From f7e134def959e06f0f2eed5a9d157aab8a5faa2a Mon Sep 17 00:00:00 2001
From: Chris Kruining <chris@kruining.eu>
Date: Wed, 2 Jul 2025 20:53:02 +0200
Subject: [PATCH 01/48] nixos/lanraragi: add openFirewall option

Makes it easier to set up the service, many other services offer this option
---
 nixos/modules/services/web-apps/lanraragi.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/nixos/modules/services/web-apps/lanraragi.nix b/nixos/modules/services/web-apps/lanraragi.nix
index 4c029d301827..1fbffa47238d 100644
--- a/nixos/modules/services/web-apps/lanraragi.nix
+++ b/nixos/modules/services/web-apps/lanraragi.nix
@@ -22,6 +22,10 @@ in
         description = "Port for LANraragi's web interface.";
       };
 
+      openFirewall = lib.mkEnableOption "" // {
+        description = "Open ports in the firewall for the Radarr web interface.";
+      };
+
       passwordFile = lib.mkOption {
         type = lib.types.nullOr lib.types.path;
         default = null;
@@ -103,5 +107,9 @@ in
           EOF
         '';
     };
+
+    networking.firewall = lib.mkIf cfg.openFirewall {
+      allowedTCPPorts = [ cfg.port ];
+    };
   };
 }

From 3f4418f79d24ce04decc6871e1e472e8d3704129 Mon Sep 17 00:00:00 2001
From: Pol Dellaiera <pol.dellaiera@protonmail.com>
Date: Mon, 7 Jul 2025 15:44:27 +0200
Subject: [PATCH 02/48] rundeck-cli: fix missing `java.logging` module

---
 pkgs/by-name/ru/rundeck-cli/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ru/rundeck-cli/package.nix b/pkgs/by-name/ru/rundeck-cli/package.nix
index 7de143781188..7133be4c9825 100644
--- a/pkgs/by-name/ru/rundeck-cli/package.nix
+++ b/pkgs/by-name/ru/rundeck-cli/package.nix
@@ -11,6 +11,9 @@
 let
   jre11_minimal_headless = jre11_minimal.override {
     jdk = jdk11_headless;
+    modules = [
+      "java.logging"
+    ];
   };
 in
 stdenv.mkDerivation (finalAttrs: {

From d2306173181b517989e393dcde43b999055d690c Mon Sep 17 00:00:00 2001
From: Anders Bennehag <anders@bennehag.com>
Date: Fri, 11 Jul 2025 18:50:41 -0600
Subject: [PATCH 03/48] prime-server: Expand `platforms` to include `darwin`

This package compiles fine on Apple ARM64 outside of NixOs
---
 pkgs/by-name/pr/prime-server/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/pr/prime-server/package.nix b/pkgs/by-name/pr/prime-server/package.nix
index 41bd6671019f..64ee8fa1d602 100644
--- a/pkgs/by-name/pr/prime-server/package.nix
+++ b/pkgs/by-name/pr/prime-server/package.nix
@@ -41,6 +41,6 @@ stdenv.mkDerivation rec {
     homepage = "https://github.com/kevinkreiser/prime_server";
     license = licenses.bsd2;
     maintainers = [ maintainers.Thra11 ];
-    platforms = platforms.linux;
+    platforms = platforms.linux ++ platforms.darwin;
   };
 }

From 2c9de9e1f1ab959bb057b39ff62cc58ac3b1dc81 Mon Sep 17 00:00:00 2001
From: jopejoe1 <jopejoe1@missing.ninja>
Date: Wed, 16 Jul 2025 19:10:57 +0200
Subject: [PATCH 04/48] python3Packages.pytest-unmagic: add update script

---
 pkgs/development/python-modules/pytest-unmagic/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/development/python-modules/pytest-unmagic/default.nix b/pkgs/development/python-modules/pytest-unmagic/default.nix
index 946478de5f68..e770516cb457 100644
--- a/pkgs/development/python-modules/pytest-unmagic/default.nix
+++ b/pkgs/development/python-modules/pytest-unmagic/default.nix
@@ -3,6 +3,7 @@
   buildPythonPackage,
   fetchFromGitHub,
   pytestCheckHook,
+  gitUpdater,
   flit-core,
   pytest,
 }:
@@ -29,6 +30,8 @@ buildPythonPackage rec {
 
   pythonImportsCheck = [ "unmagic" ];
 
+  passthru.updateScript = gitUpdater { rev-prefix = "v"; };
+
   meta = {
     description = "Pytest fixtures with conventional import semantics";
     homepage = "https://github.com/dimagi/pytest-unmagic";

From cf0e49113ab350bd682a8c7ca9fd28406eae6ecc Mon Sep 17 00:00:00 2001
From: jopejoe1 <jopejoe1@missing.ninja>
Date: Wed, 16 Jul 2025 17:11:14 +0000
Subject: [PATCH 05/48] python3Packages.pytest-unmagic: 1.0.0 -> 1.0.1

---
 pkgs/development/python-modules/pytest-unmagic/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/pytest-unmagic/default.nix b/pkgs/development/python-modules/pytest-unmagic/default.nix
index e770516cb457..869bbfd65b03 100644
--- a/pkgs/development/python-modules/pytest-unmagic/default.nix
+++ b/pkgs/development/python-modules/pytest-unmagic/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage rec {
   pname = "pytest-unmagic";
-  version = "1.0.0";
+  version = "1.0.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "dimagi";
     repo = "pytest-unmagic";
     tag = "v${version}";
-    hash = "sha256-5WnLjQ0RuwLBIZAbOJoQ0KBEnb7yUWTUFBKy+WgNctQ=";
+    hash = "sha256-XHeQuMCYHtrNF5+7e/eMzcvYukM+AobHCMRdzL+7KpU=";
   };
 
   build-system = [

From d3e4f784aa1bb95ad8a13cadc7073e6617658f2f Mon Sep 17 00:00:00 2001
From: Rebecca Turner <rbt@sent.as>
Date: Fri, 11 Jul 2025 10:46:58 -0700
Subject: [PATCH 06/48] haskellPackages.mkDerivation: Add `env` argument

Previously, setting environment variables in a Haskell package build
required using `.overrideAttrs`, which (I think?) breaks later
invocations of `haskell.lib.overrideCabal`.

This patch adds an `env` argument to `haskellPackages.mkDerivation`,
which can be used to set environment variables during Haskell package
builds.
---
 doc/languages-frameworks/haskell.section.md   |  4 ++
 .../haskell-modules/generic-builder.nix       | 72 +++++++++++++------
 pkgs/test/haskell/default.nix                 |  1 +
 pkgs/test/haskell/env/default.nix             | 55 ++++++++++++++
 4 files changed, 112 insertions(+), 20 deletions(-)
 create mode 100644 pkgs/test/haskell/env/default.nix

diff --git a/doc/languages-frameworks/haskell.section.md b/doc/languages-frameworks/haskell.section.md
index 7da9580e2045..63944fd1bc01 100644
--- a/doc/languages-frameworks/haskell.section.md
+++ b/doc/languages-frameworks/haskell.section.md
@@ -223,6 +223,10 @@ If `null` (which is the default value), the one included in `src` is used.
 `editedCabalFile`
 : `sha256` hash of the cabal file identified by `revision` or `null`.
 
+`env`
+: Extra environment variables to set during the build.
+These will also be set inside the [development environment defined by the `passthru.env` attribute in the returned derivation](#haskell-development-environments), but will not be set inside a development environment built with [`shellFor`](#haskell-shellFor) that includes this package.
+
 `configureFlags`
 : Extra flags passed when executing the `configure` command of `Setup.hs`.
 
diff --git a/pkgs/development/haskell-modules/generic-builder.nix b/pkgs/development/haskell-modules/generic-builder.nix
index 6e5cb29be5fb..ab797cc3a44d 100644
--- a/pkgs/development/haskell-modules/generic-builder.nix
+++ b/pkgs/development/haskell-modules/generic-builder.nix
@@ -57,6 +57,9 @@ in
   },
   sourceRoot ? null,
   setSourceRoot ? null,
+  # Extra environment variables to set during the build.
+  # See: `../../../doc/languages-frameworks/haskell.section.md`
+  env ? { },
   buildDepends ? [ ],
   setupHaskellDepends ? [ ],
   libraryHaskellDepends ? [ ],
@@ -553,6 +556,19 @@ let
       "haskellPackages.mkDerivation: testTarget is deprecated. Use testTargets instead"
       (lib.concatStringsSep " " testTargets);
 
+  env' =
+    {
+      LANG = "en_US.UTF-8"; # GHC needs the locale configured during the Haddock phase.
+    }
+    // env
+    # Implicit pointer to integer conversions are errors by default since clang 15.
+    # Works around https://gitlab.haskell.org/ghc/ghc/-/issues/23456.
+    // optionalAttrs (stdenv.hasCC && stdenv.cc.isClang) {
+      NIX_CFLAGS_COMPILE =
+        "-Wno-error=int-conversion"
+        + lib.optionalString (env ? NIX_CFLAGS_COMPILE) (" " + env.NIX_CFLAGS_COMPILE);
+    };
+
 in
 lib.fix (
   drv:
@@ -586,7 +602,11 @@ lib.fix (
         ++ optionals stdenv.hostPlatform.isGhcjs [ nodejs ];
       propagatedBuildInputs = optionals isLibrary propagatedBuildInputs;
 
-      LANG = "en_US.UTF-8"; # GHC needs the locale configured during the Haddock phase.
+      env =
+        optionalAttrs (stdenv.buildPlatform.libc == "glibc") {
+          LOCALE_ARCHIVE = "${glibcLocales}/lib/locale/locale-archive";
+        }
+        // env';
 
       prePatch =
         optionalString (editedCabalFile != null) ''
@@ -992,16 +1012,37 @@ lib.fix (
             nativeBuildInputs =
               [ ghcEnv ] ++ optional (allPkgconfigDepends != [ ]) pkg-config ++ collectedToolDepends;
             buildInputs = otherBuildInputsSystem;
-            LANG = "en_US.UTF-8";
-            LOCALE_ARCHIVE = lib.optionalString (
-              stdenv.buildPlatform.libc == "glibc"
-            ) "${buildPackages.glibcLocales}/lib/locale/locale-archive";
-            "NIX_${ghcCommandCaps}" = "${ghcEnv}/bin/${ghcCommand}";
-            "NIX_${ghcCommandCaps}PKG" = "${ghcEnv}/bin/${ghcCommand}-pkg";
-            # TODO: is this still valid?
-            "NIX_${ghcCommandCaps}_DOCDIR" = "${ghcEnv}/share/doc/ghc/html";
-            "NIX_${ghcCommandCaps}_LIBDIR" =
-              if ghc.isHaLVM or false then "${ghcEnv}/lib/HaLVM-${ghc.version}" else "${ghcEnv}/${ghcLibdir}";
+
+            env =
+              {
+                "NIX_${ghcCommandCaps}" = "${ghcEnv}/bin/${ghcCommand}";
+                "NIX_${ghcCommandCaps}PKG" = "${ghcEnv}/bin/${ghcCommand}-pkg";
+                # TODO: is this still valid?
+                "NIX_${ghcCommandCaps}_DOCDIR" = "${ghcEnv}/share/doc/ghc/html";
+                "NIX_${ghcCommandCaps}_LIBDIR" =
+                  if ghc.isHaLVM or false then "${ghcEnv}/lib/HaLVM-${ghc.version}" else "${ghcEnv}/${ghcLibdir}";
+              }
+              // optionalAttrs (stdenv.buildPlatform.libc == "glibc") {
+                # TODO: Why is this written in terms of `buildPackages`, unlike
+                # the outer `env`?
+                #
+                # According to @sternenseemann [1]:
+                #
+                # > The condition is based on `buildPlatform`, so it needs to
+                # > match. `LOCALE_ARCHIVE` is set to accompany `LANG` which
+                # > concerns things we execute on the build platform like
+                # > `haddock`.
+                # >
+                # > Arguably the outer non `buildPackages` one is incorrect and
+                # > probably works by accident in most cases since the locale
+                # > archive is not platform specific (the trouble is that it
+                # > may sometimes be impossible to cross-compile). At least
+                # > that would be my assumption.
+                #
+                # [1]: https://github.com/NixOS/nixpkgs/pull/424368#discussion_r2202683378
+                LOCALE_ARCHIVE = "${buildPackages.glibcLocales}/lib/locale/locale-archive";
+              }
+              // env';
           } "echo $nativeBuildInputs $buildInputs > $out";
 
         env = envFunc { };
@@ -1047,17 +1088,8 @@ lib.fix (
     // optionalAttrs (args ? postFixup) { inherit postFixup; }
     // optionalAttrs (args ? dontStrip) { inherit dontStrip; }
     // optionalAttrs (postPhases != [ ]) { inherit postPhases; }
-    // optionalAttrs (stdenv.buildPlatform.libc == "glibc") {
-      LOCALE_ARCHIVE = "${glibcLocales}/lib/locale/locale-archive";
-    }
     // optionalAttrs (disallowedRequisites != [ ] || disallowGhcReference) {
       disallowedRequisites = disallowedRequisites ++ (if disallowGhcReference then [ ghc ] else [ ]);
     }
-
-    # Implicit pointer to integer conversions are errors by default since clang 15.
-    # Works around https://gitlab.haskell.org/ghc/ghc/-/issues/23456.
-    // optionalAttrs (stdenv.hasCC && stdenv.cc.isClang) {
-      NIX_CFLAGS_COMPILE = "-Wno-error=int-conversion";
-    }
   )
 )
diff --git a/pkgs/test/haskell/default.nix b/pkgs/test/haskell/default.nix
index 26250ccc8f00..6be941c5f9e9 100644
--- a/pkgs/test/haskell/default.nix
+++ b/pkgs/test/haskell/default.nix
@@ -3,6 +3,7 @@
 lib.recurseIntoAttrs {
   cabalSdist = callPackage ./cabalSdist { };
   documentationTarball = callPackage ./documentationTarball { };
+  env = callPackage ./env { };
   ghcWithPackages = callPackage ./ghcWithPackages { };
   incremental = callPackage ./incremental { };
   setBuildTarget = callPackage ./setBuildTarget { };
diff --git a/pkgs/test/haskell/env/default.nix b/pkgs/test/haskell/env/default.nix
new file mode 100644
index 000000000000..ae337d835c00
--- /dev/null
+++ b/pkgs/test/haskell/env/default.nix
@@ -0,0 +1,55 @@
+{
+  lib,
+  haskellPackages,
+}:
+
+let
+  withEnv =
+    env:
+    haskellPackages.mkDerivation {
+      pname = "puppy";
+      version = "1.0.0";
+      src = null;
+      license = null;
+
+      inherit env;
+    };
+
+  failures = lib.runTests {
+    testCanSetEnv = {
+      expr =
+        (withEnv {
+          PUPPY = "DOGGY";
+        }).drvAttrs.PUPPY;
+      expected = "DOGGY";
+    };
+
+    testCanSetEnvMultiple = {
+      expr =
+        let
+          env =
+            (withEnv {
+              PUPPY = "DOGGY";
+              SILLY = "GOOFY";
+            }).drvAttrs;
+        in
+        {
+          inherit (env) PUPPY SILLY;
+        };
+      expected = {
+        PUPPY = "DOGGY";
+        SILLY = "GOOFY";
+      };
+    };
+
+    testCanSetEnvPassthru = {
+      expr =
+        (withEnv {
+          PUPPY = "DOGGY";
+        }).passthru.env.PUPPY;
+      expected = "DOGGY";
+    };
+  };
+in
+# TODO: Use `lib.debug.throwTestFailures`: https://github.com/NixOS/nixpkgs/pull/416207
+lib.optional (failures != [ ]) (throw "${lib.generators.toPretty { } failures}")

From dba7c0b42418482b1975224ccd62a0468891d9a0 Mon Sep 17 00:00:00 2001
From: Daniel Hill <daniel@gluo.nz>
Date: Thu, 17 Jul 2025 16:19:39 +1200
Subject: [PATCH 07/48] manifold: move clipper2 to propagatedBuildInputs

---
 pkgs/by-name/ma/manifold/package.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/ma/manifold/package.nix b/pkgs/by-name/ma/manifold/package.nix
index 119fc497c73c..c1a4c4cfddaa 100644
--- a/pkgs/by-name/ma/manifold/package.nix
+++ b/pkgs/by-name/ma/manifold/package.nix
@@ -26,9 +26,10 @@ stdenv.mkDerivation (finalAttrs: {
     gtest
     glm
     tbb_2021
-    clipper2
   ];
 
+  propagatedBuildInputs = [ clipper2 ];
+
   cmakeFlags = [
     "-DBUILD_SHARED_LIBS=ON"
     "-DMANIFOLD_TEST=ON"

From 51a67c7968abf190f950f6b405ffd80793f9f843 Mon Sep 17 00:00:00 2001
From: Daniel Hill <daniel@gluo.nz>
Date: Thu, 12 Jun 2025 11:03:17 +1200
Subject: [PATCH 08/48] blender: 4.4 -> 4.5

tbb minimum version of 2021.13 is now required, migrated to v2022.x.
---
 pkgs/by-name/bl/blender/package.nix | 30 ++++++++++++++++-------------
 1 file changed, 17 insertions(+), 13 deletions(-)

diff --git a/pkgs/by-name/bl/blender/package.nix b/pkgs/by-name/bl/blender/package.nix
index 7cf4b1a96a6d..8dde30b3e814 100644
--- a/pkgs/by-name/bl/blender/package.nix
+++ b/pkgs/by-name/bl/blender/package.nix
@@ -15,6 +15,7 @@
   dbus,
   embree,
   fetchzip,
+  fetchFromGitHub,
   ffmpeg,
   fftw,
   fftwFloat,
@@ -48,6 +49,7 @@
   libxkbcommon,
   llvmPackages,
   makeWrapper,
+  manifold,
   mesa,
   nix-update-script,
   openUsdSupport ? !stdenv.hostPlatform.isDarwin,
@@ -72,7 +74,7 @@
   spaceNavSupport ? stdenv.hostPlatform.isLinux,
   sse2neon,
   stdenv,
-  tbb,
+  tbb_2022,
   vulkan-headers,
   vulkan-loader,
   wayland,
@@ -100,26 +102,27 @@ let
     patches = (old.patches or [ ]) ++ [ ./libdecor.patch ];
   });
 
-  optix = fetchzip {
-    # Look at upstream Blender BuildBot logs to determine the current version,
-    # see Git blame here for historical details
-    url = "https://developer.download.nvidia.com/redist/optix/v7.4/OptiX-7.4.0-Include.zip";
-    hash = "sha256-ca08XetwaUYC9foeP5bff9kcDfuFgEzopvjspn2s8RY=";
+  # See build_files/config/pipeline_config.yaml in upstream source for version
+  optix = fetchFromGitHub {
+    owner = "NVIDIA";
+    repo = "optix-dev";
+    tag = "v8.0.0";
+    hash = "sha256-SXkXZHzQH8JOkXypjjxNvT/lUlWZkCuhh6hNCHE7FkY=";
   };
+
+  tbb = tbb_2022;
 in
 
 stdenv'.mkDerivation (finalAttrs: {
   pname = "blender";
-  version = "4.4.3";
+  version = "4.5.0";
 
   src = fetchzip {
     name = "source";
     url = "https://download.blender.org/source/blender-${finalAttrs.version}.tar.xz";
-    hash = "sha256-vHDOKI7uqB5EbdRu711axBuYX1zM746E6GvK2Nl5hZg=";
+    hash = "sha256-ERT/apulQ9ogA7Uk/AfjBee0rLjxEXItw6GwDOoysXk=";
   };
 
-  patches = [ ] ++ lib.optional stdenv.hostPlatform.isDarwin ./darwin.patch;
-
   postPatch =
     (lib.optionalString stdenv.hostPlatform.isDarwin ''
       : > build_files/cmake/platform/platform_apple_xcode.cmake
@@ -247,13 +250,14 @@ stdenv'.mkDerivation (finalAttrs: {
       libsndfile
       libtiff
       libwebp
+      (manifold.override { tbb_2021 = tbb; })
       opencolorio
       openexr
       openimageio_2
       openjpeg
-      openpgl
+      (openpgl.override { inherit tbb; })
       (opensubdiv.override { inherit cudaSupport; })
-      openvdb
+      (openvdb.override { inherit tbb; })
       potrace
       pugixml
       python3
@@ -263,7 +267,7 @@ stdenv'.mkDerivation (finalAttrs: {
       zstd
     ]
     ++ lib.optional embreeSupport embree
-    ++ lib.optional openImageDenoiseSupport (openimagedenoise.override { inherit cudaSupport; })
+    ++ lib.optional openImageDenoiseSupport (openimagedenoise.override { inherit cudaSupport tbb; })
     ++ (
       if (!stdenv.hostPlatform.isDarwin) then
         [

From e1693dff92c24588e37f2d67829571d6bd616e05 Mon Sep 17 00:00:00 2001
From: Thomas Bereknyei <tomberek@gmail.com>
Date: Thu, 17 Jul 2025 01:10:32 -0400
Subject: [PATCH 09/48] openvscode-server: 1.99.3 -> 1.101.2

---
 pkgs/by-name/op/openvscode-server/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/op/openvscode-server/package.nix b/pkgs/by-name/op/openvscode-server/package.nix
index 36d49ba424d9..44c2babca569 100644
--- a/pkgs/by-name/op/openvscode-server/package.nix
+++ b/pkgs/by-name/op/openvscode-server/package.nix
@@ -36,13 +36,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "openvscode-server";
-  version = "1.99.3";
+  version = "1.101.2";
 
   src = fetchFromGitHub {
     owner = "gitpod-io";
     repo = "openvscode-server";
     rev = "openvscode-server-v${finalAttrs.version}";
-    hash = "sha256-nA+StCJgutWjD7vgCCcj9B91QSF7dEHnlNtj7zgJRwI=";
+    hash = "sha256-pcsto9zEq8BTP5jlQoGQzWEhdJNJMNkJY9S6FGw7LrI=";
   };
 
   ## fetchNpmDeps doesn't correctly process git dependencies
@@ -55,7 +55,7 @@ stdenv.mkDerivation (finalAttrs: {
         inherit (finalAttrs) src nativeBuildInputs;
         outputHashMode = "recursive";
         outputHashAlgo = "sha256";
-        outputHash = "sha256-lgzNpWFAIGNxjDZ60kRw80fP1qEItk3FN1s5t7KdxGA=";
+        outputHash = "sha256-iSKDwe/ufJnC7mDqG0x+WcCckyUY/9dI/4ZTMvfBWIc=";
         env = {
           FORCE_EMPTY_CACHE = true;
           FORCE_GIT_DEPS = true;

From 999af6fa0d0e5d59b501313a3b55f5fe5c3901d6 Mon Sep 17 00:00:00 2001
From: Jaco Malan <jacomalan.12@gmail.com>
Date: Thu, 3 Jul 2025 15:24:12 +0200
Subject: [PATCH 10/48] maintainers: add JacoMalan1

---
 maintainers/maintainer-list.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 04a1e3c0b6d3..c5d52db1feb9 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -11273,6 +11273,13 @@
     githubId = 45084216;
     keys = [ { fingerprint = "1BF9 8D10 E0D0 0B41 5723  5836 4C13 3A84 E646 9228"; } ];
   };
+  JacoMalan1 = {
+    name = "Jaco Malan";
+    email = "jacom@codelog.co.za";
+    github = "JacoMalan1";
+    githubId = 10290409;
+    keys = [ { fingerprint = "339C 9213 7F2D 5D6E 2B6A  6E98 240B B4C4 27BC 327A"; } ];
+  };
   jaculabilis = {
     name = "Tim Van Baak";
     email = "tim.vanbaak@gmail.com";

From 0b47ed1b35e2a894f4ace1d2280220fca4a9ad2c Mon Sep 17 00:00:00 2001
From: Connor Baker <ConnorBaker01@gmail.com>
Date: Fri, 18 Jul 2025 04:22:43 +0000
Subject: [PATCH 11/48] nixos/nix-required-mounts: add driverLink symlink
 target to NVIDIA defaults

Signed-off-by: Connor Baker <ConnorBaker01@gmail.com>
---
 nixos/modules/programs/nix-required-mounts.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/nixos/modules/programs/nix-required-mounts.nix b/nixos/modules/programs/nix-required-mounts.nix
index 787947226e79..625baa0514e5 100644
--- a/nixos/modules/programs/nix-required-mounts.nix
+++ b/nixos/modules/programs/nix-required-mounts.nix
@@ -47,7 +47,10 @@ let
     );
 
   driverPaths = [
+    # opengl:
+    # NOTE: Since driverLink is just a symlink, we need to include its target as well.
     pkgs.addDriverRunpath.driverLink
+    config.systemd.tmpfiles.settings.graphics-driver."/run/opengl-driver"."L+".argument
 
     # mesa:
     config.hardware.graphics.package

From 86738024036647b7cb01acedb90872457f913184 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 18 Jul 2025 20:58:17 +0000
Subject: [PATCH 12/48] source-meta-json-schema: 9.4.0 -> 10.0.0

---
 pkgs/by-name/so/source-meta-json-schema/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/so/source-meta-json-schema/package.nix b/pkgs/by-name/so/source-meta-json-schema/package.nix
index 2a1fbd5b7c1f..c2e2216aadda 100644
--- a/pkgs/by-name/so/source-meta-json-schema/package.nix
+++ b/pkgs/by-name/so/source-meta-json-schema/package.nix
@@ -5,7 +5,7 @@
   cmake,
 }:
 let
-  version = "9.4.0";
+  version = "10.0.0";
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "source-meta-json-schema";
@@ -15,7 +15,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "sourcemeta";
     repo = "jsonschema";
     rev = "v${version}";
-    hash = "sha256-7Emcoabcj4p0bAAryIOaagojU3sQkO5NZ8UyerLjXms=";
+    hash = "sha256-fYNbHU9DcSzMrMt+pDbbtPirTc+Wu4jq+vSqq+qzhtE=";
   };
 
   nativeBuildInputs = [

From f6db7ead96659957cd348b88ec18219dae051fa9 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 18 Jul 2025 22:41:15 +0000
Subject: [PATCH 13/48] dokieli: 0-unstable-2025-07-10 -> 0-unstable-2025-07-11

---
 pkgs/by-name/do/dokieli/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/do/dokieli/package.nix b/pkgs/by-name/do/dokieli/package.nix
index 6ebde44bde5c..f37464438c9a 100644
--- a/pkgs/by-name/do/dokieli/package.nix
+++ b/pkgs/by-name/do/dokieli/package.nix
@@ -13,13 +13,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "dokieli";
-  version = "0-unstable-2025-07-10";
+  version = "0-unstable-2025-07-11";
 
   src = fetchFromGitHub {
     owner = "dokieli";
     repo = "dokieli";
-    rev = "fbd73c78f4690452e86a2758825cc5f5209b5322";
-    hash = "sha256-LpUK8Uv8Qt3DMu5n7MHqbUIABlYSNzkw61BijlPRr7s=";
+    rev = "13c0c2d2d307ab1f391aca9aec4efc4ac4ba43c5";
+    hash = "sha256-V9tKoSu1r8LZaIZUu1JSyZ0dM7/zblTDQZHu86/V3LE=";
   };
 
   missingHashes = ./missing-hashes.json;

From abbacbe256293866a56a8e9658c7e4e0b14d46f8 Mon Sep 17 00:00:00 2001
From: "Adam C. Stephens" <adam@valkor.net>
Date: Sat, 19 Jul 2025 13:11:31 +0000
Subject: [PATCH 14/48] envoy-bin: 1.34.2 -> 1.34.3

https://github.com/envoyproxy/envoy/releases/tag/v1.34.3
---
 pkgs/by-name/en/envoy-bin/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/en/envoy-bin/package.nix b/pkgs/by-name/en/envoy-bin/package.nix
index f59a402b19ad..d4983b9b15f3 100644
--- a/pkgs/by-name/en/envoy-bin/package.nix
+++ b/pkgs/by-name/en/envoy-bin/package.nix
@@ -8,7 +8,7 @@
   versionCheckHook,
 }:
 let
-  version = "1.34.2";
+  version = "1.34.3";
   inherit (stdenv.hostPlatform) system;
   throwSystem = throw "envoy-bin is not available for ${system}.";
 
@@ -21,8 +21,8 @@ let
 
   hash =
     {
-      aarch64-linux = "sha256-82jzPZ08FCuM2eABcqU/QTdxEipnnvNjb350ZSiUS0o=";
-      x86_64-linux = "sha256-B1tnshv5fIjIKjeSADSjBotakhUak3rM0NWt4kWoWhk=";
+      aarch64-linux = "sha256-LsNkrFJ59MUiKIF0Dcuq2Lhn3LnAW0Mwlx4kIx78KfQ=";
+      x86_64-linux = "sha256-04vGgR8U0qiNBvmiim0aKa6Ug2acR31F5H4biSWkrag=";
     }
     .${system} or throwSystem;
 in

From 2eb6e9977f796487c52221cccfd7927270830daf Mon Sep 17 00:00:00 2001
From: Marie Ramlow <me@nycode.dev>
Date: Sun, 20 Jul 2025 00:37:16 +0200
Subject: [PATCH 15/48] g3proxy: 1.10.4 -> 1.11.9

---
 pkgs/by-name/g3/g3proxy/package.nix | 42 ++++++++++++++++-------------
 1 file changed, 24 insertions(+), 18 deletions(-)

diff --git a/pkgs/by-name/g3/g3proxy/package.nix b/pkgs/by-name/g3/g3proxy/package.nix
index b9dcdad4c4e5..33e1cf636030 100644
--- a/pkgs/by-name/g3/g3proxy/package.nix
+++ b/pkgs/by-name/g3/g3proxy/package.nix
@@ -7,51 +7,57 @@
   python3,
   lua5_4,
   capnproto,
-  cmake,
+  openssl,
+  rust-bindgen,
+  nix-update-script,
 }:
 
-rustPlatform.buildRustPackage rec {
-  pname = "g3";
-  version = "v1.10.4";
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "g3proxy";
+  version = "1.11.9";
 
   src = fetchFromGitHub {
     owner = "bytedance";
     repo = "g3";
-    tag = "g3proxy-${version}";
-    hash = "sha256-uafKYyzjGdtC+oMJG1wWOvgkSht/wTOzyODcPoTfOnU=";
+    tag = "g3proxy-v${finalAttrs.version}";
+    hash = "sha256-N6Fvdc+Vj7S9CgBby9unKBVBoM9pPlmfyJPxY3KdSXg=";
   };
 
-  cargoHash = "sha256-NbrJGGnpZkF7ZX3MqrMsZ03tWkN/nqWahh00O3IJGOw=";
+  cargoHash = "sha256-bLzkA50XiIUrGyKZ3upo2psjFnjUNups0aIEou+J5IA=";
   useFetchCargoVendor = true;
 
-  # TODO: can we unvendor AWS LC somehow?
-  buildFeatures = [
-    "vendored-aws-lc"
-    "rustls-aws-lc"
+  cargoBuildFlags = [
+    "-p"
+    "g3proxy"
   ];
-
-  # aws-lc/crypto compilation will trigger `strictoverflow` errors.
-  hardeningDisable = [ "strictoverflow" ];
+  cargoTestFlags = finalAttrs.cargoBuildFlags;
 
   nativeBuildInputs = [
     pkg-config
-    rustPlatform.bindgenHook
     python3
     capnproto
-    cmake
+    rust-bindgen
   ];
 
   buildInputs = [
     c-ares
     lua5_4
+    openssl
   ];
 
+  passthru.updateScript = nix-update-script {
+    extraArgs = [
+      "--version-regex"
+      "^g3proxy-v([0-9.]+)$"
+    ];
+  };
+
   meta = {
     description = "Enterprise-oriented Generic Proxy Solutions";
     homepage = "https://github.com/bytedance/g3";
-    changelog = "https://github.com/bytedance/g3/blob/${src.rev}/CHANGELOG.md";
+    changelog = "https://github.com/bytedance/g3/blob/${finalAttrs.src.rev}/CHANGELOG.md";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ raitobezarius ];
     mainProgram = "g3proxy";
   };
-}
+})

From f0e5db702169812273ee90be9dd46010df41a871 Mon Sep 17 00:00:00 2001
From: Marie Ramlow <me@nycode.dev>
Date: Sun, 20 Jul 2025 00:37:16 +0200
Subject: [PATCH 16/48] nixos/g3proxy: run proxy with --systemd --control-dir
 %t/g3proxy

---
 nixos/modules/services/networking/g3proxy.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/services/networking/g3proxy.nix b/nixos/modules/services/networking/g3proxy.nix
index 6df4f37b1123..bdcc8e2e36b7 100644
--- a/nixos/modules/services/networking/g3proxy.nix
+++ b/nixos/modules/services/networking/g3proxy.nix
@@ -54,7 +54,7 @@ in
           let
             g3proxy-yaml = settingsFormat.generate "g3proxy.yaml" cfg.settings;
           in
-          "${lib.getExe cfg.package} --config-file ${g3proxy-yaml}";
+          "${lib.getExe cfg.package} --config-file ${g3proxy-yaml} --systemd --control-dir %t/g3proxy";
 
         WorkingDirectory = "/var/lib/g3proxy";
         StateDirectory = "g3proxy";

From fa478f30cd0569fc300b967c6a24a49ed5b8f7c6 Mon Sep 17 00:00:00 2001
From: Dmitry Kalinkin <dmitry.kalinkin@gmail.com>
Date: Sat, 19 Jul 2025 21:21:27 -0400
Subject: [PATCH 17/48] blender: mark as broken on darwin

---
 pkgs/by-name/bl/blender/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/bl/blender/package.nix b/pkgs/by-name/bl/blender/package.nix
index 8dde30b3e814..d5c20f992107 100644
--- a/pkgs/by-name/bl/blender/package.nix
+++ b/pkgs/by-name/bl/blender/package.nix
@@ -423,6 +423,7 @@ stdenv'.mkDerivation (finalAttrs: {
   };
 
   meta = {
+    broken = stdenv.hostPlatform.isDarwin;
     description = "3D Creation/Animation/Publishing System";
     homepage = "https://www.blender.org";
     # They comment two licenses: GPLv2 and Blender License, but they

From 7d3994a3dcaf7cda06f82e74ffd9958923bd37d6 Mon Sep 17 00:00:00 2001
From: Artturin <Artturin@artturin.com>
Date: Sun, 20 Jul 2025 16:08:33 +0300
Subject: [PATCH 18/48] discord: Update all

discord: 0.0.101 -> 0.0.102

discord-canary: 0.0.716 -> 0.0.723

discord-development: 0.0.83 -> 0.0.84

pkgsCross.aarch64-darwin.discord: 0.0.353 -> 0.0.354

pkgsCross.aarch64-darwin.discord-ptb: 0.0.181 -> 0.0.182

pkgsCross.aarch64-darwin.discord-canary: 0.0.823 -> 0.0.829

pkgsCross.aarch64-darwin.discord-development: 0.0.96 -> 0.0.97
---
 .../instant-messengers/discord/default.nix    | 28 +++++++++----------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/pkgs/applications/networking/instant-messengers/discord/default.nix b/pkgs/applications/networking/instant-messengers/discord/default.nix
index 514b4f2122c6..c7ef0f2ec94e 100644
--- a/pkgs/applications/networking/instant-messengers/discord/default.nix
+++ b/pkgs/applications/networking/instant-messengers/discord/default.nix
@@ -9,24 +9,24 @@ let
   versions =
     if stdenv.hostPlatform.isLinux then
       {
-        stable = "0.0.101";
+        stable = "0.0.102";
         ptb = "0.0.152";
-        canary = "0.0.716";
-        development = "0.0.83";
+        canary = "0.0.723";
+        development = "0.0.84";
       }
     else
       {
-        stable = "0.0.353";
-        ptb = "0.0.181";
-        canary = "0.0.823";
-        development = "0.0.96";
+        stable = "0.0.354";
+        ptb = "0.0.182";
+        canary = "0.0.829";
+        development = "0.0.97";
       };
   version = versions.${branch};
   srcs = rec {
     x86_64-linux = {
       stable = fetchurl {
         url = "https://stable.dl2.discordapp.net/apps/linux/${version}/discord-${version}.tar.gz";
-        hash = "sha256-FB6GiCM+vGyjZLtF0GjAIq8etK5FYyQVisWX6IzB4Zc=";
+        hash = "sha256-xnl67Ty9uuAjOV5eWnR7xG+PR5J4M7nYc1hjRBjbaOI=";
       };
       ptb = fetchurl {
         url = "https://ptb.dl2.discordapp.net/apps/linux/${version}/discord-ptb-${version}.tar.gz";
@@ -34,29 +34,29 @@ let
       };
       canary = fetchurl {
         url = "https://canary.dl2.discordapp.net/apps/linux/${version}/discord-canary-${version}.tar.gz";
-        hash = "sha256-W7uPrJRKY4I6nsdj/TNxT8kHh5ssn9KyCArhOhAlaH4=";
+        hash = "sha256-k1ClTRaYsb5rPV8AFtVg3iEZ44z5gmcBnOJgsQq9O1Y=";
       };
       development = fetchurl {
         url = "https://development.dl2.discordapp.net/apps/linux/${version}/discord-development-${version}.tar.gz";
-        hash = "sha256-KpZ90VekGf3KNpNpFfZlVXorv86yK1OuY0uqgBuWIQ4=";
+        hash = "sha256-0SmCBi/fl77m5PzI5O38CpAoIzyQc+eRUKLyKVMQ6Dc=";
       };
     };
     x86_64-darwin = {
       stable = fetchurl {
         url = "https://stable.dl2.discordapp.net/apps/osx/${version}/Discord.dmg";
-        hash = "sha256-qHOLhPhHwN0fy1KiJroJvshlYExBDsuna2PddjtNyEI=";
+        hash = "sha256-JucQ4EPWSMKAKvZhovij8YGWLhZ3IhnXoskce3RG0Do=";
       };
       ptb = fetchurl {
         url = "https://ptb.dl2.discordapp.net/apps/osx/${version}/DiscordPTB.dmg";
-        hash = "sha256-Q153X08crRpXZMMgNDYbADHnL7MiBPCakJxQe8Pl0Uo=";
+        hash = "sha256-yL3NSjY3W1w1gfw7w7zdCgVcov18PtrT8RmcwgQLA6U=";
       };
       canary = fetchurl {
         url = "https://canary.dl2.discordapp.net/apps/osx/${version}/DiscordCanary.dmg";
-        hash = "sha256-69Q8kTfenlmhjptVSQ9Y0AyeViRw+srMExOA7fAlaGw=";
+        hash = "sha256-pa7nJMJU6jPNcusIJ93aAH8AFQl93z1FX/sv6+M4WME=";
       };
       development = fetchurl {
         url = "https://development.dl2.discordapp.net/apps/osx/${version}/DiscordDevelopment.dmg";
-        hash = "sha256-fe7yE+dxEATIdfITg57evbaQkChCcoaLrzV+8KwEBws=";
+        hash = "sha256-BVTQPr3Oox/mTNE7LTJfYuKhI8PlkJlznKiOffqpECs=";
       };
     };
     aarch64-darwin = x86_64-darwin;

From 715e0a9468f2ac50ba498fe6cd50ef27b668572d Mon Sep 17 00:00:00 2001
From: dramforever <dramforever@live.com>
Date: Sun, 20 Jul 2025 16:12:10 +0800
Subject: [PATCH 19/48] wayback-x11: init at 0-unstable-2025-07-20

---
 pkgs/by-name/wa/wayback-x11/package.nix | 64 +++++++++++++++++++++++++
 1 file changed, 64 insertions(+)
 create mode 100644 pkgs/by-name/wa/wayback-x11/package.nix

diff --git a/pkgs/by-name/wa/wayback-x11/package.nix b/pkgs/by-name/wa/wayback-x11/package.nix
new file mode 100644
index 000000000000..2c3423f0a952
--- /dev/null
+++ b/pkgs/by-name/wa/wayback-x11/package.nix
@@ -0,0 +1,64 @@
+{
+  fetchFromGitLab,
+  lib,
+  libxkbcommon,
+  meson,
+  ninja,
+  pixman,
+  pkg-config,
+  scdoc,
+  stdenv,
+  unstableGitUpdater,
+  wayland,
+  wayland-protocols,
+  wayland-scanner,
+  wlroots_0_19,
+  xwayland,
+}:
+
+stdenv.mkDerivation {
+  pname = "wayback";
+  version = "0-unstable-2025-07-20";
+
+  src = fetchFromGitLab {
+    domain = "gitlab.freedesktop.org";
+    owner = "wayback";
+    repo = "wayback";
+    rev = "4b1b4c59f67a2639e960d6b19e1282cf03fc3660";
+    hash = "sha256-+4fPMVVPoUAYbt0jgfl+dmt0ZNyGGWF7xuF1UzZ2uiU=";
+  };
+
+  strictDeps = true;
+
+  depsBuildBuild = [
+    pkg-config
+  ];
+
+  nativeBuildInputs = [
+    meson
+    ninja
+    pkg-config
+    scdoc
+    wayland-scanner
+  ];
+
+  buildInputs = [
+    libxkbcommon
+    pixman
+    wayland
+    wayland-protocols
+    wlroots_0_19
+    xwayland
+  ];
+
+  passthru.updateScript = unstableGitUpdater { };
+
+  meta = {
+    description = "X11 compatibility layer leveraging wlroots and Xwayland";
+    homepage = "https://wayback.freedesktop.org";
+    license = lib.licenses.mit;
+    platforms = lib.platforms.linux;
+    mainProgram = "wayback-session";
+    maintainers = with lib.maintainers; [ dramforever ];
+  };
+}

From 8a366fd158e5c405f308b7a4fbe2a074f9bd1b73 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Mon, 14 Jul 2025 10:20:20 +0200
Subject: [PATCH 20/48] maintainers: drop desiderius

Inactive for many years, potentially all the way back to 2016.
---
 maintainers/maintainer-list.nix                             | 6 ------
 pkgs/development/python-modules/consul/default.nix          | 1 -
 pkgs/development/python-modules/django-appconf/default.nix  | 1 -
 .../python-modules/django-compressor/default.nix            | 1 -
 .../python-modules/django-modelcluster/default.nix          | 1 -
 pkgs/development/python-modules/django-taggit/default.nix   | 1 -
 .../development/python-modules/django-treebeard/default.nix | 1 -
 .../python-modules/djangorestframework/default.nix          | 1 -
 .../python-modules/elasticsearch-dsl/default.nix            | 1 -
 pkgs/development/python-modules/elasticsearch/default.nix   | 1 -
 pkgs/development/python-modules/falcon/default.nix          | 1 -
 pkgs/development/python-modules/pypdf2/default.nix          | 3 ---
 pkgs/development/python-modules/pyrsistent/default.nix      | 1 -
 pkgs/development/python-modules/willow/default.nix          | 1 -
 14 files changed, 21 deletions(-)

diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 2ca9edb79453..5898504668cf 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -6210,12 +6210,6 @@
     githubId = 21953890;
     name = "Tim Digel";
   };
-  desiderius = {
-    email = "didier@devroye.name";
-    github = "desiderius";
-    githubId = 1311761;
-    name = "Didier J. Devroye";
-  };
   desttinghim = {
     email = "opensource@louispearson.work";
     matrix = "@desttinghim:matrix.org";
diff --git a/pkgs/development/python-modules/consul/default.nix b/pkgs/development/python-modules/consul/default.nix
index a51ed1a5c2e7..98f5b7f6b5dc 100644
--- a/pkgs/development/python-modules/consul/default.nix
+++ b/pkgs/development/python-modules/consul/default.nix
@@ -30,6 +30,5 @@ buildPythonPackage rec {
     description = "Python client for Consul (https://www.consul.io/)";
     homepage = "https://github.com/cablehead/python-consul";
     license = licenses.mit;
-    maintainers = with maintainers; [ desiderius ];
   };
 }
diff --git a/pkgs/development/python-modules/django-appconf/default.nix b/pkgs/development/python-modules/django-appconf/default.nix
index fe81b6122f3c..8812b5dd5333 100644
--- a/pkgs/development/python-modules/django-appconf/default.nix
+++ b/pkgs/development/python-modules/django-appconf/default.nix
@@ -46,6 +46,5 @@ buildPythonPackage rec {
     homepage = "https://django-appconf.readthedocs.org/";
     changelog = "https://github.com/django-compressor/django-appconf/blob/v${version}/docs/changelog.rst";
     license = licenses.bsd2;
-    maintainers = with maintainers; [ desiderius ];
   };
 }
diff --git a/pkgs/development/python-modules/django-compressor/default.nix b/pkgs/development/python-modules/django-compressor/default.nix
index 631929145301..b728fb29660c 100644
--- a/pkgs/development/python-modules/django-compressor/default.nix
+++ b/pkgs/development/python-modules/django-compressor/default.nix
@@ -81,6 +81,5 @@ buildPythonPackage rec {
     homepage = "https://django-compressor.readthedocs.org/";
     changelog = "https://github.com/django-compressor/django-compressor/blob/${version}/docs/changelog.txt";
     license = licenses.mit;
-    maintainers = with maintainers; [ desiderius ];
   };
 }
diff --git a/pkgs/development/python-modules/django-modelcluster/default.nix b/pkgs/development/python-modules/django-modelcluster/default.nix
index 608c78f8cff4..a2dd8f0f62c5 100644
--- a/pkgs/development/python-modules/django-modelcluster/default.nix
+++ b/pkgs/development/python-modules/django-modelcluster/default.nix
@@ -48,6 +48,5 @@ buildPythonPackage rec {
     homepage = "https://github.com/torchbox/django-modelcluster/";
     changelog = "https://github.com/wagtail/django-modelcluster/blob/v${version}/CHANGELOG.txt";
     license = licenses.bsd2;
-    maintainers = with maintainers; [ desiderius ];
   };
 }
diff --git a/pkgs/development/python-modules/django-taggit/default.nix b/pkgs/development/python-modules/django-taggit/default.nix
index b6c3e021185c..97e717ed2497 100644
--- a/pkgs/development/python-modules/django-taggit/default.nix
+++ b/pkgs/development/python-modules/django-taggit/default.nix
@@ -45,6 +45,5 @@ buildPythonPackage rec {
     homepage = "https://github.com/jazzband/django-taggit";
     changelog = "https://github.com/jazzband/django-taggit/blob/${version}/CHANGELOG.rst";
     license = licenses.bsd3;
-    maintainers = with maintainers; [ desiderius ];
   };
 }
diff --git a/pkgs/development/python-modules/django-treebeard/default.nix b/pkgs/development/python-modules/django-treebeard/default.nix
index fa687c99549f..55c771d68731 100644
--- a/pkgs/development/python-modules/django-treebeard/default.nix
+++ b/pkgs/development/python-modules/django-treebeard/default.nix
@@ -34,6 +34,5 @@ buildPythonPackage rec {
     homepage = "https://tabo.pe/projects/django-treebeard/";
     changelog = "https://github.com/django-treebeard/django-treebeard/blob/${version}/CHANGES.md";
     license = licenses.asl20;
-    maintainers = with maintainers; [ desiderius ];
   };
 }
diff --git a/pkgs/development/python-modules/djangorestframework/default.nix b/pkgs/development/python-modules/djangorestframework/default.nix
index 294c729d0bf7..e1cdd727e8d3 100644
--- a/pkgs/development/python-modules/djangorestframework/default.nix
+++ b/pkgs/development/python-modules/djangorestframework/default.nix
@@ -77,7 +77,6 @@ buildPythonPackage rec {
     changelog = "https://github.com/encode/django-rest-framework/releases/tag/3.15.1";
     description = "Web APIs for Django, made easy";
     homepage = "https://www.django-rest-framework.org/";
-    maintainers = with maintainers; [ desiderius ];
     license = licenses.bsd2;
   };
 }
diff --git a/pkgs/development/python-modules/elasticsearch-dsl/default.nix b/pkgs/development/python-modules/elasticsearch-dsl/default.nix
index e15fd9cb6e1e..d2401bc30882 100644
--- a/pkgs/development/python-modules/elasticsearch-dsl/default.nix
+++ b/pkgs/development/python-modules/elasticsearch-dsl/default.nix
@@ -48,6 +48,5 @@ buildPythonPackage rec {
     homepage = "https://github.com/elasticsearch/elasticsearch-dsl-py";
     changelog = "https://github.com/elastic/elasticsearch-dsl-py/blob/v${version}/Changelog.rst";
     license = licenses.asl20;
-    maintainers = with maintainers; [ desiderius ];
   };
 }
diff --git a/pkgs/development/python-modules/elasticsearch/default.nix b/pkgs/development/python-modules/elasticsearch/default.nix
index f545d9135b44..0d745fa389d0 100644
--- a/pkgs/development/python-modules/elasticsearch/default.nix
+++ b/pkgs/development/python-modules/elasticsearch/default.nix
@@ -51,6 +51,5 @@ buildPythonPackage rec {
     homepage = "https://github.com/elasticsearch/elasticsearch-py";
     changelog = "https://github.com/elastic/elasticsearch-py/releases/tag/v${version}";
     license = licenses.asl20;
-    maintainers = with maintainers; [ desiderius ];
   };
 }
diff --git a/pkgs/development/python-modules/falcon/default.nix b/pkgs/development/python-modules/falcon/default.nix
index 8064c11cc8f5..4315534241dd 100644
--- a/pkgs/development/python-modules/falcon/default.nix
+++ b/pkgs/development/python-modules/falcon/default.nix
@@ -93,6 +93,5 @@ buildPythonPackage rec {
     description = "Ultra-reliable, fast ASGI+WSGI framework for building data plane APIs at scale";
     homepage = "https://falconframework.org/";
     license = licenses.asl20;
-    maintainers = with maintainers; [ desiderius ];
   };
 }
diff --git a/pkgs/development/python-modules/pypdf2/default.nix b/pkgs/development/python-modules/pypdf2/default.nix
index d8bea0dbf51d..367846149147 100644
--- a/pkgs/development/python-modules/pypdf2/default.nix
+++ b/pkgs/development/python-modules/pypdf2/default.nix
@@ -33,8 +33,5 @@ buildPythonPackage rec {
     homepage = "https://pypdf2.readthedocs.io/";
     changelog = "https://github.com/py-pdf/PyPDF2/raw/${version}/CHANGELOG.md";
     license = licenses.bsd3;
-    maintainers = with maintainers; [
-      desiderius
-    ];
   };
 }
diff --git a/pkgs/development/python-modules/pyrsistent/default.nix b/pkgs/development/python-modules/pyrsistent/default.nix
index 57804f9bd150..d64448dad436 100644
--- a/pkgs/development/python-modules/pyrsistent/default.nix
+++ b/pkgs/development/python-modules/pyrsistent/default.nix
@@ -36,6 +36,5 @@ buildPythonPackage rec {
     homepage = "https://github.com/tobgu/pyrsistent/";
     description = "Persistent/Functional/Immutable data structures";
     license = licenses.mit;
-    maintainers = with maintainers; [ desiderius ];
   };
 }
diff --git a/pkgs/development/python-modules/willow/default.nix b/pkgs/development/python-modules/willow/default.nix
index e6678c838087..e4f67b86e6bf 100644
--- a/pkgs/development/python-modules/willow/default.nix
+++ b/pkgs/development/python-modules/willow/default.nix
@@ -53,7 +53,6 @@ buildPythonPackage rec {
     changelog = "https://github.com/wagtail/Willow/releases/tag/v${version}";
     license = lib.licenses.bsd2;
     maintainers = with lib.maintainers; [
-      desiderius
       kuflierl
     ];
   };

From 91172475b063a4dd9b822b260cfe87ad17f3969f Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 20 Jul 2025 18:50:13 +0000
Subject: [PATCH 21/48] snapcraft: 8.10.1 -> 8.10.2

---
 pkgs/by-name/sn/snapcraft/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/sn/snapcraft/package.nix b/pkgs/by-name/sn/snapcraft/package.nix
index 9d11d12e7a30..9e5043d159c9 100644
--- a/pkgs/by-name/sn/snapcraft/package.nix
+++ b/pkgs/by-name/sn/snapcraft/package.nix
@@ -14,7 +14,7 @@
 
 python312Packages.buildPythonApplication rec {
   pname = "snapcraft";
-  version = "8.10.1";
+  version = "8.10.2";
 
   pyproject = true;
 
@@ -22,7 +22,7 @@ python312Packages.buildPythonApplication rec {
     owner = "canonical";
     repo = "snapcraft";
     tag = version;
-    hash = "sha256-WGCbqtuCOF5X8yOVrgLKWyDcqjpb8sbTPRZzVesnAIY=";
+    hash = "sha256-klG+cT2vXo9v9tIJhJNCeGTiuV5C+oed0Vi9310PnqQ=";
   };
 
   patches = [

From 8310413e036b9ccdebbdeab08b32bdba9e78a0c9 Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Mon, 21 Jul 2025 00:33:31 +0200
Subject: [PATCH 22/48] python3Packages.pymc: 5.24.0 -> 5.24.1

Diff: https://github.com/pymc-devs/pymc/compare/refs/tags/v5.24.0...refs/tags/v5.24.1

Changelog: https://github.com/pymc-devs/pymc/releases/tag/v5.24.1
---
 pkgs/development/python-modules/pymc/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/pymc/default.nix b/pkgs/development/python-modules/pymc/default.nix
index 2f3b38147371..a4de9e62863b 100644
--- a/pkgs/development/python-modules/pymc/default.nix
+++ b/pkgs/development/python-modules/pymc/default.nix
@@ -22,14 +22,14 @@
 
 buildPythonPackage rec {
   pname = "pymc";
-  version = "5.24.0";
+  version = "5.24.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pymc-devs";
     repo = "pymc";
     tag = "v${version}";
-    hash = "sha256-B4HFb+2Hzxt/eK5PdE9wNxQRNouSPi/9aKSrBV8xba4=";
+    hash = "sha256-lBsVr3A7y9CP+41Tk5TraWhu59HJb2+r0I7WlXiP/sY=";
   };
 
   build-system = [

From 53042a3cf6a9241e2db761c327c7e4ae45ab3639 Mon Sep 17 00:00:00 2001
From: Sarah Clark <seclark@nextquestion.net>
Date: Sun, 20 Jul 2025 10:15:14 -0700
Subject: [PATCH 23/48] python3Packages.httpx-aiohttp: init at 0.1.8

---
 .../python-modules/httpx-aiohttp/default.nix  | 49 +++++++++++++++++++
 pkgs/top-level/python-packages.nix            |  2 +
 2 files changed, 51 insertions(+)
 create mode 100644 pkgs/development/python-modules/httpx-aiohttp/default.nix

diff --git a/pkgs/development/python-modules/httpx-aiohttp/default.nix b/pkgs/development/python-modules/httpx-aiohttp/default.nix
new file mode 100644
index 000000000000..aee6166157f6
--- /dev/null
+++ b/pkgs/development/python-modules/httpx-aiohttp/default.nix
@@ -0,0 +1,49 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  hatchling,
+  aiohttp,
+  httpx,
+}:
+
+buildPythonPackage rec {
+  pname = "httpx-aiohttp";
+  version = "0.1.8";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "karpetrosyan";
+    repo = "httpx-aiohttp";
+    tag = version;
+    hash = "sha256-Fdu8aKsXWggRkc/512OBEiEwWNAajrhjfG/+v4+cows=";
+    fetchSubmodules = true;
+  };
+
+  postPatch = ''
+    substituteInPlace pyproject.toml \
+      --replace-fail "requires = [\"hatchling\", \"hatch-fancy-pypi-readme\"]" \
+      "requires = [\"hatchling\"]"
+  '';
+
+  build-system = [
+    hatchling
+  ];
+
+  dependencies = [
+    aiohttp
+    httpx
+  ];
+
+  pythonImportsCheck = [
+    "httpx_aiohttp"
+  ];
+
+  meta = {
+    description = "Transports for httpx to work atop aiohttp";
+    homepage = "https://github.com/karpetrosyan/httpx-aiohttp/";
+    changelog = "https://github.com/karpetrosyan/httpx-aiohttp/blob/${src.rev}/CHANGELOG.md";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ sarahec ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index f6d116bda71e..ed756aec93ff 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -6701,6 +6701,8 @@ self: super: with self; {
 
   httpx = callPackage ../development/python-modules/httpx { };
 
+  httpx-aiohttp = callPackage ../development/python-modules/httpx-aiohttp { };
+
   httpx-auth = callPackage ../development/python-modules/httpx-auth { };
 
   httpx-ntlm = callPackage ../development/python-modules/httpx-ntlm { };

From c2639125b97f3f7d9485830f7d5163cfb3129d68 Mon Sep 17 00:00:00 2001
From: Jonas Heinrich <onny@project-insanity.org>
Date: Mon, 14 Jul 2025 09:18:28 +0200
Subject: [PATCH 24/48] apache-orc: Fix cross-compilation

---
 pkgs/by-name/ap/apache-orc/package.nix | 20 ++++++++++++++------
 1 file changed, 14 insertions(+), 6 deletions(-)

diff --git a/pkgs/by-name/ap/apache-orc/package.nix b/pkgs/by-name/ap/apache-orc/package.nix
index b84a8d71e6a4..d48b2dfaee33 100644
--- a/pkgs/by-name/ap/apache-orc/package.nix
+++ b/pkgs/by-name/ap/apache-orc/package.nix
@@ -44,12 +44,20 @@ stdenv.mkDerivation (finalAttrs: {
     zstd
   ];
 
-  cmakeFlags = [
-    (lib.cmakeFeature "CMAKE_BUILD_TYPE" "Release")
-    (lib.cmakeBool "BUILD_JAVA" false)
-    (lib.cmakeBool "STOP_BUILD_ON_WARNING" true)
-    (lib.cmakeBool "INSTALL_VENDORED_LIBS" false)
-  ];
+  cmakeFlags =
+    [
+      (lib.cmakeFeature "CMAKE_BUILD_TYPE" "Release")
+      (lib.cmakeBool "BUILD_JAVA" false)
+      (lib.cmakeBool "STOP_BUILD_ON_WARNING" true)
+      (lib.cmakeBool "INSTALL_VENDORED_LIBS" false)
+    ]
+    ++ lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) [
+      # Fix (RiscV) cross-compilation
+      # See https://github.com/apache/orc/issues/2334
+      (lib.cmakeFeature "HAS_PRE_1970_EXITCODE" "0")
+      (lib.cmakeFeature "HAS_POST_2038_EXITCODE" "0")
+      (lib.cmakeFeature "CMAKE_CXX_FLAGS" "-Wno-unused-parameter")
+    ];
 
   env = {
     GTEST_HOME = gtest.dev;

From 30579fd91108677e0454c9b9e011d1cd92c48950 Mon Sep 17 00:00:00 2001
From: mivorasu <mivorasu@users.noreply.github.com>
Date: Mon, 21 Jul 2025 16:30:16 +0800
Subject: [PATCH 25/48] jetbrains-toolbox: update meta

---
 pkgs/by-name/je/jetbrains-toolbox/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/je/jetbrains-toolbox/package.nix b/pkgs/by-name/je/jetbrains-toolbox/package.nix
index eb4b612bdab3..5a65ce0a2b00 100644
--- a/pkgs/by-name/je/jetbrains-toolbox/package.nix
+++ b/pkgs/by-name/je/jetbrains-toolbox/package.nix
@@ -15,8 +15,8 @@ let
   updateScript = ./update.sh;
 
   meta = {
-    description = "Jetbrains Toolbox";
-    homepage = "https://jetbrains.com/";
+    description = "JetBrains Toolbox";
+    homepage = "https://www.jetbrains.com/toolbox-app";
     license = lib.licenses.unfree;
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
     maintainers = with lib.maintainers; [ ners ];

From a4d327043985e497f7b1608cb134c5d48c26a211 Mon Sep 17 00:00:00 2001
From: mivorasu <mivorasu@users.noreply.github.com>
Date: Mon, 21 Jul 2025 16:47:24 +0800
Subject: [PATCH 26/48] jetbrains-toolbox: install desktop and icon

---
 pkgs/by-name/je/jetbrains-toolbox/package.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/by-name/je/jetbrains-toolbox/package.nix b/pkgs/by-name/je/jetbrains-toolbox/package.nix
index 5a65ce0a2b00..ba00981652bd 100644
--- a/pkgs/by-name/je/jetbrains-toolbox/package.nix
+++ b/pkgs/by-name/je/jetbrains-toolbox/package.nix
@@ -91,6 +91,11 @@ selectKernel {
         ]
         ++ appimageTools.defaultFhsEnvArgs.multiPkgs pkgs;
       runScript = "${src}/bin/jetbrains-toolbox --update-failed";
+
+      extraInstallCommands = ''
+        install -Dm0644 ${src}/bin/jetbrains-toolbox.desktop -t $out/share/applications
+        install -Dm0644 ${src}/bin/toolbox-tray-color.png $out/share/pixmaps/jetbrains-toolbox.png
+      '';
     };
 
   darwin = stdenvNoCC.mkDerivation (finalAttrs: {

From f23cded904d8ef62e66d75ad9573c3de2284a282 Mon Sep 17 00:00:00 2001
From: Guanran Wang <guanran928@outlook.com>
Date: Mon, 21 Jul 2025 12:51:53 +0800
Subject: [PATCH 27/48] pocket-id: 1.6.2 -> 1.6.4

Diff: https://github.com/pocket-id/pocket-id/compare/refs/tags/v1.6.2...refs/tags/v1.6.4

Changelog: https://github.com/pocket-id/pocket-id/releases/tag/v1.6.4
---
 pkgs/by-name/po/pocket-id/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/po/pocket-id/package.nix b/pkgs/by-name/po/pocket-id/package.nix
index 347523085fd8..43e6ee7dbaf2 100644
--- a/pkgs/by-name/po/pocket-id/package.nix
+++ b/pkgs/by-name/po/pocket-id/package.nix
@@ -9,18 +9,18 @@
 
 buildGoModule (finalAttrs: {
   pname = "pocket-id";
-  version = "1.6.2";
+  version = "1.6.4";
 
   src = fetchFromGitHub {
     owner = "pocket-id";
     repo = "pocket-id";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-fg9iT4JGB3CvmPiRaQwfyKxZ5T0mweDQAQYYU/fdb/g=";
+    hash = "sha256-P6pA0760eo/dL1t5Jics4oSztM4F/C8lIuZ3dZ9x5C8=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/backend";
 
-  vendorHash = "sha256-LutjhewhizxGc/YlNHpK81HrX+wSAAJLWtA+skTjn1w=";
+  vendorHash = "sha256-8D7sSmxR+Fq4ouB9SuoEDplu6Znv3U0BIyYISSmF6Bs=";
 
   env.CGO_ENABLED = 0;
   ldflags = [
@@ -42,7 +42,7 @@ buildGoModule (finalAttrs: {
 
     sourceRoot = "${finalAttrs.src.name}/frontend";
 
-    npmDepsHash = "sha256-AZ8je9uaJ1h9wxfs2RtPr2Ki0QNYD0nDd2BZDj6/sl8=";
+    npmDepsHash = "sha256-FiFSnN6DOMr8XghvyGTWB/EMTNfvpqlAgx7FPnbGQxU=";
     npmFlags = [ "--legacy-peer-deps" ];
 
     env.BUILD_OUTPUT_PATH = "dist";

From 1c1d6a725a93c0e2f311f42043254fe2e9b3247c Mon Sep 17 00:00:00 2001
From: liberodark <liberodark@gmail.com>
Date: Mon, 21 Jul 2025 12:52:34 +0200
Subject: [PATCH 28/48] peertube: remove spawn

---
 nixos/modules/services/web-apps/peertube.nix | 1 -
 1 file changed, 1 deletion(-)

diff --git a/nixos/modules/services/web-apps/peertube.nix b/nixos/modules/services/web-apps/peertube.nix
index 76e95cfe52e0..d6074d1c6146 100644
--- a/nixos/modules/services/web-apps/peertube.nix
+++ b/nixos/modules/services/web-apps/peertube.nix
@@ -34,7 +34,6 @@ let
     "@obsolete"
     "@privileged"
     "@setuid"
-    "@spawn"
   ];
 
   cfgService = {

From 74a8200eae7d9e5fd8207016e6e511595bf7f086 Mon Sep 17 00:00:00 2001
From: Thiago Kenji Okada <thiagokokada@gmail.com>
Date: Mon, 21 Jul 2025 12:04:17 +0100
Subject: [PATCH 29/48] flood: fix pnpmDeps hash

---
 pkgs/by-name/fl/flood/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/fl/flood/package.nix b/pkgs/by-name/fl/flood/package.nix
index 62da2fd3c343..23919b8fa6b8 100644
--- a/pkgs/by-name/fl/flood/package.nix
+++ b/pkgs/by-name/fl/flood/package.nix
@@ -24,7 +24,7 @@ buildNpmPackage rec {
   pnpmDeps = pnpm_9.fetchDeps {
     inherit pname version src;
     fetcherVersion = 1;
-    hash = "sha256-i1szy2JVKvq2rcL0l51vmsLano4l88s97EQPN9g4Qq4=";
+    hash = "sha256-xoCRZUJkdR4X5hszM5gaOyWXLNCbzG5CzF+6OXGEy1k=";
   };
 
   passthru = {

From b21277e543fd5b05a82b3cc47d71971df50c75f8 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 21 Jul 2025 11:59:50 +0000
Subject: [PATCH 30/48] zapzap: 6.1 -> 6.1.1-2

---
 pkgs/by-name/za/zapzap/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/za/zapzap/package.nix b/pkgs/by-name/za/zapzap/package.nix
index 720fd3ed5bbe..d34b7018ac9e 100644
--- a/pkgs/by-name/za/zapzap/package.nix
+++ b/pkgs/by-name/za/zapzap/package.nix
@@ -7,14 +7,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "zapzap";
-  version = "6.1";
+  version = "6.1.1-2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "rafatosta";
     repo = "zapzap";
     tag = version;
-    hash = "sha256-g3J9oVIRiar0QoksRjJZsbvSKiFBILaUdSUscNs1VXE=";
+    hash = "sha256-gd9DxTck0YG0ETmFMzsc/0osMTB4txr7pQ9Xw4dLP+A=";
   };
 
   nativeBuildInputs = [

From e08918b3d744cc103491745007fe0b6345e083a6 Mon Sep 17 00:00:00 2001
From: Jaco Malan <jacomalan.12@gmail.com>
Date: Thu, 3 Jul 2025 15:53:39 +0200
Subject: [PATCH 31/48] eigenwallet: init at 2.0.3

---
 pkgs/by-name/ei/eigenwallet/package.nix | 52 +++++++++++++++++++++++++
 1 file changed, 52 insertions(+)
 create mode 100644 pkgs/by-name/ei/eigenwallet/package.nix

diff --git a/pkgs/by-name/ei/eigenwallet/package.nix b/pkgs/by-name/ei/eigenwallet/package.nix
new file mode 100644
index 000000000000..fb96c27c1cf1
--- /dev/null
+++ b/pkgs/by-name/ei/eigenwallet/package.nix
@@ -0,0 +1,52 @@
+{
+  lib,
+  fetchurl,
+  stdenv,
+  dpkg,
+  autoPatchelfHook,
+  cairo,
+  gdk-pixbuf,
+  webkitgtk_4_1,
+  gtk3,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  name = "eigenwallet";
+  version = "2.0.3";
+
+  src = fetchurl {
+    url = "https://github.com/eigenwallet/core/releases/download/${finalAttrs.version}/UnstoppableSwap_${finalAttrs.version}_amd64.deb";
+    hash = "sha256-2uOsZ6IvaQes+FYGQ0cNYlySzjyNwf/3fqk3DJzN+WI=";
+  };
+
+  nativeBuildInputs = [
+    dpkg
+    autoPatchelfHook
+  ];
+
+  buildInputs = [
+    cairo
+    gdk-pixbuf
+    webkitgtk_4_1
+    gtk3
+  ];
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out
+    mv {usr/bin,usr/share} $out
+
+    runHook postInstall
+  '';
+
+  meta = {
+    description = "Protocol and desktop application for swapping Monero and Bitcoin";
+    homepage = "https://unstoppableswap.net";
+    maintainers = with lib.maintainers; [ JacoMalan1 ];
+    license = lib.licenses.gpl3Only;
+    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
+    platforms = [ "x86_64-linux" ];
+    mainProgram = "unstoppableswap-gui-rs";
+  };
+})

From fe5b2c2d9c6cc4a8c4302414fe2cd269001f114e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=A9clairevoyant?=
 <848000+eclairevoyant@users.noreply.github.com>
Date: Tue, 15 Jul 2025 10:20:12 -0400
Subject: [PATCH 32/48] darktable: temporarily disable libavif support due to
 broken cmake files

fixes #425306
---
 pkgs/by-name/da/darktable/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/da/darktable/package.nix b/pkgs/by-name/da/darktable/package.nix
index bfd11d3ae64e..dd82ac70a181 100644
--- a/pkgs/by-name/da/darktable/package.nix
+++ b/pkgs/by-name/da/darktable/package.nix
@@ -120,7 +120,7 @@ stdenv.mkDerivation rec {
       lensfun
       lerc
       libaom
-      libavif
+      #libavif # TODO re-enable once cmake files are fixed (#425306)
       libdatrie
       libepoxy
       libexif

From 3bed64fa4eb1b18e6018010469b0d941808f23ff Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
Date: Mon, 21 Jul 2025 13:15:29 +0200
Subject: [PATCH 33/48] darktable: fix build by using Saxon XSLT processor

The build was failing due to inconsistent ID generation in XSLT
transformations. The generate_prefs.xsl uses generate-id() which
produces different IDs between function declarations and their usage
when using libxslt.

Switching to Saxon XSLT processor resolves this issue as it handles
generate-id() more consistently.
---
 pkgs/by-name/da/darktable/package.nix | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/da/darktable/package.nix b/pkgs/by-name/da/darktable/package.nix
index dd82ac70a181..78d8e6218267 100644
--- a/pkgs/by-name/da/darktable/package.nix
+++ b/pkgs/by-name/da/darktable/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchurl,
+  runCommand,
 
   # nativeBuildInputs
   cmake,
@@ -12,6 +13,7 @@
   perl,
   pkg-config,
   wrapGAppsHook3,
+  saxon,
 
   # buildInputs
   SDL2,
@@ -52,7 +54,6 @@
   libtiff,
   libwebp,
   libxml2,
-  libxslt,
   lua,
   util-linux,
   openexr,
@@ -79,6 +80,17 @@
   gitUpdater,
 }:
 
+let
+  # Create a wrapper for saxon to provide saxon-xslt command
+  saxon-xslt = runCommand "saxon-xslt" { } ''
+    mkdir -p $out/bin
+    cat > $out/bin/saxon-xslt << 'EOF'
+    #!/bin/sh
+    exec ${saxon}/bin/saxon "$@"
+    EOF
+    chmod +x $out/bin/saxon-xslt
+  '';
+in
 stdenv.mkDerivation rec {
   version = "5.2.0";
   pname = "darktable";
@@ -97,6 +109,7 @@ stdenv.mkDerivation rec {
     perl
     pkg-config
     wrapGAppsHook3
+    saxon-xslt # Use Saxon instead of libxslt to fix XSLT generate-id() consistency issues
   ];
 
   buildInputs =
@@ -138,7 +151,6 @@ stdenv.mkDerivation rec {
       libtiff
       libwebp
       libxml2
-      libxslt
       lua
       openexr
       openjpeg

From 24a2a22af66b5869672480ebc3af5a14957f88c0 Mon Sep 17 00:00:00 2001
From: Jonas Heinrich <onny@project-insanity.org>
Date: Sun, 13 Jul 2025 12:40:19 +0200
Subject: [PATCH 34/48] postgresqlPackages.postgis: fix cross-compilation

---
 pkgs/servers/sql/postgresql/ext/postgis.nix | 19 +++++++++++++------
 1 file changed, 13 insertions(+), 6 deletions(-)

diff --git a/pkgs/servers/sql/postgresql/ext/postgis.nix b/pkgs/servers/sql/postgresql/ext/postgis.nix
index 09c547075135..541ddbcf0484 100644
--- a/pkgs/servers/sql/postgresql/ext/postgis.nix
+++ b/pkgs/servers/sql/postgresql/ext/postgis.nix
@@ -91,12 +91,19 @@ postgresqlBuildExtension (finalAttrs: {
     ./autogen.sh
   '';
 
-  configureFlags = [
-    "--with-pgconfig=${postgresql.pg_config}/bin/pg_config"
-    "--with-gdalconfig=${gdal}/bin/gdal-config"
-    "--with-jsondir=${json_c.dev}"
-    "--disable-extension-upgrades-install"
-  ] ++ lib.optional withSfcgal "--with-sfcgal=${sfcgal}/bin/sfcgal-config";
+  configureFlags =
+    let
+      isCross = stdenv.hostPlatform.config != stdenv.buildPlatform.config;
+    in
+    [
+      (lib.enableFeature false "extension-upgrades-install")
+      (lib.withFeatureAs true "pgconfig" "${postgresql.pg_config}/bin/pg_config")
+      (lib.withFeatureAs true "gdalconfig" "${gdal}/bin/gdal-config")
+      (lib.withFeatureAs true "jsondir" (lib.getDev json_c))
+      (lib.withFeatureAs true "xml2config" (lib.getExe' (lib.getDev libxml2) "xml2-config"))
+      (lib.withFeatureAs withSfcgal "sfcgal" "${sfcgal}/bin/sfcgal-config")
+      (lib.withFeature (!isCross) "json") # configure: error: cannot check for file existence when cross compiling
+    ];
 
   makeFlags = [
     "PERL=${perl}/bin/perl"

From c802506371c35466c9bf31170622f5e2c7040561 Mon Sep 17 00:00:00 2001
From: liberodark <liberodark@gmail.com>
Date: Mon, 21 Jul 2025 14:23:32 +0200
Subject: [PATCH 35/48] dolphin-emu: 2506 -> 2506a

---
 pkgs/by-name/do/dolphin-emu/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/do/dolphin-emu/package.nix b/pkgs/by-name/do/dolphin-emu/package.nix
index 725d024b52ab..681980a6f3ee 100644
--- a/pkgs/by-name/do/dolphin-emu/package.nix
+++ b/pkgs/by-name/do/dolphin-emu/package.nix
@@ -54,13 +54,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "dolphin-emu";
-  version = "2506";
+  version = "2506a";
 
   src = fetchFromGitHub {
     owner = "dolphin-emu";
     repo = "dolphin";
     tag = finalAttrs.version;
-    hash = "sha256-JEp1rc5nNJY4GfNCR2Vi4ctQ14p+LZWuFPFirv6foUM=";
+    hash = "sha256-xYGq2Yt4Gqb/QDA6HZajs7JCwETufuqigk3bZbsgdEM=";
     fetchSubmodules = true;
     leaveDotGit = true;
     postFetch = ''

From e364990b50adfbb8c32c1316903652f37834538c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 21 Jul 2025 12:02:42 +0000
Subject: [PATCH 36/48] roddhjav-apparmor-rules: 0-unstable-2025-07-12 ->
 0-unstable-2025-07-20

---
 pkgs/by-name/ro/roddhjav-apparmor-rules/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ro/roddhjav-apparmor-rules/package.nix b/pkgs/by-name/ro/roddhjav-apparmor-rules/package.nix
index fc6f025c68cd..6e356c0b7374 100644
--- a/pkgs/by-name/ro/roddhjav-apparmor-rules/package.nix
+++ b/pkgs/by-name/ro/roddhjav-apparmor-rules/package.nix
@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation {
   pname = "roddhjav-apparmor-rules";
-  version = "0-unstable-2025-07-12";
+  version = "0-unstable-2025-07-20";
 
   src = fetchFromGitHub {
     owner = "roddhjav";
     repo = "apparmor.d";
-    rev = "8fc70859aaef7cc20181ac6d115a6ff8ca5a9162";
-    hash = "sha256-MbbjiLa24PxaD7ZizR2CbTPy6yDFZTAV3QurFyYb3r8=";
+    rev = "e490a11c1a2ecfadd2cbc0759d77f4706bc2ee61";
+    hash = "sha256-+UWVKs3xKitt8B/QCugnTuQaxWCgFcetJQ2RQNUDy00=";
   };
 
   dontConfigure = true;

From 6c6c2229cc86932f732faea2784231ab9645dcaa Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 18 Jul 2025 12:31:02 +0000
Subject: [PATCH 37/48] libuninameslist: 20240910 -> 20250714

---
 pkgs/by-name/li/libuninameslist/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/li/libuninameslist/package.nix b/pkgs/by-name/li/libuninameslist/package.nix
index 6b3f185916c8..47c2b819a0bf 100644
--- a/pkgs/by-name/li/libuninameslist/package.nix
+++ b/pkgs/by-name/li/libuninameslist/package.nix
@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation rec {
   pname = "libuninameslist";
-  version = "20240910";
+  version = "20250714";
 
   src = fetchFromGitHub {
     owner = "fontforge";
     repo = "libuninameslist";
     rev = version;
-    hash = "sha256-Pi30c3To57AzY59i39JVG2IUkGnq7CEAQkqJ1f5AZhw=";
+    hash = "sha256-2SC8hu4yHbSbmQL17bfF4BwPLzBhUvF8iGqEtueUZaU=";
   };
 
   nativeBuildInputs = [

From 0baa038c38cf965ff7ad98dff65f594e73527119 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 21 Jul 2025 12:50:58 +0000
Subject: [PATCH 38/48] frida-tools: 14.4.1 -> 14.4.2

---
 pkgs/by-name/fr/frida-tools/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/fr/frida-tools/package.nix b/pkgs/by-name/fr/frida-tools/package.nix
index 4f56d016ce93..68bdc5fa195b 100644
--- a/pkgs/by-name/fr/frida-tools/package.nix
+++ b/pkgs/by-name/fr/frida-tools/package.nix
@@ -6,12 +6,12 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "frida-tools";
-  version = "14.4.1";
+  version = "14.4.2";
   format = "pyproject";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-Zb6Pk6c7QbJLsb4twhdVgaUWtxCy/Vff5PKIno9B/b4=";
+    hash = "sha256-M+iKHoJpxIUUoEVYntL8PPR7B3TbBDiW/Oc8ZE15wo8=";
   };
 
   build-system = with python3Packages; [

From 8f6a5202d38e2f3c9f6a2d067acccfa7a86a4c27 Mon Sep 17 00:00:00 2001
From: Weijia Wang <9713184+wegank@users.noreply.github.com>
Date: Sat, 19 Jul 2025 21:49:33 +0200
Subject: [PATCH 39/48] bumblebee: unpin autotools

---
 pkgs/by-name/bu/bumblebee/package.nix | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/pkgs/by-name/bu/bumblebee/package.nix b/pkgs/by-name/bu/bumblebee/package.nix
index cfffcec882f6..142ba0523280 100644
--- a/pkgs/by-name/bu/bumblebee/package.nix
+++ b/pkgs/by-name/bu/bumblebee/package.nix
@@ -35,8 +35,7 @@
   pkgsi686Linux,
   virtualgl,
   libglvnd,
-  automake111x,
-  autoconf,
+  autoreconfHook,
   # The below should only be non-null in a x86_64 system. On a i686
   # system the above nvidia_x11 and virtualgl will be the i686 packages.
   # TODO: Confusing. Perhaps use "SubArch" instead of i686?
@@ -124,10 +123,6 @@ stdenv.mkDerivation rec {
   '';
 
   preConfigure = ''
-    # Don't use a special group, just reuse wheel.
-    substituteInPlace configure \
-      --replace 'CONF_GID="bumblebee"' 'CONF_GID="wheel"'
-
     # Apply configuration options
     substituteInPlace conf/xorg.conf.nvidia \
       --subst-var nvidiaDeviceOptions
@@ -148,8 +143,7 @@ stdenv.mkDerivation rec {
     makeWrapper
     pkg-config
     help2man
-    automake111x
-    autoconf
+    autoreconfHook
   ];
 
   # The order of LDPATH is very specific: First X11 then the host
@@ -162,6 +156,8 @@ stdenv.mkDerivation rec {
   configureFlags =
     [
       "--with-udev-rules=$out/lib/udev/rules.d"
+      # Don't use a special group, just reuse wheel.
+      "CONF_GID=wheel"
       # see #10282
       #"CONF_PRIMUS_LD_PATH=${primusLibs}"
     ]

From e2650c1faca1d6eb64f129abf4c4723d120159e0 Mon Sep 17 00:00:00 2001
From: savalet <savinien.petitjean@gmail.com>
Date: Mon, 21 Jul 2025 15:46:48 +0200
Subject: [PATCH 40/48] winbox4: 4.0beta21 -> 4.0beta26

---
 pkgs/by-name/wi/winbox4/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/wi/winbox4/package.nix b/pkgs/by-name/wi/winbox4/package.nix
index f29a92714b16..5b4104c16603 100644
--- a/pkgs/by-name/wi/winbox4/package.nix
+++ b/pkgs/by-name/wi/winbox4/package.nix
@@ -5,7 +5,7 @@
 }:
 let
   pname = "winbox";
-  version = "4.0beta21";
+  version = "4.0beta26";
 
   metaCommon = {
     description = "Graphical configuration utility for RouterOS-based devices";
@@ -23,13 +23,13 @@ let
   x86_64-zip = callPackage ./build-from-zip.nix {
     inherit pname version metaCommon;
 
-    hash = "sha256-Uoawz+CW1JLVOEoxSF49WpF31VuUDWK4q9tl1qAwS/c=";
+    hash = "sha256-m0+ofS1j6NaGW5ArldAn2dLUh0hfxtvEIRdRMKA1vc4=";
   };
 
   x86_64-dmg = callPackage ./build-from-dmg.nix {
     inherit pname version metaCommon;
 
-    hash = "sha256-PCdN5z77RU5WgYzk2h/ou2OeswZQl32FfxozEZ8ZlTo=";
+    hash = "sha256-3IrRDdNHzGyqLc2Ba5+WIpDN9CyCUvC8Q8Y0hMFazBk=";
   };
 in
 (if stdenvNoCC.hostPlatform.isDarwin then x86_64-dmg else x86_64-zip).overrideAttrs (oldAttrs: {

From 232dc0073f54a150fa57738fd8525a15eb1fec6d Mon Sep 17 00:00:00 2001
From: savalet <savinien.petitjean@gmail.com>
Date: Mon, 21 Jul 2025 15:48:04 +0200
Subject: [PATCH 41/48] maintainers: Update name and email of savalet

---
 maintainers/maintainer-list.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 95bdc8434abc..04bf5702a4dc 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -22479,10 +22479,10 @@
     name = "Sauyon Lee";
   };
   savalet = {
-    email = "savinien.petitjean@gmail.com";
+    email = "me@savalet.dev";
     github = "savalet";
     githubId = 73446695;
-    name = "savalet";
+    name = "Savinien Petitjean";
   };
   savannidgerinel = {
     email = "savanni@luminescent-dreams.com";

From cea395d24de80902edf494dc223bfa4be3c280e3 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 21 Jul 2025 15:03:40 +0000
Subject: [PATCH 42/48] ansible-doctor: 7.0.8 -> 7.0.9

---
 pkgs/by-name/an/ansible-doctor/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/an/ansible-doctor/package.nix b/pkgs/by-name/an/ansible-doctor/package.nix
index 8bf83fc95f20..09ad0be5e158 100644
--- a/pkgs/by-name/an/ansible-doctor/package.nix
+++ b/pkgs/by-name/an/ansible-doctor/package.nix
@@ -8,14 +8,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "ansible-doctor";
-  version = "7.0.8";
+  version = "7.0.9";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "thegeeklab";
     repo = "ansible-doctor";
     tag = "v${version}";
-    hash = "sha256-BwmmAd1mmyGQ5QQo6uS3+JmPP9kmZe2OOBDNAKFqEl0=";
+    hash = "sha256-d7KPn+nCrGEYE9lzfV3+Fl8MDUq8x5S8MPKrwX8XZ5w=";
   };
 
   build-system = with python3Packages; [
@@ -54,7 +54,7 @@ python3Packages.buildPythonApplication rec {
     description = "Annotation based documentation for your Ansible roles";
     mainProgram = "ansible-doctor";
     homepage = "https://github.com/thegeeklab/ansible-doctor";
-    changelog = "https://github.com/thegeeklab/ansible-doctor/releases/tag/v${version}";
+    changelog = "https://github.com/thegeeklab/ansible-doctor/releases/tag/${src.tag}";
     license = lib.licenses.lgpl3Only;
     maintainers = with lib.maintainers; [ tboerger ];
   };

From 160a2973bad820d2e87f1e2c27cde3561ed13cd4 Mon Sep 17 00:00:00 2001
From: Thibaut Smith <thibaut.smith@mailbox.org>
Date: Mon, 21 Jul 2025 17:12:11 +0200
Subject: [PATCH 43/48] havoc: add maintainer videl

---
 pkgs/by-name/ha/havoc/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ha/havoc/package.nix b/pkgs/by-name/ha/havoc/package.nix
index 9abe79999b43..67c6b9d187de 100644
--- a/pkgs/by-name/ha/havoc/package.nix
+++ b/pkgs/by-name/ha/havoc/package.nix
@@ -53,7 +53,7 @@ stdenv.mkDerivation (finalAttrs: {
       publicDomain
     ];
     mainProgram = "havoc";
-    maintainers = with lib.maintainers; [ ];
+    maintainers = with lib.maintainers; [ videl ];
     inherit (wayland.meta) platforms;
     broken = stdenv.hostPlatform.isDarwin; # fatal error: 'sys/epoll.h' file not found
   };

From 1b01144f0475718dd0377b2d8c7ddc7482d84d24 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 21 Jul 2025 15:16:48 +0000
Subject: [PATCH 44/48] opkssh: 0.7.0 -> 0.8.0

---
 pkgs/by-name/op/opkssh/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/op/opkssh/package.nix b/pkgs/by-name/op/opkssh/package.nix
index eec9e82baaec..939750544a9a 100644
--- a/pkgs/by-name/op/opkssh/package.nix
+++ b/pkgs/by-name/op/opkssh/package.nix
@@ -8,18 +8,18 @@
 
 buildGoModule (finalAttrs: {
   pname = "opkssh";
-  version = "0.7.0";
+  version = "0.8.0";
 
   src = fetchFromGitHub {
     owner = "openpubkey";
     repo = "opkssh";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-8fbOhyrHgNG9ulu/DZvUHzIojvoHG/gb5+Ft/RmMHXk=";
+    hash = "sha256-8CWxxhqgSgFVRNjAvJ0faHI4rsSPQNkcSqVSzTHRJY4=";
   };
 
   ldflags = [ "-X main.Version=${finalAttrs.version}" ];
 
-  vendorHash = "sha256-bkTQqtlZhZ2/WnQNRdZzfblkGKjaAS22RFl6I1O3/yA=";
+  vendorHash = "sha256-0H7hST5Czd/1rDQ0nO2FAnbG2lN3AZULs5M17zKa9FY=";
 
   nativeInstallCheckInputs = [
     versionCheckHook

From bb4f984b8ebe2e4dfe86fbabc2562156a2a29d65 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Mon, 21 Jul 2025 18:12:53 +0200
Subject: [PATCH 45/48] jetbrains.jcef: replace assert with meta.platforms

An assert can't be properly caught by CI, but `meta.platforms` can.
---
 pkgs/development/compilers/jetbrains-jdk/jcef.nix | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/compilers/jetbrains-jdk/jcef.nix b/pkgs/development/compilers/jetbrains-jdk/jcef.nix
index 179fb668fec0..34571287f6be 100644
--- a/pkgs/development/compilers/jetbrains-jdk/jcef.nix
+++ b/pkgs/development/compilers/jetbrains-jdk/jcef.nix
@@ -46,9 +46,6 @@
   thrift,
 }:
 
-assert !stdenv.hostPlatform.isDarwin;
-# I can't test darwin
-
 let
   rpath = lib.makeLibraryPath [
     glib
@@ -306,5 +303,9 @@ stdenv.mkDerivation rec {
     description = "Jetbrains' fork of JCEF";
     license = lib.licenses.bsd3;
     homepage = "https://github.com/JetBrains/JCEF";
+    platforms = [
+      "aarch64-linux"
+      "x86_64-linux"
+    ];
   };
 }

From c7899bb93414293cb1dcd884ee93d60d75286dc0 Mon Sep 17 00:00:00 2001
From: Weijia Wang <9713184+wegank@users.noreply.github.com>
Date: Sat, 14 Jun 2025 14:16:52 +0200
Subject: [PATCH 46/48] coqPackages_8_{5,6}: drop

---
 pkgs/applications/science/logic/coq/default.nix | 11 -----------
 pkgs/top-level/all-packages.nix                 |  5 -----
 pkgs/top-level/coq-packages.nix                 |  6 ------
 3 files changed, 22 deletions(-)

diff --git a/pkgs/applications/science/logic/coq/default.nix b/pkgs/applications/science/logic/coq/default.nix
index fc3a72e49ad5..a4ef2509f2c3 100644
--- a/pkgs/applications/science/logic/coq/default.nix
+++ b/pkgs/applications/science/logic/coq/default.nix
@@ -14,7 +14,6 @@
   pkg-config,
   gnumake42,
   customOCamlPackages ? null,
-  ocamlPackages_4_05,
   ocamlPackages_4_09,
   ocamlPackages_4_10,
   ocamlPackages_4_12,
@@ -35,12 +34,6 @@ let
   lib = import ../../../../build-support/coq/extra-lib.nix { inherit (args) lib; };
 
   release = {
-    "8.5pl1".sha256 = "1976ki5xjg2r907xj9p7gs0kpdinywbwcqlgxqw75dgp0hkgi00n";
-    "8.5pl2".sha256 = "109rrcrx7mz0fj7725kjjghfg5ydwb24hjsa5hspa27b4caah7rh";
-    "8.5pl3".sha256 = "15c3rdk59nifzihsp97z4vjxis5xmsnrvpb86qiazj143z2fmdgw";
-    "8.6.0".sha256 = "148mb48zpdax56c0blfi7v67lx014lnmrvxxasi28hsibyz2lvg4";
-    "8.6.0".rev = "V8.6";
-    "8.6.1".sha256 = "0llrxcxwy5j87vbbjnisw42rfw1n1pm5602ssx64xaxx3k176g6l";
     "8.7.0".sha256 = "1h18b7xpnx3ix9vsi5fx4zdcbxy7bhra7gd5c5yzxmk53cgf1p9m";
     "8.7.1".sha256 = "0gjn59jkbxwrihk8fx9d823wjyjh5m9gvj9l31nv6z6bcqhgdqi8";
     "8.7.2".sha256 = "0a0657xby8wdq4aqb2xsxp3n7pmc2w4yxjmrb2l4kccs1aqvaj4w";
@@ -131,10 +124,6 @@ let
           case = lib.versions.range "8.7" "8.10";
           out = ocamlPackages_4_09;
         }
-        {
-          case = lib.versions.range "8.5" "8.6";
-          out = ocamlPackages_4_05;
-        }
       ] ocamlPackages_4_14;
   ocamlNativeBuildInputs = [
     ocamlPackages.ocaml
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index be64ee151950..cd3050d878c9 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -15468,7 +15468,6 @@ with pkgs;
   inherit
     (callPackage ./coq-packages.nix {
       inherit (ocaml-ng)
-        ocamlPackages_4_05
         ocamlPackages_4_09
         ocamlPackages_4_10
         ocamlPackages_4_12
@@ -15481,10 +15480,6 @@ with pkgs;
         ;
     })
     mkCoqPackages
-    coqPackages_8_5
-    coq_8_5
-    coqPackages_8_6
-    coq_8_6
     coqPackages_8_7
     coq_8_7
     coqPackages_8_8
diff --git a/pkgs/top-level/coq-packages.nix b/pkgs/top-level/coq-packages.nix
index 1b75cdff5477..d8626077751d 100644
--- a/pkgs/top-level/coq-packages.nix
+++ b/pkgs/top-level/coq-packages.nix
@@ -6,7 +6,6 @@
   callPackage,
   newScope,
   recurseIntoAttrs,
-  ocamlPackages_4_05,
   ocamlPackages_4_09,
   ocamlPackages_4_10,
   ocamlPackages_4_12,
@@ -272,7 +271,6 @@ let
     callPackage ../applications/science/logic/coq {
       inherit
         version
-        ocamlPackages_4_05
         ocamlPackages_4_09
         ocamlPackages_4_10
         ocamlPackages_4_12
@@ -299,8 +297,6 @@ rec {
     in
     self.filterPackages (!coq.dontFilter or false);
 
-  coq_8_5 = mkCoq "8.5" { };
-  coq_8_6 = mkCoq "8.6" { };
   coq_8_7 = mkCoq "8.7" { };
   coq_8_8 = mkCoq "8.8" { };
   coq_8_9 = mkCoq "8.9" { };
@@ -318,8 +314,6 @@ rec {
   coq_9_0 = mkCoq "9.0" rocqPackages_9_0;
   coq_9_1 = mkCoq "9.1" rocqPackages_9_1;
 
-  coqPackages_8_5 = mkCoqPackages coq_8_5;
-  coqPackages_8_6 = mkCoqPackages coq_8_6;
   coqPackages_8_7 = mkCoqPackages coq_8_7;
   coqPackages_8_8 = mkCoqPackages coq_8_8;
   coqPackages_8_9 = mkCoqPackages coq_8_9;

From 75929b461294e02c24c2b98f36c42ae6ec7fc08f Mon Sep 17 00:00:00 2001
From: matthewcroughan <matt@croughan.sh>
Date: Tue, 15 Jul 2025 21:00:29 +0100
Subject: [PATCH 47/48] nixos/atalkd: init

---
 nixos/doc/manual/redirects.json              |  6 ++
 nixos/modules/module-list.nix                |  1 +
 nixos/modules/services/networking/atalkd.md  | 18 ++++
 nixos/modules/services/networking/atalkd.nix | 98 ++++++++++++++++++++
 4 files changed, 123 insertions(+)
 create mode 100644 nixos/modules/services/networking/atalkd.md
 create mode 100644 nixos/modules/services/networking/atalkd.nix

diff --git a/nixos/doc/manual/redirects.json b/nixos/doc/manual/redirects.json
index fffee51d25b0..adbf2b625ce7 100644
--- a/nixos/doc/manual/redirects.json
+++ b/nixos/doc/manual/redirects.json
@@ -851,6 +851,12 @@
   "modules-services-akkoma-distributed-deployment": [
     "index.html#modules-services-akkoma-distributed-deployment"
   ],
+  "module-services-atalkd": [
+    "index.html#module-services-atalkd"
+  ],
+  "module-services-atalkd-basic-usage": [
+    "index.html#module-services-atalkd-basic-usage"
+  ],
   "module-services-systemd-lock-handler": [
     "index.html#module-services-systemd-lock-handler"
   ],
diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix
index 0ec81e5bcb7b..e8ffa325160b 100644
--- a/nixos/modules/module-list.nix
+++ b/nixos/modules/module-list.nix
@@ -1069,6 +1069,7 @@
   ./services/networking/anubis.nix
   ./services/networking/aria2.nix
   ./services/networking/asterisk.nix
+  ./services/networking/atalkd.nix
   ./services/networking/atftpd.nix
   ./services/networking/atticd.nix
   ./services/networking/autossh.nix
diff --git a/nixos/modules/services/networking/atalkd.md b/nixos/modules/services/networking/atalkd.md
new file mode 100644
index 000000000000..3b999680ce33
--- /dev/null
+++ b/nixos/modules/services/networking/atalkd.md
@@ -0,0 +1,18 @@
+# atalkd {#module-services-atalkd}
+
+atalkd (AppleTalk daemon) is a component inside of the suite of software provided by Netatalk. It allows for the creation of AppleTalk networks, typically speaking over a Linux ethernet network interface, that can still be seen by classic macintosh computers. Using the NixOS module, you can specify a set of network interfaces that you wish to speak AppleTalk on, and the corresponding ATALKD.CONF(5) values to go along with it.
+
+## Basic Usage {#module-services-atalkd-basic-usage}
+
+A minimal configuration looks like this:
+
+```nix
+{
+  services.atalkd = {
+    enable = true;
+    interfaces.wlan0.config = "-router -phase 2 -net 1 -addr 1.48 -zone \"Default\"";
+  };
+}
+```
+
+It is also valid to use atalkd without setting `services.netatalk.interfaces` to any value, only providing `services.atalkd.enable = true`. In this case it will inherit the behavior of the upstream application when an empty config file is found, which is to listen on and use all interfaces.
diff --git a/nixos/modules/services/networking/atalkd.nix b/nixos/modules/services/networking/atalkd.nix
new file mode 100644
index 000000000000..1f8d5e75f041
--- /dev/null
+++ b/nixos/modules/services/networking/atalkd.nix
@@ -0,0 +1,98 @@
+{
+  config,
+  pkgs,
+  lib,
+  utils,
+  ...
+}:
+
+let
+  cfg = config.services.atalkd;
+
+  # Generate atalkd.conf only if configFile isn't manually specified
+  atalkdConfFile = pkgs.writeText "atalkd.conf" (
+    lib.concatStringsSep "\n" (
+      lib.mapAttrsToList (
+        iface: ifaceCfg: iface + (if ifaceCfg.config != null then " ${ifaceCfg.config}" else "")
+      ) cfg.interfaces
+    )
+  );
+in
+{
+  options.services.atalkd = {
+    enable = lib.mkEnableOption "the AppleTalk daemon";
+
+    configFile = lib.mkOption {
+      type = lib.types.nullOr lib.types.path;
+      default = atalkdConfFile;
+      defaultText = "/nix/store/xxx-atalkd.conf";
+      description = ''
+        Optional path to a custom `atalkd.conf` file. When set, this overrides the generated
+        configuration from `services.atalkd.interfaces`.
+      '';
+    };
+
+    interfaces = lib.mkOption {
+      description = "Per-interface configuration for atalkd.";
+      type = lib.types.attrsOf (
+        lib.types.submodule {
+          options.config = lib.mkOption {
+            type = lib.types.nullOr lib.types.str;
+            default = null;
+            description = "Optional configuration string for this interface.";
+          };
+        }
+      );
+      default = { };
+    };
+  };
+
+  config =
+    let
+      interfaces = map (iface: "sys-subsystem-net-devices-${utils.escapeSystemdPath iface}.device") (
+        builtins.attrNames cfg.interfaces
+      );
+    in
+    lib.mkIf cfg.enable {
+      system.requiredKernelConfig = [
+        (config.lib.kernelConfig.isEnabled "APPLETALK")
+      ];
+      systemd.services.netatalk.partOf = [ "atalkd.service" ];
+      systemd.services.netatalk.after = interfaces;
+      systemd.services.netatalk.requires = interfaces;
+      systemd.services.atalkd =
+        let
+          interfaces = map (iface: "sys-subsystem-net-devices-${utils.escapeSystemdPath iface}.device") (
+            builtins.attrNames cfg.interfaces
+          );
+        in
+        {
+
+          description = "atalkd AppleTalk daemon";
+          unitConfig.Documentation = "man:atalkd.conf(5) man:atalkd(8)";
+          after = interfaces;
+          wants = [ "network.target" ];
+          before = [ "netatalk.service" ];
+          requires = interfaces;
+
+          wantedBy = [ "multi-user.target" ];
+
+          path = [ pkgs.netatalk ];
+
+          serviceConfig = {
+            Type = "forking";
+            GuessMainPID = "no";
+            DynamicUser = true;
+            AmbientCapabilities = [ "CAP_NET_ADMIN" ];
+            RuntimeDirectory = "atalkd";
+            PIDFile = "/run/atalkd/atalkd";
+            BindPaths = [ "/run/atalkd:/run/lock" ];
+            ExecStart = "${pkgs.netatalk}/bin/atalkd -f ${cfg.configFile}";
+            Restart = "always";
+          };
+        };
+    };
+
+  meta.maintainers = with lib.maintainers; [ matthewcroughan ];
+  meta.doc = ./atalkd.md;
+}

From 793e30b6c3050f44c8db8b8e0b6e7cf81a103e14 Mon Sep 17 00:00:00 2001
From: mivorasu <mivorasu@users.noreply.github.com>
Date: Tue, 22 Jul 2025 01:17:04 +0800
Subject: [PATCH 48/48] vscode-extensions.ms-python.python: fix hash

---
 .../editors/vscode/extensions/ms-python.python/default.nix      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/applications/editors/vscode/extensions/ms-python.python/default.nix b/pkgs/applications/editors/vscode/extensions/ms-python.python/default.nix
index 106d391d1cb5..6507f0587c65 100644
--- a/pkgs/applications/editors/vscode/extensions/ms-python.python/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/ms-python.python/default.nix
@@ -16,7 +16,7 @@ vscode-utils.buildVscodeMarketplaceExtension rec {
     name = "python";
     publisher = "ms-python";
     version = "2025.10.0";
-    hash = "sha256-8dc1uM/6iUNF+9y4yKH7w4/FsrzgVoOJlIFfQOvY8YM=";
+    hash = "sha256-uD6NWGD5GyYwd7SeoGsgYEH26NI+hDxCx3f2EhqoOXk=";
   };
 
   buildInputs = [ icu ];