Merge master into staging-nixos

2026-05-05 18:32:43 +00:00
parent 6ca4020f37 ae66612cd4
commit 80125e20b6
99 changed files with 509 additions and 595 deletions
@@ -139,6 +139,8 @@

 - `mactracker` has been updated to major version 8, which now [requires macOS 11 Big Sur or later](https://mactracker.ca/releasenotes-mac.html#:~:text=System%20requirements%20updated%20to%20macOS%2011%20Big%20Sur%20and%20later). The previous version supported Mac OS X 10.6.8 or later.

+- `net-news-wire` has been updated from 6.x to 7.x, which now requires macOS 15 (Sequoia) or newer. The previous version supported macOS 13 and newer.
+
 - `bartender` has been updated to major version 6. This removes support for MacOS Sonoma (and adds support for Tahoe). For more information, see [the release notes](https://www.macbartender.com/Bartender6/release_notes/) or [the Bartender 6 support page](https://www.macbartender.com/Bartender6/support/).

 - `lima` has been updated from `1.x` to `2.x`. This major update includes several breaking changes, such as `/tmp/lima` no longer being mounted by default.
@@ -1072,6 +1072,11 @@ lib.mapAttrs mkLicense (
      fullName = "MIT Open Group variant";
    };

+    mpich2 = {
+      spdxId = "mpich2";
+      fullName = "mpich2 License";
+    };
+
    mpl10 = {
      spdxId = "MPL-1.0";
      fullName = "Mozilla Public License 1.0";
@@ -6327,6 +6327,13 @@
    githubId = 223910;
    name = "Dhananjay Balan";
  };
+  dbe = {
+    email = "daniel@beecham.se";
+    github = "dbeecham";
+    githubId = 1388869;
+    name = "Daniel Beecham";
+    keys = [ { fingerprint = "0958 4E8B 7234 5847 EF27  02E9 C288 E1E2 1E76 BF58"; } ];
+  };
  dbeckwith = {
    email = "djbsnx@gmail.com";
    github = "dbeckwith";
@@ -4,7 +4,18 @@ let
  inherit (config.services.xserver) videoDrivers;
 in
 {
-  boot.extraModulePackages = lib.mkIf (lib.elem "virtualbox" videoDrivers) [
-    kernelPackages.virtualboxGuestAdditions
-  ];
+  config = lib.mkIf (lib.elem "virtualbox" videoDrivers) {
+    assertions = [
+      {
+        assertion = lib.versionOlder kernelPackages.kernel.version "7.0";
+        message = ''
+          The `virtualbox` video driver provided by VirtualBox Guest Additions has been deprecated upstream for Linux kernel 7.0+.
+        '';
+      }
+    ];
+
+    boot.extraModulePackages = [
+      kernelPackages.virtualboxGuestAdditions
+    ];
+  };
 }
@@ -11,12 +11,53 @@ in
  options.services.jitterentropy-rngd = {
    enable = lib.mkEnableOption "jitterentropy-rngd service configuration";
    package = lib.mkPackageOption pkgs "jitterentropy-rngd" { };
+    osr = lib.mkOption {
+      type = lib.types.ints.between 3 20;
+      default = 3;
+      description = "Oversampling rate for jitterentropy (3 to 20)";
+    };
+    flags = lib.mkOption {
+      type = lib.types.int;
+      default = 0;
+      description = "Additional flags to pass to jitterentropy";
+    };
+    forceSP800-90B = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      description = "Force SP800-90B mode for entropy reading";
+    };
+    verbose = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      description = "Enable verbose log messages";
+    };
  };

-  config = lib.mkIf cfg.enable {
-    systemd.packages = [ cfg.package ];
-    systemd.services."jitterentropy".wantedBy = [ "basic.target" ];
-  };
+  config =
+    let
+      # use identical arguments for status and service execution,
+      # in order to get meaningful output
+      args =
+        "--osr ${builtins.toString cfg.osr} --flags ${builtins.toString cfg.flags}"
+        + lib.optionalString cfg.forceSP800-90B " --sp800-90b"
+        + lib.optionalString cfg.verbose " -vvv";
+    in
+    lib.mkIf cfg.enable {
+      systemd.packages = [ cfg.package ];
+      systemd.services."jitterentropy".wantedBy = [ "basic.target" ];
+      systemd.services."jitterentropy".serviceConfig = {
+        # logs used configuration for comparison
+        ExecStartPre = [
+          "-${cfg.package}/bin/jitterentropy-rngd --status ${args}"
+        ];
+        ExecStart = [
+          # clear old setting from built-in service file
+          ""
+          # use service from package with our configured args
+          "${cfg.package}/bin/jitterentropy-rngd ${args}"
+        ];
+      };
+    };

  meta.maintainers = with lib.maintainers; [ thillux ];
 }
@@ -11,7 +11,6 @@ let
    mkDefault
    mkIf
    optional
-    readFile
    ;
 in

@@ -117,7 +116,8 @@ in

  users.groups.google-sudoers = mkIf config.users.mutableUsers { };

-  boot.extraModprobeConfig = readFile "${pkgs.google-guest-configs}/etc/modprobe.d/gce-blacklist.conf";
+  environment.etc."modprobe.d/gce-blacklist.conf".source =
+    "${pkgs.google-guest-configs}/etc/modprobe.d/gce-blacklist.conf";

  environment.etc."sysctl.d/60-gce-network-security.conf".source =
    "${pkgs.google-guest-configs}/etc/sysctl.d/60-gce-network-security.conf";
@@ -1737,10 +1737,6 @@ in
    imports = [ ./varnish.nix ];
    _module.args.package = pkgs.varnish60;
  };
-  varnish77 = runTest {
-    imports = [ ./varnish.nix ];
-    _module.args.package = pkgs.varnish77;
-  };
  varnish80 = runTest {
    imports = [ ./varnish.nix ];
    _module.args.package = pkgs.varnish80;
@@ -77,6 +77,8 @@ let

      virtualisation.virtualbox.guest.enable = true;

+      boot.initrd.systemd.enable = false;
+
      boot.initrd.kernelModules = [
        "af_packet"
        "vboxsf"
@@ -307,7 +309,11 @@ let
                    "echo 'Could not get IPv4 address for ${name}!' >&2; "
                    "exit 1"
                )
-            ).strip()
+            )
+
+            ip = ip + '\n'
+            ip = ip[:ip.find('\n')]
+
            return ip


@@ -503,12 +509,12 @@ mapAttrs (mkVBoxTest { } vboxVMs) {
  simple-gui = ''
    # Home to select Tools, down to move to the VM, enter to start it.
    def send_vm_startup():
-        machine.send_key("home")
-        machine.send_key("down")
+        machine.send_key("ctrl-m")
        machine.send_key("ret")


    create_vm_simple()
+    machine.succeed(ru("VBoxManage setextradata global \"GUI/Input/SelectorShortcuts\" \"ToolsGlobalMachineManager=Ctrl+M\""))
    machine.succeed(ru("VirtualBox >&2 &"))
    machine.wait_until_succeeds(ru("xprop -name 'Oracle VirtualBox Manager'"))
    machine.sleep(5)
@@ -21,26 +21,26 @@ vscode-utils.buildVscodeMarketplaceExtension (finalAttrs: {
      sources = {
        "x86_64-linux" = {
          arch = "linux-x64";
-          hash = "sha256-cDR/E5ATkKHUhvfQ+721M1DbNNxbSzWdnah7kEpyIxc=";
+          hash = "sha256-5xOaNdKtE2p1f1vg7nRtrIOyKsfNCTKpkpVsMn5brz0=";
        };
        "aarch64-linux" = {
          arch = "linux-arm64";
-          hash = "sha256-8vJHvwYdCdQb0kHNbM6KNp27BJh8RGrBmw++Zz7nLf4=";
+          hash = "sha256-bbB/2qLNdnZUXGsMscYFeInvJAb49CMSqnQRC4EqO9Q=";
        };
        "x86_64-darwin" = {
          arch = "darwin-x64";
-          hash = "sha256-y93nqrqeLrOSPu+/NsKVg1yYPGT1x5XENO3VE/+uQU4=";
+          hash = "sha256-NjA5HuAM5Rt3PwkX8Rv6kPwnVVMFFFZLWyqPWy5tVY4=";
        };
        "aarch64-darwin" = {
          arch = "darwin-arm64";
-          hash = "sha256-CYewM/KAk/WrEBiDK/aCkNc4/sGMIDnrHAoHIYU/h+o=";
+          hash = "sha256-Dqi+3C7wCyrvdmh12/tu0MEXrlx0WRFB93h4tqGtQ48=";
        };
      };
    in
    {
      name = "claude-code";
      publisher = "anthropic";
-      version = "2.1.123";
+      version = "2.1.128";
    }
    // sources.${stdenvNoCC.hostPlatform.system}
      or (throw "Unsupported system ${stdenvNoCC.hostPlatform.system}");
@@ -1076,11 +1076,11 @@
    "vendorHash": "sha256-F1AuO/dkldEDRvkwrbq2EjByxjg3K2rohZAM4DzKPUw="
  },
  "pagerduty_pagerduty": {
-    "hash": "sha256-JEV+nNJjEM7RlQ6RKEawftB/OHaf8vcNHDYKhkUJRw0=",
+    "hash": "sha256-ZbkCJIDZdqry5y4gv7wtkf2GFfvhUCsj5knICUidjZQ=",
    "homepage": "https://registry.terraform.io/providers/PagerDuty/pagerduty",
    "owner": "PagerDuty",
    "repo": "terraform-provider-pagerduty",
-    "rev": "v3.32.3",
+    "rev": "v3.32.4",
    "spdx": "MPL-2.0",
    "vendorHash": null
  },
@@ -72,9 +72,9 @@ let
  buildType = "release";
  # Use maintainers/scripts/update.nix to update the version and all related hashes or
  # change the hashes in extpack.nix and guest-additions/default.nix as well manually.
-  virtualboxVersion = "7.2.6";
+  virtualboxVersion = "7.2.8";
  virtualboxSubVersion = "";
-  virtualboxSha256 = "c58443a0e6fcc7fc7e84c1011a10823b3540c6a2b8f2e27c4d8971272baf09f7";
+  virtualboxSha256 = "0642ed4a12b7204cd30c0abbc2c10c1cc7ad55ce1756a01e86a16d4b6b066592";

  kvmPatchVboxVersion = "7.2.6";
  kvmPatchVersion = "20260201";
@@ -5,7 +5,7 @@
 }:
 fetchurl rec {
  pname = "virtualbox-extpack";
-  version = "7.2.6";
+  version = "7.2.8";
  name = "Oracle_VirtualBox_Extension_Pack-${version}.vbox-extpack";
  url = "https://download.virtualbox.org/virtualbox/${version}/${name}";
  sha256 =
@@ -13,7 +13,7 @@ fetchurl rec {
    # Thus do not use `nix-prefetch-url` but instead plain old `sha256sum`.
    # Checksums can also be found at https://download.virtualbox.org/virtualbox/${version}/SHA256SUMS
    let
-      value = "d46449366b23417a626439785f23f7eaf06bfbfd2cb030713e1abfa5b03d4205";
+      value = "d7301435ee207ff96c5ad372939dc46d39e0f9db2bcce487cf1e8f739a2e845b";
    in
    assert (builtins.stringLength value) == 64;
    value;
@@ -5,7 +5,7 @@
 }:
 fetchurl {
  url = "http://download.virtualbox.org/virtualbox/${virtualboxVersion}/VBoxGuestAdditions_${virtualboxVersion}.iso";
-  sha256 = "740e9a729c944180a165188fd426f9a2e1a2581d654402a1b856f9755a1ffc97";
+  sha256 = "169acb9361ade42d32500f51b48ad366fdfdb094b5e3fb422d640c1416a6b216";
  meta = {
    description = "Guest additions ISO for VirtualBox";
    longDescription = ''
@@ -18,9 +18,9 @@
  libx11,
 }:
 let
-  virtualboxVersion = "7.2.6";
+  virtualboxVersion = "7.2.8";
  virtualboxSubVersion = "";
-  virtualboxSha256 = "c58443a0e6fcc7fc7e84c1011a10823b3540c6a2b8f2e27c4d8971272baf09f7";
+  virtualboxSha256 = "0642ed4a12b7204cd30c0abbc2c10c1cc7ad55ce1756a01e86a16d4b6b066592";

  platform =
    if stdenv.hostPlatform.isAarch64 then
@@ -68,6 +68,8 @@ let
      pkg = libxt;
    }
  ];
+
+  hasVboxVideo = lib.versionOlder kernel.version "7.0";
 in
 stdenv.mkDerivation {
  pname = "VirtualBox-GuestAdditions";
@@ -133,7 +135,10 @@ stdenv.mkDerivation {

    # Install kernel modules.
    cd src/vboxguest-${virtualboxVersion}_NixOS
-    make install INSTALL_MOD_PATH=$out KBUILD_EXTRA_SYMBOLS=$PWD/vboxsf/Module.symvers
+
+    INSTALL_TARGETS=(install-vboxguest install-vboxsf ${lib.optionalString hasVboxVideo "install-vboxvideo"})
+    make INSTALL_MOD_PATH=$out KBUILD_EXTRA_SYMBOLS=$PWD/vboxsf/Module.symvers ''${INSTALL_TARGETS[@]}
+
    cd ../..

    # Install binaries
@@ -8,13 +8,13 @@
 }:
 stdenv.mkDerivation {
  pname = "airwindows";
-  version = "0-unstable-2026-04-24";
+  version = "0-unstable-2026-05-02";

  src = fetchFromGitHub {
    owner = "airwindows";
    repo = "airwindows";
-    rev = "38f93aaaa74c0319b47ec4b9fc7f311fad86c86d";
-    hash = "sha256-GxFhcMuJ2et+AFHtEdbwr8+sFRBy6/in5yXqxgd+wJw=";
+    rev = "6df9b9832d0e4a1532040c0d4eba5b12bd795f79";
+    hash = "sha256-MOGVRIxlxyJk4LCW5iVtukV4fAnVoc+wORw2REGRyPc=";
  };

  # we patch helpers because honestly im spooked out by where those variables
@@ -313,9 +313,9 @@

  ssh = mkAzExtension rec {
    pname = "ssh";
-    version = "2.0.7";
+    version = "2.0.8";
    url = "https://azcliprod.blob.core.windows.net/cli-extensions/ssh-${version}-py3-none-any.whl";
-    hash = "sha256-H/CwitltPFB6E2FK9HsDEEjmn2NOD9/O4BOdBlRQAwY=";
+    hash = "sha256-eX42Pr1rTPWqUna4nvNMv7sWtIGcXyc/CbmhwRjQxoM=";
    description = "SSH into Azure VMs using RBAC and AAD OpenSSH Certificates";
    propagatedBuildInputs = with python3Packages; [
      oras
@@ -9,7 +9,6 @@
  callPackage,
  ceres-solver,
  cmake,
-  colladaSupport ? true,
  config,
  cudaPackages,
  cudaSupport ? config.cudaSupport,
@@ -54,7 +53,6 @@
  nix-update-script,
  openUsdSupport ? !stdenv.hostPlatform.isDarwin,
  openal,
-  opencollada-blender,
  opencolorio,
  openexr,
  openimagedenoise,
@@ -188,7 +186,6 @@ stdenv'.mkDerivation (finalAttrs: {
    (lib.cmakeBool "WITH_INSTALL_PORTABLE" false)
    (lib.cmakeBool "WITH_JACK" jackaudioSupport)
    (lib.cmakeBool "WITH_LIBS_PRECOMPILED" false)
-    (lib.cmakeBool "WITH_OPENCOLLADA" colladaSupport)
    (lib.cmakeBool "WITH_OPENIMAGEDENOISE" openImageDenoiseSupport)
    (lib.cmakeBool "WITH_PIPEWIRE" false)
    (lib.cmakeBool "WITH_PULSEAUDIO" false)
@@ -329,7 +326,6 @@ stdenv'.mkDerivation (finalAttrs: {
    wayland
    wayland-protocols
  ]
-  ++ lib.optional colladaSupport opencollada-blender
  ++ lib.optional jackaudioSupport libjack2
  ++ lib.optional spaceNavSupport libspnav
  ++ lib.optionals vulkanSupport [
@@ -1,47 +1,47 @@
 {
-  "version": "2.1.123",
-  "commit": "54903ade25087ef906df59ec6a608cc3a50a3f06",
-  "buildDate": "2026-04-29T00:41:50Z",
+  "version": "2.1.128",
+  "commit": "d6caed183d5f5b985cab02ef8c812d2abee9ecd9",
+  "buildDate": "2026-05-04T17:39:35Z",
  "platforms": {
    "darwin-arm64": {
      "binary": "claude",
-      "checksum": "44597dff0f1c11e37c1954d4ac3965909be376e5961b558345723357253bcc90",
-      "size": 215880320
+      "checksum": "1a56ae4cd171ba7839fc2b03d558022ffaebb5693be532d8f3c344731063e979",
+      "size": 216953600
    },
    "darwin-x64": {
      "binary": "claude",
-      "checksum": "ddea227d4c2b2602d650d2c5d5c812f7680701a1504bcaff81e42c165c583ef9",
-      "size": 217444560
+      "checksum": "eb7f5441fcc169a01ec6a655d7663dffbcfe9cb03491dc0c7a157e9e67da3737",
+      "size": 218517840
    },
    "linux-arm64": {
      "binary": "claude",
-      "checksum": "825c526035d1d75ff0bc1eebf18c887f98d07ea49ea80bd312ff416fe61a39b3",
-      "size": 247925312
+      "checksum": "e2a31879b7433f658d915e6716249f10b913b467873950e8e7e066ba7c4d96e9",
+      "size": 248973888
    },
    "linux-x64": {
      "binary": "claude",
-      "checksum": "5a78139b679a86a88a0ac5476c706a64c3105bf6a6d435ba10f3aa3fb635bdb2",
-      "size": 247732864
+      "checksum": "770c81373ad42970ef576676da78d6be60413f4ade23abadbf1343ca0809bb3e",
+      "size": 248789632
    },
    "linux-arm64-musl": {
      "binary": "claude",
-      "checksum": "0cd6e1a18036bee71ace8cbf7ed25cc4a443e69924796fc985b6719321cb37d3",
-      "size": 240650624
+      "checksum": "7d0e38623925ee076ede98392b2169bd88a2c529f080d7807ae03c350b6b2337",
+      "size": 241699200
    },
    "linux-x64-musl": {
      "binary": "claude",
-      "checksum": "bddd41dde044863f04c0a5fce16514e7fa24e123d217e09526a88188af67dbc0",
-      "size": 241998208
+      "checksum": "b6480ddd313432e37b35a356c38067b1a76b900a936e30e975111ad11f70dcf4",
+      "size": 243054976
    },
    "win32-x64": {
      "binary": "claude.exe",
-      "checksum": "34345e5c3c2d3910772aa7ecce2c33c2fce6cf2e146ff6c031f9c01debba02c6",
-      "size": 253691552
+      "checksum": "1d920cb73f612083ae4133ea4b63e1e8c7a4624a8ba827dfc928c12e86ad803e",
+      "size": 254711968
    },
    "win32-arm64": {
      "binary": "claude.exe",
-      "checksum": "bc4a102e5086f8faa1b7f2848a0fb482a01314f4004619a05da8352b905b3154",
-      "size": 249754272
+      "checksum": "3b957bec823951455840accbdb6cfa970505691ce39b1fefa9de5c32a2ee2ff6",
+      "size": 250775712
    }
  }
 }
@@ -19,7 +19,7 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "dbeaver-bin";
-  version = "26.0.3";
+  version = "26.0.4";

  src =
    let
@@ -32,10 +32,10 @@ stdenvNoCC.mkDerivation (finalAttrs: {
        aarch64-darwin = "macos-aarch64.dmg";
      };
      hash = selectSystem {
-        x86_64-linux = "sha256-G6Rurk8AtHXRfdMvBMNoJTSzBdQJ5Ncy/7WFt5vr3uI=";
-        aarch64-linux = "sha256-iZK5sQfdjMlgX8bhyL2q7lleIKR479KhDydqD3kR3sU=";
-        x86_64-darwin = "sha256-A5upiZ0tts+Pyg1TDhvEVYbGqnAxooUjsZxMG2L9RVQ=";
-        aarch64-darwin = "sha256-v8CQLQRAOzLY1PqxIEFzaKo3RiLb/i9QhxPQZHSuguI=";
+        x86_64-linux = "sha256-BXhv4zuPz2uxcQUlVd8Ju53QKBF6rnRvw9cbJADibpc=";
+        aarch64-linux = "sha256-3ChHHgacfWlYIKUjNrGL78Q7+F9uC0frjRGyiTiLMT4=";
+        x86_64-darwin = "sha256-vgEkFqATKfTAVCX7hEivV+GURuyXyQYTTGlnTArSoPs=";
+        aarch64-darwin = "sha256-RkNPYpPKJw2nKOnR860ZGYZ45/G14y052XeSWKEWvgQ=";
      };
    in
    fetchurl {
@@ -15,13 +15,13 @@

 buildGoModule (finalAttrs: {
  pname = "dcp";
-  version = "0.23.2";
+  version = "0.23.4";

  src = fetchFromGitHub {
    owner = "microsoft";
    repo = "dcp";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-WbxFD7hq9WIfzGm3lKqr2cckUjoWwiVMNH8I7LvVSWg=";
+    hash = "sha256-4hGFoFmVltr2oS1Bq7bB0V1TYnh2QEleFG29A0VfZYM=";
  };

  vendorHash = "sha256-f5NcEgkBzOdYqBdVGYoL8EYew6LXmZwpNiIQeoett/k=";
@@ -8,16 +8,16 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "ddns-updater";
-  version = "2.9.0";
+  version = "2.10.0";

  src = fetchFromGitHub {
    owner = "qdm12";
    repo = "ddns-updater";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-Vvk3owtSpwstmC5UaVyUEY+FW25KA+nYp2dOqiP4HTs=";
+    hash = "sha256-E/ToeY5O6GaMl0ItLbNNF5Uur0Gx87FdT0T4kekae88=";
  };

-  vendorHash = "sha256-RKaUgE/cdzattMWMxiJ5fIXjx3IKE+On6dT/P6y4wqU=";
+  vendorHash = "sha256-osrRxiifxYgcxShso6HnxBCDQPMUiwfbt6fVipjkmdE=";

  ldflags = [
    "-s"
@@ -8,15 +8,15 @@
 }:

 let
-  version = "7.1.170";
+  version = "7.1.180";
  srcs = {
    x86_64-linux = fetchurl {
      url = "https://github.com/aunetx/deezer-linux/releases/download/v${version}/deezer-desktop-${version}-x64.tar.xz";
-      hash = "sha256-l2+RJJZIzs6F5VC6Ei/49iJNkqWEUEY0vwGpzwSAOGc=";
+      hash = "sha256-HH8IpdZ8qL0TZ1NWV6+yrcUYB0JRSkmnmjSTei+xVSE=";
    };
    aarch64-linux = fetchurl {
      url = "https://github.com/aunetx/deezer-linux/releases/download/v${version}/deezer-desktop-${version}-arm64.tar.xz";
-      hash = "sha256-FI8YWAZz8mFIs34Ht7KkWwrFH7dpVpo4dh5pTB2khBg=";
+      hash = "sha256-lu3suopnNbLwzDSqSOUS/6QRHz8QCRzuAdG4oXtF+LI=";
    };
  };

@@ -17,16 +17,16 @@
 }:

 let
-  version = "0.306.0";
+  version = "0.306.2";

  src = fetchFromGitHub {
    owner = "evcc-io";
    repo = "evcc";
    tag = version;
-    hash = "sha256-zg/DIh/HKJZraMIGcB2KKxiRQhuSrRDDcAEoL2prhFg=";
+    hash = "sha256-XlSdAOuC+nwxRVa0nnsqGDPY57q58byLgLpTqEyImJ8=";
  };

-  vendorHash = "sha256-0X8rzETUgLa83EA/GQnZUrWXUYnAm8H60kk6ZKsH9Yo=";
+  vendorHash = "sha256-JBhx1K8E2BynsgjXBno+0OUpWF15Eyo9yBzofruBEck=";

  commonMeta = {
    license = lib.licenses.mit;
@@ -7,13 +7,13 @@

 buildGoModule (finalAttrs: {
  pname = "gickup";
-  version = "0.10.41";
+  version = "0.10.42";

  src = fetchFromGitHub {
    owner = "cooperspencer";
    repo = "gickup";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-9aLBplZeNreXEmhjQJsQZ2wYQjHQxGtfaTcxO9Tw5kQ=";
+    hash = "sha256-nQermDp6w1OgZgRMknj2f6B7T9ufTZXuA8FuhGGpnWM=";
  };

  vendorHash = "sha256-lmPZlCiQXwe6FWwtDyZjqmF9I2609odpY4AjkEuqPUA=";
@@ -7,7 +7,7 @@
 }:

 let
-  version = "18.11.1";
+  version = "18.11.2";
  package_version = "v${lib.versions.major version}";
  gitaly_package = "gitlab.com/gitlab-org/gitaly/${package_version}";

@@ -21,7 +21,7 @@ let
      owner = "gitlab-org";
      repo = "gitaly";
      rev = "v${version}";
-      hash = "sha256-se3JtkYR+Mi0Kse3fQXBwxQyHmbPu2DqTNGnRHZQdTc=";
+      hash = "sha256-UmoMZ55FqEVYTjfgdoZsbJcs/+4x80KKxq6Cfatv4K4=";
    };

    vendorHash = "sha256-123WUtoUaPIyDywcTKEhiZP2SYYHxAQoOPyCebsHYRI=";
@@ -6,14 +6,14 @@

 buildGoModule (finalAttrs: {
  pname = "gitlab-pages";
-  version = "18.11.1";
+  version = "18.11.2";

  # nixpkgs-update: no auto update
  src = fetchFromGitLab {
    owner = "gitlab-org";
    repo = "gitlab-pages";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-O9YzFUVhqy16sMmViLcJ4LMumyGsvPDehkQCGproSFs=";
+    hash = "sha256-lxmwTC02WHwlrMgvTs2lkDj4AX8ovFuW73OHB6CIWTo=";
  };

  vendorHash = "sha256-PUW4cgAiM1GTtvja894OZ4pe0SWChf5JsL4/fkns2kI=";
@@ -1,17 +1,17 @@
 {
-  "version": "18.11.1",
-  "repo_hash": "sha256-ksqJuXklQYFAosyPKAtTDgcq+qJ6TRd2PJ4wu0JpMMI=",
+  "version": "18.11.2",
+  "repo_hash": "sha256-TAc3bNFwq/QKR+X/P9BqQHA2T5viD+SAOXXUZ7StDP4=",
  "yarn_hash": "sha256-k8JHi0f/XfSV4kICyPW01Erk3YnKw33yeUWYrOaPdTM=",
  "frontend_islands_yarn_hash": "sha256-EvGQin+5DqqIgM36jlVkVI49WcJzVvceYnkSS9ybfcY=",
  "owner": "gitlab-org",
  "repo": "gitlab",
-  "rev": "v18.11.1-ee",
+  "rev": "v18.11.2-ee",
  "passthru": {
-    "GITALY_SERVER_VERSION": "18.11.1",
-    "GITLAB_KAS_VERSION": "18.11.1",
-    "GITLAB_PAGES_VERSION": "18.11.1",
+    "GITALY_SERVER_VERSION": "18.11.2",
+    "GITLAB_KAS_VERSION": "18.11.2",
+    "GITLAB_PAGES_VERSION": "18.11.2",
    "GITLAB_SHELL_VERSION": "14.49.0",
    "GITLAB_ELASTICSEARCH_INDEXER_VERSION": "5.14.1",
-    "GITLAB_WORKHORSE_VERSION": "18.11.1"
+    "GITLAB_WORKHORSE_VERSION": "18.11.2"
  }
 }
@@ -10,7 +10,7 @@ in
 buildGoModule (finalAttrs: {
  pname = "gitlab-workhorse";

-  version = "18.11.1";
+  version = "18.11.2";

  # nixpkgs-update: no auto update
  src = fetchFromGitLab {
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "gofumpt";
-  version = "0.9.2";
+  version = "0.10.0";

  src = fetchFromGitHub {
    owner = "mvdan";
    repo = "gofumpt";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-ngqg8YJHqW08hvZp+E+RLLjGArOZJov7/xKCMAWFI1E=";
+    hash = "sha256-FaaXfvx63q+CkVGm3DyPrAykRVmpwyw+/2bBIAz8ab8=";
  };

-  vendorHash = "sha256-qCXpFxTZIhDDvvwytvftBnMwOHopO6/FkBWcLZhBDp8=";
+  vendorHash = "sha256-tM9IKMdCAdKcQPzENWdeK9GtVD20IzZYGaoLGJPettw=";

  env.CGO_ENABLED = "0";

@@ -10,9 +10,14 @@
  callPackage,
  enableCrossCompilation ? (stdenv.hostPlatform.isLinux && stdenv.hostPlatform.is64bit),
  pkgsCross,
-  x86_64PkgsCrossToolchain ? pkgsCross.gnu64,
-  aarch64PkgsCrossToolchain ? pkgsCross.aarch64-multiplatform,
-  riscv64PkgsCrossToolchain ? pkgsCross.riscv64,
+  x86_64PkgsCrossToolchain ? if stdenv.hostPlatform.isMusl then pkgsCross.musl64 else pkgsCross.gnu64,
+  aarch64PkgsCrossToolchain ?
+    if stdenv.hostPlatform.isMusl then
+      pkgsCross.aarch64-multiplatform-musl
+    else
+      pkgsCross.aarch64-multiplatform,
+  riscv64PkgsCrossToolchain ?
+    if stdenv.hostPlatform.isMusl then pkgsCross.riscv64-musl else pkgsCross.riscv64,
 }:

 # There's no support for `aarch64` or `riscv64` for freebsd nor for openbsd on nix.
@@ -6,13 +6,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "jitterentropy-rngd";
-  version = "1.2.8";
+  version = "1.3.1";

  src = fetchFromGitHub {
    owner = "smuellerDD";
    repo = "jitterentropy-rngd";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-LDym636ss3B1G/vrqatu9g5vbVEeDX0JQcxZ/IxGeY0=";
+    hash = "sha256-iXpeN0PAPk8mcaNXwj6TlyK57NSFNOVs/XmEmUG1gIg=";
  };

  enableParallelBuilding = true;
@@ -26,6 +26,13 @@ stdenv.mkDerivation (finalAttrs: {
    runHook postInstall
  '';

+  # this package internally compiles without optimization by choice,
+  # as it introduces more execution time jitter, therefore disable fortify.
+  hardeningDisable = [
+    "fortify"
+    "fortify3"
+  ];
+
  meta = {
    description = "Random number generator, which injects entropy to the kernel";
    homepage = "https://github.com/smuellerDD/jitterentropy-rngd";
@@ -8,23 +8,15 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "jitterentropy";
-  version = "3.6.3";
+  version = "3.7.0";

  src = fetchFromGitHub {
    owner = "smuellerDD";
    repo = "jitterentropy-library";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-A7a0kg9JRiNNKJbLJu5Fbu6ZgCwv3+3oDhZr3jwNXmM=";
+    hash = "sha256-sJWgPx3GbvnBBVlCML/eRtUoMXux38tpWi1ZKhz41xY=";
  };

-  patches = [
-    # cmake 4 compatibility
-    (fetchpatch {
-      url = "https://github.com/smuellerDD/jitterentropy-library/commit/047beb1bf9ef7a14e63f3e4f2d4e79f673baa7ec.patch";
-      hash = "sha256-m/cfI7s7sdjkZjkKL/w/rNZzP/t3eimbVryMW5+crw4=";
-    })
-  ];
-
  nativeBuildInputs = [ cmake ];

  outputs = [
@@ -32,7 +24,18 @@ stdenv.mkDerivation (finalAttrs: {
    "dev"
  ];

-  hardeningDisable = [ "fortify" ]; # avoid warnings
+  # disable internal timer thread and only use processor high-resolution timer
+  # this also fixes the rng-tools build
+  cmakeFlags = [
+    "-DINTERNAL_TIMER=OFF"
+  ];
+
+  # this package internally compiles without optimization by choice,
+  # as it introduces more execution time jitter, therefore disable fortify.
+  hardeningDisable = [
+    "fortify"
+    "fortify3"
+  ];

  meta = {
    description = "Provides a noise source using the CPU execution timing jitter";
@@ -45,6 +48,7 @@ stdenv.mkDerivation (finalAttrs: {
    platforms = lib.platforms.linux ++ lib.platforms.darwin;
    maintainers = with lib.maintainers; [
      johnazoidberg
+      thillux
    ];
  };
 })
@@ -17,6 +17,7 @@
  libpulseaudio,
  libwebp,
  libxcrypt,
+  mimalloc,
  openssl,
  python3,
  qt6Packages,
@@ -40,18 +41,18 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "ladybird";
-  version = "0-unstable-2026-04-04";
+  version = "0-unstable-2026-05-04";

  src = fetchFromGitHub {
    owner = "LadybirdBrowser";
    repo = "ladybird";
-    rev = "b11f30b32eff7c5e7baf6e84d0a432975631486d";
-    hash = "sha256-Fv74py0dQG2hQti40eh7vXCkN0rkheeqQ/JM3KIuLDA=";
+    rev = "90b790f8702a5d5c5a66ef02f8669da2838ca6e3";
+    hash = "sha256-BdJ24YtKMv8B6Vvequf9b5qr0S3FfFuphFo78mCIaN4=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) src;
-    hash = "sha256-5CB5mRdmvsmTmy3PGKhCx3NZm7Et2cIwIg9vF2wA7xE=";
+    hash = "sha256-sbNYOdY56+waCVQHbGuvV5jT9EawV2IiGmL1e/O6ZRc=";
  };

  postPatch = ''
@@ -104,6 +105,7 @@ stdenv.mkDerivation (finalAttrs: {
    libjxl
    libwebp
    libxcrypt
+    mimalloc
    openssl
    qt6Packages.qtbase
    qt6Packages.qtmultimedia
@@ -8,7 +8,7 @@

 stdenv.mkDerivation {
  pname = "leanify";
-  version = "0.4.3-unstable-2025-12-12";
+  version = "0-unstable-2025-12-12";

  src = fetchFromGitHub {
    owner = "JayXon";
@@ -12,13 +12,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "librecad";
-  version = "2.2.1.4";
+  version = "2.2.1.5";

  src = fetchFromGitHub {
    owner = "LibreCAD";
    repo = "LibreCAD";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-e6T4Bh0ik3vF9b98a90sDgYfc0xaf8WrMUQCOBg9QTU=";
+    hash = "sha256-p2/mwFQq5VWNXvS8KsfvxYZP4mtJT/eWmQ6K+M+6TLQ=";
  };

  buildInputs = [
@@ -30,7 +30,8 @@ stdenv.mkDerivation (finalAttrs: {
  cmakeFlags = [
    (lib.cmakeBool "BUILD_SHARED_LIBS" true)
    (lib.cmakeFeature "CMAKE_POLICY_VERSION_MINIMUM" "3.5")
-  ];
+  ]
+  ++ lib.optional (!stdenv.hostPlatform.isx86) (lib.cmakeBool "BUILD_SQUISH_WITH_SSE2" false);

  meta = {
    description = "Library for compressing images with the DXT/S3TC standard";
@@ -10,11 +10,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "matomo";
-  version = "5.8.0";
+  version = "5.10.0";

  src = fetchurl {
    url = "https://builds.matomo.org/matomo-${finalAttrs.version}.tar.gz";
-    hash = "sha256-IMX15BVhwccLmooeULtLomYJmgl1E5CoiiBxDNkJzsY=";
+    hash = "sha256-i7nRQRY2gAzMQmRNGaksq4B516MsQuXQZbzlEUWEsQw=";
  };

  nativeBuildInputs = [ makeWrapper ];
@@ -12,14 +12,14 @@

 let
  pname = "mochi";
-  version = "1.21.5";
+  version = "1.21.10";

  linux = appimageTools.wrapType2 rec {
    inherit pname version meta;

    src = fetchurl {
      url = "https://download.mochi.cards/releases/Mochi-${version}.AppImage";
-      hash = "sha256-meYKgxJA4VOE4B6gizJ4F+utld/OJ1MCzwSOjfeorqE=";
+      hash = "sha256-yNgKbG5cJmCFpb3JnCevYZJXrdNJHoEPaUELLl10F00=";
    };

    appimageContents = appimageTools.extractType2 { inherit pname version src; };
@@ -44,9 +44,9 @@ let
      url = "https://download.mochi.cards/releases/Mochi-${version}${lib.optionalString stdenv.hostPlatform.isAarch64 "-arm64"}.dmg";
      hash =
        if stdenv.hostPlatform.isAarch64 then
-          "sha256-+nQsR0CWG8pCq+zV2jMiej+7L4RqPeSKESAECK/JIoM="
+          "sha256-nnAL1w2ERAH02nm8OMtVIuVjMqSnLuiBLsxuBlQNlPI="
        else
-          "sha256-mOUrMIZSLPhxUe3lNLfDXtoo1dNX5fpQr8cHZ1MI/C8=";
+          "sha256-7Xt3wPqEH7PPOGtwGHKAWBIvpdkkZe9R12S0TnQuCuM=";
    };

    sourceRoot = ".";
@@ -0,0 +1,31 @@
+diff --git a/configure.ac b/configure.ac
+index ef7cb3e..135a082 100644
+--- a/configure.ac
+++ b/configure.ac
+@@ -64,9 +64,9 @@ CFLAGS="$HOLD_CFLAGS"
+ ##############################################################################
+ ###  Check libmicrohttpd - Required.  Needed for stream/webcontrol
+ ##############################################################################
+-AS_IF([pkg-config libmicrohttpd ], [
+-    TEMP_CFLAGS="$TEMP_CFLAGS "`pkg-config --cflags libmicrohttpd`
+-    TEMP_LIBS="$TEMP_LIBS "`pkg-config --libs libmicrohttpd`
+PKG_CHECK_MODULES([MICROHTTPD], [libmicrohttpd], [
+    TEMP_CPPFLAGS="$TEMP_CPPFLAGS $MICROHTTPD_CFLAGS"
+    TEMP_LIBS="$TEMP_LIBS $MICROHTTPD_LIBS"
+   ],[
+     AC_MSG_ERROR([Required package libmicrohttpd-dev not found, please check motion_guide.html and install necessary dependencies])
+   ]
+@@ -226,10 +226,10 @@ AS_IF([test "${FFMPEG}" = "no"], [
+ 
+     FFMPEG_DEPS="libavutil libavformat libavcodec libswscale libavdevice"
+     AC_MSG_CHECKING(for FFmpeg)
+-    AS_IF([pkg-config $FFMPEG_DEPS], [
+    PKG_CHECK_MODULES([TEMP_FFMPEG], [$FFMPEG_DEPS], [
+         FFMPEG_VER=`pkg-config --modversion libavformat`
+-        TEMP_CFLAGS="$TEMP_CFLAGS "`pkg-config --cflags $FFMPEG_DEPS`
+-        TEMP_LIBS="$TEMP_LIBS "`pkg-config --libs $FFMPEG_DEPS`
+        TEMP_CFLAGS="$TEMP_CFLAGS $TEMP_FFMPEG_CFLAGS"
+        TEMP_LIBS="$TEMP_LIBS $TEMP_FFMPEG_LIBS"
+         AC_DEFINE([HAVE_FFMPEG], [1], [Define to 1 if FFMPEG is around])
+         AC_MSG_RESULT(yes)
+       ],[
@@ -4,7 +4,7 @@
  fetchFromGitHub,
  autoreconfHook,
  pkg-config,
-  ffmpeg,
+  ffmpeg-headless,
  libjpeg,
  libmicrohttpd,
 }:
@@ -20,13 +20,20 @@ stdenv.mkDerivation (finalAttrs: {
    sha256 = "sha256-NAzVFWWbys+jYYOifCOOoucAKfa19njIzXBQbtgGX9M=";
  };

+  patches = [
+    # https://github.com/Motion-Project/motion/pull/1959
+    ./fix-cross.diff
+  ];
+
+  depsBuildBuild = [ pkg-config ];
+
  nativeBuildInputs = [
    autoreconfHook
    pkg-config
  ];

  buildInputs = [
-    ffmpeg
+    ffmpeg-headless
    libjpeg
    libmicrohttpd
  ];
@@ -9,11 +9,11 @@

 stdenvNoCC.mkDerivation rec {
  pname = "net-news-wire";
-  version = "6.2";
+  version = "7.0.5";

  src = fetchurl {
    url = "https://github.com/Ranchero-Software/NetNewsWire/releases/download/mac-${version}/NetNewsWire${version}.zip";
-    hash = "sha256-DXpC2bXgFRKYULXlrkDkwxtU77iChh5SITAIEQC5exQ=";
+    hash = "sha256-R0d2X7zj/aiuG3g2D91EQleWRR57MZacyr6HuQHWD+k=";
  };

  sourceRoot = ".";
@@ -35,7 +35,7 @@ stdenvNoCC.mkDerivation rec {
  passthru.updateScript = nix-update-script {
    extraArgs = [
      "--version-regex"
-      "^mac-(\\d+\\.\\d+\\.\\d+)$"
+      "^mac-(\\d+\\.\\d+(?:\\.\\d+)?)$"
    ];
  };

@@ -52,6 +52,7 @@ stdenvNoCC.mkDerivation rec {
    maintainers = with lib.maintainers; [
      jakuzure
      DimitarNestorov
+      shgew
    ];
    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
  };
@@ -9,10 +9,10 @@
  libpulseaudio,
 }:
 let
-  versionMajor = "9.2";
-  versionMinor = "18";
-  versionBuild_x86_64 = "3";
-  versionBuild_i686 = "3";
+  versionMajor = "9.4";
+  versionMinor = "14";
+  versionBuild_x86_64 = "1";
+  versionBuild_i686 = "1";
 in
 stdenv.mkDerivation rec {
  pname = "nomachine-client";
@@ -22,12 +22,12 @@ stdenv.mkDerivation rec {
    if stdenv.hostPlatform.system == "x86_64-linux" then
      fetchurl {
        url = "https://download.nomachine.com/download/${versionMajor}/Linux/nomachine_${version}_${versionBuild_x86_64}_x86_64.tar.gz";
-        sha256 = "sha256-/ElNG6zIOdE3Qwf/si9fKXMLxM81ZmRZmvbc6rw/M0c=";
+        sha256 = "sha256-tLL8l/UgTiVzGs+mwJeRUlVA8lH72JVogBOEpaSr2AY=";
      }
    else if stdenv.hostPlatform.system == "i686-linux" then
      fetchurl {
        url = "https://download.nomachine.com/download/${versionMajor}/Linux/nomachine_${version}_${versionBuild_i686}_i686.tar.gz";
-        sha256 = "sha256-uLkBprPjYyWN0jwB6rJwG1sLbIg/jAjx57joLBhVwr0=";
+        sha256 = "sha256-pPvg8MCrpCsQiiglRxHHl9wVyndI9JTluX/mwah3wwQ=";
      }
    else
      throw "NoMachine client is not supported on ${stdenv.hostPlatform.system}";
@@ -99,8 +99,8 @@ stdenv.mkDerivation rec {
    mainProgram = "nxplayer";
    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
    license = {
-      fullName = "NoMachine 7 End-User License Agreement";
-      url = "https://www.nomachine.com/licensing-7";
+      fullName = "NoMachine End User License Agreement, version 9";
+      url = "https://www.nomachine.com/licensing/nomachine-end-user-license-agreement";
      free = false;
    };
    maintainers = with lib.maintainers; [ talyz ];
@@ -25,7 +25,10 @@ stdenv.mkDerivation rec {
  # gcc-10. Otherwise build fails as:
  #   ld: global.o:/build/nuweb-1.62/global.h:91: multiple definition of
  #     `current_sector'; main.o:/build/nuweb-1.62/global.h:91: first defined here
-  env.NIX_CFLAGS_COMPILE = "-fcommon";
+  # GCC 15 uses C23, which fails with the following error
+  # main.c:4:5: warning: old-style function definition [-Wold-style-definition]
+  #     4 | int main(argc, argv)
+  env.NIX_CFLAGS_COMPILE = "-fcommon -std=gnu17";

  buildPhase = ''
    make nuweb
@@ -6,16 +6,16 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "oh-my-posh";
-  version = "29.10.0";
+  version = "29.12.0";

  src = fetchFromGitHub {
    owner = "jandedobbeleer";
    repo = "oh-my-posh";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-+j0et6rwTX3gPqky99NjvBf5i7YhbjbJQ8CvrhYKvRA=";
+    hash = "sha256-Gtv3h46+T3+hB4e2KJjS128RCNx/0wh/Qz52T+xxClI=";
  };

-  vendorHash = "sha256-peUWhtxKCDT3fE7CCir6l3XTjGvSMQFfkCZFHoxpBdw=";
+  vendorHash = "sha256-xDMSfuzREtn/Bm1rkRoUS3Ykec81WeA81VW6dp1wLb4=";

  sourceRoot = "${finalAttrs.src.name}/src";

@@ -1,26 +0,0 @@
-From f036950f1ccc3ebdfe2fdc0a52d35a4620252901 Mon Sep 17 00:00:00 2001
-From: Grimmauld <Grimmauld@grimmauld.de>
-Date: Sat, 27 Sep 2025 11:43:21 +0200
-Subject: [PATCH] Build: update cmake minimum version to 3.10
-
-cmake ABI compatibility with cmake <3.5 has been removed in cmake 4.
-Compatibility with cmake <3.10 is deprecated and soon to be removed.
-Thus set 3.10 minimum version. This is available in the vast majority
-of current linux distributions, as well as other platforms.
---
- CMakeLists.txt | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/CMakeLists.txt b/CMakeLists.txt
-index 95abbe213..2d14b2552 100644
--- a/CMakeLists.txt
-+++ b/CMakeLists.txt
-@@ -18,7 +18,7 @@ if(${CMAKE_SOURCE_DIR} STREQUAL ${CMAKE_BINARY_DIR})
- 	endif()
- endif()
- 
-cmake_minimum_required(VERSION 2.6)
-+cmake_minimum_required(VERSION 3.10)
- 
- 
- #-----------------------------------------------------------------------------
@@ -1,51 +0,0 @@
-{
-  cmake,
-  dos2unix,
-  fetchFromGitHub,
-  lib,
-  libxml2,
-  pcre,
-  pkg-config,
-  stdenv,
-}:
-
-stdenv.mkDerivation {
-  pname = "opencollada";
-  version = "0-unstable-2025-01-30";
-
-  src = fetchFromGitHub {
-    owner = "aras-p";
-    repo = "OpenCOLLADA";
-    rev = "4526eb8aaa6462c71fbedd23103976c151a01c50";
-    sha256 = "sha256-ctr+GjDzxOJxBfaMwjwayPkAOcF+FMsP1X72QCOwvTY=";
-  };
-
-  # Fix freaky dos-style CLRF things
-  prePatch = ''
-    dos2unix CMakeLists.txt
-  '';
-
-  patches = [
-    # https://github.com/aras-p/OpenCOLLADA/pull/1
-    ./cmake4-compat.patch
-  ];
-
-  nativeBuildInputs = [
-    cmake
-    pkg-config
-    dos2unix
-  ];
-
-  propagatedBuildInputs = [
-    libxml2
-    pcre
-  ];
-
-  meta = {
-    description = "Library for handling the COLLADA file format";
-    homepage = "https://github.com/aras-p/OpenCOLLADA";
-    maintainers = [ lib.maintainers.amarshall ];
-    platforms = lib.platforms.unix;
-    license = lib.licenses.mit;
-  };
-}
@@ -1,77 +0,0 @@
-{
-  cmake,
-  dos2unix,
-  fetchFromGitHub,
-  fetchpatch,
-  lib,
-  libxml2,
-  pcre,
-  pkg-config,
-  stdenv,
-}:
-
-stdenv.mkDerivation (finalAttrs: {
-  pname = "opencollada";
-  version = "1.6.68";
-
-  src = fetchFromGitHub {
-    owner = "KhronosGroup";
-    repo = "OpenCOLLADA";
-    rev = "v${finalAttrs.version}";
-    sha256 = "1ym16fxx9qhf952vva71sdzgbm7ifis0h1n5fj1bfdj8zvvkbw5w";
-  };
-
-  # Fix freaky dos-style CLRF things
-  prePatch = ''
-    dos2unix CMakeLists.txt
-  '';
-
-  patches = [
-    # fix build with gcc 13
-    (fetchpatch {
-      url = "https://gitweb.gentoo.org/repo/gentoo.git/plain/media-libs/opencollada/files/opencollada-1.6.68-gcc13.patch?id=b76590f9fb8615da3da9d783ad841c0e3881a27b";
-      hash = "sha256-oi/QhNPRnuSHfJJ071/3wnjLeg4zZUL6NwSGYvgkb/k=";
-    })
-
-    # fix pcre
-    (fetchpatch {
-      url = "https://gitweb.gentoo.org/repo/gentoo.git/plain/media-libs/opencollada/files/opencollada-1.6.63-pcre-fix.patch";
-      hash = "sha256-igrwgmNwDKYwj6xWvWrryT5ARWJpztVmlQ0HCLQn5+Q=";
-    })
-
-    # fix build with cmake 4
-    (fetchpatch {
-      url = "https://gitweb.gentoo.org/repo/gentoo.git/plain/media-libs/opencollada/files/opencollada-1.6.68-cmake4.patch?id=42f1e0614c4d056841fdc162c29a04ff0e910139";
-      hash = "sha256-gbF6PPalJGgXGu4W7EptYeDq8418JdGH50LIqKqGKX0=";
-    })
-  ];
-
-  postPatch = ''
-    # Drop blanket -Werror as it tends to fail on newer toolchain for
-    # minor warnings. In this case it was gcc-13 build failure.
-    substituteInPlace DAEValidator/CMakeLists.txt --replace-fail ' -Werror"' '"'
-  ''
-  + lib.optionalString stdenv.hostPlatform.isDarwin ''
-    substituteInPlace GeneratedSaxParser/src/GeneratedSaxParserUtils.cpp \
-      --replace math.h cmath
-  '';
-
-  nativeBuildInputs = [
-    cmake
-    pkg-config
-    dos2unix
-  ];
-
-  propagatedBuildInputs = [
-    libxml2
-    pcre
-  ];
-
-  meta = {
-    description = "Library for handling the COLLADA file format";
-    homepage = "https://github.com/KhronosGroup/OpenCOLLADA/";
-    maintainers = [ ];
-    platforms = lib.platforms.unix;
-    license = lib.licenses.mit;
-  };
-})
@@ -19,16 +19,16 @@

 rustPlatform.buildRustPackage {
  pname = "par-lang";
-  version = "0-unstable-2026-03-03";
+  version = "0-unstable-2026-05-04";

  src = fetchFromGitHub {
-    owner = "faiface";
+    owner = "par-team";
    repo = "par-lang";
-    rev = "a5777923d4c94480b614c3e8cfceffe6923d1a1a";
-    hash = "sha256-QGqwgSIcYc7PI/e7dZ+bWo7lrGEzvKEO2FCwtpwbFVI=";
+    rev = "440b54187e88bbd3dd75253db02a6c17067f33a9";
+    hash = "sha256-2bwy0/CktuiBUq6HPucinrsfhnDWBjAQ6TjzW2cZgv0=";
  };

-  cargoHash = "sha256-taLTRYB1Crvx0wz3IRvkPRImaRIs0mGscOjLFBkhkgE=";
+  cargoHash = "sha256-+vhmSSzgeC26zq0P53oFKyu+RBg4qQjEvURCkAHNCp8=";

  nativeBuildInputs = [
    pkg-config
@@ -50,15 +50,15 @@ rustPlatform.buildRustPackage {
      ];
    in
    lib.optionalString stdenv.hostPlatform.isLinux ''
-      patchelf --add-rpath ${lib.makeLibraryPath runtimeDependencies} $out/bin/par-lang
+      patchelf --add-rpath ${lib.makeLibraryPath runtimeDependencies} $out/bin/par
    '';

  doInstallCheck = true;
  installCheckPhase = ''
    runHook preInstallCheck

-    echo 'def Main = Console.Open.print("Hello, World!").close' > test.par
-    diff -U3 --color=auto <($out/bin/par-lang run test.par) <(echo 'Hello, World!')
+    $out/bin/par new hello
+    diff -U3 --color=auto <($out/bin/par run --package hello 2>&1) <(echo 'Hello, World!')

    runHook postInstallCheck
  '';
@@ -69,7 +69,7 @@ rustPlatform.buildRustPackage {
      desktopName = "Par Playground";
      genericName = "Experimental concurrent programming language";
      categories = [ "Development" ];
-      exec = "par-lang playground %f";
+      exec = "par playground %f";
    })
  ];

@@ -77,9 +77,9 @@ rustPlatform.buildRustPackage {

  meta = {
    description = "Experimental concurrent programming language";
-    homepage = "https://github.com/faiface/par-lang";
+    homepage = "https://github.com/par-team/par-lang";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ defelo ];
-    mainProgram = "par-lang";
+    mainProgram = "par";
  };
 }
@@ -22,13 +22,13 @@ assert lib.assertOneOf "romID" romID roms;

 stdenv.mkDerivation (finalAttrs: {
  pname = "perfect_dark";
-  version = "0-unstable-2026-04-25";
+  version = "0-unstable-2026-05-02";

  src = fetchFromGitHub {
    owner = "fgsfdsfgs";
    repo = "perfect_dark";
-    rev = "bed3bf52d0d5095d112940b1327ed6c256e54ea8";
-    hash = "sha256-ZROpZ7sYmZi9Ptag2m5OOijJcGCldxBQl0fgxK5ve5c=";
+    rev = "45139a9293dc221de5795733137c76f5ee134261";
+    hash = "sha256-WTRh/Eij+8n2lQTCCNL3FSTXHUVslEfiupFl8FMPXuo=";

    postFetch = ''
      pushd $out
@@ -78,11 +78,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "postfix";
-  version = "3.11.1";
+  version = "3.11.2";

  src = fetchurl {
    url = "http://ftp.porcupine.org/mirrors/postfix-release/official/postfix-${finalAttrs.version}.tar.gz";
-    hash = "sha256-ZZJlYG7ZtiQpZLbUSiqvXmB9j7mtJUECekoyDd+4ncE=";
+    hash = "sha256-2u1lsIySiM2zhqkU8+Us3d1Ek1QHtc5a7ovMOqQgd3g=";
  };

  nativeBuildInputs = [
@@ -6,16 +6,20 @@

 let
  # https://github.com/NixOS/nixpkgs/issues/348788
-  mistune_2 = python3Packages.mistune.overridePythonAttrs (oldAttrs: rec {
-    version = "2.0.5";
-    src = fetchPypi {
-      inherit (oldAttrs) pname;
-      inherit version;
-      hash = "sha256-AkYRPLJJLbh1xr5Wl0p8iTMzvybNkokchfYxUc7gnTQ=";
-    };
-  });
+  pythonPackages = python3Packages.overrideScope (
+    self: super: {
+      mistune = super.mistune.overridePythonAttrs (oldAttrs: rec {
+        version = "2.0.5";
+        src = fetchPypi {
+          inherit (oldAttrs) pname;
+          inherit version;
+          hash = "sha256-AkYRPLJJLbh1xr5Wl0p8iTMzvybNkokchfYxUc7gnTQ=";
+        };
+      });
+    }
+  );
 in
-python3Packages.buildPythonPackage rec {
+pythonPackages.buildPythonPackage rec {
  pname = "present";
  version = "0.6.0";
  pyproject = true;
@@ -25,14 +29,14 @@ python3Packages.buildPythonPackage rec {
    hash = "sha256-l9W5L4LD9qRo3rLBkgd2I/aDaj+ucib5UYg+X4RYg6c=";
  };

-  build-system = with python3Packages; [ setuptools ];
+  build-system = with pythonPackages; [ setuptools ];

-  dependencies = with python3Packages; [
+  dependencies = with pythonPackages; [
    click
    pyyaml
    pyfiglet
    asciimatics
-    mistune_2
+    mistune
  ];

  pythonImportsCheck = [ "present" ];
@@ -1,14 +1,14 @@
 {
-  version = "1.80.0";
+  version = "1.81.0";
  hashes = {
-    linux-aarch_64 = "sha256-YaF1NjaKYecsGJM+2c+zkyYntf81q3TBbY5di26czUY=";
-    linux-ppcle_64 = "sha256-SiGuY0vAgHh2+/ASqvQXcZ5HfIR6RTYA7PyD1m5Yo3k=";
-    linux-s390_64 = "sha256-NizEl/AZMX99wW9o7z9gzDcCJEaQZTEpaCA6/qWzbZg=";
-    linux-x86_32 = "sha256-0Mjwcc+rtHLf7KfeN6ekj50lX2wzwECzHtYDyoHSlkc=";
-    linux-x86_64 = "sha256-daFkR3395N/ErULwq4/lkur+DaRh/QYeZyvsUtMdKX0=";
-    osx-aarch_64 = "sha256-Ml9Rt58pF0GP7hnI003WT/payaPDiEozMBp77TwQsd8=";
-    osx-x86_64 = "sha256-Ml9Rt58pF0GP7hnI003WT/payaPDiEozMBp77TwQsd8=";
-    windows-x86_32 = "sha256-ncK95ydP5jkQd6BDJ5KnkyKesPqgS/+A/KNbKdRQkoo=";
-    windows-x86_64 = "sha256-1ShLOIOv0DHsKfPYGGtRbYx0l+IK6+2qPqUesG/Az+U=";
+    linux-aarch_64 = "sha256-BhO92wlj0L3M8H4CGuB4NRZkjN9zPuFM/E2NAkn6d1o=";
+    linux-ppcle_64 = "sha256-Y1YC+C/AxdYiB7gcaerVhE383+8rPOiEI8+r/BxkeXk=";
+    linux-s390_64 = "sha256-cVjZl+ju8e+yroYOttrgIBGSBWDPw1jz1dOLdr58Bmc=";
+    linux-x86_32 = "sha256-I10buzyicR0aVI3BKDvtly6NwfjSP2hLOD1eY5NJFZc=";
+    linux-x86_64 = "sha256-T3WWxgoTdSS1TysR2Vb6IA8/6XZ43hzd2CfRCVQlD30=";
+    osx-aarch_64 = "sha256-c359UvEa+J85KV6KFOXMuUWCYmyB5VkTfmLfj8J81qQ=";
+    osx-x86_64 = "sha256-c359UvEa+J85KV6KFOXMuUWCYmyB5VkTfmLfj8J81qQ=";
+    windows-x86_32 = "sha256-mMRY0dLrPpLcQUeK5GqeOrBFqlghBC7FgqqoRWHdjYs=";
+    windows-x86_64 = "sha256-18mnbuYxoqnQLYHPWC2m2+TW5pJmX/O2OkQLG5xyND0=";
  };
 }
@@ -6,14 +6,14 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "protonup-rs";
-  version = "0.10.0";
+  version = "0.12.1";

  src = fetchCrate {
    inherit (finalAttrs) pname version;
-    hash = "sha256-Ro5bYnmWs+Yjj6x5qkY2X1qBuQlvV7WIw4Oluvono54=";
+    hash = "sha256-tudrn2BeTB7+3DQmVxCMv+5vpIv3BwJ8sJqKwX+vHQU=";
  };

-  cargoHash = "sha256-w6SBIsyxtbRtWRocskAG/UqBVRSvLoVS2fy9pTpWL4U=";
+  cargoHash = "sha256-kgSMfEQHxOWBQSb1PMYU4HmYzQwrECiFAKKwq4d6vwc=";

  checkFlags = [
    # Requires internet access
@@ -5,7 +5,7 @@
 }:
 python3.pkgs.buildPythonApplication {
  pname = "pywalfox-native";
-  version = "2.7.4";
+  version = "2.9.0";
  pyproject = true;

  src = fetchFromGitHub {
@@ -22,13 +22,13 @@

 stdenv.mkDerivation {
  pname = "slade";
-  version = "3.2.12-unstable-2026-02-21";
+  version = "3.2.12-unstable-2026-04-27";

  src = fetchFromGitHub {
    owner = "sirjuddington";
    repo = "SLADE";
-    rev = "030cab09eb2108c65b47c088d1ce97d27e671b9a";
-    hash = "sha256-dU08yoHikQsGO9yEhFoRvWE1C38ZQ1W/f7DmJyrAijQ=";
+    rev = "c948de8e48fe1b86fce8949f818a9ec5a499bd34";
+    hash = "sha256-fcDYG8BPrdAYqK+YpVnYO5FkcdCKjqiyOhLpxEjet/0=";
  };

  nativeBuildInputs = [
@@ -9,18 +9,18 @@

 buildGoModule (finalAttrs: {
  pname = "ssh-tpm-agent";
-  version = "0.8.0";
+  version = "0.9.0";

  src = fetchFromGitHub {
    owner = "Foxboron";
    repo = "ssh-tpm-agent";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-CSxZctiQ/d4gzCUtfx9Oetb8s0XpHf3MPH/H0XaaVgg=";
+    hash = "sha256-BF4O/vgguTQtgIch2akOq5ZJWyB+/evBYtxfjh9HFYI=";
  };

  proxyVendor = true;

-  vendorHash = "sha256-84ZB1B+RczJS08UToCWvvVfWrD62IQxy0XoBwn+wBkc=";
+  vendorHash = "sha256-N7JuMUy5Z+HVhxsqESlBkHcHVipRYM8ncx/wR77k1fw=";

  buildInputs = [
    openssl
@@ -42,6 +42,7 @@ buildGoModule (finalAttrs: {
  meta = {
    description = "SSH agent with support for TPM sealed keys for public key authentication";
    homepage = "https://github.com/Foxboron/ssh-tpm-agent";
+    changelog = "https://github.com/Foxboron/ssh-tpm-agent/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.mit;
    platforms = lib.platforms.linux;
    maintainers = with lib.maintainers; [ sgo ];
@@ -9,11 +9,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "texturepacker";
-  version = "7.12.0";
+  version = "8.0.0";

  src = fetchurl {
    url = "https://www.codeandweb.com/download/texturepacker/${finalAttrs.version}/TexturePacker-${finalAttrs.version}.deb";
-    hash = "sha256-KevG6mr6WGu9rKRjsPtDweJeN2KMrOhisxxb+vqNawI=";
+    hash = "sha256-Rjf5azbPLE9Sv9Qz3X76Mism1tNDZ6zITTXgJTnb/aM=";
  };

  nativeBuildInputs = [
@@ -7,7 +7,7 @@

 stdenvNoCC.mkDerivation {
  pname = "thunderkittens";
-  version = "0-unstable-2026-04-25";
+  version = "0-unstable-2026-04-29";

  __structuredAttrs = true;
  strictDeps = true;
@@ -15,8 +15,8 @@ stdenvNoCC.mkDerivation {
  src = fetchFromGitHub {
    owner = "HazyResearch";
    repo = "ThunderKittens";
-    rev = "0b55588d2769dde0c7a9a606ffc015b0ca7a9551";
-    hash = "sha256-dapEzAxkMK6nO3/1LLgYg1yP3T/Xan+C6A5ZzIOQ0+0=";
+    rev = "4b0aa30da67ba4466c2079695183f428fd6ce0bf";
+    hash = "sha256-AxIs8FmEtLy/9J1oslbqwnl/KiNS55FZ4lOz/1EAmd4=";
  };

  dontBuild = true;
@@ -66,6 +66,9 @@ stdenv.mkDerivation (finalAttrs: {
  ]
  ++ lib.optional enableMMAI onnxruntime;

+  # GCC 15 ICE in -Wmismatched-tags diagnostic during template specialisation lookup
+  env.NIX_CFLAGS_COMPILE = lib.optionalString stdenv.cc.isGNU "-Wno-mismatched-tags";
+
  cmakeFlags = [
    (lib.cmakeBool "ENABLE_CLIENT" true)
    (lib.cmakeBool "ENABLE_LUA" true)
@@ -133,6 +133,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
  ]
  ++ lib.optionals (stdenv.hostPlatform.isAarch64 && stdenv.hostPlatform.isLinux) [
    # Flakey on aarch64-linux
+    "--skip=sources::exec::tests::test_graceful_shutdown"
    "--skip=sources::exec::tests::test_run_command_linux"
    "--skip=topology::test::backpressure::buffer_drop_fan_out"
    "--skip=topology::test::backpressure::default_fan_out"
@@ -13,13 +13,13 @@

 buildGo126Module (finalAttrs: {
  pname = "VictoriaTraces";
-  version = "0.8.0";
+  version = "0.8.2";

  src = fetchFromGitHub {
    owner = "VictoriaMetrics";
    repo = "VictoriaTraces";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-bm1hF4LqbSxxEOMtz4jdgJHMwrahGI4VZ9nj/VscFdc=";
+    hash = "sha256-WUndQWyWzffrJ5T4/VDUzRJYvLIOVFFyGIGw366ANa4=";
  };

  vendorHash = null;
@@ -7,16 +7,16 @@

 buildNpmPackage rec {
  pname = "vuetorrent";
-  version = "2.32.1";
+  version = "2.33.0";

  src = fetchFromGitHub {
    owner = "VueTorrent";
    repo = "VueTorrent";
    tag = "v${version}";
-    hash = "sha256-5+1KW5rm169jQ//V8jXeeGZzVttFlPowl5y8jZ4sggU=";
+    hash = "sha256-7jr7spoJBt4YqOgTmIC2bNjygrSlUgF1AuDPzCe+YuU=";
  };

-  npmDepsHash = "sha256-+sG0UgDX9gIVrVyRe5NaBB70ggVn2+s8qdiZ87p9VIQ=";
+  npmDepsHash = "sha256-l8b/WazCUKWwxlv+b8OnLLYslhGezdoWIGsRExIsZyU=";

  installPhase = ''
    runHook preInstall
@@ -8,22 +8,24 @@

 buildGoModule (finalAttrs: {
  pname = "watchyourlan";
-  version = "2.1.3";
+  version = "2.1.4";

  src = fetchFromGitHub {
    owner = "aceberg";
    repo = "WatchYourLAN";
    tag = finalAttrs.version;
-    hash = "sha256-TFqBuJHoHKJ/ftorgNG9JpiOrjSmqw+tHhaOYzoTeUM=";
+    hash = "sha256-bSjigrnZH4dztx0Ho4w7Mmi20eVysWwYKGT1hsxSAZg=";
  };

-  vendorHash = "sha256-3HxpKahFa8keM9wbNJ3anEBMCoEphaj5rOhydajtnY0=";
+  vendorHash = "sha256-ywNi0BIGU40kqWa2q3QqR/LCohdlmUThCrdVQhD1wGU=";

  ldflags = [
    "-s"
    "-w"
  ];

+  sourceRoot = "${finalAttrs.src.name}/backend";
+
  nativeBuildInputs = [ makeBinaryWrapper ];

  postFixup = ''
@@ -1,68 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchFromGitHub,
-  fetchpatch,
-}:
-
-stdenv.mkDerivation rec {
-  pname = "whisper";
-  version = "2.0.1";
-
-  src = fetchFromGitHub {
-    owner = "refresh-bio";
-    repo = "whisper";
-    rev = "v${version}";
-    sha256 = "0wpx1w1mar2d6zq2v14vy6nn896ds1n3zshxhhrrj5d528504iyw";
-  };
-
-  patches = [
-    # gcc-13 compatibility fixes:
-    #   https://github.com/refresh-bio/Whisper/pull/17
-    (fetchpatch {
-      name = "gcc-13.patch";
-      url = "https://github.com/refresh-bio/Whisper/commit/d67e110dd6899782e4687188f6b432494315b0b4.patch";
-      hash = "sha256-Z8GrkUMIKO/ccEdwulQh+WUox3CEckr6NgoBSzYvfuw=";
-    })
-  ];
-
-  preConfigure = ''
-    cd src
-
-    # disable default static linking
-    sed -i 's/ -static / /' makefile
-  '';
-
-  enableParallelBuilding = true;
-
-  # The package comes with prebuilt static
-  # libraries of bzip2, zlib, libdeflate and asmlib.
-  # They are not built with -fPIE and thus linking fails.
-  # As asmlib is not packages in nixpkgs let's disable PIE.
-  env.NIX_LDFLAGS = "-no-pie";
-
-  installPhase = ''
-    runHook preInstall
-    install -Dt $out/bin whisper whisper-index
-    runHook postInstall
-  '';
-
-  meta = {
-    broken = stdenv.hostPlatform.isDarwin;
-    description = "Short read sequence mapper";
-    license = lib.licenses.gpl3;
-    # vendored libraries acof, aelf, deflate, bzip2, zlib
-    # https://github.com/refresh-bio/Whisper/issues/18
-    knownVulnerabilities = [
-      # src/libs/libz.a from 2017
-      "CVE-2018-25032"
-      "CVE-2022-37434"
-      # src/libs/libbzip2.lib
-      "CVE-2019-12900"
-    ];
-    homepage = "https://github.com/refresh-bio/whisper";
-    maintainers = with lib.maintainers; [ jbedo ];
-    platforms = lib.platforms.x86_64;
-    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
-  };
-}
@@ -9,16 +9,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "wstunnel";
-  version = "10.5.2";
+  version = "10.5.4";

  src = fetchFromGitHub {
    owner = "erebe";
    repo = "wstunnel";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-CsXzcQ4rd2NTjDJjsi5U3Hes2D98HQ8K6/AmPRSLkbM=";
+    hash = "sha256-4nNJgunyc4mqUlLTB1e91x636Z4z/h2PU/so5jdhR50=";
  };

-  cargoHash = "sha256-/JRfgJpg5FjkjWUYDe/ln3rMv0ISQy0AEdcZaPmLBDg=";
+  cargoHash = "sha256-mbMcNqzLi1XJp6bWUHgmDZWKBGMwuZven/wykKA1vqw=";

  cargoBuildFlags = [ "--package wstunnel-cli" ];

@@ -173,7 +173,7 @@ in

 stdenv.mkDerivation (finalAttrs: {
  pname = "xen";
-  version = "4.20.2";
+  version = "4.20.3";

  # This attribute can be overriden to correct the file paths in
  # `passthru` when building an unstable Xen.
@@ -186,28 +186,28 @@ stdenv.mkDerivation (finalAttrs: {

    (replaceVars ./0002-scripts-external-executable-calls.patch scriptDeps)

-    # XSA #477
+    # XSA #483
    (fetchpatch {
-      url = "https://xenbits.xenproject.org/xsa/xsa477.patch";
-      hash = "sha256-c9i61GvHPiLwMGvd+5IKgUwyu/NPub+mtnxUPHW/HhI=";
+      url = "https://xenbits.xenproject.org/xsa/xsa483.patch";
+      hash = "sha256-pZkSQKAjEIa/EHlCa2hD+3kofzpVHtFxcdp/TiWu9i8=";
    })

-    # XSA #479
+    # XSA #484
    (fetchpatch {
-      url = "https://xenbits.xenproject.org/xsa/xsa479.patch";
-      hash = "sha256-2o6RYyT4Nrg1le6BUOQ3AwedorCvxvKao2uMYWrUV1Y=";
+      url = "https://xenbits.xenproject.org/xsa/xsa484.patch";
+      hash = "sha256-6zkTBHKfpAK2poSycEFSb3pE9pDpZwBxAe5Jf862j+U=";
    })

-    # XSA #480
+    # XSA #486
    (fetchpatch {
-      url = "https://xenbits.xenproject.org/xsa/xsa480.patch";
-      hash = "sha256-mHoY+Y8klwLYOo4LZCwYcNsB1BcBbSa1nQOn3NueDdI=";
+      url = "https://xenbits.xenproject.org/xsa/xsa486.patch";
+      hash = "sha256-8EC1lv2JAYqchX5sHbO3NbP7haEyu1V0/72KwALG+BA=";
    })

-    # XSA #481
+    # XSA #488
    (fetchpatch {
-      url = "https://xenbits.xenproject.org/xsa/xsa481.patch";
-      hash = "sha256-QpRXS4rFuML2TawH7yhUmg8U4C1ATt4xiLLs91duuO8=";
+      url = "https://xenbits.xenproject.org/xsa/xsa488-4.20.patch";
+      hash = "sha256-QttKWdmWC6Zn5k2hd6RIMCpLWv71HB/A9mCbDP+i8to=";
    })

    # patch `libxl` to search for `qemu-system-i386` properly. (Before 4.21)
@@ -228,8 +228,8 @@ stdenv.mkDerivation (finalAttrs: {
  src = fetchFromGitHub {
    owner = "xen-project";
    repo = "xen";
-    tag = "RELEASE-4.20.2";
-    hash = "sha256-ZDPjsEAEH5bW0156MVvOKUeqg+mwdce0GFdUTBH39Qc=";
+    tag = "RELEASE-4.20.3";
+    hash = "sha256-+qTHIsDD2A5lVwmpJ7artnzdviT1XN05CYeu7JFxfqc=";
  };

  strictDeps = true;
@@ -28,13 +28,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "gala";
-  version = "8.4.2";
+  version = "8.5.0";

  src = fetchFromGitHub {
    owner = "elementary";
    repo = "gala";
    tag = finalAttrs.version;
-    hash = "sha256-T4Kpgc9i0dqzG/dX46fCpkAbXtppkqUPu2bYtCl708k=";
+    hash = "sha256-Ih0ohyxDCTw3UHGHIP1JQSTi9mGBG5R6HIAJJRPERrQ=";
  };

  depsBuildBuild = [ pkg-config ];
@@ -65,7 +65,9 @@ mkCoqDerivation rec {
      mathcomp-boot
      mathcomp-fingroup
    ]
-    ++ lib.optionals (lib.versions.isGe "4.2.0" defaultVersion) [ gnuplot_qt ];
+    ++ lib.optionals (defaultVersion != null && lib.versions.isGe "4.2.0" defaultVersion) [
+      gnuplot_qt
+    ];
  useMelquiondRemake.logpath = "Interval";
  mlPlugin = true;

@@ -278,6 +278,8 @@ if coq.rocqPackages ? mathcomp && version != "2.3.0" && version != "2.4.0" then
      ];
      preBuild = "cd ssreflect";
    };
+    fingroup = mc.finite-group;
+    character = mc.group-representation;
  }
 else
  mathcomp_ (if single then "single" else "all")
@@ -160,10 +160,7 @@ stdenv.mkDerivation rec {
      version 2.
    '';
    homepage = "http://www.mcs.anl.gov/mpi/mpich2/";
-    license = {
-      url = "http://git.mpich.org/mpich.git/blob/a385d6d0d55e83c3709ae851967ce613e892cd21:/COPYRIGHT";
-      fullName = "MPICH license (permissive)";
-    };
+    license = lib.licenses.mpich2;
    maintainers = [ lib.maintainers.markuskowa ];
    platforms = lib.platforms.linux ++ lib.platforms.darwin;
  };
@@ -15,7 +15,7 @@
  ppx_deriving_0_15,
  ppx_deriving_0_33,
  ppx_optcomp,
-  coqPackages,
+  rocqPackages,
  version ?
    if lib.versionAtLeast ocaml.version "4.13" then
      "3.7.1"
@@ -33,7 +33,7 @@ let
 in

 let
-  fetched = coqPackages.metaFetch {
+  fetched = rocqPackages.metaFetch {
    release."3.7.1".sha256 = "sha256-AQn0T9bAj17tAcVZdl3PTj4ri0fCXQJvAVN1dFn19GY=";
    release."3.6.2".sha256 = "sha256-BDE4L5qYZfaMt+6JivNBJIaJGeDSf5E+Kw1Wera/WFk=";
    release."3.6.1".sha256 = "sha256-zoVgRqNAXeCgk3zGntVkkZxIiQrCU5+ONeI97BiT674=";
@@ -2,12 +2,12 @@
  lib,
  buildDunePackage,
  ocaml,
-  coqPackages,
+  rocqPackages,
  version ? "20260203",
 }:

 let
-  fetched = coqPackages.metaFetch {
+  fetched = rocqPackages.metaFetch {
    release."20231231".sha256 = "sha256-veB0ORHp6jdRwCyDDAfc7a7ov8sOeHUmiELdOFf/QYk=";
    release."20240715".sha256 = "sha256-9CSxAIm0aEXkwF+aj8u/bqLG30y5eDNz65EnohJPjzI=";
    release."20250903".sha256 = "sha256-ap1OvcvCAuqmFDwhPwMBosHs3cm5NxPW/w1J8AzWduk=";
@@ -5,6 +5,7 @@
  buildPythonPackage,
  fetchFromGitHub,
  orjson,
+  pyotp,
  pytest-aiohttp,
  pytest-asyncio,
  pytest-cov-stub,
@@ -17,7 +18,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "aiounifi";
-  version = "89";
+  version = "90";
  pyproject = true;

  disabled = pythonOlder "3.13";
@@ -26,12 +27,12 @@ buildPythonPackage (finalAttrs: {
    owner = "Kane610";
    repo = "aiounifi";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-SkvT2rwKbdQkuKunWzp439k4sTTBSLjEtYbR1cHhLKc=";
+    hash = "sha256-xM2x4SwVav2gsuG0G1hJjg4AcdsuCYf3O1fma++EYow=";
  };

  postPatch = ''
    substituteInPlace pyproject.toml \
-      --replace-fail "setuptools==82.0.0" "setuptools" \
+      --replace-fail "setuptools==82.0.1" "setuptools" \
      --replace-fail "wheel==0.46.3" "wheel"
  '';

@@ -40,6 +41,7 @@ buildPythonPackage (finalAttrs: {
  dependencies = [
    aiohttp
    orjson
+    pyotp
    segno
  ];

@@ -38,14 +38,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "anthropic";
-  version = "0.94.0";
+  version = "0.97.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "anthropics";
    repo = "anthropic-sdk-python";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Gh7My8ftI2o0CxrwuVsbr8tdZ2MtKdRw0mfQxb7REJk=";
+    hash = "sha256-jekixY/D80M9wPvq14GZj20+hDBVhzpmylh8mFSdL6k=";
  };

  postPatch = ''
@@ -34,7 +34,6 @@
  pytest-celery,
  pytest-click,
  pytest-timeout,
-  pytest-xdist,
  pytestCheckHook,
  python-dateutil,
  python-memcached,
@@ -156,11 +155,6 @@ buildPythonPackage (finalAttrs: {
    pytest-timeout
    pytestCheckHook
  ]
-  ++ lib.optionals stdenv.hostPlatform.isLinux [
-    # Using `pytest-xdist` leads to incomplete tests which hang `pytestRemoveBytecode`
-    # under `sandbox=false` (the default on Darwin).
-    pytest-xdist
-  ]
  ++ lib.concatAttrValues finalAttrs.passthru.optional-dependencies;

  disabledTestPaths = [
@@ -42,7 +42,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "django";
-  version = "6.0.4";
+  version = "6.0.5";
  pyproject = true;

  disabled = pythonOlder "3.12";
@@ -51,7 +51,7 @@ buildPythonPackage (finalAttrs: {
    owner = "django";
    repo = "django";
    tag = finalAttrs.version;
-    hash = "sha256-zm++A7gZji4W4BAB1XXtqlXKjUMBbYmaEz9RGhx3RkI=";
+    hash = "sha256-jII/aoJ75sS+ig4iVZmTcsEE76aC8Om/k2J+LnRj+cE=";
  };

  patches = [
@@ -1,7 +1,7 @@
 {
  lib,
  buildPythonPackage,
-  fetchPypi,
+  fetchFromGitHub,
  python,
  setuptools,
  sgmllib3k,
@@ -12,22 +12,28 @@ buildPythonPackage rec {
  version = "6.0.12";
  pyproject = true;

-  src = fetchPypi {
-    inherit pname version;
-    hash = "sha256-ZPds6Qrj6O9dHt4PjTtQzia8znHdiuXoKxzS1KX5Qig=";
-  };
-
-  nativeBuildInputs = [ setuptools ];
-
-  propagatedBuildInputs = [ sgmllib3k ];
-
  __darwinAllowLocalNetworking = true;

+  src = fetchFromGitHub {
+    owner = "kurtmckee";
+    repo = "feedparser";
+    tag = "v${version}";
+    hash = "sha256-ZLn4Naf0CQG04iXfVJVimrBQ7TGBEPcEPCF3XMjX/Mo=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [ sgmllib3k ];
+
  checkPhase = ''
+    runHook preCheck
+
    # Tests are failing
    # AssertionError: unexpected '~' char in declaration
    rm tests/wellformed/sanitize/xml_declaration_unexpected_character.xml
    ${python.interpreter} -Wd tests/runtests.py
+
+    runHook postCheck
  '';

  pythonImportsCheck = [ "feedparser" ];
@@ -16,7 +16,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "homematicip";
-  version = "2.8.0";
+  version = "2.9.0";
  pyproject = true;

  disabled = pythonOlder "3.12";
@@ -25,7 +25,7 @@ buildPythonPackage (finalAttrs: {
    owner = "hahn-th";
    repo = "homematicip-rest-api";
    tag = finalAttrs.version;
-    hash = "sha256-IDeI95ylSiNqnwCfiIBUBVCBkffcIVvpRfbBUVYxEQ4=";
+    hash = "sha256-NwV9fgoejsB9JFdU+pJmdyX7XxR+Cag/S/XvFc4yN2o=";
  };

  build-system = [
@@ -24,7 +24,6 @@
  mpfr,
  nlohmann_json,
  opencascade-occt_7_6,
-  opencollada,
  pcre,
  zlib,

@@ -102,7 +101,6 @@ buildPythonPackage rec {
    mpfr
    nlohmann_json
    opencascade-occt
-    opencollada
    pcre
  ];

@@ -138,12 +136,11 @@ buildPythonPackage rec {
    "-DBUILD_SHARED_LIBS=ON"
    "-DBUILD_IFCPYTHON=ON"
    "-DCITYJSON_SUPPORT=OFF"
+    "-DCOLLADA_SUPPORT=OFF"
    "-DEIGEN_DIR=${eigen}/include/eigen3"
    "-DJSON_INCLUDE_DIR=${nlohmann_json}/include/"
    "-DOCC_INCLUDE_DIR=${opencascade-occt}/include/opencascade"
    "-DOCC_LIBRARY_DIR=${lib.getLib opencascade-occt}/lib"
-    "-DOPENCOLLADA_INCLUDE_DIR=${opencollada}/include/opencollada"
-    "-DOPENCOLLADA_LIBRARY_DIR=${lib.getLib opencollada}/lib/opencollada"
    "-DSWIG_EXECUTABLE=${swig}/bin/swig"
    "-DLIBXML2_INCLUDE_DIR=${libxml2.dev}/include/libxml2"
    "-DLIBXML2_LIBRARIES=${lib.getLib libxml2}/lib/libxml2${stdenv.hostPlatform.extensions.sharedLibrary}"
@@ -15,14 +15,14 @@

 buildPythonPackage rec {
  pname = "jobspy";
-  version = "1.1.79";
+  version = "1.1.82";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Bunsly";
    repo = "JobSpy";
-    tag = "v${version}";
-    hash = "sha256-09UVZUcBNyKLSbqHOctct7dRJhmRdS6wb5hjMI3YWdg=";
+    tag = version;
+    hash = "sha256-iLtUIM7QBIl6UAcb1RvKt2uw5gHEIQXuo4z/OQu86wM=";
  };

  pythonRelaxDeps = [
@@ -1,66 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitHub,
-
-  # build
-  poetry-core,
-
-  # propagates
-  pathable,
-  pyyaml,
-  referencing,
-  requests,
-
-  # tests
-  pytestCheckHook,
-  pytest-cov-stub,
-  responses,
-}:
-
-buildPythonPackage rec {
-  pname = "jsonschema-spec";
-  version = "0.4.6";
-  pyproject = true;
-
-  src = fetchFromGitHub {
-    owner = "p1c2u";
-    repo = "jsonschema-spec";
-    tag = version;
-    hash = "sha256-abAhWtBnZUeg1VGphfnvxPzSnPM6VjM/XKLPJVIrIXg=";
-  };
-
-  postPatch = ''
-    substituteInPlace pyproject.toml \
-      --replace 'referencing = ">=0.28.0,<0.30.0"' 'referencing = ">=0.28.0"'
-  '';
-
-  nativeBuildInputs = [
-    poetry-core
-  ];
-
-  pythonRelaxDeps = [ "referencing" ];
-
-  propagatedBuildInputs = [
-    pathable
-    pyyaml
-    referencing
-    requests
-  ];
-
-  nativeCheckInputs = [
-    pytestCheckHook
-    pytest-cov-stub
-    responses
-  ];
-
-  passthru.skipBulkUpdate = true; # newer versions under the jsonschema-path name
-
-  meta = {
-    changelog = "https://github.com/p1c2u/jsonschema-spec/releases/tag/${version}";
-    description = "JSONSchema Spec with object-oriented paths";
-    homepage = "https://github.com/p1c2u/jsonschema-spec";
-    license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [ hexa ];
-  };
-}
@@ -15,14 +15,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "llm-anthropic";
-  version = "0.24";
+  version = "0.25";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "simonw";
    repo = "llm-anthropic";
    tag = finalAttrs.version;
-    hash = "sha256-0nI/J7gGTUyrvluez9H8WD4kCuMFgWR5zFHRMxh9DXQ=";
+    hash = "sha256-dgt8DQkwVsAduzvwzN0xmLuJ4erj5KYU8x+SFCynDBI=";
  };

  build-system = [
@@ -14,19 +14,19 @@

 buildPythonPackage rec {
  pname = "qh3";
-  version = "1.7.4";
+  version = "1.8.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "jawah";
    repo = "qh3";
    tag = "v${version}";
-    hash = "sha256-zZQyKQK/zJ58XnCgxk/SvexBF1Z+GBtvulhuhUiIago=";
+    hash = "sha256-aXFevAz5B58ZnK/LImULpETQNNyRKH9vY1CoGh5mKxI=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit pname version src;
-    hash = "sha256-2HwwyHex1SE34dUGtooOf5LCkhkVhLpsoEHBFvLUkLM=";
+    hash = "sha256-+J2MDFbynUWgyLcGYRMIvo0PW6Hy8+ka2H6HMaBIOl8=";
  };

  nativeBuildInputs = [
@@ -12,14 +12,14 @@

 buildPythonPackage rec {
  pname = "wavefile";
-  version = "1.6.2";
+  version = "1.6.3";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "vokimon";
    repo = "python-wavefile";
    tag = "python-wavefile-${version}";
-    hash = "sha256-TLSWhLARY+3sHkl2p3d3LDGzLu6DggjTJWFpyrwRXSI=";
+    hash = "sha256-7pJcdp2abNurTl/pwAEW4QAalK7okMOCwlRPmKLWad4=";
  };

  nativeBuildInputs = [ setuptools ];
@@ -5,20 +5,21 @@
  setuptools,
  aiohttp,
  async-upnp-client,
+  zeroconf,
  pytestCheckHook,
  pytest-asyncio,
 }:

 buildPythonPackage (finalAttrs: {
  pname = "wiim";
-  version = "0.1.1";
+  version = "0.1.4";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Linkplay2020";
    repo = "wiim";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-WJbnVJ7ZM4wZk3Y8zTRc3i24CyTA8Wz9EKYr5BNlx6o=";
+    hash = "sha256-buFGfM/qgZGjE3asv/5GBD4TfHj3lf/9Q9u/W9bOq3A=";
  };

  build-system = [ setuptools ];
@@ -26,6 +27,7 @@ buildPythonPackage (finalAttrs: {
  dependencies = [
    aiohttp
    async-upnp-client
+    zeroconf
  ];

  nativeCheckInputs = [
@@ -33,6 +35,11 @@ buildPythonPackage (finalAttrs: {
    pytest-asyncio
  ];

+  disabledTests = [
+    # ValueError: Device u is not managed by the controller
+    "test_async_join_group"
+  ];
+
  pythonImportsCheck = [ "wiim" ];

  meta = {
@@ -1,9 +1,9 @@
 ############################################################################
 # This file mainly provides the `mathcomp` derivation, which is            #
 # essentially a meta-package containing all core mathcomp libraries        #
-# (boot order fingroup algebra solvable field character). They can be      #
-# accessed individually through the passthrough attributes of mathcomp     #
-# bearing the same names (mathcomp.boot, etc).                             #
+# (boot order finite-group algebra solvable field group-representation).   #
+# They can be accessed individually through the passthrough attributes of  #
+# mathcomp bearing the same names (mathcomp.boot, etc).                    #
 ############################################################################
 # Compiling a custom version of mathcomp using `mathcomp.override`.        #
 # This is the replacement for the former `mathcomp_ config` function.      #
@@ -45,22 +45,30 @@ let
  packages = {
    "boot" = [ ];
    "order" = [ "boot" ];
-    "fingroup" = [ "boot" ];
+    "finite-group" = [ "boot" ];
    "algebra" = [
      "order"
-      "fingroup"
+      "finite-group"
    ];
    "solvable" = [ "algebra" ];
    "field" = [ "solvable" ];
-    "character" = [ "field" ];
-    "all" = [ "character" ];
+    "group-representation" = [ "field" ];
+    "all" = [ "group-representation" ];
  };

  mathcomp_ =
    package:
    let
      mathcomp-deps = lib.optionals (package != "single") (map mathcomp_ packages.${package});
-      pkgpath = if package == "single" then "." else package;
+      cdpkg =
+        if package == "single" then
+          "cd ."
+        else if package == "group-representation" then
+          "cd group_representation || cd character"
+        else if package == "finite-group" then
+          "cd finite_group || cd fingroup"
+        else
+          "cd ${package}";
      pname = if package == "single" then "mathcomp" else "mathcomp-${package}";
      pkgallMake = ''
        echo "all.v"  > Make
@@ -94,7 +102,7 @@ let
            fi
          ''
          + ''
-            cd ${pkgpath}
+            ${cdpkg}
          ''
          + lib.optionalString (package == "all") pkgallMake;

@@ -33,6 +33,6 @@ buildHomeAssistantComponent rec {
    description = "Home Assistant component for EcoFlow Cloud";
    homepage = "https://github.com/tolwi/hassio-ecoflow-cloud";
    maintainers = with lib.maintainers; [ ananthb ];
-    # license = lib.licenses.asl20;
+    license = lib.licenses.asl20;
  };
 }
@@ -24,5 +24,6 @@ buildHomeAssistantComponent rec {
    description = "Home Assistant integration for local MQTT Hildebrand Glow IHD";
    homepage = "https://github.com/megakid/ha_hildebrand_glow_ihd_mqtt";
    maintainers = with lib.maintainers; [ CodedNil ];
+    license = lib.licenses.unfree;
  };
 }
@@ -11,9 +11,8 @@

 let
  hashes = {
-    # Issue tracking PostgreSQL 18 support: https://github.com/apache/age/issues/2164
-    # "18" = "";
-    "17" = "sha256-gqoAhVqQaDhe5CIcTc//1HonQLP1zoBIGuCQuXsJy+A=";
+    "18" = "sha256-Hqjg62YLTLEa6wRA5S4MAIED7Hobtiih4E55cSzVTqE";
+    "17" = "sha256-hAjhNj/benwZbbuxDl9RSjwWRai9CUozbEN6ecPKoFE=";
    "16" = "sha256-iukdi2c3CukGvjuTojybFFAZBlAw8GEfzFPr2qJuwTA=";
    "15" = "sha256-webZWgWZGnSoXwTpk816tjbtHV1UIlXkogpBDAEL4gM=";
    "14" = "sha256-jZXhcYBubpjIJ8M5JHXKV5f6VK/2BkypH3P7nLxZz3E=";
@@ -22,7 +21,13 @@ let
 in
 postgresqlBuildExtension (finalAttrs: {
  pname = "age";
-  version = if lib.versionAtLeast postgresql.version "16" then "1.6.0-rc0" else "1.5.0-rc0";
+  version =
+    if lib.versionAtLeast postgresql.version "17" then
+      "1.7.0-rc0"
+    else if lib.versionAtLeast postgresql.version "16" then
+      "1.6.0-rc0"
+    else
+      "1.5.0-rc0";

  src = fetchFromGitHub {
    owner = "apache";
@@ -0,0 +1,51 @@
+{
+  fetchFromGitHub,
+  lib,
+  postgresql,
+  postgresqlBuildExtension,
+  postgresqlTestExtension,
+}:
+
+postgresqlBuildExtension (finalAttrs: {
+  pname = "pg_textsearch";
+  version = "1.1.0";
+
+  src = fetchFromGitHub {
+    owner = "timescale";
+    repo = "pg_textsearch";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-zZctWEJVItzJBke46J4CgvOAGDLmOZbCeUThkrnaPug";
+  };
+
+  passthru.tests.extension = postgresqlTestExtension {
+    inherit (finalAttrs) finalPackage;
+    postgresqlExtraSettings = ''
+      shared_preload_libraries='pg_textsearch'
+    '';
+    sql = ''
+      CREATE EXTENSION IF NOT EXISTS pg_textsearch;
+      CREATE TABLE documents (content text);
+      INSERT INTO documents VALUES
+        ('NixOS provides declarative configuration and reproducible system builds with the Nix package manager'),
+        ('Nix was originally developed by Eelco Dolstra'),
+        ('PostgreSQL is a powerful, open source object-relational database system');
+      CREATE INDEX documents_content_bm25_idx ON documents USING bm25(content) WITH (text_config='english');
+    '';
+    asserts = [
+      {
+        query = "SELECT count(*) FROM documents ORDER BY content <@> 'nix' LIMIT 10";
+        expected = "2";
+        description = "BM25 index can be queried successfully.";
+      }
+    ];
+  };
+
+  meta = {
+    description = "BM25 relevance-ranked full-text search";
+    homepage = "https://github.com/timescale/pg_textsearch";
+    license = lib.licenses.postgresql;
+    platforms = postgresql.meta.platforms;
+    maintainers = with lib.maintainers; [ dbe ];
+    broken = lib.versionOlder postgresql.version "17";
+  };
+})
@@ -147,9 +147,6 @@ let
          lib.maintainers.osnyx
        ];
        platforms = lib.platforms.unix;
-        knownVulnerabilities = lib.optionals (lib.versions.major version == "7") [
-          "VSV00018: https://vinyl-cache.org/security/VSV00018.html"
-        ];
        broken = stdenv.isDarwin && version == "8.0.1"; # https://github.com/NixOS/nixpkgs/issues/495368
      };
    };
@@ -160,11 +157,6 @@ in
    version = "6.0.17";
    hash = "sha256-CVmHd1hCDFE/WIZqjc1TfX1O2RqFetdNSO4ihmXoL5k=";
  };
-  # EOL 2026-03-15
-  varnish77 = common {
-    version = "7.7.3";
-    hash = "sha256-6W7q/Ez+KlWO0vtU8eIr46PZlfRvjADaVF1YOq74AjY=";
-  };
  # EOL 2026-09-15
  varnish80 = common {
    version = "8.0.1";
@@ -55,10 +55,6 @@ in
    version = "0.15.1";
    hash = "sha256-Et/iWOk2FWJBDOpKjNXm4Nh5i1SU4zVPaID7kh+Uj9M=";
  };
-  modules26 = common {
-    version = "0.26.0";
-    hash = "sha256-xKMOkqm6/GoBve0AhPqyVMQv/oh5Rtj6uCeg/yId7BU=";
-  };
  modules27 = common {
    version = "0.27.0";
    hash = "sha256-1hE+AKsC6Td+Al7LFN6bgPicU8dtWd3A8PP7VKZLvYM=";
@@ -2,7 +2,6 @@
  callPackages,
  callPackage,
  varnish60,
-  varnish77,
  varnish80,
  lib,
 }:
@@ -21,10 +20,6 @@
      sha256 = "1n94slrm6vn3hpymfkla03gw9603jajclg84bjhwb8kxsk3rxpmk";
    };
  };
-  varnish77Packages = lib.recurseIntoAttrs rec {
-    varnish = varnish77;
-    modules = (callPackages ./modules.nix { inherit varnish; }).modules26;
-  };
  varnish80Packages = lib.recurseIntoAttrs rec {
    varnish = varnish80;
    modules = (callPackages ./modules.nix { inherit varnish; }).modules27;
@@ -1566,6 +1566,8 @@ mapAliases {
  openbabel3 = openbabel; # Added 2025-09-17
  openbsdCross = throw "'openbsdCross' has been renamed to/replaced by 'openbsd'"; # Converted to throw 2025-10-27
  opencl-clang = throw "opencl-clang has been integrated into intel-graphics-compiler"; # Added 2025-09-10
+  opencollada = throw "opencollada has been removed, as it is unmaintained upstream"; # Added 2026-04-26
+  opencollada-blender = throw "opencollada-blender has been removed, as it is unmaintained upstream"; # Added 2026-04-26
  opencolorio_1 = throw "'opencolorio_1' has been removed. Use opencolorio instead"; # Added 2026-01-03
  openconnect_gnutls = throw "'openconnect_gnutls' has been renamed to/replaced by 'openconnect'"; # Converted to throw 2025-10-27
  openexr_3 = throw "'openexr_3' has been renamed to/replaced by 'openexr'"; # Converted to throw 2025-10-27
@@ -2102,6 +2104,8 @@ mapAliases {
  valum = throw "'valum' has been removed because it has been marked as broken since at least November 2024."; # Added 2025-10-01
  vamp.vampSDK = throw "'vamp.vampSDK' has been renamed to/replaced by 'vamp-plugin-sdk'"; # Converted to throw 2025-10-27
  vapoursynth-nnedi3 = throw "'vapoursynth-nnedi3' has been removed per upstream. Use vapoursynth-znedi3 instead."; # Added 2026-04-20
+  varnish77 = throw "varnish 7.7 is EOL. Please upgrade to 'varnish80' or 'vinyl-cache_9'."; # Added 2026-05-01
+  varnish77Packages = throw "varnish 7.7 is EOL. Please upgrade to 'varnish80' or 'vinyl-cache_9'."; # Added 2026-05-01
  vaultwarden-vault = throw "'vaultwarden-vault' has been renamed to/replaced by 'vaultwarden.webvault'"; # Converted to throw 2025-10-27
  vbetool = throw "'vbetool' has been removed as it is broken and not maintained upstream."; # Added 2025-06-11
  vboot_reference = vboot-utils; # Added 2025-11-01
@@ -2159,6 +2163,7 @@ mapAliases {
  welkin = throw "welkin was removed as it is unmaintained upstream"; # Added 2026-01-01
  whalebird = throw "'whalebird' has been removed because it was using an EOL electron version"; # Added 2026-03-20
  whatsapp-for-linux = throw "'whatsapp-for-linux' has been removed because it was unmaintained and archived upstream. Consider using 'karere' instead"; # Converted to throw 2025-10-27
+  whisper = throw "'whisper' was removed as it is unmaintained upstream and vendored insecure outdated libraries"; # Added 2026-05-01
  wifi-password = throw "'wifi-password' has been removed as it was unmaintained upstream"; # Added 2025-08-29
  win-pvdrivers = throw "'win-pvdrivers' has been removed as it was subject to the Xen build machine compromise (XSN-01) and has open security vulnerabilities (XSA-468)"; # Added 2025-08-29
  win-virtio = throw "'win-virtio' has been renamed to/replaced by 'virtio-win'"; # Converted to throw 2025-10-27
@@ -3464,12 +3464,10 @@ with pkgs;

  inherit (callPackages ../servers/varnish { })
    varnish60
-    varnish77
    varnish80
    ;
  inherit (callPackages ../servers/varnish/packages.nix { })
    varnish60Packages
-    varnish77Packages
    varnish80Packages
    ;
  varnishPackages = varnish80Packages;
@@ -152,10 +152,12 @@ let
      mathcomp-boot = self.mathcomp.boot;
      mathcomp-order = self.mathcomp.order;
      mathcomp-ssreflect = self.mathcomp.ssreflect;
+      mathcomp-finite-group = self.mathcomp.fingroup;
      mathcomp-fingroup = self.mathcomp.fingroup;
      mathcomp-algebra = self.mathcomp.algebra;
      mathcomp-solvable = self.mathcomp.solvable;
      mathcomp-field = self.mathcomp.field;
+      mathcomp-group-representation = self.mathcomp.character;
      mathcomp-character = self.mathcomp.character;
      mathcomp-abel = callPackage ../development/coq-modules/mathcomp-abel { };
      mathcomp-algebra-tactics = callPackage ../development/coq-modules/mathcomp-algebra-tactics { };
@@ -279,6 +279,7 @@ mapAliases {
  JPype1 = throw "'JPype1' has been renamed to/replaced by 'jpype1'"; # Converted to throw 2025-10-29
  jsonfield = throw "'jsonfield' has been removed as it was broken and deprecated upstream. Consider using Django's native `JSONField` instead."; # Added 2025-11-08
  jsonpath_rw = throw "'jsonpath_rw' has been renamed to/replaced by 'jsonpath-rw'"; # Converted to throw 2025-10-29
+  jsonschema-spec = jsonschema-path;
  jupyter-server-ydoc = throw "'jupyter-server-ydoc' has been renamed to/replaced by 'jupyter-collaboration'"; # Converted to throw 2025-10-29
  jupyter_client = throw "'jupyter_client' has been renamed to/replaced by 'jupyter-client'"; # Converted to throw 2025-10-29
  jupyter_console = throw "'jupyter_console' has been renamed to/replaced by 'jupyter-console'"; # Converted to throw 2025-10-29
@@ -8069,8 +8069,6 @@ self: super: with self; {

  jsonschema-rs = callPackage ../development/python-modules/jsonschema-rs { };

-  jsonschema-spec = callPackage ../development/python-modules/jsonschema-spec { };
-
  jsonschema-specifications = callPackage ../development/python-modules/jsonschema-specifications { };

  jsonslicer = callPackage ../development/python-modules/jsonslicer { };
@@ -42,11 +42,13 @@ let
      mathcomp = callPackage ../development/rocq-modules/mathcomp { };
      mathcomp-boot = self.mathcomp.boot;
      mathcomp-order = self.mathcomp.order;
-      mathcomp-fingroup = self.mathcomp.fingroup;
+      mathcomp-finite-group = self.mathcomp.finite-group;
+      mathcomp-fingroup = self.mathcomp-finite-group;
      mathcomp-algebra = self.mathcomp.algebra;
      mathcomp-solvable = self.mathcomp.solvable;
      mathcomp-field = self.mathcomp.field;
-      mathcomp-character = self.mathcomp.character;
+      mathcomp-group-representation = self.mathcomp.group-representation;
+      mathcomp-character = self.mathcomp-group-representation;
      mathcomp-analysis = callPackage ../development/rocq-modules/mathcomp-analysis { };
      mathcomp-analysis-stdlib = self.mathcomp-analysis.analysis-stdlib;
      mathcomp-bigenough = callPackage ../development/rocq-modules/mathcomp-bigenough { };