Merge master into staging-next

2025-11-26 00:17:23 +00:00
parent 012273c423 f087502faa
commit 9e21a7c68d
115 changed files with 515 additions and 5478 deletions
@@ -200,12 +200,12 @@ checkConfigError '.*A definition for option .bad. is not of type .non-empty .lis

 # types.attrTag
 checkConfigOutput '^true$' config.okChecks ./types-attrTag.nix
-checkConfigError 'A definition for option .intStrings\.syntaxError. is not of type .attribute-tagged union' config.intStrings.syntaxError ./types-attrTag.nix
-checkConfigError 'A definition for option .intStrings\.syntaxError2. is not of type .attribute-tagged union' config.intStrings.syntaxError2 ./types-attrTag.nix
-checkConfigError 'A definition for option .intStrings\.syntaxError3. is not of type .attribute-tagged union' config.intStrings.syntaxError3 ./types-attrTag.nix
-checkConfigError 'A definition for option .intStrings\.syntaxError4. is not of type .attribute-tagged union' config.intStrings.syntaxError4 ./types-attrTag.nix
-checkConfigError 'A definition for option .intStrings\.mergeError. is not of type .attribute-tagged union' config.intStrings.mergeError ./types-attrTag.nix
-checkConfigError 'A definition for option .intStrings\.badTagError. is not of type .attribute-tagged union' config.intStrings.badTagError ./types-attrTag.nix
+checkConfigError 'A definition for option .intStrings\.syntaxError. is not of type .attribute-tagged union with choices: left, right' config.intStrings.syntaxError ./types-attrTag.nix
+checkConfigError 'A definition for option .intStrings\.syntaxError2. is not of type .attribute-tagged union with choices: left, right' config.intStrings.syntaxError2 ./types-attrTag.nix
+checkConfigError 'A definition for option .intStrings\.syntaxError3. is not of type .attribute-tagged union with choices: left, right' config.intStrings.syntaxError3 ./types-attrTag.nix
+checkConfigError 'A definition for option .intStrings\.syntaxError4. is not of type .attribute-tagged union with choices: left, right' config.intStrings.syntaxError4 ./types-attrTag.nix
+checkConfigError 'A definition for option .intStrings\.mergeError. is not of type .attribute-tagged union with choices: left, right' config.intStrings.mergeError ./types-attrTag.nix
+checkConfigError 'A definition for option .intStrings\.badTagError. is not of type .attribute-tagged union with choices: left, right' config.intStrings.badTagError ./types-attrTag.nix
 checkConfigError 'A definition for option .intStrings\.badTagTypeError\.left. is not of type .signed integer.' config.intStrings.badTagTypeError.left ./types-attrTag.nix
 checkConfigError 'A definition for option .nested\.right\.left. is not of type .signed integer.' config.nested.right.left ./types-attrTag.nix
 checkConfigError 'In attrTag, each tag value must be an option, but tag int was a bare type, not wrapped in mkOption.' config.opt.int ./types-attrTag-wrong-decl.nix
@@ -965,7 +965,7 @@ let
        in
        mkOptionType {
          name = "attrTag";
-          description = "attribute-tagged union";
+          description = "attribute-tagged union with choices: ${choicesStr}";
          descriptionClass = "noun";
          getSubOptions =
            prefix: mapAttrs (tagName: tagOption: tagOption // { loc = prefix ++ [ tagName ]; }) tags;
@@ -23933,12 +23933,6 @@
    githubId = 6292;
    name = "Andrey Petrov";
  };
-  sheenobu = {
-    email = "sheena.artrip@gmail.com";
-    github = "sheenobu";
-    githubId = 1443459;
-    name = "Sheena Artrip";
-  };
  sheepforce = {
    email = "phillip.seeber@googlemail.com";
    github = "sheepforce";
@@ -290,6 +290,8 @@
  - The `mime_types_file` setting is now set to `"${pkgs.mailcap}/etc/mime.types"` to prevent errors.
  For a complete list of changes, please see [their announcement](https://blog.prosody.im/prosody-13.0.0-released/).

+- HTTP3 support has been enabled in in `nginx`, `openresty`, `angie` and `tengine`. The `nginxQuic` and `angieQuic` package flavors have been removed.
+
 - The `yeahwm` package and `services.xserver.windowManager.yeahwm` module were removed due to the package being broken and unmaintained upstream.

 - `services.nixseparatedebuginfod.enable = true;` has been replaced by `services.nixseparatedebuginfod2.enable = true`. If you only use the official binary cache `https://cache.nixos.org` then no further configuration should be needed. If you have other https substituters, you can add them to `services.nixseparatedebuginfod2.subsituters`. SSH substituters are not supported by nixseparatedebuginfod2. Consider running nixseparatedebuginfod2 on the substituter instead, and pointing to it with the new option `environment.debuginfodServers`.
@@ -278,11 +278,11 @@ in
    environment.systemPackages = [
      (cfg.package.override (old: {
        extraPrefsFiles =
-          old.extraPrefsFiles
+          (old.extraPrefsFiles or [ ])
          ++ cfg.autoConfigFiles
          ++ [ (pkgs.writeText "firefox-autoconfig.js" cfg.autoConfig) ];
-        nativeMessagingHosts = old.nativeMessagingHosts ++ cfg.nativeMessagingHosts.packages;
-        cfg = old.cfg // cfg.wrapperConfig;
+        nativeMessagingHosts = (old.nativeMessagingHosts or [ ]) ++ cfg.nativeMessagingHosts.packages;
+        cfg = (old.cfg or { }) // cfg.wrapperConfig;
      }))
    ];

@@ -10,7 +10,7 @@ let
  listenParams = lib.concatStrings (
    lib.mapAttrsToList (n: v: " '${n}=${toString v}' ") cfg.listenOptions
  );
-  exe = "${pkgs.nodePackages.tiddlywiki}/lib/node_modules/.bin/tiddlywiki";
+  exe = lib.getExe pkgs.tiddlywiki;
  name = "tiddlywiki";
  dataDir = "/var/lib/" + name;

@@ -205,9 +205,9 @@ let
            ${optionalString (cfg.sslDhparam != null) "ssl_dhparam ${cfg.sslDhparam};"}

            ${optionalString cfg.recommendedTlsSettings ''
-              # Keep in sync with https://ssl-config.mozilla.org/#server=nginx&config=intermediate
+              # Consider https://ssl-config.mozilla.org/#server=nginx&config=intermediate as the lower bound

-              ssl_ecdh_curve X25519:prime256v1:secp384r1;
+              ssl_conf_command Groups "X25519MLKEM768:X25519:P-256:P-384";
              ssl_session_timeout 1d;
              ssl_session_cache shared:SSL:10m;
              # Breaks forward secrecy: https://github.com/mozilla/server-side-tls/issues/135
@@ -573,10 +573,7 @@ let

  mkCertOwnershipAssertion = import ../../../security/acme/mk-cert-ownership-assertion.nix lib;

-  oldHTTP2 = (
-    versionOlder cfg.package.version "1.25.1"
-    && !(cfg.package.pname == "angie" || cfg.package.pname == "angieQuic")
-  );
+  oldHTTP2 = (versionOlder cfg.package.version "1.25.1" && !(cfg.package.pname == "angie"));
 in

 {
@@ -778,7 +775,6 @@ in
          that the nginx team recommends to use the mainline version which
          available in nixpkgs as `nginxMainline`.
          Supported Nginx forks include `angie`, `openresty` and `tengine`.
-          For HTTP/3 support use `nginxQuic` or `angieQuic`.
        '';
      };

@@ -1374,27 +1370,6 @@ in
          '';
        }

-        {
-          assertion =
-            cfg.package.pname != "nginxQuic" && cfg.package.pname != "angieQuic" -> !(cfg.enableQuicBPF);
-          message = ''
-            services.nginx.enableQuicBPF requires using nginxQuic package,
-            which can be achieved by setting `services.nginx.package = pkgs.nginxQuic;` or
-            `services.nginx.package = pkgs.angieQuic;`.
-          '';
-        }
-
-        {
-          assertion =
-            cfg.package.pname != "nginxQuic" && cfg.package.pname != "angieQuic"
-            -> all (host: !host.quic) (attrValues virtualHosts);
-          message = ''
-            services.nginx.service.virtualHosts.<name>.quic requires using nginxQuic or angie packages,
-            which can be achieved by setting `services.nginx.package = pkgs.nginxQuic;` or
-            `services.nginx.package = pkgs.angieQuic;`.
-          '';
-        }
-
        {
          # The idea is to understand whether there is a virtual host with a listen configuration
          # that requires ACME configuration but has no HTTP listener which will make deterministically fail
@@ -90,7 +90,6 @@ builtins.listToAttrs (

          server.wait_for_unit("nginx")
          server.wait_for_open_port(443)
-          client.wait_for_unit("network-online.target")

          # Check http connections
          client.succeed("curl --verbose --http3-only https://acme.test | grep 'Hello World!'")
@@ -114,7 +113,7 @@ builtins.listToAttrs (
      };
    })
    [
-      pkgs.angieQuic
-      pkgs.nginxQuic
+      pkgs.angie
+      pkgs.nginx
    ]
 )
@@ -25,10 +25,8 @@ builtins.listToAttrs (
    })
    [
      "angie"
-      "angieQuic"
      "nginxStable"
      "nginxMainline"
-      "nginxQuic"
      "nginxShibboleth"
      "openresty"
      "tengine"
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "vscode-augment";
    publisher = "augment";
-    version = "0.631.3";
-    hash = "sha256-P/FUw9+h8fGjb+GPKzFvLbNvVRAF53cpBwI/9O8mQng=";
+    version = "0.654.1";
+    hash = "sha256-R7eV2mFjrNHB2p6V7G0ru/PbZiKkdPTRWKBiSheuZd0=";
  };

  meta = {
@@ -727,8 +727,8 @@ let
        mktplcRef = {
          name = "vscode-intelephense-client";
          publisher = "bmewburn";
-          version = "1.15.3";
-          hash = "sha256-0GgXdBpEcJVqQ1FXBlN1vAqhPUgi/3WBMaPZH2M545A=";
+          version = "1.16.1";
+          hash = "sha256-dcfFtVnk5qyCeiM0nZwscKQZDhUXIkg1TJxVUuzA69Q=";
        };
        meta = {
          description = "PHP code intelligence for Visual Studio Code";
@@ -1005,8 +1005,8 @@ let
        mktplcRef = {
          name = "coder-remote";
          publisher = "coder";
-          version = "1.11.3";
-          hash = "sha256-7OXk7ykx4JuRZT6HNNGt2r2Bm4qU+q1yaViKPGoT2f0=";
+          version = "1.11.4";
+          hash = "sha256-m9FVEbfWLe9FweJH/wYFJbnXPkRmLDQEU3n30/f/pko=";
        };
        meta = {
          description = "Extension for Visual Studio Code to open any Coder workspace in VS Code with a single click";
@@ -1242,8 +1242,8 @@ let
        mktplcRef = {
          name = "languagetool-linter";
          publisher = "davidlday";
-          version = "0.25.2";
-          hash = "sha256-LVOjY0ZOrgPI6XDVXpJbfT7Z+x5VR5glsL4+HKwlbys=";
+          version = "0.25.3";
+          hash = "sha256-ZxIBjvDUThxmJwvaP3N/nM4b2dGkM0jiklcwiAzPXiY=";
        };
        meta = {
          description = "LanguageTool integration for VS Code";
@@ -5336,8 +5336,8 @@ let
        mktplcRef = {
          name = "php-debug";
          publisher = "xdebug";
-          version = "1.38.0";
-          hash = "sha256-QOA8At2akj9zLYxIuQJLkDL2Zg/isPIssFG/UipRBbU=";
+          version = "1.38.2";
+          hash = "sha256-GkKzFkEutlMTtO1n6R5ragtyiMvu2Rt8v63jXAW6CkM=";
        };
        meta = {
          description = "PHP Debug Adapter";
@@ -8,8 +8,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "basedpyright";
    publisher = "detachhead";
-    version = "1.33.0";
-    hash = "sha256-y4/DYRn6DXI1DMtWfoILw1LCkR2kT9cYu0wdtNWAgpw=";
+    version = "1.34.0";
+    hash = "sha256-XAP26fmn5GM1sRZMF9uTAOTp+5DLjRjr8nO8Vdh/UpQ=";
  };
  meta = {
    changelog = "https://github.com/detachhead/basedpyright/releases";
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
  core = "genesis-plus-gx";
-  version = "0-unstable-2025-11-14";
+  version = "0-unstable-2025-11-21";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "Genesis-Plus-GX";
-    rev = "46a55214d0dab654e5a525ae0c54921ca9716872";
-    hash = "sha256-DDdaMhTvSUXTtrdMK4DfALQe7qIsh+oV91dD8aefcU8=";
+    rev = "e48a37173350b5aec2a6431add7c1a625d1f28bf";
+    hash = "sha256-xxqSx199DI7nQ+3xq4CP8uhtmQ2UGxNG39kYvGPXdag=";
  };

  meta = {
@@ -181,13 +181,13 @@
    "vendorHash": "sha256-jK7JuARpoxq7hvq5+vTtUwcYot0YqlOZdtDwq4IqKvk="
  },
  "cloudamqp_cloudamqp": {
-    "hash": "sha256-HT46R0LUjEJ1ruEXUpPNkLMAf3jXWvePow+SsmPErMM=",
+    "hash": "sha256-vhl9lROCRRM3g+Um60SnckViimZADL+mEzZ/EbsZDwI=",
    "homepage": "https://registry.terraform.io/providers/cloudamqp/cloudamqp",
    "owner": "cloudamqp",
    "repo": "terraform-provider-cloudamqp",
-    "rev": "v1.38.2",
+    "rev": "v1.38.3",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-q942GCRd5czCdlpLYsXzj8Kt91GjCpyzhOkgWfkyHo8="
+    "vendorHash": "sha256-rVrCozbmMR3rHA6oLLha6gdYEaFXD5r04CqY+bSWoZM="
  },
  "cloudflare_cloudflare": {
    "hash": "sha256-Fx8Vh/2ALKIA3AlPEca+A0flVL7hHHNJM4Cfdklpq28=",
@@ -958,13 +958,13 @@
    "vendorHash": "sha256-AfkCBD1qYDhwUsezUZg27fbENMOQN21gH4dT54AMco4="
  },
  "ns1-terraform_ns1": {
-    "hash": "sha256-S0ji/gZsbMTgug7DwPODAcPx3IfRaw1JHYPJ6V+tqeM=",
+    "hash": "sha256-vSq6502jHjEQEgKmgMpUrid88jhsENOVF+3MA6Zm8lg=",
    "homepage": "https://registry.terraform.io/providers/ns1-terraform/ns1",
    "owner": "ns1-terraform",
    "repo": "terraform-provider-ns1",
-    "rev": "v2.7.2",
+    "rev": "v2.7.3",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-TBMJn9UIRub0N2yI+eGgPMvxSsPQo+xRSMB7qDO8lyw="
+    "vendorHash": "sha256-VGGV5UYkb17X//cSy6+cbhTRCVljrrpXhM81orLomdQ="
  },
  "numtide_linuxbox": {
    "hash": "sha256-svQRz1/PdVLpHoxOam1sfRTwHqgqs4ohJQs3IPMMAM4=",
@@ -1309,11 +1309,11 @@
    "vendorHash": "sha256-9GjhP/Oh2HlVuMcuXFhS7MUmF3eS4qlUsW5XhugaK14="
  },
  "tencentcloudstack_tencentcloud": {
-    "hash": "sha256-HZuIk7fNin1B76FDD9rchAgF/u0JkiUlzvXhqf8HcIM=",
+    "hash": "sha256-JKkpdnsogOkSXbZ19O4gWom8Q+60z6isUf8gU9jJyC4=",
    "homepage": "https://registry.terraform.io/providers/tencentcloudstack/tencentcloud",
    "owner": "tencentcloudstack",
    "repo": "terraform-provider-tencentcloud",
-    "rev": "v1.82.36",
+    "rev": "v1.82.37",
    "spdx": "MPL-2.0",
    "vendorHash": null
  },
@@ -1498,12 +1498,12 @@
    "vendorHash": "sha256-Z4DfoG4ApXbPNXZs9YvBWQj1bH7moLNI6P+nKDHt/Jc="
  },
  "yandex-cloud_yandex": {
-    "hash": "sha256-uiNLW1Xis+14xksJ9OAItQX60HMyCC6b1ey/0nqlDro=",
+    "hash": "sha256-AkDwj66lXECGyFYWQlvT8HzMs+faAHqklR5B5YALfqY=",
    "homepage": "https://registry.terraform.io/providers/yandex-cloud/yandex",
    "owner": "yandex-cloud",
    "repo": "terraform-provider-yandex",
-    "rev": "v0.169.0",
+    "rev": "v0.172.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-MXDGI1s9dRwpbJ45ivPyy26jjTC552r3xqnLG6Sx3yY="
+    "vendorHash": "sha256-NQ5FgYk9I28URO0twrfLQ04ld/NlKO32jp8gmWkuaOo="
  }
 }
@@ -7,13 +7,13 @@

 buildGoModule rec {
  pname = "algia";
-  version = "0.0.86";
+  version = "0.0.87";

  src = fetchFromGitHub {
    owner = "mattn";
    repo = "algia";
    tag = "v${version}";
-    hash = "sha256-dpvBlFI6xmQOwui7Ma1ewIoxgFctG9fK+pLhjK/71XI=";
+    hash = "sha256-8E48TLxA+kGObE08NJ3oFsLUY+y1LKQ6f8+kw7EhAzY=";
  };

  vendorHash = "sha256-Yt95kSXAIBxHgX+VUefKrumg9thuvh3c+gnSu/2PSQY=";
@@ -8,11 +8,11 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "alt-tab-macos";
-  version = "7.30.0";
+  version = "7.36.0";

  src = fetchurl {
    url = "https://github.com/lwouis/alt-tab-macos/releases/download/v${finalAttrs.version}/AltTab-${finalAttrs.version}.zip";
-    hash = "sha256-SWPPUzJQCHb0QaUM17WRLNS8ZjvQlUDhkQGT9Os3PEE=";
+    hash = "sha256-tKh6Jc8MXUJvmteC+jh2OCC9nfpPzyKZ9SyWwvbzwEM=";
  };

  sourceRoot = ".";
@@ -8,14 +8,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "ansible-doctor";
-  version = "8.0.0";
+  version = "8.0.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "thegeeklab";
    repo = "ansible-doctor";
    tag = "v${version}";
-    hash = "sha256-6elotoKZ4Hjelnw9LEiDONAFqqM5ewMKEorDtzA7LKY=";
+    hash = "sha256-vbI1VEtSQW+kUCIcqrHE+Ogmjjmpstgu2cpl3fDZ2rE=";
  };

  build-system = with python3Packages; [
@@ -7,6 +7,7 @@
  npmHooks,
  nodejs,
  git,
+  nix-update-script,
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "auto-changelog";
@@ -40,6 +41,8 @@ stdenv.mkDerivation (finalAttrs: {
    runHook postCheck
  '';

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "Command line tool for generating a changelog from git tags and commit history";
    homepage = "https://github.com/cookpete/auto-changelog";
@@ -6,15 +6,15 @@
 }:
 buildGoModule rec {
  pname = "aws-signing-helper";
-  version = "1.7.1";
+  version = "1.7.2";

  src = fetchFromGitHub {
    owner = "aws";
    repo = "rolesanywhere-credential-helper";
    rev = "v${version}";
-    hash = "sha256-FmMs8oU1x85ESTD4Ap6f+OC6AW7W3sULPv1bScDrbL4=";
+    hash = "sha256-6yq/+LwYBfq0bHcZMqeU2mToo4QmkeoXeixn4ZFFfmM=";
  };
-  vendorHash = "sha256-znca4Zcy8brsPeSMpFSyojjKrborx/tx1wLBadWGYmQ=";
+  vendorHash = "sha256-acr1A+Yj+azdTaGHlNVW1ADMEFTpAVhUAP1yWkUpJ38=";

  checkPhase = ''
    runHook preCheck
@@ -10,17 +10,17 @@
 }:
 buildGoModule rec {
  pname = "aws-vault";
-  version = "7.7.10";
+  version = "7.7.12";

  src = fetchFromGitHub {
    owner = "ByteNess";
    repo = "aws-vault";
    rev = "v${version}";
-    hash = "sha256-PB1mKed1OD6VXzPRTtLIrgsSgGl+OTqfll6FvT1k7rI=";
+    hash = "sha256-W/rEce6utwpDToW7amDM4JyiGUt8WcITemReEXLOd+E=";
  };

  proxyVendor = true;
-  vendorHash = "sha256-Dp77XCq+D83sRN4l17X7aQRlNgAw4PXe45dj9dbozds=";
+  vendorHash = "sha256-4B6dGokRObOkV1r1pw8lR+zFEZPZhMLj+Fj48bRkME4=";

  nativeBuildInputs = [
    installShellFiles
@@ -8,13 +8,13 @@

 buildGoModule rec {
  pname = "azurehound";
-  version = "2.8.1";
+  version = "2.8.2";

  src = fetchFromGitHub {
    owner = "SpecterOps";
    repo = "AzureHound";
    tag = "v${version}";
-    hash = "sha256-xJcztNSYVTDyoRahROxBwIqq28GLhwqmIxHwDPX7Xho=";
+    hash = "sha256-eXcHBwWjZhpKwUK+sSXEDFiiBlBD+b6E50cV3QX38fw=";
  };

  vendorHash = "sha256-+iNFWKFNON4HX2mf4O29zAdElEkIGIx55Wi9MRtg1dg=";
@@ -12,13 +12,13 @@
 }:
 ocamlPackages.buildDunePackage rec {
  pname = "cerberus";
-  version = "0-unstable-2025-11-12";
+  version = "0-unstable-2025-11-24";

  src = fetchFromGitHub {
    owner = "rems-project";
    repo = "cerberus";
-    rev = "35d1ec8919c9813dd1b3770dccf53260ac5b7f73";
-    hash = "sha256-OQo/w49Z7+SGyKdePsSXplglo1gSNfnxNw85lcv0nc0=";
+    rev = "3946c7e757f338061c8e29079605424360d41cb3";
+    hash = "sha256-aYWoGugqIBS2jpRkepO54wjitMQoCVeFf3cMpCUyZVU=";
  };

  patches = [
@@ -6,18 +6,18 @@

 buildGoModule rec {
  pname = "cnspec";
-  version = "12.10.0";
+  version = "12.11.0";

  src = fetchFromGitHub {
    owner = "mondoohq";
    repo = "cnspec";
    tag = "v${version}";
-    hash = "sha256-6u5h3mF8LCEEqI/DKwEdFGjb7fufLbzPXGT1oJj5jvE=";
+    hash = "sha256-vU6ezKt9pmcHiNHiwNYnJS7ClyEibJ9gK/JUM7/8SMo=";
  };

  proxyVendor = true;

-  vendorHash = "sha256-lH91LoHHxYDfR9RuNUseQaSScFWmDrvfQNYVxlv4yyk=";
+  vendorHash = "sha256-UDMJsqDg4cDzj15vw/3JDRT3rVcZ/VuAuv5LYSCPY1k=";

  subPackages = [ "apps/cnspec" ];

@@ -2,21 +2,23 @@
  lib,
  buildNpmPackage,
  fetchFromGitHub,
+  nix-update-script,
 }:

 buildNpmPackage {
  pname = "coc-clangd";
-  version = "0.31.0";
+  version = "0-unstable-2025-11-18";

  src = fetchFromGitHub {
    owner = "clangd";
    repo = "coc-clangd";
-    # Upstream has no tagged versions
-    rev = "3a85a36f1ac08454deab1ed8d2553e0cae00cc1c";
-    hash = "sha256-uxK0nciLq4ZKFCoMJrO4dR0tuOBHYpgdZUc/KJ+JA/I=";
+    rev = "72a4edc5ec39c6d7c4fd5a49aee7d9f3f84b8b6e";
+    hash = "sha256-uNCN3+8KovQ/Grrv7k5YZz6tTCNUX+6EN1Gkm867LMc=";
  };

-  npmDepsHash = "sha256-93MEug2eEL/Hum+RFmXx0JYO6jUygF8QRmL5nTTFyrs=";
+  npmDepsHash = "sha256-cLW5pY3LaumtE2qyxMMP9WirCMdWq+gsSO+dZNhCc1g=";
+
+  passthru.updateScript = nix-update-script { extraArgs = [ "--version=branch" ]; };

  meta = {
    description = "clangd extension for coc.nvim";
@@ -7,17 +7,17 @@
  yarnBuildHook,
  nodejs,
  npmHooks,
+  nix-update-script,
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "coc-diagnostic";
-  version = "0.24.1";
+  version = "0-unstable-2025-01-15";

  src = fetchFromGitHub {
    owner = "iamcco";
    repo = "coc-diagnostic";
-    # Upstream has no tagged versions
-    rev = "f4b8774bccf1c031da51f8ee52b05bc6b2337bf9";
-    hash = "sha256-+RPNFZ3OmdI9v0mY1VNJPMHs740IXvVJy4WYMgqqQSM=";
+    rev = "1515cae0c7f8e7e4284d046b6aaad7ba665489e4";
+    hash = "sha256-t5hB9lzbyHu0s7m/mYtohF/FW0Ymat9PM9zjdXwKiIM=";
  };

  yarnOfflineCache = fetchYarnDeps {
@@ -37,6 +37,8 @@ stdenvNoCC.mkDerivation (finalAttrs: {
    unlink $out/lib/node_modules/coc-diagnostic/node_modules/.bin/node-which
  '';

+  passthru.updateScript = nix-update-script { extraArgs = [ "--version=branch" ]; };
+
  meta = {
    description = "Diagnostic-languageserver extension for coc.nvim";
    homepage = "https://github.com/iamcco/coc-diagnostic";
@@ -2,6 +2,7 @@
  lib,
  buildNpmPackage,
  fetchFromGitHub,
+  nix-update-script,
 }:

 buildNpmPackage (finalAttrs: {
@@ -17,6 +18,8 @@ buildNpmPackage (finalAttrs: {

  npmDepsHash = "sha256-ow9viEFfyBUM2yDa63+pQCg6R5cAmznanqfI131fRxc=";

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "Docker language server extension using dockerfile-language-server-nodejs for coc.nvim";
    homepage = "https://github.com/josa42/coc-docker";
@@ -2,6 +2,7 @@
  lib,
  buildNpmPackage,
  fetchFromGitHub,
+  nix-update-script,
 }:

 buildNpmPackage (finalAttrs: {
@@ -23,6 +24,8 @@ buildNpmPackage (finalAttrs: {

  npmBuildScript = "prepare";

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "Git integration of coc.nvim";
    homepage = "https://github.com/neoclide/coc-git";
@@ -2,21 +2,24 @@
  lib,
  buildNpmPackage,
  fetchFromGitHub,
+  nix-update-script,
 }:

 buildNpmPackage {
  pname = "coc-pyright";
-  version = "1.1.371";
+  version = "0-unstable-2025-11-01";

  src = fetchFromGitHub {
    owner = "fannheyward";
    repo = "coc-pyright";
    # No tagged releases, this commit corresponds to the latest release of the package.
-    rev = "d4cfda2f530622962a2a6e3ac1ddb2ad83ea2387";
-    hash = "sha256-oNixIW63DhPn2LYJ5t/R4xcReZR3W6nqqFBnCUmo/Wo=";
+    rev = "9ac99c71ea92810b532283b690f6771601c74ff2";
+    hash = "sha256-nADl29GiApBZMKW0yQ9QVWBiduaGNXO8Cm4XxZmNfMQ=";
  };

-  npmDepsHash = "sha256-cTAt02RdQbKurP6H/JWwVp+VpoIysbFt9le9R69+DL4=";
+  npmDepsHash = "sha256-+9bf/3b8vZZgkiC2DA15js9X5PFHzK9dltTA9XJt+GE=";
+
+  passthru.updateScript = nix-update-script { extraArgs = [ "--version=branch" ]; };

  meta = {
    description = "Pyright extension for coc.nvim";
@@ -2,6 +2,7 @@
  lib,
  buildNpmPackage,
  fetchFromGitHub,
+  nix-update-script,
 }:

 buildNpmPackage (finalAttrs: {
@@ -22,6 +23,8 @@ buildNpmPackage (finalAttrs: {

  npmDepsHash = "sha256-N8bXRtTEKu9yuUnfv4oIokM74KWnqfTLVh5EvS0b1sw=";

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "bash-language-server for coc.nvim";
    homepage = "https://github.com/josa42/coc-sh";
@@ -7,10 +7,11 @@
  yarnBuildHook,
  yarnInstallHook,
  nodejs,
+  nix-update-script,
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "coc-spell-checker";
-  version = "1.3.2-unstable-2022-12-18";
+  version = "0-unstable-2022-12-19";

  src = fetchFromGitHub {
    owner = "iamcco";
@@ -34,6 +35,8 @@ stdenvNoCC.mkDerivation (finalAttrs: {

  NODE_OPTIONS = "--openssl-legacy-provider";

+  passthru.updateScript = nix-update-script { extraArgs = [ "--version=branch" ]; };
+
  meta = {
    description = "Basic spell checker that works well with camelCase code for (Neo)vim";
    homepage = "https://github.com/iamcco/coc-spell-checker";
@@ -7,6 +7,7 @@
  yarnBuildHook,
  yarnInstallHook,
  nodejs,
+  nix-update-script,
 }:

 stdenv.mkDerivation (finalAttrs: {
@@ -37,6 +38,8 @@ stdenv.mkDerivation (finalAttrs: {
    nodejs
  ];

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "Generate pretty HTML diffs from unified and git diff output in your terminal";
    homepage = "https://diff2html.xyz#cli";
@@ -11,16 +11,16 @@

 buildGoModule (finalAttrs: {
  pname = "discordo";
-  version = "0-unstable-2025-11-17";
+  version = "0-unstable-2025-11-24";

  src = fetchFromGitHub {
    owner = "ayn2op";
    repo = "discordo";
-    rev = "9aa853fa6cf29653815fadae7be4c876b5c1cfdb";
-    hash = "sha256-eu9QorEPjlLMahAnZ+c3P8oTvjAvsanocmoKlKwJUFE=";
+    rev = "ac1436b4d4e132f92b48b3afdf3f430e2846b41a";
+    hash = "sha256-qf7DPl/ZZlrjyX1dV9SP7wBiysqvZKNb+awYk6V+Lj8=";
  };

-  vendorHash = "sha256-nudvu36jBlDrRPvukNuDtv/+XrVZKChn2NHFm0uzUSQ=";
+  vendorHash = "sha256-b5ilZPU6+KwiTj8aC0gqZvgGI+V69gF8LNxCpxwUy7c=";

  env.CGO_ENABLED = 0;

@@ -8,13 +8,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "dolibarr";
-  version = "22.0.2";
+  version = "22.0.3";

  src = fetchFromGitHub {
    owner = "Dolibarr";
    repo = "dolibarr";
    tag = finalAttrs.version;
-    hash = "sha256-JKD601BuEQeu4sgVaL88dCGQivgjEkpIdauE9gs6BBk=";
+    hash = "sha256-3dcui1A8EzcFogQfUkf9+8A1C1CcFxHPFjOybDLKaCY=";
  };

  dontBuild = true;
@@ -6,6 +6,7 @@
  extra-cmake-modules,
  rustc,
  rustPlatform,
+  fetchpatch,

  # common deps
  libzip,
@@ -78,6 +79,16 @@ stdenv.mkDerivation rec {
    hash = "sha256-u9fRbxKeQSou9Umw4EaqzzzDiN4zhyfx9sWnlZpfpxU=";
  };

+  patches = [
+    # Remove for 2.3.1
+    # QT updated and broke some functionality so we have to get the commit that fixes it from upstream
+    (fetchpatch {
+      name = "qt-6.10.1.patch";
+      url = "https://github.com/drawpile/Drawpile/commit/c4f69f79b1cb0d25e68b49e807ce6773ddb9dd3c.patch";
+      hash = "sha256-Z8mcPux8tvK5y1GirfKq1X9+kxHDIrnSLTd2MCSIxTg=";
+    })
+  ];
+
  nativeBuildInputs = [
    cargo
    extra-cmake-modules
@@ -8,13 +8,13 @@

 stdenvNoCC.mkDerivation {
  pname = "everforest-gtk-theme";
-  version = "0-unstable-2023-03-20";
+  version = "0-unstable-2025-10-15";

  src = fetchFromGitHub {
    owner = "Fausto-Korpsvart";
    repo = "Everforest-GTK-Theme";
-    rev = "8481714cf9ed5148694f1916ceba8fe21e14937b";
-    hash = "sha256-NO12ku8wnW/qMHKxi5TL/dqBxH0+cZbe+fU0iicb9JU=";
+    rev = "930a5dc57f7a06e8c6538d531544e41c56dbb27a";
+    hash = "sha256-mlJE7gVElWUjJIZnAL5ztchphmaU82llol+YdKqnSxg=";
  };

  propagatedUserEnvPkgs = [
@@ -35,11 +35,11 @@ stdenvNoCC.mkDerivation {
    runHook postInstall
  '';

-  meta = with lib; {
+  meta = {
    description = "Everforest colour palette for GTK";
    homepage = "https://github.com/Fausto-Korpsvart/Everforest-GTK-Theme";
-    license = licenses.gpl3Only;
-    maintainers = with maintainers; [ jn-sena ];
-    platforms = platforms.unix;
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ jn-sena ];
+    platforms = lib.platforms.unix;
  };
 }
@@ -38,6 +38,7 @@ python3Packages.buildPythonApplication rec {
  pythonRelaxDeps = [
    "pyyaml"
    "xcffib"
+    "cffi"
  ];

  propagatedBuildInputs = with python3Packages; [
@@ -105,9 +105,7 @@ stdenv.mkDerivation rec {
    homepage = "https://freeradius.org/";
    description = "Modular, high performance free RADIUS suite";
    license = licenses.gpl2Plus;
-    maintainers = with maintainers; [
-      sheenobu
-    ];
+    maintainers = [ ];
    platforms = with platforms; linux;
  };
 }
@@ -11,13 +11,13 @@

 stdenv.mkDerivation rec {
  pname = "ft2-clone";
-  version = "1.99";
+  version = "2.00";

  src = fetchFromGitHub {
    owner = "8bitbubsy";
    repo = "ft2-clone";
    rev = "v${version}";
-    hash = "sha256-7FA6pd8rnobvOWHqHqJseJgUniAYhpzqmJnmqYyvpm0=";
+    hash = "sha256-Wx4dOWGyQRHgTqKZrmRIiX74UIU/ltFVAh217RYwUus=";
  };

  nativeBuildInputs = [ cmake ];
@@ -7,13 +7,13 @@

 buildGoModule rec {
  pname = "gcsfuse";
-  version = "3.4.4";
+  version = "3.5.1";

  src = fetchFromGitHub {
    owner = "googlecloudplatform";
    repo = "gcsfuse";
    rev = "v${version}";
-    hash = "sha256-UeYKgxBdxH7GQmPeO82CKR1RWzWCYCSUUc0nQX5VLjg=";
+    hash = "sha256-hC8/vgngJ4lLF02uV1MurZyRG7dpcEg9gcZr+HWzaNE=";
  };

  vendorHash = "sha256-BirzhmYwFSs2poA5tNOlK2bDO71mCkgSck7fE9la2wA=";
@@ -7,6 +7,7 @@
  yarnConfigHook,
  yarnBuildHook,
  npmHooks,
+  nix-update-script,
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "get-graphql-schema";
@@ -31,6 +32,8 @@ stdenv.mkDerivation (finalAttrs: {
    nodejs
  ];

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "Fetch and print the GraphQL schema from a GraphQL HTTP endpoint";
    homepage = "https://github.com/prisma-labs/get-graphql-schema";
@@ -2,6 +2,7 @@
  lib,
  buildNpmPackage,
  fetchFromGitHub,
+  nix-update-script,
 }:

 buildNpmPackage rec {
@@ -29,6 +30,8 @@ buildNpmPackage rec {
    rm -f $out/lib/node_modules/${pname}/node_modules/.bin/rimraf
  '';

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "Multiple git repository management tool";
    homepage = "https://mixu.net/gr/";
@@ -25,18 +25,18 @@ let
 in
 maven.buildMavenPackage rec {
  pname = "global-platform-pro";
-  version = "24.10.15";
-  GPPRO_VERSION = "v24.10.15-0-gf2af9ef"; # git describe --tags --always --long --dirty
+  version = "25.10.20";
+  GPPRO_VERSION = "v25.10.20-0-g72f85b9"; # git describe --tags --always --long --dirty

  src = fetchFromGitHub {
    owner = "martinpaljak";
    repo = "GlobalPlatformPro";
    rev = "v${version}";
-    sha256 = "sha256-yy2WOLDetBrbNRf6HvvPdNPD51ujXomI2a2Hj6eVx1Q=";
+    sha256 = "sha256-H4rq68ECfdUvgTbG4Ho1EgAgD+1qTZu5DYfg+SjrDkw=";
  };

  mvnJdk = jdk11;
-  mvnHash = "sha256-vTlOxFBjEZRD23ldMF+VRKZx6jyZ6YvgvZM353FWrWQ=";
+  mvnHash = "sha256-tHqA408mUa5l53zdWmFmREI6Ds+vqexwMoYnJMflMCc=";

  nativeBuildInputs = [
    jdk11
@@ -3,6 +3,7 @@
  fetchFromGitHub,
  buildGoModule,
  unzip,
+  nix-update-script,
 }:

 buildGoModule rec {
@@ -30,6 +31,8 @@ buildGoModule rec {

  doCheck = true;

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "Go symbol recovery tool";
    mainProgram = "GoReSym";
@@ -29,14 +29,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "gpu-viewer";
-  version = "3.20";
+  version = "3.22";
  pyproject = false;

  src = fetchFromGitHub {
    owner = "arunsivaramanneo";
    repo = "gpu-viewer";
    tag = "v${version}";
-    hash = "sha256-d7gAf3ZXCVZ0O63QV1khq6kaRuPxdAVnRO2+C8B4SUA=";
+    hash = "sha256-3X2dGjxxZdtNCvrCjoJ0hHzOS/3PZIn1oJAHu+j7Lu4=";
  };

  nativeBuildInputs = [
@@ -73,7 +73,7 @@ python3Packages.buildPythonApplication rec {
          vulkan-tools
        ]
      }" \
-      --add-flags "$out/share/gpu-viewer/Files/GPUViewer.py" \
+      --add-flags "$out/share/gpu-viewer/Files/gpu_viewer.py" \
      --prefix PYTHONPATH : "$PYTHONPATH" \
      --chdir "$out/share/gpu-viewer/Files" \
      ''${makeWrapperArgs[@]} \
@@ -6,7 +6,7 @@
 }:

 let
-  version = "0.17.83";
+  version = "0.17.84";
 in
 buildGoModule {
  pname = "gqlgen";
@@ -16,10 +16,10 @@ buildGoModule {
    owner = "99designs";
    repo = "gqlgen";
    tag = "v${version}";
-    hash = "sha256-mQT0hfM1UypHIzNktc1muN4bsIAKYNCXZ5D6YPpY72w=";
+    hash = "sha256-5Bz9iJJfDqzhuQbIbcpqCKTrSy4v8jpmjm8R1nn17R4=";
  };

-  vendorHash = "sha256-zDV4CqS4UzVo6eHrO9l0144KzYFj6whflTF/oVkdVH4=";
+  vendorHash = "sha256-1837pdV4pnwHjogdZqzBR2Ab3gZNW2stvbwvd6MQoBc=";

  subPackages = [ "." ];

@@ -2,18 +2,16 @@
  useLua ? true,
  usePcre ? true,
  withPrometheusExporter ? true,
-  sslLibrary ? "quictls",
+  sslLibrary ? "openssl",
  stdenv,
  lib,
  fetchurl,
-  fetchpatch,
  nixosTests,
  zlib,
  libxcrypt,
  aws-lc,
  libressl,
  openssl,
-  quictls,
  wolfssl,
  lua5_4,
  pcre2,
@@ -23,7 +21,6 @@ assert lib.assertOneOf "sslLibrary" sslLibrary [
  "aws-lc"
  "libressl"
  "openssl"
-  "quictls"
  "wolfssl"
 ];
 let
@@ -32,7 +29,6 @@ let
      aws-lc
      libressl
      openssl
-      quictls
      ;
    wolfssl = wolfssl.override {
      variant = "haproxy";
@@ -9,16 +9,16 @@

 buildGoModule (finalAttrs: {
  pname = "harbor-cli";
-  version = "0.0.14";
+  version = "0.0.15";

  src = fetchFromGitHub {
    owner = "goharbor";
    repo = "harbor-cli";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-86qRXxCLcmVpO/fdmVGxiqVFrAQYIFlNHLxnoBgY9+k=";
+    hash = "sha256-cUSFCSqM6eyEtc3RFCeq1R0jVn6MULtKZspsNZE7cGU=";
  };

-  vendorHash = "sha256-Pj573V6S2LaytQMK0jGVyLMX/GBZ1GOmYV/LPO1ScS4=";
+  vendorHash = "sha256-Ublu+vYIrXNniF78ldNmtVBT7zzG87uLCI6JRKSxeF0=";

  excludedPackages = [
    "dagger"
@@ -4,7 +4,7 @@
  lib,
 }:
 let
-  version = "0.17.2";
+  version = "0.17.4";
 in
 buildGoModule {
  pname = "heimdall-proxy";
@@ -15,10 +15,10 @@ buildGoModule {
    owner = "dadrus";
    repo = "heimdall";
    tag = "v${version}";
-    hash = "sha256-mSjxcf7Sbj6IVtO3ShVe/nrZgE+cJlx6JvOZ23WM7zQ=";
+    hash = "sha256-0/2q+ci6bvat8oI3MW/QfI747RDuk55LNciy7RSNLZE=";
  };

-  vendorHash = "sha256-3DOuDZh1rLuBaNnEJTDw/DXtEv8jhPk4kq2dvX4Scp0=";
+  vendorHash = "sha256-3ecwQ6CHPbOouDJzDZA0S/8aJ0lUbhVnZcGby/iCxDk=";

  tags = [ "sqlite" ];

@@ -11,16 +11,16 @@

 rustPlatform.buildRustPackage rec {
  pname = "intelli-shell";
-  version = "3.3.0";
+  version = "3.3.1";

  src = fetchFromGitHub {
    owner = "lasantosr";
    repo = "intelli-shell";
    rev = "v${version}";
-    hash = "sha256-Y1wFmere1Ft7AB1voHpI7KThoGjSpRXmAab35uoM6Ms=";
+    hash = "sha256-gahf7Ijaj2mf9cdE3C4IIyW5UJrs0IbOP3vado/0fXw=";
  };

-  cargoHash = "sha256-Op96deiAVliE9FuNMh1GExoO0jcmCFEuYGCXMccHAvo=";
+  cargoHash = "sha256-skxgDsDicqkA92IaePwCndGuKHov4GNtwXkSbrDlG2A=";

  nativeBuildInputs = [
    pkg-config
@@ -17,7 +17,7 @@ let
 in
 stdenv.mkDerivation rec {
  pname = "${name}-bin";
-  version = "33.3.4";
+  version = "33.3.5";

  src = fetchurl {
    url = "https://github.com/be5invis/Iosevka/releases/download/v${version}/PkgTTC-${name}-${version}.zip";
@@ -1,93 +1,93 @@
 # This file was autogenerated. DO NOT EDIT!
 {
-  Iosevka = "0jjh5mp23cbvia3mrvmjpvkfzg5i6wwzlfx2i474jr72vn0bh09m";
-  IosevkaAile = "07n0g0vb8fjay20ixrklsl7fmr3p2cl2x0x22ckb9z336w6mpnxv";
-  IosevkaCurly = "0r4ab15j4wa82kbarilxjmzhcc035jkglf1w1vjpawjc2izrq5lx";
-  IosevkaCurlySlab = "14vsixyw4gfq40l58drr8w17vja3k898520zfiabgs70r8d44kd3";
-  IosevkaEtoile = "0kaykx4i8ij6q5csz72r4pi107lf31q8mbgqw2ycgl4cr4k694fp";
-  IosevkaSlab = "0whxy6pxmm96lvmh3rln1jzynkxf02b1afzvb8md7dl795znddks";
-  IosevkaSS01 = "0rdfwa2773i1wrwhvy3spz4c7p0h229zdpjc41ara2lxbibkfzn9";
-  IosevkaSS02 = "17f02yqcnkqq6jfi95vcp92p3y8p5zxm2r9cgb05pr7xpwxhbpss";
-  IosevkaSS03 = "1rns4x777lsxshr6i7xmrcl65si5ppsmjm34dsqx9f5i1v2lx7nr";
-  IosevkaSS04 = "0m13vyrfzpzppakqdazgklpxhi49hcsiwbdi7b21zj5nkq09mm7l";
-  IosevkaSS05 = "1l2l81vvwa62zqrhz4f0xsiqgvkx8g4vx5w1h856gqanj9mxhyy4";
-  IosevkaSS06 = "1j8q3fximf9acz5br03frnhzfj24zh6iq94s6ywwgjsghb25xf3i";
-  IosevkaSS07 = "0q84a4dm6kx18yr17mds60vfp3s89xcp9c9gjjsbx5bw5gc0260n";
-  IosevkaSS08 = "0r5jvmzp61nj8fxbwismkrz414y816hchp3v8asyc7631g00lc3v";
-  IosevkaSS09 = "0n7sm4sa1v79bv7kn6nkl2r70p63qa3r9fjaaz6x88dmrwbqdswr";
-  IosevkaSS10 = "0sw6c3lakcc898shybkpmdwkzc09ia2x5fa9ycv0ffshyig1br2z";
-  IosevkaSS11 = "02dsh5rn2ixcrxrna2rl295flv2pa6w4ncsgzphzqmhmi2ks615p";
-  IosevkaSS12 = "1s4v4x951770fy1v8m8mpnnpna0w2p56pcfd99raf14icq70q4q6";
-  IosevkaSS13 = "0qxwbvh9ahzi5bgixy3fk1mqqaxylm001095laa5z2ijscxz9rk3";
-  IosevkaSS14 = "02r8bzw5dsj7qkwrahp4fqb8n7chdxx64qk2d1wwh0065151iis5";
-  IosevkaSS15 = "03vig7c3m7z47nki0p87rjnn79y54gh3ifhw91lmnkkvc2qa9l9c";
-  IosevkaSS16 = "1af0x7adknav0mj9w1c0hrjy989dk6dfxz097400mbmhhj838azh";
-  IosevkaSS17 = "1pzfcfdjpbinh32ph0aq5x1l0nz634vi3vsmcrqyip3kpfpyzjj3";
-  IosevkaSS18 = "0mwdxmmdq8779nrk5iw17235sbn82cfam45nkkgmrmsxyzin54my";
-  SGr-Iosevka = "0q135jighn5a4nxbcwfr8y60qmvrhhwi5f8bqs99f7i46145n932";
-  SGr-IosevkaCurly = "000aw2w8m07b2ilylyxh04ki827a81pn22wmvynfiilkd5gzqnw9";
-  SGr-IosevkaCurlySlab = "1aaq5acvjg5z721z7cy4c9wjl3417f8hlqn71g2pk7jdb0lbknv2";
-  SGr-IosevkaFixed = "1ghp8yihfc8gmyyls7f70xnqjq08wsf0f3xvg7jbg1s71rjdlvjd";
-  SGr-IosevkaFixedCurly = "0724k2yg5zilzz6fqaxsjxw8yjyipr6pc6g8znjn1c7bx9g3xqyq";
-  SGr-IosevkaFixedCurlySlab = "04w9czw10y04jaylxij1rkh3n6pcj1rylr3xj1aqkq0pn7x2y79s";
-  SGr-IosevkaFixedSlab = "0qpsy942dmh8hwfx7ykxpz27hnv21ybrp1v2hqcpjig1da5wsw72";
-  SGr-IosevkaFixedSS01 = "0ia8j5r2z34mgdx2rlk8i9pfk7mmpdhgp66qv1dks0kwvf8q5mkl";
-  SGr-IosevkaFixedSS02 = "0ahhrzavzpi3q2g640ac0s62r3lvx4gn675pq97r7kzjgfp8034f";
-  SGr-IosevkaFixedSS03 = "16hdzpjzkq7m2df3avjk8kj0akrv8ds7lak8a9v78invhwkd2hn2";
-  SGr-IosevkaFixedSS04 = "1iyl6acrly2rg4dzbvsznkkv9llcb2fdlr0mfhhj6snnvfnfcf8i";
-  SGr-IosevkaFixedSS05 = "1cphajcy21yigwy5g1lc9f5d9y1fmrppql0d62vhvcjkr1mdzq1z";
-  SGr-IosevkaFixedSS06 = "1k0kaihvm4fmfdq8vdvaadjsajd3sfky8g1ddd6vp57ra4s5jpbr";
-  SGr-IosevkaFixedSS07 = "0xg26a4n29lji0nbhsxzkkazarcvwahv8p6cz0c7nxz6am57lld1";
-  SGr-IosevkaFixedSS08 = "0h14y3m3w8g6vwl71d5wmkj8qahrkzavca9v0nhf52xq5chmn1rq";
-  SGr-IosevkaFixedSS09 = "17f7smhy85fj5wnkxg2sm65csgyhb4l4yvj8m3b5zgm3pqk5b68q";
-  SGr-IosevkaFixedSS10 = "1hz7rgp1b4r8kwwsx1lcvnx5layni88m57z9dcgz1gbipz0133bk";
-  SGr-IosevkaFixedSS11 = "1nzp0880vmjmcjmq06a16gkgy4jyd681ip93qqxn46rxmc822dc6";
-  SGr-IosevkaFixedSS12 = "0ipyy7c7f8siq4s03inrvl8m6das84az09lsmi0zpdqk403xszin";
-  SGr-IosevkaFixedSS13 = "1y49hhvz759g54c4sci75pljz9c65qhl6slyr6xkrpnr31c5g06y";
-  SGr-IosevkaFixedSS14 = "0r6y1mk43ax2qyla44phknnwvzj4k5lckmrm8wf27myk3fs332wj";
-  SGr-IosevkaFixedSS15 = "1cihz4rljjxrn11l283ivgy28xmrzixc3gc6s7mm2v05d40ixhyi";
-  SGr-IosevkaFixedSS16 = "0iihsqz1bm6s0isydpygqckh58qwwvkkp0yd75cd4w1fwfmb69h9";
-  SGr-IosevkaFixedSS17 = "1xqk39nygyxxmgffl9vv3251qf5ghl28gh03x0bs0zhgwkhcwck4";
-  SGr-IosevkaFixedSS18 = "130fk2mfn05102h7ch0xzrkf7sv6jr9z45ina05cld1y9d3ycmhr";
-  SGr-IosevkaSlab = "14f9snc4iji7vffsmghnr9b3g759sxlsq43526jd2rqxd3j4nzb8";
-  SGr-IosevkaSS01 = "1nwbp2gi6d1aqncnpi65f8r8f7g52qn1jai1hvfm0jp0ks1hi5w4";
-  SGr-IosevkaSS02 = "0r2sx5z7hj6x2b2gppz6b6g13h2rv3vpba5mh36sgdn71l5scy4b";
-  SGr-IosevkaSS03 = "16a38j2hz02rymf6a7wv07b6bi8kmyv9ffmqa48v4gmp3lvfh2dx";
-  SGr-IosevkaSS04 = "0hv1j3z6ygk0gzz6iz0ry09ixsaj42r0nlldj40w89sxg9v1cflf";
-  SGr-IosevkaSS05 = "0jjnbgznykfpbqk9gmklg4rp9aq1b89c94fxjgvmgj3h53y0fp1g";
-  SGr-IosevkaSS06 = "07wzw907n9jmfll4xbpq31wbsdvq84s44q7jv9v2wbsz94kifwxv";
-  SGr-IosevkaSS07 = "1znd0brxym2rb5cfsavf1rw11nbzwc62vbxjsxf3kq5ihr1898h7";
-  SGr-IosevkaSS08 = "15bjxqf9jndxnrzg1gn0j5rrpxca5s5jp81j6lq7yka3xzx7c0q4";
-  SGr-IosevkaSS09 = "08i8gqb7k2k1cipmf2k4zk0mp4cykf8g4prhvbcx8ycja5pa5sqi";
-  SGr-IosevkaSS10 = "1x2cx5pnxh1smgs7niqmyd2iqfghdqkcrl2vq1pxmk8r9rcvh9js";
-  SGr-IosevkaSS11 = "1249h0kdfnp4hsxgih5ww52phb800wrslzlzd6j12n7raqv81yx0";
-  SGr-IosevkaSS12 = "1dshykbsq4d0hfl2cys6m0sdxx06g4lbsv7ypq15rvlry240qj2h";
-  SGr-IosevkaSS13 = "0kh5rczvq8bm2gwc3ydy56adbk065r599nl5x57scyyz6awsndyv";
-  SGr-IosevkaSS14 = "1lbzdxsx6wla19ha9hiv4jk6x4gc5xs9pshqdzni9248mi7c4zr0";
-  SGr-IosevkaSS15 = "0hpprlkapagmiwbl6pm8wl4c092n4c3ands01vb1q7jf6ck37iaz";
-  SGr-IosevkaSS16 = "1inhaiw3vp0z3aisivi1hg3ckb6a2rfs4kn5hck3mwhpmfpws6s9";
-  SGr-IosevkaSS17 = "02g2sb0iqclw4v6j9jlxsgrhanl4jrydw8f9cvzmqbw7wdnfvalh";
-  SGr-IosevkaSS18 = "06myf35ahcadwi0abhbm0y8cn4jb814sjagi3j8fagn3vb7bckci";
-  SGr-IosevkaTerm = "1s2xwgjdmwamgf6yyz3bj749rql2i7yncgkp7an44zr93rpc1vjh";
-  SGr-IosevkaTermCurly = "1yv113mq7d7l9jda6zlzdj2pghp2zbsfdvhw54bxvs0kww985ni0";
-  SGr-IosevkaTermCurlySlab = "00r6jqdli66qsfldpx2l67bxhayf8s71ki4mdyplbbh9ln6983n6";
-  SGr-IosevkaTermSlab = "11ixxpkicrxw1vjz67khp5rc6gk9p5ckcs1a7r1qk91aakqx14r4";
-  SGr-IosevkaTermSS01 = "1gvjgq2x259mb05raqf8qjpz2lbjp9xnvxhihwmwi12jiq9sxw3c";
-  SGr-IosevkaTermSS02 = "04w716r0xr3xmkxckn2prv8gnqhks3p75zyrnmiqlcghy0gcbzwr";
-  SGr-IosevkaTermSS03 = "04y7wj1pwpw9xpwsc1c964pq94sx1gjv8jps5p00dynhg65p24m7";
-  SGr-IosevkaTermSS04 = "17skw1p81mqvy2mf4sf6ap8n1sp6g1a63pmz84sar4bgpq1zqq8h";
-  SGr-IosevkaTermSS05 = "17iwkv3pdsrfwm4vpw5yq5h0p4axir1mis8rslkj7gd7sxjks758";
-  SGr-IosevkaTermSS06 = "0cl187wd90ajgyjl4v7j824mqsckbz7i9w2l4zdi3a7861whd7vj";
-  SGr-IosevkaTermSS07 = "0cvw2y0880v19p38bpp497kyap28a8fi7wzv8lnbw60nh3s15vyx";
-  SGr-IosevkaTermSS08 = "046njfjx4lp4fy2cy9r04y2hcqvkx6npqvfcm726h1xs5zlvd6qs";
-  SGr-IosevkaTermSS09 = "08zfz0wj84myc0kgzlcqw3b33gak4099286p5xgdxd7xhgk90bkb";
-  SGr-IosevkaTermSS10 = "1sx4hrsn9y19n2fs48mpnrrj02p5m3ij3qinlg1hygy166n6qq77";
-  SGr-IosevkaTermSS11 = "1wpyggy5pkq0w9clhilri7igbg7zzf6w2c6d6yllwlk060998vm6";
-  SGr-IosevkaTermSS12 = "074chz4xnj537igxf0a1zms3vpm77qx3i5i76s9gvp3i6npa65sm";
-  SGr-IosevkaTermSS13 = "0vz6lfzxz148jjw6m4s4h75ffynzi5r8963cqswqydma9bmkqjxa";
-  SGr-IosevkaTermSS14 = "1an5pxaa2zbdczjacp41v15an979lagws8mlc86xrn4ldjk2wdmx";
-  SGr-IosevkaTermSS15 = "1y6f28gayijj7vflna6p0wrminy8d9dlay1ri38zr2lrnhlazl7r";
-  SGr-IosevkaTermSS16 = "1cgrjfxwp7vwi1klhsiskcwwdwnxmz6iwhglnbxa1kwax9qphwm8";
-  SGr-IosevkaTermSS17 = "0j9fikrfirb62mq35as6cyvhx5m3wgpv1byzjbcsmanxmn6n53dx";
-  SGr-IosevkaTermSS18 = "0h0q9ig2xcy1kb6afgdqfbpc743czhpqdx3xd8rmyxj4yggp6kxs";
+  Iosevka = "16hqknkmy2jj4lk00xzxxmxcishkg085gn9ih77frkgmj1lv7jlb";
+  IosevkaAile = "1ndq1f994bjxh0p91lf5wh8rcz5qg26ix8lamzbc80jxp17mqv10";
+  IosevkaCurly = "065vhp865pwh9xqdw01d4v77wbdy44ypxrlvlk2vv6lip6011nyx";
+  IosevkaCurlySlab = "16wmjq4swndv5j0d2jq15j7z85ijhgkhdsk6qqjgln5m9nfzgd26";
+  IosevkaEtoile = "0wb954q30bkzx0mhqzbqg8cm4z6ncwn95i3pp86vr094ny01kkj2";
+  IosevkaSlab = "0rbhvnlv02bdqz8984kaa0si6xjvgw9k3hxy5yw1krxygbfxsdzy";
+  IosevkaSS01 = "1zmvvriggkpv5j3rzd4jziixg83sfkv2plsagw3qqszlh8j0wwd0";
+  IosevkaSS02 = "11fyb3708xbx1p3vkxw6c2pbwk5nymvr8xcy6m5siav2w5rhwjiy";
+  IosevkaSS03 = "1fqqslgnhbgzi69gf9zfm233hzpd61m5mwbq97h0drwj63b6a4pm";
+  IosevkaSS04 = "17wzvpfwbnv7bys3hzfmgz7a8nhlbw26iyxdbia6s385i560rl0i";
+  IosevkaSS05 = "1m94k1jcn3z9pz17m5iaxmgjnbj96wyziv0va6pjrv4pyi0gpdbs";
+  IosevkaSS06 = "00r2kdwq4zy4gazqg822qw16lyzxddmjnnmavjhprqm90m78swi2";
+  IosevkaSS07 = "00ibg3h8ga8ii65lzq9vr8ks8hnricp55mjddvbg5p9kamwryxgy";
+  IosevkaSS08 = "0rkvvgmghfwhvz4043rhv2kcdz7vkbxkjz7gr3y85nkbcbh781l2";
+  IosevkaSS09 = "0i70bgvw4mgxr6xigyvsrzdpjn2gpi6fhrlfs4bx2gjimplf6q4v";
+  IosevkaSS10 = "12hnxkad7s8rchavb3d8z70ri16w9a8x72d58bs2ffzckf4mq0ah";
+  IosevkaSS11 = "0zy1z70idky37gp35g6781a7s3inbw5jiw2i5pki5wpjksn6kk8c";
+  IosevkaSS12 = "1nb73djwjzn747abs64lj84il18k693sarff6k355a4hf3bs6r62";
+  IosevkaSS13 = "00dz7dv8701k1h62137qm4cz8b8wqyjz70flc034qqqkn1fig877";
+  IosevkaSS14 = "1m72249bn5s6w6cd5n2n0msjp49c6paabs6dq506h2cv0kzvf8mk";
+  IosevkaSS15 = "128ll92l9icvbmy578qyi4gbdd1y0q6zr0g3hf2rz0bp7lpa2swh";
+  IosevkaSS16 = "1kfc2dwf6mrym1x7v58y1vzw58gkhl59w6s2xgiir0sv4dhm52f9";
+  IosevkaSS17 = "0qqb5h9ppg6mpv4m17fcqawgpd4ffp28i0inva1dr913qns7kngw";
+  IosevkaSS18 = "0n3hax2zy67xpgvwl0v0zhbrjwp1w89k051cnkznvlxygihh4gv2";
+  SGr-Iosevka = "1fgiqd2bzb4w0aa6d9xhy055wgzjka55km5f0xagxmwvq9kwrkdg";
+  SGr-IosevkaCurly = "1pf5kr3x6pvgq3c1k7r9l3dpprj3m0nmrjxiwbzxpangn7vkqff3";
+  SGr-IosevkaCurlySlab = "0w3dimxzp7y9y903mm7rmnzk124g24b6xcwq9j4w34h5wnxcvac1";
+  SGr-IosevkaFixed = "1xaqi12kzb2ha69x965kvbnni8pg744bzvnvmdxryj4wnyn4h252";
+  SGr-IosevkaFixedCurly = "1xq58ad7ky3yv6cdw5sc3qw6nbpcw8q3c79ninqf33lq5sf66xml";
+  SGr-IosevkaFixedCurlySlab = "0d5wsdz8kx1vj72yx08im27k834m54mm8mxwfbpbvphc9zrvjscn";
+  SGr-IosevkaFixedSlab = "14inh0cpalch2mrwh9s4wkpb7zin2nxfr6797q1ib2hszfnlvbpz";
+  SGr-IosevkaFixedSS01 = "1rvy4kmd0w3ipkr2vny88ps41qbiri2alqfqpfrp5vfyzsza2q01";
+  SGr-IosevkaFixedSS02 = "192gvaby14q75id7k9d171gcr3aygkzgr5iji20frxgm16qlmcrv";
+  SGr-IosevkaFixedSS03 = "171zas123qkqgyhzphwkgiwkadfll266i10ymny88lpy0kwm3pdq";
+  SGr-IosevkaFixedSS04 = "16i7gmswyj3pa4wc8n11sismdsh5gc6y6qvzl7617j5hkcpp87mh";
+  SGr-IosevkaFixedSS05 = "0fmam0dfh53pjgjvlxz4jppz38i37af53khxkk8l8zffqy3fs5cc";
+  SGr-IosevkaFixedSS06 = "00rbyp7yiicc3inljbb8njzc5g8pd8q63fdjgpjp0mnywp0ajiki";
+  SGr-IosevkaFixedSS07 = "0lw3w7p7yv076szl5800p7s5ki8syxafwrk3yjwcq39d576n62js";
+  SGr-IosevkaFixedSS08 = "0xh21ij22m240ac1vwdawa8ixnhm226wjbaqv7qxk0bzvrkfw0q8";
+  SGr-IosevkaFixedSS09 = "04zsjis279lwxqkljxjgajk330kskvyjcc244wdfq81dslflyhpk";
+  SGr-IosevkaFixedSS10 = "0j59ikdfz06rg7is0yc271kvrni1pb4b5r0m84ci1j0k2inaqkzi";
+  SGr-IosevkaFixedSS11 = "0fwy95q8jnj1ya61i7cs12zla6wjybv86bf9yljz5vlby56xzhkn";
+  SGr-IosevkaFixedSS12 = "06gbij8lncaad9dq8f8fm2xr2gkapf7j73nmar8rzw1kxn1h84s8";
+  SGr-IosevkaFixedSS13 = "1k8ixf92nagmnrc77b8yj4wxx8pi3psgnpkh7kfsmpzx7pr189yy";
+  SGr-IosevkaFixedSS14 = "1dydjk5qdybw9n306qxdzrhk6idylzrdhij2mh720fy24ps0icir";
+  SGr-IosevkaFixedSS15 = "1d0b5l90w7yaa51hcm5cpkf7l1qn33cdnbk61dg7pdy22gkb2jvg";
+  SGr-IosevkaFixedSS16 = "0bg2mww02r8qf40iv3gg8np2fx31sm9fm5bb9s4j5k6j33b4i4ly";
+  SGr-IosevkaFixedSS17 = "1d77nqi8h89md89a893kgjcbksq4raxis3yna4xymm0c8pp5q7mk";
+  SGr-IosevkaFixedSS18 = "0w9hyjdqpisxgj378f8ch4bcz99la00jkd2fk0psl3mr15djp0d8";
+  SGr-IosevkaSlab = "0pxiljrvpf6ixcf4gbszp7q3ml732469qdx96blx4x027rn7vxs5";
+  SGr-IosevkaSS01 = "134zy9blfbfsja63csnjj8ri8yqpidzif4kswcwsnxf0h88sv0k8";
+  SGr-IosevkaSS02 = "04ghfv0gpnl56hdpcp9brm67pgbxpq1v58s1dy7aw89jd8nx2yjz";
+  SGr-IosevkaSS03 = "1nmls5khlzmzzj1iwrmc7x3lk1lw8llyiimw6bx905xmwk4pxh76";
+  SGr-IosevkaSS04 = "1b2ah6h141gzg4wqx3pypc8khnvcqjlrz15nxpjz0i2qdjr0mw02";
+  SGr-IosevkaSS05 = "1a8mkv026ak9vns62rfhmckkii7j46gbmnacwgj8lfslx7bwy5pb";
+  SGr-IosevkaSS06 = "1ph0b0k8j8qpmlihlap140vzh40nkhy8450cgpaf4ps5aw0v95s6";
+  SGr-IosevkaSS07 = "03x412ak9iigqxqsqsmhgs6311c2g4mdbk5mmijivhsx32qm2xlh";
+  SGr-IosevkaSS08 = "12b7v2prhgksdw0ydw29r6ihz1pwdlz59pf6n9f251bb0wk4wsxr";
+  SGr-IosevkaSS09 = "0pk2d0gxbn0z9dgm92haybaschxs88qh7ki0xgiw5a9ip0jqgbj3";
+  SGr-IosevkaSS10 = "1ny2qb2skxpi8952z1rs3vl7glbs041dqns1pmzaaqdvcq5sl8a4";
+  SGr-IosevkaSS11 = "0wdgyhp8kzvkj2ym4nvv106cyhddcls5k8rgy11mkv4m96j5rvjp";
+  SGr-IosevkaSS12 = "08vll4n59vj17xf8p7mxivqn0ilpmjwpncd4xf7sbw273kxc4l65";
+  SGr-IosevkaSS13 = "1v7s061pjs4fd89kz2azbg9058s66xkzza4w3skbi0d444x10gp6";
+  SGr-IosevkaSS14 = "0iz0m369xjscizi0d0kkcrnsyzq2cdrjfi9djs31v91797d8p3sd";
+  SGr-IosevkaSS15 = "1i7qqcva57fa9lndnmdcxr5c5pdy055xqnjvv3xm48a91r435b73";
+  SGr-IosevkaSS16 = "171pzy80v1dqb20mi7m4k397f3hcxyp8vn72mkscm8w0145l2dqg";
+  SGr-IosevkaSS17 = "05yw7l8p88pnn1h2yglkyvfznhbsfqw7vknwmyn0z0jnfybylz39";
+  SGr-IosevkaSS18 = "1vccd152vff2askyk17mwgmj3p8hznmkmafl2gmrkykv9pyymhqb";
+  SGr-IosevkaTerm = "0mb24vp026m5qii907nlm9d6j4wisa9qc65d7kpssmh4vq98xvgz";
+  SGr-IosevkaTermCurly = "0ys07ppih7xgalzi43f2jkfj8dcjcdrk7ys2w7b1bw2z0fjkvrz0";
+  SGr-IosevkaTermCurlySlab = "0hsqs9wv57alwalr5zwqwdz8kmxk4nsf8qp526kdr0mlpc1lcpgq";
+  SGr-IosevkaTermSlab = "1bzf2f8gifn3la3bi6310wx1pwp9w6d1iza5gjvjfcsj2dbjl2w8";
+  SGr-IosevkaTermSS01 = "0blznq6rvwhgpixf5zp6nm624d6ksfwwffhzpcqyn5gh9cc615gv";
+  SGr-IosevkaTermSS02 = "0yd4bdhzkpp9ggc6ilz1s1rmx3hyb152r0v636sfhi8rf9d99s8l";
+  SGr-IosevkaTermSS03 = "1i82yyv4j3p09h5m8m75pl861phfi9iaiyvlcbfqwlndzimjv4l5";
+  SGr-IosevkaTermSS04 = "0k9sy8zjxl8qmr49ql7dg05gk1mhi1g377a5yy34c7sza9w856az";
+  SGr-IosevkaTermSS05 = "0kvlh8rygn4210qhyn8h6pzdc0v2qdz7wnkiv45y8fgkmnqyzzhq";
+  SGr-IosevkaTermSS06 = "09a271pslv0qpblfx23q57s08yiw73df14qdi2ph0jdlsp573fv3";
+  SGr-IosevkaTermSS07 = "0dc1aqwkcs8cgr8yb6qdkp23bdgnvfrg6c05mqd0m9cn8369arx4";
+  SGr-IosevkaTermSS08 = "09c0qdmm8f8pmzxkbic6mmlbvmwfbzh5kf5l1qhrfh90r1nkb50j";
+  SGr-IosevkaTermSS09 = "16k2m6z0hqhdgvycc3z59380w5a7i2ys3jj8jlldi85517w5nj4x";
+  SGr-IosevkaTermSS10 = "0hsw6h124f27qc7lcsbqp62a6ndgkhbyil4i4s7cj1cvy8m7rqic";
+  SGr-IosevkaTermSS11 = "15w0ymqwjw6a24kbr0glbh2xvljcd2539pf4inpglmwjj42yw633";
+  SGr-IosevkaTermSS12 = "1qlwrnw742yx1x8w3v885pq52kzz7lb136b881xflvg5gircagfi";
+  SGr-IosevkaTermSS13 = "1903x5lcjxq3jmghcabpqf89avc9ka3dwqr4z47kcm27gqn2anvc";
+  SGr-IosevkaTermSS14 = "1ax92kr26w2dfa1snrcfkzhqh6ryaxqzllb8cmijc7f34xai758h";
+  SGr-IosevkaTermSS15 = "0ncqy2sz50sqabmfkrn4if8k5jp0wk4y6vdjrb8cvw7wn1r5znij";
+  SGr-IosevkaTermSS16 = "1dlddyklxfc4hsnhwp1b8wxaw994di9avh6c8qbdmaz6kj6ijjam";
+  SGr-IosevkaTermSS17 = "10mg49ixqiy9ha9r1nlhw5f63nsh0axpl3r13gi7lvrb98p9mh07";
+  SGr-IosevkaTermSS18 = "08h4g73cfr8hgigb8xw0g3qvjqlwjqybwnvrv4wava85pmc7703i";
 }
@@ -3,6 +3,7 @@
  buildNpmPackage,
  fetchFromGitHub,
  nodejs,
+  nix-update-script,
 }:

 buildNpmPackage (finalAttrs: {
@@ -35,6 +36,8 @@ buildNpmPackage (finalAttrs: {

  npmDepsHash = "sha256-Tr8kYawvPBt+jC7SW8dnKJVWynQyOpKbRD8yd+qbvIs=";

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    changelog = "https://github.com/beautifier/js-beautify/blob/v${finalAttrs.version}/CHANGELOG.md";
    description = "Beautifier for javascript";
@@ -24,11 +24,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "keycloak";
-  version = "26.4.5";
+  version = "26.4.6";

  src = fetchzip {
    url = "https://github.com/keycloak/keycloak/releases/download/${finalAttrs.version}/keycloak-${finalAttrs.version}.zip";
-    hash = "sha256-SjrFigm30XccE2o3MDqKV0G1o3YG/b4lgN61v3VtPIo=";
+    hash = "sha256-hX8ggj/FLOqo9FfsFrMIi5agnMmOUUlS9K+qzvqxtlE=";
  };

  nativeBuildInputs = [
@@ -7,6 +7,7 @@
  yarnBuildHook,
  yarnInstallHook,
  nodejs,
+  nix-update-script,
 }:

 stdenv.mkDerivation (finalAttrs: {
@@ -37,6 +38,8 @@ stdenv.mkDerivation (finalAttrs: {
    nodejs
  ];

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    changelog = "https://codeberg.org/keyoxide/keyoxide-cli/releases/tag/${finalAttrs.version}";
    description = "Command-line interface to locally verify decentralized identities";
@@ -18,9 +18,6 @@ collectd.overrideAttrs (prevAttrs: {
    homepage = "https://collectd.org";
    license = lib.licenses.gpl2Plus;
    platforms = lib.platforms.unix;
-    maintainers = with lib.maintainers; [
-      sheenobu
-      bjornfor
-    ];
+    maintainers = with lib.maintainers; [ bjornfor ];
  };
 })
@@ -7,13 +7,13 @@

 stdenvNoCC.mkDerivation rec {
  pname = "libretro-core-info";
-  version = "1.22.0";
+  version = "1.22.2";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "libretro-core-info";
    rev = "v${version}";
-    hash = "sha256-LfuBTSGESs0a8UpedQQo8rygk4jSETH2J7BZLua1hvc=";
+    hash = "sha256-m3w7czESeKopQtFTJLgAZJwtcXKJAhFhZtZQqQAQXbM=";
  };

  makeFlags = [
@@ -34,11 +34,14 @@ stdenv.mkDerivation rec {

  nativeBuildInputs = [
    protobuf
+    protobufc
    pkg-config
    meson
    ninja
  ];

+  strictDeps = true;
+
  meta = {
    description = "Library for exposing Qualcomm Sensor Core sensors to Linux";
    homepage = "https://codeberg.org/DylanVanAssche/libssc";
@@ -22,13 +22,13 @@ let
 in
 stdenvNoCC.mkDerivation rec {
  pname = "linux-firmware";
-  version = "20251111";
+  version = "20251125";

  src = fetchFromGitLab {
    owner = "kernel-firmware";
    repo = "linux-firmware";
    tag = version;
-    hash = "sha256-YGcG2MxZ1kjfcCAl6GmNnRb0YI+tqeFzJG0ejnicXqY=";
+    hash = "sha256-eNzCgVx6iPWbPccMM1TLBIsFKwiha9/gajmFtobj4SE=";
  };

  postUnpack = ''
@@ -23,13 +23,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "marktext";
-  version = "0.17.1-unstable-2024-06-10";
+  version = "0.17.0-unstable-2025-11-19";

  src = fetchFromGitHub {
    owner = "marktext";
    repo = "marktext";
-    rev = "11c8cc1e1929a7975df39fa5f4503130fef53547";
-    hash = "sha256-5PIOTg4/RBave/b3CArQSLvmA64ME9++3O1JT4lgKm0=";
+    rev = "aa71e33e07845419533d767ad0d260a7c267cec7";
+    hash = "sha256-c/MxYGFFCfC5KcvtBYuxSqeZ4WuAq5zPuBfYqXczicU=";
    postFetch = ''
      cd $out
      patch -p1 < ${./0001-update-electron.patch}
@@ -6,13 +6,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "memtest86+";
-  version = "7.20";
+  version = "8.00";

  src = fetchFromGitHub {
    owner = "memtest86plus";
    repo = "memtest86plus";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-JZ6feyk66DLKEnugc+yXN4KckQrCTMNqQL4TvCTw1EU=";
+    hash = "sha256-7oOe35TI+H8Nox2VJMrdoMGyTxzrJzebBH+DLanXtpo=";
  };

  # Binaries are booted directly by BIOS/UEFI or bootloader
@@ -20,14 +20,14 @@ stdenv.mkDerivation (finalAttrs: {
  dontPatchELF = true;
  dontStrip = true;

-  passthru.efi = "${finalAttrs.finalPackage}/memtest.efi";
+  passthru.efi = "${finalAttrs.finalPackage}/mt86plus.efi";

  preBuild = ''
-    cd ${if stdenv.hostPlatform.isi686 then "build32" else "build64"}
+    cd build/${if stdenv.hostPlatform.isi686 then "i586" else "x86_64"}
  '';

  installPhase = ''
-    install -Dm0444 -t $out/ memtest.bin memtest.efi
+    install -Dm0444 mt86plus $out/mt86plus.efi
  '';

  meta = {
@@ -2,6 +2,7 @@
  lib,
  buildNpmPackage,
  fetchFromGitHub,
+  nix-update-script,
 }:

 buildNpmPackage (finalAttrs: {
@@ -22,6 +23,8 @@ buildNpmPackage (finalAttrs: {
    rm $out/bin/_mocha
  '';

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    changelog = "https://github.com/mochajs/mocha/blob/v${finalAttrs.version}/CHANGELOG.md";
    description = "Simple, flexible, fun Javascript test framework for Node.js & the browser";
@@ -12,13 +12,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "n64recomp";
-  version = "0-unstable-2025-10-07";
+  version = "0-unstable-2025-11-24";

  src = fetchFromGitHub {
    owner = "N64Recomp";
    repo = "N64Recomp";
-    rev = "c39a9b6c7e7596bf8917778d9c15ba78e491b34d";
-    hash = "sha256-SpPUXD0zZVcWPgmZnH+5gLDc5qYgGcIhYYtfXKiVAHY=";
+    rev = "f14ffe6064881e29e4e7da016be525f6c04f4369";
+    hash = "sha256-6WAG7kVeI7NqqSu9Ll2Mxw5F9IpjFz+xSRRi/32gQRk=";
    fetchSubmodules = true;
  };

@@ -7,16 +7,16 @@

 buildNpmPackage rec {
  pname = "nest-cli";
-  version = "11.0.11";
+  version = "11.0.12";

  src = fetchFromGitHub {
    owner = "nestjs";
    repo = "nest-cli";
    tag = version;
-    hash = "sha256-A/R0y1NAKR85TrOt8DJaqZ8gMyGfrTc6T7dvzN0T8do=";
+    hash = "sha256-bi9kHxAio5ya2slmrm4U/uj9+UZondI/7aEde6rHGgM=";
  };

-  npmDepsHash = "sha256-+QGeOUIF36CLGUGi7QUEM/UE/kvpW4ZucjSFAXZbo4M=";
+  npmDepsHash = "sha256-rsgLe2wZPPHKR8ORI5ICTc5/A03x+ICetvKnltTje4k=";
  npmFlags = [ "--legacy-peer-deps" ];

  env = {
@@ -9,16 +9,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "oboete";
-  version = "0.1.12";
+  version = "0.1.13";

  src = fetchFromGitHub {
    owner = "mariinkys";
    repo = "oboete";
    tag = finalAttrs.version;
-    hash = "sha256-npvv2ZuMoZJnuwzRzbH+kQ5/IjlS6QuLi2rDmKwSoWQ=";
+    hash = "sha256-C6ymeI1t0UaX9EzUEz/5mQNEU8vfHueU7kuu9waXV5k=";
  };

-  cargoHash = "sha256-hOvITZJfFyJbCV9+SuyVVwsY1/OGRXlJeKB/opVGrnI=";
+  cargoHash = "sha256-QMcB3+KCefffbmyvkDoO6UvwwQgiDPwvae/jg4/XSO0=";

  nativeBuildInputs = [ libcosmicAppHook ];

@@ -86,18 +86,20 @@ buildGoModule (

  {
    pname = "olivetin";
-    version = "2025.11.11";
+    version = "2025.11.25";

    src = fetchFromGitHub {
      owner = "OliveTin";
      repo = "OliveTin";
      tag = finalAttrs.version;
-      hash = "sha256-dyApBkhtlPu3TjgjrTu0sY9VqMzMJc+kbGaylwtUCv4=";
+      hash = "sha256-HQLInEVXowWpDaSW/4bduUMdYsvQ0Rju1Rl2l9jupYA=";
    };

+    patches = [ ./update-go-sum.patch ];
+
    modRoot = "service";

-    vendorHash = "sha256-1vZCQBc/J3E/QRS8Bkfc1exDZJIn9739/gyPrpQpiHI=";
+    vendorHash = "sha256-xSroaS6fwHrQ0s09uD3bkBZWWxbIndiOGL2JPvKzC6E=";

    ldflags = [
      "-s"
@@ -0,0 +1,24 @@
+From 782cb39078967f1ad33dac1518c5a5b0e9f200c9 Mon Sep 17 00:00:00 2001
+From: Defelo <mail@defelo.de>
+Date: Tue, 25 Nov 2025 17:42:18 +0100
+Subject: [PATCH 1/1] update go.sum
+
+---
+ service/go.sum | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/service/go.sum b/service/go.sum
+index ef8dc72..89b4c1f 100644
+--- a/service/go.sum
+++ b/service/go.sum
+@@ -349,6 +349,7 @@ github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO
+ github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
+ github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
+ github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
+ github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
+ github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8=
+ github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU=
+-- 
+2.51.2
+
@@ -4,6 +4,7 @@
  writeText,
  fetchFromGitHub,
  cmake,
+  nix-update-script,
 }:
 let
  # Requires an /etc/os-release file, so we override it with this.
@@ -27,6 +28,8 @@ stdenv.mkDerivation (finalAttrs: {

  nativeBuildInputs = [ cmake ];

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    changelog = "https://github.com/AcademySoftwareFoundation/openapv/releases/tag/v${finalAttrs.version}";
    description = "Reference implementation of the APV codec";
@@ -6,6 +6,7 @@
  libxkbcommon,
  libGL,
  autoPatchelfHook,
+  nix-update-script,
 }:

 rustPlatform.buildRustPackage (finalAttrs: {
@@ -35,6 +36,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
    "libgcc_s.so.1"
  ];

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    changelog = "https://github.com/SrWither/OpenSpeedRun/releases/tag/v${finalAttrs.version}";
    description = "Modern and minimalistic open-source speedrun timer";
@@ -15,14 +15,14 @@ let
 in
 ocamlPackages.buildDunePackage {
  pname = "owi";
-  version = "0.2-unstable-2025-10-09";
+  version = "0.2-unstable-2025-11-25";

  src = fetchFromGitHub {
    owner = "ocamlpro";
    repo = "owi";
-    rev = "8500bc99a5a88515a019b1dc0d736152ab7d1767";
+    rev = "23fb234334310ae8b4ba3c4a2def6a9fed7508fd";
    fetchSubmodules = true;
-    hash = "sha256-vskIVgtgUpjuJFzweDg6w2/ml31/6HQWMEjE08KibmM=";
+    hash = "sha256-I74mjs4GozMlUr+ezt22J6+cs8GDcNZkPC42W0kvGnI=";
  };

  nativeBuildInputs = with ocamlPackages; [
@@ -49,12 +49,14 @@ ocamlPackages.buildDunePackage {
    integers
    menhirLib
    ocaml_intrinsics
+    ocamlgraph
    patricia-tree
    prelude
    processor
    scfg
    sedlex
    smtml
+    synchronizer
    uutf
    xmlm
    yojson
@@ -15,7 +15,7 @@ assert withThread -> libpthreadstubs != null;

 stdenv.mkDerivation rec {
  pname = "pari";
-  version = "2.17.2";
+  version = "2.17.3";

  src = fetchurl {
    urls = [
@@ -23,7 +23,7 @@ stdenv.mkDerivation rec {
      # old versions are at the url below
      "https://pari.math.u-bordeaux.fr/pub/pari/OLD/${lib.versions.majorMinor version}/${pname}-${version}.tar.gz"
    ];
-    hash = "sha256-fTBXj1z5exN6KB9FSNExqvwM3oa8/RDMHhvXKoHmUGE=";
+    hash = "sha256-jZxPzVhMRo0n4PI8NoNlhyhEUglMSxxATCDEuBBGLcs=";
  };

  buildInputs = [
@@ -19,6 +19,11 @@ stdenv.mkDerivation {
    hash = "sha256-L9SLyr7XuBUniMH3JtaBrUHIGzVTF5pr014xovQf2cI=";
  };

+  postPatch = ''
+    substituteInPlace CMakeLists.txt \
+      --replace-fail "cmake_minimum_required(VERSION 2.8)" "cmake_minimum_required(VERSION 3.10)"
+  '';
+
  nativeBuildInputs = [ cmake ];
  enableParallelBuilding = true;
  buildInputs = [
@@ -8,23 +8,34 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "pyrefly";
-  version = "0.34.0";
+  version = "0.43.1";

  src = fetchFromGitHub {
    owner = "facebook";
    repo = "pyrefly";
    tag = finalAttrs.version;
-    hash = "sha256-HPPDsvWEFfh/GNMUPiVjQr28YBBs2DACBGM3cxo5Nx4=";
+    hash = "sha256-KVeuDK5f0VIMnhAMJvGMJ08tHOuuIBDPrTqO1YjsHXI=";
  };

  buildAndTestSubdir = "pyrefly";
-  cargoHash = "sha256-46kcoBG/PWwf8VdlvLNzEhfYRTmmKi/uTjwFkl7Wozg=";
+  cargoHash = "sha256-Cc3bLBP9SxMbXQmJJVIfItOzy0iUkxLMgk4fbzNP1yw=";

  buildInputs = [ rust-jemalloc-sys ];

  nativeInstallCheckInputs = [ versionCheckHook ];
  doInstallCheck = true;

+  # redirect tests writing to /tmp
+  preCheck = ''
+    export TMPDIR=$(mktemp -d)
+  '';
+
+  checkFlags = [
+    # FIX: tracking on https://github.com/facebook/pyrefly/issues/1667
+    "--skip=test::lsp::lsp_interaction::configuration::test_pythonpath_change"
+    "--skip=test::lsp::lsp_interaction::configuration::test_workspace_pythonpath_ignored_when_set_in_config_file"
+  ];
+
  # requires unstable rust features
  env.RUSTC_BOOTSTRAP = 1;

@@ -7,13 +7,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "quill-log";
-  version = "11.0.0";
+  version = "11.0.1";

  src = fetchFromGitHub {
    owner = "odygrd";
    repo = "quill";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-dA9btWXlpheyfJz74OK9aZjXW5UipGaoC8y0+/F3PFc=";
+    hash = "sha256-h5vjHyhAVPcVZJFKbXFm2eUbesI088XkA7HZCCx9jzc=";
  };

  nativeBuildInputs = [ cmake ];
@@ -11,16 +11,16 @@

 rustPlatform.buildRustPackage rec {
  pname = "release-plz";
-  version = "0.3.148";
+  version = "0.3.149";

  src = fetchFromGitHub {
    owner = "MarcoIeni";
    repo = "release-plz";
    rev = "release-plz-v${version}";
-    hash = "sha256-XvmgpsCxbXc+NvzKZBXmhcIM+SKCTPkQldObUuXHVus=";
+    hash = "sha256-1n0cX8xU62LHGWs0yk8gUg1r3PBIbXih+9BK3UYseqU=";
  };

-  cargoHash = "sha256-NYViI5tpOgWdaKmOrNlXIGL/d6ZhoOSeQShdPdB3eXE=";
+  cargoHash = "sha256-BB5oJL5QKceQySr1hzOeCm6TzALfw3Ryw8MHOB0VeaI=";

  nativeBuildInputs = [
    installShellFiles
@@ -17,11 +17,11 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "rovium";
-  version = "0.6.0";
+  version = "0.7.0";

  src = fetchurl {
    url = "https://github.com/rovium/rovium-beta/releases/download/v${finalAttrs.version}/rovium-${finalAttrs.version}-amd64.deb";
-    hash = "sha256-0XYiS4B6qBLRudYRTdu5T5q1gMEVY3k/rAElMW5a4qQ=";
+    hash = "sha256-6jE8z+TSMOFMbgMeVlOuzFyTOywxpMo1AIO2EiWEBFE=";
  };

  strictDeps = true;
@@ -4,6 +4,7 @@
  rustPlatform,
  openssl,
  pkg-config,
+  nix-update-script,
 }:

 rustPlatform.buildRustPackage (finalAttrs: {
@@ -27,6 +28,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
    openssl
  ];

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    changelog = "https://github.com/SpikeHD/rsRPC/releases/tag/v${finalAttrs.version}";
    description = "Rust implementation of the Discord RPC server";
@@ -6,16 +6,16 @@

 rustPlatform.buildRustPackage rec {
  pname = "scooter";
-  version = "0.8.3";
+  version = "0.8.4";

  src = fetchFromGitHub {
    owner = "thomasschafer";
    repo = "scooter";
    rev = "v${version}";
-    hash = "sha256-DgxyurJmhpTHdmLyRaZkfiPYdMYdqeQOC+ZncfW5GdQ=";
+    hash = "sha256-hOuhgPE24DBF/uFz/S51h+d7j5yDjPs8Mvfkcp2BQsc=";
  };

-  cargoHash = "sha256-vq2d6UX4TbPO6Uya3m8uKff7+w1+VfV4Bec4Uyx/8pQ=";
+  cargoHash = "sha256-S2oLItnyRURPyYDroa7PlHbKIhnE4HdXeo1y6cAKvss=";

  # Ensure that only the `scooter` package is built (excluding `xtask`)
  cargoBuildFlags = [
@@ -9,14 +9,14 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "secretspec";
-  version = "0.3.3";
+  version = "0.4.0";

  src = fetchCrate {
    inherit (finalAttrs) pname version;
-    hash = "sha256-vbGUnYLL8U9CZmMLGfBxk3+0cjZR62Ug1rsis4O4iNk=";
+    hash = "sha256-L4axWXq79PC2l1j4IJbjrxYc9rzOHVHBV6503RKCBRU=";
  };

-  cargoHash = "sha256-q5d+8QsyS5eMVeuwn3AYY3Mxs5nWiYtLeAJzY7SAuuQ=";
+  cargoHash = "sha256-nAuMb9j+P6lR27RcKt1bOHP+4iRtLTV1ZlhHUxJk2Dw=";

  nativeBuildInputs = [ pkg-config ];
  buildInputs = [ dbus ];
@@ -39,7 +39,7 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "https://github.com/sipwise/sipsak";
    description = "SIP Swiss army knife";
    license = lib.licenses.gpl2Plus;
-    maintainers = with lib.maintainers; [ sheenobu ];
+    maintainers = [ ];
    platforms = with lib.platforms; unix;
    mainProgram = "sipsak";
  };
@@ -232,7 +232,6 @@ stdenv.mkDerivation (finalAttrs: {
  meta = meta // {
    maintainers = with lib.maintainers; [
      ftrvxmtrx
-      sheenobu
      timokau
      ma27
    ];
@@ -14,13 +14,13 @@

 buildNpmPackage rec {
  pname = "super-productivity";
-  version = "16.3.0";
+  version = "16.3.6";

  src = fetchFromGitHub {
    owner = "johannesjo";
    repo = "super-productivity";
    tag = "v${version}";
-    hash = "sha256-Im5f3FjXa8i9nbWrhbYXGNAflitjfRGs8lGEQi42+CU=";
+    hash = "sha256-DyDNLSbYs8XP5vqp0QRNmsXc3i2iQgvbWhWrwkJXnVA=";

    postFetch = ''
      find $out -name package-lock.json -exec ${lib.getExe npm-lockfile-fix} -r {} \;
@@ -63,7 +63,7 @@ buildNpmPackage rec {
      dontInstall = true;

      outputHashMode = "recursive";
-      hash = "sha256-uaJ/k4xdxDdakfRfAdM//sFaGYZx4pWiMwZGmrw7X3Y=";
+      hash = "sha256-xYjw94mZDnHodu/PMh7mugOHZCch28r+VWxsifxf/vs=";
    }
  );

@@ -13,19 +13,30 @@ mc64ad_dist.c was removed (DFSG nonfree), create stubs
 +
 +/* only mc64id_dist and mc64ad_dist are referenced by SuperLU-Dist code */
 +
-+/* Subroutine */ int_t mc64id_dist(int_t *icntl)
+/* Subroutine */ int mc64id_dist(int *icntl)
 +{
 +    fprintf(stderr, "SuperLU-Dist: MC64 functionality not available.\n(It uses code under a non-free HSL licence which does not permit redistribution).\nAborting mc64id_dist.\n");
 +    abort();
 +    return 0;
 +}
 +
-+int_t mc64ad_dist(int_t *job, int_t *n, int_t *ne, int_t *
-+	ip, int_t *irn, double *a, int_t *num, int_t *cperm,
-+	int_t *liw, int_t *iw, int_t *ldw, double *dw, int_t *
-+	icntl, int_t *info)
+int mc64ad_dist(int *job, int *n, int_t *ne, int_t *
+	ip, int_t *irn, double *a, int *num, int_t *cperm,
+	int_t *liw, int_t *iw, int_t *ldw, double *dw, int *
+	icntl, int *info)
 +{
 +    fprintf(stderr, "SuperLU-Dist: MC64 functionality not available.\n(It uses code under a non-free HSL licence which does not permit redistribution).\nAborting mc64ad_dist.\n");
 +    abort();
 +    return 0;
 +}
+--- a/SRC/prec-independent/util.c
+++ b/SRC/prec-independent/util.c
+@@ -217,7 +217,7 @@ void set_default_options_dist(superlu_dist_options_t *options)
+ #else
+     options->ColPerm = MMD_AT_PLUS_A;
+ #endif
+-    options->RowPerm = LargeDiag_MC64;
+    options->RowPerm = NOROWPERM;
+     options->ReplaceTinyPivot = NO;
+     options->IterRefine = SLU_DOUBLE;
+     options->Trans = NOTRANS;
@@ -13,18 +13,17 @@
  mpiCheckPhaseHook,
  metis,
  parmetis,
-  withExamples ? false,
-  fortranSupport ? true,
-  enableOpenMP ? true,
  # Todo: ask for permission of unfree parmetis
  withParmetis ? false,
-}:
+  isILP64 ? false,

-assert (!blas.isILP64) && (!lapack.isILP64);
+  # passthru.tests
+  superlu_dist,
+}:

 stdenv.mkDerivation (finalAttrs: {
  pname = "superlu_dist";
-  version = "9.1.0";
+  version = "9.2.0";

  __structuredAttrs = true;

@@ -34,59 +33,46 @@ stdenv.mkDerivation (finalAttrs: {
    tag = "v${finalAttrs.version}";
    # Remove non‐free files.
    postFetch = "rm $out/SRC/prec-independent/mc64ad_dist.c";
-    hash = "sha256-NMAEtTmTY189p8BlmsTugwMuxKZh+Bs1GyuwUHkLA1U=";
+    hash = "sha256-i/Gg+9oMNNRlviwXUSRkWNaLRZLPWZRtA1fGYqh2X0k=";
  };

  patches = [
    ./mc64ad_dist-stub.patch
-    (fetchurl {
-      url = "https://github.com/xiaoyeli/superlu_dist/commit/8ef3f7fda091529d7e7f16087864fee66c4834c9.patch";
-      hash = "sha256-kCSqojYKpk75m+FwhS0hXHSybm+GZzOYikePcf2U3Fw=";
-    })
  ];

-  postPatch = ''
-    substituteInPlace SRC/prec-independent/util.c \
-      --replace-fail "LargeDiag_MC64" "NOROWPERM"
-  '';
-
  nativeBuildInputs = [
    cmake
    pkg-config
-  ]
-  ++ lib.optionals fortranSupport [
    gfortran
  ];

-  buildInputs =
-    lib.optionals (enableOpenMP && stdenv.cc.isClang) [
-      # cmake can not find mpi if openmp is placed after mpi
-      llvmPackages.openmp
-    ]
-    ++ [
-      mpi
-      lapack
-    ]
-    ++ lib.optionals withParmetis [
-      metis
-      parmetis
-    ]
-    ++ lib.optionals stdenv.cc.isClang [
-      gfortran.cc.lib
-    ];
-
-  propagatedBuildInputs = [ blas ];
+  buildInputs = [
+    mpi
+    # always build with lp64 BLAS/LAPACK.
+    # see https://github.com/xiaoyeli/superlu_dist/issues/132#issuecomment-2323093701
+    (blas.override { isILP64 = false; })
+    (lapack.override { isILP64 = false; })
+  ]
+  ++ lib.optionals withParmetis [
+    metis
+    parmetis
+  ]
+  ++ lib.optionals stdenv.cc.isClang [
+    gfortran.cc.lib
+    llvmPackages.openmp
+  ];

  cmakeFlags = [
-    (lib.cmakeBool "enable_examples" withExamples)
-    (lib.cmakeBool "enable_openmp" enableOpenMP)
+    (lib.cmakeBool "enable_examples" false)
+    (lib.cmakeBool "enable_openmp" true)
    (lib.cmakeBool "BUILD_SHARED_LIBS" (!stdenv.hostPlatform.isStatic))
    (lib.cmakeBool "BUILD_STATIC_LIBS" stdenv.hostPlatform.isStatic)
-    (lib.cmakeBool "XSDK_ENABLE_Fortran" fortranSupport)
+    (lib.cmakeBool "XSDK_ENABLE_Fortran" true)
    (lib.cmakeBool "BLA_PREFER_PKGCONFIG" true)
    (lib.cmakeBool "TPL_ENABLE_INTERNAL_BLASLIB" false)
    (lib.cmakeBool "TPL_ENABLE_LAPACKLIB" true)
    (lib.cmakeBool "TPL_ENABLE_PARMETISLIB" withParmetis)
+    (lib.cmakeFeature "XSDK_INDEX_SIZE" (if isILP64 then "64" else "32"))
  ]
  ++ lib.optionals withParmetis [
    (lib.cmakeFeature "TPL_PARMETIS_LIBRARIES" "-lmetis -lparmetis")
@@ -95,8 +81,17 @@ stdenv.mkDerivation (finalAttrs: {

  doCheck = true;

+  __darwinAllowLocalNetworking = true;
+
  nativeCheckInputs = [ mpiCheckPhaseHook ];

+  passthru = {
+    inherit isILP64;
+    tests = {
+      ilp64 = superlu_dist.override { isILP64 = true; };
+    };
+  };
+
  meta = {
    homepage = "https://portal.nersc.gov/project/sparse/superlu/";
    license = with lib.licenses; [
@@ -5,6 +5,7 @@
  gawk,
  fetchFromGitHub,
  makeWrapper,
+  nix-update-script,
 }:

 stdenv.mkDerivation rec {
@@ -40,6 +41,8 @@ stdenv.mkDerivation rec {
      }
  '';

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "TUI Application launcher with Desktop Entry support";
    mainProgram = "sway-launcher-desktop";
@@ -7,16 +7,16 @@

 buildGoModule rec {
  pname = "tanka";
-  version = "0.36.1";
+  version = "0.36.2";

  src = fetchFromGitHub {
    owner = "grafana";
    repo = "tanka";
    rev = "v${version}";
-    sha256 = "sha256-966A8ZQAMeO+M97bEmhKzi0FSJCC0EhOrn+4zVvTmbY=";
+    sha256 = "sha256-dl/+XArOJ7asR4uHcS9ZnEOCahDFsuE9rG6CZ3dfyK4=";
  };

-  vendorHash = "sha256-IXGs6OozvtLcB+UgnLYdmE/ieWiYLN38Sdj8njcAdbA=";
+  vendorHash = "sha256-x1GYemyiOSJTG+I5r+L+g6j2uZnRLi4BqY0lnN8siro=";

  doCheck = false;
  # Required for versions >= 0.28 as they introduce a gowork.sum file. This is only used for tests so we can safely disable GOWORK
@@ -15,17 +15,18 @@
  makeDesktopItem,
  makeWrapper,
  wrapGAppsHook3,
+  writeScript,
  udev,
 }:

 stdenv.mkDerivation rec {
  pname = "tk-safe";
-  version = "25.8.2";
+  version = "25.10.1";
+  revision = "22";

-  # To update, check https://search.apps.ubuntu.com/api/v1/package/tk-safe and copy the anon_download_url and version.
  src = fetchurl {
-    url = "https://api.snapcraft.io/api/v1/snaps/download/rLNeIGEaag0TKFQLO0TxF3ARXg3rcTNx_19.snap";
-    hash = "sha256-bjlkLCTHkGH2LdeGd3LIp7L8f7SzZetpEpvGpPEzjcA=";
+    url = "https://api.snapcraft.io/api/v1/snaps/download/rLNeIGEaag0TKFQLO0TxF3ARXg3rcTNx_${revision}.snap";
+    hash = "sha512-pRPtOF/+L8FVCvnB+CKCJvzxbCAVxN5EAn7SzNDFIrm+Ar9Xl03Lup+a8SmIdAN2t9Mfd1YxqZHpixH3EMPTdA==";
  };

  desktopItems = [
@@ -90,6 +91,28 @@ stdenv.mkDerivation rec {
      --prefix LD_LIBRARY_PATH : "${lib.makeLibraryPath [ libGL ]}"
  '';

+  passthru.updateScript = writeScript "update-tk-safe" ''
+    #!/usr/bin/env nix-shell
+    #!nix-shell -i bash -p common-updater-scripts curl jq
+
+    set -eu -o pipefail
+
+    data=$(curl -H 'X-Ubuntu-Series: 16' \
+    'https://api.snapcraft.io/api/v1/snaps/details/tk-safe?fields=download_sha512,revision,version')
+
+    version=$(jq -r .version <<<"$data")
+
+    if [[ "x$UPDATE_NIX_OLD_VERSION" != "x$version" ]]; then
+
+        revision=$(jq -r .revision <<<"$data")
+        hash=$(nix --extra-experimental-features nix-command hash to-sri "sha512:$(jq -r .download_sha512 <<<"$data")")
+
+        update-source-version "$UPDATE_NIX_ATTR_PATH" "$version" "$hash"
+        update-source-version --ignore-same-hash --version-key=revision "$UPDATE_NIX_ATTR_PATH" "$revision" "$hash"
+
+    fi
+  '';
+
  meta = {
    description = "Electronic medical record (ePA) by Techniker Krankenkasse (TK)";
    homepage = "https://snapcraft.io/tk-safe";
@@ -13,23 +13,15 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "viskores";
-  version = "1.0.0";
+  version = "1.1.0";

  src = fetchFromGitHub {
    owner = "viskores";
    repo = "viskores";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-jKuDM/NPfbMIfNpDNsDpmXdKuVobsr3s9+iht1zBLvI=";
+    hash = "sha256-s399ZkUlKB1xvow+VcA3FQxd+GVlCJyx6KWLtl2Z3RY=";
  };

-  patches = [
-    # https://github.com/Viskores/viskores/pull/137
-    (fetchpatch2 {
-      url = "https://github.com/Viskores/viskores/commit/36bf609511adb5530e6952bc14daefeafdf4ab11.patch?full_index=1";
-      hash = "sha256-SKmgVZhkCk1/X17dLXZ8ceF9Pq1Kkc2sXuFdrvotsdo=";
-    })
-  ];
-
  nativeBuildInputs = [
    cmake
    ninja
@@ -8,6 +8,7 @@
  nodejs,
  makeBinaryWrapper,
  gcc,
+  nix-update-script,
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "wasm-text-gen";
@@ -58,6 +59,8 @@ stdenv.mkDerivation (finalAttrs: {
    runHook postInstall
  '';

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "Toolbox for WebAssembly";
    homepage = "https://webassembly.js.org";
@@ -8,6 +8,7 @@
  nodejs,
  makeBinaryWrapper,
  gcc,
+  nix-update-script,
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "wast-refmt";
@@ -59,6 +60,8 @@ stdenv.mkDerivation (finalAttrs: {
    runHook postInstall
  '';

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "WAST Reformatter";
    homepage = "https://webassembly.js.org";
@@ -8,6 +8,7 @@
  nodejs,
  makeBinaryWrapper,
  gcc,
+  nix-update-script,
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "webassemblyjs-cli";
@@ -65,6 +66,8 @@ stdenv.mkDerivation (finalAttrs: {
    runHook postInstall
  '';

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "Toolbox for WebAssembly";
    homepage = "https://webassembly.js.org";
@@ -8,6 +8,7 @@
  nodejs,
  makeBinaryWrapper,
  gcc,
+  nix-update-script,
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "webassemblyjs-repl";
@@ -59,6 +60,8 @@ stdenv.mkDerivation (finalAttrs: {
    runHook postInstall
  '';

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    description = "WebAssembly REPL";
    homepage = "https://webassembly.js.org";
@@ -1,208 +0,0 @@
-{
-  buildPackages,
-  cryptodev,
-  enableSSL2 ? false,
-  enableSSL3 ? false,
-  fetchFromGitHub,
-  lib,
-  makeWrapper,
-  perl,
-  removeReferencesTo,
-  static ? stdenv.hostPlatform.isStatic,
-  stdenv,
-  withCryptodev ? false,
-}:
-
-stdenv.mkDerivation rec {
-  pname = "quictls";
-  version = "3.3.0-quic1";
-
-  src = fetchFromGitHub {
-    owner = "quictls";
-    repo = "openssl";
-    rev = "openssl-${version}";
-    hash = "sha256-kBPwldTJbJSuvBVylJNcLSJvF/Hbqh0mfT4Ub5Xc6dk=";
-  };
-
-  patches = [
-    ../openssl/3.0/nix-ssl-cert-file.patch
-
-    # openssl will only compile in KTLS if the current kernel supports it.
-    # This patch disables build-time detection.
-    ../openssl/3.0/openssl-disable-kernel-detection.patch
-
-    (
-      if stdenv.hostPlatform.isDarwin then
-        ../openssl/3.5/use-etc-ssl-certs-darwin.patch
-      else
-        ../openssl/3.5/use-etc-ssl-certs.patch
-    )
-  ];
-
-  postPatch = ''
-    patchShebangs Configure
-  ''
-  # config is a configure script which is not installed.
-  + ''
-    substituteInPlace config --replace '/usr/bin/env' '${buildPackages.coreutils}/bin/env'
-  ''
-  + lib.optionalString stdenv.hostPlatform.isMusl ''
-    substituteInPlace crypto/async/arch/async_posix.h \
-      --replace '!defined(__ANDROID__) && !defined(__OpenBSD__)' \
-                '!defined(__ANDROID__) && !defined(__OpenBSD__) && 0'
-  '';
-
-  nativeBuildInputs = [
-    makeWrapper
-    perl
-    removeReferencesTo
-  ];
-
-  buildInputs = lib.optionals withCryptodev [
-    cryptodev
-  ];
-
-  outputs = [
-    "bin"
-    "dev"
-    "out"
-    "man"
-    "doc"
-  ];
-
-  setOutputFlags = false;
-
-  separateDebugInfo =
-    !stdenv.hostPlatform.isDarwin && !(stdenv.hostPlatform.useLLVM or false) && stdenv.cc.isGNU;
-
-  # TODO(@Ericson2314): Improve with mass rebuild
-  configurePlatforms = [ ];
-  configureScript =
-    {
-      armv5tel-linux = "./Configure linux-armv4 -march=armv5te";
-      armv6l-linux = "./Configure linux-armv4 -march=armv6";
-      armv7l-linux = "./Configure linux-armv4 -march=armv7-a";
-      x86_64-darwin = "./Configure darwin64-x86_64-cc";
-      aarch64-darwin = "./Configure darwin64-arm64-cc";
-      x86_64-linux = "./Configure linux-x86_64";
-      x86_64-solaris = "./Configure solaris64-x86_64-gcc";
-      riscv64-linux = "./Configure linux64-riscv64";
-      mips64el-linux =
-        if stdenv.hostPlatform.isMips64n64 then
-          "./Configure linux64-mips64"
-        else if stdenv.hostPlatform.isMips64n32 then
-          "./Configure linux-mips64"
-        else
-          throw "unsupported ABI for ${stdenv.hostPlatform.system}";
-    }
-    .${stdenv.hostPlatform.system} or (
-      if stdenv.hostPlatform == stdenv.buildPlatform then
-        "./config"
-      else if stdenv.hostPlatform.isBSD && stdenv.hostPlatform.isx86_64 then
-        "./Configure BSD-x86_64"
-      else if stdenv.hostPlatform.isBSD && stdenv.hostPlatform.isx86_32 then
-        "./Configure BSD-x86" + lib.optionalString stdenv.hostPlatform.isElf "-elf"
-      else if stdenv.hostPlatform.isBSD then
-        "./Configure BSD-generic${toString stdenv.hostPlatform.parsed.cpu.bits}"
-      else if stdenv.hostPlatform.isMinGW then
-        "./Configure mingw${
-          lib.optionalString (stdenv.hostPlatform.parsed.cpu.bits != 32) (
-            toString stdenv.hostPlatform.parsed.cpu.bits
-          )
-        }"
-      else if stdenv.hostPlatform.isLinux then
-        "./Configure linux-generic${toString stdenv.hostPlatform.parsed.cpu.bits}"
-      else if stdenv.hostPlatform.isiOS then
-        "./Configure ios${toString stdenv.hostPlatform.parsed.cpu.bits}-cross"
-      else
-        throw "Not sure what configuration to use for ${stdenv.hostPlatform.config}"
-    );
-
-  # OpenSSL doesn't like the `--enable-static` / `--disable-shared` flags.
-  dontAddStaticConfigureFlags = true;
-
-  configureFlags = [
-    "shared" # "shared" builds both shared and static libraries
-    "--libdir=lib"
-    "--openssldir=etc/ssl"
-  ]
-  ++ lib.optionals withCryptodev [
-    "-DHAVE_CRYPTODEV"
-    "-DUSE_CRYPTODEV_DIGESTS"
-  ]
-  ++ lib.optional enableSSL2 "enable-ssl2"
-  ++ lib.optional enableSSL3 "enable-ssl3"
-  # We select KTLS here instead of the configure-time detection (which we patch out).
-  # KTLS should work on FreeBSD 13+ as well, so we could enable it if someone tests it.
-  ++ lib.optional (stdenv.hostPlatform.isLinux && lib.versionAtLeast version "3.0.0") "enable-ktls"
-  ++ lib.optional stdenv.hostPlatform.isAarch64 "no-afalgeng"
-  # OpenSSL needs a specific `no-shared` configure flag.
-  # See https://wiki.openssl.org/index.php/Compilation_and_Installation#Configure_Options
-  # for a comprehensive list of configuration options.
-  ++ lib.optional static "no-shared"
-  # This introduces a reference to the CTLOG_FILE which is undesired when
-  # trying to build binaries statically.
-  ++ lib.optional static "no-ct";
-
-  makeFlags = [
-    "MANDIR=$(man)/share/man"
-    # This avoids conflicts between man pages of openssl subcommands (for
-    # example 'ts' and 'err') man pages and their equivalent top-level
-    # command in other packages (respectively man-pages and moreutils).
-    # This is done in ubuntu and archlinux, and possibly many other distros.
-    "MANSUFFIX=ssl"
-  ];
-
-  enableParallelBuilding = true;
-
-  postInstall =
-    (
-      if static then
-        ''
-          # OPENSSLDIR has a reference to self
-          ${removeReferencesTo}/bin/remove-references-to -t $out $out/lib/*.a
-        ''
-      else
-        ''
-          # If we're building dynamic libraries, then don't install static
-          # libraries.
-          if [ -n "$(echo $out/lib/*.so $out/lib/*.dylib $out/lib/*.dll)" ]; then
-              rm "$out/lib/"*.a
-          fi
-        ''
-    )
-    + ''
-      mkdir -p $bin
-      mv $out/bin $bin/bin
-
-      # c_rehash is a legacy perl script with the same functionality
-      # as `openssl rehash`
-      # this wrapper script is created to maintain backwards compatibility without
-      # depending on perl
-      makeWrapper $bin/bin/openssl $bin/bin/c_rehash \
-        --add-flags "rehash"
-
-      mkdir $dev
-      mv $out/include $dev/
-      # remove dependency on Perl at runtime
-      rm -r $out/etc/ssl/misc
-      rmdir $out/etc/ssl/{certs,private}
-    '';
-
-  postFixup = lib.optionalString (!stdenv.hostPlatform.isWindows) ''
-    # Check to make sure the main output doesn't depend on perl
-    if grep -r '${buildPackages.perl}' $out; then
-      echo "Found an erroneous dependency on perl ^^^" >&2
-      exit 1
-    fi
-  '';
-
-  meta = {
-    changelog = "https://github.com/quictls/openssl/blob/openssl-${version}/CHANGES.md";
-    description = "TLS/SSL and crypto library with QUIC APIs";
-    homepage = "https://quictls.github.io";
-    license = lib.licenses.openssl;
-    maintainers = with lib.maintainers; [ izorkin ];
-    platforms = lib.platforms.all;
-  };
-}
@@ -73,6 +73,7 @@ mapAliases {
  inherit (pkgs) asar; # added 2023-08-26
  inherit (pkgs) auto-changelog; # added 2024-06-25
  inherit (pkgs) aws-azure-login; # added 2023-09-30
+  awesome-lint = throw "'awesome-lint' has been removed because it was unmaintainable in nixpkgs"; # Added 2025-11-17
  balanceofsatoshis = pkgs.balanceofsatoshis; # added 2023-07-31
  inherit (pkgs) bash-language-server; # added 2024-06-07
  bibtex-tidy = pkgs.bibtex-tidy; # added 2023-07-30
@@ -86,6 +87,7 @@ mapAliases {
  inherit (pkgs) cdk8s-cli; # Added 2025-11-10
  inherit (pkgs) cdktf-cli; # added 2025-10-02
  inherit (pkgs) clean-css-cli; # added 2023-08-18
+  clipboard-cli = throw "'clipboard-cli' has been removed because it was unmaintainable in nixpkgs"; # Added 2025-11-17
  inherit (pkgs) coc-clangd; # added 2024-06-29
  inherit (pkgs) coc-cmake; # Added 2025-11-05
  inherit (pkgs) coc-css; # added 2024-06-29
@@ -142,6 +144,7 @@ mapAliases {
  inherit (pkgs) conventional-changelog-cli; # Added 2025-11-08
  copy-webpack-plugin = throw "copy-webpack-plugin was removed because it is a JS library, so your project should lock it with a JS package manager instead."; # Added 2024-12-16
  inherit (pkgs) cordova; # added 2023-08-18
+  cpy-cli = throw "'cpy-cli' has been removed because it was unmaintainable in nixpkgs"; # Added 2025-11-17
  create-cycle-app = throw "create-cycle-app has been removed because it is unmaintained and has issues installing with recent nodejs versions."; # Added 2025-11-01
  create-react-native-app = throw "create-react-native-app was removed because it was deprecated. Upstream suggests using a framework for React Native."; # added 2024-12-08
  inherit (pkgs) cspell;
@@ -157,14 +160,17 @@ mapAliases {
  inherit (pkgs.elmPackages) elm-test;
  inherit (pkgs.elmPackages) elm-review;
  elm-oracle = throw "'elm-oracle' has been removed, since it doesn't work with modern versions of Elm."; # Added 2025-11-07
+  emoj = throw "'emoj' has been removed because it was unmaintainable in nixpkgs"; # Added 2025-11-17
  emojione = throw "emojione was archived and abandoned upstream, so it has been removed"; # Added 2025-11-06
  escape-string-regexp = throw "escape-string-regexp was removed because it provides no executable"; # added 2025-03-12
  inherit (pkgs) eslint; # Added 2024-08-28
  inherit (pkgs) eslint_d; # Added 2023-05-26
  inherit (pkgs) eas-cli; # added 2025-01-08
  expo-cli = throw "expo-cli was removed because it was deprecated upstream. Use `npx expo` or eas-cli instead."; # added 2024-12-02
+  fast-cli = throw "'fast-cli' has been removed because it was unmaintainable in nixpkgs"; # Added 2025-11-17
  inherit (pkgs) firebase-tools; # added 2023-08-18
  inherit (pkgs) fixjson; # added 2024-06-26
+  fkill-cli = throw "'fkill-cli' has been removed because it was unmaintainable in nixpkgs"; # Added 2025-11-17
  fleek-cli = throw "'fleek-cli' was removed because the upstream source code repo has been deleted."; # Added 2025-11-07
  flood = pkgs.flood; # Added 2023-07-25
  forever = throw "'forever' has been removed because it was unmaintained upstream"; # Added 2025-11-14
@@ -251,6 +257,7 @@ mapAliases {
  inherit (pkgs) node-pre-gyp; # added 2024-08-05
  inherit (pkgs) node-red; # added 2024-10-06
  inherit (pkgs) nodemon; # added 2024-06-28
+  np = throw "'np' has been removed because it was unmaintainable in nixpkgs"; # Added 2025-11-17
  npm = pkgs.nodejs.overrideAttrs (old: {
    meta = old.meta // {
      mainProgram = "npm";
@@ -6,11 +6,7 @@
  # Packages that provide a single executable.
  "@angular/cli" = "ng";
  aws-cdk = "cdk";
-  clipboard-cli = "clipboard";
-  cpy-cli = "cpy";
-  fast-cli = "fast";
  fauna-shell = "fauna";
-  fkill-cli = "fkill";
  grunt-cli = "grunt";
  gulp-cli = "gulp";
  pulp = "pulp";
@@ -7,20 +7,14 @@
 , "@tailwindcss/typography"
 , "alex"
 , "aws-cdk"
-, "awesome-lint"
 , "browserify"
 , "browser-sync"
-, "clipboard-cli"
 , "coc-go"
 , "coc-tsserver"
-, "cpy-cli"
 , "dotenv-vault"
 , "elasticdump"
-, "emoj"
 , "esy"
-, "fast-cli"
 , "fauna-shell"
-, "fkill-cli"
 , "grunt-cli"
 , "gulp-cli"
 , "js-yaml"
@@ -29,7 +23,6 @@
 , "mathjax"
 , "node-gyp-build"
 , "node2nix"
-, "np"
 , "postcss"
 , "prebuild-install"
 , "pscid"
@@ -33,17 +33,6 @@ final: prev: {
    '';
  };

-  fast-cli = prev.fast-cli.override {
-    nativeBuildInputs = [ pkgs.buildPackages.makeWrapper ];
-    prePatch = ''
-      export PUPPETEER_SKIP_DOWNLOAD=1
-    '';
-    postInstall = ''
-      wrapProgram $out/bin/fast \
-        --set PUPPETEER_EXECUTABLE_PATH ${pkgs.chromium.outPath}/bin/chromium
-    '';
-  };
-
  fauna-shell = prev.fauna-shell.override {
    # printReleaseNotes just pulls them from GitHub which is not allowed in sandbox
    preRebuild = ''
@@ -9,6 +9,7 @@
  cmdliner,
  dolmen_model,
  dolmen_type,
+  dune-build-info,
  fpath,
  hc,
  menhirLib,
@@ -27,13 +28,13 @@

 buildDunePackage (finalAttrs: {
  pname = "smtml";
-  version = "0.13.0";
+  version = "0.15.0";

  src = fetchFromGitHub {
    owner = "formalsec";
    repo = "smtml";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-8AAS7C/X9YnkgZORRauKqPgXPyFXOhPvd7/VS693e8Q=";
+    hash = "sha256-z3DDdzU39tg2F3+pAFPILiKY3pQxOpehdoxwckyhZBI=";
  };

  nativeBuildInputs = [
@@ -45,6 +46,7 @@ buildDunePackage (finalAttrs: {
    cmdliner
    dolmen_model
    dolmen_type
+    dune-build-info
    fpath
    hc
    menhirLib
@@ -7,21 +7,18 @@
  protobuf,
  pytest-asyncio,
  pytestCheckHook,
-  pythonOlder,
  setuptools,
 }:

 buildPythonPackage rec {
  pname = "google-cloud-org-policy";
-  version = "1.14.0";
+  version = "1.15.0";
  pyproject = true;

-  disabled = pythonOlder "3.7";
-
  src = fetchPypi {
    pname = "google_cloud_org_policy";
    inherit version;
-    hash = "sha256-TId9QgosUStFTmLqzSVXy7x09zTAeZRuMOYfYnkbMZw=";
+    hash = "sha256-Jx0WoQ51NH6s5g0CzeMisrG2E7zJmRcQng6/KkECJTo=";
  };

  build-system = [ setuptools ];
@@ -22,14 +22,14 @@

 buildPythonPackage rec {
  pname = "groq";
-  version = "0.34.1";
+  version = "0.36.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "groq";
    repo = "groq-python";
    tag = "v${version}";
-    hash = "sha256-PXkql+YE0sXkJrgooGUnIsEnIRvqZ8RZGUx5nRJY6Qw=";
+    hash = "sha256-qN1DMJN5bp5Cnea161ePONsD6V0avAt/oavKHkm/Ec4=";
  };

  postPatch = ''
--- a/Show More
+++ b/Show More