs.version}.xml.gz'
 
     runHook postBuild
   '';
 
   installPhase = ''
     runHook preInstall
-    install -Dt $out/share/wordnet 'oewn:${self.version}.xml.gz'
+    install -Dt $out/share/wordnet 'oewn:${finalAttrs.version}.xml.gz'
     runHook postInstall
   '';
 
diff --git a/pkgs/by-name/op/openterface-qt/package.nix b/pkgs/by-name/op/openterface-qt/package.nix
index da78f25d07b3..a23e80556e6e 100644
--- a/pkgs/by-name/op/openterface-qt/package.nix
+++ b/pkgs/by-name/op/openterface-qt/package.nix
@@ -20,13 +20,13 @@ let
     KERNEL=="hidraw*", ATTRS{idVendor}=="534d", ATTRS{idProduct}=="2109", TAG+="uaccess"
   '';
 in
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "openterface-qt";
   version = "0.3.18";
   src = fetchFromGitHub {
     owner = "TechxArtisanStudio";
     repo = "Openterface_QT";
-    rev = "${final.version}";
+    rev = "${finalAttrs.version}";
     hash = "sha256-yD71UOi6iRd9N3NeASUzqoeHMcTYIqkysAfxRm7GkOA=";
   };
   nativeBuildInputs = [
@@ -62,8 +62,8 @@ stdenv.mkDerivation (final: {
     (makeDesktopItem {
       name = "openterfaceQT";
       exec = "openterfaceQT";
-      icon = final.pname;
-      comment = final.meta.description;
+      icon = finalAttrs.pname;
+      comment = finalAttrs.meta.description;
       desktopName = "Openterface QT";
       categories = [ "Utility" ];
     })
diff --git a/pkgs/by-name/ov/ovftool/package.nix b/pkgs/by-name/ov/ovftool/package.nix
index fe4888375a97..1caa02e0bf16 100644
--- a/pkgs/by-name/ov/ovftool/package.nix
+++ b/pkgs/by-name/ov/ovftool/package.nix
@@ -95,7 +95,7 @@ let
     };
   });
 in
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "ovftool";
   inherit (ovftoolSystem) version;
 
@@ -109,7 +109,7 @@ stdenv.mkDerivation (final: {
         See the following URL for terms of using this software:
         ${mkBaseUrl ovftoolId}
 
-        Use `${final.pname}.override { acceptBroadcomEula = true; }` if you accept Broadcom's terms
+        Use `${finalAttrs.pname}.override { acceptBroadcomEula = true; }` if you accept Broadcom's terms
         and would like to use this package.
       '';
 
diff --git a/pkgs/by-name/pa/pacman/package.nix b/pkgs/by-name/pa/pacman/package.nix
index e73805e5e1a9..d4faa6298245 100644
--- a/pkgs/by-name/pa/pacman/package.nix
+++ b/pkgs/by-name/pa/pacman/package.nix
@@ -39,7 +39,7 @@
   sysHookDir ? "/usr/share/libalpm/hooks/",
 }:
 
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "pacman";
   version = "7.0.0";
 
@@ -47,7 +47,7 @@ stdenv.mkDerivation (final: {
     domain = "gitlab.archlinux.org";
     owner = "pacman";
     repo = "pacman";
-    rev = "v${final.version}";
+    rev = "v${finalAttrs.version}";
     hash = "sha256-ejOBxN2HjV4dZwFA7zvPz3JUJa0xiJ/jZ+evEQYG1Mc=";
   };
 
@@ -132,7 +132,7 @@ stdenv.mkDerivation (final: {
   meta = {
     description = "Simple library-based package manager";
     homepage = "https://archlinux.org/pacman/";
-    changelog = "https://gitlab.archlinux.org/pacman/pacman/-/raw/v${final.version}/NEWS";
+    changelog = "https://gitlab.archlinux.org/pacman/pacman/-/raw/v${finalAttrs.version}/NEWS";
     license = lib.licenses.gpl2Plus;
     platforms = lib.platforms.linux;
     mainProgram = "pacman";
diff --git a/pkgs/by-name/pa/patcher9x/package.nix b/pkgs/by-name/pa/patcher9x/package.nix
index 78f8abe489ad..6785d18ad69e 100644
--- a/pkgs/by-name/pa/patcher9x/package.nix
+++ b/pkgs/by-name/pa/patcher9x/package.nix
@@ -5,7 +5,7 @@
   fetchFromGitHub,
 }:
 
-stdenv.mkDerivation (finalAttr: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "patcher9x";
   version = "0.8.50";
 
@@ -13,7 +13,7 @@ stdenv.mkDerivation (finalAttr: {
     (fetchFromGitHub {
       owner = "JHRobotics";
       repo = "patcher9x";
-      rev = "v${finalAttr.version}";
+      rev = "v${finalAttrs.version}";
       hash = "sha256-TZw2+R7Dzojzxzal1Wp8jhe5gwU4CfZDROITi5Z+auo=";
       name = "src";
     })
diff --git a/pkgs/by-name/pi/pipeworld/package.nix b/pkgs/by-name/pi/pipeworld/package.nix
index 016d371dcbc9..9f8835de61b9 100644
--- a/pkgs/by-name/pi/pipeworld/package.nix
+++ b/pkgs/by-name/pi/pipeworld/package.nix
@@ -4,7 +4,7 @@
   fetchFromGitHub,
 }:
 
-stdenvNoCC.mkDerivation (finalPackages: {
+stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "pipeworld";
   version = "0-unstable-2023-02-05";
 
diff --git a/pkgs/by-name/po/poselib/package.nix b/pkgs/by-name/po/poselib/package.nix
index da1cb4a5709d..62bb49b067e2 100644
--- a/pkgs/by-name/po/poselib/package.nix
+++ b/pkgs/by-name/po/poselib/package.nix
@@ -8,14 +8,14 @@
   pkg-config,
 }:
 
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "poselib";
   version = "2.0.5";
 
   src = fetchFromGitHub {
     owner = "PoseLib";
     repo = "PoseLib";
-    rev = "v${final.version}";
+    rev = "v${finalAttrs.version}";
     hash = "sha256-fARRKT2UoPuuk9FOOsBdrACwGiGXWg/mLV4R0QIjeak=";
   };
 
@@ -31,7 +31,7 @@ stdenv.mkDerivation (final: {
   meta = {
     description = "A collection of minimal solvers for camera pose estimation";
     homepage = "https://github.com/PoseLib/PoseLib";
-    changelog = "https://github.com/PoseLib/PoseLib/releases/tag/v${final.version}";
+    changelog = "https://github.com/PoseLib/PoseLib/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.bsd3;
     platforms = lib.platforms.unix;
     maintainers = with lib.maintainers; [ usertam ];
diff --git a/pkgs/by-name/pt/ptcpdump/package.nix b/pkgs/by-name/pt/ptcpdump/package.nix
index d392993454f4..3e2d5d21b2dc 100644
--- a/pkgs/by-name/pt/ptcpdump/package.nix
+++ b/pkgs/by-name/pt/ptcpdump/package.nix
@@ -6,14 +6,14 @@
   libpcap,
 }:
 
-buildGoModule (finalAttr: {
+buildGoModule (finalAttrs: {
   pname = "ptcpdump";
   version = "0.37.0";
 
   src = fetchFromGitHub {
     owner = "mozillazg";
     repo = "ptcpdump";
-    tag = "v${finalAttr.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-ouH7VFWSCOElbmbSWAkmM4dtNVp545mC/FnoNAFtaEw=";
   };
 
@@ -24,7 +24,7 @@ buildGoModule (finalAttr: {
   tags = [ "dynamic" ];
 
   ldflags = [
-    "-X github.com/mozillazg/ptcpdump/internal.Version=v${finalAttr.version}"
+    "-X github.com/mozillazg/ptcpdump/internal.Version=v${finalAttrs.version}"
   ];
   nativeInstallCheckInputs = [ versionCheckHook ];
   doInstallCheck = true;
diff --git a/pkgs/by-name/re/retdec/package.nix b/pkgs/by-name/re/retdec/package.nix
index 4b0609cf87f9..a84e60854aaf 100644
--- a/pkgs/by-name/re/retdec/package.nix
+++ b/pkgs/by-name/re/retdec/package.nix
@@ -115,7 +115,7 @@ let
     subprocess.check_call(['chmod', '-R', 'u+w', support_dir])
   '';
 in
-stdenv.mkDerivation (self: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "retdec";
 
   # If you update this you will also need to adjust the versions of the updated dependencies.
@@ -129,7 +129,7 @@ stdenv.mkDerivation (self: {
   src = fetchFromGitHub {
     owner = "avast";
     repo = "retdec";
-    tag = "v${self.version}";
+    tag = "v${finalAttrs.version}";
     sha256 = "sha256-H4e+aSgdBBbG6X6DzHGiDEIASPwBVNVsfHyeBTQLAKI=";
   };
 
@@ -161,10 +161,10 @@ stdenv.mkDerivation (self: {
     libxml2
     zlib
   ]
-  ++ lib.optional self.doInstallCheck gtest;
+  ++ lib.optional finalAttrs.doInstallCheck gtest;
 
   cmakeFlags = [
-    (lib.cmakeBool "RETDEC_TESTS" self.doInstallCheck) # build tests
+    (lib.cmakeBool "RETDEC_TESTS" finalAttrs.doInstallCheck) # build tests
     (lib.cmakeBool "RETDEC_DEV_TOOLS" buildDevTools) # build tools e.g. capstone2llvmir, retdectool
     (lib.cmakeBool "RETDEC_COMPILE_YARA" compileYaraPatterns) # build and install compiled patterns
   ]
diff --git a/pkgs/by-name/ro/rofi-emoji/package.nix b/pkgs/by-name/ro/rofi-emoji/package.nix
index 03ef3156716e..7a4b63576ef2 100644
--- a/pkgs/by-name/ro/rofi-emoji/package.nix
+++ b/pkgs/by-name/ro/rofi-emoji/package.nix
@@ -23,14 +23,14 @@
   nix-update-script,
 }:
 
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "rofi-emoji";
   version = "4.1.0";
 
   src = fetchFromGitHub {
     owner = "Mange";
     repo = "rofi-emoji";
-    rev = "v${final.version}";
+    rev = "v${finalAttrs.version}";
     hash = "sha256-Amaz+83mSPue+pjZq/pJiCxu5QczYvmJk6f96eraaK8=";
   };
 
diff --git a/pkgs/by-name/rs/rsstail/package.nix b/pkgs/by-name/rs/rsstail/package.nix
index 0f1a76fd5401..50c6308796d3 100644
--- a/pkgs/by-name/rs/rsstail/package.nix
+++ b/pkgs/by-name/rs/rsstail/package.nix
@@ -5,14 +5,14 @@
   libmrss,
 }:
 
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "rsstail";
   version = "2.2";
 
   src = fetchFromGitHub {
     owner = "folkertvanheusden";
     repo = "rsstail";
-    rev = "v${final.version}";
+    rev = "v${finalAttrs.version}";
     hash = "sha256-wbdf9zhwMN7QhJ5WoJo1Csu0EcKUTON8Q2Ic5scbn7I=";
   };
 
diff --git a/pkgs/by-name/sc/scom/package.nix b/pkgs/by-name/sc/scom/package.nix
index b17e053d819b..9e042b6056c5 100644
--- a/pkgs/by-name/sc/scom/package.nix
+++ b/pkgs/by-name/sc/scom/package.nix
@@ -3,14 +3,14 @@
   stdenv,
   fetchFromGitHub,
 }:
-stdenv.mkDerivation (finaAttrs: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "scom";
   version = "1.2.3";
 
   src = fetchFromGitHub {
     owner = "crash-systems";
     repo = "scom";
-    tag = finaAttrs.version;
+    tag = finalAttrs.version;
     hash = "sha256-eFnCXMrks5V6o+0+vMjR8zaCdkc+hC3trSS+pOh4Y6U=";
   };
 
diff --git a/pkgs/by-name/so/sops/package.nix b/pkgs/by-name/so/sops/package.nix
index bdf11b100e4d..185ea8954669 100644
--- a/pkgs/by-name/so/sops/package.nix
+++ b/pkgs/by-name/so/sops/package.nix
@@ -10,14 +10,14 @@
   age,
 }:
 
-buildGoModule (final: {
+buildGoModule (finalAttrs: {
   pname = "sops";
   version = "3.11.0";
 
   src = fetchFromGitHub {
     owner = "getsops";
-    repo = final.pname;
-    tag = "v${final.version}";
+    repo = finalAttrs.pname;
+    tag = "v${finalAttrs.version}";
     hash = "sha256-AAnrZvNkBgliHdk1lAoFrJdISNWteFdBUorRycKsptU=";
   };
 
@@ -28,7 +28,7 @@ buildGoModule (final: {
   ldflags = [
     "-s"
     "-w"
-    "-X github.com/getsops/sops/v3/version.Version=${final.version}"
+    "-X github.com/getsops/sops/v3/version.Version=${finalAttrs.version}"
   ];
 
   nativeBuildInputs = [
@@ -49,19 +49,19 @@ buildGoModule (final: {
   # wrap sops with age plugins
   passthru.withAgePlugins =
     filter:
-    runCommand "sops-${final.version}-with-age-plugins"
+    runCommand "sops-${finalAttrs.version}-with-age-plugins"
       {
         nativeBuildInputs = [ makeWrapper ];
       }
       ''
-        makeWrapper ${lib.getBin final.finalPackage}/bin/sops $out/bin/sops \
+        makeWrapper ${lib.getBin finalAttrs.finalPackage}/bin/sops $out/bin/sops \
           --prefix PATH : "${lib.makeBinPath (filter age.passthru.plugins)}"
       '';
 
   meta = {
     homepage = "https://getsops.io/";
     description = "Simple and flexible tool for managing secrets";
-    changelog = "https://github.com/getsops/sops/blob/v${final.version}/CHANGELOG.rst";
+    changelog = "https://github.com/getsops/sops/blob/v${finalAttrs.version}/CHANGELOG.rst";
     mainProgram = "sops";
     maintainers = with lib.maintainers; [
       Scrumplex
diff --git a/pkgs/by-name/sr/srm-cuarzo/package.nix b/pkgs/by-name/sr/srm-cuarzo/package.nix
index 10aa962e5b2a..b0371a884da9 100644
--- a/pkgs/by-name/sr/srm-cuarzo/package.nix
+++ b/pkgs/by-name/sr/srm-cuarzo/package.nix
@@ -13,14 +13,14 @@
   seatd,
   udev,
 }:
-stdenv.mkDerivation (self: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "srm-cuarzo";
   version = "0.13.0-1";
-  rev = "v${self.version}";
+  rev = "v${finalAttrs.version}";
   hash = "sha256-5BwLqAZdfO5vyEMPZImaxymvLoNuu6bOiOkvR8JERxg=";
 
   src = fetchFromGitHub {
-    inherit (self) rev hash;
+    inherit (finalAttrs) rev hash;
     owner = "CuarzoSoftware";
     repo = "SRM";
   };
diff --git a/pkgs/by-name/st/strobealign/package.nix b/pkgs/by-name/st/strobealign/package.nix
index 239bb1c04974..54f6e6ab866b 100644
--- a/pkgs/by-name/st/strobealign/package.nix
+++ b/pkgs/by-name/st/strobealign/package.nix
@@ -7,14 +7,14 @@
   isa-l,
   zlib,
 }:
-stdenv.mkDerivation (self: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "strobealign";
   version = "0.17.0";
 
   src = fetchFromGitHub {
     owner = "ksahlin";
     repo = "strobealign";
-    tag = "v${self.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-ah21ptyfZbgdJrtCCftYhGh1hfcJ9JpXNsXUp8pZDJw=";
   };
 
diff --git a/pkgs/by-name/ta/tattoy/package.nix b/pkgs/by-name/ta/tattoy/package.nix
index c22678cb8163..56a5558d9ccc 100644
--- a/pkgs/by-name/ta/tattoy/package.nix
+++ b/pkgs/by-name/ta/tattoy/package.nix
@@ -11,14 +11,14 @@
   watch,
 }:
 
-rustPlatform.buildRustPackage (attrs: {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "tattoy";
   version = "0.1.8";
 
   src = fetchFromGitHub {
     owner = "tattoy-org";
     repo = "tattoy";
-    tag = "tattoy-v${attrs.version}";
+    tag = "tattoy-v${finalAttrs.version}";
     hash = "sha256-44rXygZVbwwC/jOB69iHydsjYr/WeVU4Eky3BPqJzyc=";
   };
 
diff --git a/pkgs/by-name/te/termpaint/package.nix b/pkgs/by-name/te/termpaint/package.nix
index cb2dc6335806..b9cc6217119d 100644
--- a/pkgs/by-name/te/termpaint/package.nix
+++ b/pkgs/by-name/te/termpaint/package.nix
@@ -7,14 +7,14 @@
   pkg-config,
   python3,
 }:
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "termpaint";
   version = "0.3.1";
 
   src = fetchFromGitHub {
     owner = "termpaint";
     repo = "termpaint";
-    rev = final.version;
+    rev = finalAttrs.version;
     hash = "sha256-7mfGTC5vJ4806bDbrPMSVthtW05a+M3vgUlHGbtaI4Q=";
   };
 
diff --git a/pkgs/by-name/ti/tidal-hifi/package.nix b/pkgs/by-name/ti/tidal-hifi/package.nix
index 2b20fdbc0bd3..f2a73b57b1b9 100644
--- a/pkgs/by-name/ti/tidal-hifi/package.nix
+++ b/pkgs/by-name/ti/tidal-hifi/package.nix
@@ -87,7 +87,7 @@ let
     vulkan-loader
   ];
 in
-buildNpmPackage (self: {
+buildNpmPackage (finalAttrs: {
   pname = "tidal-hifi";
   inherit version;
 
@@ -125,12 +125,12 @@ buildNpmPackage (self: {
 
   desktopItems = [
     (makeDesktopItem {
-      name = self.pname;
+      name = finalAttrs.pname;
       desktopName = "TIDAL Hi-Fi";
       genericName = "Music Player";
-      comment = self.meta.description;
+      comment = finalAttrs.meta.description;
       icon = "tidal-hifi";
-      exec = self.meta.mainProgram;
+      exec = finalAttrs.meta.mainProgram;
       terminal = false;
       mimeTypes = [ "x-scheme-handler/tidal" ];
       categories = [
diff --git a/pkgs/by-name/tm/tm/package.nix b/pkgs/by-name/tm/tm/package.nix
index c181cddd6f81..740e6e175892 100644
--- a/pkgs/by-name/tm/tm/package.nix
+++ b/pkgs/by-name/tm/tm/package.nix
@@ -4,12 +4,12 @@
   fetchurl,
 }:
 
-stdenv.mkDerivation (finalAtts: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "tm";
   version = "0.4.1";
 
   src = fetchurl {
-    url = "https://vicerveza.homeunix.net/~viric/soft/tm/tm-${finalAtts.version}.tar.gz";
+    url = "https://vicerveza.homeunix.net/~viric/soft/tm/tm-${finalAttrs.version}.tar.gz";
     hash = "sha256-OzibwDtpZK1f+lejRLiR/bz3ybJgSt2nI6hj+DZXxKA=";
   };
 
diff --git a/pkgs/by-name/tz/tzpfms/package.nix b/pkgs/by-name/tz/tzpfms/package.nix
index 43461f674b3a..2367c855b671 100644
--- a/pkgs/by-name/tz/tzpfms/package.nix
+++ b/pkgs/by-name/tz/tzpfms/package.nix
@@ -15,19 +15,19 @@
   zlib,
 }:
 
-stdenv.mkDerivation (finalPackage: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "tzpfms";
   version = "0.4.1";
 
   src = fetchFromSourcehut {
     owner = "~nabijaczleweli";
     repo = "tzpfms";
-    rev = "v${finalPackage.version}";
+    rev = "v${finalAttrs.version}";
     hash = "sha256-DHmJpfURyFPeOWxIkfwn4f0n2WeDYErevC1gY2oM3Vg=";
   };
 
   env = {
-    TZPFMS_VERSION = ''"${finalPackage.version}"'';
+    TZPFMS_VERSION = ''"${finalAttrs.version}"'';
     TZPFMS_DATE = "January 1, 1980";
   };
 
diff --git a/pkgs/by-name/wi/wifi-qr/package.nix b/pkgs/by-name/wi/wifi-qr/package.nix
index 8871d0113e74..e85156efc646 100644
--- a/pkgs/by-name/wi/wifi-qr/package.nix
+++ b/pkgs/by-name/wi/wifi-qr/package.nix
@@ -17,7 +17,7 @@
   gnugrep,
   file,
 }:
-stdenvNoCC.mkDerivation (finalAttr: {
+stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "wifi-qr";
   version = "0.4";
 
@@ -29,7 +29,7 @@ stdenvNoCC.mkDerivation (finalAttr: {
   src = fetchFromGitHub {
     owner = "kokoye2007";
     repo = "wifi-qr";
-    tag = "v${finalAttr.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-tE+9bFDgiFS1Jj+AAwTMKjMh5wS5/gkRSQaCBR/riYQ=";
   };
 
diff --git a/pkgs/by-name/wi/winboat/package.nix b/pkgs/by-name/wi/winboat/package.nix
index 9a5725e2d263..838aa63d7790 100644
--- a/pkgs/by-name/wi/winboat/package.nix
+++ b/pkgs/by-name/wi/winboat/package.nix
@@ -17,14 +17,14 @@
   nix-update-script,
 }:
 
-buildNpmPackage (final: {
+buildNpmPackage (finalAttrs: {
   pname = "winboat";
   version = "0.9.0";
 
   src = fetchFromGitHub {
     owner = "TibixDev";
     repo = "winboat";
-    tag = "v${final.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-DgH6CAZf+XIgBav2xd2FF2MGRgGIyOs/98vqWHA3XYw=";
   };
 
@@ -48,7 +48,7 @@ buildNpmPackage (final: {
 
   guest-server = pkgsCross.mingwW64.callPackage ./guest-server.nix { };
   passthru = {
-    guest-server = final.guest-server;
+    guest-server = finalAttrs.guest-server;
     updateScript = nix-update-script {
       extraArgs = [
         "--subpackage"
@@ -76,7 +76,7 @@ buildNpmPackage (final: {
     install -Dm444 icons/winboat_logo.svg $out/share/icons/hicolor/256x256/apps/winboat.svg
 
     # copy the the winboat-guest-server executable and generate the zip
-    cp ${lib.getExe final.guest-server} $out/share/winboat/resources/guest_server/winboat_guest_server.exe
+    cp ${lib.getExe finalAttrs.guest-server} $out/share/winboat/resources/guest_server/winboat_guest_server.exe
     (cd $out/share/winboat/resources/guest_server/ && zip -r winboat_guest_server.zip .)
 
     # symlink data/ and guest_server/ into parent folder
@@ -114,7 +114,7 @@ buildNpmPackage (final: {
     mainProgram = "winboat";
     description = "Run Windows apps on Linux with seamless integration";
     homepage = "https://github.com/TibixDev/winboat";
-    changelog = "https://github.com/TibixDev/winboat/releases/tag/v${final.version}";
+    changelog = "https://github.com/TibixDev/winboat/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [
       rexies
diff --git a/pkgs/by-name/wl/wlopm/package.nix b/pkgs/by-name/wl/wlopm/package.nix
index 6025fb941dc7..c9f4a955d98c 100644
--- a/pkgs/by-name/wl/wlopm/package.nix
+++ b/pkgs/by-name/wl/wlopm/package.nix
@@ -6,14 +6,14 @@
   wayland-scanner,
 }:
 
-stdenv.mkDerivation (finalAttr: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "wlopm";
   version = "1.0.0";
 
   src = fetchFromSourcehut {
     owner = "~leon_plickat";
     repo = "wlopm";
-    rev = "v${finalAttr.version}";
+    rev = "v${finalAttrs.version}";
     hash = "sha256-GrcV51mUZUaiiYhko8ysaTieJoZDcunLn1yG5k+TpQQ=";
   };
 
diff --git a/pkgs/by-name/xd/xdg-utils/package.nix b/pkgs/by-name/xd/xdg-utils/package.nix
index 442101475ab5..9e29b0c5a41e 100644
--- a/pkgs/by-name/xd/xdg-utils/package.nix
+++ b/pkgs/by-name/xd/xdg-utils/package.nix
@@ -297,7 +297,7 @@ let
   ];
 in
 
-stdenv.mkDerivation (self: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "xdg-utils";
   version = "1.2.1";
 
@@ -305,7 +305,7 @@ stdenv.mkDerivation (self: {
     domain = "gitlab.freedesktop.org";
     owner = "xdg";
     repo = "xdg-utils";
-    rev = "v${self.version}";
+    rev = "v${finalAttrs.version}";
     hash = "sha256-58ElbrVlk+13DUODSEHBPcDDt9H+Kuee8Rz9CIcoy0I=";
   };
 
@@ -336,7 +336,7 @@ stdenv.mkDerivation (self: {
   passthru.tests.xdg-mime =
     runCommand "xdg-mime-test"
       {
-        nativeBuildInputs = [ self.finalPackage ];
+        nativeBuildInputs = [ finalAttrs.finalPackage ];
         preferLocalBuild = true;
         xenias = lib.mapAttrsToList (hash: urls: fetchurl { inherit hash urls; }) {
           "sha256-SL95tM1AjOi7vDnCyT10s0tvQvc+ZSZBbkNOYXfbOy0=" = [
diff --git a/pkgs/by-name/yk/ykush/package.nix b/pkgs/by-name/yk/ykush/package.nix
index f8507e20849f..7bc503d158c4 100644
--- a/pkgs/by-name/yk/ykush/package.nix
+++ b/pkgs/by-name/yk/ykush/package.nix
@@ -6,7 +6,7 @@
   runCommand,
   versionCheckHook,
 }:
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "ykushcmd";
   version = "1.4.0";
 
@@ -15,7 +15,7 @@ stdenv.mkDerivation (final: {
   src = fetchFromGitHub {
     owner = "yepkit";
     repo = "ykush";
-    tag = "v${final.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-+ssr1QHKjEdK8pFkmyHYwG9tY7YHaYcIIJUqaEXixOg=";
   };
 
@@ -33,8 +33,8 @@ stdenv.mkDerivation (final: {
 
   passthru.tests = {
     # We can't run any actual tests without hardware, but we can at least check the binary.
-    run-only = runCommand "${final.pname}-test" ''
-      ${final}/bin/ykushcmd -h | grep YKUSHCMD
+    run-only = runCommand "${finalAttrs.pname}-test" ''
+      ${finalAttrs}/bin/ykushcmd -h | grep YKUSHCMD
     '';
   };
 
diff --git a/pkgs/by-name/yu/yubihsm-setup/package.nix b/pkgs/by-name/yu/yubihsm-setup/package.nix
index 50fedb2c0213..d8f02b479988 100644
--- a/pkgs/by-name/yu/yubihsm-setup/package.nix
+++ b/pkgs/by-name/yu/yubihsm-setup/package.nix
@@ -7,14 +7,14 @@
   yubihsm-shell,
 }:
 
-rustPlatform.buildRustPackage (finalPackage: {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "yubihsm-setup";
   version = "2.3.3";
 
   src = fetchFromGitHub {
     owner = "Yubico";
     repo = "yubihsm-setup";
-    tag = finalPackage.version;
+    tag = finalAttrs.version;
     hash = "sha256-ScpcEDNWLhywtcPPG84vZyIAQ5lF07udmGsmsyc3+iU=";
   };
 
diff --git a/pkgs/development/compilers/sbcl/default.nix b/pkgs/development/compilers/sbcl/default.nix
index 8e487dc37416..6bcf350ffc22 100644
--- a/pkgs/development/compilers/sbcl/default.nix
+++ b/pkgs/development/compilers/sbcl/default.nix
@@ -74,7 +74,7 @@ let
 
 in
 
-stdenv.mkDerivation (self: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "sbcl";
   inherit version;
 
@@ -88,7 +88,7 @@ stdenv.mkDerivation (self: {
   nativeBuildInputs = [
     texinfo
   ]
-  ++ lib.optionals self.doCheck (
+  ++ lib.optionals finalAttrs.doCheck (
     [
       which
       writableTmpDirAsHomeHook
@@ -96,14 +96,14 @@ stdenv.mkDerivation (self: {
     ++ lib.optionals (builtins.elem stdenv.system strace.meta.platforms) [
       strace
     ]
-    ++ lib.optionals (lib.versionOlder "2.4.10" self.version) [
+    ++ lib.optionals (lib.versionOlder "2.4.10" finalAttrs.version) [
       ps
     ]
   );
-  buildInputs = lib.optionals self.coreCompression (
+  buildInputs = lib.optionals finalAttrs.coreCompression (
     # Declare at the point of actual use in case the caller wants to override
     # buildInputs to sidestep this.
-    assert lib.assertMsg (!self.purgeNixReferences) ''
+    assert lib.assertMsg (!finalAttrs.purgeNixReferences) ''
       Cannot enable coreCompression when purging Nix references, because compression requires linking in zstd
     '';
     [ zstd ]
@@ -119,7 +119,7 @@ stdenv.mkDerivation (self: {
   # to get rid of ${glibc} dependency.
   purgeNixReferences = false;
   coreCompression = true;
-  markRegionGC = self.threadSupport;
+  markRegionGC = finalAttrs.threadSupport;
   disableImmobileSpace = false;
   linkableRuntime = stdenv.hostPlatform.isx86;
 
@@ -128,7 +128,7 @@ stdenv.mkDerivation (self: {
   # altogether. One by one hopefully we can fix these (on ofBorg,
   # upstream--somehow some way) in due time.
   disabledTestFiles =
-    lib.optionals (lib.versionOlder "2.5.2" self.version) [ "debug.impure.lisp" ]
+    lib.optionals (lib.versionOlder "2.5.2" finalAttrs.version) [ "debug.impure.lisp" ]
     ++
       lib.optionals
         (builtins.elem stdenv.hostPlatform.system [
@@ -182,7 +182,7 @@ stdenv.mkDerivation (self: {
     # "https://sourceforge.net/p/sbcl/mailman/sbcl-devel/thread/2cf20df7-01d0-44f2-8551-0df01fe55f1a%400brg.net/"),
     # but for Nix envvars are sufficiently useful that it’s worth maintaining
     # this functionality downstream.
-    if lib.versionOlder "2.5.2" self.version then
+    if lib.versionOlder "2.5.2" finalAttrs.version then
       [
         ./dynamic-space-size-envvar-2.5.3-feature.patch
         ./dynamic-space-size-envvar-2.5.3-tests.patch
@@ -194,10 +194,10 @@ stdenv.mkDerivation (self: {
       ];
 
   sbclPatchPhase =
-    lib.optionalString (self.disabledTestFiles != [ ]) ''
-      (cd tests ; rm -f ${lib.concatStringsSep " " self.disabledTestFiles})
+    lib.optionalString (finalAttrs.disabledTestFiles != [ ]) ''
+      (cd tests ; rm -f ${lib.concatStringsSep " " finalAttrs.disabledTestFiles})
     ''
-    + lib.optionalString self.purgeNixReferences ''
+    + lib.optionalString finalAttrs.purgeNixReferences ''
       # This is the default location to look for the core; by default in $out/lib/sbcl
       sed 's@^\(#define SBCL_HOME\) .*$@\1 "/no-such-path"@' \
           -i src/runtime/runtime.c
@@ -209,7 +209,9 @@ stdenv.mkDerivation (self: {
         # binary. There are some tricky files in nested directories which should
         # definitely NOT be patched this way, hence just a single * (and no
         # globstar).
-        substituteInPlace ${if self.purgeNixReferences then "tests" else "{tests,src/code}"}/*.{lisp,sh} \
+        substituteInPlace ${
+          if finalAttrs.purgeNixReferences then "tests" else "{tests,src/code}"
+        }/*.{lisp,sh} \
           --replace-quiet /usr/bin/env "${posixUtils}/bin/env" \
           --replace-quiet /bin/uname "${posixUtils}/bin/uname" \
           --replace-quiet /bin/sh "${stdenv.shell}"
@@ -218,7 +220,7 @@ stdenv.mkDerivation (self: {
       # want to override { src = ... } it might not exist. It’s required for
       # building, so create a mock version as a backup.
       if [[ ! -a version.lisp-expr ]]; then
-        echo '"${self.version}.nixos"' > version.lisp-expr
+        echo '"${finalAttrs.version}.nixos"' > version.lisp-expr
       fi
     '';
 
@@ -226,17 +228,17 @@ stdenv.mkDerivation (self: {
 
   enableFeatures =
     assert lib.assertMsg (
-      self.markRegionGC -> self.threadSupport
+      finalAttrs.markRegionGC -> finalAttrs.threadSupport
     ) "SBCL mark region GC requires thread support";
-    lib.optional self.threadSupport "sb-thread"
-    ++ lib.optional self.linkableRuntime "sb-linkable-runtime"
-    ++ lib.optional self.coreCompression "sb-core-compression"
+    lib.optional finalAttrs.threadSupport "sb-thread"
+    ++ lib.optional finalAttrs.linkableRuntime "sb-linkable-runtime"
+    ++ lib.optional finalAttrs.coreCompression "sb-core-compression"
     ++ lib.optional stdenv.hostPlatform.isAarch32 "arm"
-    ++ lib.optional self.markRegionGC "mark-region-gc";
+    ++ lib.optional finalAttrs.markRegionGC "mark-region-gc";
 
   disableFeatures =
-    lib.optional (!self.threadSupport) "sb-thread"
-    ++ lib.optionals self.disableImmobileSpace [
+    lib.optional (!finalAttrs.threadSupport) "sb-thread"
+    ++ lib.optionals finalAttrs.disableImmobileSpace [
       "immobile-space"
       "immobile-code"
       "compact-instance-header"
@@ -246,8 +248,8 @@ stdenv.mkDerivation (self: {
     "--prefix=$out"
     "--xc-host=${lib.escapeShellArg bootstrapLisp'}"
   ]
-  ++ map (x: "--with-${x}") self.enableFeatures
-  ++ map (x: "--without-${x}") self.disableFeatures
+  ++ map (x: "--with-${x}") finalAttrs.enableFeatures
+  ++ map (x: "--without-${x}") finalAttrs.disableFeatures
   ++ lib.optionals (stdenv.hostPlatform.system == "aarch64-darwin") [
     "--arch=arm64"
   ];
@@ -264,7 +266,7 @@ stdenv.mkDerivation (self: {
     runHook preBuild
 
     export INSTALL_ROOT=$out
-    sh make.sh ${lib.concatStringsSep " " self.buildArgs}
+    sh make.sh ${lib.concatStringsSep " " finalAttrs.buildArgs}
     (cd doc/manual ; make info)
 
     runHook postBuild
@@ -291,7 +293,7 @@ stdenv.mkDerivation (self: {
     sh install.sh
 
   ''
-  + lib.optionalString (!self.purgeNixReferences) ''
+  + lib.optionalString (!finalAttrs.purgeNixReferences) ''
     cp -r src $out/lib/sbcl
     cp -r contrib $out/lib/sbcl
     cat >$out/lib/sbcl/sbclrc <<EOF
@@ -304,7 +306,7 @@ stdenv.mkDerivation (self: {
     runHook postInstall
   '';
 
-  setupHook = lib.optional self.purgeNixReferences (
+  setupHook = lib.optional finalAttrs.purgeNixReferences (
     writeText "setupHook.sh" ''
       addEnvHooks "$targetOffset" _setSbclHome
       _setSbclHome() {
diff --git a/pkgs/development/emilua-plugins/beast/default.nix b/pkgs/development/emilua-plugins/beast/default.nix
index 74a4222b28e2..7b93a3e68def 100644
--- a/pkgs/development/emilua-plugins/beast/default.nix
+++ b/pkgs/development/emilua-plugins/beast/default.nix
@@ -11,14 +11,14 @@
   gitUpdater,
 }:
 
-stdenv.mkDerivation (self: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "emilua_beast";
   version = "1.1.2";
 
   src = fetchFromGitLab {
     owner = "emilua";
     repo = "beast";
-    rev = "v${self.version}";
+    rev = "v${finalAttrs.version}";
     hash = "sha256-MASaZvhIVKmeBUcn/NjlBZ+xh+2RgwHBH2o08lklGa0=";
   };
 
diff --git a/pkgs/development/libraries/quarto/default.nix b/pkgs/development/libraries/quarto/default.nix
index a74a48f3a7aa..0c02fad98be4 100644
--- a/pkgs/development/libraries/quarto/default.nix
+++ b/pkgs/development/libraries/quarto/default.nix
@@ -37,12 +37,12 @@ let
     ++ (extraPythonPackages ps)
   );
 in
-stdenv.mkDerivation (final: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "quarto";
   version = "1.8.26";
 
   src = fetchurl {
-    url = "https://github.com/quarto-dev/quarto-cli/releases/download/v${final.version}/quarto-${final.version}-linux-amd64.tar.gz";
+    url = "https://github.com/quarto-dev/quarto-cli/releases/download/v${finalAttrs.version}/quarto-${finalAttrs.version}-linux-amd64.tar.gz";
     hash = "sha256-rYyqbTrsw/K2pKj7gpZnfvLvlBCkij7rp7H5ockQAPA=";
   };
 
@@ -103,7 +103,7 @@ stdenv.mkDerivation (final: {
       Quarto documents are authored using markdown, an easy to write plain text format.
     '';
     homepage = "https://quarto.org/";
-    changelog = "https://github.com/quarto-dev/quarto-cli/releases/tag/v${final.version}";
+    changelog = "https://github.com/quarto-dev/quarto-cli/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.gpl2Plus;
     maintainers = with lib.maintainers; [
       minijackson
diff --git a/pkgs/development/python-modules/outspin/default.nix b/pkgs/development/python-modules/outspin/default.nix
index bddf1efb92ca..5908863e5456 100644
--- a/pkgs/development/python-modules/outspin/default.nix
+++ b/pkgs/development/python-modules/outspin/default.nix
@@ -6,7 +6,7 @@
   pytestCheckHook,
 }:
 
-buildPythonPackage (finaAttrs: {
+buildPythonPackage (finalAttrs: {
   pname = "outspin";
   version = "0.3.2";
   pyproject = true;
@@ -14,7 +14,7 @@ buildPythonPackage (finaAttrs: {
   src = fetchFromGitHub {
     owner = "trag1c";
     repo = "outspin";
-    tag = "v${finaAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-j+J3n/p+DcfnhGfC4/NDBDl5bF39L5kIPeGJW0Zm7ls=";
   };
 
@@ -24,7 +24,7 @@ buildPythonPackage (finaAttrs: {
   nativeCheckInputs = [ pytestCheckHook ];
 
   meta = {
-    changelog = "https://github.com/trag1c/outspin/blob/${finaAttrs.src.tag}/CHANGELOG.md";
+    changelog = "https://github.com/trag1c/outspin/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     description = "Conveniently read single char inputs in the console";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ sigmanificient ];
diff --git a/pkgs/development/tools/godot/3/default.nix b/pkgs/development/tools/godot/3/default.nix
index 51679e85e8da..4e5fdcc04a2d 100644
--- a/pkgs/development/tools/godot/3/default.nix
+++ b/pkgs/development/tools/godot/3/default.nix
@@ -26,7 +26,7 @@
   zlib,
 }:
 
-stdenv.mkDerivation (self: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "godot3";
   version = "3.6.2";
   godotBuildDescription = "X11 tools";
@@ -34,7 +34,7 @@ stdenv.mkDerivation (self: {
   src = fetchFromGitHub {
     owner = "godotengine";
     repo = "godot";
-    rev = "${self.version}-stable";
+    rev = "${finalAttrs.version}-stable";
     hash = "sha256-loNjE+NmHniZ827Eb9MHSNo27F2LrURhWURjUq4d8xw=";
   };
 
@@ -90,34 +90,34 @@ stdenv.mkDerivation (self: {
   shouldBuildTools = true;
   godotBuildTarget = "release_debug";
 
-  lto = if self.godotBuildTarget == "release" then "full" else "none";
+  lto = if finalAttrs.godotBuildTarget == "release" then "full" else "none";
 
   sconsFlags = [
     "arch=${stdenv.hostPlatform.linuxArch}"
-    "platform=${self.godotBuildPlatform}"
-    "tools=${lib.boolToString self.shouldBuildTools}"
-    "target=${self.godotBuildTarget}"
+    "platform=${finalAttrs.godotBuildPlatform}"
+    "tools=${lib.boolToString finalAttrs.shouldBuildTools}"
+    "target=${finalAttrs.godotBuildTarget}"
     "bits=${toString stdenv.hostPlatform.parsed.cpu.bits}"
-    "lto=${self.lto}"
+    "lto=${finalAttrs.lto}"
   ];
 
-  shouldWrapBinary = self.shouldBuildTools;
-  shouldInstallManual = self.shouldBuildTools;
-  shouldPatchBinary = self.shouldBuildTools;
-  shouldInstallHeaders = self.shouldBuildTools;
-  shouldInstallShortcut = self.shouldBuildTools && self.godotBuildPlatform != "server";
+  shouldWrapBinary = finalAttrs.shouldBuildTools;
+  shouldInstallManual = finalAttrs.shouldBuildTools;
+  shouldPatchBinary = finalAttrs.shouldBuildTools;
+  shouldInstallHeaders = finalAttrs.shouldBuildTools;
+  shouldInstallShortcut = finalAttrs.shouldBuildTools && finalAttrs.godotBuildPlatform != "server";
 
   outputs = [
     "out"
   ]
-  ++ lib.optional self.shouldInstallManual "man"
-  ++ lib.optional self.shouldBuildTools "dev";
+  ++ lib.optional finalAttrs.shouldInstallManual "man"
+  ++ lib.optional finalAttrs.shouldBuildTools "dev";
 
   builtGodotBinNamePattern =
-    if self.godotBuildPlatform == "server" then "godot_server.*" else "godot.*";
+    if finalAttrs.godotBuildPlatform == "server" then "godot_server.*" else "godot.*";
 
   godotBinInstallPath = "bin";
-  installedGodotBinName = self.pname;
+  installedGodotBinName = finalAttrs.pname;
   installedGodotShortcutFileName = "org.godotengine.Godot3.desktop";
   installedGodotShortcutDisplayName = "Godot Engine 3";
 
@@ -162,7 +162,7 @@ stdenv.mkDerivation (self: {
     runHook postInstall
   '';
 
-  runtimeDependencies = lib.optionals self.shouldPatchBinary (
+  runtimeDependencies = lib.optionals finalAttrs.shouldPatchBinary (
     map lib.getLib [
       alsa-lib
       libpulseaudio
@@ -172,7 +172,8 @@ stdenv.mkDerivation (self: {
 
   meta = {
     homepage = "https://godotengine.org";
-    description = "Free and Open Source 2D and 3D game engine (" + self.godotBuildDescription + ")";
+    description =
+      "Free and Open Source 2D and 3D game engine (" + finalAttrs.godotBuildDescription + ")";
     license = lib.licenses.mit;
     platforms = [
       "i686-linux"
diff --git a/pkgs/development/tools/parsing/tree-sitter/default.nix b/pkgs/development/tools/parsing/tree-sitter/default.nix
index 61516c342af2..55b712640b80 100644
--- a/pkgs/development/tools/parsing/tree-sitter/default.nix
+++ b/pkgs/development/tools/parsing/tree-sitter/default.nix
@@ -101,14 +101,14 @@ let
   allGrammars = lib.filter (p: !(p.meta.broken or false)) (lib.attrValues builtGrammars);
 
 in
-rustPlatform.buildRustPackage (final: {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "tree-sitter";
   version = "0.25.10";
 
   src = fetchFromGitHub {
     owner = "tree-sitter";
     repo = "tree-sitter";
-    tag = "v${final.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-aHszbvLCLqCwAS4F4UmM3wbSb81QuG9FM7BDHTu1ZvM=";
     fetchSubmodules = true;
   };
@@ -202,7 +202,7 @@ rustPlatform.buildRustPackage (final: {
     homepage = "https://github.com/tree-sitter/tree-sitter";
     description = "Parser generator tool and an incremental parsing library";
     mainProgram = "tree-sitter";
-    changelog = "https://github.com/tree-sitter/tree-sitter/releases/tag/v${final.version}";
+    changelog = "https://github.com/tree-sitter/tree-sitter/releases/tag/v${finalAttrs.version}";
     longDescription = ''
       Tree-sitter is a parser generator tool and an incremental parsing library.
       It can build a concrete syntax tree for a source file and efficiently update the syntax tree as the source file is edited.
diff --git a/pkgs/development/tools/selenium/chromedriver/source.nix b/pkgs/development/tools/selenium/chromedriver/source.nix
index a1bece1dea87..4b07041f4129 100644
--- a/pkgs/development/tools/selenium/chromedriver/source.nix
+++ b/pkgs/development/tools/selenium/chromedriver/source.nix
@@ -3,7 +3,7 @@
   testers,
   chromedriver,
 }:
-chromium.mkDerivation (_: {
+chromium.mkDerivation (finalAttrs: {
   name = "chromedriver";
   packageName = "chromedriver";
 
diff --git a/pkgs/os-specific/linux/xpad-noone/default.nix b/pkgs/os-specific/linux/xpad-noone/default.nix
index a135da524779..709ba8b0e4e6 100644
--- a/pkgs/os-specific/linux/xpad-noone/default.nix
+++ b/pkgs/os-specific/linux/xpad-noone/default.nix
@@ -7,13 +7,13 @@
   kernelModuleMakeFlags,
 }:
 
-stdenv.mkDerivation (finalAttr: {
+stdenv.mkDerivation (finalAttrs: {
   pname = "xpad-noone";
   version = "0-unstable-2024-01-10";
 
   src = fetchFromGitHub {
     owner = "medusalix";
-    repo = finalAttr.pname;
+    repo = finalAttrs.pname;
     tag = "c3d1610";
     hash = "sha256-jDRyvbU9GsnM1ARTuwnoD7ZXlfBxne13UpSKRo7HHSY=";
   };

From 4357f140072e9a01226e382f00b00ae680c2f9d2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 22:38:56 +0000
Subject: [PATCH 104/106] darktable: 5.4.0 -> 5.4.1

---
 pkgs/by-name/da/darktable/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/da/darktable/package.nix b/pkgs/by-name/da/darktable/package.nix
index a011c5748b29..e554dbef3f06 100644
--- a/pkgs/by-name/da/darktable/package.nix
+++ b/pkgs/by-name/da/darktable/package.nix
@@ -82,12 +82,12 @@ let
   pugixml-shared = pugixml.override { shared = true; };
 in
 stdenv.mkDerivation rec {
-  version = "5.4.0";
+  version = "5.4.1";
   pname = "darktable";
 
   src = fetchurl {
     url = "https://github.com/darktable-org/darktable/releases/download/release-${version}/darktable-${version}.tar.xz";
-    hash = "sha256-K/C66njSeUXPCcM9iATxeeA6g+4Z0ukn/WYOpGrKOxY=";
+    hash = "sha256-r9x8iKM4qM0vrDHIRQ0Hbtv3PpVuQwcmDIPrwZX4ReQ=";
   };
 
   nativeBuildInputs = [

From 75179df597ba22e35b4a5a6e4eb94f0d0bef862f Mon Sep 17 00:00:00 2001
From: Sigmanificient <edhyjox@gmail.com>
Date: Sat, 7 Feb 2026 00:02:39 +0100
Subject: [PATCH 105/106] rocmPackages.*: set pname

---
 pkgs/development/rocm-modules/llvm/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/development/rocm-modules/llvm/default.nix b/pkgs/development/rocm-modules/llvm/default.nix
index 548d928f2179..77be091e4c62 100644
--- a/pkgs/development/rocm-modules/llvm/default.nix
+++ b/pkgs/development/rocm-modules/llvm/default.nix
@@ -174,6 +174,7 @@ let
     in
     runCommand name
       {
+        pname = name;
         # If this is erroring, try why-depends --precise on the symlinkJoin of inputs to look for the problem
         # nix why-depends --precise .#rocmPackages.llvm.rocm-toolchain.linked /store/path/its/not/allowed
         disallowedRequisites = disallowedRefsForToolchain;

From e3f053a65da0356f3c84b218e41830f003834e76 Mon Sep 17 00:00:00 2001
From: Michael Daniels <mdaniels5757@gmail.com>
Date: Fri, 6 Feb 2026 18:59:41 -0500
Subject: [PATCH 106/106] ci/github-script/check-target-branch: fix kernel
 exemption logic

Erroneously failed to exempt because I left out an if condition.
---
 ci/github-script/check-target-branch.js | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ci/github-script/check-target-branch.js b/ci/github-script/check-target-branch.js
index 47e36b9cb3f6..46101adcf200 100644
--- a/ci/github-script/check-target-branch.js
+++ b/ci/github-script/check-target-branch.js
@@ -122,7 +122,11 @@ async function checkTargetBranch({ github, context, core, dry }) {
     ].join('\n'),
   )
 
-  if (maxRebuildCount >= 1000 && !isExemptHomeAssistantUpdate) {
+  if (
+    maxRebuildCount >= 1000 &&
+    !isExemptHomeAssistantUpdate &&
+    !isExemptKernelUpdate
+  ) {
     const desiredBranch =
       base === 'master' ? 'staging' : `staging-${split(base).version}`
     const body = [