Merge master into staging-nixos

2025-11-22 00:18:27 +00:00
parent fb2bd8b5ea 64a5bece09
commit 8c510d91d3
90 changed files with 1420 additions and 901 deletions
@@ -223,6 +223,8 @@

 - The `services.polipo` module has been removed as `polipo` is unmaintained and archived upstream.

+- `services.nextcloud.notify_push.enable` now installs the notify_push app. Therefore the appstore is now disabled when using `notify_push`. See `services.nextcloud.appstoreEnable`.
+
 - `boot.enableContainers` is only turned on when a declarative NixOS container is defined in `containers`.
  If you use the `nixos-container` tool for imperative container management, set `boot.enableContainers = true;` explicitly.

@@ -131,6 +131,22 @@ in
        default = true;
        description = "Whether to whitelist the FreeIPA domain in Chromium.";
      };
+
+      shells = lib.mkOption {
+        type = lib.types.listOf lib.types.package;
+        default = with pkgs; [
+          bash
+          zsh
+        ];
+        defaultText = lib.literalExpression ''
+          with pkgs; [ bash zsh ];
+        '';
+        description = ''
+          List of shells which binaries should be installed to /bin/<name>.
+
+          FreeIPA typicly configures somesthing like /bin/bash into the users shell attribute.
+        '';
+      };
    };
  };

@@ -296,5 +312,15 @@ in
    networking.timeServers = lib.optional cfg.useAsTimeserver cfg.server;

    security.pki.certificateFiles = lib.singleton cfg.certificate;
+
+    systemd.tmpfiles.settings."10-ipa-shells" = lib.foldl' (
+      acc: pkg:
+      (
+        acc
+        // {
+          ${pkg.shellPath}."L+".argument = "${pkg}${pkg.shellPath}";
+        }
+      )
+    ) { } cfg.shells;
  };
 }
@@ -44,7 +44,7 @@ in
        } daemon";
        Restart = "on-failure";
      };
-      wantedBy = [ "default.target" ];
+      wantedBy = [ "graphical-session.target" ];
    };

    environment.systemPackages = [ cfg.package ];
@@ -69,7 +69,7 @@ let
  # https://github.com/systemd/systemd/blob/main/units/systemd-networkd.service.in
  commonServiceConfig = {
    after = [
-      "systemd-udevd.service"
+      "systemd-udev-settle.service"
      "network-pre.target"
      "systemd-sysusers.service"
      "systemd-sysctl.service"
@@ -36,24 +36,21 @@ in
 mapAliases (
  with prev;
  {
+    # keep-sorted start case=no
+    "sourcemap.vim" = sourcemap-vim;
    airline = vim-airline;
    alternative = a-vim; # backwards compat, added 2014-10-21
    bats = bats-vim;
    blueballs-neovim = throw "`blueballs-neovim` has been removed"; # added 2025-06-17
    BufOnly = BufOnly-vim;
    calendar = calendar-vim;
+    caw = caw-vim;
+    chad = chadtree;
    coc-rls = throw "coc-rls has been removed, as rls has been archived since 2022. You should use coc-rust-analyzer instead, as rust-analyzer is maintained."; # added 2025-10-01
    coc-vetur = throw "coc-vetur was removed, as vetur is unmaintained by Vue. You should switch to Volar, which supports Vue 3"; # added 2025-10-01
    coffee-script = vim-coffee-script;
    coffeeScript = vim-coffee-script; # backwards compat, added 2014-10-18
-    Solarized = vim-colors-solarized;
-    solarized = vim-colors-solarized;
-    spacevim = throw "this distribution was unmaintained for the last 6 years, please use top-level 'spacevim'"; # added 2024-11-27
-    SpaceVim = throw "this distribution didn't work properly in vimPlugins, please use top-level 'spacevim' instead"; # added 2024-11-27
-    sparkup = throw "the upstream repository got deleted"; # added 2025-08-06
    colors-solarized = vim-colors-solarized;
-    caw = caw-vim;
-    chad = chadtree;
    colorsamplerpack = Colour-Sampler-Pack;
    Colour_Sampler_Pack = Colour-Sampler-Pack;
    command_T = command-t; # backwards compat, added 2014-10-18
@@ -62,8 +59,8 @@ mapAliases (
    concealedyank = concealedyank-vim;
    context-filetype = context_filetype-vim;
    Cosco = cosco-vim;
-    css_color_5056 = vim-css-color;
    CSApprox = csapprox;
+    css_color_5056 = vim-css-color;
    csv = csv-vim;
    ctrlp = ctrlp-vim;
    cute-python = vim-cute-python;
@@ -76,25 +73,25 @@ mapAliases (
    ethersync = lib.warnOnInstantiate "'ethersync' has been renamed to 'teamtype'" teamtype; # Added 2025-10-31
    extradite = vim-extradite;
    feline-nvim = throw "feline.nvim has been removed: upstream deleted repository. Consider using lualine"; # Added 2025-02-09
-    fugitive = vim-fugitive;
    floating-nvim = throw "floating.nvim has been removed: abandoned by upstream. Use popup-nvim or nui-nvim"; # Added 2024-11-26
    fruzzy = throw "vimPlugins.fruzzy did not update since 2019-10-28 and uses EOL version of Nim"; # Added 2025-11-12
+    fugitive = vim-fugitive;
    fzfWrapper = fzf-wrapper;
    ghc-mod-vim = ghcmod-vim;
    ghcmod = ghcmod-vim;
-    gleam-vim = throw "gleam.vim has been removed: its code was merged into vim."; # Added 2025-06-10
-    goyo = goyo-vim;
    Gist = vim-gist;
    gitgutter = vim-gitgutter;
+    gleam-vim = throw "gleam.vim has been removed: its code was merged into vim."; # Added 2025-06-10
+    goyo = goyo-vim;
    gundo = gundo-vim;
    Gundo = gundo-vim; # backwards compat, added 2015-10-03
+    haskellconceal = vim-haskellconceal;
    haskellConceal = vim-haskellconceal; # backwards compat, added 2014-10-18
    haskellConcealPlus = vim-haskellConcealPlus;
-    haskellconceal = vim-haskellconceal;
    hier = vim-hier;
    hlint-refactor = hlint-refactor-vim;
-    hoogle = vim-hoogle;
    Hoogle = vim-hoogle;
+    hoogle = vim-hoogle;
    indent-blankline-nvim-lua = indent-blankline-nvim; # backwards compat, added 2021-07-05
    ipython = vim-ipython;
    latex-live-preview = vim-latex-live-preview;
@@ -109,8 +106,6 @@ mapAliases (
    neuron-nvim = throw "neuron.nvim has been removed: archived repository 2023-02-19"; # Added 2025-09-10
    nvim-ts-rainbow = throw "nvim-ts-rainbow has been deprecated: Use rainbow-delimiters-nvim"; # Added 2023-11-30
    nvim-ts-rainbow2 = throw "nvim-ts-rainbow2 has been deprecated: Use rainbow-delimiters-nvim"; # Added 2023-11-30
-    The_NERD_Commenter = nerdcommenter;
-    The_NERD_tree = nerdtree;
    open-browser = open-browser-vim;
    pathogen = vim-pathogen;
    peskcolor-vim = throw "peskcolor-vim has been removed: abandoned by upstream"; # Added 2024-08-23
@@ -120,39 +115,45 @@ mapAliases (
    quickrun = vim-quickrun;
    rainbow_parentheses = rainbow_parentheses-vim;
    repeat = vim-repeat;
-    riv = riv-vim;
    rhubarb = vim-rhubarb;
+    riv = riv-vim;
    rust-tools-nvim = lib.warnOnInstantiate "rust-tools-nvim is abandoned by upstream; you should use rustaceanvim" rust-tools-nvim;
    sensible = vim-sensible;
    signature = vim-signature;
-    snipmate = vim-snipmate;
-    sourcemap = sourcemap-vim;
-    "sourcemap.vim" = sourcemap-vim;
-    Spacegray-vim = throw "Spacegray-vim has been removed: abandoned by upstream"; # Added 2025-03-24
-    surround = vim-surround;
    sleuth = vim-sleuth;
+    snipmate = vim-snipmate;
+    Solarized = vim-colors-solarized;
+    solarized = vim-colors-solarized;
    solidity = vim-solidity;
+    sourcemap = sourcemap-vim;
+    Spacegray-vim = throw "Spacegray-vim has been removed: abandoned by upstream"; # Added 2025-03-24
+    SpaceVim = throw "this distribution didn't work properly in vimPlugins, please use top-level 'spacevim' instead"; # added 2024-11-27
+    spacevim = throw "this distribution was unmaintained for the last 6 years, please use top-level 'spacevim'"; # added 2024-11-27
+    sparkup = throw "the upstream repository got deleted"; # added 2025-08-06
    ssr = ssr-nvim; # Added 2025-08-31
    stylish-haskell = vim-stylish-haskell;
    stylishHaskell = vim-stylish-haskell; # backwards compat, added 2014-10-18
    suda-vim = vim-suda; # backwards compat, added 2024-05-16
    Supertab = supertab;
+    surround = vim-surround;
    Syntastic = syntastic;
    SyntaxRange = vim-SyntaxRange;
    table-mode = vim-table-mode;
-    taglist = taglist-vim;
    tabpagebuffer = tabpagebuffer-vim;
    tabpagecd = vim-tabpagecd;
    Tabular = tabular;
    Tagbar = tagbar;
+    taglist = taglist-vim;
+    The_NERD_Commenter = nerdcommenter;
+    The_NERD_tree = nerdtree;
    thumbnail = thumbnail-vim;
    tlib = tlib_vim;
    tmux-navigator = vim-tmux-navigator;
    tmuxNavigator = vim-tmux-navigator; # backwards compat, added 2014-10-18
    todo-nvim = throw "todo-nvim has been removed: abandoned by upstream"; # Added 2023-08-23
    tslime = tslime-vim;
-    unite = unite-vim;
    UltiSnips = ultisnips;
+    unite = unite-vim;
    vim-addon-vim2nix = vim2nix;
    vim-sourcetrail = throw "vim-sourcetrail has been removed: abandoned by upstream"; # Added 2022-08-14
    vimproc = vimproc-vim;
@@ -161,10 +162,11 @@ mapAliases (
    watchdogs = vim-watchdogs;
    WebAPI = webapi-vim;
    wombat256 = wombat256-vim; # backwards compat, added 2015-7-8
-    yankring = YankRing-vim;
-    Yankring = YankRing-vim;
    xterm-color-table = xterm-color-table-vim;
+    Yankring = YankRing-vim;
+    yankring = YankRing-vim;
    zeavim = zeavim-vim;
+    # keep-sorted end
  }
  // deprecations
 )
@@ -7,6 +7,8 @@
 final: prev:
 let
  cocPackages = [
+    # keep-sorted start
+    "coc-basedpyright"
    "coc-clangd"
    "coc-cmake"
    "coc-css"
@@ -31,7 +33,6 @@ let
    "coc-r-lsp"
    "coc-rust-analyzer"
    "coc-sh"
-    "coc-sh"
    "coc-smartf"
    "coc-snippets"
    "coc-solargraph"
@@ -42,13 +43,12 @@ let
    "coc-tabnine"
    "coc-texlab"
    "coc-toml"
-    "coc-toml"
    "coc-vimlsp"
    "coc-vimtex"
    "coc-wxml"
-    "coc-basedpyright"
    "coc-yaml"
    "coc-yank"
+    # keep-sorted end
  ];
 in
 lib.genAttrs cocPackages (
@@ -8,6 +8,7 @@ let
  luaPackages = neovim-unwrapped.lua.pkgs;

  luarocksPackageNames = [
+    # # keep-sorted start case=no
    "fidget-nvim"
    "fzf-lua"
    "gitsigns-nvim"
@@ -37,10 +38,11 @@ let
    "rest-nvim"
    "rocks-config-nvim"
    "rocks-nvim"
-    "rustaceanvim"
    "rtp-nvim"
+    "rustaceanvim"
    "telescope-manix"
    "telescope-nvim"
+    # keep-sorted end
  ];
 in
 lib.genAttrs luarocksPackageNames (
@@ -6,8 +6,10 @@
 final: prev:
 let
  nodePackageNames = [
+    # # keep-sorted start case=no
    "coc-go"
    "coc-tsserver"
+    # keep-sorted end
  ];
 in
 lib.genAttrs nodePackageNames (
@@ -77,12 +77,12 @@
  };
  asm = buildGrammar {
    language = "asm";
-    version = "0.0.0+rev=04962e1";
+    version = "0.0.0+rev=839741f";
    src = fetchFromGitHub {
      owner = "RubixDev";
      repo = "tree-sitter-asm";
-      rev = "04962e15f6b464cf1d75eada59506dc25090e186";
-      hash = "sha256-a/wbmJQFddf+19E2uHmObQ5XfUkF5iaCSI1Y8avntGw=";
+      rev = "839741fef4dab5128952334624905c82b40c7133";
+      hash = "sha256-AbMSSt3tTjyPe7ksNjBxxsqvdoKmIKymqzisUWrSTT0=";
    };
    meta.homepage = "https://github.com/RubixDev/tree-sitter-asm";
  };
@@ -253,12 +253,12 @@
  };
  c_sharp = buildGrammar {
    language = "c_sharp";
-    version = "0.0.0+rev=6563c3a";
+    version = "0.0.0+rev=485f0ba";
    src = fetchFromGitHub {
      owner = "tree-sitter";
      repo = "tree-sitter-c-sharp";
-      rev = "6563c3af3f03ec948d08f9325e4bbd072e4c6b99";
-      hash = "sha256-JIyBPr4BHHZ2ENQhZPrHpE/FFvyAT/20fJTkPLn1l18=";
+      rev = "485f0bae0274ac9114797fc10db6f7034e4086e3";
+      hash = "sha256-BRn23iueDJ+YwuPJ+ebOAhjoELQX1VOBFR/YbQDYhfQ=";
    };
    meta.homepage = "https://github.com/tree-sitter/tree-sitter-c-sharp";
  };
@@ -418,12 +418,12 @@
  };
  csv = buildGrammar {
    language = "csv";
-    version = "0.0.0+rev=7eb7297";
+    version = "0.0.0+rev=f6bf6e3";
    src = fetchFromGitHub {
      owner = "tree-sitter-grammars";
      repo = "tree-sitter-csv";
-      rev = "7eb7297823605392d2bbcc4c09b1cd18d6fa9529";
-      hash = "sha256-5VL7uREH0lloAWo9rdJXsjDsWxgL6fngWJSmi4fM7UQ=";
+      rev = "f6bf6e35eb0b95fbadea4bb39cb9709507fcb181";
+      hash = "sha256-9mW0kT4av/ULFqLXdMuyLrMPtQxrIOKY60GQ4QDB33o=";
    };
    location = "csv";
    meta.homepage = "https://github.com/tree-sitter-grammars/tree-sitter-csv";
@@ -496,12 +496,12 @@
  };
  devicetree = buildGrammar {
    language = "devicetree";
-    version = "0.0.0+rev=6557729";
+    version = "0.0.0+rev=e685f1f";
    src = fetchFromGitHub {
      owner = "joelspadin";
      repo = "tree-sitter-devicetree";
-      rev = "6557729f4afaf01dec7481d4e5975515ea8f0edd";
-      hash = "sha256-ua+mk++93ooH5nQH/M4vj7VSSvVDis/Uh8S1H34TxKs=";
+      rev = "e685f1f6ac1702b046415efb476444167d63e41a";
+      hash = "sha256-iMmr4zSm6B7goevHE03DMj9scW4ldXS7CV74sKeqGD4=";
    };
    meta.homepage = "https://github.com/joelspadin/tree-sitter-devicetree";
  };
@@ -1192,12 +1192,12 @@
  };
  hack = buildGrammar {
    language = "hack";
-    version = "0.0.0+rev=bc5b3a1";
+    version = "0.0.0+rev=1a7ded9";
    src = fetchFromGitHub {
      owner = "slackhq";
      repo = "tree-sitter-hack";
-      rev = "bc5b3a10d6d27e8220a113a9a7fe9bec0a1574b0";
-      hash = "sha256-dVDJRRn5pT7FPQN+RIUi/mFG6uS8rAzWJy2dBfuiNSM=";
+      rev = "1a7ded90288189746c54861ac144ede97df95081";
+      hash = "sha256-CaP4AgWHfUilze6HREQR3ah3AiOpphpFsxEkjp/Gs38=";
    };
    meta.homepage = "https://github.com/slackhq/tree-sitter-hack";
  };
@@ -1214,14 +1214,14 @@
  };
  haskell = buildGrammar {
    language = "haskell";
-    version = "0.0.0+rev=0975ef7";
+    version = "0.0.0+rev=da65949";
    src = fetchFromGitHub {
-      owner = "tree-sitter";
+      owner = "tree-sitter-grammars";
      repo = "tree-sitter-haskell";
-      rev = "0975ef72fc3c47b530309ca93937d7d143523628";
-      hash = "sha256-0wmdbXHZbHkv4pTrB1fCbExx9E83l+zaocGa+SvQsZQ=";
+      rev = "da65949d6f82242dbf29d67bc69b18fce125ef87";
+      hash = "sha256-Zcb7EVisr52+t523wzq2ZsSKyJ4VjZUhP0vs0jl8SgM=";
    };
-    meta.homepage = "https://github.com/tree-sitter/tree-sitter-haskell";
+    meta.homepage = "https://github.com/tree-sitter-grammars/tree-sitter-haskell";
  };
  haskell_persistent = buildGrammar {
    language = "haskell_persistent";
@@ -1247,12 +1247,12 @@
  };
  heex = buildGrammar {
    language = "heex";
-    version = "0.0.0+rev=6603380";
+    version = "0.0.0+rev=b5a7cb5";
    src = fetchFromGitHub {
      owner = "connorlay";
      repo = "tree-sitter-heex";
-      rev = "6603380caf806b3e6c7f0bf61627bb47023d79f1";
-      hash = "sha256-0jVLHfRj2T2o2B3AjwJnwiZphrOyf25o46pgF9tbTvE=";
+      rev = "b5a7cb5f74dc695a9ff5f04919f872ebc7a895e9";
+      hash = "sha256-hSe3h05IFEKMosB2r/85JnT2kv/krU2Ebaszd+m3j8g=";
    };
    meta.homepage = "https://github.com/connorlay/tree-sitter-heex";
  };
@@ -1369,12 +1369,12 @@
  };
  hyprlang = buildGrammar {
    language = "hyprlang";
-    version = "0.0.0+rev=b23e85d";
+    version = "0.0.0+rev=22723f2";
    src = fetchFromGitHub {
      owner = "tree-sitter-grammars";
      repo = "tree-sitter-hyprlang";
-      rev = "b23e85dded5d150ffee0ac83c01cbeb1520aad2f";
-      hash = "sha256-COIl7ngqTzQQBxgmRNCwF8x7OHNGCrUa5G/hPrlXsmw=";
+      rev = "22723f25f3faf329863d952c9601b492afd971c9";
+      hash = "sha256-KU+vrokH8/E5Wg3BLuG3IZyw/9rJr0TJQxXB2IDULsE=";
    };
    meta.homepage = "https://github.com/tree-sitter-grammars/tree-sitter-hyprlang";
  };
@@ -1457,12 +1457,12 @@
  };
  javadoc = buildGrammar {
    language = "javadoc";
-    version = "0.0.0+rev=3e9a823";
+    version = "0.0.0+rev=2533aff";
    src = fetchFromGitHub {
      owner = "rmuir";
      repo = "tree-sitter-javadoc";
-      rev = "3e9a823a02d3115d74294f04c39bd2c958ec3da6";
-      hash = "sha256-qqkEGJn9ocHdr8SSeYcJ5kAZr11Ot7rvH1QVYYre8/Q=";
+      rev = "2533affe83e57df9b0dbf7350cd73a84af9811b3";
+      hash = "sha256-SKQaCCa/sUU0QVT+0LmD/bQuNT4bwLou3rh0ASMA6Rs=";
    };
    meta.homepage = "https://github.com/rmuir/tree-sitter-javadoc";
  };
@@ -1891,12 +1891,12 @@
  };
  mlir = buildGrammar {
    language = "mlir";
-    version = "0.0.0+rev=f1c4a94";
+    version = "0.0.0+rev=f13087c";
    src = fetchFromGitHub {
      owner = "artagnon";
      repo = "tree-sitter-mlir";
-      rev = "f1c4a9445c65fb4668a87bfb344d762d0356781d";
-      hash = "sha256-YX5DaGtuXBcLbSP0L1C52fPW4oDqeMGqewU48bfFmuQ=";
+      rev = "f13087c89de99738217a84727dbf95339a67591f";
+      hash = "sha256-DE5Yi7sNQVJBPhQEKjQ1M9wCRNkBAoOGH1Z56JXhKao=";
    };
    generate = true;
    meta.homepage = "https://github.com/artagnon/tree-sitter-mlir";
@@ -1980,12 +1980,12 @@
  };
  nix = buildGrammar {
    language = "nix";
-    version = "0.0.0+rev=ff4e2b4";
+    version = "0.0.0+rev=c5795af";
    src = fetchFromGitHub {
      owner = "nix-community";
      repo = "tree-sitter-nix";
-      rev = "ff4e2b4c5a3598e8be3edf16bc69f6677af32145";
-      hash = "sha256-VPkXKsoKs5ywVIGz+xqvD73nINur2flpEmKUKJRFYy8=";
+      rev = "c5795af5a64ab8daa76bb77f30c24b5ed38976b5";
+      hash = "sha256-8yEMikxDkjLwPsuJkRP8z98zY7Qy/hO2/yqPFraHOQ4=";
    };
    meta.homepage = "https://github.com/nix-community/tree-sitter-nix";
  };
@@ -2059,12 +2059,12 @@
  };
  ocamllex = buildGrammar {
    language = "ocamllex";
-    version = "0.0.0+rev=ed488aa";
+    version = "0.0.0+rev=33722b8";
    src = fetchFromGitHub {
      owner = "atom-ocaml";
      repo = "tree-sitter-ocamllex";
-      rev = "ed488aa334d1b4e3235e1efaaf96f00815ebc0e0";
-      hash = "sha256-7pmBKXbWnkIcEKsZAr1Wd9NG7cXCVCavBt8p0Xf5s2c=";
+      rev = "33722b8be73079946a7c6dd9598e3f57956ed36d";
+      hash = "sha256-mqp/qHr1zWMJinlMJ0HNAKuFUQ4NqQiLzKx0DoN4wGI=";
    };
    generate = true;
    meta.homepage = "https://github.com/atom-ocaml/tree-sitter-ocamllex";
@@ -2172,12 +2172,12 @@
  };
  pkl = buildGrammar {
    language = "pkl";
-    version = "0.0.0+rev=798222b";
+    version = "0.0.0+rev=a109e0b";
    src = fetchFromGitHub {
      owner = "apple";
      repo = "tree-sitter-pkl";
-      rev = "798222b4a29ba9a9715583e22242ab0f2ac6abc0";
-      hash = "sha256-BLm8KvzBZt6+ZvZ6umrdgs5E8D3rPTZNCx611s6h+kA=";
+      rev = "a109e0b4823d61ccd1461a1641da8119af7c0a5e";
+      hash = "sha256-5gdlavU4ANpjvRYSG5Tr/26IWcHmPLJgK84KqtJT4NY=";
    };
    meta.homepage = "https://github.com/apple/tree-sitter-pkl";
  };
@@ -2328,12 +2328,12 @@
  };
  psv = buildGrammar {
    language = "psv";
-    version = "0.0.0+rev=7eb7297";
+    version = "0.0.0+rev=f6bf6e3";
    src = fetchFromGitHub {
      owner = "tree-sitter-grammars";
      repo = "tree-sitter-csv";
-      rev = "7eb7297823605392d2bbcc4c09b1cd18d6fa9529";
-      hash = "sha256-5VL7uREH0lloAWo9rdJXsjDsWxgL6fngWJSmi4fM7UQ=";
+      rev = "f6bf6e35eb0b95fbadea4bb39cb9709507fcb181";
+      hash = "sha256-9mW0kT4av/ULFqLXdMuyLrMPtQxrIOKY60GQ4QDB33o=";
    };
    location = "psv";
    meta.homepage = "https://github.com/tree-sitter-grammars/tree-sitter-csv";
@@ -2494,12 +2494,12 @@
  };
  rbs = buildGrammar {
    language = "rbs";
-    version = "0.0.0+rev=de893b1";
+    version = "0.0.0+rev=5282e2f";
    src = fetchFromGitHub {
      owner = "joker1007";
      repo = "tree-sitter-rbs";
-      rev = "de893b166476205b09e79cd3689f95831269579a";
-      hash = "sha256-87Z8XQfuqrWYj9Mc+whVu9o3ZwfjGYylbvxZNYnA3UM=";
+      rev = "5282e2f36d4109f5315c1d9486b5b0c2044622bb";
+      hash = "sha256-GE5cW1Nf7S8u5vAGcBZBzfM7mC7yXVR/Tp7hlhmkelA=";
    };
    meta.homepage = "https://github.com/joker1007/tree-sitter-rbs";
  };
@@ -2882,12 +2882,12 @@
  };
  sql = buildGrammar {
    language = "sql";
-    version = "0.0.0+rev=d71f2bd";
+    version = "0.0.0+rev=4094309";
    src = fetchFromGitHub {
      owner = "derekstride";
      repo = "tree-sitter-sql";
-      rev = "d71f2bd7f0e3dba84df7025fc9314738d180e71e";
-      hash = "sha256-udLPpb8ihPb9mXNicwZdml2bKeIDC0RD5i7SPshrN2g=";
+      rev = "4094309b58ccb74d041fb531ae6b7193a3ebc351";
+      hash = "sha256-zexq9DOxXZno/dHnb/+FHgl4+ezlHCRVRB1pcdg+H6E=";
    };
    meta.homepage = "https://github.com/derekstride/tree-sitter-sql";
  };
@@ -3105,12 +3105,12 @@
  };
  templ = buildGrammar {
    language = "templ";
-    version = "0.0.0+rev=27a1fc6";
+    version = "0.0.0+rev=1975f67";
    src = fetchFromGitHub {
      owner = "vrischmann";
      repo = "tree-sitter-templ";
-      rev = "27a1fc62c8dd4c49669e03629491f66449c6c435";
-      hash = "sha256-2h1NPQtutTmdVKjydq/ZRvBCJ3YEiT+ZVcL72fb2m9M=";
+      rev = "1975f67058325403c5412cde48b181a3fa817870";
+      hash = "sha256-3zcsIy+UNNUNua0iZW96jXrgVRkYZLFj6ND2coq4E7g=";
    };
    meta.homepage = "https://github.com/vrischmann/tree-sitter-templ";
  };
@@ -3216,12 +3216,12 @@
  };
  tsv = buildGrammar {
    language = "tsv";
-    version = "0.0.0+rev=7eb7297";
+    version = "0.0.0+rev=f6bf6e3";
    src = fetchFromGitHub {
      owner = "tree-sitter-grammars";
      repo = "tree-sitter-csv";
-      rev = "7eb7297823605392d2bbcc4c09b1cd18d6fa9529";
-      hash = "sha256-5VL7uREH0lloAWo9rdJXsjDsWxgL6fngWJSmi4fM7UQ=";
+      rev = "f6bf6e35eb0b95fbadea4bb39cb9709507fcb181";
+      hash = "sha256-9mW0kT4av/ULFqLXdMuyLrMPtQxrIOKY60GQ4QDB33o=";
    };
    location = "tsv";
    meta.homepage = "https://github.com/tree-sitter-grammars/tree-sitter-csv";
@@ -3541,12 +3541,12 @@
  };
  xresources = buildGrammar {
    language = "xresources";
-    version = "0.0.0+rev=d1c0a65";
+    version = "0.0.0+rev=099f2be";
    src = fetchFromGitHub {
      owner = "ValdezFOmar";
      repo = "tree-sitter-xresources";
-      rev = "d1c0a65348272ff235e5553fcd9171b151d251b4";
-      hash = "sha256-hu2lfluEA9r6LiC1NvvqaWVOinKK0QylbxI3rYz5DO8=";
+      rev = "099f2bec9b441c960d66ebd856fbbcc84b3f8015";
+      hash = "sha256-0GPk27IyiABZtWy05O5kG9gtXi7Qji4DhDLGdL0cYQY=";
    };
    meta.homepage = "https://github.com/ValdezFOmar/tree-sitter-xresources";
  };
@@ -3631,12 +3631,12 @@
  };
  zsh = buildGrammar {
    language = "zsh";
-    version = "0.0.0+rev=v0.34.0";
+    version = "0.0.0+rev=v0.42.0";
    src = fetchFromGitHub {
      owner = "georgeharker";
      repo = "tree-sitter-zsh";
-      rev = "v0.34.0";
-      hash = "sha256-rMOLASmlXaCxEI7ZLXbBU0BMLZle++U0HzEqdVF5qyg=";
+      rev = "v0.42.0";
+      hash = "sha256-atPMgFt23gmhKorBnMuwmn2eLpWLfE/7dyD05CBg2cc=";
    };
    meta.homepage = "https://github.com/georgeharker/tree-sitter-zsh";
  };
@@ -143,6 +143,7 @@ let
 in

 assertNoAdditions {
+  # keep-sorted start case=no block=yes newline_separated=yes
  advanced-git-search-nvim = super.advanced-git-search-nvim.overrideAttrs {
    checkInputs = with self; [
      fzf-lua
@@ -2553,6 +2554,13 @@ assertNoAdditions {
    ];
  };

+  nvim-k8s-crd = super.nvim-k8s-crd.overrideAttrs {
+    dependencies = with self; [
+      plenary-nvim
+      nvim-lspconfig
+    ];
+  };
+
  nvim-lsp-file-operations = super.nvim-lsp-file-operations.overrideAttrs {
    dependencies = [ self.plenary-nvim ];
  };
@@ -4228,11 +4236,5 @@ assertNoAdditions {
        --replace-fail "'zoxide_executable', 'zoxide'" "'zoxide_executable', '${zoxide}/bin/zoxide'"
    '';
  };
-
-  nvim-k8s-crd = super.nvim-k8s-crd.overrideAttrs {
-    dependencies = with self; [
-      plenary-nvim
-      nvim-lspconfig
-    ];
-  };
+  # keep-sorted end
 }
@@ -1534,8 +1534,8 @@ let
        mktplcRef = {
          name = "elixir-ls";
          publisher = "JakeBecker";
-          version = "0.29.3";
-          hash = "sha256-cghDjgv3FWsNpnH6Pa9iPuiPOlLI/iucGH+fzF35ERk=";
+          version = "0.30.0";
+          hash = "sha256-vHD16liYmcWeiSP16QqKhPst8e7iT9wZ1vGT5gV6xoo=";
        };
        meta = {
          changelog = "https://marketplace.visualstudio.com/items/JakeBecker.elixir-ls/changelog";
@@ -3774,8 +3774,8 @@ let
        mktplcRef = {
          name = "prisma";
          publisher = "Prisma";
-          version = "6.19.0";
-          hash = "sha256-IeeKk4gYFq+zTYpKHAOgEh3EC2g6bbb0Qcys2m5DeAo=";
+          version = "7.0.0";
+          hash = "sha256-nFGvQS635sWEap3oUYNJpocR3Eq3a7c9z9v8gLKmL7A=";
        };
        meta = {
          changelog = "https://marketplace.visualstudio.com/items/Prisma.prisma/changelog";
@@ -6,8 +6,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "material-icon-theme";
    publisher = "PKief";
-    version = "5.28.0";
-    hash = "sha256-VZFeEaWe5JZQegOJ674vHxQAFuWFG5lttnWwSQ5AY5g=";
+    version = "5.29.0";
+    hash = "sha256-cM2yZT/GMHtqPJFlEQZaDWl7YY456mLnw8hNUwgyQ0M=";
  };
  meta = {
    description = "Material Design Icons for Visual Studio Code";
@@ -9,13 +9,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "pineapple-pictures";
-  version = "1.2.0";
+  version = "1.2.1";

  src = fetchFromGitHub {
    owner = "BLumia";
    repo = "pineapple-pictures";
    rev = finalAttrs.version;
-    hash = "sha256-QQ0lWYwfCCQUtVQxC6koORiQ3px99+Uy8qHtRx3fbSg=";
+    hash = "sha256-wWu1nGAJ+8s7CIyFR0lJkxZ1C72Qvkfdvsw4Dvb4aKI=";
  };

  nativeBuildInputs = [
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "helm-s3";
-  version = "0.17.0";
+  version = "0.17.1";

  src = fetchFromGitHub {
    owner = "hypnoglow";
    repo = "helm-s3";
    rev = "v${version}";
-    hash = "sha256-9n/Dzgr/wYGgJq47FdNGPPpOFzTRt4VaK8HA06F5FIE=";
+    hash = "sha256-c3UbtNReSfhSAl0ioaP1DUsKNSZ4nng9X8oOPkx0eC4=";
  };

-  vendorHash = "sha256-6YBIUUIvQ6ZDPF9Dz5tNXuHS+pa/yiNs4sKZbMudMxs=";
+  vendorHash = "sha256-VdrlSZpMak3F8CH5aDPDWk3SyX/zbBRmaMyFaeF7fKM=";

  # NOTE: Remove the install and upgrade hooks.
  postPatch = ''
@@ -100,13 +100,13 @@
    "vendorHash": null
  },
  "bpg_proxmox": {
-    "hash": "sha256-VVLezja8qq+2sZHwHsXJ5oIAG76+Z60hkcGP7oNPIqA=",
+    "hash": "sha256-AznuJTtvnvUdhumCFaeagLr5NAVYEYISNuwe3s108mA=",
    "homepage": "https://registry.terraform.io/providers/bpg/proxmox",
    "owner": "bpg",
    "repo": "terraform-provider-proxmox",
-    "rev": "v0.86.0",
+    "rev": "v0.87.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-01KdQygPJap5cmk8bItHCtHIbBYHYti20KNQDj4uC68="
+    "vendorHash": "sha256-CPoYKzVha42Xfp8S8fdcHKGjL1y6pdsHsi4grerW7FI="
  },
  "brightbox_brightbox": {
    "hash": "sha256-pwFbCP+qDL/4IUfbPRCkddkbsEEeAu7Wp12/mDL0ABA=",
@@ -507,11 +507,11 @@
    "vendorHash": "sha256-Nk3KDESUMujMtBCjwRHCgGsEpCkhBM7qiW1XtQj8y+Y="
  },
  "hashicorp_azuread": {
-    "hash": "sha256-9vGXzFLRaQPXECcFtZMnbhHQvEm0FeGwYm4K9utpZf4=",
+    "hash": "sha256-ATYOrBmZP9LximrS5KpfktU/kfW08XWShxE4z+x6Sts=",
    "homepage": "https://registry.terraform.io/providers/hashicorp/azuread",
    "owner": "hashicorp",
    "repo": "terraform-provider-azuread",
-    "rev": "v3.6.0",
+    "rev": "v3.7.0",
    "spdx": "MPL-2.0",
    "vendorHash": null
  },
@@ -1174,13 +1174,13 @@
    "vendorHash": "sha256-OqbnkuEy9w6F1DxmlYhRNYhBaYhWV0FtMK4wdwSybh8="
  },
  "scaleway_scaleway": {
-    "hash": "sha256-dZWoqco5C/QMBek+m+kLe1cl86NLe9EHMh6XV+TOFf4=",
+    "hash": "sha256-QVl06Yzl2QREcAIlyWeg0elq2yPL/VCgIM/OvOSELuI=",
    "homepage": "https://registry.terraform.io/providers/scaleway/scaleway",
    "owner": "scaleway",
    "repo": "terraform-provider-scaleway",
-    "rev": "v2.62.0",
+    "rev": "v2.63.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-SUGyDQ23ZgRbf2yGm+ih3nwMp90ckadG6Zeu6Am/fU8="
+    "vendorHash": "sha256-MGIm9X9r08Ol/icDc1yopA0+BSC8phH/pXC1/jPOfzY="
  },
  "scottwinkler_shell": {
    "hash": "sha256-LTWEdXxi13sC09jh+EFZ6pOi1mzuvgBz5vceIkNE/JY=",
@@ -288,7 +288,7 @@ let
        ${optionalString unshareUts "--unshare-uts"}
        ${optionalString unshareCgroup "--unshare-cgroup"}
        ${optionalString dieWithParent "--die-with-parent"}
-        --ro-bind /nix /nix
+        --bind /nix /nix
        ${optionalString privateTmp "--tmpfs /tmp"}
        # Our glibc will look for the cache in its own path in `/nix/store`.
        # As such, we need a cache to exist there, because pressure-vessel
@@ -8,13 +8,13 @@

 buildGoModule rec {
  pname = "aliyun-cli";
-  version = "3.1.4";
+  version = "3.1.5";

  src = fetchFromGitHub {
    owner = "aliyun";
    repo = "aliyun-cli";
    tag = "v${version}";
-    hash = "sha256-7G7kgRe89G/WbiirIsRJeunbM4VzrePqA1cqQvb5oZY=";
+    hash = "sha256-RFeARCkzFRj8j5aS/1dpvuMqApz9HfnDMtAg9k7trsE=";
    fetchSubmodules = true;
  };

@@ -8,13 +8,13 @@

 buildGoModule rec {
  pname = "arkade";
-  version = "0.11.51";
+  version = "0.11.59";

  src = fetchFromGitHub {
    owner = "alexellis";
    repo = "arkade";
    tag = version;
-    hash = "sha256-So7ZudZFOC6ImnHfvb+/FxpN0cNVeD2EW+Mu4Y3VPj8=";
+    hash = "sha256-tmn75g4hfayU7zDaP7QPIv46tHHxFgB0ebATS+fYHgI=";
  };

  env.CGO_ENABLED = 0;
@@ -12,13 +12,13 @@

 buildNpmPackage rec {
  pname = "blockbench";
-  version = "5.0.3";
+  version = "5.0.4";

  src = fetchFromGitHub {
    owner = "JannisX11";
    repo = "blockbench";
    tag = "v${version}";
-    hash = "sha256-kUPzAmxTEnUA+2o/IfBLE6hCChQ9YoTUfKKYfPGV0jg=";
+    hash = "sha256-f7+/OXdQEyN9XSkVRDRVUUdNGGEgyu3e/Y2oS7De96Y=";
  };

  nativeBuildInputs = [
@@ -29,7 +29,8 @@ buildNpmPackage rec {
    copyDesktopItems
  ];

-  npmDepsHash = "sha256-Do5IJvd5ZXDgByKK1Elg0W2SZxeDH8OORloDuT9mIN4=";
+  npmDepsHash = "sha256-OSrX/H1m89GLIznP8/Q1pVDgrlfp55ZUnYjyQIwlJi4=";
+  makeCacheWritable = true;

  env.ELECTRON_SKIP_BINARY_DOWNLOAD = 1;

@@ -12,6 +12,7 @@
  nixosTests,
  lib,
  nix-update-script,
+  cctools,
 }:

 let
@@ -39,6 +40,9 @@ stdenv.mkDerivation (finalAttrs: {
    pkg-config
    pnpm_9.configHook
    removeReferencesTo
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    cctools.libtool
  ];

  # Required for `sharp` NPM dependency
@@ -7,16 +7,16 @@

 buildGoModule rec {
  pname = "circleci-cli";
-  version = "0.1.33494";
+  version = "0.1.33721";

  src = fetchFromGitHub {
    owner = "CircleCI-Public";
    repo = "circleci-cli";
    rev = "v${version}";
-    sha256 = "sha256-MxNSUMxB3ZVHUQzpy9cVAgOs9qULUAv+/LAcBcnfFEs=";
+    sha256 = "sha256-0ZJZ9xVnk/nUf4NnvFmXcM6FHKoh296hfIbMwnQ9CwA=";
  };

-  vendorHash = "sha256-G/cMhaVDxxx1oT8T6N8GzIu3FAKSVORwHlcThL6jS1c=";
+  vendorHash = "sha256-QMSciB81khHhjd/4Km1YYyTiEFDF75AcNGsmZTLLO5Q=";

  nativeBuildInputs = [ installShellFiles ];

@@ -9,16 +9,16 @@

 buildGoModule rec {
  pname = "editorconfig-checker";
-  version = "3.4.1";
+  version = "3.5.0";

  src = fetchFromGitHub {
    owner = "editorconfig-checker";
    repo = "editorconfig-checker";
    rev = "v${version}";
-    hash = "sha256-qQXIsG7g75Q3Ue7tYsGviNsV+9ljg8Y6adRozdX085A=";
+    hash = "sha256-wU9LGkhY/MWCK5kvKxU1JvPnP2esiS/4E19n6GnWLfQ=";
  };

-  vendorHash = "sha256-uj+/cAF22dvg0QBjxjqF0WIRlfvQtoW2/kEh/pY8TfE=";
+  vendorHash = "sha256-qOIwhi2btNcqfyrg0Z2ZvmM5+FE9lMrpP7l4SRzKkXg=";

  doCheck = false;

@@ -8,18 +8,18 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "gdscript-formatter";
-  version = "0.17.0";
+  version = "0.18.0";

  src = fetchFromGitHub {
    owner = "GDQuest";
    repo = "GDScript-formatter";
    tag = finalAttrs.version;
-    hash = "sha256-pxJGn2MXJN+NIhDTbJBRDT+0nynuELYLk3kPzGb4Ia0=";
+    hash = "sha256-DO8ctTmPUkB+XZ1iEkv3HLWprCH6IHdGXIWvn08PL+A=";
    # Needed due to .gitattributes being used for the Godot addon and export-ignoring all files
    deepClone = true;
  };

-  cargoHash = "sha256-F0L6/9HU9zkFSFHGpgX8UDRTJm/yVKuv4GakgjFuG6Y=";
+  cargoHash = "sha256-b1seQakW2hZkclzkXX7DcTn+8TLinl2h0XMmdLHUT1A=";

  cargoBuildFlags = [
    "--bin=gdscript-formatter"
@@ -1,6 +1,7 @@
 {
  rustPlatform,
  lib,
+  config,
  fetchFromSourcehut,
  pam,
  scdoc,
@@ -49,17 +50,19 @@ rustPlatform.buildRustPackage (finalAttrs: {
    let
      warnPassthru = name: lib.warnOnInstantiate "`greetd.${name}` was renamed to `${name}`";
    in
-    lib.mapAttrs warnPassthru {
-      inherit
-        gtkgreet
-        qtgreet
-        regreet
-        tuigreet
-        wlgreet
-        ;
-    }
+    lib.mapAttrs warnPassthru (
+      lib.optionalAttrs config.allowAliases {
+        inherit
+          gtkgreet
+          qtgreet
+          regreet
+          tuigreet
+          wlgreet
+          ;
+        greetd = finalAttrs.finalPackage;
+      }
+    )
    // {
-      greetd = warnPassthru "greetd" finalAttrs.finalPackage;
      updateScript = nix-update-script { };
    };

@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "grpc-client-cli";
-  version = "1.23.0";
+  version = "1.23.1";

  src = fetchFromGitHub {
    owner = "vadimi";
    repo = "grpc-client-cli";
    rev = "v${version}";
-    sha256 = "sha256-hi0F3cuN2QMAkzrgk19SuyxEOs2cwDeeBS4NYr38Hzo=";
+    sha256 = "sha256-MzUUYthXOH+mq7uxjY63k06pifFVUhOnZg8zTujpxxQ=";
  };

-  vendorHash = "sha256-/lIDY6xjSs5Uk5nw2dExyPQPXNHTJuQR+K8/7PB1kik=";
+  vendorHash = "sha256-K0XnoFbAFdiVm3pDpiw9wuTSIo3NrU7wH1nFJEge9/c=";

  meta = with lib; {
    description = "Generic gRPC command line client";
@@ -23,13 +23,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "gswatcher";
-  version = "1.7.3";
+  version = "1.7.5";

  src = fetchFromGitHub {
    owner = "lxndr";
    repo = "gswatcher";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-0iJTJkG+EhiOYZQiWBsT0TY/NC7fLny2dXbmYYWnuic=";
+    hash = "sha256-RnyvKAnEF1tzVS+/GEwaGQNPIXKx7KU790ZElj6hJtw=";
  };

  nativeBuildInputs = [
@@ -10,8 +10,8 @@
  libnl,
  sensorsSupport ? stdenv.hostPlatform.isLinux,
  lm_sensors,
-  systemdSupport ? lib.meta.availableOn stdenv.hostPlatform systemd,
-  systemd,
+  systemdSupport ? lib.meta.availableOn stdenv.hostPlatform systemdLibs,
+  systemdLibs,
 }:

 assert systemdSupport -> stdenv.hostPlatform.isLinux;
@@ -58,7 +58,7 @@ stdenv.mkDerivation rec {
    libnl
  ]
  ++ lib.optional sensorsSupport lm_sensors
-  ++ lib.optional systemdSupport systemd;
+  ++ lib.optional systemdSupport systemdLibs;

  configureFlags = [
    "--enable-unicode"
@@ -77,7 +77,7 @@ stdenv.mkDerivation rec {
    in
    lib.optionalString (!stdenv.hostPlatform.isStatic) ''
      ${optionalPatch sensorsSupport "${lib.getLib lm_sensors}/lib/libsensors.so"}
-      ${optionalPatch systemdSupport "${systemd}/lib/libsystemd.so"}
+      ${optionalPatch systemdSupport "${systemdLibs}/lib/libsystemd.so"}
    '';

  meta = with lib; {
@@ -9,8 +9,8 @@
  libnl,
  sensorsSupport ? stdenv.hostPlatform.isLinux,
  lm_sensors,
-  systemdSupport ? lib.meta.availableOn stdenv.hostPlatform systemd,
-  systemd,
+  systemdSupport ? lib.meta.availableOn stdenv.hostPlatform systemdLibs,
+  systemdLibs,
 }:

 assert systemdSupport -> stdenv.hostPlatform.isLinux;
@@ -22,7 +22,7 @@ stdenv.mkDerivation rec {
  src = fetchFromGitHub {
    owner = "htop-dev";
    repo = "htop";
-    rev = version;
+    tag = version;
    hash = "sha256-fVqQwXbJus2IVE1Bzf3yJJpKK4qcZN/SCTX1XYkiHhU=";
  };

@@ -49,7 +49,7 @@ stdenv.mkDerivation rec {
    libnl
  ]
  ++ lib.optional sensorsSupport lm_sensors
-  ++ lib.optional systemdSupport systemd;
+  ++ lib.optional systemdSupport systemdLibs;

  configureFlags = [
    "--enable-unicode"
@@ -68,7 +68,7 @@ stdenv.mkDerivation rec {
    in
    lib.optionalString (!stdenv.hostPlatform.isStatic) ''
      ${optionalPatch sensorsSupport "${lib.getLib lm_sensors}/lib/libsensors.so"}
-      ${optionalPatch systemdSupport "${systemd}/lib/libsystemd.so"}
+      ${optionalPatch systemdSupport "${systemdLibs}/lib/libsystemd.so"}
    '';

  meta = {
@@ -12,16 +12,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "hyfetch";
-  version = "2.0.4";
+  version = "2.0.5";

  src = fetchFromGitHub {
    owner = "hykilpikonna";
    repo = "hyfetch";
    tag = finalAttrs.version;
-    hash = "sha256-nqbdkVEKuzuDDK4NivzJ6hfm3KqkFqorETiEaTqgKNY=";
+    hash = "sha256-vrTmjg6CZczImueN3JxKg1vYXAaEDYHYG7UaZeupYPU=";
  };

-  cargoHash = "sha256-Lem/6q0+P+1Hy+ZCJvP+O7kws49ytKEhzytT2+B4aRE=";
+  cargoHash = "sha256-SieVB0zwer9Ksio3l87gUZkVJMwb+Da/NjBi5f57tJc=";

  nativeBuildInputs = [
    installShellFiles
@@ -14,13 +14,13 @@
 }:

 let
-  version = "2.0.2";
+  version = "2.1.0";
  src = fetchFromGitea {
    domain = "codeberg.org";
    owner = "liske";
    repo = "ifstate";
    tag = version;
-    hash = "sha256-ghl2EVSum8KOh9wpFkrLGeIii2cj0a2+yOa48/JwFRk=";
+    hash = "sha256-HgbaLKlWU9YL279/WKLMLC/vxwmnDhBZFdELMRyJl0Y=";
  };
  docs = stdenv.mkDerivation {
    pname = "ifstate-docs";
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "joker";
-  version = "1.5.7";
+  version = "1.5.8";

  src = fetchFromGitHub {
    rev = "v${version}";
    owner = "candid82";
    repo = "joker";
-    sha256 = "sha256-ur59nsu17tfQ+fZpDdCJgNZuNWULnT2ug8rLhxV/8qA=";
+    sha256 = "sha256-srBJiCqxNGfLZCxVHH6Mjs3Ht7Boy64qmPjr2+l/l1I=";
  };

  vendorHash = "sha256-yH8QVzliAFZlOvprfdh/ClCWK2/7F96f0yLWvuAhGY8=";
@@ -8,15 +8,15 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "jsonschema-cli";
-  version = "0.33.0";
+  version = "0.37.1";

  src = fetchCrate {
    pname = "jsonschema-cli";
    inherit (finalAttrs) version;
-    hash = "sha256-09u50o4dg7keJgFC4xlRJ0LtkR7ZxmxnqLdEVKpE77E=";
+    hash = "sha256-JjXRQ4u5ZbMO53vJJLSCqOhl4EeEH6sTyz4WTK7k55A=";
  };

-  cargoHash = "sha256-zY4PtuQuUMvuR7gr42iytR2CW7bQBfbB0L6JE8cSQh8=";
+  cargoHash = "sha256-AP38iKce1UAwidTsakaryGOopC/BalAKfzOnvwOWg/0=";

  nativeInstallCheckInputs = [
    versionCheckHook
@@ -13,16 +13,16 @@

 buildGoModule rec {
  pname = "kubebuilder";
-  version = "4.9.0";
+  version = "4.10.1";

  src = fetchFromGitHub {
    owner = "kubernetes-sigs";
    repo = "kubebuilder";
    rev = "v${version}";
-    hash = "sha256-CokzuduRJyRYIrkqE+LJE6znskfZIJfU12m4vDhZB0k=";
+    hash = "sha256-GAHuaUVtdLvyWNeOxu46+IOw2Mf42z3yUjZNiyeE1xs=";
  };

-  vendorHash = "sha256-ValoM/qVrDKPjI5SOq4XkYNKPKjfQcrXKogfpd2aKLQ=";
+  vendorHash = "sha256-NsD2yt73+uRitegezTWwBhF0iMCQ8XhDf6WM/j7kT0o=";

  subPackages = [
    "cmd"
@@ -10,20 +10,20 @@

 buildGoModule rec {
  pname = "kubelogin";
-  version = "0.2.12";
+  version = "0.2.13";

  src = fetchFromGitHub {
    owner = "Azure";
    repo = "kubelogin";
    rev = "v${version}";
-    sha256 = "sha256-n9YkfK8QhGG4aGlU/SBtv59d05in1B8/mrsK4bDbjWo=";
+    sha256 = "sha256-Vy3HRNBYP+q/DWVib47jolg4W2HgdAAqjcFghfpapSE=";
  };

  patches = [
    ./disable-nix-incompatible-test.patch
  ];

-  vendorHash = "sha256-0tZ96t2Yeghe8xvEL9vjBS/gEUUIhyy61olqOlLD6q8=";
+  vendorHash = "sha256-CWgvbN8NnroSVqfKF8UG6kXqVWrQ0TmKwri1f218K+M=";

  ldflags = [
    "-X main.gitTag=v${version}"
@@ -0,0 +1,62 @@
+{
+  buildGoModule,
+  fetchFromGitHub,
+  lib,
+  stdenv,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "libcue-lang";
+  version = "0-unstable-2025-11-12";
+
+  src = fetchFromGitHub {
+    owner = "cue-lang";
+    repo = "libcue";
+    rev = "3dea836f38b69a36d1e87752c4bfa7e78d99fc04";
+    hash = "sha256-ARWPFxM17pqfAuspNPR9wZSq+hcnTFuGlN+jm07sX/M=";
+  };
+
+  vendorHash = "sha256-iZhICV5FpkJyHl42gP0rPrxobHKFId54sVVES7JZR9E=";
+
+  env.CGO_ENABLED = "1";
+
+  buildPhase = ''
+    runHook preBuild
+
+    go build -buildmode=c-shared -o libcue${stdenv.hostPlatform.extensions.sharedLibrary} -v .
+
+    runHook postBuild
+  '';
+
+  installPhase = ''
+    runHook preInstall
+
+    install -Dm644 libcue.h  $out/include/libcue.h
+    install -Dm644 cue.h     $out/include/cue.h
+    install -Dm644 libcue.so $out/lib/libcue.so
+
+    # Create pkgconfig
+    mkdir -p $out/lib/pkgconfig
+    cat > $out/lib/pkgconfig/libcue.pc <<EOF
+    prefix=${placeholder "out"}
+    libdir=''${prefix}/lib
+    includedir=''${prefix}/include
+
+    Name: libcue
+    Description: ${finalAttrs.meta.description}
+    Version: ${finalAttrs.version}
+    Libs: -L\''${libdir} -lcue
+    Cflags: -I\''${includedir}
+    EOF
+
+    runHook postInstall
+  '';
+
+  meta = {
+    description = "Use CUE from C and C-like languages";
+    homepage = "https://cuelang.org/";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ nobbz ];
+    platforms = with lib.platforms; linux ++ darwin;
+  };
+})
@@ -15,13 +15,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libphonenumber";
-  version = "9.0.18";
+  version = "9.0.19";

  src = fetchFromGitHub {
    owner = "google";
    repo = "libphonenumber";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-u+2QN72ZvsfpKAsU9R94cq+S7aKSwZtIsg+uUz/sDtU=";
+    hash = "sha256-mAf4jgI8aum/XbO8OKOoLCMWxwUMee5erDocxV8/TMA=";
  };

  patches = [
@@ -14,13 +14,13 @@

 gcc15Stdenv.mkDerivation {
  pname = "libresplit";
-  version = "0-unstable-2025-11-11";
+  version = "0-unstable-2025-11-15";

  src = fetchFromGitHub {
    owner = "LibreSplit";
    repo = "LibreSplit";
-    rev = "1a149e2d6d02c456e787bffc07b3c7ca67d7bd44";
-    hash = "sha256-EEYocgSKgQsGxJfyRYsfTGFmR8+TWPOLfOKjv6uXKuU=";
+    rev = "68cecf6a0784bdf697bc65f490f3ebd701bcd989";
+    hash = "sha256-T6g/8D/kgarlmstekFgY2Qt4OFpLivQtkU856jxAZ/Q=";
  };

  nativeBuildInputs = [
@@ -7,13 +7,13 @@

 stdenvNoCC.mkDerivation {
  pname = "libretro-shaders-slang";
-  version = "0-unstable-2025-11-13";
+  version = "0-unstable-2025-11-19";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "slang-shaders";
-    rev = "7b0fb588c7cf00ff64703a5ffacebd5f491f40db";
-    hash = "sha256-Eh7K3xm1WBSsHbP1FK5qxJYIcsmCwDe9PpKJ//j26TU=";
+    rev = "279b031c92c7a376be47ffdec5fe669fb5dcebc0";
+    hash = "sha256-0OltcN4W0vp7jtDSSIJ2ZanFi5p/efnPDOhaurr3ShY=";
  };

  dontConfigure = true;
@@ -11,10 +11,10 @@ mattermost.override {
    # and make sure the version regex is up to date here.
    # Ensure you also check ../mattermost/package.nix for ESR releases.
    regex = "^v(11\\.[0-9]+\\.[0-9]+)$";
-    version = "11.0.4";
-    srcHash = "sha256-odBY/TVvED7h7+u+5nSRng4rRnjt1eee7fUWjxqnAJ4=";
+    version = "11.0.5";
+    srcHash = "sha256-rycML/NL/0fA1OEdE8krHPo5+3DxSaQWoEV4UDfRK5E=";
    vendorHash = "sha256-QlBq8YlphD2YuOrdnhW8g5XXeMkESVDRvKg6i5MGA0k=";
-    npmDepsHash = "sha256-YU6FDsMX0QIGFatUDRos/AkgwljIBeI5w/TJt/lglw0=";
+    npmDepsHash = "sha256-F0LzT1Ko95Zm3BZu5/P/Tz1dkd+l3FWNtFw+p0NQ5Xw=";
    lockfileOverlay = ''
      unlock(.; "@floating-ui/react"; "channels/node_modules/@floating-ui/react")
    '';
@@ -11,16 +11,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "metadata";
-  version = "0.1.10";
+  version = "0.1.12";

  src = fetchFromGitHub {
    owner = "zmwangx";
    repo = "metadata";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-wZ1wLygPFBFZsSYJGxNzYV+mXtbN68GY3nMYDFHPZHo=";
+    hash = "sha256-gDOYqPwrWUfUTCx+p+ZpwsP8XxUufDCGem/WzW5cQPc=";
  };

-  cargoHash = "sha256-pWekXsjAhK4wyjf95nZO+Wj9PcH87D8vYsRFAE/w/sw=";
+  cargoHash = "sha256-tUVaseaavm746sxaA2A3ua4ZxzoKSnRQ4rJRBeO9t1U=";

  nativeBuildInputs = [
    pkg-config
@@ -24,9 +24,8 @@
  pulseaudio,
  sndioSupport ? true,
  sndio,
-  systemd,
-  systemdSupport ? lib.meta.availableOn stdenv.hostPlatform systemd,
-  coreaudioSupport ? stdenv.hostPlatform.isDarwin,
+  systemdLibs,
+  systemdSupport ? lib.meta.availableOn stdenv.hostPlatform systemdLibs,
 }:

 let
@@ -39,7 +38,7 @@ stdenv.mkDerivation (finalAttrs: {
  src = fetchFromGitHub {
    owner = "clangen";
    repo = "musikcube";
-    rev = finalAttrs.version;
+    tag = finalAttrs.version;
    hash = "sha512-qmoFMDmI4rvb5PrGgGoPlMwllG9H0B5uL4Xve/yQ8reQvQKIOWnt9e9oMm7gKO8eFAvFXiJLWUTpD3lTxZk1mQ==";
  };

@@ -68,7 +67,7 @@ stdenv.mkDerivation (finalAttrs: {
    portaudio
    taglib
  ]
-  ++ lib.optionals systemdSupport [ systemd ]
+  ++ lib.optionals systemdSupport [ systemdLibs ]
  ++ lib.optionals stdenv.hostPlatform.isLinux [
    alsa-lib
    pulseaudio
@@ -8,16 +8,16 @@

 buildGoModule rec {
  pname = "omnictl";
-  version = "1.3.1";
+  version = "1.3.4";

  src = fetchFromGitHub {
    owner = "siderolabs";
    repo = "omni";
    rev = "v${version}";
-    hash = "sha256-zeNGS39HD1i7K7SXFWnq30PgDnuvWMKa5vJLuzA0En0=";
+    hash = "sha256-anQujIC4+XU04fv6IMkwusPF7EQ90+w9xuqdFb/fEzU=";
  };

-  vendorHash = "sha256-/9SfrqoZuzDX/AALn398OxUXWNacnGd7fEmUUL5vayo=";
+  vendorHash = "sha256-ew94A1GrUtuKqLIFDCkuAj1oOQV7nd8tdz4PAA8gax0=";

  ldflags = [
    "-s"
@@ -7,7 +7,7 @@

 let
  pname = "openfga";
-  version = "1.11.0";
+  version = "1.11.1";
 in

 buildGoModule {
@@ -17,10 +17,10 @@ buildGoModule {
    owner = "openfga";
    repo = "openfga";
    rev = "v${version}";
-    hash = "sha256-2PmTIoi7v06/Uqlj2GlBbnGpu3GB4xBondG/w3egSjs=";
+    hash = "sha256-GI0ZII1PlZMTjgxoJJP45mHAUF4BAXGDqV3bNlFB5ec=";
  };

-  vendorHash = "sha256-KK/6CNq824PBgAHnPoGza0yvLQ/paa1hznfp5p2GKyY=";
+  vendorHash = "sha256-pwEyPHQZ6XYa/HhopvY/hDFHIAbnC51d2IQBSpvMBY8=";

  nativeBuildInputs = [ installShellFiles ];

@@ -10,16 +10,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "pixi-pack";
-  version = "0.7.4";
+  version = "0.7.5";

  src = fetchFromGitHub {
    owner = "Quantco";
    repo = "pixi-pack";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-R+JydhsYha4bQu7KBMEyV5IijnPtJZphbSib9JpchrI=";
+    hash = "sha256-zMrr/47oTej6uyiRpPRVlfUIFtl0wesCm+qN6Y7iUkE=";
  };

-  cargoHash = "sha256-U2Ty8ZzNkhDc2O3I3ceFcZRk3fu0aSzwsdIuo6Edcx0=";
+  cargoHash = "sha256-FnKmUNCmLcTTYqagOYhJFp7d/qbc0OBCb8nT7ZKx3n0=";

  buildInputs = [ openssl ];

@@ -20,13 +20,13 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "readest";
-  version = "0.9.92";
+  version = "0.9.93";

  src = fetchFromGitHub {
    owner = "readest";
    repo = "readest";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-cXUhDnYjYOD69ESIRii25PXaOTiA5uhoATQiuWLEsu0=";
+    hash = "sha256-Yfj7QVjCCIX41xVzYMoaJPQd2zY/zymo2V2nbNUZpO4=";
    fetchSubmodules = true;
  };

@@ -12,7 +12,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "rtags";
-  version = "2.41-unstable-2025-11-08";
+  version = "2.41-unstable-2025-11-19";
  nativeBuildInputs = [
    cmake
    pkg-config
@@ -29,8 +29,8 @@ stdenv.mkDerivation (finalAttrs: {
  src = fetchFromGitHub {
    owner = "andersbakken";
    repo = "rtags";
-    rev = "18351b67cd770868d8a053279be26149c374abb6";
-    hash = "sha256-6xW5lBAyxGPdPwCCEm363ciL3PA5WRUQU2efi5fc58U=";
+    rev = "7fcfacb5b4f9da43b99c8e9938d1d145ac241458";
+    hash = "sha256-97np2vDg3jdzDP9+Gq+HtBo2m7Wbkvf2f/TTmf0ryjo=";
    fetchSubmodules = true;
    # unicode file names lead to different checksums on HFS+ vs. other
    # filesystems because of unicode normalisation
@@ -13,14 +13,14 @@ in
 python.pkgs.toPythonModule (
  python.pkgs.buildPythonApplication rec {
    pname = "searxng";
-    version = "0-unstable-2025-10-31";
+    version = "0-unstable-2025-11-21";
    pyproject = true;

    src = fetchFromGitHub {
      owner = "searxng";
      repo = "searxng";
-      rev = "b8e4ebdc0cd3b6dc5f58d8ff54deced2b14b13b1";
-      hash = "sha256-qx4y79utIVyLWQlF/RN1TzHKCM/EMDv7tR9WGEbaYoQ=";
+      rev = "b876d0bed01422687f3f044658cab0afa9e0e19f";
+      hash = "sha256-K9nGtWOkVksxmD/3QIiSt/uVCBBghxA6baCgqoVoaj0=";
    };

    nativeBuildInputs = with python.pkgs; [ pythonRelaxDepsHook ];
@@ -9,13 +9,13 @@

 buildGoModule rec {
  pname = "slackdump";
-  version = "3.1.9";
+  version = "3.1.10";

  src = fetchFromGitHub {
    owner = "rusq";
    repo = "slackdump";
    tag = "v${version}";
-    hash = "sha256-Db2vwBLoDpVdSUU5ZTHVBg/UGJyNoFLw+5ONCEgCAm4=";
+    hash = "sha256-sbin16iMz5ePXWE8KdpdbY+VaqgnpGH4xyyD2pq1kbo=";
  };

  nativeCheckInputs = lib.optional stdenv.hostPlatform.isDarwin darwin.IOKitTools;
@@ -32,7 +32,7 @@ buildGoModule rec {
      "-skip=^${builtins.concatStringsSep "$|^" skippedTests}$"
    ];

-  vendorHash = "sha256-R6ZepFDniujdxcfgp8fUpm54KpRHm9ujNe4hPfpn2M0=";
+  vendorHash = "sha256-7ySux+c4cun8dm7JhJpjSsFekru6emV6GCta3KL6m34=";

  __darwinAllowLocalNetworking = true;

@@ -0,0 +1 @@
+{ python3Packages }: python3Packages.toPythonApplication python3Packages.snappy
@@ -10,16 +10,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "ssh-vault";
-  version = "1.1.4";
+  version = "1.1.5";

  src = fetchFromGitHub {
    owner = "ssh-vault";
    repo = "ssh-vault";
    tag = finalAttrs.version;
-    hash = "sha256-qAALDpspHR2pHo8T1QgHrazO128u9CqoibwIzmgAj1s=";
+    hash = "sha256-po0Zb52TVfqHxqlHPmBCqr5zgj49Ks5n0rZDiOvixcM=";
  };

-  cargoHash = "sha256-uEucFplvFZNTJU/PmyLsehYmlxTvBW4lUNG6pKu6EhM=";
+  cargoHash = "sha256-pd52vYtN4JmOyDstNBX7ssJk/IpiGnekc7L+knf+RzQ=";

  nativeBuildInputs = [ pkg-config ];

@@ -12,16 +12,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "t-rec";
-  version = "0.7.9";
+  version = "0.7.10";

  src = fetchFromGitHub {
    owner = "sassman";
    repo = "t-rec-rs";
    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-aQX+JJ2MwzzxJkA1vsE8JqvYpWtqyycvycPc2pyFU7g=";
+    sha256 = "sha256-FyLahDf72uNPCKYqFyWxDkWw90R4Pnq94v64iFaAYFI=";
  };

-  cargoHash = "sha256-AgSYM2a9XGH2X4dcp5CSMnt0Bq/5XT8C3g1R2UX4mLY=";
+  cargoHash = "sha256-J+Ng+X1k4oMtWPKkDevQVnYuFu7Ba35X4hBg3i3p8qM=";

  nativeBuildInputs = [ makeWrapper ];
  buildInputs = [
@@ -9,16 +9,16 @@

 buildGoModule rec {
  pname = "tbls";
-  version = "1.91.2";
+  version = "1.91.3";

  src = fetchFromGitHub {
    owner = "k1LoW";
    repo = "tbls";
    tag = "v${version}";
-    hash = "sha256-iL8d8fvc0zawe5UyeOwp5cfnE1K58IY39RSzq/jCc4c=";
+    hash = "sha256-dmgWNdlGqI3kipNu9QEV8g3aArAgZb2qt5BkUhFNePk=";
  };

-  vendorHash = "sha256-HE3/h77APsNRitAAo4R/5tWrX36IPcJRAUFv6M6P6x4=";
+  vendorHash = "sha256-ppBzTerPhcM225VL6JzE4ZerTFqwnGmSxVTYyD3ur8o=";

  excludedPackages = [ "scripts/jsonschema" ];

@@ -0,0 +1,51 @@
+{
+  lib,
+  stdenv,
+  tcl,
+  fetchFromGitHub,
+  autoreconfHook,
+  tk,
+  libGL,
+}:
+
+tcl.mkTclDerivation {
+  pname = "tkgl";
+  version = "1.2.1-unstable-2025-06-01";
+
+  src = fetchFromGitHub {
+    owner = "3-manifolds";
+    repo = "TkGL";
+    rev = "45bf16e6c28a070c70fc9a0eb8c47a0b6ff8a2e3";
+    hash = "sha256-AA5LZGhMTWmTZqI/wtycUYLsUe9BwO3voGMS7vGlCM0=";
+  };
+
+  postPatch = lib.optionalString stdenv.hostPlatform.isDarwin ''
+    substituteInPlace configure.ac \
+      --replace-fail "-arch x86_64 -arch arm64" ""
+  '';
+
+  configureFlags = [
+    "--with-tk=${lib.getLib tk}/lib"
+    "--with-tkinclude=${lib.getDev tk}/include"
+  ];
+
+  installTargets = [
+    "install-lib-binaries"
+  ];
+
+  nativeBuildInputs = [
+    autoreconfHook
+  ];
+
+  buildInputs = [
+    tk
+    libGL
+  ];
+
+  meta = {
+    description = "OpenGL drawing surface for Tk 8 and 9";
+    homepage = "https://github.com/3-manifolds/TkGL";
+    license = lib.licenses.tcltk;
+    maintainers = with lib.maintainers; [ noiioiu ];
+  };
+}
@@ -8,11 +8,11 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "twilio-cli";
-  version = "6.2.0";
+  version = "6.2.1";

  src = fetchzip {
    url = "https://twilio-cli-prod.s3.amazonaws.com/twilio-v${finalAttrs.version}/twilio-v${finalAttrs.version}.tar.gz";
-    hash = "sha256-XEznvrqQCUiZD8sYRLngNMZL/q1+W8yI2tINu+BsgmI=";
+    hash = "sha256-yxtMpmPB3w+28aU0G4hAF3I+uijdI5yavqHlthZ9eIs=";
  };

  buildInputs = [ nodejs-slim ];
@@ -16,13 +16,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "typescript-language-server";
-  version = "5.1.2";
+  version = "5.1.3";

  src = fetchFromGitHub {
    owner = "typescript-language-server";
    repo = "typescript-language-server";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-8UDPeW8Bb6Or+G28GI+fprUtqnDGKTqeWskpn9i0HCA=";
+    hash = "sha256-qKw/AQ6SbodCDJsBJhlHc/w5qFtyhQQv7jFsJiuJtGE=";
  };

  patches = [
@@ -19,8 +19,7 @@
  ncurses,
  pamSupport ? lib.meta.availableOn stdenv.hostPlatform pam,
  pam,
-  systemdSupport ? lib.meta.availableOn stdenv.hostPlatform systemd,
-  systemd,
+  systemdSupport ? lib.meta.availableOn stdenv.hostPlatform systemdLibs,
  systemdLibs,
  sqlite,
  nlsSupport ? true,
@@ -8,16 +8,16 @@

 buildGoModule {
  pname = "zoekt";
-  version = "3.7.2-2-unstable-2025-11-11";
+  version = "3.7.2-2-unstable-2025-11-20";

  src = fetchFromGitHub {
    owner = "sourcegraph";
    repo = "zoekt";
-    rev = "46f7ba34aa4ff3c64b9e873fc6f6d8bf01714b06";
-    hash = "sha256-G7yXZB+8YVxw86QMxkG9bYblZClOJwnmu6R2m7eji3U=";
+    rev = "2e375df04f81c31c2ea62c23fcff48d98240e131";
+    hash = "sha256-tKuLJ/n9qI20FMmCtyuVeRfnB08ZY2KbRKdcjpe66u4=";
  };

-  vendorHash = "sha256-urXYBv8+C2jwnr5PjXz7nUyX/Gz4wmtS76UTXFqfQFk=";
+  vendorHash = "sha256-uHCZNbP1zY8V+rtIB8xATWEci99sQkf8M01p3m789ZA=";

  nativeCheckInputs = [
    gitMinimal
@@ -54,25 +54,25 @@ let
  # Zoom versions are released at different times per platform and often with different versions.
  # We write them on three lines like this (rather than using {}) so that the updater script can
  # find where to edit them.
-  versions.aarch64-darwin = "6.6.6.67409";
-  versions.x86_64-darwin = "6.6.6.67409";
+  versions.aarch64-darwin = "6.6.10.69071";
+  versions.x86_64-darwin = "6.6.10.69071";

  # This is the fallback version so that evaluation can produce a meaningful result.
-  versions.x86_64-linux = "6.6.6.5306";
+  versions.x86_64-linux = "6.6.10.5815";

  srcs = {
    aarch64-darwin = fetchurl {
      url = "https://zoom.us/client/${versions.aarch64-darwin}/zoomusInstallerFull.pkg?archType=arm64";
      name = "zoomusInstallerFull.pkg";
-      hash = "sha256-puoU/uTKkx9X2ZhnS0+YIzDwrt1M0tHSIFdb5tAnwB0=";
+      hash = "sha256-Bm5kMV/FgKPxd231h4/XX5zNVJH/TpHURK87fFdSwZA=";
    };
    x86_64-darwin = fetchurl {
      url = "https://zoom.us/client/${versions.x86_64-darwin}/zoomusInstallerFull.pkg";
-      hash = "sha256-ZtVMXFO1Aa/CVBBMtO1Kqjzp9I0kuYF+CsAXPHseY9E=";
+      hash = "sha256-XgbCkuWH4VG8gcxHL56xuy2xmE5PXProW7wUDTk7E6U=";
    };
    x86_64-linux = fetchurl {
      url = "https://zoom.us/client/${versions.x86_64-linux}/zoom_x86_64.pkg.tar.xz";
-      hash = "sha256-a8Yngk6KwBsUCouv5FFfEZQheJSU88grlQm27qhANRw=";
+      hash = "sha256-SvPAhv6Ja37aviG4Gh65FvDc9U4fUDKRJvvu8/tbxls=";
    };
  };

@@ -14,13 +14,13 @@ let
 in
 stdenv.mkDerivation rec {
  pname = "kimageannotator";
-  version = "0.7.1";
+  version = "0.7.2";

  src = fetchFromGitHub {
    owner = "ksnip";
    repo = "kImageAnnotator";
    rev = "v${version}";
-    hash = "sha256-LFou8gTF/XDBLNQbA4uurYJHQl7yOTKe2OGklUsmPrg=";
+    hash = "sha256-SKNNsBXmaS0ZnbMP7cKSfr+MM+ICdvYQ0k2h5s9SDcE=";
  };

  nativeBuildInputs = [
@@ -5,26 +5,24 @@
  stdlib-shims,
 }:

-buildDunePackage rec {
+buildDunePackage (finalAttrs: {
  pname = "bheap";
  version = "2.0.0";

  src = fetchurl {
-    url = "https://github.com/backtracking/${pname}/releases/download/${version}/${pname}-${version}.tbz";
-    sha256 = "0dpnpla20lgiicrxl2432m2fcr6y68msw3pnjxqb11xw6yrdfhsz";
+    url = "https://github.com/backtracking/bheap/releases/download/${finalAttrs.version}/bheap-${finalAttrs.version}.tbz";
+    hash = "sha256-X0PXsje8h7Bwl/YOrisy3mTmRBWDCNozi/FRIBS99jY=";
  };

-  useDune2 = true;
-
  doCheck = true;
  checkInputs = [
    stdlib-shims
  ];

-  meta = with lib; {
-    description = "OCaml binary heap implementation by Jean-Christophe Filliatre";
-    license = licenses.lgpl21Only;
-    maintainers = [ maintainers.sternenseemann ];
+  meta = {
+    description = "OCaml binary heap implementation by Jean-Christophe Filliâtre";
+    license = lib.licenses.lgpl21Only;
+    maintainers = [ lib.maintainers.sternenseemann ];
    homepage = "https://github.com/backtracking/bheap";
  };
-}
+})
@@ -1,28 +1,22 @@
 {
  lib,
  buildDunePackage,
-  fetchFromGitHub,
+  fetchurl,
 }:

-buildDunePackage rec {
+buildDunePackage (finalAttrs: {
  pname = "bigarray-compat";
  version = "1.1.0";

-  useDune2 = true;
-
-  minimalOCamlVersion = "4.02";
-
-  src = fetchFromGitHub {
-    owner = "mirage";
-    repo = pname;
-    rev = "v${version}";
-    sha256 = "sha256-2JVopggK2JuXWEPu8qn12F1jQIJ9OV89XY1rHtUqLkI=";
+  src = fetchurl {
+    url = "https://github.com/mirage/bigarray-compat/releases/download/v${finalAttrs.version}/bigarray-compat-${finalAttrs.version}.tbz";
+    hash = "sha256-Q0RppI1chOgNYhsT2V6wZ/gTjBZQof1a5gCaGbk3GNU=";
  };

  meta = {
    description = "Compatibility library to use Stdlib.Bigarray when possible";
-    inherit (src.meta) homepage;
+    homepage = "https://github.com/mirage/bigarray-compat";
    license = lib.licenses.isc;
    maintainers = [ lib.maintainers.vbgl ];
  };
-}
+})
@@ -9,18 +9,15 @@
  cairo,
 }:

-buildDunePackage rec {
+buildDunePackage (finalAttrs: {
  pname = "cairo2";
  version = "0.6.5";

  src = fetchurl {
-    url = "https://github.com/Chris00/ocaml-cairo/releases/download/${version}/cairo2-${version}.tbz";
-    sha256 = "sha256-JdxByUNtmrz1bKrZoQWUT/c0YEG4zGoqZUq4hItlc3I=";
+    url = "https://github.com/Chris00/ocaml-cairo/releases/download/${finalAttrs.version}/cairo2-${finalAttrs.version}.tbz";
+    hash = "sha256-JdxByUNtmrz1bKrZoQWUT/c0YEG4zGoqZUq4hItlc3I=";
  };

-  minimalOCamlVersion = "4.02";
-  useDune2 = true;
-
  nativeBuildInputs = [ pkg-config ];
  buildInputs = [
    cairo
@@ -34,7 +31,7 @@ buildDunePackage rec {
      || lib.versionAtLeast ocaml.version "4.10"
    );

-  meta = with lib; {
+  meta = {
    homepage = "https://github.com/Chris00/ocaml-cairo";
    description = "Binding to Cairo, a 2D Vector Graphics Library";
    longDescription = ''
@@ -43,10 +40,10 @@ buildDunePackage rec {
      the X Window System, Quartz, Win32, image buffers, PostScript, PDF,
      and SVG file output.
    '';
-    license = licenses.lgpl3;
-    maintainers = with maintainers; [
+    license = lib.licenses.lgpl3;
+    maintainers = with lib.maintainers; [
      jirkamarsik
      vbgl
    ];
  };
-}
+})
@@ -1,33 +1,37 @@
 {
  lib,
  buildPythonPackage,
-  pythonOlder,
  fetchFromGitHub,
+  setuptools,
  pytestCheckHook,
 }:

 buildPythonPackage rec {
  pname = "cfgv";
-  version = "3.4.0";
-  format = "setuptools";
-
-  disabled = pythonOlder "3.8";
+  version = "3.5.0";
+  pyproject = true;

  src = fetchFromGitHub {
    owner = "asottile";
    repo = "cfgv";
    tag = "v${version}";
-    hash = "sha256-P02j53dltwdrlUBG89AI+P2GkXYKTVrQNF15rZt58jw=";
+    hash = "sha256-ccCalTNVEHvh1gKhQgceD/yAScIEQy3ZKqndoWs7FQQ=";
  };

-  nativeCheckInputs = [ pytestCheckHook ];
+  build-system = [
+    setuptools
+  ];
+
+  nativeCheckInputs = [
+    pytestCheckHook
+  ];

  pythonImportsCheck = [ "cfgv" ];

-  meta = with lib; {
+  meta = {
    description = "Validate configuration and produce human readable error messages";
    homepage = "https://github.com/asottile/cfgv";
-    license = licenses.mit;
+    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ nickcao ];
  };
 }
@@ -6,14 +6,14 @@

 buildPythonPackage rec {
  pname = "csv2md";
-  version = "1.4.0";
+  version = "1.5.0";
  format = "setuptools";

  src = fetchFromGitHub {
    owner = "lzakharov";
    repo = "csv2md";
    rev = "v${version}";
-    hash = "sha256-CzURejGIxsD7IBSbAYXz0kj5oX47e+uN13fqd56CM1A=";
+    hash = "sha256-xIcDBmLLB6cU5M05tOGRcwPmHCXRSXELv7TuaMEfVEg=";
  };

  pythonImportsCheck = [ "csv2md" ];
@@ -16,14 +16,14 @@

 buildPythonPackage rec {
  pname = "dazl";
-  version = "8.5.0";
+  version = "8.6.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "digital-asset";
    repo = "dazl-client";
    tag = "v${version}";
-    hash = "sha256-GcZVyUx/aYSw7sy1JGeWRKBXifQaG/ygK9jJdG13cO8=";
+    hash = "sha256-zFe6FomsT6aCR5B8hYEN6oTzaprVzs7fvdM3hv99LgY=";
  };

  pythonRelaxDeps = [
@@ -8,14 +8,14 @@

 buildPythonPackage rec {
  pname = "disposable-email-domains";
-  version = "0.0.149";
+  version = "0.0.151";
  pyproject = true;

  # No tags on GitHub
  src = fetchPypi {
    pname = "disposable_email_domains";
    inherit version;
-    hash = "sha256-bgGs6F41rKVAI6qIyNiqOr5hfCs6ardq6WFJtpZxFCc=";
+    hash = "sha256-jXtOepZPvp2jlOWJ1Lp2ltnrWU3qL5jHunPRcPLZc8E=";
  };

  build-system = [
@@ -13,7 +13,7 @@
 }:

 let
-  version = "2.22.1";
+  version = "2.23.0";
  tag = "v${version}";
 in
 buildPythonPackage {
@@ -25,7 +25,7 @@ buildPythonPackage {
    owner = "elevenlabs";
    repo = "elevenlabs-python";
    inherit tag;
-    hash = "sha256-MclDvHOW/hmtMI5/VhtGFdaAd51CSxWVlGRTycGw4FM=";
+    hash = "sha256-TGB1IrNdvFcuA2kV90Ymu1ZHv2y5zBc4ll33K0QtWAA=";
  };

  build-system = [ poetry-core ];
@@ -2,7 +2,6 @@
  lib,
  buildPythonPackage,
  fetchFromGitHub,
-  fetchpatch,

  # build-system
  setuptools,
@@ -39,27 +38,16 @@

 buildPythonPackage rec {
  pname = "flax";
-  version = "0.12.0";
+  version = "0.12.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "google";
    repo = "flax";
    tag = "v${version}";
-    hash = "sha256-ioMj8+TuOFX3t9p3oVaywaOQPFBgvNcy7b/2WX/yvXA=";
+    hash = "sha256-AUgNU1ww1Ic+lfdHtdP4fdFuvIatAXqs7AX615aVPKM=";
  };

-  patches = [
-    # Fixes TypeError: shard_map() got an unexpected keyword argument 'auto'
-    # TODO: remove when updating to the next release
-    # https://github.com/google/flax/pull/5020
-    (fetchpatch {
-      name = "jax-0.8.0-compat";
-      url = "https://github.com/google/flax/commit/5bf9b35ff03130f440a93a812fd8b47ec6a49add.patch";
-      hash = "sha256-KYpa1wDQMt77XIDGQEg/VuU/OPPNp2enGSA986TZSLQ=";
-    })
-  ];
-
  build-system = [
    setuptools
    setuptools-scm
@@ -95,12 +83,6 @@ buildPythonPackage rec {
    tensorflow
  ];

-  pytestFlags = [
-    # DeprecationWarning: Triggering of __jax_array__() during abstractification is deprecated.
-    # To avoid this error, either explicitly convert your object using jax.numpy.array(), or register your object as a pytree.
-    "-Wignore::DeprecationWarning"
-  ];
-
  disabledTestPaths = [
    # Docs test, needs extra deps + we're not interested in it.
    "docs/_ext/codediff_test.py"
@@ -0,0 +1,114 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+
+  # build-system
+  hatchling,
+
+  # dependencies
+  langchain-core,
+  langchain-text-splitters,
+  langsmith,
+  pydantic,
+  pyyaml,
+  requests,
+  sqlalchemy,
+
+  # tests
+  blockbuster,
+  cffi,
+  freezegun,
+  langchain-openai,
+  langchain-tests,
+  lark,
+  numpy,
+  packaging,
+  pandas,
+  pytest-asyncio,
+  pytest-dotenv,
+  pytest-mock,
+  pytest-socket,
+  pytest-xdist,
+  pytestCheckHook,
+  requests-mock,
+  responses,
+  syrupy,
+  toml,
+}:
+
+buildPythonPackage rec {
+  pname = "langchain-classic";
+  version = "1.0.0-unstable-2025-11-11";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "langchain-ai";
+    repo = "langchain";
+    # no tagged releases avaialble
+    rev = "3dfea96ec1d2dac4e506d287860ee943c183c9f1";
+    hash = "sha256-U3UllSSa4tFz+nXAP6aNoYceU/xCPbwKSP2F2et+qgQ=";
+  };
+
+  sourceRoot = "${src.name}/libs/langchain";
+
+  build-system = [ hatchling ];
+
+  pythonRelaxDeps = [
+    # Each component release requests the exact latest core.
+    "langchain-core"
+  ];
+
+  dependencies = [
+    langchain-core
+    langchain-text-splitters
+    langsmith
+    pydantic
+    pyyaml
+    requests
+    sqlalchemy
+  ];
+
+  nativeCheckInputs = [
+    blockbuster
+    cffi
+    freezegun
+    langchain-core
+    langchain-openai
+    langchain-tests
+    langchain-text-splitters
+    lark
+    numpy
+    packaging
+    pandas
+    pytest-asyncio
+    pytest-dotenv
+    pytest-mock
+    pytest-socket
+    pytest-xdist
+    pytestCheckHook
+    requests-mock
+    responses
+    syrupy
+    toml
+  ];
+
+  enabledTestPaths = [
+    # integration_tests require network access, database access and require `OPENAI_API_KEY`, etc.
+    "tests/unit_tests"
+  ];
+
+  disabledTests = [
+    # Network access (web.example.com)
+    "test_socket_disabled"
+  ];
+
+  pythonImportsCheck = [ "langchain_classic" ];
+
+  meta = {
+    description = "Classic (0.x) compatibility layer for LangChain";
+    homepage = "https://github.com/langchain-ai/langchain/tree/master/libs/langchain";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ sarahec ];
+  };
+}
@@ -10,7 +10,7 @@
  aiohttp,
  dataclasses-json,
  httpx-sse,
-  langchain,
+  langchain-classic,
  langchain-core,
  langsmith,
  numpy,
@@ -42,39 +42,30 @@

 buildPythonPackage rec {
  pname = "langchain-community";
-  version = "0.3.27";
+  version = "0.4.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "langchain-ai";
    repo = "langchain-community";
    tag = "libs/community/v${version}";
-    hash = "sha256-rGU8AYe7993+zMAtHLkNiK+wA+UtZnGkUQsOPMtUQ8w=";
+    hash = "sha256-N92YDmej2shQQlktr0veFOKyGFWemFj0hdJIYu1rYSc=";
  };

  sourceRoot = "${src.name}/libs/community";

  build-system = [ pdm-backend ];

+  # Only needed for mixed python 3.12/3.13 builds
  pythonRelaxDeps = [
-    # Each component release requests the exact latest langchain and -core.
-    # That prevents us from updating individual components.
-    "langchain"
-    "langchain-core"
    "numpy"
-    "pydantic-settings"
-    "tenacity"
-  ];
-
-  pythonRemoveDeps = [
-    "bs4"
  ];

  dependencies = [
    aiohttp
    dataclasses-json
    httpx-sse
-    langchain
+    langchain-classic
    langchain-core
    langsmith
    numpy
@@ -36,25 +36,20 @@

 buildPythonPackage rec {
  pname = "langchain-core";
-  version = "1.0.0";
+  version = "1.0.7";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "langchain-ai";
    repo = "langchain";
    tag = "langchain-core==${version}";
-    hash = "sha256-/V2xwpVIR7AWkN85D51LYokMrTrnJlIkGr0q1ztVh8A=";
+    hash = "sha256-esMMA9z8z9Q909buPGZP1jujEWzdXT+Mxlwvjz0XqKk=";
  };

  sourceRoot = "${src.name}/libs/core";

  build-system = [ hatchling ];

-  pythonRelaxDeps = [
-    "packaging"
-    "tenacity"
-  ];
-
  dependencies = [
    jsonpatch
    langsmith
@@ -74,7 +69,6 @@ buildPythonPackage rec {
    blockbuster
    freezegun
    grandalf
-    httpx
    langchain-tests
    numpy
    pytest-asyncio
@@ -4,7 +4,7 @@
  fetchFromGitHub,

  # build-system
-  poetry-core,
+  pdm-backend,

  # dependencies
  langchain-core,
@@ -20,14 +20,14 @@

 buildPythonPackage rec {
  pname = "langchain-experimental";
-  version = "0.3.4";
+  version = "0.4.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "langchain-ai";
    repo = "langchain-experimental";
    tag = "libs/experimental/v${version}";
-    hash = "sha256-KgGfJfxHOfpwVVo/OcbOjiO5pbxoDE1MiyKqUwsqfIg=";
+    hash = "sha256-A5qCTOCmKt/a1DTKVOC/WwuLCqOYI5pGhAGo/Y4C/FY=";
  };

  sourceRoot = "${src.name}/libs/experimental";
@@ -38,7 +38,7 @@ buildPythonPackage rec {
  ];

  build-system = [
-    poetry-core
+    pdm-backend
  ];

  pythonRelaxDeps = [
@@ -68,9 +68,12 @@ buildPythonPackage rec {

  meta = {
    changelog = "https://github.com/langchain-ai/langchain-experimental/releases/tag/${src.tag}";
-    description = "Package add experimental features on LangChain";
+    description = "Experimental features for LangChain";
    homepage = "https://github.com/langchain-ai/langchain-experimental/tree/main/libs/experimental";
    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ mrdev023 ];
+    maintainers = with lib.maintainers; [
+      mrdev023
+      sarahec
+    ];
  };
 }
@@ -20,14 +20,14 @@

 buildPythonPackage rec {
  pname = "langchain-groq";
-  version = "1.0.0";
+  version = "1.0.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "langchain-ai";
    repo = "langchain";
    tag = "langchain-groq==${version}";
-    hash = "sha256-OuZEdpPp0mKSejd43RW3bXzCzp3E4Pce7flsSr5JleY=";
+    hash = "sha256-08dEZI+sI33i4FGSAVvE3i5KIRccdslw0PXqXlMLldE=";
  };

  sourceRoot = "${src.name}/libs/partners/groq";
@@ -24,14 +24,14 @@

 buildPythonPackage rec {
  pname = "langchain-mistralai";
-  version = "1.0.0";
+  version = "1.0.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "langchain-ai";
    repo = "langchain";
    tag = "langchain-mistralai==${version}";
-    hash = "sha256-khpZY6kttbgacnY1EKCyIPBR2ZiZHC3OA+0NpIBXg9s=";
+    hash = "sha256-o9xIIcqsuTgWMeluk3EMY3hbB3wGjhYYfzbHizpNTo8=";
  };

  sourceRoot = "${src.name}/libs/partners/mistralai";
@@ -46,12 +46,6 @@ buildPythonPackage rec {
    pydantic
  ];

-  pythonRelaxDeps = [
-    # Each component release requests the exact latest core.
-    # That prevents us from updating individual components.
-    "langchain-core"
-  ];
-
  nativeCheckInputs = [
    langchain-tests
    pytest-asyncio
@@ -60,6 +54,11 @@ buildPythonPackage rec {

  enabledTestPaths = [ "tests/unit_tests" ];

+  disabledTests = [
+    # Comparison error due to message formatting differences
+    "test__convert_dict_to_message_tool_call"
+  ];
+
  pythonImportsCheck = [ "langchain_mistralai" ];

  passthru = {
@@ -71,7 +70,7 @@ buildPythonPackage rec {
  };

  meta = {
-    changelog = "https://github.com/langchain-ai/langchain-mistralai/releases/tag/${src.tag}";
+    changelog = "https://github.com/langchain-ai/langchain/releases/tag/${src.tag}";
    description = "Build LangChain applications with mistralai";
    homepage = "https://github.com/langchain-ai/langchain/tree/master/libs/partners/mistralai";
    license = lib.licenses.mit;
@@ -4,16 +4,24 @@
  fetchFromGitHub,

  # build-system
-  poetry-core,
+  hatchling,

  # dependencies
+  langchain,
+  langchain-classic,
  langchain-core,
+  langchain-text-splitters,
+  lark,
  numpy,
  pymongo,

  freezegun,
  httpx,
-  langchain,
+  langchain-community,
+  langchain-ollama,
+  langchain-openai,
+  langchain-tests,
+  mongomock,
  pytest-asyncio,
  pytestCheckHook,
  pytest-mock,
@@ -25,19 +33,19 @@

 buildPythonPackage rec {
  pname = "langchain-mongodb";
-  version = "0.2.0";
+  version = "0.8.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "langchain-ai";
-    repo = "langchain";
-    tag = "langchain-mongodb==${version}";
-    hash = "sha256-Jd9toXkS9dGtSIrJQ/5W+swV1z2BJOJKBtkyGzj3oSc=";
+    repo = "langchain-mongodb";
+    tag = "libs/langchain-mongodb/v${version}";
+    hash = "sha256-TpEiTQe4nZEhb7yWdm73oKaHGr58Ej3cNeD1sP5pAxA=";
  };

-  sourceRoot = "${src.name}/libs/partners/mongodb";
+  sourceRoot = "${src.name}/libs/langchain-mongodb";

-  build-system = [ poetry-core ];
+  build-system = [ hatchling ];

  pythonRelaxDeps = [
    # Each component release requests the exact latest core.
@@ -47,7 +55,10 @@ buildPythonPackage rec {
  ];

  dependencies = [
+    langchain
+    langchain-classic
    langchain-core
+    langchain-text-splitters
    numpy
    pymongo
  ];
@@ -55,7 +66,12 @@ buildPythonPackage rec {
  nativeCheckInputs = [
    freezegun
    httpx
-    langchain
+    langchain-community
+    langchain-ollama
+    langchain-openai
+    langchain-tests
+    lark
+    mongomock
    pytest-asyncio
    pytestCheckHook
    pytest-mock
@@ -64,20 +80,25 @@ buildPythonPackage rec {

  enabledTestPaths = [ "tests/unit_tests" ];

+  disabledTestPaths = [
+    # Expects a MongoDB cluster and are very slow
+    "tests/unit_tests/test_index.py"
+  ];
+
  pythonImportsCheck = [ "langchain_mongodb" ];

  passthru = {
    # python updater script sets the wrong tag
    skipBulkUpdate = true;
    updateScript = gitUpdater {
-      rev-prefix = "langchain-mongodb==";
+      rev-prefix = "libs/langchain-mongodb/v";
    };
  };

  meta = {
-    changelog = "https://github.com/langchain-ai/langchain/releases/tag/${src.tag}";
+    changelog = "https://github.com/langchain-ai/langchain-mongodb/releases/tag/${src.tag}";
    description = "Integration package connecting MongoDB and LangChain";
-    homepage = "https://github.com/langchain-ai/langchain/tree/master/libs/partners/mongodb";
+    homepage = "https://github.com/langchain-ai/langchain-mongodb";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [
      natsukium
@@ -33,26 +33,20 @@

 buildPythonPackage rec {
  pname = "langchain-openai";
-  version = "1.0.1";
+  version = "1.0.3";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "langchain-ai";
    repo = "langchain";
    tag = "langchain-openai==${version}";
-    hash = "sha256-lKZZw9kMV3oM7fNpVvofZJfOcyoUdqByWQmBV5MTFZo=";
+    hash = "sha256-6xJEzwJlKGJg6LBQdKIt1E0dkSJcnocUOXq+NzUVEEc=";
  };

  sourceRoot = "${src.name}/libs/partners/openai";

  build-system = [ hatchling ];

-  pythonRelaxDeps = [
-    # Each component release requests the exact latest core.
-    # That prevents us from updating individual components.
-    "langchain-core"
-  ];
-
  dependencies = [
    langchain-core
    openai
@@ -85,11 +79,7 @@ buildPythonPackage rec {
    "test_embed_documents_with_custom_chunk_size"
    "test_get_num_tokens_from_messages"
    "test_get_token_ids"
-    "test_init_o1"
-
-    # TypeError: exceptions must be derived from Warning, not <class 'NoneType'>
-    # https://github.com/langchain-ai/langchain/issues/33705
-    "test_init_minimal_reasoning_effort"
+    "test_embeddings_respects_token_limit"
  ];

  pythonImportsCheck = [ "langchain_openai" ];
@@ -0,0 +1,54 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+
+  # build-system
+  hatchling,
+
+  # dependencies
+  langgraph-checkpoint,
+  langchain-mongodb,
+  pymongo,
+}:
+
+buildPythonPackage rec {
+  pname = "langgraph-checkpoint-mongodb";
+  version = "0.3.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "langchain-ai";
+    repo = "langchain-mongodb";
+    tag = "libs/langgraph-checkpoint-mongodb/v${version}";
+    hash = "sha256-pfgqJ7QPtAxV86HEEaRBMAOCKC8y/iTlZmPzu1szE/o=";
+  };
+
+  sourceRoot = "${src.name}/libs/langgraph-checkpoint-mongodb";
+
+  build-system = [
+    hatchling
+  ];
+
+  dependencies = [
+    langgraph-checkpoint
+    langchain-mongodb
+    pymongo
+  ];
+
+  enabledTestPaths = [ "tests/unit_tests" ];
+
+  # Connection refused (to localhost:27017) for all tests
+  doCheck = false;
+
+  # no pythonImportsCheck as this package does not provide any direct imports
+  pythonImportsCheck = [ "langgraph.checkpoint.mongodb" ];
+
+  meta = {
+    description = "Integrations between MongoDB, Atlas, LangChain, and LangGraph";
+    homepage = "https://github.com/langchain-ai/langchain-mongodb/tree/main/libs/langgraph-checkpoint-mongodb";
+    changelog = "https://github.com/langchain-ai/langchain-mongodb/releases/tag/${src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ sarahec ];
+  };
+}
@@ -0,0 +1,50 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+
+  # build-system
+  hatchling,
+
+  # dependencies
+  langgraph-checkpoint,
+  langchain-mongodb,
+}:
+
+buildPythonPackage rec {
+  pname = "langgraph-store-mongodb";
+  version = "0.1.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "langchain-ai";
+    repo = "langchain-mongodb";
+    tag = "libs/langgraph-store-mongodb/v${version}";
+    hash = "sha256-/dafQK6iy85rMt7FMVb3ssaIop9JjjrwajaHAfBUp7g=";
+  };
+
+  sourceRoot = "${src.name}/libs/langgraph-store-mongodb";
+
+  build-system = [
+    hatchling
+  ];
+
+  dependencies = [
+    langgraph-checkpoint
+    langchain-mongodb
+  ];
+
+  # Connection Refused (to mongodb://localhost:27017)
+  # Note that `langchain-mongodb` runs the same tests with mocks.
+  doCheck = false;
+
+  pythonImportsCheck = [ "langgraph.store.mongodb" ];
+
+  meta = {
+    description = "Integrations between MongoDB, Atlas, LangChain, and LangGraph";
+    homepage = "https://github.com/langchain-ai/langchain-mongodb/tree/main/libs/langgraph-store-mongodb";
+    changelog = "https://github.com/langchain-ai/langchain-mongodb/releases/tag/${src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ sarahec ];
+  };
+}
@@ -3,23 +3,20 @@
  buildPythonPackage,
  fetchFromGitHub,
  pytestCheckHook,
-  pythonOlder,
  pyyaml,
  setuptools,
 }:

 buildPythonPackage rec {
  pname = "lnkparse3";
-  version = "1.5.2";
+  version = "1.5.3";
  pyproject = true;

-  disabled = pythonOlder "3.7";
-
  src = fetchFromGitHub {
    owner = "Matmaus";
    repo = "LnkParse3";
    tag = "v${version}";
-    hash = "sha256-z+qjPs7gHQMAUlnGLN06xZ0hyrAnBF8i0FbaiEpguNE=";
+    hash = "sha256-1BjESKJxEO6EOR2/IRR1wxFrqFAYA/DUp9XL00xja8M=";
  };

  build-system = [ setuptools ];
@@ -33,7 +30,7 @@ buildPythonPackage rec {
  meta = with lib; {
    description = "Windows Shortcut file (LNK) parser";
    homepage = "https://github.com/Matmaus/LnkParse3";
-    changelog = "https://github.com/Matmaus/LnkParse3/blob/${version}/CHANGELOG.md";
+    changelog = "https://github.com/Matmaus/LnkParse3/blob/${src.tag}/CHANGELOG.md";
    license = licenses.mit;
    maintainers = with maintainers; [ fab ];
  };
@@ -16,25 +16,20 @@

 buildPythonPackage rec {
  pname = "ml-dtypes";
-  version = "0.5.3";
+  version = "0.5.4";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "jax-ml";
    repo = "ml_dtypes";
    tag = "v${version}";
-    hash = "sha256-y0w+8h6KMYf6ZvlP3rEVt1I11jkbNNuJDIvfNFFaBQE=";
+    hash = "sha256-vGCDLs7Te/3fBZmCQVp2Zm5NnP7K/KCkTod0oFVVKN4=";
    # Since this upstream patch (https://github.com/jax-ml/ml_dtypes/commit/1bfd097e794413b0d465fa34f2eff0f3828ff521),
    # the attempts to use the nixpkgs packaged eigen dependency have failed.
    # Hence, we rely on the bundled eigen library.
    fetchSubmodules = true;
  };

-  postPatch = ''
-    substituteInPlace pyproject.toml \
-      --replace-fail "setuptools~=80.8.0" "setuptools"
-  '';
-
  build-system = [ setuptools ];

  dependencies = [ numpy ];
@@ -10,14 +10,14 @@

 buildPythonPackage rec {
  pname = "mockito";
-  version = "1.5.4";
+  version = "1.5.5";
  pyproject = true;

  disabled = pythonOlder "3.7";

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-8A7Vh8MpZt8yk8KUytsxdpRgrfxBVPUrkGcpRqpLMt8=";
+    hash = "sha256-SYJuOQHcgm0CBOk7Ftzhxh3enTqU6tycIJqw4TAoM5M=";
  };

  nativeBuildInputs = [ hatchling ];
@@ -2,7 +2,6 @@
  lib,
  buildPythonPackage,
  fetchFromGitHub,
-  pythonOlder,
  requests,
  setuptools,
  tqdm,
@@ -11,16 +10,14 @@

 buildPythonPackage rec {
  pname = "plexapi";
-  version = "4.17.1";
+  version = "4.17.2";
  pyproject = true;

-  disabled = pythonOlder "3.8";
-
  src = fetchFromGitHub {
    owner = "pkkid";
    repo = "python-plexapi";
    tag = version;
-    hash = "sha256-INnZ8aklr6mvawEy2XgI8mA9UD+S2KpQTsbHAZuYii0=";
+    hash = "sha256-GLuTNfK8FmTx6PuvhBheYgK7ZurxvmaY1Sqxo0QKRXM=";
  };

  build-system = [ setuptools ];
@@ -39,7 +36,7 @@ buildPythonPackage rec {
  meta = with lib; {
    description = "Python bindings for the Plex API";
    homepage = "https://github.com/pkkid/python-plexapi";
-    changelog = "https://github.com/pkkid/python-plexapi/releases/tag/${version}";
+    changelog = "https://github.com/pkkid/python-plexapi/releases/tag/${src.tag}";
    license = licenses.bsd3;
    maintainers = [ ];
  };
@@ -21,14 +21,14 @@

 buildPythonPackage rec {
  pname = "proton-vpn-api-core";
-  version = "4.13.1";
+  version = "4.13.2";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "ProtonVPN";
    repo = "python-proton-vpn-api-core";
    rev = "v${version}";
-    hash = "sha256-DJXKfUkV0ojL9UjM6cyFAOkdYhzZZU9L3z1ARjIQnUI=";
+    hash = "sha256-oFTlN/mi4TACmqbebKirYdqDEYzUejK4SKbKgFWONDo=";
  };

  build-system = [
@@ -13,12 +13,10 @@
  cachetools,
  click,
  fsspec,
-  google-auth,
  mmh3,
  pydantic,
  pyparsing,
  pyroaring,
-  ray,
  requests,
  rich,
  sortedcontainers,
@@ -31,17 +29,20 @@
  google-cloud-bigquery,
  # bodo,
  # daft,
+  datafusion,
  duckdb,
  pyarrow,
-  pyiceberg-core,
  boto3,
-  huggingface-hub,
+  google-auth,
  gcsfs,
+  huggingface-hub,
  thrift,
  kerberos,
  # thrift-sasl,
  pandas,
-  # pyiceberg-core,
+  polars,
+  pyiceberg-core,
+  ray,
  s3fs,
  python-snappy,
  psycopg2-binary,
@@ -50,7 +51,6 @@
  # tests
  azure-core,
  azure-storage-blob,
-  datafusion,
  fastavro,
  moto,
  pyspark,
@@ -100,12 +100,10 @@ buildPythonPackage rec {
    cachetools
    click
    fsspec
-    google-auth
    mmh3
    pydantic
    pyparsing
    pyroaring
-    ray
    requests
    rich
    sortedcontainers
@@ -127,6 +125,9 @@ buildPythonPackage rec {
    daft = [
      # daft
    ];
+    datafusion = [
+      datafusion
+    ];
    duckdb = [
      duckdb
      pyarrow
@@ -134,8 +135,8 @@ buildPythonPackage rec {
    dynamodb = [
      boto3
    ];
-    hf = [
-      huggingface-hub
+    gcp-auth = [
+      google-auth
    ];
    gcsfs = [
      gcsfs
@@ -143,6 +144,9 @@ buildPythonPackage rec {
    glue = [
      boto3
    ];
+    hf = [
+      huggingface-hub
+    ];
    hive = [
      thrift
    ];
@@ -155,15 +159,24 @@ buildPythonPackage rec {
      pandas
      pyarrow
    ];
+    polars = [
+      polars
+    ];
    pyarrow = [
      pyarrow
      pyiceberg-core
    ];
+    pyiceberg-core = [
+      pyiceberg-core
+    ];
    ray = [
      pandas
      pyarrow
      ray
    ];
+    rest-sigv4 = [
+      boto3
+    ];
    s3fs = [
      s3fs
    ];
@@ -2,6 +2,8 @@
  lib,
  buildPythonPackage,
  fetchFromGitHub,
+  hatch-vcs,
+  hatchling,
  pytest,
  mockito,
  pytestCheckHook,
@@ -9,20 +11,26 @@

 buildPythonPackage rec {
  pname = "pytest-mockito";
-  version = "0.0.4";
-
-  format = "setuptools";
+  version = "0.0.5";
+  pyproject = true;

  src = fetchFromGitHub {
    owner = "kaste";
    repo = "pytest-mockito";
    rev = version;
-    hash = "sha256-vY/i1YV1lo4mZvnxsXBOyaq31YTiF0BY6PTVwdVX10I=";
+    hash = "sha256-GX3esFlMtKRCTjvTPS4jrnK/mV9eIENvDXRo5sOqBGc=";
  };

+  build-system = [
+    hatch-vcs
+    hatchling
+  ];
+
  buildInputs = [ pytest ];

-  propagatedBuildInputs = [ mockito ];
+  dependencies = [ mockito ];
+
+  pythonImportsCheck = [ "pytest_mockito" ];

  nativeCheckInputs = [ pytestCheckHook ];

@@ -22,14 +22,14 @@
 }:
 buildPythonPackage rec {
  pname = "rendercanvas";
-  version = "2.4.1";
+  version = "2.4.2";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "pygfx";
    repo = "rendercanvas";
    tag = "v${version}";
-    hash = "sha256-8MK9Y5FGkgRQu2qx0LMYHMQSxd+GgevMofbdD6KB/lU=";
+    hash = "sha256-42jnCD0jSGkz6zLokzF1lXjnVP8E2yrPu8AQ80EKEI4=";
  };

  postPatch = ''
@@ -0,0 +1,132 @@
+{
+  lib,
+  stdenv,
+  fetchpatch,
+  python,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  cypari,
+  cython,
+  fxrays,
+  ipython,
+  libGL,
+  low-index,
+  packaging,
+  pickleshare,
+  plink,
+  pypng,
+  pyx,
+  snappy-15-knots,
+  snappy-manifolds,
+  spherogram,
+  sphinxHook,
+  sphinx-rtd-theme,
+  tkinter-gl,
+}:
+
+buildPythonPackage rec {
+  pname = "snappy";
+  version = "3.2";
+  pyproject = true;
+
+  outputs = [
+    "out"
+    "doc"
+  ];
+
+  src = fetchFromGitHub {
+    owner = "3-manifolds";
+    repo = "SnapPy";
+    tag = "${version}_as_released";
+    hash = "sha256-IwPxuyVDsL5yML+J06HTKlz52sYrPkohLJ0XDXDwTlo=";
+  };
+
+  patches = [
+    (fetchpatch {
+      name = "no-copy-doc.patch";
+      url = "https://github.com/3-manifolds/SnapPy/commit/c6aeeaaec7010a54e4ebdf2e8dad7b384c2ce8e5.patch";
+      hash = "sha256-OV3Qr5wO5UHNzVFTPTujIpp5ptel6gvAlcMgrJ8C0KY=";
+    })
+    (fetchpatch {
+      name = "fix-test-aarch64.patch";
+      url = "https://github.com/3-manifolds/SnapPy/commit/a8d57db39bc8f486746dc61027779168d0bc316a.patch";
+      hash = "sha256-RsuwaR+7UrVTKlPwQeHblTAN++La7b9BSMdFcJSiX5Q=";
+    })
+  ];
+
+  postPatch =
+    lib.optionalString stdenv.hostPlatform.isLinux ''
+      substituteInPlace setup.py \
+        --replace-fail "/usr/include/GL" "${libGL.dev}/include/GL"
+      substituteInPlace freedesktop/share/applications/snappy.desktop \
+        --replace-fail "Exec=/usr/bin/env python3 -m snappy.app" "Exec=SnapPy"
+    ''
+    + lib.optionalString stdenv.hostPlatform.isDarwin ''
+      substituteInPlace setup.py \
+        --replace-fail "poss_roots = [ ''' ]" "poss_roots = [ '$SDKROOT' ]"
+    '';
+
+  build-system = [
+    setuptools
+    cython
+  ];
+
+  nativeBuildInputs = [
+    sphinxHook
+    sphinx-rtd-theme
+  ];
+
+  buildInputs = [
+    libGL
+  ];
+
+  dependencies = [
+    cypari
+    fxrays
+    ipython
+    low-index
+    packaging
+    pickleshare
+    plink
+    pypng
+    pyx
+    snappy-manifolds
+    spherogram
+    tkinter-gl
+  ];
+
+  optional-dependencies.snappy-15-knots = [ snappy-15-knots ];
+
+  postInstall = lib.optionalString stdenv.hostPlatform.isLinux ''
+    mkdir -p $out/share
+    cp -r freedesktop/share/{applications,icons} $out/share
+  '';
+
+  sphinxRoot = "doc_src";
+
+  postInstallSphinx = ''
+    ln -s ''${!outputDoc}/share/doc/$name/html $out/${python.sitePackages}/snappy/doc
+  '';
+
+  pythonImportsCheck = [ "snappy" ];
+
+  checkPhase = ''
+    runHook preCheck
+    ${python.interpreter} -m snappy.test --skip-gui
+    runHook postCheck
+  '';
+
+  meta = {
+    description = "Studying the topology and geometry of 3-manifolds, with a focus on hyperbolic structures";
+    changelog = "https://snappy.computop.org/news.html";
+    mainProgram = "SnapPy";
+    homepage = "https://snappy.computop.org";
+    license = lib.licenses.gpl2Plus;
+    maintainers = with lib.maintainers; [
+      noiioiu
+      alejo7797
+    ];
+    platforms = lib.platforms.linux ++ lib.platforms.darwin;
+  };
+}
@@ -1,9 +1,11 @@
 {
  lib,
+  python,
  buildPythonPackage,
  fetchFromGitHub,
  setuptools-scm,
  tkinter,
+  tkgl,
 }:

 buildPythonPackage rec {
@@ -18,10 +20,28 @@ buildPythonPackage rec {
    hash = "sha256-ObI8EEQ7mAOAuV6f+Ld4HH0xkFzqiAZqHDvzjwPA/wM";
  };

+  postPatch = ''
+    # Remove compiled TkGL, we compile it ourselves
+    rm -r src/tkinter_gl/tk
+    # Platform-specific directories are only necessary when using compiled TkGL
+    substituteInPlace src/tkinter_gl/__init__.py \
+      --replace-fail "pkg_dir = os.path.join(__path__[0], 'tk', sys.platform,)" \
+                     "pkg_dir = os.path.join(__path__[0], 'tk')"
+  '';
+
  build-system = [ setuptools-scm ];

  dependencies = [ tkinter ];

+  postInstall =
+    let
+      pkgDir = "$out/${python.sitePackages}/tkinter_gl/tk";
+    in
+    ''
+      mkdir -p ${pkgDir}
+      ln -s ${tkgl}/lib/Tkgl* ${pkgDir}
+    '';
+
  pythonImportsCheck = [ "tkinter_gl" ];

  meta = {
@@ -8079,6 +8079,8 @@ self: super: with self; {

  langchain-chroma = callPackage ../development/python-modules/langchain-chroma { };

+  langchain-classic = callPackage ../development/python-modules/langchain-classic { };
+
  langchain-community = callPackage ../development/python-modules/langchain-community { };

  langchain-core = callPackage ../development/python-modules/langchain-core { };
@@ -8121,6 +8123,10 @@ self: super: with self; {

  langgraph-checkpoint = callPackage ../development/python-modules/langgraph-checkpoint { };

+  langgraph-checkpoint-mongodb =
+    callPackage ../development/python-modules/langgraph-checkpoint-mongodb
+      { };
+
  langgraph-checkpoint-postgres =
    callPackage ../development/python-modules/langgraph-checkpoint-postgres
      { };
@@ -8137,6 +8143,8 @@ self: super: with self; {

  langgraph-sdk = callPackage ../development/python-modules/langgraph-sdk { };

+  langgraph-store-mongodb = callPackage ../development/python-modules/langgraph-store-mongodb { };
+
  langid = callPackage ../development/python-modules/langid { };

  langsmith = callPackage ../development/python-modules/langsmith { };
@@ -17299,6 +17307,8 @@ self: super: with self; {

  snapcast = callPackage ../development/python-modules/snapcast { };

+  snappy = callPackage ../development/python-modules/snappy { };
+
  snappy-15-knots = callPackage ../development/python-modules/snappy-15-knots { };

  snappy-manifolds = callPackage ../development/python-modules/snappy-manifolds { };
				`@@ -0,0 +1 @@`
				`{ python3Packages }: python3Packages.toPythonApplication python3Packages.snappy`