diff --git a/.github/workflows/bot.yml b/.github/workflows/bot.yml
index 28f61fdb31fa..a95470292a4f 100644
--- a/.github/workflows/bot.yml
+++ b/.github/workflows/bot.yml
@@ -53,7 +53,7 @@ jobs:
             ci/github-script
 
       - name: Install dependencies
-        run: npm install @actions/artifact bottleneck
+        run: npm install @actions/artifact@5.0.3 bottleneck
 
       # Use a GitHub App, because it has much higher rate limits: 12,500 instead of 5,000 req / hour.
       - uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
diff --git a/ci/OWNERS b/ci/OWNERS
index fa76f045c29b..ea52e0dd9386 100644
--- a/ci/OWNERS
+++ b/ci/OWNERS
@@ -400,9 +400,9 @@ pkgs/development/python-modules/buildcatrust/ @ajs124 @lukegb @mweinelt
 /pkgs/applications/blockchains  @mmahut @RaghavSood
 
 # Go
-/doc/languages-frameworks/go.section.md @kalbasit @katexochen @Mic92 @zowoq
-/pkgs/build-support/go @kalbasit @katexochen @Mic92 @zowoq
-/pkgs/development/compilers/go @kalbasit @katexochen @Mic92 @zowoq
+/doc/languages-frameworks/go.section.md @kalbasit @katexochen @Mic92
+/pkgs/build-support/go @kalbasit @katexochen @Mic92
+/pkgs/development/compilers/go @kalbasit @katexochen @Mic92
 
 # GNOME
 /pkgs/desktops/gnome                              @jtojnar
diff --git a/maintainers/github-teams.json b/maintainers/github-teams.json
index 2b3adafe59c7..b074ca4207c0 100644
--- a/maintainers/github-teams.json
+++ b/maintainers/github-teams.json
@@ -831,7 +831,6 @@
       "K900": 386765,
       "LunNova": 782440,
       "NickCao": 15247171,
-      "SCOTT-HAMILTON": 24496705,
       "SuperSandro2000": 7258858,
       "bkchr": 5718007,
       "ilya-fedin": 17829319,
diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index f0a06a71c1e7..1b2fcb922bec 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -8719,6 +8719,7 @@
   };
   FlameFlag = {
     name = "FlameFlag";
+    email = "github@flameflag.dev";
     github = "FlameFlag";
     githubId = 57304299;
     matrix = "@donteatoreo:matrix.org";
@@ -13007,6 +13008,12 @@
     githubId = 3267697;
     name = "Joshua Potter";
   };
+  jrrom = {
+    email = "maintainer@jrrom.com";
+    github = "jrrom";
+    githubId = 77691121;
+    name = "Jerome Baeyens";
+  };
   js6pak = {
     name = "js6pak";
     email = "me@6pak.dev";
@@ -20393,11 +20400,6 @@
     github = "peat-psuwit";
     githubId = 6771175;
   };
-  pedohorse = {
-    github = "permahorse";
-    githubId = 13556996;
-    name = "pedohorse";
-  };
   pedrohlc = {
     email = "root@pedrohlc.com";
     github = "PedroHLC";
@@ -20447,6 +20449,11 @@
     github = "peret";
     githubId = 617977;
   };
+  permahorse = {
+    github = "permahorse";
+    githubId = 13556996;
+    name = "permahorse";
+  };
   perstark = {
     email = "perstark.se@gmail.com";
     github = "perstarkse";
@@ -24083,12 +24090,6 @@
     githubId = 37299109;
     name = "Shakhzod Kudratov";
   };
-  shamilton = {
-    email = "sgn.hamilton@protonmail.com";
-    github = "SCOTT-HAMILTON";
-    githubId = 24496705;
-    name = "Scott Hamilton";
-  };
   ShamrockLee = {
     email = "shamrocklee@posteo.net";
     github = "ShamrockLee";
@@ -25753,6 +25754,12 @@
     github = "takeda";
     githubId = 411978;
   };
+  takeokunn = {
+    email = "bararararatty@gmail.com";
+    github = "takeokunn";
+    githubId = 11222510;
+    name = "Takeo Obara";
+  };
   taketwo = {
     email = "alexandrov88@gmail.com";
     github = "taketwo";
@@ -28763,6 +28770,12 @@
     github = "peterablehmann";
     githubId = 36541313;
   };
+  xiangpingjiang = {
+    email = "xiangpingjiang1998@gmail.com";
+    github = "xiangpingjiang";
+    githubId = 45722758;
+    name = "xiangpingjiang";
+  };
   xiaoxiangmoe = {
     name = "ZHAO JinXiang";
     email = "xiaoxiangmoe@gmail.com";
@@ -29236,6 +29249,12 @@
     githubId = 37774475;
     name = "Yusuf Duran";
   };
+  yusufraji = {
+    name = "Yusuf Raji";
+    github = "yusufraji";
+    githubId = 22890520;
+    matrix = "@yusufraji49:matrix.org";
+  };
   yvan-sraka = {
     email = "yvan@sraka.xyz";
     github = "yvan-sraka";
diff --git a/nixos/doc/manual/release-notes/rl-2605.section.md b/nixos/doc/manual/release-notes/rl-2605.section.md
index 8f099ccfb873..a9385ccb445c 100644
--- a/nixos/doc/manual/release-notes/rl-2605.section.md
+++ b/nixos/doc/manual/release-notes/rl-2605.section.md
@@ -36,6 +36,8 @@
 
 - [dsearch](https://github.com/AvengeMedia/danksearch), a fast filesystem search service with fuzzy matching. Available as [programs.dsearch](#opt-programs.dsearch.enable).
 
+- [Dunst](https://github.com/dunst-project/dunst), a lightweight and customizable notification daemon. Available as [services.dunst](#opt-services.dunst.enable).
+
 - [Ente Auth](https://ente.io/auth/), an open source 2FA authenticator, with end-to-end encrypted backups. Available as [programs.ente-auth](#opt-programs.ente-auth.enable).
 
 - [Dawarich](https://dawarich.app/), a self-hostable location history tracker. Available as [services.dawarich](#opt-services.dawarich.enable).
@@ -136,6 +138,8 @@ See <https://github.com/NixOS/nixpkgs/issues/481673>.
 
 - `services.openssh` now supports generating host SSH keys by setting `services.openssh.generateHostKeys = true` while leaving `services.openssh.enable` disabled.  This is particularly useful for systems that have no need of an SSH daemon but want SSH host keys for other purposes such as using agenix or sops-nix.
 
+- `services.caddy` now supports setting `httpPort` and `httpsPort` and opening them in the firewall via `openFirewall`.
+
 - `services.slurm` now supports slurmrestd usage through the `services.slurm.rest` NixOS options.
 
 - `glibc` has been updated to version 2.42.
diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix
index a6913729e510..4539b49f7ba8 100644
--- a/nixos/modules/module-list.nix
+++ b/nixos/modules/module-list.nix
@@ -558,6 +558,7 @@
   ./services/desktops/bonsaid.nix
   ./services/desktops/cpupower-gui.nix
   ./services/desktops/dleyna.nix
+  ./services/desktops/dunst.nix
   ./services/desktops/espanso.nix
   ./services/desktops/flatpak.nix
   ./services/desktops/geoclue2.nix
diff --git a/nixos/modules/programs/openvpn3.nix b/nixos/modules/programs/openvpn3.nix
index 88c2660055c1..e45475ab3c37 100644
--- a/nixos/modules/programs/openvpn3.nix
+++ b/nixos/modules/programs/openvpn3.nix
@@ -128,7 +128,6 @@ in
   };
 
   meta.maintainers = with lib.maintainers; [
-    shamilton
     progrm_jarvis
   ];
 }
diff --git a/nixos/modules/services/audio/mpd.nix b/nixos/modules/services/audio/mpd.nix
index b6cbe78d414b..909f78d9a04e 100644
--- a/nixos/modules/services/audio/mpd.nix
+++ b/nixos/modules/services/audio/mpd.nix
@@ -143,9 +143,13 @@ in
       };
 
       openFirewall = lib.mkOption {
-        type = lib.types.bool;
-        default = false;
-        description = "Open ports in the firewall for mpd.";
+        type = lib.types.nullOr lib.types.bool;
+        default = null;
+        description = ''
+          Open ports in the firewall for mpd. If `null` (default), you might
+          get a warning asking you to set it explicitly to `true` or `false`,
+          depending upon the value of `services.mpd.settings.bind_to_address`.
+        '';
       };
 
       settings = lib.mkOption {
@@ -378,9 +382,9 @@ in
             ])
             || (lib.hasPrefix "/" cfg.settings.bind_to_address)
           )
-          && !cfg.openFirewall
+          && (isNull cfg.openFirewall)
         )
-        "Using '${cfg.settings.bind_to_address}' as services.mpd.settings.bind_to_address without enabling services.mpd.openFirewall, might prevent you from accessing MPD from other clients.";
+        "Using '${cfg.settings.bind_to_address}' as services.mpd.settings.bind_to_address without enabling services.mpd.openFirewall, might prevent you from accessing MPD from other clients. To suppress this warning, set services.mpd.openFirewall explicitly to `false`";
 
     # install mpd units
     systemd.packages = [ pkgs.mpd ];
@@ -438,7 +442,9 @@ in
       };
     };
 
-    networking.firewall.allowedTCPPorts = lib.optionals cfg.openFirewall [ cfg.settings.port ];
+    networking.firewall.allowedTCPPorts = lib.optionals (
+      builtins.isBool cfg.openFirewall && cfg.openFirewall
+    ) [ cfg.settings.port ];
 
     users.users = lib.optionalAttrs (cfg.user == name) {
       ${name} = {
diff --git a/nixos/modules/services/databases/lldap.nix b/nixos/modules/services/databases/lldap.nix
index 1680965573c9..df27b404ba0f 100644
--- a/nixos/modules/services/databases/lldap.nix
+++ b/nixos/modules/services/databases/lldap.nix
@@ -8,6 +8,10 @@
 let
   cfg = config.services.lldap;
   format = pkgs.formats.toml { };
+  dbName = "lldap";
+  dbUser = "lldap";
+  localPostgresql = cfg.database.createLocally && cfg.database.type == "postgresql";
+  localMysql = cfg.database.createLocally && cfg.database.type == "mariadb";
 in
 {
   options.services.lldap = with lib; {
@@ -36,6 +40,25 @@ in
       '';
     };
 
+    database = {
+      createLocally = mkOption {
+        type = types.bool;
+        default = true;
+        description = "Create the database and database user locally.";
+      };
+
+      type = mkOption {
+        type = types.enum [
+          "mariadb"
+          "postgresql"
+          "sqlite"
+        ];
+        example = "postgresql";
+        default = "sqlite";
+        description = "Database engine to use.";
+      };
+    };
+
     settings = mkOption {
       description = ''
         Free-form settings written directly to the `lldap_config.toml` file.
@@ -96,9 +119,20 @@ in
           };
 
           database_url = mkOption {
-            type = types.str;
+            type = types.nullOr types.str;
+            default = null;
+            defaultText = lib.literalExpression ''
+              if config.services.lldap.database.createLocally
+              then
+                if cfg.database.type == "sqlite"
+                then "sqlite://./users.db?mode=rwc"
+                else if cfg.database.type == "postgresql"
+                then "postgresql:///lldap?host=/run/postgresql"
+                else if cfg.database.type == "mariadb"
+                then "mysql://lldap@localhost/lldap?socket=/run/mysqld/mysqld.sock"
+              else null
+            '';
             description = "Database URL.";
-            default = "sqlite://./users.db?mode=rwc";
             example = "postgres://postgres-user:password@postgres-server/my-database";
           };
 
@@ -188,7 +222,7 @@ in
     ];
 
     warnings =
-      lib.optionals (cfg.settings.ldap_user_pass or null != null) [
+      lib.optionals ((cfg.settings.ldap_user_pass or null) != null) [
         ''
           lldap: Unsecure `ldap_user_pass` setting is used. Prefer `ldap_user_pass_file` instead.
         ''
@@ -205,10 +239,29 @@ in
             ''
           ];
 
+    services.lldap.settings.database_url = lib.mkIf cfg.database.createLocally (
+      lib.mkDefault (
+        if cfg.database.type == "sqlite" then
+          "sqlite://./users.db?mode=rwc"
+        else if cfg.database.type == "postgresql" then
+          "postgresql:///${dbName}?host=/run/postgresql"
+        else if cfg.database.type == "mariadb" then
+          "mysql://${dbUser}@localhost/${dbName}?socket=/run/mysqld/mysqld.sock"
+        else
+          null
+      )
+    );
+
     systemd.services.lldap = {
       description = "Lightweight LDAP server (lldap)";
       wants = [ "network-online.target" ];
-      after = [ "network-online.target" ];
+      after = [
+        "network-online.target"
+      ]
+      ++ lib.optional localPostgresql "postgresql.target"
+      ++ lib.optional localMysql "mysql.service";
+      requires =
+        lib.optional localPostgresql "postgresql.target" ++ lib.optional localMysql "mysql.service";
       wantedBy = [ "multi-user.target" ];
       # lldap defaults to a hardcoded `jwt_secret` value if none is provided, which is bad, because
       # an attacker could create a valid admin jwt access token fairly trivially.
@@ -238,5 +291,30 @@ in
       };
       inherit (cfg) environment;
     };
+
+    services.postgresql = lib.mkIf localPostgresql {
+      enable = true;
+      ensureDatabases = [ dbName ];
+      ensureUsers = [
+        {
+          name = dbUser;
+          ensureDBOwnership = true;
+        }
+      ];
+    };
+
+    services.mysql = lib.mkIf localMysql {
+      enable = true;
+      package = lib.mkDefault pkgs.mariadb;
+      ensureDatabases = [ dbName ];
+      ensureUsers = [
+        {
+          name = dbUser;
+          ensurePermissions = {
+            "${dbName}.*" = "ALL PRIVILEGES";
+          };
+        }
+      ];
+    };
   };
 }
diff --git a/nixos/modules/services/desktop-managers/pantheon.nix b/nixos/modules/services/desktop-managers/pantheon.nix
index 7f7cd2593393..1fe99c0f66ac 100644
--- a/nixos/modules/services/desktop-managers/pantheon.nix
+++ b/nixos/modules/services/desktop-managers/pantheon.nix
@@ -208,20 +208,11 @@ in
         "org.gnome.SettingsDaemon.XSettings.service"
       ];
 
-      # https://github.com/elementary/settings-daemon/issues/217
-      systemd.user.services.elementary-settings-daemon = {
-        description = "elementary Settings Daemon";
+      systemd.user.services."io.elementary.settings-daemon" = {
+        # https://github.com/NixOS/nixpkgs/issues/81138
         wantedBy = [ "gnome-session-initialized.target" ];
-        after = [ "gnome-session-initialized.target" ];
-
         # The daemon might launch external applications via g_app_info_launch.
         environment.PATH = lib.mkForce null;
-
-        serviceConfig = {
-          Slice = "session.slice";
-          ExecStart = "${pkgs.pantheon.elementary-settings-daemon}/bin/io.elementary.settings-daemon";
-          Restart = "on-failure";
-        };
       };
 
       # Global environment
diff --git a/nixos/modules/services/desktops/dunst.nix b/nixos/modules/services/desktops/dunst.nix
new file mode 100644
index 000000000000..a1198f828021
--- /dev/null
+++ b/nixos/modules/services/desktops/dunst.nix
@@ -0,0 +1,79 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+let
+  toml = pkgs.formats.toml { };
+  cfg = config.services.dunst;
+in
+{
+  options.services.dunst = {
+    enable = lib.mkEnableOption "Dunst notification daemon";
+
+    package = lib.mkPackageOption pkgs "dunst" { } // {
+      apply =
+        p:
+        p.override {
+          withX11 = cfg.enableX11;
+          withWayland = cfg.enableWayland;
+        };
+    };
+
+    settings = lib.mkOption {
+      type = toml.type;
+      default = { };
+      description = "Dunst configuration, see dunst(5)";
+      example = lib.literalExpression ''
+        {
+          global = {
+            width = 300;
+            height = 300;
+            offset = "30x50";
+            origin = "top-right";
+            transparency = 10;
+            frame_color = "#eceff1";
+            font = "Droid Sans 9";
+          };
+
+          urgency_normal = {
+            background = "#37474f";
+            foreground = "#eceff1";
+            timeout = 10;
+          };
+        };
+      '';
+    };
+
+    enableX11 = lib.mkOption {
+      type = lib.types.bool;
+      default = true;
+      description = "Whether to enable X11 support.";
+    };
+
+    enableWayland = lib.mkOption {
+      type = lib.types.bool;
+      default = true;
+      description = "Whether to enable Wayland support.";
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    assertions = [
+      {
+        assertion = cfg.enableX11 || cfg.enableWayland;
+        message = "Dunst must be built with at least either X11 support or Wayland support";
+      }
+    ];
+
+    environment = {
+      systemPackages = [ cfg.package ];
+      etc."xdg/dunst/dunstrc".source = toml.generate "dunstrc" cfg.settings;
+    };
+
+    services.dbus.packages = [ cfg.package ];
+  };
+
+  meta.maintainers = with lib.maintainers; [ nyukuru ];
+}
diff --git a/nixos/modules/services/misc/n8n.nix b/nixos/modules/services/misc/n8n.nix
index 1c2e38717c2b..00263a368891 100644
--- a/nixos/modules/services/misc/n8n.nix
+++ b/nixos/modules/services/misc/n8n.nix
@@ -13,6 +13,13 @@ let
   regularEnv = lib.filterAttrs (name: _value: !(lib.hasSuffix "_FILE" name)) cfg.environment;
   fileBasedEnv = lib.filterAttrs (name: _value: lib.hasSuffix "_FILE" name) cfg.environment;
 
+  customNodesDir = pkgs.linkFarm "n8n-custom-nodes" (
+    map (pkg: {
+      name = pkg.pname;
+      path = "${pkg}/lib/node_modules/${pkg.pname}";
+    }) cfg.customNodes
+  );
+
   # Transform file-based env vars to point to credentials directory
   fileBasedEnvTransformed = lib.mapAttrs' (
     varName: _secretPath: lib.nameValuePair varName "%d/${envVarToCredName varName}"
@@ -34,6 +41,17 @@ in
 
     package = lib.mkPackageOption pkgs "n8n" { };
 
+    customNodes = lib.mkOption {
+      type = lib.types.listOf lib.types.package;
+      default = [ ];
+      example = lib.literalExpression "[ pkgs.n8n-nodes-carbonejs ]";
+      description = ''
+        List of custom n8n community node packages to load.
+        Each package is expected to be an npm package with an `n8n.nodes` entry in its `package.json`.
+        The packages are made available to n8n via the `N8N_CUSTOM_EXTENSIONS` environment variable.
+      '';
+    };
+
     openFirewall = lib.mkOption {
       type = lib.types.bool;
       default = false;
@@ -121,6 +139,9 @@ in
         // {
           HOME = config.services.n8n.environment.N8N_USER_FOLDER;
         }
+        // lib.optionalAttrs (cfg.customNodes != [ ]) {
+          N8N_CUSTOM_EXTENSIONS = toString customNodesDir;
+        }
         // fileBasedEnvTransformed;
       serviceConfig = {
         Type = "simple";
diff --git a/nixos/modules/services/security/kanidm.nix b/nixos/modules/services/security/kanidm.nix
index 7483e1463e06..924b3f60f647 100644
--- a/nixos/modules/services/security/kanidm.nix
+++ b/nixos/modules/services/security/kanidm.nix
@@ -238,8 +238,8 @@ in
     enablePam = mkEnableOption "the Kanidm PAM and NSS integration";
 
     package = mkPackageOption pkgs "kanidm" {
-      example = "kanidm_1_4";
-      extraDescription = "If not set will receive a specific version based on stateVersion. Set to `pkgs.kanidm` to always receive the latest version, with the understanding that this could introduce breaking changes.";
+      example = "kanidm_1_8";
+      extraDescription = "Must be set to an explicit version.";
     };
 
     serverSettings = mkOption {
@@ -874,16 +874,6 @@ in
         )
       );
 
-    services.kanidm.package =
-      let
-        pkg =
-          if lib.versionAtLeast config.system.stateVersion "24.11" then
-            pkgs.kanidm_1_4
-          else
-            lib.warn "No default kanidm package found for stateVersion = '${config.system.stateVersion}'. Using unpinned version. Consider setting `services.kanidm.package = pkgs.kanidm_1_x` to avoid upgrades introducing breaking changes." pkgs.kanidm;
-      in
-      lib.mkDefault pkg;
-
     environment.systemPackages = mkIf cfg.enableClient [ cfg.package ];
 
     systemd.tmpfiles.settings."10-kanidm" = mkIf enableServerBackup {
@@ -1080,6 +1070,7 @@ in
   };
 
   meta.maintainers = with lib.maintainers; [
+    adamcstephens
     Flakebi
     oddlama
   ];
diff --git a/nixos/modules/services/web-servers/caddy/default.nix b/nixos/modules/services/web-servers/caddy/default.nix
index 1fcf5ef6de5f..8d60ab71771e 100644
--- a/nixos/modules/services/web-servers/caddy/default.nix
+++ b/nixos/modules/services/web-servers/caddy/default.nix
@@ -1,5 +1,6 @@
 {
   config,
+  options,
   lib,
   pkgs,
   ...
@@ -305,6 +306,23 @@ in
       '';
     };
 
+    httpPort = mkOption {
+      default = 80;
+      type = with types; nullOr port;
+      description = ''
+        The default port to listen on for HTTP traffic.
+      '';
+    };
+
+    httpsPort = mkOption {
+      default = 443;
+      type = with types; nullOr port;
+      description = ''
+        The default port to listen on for HTTPS traffic.
+        Will also be used for HTTP/3.
+      '';
+    };
+
     enableReload = mkOption {
       default = true;
       type = types.bool;
@@ -376,6 +394,19 @@ in
         [here](https://caddyserver.com/docs/caddyfile/concepts#environment-variables)
       '';
     };
+    openFirewall = mkOption {
+      type = types.bool;
+      default = false;
+      example = true;
+      description = ''
+        Whether to enable opening the specified http(s) ports in the firewall.
+        Any port set to `null` will not be opened.
+
+        ::: {.note}
+        If you use other ports for your virtual hosts, you need to open them manually.
+        :::
+      '';
+    };
   };
 
   # implementation
@@ -399,6 +430,18 @@ in
     services.caddy.globalConfig = ''
       ${optionalString (cfg.email != null) "email ${cfg.email}"}
       ${optionalString (cfg.acmeCA != null) "acme_ca ${cfg.acmeCA}"}
+      ${optionalString (
+        !elem cfg.httpPort [
+          null
+          options.services.caddy.httpPort.default
+        ]
+      ) "http_port ${cfg.httpPort}"}
+      ${optionalString (
+        !elem cfg.httpsPort [
+          null
+          options.services.caddy.httpsPort.default
+        ]
+      ) "https_port ${cfg.httpsPort}"}
       log {
         ${cfg.logFormat}
       }
@@ -480,5 +523,13 @@ in
       listToAttrs certCfg;
 
     environment.etc.${etcConfigFile}.source = cfg.configFile;
+
+    networking.firewall = mkIf cfg.openFirewall {
+      allowedTCPPorts = filter (port: port != null) [
+        cfg.httpPort
+        cfg.httpsPort
+      ];
+      allowedUDPPorts = optional (cfg.httpsPort != null) cfg.httpsPort;
+    };
   };
 }
diff --git a/nixos/tests/all-tests.nix b/nixos/tests/all-tests.nix
index 50c27ec6da79..2b538a450c2f 100644
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@@ -408,6 +408,7 @@ in
   containers-tmpfs = runTest ./containers-tmpfs.nix;
   containers-unified-hierarchy = runTest ./containers-unified-hierarchy.nix;
   convos = runTest ./convos.nix;
+  coredns = runTest ./coredns.nix;
   corerad = runTest ./corerad.nix;
   corteza = runTest ./corteza.nix;
   cosmic = runTest {
diff --git a/nixos/tests/coredns.nix b/nixos/tests/coredns.nix
new file mode 100644
index 000000000000..7f0c8dc8da3a
--- /dev/null
+++ b/nixos/tests/coredns.nix
@@ -0,0 +1,42 @@
+{ pkgs, ... }:
+{
+  name = "coredns";
+  meta = with pkgs.lib.maintainers; {
+    maintainers = [ johanot ];
+  };
+
+  nodes.machine =
+    { pkgs, ... }:
+    {
+      environment.systemPackages = [ pkgs.dnsutils ];
+      services.coredns = {
+        enable = true;
+        config = ''
+          .:10053 {
+                ipecho {
+                  domain test.nixos.org
+                  ttl 2629800
+                }
+              }
+        '';
+        package = pkgs.coredns.override {
+          externalPlugins = [
+            {
+              name = "ipecho";
+              repo = "github.com/Eun/coredns-ipecho";
+              version = "224170ebca45cc59c6b071d280a18f42d1ff130c";
+              position = "start-of-file";
+            }
+          ];
+          vendorHash = "sha256-dNxHpXkiqz7B/JhZdxfZluIHFVXILlSm3XtB+v/EoMY=";
+        };
+      };
+    };
+
+  testScript = ''
+    machine.start()
+    machine.wait_for_unit("coredns.service")
+    machine.wait_for_open_port(10053)
+    machine.succeed("dig @127.0.0.1 -p 10053 127.0.0.2.test.nixos.org A +short | grep 127.0.0.2")
+  '';
+}
diff --git a/nixos/tests/kanidm-provisioning.nix b/nixos/tests/kanidm-provisioning.nix
index 1c6c6845a74d..5e5a6f0db606 100644
--- a/nixos/tests/kanidm-provisioning.nix
+++ b/nixos/tests/kanidm-provisioning.nix
@@ -18,7 +18,7 @@ in
   name = "kanidm-provisioning-${kanidmPackage.version}";
   meta.maintainers = with pkgs.lib.maintainers; [ oddlama ];
 
-  _module.args.kanidmPackage = pkgs.lib.mkDefault pkgs.kanidmWithSecretProvisioning_1_7;
+  _module.args.kanidmPackage = pkgs.lib.mkDefault pkgs.kanidmWithSecretProvisioning_1_8;
 
   nodes.provision =
     { pkgs, lib, ... }:
diff --git a/nixos/tests/kanidm.nix b/nixos/tests/kanidm.nix
index dcbabe93cb71..7a0fe66ae968 100644
--- a/nixos/tests/kanidm.nix
+++ b/nixos/tests/kanidm.nix
@@ -17,11 +17,12 @@ in
 {
   name = "kanidm-${kanidmPackage.version}";
   meta.maintainers = with pkgs.lib.maintainers; [
+    adamcstephens
     Flakebi
     oddlama
   ];
 
-  _module.args.kanidmPackage = pkgs.lib.mkDefault pkgs.kanidm_1_7;
+  _module.args.kanidmPackage = pkgs.lib.mkDefault pkgs.kanidm_1_8;
 
   nodes.server =
     { pkgs, ... }:
diff --git a/nixos/tests/n8n.nix b/nixos/tests/n8n.nix
index 490f9cdd17c0..d3226e2ed0f4 100644
--- a/nixos/tests/n8n.nix
+++ b/nixos/tests/n8n.nix
@@ -15,6 +15,7 @@ in
     {
       services.n8n = {
         enable = true;
+        customNodes = [ pkgs.n8n-nodes-carbonejs ];
         environment = {
           WEBHOOK_URL = webhookUrl;
           N8N_TEMPLATES_ENABLED = false;
@@ -41,5 +42,11 @@ in
     # Test _FILE environment variables
     machine.succeed("grep -qF 'LoadCredential=n8n_encryption_key_file:${secretFile}' /etc/systemd/system/n8n.service")
     machine.succeed("grep -qF 'N8N_ENCRYPTION_KEY_FILE=%d/n8n_encryption_key_file' /etc/systemd/system/n8n.service")
+
+    # Test custom nodes
+    machine.succeed("grep -qF 'N8N_CUSTOM_EXTENSIONS=' /etc/systemd/system/n8n.service")
+    custom_extensions_dir = machine.succeed("grep -oP 'N8N_CUSTOM_EXTENSIONS=\\K[^\"]+' /etc/systemd/system/n8n.service").strip()
+    machine.succeed(f"test -L {custom_extensions_dir}/n8n-nodes-carbonejs")
+    machine.succeed(f"test -f {custom_extensions_dir}/n8n-nodes-carbonejs/package.json")
   '';
 }
diff --git a/pkgs/applications/editors/formiko/default.nix b/pkgs/applications/editors/formiko/default.nix
index 280400d17d26..a67be9d8cc98 100644
--- a/pkgs/applications/editors/formiko/default.nix
+++ b/pkgs/applications/editors/formiko/default.nix
@@ -48,7 +48,6 @@ buildPythonApplication rec {
     description = "reStructuredText editor and live previewer";
     homepage = "https://github.com/ondratu/formiko";
     license = lib.licenses.bsd3;
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.linux;
   };
 }
diff --git a/pkgs/applications/editors/jetbrains/ides/clion.nix b/pkgs/applications/editors/jetbrains/ides/clion.nix
index 986213af1b4f..1c5d8826a14f 100644
--- a/pkgs/applications/editors/jetbrains/ides/clion.nix
+++ b/pkgs/applications/editors/jetbrains/ides/clion.nix
@@ -21,20 +21,20 @@ let
   # update-script-start: urls
   urls = {
     x86_64-linux = {
-      url = "https://download.jetbrains.com/cpp/CLion-2025.3.1.1.tar.gz";
-      hash = "sha256-vtTTqvG932G0LBOESaUvTOhF1vQiyvZKPuAu/QcQdzY=";
+      url = "https://download.jetbrains.com/cpp/CLion-2025.3.2.tar.gz";
+      hash = "sha256-c6DFfBnMihKr/ZzMVy1ymnAE3c7iS45h3GOc5yZH8Es=";
     };
     aarch64-linux = {
-      url = "https://download.jetbrains.com/cpp/CLion-2025.3.1.1-aarch64.tar.gz";
-      hash = "sha256-Yh04N3okMfeqUUL3GZukSUJzMAHdBlE+quDMu/phFc4=";
+      url = "https://download.jetbrains.com/cpp/CLion-2025.3.2-aarch64.tar.gz";
+      hash = "sha256-zdXJB07yDuK8snFtGEiaICfOl3rD7zMeX+1ZBiagIaU=";
     };
     x86_64-darwin = {
-      url = "https://download.jetbrains.com/cpp/CLion-2025.3.1.1.dmg";
-      hash = "sha256-H6qUuONV/iYZwDJfylpDr/AvF+Wl4gnVkegZhr8hbmQ=";
+      url = "https://download.jetbrains.com/cpp/CLion-2025.3.2.dmg";
+      hash = "sha256-G06dmosEsKbV5dvRL9RxXTe+XQ8Hlkhf4nEQF6A8QiA=";
     };
     aarch64-darwin = {
-      url = "https://download.jetbrains.com/cpp/CLion-2025.3.1.1-aarch64.dmg";
-      hash = "sha256-I7FDOc8OM0P+FGMCdjKKcnHUbUTPRzFz7l56oTcGiXE=";
+      url = "https://download.jetbrains.com/cpp/CLion-2025.3.2-aarch64.dmg";
+      hash = "sha256-sLj5Qod0XwlA+/t/ZoeFrbaQbsP2S3kz/F5VjLkwFgQ=";
     };
   };
   # update-script-end: urls
@@ -48,8 +48,8 @@ in
   product = "CLion";
 
   # update-script-start: version
-  version = "2025.3.1.1";
-  buildNumber = "253.29346.307";
+  version = "2025.3.2";
+  buildNumber = "253.30387.78";
   # update-script-end: version
 
   src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));
diff --git a/pkgs/applications/editors/jetbrains/ides/datagrip.nix b/pkgs/applications/editors/jetbrains/ides/datagrip.nix
index cf93cea8a260..8a20707fc429 100644
--- a/pkgs/applications/editors/jetbrains/ides/datagrip.nix
+++ b/pkgs/applications/editors/jetbrains/ides/datagrip.nix
@@ -12,20 +12,20 @@ let
   # update-script-start: urls
   urls = {
     x86_64-linux = {
-      url = "https://download.jetbrains.com/datagrip/datagrip-2025.3.3.tar.gz";
-      hash = "sha256-cV0shZxezpvllsM4aUJPLw+PzvSxqy44F5WE10VA764=";
+      url = "https://download.jetbrains.com/datagrip/datagrip-2025.3.4.tar.gz";
+      hash = "sha256-8sR4C+a1FsngYTRnjgHKzZpmGQY2ury2Ynp3zQ3U9nk=";
     };
     aarch64-linux = {
-      url = "https://download.jetbrains.com/datagrip/datagrip-2025.3.3-aarch64.tar.gz";
-      hash = "sha256-MWqkJiZ7ElSPLv0BT1dcszFbbZOr2Ub7gRrN2bUG1BY=";
+      url = "https://download.jetbrains.com/datagrip/datagrip-2025.3.4-aarch64.tar.gz";
+      hash = "sha256-FRZP/2a7yBL7NdikAoc2StRLsgjI+qADtHPfkQFdwxI=";
     };
     x86_64-darwin = {
-      url = "https://download.jetbrains.com/datagrip/datagrip-2025.3.3.dmg";
-      hash = "sha256-JQfAVG4N2UFlQtyWF2GjHzozwOPGi6elInOSQyBf7js=";
+      url = "https://download.jetbrains.com/datagrip/datagrip-2025.3.4.dmg";
+      hash = "sha256-E3i7bxnOeHP38LGY+Dw0rlpKn4ps4iyHY23L+qzCIjc=";
     };
     aarch64-darwin = {
-      url = "https://download.jetbrains.com/datagrip/datagrip-2025.3.3-aarch64.dmg";
-      hash = "sha256-QwPJLy4Hv0FJErVTUDirG1iDn8noMlnyk4Zmk0uqZnQ=";
+      url = "https://download.jetbrains.com/datagrip/datagrip-2025.3.4-aarch64.dmg";
+      hash = "sha256-OmfIeVJ69HWBdsfI9sXnWUgDIWbp9EbdOsDXdL3/taM=";
     };
   };
   # update-script-end: urls
@@ -39,8 +39,8 @@ mkJetBrainsProduct {
   product = "DataGrip";
 
   # update-script-start: version
-  version = "2025.3.3";
-  buildNumber = "253.29346.270";
+  version = "2025.3.4";
+  buildNumber = "253.30387.92";
   # update-script-end: version
 
   src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));
diff --git a/pkgs/applications/editors/jetbrains/ides/gateway.nix b/pkgs/applications/editors/jetbrains/ides/gateway.nix
index bb51cce64b4c..3af6f0ff3cb4 100644
--- a/pkgs/applications/editors/jetbrains/ides/gateway.nix
+++ b/pkgs/applications/editors/jetbrains/ides/gateway.nix
@@ -12,20 +12,20 @@ let
   # update-script-start: urls
   urls = {
     x86_64-linux = {
-      url = "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.3.1.tar.gz";
-      hash = "sha256-j/WgB1G/b1x8RIXT1LWdcgISCCqHOmqLatfOzpV4T8Y=";
+      url = "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.3.2.tar.gz";
+      hash = "sha256-6FaCc3Kqq0jjDdmSARGk4KPIU5xrUzkSINhXcY/Gs4M=";
     };
     aarch64-linux = {
-      url = "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.3.1-aarch64.tar.gz";
-      hash = "sha256-7UKtan4cuM7svjWayM2SThGemASTSrAxKVk0TUwEgbg=";
+      url = "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.3.2-aarch64.tar.gz";
+      hash = "sha256-W7OuGrk8vab0GwCTdzKZ/sWvnYQZEDNEyEQsnM3SMqU=";
     };
     x86_64-darwin = {
-      url = "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.3.1.dmg";
-      hash = "sha256-5Dnb9xwtAid63j6ntU5YIZN+oVLzZsXNJexGpL8m9sM=";
+      url = "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.3.2.dmg";
+      hash = "sha256-uPkK+UkAUMC+JYiGnQZmdt1DKtTqHrjpE/ghpnuGb/w=";
     };
     aarch64-darwin = {
-      url = "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.3.1-aarch64.dmg";
-      hash = "sha256-24ZD2GpM4pGrJyqxyEJSQsERINR6/dNhLtd3WtzmNaU=";
+      url = "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.3.2-aarch64.dmg";
+      hash = "sha256-5LPKKtCOreiYIEWFbQNPITktjORGA8v+22tbZhUc+Uk=";
     };
   };
   # update-script-end: urls
@@ -40,8 +40,8 @@ mkJetBrainsProduct {
   productShort = "Gateway";
 
   # update-script-start: version
-  version = "2025.3.1";
-  buildNumber = "253.29346.239";
+  version = "2025.3.2";
+  buildNumber = "253.30387.104";
   # update-script-end: version
 
   src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));
diff --git a/pkgs/applications/editors/jetbrains/ides/idea.nix b/pkgs/applications/editors/jetbrains/ides/idea.nix
index bde01070d5a7..793ca3dac294 100644
--- a/pkgs/applications/editors/jetbrains/ides/idea.nix
+++ b/pkgs/applications/editors/jetbrains/ides/idea.nix
@@ -15,20 +15,20 @@ let
   # update-script-start: urls
   urls = {
     x86_64-linux = {
-      url = "https://download.jetbrains.com/idea/ideaIU-2025.3.1.1.tar.gz";
-      hash = "sha256-OgZLIpYfPzm4ZrZLYoVY4ND3CNQjo/lWXUPw6BGWmXs=";
+      url = "https://download.jetbrains.com/idea/ideaIU-2025.3.2.tar.gz";
+      hash = "sha256-o0QsnxlTxm3LCCXpt4jH5077WG7b8dMO+LDfVT/hNuQ=";
     };
     aarch64-linux = {
-      url = "https://download.jetbrains.com/idea/ideaIU-2025.3.1.1-aarch64.tar.gz";
-      hash = "sha256-h1FtLwe47B/2z+nRTWj8P3b11XuGYRMlueq6wbYEPMs=";
+      url = "https://download.jetbrains.com/idea/ideaIU-2025.3.2-aarch64.tar.gz";
+      hash = "sha256-yu8YsKgqaxCEHozq0Ar8DEbuBUDwsWelPZwG7ZI3JiE=";
     };
     x86_64-darwin = {
-      url = "https://download.jetbrains.com/idea/ideaIU-2025.3.1.1.dmg";
-      hash = "sha256-XMaynB2VjtB3xUSobmNGT7//HWkIcinZbwvIEn9Kdqo=";
+      url = "https://download.jetbrains.com/idea/ideaIU-2025.3.2.dmg";
+      hash = "sha256-624WPcLwXqP/WsUss+6Upo1W7E504S/+BvtJcjTD9uY=";
     };
     aarch64-darwin = {
-      url = "https://download.jetbrains.com/idea/ideaIU-2025.3.1.1-aarch64.dmg";
-      hash = "sha256-e9pi80XBGJL/lAaCu1nmDu5AZ0uy8s3GIEsuGyrTjfg=";
+      url = "https://download.jetbrains.com/idea/ideaIU-2025.3.2-aarch64.dmg";
+      hash = "sha256-uaBXwFX6fd5Aa7+YB/yis2fwwdR3cd9qwGigf/23bsk=";
     };
   };
   # update-script-end: urls
@@ -43,8 +43,8 @@ mkJetBrainsProduct {
   productShort = "IDEA";
 
   # update-script-start: version
-  version = "2025.3.1.1";
-  buildNumber = "253.29346.240";
+  version = "2025.3.2";
+  buildNumber = "253.30387.90";
   # update-script-end: version
 
   src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));
diff --git a/pkgs/applications/editors/jetbrains/ides/phpstorm.nix b/pkgs/applications/editors/jetbrains/ides/phpstorm.nix
index a121ce982e89..83bc8dd4da89 100644
--- a/pkgs/applications/editors/jetbrains/ides/phpstorm.nix
+++ b/pkgs/applications/editors/jetbrains/ides/phpstorm.nix
@@ -12,20 +12,20 @@ let
   # update-script-start: urls
   urls = {
     x86_64-linux = {
-      url = "https://download.jetbrains.com/webide/PhpStorm-2025.3.1.1.tar.gz";
-      hash = "sha256-u5b/elgB4/kMrgkgyqhz4L2BZqsNqt6Fwb+JIC1eSEk=";
+      url = "https://download.jetbrains.com/webide/PhpStorm-2025.3.2.tar.gz";
+      hash = "sha256-W9O2DYzJAEtgFb79xYGMUNvi8yMmH+oRhNeoKyHtYO8=";
     };
     aarch64-linux = {
-      url = "https://download.jetbrains.com/webide/PhpStorm-2025.3.1.1-aarch64.tar.gz";
-      hash = "sha256-iHIsnxTpuunA/L8/ZQsbQCqEfIu2lvtNNq9V0yPvBvY=";
+      url = "https://download.jetbrains.com/webide/PhpStorm-2025.3.2-aarch64.tar.gz";
+      hash = "sha256-YiDHheT9ZbmE75WLd0+/VLa1d+WHzXCcGDkWM0LOj/g=";
     };
     x86_64-darwin = {
-      url = "https://download.jetbrains.com/webide/PhpStorm-2025.3.1.1.dmg";
-      hash = "sha256-L4brbVVJgRgv/A2yu3oDGycWX6z5IiDf/7Zd/W2V2tk=";
+      url = "https://download.jetbrains.com/webide/PhpStorm-2025.3.2.dmg";
+      hash = "sha256-sNfPhCnJXS3IYPuDMLjptvm05zzHFdsJkLBbht7oiXg=";
     };
     aarch64-darwin = {
-      url = "https://download.jetbrains.com/webide/PhpStorm-2025.3.1.1-aarch64.dmg";
-      hash = "sha256-I1j18NK10Vda4F2VOIm3mvjqUvhFMc7OYq1NpyRG+bw=";
+      url = "https://download.jetbrains.com/webide/PhpStorm-2025.3.2-aarch64.dmg";
+      hash = "sha256-1zNcdCtb6BwtFMaDoZLVwXaS1xD8HXbBa2Jd5wSMsI4=";
     };
   };
   # update-script-end: urls
@@ -39,8 +39,8 @@ mkJetBrainsProduct {
   product = "PhpStorm";
 
   # update-script-start: version
-  version = "2025.3.1.1";
-  buildNumber = "253.29346.257";
+  version = "2025.3.2";
+  buildNumber = "253.30387.85";
   # update-script-end: version
 
   src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));
diff --git a/pkgs/applications/editors/jetbrains/ides/pycharm.nix b/pkgs/applications/editors/jetbrains/ides/pycharm.nix
index 99acdacd3133..44d3cb042872 100644
--- a/pkgs/applications/editors/jetbrains/ides/pycharm.nix
+++ b/pkgs/applications/editors/jetbrains/ides/pycharm.nix
@@ -13,20 +13,20 @@ let
   # update-script-start: urls
   urls = {
     x86_64-linux = {
-      url = "https://download.jetbrains.com/python/pycharm-2025.3.1.1.tar.gz";
-      hash = "sha256-3lQSHpqNf/yaOyIWeuhYitI//mBuJG/sfvrWMdJvtEs=";
+      url = "https://download.jetbrains.com/python/pycharm-2025.3.2.tar.gz";
+      hash = "sha256-YLXO+YhulYfkOSR6fjZKuppmPa+uLqvP/E4NxAm7o8Q=";
     };
     aarch64-linux = {
-      url = "https://download.jetbrains.com/python/pycharm-2025.3.1.1-aarch64.tar.gz";
-      hash = "sha256-tm2+8klFjyMhqPs4uH14fTY0doWDUAsrW9gehU5bGKg=";
+      url = "https://download.jetbrains.com/python/pycharm-2025.3.2-aarch64.tar.gz";
+      hash = "sha256-kphcT6a7JV72FqcTq7iuvAcolSgWdFvObn/o0jZP69g=";
     };
     x86_64-darwin = {
-      url = "https://download.jetbrains.com/python/pycharm-2025.3.1.1.dmg";
-      hash = "sha256-keHuiyw/lhhOwP3uP8g8puiyRUTtHhXqk4kdSrIOeJQ=";
+      url = "https://download.jetbrains.com/python/pycharm-2025.3.2.dmg";
+      hash = "sha256-Lxyp1g0KYapesVJ+LkRFslzIGrp2KPMrXP9nFx/CTYI=";
     };
     aarch64-darwin = {
-      url = "https://download.jetbrains.com/python/pycharm-2025.3.1.1-aarch64.dmg";
-      hash = "sha256-scG0YiqE3q2BCh3VRhHZ0ep6PDY8zRtBDRBJQGLDOSI=";
+      url = "https://download.jetbrains.com/python/pycharm-2025.3.2-aarch64.dmg";
+      hash = "sha256-lWH6M5lOjUYwzx2AqEv53V7J+5PEF9+KMZKfqbivUeY=";
     };
   };
   # update-script-end: urls
@@ -40,8 +40,8 @@ in
   product = "PyCharm";
 
   # update-script-start: version
-  version = "2025.3.1.1";
-  buildNumber = "253.29346.308";
+  version = "2025.3.2";
+  buildNumber = "253.30387.127";
   # update-script-end: version
 
   src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));
diff --git a/pkgs/applications/editors/jetbrains/ides/ruby-mine.nix b/pkgs/applications/editors/jetbrains/ides/ruby-mine.nix
index 9390faf324f4..fd86ffd90498 100644
--- a/pkgs/applications/editors/jetbrains/ides/ruby-mine.nix
+++ b/pkgs/applications/editors/jetbrains/ides/ruby-mine.nix
@@ -12,20 +12,20 @@ let
   # update-script-start: urls
   urls = {
     x86_64-linux = {
-      url = "https://download.jetbrains.com/ruby/RubyMine-2025.3.1.1.tar.gz";
-      hash = "sha256-dVd/4LBssEsuzEB+RX44RCrlXfNOyYkRPe3SvOD+N20=";
+      url = "https://download.jetbrains.com/ruby/RubyMine-2025.3.2.tar.gz";
+      hash = "sha256-CUiJ/TRFOpcXSp1JhqpFQQvo0baOLmy2GRaWlDx1uQU=";
     };
     aarch64-linux = {
-      url = "https://download.jetbrains.com/ruby/RubyMine-2025.3.1.1-aarch64.tar.gz";
-      hash = "sha256-FNco8STJ+HEmcfZFpFiDzM0QYQPxchmPizAPqYHiYWo=";
+      url = "https://download.jetbrains.com/ruby/RubyMine-2025.3.2-aarch64.tar.gz";
+      hash = "sha256-mR+3C4UBBlVeL/wO0uLNTv8U5HAHl7huVNyvNDFPRAw=";
     };
     x86_64-darwin = {
-      url = "https://download.jetbrains.com/ruby/RubyMine-2025.3.1.1.dmg";
-      hash = "sha256-FWHsKzpmvr3CHCcB5nhHKq9NRWVP+IyPGuk2lunLDKU=";
+      url = "https://download.jetbrains.com/ruby/RubyMine-2025.3.2.dmg";
+      hash = "sha256-bhK9MPiMN8zSEgg2UFAEAoXLJE0yBd/+VnGCCd25mtg=";
     };
     aarch64-darwin = {
-      url = "https://download.jetbrains.com/ruby/RubyMine-2025.3.1.1-aarch64.dmg";
-      hash = "sha256-K66IoMXqfs1frfo+gUCKQrp9pIm2iFyLNdFFNkHPYPc=";
+      url = "https://download.jetbrains.com/ruby/RubyMine-2025.3.2-aarch64.dmg";
+      hash = "sha256-u4XLyBR9p5/k5UZ3ZWB42JxlTqax75logTzJ6Av23Y0=";
     };
   };
   # update-script-end: urls
@@ -39,8 +39,8 @@ mkJetBrainsProduct {
   product = "RubyMine";
 
   # update-script-start: version
-  version = "2025.3.1.1";
-  buildNumber = "253.29346.331";
+  version = "2025.3.2";
+  buildNumber = "253.30387.79";
   # update-script-end: version
 
   src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));
diff --git a/pkgs/applications/editors/jetbrains/ides/rust-rover.nix b/pkgs/applications/editors/jetbrains/ides/rust-rover.nix
index 4fa831fd84ec..9accb46d7b70 100644
--- a/pkgs/applications/editors/jetbrains/ides/rust-rover.nix
+++ b/pkgs/applications/editors/jetbrains/ides/rust-rover.nix
@@ -18,20 +18,20 @@ let
   # update-script-start: urls
   urls = {
     x86_64-linux = {
-      url = "https://download.jetbrains.com/rustrover/RustRover-2025.3.2.tar.gz";
-      hash = "sha256-c6Pou6a27cwCcvcpKnhQOt2Emf+iSHyOIQIyXTEB3hE=";
+      url = "https://download.jetbrains.com/rustrover/RustRover-2025.3.3.tar.gz";
+      hash = "sha256-uAPFVBR5KSyJGGZEIDsqCZFBXcmKyDfgQgiaIUvyB2w=";
     };
     aarch64-linux = {
-      url = "https://download.jetbrains.com/rustrover/RustRover-2025.3.2-aarch64.tar.gz";
-      hash = "sha256-YUBymEX/fv71/cFrBUi0jvgTHn0eFh02tFT/HIE3+5k=";
+      url = "https://download.jetbrains.com/rustrover/RustRover-2025.3.3-aarch64.tar.gz";
+      hash = "sha256-MfItRr0LLQza6uKeGphAd2YN5+DacdQnOpVuvrnJtnw=";
     };
     x86_64-darwin = {
-      url = "https://download.jetbrains.com/rustrover/RustRover-2025.3.2.dmg";
-      hash = "sha256-UlcMaFh7o/X8RkfjUr1fsDrHvN/rFhH7X1rvwaMTSzY=";
+      url = "https://download.jetbrains.com/rustrover/RustRover-2025.3.3.dmg";
+      hash = "sha256-5Di4lXgbAwq8I1+6XKxB6JsmwEpc8qXNjUiPK+N6reM=";
     };
     aarch64-darwin = {
-      url = "https://download.jetbrains.com/rustrover/RustRover-2025.3.2-aarch64.dmg";
-      hash = "sha256-fOX2HBJA8CbLVMLGxMMCmw0CFbKtEiW+WgkiIgwIqLE=";
+      url = "https://download.jetbrains.com/rustrover/RustRover-2025.3.3-aarch64.dmg";
+      hash = "sha256-ftJq0KNkwj/YPw1abPB3wRcDWMryZAEvqbNdY1RaT9g=";
     };
   };
   # update-script-end: urls
@@ -45,8 +45,8 @@ in
   product = "RustRover";
 
   # update-script-start: version
-  version = "2025.3.2";
-  buildNumber = "253.29346.361";
+  version = "2025.3.3";
+  buildNumber = "253.30387.122";
   # update-script-end: version
 
   src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));
diff --git a/pkgs/applications/editors/jetbrains/ides/webstorm.nix b/pkgs/applications/editors/jetbrains/ides/webstorm.nix
index 0d3f853b7398..cd587abe75b6 100644
--- a/pkgs/applications/editors/jetbrains/ides/webstorm.nix
+++ b/pkgs/applications/editors/jetbrains/ides/webstorm.nix
@@ -12,20 +12,20 @@ let
   # update-script-start: urls
   urls = {
     x86_64-linux = {
-      url = "https://download.jetbrains.com/webstorm/WebStorm-2025.3.1.1.tar.gz";
-      hash = "sha256-1VFBGjpKgpseFMh06RdpYbYLNehM1sLJlnarhZShmVM=";
+      url = "https://download.jetbrains.com/webstorm/WebStorm-2025.3.2.tar.gz";
+      hash = "sha256-qkDuuP8QU+Ptcafw12LFD2n4s6tClg40uHVqZx2+hII=";
     };
     aarch64-linux = {
-      url = "https://download.jetbrains.com/webstorm/WebStorm-2025.3.1.1-aarch64.tar.gz";
-      hash = "sha256-Pv4nLusRtX0FXo+vWH+rwFFAgQSLvL1GeX/zasC2yQ8=";
+      url = "https://download.jetbrains.com/webstorm/WebStorm-2025.3.2-aarch64.tar.gz";
+      hash = "sha256-k8FX/hn+U8XppVopB/ArvupH4CH+5cJlbBtjSaIarLA=";
     };
     x86_64-darwin = {
-      url = "https://download.jetbrains.com/webstorm/WebStorm-2025.3.1.1.dmg";
-      hash = "sha256-98Io2xHGc3lVg2DQRh0fBVYyDUoJb/3zPuk2A7nd0xw=";
+      url = "https://download.jetbrains.com/webstorm/WebStorm-2025.3.2.dmg";
+      hash = "sha256-GsOQE3NLqIifQ9mXWRT0M7hJeN+fdzSqn7pwjWf8Vcw=";
     };
     aarch64-darwin = {
-      url = "https://download.jetbrains.com/webstorm/WebStorm-2025.3.1.1-aarch64.dmg";
-      hash = "sha256-dUi9xEMqK+4ycOPrMQoJMODAyGniT6oIAbdtqCa/XoQ=";
+      url = "https://download.jetbrains.com/webstorm/WebStorm-2025.3.2-aarch64.dmg";
+      hash = "sha256-Pc3+hlKpCIOgJLxWMOn0Uw+7cIzLD4iayaNsWYoB4mo=";
     };
   };
   # update-script-end: urls
@@ -39,8 +39,8 @@ mkJetBrainsProduct {
   product = "WebStorm";
 
   # update-script-start: version
-  version = "2025.3.1.1";
-  buildNumber = "253.29346.242";
+  version = "2025.3.2";
+  buildNumber = "253.30387.83";
   # update-script-end: version
 
   src = fetchurl (urls.${system} or (throw "Unsupported system: ${system}"));
diff --git a/pkgs/applications/editors/vim/plugins/generated.nix b/pkgs/applications/editors/vim/plugins/generated.nix
index aba760423a04..b4a904cb6cfd 100644
--- a/pkgs/applications/editors/vim/plugins/generated.nix
+++ b/pkgs/applications/editors/vim/plugins/generated.nix
@@ -412,12 +412,12 @@ final: prev: {
 
   SchemaStore-nvim = buildVimPlugin {
     pname = "SchemaStore.nvim";
-    version = "0-unstable-2026-01-23";
+    version = "0-unstable-2026-01-27";
     src = fetchFromGitHub {
       owner = "b0o";
       repo = "SchemaStore.nvim";
-      rev = "083602d8fedd7230bd6f0b164b7c4f9d1ff3a9c3";
-      hash = "sha256-im3GXbHG0YuWZl/UYZ8vkgE+lgJ9Sd/b/NaI53TOX/U=";
+      rev = "9afa445602e6191917b4d32f1355e77b4525f905";
+      hash = "sha256-NysU5N4VCYRNOy1PReK5ws6XMQe/rlxFFFh5AdQXv1o=";
     };
     meta.homepage = "https://github.com/b0o/SchemaStore.nvim/";
     meta.hydraPlatforms = [ ];
@@ -791,12 +791,12 @@ final: prev: {
 
   ale = buildVimPlugin {
     pname = "ale";
-    version = "4.0.0-unstable-2025-12-21";
+    version = "4.0.0-unstable-2026-01-25";
     src = fetchFromGitHub {
       owner = "dense-analysis";
       repo = "ale";
-      rev = "8eb4803da99a575bc827a6c814e63b1053b7002f";
-      hash = "sha256-GQdSS+5QM82asDtW2Ks60eq2oFcZzKy5XCp+Y4fQudE=";
+      rev = "6d9962946172fda4f25f9f5773b601aa4b2bedaf";
+      hash = "sha256-QTSwtAR7v990r7+qtNeglhtm4VWK4bTgsrY6Ovg5VOQ=";
     };
     meta.homepage = "https://github.com/dense-analysis/ale/";
     meta.hydraPlatforms = [ ];
@@ -1818,12 +1818,12 @@ final: prev: {
 
   blink-ripgrep-nvim = buildVimPlugin {
     pname = "blink-ripgrep.nvim";
-    version = "2.2.2-unstable-2026-01-24";
+    version = "2.2.2-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "mikavilpas";
       repo = "blink-ripgrep.nvim";
-      rev = "274eb06080a786a1c8c3d35093be269310e9f49f";
-      hash = "sha256-KrU+febhaZ1v4XHqNPiKkIB0eGYIIBSgDwLzzuGZGLg=";
+      rev = "c47f9fc6c14e37b03cbfdcf388710db94588c0b8";
+      hash = "sha256-N6RH1PgqIcbPVRe3cxKZNN89NZ/Mkkz5HcaxEOrTj18=";
     };
     meta.homepage = "https://github.com/mikavilpas/blink-ripgrep.nvim/";
     meta.hydraPlatforms = [ ];
@@ -2247,12 +2247,12 @@ final: prev: {
 
   claude-fzf-nvim = buildVimPlugin {
     pname = "claude-fzf.nvim";
-    version = "0-unstable-2025-09-05";
+    version = "0-unstable-2026-01-25";
     src = fetchFromGitHub {
       owner = "pittcat";
       repo = "claude-fzf.nvim";
-      rev = "769eb89d80de0e5247c7393f2cdffa57c5545dd3";
-      hash = "sha256-cVFbUcdj2F5KCU38E8Eo3EQ89zzXutuABD8qfSU6j80=";
+      rev = "47f0d05e109c241603d92620a381e04a16b5716d";
+      hash = "sha256-OBpNT1rbjnfoDQ/L+NSDyAVtgN4Nyva1hw/E9FvqZSs=";
     };
     meta.homepage = "https://github.com/pittcat/claude-fzf.nvim/";
     meta.hydraPlatforms = [ ];
@@ -2260,12 +2260,12 @@ final: prev: {
 
   claudecode-nvim = buildVimPlugin {
     pname = "claudecode.nvim";
-    version = "0.3.0-unstable-2026-01-03";
+    version = "0.3.0-unstable-2026-01-26";
     src = fetchFromGitHub {
       owner = "coder";
       repo = "claudecode.nvim";
-      rev = "93f8e48b1f6cbf2469b378c20b3df4115252d379";
-      hash = "sha256-dh7RrWezkmEtMKRasYCqfYanl6VxybC6Ra649H/KrPI=";
+      rev = "aa9a5cebebdbfa449c1c5ff229ba5d98e66bafed";
+      hash = "sha256-B6BA+3h7RLmk+zk6O365DmY06ALdbbkFBmOaRH9muog=";
     };
     meta.homepage = "https://github.com/coder/claudecode.nvim/";
     meta.hydraPlatforms = [ ];
@@ -3118,12 +3118,12 @@ final: prev: {
 
   coc-nvim = buildVimPlugin {
     pname = "coc.nvim";
-    version = "0.0.82-unstable-2026-01-08";
+    version = "0.0.82-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "neoclide";
       repo = "coc.nvim";
-      rev = "889f5e287e746973c978b383eea0f286571d8fe0";
-      hash = "sha256-c7pNpJ6S6gI94wX5GN6honS9xXmX53F8gsLQMDdzU3E=";
+      rev = "cd12852619728df07a482bfba306834272db14b5";
+      hash = "sha256-qojwVPga9xFmE5IRcfDP/zgvZk98sKl8EDPAzs+5E1s=";
     };
     meta.homepage = "https://github.com/neoclide/coc.nvim/";
     meta.hydraPlatforms = [ ];
@@ -3196,12 +3196,12 @@ final: prev: {
 
   codecompanion-nvim = buildVimPlugin {
     pname = "codecompanion.nvim";
-    version = "18.5.1-unstable-2026-01-24";
+    version = "18.5.1-unstable-2026-01-26";
     src = fetchFromGitHub {
       owner = "olimorris";
       repo = "codecompanion.nvim";
-      rev = "26fa57cd0ac019c9bae539e7530f7c9401cbee55";
-      hash = "sha256-NEgSYj+ja0EQTwPGur8D7PcECSdZ85z+w61vf1ES14s=";
+      rev = "f61dbb22439386585a514d15be713c355f830e49";
+      hash = "sha256-8tV4W8rKVUFlsyFiN5tqHmu3VyqFQ43ZYcjBJtecwGE=";
     };
     meta.homepage = "https://github.com/olimorris/codecompanion.nvim/";
     meta.hydraPlatforms = [ ];
@@ -3222,12 +3222,12 @@ final: prev: {
 
   codesettings-nvim = buildVimPlugin {
     pname = "codesettings.nvim";
-    version = "1.5.5-unstable-2026-01-24";
+    version = "1.6.1-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "mrjones2014";
       repo = "codesettings.nvim";
-      rev = "25bdd8043d828e6e9a435eb900fa0a248f8c816d";
-      hash = "sha256-m9YGd7oqen6BpRWRMQ7sLfN3A3FFOqBvdKmmfCUrExA=";
+      rev = "bac50504f5f7e3f022406667fb70d5e1ff2007be";
+      hash = "sha256-bqUQd2mIaZIte/143NIMlFAft3FfLtNqqTZThoVq1V0=";
     };
     meta.homepage = "https://github.com/mrjones2014/codesettings.nvim/";
     meta.hydraPlatforms = [ ];
@@ -3339,12 +3339,12 @@ final: prev: {
 
   comfy-line-numbers-nvim = buildVimPlugin {
     pname = "comfy-line-numbers.nvim";
-    version = "0-unstable-2025-11-08";
+    version = "0-unstable-2026-01-26";
     src = fetchFromGitHub {
       owner = "mluders";
       repo = "comfy-line-numbers.nvim";
-      rev = "3c51fa4104b97ddaccb66a6b34552e3eafd5b645";
-      hash = "sha256-frc2V4QVFL4P5+VnclFFhxQRV8q9UqT3XRxQG6ZwpAg=";
+      rev = "9adedbaf1f410cdaacf4fb2ca8eb44f3d5f6d010";
+      hash = "sha256-yrwpVy9qiDqiMxy07hvdgx01BrQbkPy5e3OgAjuOw/k=";
     };
     meta.homepage = "https://github.com/mluders/comfy-line-numbers.nvim/";
     meta.hydraPlatforms = [ ];
@@ -3626,12 +3626,12 @@ final: prev: {
 
   copilot-lua = buildVimPlugin {
     pname = "copilot.lua";
-    version = "0-unstable-2026-01-18";
+    version = "0-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "zbirenbaum";
       repo = "copilot.lua";
-      rev = "2d7511494245129aa6c2176f9c71cc2bc1360ed9";
-      hash = "sha256-RWkF6t0s4Fd9p66M9Cr/boek0dZCX1rdw5CcKmp+PUA=";
+      rev = "9b8d77c6c847c83c784c05f5f86b4821ed90d3a1";
+      hash = "sha256-nvGt/u4K5iYi7AZegV/tpOjFNlye7+LYPMejuuIwJ0M=";
     };
     meta.homepage = "https://github.com/zbirenbaum/copilot.lua/";
     meta.hydraPlatforms = [ ];
@@ -3925,12 +3925,12 @@ final: prev: {
 
   cyberdream-nvim = buildVimPlugin {
     pname = "cyberdream.nvim";
-    version = "5.3.0-unstable-2026-01-19";
+    version = "5.3.0-unstable-2026-01-27";
     src = fetchFromGitHub {
       owner = "scottmckendry";
       repo = "cyberdream.nvim";
-      rev = "f4e06a39e243e2d6a21a82734db60ba83092c0b6";
-      hash = "sha256-PwVxCH/XVWtN8I2Z22mxAgUVXtBt4K4I8FxChr8iqx0=";
+      rev = "a68ffa6af98bf1fc88f33a071c51a188ec85c725";
+      hash = "sha256-xlvVSoT/odV/mk7lPQn+13RZDSrVJVB8SNs4u7v6LLk=";
     };
     meta.homepage = "https://github.com/scottmckendry/cyberdream.nvim/";
     meta.hydraPlatforms = [ ];
@@ -4146,12 +4146,12 @@ final: prev: {
 
   ddc-vim = buildVimPlugin {
     pname = "ddc.vim";
-    version = "10.1.0-unstable-2025-11-16";
+    version = "10.1.0-unstable-2026-01-26";
     src = fetchFromGitHub {
       owner = "Shougo";
       repo = "ddc.vim";
-      rev = "ef527ad60b199b11d022a648a24ab6d424227943";
-      hash = "sha256-Gp6xenZrXPl2UZ1W5yFvolWUW/rWzxGyVDY8lVcA0WA=";
+      rev = "edbd6d4ab86fc72571125b0685fc1da38061e53a";
+      hash = "sha256-Me0Q0CJv6FxKzIBxC+BPotF0XkdC+hh9x9eRQ/CY8JQ=";
     };
     meta.homepage = "https://github.com/Shougo/ddc.vim/";
     meta.hydraPlatforms = [ ];
@@ -4250,12 +4250,12 @@ final: prev: {
 
   demicolon-nvim = buildVimPlugin {
     pname = "demicolon.nvim";
-    version = "2.0-unstable-2025-12-28";
+    version = "2.0-unstable-2026-01-25";
     src = fetchFromGitHub {
       owner = "mawkler";
       repo = "demicolon.nvim";
-      rev = "f29cdb8c3a84422a1e0c708e8141212805844679";
-      hash = "sha256-hyGxAj0VWvZuaMpU5YTlfCm8UH/urz0GmZZMgRv31e0=";
+      rev = "a9ca137474b3a02e1d6ac48bfdb1985172e2ec9a";
+      hash = "sha256-jDvdyAT2lngYDSDw4c+zziUYUuNeET0FBWJA+IeD2Ts=";
     };
     meta.homepage = "https://github.com/mawkler/demicolon.nvim/";
     meta.hydraPlatforms = [ ];
@@ -4824,12 +4824,12 @@ final: prev: {
 
   easy-dotnet-nvim = buildVimPlugin {
     pname = "easy-dotnet.nvim";
-    version = "0-unstable-2026-01-20";
+    version = "0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "GustavEikaas";
       repo = "easy-dotnet.nvim";
-      rev = "90fa033b438a330671506899574071afea9eb4e5";
-      hash = "sha256-VYrt7H1uO/V5UO+hyb28JS6w9q3MlZLgYVmy8fkYT4w=";
+      rev = "a0ae745a3dbecd8f70ff0c0bbe5e4d7ef3dd3d57";
+      hash = "sha256-2xHjr0ABVsIGMInS9RRb8n2p9F3PVwSgVaWdZbs1QoE=";
     };
     meta.homepage = "https://github.com/GustavEikaas/easy-dotnet.nvim/";
     meta.hydraPlatforms = [ ];
@@ -5073,11 +5073,11 @@ final: prev: {
 
   evergarden-nvim = buildVimPlugin {
     pname = "evergarden-nvim";
-    version = "0-unstable-2026-01-21";
+    version = "0-unstable-2026-01-26";
     src = fetchgit {
       url = "https://codeberg.org/evergarden/nvim";
-      rev = "b49ee5bef999955e688ea883a1f7b14cd41de8b4";
-      hash = "sha256-55iIlWrwqtaAaOPbgmKXd5d9U4Y9ICBRJudh2VSNRxg=";
+      rev = "16d4c3f2b3d7e8fa02c1666fc4518707515dc2fe";
+      hash = "sha256-sPYL3+Pw9vt1SXiTNtf1SpN9en1tQwFUzXJicw7XHdk=";
     };
     meta.homepage = "https://codeberg.org/evergarden/nvim";
     meta.hydraPlatforms = [ ];
@@ -5971,12 +5971,12 @@ final: prev: {
 
   go-nvim = buildVimPlugin {
     pname = "go.nvim";
-    version = "0.10.4-unstable-2025-12-01";
+    version = "0.10.4-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "ray-x";
       repo = "go.nvim";
-      rev = "41a18f0c05534c375bafec7ed05cdb409c4abcc6";
-      hash = "sha256-lc3F7pSTdsfk7AgJzh9Uz/EVAleay61wzsPli5Gnqs4=";
+      rev = "d89ea7aba93220383ded5bb22b1e82841980cecf";
+      hash = "sha256-SB5o7GzAju0/5RPeEwTp/MyvZaQR4WuSyKtzmO5LtzI=";
     };
     meta.homepage = "https://github.com/ray-x/go.nvim/";
     meta.hydraPlatforms = [ ];
@@ -7144,12 +7144,12 @@ final: prev: {
 
   jj-nvim = buildVimPlugin {
     pname = "jj.nvim";
-    version = "0.3.0-unstable-2026-01-22";
+    version = "0.4.1-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "NicolasGB";
       repo = "jj.nvim";
-      rev = "9a20b2484909dc50122ace28fe2f5e0d49959fb8";
-      hash = "sha256-EfMsFZziZVtA9BPJO/aNIxT92uknp6pvC8lDYV8j59I=";
+      rev = "680d864e1165ac5d334eef6d69e301f2094ff4c3";
+      hash = "sha256-Zere6x/mcV0zlsqp6RB7XWkeXRBmDhSl8rpEYA1x+Sg=";
     };
     meta.homepage = "https://github.com/NicolasGB/jj.nvim/";
     meta.hydraPlatforms = [ ];
@@ -7235,12 +7235,12 @@ final: prev: {
 
   kanagawa-paper-nvim = buildVimPlugin {
     pname = "kanagawa-paper.nvim";
-    version = "4.0.0-unstable-2026-01-19";
+    version = "4.0.0-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "thesimonho";
       repo = "kanagawa-paper.nvim";
-      rev = "c85d672cc9a6d968771dc6f2203c1dc2bade6ff2";
-      hash = "sha256-v4d3zuNkklKnv25WSPzQsH0MVcOvVy6znBCKpolDJZI=";
+      rev = "ccd5f727919bfe93af76561c31f43b53cd2871db";
+      hash = "sha256-G2/b8Gx2V8mZkw2e2xE5fIqQCi/1Khgeb5uQqHxfAZs=";
     };
     meta.homepage = "https://github.com/thesimonho/kanagawa-paper.nvim/";
     meta.hydraPlatforms = [ ];
@@ -7561,11 +7561,11 @@ final: prev: {
 
   leap-nvim = buildVimPlugin {
     pname = "leap.nvim";
-    version = "0-unstable-2026-01-25";
+    version = "0-unstable-2026-01-28";
     src = fetchgit {
       url = "https://codeberg.org/andyg/leap.nvim/";
-      rev = "572fbcfd2cca5f7b3e56b1ac1d720861f2a4db78";
-      hash = "sha256-k9Uj6VOGc+LWyec6yk7tiCg+gVHjBMifxg/G3nxzT6g=";
+      rev = "a64a882dc50369e87ac2a9fecc16c209e35533d6";
+      hash = "sha256-dEuCtw+aRLP+F4fSmKH687kVuTmU2opCJAVsyuVjShw=";
     };
     meta.homepage = "https://codeberg.org/andyg/leap.nvim/";
     meta.hydraPlatforms = [ ];
@@ -7963,12 +7963,12 @@ final: prev: {
 
   llama-vim = buildVimPlugin {
     pname = "llama.vim";
-    version = "0-unstable-2026-01-24";
+    version = "0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "ggml-org";
       repo = "llama.vim";
-      rev = "80874765085ec74cf3bc832869f0220117836298";
-      hash = "sha256-jaH6KkovohegPg515XOm9ctytIuqUXs1th2oMPQQChM=";
+      rev = "bc7743b9e6dde6ce56a1c9bc41f6b06720430537";
+      hash = "sha256-kK2L8cqRTGMCc/oCihaR8NbUG8yv0gq9AmuXducaoyE=";
     };
     meta.homepage = "https://github.com/ggml-org/llama.vim/";
     meta.hydraPlatforms = [ ];
@@ -8106,12 +8106,12 @@ final: prev: {
 
   lsp_signature-nvim = buildVimPlugin {
     pname = "lsp_signature.nvim";
-    version = "0.3.1-unstable-2025-11-23";
+    version = "0.3.1-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "ray-x";
       repo = "lsp_signature.nvim";
-      rev = "7d3bb0a641f516f1c7fd2e47852580dadbd7a430";
-      hash = "sha256-TcxMLadMRDIsPdO5zaFoRU79akRVysEe7qgFrZLt7ZM=";
+      rev = "0efb088dce050d38a3608ee69f80f2a62cf9849c";
+      hash = "sha256-ejDbfAop9bmFDVMZBlniwcUgQSvwpSimKwH54j4Zq0s=";
     };
     meta.homepage = "https://github.com/ray-x/lsp_signature.nvim/";
     meta.hydraPlatforms = [ ];
@@ -8119,12 +8119,12 @@ final: prev: {
 
   lspcontainers-nvim = buildVimPlugin {
     pname = "lspcontainers.nvim";
-    version = "0-unstable-2025-07-17";
+    version = "0-unstable-2026-01-27";
     src = fetchFromGitHub {
       owner = "lspcontainers";
       repo = "lspcontainers.nvim";
-      rev = "358d84226ff7e9131620708a4d94b96ca0a3e5b5";
-      hash = "sha256-FyuwYE8QtgO2j29WjVGmqdBRuEOuIbMMfxYWxlQ7g4M=";
+      rev = "f80509f960453d71e87c4130d2dfccaada02f710";
+      hash = "sha256-lR755wx18PItw7uxxGg5dX6ybcrNuPA+D0oNt+hLkpI=";
     };
     meta.homepage = "https://github.com/lspcontainers/lspcontainers.nvim/";
     meta.hydraPlatforms = [ ];
@@ -8145,12 +8145,12 @@ final: prev: {
 
   lspkind-nvim = buildVimPlugin {
     pname = "lspkind.nvim";
-    version = "0-unstable-2026-01-22";
+    version = "0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "onsails";
       repo = "lspkind.nvim";
-      rev = "dbac5149fb5fb1b642266ff268b1e0f4ebac9293";
-      hash = "sha256-/unY/MaGHC76x5SF0rg6dLc0HOB35Y4vHimquaAWk1M=";
+      rev = "c7274c48137396526b59d86232eabcdc7fed8a32";
+      hash = "sha256-aIopYLm/x1CgCKpcsu9pxpqL0SXXhHDPTM8DKUwGeRw=";
     };
     meta.homepage = "https://github.com/onsails/lspkind.nvim/";
     meta.hydraPlatforms = [ ];
@@ -8393,12 +8393,12 @@ final: prev: {
 
   mason-lspconfig-nvim = buildVimPlugin {
     pname = "mason-lspconfig.nvim";
-    version = "2.1.0-unstable-2026-01-21";
+    version = "2.1.0-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "mason-org";
       repo = "mason-lspconfig.nvim";
-      rev = "4823a251e7578a835bb979c37df390fca692ba39";
-      hash = "sha256-duPo/uY1dJ0G3k5EuN89YDyMCqhBcgOQrt6b09andIE=";
+      rev = "3d89e7c92fbd96c5e10e0298fc2b006f21cf9428";
+      hash = "sha256-R9KOMpFiR0YZtGpygkpaWvTDxmDE5vTQbnhdSauDlVQ=";
     };
     meta.homepage = "https://github.com/mason-org/mason-lspconfig.nvim/";
     meta.hydraPlatforms = [ ];
@@ -9186,12 +9186,12 @@ final: prev: {
 
   minuet-ai-nvim = buildVimPlugin {
     pname = "minuet-ai.nvim";
-    version = "0.8.0-unstable-2026-01-21";
+    version = "0.8.0-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "milanglacier";
       repo = "minuet-ai.nvim";
-      rev = "f1a99a9a7514b0f76a4d6a073c264692e275f76d";
-      hash = "sha256-vhXisCfVjplfrdyn9F+yrjwFAq8HuCeQbqObitvp5Is=";
+      rev = "18b8fc3a9ce17682402ee047c3ee647b52ab9893";
+      hash = "sha256-N4BsXD8sDLB97qLt/TFBNTvL4R8psjdBT/9gYCIuvlQ=";
     };
     meta.homepage = "https://github.com/milanglacier/minuet-ai.nvim/";
     meta.hydraPlatforms = [ ];
@@ -9316,12 +9316,12 @@ final: prev: {
 
   monokai-pro-nvim = buildVimPlugin {
     pname = "monokai-pro.nvim";
-    version = "2.0.0-unstable-2026-01-23";
+    version = "2.1.0-unstable-2026-01-25";
     src = fetchFromGitHub {
       owner = "loctvl842";
       repo = "monokai-pro.nvim";
-      rev = "57582b155807082f7d5605140216e8cb025f0f2c";
-      hash = "sha256-/RJtM+yr1iYMu92ko09QZxk1cvnoR4abgc3yd4cPkWI=";
+      rev = "e862648545a783c5364e95f206bb496e560dc76c";
+      hash = "sha256-lmq6oeX2PDxY1mt564O5iXxfR86r+xA7lVD6aeGVncc=";
     };
     meta.homepage = "https://github.com/loctvl842/monokai-pro.nvim/";
     meta.hydraPlatforms = [ ];
@@ -9680,12 +9680,12 @@ final: prev: {
 
   neo-tree-nvim = buildVimPlugin {
     pname = "neo-tree.nvim";
-    version = "3.38.0-unstable-2026-01-17";
+    version = "3.38.0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "nvim-neo-tree";
       repo = "neo-tree.nvim";
-      rev = "1bd82358e516e3043796e207e64f50a11574af6e";
-      hash = "sha256-l99gac1JV/7cNTsZ4ZA0uaw838UhzTILmerRFYVUuvc=";
+      rev = "466ba7ac7e4841a73d01afa48b6be8a4825a2372";
+      hash = "sha256-2O4cYYdF8xEHVor+oOEMlzhM0pmZ06L0RkdKavW6ALk=";
     };
     meta.homepage = "https://github.com/nvim-neo-tree/neo-tree.nvim/";
     meta.hydraPlatforms = [ ];
@@ -9706,12 +9706,12 @@ final: prev: {
 
   neoconf-nvim = buildVimPlugin {
     pname = "neoconf.nvim";
-    version = "1.4.0-unstable-2026-01-24";
+    version = "1.4.0-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "folke";
       repo = "neoconf.nvim";
-      rev = "bbe36f4d60ed096282f564ddae4e781e420a8270";
-      hash = "sha256-J4ot/eGfppKvB/TIBcC6B3MdUtH0cqkxZR+KNhxZZR0=";
+      rev = "6fe578c138de3f1451a512d93c56365b4275666f";
+      hash = "sha256-cKbUnZx9wkpv0j7PHQtNAJS5IRwktztR/uttr8VPduI=";
     };
     meta.homepage = "https://github.com/folke/neoconf.nvim/";
     meta.hydraPlatforms = [ ];
@@ -9823,12 +9823,12 @@ final: prev: {
 
   neomodern-nvim = buildVimPlugin {
     pname = "neomodern.nvim";
-    version = "1.0.4-unstable-2025-11-14";
+    version = "2.0.2-unstable-2026-01-27";
     src = fetchFromGitHub {
       owner = "casedami";
       repo = "neomodern.nvim";
-      rev = "e9a25f8955a2cc92f24091fc366752cd09694209";
-      hash = "sha256-txUnbJ23BA5LPfRxq5XQHUC2/8WFhogGa3gETKAw3Ak=";
+      rev = "cf93044775983b71dce31ad3179753b241470d3c";
+      hash = "sha256-vMd05Z8xjrfyAdPzbEdRrDowntgOBhEj6Q+8JaSSshI=";
     };
     meta.homepage = "https://github.com/casedami/neomodern.nvim/";
     meta.hydraPlatforms = [ ];
@@ -10059,12 +10059,12 @@ final: prev: {
 
   neotest-golang = buildVimPlugin {
     pname = "neotest-golang";
-    version = "2.7.2-unstable-2026-01-24";
+    version = "2.7.2-unstable-2026-01-26";
     src = fetchFromGitHub {
       owner = "fredrikaverpil";
       repo = "neotest-golang";
-      rev = "67800bdb6bee0107f478e35400ba937b438f1a4b";
-      hash = "sha256-oZWb6GsZTgclKFyDgZWWANmfPRjg0LZgFymQs2SC8Rc=";
+      rev = "35bbd3d9bc4310452ac65975ae935e94e1261bf8";
+      hash = "sha256-HZJ1wT01UFkH6t+E1b8M9m5I1CHv4IxfKcakZWM6PYQ=";
     };
     meta.homepage = "https://github.com/fredrikaverpil/neotest-golang/";
     meta.hydraPlatforms = [ ];
@@ -10099,12 +10099,12 @@ final: prev: {
 
   neotest-haskell = buildVimPlugin {
     pname = "neotest-haskell";
-    version = "3.0.1-unstable-2026-01-18";
+    version = "3.0.1-unstable-2026-01-25";
     src = fetchFromGitHub {
       owner = "MrcJkb";
       repo = "neotest-haskell";
-      rev = "fc4468c523faa1a9ae581219501909bbcf25fff2";
-      hash = "sha256-JN3H8InLfDu6NbBN1x0E7EyMMvueeL7ypDRCEzcbp1A=";
+      rev = "4230323eaeddae5d60720bfe0a8b5e1c74ced5ad";
+      hash = "sha256-xnc7ZXqkdEafVh56a/JtbcKjvJPp4O9fTGzgc1/d+E0=";
     };
     meta.homepage = "https://github.com/MrcJkb/neotest-haskell/";
     meta.hydraPlatforms = [ ];
@@ -10605,12 +10605,12 @@ final: prev: {
 
   nlsp-settings-nvim = buildVimPlugin {
     pname = "nlsp-settings.nvim";
-    version = "0-unstable-2026-01-19";
+    version = "0-unstable-2026-01-25";
     src = fetchFromGitHub {
       owner = "tamago324";
       repo = "nlsp-settings.nvim";
-      rev = "7b04b6c5ff99c7e6c48e16a61517b0cc172affdf";
-      hash = "sha256-zTQ4IFocw32UsytwCixh3nL+XRfYmjdD0/KHXJXYfjk=";
+      rev = "05481cf1d46d665284fb6d5c96d856f76056d650";
+      hash = "sha256-IxMDT89xmyugE3iDA0YzHAnxjEHp9/3ZRFWpcF651ag=";
     };
     meta.homepage = "https://github.com/tamago324/nlsp-settings.nvim/";
     meta.hydraPlatforms = [ ];
@@ -10852,12 +10852,12 @@ final: prev: {
 
   nvim-autopairs = buildVimPlugin {
     pname = "nvim-autopairs";
-    version = "0.10.0-unstable-2025-12-18";
+    version = "0.10.0-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "windwp";
       repo = "nvim-autopairs";
-      rev = "c2a0dd0d931d0fb07665e1fedb1ea688da3b80b4";
-      hash = "sha256-8k/vGYktoFBX3kjOyn+VR49xmhFhNZbkaI8UmbPSYF4=";
+      rev = "007047febaa3681a8d2f3dd5126fdb9c6e81f393";
+      hash = "sha256-jyrHBri5eM0gYoAXjUy2kAxlPCYFU3/VN1ufPZti1HQ=";
     };
     meta.homepage = "https://github.com/windwp/nvim-autopairs/";
     meta.hydraPlatforms = [ ];
@@ -11034,12 +11034,12 @@ final: prev: {
 
   nvim-dap = buildVimPlugin {
     pname = "nvim-dap";
-    version = "0.10.0-unstable-2026-01-20";
+    version = "0.10.0-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "mfussenegger";
       repo = "nvim-dap";
-      rev = "085386b9359ddf8d76ad89b98973b8e332dc5ba3";
-      hash = "sha256-GI7BCwZxzEJzwQzoM7AownvxhWyTvcHXrRE7bwZnNwg=";
+      rev = "e47878dcf1ccc30136b30d19ab19fe76946d61cd";
+      hash = "sha256-JA5dUhm3sQYlAmQpBLCtXj2r0RM3G/JWdcZWTrLJ4DY=";
     };
     meta.homepage = "https://github.com/mfussenegger/nvim-dap/";
     meta.hydraPlatforms = [ ];
@@ -11138,12 +11138,12 @@ final: prev: {
 
   nvim-dap-view = buildVimPlugin {
     pname = "nvim-dap-view";
-    version = "0-unstable-2026-01-23";
+    version = "0-unstable-2026-01-27";
     src = fetchFromGitHub {
       owner = "igorlfs";
       repo = "nvim-dap-view";
-      rev = "9492aef2994d86887cee040a5057ce6ad3960d7a";
-      hash = "sha256-JPhZ1b9OHs/vz2SiMRasxR592MM1PN2jLPiW63wk3s8=";
+      rev = "bd67e84de295455a5cd994b8f227438e8c696ea9";
+      hash = "sha256-GxfqXh9CaSljF/ypbC3dMvwBKwOQ/x1Oq5zrrXw04Zs=";
     };
     meta.homepage = "https://github.com/igorlfs/nvim-dap-view/";
     meta.hydraPlatforms = [ ];
@@ -11190,12 +11190,12 @@ final: prev: {
 
   nvim-early-retirement = buildVimPlugin {
     pname = "nvim-early-retirement";
-    version = "0-unstable-2026-01-06";
+    version = "0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "chrisgrieser";
       repo = "nvim-early-retirement";
-      rev = "79ea1568df53986e0d9f4d36fd542933a34b2e61";
-      hash = "sha256-2fQsVQUAuKX0uz+umM7VCUFPRKmIr7L9KQIgnlo3bG0=";
+      rev = "f017b93c96565a3dede63f93924f1fed2dba9c1f";
+      hash = "sha256-RZlicZh4FTrxXh4xhrQTSnIian7LCoyuKVWZIkYb9aQ=";
     };
     meta.homepage = "https://github.com/chrisgrieser/nvim-early-retirement/";
     meta.hydraPlatforms = [ ];
@@ -11255,12 +11255,12 @@ final: prev: {
 
   nvim-genghis = buildVimPlugin {
     pname = "nvim-genghis";
-    version = "0-unstable-2026-01-06";
+    version = "0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "chrisgrieser";
       repo = "nvim-genghis";
-      rev = "29b050ec541b70f472c5870402b863f349fad0c6";
-      hash = "sha256-oYywSZM8umYWumyx16rMRd4nBTBbrdHLDoSe2ewfwiY=";
+      rev = "45880ca5fd88a8ad73d0c96ecef68a0bef2a6f31";
+      hash = "sha256-2rCqNzuQVEBwA1j4YqnFsZqttGl4ge7r8pZkOm0WAl0=";
     };
     meta.homepage = "https://github.com/chrisgrieser/nvim-genghis/";
     meta.hydraPlatforms = [ ];
@@ -11281,12 +11281,12 @@ final: prev: {
 
   nvim-highlight-colors = buildVimPlugin {
     pname = "nvim-highlight-colors";
-    version = "0-unstable-2025-09-06";
+    version = "0-unstable-2026-01-26";
     src = fetchFromGitHub {
       owner = "brenoprata10";
       repo = "nvim-highlight-colors";
-      rev = "e0c4a58ec8c3ca7c92d3ee4eb3bc1dd0f7be317e";
-      hash = "sha256-BIcOU2Gie90wujQFZ+aD3wYTRegSKw4CBxC95DRwo9I=";
+      rev = "e2cb22089cc2358b2b995c09578224f142de6039";
+      hash = "sha256-LrY61knLKAn36+RnMddAzxf/wYtdnLxnnQhtHB3mQwc=";
     };
     meta.homepage = "https://github.com/brenoprata10/nvim-highlight-colors/";
     meta.hydraPlatforms = [ ];
@@ -11502,12 +11502,12 @@ final: prev: {
 
   nvim-lint = buildVimPlugin {
     pname = "nvim-lint";
-    version = "0-unstable-2026-01-07";
+    version = "0-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "mfussenegger";
       repo = "nvim-lint";
-      rev = "ca6ea12daf0a4d92dc24c5c9ae22a1f0418ade37";
-      hash = "sha256-Ru+QklYFuwoeRvKlBXZcItuGvKDPbEq04sACKvTQds8=";
+      rev = "b3292aac30b935d4cccf0904053d1c7930df8a20";
+      hash = "sha256-848hT8Sahob1qWEJOrOaEQsNycH6nOlqiZO3p/wzNyU=";
     };
     meta.homepage = "https://github.com/mfussenegger/nvim-lint/";
     meta.hydraPlatforms = [ ];
@@ -11554,12 +11554,12 @@ final: prev: {
 
   nvim-lspconfig = buildVimPlugin {
     pname = "nvim-lspconfig";
-    version = "2.5.0-unstable-2026-01-21";
+    version = "2.5.0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "neovim";
       repo = "nvim-lspconfig";
-      rev = "419b082102fa813739588dd82e19a8b6b2442855";
-      hash = "sha256-+KjXMTkVVVt3rpxQHRtrlT74DDsfRnPNUlqi/pvIMxg=";
+      rev = "238583bb00770b079c68c69a860d65e5d1d8acf9";
+      hash = "sha256-XUD0aDEUioepBDdKvdwF1DfEuOFMKctpT+RCCnIDKJ4=";
     };
     meta.homepage = "https://github.com/neovim/nvim-lspconfig/";
     meta.hydraPlatforms = [ ];
@@ -11736,12 +11736,12 @@ final: prev: {
 
   nvim-origami = buildVimPlugin {
     pname = "nvim-origami";
-    version = "1.9-unstable-2026-01-06";
+    version = "1.9-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "chrisgrieser";
       repo = "nvim-origami";
-      rev = "c660a3d7e3db602faa5fb6b5ff19ba7a1d9e71fe";
-      hash = "sha256-ScdTnxniIO+kEnUo1EKzFB7C7y/N8x7LR9zaTrfPq8E=";
+      rev = "a0e001f6977368c363054ff43d94d9b49d36929a";
+      hash = "sha256-30qy9xJlI9cTPoLQj90c6UlxnK+HQkBPw3x/GCOyqWA=";
     };
     meta.homepage = "https://github.com/chrisgrieser/nvim-origami/";
     meta.hydraPlatforms = [ ];
@@ -11853,12 +11853,12 @@ final: prev: {
 
   nvim-rip-substitute = buildVimPlugin {
     pname = "nvim-rip-substitute";
-    version = "0-unstable-2026-01-10";
+    version = "0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "chrisgrieser";
       repo = "nvim-rip-substitute";
-      rev = "af69702b1e6881b0330d22d3a62989e320d4d6d1";
-      hash = "sha256-ey5+s8GbvYUCWXiXXGzM/yL2NmLKY957sxuLBfDGALc=";
+      rev = "6d6b5bfc7b3b502ac4eda200eff9a4ec4b98a0c7";
+      hash = "sha256-xx084J+I9aTSDWk0YAFmAoNOyQXDLWXlDDQkeEKSRi4=";
     };
     meta.homepage = "https://github.com/chrisgrieser/nvim-rip-substitute/";
     meta.hydraPlatforms = [ ];
@@ -11866,12 +11866,12 @@ final: prev: {
 
   nvim-scissors = buildVimPlugin {
     pname = "nvim-scissors";
-    version = "0-unstable-2026-01-10";
+    version = "0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "chrisgrieser";
       repo = "nvim-scissors";
-      rev = "5e8cd238a6b988da4a328b3bbb1ca5f30648c5fd";
-      hash = "sha256-23/e9l0KSi0aWcZCm+TVbBAsMEPH4iremoB4gLqFda4=";
+      rev = "ee552467060668be362f60fc5c29f7746e9531e3";
+      hash = "sha256-gYuj+UgHk1pVB7iQ3ncmHAzlTbMeFD9fVjF+u8FFmMc=";
     };
     meta.homepage = "https://github.com/chrisgrieser/nvim-scissors/";
     meta.hydraPlatforms = [ ];
@@ -11970,12 +11970,12 @@ final: prev: {
 
   nvim-spider = buildVimPlugin {
     pname = "nvim-spider";
-    version = "0-unstable-2026-01-20";
+    version = "0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "chrisgrieser";
       repo = "nvim-spider";
-      rev = "c7a9b4a9dab9b8f0ea441a942175b365a92a28ad";
-      hash = "sha256-YambjY/cRt4G2+buuBkzkr1D6o8Hx6Mlecymb/0SPzY=";
+      rev = "8d8c59bfd9e68ed28d7166f5ace462ab6198d873";
+      hash = "sha256-NPFz6VdVt8RtcPwrKskXdidhw+F7omyglic/iK2xFq0=";
     };
     meta.homepage = "https://github.com/chrisgrieser/nvim-spider/";
     meta.hydraPlatforms = [ ];
@@ -12035,12 +12035,12 @@ final: prev: {
 
   nvim-tinygit = buildVimPlugin {
     pname = "nvim-tinygit";
-    version = "1.0-unstable-2026-01-06";
+    version = "1.0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "chrisgrieser";
       repo = "nvim-tinygit";
-      rev = "c1ebb5d4a5e4b8b2cbb91ca1fdb52f4b391c3793";
-      hash = "sha256-d4TscYT1w6WPxlJA1Uf1PEhpTbz3dt5oCwiUvekr+/E=";
+      rev = "e1585da9ebfcf5bef53dc41858f55e97b231dd1a";
+      hash = "sha256-3/1m7Xrk6IywNnCyCBpWgxM/aVb7yiqyS8zeIZV8Wyc=";
     };
     meta.homepage = "https://github.com/chrisgrieser/nvim-tinygit/";
     meta.hydraPlatforms = [ ];
@@ -12048,12 +12048,12 @@ final: prev: {
 
   nvim-tree-lua = buildVimPlugin {
     pname = "nvim-tree.lua";
-    version = "1.15.0-unstable-2026-01-24";
+    version = "1.15.0-unstable-2026-01-27";
     src = fetchFromGitHub {
       owner = "nvim-tree";
       repo = "nvim-tree.lua";
-      rev = "1701e41b07d398757101ac35e11d6992085fc75f";
-      hash = "sha256-JxGA5j6IQ3qvM6zarI/N2hLmU/AyOj2dxqygUt5Uf+o=";
+      rev = "c07ce43527e5f0242121f4eb1feb7ac0ecea8275";
+      hash = "sha256-giGuSvx4eOPjaGYSZNFkm8OamJZSfRvdCM6MGmZp9jQ=";
     };
     meta.homepage = "https://github.com/nvim-tree/nvim-tree.lua/";
     meta.hydraPlatforms = [ ];
@@ -12061,12 +12061,12 @@ final: prev: {
 
   nvim-treesitter = buildVimPlugin {
     pname = "nvim-treesitter";
-    version = "0.10.0-unstable-2026-01-24";
+    version = "0.10.0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "nvim-treesitter";
       repo = "nvim-treesitter";
-      rev = "81aca2f9815e26f638f697df1d828ca290847b64";
-      hash = "sha256-Nw9eK7Rri/hUY6vj0OLa/Y2vOvBS7XeY0Eoj+qrgGiU=";
+      rev = "19c729dae6e0eeb79423df0cf37780aa9a7cc3b7";
+      hash = "sha256-mSITjO17z0gP+8QX24BOqccGN7R+05iddWF0N8cSacc=";
     };
     meta.homepage = "https://github.com/nvim-treesitter/nvim-treesitter/";
     meta.hydraPlatforms = [ ];
@@ -12165,12 +12165,12 @@ final: prev: {
 
   nvim-treesitter-textobjects = buildVimPlugin {
     pname = "nvim-treesitter-textobjects";
-    version = "0-unstable-2026-01-24";
+    version = "0-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "nvim-treesitter";
       repo = "nvim-treesitter-textobjects";
-      rev = "52bda74e087034408e2d563cb4499c1601038f9d";
-      hash = "sha256-9qpTwJqfkpF/M7MVE2VgEU9ptIYUcNvWrWM0nQxXo7M=";
+      rev = "a0e182ae21fda68c59d1f36c9ed45600aef50311";
+      hash = "sha256-J3D+nbalJqZ4aeFBD7veW6TuI0BEU2jbx5pMEew4dkA=";
     };
     meta.homepage = "https://github.com/nvim-treesitter/nvim-treesitter-textobjects/";
     meta.hydraPlatforms = [ ];
@@ -12269,12 +12269,12 @@ final: prev: {
 
   nvim-various-textobjs = buildVimPlugin {
     pname = "nvim-various-textobjs";
-    version = "0-unstable-2026-01-06";
+    version = "0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "chrisgrieser";
       repo = "nvim-various-textobjs";
-      rev = "71bd98e08e96a730a60566f929a6ac3974ede0e0";
-      hash = "sha256-VDRZ8OLR76pudbrxQbY2dnHxDZwN0Y8pgeetkGjd5Sk=";
+      rev = "222869e08cb7224fc1f09e071b70f2e1b20f2d28";
+      hash = "sha256-mtgPWX/1RA8+ncH7510WHVzcGlIipVug34S2gskwJww=";
     };
     meta.homepage = "https://github.com/chrisgrieser/nvim-various-textobjs/";
     meta.hydraPlatforms = [ ];
@@ -12425,12 +12425,12 @@ final: prev: {
 
   obsidian-nvim = buildVimPlugin {
     pname = "obsidian.nvim";
-    version = "3.15.4-unstable-2026-01-13";
+    version = "3.15.7-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "obsidian-nvim";
       repo = "obsidian.nvim";
-      rev = "acd73830fe2e8a2e0c234073ca2cb6387d59f37b";
-      hash = "sha256-xq7abpovUo++GpzyfDeO3IKo+hYnbrZZwtYwLsqFNp4=";
+      rev = "dacdbd8b08862ddbb8e9d384ddba6c428aef4428";
+      hash = "sha256-myM0hkTCVVEG82Qf4OMJHR9lc84lNhNv9jf31Zt+zjc=";
     };
     meta.homepage = "https://github.com/obsidian-nvim/obsidian.nvim/";
     meta.hydraPlatforms = [ ];
@@ -12711,14 +12711,14 @@ final: prev: {
 
   opencode-nvim = buildVimPlugin {
     pname = "opencode.nvim";
-    version = "0-unstable-2026-01-24";
+    version = "0-unstable-2026-01-28";
     src = fetchFromGitHub {
-      owner = "NickvanDyke";
+      owner = "nickjvandyke";
       repo = "opencode.nvim";
-      rev = "0f85a4446720263b172521caa9cfaaf782a4f4ad";
-      hash = "sha256-U4klSnkXt+qsCnKPdAn5oN1VfSh3RbJTOzbTwccdS0w=";
+      rev = "849a5f63514667e63318521330f28acaf13a4125";
+      hash = "sha256-wVZYTjvr9eN5RXiDnqq+t4rtozjqiMv15tRnKaQy9YU=";
     };
-    meta.homepage = "https://github.com/NickvanDyke/opencode.nvim/";
+    meta.homepage = "https://github.com/nickjvandyke/opencode.nvim/";
     meta.hydraPlatforms = [ ];
   };
 
@@ -13298,12 +13298,12 @@ final: prev: {
 
   project-nvim = buildVimPlugin {
     pname = "project.nvim";
-    version = "0.5.5-1-unstable-2026-01-24";
+    version = "0.5.6-1-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "DrKJeff16";
       repo = "project.nvim";
-      rev = "9e3822d24bc4a39e68cd0a77b11787006b48f638";
-      hash = "sha256-rlCugf9CAGJ+Pb1UoZOutv8BKWofd71wzdVeg6RGOek=";
+      rev = "d9d450d6372be5b7d624cfb15e7fe95ea1b5e6ef";
+      hash = "sha256-Q54vcl9FQwIfm+1dTn0nutM7TFXNWxf9s8LshtjU0FY=";
     };
     meta.homepage = "https://github.com/DrKJeff16/project.nvim/";
     meta.hydraPlatforms = [ ];
@@ -13350,12 +13350,12 @@ final: prev: {
 
   pum-vim = buildVimPlugin {
     pname = "pum.vim";
-    version = "2.0-unstable-2026-01-24";
+    version = "2.0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "Shougo";
       repo = "pum.vim";
-      rev = "ac73f905512413c89f282b436d53a5437c2d11ad";
-      hash = "sha256-XWDSAYBCWMPFWeSwNH9tmLu7crBFpH++t1OGkq7eSWw=";
+      rev = "2bb0c839a2d474da6c93eefebd739c3a4b03f139";
+      hash = "sha256-z9VMcFn/iHSRpuVp1hP+Mm7iupjU8bFIzVp2VUnb8GU=";
     };
     meta.homepage = "https://github.com/Shougo/pum.vim/";
     meta.hydraPlatforms = [ ];
@@ -13429,12 +13429,12 @@ final: prev: {
 
   quarto-nvim = buildVimPlugin {
     pname = "quarto-nvim";
-    version = "2.0.1-unstable-2026-01-16";
+    version = "2.0.1-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "quarto-dev";
       repo = "quarto-nvim";
-      rev = "cc99501a524b7abf484ed0248cae66ac53f93a13";
-      hash = "sha256-9aOEjz/kNLnZU4pt5jnUnJZ9cUgjq6tyaRXbCymZCA4=";
+      rev = "d923bb7cfc2bde41143e1c531c28190f0fade3a2";
+      hash = "sha256-UGrbQtmJIQsOb37/IcrFxGnAfIiCHGsmMFFSkitNK9o=";
     };
     meta.homepage = "https://github.com/quarto-dev/quarto-nvim/";
     meta.hydraPlatforms = [ ];
@@ -13715,12 +13715,12 @@ final: prev: {
 
   render-markdown-nvim = buildVimPlugin {
     pname = "render-markdown.nvim";
-    version = "8.11.0-unstable-2026-01-16";
+    version = "8.11.0-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "MeanderingProgrammer";
       repo = "render-markdown.nvim";
-      rev = "c54380dd4d8d1738b9691a7c349ecad7967ac12e";
-      hash = "sha256-kKvIivCNe6HlGqiChySeqEHRB0rj6ipKwjko4ix4tRw=";
+      rev = "99bfa5d61381a29eedc75810898cb9c0fc755064";
+      hash = "sha256-HUjBf+sKNK90bcJBJ4+/m6m7pW2siqBo5sfsZX6njyw=";
     };
     meta.homepage = "https://github.com/MeanderingProgrammer/render-markdown.nvim/";
     meta.hydraPlatforms = [ ];
@@ -13846,12 +13846,12 @@ final: prev: {
 
   roslyn-nvim = buildVimPlugin {
     pname = "roslyn.nvim";
-    version = "0-unstable-2026-01-06";
+    version = "0-unstable-2026-01-26";
     src = fetchFromGitHub {
       owner = "seblyng";
       repo = "roslyn.nvim";
-      rev = "2b9a8366a29b0a2a7e51cac87f3ca6345f617790";
-      hash = "sha256-SdrfPStzmmOiYPhOnanM+GB+Ox6g9jhb5Ks5qxWLIAU=";
+      rev = "0687e3c12731e3d76d3d8bfb5aa873b736105981";
+      hash = "sha256-HWIKCj6ximH55JCjo8adaVVA0+m/ho/Gmgnf+bR+v7w=";
     };
     meta.homepage = "https://github.com/seblyng/roslyn.nvim/";
     meta.hydraPlatforms = [ ];
@@ -14406,12 +14406,12 @@ final: prev: {
 
   sort-nvim = buildVimPlugin {
     pname = "sort.nvim";
-    version = "2.3.0-unstable-2026-01-12";
+    version = "2.4.0-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "sQVe";
       repo = "sort.nvim";
-      rev = "57127706a3a4cbe4b640b5ece3f5af1ffe9c05ce";
-      hash = "sha256-MZKNHe7WUZ0eybWZNzZoloKX83hRLB0y4vvRpqU6GdU=";
+      rev = "3365768ad75fb7aa2a74ebaf609b7c802354fd46";
+      hash = "sha256-h6m2Zh2u5r9EMRo4CbGCXqC1bG4bUfuCYWZo4T3MEtQ=";
     };
     meta.homepage = "https://github.com/sQVe/sort.nvim/";
     meta.hydraPlatforms = [ ];
@@ -16379,12 +16379,12 @@ final: prev: {
 
   unified-nvim = buildVimPlugin {
     pname = "unified.nvim";
-    version = "0.0.2-unstable-2026-01-15";
+    version = "0.0.2-unstable-2026-01-26";
     src = fetchFromGitHub {
       owner = "axkirillov";
       repo = "unified.nvim";
-      rev = "6b9d94b83cdaf7a33afeb1d66a9de386f02d8c55";
-      hash = "sha256-gP54LygzIsmLGzBmuNDsDxgeubC+hOARrAP6/KcRr20=";
+      rev = "6c65bfcde3d99e74e1f924d73be16614ed5327ff";
+      hash = "sha256-dfq7rCGnMivooyqrGBS7ZWrB8mcSYASbwS1rI5U8DwE=";
     };
     meta.homepage = "https://github.com/axkirillov/unified.nvim/";
     meta.hydraPlatforms = [ ];
@@ -16418,12 +16418,12 @@ final: prev: {
 
   unison = buildVimPlugin {
     pname = "unison";
-    version = "0-unstable-2026-01-22";
+    version = "0-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "unisonweb";
       repo = "unison";
-      rev = "04f4bdaa3a1e27d94faf891309c9e2671dfcb474";
-      hash = "sha256-ZIONjcK4x2v6q0ZvubzTGP3qgpxhfvj2XFmUrUIxVR4=";
+      rev = "72eda272f09b1c44dfa932f492c598c7dd059854";
+      hash = "sha256-odEQQj8D89qskOw7andkayaBRYVG/T/hOQnUMOXE9uk=";
     };
     meta.homepage = "https://github.com/unisonweb/unison/";
     meta.hydraPlatforms = [ ];
@@ -16522,12 +16522,12 @@ final: prev: {
 
   vague-nvim = buildVimPlugin {
     pname = "vague.nvim";
-    version = "1.6.0-unstable-2025-12-19";
+    version = "1.6.0-unstable-2026-01-26";
     src = fetchFromGitHub {
       owner = "vague-theme";
       repo = "vague.nvim";
-      rev = "fcc283576764474ccfbbcca240797d5d7f4d8a78";
-      hash = "sha256-upqvTAnmJBAIoyzGxv+hq04dvS5wv3bjkbx2pWLCp+s=";
+      rev = "30d2239ecf8adab9bc0d07d42e7a07283879dab6";
+      hash = "sha256-uKOmU+SWHySI4Soc6sn4m4fXSHelzlbMz9SzhqxxFa8=";
     };
     meta.homepage = "https://github.com/vague-theme/vague.nvim/";
     meta.hydraPlatforms = [ ];
@@ -16548,12 +16548,12 @@ final: prev: {
 
   venv-selector-nvim = buildVimPlugin {
     pname = "venv-selector.nvim";
-    version = "0-unstable-2026-01-20";
+    version = "0-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "linux-cultist";
       repo = "venv-selector.nvim";
-      rev = "98c04c70d11007b84111c5fa94b6ab9f2745b934";
-      hash = "sha256-Mh22b8YDR1YC2ugnZR+aDyCqiuOkw2Zjne7EJ0Z1uIw=";
+      rev = "5e1ccc57c880ace17ada6b1e216d6a051cb8dbf7";
+      hash = "sha256-5WIUATd7n0Cm+ykUpCDFxhY/+k/r5j14CU5hIxs4/BQ=";
     };
     meta.homepage = "https://github.com/linux-cultist/venv-selector.nvim/";
     meta.hydraPlatforms = [ ];
@@ -21660,12 +21660,12 @@ final: prev: {
 
   vim-test = buildVimPlugin {
     pname = "vim-test";
-    version = "2.1.0-unstable-2026-01-19";
+    version = "2.1.0-unstable-2026-01-28";
     src = fetchFromGitHub {
       owner = "vim-test";
       repo = "vim-test";
-      rev = "8f682546ccb2c44da78719ee318121b0da30d4f3";
-      hash = "sha256-vvpM4zEktzxcl4T5heT0+5EvSjeR3FHSE1bFJKtOp5Y=";
+      rev = "c569b3620d0e53572efc95159f66ace5e7b06b48";
+      hash = "sha256-jCAnzKmKh37vEg0F9inMcuU8IlsZozYrYkwIeLpFFtc=";
     };
     meta.homepage = "https://github.com/vim-test/vim-test/";
     meta.hydraPlatforms = [ ];
@@ -21842,12 +21842,12 @@ final: prev: {
 
   vim-tmux-navigator = buildVimPlugin {
     pname = "vim-tmux-navigator";
-    version = "1.0-unstable-2025-07-15";
+    version = "1.0-unstable-2026-01-25";
     src = fetchFromGitHub {
       owner = "christoomey";
       repo = "vim-tmux-navigator";
-      rev = "c45243dc1f32ac6bcf6068e5300f3b2b237e576a";
-      hash = "sha256-IEPnr/GdsAnHzdTjFnXCuMyoNLm3/Jz4cBAM0AJBrj8=";
+      rev = "e41c431a0c7b7388ae7ba341f01a0d217eb3a432";
+      hash = "sha256-efqiRffnidYx+qjgsHyWshCFWgZp/ZrHl+Clt04pfpM=";
     };
     meta.homepage = "https://github.com/christoomey/vim-tmux-navigator/";
     meta.hydraPlatforms = [ ];
@@ -22948,12 +22948,12 @@ final: prev: {
 
   wrapping-nvim = buildVimPlugin {
     pname = "wrapping.nvim";
-    version = "2.1.1-unstable-2026-01-24";
+    version = "2.1.1-unstable-2026-01-26";
     src = fetchFromGitHub {
       owner = "andrewferrier";
       repo = "wrapping.nvim";
-      rev = "f659a8ab653f0d2984fbbdd3de886dfd07fe727e";
-      hash = "sha256-U8FjuhbbzhfaATgKOEu4yd6YMo5IOKJROsr2UFIuVAQ=";
+      rev = "929e0f4c1906bf093092c01681a72ee1071f427b";
+      hash = "sha256-DBnJ8MexsXt70ghCbHZM7Li47Kw27lJCxj0FYouLe2s=";
     };
     meta.homepage = "https://github.com/andrewferrier/wrapping.nvim/";
     meta.hydraPlatforms = [ ];
@@ -23092,12 +23092,12 @@ final: prev: {
 
   yazi-nvim = buildVimPlugin {
     pname = "yazi.nvim";
-    version = "13.1.3-unstable-2026-01-24";
+    version = "13.1.3-unstable-2026-01-29";
     src = fetchFromGitHub {
       owner = "mikavilpas";
       repo = "yazi.nvim";
-      rev = "d4f90c385655cae16b105b2931abdab401135c85";
-      hash = "sha256-dHThpk8rZ1Puch8TG1Corz00kkHGlul2eZNCtedrdk4=";
+      rev = "015e73f47424e95d4456ff2880f13d106dab3a5d";
+      hash = "sha256-HEliPzShpb7fmp0WtlI22eZS/h6hG+AepjvBlFC/m9g=";
     };
     meta.homepage = "https://github.com/mikavilpas/yazi.nvim/";
     meta.hydraPlatforms = [ ];
diff --git a/pkgs/applications/editors/vim/plugins/nvim-treesitter/generated.nix b/pkgs/applications/editors/vim/plugins/nvim-treesitter/generated.nix
index 3ef922b69567..cd14785ec941 100644
--- a/pkgs/applications/editors/vim/plugins/nvim-treesitter/generated.nix
+++ b/pkgs/applications/editors/vim/plugins/nvim-treesitter/generated.nix
@@ -253,12 +253,12 @@
     };
     c3 = buildGrammar {
       language = "c3";
-      version = "0.0.0+rev=2c04e78";
+      version = "0.0.0+rev=7ef54ad";
       src = fetchFromGitHub {
         owner = "c3lang";
         repo = "tree-sitter-c3";
-        rev = "2c04e7858d63497152d42f08d3067972618aeedc";
-        hash = "sha256-YqrdnaCh5OnVtQJiBj45n6NYqIthDnNBeYjMCNmFcD0=";
+        rev = "7ef54adef1008ce7d943c2cca03aee93a79b2252";
+        hash = "sha256-OFhKk7dJYu17wbxXqBH2Z5eLurhioLYDc0pUgXiZtP8=";
       };
       meta.homepage = "https://github.com/c3lang/tree-sitter-c3";
     };
@@ -2702,12 +2702,12 @@
     };
     ruby = buildGrammar {
       language = "ruby";
-      version = "0.0.0+rev=89bd7a8";
+      version = "0.0.0+rev=ab6dca7";
       src = fetchFromGitHub {
         owner = "tree-sitter";
         repo = "tree-sitter-ruby";
-        rev = "89bd7a8e5450cb6a942418a619d30469f259e5d6";
-        hash = "sha256-84Nqw6QyGqwKAT+7Cdrzl1SikfJ3doX3tngGZWaXkVc=";
+        rev = "ab6dca77a8184abc94af6e3e82538741b5078d63";
+        hash = "sha256-qAO2qRvaYlyCdSuiYBoQG/jAWiZEA5p67BTPdoK0dnU=";
       };
       meta.homepage = "https://github.com/tree-sitter/tree-sitter-ruby";
     };
@@ -3515,12 +3515,12 @@
     };
     vue = buildGrammar {
       language = "vue";
-      version = "0.0.0+rev=22bdfa6";
+      version = "0.0.0+rev=ce8011a";
       src = fetchFromGitHub {
         owner = "tree-sitter-grammars";
         repo = "tree-sitter-vue";
-        rev = "22bdfa6c9fc0f5ffa44c6e938ec46869ac8a99ff";
-        hash = "sha256-LnmUtJJpBIZPTJqrQQ7WI8V44hPw3yxR+j2jR0pHIdY=";
+        rev = "ce8011a414fdf8091f4e4071752efc376f4afb08";
+        hash = "sha256-pCoyDRuRCpfpJh7vQIM8yZz5aPcqrdYlTJGM/K5oQFs=";
       };
       meta.homepage = "https://github.com/tree-sitter-grammars/tree-sitter-vue";
     };
diff --git a/pkgs/applications/editors/vim/plugins/vim-plugin-names b/pkgs/applications/editors/vim/plugins/vim-plugin-names
index 2ab1f5451f91..e82a5b787769 100644
--- a/pkgs/applications/editors/vim/plugins/vim-plugin-names
+++ b/pkgs/applications/editors/vim/plugins/vim-plugin-names
@@ -976,7 +976,7 @@ https://github.com/sonph/onehalf/,,
 https://github.com/rmehri01/onenord.nvim/,main,
 https://github.com/tyru/open-browser-github.vim/,,
 https://github.com/tyru/open-browser.vim/,,
-https://github.com/NickvanDyke/opencode.nvim/,HEAD,
+https://github.com/nickjvandyke/opencode.nvim/,HEAD,
 https://github.com/Almo7aya/openingh.nvim/,,
 https://github.com/salkin-mada/openscad.nvim/,HEAD,
 https://github.com/chipsenkbeil/org-roam.nvim/,HEAD,
diff --git a/pkgs/applications/editors/vscode/extensions/default.nix b/pkgs/applications/editors/vscode/extensions/default.nix
index 581caea33f36..7c8aab115196 100644
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -1711,8 +1711,8 @@ let
         mktplcRef = {
           name = "vscode-jest-runner";
           publisher = "firsttris";
-          version = "0.4.98";
-          hash = "sha256-UhPkiUIIIf58D9hO4mFZba+IO4uJZkP18BH6PTVVfHk=";
+          version = "0.4.112";
+          hash = "sha256-NKnAGGgckVsIn3O842BPWJ3cXM1Ap0yK9Rsrdjfmf5M=";
         };
         meta = {
           description = "Simple way to run or debug a single (or multiple) tests from context-menu";
@@ -1851,8 +1851,8 @@ let
         mktplcRef = {
           name = "godot-tools";
           publisher = "geequlim";
-          version = "2.5.1";
-          hash = "sha256-kAzRSNZw1zaECblJv7NzXnE2JXSy9hzdT2cGX+uwleY=";
+          version = "2.6.0";
+          hash = "sha256-b6aH4LAqXjwRp2dFa7+hhQL3ac9K7Zmat5ncaRLooD0=";
         };
         meta = {
           description = "VS Code extension for game development with Godot Engine and GDScript";
diff --git a/pkgs/applications/editors/vscode/extensions/google.colab/default.nix b/pkgs/applications/editors/vscode/extensions/google.colab/default.nix
index e49838ccbeba..4eebfda679c3 100644
--- a/pkgs/applications/editors/vscode/extensions/google.colab/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/google.colab/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     publisher = "google";
     name = "colab";
-    version = "0.1.7";
-    hash = "sha256-wAvmXccgIEfw9Q84F/ozJwvzo26OvehdrTy3DqKu5e8=";
+    version = "0.2.0";
+    hash = "sha256-2kib32Dt1d6FADO/z8HEux+x1Mig4Hso3KTwCR5IjR0=";
   };
 
   meta = {
diff --git a/pkgs/applications/emulators/libretro/cores/opera.nix b/pkgs/applications/emulators/libretro/cores/opera.nix
index 17ba3881e78b..a64ca07bb953 100644
--- a/pkgs/applications/emulators/libretro/cores/opera.nix
+++ b/pkgs/applications/emulators/libretro/cores/opera.nix
@@ -6,13 +6,13 @@
 }:
 mkLibretroCore {
   core = "opera";
-  version = "0-unstable-2025-12-26";
+  version = "0-unstable-2026-01-27";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "opera-libretro";
-    rev = "345f12b7d45d7013602a4a3b72287f529bd78042";
-    hash = "sha256-2FkBsiKOzf/sMtKA1vI0ixWP9/ghs/N7zA7/m6h6gZ0=";
+    rev = "f20af9ad3271af2de8229f522c6534984a6e2520";
+    hash = "sha256-cilOteQK6clVaGdemujrNwfcbI6Gw+UMvtF6hICm3Wo=";
   };
 
   makefile = "Makefile";
diff --git a/pkgs/applications/misc/googleearth-pro/default.nix b/pkgs/applications/misc/googleearth-pro/default.nix
index 5684d80f6e47..bc9995d00e5a 100644
--- a/pkgs/applications/misc/googleearth-pro/default.nix
+++ b/pkgs/applications/misc/googleearth-pro/default.nix
@@ -134,7 +134,6 @@ mkDerivation rec {
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
     license = lib.licenses.unfree;
     maintainers = with lib.maintainers; [
-      shamilton
       xddxdd
     ];
     platforms = lib.platforms.linux;
diff --git a/pkgs/applications/misc/ksmoothdock/default.nix b/pkgs/applications/misc/ksmoothdock/default.nix
index e5665632ed04..952458c8989d 100644
--- a/pkgs/applications/misc/ksmoothdock/default.nix
+++ b/pkgs/applications/misc/ksmoothdock/default.nix
@@ -42,7 +42,6 @@ mkDerivation rec {
     mainProgram = "ksmoothdock";
     license = lib.licenses.mit;
     homepage = "https://dangvd.github.io/ksmoothdock/";
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.linux;
   };
 }
diff --git a/pkgs/applications/networking/browsers/librewolf/librewolf.nix b/pkgs/applications/networking/browsers/librewolf/librewolf.nix
index a87745795204..2a964bb1ab76 100644
--- a/pkgs/applications/networking/browsers/librewolf/librewolf.nix
+++ b/pkgs/applications/networking/browsers/librewolf/librewolf.nix
@@ -11,6 +11,10 @@ rec {
   extraConfigureFlags = [
     "--with-unsigned-addon-scopes=app,system"
     "--disable-default-browser-agent"
+    # Flags based on discussion in https://github.com/NixOS/nixpkgs/issues/482250
+    "--disable-debug"
+    "--disable-debug-symbols"
+    "--enable-lto=thin,cross"
   ];
 
   extraPostPatch = ''
diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index f3738390af49..fac672529157 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -1130,11 +1130,11 @@
     "vendorHash": "sha256-33NOGIvqLpgndG68GxAeoiISjWV7ApR4jmvqyZHjPKo="
   },
   "rootlyhq_rootly": {
-    "hash": "sha256-fXL/MwbXz1SVtro4hf5oy/1yvCkwH81Q58A9dxk7y0A=",
+    "hash": "sha256-DtyllGs7VDeX57mQ5sBP6obEzeTatlYw3Z8SEC29RQ4=",
     "homepage": "https://registry.terraform.io/providers/rootlyhq/rootly",
     "owner": "rootlyhq",
     "repo": "terraform-provider-rootly",
-    "rev": "v5.3.0",
+    "rev": "v5.5.0",
     "spdx": "MPL-2.0",
     "vendorHash": "sha256-UyfCHBSdGKCulExhUdYfvEab8cVjaHGDfgslRS0d1Co="
   },
diff --git a/pkgs/applications/networking/mailreaders/thunderbird-bin/release_esr_sources.nix b/pkgs/applications/networking/mailreaders/thunderbird-bin/release_esr_sources.nix
index ad01118ea7b0..7287a750999c 100644
--- a/pkgs/applications/networking/mailreaders/thunderbird-bin/release_esr_sources.nix
+++ b/pkgs/applications/networking/mailreaders/thunderbird-bin/release_esr_sources.nix
@@ -1,1193 +1,1193 @@
 {
-  version = "140.7.0esr";
+  version = "140.7.1esr";
   sources = [
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/af/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/af/thunderbird-140.7.1esr.tar.xz";
       locale = "af";
       arch = "linux-x86_64";
-      sha256 = "2388cd2eda60b33af36452737869e4e3ba097f172063cbb5e54c54356ded6448";
+      sha256 = "5b7dec6f98948f31015700246fd22e81c4e7f3b273b139b5ac4fccbfbe99d8cb";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/ar/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/ar/thunderbird-140.7.1esr.tar.xz";
       locale = "ar";
       arch = "linux-x86_64";
-      sha256 = "68edff0e932d1748dac497bfdec077abf6c8d83905e682a19ffa861667180f7a";
+      sha256 = "4f9e4d98af53a7453db7529ae4d77ecb42f45c3d1b0a890c221e2b3cdde7727b";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/ast/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/ast/thunderbird-140.7.1esr.tar.xz";
       locale = "ast";
       arch = "linux-x86_64";
-      sha256 = "45e4900f90fb3bb87e6cb69bc2c48c79eb9b5e040b64673ac6ba68367451fc94";
+      sha256 = "bca20ece82117097b828258bac2a5d9367bab7db64b7646dbdc0c8d3ee33a2ac";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/be/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/be/thunderbird-140.7.1esr.tar.xz";
       locale = "be";
       arch = "linux-x86_64";
-      sha256 = "9b96a43649b455064a7957d85dd6088ceb8b8434ba451ae84c866aaa9239e3e2";
+      sha256 = "a1baf718c198ae0b7e010a93a3fc37599676ab8349b5add712187c9e6cf349e3";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/bg/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/bg/thunderbird-140.7.1esr.tar.xz";
       locale = "bg";
       arch = "linux-x86_64";
-      sha256 = "e2f8a27f324fff44419bcec68896b4384300ba58b8c7e6417a988ebc0e92b1da";
+      sha256 = "118a9b06d92f17e911084ae004c46bf1b12bf424029406e25563c21e0483929a";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/br/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/br/thunderbird-140.7.1esr.tar.xz";
       locale = "br";
       arch = "linux-x86_64";
-      sha256 = "d7cd4cac8e5a5e935b3a1f2e5cf4aef906c58a215ba0a932a0c3cb0c434b12b6";
+      sha256 = "40a6fe676265efb0f6ecc6e80892d86ff428a9237db38e21f822a32212754424";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/ca/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/ca/thunderbird-140.7.1esr.tar.xz";
       locale = "ca";
       arch = "linux-x86_64";
-      sha256 = "82d8d434b24621552d59da2f81da5e82640a18f86fd6d43d759dc21706f76f9e";
+      sha256 = "bc57c32fdb91e55aad80842cf7c58265ffbd1f17cee9df56f432dccab23b3777";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/cak/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/cak/thunderbird-140.7.1esr.tar.xz";
       locale = "cak";
       arch = "linux-x86_64";
-      sha256 = "ca4fda685bdb17a2cf966de62928e68a25a337a83fa4c21fbedd9fc10740d775";
+      sha256 = "ec2ac6515bdab5650ffbf2cb98398e3d609fcaf76edeee743a684e6c4235b51b";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/cs/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/cs/thunderbird-140.7.1esr.tar.xz";
       locale = "cs";
       arch = "linux-x86_64";
-      sha256 = "137bb922cfff24988af0ed65af5be0e3d9bd858fd6f1269b5fe4679fb154d259";
+      sha256 = "145c56d72c7739389e8d54e01a748f1867e3cd1c01b0ddd55e2c13104ed6be63";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/cy/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/cy/thunderbird-140.7.1esr.tar.xz";
       locale = "cy";
       arch = "linux-x86_64";
-      sha256 = "e5e32a08e67bb3d6f076b884923c37d84257538b58d3dd46b4708766acaeb3a8";
+      sha256 = "8225ef1b3f5f362f2762481720b538dc17202cc13722bcb81b5f6d89a81874e7";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/da/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/da/thunderbird-140.7.1esr.tar.xz";
       locale = "da";
       arch = "linux-x86_64";
-      sha256 = "d58ef053db6844819648532e733022665e6e8714974abf3a992e2f1b6d5caa10";
+      sha256 = "71703f868f51a052db8702a7b7c8960254e53939be2ed27a15ed7b1962512b9b";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/de/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/de/thunderbird-140.7.1esr.tar.xz";
       locale = "de";
       arch = "linux-x86_64";
-      sha256 = "d3eb429e741c72966974a02c9cbfffc27c26f54ad43f1b74b2d1a72ede6ccf21";
+      sha256 = "614f5846d8a409627e6da87fd5d83899e895ea3837c5869c7fa73ce145d046dd";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/dsb/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/dsb/thunderbird-140.7.1esr.tar.xz";
       locale = "dsb";
       arch = "linux-x86_64";
-      sha256 = "979baad67821506f317362379f2db245b5ed0f622608dd1e82f527e0ea255650";
+      sha256 = "199b1006f1016c79cad9f7cfe8dcd730b2c344630a588e718bb8261e92d7df6f";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/el/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/el/thunderbird-140.7.1esr.tar.xz";
       locale = "el";
       arch = "linux-x86_64";
-      sha256 = "eca24346fff69c152d8357ffe85dc367c5073c66d3c12bb188feabe80cf376e4";
+      sha256 = "04fd18329b3d83cefb6d23e171c2818df0ff36119246926df7ea02998e41ab38";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/en-CA/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/en-CA/thunderbird-140.7.1esr.tar.xz";
       locale = "en-CA";
       arch = "linux-x86_64";
-      sha256 = "4e618055dda76a09a8fa45104dc0db8af1fff3e856ee57cc39381c6716e6fd75";
+      sha256 = "8614a7b486806fb5509caf49ab1db91dc4c973cd4b15704940a30a203b154bb1";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/en-GB/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/en-GB/thunderbird-140.7.1esr.tar.xz";
       locale = "en-GB";
       arch = "linux-x86_64";
-      sha256 = "155b566ee0b4b44766366be26845e5291b8e01fa984eccd01f44fd8888fdae24";
+      sha256 = "005a596fdb4ed7a022291b00acf98dcfee87916cf114f9538e44079eb429df5f";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/en-US/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/en-US/thunderbird-140.7.1esr.tar.xz";
       locale = "en-US";
       arch = "linux-x86_64";
-      sha256 = "3d8d7033f8500aa37376718e8be34b43b69c06411103b3c22b4f1b162410ae34";
+      sha256 = "204cbb7a808f1f53f39089002b8962fce89ceb523c801ed359925340d907b9bc";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/es-AR/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/es-AR/thunderbird-140.7.1esr.tar.xz";
       locale = "es-AR";
       arch = "linux-x86_64";
-      sha256 = "2fb6435c85b7d95f0a5fc42788a63f17fc70b2293f2f47fa063a81cb3b7e1fbf";
+      sha256 = "0f1c52d9f567d927c8f76de8aae20bb76a29ec35f461d92d5d96973bfc0c14b2";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/es-ES/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/es-ES/thunderbird-140.7.1esr.tar.xz";
       locale = "es-ES";
       arch = "linux-x86_64";
-      sha256 = "2f6b0c90edae9ad218f806c1ad3d68c6a7fff4517ff1b0d5698462ab5cbc9519";
+      sha256 = "14109fae21d8e6b13e5914bde4314dacda77b6de10319d8a130c6a5566e0b673";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/es-MX/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/es-MX/thunderbird-140.7.1esr.tar.xz";
       locale = "es-MX";
       arch = "linux-x86_64";
-      sha256 = "fa6fcd5ed5381d4662e3d8b6c2aa46dba6872faff04072ffe14e35f15079c1cd";
+      sha256 = "e63e10993d525ca8f45f5ac4cc0afc1b0f619a52d128229c36e19ff251b0009d";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/et/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/et/thunderbird-140.7.1esr.tar.xz";
       locale = "et";
       arch = "linux-x86_64";
-      sha256 = "cd6dcd9b854e0cca7038b3661ffac3e9832668f74f5a84099156674f868f9672";
+      sha256 = "4bf00088fc58723754872ba6daa17b497add794798d7917489fb497500425ceb";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/eu/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/eu/thunderbird-140.7.1esr.tar.xz";
       locale = "eu";
       arch = "linux-x86_64";
-      sha256 = "b27f2858e6e530e47a7800f0c98bd0cec503a38987ac7faf7c3b3d50933a3d91";
+      sha256 = "4c0c7adeaa22b6224cf447712c5eac9ce090961c6696af0c7275b556630a8228";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/fi/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/fi/thunderbird-140.7.1esr.tar.xz";
       locale = "fi";
       arch = "linux-x86_64";
-      sha256 = "462a6189022e9143ed09d19e3980d0315ff9d87ba071f92548a7620ceb68e020";
+      sha256 = "42f8d7bc6c6a467177a9f0ae7d0fc8cd77c429396634b427e5d526c68593f55e";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/fr/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/fr/thunderbird-140.7.1esr.tar.xz";
       locale = "fr";
       arch = "linux-x86_64";
-      sha256 = "835c0560603e294a4d7b88cc68b37c43426c328e4208c95218e603a9ba322c65";
+      sha256 = "6ad635b0050615f6d06709aaa9d82f0f9ba7dc533770a94169d890f65a8d3175";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/fy-NL/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/fy-NL/thunderbird-140.7.1esr.tar.xz";
       locale = "fy-NL";
       arch = "linux-x86_64";
-      sha256 = "b99321af6614b11f987bcedc463b3175ec22ec665a09e759ddaca7d75721e0af";
+      sha256 = "d7975b86c83e23e0564bc7b5f16497aadc3e04513b6e7d5055e99917619599c5";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/ga-IE/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/ga-IE/thunderbird-140.7.1esr.tar.xz";
       locale = "ga-IE";
       arch = "linux-x86_64";
-      sha256 = "6a384822dc74ed5a48fabc96a46b751e88945c7d17d366fa34b41b1d7ff3e567";
+      sha256 = "28a2a62e20ca40a996f9f61536d03f2d98c1d1070280494d6b762146088d32fa";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/gd/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/gd/thunderbird-140.7.1esr.tar.xz";
       locale = "gd";
       arch = "linux-x86_64";
-      sha256 = "9386914860e941fa6f594825a4d43e3cb015b3df9e571b01022ae05b1f6c824e";
+      sha256 = "276bbcb4631383ff1c6257821366195084ba572dcfc5b8d4534c74bde2e56072";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/gl/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/gl/thunderbird-140.7.1esr.tar.xz";
       locale = "gl";
       arch = "linux-x86_64";
-      sha256 = "77d72ea2a0719ddabcf8de5cd0a822826dfff35c71f595a2d38be041cf2b21ef";
+      sha256 = "7f00925909c5be3944ac5002f1375576c63dd2d8f4b75d38d60b2c689592861a";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/he/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/he/thunderbird-140.7.1esr.tar.xz";
       locale = "he";
       arch = "linux-x86_64";
-      sha256 = "6cb9724c4d3a9f7afaf6899488ceb4f9e20abcc05265c816c4efa266da692421";
+      sha256 = "fbad00373533da065ef9514b43116a56aadf290f481b67ed386075e9e3ea2b5e";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/hr/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/hr/thunderbird-140.7.1esr.tar.xz";
       locale = "hr";
       arch = "linux-x86_64";
-      sha256 = "e4d76030bc3cec66c8c0c2a1878f7ea4f55aa51712677909063989f6d65a7ecb";
+      sha256 = "17b10303dcd3dc0d7c37418d12cab0c2f0a87e9b6d47ffe04c8eeb603448b63b";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/hsb/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/hsb/thunderbird-140.7.1esr.tar.xz";
       locale = "hsb";
       arch = "linux-x86_64";
-      sha256 = "694e3b27b2b804b0f0154921400678f9a2026bd13286bdc4ddadb131a4cf9a71";
+      sha256 = "9b77c642bff76d8d98a42d0cd20d2d655497719900bd471d041125e67da6bda2";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/hu/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/hu/thunderbird-140.7.1esr.tar.xz";
       locale = "hu";
       arch = "linux-x86_64";
-      sha256 = "62a2ca86dcb94bacd584fc4aab882e7563b57a0cc460a9b4597055d1e2ac9bb7";
+      sha256 = "33950744e99e11775eeeb303ed243dc1fd6a56ce76222ca0fb6057afac6ec368";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/hy-AM/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/hy-AM/thunderbird-140.7.1esr.tar.xz";
       locale = "hy-AM";
       arch = "linux-x86_64";
-      sha256 = "491f104af472246cc2137ede735cd2e5667d4874f87cb6ca588bcc92349083af";
+      sha256 = "657c6167cf2fec5dac4b80e27410ca5e7c1d46f8ee975de186712dbf69487f2f";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/id/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/id/thunderbird-140.7.1esr.tar.xz";
       locale = "id";
       arch = "linux-x86_64";
-      sha256 = "34da3466e3dd3abf9106e787b72bd4d116e961345ae976d0af3b57d3b46afba3";
+      sha256 = "f57591c6b6f228b02a68469545bed0e9d489a231cf45d60ced042b287851e365";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/is/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/is/thunderbird-140.7.1esr.tar.xz";
       locale = "is";
       arch = "linux-x86_64";
-      sha256 = "c317d2d402c3ae784be5d02ffc538367721ea66ab20c57eb2094841bfbb727a2";
+      sha256 = "afd67151da9dbb1568999f3a0e576273950eca6f820e1bdfef715560efdd0a4b";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/it/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/it/thunderbird-140.7.1esr.tar.xz";
       locale = "it";
       arch = "linux-x86_64";
-      sha256 = "28a962ef05b1a544c2a73204309d4539e02b183c72fbdffdff4c7ee5ccde0906";
+      sha256 = "0a7f1657b61541c6b67a4953e0654b67241cadcf4258c6df5460668cc1086a62";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/ja/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/ja/thunderbird-140.7.1esr.tar.xz";
       locale = "ja";
       arch = "linux-x86_64";
-      sha256 = "242a80ed14bccc21f05517bd80cc0ce9268fdd6cad194b792ab2480bbe7f45d9";
+      sha256 = "ffdcf569033285c0240fb339913947b65ad0e3692fa10c717b7ca8c039848c6e";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/ka/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/ka/thunderbird-140.7.1esr.tar.xz";
       locale = "ka";
       arch = "linux-x86_64";
-      sha256 = "f7c738de48ad555c2e604b4dd6645e5ed13b89f9dcd2f871b973b8284e14d25c";
+      sha256 = "e6e01244a2db4ed4c3dc9b6d2ac23b4b604b0f6f93286db73ae8e423e94f2602";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/kab/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/kab/thunderbird-140.7.1esr.tar.xz";
       locale = "kab";
       arch = "linux-x86_64";
-      sha256 = "668bab4102650bb9e6e9751d0c195e935bafa0a2248dc8783a7333d7bd015661";
+      sha256 = "d19b11a1342473e64bad99e37c406fa0fdafe3c9d2b7839f9f0be58c1fb6f2e3";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/kk/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/kk/thunderbird-140.7.1esr.tar.xz";
       locale = "kk";
       arch = "linux-x86_64";
-      sha256 = "88670b046f56cec94357209f74b4b465d211ddd8cade25117bdb2b6b1e03c753";
+      sha256 = "373a35ee62eef078a0dcbccbf54650010201df5417e607f54093ed1422fbcedb";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/ko/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/ko/thunderbird-140.7.1esr.tar.xz";
       locale = "ko";
       arch = "linux-x86_64";
-      sha256 = "23d1610956441422fc2c198a5cbd62cad0428c7e00435148ea416bd8e8e80cdc";
+      sha256 = "51187b64f63c1c07238f4e130ccf64fab1a11c6514ef247bed17a398724b6822";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/lt/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/lt/thunderbird-140.7.1esr.tar.xz";
       locale = "lt";
       arch = "linux-x86_64";
-      sha256 = "48f6a47db29a472ae1ef359f7f4f343bf05247dd1933343cca74fe469e1e3f14";
+      sha256 = "28ae9e88a8cb34c8032386e47b1d8d606845e16a0824fe30d2ff0d7e6dad0d87";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/lv/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/lv/thunderbird-140.7.1esr.tar.xz";
       locale = "lv";
       arch = "linux-x86_64";
-      sha256 = "d17ef85d3f211617e70d794c9421da4f592b0a3c26abb1da86659dd022107914";
+      sha256 = "5d803d462b439483cf8a2e58ab423a700032135a869dfb89848c586d447322c3";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/ms/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/ms/thunderbird-140.7.1esr.tar.xz";
       locale = "ms";
       arch = "linux-x86_64";
-      sha256 = "0eb0527c03012338f6b6e7a1b37580b857863d86d804e21a354d7c0bee1bf9ab";
+      sha256 = "9291cb1c7cbd951c3105a5c3dc49a2e2b4b3acf0a3b0239d0106b4d9b6e03e8d";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/nb-NO/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/nb-NO/thunderbird-140.7.1esr.tar.xz";
       locale = "nb-NO";
       arch = "linux-x86_64";
-      sha256 = "657eb9f3a402249bb5d4fcadd4dd18410cffe34b23fe7d8f44425714c5bfa10c";
+      sha256 = "8daecbe961ae7091a18f224512319a5e5bbd3aa1fe80d0c72bfb3f46b49327b1";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/nl/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/nl/thunderbird-140.7.1esr.tar.xz";
       locale = "nl";
       arch = "linux-x86_64";
-      sha256 = "c0ef6b4f001282ad62aa426e7b13007d9d3e8bd870b2eea7a00d54dd66761a38";
+      sha256 = "1796f18da45ee925d5d24e20990d0517eb250fb009c85ced7479480e29dd224f";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/nn-NO/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/nn-NO/thunderbird-140.7.1esr.tar.xz";
       locale = "nn-NO";
       arch = "linux-x86_64";
-      sha256 = "9896ca4f1e388857529ebe8799ee671cdbca1c0d2e6b1714ddf342ebe086e76b";
+      sha256 = "22fe200430f9f63b82f5aa1529e28309a3fb8df305cfe85a7d4592cee3dbdef8";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/pa-IN/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/pa-IN/thunderbird-140.7.1esr.tar.xz";
       locale = "pa-IN";
       arch = "linux-x86_64";
-      sha256 = "75c19ce9bf6045225e3cae6fa1e567257d5d951b49e28a2f1cdeec3474a948f1";
+      sha256 = "55b1a622f7711f22993ed9196eb8888b58c8b14746452332cc005de08ed798db";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/pl/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/pl/thunderbird-140.7.1esr.tar.xz";
       locale = "pl";
       arch = "linux-x86_64";
-      sha256 = "cfe3b8ccb08dbdaaa535eeef14c1b72a31e58fd0e5bf95a0641ae294e1739312";
+      sha256 = "9894ae922d592709b223ba0f907966af756e226cfd1211a68103135cba9ab860";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/pt-BR/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/pt-BR/thunderbird-140.7.1esr.tar.xz";
       locale = "pt-BR";
       arch = "linux-x86_64";
-      sha256 = "64e1902191f56ed52452c8f2ad7f44fd55ffc5fac9736545853e3a4d36139b21";
+      sha256 = "aeb9cecca149d68c58140cb66532701a352cc0b64fbc9e7c5d427ccdf0cb9eab";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/pt-PT/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/pt-PT/thunderbird-140.7.1esr.tar.xz";
       locale = "pt-PT";
       arch = "linux-x86_64";
-      sha256 = "728404ba1f8a66b30b5817d0898c54b45aa364cb8284077771c86d5d8749a770";
+      sha256 = "89f7f5f1425b49f37c01fbbbe277de3730bed69e587b17ff8969e27b430d9ea6";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/rm/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/rm/thunderbird-140.7.1esr.tar.xz";
       locale = "rm";
       arch = "linux-x86_64";
-      sha256 = "48fe75e1e7bf35e83fb858e3c1716ebda76125c0419dec4086123d56a0bbb41b";
+      sha256 = "687d09ce9b1896e5ee4b3369c607f4a929fce7ba10c555711c9f6e9638d76960";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/ro/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/ro/thunderbird-140.7.1esr.tar.xz";
       locale = "ro";
       arch = "linux-x86_64";
-      sha256 = "ee9ca50e7829b67f856fb2c19872f15b7b606a0bf4eecc3e9e53a83cc23c339a";
+      sha256 = "48f263eee3e58456faae628963dcc552964dba9b699d7760f52f55fec8205dbb";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/ru/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/ru/thunderbird-140.7.1esr.tar.xz";
       locale = "ru";
       arch = "linux-x86_64";
-      sha256 = "36dc643b23b6f8c3ca1305bb7db822efe7bc7fa105eb1b5e15f03033a27820b2";
+      sha256 = "823258dbaf6ae5c7f0341e6ae7a466c8b6317fbf705445fcc37490e493c11c92";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/sk/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/sk/thunderbird-140.7.1esr.tar.xz";
       locale = "sk";
       arch = "linux-x86_64";
-      sha256 = "1ce05baa08d634dce48a32060847675932e43caf4012aa56f07e7772aafe235f";
+      sha256 = "1770eac1424b8947d83bd2b7c6f40e025edd46b83380f47aabc4f576dc9eef6e";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/sl/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/sl/thunderbird-140.7.1esr.tar.xz";
       locale = "sl";
       arch = "linux-x86_64";
-      sha256 = "9a2ee37721296c5514f094d0d0598a74596c5ca5aec9b5dd76d434b9a1580277";
+      sha256 = "a76b6a79c3e096d58e6a2470939cfa6ddbebba14a9fbc882c9937dd75fd27082";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/sq/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/sq/thunderbird-140.7.1esr.tar.xz";
       locale = "sq";
       arch = "linux-x86_64";
-      sha256 = "6968db8367cfe57ec0e4c8ca7f382b8159df452c4e909744be09f611413ff2b1";
+      sha256 = "78a9560247a79521711abad8e070fbacc72e8e210d90211a79ee08cdad532f28";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/sr/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/sr/thunderbird-140.7.1esr.tar.xz";
       locale = "sr";
       arch = "linux-x86_64";
-      sha256 = "dbde2ce16e64def6b5921e88bdcc4429de5e50937afb29e31c7c365990dd8f81";
+      sha256 = "79b7eddb1c1d8f0ad19b4fac0af8a4f30de201475a52451790769ee2162f08bf";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/sv-SE/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/sv-SE/thunderbird-140.7.1esr.tar.xz";
       locale = "sv-SE";
       arch = "linux-x86_64";
-      sha256 = "da12704f82b88b22ed088129bd5873f16adaa87544e58205a2dbf95b650f936b";
+      sha256 = "eebabdbf022e3644357d1bceb90b5b1199728f3991aaea3a23c30054d96ccecb";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/th/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/th/thunderbird-140.7.1esr.tar.xz";
       locale = "th";
       arch = "linux-x86_64";
-      sha256 = "44513a6a3bcd27f94f0d0b0fe6b0997145a89f6133809ef7756944cca4167e33";
+      sha256 = "e1effd639dace7d05ce6577077bdbf1201c26634b2b56592704d8f76aa8d9d9a";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/tr/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/tr/thunderbird-140.7.1esr.tar.xz";
       locale = "tr";
       arch = "linux-x86_64";
-      sha256 = "e4e1d74eaa3fe07e0e8af81578962242f197825539938ab16c75312285a0425b";
+      sha256 = "662a9972da39227d8ed8d664633385fab03e96b28c841bf495a51b4be82ab884";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/uk/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/uk/thunderbird-140.7.1esr.tar.xz";
       locale = "uk";
       arch = "linux-x86_64";
-      sha256 = "a70eb5fdc6c4b916c7419ac6b1be991a672555cddb3c1c1a2f624b82b992c0f5";
+      sha256 = "9b8036e3ff59abd78533ba7b59f16a5bfb232e567b293ef1c3eee8d772ef47e8";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/uz/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/uz/thunderbird-140.7.1esr.tar.xz";
       locale = "uz";
       arch = "linux-x86_64";
-      sha256 = "31f68be0a2747c6ba66e4b1cef7aea9ca212565e1513f4e6d1046b7f57a6d94b";
+      sha256 = "feda8cfa74fc9a435fc68bede9e70028d1cea77a43ed7588c3a6ffbfce22f614";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/vi/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/vi/thunderbird-140.7.1esr.tar.xz";
       locale = "vi";
       arch = "linux-x86_64";
-      sha256 = "4a16152601a279c07d331cc0c3708d040c40167d472cb2e6d14b824e0fbe3b35";
+      sha256 = "d7898a741bb20869eac084675cb102708804e8597bde42dd4d6668710fbe33ff";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/zh-CN/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/zh-CN/thunderbird-140.7.1esr.tar.xz";
       locale = "zh-CN";
       arch = "linux-x86_64";
-      sha256 = "603bb6ae17b05d5d6ac8e4030a6f7499fd22441d6f3026119ec5edc04e760267";
+      sha256 = "cc817e9992a22fbd58e38e7fe4415e167a4acb4d7f5a48f260ebc22e0eaabbd7";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-x86_64/zh-TW/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-x86_64/zh-TW/thunderbird-140.7.1esr.tar.xz";
       locale = "zh-TW";
       arch = "linux-x86_64";
-      sha256 = "e17b15dc29757616b3fc7ce5eeacea98ac25739806e78ea21217f519aa8688ca";
+      sha256 = "362c7b898c52c7c7b3fe8a8d1a6ccbc3a3d207d57d94268cc0c0b6aa61bb0b57";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/af/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/af/thunderbird-140.7.1esr.tar.xz";
       locale = "af";
       arch = "linux-i686";
-      sha256 = "822c69a89910898f432a9848b0cfdf3084187dde044eb17ec3b56ff6e24846bb";
+      sha256 = "5299d8b602892f133d39b638c07431821a68f87f4feec5df104a1f231de71ff1";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/ar/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/ar/thunderbird-140.7.1esr.tar.xz";
       locale = "ar";
       arch = "linux-i686";
-      sha256 = "52b061aa68399ba4fad2789bcf284e74058bdeefde2f49d64c846d0e0c4b0faa";
+      sha256 = "16db793bcec6b1348943b4526d718189d84566106a95b99f89ec269f6497f626";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/ast/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/ast/thunderbird-140.7.1esr.tar.xz";
       locale = "ast";
       arch = "linux-i686";
-      sha256 = "51bc63cda2a8bf646a876bd36be3ddfa3fc8b1005375cb4c3224d59de25aeacd";
+      sha256 = "e1dc3eefd77408e8e4c1bab0d6d6bf6a8a0290520ad259e6fd7a1a76ded17865";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/be/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/be/thunderbird-140.7.1esr.tar.xz";
       locale = "be";
       arch = "linux-i686";
-      sha256 = "01e65d9028f5a38c4783346c572a49b902c37aac7dbeeb952f5560e6da6c8852";
+      sha256 = "78e12295c3e1c66cf3759459b27467d2f0fc7107ecdf255b133b550526af29ae";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/bg/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/bg/thunderbird-140.7.1esr.tar.xz";
       locale = "bg";
       arch = "linux-i686";
-      sha256 = "75e0e486b30a529752c5fb452a691dca675c479ce3a82fbfc3414715cecceeeb";
+      sha256 = "c94d4217a282dc6106bc4318560c1a2c52d143e8a8365f984a4204f742a7bddb";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/br/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/br/thunderbird-140.7.1esr.tar.xz";
       locale = "br";
       arch = "linux-i686";
-      sha256 = "848ec3721ba5a91a56da6a76ea69b3007411e13e3cdf98d5290b27eccde0400f";
+      sha256 = "1ec9e9c90616cd043b562f894f75b99c6931ad68526117871ee4788bcb5c2d43";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/ca/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/ca/thunderbird-140.7.1esr.tar.xz";
       locale = "ca";
       arch = "linux-i686";
-      sha256 = "f401e3cc20280e15245e86f4ca1155876294a1815c8eb73e42cb3c843eb0b71a";
+      sha256 = "acd741ad9c1ae07b897b887d40247313a8b85f2a97b85126c8acb000e206c8d5";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/cak/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/cak/thunderbird-140.7.1esr.tar.xz";
       locale = "cak";
       arch = "linux-i686";
-      sha256 = "5cc8492702e08543228c88b2477ce08d334ff850cf8a87ec996513ecb156a78e";
+      sha256 = "4b231b7575f544d25faf6a4faa53ec0b2217c852211f652bf9994872bbe3daa8";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/cs/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/cs/thunderbird-140.7.1esr.tar.xz";
       locale = "cs";
       arch = "linux-i686";
-      sha256 = "630364a618b611cf9c7adaaf418474b6be2dd8b245ece64c0d19ba7629840dc4";
+      sha256 = "9fb9f17599513f76ac0a3a7a7c07c5a896c7cb1ba808b8612f02b7e8aedd6d9a";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/cy/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/cy/thunderbird-140.7.1esr.tar.xz";
       locale = "cy";
       arch = "linux-i686";
-      sha256 = "27062331fa929942981d67d19dd985a75d93b1774fe80533b280b650f19147e1";
+      sha256 = "99a0eb5a9ffe3ba9514fb48ce48d7790cee7be0594cf2e5e460276b99a7cca00";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/da/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/da/thunderbird-140.7.1esr.tar.xz";
       locale = "da";
       arch = "linux-i686";
-      sha256 = "2784175788f9155c903ea3bdd3170b93564f662cdecfc4fa00921bc968ab347a";
+      sha256 = "f375f1cb9a86b9de8683936c76ae7737b5991e06d9a48dd0041eaa8b65400e59";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/de/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/de/thunderbird-140.7.1esr.tar.xz";
       locale = "de";
       arch = "linux-i686";
-      sha256 = "6277429ab09c1a3484b7232d84f2fd0f8e8d5be10fe38be658f22671ac9f4b21";
+      sha256 = "8c6b4daa3313e59484889409e92b93c1784a7127c4a1b70a597884e9c2351202";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/dsb/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/dsb/thunderbird-140.7.1esr.tar.xz";
       locale = "dsb";
       arch = "linux-i686";
-      sha256 = "cdc7acf83ad6406386170fb1a7a07b0d9c22bb7f7bf9121020c88412f1c3a252";
+      sha256 = "fc068af72beb25c9867109f89a53457d1bbcb140f3ae3dd998f46c2f33d3971e";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/el/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/el/thunderbird-140.7.1esr.tar.xz";
       locale = "el";
       arch = "linux-i686";
-      sha256 = "c55fc14a45e04bcaabb8cd2a707a28c0f5a1d5bdd9980911dc0f3a9d37d2955b";
+      sha256 = "d3f8b78811e91a3376bf749f699533e396c0daa6f22a5ef3574ae5c49ec4ab8e";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/en-CA/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/en-CA/thunderbird-140.7.1esr.tar.xz";
       locale = "en-CA";
       arch = "linux-i686";
-      sha256 = "398393d553edd7619e7e8f1f8281205ab2053e29ec8b3a3531c0dfa62b9ef6da";
+      sha256 = "66296374395d3306426f044d7db6bf105c2656cd5d90c72445f3bd2d0a58f6d9";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/en-GB/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/en-GB/thunderbird-140.7.1esr.tar.xz";
       locale = "en-GB";
       arch = "linux-i686";
-      sha256 = "12b2364a3788e9e2f79478492b7ba8195375b6d020e502337e84ac0cf2269ac5";
+      sha256 = "33a137c6b304f60db90d948903e78f44cc046698593514b7a84c2ea25ca7d6f9";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/en-US/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/en-US/thunderbird-140.7.1esr.tar.xz";
       locale = "en-US";
       arch = "linux-i686";
-      sha256 = "74bf2dc5cddb678b3d1439f0fa65bc4ffe09f841f86897d5bbbc6f31dbb50602";
+      sha256 = "2b3b5fd0ece74d27df1e284900bbd78a21cea2e04e1bf7ff5083b35068e42ab9";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/es-AR/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/es-AR/thunderbird-140.7.1esr.tar.xz";
       locale = "es-AR";
       arch = "linux-i686";
-      sha256 = "c17fc2aed9a24bc0009b9d413ac50325d1db33e50d4386b492fed750b41b190e";
+      sha256 = "bc1659a3d0d100da6df8fca124e012491935a05eae232059b95e1659718b1923";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/es-ES/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/es-ES/thunderbird-140.7.1esr.tar.xz";
       locale = "es-ES";
       arch = "linux-i686";
-      sha256 = "dd46e34d1c57e6238a9d1b1d219129837988bb836f758b9fd6cb522fa9d652f6";
+      sha256 = "5e79b692226377986718014547b3c3b845b9e8c1e93e2cd52c39d90bcbc45ac5";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/es-MX/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/es-MX/thunderbird-140.7.1esr.tar.xz";
       locale = "es-MX";
       arch = "linux-i686";
-      sha256 = "12becf1c03f950b35c52f2b45a5e59d38ab8b7bd26b004848f03bce3b6fee9f5";
+      sha256 = "f9a1875250360b2f663cc668aa6d4dd2f90b7fa09c1ab6d57ba215f6e0eaaadd";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/et/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/et/thunderbird-140.7.1esr.tar.xz";
       locale = "et";
       arch = "linux-i686";
-      sha256 = "5f089fca6e9543ccef48fdf9a4a8490d237e48fd2864355e4a67f9a1ab3448f9";
+      sha256 = "b6bc578f03754b19b21decd64c9212a7cb209acfc79f9a310fb690a27e0b1f31";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/eu/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/eu/thunderbird-140.7.1esr.tar.xz";
       locale = "eu";
       arch = "linux-i686";
-      sha256 = "b2d76c345d1d389061dcaddf88d8a1aa9002bfffa5a05de88228fb3803f06c14";
+      sha256 = "718db87f1648d2f411c8cabe5e966803f08fa8ba8a92684823f32a60e0607ae6";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/fi/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/fi/thunderbird-140.7.1esr.tar.xz";
       locale = "fi";
       arch = "linux-i686";
-      sha256 = "313195ef24e77d6a0014886a0ab3501bbfb62d29b3fa0fff28d28ba064e069fa";
+      sha256 = "ea8ba1103bc0819a041928123b01e55e8bfe24910a222f5d56999f01edf15dc4";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/fr/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/fr/thunderbird-140.7.1esr.tar.xz";
       locale = "fr";
       arch = "linux-i686";
-      sha256 = "9e31eff1bfc9d1bbab0ddd5d3be09ca0e9a863c4df39f692fbaa7ec5e7beba04";
+      sha256 = "b17695d870e918c65b103b2d0d485ec3e4daa21c631d7c2236635ec1507fd0f1";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/fy-NL/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/fy-NL/thunderbird-140.7.1esr.tar.xz";
       locale = "fy-NL";
       arch = "linux-i686";
-      sha256 = "62de68747cc03afa1c8f5dbe3f61bcbbbc9e17997aa120330fb0dbd5f9a59587";
+      sha256 = "814514bc983b63ee0d7b5cc9abc3f143c1a784f1fa981f77ba52a9bafd47220a";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/ga-IE/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/ga-IE/thunderbird-140.7.1esr.tar.xz";
       locale = "ga-IE";
       arch = "linux-i686";
-      sha256 = "5aee171be30f73a5eae474d8ba8db9e81ba314e75fd5a998dabfb4e9661a5af3";
+      sha256 = "2a15661bb955f27d5c8f3c45f0726b6c42a8f23a93e3c13253ea3ad1ebe09613";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/gd/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/gd/thunderbird-140.7.1esr.tar.xz";
       locale = "gd";
       arch = "linux-i686";
-      sha256 = "af31945886ced00a3eef1c74748551d8c29fa7f8c1ce6ed9fdb8268a02c3b638";
+      sha256 = "f43c248d24dac3128475d80b66075977cd47b91697dc3efbfe49cd951998b02d";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/gl/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/gl/thunderbird-140.7.1esr.tar.xz";
       locale = "gl";
       arch = "linux-i686";
-      sha256 = "db0fe3d0bde43cb34be9e52ff44d6ae2bce1bf549f7668316ea210084df388a8";
+      sha256 = "3dcc191c7c6c26d6d2bf65cdb271284528d0c7783eb0dfd201f7e2d68169a9e4";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/he/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/he/thunderbird-140.7.1esr.tar.xz";
       locale = "he";
       arch = "linux-i686";
-      sha256 = "10762d372eaf7e30e48560c2414d24d9617f0ce2c7b854056a7299694d7021c7";
+      sha256 = "9a2c10585da93aa061441be7127cf89c00486b9ffd1ece7a8afec40c8c065f00";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/hr/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/hr/thunderbird-140.7.1esr.tar.xz";
       locale = "hr";
       arch = "linux-i686";
-      sha256 = "fe962768b2a886eb51286eef95d6cfe18a26ad87c035322eb8397588b8146061";
+      sha256 = "231cca1fc1033e52dc1305634ae2d0735764dae07c7bf38d4ed7022a4ddcb8af";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/hsb/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/hsb/thunderbird-140.7.1esr.tar.xz";
       locale = "hsb";
       arch = "linux-i686";
-      sha256 = "45612c1afdaf10310abbab19cc72dac14efe698d8ca88178363173a672af67b6";
+      sha256 = "42c464f27487380f23907959fad19e6cb1610f0a16a4aff30c95e6b1bc6a47df";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/hu/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/hu/thunderbird-140.7.1esr.tar.xz";
       locale = "hu";
       arch = "linux-i686";
-      sha256 = "4ad88e32fc2718c59f4096200ba0f247808ac6d8742ba27dd76ea95c5da98f6f";
+      sha256 = "dc83c5954c74ccee86289fa0098c454617bc7ebc88e3c1aca3d9a305fcbbafd6";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/hy-AM/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/hy-AM/thunderbird-140.7.1esr.tar.xz";
       locale = "hy-AM";
       arch = "linux-i686";
-      sha256 = "e18e888a3d67951ea9763684d358871af096ddeec8e9d75c4381ec7e9cb516d1";
+      sha256 = "9bcd5bb2fa3a49da88f5179c7712e82b463fccc0310bca260a9807325d250e60";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/id/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/id/thunderbird-140.7.1esr.tar.xz";
       locale = "id";
       arch = "linux-i686";
-      sha256 = "565baf4f3222906077be3b2eb19b061d0c5a50e9a9e008959ce5ed933e9a3303";
+      sha256 = "b576ad6b6946252b7c11b3e191cafc49ea73350ca4c9aa7e8d8afffafc4c8e04";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/is/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/is/thunderbird-140.7.1esr.tar.xz";
       locale = "is";
       arch = "linux-i686";
-      sha256 = "ee2eff5338df70cddd4fe283c0218a2eacaf986ca8aa901db2d42aafdabda60e";
+      sha256 = "489d825e1c44758b9b3172b4a80b4830057eacba1ec0b61830e7a14a6f64a59a";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/it/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/it/thunderbird-140.7.1esr.tar.xz";
       locale = "it";
       arch = "linux-i686";
-      sha256 = "2297988fa47f82331719bd5daa33cb18e218b34b9163814f7884da5612da9375";
+      sha256 = "5a79087fb9170f40ec518f4a142177859026185e99f13c998f9d74d23e09fc77";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/ja/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/ja/thunderbird-140.7.1esr.tar.xz";
       locale = "ja";
       arch = "linux-i686";
-      sha256 = "052ab55de22f492be1db76f6622f42540d3d85916da3d9a803a030609c9ece86";
+      sha256 = "375f1a48ebc3dfbabb26b9fc163f492a8c8bb8393f9cfcbfb592fe9ad58b6af3";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/ka/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/ka/thunderbird-140.7.1esr.tar.xz";
       locale = "ka";
       arch = "linux-i686";
-      sha256 = "7c07d73f68ffe4b47b047cd5ed8011541ad2def15d56081a98460ce5b993bfc3";
+      sha256 = "7275236d9f380408be391fce840c65cdc966f2d4c1d51d09b8c69c5e59d0904d";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/kab/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/kab/thunderbird-140.7.1esr.tar.xz";
       locale = "kab";
       arch = "linux-i686";
-      sha256 = "efe9fac4da75bc3b065c9d2324afc08dbe394683012823a7b8d2d7036938a933";
+      sha256 = "e4642c2166a2496479bbff72eff36647a35e787de5ea7bd66c3ff39454a0bec3";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/kk/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/kk/thunderbird-140.7.1esr.tar.xz";
       locale = "kk";
       arch = "linux-i686";
-      sha256 = "ab5b847b174d3c3c8704de972d9d3ae34ecf90c3d606029fde2aee8aa4b45d79";
+      sha256 = "9db23d6c99ed3c4ad2ed864938c3ef5e815f0b860de3dca8341c4e9d74147578";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/ko/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/ko/thunderbird-140.7.1esr.tar.xz";
       locale = "ko";
       arch = "linux-i686";
-      sha256 = "4399e993a6ae2d2052140c0c5cc9b1b35159e1097806f26cb16a77adb7fafe18";
+      sha256 = "0cc207d7e6d4f667d75cbe7eb00b647248019e4d8cd5d9fe07e86d807f734dd4";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/lt/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/lt/thunderbird-140.7.1esr.tar.xz";
       locale = "lt";
       arch = "linux-i686";
-      sha256 = "f6cbe8410a9857a8ff8364e11af6aa7af8b77618b76a834d28aaf203fff1fa71";
+      sha256 = "c42feadacff777f115fe5fbe816e473233a220bcd2046b0bb0d10c04c4df8d79";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/lv/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/lv/thunderbird-140.7.1esr.tar.xz";
       locale = "lv";
       arch = "linux-i686";
-      sha256 = "c9400136b5b3aeae978037c9dc2280894fdfe7abdeae14c3d57190fab42e5619";
+      sha256 = "03fea570f2723cf5450b48ef9375ae3cc1a73c4abb2e5bc9e62141a99cab32ba";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/ms/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/ms/thunderbird-140.7.1esr.tar.xz";
       locale = "ms";
       arch = "linux-i686";
-      sha256 = "19dd27c589838b98ff93cd13d46b6001a238a754528d63e8f5873dfe2daa63ec";
+      sha256 = "dd4c9ece5dcf1da22d8bafdfddca5e167c88c40448232c68e7673e8b9fd576f4";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/nb-NO/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/nb-NO/thunderbird-140.7.1esr.tar.xz";
       locale = "nb-NO";
       arch = "linux-i686";
-      sha256 = "f50eb83f801d8e71ba2b41004d142cd19986e6b0dac82f21428d22c3df34e04e";
+      sha256 = "ad9ab2a3bf9f49cbd0f500d3de2c42b2a14cc51e1161ae2827947f84ce296c8e";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/nl/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/nl/thunderbird-140.7.1esr.tar.xz";
       locale = "nl";
       arch = "linux-i686";
-      sha256 = "23db9c783895b093619698551f1983f8652987fcd90a688abee6f79fa7d6927f";
+      sha256 = "bf4e0fb2c130dd74a6f364aee7bb622f5847bbfd10c02c8e417558032277f5d1";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/nn-NO/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/nn-NO/thunderbird-140.7.1esr.tar.xz";
       locale = "nn-NO";
       arch = "linux-i686";
-      sha256 = "bfbec77aa7d48a6bccf7711b41e22e71e24c1c2942bf318be0f16764b59fb669";
+      sha256 = "14aafe24abbd4ed6c4d5858236ec512a72c4943204798956a7be9973a5baa4c1";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/pa-IN/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/pa-IN/thunderbird-140.7.1esr.tar.xz";
       locale = "pa-IN";
       arch = "linux-i686";
-      sha256 = "80baf0972dee63022764095a9ff21805c6d83fa81e77914cc72500ed1fbe0ccb";
+      sha256 = "f37176fa338b9452dc54aad25054b9fa8356cc396c663fc0aff35ded1b9c9790";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/pl/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/pl/thunderbird-140.7.1esr.tar.xz";
       locale = "pl";
       arch = "linux-i686";
-      sha256 = "8f2e22f56fabe406c819fe9a97691f83c2d4adc6f63110e40f8a6beb01a5a8d9";
+      sha256 = "0252bf2a0900e3dfffc744e5e08302bb137b7511a46aaaaa00d46d2caf473e58";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/pt-BR/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/pt-BR/thunderbird-140.7.1esr.tar.xz";
       locale = "pt-BR";
       arch = "linux-i686";
-      sha256 = "88c98b46459eaefdc8dfbb3eb355d28061f3af7871e6575e710ac96112fe3c59";
+      sha256 = "b5730bf671bee8dd5cb28cef8021821e45d2f34a93ae3ef16c0a7a04be36bb32";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/pt-PT/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/pt-PT/thunderbird-140.7.1esr.tar.xz";
       locale = "pt-PT";
       arch = "linux-i686";
-      sha256 = "39662920f515e3957f5dbd31567662ceb7e94511d8d7ad6494a90291407fe771";
+      sha256 = "f4305abdd1186f0f9858450297726172249a34c8775dda50c93490a142dc90da";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/rm/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/rm/thunderbird-140.7.1esr.tar.xz";
       locale = "rm";
       arch = "linux-i686";
-      sha256 = "502d68cb53b96aecd312b3c62a3a3240794411ee8785e6fc2f8ab752b6b4b80c";
+      sha256 = "e553a425d205a56cbb271f29c052ae8298ef11509bb4337338b58d9901aa778f";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/ro/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/ro/thunderbird-140.7.1esr.tar.xz";
       locale = "ro";
       arch = "linux-i686";
-      sha256 = "d7b37df2cde7b47586b6f51064bcf6afeb4a04e55383e9322889e5f289b7efa4";
+      sha256 = "feae61eb1a0103092c4ef7bf1fc04e201f187e66c74cf56e3acb4d0de88f6ce2";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/ru/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/ru/thunderbird-140.7.1esr.tar.xz";
       locale = "ru";
       arch = "linux-i686";
-      sha256 = "62f19e95d2c7fd0d4cee4ef5a2a606fa9ed5b2fc0bc1ded74ad946d720015d27";
+      sha256 = "7c569aaee50e0578484d9532200b74b54d0d0c705b4b99838ebc60ba7854af90";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/sk/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/sk/thunderbird-140.7.1esr.tar.xz";
       locale = "sk";
       arch = "linux-i686";
-      sha256 = "98d9497491724c3996a8cfa8afa16b155f3b3400257362960ade9920273ffefe";
+      sha256 = "58d9669fd9323a4795343bfb9b7e597f21977a6215b08faabc795247936569aa";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/sl/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/sl/thunderbird-140.7.1esr.tar.xz";
       locale = "sl";
       arch = "linux-i686";
-      sha256 = "fdaa1319a61b0eefe8cc1a270248147cc52bb1e7684bfe5121a6b86191b76474";
+      sha256 = "46e9f09c02e81b625739701975934169f74742408daf4383df9c3dd410097eed";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/sq/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/sq/thunderbird-140.7.1esr.tar.xz";
       locale = "sq";
       arch = "linux-i686";
-      sha256 = "d7050fe31e584ec494ddb5aa371777032b427c88a27ce107359334583ee2c976";
+      sha256 = "ca45d3339dcebedcb62192b1052a1ec7a33f1aa4c8d4e6b73c1586f26c748825";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/sr/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/sr/thunderbird-140.7.1esr.tar.xz";
       locale = "sr";
       arch = "linux-i686";
-      sha256 = "bb13d92dfa6a8c4dd881636720a46d22fc518c8537cdccfd14fab624c5fa50fc";
+      sha256 = "46493950559c46c0541a4389cfff9325ec134a8d53d40a7cca320a359d31979e";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/sv-SE/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/sv-SE/thunderbird-140.7.1esr.tar.xz";
       locale = "sv-SE";
       arch = "linux-i686";
-      sha256 = "b5e44e12b7a5acd7ead96ff14085248c5430355704ce62c56f6f5ddfbc5b9e10";
+      sha256 = "c51331b989284b571903d2cd87cd2b83559bd543cfbf84d52d3209b962303436";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/th/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/th/thunderbird-140.7.1esr.tar.xz";
       locale = "th";
       arch = "linux-i686";
-      sha256 = "fbb135121b102b61fd74b8ccaf9fd4d970f73dec23c11fa803b515ee8e27fb17";
+      sha256 = "141bd30794fd27fd83c37e3305cc3d8c96dc1ef4ca192c580f52a7ce77a79fcb";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/tr/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/tr/thunderbird-140.7.1esr.tar.xz";
       locale = "tr";
       arch = "linux-i686";
-      sha256 = "a22615ed56a21c78cace5225f7a5c3136fb04884af3d49830677cd0c90b01197";
+      sha256 = "37d6bf21a8633a8d536a9dbd62e4b8408b822061f29aaf545581ad280224e504";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/uk/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/uk/thunderbird-140.7.1esr.tar.xz";
       locale = "uk";
       arch = "linux-i686";
-      sha256 = "4168f8614c97c54bedddd87ccfb720fd8701f4cc40bd9ed630102ff9274da371";
+      sha256 = "47bacc18fc24db53a346fcf60a46ffdf10ebd606080dbbf46f817ae37aae1b89";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/uz/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/uz/thunderbird-140.7.1esr.tar.xz";
       locale = "uz";
       arch = "linux-i686";
-      sha256 = "7708d21f6ad1e86136d4abdb7648c733c0fba95b9737cd9b91c9a125dc601919";
+      sha256 = "435232c916a9baa276cdd1a6791dd058d5c923cfdcfd3183ed58af63892fae21";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/vi/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/vi/thunderbird-140.7.1esr.tar.xz";
       locale = "vi";
       arch = "linux-i686";
-      sha256 = "cc45c165bf9de18c0b926748fe8bbb646991418b1d1edda2374ce7e7d2db3d6a";
+      sha256 = "98e19487ca27ac0a3dd57a444461738d67c9875bed4269d289bd825c78b62218";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/zh-CN/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/zh-CN/thunderbird-140.7.1esr.tar.xz";
       locale = "zh-CN";
       arch = "linux-i686";
-      sha256 = "983f64c911836bed5e7acfc97938269ec18d9680bce601c473452ff001f4ef1a";
+      sha256 = "c42ed125eb1d3353c1ef04344179f06175362402d85ef93dd7b7f54cf34f9b73";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/linux-i686/zh-TW/thunderbird-140.7.0esr.tar.xz";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/linux-i686/zh-TW/thunderbird-140.7.1esr.tar.xz";
       locale = "zh-TW";
       arch = "linux-i686";
-      sha256 = "0f06f391d7bd2c995fd9d62482f8542251fab1ecc2111b6261d5498ddec38c7c";
+      sha256 = "1454bf0dbbea965edb3c20d9bcc7f033fe832b7ae38707cff5bcb29e85839d33";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/af/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/af/Thunderbird%20140.7.1esr.dmg";
       locale = "af";
       arch = "mac";
-      sha256 = "4738b70c1f46f0a4b22d01d653ffb7285b0f39ebe89cdf0988f6a6cf8668d3f7";
+      sha256 = "13cfd4606aa42f1824b432c79a00715702a8a4dcbf20e6dc3f8f792e96a76134";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/ar/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/ar/Thunderbird%20140.7.1esr.dmg";
       locale = "ar";
       arch = "mac";
-      sha256 = "e5708fba1bc74e2f74d566f81015343f095d16223f1ba591c61d72dd9ad7f661";
+      sha256 = "5bdf90d9dc8339957424b06af5aba8dd13d036ac13f54d64815be22793a3a011";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/ast/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/ast/Thunderbird%20140.7.1esr.dmg";
       locale = "ast";
       arch = "mac";
-      sha256 = "e4add9065e5fa34840008e9ffbd4cf0439a563e088f8c85fd0a4cd75d3031410";
+      sha256 = "8aeed54bac4a71cd306d3259b6fe3105008aa0dc8c28e3607e7cab0b9e690441";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/be/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/be/Thunderbird%20140.7.1esr.dmg";
       locale = "be";
       arch = "mac";
-      sha256 = "279b61626608efe0d9063b79d6a9869b16dcbcaf7761c7258c504917aa6e58cc";
+      sha256 = "784ea4d03310b97583d4ecf15fec3ff2da715fe58f7aa55021b8ce34af175f5a";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/bg/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/bg/Thunderbird%20140.7.1esr.dmg";
       locale = "bg";
       arch = "mac";
-      sha256 = "309673fd255285ef9664f1aa70354d6f9a9a1e7a4a1a575022482ca8a3771c56";
+      sha256 = "7f5bd8a778c337ae67635264960d8934c2202292eb6e4e566f0878d3b9732cf9";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/br/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/br/Thunderbird%20140.7.1esr.dmg";
       locale = "br";
       arch = "mac";
-      sha256 = "da8170da0befdb18c7f704d2a459d16b6e1d25e38ca52bd745c2a4aaa39cc31a";
+      sha256 = "10a070fe1fc664f16b37fa59b10c49a3406895bb7b3b30951d92120b1fba146d";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/ca/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/ca/Thunderbird%20140.7.1esr.dmg";
       locale = "ca";
       arch = "mac";
-      sha256 = "e78a7ec74478ae6507d12feb04fbbc1415d21fdeea5ed093c5850680d91569ca";
+      sha256 = "b6dbe9fee9c5ebfa954809c71da2ed26480040cf6b2aabb1983d0fe747f83645";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/cak/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/cak/Thunderbird%20140.7.1esr.dmg";
       locale = "cak";
       arch = "mac";
-      sha256 = "75ea84f0049add2ef785a37c72dfcff46e5f06f7e4605faaee5ed2846b6ff42d";
+      sha256 = "494b0b719a8f1c009e42011722edbb31224f02bb59c42d718cc76c2af90d91a4";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/cs/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/cs/Thunderbird%20140.7.1esr.dmg";
       locale = "cs";
       arch = "mac";
-      sha256 = "1a62c021158c2eb593a95eb9b91419802226e6a2b37ebd78522fc68adc851ace";
+      sha256 = "41d4fe58699cf6a6224b655b1a75800659ee198fc362ccbd3ecf01e4ad3316b7";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/cy/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/cy/Thunderbird%20140.7.1esr.dmg";
       locale = "cy";
       arch = "mac";
-      sha256 = "09e7631b5d4712be022da95e6214150caa664b22b40a38e13078709a0db0f276";
+      sha256 = "57f1f289716e2824007b6dfde088fa3e4d1910cd94ade1d1dbbe5a1eb6ecbd4b";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/da/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/da/Thunderbird%20140.7.1esr.dmg";
       locale = "da";
       arch = "mac";
-      sha256 = "2d4c3d1ed7b7c161ec0bd83abdc1db6212d198cfd07f24f01b7804bbb4a83038";
+      sha256 = "285b6ab82b4b24fa4c101ca4848bf017cd72e880df91bfae2816b1ec435d4207";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/de/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/de/Thunderbird%20140.7.1esr.dmg";
       locale = "de";
       arch = "mac";
-      sha256 = "2440b59809907cc7c99057faa55d80db70db066d230eb688fe9803352cbaaab9";
+      sha256 = "6d133410df3e7b8bc6e1b9821bd7703d2c569c4b8caf83cca8062c86d3e6a74c";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/dsb/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/dsb/Thunderbird%20140.7.1esr.dmg";
       locale = "dsb";
       arch = "mac";
-      sha256 = "f2fc5d07b4e4fb973e5dafa400b871669c41664eaf17293917370110f9b377db";
+      sha256 = "004dfaecaaeef54f615d45cc7dc911ac00b44a9ecc580c5d4cf6874eba2928bd";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/el/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/el/Thunderbird%20140.7.1esr.dmg";
       locale = "el";
       arch = "mac";
-      sha256 = "dad9078640fffab50cd16b52a9f1ea870be95074917668735a09e393e1072cf2";
+      sha256 = "c71728843a70d05c56e97742e02e1f74c5f12fee8aeee1c08c99b8fa1a144d8d";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/en-CA/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/en-CA/Thunderbird%20140.7.1esr.dmg";
       locale = "en-CA";
       arch = "mac";
-      sha256 = "da1d899afa7240eaa0456de3d0ede875ee92305fb01acc44443e0ff9a9e265ba";
+      sha256 = "525923bbab917b56425128b00e9f4ebea20ef545166c04b7ff5da1a6fe2c56a2";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/en-GB/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/en-GB/Thunderbird%20140.7.1esr.dmg";
       locale = "en-GB";
       arch = "mac";
-      sha256 = "8b5be1b633bebce021d74d19f2c05f8f5f0bf1d14045dc701e17d5a9b801beca";
+      sha256 = "41ee880b4e1d7908d3a5cd462fb81c15639a11defad0a6547d7b0a453146237e";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/en-US/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/en-US/Thunderbird%20140.7.1esr.dmg";
       locale = "en-US";
       arch = "mac";
-      sha256 = "ae0a44269aa5522bf34847bb308a75bafde6ab69fc57e45b77989a4c1e01234a";
+      sha256 = "e01fe842446b552a8ac63e5e4eb796b15053a1cbdc58284f75a4f2c533a867df";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/es-AR/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/es-AR/Thunderbird%20140.7.1esr.dmg";
       locale = "es-AR";
       arch = "mac";
-      sha256 = "240eb384ef323443f4afee53c5321ff973573887f4da4bf68b2ee3b933f59989";
+      sha256 = "33de894137fc31419c670160d155e4514294f0cecb3a14731f9df7391786f8cd";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/es-ES/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/es-ES/Thunderbird%20140.7.1esr.dmg";
       locale = "es-ES";
       arch = "mac";
-      sha256 = "25bc4de625616bc54d40497f41655ce4d179608722dd143e39afcce6e438fe2d";
+      sha256 = "49956f9349c15463c8a050f705dd2633c42375c76d16a303327a4894e5a9a878";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/es-MX/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/es-MX/Thunderbird%20140.7.1esr.dmg";
       locale = "es-MX";
       arch = "mac";
-      sha256 = "54767255e9a10d07846c0ec2ea5bec88cb757565d56ab70efae94f5cc9fc36d1";
+      sha256 = "dc394170f751883b25258b4d955728f2142343d18123b8317fcb3ae72b8dcb0e";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/et/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/et/Thunderbird%20140.7.1esr.dmg";
       locale = "et";
       arch = "mac";
-      sha256 = "a52d51ddb61a897fc0a924fa89cf452090b7b69d3bd1df4557be3c4c0315471a";
+      sha256 = "3555405c5dc7c58dea1406902dbd6ff9ed9b7c58f4e6b3136e5169ef7fa67e05";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/eu/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/eu/Thunderbird%20140.7.1esr.dmg";
       locale = "eu";
       arch = "mac";
-      sha256 = "3997ddf70b9b9347eddbbed5d64fc8ebde89a97ce8a8aa77e7ee15125b669468";
+      sha256 = "0fb26d43fe0a0f04316ae3348c8e205074af183f4ef78873d7f0929239df3ab6";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/fi/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/fi/Thunderbird%20140.7.1esr.dmg";
       locale = "fi";
       arch = "mac";
-      sha256 = "9c15c7d63fd6aa0a859d032822c436fe861d1f28f53c7b9f3792494c1ca8803a";
+      sha256 = "2e3a190f4687aecda0e552900128963cf69151e2534d5c9ff2faa40e4ad52fb3";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/fr/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/fr/Thunderbird%20140.7.1esr.dmg";
       locale = "fr";
       arch = "mac";
-      sha256 = "ed85c7feeda4c620443fc4700e607e7005b64d4bda2d139245d59e3048369cbc";
+      sha256 = "3a44b87626a5531c7afe443ae18f5bdec1f9e62f1ae6638032954cda2d18cc1c";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/fy-NL/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/fy-NL/Thunderbird%20140.7.1esr.dmg";
       locale = "fy-NL";
       arch = "mac";
-      sha256 = "6628e917403a545532ab4554fff571a329d321db8bb2f6202b51d8885d681041";
+      sha256 = "54aa26c1bb1a1a657ca44ed474e58bd3c527adc079219272052d524af837ebd6";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/ga-IE/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/ga-IE/Thunderbird%20140.7.1esr.dmg";
       locale = "ga-IE";
       arch = "mac";
-      sha256 = "c085262948e49c90b919329051c693caeabde79cfbb3f8a1a21547a9890fd326";
+      sha256 = "5850be5ff63980251d35826f527d69e37c25121e051455fd6f20c96c6af0b374";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/gd/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/gd/Thunderbird%20140.7.1esr.dmg";
       locale = "gd";
       arch = "mac";
-      sha256 = "3221100abcc73ed8d6e247828ec8da5e4485191c7f197b961e7f1b66f6d10ebf";
+      sha256 = "81190f2e64098ab271c1f6ebc2e6a5697308f24d3de621bbc5203e8c2c70b693";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/gl/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/gl/Thunderbird%20140.7.1esr.dmg";
       locale = "gl";
       arch = "mac";
-      sha256 = "d35dccadc7d0086367c26e0c63b2de06e035484738b1a1d156ac336d4fbb4b48";
+      sha256 = "b23b8fca805ee63cad277b99efc31a6336500c23093692c1c7b4a8bec0f3939f";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/he/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/he/Thunderbird%20140.7.1esr.dmg";
       locale = "he";
       arch = "mac";
-      sha256 = "f0f391a922ebd68602467b84afcf51c8698db34998c3f98c6a02032a0fd34667";
+      sha256 = "654a528ee68420dc8e4cc86e153f90a9d91482ad5d39f7716640e7ff8e1bf1bb";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/hr/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/hr/Thunderbird%20140.7.1esr.dmg";
       locale = "hr";
       arch = "mac";
-      sha256 = "6b20270cdd85ecb4bec2a425aede24094b10d79a11ae9d8d2c3df9ebf8b5e918";
+      sha256 = "c5a5726e9f18a8d2f93e678da56bf74cfb02b58d3f2e3c9b9d91c5e774493ef9";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/hsb/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/hsb/Thunderbird%20140.7.1esr.dmg";
       locale = "hsb";
       arch = "mac";
-      sha256 = "86926e8e86d18249bd1b8492861e31e2f5e11cb76513ba704b43a5f84ed6f0cc";
+      sha256 = "05221f70b8ef5f4a126dddcdc0d3b4ab2480334a6ea0b538f1def0a351d4084b";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/hu/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/hu/Thunderbird%20140.7.1esr.dmg";
       locale = "hu";
       arch = "mac";
-      sha256 = "198383cb6eea51fe5f7f2fe8433217b14e9c883957d3c1cb7c3f1c6be9fefcf9";
+      sha256 = "88b2161fbe3e552939d397d38384382239d0fa7c8d08ebd84615ebc502acb78e";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/hy-AM/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/hy-AM/Thunderbird%20140.7.1esr.dmg";
       locale = "hy-AM";
       arch = "mac";
-      sha256 = "0d8cbe7fe8aac8dfa377a7630fa00ef2007ec8ac9e729487ab0d14992c0c388a";
+      sha256 = "b9802d28f47532ebc1910d13576c4496ff44606474aae023b9ec76a7c852ebd1";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/id/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/id/Thunderbird%20140.7.1esr.dmg";
       locale = "id";
       arch = "mac";
-      sha256 = "e81836785a19a6403ad37fd833620f1d68454fc5ba0ce2af6ea51a281b8518fa";
+      sha256 = "83e36f9177a7c14424f54a1a37de9514276c50e8822097b826128bec5d76cbe2";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/is/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/is/Thunderbird%20140.7.1esr.dmg";
       locale = "is";
       arch = "mac";
-      sha256 = "ab721ddaa84485efd45607f81a854a68cbacd78d2e90cef68b295b613804a3b6";
+      sha256 = "76fd09dfad62c9ce8674a686b990e8c035d566bf718c3274603e0cc6e46d6216";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/it/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/it/Thunderbird%20140.7.1esr.dmg";
       locale = "it";
       arch = "mac";
-      sha256 = "4404e26e0d7646d205e81c0c6c19745e626cd63ce67aadcf0d2b1ab0a97bb768";
+      sha256 = "2e9bf1eab7668a222fed1b71a3ac765d88e8737d76c9e8f0bbb0c43e1e61e19c";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/ja-JP-mac/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/ja-JP-mac/Thunderbird%20140.7.1esr.dmg";
       locale = "ja-JP-mac";
       arch = "mac";
-      sha256 = "d9a85d7d5a27cda8f9aa06e73dc659eedb6f36c0eb49f4cb82d1b1e7cff12812";
+      sha256 = "5bb959a7b7c11cc3282a613a10fecc1774ca3b80b9223b785be45068ef1b8c2c";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/ka/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/ka/Thunderbird%20140.7.1esr.dmg";
       locale = "ka";
       arch = "mac";
-      sha256 = "6c8f311ee031f748fce3f20e91076dedc5c9ecb89ddb3007d4b036db4b1c4d0f";
+      sha256 = "7c9b70f120fdf89fc7ae432dd6f202adc98c87bfd050d844020988eb06904b93";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/kab/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/kab/Thunderbird%20140.7.1esr.dmg";
       locale = "kab";
       arch = "mac";
-      sha256 = "c3b0cb44ba47cdde911093592ae361b90257c288244c42a665a9fbb22cb5e1cb";
+      sha256 = "290645b73f75e0c521bddeda026dd97cb8327faf7ac645884cf8cec81b74bb36";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/kk/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/kk/Thunderbird%20140.7.1esr.dmg";
       locale = "kk";
       arch = "mac";
-      sha256 = "fe985a29a2d4e76851be2028c604fe48afff1736b22d3312907003e45b4e5704";
+      sha256 = "a54fd42f881aedcba2d41e93ef9918d8fb6a0cd3d8b018948173b26715c88785";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/ko/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/ko/Thunderbird%20140.7.1esr.dmg";
       locale = "ko";
       arch = "mac";
-      sha256 = "094b3fd97d0c7fb8ead18cf71b7e06f6be62fc283cb91e553e0ba9a3f5efee5e";
+      sha256 = "b169115cf34deb65bf4a6dd30fb37ade1e185ee72c8f69bcfa6fd2b8a8137203";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/lt/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/lt/Thunderbird%20140.7.1esr.dmg";
       locale = "lt";
       arch = "mac";
-      sha256 = "1cdc98632bbb28515761e0d1ed1f11133f7686f5786075f066f2174d060d8b67";
+      sha256 = "d09270fc1487f21dfda84ea575cb8ebeb9068c32b5e2dfd0a1a8a0ee545e3f2c";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/lv/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/lv/Thunderbird%20140.7.1esr.dmg";
       locale = "lv";
       arch = "mac";
-      sha256 = "231e09dfffe658676af3886b608e1fbddb4d9e7dd0bb2d97076527840675f006";
+      sha256 = "942cd2fbdf7a4d1cefc6f62a306b9ac6ad9c7c9089825c76429074dd9fde19f2";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/ms/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/ms/Thunderbird%20140.7.1esr.dmg";
       locale = "ms";
       arch = "mac";
-      sha256 = "3ac82156ecce0c571d86191a4bf741a9ed0affdc45e8690a3b79018b91e0771f";
+      sha256 = "e2d3094b95d878254c725c297a768d16bf2a1911537305778d3a432d44eb843a";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/nb-NO/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/nb-NO/Thunderbird%20140.7.1esr.dmg";
       locale = "nb-NO";
       arch = "mac";
-      sha256 = "e12508404d36d3484d5cfdde860f35bc86705462f41e89c826c15ee298dbd2a0";
+      sha256 = "f5c8a8724ff2711bf9aca2c3fbaa20d65455b2b2c58ad867220c86e33bc8dda7";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/nl/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/nl/Thunderbird%20140.7.1esr.dmg";
       locale = "nl";
       arch = "mac";
-      sha256 = "e880df0ce3810a29cc62cab07624cc95b4633b99a87c76e9879f7ce09cbac006";
+      sha256 = "36bf2ecef95c9e6f936cb185c6415d018d44d3ac275b17980861315945e76838";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/nn-NO/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/nn-NO/Thunderbird%20140.7.1esr.dmg";
       locale = "nn-NO";
       arch = "mac";
-      sha256 = "217c26b65e002aa036afe468da216f2e5121b7477ecd02b5c0421a8c6fa9cc93";
+      sha256 = "b84d841afa65a8736e616395eb176d7be24d87053b32b0c67ffbeebfa01c8468";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/pa-IN/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/pa-IN/Thunderbird%20140.7.1esr.dmg";
       locale = "pa-IN";
       arch = "mac";
-      sha256 = "2302361fb9e2bb995b07e14313e3c8b0e56a27c96d83b6de6896c5582b440b7d";
+      sha256 = "c767b0df37f0d3ffb98e30d656b434adefd9b1cf4dde31aa8669ff43ebeefde4";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/pl/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/pl/Thunderbird%20140.7.1esr.dmg";
       locale = "pl";
       arch = "mac";
-      sha256 = "689d9aa45552cf4b2fbe350d40d2bb8ce462ad8cefce25355ba868056d4866a4";
+      sha256 = "1b013c67fe917a1b1778bb95ddbbe175600cc72853ddb6faad5b3fda1c5d7bf5";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/pt-BR/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/pt-BR/Thunderbird%20140.7.1esr.dmg";
       locale = "pt-BR";
       arch = "mac";
-      sha256 = "dd59db0e635614c66e3f02e717d2dbe3a0be3467870b8865008c7a9b388a66ac";
+      sha256 = "98b8e90bb8366bad34d382b416e9e7e4b0f321c40312b5430d352b9ec323d98a";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/pt-PT/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/pt-PT/Thunderbird%20140.7.1esr.dmg";
       locale = "pt-PT";
       arch = "mac";
-      sha256 = "f5fca721e391283fdf2e4bc9b2d5a9a232381a7869d879ebd513c12dec052e64";
+      sha256 = "705169557a0ccd02b296524f62a2788e920007f3cbe2d87da9a8adc31a19c8b2";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/rm/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/rm/Thunderbird%20140.7.1esr.dmg";
       locale = "rm";
       arch = "mac";
-      sha256 = "f5641e7a3e33609c3d93e4e4f5226a4456b18b393795f828b21ebf906cdbede3";
+      sha256 = "9c3662d63eddc089a865230044b01ff081ee8dfefc3d78139a0bc99b89854ca4";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/ro/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/ro/Thunderbird%20140.7.1esr.dmg";
       locale = "ro";
       arch = "mac";
-      sha256 = "bf3b2a7efb420506d70be71fd52907df56564d8dad4d0290508d85cb65c121e0";
+      sha256 = "e97f3267e92739519a151ff429f318402a8d5355e9d73a1ba519e7ec0169dbad";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/ru/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/ru/Thunderbird%20140.7.1esr.dmg";
       locale = "ru";
       arch = "mac";
-      sha256 = "f4fc129354a385ef5e462e786c55bd232c8dd404f2ce8ab2dabcbc36c27398a4";
+      sha256 = "c805d6928565cd6f4bd754c165bde5015136c535d7e6a47d57916ab943bdd25a";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/sk/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/sk/Thunderbird%20140.7.1esr.dmg";
       locale = "sk";
       arch = "mac";
-      sha256 = "4686dea89222a4e15f339af6526ff625e27c1ad009d583f1079123411d323fdf";
+      sha256 = "85e47b5846ebd1913abca659ada060bed60f0644fc55c5433f74c877d1c39659";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/sl/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/sl/Thunderbird%20140.7.1esr.dmg";
       locale = "sl";
       arch = "mac";
-      sha256 = "c87f9ca5aaf4735f3354388c56b4d81ad4be1e663c5bbaffb2196b0066e574db";
+      sha256 = "e9226f7a201fabff8c6ae7bbca18d74a3998214c3293d072790a700e70bec605";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/sq/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/sq/Thunderbird%20140.7.1esr.dmg";
       locale = "sq";
       arch = "mac";
-      sha256 = "27563eef62aa0f7e9b1ef128095cb0d0e5e6ce5680fe8ccb2010cbff7c648e28";
+      sha256 = "41abd8ca0ba3ca5a24c76fccaa1f6e1c9b545e3f1062496d2aa498900f1e1dcf";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/sr/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/sr/Thunderbird%20140.7.1esr.dmg";
       locale = "sr";
       arch = "mac";
-      sha256 = "70e6e90998a6ec67de145df11071e764280483a60063377af4db6c52bd48324a";
+      sha256 = "76e0c9eac8ccd4d9f241ce686aa8ca96bb1fed7055484b909b77521e818c6181";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/sv-SE/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/sv-SE/Thunderbird%20140.7.1esr.dmg";
       locale = "sv-SE";
       arch = "mac";
-      sha256 = "86edfe6ff3b2523187d848e9155342b487fafde5844d4bcb64ccf4197dc17d41";
+      sha256 = "51e47141e9b712e8829326d6dfe69b05a9f904cb2c38fb42cc52a9f3bd037d22";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/th/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/th/Thunderbird%20140.7.1esr.dmg";
       locale = "th";
       arch = "mac";
-      sha256 = "c855064e21c7fec3aaa4a4ca6f5941e5c35819e350d339942be7619c836ac5f2";
+      sha256 = "850a3fdfef1d28fc5d33a5f100a6d9faab3630b4d4102e8058467e5fe6641455";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/tr/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/tr/Thunderbird%20140.7.1esr.dmg";
       locale = "tr";
       arch = "mac";
-      sha256 = "19ebb60f119a982b71cf75cd4a3fb6bdb7bbe2b82ff701d01787b98ddcf620a3";
+      sha256 = "21b72fe0c147705e63f6b0458b9dac9e0aeb8d9db388eea4242be9b155745106";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/uk/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/uk/Thunderbird%20140.7.1esr.dmg";
       locale = "uk";
       arch = "mac";
-      sha256 = "ee8d8d40ac26e45f88338217f634dd2214ebce65455db7ce5db9bb29b91d8eec";
+      sha256 = "5d4782e2e50b6d225cace9e18ae007f454b5857ed126a98602ef0fa5a2d22d8c";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/uz/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/uz/Thunderbird%20140.7.1esr.dmg";
       locale = "uz";
       arch = "mac";
-      sha256 = "ee2d098199fe0f04a7f22d034b52ab897725185c40f4fff53c0e7b39f54787ba";
+      sha256 = "033cb8cedca8437273613161c1e65785c7f0dfeedc09ccaea413cd0e7ddebe61";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/vi/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/vi/Thunderbird%20140.7.1esr.dmg";
       locale = "vi";
       arch = "mac";
-      sha256 = "e13f063a557679086ba2573597b266978d2f86bbf01e2a34777b43933eec810c";
+      sha256 = "aa1eea4472b6696e436ed61ab54b1ecf32a5f9135ca2d2c2dfad7984e7f5661b";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/zh-CN/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/zh-CN/Thunderbird%20140.7.1esr.dmg";
       locale = "zh-CN";
       arch = "mac";
-      sha256 = "b36e189482fa4dce75b536ced7a6c4cc4e0dadd62e6a548f4b355fe5c28a27ba";
+      sha256 = "b33b1575854ff14416a73faa26c1948260328d57dd361d08587a53a5fb066018";
     }
     {
-      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.0esr/mac/zh-TW/Thunderbird%20140.7.0esr.dmg";
+      url = "http://archive.mozilla.org/pub/thunderbird/releases/140.7.1esr/mac/zh-TW/Thunderbird%20140.7.1esr.dmg";
       locale = "zh-TW";
       arch = "mac";
-      sha256 = "6f5084393420275b8904b027d77a2c953c0a3a4608d9360b3b4aac1d526d190b";
+      sha256 = "022a0e5281322c7e5547918a8b5450a286e6f22043dcdcbd737789dd470de49b";
     }
   ];
 }
diff --git a/pkgs/applications/office/semantik/default.nix b/pkgs/applications/office/semantik/default.nix
index 5c805344b115..fcaa808c910c 100644
--- a/pkgs/applications/office/semantik/default.nix
+++ b/pkgs/applications/office/semantik/default.nix
@@ -94,7 +94,6 @@ mkDerivation rec {
     description = "Mind-mapping application for KDE";
     license = lib.licenses.mit;
     homepage = "https://waf.io/semantik.html";
-    maintainers = [ lib.maintainers.shamilton ];
     platforms = lib.platforms.linux;
     mainProgram = "semantik";
   };
diff --git a/pkgs/applications/radio/cqrlog/default.nix b/pkgs/applications/radio/cqrlog/default.nix
index ab0b5f9322d3..e17ee3fa221f 100644
--- a/pkgs/applications/radio/cqrlog/default.nix
+++ b/pkgs/applications/radio/cqrlog/default.nix
@@ -104,7 +104,6 @@ stdenv.mkDerivation rec {
     mainProgram = "cqrlog";
     homepage = "https://www.cqrlog.com/";
     license = lib.licenses.gpl2Plus;
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.linux;
   };
 }
diff --git a/pkgs/applications/science/electronics/librepcb/default.nix b/pkgs/applications/science/electronics/librepcb/default.nix
index 8bdb41ff99f7..90b8c759e5c7 100644
--- a/pkgs/applications/science/electronics/librepcb/default.nix
+++ b/pkgs/applications/science/electronics/librepcb/default.nix
@@ -5,7 +5,6 @@
   qtbase,
   qttools,
   qtsvg,
-  qt5compat,
   opencascade-occt,
   libGLU,
   cmake,
@@ -17,13 +16,13 @@
 
 stdenv.mkDerivation rec {
   pname = "librepcb";
-  version = "1.3.0";
+  version = "2.0.0";
 
   src = fetchFromGitHub {
     owner = "librepcb";
     repo = "librepcb";
     rev = version;
-    hash = "sha256-J4y0ikZNuOguN9msmEQzgcY0/REnOEOoDkY/ga+Cfd8=";
+    hash = "sha256-8hMPrpqwGNYXUTJGL/CMSP+Sjv5F6ZTkJHqauuOxwTw=";
     fetchSubmodules = true;
   };
 
@@ -31,30 +30,44 @@ stdenv.mkDerivation rec {
     cmake
     qttools
     qtsvg
-    qt5compat
     wrapQtAppsHook
     opencascade-occt
     libGLU
-    rustPlatform.cargoSetupHook
     cargo
     rustc
   ];
   buildInputs = [ qtbase ];
 
-  cargoDeps = rustPlatform.fetchCargoVendor {
-    inherit src cargoRoot;
+  cargoDeps1 = rustPlatform.fetchCargoVendor {
+    inherit src;
+    cargoRoot = "libs/librepcb/rust-core";
     hash = "sha256-1td3WjxbDq2lX7c0trpYRhO82ChNAG/ZABBRsekYtq4=";
   };
 
-  cargoRoot = "libs/librepcb/rust-core";
+  cargoDeps2 = rustPlatform.fetchCargoVendor {
+    inherit src;
+    cargoRoot = "libs/slint";
+    hash = "sha256-DYcKoaOXYFvAi5VyWdhli73s7qrypeXmzGJNhVzcWtY=";
+  };
 
   postPatch = ''
-    substituteInPlace libs/muparser/CMakeLists.txt \
-      --replace-fail "cmake_minimum_required (VERSION 3.1.0)" "cmake_minimum_required(VERSION 3.10)"
-    substituteInPlace libs/type_safe{/,/external/debug_assert/}CMakeLists.txt \
-      --replace-fail "cmake_minimum_required(VERSION 3.1)" "cmake_minimum_required(VERSION 3.10)"
-    substituteInPlace libs/googletest{/,/googlemock/,/googletest/}CMakeLists.txt \
-      --replace-fail "cmake_minimum_required(VERSION 3.2)" "cmake_minimum_required(VERSION 3.10)"
+    # Set up cargo config for the first Rust library
+    mkdir -p libs/librepcb/rust-core/.cargo
+    cat > libs/librepcb/rust-core/.cargo/config.toml <<EOF
+    [source.crates-io]
+    replace-with = "vendored-sources"
+    [source.vendored-sources]
+    directory = "${cargoDeps1}"
+    EOF
+
+    # Set up cargo config for the second Rust library
+    mkdir -p libs/slint/.cargo
+    cat > libs/slint/.cargo/config.toml <<EOF
+    [source.crates-io]
+    replace-with = "vendored-sources"
+    [source.vendored-sources]
+    directory = "${cargoDeps2}"
+    EOF
   '';
 
   meta = {
diff --git a/pkgs/applications/science/molecular-dynamics/gromacs/default.nix b/pkgs/applications/science/molecular-dynamics/gromacs/default.nix
index d9acc8607a02..0a2b405a884e 100644
--- a/pkgs/applications/science/molecular-dynamics/gromacs/default.nix
+++ b/pkgs/applications/science/molecular-dynamics/gromacs/default.nix
@@ -55,8 +55,8 @@ let
       }
     else
       {
-        version = "2025.4";
-        hash = "sha256-yhdyC0omDrc2SSEen2qUDudUNFISmEQhPDrMsKknpcM=";
+        version = "2026.0";
+        hash = "sha256-Ipcm9DbMUVv9jEqnrzqXsYBy9xtevQsI2vZWVXHi2es=";
       };
 
 in
diff --git a/pkgs/by-name/_8/_86Box/package.nix b/pkgs/by-name/_8/_86Box/package.nix
index 45ad748ab214..0edfd046ead7 100644
--- a/pkgs/by-name/_8/_86Box/package.nix
+++ b/pkgs/by-name/_8/_86Box/package.nix
@@ -2,6 +2,7 @@
   stdenv,
   lib,
   fetchFromGitHub,
+  fetchpatch,
   cmake,
   extra-cmake-modules,
   pkg-config,
@@ -49,7 +50,16 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-n68Ghhsv15TzpOMH4dBTNxa6AYwqN5s2C5pyO9VVaco=";
   };
 
-  patches = [ ./darwin.patch ];
+  patches = [
+    ./darwin.patch
+    # Fix build: Only make the fallthrough define available in C code
+    # https://github.com/86Box/86Box/issues/6607
+    (fetchpatch {
+      name = "fix-fallthrough-define-c-only.patch";
+      url = "https://github.com/86Box/86Box/commit/0092ce15de3efac108b961882f870a8c05e8c38f.patch";
+      hash = "sha256-DqjOtnyk6Zv9XHCLeuxD1wcLfvjGwGFvUWS0alXcchs=";
+    })
+  ];
 
   postPatch = ''
     substituteAllInPlace src/qt/qt_platform.cpp
diff --git a/pkgs/by-name/ad/adrs/package.nix b/pkgs/by-name/ad/adrs/package.nix
index 656718d87898..b6ae93427663 100644
--- a/pkgs/by-name/ad/adrs/package.nix
+++ b/pkgs/by-name/ad/adrs/package.nix
@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "adrs";
-  version = "0.5.0";
+  version = "0.6.1";
 
   src = fetchFromGitHub {
     owner = "joshrotenberg";
     repo = "adrs";
     tag = "v${version}";
-    hash = "sha256-LjuEYOZJzptryjtqmfH5L/BI+9daLPAGSkAkXeE7Z/E=";
+    hash = "sha256-PAvn1yIptyiVG96BNXHPgc5rYEHyCTo42hh88dwxrhA=";
   };
 
-  cargoHash = "sha256-mevUqsqFDfF2dMYSdc0eGxh55W7shLSo8e5NpbDI/Zo=";
+  cargoHash = "sha256-va6s+nbW4vafnt6SqqdaeAF06Q30NEDqFVWDz9mYdAo=";
 
   meta = {
     description = "Command-line tool for managing Architectural Decision Records";
diff --git a/pkgs/by-name/al/aliyunpan/package.nix b/pkgs/by-name/al/aliyunpan/package.nix
new file mode 100644
index 000000000000..56c79d41749e
--- /dev/null
+++ b/pkgs/by-name/al/aliyunpan/package.nix
@@ -0,0 +1,54 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "aliyunpan";
+  version = "0.3.7";
+
+  src = fetchFromGitHub {
+    owner = "tickstep";
+    repo = "aliyunpan";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-9sbAKv2SOZPKnP56vL0rfMEDhTpIV524s9sIvlWAM6o=";
+  };
+
+  vendorHash = "sha256-tNUXB+pU/0gJL3oG9rdk6J+SvO5ASqkuO+gVZiRdaVg=";
+
+  ldflags = [
+    "-s"
+    "-w"
+    "-X main.Version=v${finalAttrs.version}"
+  ];
+
+  # skip test
+  checkFlags =
+    let
+      skippedTests = [
+        # require network access
+        "TestGetQRCodeLoginResult"
+        # depend specific local file
+        "TestBoltUltraFiles"
+        "TestLocalSyncDb"
+        "TestLocalGet"
+      ];
+    in
+    [ "-skip=^${builtins.concatStringsSep "$|^" skippedTests}$" ];
+
+  postInstall = ''
+    mkdir -p "$out/share/doc/aliyunpan"
+    cp README.md "$out/share/doc/aliyunpan/"
+    cp docs/manual.md "$out/share/doc/aliyunpan/"
+    cp docs/plugin_manual.md "$out/share/doc/aliyunpan/"
+  '';
+
+  meta = {
+    description = "Command line client for Aliyun Drive";
+    homepage = "https://github.com/tickstep/aliyunpan";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ xiangpingjiang ];
+    mainProgram = "aliyunpan";
+  };
+})
diff --git a/pkgs/by-name/al/alt-tab-macos/package.nix b/pkgs/by-name/al/alt-tab-macos/package.nix
index 03c6202e9873..7f881e0005d1 100644
--- a/pkgs/by-name/al/alt-tab-macos/package.nix
+++ b/pkgs/by-name/al/alt-tab-macos/package.nix
@@ -8,11 +8,11 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "alt-tab-macos";
-  version = "7.36.0";
+  version = "8.3.3";
 
   src = fetchurl {
     url = "https://github.com/lwouis/alt-tab-macos/releases/download/v${finalAttrs.version}/AltTab-${finalAttrs.version}.zip";
-    hash = "sha256-tKh6Jc8MXUJvmteC+jh2OCC9nfpPzyKZ9SyWwvbzwEM=";
+    hash = "sha256-213AlF4lNg5K4y25rXCBtVoc4w/3m7b8gGi0jFgzqR0=";
   };
 
   sourceRoot = ".";
diff --git a/pkgs/by-name/an/anki/package.nix b/pkgs/by-name/an/anki/package.nix
index 37fd06bb5cdd..bc84f683c235 100644
--- a/pkgs/by-name/an/anki/package.nix
+++ b/pkgs/by-name/an/anki/package.nix
@@ -29,6 +29,7 @@
   swift,
 
   mesa,
+  imagemagick,
 }:
 
 let
@@ -141,6 +142,7 @@ python3Packages.buildPythonApplication rec {
     rustPlatform.cargoSetupHook
     writableTmpDirAsHomeHook
     yarn-berry_4.yarnBerryConfigHook
+    imagemagick
   ]
   ++ lib.optional stdenv.hostPlatform.isDarwin swift;
 
@@ -269,7 +271,10 @@ python3Packages.buildPythonApplication rec {
     install -D -t $out/share/applications qt/launcher/lin/anki.desktop
     install -D -t $doc/share/doc/anki README* LICENSE*
     install -D -t $out/share/mime/packages qt/launcher/lin/anki.xml
-    install -D -t $out/share/pixmaps qt/launcher/lin/anki.{png,xpm}
+
+    mkdir -p $out/share/icons/hicolor/{32x32,128x128}/apps
+    magick qt/launcher/lin/anki.xpm $out/share/icons/hicolor/32x32/apps/anki.png
+    magick qt/launcher/lin/anki.png -resize 128x128 $out/share/icons/hicolor/128x128/apps/anki.png
     installManPage qt/launcher/lin/anki.1
 
     runHook postInstall
diff --git a/pkgs/by-name/ap/apbs/package.nix b/pkgs/by-name/ap/apbs/package.nix
index 19137459d854..4a7a06f18292 100644
--- a/pkgs/by-name/ap/apbs/package.nix
+++ b/pkgs/by-name/ap/apbs/package.nix
@@ -27,6 +27,9 @@ let
       cmake
     ];
 
+    # Required for gcc-15 compatibility
+    env.NIX_CFLAGS_COMPILE = "-std=gnu17";
+
     cmakeFlags = [
       "-DBLAS_LIBRARIES=${blas}/lib"
       "-DBLA_STATIC=OFF"
diff --git a/pkgs/by-name/as/asusctl/package.nix b/pkgs/by-name/as/asusctl/package.nix
index ee0e4555cbfb..c806b5380d8b 100644
--- a/pkgs/by-name/as/asusctl/package.nix
+++ b/pkgs/by-name/as/asusctl/package.nix
@@ -18,16 +18,16 @@
 }:
 rustPlatform.buildRustPackage rec {
   pname = "asusctl";
-  version = "6.3.1";
+  version = "6.3.2";
 
   src = fetchFromGitLab {
     owner = "asus-linux";
     repo = "asusctl";
     tag = version;
-    hash = "sha256-x3WKxjYrWYaLWDi52b3uQSYnr/Qunf6JYu4ikt4ajls=";
+    hash = "sha256-6dZkQ8cPL8dbtvfuc/a5G1BxEaZyNbvy3eRBctFFwVU=";
   };
 
-  cargoHash = "sha256-FyVbeHzwMr8UJ2OoVYVekXJFhus/ab7KwfGK4eaua6A=";
+  cargoHash = "sha256-FlEuv/iaNlfXLhHRSmZedPwroCozaEqIvYRqbgJhgEw=";
 
   postPatch = ''
     files="
diff --git a/pkgs/by-name/az/azurehound/package.nix b/pkgs/by-name/az/azurehound/package.nix
index 4130b103d0f4..27995bf6c9d7 100644
--- a/pkgs/by-name/az/azurehound/package.nix
+++ b/pkgs/by-name/az/azurehound/package.nix
@@ -8,13 +8,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "azurehound";
-  version = "2.8.3";
+  version = "2.9.0";
 
   src = fetchFromGitHub {
     owner = "SpecterOps";
     repo = "AzureHound";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ecLpNIYczim4dLbNwkOtwieJrjoSOXv4KHvSMuMjOw0=";
+    hash = "sha256-E2TMIajzxydNFHhVnOpFVTd2L5gDK9VcIZetcgh0edg=";
   };
 
   vendorHash = "sha256-+iNFWKFNON4HX2mf4O29zAdElEkIGIx55Wi9MRtg1dg=";
diff --git a/pkgs/by-name/ba/babl/package.nix b/pkgs/by-name/ba/babl/package.nix
index 3454630b2dd1..8ef897e1b7c1 100644
--- a/pkgs/by-name/ba/babl/package.nix
+++ b/pkgs/by-name/ba/babl/package.nix
@@ -13,7 +13,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "babl";
-  version = "0.1.120";
+  version = "0.1.122";
 
   outputs = [
     "out"
@@ -23,7 +23,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "https://download.gimp.org/pub/babl/${lib.versions.majorMinor finalAttrs.version}/babl-${finalAttrs.version}.tar.xz";
-    hash = "sha256-9HatFSAftO0MkMF0xSSx5CcczWmjdyQtamn834fOrMI=";
+    hash = "sha256-aFH3Bc2jjy3wikuoYYJ5zjDQpG+Vf+aqMlt7feKXvtI=";
   };
 
   patches = [
diff --git a/pkgs/by-name/ba/bazaar/package.nix b/pkgs/by-name/ba/bazaar/package.nix
index f8ab2293e67b..84bd95d3103d 100644
--- a/pkgs/by-name/ba/bazaar/package.nix
+++ b/pkgs/by-name/ba/bazaar/package.nix
@@ -29,13 +29,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bazaar";
-  version = "0.7.5";
+  version = "0.7.6";
 
   src = fetchFromGitHub {
     owner = "kolunmi";
     repo = "bazaar";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-c6mAWnX0iKXJqOxe/kgUqmXXVKO7ZEI+vKoYLKOuNos=";
+    hash = "sha256-kLCakA3HNzCYZ3yE5rK05qzhZehoQ74xRLMCQ2DzUDU=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/bo/boca/package.nix b/pkgs/by-name/bo/boca/package.nix
index de108025a1f2..08312ed4fa50 100644
--- a/pkgs/by-name/bo/boca/package.nix
+++ b/pkgs/by-name/bo/boca/package.nix
@@ -46,7 +46,6 @@ stdenv.mkDerivation rec {
     description = "Component library used by the fre:ac audio converter";
     license = lib.licenses.gpl2Plus;
     homepage = "https://github.com/enzo1982/boca";
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.linux;
   };
 }
diff --git a/pkgs/by-name/bo/bolt-launcher/package.nix b/pkgs/by-name/bo/bolt-launcher/package.nix
index 8de0713bdda1..c506aaa8801a 100644
--- a/pkgs/by-name/bo/bolt-launcher/package.nix
+++ b/pkgs/by-name/bo/bolt-launcher/package.nix
@@ -164,6 +164,6 @@ buildFHSEnv {
       iedame
     ];
     platforms = lib.platforms.linux;
-    mainProgram = "${bolt.name}";
+    mainProgram = "bolt-launcher";
   };
 }
diff --git a/pkgs/by-name/bo/bottles-unwrapped/package.nix b/pkgs/by-name/bo/bottles-unwrapped/package.nix
index 701bf8943681..fb72353a7063 100644
--- a/pkgs/by-name/bo/bottles-unwrapped/package.nix
+++ b/pkgs/by-name/bo/bottles-unwrapped/package.nix
@@ -131,7 +131,6 @@ python3Packages.buildPythonApplication rec {
     license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [
       psydvl
-      shamilton
       Gliczy
       XBagon
     ];
diff --git a/pkgs/by-name/bs/bstone/package.nix b/pkgs/by-name/bs/bstone/package.nix
index 2cdf9bf99d5b..d60263d4b847 100644
--- a/pkgs/by-name/bs/bstone/package.nix
+++ b/pkgs/by-name/bs/bstone/package.nix
@@ -10,13 +10,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bstone";
-  version = "1.3.2";
+  version = "1.3.3";
 
   src = fetchFromGitHub {
     owner = "bibendovsky";
     repo = "bstone";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-D0f4DmVv2Bo3cwCUuo3LsXNWFR16rirpvSnAS2C6YEY=";
+    hash = "sha256-Svqm8gpZ2TgI2MdJc+gY9O7xCYYNo84/bbbqprBFpcc=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/bt/btdu/dub-lock.json b/pkgs/by-name/bt/btdu/dub-lock.json
index 24c204b95a8f..97205ebc8290 100644
--- a/pkgs/by-name/bt/btdu/dub-lock.json
+++ b/pkgs/by-name/bt/btdu/dub-lock.json
@@ -1,8 +1,8 @@
 {
   "dependencies": {
     "ae": {
-      "version": "0.0.3461",
-      "sha256": "1mk075r3bas8s699y6sc4fxbdyjhc9cm6qxcqqaj0di9ijb71fq1"
+      "version": "0.0.3701",
+      "sha256": "0vf458cvr8mmvjr87g2i6yhn7yyz1cg4lbixf62b9qnszd88j2q2"
     },
     "btrfs": {
       "version": "0.0.21",
diff --git a/pkgs/by-name/bt/btdu/package.nix b/pkgs/by-name/bt/btdu/package.nix
index f9f0acd6fb62..97b700818d79 100644
--- a/pkgs/by-name/bt/btdu/package.nix
+++ b/pkgs/by-name/bt/btdu/package.nix
@@ -8,13 +8,13 @@
 
 buildDubPackage rec {
   pname = "btdu";
-  version = "0.6.0";
+  version = "0.7.2";
 
   src = fetchFromGitHub {
     owner = "CyberShadow";
     repo = "btdu";
     rev = "v${version}";
-    hash = "sha256-B8ojxdXibeNEZay9S5lzpB6bTKNB2ZI6AQ3XKUHioE0=";
+    hash = "sha256-ZZaBaDKfW52w2YWj34gXFruWNBNqjLUFsPCHmrCKT7I=";
   };
 
   dubLock = ./dub-lock.json;
@@ -27,6 +27,8 @@ buildDubPackage rec {
   installPhase = ''
     runHook preInstall
     install -Dm755 btdu -t $out/bin
+    ./btdu --man "" > btdu.1
+    install -Dm644 btdu.1 -t $out/share/man/man1
     runHook postInstall
   '';
 
diff --git a/pkgs/by-name/bu/buildkit/package.nix b/pkgs/by-name/bu/buildkit/package.nix
index 8bda4eef6f89..86fdbfcf4a5d 100644
--- a/pkgs/by-name/bu/buildkit/package.nix
+++ b/pkgs/by-name/bu/buildkit/package.nix
@@ -7,13 +7,13 @@
 
 buildGoModule rec {
   pname = "buildkit";
-  version = "0.27.0";
+  version = "0.27.1";
 
   src = fetchFromGitHub {
     owner = "moby";
     repo = "buildkit";
     rev = "v${version}";
-    hash = "sha256-v2/ODT7uwqirrWG3NrMEKYItjhm6f/IlPogCwJi23Rw=";
+    hash = "sha256-vMSg5bYFkdWrdjexx/3kwyyingS5gqMcw5/JQ4RxDeU=";
   };
 
   vendorHash = null;
diff --git a/pkgs/by-name/bu/bun/package.nix b/pkgs/by-name/bu/bun/package.nix
index 4fd66457f47b..c4bf1f495bce 100644
--- a/pkgs/by-name/bu/bun/package.nix
+++ b/pkgs/by-name/bu/bun/package.nix
@@ -17,7 +17,7 @@
 }:
 
 stdenvNoCC.mkDerivation (finalAttrs: {
-  version = "1.3.7";
+  version = "1.3.8";
   pname = "bun";
 
   src =
@@ -81,19 +81,19 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     sources = {
       "aarch64-darwin" = fetchurl {
         url = "https://github.com/oven-sh/bun/releases/download/bun-v${finalAttrs.version}/bun-darwin-aarch64.zip";
-        hash = "sha256-FnAeSUmY5HZNSa8vvmLSXsWc88ee5pbrod7yz+kEnWQ=";
+        hash = "sha256-ZyoKmnt0TQhaHSIZypB+Pib1V5/Knng6lRCk+Yo2IS8=";
       };
       "aarch64-linux" = fetchurl {
         url = "https://github.com/oven-sh/bun/releases/download/bun-v${finalAttrs.version}/bun-linux-aarch64.zip";
-        hash = "sha256-1cfWUUI8K8WuP5LTaDf/st3G7pGElnJQC3/o5aUVn7w=";
+        hash = "sha256-Tp3raBSn7H9ocl3dl9DXtAZbzamoUPadSXVn6ZWn+jM=";
       };
       "x86_64-darwin" = fetchurl {
         url = "https://github.com/oven-sh/bun/releases/download/bun-v${finalAttrs.version}/bun-darwin-x64-baseline.zip";
-        hash = "sha256-nCwa7m1y6WGVwwUfkSMlBHWVB6qusJPVtw+IaX4ajq8=";
+        hash = "sha256-mBLl9sf4GO+cSR4Fp3SBqy56ShWAs3hSbhYRwQL+fKM=";
       };
       "x86_64-linux" = fetchurl {
         url = "https://github.com/oven-sh/bun/releases/download/bun-v${finalAttrs.version}/bun-linux-x64.zip";
-        hash = "sha256-K9Lg4L3wlIO+Z6cEYHhI6+csKEIIJOTOdyzj2mLCPWU=";
+        hash = "sha256-AyKxfwci2namQpiq1JgiWu3L9t8QCKHe5F4W7LImo/E=";
       };
     };
     updateScript = writeShellScript "update-bun" ''
diff --git a/pkgs/by-name/ca/carapace/package.nix b/pkgs/by-name/ca/carapace/package.nix
index f258f37fe9d3..9af3a34b46b4 100644
--- a/pkgs/by-name/ca/carapace/package.nix
+++ b/pkgs/by-name/ca/carapace/package.nix
@@ -9,16 +9,18 @@
 
 buildGoModule (finalAttrs: {
   pname = "carapace";
-  version = "1.5.5";
+  version = "1.6.0";
 
   src = fetchFromGitHub {
     owner = "carapace-sh";
     repo = "carapace-bin";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-q7G7odkRwh4/w8H09exXYSC7n4CUeoG2iKb/k2D/gek=";
+    hash = "sha256-btExAFj3nnq5vv3LJgUA7pdmQhd6ANUexC/AQcIg0Ms=";
   };
 
-  vendorHash = "sha256-eADiOSLqouH9saTgbbQY18wc3DxCBvqdVKI32I7sTWQ=";
+  vendorHash = "sha256-7Gmt4ZHmYK5IukQYuY0felhW+ul23wSDX9PJyI6rDWQ=";
+
+  proxyVendor = true;
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/ci/cicero-tui/package.nix b/pkgs/by-name/ci/cicero-tui/package.nix
index a98b2312a315..ef1e18b1ea81 100644
--- a/pkgs/by-name/ci/cicero-tui/package.nix
+++ b/pkgs/by-name/ci/cicero-tui/package.nix
@@ -36,7 +36,6 @@ rustPlatform.buildRustPackage rec {
     description = "Unicode tool with a terminal user interface";
     homepage = "https://github.com/eyeplum/cicero-tui";
     license = with lib.licenses; [ gpl3Plus ];
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.linux;
     mainProgram = "cicero";
   };
diff --git a/pkgs/by-name/ci/ciscoPacketTracer7/package.nix b/pkgs/by-name/ci/ciscoPacketTracer7/package.nix
deleted file mode 100644
index 1a571c3d3e94..000000000000
--- a/pkgs/by-name/ci/ciscoPacketTracer7/package.nix
+++ /dev/null
@@ -1,159 +0,0 @@
-{
-  lib,
-  stdenvNoCC,
-  requireFile,
-  autoPatchelfHook,
-  dpkg,
-  makeWrapper,
-  alsa-lib,
-  dbus,
-  expat,
-  fontconfig,
-  glib,
-  libdrm,
-  libglvnd,
-  libpulseaudio,
-  libudev0-shim,
-  libxkbcommon,
-  libxml2_13,
-  libxslt,
-  nspr,
-  nss,
-  libxscrnsaver,
-  libx11,
-  libsm,
-  libice,
-  buildFHSEnv,
-  copyDesktopItems,
-  makeDesktopItem,
-  libsForQt5,
-  packetTracerSource ? null,
-}:
-
-let
-  version = "7.3.1";
-
-  unwrapped = stdenvNoCC.mkDerivation {
-    pname = "ciscoPacketTracer7-unwrapped";
-    inherit version;
-
-    src =
-      if (packetTracerSource != null) then
-        packetTracerSource
-      else
-        requireFile {
-          name = "PacketTracer_731_amd64.deb";
-          hash = "sha256-w5gC0V3WHQC6J/uMEW2kX9hWKrS0mZZVWtZriN6s4n8=";
-          url = "https://www.netacad.com";
-        };
-
-    nativeBuildInputs = [
-      autoPatchelfHook
-      dpkg
-      makeWrapper
-    ];
-
-    buildInputs = [
-      alsa-lib
-      dbus
-      expat
-      fontconfig
-      glib
-      libdrm
-      libglvnd
-      libpulseaudio
-      libudev0-shim
-      libxkbcommon
-      libxml2_13
-      libxslt
-      nspr
-      nss
-      libice
-      libsm
-      libx11
-      libxscrnsaver
-    ];
-
-    unpackPhase = ''
-      runHook preUnpack
-
-      dpkg-deb -x $src $out
-      chmod 755 "$out"
-
-      runHook postUnpack
-    '';
-
-    installPhase = ''
-      runHook preInstall
-
-      makeWrapper "$out/opt/pt/bin/PacketTracer7" "$out/bin/packettracer7" \
-        --set QT_QPA_PLATFORM xcb \
-        --prefix LD_LIBRARY_PATH : "$out/opt/pt/bin"
-
-      runHook postInstall
-    '';
-  };
-
-  fhs-env = buildFHSEnv {
-    name = "ciscoPacketTracer7-fhs-env";
-    runScript = lib.getExe' unwrapped "packettracer7";
-    targetPkgs = _: [ libudev0-shim ];
-  };
-in
-stdenvNoCC.mkDerivation {
-  pname = "ciscoPacketTracer7";
-  inherit version;
-
-  dontUnpack = true;
-
-  nativeBuildInputs = [
-    copyDesktopItems
-  ];
-
-  installPhase = ''
-    runHook preInstall
-
-    mkdir -p $out/bin
-    ln -s ${fhs-env}/bin/${fhs-env.name} $out/bin/packettracer7
-
-    mkdir -p $out/share/icons/hicolor/48x48/apps
-    ln -s ${unwrapped}/opt/pt/art/app.png $out/share/icons/hicolor/48x48/apps/cisco-packet-tracer-7.png
-    ln -s ${unwrapped}/usr/share/icons/gnome/48x48/mimetypes $out/share/icons/hicolor/48x48/mimetypes
-    ln -s ${unwrapped}/usr/share/mime $out/share/mime
-
-    runHook postInstall
-  '';
-
-  desktopItems = [
-    (makeDesktopItem {
-      name = "cisco-pt7.desktop";
-      desktopName = "Cisco Packet Tracer 7";
-      icon = "cisco-packet-tracer-7";
-      exec = "packettracer7 %f";
-      mimeTypes = [
-        "application/x-pkt"
-        "application/x-pka"
-        "application/x-pkz"
-      ];
-    })
-  ];
-
-  meta = {
-    description = "Network simulation tool from Cisco";
-    homepage = "https://www.netacad.com/courses/packet-tracer";
-    license = lib.licenses.unfree;
-    mainProgram = "packettracer7";
-    maintainers = with lib.maintainers; [
-      gepbird
-    ];
-    platforms = [ "x86_64-linux" ];
-    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
-    knownVulnerabilities = [
-      ''
-        Cisco Packet Tracer 7 ships with qt5 qtwebengine.
-
-        ${lib.head libsForQt5.qtwebengine.meta.knownVulnerabilities}
-      ''
-    ];
-  };
-}
diff --git a/pkgs/by-name/cl/clickable/package.nix b/pkgs/by-name/cl/clickable/package.nix
index d0659f21c84d..aaa87abf5c83 100644
--- a/pkgs/by-name/cl/clickable/package.nix
+++ b/pkgs/by-name/cl/clickable/package.nix
@@ -21,6 +21,8 @@ python3Packages.buildPythonApplication rec {
     hash = "sha256-W6NPZ5uP7wGjgyA+Nv2vpmshKWny2CCSrn/Gaoi7Pr4=";
   };
 
+  __structuredAttrs = true;
+
   build-system = [ python3Packages.setuptools ];
 
   dependencies = with python3Packages; [
@@ -39,33 +41,38 @@ python3Packages.buildPythonApplication rec {
     which
   ];
 
-  disabledTests =
-    # Tests require running docker daemon
-    [
-      "test_cpp_plugin"
-      "test_godot_plugin"
-      "test_html"
-      "test_python"
-      "test_qml_only"
-      "test_rust"
-    ]
-    # Tests do not work on non-amd64 platforms
-    ++ lib.optionals (!stdenv.hostPlatform.isx86_64) [
-      # hardcode amd64
-      "test_arch"
-      "test_restricted_arch"
+  disabledTests = [
+    # Requires running docker daemon
+    "TestTemplates"
 
-      # no -ide images on arm64
-      # https://gitlab.com/clickable/clickable/-/issues/478
-      "test_command_overrided"
-      "test_init_cmake_project"
-      "test_init_cmake_project_exe_as_var"
-      "test_init_cmake_project_no_exe"
-      "test_init_cmake_project_no_to_prompt"
-      "test_initialize_qtcreator_conf"
-      "test_project_pre_configured"
-      "test_recurse_replace"
-    ];
+    # Expects /tmp to exist and not be a symlink
+    # https://gitlab.com/clickable/clickable/-/issues/479
+    "TestReviewCommand and test_run and not test_run_with_path_arg"
+  ]
+  ++ lib.optionals (!stdenv.hostPlatform.isx86_64) [
+    # pytest's lack of exact nodeid matching or deselecting makes it impossible to nicely disable just
+    # test_architectures.py::TestArchitectures::test_arch (infix matching makes test_arch match test_architectures.py).
+    # Have to `or` for every other TestArchitectures test and then `not` that.
+    # What we want to disable: test_arch & test_restricted_arch
+    # Reason: they hardcode amd64
+    "TestArchitectures and not (${
+      lib.strings.concatStringsSep " or " [
+        "test_arch_agnostic"
+        "test_default_arch"
+        "test_fail_arch_agnostic"
+        "test_fail_in_restricted_arch"
+        "test_restricted_arch_env"
+      ]
+    })"
+
+    # no -ide images on non-x86_64
+    # https://gitlab.com/clickable/clickable/-/issues/478
+    "TestIdeQtCreatorCommand and test_command_overrided"
+    "TestIdeQtCreatorCommand and test_init_cmake_project"
+    "TestIdeQtCreatorCommand and test_initialize_qtcreator_conf"
+    "TestIdeQtCreatorCommand and test_project_pre_configured"
+    "TestIdeQtCreatorCommand and test_recurse_replace"
+  ];
 
   passthru.updateScript = gitUpdater { rev-prefix = "v"; };
 
diff --git a/pkgs/by-name/cl/clipcat/dummy.patch b/pkgs/by-name/cl/clipcat/dummy.patch
deleted file mode 100644
index 4fdc3d60526a..000000000000
--- a/pkgs/by-name/cl/clipcat/dummy.patch
+++ /dev/null
@@ -1,14 +0,0 @@
-diff --git a/crates/server/src/notification/dummy.rs b/crates/server/src/notification/dummy.rs
-index f85dda0..7489f22 100644
---- a/crates/server/src/notification/dummy.rs
-+++ b/crates/server/src/notification/dummy.rs
-@@ -1,6 +1,9 @@
-+#[cfg(test)]
- use crate::notification::traits;
- 
-+#[cfg(test)]
- #[derive(Clone, Copy, Debug, Default)]
- pub struct Notification {}
- 
-+#[cfg(test)]
- impl traits::Notification for Notification {}
diff --git a/pkgs/by-name/cl/clipcat/package.nix b/pkgs/by-name/cl/clipcat/package.nix
index 4cb922c4f8e2..1e245f33c6c4 100644
--- a/pkgs/by-name/cl/clipcat/package.nix
+++ b/pkgs/by-name/cl/clipcat/package.nix
@@ -10,24 +10,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "clipcat";
-  version = "0.21.1";
+  version = "0.24.0";
 
   src = fetchFromGitHub {
     owner = "xrelkd";
     repo = "clipcat";
     tag = "v${version}";
-    hash = "sha256-MYWkUb9v8hnW6gUTpIcz0+jhlc8y3hZxsEQxRIZVVxI=";
+    hash = "sha256-EEM2gwr5j3umpZqHnxCO81EZbLQ3nYGcxb6DBJ7AbC8=";
   };
 
-  cargoHash = "sha256-7ntsq6x/8QFaU6Hl4tk+Rtvc8ttcK9Mp00nlirNlUKY=";
-
-  patches = [
-    # Fix compilation errors caused by stricter restrictions on unused code in Rust 1.89.
-    # TODO: remove this patch after upstream fix it.
-    ./dummy.patch
-    # https://github.com/xrelkd/clipcat/pull/871
-    ./remove_unnecessary_parenthesis.patch
-  ];
+  cargoHash = "sha256-6fS/LnfNi3rH4H61GCdLp6pnfGPIXJiY2dAwKdK5ofk=";
 
   nativeBuildInputs = [
     protobuf
diff --git a/pkgs/by-name/cl/clipcat/remove_unnecessary_parenthesis.patch b/pkgs/by-name/cl/clipcat/remove_unnecessary_parenthesis.patch
deleted file mode 100644
index 54b8caa86c0c..000000000000
--- a/pkgs/by-name/cl/clipcat/remove_unnecessary_parenthesis.patch
+++ /dev/null
@@ -1,22 +0,0 @@
-From 76e3ce46eb930dbc51c3e7aeb832a9db6194fd34 Mon Sep 17 00:00:00 2001
-From: sandroid <sandroid@posteo.net>
-Date: Sun, 9 Nov 2025 22:12:03 +0100
-Subject: [PATCH] fix(crates/server): remove unnecessary parentheses
-
----
- crates/server/src/snippets/mod.rs | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/crates/server/src/snippets/mod.rs b/crates/server/src/snippets/mod.rs
-index 00759b1e..8a43c326 100644
---- a/crates/server/src/snippets/mod.rs
-+++ b/crates/server/src/snippets/mod.rs
-@@ -39,7 +39,7 @@ async fn load(config: &config::SnippetConfig) -> HashMap<ClipEntry, Option<PathB
-                 clipcat_base::utils::fs::read_dir_recursively_async(&path)
-                     .await
-                     .into_iter()
--                    .map(|file| (async move { (tokio::fs::read(&file).await.ok(), file) })),
-+                    .map(|file| async move { (tokio::fs::read(&file).await.ok(), file) }),
-             )
-             .await
-             .into_iter()
diff --git a/pkgs/by-name/co/code-cursor/sources.json b/pkgs/by-name/co/code-cursor/sources.json
index 60222961f8b6..dd42318db18b 100644
--- a/pkgs/by-name/co/code-cursor/sources.json
+++ b/pkgs/by-name/co/code-cursor/sources.json
@@ -1,22 +1,22 @@
 {
-  "version": "2.4.21",
+  "version": "2.4.22",
   "vscodeVersion": "1.105.1",
   "sources": {
     "x86_64-linux": {
-      "url": "https://downloads.cursor.com/production/dc8361355d709f306d5159635a677a571b277bcc/linux/x64/Cursor-2.4.21-x86_64.AppImage",
-      "hash": "sha256-OOjANfVHMlRN1uWq2jNmK/RqI4Q5NTlN/19Nl2jWiKI="
+      "url": "https://downloads.cursor.com/production/618c607a249dd7fd2ffc662c6531143833bebd44/linux/x64/Cursor-2.4.22-x86_64.AppImage",
+      "hash": "sha256-qB6HEJZdn8+MdudNd/kVooArUGg1jBaeArlvOKCpFao="
     },
     "aarch64-linux": {
-      "url": "https://downloads.cursor.com/production/dc8361355d709f306d5159635a677a571b277bcc/linux/arm64/Cursor-2.4.21-aarch64.AppImage",
-      "hash": "sha256-tk7TzkLy8oHtXp0UcMwhDXa9B2f2lanWYmPbF7OKfZ0="
+      "url": "https://downloads.cursor.com/production/618c607a249dd7fd2ffc662c6531143833bebd44/linux/arm64/Cursor-2.4.22-aarch64.AppImage",
+      "hash": "sha256-5QVw5iN17yeU8TFMZrCW/AswgNl4bUONeuhBdretiWk="
     },
     "x86_64-darwin": {
-      "url": "https://downloads.cursor.com/production/dc8361355d709f306d5159635a677a571b277bcc/darwin/x64/Cursor-darwin-x64.dmg",
-      "hash": "sha256-uacRpz0HFRfmaNekSB5qLXpnhiQRvAw03W+9QfPl6ZY="
+      "url": "https://downloads.cursor.com/production/618c607a249dd7fd2ffc662c6531143833bebd44/darwin/x64/Cursor-darwin-x64.dmg",
+      "hash": "sha256-hNpy1wfaxo2W/8Itbam1tt5tLqo2BjsnYZyl5NQn23g="
     },
     "aarch64-darwin": {
-      "url": "https://downloads.cursor.com/production/dc8361355d709f306d5159635a677a571b277bcc/darwin/arm64/Cursor-darwin-arm64.dmg",
-      "hash": "sha256-nCch/JXO1lzj0ibAa8e0OPlnBTOrIk/fvq9CO46Ev8w="
+      "url": "https://downloads.cursor.com/production/618c607a249dd7fd2ffc662c6531143833bebd44/darwin/arm64/Cursor-darwin-arm64.dmg",
+      "hash": "sha256-JvkumedZhRyqZdjOVhqjMRShtGPCafVCGOewFooEGpc="
     }
   }
 }
diff --git a/pkgs/by-name/co/code/package.nix b/pkgs/by-name/co/code/package.nix
index a7f97ea4b1cc..c3e4175e5919 100644
--- a/pkgs/by-name/co/code/package.nix
+++ b/pkgs/by-name/co/code/package.nix
@@ -11,13 +11,13 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "code";
-  version = "0.6.49";
+  version = "0.6.53";
 
   src = fetchFromGitHub {
     owner = "just-every";
     repo = "code";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-iklIQPs44SjJlQq+qkuyuCQLfv+xcmvmBDSIweFsSTs=";
+    hash = "sha256-lKe6OKIrf1k8sJpWIEippbvwamTWLe0uP1KOg7UsY6A=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/code-rs";
diff --git a/pkgs/by-name/co/copilot-language-server/package.nix b/pkgs/by-name/co/copilot-language-server/package.nix
index 763486bbbbe0..81552196fb2a 100644
--- a/pkgs/by-name/co/copilot-language-server/package.nix
+++ b/pkgs/by-name/co/copilot-language-server/package.nix
@@ -10,11 +10,11 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "copilot-language-server";
-  version = "1.412.0";
+  version = "1.418.0";
 
   src = fetchzip {
     url = "https://github.com/github/copilot-language-server-release/releases/download/${finalAttrs.version}/copilot-language-server-js-${finalAttrs.version}.zip";
-    hash = "sha256-t1GDRnJq1O5T49/iKSMsRw467EujWmGsuShI8Q8bI8w=";
+    hash = "sha256-DFFQav3UTCItIQo1ksxy29smIMyyAHEDdhrdKf4NH1k=";
     stripRoot = false;
   };
 
diff --git a/pkgs/by-name/co/coredns/package.nix b/pkgs/by-name/co/coredns/package.nix
index dc4d4f26cefe..cd3626c21d2e 100644
--- a/pkgs/by-name/co/coredns/package.nix
+++ b/pkgs/by-name/co/coredns/package.nix
@@ -78,6 +78,7 @@ buildGoModule (finalAttrs: {
     for src in ${toString (attrsToSources externalPlugins)}; do go get $src; done
     go mod vendor
     CC= GOOS= GOARCH= go generate
+    go mod vendor
     go mod tidy
   '';
 
@@ -134,6 +135,7 @@ buildGoModule (finalAttrs: {
   '';
 
   passthru.tests = {
+    coredns-external-plugins = nixosTests.coredns;
     kubernetes-single-node = nixosTests.kubernetes.dns-single-node;
     kubernetes-multi-node = nixosTests.kubernetes.dns-multi-node;
   };
diff --git a/pkgs/by-name/cs/cspell/package.nix b/pkgs/by-name/cs/cspell/package.nix
index 9c3d48952cc3..846e253afc33 100644
--- a/pkgs/by-name/cs/cspell/package.nix
+++ b/pkgs/by-name/cs/cspell/package.nix
@@ -11,13 +11,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "cspell";
-  version = "9.6.0";
+  version = "9.6.2";
 
   src = fetchFromGitHub {
     owner = "streetsidesoftware";
     repo = "cspell";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-S5E51eNiF78TLQeL9aztC/YyhGZ0RvPZVVHtUWL9z/Y=";
+    hash = "sha256-JEvvopeSqoVXrh9t4ORUlT0nPdE+3PofzD7h4VajnAs=";
   };
 
   pnpmWorkspaces = [ "cspell..." ];
@@ -31,7 +31,7 @@ stdenv.mkDerivation (finalAttrs: {
       ;
     pnpm = pnpm_10;
     fetcherVersion = 2;
-    hash = "sha256-6Mf0aCUIBYrMZVF0Jp8GCDnj5PhGSde+QS67lKzCV1c=";
+    hash = "sha256-CNsxfAsIQxmDvuGZtedKnHMOoB1usDlw45cKYxaD05U=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/de/decktape/package.nix b/pkgs/by-name/de/decktape/package.nix
index 6ab216c334fd..c0c5e5129a93 100644
--- a/pkgs/by-name/de/decktape/package.nix
+++ b/pkgs/by-name/de/decktape/package.nix
@@ -5,7 +5,7 @@
   chromium,
 }:
 buildNpmPackage rec {
-  name = "decktape";
+  pname = "decktape";
   version = "3.15.0";
 
   src = fetchFromGitHub {
diff --git a/pkgs/by-name/de/devcontainer/package.nix b/pkgs/by-name/de/devcontainer/package.nix
index 9ba1f3c84f90..455fdc7aed08 100644
--- a/pkgs/by-name/de/devcontainer/package.nix
+++ b/pkgs/by-name/de/devcontainer/package.nix
@@ -19,18 +19,18 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "devcontainer";
-  version = "0.81.1";
+  version = "0.82.0";
 
   src = fetchFromGitHub {
     owner = "devcontainers";
     repo = "cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-sMhCYDhQfyuzIuGR3eaf713gkUGfrj6b3Ldt4W3KdUw=";
+    hash = "sha256-ztHlP3LxjxNDPnNWZqSkAN4+AiRA6j5cwDZrmwB4PDM=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = "${finalAttrs.src}/yarn.lock";
-    hash = "sha256-E+IbJjj7/iVUkGVKJMpoYMYiRXlwOLsxXAGNmdG5tBM=";
+    hash = "sha256-bK8M2oZJT0Jr6nqHPOixg+22OWALFiPORiBmd3CHV08=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/do/do-agent/package.nix b/pkgs/by-name/do/do-agent/package.nix
index 654b06b152c2..7d393ad531bd 100644
--- a/pkgs/by-name/do/do-agent/package.nix
+++ b/pkgs/by-name/do/do-agent/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule rec {
   pname = "do-agent";
-  version = "3.18.7";
+  version = "3.18.8";
 
   src = fetchFromGitHub {
     owner = "digitalocean";
     repo = "do-agent";
     rev = version;
-    sha256 = "sha256-0subv3u+iO409GiHA9HaWUAo21F2hgmQnNaOPbPXKiU=";
+    sha256 = "sha256-uOZTiP+2r5wTPuYXcPc3bShfTIlQMkcfwiuBqUeLxPA=";
   };
 
   ldflags = [
diff --git a/pkgs/by-name/du/dune3d/package.nix b/pkgs/by-name/du/dune3d/package.nix
index 28f92f4def31..04ff6cc17f83 100644
--- a/pkgs/by-name/du/dune3d/package.nix
+++ b/pkgs/by-name/du/dune3d/package.nix
@@ -27,13 +27,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "dune3d";
-  version = "1.3.0";
+  version = "1.4.0";
 
   src = fetchFromGitHub {
     owner = "dune3d";
     repo = "dune3d";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-9lBaenBxMoJgG5tMM+EZ87xcJ4HhFTA9RUNZt2Jx34Q=";
+    hash = "sha256-QaWdDz+cjceIKDJTZLEbPspClZKtP02YiMtu6mwI6/o=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/du/dunst/package.nix b/pkgs/by-name/du/dunst/package.nix
index edcdae052fde..e84968bd3b57 100644
--- a/pkgs/by-name/du/dunst/package.nix
+++ b/pkgs/by-name/du/dunst/package.nix
@@ -77,7 +77,8 @@ stdenv.mkDerivation (finalAttrs: {
   makeFlags = [
     "PREFIX=$(out)"
     "VERSION=$(version)"
-    "SYSCONFDIR=$(out)/etc"
+    "SYSCONFDIR=/etc/xdg"
+    "SYSCONF_FORCE_NEW=0"
     "SERVICEDIR_DBUS=$(out)/share/dbus-1/services"
     "SERVICEDIR_SYSTEMD=$(out)/lib/systemd/user"
   ]
diff --git a/pkgs/by-name/ea/eask-cli/package.nix b/pkgs/by-name/ea/eask-cli/package.nix
index eb0cde010adc..5f10b0900c75 100644
--- a/pkgs/by-name/ea/eask-cli/package.nix
+++ b/pkgs/by-name/ea/eask-cli/package.nix
@@ -6,16 +6,16 @@
 
 buildNpmPackage rec {
   pname = "eask-cli";
-  version = "0.12.2";
+  version = "0.12.4";
 
   src = fetchFromGitHub {
     owner = "emacs-eask";
     repo = "cli";
     rev = version;
-    hash = "sha256-n2NL8B6hxQLB8xdRWzclVlqp3B4K7VxgdQ3zgFC1YyI=";
+    hash = "sha256-0pSOPz+wSz6DhbO/dGj7AOfBm0Cyj530Xqu1PRTPRjU=";
   };
 
-  npmDepsHash = "sha256-kHi/8kPTk9hg5NI4u0b+k9OoocHLX2rY3diXt9WMlRo=";
+  npmDepsHash = "sha256-NhfpqoImRQaELiKO8hTAc1KCeaVWUtckcBG8SfYpzaM=";
 
   dontBuild = true;
 
diff --git a/pkgs/by-name/ed/ed-odyssey-materials-helper/package.nix b/pkgs/by-name/ed/ed-odyssey-materials-helper/package.nix
index 5ad1957f3b8b..a67d01d10575 100644
--- a/pkgs/by-name/ed/ed-odyssey-materials-helper/package.nix
+++ b/pkgs/by-name/ed/ed-odyssey-materials-helper/package.nix
@@ -21,13 +21,13 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "ed-odyssey-materials-helper";
-  version = "3.1.10";
+  version = "3.1.12";
 
   src = fetchFromGitHub {
     owner = "jixxed";
     repo = "ed-odyssey-materials-helper";
     tag = version;
-    hash = "sha256-/spb1BH5zPyxPKNI419/gYON2EfPtjPzT8ba1nEsjl4=";
+    hash = "sha256-QqwLM2fiPmtFehB83M3yvLp8M1DKywlCxQcG4mclBkk=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/el/electron-fiddle/package.nix b/pkgs/by-name/el/electron-fiddle/package.nix
index 9b3e4854410e..0c51aa9310ad 100644
--- a/pkgs/by-name/el/electron-fiddle/package.nix
+++ b/pkgs/by-name/el/electron-fiddle/package.nix
@@ -1,8 +1,8 @@
 {
   buildFHSEnv,
-  electron_36,
   fetchFromGitHub,
   fetchYarnDeps,
+  electron,
   git,
   lib,
   makeDesktopItem,
@@ -25,8 +25,6 @@ let
     hash = "sha256-e9PLgkqWBNLBw7uuNpPluOQ6+aGLYQLyTzcLa+LMOzs=";
   };
 
-  electron = electron_36;
-
   unwrapped = stdenvNoCC.mkDerivation {
     pname = "${pname}-unwrapped";
     inherit version src;
diff --git a/pkgs/by-name/ep/eplot/package.nix b/pkgs/by-name/ep/eplot/package.nix
index 0aec6e80dd06..a3c87de1f2fa 100644
--- a/pkgs/by-name/ep/eplot/package.nix
+++ b/pkgs/by-name/ep/eplot/package.nix
@@ -55,7 +55,6 @@ stdenv.mkDerivation {
     platforms = lib.platforms.all;
     maintainers = with lib.maintainers; [
       bjornfor
-      shamilton
     ];
   };
 }
diff --git a/pkgs/by-name/fc/fcast-client/package.nix b/pkgs/by-name/fc/fcast-client/package.nix
index c6c6084b655f..7a101b9bc6a2 100644
--- a/pkgs/by-name/fc/fcast-client/package.nix
+++ b/pkgs/by-name/fc/fcast-client/package.nix
@@ -32,7 +32,7 @@ rustPlatform.buildRustPackage rec {
       receiver devices or integrate the FCast protocol into their own apps.
     '';
     mainProgram = "fcast";
-    maintainers = [ ];
-    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ yusufraji ];
+    platforms = with lib.platforms; linux ++ darwin;
   };
 }
diff --git a/pkgs/by-name/fi/files-cli/package.nix b/pkgs/by-name/fi/files-cli/package.nix
index 05f1a6e615de..63bdcc535478 100644
--- a/pkgs/by-name/fi/files-cli/package.nix
+++ b/pkgs/by-name/fi/files-cli/package.nix
@@ -8,16 +8,16 @@
 
 buildGoModule rec {
   pname = "files-cli";
-  version = "2.15.194";
+  version = "2.15.195";
 
   src = fetchFromGitHub {
     repo = "files-cli";
     owner = "files-com";
     rev = "v${version}";
-    hash = "sha256-mbQ6weZBBt4wSutmpJ1I5HJgiEUOgVbPDIxTj5NCiOo=";
+    hash = "sha256-tr1l+5JcGIKsT4EvoYM4Nb9KS8DEoSiFRANNSb4lKBY=";
   };
 
-  vendorHash = "sha256-CxE1nUhMa7WNWUwL4dOQADzU5x+2QIAfA/J9cqRPSE8=";
+  vendorHash = "sha256-ctld8euKWNwmfk9qfwSAdkBeuPGcklbIBaIs+r9nHT4=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/fo/fontfor/package.nix b/pkgs/by-name/fo/fontfor/package.nix
index f2efb58fa3f8..8ce1202b92b7 100644
--- a/pkgs/by-name/fo/fontfor/package.nix
+++ b/pkgs/by-name/fo/fontfor/package.nix
@@ -39,7 +39,6 @@ rustPlatform.buildRustPackage rec {
     description = "Find fonts which can show a specified character and preview them in browser";
     homepage = "https://github.com/7sDream/fontfor";
     license = with lib.licenses; [ gpl3Plus ];
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.linux;
     mainProgram = "fontfor";
   };
diff --git a/pkgs/by-name/fo/forgejo/package.nix b/pkgs/by-name/fo/forgejo/package.nix
index 71c18e592348..c3b6888f0a83 100644
--- a/pkgs/by-name/fo/forgejo/package.nix
+++ b/pkgs/by-name/fo/forgejo/package.nix
@@ -1,8 +1,8 @@
 import ./generic.nix {
-  version = "14.0.1";
-  hash = "sha256-nnHpi2mb+QziEtahRVMUt7t+xKiylzLCalh+6ywcP7w=";
+  version = "14.0.2";
+  hash = "sha256-jgRyFfbzJ0Camotkn7f/tvSi7jKIhqEpGVZV8xw5uDQ=";
   npmDepsHash = "sha256-gyEr5uNZfBELxbvQeZ48xqtay7ObQL4dQaFO9yPC2Hg=";
-  vendorHash = "sha256-7xgm57IqsFOh3CPwGybPHLLlckGLplJpU7M5upYKBl8=";
+  vendorHash = "sha256-RusaQJXToLGL0pdJtCZBQvlTQfDXoaD6dhHNmHQ5Ozk=";
   lts = false;
   nixUpdateExtraArgs = [
     "--override-filename"
diff --git a/pkgs/by-name/fr/freac/package.nix b/pkgs/by-name/fr/freac/package.nix
index ebbf7cbd2a29..5361edb24f94 100644
--- a/pkgs/by-name/fr/freac/package.nix
+++ b/pkgs/by-name/fr/freac/package.nix
@@ -35,7 +35,6 @@ stdenv.mkDerivation rec {
     description = "Audio converter and CD ripper with support for various popular formats and encoders";
     license = lib.licenses.gpl2Plus;
     homepage = "https://www.freac.org/";
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.linux;
   };
 }
diff --git a/pkgs/by-name/gi/github-backup/package.nix b/pkgs/by-name/gi/github-backup/package.nix
index 5056b11f03f0..58ebf3ff60a5 100644
--- a/pkgs/by-name/gi/github-backup/package.nix
+++ b/pkgs/by-name/gi/github-backup/package.nix
@@ -10,14 +10,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "github-backup";
-  version = "0.61.2";
+  version = "0.61.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "josegonzalez";
     repo = "python-github-backup";
     tag = version;
-    hash = "sha256-yxVovL4jjS+qMDH9ZrLVnFMLQeO+xwh49npv/ifgFEQ=";
+    hash = "sha256-iZM/gXjEBJpqCkW54quNVsr6zrfAfRrcdRy6icecMHk=";
   };
 
   build-system = with python3Packages; [
diff --git a/pkgs/by-name/gi/gitsign/package.nix b/pkgs/by-name/gi/gitsign/package.nix
index 8b4a7f4e1e1d..4c4c35725199 100644
--- a/pkgs/by-name/gi/gitsign/package.nix
+++ b/pkgs/by-name/gi/gitsign/package.nix
@@ -10,15 +10,15 @@
 
 buildGoModule rec {
   pname = "gitsign";
-  version = "0.13.0";
+  version = "0.14.0";
 
   src = fetchFromGitHub {
     owner = "sigstore";
     repo = "gitsign";
     rev = "v${version}";
-    hash = "sha256-sxkQOqlCgS/QFfRN5Rtdih2zjiGHY6H9Kjlw0Q74W2A=";
+    hash = "sha256-jqWMZATeimmgyb0yD5dzp9h31c9RaClpH2cA+bvhxpg=";
   };
-  vendorHash = "sha256-CvswCIczi+MyHsluz39CnfVJEcc49wkEby67qHxv+wI=";
+  vendorHash = "sha256-NZvJGexfCjxCQI8R/thv0Z2PaMNSkkGmyPUFJyYxdgM=";
 
   subPackages = [
     "."
diff --git a/pkgs/by-name/go/gogdl/package.nix b/pkgs/by-name/go/gogdl/package.nix
index 114abc7584e4..f27bef651e35 100644
--- a/pkgs/by-name/go/gogdl/package.nix
+++ b/pkgs/by-name/go/gogdl/package.nix
@@ -1,25 +1,28 @@
 {
   lib,
-  writeScript,
   python3Packages,
   fetchFromGitHub,
-  cacert,
 }:
 
-python3Packages.buildPythonApplication rec {
+python3Packages.buildPythonApplication (finalAttrs: {
   pname = "gogdl";
-  version = "1.1.2";
+  version = "1.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Heroic-Games-Launcher";
     repo = "heroic-gogdl";
-    rev = "1ff09820915f855ea764c6e49ea2def63e86b3bb";
-    hash = "sha256-pK6JeTJeBq9qVfflNSYs3s4HuD0Kz6k9DDUVHL81FV0=";
+    # two commits after the v1.2.0 tag, because the release messed up submodule fetching
+    rev = "9759dfb1f50e0c68854f938e9568d84cab59652c";
+    fetchSubmodules = true;
+    hash = "sha256-yjiPHEiZjs9TnBRaKzm1TpLcPK0tfIrzM30DX66m+1Y=";
   };
 
-  propagatedBuildInputs = with python3Packages; [
+  build-system = with python3Packages; [
     setuptools
+  ];
+
+  dependencies = with python3Packages; [
     requests
   ];
 
@@ -32,31 +35,4 @@ python3Packages.buildPythonApplication rec {
     license = with lib.licenses; [ gpl3 ];
     maintainers = [ ];
   };
-
-  # Upstream no longer create git tags when bumping the version, so we have to
-  # extract it from the source code on the main branch.
-  passthru.updateScript = writeScript "gogdl-update-script" ''
-    #!/usr/bin/env nix-shell
-    #!nix-shell -i bash -p curl gnused jq common-updater-scripts
-    set -eou pipefail;
-
-    owner=Heroic-Games-Launcher
-    repo=heroic-gogdl
-    path='gogdl/__init__.py'
-
-    version=$(
-      curl --cacert "${cacert}/etc/ssl/certs/ca-bundle.crt" \
-      https://raw.githubusercontent.com/$owner/$repo/main/$path |
-      sed -n 's/^\s*version\s*=\s*"\([0-9]\.[0-9]\.[0-9]\)"\s*$/\1/p')
-
-    commit=$(curl --cacert "${cacert}/etc/ssl/certs/ca-bundle.crt" \
-      https://api.github.com/repos/$owner/$repo/commits?path=$path |
-      jq -r '.[0].sha')
-
-    update-source-version \
-      ${pname} \
-      "$version" \
-      --file=./pkgs/games/gogdl/default.nix \
-      --rev=$commit
-  '';
-}
+})
diff --git a/pkgs/by-name/gp/gpxsee/package.nix b/pkgs/by-name/gp/gpxsee/package.nix
index 094d7b1ca5a9..dce926e9d271 100644
--- a/pkgs/by-name/gp/gpxsee/package.nix
+++ b/pkgs/by-name/gp/gpxsee/package.nix
@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gpxsee";
-  version = "15.8";
+  version = "15.10";
 
   src = fetchFromGitHub {
     owner = "tumic0";
     repo = "GPXSee";
     tag = finalAttrs.version;
-    hash = "sha256-Q2vwoKutwx46dvSGk54FPHeIN45dWuB1xypbw1AtnKQ=";
+    hash = "sha256-lXyxArPctaS9q+xeSpYBWPd9fdTffGNIBO39bMxZBCE=";
   };
 
   buildInputs = [
diff --git a/pkgs/by-name/gr/greenbone-feed-sync/package.nix b/pkgs/by-name/gr/greenbone-feed-sync/package.nix
new file mode 100644
index 000000000000..44fd72a61297
--- /dev/null
+++ b/pkgs/by-name/gr/greenbone-feed-sync/package.nix
@@ -0,0 +1,43 @@
+{
+  lib,
+  python3,
+  fetchFromGitHub,
+  pkgs,
+}:
+
+python3.pkgs.buildPythonApplication (finalAttrs: {
+  pname = "greenbone-feed-sync";
+  version = "25.2.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "greenbone";
+    repo = "greenbone-feed-sync";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-lpbbAODk/uLg1nbSPj9Ico5/8klM5Fm5tyXeRQao7N8=";
+  };
+
+  build-system = with python3.pkgs; [ poetry-core ];
+
+  dependencies = with python3.pkgs; [
+    rich
+    shtab
+  ];
+
+  nativeCheckInputs = with python3.pkgs; [
+    pkgs.rsync
+    pontos
+    pytestCheckHook
+  ];
+
+  pythonImportsCheck = [ "greenbone.feed.sync" ];
+
+  meta = {
+    description = "Tool for downloading the Greenbone Community Feed";
+    homepage = "https://github.com/greenbone/greenbone-feed-sync";
+    changelog = "https://github.com/greenbone/greenbone-feed-sync/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "greenbone-feed-sync";
+  };
+})
diff --git a/pkgs/by-name/ha/hal-hardware-analyzer/package.nix b/pkgs/by-name/ha/hal-hardware-analyzer/package.nix
index 3b68619aac27..359f2e2d69c8 100644
--- a/pkgs/by-name/ha/hal-hardware-analyzer/package.nix
+++ b/pkgs/by-name/ha/hal-hardware-analyzer/package.nix
@@ -107,7 +107,6 @@ stdenv.mkDerivation rec {
     platforms = lib.platforms.unix;
     maintainers = with lib.maintainers; [
       ris
-      shamilton
     ];
   };
 }
diff --git a/pkgs/by-name/he/heroic-unwrapped/epic-integration.nix b/pkgs/by-name/he/heroic-unwrapped/epic-integration.nix
index a5c9d6cf59ce..396e37c933c1 100644
--- a/pkgs/by-name/he/heroic-unwrapped/epic-integration.nix
+++ b/pkgs/by-name/he/heroic-unwrapped/epic-integration.nix
@@ -8,13 +8,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "heroic-epic-integration";
-  version = "0.3";
+  version = "0.4";
 
   src = fetchFromGitHub {
     owner = "Etaash-mathamsetty";
     repo = "heroic-epic-integration";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Zn0MsaQd8Ro6eu8IQkMcLNGLVTUukwajkn8PRLfB+Yw=";
+    hash = "sha256-pRgs1w4bzm5Ao0zXfaNxBAR8+h7w4I+C+bm4nT7kIgU=";
   };
 
   nativeBuildInputs = [
@@ -33,6 +33,8 @@ stdenv.mkDerivation (finalAttrs: {
     runHook postInstall
   '';
 
+  passthru.updateScript = gitUpdater { };
+
   meta = {
     description = "Wrapper process for games launched through Heroic Games Launcher";
     longDescription = ''
@@ -44,6 +46,4 @@ stdenv.mkDerivation (finalAttrs: {
     license = lib.licenses.mit;
     maintainers = [ ];
   };
-
-  passthru.updateScript = gitUpdater { };
 })
diff --git a/pkgs/by-name/he/heroic-unwrapped/legendary.nix b/pkgs/by-name/he/heroic-unwrapped/legendary.nix
index dafae9797eaf..831c3a8b405d 100644
--- a/pkgs/by-name/he/heroic-unwrapped/legendary.nix
+++ b/pkgs/by-name/he/heroic-unwrapped/legendary.nix
@@ -4,19 +4,17 @@
   fetchFromGitHub,
   python3Packages,
 }:
-let
-  version = "0.20.37";
-in
-python3Packages.buildPythonApplication {
+
+python3Packages.buildPythonApplication (finalAttrs: {
   pname = "legendary-heroic";
-  inherit version;
+  version = "0.20.39";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Heroic-Games-Launcher";
     repo = "legendary";
-    rev = version;
-    sha256 = "sha256-mOys7lOPrrzBUBMIM/JvKygFQ/qIGD68BDNigk5BCIo=";
+    tag = finalAttrs.version;
+    hash = "sha256-2+9MRbwugBlBdZQQo6BUcLmwCqVdTAv9CZ+sPu5VAxY=";
   };
 
   build-system = with python3Packages; [
@@ -25,11 +23,14 @@ python3Packages.buildPythonApplication {
 
   dependencies = with python3Packages; [
     requests
+    requests-futures
     filelock
   ];
 
   pythonImportsCheck = [ "legendary" ];
 
+  passthru.updateScript = gitUpdater { };
+
   meta = {
     description = "Free and open-source Epic Games Launcher alternative";
     longDescription = ''
@@ -40,6 +41,4 @@ python3Packages.buildPythonApplication {
     maintainers = [ ];
     mainProgram = "legendary";
   };
-
-  passthru.updateScript = gitUpdater { };
-}
+})
diff --git a/pkgs/by-name/he/heroic-unwrapped/package.nix b/pkgs/by-name/he/heroic-unwrapped/package.nix
index 668b84507ad8..888dd21715c4 100644
--- a/pkgs/by-name/he/heroic-unwrapped/package.nix
+++ b/pkgs/by-name/he/heroic-unwrapped/package.nix
@@ -10,8 +10,9 @@
   nodejs,
   python3,
   makeWrapper,
-  # Electron updates frequently break Heroic, so pin same version as upstream, or newest non-EOL.
-  electron_37,
+  # Electron updates can break Heroic, so try to use same version as upstream.
+  # If the used electron version is higher than upstream's then the node-abi package might need to be updated
+  electron_39,
   vulkan-helper,
   gogdl,
   nile,
@@ -20,33 +21,40 @@
 }:
 
 let
+  pnpm = pnpm_10;
+  electron = electron_39;
+
   legendary = callPackage ./legendary.nix { };
   epic-integration = callPackage ./epic-integration.nix { };
   comet-gog = comet-gog_heroic;
-  electron = electron_37;
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "heroic-unwrapped";
-  version = "2.18.1";
+  version = "2.19.1";
 
   src = fetchFromGitHub {
     owner = "Heroic-Games-Launcher";
     repo = "HeroicGamesLauncher";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-x792VA4PZleqUUgarh59JxJVXrvT95/rINYk8t9i3X0=";
+    hash = "sha256-e+/FRvG9u6ZQsMGD5hqY+yLPjsbLSrjC9Wp0xdxVk6w=";
   };
 
   pnpmDeps = fetchPnpmDeps {
-    inherit (finalAttrs) pname version src;
-    pnpm = pnpm_10;
-    fetcherVersion = 1;
-    hash = "sha256-F8H0eYltIJ0S8AX+2S3cR+v8dvePw09VWToVOLM8qII=";
+    inherit (finalAttrs)
+      pname
+      version
+      src
+      patches
+      ;
+    inherit pnpm;
+    fetcherVersion = 3;
+    hash = "sha256-uwJYOm+2wGNRHAiIw1UjCBLBW6kjtj6AFLWihCqtL28=";
   };
 
   nativeBuildInputs = [
     nodejs
     pnpmConfigHook
-    pnpm_10
+    pnpm
     python3
     makeWrapper
   ];
@@ -54,8 +62,6 @@ stdenv.mkDerivation (finalAttrs: {
   patches = [
     # Make Heroic create Steam shortcuts (to non-steam games) with the correct path to heroic.
     ./fix-non-steam-shortcuts.patch
-    # Fixes incorrect path to GalaxyCommunication.exe
-    ./pr-4885.patch
   ];
 
   env.ELECTRON_SKIP_BINARY_DOWNLOAD = "1";
@@ -68,9 +74,7 @@ stdenv.mkDerivation (finalAttrs: {
 
     pnpm --offline electron-vite build
     pnpm --offline electron-builder \
-      --linux \
       --dir \
-      -c.asarUnpack="**/*.node" \
       -c.electronDist=${electron.dist} \
       -c.electronVersion=${electron.version}
 
@@ -85,25 +89,27 @@ stdenv.mkDerivation (finalAttrs: {
     mkdir -p "$out/opt/heroic"
     cp -r dist/linux-unpacked/resources "$out/opt/heroic"
 
-    cp -r public "$out/opt/heroic/resources/app.asar.unpacked/build"
-    rm -rf "$out/opt/heroic/resources/app.asar.unpacked/build/bin"
-    mkdir -p \
-      "$out/opt/heroic/resources/app.asar.unpacked/build/bin/x64/linux" \
-      "$out/opt/heroic/resources/app.asar.unpacked/build/bin/x64/win32"
+    bin_dir="$out/opt/heroic/resources/app.asar.unpacked/build/bin"
+
+    # Clean up prebuilt binaries
+    rm -r "$bin_dir"
+    mkdir -p "$bin_dir/x64/linux/" "$bin_dir/x64/win32/"
+
     ln -s \
       "${lib.getExe gogdl}" \
       "${lib.getExe legendary}" \
       "${lib.getExe nile}" \
       "${lib.getExe comet-gog}" \
       "${lib.getExe vulkan-helper}" \
-      "$out/opt/heroic/resources/app.asar.unpacked/build/bin/x64/linux"
+      "$bin_dir/x64/linux/"
+
     # Don't symlink these so we don't confuse Windows applications under Wine/Proton.
     cp \
       "${comet-gog.dummy-service}/GalaxyCommunication.exe" \
       "${epic-integration}/EpicGamesLauncher.exe" \
-      "$out/opt/heroic/resources/app.asar.unpacked/build/bin/x64/win32"
+      "$bin_dir/x64/win32/"
 
-    makeWrapper "${electron}/bin/electron" "$out/bin/heroic" \
+    makeWrapper "${lib.getExe electron}" "$out/bin/heroic" \
       --inherit-argv0 \
       --set ELECTRON_FORCE_IS_PACKAGED 1 \
       --suffix PATH ":" "${umu-launcher}/bin" \
@@ -128,7 +134,13 @@ stdenv.mkDerivation (finalAttrs: {
     homepage = "https://github.com/Heroic-Games-Launcher/HeroicGamesLauncher";
     changelog = "https://github.com/Heroic-Games-Launcher/HeroicGamesLauncher/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.gpl3Only;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [
+      tomasajt
+      iedame
+      keenanweaver
+      DieracDelta
+      baksa
+    ];
     # Heroic may work on nix-darwin, but it needs a dedicated maintainer for the platform.
     # It may also work on other Linux targets, but all the game stores only
     # support x86 Linux, so it would require extra hacking to run games via QEMU
diff --git a/pkgs/by-name/he/heroic-unwrapped/pr-4885.patch b/pkgs/by-name/he/heroic-unwrapped/pr-4885.patch
deleted file mode 100644
index 96d71ae63f42..000000000000
--- a/pkgs/by-name/he/heroic-unwrapped/pr-4885.patch
+++ /dev/null
@@ -1,71 +0,0 @@
-From a98cc23b288e13665c8698eec56e0653613946d7 Mon Sep 17 00:00:00 2001
-From: Aidan Gauland <aidalgol@fastmail.net>
-Date: Tue, 19 Aug 2025 09:45:55 +1200
-Subject: [PATCH] [Fix] Run GalaxyComm executable path through fixAsarPath
-
----
- src/backend/constants/paths.ts |  4 ++++
- src/backend/launcher.ts        | 15 +++++----------
- 2 files changed, 9 insertions(+), 10 deletions(-)
-
-diff --git a/src/backend/constants/paths.ts b/src/backend/constants/paths.ts
-index 1d05ce5b58..2e9cff1197 100644
---- a/src/backend/constants/paths.ts
-+++ b/src/backend/constants/paths.ts
-@@ -44,6 +44,10 @@ export const fakeEpicExePath = fixAsarPath(
-   join(publicDir, 'bin', 'x64', 'win32', 'EpicGamesLauncher.exe')
- )
- 
-+export const galaxyCommunicationExePath = fixAsarPath(
-+  join(publicDir, 'bin', 'x64', 'win32', 'GalaxyCommunication.exe')
-+)
-+
- export const webviewPreloadPath = fixAsarPath(
-   join('file://', publicDir, 'webviewPreload.js')
- )
-diff --git a/src/backend/launcher.ts b/src/backend/launcher.ts
-index a239cff927..2262dc35b2 100644
---- a/src/backend/launcher.ts
-+++ b/src/backend/launcher.ts
-@@ -80,7 +80,7 @@ import {
-   defaultWinePrefix,
-   fixesPath,
-   flatpakHome,
--  publicDir,
-+  galaxyCommunicationExePath,
-   runtimePath,
-   userHome
- } from './constants/paths'
-@@ -888,28 +888,23 @@ async function prepareWineLaunch(
- 
-   try {
-     if (runner === 'gog' && experimentalFeatures?.cometSupport !== false) {
--      const communicationSource = join(
--        publicDir,
--        'bin/x64/win32/GalaxyCommunication.exe'
--      )
--
--      const galaxyCommPath =
-+      const galaxyCommWinePath =
-         'C:\\ProgramData\\GOG.com\\Galaxy\\redists\\GalaxyCommunication.exe'
-       const communicationDest = await getWinePath({
--        path: galaxyCommPath,
-+        path: galaxyCommWinePath,
-         gameSettings,
-         variant: 'unix'
-       })
- 
-       if (!existsSync(communicationDest)) {
-         mkdirSync(dirname(communicationDest), { recursive: true })
--        await copyFile(communicationSource, communicationDest)
-+        await copyFile(galaxyCommunicationExePath, communicationDest)
-         await runWineCommand({
-           commandParts: [
-             'sc',
-             'create',
-             'GalaxyCommunication',
--            `binpath=${galaxyCommPath}`
-+            `binpath=${galaxyCommWinePath}`
-           ],
-           gameSettings,
-           protonVerb: 'runinprefix'
diff --git a/pkgs/by-name/ho/houdini/package.nix b/pkgs/by-name/ho/houdini/package.nix
index 7d74e20b19d3..131f56cf4026 100644
--- a/pkgs/by-name/ho/houdini/package.nix
+++ b/pkgs/by-name/ho/houdini/package.nix
@@ -126,7 +126,7 @@ buildFHSEnv {
     maintainers = with lib.maintainers; [
       canndrew
       kwohlfahrt
-      pedohorse
+      permahorse
     ];
   };
 }
diff --git a/pkgs/by-name/ho/houdini/runtime.nix b/pkgs/by-name/ho/houdini/runtime.nix
index e8a161b18108..06ed877f8ca7 100644
--- a/pkgs/by-name/ho/houdini/runtime.nix
+++ b/pkgs/by-name/ho/houdini/runtime.nix
@@ -1,12 +1,12 @@
 { requireFile, callPackage }:
 
 callPackage ./runtime-build.nix rec {
-  version = "21.0.440";
+  version = "21.0.559";
   eulaDate = "2021-10-13";
   src = requireFile {
     name = "houdini-${version}-linux_x86_64_gcc11.2.tar.gz";
-    hash = "sha256-qHRR+RRtUgUam6FC1TWTZjg1FSakjLoMYVaiIfO+WOY=";
+    hash = "sha256-bZmoH1NKQhhMAhIl3pTL7irUZ7HrOhS8R7GApLD5514=";
     url = "https://www.sidefx.com/download/daily-builds/?production=true";
   };
-  outputHash = "sha256-SSBiqNZRnxz6tnvusYRi2UASY1k3voiblDpkiu+qU0w=";
+  outputHash = "sha256-/7ctlMUoyJdPdBQV7rRO9pWcg9bXcnMJsB9TN/Jo8QQ=";
 }
diff --git a/pkgs/by-name/hs/hsetroot/package.nix b/pkgs/by-name/hs/hsetroot/package.nix
index fce226c0a2f5..d2ebbce41828 100644
--- a/pkgs/by-name/hs/hsetroot/package.nix
+++ b/pkgs/by-name/hs/hsetroot/package.nix
@@ -40,7 +40,6 @@ stdenv.mkDerivation rec {
     description = "Allows you to compose wallpapers ('root pixmaps') for X";
     homepage = "https://github.com/himdel/hsetroot";
     license = lib.licenses.gpl2Plus;
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.unix;
   };
 }
diff --git a/pkgs/by-name/ht/httptoolkit-server/package.nix b/pkgs/by-name/ht/httptoolkit-server/package.nix
index bc5a3619d5da..b1960919d465 100644
--- a/pkgs/by-name/ht/httptoolkit-server/package.nix
+++ b/pkgs/by-name/ht/httptoolkit-server/package.nix
@@ -1,6 +1,6 @@
 {
   lib,
-  nodejs_20,
+  nodejs_22,
   buildNpmPackage,
   fetchFromGitHub,
   writeShellScriptBin,
@@ -13,16 +13,18 @@
 }:
 
 let
-  nodejs = nodejs_20;
+  nodejs = nodejs_22;
   buildNpmPackage' = buildNpmPackage.override { inherit nodejs; };
 
-  version = "1.24.0";
+  # update together with httptoolkit
+  # nixpkgs-update: no auto update
+  version = "1.24.2";
 
   src = fetchFromGitHub {
     owner = "httptoolkit";
     repo = "httptoolkit-server";
     tag = "v${version}";
-    hash = "sha256-bwtNJz72dgeojMETvobsFr9x1St5rCO/Mwu5DBmcMhs=";
+    hash = "sha256-tcUQe4YIUpQ9I5nq66K7LO84mLFo8YAdHY/c2HROSpk=";
   };
 
   overridesNodeModules = buildNpmPackage' {
@@ -30,7 +32,7 @@ let
     inherit version src;
     sourceRoot = "${src.name}/overrides/js";
 
-    npmDepsHash = "sha256-MtUJY9IxzkGPuoIXHAr9nNNF+NpEf2b/oAYauJPwdaw=";
+    npmDepsHash = "sha256-8cNGJdT8ndXa72ETttU2PjA8nfn+MTWesVVlA8GA1qQ=";
 
     dontBuild = true;
 
@@ -85,8 +87,6 @@ let
       # don't fetch node headers
       substituteInPlace node_modules/cmake-js/lib/dist.js \
           --replace-fail '!this.downloaded' 'false'
-
-      npm rebuild --verbose
     '';
 
     installPhase = ''
@@ -102,7 +102,7 @@ buildNpmPackage' {
 
   patches = [ ./only-build-for-one-platform.patch ];
 
-  npmDepsHash = "sha256-ZumcKqm0JFu8UR/6tnSDzv9ABULmhsUnHtNsYvmR0Ao=";
+  npmDepsHash = "sha256-vhTe7EccEX57h7LDtNaaLaNR8xHSOlbnLtGrs7qT7pY=";
 
   npmFlags = [ "--ignore-scripts" ];
 
diff --git a/pkgs/by-name/ht/httptoolkit/bump-node-abi.patch b/pkgs/by-name/ht/httptoolkit/bump-node-abi.patch
deleted file mode 100644
index 5c622a036dde..000000000000
--- a/pkgs/by-name/ht/httptoolkit/bump-node-abi.patch
+++ /dev/null
@@ -1,59 +0,0 @@
-diff --git a/package-lock.json b/package-lock.json
-index 8823235..a014292 100644
---- a/package-lock.json
-+++ b/package-lock.json
-@@ -498,10 +498,11 @@
-       }
-     },
-     "node_modules/@electron/rebuild/node_modules/node-abi": {
--      "version": "3.74.0",
--      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.74.0.tgz",
--      "integrity": "sha512-c5XK0MjkGBrQPGYG24GBADZud0NCbznxNx0ZkS+ebUTrmV1qTDxPxSL8zEAPURXSbLRWVexxmP4986BziahL5w==",
-+      "version": "3.77.0",
-+      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.77.0.tgz",
-+      "integrity": "sha512-DSmt0OEcLoK4i3NuscSbGjOf3bqiDEutejqENSplMSFA/gmB8mkED9G4pKWnPl7MDU4rSHebKPHeitpDfyH0cQ==",
-       "dev": true,
-+      "license": "MIT",
-       "dependencies": {
-         "semver": "^7.3.5"
-       },
-@@ -5239,9 +5240,10 @@
-       }
-     },
-     "node_modules/node-abi": {
--      "version": "2.30.0",
--      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-2.30.0.tgz",
--      "integrity": "sha512-g6bZh3YCKQRdwuO/tSZZYJAw622SjsRfJ2X0Iy4sSOHZ34/sPPdVBn8fev2tj7njzLwuqPw9uMtGsGkO5kIQvg==",
-+      "version": "2.30.1",
-+      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-2.30.1.tgz",
-+      "integrity": "sha512-/2D0wOQPgaUWzVSVgRMx+trKJRC2UG4SUc4oCJoXx9Uxjtp0Vy3/kt7zcbxHF8+Z/pK3UloLWzBISg72brfy1w==",
-+      "license": "MIT",
-       "dependencies": {
-         "semver": "^5.4.1"
-       }
-@@ -7774,9 +7776,9 @@
-           }
-         },
-         "node-abi": {
--          "version": "3.74.0",
--          "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.74.0.tgz",
--          "integrity": "sha512-c5XK0MjkGBrQPGYG24GBADZud0NCbznxNx0ZkS+ebUTrmV1qTDxPxSL8zEAPURXSbLRWVexxmP4986BziahL5w==",
-+          "version": "3.77.0",
-+          "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.77.0.tgz",
-+          "integrity": "sha512-DSmt0OEcLoK4i3NuscSbGjOf3bqiDEutejqENSplMSFA/gmB8mkED9G4pKWnPl7MDU4rSHebKPHeitpDfyH0cQ==",
-           "dev": true,
-           "requires": {
-             "semver": "^7.3.5"
-@@ -11329,9 +11331,9 @@
-       "dev": true
-     },
-     "node-abi": {
--      "version": "2.30.0",
--      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-2.30.0.tgz",
--      "integrity": "sha512-g6bZh3YCKQRdwuO/tSZZYJAw622SjsRfJ2X0Iy4sSOHZ34/sPPdVBn8fev2tj7njzLwuqPw9uMtGsGkO5kIQvg==",
-+      "version": "2.30.1",
-+      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-2.30.1.tgz",
-+      "integrity": "sha512-/2D0wOQPgaUWzVSVgRMx+trKJRC2UG4SUc4oCJoXx9Uxjtp0Vy3/kt7zcbxHF8+Z/pK3UloLWzBISg72brfy1w==",
-       "requires": {
-         "semver": "^5.4.1"
-       },
diff --git a/pkgs/by-name/ht/httptoolkit/package.nix b/pkgs/by-name/ht/httptoolkit/package.nix
index 49c69b1e5448..0c759847c9cb 100644
--- a/pkgs/by-name/ht/httptoolkit/package.nix
+++ b/pkgs/by-name/ht/httptoolkit/package.nix
@@ -6,30 +6,28 @@
   makeWrapper,
   makeDesktopItem,
   copyDesktopItems,
-  electron_37,
+  electron_39,
   httptoolkit-server,
 }:
 
 let
-  electron = electron_37;
+  electron = electron_39;
 in
 buildNpmPackage rec {
   pname = "httptoolkit";
-  version = "1.22.1";
+
+  # update together with httptoolkit-server
+  # nixpkgs-update: no auto update
+  version = "1.24.4";
 
   src = fetchFromGitHub {
     owner = "httptoolkit";
     repo = "httptoolkit-desktop";
     tag = "v${version}";
-    hash = "sha256-6iiXOBVtPLdW9MWUcu2Hggm7uPHudASebRPQ34JJTMQ=";
+    hash = "sha256-b1u+DFhxU/ED4GgMHFaF51zNfC+0vIg6ujyA8jIy8AQ=";
   };
 
-  patches = [
-    # generated via running: `npm update node-abi`
-    ./bump-node-abi.patch
-  ];
-
-  npmDepsHash = "sha256-WtnL9Gf1zGWnIjMifh0l3fwaeur+iI1l/Vwta+X6EAM=";
+  npmDepsHash = "sha256-FX8sClJL66zvWEaaw0lmoat7cM396RA8Rq9NgRVh0Vw=";
 
   makeCacheWritable = true;
 
diff --git a/pkgs/by-name/hw/hwinfo/package.nix b/pkgs/by-name/hw/hwinfo/package.nix
index 63187fc33e33..5574b2c34cd3 100644
--- a/pkgs/by-name/hw/hwinfo/package.nix
+++ b/pkgs/by-name/hw/hwinfo/package.nix
@@ -20,13 +20,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "hwinfo";
-  version = "25.0";
+  version = "25.1";
 
   src = fetchFromGitHub {
     owner = "opensuse";
     repo = "hwinfo";
     rev = finalAttrs.version;
-    hash = "sha256-8C+FM4UAn219ZQzPxk2IfK6ZKmTZNweo4oCoSYeZJ6A=";
+    hash = "sha256-UMaRx4JaIbsWRS8KDgMi4CRKtWH1vBwemc36xneYcg4=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/im/img4tool/package.nix b/pkgs/by-name/im/img4tool/package.nix
index 15769ba96fe8..a43159f2ad3e 100644
--- a/pkgs/by-name/im/img4tool/package.nix
+++ b/pkgs/by-name/im/img4tool/package.nix
@@ -12,13 +12,13 @@
 }:
 clangStdenv.mkDerivation (finalAttrs: {
   pname = "img4tool";
-  version = "217";
+  version = "218";
 
   src = fetchFromGitHub {
     owner = "tihmstar";
     repo = "img4tool";
     tag = finalAttrs.version;
-    hash = "sha256-67Xfq4jEK9juyaSIgVdWygAePZuyb4Yp8mY+6V66+Aw=";
+    hash = "sha256-s2pX+svCINI3EQsAlDKHm8P03/5C4MVA63wAwAH1lEs=";
   };
 
   # Do not depend on git to calculate version, instead
diff --git a/pkgs/by-name/im/immich-cli/package.nix b/pkgs/by-name/im/immich-cli/package.nix
index 1203a1630f24..1d9837eb8845 100644
--- a/pkgs/by-name/im/immich-cli/package.nix
+++ b/pkgs/by-name/im/immich-cli/package.nix
@@ -10,8 +10,7 @@
 }:
 stdenv.mkDerivation rec {
   pname = "immich-cli";
-  version = "2.2.105";
-  inherit (immich) src pnpmDeps;
+  inherit (immich) version src pnpmDeps;
 
   postPatch = ''
     local -r cli_version="$(jq -r .version cli/package.json)"
diff --git a/pkgs/by-name/im/immich/package.nix b/pkgs/by-name/im/immich/package.nix
index ab08cdd99396..03cca0bc4729 100644
--- a/pkgs/by-name/im/immich/package.nix
+++ b/pkgs/by-name/im/immich/package.nix
@@ -115,27 +115,27 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "immich";
-  version = "2.4.1";
+  version = "2.5.2";
 
   src = fetchFromGitHub {
     owner = "immich-app";
     repo = "immich";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-AOtKRK2vRQKoQAzU4P3h4tQebpWPF3zIWLcToKaU0Lc=";
+    hash = "sha256-e3gU2pSnbYQQU3SxGaJs8dwfTMpeGTz7dcFCmc7Pi/o=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     inherit pnpm;
-    fetcherVersion = 2;
-    hash = "sha256-1UhyEHSGNWSNvzDJUSojIoIJA/Gz8KMAGMsL2XZfS5s=";
+    fetcherVersion = 3;
+    hash = "sha256-+2rm184Hb+S75VyDn3FU36M/3SH2hUDYbKotIGopmvU=";
   };
 
   postPatch = ''
     # pg_dumpall fails without database root access
     # see https://github.com/immich-app/immich/issues/13971
-    substituteInPlace server/src/services/backup.service.ts \
-      --replace-fail '`/usr/lib/postgresql/''${databaseMajorVersion}/bin/pg_dumpall`' '`pg_dump`'
+    substituteInPlace server/src/utils/database-backups.ts \
+      --replace-fail '`/usr/lib/postgresql/''${databaseMajorVersion}/bin/''${bin}`' '`''${bin}`'
   '';
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/in/incus-ui-canonical/package.nix b/pkgs/by-name/in/incus-ui-canonical/package.nix
index 8de8f7b9ff26..4f2f2e214579 100644
--- a/pkgs/by-name/in/incus-ui-canonical/package.nix
+++ b/pkgs/by-name/in/incus-ui-canonical/package.nix
@@ -20,14 +20,14 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "incus-ui-canonical";
-  version = "0.19.2";
+  version = "0.19.3";
 
   src = fetchFromGitHub {
     owner = "zabbly";
     repo = "incus-ui-canonical";
     # only use tags prefixed by incus- they are the tested fork versions
     tag = "incus-${version}";
-    hash = "sha256-Bi0+r9CCXqeyKEjgJT75oWxKmQeziaE62TjcvS5ZkKU=";
+    hash = "sha256-wibBuvGABMGTjuYFYjV9mbNVNXm78LX9VAgM2H8b7e4=";
   };
 
   offlineCache = fetchYarnDeps {
diff --git a/pkgs/by-name/in/inotify-tools/package.nix b/pkgs/by-name/in/inotify-tools/package.nix
index 6df57cf4265c..cde4f7bae819 100644
--- a/pkgs/by-name/in/inotify-tools/package.nix
+++ b/pkgs/by-name/in/inotify-tools/package.nix
@@ -34,7 +34,6 @@ stdenv.mkDerivation (finalAttrs: {
     maintainers = with lib.maintainers; [
       marcweber
       pSub
-      shamilton
     ];
     platforms = lib.platforms.linux;
   };
diff --git a/pkgs/by-name/ko/komga/package.nix b/pkgs/by-name/ko/komga/package.nix
index 693cca332a72..db9d6e550bdb 100644
--- a/pkgs/by-name/ko/komga/package.nix
+++ b/pkgs/by-name/ko/komga/package.nix
@@ -10,11 +10,11 @@
 
 stdenvNoCC.mkDerivation rec {
   pname = "komga";
-  version = "1.23.6";
+  version = "1.24.0";
 
   src = fetchurl {
     url = "https://github.com/gotson/${pname}/releases/download/${version}/${pname}-${version}.jar";
-    sha256 = "sha256-MU3U9vFtFVUBOKtynwteQfvsCCsyoGHIKwc+0XqDswY=";
+    sha256 = "sha256-1tg5etnXFOgOD6BekYErX7t7lnptR4tuiKwFO9tWk1U=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/kr/kraft/package.nix b/pkgs/by-name/kr/kraft/package.nix
index 4f0633489e03..fc2597ae3d3d 100644
--- a/pkgs/by-name/kr/kraft/package.nix
+++ b/pkgs/by-name/kr/kraft/package.nix
@@ -14,7 +14,7 @@
 }:
 
 buildGoModule rec {
-  pname = "kraftkit";
+  pname = "kraft";
   version = "0.12.5";
 
   src = fetchFromGitHub {
diff --git a/pkgs/by-name/li/libks/package.nix b/pkgs/by-name/li/libks/package.nix
index e2e30187b84c..b7bbc3ea9728 100644
--- a/pkgs/by-name/li/libks/package.nix
+++ b/pkgs/by-name/li/libks/package.nix
@@ -15,13 +15,13 @@
 
 stdenv.mkDerivation rec {
   pname = "libks";
-  version = "2.0.9";
+  version = "2.0.10";
 
   src = fetchFromGitHub {
     owner = "signalwire";
     repo = "libks";
     tag = "v${version}";
-    hash = "sha256-XnNyzH+VdBHligJ5+ct835Mekw2DbxMboC06Umm2Zak=";
+    hash = "sha256-oLf1ECSKa6KLTA8MO0le44eEDaLmPz/RHoLa8ZSwjWs=";
   };
 
   patches = [
diff --git a/pkgs/by-name/li/librelane/package.nix b/pkgs/by-name/li/librelane/package.nix
index e0dc5de554e7..58646cd16ff8 100644
--- a/pkgs/by-name/li/librelane/package.nix
+++ b/pkgs/by-name/li/librelane/package.nix
@@ -22,14 +22,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "librelane";
-  version = "3.0.0.dev47-unstable-2026-01-12";
+  version = "3.0.0.dev49";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "librelane";
     repo = "librelane";
-    rev = "f1efecac3151f3275fa2ea7d656f8ea7e3225a9d";
-    hash = "sha256-XZHypZ+Ht1Zbb0N9VBUmrZKwWuqYA0/w7DpZBOO9KU8=";
+    tag = finalAttrs.version;
+    hash = "sha256-g6bQMg9W0gbvJzVvO4ESeAtswbBoUVY3NXLK4UdOcGs=";
   };
 
   build-system = [
diff --git a/pkgs/by-name/li/libudev-zero/package.nix b/pkgs/by-name/li/libudev-zero/package.nix
index 8d7630fe6bf2..b2a599de97e1 100644
--- a/pkgs/by-name/li/libudev-zero/package.nix
+++ b/pkgs/by-name/li/libudev-zero/package.nix
@@ -37,7 +37,6 @@ stdenv.mkDerivation (finalAttrs: {
     changelog = "https://github.com/illiliti/libudev-zero/releases/tag/${finalAttrs.version}";
     maintainers = with lib.maintainers; [
       qyliss
-      shamilton
     ];
     license = lib.licenses.isc;
     pkgConfigModules = [ "libudev" ];
diff --git a/pkgs/by-name/li/libvgm/package.nix b/pkgs/by-name/li/libvgm/package.nix
index c3dfc9c0de40..3a4d01e9886c 100644
--- a/pkgs/by-name/li/libvgm/package.nix
+++ b/pkgs/by-name/li/libvgm/package.nix
@@ -38,13 +38,13 @@ assert enableTools -> enableAudio && enableEmulation && enableLibplayer;
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libvgm";
-  version = "0-unstable-2026-01-12";
+  version = "0-unstable-2026-01-21";
 
   src = fetchFromGitHub {
     owner = "ValleyBell";
     repo = "libvgm";
-    rev = "c9b52727946f3a41ddf78d11b817e109eebf6171";
-    hash = "sha256-PhRfdUILkDu39WBH3N5Nu2Qd6g8yA093W8AKocbZAWM=";
+    rev = "57585ea7a53f56bcf5a56071068c6ef9154ca299";
+    hash = "sha256-9IJH5rL+P2c91CUWZ4LgTzCptszHri0eVOWv8Rx+iqI=";
   };
 
   outputs = [
diff --git a/pkgs/by-name/ll/llama-cpp/package.nix b/pkgs/by-name/ll/llama-cpp/package.nix
index 059b3da0ec0b..8298d76cba00 100644
--- a/pkgs/by-name/ll/llama-cpp/package.nix
+++ b/pkgs/by-name/ll/llama-cpp/package.nix
@@ -80,6 +80,11 @@ effectiveStdenv.mkDerivation (finalAttrs: {
   pname = "llama-cpp";
   version = "7823";
 
+  outputs = [
+    "out"
+    "dev"
+  ];
+
   src = fetchFromGitHub {
     owner = "ggml-org";
     repo = "llama.cpp";
diff --git a/pkgs/by-name/lo/local-content-share/package.nix b/pkgs/by-name/lo/local-content-share/package.nix
index 92e62d0a4025..04c6dbb67249 100644
--- a/pkgs/by-name/lo/local-content-share/package.nix
+++ b/pkgs/by-name/lo/local-content-share/package.nix
@@ -7,13 +7,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "local-content-share";
-  version = "36";
+  version = "37";
 
   src = fetchFromGitHub {
     owner = "Tanq16";
     repo = "local-content-share";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-FINKuRzpAwFV2F5FFrM0B3z7sx3PG+Ql8dETwykgyu4=";
+    hash = "sha256-M7C95scyTBcmfH96BEWSK3wQFzv491ADw1SH9IvmwiY=";
   };
 
   vendorHash = null;
diff --git a/pkgs/by-name/lu/lunar-client/package.nix b/pkgs/by-name/lu/lunar-client/package.nix
index e945598dbe7d..f8588e7d52b1 100644
--- a/pkgs/by-name/lu/lunar-client/package.nix
+++ b/pkgs/by-name/lu/lunar-client/package.nix
@@ -7,11 +7,11 @@
 
 appimageTools.wrapType2 rec {
   pname = "lunarclient";
-  version = "3.5.18";
+  version = "3.5.19";
 
   src = fetchurl {
     url = "https://launcherupdates.lunarclientcdn.com/Lunar%20Client-${version}-ow.AppImage";
-    hash = "sha512-TdxJM290M+3X8KJ+agly6umNoje8jYlUYz/pVmUAOBp1G8nTtekoYWi+2WZn8r2tJ94STZ3nkilLAA9CoLhqfw==";
+    hash = "sha512-Dae5PPrnuA6zj9CyZ12b6oBaMLx8M0rBqwhj/PlBVj82GQTyYvBUChSj/qdR1AXVPJXb47Hc2yQ4eQwNufgIfQ==";
   };
 
   nativeBuildInputs = [ makeWrapper ];
diff --git a/pkgs/by-name/lx/lx-music-desktop/electron-version.patch b/pkgs/by-name/lx/lx-music-desktop/electron-version.patch
new file mode 100644
index 000000000000..946df5bfc3fd
--- /dev/null
+++ b/pkgs/by-name/lx/lx-music-desktop/electron-version.patch
@@ -0,0 +1,339 @@
+diff --git a/package-lock.json b/package-lock.json
+index bc450db..83dff09 100644
+--- a/package-lock.json
++++ b/package-lock.json
+@@ -59,12 +59,12 @@
+         "css-loader": "^7.1.2",
+         "css-minimizer-webpack-plugin": "^7.0.2",
+         "del": "^6.1.1",
+-        "electron": "37.6.1",
+-        "electron-builder": "^26.3.2",
++        "electron": "40.0.0",
++        "electron-builder": "^26.4.0",
+         "electron-debug": "^3.2.0",
+         "electron-devtools-installer": "github:lyswhut/electron-devtools-installer#64596d615c1fc891eefd8aef1dfcb2c87aaadf03",
+         "electron-to-chromium": "^1.5.262",
+-        "electron-updater": "6.7.2",
++        "electron-updater": "6.7.3",
+         "eslint": "^8.57.1",
+         "eslint-config-standard": "^17.1.0",
+         "eslint-config-standard-with-typescript": "^43.0.1",
+@@ -2059,9 +2059,9 @@
+       }
+     },
+     "node_modules/@electron/universal/node_modules/fs-extra": {
+-      "version": "11.3.2",
+-      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.2.tgz",
+-      "integrity": "sha512-Xr9F6z6up6Ws+NjzMCZc6WXg2YFRlrLP9NQDO3VQrWrfiojdhS56TzueT88ze0uBdCTwEIhQ3ptnmKeWGFAe0A==",
++      "version": "11.3.3",
++      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.3.tgz",
++      "integrity": "sha512-VWSRii4t0AFm6ixFFmLLx1t7wS1gh+ckoa84aOeapGum0h+EZd1EhEumSB+ZdDLnEPuucsVB9oB7cxJHap6Afg==",
+       "dev": true,
+       "license": "MIT",
+       "dependencies": {
+@@ -2119,9 +2119,9 @@
+       }
+     },
+     "node_modules/@electron/windows-sign/node_modules/fs-extra": {
+-      "version": "11.3.2",
+-      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.2.tgz",
+-      "integrity": "sha512-Xr9F6z6up6Ws+NjzMCZc6WXg2YFRlrLP9NQDO3VQrWrfiojdhS56TzueT88ze0uBdCTwEIhQ3ptnmKeWGFAe0A==",
++      "version": "11.3.3",
++      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.3.tgz",
++      "integrity": "sha512-VWSRii4t0AFm6ixFFmLLx1t7wS1gh+ckoa84aOeapGum0h+EZd1EhEumSB+ZdDLnEPuucsVB9oB7cxJHap6Afg==",
+       "dev": true,
+       "license": "MIT",
+       "optional": true,
+@@ -4189,9 +4189,9 @@
+       "license": "MIT"
+     },
+     "node_modules/app-builder-lib": {
+-      "version": "26.3.2",
+-      "resolved": "https://registry.npmjs.org/app-builder-lib/-/app-builder-lib-26.3.2.tgz",
+-      "integrity": "sha512-ZG4wzxbmmiLUm+W0wXMlMI0LHXK/fsR+Rf21SUs7avujGQ7ZCFLgmIvvWaQ69u1EFnSkYZ2sefKqk1yW/HXeuw==",
++      "version": "26.4.0",
++      "resolved": "https://registry.npmjs.org/app-builder-lib/-/app-builder-lib-26.4.0.tgz",
++      "integrity": "sha512-Uas6hNe99KzP3xPWxh5LGlH8kWIVjZixzmMJHNB9+6hPyDpjc7NQMkVgi16rQDdpCFy22ZU5sp8ow7tvjeMgYQ==",
+       "dev": true,
+       "license": "MIT",
+       "dependencies": {
+@@ -4205,7 +4205,7 @@
+         "@malept/flatpak-bundler": "^0.4.0",
+         "@types/fs-extra": "9.0.13",
+         "async-exit-hook": "^2.0.1",
+-        "builder-util": "26.3.1",
++        "builder-util": "26.3.4",
+         "builder-util-runtime": "9.5.1",
+         "chromium-pickle-js": "^0.2.0",
+         "ci-info": "4.3.1",
+@@ -4213,7 +4213,7 @@
+         "dotenv": "^16.4.5",
+         "dotenv-expand": "^11.0.6",
+         "ejs": "^3.1.8",
+-        "electron-publish": "26.3.1",
++        "electron-publish": "26.3.4",
+         "fs-extra": "^10.1.0",
+         "hosted-git-info": "^4.1.0",
+         "isbinaryfile": "^5.0.0",
+@@ -4224,7 +4224,7 @@
+         "minimatch": "^10.0.3",
+         "plist": "3.1.0",
+         "resedit": "^1.7.0",
+-        "semver": "7.7.2",
++        "semver": "~7.7.3",
+         "tar": "^6.1.12",
+         "temp-file": "^3.4.0",
+         "tiny-async-pool": "1.3.0",
+@@ -4234,8 +4234,8 @@
+         "node": ">=14.0.0"
+       },
+       "peerDependencies": {
+-        "dmg-builder": "26.3.2",
+-        "electron-builder-squirrel-windows": "26.3.2"
++        "dmg-builder": "26.4.0",
++        "electron-builder-squirrel-windows": "26.4.0"
+       }
+     },
+     "node_modules/app-builder-lib/node_modules/fs-extra": {
+@@ -4994,9 +4994,9 @@
+       }
+     },
+     "node_modules/builder-util": {
+-      "version": "26.3.1",
+-      "resolved": "https://registry.npmjs.org/builder-util/-/builder-util-26.3.1.tgz",
+-      "integrity": "sha512-pplZEYBx1g15qvIOshpR1WTwjAwQM4ukhGgSNdYPnbuM6wLePq3+njy1sGfekCrJmUP+2xfuwuT9zEoUWfX5zQ==",
++      "version": "26.3.4",
++      "resolved": "https://registry.npmjs.org/builder-util/-/builder-util-26.3.4.tgz",
++      "integrity": "sha512-aRn88mYMktHxzdqDMF6Ayj0rKoX+ZogJ75Ck7RrIqbY/ad0HBvnS2xA4uHfzrGr5D2aLL3vU6OBEH4p0KMV2XQ==",
+       "dev": true,
+       "license": "MIT",
+       "dependencies": {
+@@ -5005,7 +5005,6 @@
+         "app-builder-bin": "5.0.0-alpha.12",
+         "builder-util-runtime": "9.5.1",
+         "chalk": "^4.1.2",
+-        "ci-info": "^4.2.0",
+         "cross-spawn": "^7.0.6",
+         "debug": "^4.3.4",
+         "fs-extra": "^10.1.0",
+@@ -5198,9 +5197,9 @@
+       }
+     },
+     "node_modules/cacache/node_modules/tar": {
+-      "version": "7.5.2",
+-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.2.tgz",
+-      "integrity": "sha512-7NyxrTE4Anh8km8iEy7o0QYPs+0JKBTj5ZaqHg6B39erLg0qYXN3BijtShwbsNSvQ+LN75+KV+C4QR/f6Gwnpg==",
++      "version": "7.5.7",
++      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.7.tgz",
++      "integrity": "sha512-fov56fJiRuThVFXD6o6/Q354S7pnWMJIVlDBYijsTNx6jKSE4pvrDTs6lUnmGvNyfJwFQQwWy3owKz1ucIhveQ==",
+       "dev": true,
+       "license": "BlueOak-1.0.0",
+       "dependencies": {
+@@ -6665,14 +6664,14 @@
+       }
+     },
+     "node_modules/dmg-builder": {
+-      "version": "26.3.2",
+-      "resolved": "https://registry.npmjs.org/dmg-builder/-/dmg-builder-26.3.2.tgz",
+-      "integrity": "sha512-UM7/WRmESXnKXBShmKJ+xiEQ3U82/zb/tyaCKGn4Y4cf+WynLzQPeBToZtrIXTs3ZPyJQBIf+btkoCzVVnhO4g==",
++      "version": "26.4.0",
++      "resolved": "https://registry.npmjs.org/dmg-builder/-/dmg-builder-26.4.0.tgz",
++      "integrity": "sha512-ce4Ogns4VMeisIuCSK0C62umG0lFy012jd8LMZ6w/veHUeX4fqfDrGe+HTWALAEwK6JwKP+dhPvizhArSOsFbg==",
+       "dev": true,
+       "license": "MIT",
+       "dependencies": {
+-        "app-builder-lib": "26.3.2",
+-        "builder-util": "26.3.1",
++        "app-builder-lib": "26.4.0",
++        "builder-util": "26.3.4",
+         "fs-extra": "^10.1.0",
+         "iconv-lite": "^0.6.2",
+         "js-yaml": "^4.1.0"
+@@ -6966,15 +6965,15 @@
+       }
+     },
+     "node_modules/electron": {
+-      "version": "37.6.1",
+-      "resolved": "https://registry.npmjs.org/electron/-/electron-37.6.1.tgz",
+-      "integrity": "sha512-aHtJVNjqf0lk7dlPoc1X+fMBpZtLn+XGvP6IYc3gooTwsD1D/Ic2SBRC9SnIk6LkWTsDaSF9jgH1d9Q7eABy/Q==",
++      "version": "40.0.0",
++      "resolved": "https://registry.npmjs.org/electron/-/electron-40.0.0.tgz",
++      "integrity": "sha512-UyBy5yJ0/wm4gNugCtNPjvddjAknMTuXR2aCHioXicH7aKRKGDBPp4xqTEi/doVcB3R+MN3wfU9o8d/9pwgK2A==",
+       "dev": true,
+       "hasInstallScript": true,
+       "license": "MIT",
+       "dependencies": {
+         "@electron/get": "^2.0.0",
+-        "@types/node": "^22.7.7",
++        "@types/node": "^24.9.0",
+         "extract-zip": "^2.0.1"
+       },
+       "bin": {
+@@ -6985,18 +6984,18 @@
+       }
+     },
+     "node_modules/electron-builder": {
+-      "version": "26.3.2",
+-      "resolved": "https://registry.npmjs.org/electron-builder/-/electron-builder-26.3.2.tgz",
+-      "integrity": "sha512-Lbfw8KHx1gxmg0tRFKb67hdvqzaz+ha4Ab5l6iQWo3o2yoVImiiJeifs8PSM5evo3BQWCLKtSQaSdZxg1ldIdg==",
++      "version": "26.4.0",
++      "resolved": "https://registry.npmjs.org/electron-builder/-/electron-builder-26.4.0.tgz",
++      "integrity": "sha512-FCUqvdq2AULL+Db2SUGgjOYTbrgkPxZtCjqIZGnjH9p29pTWyesQqBIfvQBKa6ewqde87aWl49n/WyI/NyUBog==",
+       "dev": true,
+       "license": "MIT",
+       "dependencies": {
+-        "app-builder-lib": "26.3.2",
+-        "builder-util": "26.3.1",
++        "app-builder-lib": "26.4.0",
++        "builder-util": "26.3.4",
+         "builder-util-runtime": "9.5.1",
+         "chalk": "^4.1.2",
+         "ci-info": "^4.2.0",
+-        "dmg-builder": "26.3.2",
++        "dmg-builder": "26.4.0",
+         "fs-extra": "^10.1.0",
+         "lazy-val": "^1.0.5",
+         "simple-update-notifier": "2.0.0",
+@@ -7011,15 +7010,15 @@
+       }
+     },
+     "node_modules/electron-builder-squirrel-windows": {
+-      "version": "26.3.2",
+-      "resolved": "https://registry.npmjs.org/electron-builder-squirrel-windows/-/electron-builder-squirrel-windows-26.3.2.tgz",
+-      "integrity": "sha512-SgvOmoulc1Ezmmi2aIh7//Fs9/Yr6B9L55MeBLy3A5Fn1dUnOF7Px4xNBFiw+fEFxrFCej3cCo2JqGOcBi31Pg==",
++      "version": "26.4.0",
++      "resolved": "https://registry.npmjs.org/electron-builder-squirrel-windows/-/electron-builder-squirrel-windows-26.4.0.tgz",
++      "integrity": "sha512-7dvalY38xBzWNaoOJ4sqy2aGIEpl2S1gLPkkB0MHu1Hu5xKQ82il1mKSFlXs6fLpXUso/NmyjdHGlSHDRoG8/w==",
+       "dev": true,
+       "license": "MIT",
+       "peer": true,
+       "dependencies": {
+-        "app-builder-lib": "26.3.2",
+-        "builder-util": "26.3.1",
++        "app-builder-lib": "26.4.0",
++        "builder-util": "26.3.4",
+         "electron-winstaller": "5.4.0"
+       }
+     },
+@@ -7142,14 +7141,14 @@
+       }
+     },
+     "node_modules/electron-publish": {
+-      "version": "26.3.1",
+-      "resolved": "https://registry.npmjs.org/electron-publish/-/electron-publish-26.3.1.tgz",
+-      "integrity": "sha512-XYGYL/fpQULLW9slTVPelaUOGlKfOTmV2Uda3K+qzFzvNnkGJCj7L0nLVvMuj5cgxpAX+3BhO5HOUb4rv6jikA==",
++      "version": "26.3.4",
++      "resolved": "https://registry.npmjs.org/electron-publish/-/electron-publish-26.3.4.tgz",
++      "integrity": "sha512-5/ouDPb73SkKuay2EXisPG60LTFTMNHWo2WLrK5GDphnWK9UC+yzYrzVeydj078Yk4WUXi0+TaaZsNd6Zt5k/A==",
+       "dev": true,
+       "license": "MIT",
+       "dependencies": {
+         "@types/fs-extra": "^9.0.11",
+-        "builder-util": "26.3.1",
++        "builder-util": "26.3.4",
+         "builder-util-runtime": "9.5.1",
+         "chalk": "^4.1.2",
+         "form-data": "^4.0.0",
+@@ -7204,9 +7203,9 @@
+       "license": "ISC"
+     },
+     "node_modules/electron-updater": {
+-      "version": "6.7.2",
+-      "resolved": "https://registry.npmjs.org/electron-updater/-/electron-updater-6.7.2.tgz",
+-      "integrity": "sha512-URw19f7afuB5HQOdxhu5wdnWE+w/lTGsXJ3RdObSJXIkW0i9r3ZUWrd1CjggTrD0qzEuxBODe4VFPM8OBg4qEA==",
++      "version": "6.7.3",
++      "resolved": "https://registry.npmjs.org/electron-updater/-/electron-updater-6.7.3.tgz",
++      "integrity": "sha512-EgkT8Z9noqXKbwc3u5FkJA+r48jwZ5DTUiOkJMOTEEH//n5Am6wfQGz7nvSFEA2oIAMv9jRzn5JKTyWeSKOPgg==",
+       "dev": true,
+       "license": "MIT",
+       "dependencies": {
+@@ -7216,7 +7215,7 @@
+         "lazy-val": "^1.0.5",
+         "lodash.escaperegexp": "^4.1.2",
+         "lodash.isequal": "^4.5.0",
+-        "semver": "7.7.2",
++        "semver": "~7.7.3",
+         "tiny-typed-emitter": "^2.1.0"
+       }
+     },
+@@ -7297,15 +7296,22 @@
+       }
+     },
+     "node_modules/electron/node_modules/@types/node": {
+-      "version": "22.17.0",
+-      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.17.0.tgz",
+-      "integrity": "sha512-bbAKTCqX5aNVryi7qXVMi+OkB3w/OyblodicMbvE38blyAz7GxXf6XYhklokijuPwwVg9sDLKRxt0ZHXQwZVfQ==",
++      "version": "24.10.9",
++      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.10.9.tgz",
++      "integrity": "sha512-ne4A0IpG3+2ETuREInjPNhUGis1SFjv1d5asp8MzEAGtOZeTeHVDOYqOgqfhvseqg/iXty2hjBf1zAOb7RNiNw==",
+       "dev": true,
+       "license": "MIT",
+       "dependencies": {
+-        "undici-types": "~6.21.0"
++        "undici-types": "~7.16.0"
+       }
+     },
++    "node_modules/electron/node_modules/undici-types": {
++      "version": "7.16.0",
++      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz",
++      "integrity": "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==",
++      "dev": true,
++      "license": "MIT"
++    },
+     "node_modules/emoji-regex": {
+       "version": "8.0.0",
+       "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
+@@ -11800,9 +11806,9 @@
+       }
+     },
+     "node_modules/node-abi": {
+-      "version": "4.12.0",
+-      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-4.12.0.tgz",
+-      "integrity": "sha512-bPSN9a/qIEiURzVVO/I7P/8oPeYTSl+vnvVZBXM/8XerKOgA3dMAIUjl+a+lz9VwTowwSKS3EMsgz/vWDXOkuQ==",
++      "version": "4.26.0",
++      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-4.26.0.tgz",
++      "integrity": "sha512-8QwIZqikRvDIkXS2S93LjzhsSPJuIbfaMETWH+Bx8oOT9Sa9UsUtBFQlc3gBNd1+QINjaTloitXr1W3dQLi9Iw==",
+       "license": "MIT",
+       "dependencies": {
+         "semver": "^7.6.3"
+@@ -11896,9 +11902,9 @@
+       }
+     },
+     "node_modules/node-gyp/node_modules/tar": {
+-      "version": "7.5.2",
+-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.2.tgz",
+-      "integrity": "sha512-7NyxrTE4Anh8km8iEy7o0QYPs+0JKBTj5ZaqHg6B39erLg0qYXN3BijtShwbsNSvQ+LN75+KV+C4QR/f6Gwnpg==",
++      "version": "7.5.7",
++      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.7.tgz",
++      "integrity": "sha512-fov56fJiRuThVFXD6o6/Q354S7pnWMJIVlDBYijsTNx6jKSE4pvrDTs6lUnmGvNyfJwFQQwWy3owKz1ucIhveQ==",
+       "dev": true,
+       "license": "BlueOak-1.0.0",
+       "dependencies": {
+@@ -16401,6 +16407,7 @@
+       "version": "6.2.1",
+       "resolved": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz",
+       "integrity": "sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==",
++      "deprecated": "Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exhorbitant rates) by contacting i@izs.me",
+       "dev": true,
+       "license": "ISC",
+       "dependencies": {
+diff --git a/package.json b/package.json
+index 3e5c884..96732dd 100644
+--- a/package.json
++++ b/package.json
+@@ -133,12 +133,12 @@
+     "css-loader": "^7.1.2",
+     "css-minimizer-webpack-plugin": "^7.0.2",
+     "del": "^6.1.1",
+-    "electron": "37.6.1",
+-    "electron-builder": "^26.3.2",
++    "electron": "40.0.0",
++    "electron-builder": "^26.4.0",
+     "electron-debug": "^3.2.0",
+     "electron-devtools-installer": "github:lyswhut/electron-devtools-installer#64596d615c1fc891eefd8aef1dfcb2c87aaadf03",
+     "electron-to-chromium": "^1.5.262",
+-    "electron-updater": "6.7.2",
++    "electron-updater": "6.7.3",
+     "eslint": "^8.57.1",
+     "eslint-config-standard": "^17.1.0",
+     "eslint-config-standard-with-typescript": "^43.0.1",
diff --git a/pkgs/by-name/lx/lx-music-desktop/package.nix b/pkgs/by-name/lx/lx-music-desktop/package.nix
index 7f18f975163a..6b3ae7b625fa 100644
--- a/pkgs/by-name/lx/lx-music-desktop/package.nix
+++ b/pkgs/by-name/lx/lx-music-desktop/package.nix
@@ -10,22 +10,22 @@
   makeWrapper,
   makeDesktopItem,
 
-  electron_37,
+  electron_40,
   nodejs_22,
   commandLineArgs ? "",
 }:
 
 let
-  electron = electron_37;
+  electron = electron_40;
 in
-buildNpmPackage rec {
+buildNpmPackage (finalAttrs: {
   pname = "lx-music-desktop";
   version = "2.12.0";
 
   src = fetchFromGitHub {
     owner = "lyswhut";
     repo = "lx-music-desktop";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-g4QVpymzoRKIq70aRLXGFmUmIpSiXIZThrp8fumBKTQ=";
   };
 
@@ -57,6 +57,7 @@ buildNpmPackage rec {
     (replaceVars ./electron-builder.patch {
       electron_version = electron.version;
     })
+    ./electron-version.patch
   ];
 
   nativeBuildInputs = [
@@ -67,7 +68,7 @@ buildNpmPackage rec {
   # Npm 11 (nodejs 24) can't resolve all dependencies from the prefetched cache.
   nodejs = nodejs_22;
 
-  npmDepsHash = "sha256-t6I8ch36Yh6N+qZy4/yr/gSyJ3qdyMWss5LbsagEFMQ=";
+  npmDepsHash = "sha256-BmrY7IXx6Z+sBAemYnOZUBMyLInENMOB6fh/4LoV80w=";
 
   makeCacheWritable = true;
 
@@ -123,11 +124,11 @@ buildNpmPackage rec {
     broken = stdenv.hostPlatform.isDarwin;
     description = "Music software based on Electron and Vue";
     homepage = "https://github.com/lyswhut/lx-music-desktop";
-    changelog = "https://github.com/lyswhut/lx-music-desktop/releases/tag/v${version}";
+    changelog = "https://github.com/lyswhut/lx-music-desktop/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.asl20;
     platforms = electron.meta.platforms;
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
     mainProgram = "lx-music-desktop";
     maintainers = with lib.maintainers; [ starryreverie ];
   };
-}
+})
diff --git a/pkgs/by-name/lx/lxsession/package.nix b/pkgs/by-name/lx/lxsession/package.nix
index 2395e96c45db..fc73628cf152 100644
--- a/pkgs/by-name/lx/lxsession/package.nix
+++ b/pkgs/by-name/lx/lxsession/package.nix
@@ -61,7 +61,6 @@ stdenv.mkDerivation (finalAttrs: {
     homepage = "https://wiki.lxde.org/en/LXSession";
     description = "Classic LXDE session manager";
     license = lib.licenses.gpl2Plus;
-    maintainers = [ lib.maintainers.shamilton ];
     platforms = lib.platforms.linux;
     mainProgram = "lxsession";
   };
diff --git a/pkgs/by-name/ma/magic-vlsi/package.nix b/pkgs/by-name/ma/magic-vlsi/package.nix
index 9595a29433eb..3ab4aaac897b 100644
--- a/pkgs/by-name/ma/magic-vlsi/package.nix
+++ b/pkgs/by-name/ma/magic-vlsi/package.nix
@@ -19,13 +19,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "magic-vlsi";
-  version = "8.3.573";
+  version = "8.3.593";
 
   src = fetchFromGitHub {
     owner = "RTimothyEdwards";
     repo = "magic";
     tag = finalAttrs.version;
-    hash = "sha256-P5qfMsn3DGHjeF7zsZWeG9j38C6j5UEwUqGyjaEVO1E=";
+    hash = "sha256-o9x29CDOtSQpQvTach6RaTJxRd2iTjyYi94ZjffUxVI=";
     leaveDotGit = true;
   };
 
diff --git a/pkgs/by-name/me/melonDS/package.nix b/pkgs/by-name/me/melonDS/package.nix
index 3e6f41599aff..344f0a82db11 100644
--- a/pkgs/by-name/me/melonDS/package.nix
+++ b/pkgs/by-name/me/melonDS/package.nix
@@ -108,7 +108,6 @@ stdenv.mkDerivation (finalAttrs: {
     maintainers = with lib.maintainers; [
       artemist
       benley
-      shamilton
     ];
     platforms = lib.platforms.linux ++ lib.platforms.darwin;
   };
diff --git a/pkgs/by-name/mi/mistral-rs/no-native-cpu.patch b/pkgs/by-name/mi/mistral-rs/no-native-cpu.patch
index 07fb98d089a6..bb2e37542d12 100644
--- a/pkgs/by-name/mi/mistral-rs/no-native-cpu.patch
+++ b/pkgs/by-name/mi/mistral-rs/no-native-cpu.patch
@@ -1,16 +1,20 @@
 diff --git a/.cargo/config.toml b/.cargo/config.toml
-index 4abaaa83d..edc4d6710 100644
+index dde3bc53f..693808c6e 100644
 --- a/.cargo/config.toml
 +++ b/.cargo/config.toml
-@@ -1,12 +1,5 @@
--[target.x86_64-unknown-linux-gnu]
--rustflags = ["-C", "target-cpu=native"]
--
--[target.aarch64-apple-darwin]
+@@ -1,15 +1,10 @@
 -[build]
 -rustflags = ["-C", "target-cpu=native"]
 -
- [target.wasm32-unknown-unknown]
- rustflags = ["-C", "target-feature=+simd128"]
+ [target.aarch64-apple-darwin]
+ rustflags = [
+-  "-C", "target-cpu=native",
+   "-C", "target-feature=+aes,+sha2,+fp16",
+ ]
  
  [target.x86_64-apple-darwin]
+ rustflags = [
+-  "-C", "target-cpu=native",
+   "-C", "target-feature=-avx,-avx2",
+ ]
+ 
diff --git a/pkgs/by-name/mi/mistral-rs/package.nix b/pkgs/by-name/mi/mistral-rs/package.nix
index 83f5f4946376..fb562cfe9ac5 100644
--- a/pkgs/by-name/mi/mistral-rs/package.nix
+++ b/pkgs/by-name/mi/mistral-rs/package.nix
@@ -48,7 +48,7 @@ let
     assert accelIsValid;
     (acceleration == "cuda") || (config.cudaSupport && acceleration == null);
 
-  minRequiredCudaCapability = "6.1"; # build fails with 6.0
+  minRequiredCudaCapability = "8.0"; # build fails with 7.5
   inherit (cudaPackages.flags) cudaCapabilities;
   cudaCapabilityString =
     if cudaCapability == null then
@@ -74,20 +74,29 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "mistral-rs";
-  version = "0.5.0";
+  version = "0.7.0";
 
   src = fetchFromGitHub {
     owner = "EricLBuehler";
     repo = "mistral.rs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-mkxgssJUBtM1DYOhFfj8YKlW61/gd0cgPtMze7YZ9L8=";
+    hash = "sha256-2gE3LRm2oy6H+y6dRNnwYIjlaG67it16bfhfTk4CUTc=";
   };
 
   patches = [
     ./no-native-cpu.patch
   ];
 
-  cargoHash = "sha256-YGGtS8gJJQKIgXxMWjO05ikSVdfVNs+cORbJ+Wf88y4=";
+  postPatch =
+    # LTO significantly increases the build time (12m -> 1h)
+    ''
+      substituteInPlace Cargo.toml \
+        --replace-fail \
+          "lto = true" \
+          "lto = false"
+    '';
+
+  cargoHash = "sha256-nktoMh07PfGJ156XrKa1N/icB634cr9ybsHq/y9zHKo=";
 
   nativeBuildInputs = [
     pkg-config
@@ -121,18 +130,22 @@ rustPlatform.buildRustPackage (finalAttrs: {
     ++ lib.optionals (hostPlatform.isDarwin && metalSupport) [ "metal" ];
 
   env = {
+    # metal (proprietary) is not available in the darwin sandbox.
+    # Hence, we must disable metal precompilation.
+    MISTRALRS_METAL_PRECOMPILE = 0;
+
     SWAGGER_UI_DOWNLOAD_URL =
       let
         # When updating:
         # - Look for the version of `utoipa-swagger-ui` at:
-        #   https://github.com/EricLBuehler/mistral.rs/blob/v<MISTRAL-RS-VERSION>/mistralrs-server/Cargo.toml
+        #   https://github.com/EricLBuehler/mistral.rs/blob/v<MISTRAL-RS-VERSION>/Cargo.toml
         # - Look at the corresponding version of `swagger-ui` at:
         #   https://github.com/juhaku/utoipa/blob/utoipa-swagger-ui-<UTOPIA-SWAGGER-UI-VERSION>/utoipa-swagger-ui/build.rs#L21-L22
-        swaggerUiVersion = "5.17.12";
+        swaggerUiVersion = "5.17.14";
 
         swaggerUi = fetchurl {
           url = "https://github.com/swagger-api/swagger-ui/archive/refs/tags/v${swaggerUiVersion}.zip";
-          hash = "sha256-HK4z/JI+1yq8BTBJveYXv9bpN/sXru7bn/8g5mf2B/I=";
+          hash = "sha256-SBJE0IEgl7Efuu73n3HZQrFxYX+cn5UU5jrL4T5xzNw=";
         };
       in
       "file://${swaggerUi}";
@@ -155,7 +168,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   ];
 
   # swagger-ui will once more be copied in the target directory during the check phase
-  # See https://github.com/juhaku/utoipa/blob/utoipa-swagger-ui-7.1.0/utoipa-swagger-ui/build.rs#L168
+  # See https://github.com/juhaku/utoipa/blob/utoipa-swagger-ui-9.0.2/utoipa-swagger-ui/build.rs#L168
   # Not deleting the existing unpacked archive leads to a `PermissionDenied` error
   preCheck = ''
     rm -rf target/${stdenv.hostPlatform.rust.cargoShortTarget}/release/build/
@@ -166,23 +179,23 @@ rustPlatform.buildRustPackage (finalAttrs: {
   # - `cargo check ... --features=metal` (on darwin) requires the sandbox to be completely disabled
   checkFeatures = [ ];
 
-  # Try to access internet
   checkFlags = [
+    # Try to access internet
     "--skip=gguf::gguf_tokenizer::tests::test_encode_decode_gpt2"
     "--skip=gguf::gguf_tokenizer::tests::test_encode_decode_llama"
     "--skip=util::tests::test_parse_image_url"
+    "--skip=utils::tiktoken::tests::test_tiktoken_conversion"
   ];
 
   nativeInstallCheckInputs = [
     versionCheckHook
   ];
-  versionCheckProgram = "${placeholder "out"}/bin/mistralrs-server";
-  doInstallCheck = true;
+  # When started, mistralrs tries to load libcuda.so from the driver which is not available in the sandbox
+  # mistralrs: error while loading shared libraries: libcuda.so.1: cannot open shared object file: No such file or directory
+  doInstallCheck = !cudaSupport;
 
   passthru = {
     tests = {
-      version = testers.testVersion { package = mistral-rs; };
-
       withMkl = lib.optionalAttrs (hostPlatform.isLinux && hostPlatform.isx86_64) (
         mistral-rs.override { acceleration = "mkl"; }
       );
@@ -200,7 +213,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     changelog = "https://github.com/EricLBuehler/mistral.rs/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ GaetanLepage ];
-    mainProgram = "mistralrs-server";
+    mainProgram = "mistralrs";
     platforms =
       if cudaSupport then
         lib.platforms.linux
diff --git a/pkgs/by-name/mo/mob/package.nix b/pkgs/by-name/mo/mob/package.nix
index fb86b4e7db9d..09ffdc666534 100644
--- a/pkgs/by-name/mo/mob/package.nix
+++ b/pkgs/by-name/mo/mob/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule rec {
   pname = "mob";
-  version = "5.4.0";
+  version = "5.4.2";
 
   src = fetchFromGitHub {
     owner = "remotemobprogramming";
     repo = "mob";
     rev = "v${version}";
-    hash = "sha256-OTKlasXswrZPfhdHD6tJt8z/e+BbgWa9LrKYhMbG/N4=";
+    hash = "sha256-zb2/uTFlzaR0AFElsYSjwYP2H4p05fDLK02A3awzIFY=";
   };
 
   vendorHash = null;
diff --git a/pkgs/by-name/mo/mongodb-compass/package.nix b/pkgs/by-name/mo/mongodb-compass/package.nix
index cfd62c808d71..43a42ada061f 100644
--- a/pkgs/by-name/mo/mongodb-compass/package.nix
+++ b/pkgs/by-name/mo/mongodb-compass/package.nix
@@ -52,7 +52,7 @@
 
 let
   pname = "mongodb-compass";
-  version = "1.49.0";
+  version = "1.49.1";
 
   selectSystem =
     attrs:
@@ -67,9 +67,9 @@ let
       }
     }";
     hash = selectSystem {
-      x86_64-linux = "sha256-XbVgFYkamZWCVcik3Hh0MiuwCHCi2NDKusT/CRO+q0E=";
-      x86_64-darwin = "sha256-mqnVYJ1wsC1qekEM9CYkZ05DTKHTDUHnoVytm/5QMw4=";
-      aarch64-darwin = "sha256-fVnW4mygJOgpqIHlO2qjMt9zdQaVBqFLKX4CL31KvXg=";
+      x86_64-linux = "sha256-6wjwV6KViRJiJiS+Cc3+sjLjKm/K7dGHUHAx9u5Rngk=";
+      x86_64-darwin = "sha256-v4lxvKMcLabMfshpBD4PqCXcyf/cJz+kn6qKIfLruNc=";
+      aarch64-darwin = "sha256-7FmRgA+5qHUiozGGlzGM/gWffzcpHwiOY52yGKvH5GY=";
     };
   };
 
diff --git a/pkgs/by-name/ms/ms-sys/package.nix b/pkgs/by-name/ms/ms-sys/package.nix
index 0d24e50480b1..98c9b8a6c24e 100644
--- a/pkgs/by-name/ms/ms-sys/package.nix
+++ b/pkgs/by-name/ms/ms-sys/package.nix
@@ -20,6 +20,11 @@ stdenv.mkDerivation (finalAttrs: {
 
   makeFlags = [ "PREFIX=$(out)" ];
 
+  outputs = [
+    "out"
+    "man"
+  ];
+
   meta = {
     description = "Program for writing Microsoft-compatible boot records";
     homepage = "https://ms-sys.sourceforge.net/";
diff --git a/pkgs/by-name/mu/mutt-wizard/package.nix b/pkgs/by-name/mu/mutt-wizard/package.nix
index 01224aa23f76..e8b249856a96 100644
--- a/pkgs/by-name/mu/mutt-wizard/package.nix
+++ b/pkgs/by-name/mu/mutt-wizard/package.nix
@@ -21,7 +21,6 @@ stdenvNoCC.mkDerivation rec {
     description = "System for automatically configuring mutt and isync";
     homepage = "https://github.com/LukeSmithxyz/mutt-wizard";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.unix;
   };
 }
diff --git a/pkgs/by-name/my/mysqltuner/package.nix b/pkgs/by-name/my/mysqltuner/package.nix
index 495befde4995..0455ba4c650b 100644
--- a/pkgs/by-name/my/mysqltuner/package.nix
+++ b/pkgs/by-name/my/mysqltuner/package.nix
@@ -38,7 +38,6 @@ stdenv.mkDerivation rec {
     license = lib.licenses.gpl3Plus;
     maintainers = with lib.maintainers; [
       peterhoeg
-      shamilton
     ];
     mainProgram = "mysqltuner";
   };
diff --git a/pkgs/by-name/n8/n8n-nodes-carbonejs/package.nix b/pkgs/by-name/n8/n8n-nodes-carbonejs/package.nix
new file mode 100644
index 000000000000..aa9c3c7b3a3d
--- /dev/null
+++ b/pkgs/by-name/n8/n8n-nodes-carbonejs/package.nix
@@ -0,0 +1,32 @@
+{
+  lib,
+  buildNpmPackage,
+  fetchFromGitHub,
+  nix-update-script,
+  n8n,
+}:
+
+buildNpmPackage (finalAttrs: {
+  pname = "n8n-nodes-carbonejs";
+  version = "1.2.0";
+
+  src = fetchFromGitHub {
+    owner = "jreyesr";
+    repo = "n8n-nodes-carbonejs";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Dvl+Kc04i+hQ8rciT7n3oS4rtgke+HEqUszJnQa7UA0=";
+  };
+
+  npmDepsHash = "sha256-3VwejuSFGvJWNsitLKfVVpB8GnkTrrf/LLobNCpy8gU=";
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    inherit (n8n.meta) platforms;
+    description = "n8n community node for rendering Word templates using Carbone.js";
+    homepage = "https://github.com/jreyesr/n8n-nodes-carbonejs";
+    changelog = "https://github.com/jreyesr/n8n-nodes-carbonejs/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ sweenu ];
+  };
+})
diff --git a/pkgs/by-name/n8/n8n/package.nix b/pkgs/by-name/n8/n8n/package.nix
index f5ba6023a0bc..bde1a8de630f 100644
--- a/pkgs/by-name/n8/n8n/package.nix
+++ b/pkgs/by-name/n8/n8n/package.nix
@@ -18,13 +18,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "n8n";
-  version = "2.4.4";
+  version = "2.4.6";
 
   src = fetchFromGitHub {
     owner = "n8n-io";
     repo = "n8n";
     tag = "n8n@${finalAttrs.version}";
-    hash = "sha256-cp8Wpgocj+wrHwTkTvVyldAn/E9IiYnC65vxAFAG/jg=";
+    hash = "sha256-9oJvi/Q2VwG2sVuWQXCBrAPVV03d89//78bOFN0IwLU=";
   };
 
   pnpmDeps = fetchPnpmDeps {
diff --git a/pkgs/by-name/nc/ncgopher/package.nix b/pkgs/by-name/nc/ncgopher/package.nix
index 42e6fe8a8341..93cdefb3abf9 100644
--- a/pkgs/by-name/nc/ncgopher/package.nix
+++ b/pkgs/by-name/nc/ncgopher/package.nix
@@ -37,7 +37,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     description = "Gopher and gemini client for the modern internet";
     homepage = "https://github.com/jansc/ncgopher";
     license = lib.licenses.bsd2;
-    maintainers = with lib.maintainers; [ shamilton ];
+    maintainers = with lib.maintainers; [ jrrom ];
     platforms = lib.platforms.linux;
     mainProgram = "ncgopher";
   };
diff --git a/pkgs/by-name/ne/net-snmp/package.nix b/pkgs/by-name/ne/net-snmp/package.nix
index b48964047045..adc075842649 100644
--- a/pkgs/by-name/ne/net-snmp/package.nix
+++ b/pkgs/by-name/ne/net-snmp/package.nix
@@ -48,6 +48,13 @@ stdenv.mkDerivation rec {
   ]
   ++ lib.optional stdenv.hostPlatform.isLinux "--with-mnttab=/proc/mounts";
 
+  env.NIX_CFLAGS_COMPILE = toString (
+    lib.optionals stdenv.hostPlatform.isDarwin [
+      # https://github.com/net-snmp/net-snmp/pull/1053
+      "-Wno-declaration-after-statement"
+    ]
+  );
+
   postPatch = ''
     substituteInPlace testing/fulltests/support/simple_TESTCONF.sh --replace-fail "/bin/netstat" "${net-tools}/bin/netstat"
   '';
diff --git a/pkgs/by-name/ni/nikto/package.nix b/pkgs/by-name/ni/nikto/package.nix
index fb5fb4ff09b3..4018e6f7f788 100644
--- a/pkgs/by-name/ni/nikto/package.nix
+++ b/pkgs/by-name/ni/nikto/package.nix
@@ -65,7 +65,6 @@ stdenv.mkDerivation rec {
     license = lib.licenses.gpl2Plus;
     homepage = "https://cirt.net/Nikto2";
     changelog = "https://github.com/sullo/nikto/releases/tag/${version}";
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.unix;
   };
 }
diff --git a/pkgs/by-name/ni/nixtamal/package.nix b/pkgs/by-name/ni/nixtamal/package.nix
index b09b8969a834..7f525b9ddf78 100644
--- a/pkgs/by-name/ni/nixtamal/package.nix
+++ b/pkgs/by-name/ni/nixtamal/package.nix
@@ -1,8 +1,10 @@
 {
   lib,
+  stdenv,
   fetchdarcs,
   python3Packages,
   ocamlPackages,
+  darwin,
   makeBinaryWrapper,
   coreutils,
   nix-prefetch-darcs,
@@ -31,6 +33,9 @@ ocamlPackages.buildDunePackage (finalAttrs: {
     # For manpages
     python3Packages.docutils
     python3Packages.pygments
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    darwin.sigtool
   ];
 
   buildInputs = with ocamlPackages; [
diff --git a/pkgs/by-name/no/noctalia-shell/package.nix b/pkgs/by-name/no/noctalia-shell/package.nix
index 8ec1219c4ab1..f622042c6b11 100644
--- a/pkgs/by-name/no/noctalia-shell/package.nix
+++ b/pkgs/by-name/no/noctalia-shell/package.nix
@@ -13,15 +13,14 @@
   cava,
   cliphist,
   ddcutil,
-  matugen,
   wlsunset,
   wl-clipboard,
   imagemagick,
   wget,
   gpu-screen-recorder,
+  python3,
 
   # calendar support
-  python3,
   evolution-data-server,
   libical,
   glib,
@@ -33,27 +32,26 @@
   cavaSupport ? true,
   cliphistSupport ? true,
   ddcutilSupport ? true,
-  matugenSupport ? true,
   wlsunsetSupport ? true,
   wl-clipboardSupport ? true,
   imagemagickSupport ? true,
-  gpuScreenRecorderSupport ? stdenvNoCC.hostPlatform.system == "x86_64-linux",
   calendarSupport ? false,
+  # gpu-screen-recorder support was moved to an optional plugin in v4.0.0
+  gpuScreenRecorderSupport ? false,
 }:
 let
   runtimeDeps = [
     wget
+    (python3.withPackages (pp: lib.optional calendarSupport pp.pygobject3))
   ]
   ++ lib.optional brightnessctlSupport brightnessctl
   ++ lib.optional cavaSupport cava
   ++ lib.optional cliphistSupport cliphist
   ++ lib.optional ddcutilSupport ddcutil
-  ++ lib.optional matugenSupport matugen
   ++ lib.optional wlsunsetSupport wlsunset
   ++ lib.optional wl-clipboardSupport wl-clipboard
   ++ lib.optional imagemagickSupport imagemagick
-  ++ lib.optional gpuScreenRecorderSupport gpu-screen-recorder
-  ++ lib.optional calendarSupport (python3.withPackages (pp: [ pp.pygobject3 ]));
+  ++ lib.optional gpuScreenRecorderSupport gpu-screen-recorder;
 
   giTypelibPath = lib.makeSearchPath "lib/girepository-1.0" [
     evolution-data-server
@@ -66,13 +64,13 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "noctalia-shell";
-  version = "4.1.1";
+  version = "4.2.5";
 
   src = fetchFromGitHub {
     owner = "noctalia-dev";
     repo = "noctalia-shell";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-/7yEiXC2Z/Yk/p7aNgChkAa7BgPRlV5/0z8+jZXH8e8=";
+    hash = "sha256-SHavMqGRv78sND/wQ53OhBBE2VBhgE3bSNRxxo5z7FE=";
   };
 
   nativeBuildInputs = [
@@ -91,11 +89,10 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     ln -s ${quickshell}/bin/qs $out/bin/noctalia-shell
 
     cp -R \
-      Assets Bin Commons CREDITS.md Helpers Modules Services Shaders Widgets shell.qml \
+      Assets Commons CREDITS.md Helpers Modules Services Shaders Scripts Widgets shell.qml \
       $out/share/noctalia-shell
 
     rm -R $out/share/noctalia-shell/Assets/Screenshots
-    rm -R $out/share/noctalia-shell/Bin/dev
 
     runHook postInstall
   '';
diff --git a/pkgs/by-name/nr/nrsc5/package.nix b/pkgs/by-name/nr/nrsc5/package.nix
index e006bdb732ac..d3dff9471d3f 100644
--- a/pkgs/by-name/nr/nrsc5/package.nix
+++ b/pkgs/by-name/nr/nrsc5/package.nix
@@ -21,13 +21,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "nrsc5";
-  version = "3.0.1";
+  version = "3.1.0";
 
   src = fetchFromGitHub {
     owner = "theori-io";
     repo = "nrsc5";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-chLoCXbEQaIrSHLQAm0++NGNYuQNCseSCR37qjXwW04=";
+    hash = "sha256-xfgTUIaXt/nb5hNiwi4ws7pzeVGOW72LDSIXg+yLwkw=";
   };
 
   postUnpack = ''
diff --git a/pkgs/by-name/nu/numworks-udev-rules/package.nix b/pkgs/by-name/nu/numworks-udev-rules/package.nix
index efa40f4bff5b..1903883ca604 100644
--- a/pkgs/by-name/nu/numworks-udev-rules/package.nix
+++ b/pkgs/by-name/nu/numworks-udev-rules/package.nix
@@ -25,7 +25,6 @@ stdenv.mkDerivation rec {
     description = "Udev rules for Numworks calculators";
     homepage = "https://numworks.com";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.linux;
   };
 }
diff --git a/pkgs/by-name/oh/oh-my-zsh/package.nix b/pkgs/by-name/oh/oh-my-zsh/package.nix
index a207dc662086..4c6eb3039c5b 100644
--- a/pkgs/by-name/oh/oh-my-zsh/package.nix
+++ b/pkgs/by-name/oh/oh-my-zsh/package.nix
@@ -19,14 +19,14 @@
 }:
 
 stdenv.mkDerivation rec {
-  version = "2026-01-20";
+  version = "2026-01-26";
   pname = "oh-my-zsh";
 
   src = fetchFromGitHub {
     owner = "ohmyzsh";
     repo = "ohmyzsh";
-    rev = "e0766905519fbc7982a590a195ee7c3e8bb594e8";
-    sha256 = "sha256-6sTLyZ4UztU2PDpyiAZx1Q5smY+vrZdGbgVRNmek7nM=";
+    rev = "67cd8c4673512d08238461f7ce00715da01665d4";
+    sha256 = "sha256-xFXPUUTdF2B/PO5phZA/kptrhux89daB172Oj9UKMYM=";
   };
 
   strictDeps = true;
diff --git a/pkgs/by-name/op/openbabel/package.nix b/pkgs/by-name/op/openbabel/package.nix
index 2b206e294c6a..92d2e8b3ae12 100644
--- a/pkgs/by-name/op/openbabel/package.nix
+++ b/pkgs/by-name/op/openbabel/package.nix
@@ -68,6 +68,9 @@ stdenv.mkDerivation {
   disabledTests = [
     "test_cifspacegroup_11"
     "pybindtest_obconv_writers"
+    # These tests fail with GCC 15
+    "test_align_4"
+    "test_align_5"
   ];
 
   doCheck = true;
diff --git a/pkgs/by-name/op/opencode/package.nix b/pkgs/by-name/op/opencode/package.nix
index ef966abafd9d..3ed705fb2d34 100644
--- a/pkgs/by-name/op/opencode/package.nix
+++ b/pkgs/by-name/op/opencode/package.nix
@@ -14,12 +14,12 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "opencode";
-  version = "1.1.36";
+  version = "1.1.41";
   src = fetchFromGitHub {
     owner = "anomalyco";
     repo = "opencode";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ovFGFI2dSZLKSeuanRZg9cNvMCxYnS3UbtaCKls5BYQ=";
+    hash = "sha256-p4mZRJ+BQs790hjCOJ9iXzg3JoCa4lqOdCqDRkoEfWw=";
   };
 
   node_modules = stdenvNoCC.mkDerivation {
@@ -68,7 +68,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     # NOTE: Required else we get errors that our fixed-output derivation references store paths
     dontFixup = true;
 
-    outputHash = "sha256-MPzEzyx+Av0sa6EU3ewjUSwAOyA+GJGfvEoROYqZjkM=";
+    outputHash = "sha256-bjSPHxPTyzhMOztd7HjUl/lvMZYVk944xPj8ADDn5Y4=";
     outputHashAlgo = "sha256";
     outputHashMode = "recursive";
   };
diff --git a/pkgs/by-name/op/openfga/package.nix b/pkgs/by-name/op/openfga/package.nix
index 428bad2816c1..3162dbefdef4 100644
--- a/pkgs/by-name/op/openfga/package.nix
+++ b/pkgs/by-name/op/openfga/package.nix
@@ -7,7 +7,7 @@
 
 let
   pname = "openfga";
-  version = "1.11.2";
+  version = "1.11.3";
 in
 
 buildGoModule {
@@ -17,10 +17,10 @@ buildGoModule {
     owner = "openfga";
     repo = "openfga";
     rev = "v${version}";
-    hash = "sha256-L8rzLTMcE2tcXrYQdTlkuIrRzZ+gHBj/NYZaq9zpUik=";
+    hash = "sha256-PpDyDwKYx45Q07n7AdwVQdZ2TygDYo/Zi6m+RnzGPzE=";
   };
 
-  vendorHash = "sha256-pwEyPHQZ6XYa/HhopvY/hDFHIAbnC51d2IQBSpvMBY8=";
+  vendorHash = "sha256-UoGxXhf3hx3Gk8GCcPpBMbmKxLrxVl3lNpBOEubdHtw=";
 
   nativeBuildInputs = [ installShellFiles ];
 
diff --git a/pkgs/by-name/op/openvpn3/package.nix b/pkgs/by-name/op/openvpn3/package.nix
index 569be7c40b17..d9e8b9ad99a8 100644
--- a/pkgs/by-name/op/openvpn3/package.nix
+++ b/pkgs/by-name/op/openvpn3/package.nix
@@ -129,7 +129,6 @@ stdenv.mkDerivation rec {
     homepage = "https://github.com/OpenVPN/openvpn3-linux/";
     changelog = "https://github.com/OpenVPN/openvpn3-linux/releases/tag/v${version}";
     maintainers = with lib.maintainers; [
-      shamilton
       progrm_jarvis
     ];
     platforms = lib.platforms.linux;
diff --git a/pkgs/by-name/op/openxr-loader/package.nix b/pkgs/by-name/op/openxr-loader/package.nix
index 88b31fa697e5..9795bb769665 100644
--- a/pkgs/by-name/op/openxr-loader/package.nix
+++ b/pkgs/by-name/op/openxr-loader/package.nix
@@ -31,12 +31,14 @@ stdenv.mkDerivation rec {
     pkg-config
   ];
   buildInputs = [
-    libX11
-    libXxf86vm
-    libXrandr
     vulkan-headers
     libGL
     vulkan-loader
+  ]
+  ++ lib.optionals (!stdenv.hostPlatform.isDarwin) [
+    libX11
+    libXxf86vm
+    libXrandr
     wayland
   ];
 
@@ -45,8 +47,10 @@ stdenv.mkDerivation rec {
   outputs = [
     "out"
     "dev"
-    "layers"
-  ];
+  ]
+  # layers don't currently build on darwin
+  # https://github.com/KhronosGroup/OpenXR-SDK-Source/issues/582
+  ++ lib.optional (!stdenv.hostPlatform.isDarwin) "layers";
 
   # https://github.com/KhronosGroup/OpenXR-SDK-Source/issues/305
   postPatch = ''
@@ -54,7 +58,7 @@ stdenv.mkDerivation rec {
       --replace '$'{exec_prefix}/@CMAKE_INSTALL_LIBDIR@ @CMAKE_INSTALL_FULL_LIBDIR@
   '';
 
-  postInstall = ''
+  postInstall = lib.optionalString (!stdenv.hostPlatform.isDarwin) ''
     mkdir -p "$layers/share"
     mv "$out/share/openxr" "$layers/share"
     # Use absolute paths in manifests so no LD_LIBRARY_PATH shenanigans are necessary
@@ -68,7 +72,7 @@ stdenv.mkDerivation rec {
   meta = {
     description = "Khronos OpenXR loader";
     homepage = "https://www.khronos.org/openxr";
-    platforms = lib.platforms.linux;
+    platforms = lib.platforms.linux ++ lib.platforms.darwin;
     license = lib.licenses.asl20;
     maintainers = [ lib.maintainers.ralith ];
   };
diff --git a/pkgs/by-name/ow/owi/package.nix b/pkgs/by-name/ow/owi/package.nix
index c18ef8908d1d..5d55e5f57e2b 100644
--- a/pkgs/by-name/ow/owi/package.nix
+++ b/pkgs/by-name/ow/owi/package.nix
@@ -15,14 +15,14 @@ let
 in
 ocamlPackages.buildDunePackage {
   pname = "owi";
-  version = "0.2-unstable-2026-01-21";
+  version = "0.2-unstable-2026-01-29";
 
   src = fetchFromGitHub {
     owner = "ocamlpro";
     repo = "owi";
-    rev = "66e4d2ddaa03ee441dc6156b681ad832522ff2cf";
+    rev = "07b96ef58021810352caceffbadf2d614785bb0d";
     fetchSubmodules = true;
-    hash = "sha256-KTeCDI67BGkoDBBeBG96BJrvO9kPX+Vztgk1S1PoyIM=";
+    hash = "sha256-vVTAoPWfjbX4c3AXxh4C2igig5LiMLZMpLmLSjLcxgo=";
   };
 
   nativeBuildInputs = with ocamlPackages; [
diff --git a/pkgs/by-name/pa/pantheon-tweaks/package.nix b/pkgs/by-name/pa/pantheon-tweaks/package.nix
index ca8291ca4640..01f9fac8cdac 100644
--- a/pkgs/by-name/pa/pantheon-tweaks/package.nix
+++ b/pkgs/by-name/pa/pantheon-tweaks/package.nix
@@ -17,13 +17,13 @@
 
 stdenv.mkDerivation rec {
   pname = "pantheon-tweaks";
-  version = "2.5.0";
+  version = "2.5.1";
 
   src = fetchFromGitHub {
     owner = "pantheon-tweaks";
     repo = "pantheon-tweaks";
     rev = version;
-    hash = "sha256-cCrHGOo7dZc28hbZD6Zv8Dw4Ks5JTDsm6A6nkmpUAxk=";
+    hash = "sha256-haiKElDv6lvZeROpiCc2n3I0Ho/l6HjUhu/yBISsT2E=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/pa/parallel/package.nix b/pkgs/by-name/pa/parallel/package.nix
index 91e2943cca97..b381b183221d 100644
--- a/pkgs/by-name/pa/parallel/package.nix
+++ b/pkgs/by-name/pa/parallel/package.nix
@@ -12,11 +12,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "parallel";
-  version = "20251222";
+  version = "20260122";
 
   src = fetchurl {
     url = "mirror://gnu/parallel/parallel-${finalAttrs.version}.tar.bz2";
-    hash = "sha256-tWtTiNoPLK3/b3DG6eafivlRbrJmWtok00ctWWWSwnU=";
+    hash = "sha256-OmLPeawkiLQed4HVT/H9qhxSa3Lgl90efWLverudbDs=";
   };
 
   outputs = [
diff --git a/pkgs/by-name/ph/phrase-cli/package.nix b/pkgs/by-name/ph/phrase-cli/package.nix
index 6db51f2666ea..a0bfc27d0188 100644
--- a/pkgs/by-name/ph/phrase-cli/package.nix
+++ b/pkgs/by-name/ph/phrase-cli/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "phrase-cli";
-  version = "2.54.3";
+  version = "2.55.1";
 
   src = fetchFromGitHub {
     owner = "phrase";
     repo = "phrase-cli";
     rev = version;
-    sha256 = "sha256-t/DWbfxQkIlLJ5Scej2dlEp6+Tk7+SGPt7R1DkM+MEo=";
+    sha256 = "sha256-hcq6ZCWeKRmjshLYXNDOULWXyPc/N6vNf9at7A1b7h0=";
   };
 
-  vendorHash = "sha256-eg/m6PgeVHsF0gTXdP5B5IZFMd68IVPSFs1e8nCps8U=";
+  vendorHash = "sha256-dpB8m02juic883lCwLwIL9356AHpzNy9td0s/e4UeDA=";
 
   ldflags = [ "-X=github.com/phrase/phrase-cli/cmd.PHRASE_CLIENT_VERSION=${version}" ];
 
diff --git a/pkgs/by-name/po/postman/package.nix b/pkgs/by-name/po/postman/package.nix
index ad7454193a50..340cf9d2e62e 100644
--- a/pkgs/by-name/po/postman/package.nix
+++ b/pkgs/by-name/po/postman/package.nix
@@ -8,7 +8,7 @@
 
 let
   pname = "postman";
-  version = "11.81.0";
+  version = "11.82.1";
 
   src =
     let
@@ -27,10 +27,10 @@ let
       name = "postman-${version}.${if stdenvNoCC.hostPlatform.isLinux then "tar.gz" else "zip"}";
       url = "https://dl.pstmn.io/download/version/${version}/${system}";
       hash = selectSystem {
-        aarch64-darwin = "sha256-GpX6xhWehKsEe/rSu6am7j5S5TJzyKtkUNokZmlCqA4=";
-        aarch64-linux = "sha256-/M7jzlEI3OD9GmgehBK7TDersB2RjBzsjd3Xs5e46ys=";
-        x86_64-darwin = "sha256-5DCt/W3mWTj0UL65uKmwXnRhIydWRVvBUNVPxwdexYE=";
-        x86_64-linux = "sha256-QgB7eyjl54Grt6ibfffMqO5zOOsUTueoMuDM2Zq9ZsY=";
+        aarch64-darwin = "sha256-7n/9ezPgpon3AEQXmoK/iazOPvRh/pDVy/YBVUwjbkI=";
+        aarch64-linux = "sha256-nn6Krn3/z7FkPRJDO7wNhny50YvuWwWWQ9lf9mk8ZGo=";
+        x86_64-darwin = "sha256-jN6TbPRkEFH9KyU3owcsrWbJvyIqMT0f8zV9OymiNzY=";
+        x86_64-linux = "sha256-PEPMrWrm57SAdaHL6ZWES0Ao7J7vn0TAX9WZ/WCFq6U=";
       };
     };
 
diff --git a/pkgs/by-name/pr/pragtical/package.nix b/pkgs/by-name/pr/pragtical/package.nix
index c26d366ae150..3fe9236949a7 100644
--- a/pkgs/by-name/pr/pragtical/package.nix
+++ b/pkgs/by-name/pr/pragtical/package.nix
@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  fetchpatch,
   cacert,
   meson,
   ninja,
@@ -14,17 +13,18 @@
   libzip,
   lua5_4,
   luajit,
-  mbedtls_2,
+  mbedtls,
   pcre2,
   sdl3,
+  sdl3-image,
   xz,
   zlib,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "pragtical";
-  version = "3.7.0";
-  pluginManagerVersion = "1.4.0";
+  version = "3.8.1";
+  pluginManagerVersion = "1.4.7.1";
   linenoiseRev = "e78e236c8d85c078fdd9fc4e1f08716058aa1a42";
 
   src = fetchFromGitHub {
@@ -50,18 +50,9 @@ stdenv.mkDerivation (finalAttrs: {
       find subprojects -type d -name .git -prune -execdir rm -r {} +
     '';
 
-    hash = "sha256-oqXv08TvZWVRsSCX6V9oAGHkFS0hL/gm3tGdiivOI6Q=";
+    hash = "sha256-b4qbNkqwyu4Ofaz3hof8lheOKYoerA2hfKMSNsTpHVY=";
   };
 
-  patches = [
-    # https://github.com/pragtical/pragtical/pull/334
-    (fetchpatch {
-      name = "fix-dirmonitor-backend-detection.patch";
-      url = "https://github.com/pragtical/pragtical/commit/5cf26e1f6a491f28d761390309dd77a795bdae9d.patch";
-      hash = "sha256-eD17ItcsyRTKn6jydyW3J2lFq/hl3qHUmQ2LC4LXKC0=";
-    })
-  ];
-
   strictDeps = true;
 
   nativeBuildInputs = [
@@ -79,14 +70,17 @@ stdenv.mkDerivation (finalAttrs: {
     libzip
     lua5_4
     luajit
-    mbedtls_2
+    mbedtls
     pcre2
     sdl3
+    sdl3-image
     xz
     zlib
   ];
 
-  mesonFlags = [ "-Duse_system_lua=true" ];
+  mesonFlags = [
+    (lib.mesonBool "use_system_lua" true)
+  ];
 
   meta = {
     changelog = "https://github.com/pragtical/pragtical/blob/${finalAttrs.src.rev}/changelog.md";
diff --git a/pkgs/by-name/pr/prmers/package.nix b/pkgs/by-name/pr/prmers/package.nix
index d3953a863329..2244a0e9ba34 100644
--- a/pkgs/by-name/pr/prmers/package.nix
+++ b/pkgs/by-name/pr/prmers/package.nix
@@ -12,13 +12,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "prmers";
-  version = "4.15.77-alpha";
+  version = "4.15.78-alpha";
 
   src = fetchFromGitHub {
     owner = "cherubrock-seb";
     repo = "PrMers";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-TQsW1QY5MxHRJkG5b0rtVmOOC2fuw1jFhLpEH/q1kBg=";
+    hash = "sha256-zTYc8V+d44W0H88ISLp8pQmg8Q//Ym2VFw5I3qO2V6I=";
   };
 
   enableParallelBuilding = true;
diff --git a/pkgs/by-name/pr/proton-vpn-cli/package.nix b/pkgs/by-name/pr/proton-vpn-cli/package.nix
index d193c2a9b1ba..0c680b346836 100644
--- a/pkgs/by-name/pr/proton-vpn-cli/package.nix
+++ b/pkgs/by-name/pr/proton-vpn-cli/package.nix
@@ -9,14 +9,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "proton-vpn-cli";
-  version = "0.1.4";
+  version = "0.1.5";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ProtonVPN";
     repo = "proton-vpn-cli";
     tag = "v${version}";
-    hash = "sha256-nopkUda1XaFMroIvsf+vCXWa5aXUTEC/EhAN9Lto3Lo=";
+    hash = "sha256-ercX9CLpV8ICpevS73Bl6WyG0fnjyaxf5u/dz2WPyhw=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/pt/ptouch-print/package.nix b/pkgs/by-name/pt/ptouch-print/package.nix
index 00e999ca6a48..1434c666886b 100644
--- a/pkgs/by-name/pt/ptouch-print/package.nix
+++ b/pkgs/by-name/pt/ptouch-print/package.nix
@@ -52,7 +52,6 @@ stdenv.mkDerivation {
     homepage = "https://dominic.familie-radermacher.ch/projekte/ptouch-print/";
     license = lib.licenses.gpl3Plus;
     mainProgram = "ptouch-print";
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.unix;
   };
 }
diff --git a/pkgs/by-name/re/remake/package.nix b/pkgs/by-name/re/remake/package.nix
index baca92f494ff..0e7b2c31ec1a 100644
--- a/pkgs/by-name/re/remake/package.nix
+++ b/pkgs/by-name/re/remake/package.nix
@@ -38,7 +38,6 @@ stdenv.mkDerivation rec {
     platforms = with lib.platforms; linux ++ darwin;
     maintainers = with lib.maintainers; [
       bjornfor
-      shamilton
     ];
   };
 }
diff --git a/pkgs/by-name/rg/rgrc/package.nix b/pkgs/by-name/rg/rgrc/package.nix
index dbe720a55a82..b7c501c52383 100644
--- a/pkgs/by-name/rg/rgrc/package.nix
+++ b/pkgs/by-name/rg/rgrc/package.nix
@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rgrc";
-  version = "0.6.6";
+  version = "0.6.7";
 
   src = fetchFromGitHub {
     owner = "lazywalker";
     repo = "rgrc";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-01wZYHxE01GpvFo45Fx7VootmNf/PQsS5jRMBKM7SHY=";
+    hash = "sha256-UFGC41utbAeKa5RnVcnhwvRVXobXOTrqtA/Khwyke9w=";
   };
 
-  cargoHash = "sha256-EoFTZGHviwlvB1eVQS4F0/e0g7Lp9ZipsgEYbZfNwHA=";
+  cargoHash = "sha256-bmMO1qfii31BUZhNnZtiEd+1wuH2sTO0hQ2FVEzYAtE=";
 
   nativeBuildInputs = [ installShellFiles ];
 
diff --git a/pkgs/by-name/rq/rqlite/package.nix b/pkgs/by-name/rq/rqlite/package.nix
index 0da2e44f6e03..c472105b8f67 100644
--- a/pkgs/by-name/rq/rqlite/package.nix
+++ b/pkgs/by-name/rq/rqlite/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "rqlite";
-  version = "9.3.15";
+  version = "9.3.16";
 
   src = fetchFromGitHub {
     owner = "rqlite";
     repo = "rqlite";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-VMVDXpbDN8mZJJycsFK1LOujIXw29584wnDE470C87U=";
+    hash = "sha256-pWZy8xuKIuJZXjzLwR15Q5CWCexNbqiA8PkvFEjxkYY=";
   };
 
-  vendorHash = "sha256-O/VaYGjEMTOExdQfaL3XcnPmQxEYXjCMVfI6Vl+roZw=";
+  vendorHash = "sha256-wOeYMj1jlMCnckDsO/y7vHsi2QnR8va8cVtl79dc9qs=";
 
   subPackages = [
     "cmd/rqlite"
diff --git a/pkgs/by-name/ru/runn/package.nix b/pkgs/by-name/ru/runn/package.nix
new file mode 100644
index 000000000000..bb8bab72812c
--- /dev/null
+++ b/pkgs/by-name/ru/runn/package.nix
@@ -0,0 +1,42 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "runn";
+  version = "1.2.0";
+
+  src = fetchFromGitHub {
+    owner = "k1LoW";
+    repo = "runn";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-rwKz/jFkmB7F4CoeRPgCBCvls3ovEdp907G3NzcY9tY=";
+  };
+
+  vendorHash = "sha256-XFPiTyOoFfbfkhE/UekulsUc2lwoVJskO8ZxcBmiOU0=";
+
+  subPackages = [ "cmd/runn" ];
+
+  ldflags = [
+    "-s"
+    "-w"
+    "-X github.com/k1LoW/runn/version.Version=${finalAttrs.version}"
+  ];
+
+  # Tests require external services (PostgreSQL, MySQL, Chrome, gRPC)
+  doCheck = false;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Scenario-based testing tool for APIs, databases, and more";
+    homepage = "https://github.com/k1LoW/runn";
+    changelog = "https://github.com/k1LoW/runn/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ takeokunn ];
+    mainProgram = "runn";
+  };
+})
diff --git a/pkgs/by-name/sa/saucectl/package.nix b/pkgs/by-name/sa/saucectl/package.nix
index 914a0d5b35f9..eea8b9c64ba8 100644
--- a/pkgs/by-name/sa/saucectl/package.nix
+++ b/pkgs/by-name/sa/saucectl/package.nix
@@ -5,7 +5,7 @@
 }:
 let
   pname = "saucectl";
-  version = "0.197.4";
+  version = "0.198.0";
 in
 buildGoModule {
   inherit pname version;
@@ -14,7 +14,7 @@ buildGoModule {
     owner = "saucelabs";
     repo = "saucectl";
     tag = "v${version}";
-    hash = "sha256-vhVgrwZ+CXKDkJTQ0eCZM83FjvmNI6cxcRcxTspHtCE=";
+    hash = "sha256-l9iiMyL1OgjmWj2qbzQAobi+DFoecueaRP2SV6KGbn4=";
   };
 
   ldflags = [
diff --git a/pkgs/by-name/se/search-vulns/package.nix b/pkgs/by-name/se/search-vulns/package.nix
index ec0f84ff5f8f..e419934a7a78 100644
--- a/pkgs/by-name/se/search-vulns/package.nix
+++ b/pkgs/by-name/se/search-vulns/package.nix
@@ -4,16 +4,16 @@
   fetchFromGitHub,
 }:
 
-python3.pkgs.buildPythonApplication rec {
+python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "search-vulns";
-  version = "0.8.4";
+  version = "1.0.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ra1nb0rn";
     repo = "search_vulns";
-    tag = "v${version}";
-    hash = "sha256-lvFx+ozbw7cYAJvaEFkeFxG+CfvbvDO0VRuNJ/Ub+bA=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-xdZq4Er+0CT59Iv0mEcmkZcUM+xbBi/x+TtBNCiyhbY=";
     fetchSubmodules = true;
   };
 
@@ -26,9 +26,11 @@ python3.pkgs.buildPythonApplication rec {
     aiolimiter
     cpe-search
     cvss
+    pydantic
     requests
     tqdm
     ujson
+    univers
   ];
 
   optional-dependencies = with python3.pkgs; {
@@ -42,9 +44,11 @@ python3.pkgs.buildPythonApplication rec {
       gunicorn
       mariadb
       markdown
+      pydantic
       requests
       tqdm
       ujson
+      univers
     ];
     mariadb = [ mariadb ];
     web = [
@@ -63,9 +67,9 @@ python3.pkgs.buildPythonApplication rec {
   meta = {
     description = "Search for known vulnerabilities in software using software titles or a CPE 2.3 string";
     homepage = "https://github.com/ra1nb0rn/search_vulns";
-    changelog = "https://github.com/ra1nb0rn/search_vulns/blob/${src.tag}/CHANGELOG.md";
+    changelog = "https://github.com/ra1nb0rn/search_vulns/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
     mainProgram = "search_vulns";
   };
-}
+})
diff --git a/pkgs/by-name/se/secretspec/package.nix b/pkgs/by-name/se/secretspec/package.nix
index 3c4ed11d30b0..9d7e85329716 100644
--- a/pkgs/by-name/se/secretspec/package.nix
+++ b/pkgs/by-name/se/secretspec/package.nix
@@ -9,14 +9,14 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "secretspec";
-  version = "0.6.1";
+  version = "0.6.2";
 
   src = fetchCrate {
     inherit (finalAttrs) pname version;
-    hash = "sha256-OBIIKoF0WDkLQDVmEQJ8+EyVhFCq1dESgIbAVfNuyBU=";
+    hash = "sha256-ZbyeYol8TaQz4ljTHTIHIlQwxmi/fr/ReILIOtilfEY=";
   };
 
-  cargoHash = "sha256-y6ayj6FcqZI9VR6bXIKdDKrJTFDxF49ZFXXPnWLG6tQ=";
+  cargoHash = "sha256-UcSHFf9afU+2gl6K7XkYNEkJvslTkEO9u7qkNOKSNxg=";
 
   nativeBuildInputs = [ pkg-config ];
   buildInputs = [ dbus ];
diff --git a/pkgs/by-name/si/silver-platter/package.nix b/pkgs/by-name/si/silver-platter/package.nix
index 5e1cb6a84736..a668df2a33d0 100644
--- a/pkgs/by-name/si/silver-platter/package.nix
+++ b/pkgs/by-name/si/silver-platter/package.nix
@@ -1,53 +1,66 @@
 {
-  python3Packages,
   lib,
   stdenv,
-  fetchFromGitHub,
-  pkg-config,
   rustPlatform,
-  cargo,
-  rustc,
+  fetchFromGitHub,
+  python3,
+  makeBinaryWrapper,
+  pkg-config,
   libiconv,
   openssl,
+  versionCheckHook,
 }:
 
-python3Packages.buildPythonApplication rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "silver-platter";
-  version = "0.8.1";
-  pyproject = true;
+  version = "0.8.2";
 
   src = fetchFromGitHub {
     owner = "jelmer";
     repo = "silver-platter";
-    tag = "v${version}";
-    hash = "sha256-/GFTM/VF+b0I8cDY4vkHzSxCBbvpMiLBVVEPFHcn1/Q=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-CvFnmGMV46nX6d568pZPqmDEyLZkDnDPpTtf0dMJd4U=";
   };
 
-  cargoDeps = rustPlatform.fetchCargoVendor {
-    inherit pname version src;
-    hash = "sha256-Y16OnSBC4v21NcCeWAwwGoFYJMQq/se25QqvpMyblmk=";
-  };
+  cargoHash = "sha256-nMCOEb1WTG320ozno0H/5JeZql5TqFakO8TghjbKbiQ=";
 
-  dependencies = with python3Packages; [
-    setuptools
-    breezy
-    dulwich
-    jinja2
-    pyyaml
-    ruamel-yaml
-  ];
-  nativeBuildInputs = [
-    python3Packages.setuptools-rust
-    rustPlatform.cargoSetupHook
-    cargo
-    rustc
+  buildInputs = [
+    python3
   ]
-  ++ lib.optionals stdenv.hostPlatform.isLinux [ pkg-config ];
-  buildInputs =
-    lib.optionals stdenv.hostPlatform.isLinux [ openssl ]
-    ++ lib.optionals stdenv.hostPlatform.isDarwin [ libiconv ];
+  ++ lib.optionals stdenv.hostPlatform.isLinux [ openssl ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [ libiconv ];
 
-  pythonImportsCheck = [ "silver_platter" ];
+  nativeBuildInputs = [
+    python3
+    pkg-config
+
+    python3.pkgs.wrapPython
+    makeBinaryWrapper
+  ];
+
+  nativeCheckInputs = [
+    python3.pkgs.breezy
+  ];
+
+  pythonPath = [
+    python3.pkgs.breezy
+  ];
+
+  postFixup = ''
+    wrapPythonPrograms
+    for pgm in $out/bin/svp $out/bin/debian-svp; do
+      wrapProgram "$pgm" \
+        --set PYTHONNOUSERSITE "true" \
+        --set PYTHONPATH "$program_PYTHONPATH"
+    done
+  '';
+
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  passthru.tests = {
+    python3-bindings = python3.pkgs.silver-platter;
+  };
 
   meta = {
     description = "Automate the creation of merge proposals for scriptable changes";
@@ -56,4 +69,4 @@ python3Packages.buildPythonApplication rec {
     maintainers = with lib.maintainers; [ lukegb ];
     mainProgram = "svp";
   };
-}
+})
diff --git a/pkgs/by-name/sl/slade-unstable/package.nix b/pkgs/by-name/sl/slade-unstable/package.nix
index 8c0ad97f5052..c2cd03df2e09 100644
--- a/pkgs/by-name/sl/slade-unstable/package.nix
+++ b/pkgs/by-name/sl/slade-unstable/package.nix
@@ -22,13 +22,13 @@
 
 stdenv.mkDerivation {
   pname = "slade";
-  version = "3.2.11-unstable-2026-01-17";
+  version = "3.2.11-unstable-2026-01-28";
 
   src = fetchFromGitHub {
     owner = "sirjuddington";
     repo = "SLADE";
-    rev = "97e9f38a1b348705e68a9a6d66bbe6156e923770";
-    hash = "sha256-kZ6KyhI2oZH0SeymcHge9+rbq/ZGfhKXGdfOlje2zqM=";
+    rev = "10cfdb655f541ba2c37da97bea9d5fc0cb5c7541";
+    hash = "sha256-5aXfy7sAewIOMqzgd1HBrVlusx2TKz61SfTFsTIRTII=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/sl/slurm/package.nix b/pkgs/by-name/sl/slurm/package.nix
index 9c775ad623fd..73ec11ab7165 100644
--- a/pkgs/by-name/sl/slurm/package.nix
+++ b/pkgs/by-name/sl/slurm/package.nix
@@ -42,7 +42,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "slurm";
-  version = "25.11.1.1";
+  version = "25.11.2.1";
 
   # N.B. We use github release tags instead of https://www.schedmd.com/downloads.php
   # because the latter does not keep older releases.
@@ -51,7 +51,7 @@ stdenv.mkDerivation (finalAttrs: {
     repo = "slurm";
     # The release tags use - instead of .
     rev = "slurm-${builtins.replaceStrings [ "." ] [ "-" ] finalAttrs.version}";
-    hash = "sha256-Hv0rqogwZH5GafwlELghAbKLwurd8x30u9DJZylBQP0=";
+    hash = "sha256-ukQlxKD+XhvL/sh15g3Tk5drsgXkK3hV+PFa1d2y9mk=";
   };
 
   outputs = [
@@ -59,15 +59,6 @@ stdenv.mkDerivation (finalAttrs: {
     "dev"
   ];
 
-  patches = [
-    # upstream patch; remove with next upgrade.
-    (fetchpatch {
-      name = "pmix-509-compatability.patch";
-      url = "https://github.com/SchedMD/slurm/commit/be063f0c646d2bfe10d358fa7063f2b64e19e063.patch";
-      hash = "sha256-QbKMBMl+VTLrzdXhPtcqwC7OcAXcJBxDS8jRZ2EoJL4=";
-    })
-  ];
-
   prePatch = ''
     substituteInPlace src/common/env.c \
         --replace "/bin/echo" "${lib.getExe' coreutils "echo"}"
diff --git a/pkgs/by-name/sm/smooth/package.nix b/pkgs/by-name/sm/smooth/package.nix
index cc36156718f2..ef5ccaf4056b 100644
--- a/pkgs/by-name/sm/smooth/package.nix
+++ b/pkgs/by-name/sm/smooth/package.nix
@@ -56,7 +56,6 @@ stdenv.mkDerivation rec {
     mainProgram = "smooth-translator";
     license = lib.licenses.artistic2;
     homepage = "http://www.smooth-project.org/";
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.linux;
   };
 }
diff --git a/pkgs/by-name/sq/sqruff/package.nix b/pkgs/by-name/sq/sqruff/package.nix
index 36a0d95b8f60..1ff6b77ca74e 100644
--- a/pkgs/by-name/sq/sqruff/package.nix
+++ b/pkgs/by-name/sq/sqruff/package.nix
@@ -8,16 +8,16 @@
 }:
 rustPlatform.buildRustPackage rec {
   pname = "sqruff";
-  version = "0.34.0";
+  version = "0.34.1";
 
   src = fetchFromGitHub {
     owner = "quarylabs";
     repo = "sqruff";
     tag = "v${version}";
-    hash = "sha256-fkk7PB2O657J2ZjDdo40gByleGDiFGbgvfrk4Tk4kQo=";
+    hash = "sha256-Yk4ejrIs8/8RVvXS2V2ZTBn6zawVO502Xeeb8rjU6e4=";
   };
 
-  cargoHash = "sha256-4bYoKtvtUtOfwM3X+/+du5zvukWSvS08wmeXRaOG4lA=";
+  cargoHash = "sha256-4jB1chciQaR/RYhRTfwWOOUIZgePezl8lAngpfoSuJc=";
 
   # Disable the `python` feature which doesn't work on Nix yet
   buildNoDefaultFeatures = true;
diff --git a/pkgs/by-name/sr/srt-live-server/package.nix b/pkgs/by-name/sr/srt-live-server/package.nix
index bd12eb63c5e1..f919cf72ad9c 100644
--- a/pkgs/by-name/sr/srt-live-server/package.nix
+++ b/pkgs/by-name/sr/srt-live-server/package.nix
@@ -38,7 +38,6 @@ stdenv.mkDerivation rec {
     description = "Open-source low latency livestreaming server, based on Secure Reliable Tranport (SRT)";
     license = lib.licenses.mit;
     homepage = "https://github.com/Edward-Wu/srt-live-server";
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.linux;
   };
 }
diff --git a/pkgs/by-name/st/stable-diffusion-cpp/package.nix b/pkgs/by-name/st/stable-diffusion-cpp/package.nix
index 25fbed45c9d4..8de7da8c94fe 100644
--- a/pkgs/by-name/st/stable-diffusion-cpp/package.nix
+++ b/pkgs/by-name/st/stable-diffusion-cpp/package.nix
@@ -44,6 +44,11 @@ effectiveStdenv.mkDerivation (finalAttrs: {
   pname = "stable-diffusion-cpp";
   version = "master-475-2efd199";
 
+  outputs = [
+    "out"
+    "dev"
+  ];
+
   src = fetchFromGitHub {
     owner = "leejet";
     repo = "stable-diffusion.cpp";
diff --git a/pkgs/by-name/st/steel/package.nix b/pkgs/by-name/st/steel/package.nix
index 2f6c7ffad30b..2184c58b3210 100644
--- a/pkgs/by-name/st/steel/package.nix
+++ b/pkgs/by-name/st/steel/package.nix
@@ -19,16 +19,16 @@
 }:
 rustPlatform.buildRustPackage {
   pname = "steel";
-  version = "0-unstable-2026-01-15";
+  version = "0-unstable-2026-01-28";
 
   src = fetchFromGitHub {
     owner = "mattwparas";
     repo = "steel";
-    rev = "dd5980a4099afe2af9ce1ae3d8bb30b981294398";
-    hash = "sha256-lBKDRNaX4WMhJVc9162FEv+rXDXqt7ZL0YxNBq2oMcE=";
+    rev = "b77360e462bd43992a497ab93ee081455cd61fd9";
+    hash = "sha256-6d9bWAGECaYZz+idOzsDxq1DsPnKQ/UwlQS72sfXgpY=";
   };
 
-  cargoHash = "sha256-mtRDasfCejM6o664+3XBZJ6sWw1BO+pYi/nrCaglsQ8=";
+  cargoHash = "sha256-1YUbAHefisaCOD1y0qITzAyk0PmEwb3ad+ZJUSmzcUs=";
 
   nativeBuildInputs = [
     curl
diff --git a/pkgs/by-name/su/surrealdb/package.nix b/pkgs/by-name/su/surrealdb/package.nix
index 66cf38a78947..91c2da95a165 100644
--- a/pkgs/by-name/su/surrealdb/package.nix
+++ b/pkgs/by-name/su/surrealdb/package.nix
@@ -10,16 +10,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "surrealdb";
-  version = "2.5.0";
+  version = "2.6.0";
 
   src = fetchFromGitHub {
     owner = "surrealdb";
     repo = "surrealdb";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-SDzj/viDcuGbJ8HM0/KXBOjpc5vnreobTx0U3eNeKo8=";
+    hash = "sha256-MzRARmz3e+RXNPdHEzwJAIxWJgVW2/XGSRGI1o/mN4s=";
   };
 
-  cargoHash = "sha256-alxRXeeeIxi9lb5sIOU15nCD6A/B3ba5iouOTKRTe+w=";
+  cargoHash = "sha256-EUO4t3VH9RZlIVxq3Fihn+eiT30R1OURLE8cYDQDXdM=";
 
   # error: linker `aarch64-linux-gnu-gcc` not found
   postPatch = ''
diff --git a/pkgs/by-name/sw/swaylock-plugin/package.nix b/pkgs/by-name/sw/swaylock-plugin/package.nix
index 7b0a4bfee8c8..cb6197bf03e4 100644
--- a/pkgs/by-name/sw/swaylock-plugin/package.nix
+++ b/pkgs/by-name/sw/swaylock-plugin/package.nix
@@ -23,12 +23,12 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "swaylock-plugin";
-  version = "1.8.4";
+  version = "1.8.5";
   src = fetchFromGitHub {
     owner = "mstoeckl";
     repo = "swaylock-plugin";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-UoBLEO7KaYihN/Suw9LjMXeV5sKxCULlJFynvuwwplM=";
+    hash = "sha256-CdxOOfKqPm/rWuZjaLOGcFaJpvdjT7GIhx24etPHH5I=";
   };
 
   strictDeps = true;
diff --git a/pkgs/by-name/sy/systemctl-tui/package.nix b/pkgs/by-name/sy/systemctl-tui/package.nix
index 71a5c27e8947..42dcfd3ec573 100644
--- a/pkgs/by-name/sy/systemctl-tui/package.nix
+++ b/pkgs/by-name/sy/systemctl-tui/package.nix
@@ -8,17 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "systemctl-tui";
-  version = "0.4.1";
+  version = "0.5.1";
 
   src = fetchFromGitHub {
     owner = "rgwood";
     repo = "systemctl-tui";
-    # https://github.com/rgwood/systemctl-tui/issues/68#issuecomment-3735677971
-    tag = "v${finalAttrs.version}-take2";
-    hash = "sha256-6SN8c8gDVsvFFyrcFjdO70pJpVxWG/AbdB6V4mM5Q5Y=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-KB8iOaN3ndi8uQq1t7TJ1IVHjJEeDBAQ5BRjxwR4Gjo=";
   };
 
-  cargoHash = "sha256-4VlKJUxmxC1dIZYsUMLhNzOJTYacpddlKZUSwjKlzJ8=";
+  cargoHash = "sha256-l2cIr+ENjGOBuB5rEO+ze2Ihhds2zfejvuY00YzLrf8=";
 
   nativeInstallCheckInputs = [
     versionCheckHook
diff --git a/pkgs/by-name/te/tempo/package.nix b/pkgs/by-name/te/tempo/package.nix
index db2b2a85eb38..bf05e44aca2a 100644
--- a/pkgs/by-name/te/tempo/package.nix
+++ b/pkgs/by-name/te/tempo/package.nix
@@ -7,14 +7,14 @@
 
 buildGoModule (finalAttrs: {
   pname = "tempo";
-  version = "2.9.1";
+  version = "2.10.0";
 
   src = fetchFromGitHub {
     owner = "grafana";
     repo = "tempo";
     tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
-    hash = "sha256-Cbac8LQGZ5y+6JE40s/eCufeUH4QxyOiGOfg4XFIstE=";
+    hash = "sha256-ciiJg8PdvifYGalfo/V8RFTKkZ8pHM9RlwfGRKeRAhU=";
   };
 
   vendorHash = null;
diff --git a/pkgs/by-name/to/tor/package.nix b/pkgs/by-name/to/tor/package.nix
index 68b0e864c5dd..42677b5ddad5 100644
--- a/pkgs/by-name/to/tor/package.nix
+++ b/pkgs/by-name/to/tor/package.nix
@@ -46,11 +46,11 @@ in
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "tor";
-  version = "0.4.8.21";
+  version = "0.4.8.22";
 
   src = fetchurl {
     url = "https://dist.torproject.org/tor-${finalAttrs.version}.tar.gz";
-    hash = "sha256-6vb1tzCRuVV2lF6t6YgW3f980AW+/k2UcYpvdmuECQM=";
+    hash = "sha256-yIYg2SeKJ549In/2CXW4SqQTWSEfjs/2hgGZI7mSkzI=";
   };
 
   outputs = [
diff --git a/pkgs/by-name/tr/troubadix/package.nix b/pkgs/by-name/tr/troubadix/package.nix
index a4dd0c521764..1515f9a33a35 100644
--- a/pkgs/by-name/tr/troubadix/package.nix
+++ b/pkgs/by-name/tr/troubadix/package.nix
@@ -5,16 +5,16 @@
   python3,
 }:
 
-python3.pkgs.buildPythonApplication rec {
+python3.pkgs.buildPythonApplication (finalAttrs: {
   pname = "troubadix";
-  version = "25.2.4";
+  version = "26.1.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "greenbone";
     repo = "troubadix";
-    tag = "v${version}";
-    hash = "sha256-+2G7wlhtoKmjluHsmYb62i+DvWuXlaYw6ktYb77X/LA=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-FWauAvySks536KFdU/4X6ru2zr2nwIWzlfOG9OpZ9m4=";
   };
 
   pythonRelaxDeps = [
@@ -29,6 +29,7 @@ python3.pkgs.buildPythonApplication rec {
     charset-normalizer
     pkgs.codespell
     gitpython
+    networkx
     pontos
     python-magic
     validators
@@ -55,9 +56,9 @@ python3.pkgs.buildPythonApplication rec {
   meta = {
     description = "Linting tool for NASL files";
     homepage = "https://github.com/greenbone/troubadix";
-    changelog = "https://github.com/greenbone/troubadix/releases/tag/${src.tag}";
+    changelog = "https://github.com/greenbone/troubadix/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [ fab ];
     mainProgram = "troubadix";
   };
-}
+})
diff --git a/pkgs/by-name/un/undetected-chromedriver/package.nix b/pkgs/by-name/un/undetected-chromedriver/package.nix
index 6ec572c9ee70..c5cce2c5fb6f 100644
--- a/pkgs/by-name/un/undetected-chromedriver/package.nix
+++ b/pkgs/by-name/un/undetected-chromedriver/package.nix
@@ -37,6 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   meta = chromedriver.meta // {
     description = "Custom Selenium ChromeDriver that passes all bot mitigation systems";
+    homepage = "https://github.com/ultrafunkamsterdam/undetected-chromedriver";
     mainProgram = "undetected-chromedriver";
     maintainers = [ ];
   };
diff --git a/pkgs/by-name/us/usbview/package.nix b/pkgs/by-name/us/usbview/package.nix
index 6e9d69fe1238..d411eff7aff7 100644
--- a/pkgs/by-name/us/usbview/package.nix
+++ b/pkgs/by-name/us/usbview/package.nix
@@ -34,7 +34,6 @@ stdenv.mkDerivation rec {
     license = lib.licenses.gpl2Only;
     homepage = "http://www.kroah.com/linux-usb/";
     maintainers = with lib.maintainers; [
-      shamilton
       h7x4
     ];
     platforms = lib.platforms.linux;
diff --git a/pkgs/by-name/uu/uutils-acl/package.nix b/pkgs/by-name/uu/uutils-acl/package.nix
index 9b69bc6b185d..8ebb5bde222b 100644
--- a/pkgs/by-name/uu/uutils-acl/package.nix
+++ b/pkgs/by-name/uu/uutils-acl/package.nix
@@ -7,16 +7,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "uutils-acl";
-  version = "0.0.1-unstable-2026-01-08";
+  version = "0.0.1-unstable-2026-01-28";
 
   src = fetchFromGitHub {
     owner = "uutils";
     repo = "acl";
-    rev = "f5d374af73ec0206a6ea3106052550f873d5bcd8";
-    hash = "sha256-38Mp2ue89e7fLYaGwJsbkq+4l25gQDfVeJMY2ZAjJ8c=";
+    rev = "064d238441a4ed20b0f6a82203b3920c0b39e8f8";
+    hash = "sha256-Pu3ulcCw02dMp85YPpqwN2DX4La7TXnbhVbsNcBcK38=";
   };
 
-  cargoHash = "sha256-5rHHhs+Hz0Yzvi5V1D2NPR6l5juP4BvjJve+8bbWbXc=";
+  cargoHash = "sha256-EhUjlZ6xNMRcgUnsRNzSv3CYfDpVc0bxHZF9EFwzKi8=";
 
   checkFlags = [
     # Operation not supported
diff --git a/pkgs/by-name/uu/uutils-procps/package.nix b/pkgs/by-name/uu/uutils-procps/package.nix
index c78a575e97ce..9ad528bf700f 100644
--- a/pkgs/by-name/uu/uutils-procps/package.nix
+++ b/pkgs/by-name/uu/uutils-procps/package.nix
@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "uutils-procps";
-  version = "0.0.1-unstable-2026-01-19";
+  version = "0.0.1-unstable-2026-01-28";
 
   src = fetchFromGitHub {
     owner = "uutils";
     repo = "procps";
-    rev = "0dcfb73afa946d585a1056d3ae117c8ec3407a31";
-    hash = "sha256-oq2tPaguyptMtYdnsM9nUXzSbKXdozl+xY0+qk/zZW8=";
+    rev = "0e758a54ff243fbcf3ae6ec1f1761798b148de3a";
+    hash = "sha256-IhnxiPDJ+FStCdNQc19C2SwBXQ1qN8VYFGxR8b4o48o=";
   };
 
-  cargoHash = "sha256-MYIlzLP6DMBgLfNQSE3TxfMAMRdIHLlAwd6hmdHa8OU=";
+  cargoHash = "sha256-sdmZGJYvuQaagEX+ve/1gXveUV7nphDIi5gY8apKGWE=";
 
   nativeBuildInputs = [
     pkg-config
diff --git a/pkgs/by-name/uu/uutils-util-linux/package.nix b/pkgs/by-name/uu/uutils-util-linux/package.nix
index 7b07c13ad246..28e88411dec6 100644
--- a/pkgs/by-name/uu/uutils-util-linux/package.nix
+++ b/pkgs/by-name/uu/uutils-util-linux/package.nix
@@ -10,13 +10,13 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "uutils-util-linux";
-  version = "0.0.1-unstable-2026-01-19";
+  version = "0.0.1-unstable-2026-01-28";
 
   src = fetchFromGitHub {
     owner = "uutils";
     repo = "util-linux";
-    rev = "6fa694801a4c51f82787d0613f49338e67a284ab";
-    hash = "sha256-DMjKMzXbDaWA7BPIBj9tKo6VXyS9WcF5iree3oqIViI=";
+    rev = "1f82e16a308c2dd3b5b514153c81df1d4936273d";
+    hash = "sha256-2ZrbzaWZjxlKhrzcOL+N5N2D5818Y2OB+rGfH34pwy4=";
   };
 
   postPatch = ''
@@ -29,7 +29,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
       --replace-fail '"cut"' '"${lib.getExe' coreutils "cut"}"'
   '';
 
-  cargoHash = "sha256-+oKsHCAWiMH/oV7AL5+Nq5PgfS9SQvs5MLqCW8yG3vw=";
+  cargoHash = "sha256-pvfZP6sHfh2kRVYOOTUGPw6Pq6Tsxud8+fU4qTwggcE=";
 
   nativeBuildInputs = [
     pkg-config
diff --git a/pkgs/by-name/va/variety/package.nix b/pkgs/by-name/va/variety/package.nix
index d90041e44381..e344922b9ccb 100644
--- a/pkgs/by-name/va/variety/package.nix
+++ b/pkgs/by-name/va/variety/package.nix
@@ -22,14 +22,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "variety";
-  version = "0.8.13";
+  version = "0.9.0-b1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "varietywalls";
     repo = "variety";
     tag = version;
-    hash = "sha256-7CTJ3hWddbOX/UfZ1qX9rPNGTfkxQ4pxu23sq9ulgv4=";
+    hash = "sha256-uDQZfWY0RuTsdD/IxpjzSTMMtNq632VAwAjB+CeUIbw=";
   };
 
   nativeBuildInputs = [
@@ -47,7 +47,10 @@ python3Packages.buildPythonApplication rec {
   ]
   ++ lib.optional appindicatorSupport libayatana-appindicator;
 
-  build-system = with python3Packages; [ setuptools ];
+  build-system = with python3Packages; [
+    setuptools
+    setuptools-gettext
+  ];
 
   dependencies =
     with python3Packages;
@@ -77,12 +80,10 @@ python3Packages.buildPythonApplication rec {
   '';
 
   prePatch = ''
-    substituteInPlace variety_lib/varietyconfig.py \
-      --replace-fail "__variety_data_directory__ = \"../data\"" \
-                "__variety_data_directory__ = \"$out/share/variety\""
     substituteInPlace variety/VarietyWindow.py \
       --replace-fail '[script,' '["${runtimeShell}", script,' \
-      --replace-fail 'check_output(script)' 'check_output(["${runtimeShell}", script])'
+      --replace-fail 'check_output(script)' 'check_output(["${runtimeShell}", script])' \
+      --replace-fail 'os.stat(path).st_mode | stat.S_IEXEC' 'os.stat(path).st_mode | stat.S_IEXEC | stat.S_IWUSR'
     substituteInPlace data/variety-autostart.desktop.template \
       --replace-fail "/bin/bash" "${lib.getExe bash}" \
       --replace-fail "{VARIETY_PATH}" "variety"
diff --git a/pkgs/by-name/ve/vector/package.nix b/pkgs/by-name/ve/vector/package.nix
index a6f5f79f5f4e..1d2cbf910a65 100644
--- a/pkgs/by-name/ve/vector/package.nix
+++ b/pkgs/by-name/ve/vector/package.nix
@@ -2,6 +2,7 @@
   stdenv,
   lib,
   fetchFromGitHub,
+  installShellFiles,
   rustPlatform,
   pkg-config,
   openssl,
@@ -26,16 +27,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "vector";
-  version = "0.52.0";
+  version = "0.53.0";
 
   src = fetchFromGitHub {
     owner = "vectordotdev";
     repo = "vector";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-jwEJ+myovZYcohvxH1VvvOW8xok3HSLvhtMsLC2M3KY=";
+    hash = "sha256-OFybPI2oppntYBEklJtdEhImZc/m4oaSSWylr2hHUjA=";
   };
 
-  cargoHash = "sha256-EfgDL5asygFqr8pVcTR9BsYU3fcG28xhrCn5nCkVfcA=";
+  cargoHash = "sha256-Xuff8ZanFCtvitNYnOwCyd0UYjrhrP8UglJqbpScGVM=";
 
   nativeBuildInputs = [
     pkg-config
@@ -43,6 +44,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     perl
     git
     rustPlatform.bindgenHook
+    installShellFiles
   ]
   # Provides the mig command used by the build scripts
   ++ lib.optional stdenv.hostPlatform.isDarwin darwin.bootstrap_cmds;
@@ -116,6 +118,12 @@ rustPlatform.buildRustPackage (finalAttrs: {
       --replace-fail "#[tokio::test]" ""
   '';
 
+  postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
+    for shell in bash fish zsh; do
+      installShellCompletion --cmd vector --$shell <($out/bin/vector completion $shell)
+    done
+  '';
+
   nativeInstallCheckInputs = [
     versionCheckHook
   ];
diff --git a/pkgs/by-name/vg/vgmstream/package.nix b/pkgs/by-name/vg/vgmstream/package.nix
index 39569ac7b4f1..e9812a8fec9c 100644
--- a/pkgs/by-name/vg/vgmstream/package.nix
+++ b/pkgs/by-name/vg/vgmstream/package.nix
@@ -23,13 +23,13 @@ assert lib.assertMsg (
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "vgmstream";
-  version = "2055";
+  version = "2083";
 
   src = fetchFromGitHub {
     owner = "vgmstream";
     repo = "vgmstream";
     tag = "r${finalAttrs.version}";
-    hash = "sha256-GNsoWCTLDd49T639lKkLoyBWpWYocDP6gZB2e8ZUyEU=";
+    hash = "sha256-iSl4rkyJhZIyxVnX55zFu98PTv3ekEJrOaPIb+KOcRE=";
   };
 
   outputs = [ "out" ] ++ lib.optional audaciousSupport "audacious";
diff --git a/pkgs/by-name/vi/vicinae/package.nix b/pkgs/by-name/vi/vicinae/package.nix
index cdd75be3c287..c415ea524d4e 100644
--- a/pkgs/by-name/vi/vicinae/package.nix
+++ b/pkgs/by-name/vi/vicinae/package.nix
@@ -22,13 +22,13 @@
 }:
 gcc15Stdenv.mkDerivation (finalAttrs: {
   pname = "vicinae";
-  version = "0.18.3";
+  version = "0.19.2";
 
   src = fetchFromGitHub {
     owner = "vicinaehq";
     repo = "vicinae";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-TU8MKOBYgTvYIFI8Col3ePeGntOlux3yYqmbSi7FG70=";
+    hash = "sha256-YXFSCJ4q1XIom4/CzCy4ASt7RDjxSkIWH6MqrCg+PNY=";
   };
 
   apiDeps = fetchNpmDeps {
@@ -45,6 +45,7 @@ gcc15Stdenv.mkDerivation (finalAttrs: {
     "VICINAE_GIT_TAG" = "v${finalAttrs.version}";
     "VICINAE_PROVENANCE" = "nix";
     "INSTALL_NODE_MODULES" = "OFF";
+    "INSTALL_BROWSER_NATIVE_HOST" = "OFF";
     "USE_SYSTEM_GLAZE" = "ON";
     "CMAKE_INSTALL_PREFIX" = placeholder "out";
     "CMAKE_INSTALL_DATAROOTDIR" = "share";
diff --git a/pkgs/by-name/vk/vk-bootstrap/package.nix b/pkgs/by-name/vk/vk-bootstrap/package.nix
index f5d6a5c18581..b925d3f668ec 100644
--- a/pkgs/by-name/vk/vk-bootstrap/package.nix
+++ b/pkgs/by-name/vk/vk-bootstrap/package.nix
@@ -45,7 +45,6 @@ stdenv.mkDerivation rec {
     description = "Vulkan Bootstrapping Library";
     license = lib.licenses.mit;
     homepage = "https://github.com/charles-lunarg/vk-bootstrap";
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.all;
   };
 }
diff --git a/pkgs/by-name/vo/vokoscreen-ng/package.nix b/pkgs/by-name/vo/vokoscreen-ng/package.nix
index 69e030f55d4b..0cce78d622c5 100644
--- a/pkgs/by-name/vo/vokoscreen-ng/package.nix
+++ b/pkgs/by-name/vo/vokoscreen-ng/package.nix
@@ -68,7 +68,6 @@ stdenv.mkDerivation rec {
     license = lib.licenses.gpl2Plus;
     homepage = "https://github.com/vkohaupt/vokoscreenNG";
     maintainers = with lib.maintainers; [
-      shamilton
       dietmarw
     ];
     platforms = lib.platforms.linux;
diff --git a/pkgs/by-name/wa/wasmer/package.nix b/pkgs/by-name/wa/wasmer/package.nix
index 0c7f6ba76d4b..9952a314f29c 100644
--- a/pkgs/by-name/wa/wasmer/package.nix
+++ b/pkgs/by-name/wa/wasmer/package.nix
@@ -68,7 +68,6 @@ rustPlatform.buildRustPackage rec {
     license = lib.licenses.mit;
     platforms = with lib.platforms; linux ++ darwin;
     maintainers = with lib.maintainers; [
-      shamilton
       nickcao
     ];
   };
diff --git a/pkgs/by-name/we/wechat/package.nix b/pkgs/by-name/we/wechat/package.nix
index aa1005ff20f2..4fe5afe4f9d3 100644
--- a/pkgs/by-name/we/wechat/package.nix
+++ b/pkgs/by-name/we/wechat/package.nix
@@ -30,14 +30,14 @@ let
       # https://dldir1.qq.com/weixin/mac/mac-release.xml
       any-darwin =
         let
-          version = "4.1.7.30-34346";
+          version = "4.1.7.31-34366";
           version' = lib.replaceString "-" "_" version;
         in
         {
           inherit version;
           src = fetchurl {
             url = "https://dldir1v6.qq.com/weixin/Universal/Mac/xWeChatMac_universal_${version'}.dmg";
-            hash = "sha256-/QbIkJ83EFCUBbmFUnY8aBbjPP9B5yw8qmRbhXxSwYE=";
+            hash = "sha256-oU1qypU24wiHSdUo8H76A1hxKCDf3I3Fq/4xbNGbjDo=";
           };
         };
     in
diff --git a/pkgs/by-name/we/wezterm/package.nix b/pkgs/by-name/we/wezterm/package.nix
index d231133c3e74..57db01c1ab11 100644
--- a/pkgs/by-name/we/wezterm/package.nix
+++ b/pkgs/by-name/we/wezterm/package.nix
@@ -28,14 +28,14 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "wezterm";
-  version = "0-unstable-2026-01-09";
+  version = "0-unstable-2026-01-17";
 
   src = fetchFromGitHub {
     owner = "wezterm";
     repo = "wezterm";
-    rev = "6e02c91e6b4f14d8df81d2819807212807cc5d5f";
+    rev = "05343b387085842b434d267f91b6b0ec157e4331";
     fetchSubmodules = true;
-    hash = "sha256-5KGSAhblAyBT1ppMaGlI94wMGl4/NpLHK7VFMYF+FV4=";
+    hash = "sha256-V6WvkNZryYofarsyfcmsuvtpNJ/c3O+DmOKNvoYPbmA=";
   };
 
   postPatch = ''
@@ -58,7 +58,7 @@ rustPlatform.buildRustPackage rec {
   # https://github.com/wezterm/wezterm/blob/main/nix/flake.nix#L134
   auditable = false;
 
-  cargoHash = "sha256-am5i7Bsoiu1a4RWDy+dpuHgyZpQvKOlEMzCP8QxbeaQ=";
+  cargoHash = "sha256-waXq0U2Ud7FhlJn3evO7bZSBsOAA39ObiVWHycNQXmA=";
 
   nativeBuildInputs = [
     installShellFiles
diff --git a/pkgs/by-name/wh/whatsapp-emoji-font/package.nix b/pkgs/by-name/wh/whatsapp-emoji-font/package.nix
index b39911d45682..877bba8f7c6d 100644
--- a/pkgs/by-name/wh/whatsapp-emoji-font/package.nix
+++ b/pkgs/by-name/wh/whatsapp-emoji-font/package.nix
@@ -12,13 +12,13 @@
 
 stdenvNoCC.mkDerivation rec {
   pname = "whatsapp-emoji-linux";
-  version = "2.25.9.78-2";
+  version = "2.25.9.78-3";
 
   src = fetchFromGitHub {
     tag = version;
     owner = "dmlls";
     repo = "whatsapp-emoji-linux";
-    hash = "sha256-qWI8aSqgwaCMgg97huwICT3Hsgke2Wgj5mQCcUuK6OQ=";
+    hash = "sha256-IP8zWFttr7Osy8rrTLL0bTrdEMLvTNjuadZ2ksfTViw=";
   };
 
   makeFlags = [
diff --git a/pkgs/by-name/wh/whisper-cpp/package.nix b/pkgs/by-name/wh/whisper-cpp/package.nix
index 25d1f4e3d5f5..d27925dcfc5b 100644
--- a/pkgs/by-name/wh/whisper-cpp/package.nix
+++ b/pkgs/by-name/wh/whisper-cpp/package.nix
@@ -50,6 +50,13 @@ let
     optionals
     ;
 
+  inherit (effectiveStdenv.hostPlatform)
+    isStatic
+    isLinux
+    isAarch64
+    isx86
+    ;
+
   cudaBuildInputs = with cudaPackages; [
     cuda_cccl # <nv/target>
 
@@ -125,12 +132,12 @@ effectiveStdenv.mkDerivation (finalAttrs: {
     (cmakeBool "WHISPER_SDL2" withSDL)
     (cmakeBool "GGML_LTO" true)
     (cmakeBool "GGML_NATIVE" false)
-    (cmakeBool "BUILD_SHARED_LIBS" (!effectiveStdenv.hostPlatform.isStatic))
+    (cmakeBool "BUILD_SHARED_LIBS" (!isStatic))
   ]
-  ++ optionals effectiveStdenv.hostPlatform.isLinux [
+  ++ optionals isLinux [
     (cmakeBool "WHISPER_FFMPEG" withFFmpegSupport)
   ]
-  ++ optionals (effectiveStdenv.hostPlatform.isx86 && !effectiveStdenv.hostPlatform.isStatic) [
+  ++ optionals (isx86 && !isStatic) [
     (cmakeBool "GGML_BACKEND_DL" true)
     (cmakeBool "GGML_CPU_ALL_VARIANTS" true)
     (cmakeFeature "GGML_BACKEND_DIR" "${placeholder "out"}/lib")
@@ -145,7 +152,7 @@ effectiveStdenv.mkDerivation (finalAttrs: {
     # Build all targets supported by rocBLAS. When updating search for TARGET_LIST_ROCM
     # in https://github.com/ROCmSoftwarePlatform/rocBLAS/blob/develop/CMakeLists.txt
     # and select the line that matches the current nixpkgs version of rocBLAS.
-    "-DAMDGPU_TARGETS=${rocmGpuTargets}"
+    (cmakeFeature "AMDGPU_TARGETS" rocmGpuTargets)
   ]
   ++ optionals coreMLSupport [
     (cmakeBool "WHISPER_COREML" true)
@@ -170,7 +177,10 @@ effectiveStdenv.mkDerivation (finalAttrs: {
 
   requiredSystemFeatures = optionals rocmSupport [ "big-parallel" ]; # rocmSupport multiplies build time by the number of GPU targets, which takes arround 30 minutes on a 16-cores system to build
 
-  doInstallCheck = true;
+  # libcuda.so is provided by the driver at runtime and is not available in the sandbox
+  # /nix/store/...-whisper-cpp-1.8.3/bin/whisper-cli: error while loading shared libraries: libcuda.so.1: cannot open shared object file: No such file or directory
+  # NOTE: it is unclear why this isn't an issue on x86_64-linux
+  doInstallCheck = !(isLinux && isAarch64 && cudaSupport);
 
   installCheckPhase = ''
     runHook preInstallCheck
diff --git a/pkgs/by-name/wi/wiiuse/package.nix b/pkgs/by-name/wi/wiiuse/package.nix
index 51bdd333f750..e2f49ec4b6bf 100644
--- a/pkgs/by-name/wi/wiiuse/package.nix
+++ b/pkgs/by-name/wi/wiiuse/package.nix
@@ -51,7 +51,6 @@ stdenv.mkDerivation rec {
     mainProgram = "wiiuseexample";
     license = lib.licenses.gpl3Plus;
     homepage = "https://github.com/wiiuse/wiiuse";
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = with lib.platforms; unix;
   };
 }
diff --git a/pkgs/by-name/wi/windsurf/info.json b/pkgs/by-name/wi/windsurf/info.json
index e9fb3fbfcc62..171839095720 100644
--- a/pkgs/by-name/wi/windsurf/info.json
+++ b/pkgs/by-name/wi/windsurf/info.json
@@ -1,20 +1,20 @@
 {
   "aarch64-darwin": {
-    "version": "1.13.9",
+    "version": "1.13.13",
     "vscodeVersion": "1.106.0",
-    "url": "https://windsurf-stable.codeiumdata.com/darwin-arm64/stable/a473c86f69ab6b6f98bc47437adc6263df8738d0/Windsurf-darwin-arm64-1.13.9.zip",
-    "sha256": "a4e3930b30d8abb708ef99a08c8f31da4d0dfbf395ad9c8fe4c57640f9eab8f0"
+    "url": "https://windsurf-stable.codeiumdata.com/darwin-arm64/stable/ca71c32d680a52e5f4726f9fcfa5a38efb09ff4c/Windsurf-darwin-arm64-1.13.13.zip",
+    "sha256": "97cb94e35f04e233f0c134340ba3ac0a239e9c345fabeaf0fbd0e118605df988"
   },
   "x86_64-darwin": {
-    "version": "1.13.9",
+    "version": "1.13.13",
     "vscodeVersion": "1.106.0",
-    "url": "https://windsurf-stable.codeiumdata.com/darwin-x64/stable/a473c86f69ab6b6f98bc47437adc6263df8738d0/Windsurf-darwin-x64-1.13.9.zip",
-    "sha256": "d24a452a562ea662f2a56c304b56603bba5af1597025bb6f1d0f3534c94aae1d"
+    "url": "https://windsurf-stable.codeiumdata.com/darwin-x64/stable/ca71c32d680a52e5f4726f9fcfa5a38efb09ff4c/Windsurf-darwin-x64-1.13.13.zip",
+    "sha256": "b4999a127aa4f6e1a57b78540109a49f1ec6437557c5c1e8351c5b3859237458"
   },
   "x86_64-linux": {
-    "version": "1.13.9",
+    "version": "1.13.13",
     "vscodeVersion": "1.106.0",
-    "url": "https://windsurf-stable.codeiumdata.com/linux-x64/stable/a473c86f69ab6b6f98bc47437adc6263df8738d0/Windsurf-linux-x64-1.13.9.tar.gz",
-    "sha256": "a3a4893b354c5d4dc367dbb723bdecef16c3f0e573a7d895219991314fb2c434"
+    "url": "https://windsurf-stable.codeiumdata.com/linux-x64/stable/ca71c32d680a52e5f4726f9fcfa5a38efb09ff4c/Windsurf-linux-x64-1.13.13.tar.gz",
+    "sha256": "34ca8e4a8a6485b5462067920b74088112595984306fb63501760eb5a62648fc"
   }
 }
diff --git a/pkgs/by-name/wo/wooz/package.nix b/pkgs/by-name/wo/wooz/package.nix
new file mode 100644
index 000000000000..1e7a5109891b
--- /dev/null
+++ b/pkgs/by-name/wo/wooz/package.nix
@@ -0,0 +1,45 @@
+{
+  stdenv,
+  lib,
+  fetchFromGitHub,
+  pkg-config,
+  meson,
+  ninja,
+  wayland,
+  wayland-protocols,
+  wayland-scanner,
+}:
+stdenv.mkDerivation {
+  pname = "wooz";
+
+  # Using latest master, until at least https://github.com/negrel/wooz/issues/11 is resolved in some release after 0.1.0
+  version = "0-unstable-2025-10-08";
+
+  src = fetchFromGitHub {
+    owner = "negrel";
+    repo = "wooz";
+    rev = "cd8bc6092462d438f6497c016b7e79115c4b4723";
+    hash = "sha256-ViAXu/13I4dTHWj7v10XVaOVXkf8682hPYyETzhGFzA=";
+  };
+
+  nativeBuildInputs = [
+    pkg-config
+    meson
+    ninja
+    wayland-scanner
+  ];
+
+  buildInputs = [
+    wayland
+    wayland-protocols
+  ];
+
+  meta = {
+    description = "Zoom / magnifier utility for wayland compositors";
+    homepage = "https://github.com/negrel/wooz";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ samuela ];
+    platforms = lib.platforms.linux;
+    mainProgram = "wooz";
+  };
+}
diff --git a/pkgs/by-name/xe/xedit/package.nix b/pkgs/by-name/xe/xedit/package.nix
index 5da7c31da802..136882cd36c1 100644
--- a/pkgs/by-name/xe/xedit/package.nix
+++ b/pkgs/by-name/xe/xedit/package.nix
@@ -51,7 +51,6 @@ stdenv.mkDerivation rec {
     description = "Simple graphical text editor using Athena Widgets (Xaw)";
     homepage = "https://gitlab.freedesktop.org/xorg/app/xedit";
     license = with lib.licenses; [ mit ];
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.unix;
     # never built on aarch64-darwin, x86_64-darwin since first introduction in nixpkgs
     broken = stdenv.hostPlatform.isDarwin;
diff --git a/pkgs/by-name/xf/xf86-video-amdgpu/package.nix b/pkgs/by-name/xf/xf86-video-amdgpu/package.nix
index a2eef5f5729b..b24c3c3222f7 100644
--- a/pkgs/by-name/xf/xf86-video-amdgpu/package.nix
+++ b/pkgs/by-name/xf/xf86-video-amdgpu/package.nix
@@ -26,6 +26,9 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-7dLoKxBbE98FjADTYjjwj6OafJdecAkOCMRcYUYuYV4=";
   };
 
+  # fixes https://github.com/NixOS/nixpkgs/issues/483585 aka https://gitlab.freedesktop.org/xorg/driver/xf86-video-amdgpu/-/issues/8
+  hardeningDisable = [ "bindnow" ];
+
   strictDeps = true;
 
   nativeBuildInputs = [
diff --git a/pkgs/desktops/mate/marco/default.nix b/pkgs/desktops/mate/marco/default.nix
index fdfe06118510..276f473c9af0 100644
--- a/pkgs/desktops/mate/marco/default.nix
+++ b/pkgs/desktops/mate/marco/default.nix
@@ -1,7 +1,10 @@
 {
   lib,
   stdenv,
-  fetchurl,
+  fetchFromGitHub,
+  autoconf-archive,
+  autoreconfHook,
+  mate-common,
   pkg-config,
   gettext,
   itstool,
@@ -18,24 +21,31 @@
   mate-desktop,
   mate-settings-daemon,
   wrapGAppsHook3,
+  yelp-tools,
   gitUpdater,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "marco";
-  version = "1.28.1";
+  version = "1.28.2";
 
-  src = fetchurl {
-    url = "https://pub.mate-desktop.org/releases/${lib.versions.majorMinor finalAttrs.version}/marco-${finalAttrs.version}.tar.xz";
-    sha256 = "JJbl5A7pgM1oSUk6w+D4/Q3si4HGdNqNm6GaV38KwuE=";
+  src = fetchFromGitHub {
+    owner = "mate-desktop";
+    repo = "marco";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-k45k49mPxy4vmDtCFHaqk0kwZ5wXVAaTj3kanK79n7I=";
   };
 
   nativeBuildInputs = [
+    autoconf-archive
+    autoreconfHook
     pkg-config
     gettext
     itstool
     libxml2 # xmllint
+    mate-common # mate-common.m4 macros
     wrapGAppsHook3
+    yelp-tools
   ];
 
   buildInputs = [
@@ -62,7 +72,6 @@ stdenv.mkDerivation (finalAttrs: {
   enableParallelBuilding = true;
 
   passthru.updateScript = gitUpdater {
-    url = "https://git.mate-desktop.org/marco";
     odd-unstable = true;
     rev-prefix = "v";
   };
diff --git a/pkgs/desktops/pantheon/apps/switchboard/wrapper.nix b/pkgs/desktops/pantheon/apps/switchboard/wrapper.nix
index b4f06ce9cfa3..4d3753946bcc 100644
--- a/pkgs/desktops/pantheon/apps/switchboard/wrapper.nix
+++ b/pkgs/desktops/pantheon/apps/switchboard/wrapper.nix
@@ -36,6 +36,7 @@ stdenv.mkDerivation {
 
   nativeBuildInputs = [
     glib
+    lndir
     wrapGAppsHook4
   ];
 
@@ -47,11 +48,12 @@ stdenv.mkDerivation {
 
   preferLocalBuild = true;
   allowSubstitutes = false;
+  strictDeps = true;
 
   installPhase = ''
     mkdir -p $out
     for i in $(cat $pathsPath); do
-      ${lndir}/bin/lndir -silent $i $out
+      lndir -silent $i $out
     done
 
     dbus_file="share/dbus-1/services/io.elementary.settings.service"
diff --git a/pkgs/desktops/pantheon/services/elementary-settings-daemon/default.nix b/pkgs/desktops/pantheon/services/elementary-settings-daemon/default.nix
index e78685889584..a28ec005ee85 100644
--- a/pkgs/desktops/pantheon/services/elementary-settings-daemon/default.nix
+++ b/pkgs/desktops/pantheon/services/elementary-settings-daemon/default.nix
@@ -27,13 +27,13 @@
 
 stdenv.mkDerivation rec {
   pname = "elementary-settings-daemon";
-  version = "8.4.0";
+  version = "8.5.0";
 
   src = fetchFromGitHub {
     owner = "elementary";
     repo = "settings-daemon";
-    rev = version;
-    sha256 = "sha256-VdvwrkafZJ0+z2MYWT83POdo8dZrSAOL5RhAiwGEc2g=";
+    tag = version;
+    hash = "sha256-npHSj+Zq0fqWVjr5kl/C96gfziLMNOeXxCUgxFGht/s=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/libraries/nvidia-vaapi-driver/default.nix b/pkgs/development/libraries/nvidia-vaapi-driver/default.nix
index 7668ec94cdaa..bc0275b695e7 100644
--- a/pkgs/development/libraries/nvidia-vaapi-driver/default.nix
+++ b/pkgs/development/libraries/nvidia-vaapi-driver/default.nix
@@ -15,13 +15,13 @@
 
 stdenv.mkDerivation rec {
   pname = "nvidia-vaapi-driver";
-  version = "0.0.14";
+  version = "0.0.15";
 
   src = fetchFromGitHub {
     owner = "elFarto";
     repo = "nvidia-vaapi-driver";
     rev = "v${version}";
-    sha256 = "sha256-Nf2Qh+POkcKXjiHlmpfSCbY+vgT63bWIaMxQHHYtE04=";
+    sha256 = "sha256-q51ChAPcTKgYtMzcesKDDDeZRg0/+bSlA4VxsLKn/BA=";
   };
 
   patches = [
diff --git a/pkgs/development/lua-modules/overrides.nix b/pkgs/development/lua-modules/overrides.nix
index da2aaee483eb..0a6fddfa1e23 100644
--- a/pkgs/development/lua-modules/overrides.nix
+++ b/pkgs/development/lua-modules/overrides.nix
@@ -17,7 +17,6 @@
   fetchurl,
   fzf,
   glib,
-  glibc,
   gmp,
   gnulib,
   gnum4,
@@ -25,6 +24,7 @@
   imagemagick,
   installShellFiles,
   lib,
+  libc,
   libevent,
   libiconv,
   libmpack,
@@ -416,7 +416,7 @@ in
 
   lrexlib-posix = prev.lrexlib-posix.overrideAttrs (old: {
     buildInputs = old.buildInputs ++ [
-      glibc.dev
+      (lib.getDev libc)
     ];
   });
 
@@ -704,7 +704,7 @@ in
 
   luasystem = prev.luasystem.overrideAttrs (
     lib.optionalAttrs stdenv.hostPlatform.isLinux {
-      buildInputs = [ glibc.out ];
+      buildInputs = [ libc.out ];
     }
   );
 
diff --git a/pkgs/development/ocaml-modules/elpi/default.nix b/pkgs/development/ocaml-modules/elpi/default.nix
index 6b9dc3739119..1463cbf355b9 100644
--- a/pkgs/development/ocaml-modules/elpi/default.nix
+++ b/pkgs/development/ocaml-modules/elpi/default.nix
@@ -90,7 +90,7 @@ buildDunePackage {
   ]
   ++ (if lib.versionAtLeast version "1.15" || version == "dev" then [ menhirLib ] else [ camlp5 ])
   ++ (
-    if lib.versionAtLeast version "3.3.0" || version == "dev" then
+    if lib.versionAtLeast version "2.0.7" || version == "dev" then
       [
         ppx_deriving
       ]
diff --git a/pkgs/development/ocaml-modules/reason-native/default.nix b/pkgs/development/ocaml-modules/reason-native/default.nix
index aa0c6860f73a..46df185ce87c 100644
--- a/pkgs/development/ocaml-modules/reason-native/default.nix
+++ b/pkgs/development/ocaml-modules/reason-native/default.nix
@@ -22,8 +22,11 @@ lib.makeScope newScope (self: {
 
   # Upstream doesn't use tags, releases, or branches.
   src = fetchFromGitHub {
+    pname = "reason-native";
+    version = "0-unstable-2024-05-07";
     owner = "reasonml";
     repo = "reason-native";
+    # When updating this make sure to also update the `version` above
     rev = "20b1997b6451d9715dfdbeec86a9d274c7430ed8";
     hash = "sha256-96Ucq70eSy6pqh5ne9xoODWe/nPuriZnFAdx0OkLVCs=";
   };
diff --git a/pkgs/development/ocaml-modules/smtml/default.nix b/pkgs/development/ocaml-modules/smtml/default.nix
index 612c0c442520..72ea1a635acd 100644
--- a/pkgs/development/ocaml-modules/smtml/default.nix
+++ b/pkgs/development/ocaml-modules/smtml/default.nix
@@ -27,13 +27,13 @@
 
 buildDunePackage (finalAttrs: {
   pname = "smtml";
-  version = "0.19.0";
+  version = "0.20.0";
 
   src = fetchFromGitHub {
     owner = "formalsec";
     repo = "smtml";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ZS+SVmpmvUP2V3DTQ5+QNjFWgj3O3vFIST5c7CifIos=";
+    hash = "sha256-VnkF+bZXeqaj9LSpyzqH5AM9EQsrW4Rlj5kvyTfYTKE=";
   };
 
   minimalOCamlVersion = "4.14";
@@ -85,6 +85,7 @@ buildDunePackage (finalAttrs: {
     downloadPage = "https://github.com/formalsec/smtml";
     changelog = "https://github.com/formalsec/smtml/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
+    teams = with lib.teams; [ ngi ];
     maintainers = with lib.maintainers; [
       ethancedwards8
       redianthus
diff --git a/pkgs/development/php-packages/mongodb/default.nix b/pkgs/development/php-packages/mongodb/default.nix
index 8566f284ced7..bced37bd9712 100644
--- a/pkgs/development/php-packages/mongodb/default.nix
+++ b/pkgs/development/php-packages/mongodb/default.nix
@@ -15,13 +15,13 @@
 
 buildPecl rec {
   pname = "mongodb";
-  version = "2.1.4";
+  version = "2.1.7";
 
   src = fetchFromGitHub {
     owner = "mongodb";
     repo = "mongo-php-driver";
     rev = version;
-    hash = "sha256-hvkC0fBONDhgozTfEM0xdlDSY9VM4O1qCgJKEwWOdH0=";
+    hash = "sha256-07Sc9bg5MHWhAyhrghqGjblMrgP/kuKwIjtt0WUCnDo=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/development/python-modules/apiflask/default.nix b/pkgs/development/python-modules/apiflask/default.nix
new file mode 100644
index 000000000000..d602fffc52b1
--- /dev/null
+++ b/pkgs/development/python-modules/apiflask/default.nix
@@ -0,0 +1,72 @@
+{
+  lib,
+  apispec,
+  asgiref,
+  buildPythonPackage,
+  fetchFromGitHub,
+  flask-httpauth,
+  flask-marshmallow,
+  flask-sqlalchemy,
+  flask,
+  marshmallow,
+  marshmallow-dataclass,
+  openapi-spec-validator,
+  pydantic,
+  pytest-cov-stub,
+  pytestCheckHook,
+  python-dotenv,
+  pyyaml,
+  setuptools,
+  webargs,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "apiflask";
+  version = "3.0.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "apiflask";
+    repo = "apiflask";
+    tag = finalAttrs.version;
+    hash = "sha256-1nWA2PDgTG++AA0pJeGDiSQyRqLRGfDuzRwfDl8RKl0=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    apispec
+    flask
+    flask-httpauth
+    flask-marshmallow
+    flask-sqlalchemy
+    marshmallow
+    marshmallow-dataclass
+    pydantic
+    webargs
+  ]
+  ++ pydantic.optional-dependencies.email;
+
+  optional-dependencies = {
+    async = [ asgiref ];
+    dotenv = [ python-dotenv ];
+    yaml = [ pyyaml ];
+  };
+
+  nativeCheckInputs = [
+    openapi-spec-validator
+    pytest-cov-stub
+    pytestCheckHook
+  ]
+  ++ lib.flatten (builtins.attrValues finalAttrs.passthru.optional-dependencies);
+
+  pythonImportsCheck = [ "apiflask" ];
+
+  meta = {
+    description = "Lightweight Python web API framework";
+    homepage = "https://github.com/apiflask/apiflask";
+    changelog = "https://github.com/apiflask/apiflask/blob/${finalAttrs.src.tag}/CHANGES.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+  };
+})
diff --git a/pkgs/development/python-modules/ariadne/default.nix b/pkgs/development/python-modules/ariadne/default.nix
index f258dd58d375..dd745a848eb2 100644
--- a/pkgs/development/python-modules/ariadne/default.nix
+++ b/pkgs/development/python-modules/ariadne/default.nix
@@ -18,14 +18,14 @@
 
 buildPythonPackage rec {
   pname = "ariadne";
-  version = "0.27.0";
+  version = "0.27.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mirumee";
     repo = "ariadne";
     tag = version;
-    hash = "sha256-y09w1y+NV2HX8cXGMqv6LvPqGXxFfoaz4DS+oH25dNg=";
+    hash = "sha256-Ew01tj/UzZw3IBY33tDfLihWKImjKTZfFcfThphk+H8=";
   };
 
   patches = [ ./remove-opentracing.patch ];
diff --git a/pkgs/development/python-modules/boto3-stubs/default.nix b/pkgs/development/python-modules/boto3-stubs/default.nix
index 3201bf0ab679..7f186aef5919 100644
--- a/pkgs/development/python-modules/boto3-stubs/default.nix
+++ b/pkgs/development/python-modules/boto3-stubs/default.nix
@@ -358,13 +358,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "boto3-stubs";
-  version = "1.42.35";
+  version = "1.42.38";
   pyproject = true;
 
   src = fetchPypi {
     pname = "boto3_stubs";
     inherit (finalAttrs) version;
-    hash = "sha256-IKq13uWdTQqVFSvXvlhPqvufa88Ub//zzWBV9x0AbWo=";
+    hash = "sha256-ZOPT//RnC2d+8cWUrMoIFw1ENICl/PROydy+FDsrXuQ=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/botocore-stubs/default.nix b/pkgs/development/python-modules/botocore-stubs/default.nix
index 686d13255e45..753a6599ceba 100644
--- a/pkgs/development/python-modules/botocore-stubs/default.nix
+++ b/pkgs/development/python-modules/botocore-stubs/default.nix
@@ -9,13 +9,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "botocore-stubs";
-  version = "1.42.35";
+  version = "1.42.38";
   pyproject = true;
 
   src = fetchPypi {
     pname = "botocore_stubs";
     inherit (finalAttrs) version;
-    hash = "sha256-N1z5U09vKjW9LJ5wduiPtJ+31YnFqsEp22qf/BNWHK0=";
+    hash = "sha256-ls9jtpSSZPB49QCfpykyxv0GqIx73k4h7ZbfbDfo7aw=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/brotlicffi/default.nix b/pkgs/development/python-modules/brotlicffi/default.nix
index 618bffa99933..7195cff91307 100644
--- a/pkgs/development/python-modules/brotlicffi/default.nix
+++ b/pkgs/development/python-modules/brotlicffi/default.nix
@@ -3,9 +3,11 @@
   fetchFromGitHub,
   buildPythonPackage,
   cffi,
+  isPyPy,
   # overridden as pkgs.brotli
   brotli,
   setuptools,
+  pycparser,
   pytestCheckHook,
   hypothesis,
 }:
@@ -28,7 +30,7 @@ buildPythonPackage rec {
 
   propagatedNativeBuildInputs = [ cffi ];
 
-  dependencies = [ cffi ];
+  dependencies = [ cffi ] ++ lib.optional isPyPy pycparser;
 
   preBuild = ''
     export USE_SHARED_BROTLI=1
diff --git a/pkgs/development/python-modules/camelot/default.nix b/pkgs/development/python-modules/camelot/default.nix
index 70f34d44fea4..be72b9b1488e 100644
--- a/pkgs/development/python-modules/camelot/default.nix
+++ b/pkgs/development/python-modules/camelot/default.nix
@@ -1,41 +1,56 @@
 {
-  lib,
   buildPythonPackage,
   chardet,
-  openpyxl,
   charset-normalizer,
-  fetchPypi,
-  pandas,
-  tabulate,
   click,
+  fetchPypi,
+  lib,
+  opencv-python-headless,
+  openpyxl,
+  pandas,
   pdfminer-six,
+  pillow,
+  pkgs,
   pypdf,
-  opencv4,
+  pypdfium2,
   setuptools,
+  tabulate,
 }:
 
 buildPythonPackage rec {
   pname = "camelot-py";
-  version = "0.11.0";
+  version = "1.0.9";
   pyproject = true;
 
   src = fetchPypi {
-    inherit pname version;
-    hash = "sha256-l6fZBtaF5AWaSlSaY646UfCrcqPIJlV/hEPGWhGB3+Y=";
+    pname = "camelot_py";
+    inherit version;
+    hash = "sha256-1D2Idm98NGKAP/EUZOfT0VqSI+hFly3ith73w/YtMgA=";
   };
 
-  nativeBuildInputs = [ setuptools ];
+  patches = [ ./ghostscript.patch ];
 
-  propagatedBuildInputs = [
-    charset-normalizer
+  postPatch = ''
+    substituteInPlace camelot/backends/ghostscript_backend.py \
+      --replace-fail '@ghostscript@' ${lib.getExe pkgs.ghostscript_headless}
+  '';
+
+  pythonRelaxDeps = [ "pypdf" ];
+
+  build-system = [ setuptools ];
+
+  dependencies = [
     chardet
-    pandas
-    tabulate
+    charset-normalizer
     click
-    pdfminer-six
+    opencv-python-headless
     openpyxl
+    pandas
+    pdfminer-six
+    pillow
     pypdf
-    opencv4
+    pypdfium2
+    tabulate
   ];
 
   doCheck = false;
diff --git a/pkgs/development/python-modules/camelot/ghostscript.patch b/pkgs/development/python-modules/camelot/ghostscript.patch
new file mode 100644
index 000000000000..b7bc7ba7bfaa
--- /dev/null
+++ b/pkgs/development/python-modules/camelot/ghostscript.patch
@@ -0,0 +1,13 @@
+diff --git a/camelot/backends/ghostscript_backend.py b/camelot/backends/ghostscript_backend.py
+index 1de7da1..1179e87 100644
+--- a/camelot/backends/ghostscript_backend.py
++++ b/camelot/backends/ghostscript_backend.py
+@@ -36,7 +36,7 @@ def convert(self, pdf_path, png_path, resolution=300):
+         import ghostscript
+ 
+         gs_command = [
+-            "gs",
++            "@ghostscript@",
+             "-q",
+             "-sDEVICE=png16m",
+             "-o",
diff --git a/pkgs/development/python-modules/certbot/default.nix b/pkgs/development/python-modules/certbot/default.nix
index 662b4ca4c8a5..fd65dcc1929f 100644
--- a/pkgs/development/python-modules/certbot/default.nix
+++ b/pkgs/development/python-modules/certbot/default.nix
@@ -87,11 +87,15 @@ buildPythonPackage rec {
     let
       pythonEnv = python.withPackages f;
     in
-    runCommand "certbot-with-plugins" { } ''
-      mkdir -p $out/bin
-      cd $out/bin
-      ln -s ${pythonEnv}/bin/certbot
-    '';
+    runCommand "certbot-with-plugins-${version}"
+      {
+        inherit pname version;
+      }
+      ''
+        mkdir -p $out/bin
+        cd $out/bin
+        ln -s ${pythonEnv}/bin/certbot
+      '';
 
   meta = {
     homepage = "https://github.com/certbot/certbot";
diff --git a/pkgs/development/python-modules/deebot-client/default.nix b/pkgs/development/python-modules/deebot-client/default.nix
index 90dc97a34259..e683487ff1ed 100644
--- a/pkgs/development/python-modules/deebot-client/default.nix
+++ b/pkgs/development/python-modules/deebot-client/default.nix
@@ -20,9 +20,9 @@
   xz,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "deebot-client";
-  version = "17.0.1";
+  version = "17.1.0";
   pyproject = true;
 
   disabled = pythonOlder "3.13";
@@ -30,19 +30,15 @@ buildPythonPackage rec {
   src = fetchFromGitHub {
     owner = "DeebotUniverse";
     repo = "client.py";
-    tag = version;
-    hash = "sha256-evd0wqID9kEBzhJgRSpcd95ALp9LPSb5RM3wEIKuY0Y=";
+    tag = finalAttrs.version;
+    hash = "sha256-0gKjps5KqbicYYyN3VTO9diF11zR1UYsTyIwZG34doI=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
-    inherit pname version src;
-    hash = "sha256-cLNFUDT74NrBgUL6vGC6lbFy2A2W1jYF7A8H3BQ/s8A=";
+    inherit (finalAttrs) pname version src;
+    hash = "sha256-h1iSXoVv9J6u30VCudIhGBuJsWCKUJyXhVaM/5f5NqI=";
   };
 
-  pythonRelaxDeps = [
-    "aiohttp"
-  ];
-
   nativeBuildInputs = [
     pkg-config
     rustPlatform.cargoSetupHook
@@ -93,8 +89,8 @@ buildPythonPackage rec {
   meta = {
     description = "Deebot client library";
     homepage = "https://github.com/DeebotUniverse/client.py";
-    changelog = "https://github.com/DeebotUniverse/client.py/releases/tag/${version}";
+    changelog = "https://github.com/DeebotUniverse/client.py/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/djangoql/default.nix b/pkgs/development/python-modules/djangoql/default.nix
index 3f0eba9b0cd0..3204f1ba6bf6 100644
--- a/pkgs/development/python-modules/djangoql/default.nix
+++ b/pkgs/development/python-modules/djangoql/default.nix
@@ -4,20 +4,23 @@
   fetchPypi,
   python,
   django,
+  setuptools,
   ply,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "djangoql";
-  version = "0.18.0";
-  format = "setuptools";
+  version = "0.19.1";
+  pyproject = true;
 
   src = fetchPypi {
-    inherit pname version;
-    hash = "sha256-x8KJ08BLKLRD42uqIW/FSFf3V6TFNXLTyWaoCr5Zb78=";
+    inherit (finalAttrs) pname version;
+    hash = "sha256-vOCdUoV4V7InRPkyQfFtXGKhsRing04civoUvruWTu4=";
   };
 
-  propagatedBuildInputs = [ ply ];
+  build-system = [ setuptools ];
+
+  dependencies = [ ply ];
 
   nativeCheckInputs = [ django ];
 
@@ -26,10 +29,13 @@ buildPythonPackage rec {
     ${python.executable} test_project/manage.py test core.tests
   '';
 
+  pythonImportsCheck = [ "djangoql" ];
+
   meta = {
     description = "Advanced search language for Django";
     homepage = "https://github.com/ivelum/djangoql";
+    changelog = "https://github.com/ivelum/djangoql/blob/master/CHANGES.rst";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ erikarvstedt ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/dockerflow/default.nix b/pkgs/development/python-modules/dockerflow/default.nix
index 0567f69ceaf5..216bb5508136 100644
--- a/pkgs/development/python-modules/dockerflow/default.nix
+++ b/pkgs/development/python-modules/dockerflow/default.nix
@@ -30,14 +30,14 @@
 
 buildPythonPackage rec {
   pname = "dockerflow";
-  version = "2024.04.2";
+  version = "2026.01.26";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mozilla-services";
     repo = "python-dockerflow";
     tag = version;
-    hash = "sha256-5Ov605FyhX+n6vFks2sdtviGqkrgDIMXpcvgqR85jmQ=";
+    hash = "sha256-wtofNcpsOAq2yQJf6n+DcVfzY+IQ2k6S8r2zHIWAosg=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/docling-core/default.nix b/pkgs/development/python-modules/docling-core/default.nix
index 1beaa994f696..91e9ccd4faa8 100644
--- a/pkgs/development/python-modules/docling-core/default.nix
+++ b/pkgs/development/python-modules/docling-core/default.nix
@@ -31,14 +31,14 @@
 
 buildPythonPackage rec {
   pname = "docling-core";
-  version = "2.60.2";
+  version = "2.61.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "docling-project";
     repo = "docling-core";
     tag = "v${version}";
-    hash = "sha256-KrWeh5b3w1dBk3l7S1FpgONWqP9gS6nhbLIly3Nbtvg=";
+    hash = "sha256-D1p6YHWePE9aKOEj81X/nxZQFne0FO7+Rz3vc5Q2i6U=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/dom-toml/default.nix b/pkgs/development/python-modules/dom-toml/default.nix
index 8b94a193f4bd..ab9406d6c45a 100644
--- a/pkgs/development/python-modules/dom-toml/default.nix
+++ b/pkgs/development/python-modules/dom-toml/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage rec {
   pname = "dom-toml";
-  version = "2.2.0";
+  version = "2.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "domdfcoding";
     repo = "dom_toml";
     tag = "v${version}";
-    hash = "sha256-2kO/6spc+y/ltHf493JkSKI0vGuJu2a29fqsW/EDFxE=";
+    hash = "sha256-ukRnQecbgZBdTHhyEBIoHUwGTwQVJxo+u7Dqg4Kjvsw=";
   };
 
   build-system = [ flit-core ];
diff --git a/pkgs/development/python-modules/fritzconnection/default.nix b/pkgs/development/python-modules/fritzconnection/default.nix
index 86d4f0cf653f..1de0d06e5db5 100644
--- a/pkgs/development/python-modules/fritzconnection/default.nix
+++ b/pkgs/development/python-modules/fritzconnection/default.nix
@@ -6,18 +6,19 @@
   requests,
   segno,
   setuptools,
+  writableTmpDirAsHomeHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "fritzconnection";
-  version = "1.15.0";
+  version = "1.15.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "kbr";
     repo = "fritzconnection";
-    tag = version;
-    hash = "sha256-ulY+nh9CSnxrktTlFSXAWJALkS4GwP/3dRIG07jQCWs=";
+    tag = finalAttrs.version;
+    hash = "sha256-J07zAXZxQc3TCfsjYcBhQdxsYwHabE9vdj3eMkWua54=";
   };
 
   build-system = [ setuptools ];
@@ -28,11 +29,10 @@ buildPythonPackage rec {
     qr = [ segno ];
   };
 
-  nativeCheckInputs = [ pytestCheckHook ];
-
-  preCheck = ''
-    export HOME=$TEMP
-  '';
+  nativeCheckInputs = [
+    pytestCheckHook
+    writableTmpDirAsHomeHook
+  ];
 
   pythonImportsCheck = [ "fritzconnection" ];
 
@@ -44,11 +44,11 @@ buildPythonPackage rec {
   meta = {
     description = "Python module to communicate with the AVM Fritz!Box";
     homepage = "https://github.com/kbr/fritzconnection";
-    changelog = "https://fritzconnection.readthedocs.io/en/${version}/sources/version_history.html";
+    changelog = "https://fritzconnection.readthedocs.io/en/${finalAttrs.src.tag}/sources/version_history.html";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [
       dotlambda
       valodim
     ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/fsspec-xrootd/default.nix b/pkgs/development/python-modules/fsspec-xrootd/default.nix
index 87a0f321b45f..05dc71ba7932 100644
--- a/pkgs/development/python-modules/fsspec-xrootd/default.nix
+++ b/pkgs/development/python-modules/fsspec-xrootd/default.nix
@@ -17,16 +17,16 @@
   pytestCheckHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "fsspec-xrootd";
-  version = "0.5.1";
+  version = "0.5.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "CoffeaTeam";
     repo = "fsspec-xrootd";
-    tag = "v${version}";
-    hash = "sha256-Vpe/Gcm6rmehG05h2H7BDZcBQDyie0Ww9X8LgoTgAkE=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-UKZO5lgOOfzyOsrDZ2En67Xhm+BKvHELGuvkwSHbolY=";
   };
 
   build-system = [
@@ -45,8 +45,10 @@ buildPythonPackage rec {
     pkgs.xrootd
     pytestCheckHook
   ];
-
   disabledTests = [
+    # Hangs indefinitely
+    "test_broken_server"
+
     # Fails (on aarch64-linux) as it runs sleep, touch, stat and makes assumptions about the
     # scheduler and the filesystem.
     "test_touch_modified"
@@ -58,8 +60,8 @@ buildPythonPackage rec {
   meta = {
     description = "XRootD implementation for fsspec";
     homepage = "https://github.com/CoffeaTeam/fsspec-xrootd";
-    changelog = "https://github.com/CoffeaTeam/fsspec-xrootd/releases/tag/v${version}";
+    changelog = "https://github.com/CoffeaTeam/fsspec-xrootd/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.bsd3;
     maintainers = with lib.maintainers; [ GaetanLepage ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/glymur/default.nix b/pkgs/development/python-modules/glymur/default.nix
index 8014d12938aa..d2ab960d923f 100644
--- a/pkgs/development/python-modules/glymur/default.nix
+++ b/pkgs/development/python-modules/glymur/default.nix
@@ -25,14 +25,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "glymur";
-  version = "0.14.4";
+  version = "0.14.6";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "quintusdias";
     repo = "glymur";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-9CvsknpvBIHe2HEqwN43RRhRxh8D0eHQ/T9W3/eVJlQ=";
+    hash = "sha256-k6NvXeEk2N7+2LCvgOqq7fF7sgp/5r9uf6Vv5NLEyzA=";
   };
 
   patches = [
diff --git a/pkgs/development/python-modules/hypothesis/default.nix b/pkgs/development/python-modules/hypothesis/default.nix
index 25c4db7fb3eb..ce6f3671a2ae 100644
--- a/pkgs/development/python-modules/hypothesis/default.nix
+++ b/pkgs/development/python-modules/hypothesis/default.nix
@@ -129,6 +129,10 @@ buildPythonPackage rec {
     "test_resolving_standard_reversible_as_generic"
     "test_resolving_standard_sequence_as_generic"
     "test_specialised_collection_types"
+  ]
+  ++ lib.optionals isPyPy [
+    # hypothesis.errors.Unsatisfiable: Could not find any examples from datetimes(min_value=datetime.datetime(2003, 1, 1, 0, 0), max_value=datetime.datetime(2005, 12, 31, 23, 59, 59, 999999)) that satisfied lambda x: x.month == 2 and x.day == 29
+    "test_bordering_on_a_leap_year"
   ];
 
   pythonImportsCheck = [ "hypothesis" ];
diff --git a/pkgs/development/python-modules/iamdata/default.nix b/pkgs/development/python-modules/iamdata/default.nix
index a51eb1755cf3..e204057fe108 100644
--- a/pkgs/development/python-modules/iamdata/default.nix
+++ b/pkgs/development/python-modules/iamdata/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "iamdata";
-  version = "0.1.202601281";
+  version = "0.1.202601291";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "cloud-copilot";
     repo = "iam-data-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-xixOMQC8/gZO7xfA740qd5j9hiRphpotfJdPVKjBIrA=";
+    hash = "sha256-3Q2zBJ85Qmnb10SuudC2ops5uKjDF6oeg8J+Pp5SeLg=";
   };
 
   __darwinAllowLocalNetworking = true;
diff --git a/pkgs/development/python-modules/iplotx/default.nix b/pkgs/development/python-modules/iplotx/default.nix
index 6f69ca7818f2..3f098ef33d2b 100644
--- a/pkgs/development/python-modules/iplotx/default.nix
+++ b/pkgs/development/python-modules/iplotx/default.nix
@@ -12,16 +12,16 @@
   pytestCheckHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "iplotx";
-  version = "0.9.0";
+  version = "1.6.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "fabilab";
     repo = "iplotx";
-    tag = version;
-    hash = "sha256-VYqNz6sbLgniNB9DTCbhgno/91Pd7zoGFg2vx68211Q=";
+    tag = finalAttrs.version;
+    hash = "sha256-pTSY7eEYKwBSDttxZqauGCofYK5SFaxjJLXYBwSr3ew=";
   };
 
   build-system = [ hatchling ];
@@ -49,13 +49,18 @@ buildPythonPackage rec {
     # These tests result in an ImageComparisonFailure
     "test_complex"
     "test_complex_rotatelabels"
+    "test_curved_waypoints"
     "test_directed_graph"
     "test_display_shortest_path"
     "test_labels"
     "test_labels_and_colors"
+    "test_vertex_labels"
   ];
 
-  nativeCheckInputs = [ pytestCheckHook ] ++ lib.concatAttrValues optional-dependencies;
+  nativeCheckInputs = [
+    pytestCheckHook
+  ]
+  ++ lib.concatAttrValues finalAttrs.passthru.optional-dependencies;
 
   pythonImportsCheck = [ "iplotx" ];
 
@@ -65,4 +70,4 @@ buildPythonPackage rec {
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ jboy ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/jplephem/default.nix b/pkgs/development/python-modules/jplephem/default.nix
index b3c8d5c24fe5..3c7de9e15ad4 100644
--- a/pkgs/development/python-modules/jplephem/default.nix
+++ b/pkgs/development/python-modules/jplephem/default.nix
@@ -7,12 +7,12 @@
 
 buildPythonPackage rec {
   pname = "jplephem";
-  version = "2.23";
+  version = "2.24";
   format = "setuptools";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-0/uUd+S/TDnRBJfU/xXlJxt6wD+hAeGCGqxSfWRuzPk=";
+    hash = "sha256-NU/hra4CImSrRvGK+2ryYhEnfP17PvkEAHVfyr6TvBE=";
   };
 
   propagatedBuildInputs = [ numpy ];
diff --git a/pkgs/development/python-modules/jupyter-book/default.nix b/pkgs/development/python-modules/jupyter-book/default.nix
index dbfcd863f534..9f709374fbba 100644
--- a/pkgs/development/python-modules/jupyter-book/default.nix
+++ b/pkgs/development/python-modules/jupyter-book/default.nix
@@ -24,21 +24,21 @@
   versionCheckHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "jupyter-book";
-  version = "2.1.0";
+  version = "2.1.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jupyter-book";
     repo = "jupyter-book";
-    tag = "v${version}";
-    hash = "sha256-Wh3ggKbV0mmcIbpIMsF09UH9ZyVOgpYAx4ppTSUHIKo=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-TpscnIywWNBd3eGMe8QDV1bqbTs1z2FbGJqAh/BCOg8=";
   };
 
   npmDeps = fetchNpmDeps {
-    inherit src;
-    hash = "sha256-oNTVzpjDb4bXIpuZcO/6f82UfOVxbkMMluwOKaNM5tE=";
+    inherit (finalAttrs) src;
+    hash = "sha256-y2vZG64+ZtjANZgResUTVIoibK8GQIgKildpvTJypq4=";
   };
 
   build-system = [
@@ -76,9 +76,9 @@ buildPythonPackage rec {
   meta = {
     description = "Build a book with Jupyter Notebooks and Sphinx";
     homepage = "https://jupyterbook.org/";
-    changelog = "https://github.com/jupyter-book/jupyter-book/blob/${src.rev}/CHANGELOG.md";
+    changelog = "https://github.com/jupyter-book/jupyter-book/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     license = lib.licenses.bsd3;
     teams = [ lib.teams.jupyter ];
     mainProgram = "jupyter-book";
   };
-}
+})
diff --git a/pkgs/development/python-modules/kagglehub/default.nix b/pkgs/development/python-modules/kagglehub/default.nix
index 440bf2f0998e..edf16ebc882f 100644
--- a/pkgs/development/python-modules/kagglehub/default.nix
+++ b/pkgs/development/python-modules/kagglehub/default.nix
@@ -2,7 +2,6 @@
   lib,
   buildPythonPackage,
   fetchFromGitHub,
-  pythonAtLeast,
 
   # build-system
   hatchling,
@@ -39,14 +38,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "kagglehub";
-  version = "0.4.0";
+  version = "0.4.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Kaggle";
     repo = "kagglehub";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-R9yV29Yrq9it21K2GZLXMNM8MjBAG1iYb1o1azrAghM=";
+    hash = "sha256-r7PP9d6W/rAjt/PUNeF5xlo7EpEfAbyNTNr7/oEpbN0=";
   };
 
   build-system = [
@@ -103,13 +102,6 @@ buildPythonPackage (finalAttrs: {
   disabledTests = [
     # Requires internet access
     "test_model_signing"
-  ]
-  ++ lib.optionals (pythonAtLeast "3.14") [
-    # TypeError: Pickler._batch_setitems() takes 2 positional arguments but 3 were given
-    "test_hf_dataset_succeeds"
-    "test_hf_dataset_with_other_loader_kwargs_prints_warning"
-    "test_hf_dataset_with_splits_succeeds"
-    "test_hf_dataset_with_valid_kwargs_succeeds"
   ];
 
   __darwinAllowLocalNetworking = true;
diff --git a/pkgs/development/python-modules/llama-index-llms-openai/default.nix b/pkgs/development/python-modules/llama-index-llms-openai/default.nix
index 8a7304f57812..310bae8e1652 100644
--- a/pkgs/development/python-modules/llama-index-llms-openai/default.nix
+++ b/pkgs/development/python-modules/llama-index-llms-openai/default.nix
@@ -9,13 +9,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "llama-index-llms-openai";
-  version = "0.6.13";
+  version = "0.6.15";
   pyproject = true;
 
   src = fetchPypi {
     pname = "llama_index_llms_openai";
     inherit (finalAttrs) version;
-    hash = "sha256-47dCK8ciduAKmA2CZHfQsU1b90O6acSk8L3uD1Il1FA=";
+    hash = "sha256-W9BZ6kRBLpJ3Q6mLseW4Sy4ZS7OW75WVJ/w6isgLAl0=";
   };
 
   pythonRemoveDeps = [
diff --git a/pkgs/development/python-modules/llama-index-vector-stores-postgres/default.nix b/pkgs/development/python-modules/llama-index-vector-stores-postgres/default.nix
index cfe9504ac9c9..9bc8cd2c5fa8 100644
--- a/pkgs/development/python-modules/llama-index-vector-stores-postgres/default.nix
+++ b/pkgs/development/python-modules/llama-index-vector-stores-postgres/default.nix
@@ -9,15 +9,15 @@
   psycopg2,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "llama-index-vector-stores-postgres";
-  version = "0.7.2";
+  version = "0.7.3";
   pyproject = true;
 
   src = fetchPypi {
     pname = "llama_index_vector_stores_postgres";
-    inherit version;
-    hash = "sha256-0p25AoDSSCvarESejZBw4AfsMDsEjt+2ckfdXCBuerU=";
+    inherit (finalAttrs) version;
+    hash = "sha256-e1xi5GLWgde42GaLk+WwAjv9Oqr8924rS/z4hdw7ScY=";
   };
 
   pythonRemoveDeps = [ "psycopg2-binary" ];
@@ -41,4 +41,4 @@ buildPythonPackage rec {
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/marshmallow-dataclass/default.nix b/pkgs/development/python-modules/marshmallow-dataclass/default.nix
index 1638fb33e17a..c229ae66d40c 100644
--- a/pkgs/development/python-modules/marshmallow-dataclass/default.nix
+++ b/pkgs/development/python-modules/marshmallow-dataclass/default.nix
@@ -2,6 +2,7 @@
   lib,
   buildPythonPackage,
   fetchFromGitHub,
+  fetchpatch,
   marshmallow,
   pytestCheckHook,
   setuptools,
@@ -9,7 +10,7 @@
   typing-inspect,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "marshmallow-dataclass";
   version = "8.7.1";
   pyproject = true;
@@ -17,10 +18,19 @@ buildPythonPackage rec {
   src = fetchFromGitHub {
     owner = "lovasoa";
     repo = "marshmallow_dataclass";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-0OXP78oyNe/UcI05NHskPyXAuX3dwAW4Uz4dI4b8KV0=";
   };
 
+  patches = [
+    # Fix test_set_only_work_in_hashable_types on Python 3.14, https://github.com/lovasoa/marshmallow_dataclass/pull/286
+    (fetchpatch {
+      name = "fix-test.patch";
+      url = "https://github.com/lovasoa/marshmallow_dataclass/commit/9a2ea19924a3cd5fadeb41663bfca64b9c0f75e4.patch";
+      hash = "sha256-T2UbZdCj4+HRglMp8w3kU20sUcN6WoSyKiLNr1kSius=";
+    })
+  ];
+
   build-system = [ setuptools ];
 
   dependencies = [
@@ -48,8 +58,8 @@ buildPythonPackage rec {
   meta = {
     description = "Automatic generation of marshmallow schemas from dataclasses";
     homepage = "https://github.com/lovasoa/marshmallow_dataclass";
-    changelog = "https://github.com/lovasoa/marshmallow_dataclass/blob/v${version}/CHANGELOG.md";
+    changelog = "https://github.com/lovasoa/marshmallow_dataclass/blob/v${finalAttrs.version}/CHANGELOG.md";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/matplotlib/default.nix b/pkgs/development/python-modules/matplotlib/default.nix
index 7d8f2d812e43..ceb0c0c1349c 100644
--- a/pkgs/development/python-modules/matplotlib/default.nix
+++ b/pkgs/development/python-modules/matplotlib/default.nix
@@ -93,18 +93,23 @@ buildPythonPackage rec {
   # installed under the same path which is not true in Nix.
   # With the following patch we just hard-code these paths into the install
   # script.
-  postPatch = ''
-    substituteInPlace pyproject.toml \
-      --replace-fail "meson-python>=0.13.1,<0.17.0" meson-python
+  postPatch =
+    lib.optionalString isPyPy ''
+      substituteInPlace tools/generate_matplotlibrc.py \
+        --replace-fail "/usr/bin/env python3" "/usr/bin/env pypy3"
+    ''
+    + ''
+      substituteInPlace pyproject.toml \
+        --replace-fail "meson-python>=0.13.1,<0.17.0" meson-python
 
-    patchShebangs tools
-  ''
-  + lib.optionalString (stdenv.hostPlatform.isLinux && interactive) ''
-    # fix paths to libraries in dlopen calls (headless detection)
-    substituteInPlace src/_c_internal_utils.cpp \
-      --replace-fail libX11.so.6 ${libX11}/lib/libX11.so.6 \
-      --replace-fail libwayland-client.so.0 ${wayland}/lib/libwayland-client.so.0
-  '';
+      patchShebangs tools
+    ''
+    + lib.optionalString (stdenv.hostPlatform.isLinux && interactive) ''
+      # fix paths to libraries in dlopen calls (headless detection)
+      substituteInPlace src/_c_internal_utils.cpp \
+        --replace-fail libX11.so.6 ${libX11}/lib/libX11.so.6 \
+        --replace-fail libwayland-client.so.0 ${wayland}/lib/libwayland-client.so.0
+    '';
 
   nativeBuildInputs = [ pkg-config ] ++ lib.optionals enableGtk3 [ gobject-introspection ];
 
diff --git a/pkgs/development/python-modules/meteofrance-api/default.nix b/pkgs/development/python-modules/meteofrance-api/default.nix
index ed506fc4d49d..b12966185929 100644
--- a/pkgs/development/python-modules/meteofrance-api/default.nix
+++ b/pkgs/development/python-modules/meteofrance-api/default.nix
@@ -4,24 +4,21 @@
   fetchFromGitHub,
   poetry-core,
   pytestCheckHook,
-  pythonOlder,
   pytz,
   requests,
   requests-mock,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "meteofrance-api";
-  version = "1.4.0";
+  version = "1.5.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.11";
-
   src = fetchFromGitHub {
     owner = "hacf-fr";
     repo = "meteofrance-api";
-    tag = "v${version}";
-    hash = "sha256-5zqmzPbzC9IUZ+y1FRh+u1gds/ZdGeRm5/ajQf8UKTQ=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-zvfFMxXbCul14OXaoRdjMWKW3FYyTUcYGklHgb04nvA=";
   };
 
   build-system = [ poetry-core ];
@@ -57,9 +54,9 @@ buildPythonPackage rec {
   meta = {
     description = "Module to access information from the Meteo-France API";
     homepage = "https://github.com/hacf-fr/meteofrance-api";
-    changelog = "https://github.com/hacf-fr/meteofrance-api/releases/tag/v${version}";
+    changelog = "https://github.com/hacf-fr/meteofrance-api/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
     mainProgram = "meteofrance-api";
   };
-}
+})
diff --git a/pkgs/development/python-modules/mistralai/default.nix b/pkgs/development/python-modules/mistralai/default.nix
index 6abc437a4160..35c8abc0e840 100644
--- a/pkgs/development/python-modules/mistralai/default.nix
+++ b/pkgs/development/python-modules/mistralai/default.nix
@@ -33,14 +33,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "mistralai";
-  version = "1.10.1";
+  version = "1.11.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mistralai";
     repo = "client-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-y1et8Ez5TAge0kk/a9fA1zcgPStYf+6aO19OLhMGk/8=";
+    hash = "sha256-KpZCUaitc5Gz5ZI7vEK0CEe4Eo+H6gS9FuKlqhyQDes=";
   };
 
   preBuild = ''
diff --git a/pkgs/development/python-modules/mypy-boto3/default.nix b/pkgs/development/python-modules/mypy-boto3/default.nix
index 5d53d8d63497..015cef3f0fd9 100644
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -311,8 +311,8 @@ in
       "sha256-N9PEmvqI7Yc7AAuDdOj1iePSq7hJTgOmS+4z7GzYd98=";
 
   mypy-boto3-cognito-idp =
-    buildMypyBoto3Package "cognito-idp" "1.42.3"
-      "sha256-KCVazTb8gIjJokV+jyjpBzcXt6cg3B8i5ogt3iFYlyk=";
+    buildMypyBoto3Package "cognito-idp" "1.42.37"
+      "sha256-Njxu5vNc9GPHqBTIvUMQGYxjVSYJrqQMbgd0B2e98pQ=";
 
   mypy-boto3-cognito-sync =
     buildMypyBoto3Package "cognito-sync" "1.42.3"
@@ -335,8 +335,8 @@ in
       "sha256-HQUL0R1NWP6DXQ26iS9k6lIAVdwK899fwLGH4/Z4U8Q=";
 
   mypy-boto3-connect =
-    buildMypyBoto3Package "connect" "1.42.34"
-      "sha256-gXaO6np/xvtkrzYQUSJ60xUk0tm/R6U5tk6ATXciF8I=";
+    buildMypyBoto3Package "connect" "1.42.37"
+      "sha256-LoZkeyFIr8U3OnFc2ay/731aS86kGEPZqwQr9DjTZt0=";
 
   mypy-boto3-connect-contact-lens =
     buildMypyBoto3Package "connect-contact-lens" "1.42.3"
@@ -443,8 +443,8 @@ in
       "sha256-92qhSUqTiLgbtvCdi/Mmgve18mcYR00ABL+bNy7/OnY=";
 
   mypy-boto3-ec2 =
-    buildMypyBoto3Package "ec2" "1.42.35"
-      "sha256-uiUIfubdYTR0JL4fLLArnL9fHMc35JtpBwud2pW3HEw=";
+    buildMypyBoto3Package "ec2" "1.42.38"
+      "sha256-ni/jZ4xTnnVLnPYo7Q4ypDFmGWBySDjjCgLULW0tMr0=";
 
   mypy-boto3-ec2-instance-connect =
     buildMypyBoto3Package "ec2-instance-connect" "1.42.3"
@@ -559,8 +559,8 @@ in
       "sha256-NqNGcL3HfJgx2ScPLKMNNwpVS3bO4Cu7JpYlenSJwJg=";
 
   mypy-boto3-gamelift =
-    buildMypyBoto3Package "gamelift" "1.42.33"
-      "sha256-ur7KFFOyPnCQWKW5JyyQrJ/kumcfE52C8u/J5yJ+kQQ=";
+    buildMypyBoto3Package "gamelift" "1.42.38"
+      "sha256-z9RuMA2e/L1mGm59JhrIM+tDCQqQ7pRm2L5luhQSdoM=";
 
   mypy-boto3-glacier =
     buildMypyBoto3Package "glacier" "1.42.30"
@@ -766,8 +766,8 @@ in
       "sha256-Yb24aPwMfxgh4ftE8k6mCvvJCTuUCxD5J+GElQBMD+U=";
 
   mypy-boto3-lambda =
-    buildMypyBoto3Package "lambda" "1.42.8"
-      "sha256-Vd6tv68OXxGCN4MahNNfSNxxZM4r9+/ctU9UrvQCVgI=";
+    buildMypyBoto3Package "lambda" "1.42.37"
+      "sha256-lPfwcI+bX/pbiz621WS+HvQC67i4zZYEUzK3o7weoOA=";
 
   mypy-boto3-lex-models =
     buildMypyBoto3Package "lex-models" "1.42.3"
@@ -854,16 +854,16 @@ in
       "sha256-1cIpxNx/Q1C89D27DO0PTsFRhZvSok7L1e+B6WjPXvs=";
 
   mypy-boto3-mediaconnect =
-    buildMypyBoto3Package "mediaconnect" "1.42.3"
-      "sha256-NcDxuCqZqbynRmVPzmCNQpGml6tXBaZzTjlqqnTw+RI=";
+    buildMypyBoto3Package "mediaconnect" "1.42.37"
+      "sha256-NYn/N65sVAUxA4kTCi/IJNP/QQeutFjH8S7N2AeK3g8=";
 
   mypy-boto3-mediaconvert =
-    buildMypyBoto3Package "mediaconvert" "1.42.12"
-      "sha256-aRL46lVNdGu/D0xioGFn/pVUioEiLm8+5XTgUPHqguo=";
+    buildMypyBoto3Package "mediaconvert" "1.42.37"
+      "sha256-Z+TiVg/mjr0vTU+awHlS7GCynOeSl+IPl0n9GaLTsYE=";
 
   mypy-boto3-medialive =
-    buildMypyBoto3Package "medialive" "1.42.25"
-      "sha256-d4fhwg0JmAlApMmQqHw0XwwVEziIlY8JYB5NswQUdUc=";
+    buildMypyBoto3Package "medialive" "1.42.36"
+      "sha256-XBfcemUPy5FRouYK1nMgcC8YFLHaZX62PaEpCVW6QI8=";
 
   mypy-boto3-mediapackage =
     buildMypyBoto3Package "mediapackage" "1.42.3"
@@ -1158,20 +1158,20 @@ in
       "sha256-4/Q39UsUYaluauoaLm6BOej+Krl2VbO1xKKo1orRIkI=";
 
   mypy-boto3-s3 =
-    buildMypyBoto3Package "s3" "1.42.21"
-      "sha256-yrcckYqsfZjE10JUTHIuN9jnF4rLi8iKCurXsQNQJtI=";
+    buildMypyBoto3Package "s3" "1.42.37"
+      "sha256-YopGUvcnhwoH4cOFTW8w3FRafdWktxmixZwyqV2S5ME=";
 
   mypy-boto3-s3control =
-    buildMypyBoto3Package "s3control" "1.42.3"
-      "sha256-mAWbiTGs5SBCIetTF9aD8HxdJO1JixqahOOihqMHsi4=";
+    buildMypyBoto3Package "s3control" "1.42.37"
+      "sha256-t4obevidkovfitA/wQXCMJGcvBTKPDOxWqsHUbK0cHk=";
 
   mypy-boto3-s3outposts =
     buildMypyBoto3Package "s3outposts" "1.42.3"
       "sha256-juVfwdjPDNPaT5tvyXpzDtomugqxeu++AERLkVtFIxw=";
 
   mypy-boto3-sagemaker =
-    buildMypyBoto3Package "sagemaker" "1.42.30"
-      "sha256-X4wR1GUZ1rFVDoWx5IODmCYaqGEfuN7oTJRqIE7ypqA=";
+    buildMypyBoto3Package "sagemaker" "1.42.36"
+      "sha256-fChgTJ4OGgn2eHV8xdKZrYCrgGHZ37s0JTn2MoawxUQ=";
 
   mypy-boto3-sagemaker-a2i-runtime =
     buildMypyBoto3Package "sagemaker-a2i-runtime" "1.42.3"
diff --git a/pkgs/development/python-modules/nrgkick-api/default.nix b/pkgs/development/python-modules/nrgkick-api/default.nix
index 7c44c945535c..c02cbedc3eee 100644
--- a/pkgs/development/python-modules/nrgkick-api/default.nix
+++ b/pkgs/development/python-modules/nrgkick-api/default.nix
@@ -10,16 +10,16 @@
   setuptools,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "nrgkick-api";
-  version = "1.5.0";
+  version = "1.7.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "andijakl";
     repo = "nrgkick-api";
-    tag = "v${version}";
-    hash = "sha256-WtSL9fUJF2xsX53epFcY++KwjnAs3YiKHDb2a5x4tfE=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-q9mLX+DjNSyvjJ6hNPZckaHTNNelOsOlOe9XeVqutaU=";
   };
 
   build-system = [ setuptools ];
@@ -38,8 +38,8 @@ buildPythonPackage rec {
   meta = {
     description = "Python client for NRGkick Gen2 EV charger local REST API";
     homepage = "https://github.com/andijakl/nrgkick-api";
-    changelog = "https://github.com/andijakl/nrgkick-api/releases/tag/${src.tag}";
+    changelog = "https://github.com/andijakl/nrgkick-api/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/onnxscript/default.nix b/pkgs/development/python-modules/onnxscript/default.nix
index 9b91b2c636d2..5107ede7157d 100644
--- a/pkgs/development/python-modules/onnxscript/default.nix
+++ b/pkgs/development/python-modules/onnxscript/default.nix
@@ -257,59 +257,71 @@ buildPythonPackage (finalAttrs: {
     requiredSystemFeatures = [ "cuda" ];
 
     # Skip all tests that are failing independantly of the GPU availability
-    disabledTests = disabledTests ++ [
-      # AssertionError: Tensor-likes are not close!
-      "test_output_match_opinfo__cumsum_cuda_float16"
-      "test_output_match_opinfo__nn_functional_conv1d_cuda_float32"
-      "test_output_match_opinfo__nn_functional_embedding_cuda_float16"
-      "test_output_match_opinfo__nn_functional_embedding_cuda_float32"
-      "test_output_match_opinfo__ops_aten_conv3d_cuda_float32"
-      "test_output_match_opinfo__ops_aten_convolution_cuda_float32"
-      "test_output_match_opinfo__ops_aten_embedding_bag_cuda_float32"
-      "test_output_match_opinfo__ops_aten_embedding_renorm_cuda_float16"
-      "test_output_match_opinfo__ops_aten_embedding_renorm_cuda_float32"
+    disabledTests =
+      disabledTests
+      ++ [
+        # AssertionError: Tensor-likes are not close!
+        "test_output_match_opinfo__cumsum_cuda_float16"
+        "test_output_match_opinfo__nn_functional_conv1d_cuda_float32"
+        "test_output_match_opinfo__nn_functional_embedding_cuda_float16"
+        "test_output_match_opinfo__nn_functional_embedding_cuda_float32"
+        "test_output_match_opinfo__ops_aten_conv3d_cuda_float32"
+        "test_output_match_opinfo__ops_aten_convolution_cuda_float32"
+        "test_output_match_opinfo__ops_aten_embedding_bag_cuda_float32"
+        "test_output_match_opinfo__ops_aten_embedding_renorm_cuda_float16"
+        "test_output_match_opinfo__ops_aten_embedding_renorm_cuda_float32"
 
-      # AssertionError: Scalars are not equal!
-      "test_output_match_opinfo__equal_cuda_bool"
-      "test_output_match_opinfo__ops_aten_embedding_bag_padding_idx_cuda_float16"
-      "test_output_match_opinfo__ops_aten_embedding_bag_padding_idx_cuda_float32"
+        # AssertionError: Scalars are not equal!
+        "test_output_match_opinfo__equal_cuda_bool"
+        "test_output_match_opinfo__ops_aten_embedding_bag_padding_idx_cuda_float16"
+        "test_output_match_opinfo__ops_aten_embedding_bag_padding_idx_cuda_float32"
 
-      # TypeError: can't convert cuda:0 device type tensor to numpy. Use Tensor.cpu() to copy the tensor to host memory first.
-      "test_output_match_opinfo__index_put_cuda_float16"
-      "test_output_match_opinfo__index_put_cuda_float32"
-      "test_output_match_opinfo__index_put_cuda_int32"
-      "test_output_match_opinfo__index_put_cuda_int64"
+        # AssertionError: Not equal to tolerance rtol=0, atol=0
+        "test_fuse_pad_into_conv_4"
+        "test_fuse_pad_into_conv_5"
+        "test_fuse_pad_into_conv_6"
+        "test_fuse_pad_into_conv_7"
 
-      # RuntimeError: ONNX Runtime failed to evaluate
-      # onnxruntime.capi.onnxruntime_pybind11_state.InvalidArgument: [ONNXRuntimeError] : 2 :
-      # INVALID_ARGUMENT : Non-zero status code returned while running LayerNormalization node.
-      # Name:'node_LayerNormalization_0' Status Message: Size of X.shape[axis:] must be larger than 1, got 1
-      "test_output_match_opinfo__native_layer_norm_cuda_float16"
-      # onnxruntime.capi.onnxruntime_pybind11_state.NotImplemented: [ONNXRuntimeError] : 9 :
-      # NOT_IMPLEMENTED : Could not find an implementation for SplitToSequence(11) node with name '_inlfunc_aten_split_n0'
-      "test_output_match_opinfo__split_cuda_bool"
-      "test_output_match_opinfo__split_list_args_cuda_bool"
-      # onnxruntime.capi.onnxruntime_pybind11_state.NotImplemented: [ONNXRuntimeError] : 9 :
-      # NOT_IMPLEMENTED : Could not find an implementation for SplitToSequence(11) node with name '_inlfunc_aten_split_with_sizes_n0'
-      "test_output_match_opinfo__split_with_sizes_cuda_bool"
+        # TypeError: can't convert cuda:0 device type tensor to numpy. Use Tensor.cpu() to copy the tensor to host memory first.
+        "test_output_match_opinfo__index_put_cuda_float16"
+        "test_output_match_opinfo__index_put_cuda_float32"
+        "test_output_match_opinfo__index_put_cuda_int32"
+        "test_output_match_opinfo__index_put_cuda_int64"
 
-      # AssertionError: ONNX model is invalid
-      # onnx.onnx_cpp2py_export.shape_inference.InferenceError: [ShapeInferenceError] Inference error(s):
-      # (op_type:ConstantOfShape, node name: node_ConstantOfShape_67):
-      # [TypeInferenceError] Inferred elem type differs from existing elem type: (FLOAT) vs (INT64)
-      "test_output_match_opinfo__ops_aten__scaled_dot_product_efficient_attention_cuda_float32"
+        # RuntimeError: ONNX Runtime failed to evaluate
+        # onnxruntime.capi.onnxruntime_pybind11_state.InvalidArgument: [ONNXRuntimeError] : 2 :
+        # INVALID_ARGUMENT : Non-zero status code returned while running LayerNormalization node.
+        # Name:'node_LayerNormalization_0' Status Message: Size of X.shape[axis:] must be larger than 1, got 1
+        "test_output_match_opinfo__native_layer_norm_cuda_float16"
+        # onnxruntime.capi.onnxruntime_pybind11_state.NotImplemented: [ONNXRuntimeError] : 9 :
+        # NOT_IMPLEMENTED : Could not find an implementation for SplitToSequence(11) node with name '_inlfunc_aten_split_n0'
+        "test_output_match_opinfo__split_cuda_bool"
+        "test_output_match_opinfo__split_list_args_cuda_bool"
+        # onnxruntime.capi.onnxruntime_pybind11_state.NotImplemented: [ONNXRuntimeError] : 9 :
+        # NOT_IMPLEMENTED : Could not find an implementation for SplitToSequence(11) node with name '_inlfunc_aten_split_with_sizes_n0'
+        "test_output_match_opinfo__split_with_sizes_cuda_bool"
 
-      # RuntimeError: FlashAttention only support fp16 and bf16 data type
-      "test_output_match_opinfo__ops_aten__scaled_dot_product_flash_attention_cuda_float32"
+        # AssertionError: ONNX model is invalid
+        # onnx.onnx_cpp2py_export.shape_inference.InferenceError: [ShapeInferenceError] Inference error(s):
+        # (op_type:ConstantOfShape, node name: node_ConstantOfShape_67):
+        # [TypeInferenceError] Inferred elem type differs from existing elem type: (FLOAT) vs (INT64)
+        "test_output_match_opinfo__ops_aten__scaled_dot_product_efficient_attention_cuda_float32"
 
-      # Unexpected success
-      "test_output_match_opinfo__ops_aten_col2im_cuda_float16"
-      "test_output_match_opinfo__sort_cuda_float16"
+        # RuntimeError: FlashAttention only support fp16 and bf16 data type
+        "test_output_match_opinfo__ops_aten__scaled_dot_product_flash_attention_cuda_float32"
 
-      # RuntimeError: expected scalar type Int but found Float
-      "test_output_match_opinfo__ops_aten_fake_quantize_per_tensor_affine_cuda_float16"
-      "test_output_match_opinfo__ops_aten_fake_quantize_per_tensor_affine_cuda_float32"
-    ];
+        # Unexpected success
+        "test_output_match_opinfo__ops_aten_col2im_cuda_float16"
+        "test_output_match_opinfo__sort_cuda_float16"
+
+        # RuntimeError: expected scalar type Int but found Float
+        "test_output_match_opinfo__ops_aten_fake_quantize_per_tensor_affine_cuda_float16"
+        "test_output_match_opinfo__ops_aten_fake_quantize_per_tensor_affine_cuda_float32"
+      ]
+      ++ lib.optionals (pythonAtLeast "3.14") [
+        # TypeError: Expecting a type not f<class 'typing.Union'> for typeinfo
+        "TestOutputConsistencyFullGraphCUDA"
+      ];
   };
 
   meta = {
diff --git a/pkgs/development/python-modules/plaid-python/default.nix b/pkgs/development/python-modules/plaid-python/default.nix
index cac3470a5c31..8b5930ee9be0 100644
--- a/pkgs/development/python-modules/plaid-python/default.nix
+++ b/pkgs/development/python-modules/plaid-python/default.nix
@@ -10,13 +10,13 @@
 
 buildPythonPackage rec {
   pname = "plaid-python";
-  version = "38.0.0";
+  version = "38.1.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "plaid_python";
     inherit version;
-    hash = "sha256-4BbYY8IQvQFs0MVjXflL2sa+pJjebcId14VVRd6nizI=";
+    hash = "sha256-j/AypUXwsaeL6iYjW7xo53wwE+YGMLv8TRwSZ8CeGFk=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/pydo/default.nix b/pkgs/development/python-modules/pydo/default.nix
index 18dad347f5c4..761f54a8e26e 100644
--- a/pkgs/development/python-modules/pydo/default.nix
+++ b/pkgs/development/python-modules/pydo/default.nix
@@ -15,14 +15,14 @@
 
 buildPythonPackage rec {
   pname = "pydo";
-  version = "0.24.0";
+  version = "0.25.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "digitalocean";
     repo = "pydo";
     tag = "v${version}";
-    hash = "sha256-IfoW8JaLqghecADPKfVwjW99ZosHFXFt3iQ8WOyrCns=";
+    hash = "sha256-NqQ3xFZd+ELOMinn7GBvYA1ov9Ff4s+qvom5l7ZV81k=";
   };
 
   build-system = [ poetry-core ];
diff --git a/pkgs/development/python-modules/pynetbox/default.nix b/pkgs/development/python-modules/pynetbox/default.nix
index 99c041bd444d..9f234c0873f4 100644
--- a/pkgs/development/python-modules/pynetbox/default.nix
+++ b/pkgs/development/python-modules/pynetbox/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage rec {
   pname = "pynetbox";
-  version = "7.6.0";
+  version = "7.6.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "netbox-community";
     repo = "pynetbox";
     tag = "v${version}";
-    hash = "sha256-XflMJ6mrXOeUt+Tlmaa2Tw59M3zssnjgnZ7RoQRdOTQ=";
+    hash = "sha256-PAWcLJvDrS70Y9pLGtdTbwiEjhOb6yiOPCT34RfnyjU=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/pyvers/default.nix b/pkgs/development/python-modules/pyvers/default.nix
index 972abed60503..168bc437b175 100644
--- a/pkgs/development/python-modules/pyvers/default.nix
+++ b/pkgs/development/python-modules/pyvers/default.nix
@@ -6,9 +6,6 @@
   # build-system
   poetry-core,
 
-  # dependencies
-  packaging,
-
   # tests
   jax,
   numpy,
@@ -16,26 +13,22 @@
   pytestCheckHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "pyvers";
-  version = "0.1.0";
+  version = "0.2.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "vmoens";
     repo = "pyvers";
-    tag = "v${version}";
-    hash = "sha256-BUUfb0vI1r/VV5aF9gmqnXGOIWQfBJ98MrcF/IH5CEs=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-VKNwhxyc1f7tyJO7JyBNELlZwVv6U2N8ye0OYFN/nmc=";
   };
 
   build-system = [
     poetry-core
   ];
 
-  dependencies = [
-    packaging
-  ];
-
   pythonImportsCheck = [ "pyvers" ];
 
   nativeCheckInputs = [
@@ -48,8 +41,8 @@ buildPythonPackage rec {
   meta = {
     description = "Python library for dynamic dispatch based on module versions and backends";
     homepage = "https://github.com/vmoens/pyvers";
-    changelog = "https://github.com/vmoens/pyvers/blob/${src.rev}/CHANGELOG.md";
+    changelog = "https://github.com/vmoens/pyvers/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ GaetanLepage ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/reolink-aio/default.nix b/pkgs/development/python-modules/reolink-aio/default.nix
index 366d8198394e..d70750b38084 100644
--- a/pkgs/development/python-modules/reolink-aio/default.nix
+++ b/pkgs/development/python-modules/reolink-aio/default.nix
@@ -10,16 +10,16 @@
   typing-extensions,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "reolink-aio";
-  version = "0.18.0";
+  version = "0.18.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "starkillerOG";
     repo = "reolink_aio";
-    tag = version;
-    hash = "sha256-a5XeELUtOjBdCPLsfsryGqgJnlDC5nZqCSbpXX6ZjcI=";
+    tag = finalAttrs.version;
+    hash = "sha256-j11jB/yO9l2HYbHNFPuGZU1x5sTFnxlXi2lt9J0H7FE=";
   };
 
   build-system = [ setuptools ];
@@ -40,8 +40,8 @@ buildPythonPackage rec {
   meta = {
     description = "Module to interact with the Reolink IP camera API";
     homepage = "https://github.com/starkillerOG/reolink_aio";
-    changelog = "https://github.com/starkillerOG/reolink_aio/releases/tag/${src.tag}";
+    changelog = "https://github.com/starkillerOG/reolink_aio/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/rigour/default.nix b/pkgs/development/python-modules/rigour/default.nix
index af78c6978dc0..9189787c2705 100644
--- a/pkgs/development/python-modules/rigour/default.nix
+++ b/pkgs/development/python-modules/rigour/default.nix
@@ -21,14 +21,14 @@
 
 buildPythonPackage rec {
   pname = "rigour";
-  version = "1.6.1";
+  version = "1.6.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "opensanctions";
     repo = "rigour";
     tag = "v${version}";
-    hash = "sha256-c0/wLo2/ZFaFiSV7jOb9th0CNim0XymL8MO6IEYfyhw=";
+    hash = "sha256-F9fZN0Y6Kpv5Z3V3k3e0TgcSIVo9+zdL48AhrTZdTwU=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/sagemaker-core/default.nix b/pkgs/development/python-modules/sagemaker-core/default.nix
index 14d6a337786d..2084a52bb7ac 100644
--- a/pkgs/development/python-modules/sagemaker-core/default.nix
+++ b/pkgs/development/python-modules/sagemaker-core/default.nix
@@ -28,14 +28,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "sagemaker-core";
-  version = "1.0.74";
+  version = "1.0.75";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "aws";
     repo = "sagemaker-core";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-1wQvytoIMeBpFZfP88CfHXy0sJdg3+D0P7vXcltNAWs=";
+    hash = "sha256-yRXnXGH4BoURohty/daPYd6FDGsAk9a1AiXtyCkKxug=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/silver-platter/default.nix b/pkgs/development/python-modules/silver-platter/default.nix
new file mode 100644
index 000000000000..68c3dc6bf979
--- /dev/null
+++ b/pkgs/development/python-modules/silver-platter/default.nix
@@ -0,0 +1,64 @@
+{
+  lib,
+  stdenv,
+  buildPythonPackage,
+  pkgs,
+  pkg-config,
+  rustPlatform,
+  cargo,
+  rustc,
+  libiconv,
+  openssl,
+
+  setuptools,
+  setuptools-rust,
+  breezy,
+  dulwich,
+  jinja2,
+  pyyaml,
+  ruamel-yaml,
+}:
+
+let
+  inherit (pkgs) silver-platter;
+in
+buildPythonPackage {
+  inherit (silver-platter)
+    pname
+    version
+    src
+    cargoDeps
+    ;
+
+  pyproject = true;
+
+  dependencies = [
+    setuptools
+    breezy
+    dulwich
+    jinja2
+    pyyaml
+    ruamel-yaml
+  ];
+  nativeBuildInputs = [
+    setuptools-rust
+    rustPlatform.cargoSetupHook
+    cargo
+    rustc
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [ pkg-config ];
+  buildInputs =
+    lib.optionals stdenv.hostPlatform.isLinux [ openssl ]
+    ++ lib.optionals stdenv.hostPlatform.isDarwin [ libiconv ];
+
+  pythonImportsCheck = [ "silver_platter" ];
+
+  meta = {
+    inherit (silver-platter.meta)
+      description
+      homepage
+      license
+      maintainers
+      ;
+  };
+}
diff --git a/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix b/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
index 5bf037937635..9cbf67d7a86c 100644
--- a/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
+++ b/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
@@ -9,14 +9,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "tencentcloud-sdk-python";
-  version = "3.1.39";
+  version = "3.1.40";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "TencentCloud";
     repo = "tencentcloud-sdk-python";
     tag = finalAttrs.version;
-    hash = "sha256-4C9icsmK8wpFUGTLXD4Lvt88iJT3HzFG0FX8YMKRlKA=";
+    hash = "sha256-3040m7RGQDcVRR6x03+bKCmbBNXtbBmu208k8ADjZ24=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/tensordict/default.nix b/pkgs/development/python-modules/tensordict/default.nix
index 0d3938dd8775..9ae91b06a427 100644
--- a/pkgs/development/python-modules/tensordict/default.nix
+++ b/pkgs/development/python-modules/tensordict/default.nix
@@ -3,6 +3,7 @@
   stdenv,
   buildPythonPackage,
   fetchFromGitHub,
+  pythonAtLeast,
 
   # build-system
   pybind11,
@@ -27,16 +28,16 @@
   pytestCheckHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "tensordict";
-  version = "0.10.0";
+  version = "0.11.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pytorch";
     repo = "tensordict";
-    tag = "v${version}";
-    hash = "sha256-yxyA9BfN2hp1C3s+g2zBM2gVtckH3LV7luWw8DshFUs=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-PUPDKv10Ks4B1kpgbRcnmfWFUkpFEdxMmTNztFVfdK4=";
   };
 
   postPatch = ''
@@ -86,6 +87,10 @@ buildPythonPackage rec {
     # hangs forever on some CPUs
     "test_map_iter_interrupt_early"
   ]
+  ++ lib.optionals (pythonAtLeast "3.14") [
+    # AssertionError: assert 'a string!' == 'a metadata!'
+    "test_save_load_memmap"
+  ]
   ++ lib.optionals stdenv.hostPlatform.isDarwin [
     # Hangs due to the use of a pool
     "test_chunksize_num_chunks"
@@ -109,9 +114,9 @@ buildPythonPackage rec {
 
   meta = {
     description = "Pytorch dedicated tensor container";
-    changelog = "https://github.com/pytorch/tensordict/releases/tag/${src.tag}";
+    changelog = "https://github.com/pytorch/tensordict/releases/tag/${finalAttrs.src.tag}";
     homepage = "https://github.com/pytorch/tensordict";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ GaetanLepage ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/torchrl/default.nix b/pkgs/development/python-modules/torchrl/default.nix
index a5db6383c25e..bfad80770364 100644
--- a/pkgs/development/python-modules/torchrl/default.nix
+++ b/pkgs/development/python-modules/torchrl/default.nix
@@ -10,6 +10,7 @@
   numpy,
   pybind11,
   setuptools,
+  setuptools-scm,
   torch,
 
   # dependencies
@@ -45,6 +46,7 @@
   vllm,
   # marl
   pettingzoo,
+  vmas,
   # offline-data
   h5py,
   huggingface-hub,
@@ -71,16 +73,16 @@
   scipy,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "torchrl";
-  version = "0.10.1";
+  version = "0.11.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pytorch";
     repo = "rl";
-    tag = "v${version}";
-    hash = "sha256-Vd/w11P4NVrx2xki+VYlXQaM8F+vpdokke8ZAHg6h0Q=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Ae1zhc3lESCsuAJbbjrT5Vv0zTIiiBw9HBtKwWsbVzc=";
   };
 
   postPatch = ''
@@ -94,6 +96,7 @@ buildPythonPackage rec {
     numpy
     pybind11
     setuptools
+    setuptools-scm
     torch
   ];
   dontUseCmakeConfigure = true;
@@ -139,7 +142,7 @@ buildPythonPackage rec {
     marl = [
       # dm-meltingpot (unpackaged)
       pettingzoo
-      # vmas (unpackaged)
+      vmas
     ];
     offline-data = [
       h5py
@@ -155,6 +158,9 @@ buildPythonPackage rec {
     open-spiel = [
       # open-spiel (unpackaged)
     ];
+    procgen = [
+      # procgen (unpackaged)
+    ];
     rendering = [ moviepy ];
     replay-buffer = [ torch ];
     utils = [
@@ -191,10 +197,10 @@ buildPythonPackage rec {
     scipy
     torchvision
   ]
-  ++ optional-dependencies.atari
-  ++ optional-dependencies.gym-continuous
-  ++ optional-dependencies.llm
-  ++ optional-dependencies.rendering;
+  ++ finalAttrs.passthru.optional-dependencies.atari
+  ++ finalAttrs.passthru.optional-dependencies.gym-continuous
+  ++ finalAttrs.passthru.optional-dependencies.llm
+  ++ finalAttrs.passthru.optional-dependencies.rendering;
 
   disabledTests = [
     # Require network
@@ -284,13 +290,16 @@ buildPythonPackage rec {
     # which is not the same as the test file we want to collect:
     #   /build/source/test/smoke_test.py
     "test/llm"
+
+    # Hang indefinitely
+    "test/services/test_services.py"
   ];
 
   meta = {
     description = "Modular, primitive-first, python-first PyTorch library for Reinforcement Learning";
     homepage = "https://github.com/pytorch/rl";
-    changelog = "https://github.com/pytorch/rl/releases/tag/v${version}";
+    changelog = "https://github.com/pytorch/rl/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ GaetanLepage ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/types-openpyxl/default.nix b/pkgs/development/python-modules/types-openpyxl/default.nix
index a9f852dc39a8..28c28da71abb 100644
--- a/pkgs/development/python-modules/types-openpyxl/default.nix
+++ b/pkgs/development/python-modules/types-openpyxl/default.nix
@@ -6,14 +6,14 @@
 }:
 buildPythonPackage (finalAttrs: {
   pname = "types-openpyxl";
-  version = "3.1.5.20250809";
+  version = "3.1.5.20250919";
 
   pyproject = true;
 
   src = fetchPypi {
     pname = "types_openpyxl";
     inherit (finalAttrs) version;
-    hash = "sha256-SVNvoYo6i1Z7bSZx0zAdjCQOwvG895UQ9LrZ+skjLL0=";
+    hash = "sha256-IytZBnc+66zhUJuJlM2t2gQ/aSz9upv7uGypIdVNMtc=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/virtualenv/default.nix b/pkgs/development/python-modules/virtualenv/default.nix
index 7be7089fa303..6b0469c80823 100644
--- a/pkgs/development/python-modules/virtualenv/default.nix
+++ b/pkgs/development/python-modules/virtualenv/default.nix
@@ -10,6 +10,7 @@
   hatch-vcs,
   hatchling,
   platformdirs,
+  pytest-freezer,
   pytest-mock,
   pytestCheckHook,
   time-machine,
@@ -43,6 +44,7 @@ buildPythonPackage rec {
     pytest-mock
     pytestCheckHook
   ]
+  ++ lib.optionals isPyPy [ pytest-freezer ]
   ++ lib.optionals (!isPyPy) [ time-machine ];
 
   disabledTestPaths = [
diff --git a/pkgs/development/python-modules/yaramod/default.nix b/pkgs/development/python-modules/yaramod/default.nix
index b879e50b7f1b..d3f18e1213d4 100644
--- a/pkgs/development/python-modules/yaramod/default.nix
+++ b/pkgs/development/python-modules/yaramod/default.nix
@@ -19,16 +19,16 @@ let
     hash = "sha256-El4WA92t2O/L4wUqH6Xj8w+ANtb6liRwafDhqn8jxjQ=";
   };
 in
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "yaramod";
-  version = "4.5.2";
+  version = "4.6.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "avast";
     repo = "yaramod";
-    tag = "v${version}";
-    hash = "sha256-5tZhJcgpS8BwLEFlIM+RnXeUC5gXq4TPfSe0KI6U34w=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-2XI7lGfoMHimtuQ29I1cFtV4OgfvR3Qcvh/FhA0yeBw=";
   };
 
   postPatch = ''
@@ -67,8 +67,8 @@ buildPythonPackage rec {
   meta = {
     description = "Parsing of YARA rules into AST and building new rulesets in C++";
     homepage = "https://github.com/avast/yaramod";
-    changelog = "https://github.com/avast/yaramod/blob/${src.tag}/CHANGELOG.md";
+    changelog = "https://github.com/avast/yaramod/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ msm ];
   };
-}
+})
diff --git a/pkgs/development/rocq-modules/hierarchy-builder/default.nix b/pkgs/development/rocq-modules/hierarchy-builder/default.nix
index 5cc0e55698eb..84f8c41c91ca 100644
--- a/pkgs/development/rocq-modules/hierarchy-builder/default.nix
+++ b/pkgs/development/rocq-modules/hierarchy-builder/default.nix
@@ -17,9 +17,11 @@ let
       in
       with lib.versions;
       lib.switch rocq-core.rocq-version [
+        (case (range "9.0" "9.1") "1.10.2")
         (case (range "9.0" "9.1") "1.10.0")
         (case (range "9.0" "9.1") "1.9.1")
       ] null;
+    release."1.10.2".sha256 = "sha256-Uzni9qrYQP45Tr+JkHs0BuRARwmWSMwA/iHhIzkolxc=";
     release."1.10.0".sha256 = "sha256-c52nS8I0tia7Q8lZTFJyHVPVabW9xv55m7w6B7y3+e8=";
     release."1.9.1".sha256 = "sha256-AiS0ezMyfIYlXnuNsVLz1GlKQZzJX+ilkrKkbo0GrF0=";
     releaseRev = v: "v${v}";
diff --git a/pkgs/development/tools/electron/binary/info.json b/pkgs/development/tools/electron/binary/info.json
index 11b83dff171f..761bce5db825 100644
--- a/pkgs/development/tools/electron/binary/info.json
+++ b/pkgs/development/tools/electron/binary/info.json
@@ -23,35 +23,35 @@
     },
     "38": {
         "hashes": {
-            "aarch64-darwin": "b91e12ec6695f969ccf792d95dc7ea5da35f399cec2bed4d7b25d8a1f545b5de",
-            "aarch64-linux": "73e87c432fa52b9005e12e23a1fcffcfada853de19492f905c50dbb46fd778df",
-            "armv7l-linux": "a78ff548aa93586ce01c6406f49d1f8979a30542f286d05adb56e61a3147bba5",
-            "headers": "1f1381qc705fv50sbm0g5f6wm8pkwqvrbhb1kvi3i9mk2910y14m",
-            "x86_64-darwin": "459dd05f00c29d435112596f87bc5bd0aeb16796dff0744e5421086417877d24",
-            "x86_64-linux": "fe428cd212680e1d6df61fa67efc260b9221d089c7a14c9863f18bcbeace5628"
+            "aarch64-darwin": "5ef05a4719275c14f2fc9f77aef41421c3a7d6ccd8e909bbefda688a5b40f78f",
+            "aarch64-linux": "089681f662520b775bbaf17c9f1aac86861025cbe6ec3007d85ecc7b5662e21a",
+            "armv7l-linux": "d5ebe3191715d2dec081e0e9b09345d0e2c022481fece1207e8cb293acecf745",
+            "headers": "0dwvhcliyjcz6pq9znq81k3r60jfqk92mngf5yglx5j6fql5r4zm",
+            "x86_64-darwin": "72d298f9d8a723651d858406ca48c5aa5eef0308e5d9b3c7deef3ebf70c763b1",
+            "x86_64-linux": "e0a789a809527bd182cc307c46899c7d4fdaf07d7e79aef0dc5e613c80278b88"
         },
-        "version": "38.7.2"
+        "version": "38.8.0"
     },
     "39": {
         "hashes": {
-            "aarch64-darwin": "064edf951e0ab546809e217a417401023fd7e3b662de8be0316e8173f6f3db6d",
-            "aarch64-linux": "468d3096630953a52fc051abd48714004b58ac550f9c7e798c256c774811b0f2",
-            "armv7l-linux": "37a889a488e7a64d86961ad774f20e3cbb5dd965d76a6efd98c83488c33964e0",
-            "headers": "0ywhsg295d390mgm1dd64jgzag35gib65b3ybzilsg58d4gvvp5g",
-            "x86_64-darwin": "484c7f39235ea6c2c87b2ce5149436daa4eec97c9a6b11dc662f01ec1b81969e",
-            "x86_64-linux": "a676357322bdf28153ba3ad67e8558dd54d76757fe2b1ad48c53f4a5e20614c6"
+            "aarch64-darwin": "3261e399827377703671140f04939b2a7d378f8d74bbc64a46277ce3332cc31e",
+            "aarch64-linux": "29123a371161d946fa932bf4be3381a55a99803ec922cf4ca8e699c31a30ba47",
+            "armv7l-linux": "093f5fff73d9a0964e3ed02d57ccc986195078de796dcf83c96079350d983cc9",
+            "headers": "0awfmgrz47ga410rv83f0zppw4vrxxdd3ya4yzd2mmpkcxr80sr9",
+            "x86_64-darwin": "22c8e2c8f6c725c9d99112dae46184d5e357dc3b4b21ec65257083fd42719b3e",
+            "x86_64-linux": "c2be95ee3e7ffa26c674e4af4187dc4b610acb6ea62a869896f0882302923c81"
         },
-        "version": "39.3.0"
+        "version": "39.4.0"
     },
     "40": {
         "hashes": {
-            "aarch64-darwin": "bfa742c44b0053a9b6cf46a8124baff4a8a567feca2a5adbabf749075b298b69",
-            "aarch64-linux": "46969d090510b26af41d7cde74cab15a9ad35eb45e61e976076626f2db3589a1",
-            "armv7l-linux": "f87d8643c911c2e3678447be5a44636bdf375a1c3a9a7f20be3171a7ed510b86",
-            "headers": "0wjpbk33i1z74djqyscribisd281cs5c266nrh2r6aabn2byh16l",
-            "x86_64-darwin": "0120bcbd5cd063953b477fe8f950244b2f37770b9f85e60ca9b6bcaf85627b33",
-            "x86_64-linux": "2ac22df42a4368cdd93ff9f9f25c7f04b9157143a3a3a06d4f01ae0dbb4e6fd5"
+            "aarch64-darwin": "f2866f3b84e0bdb7a3333f5401f8244ae14b34f5ce67ed45f259a3ac393b3a87",
+            "aarch64-linux": "4f07ff00445a707289d46f52dffd6faa504a4b60355ddb20df36ff8daa5cfc70",
+            "armv7l-linux": "953ab4b20661a1e6f7d2acadb5e57f67927ea5ad4cb8cf93d5a9634cca7f1f2f",
+            "headers": "0c8h4hcdxqhmjb4x4hf2hpz2lgkqq4nbqs3l4iypywg0qr8d65gn",
+            "x86_64-darwin": "84254c6a2dc1bff85c8c4de3572218101d68314c15c2892693a1992b193ae86b",
+            "x86_64-linux": "26f7675cc103f6ca0a1122d82f30bed7544c1a5d5507a6980992ae07ec876a12"
         },
-        "version": "40.0.0"
+        "version": "40.1.0"
     }
 }
diff --git a/pkgs/development/tools/electron/chromedriver/info.json b/pkgs/development/tools/electron/chromedriver/info.json
index 7aefc2884214..12e9a0f025f2 100644
--- a/pkgs/development/tools/electron/chromedriver/info.json
+++ b/pkgs/development/tools/electron/chromedriver/info.json
@@ -23,35 +23,35 @@
     },
     "38": {
         "hashes": {
-            "aarch64-darwin": "6327236404c59f28ae0892d3898d240fe5e40c944019196afd1c9f03b3cc4a5a",
-            "aarch64-linux": "1e29832d58ed5582869cee4739b442b6641a4d36bdf350e12cfbd54b9ab7f773",
-            "armv7l-linux": "016b3f9d1f526f6943440379d431185f69ac4501d0f8acfa3b728dcc8944ab03",
-            "headers": "1f1381qc705fv50sbm0g5f6wm8pkwqvrbhb1kvi3i9mk2910y14m",
-            "x86_64-darwin": "4a5e11cf313bc337b1ba373643b55801869f7245ddff1287fee3dfa1d3d8c0be",
-            "x86_64-linux": "e083831cec7c952bab51cf49ff380558195edd01678a21eb71a67eddbebf87c1"
+            "aarch64-darwin": "f08c0a63e75d10cf117d9893d85862f8c962ab026806c0e2d3bafbe5e635d8b3",
+            "aarch64-linux": "2ca72361584f6e8e00a438cd54a77c2c84e197e2561e788afb03ba3a08056c12",
+            "armv7l-linux": "d4213af3c0b6218b2d59fe7bac56e81359e09e770c6425d2820c65b75201e9e1",
+            "headers": "0dwvhcliyjcz6pq9znq81k3r60jfqk92mngf5yglx5j6fql5r4zm",
+            "x86_64-darwin": "023ccf116daffead9035873261fb445a5acb160fed107dd8950ad69e5dc6f133",
+            "x86_64-linux": "c4e34d1be7c6f7287ff2ee2752d82444a35e62565f4e25092e1a4bdc85651014"
         },
-        "version": "38.7.2"
+        "version": "38.8.0"
     },
     "39": {
         "hashes": {
-            "aarch64-darwin": "3d5ef8b78ce4f35320a76a241bbc67f7a1922cedbfe338de111e5fd617677ca8",
-            "aarch64-linux": "e0f1fa67b9f1ba8f15b2fc0aa0570e80d68261286a19862638a4f26c6966ecf2",
-            "armv7l-linux": "8a4f46da6a51c97e3296c13aa480a7714e7bd5e8fa46876526ece89c8ae5b182",
-            "headers": "0ywhsg295d390mgm1dd64jgzag35gib65b3ybzilsg58d4gvvp5g",
-            "x86_64-darwin": "ed1951ecc55949c65452e1f8cd29b2348c8fd7932c2b1e11279987525b4658bc",
-            "x86_64-linux": "44e15ac6c421e7bc7b36c55721085e5ccd4996c0770785dc78c55baaf4f73322"
+            "aarch64-darwin": "b41e3ef0759e2bb24ef468dbb7300a9b07fc2d212053ee358d7b274fc206844f",
+            "aarch64-linux": "54e9024b394ec614d210c129ea6d9c9ec205e67f8fa8426652329be273a4ca3d",
+            "armv7l-linux": "10379333f8c5a17c09103c5ce802606b471d6e287a0d849aa29ec1c11ad278ed",
+            "headers": "0awfmgrz47ga410rv83f0zppw4vrxxdd3ya4yzd2mmpkcxr80sr9",
+            "x86_64-darwin": "6c81bbca1adf2d08ec545fabb99e0b96b8bc6ea0f59bbb798f034cee9618216a",
+            "x86_64-linux": "05c54bf453331acc2d8d6b5b8854ed262fcdfda0223cd6651c9f137d62eee3b0"
         },
-        "version": "39.3.0"
+        "version": "39.4.0"
     },
     "40": {
         "hashes": {
-            "aarch64-darwin": "27393f69ecca3686dad7a0e594ff06081631f7659307071f136bdb680e5c3649",
-            "aarch64-linux": "588aafc8b3afdb1abefccf9dfee95ebd1a590bea77370553103dcb03406f3366",
-            "armv7l-linux": "3ac8f1f6b2f3da81d2ebadb56f6d8cd05ada3dfa340f84b39e266ae8c35b7cf7",
-            "headers": "0wjpbk33i1z74djqyscribisd281cs5c266nrh2r6aabn2byh16l",
-            "x86_64-darwin": "633c29541cb253ceacb6fe2855086d18060ced216ad869d1f887a298467c2e28",
-            "x86_64-linux": "77f71758783822b7e24fb6777f9e4ccabf1cd5e4e964b905fb63a068b4d849da"
+            "aarch64-darwin": "09aae73536472087120cd3fbdff7229dab9f36167e5999075a4f2d7af2eeda89",
+            "aarch64-linux": "59f6245921d3efd4b5c9f36db69d1fb3ca7eb3a66de6264abde3a4a5cf6d509c",
+            "armv7l-linux": "d90cdce84b28d4934413b4ee64d0f46430740676173ad87ed3db2c7692f6654e",
+            "headers": "0c8h4hcdxqhmjb4x4hf2hpz2lgkqq4nbqs3l4iypywg0qr8d65gn",
+            "x86_64-darwin": "24623db1ff05f35bac2f702f9338596a2db6b1f742e9dfaa35772eecb9ba5b39",
+            "x86_64-linux": "d211f0e3693f52bb1e9495075bb363a527e19e1207ba4b384e233a32d6681443"
         },
-        "version": "40.0.0"
+        "version": "40.1.0"
     }
 }
diff --git a/pkgs/development/tools/electron/info.json b/pkgs/development/tools/electron/info.json
index 5d81857c7929..7ebfabffe257 100644
--- a/pkgs/development/tools/electron/info.json
+++ b/pkgs/development/tools/electron/info.json
@@ -1388,10 +1388,10 @@
             },
             "src/electron": {
                 "args": {
-                    "hash": "sha256-gSW1dI2PBGaLleuekWEI8Om/HE+V7w7QPy3wWxfN0V0=",
+                    "hash": "sha256-ptOkmAyByN8nR5/CpFJBLPeNI7zVbz0pqfQcWwbh3R4=",
                     "owner": "electron",
                     "repo": "electron",
-                    "tag": "v38.7.2"
+                    "tag": "v38.8.0"
                 },
                 "fetcher": "fetchFromGitHub"
             },
@@ -1725,10 +1725,10 @@
             },
             "src/third_party/electron_node": {
                 "args": {
-                    "hash": "sha256-ZfbpeoBBCULqhNQxL78ikXG1OOZI/EQDgcTqgUYY0KY=",
+                    "hash": "sha256-+/hfkGo3X0bM90vS2uto+6ax4PzMk8ME4BDtQPULOCg=",
                     "owner": "nodejs",
                     "repo": "node",
-                    "tag": "v22.21.1"
+                    "tag": "v22.22.0"
                 },
                 "fetcher": "fetchFromGitHub"
             },
@@ -2650,10 +2650,10 @@
                 "fetcher": "fetchFromGitiles"
             }
         },
-        "electron_yarn_hash": "sha256-R5AHeNFOeH7ZXipzM9u08KG5zJhkDDTW4kGt3BYYN64=",
+        "electron_yarn_hash": "sha256-JCd5N7Wf17TfVyhEw4JA225vdqXeyMKgADYzOagGYd8=",
         "modules": "139",
-        "node": "22.21.1",
-        "version": "38.7.2"
+        "node": "22.22.0",
+        "version": "38.8.0"
     },
     "39": {
         "chrome": "142.0.7444.265",
@@ -2712,10 +2712,10 @@
             },
             "src/electron": {
                 "args": {
-                    "hash": "sha256-udrEpPg2LDThZDTXJ1jpkIEiDwlD7lRUJsV6HSwN0i8=",
+                    "hash": "sha256-5sOTpnllc27NEZIomvx5oosxKtc3oBm+Dk3r5PZ3f4c=",
                     "owner": "electron",
                     "repo": "electron",
-                    "tag": "v39.3.0"
+                    "tag": "v39.4.0"
                 },
                 "fetcher": "fetchFromGitHub"
             },
@@ -3049,10 +3049,10 @@
             },
             "src/third_party/electron_node": {
                 "args": {
-                    "hash": "sha256-ZfbpeoBBCULqhNQxL78ikXG1OOZI/EQDgcTqgUYY0KY=",
+                    "hash": "sha256-+/hfkGo3X0bM90vS2uto+6ax4PzMk8ME4BDtQPULOCg=",
                     "owner": "nodejs",
                     "repo": "node",
-                    "tag": "v22.21.1"
+                    "tag": "v22.22.0"
                 },
                 "fetcher": "fetchFromGitHub"
             },
@@ -3998,13 +3998,13 @@
                 "fetcher": "fetchFromGitiles"
             }
         },
-        "electron_yarn_hash": "sha256-veyZGCQJO23iQk4gmFo5oLASxamiYm4tAQSUS12IGxg=",
+        "electron_yarn_hash": "sha256-DyXKL0dXU+9K7EyR4WSsq49w3BOk/hHE6lW2uYS3AAw=",
         "modules": "140",
-        "node": "22.21.1",
-        "version": "39.3.0"
+        "node": "22.22.0",
+        "version": "39.4.0"
     },
     "40": {
-        "chrome": "144.0.7559.60",
+        "chrome": "144.0.7559.96",
         "chromium": {
             "deps": {
                 "gn": {
@@ -4013,15 +4013,15 @@
                     "version": "0-unstable-2025-12-01"
                 }
             },
-            "version": "144.0.7559.60"
+            "version": "144.0.7559.96"
         },
         "chromium_npm_hash": "sha256-13sgV/5BD7QvDLBAEmoLN5vongw+S5v5znvZcctxhWc=",
         "deps": {
             "src": {
                 "args": {
-                    "hash": "sha256-xd7eAfRiSMO0NavLy95b78e+fYCV3eGkAyVQhOixvaA=",
+                    "hash": "sha256-2K/lRbMxLhH1RImERMiwQrDrJPWSAI6ffAFG0rJmJaY=",
                     "postFetch": "rm -rf $(find $out/third_party/blink/web_tests ! -name BUILD.gn -mindepth 1 -maxdepth 1); rm -r $out/content/test/data; rm -rf $out/courgette/testdata; rm -r $out/extensions/test/data; rm -r $out/media/test/data; ",
-                    "tag": "144.0.7559.60",
+                    "tag": "144.0.7559.96",
                     "url": "https://chromium.googlesource.com/chromium/src.git"
                 },
                 "fetcher": "fetchFromGitiles"
@@ -4060,10 +4060,10 @@
             },
             "src/electron": {
                 "args": {
-                    "hash": "sha256-/6WaLMcOqIyc02Gjm/B4DRLSsrhn9YkIngB1O9WfpkU=",
+                    "hash": "sha256-Nt/PmsLg3dfEQYUX9ifzWznvseJq4fSo8jOwMq/euEo=",
                     "owner": "electron",
                     "repo": "electron",
-                    "tag": "v40.0.0"
+                    "tag": "v40.1.0"
                 },
                 "fetcher": "fetchFromGitHub"
             },
@@ -4285,8 +4285,8 @@
             },
             "src/third_party/dawn": {
                 "args": {
-                    "hash": "sha256-GJuT3rqNxvKkRTMvoMi8/QYda0y0RTkZLhb5v9QkwGA=",
-                    "rev": "a8d1e554a9bd35b0418ba7fd6b0bc005250a7703",
+                    "hash": "sha256-MsUmRx5fQYWbkPJ/JvaoT//qjPYy5xxZXIa3t5LDxSY=",
+                    "rev": "9e0e116de6735ab113349675d31a23c121254fe0",
                     "url": "https://dawn.googlesource.com/dawn.git"
                 },
                 "fetcher": "fetchFromGitiles"
@@ -4357,8 +4357,8 @@
             },
             "src/third_party/devtools-frontend/src": {
                 "args": {
-                    "hash": "sha256-BmwsvTjgYQayFnyT9EfFzpCfbgdTt9xZlsUba0uJelg=",
-                    "rev": "d5efa4236f8676254c9f39ccfef18bd633de5fd3",
+                    "hash": "sha256-vLkWH/EiDHxl/dz4soKybQF1hgud/7MlnDhVPicYJGY=",
+                    "rev": "a3064782146fc247c488d44c1ad3496b29d55ec4",
                     "url": "https://chromium.googlesource.com/devtools/devtools-frontend"
                 },
                 "fetcher": "fetchFromGitiles"
@@ -5339,8 +5339,8 @@
             },
             "src/v8": {
                 "args": {
-                    "hash": "sha256-vyOtnPA3tAeorNOGTDuAnwJ/UtpjeO8z+RSjx9RIFFc=",
-                    "rev": "ad25f9ae50a53bee50f459bfee25fb1e6f64adc3",
+                    "hash": "sha256-gBzwGvl/tqj4Z6acdLN326I80kBLEk+Nn8oN6D193o4=",
+                    "rev": "6c2c296f23a5487ccb2536cf7c90d01f35d03077",
                     "url": "https://chromium.googlesource.com/v8/v8.git"
                 },
                 "fetcher": "fetchFromGitiles"
@@ -5349,6 +5349,6 @@
         "electron_yarn_hash": "sha256-XfBaGCIERh5B/xq7H5zcB9moB75X1QVR53i3LCpa0D8=",
         "modules": "143",
         "node": "24.11.1",
-        "version": "40.0.0"
+        "version": "40.1.0"
     }
 }
diff --git a/pkgs/os-specific/linux/digimend/default.nix b/pkgs/os-specific/linux/digimend/default.nix
index c5292d70cb1b..2229ac5ab0fc 100644
--- a/pkgs/os-specific/linux/digimend/default.nix
+++ b/pkgs/os-specific/linux/digimend/default.nix
@@ -22,9 +22,6 @@ stdenv.mkDerivation {
     sed 's/depmod /true /' -i Makefile
   '';
 
-  # Fix build on Linux kernel >= 5.18
-  env.NIX_CFLAGS_COMPILE = toString [ "-Wno-error=implicit-fallthrough" ];
-
   nativeBuildInputs = kernel.moduleBuildDependencies;
 
   makeFlags = kernelModuleMakeFlags ++ [
diff --git a/pkgs/os-specific/linux/kernel/zen-kernels.nix b/pkgs/os-specific/linux/kernel/zen-kernels.nix
index 85dd9331c137..881ef822e558 100644
--- a/pkgs/os-specific/linux/kernel/zen-kernels.nix
+++ b/pkgs/os-specific/linux/kernel/zen-kernels.nix
@@ -16,16 +16,16 @@ let
   variants = {
     # ./update-zen.py zen
     zen = {
-      version = "6.18.6"; # zen
+      version = "6.18.7"; # zen
       suffix = "zen1"; # zen
-      sha256 = "13qr95dncg3n2ijcnvxwgsh5jvmls60znfq68ikivmji06klps2r"; # zen
+      sha256 = "0in7n00g4rq0yiy3gxaymxh33v8g3f147jypylmn998lhs7y3d68"; # zen
       isLqx = false;
     };
     # ./update-zen.py lqx
     lqx = {
-      version = "6.18.6"; # lqx
+      version = "6.18.7"; # lqx
       suffix = "lqx1"; # lqx
-      sha256 = "18b5yw91k4m9cfa2gw6n07sw3xfnzs9xx7hb0ls26r4d8jn01lsq"; # lqx
+      sha256 = "1wm1qzim11gka3fmfz3qxxhl1rjyy9jb6pjqh2q8fpg33g005wsh"; # lqx
       isLqx = true;
     };
   };
diff --git a/pkgs/os-specific/linux/lttng-modules/default.nix b/pkgs/os-specific/linux/lttng-modules/default.nix
index 6a8d645247aa..669f45562cb4 100644
--- a/pkgs/os-specific/linux/lttng-modules/default.nix
+++ b/pkgs/os-specific/linux/lttng-modules/default.nix
@@ -21,8 +21,6 @@ stdenv.mkDerivation rec {
 
   hardeningDisable = [ "pic" ];
 
-  env.NIX_CFLAGS_COMPILE = "-Wno-error=implicit-function-declaration";
-
   makeFlags = kernelModuleMakeFlags ++ [
     "KERNELDIR=${kernel.dev}/lib/modules/${kernel.modDirVersion}/build"
     "INSTALL_MOD_PATH=${placeholder "out"}"
diff --git a/pkgs/os-specific/linux/nvidia-x11/open.nix b/pkgs/os-specific/linux/nvidia-x11/open.nix
index e095cc47facb..5a897e0dd138 100644
--- a/pkgs/os-specific/linux/nvidia-x11/open.nix
+++ b/pkgs/os-specific/linux/nvidia-x11/open.nix
@@ -10,55 +10,50 @@
   broken ? false,
 }:
 
-stdenv.mkDerivation (
-  {
-    pname = "nvidia-open";
-    version = "${kernel.version}-${nvidia_x11.version}";
+stdenv.mkDerivation {
+  pname = "nvidia-open";
+  version = "${kernel.version}-${nvidia_x11.version}";
 
-    src = fetchFromGitHub {
-      owner = "NVIDIA";
-      repo = "open-gpu-kernel-modules";
-      rev = nvidia_x11.version;
-      inherit hash;
-    };
+  src = fetchFromGitHub {
+    owner = "NVIDIA";
+    repo = "open-gpu-kernel-modules";
+    rev = nvidia_x11.version;
+    inherit hash;
+  };
 
-    inherit patches;
+  inherit patches;
 
-    nativeBuildInputs = kernel.moduleBuildDependencies;
+  nativeBuildInputs = kernel.moduleBuildDependencies;
 
-    makeFlags =
-      kernelModuleMakeFlags
-      ++ [
-        "IGNORE_PREEMPT_RT_PRESENCE=1"
-        "SYSSRC=${kernel.dev}/lib/modules/${kernel.modDirVersion}/source"
-        "SYSOUT=${kernel.dev}/lib/modules/${kernel.modDirVersion}/build"
-        "MODLIB=$(out)/lib/modules/${kernel.modDirVersion}"
-        "DATE="
-        "TARGET_ARCH=${stdenv.hostPlatform.parsed.cpu.name}"
-      ]
-      ++ lib.optionals stdenv.cc.isClang [
-        "C_INCLUDE_PATH=${lib.getLib stdenv.cc.cc}/lib/clang/${lib.versions.major stdenv.cc.cc.version}/include"
-      ];
+  makeFlags =
+    kernelModuleMakeFlags
+    ++ [
+      "IGNORE_PREEMPT_RT_PRESENCE=1"
+      "SYSSRC=${kernel.dev}/lib/modules/${kernel.modDirVersion}/source"
+      "SYSOUT=${kernel.dev}/lib/modules/${kernel.modDirVersion}/build"
+      "MODLIB=$(out)/lib/modules/${kernel.modDirVersion}"
+      "DATE="
+      "TARGET_ARCH=${stdenv.hostPlatform.parsed.cpu.name}"
+    ]
+    ++ lib.optionals stdenv.cc.isClang [
+      "C_INCLUDE_PATH=${lib.getLib stdenv.cc.cc}/lib/clang/${lib.versions.major stdenv.cc.cc.version}/include"
+    ];
 
-    installTargets = [ "modules_install" ];
-    enableParallelBuilding = true;
+  installTargets = [ "modules_install" ];
+  enableParallelBuilding = true;
 
-    meta = {
-      description = "NVIDIA Linux Open GPU Kernel Module";
-      homepage = "https://github.com/NVIDIA/open-gpu-kernel-modules";
-      license = with lib.licenses; [
-        gpl2Plus
-        mit
-      ];
-      platforms = [
-        "x86_64-linux"
-        "aarch64-linux"
-      ];
-      maintainers = with lib.maintainers; [ nickcao ];
-      inherit broken;
-    };
-  }
-  // lib.optionalAttrs stdenv.hostPlatform.isAarch64 {
-    env.NIX_CFLAGS_COMPILE = "-fno-stack-protector";
-  }
-)
+  meta = {
+    description = "NVIDIA Linux Open GPU Kernel Module";
+    homepage = "https://github.com/NVIDIA/open-gpu-kernel-modules";
+    license = with lib.licenses; [
+      gpl2Plus
+      mit
+    ];
+    platforms = [
+      "x86_64-linux"
+      "aarch64-linux"
+    ];
+    maintainers = with lib.maintainers; [ nickcao ];
+    inherit broken;
+  };
+}
diff --git a/pkgs/os-specific/linux/rtl8814au/default.nix b/pkgs/os-specific/linux/rtl8814au/default.nix
index 8cdc1b4dd386..3e6a8d61be14 100644
--- a/pkgs/os-specific/linux/rtl8814au/default.nix
+++ b/pkgs/os-specific/linux/rtl8814au/default.nix
@@ -22,8 +22,6 @@ stdenv.mkDerivation {
 
   hardeningDisable = [ "pic" ];
 
-  env.NIX_CFLAGS_COMPILE = "-Wno-error=incompatible-pointer-types";
-
   prePatch = ''
     substituteInPlace ./Makefile \
       --replace /lib/modules/ "${kernel.dev}/lib/modules/" \
diff --git a/pkgs/servers/home-assistant/custom-components/moonraker/package.nix b/pkgs/servers/home-assistant/custom-components/moonraker/package.nix
index b2975c35018e..4567b8d090ba 100644
--- a/pkgs/servers/home-assistant/custom-components/moonraker/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/moonraker/package.nix
@@ -14,13 +14,13 @@
 buildHomeAssistantComponent rec {
   owner = "marcolivierarsenault";
   domain = "moonraker";
-  version = "1.13.0";
+  version = "1.13.1";
 
   src = fetchFromGitHub {
     owner = "marcolivierarsenault";
     repo = "moonraker-home-assistant";
     tag = version;
-    hash = "sha256-3GY0aPCWjrnObaHVQmVjZUsQE4ZB+LtnUxO96IZxZAk=";
+    hash = "sha256-FMYHQWnPsqYWhd2TI6TUBTfpIs4yYjcE7bmS/Fg5PZU=";
   };
 
   dependencies = [
diff --git a/pkgs/servers/http/tomcat/default.nix b/pkgs/servers/http/tomcat/default.nix
index 241319fe01aa..7d3a384d1a9c 100644
--- a/pkgs/servers/http/tomcat/default.nix
+++ b/pkgs/servers/http/tomcat/default.nix
@@ -60,8 +60,8 @@ let
 in
 {
   tomcat9 = common {
-    version = "9.0.113";
-    hash = "sha256-eQ2yuAkreVTewq/Gr3Gnu7bGeZgZhRbdap+GVmG10qc=";
+    version = "9.0.115";
+    hash = "sha256-WhZbsSGmnmm/o8UMT5mafR5IEg1iW29d+Dg7kKe7u5g=";
   };
 
   tomcat10 = common {
diff --git a/pkgs/servers/kanidm/1_5.nix b/pkgs/servers/kanidm/1_5.nix
deleted file mode 100644
index 7b549c0b5186..000000000000
--- a/pkgs/servers/kanidm/1_5.nix
+++ /dev/null
@@ -1,6 +0,0 @@
-import ./generic.nix {
-  version = "1.5.0";
-  hash = "sha256-swrqyjA7Wgq17vd+753LDFcXrSFixVNLhTvj1bhG3DU=";
-  cargoHash = "sha256-72IwS8Nk1y6xDH9y8JW2LpbhFWaq0tpORx7JQSCF5/M=";
-  unsupported = true;
-}
diff --git a/pkgs/servers/kanidm/1_6.nix b/pkgs/servers/kanidm/1_6.nix
deleted file mode 100644
index 294e72b4bd15..000000000000
--- a/pkgs/servers/kanidm/1_6.nix
+++ /dev/null
@@ -1,6 +0,0 @@
-import ./generic.nix {
-  version = "1.6.4";
-  hash = "sha256-ui3w1HDHXHARsjQ3WtJfZbM7Xgg3ODnUneXJMQwaOMw=";
-  cargoHash = "sha256-KJGELBzScwsLd6g3GR9Vk0nfDU2EjZBfXwlXJ+bZb1k=";
-  unsupported = true;
-}
diff --git a/pkgs/servers/kanidm/1_7.nix b/pkgs/servers/kanidm/1_7.nix
index b44cfbb3e734..c55c98a2d937 100644
--- a/pkgs/servers/kanidm/1_7.nix
+++ b/pkgs/servers/kanidm/1_7.nix
@@ -2,5 +2,5 @@ import ./generic.nix {
   version = "1.7.4";
   hash = "sha256-nWwwcRmCfKJECYN/5w30W3sDu9BqIGonF4ke8F04x3E=";
   cargoHash = "sha256-h5jeQxvYzHRVfNYYh9qKukE4h4nhDyuRou2xuZq4AdM=";
-  eolDate = "2025-12-12";
+  unsupported = true;
 }
diff --git a/pkgs/servers/kanidm/README.md b/pkgs/servers/kanidm/README.md
index 5e33c8d3bbac..8a66eee9b404 100644
--- a/pkgs/servers/kanidm/README.md
+++ b/pkgs/servers/kanidm/README.md
@@ -20,13 +20,9 @@ For example, when upgrading from 1.4 -> 1.5
 1. Update `1_5.nix` hashes/paths, and as needed for upstream changes, `generic.nix`
 1. Update `all-packages.nix` to add `kanidm_1_5` and `kanidmWithSecretProvisioning_1_5`, leave default
 1. Update the previous release, e.g. `1_4.nix` and set `eolDate = "YYYY-MM-DD"` where the date is 30 days from release of 1.5.
+1. Update default in `nixos/tests/kanidm.nix` and `nixos/tests/kanidm-provisioning.nix`
 1. Create commit, `kanidm_1_5: init at 1.5.0` - this is the only commit that will be backported
 
-### Update default
-
-1. Update kanidm aliases in `aliases.nix`. Should remove completely after 25.11 branch off.
-1. Create commit `kanidm: update default to 1.5.0`
-
 ### Backport to stable
 
 1. Manually create a backport using _only_ the init commit
@@ -41,5 +37,5 @@ Kanidm versions are supported for 30 days after the release of new versions. Fol
 
 1. Remove the third oldest release from `all-packages.nix`, e.g. 1.3.x continuing the example. Remove `kanidm_1_3` and `kanidmWithSecretProvisioning_1_3`
 1. Update `pkgs/top-level/release.nix` and remove `kanidm_1_3*` from `permittedInsecurePackages`
-1. Update `pkgs/top-level/aliases.nix` and add `kanidm_1_4` and `kanidmWithSecretProvisioning_1_4-1.4.6`
+1. Update `pkgs/top-level/aliases.nix` and add `kanidm_1_4` and `kanidmWithSecretProvisioning_1_4`
 1. Remove `pkgs/by-name/ka/kanidm/1_3.nix`
diff --git a/pkgs/servers/monitoring/grafana/plugins/victoriametrics-logs-datasource/default.nix b/pkgs/servers/monitoring/grafana/plugins/victoriametrics-logs-datasource/default.nix
index ae93f83f0d7f..1c54814debdd 100644
--- a/pkgs/servers/monitoring/grafana/plugins/victoriametrics-logs-datasource/default.nix
+++ b/pkgs/servers/monitoring/grafana/plugins/victoriametrics-logs-datasource/default.nix
@@ -2,8 +2,8 @@
 
 grafanaPlugin {
   pname = "victoriametrics-logs-datasource";
-  version = "0.23.2";
-  zipHash = "sha256-IINon0NCv2tzmyfQkmHeRhTzfBFT2ZYXDPNTLc8YPBg=";
+  version = "0.24.0";
+  zipHash = "sha256-8I2reNVW4iiJ3JHEExixpd5qHWp/uRiHNvICPgJSHEY=";
   meta = {
     description = "Grafana datasource for VictoriaLogs";
     license = lib.licenses.asl20;
diff --git a/pkgs/servers/nextcloud/packages/apps/memories.nix b/pkgs/servers/nextcloud/packages/apps/memories.nix
index d85f5cc3841b..598897e33391 100644
--- a/pkgs/servers/nextcloud/packages/apps/memories.nix
+++ b/pkgs/servers/nextcloud/packages/apps/memories.nix
@@ -13,9 +13,9 @@
 let
   latestVersionForNc = {
     "31" = {
-      version = "7.8.1";
-      appHash = "sha256-lD50xKxHYc04G6r4caAKzRcTl0Q2VSWUXHRETUCF1dg=";
-      srcHash = "sha256-E/hdjfBh6MorJ5A2W15F6iqax+wV8XHxiQQiahCM4Os=";
+      version = "7.8.2";
+      appHash = "sha256-O59G5kUkYlYxr8p/vEqs3LqLRKJZbeEgDhdY5eHfnZg=";
+      srcHash = "sha256-KyUfrKHnRO3lMin0seSNFRnRRTPo12NbbvbkSpxSMQE=";
     };
     "32" = latestVersionForNc."31";
   };
diff --git a/pkgs/servers/sql/postgresql/ext/timescaledb.nix b/pkgs/servers/sql/postgresql/ext/timescaledb.nix
index f7b83d78c6ba..162b4a408f5c 100644
--- a/pkgs/servers/sql/postgresql/ext/timescaledb.nix
+++ b/pkgs/servers/sql/postgresql/ext/timescaledb.nix
@@ -13,13 +13,13 @@
 
 postgresqlBuildExtension (finalAttrs: {
   pname = "timescaledb${lib.optionalString (!enableUnfree) "-apache"}";
-  version = "2.24.0";
+  version = "2.25.0";
 
   src = fetchFromGitHub {
     owner = "timescale";
     repo = "timescaledb";
     tag = finalAttrs.version;
-    hash = "sha256-sc8djQeDOCo3UdyKqFB9Ntzgw5Qopjk5f1BfATpONbI=";
+    hash = "sha256-m5aBxOOH04b0iDvApvY30uvYsFoV+WEBnKP4Ssr0t/M=";
   };
 
   nativeBuildInputs = [ cmake ];
diff --git a/pkgs/servers/sql/postgresql/ext/vectorchord/package.nix b/pkgs/servers/sql/postgresql/ext/vectorchord/package.nix
index 0cd70bff768f..7eef0c06e74b 100644
--- a/pkgs/servers/sql/postgresql/ext/vectorchord/package.nix
+++ b/pkgs/servers/sql/postgresql/ext/vectorchord/package.nix
@@ -12,16 +12,16 @@ buildPgrxExtension (finalAttrs: {
   cargo-pgrx = cargo-pgrx_0_16_0;
 
   pname = "vectorchord";
-  version = "0.5.3";
+  version = "1.0.0";
 
   src = fetchFromGitHub {
     owner = "tensorchord";
     repo = "vectorchord";
     tag = finalAttrs.version;
-    hash = "sha256-+c1Uf/3rp+HuthDVPLloJF2MQPW3Xho897Z2eAnG6aM=";
+    hash = "sha256-+BOuiinbKPZZaDl9aYsIoZPgvLZ4FA6Rb4/W+lAz4so=";
   };
 
-  cargoHash = "sha256-/EcQgQ6J9hg4BsniRX7OMwEYy5EtVeT6Q/+3mAkyCH8=";
+  cargoHash = "sha256-kwe2x7OTjpdPonZsvnR1C/89D5W/R5JswYF79YcSFEA=";
 
   # Include upgrade scripts in the final package
   # https://github.com/tensorchord/VectorChord/blob/0.5.0/crates/make/src/main.rs#L366
diff --git a/pkgs/tools/misc/anystyle-cli/default.nix b/pkgs/tools/misc/anystyle-cli/default.nix
index 06f6ea893692..54c43750c479 100644
--- a/pkgs/tools/misc/anystyle-cli/default.nix
+++ b/pkgs/tools/misc/anystyle-cli/default.nix
@@ -40,7 +40,6 @@ buildRubyGem rec {
     license = lib.licenses.bsd2;
     maintainers = with lib.maintainers; [
       aschleck
-      shamilton
     ];
     mainProgram = "anystyle";
     platforms = lib.platforms.unix;
diff --git a/pkgs/tools/misc/dvtm/dvtm.nix b/pkgs/tools/misc/dvtm/dvtm.nix
index 5374e5b52f49..bf162bbce815 100644
--- a/pkgs/tools/misc/dvtm/dvtm.nix
+++ b/pkgs/tools/misc/dvtm/dvtm.nix
@@ -33,6 +33,11 @@ stdenv.mkDerivation {
 
   makeFlags = [ "PREFIX=$(out)" ];
 
+  outputs = [
+    "out"
+    "man"
+  ];
+
   meta = {
     description = "Dynamic virtual terminal manager";
     homepage = "http://www.brain-dump.org/projects/dvtm";
diff --git a/pkgs/tools/misc/haste-client/default.nix b/pkgs/tools/misc/haste-client/default.nix
index 0ff27c6a0fd7..9cd9e3c91980 100644
--- a/pkgs/tools/misc/haste-client/default.nix
+++ b/pkgs/tools/misc/haste-client/default.nix
@@ -12,7 +12,6 @@ bundlerApp {
     description = "Command line interface to the AnyStyle Parser and Finder";
     homepage = "https://rubygems.org/gems/haste";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ shamilton ];
     platforms = lib.platforms.unix;
     mainProgram = "haste";
   };
diff --git a/pkgs/tools/misc/opentelemetry-collector/builder.nix b/pkgs/tools/misc/opentelemetry-collector/builder.nix
index db4b6d7e2f1a..d8b3dc1100e9 100644
--- a/pkgs/tools/misc/opentelemetry-collector/builder.nix
+++ b/pkgs/tools/misc/opentelemetry-collector/builder.nix
@@ -7,17 +7,17 @@ buildGoModule rec {
   pname = "ocb";
   # Also update `pkgs/tools/misc/opentelemetry-collector/releases.nix`
   # whenever that version changes.
-  version = "0.142.0";
+  version = "0.144.0";
 
   src = fetchFromGitHub {
     owner = "open-telemetry";
     repo = "opentelemetry-collector";
     rev = "cmd/builder/v${version}";
-    hash = "sha256-WHljFdxRXQyhEdDlwNAGGri2ow0Qf7T046MlIhF4V+E=";
+    hash = "sha256-u7OVkRmSn0DomwkFByOHSNCmpPaLwQnMumJYKHbqdl0=";
   };
 
   sourceRoot = "${src.name}/cmd/builder";
-  vendorHash = "sha256-DxMnFrqrTgoghA8MeXSl2JOyZ4D9Y83PqUXm9Uofy7c=";
+  vendorHash = "sha256-W+Ap4JMQTI7g9s668VL1rMj4CErbyczW+nKh5ZW94/Y=";
 
   env.CGO_ENABLED = 0;
   ldflags = [
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index d394294c8125..c296683900cf 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -442,6 +442,7 @@ mapAliases {
   chrome-gnome-shell = throw "'chrome-gnome-shell' has been renamed to/replaced by 'gnome-browser-connector'"; # Converted to throw 2025-10-27
   ci-edit = throw "'ci-edit' has been removed due to lack of maintenance upstream"; # Added 2025-08-26
   cinnamon-common = cinnamon; # Added 2025-08-06
+  ciscoPacketTracer7 = throw "'ciscoPacketTracer7' has been removed in favor of 'ciscoPacketTracer8' and 'ciscoPacketTracer9'";
   citrix_workspace_23_11_0 = throw "'citrix_workspace_23_11_0' has been removed because it has reached EOL."; # Added 2025-11-25
   citrix_workspace_24_02_0 = throw "'citrix_workspace_24_02_0' has been removed because it has reached EOL."; # Added 2025-11-25
   citrix_workspace_24_05_0 = throw "'citrix_workspace_24_05_0' has been removed because it depended on the removed webkitgtk_4_0."; # Added 2025-11-25
@@ -884,10 +885,14 @@ mapAliases {
   k3s_1_30 = throw "'k3s_1_30' has been removed from nixpkgs as it has reached end of life"; # Added 2025-09-01
   k3s_1_31 = throw "'k3s_1_31' has been removed from nixpkgs as it has reached end of life"; # Added 2025-12-08
   kak-lsp = throw "'kak-lsp' has been renamed to/replaced by 'kakoune-lsp'"; # Converted to throw 2025-10-27
-  kanidm = warnAlias "'kanidm' will be removed before 26.05. You must use a versioned package, e.g. 'kanidm_1_x'." kanidm_1_7; # Added 2025-09-01
+  kanidm = throw "'kanidm' alias has been removed. You must use a versioned package, e.g. 'kanidm_1_x'."; # Added 2026-01-29
   kanidm_1_4 = throw "'kanidm_1_4' has been removed as it has reached end of life"; # Added 2025-06-18
+  kanidm_1_5 = throw "'kanidm_1_5' has been removed as it has reached end of life"; # Added 2026-01-29
+  kanidm_1_6 = throw "'kanidm_1_6' has been removed as it has reached end of life"; # Added 2026-01-29
   kanidmWithSecretProvisioning = warnAlias "'kanidmWithSecretProvisioning' will be removed before 26.05. You must use a versioned package, e.g. 'kanidmWithSecretProvisioning_1_x'." kanidmWithSecretProvisioning_1_7; # Added 2025-09-01
   kanidmWithSecretProvisioning_1_4 = throw "'kanidmWithSecretProvisioning_1_4' has been removed as it has reached end of life"; # Added 2025-06-18
+  kanidmWithSecretProvisioning_1_5 = throw "'kanidmWithSecretProvisioning_1_5' has been removed as it has reached end of life"; # Added 2026-01-29
+  kanidmWithSecretProvisioning_1_6 = throw "'kanidmWithSecretProvisioning_1_6' has been removed as it has reached end of life"; # Added 2026-01-29
   kapitano = throw "'kapitano' has been removed, as it is unmaintained upstream"; # Added 2025-10-29
   kbibtex = throw "'kbibtex' has been removed, as it is unmaintained upstream"; # Added 2025-08-30
   kcli = throw "kcli has been removed because it has been marked as broken since at least November 2024."; # Added 2025-09-28
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 7d3d396b73cc..c1d32861a943 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -8542,12 +8542,6 @@ with pkgs;
 
   inherit
     ({
-      kanidm_1_5 = callPackage ../servers/kanidm/1_5.nix {
-        kanidmWithSecretProvisioning = kanidmWithSecretProvisioning_1_5;
-      };
-      kanidm_1_6 = callPackage ../servers/kanidm/1_6.nix {
-        kanidmWithSecretProvisioning = kanidmWithSecretProvisioning_1_6;
-      };
       kanidm_1_7 = callPackage ../servers/kanidm/1_7.nix {
         kanidmWithSecretProvisioning = kanidmWithSecretProvisioning_1_7;
       };
@@ -8555,17 +8549,11 @@ with pkgs;
         kanidmWithSecretProvisioning = kanidmWithSecretProvisioning_1_8;
       };
 
-      kanidmWithSecretProvisioning_1_5 = kanidm_1_5.override { enableSecretProvisioning = true; };
-      kanidmWithSecretProvisioning_1_6 = kanidm_1_6.override { enableSecretProvisioning = true; };
       kanidmWithSecretProvisioning_1_7 = kanidm_1_7.override { enableSecretProvisioning = true; };
       kanidmWithSecretProvisioning_1_8 = kanidm_1_8.override { enableSecretProvisioning = true; };
     })
-    kanidm_1_5
-    kanidm_1_6
     kanidm_1_7
     kanidm_1_8
-    kanidmWithSecretProvisioning_1_5
-    kanidmWithSecretProvisioning_1_6
     kanidmWithSecretProvisioning_1_7
     kanidmWithSecretProvisioning_1_8
     ;
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index abd85a81e1d8..59c82a25096f 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -814,6 +814,8 @@ self: super: with self; {
 
   apeye-core = callPackage ../development/python-modules/apeye-core { };
 
+  apiflask = callPackage ../development/python-modules/apiflask { };
+
   apipkg = callPackage ../development/python-modules/apipkg { };
 
   apischema = callPackage ../development/python-modules/apischema { };
@@ -17333,6 +17335,8 @@ self: super: with self; {
 
   sigtools = callPackage ../development/python-modules/sigtools { };
 
+  silver-platter = callPackage ../development/python-modules/silver-platter { };
+
   simanneal = callPackage ../development/python-modules/simanneal { };
 
   simber = callPackage ../development/python-modules/simber { };
diff --git a/pkgs/top-level/release.nix b/pkgs/top-level/release.nix
index 2ff584588835..2d0c24ba761b 100644
--- a/pkgs/top-level/release.nix
+++ b/pkgs/top-level/release.nix
@@ -44,8 +44,8 @@
       # so users choosing to allow don't have to rebuild them every time.
       permittedInsecurePackages = [
         "olm-3.2.16" # see PR #347899
-        "kanidm_1_6-1.6.4"
-        "kanidmWithSecretProvisioning_1_6-1.6.4"
+        "kanidm_1_7-1.7.4"
+        "kanidmWithSecretProvisioning_1_7-1.7.4"
       ];
     };