From e5a4d419f4cc6a5e1f382986548f357ef143bdb5 Mon Sep 17 00:00:00 2001
From: teutat3s <10206665+teutat3s@users.noreply.github.com>
Date: Wed, 15 Oct 2025 19:09:43 +0200
Subject: [PATCH 001/115] nixos/mediawiki: add postgres option to createLocally
 description

---
 nixos/modules/services/web-apps/mediawiki.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/services/web-apps/mediawiki.nix b/nixos/modules/services/web-apps/mediawiki.nix
index dc2464c065e4..80d0e0b40d24 100644
--- a/nixos/modules/services/web-apps/mediawiki.nix
+++ b/nixos/modules/services/web-apps/mediawiki.nix
@@ -454,7 +454,7 @@ in
           defaultText = literalExpression "true";
           description = ''
             Create the database and database user locally.
-            This currently only applies if database type "mysql" is selected.
+            This currently only applies if database type "mysql" or "postgres" is selected.
           '';
         };
       };

From 8f227144a695162d36f8e18f0262c9ae32becf99 Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Fri, 31 Oct 2025 22:48:54 +0900
Subject: [PATCH 002/115] super-tiny-icons: unstable-2023-11-06 ->
 0-unstable-2025-10-30

---
 pkgs/by-name/su/super-tiny-icons/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/su/super-tiny-icons/package.nix b/pkgs/by-name/su/super-tiny-icons/package.nix
index 5e1d283264f7..d1dd4eca5722 100644
--- a/pkgs/by-name/su/super-tiny-icons/package.nix
+++ b/pkgs/by-name/su/super-tiny-icons/package.nix
@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation {
   pname = "super-tiny-icons";
-  version = "unstable-2023-11-06";
+  version = "0-unstable-2025-10-30";
 
   src = fetchFromGitHub {
     owner = "edent";
     repo = "SuperTinyIcons";
-    rev = "888f449af8fb8df93241204e99fece85b9d225a5";
-    hash = "sha256-L/7CEvG0NPbF8+ysiEHPiPnCMAW3cUu/e3XwtatRdbg=";
+    rev = "621ddf6c231d142cccaa411c3c29001404550624";
+    hash = "sha256-qx3Z64id5kv/OrfEqI77ovGf2X4uHt6wlZrlUo8Nnb0=";
   };
 
   installPhase = ''

From dedb91b85af26defff9f74a76a7a3cb7a09f2620 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 1 Nov 2025 20:19:14 +0000
Subject: [PATCH 003/115] python3Packages.hvac: 2.3.0 -> 2.4.0

---
 pkgs/development/python-modules/hvac/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/hvac/default.nix b/pkgs/development/python-modules/hvac/default.nix
index 67429f81efe0..19edfec9439f 100644
--- a/pkgs/development/python-modules/hvac/default.nix
+++ b/pkgs/development/python-modules/hvac/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage rec {
   pname = "hvac";
-  version = "2.3.0";
+  version = "2.4.0";
   format = "pyproject";
 
   disabled = pythonOlder "3.8";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-G4XjMg6GQt2C8jTbYyU82haagXWJ6CNxPcX8qDEZseI=";
+    hash = "sha256-4AVq2QZOeSPodOZ2kBWwMlgLY54pJG9asQRPeVnBx+A=";
   };
 
   nativeBuildInputs = [ poetry-core ];

From bd0164ac91c11dee2c8fd6ebb5a9585e2d27a805 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 4 Nov 2025 05:04:55 +0000
Subject: [PATCH 004/115] graphicsmagick: 1.3.45 -> 1.3.46

---
 pkgs/by-name/gr/graphicsmagick/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gr/graphicsmagick/package.nix b/pkgs/by-name/gr/graphicsmagick/package.nix
index 4d495f7d7fea..10cfc0cba3d5 100644
--- a/pkgs/by-name/gr/graphicsmagick/package.nix
+++ b/pkgs/by-name/gr/graphicsmagick/package.nix
@@ -28,11 +28,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "graphicsmagick";
-  version = "1.3.45";
+  version = "1.3.46";
 
   src = fetchurl {
     url = "mirror://sourceforge/graphicsmagick/GraphicsMagick-${finalAttrs.version}.tar.xz";
-    hash = "sha256-3OpRZ0FPfIBVV94tekepsxR7y/YXuR9fD0r+XmVDAms=";
+    hash = "sha256-x8cGpQXpxsN2QVa7lKDJZE15ExeF3xWonJ+HIdGr0GE=";
   };
 
   outputs = [

From 8dea61c42dced4995f34c6d431a9c2656a7c4988 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Gutyina=20Gerg=C5=91?= <gutyina.gergo.2@gmail.com>
Date: Fri, 14 Nov 2025 19:17:46 +0000
Subject: [PATCH 005/115] gromit-mpx: 1.7.0 -> 1.8.0

---
 pkgs/by-name/gr/gromit-mpx/package.nix | 12 ++----------
 1 file changed, 2 insertions(+), 10 deletions(-)

diff --git a/pkgs/by-name/gr/gromit-mpx/package.nix b/pkgs/by-name/gr/gromit-mpx/package.nix
index e76f80fa95f1..48b28dbb356f 100644
--- a/pkgs/by-name/gr/gromit-mpx/package.nix
+++ b/pkgs/by-name/gr/gromit-mpx/package.nix
@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  fetchpatch2,
   cmake,
   pkg-config,
   gtk3,
@@ -22,22 +21,15 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gromit-mpx";
-  version = "1.7.0";
+  version = "1.8.0";
 
   src = fetchFromGitHub {
     owner = "bk138";
     repo = "gromit-mpx";
     tag = finalAttrs.version;
-    hash = "sha256-jHw4V2ZvfpT3PUihe/O+9BPsv+udFg5seMbYmxOz8Yk=";
+    hash = "sha256-dqZbkbjcfNO/rlUn5pCDdPU5rYyG1qSR38WROFwPlN0=";
   };
 
-  patches = [
-    (fetchpatch2 {
-      url = "https://github.com/bk138/gromit-mpx/commit/e3b501d497374da083b97d0b3bbd40c5c766d2d1.patch?full_index=1";
-      hash = "sha256-MJFwwYuvIZeLJBi4p/JQ6qJo6fntj2Q7y+ufap/MGdY=";
-    })
-  ];
-
   nativeBuildInputs = [
     cmake
     pkg-config

From eed770f5e763c5b006926a1b8c460b7e0287f07a Mon Sep 17 00:00:00 2001
From: Bart Brouns <bart@magnetophon.nl>
Date: Tue, 18 Nov 2025 00:42:49 +0100
Subject: [PATCH 006/115] airwindows-lv2: 28.0 -> 34.0

---
 pkgs/by-name/ai/airwindows-lv2/package.nix | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/pkgs/by-name/ai/airwindows-lv2/package.nix b/pkgs/by-name/ai/airwindows-lv2/package.nix
index 6b6d3638fc21..e72c0d7444f1 100644
--- a/pkgs/by-name/ai/airwindows-lv2/package.nix
+++ b/pkgs/by-name/ai/airwindows-lv2/package.nix
@@ -8,14 +8,14 @@
   lv2,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "airwindows-lv2";
-  version = "28.0";
+  version = "34.0";
   src = fetchFromSourcehut {
     owner = "~hannes";
     repo = "airwindows-lv2";
-    rev = "v${version}";
-    sha256 = "sha256-1GWkdNCn98ttsF2rPLZE0+GJdatgkLewFQyx9Frr2sM=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-BLoDQ02DbTTaJ7UPh1eqSrgWe9t9PbDdgylBOI0ENGQ=";
   };
 
   nativeBuildInputs = [
@@ -23,13 +23,14 @@ stdenv.mkDerivation rec {
     ninja
     pkg-config
   ];
+
   buildInputs = [ lv2 ];
 
-  meta = with lib; {
+  meta = {
     description = "Airwindows plugins (ported to LV2)";
     homepage = "https://sr.ht/~hannes/airwindows-lv2";
-    license = licenses.mit;
-    maintainers = [ maintainers.magnetophon ];
-    platforms = platforms.unix;
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ magnetophon ];
+    platforms = lib.platforms.unix;
   };
-}
+})

From d88c9eb569ae524f5e9ee90a1fb0fd12aaf6f670 Mon Sep 17 00:00:00 2001
From: Shawn8901 <shawn8901@googlemail.com>
Date: Sat, 15 Nov 2025 18:53:26 +0100
Subject: [PATCH 007/115] epson-escpr2: add update script

---
 pkgs/by-name/ep/epson-escpr2/package.nix |  3 +++
 pkgs/by-name/ep/epson-escpr2/update.sh   | 21 +++++++++++++++++++++
 2 files changed, 24 insertions(+)
 create mode 100755 pkgs/by-name/ep/epson-escpr2/update.sh

diff --git a/pkgs/by-name/ep/epson-escpr2/package.nix b/pkgs/by-name/ep/epson-escpr2/package.nix
index bbfe2d0e2508..984c6633b04f 100644
--- a/pkgs/by-name/ep/epson-escpr2/package.nix
+++ b/pkgs/by-name/ep/epson-escpr2/package.nix
@@ -14,6 +14,7 @@ stdenv.mkDerivation {
     # To find the most recent version go to
     # https://support.epson.net/linux/Printer/LSB_distribution_pages/en/escpr2.php
     # and retrieve the download link for source package for arm CPU for the tar.gz (the x86 link targets to rpm source files)
+
     url = "https://download3.ebz.epson.net/dsc/f/03/00/17/28/09/4e8dc40219d4b52e414b608de92552af4fd46eca/epson-inkjet-printer-escpr2-1.2.35-1.tar.gz";
     hash = "sha256-aYEuEION/C32/SnngreX/nqK/6Yzkuxf0k0HpferTYM=";
   };
@@ -37,6 +38,8 @@ stdenv.mkDerivation {
     "--with-cupsppddir=${placeholder "out"}/share/cups/model"
   ];
 
+  passthru.updateScript = ./update.sh;
+
   meta = {
     homepage = "http://download.ebz.epson.net/dsc/search/01/search/";
     description = "ESC/P-R 2 Driver (generic driver)";
diff --git a/pkgs/by-name/ep/epson-escpr2/update.sh b/pkgs/by-name/ep/epson-escpr2/update.sh
new file mode 100755
index 000000000000..b2082decd74a
--- /dev/null
+++ b/pkgs/by-name/ep/epson-escpr2/update.sh
@@ -0,0 +1,21 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p bash curl jq common-updater-scripts
+set -eou pipefail
+
+result=$(curl -sSL 'https://download-center.epson.com/api/v1/modules/?device_id=XP-970%20Series&os=DEBARM32&region=US&language=en' | jq -r '.items[] | select(.module_name == "Epson Inkjet Printer Driver 2 (ESC/P-R) for Linux" and .cti_category == "Sources")')
+
+latestVersion=$(jq '.version' <<< "$result" | tr -d '"')
+currentVersion=$(nix-instantiate --eval -E "with import ./. {}; (lib.getVersion epson-escpr2)" | tr -d '"')
+
+echo "latest  version: $latestVersion"
+echo "current version: $currentVersion"
+
+if [[ "$latestVersion" == "$currentVersion" ]]; then
+    echo "package is up-to-date"
+    exit 0
+fi
+
+url=$(jq '.url' <<< "$result" | tr -d '"')
+
+hash=$(nix --extra-experimental-features nix-command hash convert --hash-algo sha256 --to sri $(nix-prefetch-url $url))
+update-source-version epson-escpr2 $latestVersion $hash $url --ignore-same-version

From 1919f1b66335fb5846b4d2175f014ab49c23c2bd Mon Sep 17 00:00:00 2001
From: Shawn8901 <shawn8901@googlemail.com>
Date: Sat, 15 Nov 2025 18:01:38 +0000
Subject: [PATCH 008/115] epson-escpr2: 1.2.35 -> 1.2.36

---
 pkgs/by-name/ep/epson-escpr2/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ep/epson-escpr2/package.nix b/pkgs/by-name/ep/epson-escpr2/package.nix
index 984c6633b04f..8523d3aff4d1 100644
--- a/pkgs/by-name/ep/epson-escpr2/package.nix
+++ b/pkgs/by-name/ep/epson-escpr2/package.nix
@@ -8,15 +8,15 @@
 
 stdenv.mkDerivation {
   pname = "epson-inkjet-printer-escpr2";
-  version = "1.2.35";
+  version = "1.2.36";
 
   src = fetchurl {
     # To find the most recent version go to
     # https://support.epson.net/linux/Printer/LSB_distribution_pages/en/escpr2.php
     # and retrieve the download link for source package for arm CPU for the tar.gz (the x86 link targets to rpm source files)
 
-    url = "https://download3.ebz.epson.net/dsc/f/03/00/17/28/09/4e8dc40219d4b52e414b608de92552af4fd46eca/epson-inkjet-printer-escpr2-1.2.35-1.tar.gz";
-    hash = "sha256-aYEuEION/C32/SnngreX/nqK/6Yzkuxf0k0HpferTYM=";
+    url = "https://download-center.epson.com/f/module/bb48b7e6-662f-4152-a86f-c1a78fc74b1f/epson-inkjet-printer-escpr2-1.2.36-1.tar.gz";
+    hash = "sha256-0R4dFhT1XhjXMOeRxCbTIT1K83bkwiAhpu/W10DSlxM=";
   };
 
   buildInputs = [ cups ];

From e7fd355624a8c2f5fdd121c26e7e156fec503d30 Mon Sep 17 00:00:00 2001
From: pleb <pleb@brenise.dev>
Date: Fri, 21 Nov 2025 09:38:11 -0800
Subject: [PATCH 009/115] albyhub: 1.20.0 -> 1.21.0

---
 pkgs/by-name/al/albyhub/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/al/albyhub/package.nix b/pkgs/by-name/al/albyhub/package.nix
index 383c8887a2aa..322c6bbc13ba 100644
--- a/pkgs/by-name/al/albyhub/package.nix
+++ b/pkgs/by-name/al/albyhub/package.nix
@@ -23,16 +23,16 @@ in
 
 buildGoModule (finalAttrs: {
   pname = "albyhub";
-  version = "1.20.0";
+  version = "1.21.0";
 
   src = fetchFromGitHub {
     owner = "getAlby";
     repo = "hub";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-MbEKRdPyLlZE23UbwwWO1tSFhXG0Hs/m0NaHo9d4pD8=";
+    hash = "sha256-9NtXnEOHgzYM3QUwFKBJ90ZGghgU2/i+hATim4N/JSs=";
   };
 
-  vendorHash = "sha256-oTyMR/Nc2CngKB2f0tAqrms6E1tsqymBr1x4OhNyK/Q=";
+  vendorHash = "sha256-V3uWofAchbLgIadwH4IGyv2lr0cLSz2QCQ6ffhPP9n0=";
   proxyVendor = true; # needed for secp256k1-zkp CGO bindings
 
   nativeBuildInputs = [
@@ -49,7 +49,7 @@ buildGoModule (finalAttrs: {
 
   frontendYarnOfflineCache = fetchYarnDeps {
     yarnLock = finalAttrs.src + "/frontend/yarn.lock";
-    hash = "sha256-fCzrNdiZTOY/fnakwheDNny9ip1Mg/gGX7+Z2N4w6lw=";
+    hash = "sha256-ikGH45JKheivNKwF7juC6rmwU51S3qiicDdYLzjgFJE=";
   };
 
   preBuild = ''

From aaacd1509fc4f609da406414cf1d43707dbc7d11 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marco=20=22Capypara=22=20K=C3=B6pcke?= <hello@capypara.de>
Date: Mon, 24 Mar 2025 20:56:50 +0100
Subject: [PATCH 010/115] field-monitor: init at 49.1

---
 pkgs/by-name/fi/field-monitor/package.nix | 102 ++++++++++++++++++++++
 1 file changed, 102 insertions(+)
 create mode 100644 pkgs/by-name/fi/field-monitor/package.nix

diff --git a/pkgs/by-name/fi/field-monitor/package.nix b/pkgs/by-name/fi/field-monitor/package.nix
new file mode 100644
index 000000000000..7cdfcf1421dd
--- /dev/null
+++ b/pkgs/by-name/fi/field-monitor/package.nix
@@ -0,0 +1,102 @@
+{
+  stdenv,
+  lib,
+  fetchFromGitHub,
+  cargo,
+  meson,
+  ninja,
+  rustPlatform,
+  rustc,
+  pkg-config,
+  glib,
+  gsettings-desktop-schemas,
+  gtk4,
+  libadwaita,
+  libvirt,
+  gst_all_1,
+  desktop-file-utils,
+  appstream,
+  appstream-glib,
+  wrapGAppsHook4,
+  xdg-desktop-portal,
+  blueprint-compiler,
+  libxml2,
+  spice-protocol,
+  spice-gtk,
+  vte-gtk4,
+  gtk-vnc,
+  usbredir,
+  libepoxy,
+  libGL,
+  openssl,
+}:
+stdenv.mkDerivation (finalAttrs: {
+  pname = "field-monitor";
+  version = "49.1";
+
+  strictDeps = true;
+
+  src = fetchFromGitHub {
+    owner = "theCapypara";
+    repo = "field-monitor";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-vtRubZwIQRV3ySFwdPgZ1Eyxh32FPsAvissxjrV3JcE=";
+  };
+
+  cargoDeps = rustPlatform.fetchCargoVendor {
+    inherit (finalAttrs) src;
+    hash = "sha256-zBCt/ptxAQ3TAzklmjbajQZ4Ou1+xlvH/k74yW34t9g=";
+  };
+
+  mesonBuildType = "release";
+
+  nativeBuildInputs = [
+    appstream
+    appstream-glib
+    blueprint-compiler
+    cargo
+    desktop-file-utils
+    libxml2
+    meson
+    ninja
+    pkg-config
+    rustc
+    rustPlatform.cargoSetupHook
+    wrapGAppsHook4
+  ];
+
+  buildInputs = [
+    glib
+    gsettings-desktop-schemas
+    gtk-vnc
+    gtk4
+    libadwaita
+    libepoxy
+    libGL
+    libvirt
+    openssl
+    spice-gtk
+    spice-protocol
+    usbredir
+    vte-gtk4
+    xdg-desktop-portal
+  ]
+  ++ (with gst_all_1; [
+    gstreamer
+    gst-plugins-base
+    gst-plugins-good
+  ]);
+
+  postInstall = ''
+    wrapProgram $out/bin/de.capypara.FieldMonitor --prefix PATH ':' "$out/libexec"
+  '';
+
+  meta = {
+    description = "Viewer for virtual machines and other external screens";
+    homepage = "https://github.com/theCapypara/field-monitor";
+    license = lib.licenses.gpl3Plus;
+    maintainers = with lib.maintainers; [ theCapypara ];
+    platforms = lib.platforms.linux;
+    mainProgram = "de.capypara.FieldMonitor";
+  };
+})

From 31b1f0782db5cd0b2e8951ddc39bd808676daf4d Mon Sep 17 00:00:00 2001
From: Mynacol <Mynacol@users.noreply.github.com>
Date: Tue, 25 Nov 2025 21:41:00 +0000
Subject: [PATCH 011/115] nixos/wpa_supplicant: ignore shellcheck nitpick

This can occur if one enables `systemd.enableStrictShellChecks`.

Shellcheck itself writes on this notice that one should use arrays in
this situation. I tried to do that, but the curly braces with nix
variable expansion gets boring very quickly. As such, we just ignore
this nitpick, as the use is reasonable here.
https://www.shellcheck.net/wiki/SC2086

Also enable `enableStrictShellChecks` to avoid regressing.
---
 nixos/modules/services/networking/wpa_supplicant.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixos/modules/services/networking/wpa_supplicant.nix b/nixos/modules/services/networking/wpa_supplicant.nix
index 79bba0314d84..5bcc5e5c38d8 100644
--- a/nixos/modules/services/networking/wpa_supplicant.nix
+++ b/nixos/modules/services/networking/wpa_supplicant.nix
@@ -183,8 +183,10 @@ let
         }
 
         # finally start daemon
+        # shellcheck disable=SC2086
         exec wpa_supplicant $args
       '';
+      enableStrictShellChecks = true;
     };
 
   systemctl = "/run/current-system/systemd/bin/systemctl";

From 15d2df41caad12c31bb187cd93e7be8df512e10b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Manuel=20V=C3=B6gele?= <manuel.voegele@rub.de>
Date: Thu, 27 Nov 2025 16:39:44 +0100
Subject: [PATCH 012/115] nixos/nextcloud: Fix invalid variable name in
 nextcloud-config.php

The variable $file does not exist in nix_read_secret_and_decode_json_file.
This PR updates the code to use the parameter $credential_name instead.
---
 nixos/modules/services/web-apps/nextcloud.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/services/web-apps/nextcloud.nix b/nixos/modules/services/web-apps/nextcloud.nix
index c866f1b7c062..265c455992cf 100644
--- a/nixos/modules/services/web-apps/nextcloud.nix
+++ b/nixos/modules/services/web-apps/nextcloud.nix
@@ -264,7 +264,7 @@ let
           $decoded = json_decode(nix_read_secret($credential_name), true);
 
           if (json_last_error() !== JSON_ERROR_NONE) {
-            error_log(sprintf("Cannot decode %s, because: %s", $file, json_last_error_msg()));
+            error_log(sprintf("Cannot decode %s, because: %s", $credential_name, json_last_error_msg()));
             exit(1);
           }
 

From edcf84b730c31331c9b90471d24e95629ba2121b Mon Sep 17 00:00:00 2001
From: Mynacol <git@mynacol.xyz>
Date: Thu, 27 Nov 2025 17:22:55 +0000
Subject: [PATCH 013/115] boulder: 2025-04-17 -> v0.20251118.0, fix build

Boulder has mostly removed keys and certificates for testing in the
meantime. They have to be generated on-the-fly. The ipki keys just
require minica. The webpki keys would require softhsm and this somehow
fails. We currently get away without them, probably because we have
disabled all the tests that require them.
---
 pkgs/by-name/bo/boulder/package.nix | 21 ++++++++++++++++++---
 1 file changed, 18 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/bo/boulder/package.nix b/pkgs/by-name/bo/boulder/package.nix
index bf412476d179..71a066a55262 100644
--- a/pkgs/by-name/bo/boulder/package.nix
+++ b/pkgs/by-name/bo/boulder/package.nix
@@ -4,17 +4,18 @@
   buildGoModule,
   testers,
   boulder,
+  minica,
   nix-update-script,
 }:
 
 buildGoModule rec {
   pname = "boulder";
-  version = "2025-04-17";
+  version = "0.20251118.0";
 
   src = fetchFromGitHub {
     owner = "letsencrypt";
     repo = "boulder";
-    tag = "release-${version}";
+    tag = "v${version}";
     leaveDotGit = true;
     postFetch = ''
       pushd $out
@@ -22,11 +23,16 @@ buildGoModule rec {
       find $out -name .git -print0 | xargs -0 rm -rf
       popd
     '';
-    hash = "sha256-FXk+JZJ1azpgN6IQ9aYmpUEO1CGs9/3sog1NjrfB4d8=";
+    hash = "sha256-JVkIu8Fh5F8WQXa45I0hnSedAaIQIOFidtWVpVHbAWA=";
   };
 
   vendorHash = null;
 
+  postPatch = ''
+    # We already built the application with custom settings. This fails, so we have to disable it.
+    substituteInPlace test/certs/generate.sh --replace-fail 'make build' ""
+  '';
+
   subPackages = [ "cmd/boulder" ];
 
   ldflags = [
@@ -40,9 +46,14 @@ buildGoModule rec {
     ldflags+=" -X \"github.com/letsencrypt/boulder/core.BuildTime=$(date -u -d @0)\""
   '';
 
+  nativeCheckInputs = [ minica ];
+
   preCheck = ''
     # Test all targets.
     unset subPackages
+    # Generate integration test certificates, but skip webpki certificates that are hard to make without errors and are currently unneeded.
+    mkdir test/certs/webpki
+    bash test/certs/generate.sh
   '';
 
   # Tests that fail or require additional services.
@@ -58,6 +69,7 @@ buildGoModule rec {
     "TestAddPrecertificateIncomplete"
     "TestAddPrecertificateKeyHash"
     "TestAddPrecertificateNoOCSP"
+    "TestAddRateLimitOverride"
     "TestAddRegistration"
     "TestAddReplacementOrder"
     "TestAddSerial"
@@ -110,6 +122,7 @@ buildGoModule rec {
     "TestEnforceJWSAuthType"
     "TestExactPublicSuffixCertLimit"
     "TestExtractJWK"
+    "TestExtractRequestTarget"
     "TestFQDNSetExists"
     "TestFQDNSetTimestampsForWindow"
     "TestFQDNSets"
@@ -249,6 +262,8 @@ buildGoModule rec {
     "TestRecheckCAAFail"
     "TestRecheckCAAInternalServerError"
     "TestRecheckCAASuccess"
+    "TestRecheckInvalidIdentifierType"
+    "TestRecheckSkipIPAddress"
     "TestRedisSource_BatchSetAndGet"
     "TestRedisSource_Ping"
     "TestRegistrationsPerIPOverrideUsage"

From 05813faa0191327f10b28f4809af09275493247b Mon Sep 17 00:00:00 2001
From: Aaron Jheng <wentworth@outlook.com>
Date: Fri, 28 Nov 2025 13:07:15 +0800
Subject: [PATCH 014/115] protoc-gen-go-grpc: 1.5.1 -> 1.6.0

---
 pkgs/by-name/pr/protoc-gen-go-grpc/package.nix | 17 +++++++++++------
 1 file changed, 11 insertions(+), 6 deletions(-)

diff --git a/pkgs/by-name/pr/protoc-gen-go-grpc/package.nix b/pkgs/by-name/pr/protoc-gen-go-grpc/package.nix
index ffab717e5540..95069389899e 100644
--- a/pkgs/by-name/pr/protoc-gen-go-grpc/package.nix
+++ b/pkgs/by-name/pr/protoc-gen-go-grpc/package.nix
@@ -2,27 +2,32 @@
   buildGoModule,
   fetchFromGitHub,
   lib,
+  testers,
 }:
 
-buildGoModule rec {
+buildGoModule (finalAttrs: {
   pname = "protoc-gen-go-grpc";
-  version = "1.5.1";
+  version = "1.6.0";
   modRoot = "cmd/protoc-gen-go-grpc";
 
   src = fetchFromGitHub {
     owner = "grpc";
     repo = "grpc-go";
-    rev = "cmd/protoc-gen-go-grpc/v${version}";
-    hash = "sha256-PAUM0chkZCb4hGDQtCgHF3omPm0jP1sSDolx4EuOwXo=";
+    rev = "cmd/protoc-gen-go-grpc/v${finalAttrs.version}";
+    hash = "sha256-Ay8X7NoS81ubMtFMrvQINhGAFV/Yh75AXh7/Y9lCJDo=";
   };
 
-  vendorHash = "sha256-yn6jo6Ku/bnbSX8FL0B/Uu3Knn59r1arjhsVUkZ0m9g=";
+  vendorHash = "sha256-s26T7pht7YU1LJIM3edtuPb+KVezqG3m+8CxM+l1ty4=";
 
   ldflags = [
     "-s"
     "-w"
   ];
 
+  passthru.tests.version = testers.testVersion {
+    package = finalAttrs.finalPackage;
+  };
+
   meta = {
     description = "Go language implementation of gRPC. HTTP/2 based RPC";
     homepage = "https://grpc.io/";
@@ -30,4 +35,4 @@ buildGoModule rec {
     maintainers = with lib.maintainers; [ aaronjheng ];
     mainProgram = "protoc-gen-go-grpc";
   };
-}
+})

From 8f9eaf7d61a3ae3d89180c02f7d0a01f9dfe554b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 30 Nov 2025 11:32:12 +0000
Subject: [PATCH 015/115] vorta: 0.10.3 -> 0.11.0

---
 pkgs/by-name/vo/vorta/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/vo/vorta/package.nix b/pkgs/by-name/vo/vorta/package.nix
index ac1911cbe607..f7fcc6c6c641 100644
--- a/pkgs/by-name/vo/vorta/package.nix
+++ b/pkgs/by-name/vo/vorta/package.nix
@@ -11,14 +11,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "vorta";
-  version = "0.10.3";
+  version = "0.11.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "borgbase";
     repo = "vorta";
     tag = "v${version}";
-    hash = "sha256-VhM782mFWITA0VlKw0sBIu/UxUqlFLgq5XVdCpQggCw=";
+    hash = "sha256-/60KVJGKNz3aouv5jzubFlz+AxPEbRDSv4ZO9MEi3V0=";
   };
 
   nativeBuildInputs = [

From 3ddbd28c16fee8bec91c6c4e92f668d60c19c122 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 30 Nov 2025 12:29:52 +0000
Subject: [PATCH 016/115] karate: 1.5.1 -> 1.5.2

---
 pkgs/by-name/ka/karate/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ka/karate/package.nix b/pkgs/by-name/ka/karate/package.nix
index 782ef91e23cf..405f869dc7c3 100644
--- a/pkgs/by-name/ka/karate/package.nix
+++ b/pkgs/by-name/ka/karate/package.nix
@@ -8,11 +8,11 @@
 
 stdenvNoCC.mkDerivation rec {
   pname = "karate";
-  version = "1.5.1";
+  version = "1.5.2";
 
   src = fetchurl {
     url = "https://github.com/karatelabs/karate/releases/download/v${version}/karate-${version}.jar";
-    sha256 = "sha256-Dk7rd9exdTSvauqcAldT3N597TeF+MNoLTx4OmOGcxE=";
+    sha256 = "sha256-zPR0DGShVMTCRX1vD9GajzeQLCnTKqxOIwEuCoeGFL4=";
   };
   dontUnpack = true;
 

From ff5cb11900663e00d4a0aadcd17904ed2d33b315 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 30 Nov 2025 12:31:06 +0000
Subject: [PATCH 017/115] clap: 1.2.6 -> 1.2.7

---
 pkgs/by-name/cl/clap/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/cl/clap/package.nix b/pkgs/by-name/cl/clap/package.nix
index d7366c96a0a0..e3ae65334548 100644
--- a/pkgs/by-name/cl/clap/package.nix
+++ b/pkgs/by-name/cl/clap/package.nix
@@ -8,13 +8,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "clap";
-  version = "1.2.6";
+  version = "1.2.7";
 
   src = fetchFromGitHub {
     owner = "free-audio";
     repo = "clap";
     rev = finalAttrs.version;
-    hash = "sha256-QyIuuiwFg5DP2Ao/LOKYiBXxKHQ0FbFhssIIUnEQz+c=";
+    hash = "sha256-FtsqfpUBn0YGEyhRrJnPGSqrawS1g3F/exVGAuvXkRQ=";
   };
 
   postPatch = ''

From 66fbc3582b5a51d06f531abc8b2242bcd248c934 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 30 Nov 2025 12:36:28 +0000
Subject: [PATCH 018/115] cordova: 12.0.0 -> 13.0.0

---
 pkgs/by-name/co/cordova/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/co/cordova/package.nix b/pkgs/by-name/co/cordova/package.nix
index 568566383c11..079a5ceea088 100644
--- a/pkgs/by-name/co/cordova/package.nix
+++ b/pkgs/by-name/co/cordova/package.nix
@@ -6,16 +6,16 @@
 
 buildNpmPackage rec {
   pname = "cordova";
-  version = "12.0.0";
+  version = "13.0.0";
 
   src = fetchFromGitHub {
     owner = "apache";
     repo = "cordova-cli";
     tag = version;
-    hash = "sha256-fEV7NlRcRpyeRplsdXHI2U4/89DsvKQpVwHD5juiNPo=";
+    hash = "sha256-GJTrFGrUzSQ/Hsphn0zkjFYQkFw5i7ntc8HqIYdOYL4=";
   };
 
-  npmDepsHash = "sha256-ZMxZiwCgqzOBwDXeTfIEwqFVdM9ysWeE5AbX7rUdwIc=";
+  npmDepsHash = "sha256-y81NdwF+RU20jmCi+Fou3Vc9ivt1x8JOj7biAsuSYDg=";
 
   dontNpmBuild = true;
 

From c368e7a0c17782e1f96ba957ebd8df15181fb590 Mon Sep 17 00:00:00 2001
From: Acid Bong <acidbong@tilde.club>
Date: Sun, 30 Nov 2025 14:33:58 +0200
Subject: [PATCH 019/115] pinsel: unstable-2021-09-13 -> 0-unstable-2022-03-27,
 license is MIT now

Diff: https://github.com/Nooo37/pinsel/compare/24b0205ca041511b3efb2a75ef296539442f9f54...4955b93365a1816bffbddc3d2ddfe3f4b3d60107
---
 pkgs/by-name/pi/pinsel/package.nix | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/pi/pinsel/package.nix b/pkgs/by-name/pi/pinsel/package.nix
index 4699aabe70b6..f67d2c0d07d1 100644
--- a/pkgs/by-name/pi/pinsel/package.nix
+++ b/pkgs/by-name/pi/pinsel/package.nix
@@ -10,13 +10,13 @@
 
 stdenv.mkDerivation {
   pname = "pinsel";
-  version = "unstable-2021-09-13";
+  version = "0-unstable-2022-03-27";
 
   src = fetchFromGitHub {
     owner = "Nooo37";
     repo = "pinsel";
-    rev = "24b0205ca041511b3efb2a75ef296539442f9f54";
-    sha256 = "sha256-w+jiKypZODsmZq3uWGNd8PZhe1SowHj0thcQTX8WHfQ=";
+    rev = "4955b93365a1816bffbddc3d2ddfe3f4b3d60107";
+    hash = "sha256-H5DCAb8lJx2W4LNeGV+WOIiLUHsRVv1gSU2YMegkDFM=";
   };
 
   strictDeps = true;
@@ -40,8 +40,7 @@ stdenv.mkDerivation {
   meta = with lib; {
     description = "Minimal screenshot annotation tool with lua config";
     homepage = "https://github.com/Nooo37/pinsel";
-    # no license
-    license = licenses.unfree;
+    license = licenses.mit;
     maintainers = with maintainers; [ lom ];
     mainProgram = "pinsel";
   };

From b5d380e76021353b7b75a2ff5d864e520ed92d47 Mon Sep 17 00:00:00 2001
From: Acid Bong <acidbong@tilde.club>
Date: Sun, 30 Nov 2025 14:56:27 +0200
Subject: [PATCH 020/115] pinsel: limit to Linux

---
 pkgs/by-name/pi/pinsel/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/pi/pinsel/package.nix b/pkgs/by-name/pi/pinsel/package.nix
index f67d2c0d07d1..03b4ce29d350 100644
--- a/pkgs/by-name/pi/pinsel/package.nix
+++ b/pkgs/by-name/pi/pinsel/package.nix
@@ -42,6 +42,7 @@ stdenv.mkDerivation {
     homepage = "https://github.com/Nooo37/pinsel";
     license = licenses.mit;
     maintainers = with maintainers; [ lom ];
+    platforms = platforms.linux;
     mainProgram = "pinsel";
   };
 }

From a2532f3a69dbae2a6047040f2f03cc063acad5b2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 30 Nov 2025 17:34:41 +0000
Subject: [PATCH 021/115] vscode-extensions.visualjj.visualjj: 0.20.0 -> 0.20.2

---
 .../vscode/extensions/visualjj.visualjj/default.nix    | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/applications/editors/vscode/extensions/visualjj.visualjj/default.nix b/pkgs/applications/editors/vscode/extensions/visualjj.visualjj/default.nix
index caec8fdc6765..d806355197e7 100644
--- a/pkgs/applications/editors/vscode/extensions/visualjj.visualjj/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/visualjj.visualjj/default.nix
@@ -11,26 +11,26 @@ vscode-utils.buildVscodeMarketplaceExtension {
       sources = {
         "x86_64-linux" = {
           arch = "linux-x64";
-          hash = "sha256-P5LEN+wTfJ9p0vG4z/FAB4u2hFLcqy7Xc18qC4W5x8U=";
+          hash = "sha256-NXlV80CV6EyALfJHT3x3pfjGiJfYxPT2JXTADMfB7yA=";
         };
         "x86_64-darwin" = {
           arch = "darwin-x64";
-          hash = "sha256-cNiXCrOw3ET/BTfMxYfr01F+5lTXbKH3vKpRQQdnRLc=";
+          hash = "sha256-NWak0NXK5SxGm7JLpqR7zapEzxG+CDFdTcZDyCY6ifk=";
         };
         "aarch64-linux" = {
           arch = "linux-arm64";
-          hash = "sha256-zCGwaw5Dgd0o5t+h0sjPZ1nDp/JqC2Wx4QfQYv3jg4w=";
+          hash = "sha256-9lJfrqVFTROMqLaO9SUx9msACjHu0lTSKLRPPA8r8AM=";
         };
         "aarch64-darwin" = {
           arch = "darwin-arm64";
-          hash = "sha256-M5BQdlEe5eN91Mz8trMFbFNeRoMIpGSOHpBSGQQVJc0=";
+          hash = "sha256-iz3+iEXCYzItNTrAlzZAuM80U+TNlz/n1nljRvOfX3k=";
         };
       };
     in
     {
       name = "visualjj";
       publisher = "visualjj";
-      version = "0.20.0";
+      version = "0.20.2";
     }
     // sources.${stdenvNoCC.hostPlatform.system}
       or (throw "Unsupported system ${stdenvNoCC.hostPlatform.system}");

From eb4a9720e5367f64799f7809d62e129468c32338 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 30 Nov 2025 19:19:52 +0000
Subject: [PATCH 022/115] ocamlPackages.dns: 10.2.2 -> 10.2.3

---
 pkgs/development/ocaml-modules/dns/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/ocaml-modules/dns/default.nix b/pkgs/development/ocaml-modules/dns/default.nix
index 539005aac186..649fcf6bb08d 100644
--- a/pkgs/development/ocaml-modules/dns/default.nix
+++ b/pkgs/development/ocaml-modules/dns/default.nix
@@ -18,13 +18,13 @@
 
 buildDunePackage (finalAttrs: {
   pname = "dns";
-  version = "10.2.2";
+  version = "10.2.3";
 
   minimalOCamlVersion = "4.13";
 
   src = fetchurl {
     url = "https://github.com/mirage/ocaml-dns/releases/download/v${finalAttrs.version}/dns-${finalAttrs.version}.tbz";
-    hash = "sha256-USPXFn9fs6WrcM8LPMyWUInsRA3Aft6r+MBWjuc3p/A=";
+    hash = "sha256-yJWy0RLEqmDAmHoJ61nw2WAr2AT+z0EkeVvhbkqGc0o=";
   };
 
   propagatedBuildInputs = [

From cbd8146ded6480fc13a40d07a18c28d7df5580be Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 30 Nov 2025 19:41:01 +0000
Subject: [PATCH 023/115] python3Packages.ripser: 0.6.12 -> 0.6.13

---
 pkgs/development/python-modules/ripser/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/ripser/default.nix b/pkgs/development/python-modules/ripser/default.nix
index 8f071f3f7908..86284af34989 100644
--- a/pkgs/development/python-modules/ripser/default.nix
+++ b/pkgs/development/python-modules/ripser/default.nix
@@ -20,14 +20,14 @@
 
 buildPythonPackage rec {
   pname = "ripser";
-  version = "0.6.12";
+  version = "0.6.13";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "scikit-tda";
     repo = "ripser.py";
     tag = "v${version}";
-    hash = "sha256-AviAcpaK0UWqa6spba9bLmBQnprINCrZC/wuRLqiXVA=";
+    hash = "sha256-m6EJrz0RBuKlzDX41Gm/W2k71YQK9CgfZN4o84cQYCs=";
   };
 
   build-system = [

From d698efc5058d85eecc48426344ae9db03436b376 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 30 Nov 2025 20:04:51 +0000
Subject: [PATCH 024/115] kak-tree-sitter-unwrapped: 2.0.0 -> 3.0.0

---
 pkgs/by-name/ka/kak-tree-sitter-unwrapped/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ka/kak-tree-sitter-unwrapped/package.nix b/pkgs/by-name/ka/kak-tree-sitter-unwrapped/package.nix
index b8e733d681a1..79795fc7024d 100644
--- a/pkgs/by-name/ka/kak-tree-sitter-unwrapped/package.nix
+++ b/pkgs/by-name/ka/kak-tree-sitter-unwrapped/package.nix
@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "kak-tree-sitter-unwrapped";
-  version = "2.0.0";
+  version = "3.0.0";
 
   src = fetchFromSourcehut {
     owner = "~hadronized";
     repo = "kak-tree-sitter";
     rev = "kak-tree-sitter-v${version}";
-    hash = "sha256-vFhNxixXsezK3Qm9d5hEiIttSjcuqHfgCHYrEOeKWvs=";
+    hash = "sha256-9QeTHmDTw1Qxnl+AnqCZgxlCCycq5qYF0aM/6fu8qwM=";
   };
 
-  cargoHash = "sha256-tO6i19UuistT4yUc0YzZOh+8M5kXq5l1NUTBUOA3YT8=";
+  cargoHash = "sha256-lZNM5HqICP6JfaMiBjACcUNRTTTIRhq2ou8cOLU0yOU=";
 
   passthru = {
     updateScript = nix-update-script { };

From 9b5fe4fca50631536fc6855359a5cb73712a107b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 30 Nov 2025 22:02:24 +0000
Subject: [PATCH 025/115] grafanaPlugins.grafana-metricsdrilldown-app: 1.0.23
 -> 1.0.24

---
 .../grafana/plugins/grafana-metricsdrilldown-app/default.nix  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/monitoring/grafana/plugins/grafana-metricsdrilldown-app/default.nix b/pkgs/servers/monitoring/grafana/plugins/grafana-metricsdrilldown-app/default.nix
index f5389ce0185c..5d05663c516a 100644
--- a/pkgs/servers/monitoring/grafana/plugins/grafana-metricsdrilldown-app/default.nix
+++ b/pkgs/servers/monitoring/grafana/plugins/grafana-metricsdrilldown-app/default.nix
@@ -2,8 +2,8 @@
 
 grafanaPlugin {
   pname = "grafana-metricsdrilldown-app";
-  version = "1.0.23";
-  zipHash = "sha256-ZQYVKLmIFsK9+u8lVR4Y/gVTtv0klDaSM7Yh+oe0qOE=";
+  version = "1.0.24";
+  zipHash = "sha256-aoivPnxr8/8EQhz3hD/WAgvfwQ3nUXWjs22izx7yDp8=";
   meta = with lib; {
     description = "Queryless experience for browsing Prometheus-compatible metrics. Quickly find related metrics without writing PromQL queries";
     license = licenses.agpl3Only;

From 402e0e93e7898bbcdb8b48ecb25dccf3ee90a276 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 30 Nov 2025 22:18:59 +0000
Subject: [PATCH 026/115] python3Packages.types-aiobotocore: 2.25.2 ->
 2.26.0.post1

---
 pkgs/development/python-modules/types-aiobotocore/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/types-aiobotocore/default.nix b/pkgs/development/python-modules/types-aiobotocore/default.nix
index 479aacc55103..55930497adae 100644
--- a/pkgs/development/python-modules/types-aiobotocore/default.nix
+++ b/pkgs/development/python-modules/types-aiobotocore/default.nix
@@ -364,13 +364,13 @@
 
 buildPythonPackage rec {
   pname = "types-aiobotocore";
-  version = "2.25.2";
+  version = "2.26.0.post1";
   pyproject = true;
 
   src = fetchPypi {
     pname = "types_aiobotocore";
     inherit version;
-    hash = "sha256-ayRYrBwJmd4LpKHc+/O8DVx8ouoMcvZzKr5n0I6/AkA=";
+    hash = "sha256-oKrbnf0Q7LK8pLLqxZxxp1NrUBRfMCeuv4AIRYklLtQ=";
   };
 
   build-system = [ setuptools ];

From b4c351353c524bb8061d90ef07088496a2550fb0 Mon Sep 17 00:00:00 2001
From: Jost Alemann <alemann@posteo.com>
Date: Mon, 1 Dec 2025 17:52:37 +0100
Subject: [PATCH 027/115] fishPlugins.done: 1.20.0 -> 1.20.1

Changelog: https://github.com/franciscolourenco/done/releases/tag/1.20.1
Diff: https://github.com/franciscolourenco/done/compare/1.20.0...1.20.1
---
 pkgs/shells/fish/plugins/done.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/shells/fish/plugins/done.nix b/pkgs/shells/fish/plugins/done.nix
index 0cfd51c1acfd..f3f564b73f31 100644
--- a/pkgs/shells/fish/plugins/done.nix
+++ b/pkgs/shells/fish/plugins/done.nix
@@ -7,13 +7,13 @@
 
 buildFishPlugin rec {
   pname = "done";
-  version = "1.20.0";
+  version = "1.20.1";
 
   src = fetchFromGitHub {
     owner = "franciscolourenco";
     repo = "done";
     rev = version;
-    hash = "sha256-WA6DBrPBuXRIloO05UBunTJ9N01d6tO1K1uqojjO0mo=";
+    hash = "sha256-GXKchepYti5Pb1ODFeJL3apDGg7Tn69skQQhvV2nSeQ=";
   };
 
   checkPlugins = [ fishtape ];

From 3df986e45e2171fe645d6dc76bb266252fdc262e Mon Sep 17 00:00:00 2001
From: YanWQ-monad <YanWQmonad@gmail.com>
Date: Tue, 2 Dec 2025 02:07:15 +0800
Subject: [PATCH 028/115] smokeping: add LWPProtocolHttps dependency

---
 pkgs/by-name/sm/smokeping/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/sm/smokeping/package.nix b/pkgs/by-name/sm/smokeping/package.nix
index cc17ecae7ac6..d5156d3f696b 100644
--- a/pkgs/by-name/sm/smokeping/package.nix
+++ b/pkgs/by-name/sm/smokeping/package.nix
@@ -40,6 +40,7 @@ stdenv.mkDerivation rec {
     NetOpenSSH
     NetSNMP
     LWP
+    LWPProtocolHttps
     IOTty
     fping
     NetDNS

From 28a39c78db35a0d0443b3995fdcd855769cf9588 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20Ha=CC=88cker?= <spamfaenger@gmx.de>
Date: Mon, 1 Dec 2025 22:37:09 +0100
Subject: [PATCH 029/115] lixPackageSets.latest.nix-init init

Also requires a lix override
---
 pkgs/tools/package-management/lix/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/tools/package-management/lix/default.nix b/pkgs/tools/package-management/lix/default.nix
index 3d402d6fd06e..ebf4a6fd6b09 100644
--- a/pkgs/tools/package-management/lix/default.nix
+++ b/pkgs/tools/package-management/lix/default.nix
@@ -23,6 +23,7 @@
   nix-serve-ng,
   colmena,
   nix-update,
+  nix-init,
 
   storeDir ? "/nix/store",
   stateDir ? "/nix/var",
@@ -136,6 +137,10 @@ let
             nix = self.lix;
             inherit (self) nixpkgs-review;
           };
+
+          nix-init = nix-init.override {
+            nix = self.lix;
+          };
         };
     };
 

From 3c6c645af3bf940d382a632c6a4da8dabcfd7b1c Mon Sep 17 00:00:00 2001
From: Nadir Ishiguro <23151917+nadir-ishiguro@users.noreply.github.com>
Date: Tue, 2 Dec 2025 11:53:08 +0100
Subject: [PATCH 030/115] kopia: 0.22.2 -> 0.22.3

Changelog: https://github.com/kopia/kopia/releases/tag/v0.22.3
---
 pkgs/by-name/ko/kopia/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ko/kopia/package.nix b/pkgs/by-name/ko/kopia/package.nix
index 89e297077923..f6f26082ed38 100644
--- a/pkgs/by-name/ko/kopia/package.nix
+++ b/pkgs/by-name/ko/kopia/package.nix
@@ -11,16 +11,16 @@
 
 buildGoModule rec {
   pname = "kopia";
-  version = "0.22.2";
+  version = "0.22.3";
 
   src = fetchFromGitHub {
     owner = "kopia";
     repo = "kopia";
     tag = "v${version}";
-    hash = "sha256-UtyOMXX6Q0fhlnSMmI5d+0BHGvoWkPZbcm9B6vWG05Y=";
+    hash = "sha256-5oNam99Mij78snSO6jiGPYzeD68sXEBKM2dGQtTUrww=";
   };
 
-  vendorHash = "sha256-zjUkVU9I+Dp21QcOZPT30Ki570vQJPyK4UYSy8PEiZI=";
+  vendorHash = "sha256-szlCiZOLU0KVWb2YX3Wmicrumn+fNm2AWdPxaJZZT90=";
 
   subPackages = [ "." ];
 

From 37bc2522ec8c7ddc42584cddbbb7d98a3338c138 Mon Sep 17 00:00:00 2001
From: Antonio <vozaanthony@gmail.com>
Date: Mon, 1 Dec 2025 16:19:00 +0100
Subject: [PATCH 031/115] hayabusa-sec: 3.3.0-unstable-2025-07-17 ->
 3.7.0-unstable-2025-12-02

---
 pkgs/by-name/ha/hayabusa-sec/package.nix | 20 ++++++++++++++++----
 1 file changed, 16 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ha/hayabusa-sec/package.nix b/pkgs/by-name/ha/hayabusa-sec/package.nix
index 8dc4adb95493..bc563871de4c 100644
--- a/pkgs/by-name/ha/hayabusa-sec/package.nix
+++ b/pkgs/by-name/ha/hayabusa-sec/package.nix
@@ -2,6 +2,8 @@
   lib,
   rustPlatform,
   fetchFromGitHub,
+  makeWrapper,
+  unstableGitUpdater,
   pkg-config,
   openssl,
   rust-jemalloc-sys,
@@ -9,20 +11,21 @@
 
 rustPlatform.buildRustPackage {
   pname = "hayabusa-sec";
-  version = "3.3.0-unstable-2025-07-17";
+  version = "3.7.0-unstable-2025-12-02";
 
   src = fetchFromGitHub {
     owner = "Yamato-Security";
     repo = "hayabusa";
-    rev = "feaa165b4c0af34919ad26f634cb684e23172359";
-    hash = "sha256-h08InhNVW33IjPA228gv6Enlg6EKmj0yHb/UvJ/f7uw=";
+    rev = "1c4f332b446f20af154257b2e9b581f7bcb4b1a2";
+    hash = "sha256-JWb54yudfB6pOMZca8sFeoRqNA7M//xJ3IBKfIcGBnM=";
     # Include the hayabusa-rules
     fetchSubmodules = true;
   };
 
-  cargoHash = "sha256-wcH1Ron5Zx2ypWyaW0z7L9rCanAcosvpPQnP60qbvWQ=";
+  cargoHash = "sha256-JIHkFokaZ+nt1hW+gRxFrb1DVZcm4jsZKT12gx/BRCA=";
 
   nativeBuildInputs = [
+    makeWrapper
     pkg-config
   ];
 
@@ -39,6 +42,15 @@ rustPlatform.buildRustPackage {
   # > error: unexpected argument '--skip' found
   doCheck = false;
 
+  postInstall = ''
+    mkdir -p $out/share/hayabusa-sec
+    cp -r rules $out/share/hayabusa-sec/
+    mv $out/bin/hayabusa $out/share/hayabusa-sec/
+    makeWrapper $out/share/hayabusa-sec/hayabusa $out/bin/hayabusa
+  '';
+
+  passthru.updateScript = unstableGitUpdater { };
+
   meta = {
     description = "Sigma-based threat hunting and fast forensics timeline generator for Windows event logs";
     homepage = "https://github.com/Yamato-Security/hayabusa";

From 9cd61a47a9cb7f26e45c55058d1a0316c3a2132e Mon Sep 17 00:00:00 2001
From: aleksana <me@aleksana.moe>
Date: Fri, 28 Nov 2025 21:39:57 +0800
Subject: [PATCH 032/115] cdktf-cli: disable versionCheckHook on darwin

---
 pkgs/by-name/cd/cdktf-cli/package.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/cd/cdktf-cli/package.nix b/pkgs/by-name/cd/cdktf-cli/package.nix
index 307a09748376..7573abdb5eaa 100644
--- a/pkgs/by-name/cd/cdktf-cli/package.nix
+++ b/pkgs/by-name/cd/cdktf-cli/package.nix
@@ -142,8 +142,13 @@ stdenv.mkDerivation (finalAttrs: {
       "$out/lib/node_modules/cdktf-cli/node_modules/@cdktf/hcl2json/main.wasm"
   '';
 
-  nativeInstallCheckInputs = [ versionCheckHook ];
-  doInstallCheck = true;
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+
+  # Tries to write to /var/empty/.terraform.d on darwin
+  # even with writableTmpDirAsHomeHook and CHECKPOINT_DISABLE=1
+  doInstallCheck = stdenv.hostPlatform.isLinux;
 
   passthru = {
     tests.version = testers.testVersion {

From 6238a1d00dd02fffb9afa576bbb71056a92c54b5 Mon Sep 17 00:00:00 2001
From: rnhmjoj <rnhmjoj@inventati.org>
Date: Tue, 2 Dec 2025 12:12:15 +0100
Subject: [PATCH 033/115] nixos/networking: fix wlanInterfaces udev rule

For some reason, starting with systemd v258, the INTERFACE property is
now protected but ID_NET_NAME can be set instead.
---
 nixos/modules/tasks/network-interfaces.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/tasks/network-interfaces.nix b/nixos/modules/tasks/network-interfaces.nix
index a88eb8b0ca64..2a6d00296303 100644
--- a/nixos/modules/tasks/network-interfaces.nix
+++ b/nixos/modules/tasks/network-interfaces.nix
@@ -1926,7 +1926,7 @@ in
               # Udev attributes for systemd to name the device and to create a .device target.
               systemdAttrs =
                 n:
-                ''NAME:="${n}", ENV{INTERFACE}="${n}", ENV{SYSTEMD_ALIAS}="/sys/subsystem/net/devices/${n}", TAG+="systemd"'';
+                ''NAME:="${n}", ENV{ID_NET_NAME}="${n}", ENV{SYSTEMD_ALIAS}="/sys/subsystem/net/devices/${n}", TAG+="systemd"'';
             in
             flip (concatMapStringsSep "\n") (attrNames wlanDeviceInterfaces) (
               device:

From 586b2f10be70129a9535ef1ad4934f6e80ca15c7 Mon Sep 17 00:00:00 2001
From: Sarah Clark <seclark@nextquestion.net>
Date: Sat, 29 Nov 2025 14:38:31 -0800
Subject: [PATCH 034/115] python3Packages.peft: 0.17.1 -> 0.18.0

CHANGELOG: https://github.com/huggingface/peft/releases/tag/v0.18.0
DIFF: https://github.com/huggingface/peft/compare/v0.17.1...v0.18.0
---
 pkgs/development/python-modules/peft/default.nix | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/peft/default.nix b/pkgs/development/python-modules/peft/default.nix
index 5853e01ce922..eca64455fe81 100644
--- a/pkgs/development/python-modules/peft/default.nix
+++ b/pkgs/development/python-modules/peft/default.nix
@@ -31,14 +31,14 @@
 
 buildPythonPackage rec {
   pname = "peft";
-  version = "0.17.1";
+  version = "0.18.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "huggingface";
     repo = "peft";
     tag = "v${version}";
-    hash = "sha256-xtpxwbKf7ZaUYblGdwtPZE09qrlBQTMm5oryUJwa6AA=";
+    hash = "sha256-LLV6fMFPh45IvNJv9totMYDoKAkZW/1Bx3qOlDTWMLA=";
   };
 
   build-system = [ setuptools ];
@@ -73,6 +73,8 @@ buildPythonPackage rec {
   # These tests fail when MPS devices are detected
   disabledTests = lib.optional stdenv.hostPlatform.isDarwin [
     "gpu"
+    "test_save_load"
+    "test_resume_training_model_with_topk_weights"
   ];
 
   disabledTestPaths = [
@@ -81,6 +83,7 @@ buildPythonPackage rec {
 
     # Require internet access to download a dataset
     "tests/test_adaption_prompt.py"
+    "tests/test_arrow.py"
     "tests/test_auto.py"
     "tests/test_boft.py"
     "tests/test_cpt.py"
@@ -92,10 +95,10 @@ buildPythonPackage rec {
     "tests/test_hub_features.py"
     "tests/test_incremental_pca.py"
     "tests/test_initialization.py"
+    "tests/test_lora_variants.py"
     "tests/test_mixed.py"
     "tests/test_multitask_prompt_tuning.py"
     "tests/test_other.py"
-    "tests/test_other.py"
     "tests/test_poly.py"
     "tests/test_stablediffusion.py"
     "tests/test_trainable_tokens.py"

From 10d37a8c4145064b143305b9610979a1bf313f26 Mon Sep 17 00:00:00 2001
From: ghpzin <ghpzin@gmail.com>
Date: Wed, 17 Sep 2025 13:24:32 +0300
Subject: [PATCH 035/115] evince: fix build with gcc15

- add "-DHAVE_STRING_H" and "-DHAVE_STDLIB_H" to
`env.NIX_CFLAGS_COMPILE`, similar to what archlinux did in:
https://gitlab.archlinux.org/archlinux/packaging/packages/evince/-/blob/d15c1c165edcb39b3a3a15434a1fdb8ca63b91be/PKGBUILD#L73-74

Alternative would be to patch these declarations out of `kpathsea` source:
https://gitweb.gentoo.org/repo/gentoo.git/plain/dev-libs/kpathsea/files/kpathsea-6.4.0_p20240311-c23.patch?id=d36d6a45aa033cb28dd5850a0fcce501cb9d85a9
or wait for next `texlive` update that includes these fixes:
https://github.com/TeX-Live/texlive-source/commit/cc687b6c0ae8c6a4b566646282a7bc702d822e6d
https://github.com/TeX-Live/texlive-source/commit/4451d937bea57c29b5f9775c5920b9a21a1f140a

Fixes build failure with gcc15:
```
/nix/store/a769c9g0af5g4l4mhh3rcf6ayzmyaakf-texlive-bin-2025-dev/include/kpathsea/c-memstr.h:57:14:
error: conflicting types for 'strtok'; have 'char *(void)'
   57 | extern char *strtok ();
      |              ^~~~~~
In file included from ../backend/dvi/mdvi-lib/paper.c:20:
/nix/store/i1qha7him4faq593wwl1zmhg2pc6lz98-glibc-2.40-66-dev/include/string.h:356:14:
note: previous declaration of 'strtok' with type 'char *(char * restrict,  const char * restrict)'
  356 | extern char *strtok (char *__restrict __s, const char *__restrict __delim)
      |              ^~~~~~
/nix/store/a769c9g0af5g4l4mhh3rcf6ayzmyaakf-texlive-bin-2025-dev/include/kpathsea/c-memstr.h:59:14:
error: conflicting types for 'strstr'; have 'char *(void)'
   59 | extern char *strstr ();
      |              ^~~~~~
/nix/store/i1qha7him4faq593wwl1zmhg2pc6lz98-glibc-2.40-66-dev/include/string.h:350:14:
note: previous declaration of 'strstr' with type 'char *(const char *, const char *)'
  350 | extern char *strstr (const char *__haystack, const char *__needle)
      |              ^~~~~~
/nix/store/a769c9g0af5g4l4mhh3rcf6ayzmyaakf-texlive-bin-2025-dev/include/kpathsea/c-std.h:48:14:
error: conflicting types for 'getenv'; have 'char *(void)'
   48 | extern char *getenv ();
      |              ^~~~~~
In file included from ../backend/dvi/mdvi-lib/tfm.c:20:
/nix/store/i1qha7him4faq593wwl1zmhg2pc6lz98-glibc-2.40-66-dev/include/stdlib.h:773:14:
note: previous declaration of 'getenv' with type 'char *(const char *)'
  773 | extern char *getenv (const char *__name) __THROW __nonnull ((1)) __wur;
      |              ^~~~~~
```
---
 pkgs/by-name/ev/evince/package.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pkgs/by-name/ev/evince/package.nix b/pkgs/by-name/ev/evince/package.nix
index 57b71e2b1455..3d1554d752a5 100644
--- a/pkgs/by-name/ev/evince/package.nix
+++ b/pkgs/by-name/ev/evince/package.nix
@@ -120,6 +120,12 @@ stdenv.mkDerivation (finalAttrs: {
     "-Dmultimedia=disabled"
   ];
 
+  # Fix build with gcc15
+  env.NIX_CFLAGS_COMPILE = toString [
+    "-DHAVE_STRING_H"
+    "-DHAVE_STDLIB_H"
+  ];
+
   preFixup = ''
     gappsWrapperArgs+=(--prefix XDG_DATA_DIRS : "${shared-mime-info}/share")
   '';

From 07a48e9dfb7ca6208fbdeceeecaa5d6ead5fcb93 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 3 Dec 2025 14:37:20 +0000
Subject: [PATCH 036/115] unifi: 10.0.156 -> 10.0.161

---
 pkgs/by-name/un/unifi/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/un/unifi/package.nix b/pkgs/by-name/un/unifi/package.nix
index b1757d7150f4..fb1e960a252e 100644
--- a/pkgs/by-name/un/unifi/package.nix
+++ b/pkgs/by-name/un/unifi/package.nix
@@ -10,12 +10,12 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "unifi-controller";
-  version = "10.0.156";
+  version = "10.0.161";
 
   # see https://community.ui.com/releases / https://www.ui.com/download/unifi
   src = fetchurl {
     url = "https://dl.ui.com/unifi/${finalAttrs.version}/unifi_sysvinit_all.deb";
-    hash = "sha256-FlWsCAH6HN7HzoTLJET36FhGi/ci52jSP7132ayKvpA=";
+    hash = "sha256-vk7t9WRR65BPlHspZGmpVc1XUy/OHANRJpR3jI+2wtI=";
   };
 
   nativeBuildInputs = [

From dcd6c7dcd33187967a9ab8835d9f2cc45dbcb42e Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 3 Dec 2025 16:19:26 +0000
Subject: [PATCH 037/115] libretro-shaders-slang: 0-unstable-2025-11-19 ->
 0-unstable-2025-12-02

---
 pkgs/by-name/li/libretro-shaders-slang/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/li/libretro-shaders-slang/package.nix b/pkgs/by-name/li/libretro-shaders-slang/package.nix
index bbab677e56f9..02978f5ea6a4 100644
--- a/pkgs/by-name/li/libretro-shaders-slang/package.nix
+++ b/pkgs/by-name/li/libretro-shaders-slang/package.nix
@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation {
   pname = "libretro-shaders-slang";
-  version = "0-unstable-2025-11-19";
+  version = "0-unstable-2025-12-02";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "slang-shaders";
-    rev = "279b031c92c7a376be47ffdec5fe669fb5dcebc0";
-    hash = "sha256-0OltcN4W0vp7jtDSSIJ2ZanFi5p/efnPDOhaurr3ShY=";
+    rev = "cf5c768ffda2520d4938df68d33fd63fff276c0c";
+    hash = "sha256-0ExGupoxdKAbQ6znzHixivvskFwgO+aKLsRvJlfB0Oc=";
   };
 
   dontConfigure = true;

From 7c96d75875e5a8d2c8aa353164398b2008d15766 Mon Sep 17 00:00:00 2001
From: pinage404 <pinage404@gmail.com>
Date: Wed, 3 Dec 2025 17:20:55 +0100
Subject: [PATCH 038/115] mdbook-yml-header: 0.1.4 -> 0.1.5

---
 pkgs/by-name/md/mdbook-yml-header/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/md/mdbook-yml-header/package.nix b/pkgs/by-name/md/mdbook-yml-header/package.nix
index d0eee046e3ca..f19a6c00e9ae 100644
--- a/pkgs/by-name/md/mdbook-yml-header/package.nix
+++ b/pkgs/by-name/md/mdbook-yml-header/package.nix
@@ -7,17 +7,17 @@
 
 let
   pname = "mdbook-yml-header";
-  version = "0.1.4";
+  version = "0.1.5";
 in
 rustPlatform.buildRustPackage {
   inherit pname version;
 
   src = fetchCrate {
     inherit pname version;
-    hash = "sha256-qRAqZUKOiXTh4cJjczBQ9zAL6voaDvko7elfE6eB2jA=";
+    hash = "sha256-QlclxqH6cKo9QZyUBFCcujT9liTc8lmEheyjFKK7N58=";
   };
 
-  cargoHash = "sha256-C8M2Y7igeDmi337GXWmLcwNTGr1/CTHWWTuMPDtkqxs=";
+  cargoHash = "sha256-iBvVes32G0Ji9gk97axeTzbXlVh0Qn9Bzj64G6oEDFM=";
 
   passthru.updateScript = nix-update-script { };
 

From bec972e912e5253ffd9332ebb1465c49f766c532 Mon Sep 17 00:00:00 2001
From: Nylme <Nylme@protonmail.com>
Date: Thu, 4 Dec 2025 16:59:45 +1100
Subject: [PATCH 039/115] matrix-tuwunel: update 1.4.6 -> 1.4.7

---
 pkgs/by-name/ma/matrix-tuwunel/package.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/ma/matrix-tuwunel/package.nix b/pkgs/by-name/ma/matrix-tuwunel/package.nix
index d2915a8502d6..fcfe5b0b322c 100644
--- a/pkgs/by-name/ma/matrix-tuwunel/package.nix
+++ b/pkgs/by-name/ma/matrix-tuwunel/package.nix
@@ -43,8 +43,8 @@ let
             # The commit on the rocksdb fork, tuwunel-changes branch referenced by the upstream
             # tuwunel flake.lock:
             # https://github.com/matrix-construct/tuwunel/blob/main/flake.lock#L557C17-L557C57
-            rev = "cf7f65d0b377af019661c240f9165b3ef60640c3";
-            hash = "sha256-ZSjvAZBfZkJrBIpw8ANZMbJVb8AeuogvuAipGVE4Qe4=";
+            rev = "9a3a213b55df0b11408102c899a940675c0d90e4";
+            hash = "sha256-aOV/jJjRjNJ3hrRqhCsXlIz05NvEhDF/j5Q5UOQuvp8=";
           };
           version = "tuwunel-changes";
           patches = [ ];
@@ -88,16 +88,16 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "matrix-tuwunel";
-  version = "1.4.6";
+  version = "1.4.7";
 
   src = fetchFromGitHub {
     owner = "matrix-construct";
     repo = "tuwunel";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-EmIBhSxYD52BzwewcIL53e3/7GLY+5nccmAYGf1LPqI=";
+    hash = "sha256-TaMPGxVRV7MpTIdIWylKeiZa22s8EgNGSiiXNUWonfc=";
   };
 
-  cargoHash = "sha256-aVMJr216gkYpanCee6UhNGINAi/EZ0V5m0WaTYpQJcY=";
+  cargoHash = "sha256-ZfC6Rqd3Or23TEoGuKu1pB+USv7rlOEzRYBisoK2Pcc=";
 
   nativeBuildInputs = [
     pkg-config

From 6607c17a21415b05f3cee2bbf3139395efb7fc0b Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:41:40 +0300
Subject: [PATCH 040/115] cargo-benchcmp: add progrm_jarvis to maintainers

---
 pkgs/by-name/ca/cargo-benchcmp/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ca/cargo-benchcmp/package.nix b/pkgs/by-name/ca/cargo-benchcmp/package.nix
index c81559855a73..3981898f7630 100644
--- a/pkgs/by-name/ca/cargo-benchcmp/package.nix
+++ b/pkgs/by-name/ca/cargo-benchcmp/package.nix
@@ -39,6 +39,6 @@ rustPlatform.buildRustPackage rec {
       mit
       unlicense
     ];
-    maintainers = [ ];
+    maintainers = [ maintainers.progrm_jarvis ];
   };
 }

From 9f08b2b4c366165453c46be0b7d3d059a31e4f90 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:41:48 +0300
Subject: [PATCH 041/115] cargo-benchcmp: use finalAttrs

---
 pkgs/by-name/ca/cargo-benchcmp/package.nix | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-benchcmp/package.nix b/pkgs/by-name/ca/cargo-benchcmp/package.nix
index 3981898f7630..12926d7b2cbb 100644
--- a/pkgs/by-name/ca/cargo-benchcmp/package.nix
+++ b/pkgs/by-name/ca/cargo-benchcmp/package.nix
@@ -6,14 +6,14 @@
   stdenv,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-benchcmp";
   version = "0.4.5";
 
   src = fetchFromGitHub {
     owner = "BurntSushi";
     repo = "cargo-benchcmp";
-    tag = version;
+    tag = finalAttrs.version;
     hash = "sha256-J8KFI0V/mOhUlYtVnFAQgPIpXL9/dLhOFxSly4bR00I=";
   };
 
@@ -31,14 +31,14 @@ rustPlatform.buildRustPackage rec {
     "--skip=different_input_colored"
   ];
 
-  meta = with lib; {
+  meta = {
     description = "Small utility to compare Rust micro-benchmarks";
     mainProgram = "cargo-benchcmp";
     homepage = "https://github.com/BurntSushi/cargo-benchcmp";
-    license = with licenses; [
+    license = with lib.licenses; [
       mit
       unlicense
     ];
-    maintainers = [ maintainers.progrm_jarvis ];
+    maintainers = [ lib.maintainers.progrm_jarvis ];
   };
-}
+})

From c38bd731f68c0ec73310fd624f0ce4b2ddfa9376 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:41:55 +0300
Subject: [PATCH 042/115] cargo-benchcmp: add nix-update-script

---
 pkgs/by-name/ca/cargo-benchcmp/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ca/cargo-benchcmp/package.nix b/pkgs/by-name/ca/cargo-benchcmp/package.nix
index 12926d7b2cbb..e802bbf99f41 100644
--- a/pkgs/by-name/ca/cargo-benchcmp/package.nix
+++ b/pkgs/by-name/ca/cargo-benchcmp/package.nix
@@ -4,6 +4,7 @@
   fetchFromGitHub,
   replaceVars,
   stdenv,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -31,6 +32,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "--skip=different_input_colored"
   ];
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Small utility to compare Rust micro-benchmarks";
     mainProgram = "cargo-benchcmp";

From 93ddc6b22d6d13a14262eb23ad6f8461d65f3149 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:42:03 +0300
Subject: [PATCH 043/115] cargo-component: add progrm_jarvis to maintainers

---
 pkgs/by-name/ca/cargo-component/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ca/cargo-component/package.nix b/pkgs/by-name/ca/cargo-component/package.nix
index 237829ae0dcf..a27e0e8ceeae 100644
--- a/pkgs/by-name/ca/cargo-component/package.nix
+++ b/pkgs/by-name/ca/cargo-component/package.nix
@@ -35,7 +35,7 @@ rustPlatform.buildRustPackage rec {
     homepage = "https://github.com/bytecodealliance/cargo-component";
     changelog = "https://github.com/bytecodealliance/cargo-component/releases/tag/${src.rev}";
     license = licenses.asl20;
-    maintainers = [ ];
+    maintainers = [ maintainers.progrm_jarvis ];
     mainProgram = "cargo-component";
   };
 }

From 9ebc1661ede86c789ba40f60942cd8fab9e78393 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:42:12 +0300
Subject: [PATCH 044/115] cargo-component: use finalAttrs

---
 pkgs/by-name/ca/cargo-component/package.nix | 19 ++++++++++++-------
 1 file changed, 12 insertions(+), 7 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-component/package.nix b/pkgs/by-name/ca/cargo-component/package.nix
index a27e0e8ceeae..0976389f2c66 100644
--- a/pkgs/by-name/ca/cargo-component/package.nix
+++ b/pkgs/by-name/ca/cargo-component/package.nix
@@ -4,16 +4,17 @@
   fetchFromGitHub,
   pkg-config,
   openssl,
+  versionCheckHook,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-component";
   version = "0.21.1";
 
   src = fetchFromGitHub {
     owner = "bytecodealliance";
     repo = "cargo-component";
-    rev = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-Tlx14q/2k/0jZZ1nECX7zF/xNTeMCZg/fN+fhRM4uhc=";
   };
 
@@ -30,12 +31,16 @@ rustPlatform.buildRustPackage rec {
   # requires the wasm32-wasi target
   doCheck = false;
 
-  meta = with lib; {
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+
+  meta = {
     description = "Cargo subcommand for creating WebAssembly components based on the component model proposal";
     homepage = "https://github.com/bytecodealliance/cargo-component";
-    changelog = "https://github.com/bytecodealliance/cargo-component/releases/tag/${src.rev}";
-    license = licenses.asl20;
-    maintainers = [ maintainers.progrm_jarvis ];
+    changelog = "https://github.com/bytecodealliance/cargo-component/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.asl20;
+    maintainers = [ lib.maintainers.progrm_jarvis ];
     mainProgram = "cargo-component";
   };
-}
+})

From e6c834ce421099d08878e46eebdd3571c5fc75c4 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:42:20 +0300
Subject: [PATCH 045/115] cargo-component: add nix-update-script

---
 pkgs/by-name/ca/cargo-component/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ca/cargo-component/package.nix b/pkgs/by-name/ca/cargo-component/package.nix
index 0976389f2c66..c3b68694e7ca 100644
--- a/pkgs/by-name/ca/cargo-component/package.nix
+++ b/pkgs/by-name/ca/cargo-component/package.nix
@@ -5,6 +5,7 @@
   pkg-config,
   openssl,
   versionCheckHook,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -35,6 +36,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   nativeInstallCheckInputs = [ versionCheckHook ];
   versionCheckProgramArg = "--version";
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Cargo subcommand for creating WebAssembly components based on the component model proposal";
     homepage = "https://github.com/bytecodealliance/cargo-component";

From a6c45a6273c47e39a0899c2720d13174a9a1c80d Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:42:28 +0300
Subject: [PATCH 046/115] cargo-cranky: add progrm_jarvis to maintainers

---
 pkgs/by-name/ca/cargo-cranky/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ca/cargo-cranky/package.nix b/pkgs/by-name/ca/cargo-cranky/package.nix
index e03271e5b52c..619370ce3e2b 100644
--- a/pkgs/by-name/ca/cargo-cranky/package.nix
+++ b/pkgs/by-name/ca/cargo-cranky/package.nix
@@ -26,6 +26,6 @@ rustPlatform.buildRustPackage rec {
       asl20
       mit
     ];
-    maintainers = [ ];
+    maintainers = [ maintainers.progrm_jarvis ];
   };
 }

From 980c1232963aed43a868466da9650e19070e6b86 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:42:35 +0300
Subject: [PATCH 047/115] cargo-cranky: use finalAttrs

---
 pkgs/by-name/ca/cargo-cranky/package.nix | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-cranky/package.nix b/pkgs/by-name/ca/cargo-cranky/package.nix
index 619370ce3e2b..015cf4169b0e 100644
--- a/pkgs/by-name/ca/cargo-cranky/package.nix
+++ b/pkgs/by-name/ca/cargo-cranky/package.nix
@@ -4,28 +4,28 @@
   fetchFromGitHub,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-cranky";
   version = "0.3.0";
 
   src = fetchFromGitHub {
     owner = "ericseppanen";
     repo = "cargo-cranky";
-    rev = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-3ARl3z+2nz05UaKf8ChN6mvPY2qMjUNxGnGJ1P0xkas=";
   };
 
   cargoHash = "sha256-m9n2YyrMpuz/X/kvHgn+g4w9/Pg+n6VnnfwjaOnyPvY=";
 
-  meta = with lib; {
+  meta = {
     description = "Easy to configure wrapper for Rust's clippy";
     mainProgram = "cargo-cranky";
     homepage = "https://github.com/ericseppanen/cargo-cranky";
-    changelog = "https://github.com/ericseppanen/cargo-cranky/releases/tag/${src.rev}";
-    license = with licenses; [
+    changelog = "https://github.com/ericseppanen/cargo-cranky/releases/tag/v${finalAttrs.version}";
+    license = with lib.licenses; [
       asl20
       mit
     ];
-    maintainers = [ maintainers.progrm_jarvis ];
+    maintainers = [ lib.maintainers.progrm_jarvis ];
   };
-}
+})

From 22123247eea9eac4d310b812cb28e62e53fe4071 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:42:43 +0300
Subject: [PATCH 048/115] cargo-cranky: add nix-update-script

---
 pkgs/by-name/ca/cargo-cranky/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ca/cargo-cranky/package.nix b/pkgs/by-name/ca/cargo-cranky/package.nix
index 015cf4169b0e..1b8dca6d1caf 100644
--- a/pkgs/by-name/ca/cargo-cranky/package.nix
+++ b/pkgs/by-name/ca/cargo-cranky/package.nix
@@ -2,6 +2,7 @@
   lib,
   rustPlatform,
   fetchFromGitHub,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -17,6 +18,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   cargoHash = "sha256-m9n2YyrMpuz/X/kvHgn+g4w9/Pg+n6VnnfwjaOnyPvY=";
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Easy to configure wrapper for Rust's clippy";
     mainProgram = "cargo-cranky";

From 60289a6d12f770e0f58c3557c10364b50bce270f Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:42:50 +0300
Subject: [PATCH 049/115] cargo-local-registry: add progrm_jarvis to
 maintainers

---
 pkgs/by-name/ca/cargo-local-registry/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ca/cargo-local-registry/package.nix b/pkgs/by-name/ca/cargo-local-registry/package.nix
index ac8bea9754ac..07068e90b9df 100644
--- a/pkgs/by-name/ca/cargo-local-registry/package.nix
+++ b/pkgs/by-name/ca/cargo-local-registry/package.nix
@@ -46,6 +46,6 @@ rustPlatform.buildRustPackage rec {
       asl20
       mit
     ];
-    maintainers = [ ];
+    maintainers = [ maintainers.progrm_jarvis ];
   };
 }

From cb2845991856efb06d52b8edf750d0a9a1d7cf9b Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:42:57 +0300
Subject: [PATCH 050/115] cargo-local-registry: use finalAttrs

---
 .../ca/cargo-local-registry/package.nix       | 19 ++++++++++++-------
 1 file changed, 12 insertions(+), 7 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-local-registry/package.nix b/pkgs/by-name/ca/cargo-local-registry/package.nix
index 07068e90b9df..7ad765899799 100644
--- a/pkgs/by-name/ca/cargo-local-registry/package.nix
+++ b/pkgs/by-name/ca/cargo-local-registry/package.nix
@@ -7,16 +7,17 @@
   libgit2,
   openssl,
   zlib,
+  versionCheckHook,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-local-registry";
   version = "0.2.9";
 
   src = fetchFromGitHub {
     owner = "dhovart";
     repo = "cargo-local-registry";
-    rev = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-DzBD7N7GQZ9nhF22DnxRse0P8MUGReOcXHQ56KOqW6I=";
   };
 
@@ -37,15 +38,19 @@ rustPlatform.buildRustPackage rec {
   # tests require internet access
   doCheck = false;
 
-  meta = with lib; {
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+
+  meta = {
     description = "Cargo subcommand to manage local registries";
     mainProgram = "cargo-local-registry";
     homepage = "https://github.com/dhovart/cargo-local-registry";
-    changelog = "https://github.com/dhovart/cargo-local-registry/releases/tag/${src.rev}";
-    license = with licenses; [
+    changelog = "https://github.com/dhovart/cargo-local-registry/releases/tag/v${finalAttrs.version}";
+    license = with lib.licenses; [
       asl20
       mit
     ];
-    maintainers = [ maintainers.progrm_jarvis ];
+    maintainers = [ lib.maintainers.progrm_jarvis ];
   };
-}
+})

From ed16ac66bdbeb3bd05bb98e863839ce76056e668 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:44:21 +0300
Subject: [PATCH 051/115] cargo-local-registry: add nix-update-script

---
 pkgs/by-name/ca/cargo-local-registry/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ca/cargo-local-registry/package.nix b/pkgs/by-name/ca/cargo-local-registry/package.nix
index 7ad765899799..48b57c5399d2 100644
--- a/pkgs/by-name/ca/cargo-local-registry/package.nix
+++ b/pkgs/by-name/ca/cargo-local-registry/package.nix
@@ -8,6 +8,7 @@
   openssl,
   zlib,
   versionCheckHook,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -42,6 +43,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   nativeInstallCheckInputs = [ versionCheckHook ];
   versionCheckProgramArg = "--version";
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Cargo subcommand to manage local registries";
     mainProgram = "cargo-local-registry";

From 4f832d680f0ffe97b346de15e12491a4d07bdbe4 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:51:09 +0300
Subject: [PATCH 052/115] cargo-mutants: add progrm_jarvis to maintainers

---
 pkgs/by-name/ca/cargo-mutants/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ca/cargo-mutants/package.nix b/pkgs/by-name/ca/cargo-mutants/package.nix
index 3a90d9d2c976..b64fefedc72d 100644
--- a/pkgs/by-name/ca/cargo-mutants/package.nix
+++ b/pkgs/by-name/ca/cargo-mutants/package.nix
@@ -26,6 +26,6 @@ rustPlatform.buildRustPackage rec {
     homepage = "https://github.com/sourcefrog/cargo-mutants";
     changelog = "https://github.com/sourcefrog/cargo-mutants/releases/tag/${src.rev}";
     license = licenses.mit;
-    maintainers = [ ];
+    maintainers = [ maintainers.progrm_jarvis ];
   };
 }

From 6d800119e048cc945e8a57b5f65a05702ddbdcca Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:52:47 +0300
Subject: [PATCH 053/115] cargo-mutants: use finalAttrs

---
 pkgs/by-name/ca/cargo-mutants/package.nix | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-mutants/package.nix b/pkgs/by-name/ca/cargo-mutants/package.nix
index b64fefedc72d..253269b4ca4b 100644
--- a/pkgs/by-name/ca/cargo-mutants/package.nix
+++ b/pkgs/by-name/ca/cargo-mutants/package.nix
@@ -4,14 +4,14 @@
   fetchFromGitHub,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-mutants";
   version = "25.3.1";
 
   src = fetchFromGitHub {
     owner = "sourcefrog";
     repo = "cargo-mutants";
-    rev = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-T+BMLjp74IO71u/ftNfz67FPSt1LYCgsRP65gL0wScg=";
   };
 
@@ -20,12 +20,12 @@ rustPlatform.buildRustPackage rec {
   # too many tests require internet access
   doCheck = false;
 
-  meta = with lib; {
+  meta = {
     description = "Mutation testing tool for Rust";
     mainProgram = "cargo-mutants";
     homepage = "https://github.com/sourcefrog/cargo-mutants";
-    changelog = "https://github.com/sourcefrog/cargo-mutants/releases/tag/${src.rev}";
-    license = licenses.mit;
-    maintainers = [ maintainers.progrm_jarvis ];
+    changelog = "https://github.com/sourcefrog/cargo-mutants/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers.progrm_jarvis ];
   };
-}
+})

From ed0ce64702288c69db9fe7307355a39219fea53e Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:53:45 +0300
Subject: [PATCH 054/115] cargo-mutants: add nix-update-script

---
 pkgs/by-name/ca/cargo-mutants/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ca/cargo-mutants/package.nix b/pkgs/by-name/ca/cargo-mutants/package.nix
index 253269b4ca4b..6fc869706b68 100644
--- a/pkgs/by-name/ca/cargo-mutants/package.nix
+++ b/pkgs/by-name/ca/cargo-mutants/package.nix
@@ -2,6 +2,7 @@
   lib,
   rustPlatform,
   fetchFromGitHub,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -20,6 +21,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   # too many tests require internet access
   doCheck = false;
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Mutation testing tool for Rust";
     mainProgram = "cargo-mutants";

From 79ae97f92de036deabd7d5916e0d5958be785a3e Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:54:52 +0300
Subject: [PATCH 055/115] cargo-play: add progrm_jarvis to maintainers

---
 pkgs/by-name/ca/cargo-play/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ca/cargo-play/package.nix b/pkgs/by-name/ca/cargo-play/package.nix
index ead15cb184a1..c025dddd90f0 100644
--- a/pkgs/by-name/ca/cargo-play/package.nix
+++ b/pkgs/by-name/ca/cargo-play/package.nix
@@ -28,6 +28,6 @@ rustPlatform.buildRustPackage rec {
     mainProgram = "cargo-play";
     homepage = "https://github.com/fanzeyi/cargo-play";
     license = licenses.mit;
-    maintainers = [ ];
+    maintainers = [ maintainers.progrm_jarvis ];
   };
 }

From a20112b6a492aa4d9bda2941227c2b8c4982fe44 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:57:42 +0300
Subject: [PATCH 056/115] cargo-play: use finalAttrs

---
 pkgs/by-name/ca/cargo-play/package.nix | 18 ++++++++++++------
 1 file changed, 12 insertions(+), 6 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-play/package.nix b/pkgs/by-name/ca/cargo-play/package.nix
index c025dddd90f0..5e0160e51d0b 100644
--- a/pkgs/by-name/ca/cargo-play/package.nix
+++ b/pkgs/by-name/ca/cargo-play/package.nix
@@ -2,16 +2,17 @@
   lib,
   rustPlatform,
   fetchFromGitHub,
+  versionCheckHook,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-play";
   version = "0.5.1";
 
   src = fetchFromGitHub {
     owner = "fanzeyi";
     repo = "cargo-play";
-    tag = version;
+    tag = finalAttrs.version;
     sha256 = "sha256-Z5zcLQYfQeGybsnt2U+4Z+peRHxNPbDriPMKWhJ+PeA=";
   };
 
@@ -23,11 +24,16 @@ rustPlatform.buildRustPackage rec {
     "--skip=infer_override"
   ];
 
-  meta = with lib; {
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+
+  meta = {
     description = "Run your rust code without setting up cargo";
     mainProgram = "cargo-play";
     homepage = "https://github.com/fanzeyi/cargo-play";
-    license = licenses.mit;
-    maintainers = [ maintainers.progrm_jarvis ];
+    changelog = "https://github.com/fanzeyi/cargo-play/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers.progrm_jarvis ];
   };
-}
+})

From ba8600d82f75505e8edf35000eb464a9c0d93f3e Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:58:03 +0300
Subject: [PATCH 057/115] cargo-play: add nix-update-script

---
 pkgs/by-name/ca/cargo-play/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ca/cargo-play/package.nix b/pkgs/by-name/ca/cargo-play/package.nix
index 5e0160e51d0b..8cdf0a59b69c 100644
--- a/pkgs/by-name/ca/cargo-play/package.nix
+++ b/pkgs/by-name/ca/cargo-play/package.nix
@@ -3,6 +3,7 @@
   rustPlatform,
   fetchFromGitHub,
   versionCheckHook,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -28,6 +29,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   nativeInstallCheckInputs = [ versionCheckHook ];
   versionCheckProgramArg = "--version";
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Run your rust code without setting up cargo";
     mainProgram = "cargo-play";

From 451fd93483f4c00adc55c23ed46b4aadb76104ae Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 18:59:12 +0300
Subject: [PATCH 058/115] cargo-release: add progrm_jarvis to maintainers

---
 pkgs/by-name/ca/cargo-release/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/ca/cargo-release/package.nix b/pkgs/by-name/ca/cargo-release/package.nix
index 64d3256ebc57..6d95cd4e5755 100644
--- a/pkgs/by-name/ca/cargo-release/package.nix
+++ b/pkgs/by-name/ca/cargo-release/package.nix
@@ -53,6 +53,7 @@ rustPlatform.buildRustPackage rec {
     ];
     maintainers = with lib.maintainers; [
       gerschtli
+      progrm_jarvis
     ];
   };
 }

From 689afa2851b241125e9e176b3fbad11ba0b808d1 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 19:00:01 +0300
Subject: [PATCH 059/115] cargo-release: use finalAttrs

---
 pkgs/by-name/ca/cargo-release/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-release/package.nix b/pkgs/by-name/ca/cargo-release/package.nix
index 6d95cd4e5755..782e668830d6 100644
--- a/pkgs/by-name/ca/cargo-release/package.nix
+++ b/pkgs/by-name/ca/cargo-release/package.nix
@@ -10,14 +10,14 @@
   git,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-release";
   version = "0.25.22";
 
   src = fetchFromGitHub {
     owner = "crate-ci";
     repo = "cargo-release";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-NFI7UIHbo1xcH+pXim3ar8hvkn2EdIFpI2rpsivhVHg=";
   };
 
@@ -46,7 +46,7 @@ rustPlatform.buildRustPackage rec {
     description = ''Cargo subcommand "release": everything about releasing a rust crate'';
     mainProgram = "cargo-release";
     homepage = "https://github.com/crate-ci/cargo-release";
-    changelog = "https://github.com/crate-ci/cargo-release/blob/v${version}/CHANGELOG.md";
+    changelog = "https://github.com/crate-ci/cargo-release/blob/v${finalAttrs.version}/CHANGELOG.md";
     license = with lib.licenses; [
       asl20 # or
       mit
@@ -56,4 +56,4 @@ rustPlatform.buildRustPackage rec {
       progrm_jarvis
     ];
   };
-}
+})

From 4ef3ff86d5a7a1026a93bf81945a938035dc2043 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 19:00:28 +0300
Subject: [PATCH 060/115] cargo-release: add nix-update-script

---
 pkgs/by-name/ca/cargo-release/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ca/cargo-release/package.nix b/pkgs/by-name/ca/cargo-release/package.nix
index 782e668830d6..e2e677dbf97a 100644
--- a/pkgs/by-name/ca/cargo-release/package.nix
+++ b/pkgs/by-name/ca/cargo-release/package.nix
@@ -8,6 +8,7 @@
   stdenv,
   curl,
   git,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -42,6 +43,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   # disable vendored-libgit2 and vendored-openssl
   buildNoDefaultFeatures = true;
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = ''Cargo subcommand "release": everything about releasing a rust crate'';
     mainProgram = "cargo-release";

From ef14fa5374c9a0d22448df8eae4b144a396776d6 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 19:01:28 +0300
Subject: [PATCH 061/115] cargo-shuttle: add progrm_jarvis to maintainers

---
 pkgs/by-name/ca/cargo-shuttle/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ca/cargo-shuttle/package.nix b/pkgs/by-name/ca/cargo-shuttle/package.nix
index 9de6d2810b68..fcdc4a83d3d2 100644
--- a/pkgs/by-name/ca/cargo-shuttle/package.nix
+++ b/pkgs/by-name/ca/cargo-shuttle/package.nix
@@ -43,6 +43,6 @@ rustPlatform.buildRustPackage rec {
     homepage = "https://shuttle.rs";
     changelog = "https://github.com/shuttle-hq/shuttle/releases/tag/${src.rev}";
     license = licenses.asl20;
-    maintainers = [ ];
+    maintainers = [ maintainers.progrm_jarvis ];
   };
 }

From 7f66450be93a598822d7c91c1041801ee476cf33 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 19:09:34 +0300
Subject: [PATCH 062/115] cargo-shuttle: use finalAttrs

---
 pkgs/by-name/ca/cargo-shuttle/package.nix | 21 +++++++++++++--------
 1 file changed, 13 insertions(+), 8 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-shuttle/package.nix b/pkgs/by-name/ca/cargo-shuttle/package.nix
index fcdc4a83d3d2..994306bf9b9c 100644
--- a/pkgs/by-name/ca/cargo-shuttle/package.nix
+++ b/pkgs/by-name/ca/cargo-shuttle/package.nix
@@ -5,16 +5,17 @@
   pkg-config,
   openssl,
   zlib,
+  versionCheckHook,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-shuttle";
   version = "0.57.3";
 
   src = fetchFromGitHub {
     owner = "shuttle-hq";
     repo = "shuttle";
-    rev = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-qPevl75wmOYVhTgMiJOi+6j8LBWKzM7HPhd5mdf2B+8=";
   };
 
@@ -32,17 +33,21 @@ rustPlatform.buildRustPackage rec {
     "cargo-shuttle"
   ];
 
-  cargoTestFlags = cargoBuildFlags ++ [
+  cargoTestFlags = finalAttrs.cargoBuildFlags ++ [
     # other tests are failing for different reasons
     "init::shuttle_init_tests::"
   ];
 
-  meta = with lib; {
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+
+  meta = {
     description = "Cargo command for the shuttle platform";
     mainProgram = "cargo-shuttle";
     homepage = "https://shuttle.rs";
-    changelog = "https://github.com/shuttle-hq/shuttle/releases/tag/${src.rev}";
-    license = licenses.asl20;
-    maintainers = [ maintainers.progrm_jarvis ];
+    changelog = "https://github.com/shuttle-hq/shuttle/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.asl20;
+    maintainers = [ lib.maintainers.progrm_jarvis ];
   };
-}
+})

From 9f35394b70e35b138647896b40fcf2d618b69726 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 19:35:32 +0300
Subject: [PATCH 063/115] cargo-shuttle: add nix-update-script

---
 pkgs/by-name/ca/cargo-shuttle/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ca/cargo-shuttle/package.nix b/pkgs/by-name/ca/cargo-shuttle/package.nix
index 994306bf9b9c..c76d6b282209 100644
--- a/pkgs/by-name/ca/cargo-shuttle/package.nix
+++ b/pkgs/by-name/ca/cargo-shuttle/package.nix
@@ -6,6 +6,7 @@
   openssl,
   zlib,
   versionCheckHook,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -42,6 +43,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   nativeInstallCheckInputs = [ versionCheckHook ];
   versionCheckProgramArg = "--version";
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Cargo command for the shuttle platform";
     mainProgram = "cargo-shuttle";

From f0b8c3e302f1296ef0b0d34491bad9385bb8fe7a Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 19:46:35 +0300
Subject: [PATCH 064/115] cargo-tarpaulin: add progrm_jarvis to maintainers

---
 pkgs/by-name/ca/cargo-tarpaulin/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/ca/cargo-tarpaulin/package.nix b/pkgs/by-name/ca/cargo-tarpaulin/package.nix
index 80c2986f4e77..9f2e1cabdc75 100644
--- a/pkgs/by-name/ca/cargo-tarpaulin/package.nix
+++ b/pkgs/by-name/ca/cargo-tarpaulin/package.nix
@@ -44,6 +44,7 @@ rustPlatform.buildRustPackage rec {
     ];
     maintainers = with maintainers; [
       hugoreeves
+      progrm_jarvis
     ];
   };
 }

From 3d5bc7bc1876fad9cb71a42a6804872468d0c241 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 19:51:14 +0300
Subject: [PATCH 065/115] cargo-tarpaulin: use finalAttrs

---
 pkgs/by-name/ca/cargo-tarpaulin/package.nix | 19 ++++++++++++-------
 1 file changed, 12 insertions(+), 7 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-tarpaulin/package.nix b/pkgs/by-name/ca/cargo-tarpaulin/package.nix
index 9f2e1cabdc75..77ae2bee6c5f 100644
--- a/pkgs/by-name/ca/cargo-tarpaulin/package.nix
+++ b/pkgs/by-name/ca/cargo-tarpaulin/package.nix
@@ -6,16 +6,17 @@
   openssl,
   stdenv,
   curl,
+  versionCheckHook,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-tarpaulin";
   version = "0.34.1";
 
   src = fetchFromGitHub {
     owner = "xd009642";
     repo = "tarpaulin";
-    tag = version;
+    tag = finalAttrs.version;
     hash = "sha256-HJgcFQrHINm4BPfZ4c5ZHQYBTSBVYdSl/n0qBlSsNOI=";
   };
 
@@ -33,18 +34,22 @@ rustPlatform.buildRustPackage rec {
 
   doCheck = false;
 
-  meta = with lib; {
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+
+  meta = {
     description = "Code coverage tool for Rust projects";
     mainProgram = "cargo-tarpaulin";
     homepage = "https://github.com/xd009642/tarpaulin";
-    changelog = "https://github.com/xd009642/tarpaulin/blob/${src.rev}/CHANGELOG.md";
-    license = with licenses; [
+    changelog = "https://github.com/xd009642/tarpaulin/blob/${finalAttrs.version}/CHANGELOG.md";
+    license = with lib.licenses; [
       mit # or
       asl20
     ];
-    maintainers = with maintainers; [
+    maintainers = with lib.maintainers; [
       hugoreeves
       progrm_jarvis
     ];
   };
-}
+})

From 716c8f166c3bc187732d96f2816d33559ff5b810 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 19:52:15 +0300
Subject: [PATCH 066/115] cargo-tarpaulin: add nix-update-script

---
 pkgs/by-name/ca/cargo-tarpaulin/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ca/cargo-tarpaulin/package.nix b/pkgs/by-name/ca/cargo-tarpaulin/package.nix
index 77ae2bee6c5f..272194901b8c 100644
--- a/pkgs/by-name/ca/cargo-tarpaulin/package.nix
+++ b/pkgs/by-name/ca/cargo-tarpaulin/package.nix
@@ -7,6 +7,7 @@
   stdenv,
   curl,
   versionCheckHook,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -38,6 +39,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   nativeInstallCheckInputs = [ versionCheckHook ];
   versionCheckProgramArg = "--version";
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Code coverage tool for Rust projects";
     mainProgram = "cargo-tarpaulin";

From 66603cb734af46ffb2e008531280df402bc14eda Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 19:53:18 +0300
Subject: [PATCH 067/115] cargo-zigbuild: add progrm_jarvis to maintainers

---
 pkgs/by-name/ca/cargo-zigbuild/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ca/cargo-zigbuild/package.nix b/pkgs/by-name/ca/cargo-zigbuild/package.nix
index f5f7927f82ee..2f2b12561aae 100644
--- a/pkgs/by-name/ca/cargo-zigbuild/package.nix
+++ b/pkgs/by-name/ca/cargo-zigbuild/package.nix
@@ -32,6 +32,6 @@ rustPlatform.buildRustPackage rec {
     homepage = "https://github.com/messense/cargo-zigbuild";
     changelog = "https://github.com/messense/cargo-zigbuild/releases/tag/v${version}";
     license = lib.licenses.mit;
-    maintainers = [ ];
+    maintainers = [ lib.maintainers.progrm_jarvis ];
   };
 }

From 42d41382cef1adb918dc60e7f8b9873a660e1469 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 19:55:25 +0300
Subject: [PATCH 068/115] cargo-zigbuild: use finalAttrs

---
 pkgs/by-name/ca/cargo-zigbuild/package.nix | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-zigbuild/package.nix b/pkgs/by-name/ca/cargo-zigbuild/package.nix
index 2f2b12561aae..8bf12964f702 100644
--- a/pkgs/by-name/ca/cargo-zigbuild/package.nix
+++ b/pkgs/by-name/ca/cargo-zigbuild/package.nix
@@ -4,16 +4,17 @@
   fetchFromGitHub,
   makeWrapper,
   zig,
+  versionCheckHook,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-zigbuild";
   version = "0.20.1";
 
   src = fetchFromGitHub {
     owner = "messense";
     repo = "cargo-zigbuild";
-    rev = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-xJiYtVrvWEBsyTbcHKsbnTpbcTryX+ZP/OjD7GP6gQU=";
   };
 
@@ -26,12 +27,16 @@ rustPlatform.buildRustPackage rec {
       --prefix PATH : ${zig}/bin
   '';
 
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+
   meta = {
     description = "Tool to compile Cargo projects with zig as the linker";
     mainProgram = "cargo-zigbuild";
     homepage = "https://github.com/messense/cargo-zigbuild";
-    changelog = "https://github.com/messense/cargo-zigbuild/releases/tag/v${version}";
+    changelog = "https://github.com/messense/cargo-zigbuild/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
     maintainers = [ lib.maintainers.progrm_jarvis ];
   };
-}
+})

From 7b5ab1da3deb81d23bb6db7eead3e11966815601 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Mon, 1 Dec 2025 19:56:30 +0300
Subject: [PATCH 069/115] cargo-zigbuild: add nix-update-script

---
 pkgs/by-name/ca/cargo-zigbuild/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ca/cargo-zigbuild/package.nix b/pkgs/by-name/ca/cargo-zigbuild/package.nix
index 8bf12964f702..876d4cce48d1 100644
--- a/pkgs/by-name/ca/cargo-zigbuild/package.nix
+++ b/pkgs/by-name/ca/cargo-zigbuild/package.nix
@@ -5,6 +5,7 @@
   makeWrapper,
   zig,
   versionCheckHook,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -31,6 +32,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   nativeInstallCheckInputs = [ versionCheckHook ];
   versionCheckProgramArg = "--version";
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Tool to compile Cargo projects with zig as the linker";
     mainProgram = "cargo-zigbuild";

From 427f3de3a4ac68e80cd8ea61d28916ff243724a9 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Thu, 4 Dec 2025 22:01:24 +0300
Subject: [PATCH 070/115] rust-petname: add progrm_jarvis to maintainers

---
 pkgs/by-name/ru/rust-petname/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ru/rust-petname/package.nix b/pkgs/by-name/ru/rust-petname/package.nix
index ec655a6ee1aa..b3816ff06781 100644
--- a/pkgs/by-name/ru/rust-petname/package.nix
+++ b/pkgs/by-name/ru/rust-petname/package.nix
@@ -20,7 +20,7 @@ rustPlatform.buildRustPackage rec {
     description = "Generate human readable random names";
     homepage = "https://github.com/allenap/rust-petname";
     license = licenses.asl20;
-    maintainers = [ ];
+    maintainers = [ maintainers.progrm_jarvis ];
     mainProgram = "petname";
   };
 }

From 896a8eca46f57db006a09eae450fdde9f63c1ee6 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Thu, 4 Dec 2025 22:09:08 +0300
Subject: [PATCH 071/115] rust-petname: use finalAttrs

---
 pkgs/by-name/ru/rust-petname/package.nix | 17 +++++++++++------
 1 file changed, 11 insertions(+), 6 deletions(-)

diff --git a/pkgs/by-name/ru/rust-petname/package.nix b/pkgs/by-name/ru/rust-petname/package.nix
index b3816ff06781..ab1148404ce1 100644
--- a/pkgs/by-name/ru/rust-petname/package.nix
+++ b/pkgs/by-name/ru/rust-petname/package.nix
@@ -2,25 +2,30 @@
   lib,
   rustPlatform,
   fetchCrate,
+  versionCheckHook,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rust-petname";
   version = "2.0.2";
 
   src = fetchCrate {
-    inherit version;
+    inherit (finalAttrs) version;
     crateName = "petname";
     hash = "sha256-KP+GdGlwLHcKE8nAmFr2wHbt5RD9Ptpiz1X5HgJ6BgU=";
   };
 
   cargoHash = "sha256-gZxZeirvGHwm8C87HdCBYr30+0bbjwnWxIQzcLgl3iQ=";
 
-  meta = with lib; {
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+
+  meta = {
     description = "Generate human readable random names";
     homepage = "https://github.com/allenap/rust-petname";
-    license = licenses.asl20;
-    maintainers = [ maintainers.progrm_jarvis ];
+    license = lib.licenses.asl20;
+    maintainers = [ lib.maintainers.progrm_jarvis ];
     mainProgram = "petname";
   };
-}
+})

From daaa7d5b71422d2f478e8bcdeb18a3f8c3705124 Mon Sep 17 00:00:00 2001
From: Petr Portnov <mrjarviscraft+nix@gmail.com>
Date: Thu, 4 Dec 2025 22:09:45 +0300
Subject: [PATCH 072/115] rust-petname: add nix-update-script

---
 pkgs/by-name/ru/rust-petname/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ru/rust-petname/package.nix b/pkgs/by-name/ru/rust-petname/package.nix
index ab1148404ce1..10795b672dd4 100644
--- a/pkgs/by-name/ru/rust-petname/package.nix
+++ b/pkgs/by-name/ru/rust-petname/package.nix
@@ -3,6 +3,7 @@
   rustPlatform,
   fetchCrate,
   versionCheckHook,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -21,6 +22,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   nativeInstallCheckInputs = [ versionCheckHook ];
   versionCheckProgramArg = "--version";
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Generate human readable random names";
     homepage = "https://github.com/allenap/rust-petname";

From 5c9477f305e23f8f88b8440af40bd6a6fde71c5f Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 5 Dec 2025 02:45:30 +0000
Subject: [PATCH 073/115] zgrab2: 0.2.0 -> 1.0.0

---
 pkgs/by-name/zg/zgrab2/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/zg/zgrab2/package.nix b/pkgs/by-name/zg/zgrab2/package.nix
index 2138dd499696..52d58c09d9cc 100644
--- a/pkgs/by-name/zg/zgrab2/package.nix
+++ b/pkgs/by-name/zg/zgrab2/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "zgrab2";
-  version = "0.2.0";
+  version = "1.0.0";
 
   src = fetchFromGitHub {
     owner = "zmap";
     repo = "zgrab2";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-9YDrWtSFFzFMN/pp0Kaknie4NMduOb/ZNrP+7MIMT+0=";
+    hash = "sha256-rvQum+Mjpuz2XRgTY94CTqJ6Tvi78Kdd3CCMHvYZQgE=";
   };
 
-  vendorHash = "sha256-8oidWUtSMMm/QMzrTkH07eyyBhCeZ9SUOO1+h1evbac=";
+  vendorHash = "sha256-ag2VWBNv2u/DXWWsSLBfRscm3++AjxgrGfw8JUlhnRo=";
 
   subPackages = [
     "cmd/zgrab2"

From a368446bc54f26025a2cf84311e415e34dd89296 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 5 Dec 2025 06:14:33 +0000
Subject: [PATCH 074/115] restish: 0.21.0 -> 0.21.1

---
 pkgs/by-name/re/restish/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/re/restish/package.nix b/pkgs/by-name/re/restish/package.nix
index d46bc3718038..548e2b50eef4 100644
--- a/pkgs/by-name/re/restish/package.nix
+++ b/pkgs/by-name/re/restish/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule rec {
   pname = "restish";
-  version = "0.21.0";
+  version = "0.21.1";
 
   src = fetchFromGitHub {
     owner = "danielgtaylor";
     repo = "restish";
     tag = "v${version}";
-    hash = "sha256-eLbeH6i+QbW59DMOHf83olrO8R7Ji975KkJKs621Xi0=";
+    hash = "sha256-7x7ejClJezxr+V6xpOMZMd4s+CjOCx1obSSNo97MAbE=";
   };
 
   vendorHash = "sha256-bO0z+LCiF/Dp0hKNulBmCgk16NzCCoY32P2/Ieq8y+c=";

From 008f8b66362079acf38a2d7a7beea9f021df98c7 Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Fri, 5 Dec 2025 14:14:51 +0100
Subject: [PATCH 075/115] nss_latest: 3.118.1 -> 3.119

https://github.com/nss-dev/nss/blob/master/doc/rst/releases/nss_3_119.rst
---
 pkgs/development/libraries/nss/latest.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/libraries/nss/latest.nix b/pkgs/development/libraries/nss/latest.nix
index c7a23afaa798..77407b426b04 100644
--- a/pkgs/development/libraries/nss/latest.nix
+++ b/pkgs/development/libraries/nss/latest.nix
@@ -5,8 +5,8 @@
 #       Example: nix-shell ./maintainers/scripts/update.nix --argstr package cacert
 
 import ./generic.nix {
-  version = "3.118.1";
-  hash = "sha256-jpBJzXLljvobG8O8BB1JiJJmnp+Ma36SOHcl9LuimVw=";
+  version = "3.119";
+  hash = "sha256-Lz2zWWjcneJ5X4sfOvPzEewMAKyDU7PluhWPV5E3By4=";
   filename = "latest.nix";
   versionRegex = "NSS_(\\d+)_(\\d+)(?:_(\\d+))?_RTM";
 }

From 1103aaad2d7d02b209d995ee77654c210e2813f1 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 5 Dec 2025 15:34:56 +0100
Subject: [PATCH 076/115] zgrab2: add changelog to meta

---
 pkgs/by-name/zg/zgrab2/package.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/zg/zgrab2/package.nix b/pkgs/by-name/zg/zgrab2/package.nix
index 52d58c09d9cc..51e0bcd47397 100644
--- a/pkgs/by-name/zg/zgrab2/package.nix
+++ b/pkgs/by-name/zg/zgrab2/package.nix
@@ -23,8 +23,8 @@ buildGoModule (finalAttrs: {
 
   meta = {
     description = "Fast Application Layer Scanner";
-    mainProgram = "zgrab2";
     homepage = "https://github.com/zmap/zgrab2";
+    changelog = "https://github.com/zmap/zgrab2/releases/tag/vv${finalAttrs.version}";
     license = with lib.licenses; [
       asl20
       isc
@@ -33,5 +33,6 @@ buildGoModule (finalAttrs: {
       fab
       juliusrickert
     ];
+    mainProgram = "zgrab2";
   };
 })

From b779f14d63c82bb2cfb9f87624ebe1a398bb478a Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 5 Dec 2025 15:52:26 +0100
Subject: [PATCH 077/115] python313Packages.twilio: 9.8.7 -> 9.8.8

Diff: https://github.com/twilio/twilio-python/compare/9.8.7...9.8.8

Changelog: https://github.com/twilio/twilio-python/blob/9.8.8/CHANGES.md
---
 pkgs/development/python-modules/twilio/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/twilio/default.nix b/pkgs/development/python-modules/twilio/default.nix
index ee33991b4e4f..9a9e6f816d71 100644
--- a/pkgs/development/python-modules/twilio/default.nix
+++ b/pkgs/development/python-modules/twilio/default.nix
@@ -19,14 +19,14 @@
 
 buildPythonPackage rec {
   pname = "twilio";
-  version = "9.8.7";
+  version = "9.8.8";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "twilio";
     repo = "twilio-python";
     tag = version;
-    hash = "sha256-jGuPJ/nTo+oYqnwwwZDFLnpHcEyErgCPB5pO31g9WNA=";
+    hash = "sha256-q3NjNe7SiqL2HgRkuoChesD333q3vw+aVkSASc6gDQk=";
   };
 
   build-system = [ setuptools ];

From cd0227831c4871a3e293d819cc59ea13ff056e7f Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 5 Dec 2025 15:53:17 +0100
Subject: [PATCH 078/115] python313Packages.xknx: 3.11.0 -> 3.12.0

Diff: https://github.com/XKNX/xknx/compare/3.11.0...3.12.0

Changelog: https://github.com/XKNX/xknx/releases/tag/3.12.0
---
 pkgs/development/python-modules/xknx/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/xknx/default.nix b/pkgs/development/python-modules/xknx/default.nix
index b19f1d9d9767..5c843a747789 100644
--- a/pkgs/development/python-modules/xknx/default.nix
+++ b/pkgs/development/python-modules/xknx/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage rec {
   pname = "xknx";
-  version = "3.11.0";
+  version = "3.12.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "XKNX";
     repo = "xknx";
     tag = version;
-    hash = "sha256-jWnDiGg7vjIt4xkqjKrauExnvHcrH8m0RGfHjQlljFY=";
+    hash = "sha256-Sb/qPLINeYt96s7NkRARcb0ZrcE6A0ByyENVd5aiHxk=";
   };
 
   build-system = [ setuptools ];

From 51b317e08eaf66ba76620fd87586d8bc369bc6e0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Bla=C5=A1kovi=C4=87?= <lblasc@tvbeat.com>
Date: Fri, 5 Dec 2025 08:12:15 +0000
Subject: [PATCH 079/115] zerofs 0.19.2 -> 0.20.0

---
 pkgs/by-name/ze/zerofs/package.nix | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/pkgs/by-name/ze/zerofs/package.nix b/pkgs/by-name/ze/zerofs/package.nix
index 2c4092d65dc8..2361cd1a2b31 100644
--- a/pkgs/by-name/ze/zerofs/package.nix
+++ b/pkgs/by-name/ze/zerofs/package.nix
@@ -1,27 +1,30 @@
 {
   stdenv,
   lib,
-  rustPlatform,
+  cmake,
   fetchFromGitHub,
-  rust-jemalloc-sys,
-  versionCheckHook,
   nix-update-script,
+  rust-jemalloc-sys,
+  rustPlatform,
+  versionCheckHook,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "zerofs";
-  version = "0.19.2";
+  version = "0.20.0";
 
   src = fetchFromGitHub {
     owner = "Barre";
     repo = "ZeroFS";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-okknSZXs82mfVgiKp5Gb+DuYogZ+g7hluF1ua+IAw8A=";
+    hash = "sha256-8iPHIUESModoNFk8XEWjHZOGBOPxhOGM9gHaljWyqZg=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/zerofs";
 
-  cargoHash = "sha256-vhiI/t6WF+QZhkUpL893nQvvbRzgQkmXD7tuSeMAFyE=";
+  cargoHash = "sha256-JZerQne+jW6xjH13dQe3g1dD07BP3j+1DSF+a/SgGXc=";
+
+  nativeBuildInputs = [ cmake ];
 
   buildInputs = [ rust-jemalloc-sys ];
 

From 14b19cf62d022812f1bc39be849efa2984016ed3 Mon Sep 17 00:00:00 2001
From: Klaus Frank <2544867+agowa@users.noreply.github.com>
Date: Fri, 5 Dec 2025 16:20:14 +0100
Subject: [PATCH 080/115] docs: Make nixpkgs.pkgs defaultText c'n'p-able

Currently the defaultText of nixpkgs.pkgs uses the cfg variable. The search.nixos.org page is not able to resolve that variable.

Replacing "cfg" within this docs text with the non-aliased "config.nixpkgs".
---
 nixos/modules/misc/nixpkgs.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/misc/nixpkgs.nix b/nixos/modules/misc/nixpkgs.nix
index 12b4a6453449..449a08a97b61 100644
--- a/nixos/modules/misc/nixpkgs.nix
+++ b/nixos/modules/misc/nixpkgs.nix
@@ -119,7 +119,7 @@ in
     pkgs = lib.mkOption {
       defaultText = lib.literalExpression ''
         import "''${nixos}/.." {
-          inherit (cfg) config overlays localSystem crossSystem;
+          inherit (config.nixpkgs) config overlays localSystem crossSystem;
         }
       '';
       type = pkgsType;

From 270601f6c466bf0cf5bc76197254492ef31a7aaa Mon Sep 17 00:00:00 2001
From: aszlig <aszlig@nix.build>
Date: Mon, 24 Nov 2025 19:16:34 +0100
Subject: [PATCH 081/115] nixos/systemd-confinement: Fix with template units

Quoting from <https://github.com/NixOS/nixpkgs/issues/464323>:

> When using confinement.enable = true for an instanced systemd service,
> the 2nd instance will fail to start if the 1st instance is still
> running.
>
> This only happens with confinement.enable = true;. Removing this
> option causes both service instances to succeed. Maybe this happens
> because the /run/confinement/fortune directory is shared between the
> instances.

The reason why this happens is that the root directory is set to
"/run/confinement/${mkPathSafeName name}", which is the non-expanded
unit name rather than the full unit name with the instance in case of a
template unit.

So when a template unit "foo@.service" is involved, the root directory
is then "/run/confinement/foo_" regardless of instance, so
foo@bar.service uses the same directory as foo@baz.service and when the
first unit cleans up the root directory, it also makes it inaccessible
for the unit started afterwards.

I added a small property test to test concurrent invocations, so we
cover this case and other issues that might come up with template units
in a future refactor.

Signed-off-by: aszlig <aszlig@nix.build>
---
 .../modules/security/systemd-confinement.nix  |   8 +-
 .../systemd-confinement/concurrent-runner.py  | 131 +++++++++
 nixos/tests/systemd-confinement/default.nix   | 263 +++++++++++-------
 3 files changed, 290 insertions(+), 112 deletions(-)
 create mode 100644 nixos/tests/systemd-confinement/concurrent-runner.py

diff --git a/nixos/modules/security/systemd-confinement.nix b/nixos/modules/security/systemd-confinement.nix
index c3c0a1a4975d..89f96a2fbb59 100644
--- a/nixos/modules/security/systemd-confinement.nix
+++ b/nixos/modules/security/systemd-confinement.nix
@@ -128,11 +128,9 @@ in
             lib.mkIf config.confinement.enable {
               serviceConfig = {
                 ReadOnlyPaths = [ "+/" ];
-                RuntimeDirectory = [ "confinement/${mkPathSafeName name}" ];
-                RootDirectory = "/run/confinement/${mkPathSafeName name}";
-                InaccessiblePaths = [
-                  "-+/run/confinement/${mkPathSafeName name}"
-                ];
+                RuntimeDirectory = [ "confinement/%n" ];
+                RootDirectory = "/run/confinement/%n";
+                InaccessiblePaths = [ "-+/run/confinement/%n" ];
                 PrivateMounts = lib.mkDefault true;
 
                 # https://github.com/NixOS/nixpkgs/issues/14645 is a future attempt
diff --git a/nixos/tests/systemd-confinement/concurrent-runner.py b/nixos/tests/systemd-confinement/concurrent-runner.py
new file mode 100644
index 000000000000..58cf9f7ff4d9
--- /dev/null
+++ b/nixos/tests/systemd-confinement/concurrent-runner.py
@@ -0,0 +1,131 @@
+import click
+import socket
+import sys
+
+from hypothesis import given, settings, strategies as st
+from subprocess import run
+from time import sleep
+
+
+@st.composite
+def client_actions(draw, size: int = 10):
+    """
+    Generate a string describing a set of actions to perform.
+
+    This is specifically "stringly-typed" so that when looking at the output of
+    a failed test run, it's easy to visually identify what's wrong.
+
+    The string may consist of the following characters:
+
+      ' ' - Sleep for one tick (0.1s)
+      '[' - Start the client
+      ']' - Stop the client
+      'R' - Run a subprocess in the client
+
+    So for example the string "  [  R ]  " would mean:
+
+       * Sleep for two ticks ("  ")
+       * Start the client ("[")
+       * Sleep for two ticks ("  ")
+       * Run the subprocess ("R")
+       * Sleep for one tick (" ")
+       * Stop the client ("]")
+       * Sleep for two ticks ("  ")
+
+    Exactly the same encoding as above is used for the network protocol, so for
+    debugging issues, all you need to know is the representation above.
+    """
+    assert size > 1
+    start = None
+    stop = None
+    runs = set()
+
+    if draw(st.booleans()):
+        start = draw(st.integers(min_value=0, max_value=size - 2))
+        stop = draw(st.integers(min_value=start + 1, max_value=size - 1))
+        if start + 1 < stop:
+            runs = draw(st.sets(
+                st.integers(min_value=start + 1, max_value=stop - 1),
+                max_size=stop - start,
+            ))
+
+    out = ''
+    for index in range(size):
+        if start is not None and index == start:
+            out += '['
+        elif stop is not None and index == stop:
+            out += ']'
+        elif index in runs:
+            out += 'R'
+        else:
+            out += ' '
+    return out
+
+
+@click.group()
+def cli() -> None:
+    pass
+
+
+@cli.command('driver')
+@settings(deadline=None, max_examples=20)
+@given(st.lists(client_actions(), max_size=5))
+def test_driver(client_actions: list[str]) -> None:
+    clients: list[None | socket.socket] = [None] * len(client_actions)
+    for index in range(max(map(len, client_actions), default=0)):
+        for n, actions in enumerate(client_actions):
+            client = clients[n]
+            try:
+                action = actions[index]
+            except IndexError:
+                continue
+            match action:
+                case '[':
+                    client = socket.socket(socket.AF_INET6)
+                    client.settimeout(60)
+                    client.connect(('::1', 12345))
+                    client.send(b'[')
+                    clients[n] = client
+                case ']':
+                    assert client is not None
+                    client.send(b']')
+                    # At this point if we get ']' back from the client, we know
+                    # that everything went smoothly up to this point because
+                    # otherwise the client would have just thrown an exception
+                    # and the connection would be closed.
+                    assert client.recv(1) == b']'
+                    assert not client.recv(1)
+                    client.close()
+                    clients[n] = None
+                case 'R':
+                    assert client is not None
+                    client.send(b'R')
+                case ' ':
+                    if client is not None:
+                        client.send(b' ')
+        sleep(0.1)
+    assert all(c is None for c in clients), \
+           f'clients still running: {clients!r}'
+
+
+@cli.command('client')
+@click.argument('executable')
+def test_client(executable: str) -> None:
+    if not (action := sys.stdin.read(1)):
+        raise SystemExit(1)
+    assert action == '[', f'{action!r} != "["'
+    while action := sys.stdin.read(1):
+        match action:
+            case 'R':
+                run([executable], check=True, stdout=sys.stderr)
+            case ']':
+                sys.stdout.write(']')
+                return
+            case ' ':
+                sleep(0.1)
+            case '':
+                raise SystemExit(1)
+
+
+if __name__ == '__main__':
+    cli()
diff --git a/nixos/tests/systemd-confinement/default.nix b/nixos/tests/systemd-confinement/default.nix
index 90cfcb8ab8af..0f8a0a326e7d 100644
--- a/nixos/tests/systemd-confinement/default.nix
+++ b/nixos/tests/systemd-confinement/default.nix
@@ -2,7 +2,12 @@ import ../make-test-python.nix {
   name = "systemd-confinement";
 
   nodes.machine =
-    { pkgs, lib, ... }:
+    {
+      pkgs,
+      lib,
+      utils,
+      ...
+    }:
     let
       testLib = pkgs.python3Packages.buildPythonPackage {
         name = "confinement-testlib";
@@ -215,122 +220,166 @@ import ../make-test-python.nix {
             }
           );
 
+      concurrentRunner = pkgs.writers.writePython3 "concurrent-runner" {
+        libraries = [
+          pkgs.python3Packages.click
+          pkgs.python3Packages.hypothesis
+        ];
+      } ./concurrent-runner.py;
+
+      concurrentTest = {
+        systemd.services.concurrent-driver = {
+          description = "Driver for orchestrating concurrent processes";
+          requiredBy = [ "multi-user.target" ];
+          after = [
+            "network.target"
+            "concurrent-client.socket"
+          ];
+          serviceConfig.Type = "oneshot";
+          serviceConfig.ExecStart = utils.escapeSystemdExecArgs [
+            concurrentRunner
+            "driver"
+          ];
+        };
+
+        systemd.sockets.concurrent-client = {
+          description = "Socket for concurrent processes";
+          requiredBy = [ "sockets.target" ];
+          socketConfig.ListenStream = 12345;
+          socketConfig.Accept = true;
+        };
+
+        systemd.services."concurrent-client@" = {
+          description = "Process %I running concurrently with others";
+          confinement.enable = true;
+          serviceConfig.StandardInput = "socket";
+          serviceConfig.StandardError = "journal";
+          serviceConfig.ExecStart = utils.escapeSystemdExecArgs [
+            concurrentRunner
+            "client"
+            "${pkgs.fortune}/bin/fortune"
+          ];
+        };
+      };
+
     in
     {
-      imports = lib.imap1 mkTestStep (
-        parametrisedTests
-        ++ [
-          {
-            description = "existence of bind-mounted /etc";
-            config.serviceConfig.BindReadOnlyPaths = [ "/etc" ];
-            testScript = ''
-              assert Path('/etc/passwd').read_text()
-            '';
-          }
-          (
-            let
-              symlink = pkgs.runCommand "symlink" {
-                target = pkgs.writeText "symlink-target" "got me";
-              } "ln -s \"$target\" \"$out\"";
-            in
+      imports =
+        lib.imap1 mkTestStep (
+          parametrisedTests
+          ++ [
             {
-              description = "check if symlinks are properly bind-mounted";
-              config.confinement.packages = lib.singleton symlink;
+              description = "existence of bind-mounted /etc";
+              config.serviceConfig.BindReadOnlyPaths = [ "/etc" ];
               testScript = ''
-                assert Path('${symlink}').read_text() == 'got me'
+                assert Path('/etc/passwd').read_text()
               '';
             }
-          )
-          {
-            description = "check if StateDirectory works";
-            config.serviceConfig.User = "chroot-testuser";
-            config.serviceConfig.Group = "chroot-testgroup";
-            config.serviceConfig.StateDirectory = "testme";
+            (
+              let
+                symlink = pkgs.runCommand "symlink" {
+                  target = pkgs.writeText "symlink-target" "got me";
+                } "ln -s \"$target\" \"$out\"";
+              in
+              {
+                description = "check if symlinks are properly bind-mounted";
+                config.confinement.packages = lib.singleton symlink;
+                testScript = ''
+                  assert Path('${symlink}').read_text() == 'got me'
+                '';
+              }
+            )
+            {
+              description = "check if StateDirectory works";
+              config.serviceConfig.User = "chroot-testuser";
+              config.serviceConfig.Group = "chroot-testgroup";
+              config.serviceConfig.StateDirectory = "testme";
 
-            # We restart on purpose here since we want to check whether the state
-            # directory actually persists.
-            config.serviceConfig.Restart = "on-failure";
-            config.serviceConfig.RestartMode = "direct";
+              # We restart on purpose here since we want to check whether the state
+              # directory actually persists.
+              config.serviceConfig.Restart = "on-failure";
+              config.serviceConfig.RestartMode = "direct";
 
-            testScript = ''
-              assert not Path('/tmp/canary').exists()
-              Path('/tmp/canary').touch()
+              testScript = ''
+                assert not Path('/tmp/canary').exists()
+                Path('/tmp/canary').touch()
 
-              if (foo := Path('/var/lib/testme/foo')).exists():
-                assert Path('/var/lib/testme/foo').read_text() == 'works'
-              else:
-                Path('/var/lib/testme/foo').write_text('works')
-                print('<4>Exiting with failure to check persistence on restart.')
-                raise SystemExit(1)
-            '';
-          }
-          {
-            description = "check if /bin/sh works";
-            testScript = ''
-              assert Path('/bin/sh').exists()
+                if (foo := Path('/var/lib/testme/foo')).exists():
+                  assert Path('/var/lib/testme/foo').read_text() == 'works'
+                else:
+                  Path('/var/lib/testme/foo').write_text('works')
+                  print('<4>Exiting with failure to check persistence on restart.')
+                  raise SystemExit(1)
+              '';
+            }
+            {
+              description = "check if /bin/sh works";
+              testScript = ''
+                assert Path('/bin/sh').exists()
 
-              result = run(
-                ['/bin/sh', '-c', 'echo -n bar'],
-                capture_output=True,
-                check=True,
-              )
-              assert result.stdout == b'bar'
-            '';
-          }
-          {
-            description = "check if suppressing /bin/sh works";
-            config.confinement.binSh = null;
-            testScript = ''
-              assert not Path('/bin/sh').exists()
-              with pytest.raises(FileNotFoundError):
-                run(['/bin/sh', '-c', 'echo foo'])
-            '';
-          }
-          {
-            description = "check if we can set /bin/sh to something different";
-            config.confinement.binSh = "${pkgs.hello}/bin/hello";
-            testScript = ''
-              assert Path('/bin/sh').exists()
-              result = run(
-                ['/bin/sh', '-g', 'foo'],
-                capture_output=True,
-                check=True,
-              )
-              assert result.stdout == b'foo\n'
-            '';
-          }
-          {
-            description = "check if only Exec* dependencies are included";
-            config.environment.FOOBAR = pkgs.writeText "foobar" "eek";
-            testScript = ''
-              with pytest.raises(FileNotFoundError):
-                Path(os.environ['FOOBAR']).read_text()
-            '';
-          }
-          {
-            description = "check if fullUnit includes all dependencies";
-            config.environment.FOOBAR = pkgs.writeText "foobar" "eek";
-            config.confinement.fullUnit = true;
-            testScript = ''
-              assert Path(os.environ['FOOBAR']).read_text() == 'eek'
-            '';
-          }
-          {
-            description = "check if shipped unit file still works";
-            config.confinement.mode = "chroot-only";
-            rawUnit = ''
-              [Service]
-              SystemCallFilter=~kill
-              SystemCallErrorNumber=ELOOP
-            '';
-            testScript = ''
-              with pytest.raises(OSError) as excinfo:
-                os.kill(os.getpid(), signal.SIGKILL)
-              assert excinfo.value.errno == errno.ELOOP
-            '';
-          }
-        ]
-      );
+                result = run(
+                  ['/bin/sh', '-c', 'echo -n bar'],
+                  capture_output=True,
+                  check=True,
+                )
+                assert result.stdout == b'bar'
+              '';
+            }
+            {
+              description = "check if suppressing /bin/sh works";
+              config.confinement.binSh = null;
+              testScript = ''
+                assert not Path('/bin/sh').exists()
+                with pytest.raises(FileNotFoundError):
+                  run(['/bin/sh', '-c', 'echo foo'])
+              '';
+            }
+            {
+              description = "check if we can set /bin/sh to something different";
+              config.confinement.binSh = "${pkgs.hello}/bin/hello";
+              testScript = ''
+                assert Path('/bin/sh').exists()
+                result = run(
+                  ['/bin/sh', '-g', 'foo'],
+                  capture_output=True,
+                  check=True,
+                )
+                assert result.stdout == b'foo\n'
+              '';
+            }
+            {
+              description = "check if only Exec* dependencies are included";
+              config.environment.FOOBAR = pkgs.writeText "foobar" "eek";
+              testScript = ''
+                with pytest.raises(FileNotFoundError):
+                  Path(os.environ['FOOBAR']).read_text()
+              '';
+            }
+            {
+              description = "check if fullUnit includes all dependencies";
+              config.environment.FOOBAR = pkgs.writeText "foobar" "eek";
+              config.confinement.fullUnit = true;
+              testScript = ''
+                assert Path(os.environ['FOOBAR']).read_text() == 'eek'
+              '';
+            }
+            {
+              description = "check if shipped unit file still works";
+              config.confinement.mode = "chroot-only";
+              rawUnit = ''
+                [Service]
+                SystemCallFilter=~kill
+                SystemCallErrorNumber=ELOOP
+              '';
+              testScript = ''
+                with pytest.raises(OSError) as excinfo:
+                  os.kill(os.getpid(), signal.SIGKILL)
+                assert excinfo.value.errno == errno.ELOOP
+              '';
+            }
+          ]
+        )
+        ++ [ concurrentTest ];
 
       config.users.groups.chroot-testgroup = { };
       config.users.users.chroot-testuser = {

From 493ce41772ee466930f3ecff8bd7608869c0432e Mon Sep 17 00:00:00 2001
From: Lin Yinfeng <lin.yinfeng@outlook.com>
Date: Thu, 4 Dec 2025 20:47:12 +0800
Subject: [PATCH 082/115] angrr: 0.1.3 -> 0.1.5

---
 pkgs/by-name/an/angrr/package.nix | 24 +++++++++++++++---------
 1 file changed, 15 insertions(+), 9 deletions(-)

diff --git a/pkgs/by-name/an/angrr/package.nix b/pkgs/by-name/an/angrr/package.nix
index 48e150b19463..36ec20e30d36 100644
--- a/pkgs/by-name/an/angrr/package.nix
+++ b/pkgs/by-name/an/angrr/package.nix
@@ -11,26 +11,32 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "angrr";
-  version = "0.1.3";
+  version = "0.1.5";
 
   src = fetchFromGitHub {
     owner = "linyinfeng";
     repo = "angrr";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-pBVbzrTy/IWIo6WlhM1qgowfxSU31awyHcRDHNArBMo=";
+    hash = "sha256-PT3oCNPRvEroyVNiICeO0hSHDzKUC6KcP9HnIw1kMQE=";
   };
 
-  cargoHash = "sha256-DoQIJCs36ZmTxdsDCzquKAeOSIUBbo2V+DTx68FZiu4=";
+  cargoHash = "sha256-lDOH4Ceap69fX6VWbgQoQfmYWZI+jPE0LJiXmqrTRn8=";
+
+  buildAndTestSubdir = "angrr";
 
   nativeBuildInputs = [ installShellFiles ];
+  postBuild = ''
+    mkdir --parents build/{man-pages,shell-completions}
+    cargo xtask man-pages --out build/man-pages
+    cargo xtask shell-completions --out build/shell-completions
+  '';
   postInstall = ''
     install -m400 -D ./direnv/angrr.sh $out/share/direnv/lib/angrr.sh
-  ''
-  + lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
+    installManPage build/man-pages/*
     installShellCompletion --cmd angrr \
-      --bash <($out/bin/angrr completion bash) \
-      --fish <($out/bin/angrr completion fish) \
-      --zsh  <($out/bin/angrr completion zsh)
+      --bash build/shell-completions/angrr.bash \
+      --fish build/shell-completions/angrr.fish \
+      --zsh  build/shell-completions/_angrr
   '';
 
   passthru = {
@@ -44,7 +50,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   };
 
   meta = {
-    description = "Tool for auto Nix GC roots retention";
+    description = "Temporary GC Roots Cleaner";
     homepage = "https://github.com/linyinfeng/angrr";
     license = [ lib.licenses.mit ];
     maintainers = with lib.maintainers; [ yinfeng ];

From e95c0aa305c0430d51a239e167ed83e9f7760c9b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 5 Dec 2025 17:10:27 +0000
Subject: [PATCH 083/115] python3Packages.llama-cloud: 0.1.44 -> 0.1.45

---
 pkgs/development/python-modules/llama-cloud/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/llama-cloud/default.nix b/pkgs/development/python-modules/llama-cloud/default.nix
index 5b1d8976d9ff..e2bbf73334a5 100644
--- a/pkgs/development/python-modules/llama-cloud/default.nix
+++ b/pkgs/development/python-modules/llama-cloud/default.nix
@@ -10,7 +10,7 @@
 
 buildPythonPackage rec {
   pname = "llama-cloud";
-  version = "0.1.44";
+  version = "0.1.45";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
@@ -18,7 +18,7 @@ buildPythonPackage rec {
   src = fetchPypi {
     pname = "llama_cloud";
     inherit version;
-    hash = "sha256-J2orT5RGPaA3QxyjBjMxs7a+OYu/sAMRPudrfCqHO1M=";
+    hash = "sha256-FAJEAIzFcQ4xrpfGBDlzo6mWmlGw84FV+jOoQ0B46Ko=";
   };
 
   build-system = [ poetry-core ];

From aecb34b42c8bfea097c3269b2b673e839ad8edd3 Mon Sep 17 00:00:00 2001
From: Lin Yinfeng <lin.yinfeng@outlook.com>
Date: Sat, 6 Dec 2025 02:39:43 +0800
Subject: [PATCH 084/115] nixosTests.angrr: fix test

1. Starting from v0.1.4, the tool only monitors `result.*` and `.direnv/.*` GC roots.
   Modify paths to reflect this change.
2. `test ! -f /path/to/symlink` always succeed because symbol links are not regular file.
   Replace all `test ! -f` with `test ! -e`.
---
 nixos/tests/angrr.nix | 34 +++++++++++++++++-----------------
 1 file changed, 17 insertions(+), 17 deletions(-)

diff --git a/nixos/tests/angrr.nix b/nixos/tests/angrr.nix
index e4bca782a1ac..2c2baefd8e86 100644
--- a/nixos/tests/angrr.nix
+++ b/nixos/tests/angrr.nix
@@ -32,38 +32,38 @@
 
     # Creates some auto gc roots
     # Use /run/current-system so that we do not need to build anything new
-    machine.succeed("nix build /run/current-system --out-link /tmp/root-auto-gc-root-1")
-    machine.succeed("nix build /run/current-system --out-link /tmp/root-auto-gc-root-2")
-    machine.succeed("su normal --command 'nix build /run/current-system --out-link /tmp/user-auto-gc-root-1'")
-    machine.succeed("su normal --command 'nix build /run/current-system --out-link /tmp/user-auto-gc-root-2'")
+    machine.succeed("nix build /run/current-system --out-link /tmp/result-root-auto-gc-root-1")
+    machine.succeed("nix build /run/current-system --out-link /tmp/result-root-auto-gc-root-2")
+    machine.succeed("su normal --command 'nix build /run/current-system --out-link /tmp/result-user-auto-gc-root-1'")
+    machine.succeed("su normal --command 'nix build /run/current-system --out-link /tmp/result-user-auto-gc-root-2'")
 
     machine.systemctl("start nix-gc.service")
     # Not auto gc root will be removed
-    machine.succeed("readlink /tmp/root-auto-gc-root-1")
-    machine.succeed("readlink /tmp/root-auto-gc-root-2")
-    machine.succeed("readlink /tmp/user-auto-gc-root-1")
-    machine.succeed("readlink /tmp/user-auto-gc-root-2")
+    machine.succeed("readlink /tmp/result-root-auto-gc-root-1")
+    machine.succeed("readlink /tmp/result-root-auto-gc-root-2")
+    machine.succeed("readlink /tmp/result-user-auto-gc-root-1")
+    machine.succeed("readlink /tmp/result-user-auto-gc-root-2")
 
     # Change time to 8 days after (greater than 7d)
     machine.succeed("date -s '8 days'")
 
     # Touch GC roots `-2`
-    machine.succeed("touch /tmp/root-auto-gc-root-2 --no-dereference")
-    machine.succeed("touch /tmp/user-auto-gc-root-2 --no-dereference")
+    machine.succeed("touch /tmp/result-root-auto-gc-root-2 --no-dereference")
+    machine.succeed("touch /tmp/result-user-auto-gc-root-2 --no-dereference")
 
     machine.systemctl("start nix-gc.service")
     # Only GC roots `-1` are removed
-    machine.succeed("test ! -f /tmp/root-auto-gc-root-1")
-    machine.succeed("readlink  /tmp/root-auto-gc-root-2")
-    machine.succeed("test ! -f /tmp/user-auto-gc-root-1")
-    machine.succeed("readlink  /tmp/user-auto-gc-root-2")
+    machine.succeed("test ! -e /tmp/result-root-auto-gc-root-1")
+    machine.succeed("readlink  /tmp/result-root-auto-gc-root-2")
+    machine.succeed("test ! -e /tmp/result-user-auto-gc-root-1")
+    machine.succeed("readlink  /tmp/result-user-auto-gc-root-2")
 
     # Change time again
     machine.succeed("date -s '8 days'")
     machine.systemctl("start nix-gc.service")
     # All auto GC roots are removed
-    machine.succeed("test ! -f /tmp/root-auto-gc-root-2")
-    machine.succeed("test ! -f /tmp/user-auto-gc-root-2")
+    machine.succeed("test ! -e /tmp/result-root-auto-gc-root-2")
+    machine.succeed("test ! -e /tmp/result-user-auto-gc-root-2")
 
     # Direnv integration test
     machine.succeed("mkdir /tmp/test-direnv")
@@ -74,7 +74,7 @@
     # The root will be removed if we does not use the direnv recently
     machine.succeed("date -s '8 days'")
     machine.systemctl("start nix-gc.service")
-    machine.succeed("test ! -f /tmp/test-direnv/.direnv/gc-root")
+    machine.succeed("test ! -e /tmp/test-direnv/.direnv/gc-root")
 
     # Recreate the root
     machine.succeed("nix build /run/current-system --out-link /tmp/test-direnv/.direnv/gc-root")

From 6a2cf882ce6d7eb14d3d5337a3be847748976855 Mon Sep 17 00:00:00 2001
From: Shawn8901 <shawn8901@googlemail.com>
Date: Tue, 2 Dec 2025 21:09:57 +0100
Subject: [PATCH 085/115] victorialogs: run tests via passthru.tests

---
 pkgs/by-name/vi/victorialogs/package.nix | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/pkgs/by-name/vi/victorialogs/package.nix b/pkgs/by-name/vi/victorialogs/package.nix
index db4f7c868503..9f562333faaf 100644
--- a/pkgs/by-name/vi/victorialogs/package.nix
+++ b/pkgs/by-name/vi/victorialogs/package.nix
@@ -48,11 +48,7 @@ buildGoModule (finalAttrs: {
   __darwinAllowLocalNetworking = true;
 
   passthru = {
-    tests = {
-      inherit (nixosTests)
-        victorialogs
-        ;
-    };
+    tests = lib.recurseIntoAttrs nixosTests.victorialogs;
     updateScript = nix-update-script { };
   };
 

From 9231bc2a30a916c48ac382603a3afa3857b14b4a Mon Sep 17 00:00:00 2001
From: Shawn8901 <shawn8901@googlemail.com>
Date: Tue, 2 Dec 2025 21:10:06 +0100
Subject: [PATCH 086/115] victoriametrics: run tests via passthru.tests

---
 pkgs/by-name/vi/victoriametrics/package.nix | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/pkgs/by-name/vi/victoriametrics/package.nix b/pkgs/by-name/vi/victoriametrics/package.nix
index 864038394899..30dd36a4ab95 100644
--- a/pkgs/by-name/vi/victoriametrics/package.nix
+++ b/pkgs/by-name/vi/victoriametrics/package.nix
@@ -77,9 +77,7 @@ buildGoModule (finalAttrs: {
   __darwinAllowLocalNetworking = true;
 
   passthru = {
-    tests = {
-      inherit (nixosTests) victoriametrics;
-    };
+    tests = lib.recurseIntoAttrs nixosTests.victoriametrics;
     updateScript = ./update.sh;
   };
 

From e8b2a0638dba4284871846f99ae2493c62b95c06 Mon Sep 17 00:00:00 2001
From: Shawn8901 <shawn8901@googlemail.com>
Date: Tue, 2 Dec 2025 21:10:14 +0100
Subject: [PATCH 087/115] victoriatraces: run tests via passthru.tests

---
 pkgs/by-name/vi/victoriatraces/package.nix | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/pkgs/by-name/vi/victoriatraces/package.nix b/pkgs/by-name/vi/victoriatraces/package.nix
index bfa7c48aba9c..6727f513a08f 100644
--- a/pkgs/by-name/vi/victoriatraces/package.nix
+++ b/pkgs/by-name/vi/victoriatraces/package.nix
@@ -47,9 +47,7 @@ buildGoModule (finalAttrs: {
   __darwinAllowLocalNetworking = true;
 
   passthru = {
-    tests = {
-      inherit (nixosTests) victoriatraces;
-    };
+    tests = lib.recurseIntoAttrs nixosTests.victoriatraces;
     updateScript = nix-update-script { };
   };
 

From 88485d713b27a68c8ecb0b1b9b398d8b91503fc7 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 5 Dec 2025 19:33:56 +0000
Subject: [PATCH 088/115] python3Packages.zxcvbn-rs-py: 0.2.0 -> 0.3.0

---
 pkgs/development/python-modules/zxcvbn-rs-py/default.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/zxcvbn-rs-py/default.nix b/pkgs/development/python-modules/zxcvbn-rs-py/default.nix
index fb932352b120..c28c0c3a1ce2 100644
--- a/pkgs/development/python-modules/zxcvbn-rs-py/default.nix
+++ b/pkgs/development/python-modules/zxcvbn-rs-py/default.nix
@@ -8,7 +8,7 @@
 
 buildPythonPackage rec {
   pname = "zxcvbn-rs-py";
-  version = "0.2.0";
+  version = "0.3.0";
 
   pyproject = true;
 
@@ -17,7 +17,7 @@ buildPythonPackage rec {
   src = fetchPypi {
     pname = "zxcvbn_rs_py";
     inherit version;
-    hash = "sha256-DQzdOngHGZma2NyfrNuMppG6GzpGoKfwVQGUVmN7erA=";
+    hash = "sha256-0nQmgII6F0gj8HCnNAdLvowWBPExPAgXCxWAJuNsc6A=";
   };
 
   build-system = [
@@ -27,7 +27,7 @@ buildPythonPackage rec {
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit pname version src;
-    hash = "sha256-WkaTEoVQVOwxcTyOIG5oHEvcv65fBEpokl3/6SxqiUw=";
+    hash = "sha256-S6K6ZzW24V2yFV89B+gN+Odc4h3R45lF+emZs69dzYg=";
   };
 
   pythonImportsCheck = [ "zxcvbn_rs_py" ];

From 3dea17670ea362e5675cbcfbd2975bb962fca1fc Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 5 Dec 2025 23:12:01 +0000
Subject: [PATCH 089/115] python3Packages.prometheus-api-client: 0.6.0 -> 0.7.0

---
 .../python-modules/prometheus-api-client/default.nix          | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/prometheus-api-client/default.nix b/pkgs/development/python-modules/prometheus-api-client/default.nix
index 1be5ee668e52..9ddc610b5c01 100644
--- a/pkgs/development/python-modules/prometheus-api-client/default.nix
+++ b/pkgs/development/python-modules/prometheus-api-client/default.nix
@@ -14,14 +14,14 @@
 
 buildPythonPackage rec {
   pname = "prometheus-api-client";
-  version = "0.6.0";
+  version = "0.7.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "4n4nd";
     repo = "prometheus-api-client-python";
     tag = "v${version}";
-    hash = "sha256-Xi3n1Ha6bpfp4KfCh/Zky7bBrXOojuR6BVzPNQ3a18Y=";
+    hash = "sha256-dpvGvI37jMoWvMrVSCwiyendGCDLCw+s2TI04y8akx8=";
   };
 
   build-system = [ setuptools ];

From f7179313faca8a0a32b9954e99c25f1d6f90c888 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 6 Dec 2025 00:42:26 +0000
Subject: [PATCH 090/115] python3Packages.xknx: 3.11.0 -> 3.12.0

---
 pkgs/development/python-modules/xknx/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/xknx/default.nix b/pkgs/development/python-modules/xknx/default.nix
index b19f1d9d9767..5c843a747789 100644
--- a/pkgs/development/python-modules/xknx/default.nix
+++ b/pkgs/development/python-modules/xknx/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage rec {
   pname = "xknx";
-  version = "3.11.0";
+  version = "3.12.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "XKNX";
     repo = "xknx";
     tag = version;
-    hash = "sha256-jWnDiGg7vjIt4xkqjKrauExnvHcrH8m0RGfHjQlljFY=";
+    hash = "sha256-Sb/qPLINeYt96s7NkRARcb0ZrcE6A0ByyENVd5aiHxk=";
   };
 
   build-system = [ setuptools ];

From c03956548f31959cbb30621a68db76368e3d5bfe Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 6 Dec 2025 01:04:15 +0000
Subject: [PATCH 091/115] regolith: 1.6.1 -> 1.6.2

---
 pkgs/by-name/re/regolith/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/re/regolith/package.nix b/pkgs/by-name/re/regolith/package.nix
index 6d8576eb90ed..aae561ed8e5e 100644
--- a/pkgs/by-name/re/regolith/package.nix
+++ b/pkgs/by-name/re/regolith/package.nix
@@ -7,19 +7,19 @@
 }:
 buildGoModule rec {
   pname = "regolith";
-  version = "1.6.1";
+  version = "1.6.2";
 
   src = fetchFromGitHub {
     owner = "Bedrock-OSS";
     repo = "regolith";
     tag = version;
-    hash = "sha256-4STEivb2nlIYE6X0vnO8L4UtFrtmaNS+rxtuE0SwKmA=";
+    hash = "sha256-J4DkEjN+hPK6fu9dIuHdY6gu1imb0sB/KdWnXYJSgw8=";
   };
 
   # Requires network access.
   doCheck = false;
 
-  vendorHash = "sha256-EWfc4VzVrg1D012dsPqdXoiGpBjpQRYiWNd0wrWlw34=";
+  vendorHash = "sha256-jQeIPJJyANS+U9NrjLSnXHAecCK4rHPZrP5JFsMwcm8=";
 
   ldflags = [
     "-X main.buildSource=nix"

From 5f1b6b976905b340326fbacfaf2ada7fbe92a6fc Mon Sep 17 00:00:00 2001
From: botnk <github-botnk@korz.dev>
Date: Sat, 6 Dec 2025 01:28:47 +0000
Subject: [PATCH 092/115] ente-auth: 4.4.10 -> 4.4.12

Changelog: https://github.com/ente-io/ente/releases/tag/auth-v4.4.12
---
 pkgs/by-name/en/ente-auth/package.nix       |  4 +-
 pkgs/by-name/en/ente-auth/pubspec.lock.json | 43 ++++++++++++++++++++-
 2 files changed, 43 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/en/ente-auth/package.nix b/pkgs/by-name/en/ente-auth/package.nix
index 4255015dcef0..da702d2a11eb 100644
--- a/pkgs/by-name/en/ente-auth/package.nix
+++ b/pkgs/by-name/en/ente-auth/package.nix
@@ -18,14 +18,14 @@ let
 in
 flutter332.buildFlutterApplication rec {
   pname = "ente-auth";
-  version = "4.4.10";
+  version = "4.4.12";
 
   src = fetchFromGitHub {
     owner = "ente-io";
     repo = "ente";
     sparseCheckout = [ "mobile" ];
     tag = "auth-v${version}";
-    hash = "sha256-JzDFzopXNurkOtdheiQZJ5aBQWu7YZumiHs2RghGeVc=";
+    hash = "sha256-1GJWGTzErV+wSkeAg3z0u7tBPFrq6hPc0fWniKT8w9M=";
   };
 
   sourceRoot = "${src.name}/mobile/apps/auth";
diff --git a/pkgs/by-name/en/ente-auth/pubspec.lock.json b/pkgs/by-name/en/ente-auth/pubspec.lock.json
index ea7d289622e7..3238c7d01ca7 100644
--- a/pkgs/by-name/en/ente-auth/pubspec.lock.json
+++ b/pkgs/by-name/en/ente-auth/pubspec.lock.json
@@ -450,6 +450,25 @@
       "source": "hosted",
       "version": "2.1.1"
     },
+    "dir_utils": {
+      "dependency": "direct main",
+      "description": {
+        "path": "../../packages/dir_utils",
+        "relative": true
+      },
+      "source": "path",
+      "version": "1.0.0"
+    },
+    "dots_indicator": {
+      "dependency": "direct main",
+      "description": {
+        "name": "dots_indicator",
+        "sha256": "2a53e0321a3f0d87e38ef30f6e9ff1deb5d6c0e2c5708e057d26cdaa94a95f10",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "3.1.0"
+    },
     "dotted_border": {
       "dependency": "direct main",
       "description": {
@@ -1180,11 +1199,11 @@
       "dependency": "direct main",
       "description": {
         "name": "hugeicons",
-        "sha256": "b4a695c2100217a0b4d2378f0102d948925c97e37417baa6e2d9cb62ba8fb2f7",
+        "sha256": "036d917bd12e2dee331de7910a11417ebf6c80be1962c0d63ee945e3184f0937",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "1.1.0"
+      "version": "1.1.1"
     },
     "image": {
       "dependency": "direct main",
@@ -1738,6 +1757,26 @@
       "source": "hosted",
       "version": "4.1.0"
     },
+    "saf_stream": {
+      "dependency": "direct main",
+      "description": {
+        "name": "saf_stream",
+        "sha256": "c05449997698c481a03e428162a999f93b1ee1bcc0349d651899a59f7b10230a",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "0.12.3"
+    },
+    "saf_util": {
+      "dependency": "direct main",
+      "description": {
+        "name": "saf_util",
+        "sha256": "219f983e5f17b28998335158cdc97add9d52af9884e38b5a43f10dcc070510ec",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "0.11.0"
+    },
     "screen_retriever": {
       "dependency": "transitive",
       "description": {

From 368c63cee8628acc9f7672ca13b89235432ab1f8 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 6 Dec 2025 02:14:49 +0000
Subject: [PATCH 093/115] serie: 0.5.4 -> 0.5.5

---
 pkgs/by-name/se/serie/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/se/serie/package.nix b/pkgs/by-name/se/serie/package.nix
index fb02a4996571..8a0f9b3887dc 100644
--- a/pkgs/by-name/se/serie/package.nix
+++ b/pkgs/by-name/se/serie/package.nix
@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "serie";
-  version = "0.5.4";
+  version = "0.5.5";
 
   src = fetchFromGitHub {
     owner = "lusingander";
     repo = "serie";
     rev = "v${version}";
-    hash = "sha256-4F17DArBV3kKQJi24pwD+JE7W9AuAQrxJcU1YTj93os=";
+    hash = "sha256-qbXbbHu8RFSzeexWY/KQKEDnL+pRQPSV8sweCEcv4Kc=";
   };
 
-  cargoHash = "sha256-wvvtlhlgwZylE6tucVcmsGbos6h5Nc8ZfP8zlkcIoqw=";
+  cargoHash = "sha256-lNJY+iNXE+f1haOmNL6OehS5KsLYJMCvF04U5a/AXhA=";
 
   nativeCheckInputs = [ gitMinimal ];
 

From c5de5d3bac9132774b05185d05c8ba4e241f937f Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 6 Dec 2025 04:35:53 +0000
Subject: [PATCH 094/115] postgresqlPackages.pg-gvm: 22.6.11 -> 22.6.12

---
 pkgs/servers/sql/postgresql/ext/pg-gvm.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/sql/postgresql/ext/pg-gvm.nix b/pkgs/servers/sql/postgresql/ext/pg-gvm.nix
index 238621d8ccfa..0fc9e58cbb83 100644
--- a/pkgs/servers/sql/postgresql/ext/pg-gvm.nix
+++ b/pkgs/servers/sql/postgresql/ext/pg-gvm.nix
@@ -14,13 +14,13 @@
 
 postgresqlBuildExtension (finalAttrs: {
   pname = "pg-gvm";
-  version = "22.6.11";
+  version = "22.6.12";
 
   src = fetchFromGitHub {
     owner = "greenbone";
     repo = "pg-gvm";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-jkpZg1LMWuH5R4I/kTO3cofL3uNt11yXSgfFppSNC+o=";
+    hash = "sha256-x+RTB4/Uj8Cif+JTVQjRU0UZxa3+LHwtooJi9eoB8vE=";
   };
 
   nativeBuildInputs = [

From 7ef5f46a956e26891a6c49ca4daa272811240b04 Mon Sep 17 00:00:00 2001
From: Kira Bruneau <kira.bruneau@pm.me>
Date: Fri, 5 Dec 2025 23:55:24 -0500
Subject: [PATCH 095/115] python313Packages.debugpy: make src reproducible

---
 pkgs/development/python-modules/debugpy/default.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/pkgs/development/python-modules/debugpy/default.nix b/pkgs/development/python-modules/debugpy/default.nix
index a288bccf7d89..ed81790c081e 100644
--- a/pkgs/development/python-modules/debugpy/default.nix
+++ b/pkgs/development/python-modules/debugpy/default.nix
@@ -32,6 +32,16 @@ buildPythonPackage rec {
     owner = "microsoft";
     repo = "debugpy";
     tag = "v${version}";
+
+    # Upstream uses .gitattributes to inject information about the revision
+    # hash and the refname into `src/debugpy/_version.py`, see:
+    #
+    # - https://git-scm.com/docs/gitattributes#_export_subst and
+    # - https://github.com/microsoft/debugpy/blob/v1.8.17/src/debugpy/_version.py#L24-L30
+    postFetch = ''
+      sed -i 's/git_refnames = "[^"]*"/git_refnames = " (tag: ${src.tag})"/' "$out/src/debugpy/_version.py"
+    '';
+
     hash = "sha256-eAiCtSJUqLASapxnYCyq1UCiGz6QmKQum7Vs3MoU1s8=";
   };
 

From a2457971717b9db2aa7a9ea7063d3a3e670636d1 Mon Sep 17 00:00:00 2001
From: Kira Bruneau <kira.bruneau@pm.me>
Date: Sat, 6 Dec 2025 00:37:00 -0500
Subject: [PATCH 096/115] python313Packages.debugpy: remove hardcode-version
 patch

---
 .../python-modules/debugpy/default.nix        |  5 --
 .../debugpy/hardcode-version.patch            | 47 -------------------
 2 files changed, 52 deletions(-)
 delete mode 100644 pkgs/development/python-modules/debugpy/hardcode-version.patch

diff --git a/pkgs/development/python-modules/debugpy/default.nix b/pkgs/development/python-modules/debugpy/default.nix
index ed81790c081e..bf1aa352522d 100644
--- a/pkgs/development/python-modules/debugpy/default.nix
+++ b/pkgs/development/python-modules/debugpy/default.nix
@@ -46,11 +46,6 @@ buildPythonPackage rec {
   };
 
   patches = [
-    # Use nixpkgs version instead of versioneer
-    (replaceVars ./hardcode-version.patch {
-      inherit version;
-    })
-
     # Fix importing debugpy in:
     # - test_nodebug[module-launch(externalTerminal)]
     # - test_nodebug[module-launch(integratedTerminal)]
diff --git a/pkgs/development/python-modules/debugpy/hardcode-version.patch b/pkgs/development/python-modules/debugpy/hardcode-version.patch
deleted file mode 100644
index 00e77bd75b94..000000000000
--- a/pkgs/development/python-modules/debugpy/hardcode-version.patch
+++ /dev/null
@@ -1,47 +0,0 @@
-diff --git a/setup.py b/setup.py
-index d16a27c5..a7e407e1 100644
---- a/setup.py
-+++ b/setup.py
-@@ -12,7 +12,6 @@ import sys
- 
- 
- sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
--import versioneer  # noqa
- 
- del sys.path[0]
- 
-@@ -145,13 +144,13 @@ if __name__ == "__main__":
-     if platforms is not None:
-         extras["platforms"] = platforms
- 
--    cmds = versioneer.get_cmdclass()
-+    cmds = {}
-     override_build(cmds)
-     override_build_py(cmds)
- 
-     setuptools.setup(
-         name="debugpy",
--        version=versioneer.get_version(),
-+        version="@version@",
-         description="An implementation of the Debug Adapter Protocol for Python",  # noqa
-         long_description=long_description,
-         long_description_content_type="text/markdown",
-diff --git a/src/debugpy/public_api.py b/src/debugpy/public_api.py
-index c61a2607..f26f8272 100644
---- a/src/debugpy/public_api.py
-+++ b/src/debugpy/public_api.py
-@@ -7,8 +7,6 @@ from __future__ import annotations
- import functools
- import typing
- 
--from debugpy import _version
--
- 
- # Expose debugpy.server API from subpackage, but do not actually import it unless
- # and until a member is invoked - we don't want the server package loaded in the
-@@ -192,4 +190,4 @@ def trace_this_thread(__should_trace: bool):
-     """
- 
- 
--__version__: str = _version.get_versions()["version"]
-+__version__: str = "@version@"

From 88b0233cbe9fd20510b4d2e4ff7aa7c1cc144727 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 6 Dec 2025 06:12:50 +0000
Subject: [PATCH 097/115] commitlint: 20.1.0 -> 20.2.0

---
 pkgs/by-name/co/commitlint/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/co/commitlint/package.nix b/pkgs/by-name/co/commitlint/package.nix
index 4d05613266cc..269fd1d2c195 100644
--- a/pkgs/by-name/co/commitlint/package.nix
+++ b/pkgs/by-name/co/commitlint/package.nix
@@ -12,18 +12,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "commitlint";
-  version = "20.1.0";
+  version = "20.2.0";
 
   src = fetchFromGitHub {
     owner = "conventional-changelog";
     repo = "commitlint";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-o8AnIewSmg8vRjs8LU6QwRyl2hMQ2iK5W7WL137treU=";
+    hash = "sha256-L9HfuwpFmKWoEyFdo7+UIEeEcD0jFhunj0x6UFHfhEY=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     inherit (finalAttrs) src;
-    hash = "sha256-Kg19sEgstrWj+JLzdZFnMeb0F5lFX3Z0VPNyiYPi6nY=";
+    hash = "sha256-rKVMSbsipd8J2E+E2RdeXYDsMwSzFZMJJ4zceOLBbCs=";
   };
 
   nativeBuildInputs = [

From 08722e762900c96d9c116782b3e3ebd364dfeada Mon Sep 17 00:00:00 2001
From: eljamm <fedi.jamoussi@protonmail.ch>
Date: Sat, 6 Dec 2025 06:51:33 +0100
Subject: [PATCH 098/115] readest: 0.9.93 -> 0.9.94

Changelog: https://github.com/readest/readest/releases/tag/v0.9.94
Diff: https://github.com/readest/readest/compare/v0.9.93...v0.9.94
---
 pkgs/by-name/re/readest/package.nix | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/re/readest/package.nix b/pkgs/by-name/re/readest/package.nix
index 0fe9a269199e..795829e94a8f 100644
--- a/pkgs/by-name/re/readest/package.nix
+++ b/pkgs/by-name/re/readest/package.nix
@@ -20,13 +20,13 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "readest";
-  version = "0.9.93";
+  version = "0.9.94";
 
   src = fetchFromGitHub {
     owner = "readest";
     repo = "readest";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Yfj7QVjCCIX41xVzYMoaJPQd2zY/zymo2V2nbNUZpO4=";
+    hash = "sha256-yDMVkcypw+7zoVAUeVL23agNr8rG3gvNJFbVJW/VNKY=";
     fetchSubmodules = true;
   };
 
@@ -40,12 +40,12 @@ rustPlatform.buildRustPackage (finalAttrs: {
   pnpmDeps = pnpm_9.fetchDeps {
     inherit (finalAttrs) pname version src;
     fetcherVersion = 1;
-    hash = "sha256-z7eOiaNXUb2wb014MOGAejZc2fgoMTavhJsNQaygFzc=";
+    hash = "sha256-Q+kGrf24zKeLyM4JhSXXKtKRGQbwwiHm+aUuHHSyN/U=";
   };
 
   pnpmRoot = "../..";
 
-  cargoHash = "sha256-nNMD2LnMDz91kI2QniD+zD/Ug9BSVjTIiuxWdz8UxL0=";
+  cargoHash = "sha256-PbWjDvxbbiiKy1UeJx7cUawGampbL5t/Bhb13tirhGc=";
 
   cargoRoot = "../..";
 
@@ -85,7 +85,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   ];
 
   preBuild = ''
-    pnpm setup-pdfjs
+    # set up pdfjs and simplecc
+    pnpm setup-vendors
   '';
 
   preFixup = ''

From 747d6394c41072dd3973683309bc9644f2f6c9b4 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 6 Dec 2025 06:30:35 +0000
Subject: [PATCH 099/115] python3Packages.ansible-compat: 25.11.0 -> 25.12.0

---
 pkgs/development/python-modules/ansible-compat/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/ansible-compat/default.nix b/pkgs/development/python-modules/ansible-compat/default.nix
index 3e3bb16f84a6..5961055bf89f 100644
--- a/pkgs/development/python-modules/ansible-compat/default.nix
+++ b/pkgs/development/python-modules/ansible-compat/default.nix
@@ -23,14 +23,14 @@
 
 buildPythonPackage rec {
   pname = "ansible-compat";
-  version = "25.11.0";
+  version = "25.12.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ansible";
     repo = "ansible-compat";
     tag = "v${version}";
-    hash = "sha256-UzrZOUWKeU/4tnc7o5JQqNKsFcLhCKVwXT+2hZXXcbw=";
+    hash = "sha256-nn0NKX6rqNKrSZd+p/oq/LmESAgvTkSOA08wq1xLY2I=";
   };
 
   build-system = [

From f9a9dcb898467a6bb709dd114a112d302c5da1f7 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 6 Dec 2025 07:43:27 +0000
Subject: [PATCH 100/115] python3Packages.uxsim: 1.10.2 -> 1.11.0

---
 pkgs/development/python-modules/uxsim/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/uxsim/default.nix b/pkgs/development/python-modules/uxsim/default.nix
index 3ee7edd3fd3c..43060fa388c1 100644
--- a/pkgs/development/python-modules/uxsim/default.nix
+++ b/pkgs/development/python-modules/uxsim/default.nix
@@ -18,14 +18,14 @@
 }:
 buildPythonPackage rec {
   pname = "uxsim";
-  version = "1.10.2";
+  version = "1.11.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "toruseo";
     repo = "UXsim";
     tag = "v${version}";
-    hash = "sha256-GK1tD0STBCR0Z/JHdhrgLun6t2snJqi/oFGUOeiXk6c=";
+    hash = "sha256-q8L6UkKL+M9zgax6jjxwkFrwayaxMTYJRfWt8Rnj00I=";
   };
 
   patches = [ ./add-qt-plugin-path-to-env.patch ];

From 98c3c8f4f1d2abc035b3296e6a737253e3cd6209 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 6 Dec 2025 08:42:02 +0000
Subject: [PATCH 101/115] python3Packages.awscrt: 0.29.1 -> 0.29.2

---
 pkgs/development/python-modules/awscrt/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/awscrt/default.nix b/pkgs/development/python-modules/awscrt/default.nix
index b28894a6c475..a23d82403998 100644
--- a/pkgs/development/python-modules/awscrt/default.nix
+++ b/pkgs/development/python-modules/awscrt/default.nix
@@ -10,12 +10,12 @@
 
 buildPythonPackage rec {
   pname = "awscrt";
-  version = "0.29.1";
+  version = "0.29.2";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-j8MEr19vg+fnMJb7QutR1Khfp6kEVkZu8ihyCV1MpG8=";
+    hash = "sha256-x42BsTCNQv2h6yHSf88mV5E3uCEEPlKFUPLPxsCauf8=";
   };
 
   build-system = [ setuptools ];

From d5959468f678d63f77f7b8eaa74591406b4a9977 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sat, 6 Dec 2025 12:25:59 +0100
Subject: [PATCH 102/115] python313Packages.llama-cloud: remove disabled

---
 pkgs/development/python-modules/llama-cloud/default.nix | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/pkgs/development/python-modules/llama-cloud/default.nix b/pkgs/development/python-modules/llama-cloud/default.nix
index e2bbf73334a5..35f0d81e4797 100644
--- a/pkgs/development/python-modules/llama-cloud/default.nix
+++ b/pkgs/development/python-modules/llama-cloud/default.nix
@@ -5,7 +5,6 @@
   httpx,
   poetry-core,
   pydantic,
-  pythonOlder,
 }:
 
 buildPythonPackage rec {
@@ -13,8 +12,6 @@ buildPythonPackage rec {
   version = "0.1.45";
   pyproject = true;
 
-  disabled = pythonOlder "3.8";
-
   src = fetchPypi {
     pname = "llama_cloud";
     inherit version;

From 4a2ccd2b53c20ca0724682a7c10f9a1a98d1bc7b Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Sat, 6 Dec 2025 12:48:16 +0100
Subject: [PATCH 103/115] openttd: fix openmsx hash

---
 pkgs/games/openttd/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/games/openttd/default.nix b/pkgs/games/openttd/default.nix
index 4a81ab7314be..e260175e7af8 100644
--- a/pkgs/games/openttd/default.nix
+++ b/pkgs/games/openttd/default.nix
@@ -50,7 +50,7 @@ let
 
   openmsx = fetchzip {
     url = "https://cdn.openttd.org/openmsx-releases/0.4.2/openmsx-0.4.2-all.zip";
-    hash = "sha256-Cgrg2m+uTODFg39mKgX+hE8atV7v5bVyZd716vSZB8M=";
+    hash = "sha256-ysNFIvo7iaLN8XoaeZuZQFLpBZlYUDLDg7rH6TabaHY=";
   };
 
   # OpenTTD builds and uses some of its own tools during the build and we need those to be available for cross-compilation.

From a1c25aaae9378594fe65faa5be350f6ac1398fbe Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 6 Dec 2025 11:50:49 +0000
Subject: [PATCH 104/115] python3Packages.mozart-api: 5.1.0.247.1 ->
 5.3.1.108.0

---
 pkgs/development/python-modules/mozart-api/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/mozart-api/default.nix b/pkgs/development/python-modules/mozart-api/default.nix
index a0dbd6eed830..79b890ae60ca 100644
--- a/pkgs/development/python-modules/mozart-api/default.nix
+++ b/pkgs/development/python-modules/mozart-api/default.nix
@@ -18,13 +18,13 @@
 
 buildPythonPackage rec {
   pname = "mozart-api";
-  version = "5.1.0.247.1";
+  version = "5.3.1.108.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "mozart_api";
     inherit version;
-    hash = "sha256-//4mJh+Vf/NdnQmX19EOhn+Lx+BTMbZE5xwG6kXs84Y=";
+    hash = "sha256-12qjXQKQS3k1hDRLW0UkR5OqHM/QmXKOnfoJVguhHWQ=";
   };
 
   build-system = [ poetry-core ];

From a5e48f620716963febcfdf948fe918db6aafa465 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 6 Dec 2025 12:30:49 +0000
Subject: [PATCH 105/115] release-plz: 0.3.149 -> 0.3.150

---
 pkgs/by-name/re/release-plz/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/re/release-plz/package.nix b/pkgs/by-name/re/release-plz/package.nix
index aae3b80d17f7..89103e7df3c1 100644
--- a/pkgs/by-name/re/release-plz/package.nix
+++ b/pkgs/by-name/re/release-plz/package.nix
@@ -11,16 +11,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "release-plz";
-  version = "0.3.149";
+  version = "0.3.150";
 
   src = fetchFromGitHub {
     owner = "MarcoIeni";
     repo = "release-plz";
     rev = "release-plz-v${version}";
-    hash = "sha256-1n0cX8xU62LHGWs0yk8gUg1r3PBIbXih+9BK3UYseqU=";
+    hash = "sha256-gV1B7c7yC5KBjQ5y44dAgMUuGtL55ICM++kNShNh/nM=";
   };
 
-  cargoHash = "sha256-BB5oJL5QKceQySr1hzOeCm6TzALfw3Ryw8MHOB0VeaI=";
+  cargoHash = "sha256-o1Gds4UDZRVstPNPaisriUUeX0fabqLrS5TSqXMEB1c=";
 
   nativeBuildInputs = [
     installShellFiles

From 40f777a53e213e9eb96f65660fca23f7632c5833 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 6 Dec 2025 12:48:08 +0000
Subject: [PATCH 106/115] switchfin: 0.7.7 -> 0.8.0

---
 pkgs/by-name/sw/switchfin/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/sw/switchfin/package.nix b/pkgs/by-name/sw/switchfin/package.nix
index 74f522e5d943..fcf4a5a0cad3 100644
--- a/pkgs/by-name/sw/switchfin/package.nix
+++ b/pkgs/by-name/sw/switchfin/package.nix
@@ -17,13 +17,13 @@
 
 stdenv.mkDerivation rec {
   pname = "switchfin";
-  version = "0.7.7";
+  version = "0.8.0";
 
   src = fetchFromGitHub {
     owner = "dragonflylee";
     repo = "switchfin";
     rev = version;
-    hash = "sha256-swNwaZg6W5Ox08poc3gC3MOsIHv08/Q9BOMwD9FNf3g=";
+    hash = "sha256-5W1lUnblXQi8G8+emQ2oU+PYxire0Lwza/j/JESCytw=";
     fetchSubmodules = true;
   };
 

From abad9263d8704d4798f710d7ee7676e61ee8712d Mon Sep 17 00:00:00 2001
From: Matthias Beyer <mail@beyermatthias.de>
Date: Sun, 30 Nov 2025 10:44:36 +0100
Subject: [PATCH 107/115] numr: init at 0.1.7

Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
---
 pkgs/by-name/nu/numr/package.nix | 50 ++++++++++++++++++++++++++++++++
 1 file changed, 50 insertions(+)
 create mode 100644 pkgs/by-name/nu/numr/package.nix

diff --git a/pkgs/by-name/nu/numr/package.nix b/pkgs/by-name/nu/numr/package.nix
new file mode 100644
index 000000000000..1fd78bbc4481
--- /dev/null
+++ b/pkgs/by-name/nu/numr/package.nix
@@ -0,0 +1,50 @@
+{
+  stdenv,
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  pkg-config,
+  openssl,
+  versionCheckHook,
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "numr";
+  version = "0.1.7";
+
+  src = fetchFromGitHub {
+    owner = "nasedkinpv";
+    repo = "numr";
+    rev = "v${finalAttrs.version}";
+    hash = "sha256-tDQxDU/CrzZvXjsVSkUtDHX53WddFt6G8RBrHd8mXyg=";
+  };
+
+  cargoHash = "sha256-4Ig35ev3L2Sr8m4JsQVv/3lSLDc9RxSFMYeI+N+Wg7A=";
+
+  nativeBuildInputs = [
+    pkg-config
+  ];
+
+  buildInputs = lib.optionals stdenv.hostPlatform.isLinux [
+    openssl
+  ];
+
+  env.OPENSSL_NO_VENDOR = true;
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = with lib; {
+    description = "Text calculator inspired by Numi - natural language expressions, variables, unit conversions";
+    homepage = "https://github.com/nasedkinpv/numr";
+    license = licenses.mit;
+    maintainers = with maintainers; [
+      matthiasbeyer
+    ];
+    mainProgram = "numr";
+  };
+})

From 59416dc037777876d50964cf3febdb65875036b7 Mon Sep 17 00:00:00 2001
From: Jost Alemann <alemann@posteo.com>
Date: Sat, 6 Dec 2025 14:14:37 +0100
Subject: [PATCH 108/115] lazygit: 0.56.0 -> 0.57.0

Changelog: https://github.com/jesseduffield/lazygit/releases/tag/v0.57.0
Diff: https://github.com/jesseduffield/lazygit/compare/v0.56.0...v0.57.0
---
 pkgs/by-name/la/lazygit/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/la/lazygit/package.nix b/pkgs/by-name/la/lazygit/package.nix
index 8074bf20281d..1423fc6ed02a 100644
--- a/pkgs/by-name/la/lazygit/package.nix
+++ b/pkgs/by-name/la/lazygit/package.nix
@@ -8,13 +8,13 @@
 }:
 buildGoModule rec {
   pname = "lazygit";
-  version = "0.56.0";
+  version = "0.57.0";
 
   src = fetchFromGitHub {
     owner = "jesseduffield";
     repo = "lazygit";
     tag = "v${version}";
-    hash = "sha256-oTj+9zDmbXD4rlFZ++hcd1WSfskSNI7ojI9gN8UcpT8=";
+    hash = "sha256-DC0wVkFI7Te3QSE8Y0WU/ysanfukTkGa3N43hmKHXW8=";
   };
 
   vendorHash = null;

From 422961fe2dafc7023548e7d0728e86450898a8c2 Mon Sep 17 00:00:00 2001
From: user <example@email.com>
Date: Sat, 6 Dec 2025 22:28:45 +0900
Subject: [PATCH 109/115] coppwr: 1.7.0 -> 1.7.1

fix
---
 pkgs/by-name/co/coppwr/package.nix | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/pkgs/by-name/co/coppwr/package.nix b/pkgs/by-name/co/coppwr/package.nix
index 3b90b72e7630..5ab615003f84 100644
--- a/pkgs/by-name/co/coppwr/package.nix
+++ b/pkgs/by-name/co/coppwr/package.nix
@@ -11,18 +11,18 @@
   xorg,
 }:
 
-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
   pname = "coppwr";
-  version = "1.7.0";
+  version = "1.7.1";
 
   src = fetchFromGitHub {
     owner = "dimtpap";
     repo = "coppwr";
-    tag = version;
-    hash = "sha256-9oFWX44jToJh0vJaDV/KZXVNQgLG0lr1iA+0hInAhLA=";
+    tag = finalAttrs.version;
+    hash = "sha256-L0MpMh3HuWX0zxG50OGZDa+wX5E55/dU6jt6Iei99Ho=";
   };
 
-  cargoHash = "sha256-Fq8I1pt83yqrjiA4VXA+z7o2LFTac2SonAwTycQRP8M=";
+  cargoHash = "sha256-tcGyoPVoJFhbXZFe23d00Z7FUwIo5J02EfPTBzCGE64=";
 
   nativeBuildInputs = [
     pkg-config
@@ -49,10 +49,14 @@ rustPlatform.buildRustPackage rec {
     install -m 444 \
         -D $src/assets/io.github.dimtpap.coppwr.metainfo.xml \
         -t $out/share/metainfo
-    cp $src/assets/icon/scalable.svg $out/share/icons/hicolor/scalable/apps/io.github.dimtpap.coppwr.svg
+    install -m 444 \
+        -D $src/assets/icon/scalable.svg \
+        -t $out/share/icons/hicolor/scalable/apps/io.github.dimtpap.coppwr.svg
     for size in 32 48 64 128 256 512; do
       mkdir -p $out/share/icons/hicolor/"$size"x"$size"/apps
-      cp $src/assets/icon/"$size".png $out/share/icons/hicolor/"$size"x"$size"/apps/io.github.dimtpap.coppwr.png
+      install -m 444 \
+          -D $src/assets/icon/"$size".png \
+          -t $out/share/icons/hicolor/"$size"x"$size"/apps/io.github.dimtpap.coppwr.png
     done
   '';
 
@@ -75,4 +79,4 @@ rustPlatform.buildRustPackage rec {
     mainProgram = "coppwr";
     platforms = lib.platforms.linux;
   };
-}
+})

From d73ed17f275f60051e5fce2a6286530d4c755d1b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20Ha=CC=88cker?= <spamfaenger@gmx.de>
Date: Sat, 6 Dec 2025 14:54:43 +0100
Subject: [PATCH 110/115] korrect: add nushell completions

---
 pkgs/by-name/ko/korrect/package.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/ko/korrect/package.nix b/pkgs/by-name/ko/korrect/package.nix
index 5b8e4004afe9..270825731b78 100644
--- a/pkgs/by-name/ko/korrect/package.nix
+++ b/pkgs/by-name/ko/korrect/package.nix
@@ -28,7 +28,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
     installShellCompletion --cmd ${finalAttrs.meta.mainProgram} \
       --bash <($out/bin/${finalAttrs.meta.mainProgram} completions bash) \
       --fish <($out/bin/${finalAttrs.meta.mainProgram} completions fish) \
-      --zsh <($out/bin/${finalAttrs.meta.mainProgram} completions zsh)
+      --zsh <($out/bin/${finalAttrs.meta.mainProgram} completions zsh) \
+      --nushell <($out/bin/${finalAttrs.meta.mainProgram} completions nushell)
   '';
 
   meta = {

From e079280c51d1c2e7c2e9eb4e37e978fd9ae53cd8 Mon Sep 17 00:00:00 2001
From: aleksana <me@aleksana.moe>
Date: Sat, 6 Dec 2025 22:12:45 +0800
Subject: [PATCH 111/115] cdktf-cli: remove testVersion in favor or
 versionCheckHook

---
 pkgs/by-name/cd/cdktf-cli/package.nix | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/pkgs/by-name/cd/cdktf-cli/package.nix b/pkgs/by-name/cd/cdktf-cli/package.nix
index 7573abdb5eaa..7d338e863da8 100644
--- a/pkgs/by-name/cd/cdktf-cli/package.nix
+++ b/pkgs/by-name/cd/cdktf-cli/package.nix
@@ -150,12 +150,7 @@ stdenv.mkDerivation (finalAttrs: {
   # even with writableTmpDirAsHomeHook and CHECKPOINT_DISABLE=1
   doInstallCheck = stdenv.hostPlatform.isLinux;
 
-  passthru = {
-    tests.version = testers.testVersion {
-      package = finalAttrs.finalPackage;
-    };
-    updateScript = nix-update-script { };
-  };
+  passthru.updateScript = nix-update-script { };
 
   meta = {
     description = "CDK for Terraform CLI";

From f3039ec8ba835914624b245cea102cb8cf31f1ca Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 6 Dec 2025 14:57:05 +0000
Subject: [PATCH 112/115] git-pages-cli: 1.3.1 -> 1.5.1

---
 pkgs/by-name/gi/git-pages-cli/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gi/git-pages-cli/package.nix b/pkgs/by-name/gi/git-pages-cli/package.nix
index 3920719869b7..2163069a62b3 100644
--- a/pkgs/by-name/gi/git-pages-cli/package.nix
+++ b/pkgs/by-name/gi/git-pages-cli/package.nix
@@ -8,14 +8,14 @@
 
 buildGoModule (finalAttrs: {
   pname = "git-pages-cli";
-  version = "1.3.1";
+  version = "1.5.1";
 
   src = fetchFromGitea {
     domain = "codeberg.org";
     owner = "git-pages";
     repo = "git-pages-cli";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-BApqy0eTTl7OyJGnnNiVXiPKNN4tPoq88ucA/Ipe16Q=";
+    hash = "sha256-T6spNuuG0l1bFv7SnsDTGBtD3Sa+8zKN0/VbsKVkGrM=";
   };
 
   vendorHash = "sha256-5vjUhN3lCr41q91lOD7v0F9c6a8GJj7wBGnnzgFBhJU=";

From 290c35eb28955bda3885d75bbbdc4da8c749f1b4 Mon Sep 17 00:00:00 2001
From: blenderfreaky <blenderfreaky@mailbox.org>
Date: Sat, 6 Dec 2025 17:01:00 +0100
Subject: [PATCH 113/115] kopia-ui: 0.22.2 -> 0.22.3

---
 pkgs/by-name/ko/kopia-ui/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ko/kopia-ui/package.nix b/pkgs/by-name/ko/kopia-ui/package.nix
index 621dc5cde92e..1b386889c79a 100644
--- a/pkgs/by-name/ko/kopia-ui/package.nix
+++ b/pkgs/by-name/ko/kopia-ui/package.nix
@@ -10,12 +10,12 @@
   kopia,
 }:
 let
-  version = "0.22.2";
+  version = "0.22.3";
   src = fetchFromGitHub {
     owner = "kopia";
     repo = "kopia";
     tag = "v${version}";
-    hash = "sha256-UtyOMXX6Q0fhlnSMmI5d+0BHGvoWkPZbcm9B6vWG05Y=";
+    hash = "sha256-5oNam99Mij78snSO6jiGPYzeD68sXEBKM2dGQtTUrww=";
   };
 in
 buildNpmPackage {

From d9750e30d8c476f102560691554eae880e02009d Mon Sep 17 00:00:00 2001
From: Andrey Kuznetsov <fear@loathing.in>
Date: Wed, 22 Oct 2025 13:37:30 +0400
Subject: [PATCH 114/115] happy-coder: init at 0.11.2

---
 pkgs/by-name/ha/happy-coder/package.nix | 61 +++++++++++++++++++++++++
 1 file changed, 61 insertions(+)
 create mode 100644 pkgs/by-name/ha/happy-coder/package.nix

diff --git a/pkgs/by-name/ha/happy-coder/package.nix b/pkgs/by-name/ha/happy-coder/package.nix
new file mode 100644
index 000000000000..1c412a51a033
--- /dev/null
+++ b/pkgs/by-name/ha/happy-coder/package.nix
@@ -0,0 +1,61 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  fetchYarnDeps,
+  yarnConfigHook,
+  yarnBuildHook,
+  yarnInstallHook,
+  nodejs,
+  makeWrapper,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "happy-coder";
+  version = "0.11.2";
+
+  src = fetchFromGitHub {
+    owner = "slopus";
+    repo = "happy-cli";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-WKzbpxHqE3Dxqy/PDj51tM9+Wl2Pallfrc5UU2MxNn8=";
+  };
+
+  yarnOfflineCache = fetchYarnDeps {
+    yarnLock = finalAttrs.src + "/yarn.lock";
+    hash = "sha256-3/qcbCJ+Iwc+9zPCHKsCv05QZHPUp0it+QR3z7m+ssw=";
+  };
+
+  nativeBuildInputs = [
+    nodejs
+    yarnConfigHook
+    yarnBuildHook
+    yarnInstallHook
+    makeWrapper
+  ];
+
+  # Currently `happy` requires `node` to start its daemon
+  postInstall = ''
+    wrapProgram $out/bin/happy \
+      --prefix PATH : ${
+        lib.makeBinPath [
+          nodejs
+        ]
+      }
+    wrapProgram $out/bin/happy-mcp \
+      --prefix PATH : ${
+        lib.makeBinPath [
+          nodejs
+        ]
+      }
+  '';
+
+  meta = {
+    description = "Mobile and web client wrapper for Claude Code and Codex with end-to-end encryption";
+    homepage = "https://github.com/slopus/happy-cli";
+    changelog = "https://github.com/slopus/happy-cli/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ onsails ];
+    mainProgram = "happy";
+  };
+})

From c11e0c2616d0382e238b1f7714ad9dc93699a031 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Sat, 6 Dec 2025 09:23:44 -0800
Subject: [PATCH 115/115] python3Packages.stringzilla: 4.3.0 -> 4.4.2

Diff: https://github.com/ashvardanian/stringzilla/compare/v4.3.0...v4.4.2

Changelog: https://github.com/ashvardanian/StringZilla/releases/tag/v4.4.2
---
 pkgs/development/python-modules/stringzilla/default.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/stringzilla/default.nix b/pkgs/development/python-modules/stringzilla/default.nix
index d114ff802646..47111f1f0e8d 100644
--- a/pkgs/development/python-modules/stringzilla/default.nix
+++ b/pkgs/development/python-modules/stringzilla/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage rec {
   pname = "stringzilla";
-  version = "4.3.0";
+  version = "4.4.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ashvardanian";
     repo = "stringzilla";
     tag = "v${version}";
-    hash = "sha256-MitvjIb+mBK22hxjtqbVB6kYP7pdvF5LxWiS2R/6Jk4=";
+    hash = "sha256-o3MrIPzu61Zod6RpmWA356hlquVPQKu7+aYZrqxjMjo=";
   };
 
   build-system = [
@@ -34,6 +34,11 @@ buildPythonPackage rec {
 
   enabledTestPaths = [ "scripts/test_stringzilla.py" ];
 
+  disabledTests = [
+    # test downloads CaseFolding.txt from unicode.org
+    "test_utf8_case_fold_all_codepoints"
+  ];
+
   meta = {
     changelog = "https://github.com/ashvardanian/StringZilla/releases/tag/${src.tag}";
     description = "SIMD-accelerated string search, sort, hashes, fingerprints, & edit distances";