Merge master into staging-next

2025-09-24 00:16:18 +00:00
parent 15010e4610 3ef6d7e193
commit 82b9e372e6
145 changed files with 1776 additions and 1100 deletions
@@ -3510,12 +3510,6 @@
    githubId = 52386117;
    name = "Blusk";
  };
-  bmanuel = {
-    name = "Benjamin Manuel";
-    email = "ben@benmanuel.com";
-    github = "bmanuel";
-    githubId = 3662307;
-  };
  bmilanov = {
    name = "Biser Milanov";
    email = "bmilanov11+nixpkgs@gmail.com";
@@ -4775,6 +4769,12 @@
    name = "Alex Zero";
    keys = [ { fingerprint = "A0AA 4646 B8F6 9D45 4553  5A88 A515 50ED B450 302C"; } ];
  };
+  cizniarova = {
+    email = "gabriel.hosquet@epitech.eu";
+    github = "Ciznia";
+    githubId = 114656678;
+    name = "Gabriel Hosquet";
+  };
  cizra = {
    email = "todurov+nix@gmail.com";
    github = "cizra";
@@ -15491,6 +15491,11 @@
    githubId = 1809783;
    name = "Marco Maggesi";
  };
+  magicquark = {
+    name = "magicquark";
+    github = "magicquark";
+    githubId = 198001825;
+  };
  magistau = {
    name = "Mg. Tau";
    email = "nix@alice-carroll.pet";
@@ -170,6 +170,8 @@

 - The default `kops` version is now 1.33.0 and versions 1.30 and older have been dropped. See [Upgrading Kubernetes](https://kops.sigs.k8s.io/tutorial/upgrading-kubernetes/) for instructions on how to update kOps.

+- `programs.skim.fuzzyCompletions` has been removed in favor of adding the completions to the package itself.
+
 - `Prosody` has been updated to major release 13 which removed some obsoleted modules and brought a couple of major and breaking changes:
  - The `http_files` module is now disabled by default because it now requires `http_files_dir` to be configured.
  - The `vcard_muc` module has been removed and got replaced by the inbuilt `muc_vcard` module.
@@ -8,38 +8,37 @@ let
  inherit (lib)
    mkEnableOption
    mkPackageOption
-    optional
+    mkRemovedOptionModule
    optionalString
+    mkIf
    ;
  cfg = config.programs.skim;
 in
 {
+  imports = [
+    (mkRemovedOptionModule [ "programs" "skim" "fuzzyCompletion" ]
+      "programs.skim.fuzzyCompletion has been removed. Completions are now included in the package itself."
+    )
+  ];
+
  options = {
    programs.skim = {
-      fuzzyCompletion = mkEnableOption "fuzzy completion with skim";
+      enable = mkEnableOption "skim fuzzy finder";
      keybindings = mkEnableOption "skim keybindings";
      package = mkPackageOption pkgs "skim" { };
    };
  };

-  config = {
-    environment.systemPackages = optional (cfg.keybindings || cfg.fuzzyCompletion) cfg.package;
+  config = mkIf cfg.enable {
+    environment.systemPackages = [ cfg.package ];

-    programs.bash.interactiveShellInit =
-      optionalString cfg.fuzzyCompletion ''
-        source ${cfg.package}/share/skim/completion.bash
-      ''
-      + optionalString cfg.keybindings ''
-        source ${cfg.package}/share/skim/key-bindings.bash
-      '';
+    programs.bash.interactiveShellInit = optionalString cfg.keybindings ''
+      source ${cfg.package}/share/skim/key-bindings.bash
+    '';

-    programs.zsh.interactiveShellInit =
-      optionalString cfg.fuzzyCompletion ''
-        source ${cfg.package}/share/skim/completion.zsh
-      ''
-      + optionalString cfg.keybindings ''
-        source ${cfg.package}/share/skim/key-bindings.zsh
-      '';
+    programs.zsh.interactiveShellInit = optionalString cfg.keybindings ''
+      source ${cfg.package}/share/skim/key-bindings.zsh
+    '';

    programs.fish.interactiveShellInit = optionalString cfg.keybindings ''
      source ${cfg.package}/share/skim/key-bindings.fish && skim_key_bindings
@@ -15,6 +15,7 @@ let
      comment = list.description;
    };
  payloads = map makePayload cfg.lists;
+  macvendorURL = lib.strings.escapeShellArg cfg.macvendorURL;
 in
 ''
  # Can't use -u (unset) because api.sh uses API_URL before it is set
@@ -22,8 +23,10 @@ in
  pihole="${lib.getExe pihole}"
  jq="${lib.getExe pkgs.jq}"

+  ${lib.getExe pkgs.curl} --retry 3 --retry-delay 5 "${macvendorURL}" -o "${cfg.settings.files.macvendor}" || echo "Failed to download MAC database from ${macvendorURL}"
+
  # If the database doesn't exist, it needs to be created with gravity.sh
-  if [ ! -f '${cfg.stateDirectory}'/gravity.db ]; then
+  if [ ! -f '${cfg.settings.files.gravity}' ]; then
    $pihole -g
    # Send SIGRTMIN to FTL, which makes it reload the database, opening the newly created one
    ${lib.getExe' pkgs.procps "kill"} -s SIGRTMIN $(systemctl show --property MainPID --value ${config.systemd.services.pihole-ftl.name})
@@ -118,6 +118,14 @@ in
      '';
    };

+    macvendorURL = mkOption {
+      type = types.str;
+      default = "https://ftl.pi-hole.net/macvendor.db";
+      description = ''
+        URL from which to download the macvendor.db file.
+      '';
+    };
+
    pihole = mkOption {
      type = types.package;
      default = piholeScript;
@@ -260,7 +268,7 @@ in
        files = {
          database = "${cfg.stateDirectory}/pihole-FTL.db";
          gravity = "${cfg.stateDirectory}/gravity.db";
-          macvendor = "${cfg.stateDirectory}/gravity.db";
+          macvendor = "${cfg.stateDirectory}/macvendor.db";
          log.ftl = "${cfg.logDirectory}/FTL.log";
          log.dnsmasq = "${cfg.logDirectory}/pihole.log";
          log.webserver = "${cfg.logDirectory}/webserver.log";
@@ -11,10 +11,10 @@
    "clion": {
      "update-channel": "CLion RELEASE",
      "url-template": "https://download.jetbrains.com/cpp/CLion-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "f50e1a1e5172f652efdb7d72dc8c2a6222564671983b0c8b03caa68c56630648",
-      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.1.tar.gz",
-      "build_number": "252.25557.127"
+      "version": "2025.2.2",
+      "sha256": "47b84f1c853a63586743b28834dfd6b949672f3b0a7a67435907a7ef51730606",
+      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.2.tar.gz",
+      "build_number": "252.26199.153"
    },
    "datagrip": {
      "update-channel": "DataGrip RELEASE",
@@ -35,34 +35,34 @@
    "gateway": {
      "update-channel": "Gateway RELEASE",
      "url-template": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "bf96140b50e890215104f0806f5f160161a2889ebf7362a3b936ca0eb304bf67",
-      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.1.tar.gz",
-      "build_number": "252.25557.133"
+      "version": "2025.2.2",
+      "sha256": "d1e8c8c61da42adcc9300a2a005830db386698912071eace9813a5c170a9fff8",
+      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.2.tar.gz",
+      "build_number": "252.26199.160"
    },
    "goland": {
      "update-channel": "GoLand RELEASE",
      "url-template": "https://download.jetbrains.com/go/goland-{version}.tar.gz",
-      "version": "2025.2.1.2",
-      "sha256": "66cb93202b9c4bc34688838a8c39e0d0ed876d01ca651d9f2b0d455139b27169",
-      "url": "https://download.jetbrains.com/go/goland-2025.2.1.2.tar.gz",
-      "build_number": "252.25557.189"
+      "version": "2025.2.2",
+      "sha256": "e5816136312a419b67cdfab203bd30e305cb2f8952eea76445e908c01f3113c0",
+      "url": "https://download.jetbrains.com/go/goland-2025.2.2.tar.gz",
+      "build_number": "252.26199.158"
    },
    "idea-community": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIC-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "fc76fe8b6693b18d5d7385bb005f415287dbd5897b313287b9ef56dd0df9d5bd",
-      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.1.tar.gz",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "3f1adc095bf78f0949e3f62f6cf02be0c5c9e6528271f16caa3baa041e637664",
+      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.2.tar.gz",
+      "build_number": "252.26199.169"
    },
    "idea-ultimate": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIU-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "ac36d03153894f393fb65c05f57be4722c2a2374d03b7374b37baf856705d5fd",
-      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.1.tar.gz",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "7150ece389a4bc8649f68b103018edeeb09205559671549410ded11de523da62",
+      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.2.tar.gz",
+      "build_number": "252.26199.169"
    },
    "mps": {
      "update-channel": "MPS RELEASE",
@@ -75,10 +75,10 @@
    "phpstorm": {
      "update-channel": "PhpStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webide/PhpStorm-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "0cc9235210dc09fb54602f176de881c4f2b6852d7a5f2ae9f7750d83a3ffa8f6",
-      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.1.tar.gz",
-      "build_number": "252.25557.128",
+      "version": "2025.2.2",
+      "sha256": "1010c4cfed0d74a0088c80e966c0ea75ed1238dc5b8ae25111e8be3e06bde741",
+      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.2.tar.gz",
+      "build_number": "252.26199.163",
      "version-major-minor": "2022.3"
    },
    "pycharm-community": {
@@ -100,34 +100,34 @@
    "rider": {
      "update-channel": "Rider RELEASE",
      "url-template": "https://download.jetbrains.com/rider/JetBrains.Rider-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "bdccdc837ab6683082bef1ab76b7699ee3ed44ec6fe037db5be7161837ca0701",
-      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.1.tar.gz",
-      "build_number": "252.25557.182"
+      "version": "2025.2.2",
+      "sha256": "1ebffac91d70f8ce64567955de35738bb52d5e81b45d8c67dd494ff3fa0301df",
+      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.2.tar.gz",
+      "build_number": "252.26199.154"
    },
    "ruby-mine": {
      "update-channel": "RubyMine RELEASE",
      "url-template": "https://download.jetbrains.com/ruby/RubyMine-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "fbed517b4c60623c04b045dd6cfff08105783a56dd1b831b164a72aa2ead6a38",
-      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.1.tar.gz",
-      "build_number": "252.25557.135"
+      "version": "2025.2.2",
+      "sha256": "f103c2c5ab074aace1ce4678d32fa80d8521a25bb6497130d1185662244cf46d",
+      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.2.tar.gz",
+      "build_number": "252.26199.157"
    },
    "rust-rover": {
      "update-channel": "RustRover RELEASE",
      "url-template": "https://download.jetbrains.com/rustrover/RustRover-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "19fde47a5c3c8e1b21b402c3351018eed64e2cff575f32a86c884168b522074a",
-      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.1.tar.gz",
-      "build_number": "252.25557.134"
+      "version": "2025.2.2",
+      "sha256": "cc2cfd0af3967a5ce65af5064ccac03bfb2ee2a1ed7e18e8a2c1a009a6d3721c",
+      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.2.tar.gz",
+      "build_number": "252.26199.159"
    },
    "webstorm": {
      "update-channel": "WebStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webstorm/WebStorm-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "8d03ae22e4bac309edbf58310b4fc758fedaee5dc065467eeda005fac5217d2b",
-      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.1.tar.gz",
-      "build_number": "252.25557.126"
+      "version": "2025.2.2",
+      "sha256": "8bb3bed5c670514ced8614b29848c5d3b7ff4f4e86056cf5cdc5930951c87ff6",
+      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.2.tar.gz",
+      "build_number": "252.26199.162"
    },
    "writerside": {
      "update-channel": "Writerside EAP",
@@ -150,10 +150,10 @@
    "clion": {
      "update-channel": "CLion RELEASE",
      "url-template": "https://download.jetbrains.com/cpp/CLion-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "7fff28163607d3a6da7eceb788829cb81ac03e90f694d7b2c0a47b2821b47f4a",
-      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.127"
+      "version": "2025.2.2",
+      "sha256": "b8749bbec247544767023a25b9e955a9cd462c573e1d08a24ef68c864d5d6859",
+      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.153"
    },
    "datagrip": {
      "update-channel": "DataGrip RELEASE",
@@ -174,34 +174,34 @@
    "gateway": {
      "update-channel": "Gateway RELEASE",
      "url-template": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "8c4a8c0d15f5afbb17f0ea54e4455f4d69407536459d0d4986fce966e8ae9290",
-      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.133"
+      "version": "2025.2.2",
+      "sha256": "331407afc012f97b5a80fcfced59e256222549038bfe028c7d00b0b4793ebc4a",
+      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.160"
    },
    "goland": {
      "update-channel": "GoLand RELEASE",
      "url-template": "https://download.jetbrains.com/go/goland-{version}-aarch64.tar.gz",
-      "version": "2025.2.1.2",
-      "sha256": "c8059924c4e92756905114c6e6806c59d070b332c87bc966237474363f212876",
-      "url": "https://download.jetbrains.com/go/goland-2025.2.1.2-aarch64.tar.gz",
-      "build_number": "252.25557.189"
+      "version": "2025.2.2",
+      "sha256": "5873b53e586c1f376ec6e159c962be3400f0be964f8f0d542b55b4a99ff6c870",
+      "url": "https://download.jetbrains.com/go/goland-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.158"
    },
    "idea-community": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIC-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "ca454bcfe40196adacf12c726d8d44876d8a03c88884f7a08715e5562a45d1a2",
-      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "3ea855820772e36be4b37dd9e503e4fee9b1877dcb614b5baa36819370fa0208",
+      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.169"
    },
    "idea-ultimate": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIU-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "bf292cf0a2822c4b697e4d1e6a7c049c6b91f8cab3d457259d52fd65bbdcdea9",
-      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "d40c5fa210a28a23b9e1d736057a711b41c785e32841f5a27969074feee5df4d",
+      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.169"
    },
    "mps": {
      "update-channel": "MPS RELEASE",
@@ -214,10 +214,10 @@
    "phpstorm": {
      "update-channel": "PhpStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webide/PhpStorm-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "68f4d7f3ca81e25023a08a34d1163fdcf0ef8f803cbdd9bc81efdcadd2ccf7ae",
-      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.128",
+      "version": "2025.2.2",
+      "sha256": "edc147816c4fed704206d3ca03e7fcdefde23208599d7732eb0a22af2af6f2ff",
+      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.163",
      "version-major-minor": "2022.3"
    },
    "pycharm-community": {
@@ -239,34 +239,34 @@
    "rider": {
      "update-channel": "Rider RELEASE",
      "url-template": "https://download.jetbrains.com/rider/JetBrains.Rider-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "14c5cc877b213d7da53eea0585c1ebd13c5f43316a39ed9e6a1a745246fe42cb",
-      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.182"
+      "version": "2025.2.2",
+      "sha256": "36523ab3b94d1ee1b92794476870727faa1ca29fbd365b7c3239f199399f6dbe",
+      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.154"
    },
    "ruby-mine": {
      "update-channel": "RubyMine RELEASE",
      "url-template": "https://download.jetbrains.com/ruby/RubyMine-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "2dc93b1eb3d40eea193eb313632f13440fa34add912a1ab0ad201349811bbcb8",
-      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.135"
+      "version": "2025.2.2",
+      "sha256": "f75616b41eff86d75f51dadb49f1033ff9af021f1d9ca354fc8f99eca251c4ac",
+      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.157"
    },
    "rust-rover": {
      "update-channel": "RustRover RELEASE",
      "url-template": "https://download.jetbrains.com/rustrover/RustRover-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "60d22c93e3924f3defa51ace317fc6f715a6a5ef4e8ec18f1f361e6aa1d2a9d5",
-      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.134"
+      "version": "2025.2.2",
+      "sha256": "d76cb3f3d7affbd9cab937e813f44bafdd2675160b909f27baa7fac042de0765",
+      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.159"
    },
    "webstorm": {
      "update-channel": "WebStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webstorm/WebStorm-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "ce335848f4771392c971d054b4a378a98ee6f77347c1e64d0631981715a034e3",
-      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.126"
+      "version": "2025.2.2",
+      "sha256": "aa8eaa8bb200a6fce42582cb37235f3abf77ca7bcad2c9b98c318686c45772e1",
+      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.162"
    },
    "writerside": {
      "update-channel": "Writerside EAP",
@@ -289,10 +289,10 @@
    "clion": {
      "update-channel": "CLion RELEASE",
      "url-template": "https://download.jetbrains.com/cpp/CLion-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "1cc896ae584c51009674f12d9c43d481b108b8e59243e60b094e7a967bb64652",
-      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.1.dmg",
-      "build_number": "252.25557.127"
+      "version": "2025.2.2",
+      "sha256": "f9c42a3417db66bc88fc039829840662a650fdf79fc02619c5d6fd8a633f6606",
+      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.2.dmg",
+      "build_number": "252.26199.153"
    },
    "datagrip": {
      "update-channel": "DataGrip RELEASE",
@@ -313,34 +313,34 @@
    "gateway": {
      "update-channel": "Gateway RELEASE",
      "url-template": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "4f48557a9a1ded6a88bc6bf17d65879f54b2314142c65e65d844df92d770de03",
-      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.1.dmg",
-      "build_number": "252.25557.133"
+      "version": "2025.2.2",
+      "sha256": "1be3476dc9065e9b95f399cb24ff2e5793e09a390bf541695bc932a9f46a2321",
+      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.2.dmg",
+      "build_number": "252.26199.160"
    },
    "goland": {
      "update-channel": "GoLand RELEASE",
      "url-template": "https://download.jetbrains.com/go/goland-{version}.dmg",
-      "version": "2025.2.1.2",
-      "sha256": "e3c8195cbf54ac77d6f715b1d6ed3c91f3b5288c0bdd67b254ebb938019e4271",
-      "url": "https://download.jetbrains.com/go/goland-2025.2.1.2.dmg",
-      "build_number": "252.25557.189"
+      "version": "2025.2.2",
+      "sha256": "d23f16afaa67f120ce987b59280805f01025e5b971d85544f33f0960035f3a1c",
+      "url": "https://download.jetbrains.com/go/goland-2025.2.2.dmg",
+      "build_number": "252.26199.158"
    },
    "idea-community": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIC-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "48d3f6523cc6fe94ad8020357b6de5e977fb2a49c8041773ffae7f946d418224",
-      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.1.dmg",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "112bfa1e1c065ec641f1a242e95b63d4fed1b7dfa1d7b57b6591d8230531adae",
+      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.2.dmg",
+      "build_number": "252.26199.169"
    },
    "idea-ultimate": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIU-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "a768de8ff17cfb940d402ed907777e50c669e770ccd7515613086cd6d35f81d4",
-      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.1.dmg",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "7e7b672525e29554e503eecc656de025a96b680d1ee223dfbfd762a1ca6430dd",
+      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.2.dmg",
+      "build_number": "252.26199.169"
    },
    "mps": {
      "update-channel": "MPS RELEASE",
@@ -353,10 +353,10 @@
    "phpstorm": {
      "update-channel": "PhpStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webide/PhpStorm-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "8ea7143923c6f18c130e8d85530c423fa4eea5a81543094af9ad4c8155a26215",
-      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.1.dmg",
-      "build_number": "252.25557.128",
+      "version": "2025.2.2",
+      "sha256": "60413cba4c4492a51af0dd3a439a615a08ec5fbc31c28ee7bb1af8638708eb05",
+      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.2.dmg",
+      "build_number": "252.26199.163",
      "version-major-minor": "2022.3"
    },
    "pycharm-community": {
@@ -378,34 +378,34 @@
    "rider": {
      "update-channel": "Rider RELEASE",
      "url-template": "https://download.jetbrains.com/rider/JetBrains.Rider-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "37feeae3929be95bd6f405c6d5760af7d2e43bff55e03a4256c1232b61714809",
-      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.1.dmg",
-      "build_number": "252.25557.182"
+      "version": "2025.2.2",
+      "sha256": "ccc7b35691ceb87e3b3103909617e1616c36dcc69cb73c1f7668591c6256ba35",
+      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.2.dmg",
+      "build_number": "252.26199.154"
    },
    "ruby-mine": {
      "update-channel": "RubyMine RELEASE",
      "url-template": "https://download.jetbrains.com/ruby/RubyMine-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "389d7e790bc745126e838191d14984acaf7f3beae4ef7d669c0fed1219b8a8e6",
-      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.1.dmg",
-      "build_number": "252.25557.135"
+      "version": "2025.2.2",
+      "sha256": "9ced0e4a5ebb0e47821d25a7b8d9a2c4a9a8ad821ffefa9b429821379da8486e",
+      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.2.dmg",
+      "build_number": "252.26199.157"
    },
    "rust-rover": {
      "update-channel": "RustRover RELEASE",
      "url-template": "https://download.jetbrains.com/rustrover/RustRover-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "9143fa9bfcab98ed2a5215c006bb6bf5521ee5c9a9f08f6f321d0a873cfb39cc",
-      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.1.dmg",
-      "build_number": "252.25557.134"
+      "version": "2025.2.2",
+      "sha256": "bcb442e4d22a71cd312cae2821187da82f9c58cdd03e5343a070b12af6a11f85",
+      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.2.dmg",
+      "build_number": "252.26199.159"
    },
    "webstorm": {
      "update-channel": "WebStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webstorm/WebStorm-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "38ba2b01c688d838f5cb533eb9d575223135eb753d7f38865aaf4d27b56b5bf5",
-      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.1.dmg",
-      "build_number": "252.25557.126"
+      "version": "2025.2.2",
+      "sha256": "74af775f515e7cc847ee572cf7720498e6afec3387af285a6685337272c61611",
+      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.2.dmg",
+      "build_number": "252.26199.162"
    },
    "writerside": {
      "update-channel": "Writerside EAP",
@@ -428,10 +428,10 @@
    "clion": {
      "update-channel": "CLion RELEASE",
      "url-template": "https://download.jetbrains.com/cpp/CLion-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "d8256fee77311192ffcb45d9efa5fa57fb2ea83a22925f49bc5880106f7b9ee4",
-      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.127"
+      "version": "2025.2.2",
+      "sha256": "4dceb6ba2ae1d2fcaaa7f76090bbb18664da30d371d2e950afdffb0f9589ce7e",
+      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.153"
    },
    "datagrip": {
      "update-channel": "DataGrip RELEASE",
@@ -452,34 +452,34 @@
    "gateway": {
      "update-channel": "Gateway RELEASE",
      "url-template": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "94bb0fb41eaaea744173fe321b7e17cac898088eb7738c68b8d271ca437dee80",
-      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.133"
+      "version": "2025.2.2",
+      "sha256": "1d9be57de8075eeefcc81ef249b15a60762f82909ca4002846dce13acedba56d",
+      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.160"
    },
    "goland": {
      "update-channel": "GoLand RELEASE",
      "url-template": "https://download.jetbrains.com/go/goland-{version}-aarch64.dmg",
-      "version": "2025.2.1.2",
-      "sha256": "2c174e4fbd1485f3e402b9e0b693d196b8e38bc7b7bba2c33896391181c92940",
-      "url": "https://download.jetbrains.com/go/goland-2025.2.1.2-aarch64.dmg",
-      "build_number": "252.25557.189"
+      "version": "2025.2.2",
+      "sha256": "38dd5a302eba4ee5f92c5c5aa810b449b72301c89d209139e75c0efb6bdff919",
+      "url": "https://download.jetbrains.com/go/goland-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.158"
    },
    "idea-community": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIC-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "dcafd8e623819b0696044d23874423f905224462844155a3c282fd4f62a7d578",
-      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "cc83bbb9531522085d2892499ddb5cb87909291d58ee3e34c06b131aeb2413fe",
+      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.169"
    },
    "idea-ultimate": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIU-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "96523081d1d686425b166698870a4467600724faac060a938a05838b0b9f8a9c",
-      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "c93ef0205c18f8b9fd127df2d5f3486e3ad190a0408c374e1795aeaa7899dc8a",
+      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.169"
    },
    "mps": {
      "update-channel": "MPS RELEASE",
@@ -492,10 +492,10 @@
    "phpstorm": {
      "update-channel": "PhpStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webide/PhpStorm-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "9da242618b2f540d8fc34937743e2ebcd71af6341420474b0bf9285464a81a68",
-      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.128",
+      "version": "2025.2.2",
+      "sha256": "08c30cee02829ebca2956a5dc84221322cbd0ce02f33fb023d3d340cdcc2dac3",
+      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.163",
      "version-major-minor": "2022.3"
    },
    "pycharm-community": {
@@ -517,34 +517,34 @@
    "rider": {
      "update-channel": "Rider RELEASE",
      "url-template": "https://download.jetbrains.com/rider/JetBrains.Rider-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "80f3f99311e8f225a6475b81dab014b13dd1782a59c6dc8abe5e5d3e614489b3",
-      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.182"
+      "version": "2025.2.2",
+      "sha256": "f6d1a148123519c33d2ec8822e7d83856af68cbb518ac822c638bbd4b1127ad2",
+      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.154"
    },
    "ruby-mine": {
      "update-channel": "RubyMine RELEASE",
      "url-template": "https://download.jetbrains.com/ruby/RubyMine-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "27c6648ec738e29bdd22fab0ed46a321ed6c8354348cb39ac3ae863c4ffe4c78",
-      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.135"
+      "version": "2025.2.2",
+      "sha256": "4fa2260b6ca45a3e21bd3aa64517cb5216113a4177ec2b7808f9883cf4a071b5",
+      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.157"
    },
    "rust-rover": {
      "update-channel": "RustRover RELEASE",
      "url-template": "https://download.jetbrains.com/rustrover/RustRover-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "469b4b7c42aa808a5f9d94315f4cc412ad74ef76ff51654d441ef16c5063dc27",
-      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.134"
+      "version": "2025.2.2",
+      "sha256": "a673c45f2183d28ac6ac37df9a8cd7084af432793f505589164096a425fa7801",
+      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.159"
    },
    "webstorm": {
      "update-channel": "WebStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webstorm/WebStorm-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "dd3220a9458cd1574a96a75922e5439689f494516af9f5e76c5b74ffb37ec488",
-      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.126"
+      "version": "2025.2.2",
+      "sha256": "68fbdbb3abd2ef5ae69d8371f72fd61e39f4331e7b9aacb792a7b6b7b6d05e8f",
+      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.162"
    },
    "writerside": {
      "update-channel": "Writerside EAP",
@@ -17,5 +17,6 @@ buildVscodeMarketplaceExtension {
      from your programming activity
    '';
    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ cizniarova ];
  };
 }
@@ -2368,8 +2368,8 @@ let
        mktplcRef = {
          name = "Ionide-fsharp";
          publisher = "Ionide";
-          version = "7.27.0";
-          hash = "sha256-NGl5uiR4taamA8lhH/qJT1nCfUhxCQ/XQ/oEZ9N9Q5Y=";
+          version = "7.27.1";
+          hash = "sha256-ur+/ZSewWBzLxkHVXHQJg4KzkC3Mi3E9fE3/wL6sD8g=";
        };
        meta = {
          changelog = "https://marketplace.visualstudio.com/items/Ionide.Ionide-fsharp/changelog";
@@ -4528,8 +4528,8 @@ let
        mktplcRef = {
          name = "tabnine-vscode";
          publisher = "tabnine";
-          version = "3.314.1";
-          hash = "sha256-KWXQY4HyK7s4mNGh6x1eDK6okC5rxWe916RjlsACQxA=";
+          version = "3.315.0";
+          hash = "sha256-y6nTUDMQtJWZA30/jWTu0Kj9EMYkLGUAq7xvBvwGpeY=";
        };
        meta = {
          license = lib.licenses.mit;
@@ -9,8 +9,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "shfmt";
    publisher = "mkhl";
-    version = "1.4.0";
-    hash = "sha256-5qi2BRwftuW9Isveb7vRwPPPu2w7LTfhNO0xHFNruGI=";
+    version = "1.5.1";
+    hash = "sha256-rk+ykkWHxgQyyOC8JyhyOinRPJHh9XxNRAVUzcF7TRI=";
  };

  postInstall = ''
@@ -9,8 +9,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "jupyter";
    publisher = "ms-toolsai";
-    version = "2025.7.0";
-    hash = "sha256-wedMPo+mL3yvb9WqJComlyZWvSSaJXv/4LWcl0wwqdQ=";
+    version = "2025.8.0";
+    hash = "sha256-MZHsgFxrAbDjRn0cH+cBolVvFQXlZPiVSZDUWDU6/jA=";
  };

  nativeBuildInputs = [
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
  core = "gpsp";
-  version = "0-unstable-2025-09-07";
+  version = "0-unstable-2025-09-17";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "gpsp";
-    rev = "f7a6a4314697ea5e4821a15aa7110795679f6ade";
-    hash = "sha256-g63KIeQUvCg9LbixeXF2JRgUEFlzBMctXV8IFqvR0sg=";
+    rev = "a545aafaf4e654a488f4588f4f302d8413a58066";
+    hash = "sha256-94J5WqlvBgfF/0aj0Pu61psG5pbhJVsZOiIbMdZ+ryQ=";
  };

  makefile = "Makefile";
@@ -164,7 +164,8 @@ let
    # //third_party/libavif:libavif_enc(//build/toolchain/linux/unbundle:default)
    #   needs //third_party/libwebp:libwebp_sharpyuv(//build/toolchain/linux/unbundle:default)
    # "libwebp"
-    "libxslt"
+    "libxml"
+    "libxslt" # depends on libxml, always remove or re-add as a pair
    # "opus"
  ];

@@ -811,15 +812,7 @@ let
      // (extraAttrs.gnFlags or { })
    );

-    # TODO: Migrate this to env.RUSTC_BOOTSTRAP next mass-rebuild.
-    # Chromium expects nightly/bleeding edge rustc features to be available.
-    # Our rustc in nixpkgs follows stable, but since bootstrapping rustc requires
-    # nightly features too, we can (ab-)use RUSTC_BOOTSTRAP here as well to
-    # enable those features in our stable builds.
-    preConfigure = ''
-      export RUSTC_BOOTSTRAP=1
-    ''
-    + lib.optionalString (!isElectron) ''
+    preConfigure = lib.optionalString (!isElectron) ''
      (
        cd third_party/node
        grep patch update_npm_deps | sh
@@ -840,6 +833,11 @@ let
      runHook postConfigure
    '';

+    # Chromium expects nightly/bleeding edge rustc features to be available.
+    # Our rustc in nixpkgs follows stable, but since bootstrapping rustc requires
+    # nightly features too, we can (ab-)use RUSTC_BOOTSTRAP here as well to
+    # enable those features in our stable builds.
+    env.RUSTC_BOOTSTRAP = 1;
    # Mute some warnings that are enabled by default. This is useful because
    # our Clang is always older than Chromium's and the build logs have a size
    # of approx. 25 MB without this option (and this saves e.g. 66 %).
@@ -153,11 +153,11 @@
    "vendorHash": null
  },
  "azurerm": {
-    "hash": "sha256-/7TF9ISbrM4ZYyJKBZ3OrZsNp4a7BKtda12hnuPVS6E=",
+    "hash": "sha256-HlsJ85NXDykycTOCA+LbjeV5Jx4VWRDVFyKtx51n22Y=",
    "homepage": "https://registry.terraform.io/providers/hashicorp/azurerm",
    "owner": "hashicorp",
    "repo": "terraform-provider-azurerm",
-    "rev": "v4.44.0",
+    "rev": "v4.45.1",
    "spdx": "MPL-2.0",
    "vendorHash": null
  },
@@ -270,13 +270,13 @@
    "vendorHash": "sha256-O/MSx6iZ0SkCsMLKMr1cetkPaePoVq62UTOhiPTzF6g="
  },
  "cloudflare": {
-    "hash": "sha256-EsbktS0pP+tJtIPHckMmgdeIBLyL9T+lVyoDzJAzi98=",
+    "hash": "sha256-nIceDw766f32yn8qfgY89OYcOtwUc3650x0NO4XUrmk=",
    "homepage": "https://registry.terraform.io/providers/cloudflare/cloudflare",
    "owner": "cloudflare",
    "repo": "terraform-provider-cloudflare",
-    "rev": "v5.9.0",
+    "rev": "v5.10.1",
    "spdx": "Apache-2.0",
-    "vendorHash": "sha256-aMEcmK2lhKg0OH0jsQXDE09eHbImieyNgT4xH+pBEEk="
+    "vendorHash": "sha256-U2lC4d3MSkD8W4qJtrYlnHFflG0xgyPtL6OnjHwxV2U="
  },
  "cloudfoundry": {
    "hash": "sha256-1nYncJLVU/f9WD6Quh9IieIXgixPzbPk4zbtI1zmf9g=",
@@ -480,13 +480,13 @@
    "vendorHash": "sha256-ZbU2z7qUHPR7vDSflesSjgK7x3LYXVe/gnVsy19q6Bs="
  },
  "fortios": {
-    "hash": "sha256-vQ5PYY2EJb7+O65YbyqmIPKiqsd9UysnZXYGzZvkTPQ=",
+    "hash": "sha256-1HkVSoGt9PPPv8OH9F+acedVD0sbQ42msd6OWyegZFI=",
    "homepage": "https://registry.terraform.io/providers/fortinetdev/fortios",
    "owner": "fortinetdev",
    "repo": "terraform-provider-fortios",
-    "rev": "1.22.1",
+    "rev": "1.22.2",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-9BBBmuj7rEX5h3LEZzw7C7AtwvJgo7yEGReQ38lfE6U="
+    "vendorHash": "sha256-1DXlugtN2G2HrKbIEJ3rJ9zRlbE8fEUdlt3gp0mRdso="
  },
  "gandi": {
    "hash": "sha256-fsCtmwyxkXfOtiZG27VEb010jglK35yr4EynnUWlFog=",
@@ -516,13 +516,13 @@
    "vendorHash": null
  },
  "gitlab": {
-    "hash": "sha256-BMXxg6yz0b33yZK/Q8tkqDqPbYlrJWMvMenucDs+qUo=",
+    "hash": "sha256-wggQtY+E4O/iWo0OrjPlxK8j2aLavRAG31RpOOC08AY=",
    "homepage": "https://registry.terraform.io/providers/gitlabhq/gitlab",
    "owner": "gitlabhq",
    "repo": "terraform-provider-gitlab",
-    "rev": "v18.3.0",
+    "rev": "v18.4.1",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-v0nYsQinopJ9DXtkGFe3bIYXMBMsPDafn71Xfmvi2mo="
+    "vendorHash": "sha256-29uvPCepGHRPohGY7viaPD9VQPPj9XB/plragACC4e4="
  },
  "google": {
    "hash": "sha256-BDMOYw/NPCBb5VuJZGNbACJ/dq2uh+wx/y0w6LGWgwE=",
@@ -940,22 +940,22 @@
    "vendorHash": "sha256-LRIfxQGwG988HE5fftGl6JmBG7tTknvmgpm4Fu1NbWI="
  },
  "oci": {
-    "hash": "sha256-3kxR/QhWhfL4IW+YLN0z+EuYgnOdnCHfbxuXxOYHLC0=",
+    "hash": "sha256-xj7B4LQZalLA/APIe70JHmqPljRVDbDXfAUb3K2AtFg=",
    "homepage": "https://registry.terraform.io/providers/oracle/oci",
    "owner": "oracle",
    "repo": "terraform-provider-oci",
-    "rev": "v7.18.0",
+    "rev": "v7.19.0",
    "spdx": "MPL-2.0",
    "vendorHash": null
  },
  "okta": {
-    "hash": "sha256-ANGoCEHLuxTLpP9k2H/zUQjSEu7qob9Dh6c2Uzgj35Q=",
+    "hash": "sha256-sWiOGXeQxrUUlSM7TI4isUCdpiwwvosD+XVedM2pTSk=",
    "homepage": "https://registry.terraform.io/providers/okta/okta",
    "owner": "okta",
    "repo": "terraform-provider-okta",
-    "rev": "v6.0.0",
+    "rev": "v6.1.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-C+EP9ROYOnxkr895ZLZPgdRYm7Da2chDslsQRSq7NkU="
+    "vendorHash": "sha256-zfmQXMgKXCU8g1tpgV8BAXc5F8wBbJhtjO1trdQ4Jm4="
  },
  "oktaasa": {
    "hash": "sha256-2LhxgowqKvDDDOwdznusL52p2DKP+UiXALHcs9ZQd0U=",
@@ -54,6 +54,7 @@
  pipewire,
  python3,
  runCommand,
+  libunity,
  speechd-minimal,
  wayland,
  branch,
@@ -152,6 +153,7 @@ stdenv.mkDerivation (finalAttrs: {
      libnotify
      libX11
      libXcomposite
+      libunity
      libuuid
      libXcursor
      libXdamage
@@ -30,17 +30,17 @@ let
 in
 rustPlatform.buildRustPackage rec {
  pname = "mullvad";
-  version = "2025.7";
+  version = "2025.9";

  src = fetchFromGitHub {
    owner = "mullvad";
    repo = "mullvadvpn-app";
    tag = version;
    fetchSubmodules = true;
-    hash = "sha256-q5RYgU7VlhTXAN0uQeHNTJ1eFCQZzymLo/eiKr805O8=";
+    hash = "sha256-BfWPFkNXGDV0ql2hBXh+3hjyn7+pUXL3XzH8w8aIfKw=";
  };

-  cargoHash = "sha256-UUYAmNdzTthoWOIU5wr7Q059MAezpuRvCadGTjwoKGM=";
+  cargoHash = "sha256-kgtjLdTkCnLk27gYEjovPv5k5eHOqQdL8iERKhVDKNQ=";

  cargoBuildFlags = [
    "-p mullvad-daemon --bin mullvad-daemon"
@@ -7,14 +7,14 @@

 python312Packages.buildPythonPackage rec {
  pname = "ark-pixel-font";
-  version = "2025.08.11";
+  version = "2025.08.24";
  pyproject = false;

  src = fetchFromGitHub {
    owner = "TakWolf";
    repo = "ark-pixel-font";
    tag = version;
-    hash = "sha256-Rcn2zlZyMoziYd1b3wjjh1tYpm6A0qYGiKEg+Wd+0m8=";
+    hash = "sha256-kxct994UmZhJBMlXZmayN24eiKqeG9T7GdyfsjBYpn0=";
  };

  dependencies = with python312Packages; [
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "aws-iam-authenticator";
-  version = "0.7.5";
+  version = "0.7.7";

  src = fetchFromGitHub {
    owner = "kubernetes-sigs";
    repo = "aws-iam-authenticator";
    tag = "v${version}";
-    hash = "sha256-FvXK4yrWPtM7uhXb0eJB2Hs1eE/+h3R79xVbHFSX2hQ=";
+    hash = "sha256-nnl5QPJWG0hGp15dwcMdhWCPn5Z4noydLA/Nn5koQCU=";
  };

-  vendorHash = "sha256-fLA+dPAqvCPo8p+NUdmziAhUbi7wQVp2gnzv4493zr8=";
+  vendorHash = "sha256-oa0wOI7fbMjuG20g+8u5V2tbX+1R3pcRR7kn1iWMp4Y=";

  ldflags =
    let
@@ -66,14 +66,14 @@ let
 in
 py.pkgs.buildPythonApplication rec {
  pname = "awscli2";
-  version = "2.28.1"; # N.B: if you change this, check if overrides are still up-to-date
+  version = "2.30.6"; # N.B: if you change this, check if overrides are still up-to-date
  pyproject = true;

  src = fetchFromGitHub {
    owner = "aws";
    repo = "aws-cli";
    tag = version;
-    hash = "sha256-TpyjYnLTBPU83g6/h+BrX4hd4dUbZUvDyJ6m/3v38+A=";
+    hash = "sha256-enCI/yGnxf4/VYID/Di0ZhSiGp0ldgIKYmTnklGpjbc=";
  };

  postPatch = ''
@@ -12,13 +12,13 @@
 }:
 let
  pname = "backrest";
-  version = "1.8.1";
+  version = "1.9.2";

  src = fetchFromGitHub {
    owner = "garethgeorge";
    repo = "backrest";
    tag = "v${version}";
-    hash = "sha256-lpYny+5bXIxj+ZFhbSn200sBrDShISESZw+L5sy+X+Q=";
+    hash = "sha256-3lAWViC9K34R8la/z57kjGJmMmletGd8pJ1dDt+BeKQ=";
  };

  frontend = stdenv.mkDerivation (finalAttrs: {
@@ -34,7 +34,7 @@ let
    pnpmDeps = pnpm_9.fetchDeps {
      inherit (finalAttrs) pname version src;
      fetcherVersion = 1;
-      hash = "sha256-q7VMQb/FRT953yT2cyGMxUPp8p8XkA9mvqGI7S7Eifg=";
+      hash = "sha256-vJgsU0OXyAKjUJsPOyIY8o3zfNW1BUZ5IL814wmJr3o=";
    };

    buildPhase = ''
@@ -62,7 +62,7 @@ buildGoModule {
      internal/resticinstaller/resticinstaller.go
  '';

-  vendorHash = "sha256-AINnBkP+e9C/f/C3t6NK+6PYSVB4NON0C71S6SwUXbE=";
+  vendorHash = "sha256-oycV8JAJQF/PNc7mmYGzkZbpG8pMwxThmuys9e0+hcc=";

  nativeBuildInputs = [
    gzip
@@ -98,6 +98,10 @@ buildGoModule {
    export HOME=$(pwd)
  '';

+  # skip tests on darwin due to /etc/protocols failure
+  # `__darwinAllowLocalNetworking = true;` wasn't sufficient
+  doCheck = !stdenv.isDarwin;
+
  postInstall = ''
    wrapProgram $out/bin/backrest \
      --set-default BACKREST_RESTIC_COMMAND "${lib.getExe restic}"
@@ -12,14 +12,14 @@

 stdenv.mkDerivation rec {
  pname = "bird";
-  version = "2.17.1";
+  version = "2.17.2";

  src = fetchFromGitLab {
    domain = "gitlab.nic.cz";
    owner = "labs";
    repo = "bird";
    rev = "v${version}";
-    hash = "sha256-9Zg3UmNEW+Q26PMj3Z1XDbPFC5vatX8i7RQSUlKXlwg=";
+    hash = "sha256-4kEtSVuEwJIYIk4+OBjBLz72i60TOUKIbvdNKlrcUYM=";
  };

  nativeBuildInputs = [
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage rec {
  pname = "cargo-deny";
-  version = "0.18.4";
+  version = "0.18.5";

  src = fetchFromGitHub {
    owner = "EmbarkStudios";
    repo = "cargo-deny";
    rev = version;
-    hash = "sha256-5aa13eFfGEJZBRB4/PAKKLwxw2wt8sBI7ZVOpgnO+t8=";
+    hash = "sha256-FYVMeq/728uXayGbDKVK2kZNkf9tdXET+uEorJ6WNto=";
  };

-  cargoHash = "sha256-RW+drxVouQbiZsjEL+XZBE2VMzEiCkLTOC9jMxI76T8=";
+  cargoHash = "sha256-QfylAFybghBJzxgtrKIPGz/6EM1DlNJ/uJIEtMXpTbo=";

  nativeBuildInputs = [
    pkg-config
@@ -76,13 +76,13 @@ let
 in
 stdenv.mkDerivation rec {
  pname = "cinnamon";
-  version = "6.4.12";
+  version = "6.4.13";

  src = fetchFromGitHub {
    owner = "linuxmint";
    repo = "cinnamon";
    rev = version;
-    hash = "sha256-fEi/dUPnHC0OFqefclf0gQsZZNRVzBLaIR41prUfNP8=";
+    hash = "sha256-XGG5Qf6Kx1gvZITuuZWn1ggY4FNW/aEuBLbpWyxE2V8=";
  };

  patches = [
@@ -5,7 +5,7 @@
  "packages": {
    "": {
      "dependencies": {
-        "codebuff": "^1.0.473"
+        "codebuff": "^1.0.485"
      }
    },
    "node_modules/chownr": {
@@ -18,9 +18,9 @@
      }
    },
    "node_modules/codebuff": {
-      "version": "1.0.473",
-      "resolved": "https://registry.npmjs.org/codebuff/-/codebuff-1.0.473.tgz",
-      "integrity": "sha512-maT1kgspsqqDBYZ5K2Fpze3cB3NwTzl5nQZ9EY7CFjkiypYRjlFosrkxY8eUXs6hCZy/WmuBEYRjdyobEaqrcA==",
+      "version": "1.0.485",
+      "resolved": "https://registry.npmjs.org/codebuff/-/codebuff-1.0.485.tgz",
+      "integrity": "sha512-RC+DPvi2radIVR5mQ+L53J6dg9RYR6mtmnAz6v3b3sUS6vlAX5r2huDFK5vjWh4pvphLyYzXxnc8nxjGLwqDVA==",
      "cpu": [
        "x64",
        "arm64"
@@ -6,14 +6,14 @@

 buildNpmPackage rec {
  pname = "codebuff";
-  version = "1.0.473";
+  version = "1.0.485";

  src = fetchzip {
    url = "https://registry.npmjs.org/codebuff/-/codebuff-${version}.tgz";
-    hash = "sha256-SlSS1++pEVtvY3sSDZzoD4K6PiFA8Z6tBX+hfIDrhrY=";
+    hash = "sha256-TeHIRz6FmpyAIVS58IgyJ0Y/Ob/crCFey4eTk3vDIHE=";
  };

-  npmDepsHash = "sha256-fEK3CzK66AwHlZyt9ax+r5QGqUCfOw11EMMzA2d337c=";
+  npmDepsHash = "sha256-ZQdg464SXIwAhFgotIXO6xjpAdquOlKKPuejl6qS3xo=";

  postPatch = ''
    cp ${./package-lock.json} package-lock.json
@@ -12,18 +12,18 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "codex";
-  version = "0.39.0";
+  version = "0.40.0";

  src = fetchFromGitHub {
    owner = "openai";
    repo = "codex";
    tag = "rust-v${finalAttrs.version}";
-    hash = "sha256-VxfUhPyJRYu6xvrDJRa3BqS/G7gf+J9d+2FbW1Ps4kw=";
+    hash = "sha256-IBYx362R2ueYNg7/vcjGa2kKAfGlPm6JcZ/A4XKtMT4=";
  };

  sourceRoot = "${finalAttrs.src.name}/codex-rs";

-  cargoHash = "sha256-62JkVo2Dlrtgr66qn6a3vuIUsJpVZDQ8uqIJnXeeU90=";
+  cargoHash = "sha256-fWrZXXQfrm0L3epquDZUj0SuLRn3WiHX3nQA3d+xnUg=";

  nativeBuildInputs = [
    installShellFiles
@@ -62,6 +62,6 @@ buildGoModule rec {
    description = "Tool for directly patching vulnerabilities in container images";
    license = lib.licenses.asl20;
    mainProgram = "copa";
-    maintainers = with lib.maintainers; [ bmanuel ];
+    maintainers = with lib.maintainers; [ ];
  };
 }
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "credhub-cli";
-  version = "2.9.49";
+  version = "2.9.50";

  src = fetchFromGitHub {
    owner = "cloudfoundry-incubator";
    repo = "credhub-cli";
    rev = version;
-    sha256 = "sha256-Ilb/iieB+TCCXUPzTh6TxJtox0sicWXCUBI1SuHNsUQ=";
+    sha256 = "sha256-+Y+PmnCQCCpGvThzbW6byquwFx3Pz96Je0+yWWMh3BQ=";
  };

  # these tests require network access that we're not going to give them
@@ -17,13 +17,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "crispy-doom";
-  version = "7.0";
+  version = "7.1";

  src = fetchFromGitHub {
    owner = "fabiangreffrath";
    repo = "crispy-doom";
    tag = "crispy-doom-${finalAttrs.version}";
-    hash = "sha256-+rNZsb4GAjzNcIU5xZGBpmP+nXNOP16oVg68nfecMrw=";
+    hash = "sha256-LJLqlPSOarmm5oqSLMilxNMJl4+uKukDl/b58NpZ8VI=";
  };

  postPatch = ''
@@ -9,16 +9,16 @@

 buildGo125Module (finalAttrs: {
  pname = "crush";
-  version = "0.7.10";
+  version = "0.9.2";

  src = fetchFromGitHub {
    owner = "charmbracelet";
    repo = "crush";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-z7x//aTJCcAa3RkB8QOtdeU9dBcOKkJD3ftFiCt/WQo=";
+    hash = "sha256-VFAGjNtXKNjkv8Ryi28oFN/uLomXXdw6NFtyjT3pMEY=";
  };

-  vendorHash = "sha256-AZOX2aRYkuLx0DRCS5dqsRCPwpHngqDc+97luRr0m0g=";
+  vendorHash = "sha256-ktF3kIr143uPwiEbgafladZRqIsmG6jI2BeumGSu82U=";

  # rename TestMain to prevent it from running, as it panics in the sandbox.
  postPatch = ''
@@ -0,0 +1,3 @@
+{ python3Packages }:
+
+python3Packages.toPythonApplication python3Packages.crypt4gh
@@ -10,13 +10,13 @@

 stdenv.mkDerivation rec {
  pname = "decker";
-  version = "1.58";
+  version = "1.59";

  src = fetchFromGitHub {
    owner = "JohnEarnest";
    repo = "Decker";
    rev = "v${version}";
-    hash = "sha256-oPB+TT7mHJ6GNBnGIVmbAxNoD2oexPI2Sm8kxxsV6d4=";
+    hash = "sha256-56yIbIKMppO1eyvnlHvqkQvIT3x5t3W1KQ4M2HWRU3U=";
  };

  buildInputs = [
@@ -0,0 +1,62 @@
+{
+  stdenv,
+  fetchFromGitHub,
+  fetchpatch,
+  swift,
+  swiftpm,
+  versionCheckHook,
+  lib,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "desktoppr";
+  version = "0.5";
+
+  src = fetchFromGitHub {
+    owner = "scriptingosx";
+    repo = "desktoppr";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-eEVcYSa1ntyX/Wdj4HUyXyXIrK+T11Thg23ntNoIgH0=";
+  };
+
+  patches = [
+    # Update version in the code from 0.5b (beta) to 0.5 (release)
+    (fetchpatch {
+      url = "https://github.com/scriptingosx/desktoppr/commit/419363c28c99eb0f391bf231813af5e507c35573.patch";
+      hash = "sha256-7A3hsXO0hZYlZMrX1U0zC2vy59M9H5OZebEbPY8E9fA=";
+      includes = [ "desktoppr/main.swift" ];
+    })
+    # Adds support for building with swiftpm
+    (fetchpatch {
+      url = "https://github.com/scriptingosx/desktoppr/commit/eaf08da7cdd5fe9aa656516b3a5a0a9ac9969e72.patch";
+      hash = "sha256-8sAUNnTGqQ2UHIFUPwTP0dd3QKgI0HfOrG0HzcIStMM=";
+    })
+  ];
+
+  nativeBuildInputs = [
+    swift
+    swiftpm
+  ];
+
+  installPhase = ''
+    runHook preInstall
+    install -Dm755 "$(swiftpmBinPath)/desktoppr" -t "$out/bin"
+    runHook postInstall
+  '';
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+
+  versionCheckProgramArg = "version";
+  doInstallCheck = true;
+
+  meta = {
+    description = "Simple command line tool to read and set the desktop picture/wallpaper";
+    homepage = "https://github.com/scriptingosx/desktoppr";
+    platforms = lib.platforms.darwin;
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ andre4ik3 ];
+    mainProgram = "desktoppr";
+  };
+})
@@ -6,11 +6,11 @@

 stdenv.mkDerivation rec {
  pname = "dpic";
-  version = "2024.01.01";
+  version = "2025.08.01";

  src = fetchurl {
    url = "https://ece.uwaterloo.ca/~aplevich/dpic/${pname}-${version}.tar.gz";
-    sha256 = "sha256-FhkBrJr4bXMFUSuhtWSUBPtMgDoPqwYmJ8w8WJWthy8=";
+    sha256 = "sha256-Dzj1wekVGIJsssbpViSzkNGAjvrcBAL4ORFRLwznJsM=";
  };

  # The prefix passed to configure is not used.
@@ -23,13 +23,13 @@ let
 in
 stdenv.mkDerivation {
  pname = "drawterm";
-  version = "0-unstable-2025-08-18";
+  version = "0-unstable-2025-09-11";

  src = fetchFrom9Front {
    owner = "plan9front";
    repo = "drawterm";
-    rev = "44a7bdfaeb268bbc9df69693fa52d551beb2516d";
-    hash = "sha256-ov0BkKWUpRBi4COETtEw3x9WOSMy6HXkxrU9bVSI+AM=";
+    rev = "7523180ec9e5210e28eb0191268066188cdf91ab";
+    hash = "sha256-IOZCpNXJcTpqCRsNp8aaP2vORvusLktLtyoQ7gykJB8=";
  };

  enableParallelBuilding = true;
@@ -140,7 +140,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
    license = licenses.gpl3Plus;
    maintainers = with maintainers; [
      kimat
-      pyrox0
      n8henrie
    ];
    platforms = platforms.unix;
@@ -29,19 +29,19 @@

 rustPlatform.buildRustPackage rec {
  pname = "firefoxpwa";
-  version = "2.15.0";
+  version = "2.16.0";

  src = fetchFromGitHub {
    owner = "filips123";
    repo = "PWAsForFirefox";
    rev = "v${version}";
-    hash = "sha256-UqgPAGDekM9bKx4kNH+IuB31ML/Jn4E6g86suVESRRU=";
+    hash = "sha256-kFhnlWiNCbs0arJfQRRWubnIrdXKrwyJNLAN1KlDHoc=";
  };

  sourceRoot = "${src.name}/native";
  buildFeatures = [ "immutable-runtime" ];

-  cargoHash = "sha256-7v+Ohll8k3YHKYoQZIWvV+YLHT62ygFb0kPEIXh0jP4=";
+  cargoHash = "sha256-3o/Ub452PbiicmgyW6z9BP2PaECfFYN+Tx24/Go2N2M=";

  preConfigure = ''
    sed -i 's;version = "0.0.0";version = "${version}";' Cargo.toml
@@ -29,13 +29,13 @@ in

 buildNpmPackage (finalAttrs: {
  pname = "pangolin";
-  version = "1.10.1";
+  version = "1.10.2";

  src = fetchFromGitHub {
    owner = "fosrl";
    repo = "pangolin";
    tag = finalAttrs.version;
-    hash = "sha256-q5HnXJCx8wvHT+D/Pa+752xh57m/odesRjoqSdCHfrI=";
+    hash = "sha256-fXswhcnspyayyvvl1HEuQylKHzdgwucm1ClokJMeqys=";
  };

  npmDepsHash = "sha256-ivG/7KTmWPjnXzO+ISc+2bsNqW/0VPhFbg1229A64cw=";
@@ -8,7 +8,7 @@

 let
  pname = "gallery-dl";
-  version = "1.30.7";
+  version = "1.30.8";
 in
 python3Packages.buildPythonApplication {
  inherit pname version;
@@ -18,7 +18,7 @@ python3Packages.buildPythonApplication {
    owner = "mikf";
    repo = "gallery-dl";
    tag = "v${version}";
-    hash = "sha256-VFmTZpcTQQK5sfwgMJGDqHp7wu5dXd4gGfJTtnLBoxk=";
+    hash = "sha256-jetfEjKwAtJwOLKRZfnnnlb7G5YCDUzeHIASqJS3gcI=";
  };

  build-system = [ python3Packages.setuptools ];
@@ -10,16 +10,16 @@

 buildGoModule rec {
  pname = "gh";
-  version = "2.79.0";
+  version = "2.80.0";

  src = fetchFromGitHub {
    owner = "cli";
    repo = "cli";
    tag = "v${version}";
-    hash = "sha256-ACnRcuHbIsG43bXqqpxPMA1BcFb9TckfiLNJeyxAwkk=";
+    hash = "sha256-3XrP3NuXYWT09Yfo3XJ6Z2SE5jkE+tvS9QrXiRy3ov8=";
  };

-  vendorHash = "sha256-+O+cTsm9HzAJKDoNMMtcXr6iwRsqFtRLu0VTLe5/rSA=";
+  vendorHash = "sha256-rVNKTr3b4zShPfkiEBx7LqVQY2eMrXo/s8iC5tyQZNo=";

  nativeBuildInputs = [ installShellFiles ];

@@ -24,13 +24,13 @@
 }:
 stdenv.mkDerivation rec {
  pname = "gnome-pomodoro";
-  version = "0.27.0";
+  version = "0.28.0";

  src = fetchFromGitHub {
    owner = "gnome-pomodoro";
    repo = "gnome-pomodoro";
    rev = version;
-    hash = "sha256-ZdTMaCzjA7tsXmnlHGl8MFGGViVPwMZuiu91q5v/v9U=";
+    hash = "sha256-cVuBJ1Rwh/mjlFKKRJkKmdtDHdWNc6uiEE3ywCesirU=";
  };

  patches = [
@@ -9,11 +9,11 @@

 stdenv.mkDerivation rec {
  pname = "gnu-shepherd";
-  version = "1.0.6";
+  version = "1.0.7";

  src = fetchurl {
    url = "mirror://gnu/shepherd/shepherd-${version}.tar.gz";
-    hash = "sha256-/HTf2kmaaV5lD8WDnTmtU44uMjlJuJBK/Pr/o0FxvjM=";
+    hash = "sha256-MlqbdYHug6FRFd+/vMJHyetRD3UlSaI/OukSqOxydZc=";
  };

  configureFlags = [ "--localstatedir=/" ];
@@ -6,7 +6,7 @@
 }:

 let
-  version = "0.17.78";
+  version = "0.17.79";
 in
 buildGoModule {
  pname = "gqlgen";
@@ -16,10 +16,10 @@ buildGoModule {
    owner = "99designs";
    repo = "gqlgen";
    tag = "v${version}";
-    hash = "sha256-rFmcyEEliP8Kv75/UMB57IjKB8qTDrhvVDGMRlC1gc8=";
+    hash = "sha256-hvBP+MbdyWirovDFbgscg7ilfvlXjhSde/C3mHfjdxs=";
  };

-  vendorHash = "sha256-qDPJKGQmZz5Taj/gXakx3t/4bDaMrNR+HehV19HvdCI=";
+  vendorHash = "sha256-MFQwLWpjgsCkS1GFRbO/egDIWbh3HDAYuqekjGOC+ug=";

  subPackages = [ "." ];

@@ -7,18 +7,18 @@

 rustPlatform.buildRustPackage rec {
  pname = "harper";
-  version = "0.64.0";
+  version = "0.65.0";

  src = fetchFromGitHub {
    owner = "Automattic";
    repo = "harper";
    rev = "v${version}";
-    hash = "sha256-gg9fW77VYCg3/CRtVxJ3xSrJberL0ECQW4ilEZEpFL4=";
+    hash = "sha256-y2oYEJTZWZ7Rc7ZLjYUh3Cy9dtznGLhIXzJ6D0JUIGw=";
  };

  buildAndTestSubdir = "harper-ls";

-  cargoHash = "sha256-QuunnKfrNOd1/uMNcs8U/odi7L7CLHAFfh0hrhFlcz0=";
+  cargoHash = "sha256-o6RFBCvPn3AH3mMI3guHziqOcYN99o8yk5b6VXWoepI=";

  passthru.updateScript = nix-update-script { };

@@ -11,16 +11,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "hyprshell";
-  version = "4.6.0";
+  version = "4.6.4";

  src = fetchFromGitHub {
    owner = "H3rmt";
    repo = "hyprshell";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-lio5TLy4mtKfoH4kdFh+9l/j974UXF6DrxDWmvKj+Fo=";
+    hash = "sha256-+Uo7xbLlPrMG94eISub2l3Esj8l6IxwwKEfu8nZLWRg=";
  };

-  cargoHash = "sha256-uiyoVi3w3L2DnGlBeuBArYfpaSxDRCQG1sN5mWi+QGU=";
+  cargoHash = "sha256-jZiOLFI3VVrPvvb2YR92mvS8QELzIoQU6ER70rZ7o1E=";

  nativeBuildInputs = [
    wrapGAppsHook4
@@ -0,0 +1,34 @@
+{
+  lib,
+  stdenvNoCC,
+  fetchFromGitHub,
+}:
+
+stdenvNoCC.mkDerivation {
+  pname = "ia-writer-mono";
+  version = "0-unstable-2023-06-16";
+
+  src = fetchFromGitHub {
+    owner = "iaolo";
+    repo = "iA-Fonts";
+    rev = "f32c04c3058a75d7ce28919ce70fe8800817491b";
+    hash = "sha256-2T165nFfCzO65/PIHauJA//S+zug5nUwPcg8NUEydfc=";
+  };
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/share/fonts/truetype
+    cp iA\ Writer\ Mono/Variable/*.ttf $out/share/fonts/truetype
+
+    runHook postInstall
+  '';
+
+  meta = {
+    description = "iA Writer Mono Typeface";
+    homepage = "https://ia.net/topics/in-search-of-the-perfect-writing-font";
+    license = lib.licenses.ofl;
+    platforms = lib.platforms.all;
+    maintainers = [ lib.maintainers.richardjacton ];
+  };
+}
@@ -56,16 +56,16 @@ assert (extraParameters != null) -> set != null;

 buildNpmPackage rec {
  pname = "Iosevka${toString set}";
-  version = "33.2.9";
+  version = "33.3.0";

  src = fetchFromGitHub {
    owner = "be5invis";
    repo = "iosevka";
    rev = "v${version}";
-    hash = "sha256-EC3daY7R2AhqrE62dp6sT5BspyZkLccuC5PnBibeRaI=";
+    hash = "sha256-6Ys9OzZ9/k8VOD9rbU7QBbJumJMWKq/GFHtPWJGqJ+M=";
  };

-  npmDepsHash = "sha256-ekODYQ1GjGytlcX4VGIfyl5kPEWW/9VL/He0BBtWeK0=";
+  npmDepsHash = "sha256-UGEl+RFNPZ+3Cnp6vtxbcuZbs86T3VDgDAF0J++83/w=";

  nativeBuildInputs = [
    remarshal
@@ -6,14 +6,14 @@
 }:

 stdenv.mkDerivation rec {
-  version = "1.5.5";
+  version = "1.5.6";
  pname = "jpegoptim";

  src = fetchFromGitHub {
    owner = "tjko";
    repo = "jpegoptim";
    rev = "v${version}";
-    sha256 = "sha256-3p3kcUur1u09ROdKXG5H8eilu463Rzbn2yfYo5o6+KM=";
+    sha256 = "sha256-Nw9mz5zefkRwqkTIyBQyDlANHEx4dztiIiTuXUnuCKM=";
  };

  # There are no checks, it seems.
@@ -19,13 +19,13 @@
 assert blas.implementation == "openblas" && lapack.implementation == "openblas";
 stdenv.mkDerivation (finalAttrs: {
  pname = "kaldi";
-  version = "0-unstable-2025-07-22";
+  version = "0-unstable-2025-09-22";

  src = fetchFromGitHub {
    owner = "kaldi-asr";
    repo = "kaldi";
-    rev = "f4007661023b98b8081fd875029f0dee62242fd1";
-    sha256 = "sha256-DTXS+QUQOjfkus7lsjUfiQ6ScDkrBM8gaiLRP9yueTQ=";
+    rev = "e02e35f0254bb033fab73d1df99fc34123e31d56";
+    sha256 = "sha256-ZnVSQTETrMeU+pkqy50ldAe8g1pbnG7VS1utcUy28ls=";
  };

  cmakeFlags = [
@@ -53,10 +53,7 @@ rustPlatform.buildRustPackage rec {
    description = "Tool to improve keyboard comfort and usability with advanced customization";
    homepage = "https://github.com/jtroo/kanata";
    license = licenses.lgpl3Only;
-    maintainers = with maintainers; [
-      bmanuel
-      linj
-    ];
+    maintainers = with maintainers; [ linj ];
    platforms = platforms.unix;
    mainProgram = "kanata";
  };
@@ -15,14 +15,14 @@

 python3.pkgs.buildPythonApplication rec {
  pname = "kcc";
-  version = "9.0.0";
+  version = "9.1.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "ciromattia";
    repo = "kcc";
    tag = "v${version}";
-    hash = "sha256-J4nuVY5eOmHziteLvoBf/+CAY0X/7wBbRtPoIgdd5MA=";
+    hash = "sha256-FGRd2JVcz45KVjQCTEKIjKlkLJS/AsSsopeW9tXHWwk=";
  };

  nativeBuildInputs = [
@@ -7,14 +7,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "kolla";
-  version = "20.1.0";
+  version = "20.2.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "openstack";
    repo = "kolla";
    tag = version;
-    hash = "sha256-vVP9EwxAY2NBSciPSOvVaoCu85QVdFduY5aXPUI03XI=";
+    hash = "sha256-aqYEzBphzwB42Z0HmnCPQlV71dOi3yLKh+zL2dMTaB8=";
  };

  postPatch = ''
@@ -13,16 +13,16 @@

 buildGoModule rec {
  pname = "kubebuilder";
-  version = "4.8.0";
+  version = "4.9.0";

  src = fetchFromGitHub {
    owner = "kubernetes-sigs";
    repo = "kubebuilder";
    rev = "v${version}";
-    hash = "sha256-HUJ/dgDVN2hgCkO/iw3CqEgl8P2TbWgQ/TNe8uO3Vvk=";
+    hash = "sha256-CokzuduRJyRYIrkqE+LJE6znskfZIJfU12m4vDhZB0k=";
  };

-  vendorHash = "sha256-9hGIZgUyxMyOoxMn+KeN0+vmET2ISZtlejiaI5qUe40=";
+  vendorHash = "sha256-ValoM/qVrDKPjI5SOq4XkYNKPKjfQcrXKogfpd2aKLQ=";

  subPackages = [
    "cmd"
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "kubeseal";
-  version = "0.32.1";
+  version = "0.32.2";

  src = fetchFromGitHub {
    owner = "bitnami-labs";
    repo = "sealed-secrets";
    rev = "v${version}";
-    sha256 = "sha256-JwOKyxbLy1BikRSVPONDO57YyhhaqOELZSVlMlsfUUw=";
+    sha256 = "sha256-WT/dNXFZ8wD2mRv4fz+R1N8YJgui0jsicreYTNVABkM=";
  };

-  vendorHash = "sha256-zoi8Z5Jmg5E1c9B4m6870hvX0C3gFDzOCdGbdlBa70M=";
+  vendorHash = "sha256-PZTqR3HXXO5+mBb+y423YJAmx6dwqz6VKtWhvJBLGYs=";

  subPackages = [ "cmd/kubeseal" ];

@@ -7,16 +7,18 @@
 }:

 stdenv.mkDerivation (finalAttrs: {
-  version = "3.4.3";
+  version = "3.4.4";
  pname = "laszip";

  src = fetchFromGitHub {
    owner = "LASzip";
    repo = "LASzip";
    rev = finalAttrs.version;
-    hash = "sha256-9fzal54YaocONtguOCxnP7h1LejQPQ0dKFiCzfvTjCY=";
+    hash = "sha256-v/oLU69zqDW1o1HTlay7GDh1Kbmv1rarII2Fz5HWCqg=";
  };

+  hardeningDisable = [ "format" ]; # -Werror=format-security
+
  nativeBuildInputs = [
    cmake
  ]
@@ -6,12 +6,12 @@

 python3.pkgs.buildPythonApplication rec {
  pname = "ledfx";
-  version = "2.0.110";
+  version = "2.0.111";
  pyproject = true;

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-utYpAIt9ThgV58h4p3d2q/pLfCU2zlXyCnTP2kqkDjg=";
+    hash = "sha256-b6WHulQa1er0DpMfeJLqqb4z8glUt1dHvvNigXgrf7Y=";
  };

  pythonRelaxDeps = true;
@@ -7,16 +7,16 @@

 buildGoModule rec {
  pname = "lego";
-  version = "4.25.2";
+  version = "4.26.0";

  src = fetchFromGitHub {
    owner = "go-acme";
    repo = "lego";
    tag = "v${version}";
-    hash = "sha256-VAYptzJYyo6o5MPq0DB8+VrhqzwJSPwZK6BuaXOn8VM=";
+    hash = "sha256-wSTymGprdoXxBRlGDapF5H8SMbBRTI24PMgakGetABI=";
  };

-  vendorHash = "sha256-8135PtcC98XxbdQnF58sglAgZUkuBA+A3bSxK0+tQ9U=";
+  vendorHash = "sha256-BdOS4BNWtonLoZO4YA85VdB6MRbMqoO8MGb4XNEwfCk=";

  doCheck = false;

@@ -14,13 +14,13 @@

 stdenv.mkDerivation rec {
  pname = "libdatachannel";
-  version = "0.23.1";
+  version = "0.23.2";

  src = fetchFromGitHub {
    owner = "paullouisageneau";
    repo = "libdatachannel";
    rev = "v${version}";
-    hash = "sha256-+2xJ3H5tnlP015dr0V5WidMl434EsMHwu6p7SrvizgM=";
+    hash = "sha256-76rlnO0wr7xQAGCc0GmpHQldzHKnZ8NZWpHmrE70h/c=";
  };

  outputs = [
@@ -117,14 +117,14 @@ assert enableZfs -> isLinux;
 stdenv.mkDerivation rec {
  pname = "libvirt";
  # if you update, also bump <nixpkgs/pkgs/development/python-modules/libvirt/default.nix> and SysVirt in <nixpkgs/pkgs/top-level/perl-packages.nix>
-  version = "11.6.0";
+  version = "11.7.0";

  src = fetchFromGitLab {
    owner = "libvirt";
    repo = "libvirt";
    tag = "v${version}";
    fetchSubmodules = true;
-    hash = "sha256-t1CnShdHBCvLpw9B5iJmgLpwVc91/hwRVBefBkw4LZg=";
+    hash = "sha256-BLPuqKvKW3wk4ij8ag4V4odgzZXGfn7692gkeJ03xZw=";
  };

  patches = [
@@ -5,6 +5,7 @@
  python3,
  cmake,
  ninja,
+  nix-update-script,
 }:

 let
@@ -17,13 +18,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "lief";
-  version = "0.16.6";
+  version = "0.17.0";

  src = fetchFromGitHub {
    owner = "lief-project";
    repo = "LIEF";
    tag = finalAttrs.version;
-    hash = "sha256-SvwFyhIBuG0u5rE7+1OaO7VZu4/X4jVI6oFOm5+yCd8=";
+    hash = "sha256-icwRW9iY/MiG/x3VHqRfAU2Yk4q2hXLJsfN5Lwx37gw=";
  };

  outputs = [
@@ -47,7 +48,11 @@ stdenv.mkDerivation (finalAttrs: {
    scikit-build-core
  ];

-  cmakeFlags = [ (lib.cmakeBool "BUILD_SHARED_LIBS" (!stdenv.hostPlatform.isStatic)) ];
+  cmakeFlags = [
+    (lib.cmakeBool "LIEF_PYTHON_API" true)
+    (lib.cmakeBool "LIEF_EXAMPLES" false)
+    (lib.cmakeBool "BUILD_SHARED_LIBS" (!stdenv.hostPlatform.isStatic))
+  ];

  postBuild = ''
    pushd ../api/python
@@ -61,6 +66,10 @@ stdenv.mkDerivation (finalAttrs: {
    popd
  '';

+  pythonImportsCheck = [ "lief" ];
+
+  passthru.updateScript = nix-update-script { };
+
  meta = with lib; {
    description = "Library to Instrument Executable Formats";
    homepage = "https://lief.quarkslab.com/";
@@ -7,13 +7,13 @@

 maven.buildMavenPackage rec {
  pname = "mariadb-connector-java";
-  version = "3.5.5";
+  version = "3.5.6";

  src = fetchFromGitHub {
    owner = "mariadb-corporation";
    repo = "mariadb-connector-j";
    tag = version;
-    hash = "sha256-RtBc40pH8eumfgXCuhxk7BCtvgPTsAMgsf5UJuHcuPk=";
+    hash = "sha256-vBrXK8g+eAxD85iIEtJhTZ4sdohcdjhtzojS+JScLos=";
  };

  mvnHash = "sha256-q61OyBg84Zaf9prM6J3lUVsJXEnmoptcq2EuNs+faDc=";
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "matrix-alertmanager-receiver";
-  version = "2025.9.10";
+  version = "2025.9.17";

  src = fetchFromGitHub {
    owner = "metio";
    repo = "matrix-alertmanager-receiver";
    tag = finalAttrs.version;
-    hash = "sha256-8oi/CeoIiv+yIkYqHXIivrd9iC3PfXbB+cELlKABafQ=";
+    hash = "sha256-cLAB3Pdt+bg8boaRvYclsIrQXIK50fPWi92eCg7g/LA=";
  };

  vendorHash = "sha256-zYcc2Gtdrh0xgHc/Bj+XQovlazlHpv7Rm+3lbw1ry1g=";
@@ -22,13 +22,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "mozillavpn";
-  version = "2.30.0";
+  version = "2.31.0";
  src = fetchFromGitHub {
    owner = "mozilla-mobile";
    repo = "mozilla-vpn-client";
    tag = "v${finalAttrs.version}";
    fetchSubmodules = true;
-    hash = "sha256-dwVgwEs1prEXOYuYlO1m5lJD5AKolW0Stj2HOZC+Y+o=";
+    hash = "sha256-++j3BMTkg5TG09hmsUGDcKbkvTGrd9u0FaRebbOsI3s=";
  };
  patches = [ ];

@@ -45,7 +45,7 @@ stdenv.mkDerivation (finalAttrs: {

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) src patches;
-    hash = "sha256-dap2t7nINWaTTahiPUFVkgAlkDuVt0w0mz13ycqwLcI=";
+    hash = "sha256-bJTOTHlCYSrlhy6GewpK8qhBGRH49xNkFqOXZug5lNA=";
  };

  buildInputs = [
@@ -134,14 +134,17 @@ python3Packages.buildPythonApplication rec {
        # NOTE: this is a passthru test rather than a build-time test because we
        # want to keep the build closures small
        linters = runCommand "${pname}-linters" { nativeBuildInputs = [ python-with-pkgs ]; } ''
+          export MYPY_CACHE_DIR="$(mktemp -d)"
          export RUFF_CACHE_DIR="$(mktemp -d)"

+          pushd ${src}
          echo -e "\x1b[32m## run mypy\x1b[0m"
-          mypy ${src}
+          mypy .
          echo -e "\x1b[32m## run ruff\x1b[0m"
-          ruff check ${src}
+          ruff check .
          echo -e "\x1b[32m## run ruff format\x1b[0m"
-          ruff format --check ${src}
+          ruff format --check .
+          popd

          touch $out
        '';
@@ -1,3 +1,4 @@
+# mypy: disable-error-code=comparison-overlap
 from typing import Final

 # Build-time flags
@@ -8,7 +8,7 @@ from typing import Any, ClassVar, Self, TypedDict, override

 from .process import Remote, run_wrapper

-type ImageVariants = list[str]
+type ImageVariants = dict[str, str]


 class NixOSRebuildError(Exception):
@@ -77,7 +77,7 @@ def _get_hostname(target_host: Remote | None) -> str | None:

@dataclass(frozen=True)
 class Flake:
-    path: Path | str
+    path: str
    attr: str
    _re: ClassVar = re.compile(r"^(?P<path>[^\#]*)\#?(?P<attr>[^\#\"]*)$")

@@ -86,11 +86,7 @@ class Flake:

    @override
    def __str__(self) -> str:
-        if isinstance(self.path, Path):
-            # https://github.com/NixOS/nixpkgs/issues/433726
-            return f"{self.path.absolute()}#{self.attr}"
-        else:
-            return f"{self.path}#{self.attr}"
+        return f"{self.path}#{self.attr}"

    @classmethod
    def parse(cls, flake_str: str, target_host: Remote | None = None) -> Self:
@@ -101,10 +97,7 @@ class Flake:
            f'nixosConfigurations."{attr or _get_hostname(target_host) or "default"}"'
        )
        path = m.group("path")
-        if ":" in path:
-            return cls(path, nixos_attr)
-        else:
-            return cls(Path(path), nixos_attr)
+        return cls(path, nixos_attr)

    @classmethod
    def from_arg(cls, flake_arg: Any, target_host: Remote | None) -> Self | None:  # noqa: ANN401
@@ -125,6 +118,12 @@ class Flake:
                else:
                    return None

+    def resolve_path_if_exists(self) -> str:
+        try:
+            return str(Path(self.path).resolve(strict=True))
+        except FileNotFoundError:
+            return self.path
+

@dataclass(frozen=True)
 class Generation:
@@ -545,7 +545,7 @@ def repl_flake(flake: Flake, flake_flags: Args | None = None) -> None:
        files(__package__).joinpath(FLAKE_REPL_TEMPLATE).read_text()
    ).substitute(
        flake=flake,
-        flake_path=flake.path.resolve() if isinstance(flake.path, Path) else flake.path,
+        flake_path=flake.resolve_path_if_exists(),
        flake_attr=flake.attr,
        bold="\033[1m",
        blue="\033[34;1m",
@@ -14,7 +14,7 @@ class LogFormatter(logging.Formatter):
    }

    @override
-    def format(self, record: logging.LogRecord) -> str:
+    def format(self, record: logging.LogRecord) -> Any:
        record.levelname = record.levelname.lower()
        formatter = self.formatters.get(record.levelno, self.formatters["DEFAULT"])
        return formatter.format(record)
@@ -33,10 +33,10 @@ def test_build_attr_to_attr() -> None:
@patch("platform.node", autospec=True, return_value=None)
 def test_flake_parse(mock_node: Mock, tmpdir: Path, monkeypatch: MonkeyPatch) -> None:
    assert m.Flake.parse("/path/to/flake#attr") == m.Flake(
-        Path("/path/to/flake"), 'nixosConfigurations."attr"'
+        "/path/to/flake", 'nixosConfigurations."attr"'
    )
    assert m.Flake.parse("/path/ to /flake") == m.Flake(
-        Path("/path/ to /flake"), 'nixosConfigurations."default"'
+        "/path/ to /flake", 'nixosConfigurations."default"'
    )
    with patch(
        get_qualified_name(m.run_wrapper, m),
@@ -45,11 +45,11 @@ def test_flake_parse(mock_node: Mock, tmpdir: Path, monkeypatch: MonkeyPatch) ->
    ):
        target_host = m.Remote("target@remote", [], None)
        assert m.Flake.parse("/path/to/flake", target_host) == m.Flake(
-            Path("/path/to/flake"), 'nixosConfigurations."remote"'
+            "/path/to/flake", 'nixosConfigurations."remote"'
        )
-    assert m.Flake.parse(".#attr") == m.Flake(Path("."), 'nixosConfigurations."attr"')
-    assert m.Flake.parse("#attr") == m.Flake(Path("."), 'nixosConfigurations."attr"')
-    assert m.Flake.parse(".") == m.Flake(Path("."), 'nixosConfigurations."default"')
+    assert m.Flake.parse(".#attr") == m.Flake(".", 'nixosConfigurations."attr"')
+    assert m.Flake.parse("#attr") == m.Flake("", 'nixosConfigurations."attr"')
+    assert m.Flake.parse(".") == m.Flake(".", 'nixosConfigurations."default"')
    assert m.Flake.parse("path:/to/flake#attr") == m.Flake(
        "path:/to/flake", 'nixosConfigurations."attr"'
    )
@@ -64,19 +64,33 @@ def test_flake_parse(mock_node: Mock, tmpdir: Path, monkeypatch: MonkeyPatch) ->

 def test_flake_to_attr() -> None:
    assert (
-        m.Flake(Path("/path/to/flake"), "nixosConfigurations.preAttr").to_attr(
+        m.Flake("/path/to/flake", "nixosConfigurations.preAttr").to_attr(
            "attr1", "attr2"
        )
        == "/path/to/flake#nixosConfigurations.preAttr.attr1.attr2"
    )


-def test_flake__str__(monkeypatch: MonkeyPatch, tmpdir: Path) -> None:
+def test_flake__str__() -> None:
    assert str(m.Flake("github:nixos/nixpkgs", "attr")) == "github:nixos/nixpkgs#attr"
-    assert str(m.Flake(Path("/etc/nixos"), "attr")) == "/etc/nixos#attr"
+    assert str(m.Flake("/etc/nixos", "attr")) == "/etc/nixos#attr"
+    assert str(m.Flake(".", "attr")) == ".#attr"
+    assert str(m.Flake("", "attr")) == "#attr"
+
+
+def test_flake_resolve_path_if_exists(monkeypatch: MonkeyPatch, tmpdir: Path) -> None:
+    assert (
+        m.Flake("github:nixos/nixpkgs", "attr").resolve_path_if_exists()
+        == "github:nixos/nixpkgs"
+    )
+    assert (
+        m.Flake("/an/inexistent/path", "attr").resolve_path_if_exists()
+        == "/an/inexistent/path"
+    )
    with monkeypatch.context() as patch_context:
        patch_context.chdir(tmpdir)
-        assert str(m.Flake(Path("."), "attr")) == f"{tmpdir}#attr"
+        assert m.Flake(str(tmpdir), "attr").resolve_path_if_exists() == str(tmpdir)
+        assert m.Flake(".", "attr").resolve_path_if_exists() == str(tmpdir)


@patch("platform.node", autospec=True)
@@ -87,7 +101,7 @@ def test_flake_from_arg(

    # Flake string
    assert m.Flake.from_arg("/path/to/flake#attr", None) == m.Flake(
-        Path("/path/to/flake"), 'nixosConfigurations."attr"'
+        "/path/to/flake", 'nixosConfigurations."attr"'
    )

    # False
@@ -97,7 +111,7 @@ def test_flake_from_arg(
    with monkeypatch.context() as patch_context:
        patch_context.chdir(tmpdir)
        assert m.Flake.from_arg(True, None) == m.Flake(
-            Path("."), 'nixosConfigurations."hostname"'
+            ".", 'nixosConfigurations."hostname"'
        )

    # None when we do not have /etc/nixos/flake.nix
@@ -122,7 +136,7 @@ def test_flake_from_arg(
        ),
    ):
        assert m.Flake.from_arg(None, None) == m.Flake(
-            Path("/etc/nixos"), 'nixosConfigurations."hostname"'
+            "/etc/nixos", 'nixosConfigurations."hostname"'
        )

    with (
@@ -138,7 +152,7 @@ def test_flake_from_arg(
        ),
    ):
        assert m.Flake.from_arg(None, None) == m.Flake(
-            Path("/path/to"), 'nixosConfigurations."hostname"'
+            "/path/to", 'nixosConfigurations."hostname"'
        )

    with (
@@ -149,7 +163,7 @@ def test_flake_from_arg(
        ),
    ):
        assert m.Flake.from_arg("/path/to", m.Remote("user@host", [], None)) == m.Flake(
-            Path("/path/to"), 'nixosConfigurations."remote-hostname"'
+            "/path/to", 'nixosConfigurations."remote-hostname"'
        )


@@ -385,7 +385,7 @@ def test_get_build_image_variants(mock_run: Mock, tmp_path: Path) -> None:
    ),
 )
 def test_get_build_image_variants_flake(mock_run: Mock) -> None:
-    flake = m.Flake(Path("/flake.nix"), "myAttr")
+    flake = m.Flake("/flake.nix", "myAttr")
    assert n.get_build_image_variants_flake(flake, {"eval_flag": True}) == {
        "azure": "nixos-image-azure-25.05.20250102.6df2492-x86_64-linux.vhd",
        "vmware": "nixos-image-vmware-25.05.20250102.6df2492-x86_64-linux.vmdk",
@@ -574,7 +574,7 @@ def test_repl(mock_run: Mock) -> None:

@patch(get_qualified_name(n.run_wrapper, n), autospec=True)
 def test_repl_flake(mock_run: Mock) -> None:
-    n.repl_flake(m.Flake(Path("flake.nix"), "myAttr"), {"nix_flag": True})
+    n.repl_flake(m.Flake("flake.nix", "myAttr"), {"nix_flag": True})
    # See nixos-rebuild-ng.tests.repl for a better test,
    # this is mostly for sanity check
    assert mock_run.call_count == 1
@@ -8,13 +8,13 @@

 buildGoModule rec {
  pname = "nsc";
-  version = "2.11.1";
+  version = "2.12.0";

  src = fetchFromGitHub {
    owner = "nats-io";
    repo = "nsc";
    rev = "v${version}";
-    hash = "sha256-9HHrAT4LKVLb2+IDmXoPRtOKo1DRFznAbxJZp/B1uRY=";
+    hash = "sha256-ct2InMPpqbtFeKtarWXGuPiXS2OD78w2sX0BoFiCl0c=";
  };

  ldflags = [
@@ -24,7 +24,7 @@ buildGoModule rec {
    "-X main.builtBy=nixpkgs"
  ];

-  vendorHash = "sha256-sTaiaLJyokasaf1Mbaz4RkgspTd3VphZat8Bavg/Y9A=";
+  vendorHash = "sha256-0tJHK999AjtKYUB0gC5SlQPqit6UTyGsbb6vC7KdQQc=";

  nativeBuildInputs = [ installShellFiles ];

@@ -47,7 +47,7 @@ buildGoModule rec {
  # the test strips table formatting from the command output in a naive way
  # that removes all the table characters, including '-'.
  # The nix build directory looks something like:
-  # /private/tmp/nix-build-nsc-2.11.1.drv-0/nsc_test2000598938/keys
+  # /private/tmp/nix-build-nsc-2.12.0.drv-0/nsc_test2000598938/keys
  # Then the `-` are removed from the path unintentionally and the test fails.
  # This should be fixed upstream to avoid mangling the path when
  # removing the table decorations from the command output.
@@ -8,12 +8,12 @@
 }:

 stdenv.mkDerivation (finalAttrs: {
-  version = "0.2.1";
+  version = "0.3.0";
  pname = "open-pdf-sign";

  src = fetchurl {
    url = "https://github.com/open-pdf-sign/open-pdf-sign/releases/download/v${finalAttrs.version}/open-pdf-sign.jar";
-    hash = "sha256-jtaEystCiZUK93HkVPuWzAUISO4RMMxjMmFbooWZJGU=";
+    hash = "sha256-tGTWKw/xLhC1B+uogTUmWHUtHNNdE3BLuxToWvrduXs=";
  };

  nativeBuildInputs = [
@@ -7,7 +7,7 @@

 let
  pname = "openfga";
-  version = "1.10.0";
+  version = "1.10.1";
 in

 buildGoModule {
@@ -17,10 +17,10 @@ buildGoModule {
    owner = "openfga";
    repo = "openfga";
    rev = "v${version}";
-    hash = "sha256-9VzzjuLJTP0K6R6ACLqOdi767k2fMtKn84qjyRDLJMk=";
+    hash = "sha256-lk677ctvk2n+8GcZiNbTV3NeD5+xhhVuojhENQTcC0s=";
  };

-  vendorHash = "sha256-nbjPl6FYfkmiGzLES6oi7QQmpLkfm9WaVn5RJJQqlz0=";
+  vendorHash = "sha256-8uI8Woiu6F81y2YCGXLHx7D+nO3D9jCHUI5FUq+ImXA=";

  nativeBuildInputs = [ installShellFiles ];

@@ -8,13 +8,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "pageedit";
-  version = "2.5.0";
+  version = "2.6.2";

  src = fetchFromGitHub {
    owner = "Sigil-Ebook";
    repo = "pageedit";
    tag = finalAttrs.version;
-    hash = "sha256-Tkc8iOH+HG3ULrdUvVdeOzAl0i1R3QFaZ1U/vjCKGjo=";
+    hash = "sha256-9+kWfyOfwbWh41cTXpP0raCY/dblQZP0PWFzGV+f4dY=";
  };

  nativeBuildInputs = with qt6Packages; [
@@ -8,16 +8,16 @@

 buildGoModule rec {
  pname = "patch2pr";
-  version = "0.37.0";
+  version = "0.38.0";

  src = fetchFromGitHub {
    owner = "bluekeyes";
    repo = "patch2pr";
    rev = "v${version}";
-    hash = "sha256-dijSa6BXV8hXuRDeXIHcijPzQKFkmATrlAX0uiDDYjo=";
+    hash = "sha256-WkjO6FBeJ5E2bc4PT9lkfNq5CYL3Kh1Mgai+39YDzSU=";
  };

-  vendorHash = "sha256-QEgGq5/JQUIWWmJKoQ832eKhiF5xF8Jivpn1uFDERTA=";
+  vendorHash = "sha256-RiaFvvPwNxfQE6F93BdPT+LLmUkNC9sYOfHyFgG9/30=";

  ldflags = [
    "-X main.version=${version}"
@@ -8,13 +8,13 @@

 buildGoModule rec {
  pname = "pgroll";
-  version = "0.14.2";
+  version = "0.14.3";

  src = fetchFromGitHub {
    owner = "xataio";
    repo = "pgroll";
    tag = "v${version}";
-    hash = "sha256-tSiGzWxnxiNzBSory5sd676+iVwsl/nkbDWaCls52MQ=";
+    hash = "sha256-OqBgFeXpvoImoPMKHBCvsPQGhHSBZuNNMLh2/3DPPYo=";
  };

  proxyVendor = true;
@@ -7,16 +7,16 @@

 php.buildComposerProject2 (finalAttrs: {
  pname = "phel";
-  version = "0.21.0";
+  version = "0.22.2";

  src = fetchFromGitHub {
    owner = "phel-lang";
    repo = "phel-lang";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-4s3PCgaJfJR9+XXqT2WLrEwNUSLLCIOb+nJ8w9SbKps=";
+    hash = "sha256-MaCL4CLFd5B2hKwvobuye+MHlpNiIi3f47ftvvAeFiU=";
  };

-  vendorHash = "sha256-4/J3TJPdbj+eAneMwxP73N1cI53hJSEQg4G+LlQOJeE=";
+  vendorHash = "sha256-ney12GFiYKFcJPj9ptmTN20BhlmCyHb/7q7+tbxz71o=";

  doInstallCheck = true;
  nativeInstallCheckInputs = [ versionCheckHook ];
@@ -1,6 +1,7 @@
 {
  lib,
  stdenv,
+  nixosTests,
  fetchFromGitHub,
  cmake,
  gmp,
@@ -12,7 +13,6 @@
  readline,
  xxd,
  iproute2,
-  ...
 }:

 stdenv.mkDerivation (finalAttrs: {
@@ -78,6 +78,7 @@ stdenv.mkDerivation (finalAttrs: {
  '';

  passthru.settingsTemplate = ./pihole.toml;
+  passthru.tests = nixosTests.pihole-ftl;

  meta = {
    description = "Pi-hole FTL engine";
@@ -1,6 +1,7 @@
 {
  stdenv,
  lib,
+  nixosTests,
  fetchFromGitHub,
  pihole,
  pihole-ftl,
@@ -36,6 +37,8 @@ stdenv.mkDerivation (finalAttrs: {
    runHook postInstall
  '';

+  passthru.tests = nixosTests.pihole-ftl;
+
  meta = {
    description = "Pi-hole web dashboard displaying stats and more";
    homepage = "https://github.com/pi-hole/web";
@@ -1,5 +1,6 @@
 {
  lib,
+  nixosTests,
  fetchFromGitHub,
  makeBinaryWrapper,
  installShellFiles,
@@ -238,6 +239,8 @@
    mainProgram = "pihole";
  };

+  passthru.tests = nixosTests.pihole-ftl;
+
  passthru = {
    inherit stateDir;
  };
@@ -37,5 +37,6 @@ buildGoModule rec {
      valodim
    ];
    mainProgram = "postfix-tlspol";
+    platforms = lib.platforms.linux;
  };
 }
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "precious";
-  version = "0.9.0";
+  version = "0.10.0";

  src = fetchFromGitHub {
    owner = "houseabsolute";
    repo = "precious";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-moJk8bwMlYtfo+Iq/OcjJkQJQiirZ6oKSoATpW3KcQI=";
+    hash = "sha256-bHrn78wzdkxV92Lp3MzNUpSvMTyc8l3tw+z5NBxJPoA=";
  };

-  cargoHash = "sha256-nvHP5/njvkXcI3QtFU4CijXaX5l4DabMMVzvktvFNvA=";
+  cargoHash = "sha256-OA1C98C0BHEVl056UCL5alT292djuBDGFjZn2HAytEQ=";

  nativeInstallCheckInputs = [ versionCheckHook ];
  doInstallCheck = true;
@@ -106,6 +106,7 @@ python.pkgs.buildPythonApplication rec {
    "reportlab"
    "requests"
    "sentry-sdk"
+    "sepaxml"
    "ua-parser"
    "webauthn"
  ];
@@ -2,8 +2,6 @@
  lib,
  buildNpmPackage,
  fetchFromGitHub,
-  pkg-config,
-  libsecret,
 }:

 buildNpmPackage (finalAttrs: {
@@ -18,16 +16,8 @@ buildNpmPackage (finalAttrs: {
  };

  sourceRoot = "${finalAttrs.src.name}/packages/language-server";
-
-  nativeBuildInputs = [ pkg-config ];
-  buildInputs = [ libsecret ];
-
  npmDepsHash = "sha256-UAGz/qCYf+jsgCWqvR52mW6Ze3WWP9EHuE4k9wCbnH0=";

-  npmPackFlags = [ "--ignore-scripts" ];
-
-  NODE_OPTIONS = "--openssl-legacy-provider";
-
  meta = {
    description = "Language server for Prisma";
    homepage = "https://github.com/prisma/language-tools";
@@ -6,22 +6,23 @@
  pkg-config,
  openssl,
  rust-jemalloc-sys,
-  nix-update-script,
  rust-jemalloc-sys-unprefixed,
+  versionCheckHook,
+  nix-update-script,
 }:

-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
  pname = "qdrant";
-  version = "1.14.0";
+  version = "1.15.4";

  src = fetchFromGitHub {
    owner = "qdrant";
    repo = "qdrant";
-    tag = "v${version}";
-    hash = "sha256-o9Nv4UsFgVngKWpe5sUR8tovtpB81tJBSm6We6DN20c=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-t+j7gq0PidvBGkjkyU8Zny9bgjKGNITUJOmyFnneZVY=";
  };

-  cargoHash = "sha256-xt7uu+YZGazbKwXEKXeIwcGg8G4djQx7nKpQYFv/L3Y=";
+  cargoHash = "sha256-bcPSHoUOUliAU+GersU4auzdUiv9PPuAjrPO/FxovB8=";

  nativeBuildInputs = [
    protobuf
@@ -38,6 +39,17 @@ rustPlatform.buildRustPackage rec {
  # Needed to get openssl-sys to use pkg-config.
  env.OPENSSL_NO_VENDOR = 1;

+  # Fix cargo-auditable issue with bench_rocksdb = ["dep:rocksdb"]
+  auditable = false;
+
+  __darwinAllowLocalNetworking = true;
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
  passthru.updateScript = nix-update-script { };

  meta = {
@@ -50,4 +62,4 @@ rustPlatform.buildRustPackage rec {
    license = lib.licenses.asl20;
    maintainers = with lib.maintainers; [ dit7ya ];
  };
-}
+})
@@ -8,11 +8,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "quarkus-cli";
-  version = "3.25.4";
+  version = "3.26.3";

  src = fetchurl {
    url = "https://github.com/quarkusio/quarkus/releases/download/${finalAttrs.version}/quarkus-cli-${finalAttrs.version}.tar.gz";
-    hash = "sha256-L7j+yuYjCWUuAuUA6YQjnU/fyppn9HkxPvsNiRDj8I8=";
+    hash = "sha256-iFJJ1l1EloP3ChDaVF1ipJA54ia/THYl+0kMvfJn5a4=";
  };

  nativeBuildInputs = [ makeWrapper ];
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "rain";
-  version = "2.2.1";
+  version = "2.2.2";

  src = fetchFromGitHub {
    owner = "cenkalti";
    repo = "rain";
    tag = "v${version}";
-    hash = "sha256-hXNup0ROW+0jFqMzC1bF48XZIIyzy7/jWepEp1sPF0Q=";
+    hash = "sha256-FU0RjWT+ewM/13n/4zCdxLVrN8ikUJCtosXsx8L8vMk=";
  };

-  vendorHash = "sha256-e7adl7B2TFjkVlA2YQ3iXQRMhHThJHWOLPphmhdEmTE=";
+  vendorHash = "sha256-TFIrepXZPokVu9lW2V2s3seq58yQiHceu+zRHucB+0g=";

  meta = {
    description = "BitTorrent client and library in Go";
@@ -6,16 +6,16 @@

 buildGoModule (finalAttrs: {
  pname = "rqlite";
-  version = "8.43.4";
+  version = "9.0.1";

  src = fetchFromGitHub {
    owner = "rqlite";
    repo = "rqlite";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-2lCMRKGsDfwvXX1iCXfvVj4xcZT9IWRl8jWTpsIOkkw=";
+    hash = "sha256-ll8F5doXHG3Nq3LisSpy5iuh9JhA6/HsBwrSPDGs57c=";
  };

-  vendorHash = "sha256-Xytvin7YX3eIPE5aw38PzLxhUPwoOZswAntEwCP6Toc=";
+  vendorHash = "sha256-Mq469sUYgS19SVJ7noTUl7hml9xUAGDsr64MJM8Xq9g=";

  subPackages = [
    "cmd/rqlite"
@@ -13,16 +13,16 @@

 buildGoModule rec {
  pname = "runme";
-  version = "3.15.1";
+  version = "3.15.2";

  src = fetchFromGitHub {
    owner = "runmedev";
    repo = "runme";
    rev = "v${version}";
-    hash = "sha256-qC5FoRpMSWFlPGQvM+wTvCF46TvJznZAQNle5fAOp9g=";
+    hash = "sha256-NtFKzObi0mIdzhRiu7CCZ3e4yIhI2gHMtVsdf5TEb/s=";
  };

-  vendorHash = "sha256-KF9yKm/b3VjZJIj9PXcm2UxdTE43YGsqgep8Us13GdI=";
+  vendorHash = "sha256-Uw5igaQpKKI4y7EoznFdmyTXfex350Pps6nt3lvKeAM=";

  nativeBuildInputs = [
    installShellFiles
@@ -19,13 +19,13 @@ in

 stdenv.mkDerivation (finalAttrs: {
  pname = "sby";
-  version = "0.56";
+  version = "0.57";

  src = fetchFromGitHub {
    owner = "YosysHQ";
    repo = "sby";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-uKndGUoLbG7SBhsOSYyM/v9g33pq7zFFajzvTUYa7NY=";
+    hash = "sha256-vhgLP2twPPGsey5lzmt/zUFme4GjIdWgRyWoCHxLxRU=";
  };

  postPatch = ''
@@ -32,6 +32,7 @@ python.pkgs.toPythonModule (
      "httpx-socks"
      "lxml"
      "typer-slim"
+      "whitenoise"
    ];

    preBuild =
@@ -12,12 +12,12 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "signal-cli";
-  version = "0.13.18";
+  version = "0.13.19";

  # Building from source would be preferred, but is much more involved.
  src = fetchurl {
    url = "https://github.com/AsamK/signal-cli/releases/download/v${finalAttrs.version}/signal-cli-${finalAttrs.version}.tar.gz";
-    hash = "sha256-Dnhr/+dKSNCiM7NB8+v5OxfaGhpyHWXVIWC2pZqaoa8=";
+    hash = "sha256-+vO/6bn5416HdqM9x2tJQ6v4KP9hcxX1G31icBOcB58=";
  };

  buildInputs = lib.optionals stdenvNoCC.hostPlatform.isLinux [
@@ -26,13 +26,13 @@ assert
  (!withFirefox && !withChromium) -> throw "Either `withFirefox` or `withChromium` must be enabled.";
 buildNpmPackage rec {
  pname = "sitespeed-io";
-  version = "38.1.2";
+  version = "38.3.0";

  src = fetchFromGitHub {
    owner = "sitespeedio";
    repo = "sitespeed.io";
    tag = "v${version}";
-    hash = "sha256-S7XYDxKODK6R/O9kNVq04pponYfcwTwsyVQO8yh598w=";
+    hash = "sha256-45lvEM8vkoXdbZNJamUR94PD0EwtoNEhWSNyV68yzPo=";
  };

  postPatch = ''
@@ -50,7 +50,7 @@ buildNpmPackage rec {

  dontNpmBuild = true;
  npmInstallFlags = [ "--omit=dev" ];
-  npmDepsHash = "sha256-rVxVD2c+xijup7XrtwwmECahL3S2S98+71d7H1Bwa+U=";
+  npmDepsHash = "sha256-rXGoIIbKNZCBhhuRM/0WcaciH/bLQamipmOIh1EXJlU=";

  postInstall = ''
    mv $out/bin/sitespeed{.,-}io
@@ -51,6 +51,11 @@ rustPlatform.buildRustPackage rec {

    installBin sk-share
    installManPage $(find man -type f)
+    installShellCompletion \
+      --cmd sk \
+      --bash shell/completion.bash \
+      --fish shell/completion.fish \
+      --zsh shell/completion.zsh
  '';

  # Doc tests are broken on aarch64
@@ -16,13 +16,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "smartgit";
-  version = "24.1.4";
+  version = "24.1.5";

  src = fetchurl {
    url = "https://www.syntevo.com/downloads/smartgit/smartgit-linux-${
      builtins.replaceStrings [ "." ] [ "_" ] finalAttrs.version
    }.tar.gz";
-    hash = "sha256-1JKFSIGUE8b1yWBg41x+HRWgmg5prZF2+ND/SId4NVs=";
+    hash = "sha256-YqueTbwA9KcXEJG5TeWkPzzNyAnnJQ1+VQYsqZKS2/I=";
  };

  nativeBuildInputs = [ wrapGAppsHook3 ];
@@ -14,7 +14,7 @@
 }:

 let
-  version = "0.9.2";
+  version = "0.9.3";
  # list of all theoretically available targets
  targets = [
    "genode"
@@ -37,7 +37,7 @@ stdenv.mkDerivation {

  src = fetchurl {
    url = "https://github.com/Solo5/solo5/releases/download/v${version}/solo5-v${version}.tar.gz";
-    hash = "sha256-HiYi6VECDVZXJboTt6DwggyUyUhdlU4C7fwqYzvKWZs=";
+    hash = "sha256-KbeY667Y/ZPUuRIGYOZMMAuVEVJ7Kn9UDUSThX5zfII=";
  };

  hardeningEnable = [ "pie" ];
@@ -11,11 +11,11 @@ let
  platformInfos = {
    "x86_64-linux" = {
      platform = "manylinux1_x86_64";
-      hash = "sha256-DRxj6wRl7ZQFvqQirGIpqhEo54QWCkgTie1tvpAIBoI=";
+      hash = "sha256-tnRFcgMgHGcWtTGPFZZPkE9IKDfvejLmvvD2iwPbbLY=";
    };
    "x86_64-darwin" = {
      platform = "macosx_10_9_universal2";
-      hash = "sha256-GW4gvMGylbMmAF9yhjjwpLu5wf5zmdzk1ECez8ml5Ic=";
+      hash = "sha256-6dbLiFUku0F+UiFV6P6nXpR6dezSntriVJyTfFaIgP0=";
    };
  };

@@ -24,7 +24,7 @@ let
 in
 python3Packages.buildPythonApplication rec {
  pname = "sourcery";
-  version = "1.35.0";
+  version = "1.37.0";
  format = "wheel";

  src = fetchPypi {
@@ -6,7 +6,7 @@

 buildGoModule (finalAttrs: {
  pname = "spire";
-  version = "1.12.5";
+  version = "1.13.0";

  outputs = [
    "out"
@@ -18,10 +18,10 @@ buildGoModule (finalAttrs: {
    owner = "spiffe";
    repo = "spire";
    tag = "v${finalAttrs.version}";
-    sha256 = "sha256-Ggsl40CusrHhwO/Cc9MkxHjraQsNmBLwnJJCQ1QFiAw=";
+    sha256 = "sha256-hUvzC3gaNpp5yvIOoWG72WcC8yy5yLgf5RRzP+hPXrA=";
  };

-  vendorHash = "sha256-yWONqvSNOgeXkYU5TX1Sec8xNCnaqdVLXk3ylhGBvyE=";
+  vendorHash = "sha256-qhYuE/rlaGJyOxt4e0a1QzAySF0wWOFoNdLAe2nKQbw=";

  ldflags = [
    "-s"
@@ -12,16 +12,16 @@

 rustPlatform.buildRustPackage rec {
  pname = "stylua";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "johnnymorganz";
    repo = "stylua";
    rev = "v${version}";
-    sha256 = "sha256-yVie8/aey77WbeUGM6rzuKBKLmAH1Jhhj9Y7LxbvIUw=";
+    sha256 = "sha256-PBe3X4YUFUV2xQdYYOdPNgJCnCOzrzogP/2sECef4ck=";
  };

-  cargoHash = "sha256-ow8lldu36qBHcXFgeBhHo2u+sSAFCEFbxUk2oZI7sj4=";
+  cargoHash = "sha256-C9g6kA+xc0nixiPAijc5MIF9xHbbeXBHtmdM4QRdf/Q=";

  # remove cargo config so it can find the linker on aarch64-unknown-linux-gnu
  postPatch = ''
@@ -7,16 +7,16 @@ rustPlatform.buildRustPackage rec {
  pname = "typos-lsp";
  # Please update the corresponding VSCode extension too.
  # See pkgs/applications/editors/vscode/extensions/tekumara.typos-vscode/default.nix
-  version = "0.1.41";
+  version = "0.1.43";

  src = fetchFromGitHub {
    owner = "tekumara";
    repo = "typos-lsp";
    tag = "v${version}";
-    hash = "sha256-DJnq0PtRGYRgC0JhR8myeIddBTAvP+Ey3+qEZi75EmQ=";
+    hash = "sha256-n1OIKCfZDUaabjlJt3yNHp434M+xTUqN5+oxLBQEvLo=";
  };

-  cargoHash = "sha256-OSTPVLVLl3LaijEorcSSscOMiDfgIGRXSvaFMKJ+hq0=";
+  cargoHash = "sha256-G0prgRV7vSkLjZYyS5dpGw0Kt9HQNHHGG0pqdDv5rdI=";

  # fix for compilation on aarch64
  # see https://github.com/NixOS/nixpkgs/issues/145726
--- a/Show More
+++ b/Show More