Merge bc0da6f230 into haskell-updates

doc/release-notes/rl-2511.section.md

@@ -335,7 +335,7 @@
 
 - `lisp-modules` were brought in sync with the [June 2025 Quicklisp release](http://blog.quicklisp.org/2025/07/june-2025-quicklisp-dist-now-available.html).
 
-- `ffmpeg_8`, `ffmpeg_8-headless`, and `ffmpeg_8-full` have been added. The default version of FFmpeg remains ffmpeg_7 for now, though this may change before release.
+- `ffmpeg_8`, `ffmpeg_8-headless`, and `ffmpeg_8-full` have been added. The default version of FFmpeg is now `ffmpeg_8`. You can install previous versions from package attributes such as `ffmpeg_7`.
 
 - `searx` was updated to use `envsubst` instead of `sed` for parsing secrets from environment variables.
   If your previous configuration included a secret reference like `server.secret_key = "@SEARX_SECRET_KEY@"`, you must migrate to the new envsubst syntax: `server.secret_key = "$SEARX_SECRET_KEY"`.

maintainers/maintainer-list.nix

@@ -3922,13 +3922,6 @@
     matrix = "@brsvh:mozilla.org";
     name = "Burgess Chang";
   };
-  bryanasdev000 = {
-    email = "bryanasdev000@gmail.com";
-    matrix = "@bryanasdev000:matrix.org";
-    github = "bryanasdev000";
-    githubId = 53131727;
-    name = "Bryan Albuquerque";
-  };
   bryango = {
     name = "Bryan Lai";
     email = "bryanlais@gmail.com";
@@ -22535,6 +22528,12 @@
     githubId = 17805516;
     name = "Rohan Rao";
   };
+  rohi-devs = {
+    email = "rohi.devs@gmail.com";
+    github = "rohi-devs";
+    githubId = 129837916;
+    name = "Rohith S";
+  };
   rolfschr = {
     email = "rolf.schr@posteo.de";
     github = "rolfschr";

nixos/modules/hardware/all-firmware.nix

@@ -36,7 +36,18 @@ in
 
   options = {
 
-    hardware.enableAllFirmware = lib.mkEnableOption "all firmware regardless of license";
+    hardware.enableAllFirmware = lib.mkOption {
+      default = false;
+      example = true;
+
+      description = ''
+        Whether to enable all firmware, including [unfree packages that must be explictly allowed](https://nixos.org/manual/nixpkgs/unstable/#sec-allow-unfree).
+
+        Alternatively, use the {option}`hardware.enableRedistributableFirmware` option.
+      '';
+
+      type = lib.types.bool;
+    };
 
     hardware.enableRedistributableFirmware =
       lib.mkEnableOption "firmware with a license allowing redistribution"
@@ -74,16 +85,6 @@ in
         ++ lib.optional pkgs.stdenv.hostPlatform.isAarch raspberrypiWirelessFirmware;
     })
     (lib.mkIf cfg.enableAllFirmware {
-      assertions = [
-        {
-          assertion = !cfg.enableAllFirmware || pkgs.config.allowUnfree;
-          message = ''
-            the list of hardware.enableAllFirmware contains non-redistributable licensed firmware files.
-              This requires nixpkgs.config.allowUnfree to be true.
-              An alternative is to use the hardware.enableRedistributableFirmware option.
-          '';
-        }
-      ];
       hardware.firmware =
         with pkgs;
         [

nixos/modules/installer/cd-dvd/iso-image.nix

@@ -1014,7 +1014,7 @@ in
       ]
       ++ lib.optionals (config.boot.loader.grub.memtest86.enable && config.isoImage.makeBiosBootable) [
         {
-          source = "${pkgs.memtest86plus}/memtest.bin";
+          source = pkgs.memtest86plus.efi;
           target = "/boot/memtest.bin";
         }
       ]

nixos/modules/services/databases/mysql.nix

@@ -111,6 +111,9 @@ in
 
       dataDir = lib.mkOption {
         type = lib.types.path;
+        default = (
+          if lib.versionAtLeast config.system.stateVersion "17.09" then "/var/lib/mysql" else "/var/mysql"
+        );
         example = "/var/lib/mysql";
         description = ''
           The data directory for MySQL.
@@ -430,10 +433,6 @@ in
       }
     ];
 
-    services.mysql.dataDir = lib.mkDefault (
-      if lib.versionAtLeast config.system.stateVersion "17.09" then "/var/lib/mysql" else "/var/mysql"
-    );
-
     services.mysql.settings.mysqld = lib.mkMerge [
       {
         datadir = cfg.dataDir;

nixos/modules/services/misc/gotenberg.nix

@@ -351,6 +351,4 @@ in
       // optionalAttrs (cfg.environmentFile != null) { EnvironmentFile = cfg.environmentFile; };
     };
   };
-
-  meta.maintainers = with lib.maintainers; [ pyrox0 ];
 }

nixos/modules/services/misc/ollama.nix

@@ -154,15 +154,32 @@ in
       };
       loadModels = lib.mkOption {
         type = types.listOf types.str;
+        apply = builtins.filter (model: model != "");
         default = [ ];
+        example = [
+          "dolphin3"
+          "gemma3"
+          "gemma3:27b"
+          "deepseek-r1:latest"
+          "deepseek-r1:1.5b"
+        ];
         description = ''
           Download these models using `ollama pull` as soon as `ollama.service` has started.
 
           This creates a systemd unit `ollama-model-loader.service`.
+          Use `services.ollama.syncModels` to automatically remove any models not currently declared here.
 
           Search for models of your choice from: <https://ollama.com/library>
         '';
       };
+      syncModels = lib.mkOption {
+        type = types.bool;
+        default = false;
+        description = ''
+          Synchronize all currently installed models with those declared in `services.ollama.loadModels`,
+          removing any models that are installed but not currently declared there.
+        '';
+      };
       openFirewall = lib.mkOption {
         type = types.bool;
         default = false;
@@ -266,7 +283,7 @@ in
         };
     };
 
-    systemd.services.ollama-model-loader = lib.mkIf (cfg.loadModels != [ ]) {
+    systemd.services.ollama-model-loader = lib.mkIf (cfg.loadModels != [ ] || cfg.syncModels) {
       description = "Download ollama models in the background";
       wantedBy = [
         "multi-user.target"
@@ -289,30 +306,51 @@ in
         RestartSteps = "10";
       };
 
-      script = ''
-        total=${toString (builtins.length cfg.loadModels)}
-        failed=0
+      script =
+        let
+          binaryInputs = lib.mapAttrs (_: lib.getExe) {
+            ollama = ollamaPackage;
+            parallel = pkgs.parallel;
+            awk = pkgs.gawk;
+            sed = pkgs.gnused;
+          };
+          inherit (binaryInputs)
+            ollama
+            parallel
+            awk
+            sed
+            ;
 
-        for model in ${lib.escapeShellArgs cfg.loadModels}; do
-          '${lib.getExe ollamaPackage}' pull "$model" &
-        done
+          declaredModelsRegex = lib.pipe cfg.loadModels [
+            (map lib.escapeRegex)
+            (lib.concatStringsSep "|")
+            (lib.escape [ "/" ])
+            lib.escapeShellArg
+          ];
+        in
+        ''
+          ${lib.optionalString cfg.syncModels ''
+            installed=$('${ollama}' list | '${awk}' 'NR > 1 {print $1}')
+            ${
+              # if `declaredModelsRegex` is empty, sed will err
+              if (cfg.loadModels != [ ]) then
+                ''
+                  echo declared models regex: ${declaredModelsRegex}
+                  undeclared=$(echo "$installed" | '${sed}' -E /${declaredModelsRegex}/d)
+                ''
+              else
+                ''
+                  undeclared="$installed"
+                ''
+            }
+            if [ -n "$undeclared" ]; then
+              echo removing: $undeclared
+              '${ollama}' rm $undeclared
+            fi
+          ''}
 
-        for job in $(jobs -p); do
-          set +e
-          wait $job
-          exit_code=$?
-          set -e
-
-          if [ $exit_code != 0 ]; then
-            failed=$((failed + 1))
-          fi
-        done
-
-        if [ $failed != 0 ]; then
-          echo "error: $failed out of $total attempted model downloads failed" >&2
-          exit 1
-        fi
-      '';
+          '${parallel}' --tag '${ollama}' pull ::: ${lib.escapeShellArgs cfg.loadModels}
+        '';
     };
 
     networking.firewall = lib.mkIf cfg.openFirewall { allowedTCPPorts = [ cfg.port ]; };

nixos/modules/services/networking/firefox-syncserver.nix

@@ -13,7 +13,7 @@ let
   defaultUser = "firefox-syncserver";
 
   dbIsLocal = cfg.database.host == "localhost";
-  dbURL = "mysql://${cfg.database.user}@${cfg.database.host}/${cfg.database.name}";
+  dbURL = "mysql://${cfg.database.user}@${cfg.database.host}/${cfg.database.name}${lib.optionalString dbIsLocal "?socket=/run/mysqld/mysqld.sock"}";
 
   format = pkgs.formats.toml { };
   settings = {

nixos/modules/services/networking/ncps.nix

@@ -48,6 +48,7 @@ let
       "--cache-lru-schedule-timezone='${cfg.cache.lru.scheduleTimeZone}'"
     ])
     ++ (lib.optional (cfg.cache.secretKeyPath != null) "--cache-secret-key-path='%d/secretKey'")
+    ++ (lib.optional (!cfg.cache.signNarinfo) "--cache-sign-narinfo='false'")
     ++ (lib.forEach cfg.upstream.caches (url: "--upstream-cache='${url}'"))
     ++ (lib.forEach cfg.upstream.publicKeys (pk: "--upstream-public-key='${pk}'"))
     ++ (lib.optional (cfg.netrcFile != null) "--netrc-file='${cfg.netrcFile}'")
@@ -180,6 +181,15 @@ in
             The path to the temporary directory that is used by the cache to download NAR files
           '';
         };
+
+        signNarinfo = lib.mkOption {
+          type = lib.types.bool;
+          default = true;
+          example = "false";
+          description = ''
+            Whether to sign narInfo files or passthru as-is from upstream
+          '';
+        };
       };
 
       server = {

nixos/modules/services/networking/netbird.nix

@@ -20,6 +20,7 @@ let
     mapAttrsToList
     mkAliasOptionModule
     mkDefault
+    mkEnableOption
     mkIf
     mkMerge
     mkOption
@@ -31,6 +32,7 @@ let
     optionalAttrs
     optionalString
     optionals
+    pipe
     toShellVars
     versionAtLeast
     versionOlder
@@ -40,6 +42,7 @@ let
     attrsOf
     bool
     enum
+    listOf
     nullOr
     package
     path
@@ -222,6 +225,26 @@ in
                 '';
               };
 
+              login.enable = mkEnableOption "automated login for NetBird client";
+              login.setupKeyFile = mkOption {
+                type = nullOr str;
+                default = null;
+                example = "/run/secrets/netbird-priv/setup-key";
+                description = ''
+                  A Setup Key file path used for automated login of the machine.
+                '';
+              };
+              login.systemdDependencies = mkOption {
+                type = listOf str;
+                default = [ ];
+                example = lib.literalExpression ''
+                  [ "sops-install-secrets.service" ]
+                '';
+                description = ''
+                  Additional systemd dependencies required to succeed before the Setup Key file becomes available.
+                '';
+              };
+
               openFirewall = mkOption {
                 type = bool;
                 default = true;
@@ -697,6 +720,71 @@ in
         });
       '';
     })
+    # Setup Keys login automation
+    {
+      systemd.services = pipe cfg.clients [
+        (filterAttrs (_: client: client.login.enable))
+        (mapAttrs' (
+          _: client:
+          nameValuePair "${client.service.name}-login" {
+            after = [ "${client.service.name}.service" ] ++ client.login.systemdDependencies;
+            requires = [ "${client.service.name}.service" ] ++ client.login.systemdDependencies;
+            wantedBy = [ "${client.service.name}.service" ];
+
+            serviceConfig = {
+              Type = "oneshot";
+              RemainAfterExit = true;
+
+              User = client.user.name;
+              Group = client.user.group;
+
+              RemoveIPC = true;
+              PrivateTmp = "disconnected"; # "disconnected" puts /tmp on `tmpfs`
+              ProtectSystem = "strict";
+              ProtectHome = "yes";
+
+              LoadCredential = [ "setup-key:${client.login.setupKeyFile}" ];
+            };
+
+            environment.NB_SETUP_KEY_FILE = "%d/setup-key";
+            /*
+              might want to do something similar to the docker entrypoint (watching log messages) instead
+              see https://github.com/netbirdio/netbird/blob/dc30dcacce4c322502975f1f491e6774efd7e1e9/client/netbird-entrypoint.sh
+            */
+            script = ''
+              set -x
+              # uses a file on a `tmpfs`, because variable updates get lost in the loop
+              status_file="/tmp/status.txt"
+
+              refresh_status() {
+                '${lib.getExe client.wrapper}' status &>"$status_file" || :
+              }
+
+              print_short_setup_key() {
+                cut -b1-8 <"$NB_SETUP_KEY_FILE"
+              }
+
+              main() {
+                refresh_status
+                <"$status_file" sed 's/^/STATUS:PRE-CONNECT : /g'
+
+                until refresh_status && <"$status_file" grep --quiet 'Connected\|NeedsLogin' ; do
+                  sleep 1
+                done
+                <"$status_file" sed 's/^/STATUS:POST-CONNECT: /g'
+
+                if <"$status_file" grep --quiet 'NeedsLogin' ; then
+                  echo "Using Setup Key File with key: $(print_short_setup_key)" >&2
+                  '${lib.getExe client.wrapper}' up --setup-key-file="$NB_SETUP_KEY_FILE"
+                fi
+              }
+
+              main "$@"
+            '';
+          }
+        ))
+      ];
+    }
     # migration & temporary fixups section
     {
       systemd.services = toClientAttrs (

nixos/modules/services/networking/oink.nix

@@ -12,7 +12,10 @@ let
       lib.mapAttrs' (k: v: lib.nameValuePair (lib.toLower k) v) attrs
     );
   oinkConfig = makeOinkConfig {
-    global = cfg.settings;
+    global = removeAttrs cfg.settings [
+      "apiKey"
+      "secretApiKey"
+    ];
     domains = cfg.domains;
   };
 in

nixos/modules/services/web-apps/weblate.nix

@@ -369,9 +369,10 @@ in
             });
           in
           ''
-            ${gunicorn}/bin/gunicorn \
+            ${lib.getExe gunicorn} \
               --name=weblate \
               --bind='unix:///run/weblate.socket' \
+              --preload \
               weblate.wsgi
           '';
         ExecReload = "${lib.getExe' pkgs.coreutils "kill"} -s HUP $MAINPID";

nixos/modules/services/web-servers/nginx/vhost-options.nix

@@ -243,9 +243,7 @@ with lib;
       default = true;
       description = ''
         Whether to enable the HTTP/3 protocol.
-        This requires using `pkgs.nginxQuic` package
-        which can be achieved by setting `services.nginx.package = pkgs.nginxQuic;`
-        and activate the QUIC transport protocol
+        This requires activating the QUIC transport protocol
         `services.nginx.virtualHosts.<name>.quic = true;`.
         Note that HTTP/3 support is experimental and *not* yet recommended for production.
         Read more at <https://quic.nginx.org/>
@@ -258,9 +256,7 @@ with lib;
       default = false;
       description = ''
         Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests.
-        This requires using `pkgs.nginxQuic` package
-        which can be achieved by setting `services.nginx.package = pkgs.nginxQuic;`
-        and activate the QUIC transport protocol
+        This requires activating the QUIC transport protocol
         `services.nginx.virtualHosts.<name>.quic = true;`.
         Note that special application protocol support is experimental and *not* yet recommended for production.
         Read more at <https://quic.nginx.org/>
@@ -272,8 +268,6 @@ with lib;
       default = false;
       description = ''
         Whether to enable the QUIC transport protocol.
-        This requires using `pkgs.nginxQuic` package
-        which can be achieved by setting `services.nginx.package = pkgs.nginxQuic;`.
         Note that QUIC support is experimental and
         *not* yet recommended for production.
         Read more at <https://quic.nginx.org/>

nixos/modules/system/boot/loader/grub/grub.nix

@@ -472,7 +472,7 @@ in
         type = types.attrsOf types.path;
         default = { };
         example = literalExpression ''
-          { "memtest.bin" = "''${pkgs.memtest86plus}/memtest.bin"; }
+          { "memtest.bin" = pkgs.memtest86plus.efi; }
         '';
         description = ''
           A set of files to be copied to {file}`/boot`.

nixos/modules/system/boot/loader/grub/memtest.nix

@@ -69,6 +69,6 @@ in
         linux @bootRoot@/memtest.bin ${toString cfg.params}
       }
     '';
-    boot.loader.grub.extraFiles."memtest.bin" = "${memtest86}/memtest.bin";
+    boot.loader.grub.extraFiles."memtest.bin" = memtest86.efi;
   };
 }

nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix

@@ -391,7 +391,7 @@ in
       type = types.attrsOf types.path;
       default = { };
       example = literalExpression ''
-        { "efi/memtest86/memtest.efi" = "''${pkgs.memtest86plus}/memtest.efi"; }
+        { "efi/memtest86/memtest.efi" = pkgs.memtest86plus.efi; }
       '';
       description = ''
         A set of files to be copied to {file}`$BOOT`.
@@ -578,7 +578,7 @@ in
 
     boot.loader.systemd-boot.extraFiles = mkMerge [
       (mkIf cfg.memtest86.enable {
-        "efi/memtest86/memtest.efi" = "${pkgs.memtest86plus.efi}";
+        "efi/memtest86/memtest.efi" = pkgs.memtest86plus.efi;
       })
       (mkIf cfg.netbootxyz.enable {
         "efi/netbootxyz/netboot.xyz.efi" = "${pkgs.netbootxyz-efi}";

nixos/tests/all-tests.nix

@@ -569,6 +569,7 @@ in
     imports = [ ./firefox.nix ];
     _module.args.firefoxPackage = pkgs.firefox-esr-140;
   };
+  firefox-syncserver = runTest ./firefox-syncserver.nix;
   firefoxpwa = runTest ./firefoxpwa.nix;
   firejail = runTest ./firejail.nix;
   firewall = runTest {

nixos/tests/clickhouse/ui.nix

@@ -16,6 +16,8 @@
         ...
       }:
       {
+        virtualisation.memorySize = 1024 * 2;
+
         environment.systemPackages =
           let
             clickhouseSeleniumScript =

nixos/tests/firefox-syncserver.nix

@@ -0,0 +1,32 @@
+{
+  pkgs,
+  ...
+}:
+
+{
+  name = "firefox-syncserver";
+  nodes.machine = {
+    services.mysql = {
+      enable = true;
+      package = pkgs.mariadb;
+    };
+
+    services.firefox-syncserver = {
+      enable = true;
+      secrets = pkgs.writeText "secret" "this-is-a-test";
+      singleNode = {
+        enable = true;
+        hostname = "firefox-syncserver.local";
+        capacity = 1;
+      };
+    };
+  };
+
+  testScript = ''
+    machine.wait_for_unit("firefox-syncserver.service")
+    machine.wait_for_open_port(5000)
+
+    machine.wait_until_succeeds("curl --fail http://127.0.0.1:5000")
+
+  '';
+}

nixos/tests/gotenberg.nix

@@ -2,7 +2,6 @@
 
 {
   name = "gotenberg";
-  meta.maintainers = with lib.maintainers; [ pyrox0 ];
 
   nodes.machine = {
     services.gotenberg = {

nixos/tests/sing-box.nix

@@ -139,7 +139,6 @@ in
 
         services.nginx = {
           enable = true;
-          package = pkgs.nginxQuic;
 
           virtualHosts."${target_host}" = {
             onlySSL = true;

pkgs/applications/editors/vim/plugins/generated.nix

@@ -22312,6 +22312,19 @@ final: prev: {
     meta.hydraPlatforms = [ ];
   };
 
+  vscode-diff-nvim = buildVimPlugin {
+    pname = "vscode-diff.nvim";
+    version = "2025-11-26";
+    src = fetchFromGitHub {
+      owner = "esmuellert";
+      repo = "vscode-diff.nvim";
+      rev = "94bba113413cb660397f219d4096775338ea08e1";
+      sha256 = "17kll9vclgy7flvxbw4hc2fj4xnn1hq3ds3s9fg0z7x9nmf23v85";
+    };
+    meta.homepage = "https://github.com/esmuellert/vscode-diff.nvim/";
+    meta.hydraPlatforms = [ ];
+  };
+
   vscode-nvim = buildVimPlugin {
     pname = "vscode.nvim";
     version = "2025-08-06";

pkgs/applications/editors/vim/plugins/overrides.nix

@@ -4091,6 +4091,19 @@ assertNoAdditions {
     ];
   };
 
+  vscode-diff-nvim = super.vscode-diff-nvim.overrideAttrs {
+    dependencies = [
+      self.nui-nvim
+    ];
+    nativeBuildInputs = [ cmake ];
+    dontUseCmakeConfigure = true;
+    buildPhase = ''
+      runHook preBuild
+      make
+      runHook postBuild
+    '';
+  };
+
   which-key-nvim = super.which-key-nvim.overrideAttrs {
     nvimSkipModules = [ "which-key.docs" ];
   };

pkgs/applications/editors/vim/plugins/vim-plugin-names

@@ -1713,6 +1713,7 @@ https://github.com/navicore/vissort.vim/,,
 https://github.com/liuchengxu/vista.vim/,,
 https://github.com/mcauley-penney/visual-whitespace.nvim/,HEAD,
 https://github.com/EthanJWright/vs-tasks.nvim/,HEAD,
+https://github.com/esmuellert/vscode-diff.nvim/,HEAD,
 https://github.com/Mofiqul/vscode.nvim/,,
 https://github.com/dylanaraps/wal.vim/,,
 https://github.com/mattn/webapi-vim/,,

pkgs/applications/editors/vscode/extensions/anthropic.claude-code/default.nix

@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "claude-code";
     publisher = "anthropic";
-    version = "2.0.53";
-    hash = "sha256-y05YPSB+QATGcnuexd8Fesv0DZPm+QqowuJvS3JvesY=";
+    version = "2.0.55";
+    hash = "sha256-6ip1ETRDQTjl5bxIGPHTFAL8Ri5xbN2zd6hVVdTnjtE=";
   };
 
   meta = {

pkgs/applications/editors/vscode/extensions/default.nix

@@ -1965,8 +1965,8 @@ let
         mktplcRef = {
           name = "gitlab-workflow";
           publisher = "gitlab";
-          version = "6.57.4";
-          hash = "sha256-dkDRRzxcDbzKw7L7wyHkoK4awSNxVapsO5tZoc/+zFk=";
+          version = "6.58.0";
+          hash = "sha256-kkPLa+xviFUuCmB/+BE3p4tPFSi90aCXO6GcjwHurFI=";
         };
         meta = {
           description = "GitLab extension for Visual Studio Code";
@@ -3852,8 +3852,8 @@ let
         mktplcRef = {
           publisher = "redhat";
           name = "java";
-          version = "1.48.0";
-          hash = "sha256-/JW5PVM4USBflC5eloi8u9AgpdIzkpEmoHKYr1yVkgI=";
+          version = "1.49.0";
+          hash = "sha256-4uBn2NHd32ZsooTJ0c9PWJ14YHIq7RgXb+KdaH4vuCo=";
         };
         buildInputs = [ jdk ];
         meta = {

pkgs/applications/editors/vscode/extensions/saoudrizwan.claude-dev/default.nix

@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "claude-dev";
     publisher = "saoudrizwan";
-    version = "3.38.1";
-    hash = "sha256-j3hRW7l+PEq7DJbXENO5Plbg3SePZm1lX60Y4B5RvYs=";
+    version = "3.38.3";
+    hash = "sha256-LVFZlgXrnZ0X6gt+UBghvG7t6mK5R9N7X0SYb8G3alU=";
   };
 
   meta = {

pkgs/applications/networking/cluster/linkerd/generic.nix

@@ -69,7 +69,6 @@ buildGoModule rec {
     homepage = "https://linkerd.io/";
     license = licenses.asl20;
     maintainers = with maintainers; [
-      bryanasdev000
       Gonzih
     ];
   };

pkgs/applications/networking/cluster/terraform-providers/default.nix

@@ -125,6 +125,8 @@ let
       metal = archived "metal" "2025/10";
       stackpath = archived "stackpath" "2025/10";
       vra7 = archived "vra7" "2025/10";
+      ccloud = removed "ccloud" "2025/11. Try sap-cloud-infrastructure_sci instead.";
+      sapcc_ccloud = removed "sapcc_ccloud" "2025/11. Try sap-cloud-infrastructure_sci instead.";
     };
 
   # added 2025-10-12
@@ -260,7 +262,6 @@ let
     rundeck = lib.warnOnInstantiate "terraform-providers.rundeck has been renamed to terraform-providers.rundeck_rundeck" actualProviders.rundeck_rundeck;
     sakuracloud = lib.warnOnInstantiate "terraform-providers.sakuracloud has been renamed to terraform-providers.sacloud_sakuracloud" actualProviders.sacloud_sakuracloud;
     btp = lib.warnOnInstantiate "terraform-providers.btp has been renamed to terraform-providers.sap_btp" actualProviders.sap_btp;
-    ccloud = lib.warnOnInstantiate "terraform-providers.ccloud has been renamed to terraform-providers.sapcc_ccloud" actualProviders.sapcc_ccloud;
     scaleway = lib.warnOnInstantiate "terraform-providers.scaleway has been renamed to terraform-providers.scaleway_scaleway" actualProviders.scaleway_scaleway;
     shell = lib.warnOnInstantiate "terraform-providers.shell has been renamed to terraform-providers.scottwinkler_shell" actualProviders.scottwinkler_shell;
     selectel = lib.warnOnInstantiate "terraform-providers.selectel has been renamed to terraform-providers.selectel_selectel" actualProviders.selectel_selectel;

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -45,11 +45,11 @@
     "vendorHash": "sha256-weHY7ZV3HaFBYlDNhwAYN9vDItkI+wtk9UNlM0uuwfY="
   },
   "aliyun_alicloud": {
-    "hash": "sha256-+Nh5SJxdpGUYv0EljfvDvOMqMwWscPk4EXvfkNBvjkI=",
+    "hash": "sha256-XljWNpFQr9SghmRkUTsW/0g7oqU8JMmxJxuLWYuorAQ=",
     "homepage": "https://registry.terraform.io/providers/aliyun/alicloud",
     "owner": "aliyun",
     "repo": "terraform-provider-alicloud",
-    "rev": "v1.262.1",
+    "rev": "v1.263.0",
     "spdx": "MPL-2.0",
     "vendorHash": "sha256-LSvX63g4GWcr2Uo6H50dOWG0XWUhmbhUw9EYsQqs+HU="
   },
@@ -705,11 +705,11 @@
     "vendorHash": "sha256-xkhOzwFpON6dzi/qdpBazfrpMfWSUwUWs8VXLSAsqaM="
   },
   "huaweicloud_huaweicloud": {
-    "hash": "sha256-QyJkzNI+9kGz7c7laDA33zhRTJbeSwGt9PaLjun3TmU=",
+    "hash": "sha256-fCUGjaVdyJZZrj10zKoSLu+LNxhOo5K3ELWJSo/amEc=",
     "homepage": "https://registry.terraform.io/providers/huaweicloud/huaweicloud",
     "owner": "huaweicloud",
     "repo": "terraform-provider-huaweicloud",
-    "rev": "v1.80.3",
+    "rev": "v1.80.5",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },
@@ -1155,6 +1155,15 @@
     "spdx": "Apache-2.0",
     "vendorHash": "sha256-b1ziyrDKVUbTrN31t1IRFcK8EjsDSBP4FfArPkHKlBc="
   },
+  "sap-cloud-infrastructure_sci": {
+    "hash": "sha256-m3degJZruqRkA/lSnNQrLfJIlpl5k8qCpbyIcsyV5/U=",
+    "homepage": "https://registry.terraform.io/providers/sap-cloud-infrastructure/sci",
+    "owner": "SAP-cloud-infrastructure",
+    "repo": "terraform-provider-sci",
+    "rev": "v2.2.1",
+    "spdx": "MPL-2.0",
+    "vendorHash": "sha256-WDyULPLN+uZ5OaE/j3FgurHbXKRU93S3nbXk8mW5dc4="
+  },
   "sap_btp": {
     "hash": "sha256-55SNzeOaMyaidEbCjGPNF20qhQgddNHOl2xNqd7OZU4=",
     "homepage": "https://registry.terraform.io/providers/SAP/btp",
@@ -1164,15 +1173,6 @@
     "spdx": "Apache-2.0",
     "vendorHash": "sha256-v+yPo9ueuhC8QNEeiQGngk7o5t+QeIJaxqKE5Yb1eug="
   },
-  "sapcc_ccloud": {
-    "hash": "sha256-Dpx0eugcHCJV8GNPqjxx4P9ohgJgB10DTnHr+CeN/iQ=",
-    "homepage": "https://registry.terraform.io/providers/sapcc/ccloud",
-    "owner": "sapcc",
-    "repo": "terraform-provider-ccloud",
-    "rev": "v1.6.7",
-    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-OqbnkuEy9w6F1DxmlYhRNYhBaYhWV0FtMK4wdwSybh8="
-  },
   "scaleway_scaleway": {
     "hash": "sha256-QVl06Yzl2QREcAIlyWeg0elq2yPL/VCgIM/OvOSELuI=",
     "homepage": "https://registry.terraform.io/providers/scaleway/scaleway",
@@ -1228,11 +1228,11 @@
     "vendorHash": "sha256-skswuFKhN4FFpIunbom9rM/FVRJVOFb1WwHeAIaEjn8="
   },
   "spacelift-io_spacelift": {
-    "hash": "sha256-aOpS9KJm31Rz3LnSLAAxV9A5XLuJxGzIWkv9JuEG3H8=",
+    "hash": "sha256-leXROTarkEHfDmJVLS7kSU3Z27dCF/BfZwBsnujlB90=",
     "homepage": "https://registry.terraform.io/providers/spacelift-io/spacelift",
     "owner": "spacelift-io",
     "repo": "terraform-provider-spacelift",
-    "rev": "v1.38.0",
+    "rev": "v1.40.0",
     "spdx": "MIT",
     "vendorHash": "sha256-cX5K221Jnq701Nb+2bC1LmXVL7YvkZ8dkc2wYjDNOSw="
   },
@@ -1273,11 +1273,11 @@
     "vendorHash": "sha256-IR6KjFW5GbsOIm3EEFyx3ctwhbifZlcNaZeGhbeK/Wo="
   },
   "sysdiglabs_sysdig": {
-    "hash": "sha256-hqcnyBWB7PWTTRCOczgF6hSBibvlGl+x9EkYn3vi4v8=",
+    "hash": "sha256-a31DMe+fzCvANueh5Pslg4UpJnRDnhc9sjES2Vj9SJ4=",
     "homepage": "https://registry.terraform.io/providers/sysdiglabs/sysdig",
     "owner": "sysdiglabs",
     "repo": "terraform-provider-sysdig",
-    "rev": "v3.1.0",
+    "rev": "v3.2.0",
     "spdx": "MPL-2.0",
     "vendorHash": "sha256-rWiafaFE1RolO9JUN1WoW4EWJjR7kpfeVEOTLf21j50="
   },

pkgs/applications/networking/instant-messengers/discord/sources.json

@@ -1,8 +1,8 @@
 {
   "linux-canary": {
-    "hash": "sha256-+MD6P9h5G6r5Vn/zwToJlHKFCvhPtUZ7HQwz2AF5EbM=",
-    "url": "https://canary.dl2.discordapp.net/apps/linux/0.0.812/discord-canary-0.0.812.tar.gz",
-    "version": "0.0.812"
+    "hash": "sha256-302oXjbkWNHaYQBUY1ZaY9f+7a5hJlesyLUMhZZCU/4=",
+    "url": "https://canary.dl2.discordapp.net/apps/linux/0.0.814/discord-canary-0.0.814.tar.gz",
+    "version": "0.0.814"
   },
   "linux-development": {
     "hash": "sha256-oG50YrXQUCnbn+rO0EeRjixeqvXYBdnyqdomdPfxfos=",
@@ -10,19 +10,19 @@
     "version": "0.0.92"
   },
   "linux-ptb": {
-    "hash": "sha256-Q4IrmvoP//49GN2L9kRQ/zG28XjicJEXZpVG6RklFB8=",
-    "url": "https://ptb.dl2.discordapp.net/apps/linux/0.0.167/discord-ptb-0.0.167.tar.gz",
-    "version": "0.0.167"
+    "hash": "sha256-uz3QNIDzmB/4aLNRNgB1wzpNJlc8ous8aUvcqGaHE7c=",
+    "url": "https://ptb.dl2.discordapp.net/apps/linux/0.0.168/discord-ptb-0.0.168.tar.gz",
+    "version": "0.0.168"
   },
   "linux-stable": {
-    "hash": "sha256-DXGlo9qdmJTqm6ResvspauQ0awIFSuYalcpVXEfTxK4=",
-    "url": "https://stable.dl2.discordapp.net/apps/linux/0.0.115/discord-0.0.115.tar.gz",
-    "version": "0.0.115"
+    "hash": "sha256-PFJQV0+bYe5UhH17/pHaUEEO5xFJL/KfaGkHziNhCVk=",
+    "url": "https://stable.dl2.discordapp.net/apps/linux/0.0.116/discord-0.0.116.tar.gz",
+    "version": "0.0.116"
   },
   "osx-canary": {
-    "hash": "sha256-gKBXZgoZKLja2iu5DAJsumm2u3mXH5fiUq6qIGfhrvo=",
-    "url": "https://canary.dl2.discordapp.net/apps/osx/0.0.917/DiscordCanary.dmg",
-    "version": "0.0.917"
+    "hash": "sha256-r4MwAQps86XBKlMy9nFx0MD0Sjo9zmuB4aX4iaEWTfA=",
+    "url": "https://canary.dl2.discordapp.net/apps/osx/0.0.919/DiscordCanary.dmg",
+    "version": "0.0.919"
   },
   "osx-development": {
     "hash": "sha256-x4i/bbaR4XjzyZGkVerUl8oxxhm01A+2tpN+UEtKwwc=",
@@ -30,13 +30,13 @@
     "version": "0.0.105"
   },
   "osx-ptb": {
-    "hash": "sha256-b+OrmbBf9S82plpN6FEsr+p6aekAvIKtBtCmWPLcrgY=",
-    "url": "https://ptb.dl2.discordapp.net/apps/osx/0.0.199/DiscordPTB.dmg",
-    "version": "0.0.199"
+    "hash": "sha256-Yk9q4GageNb/Tt+R1SGwWnJBRrjG4QIO6qYLjhak460=",
+    "url": "https://ptb.dl2.discordapp.net/apps/osx/0.0.200/DiscordPTB.dmg",
+    "version": "0.0.200"
   },
   "osx-stable": {
-    "hash": "sha256-YT3EPVd12aAXTFU0y+IiYF5HlW+tJXjGrZajpjsxcAA=",
-    "url": "https://stable.dl2.discordapp.net/apps/osx/0.0.367/Discord.dmg",
-    "version": "0.0.367"
+    "hash": "sha256-G0jSuUgX05fqk4dmiJTqpbsIh7lnTRxcron989/diw0=",
+    "url": "https://stable.dl2.discordapp.net/apps/osx/0.0.368/Discord.dmg",
+    "version": "0.0.368"
   }
 }

pkgs/applications/window-managers/hyprwm/hyprland-plugins/hypr-darkwindow.nix

@@ -7,13 +7,13 @@
 
 mkHyprlandPlugin (finalAttrs: {
   pluginName = "hypr-darkwindow";
-  version = "0.51.1";
+  version = "0.52.1";
 
   src = fetchFromGitHub {
     owner = "micha4w";
     repo = "Hypr-DarkWindow";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-jq5j459gCVuBOpuGEvXe+9/O+HAineFxQI4sIcEPi/c=";
+    hash = "sha256-0jqliHlmW/lEDC3X8tYrqdY6d15h1hF40p32r4Nsa4w=";
   };
 
   installPhase = ''

pkgs/by-name/ab/abcmidi/package.nix

@@ -6,13 +6,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "abcmidi";
-  version = "2025.06.27";
+  version = "2025.11.26";
 
   src = fetchFromGitHub {
     owner = "sshlien";
     repo = "abcmidi";
     tag = finalAttrs.version;
-    hash = "sha256-bOuMiFm4wP+AgCLbarhZMmtGcEzzVsqiwi8sBRj/jy8=";
+    hash = "sha256-OBlkk5Fq3ep+wZqFfSXNqrXtznisNFjn9uDVj/Q4Odk=";
   };
 
   meta = {

pkgs/by-name/ai/aider-chat/package.nix

@@ -3,6 +3,7 @@
   stdenv,
   python312Packages,
   fetchFromGitHub,
+  fetchpatch,
   replaceVars,
   gitMinimal,
   portaudio,
@@ -151,6 +152,13 @@ let
       (replaceVars ./fix-flake8-invoke.patch {
         flake8 = lib.getExe python3Packages.flake8;
       })
+
+      # https://github.com/Aider-AI/aider/pull/4671
+      (fetchpatch {
+        name = "add-new-exceptions-to-LiteLLMExceptions.patch";
+        url = "https://github.com/Aider-AI/aider/commit/7201abc56539ae8ee2bf4ea0926f584c9ec5558c.patch";
+        hash = "sha256-bjL9nbEQGGNkFczm1hDOMP3b48eRJk17zcivXjOdVnw=";
+      })
     ];
 
     disabledTestPaths = [

pkgs/by-name/al/all-the-package-names/package.nix

@@ -7,16 +7,16 @@
 
 buildNpmPackage rec {
   pname = "all-the-package-names";
-  version = "2.0.2270";
+  version = "2.0.2277";
 
   src = fetchFromGitHub {
     owner = "nice-registry";
     repo = "all-the-package-names";
     tag = "v${version}";
-    hash = "sha256-r8FzTw86jB999wfBPWNbyBKqfFQxGpQqu/leeP517/k=";
+    hash = "sha256-gSprKqPJXEky9iMVdDAQJ97xOYp1TgBrCqJEjj0+bxc=";
   };
 
-  npmDepsHash = "sha256-gL8gqEmobDAHQWxgAf7q+0VFpcGImXiAdZMSVhkZY4A=";
+  npmDepsHash = "sha256-ELuyq/+2yw1CbkhqxsDUS8ZAdBemrBqKhjAs6nU9BWE=";
 
   passthru.updateScript = nix-update-script { };
 

pkgs/by-name/an/anki/addons/adjust-sound-volume/default.nix

@@ -10,7 +10,7 @@ anki-utils.buildAnkiAddon (finalAttrs: {
   src = fetchFromGitHub {
     owner = "mnogu";
     repo = "adjust-sound-volume";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-6reIUz+tHKd4KQpuofLa/tIL5lCloj3yODZ8Cz29jFU=";
   };
   passthru.updateScript = nix-update-script { };

pkgs/by-name/an/anki/addons/anki-connect/default.nix

@@ -10,7 +10,7 @@ anki-utils.buildAnkiAddon (finalAttrs: {
   src = fetchFromSourcehut {
     owner = "~foosoft";
     repo = "anki-connect";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     hash = "sha256-ZPjGqyxTyLg5DtOUPJWCBC/IMfDVxtWt86VeFrsE41k=";
   };
   sourceRoot = "${finalAttrs.src.name}/plugin";

pkgs/by-name/an/anki/addons/recolor/default.nix

@@ -10,7 +10,7 @@ anki-utils.buildAnkiAddon (finalAttrs: {
   src = fetchFromGitHub {
     owner = "AnKing-VIP";
     repo = "AnkiRecolor";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
     sparseCheckout = [ "src/addon" ];
     hash = "sha256-28DJq2l9DP8O6OsbNQCZ0pm4S6CQ3Yz0Vfvlj+iQw8Y=";
   };

pkgs/by-name/an/antigravity/information.json

@@ -1,22 +1,22 @@
 {
-  "version": "1.11.5",
+  "version": "1.11.9",
   "vscodeVersion": "1.104.0",
   "sources": {
     "x86_64-linux": {
-      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.11.5-5234145629700096/linux-x64/Antigravity.tar.gz",
-      "sha256": "4e03151a55743cf30fac595abb343c9eb5a3b6a80d2540136d75b4ead8072112"
+      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.11.9-4787439284912128/linux-x64/Antigravity.tar.gz",
+      "sha256": "193a4a61da608c526fbc329670e892ab0a961d3a65ce49485de1ca08804e472d"
     },
     "aarch64-linux": {
-      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.11.5-5234145629700096/linux-arm/Antigravity.tar.gz",
-      "sha256": "e154dc745c51c7aadc33becee985188c92246a36a16ee0ba545c422172f8d0c2"
+      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.11.9-4787439284912128/linux-arm/Antigravity.tar.gz",
+      "sha256": "26bd6a220f10c449e6552f9f6a9b7c7c40aaf70324113877a8339539cf0c3bdc"
     },
     "x86_64-darwin": {
-      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.11.5-5234145629700096/darwin-x64/Antigravity.zip",
-      "sha256": "393336a2177fc3795adb9450f311ce5d453b5df0e0cfa23e35e419f46e3ebc2c"
+      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.11.9-4787439284912128/darwin-x64/Antigravity.zip",
+      "sha256": "bdd0d0f239cf408ac21ff264785882285a4790758e48f407893ee035adbbe917"
     },
     "aarch64-darwin": {
-      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.11.5-5234145629700096/darwin-arm/Antigravity.zip",
-      "sha256": "800890265dca8b74d7d28af99fae7fc5762f4d529e8eeb451a76c25e09dff488"
+      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.11.9-4787439284912128/darwin-arm/Antigravity.zip",
+      "sha256": "3536282e726713b1f0b0d4fc4f162c15e18584f73466b285c05550a895a21d76"
     }
   }
 }

pkgs/by-name/an/antigravity/package.nix

@@ -60,8 +60,6 @@ in
   tests = { };
   updateScript = ./update.js;
 
-  dontFixup = hostPlatform.isDarwin;
-
   meta = {
     mainProgram = "antigravity";
     description = "Agentic development platform, evolving the IDE into the agent-first era";

pkgs/by-name/ap/apx/package.nix

@@ -11,6 +11,7 @@
 buildGoModule rec {
   pname = "apx";
   version = "2.4.5";
+  versionConfig = "1.0.0";
 
   src = fetchFromGitHub {
     owner = "Vanilla-OS";
@@ -19,6 +20,14 @@ buildGoModule rec {
     hash = "sha256-0Rfj7hrH26R9GHOPPVdCaeb1bfAw9KnPpJYXyiei90U=";
   };
 
+  # Official Vanilla APX configs (stacks + package-managers)
+  configsSrc = fetchFromGitHub {
+    owner = "Vanilla-OS";
+    repo = "vanilla-apx-configs";
+    tag = "v${versionConfig}";
+    hash = "sha256-cCXmHkRjcWcpMtgPVtQF5Q76jr1Qt2RHSLtWLQdq+aE=";
+  };
+
   vendorHash = "sha256-RoZ6sXbvIHfQcup9Ba/PpzS0eytKdX4WjDUlgB3UjfE=";
 
   # podman needed for apx to not error when building shell completions
@@ -40,13 +49,21 @@ buildGoModule rec {
   postPatch = ''
     substituteInPlace config/apx.json \
       --replace-fail "/usr/share/apx/distrobox/distrobox" "${distrobox}/bin/distrobox" \
-      --replace-fail "/usr/share/apx" "$out/bin/apx"
+      --replace-fail "/usr/share/apx" "$out/share/apx"
     substituteInPlace settings/config.go \
       --replace-fail "/usr/share/apx/" "$out/share/apx/"
   '';
 
   postInstall = ''
+    # Base configuration of apx
     install -Dm444 config/apx.json -t $out/share/apx/
+
+    # Install official Vanilla configs (same as install script)
+    install -d $out/share/apx
+    cp -r ${configsSrc}/stacks $out/share/apx/
+    cp -r ${configsSrc}/package-managers $out/share/apx/
+
+    # Man pages, documentation, license
     installManPage man/man1/*
     install -Dm444 README.md -t $out/share/docs/apx
     install -Dm444 COPYING.md $out/share/licenses/apx/LICENSE
@@ -61,6 +78,16 @@ buildGoModule rec {
 
   meta = {
     description = "Vanilla OS package manager";
+    longDescription = ''
+      Apx is the Vanilla OS package manager that allows you to install packages
+      from multiple sources inside managed containers without altering the host system.
+
+      Note: This package requires Podman to be enabled in your NixOS configuration.
+      Add the following to your configuration.nix:
+
+        virtualisation.podman.enable = true;
+        environment.systemPackages = with pkgs; [ apx ];
+    '';
     homepage = "https://github.com/Vanilla-OS/apx";
     changelog = "https://github.com/Vanilla-OS/apx/releases/tag/v${version}";
     license = lib.licenses.gpl3Only;

pkgs/by-name/ar/argocd-autopilot/package.nix

@@ -58,7 +58,6 @@ buildGoModule rec {
     license = licenses.asl20;
     maintainers = with maintainers; [
       sagikazarmark
-      bryanasdev000
     ];
   };
 }

pkgs/by-name/ar/argocd/package.nix

@@ -108,7 +108,6 @@ buildGoModule rec {
     license = licenses.asl20;
     maintainers = with maintainers; [
       shahrukh330
-      bryanasdev000
       qjoly
       FKouhai
     ];

pkgs/by-name/as/astro-language-server/package.nix

@@ -2,22 +2,30 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  pnpm_9,
-  nodejs_22,
+  pnpm_10,
+  nodejs,
+  nix-update-script,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "astro-language-server";
-  version = "2.15.4";
+  version = "2.16.0";
 
   src = fetchFromGitHub {
     owner = "withastro";
-    repo = "language-tools";
+    repo = "astro";
     rev = "@astrojs/language-server@${finalAttrs.version}";
-    hash = "sha256-NBLUeg1WqxTXtu8eg1fihQSfm8koYAEWhfXAj/fIdC8=";
+    hash = "sha256-95IsNW/ha4XsH0E0adX3x9N7ANDL6MZreXy//mIQk/I=";
   };
 
-  pnpmDeps = pnpm_9.fetchDeps {
+  # https://pnpm.io/filtering#--filter-package_name-1
+  pnpmWorkspaces = [ "@astrojs/language-server..." ];
+  prePnpmInstall = ''
+    pnpm config set dedupe-peer-dependents false
+    pnpm approve-builds @emmetio/css-parser
+  '';
+
+  pnpmDeps = pnpm_10.fetchDeps {
     inherit (finalAttrs)
       pname
       version
@@ -25,46 +33,50 @@ stdenv.mkDerivation (finalAttrs: {
       pnpmWorkspaces
       prePnpmInstall
       ;
-    fetcherVersion = 1;
-    hash = "sha256-tlpk+wbLjJqt37lu67p2A2RZAR1ZfnZFiYoqIQwvWPQ=";
+    fetcherVersion = 2;
+    hash = "sha256-LQpFnK+01SCyC4AHHHvdZlc6Ss40Lxq5+p9ioK10BSU=";
   };
 
   nativeBuildInputs = [
-    nodejs_22
-    pnpm_9.configHook
+    nodejs
+    pnpm_10.configHook
   ];
 
-  buildInputs = [ nodejs_22 ];
-
-  # Must specify to download "@astrojs/yaml2ts" depencendies
-  # https://pnpm.io/filtering#--filter-package_name-1
-  pnpmWorkspaces = [ "@astrojs/language-server..." ];
-  prePnpmInstall = ''
-    # Warning section for "pnpm@v8"
-    # https://pnpm.io/cli/install#--filter-package_selector
-    pnpm config set dedupe-peer-dependents false
-  '';
+  buildInputs = [ nodejs ];
 
   buildPhase = ''
     runHook preBuild
 
-    # Must build the "@astrojs/yaml2ts" package. Dependency is linked via workspace by "pnpm"
-    # (https://github.com/withastro/language-tools/blob/%40astrojs/language-server%402.14.2/pnpm-lock.yaml#L78-L80)
     pnpm --filter "@astrojs/language-server..." build
 
     runHook postBuild
   '';
 
+  env.CI = true;
+
   installPhase = ''
     runHook preInstall
 
-    mkdir -p $out/{bin,lib/astro-language-server}
-    cp -r {packages,node_modules} $out/lib/astro-language-server
-    ln -s $out/lib/astro-language-server/packages/language-server/bin/nodeServer.js $out/bin/astro-ls
+    pnpm install --offline --prod --filter="@astrojs/language-server..."
+    mkdir -p $out/{bin,lib/node_modules/astro-language-server/packages/language-tools}
+    cp -r ./node_modules $out/lib/node_modules/astro-language-server
+    cp -r packages/language-tools/{language-server,yaml2ts} $out/lib/node_modules/astro-language-server/packages/language-tools/
+    pushd $out/lib/node_modules/astro-language-server/node_modules
+    rm -rf {./,.pnpm/node_modules/}astro-{scripts,benchmark}
+    popd
+
+    ln -s $out/lib/node_modules/astro-language-server/packages/language-tools/language-server/bin/nodeServer.js $out/bin/astro-ls
 
     runHook postInstall
   '';
 
+  passthru.updateScript = nix-update-script {
+    extraArgs = [
+      "--version-regex"
+      "@astrojs/language-server@(.*)"
+    ];
+  };
+
   meta = {
     description = "Astro language server";
     homepage = "https://github.com/withastro/language-tools";

pkgs/by-name/av/avalanche-cli/package.nix

@@ -14,13 +14,13 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "avalanche-cli";
-  version = "1.9.4";
+  version = "1.9.5";
 
   src = fetchFromGitHub {
     owner = "ava-labs";
     repo = "avalanche-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-4JHRfSop3JZ4ejAt5cnLHLkbXMRRiLwHRi9vBS46Wmo=";
+    hash = "sha256-jNDzN2kWjnY9yQaGjhIEvpoc+k1Q1tnDQkQtZvxBTSw=";
   };
 
   proxyVendor = true;

pkgs/by-name/aw/awscli2/package.nix

@@ -210,7 +210,6 @@ py.pkgs.buildPythonApplication rec {
     maintainers = with lib.maintainers; [
       bhipple
       davegallant
-      bryanasdev000
       devusb
       anthonyroussel
     ];

pkgs/by-name/az/azure-cli/extensions-generated.json

@@ -50,9 +50,9 @@
   },
   "aks-preview": {
     "pname": "aks-preview",
-    "version": "19.0.0b10",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/aks_preview-19.0.0b10-py2.py3-none-any.whl",
-    "hash": "sha256-xteDVuaDzci2reA8MGECuGepCLlcwcWEb8fRCL3r7h8=",
+    "version": "19.0.0b16",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/aks_preview-19.0.0b16-py2.py3-none-any.whl",
+    "hash": "sha256-KtuekAC1Nu/fjLFPmIFKYeQCJTEFwsNOr5lar6YKXl8=",
     "description": "Provides a preview for upcoming AKS features"
   },
   "alb": {
@@ -295,9 +295,9 @@
   },
   "datadog": {
     "pname": "datadog",
-    "version": "2.0.0",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/datadog-2.0.0-py3-none-any.whl",
-    "hash": "sha256-pdot6RlORnPubrsL8UWrqwUYFuGBYCPd+9DYG6fLklM=",
+    "version": "3.0.0",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/datadog-3.0.0-py3-none-any.whl",
+    "hash": "sha256-va/om8UaRL+oqYSjNK34UuBlwfH7TyTLCcODzAwh2Og=",
     "description": "Microsoft Azure Command-Line Tools Datadog Extension"
   },
   "datafactory": {
@@ -316,9 +316,9 @@
   },
   "dataprotection": {
     "pname": "dataprotection",
-    "version": "1.6.0",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/dataprotection-1.6.0-py3-none-any.whl",
-    "hash": "sha256-UkZbS0aIcaSM6KlI6CaP5lgq6m/cQophstc2k9ZegKw=",
+    "version": "1.7.0",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/dataprotection-1.7.0-py3-none-any.whl",
+    "hash": "sha256-4JG0UHInWxi49cXPUoLlfP8FIg9VTjmzFiWfn0to3LQ=",
     "description": "Microsoft Azure Command-Line Tools DataProtectionClient Extension"
   },
   "datashare": {
@@ -386,23 +386,23 @@
   },
   "dns-resolver": {
     "pname": "dns-resolver",
-    "version": "1.1.0",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/dns_resolver-1.1.0-py3-none-any.whl",
-    "hash": "sha256-xRmWnmsEcHW/TXuR2RsWCz7W3JDLrqPCxx19H8rZ2JE=",
+    "version": "1.2.0",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/dns_resolver-1.2.0-py3-none-any.whl",
+    "hash": "sha256-4Jaf0p22SygVmg722FOp4dkqHKlxYFoBRlvE05gmvEQ=",
     "description": "Microsoft Azure Command-Line Tools DnsResolverManagementClient Extension"
   },
   "durabletask": {
     "pname": "durabletask",
-    "version": "1.0.0b4",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/durabletask-1.0.0b4-py3-none-any.whl",
-    "hash": "sha256-L+gilyc4l/SbtEkXlmSuLfVvtolVJxO68Z/Ezl/YH1Y=",
+    "version": "1.0.0b5",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/durabletask-1.0.0b5-py3-none-any.whl",
+    "hash": "sha256-QO63iwBbXhiZU0YbvSDiMIM6xY3kvL0OYENKGRmHZT8=",
     "description": "Microsoft Azure Command-Line Tools Durabletask Extension"
   },
   "dynatrace": {
     "pname": "dynatrace",
-    "version": "1.1.1",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/dynatrace-1.1.1-py3-none-any.whl",
-    "hash": "sha256-uDqTcLrHCSrShT7CMl3GrMWLXjGGqvB2ofaLCrnyhvg=",
+    "version": "2.0.0",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/dynatrace-2.0.0-py3-none-any.whl",
+    "hash": "sha256-gS+82UbXH2fh7TrIsAxDqyaeM0iMwebt4v0ImJIs07Y=",
     "description": "Microsoft Azure Command-Line Tools Dynatrace Extension"
   },
   "edgeorder": {
@@ -456,9 +456,9 @@
   },
   "fleet": {
     "pname": "fleet",
-    "version": "1.8.1",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/fleet-1.8.1-py3-none-any.whl",
-    "hash": "sha256-842zQA4Jk0dp8jMCro5lut4Ro5u7ny1sp095uqXyR9k=",
+    "version": "1.8.2",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/fleet-1.8.2-py3-none-any.whl",
+    "hash": "sha256-3YRF7R7NB8zPonNcgv4Cfs3gk55pgTAbeo1tGOH6fsA=",
     "description": "Microsoft Azure Command-Line Tools Fleet Extension"
   },
   "fluid-relay": {
@@ -477,9 +477,9 @@
   },
   "front-door": {
     "pname": "front-door",
-    "version": "1.3.0",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/front_door-1.3.0-py3-none-any.whl",
-    "hash": "sha256-kJXpPk8IfhFbVbInxaBLq894/nzyxalvVZQkQ37PTRk=",
+    "version": "1.4.0",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/front_door-1.4.0-py3-none-any.whl",
+    "hash": "sha256-9chF08+QQe2WYR/vvifE9AzjYV4X26TweeGf2U5zcGA=",
     "description": "Manage networking Front Doors"
   },
   "fzf": {
@@ -974,9 +974,9 @@
   },
   "stack-hci-vm": {
     "pname": "stack-hci-vm",
-    "version": "1.10.4",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/stack_hci_vm-1.10.4-py3-none-any.whl",
-    "hash": "sha256-MjcpQ7a+5Rw6Z7MAVzoa/qT6HSX6uaV+kWoiMBhK/JM=",
+    "version": "1.11.1",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/stack_hci_vm-1.11.1-py3-none-any.whl",
+    "hash": "sha256-VMxvHxjPVpnUcLZRMUv8PR95lT490FPulbAXutW9pDo=",
     "description": "Microsoft Azure Command-Line Tools Stack-HCi-VM Extension"
   },
   "standbypool": {

pkgs/by-name/az/azure-cli/package.nix

@@ -26,14 +26,14 @@
 }:
 
 let
-  version = "2.79.0";
+  version = "2.80.0";
 
   src = fetchFromGitHub {
     name = "azure-cli-${version}-src";
     owner = "Azure";
     repo = "azure-cli";
     tag = "azure-cli-${version}";
-    hash = "sha256-VvCtHNMdfW/fFZlbu/7EHlSa6GtFZ0B9pdqQFjHdmXg=";
+    hash = "sha256-PIsOBltX2WBFCV4kdHkGPefBe/FGF9GQ5otXznE87aA=";
   };
 
   # put packages that needs to be overridden in the py package scope
@@ -160,6 +160,7 @@ py.pkgs.toPythonApplication (
       with py.pkgs;
       [
         antlr4-python3-runtime
+        azure-ai-projects
         azure-appconfiguration
         azure-batch
         azure-cli-core

pkgs/by-name/ba/baobab/package.nix

@@ -19,11 +19,11 @@
 
 stdenv.mkDerivation rec {
   pname = "baobab";
-  version = "49.0";
+  version = "49.1";
 
   src = fetchurl {
     url = "mirror://gnome/sources/baobab/${lib.versions.major version}/baobab-${version}.tar.xz";
-    hash = "sha256-GVwBgtxNf2lN0LTuNucuD0q3V4JfwjgjNAnuwt9IP64=";
+    hash = "sha256-YkPJIAK+fpH13s0klhL6zipKEtN0Kv2IsIapS4dd/+A=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/bo/bookstack/package.nix

@@ -8,16 +8,16 @@
 
 php83.buildComposerProject2 (finalAttrs: {
   pname = "bookstack";
-  version = "25.11.2";
+  version = "25.11.4";
 
   src = fetchFromGitHub {
     owner = "bookstackapp";
     repo = "bookstack";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-HHNiGnMVUtFWn2rexmbtbbKWtLs+og70sWYVtgw9Mas=";
+    hash = "sha256-Hyob7OF9AOsu4AjS6qu8A93AsumSXiyWPDKWGAz6mJ0=";
   };
 
-  vendorHash = "sha256-sqoUGv4+WMblJAW2iJ80v89+dkvAlaNiDaTSCWcavy8=";
+  vendorHash = "sha256-srlqwp0/Gfs6hWO9IGSCwR3yTxz+euYgoVkU+UnaLio=";
 
   passthru = {
     phpPackage = php83;

pkgs/by-name/ca/cargo-all-features/package.nix

@@ -6,11 +6,11 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "cargo-all-features";
-  version = "1.11.0";
+  version = "1.12.0";
 
   src = fetchCrate {
     inherit pname version;
-    hash = "sha256-pHwQq6/KGCIYm3Q63YbUit6yUjwEFnpBJCE6lpGBcZc=";
+    hash = "sha256-pD0lyI2zSOeEDk1Lch4Qf5mo8Z8Peiy2XF5iQ62vsaI=";
   };
 
   postPatch = ''
@@ -18,7 +18,7 @@ rustPlatform.buildRustPackage rec {
       --replace-fail 'cmd.env("RUSTFLAGS", "-Cinstrument-coverage");' '''
   '';
 
-  cargoHash = "sha256-tAwU7vJLp4KLzYAEbtSpNKbZBz+hBdAiIkUD/A5CpwI=";
+  cargoHash = "sha256-EKDeBib52Os1X3sgM9CtrNkl20l1Wn/cMBIBM1/KY5A=";
 
   meta = with lib; {
     description = "Cargo subcommand to build and test all feature flag combinations";

pkgs/by-name/ca/cargo-insta/package.nix

@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "cargo-insta";
-  version = "1.43.2";
+  version = "1.44.2";
 
   src = fetchFromGitHub {
     owner = "mitsuhiko";
     repo = "insta";
     tag = version;
-    hash = "sha256-+0FJr1IXTnIc947ytB00z30m81peY/CjnBHMYvcQZl0=";
+    hash = "sha256-Wi68dVKPsCCzt726N21pga73hW1WDDUtSv+o/sJMWpk=";
   };
 
-  cargoHash = "sha256-BYYn+GGJoI0W4mbQcKlQe5IOObIQrV8hTzJeRU6cIZo=";
+  cargoHash = "sha256-ks/icINVa7oVfK5yO8H0sUCRFWWzTwURHVALUVZ8uw0=";
 
   checkFlags = [
     # Depends on `rustfmt` and does not matter for packaging.

pkgs/by-name/ca/cargo-shear/package.nix

@@ -8,15 +8,15 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-shear";
-  version = "1.6.3";
+  version = "1.6.6";
 
   src = fetchCrate {
     pname = "cargo-shear";
     version = finalAttrs.version;
-    hash = "sha256-8aRIDzMaVbu0oKU1Ufig3rBj/X8P/DPzUdrTfA77z0w=";
+    hash = "sha256-cLUR3q5/wBWI9eeDjpKtO1/mJZwgRA79iQ0tyRICX7A=";
   };
 
-  cargoHash = "sha256-A29u5ZI6zKUuBtpEEVkM4dVbTqETZlK8f33MG8V1SwE=";
+  cargoHash = "sha256-BiGNZJw0H2I4j8wtoI67iR7n/vns1gwBxeE1eXeESn0=";
 
   env = {
     # https://github.com/Boshen/cargo-shear/blob/v1.6.2/src/lib.rs#L51-L54

pkgs/by-name/ci/cilium-cli/package.nix

@@ -54,7 +54,6 @@ buildGoModule rec {
     changelog = "https://github.com/cilium/cilium-cli/releases/tag/v${version}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [
-      bryanasdev000
       humancalico
       qjoly
       ryan4yin

pkgs/by-name/cl/claude-code-acp/package.nix

@@ -6,16 +6,16 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "claude-code-acp";
-  version = "0.10.6";
+  version = "0.10.8";
 
   src = fetchFromGitHub {
     owner = "zed-industries";
     repo = "claude-code-acp";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-sq4m4w8ZmgU7Quel5gUwmvq0rumo+G1SkCt7fQsg+8M=";
+    hash = "sha256-eQhUXdYynBCv/6P60JRo43MDpWEPdIdEEQnFeY9AnhA=";
   };
 
-  npmDepsHash = "sha256-ElxSaU74txRC/eH7S+Uv33Ji7y2HE6rZU2DmEPICTko=";
+  npmDepsHash = "sha256-dzgqmJPU3hIcQag+PnS1n8U05Mx+WN27d1Hwyy7CdZo=";
 
   meta = {
     description = "ACP-compatible coding agent powered by the Claude Code SDK";

pkgs/by-name/cl/claude-code/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@anthropic-ai/claude-code",
-  "version": "2.0.54",
+  "version": "2.0.55",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@anthropic-ai/claude-code",
-      "version": "2.0.54",
+      "version": "2.0.55",
       "license": "SEE LICENSE IN README.md",
       "bin": {
         "claude": "cli.js"

pkgs/by-name/cl/claude-code/package.nix

@@ -11,14 +11,14 @@ buildNpmPackage (finalAttrs: {
   # ```sh
   # nix-shell maintainers/scripts/update.nix --argstr commit true --argstr package vscode-extensions.anthropic.claude-code && nix-shell maintainers/scripts/update.nix --argstr commit true --argstr package claude-code
   # ```
-  version = "2.0.54";
+  version = "2.0.55";
 
   src = fetchzip {
     url = "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-${finalAttrs.version}.tgz";
-    hash = "sha256-EVZueeW1MewYmQSHp4flcShqHy5H0S4gET3XtK+ttQA=";
+    hash = "sha256-wsjOkNxuBLMYprjaZQyUZHiqWl8UG7cZ1njkyKZpRYg=";
   };
 
-  npmDepsHash = "sha256-W4ApfnOiqGqO3nVWm23g9QOew0CmSVsvjFRPWs7wKXw=";
+  npmDepsHash = "sha256-k7sCE3dyHz69qlxxrX+lnPuJUf8w/FAAUQtFuEdlTqA=";
 
   postPatch = ''
     cp ${./package-lock.json} package-lock.json

pkgs/by-name/cl/clive/package.nix

@@ -11,16 +11,16 @@
 }:
 buildGoModule rec {
   pname = "clive";
-  version = "0.12.12";
+  version = "0.12.15";
 
   src = fetchFromGitHub {
     owner = "koki-develop";
     repo = "clive";
     tag = "v${version}";
-    hash = "sha256-gycxHlNbwPLpR/ATxAsQ68Fetp/hptOUsRc+D3P7x1k=";
+    hash = "sha256-WOcqcyhyv72tNmm7mETjboStesfFfVVAmN2ZdLFd1Uc=";
   };
 
-  vendorHash = "sha256-S2MR3eDfAiEz7boUetdPmOf0rQe7QrV6yO1RfMAEj4o=";
+  vendorHash = "sha256-QfHCrou7Lr1CrRQqvLEnWTtQk8aDigkm4SBArLjMkyo=";
   subPackages = [ "." ];
   buildInputs = [ ttyd ];
   nativeBuildInputs = [

pkgs/by-name/cl/cljfmt/package.nix

@@ -8,11 +8,11 @@
 
 buildGraalvmNativeImage (finalAttrs: {
   pname = "cljfmt";
-  version = "0.15.3";
+  version = "0.15.6";
 
   src = fetchurl {
     url = "https://github.com/weavejester/cljfmt/releases/download/${finalAttrs.version}/cljfmt-${finalAttrs.version}-standalone.jar";
-    hash = "sha256-DlPnni5p0zdauAtBEoCrh6S/STT8nvZJAJ90VjXlZLA=";
+    hash = "sha256-/ihm/b/B9cSay2Zgshie7D0KwaKuIjiNI5FOnWOHfOw=";
   };
 
   extraNativeImageBuildArgs = [

pkgs/by-name/co/coc-rust-analyzer/package.nix

@@ -7,13 +7,13 @@
 
 buildNpmPackage {
   pname = "coc-rust-analyzer";
-  version = "0-unstable-2025-11-01";
+  version = "0-unstable-2025-11-25";
 
   src = fetchFromGitHub {
     owner = "fannheyward";
     repo = "coc-rust-analyzer";
-    rev = "6cc74fcaed6b011b98e9f8483fb608dff53147be";
-    hash = "sha256-2XSx4eR9GgMbWY+IOEKuhCAVesxoZbh/KsLr0It0Cks=";
+    rev = "8bd84ab1c2b436a2e9fadf059b5785f43e877c1e";
+    hash = "sha256-R9IQuoNGCqodbAkPnQLHi8sPzXvT3x+K9mt7apywips=";
   };
 
   npmDepsHash = "sha256-94kuqDNsCcPuvTVeprEdjNOPw8pdpDp3IOvuoKdSEgU=";

pkgs/by-name/co/containerd/package.nix

@@ -31,7 +31,15 @@ buildGoModule rec {
     hash = "sha256-LXBGA03FTrrbxlH+DxPBFtp3/AYQf096YE2rpe6A+WM=";
   };
 
-  postPatch = "patchShebangs .";
+  postPatch = ''
+    patchShebangs .
+  ''
+  + lib.optionalString (!stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
+    # When cross-compiling with CGO_ENABLED=0, we can't use -extldflags "-static"
+    # Remove it from SHIM_GO_LDFLAGS to avoid linking errors
+    substituteInPlace Makefile \
+      --replace-fail '-extldflags "-static"' ""
+  '';
 
   vendorHash = null;
 

pkgs/by-name/co/corosync-qdevice/package.nix

@@ -0,0 +1,65 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  autoreconfHook,
+  pkg-config,
+  corosync,
+  libqb,
+  nss,
+  nspr,
+  systemd,
+  versionCheckHook,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "corosync-qdevice";
+  version = "3.0.4";
+
+  src = fetchFromGitHub {
+    owner = "corosync";
+    repo = "corosync-qdevice";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-JJYD1owtTtXW2yTZNhponzd6Sbj6zjfhein20m/7DQw=";
+  };
+
+  nativeBuildInputs = [
+    autoreconfHook
+    pkg-config
+  ];
+
+  buildInputs = [
+    corosync
+    libqb
+    nss
+    nspr
+    systemd
+  ];
+
+  configureFlags = [
+    "--sysconfdir=/etc"
+    "--localstatedir=/var"
+    "--enable-systemd"
+  ];
+
+  installFlags = [
+    "sysconfdir=$(out)/etc"
+    "localstatedir=$(out)/var"
+    "COROSYSCONFDIR=$(out)/etc/corosync"
+  ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgram = "${placeholder "out"}/bin/corosync-qnetd";
+  versionCheckProgramArg = "-v";
+  doInstallCheck = true;
+
+  meta = {
+    description = "Corosync Cluster Engine Qdevice";
+    homepage = "https://github.com/corosync/corosync-qdevice";
+    changelog = "https://github.com/corosync/corosync-qdevice/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ x123 ];
+    mainProgram = "corosync-qdevice";
+    platforms = lib.platforms.linux;
+  };
+})

pkgs/by-name/co/cosmic-ext-calculator/package.nix

@@ -8,21 +8,31 @@
   rustPlatform,
   fetchFromGitHub,
   libcosmicAppHook,
+  libqalculate,
   just,
   nix-update-script,
+  fetchpatch,
 }:
 rustPlatform.buildRustPackage rec {
   pname = "cosmic-ext-calculator";
-  version = "0.1.1";
+  version = "0.2.0";
 
   src = fetchFromGitHub {
     owner = "cosmic-utils";
     repo = "calculator";
     tag = version;
-    hash = "sha256-UO3JKPsztptNEFAxolRui9FxtCsTRgpXhHH242i9b6E=";
+    hash = "sha256-qPo+Qi6P0m3rNA6Qo6iNsgzGyirPqzXk4nj3OG6IuZ0=";
   };
 
-  cargoHash = "sha256-a4IOmCWKX8RR8xeKS6wdsTlNyTr91B93bYMDx/+/+04=";
+  cargoHash = "sha256-Pq1E4O6lZMe+wKJgQKDBmgdsJJsJTyK0FDXU53n+Di4=";
+
+  # TODO: Remove in the next release
+  patches = [
+    (fetchpatch {
+      url = "https://github.com/cosmic-utils/calculator/commit/fc176a8d5d8af7fd808d450a78635432db6b64e6.patch";
+      hash = "sha256-amSB+67rwCUqfqOTFGCkInvoZmA//wAR0viuvNdPkuc=";
+    })
+  ];
 
   nativeBuildInputs = [
     libcosmicAppHook
@@ -41,6 +51,12 @@ rustPlatform.buildRustPackage rec {
     "target/${stdenv.hostPlatform.rust.cargoShortTarget}/release/cosmic-ext-calculator"
   ];
 
+  preFixup = ''
+    libcosmicAppWrapperArgs+=(
+      --prefix PATH : ${lib.makeBinPath [ libqalculate ]}
+    )
+  '';
+
   passthru.updateScript = nix-update-script { };
 
   meta = {

pkgs/by-name/co/cosmic-settings/package.nix

@@ -15,7 +15,6 @@
   pipewire,
   pulseaudio,
   udev,
-  util-linux,
   cosmic-randr,
   xkeyboard_config,
   nix-update-script,
@@ -46,7 +45,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
     libcosmicAppHook'
     pkg-config
     rustPlatform.bindgenHook
-    util-linux
   ];
 
   buildInputs = [

pkgs/by-name/cr/crosvm/package.nix

@@ -21,12 +21,12 @@
 
 rustPlatform.buildRustPackage {
   pname = "crosvm";
-  version = "0-unstable-2025-11-19";
+  version = "0-unstable-2025-11-24";
 
   src = fetchgit {
     url = "https://chromium.googlesource.com/chromiumos/platform/crosvm";
-    rev = "470e07c23ea9f76fcbc922b03465be2d0d28e2ce";
-    hash = "sha256-/1B2ddxrefjoVUCir051vblftZAluCc80yY+StpFHXI=";
+    rev = "18bc84d003e04108d973a5233f0c6f3b2039d756";
+    hash = "sha256-7nm9QSmDkiUoTMcM1oMK1/QwSAnLAgvuYPoxTaJWMpQ=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/cr/crush/package.nix

@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "crush";
-  version = "0.18.3";
+  version = "0.18.6";
 
   src = fetchFromGitHub {
     owner = "charmbracelet";
     repo = "crush";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BTD+03LG+Y7pMw9P2nB52qtLK0QSQEurbTr+2vT0QmM=";
+    hash = "sha256-J6C/aV+VOAZXDC5dTZl7CkLvxk8IOjbWfJkHEJj29Dg=";
   };
 
-  vendorHash = "sha256-6/DvpfhW1Lk3SP7umOxeWBJhUtX1ay7pkG5Ys8M9xM4=";
+  vendorHash = "sha256-LhmkdwBRO0pW2mk7fB/rZMxZe6M0TEfReHJ+NxAPHR0=";
 
   ldflags = [
     "-s"

pkgs/by-name/cs/cspell/inject-workplace-deps.patch

@@ -1,799 +0,0 @@
-diff --git i/.npmrc w/.npmrc
-index 7b6aac5399..e5fe8dfea0 100644
---- i/.npmrc
-+++ w/.npmrc
-@@ -2,3 +2,4 @@ auto-install-peers=true
- strict-peer-dependencies=false
- save-workspace-protocol=rolling
- node-linker=isolated
-+inject-workspace-packages=true
-diff --git i/pnpm-lock.yaml w/pnpm-lock.yaml
-index ca893d48d9..4e81b2eb2f 100644
---- i/pnpm-lock.yaml
-+++ w/pnpm-lock.yaml
-@@ -3,6 +3,7 @@ lockfileVersion: '9.0'
- settings:
-   autoInstallPeers: true
-   excludeLinksFromLockfile: false
-+  injectWorkspacePackages: true
- 
- importers:
- 
-@@ -590,7 +591,7 @@ importers:
-     devDependencies:
-       '@cspell/eslint-plugin':
-         specifier: workspace:*
--        version: link:../..
-+        version: file:packages/cspell-eslint-plugin(eslint@8.57.1)
-       es-toolkit:
-         specifier: ^1.39.10
-         version: 1.39.10
-@@ -1073,7 +1074,7 @@ importers:
-     devDependencies:
-       '@cspell/eslint-plugin':
-         specifier: workspace:*
--        version: link:../../../packages/cspell-eslint-plugin
-+        version: file:packages/cspell-eslint-plugin(eslint@9.8.0)
-       '@eslint/js':
-         specifier: ^9.34.0
-         version: 9.34.0
-@@ -2091,6 +2092,10 @@ packages:
-     resolution: {integrity: sha512-2ZRcZP/ncJ5q953o8i+R0fb8+14PDt5UefUNMrFZZHvfTI0jukAASOQeLY+WT6ASZv6CgbPrApAdbppy9FaXYQ==}
-     engines: {node: '>=18'}
- 
-+  '@cspell/cspell-bundled-dicts@file:packages/cspell-bundled-dicts':
-+    resolution: {directory: packages/cspell-bundled-dicts, type: directory}
-+    engines: {node: '>=20'}
-+
-   '@cspell/cspell-json-reporter@8.19.4':
-     resolution: {integrity: sha512-pOlUtLUmuDdTIOhDTvWxxta0Wm8RCD/p1V0qUqeP6/Ups1ajBI4FWEpRFd7yMBTUHeGeSNicJX5XeX7wNbAbLQ==}
-     engines: {node: '>=18'}
-@@ -2099,18 +2104,34 @@ packages:
-     resolution: {integrity: sha512-GNAyk+7ZLEcL2fCMT5KKZprcdsq3L1eYy3e38/tIeXfbZS7Sd1R5FXUe6CHXphVWTItV39TvtLiDwN/2jBts9A==}
-     engines: {node: '>=18'}
- 
-+  '@cspell/cspell-pipe@file:packages/cspell-pipe':
-+    resolution: {directory: packages/cspell-pipe, type: directory}
-+    engines: {node: '>=20'}
-+
-   '@cspell/cspell-resolver@8.19.4':
-     resolution: {integrity: sha512-S8vJMYlsx0S1D60glX8H2Jbj4mD8519VjyY8lu3fnhjxfsl2bDFZvF3ZHKsLEhBE+Wh87uLqJDUJQiYmevHjDg==}
-     engines: {node: '>=18'}
- 
-+  '@cspell/cspell-resolver@file:packages/cspell-resolver':
-+    resolution: {directory: packages/cspell-resolver, type: directory}
-+    engines: {node: '>=20'}
-+
-   '@cspell/cspell-service-bus@8.19.4':
-     resolution: {integrity: sha512-uhY+v8z5JiUogizXW2Ft/gQf3eWrh5P9036jN2Dm0UiwEopG/PLshHcDjRDUiPdlihvA0RovrF0wDh4ptcrjuQ==}
-     engines: {node: '>=18'}
- 
-+  '@cspell/cspell-service-bus@file:packages/cspell-service-bus':
-+    resolution: {directory: packages/cspell-service-bus, type: directory}
-+    engines: {node: '>=20'}
-+
-   '@cspell/cspell-types@8.19.4':
-     resolution: {integrity: sha512-ekMWuNlFiVGfsKhfj4nmc8JCA+1ZltwJgxiKgDuwYtR09ie340RfXFF6YRd2VTW5zN7l4F1PfaAaPklVz6utSg==}
-     engines: {node: '>=18'}
- 
-+  '@cspell/cspell-types@file:packages/cspell-types':
-+    resolution: {directory: packages/cspell-types, type: directory}
-+    engines: {node: '>=20'}
-+
-   '@cspell/dict-ada@4.1.1':
-     resolution: {integrity: sha512-E+0YW9RhZod/9Qy2gxfNZiHJjCYFlCdI69br1eviQQWB8yOTJX0JHXLs79kOYhSW0kINPVUdvddEBe6Lu6CjGQ==}
- 
-@@ -2321,18 +2342,40 @@ packages:
-     resolution: {integrity: sha512-0LLghC64+SiwQS20Sa0VfFUBPVia1rNyo0bYeIDoB34AA3qwguDBVJJkthkpmaP1R2JeR/VmxmJowuARc4ZUxA==}
-     engines: {node: '>=18.0'}
- 
-+  '@cspell/dynamic-import@file:packages/dynamic-import':
-+    resolution: {directory: packages/dynamic-import, type: directory}
-+    engines: {node: '>=20'}
-+
-+  '@cspell/eslint-plugin@file:packages/cspell-eslint-plugin':
-+    resolution: {directory: packages/cspell-eslint-plugin, type: directory}
-+    engines: {node: '>=20'}
-+    peerDependencies:
-+      eslint: ^7 || ^8 || ^9
-+
-   '@cspell/filetypes@8.19.4':
-     resolution: {integrity: sha512-D9hOCMyfKtKjjqQJB8F80PWsjCZhVGCGUMiDoQpcta0e+Zl8vHgzwaC0Ai4QUGBhwYEawHGiWUd7Y05u/WXiNQ==}
-     engines: {node: '>=18'}
- 
-+  '@cspell/filetypes@file:packages/cspell-filetypes':
-+    resolution: {directory: packages/cspell-filetypes, type: directory}
-+    engines: {node: '>=20'}
-+
-   '@cspell/strong-weak-map@8.19.4':
-     resolution: {integrity: sha512-MUfFaYD8YqVe32SQaYLI24/bNzaoyhdBIFY5pVrvMo1ZCvMl8AlfI2OcBXvcGb5aS5z7sCNCJm11UuoYbLI1zw==}
-     engines: {node: '>=18'}
- 
-+  '@cspell/strong-weak-map@file:packages/cspell-strong-weak-map':
-+    resolution: {directory: packages/cspell-strong-weak-map, type: directory}
-+    engines: {node: '>=20'}
-+
-   '@cspell/url@8.19.4':
-     resolution: {integrity: sha512-Pa474iBxS+lxsAL4XkETPGIq3EgMLCEb9agj3hAd2VGMTCApaiUvamR4b+uGXIPybN70piFxvzrfoxsG2uIP6A==}
-     engines: {node: '>=18.0'}
- 
-+  '@cspell/url@file:packages/cspell-url':
-+    resolution: {directory: packages/cspell-url, type: directory}
-+    engines: {node: '>=20'}
-+
-   '@cspotcode/source-map-support@0.8.1':
-     resolution: {integrity: sha512-IchNf6dN4tHoMFIn/7OE8LWZ19Y6q/67Bmf6vnGREv8RSbBVb9LPJxEcnwrcwX6ixSvaiGoomAUvu4YSxXrVgw==}
-     engines: {node: '>=12'}
-@@ -3254,6 +3297,9 @@ packages:
-   '@napi-rs/wasm-runtime@1.0.3':
-     resolution: {integrity: sha512-rZxtMsLwjdXkMUGC3WwsPwLNVqVqnTJT6MNIB6e+5fhMcSCPP0AOsNWuMQ5mdCq6HNjs/ZeWAEchpqeprqBD2Q==}
- 
-+  '@napi-rs/wasm-runtime@1.0.5':
-+    resolution: {integrity: sha512-TBr9Cf9onSAS2LQ2+QHx6XcC6h9+RIzJgbqG3++9TUZSH204AwEy5jg3BTQ0VATsyoGj4ee49tN/y6rvaOOtcg==}
-+
-   '@nodelib/fs.scandir@2.1.5':
-     resolution: {integrity: sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==}
-     engines: {node: '>= 8'}
-@@ -3407,12 +3453,8 @@ packages:
-   '@octokit/types@14.1.0':
-     resolution: {integrity: sha512-1y6DgTy8Jomcpu33N+p5w58l6xyt55Ar2I91RPiIA0xCJBXyUAhXCcmZaDWSANiha7R9a6qJJ2CRomGPZ6f46g==}
- 
--  '@oxc-project/runtime@0.82.3':
--    resolution: {integrity: sha512-LNh5GlJvYHAnMurO+EyA8jJwN1rki7l3PSHuosDh2I7h00T6/u9rCkUjg/SvPmT1CZzvhuW0y+gf7jcqUy/Usg==}
--    engines: {node: '>=6.9.0'}
--
--  '@oxc-project/types@0.82.3':
--    resolution: {integrity: sha512-6nCUxBnGX0c6qfZW5MaF6/fmu5dHJDMiMPaioKHKs5mi5+8/FHQ7WGjgQIz1zxpmceMYfdIXkOaLYE+ejbuOtA==}
-+  '@oxc-project/types@0.93.0':
-+    resolution: {integrity: sha512-yNtwmWZIBtJsMr5TEfoZFDxIWV6OdScOpza/f5YxbqUMJk+j6QX3Cf3jgZShGEFYWQJ5j9mJ6jM0tZHu2J9Yrg==}
- 
-   '@oxc-resolver/binding-android-arm-eabi@11.7.1':
-     resolution: {integrity: sha512-K0gF1mD6CYMAuX0dMWe6XW1Js00xCOBh/+ZAAJReQMa4+jmAk3bIeitsc8VnDthDbzOOKp3riizP3o/tBvNpgw==}
-@@ -3535,78 +3577,91 @@ packages:
-   '@quansync/fs@0.1.5':
-     resolution: {integrity: sha512-lNS9hL2aS2NZgNW7BBj+6EBl4rOf8l+tQ0eRY6JWCI8jI2kc53gSoqbjojU0OnAWhzoXiOjFyGsHcDGePB3lhA==}
- 
--  '@rolldown/binding-android-arm64@1.0.0-beta.34':
--    resolution: {integrity: sha512-jf5GNe5jP3Sr1Tih0WKvg2bzvh5T/1TA0fn1u32xSH7ca/p5t+/QRr4VRFCV/na5vjwKEhwWrChsL2AWlY+eoA==}
-+  '@rolldown/binding-android-arm64@1.0.0-beta.41':
-+    resolution: {integrity: sha512-Edflndd9lU7JVhVIvJlZhdCj5DkhYDJPIRn4Dx0RUdfc8asP9xHOI5gMd8MesDDx+BJpdIT/uAmVTearteU/mQ==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     cpu: [arm64]
-     os: [android]
- 
--  '@rolldown/binding-darwin-arm64@1.0.0-beta.34':
--    resolution: {integrity: sha512-2F/TqH4QuJQ34tgWxqBjFL3XV1gMzeQgUO8YRtCPGBSP0GhxtoFzsp7KqmQEothsxztlv+KhhT9Dbg3HHwHViQ==}
-+  '@rolldown/binding-darwin-arm64@1.0.0-beta.41':
-+    resolution: {integrity: sha512-XGCzqfjdk7550PlyZRTBKbypXrB7ATtXhw/+bjtxnklLQs0mKP/XkQVOKyn9qGKSlvH8I56JLYryVxl0PCvSNw==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     cpu: [arm64]
-     os: [darwin]
- 
--  '@rolldown/binding-darwin-x64@1.0.0-beta.34':
--    resolution: {integrity: sha512-E1QuFslgLWbHQ8Qli/AqUKdfg0pockQPwRxVbhNQ74SciZEZpzLaujkdmOLSccMlSXDfFCF8RPnMoRAzQ9JV8Q==}
-+  '@rolldown/binding-darwin-x64@1.0.0-beta.41':
-+    resolution: {integrity: sha512-Ho6lIwGJed98zub7n0xcRKuEtnZgbxevAmO4x3zn3C3N4GVXZD5xvCvTVxSMoeBJwTcIYzkVDRTIhylQNsTgLQ==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     cpu: [x64]
-     os: [darwin]
- 
--  '@rolldown/binding-freebsd-x64@1.0.0-beta.34':
--    resolution: {integrity: sha512-VS8VInNCwnkpI9WeQaWu3kVBq9ty6g7KrHdLxYMzeqz24+w9hg712TcWdqzdY6sn+24lUoMD9jTZrZ/qfVpk0g==}
-+  '@rolldown/binding-freebsd-x64@1.0.0-beta.41':
-+    resolution: {integrity: sha512-ijAZETywvL+gACjbT4zBnCp5ez1JhTRs6OxRN4J+D6AzDRbU2zb01Esl51RP5/8ZOlvB37xxsRQ3X4YRVyYb3g==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     cpu: [x64]
-     os: [freebsd]
- 
--  '@rolldown/binding-linux-arm-gnueabihf@1.0.0-beta.34':
--    resolution: {integrity: sha512-4St4emjcnULnxJYb/5ZDrH/kK/j6PcUgc3eAqH5STmTrcF+I9m/X2xvSF2a2bWv1DOQhxBewThu0KkwGHdgu5w==}
-+  '@rolldown/binding-linux-arm-gnueabihf@1.0.0-beta.41':
-+    resolution: {integrity: sha512-EgIOZt7UildXKFEFvaiLNBXm+4ggQyGe3E5Z1QP9uRcJJs9omihOnm897FwOBQdCuMvI49iBgjFrkhH+wMJ2MA==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     cpu: [arm]
-     os: [linux]
- 
--  '@rolldown/binding-linux-arm64-gnu@1.0.0-beta.34':
--    resolution: {integrity: sha512-a737FTqhFUoWfnebS2SnQ2BS50p0JdukdkUBwy2J06j4hZ6Eej0zEB8vTfAqoCjn8BQKkXBy+3Sx0IRkgwz1gA==}
-+  '@rolldown/binding-linux-arm64-gnu@1.0.0-beta.41':
-+    resolution: {integrity: sha512-F8bUwJq8v/JAU8HSwgF4dztoqJ+FjdyjuvX4//3+Fbe2we9UktFeZ27U4lRMXF1vxWtdV4ey6oCSqI7yUrSEeg==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     cpu: [arm64]
-     os: [linux]
- 
--  '@rolldown/binding-linux-arm64-musl@1.0.0-beta.34':
--    resolution: {integrity: sha512-NH+FeQWKyuw0k+PbXqpFWNfvD8RPvfJk766B/njdaWz4TmiEcSB0Nb6guNw1rBpM1FmltQYb3fFnTumtC6pRfA==}
-+  '@rolldown/binding-linux-arm64-musl@1.0.0-beta.41':
-+    resolution: {integrity: sha512-MioXcCIX/wB1pBnBoJx8q4OGucUAfC1+/X1ilKFsjDK05VwbLZGRgOVD5OJJpUQPK86DhQciNBrfOKDiatxNmg==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     cpu: [arm64]
-     os: [linux]
- 
--  '@rolldown/binding-linux-x64-gnu@1.0.0-beta.34':
--    resolution: {integrity: sha512-Q3RSCivp8pNadYK8ke3hLnQk08BkpZX9BmMjgwae2FWzdxhxxUiUzd9By7kneUL0vRQ4uRnhD9VkFQ+Haeqdvw==}
-+  '@rolldown/binding-linux-x64-gnu@1.0.0-beta.41':
-+    resolution: {integrity: sha512-m66M61fizvRCwt5pOEiZQMiwBL9/y0bwU/+Kc4Ce/Pef6YfoEkR28y+DzN9rMdjo8Z28NXjsDPq9nH4mXnAP0g==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     cpu: [x64]
-     os: [linux]
- 
--  '@rolldown/binding-linux-x64-musl@1.0.0-beta.34':
--    resolution: {integrity: sha512-wDd/HrNcVoBhWWBUW3evJHoo7GJE/RofssBy3Dsiip05YUBmokQVrYAyrboOY4dzs/lJ7HYeBtWQ9hj8wlyF0A==}
-+  '@rolldown/binding-linux-x64-musl@1.0.0-beta.41':
-+    resolution: {integrity: sha512-yRxlSfBvWnnfrdtJfvi9lg8xfG5mPuyoSHm0X01oiE8ArmLRvoJGHUTJydCYz+wbK2esbq5J4B4Tq9WAsOlP1Q==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     cpu: [x64]
-     os: [linux]
- 
--  '@rolldown/binding-openharmony-arm64@1.0.0-beta.34':
--    resolution: {integrity: sha512-dH3FTEV6KTNWpYSgjSXZzeX7vLty9oBYn6R3laEdhwZftQwq030LKL+5wyQdlbX5pnbh4h127hpv3Hl1+sj8dg==}
-+  '@rolldown/binding-openharmony-arm64@1.0.0-beta.41':
-+    resolution: {integrity: sha512-PHVxYhBpi8UViS3/hcvQQb9RFqCtvFmFU1PvUoTRiUdBtgHA6fONNHU4x796lgzNlVSD3DO/MZNk1s5/ozSMQg==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     cpu: [arm64]
-     os: [openharmony]
- 
--  '@rolldown/binding-wasm32-wasi@1.0.0-beta.34':
--    resolution: {integrity: sha512-y5BUf+QtO0JsIDKA51FcGwvhJmv89BYjUl8AmN7jqD6k/eU55mH6RJYnxwCsODq5m7KSSTigVb6O7/GqB8wbPw==}
-+  '@rolldown/binding-wasm32-wasi@1.0.0-beta.41':
-+    resolution: {integrity: sha512-OAfcO37ME6GGWmj9qTaDT7jY4rM0T2z0/8ujdQIJQ2x2nl+ztO32EIwURfmXOK0U1tzkyuaKYvE34Pug/ucXlQ==}
-     engines: {node: '>=14.0.0'}
-     cpu: [wasm32]
- 
--  '@rolldown/binding-win32-arm64-msvc@1.0.0-beta.34':
--    resolution: {integrity: sha512-ga5hFhdTwpaNxEiuxZHWnD3ed0GBAzbgzS5tRHpe0ObptxM1a9Xrq6TVfNQirBLwb5Y7T/FJmJi3pmdLy95ljg==}
-+  '@rolldown/binding-win32-arm64-msvc@1.0.0-beta.41':
-+    resolution: {integrity: sha512-NIYGuCcuXaq5BC4Q3upbiMBvmZsTsEPG9k/8QKQdmrch+ocSy5Jv9tdpdmXJyighKqm182nh/zBt+tSJkYoNlg==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     cpu: [arm64]
-     os: [win32]
- 
--  '@rolldown/binding-win32-ia32-msvc@1.0.0-beta.34':
--    resolution: {integrity: sha512-4/MBp9T9eRnZskxWr8EXD/xHvLhdjWaeX/qY9LPRG1JdCGV3DphkLTy5AWwIQ5jhAy2ZNJR5z2fYRlpWU0sIyQ==}
-+  '@rolldown/binding-win32-ia32-msvc@1.0.0-beta.41':
-+    resolution: {integrity: sha512-kANdsDbE5FkEOb5NrCGBJBCaZ2Sabp3D7d4PRqMYJqyLljwh9mDyYyYSv5+QNvdAmifj+f3lviNEUUuUZPEFPw==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     cpu: [ia32]
-     os: [win32]
- 
--  '@rolldown/binding-win32-x64-msvc@1.0.0-beta.34':
--    resolution: {integrity: sha512-7O5iUBX6HSBKlQU4WykpUoEmb0wQmonb6ziKFr3dJTHud2kzDnWMqk344T0qm3uGv9Ddq6Re/94pInxo1G2d4w==}
-+  '@rolldown/binding-win32-x64-msvc@1.0.0-beta.41':
-+    resolution: {integrity: sha512-UlpxKmFdik0Y2VjZrgUCgoYArZJiZllXgIipdBRV1hw6uK45UbQabSTW6Kp6enuOu7vouYWftwhuxfpE8J2JAg==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     cpu: [x64]
-     os: [win32]
- 
--  '@rolldown/pluginutils@1.0.0-beta.34':
--    resolution: {integrity: sha512-LyAREkZHP5pMom7c24meKmJCdhf2hEyvam2q0unr3or9ydwDL+DJ8chTF6Av/RFPb3rH8UFBdMzO5MxTZW97oA==}
-+  '@rolldown/pluginutils@1.0.0-beta.41':
-+    resolution: {integrity: sha512-ycMEPrS3StOIeb87BT3/+bu+blEtyvwQ4zmo2IcJQy0Rd1DAAhKksA0iUZ3MYSpJtjlPhg0Eo6mvVS6ggPhRbw==}
- 
-   '@rollup/plugin-alias@5.1.1':
-     resolution: {integrity: sha512-PR9zDb+rOzkRb2VD+EuKB7UC41vU5DIwZ5qqCpk0KJudcWAyi8rvYOhS7+L5aZCspw1stTViLgN5v6FF1p5cgQ==}
-@@ -4091,6 +4146,9 @@ packages:
-   '@tybys/wasm-util@0.10.0':
-     resolution: {integrity: sha512-VyyPYFlOMNylG45GoAe0xDoLwWuowvf92F9kySqzYh8vmYm7D2u4iUJKa1tOUpS70Ku13ASrOkS4ScXFsTaCNQ==}
- 
-+  '@tybys/wasm-util@0.10.1':
-+    resolution: {integrity: sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg==}
-+
-   '@types/body-parser@1.19.6':
-     resolution: {integrity: sha512-HLFeCYgz89uk22N5Qg3dvGvsv46B8GLvKKo1zKG4NybA8U2DiEO3w9lqGg29t/tfLRJpJ6iQxnVw4OnB7MoM9g==}
- 
-@@ -4582,6 +4640,10 @@ packages:
-     resolution: {integrity: sha512-BGcItUBWSMRgOCe+SVZJ+S7yTRG0eGt9cXAHev72yuGcY23hnLA7Bky5L/xLyPINoSN95geovfBkqoTlNZYa7w==}
-     engines: {node: '>=14'}
- 
-+  ansis@4.2.0:
-+    resolution: {integrity: sha512-HqZ5rWlFjGiV0tDm3UxxgNRqsOTniqoKZu0pIAfh7TZQMGuZK+hH0drySty0si0QXj1ieop4+SkSfPZBPPkHig==}
-+    engines: {node: '>=14'}
-+
-   any-promise@1.3.0:
-     resolution: {integrity: sha512-7UvmKalWRt1wgjL1RrGxoSJW/0QZFIegpeGvZG9kjp8vrRu55XTHbwnqq2GpXm9uLbcuhxm3IqX9OB4MZR1b2A==}
- 
-@@ -5257,6 +5319,10 @@ packages:
-     resolution: {integrity: sha512-LtFNZEWVrnpjiTNgEDsVN05UqhhJ1iA0HnTv4jsascPehlaUYVoyucgNbFeRs6UMaClJnqR0qT9lnPX+KO1OLg==}
-     engines: {node: '>=18'}
- 
-+  cspell-config-lib@file:packages/cspell-config-lib:
-+    resolution: {directory: packages/cspell-config-lib, type: directory}
-+    engines: {node: '>=20'}
-+
-   cspell-dict-nl-nl@1.1.2:
-     resolution: {integrity: sha512-dwf5NgXQxLpuZysjTO9sM0fgoOTVL30CzG+4S0xYrbP1culdlaNejEPpzqoS30FRdIBroJmTIZ+hfB+tD6Fhmg==}
-     hasBin: true
-@@ -5265,6 +5331,10 @@ packages:
-     resolution: {integrity: sha512-lr8uIm7Wub8ToRXO9f6f7in429P1Egm3I+Ps3ZGfWpwLTCUBnHvJdNF/kQqF7PL0Lw6acXcjVWFYT7l2Wdst2g==}
-     engines: {node: '>=18'}
- 
-+  cspell-dictionary@file:packages/cspell-dictionary:
-+    resolution: {directory: packages/cspell-dictionary, type: directory}
-+    engines: {node: '>=20'}
-+
-   cspell-gitignore@8.19.4:
-     resolution: {integrity: sha512-KrViypPilNUHWZkMV0SM8P9EQVIyH8HvUqFscI7+cyzWnlglvzqDdV4N5f+Ax5mK+IqR6rTEX8JZbCwIWWV7og==}
-     engines: {node: '>=18'}
-@@ -5274,23 +5344,44 @@ packages:
-     resolution: {integrity: sha512-042uDU+RjAz882w+DXKuYxI2rrgVPfRQDYvIQvUrY1hexH4sHbne78+OMlFjjzOCEAgyjnm1ktWUCCmh08pQUw==}
-     engines: {node: '>=18'}
- 
-+  cspell-glob@file:packages/cspell-glob:
-+    resolution: {directory: packages/cspell-glob, type: directory}
-+    engines: {node: '>=20'}
-+
-   cspell-grammar@8.19.4:
-     resolution: {integrity: sha512-lzWgZYTu/L7DNOHjxuKf8H7DCXvraHMKxtFObf8bAzgT+aBmey5fW2LviXUkZ2Lb2R0qQY+TJ5VIGoEjNf55ow==}
-     engines: {node: '>=18'}
-     hasBin: true
- 
-+  cspell-grammar@file:packages/cspell-grammar:
-+    resolution: {directory: packages/cspell-grammar, type: directory}
-+    engines: {node: '>=20'}
-+    hasBin: true
-+
-   cspell-io@8.19.4:
-     resolution: {integrity: sha512-W48egJqZ2saEhPWf5ftyighvm4mztxEOi45ILsKgFikXcWFs0H0/hLwqVFeDurgELSzprr12b6dXsr67dV8amg==}
-     engines: {node: '>=18'}
- 
-+  cspell-io@file:packages/cspell-io:
-+    resolution: {directory: packages/cspell-io, type: directory}
-+    engines: {node: '>=20'}
-+
-   cspell-lib@8.19.4:
-     resolution: {integrity: sha512-NwfdCCYtIBNQuZcoMlMmL3HSv2olXNErMi/aOTI9BBAjvCHjhgX5hbHySMZ0NFNynnN+Mlbu5kooJ5asZeB3KA==}
-     engines: {node: '>=18'}
- 
-+  cspell-lib@file:packages/cspell-lib:
-+    resolution: {directory: packages/cspell-lib, type: directory}
-+    engines: {node: '>=20'}
-+
-   cspell-trie-lib@8.19.4:
-     resolution: {integrity: sha512-yIPlmGSP3tT3j8Nmu+7CNpkPh/gBO2ovdnqNmZV+LNtQmVxqFd2fH7XvR1TKjQyctSH1ip0P5uIdJmzY1uhaYg==}
-     engines: {node: '>=18'}
- 
-+  cspell-trie-lib@file:packages/cspell-trie-lib:
-+    resolution: {directory: packages/cspell-trie-lib, type: directory}
-+    engines: {node: '>=20'}
-+
-   cspell@8.19.4:
-     resolution: {integrity: sha512-toaLrLj3usWY0Bvdi661zMmpKW2DVLAG3tcwkAv4JBTisdIRn15kN/qZDrhSieUEhVgJgZJDH4UKRiq29mIFxA==}
-     engines: {node: '>=18'}
-@@ -9075,8 +9166,9 @@ packages:
-       vue-tsc:
-         optional: true
- 
--  rolldown@1.0.0-beta.34:
--    resolution: {integrity: sha512-Wwh7EwalMzzX3Yy3VN58VEajeR2Si8+HDNMf706jPLIqU7CxneRW+dQVfznf5O0TWTnJyu4npelwg2bzTXB1Nw==}
-+  rolldown@1.0.0-beta.41:
-+    resolution: {integrity: sha512-U+NPR0Bkg3wm61dteD2L4nAM1U9dtaqVrpDXwC36IKRHpEO/Ubpid4Nijpa2imPchcVNHfxVFwSSMJdwdGFUbg==}
-+    engines: {node: ^20.19.0 || >=22.12.0}
-     hasBin: true
- 
-   rollup-plugin-dts@6.2.3:
-@@ -11432,20 +11524,91 @@ snapshots:
-       '@cspell/dict-typescript': 3.2.3
-       '@cspell/dict-vue': 3.0.5
- 
-+  '@cspell/cspell-bundled-dicts@file:packages/cspell-bundled-dicts':
-+    dependencies:
-+      '@cspell/dict-ada': 4.1.1
-+      '@cspell/dict-al': 1.1.1
-+      '@cspell/dict-aws': 4.0.15
-+      '@cspell/dict-bash': 4.2.1
-+      '@cspell/dict-companies': 3.2.5
-+      '@cspell/dict-cpp': 6.0.12
-+      '@cspell/dict-cryptocurrencies': 5.0.5
-+      '@cspell/dict-csharp': 4.0.7
-+      '@cspell/dict-css': 4.0.18
-+      '@cspell/dict-dart': 2.3.1
-+      '@cspell/dict-data-science': 2.0.9
-+      '@cspell/dict-django': 4.1.5
-+      '@cspell/dict-docker': 1.1.16
-+      '@cspell/dict-dotnet': 5.0.10
-+      '@cspell/dict-elixir': 4.0.8
-+      '@cspell/dict-en-common-misspellings': 2.1.5
-+      '@cspell/dict-en-gb-mit': 3.1.8
-+      '@cspell/dict-en_us': 4.4.18
-+      '@cspell/dict-filetypes': 3.0.13
-+      '@cspell/dict-flutter': 1.1.1
-+      '@cspell/dict-fonts': 4.0.5
-+      '@cspell/dict-fsharp': 1.1.1
-+      '@cspell/dict-fullstack': 3.2.7
-+      '@cspell/dict-gaming-terms': 1.1.2
-+      '@cspell/dict-git': 3.0.7
-+      '@cspell/dict-golang': 6.0.23
-+      '@cspell/dict-google': 1.0.9
-+      '@cspell/dict-haskell': 4.0.6
-+      '@cspell/dict-html': 4.0.12
-+      '@cspell/dict-html-symbol-entities': 4.0.4
-+      '@cspell/dict-java': 5.0.12
-+      '@cspell/dict-julia': 1.1.1
-+      '@cspell/dict-k8s': 1.0.12
-+      '@cspell/dict-kotlin': 1.1.1
-+      '@cspell/dict-latex': 4.0.4
-+      '@cspell/dict-lorem-ipsum': 4.0.5
-+      '@cspell/dict-lua': 4.0.8
-+      '@cspell/dict-makefile': 1.0.5
-+      '@cspell/dict-markdown': 2.0.12(@cspell/dict-css@4.0.18)(@cspell/dict-html-symbol-entities@4.0.4)(@cspell/dict-html@4.0.12)(@cspell/dict-typescript@3.2.3)
-+      '@cspell/dict-monkeyc': 1.0.11
-+      '@cspell/dict-node': 5.0.8
-+      '@cspell/dict-npm': 5.2.15
-+      '@cspell/dict-php': 4.0.15
-+      '@cspell/dict-powershell': 5.0.15
-+      '@cspell/dict-public-licenses': 2.0.15
-+      '@cspell/dict-python': 4.2.19
-+      '@cspell/dict-r': 2.1.1
-+      '@cspell/dict-ruby': 5.0.9
-+      '@cspell/dict-rust': 4.0.12
-+      '@cspell/dict-scala': 5.0.8
-+      '@cspell/dict-shell': 1.1.1
-+      '@cspell/dict-software-terms': 5.1.7
-+      '@cspell/dict-sql': 2.2.1
-+      '@cspell/dict-svelte': 1.0.7
-+      '@cspell/dict-swift': 2.0.6
-+      '@cspell/dict-terraform': 1.1.3
-+      '@cspell/dict-typescript': 3.2.3
-+      '@cspell/dict-vue': 3.0.5
-+
-   '@cspell/cspell-json-reporter@8.19.4':
-     dependencies:
-       '@cspell/cspell-types': 8.19.4
- 
-   '@cspell/cspell-pipe@8.19.4': {}
- 
-+  '@cspell/cspell-pipe@file:packages/cspell-pipe': {}
-+
-   '@cspell/cspell-resolver@8.19.4':
-     dependencies:
-       global-directory: 4.0.1
- 
-+  '@cspell/cspell-resolver@file:packages/cspell-resolver':
-+    dependencies:
-+      global-directory: 4.0.1
-+
-   '@cspell/cspell-service-bus@8.19.4': {}
- 
-+  '@cspell/cspell-service-bus@file:packages/cspell-service-bus': {}
-+
-   '@cspell/cspell-types@8.19.4': {}
- 
-+  '@cspell/cspell-types@file:packages/cspell-types': {}
-+
-   '@cspell/dict-ada@4.1.1': {}
- 
-   '@cspell/dict-al@1.1.1': {}
-@@ -11594,12 +11757,39 @@ snapshots:
-       '@cspell/url': 8.19.4
-       import-meta-resolve: 4.2.0
- 
-+  '@cspell/dynamic-import@file:packages/dynamic-import':
-+    dependencies:
-+      '@cspell/url': file:packages/cspell-url
-+      import-meta-resolve: 4.2.0
-+
-+  '@cspell/eslint-plugin@file:packages/cspell-eslint-plugin(eslint@8.57.1)':
-+    dependencies:
-+      '@cspell/cspell-types': file:packages/cspell-types
-+      '@cspell/url': file:packages/cspell-url
-+      cspell-lib: file:packages/cspell-lib
-+      eslint: 8.57.1
-+      synckit: 0.11.11
-+
-+  '@cspell/eslint-plugin@file:packages/cspell-eslint-plugin(eslint@9.8.0)':
-+    dependencies:
-+      '@cspell/cspell-types': file:packages/cspell-types
-+      '@cspell/url': file:packages/cspell-url
-+      cspell-lib: file:packages/cspell-lib
-+      eslint: 9.8.0
-+      synckit: 0.11.11
-+
-   '@cspell/filetypes@8.19.4': {}
- 
-+  '@cspell/filetypes@file:packages/cspell-filetypes': {}
-+
-   '@cspell/strong-weak-map@8.19.4': {}
- 
-+  '@cspell/strong-weak-map@file:packages/cspell-strong-weak-map': {}
-+
-   '@cspell/url@8.19.4': {}
- 
-+  '@cspell/url@file:packages/cspell-url': {}
-+
-   '@cspotcode/source-map-support@0.8.1':
-     dependencies:
-       '@jridgewell/trace-mapping': 0.3.9
-@@ -13234,6 +13424,13 @@ snapshots:
-       '@tybys/wasm-util': 0.10.0
-     optional: true
- 
-+  '@napi-rs/wasm-runtime@1.0.5':
-+    dependencies:
-+      '@emnapi/core': 1.5.0
-+      '@emnapi/runtime': 1.5.0
-+      '@tybys/wasm-util': 0.10.1
-+    optional: true
-+
-   '@nodelib/fs.scandir@2.1.5':
-     dependencies:
-       '@nodelib/fs.stat': 2.0.5
-@@ -13493,9 +13690,7 @@ snapshots:
-     dependencies:
-       '@octokit/openapi-types': 25.1.0
- 
--  '@oxc-project/runtime@0.82.3': {}
--
--  '@oxc-project/types@0.82.3': {}
-+  '@oxc-project/types@0.93.0': {}
- 
-   '@oxc-resolver/binding-android-arm-eabi@11.7.1':
-     optional: true
-@@ -13579,51 +13774,51 @@ snapshots:
-     dependencies:
-       quansync: 0.2.11
- 
--  '@rolldown/binding-android-arm64@1.0.0-beta.34':
-+  '@rolldown/binding-android-arm64@1.0.0-beta.41':
-     optional: true
- 
--  '@rolldown/binding-darwin-arm64@1.0.0-beta.34':
-+  '@rolldown/binding-darwin-arm64@1.0.0-beta.41':
-     optional: true
- 
--  '@rolldown/binding-darwin-x64@1.0.0-beta.34':
-+  '@rolldown/binding-darwin-x64@1.0.0-beta.41':
-     optional: true
- 
--  '@rolldown/binding-freebsd-x64@1.0.0-beta.34':
-+  '@rolldown/binding-freebsd-x64@1.0.0-beta.41':
-     optional: true
- 
--  '@rolldown/binding-linux-arm-gnueabihf@1.0.0-beta.34':
-+  '@rolldown/binding-linux-arm-gnueabihf@1.0.0-beta.41':
-     optional: true
- 
--  '@rolldown/binding-linux-arm64-gnu@1.0.0-beta.34':
-+  '@rolldown/binding-linux-arm64-gnu@1.0.0-beta.41':
-     optional: true
- 
--  '@rolldown/binding-linux-arm64-musl@1.0.0-beta.34':
-+  '@rolldown/binding-linux-arm64-musl@1.0.0-beta.41':
-     optional: true
- 
--  '@rolldown/binding-linux-x64-gnu@1.0.0-beta.34':
-+  '@rolldown/binding-linux-x64-gnu@1.0.0-beta.41':
-     optional: true
- 
--  '@rolldown/binding-linux-x64-musl@1.0.0-beta.34':
-+  '@rolldown/binding-linux-x64-musl@1.0.0-beta.41':
-     optional: true
- 
--  '@rolldown/binding-openharmony-arm64@1.0.0-beta.34':
-+  '@rolldown/binding-openharmony-arm64@1.0.0-beta.41':
-     optional: true
- 
--  '@rolldown/binding-wasm32-wasi@1.0.0-beta.34':
-+  '@rolldown/binding-wasm32-wasi@1.0.0-beta.41':
-     dependencies:
--      '@napi-rs/wasm-runtime': 1.0.3
-+      '@napi-rs/wasm-runtime': 1.0.5
-     optional: true
- 
--  '@rolldown/binding-win32-arm64-msvc@1.0.0-beta.34':
-+  '@rolldown/binding-win32-arm64-msvc@1.0.0-beta.41':
-     optional: true
- 
--  '@rolldown/binding-win32-ia32-msvc@1.0.0-beta.34':
-+  '@rolldown/binding-win32-ia32-msvc@1.0.0-beta.41':
-     optional: true
- 
--  '@rolldown/binding-win32-x64-msvc@1.0.0-beta.34':
-+  '@rolldown/binding-win32-x64-msvc@1.0.0-beta.41':
-     optional: true
- 
--  '@rolldown/pluginutils@1.0.0-beta.34': {}
-+  '@rolldown/pluginutils@1.0.0-beta.41': {}
- 
-   '@rollup/plugin-alias@5.1.1(rollup@4.50.0)':
-     optionalDependencies:
-@@ -14053,6 +14248,11 @@ snapshots:
-       tslib: 2.8.1
-     optional: true
- 
-+  '@tybys/wasm-util@0.10.1':
-+    dependencies:
-+      tslib: 2.8.1
-+    optional: true
-+
-   '@types/body-parser@1.19.6':
-     dependencies:
-       '@types/connect': 3.4.38
-@@ -14641,6 +14841,8 @@ snapshots:
- 
-   ansis@4.1.0: {}
- 
-+  ansis@4.2.0: {}
-+
-   any-promise@1.3.0: {}
- 
-   anymatch@3.1.3:
-@@ -15387,6 +15589,13 @@ snapshots:
-       comment-json: 4.2.5
-       yaml: 2.8.1
- 
-+  cspell-config-lib@file:packages/cspell-config-lib:
-+    dependencies:
-+      '@cspell/cspell-types': file:packages/cspell-types
-+      comment-json: 4.2.5
-+      smol-toml: 1.4.2
-+      yaml: 2.8.1
-+
-   cspell-dict-nl-nl@1.1.2:
-     dependencies:
-       '@cspell/dict-nl-nl': 1.0.35
-@@ -15399,6 +15608,13 @@ snapshots:
-       cspell-trie-lib: 8.19.4
-       fast-equals: 5.2.2
- 
-+  cspell-dictionary@file:packages/cspell-dictionary:
-+    dependencies:
-+      '@cspell/cspell-pipe': file:packages/cspell-pipe
-+      '@cspell/cspell-types': file:packages/cspell-types
-+      cspell-trie-lib: file:packages/cspell-trie-lib
-+      fast-equals: 5.2.2
-+
-   cspell-gitignore@8.19.4:
-     dependencies:
-       '@cspell/url': 8.19.4
-@@ -15410,16 +15626,31 @@ snapshots:
-       '@cspell/url': 8.19.4
-       picomatch: 4.0.3
- 
-+  cspell-glob@file:packages/cspell-glob:
-+    dependencies:
-+      '@cspell/url': file:packages/cspell-url
-+      picomatch: 4.0.3
-+
-   cspell-grammar@8.19.4:
-     dependencies:
-       '@cspell/cspell-pipe': 8.19.4
-       '@cspell/cspell-types': 8.19.4
- 
-+  cspell-grammar@file:packages/cspell-grammar:
-+    dependencies:
-+      '@cspell/cspell-pipe': file:packages/cspell-pipe
-+      '@cspell/cspell-types': file:packages/cspell-types
-+
-   cspell-io@8.19.4:
-     dependencies:
-       '@cspell/cspell-service-bus': 8.19.4
-       '@cspell/url': 8.19.4
- 
-+  cspell-io@file:packages/cspell-io:
-+    dependencies:
-+      '@cspell/cspell-service-bus': file:packages/cspell-service-bus
-+      '@cspell/url': file:packages/cspell-url
-+
-   cspell-lib@8.19.4:
-     dependencies:
-       '@cspell/cspell-bundled-dicts': 8.19.4
-@@ -15447,12 +15678,45 @@ snapshots:
-       vscode-uri: 3.1.0
-       xdg-basedir: 5.1.0
- 
-+  cspell-lib@file:packages/cspell-lib:
-+    dependencies:
-+      '@cspell/cspell-bundled-dicts': file:packages/cspell-bundled-dicts
-+      '@cspell/cspell-pipe': file:packages/cspell-pipe
-+      '@cspell/cspell-resolver': file:packages/cspell-resolver
-+      '@cspell/cspell-types': file:packages/cspell-types
-+      '@cspell/dynamic-import': file:packages/dynamic-import
-+      '@cspell/filetypes': file:packages/cspell-filetypes
-+      '@cspell/strong-weak-map': file:packages/cspell-strong-weak-map
-+      '@cspell/url': file:packages/cspell-url
-+      clear-module: 4.1.2
-+      comment-json: 4.2.5
-+      cspell-config-lib: file:packages/cspell-config-lib
-+      cspell-dictionary: file:packages/cspell-dictionary
-+      cspell-glob: file:packages/cspell-glob
-+      cspell-grammar: file:packages/cspell-grammar
-+      cspell-io: file:packages/cspell-io
-+      cspell-trie-lib: file:packages/cspell-trie-lib
-+      env-paths: 3.0.0
-+      fast-equals: 5.2.2
-+      gensequence: 7.0.0
-+      import-fresh: 3.3.1
-+      resolve-from: 5.0.0
-+      vscode-languageserver-textdocument: 1.0.12
-+      vscode-uri: 3.1.0
-+      xdg-basedir: 5.1.0
-+
-   cspell-trie-lib@8.19.4:
-     dependencies:
-       '@cspell/cspell-pipe': 8.19.4
-       '@cspell/cspell-types': 8.19.4
-       gensequence: 7.0.0
- 
-+  cspell-trie-lib@file:packages/cspell-trie-lib:
-+    dependencies:
-+      '@cspell/cspell-pipe': file:packages/cspell-pipe
-+      '@cspell/cspell-types': file:packages/cspell-types
-+      gensequence: 7.0.0
-+
-   cspell@8.19.4:
-     dependencies:
-       '@cspell/cspell-json-reporter': 8.19.4
-@@ -20092,7 +20356,7 @@ snapshots:
-     dependencies:
-       glob: 7.2.3
- 
--  rolldown-plugin-dts@0.15.10(oxc-resolver@11.7.1)(rolldown@1.0.0-beta.34)(typescript@5.9.2):
-+  rolldown-plugin-dts@0.15.10(oxc-resolver@11.7.1)(rolldown@1.0.0-beta.41)(typescript@5.9.2):
-     dependencies:
-       '@babel/generator': 7.28.3
-       '@babel/parser': 7.28.3
-@@ -20102,34 +20366,33 @@ snapshots:
-       debug: 4.4.1(supports-color@8.1.1)
-       dts-resolver: 2.1.2(oxc-resolver@11.7.1)
-       get-tsconfig: 4.10.1
--      rolldown: 1.0.0-beta.34
-+      rolldown: 1.0.0-beta.41
-     optionalDependencies:
-       typescript: 5.9.2
-     transitivePeerDependencies:
-       - oxc-resolver
-       - supports-color
- 
--  rolldown@1.0.0-beta.34:
-+  rolldown@1.0.0-beta.41:
-     dependencies:
--      '@oxc-project/runtime': 0.82.3
--      '@oxc-project/types': 0.82.3
--      '@rolldown/pluginutils': 1.0.0-beta.34
--      ansis: 4.1.0
-+      '@oxc-project/types': 0.93.0
-+      '@rolldown/pluginutils': 1.0.0-beta.41
-+      ansis: 4.2.0
-     optionalDependencies:
--      '@rolldown/binding-android-arm64': 1.0.0-beta.34
--      '@rolldown/binding-darwin-arm64': 1.0.0-beta.34
--      '@rolldown/binding-darwin-x64': 1.0.0-beta.34
--      '@rolldown/binding-freebsd-x64': 1.0.0-beta.34
--      '@rolldown/binding-linux-arm-gnueabihf': 1.0.0-beta.34
--      '@rolldown/binding-linux-arm64-gnu': 1.0.0-beta.34
--      '@rolldown/binding-linux-arm64-musl': 1.0.0-beta.34
--      '@rolldown/binding-linux-x64-gnu': 1.0.0-beta.34
--      '@rolldown/binding-linux-x64-musl': 1.0.0-beta.34
--      '@rolldown/binding-openharmony-arm64': 1.0.0-beta.34
--      '@rolldown/binding-wasm32-wasi': 1.0.0-beta.34
--      '@rolldown/binding-win32-arm64-msvc': 1.0.0-beta.34
--      '@rolldown/binding-win32-ia32-msvc': 1.0.0-beta.34
--      '@rolldown/binding-win32-x64-msvc': 1.0.0-beta.34
-+      '@rolldown/binding-android-arm64': 1.0.0-beta.41
-+      '@rolldown/binding-darwin-arm64': 1.0.0-beta.41
-+      '@rolldown/binding-darwin-x64': 1.0.0-beta.41
-+      '@rolldown/binding-freebsd-x64': 1.0.0-beta.41
-+      '@rolldown/binding-linux-arm-gnueabihf': 1.0.0-beta.41
-+      '@rolldown/binding-linux-arm64-gnu': 1.0.0-beta.41
-+      '@rolldown/binding-linux-arm64-musl': 1.0.0-beta.41
-+      '@rolldown/binding-linux-x64-gnu': 1.0.0-beta.41
-+      '@rolldown/binding-linux-x64-musl': 1.0.0-beta.41
-+      '@rolldown/binding-openharmony-arm64': 1.0.0-beta.41
-+      '@rolldown/binding-wasm32-wasi': 1.0.0-beta.41
-+      '@rolldown/binding-win32-arm64-msvc': 1.0.0-beta.41
-+      '@rolldown/binding-win32-ia32-msvc': 1.0.0-beta.41
-+      '@rolldown/binding-win32-x64-msvc': 1.0.0-beta.41
- 
-   rollup-plugin-dts@6.2.3(rollup@4.50.0)(typescript@5.9.2):
-     dependencies:
-@@ -20926,8 +21189,8 @@ snapshots:
-       diff: 8.0.2
-       empathic: 2.0.0
-       hookable: 5.5.3
--      rolldown: 1.0.0-beta.34
--      rolldown-plugin-dts: 0.15.10(oxc-resolver@11.7.1)(rolldown@1.0.0-beta.34)(typescript@5.9.2)
-+      rolldown: 1.0.0-beta.41
-+      rolldown-plugin-dts: 0.15.10(oxc-resolver@11.7.1)(rolldown@1.0.0-beta.41)(typescript@5.9.2)
-       semver: 7.7.2
-       tinyexec: 1.0.1
-       tinyglobby: 0.2.14

pkgs/by-name/cs/cspell/package.nix

@@ -4,40 +4,32 @@
   nodejs,
   pnpm_10,
   fetchFromGitHub,
+  gitMinimal,
+  nix-update-script,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "cspell";
-  version = "9.2.1";
+  version = "9.3.2";
 
   src = fetchFromGitHub {
     owner = "streetsidesoftware";
     repo = "cspell";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-xQCE6YWCvlWjcpf2nCBjbdI76qejlvHdWiUCD4SZhRg=";
+    hash = "sha256-XF94Bkxx+OAEldRD4L8TBokuzgGil0LaPBUbNBiEcVE=";
   };
 
-  patches = [
-    ./inject-workplace-deps.patch
-  ];
-
   pnpmWorkspaces = [ "cspell..." ];
 
-  prePnpmInstall = ''
-    pnpm config set --location=project inject-workplace-packages true
-  '';
-
   pnpmDeps = pnpm_10.fetchDeps {
     inherit (finalAttrs)
       pname
       version
       src
       pnpmWorkspaces
-      patches
-      prePnpmInstall
       ;
     fetcherVersion = 2;
-    hash = "sha256-aE7DHyXPLziVjW9bBL98fFRiPwOFIyU5edbj8rEws6U=";
+    hash = "sha256-lp3rXW16/w3ZPXTg/B951SL/WN+QpUQLPjlvc6QaU20=";
   };
 
   nativeBuildInputs = [
@@ -47,6 +39,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   buildInputs = [
     nodejs
+    gitMinimal
   ];
 
   buildPhase = ''
@@ -57,18 +50,40 @@ stdenv.mkDerivation (finalAttrs: {
     runHook postBuild
   '';
 
+  # Make PNPM happy to re-install deps for prod
+  env.CI = true;
+
   installPhase = ''
     runHook preInstall
 
     mkdir -p $out/lib/node_modules/cspell
     mkdir $out/bin
-    pnpm --filter="cspell" --offline --prod deploy $out/lib/node_modules/cspell
+
+    # Re-install only production dependencies
+    rm -rf node_modules packages/*/node_modules scripts/node_modules
+    pnpm config set nodeLinker hoisted
+    pnpm config set preferSymlinkedExecutables false
+    pnpm --filter="cspell..." --offline --prod install
+
+    mv ./package.json ./packages ./bin.mjs ./node_modules $out/lib/node_modules/cspell
+    # Clean up unneeded files
+    pushd $out/lib/node_modules/cspell/packages
+    rm -rf */*.md */tsconfig.* */LICENSE Samples */**/*.test.{j,t}s */**/*.map */__snapshots__ */src */Samples
+    # These are example dictionaries, and are not needed
+    rm -rf hunspell-reader/dictionaries
+    pushd cspell
+    rm -rf dist/tsc
+    rm -rf samples/ fixtures/ tools/ static/
+    popd
+    popd
 
     ln -s $out/lib/node_modules/cspell/bin.mjs $out/bin/cspell
 
     runHook postInstall
   '';
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Spell checker for code";
     homepage = "https://cspell.org";

pkgs/by-name/dd/ddosify/package.nix

@@ -43,6 +43,6 @@ buildGoModule (finalAttrs: {
     homepage = "https://ddosify.com/";
     changelog = "https://github.com/ddosify/ddosify/releases/tag/selfhosted-${finalAttrs.version}";
     license = lib.licenses.agpl3Plus;
-    maintainers = with lib.maintainers; [ bryanasdev000 ];
+    maintainers = [ ];
   };
 })

pkgs/by-name/dr/draupnir/hashes.json

@@ -1,3 +0,0 @@
-{
-  "yarn_offline_cache_hash": "sha256-kTdJ6zKNjH5CxcM9EvXzbz2Phrp5xI0+pvNwMLRmLgQ="
-}

pkgs/by-name/dr/draupnir/package.json

@@ -1,83 +0,0 @@
-{
-  "name": "draupnir",
-  "version": "2.8.0",
-  "description": "A moderation tool for Matrix",
-  "main": "lib/index.js",
-  "repository": "https://github.com/the-draupnir-project/Draupnir.git",
-  "author": "Gnuxie",
-  "license": "AFL-3.0",
-  "private": true,
-  "scripts": {
-    "build": "tsc --project test/tsconfig.json && tsc > /dev/null 2>&1 && corepack yarn copy-assets",
-    "copy-assets": "cp src/protections/DraupnirNews/news.json lib/protections/DraupnirNews/news.json",
-    "postbuild": "corepack yarn describe-version",
-    "describe-version": "(git describe > version.txt.tmp && mv version.txt.tmp version.txt) || true && rm -f version.txt.tmp",
-    "remove-tests-from-lib": "rm -rf lib/test/ && cp -r lib/src/* lib/ && rm -rf lib/src/",
-    "lint": "corepack yarn eslint --cache src test && corepack yarn prettier --cache --ignore-unknown --check src test",
-    "start:dev": "corepack yarn build && node --async-stack-traces lib/index.js",
-    "test:unit": "mocha --require './test/tsnode.cjs' --forbid-only 'test/unit/**/*.{ts,tsx}'",
-    "test:unit:single": "mocha --require test/tsnode.cjs",
-    "test:integration": "NODE_ENV=harness mocha --require test/tsnode.cjs --async-stack-traces --forbid-only --require test/integration/fixtures.ts --timeout 300000 --project ./tsconfig.json \"test/integration/**/*Test.ts\"",
-    "test:integration:single": "NODE_ENV=harness corepack yarn mocha --require test/tsnode.cjs --require test/integration/fixtures.ts --timeout 300000 --project ./tsconfig.json",
-    "test:appservice:integration": "NODE_ENV=harness mocha --require test/tsnode.cjs --async-stack-traces --forbid-only --timeout 300000 --project ./tsconfig.json \"test/appservice/integration/**/*Test.ts\"",
-    "test:appservice:integration:single": "NODE_ENV=harness corepack yarn mocha --require test/tsnode.cjs --timeout 300000 --project ./tsconfig.json",
-    "test:manual": "NODE_ENV=harness ts-node test/integration/manualLaunchScript.ts"
-  },
-  "devDependencies": {
-    "@eslint/js": "^9.7.0",
-    "@types/better-sqlite3": "^7.6.9",
-    "@types/config": "^3.3.1",
-    "@types/crypto-js": "^4.2.2",
-    "@types/eslint__js": "^8.42.3",
-    "@types/express": "^4.17.21",
-    "@types/html-to-text": "^8.0.1",
-    "@types/js-yaml": "^4.0.9",
-    "@types/jsdom": "21.1.7",
-    "@types/mocha": "^10.0.7",
-    "@types/nedb": "^1.8.16",
-    "@types/node": "^20.14.11",
-    "@types/pg": "^8.6.5",
-    "@types/request": "^2.48.12",
-    "crypto-js": "^4.2.0",
-    "eslint": "^9.7.0",
-    "expect": "^29.7.0",
-    "mocha": "^10.7.0",
-    "prettier": "^3.3.3",
-    "ts-auto-mock": "^3.7.4",
-    "ts-node": "^10.9.2",
-    "typescript": "^5.5.3",
-    "typescript-eslint": "^7.16.1"
-  },
-  "dependencies": {
-    "@gnuxie/typescript-result": "^1.0.0",
-    "@sentry/node": "^7.17.2",
-    "@sinclair/typebox": "0.34.13",
-    "@the-draupnir-project/interface-manager": "4.2.5",
-    "@the-draupnir-project/matrix-basic-types": "1.4.1",
-    "@the-draupnir-project/mps-interface-adaptor": "0.5.2",
-    "better-sqlite3": "^9.4.3",
-    "body-parser": "^1.20.2",
-    "config": "^3.3.9",
-    "express": "^4.19",
-    "html-to-text": "^8.0.0",
-    "js-yaml": "^4.1.0",
-    "jsdom": "^24.0.0",
-    "matrix-appservice-bridge": "^10.3.1",
-    "matrix-bot-sdk": "npm:@vector-im/matrix-bot-sdk@^0.7.1-element.6",
-    "matrix-protection-suite": "npm:@gnuxie/matrix-protection-suite@5.1.0",
-    "matrix-protection-suite-for-matrix-bot-sdk": "npm:@gnuxie/matrix-protection-suite-for-matrix-bot-sdk@4.0.2",
-    "pg": "^8.8.0",
-    "yaml": "^2.3.2"
-  },
-  "overrides": {
-    "matrix-bot-sdk": "$@vector-im/matrix-bot-sdk",
-    "@vector-im/matrix-bot-sdk": "npm:@vector-im/matrix-bot-sdk@^0.7.1-element.6",
-    "@the-draupnir-project/matrix-basic-types": "$the-draupnir-project/matrix-basic-types",
-    "@the-draupnir-project/interface-manager": "$the-draupnir-project/interface-manager",
-    "matrix-protection-suite": "$matrix-protection-suite"
-  },
-  "engines": {
-    "node": ">=20.0.0"
-  },
-  "packageManager": "yarn@1.22.22+sha1.ac34549e6aa8e7ead463a7407e1c7390f61a6610"
-}

pkgs/by-name/dr/draupnir/package.nix

@@ -1,107 +1,103 @@
 {
   lib,
   fetchFromGitHub,
-  makeWrapper,
+  makeBinaryWrapper,
   nodejs,
   matrix-sdk-crypto-nodejs,
   python3,
   sqlite,
   srcOnly,
   removeReferencesTo,
-  mkYarnPackage,
   fetchYarnDeps,
   stdenv,
   cctools,
   nixosTests,
+  yarnBuildHook,
+  yarnConfigHook,
+  nix-update-script,
 }:
-
-# docs: https://github.com/NixOS/nixpkgs/blob/master/doc/languages-frameworks/javascript.section.md#yarn2nix-javascript-yarn2nix
 let
-  hashesFile = builtins.fromJSON (builtins.readFile ./hashes.json);
   nodeSources = srcOnly nodejs;
 in
-mkYarnPackage rec {
+
+stdenv.mkDerivation (finalAttrs: {
   pname = "draupnir";
   version = "2.8.0";
 
   src = fetchFromGitHub {
     owner = "the-draupnir-project";
     repo = "Draupnir";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-I9DYiNxD95pzHVsgZ/hJwHfrsVqE/eBALNiePVNDpy0=";
   };
 
   nativeBuildInputs = [
-    makeWrapper
+    makeBinaryWrapper
     sqlite
-  ];
+    python3
+    yarnConfigHook
+    yarnBuildHook
+    nodejs
+  ]
+  ++ lib.optional stdenv.hostPlatform.isDarwin cctools.libtool;
 
   offlineCache = fetchYarnDeps {
-    name = "${pname}-yarn-offline-cache";
-    yarnLock = src + "/yarn.lock";
-    hash = hashesFile.yarn_offline_cache_hash;
-  };
-
-  packageJSON = ./package.json;
-
-  pkgConfig = {
-    "@matrix-org/matrix-sdk-crypto-nodejs" = {
-      postInstall = ''
-        # replace with the existing package in nixpkgs
-        cd ..
-        rm -r matrix-sdk-crypto-nodejs
-        ln -s ${matrix-sdk-crypto-nodejs}/lib/node_modules/@matrix-org/* ./
-      '';
-    };
-
-    better-sqlite3 = {
-      nativeBuildInputs = [ python3 ] ++ lib.optional stdenv.hostPlatform.isDarwin cctools.libtool;
-      postInstall = ''
-        # build native sqlite bindings
-        npm run build-release --offline --nodedir="${nodeSources}"
-        find build -type f -exec \
-          ${lib.getExe removeReferencesTo} -t "${nodeSources}" {} \;
-      '';
-    };
+    inherit (finalAttrs) src;
+    hash = "sha256-kTdJ6zKNjH5CxcM9EvXzbz2Phrp5xI0+pvNwMLRmLgQ=";
   };
 
   preBuild = ''
     # install proper version info
-    mkdir --parents deps/draupnir/
-    echo "${version}-nix" > deps/draupnir/version.txt
+    echo "${finalAttrs.version}-nix" > version.txt
 
     # makes network requests
-    sed -i 's/corepack //g' deps/draupnir/package.json
+    sed -i 's/corepack //g' package.json
   '';
 
-  buildPhase = ''
-    runHook preBuild
-
-    yarn --offline --verbose build
-
-    runHook postBuild
+  postBuild = ''
+    yarn --offline run copy-assets
   '';
 
-  installPhase = ''
-    runHook preInstall
+  postInstall = ''
+    # Re-install only production dependencies
+    yarn install --frozen-lockfile --force --production --offline --non-interactive \
+      --ignore-engines --ignore-platform --ignore-scripts --no-progress
 
-    mkdir --parents $out/share
-    cp --archive . $out/share/draupnir
+    # Replace matrix-sdk-crypto-nodejs with nixpkgs version
+    nodeCryptoPath="node_modules/@matrix-org/matrix-sdk-crypto-nodejs"
+    rm -rf "$nodeCryptoPath"
+    cp -r ${matrix-sdk-crypto-nodejs}/lib/node_modules/@matrix-org/matrix-sdk-crypto-nodejs \
+      "$nodeCryptoPath"
+    chmod -R a+rwx "$nodeCryptoPath"
 
+    # build better-sqlite3
+    betterSqlitePath="node_modules/better-sqlite3"
+    pushd "$betterSqlitePath"
+    npm run build-release --offline --nodedir="${nodeSources}"
+    rm -rf build/Release/{.deps,obj,obj.target,test_extension.node}
+    find build -type f -exec \
+          ${lib.getExe removeReferencesTo} -t "${nodeSources}" {} \;
+    popd
+
+
+    mkdir -p $out/lib/node_modules/draupnir
+    mkdir $out/bin
+    # Install outputs
+    mv ./lib ./version.txt ./node_modules ./package.json $out/lib/node_modules/draupnir
+
+    # Create wrapper executable
     makeWrapper ${lib.getExe nodejs} $out/bin/draupnir \
-      --add-flags $out/share/draupnir/deps/draupnir/lib/index.js
+      --add-flags "--enable-source-maps" \
+      --add-flags "$out/lib/node_modules/draupnir/lib/index.js"
 
-    runHook postInstall
   '';
 
-  distPhase = "true";
-
   passthru = {
     tests = { inherit (nixosTests) draupnir; };
-    updateScript = ./update.sh;
+    updateScript = nix-update-script { };
   };
 
-  meta = with lib; {
+  meta = {
     description = "Moderation tool for Matrix";
     homepage = "https://github.com/the-draupnir-project/Draupnir";
     longDescription = ''
@@ -118,8 +114,8 @@ mkYarnPackage rec {
       A Synapse module is also available to apply the same rulesets the bot
       uses across an entire homeserver.
     '';
-    license = licenses.afl3;
-    maintainers = with maintainers; [ RorySys ];
+    license = lib.licenses.afl3;
+    maintainers = with lib.maintainers; [ RorySys ];
     mainProgram = "draupnir";
   };
-}
+})

pkgs/by-name/dr/draupnir/update.sh

@@ -1,39 +0,0 @@
-#!/usr/bin/env nix-shell
-#!nix-shell -i bash -p curl common-updater-scripts coreutils jq prefetch-yarn-deps git
-
-set -euo pipefail
-set -x
-
-cd  "$(git rev-parse --show-toplevel)"
-
-TMPDIR=$(mktemp -d)
-
-echo "Getting versions..."
-latestVersion="$(curl -sL "https://api.github.com/repos/the-draupnir-project/Draupnir/releases?per_page=1" | jq -r '.[0].tag_name | ltrimstr("v")')"
-echo " --> Latest version: ${latestVersion}"
-currentVersion=$(nix-instantiate --eval -E "with import ./. {}; draupnir.version or (lib.getVersion draupnir)" | tr -d '"')
-echo " --> Current version: ${currentVersion}"
-if [[ "$currentVersion" == "$latestVersion" ]]; then
-  echo "Draupnir is up-to-date: $currentVersion"
-  exit 0
-else
-  echo "We are out of date..."
-fi
-
-curl https://raw.githubusercontent.com/the-draupnir-project/Draupnir/v$latestVersion/package.json -o pkgs/by-name/dr/draupnir/package.json
-
-update-source-version draupnir "$latestVersion"
-
-# Update yarn offline cache hash
-cd $TMPDIR
-
-curl https://raw.githubusercontent.com/the-draupnir-project/Draupnir/v$latestVersion/yarn.lock -o yarn.lock
-TMP_PREFETCH_HASH=`prefetch-yarn-deps yarn.lock`
-NEW_YARN_OFFLINE_HASH=`nix --extra-experimental-features nix-command hash to-sri --type sha256 $TMP_PREFETCH_HASH`
-
-cd -
-echo "New yarn offline hash: $NEW_YARN_OFFLINE_HASH"
-
-TMPFILE=$(mktemp)
-jq '.yarn_offline_cache_hash = "'$NEW_YARN_OFFLINE_HASH'"' pkgs/by-name/dr/draupnir/hashes.json > $TMPFILE
-mv -- "$TMPFILE" pkgs/by-name/dr/draupnir/hashes.json

pkgs/by-name/ds/dsda-doom/package.nix

@@ -8,7 +8,8 @@
   SDL2_image,
   fluidsynth,
   portmidi,
-  libopenmpt,
+  libxmp,
+  libsndfile,
   libvorbis,
   libmad,
   libGLU,
@@ -19,13 +20,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "dsda-doom";
-  version = "0.29.3";
+  version = "0.29.4";
 
   src = fetchFromGitHub {
     owner = "kraflab";
     repo = "dsda-doom";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Nsz9bj+AJomkYOiy5cli+NLmrJKNjYOiXjEZDXnnFNo=";
+    hash = "sha256-iZV8lsefEix0/iHXUGXJohSGxJDJC+eTijGVkOrwK0Q=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/prboom2";
@@ -34,11 +35,12 @@ stdenv.mkDerivation (finalAttrs: {
 
   buildInputs = [
     alsa-lib
-    libopenmpt
     fluidsynth
     libGLU
     libmad
+    libsndfile
     libvorbis
+    libxmp
     libzip
     portmidi
     SDL2

pkgs/by-name/dw/dwm-status/package.nix

@@ -33,13 +33,13 @@ in
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "dwm-status";
-  version = "1.10.0";
+  version = "1.11.0";
 
   src = fetchFromGitHub {
     owner = "Gerschtli";
     repo = "dwm-status";
     tag = finalAttrs.version;
-    hash = "sha256-982JFYZroskKppAOZjBWOFt624FfRjhXpYN57s/cM50=";
+    hash = "sha256-2E/I8xRo29jaPYupAd9udgjv/OdDNdtWkVp/SPRQkxY=";
   };
 
   nativeBuildInputs = [
@@ -53,7 +53,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     libX11
   ];
 
-  cargoHash = "sha256-2/zzE6JzhqeBYLiRkx5ELaW150rk1bMTrpxSw/wxNes=";
+  cargoHash = "sha256-o6gzP0mo7+np5Ba22gPAHcPPXoFTYThNsMr6nNC/Zm4=";
 
   postInstall = lib.optionalString (bins != [ ]) ''
     wrapProgram $out/bin/dwm-status --prefix "PATH" : "${lib.makeBinPath bins}"

pkgs/by-name/ei/eigenwallet/package.nix

@@ -11,7 +11,7 @@
 }:
 
 stdenv.mkDerivation (finalAttrs: {
-  name = "eigenwallet";
+  pname = "eigenwallet";
   version = "3.3.7";
 
   src = fetchurl {

pkgs/by-name/el/eliza/package.nix

@@ -7,12 +7,12 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "eliza";
-  version = "0-unstable-2025-10-28";
+  version = "0-unstable-2025-11-26";
   src = fetchFromGitHub {
     owner = "anthay";
     repo = "ELIZA";
-    rev = "e4c47439232c162ca0d515c5f8e1a714a80fefc0";
-    hash = "sha256-xHJLn/nxs8nWwXJE8p8fVhHzeIo1H3gxW5g4/jGCSx8=";
+    rev = "602c0da7a40a6c7d194268d781aaee3bdb8e8607";
+    hash = "sha256-GFTsm1LJf+c2sxrg4ZIlzO06UtZITP/AlPDckAxiwYc=";
   };
 
   doCheck = true;

pkgs/by-name/ep/epiphany/package.nix

@@ -39,11 +39,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "epiphany";
-  version = "49.1";
+  version = "49.2";
 
   src = fetchurl {
     url = "mirror://gnome/sources/epiphany/${lib.versions.major finalAttrs.version}/epiphany-${finalAttrs.version}.tar.xz";
-    hash = "sha256-12fFy7niVmvJkD1BG2iWFh40P3EqozMFNlc52N7axSE=";
+    hash = "sha256-s7o9aCE+h/gfFzPoVQDDe4K1k4+QCeT+iZlJY9X7K44=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/es/esphome/package.nix

@@ -33,14 +33,14 @@ let
 in
 python.pkgs.buildPythonApplication rec {
   pname = "esphome";
-  version = "2025.11.0";
+  version = "2025.11.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "esphome";
     repo = "esphome";
     tag = version;
-    hash = "sha256-ezyuV9PcZ5SsJc5viyV+8n+pW8k0SV2bXr+JPVkOdus=";
+    hash = "sha256-7tLe1GjL6rk6YvgYaU2x6RmUOCYcnZFAfaYifmpMLVo=";
   };
 
   patches = [

pkgs/by-name/ev/evcc/package.nix

@@ -17,13 +17,13 @@
 }:
 
 let
-  version = "0.210.1";
+  version = "0.210.2";
 
   src = fetchFromGitHub {
     owner = "evcc-io";
     repo = "evcc";
     tag = version;
-    hash = "sha256-F2gRuvu/WCQp+Kac8nwjmoevSuVkg40pN3zVOY9EnWs=";
+    hash = "sha256-163giiFxlvu0Jq+59fOM4W2NTKb2ZVZ4rBdT7cY1HyE=";
   };
 
   vendorHash = "sha256-arrEWH3rspwynRXf43sElliEJ2kBxhikz1ZGS1+gDes=";

pkgs/by-name/fa/fabric-ai/package.nix

@@ -7,16 +7,16 @@
 
 buildGoModule rec {
   pname = "fabric-ai";
-  version = "1.4.328";
+  version = "1.4.334";
 
   src = fetchFromGitHub {
     owner = "danielmiessler";
     repo = "fabric";
     tag = "v${version}";
-    hash = "sha256-s7XZDYD8y36zUw5StJnYMNxCkDiub3ubg7/I7AY91mE=";
+    hash = "sha256-O63UsnVufi6QYfl233vqFnoR5WW5ttLN5xdBJ7DxBso=";
   };
 
-  vendorHash = "sha256-bOA4vKwiRNRCyDWKCmzwLZlhsZwjSVe194Th6MNlwvM=";
+  vendorHash = "sha256-qWaMBhjt20WAIhDcjY4oOFBT+neJiXg0N2WsPasuHSU=";
 
   # Fabric introduced plugin tests that fail in the nix build sandbox.
   doCheck = false;

pkgs/by-name/fi/findimagedupes/package.nix

@@ -0,0 +1,100 @@
+{
+  lib,
+  stdenv,
+  fetchurl,
+  fetchFromGitHub,
+  makeWrapper,
+  perl,
+  perlPackages,
+  installShellFiles,
+}:
+
+stdenv.mkDerivation rec {
+  pname = "findimagedupes";
+  version = "2.20.1";
+
+  src = fetchFromGitHub {
+    owner = "jhnc";
+    repo = "findimagedupes";
+    tag = version;
+    hash = "sha256-LJbZGuBVksfS7nVxgrMLSeygWuy9oDmw/pD8wAyr3f0=";
+  };
+
+  nativeBuildInputs = [
+    makeWrapper
+    installShellFiles
+  ];
+
+  buildInputs = [
+    perl
+  ]
+  ++ (with perlPackages; [
+    DBFile
+    FileMimeInfo
+    FileBaseDir
+    #GraphicsMagick
+    ImageMagick
+    Inline
+    InlineC
+    ParseRecDescent
+  ]);
+
+  # compiled files (findimagedupes.so etc) are written to $DIRECTORY/lib/auto/findimagedupes
+  # replace GraphicsMagick with ImageMagick, because perl bindings are not yet available
+  postPatch = ''
+    substituteInPlace findimagedupes \
+      --replace-fail "DIRECTORY => '/usr/local/lib/findimagedupes';" "DIRECTORY => '$out';" \
+      --replace-fail "Graphics::Magick" "Image::Magick" \
+      --replace-fail "my \$Id = '""';" "my \$Id = '${version}';"
+  '';
+
+  # with DIRECTORY = "/tmp":
+  # $ ./result/bin/findimagedupes
+  # /bin/sh: line 1: cc: command not found
+  # $ strace ./result/bin/findimagedupes 2>&1 | grep findimagedupes
+  # newfstatat(AT_FDCWD, "/tmp/lib/auto/findimagedupes/findimagedupes.inl", {st_mode=S_IFREG|0644, st_size=585, ...}, 0) = 0
+  # newfstatat(AT_FDCWD, "/tmp/lib/auto/findimagedupes/findimagedupes.so", {st_mode=S_IFREG|0555, st_size=16400, ...}, 0) = 0
+  buildPhase = "
+    runHook preBuild
+    # fix: Invalid value '$out' for config option DIRECTORY
+    mkdir $out
+    # build findimagedupes.so
+    # compile inline C code (perl Inline::C) on the first run
+    # fix: Can't open $out/config-x86_64-linux-thread-multi-5.040000 for output. Read-only file system
+    ${lib.getExe perl} findimagedupes
+    # build manpage
+    ${lib.getExe' perl "pod2man"} findimagedupes > findimagedupes.1
+    runHook postBuild
+  ";
+
+  installPhase = ''
+    runHook preInstall
+    installBin findimagedupes
+    installManPage findimagedupes.1
+    runHook postInstall
+  '';
+
+  postFixup = ''
+    wrapProgram "$out/bin/findimagedupes" \
+      --prefix PERL5LIB : "${
+        with perlPackages;
+        makePerlPath [
+          DBFile
+          FileMimeInfo
+          FileBaseDir
+          #GraphicsMagick
+          ImageMagick
+          Inline
+          InlineC
+          ParseRecDescent
+        ]
+      }"
+  '';
+
+  meta = {
+    homepage = "http://www.jhnc.org/findimagedupes/";
+    description = "Finds visually similar or duplicate images";
+    license = lib.licenses.gpl3Plus;
+    maintainers = with lib.maintainers; [ stunkymonkey ];
+  };
+}

pkgs/by-name/fl/fluffychat/package.nix

@@ -9,6 +9,7 @@
   flutter332,
   flutter335,
   pulseaudio,
+  webkitgtk_4_1,
   copyDesktopItems,
   makeDesktopItem,
 
@@ -32,13 +33,13 @@ in
 flutter335.buildFlutterApplication (
   rec {
     pname = "fluffychat-${targetFlutterPlatform}";
-    version = "2.2.0";
+    version = "2.3.1";
 
     src = fetchFromGitHub {
       owner = "krille-chan";
       repo = "fluffychat";
       tag = "v${version}";
-      hash = "sha256-+puhKlg+ZJVjmL0hoWUXm7JU5hpoKqPZ3T5rWy+rPsQ=";
+      hash = "sha256-jQdWy/oo8WS6DU7VD4n4smL6P+aoqJvN+Yb2gt3hpyY=";
     };
 
     inherit pubspecLock;
@@ -69,6 +70,7 @@ flutter335.buildFlutterApplication (
     nativeBuildInputs = [
       imagemagick
       copyDesktopItems
+      webkitgtk_4_1
     ];
 
     runtimeDependencies = [ pulseaudio ];
@@ -115,6 +117,15 @@ flutter335.buildFlutterApplication (
         };
     };
 
+    # Temporary fix for json deprecation error
+    # https://github.com/juliansteenbakker/flutter_secure_storage/issues/965
+    postPatch = ''
+      substituteInPlace linux/CMakeLists.txt \
+        --replace-fail \
+        "PRIVATE -Wall -Werror" \
+        "PRIVATE -Wall -Werror -Wno-deprecated"
+    '';
+
     postInstall = ''
       FAV=$out/app/fluffychat-linux/data/flutter_assets/assets/favicon.png
       ICO=$out/share/icons

pkgs/by-name/fl/fluffychat/pubspec.lock.json

@@ -314,11 +314,11 @@
       "dependency": "direct main",
       "description": {
         "name": "cross_file",
-        "sha256": "7caf6a750a0c04effbb52a676dce9a4a592e10ad35c34d6d2d0e4811160d5670",
+        "sha256": "942a4791cd385a68ccb3b32c71c427aba508a1bb949b86dff2adbe4049f16239",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.3.4+2"
+      "version": "0.3.5"
     },
     "crypto": {
       "dependency": "transitive",
@@ -410,6 +410,16 @@
       "source": "hosted",
       "version": "0.6.3"
     },
+    "desktop_webview_window": {
+      "dependency": "transitive",
+      "description": {
+        "name": "desktop_webview_window",
+        "sha256": "57cf20d81689d5cbb1adfd0017e96b669398a669d927906073b0e42fc64111c0",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "0.2.3"
+    },
     "device_info_plus": {
       "dependency": "direct main",
       "description": {
@@ -494,11 +504,11 @@
       "dependency": "direct main",
       "description": {
         "name": "file_picker",
-        "sha256": "f2d9f173c2c14635cc0e9b14c143c49ef30b4934e8d1d274d6206fcb0086a06f",
+        "sha256": "f8f4ea435f791ab1f817b4e338ed958cb3d04ba43d6736ffc39958d950754967",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "10.3.3"
+      "version": "10.3.6"
     },
     "file_selector": {
       "dependency": "direct main",
@@ -749,15 +759,14 @@
       "version": "9.2.4"
     },
     "flutter_secure_storage_linux": {
-      "dependency": "direct overridden",
+      "dependency": "transitive",
       "description": {
-        "path": "flutter_secure_storage_linux",
-        "ref": "patch-2",
-        "resolved-ref": "f076cbb65b075afd6e3b648122987a67306dc298",
-        "url": "https://github.com/m-berto/flutter_secure_storage.git"
+        "name": "flutter_secure_storage_linux",
+        "sha256": "be76c1d24a97d0b98f8b54bce6b481a380a6590df992d0098f868ad54dc8f688",
+        "url": "https://pub.dev"
       },
-      "source": "git",
-      "version": "2.0.1"
+      "source": "hosted",
+      "version": "1.2.3"
     },
     "flutter_secure_storage_macos": {
       "dependency": "transitive",
@@ -770,14 +779,14 @@
       "version": "3.1.3"
     },
     "flutter_secure_storage_platform_interface": {
-      "dependency": "direct overridden",
+      "dependency": "transitive",
       "description": {
         "name": "flutter_secure_storage_platform_interface",
-        "sha256": "b8337d3d52e429e6c0a7710e38cf9742a3bb05844bd927450eb94f80c11ef85d",
+        "sha256": "cf91ad32ce5adef6fba4d736a542baca9daf3beac4db2d04be350b87f69ac4a8",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.0.0"
+      "version": "1.1.2"
     },
     "flutter_secure_storage_web": {
       "dependency": "transitive",
@@ -819,32 +828,31 @@
       "dependency": "direct main",
       "description": {
         "name": "flutter_vodozemac",
-        "sha256": "54cd3790b6dfdc1afce928f8c46f7eeea9e4f8326f077400894935926f202057",
+        "sha256": "16d4b44dd338689441fe42a80d0184e5c864e9563823de9e7e6371620d2c0590",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.3.0"
+      "version": "0.4.1"
     },
     "flutter_web_auth_2": {
       "dependency": "direct main",
       "description": {
-        "path": "flutter_web_auth_2",
-        "ref": "3.x-without-v1",
-        "resolved-ref": "48682f19576001e50104a602d891343850adb67f",
-        "url": "https://github.com/ThexXTURBOXx/flutter_web_auth_2.git"
+        "name": "flutter_web_auth_2",
+        "sha256": "3c14babeaa066c371f3a743f204dd0d348b7d42ffa6fae7a9847a521aff33696",
+        "url": "https://pub.dev"
       },
-      "source": "git",
-      "version": "3.1.2-without-v1"
+      "source": "hosted",
+      "version": "4.1.0"
     },
     "flutter_web_auth_2_platform_interface": {
       "dependency": "transitive",
       "description": {
         "name": "flutter_web_auth_2_platform_interface",
-        "sha256": "e8669e262005a8354389ba2971f0fc1c36188481234ff50d013aaf993f30f739",
+        "sha256": "c63a472c8070998e4e422f6b34a17070e60782ac442107c70000dd1bed645f4d",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "3.1.0"
+      "version": "4.1.0"
     },
     "flutter_web_plugins": {
       "dependency": "transitive",
@@ -982,11 +990,11 @@
       "dependency": "direct main",
       "description": {
         "name": "go_router",
-        "sha256": "d8f590a69729f719177ea68eb1e598295e8dbc41bbc247fed78b2c8a25660d7c",
+        "sha256": "c92d18e1fe994cb06d48aa786c46b142a5633067e8297cff6b5a3ac742620104",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "16.3.0"
+      "version": "17.0.0"
     },
     "gsettings": {
       "dependency": "transitive",
@@ -1052,11 +1060,11 @@
       "dependency": "direct main",
       "description": {
         "name": "http",
-        "sha256": "bb2ce4590bc2667c96f318d68cac1b5a7987ec819351d32b1c987239a815e007",
+        "sha256": "87721a4a50b19c7f1d49001e51409bddc46303966ce89a65af4f4e6004896412",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "1.5.0"
+      "version": "1.6.0"
     },
     "http_multi_server": {
       "dependency": "transitive",
@@ -1092,11 +1100,11 @@
       "dependency": "direct main",
       "description": {
         "name": "image_picker",
-        "sha256": "736eb56a911cf24d1859315ad09ddec0b66104bc41a7f8c5b96b4e2620cf5041",
+        "sha256": "784210112be18ea55f69d7076e2c656a4e24949fa9e76429fe53af0c0f4fa320",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "1.2.0"
+      "version": "1.2.1"
     },
     "image_picker_android": {
       "dependency": "transitive",
@@ -1388,11 +1396,11 @@
       "dependency": "direct main",
       "description": {
         "name": "matrix",
-        "sha256": "84354dd61f47b297631a3fe5eeebb5c1e0725f872b8fae75851a49cd5689c4f1",
+        "sha256": "0660c8f662f53b56eb2c0d7a7019517b735f20218ce35bc20f44de43bc3a9466",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "3.0.1"
+      "version": "4.0.0"
     },
     "meta": {
       "dependency": "transitive",
@@ -1778,11 +1786,11 @@
       "dependency": "direct main",
       "description": {
         "name": "qr_code_scanner_plus",
-        "sha256": "41f4a834a48d670d25e3917cb9f1dbb4742298a0b4ab60d82416b295b73931e1",
+        "sha256": "b764e5004251c58d9dee0c295e6006e05bd8d249e78ac3383abdb5afe0a996cd",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.0.13"
+      "version": "2.0.14"
     },
     "qr_image": {
       "dependency": "direct main",
@@ -2614,11 +2622,11 @@
       "dependency": "direct main",
       "description": {
         "name": "video_player",
-        "sha256": "0d55b1f1a31e5ad4c4967bfaa8ade0240b07d20ee4af1dfef5f531056512961a",
+        "sha256": "096bc28ce10d131be80dfb00c223024eb0fba301315a406728ab43dd99c45bdf",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.10.0"
+      "version": "2.10.1"
     },
     "video_player_android": {
       "dependency": "transitive",
@@ -2674,11 +2682,11 @@
       "dependency": "transitive",
       "description": {
         "name": "vodozemac",
-        "sha256": "95cac62ffab94db99e134c8f9aac198f8131a4eed0bed76a6cfc9c72add229b9",
+        "sha256": "39144e20740807731871c9248d811ed5a037b21d0aa9ffcfa630954de74139d9",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.3.0"
+      "version": "0.4.0"
     },
     "wakelock_plus": {
       "dependency": "direct main",

pkgs/by-name/fl/fluxcd/package.nix

@@ -8,10 +8,10 @@
 }:
 
 let
-  version = "2.7.3";
-  srcHash = "sha256-nyMKlcJcDa532NqiT16eQJH0Z4dAO1MHkIzsrWlJS7Q=";
-  vendorHash = "sha256-0aQYOmH9CFv0gQ3PIEWr3OhC1jyQOIkNMp9lb7GQ40I=";
-  manifestsHash = "sha256-SQkMqcJY3FHLx6aAwWL0Nuz3fzPTevod4paz2H2srcI=";
+  version = "2.7.4";
+  srcHash = "sha256-O3YaT8fFQz4iF8dZmwIVms/6XtJ+v/8hRw0wlSN2jq0=";
+  vendorHash = "sha256-vrIh4gI5SwhNpquNb5jz821ZHjoYlEHod84ljQkQQE4=";
+  manifestsHash = "sha256-5Bohn437eZcTKQ+7FP7eYdTuTq2X7/ennfKqIm58Lgg=";
 
   manifests = fetchzip {
     url = "https://github.com/fluxcd/flux2/releases/download/v${version}/manifests.tar.gz";
@@ -78,7 +78,6 @@ buildGoModule rec {
     homepage = "https://fluxcd.io";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [
-      bryanasdev000
       jlesquembre
       ryan4yin
     ];

pkgs/by-name/fr/freerdp/package.nix

@@ -63,13 +63,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "freerdp";
-  version = "3.17.2";
+  version = "3.18.0";
 
   src = fetchFromGitHub {
     owner = "FreeRDP";
     repo = "FreeRDP";
     rev = finalAttrs.version;
-    hash = "sha256-r9a+tQ3QIBfF4Vtyo4F4dwqLloxJTTFUQFV8J53ITZ4=";
+    hash = "sha256-+/nZulRjZ/Sc2x9WkKVxyrRX/8F/qDc+2B4QGTPWAmw=";
   };
 
   postPatch = ''

pkgs/by-name/gd/gdm/package.nix

@@ -43,7 +43,7 @@ in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gdm";
-  version = "49.1";
+  version = "49.2";
 
   outputs = [
     "out"
@@ -52,7 +52,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/gdm/${lib.versions.major finalAttrs.version}/gdm-${finalAttrs.version}.tar.xz";
-    hash = "sha256-adpdExncLGit9c05StWb7Jm7LiTyhARaG7Ss13QAROU=";
+    hash = "sha256-mBNjH59fD4YOoUpDeGbmDvx77TAjt8O3Zcxd4d5ZegY=";
   };
 
   mesonFlags = [

pkgs/by-name/gi/gitaly/package.nix

@@ -7,7 +7,7 @@
 }:
 
 let
-  version = "18.6.0";
+  version = "18.6.1";
   package_version = "v${lib.versions.major version}";
   gitaly_package = "gitlab.com/gitlab-org/gitaly/${package_version}";
 
@@ -21,7 +21,7 @@ let
       owner = "gitlab-org";
       repo = "gitaly";
       rev = "v${version}";
-      hash = "sha256-uPbTjmixStlPaUuy9TAaMoYCPVrnpxf67ath+xDFLnw=";
+      hash = "sha256-aG2JG918tq/aXu9UzcSaLSE5M/pXQtJXesKXp4Q0iQk=";
     };
 
     vendorHash = "sha256-+5CTncYwtGlScFvVc3QaEScfuqMqvsjnGhggM1HMhNU=";

pkgs/by-name/gi/gitlab-container-registry/package.nix

@@ -6,7 +6,7 @@
 
 buildGo124Module rec {
   pname = "gitlab-container-registry";
-  version = "4.31.0";
+  version = "4.32.0";
   rev = "v${version}-gitlab";
 
   # nixpkgs-update: no auto update
@@ -14,10 +14,10 @@ buildGo124Module rec {
     owner = "gitlab-org";
     repo = "container-registry";
     inherit rev;
-    hash = "sha256-Vy0YaH3GP/IY6UDMSedEzmvEbaOG6QLCFANvbtDRct0=";
+    hash = "sha256-LrrLNggb9OAhYCZ3STgBVJEY6m4bDo7aH3FO66s6Ge8=";
   };
 
-  vendorHash = "sha256-xrp6qLU7KzTt001KmydCkirtpQJdIxM4AXgbIaBmJ/w=";
+  vendorHash = "sha256-zynz4btCcaTPTaBwMQdHB6rardrIvKKvmlo4wR0YIgI=";
 
   checkFlags =
     let

pkgs/by-name/gi/gitlab-pages/package.nix

@@ -6,14 +6,14 @@
 
 buildGoModule rec {
   pname = "gitlab-pages";
-  version = "18.6.0";
+  version = "18.6.1";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitLab {
     owner = "gitlab-org";
     repo = "gitlab-pages";
     rev = "v${version}";
-    hash = "sha256-ndxdgvf+mjt6PYQpEvyinEP64qRVB5lQXvtgR1eUjWs=";
+    hash = "sha256-dZEwBTjfHG6tHf4eBOML06yJwLTYC9u1c/8i3KJINh4=";
   };
 
   vendorHash = "sha256-AL6V2LPzCGo/7IuY8msip35OScfocp3zO2ZzM8cZfnU=";

pkgs/by-name/gi/gitlab-runner/package.nix

@@ -4,23 +4,22 @@
   bash,
   buildGoModule,
   fetchFromGitLab,
-  fetchpatch,
   nix-update-script,
   versionCheckHook,
 }:
 
 buildGoModule (finalAttrs: {
   pname = "gitlab-runner";
-  version = "18.6.0";
+  version = "18.5.0";
 
   src = fetchFromGitLab {
     owner = "gitlab-org";
     repo = "gitlab-runner";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-SpfmFpL4bZbzC3T77EEbOoV9dVY3tLgcuE0gN4x1168=";
+    hash = "sha256-xuRYnK5Ev2M/vrVWMHcTcK7LLwlQ30MVadMjA67fHpY=";
   };
 
-  vendorHash = "sha256-9Ttmf/iTikSAlAIlmKSRMEDizPP4Iw0CttcR8oYLiMU=";
+  vendorHash = "sha256-5Gh9jQ4GkvtN8inEUphehbsnmfyQldvxjbxBkXQ63wc=";
 
   # For patchShebangs
   buildInputs = [ bash ];
@@ -28,12 +27,6 @@ buildGoModule (finalAttrs: {
   patches = [
     ./fix-shell-path.patch
     ./remove-bash-test.patch
-    # fix regression. remove with next release.
-    (fetchpatch {
-      name = "fix-shell-executor-not-working-with-variables-that-use-file-variables.patch";
-      url = "https://gitlab.com/gitlab-org/gitlab-runner/-/commit/6318fe8e38ca9774eb0f52fa2c68555cdad3ab44.patch";
-      hash = "sha256-GTdBo+7kHHpNs6JywjOII4NBcHjFYEZ3xhdGTcGKov4=";
-    })
   ];
 
   prePatch = ''

pkgs/by-name/gi/gitlab/data.json

@@ -1,16 +1,16 @@
 {
-  "version": "18.6.0",
-  "repo_hash": "0pnl0n4yx15i2p7c7738vs4wk4w922zw5nv8p2mjgi6h4frkcg89",
+  "version": "18.6.1",
+  "repo_hash": "0r12qlhngkdpn7arbjcj76hfhdwc1qz6p4dji88ga7qmcz5hglv9",
   "yarn_hash": "1qrgi5zkjy3d74lfjhqwnlh9il572vjwcb63q0s1mcq7cpk8fwhs",
   "frontend_islands_yarn_hash": "0m64xhlybjlax33k5rmj9kxcj1vzqqygybyz1yzzx9pd87570k2h",
   "owner": "gitlab-org",
   "repo": "gitlab",
-  "rev": "v18.6.0-ee",
+  "rev": "v18.6.1-ee",
   "passthru": {
-    "GITALY_SERVER_VERSION": "18.6.0",
-    "GITLAB_PAGES_VERSION": "18.6.0",
+    "GITALY_SERVER_VERSION": "18.6.1",
+    "GITLAB_PAGES_VERSION": "18.6.1",
     "GITLAB_SHELL_VERSION": "14.45.3",
     "GITLAB_ELASTICSEARCH_INDEXER_VERSION": "5.10.1",
-    "GITLAB_WORKHORSE_VERSION": "18.6.0"
+    "GITLAB_WORKHORSE_VERSION": "18.6.1"
   }
 }

pkgs/by-name/gi/gitlab/gitlab-workhorse/default.nix

@@ -10,7 +10,7 @@ in
 buildGoModule rec {
   pname = "gitlab-workhorse";
 
-  version = "18.6.0";
+  version = "18.6.1";
 
   # nixpkgs-update: no auto update
   src = fetchFromGitLab {

pkgs/by-name/gn/gnome-boxes/package.nix

@@ -50,11 +50,11 @@
 
 stdenv.mkDerivation rec {
   pname = "gnome-boxes";
-  version = "49.0";
+  version = "49.1";
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnome-boxes/${lib.versions.major version}/gnome-boxes-${version}.tar.xz";
-    hash = "sha256-+kcmbab173qQTFuHadTYcbzNTmtjmjY8MjVDjXsOdXo=";
+    hash = "sha256-VUeIAd3Qg4IL0yMZKoN04E879CoOcSYy0F5olVMORMo=";
   };
 
   patches = [

pkgs/by-name/gn/gnome-calculator/package.nix

@@ -27,11 +27,11 @@
 
 stdenv.mkDerivation rec {
   pname = "gnome-calculator";
-  version = "49.1.1";
+  version = "49.2";
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnome-calculator/${lib.versions.major version}/gnome-calculator-${version}.tar.xz";
-    hash = "sha256-hA00We1p8nh6lmn5b2s/nv8Wy0hpAMcZrCUsQkVjRj0=";
+    hash = "sha256-3fTNLt2hNcQcivaPnAzc2dmpFjy59/jijKLI6B/Ydlc=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/gn/gnome-control-center/package.nix

@@ -76,11 +76,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-control-center";
-  version = "49.1";
+  version = "49.2.1";
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnome-control-center/${lib.versions.major finalAttrs.version}/gnome-control-center-${finalAttrs.version}.tar.xz";
-    hash = "sha256-VALv+PIxY6dV3sJJNmwbOmXoDw2mDwd0p0DR5YdG+Gk=";
+    hash = "sha256-T6tOmdR+Q8CoJ9/SRA2QjKX/JrwDxpcqy42cAWTOB2Q=";
   };
 
   patches = [

pkgs/by-name/gn/gnome-online-accounts/package.nix

@@ -32,7 +32,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-online-accounts";
-  version = "3.56.1";
+  version = "3.56.2";
 
   outputs = [
     "out"
@@ -45,7 +45,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnome-online-accounts/${lib.versions.majorMinor finalAttrs.version}/gnome-online-accounts-${finalAttrs.version}.tar.xz";
-    hash = "sha256-ZEWTYKNTHrft7i4DvVq3fslfEFG1aeEaR5tPlPQFxT8=";
+    hash = "sha256-zojfZUV/DmOg2Nr/EzIuKey1hBl6GH9Io6Ib4vzRyCQ=";
   };
 
   mesonFlags = [

pkgs/by-name/gn/gnome-session/package.nix

@@ -34,7 +34,7 @@
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-session";
   # Also bump ./ctl.nix when bumping major version.
-  version = "49.1";
+  version = "49.2";
 
   outputs = [
     "out"
@@ -43,7 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnome-session/${lib.versions.major finalAttrs.version}/gnome-session-${finalAttrs.version}.tar.xz";
-    hash = "sha256-F5UQvjc2KNeb56xYk+nTpeqUnAhhfX0uId45DjIN8fY=";
+    hash = "sha256-/NtPRdamDYTp7K4eN0C6tuVbqwy0ng+zgoDps486hIU=";
   };
 
   patches = [

pkgs/by-name/gn/gnome-software/package.nix

@@ -48,11 +48,11 @@ in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-software";
-  version = "49.1";
+  version = "49.2";
 
   src = fetchurl {
     url = "mirror://gnome/sources/gnome-software/${lib.versions.major finalAttrs.version}/gnome-software-${finalAttrs.version}.tar.xz";
-    hash = "sha256-Sd/sp3kogBdW0MU4bB0gRUygd2AKXR7WbsRu4zoyxm0=";
+    hash = "sha256-thC2kyqNZmQyvFjWx4xFaM1j1EKuc224vixMoBu8lGw=";
   };
 
   patches = [

pkgs/by-name/gn/gnuastro/package.nix

@@ -16,11 +16,11 @@
 
 stdenv.mkDerivation rec {
   pname = "gnuastro";
-  version = "0.23";
+  version = "0.24";
 
   src = fetchurl {
     url = "mirror://gnu/gnuastro/gnuastro-${version}.tar.gz";
-    hash = "sha256-+X53X/tZgcY/it++lY/Ov5FHwT8OfpZAfd398zs/dwI=";
+    hash = "sha256-xOZAHu5dgWGbgtjRimRHhRs24HVBGOv1vfrHoDGU+YE=";
   };
 
   nativeBuildInputs = [ libtool ];
@@ -39,6 +39,8 @@ stdenv.mkDerivation rec {
 
   enableParallelBuilding = true;
 
+  hardeningDisable = lib.optionals stdenv.hostPlatform.isDarwin [ "format" ];
+
   meta = {
     description = "GNU astronomy utilities and library";
     homepage = "https://www.gnu.org/software/gnuastro/";