Merge staging-next into staging

nixos/tests/systemd-coredump.nix

@@ -37,10 +37,10 @@ in
       machine1.wait_for_unit("systemd-coredump.socket")
       machine1.systemctl("start crasher");
       machine1.wait_until_succeeds("coredumpctl list | grep crasher", timeout=10)
-      machine1.fail("stat /var/lib/crasher/core")
+      machine1.fail("stat /var/lib/crasher/core*")
 
     with subtest("systemd-coredump disabled"):
       machine2.systemctl("start crasher");
-      machine2.wait_until_succeeds("stat /var/lib/crasher/core", timeout=10)
+      machine2.wait_until_succeeds("stat /var/lib/crasher/core*", timeout=10)
   '';
 }

pkgs/applications/editors/vim/plugins/non-generated/fff-nvim/default.nix

@@ -5,33 +5,40 @@
   nix-update-script,
   openssl,
   perl,
+  zig,
   pkg-config,
   stdenv,
   vimUtils,
 }:
 let
-  version = "896355b-unstable-2026-02-07";
+  version = "1001eb8-unstable-2026-03-13";
   src = fetchFromGitHub {
     owner = "dmtrKovalenko";
     repo = "fff.nvim";
-    rev = "d7bc72786d4362ca70aa05d397f8d08bbaf39604";
-    hash = "sha256-CqX2QoDO7InjXYMzvljufA0QYhvFbsht2auE0+nVktw=";
+    rev = "fcdf4a9172fba824ca6834731b93b74eba51d1c3";
+    hash = "sha256-AYxWrqru0/HCrfTXRqTExiOT6mNzNMk+pT6APRs0BUM=";
   };
   fff-nvim-lib = rustPlatform.buildRustPackage {
     pname = "fff-nvim-lib";
     inherit version src;
 
-    cargoHash = "sha256-jch2snZVoDqPkbeuF++yc/3ikoWal29bTKZjkyDgVjU=";
+    cargoHash = "sha256-nXtJPE6HNZx5Ra4CwYi/f4EWww//1XwsiwtRG77RPJk=";
 
     nativeBuildInputs = [
       pkg-config
       perl
+      rustPlatform.bindgenHook
     ];
 
     buildInputs = [
       openssl
     ];
 
+    # This test requires curl and GitHub access
+    checkFlags = [
+      "--skip=update_check::tests::test_update_check_end_to_end"
+    ];
+
     env = {
       RUSTC_BOOTSTRAP = 1; # We need rust unstable features
 
@@ -39,6 +46,8 @@ let
 
       # Allow undefined symbols on Darwin - they will be provided by Neovim's LuaJIT runtime
       RUSTFLAGS = lib.optionalString stdenv.hostPlatform.isDarwin "-C link-arg=-undefined -C link-arg=dynamic_lookup";
+
+      ZIG = lib.getExe zig; # zlob requires zig
     };
   };
 in

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -1310,11 +1310,11 @@
     "vendorHash": "sha256-omxEb+ntQuHDfS2Rmt0rj0BF0Q2T8DLhobLua2uU/0o="
   },
   "tencentcloudstack_tencentcloud": {
-    "hash": "sha256-kEdt8shf0bLyPzz6Lysj0yyx6leLHl4g9BjuXRdWPVo=",
+    "hash": "sha256-TXyc0I+IKjatZyH3oKHDXD8ml8/IyaIMQfAKpbkUl8g=",
     "homepage": "https://registry.terraform.io/providers/tencentcloudstack/tencentcloud",
     "owner": "tencentcloudstack",
     "repo": "terraform-provider-tencentcloud",
-    "rev": "v1.82.73",
+    "rev": "v1.82.74",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },

pkgs/build-support/node/fetch-pnpm-deps/default.nix

@@ -7,6 +7,7 @@
   cacert,
   makeSetupHook,
   pnpm,
+  writableTmpDirAsHomeHook,
   yq,
   zstd,
 }:
@@ -198,6 +199,7 @@ in
   pnpmConfigHook = makeSetupHook {
     name = "pnpm-config-hook";
     propagatedBuildInputs = [
+      writableTmpDirAsHomeHook
       zstd
     ];
     substitutions = {

pkgs/build-support/node/fetch-pnpm-deps/pnpm-config-hook.sh

@@ -25,7 +25,6 @@ pnpmConfigHook() {
 
     echo "Configuring pnpm store"
 
-    export HOME=$(mktemp -d)
     export STORE_PATH=$(mktemp -d)
     export npm_config_arch="@npmArch@"
     export npm_config_platform="@npmPlatform@"
@@ -41,7 +40,7 @@ pnpmConfigHook() {
 
     # If the packageManager field in package.json is set to a different pnpm version than what is in nixpkgs,
     # any pnpm command would fail in that directory, the following disables this
-    pushd ..
+    pushd $HOME
     pnpm config set manage-package-manager-versions false
     popd
 

pkgs/by-name/ap/apache-orc/package.nix

@@ -66,7 +66,7 @@ stdenv.mkDerivation (finalAttrs: {
   cmakeFlags = [
     (lib.cmakeFeature "CMAKE_BUILD_TYPE" "Release")
     (lib.cmakeBool "BUILD_JAVA" false)
-    (lib.cmakeBool "STOP_BUILD_ON_WARNING" true)
+    (lib.cmakeBool "STOP_BUILD_ON_WARNING" stdenv.isLinux)
     (lib.cmakeBool "INSTALL_VENDORED_LIBS" false)
   ]
   ++ lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) [

pkgs/by-name/au/audio-mirroring/package.nix

@@ -0,0 +1,62 @@
+{
+  lib,
+  cargo,
+  desktop-file-utils,
+  fetchFromGitHub,
+  glib,
+  gtk4,
+  libadwaita,
+  meson,
+  ninja,
+  pipewire,
+  pkg-config,
+  rustPlatform,
+  rustc,
+  stdenv,
+  wrapGAppsHook4,
+}:
+
+stdenv.mkDerivation rec {
+  pname = "audio-mirroring";
+  version = "0.1.1";
+
+  src = fetchFromGitHub {
+    owner = "mkg20001";
+    repo = "audio-mirroring";
+    tag = "v${version}";
+    hash = "sha256-f4V5ZJvXhdwqS4kx99Lr2Eb8r08PRd3T4mbRoAyyIqE=";
+  };
+
+  cargoDeps = rustPlatform.fetchCargoVendor {
+    inherit pname version src;
+    hash = "sha256-+mAdxaaQOO7AIn/o/J13FbHIvtepk8/okGxO6p6aGzI=";
+  };
+
+  nativeBuildInputs = [
+    meson
+    ninja
+    pkg-config
+    rustPlatform.cargoSetupHook
+    cargo
+    rustc
+    rustPlatform.bindgenHook
+    wrapGAppsHook4
+  ];
+
+  buildInputs = [
+    desktop-file-utils
+    glib
+    gtk4
+    libadwaita
+    pipewire
+  ];
+
+  meta = with lib; {
+    description = "Audio Mirroring for Linux";
+    homepage = "https://github.com/mkg20001/audio-mirroring";
+    license = licenses.gpl3Only;
+    maintainers = with maintainers; [ mkg20001 ];
+    platforms = platforms.linux;
+    mainProgram = "audio-mirroring";
+  };
+}

pkgs/by-name/cf/cfspeedtest/package.nix

@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cfspeedtest";
-  version = "2.2.0";
+  version = "2.2.1";
 
   src = fetchFromGitHub {
     owner = "code-inflation";
     repo = "cfspeedtest";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-EVZFmTjv2j7kax4MC5HTkVa7/IiDNZcIOgsntSGfzG4=";
+    hash = "sha256-6ZlcZZSC5WPrlskxWnLheMt5sJlHI7K4UPAPsvr8zSc=";
   };
 
-  cargoHash = "sha256-cA+eRVZiZL+bbPc+Vr7nkwMLbQBKOO3uU0XzrxVajqg=";
+  cargoHash = "sha256-h9X/WKKiXri4I2DBulkNnpiTaYAL9oXAx0BiTBKaEtE=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/co/cosmic-greeter/package.nix

@@ -15,6 +15,7 @@
   nix-update-script,
   nixosTests,
   orca,
+  fetchpatch2,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -29,7 +30,16 @@ rustPlatform.buildRustPackage (finalAttrs: {
     hash = "sha256-U0JrxvMWzISSA0tP8moasN7iN7TfZreEwbvWZGHRn8E=";
   };
 
-  cargoHash = "sha256-sNJTXBInr/h8w5dhOOP9ceBYWBcJW3qGjDuaG6UTV90=";
+  cargoHash = "sha256-J5ycaeKZsEBPcI9JH8bHsOAcXXwcx/D21GlVhJZbGwM=";
+
+  cargoPatches = [
+    (fetchpatch2 {
+      # https://github.com/pop-os/cosmic-greeter/pull/426
+      name = "security-hardening.patch";
+      url = "https://github.com/pop-os/cosmic-greeter/commit/6049b50f8984f98c2c61117d86b9f6f9befc9300.patch?full_index=1";
+      hash = "sha256-T9tc4Krmp5jieKhbaTgI1CByWqSWy97HWcKMIXzr7MU=";
+    })
+  ];
 
   env.VERGEN_GIT_SHA = finalAttrs.src.tag;
 

pkgs/by-name/de/deadbranch/package.nix

@@ -0,0 +1,55 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+
+  # nativeBuildInputs
+  installShellFiles,
+
+  # nativeCheckInputs
+  gitMinimal,
+  writableTmpDirAsHomeHook,
+
+  # nativeInstallCheckInputs
+  versionCheckHook,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "deadbranch";
+  version = "0.3.0";
+
+  src = fetchFromGitHub {
+    owner = "armgabrielyan";
+    repo = "deadbranch";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-8KNo/6hdeBY8RbLlXt2gpLCk2DfvSuoeXJ0oh2NDX2s=";
+  };
+
+  cargoHash = "sha256-iY39RBA0fl/BpX6mlCH2bHuN+XsLdq4f7CTzjHz9Ots=";
+
+  nativeBuildInputs = [ installShellFiles ];
+
+  nativeCheckInputs = [
+    gitMinimal
+    writableTmpDirAsHomeHook
+  ];
+
+  postInstall = ''
+    installManPage $releaseDir/build/deadbranch-*/out/deadbranch.1
+    installShellCompletion --cmd deadbranch \
+      --bash <($out/bin/deadbranch completions bash) \
+      --fish <($out/bin/deadbranch completions fish) \
+      --zsh <($out/bin/deadbranch completions zsh)
+  '';
+
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  meta = {
+    description = "Clean up stale git branches safely";
+    homepage = "https://github.com/armgabrielyan/deadbranch";
+    license = lib.licenses.mit;
+    mainProgram = "deadbranch";
+    maintainers = with lib.maintainers; [ mahyarmirrashed ];
+  };
+})

pkgs/by-name/fl/flightgear/package.nix

@@ -30,6 +30,7 @@
   qt5,
   glew,
   curl,
+  nix-update-script,
 }:
 
 let
@@ -109,6 +110,8 @@ stdenv.mkDerivation rec {
     rm -rf "$out/appdir"
   '';
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Flight simulator";
     maintainers = with lib.maintainers; [

pkgs/by-name/ga/gash/package.nix

@@ -8,11 +8,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gash";
-  version = "0.3.1";
+  version = "0.3.2";
 
   src = fetchurl {
     url = "mirror://gnu/guix/mirror/gash-${finalAttrs.version}.tar.gz";
-    hash = "sha256-RwPWo+Kg3ztZCC1Ku7vJXlr2Fp/OZGCTjC7O6eaPPBk=";
+    hash = "sha256-yAwY530BGkSPIcQFmkdCfjTuG0zvcs9OvzkLXXGZ5OQ=";
   };
 
   strictDeps = true;

pkgs/by-name/gn/gnutls/package.nix

@@ -117,6 +117,13 @@ stdenv.mkDerivation rec {
   # https://gitlab.com/gnutls/gnutls/-/issues/1721
   + ''
     sed '2iexit 77' -i tests/system-override-compress-cert.sh
+  ''
+  # Upstream packaging bug: stamp_error_codes is missing from EXTRA_DIST in
+  # the release tarball, causing the build to try regenerating it by compiling
+  # and running `errcodes` — which fails when cross-compiling since the binary
+  # is for the target architecture. https://gitlab.com/gnutls/gnutls/-/issues/1797
+  + lib.optionalString (stdenv.buildPlatform != stdenv.hostPlatform) ''
+    touch doc/stamp_error_codes
   '';
 
   preConfigure = "patchShebangs .";

pkgs/by-name/ki/kine/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "kine";
-  version = "0.14.13";
+  version = "0.14.14";
 
   src = fetchFromGitHub {
     owner = "k3s-io";
     repo = "kine";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-hIEkyDK3oSm7Lo/h5RRAb0plvuz+kpnb7RNT9pu1mhY=";
+    hash = "sha256-G1GVR0bgcx51HqwsCUqd9H30mWZgLkYYy2PNdmO/oQw=";
   };
 
-  vendorHash = "sha256-1CC950oKczvi3WjVtRiw6eH8O/T8WJKbnmpaLizTGbQ=";
+  vendorHash = "sha256-N5FEspfnc6GexPIzN5PbX8/XYD0LXledE+mi9Ni0gTU=";
 
   ldflags = [
     "-s"

pkgs/by-name/ma/maestro/package.nix

@@ -10,11 +10,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "maestro";
-  version = "2.1.0";
+  version = "2.3.0";
 
   src = fetchurl {
     url = "https://github.com/mobile-dev-inc/maestro/releases/download/cli-${finalAttrs.version}/maestro.zip";
-    hash = "sha256-lzw01d/rXnRs6/Eo34qAA/9HG2FGsjy7rEHJqjbfEGY=";
+    hash = "sha256-qvUkxrzUVgE4VbEzdGT5ZNmmXi+4iGGv/qm0wBRkTlA=";
   };
 
   dontUnpack = true;

pkgs/by-name/of/offpunk/package.nix

@@ -1,28 +1,27 @@
 {
-  lib,
-  python3Packages,
   fetchFromSourcehut,
   file,
   gettext,
   installShellFiles,
   less,
-  offpunk,
-  testers,
+  lib,
+  python3Packages,
   timg,
+  versionCheckHook,
   xdg-utils,
   xsel,
 }:
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "offpunk";
-  version = "3.0";
+  version = "3.1";
   pyproject = true;
 
   src = fetchFromSourcehut {
     owner = "~lioploum";
     repo = "offpunk";
-    rev = "v${finalAttrs.version}";
-    hash = "sha256-5SoMa93QbwbsryeHGc3pkkDA8v9eonZvuflSuDV2hmI=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-RwigItHVNsgq6k3O8YrSMFBaZMJwJSzB6dfnNiYsefY=";
   };
 
   build-system = with python3Packages; [ hatchling ];
@@ -44,20 +43,44 @@ python3Packages.buildPythonApplication (finalAttrs: {
     chardet
     cryptography
     feedparser
+    hatch-requirements-txt
     readability-lxml
     requests
     setproctitle
   ]);
 
+  /*
+    False positive from pythonRuntimeDepsCheckHook:
+      - "bs4" is the import name for beautifulsoup4 (not the PyPI
+        package name)
+      - "file" refers to the system `file` binary, not a Python
+        package
+  */
+  pythonRemoveDeps = [
+    "bs4"
+    "file"
+  ];
+
   postInstall = ''
     installManPage man/*.1
   '';
 
-  passthru.tests.version = testers.testVersion { package = offpunk; };
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
 
   meta = {
-    description = "Command-line and offline-first smolnet browser/feed reader";
-    homepage = finalAttrs.src.meta.homepage;
+    changelog = "https://git.sr.ht/~lioploum/offpunk/tree/v${finalAttrs.version}/item/CHANGELOG";
+    description = "CLI and offline-first smolnet browser/feed reader";
+    longDescription = ''
+      Offpunk allows you to browse the Web, Gemini, Gopher and
+      subscribe to RSS feeds without leaving your terminal and while
+      being offline.
+
+      The goal of Offpunk is to be able to synchronise your content
+      once (a day, a week, a month) and then browse/organise it while
+      staying disconnected.
+    '';
+    homepage = "https://offpunk.net";
     license = lib.licenses.agpl3Plus;
     mainProgram = "offpunk";
     maintainers = with lib.maintainers; [ DamienCassou ];

pkgs/by-name/pd/pdns-recursor/package.nix

@@ -21,17 +21,17 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "pdns-recursor";
-  version = "5.3.5";
+  version = "5.4.0";
 
   src = fetchurl {
     url = "https://downloads.powerdns.com/releases/pdns-recursor-${finalAttrs.version}.tar.xz";
-    hash = "sha256-dEl65iAWfYV84tVwK9FAGOX0yEjoePKc71FYGnSw0F4=";
+    hash = "sha256-L2nvdYatyAW8T1A+FaNPDG3Pu/2rfZWf8TLY4s2/JQo=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) src;
     sourceRoot = "pdns-recursor-${finalAttrs.version}/rec-rust-lib/rust";
-    hash = "sha256-h1xVW80Uv9sX+ykW5SFqQSpmAuRbM9aCzmxRUKABPwI=";
+    hash = "sha256-OBC6x1yL+kVpiBittZVvwMSCAsSyS0U9853x3TBGGkc=";
   };
 
   cargoRoot = "rec-rust-lib/rust";

pkgs/by-name/ru/rustic/package.nix

@@ -52,7 +52,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     changelog = "https://github.com/rustic-rs/rustic/blob/${finalAttrs.src.rev}/CHANGELOG.md";
     description = "Fast, encrypted, deduplicated backups powered by pure Rust";
     mainProgram = "rustic";
-    platforms = lib.platforms.linux ++ lib.platforms.darwin;
+    platforms = lib.platforms.all;
     license = [
       lib.licenses.mit
       lib.licenses.asl20

pkgs/by-name/sc/schemesh/package.nix

@@ -0,0 +1,41 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  chez,
+  libuuid,
+  lz4,
+  ncurses,
+  zlib,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "schemesh";
+  version = "0.9.3";
+
+  src = fetchFromGitHub {
+    owner = "cosmos72";
+    repo = "schemesh";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-OhQpXFg3eroVpw4zkENM4zwqHqGNolstlq9oLhQ2cbY=";
+  };
+
+  buildInputs = [
+    chez
+    libuuid
+    lz4
+    ncurses
+    zlib
+  ];
+
+  makeFlags = [ "prefix=$(out)" ];
+
+  meta = {
+    description = "A Unix shell and Lisp REPL, fused together";
+    homepage = "https://github.com/cosmos72/schemesh";
+    license = lib.licenses.gpl2Plus;
+    maintainers = [ lib.maintainers.sikmir ];
+    platforms = lib.platforms.linux;
+    mainProgram = "schemesh";
+  };
+})

pkgs/by-name/sg/sgt-puzzles/package.nix

@@ -18,11 +18,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "sgt-puzzles";
-  version = "20251220.ecb576f";
+  version = "20260309.06e37f1";
 
   src = fetchurl {
     url = "http://www.chiark.greenend.org.uk/~sgtatham/puzzles/puzzles-${finalAttrs.version}.tar.gz";
-    hash = "sha256-hgh3q9qACtlcfOkH2anesQKYREuwcLfiucUMg+p5xWs=";
+    hash = "sha256-3Z/Qp8D/0DeJL9oZlKL6vx9BXvMVFa6MMnkStds/VHI=";
   };
 
   sgt-puzzles-menu = fetchurl {

pkgs/by-name/sy/synapse-admin-etkecc/package.nix

@@ -17,18 +17,18 @@ assert lib.asserts.assertMsg (
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "synapse-admin-etkecc";
-  version = "0.11.1-etke53";
+  version = "0.11.4-etke54";
 
   src = fetchFromGitHub {
     owner = "etkecc";
     repo = "synapse-admin";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-VKTOtY8DX1ItPbuVnqoofEnwaq0hjiOTnnL7pVxfc4k=";
+    hash = "sha256-/BH77wv9wWUIMcrDW5l8e+nQMHuJRtdKGqVfYl5XQzc=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = finalAttrs.src + "/yarn.lock";
-    hash = "sha256-IziO3+T5xhwCMaD6tsvvgBNwcWjsKEICLgqe0H4il60=";
+    hash = "sha256-neKBMw0iDYLQG4GeoXlnU1SVwKADw0ATAHG1s1inH3U=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ta/tabiew/package.nix

@@ -7,16 +7,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "tabiew";
-  version = "0.12.0";
+  version = "0.13.0";
 
   src = fetchFromGitHub {
     owner = "shshemi";
     repo = "tabiew";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-OCfxgOXTVizeYJyCk5I/Fb/iDdjtcTeieWx8kWzGb2I=";
+    hash = "sha256-EA8ryklQGk82FMTpLWPk+O1IO0rMkeUiDGfxFiA8HcQ=";
   };
 
-  cargoHash = "sha256-nw5qu1o34dpG9NMxix4Fj3rV53Wm3KOSwZgEqK584Lw=";
+  cargoHash = "sha256-59LijzfXAyah5AqnHn7uY5u1aBZ2a4A0sOLAv/zLNKc=";
 
   nativeBuildInputs = [
     installShellFiles

pkgs/by-name/to/topgrade/package.nix

@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "topgrade";
-  version = "17.0.0";
+  version = "17.1.0";
 
   src = fetchFromGitHub {
     owner = "topgrade-rs";
     repo = "topgrade";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-50BSYSvOYUTHTRDsfoKQkw/Tgd8Q60GVZAjieSyTlgQ=";
+    hash = "sha256-31+hiKYDzzXdb45elIlGVUKr6lYWMx7iWZBDvlXcERg=";
   };
 
-  cargoHash = "sha256-HFFbCJyL9XMi2hn1qxOKP9N8ilDkXKB80gXPbIPdylk=";
+  cargoHash = "sha256-WIMpXL5jo9BF5GrAkflLdxoxigsJwpAMbKXV2gTrHAg=";
 
   nativeBuildInputs = [
     installShellFiles

pkgs/by-name/vr/vrcx/package.nix

@@ -79,7 +79,7 @@ buildNpmPackage (finalAttrs: {
     (makeDesktopItem {
       name = "vrcx";
       icon = "vrcx";
-      exec = "vrcx";
+      exec = "vrcx %u";
       terminal = false;
       desktopName = "VRCX";
       comment = "Friendship management tool for VRChat";

pkgs/by-name/za/zapzap/package.nix

@@ -7,14 +7,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "zapzap";
-  version = "6.3.3";
+  version = "6.3.4.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "rafatosta";
     repo = "zapzap";
     tag = finalAttrs.version;
-    hash = "sha256-Vdk/Vk95fm/VWsvICmtdXKXwcFs3t5a7tdPZIcisvMU=";
+    hash = "sha256-BKu78K0dVBw1NK/WkL95/fZUBuWXX4mkFQxdk1FV390=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ze/zensical/package.nix

@@ -8,7 +8,7 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "zensical";
-  version = "0.0.24";
+  version = "0.0.27";
   pyproject = true;
 
   # We fetch from PyPi, because GitHub repo does not contain all sources.
@@ -16,12 +16,12 @@ python3Packages.buildPythonApplication (finalAttrs: {
   # We could combine sources, but then nix-update won't work.
   src = fetchPypi {
     inherit (finalAttrs) pname version;
-    hash = "sha256-tdmeIlMpv0+YyAIr3woO6ViML62ntN8be4lvzGKzfsM=";
+    hash = "sha256-bY10q6Sp+VBea6HEPUyCi6T/e7H/mwBeUXTFuSzyNBk=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-oBg9wq/hJPvAIpl6IEJKVAWnUIVO6L+3q+L5z9UtvKg=";
+    hash = "sha256-KbqW5klX5VcoSxdBXaLR5PC7UmTFZtwQ1J7CVHJMNE4=";
   };
 
   nativeBuildInputs = with rustPlatform; [

pkgs/data/fonts/font-awesome/default.nix

@@ -65,7 +65,7 @@ in
     hash = "sha256-MaJG96kYj8ukJVyqOTDpkHH/eWr/ZlbVKk9AvJM7ub4=";
   };
   v7 = font-awesome {
-    version = "7.0.1";
-    hash = "sha256-ucKE4euZf7teosY+6X0W1wDOdnlW1SRcZhQdBvvOY1s=";
+    version = "7.2.0";
+    hash = "sha256-BTm78NCZXksCuzoXm2B39/UIB/Sb/wwL1vvaGRVUaio=";
   };
 }

pkgs/development/libraries/webkitgtk/default.nix

@@ -85,7 +85,7 @@ in
 # https://webkitgtk.org/2024/10/04/webkitgtk-2.46.html recommends building with clang.
 clangStdenv.mkDerivation (finalAttrs: {
   pname = "webkitgtk";
-  version = "2.50.5";
+  version = "2.50.6";
   name = "webkitgtk-${finalAttrs.version}+abi=${abiVersion}";
 
   outputs = [
@@ -100,7 +100,7 @@ clangStdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "https://webkitgtk.org/releases/webkitgtk-${finalAttrs.version}.tar.xz";
-    hash = "sha256-hzdjG6w+nHrT5SCPk3DgdsCdnEWzmYACHOVO2tzG+U8=";
+    hash = "sha256-Kygav4iU/8YXIVLlZgt17u7b4cxD1ng9Cdx598hlu0I=";
   };
 
   patches = lib.optionals clangStdenv.hostPlatform.isLinux [

pkgs/development/python-modules/cassandra-driver/default.nix

@@ -117,6 +117,10 @@ buildPythonPackage (finalAttrs: {
     # time-sensitive
     "test_nts_token_performance"
     "test_empty_connections"
+  ]
+  ++ lib.optionals (stdenv.hostPlatform.isDarwin) [
+    # AssertionError: [(1773409714.980824, <cassandra.connection.Timer object at 0x116cb2870>)] is not false
+    "test_timer_cancellation"
   ];
 
   meta = {

pkgs/development/python-modules/nexusformat/default.nix

@@ -15,12 +15,12 @@
 
 buildPythonPackage rec {
   pname = "nexusformat";
-  version = "2.0.0";
+  version = "2.0.2";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-mIGbmpT9+ZPD3X999fhZSdSg/XgI/SdbEoE/oarjuS0=";
+    hash = "sha256-uDHWO+nxfWe1d1eBona4fsqNDt0Swbkb513sSOPI9Sk=";
   };
 
   build-system = [

pkgs/development/python-modules/qdrant-client/default.nix

@@ -17,14 +17,14 @@
 
 buildPythonPackage rec {
   pname = "qdrant-client";
-  version = "1.17.0";
+  version = "1.17.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "qdrant";
     repo = "qdrant-client";
     tag = "v${version}";
-    hash = "sha256-4FH1YXoHDSOs0Tg+FkxEGtLhkNYZUhdIy4L0aYcMyM8=";
+    hash = "sha256-HGBvd8sjs52qiVf7VJupH7qcGnr3N/n2WP8kM1crvIY=";
   };
 
   build-system = [ poetry-core ];

pkgs/development/python-modules/urllib3-future/default.nix

@@ -24,14 +24,14 @@
 
 buildPythonPackage rec {
   pname = "urllib3-future";
-  version = "2.17.900";
+  version = "2.17.901";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jawah";
     repo = "urllib3.future";
     tag = version;
-    hash = "sha256-loZa+/eN1YP20y4svIYpstV/GtyUeD7PoAXYoJhfHEA=";
+    hash = "sha256-QWlxOUHByoz2jbHhm7wRtJe/Xdr9JnlxuifvIdSsXPw=";
   };
 
   postPatch = ''

pkgs/servers/sql/postgresql/ext/pg_search.nix

@@ -50,16 +50,16 @@ let
 in
 buildPgrxExtension (finalAttrs: {
   pname = "pg_search";
-  version = "0.21.13";
+  version = "0.21.14";
 
   src = fetchFromGitHub {
     owner = "paradedb";
     repo = "paradedb";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-OkZ4Li9FzpX4dE8aqbCUuCOMcXrw4NElOb4+2/lltS4=";
+    hash = "sha256-uXEtb9e9YgNuPOO9O8nPbCvG+MSwYiKFifI/GJqE9i8=";
   };
 
-  cargoHash = "sha256-7EqEHQ8mHaqYc/vafFMmTWqTml/ox46Fjc+hk8QDaEw=";
+  cargoHash = "sha256-sTkbpnB/N5eDfTCk86TIM6BZQ20hdHUqSbRFo4Wyo68=";
 
   inherit postgresql;
 
@@ -100,7 +100,7 @@ buildPgrxExtension (finalAttrs: {
   meta = {
     description = "Transactional Elasticsearch alternative as a PostgreSQL extension";
     homepage = "https://paradedb.com";
-    changelog = "https://github.com/paradedb/paradedb/releases/tag/${finalAttrs.version}";
+    changelog = "https://github.com/paradedb/paradedb/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.agpl3Only;
     maintainers = [ lib.maintainers.lucperkins ];
     # https://github.com/paradedb/paradedb/blob/v0.21.13/pg_search/Cargo.toml#L14-L18