From fb9d7f473b1bbb3ca35622c8209abbac073effaf Mon Sep 17 00:00:00 2001
From: Simon Hauser <simon.hauser@helsinki-systems.de>
Date: Fri, 7 Nov 2025 09:43:47 +0100
Subject: [PATCH 01/79] mariadb: 10.6.24, 10.11.15, 11.4.9, 11.8.5

---
 pkgs/servers/sql/mariadb/default.nix | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/pkgs/servers/sql/mariadb/default.nix b/pkgs/servers/sql/mariadb/default.nix
index 2ffe92954ffb..dee5bc449dda 100644
--- a/pkgs/servers/sql/mariadb/default.nix
+++ b/pkgs/servers/sql/mariadb/default.nix
@@ -374,22 +374,22 @@ self: {
   # see https://mariadb.org/about/#maintenance-policy for EOLs
   mariadb_106 = self.callPackage generic {
     # Supported until 2026-07-06
-    version = "10.6.23";
-    hash = "sha256-uvS/N6BR6JLnFyTudSiRrbfPxpzSjQhzXDYH0wxpPCM=";
+    version = "10.6.24";
+    hash = "sha256-SeK63GdFcMhg48t6LAFhJKpmKMlfMBMwMEEeXImqFy8=";
   };
   mariadb_1011 = self.callPackage generic {
     # Supported until 2028-02-16
-    version = "10.11.14";
-    hash = "sha256-ilccsU+x1ONmPY6Y89QgDAQvyLKkqqq0lYYN6ot9BS8=";
+    version = "10.11.15";
+    hash = "sha256-UxHoV2VAK95agamnsmQ6c3jSAxaigiv61LbdzxBHWaU=";
   };
   mariadb_114 = self.callPackage generic {
     # Supported until 2029-05-29
-    version = "11.4.8";
-    hash = "sha256-UvpNyixfgK/BZn1SOifAYXbZhTIpimsMMe1zUF9J4Vw=";
+    version = "11.4.9";
+    hash = "sha256-jkgcoptadARE1FRRyOotk3Ec9SXW+l0nvJUSz4lzsHU=";
   };
   mariadb_118 = self.callPackage generic {
     # Supported until 2028-06-04
-    version = "11.8.3";
-    hash = "sha256-EBSoXHaN6PnpxtS/C0JhfzsViL4a03H3FnTqMrhxGcA=";
+    version = "11.8.5";
+    hash = "sha256-vLc5RWnAiHfCg+FkmGlQRTG+6MqvowKI8HjjDZn8ufY=";
   };
 }

From 8355c996104f7861184dc4c896e0e93d078f6482 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 5 Jan 2026 08:42:14 +0000
Subject: [PATCH 02/79] mkvtoolnix: 96.0 -> 97.0

---
 pkgs/by-name/mk/mkvtoolnix/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/mk/mkvtoolnix/package.nix b/pkgs/by-name/mk/mkvtoolnix/package.nix
index 1fd01afbdbf5..6f64e2e7e032 100644
--- a/pkgs/by-name/mk/mkvtoolnix/package.nix
+++ b/pkgs/by-name/mk/mkvtoolnix/package.nix
@@ -52,14 +52,14 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "mkvtoolnix";
-  version = "96.0";
+  version = "97.0";
 
   src = fetchFromGitea {
     domain = "codeberg.org";
     owner = "mbunkus";
     repo = "mkvtoolnix";
     tag = "release-${finalAttrs.version}";
-    hash = "sha256-0jypoZK6lTWAQwcuOVH3EWtA9B01bVIay4HNgEDJIRI=";
+    hash = "sha256-M8A3d6BOed1A/Bvw25bNGphXNDXJvHdg26OjOdwsNf4=";
   };
 
   passthru = {

From 3e8f6ab2b42a3868fac63ae5aa26776f318bbffd Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 11 Jan 2026 00:28:29 +0000
Subject: [PATCH 03/79] swayr: 0.28.1 -> 0.28.2

---
 pkgs/by-name/sw/swayr/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/sw/swayr/package.nix b/pkgs/by-name/sw/swayr/package.nix
index 3efe0615ba3c..c10d2d883e3f 100644
--- a/pkgs/by-name/sw/swayr/package.nix
+++ b/pkgs/by-name/sw/swayr/package.nix
@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "swayr";
-  version = "0.28.1";
+  version = "0.28.2";
 
   src = fetchFromSourcehut {
     owner = "~tsdh";
     repo = "swayr";
     rev = "swayr-${version}";
-    hash = "sha256-4oGxjtrMiseKU/D9mVnehQSmXl0Cusm+D8dg4KJ3mOQ=";
+    hash = "sha256-uT8MYgH9kANQ0t+7jqjOOvQIZf5ImdQruZLLlCejwcc=";
   };
 
-  cargoHash = "sha256-1rvS0NZDcX1OKDZkWq3AyM2i9heOReA+OOOFVvNuTjw=";
+  cargoHash = "sha256-Aj4U2xyfNhf3HDSEd1SQ5TyO2MXn2/hrfnG0ZayzMtU=";
 
   patches = [
     ./icon-paths.patch

From 9d26d074ffd48766689a30f7026ac8a66708fab0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Tue, 20 Jan 2026 11:39:47 +0100
Subject: [PATCH 04/79] ktailctl: 0.21.3 -> 0.21.5

Diff: https://github.com/f-koehler/KTailctl/compare/v0.21.3...v0.21.5
---
 pkgs/by-name/kt/ktailctl/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/kt/ktailctl/package.nix b/pkgs/by-name/kt/ktailctl/package.nix
index ed947d9c9ab1..883b2c93e090 100644
--- a/pkgs/by-name/kt/ktailctl/package.nix
+++ b/pkgs/by-name/kt/ktailctl/package.nix
@@ -11,13 +11,13 @@
 }:
 
 let
-  version = "0.21.3";
+  version = "0.21.5";
 
   src = fetchFromGitHub {
     owner = "f-koehler";
     repo = "KTailctl";
     rev = "v${version}";
-    hash = "sha256-BKVq6d8CDmAOGULKoxXtlGbtgNu7wfsQnsyYV7PiFfc=";
+    hash = "sha256-DqPerb8NcNynMMmoG8Ld0ZEyhrNg2q17TaErAbXIHC0=";
   };
 
   goDeps =
@@ -25,7 +25,7 @@ let
       pname = "ktailctl-go-wrapper";
       inherit src version;
       modRoot = "src/wrapper";
-      vendorHash = "sha256-RhVZ1yXm+gJHM993Iw1XM/w/O1YiG6Mt4YMK+0JqRpg=";
+      vendorHash = "sha256-jA1yortzyaBOP9GenmARhBBNDdpkGo9DNz0CXlh3BIU=";
     }).goModules;
 in
 stdenv.mkDerivation {

From 3dc83ea0d3da69b6235dd1572754f99a98396d4d Mon Sep 17 00:00:00 2001
From: Vishal Bindal <77441928+vbindal@users.noreply.github.com>
Date: Sat, 24 Jan 2026 20:08:23 +0530
Subject: [PATCH 05/79] shopify-cli: run build-time pnpm with nodejs_22 to
 avoid pnpm/Node24 ENOTDIR

---
 pkgs/by-name/sh/shopify-cli/package.nix | 153 +++++++++++++-----------
 1 file changed, 82 insertions(+), 71 deletions(-)

diff --git a/pkgs/by-name/sh/shopify-cli/package.nix b/pkgs/by-name/sh/shopify-cli/package.nix
index a707c6a21b5a..3add5f99c62d 100644
--- a/pkgs/by-name/sh/shopify-cli/package.nix
+++ b/pkgs/by-name/sh/shopify-cli/package.nix
@@ -7,82 +7,93 @@
   pnpm,
   faketty,
   nodejs,
+  nodejs_22,
   versionCheckHook,
   makeBinaryWrapper,
   nix-update-script,
 }:
-stdenv.mkDerivation (finalAttrs: {
-  pname = "shopify";
-  version = "3.86.1";
+stdenv.mkDerivation (
+  finalAttrs:
+  let
+    pnpmForBuild = pnpm.override { nodejs = nodejs_22; };
+  in
+  {
+    pname = "shopify";
+    version = "3.86.1";
 
-  src = fetchFromGitHub {
-    owner = "shopify";
-    repo = "cli";
-    tag = finalAttrs.version;
-    hash = "sha256-wEddzW5/+qdtNTxdUs7YEA5vk6/KjrVOgWvIeo0o2ww=";
-  };
+    src = fetchFromGitHub {
+      owner = "shopify";
+      repo = "cli";
+      tag = finalAttrs.version;
+      hash = "sha256-wEddzW5/+qdtNTxdUs7YEA5vk6/KjrVOgWvIeo0o2ww=";
+    };
 
-  pnpmDeps = fetchPnpmDeps {
-    inherit (finalAttrs) pname version src;
-    fetcherVersion = 2;
-    hash = "sha256-JhyZpkrp78FECH6UKYYuhWF2w/mYW1BQG5FIsWh5GRE=";
-  };
+    pnpmDeps = fetchPnpmDeps {
+      inherit (finalAttrs) pname version src;
+      fetcherVersion = 2;
+      hash = "sha256-JhyZpkrp78FECH6UKYYuhWF2w/mYW1BQG5FIsWh5GRE=";
+    };
 
-  nativeBuildInputs = [
-    faketty
-    nodejs
-    pnpmConfigHook
-    pnpm
-    makeBinaryWrapper
-  ];
-
-  # workaround for https://github.com/nrwl/nx/issues/22445
-  buildPhase = ''
-    runHook preBuild
-
-    faketty pnpm run bundle-for-release --disableRemoteCache=true --nxBail=true --outputStyle=static
-
-    runHook postBuild
-  '';
-
-  installPhase = ''
-    runHook preInstall
-
-    mkdir -p $out/lib/node_modules/@shopify/cli/{dist,bin}
-    mkdir -p $out/bin
-    pushd packages/cli
-    rm -rf dist/*.map
-    mv dist/* $out/lib/node_modules/@shopify/cli/dist
-    mv bin/run.js $out/lib/node_modules/@shopify/cli/bin/run.js
-    mv package.json oclif.manifest.json $out/lib/node_modules/@shopify/cli
-    popd
-    # Install runtime dependencies
-    rm -rf node_modules
-    pnpm config set nodeLinker hoisted
-    pnpm install --offline --prod --force --ignore-scripts --frozen-lockfile
-    mv node_modules $out/lib/node_modules/@shopify/cli/node_modules
-
-    makeWrapper ${lib.getExe nodejs} $out/bin/shopify \
-      --add-flags "$out/lib/node_modules/@shopify/cli/bin/run.js"
-
-    runHook postInstall
-  '';
-
-  nativeInstallCheckInputs = [ versionCheckHook ];
-  doInstallCheck = true;
-
-  passthru.updateScript = nix-update-script { };
-
-  meta = {
-    platforms = lib.platforms.unix;
-    mainProgram = "shopify";
-    description = "CLI which helps you build against the Shopify platform faster";
-    homepage = "https://github.com/Shopify/cli";
-    changelog = "https://github.com/Shopify/cli/releases/tag/${finalAttrs.version}";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [
-      fd
-      onny
+    nativeBuildInputs = [
+      faketty
+      nodejs
+      pnpmConfigHook
+      pnpmForBuild
+      makeBinaryWrapper
     ];
-  };
-})
+
+    # workaround for https://github.com/nrwl/nx/issues/22445
+    buildPhase = ''
+      runHook preBuild
+
+      faketty pnpm run bundle-for-release --disableRemoteCache=true --nxBail=true --outputStyle=static
+
+      runHook postBuild
+    '';
+
+    installPhase = ''
+        runHook preInstall
+
+        mkdir -p $out/lib/node_modules/@shopify/cli/{dist,bin}
+        mkdir -p $out/bin
+        pushd packages/cli
+        rm -rf dist/*.map
+        mv dist/* $out/lib/node_modules/@shopify/cli/dist
+        mv bin/run.js $out/lib/node_modules/@shopify/cli/bin/run.js
+        mv package.json oclif.manifest.json $out/lib/node_modules/@shopify/cli
+        popd
+        # Install runtime dependencies
+        rm -rf node_modules
+      pnpm config set nodeLinker hoisted
+      # Avoid pnpm trying to replace directories with files (ENOTDIR) by
+      # preferring non-symlinked executables and removing --force which can
+      # exacerbate move/rename races during install.
+      pnpm config set preferSymlinkedExecutables false
+      pnpm install --offline --prod --ignore-scripts --frozen-lockfile
+        mv node_modules $out/lib/node_modules/@shopify/cli/node_modules
+
+        makeWrapper ${lib.getExe nodejs} $out/bin/shopify \
+          --add-flags "$out/lib/node_modules/@shopify/cli/bin/run.js"
+
+        runHook postInstall
+    '';
+
+    nativeInstallCheckInputs = [ versionCheckHook ];
+    doInstallCheck = true;
+
+    passthru.updateScript = nix-update-script { };
+
+    meta = {
+      platforms = lib.platforms.unix;
+      mainProgram = "shopify";
+      description = "CLI which helps you build against the Shopify platform faster";
+      homepage = "https://github.com/Shopify/cli";
+      changelog = "https://github.com/Shopify/cli/releases/tag/${finalAttrs.version}";
+      license = lib.licenses.mit;
+      maintainers = with lib.maintainers; [
+        fd
+        onny
+      ];
+    };
+  }
+)

From 3176c61b04f382fc8c76764e6f6474d81fe5fe06 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 28 Jan 2026 14:27:10 +0000
Subject: [PATCH 06/79] diesel-cli: 2.3.4 -> 2.3.6

---
 pkgs/by-name/di/diesel-cli/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/di/diesel-cli/package.nix b/pkgs/by-name/di/diesel-cli/package.nix
index 4b3b93417e24..c2a8ea156e3c 100644
--- a/pkgs/by-name/di/diesel-cli/package.nix
+++ b/pkgs/by-name/di/diesel-cli/package.nix
@@ -27,15 +27,15 @@ assert lib.assertMsg (lib.elem true [
 
 rustPlatform.buildRustPackage rec {
   pname = "diesel-cli";
-  version = "2.3.4";
+  version = "2.3.6";
 
   src = fetchCrate {
     inherit version;
     crateName = "diesel_cli";
-    hash = "sha256-92mXE+FHggig2TrY+Mf31MEtfxP3vf2J/mUZmW/bkCI=";
+    hash = "sha256-CNcZd/wIUg4fKnCeT0O7k6Svldg+1RY0xGmp+Y+UFA8=";
   };
 
-  cargoHash = "sha256-/5Bxn0gZfHCz5GVupmkmN1QKkef4q266e+FUbIN1x9E=";
+  cargoHash = "sha256-Yrf9vAVMLoWJpnKaM87gvQUPX2nw3USnU9/l1kYJpaY=";
 
   nativeBuildInputs = [
     installShellFiles

From a1b8f5915fcad6deafa2cd75b53cd6ff56e7dc52 Mon Sep 17 00:00:00 2001
From: Gus <58223632+thegu5@users.noreply.github.com>
Date: Sat, 31 Jan 2026 00:45:15 -0500
Subject: [PATCH 07/79] rpcemu: fix build with gcc 15

---
 pkgs/by-name/rp/rpcemu/package.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/by-name/rp/rpcemu/package.nix b/pkgs/by-name/rp/rpcemu/package.nix
index 50e1ea55d587..58d6335f2c0e 100644
--- a/pkgs/by-name/rp/rpcemu/package.nix
+++ b/pkgs/by-name/rp/rpcemu/package.nix
@@ -12,6 +12,8 @@ stdenv.mkDerivation (finalAttrs: {
   pname = "rpcemu";
   version = "0.9.5";
 
+  env.NIX_CFLAGS_COMPILE = "-std=gnu17";
+
   src = fetchhg {
     url = "http://www.home.marutan.net/hg/rpcemu";
     rev = "release_${finalAttrs.version}";

From f4f36570e1181b39c0f96afc5e6d6387d5291898 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 1 Feb 2026 05:18:06 +0000
Subject: [PATCH 08/79] etherpad-lite: 2.6.0 -> 2.6.1

---
 pkgs/by-name/et/etherpad-lite/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/et/etherpad-lite/package.nix b/pkgs/by-name/et/etherpad-lite/package.nix
index 42b7557c1b0c..524b84f3a3ea 100644
--- a/pkgs/by-name/et/etherpad-lite/package.nix
+++ b/pkgs/by-name/et/etherpad-lite/package.nix
@@ -12,13 +12,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "etherpad-lite";
-  version = "2.6.0";
+  version = "2.6.1";
 
   src = fetchFromGitHub {
     owner = "ether";
     repo = "etherpad-lite";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-zsW4hBilhhkP9H0rTLDr6S0BZBGb9XqGNKcftkoivOs=";
+    hash = "sha256-KzkrJv9eBzzt9PSJGhzC0lxCOfQImSTHcTVlea8HV70=";
   };
 
   patches = [
@@ -32,7 +32,7 @@ stdenv.mkDerivation (finalAttrs: {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_9;
     fetcherVersion = 1;
-    hash = "sha256-2nNjFdirgnciOf5kXwM4MXoBeidnnis4oi2AbYQvTHo=";
+    hash = "sha256-/GqRoGWIQhOwKlbe4I6yTuGs+IOn4crPhwHt4ALJ97E=";
   };
 
   nativeBuildInputs = [

From eb6cee5bc1c3344547f45dc4a2a5496c2ab636d1 Mon Sep 17 00:00:00 2001
From: Doron Behar <doron.behar@gmail.com>
Date: Sun, 1 Feb 2026 11:54:43 +0200
Subject: [PATCH 09/79] nixos/mpd: allow setting null nonBlockSettings

---
 nixos/modules/services/audio/mpd.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/nixos/modules/services/audio/mpd.nix b/nixos/modules/services/audio/mpd.nix
index 909f78d9a04e..fa19da5a2e86 100644
--- a/nixos/modules/services/audio/mpd.nix
+++ b/nixos/modules/services/audio/mpd.nix
@@ -26,7 +26,9 @@ let
           "\"" + (toString v) + "\""
       )
     ) a;
-  nonBlockSettings = lib.filterAttrs (n: v: !(builtins.isAttrs v || builtins.isList v)) cfg.settings;
+  nonBlockSettings = lib.filterAttrs (
+    n: v: !(builtins.isAttrs v || builtins.isList v || isNull v)
+  ) cfg.settings;
   pureBlockSettings = removeAttrs cfg.settings (builtins.attrNames nonBlockSettings);
   blocks =
     pureBlockSettings

From 654900e38e91d0935ad1d83f780f00947c1385dd Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Feb 2026 00:08:00 +0000
Subject: [PATCH 10/79] rizin: 0.8.1 -> 0.8.2

---
 pkgs/development/tools/analysis/rizin/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/tools/analysis/rizin/default.nix b/pkgs/development/tools/analysis/rizin/default.nix
index 2d6eeb289d6f..fa20ebdc8961 100644
--- a/pkgs/development/tools/analysis/rizin/default.nix
+++ b/pkgs/development/tools/analysis/rizin/default.nix
@@ -30,11 +30,11 @@
 let
   rizin = stdenv.mkDerivation rec {
     pname = "rizin";
-    version = "0.8.1";
+    version = "0.8.2";
 
     src = fetchurl {
       url = "https://github.com/rizinorg/rizin/releases/download/v${version}/rizin-src-v${version}.tar.xz";
-      hash = "sha256-7yseZSXX3DasQ1JblWdJwcyge/F8H+2LZkAtggEKTsI=";
+      hash = "sha256-FjDKUrroby/zfrIgaZ/IL5UbWxgIDt+j9Q3TalJsLZU=";
     };
 
     mesonFlags = [

From d313cd8ddcdfcf7149db57ab4cafdeb764d35589 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Feb 2026 00:32:46 +0000
Subject: [PATCH 11/79] networkmanager_dmenu: 2.6.2 -> 2.6.3

---
 pkgs/by-name/ne/networkmanager_dmenu/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ne/networkmanager_dmenu/package.nix b/pkgs/by-name/ne/networkmanager_dmenu/package.nix
index 5c31b173fee9..09caaaa022b1 100644
--- a/pkgs/by-name/ne/networkmanager_dmenu/package.nix
+++ b/pkgs/by-name/ne/networkmanager_dmenu/package.nix
@@ -14,13 +14,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "networkmanager_dmenu";
-  version = "2.6.2";
+  version = "2.6.3";
 
   src = fetchFromGitHub {
     owner = "firecat53";
     repo = "networkmanager-dmenu";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-NTkGKUZ3xA9ZWBLZgjIR5wrUXVhccGkGqnnm0a79p+Q=";
+    sha256 = "sha256-L5aO7mha37q2vjy9+j+TPiFBkqc4+deiZU9Om31HHBs=";
   };
 
   nativeBuildInputs = [ gobject-introspection ];

From 475ed21c86157799372c0558d971349599b69fb7 Mon Sep 17 00:00:00 2001
From: Kylie McClain <kylie@somas.is>
Date: Sat, 31 Jan 2026 13:36:00 -0500
Subject: [PATCH 12/79] kdotool: fix build using upstream patches

---
 pkgs/by-name/kd/kdotool/package.nix | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/pkgs/by-name/kd/kdotool/package.nix b/pkgs/by-name/kd/kdotool/package.nix
index a43d252b47d9..cfd67b179df5 100644
--- a/pkgs/by-name/kd/kdotool/package.nix
+++ b/pkgs/by-name/kd/kdotool/package.nix
@@ -1,6 +1,7 @@
 {
   lib,
   fetchFromGitHub,
+  fetchpatch,
   rustPlatform,
   pkg-config,
   dbus,
@@ -17,6 +18,18 @@ rustPlatform.buildRustPackage rec {
     hash = "sha256-qx4bWAFQcoLM/r4aNzmoZdjclw8ccAW8lKLda6ON1aQ=";
   };
 
+  patches = [
+    # Remove these two on next release.
+    (fetchpatch {
+      url = "https://github.com/jinliu/kdotool/commit/049e3f5620ad8c5484241d7d06d742bc17d423ed.patch";
+      hash = "sha256-VTpHlT6XMVRgJIeLjxZPHkzaYFZCYtS8IAD0mKZ8rzs=";
+    })
+    (fetchpatch {
+      url = "https://github.com/jinliu/kdotool/commit/e0a3bff3b5d9882033dd72836e5fcff572b64135.patch";
+      hash = "sha256-6IsV9O2h9N/FxGQRHS8qAbEqdr7282ziGza5K52vpPk=";
+    })
+  ];
+
   cargoHash = "sha256-ASR2zMwVCKeEZPYQNoO54J00eZyTn1i6FE0NBCJWSCs=";
 
   nativeBuildInputs = [ pkg-config ];

From 64c3b8942b9f1b97772391f9248a3de5ba3fa596 Mon Sep 17 00:00:00 2001
From: Doron Behar <doron.behar@gmail.com>
Date: Sun, 1 Feb 2026 11:55:06 +0200
Subject: [PATCH 13/79] nixos/mpd: allow setting null db_file

Fixes #485726 .
---
 nixos/modules/services/audio/mpd.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/services/audio/mpd.nix b/nixos/modules/services/audio/mpd.nix
index fa19da5a2e86..1801bdc989d8 100644
--- a/nixos/modules/services/audio/mpd.nix
+++ b/nixos/modules/services/audio/mpd.nix
@@ -223,7 +223,7 @@ in
             };
 
             db_file = lib.mkOption {
-              type = lib.types.path;
+              type = lib.types.nullOr lib.types.path;
               default = "${cfg.dataDir}/tag_cache";
               defaultText = lib.literalExpression ''"''${dataDir}/tag_cache"'';
               description = ''

From 47cc25e20947a2086ac8e9708c8e8902765befbe Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Feb 2026 09:48:38 +0000
Subject: [PATCH 14/79] commitlint: 20.3.1 -> 20.4.0

---
 pkgs/by-name/co/commitlint/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/co/commitlint/package.nix b/pkgs/by-name/co/commitlint/package.nix
index 8e9deef0b2ec..02f748e92e31 100644
--- a/pkgs/by-name/co/commitlint/package.nix
+++ b/pkgs/by-name/co/commitlint/package.nix
@@ -12,18 +12,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "commitlint";
-  version = "20.3.1";
+  version = "20.4.0";
 
   src = fetchFromGitHub {
     owner = "conventional-changelog";
     repo = "commitlint";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-0UAIpQdvs9oFsV1xL7bR9fAcmrtaqI/79mmmx+NRK4Q=";
+    hash = "sha256-Koi4twmDeCV716rGEUUmkt25gzBROBFL5y48qr+J/FA=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     inherit (finalAttrs) src;
-    hash = "sha256-ulQLIIWIeVRh5t+IV+980m5vbBG1dmQv9iaxCLznPY8=";
+    hash = "sha256-ihN9DmW46nKeFjcZWdxsutE+Q6ezdqPXO0i/xkNJdI0=";
   };
 
   nativeBuildInputs = [

From c8ef5279859f75aa3d1851e30ccc6d51df69a33c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Feb 2026 10:12:13 +0000
Subject: [PATCH 15/79] marksman: 2025-12-13 -> 2026-01-28

---
 pkgs/by-name/ma/marksman/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ma/marksman/package.nix b/pkgs/by-name/ma/marksman/package.nix
index f2acd86a7733..3703dca1f250 100644
--- a/pkgs/by-name/ma/marksman/package.nix
+++ b/pkgs/by-name/ma/marksman/package.nix
@@ -13,13 +13,13 @@ let
 in
 buildDotnetModule (finalAttrs: {
   inherit pname dotnet-sdk;
-  version = "2025-12-13";
+  version = "2026-01-28";
 
   src = fetchFromGitHub {
     owner = "artempyanykh";
     repo = "marksman";
     tag = finalAttrs.version;
-    hash = "sha256-HgRovSdalRRG1Gx0vNYhRDTbYO/vpz4hB1pgqcVjWF4=";
+    hash = "sha256-jqjf5nDxrw9W+PY9qo5j0dFiWGItRYHWiwEyCpn6ZKA=";
   };
 
   projectFile = "Marksman/Marksman.fsproj";

From 5f3644458c7139596169870b7ee758120d1a7c6a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 3 Feb 2026 08:37:19 +0000
Subject: [PATCH 16/79] meilisearch: 1.34.3 -> 1.35.0

---
 pkgs/by-name/me/meilisearch/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/me/meilisearch/package.nix b/pkgs/by-name/me/meilisearch/package.nix
index 844f540e3cee..8e8085a382d4 100644
--- a/pkgs/by-name/me/meilisearch/package.nix
+++ b/pkgs/by-name/me/meilisearch/package.nix
@@ -8,18 +8,18 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "meilisearch";
-  version = "1.34.3";
+  version = "1.35.0";
 
   src = fetchFromGitHub {
     owner = "meilisearch";
     repo = "meilisearch";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-aO2OEXnYnejG3/7rVtpgIuPJkFW2clj4HooIWoEWDcE=";
+    hash = "sha256-OMvJBauvL5El/OANN8ACf2MLwclcHnFQVVwul8kKijM=";
   };
 
   cargoBuildFlags = [ "--package=meilisearch" ];
 
-  cargoHash = "sha256-ZnztQOL+q+Bk+Vms5NiBVG2FrzKS0Cn+S3COWMe+tbw=";
+  cargoHash = "sha256-XHL9bfWRiZxzLCd0eLUWWn7KeH3h5bfuXPNQEO11+1c=";
 
   # Default features include mini dashboard which downloads something from the internet.
   buildNoDefaultFeatures = true;

From cef970e34c2011a48df6923c2ed1bf9583ebb9aa Mon Sep 17 00:00:00 2001
From: Sizhe Zhao <prc.zhao@outlook.com>
Date: Tue, 3 Feb 2026 16:09:10 +0000
Subject: [PATCH 17/79] python3Packages.fava-dashboards: 1.2.0 -> 2.0.0b4

---
 pkgs/development/python-modules/fava-dashboards/default.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/fava-dashboards/default.nix b/pkgs/development/python-modules/fava-dashboards/default.nix
index 9b1424be243e..0b45262c2e12 100644
--- a/pkgs/development/python-modules/fava-dashboards/default.nix
+++ b/pkgs/development/python-modules/fava-dashboards/default.nix
@@ -11,14 +11,14 @@
 }:
 buildPythonPackage rec {
   pname = "fava-dashboards";
-  version = "1.2.0";
+  version = "2.0.0b4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "andreasgerstmayr";
     repo = "fava-dashboards";
-    rev = "v${version}";
-    hash = "sha256-0524Mx93bJ4DKTb3gYps+C7dzhzuNd7YIvqeCtZz2f0=";
+    tag = "v${version}";
+    hash = "sha256-A00zKQ1vOMCrq/7onyKjf3+rj55dEXd0JvZBY2Ee568=";
   };
 
   build-system = [

From 3455c6e778b021509fc59470f8c50d7e0e799ba8 Mon Sep 17 00:00:00 2001
From: janhencic <jan@hencic.com>
Date: Sat, 31 Jan 2026 20:13:06 +0000
Subject: [PATCH 18/79] fish-lsp: 1.0.10 -> 1.1.3

---
 pkgs/by-name/fi/fish-lsp/package.nix | 47 ++++++++++++++--------------
 1 file changed, 24 insertions(+), 23 deletions(-)

diff --git a/pkgs/by-name/fi/fish-lsp/package.nix b/pkgs/by-name/fi/fish-lsp/package.nix
index eeafb87393e4..28a72e4b8a3b 100644
--- a/pkgs/by-name/fi/fish-lsp/package.nix
+++ b/pkgs/by-name/fi/fish-lsp/package.nix
@@ -12,21 +12,22 @@
   which,
   yarnBuildHook,
   yarnConfigHook,
+  testers,
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "fish-lsp";
-  version = "1.0.10";
+  version = "1.1.3";
 
   src = fetchFromGitHub {
     owner = "ndonfris";
     repo = "fish-lsp";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-OZiqEef4jE1H47mweVCzhaRCSsFdpgUdCSuhWRz2n2M=";
+    hash = "sha256-G0RaDXn3UNkdrlnjNH75ftvcLgAuiY09aXY3MXjaLEE=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = finalAttrs.src + "/yarn.lock";
-    hash = "sha256-N9P2mmqAfbg/Kpqx+vZbb+fhaD1I/3UjiJaEqFPJyO0=";
+    hash = "sha256-uLrdja3G/OwHZXkQbKXsPmGRIs08b3sCPtxtP1a52fg=";
   };
 
   nativeBuildInputs = [
@@ -39,16 +40,7 @@ stdenv.mkDerivation (finalAttrs: {
     fish
   ];
 
-  yarnBuildScript = "setup";
-
-  postBuild = ''
-    yarn --offline compile
-  '';
-
-  # We do it in postPatch, since it needs to be fixed before buildPhase
-  postPatch = ''
-    patchShebangs bin/fish-lsp
-  '';
+  yarnBuildScript = "build:npm";
 
   installPhase = ''
     runHook preInstall
@@ -61,7 +53,7 @@ stdenv.mkDerivation (finalAttrs: {
     cp -r . $out/share/fish-lsp
 
     makeWrapper ${lib.getExe nodejs} "$out/bin/fish-lsp" \
-      --add-flags "$out/share/fish-lsp/out/cli.js" \
+      --add-flags "$out/share/fish-lsp/dist/fish-lsp" \
       --prefix PATH : "${
         lib.makeBinPath [
           fish
@@ -79,15 +71,24 @@ stdenv.mkDerivation (finalAttrs: {
 
   doDist = false;
 
-  # fish-lsp adds tags for all its pre-release versions, which leads to
-  # incorrect r-ryantm bumps. This regex allows a dash at the end followed by a
-  # number (like `v1.0.9-1`). but it prevents matches with a dash followed by
-  # text (like `v1.0.11-pre.10`). or, of course, no dash at all
-  passthru.updateScript = nix-update-script {
-    extraArgs = [
-      "--version-regex"
-      "v(\\d+\\.\\d+\\.\\d+(?:-\\d+)?)$"
-    ];
+  passthru = {
+    # fish-lsp adds tags for all its pre-release versions, which leads to
+    # incorrect r-ryantm bumps. This regex allows a dash at the end followed by a
+    # number (like `v1.0.9-1`). but it prevents matches with a dash followed by
+    # text (like `v1.0.11-pre.10`). or, of course, no dash at all
+    updateScript = nix-update-script {
+      extraArgs = [
+        "--version-regex"
+        "v(\\d+\\.\\d+\\.\\d+(?:-\\d+)?)$"
+      ];
+    };
+
+    tests = {
+      version = testers.testVersion {
+        package = finalAttrs.finalPackage;
+        version = finalAttrs.version;
+      };
+    };
   };
 
   meta = {

From 8777487193a8d5f84156f217566e71c757655316 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 00:41:08 +0000
Subject: [PATCH 19/79] neo4j: 2025.12.1 -> 2026.01.3

---
 pkgs/by-name/ne/neo4j/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ne/neo4j/package.nix b/pkgs/by-name/ne/neo4j/package.nix
index cffd5fe97ceb..0c48d301834a 100644
--- a/pkgs/by-name/ne/neo4j/package.nix
+++ b/pkgs/by-name/ne/neo4j/package.nix
@@ -12,11 +12,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "neo4j";
-  version = "2025.12.1";
+  version = "2026.01.3";
 
   src = fetchurl {
     url = "https://neo4j.com/artifact.php?name=neo4j-community-${finalAttrs.version}-unix.tar.gz";
-    hash = "sha256-BsPXtsuVMuPsLAPyTQduOsrFq/5tc5T4VZENLBL3xUI=";
+    hash = "sha256-/ZN2GGA0qE7so4SXGy6ePoD45BFmUphD9JxI45CkhpQ=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

From 2064ee8466dd651f78b78cf52cf9778bac1b7456 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
Date: Thu, 5 Feb 2026 15:05:10 +0100
Subject: [PATCH 20/79] hspellDicts: remove broken package set

hspellDicts (aspell, hunspell, myspell Hebrew dictionaries) have been
marked broken since NixOS 24.05 and remain unfixed.

Per RFC 180, packages broken for a full release cycle are subject
to removal.

https://github.com/NixOS/rfcs/pull/180
---
 pkgs/development/libraries/hspell/dicts.nix | 58 ---------------------
 pkgs/top-level/aliases.nix                  |  1 +
 pkgs/top-level/all-packages.nix             |  2 -
 3 files changed, 1 insertion(+), 60 deletions(-)
 delete mode 100644 pkgs/development/libraries/hspell/dicts.nix

diff --git a/pkgs/development/libraries/hspell/dicts.nix b/pkgs/development/libraries/hspell/dicts.nix
deleted file mode 100644
index a2a47c5aef1a..000000000000
--- a/pkgs/development/libraries/hspell/dicts.nix
+++ /dev/null
@@ -1,58 +0,0 @@
-{
-  lib,
-  stdenv,
-  hspell,
-}:
-
-let
-  dict =
-    variant: a:
-    stdenv.mkDerivation (
-      {
-        inherit (hspell)
-          version
-          src
-          patches
-          postPatch
-          nativeBuildInputs
-          ;
-        buildFlags = [ variant ];
-
-        meta =
-          hspell.meta
-          // {
-            broken = true;
-            description = "${variant} Hebrew dictionary";
-          }
-          // (lib.optionalAttrs (a ? meta) a.meta);
-      }
-      // (removeAttrs a [ "meta" ])
-    );
-in
-{
-  recurseForDerivations = true;
-
-  aspell = dict "aspell" {
-    pname = "aspell-dict-he";
-
-    installPhase = ''
-      mkdir -p $out/lib/aspell
-      cp -v he_affix.dat he.wl $out/lib/aspell'';
-  };
-
-  myspell = dict "myspell" {
-    pname = "myspell-dict-he";
-
-    installPhase = ''
-      mkdir -p $out/lib/myspell
-      cp -v he.dic he.aff $out/lib/myspell'';
-  };
-
-  hunspell = dict "hunspell" {
-    pname = "hunspell-dict-he";
-
-    installPhase = ''
-      mkdir -p $out/lib
-      cp -rv hunspell $out/lib'';
-  };
-}
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 70cfdeb0ebca..0587e09557b6 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -846,6 +846,7 @@ mapAliases {
   hostPlatform = warnAlias "'hostPlatform' has been renamed to/replaced by 'stdenv.hostPlatform'" stdenv.hostPlatform; # Converted to warning 2025-10-28
   hpmyroom = throw "hpmyroom has been removed because it has been marked as broken since May 2024."; # Added 2025-10-11
   hpp-fcl = throw "'hpp-fcl' has been renamed to/replaced by 'coal'"; # Converted to throw 2025-10-27
+  hspellDicts = throw "'hspellDicts' has been removed due to being broken for more than a year; see RFC 180"; # Added 2026-02-05
   http-prompt = throw "'http-prompt' has been removed as it was broken and unmaintained upstream"; # Added 2025-11-26
   hydra_unstable = throw "'hydra_unstable' has been renamed to/replaced by 'hydra'"; # Converted to throw 2025-10-27
   i3-gaps = throw "'i3-gaps' has been renamed to/replaced by 'i3'"; # Converted to throw 2025-10-27
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 8a985cf429e7..8c3196abf664 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -6735,8 +6735,6 @@ with pkgs;
 
   highfive-mpi = highfive.override { hdf5 = hdf5-mpi; };
 
-  hspellDicts = callPackage ../development/libraries/hspell/dicts.nix { };
-
   hunspellDicts = recurseIntoAttrs (callPackages ../by-name/hu/hunspell/dictionaries.nix { });
 
   hunspellDictsChromium = recurseIntoAttrs (

From 7e12268b393635306d0332e197b7934e0f9823f6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fabian=20M=C3=B6ller?= <fabianm88@gmail.com>
Date: Thu, 5 Feb 2026 19:53:49 +0100
Subject: [PATCH 21/79] ausweisapp: 2.4.0 -> 2.4.1

---
 pkgs/by-name/au/ausweisapp/package.nix | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/au/ausweisapp/package.nix b/pkgs/by-name/au/ausweisapp/package.nix
index b69dfd9318c1..98a92fc9aff6 100644
--- a/pkgs/by-name/au/ausweisapp/package.nix
+++ b/pkgs/by-name/au/ausweisapp/package.nix
@@ -11,15 +11,21 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "ausweisapp";
-  version = "2.4.0";
+  version = "2.4.1";
 
   src = fetchFromGitHub {
     owner = "Governikus";
     repo = "AusweisApp2";
     rev = finalAttrs.version;
-    hash = "sha256-vMvCnYSj7y6ETGoudV1YJwI2bibXePSkR4nQ4T5HqTo=";
+    hash = "sha256-cLKF5QYDPngvN6+3p7B8YO/MYvDfD1fbnyEMZPmjj8w=";
   };
 
+  postPatch = ''
+    # avoid runtime QML cache to fix GUI loading issues
+    substituteInPlace src/ui/qml/CMakeLists.txt src/ui/qml/modules/CMakeLists.txt \
+      --replace-fail NO_CACHEGEN ""
+  '';
+
   nativeBuildInputs = [
     cmake
     pkg-config
@@ -41,6 +47,8 @@ stdenv.mkDerivation (finalAttrs: {
     qt6.qtwebsockets
   ];
 
+  env.LANG = "C.UTF-8";
+
   passthru = {
     tests.version = testers.testVersion {
       package = finalAttrs.finalPackage;

From cb2ce44bfb0b759cd369112b72ab24836ce9b2a0 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Feb 2026 19:54:13 +0000
Subject: [PATCH 22/79] protonmail-desktop: 1.11.0 -> 1.12.1

---
 pkgs/by-name/pr/protonmail-desktop/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/pr/protonmail-desktop/package.nix b/pkgs/by-name/pr/protonmail-desktop/package.nix
index dc5b58f3ee8d..24624b16f18e 100644
--- a/pkgs/by-name/pr/protonmail-desktop/package.nix
+++ b/pkgs/by-name/pr/protonmail-desktop/package.nix
@@ -10,9 +10,9 @@
 }:
 let
   mainProgram = "proton-mail";
-  version = "1.11.0";
-  linuxHash = "sha256-kmE4EHp3+Uka83MVfAK1V+MrVUN6YAb6TrZFc64IXLo=";
-  darwinHash = "sha256-IPOHSSHxdSaLkYX0deH1RFpi17liq0tenfpNniAlNUc=";
+  version = "1.12.1";
+  linuxHash = "sha256-CNrL/O2PMXaUVgvXbmrLFZphz7yV4BlRlr388nbMsoE=";
+  darwinHash = "sha256-y8KgHm8pIbLQAb1/pIApNBbsaEi5ldInY4VXNBiTQlI=";
 in
 stdenv.mkDerivation {
   pname = "protonmail-desktop";

From 1f0ccc367e0fb349d0062cbf8eccfab6bf96b5dc Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 03:13:43 +0000
Subject: [PATCH 23/79] slint-lsp: 1.14.1 -> 1.15.0

---
 pkgs/by-name/sl/slint-lsp/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/sl/slint-lsp/package.nix b/pkgs/by-name/sl/slint-lsp/package.nix
index f149fc0cd211..0d57a3097a16 100644
--- a/pkgs/by-name/sl/slint-lsp/package.nix
+++ b/pkgs/by-name/sl/slint-lsp/package.nix
@@ -18,14 +18,14 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "slint-lsp";
-  version = "1.14.1";
+  version = "1.15.0";
 
   src = fetchCrate {
     inherit (finalAttrs) pname version;
-    hash = "sha256-gVRoca4u1TVArDF226JWzLQJhUAIWA2JDyQ3Wo87AkA=";
+    hash = "sha256-+DGQB3HByzvRq7l/FmwfqyYzCWOjJ2pC/+M9GkybVLw=";
   };
 
-  cargoHash = "sha256-f3RLJnxoEUm7gsfqj86wXgfOj9woGmisONv0RZAQCGc=";
+  cargoHash = "sha256-P2h2lkN7t2OD/CcUgoGeadL+LyaDg1ObSnb7fTtg0Hc=";
 
   rpathLibs = [
     fontconfig

From 79442dad3dcbd9667555086ef4a061e38410d10e Mon Sep 17 00:00:00 2001
From: Sarah Clark <seclark@nextquestion.net>
Date: Sun, 25 Jan 2026 16:08:38 -0800
Subject: [PATCH 24/79] python3Packages.verilogae: disable on python 3.14

Segfaults in dependencies check
---
 pkgs/development/python-modules/verilogae/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/development/python-modules/verilogae/default.nix b/pkgs/development/python-modules/verilogae/default.nix
index a60e2498e9d0..85b7fded9846 100644
--- a/pkgs/development/python-modules/verilogae/default.nix
+++ b/pkgs/development/python-modules/verilogae/default.nix
@@ -2,6 +2,7 @@
   lib,
   buildPythonPackage,
   fetchFromGitHub,
+  pythonAtLeast,
   nix-update-script,
   setuptools-rust,
   rustPlatform,
@@ -26,6 +27,9 @@ buildPythonPackage.override { stdenv = llvmPackages.stdenv; } rec {
     hash = "sha256-TDE2Ewokhm2KSKe+sunUbV8KD3kaTSd5dB3CLCWGJ9U=";
   };
 
+  # segfault in pythonImportsCheckPhase
+  disabled = pythonAtLeast "3.14";
+
   postPatch = ''
     substituteInPlace openvaf/osdi/build.rs \
       --replace-fail "-fPIC" ""
@@ -66,6 +70,7 @@ buildPythonPackage.override { stdenv = llvmPackages.stdenv; } rec {
   meta = {
     description = "Verilog-A tool useful for compact model parameter extraction";
     homepage = "https://man.sr.ht/~dspom/openvaf_doc/verilogae/";
+    downloadPage = "https://github.com/OpenVAF/OpenVAF-Reloaded";
     license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [
       jasonodoom

From bde02a86a106bd27991a04f0935b6edaeaf681fc Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 09:55:07 +0000
Subject: [PATCH 25/79] remind: 06.02.02 -> 06.02.03

---
 pkgs/by-name/re/remind/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/re/remind/package.nix b/pkgs/by-name/re/remind/package.nix
index 813f4fa9e139..d9cd1c76a860 100644
--- a/pkgs/by-name/re/remind/package.nix
+++ b/pkgs/by-name/re/remind/package.nix
@@ -16,14 +16,14 @@
 
 tcl.mkTclDerivation rec {
   pname = "remind";
-  version = "06.02.02";
+  version = "06.02.03";
 
   src = fetchFromGitea {
     domain = "git.skoll.ca";
     owner = "Skollsoft-Public";
     repo = "Remind";
     rev = version;
-    hash = "sha256-SkQT651LjHCZJRtb4Itbzqhq9x5p05jYUam1XiYT4os=";
+    hash = "sha256-RAbu3XlFf11e6mrEAhXyXCzRsR7AiNJ6Ec5KU1i6t8I=";
   };
 
   propagatedBuildInputs = lib.optionals withGui [

From 61dd8cd61ba8f6d55c9e984d5ece3579605c747b Mon Sep 17 00:00:00 2001
From: Matthias Beyer <mail@beyermatthias.de>
Date: Fri, 6 Feb 2026 13:16:10 +0100
Subject: [PATCH 26/79] cargo-llvm-cov: 0.8.1 -> 0.8.3

Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
---
 pkgs/by-name/ca/cargo-llvm-cov/Cargo.lock  | 29 ++++++++++++++--------
 pkgs/by-name/ca/cargo-llvm-cov/package.nix |  9 +++++--
 2 files changed, 25 insertions(+), 13 deletions(-)

diff --git a/pkgs/by-name/ca/cargo-llvm-cov/Cargo.lock b/pkgs/by-name/ca/cargo-llvm-cov/Cargo.lock
index 17ee521dab6d..b1fa2d18e392 100644
--- a/pkgs/by-name/ca/cargo-llvm-cov/Cargo.lock
+++ b/pkgs/by-name/ca/cargo-llvm-cov/Cargo.lock
@@ -13,9 +13,9 @@ dependencies = [
 
 [[package]]
 name = "anyhow"
-version = "1.0.100"
+version = "1.0.101"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61"
+checksum = "5f0e0fee31ef5ed1ba1316088939cea399010ed7731dba877ed44aeb407a75ea"
 
 [[package]]
 name = "autocfg"
@@ -40,6 +40,12 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "build-context"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "86610cb1e9d45d65a31b574f9d69de003a76b6bb0b7d882396a5153fc547c935"
+
 [[package]]
 name = "camino"
 version = "1.2.2"
@@ -60,9 +66,10 @@ dependencies = [
 
 [[package]]
 name = "cargo-llvm-cov"
-version = "0.8.1"
+version = "0.8.3"
 dependencies = [
  "anyhow",
+ "build-context",
  "camino",
  "cargo-config2",
  "duct",
@@ -273,9 +280,9 @@ dependencies = [
 
 [[package]]
 name = "regex"
-version = "1.12.2"
+version = "1.12.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "843bc0191f75f3e22651ae5f1e72939ab2f72a4bc30fa80a066bd66edefc24d4"
+checksum = "e10754a14b9137dd7b1e3e5b0493cc9171fdd105e0ab477f51b72e7f3ac0e276"
 dependencies = [
  "aho-corasick",
  "memchr",
@@ -285,9 +292,9 @@ dependencies = [
 
 [[package]]
 name = "regex-automata"
-version = "0.4.13"
+version = "0.4.14"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5276caf25ac86c8d810222b3dbb938e512c55c6831a10f3e6ed1c93b84041f1c"
+checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
 dependencies = [
  "aho-corasick",
  "memchr",
@@ -296,9 +303,9 @@ dependencies = [
 
 [[package]]
 name = "regex-syntax"
-version = "0.8.8"
+version = "0.8.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7a2d987857b319362043e95f5353c0535c1f58eec5336fdfcf626430af7def58"
+checksum = "a96887878f22d7bad8a3b6dc5b7440e0ada9a245242924394987b21cf2210a4c"
 
 [[package]]
 name = "rustc-demangle"
@@ -627,6 +634,6 @@ dependencies = [
 
 [[package]]
 name = "zmij"
-version = "1.0.17"
+version = "1.0.19"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "02aae0f83f69aafc94776e879363e9771d7ecbffe2c7fbb6c14c5e00dfe88439"
+checksum = "3ff05f8caa9038894637571ae6b9e29466c1f4f829d26c9b28f869a29cbe3445"
diff --git a/pkgs/by-name/ca/cargo-llvm-cov/package.nix b/pkgs/by-name/ca/cargo-llvm-cov/package.nix
index 023164ff40d9..6c4f39d2aa91 100644
--- a/pkgs/by-name/ca/cargo-llvm-cov/package.nix
+++ b/pkgs/by-name/ca/cargo-llvm-cov/package.nix
@@ -25,7 +25,7 @@
 
 let
   pname = "cargo-llvm-cov";
-  version = "0.8.1";
+  version = "0.8.3";
 
   owner = "taiki-e";
   homepage = "https://github.com/${owner}/${pname}";
@@ -42,7 +42,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     inherit owner;
     repo = "cargo-llvm-cov";
     rev = "v${version}";
-    sha256 = "sha256-w7UHfb5g8g9AYGbxoUpmiBsFEnSuc/RBEAZAYwoFjRg=";
+    sha256 = "sha256-XMv0li/zBNE3FJpcIpja6SqNp4f5GPOET5rfPWLIzRw=";
   };
 
   # Upstream doesn't include the lockfile so we need to add it back
@@ -73,6 +73,11 @@ rustPlatform.buildRustPackage (finalAttrs: {
     git add .
   '';
 
+  checkFlags = [
+    "--skip=trybuild"
+    "--skip=ui_test"
+  ];
+
   meta = {
     inherit homepage;
     changelog = homepage + "/blob/v${version}/CHANGELOG.md";

From 713fb399e2ef41c8bc6cceae1594eb6acf1cf254 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 13:29:59 +0000
Subject: [PATCH 27/79] mattermostLatest: 11.3.0 -> 11.4.0

---
 pkgs/by-name/ma/mattermostLatest/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ma/mattermostLatest/package.nix b/pkgs/by-name/ma/mattermostLatest/package.nix
index 2dafcccd429a..477cc2a5286c 100644
--- a/pkgs/by-name/ma/mattermostLatest/package.nix
+++ b/pkgs/by-name/ma/mattermostLatest/package.nix
@@ -11,10 +11,10 @@ mattermost.override {
     # and make sure the version regex is up to date here.
     # Ensure you also check ../mattermost/package.nix for ESR releases.
     regex = "^v(11\\.[0-9]+\\.[0-9]+)$";
-    version = "11.3.0";
-    srcHash = "sha256-D5LR3kk9HO8vuvykCgaV5k5Y/M7t63afxXj1iUBS1j8=";
-    vendorHash = "sha256-3Ic8ogcLLzcFOmBzhFnsh16hVvhyIsfDeNgZevQlL9A=";
-    npmDepsHash = "sha256-w54D5HMLW5wP6ercgWXv3Hb7Ayrj3M1SvNoUu1aU2Bk=";
+    version = "11.4.0";
+    srcHash = "sha256-w+/slirvft6OQHLmZHwy92GEy0SSJ+5uV/8e3xOB2CE=";
+    vendorHash = "sha256-8Q5jiEsLy3hZLL81tU3xG8zp65KpAYsjSE9jit77fEI=";
+    npmDepsHash = "sha256-MrFV87WslmFxil9zW5JmoT5psM0GAJvmDK3WfkxpoUo=";
     lockfileOverlay = ''
       unlock(.; "@floating-ui/react"; "channels/node_modules/@floating-ui/react")
     '';

From d043e63d8fe2eb43e7a740475fd28216d3f92f93 Mon Sep 17 00:00:00 2001
From: Andreas Wendleder <andreas.wendleder@gmail.com>
Date: Fri, 6 Feb 2026 17:50:47 +0100
Subject: [PATCH 28/79] netgen-vlsi: 1.5.315 -> 1.5.316

- Add passthru.updateScript for automated updates
---
 pkgs/by-name/ne/netgen-vlsi/package.nix | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ne/netgen-vlsi/package.nix b/pkgs/by-name/ne/netgen-vlsi/package.nix
index 8992ffddc133..154f4435b534 100644
--- a/pkgs/by-name/ne/netgen-vlsi/package.nix
+++ b/pkgs/by-name/ne/netgen-vlsi/package.nix
@@ -5,17 +5,18 @@
   tcl,
   tk,
   m4,
+  nix-update-script,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "netgen";
-  version = "1.5.315";
+  version = "1.5.316";
 
   src = fetchFromGitHub {
     owner = "RTimothyEdwards";
     repo = "netgen";
     tag = finalAttrs.version;
-    hash = "sha256-dXCZm5zVwn23y7DLPSUrTKGMcu/FjdVKsyry59lEt7U=";
+    hash = "sha256-Cw/JZXzkvstfCD3oyWhZ3sWZcXtpGBkZhZIHjq2vQ6Q=";
   };
 
   strictDeps = true;
@@ -42,6 +43,8 @@ stdenv.mkDerivation (finalAttrs: {
     sed -i "1s|#!/bin/bash|#!${stdenv.shell}|" $out/bin/netgen
   '';
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "LVS tool for VLSI circuit netlists";
     mainProgram = "netgen";

From f8e44576119ffe2d294a80b29a4448c12d39c5d4 Mon Sep 17 00:00:00 2001
From: Aos Dabbagh <25783780+aos@users.noreply.github.com>
Date: Mon, 22 Dec 2025 03:08:45 -0500
Subject: [PATCH 29/79] python3Packages.json-schema-to-pydantic: init at 0.4.7

this is required for llm-anthropic v0.23
---
 .../json-schema-to-pydantic/default.nix       | 41 +++++++++++++++++++
 pkgs/top-level/python-packages.nix            |  2 +
 2 files changed, 43 insertions(+)
 create mode 100644 pkgs/development/python-modules/json-schema-to-pydantic/default.nix

diff --git a/pkgs/development/python-modules/json-schema-to-pydantic/default.nix b/pkgs/development/python-modules/json-schema-to-pydantic/default.nix
new file mode 100644
index 000000000000..95fe4833768e
--- /dev/null
+++ b/pkgs/development/python-modules/json-schema-to-pydantic/default.nix
@@ -0,0 +1,41 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  hatchling,
+  hatch-vcs,
+  pydantic,
+  pytestCheckHook,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "json-schema-to-pydantic";
+  version = "0.4.9";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "richard-gyiko";
+    repo = "json-schema-to-pydantic";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-j3E3jkb9l5s4JnGeBACG4/GznB1F+S2Fh0ncZEvvXuM=";
+  };
+
+  build-system = [
+    hatchling
+    hatch-vcs
+  ];
+
+  dependencies = [ pydantic ];
+
+  nativeCheckInputs = [ pytestCheckHook ];
+
+  pythonImportsCheck = [ "json_schema_to_pydantic" ];
+
+  meta = {
+    description = "Generates Pydantic v2 models from JSON Schema definitions";
+    homepage = "https://github.com/richard-gyiko/json-schema-to-pydantic";
+    changelog = "https://github.com/richard-gyiko/json-schema-to-pydantic/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ aos ];
+  };
+})
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 566ff9ef990e..2a25d9f19ead 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -7818,6 +7818,8 @@ self: super: with self; {
 
   json-schema-for-humans = callPackage ../development/python-modules/json-schema-for-humans { };
 
+  json-schema-to-pydantic = callPackage ../development/python-modules/json-schema-to-pydantic { };
+
   json-stream = callPackage ../development/python-modules/json-stream { };
 
   json-stream-rs-tokenizer = callPackage ../development/python-modules/json-stream-rs-tokenizer { };

From 6d8ffea89217a81866905574e9df26e0fcc6b97c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Fri, 6 Feb 2026 18:14:31 -0800
Subject: [PATCH 30/79] bitwarden-desktop: 2025.12.1 -> 2026.1.0

Diff: https://github.com/bitwarden/clients/compare/desktop-v2025.12.1...desktop-v2026.1.0

Changelog: https://github.com/bitwarden/clients/releases/tag/desktop-v2026.1.0
---
 pkgs/by-name/bi/bitwarden-desktop/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/bi/bitwarden-desktop/package.nix b/pkgs/by-name/bi/bitwarden-desktop/package.nix
index 026db2c1c5a9..a9d5f4038ea4 100644
--- a/pkgs/by-name/bi/bitwarden-desktop/package.nix
+++ b/pkgs/by-name/bi/bitwarden-desktop/package.nix
@@ -33,13 +33,13 @@ let
 in
 buildNpmPackage' rec {
   pname = "bitwarden-desktop";
-  version = "2025.12.1";
+  version = "2026.1.0";
 
   src = fetchFromGitHub {
     owner = "bitwarden";
     repo = "clients";
     rev = "desktop-v${version}";
-    hash = "sha256-yER9LDFwTQkOdjB84UhEiWUDE+5Qa2vlRzq1/Qc/soY=";
+    hash = "sha256-Z6YMAzn1J5n27qqx3PsaMmD9uIK7FTEl1/tEzePD+6Y=";
   };
 
   patches = [
@@ -84,7 +84,7 @@ buildNpmPackage' rec {
     "--ignore-scripts"
   ];
   npmWorkspace = "apps/desktop";
-  npmDepsHash = "sha256-hczwOG30ad5oaTU7APPrW+a7LmjPch+P4dZSb7B+2eU=";
+  npmDepsHash = "sha256-/S0itw2m2k7GiiwBEzeqFQ8oUYD4yIO4knTTn37qkfA=";
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit
@@ -94,7 +94,7 @@ buildNpmPackage' rec {
       cargoRoot
       patches
       ;
-    hash = "sha256-NaomkYqkRW5ir6DI5t0JqoewN8QZtSibGKW93MwsqPQ=";
+    hash = "sha256-Q1FWH46EcITEwLquv52lnLnhbetD8bpTUl3agFZQ0Es=";
   };
   cargoRoot = "apps/desktop/desktop_native";
 

From 99f256e1e41d7d672113fee8fb43a65a4493adae Mon Sep 17 00:00:00 2001
From: wxt <3264117476@qq.com>
Date: Thu, 5 Feb 2026 09:25:07 +0000
Subject: [PATCH 31/79] python3Packages.globus-sdk: 3.63.0 -> 4.3.1

---
 pkgs/development/python-modules/globus-sdk/default.nix | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/globus-sdk/default.nix b/pkgs/development/python-modules/globus-sdk/default.nix
index 40d92d6f04f4..110a2d6d58ca 100644
--- a/pkgs/development/python-modules/globus-sdk/default.nix
+++ b/pkgs/development/python-modules/globus-sdk/default.nix
@@ -13,14 +13,14 @@
 
 buildPythonPackage rec {
   pname = "globus-sdk";
-  version = "3.63.0";
+  version = "4.3.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "globus";
     repo = "globus-sdk-python";
     tag = version;
-    hash = "sha256-ucVDjOV1NmHguwXSWbomNz9gjrxpeGmoZqF/Je6BL/4=";
+    hash = "sha256-q3fYU8/r6IfoC55iN83jAGdFrhnXx7bTtvuf0R4RBv4=";
   };
 
   build-system = [ setuptools ];
@@ -35,6 +35,8 @@ buildPythonPackage rec {
     pyjwt
   ];
 
+  __darwinAllowLocalNetworking = true;
+
   nativeCheckInputs = [ pytestCheckHook ];
 
   checkInputs = [

From e5047323ceac3bfd7da232b9e094d852df2c60c1 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 05:13:15 +0000
Subject: [PATCH 32/79] oxlint: 1.42.0 -> 1.43.0

---
 pkgs/by-name/ox/oxlint/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ox/oxlint/package.nix b/pkgs/by-name/ox/oxlint/package.nix
index d527b718f5e2..ef5503d188b1 100644
--- a/pkgs/by-name/ox/oxlint/package.nix
+++ b/pkgs/by-name/ox/oxlint/package.nix
@@ -12,16 +12,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "oxlint";
-  version = "1.42.0";
+  version = "1.43.0";
 
   src = fetchFromGitHub {
     owner = "oxc-project";
     repo = "oxc";
     tag = "oxlint_v${finalAttrs.version}";
-    hash = "sha256-EAM1DxA/TqnIRN5Tlvg5/jvbyOUtSuwQ4RCBeO9esCw=";
+    hash = "sha256-J32iHYWfUSPgs0TbB9kHxwgdPB7/cPvKTI28K5nUlVU=";
   };
 
-  cargoHash = "sha256-okwkhcT6mekIvo52T8eSrXUcp/LQhcEYvHyIc5CLdrE=";
+  cargoHash = "sha256-2W0X9uy1V6cKJTjIIWNfd5vhptITrmh6uJYeCleXG8E=";
 
   nativeBuildInputs = [
     cmake

From 4b3192c937be64b71d94c96c400d630c5a6c652e Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 07:49:43 +0000
Subject: [PATCH 33/79] peazip: 10.8.0 -> 10.9.0

---
 pkgs/by-name/pe/peazip/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/pe/peazip/package.nix b/pkgs/by-name/pe/peazip/package.nix
index 01a32227eeff..ef9831b286e9 100644
--- a/pkgs/by-name/pe/peazip/package.nix
+++ b/pkgs/by-name/pe/peazip/package.nix
@@ -24,13 +24,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "peazip";
-  version = "10.8.0";
+  version = "10.9.0";
 
   src = fetchFromGitHub {
     owner = "peazip";
     repo = "peazip";
     rev = finalAttrs.version;
-    hash = "sha256-A95rFW5kZ+gUbaLkAXRKu8jaBb43ONX+2wZXDWfT2G4=";
+    hash = "sha256-o1gIXq+8qpQcPYcC0py1aB4uWXqBYwU8MRgEFsFS948=";
   };
   sourceRoot = "${finalAttrs.src.name}/peazip-sources";
 

From 6921352bab36835b4f4ed47389fa915572007278 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 09:54:27 +0000
Subject: [PATCH 34/79] python3Packages.langgraph-checkpoint-postgres: 3.0.2 ->
 3.0.4

---
 .../python-modules/langgraph-checkpoint-postgres/default.nix  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/langgraph-checkpoint-postgres/default.nix b/pkgs/development/python-modules/langgraph-checkpoint-postgres/default.nix
index 931342884770..67bb4347c7d7 100644
--- a/pkgs/development/python-modules/langgraph-checkpoint-postgres/default.nix
+++ b/pkgs/development/python-modules/langgraph-checkpoint-postgres/default.nix
@@ -26,14 +26,14 @@
 
 buildPythonPackage rec {
   pname = "langgraph-checkpoint-postgres";
-  version = "3.0.2";
+  version = "3.0.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "langchain-ai";
     repo = "langgraph";
     tag = "checkpointpostgres==${version}";
-    hash = "sha256-V+S53ZYTCsaV7WMwuEMf+/NFyvy+8M6haO5oMf7o6wk=";
+    hash = "sha256-fuRfQRepdNAp+gnBbvLTREE8dwdtplKvIUQmDDk1QMY=";
   };
 
   postgresqlTestSetupPost = ''

From 4487cd6c8599beb73b7f1b1cf95a8ddda9a60cf8 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 10:30:53 +0000
Subject: [PATCH 35/79] ggml: 0.9.5 -> 0.9.6

---
 pkgs/by-name/gg/ggml/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gg/ggml/package.nix b/pkgs/by-name/gg/ggml/package.nix
index f4ab7cd27c79..af26e0d1ffde 100644
--- a/pkgs/by-name/gg/ggml/package.nix
+++ b/pkgs/by-name/gg/ggml/package.nix
@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "ggml";
-  version = "0.9.5";
+  version = "0.9.6";
 
   src = fetchFromGitHub {
     owner = "ggml-org";
     repo = "ggml";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-lNrON8vKUJU7cxfpRKsVCIWqZj3xtkaf/Fv8zNZFN6o=";
+    hash = "sha256-qi2ztJdDn3QVy6O1sAOHnWiVn8iDfEM5ijwuvDRMJ1E=";
   };
 
   # The cmake package does not handle absolute CMAKE_INSTALL_LIBDIR and CMAKE_INSTALL_INCLUDEDIR

From e030e01bbc233170db18a9d73abbe6c02410647f Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 20 Jan 2026 08:08:42 +0000
Subject: [PATCH 36/79] wofi: 1.5.2 -> 1.5.3

---
 pkgs/by-name/wo/wofi/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/wo/wofi/package.nix b/pkgs/by-name/wo/wofi/package.nix
index 6c0abcef65f2..e054178f7d22 100644
--- a/pkgs/by-name/wo/wofi/package.nix
+++ b/pkgs/by-name/wo/wofi/package.nix
@@ -12,7 +12,7 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "wofi";
-  version = "1.5.2";
+  version = "1.5.3";
 
   outputs = [
     "out"
@@ -22,8 +22,8 @@ stdenv.mkDerivation (finalAttrs: {
   src = fetchFromSourcehut {
     repo = "wofi";
     owner = "~scoopta";
-    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-j0KkmRfTRYpzfqHdIsOXk+pYHCrdzICD1Dm847C5ihs=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-rMvDWJx07Q19ieFlt0e3/zx2ZP0jJfURIwMiGFPmLis=";
     vc = "hg";
   };
 

From 3cff2540db45764cab2f855e7fbd4211962f30de Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 19 Jan 2026 23:46:13 +0000
Subject: [PATCH 37/79] mblaze: 1.3 -> 1.4

---
 pkgs/by-name/mb/mblaze/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/mb/mblaze/package.nix b/pkgs/by-name/mb/mblaze/package.nix
index d9a187726dfd..6e467f50273d 100644
--- a/pkgs/by-name/mb/mblaze/package.nix
+++ b/pkgs/by-name/mb/mblaze/package.nix
@@ -15,7 +15,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "mblaze";
-  version = "1.3";
+  version = "1.4";
 
   nativeBuildInputs = [
     installShellFiles
@@ -29,8 +29,8 @@ stdenv.mkDerivation (finalAttrs: {
   src = fetchFromGitHub {
     owner = "leahneukirchen";
     repo = "mblaze";
-    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-398wiXJ/iG9ZfPGDZc57xH37lft3NpEZuLE0Qhb2GGc=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-v7g4kzCZFkkZ/VPogDObduFzgjBVQFziBzHocAdEw9A=";
   };
 
   makeFlags = [ "PREFIX=$(out)" ];

From 1ac522883318e29e06c770aad60137260cafc785 Mon Sep 17 00:00:00 2001
From: jaredmontoya <49511278+jaredmontoya@users.noreply.github.com>
Date: Sat, 7 Feb 2026 12:02:22 +0100
Subject: [PATCH 38/79] vimPlugins.easyread-nvim: init at 0-unstable-2023-04-22

https://github.com/JellyApple102/easyread.nvim
---
 pkgs/applications/editors/vim/plugins/generated.nix | 13 +++++++++++++
 .../editors/vim/plugins/vim-plugin-names            |  1 +
 2 files changed, 14 insertions(+)

diff --git a/pkgs/applications/editors/vim/plugins/generated.nix b/pkgs/applications/editors/vim/plugins/generated.nix
index 0ebd96e5cff6..9f7df017d1a3 100644
--- a/pkgs/applications/editors/vim/plugins/generated.nix
+++ b/pkgs/applications/editors/vim/plugins/generated.nix
@@ -4835,6 +4835,19 @@ final: prev: {
     meta.hydraPlatforms = [ ];
   };
 
+  easyread-nvim = buildVimPlugin {
+    pname = "easyread.nvim";
+    version = "0-unstable-2023-04-22";
+    src = fetchFromGitHub {
+      owner = "JellyApple102";
+      repo = "easyread.nvim";
+      rev = "0b07e315a4cd7d700c4a794bdddbec79fdc2628b";
+      hash = "sha256-RSk/KViWw48IX0NcC5hW4IGawZ6prBYxPa/kXPN4KSI=";
+    };
+    meta.homepage = "https://github.com/JellyApple102/easyread.nvim/";
+    meta.hydraPlatforms = [ ];
+  };
+
   echodoc-vim = buildVimPlugin {
     pname = "echodoc.vim";
     version = "0-unstable-2022-11-27";
diff --git a/pkgs/applications/editors/vim/plugins/vim-plugin-names b/pkgs/applications/editors/vim/plugins/vim-plugin-names
index b09cba248435..bad59bae6476 100644
--- a/pkgs/applications/editors/vim/plugins/vim-plugin-names
+++ b/pkgs/applications/editors/vim/plugins/vim-plugin-names
@@ -370,6 +370,7 @@ https://github.com/stevearc/dressing.nvim/,,
 https://github.com/Bekaboo/dropbar.nvim/,HEAD,
 https://github.com/earthly/earthly.vim/,HEAD,
 https://github.com/GustavEikaas/easy-dotnet.nvim/,HEAD,
+https://github.com/JellyApple102/easyread.nvim/,HEAD,
 https://github.com/Shougo/echodoc.vim/,,
 https://github.com/ph1losof/ecolog.nvim/,HEAD,
 https://github.com/sainnhe/edge/,,

From adfb1fd3ed369f399c3e9d5a291af2c8f9f6fed6 Mon Sep 17 00:00:00 2001
From: jaredmontoya <49511278+jaredmontoya@users.noreply.github.com>
Date: Sat, 7 Feb 2026 12:03:56 +0100
Subject: [PATCH 39/79] vimPlugins.nvim-silicon: init at
 1.0.0-unstable-2025-01-09

https://github.com/michaelrommel/nvim-silicon
---
 pkgs/applications/editors/vim/plugins/generated.nix | 13 +++++++++++++
 .../editors/vim/plugins/vim-plugin-names            |  1 +
 2 files changed, 14 insertions(+)

diff --git a/pkgs/applications/editors/vim/plugins/generated.nix b/pkgs/applications/editors/vim/plugins/generated.nix
index 0ebd96e5cff6..1e22df0c1f39 100644
--- a/pkgs/applications/editors/vim/plugins/generated.nix
+++ b/pkgs/applications/editors/vim/plugins/generated.nix
@@ -11929,6 +11929,19 @@ final: prev: {
     meta.hydraPlatforms = [ ];
   };
 
+  nvim-silicon = buildVimPlugin {
+    pname = "nvim-silicon";
+    version = "1.0.0-unstable-2025-01-09";
+    src = fetchFromGitHub {
+      owner = "michaelrommel";
+      repo = "nvim-silicon";
+      rev = "7f66bda8f60c97a5bf4b37e5b8acb0e829ae3c32";
+      hash = "sha256-XiYn/L2e/B+6LTjak3jAwRgnZ3gCbsyA0J61Dd+jZv4=";
+    };
+    meta.homepage = "https://github.com/michaelrommel/nvim-silicon/";
+    meta.hydraPlatforms = [ ];
+  };
+
   nvim-snippets = buildVimPlugin {
     pname = "nvim-snippets";
     version = "1.0.0-unstable-2024-07-10";
diff --git a/pkgs/applications/editors/vim/plugins/vim-plugin-names b/pkgs/applications/editors/vim/plugins/vim-plugin-names
index b09cba248435..c70e7c7e4a5c 100644
--- a/pkgs/applications/editors/vim/plugins/vim-plugin-names
+++ b/pkgs/applications/editors/vim/plugins/vim-plugin-names
@@ -916,6 +916,7 @@ https://github.com/chrisgrieser/nvim-scissors/,HEAD,
 https://github.com/petertriho/nvim-scrollbar/,HEAD,
 https://github.com/dstein64/nvim-scrollview/,,
 https://github.com/s1n7ax/nvim-search-and-replace/,HEAD,
+https://github.com/michaelrommel/nvim-silicon/,HEAD,
 https://github.com/garymjr/nvim-snippets/,,
 https://github.com/dcampos/nvim-snippy/,HEAD,
 https://github.com/ishan9299/nvim-solarized-lua/,,

From 931c0cc582cfe379a5351a5c1cf823169e296ef0 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 25 Jan 2026 17:10:04 +0000
Subject: [PATCH 40/79] rspamd: 3.14.2 -> 3.14.3

---
 pkgs/by-name/rs/rspamd/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/rs/rspamd/package.nix b/pkgs/by-name/rs/rspamd/package.nix
index a8ace2820b3c..e002e13c9d62 100644
--- a/pkgs/by-name/rs/rspamd/package.nix
+++ b/pkgs/by-name/rs/rspamd/package.nix
@@ -39,13 +39,13 @@ assert (!withHyperscan) || (!withVectorscan);
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rspamd";
-  version = "3.14.2";
+  version = "3.14.3";
 
   src = fetchFromGitHub {
     owner = "rspamd";
     repo = "rspamd";
-    rev = finalAttrs.version;
-    hash = "sha256-XpCdjS6c9nLi1ngeSPBldmK3HmMFfDNW+tNpxdrUoKg=";
+    tag = finalAttrs.version;
+    hash = "sha256-ntWBcwcPZwRRSTUO4a0JUNd6kc49fm+0/x+fqcZIA/o=";
   };
 
   patches = [

From bba957d48fd3eadecaed7f8d13a446c786e7ed66 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 11:48:47 +0000
Subject: [PATCH 41/79] texstudio: 4.9.1 -> 4.9.2

---
 pkgs/by-name/te/texstudio/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/te/texstudio/package.nix b/pkgs/by-name/te/texstudio/package.nix
index a26632d0a6ad..82f21e30797b 100644
--- a/pkgs/by-name/te/texstudio/package.nix
+++ b/pkgs/by-name/te/texstudio/package.nix
@@ -12,13 +12,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "texstudio";
-  version = "4.9.1";
+  version = "4.9.2";
 
   src = fetchFromGitHub {
     owner = "texstudio-org";
     repo = "texstudio";
     rev = finalAttrs.version;
-    hash = "sha256-lSAIlwdOVFd8pcT4rZ17Jn9195BOtZnUgFysDKM6t9U=";
+    hash = "sha256-u4+QUL3bOGo81+8adovqkpCKw3H6Mw6I2V3PfcKhb60=";
   };
 
   nativeBuildInputs = [

From 9b4f0d08923928356693ee109549a7f8d467de18 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 11:49:21 +0000
Subject: [PATCH 42/79] fake-gcs-server: 1.52.3 -> 1.53.1

---
 pkgs/by-name/fa/fake-gcs-server/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/fa/fake-gcs-server/package.nix b/pkgs/by-name/fa/fake-gcs-server/package.nix
index bc2214ec2972..98474d91bb2a 100644
--- a/pkgs/by-name/fa/fake-gcs-server/package.nix
+++ b/pkgs/by-name/fa/fake-gcs-server/package.nix
@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "fake-gcs-server";
-  version = "1.52.3";
+  version = "1.53.1";
 
   src = fetchFromGitHub {
     owner = "fsouza";
     repo = "fake-gcs-server";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-XoHG0dm565RRke3me/WDy1TRLrSlecy4b3xuYPvOcoo=";
+    hash = "sha256-UNXmbfCmLfY3gvstR2sEQ5SmHJy7PBe38JMCnc2GTz8=";
   };
 
-  vendorHash = "sha256-FMDpQSwLrLaiy5HzdragOmgvLBDax5VDN0DZLzQyhts=";
+  vendorHash = "sha256-+X0/vHHfzz4u7taeUhrH3E3TCZ2ABYwurDwg0THfnKY=";
 
   # Unit tests fail to start the emulator server in some environments (e.g. Hydra) for some reason.
   #

From e25386bd2f4691528823b3d25fd2255bede85a64 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 08:21:17 +0000
Subject: [PATCH 43/79] mongodb-atlas-cli: 1.51.2 -> 1.52.0

---
 pkgs/by-name/mo/mongodb-atlas-cli/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/mo/mongodb-atlas-cli/package.nix b/pkgs/by-name/mo/mongodb-atlas-cli/package.nix
index dcbfbb2ac83b..81150b47597f 100644
--- a/pkgs/by-name/mo/mongodb-atlas-cli/package.nix
+++ b/pkgs/by-name/mo/mongodb-atlas-cli/package.nix
@@ -11,16 +11,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "mongodb-atlas-cli";
-  version = "1.51.2";
+  version = "1.52.0";
 
   src = fetchFromGitHub {
     owner = "mongodb";
     repo = "mongodb-atlas-cli";
     tag = "atlascli/v${finalAttrs.version}";
-    hash = "sha256-0NZh+o8UuiasOO0fJua3vPhJiA/NI/RdwQ203BMVU+U=";
+    hash = "sha256-2JCDUWgMtt1dKqOMn220siSaqqafv12ho84wN9v44sQ=";
   };
 
-  vendorHash = "sha256-KwExYvH9IWFynh12VnkL3G9PKGZ0lQnIImoCY9Kz+OI=";
+  vendorHash = "sha256-bKi+u4FFD6A7HQwJnPTq3JTqOEig8oUQAHI4BQV+Rro=";
 
   nativeBuildInputs = [ installShellFiles ];
 

From 58217847482c24c3216647fe44cca52df8186db0 Mon Sep 17 00:00:00 2001
From: wxt <3264117476@qq.com>
Date: Fri, 6 Feb 2026 04:30:55 +0000
Subject: [PATCH 44/79] globus-cli: 3.38.0 -> 3.41.0

---
 pkgs/by-name/gl/globus-cli/package.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gl/globus-cli/package.nix b/pkgs/by-name/gl/globus-cli/package.nix
index 7b0e8c765957..b6f307957362 100644
--- a/pkgs/by-name/gl/globus-cli/package.nix
+++ b/pkgs/by-name/gl/globus-cli/package.nix
@@ -8,19 +8,20 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "globus-cli";
-  version = "3.38.0";
+  version = "3.41.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "globus";
     repo = "globus-cli";
     tag = version;
-    hash = "sha256-TjJ0GBXRYSMbWfCkGJSBzToHEjoN5ZJAzZe2yiRJhtg=";
+    hash = "sha256-bTS4dXQU49asmPmgUnf4VjAWJ34+1YbXmCJ4KOeOoMI=";
   };
 
   build-system = with python3Packages; [
     setuptools
     ruamel-yaml
+    flit-core
   ];
 
   dependencies = with python3Packages; [
@@ -51,6 +52,10 @@ python3Packages.buildPythonApplication rec {
     versionCheckHook
   ];
 
+  pythonRelaxDeps = [
+    "globus-sdk"
+  ];
+
   versionCheckProgramArg = "version";
 
   postInstall = ''

From a8e7b897212315f0409b6d1d255e351b8f364ed1 Mon Sep 17 00:00:00 2001
From: Felix Buehler <account@buehler.rocks>
Date: Sun, 25 Jan 2026 17:13:47 +0100
Subject: [PATCH 45/79] woeusb-ng: include upstream packaging fixes

---
 pkgs/by-name/wo/woeusb-ng/package.nix | 15 ++++-----------
 1 file changed, 4 insertions(+), 11 deletions(-)

diff --git a/pkgs/by-name/wo/woeusb-ng/package.nix b/pkgs/by-name/wo/woeusb-ng/package.nix
index f1a4415db8bc..a68853dd6e4f 100644
--- a/pkgs/by-name/wo/woeusb-ng/package.nix
+++ b/pkgs/by-name/wo/woeusb-ng/package.nix
@@ -10,26 +10,19 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "woeusb-ng";
-  version = "0.2.12";
+  version = "0.2.12-unstable-2026-01-25";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "WoeUSB";
     repo = "WoeUSB-ng";
-    tag = "v${finalAttrs.version}";
-    hash = "sha256-2opSiXbbk0zDRt6WqMh97iAt6/KhwNDopOas+OZn6TU=";
+    # tag = "v${finalAttrs.version}";
+    rev = "cc52ffc6aedad12540c2315c9101e4a4b919d4be";
+    hash = "sha256-TfrXq8zYtlqcA/jbxQul7HIGdYrn73ljKVY2x4BfS2E=";
   };
 
   build-system = [ python3Packages.setuptools ];
 
-  postPatch = ''
-    substituteInPlace setup.py WoeUSB/utils.py \
-      --replace-fail "/usr/local/" "$out/" \
-      --replace-fail "/usr/" "$out/"
-    substituteInPlace miscellaneous/WoeUSB-ng.desktop \
-      --replace-fail "/usr/" "$out/" \
-  '';
-
   nativeBuildInputs = [
     wrapGAppsHook3
   ];

From cf8640a35b65ff7da10778fc7835cc5817e8ea5c Mon Sep 17 00:00:00 2001
From: eryngion <eryngion@protonmail.com>
Date: Wed, 4 Feb 2026 22:08:25 +0000
Subject: [PATCH 46/79] libv4l: don't pull qtbase into cross-compiled builds

---
 pkgs/by-name/v4/v4l-utils/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/v4/v4l-utils/package.nix b/pkgs/by-name/v4/v4l-utils/package.nix
index d565f8de3fc9..06c7db58d0f5 100644
--- a/pkgs/by-name/v4/v4l-utils/package.nix
+++ b/pkgs/by-name/v4/v4l-utils/package.nix
@@ -30,7 +30,7 @@
 
 let
   withQt = withUtils && withGUI;
-
+  isCrossBuild = !(lib.systems.equals stdenv.buildPlatform stdenv.hostPlatform);
 in
 # we need to use stdenv.mkDerivation in order not to pollute the libv4l’s closure with Qt
 stdenv.mkDerivation (finalAttrs: {
@@ -112,7 +112,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   # Meson unable to find moc/uic/rcc in case of cross-compilation
   # https://github.com/mesonbuild/meson/issues/13018
-  preConfigure = lib.optionalString (stdenv.hostPlatform != stdenv.buildPlatform) ''
+  preConfigure = lib.optionalString (isCrossBuild && withQt) ''
     export PATH=${buildPackages.qt6Packages.qtbase}/libexec:$PATH
   '';
 

From 7c1189d0d664d5b0b717c17f022bd7c9d820e88b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 14:28:44 +0000
Subject: [PATCH 47/79] python3Packages.google-genai: 1.61.0 -> 1.62.0

---
 pkgs/development/python-modules/google-genai/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/google-genai/default.nix b/pkgs/development/python-modules/google-genai/default.nix
index 5ae3e2321ef7..fe3a133a8285 100644
--- a/pkgs/development/python-modules/google-genai/default.nix
+++ b/pkgs/development/python-modules/google-genai/default.nix
@@ -22,14 +22,14 @@
 
 buildPythonPackage rec {
   pname = "google-genai";
-  version = "1.61.0";
+  version = "1.62.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "googleapis";
     repo = "python-genai";
     tag = "v${version}";
-    hash = "sha256-21E3Aksi3W74ZLg79rSJJ00FCwAjTUiNQ9uq0TSJ7+s=";
+    hash = "sha256-LxTWMJbkwndbmp3hNL4n4OxSI7GjMkoFc/17LbjaIyo=";
   };
 
   build-system = [

From d26a54c5bb4d39e534068c670729c8c3712a3997 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 14:54:01 +0000
Subject: [PATCH 48/79] terraform-providers.selectel_selectel: 7.5.1 -> 7.5.3

---
 .../networking/cluster/terraform-providers/providers.json     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index bd9d6a7bd376..d92cfaf4ecc8 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -1193,11 +1193,11 @@
     "vendorHash": "sha256-MIO0VHofPtKPtynbvjvEukMNr5NXHgk7BqwIhbc9+u0="
   },
   "selectel_selectel": {
-    "hash": "sha256-htB1/ptyo+rgAOAt9VZwULU1c3XU1QcKUxxtGFjD3ag=",
+    "hash": "sha256-hmXFDWbo79t15nKsyDOi5SDzyG3tA+6oo7LPoMURzh8=",
     "homepage": "https://registry.terraform.io/providers/selectel/selectel",
     "owner": "selectel",
     "repo": "terraform-provider-selectel",
-    "rev": "v7.5.1",
+    "rev": "v7.5.3",
     "spdx": "MPL-2.0",
     "vendorHash": "sha256-OJlD1P+CUEsLk2xSsQ2QQBvGewYNly1dIJh8kMi+ChE="
   },

From 02f8fe83e15ea908f048113252fc92c8f80058de Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 15:52:00 +0000
Subject: [PATCH 49/79] terraform-providers.bpg_proxmox: 0.93.0 -> 0.94.0

---
 .../networking/cluster/terraform-providers/providers.json   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index bd9d6a7bd376..736b083af00d 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -110,13 +110,13 @@
     "vendorHash": null
   },
   "bpg_proxmox": {
-    "hash": "sha256-eRed1lShDIpQRCC/JvqT5uYbDU+mgpMfEPiSQFoV1QA=",
+    "hash": "sha256-WabJZeEDG8q+tccLbRg/j7N3XgkEW7xyTiIwE5t3SD4=",
     "homepage": "https://registry.terraform.io/providers/bpg/proxmox",
     "owner": "bpg",
     "repo": "terraform-provider-proxmox",
-    "rev": "v0.93.0",
+    "rev": "v0.94.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-+UWPbNHoV3TdeMZdY0ZOLBe1/Dej37hHORatC9Kol58="
+    "vendorHash": "sha256-o9k7Bv33cF9O1ByMn8ZcI/DzmVbmEznzMVnLuxcMA7g="
   },
   "brightbox_brightbox": {
     "hash": "sha256-pwFbCP+qDL/4IUfbPRCkddkbsEEeAu7Wp12/mDL0ABA=",

From dc25e01d000e67ce6c17fdf043937ce48fb51350 Mon Sep 17 00:00:00 2001
From: Sizhe Zhao <prc.zhao@outlook.com>
Date: Sun, 8 Feb 2026 00:12:22 +0800
Subject: [PATCH 50/79] luau: 0.707 -> 0.708

---
 pkgs/by-name/lu/luau/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/lu/luau/package.nix b/pkgs/by-name/lu/luau/package.nix
index 82d17474e4b0..1e8658ccd0e6 100644
--- a/pkgs/by-name/lu/luau/package.nix
+++ b/pkgs/by-name/lu/luau/package.nix
@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "luau";
-  version = "0.707";
+  version = "0.708";
 
   src = fetchFromGitHub {
     owner = "luau-lang";
     repo = "luau";
     tag = finalAttrs.version;
-    hash = "sha256-YUv40STZs5J+xFo5apbyqOpDB+PO+mYsC93pXmxhW+o=";
+    hash = "sha256-mGBwpu7KGCcwmLsx+Nv5xSaHxbAosB6P1x1IEz8/PHg=";
   };
 
   nativeBuildInputs = [ cmake ];

From 5b39f354fae1a604dbd93cea4864ab0b50c1e0d2 Mon Sep 17 00:00:00 2001
From: George Huebner <george@feyor.sh>
Date: Sat, 7 Feb 2026 10:32:24 -0600
Subject: [PATCH 51/79] redu: add restic to buildInputs

---
 pkgs/by-name/re/redu/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/re/redu/package.nix b/pkgs/by-name/re/redu/package.nix
index 153b264a1172..a9b1b6829265 100644
--- a/pkgs/by-name/re/redu/package.nix
+++ b/pkgs/by-name/re/redu/package.nix
@@ -3,6 +3,7 @@
   fetchFromGitHub,
   nix-update-script,
   rustPlatform,
+  restic,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -18,6 +19,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   cargoHash = "sha256-JnjXe2CHO9Namp++UI/V6ND2Y0/WQtaVA2EcUyXUnjQ=";
 
+  buildInputs = [ restic ];
+
   passthru.updateScript = nix-update-script { };
 
   meta = {

From ef62977786864563beca65336cd5d9a85a72d68a Mon Sep 17 00:00:00 2001
From: rnhmjoj <rnhmjoj@inventati.org>
Date: Sun, 25 Jan 2026 02:56:49 +0100
Subject: [PATCH 52/79] nixos/doc: improve networking.wireless chapter

---
 .../manual/configuration/wireless.section.md  | 198 ++++++++++++++++--
 nixos/doc/manual/redirects.json               |   9 +
 2 files changed, 184 insertions(+), 23 deletions(-)

diff --git a/nixos/doc/manual/configuration/wireless.section.md b/nixos/doc/manual/configuration/wireless.section.md
index ca581c183087..dda26028031c 100644
--- a/nixos/doc/manual/configuration/wireless.section.md
+++ b/nixos/doc/manual/configuration/wireless.section.md
@@ -1,16 +1,40 @@
 # Wireless Networks {#sec-wireless}
 
-For a desktop installation using NetworkManager (e.g., GNOME), you just
-have to make sure the user is in the `networkmanager` group and you can
-skip the rest of this section on wireless networks.
+For a desktop installation using NetworkManager (e.g., GNOME or KDE), you should
+make sure the user is in the `networkmanager` group and you can just configure
+wireless networks from the Settings app.
+It is also possible to declare (some) wireless networks from the NixOS
+configuration with [](#opt-networking.networkmanager.ensureProfiles.profiles).
 
-NixOS will start wpa_supplicant for you if you enable this setting:
+Alternatively, without NetworkManager, you can configure wireless networks
+using wpa_supplicant by setting
 
 ```nix
 { networking.wireless.enable = true; }
 ```
 
-NixOS lets you specify networks for wpa_supplicant declaratively:
+By default, wpa_supplicant will manage the first wireless interface that becomes
+available. It is however recommended to set the desired interface name with
+[](#opt-networking.wireless.interfaces), as it is more reliable.
+
+If multiple interfaces are set, NixOS will create a separate systemd service
+for each one of them, for example:
+
+```nix
+{
+  networking.wireless.interfaces = [
+    "wlan0"
+    "wlan1"
+  ];
+}
+```
+
+results in `wpa_supplicant-wlan0.service` and `wpa_supplicant-wlan1.service`.
+
+
+## Declarative configuration {#sec-wireless-declarative}
+
+NixOS lets you specify networks declaratively:
 
 ```nix
 {
@@ -33,15 +57,14 @@ NixOS lets you specify networks for wpa_supplicant declaratively:
 }
 ```
 
-Be aware that keys will be written to the nix store in plaintext! When
-no networks are set, it will default to using a configuration file at
-`/etc/wpa_supplicant.conf`. You should edit this file yourself to define
-wireless networks, WPA keys and so on (see wpa_supplicant.conf(5)).
+If the network is using WPA2, the pre-shared key (PSK) can be also specified
+with the `pskRaw` option as 64 hexadecimal digits.
+This is useful to both obfuscate passwords and make the connection slightly
+faster, as the key doesn't need to be derived every time.
 
-If you are using WPA2 you can generate pskRaw key using
-`wpa_passphrase`:
+The `pskRaw` values can be calculated using the `wpa_passphrase` tool:
 
-```ShellSession
+```console
 $ wpa_passphrase ESSID PSK
 network={
         ssid="echelon"
@@ -52,23 +75,152 @@ network={
 
 ```nix
 {
-  networking.wireless.networks = {
-    echelon = {
-      pskRaw = "dca6d6ed41f4ab5a984c9f55f6f66d4efdc720ebf66959810f4329bb391c5435";
-    };
+  networking.wireless.networks.echelon = {
+    pskRaw = "dca6d6ed41f4ab5a984c9f55f6f66d4efdc720ebf66959810f4329bb391c5435";
   };
 }
 ```
 
-or you can use it to directly generate the `wpa_supplicant.conf`:
-
-```ShellSession
-# wpa_passphrase ESSID PSK > /etc/wpa_supplicant.conf
+Other wpa_supplicant configuration can be set using the {option}`extraConfig`
+option, either globally or per-network. For example:
+```
+{
+  networking.wireless.extraConfig = ''
+    # Enable MAC address randomization by default
+    mac_addr=1
+  '';
+  networking.wireless.networks.home = {
+    psk = "abcdefgh";
+    extraConfig = ''
+      # Use the real MAC address at home
+      mac_addr=0
+    '';
+  };
+}
 ```
 
-After you have edited the `wpa_supplicant.conf`, you need to restart the
-wpa_supplicant service.
+::: {.note}
+The generated wpa_supplicant configuration file is linked to
+`/etc/wpa_supplicant/nixos.conf` for easier inspection.
+:::
 
-```ShellSession
+
+Be aware that in the previous examples the keys would be written to the Nix
+store in plain text and readable to every local user.
+It is recommended to specify secrets (PSKs, passwords, etc.) in a safe way using
+[](#opt-networking.wireless.secretsFile) and the `ext:` syntax. For example:
+
+```nix
+{
+  networking.wireless.secretsFile = "/run/secrets/wireless.conf";
+  networking.wireless.networks = {
+    home = {
+      pskRaw = "ext:psk_home";
+    };
+    work.auth = ''
+      eap=PEAP
+      identity="my-user@example.com"
+      password=ext:pass_work
+    '';
+  };
+}
+```
+
+where `/run/secrets/wireless.conf` contains
+
+```
+psk_home=mypassword
+pass_work=myworkpassword
+```
+
+::: {.note}
+The secrets file should be owned and placed in a location accessible (only) by
+the `wpa_supplicant` user. Only certain fields support the `ext:` syntax,
+for example `psk`, `sae_password` and `password`, but not `ssid`.
+:::
+
+
+## Imperative configuration  {#sec-wireless-imperative}
+
+It can be useful to add a new network without rebuilding the NixOS
+configuration, particularly if you don't yet have Internet access.
+Setting [](#opt-networking.wireless.userControlled) to `true` will allow users
+of the `wpa_supplicant` group to configure wpa_supplicant imperatively.
+
+For example, using `wpa_cli` you can add a new network and connect to it as:
+```console
+# wpa_cli
+Selected interface 'wlan0'
+
+Interactive mode
+
+> add_network
+10
+> set_network 10 ssid "echelon"
+OK
+> set_network 10 psk "abcdefgh"
+OK
+> select_network 10
+OK
+```
+
+Note that these changes will be lost when wpa_supplicant is restarted.
+To make them persistent, the option
+[](#opt-networking.wireless.allowAuxiliaryImperativeNetworks) can be set, which
+allows to use the `save` command in `wpa_cli`, or even directly editing the
+file `/etc/wpa_supplicant/imperative.conf`.
+
+::: {.note}
+Remember that after manually editing `imperative.conf` the wpa_supplicant daemon
+needs to be restarted:
+```console
 # systemctl restart wpa_supplicant.service
 ```
+or
+```console
+# systemctl restart wpa_supplicant-<interface>.service
+```
+if [](#opt-networking.wireless.interfaces) has been set.
+:::
+
+
+## Enterprise networks {#sec-wireless-enterprise}
+
+Networks with more sophisticated authentication protocols can be configured
+using the free-form `auth` option, for example:
+
+```
+{
+  networking.wireless.networks = {
+    eduroam.auth = ''
+      key_mgmt=WPA-EAP
+      eap=PEAP
+      identity="alice.smith@example.com"
+      password="veryLongPassword$!3"
+      ca_cert="/etc/wpa_supplicant/eduroam.pem"
+    '';
+  };
+}
+```
+
+For examples and a list of available options, see the
+[wpa_supplicant.conf(5)](man:wpa_supplicant.conf(5)) man page.
+
+::: {.warning}
+By default, security hardening measures that limit access to files, devices and
+network capabilities are applied to the wpa_supplicant daemon.
+
+Certificates and other files supplied here need to be readable by the
+`wpa_supplicant` user; it is therefore recommended to store them in the
+`/etc/wpa_supplicant` directory.
+
+If your network authentication protocol requires write access to files, smart
+cards or TPM devices, you may have to disable security hardening with
+```nix
+{ networking.wireless.enableHardening = false; }
+```
+
+This setting also applies to networks configured from NetworkManager, unless
+the WiFi [backend](#opt-networking.networkmanager.wifi.backend) in use is not
+wpa_supplicant.
+:::
diff --git a/nixos/doc/manual/redirects.json b/nixos/doc/manual/redirects.json
index 89800b309fe9..996fc3297f6d 100644
--- a/nixos/doc/manual/redirects.json
+++ b/nixos/doc/manual/redirects.json
@@ -91,6 +91,15 @@
   "sec-override-nixos-test": [
     "index.html#sec-override-nixos-test"
   ],
+  "sec-wireless-declarative": [
+    "index.html#sec-wireless-declarative"
+  ],
+  "sec-wireless-enterprise": [
+    "index.html#sec-wireless-enterprise"
+  ],
+  "sec-wireless-imperative": [
+    "index.html#sec-wireless-imperative"
+  ],
   "test-opt-rawTestDerivationArg": [
     "index.html#test-opt-rawTestDerivationArg"
   ],

From d2bbdcd5a2b4f7b642a4ef3eae5c6319e1251388 Mon Sep 17 00:00:00 2001
From: rnhmjoj <rnhmjoj@inventati.org>
Date: Mon, 2 Feb 2026 14:53:41 +0100
Subject: [PATCH 53/79] nixos/release-notes: improve wpa_supplicant hardening
 instructions

---
 nixos/doc/manual/release-notes/rl-2605.section.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/nixos/doc/manual/release-notes/rl-2605.section.md b/nixos/doc/manual/release-notes/rl-2605.section.md
index b7f3406bc32e..6961275c9acf 100644
--- a/nixos/doc/manual/release-notes/rl-2605.section.md
+++ b/nixos/doc/manual/release-notes/rl-2605.section.md
@@ -103,7 +103,7 @@ See <https://github.com/NixOS/nixpkgs/issues/481673>.
 
 - support for `ecryptfs` in nixpkgs has been removed.
 
-- The `networking.wireless` module has been security hardened: the `wpa_supplicant` daemon now runs under an unprivileged user with restricted access to the system.
+- The `networking.wireless` module has been security hardened by default: the `wpa_supplicant` daemon now runs under an unprivileged user with restricted access to the system.
 
   As part of these changes, `/etc/wpa_supplicant.conf` has been deprecated: the NixOS-generated configuration file is now linked to `/etc/wpa_supplicant/nixos.conf` and `/etc/wpa_supplicant/imperative.conf` has been added for imperatively configuring `wpa_supplicant` or when using [allowAuxiliaryImperativeNetworks](#opt-networking.wireless.allowAuxiliaryImperativeNetworks).
 
@@ -112,6 +112,9 @@ See <https://github.com/NixOS/nixpkgs/issues/481673>.
   Also, the {option}`networking.wireless.userControlled.group` option has been removed since there is now a dedicated `wpa_supplicant` group to control the daemon, and {option}`networking.wireless.userControlled.enable` has been renamed to [](#opt-networking.wireless.userControlled).
 
   No functionality should have been impacted by these changes (including controlling via `wpa_cli`, integration with NetworkManager or connman), but if you find any problems, please open an issue on GitHub.
+  If necessary, the security hardening can be reverted with [](#opt-networking.wireless.enableHardening).
+
+  Note for NetworkManager users: before these changes NetworkManager used to spawn its own wpa_supplicant daemon, but now it relies on `networking.wireless`. So, if you had `networking.wireless.enable = false` in your configuration, you should remove that line.
 
 - `kratos` has been updated from 1.3.1 to [25.4.0](https://github.com/ory/kratos/releases/tag/v25.4.0). Upstream switched to a new versioning scheme (year.major.minor). Notable breaking changes:
 

From bb60f3dbe2cd9acf826125f9133cd2550f537ae6 Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Sat, 7 Feb 2026 18:10:39 +0100
Subject: [PATCH 54/79] python3Packages.aiovban: 0.6.2 -> 0.7.0

https://github.com/wmbest2/aiovban/releases/tag/v0.7.0
---
 pkgs/by-name/mu/music-assistant/package.nix         |  1 -
 pkgs/development/python-modules/aiovban/default.nix | 12 ++++++------
 2 files changed, 6 insertions(+), 7 deletions(-)

diff --git a/pkgs/by-name/mu/music-assistant/package.nix b/pkgs/by-name/mu/music-assistant/package.nix
index 288674181bd3..26783526f7eb 100644
--- a/pkgs/by-name/mu/music-assistant/package.nix
+++ b/pkgs/by-name/mu/music-assistant/package.nix
@@ -101,7 +101,6 @@ python.pkgs.buildPythonApplication rec {
   pythonRelaxDeps = [
     "aiohttp"
     "aiosqlite"
-    "aiovban" # PyPi and GitHub versioning is out of sync
     "certifi"
     "colorlog"
     "cryptography"
diff --git a/pkgs/development/python-modules/aiovban/default.nix b/pkgs/development/python-modules/aiovban/default.nix
index 729f3aa3e884..67440599968d 100644
--- a/pkgs/development/python-modules/aiovban/default.nix
+++ b/pkgs/development/python-modules/aiovban/default.nix
@@ -7,17 +7,16 @@
   music-assistant,
 }:
 
-buildPythonPackage {
+buildPythonPackage (finalAttrs: {
   pname = "aiovban";
-  version = "0.6.2";
+  version = "0.7.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "wmbest2";
     repo = "aiovban";
-    # https://github.com/wmbest2/aiovban/issues/2
-    rev = "cdcf1ef3328493e600b4e8725a6071c0d180b36a";
-    hash = "sha256-w+pA3225mdPms/PpnJYKZYe6YHn0WMf83LupExgjJZ8=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-0mhpmpsV0zSOWbhrPF9bfR9xAtJe6X57guWDZWMH6f0=";
   };
 
   build-system = [ setuptools ];
@@ -29,9 +28,10 @@ buildPythonPackage {
   ];
 
   meta = {
+    changelog = "https://github.com/wmbest2/aiovban/releases/tag/${finalAttrs.src.tag}";
     description = "Asyncio VBAN Protocol Wrapper";
     homepage = "https://github.com/wmbest2/aiovban";
     license = lib.licenses.mit;
     inherit (music-assistant.meta) maintainers;
   };
-}
+})

From a148f6439794c18fe26402a1d519096749233e72 Mon Sep 17 00:00:00 2001
From: Doron Behar <doron.behar@gmail.com>
Date: Thu, 5 Feb 2026 00:36:00 +0200
Subject: [PATCH 55/79] python3.pkgs.plopp: 25.11.0 -> 26.2.0

Diff: https://github.com/scipp/plopp/compare/25.11.0...26.2.0
---
 pkgs/development/python-modules/plopp/default.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/plopp/default.nix b/pkgs/development/python-modules/plopp/default.nix
index 0971ed49002a..d9aa0d5e535e 100644
--- a/pkgs/development/python-modules/plopp/default.nix
+++ b/pkgs/development/python-modules/plopp/default.nix
@@ -36,14 +36,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "plopp";
-  version = "25.11.0";
+  version = "26.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "scipp";
     repo = "plopp";
     tag = finalAttrs.version;
-    hash = "sha256-3vmHRPjv7iUd6ky7XzfdChpAI++ELh6vwmtELK7dwaE=";
+    hash = "sha256-JYgha+gmp9Ht6Ly9+i6dT+jdiDgsAEH5qH5MJ4n9LR8=";
   };
 
   build-system = [
@@ -77,6 +77,7 @@ buildPythonPackage (finalAttrs: {
   disabledTests = lib.optionals (pythonAtLeast "3.14") [
     # RuntimeError: There is no current event loop in thread 'MainThread'
     "test_move_cut"
+    "test_value_cuts"
   ];
 
   env = {

From ff26911ff32d54e8476f1688f1138be65d01a3e2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 17:41:19 +0000
Subject: [PATCH 56/79] hydrus: 653 -> 658

---
 pkgs/by-name/hy/hydrus/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/hy/hydrus/package.nix b/pkgs/by-name/hy/hydrus/package.nix
index 9ca6a6d1e38d..1289707d6f2d 100644
--- a/pkgs/by-name/hy/hydrus/package.nix
+++ b/pkgs/by-name/hy/hydrus/package.nix
@@ -16,14 +16,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "hydrus";
-  version = "653";
+  version = "658";
   pyproject = false;
 
   src = fetchFromGitHub {
     owner = "hydrusnetwork";
     repo = "hydrus";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-OH07OvN5EaEsjlUHUJMqproiVcN75yL9u7lnCjXSITo=";
+    hash = "sha256-vH+kUnSh7uOy4x6YNkzcTtp3Xmgfmcwt/vE/FbMWKDo=";
   };
 
   nativeBuildInputs = [

From 601259e63529006aa850fc13ea8e17c0c7a5de57 Mon Sep 17 00:00:00 2001
From: Doron Behar <doron.behar@gmail.com>
Date: Sat, 7 Feb 2026 19:42:29 +0200
Subject: [PATCH 57/79] python31{3,4}.pkgs.scipp: enable on Darwin

The error quoted is gone now.
---
 pkgs/development/python-modules/scipp/default.nix | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/pkgs/development/python-modules/scipp/default.nix b/pkgs/development/python-modules/scipp/default.nix
index e02428a1b997..c55b1938bc5a 100644
--- a/pkgs/development/python-modules/scipp/default.nix
+++ b/pkgs/development/python-modules/scipp/default.nix
@@ -103,11 +103,5 @@ buildPythonPackage rec {
     homepage = "https://scipp.github.io";
     license = lib.licenses.bsd3;
     maintainers = with lib.maintainers; [ doronbehar ];
-    # Got:
-    #
-    #   error: a template argument list is expected after a name prefixed by the template keyword [-Wmissing-template-arg-list-after-template-kw]
-    #
-    # Needs debugging along with upstream.
-    broken = stdenv.hostPlatform.isDarwin;
   };
 }

From 1fb1195f2e874daa6235d73ec0791498959cc2c9 Mon Sep 17 00:00:00 2001
From: Malik <abdelmalik.najhi@stud.hs-kempten.de>
Date: Tue, 3 Feb 2026 16:40:25 +0100
Subject: [PATCH 58/79] forgejo-mcp: init at 2.9.0

---
 pkgs/by-name/fo/forgejo-mcp/package.nix | 38 +++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 pkgs/by-name/fo/forgejo-mcp/package.nix

diff --git a/pkgs/by-name/fo/forgejo-mcp/package.nix b/pkgs/by-name/fo/forgejo-mcp/package.nix
new file mode 100644
index 000000000000..78fa7334837c
--- /dev/null
+++ b/pkgs/by-name/fo/forgejo-mcp/package.nix
@@ -0,0 +1,38 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromCodeberg,
+  nix-update-script,
+  versionCheckHook,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "forgejo-mcp";
+  version = "2.9.0";
+
+  src = fetchFromCodeberg {
+    owner = "goern";
+    repo = "forgejo-mcp";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-9H4UQIKRsmKifE9CGvtlkmwMfdsmczUmPckNVJwJqco=";
+  };
+
+  vendorHash = "sha256-AfQGVq6xeNC+01FdPGqDWvIVXMEp7B6SjAnbswuDdu0=";
+
+  ldflags = [
+    "-s"
+    "-X main.Version=${finalAttrs.version}"
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Model Context Protocol (MCP) server for interacting with the Forgejo REST API";
+    longDescription = "This Model Context Protocol (MCP) server provides tools and resources for interacting with the Forgejo (specifically Codeberg.org) REST API";
+    homepage = "https://codeberg.org/goern/forgejo-mcp";
+    changelog = "https://codeberg.org/goern/forgejo-mcp/src/tag/${finalAttrs.src.tag}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ malik ];
+    mainProgram = "forgejo-mcp";
+  };
+})

From 67f3a12b67bb4877a61f0622722b9db8dd818356 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 17:51:57 +0000
Subject: [PATCH 59/79] terraform-providers.scaleway_scaleway: 2.68.0 -> 2.69.0

---
 .../networking/cluster/terraform-providers/providers.json   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index bd9d6a7bd376..7845d3a79848 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -1175,13 +1175,13 @@
     "vendorHash": "sha256-f3b4NULINH8XworCn46fiz4GmBM31ROdAJy1j4GKkx4="
   },
   "scaleway_scaleway": {
-    "hash": "sha256-YRap8Y0KAaFD7uWo1J2Qrb0l+OPhxS+DfKwGN/QQOw4=",
+    "hash": "sha256-y58Q3VyXRVThSBm3e6aEUJu/VqbrwyIYPyXKiUz+9QA=",
     "homepage": "https://registry.terraform.io/providers/scaleway/scaleway",
     "owner": "scaleway",
     "repo": "terraform-provider-scaleway",
-    "rev": "v2.68.0",
+    "rev": "v2.69.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-rT8ScPPnrbUBviiK03U96K5vvVEbcLra3MGSJ8+SYyE="
+    "vendorHash": "sha256-zBThWG4Pis0bewKeai7pKupbgKIC7/8ALF/nWIfqYq0="
   },
   "scottwinkler_shell": {
     "hash": "sha256-LTWEdXxi13sC09jh+EFZ6pOi1mzuvgBz5vceIkNE/JY=",

From b3d6d9c28190a53157d802776cafb9c96e5b0d1a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 18:42:43 +0000
Subject: [PATCH 60/79] python3Packages.disposable-email-domains: 0.0.157 ->
 0.0.160

---
 .../python-modules/disposable-email-domains/default.nix       | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/disposable-email-domains/default.nix b/pkgs/development/python-modules/disposable-email-domains/default.nix
index e3e6b16aaf7c..bd0e42d3bc55 100644
--- a/pkgs/development/python-modules/disposable-email-domains/default.nix
+++ b/pkgs/development/python-modules/disposable-email-domains/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "disposable-email-domains";
-  version = "0.0.157";
+  version = "0.0.160";
   pyproject = true;
 
   # No tags on GitHub
   src = fetchPypi {
     pname = "disposable_email_domains";
     inherit (finalAttrs) version;
-    hash = "sha256-TxB+NK9z21vqoyBRdTEHOZaxpg4w6LEtO6rJOkwwyiA=";
+    hash = "sha256-lSRgL6pg6qIdhMQ/xEhsAw4hBx0U69+dx13tclevgEI=";
   };
 
   build-system = [

From 174998cfc77492d1ba82851660cdd04e6d0801af Mon Sep 17 00:00:00 2001
From: Matthias Beyer <mail@beyermatthias.de>
Date: Sat, 7 Feb 2026 20:02:19 +0100
Subject: [PATCH 61/79] diffnav: 0.8.2 -> 0.9.0

Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
---
 pkgs/by-name/di/diffnav/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/di/diffnav/package.nix b/pkgs/by-name/di/diffnav/package.nix
index 0c7c86647715..85b7b637cada 100644
--- a/pkgs/by-name/di/diffnav/package.nix
+++ b/pkgs/by-name/di/diffnav/package.nix
@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "diffnav";
-  version = "0.8.2";
+  version = "0.9.0";
 
   src = fetchFromGitHub {
     owner = "dlvhdr";
     repo = "diffnav";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-2CAvZyBcWlaTHcDqKlGYjFiZJm9UcwGS3YQpeaphKTE=";
+    hash = "sha256-EkJim0YCdImlf7cNELMwXMQEJPZxSBbmUH0rnNkCuOM=";
   };
 
-  vendorHash = "sha256-FA58Rd+tEiyArDCeKsekpxkM+i8z/KlO3GLzkonSKVM=";
+  vendorHash = "sha256-/GwIxSyH7maY2m9CcqUs3aeX/5OX0VsvUoOGWkBzJ9M=";
 
   ldflags = [
     "-s"

From aea70915bfa0cbf375e1c42406cb879d6bd52703 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 19:10:40 +0000
Subject: [PATCH 62/79] redpanda-client: 25.3.6 -> 25.3.7

---
 pkgs/by-name/re/redpanda-client/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/re/redpanda-client/package.nix b/pkgs/by-name/re/redpanda-client/package.nix
index 830d931494ea..79b5216b9914 100644
--- a/pkgs/by-name/re/redpanda-client/package.nix
+++ b/pkgs/by-name/re/redpanda-client/package.nix
@@ -7,12 +7,12 @@
   stdenv,
 }:
 let
-  version = "25.3.6";
+  version = "25.3.7";
   src = fetchFromGitHub {
     owner = "redpanda-data";
     repo = "redpanda";
     rev = "v${version}";
-    sha256 = "sha256-4SVd01dbgpjhdhZhQUIGta7OBjSzQNmo5teLQ+w804s=";
+    sha256 = "sha256-AHAxkIXDbND/IjVHqQAAM/ZzzypV0RF+JAtFLq81Cmg=";
   };
 in
 buildGoModule rec {

From 752f4d06e5226891f43573d094b950f4b46c1196 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 6 Feb 2026 15:46:42 +0000
Subject: [PATCH 63/79] grafana-loki,promtail: 3.6.4 -> 3.6.5

https://github.com/grafana/loki/releases/tag/v3.6.5
---
 pkgs/by-name/gr/grafana-loki/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gr/grafana-loki/package.nix b/pkgs/by-name/gr/grafana-loki/package.nix
index 95605bdb1dff..bd2e4f118fc6 100644
--- a/pkgs/by-name/gr/grafana-loki/package.nix
+++ b/pkgs/by-name/gr/grafana-loki/package.nix
@@ -12,14 +12,14 @@
 }:
 
 buildGoModule (finalAttrs: {
-  version = "3.6.4";
+  version = "3.6.5";
   pname = "grafana-loki";
 
   src = fetchFromGitHub {
     owner = "grafana";
     repo = "loki";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-zzYW0zg0Cg18aDNS4cGDeTW21K/sDB/BkpsoPpxgFok=";
+    hash = "sha256-f9YijC8MH+vPxh6N/LKQIhsSWM6uEqIyHY+5J3mu+aQ=";
   };
 
   vendorHash = null;

From e470313999f19c02afc9f5924125447ffa1ea3b3 Mon Sep 17 00:00:00 2001
From: Matthias Beyer <mail@beyermatthias.de>
Date: Sat, 7 Feb 2026 20:36:33 +0100
Subject: [PATCH 64/79] diffnav: Add matthiasbeyer as maintainer

Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
---
 pkgs/by-name/di/diffnav/package.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/di/diffnav/package.nix b/pkgs/by-name/di/diffnav/package.nix
index 85b7b637cada..7a05d4270241 100644
--- a/pkgs/by-name/di/diffnav/package.nix
+++ b/pkgs/by-name/di/diffnav/package.nix
@@ -35,7 +35,10 @@ buildGoModule (finalAttrs: {
     description = "Git diff pager based on delta but with a file tree, à la GitHub";
     homepage = "https://github.com/dlvhdr/diffnav";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ amesgen ];
+    maintainers = with lib.maintainers; [
+      amesgen
+      matthiasbeyer
+    ];
     mainProgram = "diffnav";
   };
 })

From 2583c2075d5c2db2f5e4c86bc24851e2f4f9a9f7 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 1 Feb 2026 22:29:18 +0000
Subject: [PATCH 65/79] sq: 0.48.10 -> 0.48.12

Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
---
 pkgs/by-name/sq/sq/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/sq/sq/package.nix b/pkgs/by-name/sq/sq/package.nix
index b7a6bf4ace32..009e2625ca49 100644
--- a/pkgs/by-name/sq/sq/package.nix
+++ b/pkgs/by-name/sq/sq/package.nix
@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "sq";
-  version = "0.48.10";
+  version = "0.48.12";
 
   src = fetchFromGitHub {
     owner = "neilotoole";
     repo = "sq";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-5JlvG179rZHXsJWg+5uz//7QGdkwdNGULkK/DLCifus=";
+    hash = "sha256-TAQiTZx13rYlJlT41/RE03Ro4CRjECBdQz42YSI1j74=";
   };
 
-  vendorHash = "sha256-UP9+KtFuibwb9fnUcflnIpcf0Ow54D7db9F07PLhBN4=";
+  vendorHash = "sha256-jfUUVbvrdFX/++xRAgz7Tzqgu5AK2ZDmubWnWBIQeKE=";
 
   proxyVendor = true;
 

From 074991e3dfa08f944261e156c7271fc8f13db4a4 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 19:54:38 +0000
Subject: [PATCH 66/79] home-assistant-custom-lovelace-modules.vacuum-card:
 2.11.7 -> 2.12.0

---
 .../custom-lovelace-modules/vacuum-card/package.nix         | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/servers/home-assistant/custom-lovelace-modules/vacuum-card/package.nix b/pkgs/servers/home-assistant/custom-lovelace-modules/vacuum-card/package.nix
index ba47f229d5a1..f7491fba483d 100644
--- a/pkgs/servers/home-assistant/custom-lovelace-modules/vacuum-card/package.nix
+++ b/pkgs/servers/home-assistant/custom-lovelace-modules/vacuum-card/package.nix
@@ -6,16 +6,16 @@
 
 buildNpmPackage rec {
   pname = "vacuum-card";
-  version = "2.11.7";
+  version = "2.12.0";
 
   src = fetchFromGitHub {
     owner = "denysdovhan";
     repo = "vacuum-card";
     rev = "v${version}";
-    hash = "sha256-qlAgkEMEwTq9vc6DoOwf5AhdlS2ezyXxjZQEhkhdrBs=";
+    hash = "sha256-AkwtKh24a2zOkP3MyqxSPbzYWujwj6nIcMyUWMgcdeM=";
   };
 
-  npmDepsHash = "sha256-+vNnManvjv8suqgbsj/XnoDLLGyUGjBLsUUDrDKPXqY=";
+  npmDepsHash = "sha256-/kUed3z6eqiLy9klErmEx3yvOO1jlmlKu2F8aPbFOek=";
 
   installPhase = ''
     runHook preInstall

From 5ed293241e883b323d35117ea90b2b26180021ee Mon Sep 17 00:00:00 2001
From: mana-byte <manaikilaut@gmail.com>
Date: Sat, 7 Feb 2026 21:03:42 +0100
Subject: [PATCH 67/79] python3Packages.camelot: enabled tests

---
 .../python-modules/camelot/default.nix        | 61 +++++++++++++------
 1 file changed, 43 insertions(+), 18 deletions(-)

diff --git a/pkgs/development/python-modules/camelot/default.nix b/pkgs/development/python-modules/camelot/default.nix
index be72b9b1488e..1f95916baff0 100644
--- a/pkgs/development/python-modules/camelot/default.nix
+++ b/pkgs/development/python-modules/camelot/default.nix
@@ -1,31 +1,39 @@
 {
-  buildPythonPackage,
-  chardet,
-  charset-normalizer,
-  click,
-  fetchPypi,
   lib,
+  pkgs,
+  fetchFromGitHub,
+  buildPythonPackage,
+
+  # build system
+  setuptools,
+
+  # dependencies
+  chardet,
+  click,
+  numpy,
   opencv-python-headless,
   openpyxl,
   pandas,
   pdfminer-six,
   pillow,
-  pkgs,
   pypdf,
   pypdfium2,
-  setuptools,
   tabulate,
-}:
 
-buildPythonPackage rec {
+  # tests
+  pytestCheckHook,
+  matplotlib,
+}:
+buildPythonPackage (finalAttrs: {
   pname = "camelot-py";
   version = "1.0.9";
   pyproject = true;
 
-  src = fetchPypi {
-    pname = "camelot_py";
-    inherit version;
-    hash = "sha256-1D2Idm98NGKAP/EUZOfT0VqSI+hFly3ith73w/YtMgA=";
+  src = fetchFromGitHub {
+    owner = "camelot-dev";
+    repo = "camelot";
+    tag = "v${finalAttrs.version}";
+    sha256 = "sha256-msf49Vt0IlwUNTvLIqTWKlMfcFB0LnvGGf7vReqhJec=";
   };
 
   patches = [ ./ghostscript.patch ];
@@ -40,9 +48,8 @@ buildPythonPackage rec {
   build-system = [ setuptools ];
 
   dependencies = [
-    chardet
-    charset-normalizer
     click
+    numpy
     opencv-python-headless
     openpyxl
     pandas
@@ -51,9 +58,27 @@ buildPythonPackage rec {
     pypdf
     pypdfium2
     tabulate
+    # Dependency not present in project's pyproject.toml, but doesn't build without it
+    chardet
   ];
 
-  doCheck = false;
+  nativeCheckInputs = [
+    pytestCheckHook
+    matplotlib
+  ];
+  disabledTests = [
+    # Assertion Error: <Cell cords> != <Cell other_cords>
+    "test_repr_ghostscript"
+    # cv2.error: color.cpp failure
+    "test_repr_ghostscript_custom_backend"
+    # urllib.error.URLError: temporary failure in name
+    "test_url_pdfium"
+    "test_url_ghostscript"
+    "test_url_ghost_script_custom_backend"
+    "test_pages_pdfium"
+    "test_pages_ghostscript"
+    "test_pages_ghostscript_custom_backend"
+  ];
 
   pythonImportsCheck = [ "camelot" ];
 
@@ -61,8 +86,8 @@ buildPythonPackage rec {
     description = "Python library to extract tabular data from PDFs";
     mainProgram = "camelot";
     homepage = "http://camelot-py.readthedocs.io";
-    changelog = "https://github.com/camelot-dev/camelot/blob/v${version}/HISTORY.md";
+    changelog = "https://github.com/camelot-dev/camelot/blob/${finalAttrs.src.tag}/HISTORY.md";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ _2gn ];
   };
-}
+})

From aec818ac0032b45384eb68c11d3a970be649a85f Mon Sep 17 00:00:00 2001
From: Tert0 <tert0byte@gmail.com>
Date: Sat, 7 Feb 2026 21:10:12 +0100
Subject: [PATCH 68/79] clevis: set meta.mainProgram

---
 pkgs/by-name/cl/clevis/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/cl/clevis/package.nix b/pkgs/by-name/cl/clevis/package.nix
index a71ac5485cf5..5bb66c74b6c5 100644
--- a/pkgs/by-name/cl/clevis/package.nix
+++ b/pkgs/by-name/cl/clevis/package.nix
@@ -126,5 +126,6 @@ stdenv.mkDerivation (finalAttrs: {
     changelog = "https://github.com/latchset/clevis/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.gpl3Plus;
     maintainers = [ ];
+    mainProgram = "clevis";
   };
 })

From 5801e4f177356c026b6e3fd9ac82ec9355ddd280 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 20:19:17 +0000
Subject: [PATCH 69/79] monophony: 4.3.1 -> 4.3.3

---
 pkgs/by-name/mo/monophony/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/mo/monophony/package.nix b/pkgs/by-name/mo/monophony/package.nix
index 9bd98c4fe5c7..aa68972bad7e 100644
--- a/pkgs/by-name/mo/monophony/package.nix
+++ b/pkgs/by-name/mo/monophony/package.nix
@@ -12,14 +12,14 @@
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "monophony";
-  version = "4.3.1";
+  version = "4.3.3";
   pyproject = true;
 
   src = fetchFromGitLab {
     owner = "zehkira";
     repo = "monophony";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Jp2RwfTcOb4xALIMc4DAQX+fWdqPE+TWv5qRgdSopbM=";
+    hash = "sha256-+K6spOP6m54jR7J0IvArZTZkowN4MzG02VnTDD9WqSY=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/source";

From ebaa796a6534a176be9a04cd0b7c9f9e5d8f6990 Mon Sep 17 00:00:00 2001
From: Matthias Beyer <mail@beyermatthias.de>
Date: Sat, 7 Feb 2026 21:33:10 +0100
Subject: [PATCH 70/79] mycli: 1.43.1 -> 1.44.2

Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
---
 pkgs/by-name/my/mycli/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/my/mycli/package.nix b/pkgs/by-name/my/mycli/package.nix
index 80e8952c5620..f6693a8d892b 100644
--- a/pkgs/by-name/my/mycli/package.nix
+++ b/pkgs/by-name/my/mycli/package.nix
@@ -7,14 +7,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "mycli";
-  version = "1.43.1";
+  version = "1.44.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "dbcli";
     repo = "mycli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-KybGpi9ZNkAiniZTnyzzjlUf+xISRk+k4kcIxU/iVSM=";
+    hash = "sha256-7G7Yy0jdULzBiQr4JACWuBG4XdXDYZ8IyfbzGQKF428=";
   };
 
   pythonRelaxDeps = [

From 84027cb795fa1d28645b5d5bb0a04bd41b6a5811 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 25 Dec 2025 12:23:49 +0000
Subject: [PATCH 71/79] elinks: 0.18.0 -> 0.19.0

Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
---
 pkgs/by-name/el/elinks/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/el/elinks/package.nix b/pkgs/by-name/el/elinks/package.nix
index b659052d9e97..0cdbb6934211 100644
--- a/pkgs/by-name/el/elinks/package.nix
+++ b/pkgs/by-name/el/elinks/package.nix
@@ -33,13 +33,13 @@ assert enablePython -> python != null;
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "elinks";
-  version = "0.18.0";
+  version = "0.19.0";
 
   src = fetchFromGitHub {
     owner = "rkd77";
     repo = "elinks";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-TTb/v24gIWKiCQCESHo0Pz6rvRtw5anoXK0b35dzfLM=";
+    hash = "sha256-eFH42PCMF3HPvNqcaXOyIM6AAr3RusgxiRlUa2X8B9U=";
   };
 
   buildInputs = [

From 54e8271f6219fdabe6926fdf5cfe24939ad4fe59 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 7 Feb 2026 20:36:41 +0000
Subject: [PATCH 72/79] kahip: 3.21 -> 3.22

---
 pkgs/by-name/ka/kahip/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ka/kahip/package.nix b/pkgs/by-name/ka/kahip/package.nix
index 41b140ed8bf1..ad55fdf8ed55 100644
--- a/pkgs/by-name/ka/kahip/package.nix
+++ b/pkgs/by-name/ka/kahip/package.nix
@@ -12,13 +12,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "kahip";
-  version = "3.21";
+  version = "3.22";
 
   src = fetchFromGitHub {
     owner = "KaHIP";
     repo = "KaHIP";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-FVbJJpz3ecfME0KZN/5AHuqCkPl/UpR+kHHMyxFzErY=";
+    hash = "sha256-uZRNATfrQgAn5Wsmpk9tU0ojXHbLJ8DOOuXRJJhkhFM=";
   };
 
   nativeBuildInputs = [

From ccfe422e56831a3795207c1cea5731c65b09219e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Andr=C3=A9=20Silva?= <andrerfosilva@gmail.com>
Date: Sat, 7 Feb 2026 12:01:48 +0000
Subject: [PATCH 73/79] rocmPackages.migraphx: enable mlir

---
 pkgs/development/rocm-modules/migraphx/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/development/rocm-modules/migraphx/default.nix b/pkgs/development/rocm-modules/migraphx/default.nix
index f2bde73b4d38..fa7bda79fc7b 100644
--- a/pkgs/development/rocm-modules/migraphx/default.nix
+++ b/pkgs/development/rocm-modules/migraphx/default.nix
@@ -121,7 +121,7 @@ stdenv.mkDerivation (finalAttrs: {
     "-DMIGRAPHX_ENABLE_GPU=ON"
     "-DMIGRAPHX_ENABLE_CPU=ON"
     "-DMIGRAPHX_ENABLE_FPGA=ON"
-    "-DMIGRAPHX_ENABLE_MLIR=OFF" # LLVM or rocMLIR mismatch?
+    "-DMIGRAPHX_ENABLE_MLIR=ON"
     "-DCMAKE_C_COMPILER=amdclang"
     "-DCMAKE_CXX_COMPILER=amdclang++"
     "-DCMAKE_VERBOSE_MAKEFILE=ON"

From 2cf4007eb73fdf35b7b1a22560d1fb44c5c8c1a6 Mon Sep 17 00:00:00 2001
From: Jonathan Davies <jpds@protonmail.com>
Date: Sat, 7 Feb 2026 20:37:27 +0000
Subject: [PATCH 74/79] vector: Disable flakey test_run_command_linux on
 aarch64

---
 pkgs/by-name/ve/vector/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/ve/vector/package.nix b/pkgs/by-name/ve/vector/package.nix
index 7ec0a9906f39..d3935e0f64a5 100644
--- a/pkgs/by-name/ve/vector/package.nix
+++ b/pkgs/by-name/ve/vector/package.nix
@@ -129,6 +129,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   ]
   ++ lib.optionals (stdenv.hostPlatform.isAarch64 && stdenv.hostPlatform.isLinux) [
     # Flakey on aarch64-linux
+    "--skip=sources::exec::tests::test_run_command_linux"
     "--skip=topology::test::backpressure::buffer_drop_fan_out"
     "--skip=topology::test::backpressure::default_fan_out"
     "--skip=topology::test::backpressure::serial_backpressure"

From 908ceb2faa49938daf30e002c32290f01bb570d7 Mon Sep 17 00:00:00 2001
From: wrvsrx <wrvsrx@outlook.com>
Date: Sun, 25 Jan 2026 04:18:41 +0800
Subject: [PATCH 75/79] nixos/taskchampion-sync-server: create user, group,
 dataDir only when users use default value

When users customize the taskchampion-sync-server data directory path,
they should handle permissions themselves. When using the default path,
systemd's StateDirectory can manage the permissions automatically.

This change:

- Only creates the default user/group when users haven't specified custom ones
- Removes manual tmpfiles.d configuration for directory creation
- Uses systemd's StateDirectory for automatic permission handling when using default dataDir
---
 .../misc/taskchampion-sync-server.nix         | 29 +++++++++----------
 1 file changed, 14 insertions(+), 15 deletions(-)

diff --git a/nixos/modules/services/misc/taskchampion-sync-server.nix b/nixos/modules/services/misc/taskchampion-sync-server.nix
index 6c37d70cf96d..7e47f1e71363 100644
--- a/nixos/modules/services/misc/taskchampion-sync-server.nix
+++ b/nixos/modules/services/misc/taskchampion-sync-server.nix
@@ -7,6 +7,9 @@
 let
   inherit (lib) types;
   cfg = config.services.taskchampion-sync-server;
+  defaultUser = "taskchampion";
+  defaultGroup = "taskchampion";
+  defaultDir = "/var/lib/taskchampion-sync-server";
 in
 {
   options.services.taskchampion-sync-server = {
@@ -15,12 +18,12 @@ in
     user = lib.mkOption {
       description = "Unix User to run the server under";
       type = types.str;
-      default = "taskchampion";
+      default = defaultUser;
     };
     group = lib.mkOption {
       description = "Unix Group to run the server under";
       type = types.str;
-      default = "taskchampion";
+      default = defaultGroup;
     };
     host = lib.mkOption {
       description = "Host address on which to serve";
@@ -37,7 +40,7 @@ in
     dataDir = lib.mkOption {
       description = "Directory in which to store data";
       type = types.path;
-      default = "/var/lib/taskchampion-sync-server";
+      default = defaultDir;
     };
     snapshot = {
       versions = lib.mkOption {
@@ -59,22 +62,12 @@ in
   };
 
   config = lib.mkIf cfg.enable {
-    users.users.${cfg.user} = {
+    users.users.${cfg.user} = lib.mkIf (cfg.user == defaultUser) {
       isSystemUser = true;
       inherit (cfg) group;
     };
-    users.groups.${cfg.group} = { };
+    users.groups.${cfg.group} = lib.mkIf (cfg.group == defaultGroup) { };
     networking.firewall.allowedTCPPorts = lib.mkIf (cfg.openFirewall) [ cfg.port ];
-    systemd.tmpfiles.settings = {
-      "10-taskchampion-sync-server" = {
-        "${cfg.dataDir}" = {
-          d = {
-            inherit (cfg) group user;
-            mode = "0750";
-          };
-        };
-      };
-    };
 
     systemd.services.taskchampion-sync-server = {
       wantedBy = [ "multi-user.target" ];
@@ -82,7 +75,13 @@ in
       serviceConfig = {
         User = cfg.user;
         Group = cfg.group;
+        # If we enable DynamicUser, users need to move
+        # /var/lib/taskchampion-sync-server to
+        # /var/lib/private/taskchampion-sync-server manually, which is a
+        # breakage. So we keep the old behavior and we'll do the migration in
+        # another PR.
         DynamicUser = false;
+        StateDirectory = lib.mkIf (cfg.dataDir == defaultDir) "taskchampion-sync-server";
         ExecStart = ''
           ${lib.getExe cfg.package} \
             --listen "${cfg.host}:${toString cfg.port}" \

From e1b4daab36650f1ffa9583a4df8be4002aa9fab0 Mon Sep 17 00:00:00 2001
From: Doron Behar <doron.behar@gmail.com>
Date: Sun, 8 Feb 2026 00:49:14 +0200
Subject: [PATCH 76/79] nixos/mpd: correctly handle null valued cfg.settings

Tested with:

```diff
diff --git a/nixos/tests/mpd.nix b/nixos/tests/mpd.nix
index 36337bfbb4de..980dcca9048d 100644
--- a/nixos/tests/mpd.nix
+++ b/nixos/tests/mpd.nix
@@ -63,6 +63,7 @@ in
           mpd = defaultMpdCfg // {
             settings = {
               bind_to_address = "any";
+              db_file = null;
               audio_output = [
                 {
                   type = "alsa";
```

Per https://github.com/NixOS/nixpkgs/pull/485884#issuecomment-3865647552
---
 nixos/modules/services/audio/mpd.nix | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/nixos/modules/services/audio/mpd.nix b/nixos/modules/services/audio/mpd.nix
index 1801bdc989d8..bc5c206f967b 100644
--- a/nixos/modules/services/audio/mpd.nix
+++ b/nixos/modules/services/audio/mpd.nix
@@ -26,10 +26,9 @@ let
           "\"" + (toString v) + "\""
       )
     ) a;
-  nonBlockSettings = lib.filterAttrs (
-    n: v: !(builtins.isAttrs v || builtins.isList v || isNull v)
-  ) cfg.settings;
-  pureBlockSettings = removeAttrs cfg.settings (builtins.attrNames nonBlockSettings);
+  settings = lib.filterAttrs (n: v: !(isNull v)) cfg.settings;
+  nonBlockSettings = lib.filterAttrs (n: v: !(builtins.isAttrs v || builtins.isList v)) settings;
+  pureBlockSettings = removeAttrs settings (builtins.attrNames nonBlockSettings);
   blocks =
     pureBlockSettings
     // lib.optionalAttrs cfg.fluidsynth {

From b66f8d283d97a27070914c4a5a45ef11bf4fbd7a Mon Sep 17 00:00:00 2001
From: Mio <mio@mio19.uk>
Date: Wed, 28 Jan 2026 13:23:16 +1100
Subject: [PATCH 77/79] ego: 1.1.7 -> 1.2.0

---
 pkgs/by-name/eg/ego/package.nix | 22 ++++++++++++++++------
 1 file changed, 16 insertions(+), 6 deletions(-)

diff --git a/pkgs/by-name/eg/ego/package.nix b/pkgs/by-name/eg/ego/package.nix
index 25c0ca405fb8..bf8febe5d4aa 100644
--- a/pkgs/by-name/eg/ego/package.nix
+++ b/pkgs/by-name/eg/ego/package.nix
@@ -4,33 +4,43 @@
   fetchFromGitHub,
   makeBinaryWrapper,
   acl,
+  libxcb,
   xhost,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ego";
-  version = "1.1.7";
+  version = "1.2.0";
 
   src = fetchFromGitHub {
     owner = "intgr";
     repo = "ego";
-    rev = finalAttrs.version;
-    hash = "sha256-613RM7Ldye0wHAH3VMhzhyT5WVTybph3gS/WNMrsgGI=";
+    tag = finalAttrs.version;
+    hash = "sha256-TO0jyi6XGPfuF7s4vTV8uT43SjCGUx6cVZONyb5e93Q=";
   };
 
-  buildInputs = [ acl ];
+  buildInputs = [
+    acl
+    libxcb
+  ];
 
   nativeBuildInputs = [ makeBinaryWrapper ];
 
-  cargoHash = "sha256-GwWDH3np/YKUx7BLmKxUui2CXLYbHjivWC1av9jaccA=";
+  cargoHash = "sha256-MmcZrjjNvc3C/RRMCQsuaJT4sf+gTAaxVDtKGHjKqc8=";
 
   # requires access to /root
   checkFlags = [
     "--skip=tests::test_check_user_homedir"
   ];
 
+  preCheck = ''
+    export LD_LIBRARY_PATH="${lib.makeLibraryPath [ libxcb ]}:$LD_LIBRARY_PATH"
+  '';
+
   postInstall = ''
-    wrapProgram $out/bin/ego --prefix PATH : ${lib.makeBinPath [ xhost ]}
+    wrapProgram $out/bin/ego \
+      --prefix PATH : ${lib.makeBinPath [ xhost ]} \
+      --prefix LD_LIBRARY_PATH : ${lib.makeLibraryPath [ libxcb ]}
   '';
 
   meta = {

From 62f31a2719a0d0ff9f69842160940ce8e8053142 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 28 Jan 2026 18:38:39 +0000
Subject: [PATCH 78/79] gpu-screen-recorder: 5.12.1 -> 5.12.3

---
 pkgs/by-name/gp/gpu-screen-recorder/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gp/gpu-screen-recorder/package.nix b/pkgs/by-name/gp/gpu-screen-recorder/package.nix
index 4e68f47ac5fd..23e29af4ec99 100644
--- a/pkgs/by-name/gp/gpu-screen-recorder/package.nix
+++ b/pkgs/by-name/gp/gpu-screen-recorder/package.nix
@@ -28,12 +28,12 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gpu-screen-recorder";
-  version = "5.12.1";
+  version = "5.12.3";
 
   src = fetchgit {
     url = "https://repo.dec05eba.com/gpu-screen-recorder";
     tag = finalAttrs.version;
-    hash = "sha256-FUt3R2clnWYNKgW5uo2HtON91zB2+u+Ini15/ccTJdk=";
+    hash = "sha256-sl5apGLA64xgHxk7C47aK+OTVPjAVkpxi2yhN6HoJyk=";
   };
 
   nativeBuildInputs = [

From a4606bbe1ac34a4df88494b4cbe1d929aa341551 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 4 Feb 2026 20:02:10 +0000
Subject: [PATCH 79/79] ispc: 1.29.1 -> 1.30.0

---
 pkgs/by-name/is/ispc/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/is/ispc/package.nix b/pkgs/by-name/is/ispc/package.nix
index 0a2214e746ca..a268f04696ed 100644
--- a/pkgs/by-name/is/ispc/package.nix
+++ b/pkgs/by-name/is/ispc/package.nix
@@ -21,13 +21,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "ispc";
-  version = "1.29.1";
+  version = "1.30.0";
 
   src = fetchFromGitHub {
     owner = "ispc";
     repo = "ispc";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-4kYyUBGhTS9XurRjxXnEv12+UzZvSnu7DndhS5AhwQo=";
+    hash = "sha256-CzyK38c8fCG7QiVHE0rSzxmyTXNr4sg1WtChbi75Wmw=";
   };
 
   nativeBuildInputs = [